Warning: Permanently added '10.128.1.13' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 57.347858][ C1] [ 57.350351][ C1] ======================================================== [ 57.357633][ C1] WARNING: possible irq lock inversion dependency detected [ 57.364855][ C1] 5.6.0-syzkaller #0 Not tainted [ 57.369774][ C1] -------------------------------------------------------- [ 57.376949][ C1] swapper/1/0 just changed the state of lock: [ 57.382990][ C1] ffff88808e1d5cd8 (&ctx->ctx_lock){..-.}-{2:2}, at: free_ioctx_users+0x2b/0x450 [ 57.392148][ C1] but this lock took another, SOFTIRQ-unsafe lock in the past: [ 57.399673][ C1] (&pid->wait_pidfd){+.+.}-{2:2} [ 57.399682][ C1] [ 57.399682][ C1] [ 57.399682][ C1] and interrupts could create inverse lock ordering between them. [ 57.399682][ C1] [ 57.418978][ C1] [ 57.418978][ C1] other info that might help us debug this: [ 57.427057][ C1] Possible interrupt unsafe locking scenario: [ 57.427057][ C1] [ 57.435363][ C1] CPU0 CPU1 [ 57.440708][ C1] ---- ---- [ 57.446056][ C1] lock(&pid->wait_pidfd); [ 57.450547][ C1] local_irq_disable(); [ 57.462412][ C1] lock(&ctx->ctx_lock); [ 57.469237][ C1] lock(&pid->wait_pidfd); [ 57.476231][ C1] [ 57.479720][ C1] lock(&ctx->ctx_lock); [ 57.484210][ C1] [ 57.484210][ C1] *** DEADLOCK *** [ 57.484210][ C1] [ 57.492347][ C1] 2 locks held by swapper/1/0: [ 57.497094][ C1] #0: ffffffff899bb0e0 (rcu_callback){....}-{0:0}, at: rcu_core+0x520/0x1370 [ 57.505944][ C1] #1: ffffffff899bb200 (rcu_read_lock){....}-{1:2}, at: percpu_ref_switch_to_atomic_rcu+0x209/0x540 [ 57.516819][ C1] [ 57.516819][ C1] the shortest dependencies between 2nd lock and 1st lock: [ 57.526169][ C1] -> (&pid->wait_pidfd){+.+.}-{2:2} { [ 57.531625][ C1] HARDIRQ-ON-W at: [ 57.535669][ C1] lock_acquire+0x1f2/0x8f0 [ 57.541968][ C1] _raw_spin_lock+0x2a/0x40 [ 57.548269][ C1] proc_pid_make_inode+0x1f9/0x3c0 [ 57.555186][ C1] proc_pid_instantiate+0x51/0x150 [ 57.562093][ C1] proc_pid_lookup+0x1da/0x340 [ 57.568770][ C1] proc_root_lookup+0x20/0x60 [ 57.575239][ C1] __lookup_slow+0x256/0x490 [ 57.581626][ C1] walk_component+0x418/0x6a0 [ 57.588098][ C1] link_path_walk.part.0+0x4f1/0xb50 [ 57.595195][ C1] path_openat+0x25a/0x27b0 [ 57.601509][ C1] do_filp_open+0x203/0x260 [ 57.607814][ C1] do_sys_openat2+0x585/0x770 [ 57.614496][ C1] do_sys_open+0xc3/0x140 [ 57.620664][ C1] do_syscall_64+0xf6/0x7d0 [ 57.626966][ C1] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 57.634649][ C1] SOFTIRQ-ON-W at: [ 57.638694][ C1] lock_acquire+0x1f2/0x8f0 [ 57.644991][ C1] _raw_spin_lock+0x2a/0x40 [ 57.651299][ C1] proc_pid_make_inode+0x1f9/0x3c0 [ 57.658207][ C1] proc_pid_instantiate+0x51/0x150 [ 57.665111][ C1] proc_pid_lookup+0x1da/0x340 [ 57.671837][ C1] proc_root_lookup+0x20/0x60 [ 57.678310][ C1] __lookup_slow+0x256/0x490 [ 57.684696][ C1] walk_component+0x418/0x6a0 [ 57.691171][ C1] link_path_walk.part.0+0x4f1/0xb50 [ 57.698251][ C1] path_openat+0x25a/0x27b0 [ 57.704551][ C1] do_filp_open+0x203/0x260 [ 57.710850][ C1] do_sys_openat2+0x585/0x770 [ 57.717321][ C1] do_sys_open+0xc3/0x140 [ 57.723451][ C1] do_syscall_64+0xf6/0x7d0 [ 57.729753][ C1] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 57.737433][ C1] INITIAL USE at: [ 57.741403][ C1] lock_acquire+0x1f2/0x8f0 [ 57.747645][ C1] _raw_spin_lock_irqsave+0x8c/0xbf [ 57.754551][ C1] __wake_up_common_lock+0xb4/0x130 [ 57.761470][ C1] do_notify_parent+0x19e/0xe60 [ 57.768035][ C1] do_exit+0x238f/0x2dd0 [ 57.774006][ C1] call_usermodehelper_exec_async+0x507/0x710 [ 57.781794][ C1] ret_from_fork+0x24/0x30 [ 57.787916][ C1] } [ 57.790485][ C1] ... key at: [] __key.53746+0x0/0x40 [ 57.797999][ C1] ... acquired at: [ 57.801873][ C1] _raw_spin_lock+0x2a/0x40 [ 57.806542][ C1] io_submit_one+0xc1b/0x2ec0 [ 57.811371][ C1] __ia32_compat_sys_io_submit+0x1bf/0x530 [ 57.817331][ C1] do_fast_syscall_32+0x270/0xe90 [ 57.822505][ C1] entry_SYSENTER_compat+0x70/0x7f [ 57.827762][ C1] [ 57.830102][ C1] -> (&ctx->ctx_lock){..-.}-{2:2} { [ 57.835275][ C1] IN-SOFTIRQ-W at: [ 57.839243][ C1] lock_acquire+0x1f2/0x8f0 [ 57.845389][ C1] _raw_spin_lock_irq+0x5b/0x80 [ 57.851869][ C1] free_ioctx_users+0x2b/0x450 [ 57.858299][ C1] percpu_ref_switch_to_atomic_rcu+0x494/0x540 [ 57.866073][ C1] rcu_core+0x59f/0x1370 [ 57.871940][ C1] __do_softirq+0x26c/0x9f7 [ 57.878067][ C1] irq_exit+0x192/0x1d0 [ 57.883843][ C1] smp_apic_timer_interrupt+0x19e/0x600 [ 57.891014][ C1] apic_timer_interrupt+0xf/0x20 [ 57.897576][ C1] native_safe_halt+0xe/0x10 [ 57.903796][ C1] default_idle+0x49/0x350 [ 57.909835][ C1] do_idle+0x393/0x690 [ 57.915525][ C1] cpu_startup_entry+0x14/0x20 [ 57.921914][ C1] start_secondary+0x2f3/0x400 [ 57.928302][ C1] secondary_startup_64+0xa4/0xb0 [ 57.935065][ C1] INITIAL USE at: [ 57.938970][ C1] lock_acquire+0x1f2/0x8f0 [ 57.945011][ C1] _raw_spin_lock_irq+0x5b/0x80 [ 57.951414][ C1] io_submit_one+0xbd6/0x2ec0 [ 57.957644][ C1] __ia32_compat_sys_io_submit+0x1bf/0x530 [ 57.964994][ C1] do_fast_syscall_32+0x270/0xe90 [ 57.971574][ C1] entry_SYSENTER_compat+0x70/0x7f [ 57.978241][ C1] } [ 57.980751][ C1] ... key at: [] __key.55232+0x0/0x40 [ 57.988340][ C1] ... acquired at: [ 57.992153][ C1] mark_lock+0x624/0xf10 [ 57.996659][ C1] __lock_acquire+0x1d28/0x4e00 [ 58.001693][ C1] lock_acquire+0x1f2/0x8f0 [ 58.006368][ C1] _raw_spin_lock_irq+0x5b/0x80 [ 58.011401][ C1] free_ioctx_users+0x2b/0x450 [ 58.016338][ C1] percpu_ref_switch_to_atomic_rcu+0x494/0x540 [ 58.022669][ C1] rcu_core+0x59f/0x1370 [ 58.027083][ C1] __do_softirq+0x26c/0x9f7 [ 58.031748][ C1] irq_exit+0x192/0x1d0 [ 58.036051][ C1] smp_apic_timer_interrupt+0x19e/0x600 [ 58.041743][ C1] apic_timer_interrupt+0xf/0x20 [ 58.046828][ C1] native_safe_halt+0xe/0x10 [ 58.051562][ C1] default_idle+0x49/0x350 [ 58.056123][ C1] do_idle+0x393/0x690 [ 58.060339][ C1] cpu_startup_entry+0x14/0x20 [ 58.065250][ C1] start_secondary+0x2f3/0x400 [ 58.070161][ C1] secondary_startup_64+0xa4/0xb0 [ 58.075325][ C1] [ 58.077627][ C1] [ 58.077627][ C1] stack backtrace: [ 58.083509][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.6.0-syzkaller #0 [ 58.091038][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 58.101219][ C1] Call Trace: [ 58.104483][ C1] [ 58.107317][ C1] dump_stack+0x188/0x20d [ 58.111623][ C1] check_usage_forwards.cold+0x20/0x29 [ 58.117059][ C1] ? check_usage_backwards+0x4e0/0x4e0 [ 58.122493][ C1] ? stack_trace_consume_entry+0x160/0x160 [ 58.128273][ C1] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 58.134967][ C1] ? get_stack_info+0x32/0x13e [ 58.139705][ C1] ? save_trace+0x42/0x9f0 [ 58.144094][ C1] mark_lock+0x624/0xf10 [ 58.148353][ C1] ? check_usage_backwards+0x4e0/0x4e0 [ 58.153785][ C1] ? print_usage_bug+0x240/0x240 [ 58.158698][ C1] ? print_usage_bug+0x240/0x240 [ 58.163627][ C1] ? mark_lock+0x12b/0xf10 [ 58.168033][ C1] __lock_acquire+0x1d28/0x4e00 [ 58.172877][ C1] ? mark_held_locks+0xe0/0xe0 [ 58.177735][ C1] ? __wake_up_common_lock+0xde/0x130 [ 58.183200][ C1] lock_acquire+0x1f2/0x8f0 [ 58.187698][ C1] ? free_ioctx_users+0x2b/0x450 [ 58.192616][ C1] ? lock_release+0x800/0x800 [ 58.197268][ C1] ? lock_acquire+0x1f2/0x8f0 [ 58.201920][ C1] ? percpu_ref_switch_to_atomic_rcu+0x209/0x540 [ 58.208222][ C1] ? lock_release+0x800/0x800 [ 58.212873][ C1] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 58.218651][ C1] _raw_spin_lock_irq+0x5b/0x80 [ 58.223489][ C1] ? free_ioctx_users+0x2b/0x450 [ 58.228400][ C1] free_ioctx_users+0x2b/0x450 [ 58.233140][ C1] percpu_ref_switch_to_atomic_rcu+0x494/0x540 [ 58.239267][ C1] rcu_core+0x59f/0x1370 [ 58.243483][ C1] ? __rcu_read_unlock+0x700/0x700 [ 58.248566][ C1] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 58.254086][ C1] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 58.260039][ C1] ? run_rebalance_domains+0x202/0x2c0 [ 58.265476][ C1] __do_softirq+0x26c/0x9f7 [ 58.269954][ C1] irq_exit+0x192/0x1d0 [ 58.274082][ C1] smp_apic_timer_interrupt+0x19e/0x600 [ 58.279621][ C1] apic_timer_interrupt+0xf/0x20 [ 58.284541][ C1] [ 58.287467][ C1] RIP: 0010:native_safe_halt+0xe/0x10 [ 58.292882][ C1] Code: cc cc cc cc cc cc cc cc cc cc cc cc e9 07 00 00 00 0f 00 2d 64 f5 5d 00 f4 c3 66 90 e9 07 00 00 00 0f 00 2d 54 f5 5d 00 fb f4 cc 41 56 41 55 41 54 55 53 e8 93 37 96 f9 e8 8e 33 cb fb 0f 1f [ 58.312462][ C1] RSP: 0018:ffffc90000d3fdb8 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 [ 58.320994][ C1] RAX: 1ffffffff132925f RBX: ffff8880a95f2340 RCX: 0000000000000000 [ 58.328942][ C1] RDX: dffffc0000000000 RSI: 0000000000000006 RDI: ffff8880a95f2c04 [ 58.336888][ C1] RBP: dffffc0000000000 R08: ffff8880a95f2340 R09: 0000000000000000 [ 58.344885][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: ffffed10152be468 [ 58.352846][ C1] R13: 0000000000000001 R14: ffffffff8a886100 R15: 0000000000000000 [ 58.360812][ C1] default_idle+0x49/0x350 [ 58.365207][ C1] do_idle+0x393/0x690 [ 58.369252][ C1] ? arch_cpu_idle_exit+0x70/0x70 [ 58.374290][ C1] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 58.380077][ C1] ? lockdep_hardirqs_on+0x463/0x620 [ 58.385333][ C1] cpu_startup_entry+0x14/0x20 [ 58.390073][ C1] start_secondary+0x2f3/0x400 [ 58.394846][ C1] ? set_cpu_sibling_map+0x1ed0/0x1ed0 [ 58.400281][ C1] se