Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.241' (ECDSA) to the list of known hosts. executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program syzkaller login: [ 69.717835][ C0] hrtimer: interrupt took 34473 ns executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 72.244596][ T9009] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x1) executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 72.969654][ T9165] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x10) executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 73.479701][ T9272] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x10) executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 73.764054][ T9333] [ 73.766426][ T9333] ============================================ [ 73.772571][ T9333] WARNING: possible recursive locking detected [ 73.778712][ T9333] 5.13.0-rc2-next-20210518-syzkaller #0 Not tainted [ 73.785282][ T9333] -------------------------------------------- [ 73.791427][ T9333] syz-executor723/9333 is trying to acquire lock: [ 73.797818][ T9333] ffffffff8cc8b5f8 (qp_broker_list.mutex){+.+.}-{3:3}, at: vmci_qp_broker_detach+0x147/0x11b0 [ 73.808148][ T9333] [ 73.808148][ T9333] but task is already holding lock: [ 73.815495][ T9333] ffffffff8cc8b5f8 (qp_broker_list.mutex){+.+.}-{3:3}, at: vmci_qp_broker_detach+0x147/0x11b0 [ 73.825778][ T9333] [ 73.825778][ T9333] other info that might help us debug this: [ 73.833819][ T9333] Possible unsafe locking scenario: [ 73.833819][ T9333] [ 73.841251][ T9333] CPU0 [ 73.844525][ T9333] ---- [ 73.847794][ T9333] lock(qp_broker_list.mutex); [ 73.852624][ T9333] lock(qp_broker_list.mutex); [ 73.857465][ T9333] [ 73.857465][ T9333] *** DEADLOCK *** [ 73.857465][ T9333] [ 73.865586][ T9333] May be due to missing lock nesting notation [ 73.865586][ T9333] [ 73.873895][ T9333] 1 lock held by syz-executor723/9333: [ 73.879330][ T9333] #0: ffffffff8cc8b5f8 (qp_broker_list.mutex){+.+.}-{3:3}, at: vmci_qp_broker_detach+0x147/0x11b0 [ 73.890021][ T9333] [ 73.890021][ T9333] stack backtrace: [ 73.895897][ T9333] CPU: 0 PID: 9333 Comm: syz-executor723 Not tainted 5.13.0-rc2-next-20210518-syzkaller #0 [ 73.905883][ T9333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 73.915952][ T9333] Call Trace: [ 73.919273][ T9333] dump_stack_lvl+0x13e/0x1d6 [ 73.923993][ T9333] __lock_acquire.cold+0x22f/0x3b4 [ 73.929093][ T9333] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 73.935060][ T9333] ? lockdep_hardirqs_on+0x79/0x100 [ 73.940280][ T9333] lock_acquire+0x1ab/0x740 [ 73.944800][ T9333] ? vmci_qp_broker_detach+0x147/0x11b0 [ 73.950436][ T9333] ? lock_release+0x720/0x720 [ 73.955097][ T9333] ? __kasan_slab_free+0xfb/0x130 [ 73.960122][ T9333] ? slab_free_freelist_hook+0xdf/0x240 [ 73.965669][ T9333] ? kfree+0xeb/0x650 [ 73.969636][ T9333] ? ctx_free_ctx+0x45e/0xd30 [ 73.974307][ T9333] __mutex_lock+0x139/0x1120 [ 73.978888][ T9333] ? vmci_qp_broker_detach+0x147/0x11b0 [ 73.984465][ T9333] ? vmci_qp_broker_detach+0x147/0x11b0 [ 73.989997][ T9333] ? mark_held_locks+0x9f/0xe0 [ 73.994830][ T9333] ? mutex_lock_io_nested+0xf70/0xf70 [ 74.000186][ T9333] ? lockdep_hardirqs_on+0x79/0x100 [ 74.005370][ T9333] ? mark_held_locks+0x9f/0xe0 [ 74.010125][ T9333] ? kasan_quarantine_put+0xf5/0x210 [ 74.015396][ T9333] ? lockdep_hardirqs_on+0x79/0x100 [ 74.020583][ T9333] vmci_qp_broker_detach+0x147/0x11b0 [ 74.025944][ T9333] ? vmci_qp_broker_set_page_store+0x750/0x750 [ 74.032083][ T9333] ? ctx_free_ctx+0x45e/0xd30 [ 74.036759][ T9333] ? ctx_free_ctx+0x1fc/0xd30 [ 74.041429][ T9333] ctx_free_ctx+0x4cc/0xd30 [ 74.045918][ T9333] ? vmci_ctx_unset_notify+0x2c0/0x2c0 [ 74.051359][ T9333] ? preempt_schedule_thunk+0x16/0x18 [ 74.056722][ T9333] ? preempt_schedule_common+0x59/0xc0 [ 74.062174][ T9333] ? preempt_schedule_thunk+0x16/0x18 [ 74.067552][ T9333] vmci_ctx_enqueue_datagram+0x4dc/0x620 [ 74.073183][ T9333] vmci_datagram_dispatch+0x39b/0xb50 [ 74.078543][ T9333] ? vmci_datagram_destroy_handle+0x60/0x60 [ 74.084463][ T9333] ? lock_downgrade+0x6e0/0x6e0 [ 74.089299][ T9333] qp_notify_peer+0x182/0x260 [ 74.093959][ T9333] ? qp_host_unregister_user_memory+0x2c0/0x2c0 [ 74.100182][ T9333] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 74.106332][ T9333] vmci_qp_broker_detach+0xa09/0x11b0 [ 74.111716][ T9333] ? vmci_qp_broker_set_page_store+0x750/0x750 [ 74.117854][ T9333] ? ctx_free_ctx+0x45e/0xd30 [ 74.122513][ T9333] ? __kmalloc+0x191/0x330 [ 74.126912][ T9333] ctx_free_ctx+0x4cc/0xd30 [ 74.131399][ T9333] ? vmci_ctx_unset_notify+0x2c0/0x2c0 [ 74.136844][ T9333] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 74.142989][ T9333] ? vmci_ctx_destroy+0x117/0x1d0 [ 74.148015][ T9333] ? kasan_check_range+0xde/0x180 [ 74.153031][ T9333] vmci_ctx_destroy+0x169/0x1d0 [ 74.157887][ T9333] vmci_host_close+0x116/0x1a0 [ 74.162634][ T9333] __fput+0x288/0x920 [ 74.166601][ T9333] ? vmci_host_poll+0x220/0x220 [ 74.171436][ T9333] task_work_run+0xdd/0x1a0 [ 74.175929][ T9333] exit_to_user_mode_prepare+0x26f/0x280 [ 74.181547][ T9333] syscall_exit_to_user_mode+0x19/0x60 [ 74.187020][ T9333] do_syscall_64+0x3e/0xb0 [ 74.191428][ T9333] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 74.197317][ T9333] RIP: 0033:0x445ac9 [ 74.201214][ T9333] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 74.220894][ T9333] RSP: 002b:00007fe38cec92f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000124 [ 74.229315][ T9333] RAX: 0000000000000005 RBX: 00000000004ca420 RCX: 0000000000445ac9 [ 74.237281][ T9333] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 74.245232][ T9333] RBP: 00000000004ca42c R08: 0000000000000000 R09: 0000000000000000 [ 74.253202][ T9333] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000049a074 [ 74.261160][ T9333] R13: 65732f636f72702f R14: 636d762f7665642f R15: 00000000004ca428