Warning: Permanently added '10.128.0.49' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 33.550930][ T3072] [ 33.551629][ T3072] ======================================================== [ 33.553585][ T3072] WARNING: possible irq lock inversion dependency detected [ 33.555594][ T3072] 6.1.0-rc6-syzkaller-32653-g65762d97e6fa #0 Not tainted [ 33.557535][ T3072] -------------------------------------------------------- [ 33.559559][ T3072] syz-executor466/3072 just changed the state of lock: [ 33.561424][ T3072] ffff0000cb5aecb8 (clock-AF_INET6){+++.}-{2:2}, at: l2tp_tunnel_register+0x354/0x79c [ 33.564083][ T3072] but this lock was taken by another, SOFTIRQ-safe lock in the past: [ 33.566299][ T3072] (&tcp_hashinfo.bhash[i].lock){+.-.}-{2:2} [ 33.566309][ T3072] [ 33.566309][ T3072] [ 33.566309][ T3072] and interrupts could create inverse lock ordering between them. [ 33.566309][ T3072] [ 33.571781][ T3072] [ 33.571781][ T3072] other info that might help us debug this: [ 33.574113][ T3072] Possible interrupt unsafe locking scenario: [ 33.574113][ T3072] [ 33.576370][ T3072] CPU0 CPU1 [ 33.577820][ T3072] ---- ---- [ 33.579264][ T3072] lock(clock-AF_INET6); [ 33.580409][ T3072] local_irq_disable(); [ 33.582311][ T3072] lock(&tcp_hashinfo.bhash[i].lock); [ 33.584531][ T3072] lock(clock-AF_INET6); [ 33.586344][ T3072] [ 33.587237][ T3072] lock(&tcp_hashinfo.bhash[i].lock); [ 33.588779][ T3072] [ 33.588779][ T3072] *** DEADLOCK *** [ 33.588779][ T3072] [ 33.590974][ T3072] 1 lock held by syz-executor466/3072: [ 33.592461][ T3072] #0: ffff0000cb1a6130 (sk_lock-AF_PPPOX){+.+.}-{0:0}, at: pppol2tp_connect+0x184/0x6c4 [ 33.595120][ T3072] [ 33.595120][ T3072] the shortest dependencies between 2nd lock and 1st lock: [ 33.597689][ T3072] -> (&tcp_hashinfo.bhash[i].lock){+.-.}-{2:2} { [ 33.599440][ T3072] HARDIRQ-ON-W at: [ 33.600540][ T3072] lock_acquire+0x100/0x1f8 [ 33.602275][ T3072] _raw_spin_lock_bh+0x54/0x6c [ 33.604076][ T3072] inet_csk_get_port+0xe0/0xaf0 [ 33.605962][ T3072] __inet6_bind+0x688/0x8ac [ 33.607684][ T3072] inet6_bind+0xf4/0x150 [ 33.609265][ T3072] rds_tcp_listen_init+0x14c/0x1f0 [ 33.611188][ T3072] rds_tcp_init_net+0xcc/0x1dc [ 33.612934][ T3072] ops_init+0xe4/0x2e4 [ 33.614540][ T3072] register_pernet_operations+0x108/0x264 [ 33.616574][ T3072] register_pernet_device+0x3c/0x94 [ 33.618451][ T3072] rds_tcp_init+0x74/0xe0 [ 33.620138][ T3072] do_one_initcall+0x118/0x22c [ 33.621910][ T3072] do_initcall_level+0xac/0xe4 [ 33.623670][ T3072] do_initcalls+0x58/0xa8 [ 33.625308][ T3072] do_basic_setup+0x20/0x2c [ 33.626978][ T3072] kernel_init_freeable+0xb8/0x148 [ 33.628835][ T3072] kernel_init+0x24/0x290 [ 33.630506][ T3072] ret_from_fork+0x10/0x20 [ 33.632214][ T3072] IN-SOFTIRQ-W at: [ 33.633285][ T3072] lock_acquire+0x100/0x1f8 [ 33.634992][ T3072] _raw_spin_lock+0x54/0x6c [ 33.636745][ T3072] __inet_inherit_port+0x124/0x9ac [ 33.638835][ T3072] tcp_v4_syn_recv_sock+0x790/0x848 [ 33.640747][ T3072] tcp_check_req+0x75c/0x8e4 [ 33.642441][ T3072] tcp_v4_rcv+0xad4/0x11e8 [ 33.644243][ T3072] ip_protocol_deliver_rcu+0x224/0x414 [ 33.646197][ T3072] ip_local_deliver_finish+0x124/0x200 [ 33.648127][ T3072] ip_local_deliver+0xd0/0xf4 [ 33.649873][ T3072] ip_sublist_rcv+0x40c/0x474 [ 33.651604][ T3072] ip_list_rcv+0x184/0x1c8 [ 33.653275][ T3072] __netif_receive_skb_list_core+0x1f8/0x2b0 [ 33.655379][ T3072] __netif_receive_skb_list+0x16c/0x1d0 [ 33.657392][ T3072] netif_receive_skb_list_internal+0x1e8/0x340 [ 33.659518][ T3072] napi_complete_done+0x140/0x354 [ 33.661343][ T3072] gve_napi_poll+0xcc/0x1b4 [ 33.663012][ T3072] __napi_poll+0x5c/0x24c [ 33.664679][ T3072] napi_poll+0x110/0x484 [ 33.666389][ T3072] net_rx_action+0x18c/0x414 [ 33.668148][ T3072] _stext+0x168/0x37c [ 33.669687][ T3072] ____do_softirq+0x14/0x20 [ 33.671530][ T3072] call_on_irq_stack+0x2c/0x54 [ 33.673309][ T3072] do_softirq_own_stack+0x20/0x2c [ 33.675138][ T3072] invoke_softirq+0x70/0xbc [ 33.676777][ T3072] __irq_exit_rcu+0xf0/0x140 [ 33.678541][ T3072] irq_exit_rcu+0x10/0x40 [ 33.680191][ T3072] el1_interrupt+0x38/0x68 [ 33.681889][ T3072] el1h_64_irq_handler+0x18/0x24 [ 33.683764][ T3072] el1h_64_irq+0x64/0x68 [ 33.685351][ T3072] arch_local_irq_enable+0xc/0x18 [ 33.687133][ T3072] default_idle_call+0x48/0xb8 [ 33.688839][ T3072] do_idle+0x110/0x2d4 [ 33.690423][ T3072] cpu_startup_entry+0x24/0x28 [ 33.692213][ T3072] kernel_init+0x0/0x290 [ 33.693857][ T3072] start_kernel+0x0/0x620 [ 33.695470][ T3072] start_kernel+0x450/0x620 [ 33.697113][ T3072] __primary_switched+0xb4/0xbc [ 33.698804][ T3072] INITIAL USE at: [ 33.699822][ T3072] lock_acquire+0x100/0x1f8 [ 33.701489][ T3072] _raw_spin_lock_bh+0x54/0x6c [ 33.703181][ T3072] inet_csk_get_port+0xe0/0xaf0 [ 33.704906][ T3072] __inet6_bind+0x688/0x8ac [ 33.706521][ T3072] inet6_bind+0xf4/0x150 [ 33.708254][ T3072] rds_tcp_listen_init+0x14c/0x1f0 [ 33.710127][ T3072] rds_tcp_init_net+0xcc/0x1dc [ 33.711838][ T3072] ops_init+0xe4/0x2e4 [ 33.713388][ T3072] register_pernet_operations+0x108/0x264 [ 33.715423][ T3072] register_pernet_device+0x3c/0x94 [ 33.717289][ T3072] rds_tcp_init+0x74/0xe0 [ 33.718926][ T3072] do_one_initcall+0x118/0x22c [ 33.720676][ T3072] do_initcall_level+0xac/0xe4 [ 33.722398][ T3072] do_initcalls+0x58/0xa8 [ 33.724038][ T3072] do_basic_setup+0x20/0x2c [ 33.725721][ T3072] kernel_init_freeable+0xb8/0x148 [ 33.727463][ T3072] kernel_init+0x24/0x290 [ 33.729140][ T3072] ret_from_fork+0x10/0x20 [ 33.730813][ T3072] } [ 33.731489][ T3072] ... key at: [] tcp_init.__key.22+0x0/0x10 [ 33.733701][ T3072] ... acquired at: [ 33.734753][ T3072] _raw_read_lock_bh+0x64/0x7c [ 33.736081][ T3072] sock_i_uid+0x24/0x58 [ 33.737236][ T3072] inet_csk_get_port+0x674/0xaf0 [ 33.738632][ T3072] __inet6_bind+0x688/0x8ac [ 33.739909][ T3072] inet6_bind+0xf4/0x150 [ 33.741123][ T3072] __sys_bind+0x148/0x1b0 [ 33.742397][ T3072] __arm64_sys_bind+0x28/0x3c [ 33.743763][ T3072] el0_svc_common+0x138/0x220 [ 33.745036][ T3072] do_el0_svc+0x48/0x164 [ 33.746194][ T3072] el0_svc+0x58/0x150 [ 33.747279][ T3072] el0t_64_sync_handler+0x84/0xf0 [ 33.748659][ T3072] el0t_64_sync+0x190/0x194 [ 33.749918][ T3072] [ 33.750519][ T3072] -> (clock-AF_INET6){+++.}-{2:2} { [ 33.751891][ T3072] HARDIRQ-ON-W at: [ 33.753035][ T3072] lock_acquire+0x100/0x1f8 [ 33.754600][ T3072] _raw_write_lock_bh+0x54/0x6c [ 33.756239][ T3072] sk_common_release+0x58/0x1d4 [ 33.758037][ T3072] udp_lib_close+0x20/0x30 [ 33.759663][ T3072] inet_release+0xc8/0xe4 [ 33.761237][ T3072] inet6_release+0x3c/0x58 [ 33.762866][ T3072] sock_close+0x50/0xf0 [ 33.764617][ T3072] __fput+0x198/0x3e4 [ 33.766086][ T3072] ____fput+0x20/0x30 [ 33.767544][ T3072] task_work_run+0x100/0x148 [ 33.769172][ T3072] do_notify_resume+0x174/0x1f0 [ 33.770875][ T3072] el0_svc+0x9c/0x150 [ 33.772356][ T3072] el0t_64_sync_handler+0x84/0xf0 [ 33.774169][ T3072] el0t_64_sync+0x190/0x194 [ 33.775777][ T3072] HARDIRQ-ON-R at: [ 33.776874][ T3072] lock_acquire+0x100/0x1f8 [ 33.778499][ T3072] _raw_read_lock_bh+0x64/0x7c [ 33.780232][ T3072] sock_i_uid+0x24/0x58 [ 33.781792][ T3072] udp_lib_lport_inuse+0x44/0x268 [ 33.783585][ T3072] udp_lib_get_port+0x2bc/0x8f8 [ 33.785287][ T3072] udp_v6_get_port+0x60/0x74 [ 33.786930][ T3072] __inet6_bind+0x688/0x8ac [ 33.788534][ T3072] inet6_bind+0xf4/0x150 [ 33.790081][ T3072] __sys_bind+0x148/0x1b0 [ 33.791646][ T3072] __arm64_sys_bind+0x28/0x3c [ 33.793316][ T3072] el0_svc_common+0x138/0x220 [ 33.794940][ T3072] do_el0_svc+0x48/0x164 [ 33.796472][ T3072] el0_svc+0x58/0x150 [ 33.797956][ T3072] el0t_64_sync_handler+0x84/0xf0 [ 33.799728][ T3072] el0t_64_sync+0x190/0x194 [ 33.801370][ T3072] SOFTIRQ-ON-W at: [ 33.802389][ T3072] lock_acquire+0x100/0x1f8 [ 33.803976][ T3072] _raw_write_lock+0x54/0x6c [ 33.805625][ T3072] l2tp_tunnel_register+0x354/0x79c [ 33.807395][ T3072] pppol2tp_connect+0x3e8/0x6c4 [ 33.809222][ T3072] __sys_connect+0x184/0x190 [ 33.810901][ T3072] __arm64_sys_connect+0x28/0x3c [ 33.812638][ T3072] el0_svc_common+0x138/0x220 [ 33.814403][ T3072] do_el0_svc+0x48/0x164 [ 33.815899][ T3072] el0_svc+0x58/0x150 [ 33.817292][ T3072] el0t_64_sync_handler+0x84/0xf0 [ 33.819090][ T3072] el0t_64_sync+0x190/0x194 [ 33.820827][ T3072] INITIAL USE at: [ 33.821891][ T3072] lock_acquire+0x100/0x1f8 [ 33.823544][ T3072] _raw_write_lock_bh+0x54/0x6c [ 33.825274][ T3072] sk_common_release+0x58/0x1d4 [ 33.826987][ T3072] udp_lib_close+0x20/0x30 [ 33.828528][ T3072] inet_release+0xc8/0xe4 [ 33.830059][ T3072] inet6_release+0x3c/0x58 [ 33.831574][ T3072] sock_close+0x50/0xf0 [ 33.833118][ T3072] __fput+0x198/0x3e4 [ 33.834506][ T3072] ____fput+0x20/0x30 [ 33.835892][ T3072] task_work_run+0x100/0x148 [ 33.837476][ T3072] do_notify_resume+0x174/0x1f0 [ 33.839244][ T3072] el0_svc+0x9c/0x150 [ 33.840732][ T3072] el0t_64_sync_handler+0x84/0xf0 [ 33.842462][ T3072] el0t_64_sync+0x190/0x194 [ 33.844168][ T3072] INITIAL READ USE at: [ 33.845192][ T3072] lock_acquire+0x100/0x1f8 [ 33.846716][ T3072] _raw_read_lock_bh+0x64/0x7c [ 33.848649][ T3072] sock_i_uid+0x24/0x58 [ 33.850302][ T3072] udp_lib_lport_inuse+0x44/0x268 [ 33.852209][ T3072] udp_lib_get_port+0x2bc/0x8f8 [ 33.854044][ T3072] udp_v6_get_port+0x60/0x74 [ 33.855768][ T3072] __inet6_bind+0x688/0x8ac [ 33.857461][ T3072] inet6_bind+0xf4/0x150 [ 33.859191][ T3072] __sys_bind+0x148/0x1b0 [ 33.861039][ T3072] __arm64_sys_bind+0x28/0x3c [ 33.862872][ T3072] el0_svc_common+0x138/0x220 [ 33.864687][ T3072] do_el0_svc+0x48/0x164 [ 33.866264][ T3072] el0_svc+0x58/0x150 [ 33.867720][ T3072] el0t_64_sync_handler+0x84/0xf0 [ 33.869660][ T3072] el0t_64_sync+0x190/0x194 [ 33.871409][ T3072] } [ 33.872062][ T3072] ... key at: [] af_callback_keys+0xa0/0x2e0 [ 33.874264][ T3072] ... acquired at: [ 33.875246][ T3072] mark_lock+0x154/0x1b4 [ 33.876364][ T3072] __lock_acquire+0x618/0x3084 [ 33.877651][ T3072] lock_acquire+0x100/0x1f8 [ 33.878850][ T3072] _raw_write_lock+0x54/0x6c [ 33.880079][ T3072] l2tp_tunnel_register+0x354/0x79c [ 33.881455][ T3072] pppol2tp_connect+0x3e8/0x6c4 [ 33.882749][ T3072] __sys_connect+0x184/0x190 [ 33.884006][ T3072] __arm64_sys_connect+0x28/0x3c [ 33.885312][ T3072] el0_svc_common+0x138/0x220 [ 33.886567][ T3072] do_el0_svc+0x48/0x164 [ 33.887741][ T3072] el0_svc+0x58/0x150 [ 33.888819][ T3072] el0t_64_sync_handler+0x84/0xf0 [ 33.890219][ T3072] el0t_64_sync+0x190/0x194 [ 33.891505][ T3072] [ 33.892110][ T3072] [ 33.892110][ T3072] stack backtrace: [ 33.893667][ T3072] CPU: 0 PID: 3072 Comm: syz-executor466 Not tainted 6.1.0-rc6-syzkaller-32653-g65762d97e6fa #0 [ 33.896389][ T3072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 33.899025][ T3072] Call trace: [ 33.899851][ T3072] dump_backtrace+0x1c4/0x1f0 [ 33.901087][ T3072] show_stack+0x2c/0x54 [ 33.902154][ T3072] dump_stack_lvl+0x104/0x16c [ 33.903347][ T3072] dump_stack+0x1c/0x58 [ 33.904605][ T3072] print_irq_inversion_bug+0x2f8/0x300 [ 33.906041][ T3072] mark_lock_irq+0x3ec/0x4b4 [ 33.907266][ T3072] mark_lock+0x154/0x1b4 [ 33.908404][ T3072] __lock_acquire+0x618/0x3084 [ 33.909852][ T3072] lock_acquire+0x100/0x1f8 [ 33.911069][ T3072] _raw_write_lock+0x54/0x6c [ 33.912255][ T3072] l2tp_tunnel_register+0x354/0x79c [ 33.913703][ T3072] pppol2tp_connect+0x3e8/0x6c4 [ 33.915003][ T3072] __sys_connect+0x184/0x190 [ 33.916155][ T3072] __arm64_sys_connect+0x28/0x3c [ 33.917393][ T3072] el0_svc_common+0x138/0x220 [ 33.918579][ T3072] do_el0_svc+0x48/0x164 [ 33.919867][ T3072] el0_svc+0x58/0x150 [ 33.920946][ T3072] el0t_64_sync_handler+0x84/0xf0 [ 33.922271][ T3072] el0t_64_sync+0x190/0x194 [ 33.923587][ T3072] BUG: sleeping function called from invalid context at include/linux/percpu-rwsem.h:49 [ 33.926210][ T3072] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 3072, name: syz-executor466 [ 33.928625][ T3072] preempt_count: 1, expected: 0 [ 33.929843][ T3072] RCU nest depth: 0, expected: 0 [ 33.931071][ T3072] INFO: lockdep is turned off. [ 33.932302][ T3072] Preemption disabled at: [ 33.932307][ T3072] [] l2tp_tunnel_register+0x354/0x79c [ 33.935107][ T3072] CPU: 0 PID: 3072 Comm: syz-executor466 Not tainted 6.1.0-rc6-syzkaller-32653-g65762d97e6fa #0 [ 33.937763][ T3072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 33.940491][ T3072] Call trace: [ 33.941339][ T3072] dump_backtrace+0x1c4/0x1f0 [ 33.942511][ T3072] show_stack+0x2c/0x54 [ 33.943597][ T3072] dump_stack_lvl+0x104/0x16c [ 33.944850][ T3072] dump_stack+0x1c/0x58 [ 33.945843][ T3072] __might_resched+0x208/0x218 [ 33.946993][ T3072] __might_sleep+0x48/0x78 [ 33.948057][ T3072] cpus_read_lock+0x28/0x1e0 [ 33.949305][ T3072] static_key_slow_inc+0x1c/0x38 [ 33.950648][ T3072] udpv6_encap_enable+0x1c/0x28 [ 33.951948][ T3072] setup_udp_tunnel_sock+0xec/0x124 [ 33.953360][ T3072] l2tp_tunnel_register+0x68c/0x79c [ 33.954705][ T3072] pppol2tp_connect+0x3e8/0x6c4 [ 33.955896][ T3072] __sys_connect+0x184/0x190 [ 33.957144][ T3072] __arm64_sys_connect+0x28/0x3c [ 33.958466][ T3072] el0_svc_common+0x138/0x220 [ 33.959709][ T3072] do_el0_svc+0x48/0x164 [ 33.960852][ T3072] el0_svc+0x58/0x150 [ 33.961901][ T3072] el0t_64_sync_handler+0x84/0xf0 [ 33.963236][ T3072] el0t_64_sync+0x190/0x194