Warning: Permanently added '10.128.0.20' (ECDSA) to the list of known hosts. executing program [ 33.326090][ T3080] [ 33.326797][ T3080] ======================================================== [ 33.328959][ T3080] WARNING: possible irq lock inversion dependency detected [ 33.330913][ T3080] 6.1.0-rc6-syzkaller-32653-g65762d97e6fa #0 Not tainted [ 33.332963][ T3080] -------------------------------------------------------- [ 33.334955][ T3080] syz-executor164/3080 just changed the state of lock: [ 33.336816][ T3080] ffff0000cb593fb8 (clock-AF_INET6){+++.}-{2:2}, at: l2tp_tunnel_register+0x354/0x79c [ 33.339542][ T3080] but this lock was taken by another, SOFTIRQ-safe lock in the past: [ 33.341731][ T3080] (&tcp_hashinfo.bhash[i].lock){+.-.}-{2:2} [ 33.341741][ T3080] [ 33.341741][ T3080] [ 33.341741][ T3080] and interrupts could create inverse lock ordering between them. [ 33.341741][ T3080] [ 33.347484][ T3080] [ 33.347484][ T3080] other info that might help us debug this: [ 33.349768][ T3080] Possible interrupt unsafe locking scenario: [ 33.349768][ T3080] [ 33.351997][ T3080] CPU0 CPU1 [ 33.353430][ T3080] ---- ---- [ 33.354860][ T3080] lock(clock-AF_INET6); [ 33.356012][ T3080] local_irq_disable(); [ 33.357848][ T3080] lock(&tcp_hashinfo.bhash[i].lock); [ 33.359946][ T3080] lock(clock-AF_INET6); [ 33.361815][ T3080] [ 33.362760][ T3080] lock(&tcp_hashinfo.bhash[i].lock); [ 33.364293][ T3080] [ 33.364293][ T3080] *** DEADLOCK *** [ 33.364293][ T3080] [ 33.366506][ T3080] 1 lock held by syz-executor164/3080: [ 33.367994][ T3080] #0: ffff0000cb7f1130 (sk_lock-AF_PPPOX){+.+.}-{0:0}, at: pppol2tp_connect+0x184/0x6c4 [ 33.370675][ T3080] [ 33.370675][ T3080] the shortest dependencies between 2nd lock and 1st lock: [ 33.373227][ T3080] -> (&tcp_hashinfo.bhash[i].lock){+.-.}-{2:2} { [ 33.374856][ T3080] HARDIRQ-ON-W at: [ 33.376002][ T3080] lock_acquire+0x100/0x1f8 [ 33.377790][ T3080] _raw_spin_lock_bh+0x54/0x6c [ 33.379574][ T3080] inet_csk_get_port+0xe0/0xaf0 [ 33.381365][ T3080] __inet6_bind+0x688/0x8ac [ 33.383192][ T3080] inet6_bind+0xf4/0x150 [ 33.384781][ T3080] rds_tcp_listen_init+0x14c/0x1f0 [ 33.386622][ T3080] rds_tcp_init_net+0xcc/0x1dc [ 33.388463][ T3080] ops_init+0xe4/0x2e4 [ 33.390111][ T3080] register_pernet_operations+0x108/0x264 [ 33.392235][ T3080] register_pernet_device+0x3c/0x94 [ 33.394145][ T3080] rds_tcp_init+0x74/0xe0 [ 33.395768][ T3080] do_one_initcall+0x118/0x22c [ 33.397711][ T3080] do_initcall_level+0xac/0xe4 [ 33.399522][ T3080] do_initcalls+0x58/0xa8 [ 33.401181][ T3080] do_basic_setup+0x20/0x2c [ 33.402863][ T3080] kernel_init_freeable+0xb8/0x148 [ 33.404682][ T3080] kernel_init+0x24/0x290 [ 33.406360][ T3080] ret_from_fork+0x10/0x20 [ 33.408028][ T3080] IN-SOFTIRQ-W at: [ 33.409148][ T3080] lock_acquire+0x100/0x1f8 [ 33.410878][ T3080] _raw_spin_lock+0x54/0x6c [ 33.412556][ T3080] __inet_inherit_port+0x124/0x9ac [ 33.414451][ T3080] tcp_v4_syn_recv_sock+0x790/0x848 [ 33.416338][ T3080] tcp_check_req+0x75c/0x8e4 [ 33.418206][ T3080] tcp_v4_rcv+0xad4/0x11e8 [ 33.419825][ T3080] ip_protocol_deliver_rcu+0x224/0x414 [ 33.421701][ T3080] ip_local_deliver_finish+0x124/0x200 [ 33.423791][ T3080] ip_local_deliver+0xd0/0xf4 [ 33.425595][ T3080] ip_sublist_rcv+0x40c/0x474 [ 33.427555][ T3080] ip_list_rcv+0x184/0x1c8 [ 33.429219][ T3080] __netif_receive_skb_list_core+0x1f8/0x2b0 [ 33.431302][ T3080] __netif_receive_skb_list+0x16c/0x1d0 [ 33.433301][ T3080] netif_receive_skb_list_internal+0x1e8/0x340 [ 33.435469][ T3080] napi_complete_done+0x140/0x354 [ 33.437381][ T3080] gve_napi_poll+0xcc/0x1b4 [ 33.439117][ T3080] __napi_poll+0x5c/0x24c [ 33.440708][ T3080] napi_poll+0x110/0x484 [ 33.442326][ T3080] net_rx_action+0x18c/0x414 [ 33.444070][ T3080] _stext+0x168/0x37c [ 33.445621][ T3080] ____do_softirq+0x14/0x20 [ 33.447435][ T3080] call_on_irq_stack+0x2c/0x54 [ 33.449218][ T3080] do_softirq_own_stack+0x20/0x2c [ 33.451030][ T3080] invoke_softirq+0x70/0xbc [ 33.452738][ T3080] __irq_exit_rcu+0xf0/0x140 [ 33.454433][ T3080] irq_exit_rcu+0x10/0x40 [ 33.456197][ T3080] el1_interrupt+0x38/0x68 [ 33.457849][ T3080] el1h_64_irq_handler+0x18/0x24 [ 33.459666][ T3080] el1h_64_irq+0x64/0x68 [ 33.461322][ T3080] arch_local_irq_enable+0xc/0x18 [ 33.463143][ T3080] default_idle_call+0x48/0xb8 [ 33.464915][ T3080] do_idle+0x110/0x2d4 [ 33.466524][ T3080] cpu_startup_entry+0x24/0x28 [ 33.468457][ T3080] kernel_init+0x0/0x290 [ 33.470110][ T3080] start_kernel+0x0/0x620 [ 33.471873][ T3080] start_kernel+0x450/0x620 [ 33.473564][ T3080] __primary_switched+0xb4/0xbc [ 33.475435][ T3080] INITIAL USE at: [ 33.476490][ T3080] lock_acquire+0x100/0x1f8 [ 33.478307][ T3080] _raw_spin_lock_bh+0x54/0x6c [ 33.480091][ T3080] inet_csk_get_port+0xe0/0xaf0 [ 33.481910][ T3080] __inet6_bind+0x688/0x8ac [ 33.483594][ T3080] inet6_bind+0xf4/0x150 [ 33.485199][ T3080] rds_tcp_listen_init+0x14c/0x1f0 [ 33.487023][ T3080] rds_tcp_init_net+0xcc/0x1dc [ 33.488795][ T3080] ops_init+0xe4/0x2e4 [ 33.490379][ T3080] register_pernet_operations+0x108/0x264 [ 33.492374][ T3080] register_pernet_device+0x3c/0x94 [ 33.494256][ T3080] rds_tcp_init+0x74/0xe0 [ 33.495873][ T3080] do_one_initcall+0x118/0x22c [ 33.497655][ T3080] do_initcall_level+0xac/0xe4 [ 33.499454][ T3080] do_initcalls+0x58/0xa8 [ 33.501063][ T3080] do_basic_setup+0x20/0x2c [ 33.502763][ T3080] kernel_init_freeable+0xb8/0x148 [ 33.504656][ T3080] kernel_init+0x24/0x290 [ 33.506290][ T3080] ret_from_fork+0x10/0x20 [ 33.507915][ T3080] } [ 33.508635][ T3080] ... key at: [] tcp_init.__key.22+0x0/0x10 [ 33.510825][ T3080] ... acquired at: [ 33.511863][ T3080] _raw_read_lock_bh+0x64/0x7c [ 33.513179][ T3080] sock_i_uid+0x24/0x58 [ 33.514382][ T3080] inet_csk_get_port+0x674/0xaf0 [ 33.515780][ T3080] __inet6_bind+0x688/0x8ac [ 33.517026][ T3080] inet6_bind+0xf4/0x150 [ 33.518234][ T3080] __sys_bind+0x148/0x1b0 [ 33.519434][ T3080] __arm64_sys_bind+0x28/0x3c [ 33.520733][ T3080] el0_svc_common+0x138/0x220 [ 33.522040][ T3080] do_el0_svc+0x48/0x164 [ 33.523236][ T3080] el0_svc+0x58/0x150 [ 33.524321][ T3080] el0t_64_sync_handler+0x84/0xf0 [ 33.525725][ T3080] el0t_64_sync+0x190/0x194 [ 33.527026][ T3080] [ 33.527703][ T3080] -> (clock-AF_INET6){+++.}-{2:2} { [ 33.529026][ T3080] HARDIRQ-ON-W at: [ 33.530061][ T3080] lock_acquire+0x100/0x1f8 [ 33.531665][ T3080] _raw_write_lock_bh+0x54/0x6c [ 33.533564][ T3080] sk_common_release+0x58/0x1d4 [ 33.535343][ T3080] udp_lib_close+0x20/0x30 [ 33.537005][ T3080] inet_release+0xc8/0xe4 [ 33.538641][ T3080] inet6_release+0x3c/0x58 [ 33.540272][ T3080] sock_close+0x50/0xf0 [ 33.541824][ T3080] __fput+0x198/0x3e4 [ 33.543346][ T3080] ____fput+0x20/0x30 [ 33.544971][ T3080] task_work_run+0x100/0x148 [ 33.546673][ T3080] do_notify_resume+0x174/0x1f0 [ 33.548480][ T3080] el0_svc+0x9c/0x150 [ 33.550005][ T3080] el0t_64_sync_handler+0x84/0xf0 [ 33.551818][ T3080] el0t_64_sync+0x190/0x194 [ 33.553462][ T3080] HARDIRQ-ON-R at: [ 33.554553][ T3080] lock_acquire+0x100/0x1f8 [ 33.556231][ T3080] _raw_read_lock_bh+0x64/0x7c [ 33.558024][ T3080] sock_i_uid+0x24/0x58 [ 33.559632][ T3080] udp_lib_lport_inuse+0x44/0x268 [ 33.561501][ T3080] udp_lib_get_port+0x2bc/0x8f8 [ 33.563238][ T3080] udp_v6_get_port+0x60/0x74 [ 33.564895][ T3080] __inet6_bind+0x688/0x8ac [ 33.566570][ T3080] inet6_bind+0xf4/0x150 [ 33.568303][ T3080] __sys_bind+0x148/0x1b0 [ 33.569962][ T3080] __arm64_sys_bind+0x28/0x3c [ 33.571643][ T3080] el0_svc_common+0x138/0x220 [ 33.573364][ T3080] do_el0_svc+0x48/0x164 [ 33.574996][ T3080] el0_svc+0x58/0x150 [ 33.576530][ T3080] el0t_64_sync_handler+0x84/0xf0 [ 33.578359][ T3080] el0t_64_sync+0x190/0x194 [ 33.580019][ T3080] SOFTIRQ-ON-W at: [ 33.581067][ T3080] lock_acquire+0x100/0x1f8 [ 33.582869][ T3080] _raw_write_lock+0x54/0x6c [ 33.584500][ T3080] l2tp_tunnel_register+0x354/0x79c [ 33.586278][ T3080] pppol2tp_connect+0x3e8/0x6c4 [ 33.588018][ T3080] __sys_connect+0x184/0x190 [ 33.589750][ T3080] __arm64_sys_connect+0x28/0x3c [ 33.591669][ T3080] el0_svc_common+0x138/0x220 [ 33.593334][ T3080] do_el0_svc+0x48/0x164 [ 33.594924][ T3080] el0_svc+0x58/0x150 [ 33.596423][ T3080] el0t_64_sync_handler+0x84/0xf0 [ 33.598238][ T3080] el0t_64_sync+0x190/0x194 [ 33.600025][ T3080] INITIAL USE at: [ 33.601043][ T3080] lock_acquire+0x100/0x1f8 [ 33.602640][ T3080] _raw_write_lock_bh+0x54/0x6c [ 33.604446][ T3080] sk_common_release+0x58/0x1d4 [ 33.606192][ T3080] udp_lib_close+0x20/0x30 [ 33.607897][ T3080] inet_release+0xc8/0xe4 [ 33.609450][ T3080] inet6_release+0x3c/0x58 [ 33.611090][ T3080] sock_close+0x50/0xf0 [ 33.612651][ T3080] __fput+0x198/0x3e4 [ 33.614126][ T3080] ____fput+0x20/0x30 [ 33.615626][ T3080] task_work_run+0x100/0x148 [ 33.617327][ T3080] do_notify_resume+0x174/0x1f0 [ 33.619027][ T3080] el0_svc+0x9c/0x150 [ 33.620535][ T3080] el0t_64_sync_handler+0x84/0xf0 [ 33.622321][ T3080] el0t_64_sync+0x190/0x194 [ 33.623967][ T3080] INITIAL READ USE at: [ 33.625155][ T3080] lock_acquire+0x100/0x1f8 [ 33.626900][ T3080] _raw_read_lock_bh+0x64/0x7c [ 33.628775][ T3080] sock_i_uid+0x24/0x58 [ 33.630421][ T3080] udp_lib_lport_inuse+0x44/0x268 [ 33.632312][ T3080] udp_lib_get_port+0x2bc/0x8f8 [ 33.634186][ T3080] udp_v6_get_port+0x60/0x74 [ 33.636014][ T3080] __inet6_bind+0x688/0x8ac [ 33.637870][ T3080] inet6_bind+0xf4/0x150 [ 33.639501][ T3080] __sys_bind+0x148/0x1b0 [ 33.641211][ T3080] __arm64_sys_bind+0x28/0x3c [ 33.643117][ T3080] el0_svc_common+0x138/0x220 [ 33.644906][ T3080] do_el0_svc+0x48/0x164 [ 33.646557][ T3080] el0_svc+0x58/0x150 [ 33.648243][ T3080] el0t_64_sync_handler+0x84/0xf0 [ 33.650242][ T3080] el0t_64_sync+0x190/0x194 [ 33.651917][ T3080] } [ 33.652558][ T3080] ... key at: [] af_callback_keys+0xa0/0x2e0 [ 33.654894][ T3080] ... acquired at: [ 33.655896][ T3080] mark_lock+0x154/0x1b4 [ 33.657081][ T3080] __lock_acquire+0x618/0x3084 [ 33.658429][ T3080] lock_acquire+0x100/0x1f8 [ 33.659692][ T3080] _raw_write_lock+0x54/0x6c [ 33.660950][ T3080] l2tp_tunnel_register+0x354/0x79c [ 33.662368][ T3080] pppol2tp_connect+0x3e8/0x6c4 [ 33.663714][ T3080] __sys_connect+0x184/0x190 [ 33.665138][ T3080] __arm64_sys_connect+0x28/0x3c [ 33.666523][ T3080] el0_svc_common+0x138/0x220 [ 33.667954][ T3080] do_el0_svc+0x48/0x164 [ 33.669106][ T3080] el0_svc+0x58/0x150 [ 33.670170][ T3080] el0t_64_sync_handler+0x84/0xf0 [ 33.671514][ T3080] el0t_64_sync+0x190/0x194 [ 33.672873][ T3080] [ 33.673526][ T3080] [ 33.673526][ T3080] stack backtrace: [ 33.675107][ T3080] CPU: 0 PID: 3080 Comm: syz-executor164 Not tainted 6.1.0-rc6-syzkaller-32653-g65762d97e6fa #0 [ 33.678106][ T3080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 33.680847][ T3080] Call trace: [ 33.681726][ T3080] dump_backtrace+0x1c4/0x1f0 [ 33.682996][ T3080] show_stack+0x2c/0x54 [ 33.684118][ T3080] dump_stack_lvl+0x104/0x16c [ 33.685374][ T3080] dump_stack+0x1c/0x58 [ 33.686496][ T3080] print_irq_inversion_bug+0x2f8/0x300 [ 33.688087][ T3080] mark_lock_irq+0x3ec/0x4b4 [ 33.689322][ T3080] mark_lock+0x154/0x1b4 [ 33.690419][ T3080] __lock_acquire+0x618/0x3084 [ 33.691704][ T3080] lock_acquire+0x100/0x1f8 [ 33.692927][ T3080] _raw_write_lock+0x54/0x6c [ 33.694177][ T3080] l2tp_tunnel_register+0x354/0x79c [ 33.695576][ T3080] pppol2tp_connect+0x3e8/0x6c4 [ 33.696870][ T3080] __sys_connect+0x184/0x190 [ 33.698089][ T3080] __arm64_sys_connect+0x28/0x3c [ 33.699412][ T3080] el0_svc_common+0x138/0x220 [ 33.700684][ T3080] do_el0_svc+0x48/0x164 [ 33.701855][ T3080] el0_svc+0x58/0x150 [ 33.702932][ T3080] el0t_64_sync_handler+0x84/0xf0 [ 33.704279][ T3080] el0t_64_sync+0x190/0x194 [ 33.705636][ T3080] BUG: sleeping function called from invalid context at include/linux/percpu-rwsem.h:49 [ 33.708220][ T3080] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 3080, name: syz-executor164 [ 33.710679][ T3080] preempt_count: 1, expected: 0 [ 33.711949][ T3080] RCU nest depth: 0, expected: 0 [ 33.713290][ T3080] INFO: lockdep is turned off. [ 33.714532][ T3080] Preemption disabled at: [ 33.714538][ T3080] [] l2tp_tunnel_register+0x354/0x79c [ 33.717331][ T3080] CPU: 0 PID: 3080 Comm: syz-executor164 Not tainted 6.1.0-rc6-syzkaller-32653-g65762d97e6fa #0 [ 33.720006][ T3080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 33.722632][ T3080] Call trace: [ 33.723546][ T3080] dump_backtrace+0x1c4/0x1f0 [ 33.724765][ T3080] show_stack+0x2c/0x54 [ 33.725859][ T3080] dump_stack_lvl+0x104/0x16c [ 33.727079][ T3080] dump_stack+0x1c/0x58 [ 33.728182][ T3080] __might_resched+0x208/0x218 [ 33.729450][ T3080] __might_sleep+0x48/0x78 [ 33.730610][ T3080] cpus_read_lock+0x28/0x1e0 [ 33.731939][ T3080] static_key_slow_inc+0x1c/0x38 [ 33.733251][ T3080] udpv6_encap_enable+0x1c/0x28 [ 33.734515][ T3080] setup_udp_tunnel_sock+0xec/0x124 [ 33.735861][ T3080] l2tp_tunnel_register+0x68c/0x79c [ 33.737332][ T3080] pppol2tp_connect+0x3e8/0x6c4 [ 33.738716][ T3080] __sys_connect+0x184/0x190 [ 33.739879][ T3080] __arm64_sys_connect+0x28/0x3c [ 33.741249][ T3080] el0_svc_common+0x138/0x220 [ 33.742589][ T3080] do_el0_svc+0x48/0x164 [ 33.743741][ T3080] el0_svc+0x58/0x150 [ 33.744912][ T3080] el0t_64_sync_handler+0x84/0xf0 [ 33.746220][ T3080] el0t_64_sync+0x190/0x194