[ 9.866495][ T2659] 8021q: adding VLAN 0 to HW filter on device bond0 [ 9.870457][ T2659] eql: remember to turn off Van-Jacobson compression on your slave devices [ 9.899577][ T267] gvnic 0000:00:00.0 enp0s0: Device link is up. [ 9.901282][ T2568] IPv6: ADDRCONF(NETDEV_CHANGE): enp0s0: link becomes ready Starting sshd: OK syzkaller Warning: Permanently added '10.128.10.42' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 27.548909][ T3087] [ 27.549556][ T3087] ======================================================== [ 27.551378][ T3087] WARNING: possible irq lock inversion dependency detected [ 27.553441][ T3087] 6.1.0-rc6-syzkaller-32653-g65762d97e6fa #0 Not tainted [ 27.555328][ T3087] -------------------------------------------------------- [ 27.557195][ T3087] syz-executor197/3087 just changed the state of lock: [ 27.559008][ T3087] ffff0000cb84fbb8 (clock-AF_INET6){+++.}-{2:2}, at: l2tp_tunnel_register+0x354/0x79c [ 27.561544][ T3087] but this lock was taken by another, SOFTIRQ-safe lock in the past: [ 27.563633][ T3087] (&tcp_hashinfo.bhash[i].lock){+.-.}-{2:2} [ 27.563642][ T3087] [ 27.563642][ T3087] [ 27.563642][ T3087] and interrupts could create inverse lock ordering between them. [ 27.563642][ T3087] [ 27.568940][ T3087] [ 27.568940][ T3087] other info that might help us debug this: [ 27.571103][ T3087] Possible interrupt unsafe locking scenario: [ 27.571103][ T3087] [ 27.573328][ T3087] CPU0 CPU1 [ 27.574744][ T3087] ---- ---- [ 27.576167][ T3087] lock(clock-AF_INET6); [ 27.577307][ T3087] local_irq_disable(); [ 27.579109][ T3087] lock(&tcp_hashinfo.bhash[i].lock); [ 27.581264][ T3087] lock(clock-AF_INET6); [ 27.583083][ T3087] [ 27.583967][ T3087] lock(&tcp_hashinfo.bhash[i].lock); [ 27.585454][ T3087] [ 27.585454][ T3087] *** DEADLOCK *** [ 27.585454][ T3087] [ 27.587613][ T3087] 1 lock held by syz-executor197/3087: [ 27.589042][ T3087] #0: ffff0000cb7e9130 (sk_lock-AF_PPPOX){+.+.}-{0:0}, at: pppol2tp_connect+0x184/0x6c4 [ 27.591672][ T3087] [ 27.591672][ T3087] the shortest dependencies between 2nd lock and 1st lock: [ 27.594172][ T3087] -> (&tcp_hashinfo.bhash[i].lock){+.-.}-{2:2} { [ 27.595919][ T3087] HARDIRQ-ON-W at: [ 27.596934][ T3087] lock_acquire+0x100/0x1f8 [ 27.598646][ T3087] _raw_spin_lock_bh+0x54/0x6c [ 27.600374][ T3087] inet_csk_get_port+0xe0/0xaf0 [ 27.602129][ T3087] __inet6_bind+0x688/0x8ac [ 27.603797][ T3087] inet6_bind+0xf4/0x150 [ 27.605398][ T3087] rds_tcp_listen_init+0x14c/0x1f0 [ 27.607237][ T3087] rds_tcp_init_net+0xcc/0x1dc [ 27.609125][ T3087] ops_init+0xe4/0x2e4 [ 27.610678][ T3087] register_pernet_operations+0x108/0x264 [ 27.612725][ T3087] register_pernet_device+0x3c/0x94 [ 27.614601][ T3087] rds_tcp_init+0x74/0xe0 [ 27.616306][ T3087] do_one_initcall+0x118/0x22c [ 27.618058][ T3087] do_initcall_level+0xac/0xe4 [ 27.619855][ T3087] do_initcalls+0x58/0xa8 [ 27.621610][ T3087] do_basic_setup+0x20/0x2c [ 27.623286][ T3087] kernel_init_freeable+0xb8/0x148 [ 27.625146][ T3087] kernel_init+0x24/0x290 [ 27.626765][ T3087] ret_from_fork+0x10/0x20 [ 27.628453][ T3087] IN-SOFTIRQ-W at: [ 27.629486][ T3087] lock_acquire+0x100/0x1f8 [ 27.631189][ T3087] _raw_spin_lock+0x54/0x6c [ 27.632828][ T3087] __inet_inherit_port+0x124/0x9ac [ 27.634727][ T3087] tcp_v4_syn_recv_sock+0x790/0x848 [ 27.636557][ T3087] tcp_check_req+0x75c/0x8e4 [ 27.638238][ T3087] tcp_v4_rcv+0xad4/0x11e8 [ 27.639865][ T3087] ip_protocol_deliver_rcu+0x224/0x414 [ 27.641799][ T3087] ip_local_deliver_finish+0x124/0x200 [ 27.643719][ T3087] ip_local_deliver+0xd0/0xf4 [ 27.645494][ T3087] ip_sublist_rcv+0x40c/0x474 [ 27.647192][ T3087] ip_list_rcv+0x184/0x1c8 [ 27.648836][ T3087] __netif_receive_skb_list_core+0x1f8/0x2b0 [ 27.650900][ T3087] __netif_receive_skb_list+0x16c/0x1d0 [ 27.652871][ T3087] netif_receive_skb_list_internal+0x1e8/0x340 [ 27.654982][ T3087] napi_complete_done+0x140/0x354 [ 27.656806][ T3087] gve_napi_poll+0xcc/0x1b4 [ 27.658488][ T3087] __napi_poll+0x5c/0x24c [ 27.660136][ T3087] napi_poll+0x110/0x484 [ 27.661781][ T3087] net_rx_action+0x18c/0x414 [ 27.663474][ T3087] _stext+0x168/0x37c [ 27.664994][ T3087] ____do_softirq+0x14/0x20 [ 27.666639][ T3087] call_on_irq_stack+0x2c/0x54 [ 27.668369][ T3087] do_softirq_own_stack+0x20/0x2c [ 27.670211][ T3087] invoke_softirq+0x70/0xbc [ 27.671878][ T3087] __irq_exit_rcu+0xf0/0x140 [ 27.673586][ T3087] irq_exit_rcu+0x10/0x40 [ 27.675329][ T3087] el1_interrupt+0x38/0x68 [ 27.677027][ T3087] el1h_64_irq_handler+0x18/0x24 [ 27.678838][ T3087] el1h_64_irq+0x64/0x68 [ 27.680461][ T3087] arch_local_irq_enable+0xc/0x18 [ 27.682271][ T3087] default_idle_call+0x48/0xb8 [ 27.684006][ T3087] do_idle+0x110/0x2d4 [ 27.685548][ T3087] cpu_startup_entry+0x24/0x28 [ 27.687334][ T3087] kernel_init+0x0/0x290 [ 27.689066][ T3087] start_kernel+0x0/0x620 [ 27.690692][ T3087] start_kernel+0x450/0x620 [ 27.692382][ T3087] __primary_switched+0xb4/0xbc [ 27.694193][ T3087] INITIAL USE at: [ 27.695327][ T3087] lock_acquire+0x100/0x1f8 [ 27.696993][ T3087] _raw_spin_lock_bh+0x54/0x6c [ 27.698803][ T3087] inet_csk_get_port+0xe0/0xaf0 [ 27.700607][ T3087] __inet6_bind+0x688/0x8ac [ 27.702263][ T3087] inet6_bind+0xf4/0x150 [ 27.703843][ T3087] rds_tcp_listen_init+0x14c/0x1f0 [ 27.705660][ T3087] rds_tcp_init_net+0xcc/0x1dc [ 27.707539][ T3087] ops_init+0xe4/0x2e4 [ 27.709105][ T3087] register_pernet_operations+0x108/0x264 [ 27.711070][ T3087] register_pernet_device+0x3c/0x94 [ 27.712957][ T3087] rds_tcp_init+0x74/0xe0 [ 27.714621][ T3087] do_one_initcall+0x118/0x22c [ 27.716338][ T3087] do_initcall_level+0xac/0xe4 [ 27.718098][ T3087] do_initcalls+0x58/0xa8 [ 27.719669][ T3087] do_basic_setup+0x20/0x2c [ 27.721316][ T3087] kernel_init_freeable+0xb8/0x148 [ 27.723128][ T3087] kernel_init+0x24/0x290 [ 27.724743][ T3087] ret_from_fork+0x10/0x20 [ 27.726411][ T3087] } [ 27.727099][ T3087] ... key at: [] tcp_init.__key.22+0x0/0x10 [ 27.729231][ T3087] ... acquired at: [ 27.730220][ T3087] _raw_read_lock_bh+0x64/0x7c [ 27.731546][ T3087] sock_i_uid+0x24/0x58 [ 27.732692][ T3087] inet_csk_get_port+0x674/0xaf0 [ 27.734060][ T3087] __inet6_bind+0x688/0x8ac [ 27.735281][ T3087] inet6_bind+0xf4/0x150 [ 27.736423][ T3087] __sys_bind+0x148/0x1b0 [ 27.737599][ T3087] __arm64_sys_bind+0x28/0x3c [ 27.738880][ T3087] el0_svc_common+0x138/0x220 [ 27.740190][ T3087] do_el0_svc+0x48/0x164 [ 27.741340][ T3087] el0_svc+0x58/0x150 [ 27.742432][ T3087] el0t_64_sync_handler+0x84/0xf0 [ 27.743835][ T3087] el0t_64_sync+0x190/0x194 [ 27.745090][ T3087] [ 27.745690][ T3087] -> (clock-AF_INET6){+++.}-{2:2} { [ 27.747021][ T3087] HARDIRQ-ON-W at: [ 27.748007][ T3087] lock_acquire+0x100/0x1f8 [ 27.749759][ T3087] _raw_write_lock_bh+0x54/0x6c [ 27.751521][ T3087] sk_common_release+0x58/0x1d4 [ 27.753247][ T3087] udp_lib_close+0x20/0x30 [ 27.754916][ T3087] inet_release+0xc8/0xe4 [ 27.756474][ T3087] inet6_release+0x3c/0x58 [ 27.758068][ T3087] sock_close+0x50/0xf0 [ 27.759549][ T3087] __fput+0x198/0x3e4 [ 27.761047][ T3087] ____fput+0x20/0x30 [ 27.762695][ T3087] task_work_run+0x100/0x148 [ 27.764201][ T3087] do_notify_resume+0x174/0x1f0 [ 27.765732][ T3087] el0_svc+0x9c/0x150 [ 27.767086][ T3087] el0t_64_sync_handler+0x84/0xf0 [ 27.768930][ T3087] el0t_64_sync+0x190/0x194 [ 27.770559][ T3087] HARDIRQ-ON-R at: [ 27.771601][ T3087] lock_acquire+0x100/0x1f8 [ 27.773252][ T3087] _raw_read_lock_bh+0x64/0x7c [ 27.774958][ T3087] sock_i_uid+0x24/0x58 [ 27.776562][ T3087] udp_lib_lport_inuse+0x44/0x268 [ 27.778335][ T3087] udp_lib_get_port+0x2bc/0x8f8 [ 27.780072][ T3087] udp_v6_get_port+0x60/0x74 [ 27.781727][ T3087] __inet6_bind+0x688/0x8ac [ 27.783390][ T3087] inet6_bind+0xf4/0x150 [ 27.784876][ T3087] __sys_bind+0x148/0x1b0 [ 27.786455][ T3087] __arm64_sys_bind+0x28/0x3c [ 27.788175][ T3087] el0_svc_common+0x138/0x220 [ 27.789931][ T3087] do_el0_svc+0x48/0x164 [ 27.791379][ T3087] el0_svc+0x58/0x150 [ 27.792726][ T3087] el0t_64_sync_handler+0x84/0xf0 [ 27.794353][ T3087] el0t_64_sync+0x190/0x194 [ 27.796071][ T3087] SOFTIRQ-ON-W at: [ 27.797108][ T3087] lock_acquire+0x100/0x1f8 [ 27.798689][ T3087] _raw_write_lock+0x54/0x6c [ 27.800221][ T3087] l2tp_tunnel_register+0x354/0x79c [ 27.802087][ T3087] pppol2tp_connect+0x3e8/0x6c4 [ 27.803777][ T3087] __sys_connect+0x184/0x190 [ 27.805419][ T3087] __arm64_sys_connect+0x28/0x3c [ 27.807124][ T3087] el0_svc_common+0x138/0x220 [ 27.808816][ T3087] do_el0_svc+0x48/0x164 [ 27.810366][ T3087] el0_svc+0x58/0x150 [ 27.811823][ T3087] el0t_64_sync_handler+0x84/0xf0 [ 27.813546][ T3087] el0t_64_sync+0x190/0x194 [ 27.815160][ T3087] INITIAL USE at: [ 27.816220][ T3087] lock_acquire+0x100/0x1f8 [ 27.817680][ T3087] _raw_write_lock_bh+0x54/0x6c [ 27.819217][ T3087] sk_common_release+0x58/0x1d4 [ 27.820753][ T3087] udp_lib_close+0x20/0x30 [ 27.822370][ T3087] inet_release+0xc8/0xe4 [ 27.823908][ T3087] inet6_release+0x3c/0x58 [ 27.825522][ T3087] sock_close+0x50/0xf0 [ 27.827016][ T3087] __fput+0x198/0x3e4 [ 27.828547][ T3087] ____fput+0x20/0x30 [ 27.830041][ T3087] task_work_run+0x100/0x148 [ 27.831646][ T3087] do_notify_resume+0x174/0x1f0 [ 27.833335][ T3087] el0_svc+0x9c/0x150 [ 27.834794][ T3087] el0t_64_sync_handler+0x84/0xf0 [ 27.836602][ T3087] el0t_64_sync+0x190/0x194 [ 27.838208][ T3087] INITIAL READ USE at: [ 27.839346][ T3087] lock_acquire+0x100/0x1f8 [ 27.841051][ T3087] _raw_read_lock_bh+0x64/0x7c [ 27.842854][ T3087] sock_i_uid+0x24/0x58 [ 27.844493][ T3087] udp_lib_lport_inuse+0x44/0x268 [ 27.846445][ T3087] udp_lib_get_port+0x2bc/0x8f8 [ 27.848304][ T3087] udp_v6_get_port+0x60/0x74 [ 27.849859][ T3087] __inet6_bind+0x688/0x8ac [ 27.851417][ T3087] inet6_bind+0xf4/0x150 [ 27.852902][ T3087] __sys_bind+0x148/0x1b0 [ 27.854643][ T3087] __arm64_sys_bind+0x28/0x3c [ 27.856404][ T3087] el0_svc_common+0x138/0x220 [ 27.858204][ T3087] do_el0_svc+0x48/0x164 [ 27.859875][ T3087] el0_svc+0x58/0x150 [ 27.861467][ T3087] el0t_64_sync_handler+0x84/0xf0 [ 27.863306][ T3087] el0t_64_sync+0x190/0x194 [ 27.865007][ T3087] } [ 27.865644][ T3087] ... key at: [] af_callback_keys+0xa0/0x2e0 [ 27.867799][ T3087] ... acquired at: [ 27.868826][ T3087] mark_lock+0x154/0x1b4 [ 27.869991][ T3087] __lock_acquire+0x618/0x3084 [ 27.871281][ T3087] lock_acquire+0x100/0x1f8 [ 27.872489][ T3087] _raw_write_lock+0x54/0x6c [ 27.873756][ T3087] l2tp_tunnel_register+0x354/0x79c [ 27.875220][ T3087] pppol2tp_connect+0x3e8/0x6c4 [ 27.876561][ T3087] __sys_connect+0x184/0x190 [ 27.877792][ T3087] __arm64_sys_connect+0x28/0x3c [ 27.879145][ T3087] el0_svc_common+0x138/0x220 [ 27.880423][ T3087] do_el0_svc+0x48/0x164 [ 27.881572][ T3087] el0_svc+0x58/0x150 [ 27.882784][ T3087] el0t_64_sync_handler+0x84/0xf0 [ 27.884180][ T3087] el0t_64_sync+0x190/0x194 [ 27.885421][ T3087] [ 27.886019][ T3087] [ 27.886019][ T3087] stack backtrace: [ 27.887533][ T3087] CPU: 0 PID: 3087 Comm: syz-executor197 Not tainted 6.1.0-rc6-syzkaller-32653-g65762d97e6fa #0 [ 27.890286][ T3087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 27.892910][ T3087] Call trace: [ 27.893795][ T3087] dump_backtrace+0x1c4/0x1f0 [ 27.895029][ T3087] show_stack+0x2c/0x54 [ 27.896139][ T3087] dump_stack_lvl+0x104/0x16c [ 27.897353][ T3087] dump_stack+0x1c/0x58 [ 27.898584][ T3087] print_irq_inversion_bug+0x2f8/0x300 [ 27.899996][ T3087] mark_lock_irq+0x3ec/0x4b4 [ 27.901209][ T3087] mark_lock+0x154/0x1b4 [ 27.902300][ T3087] __lock_acquire+0x618/0x3084 [ 27.903554][ T3087] lock_acquire+0x100/0x1f8 [ 27.904724][ T3087] _raw_write_lock+0x54/0x6c [ 27.905908][ T3087] l2tp_tunnel_register+0x354/0x79c [ 27.907268][ T3087] pppol2tp_connect+0x3e8/0x6c4 [ 27.908516][ T3087] __sys_connect+0x184/0x190 [ 27.909713][ T3087] __arm64_sys_connect+0x28/0x3c [ 27.911012][ T3087] el0_svc_common+0x138/0x220 [ 27.912244][ T3087] do_el0_svc+0x48/0x164 [ 27.913369][ T3087] el0_svc+0x58/0x150 [ 27.914380][ T3087] el0t_64_sync_handler+0x84/0xf0 [ 27.915670][ T3087] el0t_64_sync+0x190/0x194 [ 27.916960][ T3087] BUG: sleeping function called from invalid context at include/linux/percpu-rwsem.h:49 [ 27.919390][ T3087] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 3087, name: syz-executor197 [ 27.921598][ T3087] preempt_count: 1, expected: 0 [ 27.922755][ T3087] RCU nest depth: 0, expected: 0 [ 27.923997][ T3087] INFO: lockdep is turned off. [ 27.925212][ T3087] Preemption disabled at: [ 27.925217][ T3087] [] l2tp_tunnel_register+0x354/0x79c [ 27.927926][ T3087] CPU: 0 PID: 3087 Comm: syz-executor197 Not tainted 6.1.0-rc6-syzkaller-32653-g65762d97e6fa #0 [ 27.930506][ T3087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 27.932875][ T3087] Call trace: [ 27.933643][ T3087] dump_backtrace+0x1c4/0x1f0 [ 27.934755][ T3087] show_stack+0x2c/0x54 [ 27.935769][ T3087] dump_stack_lvl+0x104/0x16c [ 27.936928][ T3087] dump_stack+0x1c/0x58 [ 27.937955][ T3087] __might_resched+0x208/0x218 [ 27.939145][ T3087] __might_sleep+0x48/0x78 [ 27.940237][ T3087] cpus_read_lock+0x28/0x1e0 [ 27.941357][ T3087] static_key_slow_inc+0x1c/0x38 [ 27.942543][ T3087] udpv6_encap_enable+0x1c/0x28 [ 27.943921][ T3087] setup_udp_tunnel_sock+0xec/0x124 [ 27.945207][ T3087] l2tp_tunnel_register+0x68c/0x79c [ 27.946570][ T3087] pppol2tp_connect+0x3e8/0x6c4 [ 27.947804][ T3087] __sys_connect+0x184/0x190 [ 27.949061][ T3087] __arm64_sys_connect+0x28/0x3c [ 27.950271][ T3087] el0_svc_common+0x138/0x220 [ 27.951453][ T3087] do_el0_svc+0x48/0x164 [ 27.952468][ T3087] el0_svc+0x58/0x150 [ 27.953562][ T3087] el0t_64_sync_handler+0x84/0xf0 [ 27.954989][ T3087] el0t_64_sync+0x190/0x194