Warning: Permanently added '10.128.1.19' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 26.942618][ T3073] [ 26.943280][ T3073] ======================================================== [ 26.945063][ T3073] WARNING: possible irq lock inversion dependency detected [ 26.946941][ T3073] 6.1.0-rc6-syzkaller-32653-g65762d97e6fa #0 Not tainted [ 26.948812][ T3073] -------------------------------------------------------- [ 26.950725][ T3073] syz-executor233/3073 just changed the state of lock: [ 26.952443][ T3073] ffff0000c6a5fbb8 (clock-AF_INET6){+++.}-{2:2}, at: l2tp_tunnel_register+0x354/0x79c [ 26.954930][ T3073] but this lock was taken by another, SOFTIRQ-safe lock in the past: [ 26.956984][ T3073] (&tcp_hashinfo.bhash[i].lock){+.-.}-{2:2} [ 26.956994][ T3073] [ 26.956994][ T3073] [ 26.956994][ T3073] and interrupts could create inverse lock ordering between them. [ 26.956994][ T3073] [ 26.962189][ T3073] [ 26.962189][ T3073] other info that might help us debug this: [ 26.964313][ T3073] Possible interrupt unsafe locking scenario: [ 26.964313][ T3073] [ 26.966485][ T3073] CPU0 CPU1 [ 26.967856][ T3073] ---- ---- [ 26.969234][ T3073] lock(clock-AF_INET6); [ 26.970350][ T3073] local_irq_disable(); [ 26.972039][ T3073] lock(&tcp_hashinfo.bhash[i].lock); [ 26.974208][ T3073] lock(clock-AF_INET6); [ 26.976029][ T3073] [ 26.976927][ T3073] lock(&tcp_hashinfo.bhash[i].lock); [ 26.978360][ T3073] [ 26.978360][ T3073] *** DEADLOCK *** [ 26.978360][ T3073] [ 26.980606][ T3073] 1 lock held by syz-executor233/3073: [ 26.982080][ T3073] #0: ffff0000c6a42130 (sk_lock-AF_PPPOX){+.+.}-{0:0}, at: pppol2tp_connect+0x184/0x6c4 [ 26.984707][ T3073] [ 26.984707][ T3073] the shortest dependencies between 2nd lock and 1st lock: [ 26.987192][ T3073] -> (&tcp_hashinfo.bhash[i].lock){+.-.}-{2:2} { [ 26.988885][ T3073] HARDIRQ-ON-W at: [ 26.989918][ T3073] lock_acquire+0x100/0x1f8 [ 26.991543][ T3073] _raw_spin_lock_bh+0x54/0x6c [ 26.993360][ T3073] inet_csk_get_port+0xe0/0xaf0 [ 26.995141][ T3073] __inet6_bind+0x688/0x8ac [ 26.996836][ T3073] inet6_bind+0xf4/0x150 [ 26.998378][ T3073] rds_tcp_listen_init+0x14c/0x1f0 [ 27.000319][ T3073] rds_tcp_init_net+0xcc/0x1dc [ 27.002094][ T3073] ops_init+0xe4/0x2e4 [ 27.003621][ T3073] register_pernet_operations+0x108/0x264 [ 27.005598][ T3073] register_pernet_device+0x3c/0x94 [ 27.007430][ T3073] rds_tcp_init+0x74/0xe0 [ 27.009053][ T3073] do_one_initcall+0x118/0x22c [ 27.010799][ T3073] do_initcall_level+0xac/0xe4 [ 27.012623][ T3073] do_initcalls+0x58/0xa8 [ 27.014231][ T3073] do_basic_setup+0x20/0x2c [ 27.015760][ T3073] kernel_init_freeable+0xb8/0x148 [ 27.017422][ T3073] kernel_init+0x24/0x290 [ 27.018860][ T3073] ret_from_fork+0x10/0x20 [ 27.020467][ T3073] IN-SOFTIRQ-W at: [ 27.021515][ T3073] lock_acquire+0x100/0x1f8 [ 27.023241][ T3073] _raw_spin_lock+0x54/0x6c [ 27.024976][ T3073] __inet_inherit_port+0x124/0x9ac [ 27.026843][ T3073] tcp_v4_syn_recv_sock+0x790/0x848 [ 27.028755][ T3073] tcp_check_req+0x75c/0x8e4 [ 27.030488][ T3073] tcp_v4_rcv+0xad4/0x11e8 [ 27.032126][ T3073] ip_protocol_deliver_rcu+0x224/0x414 [ 27.034065][ T3073] ip_local_deliver_finish+0x124/0x200 [ 27.035989][ T3073] ip_local_deliver+0xd0/0xf4 [ 27.037765][ T3073] ip_sublist_rcv+0x40c/0x474 [ 27.039476][ T3073] ip_list_rcv+0x184/0x1c8 [ 27.041237][ T3073] __netif_receive_skb_list_core+0x1f8/0x2b0 [ 27.043323][ T3073] __netif_receive_skb_list+0x16c/0x1d0 [ 27.045113][ T3073] netif_receive_skb_list_internal+0x1e8/0x340 [ 27.047145][ T3073] napi_complete_done+0x140/0x354 [ 27.049009][ T3073] gve_napi_poll+0xcc/0x1b4 [ 27.050677][ T3073] __napi_poll+0x5c/0x24c [ 27.052301][ T3073] napi_poll+0x110/0x484 [ 27.053883][ T3073] net_rx_action+0x18c/0x414 [ 27.055574][ T3073] _stext+0x168/0x37c [ 27.057106][ T3073] ____do_softirq+0x14/0x20 [ 27.058698][ T3073] call_on_irq_stack+0x2c/0x54 [ 27.060412][ T3073] do_softirq_own_stack+0x20/0x2c [ 27.062040][ T3073] invoke_softirq+0x70/0xbc [ 27.063578][ T3073] __irq_exit_rcu+0xf0/0x140 [ 27.065443][ T3073] irq_exit_rcu+0x10/0x40 [ 27.067040][ T3073] el1_interrupt+0x38/0x68 [ 27.068689][ T3073] el1h_64_irq_handler+0x18/0x24 [ 27.070316][ T3073] el1h_64_irq+0x64/0x68 [ 27.071712][ T3073] arch_local_irq_enable+0xc/0x18 [ 27.073517][ T3073] default_idle_call+0x48/0xb8 [ 27.075282][ T3073] do_idle+0x110/0x2d4 [ 27.077031][ T3073] cpu_startup_entry+0x24/0x28 [ 27.078561][ T3073] kernel_init+0x0/0x290 [ 27.080109][ T3073] start_kernel+0x0/0x620 [ 27.081569][ T3073] start_kernel+0x450/0x620 [ 27.083203][ T3073] __primary_switched+0xb4/0xbc [ 27.085089][ T3073] INITIAL USE at: [ 27.086114][ T3073] lock_acquire+0x100/0x1f8 [ 27.087697][ T3073] _raw_spin_lock_bh+0x54/0x6c [ 27.089447][ T3073] inet_csk_get_port+0xe0/0xaf0 [ 27.091131][ T3073] __inet6_bind+0x688/0x8ac [ 27.092893][ T3073] inet6_bind+0xf4/0x150 [ 27.094500][ T3073] rds_tcp_listen_init+0x14c/0x1f0 [ 27.096299][ T3073] rds_tcp_init_net+0xcc/0x1dc [ 27.098180][ T3073] ops_init+0xe4/0x2e4 [ 27.099680][ T3073] register_pernet_operations+0x108/0x264 [ 27.101626][ T3073] register_pernet_device+0x3c/0x94 [ 27.103396][ T3073] rds_tcp_init+0x74/0xe0 [ 27.104881][ T3073] do_one_initcall+0x118/0x22c [ 27.106404][ T3073] do_initcall_level+0xac/0xe4 [ 27.107906][ T3073] do_initcalls+0x58/0xa8 [ 27.109346][ T3073] do_basic_setup+0x20/0x2c [ 27.110758][ T3073] kernel_init_freeable+0xb8/0x148 [ 27.112585][ T3073] kernel_init+0x24/0x290 [ 27.114264][ T3073] ret_from_fork+0x10/0x20 [ 27.115996][ T3073] } [ 27.116671][ T3073] ... key at: [] tcp_init.__key.22+0x0/0x10 [ 27.118817][ T3073] ... acquired at: [ 27.119810][ T3073] _raw_read_lock_bh+0x64/0x7c [ 27.121206][ T3073] sock_i_uid+0x24/0x58 [ 27.122281][ T3073] inet_csk_get_port+0x674/0xaf0 [ 27.123592][ T3073] __inet6_bind+0x688/0x8ac [ 27.124901][ T3073] inet6_bind+0xf4/0x150 [ 27.126033][ T3073] __sys_bind+0x148/0x1b0 [ 27.127257][ T3073] __arm64_sys_bind+0x28/0x3c [ 27.128514][ T3073] el0_svc_common+0x138/0x220 [ 27.129950][ T3073] do_el0_svc+0x48/0x164 [ 27.131141][ T3073] el0_svc+0x58/0x150 [ 27.132232][ T3073] el0t_64_sync_handler+0x84/0xf0 [ 27.133643][ T3073] el0t_64_sync+0x190/0x194 [ 27.134932][ T3073] [ 27.135527][ T3073] -> (clock-AF_INET6){+++.}-{2:2} { [ 27.136910][ T3073] HARDIRQ-ON-W at: [ 27.137922][ T3073] lock_acquire+0x100/0x1f8 [ 27.139592][ T3073] _raw_write_lock_bh+0x54/0x6c [ 27.141260][ T3073] sk_common_release+0x58/0x1d4 [ 27.143016][ T3073] udp_lib_close+0x20/0x30 [ 27.144553][ T3073] inet_release+0xc8/0xe4 [ 27.146090][ T3073] inet6_release+0x3c/0x58 [ 27.147681][ T3073] sock_close+0x50/0xf0 [ 27.149035][ T3073] __fput+0x198/0x3e4 [ 27.150656][ T3073] ____fput+0x20/0x30 [ 27.152233][ T3073] task_work_run+0x100/0x148 [ 27.153845][ T3073] do_notify_resume+0x174/0x1f0 [ 27.155527][ T3073] el0_svc+0x9c/0x150 [ 27.157024][ T3073] el0t_64_sync_handler+0x84/0xf0 [ 27.158636][ T3073] el0t_64_sync+0x190/0x194 [ 27.160313][ T3073] HARDIRQ-ON-R at: [ 27.161367][ T3073] lock_acquire+0x100/0x1f8 [ 27.163104][ T3073] _raw_read_lock_bh+0x64/0x7c [ 27.164837][ T3073] sock_i_uid+0x24/0x58 [ 27.166532][ T3073] udp_lib_lport_inuse+0x44/0x268 [ 27.168349][ T3073] udp_lib_get_port+0x2bc/0x8f8 [ 27.170230][ T3073] udp_v6_get_port+0x60/0x74 [ 27.171742][ T3073] __inet6_bind+0x688/0x8ac [ 27.173367][ T3073] inet6_bind+0xf4/0x150 [ 27.174921][ T3073] __sys_bind+0x148/0x1b0 [ 27.176539][ T3073] __arm64_sys_bind+0x28/0x3c [ 27.178294][ T3073] el0_svc_common+0x138/0x220 [ 27.179976][ T3073] do_el0_svc+0x48/0x164 [ 27.181478][ T3073] el0_svc+0x58/0x150 [ 27.183063][ T3073] el0t_64_sync_handler+0x84/0xf0 [ 27.184822][ T3073] el0t_64_sync+0x190/0x194 [ 27.186707][ T3073] SOFTIRQ-ON-W at: [ 27.187662][ T3073] lock_acquire+0x100/0x1f8 [ 27.189287][ T3073] _raw_write_lock+0x54/0x6c [ 27.190950][ T3073] l2tp_tunnel_register+0x354/0x79c [ 27.192806][ T3073] pppol2tp_connect+0x3e8/0x6c4 [ 27.194675][ T3073] __sys_connect+0x184/0x190 [ 27.196336][ T3073] __arm64_sys_connect+0x28/0x3c [ 27.198065][ T3073] el0_svc_common+0x138/0x220 [ 27.199698][ T3073] do_el0_svc+0x48/0x164 [ 27.201288][ T3073] el0_svc+0x58/0x150 [ 27.202673][ T3073] el0t_64_sync_handler+0x84/0xf0 [ 27.204414][ T3073] el0t_64_sync+0x190/0x194 [ 27.206016][ T3073] INITIAL USE at: [ 27.207052][ T3073] lock_acquire+0x100/0x1f8 [ 27.208665][ T3073] _raw_write_lock_bh+0x54/0x6c [ 27.210453][ T3073] sk_common_release+0x58/0x1d4 [ 27.212334][ T3073] udp_lib_close+0x20/0x30 [ 27.213992][ T3073] inet_release+0xc8/0xe4 [ 27.215545][ T3073] inet6_release+0x3c/0x58 [ 27.217190][ T3073] sock_close+0x50/0xf0 [ 27.218641][ T3073] __fput+0x198/0x3e4 [ 27.220076][ T3073] ____fput+0x20/0x30 [ 27.221591][ T3073] task_work_run+0x100/0x148 [ 27.223488][ T3073] do_notify_resume+0x174/0x1f0 [ 27.225277][ T3073] el0_svc+0x9c/0x150 [ 27.226779][ T3073] el0t_64_sync_handler+0x84/0xf0 [ 27.228578][ T3073] el0t_64_sync+0x190/0x194 [ 27.230238][ T3073] INITIAL READ USE at: [ 27.231410][ T3073] lock_acquire+0x100/0x1f8 [ 27.233164][ T3073] _raw_read_lock_bh+0x64/0x7c [ 27.234954][ T3073] sock_i_uid+0x24/0x58 [ 27.236608][ T3073] udp_lib_lport_inuse+0x44/0x268 [ 27.238537][ T3073] udp_lib_get_port+0x2bc/0x8f8 [ 27.240328][ T3073] udp_v6_get_port+0x60/0x74 [ 27.242128][ T3073] __inet6_bind+0x688/0x8ac [ 27.243847][ T3073] inet6_bind+0xf4/0x150 [ 27.245530][ T3073] __sys_bind+0x148/0x1b0 [ 27.247204][ T3073] __arm64_sys_bind+0x28/0x3c [ 27.248971][ T3073] el0_svc_common+0x138/0x220 [ 27.250682][ T3073] do_el0_svc+0x48/0x164 [ 27.252344][ T3073] el0_svc+0x58/0x150 [ 27.253908][ T3073] el0t_64_sync_handler+0x84/0xf0 [ 27.255776][ T3073] el0t_64_sync+0x190/0x194 [ 27.257452][ T3073] } [ 27.258069][ T3073] ... key at: [] af_callback_keys+0xa0/0x2e0 [ 27.260080][ T3073] ... acquired at: [ 27.260997][ T3073] mark_lock+0x154/0x1b4 [ 27.262072][ T3073] __lock_acquire+0x618/0x3084 [ 27.263391][ T3073] lock_acquire+0x100/0x1f8 [ 27.264619][ T3073] _raw_write_lock+0x54/0x6c [ 27.265885][ T3073] l2tp_tunnel_register+0x354/0x79c [ 27.267312][ T3073] pppol2tp_connect+0x3e8/0x6c4 [ 27.268678][ T3073] __sys_connect+0x184/0x190 [ 27.269898][ T3073] __arm64_sys_connect+0x28/0x3c [ 27.271234][ T3073] el0_svc_common+0x138/0x220 [ 27.272550][ T3073] do_el0_svc+0x48/0x164 [ 27.273666][ T3073] el0_svc+0x58/0x150 [ 27.274742][ T3073] el0t_64_sync_handler+0x84/0xf0 [ 27.276088][ T3073] el0t_64_sync+0x190/0x194 [ 27.277300][ T3073] [ 27.277936][ T3073] [ 27.277936][ T3073] stack backtrace: [ 27.279476][ T3073] CPU: 1 PID: 3073 Comm: syz-executor233 Not tainted 6.1.0-rc6-syzkaller-32653-g65762d97e6fa #0 [ 27.282240][ T3073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 27.284893][ T3073] Call trace: [ 27.285705][ T3073] dump_backtrace+0x1c4/0x1f0 [ 27.286868][ T3073] show_stack+0x2c/0x54 [ 27.287886][ T3073] dump_stack_lvl+0x104/0x16c [ 27.289024][ T3073] dump_stack+0x1c/0x58 [ 27.290029][ T3073] print_irq_inversion_bug+0x2f8/0x300 [ 27.291355][ T3073] mark_lock_irq+0x3ec/0x4b4 [ 27.292492][ T3073] mark_lock+0x154/0x1b4 [ 27.293610][ T3073] __lock_acquire+0x618/0x3084 [ 27.294823][ T3073] lock_acquire+0x100/0x1f8 [ 27.296072][ T3073] _raw_write_lock+0x54/0x6c [ 27.297235][ T3073] l2tp_tunnel_register+0x354/0x79c [ 27.298737][ T3073] pppol2tp_connect+0x3e8/0x6c4 [ 27.300061][ T3073] __sys_connect+0x184/0x190 [ 27.301228][ T3073] __arm64_sys_connect+0x28/0x3c [ 27.302529][ T3073] el0_svc_common+0x138/0x220 [ 27.303770][ T3073] do_el0_svc+0x48/0x164 [ 27.305015][ T3073] el0_svc+0x58/0x150 [ 27.306051][ T3073] el0t_64_sync_handler+0x84/0xf0 [ 27.307437][ T3073] el0t_64_sync+0x190/0x194 [ 27.308711][ T3073] BUG: sleeping function called from invalid context at include/linux/percpu-rwsem.h:49 [ 27.311398][ T3073] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 3073, name: syz-executor233 [ 27.313808][ T3073] preempt_count: 1, expected: 0 [ 27.315136][ T3073] RCU nest depth: 0, expected: 0 [ 27.316425][ T3073] INFO: lockdep is turned off. [ 27.317622][ T3073] Preemption disabled at: [ 27.317627][ T3073] [] l2tp_tunnel_register+0x354/0x79c [ 27.320775][ T3073] CPU: 1 PID: 3073 Comm: syz-executor233 Not tainted 6.1.0-rc6-syzkaller-32653-g65762d97e6fa #0 [ 27.323518][ T3073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 27.326243][ T3073] Call trace: [ 27.327094][ T3073] dump_backtrace+0x1c4/0x1f0 [ 27.328334][ T3073] show_stack+0x2c/0x54 [ 27.329408][ T3073] dump_stack_lvl+0x104/0x16c [ 27.330723][ T3073] dump_stack+0x1c/0x58 [ 27.331768][ T3073] __might_resched+0x208/0x218 [ 27.333006][ T3073] __might_sleep+0x48/0x78 [ 27.334175][ T3073] cpus_read_lock+0x28/0x1e0 [ 27.335408][ T3073] static_key_slow_inc+0x1c/0x38 [ 27.336690][ T3073] udpv6_encap_enable+0x1c/0x28 [ 27.337921][ T3073] setup_udp_tunnel_sock+0xec/0x124 [ 27.339412][ T3073] l2tp_tunnel_register+0x68c/0x79c [ 27.340798][ T3073] pppol2tp_connect+0x3e8/0x6c4 [ 27.341938][ T3073] __sys_connect+0x184/0x190 [ 27.343010][ T3073] __arm64_sys_connect+0x28/0x3c [ 27.344271][ T3073] el0_svc_common+0x138/0x220 [ 27.345531][ T3073] do_el0_svc+0x48/0x164 [ 27.346648][ T3073] el0_svc+0x58/0x150 [ 27.347646][ T3073] el0t_64_sync_handler+0x84/0xf0 [ 27.348938][ T3073] el0t_64_sync+0x190/0x194