[ 9.860743][ T2658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 9.866383][ T2658] eql: remember to turn off Van-Jacobson compression on your slave devices [ 9.892779][ T29] gvnic 0000:00:00.0 enp0s0: Device link is up. [ 9.898295][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): enp0s0: link becomes ready Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.119' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 40.696525][ T3072] [ 40.697181][ T3072] ======================================================== [ 40.699020][ T3072] WARNING: possible irq lock inversion dependency detected [ 40.700870][ T3072] 6.1.0-rc6-syzkaller-32653-g65762d97e6fa #0 Not tainted [ 40.702680][ T3072] -------------------------------------------------------- [ 40.704579][ T3072] syz-executor209/3072 just changed the state of lock: [ 40.706323][ T3072] ffff0000c6839eb8 (clock-AF_INET6){+++.}-{2:2}, at: l2tp_tunnel_register+0x354/0x79c [ 40.708796][ T3072] but this lock was taken by another, SOFTIRQ-safe lock in the past: [ 40.710898][ T3072] (&tcp_hashinfo.bhash[i].lock){+.-.}-{2:2} [ 40.710907][ T3072] [ 40.710907][ T3072] [ 40.710907][ T3072] and interrupts could create inverse lock ordering between them. [ 40.710907][ T3072] [ 40.716126][ T3072] [ 40.716126][ T3072] other info that might help us debug this: [ 40.718252][ T3072] Possible interrupt unsafe locking scenario: [ 40.718252][ T3072] [ 40.720380][ T3072] CPU0 CPU1 [ 40.721748][ T3072] ---- ---- [ 40.723107][ T3072] lock(clock-AF_INET6); [ 40.724206][ T3072] local_irq_disable(); [ 40.725928][ T3072] lock(&tcp_hashinfo.bhash[i].lock); [ 40.728003][ T3072] lock(clock-AF_INET6); [ 40.729797][ T3072] [ 40.730661][ T3072] lock(&tcp_hashinfo.bhash[i].lock); [ 40.732101][ T3072] [ 40.732101][ T3072] *** DEADLOCK *** [ 40.732101][ T3072] [ 40.734197][ T3072] 2 locks held by syz-executor209/3072: [ 40.735615][ T3072] #0: ffff80000d894668 (cb_lock){++++}-{3:3}, at: genl_rcv+0x28/0x50 [ 40.737721][ T3072] #1: ffff80000d894578 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x80/0x4f4 [ 40.740190][ T3072] [ 40.740190][ T3072] the shortest dependencies between 2nd lock and 1st lock: [ 40.742594][ T3072] -> (&tcp_hashinfo.bhash[i].lock){+.-.}-{2:2} { [ 40.744275][ T3072] HARDIRQ-ON-W at: [ 40.745334][ T3072] lock_acquire+0x100/0x1f8 [ 40.747106][ T3072] _raw_spin_lock_bh+0x54/0x6c [ 40.748816][ T3072] inet_csk_get_port+0xe0/0xaf0 [ 40.750604][ T3072] __inet6_bind+0x688/0x8ac [ 40.752302][ T3072] inet6_bind+0xf4/0x150 [ 40.753935][ T3072] rds_tcp_listen_init+0x14c/0x1f0 [ 40.755751][ T3072] rds_tcp_init_net+0xcc/0x1dc [ 40.757441][ T3072] ops_init+0xe4/0x2e4 [ 40.758995][ T3072] register_pernet_operations+0x108/0x264 [ 40.760967][ T3072] register_pernet_device+0x3c/0x94 [ 40.762791][ T3072] rds_tcp_init+0x74/0xe0 [ 40.764487][ T3072] do_one_initcall+0x118/0x22c [ 40.766121][ T3072] do_initcall_level+0xac/0xe4 [ 40.767952][ T3072] do_initcalls+0x58/0xa8 [ 40.769559][ T3072] do_basic_setup+0x20/0x2c [ 40.771241][ T3072] kernel_init_freeable+0xb8/0x148 [ 40.773041][ T3072] kernel_init+0x24/0x290 [ 40.774639][ T3072] ret_from_fork+0x10/0x20 [ 40.776232][ T3072] IN-SOFTIRQ-W at: [ 40.777272][ T3072] lock_acquire+0x100/0x1f8 [ 40.778870][ T3072] _raw_spin_lock+0x54/0x6c [ 40.780511][ T3072] __inet_inherit_port+0x124/0x9ac [ 40.782282][ T3072] tcp_v4_syn_recv_sock+0x790/0x848 [ 40.784101][ T3072] tcp_check_req+0x75c/0x8e4 [ 40.785743][ T3072] tcp_v4_rcv+0xad4/0x11e8 [ 40.787329][ T3072] ip_protocol_deliver_rcu+0x224/0x414 [ 40.789362][ T3072] ip_local_deliver_finish+0x124/0x200 [ 40.791341][ T3072] ip_local_deliver+0xd0/0xf4 [ 40.793025][ T3072] ip_sublist_rcv+0x40c/0x474 [ 40.794752][ T3072] ip_list_rcv+0x184/0x1c8 [ 40.796389][ T3072] __netif_receive_skb_list_core+0x1f8/0x2b0 [ 40.798429][ T3072] __netif_receive_skb_list+0x16c/0x1d0 [ 40.800310][ T3072] netif_receive_skb_list_internal+0x1e8/0x340 [ 40.802392][ T3072] napi_complete_done+0x140/0x354 [ 40.804316][ T3072] gve_napi_poll+0xcc/0x1b4 [ 40.805923][ T3072] __napi_poll+0x5c/0x24c [ 40.807568][ T3072] napi_poll+0x110/0x484 [ 40.809143][ T3072] net_rx_action+0x18c/0x414 [ 40.810812][ T3072] _stext+0x168/0x37c [ 40.812285][ T3072] ____do_softirq+0x14/0x20 [ 40.814026][ T3072] call_on_irq_stack+0x2c/0x54 [ 40.815826][ T3072] do_softirq_own_stack+0x20/0x2c [ 40.817599][ T3072] invoke_softirq+0x70/0xbc [ 40.819268][ T3072] __irq_exit_rcu+0xf0/0x140 [ 40.820896][ T3072] irq_exit_rcu+0x10/0x40 [ 40.822500][ T3072] el1_interrupt+0x38/0x68 [ 40.824128][ T3072] el1h_64_irq_handler+0x18/0x24 [ 40.825841][ T3072] el1h_64_irq+0x64/0x68 [ 40.827437][ T3072] arch_local_irq_enable+0xc/0x18 [ 40.829232][ T3072] default_idle_call+0x48/0xb8 [ 40.830913][ T3072] do_idle+0x110/0x2d4 [ 40.832439][ T3072] cpu_startup_entry+0x24/0x28 [ 40.834216][ T3072] kernel_init+0x0/0x290 [ 40.835838][ T3072] start_kernel+0x0/0x620 [ 40.837336][ T3072] start_kernel+0x450/0x620 [ 40.838798][ T3072] __primary_switched+0xb4/0xbc [ 40.840520][ T3072] INITIAL USE at: [ 40.841570][ T3072] lock_acquire+0x100/0x1f8 [ 40.843161][ T3072] _raw_spin_lock_bh+0x54/0x6c [ 40.844870][ T3072] inet_csk_get_port+0xe0/0xaf0 [ 40.846597][ T3072] __inet6_bind+0x688/0x8ac [ 40.848204][ T3072] inet6_bind+0xf4/0x150 [ 40.849802][ T3072] rds_tcp_listen_init+0x14c/0x1f0 [ 40.851568][ T3072] rds_tcp_init_net+0xcc/0x1dc [ 40.853238][ T3072] ops_init+0xe4/0x2e4 [ 40.854770][ T3072] register_pernet_operations+0x108/0x264 [ 40.856700][ T3072] register_pernet_device+0x3c/0x94 [ 40.858619][ T3072] rds_tcp_init+0x74/0xe0 [ 40.860164][ T3072] do_one_initcall+0x118/0x22c [ 40.861824][ T3072] do_initcall_level+0xac/0xe4 [ 40.863476][ T3072] do_initcalls+0x58/0xa8 [ 40.865096][ T3072] do_basic_setup+0x20/0x2c [ 40.866717][ T3072] kernel_init_freeable+0xb8/0x148 [ 40.868503][ T3072] kernel_init+0x24/0x290 [ 40.870097][ T3072] ret_from_fork+0x10/0x20 [ 40.871712][ T3072] } [ 40.872355][ T3072] ... key at: [] tcp_init.__key.22+0x0/0x10 [ 40.874455][ T3072] ... acquired at: [ 40.875449][ T3072] _raw_read_lock_bh+0x64/0x7c [ 40.876756][ T3072] sock_i_uid+0x24/0x58 [ 40.877895][ T3072] inet_csk_get_port+0x674/0xaf0 [ 40.879203][ T3072] __inet6_bind+0x688/0x8ac [ 40.880401][ T3072] inet6_bind+0xf4/0x150 [ 40.881526][ T3072] __sys_bind+0x148/0x1b0 [ 40.882719][ T3072] __arm64_sys_bind+0x28/0x3c [ 40.884123][ T3072] el0_svc_common+0x138/0x220 [ 40.885365][ T3072] do_el0_svc+0x48/0x164 [ 40.886519][ T3072] el0_svc+0x58/0x150 [ 40.887574][ T3072] el0t_64_sync_handler+0x84/0xf0 [ 40.888902][ T3072] el0t_64_sync+0x190/0x194 [ 40.890144][ T3072] [ 40.890738][ T3072] -> (clock-AF_INET6){+++.}-{2:2} { [ 40.892104][ T3072] HARDIRQ-ON-W at: [ 40.893142][ T3072] lock_acquire+0x100/0x1f8 [ 40.894745][ T3072] _raw_write_lock_bh+0x54/0x6c [ 40.896421][ T3072] sk_common_release+0x58/0x1d4 [ 40.898087][ T3072] udp_lib_close+0x20/0x30 [ 40.899619][ T3072] inet_release+0xc8/0xe4 [ 40.901160][ T3072] inet6_release+0x3c/0x58 [ 40.902878][ T3072] sock_close+0x50/0xf0 [ 40.904725][ T3072] __fput+0x198/0x3e4 [ 40.906191][ T3072] ____fput+0x20/0x30 [ 40.907621][ T3072] task_work_run+0x100/0x148 [ 40.909241][ T3072] do_notify_resume+0x174/0x1f0 [ 40.910905][ T3072] el0_svc+0x9c/0x150 [ 40.912470][ T3072] el0t_64_sync_handler+0x84/0xf0 [ 40.914240][ T3072] el0t_64_sync+0x190/0x194 [ 40.915881][ T3072] HARDIRQ-ON-R at: [ 40.916936][ T3072] lock_acquire+0x100/0x1f8 [ 40.918588][ T3072] _raw_read_lock_bh+0x64/0x7c [ 40.920264][ T3072] sock_i_uid+0x24/0x58 [ 40.921789][ T3072] udp_lib_lport_inuse+0x44/0x268 [ 40.923489][ T3072] udp_lib_get_port+0x2bc/0x8f8 [ 40.924993][ T3072] udp_v6_get_port+0x60/0x74 [ 40.926424][ T3072] __inet6_bind+0x688/0x8ac [ 40.928050][ T3072] inet6_bind+0xf4/0x150 [ 40.929600][ T3072] __sys_bind+0x148/0x1b0 [ 40.931169][ T3072] __arm64_sys_bind+0x28/0x3c [ 40.932790][ T3072] el0_svc_common+0x138/0x220 [ 40.934645][ T3072] do_el0_svc+0x48/0x164 [ 40.936351][ T3072] el0_svc+0x58/0x150 [ 40.937813][ T3072] el0t_64_sync_handler+0x84/0xf0 [ 40.939515][ T3072] el0t_64_sync+0x190/0x194 [ 40.941084][ T3072] SOFTIRQ-ON-W at: [ 40.942120][ T3072] lock_acquire+0x100/0x1f8 [ 40.943667][ T3072] _raw_write_lock+0x54/0x6c [ 40.945342][ T3072] l2tp_tunnel_register+0x354/0x79c [ 40.947103][ T3072] l2tp_nl_cmd_tunnel_create+0x1f8/0x330 [ 40.948785][ T3072] genl_rcv_msg+0x458/0x4f4 [ 40.950209][ T3072] netlink_rcv_skb+0xe8/0x1d4 [ 40.951941][ T3072] genl_rcv+0x38/0x50 [ 40.953395][ T3072] netlink_unicast_kernel+0xfc/0x1dc [ 40.955252][ T3072] netlink_unicast+0x164/0x248 [ 40.956908][ T3072] netlink_sendmsg+0x484/0x584 [ 40.958600][ T3072] ____sys_sendmsg+0x2f8/0x440 [ 40.960259][ T3072] __sys_sendmsg+0x1ac/0x228 [ 40.961846][ T3072] __arm64_sys_sendmsg+0x2c/0x3c [ 40.963520][ T3072] el0_svc_common+0x138/0x220 [ 40.965218][ T3072] do_el0_svc+0x48/0x164 [ 40.966726][ T3072] el0_svc+0x58/0x150 [ 40.968167][ T3072] el0t_64_sync_handler+0x84/0xf0 [ 40.969860][ T3072] el0t_64_sync+0x190/0x194 [ 40.971559][ T3072] INITIAL USE at: [ 40.972569][ T3072] lock_acquire+0x100/0x1f8 [ 40.974203][ T3072] _raw_write_lock_bh+0x54/0x6c [ 40.975837][ T3072] sk_common_release+0x58/0x1d4 [ 40.977516][ T3072] udp_lib_close+0x20/0x30 [ 40.979002][ T3072] inet_release+0xc8/0xe4 [ 40.980531][ T3072] inet6_release+0x3c/0x58 [ 40.982088][ T3072] sock_close+0x50/0xf0 [ 40.983574][ T3072] __fput+0x198/0x3e4 [ 40.985169][ T3072] ____fput+0x20/0x30 [ 40.986438][ T3072] task_work_run+0x100/0x148 [ 40.987847][ T3072] do_notify_resume+0x174/0x1f0 [ 40.989481][ T3072] el0_svc+0x9c/0x150 [ 40.990890][ T3072] el0t_64_sync_handler+0x84/0xf0 [ 40.992638][ T3072] el0t_64_sync+0x190/0x194 [ 40.994297][ T3072] INITIAL READ USE at: [ 40.995494][ T3072] lock_acquire+0x100/0x1f8 [ 40.996996][ T3072] _raw_read_lock_bh+0x64/0x7c [ 40.998774][ T3072] sock_i_uid+0x24/0x58 [ 41.000384][ T3072] udp_lib_lport_inuse+0x44/0x268 [ 41.002222][ T3072] udp_lib_get_port+0x2bc/0x8f8 [ 41.004126][ T3072] udp_v6_get_port+0x60/0x74 [ 41.005917][ T3072] __inet6_bind+0x688/0x8ac [ 41.007438][ T3072] inet6_bind+0xf4/0x150 [ 41.009068][ T3072] __sys_bind+0x148/0x1b0 [ 41.010755][ T3072] __arm64_sys_bind+0x28/0x3c [ 41.012468][ T3072] el0_svc_common+0x138/0x220 [ 41.014300][ T3072] do_el0_svc+0x48/0x164 [ 41.015778][ T3072] el0_svc+0x58/0x150 [ 41.017190][ T3072] el0t_64_sync_handler+0x84/0xf0 [ 41.019026][ T3072] el0t_64_sync+0x190/0x194 [ 41.020681][ T3072] } [ 41.021312][ T3072] ... key at: [] af_callback_keys+0xa0/0x2e0 [ 41.023426][ T3072] ... acquired at: [ 41.024454][ T3072] mark_lock+0x154/0x1b4 [ 41.025580][ T3072] __lock_acquire+0x618/0x3084 [ 41.026847][ T3072] lock_acquire+0x100/0x1f8 [ 41.028082][ T3072] _raw_write_lock+0x54/0x6c [ 41.029314][ T3072] l2tp_tunnel_register+0x354/0x79c [ 41.030744][ T3072] l2tp_nl_cmd_tunnel_create+0x1f8/0x330 [ 41.032263][ T3072] genl_rcv_msg+0x458/0x4f4 [ 41.033482][ T3072] netlink_rcv_skb+0xe8/0x1d4 [ 41.034847][ T3072] genl_rcv+0x38/0x50 [ 41.035903][ T3072] netlink_unicast_kernel+0xfc/0x1dc [ 41.037296][ T3072] netlink_unicast+0x164/0x248 [ 41.038568][ T3072] netlink_sendmsg+0x484/0x584 [ 41.039867][ T3072] ____sys_sendmsg+0x2f8/0x440 [ 41.041174][ T3072] __sys_sendmsg+0x1ac/0x228 [ 41.042333][ T3072] __arm64_sys_sendmsg+0x2c/0x3c [ 41.043635][ T3072] el0_svc_common+0x138/0x220 [ 41.045026][ T3072] do_el0_svc+0x48/0x164 [ 41.046298][ T3072] el0_svc+0x58/0x150 [ 41.047269][ T3072] el0t_64_sync_handler+0x84/0xf0 [ 41.048478][ T3072] el0t_64_sync+0x190/0x194 [ 41.049570][ T3072] [ 41.050222][ T3072] [ 41.050222][ T3072] stack backtrace: [ 41.051744][ T3072] CPU: 1 PID: 3072 Comm: syz-executor209 Not tainted 6.1.0-rc6-syzkaller-32653-g65762d97e6fa #0 [ 41.054457][ T3072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 41.057061][ T3072] Call trace: [ 41.057893][ T3072] dump_backtrace+0x1c4/0x1f0 [ 41.059083][ T3072] show_stack+0x2c/0x54 [ 41.060141][ T3072] dump_stack_lvl+0x104/0x16c [ 41.061342][ T3072] dump_stack+0x1c/0x58 [ 41.062394][ T3072] print_irq_inversion_bug+0x2f8/0x300 [ 41.063736][ T3072] mark_lock_irq+0x3ec/0x4b4 [ 41.065073][ T3072] mark_lock+0x154/0x1b4 [ 41.066063][ T3072] __lock_acquire+0x618/0x3084 [ 41.067182][ T3072] lock_acquire+0x100/0x1f8 [ 41.068240][ T3072] _raw_write_lock+0x54/0x6c [ 41.069390][ T3072] l2tp_tunnel_register+0x354/0x79c [ 41.070743][ T3072] l2tp_nl_cmd_tunnel_create+0x1f8/0x330 [ 41.072237][ T3072] genl_rcv_msg+0x458/0x4f4 [ 41.073373][ T3072] netlink_rcv_skb+0xe8/0x1d4 [ 41.074622][ T3072] genl_rcv+0x38/0x50 [ 41.075630][ T3072] netlink_unicast_kernel+0xfc/0x1dc [ 41.077083][ T3072] netlink_unicast+0x164/0x248 [ 41.078169][ T3072] netlink_sendmsg+0x484/0x584 [ 41.079266][ T3072] ____sys_sendmsg+0x2f8/0x440 [ 41.080550][ T3072] __sys_sendmsg+0x1ac/0x228 [ 41.081705][ T3072] __arm64_sys_sendmsg+0x2c/0x3c [ 41.082997][ T3072] el0_svc_common+0x138/0x220 [ 41.084272][ T3072] do_el0_svc+0x48/0x164 [ 41.085482][ T3072] el0_svc+0x58/0x150 [ 41.086492][ T3072] el0t_64_sync_handler+0x84/0xf0 [ 41.087639][ T3072] el0t_64_sync+0x190/0x194