[ 9.444410][ T2658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 9.452562][ T2658] eql: remember to turn off Van-Jacobson compression on your slave devices [ 9.481317][ T29] gvnic 0000:00:00.0 enp0s0: Device link is up. [ 9.483969][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): enp0s0: link becomes ready Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.72' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 32.942195][ T3087] [ 32.942720][ T3087] ======================================================== [ 32.944163][ T3087] WARNING: possible irq lock inversion dependency detected [ 32.945613][ T3087] 6.1.0-rc6-syzkaller-32653-g65762d97e6fa #0 Not tainted [ 32.947032][ T3087] -------------------------------------------------------- [ 32.948512][ T3087] syz-executor731/3087 just changed the state of lock: [ 32.949889][ T3087] ffff0000cae630b8 (clock-AF_INET6){+++.}-{2:2}, at: l2tp_tunnel_register+0x354/0x79c [ 32.951850][ T3087] but this lock was taken by another, SOFTIRQ-safe lock in the past: [ 32.953568][ T3087] (&tcp_hashinfo.bhash[i].lock){+.-.}-{2:2} [ 32.953577][ T3087] [ 32.953577][ T3087] [ 32.953577][ T3087] and interrupts could create inverse lock ordering between them. [ 32.953577][ T3087] [ 32.957812][ T3087] [ 32.957812][ T3087] other info that might help us debug this: [ 32.959549][ T3087] Possible interrupt unsafe locking scenario: [ 32.959549][ T3087] [ 32.961303][ T3087] CPU0 CPU1 [ 32.962461][ T3087] ---- ---- [ 32.963642][ T3087] lock(clock-AF_INET6); [ 32.964613][ T3087] local_irq_disable(); [ 32.966063][ T3087] lock(&tcp_hashinfo.bhash[i].lock); [ 32.967745][ T3087] lock(clock-AF_INET6); [ 32.969167][ T3087] [ 32.969874][ T3087] lock(&tcp_hashinfo.bhash[i].lock); [ 32.971045][ T3087] [ 32.971045][ T3087] *** DEADLOCK *** [ 32.971045][ T3087] [ 32.972834][ T3087] 1 lock held by syz-executor731/3087: [ 32.973952][ T3087] #0: ffff0000c7a6b930 (sk_lock-AF_PPPOX){+.+.}-{0:0}, at: pppol2tp_connect+0x184/0x6c4 [ 32.976049][ T3087] [ 32.976049][ T3087] the shortest dependencies between 2nd lock and 1st lock: [ 32.977995][ T3087] -> (&tcp_hashinfo.bhash[i].lock){+.-.}-{2:2} { [ 32.979414][ T3087] HARDIRQ-ON-W at: [ 32.980307][ T3087] lock_acquire+0x100/0x1f8 [ 32.981620][ T3087] _raw_spin_lock_bh+0x54/0x6c [ 32.983124][ T3087] inet_csk_get_port+0xe0/0xaf0 [ 32.984525][ T3087] __inet6_bind+0x688/0x8ac [ 32.985864][ T3087] inet6_bind+0xf4/0x150 [ 32.987148][ T3087] rds_tcp_listen_init+0x14c/0x1f0 [ 32.988593][ T3087] rds_tcp_init_net+0xcc/0x1dc [ 32.989942][ T3087] ops_init+0xe4/0x2e4 [ 32.991344][ T3087] register_pernet_operations+0x108/0x264 [ 32.992960][ T3087] register_pernet_device+0x3c/0x94 [ 32.994382][ T3087] rds_tcp_init+0x74/0xe0 [ 32.995675][ T3087] do_one_initcall+0x118/0x22c [ 32.997023][ T3087] do_initcall_level+0xac/0xe4 [ 32.998340][ T3087] do_initcalls+0x58/0xa8 [ 32.999759][ T3087] do_basic_setup+0x20/0x2c [ 33.001156][ T3087] kernel_init_freeable+0xb8/0x148 [ 33.002538][ T3087] kernel_init+0x24/0x290 [ 33.003886][ T3087] ret_from_fork+0x10/0x20 [ 33.005358][ T3087] IN-SOFTIRQ-W at: [ 33.006323][ T3087] lock_acquire+0x100/0x1f8 [ 33.007667][ T3087] _raw_spin_lock+0x54/0x6c [ 33.008948][ T3087] __inet_inherit_port+0x124/0x9ac [ 33.010387][ T3087] tcp_v4_syn_recv_sock+0x790/0x848 [ 33.012193][ T3087] tcp_check_req+0x75c/0x8e4 [ 33.013588][ T3087] tcp_v4_rcv+0xad4/0x11e8 [ 33.014979][ T3087] ip_protocol_deliver_rcu+0x224/0x414 [ 33.016249][ T3087] ip_local_deliver_finish+0x124/0x200 [ 33.017828][ T3087] ip_local_deliver+0xd0/0xf4 [ 33.019115][ T3087] ip_sublist_rcv+0x40c/0x474 [ 33.020528][ T3087] ip_list_rcv+0x184/0x1c8 [ 33.021876][ T3087] __netif_receive_skb_list_core+0x1f8/0x2b0 [ 33.023592][ T3087] __netif_receive_skb_list+0x16c/0x1d0 [ 33.025131][ T3087] netif_receive_skb_list_internal+0x1e8/0x340 [ 33.026821][ T3087] napi_complete_done+0x140/0x354 [ 33.028348][ T3087] gve_napi_poll+0xcc/0x1b4 [ 33.029802][ T3087] __napi_poll+0x5c/0x24c [ 33.031344][ T3087] napi_poll+0x110/0x484 [ 33.032613][ T3087] net_rx_action+0x18c/0x414 [ 33.033942][ T3087] _stext+0x168/0x37c [ 33.035165][ T3087] ____do_softirq+0x14/0x20 [ 33.036679][ T3087] call_on_irq_stack+0x2c/0x54 [ 33.038177][ T3087] do_softirq_own_stack+0x20/0x2c [ 33.039649][ T3087] invoke_softirq+0x70/0xbc [ 33.040957][ T3087] __irq_exit_rcu+0xf0/0x140 [ 33.042262][ T3087] irq_exit_rcu+0x10/0x40 [ 33.043671][ T3087] el1_interrupt+0x38/0x68 [ 33.045040][ T3087] el1h_64_irq_handler+0x18/0x24 [ 33.046528][ T3087] el1h_64_irq+0x64/0x68 [ 33.047880][ T3087] arch_local_irq_enable+0xc/0x18 [ 33.049561][ T3087] default_idle_call+0x48/0xb8 [ 33.051009][ T3087] do_idle+0x110/0x2d4 [ 33.052374][ T3087] cpu_startup_entry+0x24/0x28 [ 33.053830][ T3087] kernel_init+0x0/0x290 [ 33.055081][ T3087] start_kernel+0x0/0x620 [ 33.056315][ T3087] start_kernel+0x450/0x620 [ 33.057767][ T3087] __primary_switched+0xb4/0xbc [ 33.059174][ T3087] INITIAL USE at: [ 33.059990][ T3087] lock_acquire+0x100/0x1f8 [ 33.061409][ T3087] _raw_spin_lock_bh+0x54/0x6c [ 33.062562][ T3087] inet_csk_get_port+0xe0/0xaf0 [ 33.063687][ T3087] __inet6_bind+0x688/0x8ac [ 33.064970][ T3087] inet6_bind+0xf4/0x150 [ 33.066304][ T3087] rds_tcp_listen_init+0x14c/0x1f0 [ 33.067762][ T3087] rds_tcp_init_net+0xcc/0x1dc [ 33.069224][ T3087] ops_init+0xe4/0x2e4 [ 33.070434][ T3087] register_pernet_operations+0x108/0x264 [ 33.071893][ T3087] register_pernet_device+0x3c/0x94 [ 33.073367][ T3087] rds_tcp_init+0x74/0xe0 [ 33.074768][ T3087] do_one_initcall+0x118/0x22c [ 33.076172][ T3087] do_initcall_level+0xac/0xe4 [ 33.077505][ T3087] do_initcalls+0x58/0xa8 [ 33.078923][ T3087] do_basic_setup+0x20/0x2c [ 33.080429][ T3087] kernel_init_freeable+0xb8/0x148 [ 33.081918][ T3087] kernel_init+0x24/0x290 [ 33.083223][ T3087] ret_from_fork+0x10/0x20 [ 33.084585][ T3087] } [ 33.085174][ T3087] ... key at: [] tcp_init.__key.22+0x0/0x10 [ 33.086906][ T3087] ... acquired at: [ 33.087741][ T3087] _raw_read_lock_bh+0x64/0x7c [ 33.088806][ T3087] sock_i_uid+0x24/0x58 [ 33.089747][ T3087] inet_csk_get_port+0x674/0xaf0 [ 33.090817][ T3087] __inet6_bind+0x688/0x8ac [ 33.091827][ T3087] inet6_bind+0xf4/0x150 [ 33.092832][ T3087] __sys_bind+0x148/0x1b0 [ 33.093895][ T3087] __arm64_sys_bind+0x28/0x3c [ 33.094955][ T3087] el0_svc_common+0x138/0x220 [ 33.096016][ T3087] do_el0_svc+0x48/0x164 [ 33.097000][ T3087] el0_svc+0x58/0x150 [ 33.097911][ T3087] el0t_64_sync_handler+0x84/0xf0 [ 33.098990][ T3087] el0t_64_sync+0x190/0x194 [ 33.100019][ T3087] [ 33.100524][ T3087] -> (clock-AF_INET6){+++.}-{2:2} { [ 33.101709][ T3087] HARDIRQ-ON-W at: [ 33.102589][ T3087] lock_acquire+0x100/0x1f8 [ 33.104007][ T3087] _raw_write_lock_bh+0x54/0x6c [ 33.105456][ T3087] sk_common_release+0x58/0x1d4 [ 33.106960][ T3087] udp_lib_close+0x20/0x30 [ 33.108257][ T3087] inet_release+0xc8/0xe4 [ 33.109574][ T3087] inet6_release+0x3c/0x58 [ 33.110942][ T3087] sock_close+0x50/0xf0 [ 33.112233][ T3087] __fput+0x198/0x3e4 [ 33.113443][ T3087] ____fput+0x20/0x30 [ 33.114667][ T3087] task_work_run+0x100/0x148 [ 33.116038][ T3087] do_notify_resume+0x174/0x1f0 [ 33.117489][ T3087] el0_svc+0x9c/0x150 [ 33.118889][ T3087] el0t_64_sync_handler+0x84/0xf0 [ 33.120325][ T3087] el0t_64_sync+0x190/0x194 [ 33.121658][ T3087] HARDIRQ-ON-R at: [ 33.122483][ T3087] lock_acquire+0x100/0x1f8 [ 33.123811][ T3087] _raw_read_lock_bh+0x64/0x7c [ 33.125241][ T3087] sock_i_uid+0x24/0x58 [ 33.126596][ T3087] udp_lib_lport_inuse+0x44/0x268 [ 33.127976][ T3087] udp_lib_get_port+0x2bc/0x8f8 [ 33.129329][ T3087] udp_v6_get_port+0x60/0x74 [ 33.130720][ T3087] __inet6_bind+0x688/0x8ac [ 33.131924][ T3087] inet6_bind+0xf4/0x150 [ 33.133217][ T3087] __sys_bind+0x148/0x1b0 [ 33.134686][ T3087] __arm64_sys_bind+0x28/0x3c [ 33.136192][ T3087] el0_svc_common+0x138/0x220 [ 33.137635][ T3087] do_el0_svc+0x48/0x164 [ 33.138969][ T3087] el0_svc+0x58/0x150 [ 33.140272][ T3087] el0t_64_sync_handler+0x84/0xf0 [ 33.141851][ T3087] el0t_64_sync+0x190/0x194 [ 33.143218][ T3087] SOFTIRQ-ON-W at: [ 33.144121][ T3087] lock_acquire+0x100/0x1f8 [ 33.145384][ T3087] _raw_write_lock+0x54/0x6c [ 33.146784][ T3087] l2tp_tunnel_register+0x354/0x79c [ 33.148327][ T3087] pppol2tp_connect+0x3e8/0x6c4 [ 33.149763][ T3087] __sys_connect+0x184/0x190 [ 33.151180][ T3087] __arm64_sys_connect+0x28/0x3c [ 33.152624][ T3087] el0_svc_common+0x138/0x220 [ 33.154016][ T3087] do_el0_svc+0x48/0x164 [ 33.155363][ T3087] el0_svc+0x58/0x150 [ 33.156689][ T3087] el0t_64_sync_handler+0x84/0xf0 [ 33.158231][ T3087] el0t_64_sync+0x190/0x194 [ 33.159495][ T3087] INITIAL USE at: [ 33.160391][ T3087] lock_acquire+0x100/0x1f8 [ 33.161785][ T3087] _raw_write_lock_bh+0x54/0x6c [ 33.163198][ T3087] sk_common_release+0x58/0x1d4 [ 33.164655][ T3087] udp_lib_close+0x20/0x30 [ 33.165982][ T3087] inet_release+0xc8/0xe4 [ 33.167328][ T3087] inet6_release+0x3c/0x58 [ 33.168788][ T3087] sock_close+0x50/0xf0 [ 33.170155][ T3087] __fput+0x198/0x3e4 [ 33.171520][ T3087] ____fput+0x20/0x30 [ 33.172694][ T3087] task_work_run+0x100/0x148 [ 33.173935][ T3087] do_notify_resume+0x174/0x1f0 [ 33.175253][ T3087] el0_svc+0x9c/0x150 [ 33.176523][ T3087] el0t_64_sync_handler+0x84/0xf0 [ 33.178017][ T3087] el0t_64_sync+0x190/0x194 [ 33.179381][ T3087] INITIAL READ USE at: [ 33.180362][ T3087] lock_acquire+0x100/0x1f8 [ 33.181800][ T3087] _raw_read_lock_bh+0x64/0x7c [ 33.183139][ T3087] sock_i_uid+0x24/0x58 [ 33.184444][ T3087] udp_lib_lport_inuse+0x44/0x268 [ 33.185944][ T3087] udp_lib_get_port+0x2bc/0x8f8 [ 33.187530][ T3087] udp_v6_get_port+0x60/0x74 [ 33.188970][ T3087] __inet6_bind+0x688/0x8ac [ 33.190360][ T3087] inet6_bind+0xf4/0x150 [ 33.191744][ T3087] __sys_bind+0x148/0x1b0 [ 33.193160][ T3087] __arm64_sys_bind+0x28/0x3c [ 33.194610][ T3087] el0_svc_common+0x138/0x220 [ 33.196121][ T3087] do_el0_svc+0x48/0x164 [ 33.197477][ T3087] el0_svc+0x58/0x150 [ 33.198797][ T3087] el0t_64_sync_handler+0x84/0xf0 [ 33.200288][ T3087] el0t_64_sync+0x190/0x194 [ 33.201723][ T3087] } [ 33.202309][ T3087] ... key at: [] af_callback_keys+0xa0/0x2e0 [ 33.204055][ T3087] ... acquired at: [ 33.204893][ T3087] mark_lock+0x154/0x1b4 [ 33.205826][ T3087] __lock_acquire+0x618/0x3084 [ 33.206959][ T3087] lock_acquire+0x100/0x1f8 [ 33.208070][ T3087] _raw_write_lock+0x54/0x6c [ 33.209086][ T3087] l2tp_tunnel_register+0x354/0x79c [ 33.210320][ T3087] pppol2tp_connect+0x3e8/0x6c4 [ 33.211465][ T3087] __sys_connect+0x184/0x190 [ 33.212501][ T3087] __arm64_sys_connect+0x28/0x3c [ 33.213598][ T3087] el0_svc_common+0x138/0x220 [ 33.214700][ T3087] do_el0_svc+0x48/0x164 [ 33.215714][ T3087] el0_svc+0x58/0x150 [ 33.216643][ T3087] el0t_64_sync_handler+0x84/0xf0 [ 33.217785][ T3087] el0t_64_sync+0x190/0x194 [ 33.218777][ T3087] [ 33.219269][ T3087] [ 33.219269][ T3087] stack backtrace: [ 33.220533][ T3087] CPU: 1 PID: 3087 Comm: syz-executor731 Not tainted 6.1.0-rc6-syzkaller-32653-g65762d97e6fa #0 [ 33.222774][ T3087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 33.225021][ T3087] Call trace: [ 33.225758][ T3087] dump_backtrace+0x1c4/0x1f0 [ 33.226839][ T3087] show_stack+0x2c/0x54 [ 33.227759][ T3087] dump_stack_lvl+0x104/0x16c [ 33.228741][ T3087] dump_stack+0x1c/0x58 [ 33.229760][ T3087] print_irq_inversion_bug+0x2f8/0x300 [ 33.230988][ T3087] mark_lock_irq+0x3ec/0x4b4 [ 33.231935][ T3087] mark_lock+0x154/0x1b4 [ 33.232829][ T3087] __lock_acquire+0x618/0x3084 [ 33.233851][ T3087] lock_acquire+0x100/0x1f8 [ 33.234901][ T3087] _raw_write_lock+0x54/0x6c [ 33.235973][ T3087] l2tp_tunnel_register+0x354/0x79c [ 33.237114][ T3087] pppol2tp_connect+0x3e8/0x6c4 [ 33.238160][ T3087] __sys_connect+0x184/0x190 [ 33.239206][ T3087] __arm64_sys_connect+0x28/0x3c [ 33.240302][ T3087] el0_svc_common+0x138/0x220 [ 33.241412][ T3087] do_el0_svc+0x48/0x164 [ 33.242349][ T3087] el0_svc+0x58/0x150 [ 33.243278][ T3087] el0t_64_sync_handler+0x84/0xf0 [ 33.244452][ T3087] el0t_64_sync+0x190/0x194 [ 33.245585][ T3087] BUG: sleeping function called from invalid context at include/linux/percpu-rwsem.h:49 [ 33.247635][ T3087] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 3087, name: syz-executor731 [ 33.249763][ T3087] preempt_count: 1, expected: 0 [ 33.250724][ T3087] RCU nest depth: 0, expected: 0 [ 33.251784][ T3087] INFO: lockdep is turned off. [ 33.252874][ T3087] Preemption disabled at: [ 33.252880][ T3087] [] l2tp_tunnel_register+0x354/0x79c [ 33.255357][ T3087] CPU: 1 PID: 3087 Comm: syz-executor731 Not tainted 6.1.0-rc6-syzkaller-32653-g65762d97e6fa #0 [ 33.257798][ T3087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 33.260053][ T3087] Call trace: [ 33.260787][ T3087] dump_backtrace+0x1c4/0x1f0 [ 33.261876][ T3087] show_stack+0x2c/0x54 [ 33.262831][ T3087] dump_stack_lvl+0x104/0x16c [ 33.263977][ T3087] dump_stack+0x1c/0x58 [ 33.264994][ T3087] __might_resched+0x208/0x218 [ 33.266085][ T3087] __might_sleep+0x48/0x78 [ 33.267082][ T3087] cpus_read_lock+0x28/0x1e0 [ 33.268128][ T3087] static_key_slow_inc+0x1c/0x38 [ 33.269274][ T3087] udpv6_encap_enable+0x1c/0x28 [ 33.270381][ T3087] setup_udp_tunnel_sock+0xec/0x124 [ 33.271625][ T3087] l2tp_tunnel_register+0x68c/0x79c [ 33.272805][ T3087] pppol2tp_connect+0x3e8/0x6c4 [ 33.273949][ T3087] __sys_connect+0x184/0x190 [ 33.274992][ T3087] __arm64_sys_connect+0x28/0x3c [ 33.276217][ T3087] el0_svc_common+0x138/0x220 [ 33.277374][ T3087] do_el0_svc+0x48/0x164 [ 33.278395][ T3087] el0_svc+0x58/0x150 [ 33.279192][ T3087] el0t_64_sync_handler+0x84/0xf0 [ 33.280330][ T3087] el0t_64_sync+0x190/0x194