netlink: 'syz.4.172': attribute type 5 has an invalid length. wg1 speed is unknown, defaulting to 1000 wg1 speed is unknown, defaulting to 1000 wg1 speed is unknown, defaulting to 1000 iwpm_register_pid: Unable to send a nlmsg (client = 2) ====================================================== WARNING: possible circular locking dependency detected 6.13.0-syzkaller-08265-g9c5968db9e62 #0 Not tainted ------------------------------------------------------ syz.4.172/6492 is trying to acquire lock: ffff88803304b858 (sk_lock-AF_INET6){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1624 [inline] ffff88803304b858 (sk_lock-AF_INET6){+.+.}-{0:0}, at: sock_set_reuseaddr+0x17/0x60 net/core/sock.c:788 but task is already holding lock: ffffffff8fb707e8 (lock#7){+.+.}-{4:4}, at: cma_add_one+0x674/0xdd0 drivers/infiniband/core/cma.c:5370 which lock already depends on the new lock. the existing dependency chain (in reverse order) is: -> #2 (lock#7){+.+.}-{4:4}: __mutex_lock_common kernel/locking/mutex.c:585 [inline] __mutex_lock+0x19b/0xb10 kernel/locking/mutex.c:730 cma_init+0x1d/0x150 drivers/infiniband/core/cma.c:5454 do_one_initcall+0x12b/0x700 init/main.c:1257 do_initcall_level init/main.c:1319 [inline] do_initcalls init/main.c:1335 [inline] do_basic_setup init/main.c:1354 [inline] kernel_init_freeable+0x5c7/0x900 init/main.c:1568 kernel_init+0x1c/0x2b0 init/main.c:1457 ret_from_fork+0x48/0x80 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 -> #1 (rtnl_mutex){+.+.}-{4:4}: __mutex_lock_common kernel/locking/mutex.c:585 [inline] __mutex_lock+0x19b/0xb10 kernel/locking/mutex.c:730 smc_vlan_by_tcpsk+0x251/0x620 net/smc/smc_core.c:1908 __smc_connect+0x44d/0x4890 net/smc/af_smc.c:1520 smc_connect+0x2fc/0x760 net/smc/af_smc.c:1696 __sys_connect_file+0x141/0x1a0 net/socket.c:2040 __sys_connect+0x14f/0x170 net/socket.c:2059 __do_sys_connect net/socket.c:2065 [inline] __se_sys_connect net/socket.c:2062 [inline] __x64_sys_connect+0x72/0xb0 net/socket.c:2062 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f -> #0 (sk_lock-AF_INET6){+.+.}-{0:0}: check_prev_add kernel/locking/lockdep.c:3163 [inline] check_prevs_add kernel/locking/lockdep.c:3282 [inline] validate_chain kernel/locking/lockdep.c:3906 [inline] __lock_acquire+0x249e/0x3c40 kernel/locking/lockdep.c:5228 lock_acquire.part.0+0x11b/0x380 kernel/locking/lockdep.c:5851 lock_sock_nested+0x3a/0xf0 net/core/sock.c:3645 lock_sock include/net/sock.h:1624 [inline] sock_set_reuseaddr+0x17/0x60 net/core/sock.c:788 siw_create_listen+0x1ad/0x1370 drivers/infiniband/sw/siw/siw_cm.c:1777 iw_cm_listen+0x16d/0x1f0 drivers/infiniband/core/iwcm.c:585 cma_iw_listen drivers/infiniband/core/cma.c:2684 [inline] rdma_listen+0x7ef/0xe30 drivers/infiniband/core/cma.c:3969 cma_listen_on_dev+0x4dc/0x810 drivers/infiniband/core/cma.c:2743 cma_add_one+0x78b/0xdd0 drivers/infiniband/core/cma.c:5373 add_client_context+0x3e0/0x590 drivers/infiniband/core/device.c:711 enable_device_and_get+0x1d5/0x3f0 drivers/infiniband/core/device.c:1322 ib_register_device drivers/infiniband/core/device.c:1433 [inline] ib_register_device+0x880/0xdf0 drivers/infiniband/core/device.c:1379 siw_device_register drivers/infiniband/sw/siw/siw_main.c:72 [inline] siw_newlink drivers/infiniband/sw/siw/siw_main.c:431 [inline] siw_newlink+0xb60/0xd70 drivers/infiniband/sw/siw/siw_main.c:413 nldev_newlink+0x391/0x660 drivers/infiniband/core/nldev.c:1795 rdma_nl_rcv_msg+0x38b/0x6e0 drivers/infiniband/core/netlink.c:195 rdma_nl_rcv_skb.constprop.0.isra.0+0x2e6/0x450 drivers/infiniband/core/netlink.c:239 netlink_unicast_kernel net/netlink/af_netlink.c:1322 [inline] netlink_unicast+0x53f/0x7f0 net/netlink/af_netlink.c:1348 netlink_sendmsg+0x8b8/0xd70 net/netlink/af_netlink.c:1892 sock_sendmsg_nosec net/socket.c:713 [inline] __sock_sendmsg net/socket.c:728 [inline] ____sys_sendmsg+0xab2/0xc90 net/socket.c:2568 ___sys_sendmsg+0x135/0x1e0 net/socket.c:2622 __sys_sendmsg+0x16e/0x220 net/socket.c:2654 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f other info that might help us debug this: Chain exists of: sk_lock-AF_INET6 --> rtnl_mutex --> lock#7 Possible unsafe locking scenario: CPU0 CPU1 ---- ---- lock(lock#7); lock(rtnl_mutex); lock(lock#7); lock(sk_lock-AF_INET6); *** DEADLOCK *** 6 locks held by syz.4.172/6492: #0: ffffffff9abf2758 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv_msg+0x16a/0x6e0 drivers/infiniband/core/netlink.c:164 #1: ffffffff8fb580f0 (link_ops_rwsem){++++}-{4:4}, at: nldev_newlink+0x2d3/0x660 drivers/infiniband/core/nldev.c:1785 #2: ffffffff8fb444f0 (devices_rwsem){++++}-{4:4}, at: enable_device_and_get+0x104/0x3f0 drivers/infiniband/core/device.c:1312 #3: ffffffff8fb443b0 (clients_rwsem){++++}-{4:4}, at: enable_device_and_get+0x163/0x3f0 drivers/infiniband/core/device.c:1320 #4: ffff8880573885e0 (&device->client_data_rwsem){++++}-{4:4}, at: add_client_context+0x3a9/0x590 drivers/infiniband/core/device.c:709 #5: ffffffff8fb707e8 (lock#7){+.+.}-{4:4}, at: cma_add_one+0x674/0xdd0 drivers/infiniband/core/cma.c:5370 stack backtrace: CPU: 0 UID: 0 PID: 6492 Comm: syz.4.172 Not tainted 6.13.0-syzkaller-08265-g9c5968db9e62 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120 print_circular_bug+0x490/0x760 kernel/locking/lockdep.c:2076 check_noncircular+0x31a/0x400 kernel/locking/lockdep.c:2208 check_prev_add kernel/locking/lockdep.c:3163 [inline] check_prevs_add kernel/locking/lockdep.c:3282 [inline] validate_chain kernel/locking/lockdep.c:3906 [inline] __lock_acquire+0x249e/0x3c40 kernel/locking/lockdep.c:5228 lock_acquire.part.0+0x11b/0x380 kernel/locking/lockdep.c:5851 lock_sock_nested+0x3a/0xf0 net/core/sock.c:3645 lock_sock include/net/sock.h:1624 [inline] sock_set_reuseaddr+0x17/0x60 net/core/sock.c:788 siw_create_listen+0x1ad/0x1370 drivers/infiniband/sw/siw/siw_cm.c:1777 iw_cm_listen+0x16d/0x1f0 drivers/infiniband/core/iwcm.c:585 cma_iw_listen drivers/infiniband/core/cma.c:2684 [inline] rdma_listen+0x7ef/0xe30 drivers/infiniband/core/cma.c:3969 cma_listen_on_dev+0x4dc/0x810 drivers/infiniband/core/cma.c:2743 cma_add_one+0x78b/0xdd0 drivers/infiniband/core/cma.c:5373 add_client_context+0x3e0/0x590 drivers/infiniband/core/device.c:711 enable_device_and_get+0x1d5/0x3f0 drivers/infiniband/core/device.c:1322 ib_register_device drivers/infiniband/core/device.c:1433 [inline] ib_register_device+0x880/0xdf0 drivers/infiniband/core/device.c:1379 siw_device_register drivers/infiniband/sw/siw/siw_main.c:72 [inline] siw_newlink drivers/infiniband/sw/siw/siw_main.c:431 [inline] siw_newlink+0xb60/0xd70 drivers/infiniband/sw/siw/siw_main.c:413 nldev_newlink+0x391/0x660 drivers/infiniband/core/nldev.c:1795 rdma_nl_rcv_msg+0x38b/0x6e0 drivers/infiniband/core/netlink.c:195 rdma_nl_rcv_skb.constprop.0.isra.0+0x2e6/0x450 drivers/infiniband/core/netlink.c:239 netlink_unicast_kernel net/netlink/af_netlink.c:1322 [inline] netlink_unicast+0x53f/0x7f0 net/netlink/af_netlink.c:1348 netlink_sendmsg+0x8b8/0xd70 net/netlink/af_netlink.c:1892 sock_sendmsg_nosec net/socket.c:713 [inline] __sock_sendmsg net/socket.c:728 [inline] ____sys_sendmsg+0xab2/0xc90 net/socket.c:2568 ___sys_sendmsg+0x135/0x1e0 net/socket.c:2622 __sys_sendmsg+0x16e/0x220 net/socket.c:2654 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f6d73f8cda9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f6d74e38038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007f6d741a6160 RCX: 00007f6d73f8cda9 RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 RBP: 00007f6d7400e2a0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000000 R14: 00007f6d741a6160 R15: 00007ffdd86e8b68 infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 wg1 speed is unknown, defaulting to 1000 wg1 speed is unknown, defaulting to 1000 wg1 speed is unknown, defaulting to 1000 wg1 speed is unknown, defaulting to 1000 wg1 speed is unknown, defaulting to 1000 wg1 speed is unknown, defaulting to 1000