============================================ WARNING: possible recursive locking detected 6.9.0-rc6-syzkaller #0 Not tainted -------------------------------------------- syz-executor.2/5746 is trying to acquire lock: ffff88807ccc31d8 (&qs->lock){-.-.}-{2:2}, at: __stack_map_get+0x147/0x4a0 kernel/bpf/queue_stack_maps.c:140 but task is already holding lock: ffff8880705721d8 (&qs->lock){-.-.}-{2:2}, at: __stack_map_get+0x147/0x4a0 kernel/bpf/queue_stack_maps.c:140 other info that might help us debug this: Possible unsafe locking scenario: CPU0 ---- lock(&qs->lock); lock(&qs->lock); *** DEADLOCK *** May be due to missing lock nesting notation 4 locks held by syz-executor.2/5746: #0: ffffffff8dddc2a8 (delayed_uprobe_lock){+.+.}-{3:3}, at: uprobe_clear_state+0x50/0x290 kernel/events/uprobes.c:1545 #1: ffffffff8dd321a0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:329 [inline] #1: ffffffff8dd321a0 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:781 [inline] #1: ffffffff8dd321a0 (rcu_read_lock){....}-{1:2}, at: __bpf_trace_run kernel/trace/bpf_trace.c:2380 [inline] #1: ffffffff8dd321a0 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run2+0x110/0x420 kernel/trace/bpf_trace.c:2420 #2: ffff8880705721d8 (&qs->lock){-.-.}-{2:2}, at: __stack_map_get+0x147/0x4a0 kernel/bpf/queue_stack_maps.c:140 #3: ffffffff8dd321a0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:329 [inline] #3: ffffffff8dd321a0 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:781 [inline] #3: ffffffff8dd321a0 (rcu_read_lock){....}-{1:2}, at: __bpf_trace_run kernel/trace/bpf_trace.c:2380 [inline] #3: ffffffff8dd321a0 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run2+0x110/0x420 kernel/trace/bpf_trace.c:2420 stack backtrace: CPU: 0 PID: 5746 Comm: syz-executor.2 Not tainted 6.9.0-rc6-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x23d/0x360 lib/dump_stack.c:114 check_deadlock kernel/locking/lockdep.c:3062 [inline] validate_chain kernel/locking/lockdep.c:3856 [inline] __lock_acquire+0x6a95/0x7fa0 kernel/locking/lockdep.c:5137 lock_acquire+0x1e9/0x540 kernel/locking/lockdep.c:5754 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline] _raw_spin_lock_irqsave+0xd1/0x120 kernel/locking/spinlock.c:162 __stack_map_get+0x147/0x4a0 kernel/bpf/queue_stack_maps.c:140 bpf_prog_7a16b54e5ee857f9+0x3a/0x3e bpf_dispatcher_nop_func include/linux/bpf.h:1234 [inline] __bpf_prog_run include/linux/filter.h:657 [inline] bpf_prog_run include/linux/filter.h:664 [inline] __bpf_trace_run kernel/trace/bpf_trace.c:2381 [inline] bpf_trace_run2+0x200/0x420 kernel/trace/bpf_trace.c:2420 __traceiter_contention_end+0x77/0xb0 include/trace/events/lock.h:122 trace_contention_end+0x10a/0x130 include/trace/events/lock.h:122 __pv_queued_spin_lock_slowpath+0x935/0xc50 kernel/locking/qspinlock.c:560 pv_queued_spin_lock_slowpath arch/x86/include/asm/paravirt.h:584 [inline] queued_spin_lock_slowpath arch/x86/include/asm/qspinlock.h:51 [inline] queued_spin_lock include/asm-generic/qspinlock.h:114 [inline] do_raw_spin_lock+0x298/0x3a0 kernel/locking/spinlock_debug.c:116 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:111 [inline] _raw_spin_lock_irqsave+0xdd/0x120 kernel/locking/spinlock.c:162 __stack_map_get+0x147/0x4a0 kernel/bpf/queue_stack_maps.c:140 bpf_prog_7a16b54e5ee857f9+0x3a/0x3e bpf_dispatcher_nop_func include/linux/bpf.h:1234 [inline] __bpf_prog_run include/linux/filter.h:657 [inline] bpf_prog_run include/linux/filter.h:664 [inline] __bpf_trace_run kernel/trace/bpf_trace.c:2381 [inline] bpf_trace_run2+0x200/0x420 kernel/trace/bpf_trace.c:2420 __traceiter_contention_end+0x77/0xb0 include/trace/events/lock.h:122 trace_contention_end+0xeb/0x110 include/trace/events/lock.h:122 __mutex_lock_common kernel/locking/mutex.c:617 [inline] __mutex_lock+0x2e1/0xd60 kernel/locking/mutex.c:752 uprobe_clear_state+0x50/0x290 kernel/events/uprobes.c:1545 __mmput+0x5f/0x3c0 kernel/fork.c:1342 exit_mm+0x21c/0x300 kernel/exit.c:569 do_exit+0x99a/0x27c0 kernel/exit.c:865 do_group_exit+0x203/0x2b0 kernel/exit.c:1027 get_signal+0x169d/0x1730 kernel/signal.c:2911 arch_do_signal_or_restart+0x92/0x860 arch/x86/kernel/signal.c:310 exit_to_user_mode_loop kernel/entry/common.c:111 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0xc4/0x350 kernel/entry/common.c:218 do_syscall_64+0x90/0x190 arch/x86/entry/common.c:89 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7f4fbda7de69 Code: Unable to access opcode bytes at 0x7f4fbda7de3f. RSP: 002b:00007f4fbe8d0178 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: fffffffffffffe00 RBX: 00007f4fbdbabf88 RCX: 00007f4fbda7de69 RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4fbdbabf88 RBP: 00007f4fbdbabf80 R08: 00007f4fbe8d06c0 R09: 00007f4fbe8d06c0 R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4fbdbabf8c R13: 000000000000000b R14: 00007ffe10b50c80 R15: 00007ffe10b50d68