[ 9.561814][ T2658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 9.564298][ T2658] eql: remember to turn off Van-Jacobson compression on your slave devices [ 9.591795][ T9] gvnic 0000:00:00.0 enp0s0: Device link is up. [ 9.597978][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): enp0s0: link becomes ready Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.202' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 27.244861][ T3072] [ 27.245442][ T3072] ======================================================== [ 27.247225][ T3072] WARNING: possible irq lock inversion dependency detected [ 27.248982][ T3072] 6.1.0-rc6-syzkaller-32653-g65762d97e6fa #0 Not tainted [ 27.250681][ T3072] -------------------------------------------------------- [ 27.252457][ T3072] syz-executor147/3072 just changed the state of lock: [ 27.254181][ T3072] ffff0000cb7203b8 (clock-AF_INET6){+++.}-{2:2}, at: l2tp_tunnel_register+0x354/0x79c [ 27.256700][ T3072] but this lock was taken by another, SOFTIRQ-safe lock in the past: [ 27.258724][ T3072] (&tcp_hashinfo.bhash[i].lock){+.-.}-{2:2} [ 27.258733][ T3072] [ 27.258733][ T3072] [ 27.258733][ T3072] and interrupts could create inverse lock ordering between them. [ 27.258733][ T3072] [ 27.263768][ T3072] [ 27.263768][ T3072] other info that might help us debug this: [ 27.265791][ T3072] Possible interrupt unsafe locking scenario: [ 27.265791][ T3072] [ 27.267920][ T3072] CPU0 CPU1 [ 27.269314][ T3072] ---- ---- [ 27.270663][ T3072] lock(clock-AF_INET6); [ 27.271763][ T3072] local_irq_disable(); [ 27.273493][ T3072] lock(&tcp_hashinfo.bhash[i].lock); [ 27.275538][ T3072] lock(clock-AF_INET6); [ 27.277264][ T3072] [ 27.278117][ T3072] lock(&tcp_hashinfo.bhash[i].lock); [ 27.279521][ T3072] [ 27.279521][ T3072] *** DEADLOCK *** [ 27.279521][ T3072] [ 27.281591][ T3072] 1 lock held by syz-executor147/3072: [ 27.282968][ T3072] #0: ffff0000c9114130 (sk_lock-AF_PPPOX){+.+.}-{0:0}, at: pppol2tp_connect+0x184/0x6c4 [ 27.285473][ T3072] [ 27.285473][ T3072] the shortest dependencies between 2nd lock and 1st lock: [ 27.287829][ T3072] -> (&tcp_hashinfo.bhash[i].lock){+.-.}-{2:2} { [ 27.289425][ T3072] HARDIRQ-ON-W at: [ 27.290435][ T3072] lock_acquire+0x100/0x1f8 [ 27.292029][ T3072] _raw_spin_lock_bh+0x54/0x6c [ 27.293712][ T3072] inet_csk_get_port+0xe0/0xaf0 [ 27.295392][ T3072] __inet6_bind+0x688/0x8ac [ 27.297017][ T3072] inet6_bind+0xf4/0x150 [ 27.298535][ T3072] rds_tcp_listen_init+0x14c/0x1f0 [ 27.300292][ T3072] rds_tcp_init_net+0xcc/0x1dc [ 27.301928][ T3072] ops_init+0xe4/0x2e4 [ 27.303380][ T3072] register_pernet_operations+0x108/0x264 [ 27.305244][ T3072] register_pernet_device+0x3c/0x94 [ 27.307003][ T3072] rds_tcp_init+0x74/0xe0 [ 27.308748][ T3072] do_one_initcall+0x118/0x22c [ 27.310358][ T3072] do_initcall_level+0xac/0xe4 [ 27.312011][ T3072] do_initcalls+0x58/0xa8 [ 27.313523][ T3072] do_basic_setup+0x20/0x2c [ 27.315092][ T3072] kernel_init_freeable+0xb8/0x148 [ 27.316858][ T3072] kernel_init+0x24/0x290 [ 27.318441][ T3072] ret_from_fork+0x10/0x20 [ 27.320046][ T3072] IN-SOFTIRQ-W at: [ 27.321070][ T3072] lock_acquire+0x100/0x1f8 [ 27.322652][ T3072] _raw_spin_lock+0x54/0x6c [ 27.324200][ T3072] __inet_inherit_port+0x124/0x9ac [ 27.325956][ T3072] tcp_v4_syn_recv_sock+0x790/0x848 [ 27.327724][ T3072] tcp_check_req+0x75c/0x8e4 [ 27.329316][ T3072] tcp_v4_rcv+0xad4/0x11e8 [ 27.330888][ T3072] ip_protocol_deliver_rcu+0x224/0x414 [ 27.332680][ T3072] ip_local_deliver_finish+0x124/0x200 [ 27.334500][ T3072] ip_local_deliver+0xd0/0xf4 [ 27.336131][ T3072] ip_sublist_rcv+0x40c/0x474 [ 27.337795][ T3072] ip_list_rcv+0x184/0x1c8 [ 27.339360][ T3072] __netif_receive_skb_list_core+0x1f8/0x2b0 [ 27.341367][ T3072] __netif_receive_skb_list+0x16c/0x1d0 [ 27.343244][ T3072] netif_receive_skb_list_internal+0x1e8/0x340 [ 27.345262][ T3072] napi_complete_done+0x140/0x354 [ 27.347039][ T3072] gve_napi_poll+0xcc/0x1b4 [ 27.348638][ T3072] __napi_poll+0x5c/0x24c [ 27.350159][ T3072] napi_poll+0x110/0x484 [ 27.351670][ T3072] net_rx_action+0x18c/0x414 [ 27.353212][ T3072] _stext+0x168/0x37c [ 27.354701][ T3072] ____do_softirq+0x14/0x20 [ 27.356250][ T3072] call_on_irq_stack+0x2c/0x54 [ 27.357911][ T3072] do_softirq_own_stack+0x20/0x2c [ 27.359621][ T3072] invoke_softirq+0x70/0xbc [ 27.361232][ T3072] __irq_exit_rcu+0xf0/0x140 [ 27.362838][ T3072] irq_exit_rcu+0x10/0x40 [ 27.364383][ T3072] el1_interrupt+0x38/0x68 [ 27.365954][ T3072] el1h_64_irq_handler+0x18/0x24 [ 27.367704][ T3072] el1h_64_irq+0x64/0x68 [ 27.369227][ T3072] arch_local_irq_enable+0xc/0x18 [ 27.370977][ T3072] default_idle_call+0x48/0xb8 [ 27.372702][ T3072] do_idle+0x110/0x2d4 [ 27.374207][ T3072] cpu_startup_entry+0x24/0x28 [ 27.375818][ T3072] kernel_init+0x0/0x290 [ 27.377343][ T3072] start_kernel+0x0/0x620 [ 27.378896][ T3072] start_kernel+0x450/0x620 [ 27.380463][ T3072] __primary_switched+0xb4/0xbc [ 27.382140][ T3072] INITIAL USE at: [ 27.383158][ T3072] lock_acquire+0x100/0x1f8 [ 27.384694][ T3072] _raw_spin_lock_bh+0x54/0x6c [ 27.386330][ T3072] inet_csk_get_port+0xe0/0xaf0 [ 27.387997][ T3072] __inet6_bind+0x688/0x8ac [ 27.389542][ T3072] inet6_bind+0xf4/0x150 [ 27.391096][ T3072] rds_tcp_listen_init+0x14c/0x1f0 [ 27.392812][ T3072] rds_tcp_init_net+0xcc/0x1dc [ 27.394443][ T3072] ops_init+0xe4/0x2e4 [ 27.395892][ T3072] register_pernet_operations+0x108/0x264 [ 27.397774][ T3072] register_pernet_device+0x3c/0x94 [ 27.399537][ T3072] rds_tcp_init+0x74/0xe0 [ 27.401034][ T3072] do_one_initcall+0x118/0x22c [ 27.402674][ T3072] do_initcall_level+0xac/0xe4 [ 27.404290][ T3072] do_initcalls+0x58/0xa8 [ 27.405830][ T3072] do_basic_setup+0x20/0x2c [ 27.407413][ T3072] kernel_init_freeable+0xb8/0x148 [ 27.409170][ T3072] kernel_init+0x24/0x290 [ 27.410731][ T3072] ret_from_fork+0x10/0x20 [ 27.412266][ T3072] } [ 27.412911][ T3072] ... key at: [] tcp_init.__key.22+0x0/0x10 [ 27.414940][ T3072] ... acquired at: [ 27.415919][ T3072] _raw_read_lock_bh+0x64/0x7c [ 27.417159][ T3072] sock_i_uid+0x24/0x58 [ 27.418255][ T3072] inet_csk_get_port+0x674/0xaf0 [ 27.419532][ T3072] __inet6_bind+0x688/0x8ac [ 27.420689][ T3072] inet6_bind+0xf4/0x150 [ 27.421793][ T3072] __sys_bind+0x148/0x1b0 [ 27.422909][ T3072] __arm64_sys_bind+0x28/0x3c [ 27.424141][ T3072] el0_svc_common+0x138/0x220 [ 27.425351][ T3072] do_el0_svc+0x48/0x164 [ 27.426437][ T3072] el0_svc+0x58/0x150 [ 27.427440][ T3072] el0t_64_sync_handler+0x84/0xf0 [ 27.428710][ T3072] el0t_64_sync+0x190/0x194 [ 27.429882][ T3072] [ 27.430453][ T3072] -> (clock-AF_INET6){+++.}-{2:2} { [ 27.431776][ T3072] HARDIRQ-ON-W at: [ 27.432754][ T3072] lock_acquire+0x100/0x1f8 [ 27.434284][ T3072] _raw_write_lock_bh+0x54/0x6c [ 27.435932][ T3072] sk_common_release+0x58/0x1d4 [ 27.437571][ T3072] udp_lib_close+0x20/0x30 [ 27.439055][ T3072] inet_release+0xc8/0xe4 [ 27.440563][ T3072] inet6_release+0x3c/0x58 [ 27.442113][ T3072] sock_close+0x50/0xf0 [ 27.443534][ T3072] __fput+0x198/0x3e4 [ 27.444947][ T3072] ____fput+0x20/0x30 [ 27.446373][ T3072] task_work_run+0x100/0x148 [ 27.447926][ T3072] do_notify_resume+0x174/0x1f0 [ 27.449571][ T3072] el0_svc+0x9c/0x150 [ 27.450999][ T3072] el0t_64_sync_handler+0x84/0xf0 [ 27.452737][ T3072] el0t_64_sync+0x190/0x194 [ 27.454294][ T3072] HARDIRQ-ON-R at: [ 27.455286][ T3072] lock_acquire+0x100/0x1f8 [ 27.456843][ T3072] _raw_read_lock_bh+0x64/0x7c [ 27.458420][ T3072] sock_i_uid+0x24/0x58 [ 27.459914][ T3072] udp_lib_lport_inuse+0x44/0x268 [ 27.461606][ T3072] udp_lib_get_port+0x2bc/0x8f8 [ 27.463252][ T3072] udp_v6_get_port+0x60/0x74 [ 27.464850][ T3072] __inet6_bind+0x688/0x8ac [ 27.466416][ T3072] inet6_bind+0xf4/0x150 [ 27.467921][ T3072] __sys_bind+0x148/0x1b0 [ 27.469448][ T3072] __arm64_sys_bind+0x28/0x3c [ 27.471067][ T3072] el0_svc_common+0x138/0x220 [ 27.472689][ T3072] do_el0_svc+0x48/0x164 [ 27.474178][ T3072] el0_svc+0x58/0x150 [ 27.475606][ T3072] el0t_64_sync_handler+0x84/0xf0 [ 27.477267][ T3072] el0t_64_sync+0x190/0x194 [ 27.478796][ T3072] SOFTIRQ-ON-W at: [ 27.479818][ T3072] lock_acquire+0x100/0x1f8 [ 27.481416][ T3072] _raw_write_lock+0x54/0x6c [ 27.482985][ T3072] l2tp_tunnel_register+0x354/0x79c [ 27.484717][ T3072] pppol2tp_connect+0x3e8/0x6c4 [ 27.486375][ T3072] __sys_connect+0x184/0x190 [ 27.487967][ T3072] __arm64_sys_connect+0x28/0x3c [ 27.489663][ T3072] el0_svc_common+0x138/0x220 [ 27.491266][ T3072] do_el0_svc+0x48/0x164 [ 27.492808][ T3072] el0_svc+0x58/0x150 [ 27.494231][ T3072] el0t_64_sync_handler+0x84/0xf0 [ 27.495885][ T3072] el0t_64_sync+0x190/0x194 [ 27.497428][ T3072] INITIAL USE at: [ 27.498382][ T3072] lock_acquire+0x100/0x1f8 [ 27.499883][ T3072] _raw_write_lock_bh+0x54/0x6c [ 27.501482][ T3072] sk_common_release+0x58/0x1d4 [ 27.503124][ T3072] udp_lib_close+0x20/0x30 [ 27.504617][ T3072] inet_release+0xc8/0xe4 [ 27.506082][ T3072] inet6_release+0x3c/0x58 [ 27.507573][ T3072] sock_close+0x50/0xf0 [ 27.508979][ T3072] __fput+0x198/0x3e4 [ 27.510358][ T3072] ____fput+0x20/0x30 [ 27.511713][ T3072] task_work_run+0x100/0x148 [ 27.513209][ T3072] do_notify_resume+0x174/0x1f0 [ 27.514793][ T3072] el0_svc+0x9c/0x150 [ 27.516202][ T3072] el0t_64_sync_handler+0x84/0xf0 [ 27.517863][ T3072] el0t_64_sync+0x190/0x194 [ 27.519409][ T3072] INITIAL READ USE at: [ 27.520544][ T3072] lock_acquire+0x100/0x1f8 [ 27.522186][ T3072] _raw_read_lock_bh+0x64/0x7c [ 27.523726][ T3072] sock_i_uid+0x24/0x58 [ 27.524951][ T3072] udp_lib_lport_inuse+0x44/0x268 [ 27.526190][ T3072] udp_lib_get_port+0x2bc/0x8f8 [ 27.527592][ T3072] udp_v6_get_port+0x60/0x74 [ 27.529297][ T3072] __inet6_bind+0x688/0x8ac [ 27.530970][ T3072] inet6_bind+0xf4/0x150 [ 27.532560][ T3072] __sys_bind+0x148/0x1b0 [ 27.534180][ T3072] __arm64_sys_bind+0x28/0x3c [ 27.535898][ T3072] el0_svc_common+0x138/0x220 [ 27.537579][ T3072] do_el0_svc+0x48/0x164 [ 27.539190][ T3072] el0_svc+0x58/0x150 [ 27.540698][ T3072] el0t_64_sync_handler+0x84/0xf0 [ 27.542468][ T3072] el0t_64_sync+0x190/0x194 [ 27.544096][ T3072] } [ 27.544710][ T3072] ... key at: [] af_callback_keys+0xa0/0x2e0 [ 27.546798][ T3072] ... acquired at: [ 27.547750][ T3072] mark_lock+0x154/0x1b4 [ 27.548884][ T3072] __lock_acquire+0x618/0x3084 [ 27.550132][ T3072] lock_acquire+0x100/0x1f8 [ 27.551364][ T3072] _raw_write_lock+0x54/0x6c [ 27.552583][ T3072] l2tp_tunnel_register+0x354/0x79c [ 27.553932][ T3072] pppol2tp_connect+0x3e8/0x6c4 [ 27.555171][ T3072] __sys_connect+0x184/0x190 [ 27.556422][ T3072] __arm64_sys_connect+0x28/0x3c [ 27.557695][ T3072] el0_svc_common+0x138/0x220 [ 27.558945][ T3072] do_el0_svc+0x48/0x164 [ 27.560042][ T3072] el0_svc+0x58/0x150 [ 27.561133][ T3072] el0t_64_sync_handler+0x84/0xf0 [ 27.562400][ T3072] el0t_64_sync+0x190/0x194 [ 27.563562][ T3072] [ 27.564144][ T3072] [ 27.564144][ T3072] stack backtrace: [ 27.565597][ T3072] CPU: 1 PID: 3072 Comm: syz-executor147 Not tainted 6.1.0-rc6-syzkaller-32653-g65762d97e6fa #0 [ 27.568264][ T3072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 27.570905][ T3072] Call trace: [ 27.571730][ T3072] dump_backtrace+0x1c4/0x1f0 [ 27.572890][ T3072] show_stack+0x2c/0x54 [ 27.573938][ T3072] dump_stack_lvl+0x104/0x16c [ 27.575134][ T3072] dump_stack+0x1c/0x58 [ 27.576234][ T3072] print_irq_inversion_bug+0x2f8/0x300 [ 27.577548][ T3072] mark_lock_irq+0x3ec/0x4b4 [ 27.578674][ T3072] mark_lock+0x154/0x1b4 [ 27.579717][ T3072] __lock_acquire+0x618/0x3084 [ 27.580944][ T3072] lock_acquire+0x100/0x1f8 [ 27.582109][ T3072] _raw_write_lock+0x54/0x6c [ 27.583275][ T3072] l2tp_tunnel_register+0x354/0x79c [ 27.584556][ T3072] pppol2tp_connect+0x3e8/0x6c4 [ 27.585795][ T3072] __sys_connect+0x184/0x190 [ 27.586985][ T3072] __arm64_sys_connect+0x28/0x3c [ 27.588199][ T3072] el0_svc_common+0x138/0x220 [ 27.589401][ T3072] do_el0_svc+0x48/0x164 [ 27.590473][ T3072] el0_svc+0x58/0x150 [ 27.591494][ T3072] el0t_64_sync_handler+0x84/0xf0 [ 27.592818][ T3072] el0t_64_sync+0x190/0x194 [ 27.593991][ T3072] BUG: sleeping function called from invalid context at include/linux/percpu-rwsem.h:49 [ 27.596327][ T3072] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 3072, name: syz-executor147 [ 27.598566][ T3072] preempt_count: 1, expected: 0 [ 27.599763][ T3072] RCU nest depth: 0, expected: 0 [ 27.600947][ T3072] INFO: lockdep is turned off. [ 27.602138][ T3072] Preemption disabled at: [ 27.602143][ T3072] [] l2tp_tunnel_register+0x354/0x79c [ 27.604138][ T3072] CPU: 1 PID: 3072 Comm: syz-executor147 Not tainted 6.1.0-rc6-syzkaller-32653-g65762d97e6fa #0 [ 27.606008][ T3072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 27.608477][ T3072] Call trace: [ 27.609237][ T3072] dump_backtrace+0x1c4/0x1f0 [ 27.610344][ T3072] show_stack+0x2c/0x54 [ 27.611369][ T3072] dump_stack_lvl+0x104/0x16c [ 27.612526][ T3072] dump_stack+0x1c/0x58 [ 27.613530][ T3072] __might_resched+0x208/0x218 [ 27.614704][ T3072] __might_sleep+0x48/0x78 [ 27.615806][ T3072] cpus_read_lock+0x28/0x1e0 [ 27.616975][ T3072] static_key_slow_inc+0x1c/0x38 [ 27.618235][ T3072] udpv6_encap_enable+0x1c/0x28 [ 27.619482][ T3072] setup_udp_tunnel_sock+0xec/0x124 [ 27.620799][ T3072] l2tp_tunnel_register+0x68c/0x79c [ 27.622104][ T3072] pppol2tp_connect+0x3e8/0x6c4 [ 27.623345][ T3072] __sys_connect+0x184/0x190 [ 27.624541][ T3072] __arm64_sys_connect+0x28/0x3c [ 27.625843][ T3072] el0_svc_common+0x138/0x220 [ 27.627064][ T3072] do_el0_svc+0x48/0x164 [ 27.628133][ T3072] el0_svc+0x58/0x150 [ 27.629159][ T3072] el0t_64_sync_handler+0x84/0xf0 [ 27.630445][ T3072] el0t_64_sync+0x190/0x194