syzbot


possible deadlock in vmci_qp_broker_detach

Status: upstream: reported C repro on 2021/03/26 01:19
Subsystems: kernel
[Documentation on labels]
Reported-by: syzbot+44e40ac2cfe68e8ce207@syzkaller.appspotmail.com
First crash: 1859d, last: 25m
Cause bisection: introduced by (bisect log) [no-op commit]:
commit 2dd209f00fc5a1caafa493066c7cd692fd2fd57c
Author: Bart Van Assche <bvanassche@acm.org>
Date: Tue Mar 10 04:26:16 2020 +0000

  blk-mq: Fix a comment in include/linux/blk-mq.h

Crash: possible deadlock in vmci_qp_broker_detach (log)
Repro: syz .config
  
Fix bisection: failed (error log, bisect log)
  
Discussions (1)
Title Replies (including bot) Last reply
[syzbot] possible deadlock in vmci_qp_broker_detach 2 (7) 2021/06/30 22:20
Similar bugs (5)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-6.1 possible deadlock in vmci_qp_broker_detach origin:lts-only 4 C inconclusive 12 3d07h 239d 0/3 upstream: reported C repro on 2025/08/28 00:49
linux-4.14 possible deadlock in vmci_qp_broker_detach 4 C error 7 1322d 1483d 0/1 upstream: reported C repro on 2022/04/01 16:43
linux-4.19 possible deadlock in vmci_qp_broker_detach 4 C error 11 1449d 1942d 0/1 upstream: reported C repro on 2020/12/28 17:12
linux-6.6 possible deadlock in vmci_qp_broker_detach 4 C 2 5d02h 6d08h 0/2 upstream: reported C repro on 2026/04/18 01:05
linux-5.15 possible deadlock in vmci_qp_broker_detach 4 syz 1 523d 523d 0/3 auto-obsoleted due to no activity on 2025/02/24 18:46
Last patch testing requests (12)
Created Duration User Patch Repo Result
2026/02/28 08:33 19m retest repro upstream report log
2025/12/19 22:04 24m retest repro upstream report log
2025/11/22 12:20 17m retest repro upstream OK log
2025/10/24 20:56 32m retest repro upstream OK log
2025/10/10 15:30 31m retest repro upstream report log
2025/08/15 20:04 21m retest repro upstream error
2025/07/31 22:34 32m retest repro upstream report log
2025/07/14 21:24 22m retest repro upstream OK log
2025/06/06 19:18 18m retest repro upstream report log
2025/06/06 08:01 44m retest repro linux-next OK log
2021/06/30 22:00 19m paskripkin@gmail.com patch upstream report log
2021/06/30 21:36 19m paskripkin@gmail.com patch upstream report log
Fix bisection attempts (9)
Created Duration User Patch Repo Result
2023/05/24 05:48 6m bisect fix upstream error job log
2023/03/18 02:36 38m bisect fix upstream OK (0) job log log
2023/01/25 15:36 46m bisect fix upstream OK (0) job log log
2022/11/04 08:21 36m bisect fix upstream OK (0) job log log
2022/04/22 13:53 34m bisect fix upstream OK (0) job log log
2022/03/16 16:10 22m bisect fix upstream OK (0) job log log
2021/11/19 09:58 32m bisect fix upstream OK (0) job log log
2021/10/16 14:44 32m bisect fix upstream OK (0) job log log
2021/08/28 20:06 31m bisect fix upstream OK (0) job log log

Sample crash report:
============================================
WARNING: possible recursive locking detected
6.14.0-rc4-syzkaller #0 Not tainted
--------------------------------------------
syz-executor236/6513 is trying to acquire lock:
ffffffff8f512358 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0xf5/0x11d0 drivers/misc/vmw_vmci/vmci_queue_pair.c:2095

but task is already holding lock:
ffffffff8f512358 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0xf5/0x11d0 drivers/misc/vmw_vmci/vmci_queue_pair.c:2095

other info that might help us debug this:
 Possible unsafe locking scenario:

       CPU0
       ----
  lock(qp_broker_list.mutex);
  lock(qp_broker_list.mutex);

 *** DEADLOCK ***

 May be due to missing lock nesting notation

1 lock held by syz-executor236/6513:
 #0: ffffffff8f512358 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0xf5/0x11d0 drivers/misc/vmw_vmci/vmci_queue_pair.c:2095

stack backtrace:
CPU: 1 UID: 0 PID: 6513 Comm: syz-executor236 Not tainted 6.14.0-rc4-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120
 print_deadlock_bug+0x483/0x620 kernel/locking/lockdep.c:3039
 check_deadlock kernel/locking/lockdep.c:3091 [inline]
 validate_chain+0x15e2/0x5920 kernel/locking/lockdep.c:3893
 __lock_acquire+0x1397/0x2100 kernel/locking/lockdep.c:5228
 lock_acquire+0x1ed/0x550 kernel/locking/lockdep.c:5851
 __mutex_lock_common kernel/locking/mutex.c:585 [inline]
 __mutex_lock+0x19c/0x1010 kernel/locking/mutex.c:730
 vmci_qp_broker_detach+0xf5/0x11d0 drivers/misc/vmw_vmci/vmci_queue_pair.c:2095
 ctx_free_ctx drivers/misc/vmw_vmci/vmci_context.c:444 [inline]
 kref_put include/linux/kref.h:65 [inline]
 vmci_ctx_put+0x807/0xe40 drivers/misc/vmw_vmci/vmci_context.c:497
 vmci_ctx_enqueue_datagram+0x392/0x430 drivers/misc/vmw_vmci/vmci_context.c:360
 dg_dispatch_as_host drivers/misc/vmw_vmci/vmci_datagram.c:276 [inline]
 vmci_datagram_dispatch+0x447/0xc50 drivers/misc/vmw_vmci/vmci_datagram.c:340
 qp_notify_peer drivers/misc/vmw_vmci/vmci_queue_pair.c:1481 [inline]
 vmci_qp_broker_detach+0xb4e/0x11d0 drivers/misc/vmw_vmci/vmci_queue_pair.c:2188
 ctx_free_ctx drivers/misc/vmw_vmci/vmci_context.c:444 [inline]
 kref_put include/linux/kref.h:65 [inline]
 vmci_ctx_put+0x807/0xe40 drivers/misc/vmw_vmci/vmci_context.c:497
 vmci_host_close+0x98/0x160 drivers/misc/vmw_vmci/vmci_host.c:143
 __fput+0x3e9/0x9f0 fs/file_table.c:464
 task_work_run+0x24f/0x310 kernel/task_work.c:227
 exit_task_work include/linux/task_work.h:40 [inline]
 do_exit+0xa2a/0x28e0 kernel/exit.c:938
 do_group_exit+0x207/0x2c0 kernel/exit.c:1087
 __do_sys_exit_group kernel/exit.c:1098 [inline]
 __se_sys_exit_group kernel/exit.c:1096 [inline]
 __x64_sys_exit_group+0x3f/0x40 kernel/exit.c:1096
 x64_sys_call+0x26a8/0x26b0 arch/x86/include/generated/asm/syscalls_64.h:232
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f0c8153fdf9
Code: Unable to access opcode bytes at 0x7f0c8153fdcf.
RSP: 002b:00007ffff59a1f68 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0c8153fdf9
RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000
RBP: 00007f0c815bb2b0 R08: ffffffffffffffb8 R09: 00000000000000a0
R10: 00000000000000a0 R11: 0000000000000246 R12: 00007f0c815bb2b0
R13: 0000000000000000 R14: 00007f0c815bbd20 R15: 00007f0c81510fa0
 </TASK>

Crashes (150):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/02/24 18:45 upstream d082ecbc71e9 d34966d1 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce possible deadlock in vmci_qp_broker_detach
2021/12/29 18:11 upstream e7c124bd0463 6cc879d4 .config console log report syz C ci-upstream-kasan-gce-root possible deadlock in vmci_qp_broker_detach
2023/11/21 20:06 upstream 98b1cc82c4af cb976f63 .config console log report syz C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream possible deadlock in vmci_qp_broker_detach
2022/07/25 20:55 linux-next cb71b93c2dc3 664c519c .config console log report syz C ci-upstream-linux-next-kasan-gce-root possible deadlock in vmci_qp_broker_detach
2022/07/20 13:39 linux-next cb71b93c2dc3 775344bc .config strace log report syz C ci-upstream-linux-next-kasan-gce-root possible deadlock in vmci_qp_broker_detach
2021/06/30 17:21 linux-next a1f92694393a 84fd4c77 .config console log report syz C ci-upstream-linux-next-kasan-gce-root possible deadlock in vmci_qp_broker_detach
2021/07/29 05:14 upstream 4010a528219e 9a4781d4 .config console log report syz ci-upstream-kasan-gce possible deadlock in vmci_qp_broker_detach
2021/07/03 06:42 upstream 3dbdb38e2869 55aa55c2 .config console log report syz ci-upstream-kasan-gce possible deadlock in vmci_qp_broker_detach
2021/04/12 17:28 upstream d434405aaab7 bfeda1b1 .config console log report syz ci-upstream-kasan-gce-smack-root possible deadlock in vmci_qp_broker_detach
2023/08/26 12:53 upstream 7d2f353b2682 7ba13a15 .config console log report syz [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream possible deadlock in vmci_qp_broker_detach
2026/04/24 04:17 upstream 45dcf5e28813 9cfb3ca7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root possible deadlock in vmci_qp_broker_detach
2026/04/23 20:06 upstream 2e6803928193 4c3406dc .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root possible deadlock in vmci_qp_broker_detach
2026/04/23 19:01 upstream 2e6803928193 4c3406dc .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root possible deadlock in vmci_qp_broker_detach
2026/04/23 17:25 upstream 2e6803928193 4c3406dc .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root possible deadlock in vmci_qp_broker_detach
2026/04/22 15:22 upstream 6596a02b2078 4595e353 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce possible deadlock in vmci_qp_broker_detach
2026/04/22 13:15 upstream 6596a02b2078 4595e353 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce possible deadlock in vmci_qp_broker_detach
2026/04/22 10:59 upstream 6596a02b2078 4595e353 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce possible deadlock in vmci_qp_broker_detach
2026/04/21 08:35 upstream b4e07588e743 3f2e655b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce possible deadlock in vmci_qp_broker_detach
2026/04/20 10:11 upstream c1f49dea2b8f 303e2802 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in vmci_qp_broker_detach
2026/04/20 07:39 upstream c1f49dea2b8f 303e2802 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce possible deadlock in vmci_qp_broker_detach
2026/04/20 01:46 upstream c1f49dea2b8f 303e2802 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in vmci_qp_broker_detach
2026/04/20 00:16 upstream c1f49dea2b8f 303e2802 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in vmci_qp_broker_detach
2026/04/19 14:51 upstream faeab166167f 303e2802 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in vmci_qp_broker_detach
2026/04/19 06:58 upstream eb5249b12507 303e2802 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in vmci_qp_broker_detach
2026/04/19 01:44 upstream eb5249b12507 303e2802 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce possible deadlock in vmci_qp_broker_detach
2026/04/18 21:17 upstream eb5249b12507 303e2802 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in vmci_qp_broker_detach
2026/04/18 14:52 upstream 8541d8f725c6 303e2802 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in vmci_qp_broker_detach
2026/04/18 07:29 upstream 8541d8f725c6 303e2802 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in vmci_qp_broker_detach
2026/04/18 01:38 upstream 43cfbdda5af6 24ecfc1e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in vmci_qp_broker_detach
2026/04/17 19:50 upstream 43cfbdda5af6 24ecfc1e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce possible deadlock in vmci_qp_broker_detach
2026/04/17 18:45 upstream 43cfbdda5af6 24ecfc1e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in vmci_qp_broker_detach
2026/04/17 10:22 upstream 3cd8b194bf34 de0a551d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root possible deadlock in vmci_qp_broker_detach
2026/04/17 08:29 upstream 3cd8b194bf34 de0a551d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in vmci_qp_broker_detach
2026/04/17 06:38 upstream 3cd8b194bf34 de0a551d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in vmci_qp_broker_detach
2026/04/17 00:39 upstream 1d51b370a0f8 321ae225 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-badwrites-root possible deadlock in vmci_qp_broker_detach
2026/04/16 11:16 upstream aec2f682d47c df15c5f3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-badwrites-root possible deadlock in vmci_qp_broker_detach
2026/04/16 08:23 upstream aec2f682d47c df15c5f3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-badwrites-root possible deadlock in vmci_qp_broker_detach
2026/04/16 04:07 upstream aec2f682d47c df15c5f3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root possible deadlock in vmci_qp_broker_detach
2026/04/13 16:43 upstream 028ef9c96e96 9530ccf9 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in vmci_qp_broker_detach
2026/01/30 08:07 upstream 4d310797262f bfa73b7b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root possible deadlock in vmci_qp_broker_detach
2025/12/03 17:57 upstream 3f9f0252130e d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce possible deadlock in vmci_qp_broker_detach
2025/11/26 15:47 upstream 30f09200cc4a d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce possible deadlock in vmci_qp_broker_detach
2025/10/29 01:26 upstream 8eefed8f65cc fd2207e7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in vmci_qp_broker_detach
2025/10/29 00:21 upstream 8eefed8f65cc fd2207e7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in vmci_qp_broker_detach
2025/10/28 17:40 upstream fd57572253bc fd2207e7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root possible deadlock in vmci_qp_broker_detach
2025/05/08 19:35 upstream 2c89c1b655c0 dbf35fa1 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root possible deadlock in vmci_qp_broker_detach
2024/04/24 00:10 upstream 71b1543c83d6 21339d7b .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root possible deadlock in vmci_qp_broker_detach
2023/11/02 11:17 upstream babe393974de b5f07fd3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce possible deadlock in vmci_qp_broker_detach
2023/10/18 20:27 upstream dd72f9c7e512 342b9c55 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce possible deadlock in vmci_qp_broker_detach
2023/10/14 10:22 upstream 727fb8376504 6388bc36 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-badwrites-root possible deadlock in vmci_qp_broker_detach
2021/04/14 15:29 upstream 50987beca096 3134b37f .config console log report syz ci-upstream-kasan-gce possible deadlock in vmci_qp_broker_detach
2026/04/24 08:44 upstream 45dcf5e28813 9cfb3ca7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 possible deadlock in vmci_qp_broker_detach
2026/04/21 20:51 upstream 4ee64205ffaa 0b6ab7ec .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 possible deadlock in vmci_qp_broker_detach
2026/04/16 22:25 upstream 1d51b370a0f8 321ae225 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 possible deadlock in vmci_qp_broker_detach
2026/04/24 05:45 upstream dd6c438c3e64 9cfb3ca7 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root possible deadlock in vmci_qp_broker_detach
2025/11/08 12:14 upstream e811c33b1f13 4e1406b4 .config console log report syz / log [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream possible deadlock in vmci_qp_broker_detach
2025/04/20 00:00 upstream 8560697b23dc 2a20f901 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream possible deadlock in vmci_qp_broker_detach
2023/08/15 17:04 upstream 91aa6c412d7f 39990d51 .config console log report syz C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream possible deadlock in vmci_qp_broker_detach
2026/04/21 22:10 upstream 4ee64205ffaa 9765efe0 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 possible deadlock in vmci_qp_broker_detach
2026/04/21 15:00 upstream b4e07588e743 9765efe0 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 possible deadlock in vmci_qp_broker_detach
2026/04/18 05:05 upstream 8541d8f725c6 5be7a9de .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 possible deadlock in vmci_qp_broker_detach
2026/04/17 11:22 upstream 3cd8b194bf34 de0a551d .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 possible deadlock in vmci_qp_broker_detach
2026/04/15 17:24 upstream 1f5ffc672165 2b1eb0ca .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 possible deadlock in vmci_qp_broker_detach
2025/06/28 06:54 upstream 35e261cd95dd fc9d8ee5 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 possible deadlock in vmci_qp_broker_detach
2021/03/22 01:14 upstream 5ee96fa9dd78 bea32f74 .config console log report info ci-upstream-kasan-gce possible deadlock in vmci_qp_broker_detach
2023/08/17 17:42 upstream 16931859a650 74b106b6 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 possible deadlock in vmci_qp_broker_detach
2023/04/24 00:56 upstream 457391b03803 2b32bd34 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 possible deadlock in vmci_qp_broker_detach
2023/04/06 20:09 upstream f2afccfefe7b 08707520 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 possible deadlock in vmci_qp_broker_detach
2026/04/15 20:04 linux-next e6efabc0afca c441f497 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce possible deadlock in vmci_qp_broker_detach
2025/12/05 18:04 linux-next 6987d58a9cbc d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce possible deadlock in vmci_qp_broker_detach
2025/11/30 07:08 linux-next 7d31f578f323 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root possible deadlock in vmci_qp_broker_detach
2022/02/09 13:55 linux-next ef6b35306dd8 0b33604d .config console log report syz C ci-upstream-linux-next-kasan-gce-root possible deadlock in vmci_qp_broker_detach
2021/05/18 09:33 linux-next cd557f1c605f a343ba6b .config console log report syz ci-upstream-linux-next-kasan-gce-root possible deadlock in vmci_qp_broker_detach
* Struck through repros no longer work on HEAD.