Warning: Permanently added '10.128.1.23' (ECDSA) to the list of known hosts. executing program [ 27.383243][ T3079] [ 27.383830][ T3079] ======================================================== [ 27.385664][ T3079] WARNING: possible irq lock inversion dependency detected [ 27.387557][ T3079] 6.1.0-rc6-syzkaller-32653-g65762d97e6fa #0 Not tainted [ 27.389366][ T3079] -------------------------------------------------------- [ 27.391246][ T3079] syz-executor105/3079 just changed the state of lock: [ 27.392992][ T3079] ffff0000cb9dfbb8 (clock-AF_INET6){+++.}-{2:2}, at: l2tp_tunnel_register+0x354/0x79c [ 27.395482][ T3079] but this lock was taken by another, SOFTIRQ-safe lock in the past: [ 27.397620][ T3079] (&tcp_hashinfo.bhash[i].lock){+.-.}-{2:2} [ 27.397629][ T3079] [ 27.397629][ T3079] [ 27.397629][ T3079] and interrupts could create inverse lock ordering between them. [ 27.397629][ T3079] [ 27.402865][ T3079] [ 27.402865][ T3079] other info that might help us debug this: [ 27.404974][ T3079] Possible interrupt unsafe locking scenario: [ 27.404974][ T3079] [ 27.407103][ T3079] CPU0 CPU1 [ 27.408458][ T3079] ---- ---- [ 27.409877][ T3079] lock(clock-AF_INET6); [ 27.411012][ T3079] local_irq_disable(); [ 27.412762][ T3079] lock(&tcp_hashinfo.bhash[i].lock); [ 27.414816][ T3079] lock(clock-AF_INET6); [ 27.416587][ T3079] [ 27.417462][ T3079] lock(&tcp_hashinfo.bhash[i].lock); [ 27.418900][ T3079] [ 27.418900][ T3079] *** DEADLOCK *** [ 27.418900][ T3079] [ 27.421063][ T3079] 1 lock held by syz-executor105/3079: [ 27.422476][ T3079] #0: ffff0000cb9c1930 (sk_lock-AF_PPPOX){+.+.}-{0:0}, at: pppol2tp_connect+0x184/0x6c4 [ 27.425035][ T3079] [ 27.425035][ T3079] the shortest dependencies between 2nd lock and 1st lock: [ 27.427459][ T3079] -> (&tcp_hashinfo.bhash[i].lock){+.-.}-{2:2} { [ 27.429117][ T3079] HARDIRQ-ON-W at: [ 27.430185][ T3079] lock_acquire+0x100/0x1f8 [ 27.431816][ T3079] _raw_spin_lock_bh+0x54/0x6c [ 27.433519][ T3079] inet_csk_get_port+0xe0/0xaf0 [ 27.435233][ T3079] __inet6_bind+0x688/0x8ac [ 27.436845][ T3079] inet6_bind+0xf4/0x150 [ 27.438421][ T3079] rds_tcp_listen_init+0x14c/0x1f0 [ 27.440230][ T3079] rds_tcp_init_net+0xcc/0x1dc [ 27.441939][ T3079] ops_init+0xe4/0x2e4 [ 27.443482][ T3079] register_pernet_operations+0x108/0x264 [ 27.445446][ T3079] register_pernet_device+0x3c/0x94 [ 27.447274][ T3079] rds_tcp_init+0x74/0xe0 [ 27.448863][ T3079] do_one_initcall+0x118/0x22c [ 27.450547][ T3079] do_initcall_level+0xac/0xe4 [ 27.452277][ T3079] do_initcalls+0x58/0xa8 [ 27.453873][ T3079] do_basic_setup+0x20/0x2c [ 27.455480][ T3079] kernel_init_freeable+0xb8/0x148 [ 27.457304][ T3079] kernel_init+0x24/0x290 [ 27.458922][ T3079] ret_from_fork+0x10/0x20 [ 27.460520][ T3079] IN-SOFTIRQ-W at: [ 27.461530][ T3079] lock_acquire+0x100/0x1f8 [ 27.463160][ T3079] _raw_spin_lock+0x54/0x6c [ 27.464818][ T3079] __inet_inherit_port+0x124/0x9ac [ 27.466619][ T3079] tcp_v4_syn_recv_sock+0x790/0x848 [ 27.468420][ T3079] tcp_check_req+0x75c/0x8e4 [ 27.470059][ T3079] tcp_v4_rcv+0xad4/0x11e8 [ 27.471683][ T3079] ip_protocol_deliver_rcu+0x224/0x414 [ 27.473585][ T3079] ip_local_deliver_finish+0x124/0x200 [ 27.475466][ T3079] ip_local_deliver+0xd0/0xf4 [ 27.477195][ T3079] ip_sublist_rcv+0x40c/0x474 [ 27.478875][ T3079] ip_list_rcv+0x184/0x1c8 [ 27.480474][ T3079] __netif_receive_skb_list_core+0x1f8/0x2b0 [ 27.482503][ T3079] __netif_receive_skb_list+0x16c/0x1d0 [ 27.484421][ T3079] netif_receive_skb_list_internal+0x1e8/0x340 [ 27.486497][ T3079] napi_complete_done+0x140/0x354 [ 27.488276][ T3079] gve_napi_poll+0xcc/0x1b4 [ 27.489936][ T3079] __napi_poll+0x5c/0x24c [ 27.491570][ T3079] napi_poll+0x110/0x484 [ 27.493144][ T3079] net_rx_action+0x18c/0x414 [ 27.494839][ T3079] _stext+0x168/0x37c [ 27.496394][ T3079] ____do_softirq+0x14/0x20 [ 27.498029][ T3079] call_on_irq_stack+0x2c/0x54 [ 27.499795][ T3079] do_softirq_own_stack+0x20/0x2c [ 27.501614][ T3079] invoke_softirq+0x70/0xbc [ 27.503264][ T3079] __irq_exit_rcu+0xf0/0x140 [ 27.504939][ T3079] irq_exit_rcu+0x10/0x40 [ 27.506511][ T3079] el1_interrupt+0x38/0x68 [ 27.508129][ T3079] el1h_64_irq_handler+0x18/0x24 [ 27.509892][ T3079] el1h_64_irq+0x64/0x68 [ 27.511448][ T3079] arch_local_irq_enable+0xc/0x18 [ 27.513215][ T3079] default_idle_call+0x48/0xb8 [ 27.514949][ T3079] do_idle+0x110/0x2d4 [ 27.516426][ T3079] cpu_startup_entry+0x24/0x28 [ 27.518173][ T3079] kernel_init+0x0/0x290 [ 27.519733][ T3079] start_kernel+0x0/0x620 [ 27.521329][ T3079] start_kernel+0x450/0x620 [ 27.522980][ T3079] __primary_switched+0xb4/0xbc [ 27.524701][ T3079] INITIAL USE at: [ 27.525712][ T3079] lock_acquire+0x100/0x1f8 [ 27.527280][ T3079] _raw_spin_lock_bh+0x54/0x6c [ 27.528943][ T3079] inet_csk_get_port+0xe0/0xaf0 [ 27.530641][ T3079] __inet6_bind+0x688/0x8ac [ 27.532208][ T3079] inet6_bind+0xf4/0x150 [ 27.533734][ T3079] rds_tcp_listen_init+0x14c/0x1f0 [ 27.535532][ T3079] rds_tcp_init_net+0xcc/0x1dc [ 27.537181][ T3079] ops_init+0xe4/0x2e4 [ 27.538698][ T3079] register_pernet_operations+0x108/0x264 [ 27.540590][ T3079] register_pernet_device+0x3c/0x94 [ 27.542381][ T3079] rds_tcp_init+0x74/0xe0 [ 27.543966][ T3079] do_one_initcall+0x118/0x22c [ 27.545664][ T3079] do_initcall_level+0xac/0xe4 [ 27.547359][ T3079] do_initcalls+0x58/0xa8 [ 27.548987][ T3079] do_basic_setup+0x20/0x2c [ 27.550579][ T3079] kernel_init_freeable+0xb8/0x148 [ 27.552360][ T3079] kernel_init+0x24/0x290 [ 27.553911][ T3079] ret_from_fork+0x10/0x20 [ 27.555495][ T3079] } [ 27.556139][ T3079] ... key at: [] tcp_init.__key.22+0x0/0x10 [ 27.558272][ T3079] ... acquired at: [ 27.559290][ T3079] _raw_read_lock_bh+0x64/0x7c [ 27.560569][ T3079] sock_i_uid+0x24/0x58 [ 27.561670][ T3079] inet_csk_get_port+0x674/0xaf0 [ 27.562987][ T3079] __inet6_bind+0x688/0x8ac [ 27.564184][ T3079] inet6_bind+0xf4/0x150 [ 27.565291][ T3079] __sys_bind+0x148/0x1b0 [ 27.566469][ T3079] __arm64_sys_bind+0x28/0x3c [ 27.567689][ T3079] el0_svc_common+0x138/0x220 [ 27.568946][ T3079] do_el0_svc+0x48/0x164 [ 27.570087][ T3079] el0_svc+0x58/0x150 [ 27.571157][ T3079] el0t_64_sync_handler+0x84/0xf0 [ 27.572501][ T3079] el0t_64_sync+0x190/0x194 [ 27.573718][ T3079] [ 27.574302][ T3079] -> (clock-AF_INET6){+++.}-{2:2} { [ 27.575683][ T3079] HARDIRQ-ON-W at: [ 27.576698][ T3079] lock_acquire+0x100/0x1f8 [ 27.578322][ T3079] _raw_write_lock_bh+0x54/0x6c [ 27.580010][ T3079] sk_common_release+0x58/0x1d4 [ 27.581688][ T3079] udp_lib_close+0x20/0x30 [ 27.583295][ T3079] inet_release+0xc8/0xe4 [ 27.584847][ T3079] inet6_release+0x3c/0x58 [ 27.586431][ T3079] sock_close+0x50/0xf0 [ 27.587942][ T3079] __fput+0x198/0x3e4 [ 27.589392][ T3079] ____fput+0x20/0x30 [ 27.590874][ T3079] task_work_run+0x100/0x148 [ 27.592515][ T3079] do_notify_resume+0x174/0x1f0 [ 27.594204][ T3079] el0_svc+0x9c/0x150 [ 27.595665][ T3079] el0t_64_sync_handler+0x84/0xf0 [ 27.597389][ T3079] el0t_64_sync+0x190/0x194 [ 27.598997][ T3079] HARDIRQ-ON-R at: [ 27.600007][ T3079] lock_acquire+0x100/0x1f8 [ 27.601569][ T3079] _raw_read_lock_bh+0x64/0x7c [ 27.603213][ T3079] sock_i_uid+0x24/0x58 [ 27.604789][ T3079] udp_lib_lport_inuse+0x44/0x268 [ 27.606528][ T3079] udp_lib_get_port+0x2bc/0x8f8 [ 27.608378][ T3079] udp_v6_get_port+0x60/0x74 [ 27.609974][ T3079] __inet6_bind+0x688/0x8ac [ 27.611809][ T3079] inet6_bind+0xf4/0x150 [ 27.613309][ T3079] __sys_bind+0x148/0x1b0 [ 27.614795][ T3079] __arm64_sys_bind+0x28/0x3c [ 27.616402][ T3079] el0_svc_common+0x138/0x220 [ 27.618110][ T3079] do_el0_svc+0x48/0x164 [ 27.619755][ T3079] el0_svc+0x58/0x150 [ 27.621473][ T3079] el0t_64_sync_handler+0x84/0xf0 [ 27.623253][ T3079] el0t_64_sync+0x190/0x194 [ 27.624856][ T3079] SOFTIRQ-ON-W at: [ 27.626025][ T3079] lock_acquire+0x100/0x1f8 [ 27.627629][ T3079] _raw_write_lock+0x54/0x6c [ 27.629230][ T3079] l2tp_tunnel_register+0x354/0x79c [ 27.631013][ T3079] pppol2tp_connect+0x3e8/0x6c4 [ 27.632715][ T3079] __sys_connect+0x184/0x190 [ 27.634346][ T3079] __arm64_sys_connect+0x28/0x3c [ 27.636009][ T3079] el0_svc_common+0x138/0x220 [ 27.637656][ T3079] do_el0_svc+0x48/0x164 [ 27.639145][ T3079] el0_svc+0x58/0x150 [ 27.640591][ T3079] el0t_64_sync_handler+0x84/0xf0 [ 27.642315][ T3079] el0t_64_sync+0x190/0x194 [ 27.643908][ T3079] INITIAL USE at: [ 27.644932][ T3079] lock_acquire+0x100/0x1f8 [ 27.646487][ T3079] _raw_write_lock_bh+0x54/0x6c [ 27.648131][ T3079] sk_common_release+0x58/0x1d4 [ 27.649813][ T3079] udp_lib_close+0x20/0x30 [ 27.651328][ T3079] inet_release+0xc8/0xe4 [ 27.652857][ T3079] inet6_release+0x3c/0x58 [ 27.654417][ T3079] sock_close+0x50/0xf0 [ 27.655879][ T3079] __fput+0x198/0x3e4 [ 27.657293][ T3079] ____fput+0x20/0x30 [ 27.658718][ T3079] task_work_run+0x100/0x148 [ 27.660289][ T3079] do_notify_resume+0x174/0x1f0 [ 27.661927][ T3079] el0_svc+0x9c/0x150 [ 27.663385][ T3079] el0t_64_sync_handler+0x84/0xf0 [ 27.665072][ T3079] el0t_64_sync+0x190/0x194 [ 27.666638][ T3079] INITIAL READ USE at: [ 27.667756][ T3079] lock_acquire+0x100/0x1f8 [ 27.669484][ T3079] _raw_read_lock_bh+0x64/0x7c [ 27.671269][ T3079] sock_i_uid+0x24/0x58 [ 27.672884][ T3079] udp_lib_lport_inuse+0x44/0x268 [ 27.674736][ T3079] udp_lib_get_port+0x2bc/0x8f8 [ 27.676691][ T3079] udp_v6_get_port+0x60/0x74 [ 27.678406][ T3079] __inet6_bind+0x688/0x8ac [ 27.680090][ T3079] inet6_bind+0xf4/0x150 [ 27.681685][ T3079] __sys_bind+0x148/0x1b0 [ 27.683313][ T3079] __arm64_sys_bind+0x28/0x3c [ 27.685032][ T3079] el0_svc_common+0x138/0x220 [ 27.686742][ T3079] do_el0_svc+0x48/0x164 [ 27.688347][ T3079] el0_svc+0x58/0x150 [ 27.689908][ T3079] el0t_64_sync_handler+0x84/0xf0 [ 27.691745][ T3079] el0t_64_sync+0x190/0x194 [ 27.693426][ T3079] } [ 27.694039][ T3079] ... key at: [] af_callback_keys+0xa0/0x2e0 [ 27.696073][ T3079] ... acquired at: [ 27.697063][ T3079] mark_lock+0x154/0x1b4 [ 27.698182][ T3079] __lock_acquire+0x618/0x3084 [ 27.699480][ T3079] lock_acquire+0x100/0x1f8 [ 27.700684][ T3079] _raw_write_lock+0x54/0x6c [ 27.701900][ T3079] l2tp_tunnel_register+0x354/0x79c [ 27.703267][ T3079] pppol2tp_connect+0x3e8/0x6c4 [ 27.704555][ T3079] __sys_connect+0x184/0x190 [ 27.705784][ T3079] __arm64_sys_connect+0x28/0x3c [ 27.707082][ T3079] el0_svc_common+0x138/0x220 [ 27.708328][ T3079] do_el0_svc+0x48/0x164 [ 27.709462][ T3079] el0_svc+0x58/0x150 [ 27.710528][ T3079] el0t_64_sync_handler+0x84/0xf0 [ 27.711897][ T3079] el0t_64_sync+0x190/0x194 [ 27.713158][ T3079] [ 27.713771][ T3079] [ 27.713771][ T3079] stack backtrace: [ 27.715269][ T3079] CPU: 1 PID: 3079 Comm: syz-executor105 Not tainted 6.1.0-rc6-syzkaller-32653-g65762d97e6fa #0 [ 27.717963][ T3079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 27.720530][ T3079] Call trace: [ 27.721345][ T3079] dump_backtrace+0x1c4/0x1f0 [ 27.722544][ T3079] show_stack+0x2c/0x54 [ 27.723609][ T3079] dump_stack_lvl+0x104/0x16c [ 27.724861][ T3079] dump_stack+0x1c/0x58 [ 27.725928][ T3079] print_irq_inversion_bug+0x2f8/0x300 [ 27.727317][ T3079] mark_lock_irq+0x3ec/0x4b4 [ 27.728491][ T3079] mark_lock+0x154/0x1b4 [ 27.729552][ T3079] __lock_acquire+0x618/0x3084 [ 27.730739][ T3079] lock_acquire+0x100/0x1f8 [ 27.731880][ T3079] _raw_write_lock+0x54/0x6c [ 27.733084][ T3079] l2tp_tunnel_register+0x354/0x79c [ 27.734435][ T3079] pppol2tp_connect+0x3e8/0x6c4 [ 27.735688][ T3079] __sys_connect+0x184/0x190 [ 27.736892][ T3079] __arm64_sys_connect+0x28/0x3c [ 27.738145][ T3079] el0_svc_common+0x138/0x220 [ 27.739351][ T3079] do_el0_svc+0x48/0x164 [ 27.740427][ T3079] el0_svc+0x58/0x150 [ 27.741422][ T3079] el0t_64_sync_handler+0x84/0xf0 [ 27.742712][ T3079] el0t_64_sync+0x190/0x194 [ 27.743951][ T3079] BUG: sleeping function called from invalid context at include/linux/percpu-rwsem.h:49 [ 27.746431][ T3079] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 3079, name: syz-executor105 [ 27.748748][ T3079] preempt_count: 1, expected: 0 [ 27.749973][ T3079] RCU nest depth: 0, expected: 0 [ 27.751204][ T3079] INFO: lockdep is turned off. [ 27.752399][ T3079] Preemption disabled at: [ 27.752404][ T3079] [] l2tp_tunnel_register+0x354/0x79c [ 27.755243][ T3079] CPU: 1 PID: 3079 Comm: syz-executor105 Not tainted 6.1.0-rc6-syzkaller-32653-g65762d97e6fa #0 [ 27.757841][ T3079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 27.760374][ T3079] Call trace: [ 27.761166][ T3079] dump_backtrace+0x1c4/0x1f0 [ 27.762301][ T3079] show_stack+0x2c/0x54 [ 27.763332][ T3079] dump_stack_lvl+0x104/0x16c [ 27.764518][ T3079] dump_stack+0x1c/0x58 [ 27.765568][ T3079] __might_resched+0x208/0x218 [ 27.766773][ T3079] __might_sleep+0x48/0x78 [ 27.767915][ T3079] cpus_read_lock+0x28/0x1e0 [ 27.769084][ T3079] static_key_slow_inc+0x1c/0x38 [ 27.770386][ T3079] udpv6_encap_enable+0x1c/0x28 [ 27.771628][ T3079] setup_udp_tunnel_sock+0xec/0x124 [ 27.772933][ T3079] l2tp_tunnel_register+0x68c/0x79c [ 27.774275][ T3079] pppol2tp_connect+0x3e8/0x6c4 [ 27.775509][ T3079] __sys_connect+0x184/0x190 [ 27.776712][ T3079] __arm64_sys_connect+0x28/0x3c [ 27.777967][ T3079] el0_svc_common+0x138/0x220 [ 27.779187][ T3079] do_el0_svc+0x48/0x164 [ 27.780279][ T3079] el0_svc+0x58/0x150 [ 27.781304][ T3079] el0t_64_sync_handler+0x84/0xf0 [ 27.782597][ T3079] el0t_64_sync+0x190/0x194