[ 9.888724][ T2660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 9.898099][ T2660] eql: remember to turn off Van-Jacobson compression on your slave devices [ 9.926779][ T9] gvnic 0000:00:00.0 enp0s0: Device link is up. [ 9.933034][ T921] IPv6: ADDRCONF(NETDEV_CHANGE): enp0s0: link becomes ready Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.34' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 34.209062][ T3074] [ 34.209611][ T3074] ======================================================== [ 34.211156][ T3074] WARNING: possible irq lock inversion dependency detected [ 34.212737][ T3074] 6.1.0-rc6-syzkaller-32653-g65762d97e6fa #0 Not tainted [ 34.214308][ T3074] -------------------------------------------------------- [ 34.215903][ T3074] syz-executor219/3074 just changed the state of lock: [ 34.217423][ T3074] ffff0000cbb57bb8 (clock-AF_INET6){+++.}-{2:2}, at: l2tp_tunnel_register+0x354/0x79c [ 34.219664][ T3074] but this lock was taken by another, SOFTIRQ-safe lock in the past: [ 34.221464][ T3074] (&tcp_hashinfo.bhash[i].lock){+.-.}-{2:2} [ 34.221474][ T3074] [ 34.221474][ T3074] [ 34.221474][ T3074] and interrupts could create inverse lock ordering between them. [ 34.221474][ T3074] [ 34.226020][ T3074] [ 34.226020][ T3074] other info that might help us debug this: [ 34.227809][ T3074] Possible interrupt unsafe locking scenario: [ 34.227809][ T3074] [ 34.229653][ T3074] CPU0 CPU1 [ 34.230886][ T3074] ---- ---- [ 34.232108][ T3074] lock(clock-AF_INET6); [ 34.233093][ T3074] local_irq_disable(); [ 34.234617][ T3074] lock(&tcp_hashinfo.bhash[i].lock); [ 34.236530][ T3074] lock(clock-AF_INET6); [ 34.238049][ T3074] [ 34.238880][ T3074] lock(&tcp_hashinfo.bhash[i].lock); [ 34.240179][ T3074] [ 34.240179][ T3074] *** DEADLOCK *** [ 34.240179][ T3074] [ 34.241984][ T3074] 1 lock held by syz-executor219/3074: [ 34.243226][ T3074] #0: ffff0000cb27c130 (sk_lock-AF_PPPOX){+.+.}-{0:0}, at: pppol2tp_connect+0x184/0x6c4 [ 34.245454][ T3074] [ 34.245454][ T3074] the shortest dependencies between 2nd lock and 1st lock: [ 34.247582][ T3074] -> (&tcp_hashinfo.bhash[i].lock){+.-.}-{2:2} { [ 34.249037][ T3074] HARDIRQ-ON-W at: [ 34.249983][ T3074] lock_acquire+0x100/0x1f8 [ 34.251414][ T3074] _raw_spin_lock_bh+0x54/0x6c [ 34.252872][ T3074] inet_csk_get_port+0xe0/0xaf0 [ 34.254351][ T3074] __inet6_bind+0x688/0x8ac [ 34.255845][ T3074] inet6_bind+0xf4/0x150 [ 34.257377][ T3074] rds_tcp_listen_init+0x14c/0x1f0 [ 34.258986][ T3074] rds_tcp_init_net+0xcc/0x1dc [ 34.260632][ T3074] ops_init+0xe4/0x2e4 [ 34.261934][ T3074] register_pernet_operations+0x108/0x264 [ 34.263747][ T3074] register_pernet_device+0x3c/0x94 [ 34.265407][ T3074] rds_tcp_init+0x74/0xe0 [ 34.266985][ T3074] do_one_initcall+0x118/0x22c [ 34.268959][ T3074] do_initcall_level+0xac/0xe4 [ 34.270652][ T3074] do_initcalls+0x58/0xa8 [ 34.272312][ T3074] do_basic_setup+0x20/0x2c [ 34.273927][ T3074] kernel_init_freeable+0xb8/0x148 [ 34.275670][ T3074] kernel_init+0x24/0x290 [ 34.277137][ T3074] ret_from_fork+0x10/0x20 [ 34.278803][ T3074] IN-SOFTIRQ-W at: [ 34.279783][ T3074] lock_acquire+0x100/0x1f8 [ 34.281425][ T3074] _raw_spin_lock+0x54/0x6c [ 34.283082][ T3074] __inet_inherit_port+0x124/0x9ac [ 34.284812][ T3074] tcp_v4_syn_recv_sock+0x790/0x848 [ 34.286469][ T3074] tcp_check_req+0x75c/0x8e4 [ 34.288040][ T3074] tcp_v4_rcv+0xad4/0x11e8 [ 34.289541][ T3074] ip_protocol_deliver_rcu+0x224/0x414 [ 34.291086][ T3074] ip_local_deliver_finish+0x124/0x200 [ 34.292671][ T3074] ip_local_deliver+0xd0/0xf4 [ 34.294113][ T3074] ip_sublist_rcv+0x40c/0x474 [ 34.295561][ T3074] ip_list_rcv+0x184/0x1c8 [ 34.296935][ T3074] __netif_receive_skb_list_core+0x1f8/0x2b0 [ 34.298928][ T3074] __netif_receive_skb_list+0x16c/0x1d0 [ 34.300645][ T3074] netif_receive_skb_list_internal+0x1e8/0x340 [ 34.302505][ T3074] napi_complete_done+0x140/0x354 [ 34.303992][ T3074] gve_napi_poll+0xcc/0x1b4 [ 34.305379][ T3074] __napi_poll+0x5c/0x24c [ 34.306840][ T3074] napi_poll+0x110/0x484 [ 34.308387][ T3074] net_rx_action+0x18c/0x414 [ 34.310009][ T3074] _stext+0x168/0x37c [ 34.311417][ T3074] ____do_softirq+0x14/0x20 [ 34.312813][ T3074] call_on_irq_stack+0x2c/0x54 [ 34.314501][ T3074] do_softirq_own_stack+0x20/0x2c [ 34.316230][ T3074] invoke_softirq+0x70/0xbc [ 34.317763][ T3074] __irq_exit_rcu+0xf0/0x140 [ 34.319303][ T3074] irq_exit_rcu+0x10/0x40 [ 34.320811][ T3074] el1_interrupt+0x38/0x68 [ 34.322320][ T3074] el1h_64_irq_handler+0x18/0x24 [ 34.323977][ T3074] el1h_64_irq+0x64/0x68 [ 34.325462][ T3074] arch_local_irq_enable+0xc/0x18 [ 34.327197][ T3074] default_idle_call+0x48/0xb8 [ 34.328882][ T3074] do_idle+0x110/0x2d4 [ 34.330482][ T3074] cpu_startup_entry+0x24/0x28 [ 34.332087][ T3074] kernel_init+0x0/0x290 [ 34.333642][ T3074] start_kernel+0x0/0x620 [ 34.335145][ T3074] start_kernel+0x450/0x620 [ 34.336754][ T3074] __primary_switched+0xb4/0xbc [ 34.338440][ T3074] INITIAL USE at: [ 34.339419][ T3074] lock_acquire+0x100/0x1f8 [ 34.340886][ T3074] _raw_spin_lock_bh+0x54/0x6c [ 34.342601][ T3074] inet_csk_get_port+0xe0/0xaf0 [ 34.344109][ T3074] __inet6_bind+0x688/0x8ac [ 34.345566][ T3074] inet6_bind+0xf4/0x150 [ 34.347243][ T3074] rds_tcp_listen_init+0x14c/0x1f0 [ 34.348956][ T3074] rds_tcp_init_net+0xcc/0x1dc [ 34.350397][ T3074] ops_init+0xe4/0x2e4 [ 34.351687][ T3074] register_pernet_operations+0x108/0x264 [ 34.353518][ T3074] register_pernet_device+0x3c/0x94 [ 34.355290][ T3074] rds_tcp_init+0x74/0xe0 [ 34.356798][ T3074] do_one_initcall+0x118/0x22c [ 34.358372][ T3074] do_initcall_level+0xac/0xe4 [ 34.359815][ T3074] do_initcalls+0x58/0xa8 [ 34.361183][ T3074] do_basic_setup+0x20/0x2c [ 34.362572][ T3074] kernel_init_freeable+0xb8/0x148 [ 34.364209][ T3074] kernel_init+0x24/0x290 [ 34.365736][ T3074] ret_from_fork+0x10/0x20 [ 34.367139][ T3074] } [ 34.367834][ T3074] ... key at: [] tcp_init.__key.22+0x0/0x10 [ 34.370076][ T3074] ... acquired at: [ 34.371139][ T3074] _raw_read_lock_bh+0x64/0x7c [ 34.372504][ T3074] sock_i_uid+0x24/0x58 [ 34.373683][ T3074] inet_csk_get_port+0x674/0xaf0 [ 34.375009][ T3074] __inet6_bind+0x688/0x8ac [ 34.376123][ T3074] inet6_bind+0xf4/0x150 [ 34.377397][ T3074] __sys_bind+0x148/0x1b0 [ 34.378504][ T3074] __arm64_sys_bind+0x28/0x3c [ 34.379832][ T3074] el0_svc_common+0x138/0x220 [ 34.381102][ T3074] do_el0_svc+0x48/0x164 [ 34.382332][ T3074] el0_svc+0x58/0x150 [ 34.383466][ T3074] el0t_64_sync_handler+0x84/0xf0 [ 34.384828][ T3074] el0t_64_sync+0x190/0x194 [ 34.385967][ T3074] [ 34.386582][ T3074] -> (clock-AF_INET6){+++.}-{2:2} { [ 34.387868][ T3074] HARDIRQ-ON-W at: [ 34.388790][ T3074] lock_acquire+0x100/0x1f8 [ 34.390406][ T3074] _raw_write_lock_bh+0x54/0x6c [ 34.391949][ T3074] sk_common_release+0x58/0x1d4 [ 34.393538][ T3074] udp_lib_close+0x20/0x30 [ 34.395080][ T3074] inet_release+0xc8/0xe4 [ 34.396669][ T3074] inet6_release+0x3c/0x58 [ 34.398166][ T3074] sock_close+0x50/0xf0 [ 34.399698][ T3074] __fput+0x198/0x3e4 [ 34.401153][ T3074] ____fput+0x20/0x30 [ 34.402637][ T3074] task_work_run+0x100/0x148 [ 34.404289][ T3074] do_notify_resume+0x174/0x1f0 [ 34.405916][ T3074] el0_svc+0x9c/0x150 [ 34.407407][ T3074] el0t_64_sync_handler+0x84/0xf0 [ 34.409081][ T3074] el0t_64_sync+0x190/0x194 [ 34.410613][ T3074] HARDIRQ-ON-R at: [ 34.411577][ T3074] lock_acquire+0x100/0x1f8 [ 34.413271][ T3074] _raw_read_lock_bh+0x64/0x7c [ 34.414861][ T3074] sock_i_uid+0x24/0x58 [ 34.416319][ T3074] udp_lib_lport_inuse+0x44/0x268 [ 34.417996][ T3074] udp_lib_get_port+0x2bc/0x8f8 [ 34.419701][ T3074] udp_v6_get_port+0x60/0x74 [ 34.421375][ T3074] __inet6_bind+0x688/0x8ac [ 34.422949][ T3074] inet6_bind+0xf4/0x150 [ 34.424426][ T3074] __sys_bind+0x148/0x1b0 [ 34.425888][ T3074] __arm64_sys_bind+0x28/0x3c [ 34.427340][ T3074] el0_svc_common+0x138/0x220 [ 34.428766][ T3074] do_el0_svc+0x48/0x164 [ 34.430160][ T3074] el0_svc+0x58/0x150 [ 34.431671][ T3074] el0t_64_sync_handler+0x84/0xf0 [ 34.433471][ T3074] el0t_64_sync+0x190/0x194 [ 34.434977][ T3074] SOFTIRQ-ON-W at: [ 34.435877][ T3074] lock_acquire+0x100/0x1f8 [ 34.437282][ T3074] _raw_write_lock+0x54/0x6c [ 34.438983][ T3074] l2tp_tunnel_register+0x354/0x79c [ 34.440747][ T3074] pppol2tp_connect+0x3e8/0x6c4 [ 34.442373][ T3074] __sys_connect+0x184/0x190 [ 34.443856][ T3074] __arm64_sys_connect+0x28/0x3c [ 34.445551][ T3074] el0_svc_common+0x138/0x220 [ 34.447146][ T3074] do_el0_svc+0x48/0x164 [ 34.448723][ T3074] el0_svc+0x58/0x150 [ 34.450191][ T3074] el0t_64_sync_handler+0x84/0xf0 [ 34.451903][ T3074] el0t_64_sync+0x190/0x194 [ 34.453533][ T3074] INITIAL USE at: [ 34.454533][ T3074] lock_acquire+0x100/0x1f8 [ 34.456152][ T3074] _raw_write_lock_bh+0x54/0x6c [ 34.457800][ T3074] sk_common_release+0x58/0x1d4 [ 34.459481][ T3074] udp_lib_close+0x20/0x30 [ 34.461011][ T3074] inet_release+0xc8/0xe4 [ 34.462556][ T3074] inet6_release+0x3c/0x58 [ 34.464035][ T3074] sock_close+0x50/0xf0 [ 34.465446][ T3074] __fput+0x198/0x3e4 [ 34.466791][ T3074] ____fput+0x20/0x30 [ 34.468068][ T3074] task_work_run+0x100/0x148 [ 34.469438][ T3074] do_notify_resume+0x174/0x1f0 [ 34.470858][ T3074] el0_svc+0x9c/0x150 [ 34.472100][ T3074] el0t_64_sync_handler+0x84/0xf0 [ 34.473702][ T3074] el0t_64_sync+0x190/0x194 [ 34.475223][ T3074] INITIAL READ USE at: [ 34.476343][ T3074] lock_acquire+0x100/0x1f8 [ 34.477912][ T3074] _raw_read_lock_bh+0x64/0x7c [ 34.479512][ T3074] sock_i_uid+0x24/0x58 [ 34.481012][ T3074] udp_lib_lport_inuse+0x44/0x268 [ 34.482745][ T3074] udp_lib_get_port+0x2bc/0x8f8 [ 34.484506][ T3074] udp_v6_get_port+0x60/0x74 [ 34.486055][ T3074] __inet6_bind+0x688/0x8ac [ 34.487276][ T3074] inet6_bind+0xf4/0x150 [ 34.488698][ T3074] __sys_bind+0x148/0x1b0 [ 34.490162][ T3074] __arm64_sys_bind+0x28/0x3c [ 34.491955][ T3074] el0_svc_common+0x138/0x220 [ 34.493703][ T3074] do_el0_svc+0x48/0x164 [ 34.495181][ T3074] el0_svc+0x58/0x150 [ 34.496493][ T3074] el0t_64_sync_handler+0x84/0xf0 [ 34.498086][ T3074] el0t_64_sync+0x190/0x194 [ 34.499748][ T3074] } [ 34.500472][ T3074] ... key at: [] af_callback_keys+0xa0/0x2e0 [ 34.502447][ T3074] ... acquired at: [ 34.503441][ T3074] mark_lock+0x154/0x1b4 [ 34.504525][ T3074] __lock_acquire+0x618/0x3084 [ 34.505830][ T3074] lock_acquire+0x100/0x1f8 [ 34.507038][ T3074] _raw_write_lock+0x54/0x6c [ 34.508122][ T3074] l2tp_tunnel_register+0x354/0x79c [ 34.509469][ T3074] pppol2tp_connect+0x3e8/0x6c4 [ 34.510717][ T3074] __sys_connect+0x184/0x190 [ 34.511915][ T3074] __arm64_sys_connect+0x28/0x3c [ 34.513135][ T3074] el0_svc_common+0x138/0x220 [ 34.514343][ T3074] do_el0_svc+0x48/0x164 [ 34.515451][ T3074] el0_svc+0x58/0x150 [ 34.516485][ T3074] el0t_64_sync_handler+0x84/0xf0 [ 34.517751][ T3074] el0t_64_sync+0x190/0x194 [ 34.519198][ T3074] [ 34.519750][ T3074] [ 34.519750][ T3074] stack backtrace: [ 34.521269][ T3074] CPU: 0 PID: 3074 Comm: syz-executor219 Not tainted 6.1.0-rc6-syzkaller-32653-g65762d97e6fa #0 [ 34.523878][ T3074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 34.526465][ T3074] Call trace: [ 34.527378][ T3074] dump_backtrace+0x1c4/0x1f0 [ 34.528690][ T3074] show_stack+0x2c/0x54 [ 34.529734][ T3074] dump_stack_lvl+0x104/0x16c [ 34.530853][ T3074] dump_stack+0x1c/0x58 [ 34.531949][ T3074] print_irq_inversion_bug+0x2f8/0x300 [ 34.533356][ T3074] mark_lock_irq+0x3ec/0x4b4 [ 34.534499][ T3074] mark_lock+0x154/0x1b4 [ 34.535567][ T3074] __lock_acquire+0x618/0x3084 [ 34.536766][ T3074] lock_acquire+0x100/0x1f8 [ 34.537908][ T3074] _raw_write_lock+0x54/0x6c [ 34.538968][ T3074] l2tp_tunnel_register+0x354/0x79c [ 34.540292][ T3074] pppol2tp_connect+0x3e8/0x6c4 [ 34.541379][ T3074] __sys_connect+0x184/0x190 [ 34.542482][ T3074] __arm64_sys_connect+0x28/0x3c [ 34.543686][ T3074] el0_svc_common+0x138/0x220 [ 34.544851][ T3074] do_el0_svc+0x48/0x164 [ 34.545863][ T3074] el0_svc+0x58/0x150 [ 34.546851][ T3074] el0t_64_sync_handler+0x84/0xf0 [ 34.548125][ T3074] el0t_64_sync+0x190/0x194 [ 34.549436][ T3074] BUG: sleeping function called from invalid context at include/linux/percpu-rwsem.h:49 [ 34.551632][ T3074] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 3074, name: syz-executor219 [ 34.553717][ T3074] preempt_count: 1, expected: 0 [ 34.554766][ T3074] RCU nest depth: 0, expected: 0 [ 34.555846][ T3074] INFO: lockdep is turned off. [ 34.556953][ T3074] Preemption disabled at: [ 34.556958][ T3074] [] l2tp_tunnel_register+0x354/0x79c [ 34.559390][ T3074] CPU: 0 PID: 3074 Comm: syz-executor219 Not tainted 6.1.0-rc6-syzkaller-32653-g65762d97e6fa #0 [ 34.561745][ T3074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 34.564177][ T3074] Call trace: [ 34.564932][ T3074] dump_backtrace+0x1c4/0x1f0 [ 34.566056][ T3074] show_stack+0x2c/0x54 [ 34.567069][ T3074] dump_stack_lvl+0x104/0x16c [ 34.568136][ T3074] dump_stack+0x1c/0x58 [ 34.569126][ T3074] __might_resched+0x208/0x218 [ 34.570195][ T3074] __might_sleep+0x48/0x78 [ 34.573191][ T3074] cpus_read_lock+0x28/0x1e0 [ 34.574306][ T3074] static_key_slow_inc+0x1c/0x38 [ 34.575412][ T3074] udpv6_encap_enable+0x1c/0x28 [ 34.576519][ T3074] setup_udp_tunnel_sock+0xec/0x124 [ 34.577629][ T3074] l2tp_tunnel_register+0x68c/0x79c [ 34.578791][ T3074] pppol2tp_connect+0x3e8/0x6c4 [ 34.579966][ T3074] __sys_connect+0x184/0x190 [ 34.580902][ T3074] __arm64_sys_connect+0x28/0x3c [ 34.581903][ T3074] el0_svc_common+0x138/0x220 [ 34.582875][ T3074] do_el0_svc+0x48/0x164 [ 34.583842][ T3074] el0_svc+0x58/0x150 [ 34.584684][ T3074] el0t_64_sync_handler+0x84/0xf0 [ 34.585922][ T3074] el0t_64_sync+0x190/0x194