Warning: Permanently added '10.128.0.242' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 26.894675][ T3072] [ 26.895319][ T3072] ======================================================== [ 26.897176][ T3072] WARNING: possible irq lock inversion dependency detected [ 26.898965][ T3072] 6.1.0-rc6-syzkaller-32653-g65762d97e6fa #0 Not tainted [ 26.900714][ T3072] -------------------------------------------------------- [ 26.902574][ T3072] syz-executor219/3072 just changed the state of lock: [ 26.904337][ T3072] ffff0000cb86ceb8 (clock-AF_INET6){+++.}-{2:2}, at: l2tp_tunnel_register+0x354/0x79c [ 26.906852][ T3072] but this lock was taken by another, SOFTIRQ-safe lock in the past: [ 26.908971][ T3072] (&tcp_hashinfo.bhash[i].lock){+.-.}-{2:2} [ 26.908981][ T3072] [ 26.908981][ T3072] [ 26.908981][ T3072] and interrupts could create inverse lock ordering between them. [ 26.908981][ T3072] [ 26.914297][ T3072] [ 26.914297][ T3072] other info that might help us debug this: [ 26.916551][ T3072] Possible interrupt unsafe locking scenario: [ 26.916551][ T3072] [ 26.918751][ T3072] CPU0 CPU1 [ 26.920117][ T3072] ---- ---- [ 26.921502][ T3072] lock(clock-AF_INET6); [ 26.922621][ T3072] local_irq_disable(); [ 26.924364][ T3072] lock(&tcp_hashinfo.bhash[i].lock); [ 26.926467][ T3072] lock(clock-AF_INET6); [ 26.928273][ T3072] [ 26.929125][ T3072] lock(&tcp_hashinfo.bhash[i].lock); [ 26.930520][ T3072] [ 26.930520][ T3072] *** DEADLOCK *** [ 26.930520][ T3072] [ 26.932785][ T3072] 1 lock held by syz-executor219/3072: [ 26.934225][ T3072] #0: ffff0000c6538930 (sk_lock-AF_PPPOX){+.+.}-{0:0}, at: pppol2tp_connect+0x184/0x6c4 [ 26.936768][ T3072] [ 26.936768][ T3072] the shortest dependencies between 2nd lock and 1st lock: [ 26.939239][ T3072] -> (&tcp_hashinfo.bhash[i].lock){+.-.}-{2:2} { [ 26.940936][ T3072] HARDIRQ-ON-W at: [ 26.941967][ T3072] lock_acquire+0x100/0x1f8 [ 26.943763][ T3072] _raw_spin_lock_bh+0x54/0x6c [ 26.945437][ T3072] inet_csk_get_port+0xe0/0xaf0 [ 26.947213][ T3072] __inet6_bind+0x688/0x8ac [ 26.948889][ T3072] inet6_bind+0xf4/0x150 [ 26.950427][ T3072] rds_tcp_listen_init+0x14c/0x1f0 [ 26.952172][ T3072] rds_tcp_init_net+0xcc/0x1dc [ 26.954088][ T3072] ops_init+0xe4/0x2e4 [ 26.955636][ T3072] register_pernet_operations+0x108/0x264 [ 26.957575][ T3072] register_pernet_device+0x3c/0x94 [ 26.959375][ T3072] rds_tcp_init+0x74/0xe0 [ 26.960974][ T3072] do_one_initcall+0x118/0x22c [ 26.962701][ T3072] do_initcall_level+0xac/0xe4 [ 26.964387][ T3072] do_initcalls+0x58/0xa8 [ 26.965993][ T3072] do_basic_setup+0x20/0x2c [ 26.967662][ T3072] kernel_init_freeable+0xb8/0x148 [ 26.969531][ T3072] kernel_init+0x24/0x290 [ 26.971065][ T3072] ret_from_fork+0x10/0x20 [ 26.972675][ T3072] IN-SOFTIRQ-W at: [ 26.973715][ T3072] lock_acquire+0x100/0x1f8 [ 26.975380][ T3072] _raw_spin_lock+0x54/0x6c [ 26.977254][ T3072] __inet_inherit_port+0x124/0x9ac [ 26.979298][ T3072] tcp_v4_syn_recv_sock+0x790/0x848 [ 26.981241][ T3072] tcp_check_req+0x75c/0x8e4 [ 26.982868][ T3072] tcp_v4_rcv+0xad4/0x11e8 [ 26.984435][ T3072] ip_protocol_deliver_rcu+0x224/0x414 [ 26.986304][ T3072] ip_local_deliver_finish+0x124/0x200 [ 26.988293][ T3072] ip_local_deliver+0xd0/0xf4 [ 26.989954][ T3072] ip_sublist_rcv+0x40c/0x474 [ 26.991617][ T3072] ip_list_rcv+0x184/0x1c8 [ 26.993186][ T3072] __netif_receive_skb_list_core+0x1f8/0x2b0 [ 26.995331][ T3072] __netif_receive_skb_list+0x16c/0x1d0 [ 26.997241][ T3072] netif_receive_skb_list_internal+0x1e8/0x340 [ 26.999617][ T3072] napi_complete_done+0x140/0x354 [ 27.001605][ T3072] gve_napi_poll+0xcc/0x1b4 [ 27.003379][ T3072] __napi_poll+0x5c/0x24c [ 27.004960][ T3072] napi_poll+0x110/0x484 [ 27.006519][ T3072] net_rx_action+0x18c/0x414 [ 27.008207][ T3072] _stext+0x168/0x37c [ 27.009721][ T3072] ____do_softirq+0x14/0x20 [ 27.011367][ T3072] call_on_irq_stack+0x2c/0x54 [ 27.013159][ T3072] do_softirq_own_stack+0x20/0x2c [ 27.015127][ T3072] invoke_softirq+0x70/0xbc [ 27.016771][ T3072] __irq_exit_rcu+0xf0/0x140 [ 27.018501][ T3072] irq_exit_rcu+0x10/0x40 [ 27.020135][ T3072] el1_interrupt+0x38/0x68 [ 27.021786][ T3072] el1h_64_irq_handler+0x18/0x24 [ 27.023620][ T3072] el1h_64_irq+0x64/0x68 [ 27.025311][ T3072] arch_local_irq_enable+0xc/0x18 [ 27.027046][ T3072] default_idle_call+0x48/0xb8 [ 27.028833][ T3072] do_idle+0x110/0x2d4 [ 27.030363][ T3072] cpu_startup_entry+0x24/0x28 [ 27.032065][ T3072] kernel_init+0x0/0x290 [ 27.033536][ T3072] start_kernel+0x0/0x620 [ 27.035317][ T3072] start_kernel+0x450/0x620 [ 27.036959][ T3072] __primary_switched+0xb4/0xbc [ 27.038733][ T3072] INITIAL USE at: [ 27.039795][ T3072] lock_acquire+0x100/0x1f8 [ 27.041383][ T3072] _raw_spin_lock_bh+0x54/0x6c [ 27.043059][ T3072] inet_csk_get_port+0xe0/0xaf0 [ 27.044840][ T3072] __inet6_bind+0x688/0x8ac [ 27.046508][ T3072] inet6_bind+0xf4/0x150 [ 27.048099][ T3072] rds_tcp_listen_init+0x14c/0x1f0 [ 27.049887][ T3072] rds_tcp_init_net+0xcc/0x1dc [ 27.051609][ T3072] ops_init+0xe4/0x2e4 [ 27.053115][ T3072] register_pernet_operations+0x108/0x264 [ 27.055054][ T3072] register_pernet_device+0x3c/0x94 [ 27.056872][ T3072] rds_tcp_init+0x74/0xe0 [ 27.058572][ T3072] do_one_initcall+0x118/0x22c [ 27.060413][ T3072] do_initcall_level+0xac/0xe4 [ 27.062252][ T3072] do_initcalls+0x58/0xa8 [ 27.063993][ T3072] do_basic_setup+0x20/0x2c [ 27.065629][ T3072] kernel_init_freeable+0xb8/0x148 [ 27.067678][ T3072] kernel_init+0x24/0x290 [ 27.069300][ T3072] ret_from_fork+0x10/0x20 [ 27.070718][ T3072] } [ 27.071316][ T3072] ... key at: [] tcp_init.__key.22+0x0/0x10 [ 27.073477][ T3072] ... acquired at: [ 27.074481][ T3072] _raw_read_lock_bh+0x64/0x7c [ 27.075764][ T3072] sock_i_uid+0x24/0x58 [ 27.076907][ T3072] inet_csk_get_port+0x674/0xaf0 [ 27.078318][ T3072] __inet6_bind+0x688/0x8ac [ 27.079512][ T3072] inet6_bind+0xf4/0x150 [ 27.080643][ T3072] __sys_bind+0x148/0x1b0 [ 27.081824][ T3072] __arm64_sys_bind+0x28/0x3c [ 27.083210][ T3072] el0_svc_common+0x138/0x220 [ 27.084549][ T3072] do_el0_svc+0x48/0x164 [ 27.085847][ T3072] el0_svc+0x58/0x150 [ 27.086906][ T3072] el0t_64_sync_handler+0x84/0xf0 [ 27.088293][ T3072] el0t_64_sync+0x190/0x194 [ 27.089500][ T3072] [ 27.090071][ T3072] -> (clock-AF_INET6){+++.}-{2:2} { [ 27.091415][ T3072] HARDIRQ-ON-W at: [ 27.092433][ T3072] lock_acquire+0x100/0x1f8 [ 27.094137][ T3072] _raw_write_lock_bh+0x54/0x6c [ 27.095843][ T3072] sk_common_release+0x58/0x1d4 [ 27.097566][ T3072] udp_lib_close+0x20/0x30 [ 27.099266][ T3072] inet_release+0xc8/0xe4 [ 27.101034][ T3072] inet6_release+0x3c/0x58 [ 27.102819][ T3072] sock_close+0x50/0xf0 [ 27.104365][ T3072] __fput+0x198/0x3e4 [ 27.105824][ T3072] ____fput+0x20/0x30 [ 27.107255][ T3072] task_work_run+0x100/0x148 [ 27.108866][ T3072] do_notify_resume+0x174/0x1f0 [ 27.110529][ T3072] el0_svc+0x9c/0x150 [ 27.112165][ T3072] el0t_64_sync_handler+0x84/0xf0 [ 27.114041][ T3072] el0t_64_sync+0x190/0x194 [ 27.115962][ T3072] HARDIRQ-ON-R at: [ 27.117011][ T3072] lock_acquire+0x100/0x1f8 [ 27.118800][ T3072] _raw_read_lock_bh+0x64/0x7c [ 27.120488][ T3072] sock_i_uid+0x24/0x58 [ 27.121981][ T3072] udp_lib_lport_inuse+0x44/0x268 [ 27.123836][ T3072] udp_lib_get_port+0x2bc/0x8f8 [ 27.125549][ T3072] udp_v6_get_port+0x60/0x74 [ 27.127165][ T3072] __inet6_bind+0x688/0x8ac [ 27.128818][ T3072] inet6_bind+0xf4/0x150 [ 27.130355][ T3072] __sys_bind+0x148/0x1b0 [ 27.131983][ T3072] __arm64_sys_bind+0x28/0x3c [ 27.133792][ T3072] el0_svc_common+0x138/0x220 [ 27.135687][ T3072] do_el0_svc+0x48/0x164 [ 27.137388][ T3072] el0_svc+0x58/0x150 [ 27.138887][ T3072] el0t_64_sync_handler+0x84/0xf0 [ 27.140651][ T3072] el0t_64_sync+0x190/0x194 [ 27.142253][ T3072] SOFTIRQ-ON-W at: [ 27.143297][ T3072] lock_acquire+0x100/0x1f8 [ 27.144893][ T3072] _raw_write_lock+0x54/0x6c [ 27.146605][ T3072] l2tp_tunnel_register+0x354/0x79c [ 27.148539][ T3072] pppol2tp_connect+0x3e8/0x6c4 [ 27.150358][ T3072] __sys_connect+0x184/0x190 [ 27.152119][ T3072] __arm64_sys_connect+0x28/0x3c [ 27.153844][ T3072] el0_svc_common+0x138/0x220 [ 27.155489][ T3072] do_el0_svc+0x48/0x164 [ 27.157064][ T3072] el0_svc+0x58/0x150 [ 27.158542][ T3072] el0t_64_sync_handler+0x84/0xf0 [ 27.160246][ T3072] el0t_64_sync+0x190/0x194 [ 27.161896][ T3072] INITIAL USE at: [ 27.162933][ T3072] lock_acquire+0x100/0x1f8 [ 27.164490][ T3072] _raw_write_lock_bh+0x54/0x6c [ 27.166193][ T3072] sk_common_release+0x58/0x1d4 [ 27.168067][ T3072] udp_lib_close+0x20/0x30 [ 27.169685][ T3072] inet_release+0xc8/0xe4 [ 27.171402][ T3072] inet6_release+0x3c/0x58 [ 27.173128][ T3072] sock_close+0x50/0xf0 [ 27.174824][ T3072] __fput+0x198/0x3e4 [ 27.176330][ T3072] ____fput+0x20/0x30 [ 27.177917][ T3072] task_work_run+0x100/0x148 [ 27.179498][ T3072] do_notify_resume+0x174/0x1f0 [ 27.181231][ T3072] el0_svc+0x9c/0x150 [ 27.182650][ T3072] el0t_64_sync_handler+0x84/0xf0 [ 27.184515][ T3072] el0t_64_sync+0x190/0x194 [ 27.186217][ T3072] INITIAL READ USE at: [ 27.187371][ T3072] lock_acquire+0x100/0x1f8 [ 27.189189][ T3072] _raw_read_lock_bh+0x64/0x7c [ 27.190962][ T3072] sock_i_uid+0x24/0x58 [ 27.192763][ T3072] udp_lib_lport_inuse+0x44/0x268 [ 27.194574][ T3072] udp_lib_get_port+0x2bc/0x8f8 [ 27.196356][ T3072] udp_v6_get_port+0x60/0x74 [ 27.198131][ T3072] __inet6_bind+0x688/0x8ac [ 27.199798][ T3072] inet6_bind+0xf4/0x150 [ 27.201384][ T3072] __sys_bind+0x148/0x1b0 [ 27.202997][ T3072] __arm64_sys_bind+0x28/0x3c [ 27.204722][ T3072] el0_svc_common+0x138/0x220 [ 27.206436][ T3072] do_el0_svc+0x48/0x164 [ 27.208043][ T3072] el0_svc+0x58/0x150 [ 27.209594][ T3072] el0t_64_sync_handler+0x84/0xf0 [ 27.211453][ T3072] el0t_64_sync+0x190/0x194 [ 27.213251][ T3072] } [ 27.213898][ T3072] ... key at: [] af_callback_keys+0xa0/0x2e0 [ 27.216005][ T3072] ... acquired at: [ 27.216961][ T3072] mark_lock+0x154/0x1b4 [ 27.218176][ T3072] __lock_acquire+0x618/0x3084 [ 27.219436][ T3072] lock_acquire+0x100/0x1f8 [ 27.220677][ T3072] _raw_write_lock+0x54/0x6c [ 27.221908][ T3072] l2tp_tunnel_register+0x354/0x79c [ 27.223344][ T3072] pppol2tp_connect+0x3e8/0x6c4 [ 27.224622][ T3072] __sys_connect+0x184/0x190 [ 27.225979][ T3072] __arm64_sys_connect+0x28/0x3c [ 27.227387][ T3072] el0_svc_common+0x138/0x220 [ 27.228682][ T3072] do_el0_svc+0x48/0x164 [ 27.229838][ T3072] el0_svc+0x58/0x150 [ 27.230986][ T3072] el0t_64_sync_handler+0x84/0xf0 [ 27.232463][ T3072] el0t_64_sync+0x190/0x194 [ 27.233722][ T3072] [ 27.234339][ T3072] [ 27.234339][ T3072] stack backtrace: [ 27.235858][ T3072] CPU: 1 PID: 3072 Comm: syz-executor219 Not tainted 6.1.0-rc6-syzkaller-32653-g65762d97e6fa #0 [ 27.238544][ T3072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 27.241174][ T3072] Call trace: [ 27.242010][ T3072] dump_backtrace+0x1c4/0x1f0 [ 27.243221][ T3072] show_stack+0x2c/0x54 [ 27.244276][ T3072] dump_stack_lvl+0x104/0x16c [ 27.245503][ T3072] dump_stack+0x1c/0x58 [ 27.246569][ T3072] print_irq_inversion_bug+0x2f8/0x300 [ 27.247984][ T3072] mark_lock_irq+0x3ec/0x4b4 [ 27.249169][ T3072] mark_lock+0x154/0x1b4 [ 27.250271][ T3072] __lock_acquire+0x618/0x3084 [ 27.251524][ T3072] lock_acquire+0x100/0x1f8 [ 27.252677][ T3072] _raw_write_lock+0x54/0x6c [ 27.253865][ T3072] l2tp_tunnel_register+0x354/0x79c [ 27.255269][ T3072] pppol2tp_connect+0x3e8/0x6c4 [ 27.256493][ T3072] __sys_connect+0x184/0x190 [ 27.257854][ T3072] __arm64_sys_connect+0x28/0x3c [ 27.259268][ T3072] el0_svc_common+0x138/0x220 [ 27.260585][ T3072] do_el0_svc+0x48/0x164 [ 27.261717][ T3072] el0_svc+0x58/0x150 [ 27.263012][ T3072] el0t_64_sync_handler+0x84/0xf0 [ 27.264340][ T3072] el0t_64_sync+0x190/0x194 [ 27.265553][ T3072] BUG: sleeping function called from invalid context at include/linux/percpu-rwsem.h:49 [ 27.268012][ T3072] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 3072, name: syz-executor219 [ 27.270412][ T3072] preempt_count: 1, expected: 0 [ 27.271635][ T3072] RCU nest depth: 0, expected: 0 [ 27.272894][ T3072] INFO: lockdep is turned off. [ 27.274091][ T3072] Preemption disabled at: [ 27.274096][ T3072] [] l2tp_tunnel_register+0x354/0x79c [ 27.276916][ T3072] CPU: 1 PID: 3072 Comm: syz-executor219 Not tainted 6.1.0-rc6-syzkaller-32653-g65762d97e6fa #0 [ 27.279570][ T3072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 27.282129][ T3072] Call trace: [ 27.282976][ T3072] dump_backtrace+0x1c4/0x1f0 [ 27.284127][ T3072] show_stack+0x2c/0x54 [ 27.285190][ T3072] dump_stack_lvl+0x104/0x16c [ 27.286440][ T3072] dump_stack+0x1c/0x58 [ 27.287529][ T3072] __might_resched+0x208/0x218 [ 27.288710][ T3072] __might_sleep+0x48/0x78 [ 27.289847][ T3072] cpus_read_lock+0x28/0x1e0 [ 27.291024][ T3072] static_key_slow_inc+0x1c/0x38 [ 27.292289][ T3072] udpv6_encap_enable+0x1c/0x28 [ 27.293532][ T3072] setup_udp_tunnel_sock+0xec/0x124 [ 27.294908][ T3072] l2tp_tunnel_register+0x68c/0x79c [ 27.296339][ T3072] pppol2tp_connect+0x3e8/0x6c4 [ 27.297783][ T3072] __sys_connect+0x184/0x190 [ 27.299018][ T3072] __arm64_sys_connect+0x28/0x3c [ 27.300358][ T3072] el0_svc_common+0x138/0x220 [ 27.301703][ T3072] do_el0_svc+0x48/0x164 [ 27.302871][ T3072] el0_svc+0x58/0x150 [ 27.303901][ T3072] el0t_64_sync_handler+0x84/0xf0 [ 27.305241][ T3072] el0t_64_sync+0x190/0x194