Warning: Permanently added '10.128.0.52' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 32.286683][ T3072] [ 32.287218][ T3072] ======================================================== [ 32.288657][ T3072] WARNING: possible irq lock inversion dependency detected [ 32.290258][ T3072] 6.1.0-rc6-syzkaller-32653-g65762d97e6fa #0 Not tainted [ 32.291908][ T3072] -------------------------------------------------------- [ 32.293561][ T3072] syz-executor392/3072 just changed the state of lock: [ 32.295051][ T3072] ffff0000cb25bfb8 (clock-AF_INET6){+++.}-{2:2}, at: l2tp_tunnel_register+0x354/0x79c [ 32.297188][ T3072] but this lock was taken by another, SOFTIRQ-safe lock in the past: [ 32.299118][ T3072] (&tcp_hashinfo.bhash[i].lock){+.-.}-{2:2} [ 32.299127][ T3072] [ 32.299127][ T3072] [ 32.299127][ T3072] and interrupts could create inverse lock ordering between them. [ 32.299127][ T3072] [ 32.303710][ T3072] [ 32.303710][ T3072] other info that might help us debug this: [ 32.305499][ T3072] Possible interrupt unsafe locking scenario: [ 32.305499][ T3072] [ 32.307337][ T3072] CPU0 CPU1 [ 32.308458][ T3072] ---- ---- [ 32.309620][ T3072] lock(clock-AF_INET6); [ 32.310443][ T3072] local_irq_disable(); [ 32.311891][ T3072] lock(&tcp_hashinfo.bhash[i].lock); [ 32.313669][ T3072] lock(clock-AF_INET6); [ 32.315225][ T3072] [ 32.316030][ T3072] lock(&tcp_hashinfo.bhash[i].lock); [ 32.317224][ T3072] [ 32.317224][ T3072] *** DEADLOCK *** [ 32.317224][ T3072] [ 32.319036][ T3072] 1 lock held by syz-executor392/3072: [ 32.320370][ T3072] #0: ffff0000cad43930 (sk_lock-AF_PPPOX){+.+.}-{0:0}, at: pppol2tp_connect+0x184/0x6c4 [ 32.322543][ T3072] [ 32.322543][ T3072] the shortest dependencies between 2nd lock and 1st lock: [ 32.324577][ T3072] -> (&tcp_hashinfo.bhash[i].lock){+.-.}-{2:2} { [ 32.325934][ T3072] HARDIRQ-ON-W at: [ 32.326841][ T3072] lock_acquire+0x100/0x1f8 [ 32.328209][ T3072] _raw_spin_lock_bh+0x54/0x6c [ 32.329523][ T3072] inet_csk_get_port+0xe0/0xaf0 [ 32.330939][ T3072] __inet6_bind+0x688/0x8ac [ 32.332350][ T3072] inet6_bind+0xf4/0x150 [ 32.333692][ T3072] rds_tcp_listen_init+0x14c/0x1f0 [ 32.335159][ T3072] rds_tcp_init_net+0xcc/0x1dc [ 32.336504][ T3072] ops_init+0xe4/0x2e4 [ 32.337707][ T3072] register_pernet_operations+0x108/0x264 [ 32.339334][ T3072] register_pernet_device+0x3c/0x94 [ 32.340854][ T3072] rds_tcp_init+0x74/0xe0 [ 32.342202][ T3072] do_one_initcall+0x118/0x22c [ 32.343690][ T3072] do_initcall_level+0xac/0xe4 [ 32.345130][ T3072] do_initcalls+0x58/0xa8 [ 32.346478][ T3072] do_basic_setup+0x20/0x2c [ 32.347829][ T3072] kernel_init_freeable+0xb8/0x148 [ 32.349292][ T3072] kernel_init+0x24/0x290 [ 32.350393][ T3072] ret_from_fork+0x10/0x20 [ 32.351483][ T3072] IN-SOFTIRQ-W at: [ 32.352299][ T3072] lock_acquire+0x100/0x1f8 [ 32.353601][ T3072] _raw_spin_lock+0x54/0x6c [ 32.355084][ T3072] __inet_inherit_port+0x124/0x9ac [ 32.356577][ T3072] tcp_v4_syn_recv_sock+0x790/0x848 [ 32.358073][ T3072] tcp_check_req+0x75c/0x8e4 [ 32.359522][ T3072] tcp_v4_rcv+0xad4/0x11e8 [ 32.360934][ T3072] ip_protocol_deliver_rcu+0x224/0x414 [ 32.362577][ T3072] ip_local_deliver_finish+0x124/0x200 [ 32.364176][ T3072] ip_local_deliver+0xd0/0xf4 [ 32.365564][ T3072] ip_sublist_rcv+0x40c/0x474 [ 32.366928][ T3072] ip_list_rcv+0x184/0x1c8 [ 32.368246][ T3072] __netif_receive_skb_list_core+0x1f8/0x2b0 [ 32.369987][ T3072] __netif_receive_skb_list+0x16c/0x1d0 [ 32.371598][ T3072] netif_receive_skb_list_internal+0x1e8/0x340 [ 32.373387][ T3072] napi_complete_done+0x140/0x354 [ 32.374834][ T3072] gve_napi_poll+0xcc/0x1b4 [ 32.376232][ T3072] __napi_poll+0x5c/0x24c [ 32.377512][ T3072] napi_poll+0x110/0x484 [ 32.378777][ T3072] net_rx_action+0x18c/0x414 [ 32.380203][ T3072] _stext+0x168/0x37c [ 32.381453][ T3072] ____do_softirq+0x14/0x20 [ 32.382840][ T3072] call_on_irq_stack+0x2c/0x54 [ 32.384286][ T3072] do_softirq_own_stack+0x20/0x2c [ 32.385747][ T3072] invoke_softirq+0x70/0xbc [ 32.387115][ T3072] __irq_exit_rcu+0xf0/0x140 [ 32.388566][ T3072] irq_exit_rcu+0x10/0x40 [ 32.389916][ T3072] el1_interrupt+0x38/0x68 [ 32.391244][ T3072] el1h_64_irq_handler+0x18/0x24 [ 32.392736][ T3072] el1h_64_irq+0x64/0x68 [ 32.394148][ T3072] arch_local_irq_enable+0xc/0x18 [ 32.395644][ T3072] default_idle_call+0x48/0xb8 [ 32.397110][ T3072] do_idle+0x110/0x2d4 [ 32.398376][ T3072] cpu_startup_entry+0x24/0x28 [ 32.399866][ T3072] kernel_init+0x0/0x290 [ 32.401183][ T3072] start_kernel+0x0/0x620 [ 32.402547][ T3072] start_kernel+0x450/0x620 [ 32.403944][ T3072] __primary_switched+0xb4/0xbc [ 32.405491][ T3072] INITIAL USE at: [ 32.406324][ T3072] lock_acquire+0x100/0x1f8 [ 32.407705][ T3072] _raw_spin_lock_bh+0x54/0x6c [ 32.409081][ T3072] inet_csk_get_port+0xe0/0xaf0 [ 32.410487][ T3072] __inet6_bind+0x688/0x8ac [ 32.411845][ T3072] inet6_bind+0xf4/0x150 [ 32.413171][ T3072] rds_tcp_listen_init+0x14c/0x1f0 [ 32.414655][ T3072] rds_tcp_init_net+0xcc/0x1dc [ 32.416053][ T3072] ops_init+0xe4/0x2e4 [ 32.417287][ T3072] register_pernet_operations+0x108/0x264 [ 32.419030][ T3072] register_pernet_device+0x3c/0x94 [ 32.420615][ T3072] rds_tcp_init+0x74/0xe0 [ 32.421876][ T3072] do_one_initcall+0x118/0x22c [ 32.423272][ T3072] do_initcall_level+0xac/0xe4 [ 32.424651][ T3072] do_initcalls+0x58/0xa8 [ 32.425889][ T3072] do_basic_setup+0x20/0x2c [ 32.427286][ T3072] kernel_init_freeable+0xb8/0x148 [ 32.428866][ T3072] kernel_init+0x24/0x290 [ 32.430189][ T3072] ret_from_fork+0x10/0x20 [ 32.431495][ T3072] } [ 32.432058][ T3072] ... key at: [] tcp_init.__key.22+0x0/0x10 [ 32.433816][ T3072] ... acquired at: [ 32.434632][ T3072] _raw_read_lock_bh+0x64/0x7c [ 32.435721][ T3072] sock_i_uid+0x24/0x58 [ 32.436691][ T3072] inet_csk_get_port+0x674/0xaf0 [ 32.437775][ T3072] __inet6_bind+0x688/0x8ac [ 32.438859][ T3072] inet6_bind+0xf4/0x150 [ 32.439858][ T3072] __sys_bind+0x148/0x1b0 [ 32.440832][ T3072] __arm64_sys_bind+0x28/0x3c [ 32.441929][ T3072] el0_svc_common+0x138/0x220 [ 32.442964][ T3072] do_el0_svc+0x48/0x164 [ 32.443956][ T3072] el0_svc+0x58/0x150 [ 32.444903][ T3072] el0t_64_sync_handler+0x84/0xf0 [ 32.446015][ T3072] el0t_64_sync+0x190/0x194 [ 32.447183][ T3072] [ 32.447662][ T3072] -> (clock-AF_INET6){+++.}-{2:2} { [ 32.448823][ T3072] HARDIRQ-ON-W at: [ 32.449639][ T3072] lock_acquire+0x100/0x1f8 [ 32.450929][ T3072] _raw_write_lock_bh+0x54/0x6c [ 32.452280][ T3072] sk_common_release+0x58/0x1d4 [ 32.453693][ T3072] udp_lib_close+0x20/0x30 [ 32.455095][ T3072] inet_release+0xc8/0xe4 [ 32.456334][ T3072] inet6_release+0x3c/0x58 [ 32.457580][ T3072] sock_close+0x50/0xf0 [ 32.458851][ T3072] __fput+0x198/0x3e4 [ 32.460119][ T3072] ____fput+0x20/0x30 [ 32.461315][ T3072] task_work_run+0x100/0x148 [ 32.462712][ T3072] do_notify_resume+0x174/0x1f0 [ 32.464197][ T3072] el0_svc+0x9c/0x150 [ 32.465431][ T3072] el0t_64_sync_handler+0x84/0xf0 [ 32.466894][ T3072] el0t_64_sync+0x190/0x194 [ 32.468237][ T3072] HARDIRQ-ON-R at: [ 32.469080][ T3072] lock_acquire+0x100/0x1f8 [ 32.470376][ T3072] _raw_read_lock_bh+0x64/0x7c [ 32.471737][ T3072] sock_i_uid+0x24/0x58 [ 32.473242][ T3072] udp_lib_lport_inuse+0x44/0x268 [ 32.474714][ T3072] udp_lib_get_port+0x2bc/0x8f8 [ 32.476092][ T3072] udp_v6_get_port+0x60/0x74 [ 32.477537][ T3072] __inet6_bind+0x688/0x8ac [ 32.478869][ T3072] inet6_bind+0xf4/0x150 [ 32.480219][ T3072] __sys_bind+0x148/0x1b0 [ 32.481477][ T3072] __arm64_sys_bind+0x28/0x3c [ 32.482623][ T3072] el0_svc_common+0x138/0x220 [ 32.483746][ T3072] do_el0_svc+0x48/0x164 [ 32.484897][ T3072] el0_svc+0x58/0x150 [ 32.486077][ T3072] el0t_64_sync_handler+0x84/0xf0 [ 32.487473][ T3072] el0t_64_sync+0x190/0x194 [ 32.488756][ T3072] SOFTIRQ-ON-W at: [ 32.489688][ T3072] lock_acquire+0x100/0x1f8 [ 32.491156][ T3072] _raw_write_lock+0x54/0x6c [ 32.492493][ T3072] l2tp_tunnel_register+0x354/0x79c [ 32.493954][ T3072] pppol2tp_connect+0x3e8/0x6c4 [ 32.495343][ T3072] __sys_connect+0x184/0x190 [ 32.496698][ T3072] __arm64_sys_connect+0x28/0x3c [ 32.498008][ T3072] el0_svc_common+0x138/0x220 [ 32.499328][ T3072] do_el0_svc+0x48/0x164 [ 32.500619][ T3072] el0_svc+0x58/0x150 [ 32.501809][ T3072] el0t_64_sync_handler+0x84/0xf0 [ 32.503250][ T3072] el0t_64_sync+0x190/0x194 [ 32.504660][ T3072] INITIAL USE at: [ 32.505488][ T3072] lock_acquire+0x100/0x1f8 [ 32.506820][ T3072] _raw_write_lock_bh+0x54/0x6c [ 32.508160][ T3072] sk_common_release+0x58/0x1d4 [ 32.509517][ T3072] udp_lib_close+0x20/0x30 [ 32.510856][ T3072] inet_release+0xc8/0xe4 [ 32.512122][ T3072] inet6_release+0x3c/0x58 [ 32.513447][ T3072] sock_close+0x50/0xf0 [ 32.514669][ T3072] __fput+0x198/0x3e4 [ 32.515905][ T3072] ____fput+0x20/0x30 [ 32.517166][ T3072] task_work_run+0x100/0x148 [ 32.518470][ T3072] do_notify_resume+0x174/0x1f0 [ 32.520001][ T3072] el0_svc+0x9c/0x150 [ 32.521235][ T3072] el0t_64_sync_handler+0x84/0xf0 [ 32.522766][ T3072] el0t_64_sync+0x190/0x194 [ 32.524056][ T3072] INITIAL READ USE at: [ 32.524995][ T3072] lock_acquire+0x100/0x1f8 [ 32.526418][ T3072] _raw_read_lock_bh+0x64/0x7c [ 32.527897][ T3072] sock_i_uid+0x24/0x58 [ 32.529228][ T3072] udp_lib_lport_inuse+0x44/0x268 [ 32.530751][ T3072] udp_lib_get_port+0x2bc/0x8f8 [ 32.532257][ T3072] udp_v6_get_port+0x60/0x74 [ 32.533704][ T3072] __inet6_bind+0x688/0x8ac [ 32.535115][ T3072] inet6_bind+0xf4/0x150 [ 32.536429][ T3072] __sys_bind+0x148/0x1b0 [ 32.537823][ T3072] __arm64_sys_bind+0x28/0x3c [ 32.539258][ T3072] el0_svc_common+0x138/0x220 [ 32.540721][ T3072] do_el0_svc+0x48/0x164 [ 32.542066][ T3072] el0_svc+0x58/0x150 [ 32.543346][ T3072] el0t_64_sync_handler+0x84/0xf0 [ 32.544843][ T3072] el0t_64_sync+0x190/0x194 [ 32.546246][ T3072] } [ 32.546766][ T3072] ... key at: [] af_callback_keys+0xa0/0x2e0 [ 32.548416][ T3072] ... acquired at: [ 32.549095][ T3072] mark_lock+0x154/0x1b4 [ 32.549901][ T3072] __lock_acquire+0x618/0x3084 [ 32.550792][ T3072] lock_acquire+0x100/0x1f8 [ 32.551647][ T3072] _raw_write_lock+0x54/0x6c [ 32.552640][ T3072] l2tp_tunnel_register+0x354/0x79c [ 32.553814][ T3072] pppol2tp_connect+0x3e8/0x6c4 [ 32.554866][ T3072] __sys_connect+0x184/0x190 [ 32.555901][ T3072] __arm64_sys_connect+0x28/0x3c [ 32.556957][ T3072] el0_svc_common+0x138/0x220 [ 32.558109][ T3072] do_el0_svc+0x48/0x164 [ 32.559147][ T3072] el0_svc+0x58/0x150 [ 32.560106][ T3072] el0t_64_sync_handler+0x84/0xf0 [ 32.561264][ T3072] el0t_64_sync+0x190/0x194 [ 32.562321][ T3072] [ 32.562841][ T3072] [ 32.562841][ T3072] stack backtrace: [ 32.564068][ T3072] CPU: 1 PID: 3072 Comm: syz-executor392 Not tainted 6.1.0-rc6-syzkaller-32653-g65762d97e6fa #0 [ 32.566297][ T3072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 32.568633][ T3072] Call trace: [ 32.569356][ T3072] dump_backtrace+0x1c4/0x1f0 [ 32.570402][ T3072] show_stack+0x2c/0x54 [ 32.571347][ T3072] dump_stack_lvl+0x104/0x16c [ 32.572409][ T3072] dump_stack+0x1c/0x58 [ 32.573286][ T3072] print_irq_inversion_bug+0x2f8/0x300 [ 32.574336][ T3072] mark_lock_irq+0x3ec/0x4b4 [ 32.575307][ T3072] mark_lock+0x154/0x1b4 [ 32.576205][ T3072] __lock_acquire+0x618/0x3084 [ 32.577226][ T3072] lock_acquire+0x100/0x1f8 [ 32.578191][ T3072] _raw_write_lock+0x54/0x6c [ 32.579154][ T3072] l2tp_tunnel_register+0x354/0x79c [ 32.580324][ T3072] pppol2tp_connect+0x3e8/0x6c4 [ 32.581405][ T3072] __sys_connect+0x184/0x190 [ 32.582380][ T3072] __arm64_sys_connect+0x28/0x3c [ 32.583452][ T3072] el0_svc_common+0x138/0x220 [ 32.584435][ T3072] do_el0_svc+0x48/0x164 [ 32.585399][ T3072] el0_svc+0x58/0x150 [ 32.586303][ T3072] el0t_64_sync_handler+0x84/0xf0 [ 32.587448][ T3072] el0t_64_sync+0x190/0x194 [ 32.588508][ T3072] BUG: sleeping function called from invalid context at include/linux/percpu-rwsem.h:49 [ 32.590557][ T3072] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 3072, name: syz-executor392 [ 32.592647][ T3072] preempt_count: 1, expected: 0 [ 32.593713][ T3072] RCU nest depth: 0, expected: 0 [ 32.594804][ T3072] INFO: lockdep is turned off. [ 32.595814][ T3072] Preemption disabled at: [ 32.595819][ T3072] [] l2tp_tunnel_register+0x354/0x79c [ 32.598176][ T3072] CPU: 1 PID: 3072 Comm: syz-executor392 Not tainted 6.1.0-rc6-syzkaller-32653-g65762d97e6fa #0 [ 32.600532][ T3072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 32.602852][ T3072] Call trace: [ 32.603579][ T3072] dump_backtrace+0x1c4/0x1f0 [ 32.604606][ T3072] show_stack+0x2c/0x54 [ 32.605438][ T3072] dump_stack_lvl+0x104/0x16c [ 32.606489][ T3072] dump_stack+0x1c/0x58 [ 32.607415][ T3072] __might_resched+0x208/0x218 [ 32.608469][ T3072] __might_sleep+0x48/0x78 [ 32.609354][ T3072] cpus_read_lock+0x28/0x1e0 [ 32.610477][ T3072] static_key_slow_inc+0x1c/0x38 [ 32.611430][ T3072] udpv6_encap_enable+0x1c/0x28 [ 32.612476][ T3072] setup_udp_tunnel_sock+0xec/0x124 [ 32.613561][ T3072] l2tp_tunnel_register+0x68c/0x79c [ 32.614837][ T3072] pppol2tp_connect+0x3e8/0x6c4 [ 32.615986][ T3072] __sys_connect+0x184/0x190 [ 32.616936][ T3072] __arm64_sys_connect+0x28/0x3c [ 32.618064][ T3072] el0_svc_common+0x138/0x220 [ 32.619107][ T3072] do_el0_svc+0x48/0x164 [ 32.620054][ T3072] el0_svc+0x58/0x150 [ 32.620956][ T3072] el0t_64_sync_handler+0x84/0xf0 [ 32.622029][ T3072] el0t_64_sync+0x190/0x194