Warning: Permanently added '10.128.0.206' (ECDSA) to the list of known hosts. executing program [ 31.178114][ T3072] [ 31.178628][ T3072] ======================================================== [ 31.180196][ T3072] WARNING: possible irq lock inversion dependency detected [ 31.181758][ T3072] 6.1.0-rc6-syzkaller-32653-g65762d97e6fa #0 Not tainted [ 31.183251][ T3072] -------------------------------------------------------- [ 31.184816][ T3072] syz-executor164/3072 just changed the state of lock: [ 31.186277][ T3072] ffff0000cb22a938 (clock-AF_INET6){+++.}-{2:2}, at: l2tp_tunnel_register+0x354/0x79c [ 31.188375][ T3072] but this lock was taken by another, SOFTIRQ-safe lock in the past: [ 31.190091][ T3072] (&tcp_hashinfo.bhash[i].lock){+.-.}-{2:2} [ 31.190101][ T3072] [ 31.190101][ T3072] [ 31.190101][ T3072] and interrupts could create inverse lock ordering between them. [ 31.190101][ T3072] [ 31.194629][ T3072] [ 31.194629][ T3072] other info that might help us debug this: [ 31.196330][ T3072] Possible interrupt unsafe locking scenario: [ 31.196330][ T3072] [ 31.198102][ T3072] CPU0 CPU1 [ 31.199244][ T3072] ---- ---- [ 31.200398][ T3072] lock(clock-AF_INET6); [ 31.201367][ T3072] local_irq_disable(); [ 31.202817][ T3072] lock(&tcp_hashinfo.bhash[i].lock); [ 31.204552][ T3072] lock(clock-AF_INET6); [ 31.206058][ T3072] [ 31.206810][ T3072] lock(&tcp_hashinfo.bhash[i].lock); [ 31.208054][ T3072] [ 31.208054][ T3072] *** DEADLOCK *** [ 31.208054][ T3072] [ 31.209825][ T3072] 1 lock held by syz-executor164/3072: [ 31.211010][ T3072] #0: ffff0000cb268930 (sk_lock-AF_PPPOX){+.+.}-{0:0}, at: pppol2tp_connect+0x184/0x6c4 [ 31.213173][ T3072] [ 31.213173][ T3072] the shortest dependencies between 2nd lock and 1st lock: [ 31.215201][ T3072] -> (&tcp_hashinfo.bhash[i].lock){+.-.}-{2:2} { [ 31.216654][ T3072] HARDIRQ-ON-W at: [ 31.217563][ T3072] lock_acquire+0x100/0x1f8 [ 31.218946][ T3072] _raw_spin_lock_bh+0x54/0x6c [ 31.220326][ T3072] inet_csk_get_port+0xe0/0xaf0 [ 31.221762][ T3072] __inet6_bind+0x688/0x8ac [ 31.223176][ T3072] inet6_bind+0xf4/0x150 [ 31.224550][ T3072] rds_tcp_listen_init+0x14c/0x1f0 [ 31.226060][ T3072] rds_tcp_init_net+0xcc/0x1dc [ 31.227504][ T3072] ops_init+0xe4/0x2e4 [ 31.228818][ T3072] register_pernet_operations+0x108/0x264 [ 31.230423][ T3072] register_pernet_device+0x3c/0x94 [ 31.231923][ T3072] rds_tcp_init+0x74/0xe0 [ 31.233397][ T3072] do_one_initcall+0x118/0x22c [ 31.234957][ T3072] do_initcall_level+0xac/0xe4 [ 31.236484][ T3072] do_initcalls+0x58/0xa8 [ 31.237822][ T3072] do_basic_setup+0x20/0x2c [ 31.239284][ T3072] kernel_init_freeable+0xb8/0x148 [ 31.240865][ T3072] kernel_init+0x24/0x290 [ 31.242256][ T3072] ret_from_fork+0x10/0x20 [ 31.243624][ T3072] IN-SOFTIRQ-W at: [ 31.244564][ T3072] lock_acquire+0x100/0x1f8 [ 31.246033][ T3072] _raw_spin_lock+0x54/0x6c [ 31.247432][ T3072] __inet_inherit_port+0x124/0x9ac [ 31.249064][ T3072] tcp_v4_syn_recv_sock+0x790/0x848 [ 31.250570][ T3072] tcp_check_req+0x75c/0x8e4 [ 31.252016][ T3072] tcp_v4_rcv+0xad4/0x11e8 [ 31.253391][ T3072] ip_protocol_deliver_rcu+0x224/0x414 [ 31.255032][ T3072] ip_local_deliver_finish+0x124/0x200 [ 31.256626][ T3072] ip_local_deliver+0xd0/0xf4 [ 31.258048][ T3072] ip_sublist_rcv+0x40c/0x474 [ 31.259502][ T3072] ip_list_rcv+0x184/0x1c8 [ 31.260918][ T3072] __netif_receive_skb_list_core+0x1f8/0x2b0 [ 31.262679][ T3072] __netif_receive_skb_list+0x16c/0x1d0 [ 31.264331][ T3072] netif_receive_skb_list_internal+0x1e8/0x340 [ 31.266122][ T3072] napi_complete_done+0x140/0x354 [ 31.267594][ T3072] gve_napi_poll+0xcc/0x1b4 [ 31.269062][ T3072] __napi_poll+0x5c/0x24c [ 31.270475][ T3072] napi_poll+0x110/0x484 [ 31.271795][ T3072] net_rx_action+0x18c/0x414 [ 31.273291][ T3072] _stext+0x168/0x37c [ 31.274508][ T3072] ____do_softirq+0x14/0x20 [ 31.275837][ T3072] call_on_irq_stack+0x2c/0x54 [ 31.277163][ T3072] do_softirq_own_stack+0x20/0x2c [ 31.278589][ T3072] invoke_softirq+0x70/0xbc [ 31.279983][ T3072] __irq_exit_rcu+0xf0/0x140 [ 31.281372][ T3072] irq_exit_rcu+0x10/0x40 [ 31.282824][ T3072] el1_interrupt+0x38/0x68 [ 31.284273][ T3072] el1h_64_irq_handler+0x18/0x24 [ 31.285755][ T3072] el1h_64_irq+0x64/0x68 [ 31.287118][ T3072] arch_local_irq_enable+0xc/0x18 [ 31.288675][ T3072] default_idle_call+0x48/0xb8 [ 31.290226][ T3072] do_idle+0x110/0x2d4 [ 31.291538][ T3072] cpu_startup_entry+0x24/0x28 [ 31.293026][ T3072] kernel_init+0x0/0x290 [ 31.294413][ T3072] start_kernel+0x0/0x620 [ 31.295852][ T3072] start_kernel+0x450/0x620 [ 31.297339][ T3072] __primary_switched+0xb4/0xbc [ 31.298827][ T3072] INITIAL USE at: [ 31.299709][ T3072] lock_acquire+0x100/0x1f8 [ 31.301031][ T3072] _raw_spin_lock_bh+0x54/0x6c [ 31.302580][ T3072] inet_csk_get_port+0xe0/0xaf0 [ 31.304089][ T3072] __inet6_bind+0x688/0x8ac [ 31.305509][ T3072] inet6_bind+0xf4/0x150 [ 31.306873][ T3072] rds_tcp_listen_init+0x14c/0x1f0 [ 31.308382][ T3072] rds_tcp_init_net+0xcc/0x1dc [ 31.309838][ T3072] ops_init+0xe4/0x2e4 [ 31.311133][ T3072] register_pernet_operations+0x108/0x264 [ 31.312905][ T3072] register_pernet_device+0x3c/0x94 [ 31.314488][ T3072] rds_tcp_init+0x74/0xe0 [ 31.315968][ T3072] do_one_initcall+0x118/0x22c [ 31.317521][ T3072] do_initcall_level+0xac/0xe4 [ 31.319114][ T3072] do_initcalls+0x58/0xa8 [ 31.320518][ T3072] do_basic_setup+0x20/0x2c [ 31.322008][ T3072] kernel_init_freeable+0xb8/0x148 [ 31.323548][ T3072] kernel_init+0x24/0x290 [ 31.324901][ T3072] ret_from_fork+0x10/0x20 [ 31.326326][ T3072] } [ 31.326925][ T3072] ... key at: [] tcp_init.__key.22+0x0/0x10 [ 31.328789][ T3072] ... acquired at: [ 31.329672][ T3072] _raw_read_lock_bh+0x64/0x7c [ 31.330757][ T3072] sock_i_uid+0x24/0x58 [ 31.331736][ T3072] inet_csk_get_port+0x674/0xaf0 [ 31.332870][ T3072] __inet6_bind+0x688/0x8ac [ 31.333990][ T3072] inet6_bind+0xf4/0x150 [ 31.335020][ T3072] __sys_bind+0x148/0x1b0 [ 31.336053][ T3072] __arm64_sys_bind+0x28/0x3c [ 31.337112][ T3072] el0_svc_common+0x138/0x220 [ 31.338231][ T3072] do_el0_svc+0x48/0x164 [ 31.339216][ T3072] el0_svc+0x58/0x150 [ 31.340168][ T3072] el0t_64_sync_handler+0x84/0xf0 [ 31.341395][ T3072] el0t_64_sync+0x190/0x194 [ 31.342458][ T3072] [ 31.342969][ T3072] -> (clock-AF_INET6){+++.}-{2:2} { [ 31.344113][ T3072] HARDIRQ-ON-W at: [ 31.344949][ T3072] lock_acquire+0x100/0x1f8 [ 31.346356][ T3072] _raw_write_lock_bh+0x54/0x6c [ 31.347805][ T3072] sk_common_release+0x58/0x1d4 [ 31.349339][ T3072] udp_lib_close+0x20/0x30 [ 31.350731][ T3072] inet_release+0xc8/0xe4 [ 31.352101][ T3072] inet6_release+0x3c/0x58 [ 31.353463][ T3072] sock_close+0x50/0xf0 [ 31.354816][ T3072] __fput+0x198/0x3e4 [ 31.356180][ T3072] ____fput+0x20/0x30 [ 31.357512][ T3072] task_work_run+0x100/0x148 [ 31.358913][ T3072] do_notify_resume+0x174/0x1f0 [ 31.360334][ T3072] el0_svc+0x9c/0x150 [ 31.361621][ T3072] el0t_64_sync_handler+0x84/0xf0 [ 31.363162][ T3072] el0t_64_sync+0x190/0x194 [ 31.364575][ T3072] HARDIRQ-ON-R at: [ 31.365485][ T3072] lock_acquire+0x100/0x1f8 [ 31.366834][ T3072] _raw_read_lock_bh+0x64/0x7c [ 31.368313][ T3072] sock_i_uid+0x24/0x58 [ 31.369722][ T3072] udp_lib_lport_inuse+0x44/0x268 [ 31.371271][ T3072] udp_lib_get_port+0x2bc/0x8f8 [ 31.372847][ T3072] udp_v6_get_port+0x60/0x74 [ 31.374192][ T3072] __inet6_bind+0x688/0x8ac [ 31.375599][ T3072] inet6_bind+0xf4/0x150 [ 31.376957][ T3072] __sys_bind+0x148/0x1b0 [ 31.378239][ T3072] __arm64_sys_bind+0x28/0x3c [ 31.379701][ T3072] el0_svc_common+0x138/0x220 [ 31.381074][ T3072] do_el0_svc+0x48/0x164 [ 31.382433][ T3072] el0_svc+0x58/0x150 [ 31.383735][ T3072] el0t_64_sync_handler+0x84/0xf0 [ 31.385213][ T3072] el0t_64_sync+0x190/0x194 [ 31.386520][ T3072] SOFTIRQ-ON-W at: [ 31.387407][ T3072] lock_acquire+0x100/0x1f8 [ 31.388784][ T3072] _raw_write_lock+0x54/0x6c [ 31.390212][ T3072] l2tp_tunnel_register+0x354/0x79c [ 31.391787][ T3072] pppol2tp_connect+0x3e8/0x6c4 [ 31.393289][ T3072] __sys_connect+0x184/0x190 [ 31.394651][ T3072] __arm64_sys_connect+0x28/0x3c [ 31.396156][ T3072] el0_svc_common+0x138/0x220 [ 31.397717][ T3072] do_el0_svc+0x48/0x164 [ 31.399063][ T3072] el0_svc+0x58/0x150 [ 31.400330][ T3072] el0t_64_sync_handler+0x84/0xf0 [ 31.401799][ T3072] el0t_64_sync+0x190/0x194 [ 31.403202][ T3072] INITIAL USE at: [ 31.404110][ T3072] lock_acquire+0x100/0x1f8 [ 31.405497][ T3072] _raw_write_lock_bh+0x54/0x6c [ 31.407031][ T3072] sk_common_release+0x58/0x1d4 [ 31.408457][ T3072] udp_lib_close+0x20/0x30 [ 31.409763][ T3072] inet_release+0xc8/0xe4 [ 31.411084][ T3072] inet6_release+0x3c/0x58 [ 31.412391][ T3072] sock_close+0x50/0xf0 [ 31.413700][ T3072] __fput+0x198/0x3e4 [ 31.414942][ T3072] ____fput+0x20/0x30 [ 31.416193][ T3072] task_work_run+0x100/0x148 [ 31.417619][ T3072] do_notify_resume+0x174/0x1f0 [ 31.419033][ T3072] el0_svc+0x9c/0x150 [ 31.420316][ T3072] el0t_64_sync_handler+0x84/0xf0 [ 31.421787][ T3072] el0t_64_sync+0x190/0x194 [ 31.423200][ T3072] INITIAL READ USE at: [ 31.424194][ T3072] lock_acquire+0x100/0x1f8 [ 31.425652][ T3072] _raw_read_lock_bh+0x64/0x7c [ 31.427202][ T3072] sock_i_uid+0x24/0x58 [ 31.428621][ T3072] udp_lib_lport_inuse+0x44/0x268 [ 31.430221][ T3072] udp_lib_get_port+0x2bc/0x8f8 [ 31.431829][ T3072] udp_v6_get_port+0x60/0x74 [ 31.433385][ T3072] __inet6_bind+0x688/0x8ac [ 31.434896][ T3072] inet6_bind+0xf4/0x150 [ 31.436372][ T3072] __sys_bind+0x148/0x1b0 [ 31.437686][ T3072] __arm64_sys_bind+0x28/0x3c [ 31.439223][ T3072] el0_svc_common+0x138/0x220 [ 31.440830][ T3072] do_el0_svc+0x48/0x164 [ 31.442217][ T3072] el0_svc+0x58/0x150 [ 31.443606][ T3072] el0t_64_sync_handler+0x84/0xf0 [ 31.445101][ T3072] el0t_64_sync+0x190/0x194 [ 31.446454][ T3072] } [ 31.446991][ T3072] ... key at: [] af_callback_keys+0xa0/0x2e0 [ 31.448685][ T3072] ... acquired at: [ 31.449552][ T3072] mark_lock+0x154/0x1b4 [ 31.450610][ T3072] __lock_acquire+0x618/0x3084 [ 31.451728][ T3072] lock_acquire+0x100/0x1f8 [ 31.452881][ T3072] _raw_write_lock+0x54/0x6c [ 31.453929][ T3072] l2tp_tunnel_register+0x354/0x79c [ 31.455221][ T3072] pppol2tp_connect+0x3e8/0x6c4 [ 31.456347][ T3072] __sys_connect+0x184/0x190 [ 31.457403][ T3072] __arm64_sys_connect+0x28/0x3c [ 31.458634][ T3072] el0_svc_common+0x138/0x220 [ 31.459853][ T3072] do_el0_svc+0x48/0x164 [ 31.460805][ T3072] el0_svc+0x58/0x150 [ 31.461751][ T3072] el0t_64_sync_handler+0x84/0xf0 [ 31.462900][ T3072] el0t_64_sync+0x190/0x194 [ 31.463984][ T3072] [ 31.464513][ T3072] [ 31.464513][ T3072] stack backtrace: [ 31.465877][ T3072] CPU: 0 PID: 3072 Comm: syz-executor164 Not tainted 6.1.0-rc6-syzkaller-32653-g65762d97e6fa #0 [ 31.468185][ T3072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 31.470405][ T3072] Call trace: [ 31.471155][ T3072] dump_backtrace+0x1c4/0x1f0 [ 31.472271][ T3072] show_stack+0x2c/0x54 [ 31.473174][ T3072] dump_stack_lvl+0x104/0x16c [ 31.474268][ T3072] dump_stack+0x1c/0x58 [ 31.475193][ T3072] print_irq_inversion_bug+0x2f8/0x300 [ 31.476506][ T3072] mark_lock_irq+0x3ec/0x4b4 [ 31.477566][ T3072] mark_lock+0x154/0x1b4 [ 31.478524][ T3072] __lock_acquire+0x618/0x3084 [ 31.479604][ T3072] lock_acquire+0x100/0x1f8 [ 31.480636][ T3072] _raw_write_lock+0x54/0x6c [ 31.481703][ T3072] l2tp_tunnel_register+0x354/0x79c [ 31.482881][ T3072] pppol2tp_connect+0x3e8/0x6c4 [ 31.484026][ T3072] __sys_connect+0x184/0x190 [ 31.485193][ T3072] __arm64_sys_connect+0x28/0x3c [ 31.486322][ T3072] el0_svc_common+0x138/0x220 [ 31.487414][ T3072] do_el0_svc+0x48/0x164 [ 31.488464][ T3072] el0_svc+0x58/0x150 [ 31.489395][ T3072] el0t_64_sync_handler+0x84/0xf0 [ 31.490576][ T3072] el0t_64_sync+0x190/0x194 [ 31.491892][ T3072] BUG: sleeping function called from invalid context at include/linux/percpu-rwsem.h:49 [ 31.494042][ T3072] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 3072, name: syz-executor164 [ 31.496244][ T3072] preempt_count: 1, expected: 0 [ 31.497341][ T3072] RCU nest depth: 0, expected: 0 [ 31.498401][ T3072] INFO: lockdep is turned off. [ 31.499540][ T3072] Preemption disabled at: [ 31.499545][ T3072] [] l2tp_tunnel_register+0x354/0x79c [ 31.501823][ T3072] CPU: 0 PID: 3072 Comm: syz-executor164 Not tainted 6.1.0-rc6-syzkaller-32653-g65762d97e6fa #0 [ 31.503896][ T3072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 31.506040][ T3072] Call trace: [ 31.506793][ T3072] dump_backtrace+0x1c4/0x1f0 [ 31.507847][ T3072] show_stack+0x2c/0x54 [ 31.508866][ T3072] dump_stack_lvl+0x104/0x16c [ 31.509998][ T3072] dump_stack+0x1c/0x58 [ 31.510958][ T3072] __might_resched+0x208/0x218 [ 31.511975][ T3072] __might_sleep+0x48/0x78 [ 31.512972][ T3072] cpus_read_lock+0x28/0x1e0 [ 31.514032][ T3072] static_key_slow_inc+0x1c/0x38 [ 31.515201][ T3072] udpv6_encap_enable+0x1c/0x28 [ 31.516324][ T3072] setup_udp_tunnel_sock+0xec/0x124 [ 31.517536][ T3072] l2tp_tunnel_register+0x68c/0x79c [ 31.518764][ T3072] pppol2tp_connect+0x3e8/0x6c4 [ 31.519800][ T3072] __sys_connect+0x184/0x190 [ 31.520730][ T3072] __arm64_sys_connect+0x28/0x3c [ 31.521705][ T3072] el0_svc_common+0x138/0x220 [ 31.522621][ T3072] do_el0_svc+0x48/0x164 [ 31.523513][ T3072] el0_svc+0x58/0x150 [ 31.524404][ T3072] el0t_64_sync_handler+0x84/0xf0 [ 31.525535][ T3072] el0t_64_sync+0x190/0x194