Warning: Permanently added '10.128.0.3' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 30.349711][ T3072] [ 30.350287][ T3072] ======================================================== [ 30.351859][ T3072] WARNING: possible irq lock inversion dependency detected [ 30.353422][ T3072] 6.1.0-rc6-syzkaller-32653-g65762d97e6fa #0 Not tainted [ 30.354947][ T3072] -------------------------------------------------------- [ 30.356563][ T3072] syz-executor299/3072 just changed the state of lock: [ 30.358177][ T3072] ffff0000cb577bb8 (clock-AF_INET6){+++.}-{2:2}, at: l2tp_tunnel_register+0x354/0x79c [ 30.360440][ T3072] but this lock was taken by another, SOFTIRQ-safe lock in the past: [ 30.362239][ T3072] (&tcp_hashinfo.bhash[i].lock){+.-.}-{2:2} [ 30.362249][ T3072] [ 30.362249][ T3072] [ 30.362249][ T3072] and interrupts could create inverse lock ordering between them. [ 30.362249][ T3072] [ 30.366713][ T3072] [ 30.366713][ T3072] other info that might help us debug this: [ 30.368617][ T3072] Possible interrupt unsafe locking scenario: [ 30.368617][ T3072] [ 30.370668][ T3072] CPU0 CPU1 [ 30.371900][ T3072] ---- ---- [ 30.373083][ T3072] lock(clock-AF_INET6); [ 30.374033][ T3072] local_irq_disable(); [ 30.375494][ T3072] lock(&tcp_hashinfo.bhash[i].lock); [ 30.377309][ T3072] lock(clock-AF_INET6); [ 30.378865][ T3072] [ 30.379648][ T3072] lock(&tcp_hashinfo.bhash[i].lock); [ 30.380916][ T3072] [ 30.380916][ T3072] *** DEADLOCK *** [ 30.380916][ T3072] [ 30.382760][ T3072] 1 lock held by syz-executor299/3072: [ 30.383992][ T3072] #0: ffff0000cb16c930 (sk_lock-AF_PPPOX){+.+.}-{0:0}, at: pppol2tp_connect+0x184/0x6c4 [ 30.386209][ T3072] [ 30.386209][ T3072] the shortest dependencies between 2nd lock and 1st lock: [ 30.388340][ T3072] -> (&tcp_hashinfo.bhash[i].lock){+.-.}-{2:2} { [ 30.389762][ T3072] HARDIRQ-ON-W at: [ 30.390747][ T3072] lock_acquire+0x100/0x1f8 [ 30.392185][ T3072] _raw_spin_lock_bh+0x54/0x6c [ 30.393633][ T3072] inet_csk_get_port+0xe0/0xaf0 [ 30.395132][ T3072] __inet6_bind+0x688/0x8ac [ 30.396494][ T3072] inet6_bind+0xf4/0x150 [ 30.397959][ T3072] rds_tcp_listen_init+0x14c/0x1f0 [ 30.399538][ T3072] rds_tcp_init_net+0xcc/0x1dc [ 30.401056][ T3072] ops_init+0xe4/0x2e4 [ 30.402325][ T3072] register_pernet_operations+0x108/0x264 [ 30.404031][ T3072] register_pernet_device+0x3c/0x94 [ 30.405584][ T3072] rds_tcp_init+0x74/0xe0 [ 30.406945][ T3072] do_one_initcall+0x118/0x22c [ 30.408458][ T3072] do_initcall_level+0xac/0xe4 [ 30.409938][ T3072] do_initcalls+0x58/0xa8 [ 30.411377][ T3072] do_basic_setup+0x20/0x2c [ 30.412723][ T3072] kernel_init_freeable+0xb8/0x148 [ 30.414269][ T3072] kernel_init+0x24/0x290 [ 30.415667][ T3072] ret_from_fork+0x10/0x20 [ 30.417103][ T3072] IN-SOFTIRQ-W at: [ 30.418021][ T3072] lock_acquire+0x100/0x1f8 [ 30.419449][ T3072] _raw_spin_lock+0x54/0x6c [ 30.420796][ T3072] __inet_inherit_port+0x124/0x9ac [ 30.422366][ T3072] tcp_v4_syn_recv_sock+0x790/0x848 [ 30.424004][ T3072] tcp_check_req+0x75c/0x8e4 [ 30.425489][ T3072] tcp_v4_rcv+0xad4/0x11e8 [ 30.426888][ T3072] ip_protocol_deliver_rcu+0x224/0x414 [ 30.428488][ T3072] ip_local_deliver_finish+0x124/0x200 [ 30.430124][ T3072] ip_local_deliver+0xd0/0xf4 [ 30.431566][ T3072] ip_sublist_rcv+0x40c/0x474 [ 30.433087][ T3072] ip_list_rcv+0x184/0x1c8 [ 30.434500][ T3072] __netif_receive_skb_list_core+0x1f8/0x2b0 [ 30.436277][ T3072] __netif_receive_skb_list+0x16c/0x1d0 [ 30.437877][ T3072] netif_receive_skb_list_internal+0x1e8/0x340 [ 30.439607][ T3072] napi_complete_done+0x140/0x354 [ 30.441185][ T3072] gve_napi_poll+0xcc/0x1b4 [ 30.442608][ T3072] __napi_poll+0x5c/0x24c [ 30.443990][ T3072] napi_poll+0x110/0x484 [ 30.445388][ T3072] net_rx_action+0x18c/0x414 [ 30.446851][ T3072] _stext+0x168/0x37c [ 30.448086][ T3072] ____do_softirq+0x14/0x20 [ 30.449611][ T3072] call_on_irq_stack+0x2c/0x54 [ 30.451012][ T3072] do_softirq_own_stack+0x20/0x2c [ 30.452480][ T3072] invoke_softirq+0x70/0xbc [ 30.453896][ T3072] __irq_exit_rcu+0xf0/0x140 [ 30.455368][ T3072] irq_exit_rcu+0x10/0x40 [ 30.456764][ T3072] el1_interrupt+0x38/0x68 [ 30.458094][ T3072] el1h_64_irq_handler+0x18/0x24 [ 30.459660][ T3072] el1h_64_irq+0x64/0x68 [ 30.461074][ T3072] arch_local_irq_restore+0x8/0x10 [ 30.462598][ T3072] rcu_read_lock_sched_held+0x34/0x70 [ 30.464234][ T3072] trace_lock_release+0x6c/0x168 [ 30.465754][ T3072] lock_release+0x3c/0x2b4 [ 30.467174][ T3072] rcu_lock_release+0x28/0x34 [ 30.468698][ T3072] folio_memcg_unlock+0x90/0x9c [ 30.470299][ T3072] unlock_page_memcg+0x1c/0x4c [ 30.471834][ T3072] page_remove_rmap+0x128/0x2c0 [ 30.473313][ T3072] zap_pte_range+0x3e8/0x1010 [ 30.474758][ T3072] zap_pmd_range+0x29c/0x460 [ 30.476148][ T3072] unmap_page_range+0x1d8/0x488 [ 30.477748][ T3072] unmap_vmas+0x14c/0x224 [ 30.479082][ T3072] exit_mmap+0xdc/0x390 [ 30.480461][ T3072] __mmput+0x90/0x204 [ 30.481789][ T3072] mmput+0x64/0xa0 [ 30.483144][ T3072] exit_mm+0x16c/0x1c0 [ 30.484460][ T3072] do_exit+0x264/0xcac [ 30.485737][ T3072] __arm64_sys_exit_group+0x0/0x18 [ 30.487296][ T3072] __wake_up_parent+0x0/0x40 [ 30.488759][ T3072] el0_svc_common+0x138/0x220 [ 30.490236][ T3072] do_el0_svc+0x48/0x164 [ 30.491604][ T3072] el0_svc+0x58/0x150 [ 30.492888][ T3072] el0t_64_sync_handler+0x84/0xf0 [ 30.494504][ T3072] el0t_64_sync+0x190/0x194 [ 30.495866][ T3072] INITIAL USE at: [ 30.496592][ T3072] lock_acquire+0x100/0x1f8 [ 30.497719][ T3072] _raw_spin_lock_bh+0x54/0x6c [ 30.498899][ T3072] inet_csk_get_port+0xe0/0xaf0 [ 30.500095][ T3072] __inet6_bind+0x688/0x8ac [ 30.501604][ T3072] inet6_bind+0xf4/0x150 [ 30.503004][ T3072] rds_tcp_listen_init+0x14c/0x1f0 [ 30.504496][ T3072] rds_tcp_init_net+0xcc/0x1dc [ 30.505946][ T3072] ops_init+0xe4/0x2e4 [ 30.507332][ T3072] register_pernet_operations+0x108/0x264 [ 30.509106][ T3072] register_pernet_device+0x3c/0x94 [ 30.510714][ T3072] rds_tcp_init+0x74/0xe0 [ 30.512073][ T3072] do_one_initcall+0x118/0x22c [ 30.513653][ T3072] do_initcall_level+0xac/0xe4 [ 30.515273][ T3072] do_initcalls+0x58/0xa8 [ 30.516709][ T3072] do_basic_setup+0x20/0x2c [ 30.518064][ T3072] kernel_init_freeable+0xb8/0x148 [ 30.519716][ T3072] kernel_init+0x24/0x290 [ 30.521168][ T3072] ret_from_fork+0x10/0x20 [ 30.522596][ T3072] } [ 30.523175][ T3072] ... key at: [] tcp_init.__key.22+0x0/0x10 [ 30.525060][ T3072] ... acquired at: [ 30.525895][ T3072] _raw_read_lock_bh+0x64/0x7c [ 30.527038][ T3072] sock_i_uid+0x24/0x58 [ 30.528007][ T3072] inet_csk_get_port+0x674/0xaf0 [ 30.529245][ T3072] __inet6_bind+0x688/0x8ac [ 30.530279][ T3072] inet6_bind+0xf4/0x150 [ 30.531289][ T3072] __sys_bind+0x148/0x1b0 [ 30.532372][ T3072] __arm64_sys_bind+0x28/0x3c [ 30.533534][ T3072] el0_svc_common+0x138/0x220 [ 30.534650][ T3072] do_el0_svc+0x48/0x164 [ 30.535609][ T3072] el0_svc+0x58/0x150 [ 30.536604][ T3072] el0t_64_sync_handler+0x84/0xf0 [ 30.537820][ T3072] el0t_64_sync+0x190/0x194 [ 30.538843][ T3072] [ 30.539487][ T3072] -> (clock-AF_INET6){+++.}-{2:2} { [ 30.540638][ T3072] HARDIRQ-ON-W at: [ 30.541585][ T3072] lock_acquire+0x100/0x1f8 [ 30.543038][ T3072] _raw_write_lock_bh+0x54/0x6c [ 30.544401][ T3072] sk_common_release+0x58/0x1d4 [ 30.546019][ T3072] udp_lib_close+0x20/0x30 [ 30.547337][ T3072] inet_release+0xc8/0xe4 [ 30.548673][ T3072] inet6_release+0x3c/0x58 [ 30.550096][ T3072] sock_close+0x50/0xf0 [ 30.551462][ T3072] __fput+0x198/0x3e4 [ 30.552783][ T3072] ____fput+0x20/0x30 [ 30.554038][ T3072] task_work_run+0x100/0x148 [ 30.555477][ T3072] do_notify_resume+0x174/0x1f0 [ 30.556924][ T3072] el0_svc+0x9c/0x150 [ 30.558197][ T3072] el0t_64_sync_handler+0x84/0xf0 [ 30.559655][ T3072] el0t_64_sync+0x190/0x194 [ 30.561016][ T3072] HARDIRQ-ON-R at: [ 30.561845][ T3072] lock_acquire+0x100/0x1f8 [ 30.563266][ T3072] _raw_read_lock_bh+0x64/0x7c [ 30.564703][ T3072] sock_i_uid+0x24/0x58 [ 30.566028][ T3072] udp_lib_lport_inuse+0x44/0x268 [ 30.567598][ T3072] udp_lib_get_port+0x2bc/0x8f8 [ 30.569191][ T3072] udp_v6_get_port+0x60/0x74 [ 30.570611][ T3072] __inet6_bind+0x688/0x8ac [ 30.572007][ T3072] inet6_bind+0xf4/0x150 [ 30.573470][ T3072] __sys_bind+0x148/0x1b0 [ 30.574798][ T3072] __arm64_sys_bind+0x28/0x3c [ 30.576279][ T3072] el0_svc_common+0x138/0x220 [ 30.577715][ T3072] do_el0_svc+0x48/0x164 [ 30.579084][ T3072] el0_svc+0x58/0x150 [ 30.580365][ T3072] el0t_64_sync_handler+0x84/0xf0 [ 30.581931][ T3072] el0t_64_sync+0x190/0x194 [ 30.583334][ T3072] SOFTIRQ-ON-W at: [ 30.584226][ T3072] lock_acquire+0x100/0x1f8 [ 30.585746][ T3072] _raw_write_lock+0x54/0x6c [ 30.587112][ T3072] l2tp_tunnel_register+0x354/0x79c [ 30.588710][ T3072] pppol2tp_connect+0x3e8/0x6c4 [ 30.590200][ T3072] __sys_connect+0x184/0x190 [ 30.591672][ T3072] __arm64_sys_connect+0x28/0x3c [ 30.593139][ T3072] el0_svc_common+0x138/0x220 [ 30.594573][ T3072] do_el0_svc+0x48/0x164 [ 30.595950][ T3072] el0_svc+0x58/0x150 [ 30.597268][ T3072] el0t_64_sync_handler+0x84/0xf0 [ 30.598723][ T3072] el0t_64_sync+0x190/0x194 [ 30.599849][ T3072] INITIAL USE at: [ 30.600558][ T3072] lock_acquire+0x100/0x1f8 [ 30.601652][ T3072] _raw_write_lock_bh+0x54/0x6c [ 30.603037][ T3072] sk_common_release+0x58/0x1d4 [ 30.604535][ T3072] udp_lib_close+0x20/0x30 [ 30.605807][ T3072] inet_release+0xc8/0xe4 [ 30.607218][ T3072] inet6_release+0x3c/0x58 [ 30.608562][ T3072] sock_close+0x50/0xf0 [ 30.609892][ T3072] __fput+0x198/0x3e4 [ 30.611135][ T3072] ____fput+0x20/0x30 [ 30.612393][ T3072] task_work_run+0x100/0x148 [ 30.613711][ T3072] do_notify_resume+0x174/0x1f0 [ 30.615156][ T3072] el0_svc+0x9c/0x150 [ 30.616482][ T3072] el0t_64_sync_handler+0x84/0xf0 [ 30.618045][ T3072] el0t_64_sync+0x190/0x194 [ 30.619531][ T3072] INITIAL READ USE at: [ 30.620520][ T3072] lock_acquire+0x100/0x1f8 [ 30.622056][ T3072] _raw_read_lock_bh+0x64/0x7c [ 30.623657][ T3072] sock_i_uid+0x24/0x58 [ 30.625104][ T3072] udp_lib_lport_inuse+0x44/0x268 [ 30.626818][ T3072] udp_lib_get_port+0x2bc/0x8f8 [ 30.628418][ T3072] udp_v6_get_port+0x60/0x74 [ 30.629898][ T3072] __inet6_bind+0x688/0x8ac [ 30.631419][ T3072] inet6_bind+0xf4/0x150 [ 30.632841][ T3072] __sys_bind+0x148/0x1b0 [ 30.634260][ T3072] __arm64_sys_bind+0x28/0x3c [ 30.635788][ T3072] el0_svc_common+0x138/0x220 [ 30.637371][ T3072] do_el0_svc+0x48/0x164 [ 30.638829][ T3072] el0_svc+0x58/0x150 [ 30.640213][ T3072] el0t_64_sync_handler+0x84/0xf0 [ 30.641864][ T3072] el0t_64_sync+0x190/0x194 [ 30.643309][ T3072] } [ 30.643861][ T3072] ... key at: [] af_callback_keys+0xa0/0x2e0 [ 30.645688][ T3072] ... acquired at: [ 30.646560][ T3072] mark_lock+0x154/0x1b4 [ 30.647583][ T3072] __lock_acquire+0x618/0x3084 [ 30.648701][ T3072] lock_acquire+0x100/0x1f8 [ 30.649821][ T3072] _raw_write_lock+0x54/0x6c [ 30.650905][ T3072] l2tp_tunnel_register+0x354/0x79c [ 30.652119][ T3072] pppol2tp_connect+0x3e8/0x6c4 [ 30.653264][ T3072] __sys_connect+0x184/0x190 [ 30.654369][ T3072] __arm64_sys_connect+0x28/0x3c [ 30.655587][ T3072] el0_svc_common+0x138/0x220 [ 30.656478][ T3072] do_el0_svc+0x48/0x164 [ 30.657289][ T3072] el0_svc+0x58/0x150 [ 30.658047][ T3072] el0t_64_sync_handler+0x84/0xf0 [ 30.658997][ T3072] el0t_64_sync+0x190/0x194 [ 30.659848][ T3072] [ 30.660394][ T3072] [ 30.660394][ T3072] stack backtrace: [ 30.661717][ T3072] CPU: 0 PID: 3072 Comm: syz-executor299 Not tainted 6.1.0-rc6-syzkaller-32653-g65762d97e6fa #0 [ 30.664154][ T3072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 30.666419][ T3072] Call trace: [ 30.667237][ T3072] dump_backtrace+0x1c4/0x1f0 [ 30.668314][ T3072] show_stack+0x2c/0x54 [ 30.669218][ T3072] dump_stack_lvl+0x104/0x16c [ 30.670278][ T3072] dump_stack+0x1c/0x58 [ 30.671252][ T3072] print_irq_inversion_bug+0x2f8/0x300 [ 30.672529][ T3072] mark_lock_irq+0x3ec/0x4b4 [ 30.673551][ T3072] mark_lock+0x154/0x1b4 [ 30.674503][ T3072] __lock_acquire+0x618/0x3084 [ 30.675561][ T3072] lock_acquire+0x100/0x1f8 [ 30.676608][ T3072] _raw_write_lock+0x54/0x6c [ 30.677687][ T3072] l2tp_tunnel_register+0x354/0x79c [ 30.678888][ T3072] pppol2tp_connect+0x3e8/0x6c4 [ 30.680023][ T3072] __sys_connect+0x184/0x190 [ 30.681066][ T3072] __arm64_sys_connect+0x28/0x3c [ 30.682273][ T3072] el0_svc_common+0x138/0x220 [ 30.683299][ T3072] do_el0_svc+0x48/0x164 [ 30.684334][ T3072] el0_svc+0x58/0x150 [ 30.685285][ T3072] el0t_64_sync_handler+0x84/0xf0 [ 30.686413][ T3072] el0t_64_sync+0x190/0x194 [ 30.687612][ T3072] BUG: sleeping function called from invalid context at include/linux/percpu-rwsem.h:49 [ 30.689752][ T3072] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 3072, name: syz-executor299 [ 30.691944][ T3072] preempt_count: 1, expected: 0 [ 30.692974][ T3072] RCU nest depth: 0, expected: 0 [ 30.693967][ T3072] INFO: lockdep is turned off. [ 30.695040][ T3072] Preemption disabled at: [ 30.695045][ T3072] [] l2tp_tunnel_register+0x354/0x79c [ 30.697573][ T3072] CPU: 0 PID: 3072 Comm: syz-executor299 Not tainted 6.1.0-rc6-syzkaller-32653-g65762d97e6fa #0 [ 30.699835][ T3072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 30.702012][ T3072] Call trace: [ 30.702708][ T3072] dump_backtrace+0x1c4/0x1f0 [ 30.703629][ T3072] show_stack+0x2c/0x54 [ 30.704572][ T3072] dump_stack_lvl+0x104/0x16c [ 30.705633][ T3072] dump_stack+0x1c/0x58 [ 30.706539][ T3072] __might_resched+0x208/0x218 [ 30.707591][ T3072] __might_sleep+0x48/0x78 [ 30.708523][ T3072] cpus_read_lock+0x28/0x1e0 [ 30.709566][ T3072] static_key_slow_inc+0x1c/0x38 [ 30.710626][ T3072] udpv6_encap_enable+0x1c/0x28 [ 30.711689][ T3072] setup_udp_tunnel_sock+0xec/0x124 [ 30.712834][ T3072] l2tp_tunnel_register+0x68c/0x79c [ 30.714005][ T3072] pppol2tp_connect+0x3e8/0x6c4 [ 30.715047][ T3072] __sys_connect+0x184/0x190 [ 30.716053][ T3072] __arm64_sys_connect+0x28/0x3c [ 30.717174][ T3072] el0_svc_common+0x138/0x220 [ 30.718224][ T3072] do_el0_svc+0x48/0x164 [ 30.719168][ T3072] el0_svc+0x58/0x150 [ 30.720075][ T3072] el0t_64_sync_handler+0x84/0xf0 [ 30.721250][ T3072] el0t_64_sync+0x190/0x194