Warning: Permanently added '10.128.0.128' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 33.341134][ T3073] [ 33.341782][ T3073] ======================================================== [ 33.343299][ T3073] WARNING: possible irq lock inversion dependency detected [ 33.344796][ T3073] 6.1.0-rc6-syzkaller-32653-g65762d97e6fa #0 Not tainted [ 33.346325][ T3073] -------------------------------------------------------- [ 33.347955][ T3073] syz-executor352/3073 just changed the state of lock: [ 33.349420][ T3073] ffff0000cb836cb8 (clock-AF_INET6){+++.}-{2:2}, at: l2tp_tunnel_register+0x354/0x79c [ 33.351497][ T3073] but this lock was taken by another, SOFTIRQ-safe lock in the past: [ 33.353297][ T3073] (&tcp_hashinfo.bhash[i].lock){+.-.}-{2:2} [ 33.353307][ T3073] [ 33.353307][ T3073] [ 33.353307][ T3073] and interrupts could create inverse lock ordering between them. [ 33.353307][ T3073] [ 33.357785][ T3073] [ 33.357785][ T3073] other info that might help us debug this: [ 33.359584][ T3073] Possible interrupt unsafe locking scenario: [ 33.359584][ T3073] [ 33.361408][ T3073] CPU0 CPU1 [ 33.362597][ T3073] ---- ---- [ 33.363786][ T3073] lock(clock-AF_INET6); [ 33.364731][ T3073] local_irq_disable(); [ 33.366168][ T3073] lock(&tcp_hashinfo.bhash[i].lock); [ 33.367936][ T3073] lock(clock-AF_INET6); [ 33.369436][ T3073] [ 33.370188][ T3073] lock(&tcp_hashinfo.bhash[i].lock); [ 33.371440][ T3073] [ 33.371440][ T3073] *** DEADLOCK *** [ 33.371440][ T3073] [ 33.373313][ T3073] 1 lock held by syz-executor352/3073: [ 33.374563][ T3073] #0: ffff0000cb816130 (sk_lock-AF_PPPOX){+.+.}-{0:0}, at: pppol2tp_connect+0x184/0x6c4 [ 33.376701][ T3073] [ 33.376701][ T3073] the shortest dependencies between 2nd lock and 1st lock: [ 33.378747][ T3073] -> (&tcp_hashinfo.bhash[i].lock){+.-.}-{2:2} { [ 33.380487][ T3073] HARDIRQ-ON-W at: [ 33.381538][ T3073] lock_acquire+0x100/0x1f8 [ 33.383230][ T3073] _raw_spin_lock_bh+0x54/0x6c [ 33.384995][ T3073] inet_csk_get_port+0xe0/0xaf0 [ 33.386772][ T3073] __inet6_bind+0x688/0x8ac [ 33.388442][ T3073] inet6_bind+0xf4/0x150 [ 33.390047][ T3073] rds_tcp_listen_init+0x14c/0x1f0 [ 33.391809][ T3073] rds_tcp_init_net+0xcc/0x1dc [ 33.393593][ T3073] ops_init+0xe4/0x2e4 [ 33.395134][ T3073] register_pernet_operations+0x108/0x264 [ 33.397044][ T3073] register_pernet_device+0x3c/0x94 [ 33.398750][ T3073] rds_tcp_init+0x74/0xe0 [ 33.400257][ T3073] do_one_initcall+0x118/0x22c [ 33.401934][ T3073] do_initcall_level+0xac/0xe4 [ 33.403696][ T3073] do_initcalls+0x58/0xa8 [ 33.405212][ T3073] do_basic_setup+0x20/0x2c [ 33.406796][ T3073] kernel_init_freeable+0xb8/0x148 [ 33.408493][ T3073] kernel_init+0x24/0x290 [ 33.410013][ T3073] ret_from_fork+0x10/0x20 [ 33.411526][ T3073] IN-SOFTIRQ-W at: [ 33.412476][ T3073] lock_acquire+0x100/0x1f8 [ 33.413987][ T3073] _raw_spin_lock+0x54/0x6c [ 33.415480][ T3073] __inet_inherit_port+0x124/0x9ac [ 33.417066][ T3073] tcp_v4_syn_recv_sock+0x790/0x848 [ 33.418711][ T3073] tcp_check_req+0x75c/0x8e4 [ 33.420249][ T3073] tcp_v4_rcv+0xad4/0x11e8 [ 33.421711][ T3073] ip_protocol_deliver_rcu+0x224/0x414 [ 33.423469][ T3073] ip_local_deliver_finish+0x124/0x200 [ 33.425199][ T3073] ip_local_deliver+0xd0/0xf4 [ 33.426743][ T3073] ip_sublist_rcv+0x40c/0x474 [ 33.428326][ T3073] ip_list_rcv+0x184/0x1c8 [ 33.429870][ T3073] __netif_receive_skb_list_core+0x1f8/0x2b0 [ 33.431817][ T3073] __netif_receive_skb_list+0x16c/0x1d0 [ 33.433548][ T3073] netif_receive_skb_list_internal+0x1e8/0x340 [ 33.435464][ T3073] napi_complete_done+0x140/0x354 [ 33.437080][ T3073] gve_napi_poll+0xcc/0x1b4 [ 33.438587][ T3073] __napi_poll+0x5c/0x24c [ 33.440089][ T3073] napi_poll+0x110/0x484 [ 33.441615][ T3073] net_rx_action+0x18c/0x414 [ 33.443213][ T3073] _stext+0x168/0x37c [ 33.444730][ T3073] ____do_softirq+0x14/0x20 [ 33.446335][ T3073] call_on_irq_stack+0x2c/0x54 [ 33.447994][ T3073] do_softirq_own_stack+0x20/0x2c [ 33.449757][ T3073] invoke_softirq+0x70/0xbc [ 33.451381][ T3073] __irq_exit_rcu+0xf0/0x140 [ 33.452959][ T3073] irq_exit_rcu+0x10/0x40 [ 33.454551][ T3073] el1_interrupt+0x38/0x68 [ 33.456158][ T3073] el1h_64_irq_handler+0x18/0x24 [ 33.457776][ T3073] el1h_64_irq+0x64/0x68 [ 33.459200][ T3073] arch_local_irq_enable+0xc/0x18 [ 33.460815][ T3073] default_idle_call+0x48/0xb8 [ 33.462339][ T3073] do_idle+0x110/0x2d4 [ 33.463804][ T3073] cpu_startup_entry+0x24/0x28 [ 33.465379][ T3073] kernel_init+0x0/0x290 [ 33.466886][ T3073] start_kernel+0x0/0x620 [ 33.468457][ T3073] start_kernel+0x450/0x620 [ 33.470099][ T3073] __primary_switched+0xb4/0xbc [ 33.471800][ T3073] INITIAL USE at: [ 33.472732][ T3073] lock_acquire+0x100/0x1f8 [ 33.474347][ T3073] _raw_spin_lock_bh+0x54/0x6c [ 33.476149][ T3073] inet_csk_get_port+0xe0/0xaf0 [ 33.477803][ T3073] __inet6_bind+0x688/0x8ac [ 33.479462][ T3073] inet6_bind+0xf4/0x150 [ 33.480994][ T3073] rds_tcp_listen_init+0x14c/0x1f0 [ 33.482729][ T3073] rds_tcp_init_net+0xcc/0x1dc [ 33.484373][ T3073] ops_init+0xe4/0x2e4 [ 33.485896][ T3073] register_pernet_operations+0x108/0x264 [ 33.487795][ T3073] register_pernet_device+0x3c/0x94 [ 33.489516][ T3073] rds_tcp_init+0x74/0xe0 [ 33.490954][ T3073] do_one_initcall+0x118/0x22c [ 33.492501][ T3073] do_initcall_level+0xac/0xe4 [ 33.494056][ T3073] do_initcalls+0x58/0xa8 [ 33.495595][ T3073] do_basic_setup+0x20/0x2c [ 33.497134][ T3073] kernel_init_freeable+0xb8/0x148 [ 33.498905][ T3073] kernel_init+0x24/0x290 [ 33.500544][ T3073] ret_from_fork+0x10/0x20 [ 33.502125][ T3073] } [ 33.502797][ T3073] ... key at: [] tcp_init.__key.22+0x0/0x10 [ 33.504892][ T3073] ... acquired at: [ 33.505893][ T3073] _raw_read_lock_bh+0x64/0x7c [ 33.507169][ T3073] sock_i_uid+0x24/0x58 [ 33.508275][ T3073] inet_csk_get_port+0x674/0xaf0 [ 33.509683][ T3073] __inet6_bind+0x688/0x8ac [ 33.510881][ T3073] inet6_bind+0xf4/0x150 [ 33.512044][ T3073] __sys_bind+0x148/0x1b0 [ 33.513243][ T3073] __arm64_sys_bind+0x28/0x3c [ 33.514531][ T3073] el0_svc_common+0x138/0x220 [ 33.515797][ T3073] do_el0_svc+0x48/0x164 [ 33.516892][ T3073] el0_svc+0x58/0x150 [ 33.517988][ T3073] el0t_64_sync_handler+0x84/0xf0 [ 33.519257][ T3073] el0t_64_sync+0x190/0x194 [ 33.520424][ T3073] [ 33.520976][ T3073] -> (clock-AF_INET6){+++.}-{2:2} { [ 33.522323][ T3073] HARDIRQ-ON-W at: [ 33.523364][ T3073] lock_acquire+0x100/0x1f8 [ 33.524993][ T3073] _raw_write_lock_bh+0x54/0x6c [ 33.526692][ T3073] sk_common_release+0x58/0x1d4 [ 33.528277][ T3073] udp_lib_close+0x20/0x30 [ 33.529826][ T3073] inet_release+0xc8/0xe4 [ 33.531321][ T3073] inet6_release+0x3c/0x58 [ 33.532864][ T3073] sock_close+0x50/0xf0 [ 33.534406][ T3073] __fput+0x198/0x3e4 [ 33.535834][ T3073] ____fput+0x20/0x30 [ 33.537280][ T3073] task_work_run+0x100/0x148 [ 33.538873][ T3073] do_notify_resume+0x174/0x1f0 [ 33.540521][ T3073] el0_svc+0x9c/0x150 [ 33.541944][ T3073] el0t_64_sync_handler+0x84/0xf0 [ 33.543651][ T3073] el0t_64_sync+0x190/0x194 [ 33.545230][ T3073] HARDIRQ-ON-R at: [ 33.546270][ T3073] lock_acquire+0x100/0x1f8 [ 33.547834][ T3073] _raw_read_lock_bh+0x64/0x7c [ 33.549547][ T3073] sock_i_uid+0x24/0x58 [ 33.551073][ T3073] udp_lib_lport_inuse+0x44/0x268 [ 33.552808][ T3073] udp_lib_get_port+0x2bc/0x8f8 [ 33.554481][ T3073] udp_v6_get_port+0x60/0x74 [ 33.556098][ T3073] __inet6_bind+0x688/0x8ac [ 33.557586][ T3073] inet6_bind+0xf4/0x150 [ 33.558909][ T3073] __sys_bind+0x148/0x1b0 [ 33.560267][ T3073] __arm64_sys_bind+0x28/0x3c [ 33.561794][ T3073] el0_svc_common+0x138/0x220 [ 33.563232][ T3073] do_el0_svc+0x48/0x164 [ 33.564654][ T3073] el0_svc+0x58/0x150 [ 33.566013][ T3073] el0t_64_sync_handler+0x84/0xf0 [ 33.567689][ T3073] el0t_64_sync+0x190/0x194 [ 33.569406][ T3073] SOFTIRQ-ON-W at: [ 33.570429][ T3073] lock_acquire+0x100/0x1f8 [ 33.572003][ T3073] _raw_write_lock+0x54/0x6c [ 33.573692][ T3073] l2tp_tunnel_register+0x354/0x79c [ 33.575338][ T3073] pppol2tp_connect+0x3e8/0x6c4 [ 33.576835][ T3073] __sys_connect+0x184/0x190 [ 33.578188][ T3073] __arm64_sys_connect+0x28/0x3c [ 33.579568][ T3073] el0_svc_common+0x138/0x220 [ 33.580964][ T3073] do_el0_svc+0x48/0x164 [ 33.582232][ T3073] el0_svc+0x58/0x150 [ 33.583578][ T3073] el0t_64_sync_handler+0x84/0xf0 [ 33.585167][ T3073] el0t_64_sync+0x190/0x194 [ 33.586636][ T3073] INITIAL USE at: [ 33.587560][ T3073] lock_acquire+0x100/0x1f8 [ 33.589040][ T3073] _raw_write_lock_bh+0x54/0x6c [ 33.590612][ T3073] sk_common_release+0x58/0x1d4 [ 33.592226][ T3073] udp_lib_close+0x20/0x30 [ 33.593673][ T3073] inet_release+0xc8/0xe4 [ 33.595109][ T3073] inet6_release+0x3c/0x58 [ 33.596570][ T3073] sock_close+0x50/0xf0 [ 33.597926][ T3073] __fput+0x198/0x3e4 [ 33.599280][ T3073] ____fput+0x20/0x30 [ 33.600723][ T3073] task_work_run+0x100/0x148 [ 33.602241][ T3073] do_notify_resume+0x174/0x1f0 [ 33.603821][ T3073] el0_svc+0x9c/0x150 [ 33.605154][ T3073] el0t_64_sync_handler+0x84/0xf0 [ 33.606723][ T3073] el0t_64_sync+0x190/0x194 [ 33.608139][ T3073] INITIAL READ USE at: [ 33.609399][ T3073] lock_acquire+0x100/0x1f8 [ 33.611118][ T3073] _raw_read_lock_bh+0x64/0x7c [ 33.612886][ T3073] sock_i_uid+0x24/0x58 [ 33.614487][ T3073] udp_lib_lport_inuse+0x44/0x268 [ 33.616148][ T3073] udp_lib_get_port+0x2bc/0x8f8 [ 33.617800][ T3073] udp_v6_get_port+0x60/0x74 [ 33.619313][ T3073] __inet6_bind+0x688/0x8ac [ 33.620809][ T3073] inet6_bind+0xf4/0x150 [ 33.622448][ T3073] __sys_bind+0x148/0x1b0 [ 33.624052][ T3073] __arm64_sys_bind+0x28/0x3c [ 33.625801][ T3073] el0_svc_common+0x138/0x220 [ 33.627594][ T3073] do_el0_svc+0x48/0x164 [ 33.629264][ T3073] el0_svc+0x58/0x150 [ 33.630752][ T3073] el0t_64_sync_handler+0x84/0xf0 [ 33.632331][ T3073] el0t_64_sync+0x190/0x194 [ 33.633884][ T3073] } [ 33.634506][ T3073] ... key at: [] af_callback_keys+0xa0/0x2e0 [ 33.636425][ T3073] ... acquired at: [ 33.637221][ T3073] mark_lock+0x154/0x1b4 [ 33.638147][ T3073] __lock_acquire+0x618/0x3084 [ 33.639186][ T3073] lock_acquire+0x100/0x1f8 [ 33.640284][ T3073] _raw_write_lock+0x54/0x6c [ 33.641412][ T3073] l2tp_tunnel_register+0x354/0x79c [ 33.642622][ T3073] pppol2tp_connect+0x3e8/0x6c4 [ 33.643867][ T3073] __sys_connect+0x184/0x190 [ 33.644988][ T3073] __arm64_sys_connect+0x28/0x3c [ 33.646290][ T3073] el0_svc_common+0x138/0x220 [ 33.647424][ T3073] do_el0_svc+0x48/0x164 [ 33.648383][ T3073] el0_svc+0x58/0x150 [ 33.649325][ T3073] el0t_64_sync_handler+0x84/0xf0 [ 33.650546][ T3073] el0t_64_sync+0x190/0x194 [ 33.651692][ T3073] [ 33.652184][ T3073] [ 33.652184][ T3073] stack backtrace: [ 33.653579][ T3073] CPU: 1 PID: 3073 Comm: syz-executor352 Not tainted 6.1.0-rc6-syzkaller-32653-g65762d97e6fa #0 [ 33.655999][ T3073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 33.658445][ T3073] Call trace: [ 33.659163][ T3073] dump_backtrace+0x1c4/0x1f0 [ 33.660287][ T3073] show_stack+0x2c/0x54 [ 33.661261][ T3073] dump_stack_lvl+0x104/0x16c [ 33.662335][ T3073] dump_stack+0x1c/0x58 [ 33.663269][ T3073] print_irq_inversion_bug+0x2f8/0x300 [ 33.664630][ T3073] mark_lock_irq+0x3ec/0x4b4 [ 33.665674][ T3073] mark_lock+0x154/0x1b4 [ 33.666665][ T3073] __lock_acquire+0x618/0x3084 [ 33.667895][ T3073] lock_acquire+0x100/0x1f8 [ 33.668947][ T3073] _raw_write_lock+0x54/0x6c [ 33.670145][ T3073] l2tp_tunnel_register+0x354/0x79c [ 33.671382][ T3073] pppol2tp_connect+0x3e8/0x6c4 [ 33.672518][ T3073] __sys_connect+0x184/0x190 [ 33.673691][ T3073] __arm64_sys_connect+0x28/0x3c [ 33.674915][ T3073] el0_svc_common+0x138/0x220 [ 33.676014][ T3073] do_el0_svc+0x48/0x164 [ 33.677041][ T3073] el0_svc+0x58/0x150 [ 33.677944][ T3073] el0t_64_sync_handler+0x84/0xf0 [ 33.679107][ T3073] el0t_64_sync+0x190/0x194 [ 33.680309][ T3073] BUG: sleeping function called from invalid context at include/linux/percpu-rwsem.h:49 [ 33.682521][ T3073] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 3073, name: syz-executor352 [ 33.684685][ T3073] preempt_count: 1, expected: 0 [ 33.685734][ T3073] RCU nest depth: 0, expected: 0 [ 33.686990][ T3073] INFO: lockdep is turned off. [ 33.688342][ T3073] Preemption disabled at: [ 33.688347][ T3073] [] l2tp_tunnel_register+0x354/0x79c [ 33.691076][ T3073] CPU: 1 PID: 3073 Comm: syz-executor352 Not tainted 6.1.0-rc6-syzkaller-32653-g65762d97e6fa #0 [ 33.693606][ T3073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 33.696138][ T3073] Call trace: [ 33.696979][ T3073] dump_backtrace+0x1c4/0x1f0 [ 33.698161][ T3073] show_stack+0x2c/0x54 [ 33.699123][ T3073] dump_stack_lvl+0x104/0x16c [ 33.700263][ T3073] dump_stack+0x1c/0x58 [ 33.701238][ T3073] __might_resched+0x208/0x218 [ 33.702293][ T3073] __might_sleep+0x48/0x78 [ 33.703449][ T3073] cpus_read_lock+0x28/0x1e0 [ 33.704592][ T3073] static_key_slow_inc+0x1c/0x38 [ 33.705789][ T3073] udpv6_encap_enable+0x1c/0x28 [ 33.706948][ T3073] setup_udp_tunnel_sock+0xec/0x124 [ 33.708227][ T3073] l2tp_tunnel_register+0x68c/0x79c [ 33.709507][ T3073] pppol2tp_connect+0x3e8/0x6c4 [ 33.710753][ T3073] __sys_connect+0x184/0x190 [ 33.711895][ T3073] __arm64_sys_connect+0x28/0x3c [ 33.713029][ T3073] el0_svc_common+0x138/0x220 [ 33.714107][ T3073] do_el0_svc+0x48/0x164 [ 33.715107][ T3073] el0_svc+0x58/0x150 [ 33.716097][ T3073] el0t_64_sync_handler+0x84/0xf0 [ 33.717320][ T3073] el0t_64_sync+0x190/0x194