random: sshd: uninitialized urandom read (32 bytes read)
random: sshd: uninitialized urandom read (32 bytes read)
BUG: sleeping function called from invalid context at net/core/sock.c:2502
in_atomic(): 1, irqs_disabled(): 0, pid: 3807, name: syz-executor684
2 locks held by syz-executor684/3807:
 #0:  (&mm->mmap_sem){++++++}, at: [<ffffffff810d977b>] __do_page_fault+0x36b/0xd50 arch/x86/mm/fault.c:1336
 #1:  (rcu_callback){......}, at: [<ffffffff8128586e>] __rcu_reclaim kernel/rcu/rcu.h:108 [inline]
 #1:  (rcu_callback){......}, at: [<ffffffff8128586e>] rcu_do_batch kernel/rcu/tree.c:2789 [inline]
 #1:  (rcu_callback){......}, at: [<ffffffff8128586e>] invoke_rcu_callbacks kernel/rcu/tree.c:3053 [inline]
 #1:  (rcu_callback){......}, at: [<ffffffff8128586e>] __rcu_process_callbacks kernel/rcu/tree.c:3020 [inline]
 #1:  (rcu_callback){......}, at: [<ffffffff8128586e>] rcu_process_callbacks+0x98e/0x12b0 kernel/rcu/tree.c:3037
Preemption disabled at:[   24.924825] [<ffffffff814d19d8>] kmap_atomic include/linux/highmem.h:68 [inline]
Preemption disabled at:[   24.924825] [<ffffffff814d19d8>] clear_user_highpage include/linux/highmem.h:135 [inline]
Preemption disabled at:[   24.924825] [<ffffffff814d19d8>] clear_huge_page+0x98/0x470 mm/memory.c:4048
CPU: 1 PID: 3807 Comm: syz-executor684 Not tainted 4.9.96-g71fce1e #10
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
 ffff8801db307cd8 ffffffff81eb0b69 ffffffff814d19d8 0000000000000000
 0000000000000101 ffff8801b6f50000 ffff8801b6f50000 ffff8801db307d10
 ffffffff81422310 ffff8801b6f50000 ffffffff83ef5aa0 00000000000009c6
Call Trace:
 <IRQ> [   24.976206]  [<ffffffff81eb0b69>] __dump_stack lib/dump_stack.c:15 [inline]
 <IRQ> [   24.976206]  [<ffffffff81eb0b69>] dump_stack+0xc1/0x128 lib/dump_stack.c:51
 [<ffffffff81422310>] ___might_sleep.cold.123+0x1bc/0x1f5 kernel/sched/core.c:7992
 [<ffffffff811b9335>] __might_sleep+0x95/0x1a0 kernel/sched/core.c:7949
 [<ffffffff8301f614>] lock_sock_nested+0x34/0x120 net/core/sock.c:2502
 [<ffffffff8341b189>] lock_sock include/net/sock.h:1404 [inline]
 [<ffffffff8341b189>] inet_shutdown+0x69/0x360 net/ipv4/af_inet.c:823
 [<ffffffff836bd340>] pppol2tp_session_close+0xa0/0xe0 net/l2tp/l2tp_ppp.c:441
 [<ffffffff836b6b71>] l2tp_tunnel_closeall+0x231/0x350 net/l2tp/l2tp_core.c:1368
 [<ffffffff836b73f2>] l2tp_tunnel_destruct+0x2f2/0x590 net/l2tp/l2tp_core.c:1324
 [<ffffffff8301c095>] __sk_destruct+0x55/0x590 net/core/sock.c:1428
 [<ffffffff8128578e>] __rcu_reclaim kernel/rcu/rcu.h:118 [inline]
 [<ffffffff8128578e>] rcu_do_batch kernel/rcu/tree.c:2789 [inline]
 [<ffffffff8128578e>] invoke_rcu_callbacks kernel/rcu/tree.c:3053 [inline]
 [<ffffffff8128578e>] __rcu_process_callbacks kernel/rcu/tree.c:3020 [inline]
 [<ffffffff8128578e>] rcu_process_callbacks+0x8ae/0x12b0 kernel/rcu/tree.c:3037
 [<ffffffff839f9efb>] __do_softirq+0x20b/0x937 kernel/softirq.c:284
 [<ffffffff81149037>] invoke_softirq kernel/softirq.c:364 [inline]
 [<ffffffff81149037>] irq_exit+0x147/0x190 kernel/softirq.c:405
 [<ffffffff839f8ae1>] exiting_irq arch/x86/include/asm/apic.h:659 [inline]
 [<ffffffff839f8ae1>] smp_apic_timer_interrupt+0x81/0xa0 arch/x86/kernel/apic/apic.c:960
 [<ffffffff839f4c70>] apic_timer_interrupt+0xa0/0xb0 arch/x86/entry/entry_64.S:648
 <EOI> [   25.106618]  [<ffffffff81ede9f7>] ? clear_page_c_e+0x7/0x10 arch/x86/lib/clear_page_64.S:53
 [<ffffffff81543cb7>] __do_huge_pmd_anonymous_page mm/huge_memory.c:558 [inline]
 [<ffffffff81543cb7>] do_huge_pmd_anonymous_page+0x3c7/0x10f0 mm/huge_memory.c:700
 [<ffffffff814cedee>] create_huge_pmd mm/memory.c:3423 [inline]
 [<ffffffff814cedee>] __handle_mm_fault mm/memory.c:3573 [inline]
 [<ffffffff814cedee>] handle_mm_fault+0x1a9e/0x28e0 mm/memory.c:3634
 [<ffffffff810d99bf>] __do_page_fault+0x5af/0xd50 arch/x86/mm/fault.c:1407
 [<ffffffff810da187>] do_page_fault+0x27/0x30 arch/x86/mm/fault.c:1470
 [<ffffffff839f4488>] page_fault+0x28/0x30 arch/x86/entry/entry_64.S:951

=================================
[ INFO: inconsistent lock state ]
4.9.96-g71fce1e #10 Tainted: G        W      
---------------------------------
inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage.
syz-executor684/3807 [HC0[0]:SC1[3]:HE1:SE0] takes:
 (sk_lock-AF_PPPOX){+.?.+.}, at: [<ffffffff8341b189>] lock_sock include/net/sock.h:1404 [inline]
 (sk_lock-AF_PPPOX){+.?.+.}, at: [<ffffffff8341b189>] inet_shutdown+0x69/0x360 net/ipv4/af_inet.c:823
  mark_held_locks+0xc7/0x130 kernel/locking/lockdep.c:2660
  __trace_hardirqs_on_caller kernel/locking/lockdep.c:2689 [inline]
  trace_hardirqs_on_caller+0x38b/0x590 kernel/locking/lockdep.c:2736
  trace_hardirqs_on+0xd/0x10 kernel/locking/lockdep.c:2743
  __local_bh_enable_ip+0x6a/0xd0 kernel/softirq.c:186
  local_bh_enable include/linux/bottom_half.h:31 [inline]
  lock_sock_nested+0xdc/0x120 net/core/sock.c:2512
  lock_sock include/net/sock.h:1404 [inline]
  pppol2tp_connect+0xd8/0x18e0 net/l2tp/l2tp_ppp.c:590
  SYSC_connect+0x1b8/0x300 net/socket.c:1562
  SyS_connect+0x24/0x30 net/socket.c:1543
  do_syscall_64+0x1a6/0x490 arch/x86/entry/common.c:282
  entry_SYSCALL_64_after_swapgs+0x5d/0xdb
irq event stamp: 812
hardirqs last  enabled at (812): [<ffffffff839f3ca9>] restore_regs_and_iret+0x0/0x1d
hardirqs last disabled at (811): [<ffffffff839f4c6b>] apic_timer_interrupt+0x9b/0xb0 arch/x86/entry/entry_64.S:648
softirqs last  enabled at (224): [<ffffffff8302009e>] spin_unlock_bh include/linux/spinlock.h:352 [inline]
softirqs last  enabled at (224): [<ffffffff8302009e>] release_sock+0x14e/0x1c0 net/core/sock.c:2531
softirqs last disabled at (237): [<ffffffff81149037>] invoke_softirq kernel/softirq.c:364 [inline]
softirqs last disabled at (237): [<ffffffff81149037>] irq_exit+0x147/0x190 kernel/softirq.c:405

other info that might help us debug this:
 Possible unsafe locking scenario:

       CPU0
       ----
  lock(sk_lock-AF_PPPOX);
  <Interrupt>
    lock(sk_lock-AF_PPPOX);

 *** DEADLOCK ***

2 locks held by syz-executor684/3807:
 #0:  (&mm->mmap_sem){++++++}, at: [<ffffffff810d977b>] __do_page_fault+0x36b/0xd50 arch/x86/mm/fault.c:1336
 #1:  (rcu_callback){......}, at: [<ffffffff8128586e>] __rcu_reclaim kernel/rcu/rcu.h:108 [inline]
 #1:  (rcu_callback){......}, at: [<ffffffff8128586e>] rcu_do_batch kernel/rcu/tree.c:2789 [inline]
 #1:  (rcu_callback){......}, at: [<ffffffff8128586e>] invoke_rcu_callbacks kernel/rcu/tree.c:3053 [inline]
 #1:  (rcu_callback){......}, at: [<ffffffff8128586e>] __rcu_process_callbacks kernel/rcu/tree.c:3020 [inline]
 #1:  (rcu_callback){......}, at: [<ffffffff8128586e>] rcu_process_callbacks+0x98e/0x12b0 kernel/rcu/tree.c:3037

stack backtrace:
CPU: 1 PID: 3807 Comm: syz-executor684 Tainted: G        W       4.9.96-g71fce1e #10
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
 ffff8801db307a58 ffffffff81eb0b69 ffff8801b6f50000 ffffffff853eee60
 ffff8801b6f50918 ffff8801b6f50938 0000000000000000 ffff8801db307ac8
 ffffffff814256bb 0000000000000003 0000000000000001 ffff880100000000
Call Trace:
 <IRQ> [   25.420564]  [<ffffffff81eb0b69>] __dump_stack lib/dump_stack.c:15 [inline]
 <IRQ> [   25.420564]  [<ffffffff81eb0b69>] dump_stack+0xc1/0x128 lib/dump_stack.c:51
 [<ffffffff814256bb>] print_usage_bug.cold.56+0x327/0x421 kernel/locking/lockdep.c:2387
 [<ffffffff81233196>] valid_state kernel/locking/lockdep.c:2400 [inline]
 [<ffffffff81233196>] mark_lock_irq kernel/locking/lockdep.c:2602 [inline]
 [<ffffffff81233196>] mark_lock+0xcc6/0x1280 kernel/locking/lockdep.c:3065
 [<ffffffff812350c0>] mark_irqflags kernel/locking/lockdep.c:2923 [inline]
 [<ffffffff812350c0>] __lock_acquire+0xd40/0x4070 kernel/locking/lockdep.c:3302
 [<ffffffff81238e60>] lock_acquire+0x130/0x3e0 kernel/locking/lockdep.c:3756
 [<ffffffff8301f6a6>] lock_sock_nested+0xc6/0x120 net/core/sock.c:2511
 [<ffffffff8341b189>] lock_sock include/net/sock.h:1404 [inline]
 [<ffffffff8341b189>] inet_shutdown+0x69/0x360 net/ipv4/af_inet.c:823
 [<ffffffff836bd340>] pppol2tp_session_close+0xa0/0xe0 net/l2tp/l2tp_ppp.c:441
 [<ffffffff836b6b71>] l2tp_tunnel_closeall+0x231/0x350 net/l2tp/l2tp_core.c:1368
 [<ffffffff836b73f2>] l2tp_tunnel_destruct+0x2f2/0x590 net/l2tp/l2tp_core.c:1324
 [<ffffffff8301c095>] __sk_destruct+0x55/0x590 net/core/sock.c:1428
 [<ffffffff8128578e>] __rcu_reclaim kernel/rcu/rcu.h:118 [inline]
 [<ffffffff8128578e>] rcu_do_batch kernel/rcu/tree.c:2789 [inline]
 [<ffffffff8128578e>] invoke_rcu_callbacks kernel/rcu/tree.c:3053 [inline]
 [<ffffffff8128578e>] __rcu_process_callbacks kernel/rcu/tree.c:3020 [inline]
 [<ffffffff8128578e>] rcu_process_callbacks+0x8ae/0x12b0 kernel/rcu/tree.c:3037
 [<ffffffff839f9efb>] __do_softirq+0x20b/0x937 kernel/softirq.c:284
 [<ffffffff81149037>] invoke_softirq kernel/softirq.c:364 [inline]
 [<ffffffff81149037>] irq_exit+0x147/0x190 kernel/softirq.c:405
 [<ffffffff839f8ae1>] exiting_irq arch/x86/include/asm/apic.h:659 [inline]
 [<ffffffff839f8ae1>] smp_apic_timer_interrupt+0x81/0xa0 arch/x86/kernel/apic/apic.c:960
 [<ffffffff839f4c70>] apic_timer_interrupt+0xa0/0xb0 arch/x86/entry/entry_64.S:648
 <EOI> [   25.593654]  [<ffffffff81ede9f7>] ? clear_page_c_e+0x7/0x10 arch/x86/lib/clear_page_64.S:53
 [<ffffffff81543cb7>] __do_huge_pmd_anonymous_page mm/huge_memory.c:558 [inline]
 [<ffffffff81543cb7>] do_huge_pmd_anonymous_page+0x3c7/0x10f0 mm/huge_memory.c:700
 [<ffffffff814cedee>] create_huge_pmd mm/memory.c:3423 [inline]
 [<ffffffff814cedee>] __handle_mm_fault mm/memory.c:3573 [inline]
 [<ffffffff814cedee>] handle_mm_fault+0x1a9e/0x28e0 mm/memory.c:3634
 [<ffffffff810d99bf>] __do_page_fault+0x5af/0xd50 arch/x86/mm/fault.c:1407
 [<ffffffff810da187>] do_page_fault+0x27/0x30 arch/x86/mm/fault.c:1470
 [<ffffffff839f4488>] page_fault+0x28/0x30 arch/x86/entry/entry_64.S:951
------------[ cut here ]------------
WARNING: CPU: 1 PID: 3807 at net/ipv4/af_inet.c:167 inet_sock_destruct+0x598/0x760 net/ipv4/af_inet.c:167