Warning: Permanently added '10.128.0.8' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 58.967101][ C1] [ 58.969449][ C1] ======================================================== [ 58.976614][ C1] WARNING: possible irq lock inversion dependency detected [ 58.983800][ C1] 5.6.0-syzkaller #0 Not tainted [ 58.988708][ C1] -------------------------------------------------------- [ 58.995906][ C1] swapper/1/0 just changed the state of lock: [ 59.001950][ C1] ffff8880934cdcd8 (&ctx->ctx_lock){..-.}-{2:2}, at: free_ioctx_users+0x2b/0x450 [ 59.011062][ C1] but this lock took another, SOFTIRQ-unsafe lock in the past: [ 59.018581][ C1] (&pid->wait_pidfd){+.+.}-{2:2} [ 59.018591][ C1] [ 59.018591][ C1] [ 59.018591][ C1] and interrupts could create inverse lock ordering between them. [ 59.018591][ C1] [ 59.037880][ C1] [ 59.037880][ C1] other info that might help us debug this: [ 59.045956][ C1] Possible interrupt unsafe locking scenario: [ 59.045956][ C1] [ 59.054296][ C1] CPU0 CPU1 [ 59.059647][ C1] ---- ---- [ 59.064992][ C1] lock(&pid->wait_pidfd); [ 59.069493][ C1] local_irq_disable(); [ 59.076242][ C1] lock(&ctx->ctx_lock); [ 59.083082][ C1] lock(&pid->wait_pidfd); [ 59.090098][ C1] [ 59.093547][ C1] lock(&ctx->ctx_lock); [ 59.098065][ C1] [ 59.098065][ C1] *** DEADLOCK *** [ 59.098065][ C1] [ 59.106251][ C1] 2 locks held by swapper/1/0: [ 59.110997][ C1] #0: ffffffff899bc060 (rcu_callback){....}-{0:0}, at: rcu_core+0x520/0x1370 [ 59.119842][ C1] #1: ffffffff899bc180 (rcu_read_lock){....}-{1:2}, at: percpu_ref_switch_to_atomic_rcu+0x209/0x540 [ 59.130816][ C1] [ 59.130816][ C1] the shortest dependencies between 2nd lock and 1st lock: [ 59.140182][ C1] -> (&pid->wait_pidfd){+.+.}-{2:2} { [ 59.145628][ C1] HARDIRQ-ON-W at: [ 59.149698][ C1] lock_acquire+0x1f2/0x8f0 [ 59.156011][ C1] _raw_spin_lock+0x2a/0x40 [ 59.162332][ C1] proc_pid_make_inode+0x1f9/0x3c0 [ 59.169264][ C1] proc_pid_instantiate+0x51/0x150 [ 59.176196][ C1] proc_pid_lookup+0x1da/0x340 [ 59.182770][ C1] proc_root_lookup+0x20/0x60 [ 59.189276][ C1] __lookup_slow+0x256/0x490 [ 59.195744][ C1] walk_component+0x418/0x6a0 [ 59.202229][ C1] link_path_walk.part.0+0x4f1/0xb50 [ 59.209351][ C1] path_openat+0x25a/0x27d0 [ 59.215671][ C1] do_filp_open+0x192/0x260 [ 59.222031][ C1] do_sys_openat2+0x585/0x7d0 [ 59.228514][ C1] do_sys_open+0xc3/0x140 [ 59.234656][ C1] do_syscall_64+0xf6/0x7d0 [ 59.241025][ C1] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 59.248714][ C1] SOFTIRQ-ON-W at: [ 59.252783][ C1] lock_acquire+0x1f2/0x8f0 [ 59.259102][ C1] _raw_spin_lock+0x2a/0x40 [ 59.265428][ C1] proc_pid_make_inode+0x1f9/0x3c0 [ 59.272353][ C1] proc_pid_instantiate+0x51/0x150 [ 59.279330][ C1] proc_pid_lookup+0x1da/0x340 [ 59.285949][ C1] proc_root_lookup+0x20/0x60 [ 59.292442][ C1] __lookup_slow+0x256/0x490 [ 59.298838][ C1] walk_component+0x418/0x6a0 [ 59.305330][ C1] link_path_walk.part.0+0x4f1/0xb50 [ 59.312421][ C1] path_openat+0x25a/0x27d0 [ 59.318733][ C1] do_filp_open+0x192/0x260 [ 59.325040][ C1] do_sys_openat2+0x585/0x7d0 [ 59.331534][ C1] do_sys_open+0xc3/0x140 [ 59.337680][ C1] do_syscall_64+0xf6/0x7d0 [ 59.344019][ C1] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 59.351763][ C1] INITIAL USE at: [ 59.355738][ C1] lock_acquire+0x1f2/0x8f0 [ 59.361966][ C1] _raw_spin_lock_irqsave+0x8c/0xbf [ 59.368891][ C1] __wake_up_common_lock+0xb4/0x130 [ 59.375815][ C1] do_notify_parent+0x19e/0xe60 [ 59.382401][ C1] do_exit+0x238f/0x2dd0 [ 59.388384][ C1] call_usermodehelper_exec_async+0x507/0x710 [ 59.396186][ C1] ret_from_fork+0x24/0x30 [ 59.402333][ C1] } [ 59.404913][ C1] ... key at: [] __key.53831+0x0/0x40 [ 59.412443][ C1] ... acquired at: [ 59.416343][ C1] _raw_spin_lock+0x2a/0x40 [ 59.421004][ C1] io_submit_one+0xc1b/0x2ec0 [ 59.425837][ C1] __x64_sys_io_submit+0x1bd/0x540 [ 59.431151][ C1] do_syscall_64+0xf6/0x7d0 [ 59.435812][ C1] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 59.441903][ C1] [ 59.444210][ C1] -> (&ctx->ctx_lock){..-.}-{2:2} { [ 59.449412][ C1] IN-SOFTIRQ-W at: [ 59.453401][ C1] lock_acquire+0x1f2/0x8f0 [ 59.459568][ C1] _raw_spin_lock_irq+0x5b/0x80 [ 59.466099][ C1] free_ioctx_users+0x2b/0x450 [ 59.472509][ C1] percpu_ref_switch_to_atomic_rcu+0x494/0x540 [ 59.480299][ C1] rcu_core+0x59f/0x1370 [ 59.486218][ C1] __do_softirq+0x26c/0x9f7 [ 59.492359][ C1] irq_exit+0x192/0x1d0 [ 59.498185][ C1] smp_apic_timer_interrupt+0x19e/0x600 [ 59.505371][ C1] apic_timer_interrupt+0xf/0x20 [ 59.511943][ C1] native_safe_halt+0xe/0x10 [ 59.518166][ C1] default_idle+0x49/0x350 [ 59.524233][ C1] do_idle+0x393/0x690 [ 59.529937][ C1] cpu_startup_entry+0x14/0x20 [ 59.536345][ C1] start_secondary+0x2f3/0x400 [ 59.542745][ C1] secondary_startup_64+0xa4/0xb0 [ 59.549404][ C1] INITIAL USE at: [ 59.553303][ C1] lock_acquire+0x1f2/0x8f0 [ 59.559352][ C1] _raw_spin_lock_irq+0x5b/0x80 [ 59.566028][ C1] io_submit_one+0xbd6/0x2ec0 [ 59.572354][ C1] __x64_sys_io_submit+0x1bd/0x540 [ 59.579019][ C1] do_syscall_64+0xf6/0x7d0 [ 59.585073][ C1] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 59.592512][ C1] } [ 59.595031][ C1] ... key at: [] __key.55314+0x0/0x40 [ 59.602465][ C1] ... acquired at: [ 59.606286][ C1] mark_lock+0x624/0xf10 [ 59.610710][ C1] __lock_acquire+0x1d28/0x4e00 [ 59.615725][ C1] lock_acquire+0x1f2/0x8f0 [ 59.620389][ C1] _raw_spin_lock_irq+0x5b/0x80 [ 59.625439][ C1] free_ioctx_users+0x2b/0x450 [ 59.630374][ C1] percpu_ref_switch_to_atomic_rcu+0x494/0x540 [ 59.636703][ C1] rcu_core+0x59f/0x1370 [ 59.641106][ C1] __do_softirq+0x26c/0x9f7 [ 59.645767][ C1] irq_exit+0x192/0x1d0 [ 59.650090][ C1] smp_apic_timer_interrupt+0x19e/0x600 [ 59.655792][ C1] apic_timer_interrupt+0xf/0x20 [ 59.660909][ C1] native_safe_halt+0xe/0x10 [ 59.665656][ C1] default_idle+0x49/0x350 [ 59.670235][ C1] do_idle+0x393/0x690 [ 59.674457][ C1] cpu_startup_entry+0x14/0x20 [ 59.679385][ C1] start_secondary+0x2f3/0x400 [ 59.684339][ C1] secondary_startup_64+0xa4/0xb0 [ 59.689548][ C1] [ 59.691860][ C1] [ 59.691860][ C1] stack backtrace: [ 59.697771][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.6.0-syzkaller #0 [ 59.705314][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 59.715352][ C1] Call Trace: [ 59.718621][ C1] [ 59.721462][ C1] dump_stack+0x188/0x20d [ 59.725779][ C1] check_usage_forwards.cold+0x20/0x29 [ 59.731243][ C1] ? check_usage_backwards+0x4e0/0x4e0 [ 59.736703][ C1] ? stack_trace_consume_entry+0x160/0x160 [ 59.742496][ C1] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 59.749070][ C1] ? get_stack_info+0x32/0x13e [ 59.753818][ C1] ? save_trace+0x42/0x9f0 [ 59.758243][ C1] mark_lock+0x624/0xf10 [ 59.762472][ C1] ? check_usage_backwards+0x4e0/0x4e0 [ 59.767921][ C1] ? print_usage_bug+0x240/0x240 [ 59.772843][ C1] ? print_usage_bug+0x240/0x240 [ 59.777773][ C1] ? mark_lock+0x12b/0xf10 [ 59.782217][ C1] __lock_acquire+0x1d28/0x4e00 [ 59.787081][ C1] ? mark_held_locks+0xe0/0xe0 [ 59.791850][ C1] ? __wake_up_common_lock+0xde/0x130 [ 59.797240][ C1] lock_acquire+0x1f2/0x8f0 [ 59.801728][ C1] ? free_ioctx_users+0x2b/0x450 [ 59.806650][ C1] ? lock_release+0x800/0x800 [ 59.811313][ C1] ? lock_acquire+0x1f2/0x8f0 [ 59.815974][ C1] ? percpu_ref_switch_to_atomic_rcu+0x209/0x540 [ 59.822290][ C1] ? lock_release+0x800/0x800 [ 59.826950][ C1] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 59.832753][ C1] _raw_spin_lock_irq+0x5b/0x80 [ 59.837588][ C1] ? free_ioctx_users+0x2b/0x450 [ 59.842559][ C1] free_ioctx_users+0x2b/0x450 [ 59.847357][ C1] percpu_ref_switch_to_atomic_rcu+0x494/0x540 [ 59.853500][ C1] rcu_core+0x59f/0x1370 [ 59.857727][ C1] ? __rcu_read_unlock+0x700/0x700 [ 59.862851][ C1] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 59.868384][ C1] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 59.874346][ C1] ? run_rebalance_domains+0x202/0x2c0 [ 59.879789][ C1] __do_softirq+0x26c/0x9f7 [ 59.884287][ C1] irq_exit+0x192/0x1d0 [ 59.888425][ C1] smp_apic_timer_interrupt+0x19e/0x600 [ 59.893967][ C1] apic_timer_interrupt+0xf/0x20 [ 59.898883][ C1] [ 59.901816][ C1] RIP: 0010:native_safe_halt+0xe/0x10 [ 59.907177][ C1] Code: cc cc cc cc cc cc cc cc cc cc cc cc e9 07 00 00 00 0f 00 2d 84 1e 59 00 f4 c3 66 90 e9 07 00 00 00 0f 00 2d 74 1e 59 00 fb f4 cc 41 56 41 55 41 54 55 53 e8 83 91 91 f9 e8 ce 2c ca fb 0f 1f [ 59.926764][ C1] RSP: 0018:ffffc90000d3fdb8 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 [ 59.935175][ C1] RAX: 1ffffffff132930f RBX: ffff8880a95f2340 RCX: 0000000000000000 [ 59.943151][ C1] RDX: dffffc0000000000 RSI: 0000000000000006 RDI: ffff8880a95f2c04 [ 59.951128][ C1] RBP: dffffc0000000000 R08: ffff8880a95f2340 R09: 0000000000000000 [ 59.959100][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: ffffed10152be468 [ 59.967059][ C1] R13: 0000000000000001 R14: ffffffff8a890cc0 R15: 0000000000000000 [ 59.975039][ C1] default_idle+0x49/0x350 [ 59.979482][ C1] do_idle+0x393/0x690 [ 59.983530][ C1] ? arch_cpu_idle_exit+0x70/0x70 [ 59.988540][ C1] cpu_startup_entry+0x14/0x20 [ 59.993293][ C1] start_secondary+0x2f3/0x400 [ 59.998039][ C1] ? set_cpu_sibling_map+0x1ed0/0x1ed0 [ 60.003479][ C1] secondary_startup_64+0xa4/0xb0