Warning: Permanently added '10.128.0.217' (ECDSA) to the list of known hosts. executing program [ 30.656679][ T3072] [ 30.657268][ T3072] ======================================================== [ 30.658936][ T3072] WARNING: possible irq lock inversion dependency detected [ 30.660428][ T3072] 6.1.0-rc6-syzkaller-32653-g65762d97e6fa #0 Not tainted [ 30.661967][ T3072] -------------------------------------------------------- [ 30.663582][ T3072] syz-executor333/3072 just changed the state of lock: [ 30.665028][ T3072] ffff0000cb47b838 (clock-AF_INET6){+++.}-{2:2}, at: l2tp_tunnel_register+0x354/0x79c [ 30.667124][ T3072] but this lock was taken by another, SOFTIRQ-safe lock in the past: [ 30.668893][ T3072] (&tcp_hashinfo.bhash[i].lock){+.-.}-{2:2} [ 30.668902][ T3072] [ 30.668902][ T3072] [ 30.668902][ T3072] and interrupts could create inverse lock ordering between them. [ 30.668902][ T3072] [ 30.673276][ T3072] [ 30.673276][ T3072] other info that might help us debug this: [ 30.675103][ T3072] Possible interrupt unsafe locking scenario: [ 30.675103][ T3072] [ 30.676903][ T3072] CPU0 CPU1 [ 30.678091][ T3072] ---- ---- [ 30.679292][ T3072] lock(clock-AF_INET6); [ 30.680287][ T3072] local_irq_disable(); [ 30.681784][ T3072] lock(&tcp_hashinfo.bhash[i].lock); [ 30.683596][ T3072] lock(clock-AF_INET6); [ 30.685069][ T3072] [ 30.685807][ T3072] lock(&tcp_hashinfo.bhash[i].lock); [ 30.687018][ T3072] [ 30.687018][ T3072] *** DEADLOCK *** [ 30.687018][ T3072] [ 30.688762][ T3072] 1 lock held by syz-executor333/3072: [ 30.689968][ T3072] #0: ffff0000cba97930 (sk_lock-AF_PPPOX){+.+.}-{0:0}, at: pppol2tp_connect+0x184/0x6c4 [ 30.692185][ T3072] [ 30.692185][ T3072] the shortest dependencies between 2nd lock and 1st lock: [ 30.694278][ T3072] -> (&tcp_hashinfo.bhash[i].lock){+.-.}-{2:2} { [ 30.695732][ T3072] HARDIRQ-ON-W at: [ 30.696634][ T3072] lock_acquire+0x100/0x1f8 [ 30.698012][ T3072] _raw_spin_lock_bh+0x54/0x6c [ 30.699467][ T3072] inet_csk_get_port+0xe0/0xaf0 [ 30.701019][ T3072] __inet6_bind+0x688/0x8ac [ 30.702415][ T3072] inet6_bind+0xf4/0x150 [ 30.703824][ T3072] rds_tcp_listen_init+0x14c/0x1f0 [ 30.705371][ T3072] rds_tcp_init_net+0xcc/0x1dc [ 30.706955][ T3072] ops_init+0xe4/0x2e4 [ 30.708333][ T3072] register_pernet_operations+0x108/0x264 [ 30.710104][ T3072] register_pernet_device+0x3c/0x94 [ 30.711662][ T3072] rds_tcp_init+0x74/0xe0 [ 30.713099][ T3072] do_one_initcall+0x118/0x22c [ 30.714573][ T3072] do_initcall_level+0xac/0xe4 [ 30.716012][ T3072] do_initcalls+0x58/0xa8 [ 30.717419][ T3072] do_basic_setup+0x20/0x2c [ 30.718764][ T3072] kernel_init_freeable+0xb8/0x148 [ 30.720238][ T3072] kernel_init+0x24/0x290 [ 30.721629][ T3072] ret_from_fork+0x10/0x20 [ 30.723010][ T3072] IN-SOFTIRQ-W at: [ 30.723863][ T3072] lock_acquire+0x100/0x1f8 [ 30.725244][ T3072] _raw_spin_lock+0x54/0x6c [ 30.726615][ T3072] __inet_inherit_port+0x124/0x9ac [ 30.728046][ T3072] tcp_v4_syn_recv_sock+0x790/0x848 [ 30.729560][ T3072] tcp_check_req+0x75c/0x8e4 [ 30.730972][ T3072] tcp_v4_rcv+0xad4/0x11e8 [ 30.732258][ T3072] ip_protocol_deliver_rcu+0x224/0x414 [ 30.733876][ T3072] ip_local_deliver_finish+0x124/0x200 [ 30.735543][ T3072] ip_local_deliver+0xd0/0xf4 [ 30.736976][ T3072] ip_sublist_rcv+0x40c/0x474 [ 30.738409][ T3072] ip_list_rcv+0x184/0x1c8 [ 30.739789][ T3072] __netif_receive_skb_list_core+0x1f8/0x2b0 [ 30.741473][ T3072] __netif_receive_skb_list+0x16c/0x1d0 [ 30.743135][ T3072] netif_receive_skb_list_internal+0x1e8/0x340 [ 30.745009][ T3072] napi_complete_done+0x140/0x354 [ 30.746613][ T3072] gve_napi_poll+0xcc/0x1b4 [ 30.747936][ T3072] __napi_poll+0x5c/0x24c [ 30.749246][ T3072] napi_poll+0x110/0x484 [ 30.750487][ T3072] net_rx_action+0x18c/0x414 [ 30.751820][ T3072] _stext+0x168/0x37c [ 30.753077][ T3072] ____do_softirq+0x14/0x20 [ 30.754531][ T3072] call_on_irq_stack+0x2c/0x54 [ 30.756007][ T3072] do_softirq_own_stack+0x20/0x2c [ 30.757539][ T3072] invoke_softirq+0x70/0xbc [ 30.758957][ T3072] __irq_exit_rcu+0xf0/0x140 [ 30.760336][ T3072] irq_exit_rcu+0x10/0x40 [ 30.761735][ T3072] el1_interrupt+0x38/0x68 [ 30.763088][ T3072] el1h_64_irq_handler+0x18/0x24 [ 30.764527][ T3072] el1h_64_irq+0x64/0x68 [ 30.765893][ T3072] arch_local_irq_enable+0xc/0x18 [ 30.767477][ T3072] default_idle_call+0x48/0xb8 [ 30.768913][ T3072] do_idle+0x110/0x2d4 [ 30.770166][ T3072] cpu_startup_entry+0x24/0x28 [ 30.771583][ T3072] kernel_init+0x0/0x290 [ 30.772940][ T3072] start_kernel+0x0/0x620 [ 30.774286][ T3072] start_kernel+0x450/0x620 [ 30.775752][ T3072] __primary_switched+0xb4/0xbc [ 30.777212][ T3072] INITIAL USE at: [ 30.778088][ T3072] lock_acquire+0x100/0x1f8 [ 30.779531][ T3072] _raw_spin_lock_bh+0x54/0x6c [ 30.780677][ T3072] inet_csk_get_port+0xe0/0xaf0 [ 30.781970][ T3072] __inet6_bind+0x688/0x8ac [ 30.783386][ T3072] inet6_bind+0xf4/0x150 [ 30.784672][ T3072] rds_tcp_listen_init+0x14c/0x1f0 [ 30.786205][ T3072] rds_tcp_init_net+0xcc/0x1dc [ 30.787655][ T3072] ops_init+0xe4/0x2e4 [ 30.788832][ T3072] register_pernet_operations+0x108/0x264 [ 30.790436][ T3072] register_pernet_device+0x3c/0x94 [ 30.792070][ T3072] rds_tcp_init+0x74/0xe0 [ 30.793484][ T3072] do_one_initcall+0x118/0x22c [ 30.794846][ T3072] do_initcall_level+0xac/0xe4 [ 30.796307][ T3072] do_initcalls+0x58/0xa8 [ 30.797722][ T3072] do_basic_setup+0x20/0x2c [ 30.799111][ T3072] kernel_init_freeable+0xb8/0x148 [ 30.800640][ T3072] kernel_init+0x24/0x290 [ 30.801982][ T3072] ret_from_fork+0x10/0x20 [ 30.803292][ T3072] } [ 30.803825][ T3072] ... key at: [] tcp_init.__key.22+0x0/0x10 [ 30.805557][ T3072] ... acquired at: [ 30.806377][ T3072] _raw_read_lock_bh+0x64/0x7c [ 30.807445][ T3072] sock_i_uid+0x24/0x58 [ 30.808367][ T3072] inet_csk_get_port+0x674/0xaf0 [ 30.809530][ T3072] __inet6_bind+0x688/0x8ac [ 30.810536][ T3072] inet6_bind+0xf4/0x150 [ 30.811485][ T3072] __sys_bind+0x148/0x1b0 [ 30.812489][ T3072] __arm64_sys_bind+0x28/0x3c [ 30.813527][ T3072] el0_svc_common+0x138/0x220 [ 30.814603][ T3072] do_el0_svc+0x48/0x164 [ 30.815625][ T3072] el0_svc+0x58/0x150 [ 30.816604][ T3072] el0t_64_sync_handler+0x84/0xf0 [ 30.817806][ T3072] el0t_64_sync+0x190/0x194 [ 30.818818][ T3072] [ 30.819389][ T3072] -> (clock-AF_INET6){+++.}-{2:2} { [ 30.820561][ T3072] HARDIRQ-ON-W at: [ 30.821401][ T3072] lock_acquire+0x100/0x1f8 [ 30.822750][ T3072] _raw_write_lock_bh+0x54/0x6c [ 30.824153][ T3072] sk_common_release+0x58/0x1d4 [ 30.825647][ T3072] udp_lib_close+0x20/0x30 [ 30.827056][ T3072] inet_release+0xc8/0xe4 [ 30.828401][ T3072] inet6_release+0x3c/0x58 [ 30.829807][ T3072] sock_close+0x50/0xf0 [ 30.831021][ T3072] __fput+0x198/0x3e4 [ 30.832242][ T3072] ____fput+0x20/0x30 [ 30.833412][ T3072] task_work_run+0x100/0x148 [ 30.834745][ T3072] do_notify_resume+0x174/0x1f0 [ 30.836165][ T3072] el0_svc+0x9c/0x150 [ 30.837497][ T3072] el0t_64_sync_handler+0x84/0xf0 [ 30.838946][ T3072] el0t_64_sync+0x190/0x194 [ 30.840239][ T3072] HARDIRQ-ON-R at: [ 30.841134][ T3072] lock_acquire+0x100/0x1f8 [ 30.842537][ T3072] _raw_read_lock_bh+0x64/0x7c [ 30.843991][ T3072] sock_i_uid+0x24/0x58 [ 30.845295][ T3072] udp_lib_lport_inuse+0x44/0x268 [ 30.846854][ T3072] udp_lib_get_port+0x2bc/0x8f8 [ 30.848359][ T3072] udp_v6_get_port+0x60/0x74 [ 30.849768][ T3072] __inet6_bind+0x688/0x8ac [ 30.851145][ T3072] inet6_bind+0xf4/0x150 [ 30.852397][ T3072] __sys_bind+0x148/0x1b0 [ 30.853708][ T3072] __arm64_sys_bind+0x28/0x3c [ 30.855128][ T3072] el0_svc_common+0x138/0x220 [ 30.856545][ T3072] do_el0_svc+0x48/0x164 [ 30.857816][ T3072] el0_svc+0x58/0x150 [ 30.859043][ T3072] el0t_64_sync_handler+0x84/0xf0 [ 30.860579][ T3072] el0t_64_sync+0x190/0x194 [ 30.861864][ T3072] SOFTIRQ-ON-W at: [ 30.862684][ T3072] lock_acquire+0x100/0x1f8 [ 30.863997][ T3072] _raw_write_lock+0x54/0x6c [ 30.865377][ T3072] l2tp_tunnel_register+0x354/0x79c [ 30.867004][ T3072] pppol2tp_connect+0x3e8/0x6c4 [ 30.868420][ T3072] __sys_connect+0x184/0x190 [ 30.869806][ T3072] __arm64_sys_connect+0x28/0x3c [ 30.871285][ T3072] el0_svc_common+0x138/0x220 [ 30.872830][ T3072] do_el0_svc+0x48/0x164 [ 30.874157][ T3072] el0_svc+0x58/0x150 [ 30.875476][ T3072] el0t_64_sync_handler+0x84/0xf0 [ 30.877015][ T3072] el0t_64_sync+0x190/0x194 [ 30.878341][ T3072] INITIAL USE at: [ 30.879173][ T3072] lock_acquire+0x100/0x1f8 [ 30.880576][ T3072] _raw_write_lock_bh+0x54/0x6c [ 30.882011][ T3072] sk_common_release+0x58/0x1d4 [ 30.883384][ T3072] udp_lib_close+0x20/0x30 [ 30.884719][ T3072] inet_release+0xc8/0xe4 [ 30.885964][ T3072] inet6_release+0x3c/0x58 [ 30.887310][ T3072] sock_close+0x50/0xf0 [ 30.888628][ T3072] __fput+0x198/0x3e4 [ 30.889882][ T3072] ____fput+0x20/0x30 [ 30.891118][ T3072] task_work_run+0x100/0x148 [ 30.892517][ T3072] do_notify_resume+0x174/0x1f0 [ 30.893924][ T3072] el0_svc+0x9c/0x150 [ 30.895200][ T3072] el0t_64_sync_handler+0x84/0xf0 [ 30.896667][ T3072] el0t_64_sync+0x190/0x194 [ 30.898113][ T3072] INITIAL READ USE at: [ 30.899063][ T3072] lock_acquire+0x100/0x1f8 [ 30.900589][ T3072] _raw_read_lock_bh+0x64/0x7c [ 30.902081][ T3072] sock_i_uid+0x24/0x58 [ 30.903490][ T3072] udp_lib_lport_inuse+0x44/0x268 [ 30.905123][ T3072] udp_lib_get_port+0x2bc/0x8f8 [ 30.906661][ T3072] udp_v6_get_port+0x60/0x74 [ 30.908095][ T3072] __inet6_bind+0x688/0x8ac [ 30.909614][ T3072] inet6_bind+0xf4/0x150 [ 30.910975][ T3072] __sys_bind+0x148/0x1b0 [ 30.912366][ T3072] __arm64_sys_bind+0x28/0x3c [ 30.913925][ T3072] el0_svc_common+0x138/0x220 [ 30.915383][ T3072] do_el0_svc+0x48/0x164 [ 30.916816][ T3072] el0_svc+0x58/0x150 [ 30.918061][ T3072] el0t_64_sync_handler+0x84/0xf0 [ 30.919594][ T3072] el0t_64_sync+0x190/0x194 [ 30.921028][ T3072] } [ 30.921576][ T3072] ... key at: [] af_callback_keys+0xa0/0x2e0 [ 30.923386][ T3072] ... acquired at: [ 30.924231][ T3072] mark_lock+0x154/0x1b4 [ 30.925341][ T3072] __lock_acquire+0x618/0x3084 [ 30.926561][ T3072] lock_acquire+0x100/0x1f8 [ 30.927586][ T3072] _raw_write_lock+0x54/0x6c [ 30.928704][ T3072] l2tp_tunnel_register+0x354/0x79c [ 30.929932][ T3072] pppol2tp_connect+0x3e8/0x6c4 [ 30.931142][ T3072] __sys_connect+0x184/0x190 [ 30.932218][ T3072] __arm64_sys_connect+0x28/0x3c [ 30.933368][ T3072] el0_svc_common+0x138/0x220 [ 30.934484][ T3072] do_el0_svc+0x48/0x164 [ 30.935445][ T3072] el0_svc+0x58/0x150 [ 30.936382][ T3072] el0t_64_sync_handler+0x84/0xf0 [ 30.937546][ T3072] el0t_64_sync+0x190/0x194 [ 30.938576][ T3072] [ 30.939090][ T3072] [ 30.939090][ T3072] stack backtrace: [ 30.940421][ T3072] CPU: 0 PID: 3072 Comm: syz-executor333 Not tainted 6.1.0-rc6-syzkaller-32653-g65762d97e6fa #0 [ 30.942796][ T3072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 30.945081][ T3072] Call trace: [ 30.945805][ T3072] dump_backtrace+0x1c4/0x1f0 [ 30.946900][ T3072] show_stack+0x2c/0x54 [ 30.947822][ T3072] dump_stack_lvl+0x104/0x16c [ 30.948831][ T3072] dump_stack+0x1c/0x58 [ 30.949764][ T3072] print_irq_inversion_bug+0x2f8/0x300 [ 30.950944][ T3072] mark_lock_irq+0x3ec/0x4b4 [ 30.952005][ T3072] mark_lock+0x154/0x1b4 [ 30.953027][ T3072] __lock_acquire+0x618/0x3084 [ 30.954090][ T3072] lock_acquire+0x100/0x1f8 [ 30.955048][ T3072] _raw_write_lock+0x54/0x6c [ 30.956100][ T3072] l2tp_tunnel_register+0x354/0x79c [ 30.957257][ T3072] pppol2tp_connect+0x3e8/0x6c4 [ 30.958293][ T3072] __sys_connect+0x184/0x190 [ 30.959302][ T3072] __arm64_sys_connect+0x28/0x3c [ 30.960392][ T3072] el0_svc_common+0x138/0x220 [ 30.961474][ T3072] do_el0_svc+0x48/0x164 [ 30.962363][ T3072] el0_svc+0x58/0x150 [ 30.963280][ T3072] el0t_64_sync_handler+0x84/0xf0 [ 30.964349][ T3072] el0t_64_sync+0x190/0x194 [ 30.965507][ T3072] BUG: sleeping function called from invalid context at include/linux/percpu-rwsem.h:49 [ 30.967652][ T3072] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 3072, name: syz-executor333 [ 30.969611][ T3072] preempt_count: 1, expected: 0 [ 30.970606][ T3072] RCU nest depth: 0, expected: 0 [ 30.971674][ T3072] INFO: lockdep is turned off. [ 30.972667][ T3072] Preemption disabled at: [ 30.972672][ T3072] [] l2tp_tunnel_register+0x354/0x79c [ 30.975164][ T3072] CPU: 0 PID: 3072 Comm: syz-executor333 Not tainted 6.1.0-rc6-syzkaller-32653-g65762d97e6fa #0 [ 30.977341][ T3072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 30.979575][ T3072] Call trace: [ 30.980229][ T3072] dump_backtrace+0x1c4/0x1f0 [ 30.981264][ T3072] show_stack+0x2c/0x54 [ 30.982148][ T3072] dump_stack_lvl+0x104/0x16c [ 30.983179][ T3072] dump_stack+0x1c/0x58 [ 30.984084][ T3072] __might_resched+0x208/0x218 [ 30.985187][ T3072] __might_sleep+0x48/0x78 [ 30.986112][ T3072] cpus_read_lock+0x28/0x1e0 [ 30.987155][ T3072] static_key_slow_inc+0x1c/0x38 [ 30.988183][ T3072] udpv6_encap_enable+0x1c/0x28 [ 30.989287][ T3072] setup_udp_tunnel_sock+0xec/0x124 [ 30.990352][ T3072] l2tp_tunnel_register+0x68c/0x79c [ 30.991493][ T3072] pppol2tp_connect+0x3e8/0x6c4 [ 30.992613][ T3072] __sys_connect+0x184/0x190 [ 30.993556][ T3072] __arm64_sys_connect+0x28/0x3c [ 30.994662][ T3072] el0_svc_common+0x138/0x220 [ 30.995714][ T3072] do_el0_svc+0x48/0x164 [ 30.996714][ T3072] el0_svc+0x58/0x150 [ 30.997594][ T3072] el0t_64_sync_handler+0x84/0xf0 [ 30.998662][ T3072] el0t_64_sync+0x190/0x194