================================ WARNING: inconsistent lock state 5.19.0-rc5-next-20220707 #1 Not tainted -------------------------------- inconsistent {IN-SOFTIRQ-W} -> {SOFTIRQ-ON-W} usage. cron/6337 [HC0[0]:SC0[0]:HE0:SE1] takes: ffff88806cf345c0 (lock#2){+.?.}-{2:2}, at: get_page_from_freelist+0x457/0x2cf0 {IN-SOFTIRQ-W} state was registered at: lock_acquire+0x1a2/0x530 free_unref_page+0x1f3/0x6f0 bio_free_pages+0x10a/0x220 bio_copy_kern_endio_read+0x62/0x340 bio_endio+0x58e/0x710 blk_update_request+0x394/0x1180 scsi_end_request+0x7a/0x9a0 scsi_io_completion+0xbc/0x1d20 scsi_complete+0x114/0x560 blk_complete_reqs+0xb2/0xf0 __do_softirq+0x1c8/0x8cc run_ksoftirqd+0x2d/0x60 smpboot_thread_fn+0x66f/0xa00 kthread+0x2ed/0x3a0 ret_from_fork+0x22/0x30 irq event stamp: 1016 hardirqs last enabled at (1015): [] _raw_spin_unlock_irqrestore+0x28/0x50 hardirqs last disabled at (1016): [] get_page_from_freelist+0x1734/0x2cf0 softirqs last enabled at (944): [] __irq_exit_rcu+0x113/0x170 softirqs last disabled at (939): [] __irq_exit_rcu+0x113/0x170 other info that might help us debug this: Possible unsafe locking scenario: CPU0 ---- lock(lock#2); lock(lock#2); *** DEADLOCK *** 2 locks held by cron/6337: #0: ffff88803c64f858 (&mm->mmap_lock#2){++++}-{3:3}, at: do_user_addr_fault+0x337/0x1300 #1: ffff88806cf345c0 (lock#2){+.?.}-{2:2}, at: get_page_from_freelist+0x457/0x2cf0 stack backtrace: CPU: 1 PID: 6337 Comm: cron Not tainted 5.19.0-rc5-next-20220707 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 Call Trace: dump_stack_lvl+0x8b/0xb3 mark_lock.part.0.cold+0x3f/0x151 mark_held_locks+0x9e/0xe0 lockdep_hardirqs_on_prepare+0x28b/0x400 trace_hardirqs_on+0x2d/0x110 charge_memcg+0x206/0x2c0 __mem_cgroup_charge+0x24/0x80 wp_page_copy+0x2fb/0x2410 do_wp_page+0x198/0x1cf0 __handle_mm_fault+0x11bb/0x34f0 handle_mm_fault+0x2e6/0xa10 do_user_addr_fault+0x536/0x1300 exc_page_fault+0x98/0x1a0 asm_exc_page_fault+0x27/0x30 RIP: 0033:0x7f8deae3edb2 Code: 00 ff d0 64 4c 8b 24 25 10 00 00 00 4c 3b 25 bd f8 13 00 74 23 64 8b 04 25 18 00 00 00 85 c0 0f 85 63 02 00 00 ba 01 00 00 00 <0f> b1 15 97 f8 13 00 4c 89 25 98 f8 13 00 8b 15 8e f8 13 00 8b 33 RSP: 002b:00007ffd0b67d940 EFLAGS: 00010246 RAX: 0000000000000000 RBX: 000056238ffd14a0 RCX: 0000000000000000 RDX: 0000000000000001 RSI: 00007f8deacbfb48 RDI: 00007ffd0b67d940 RBP: 0000000000000001 R08: 0000000000000001 R09: 00007f8deacdf2d0 R10: fffffffffffff856 R11: 00007f8deafde4f0 R12: 00007f8deacbf840 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 netlink: 256 bytes leftover after parsing attributes in process `syz-executor.5'. netlink: 256 bytes leftover after parsing attributes in process `syz-executor.5'. netlink: 256 bytes leftover after parsing attributes in process `syz-executor.5'. syz-executor.7 invoked oom-killer: gfp_mask=0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 CPU: 0 PID: 6356 Comm: syz-executor.7 Not tainted 5.19.0-rc5-next-20220707 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 Call Trace: dump_stack_lvl+0x8b/0xb3 dump_header+0x10b/0x7e4 oom_kill_process.cold+0x10/0x15 out_of_memory+0x11e7/0x14b0 __alloc_pages_slowpath.constprop.0+0x1a72/0x2180 __alloc_pages+0x421/0x4f0 alloc_pages+0x1a0/0x2f0 __vmalloc_node_range+0x8d9/0x1400 __vmalloc_node+0xa8/0xf0 packet_set_ring+0xaeb/0x1950 packet_setsockopt+0x1b56/0x3cc0 __sys_setsockopt+0x180/0x2a0 __x64_sys_setsockopt+0xba/0x150 do_syscall_64+0x3b/0x90 entry_SYSCALL_64_after_hwframe+0x46/0xb0 RIP: 0033:0x7fae6278ab19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fae5fd00188 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 RAX: ffffffffffffffda RBX: 00007fae6289df60 RCX: 00007fae6278ab19 RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000003 RBP: 00007fae627e4f6d R08: 0000000000000010 R09: 0000000000000000 R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fff79b041ff R14: 00007fae5fd00300 R15: 0000000000022000 Mem-Info: active_anon:6662 inactive_anon:31414 isolated_anon:0 active_file:258 inactive_file:209 isolated_file:0 unevictable:0 dirty:1 writeback:2 slab_reclaimable:9168 slab_unreclaimable:60733 mapped:69740 shmem:111 pagetables:1524 bounce:0 kernel_misc_reclaimable:0 free:3302 free_pcp:22 free_cma:0 Node 0 active_anon:26648kB inactive_anon:125656kB active_file:1032kB inactive_file:924kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:278960kB dirty:4kB writeback:8kB shmem:444kB writeback_tmp:0kB kernel_stack:4992kB pagetables:6096kB all_unreclaimable? no Node 0 DMA free:6500kB boost:0kB min:44kB low:56kB high:68kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 1615 1615 1615 Node 0 DMA32 free:7212kB boost:0kB min:5120kB low:6772kB high:8424kB reserved_highatomic:2048KB active_anon:26228kB inactive_anon:125236kB active_file:1456kB inactive_file:932kB unevictable:0kB writepending:96kB present:2080640kB managed:1658292kB mlocked:0kB bounce:0kB free_pcp:140kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6500kB Node 0 DMA32: 599*4kB (UMEH) 251*8kB (UMEH) 76*16kB (UMEH) 39*32kB (UMH) 3*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 7060kB Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 623 total pagecache pages 0 pages in swap cache Free swap = 0kB Total swap = 0kB 524158 pages RAM 0 pages HighMem/MovableOnly 105745 pages reserved Unreclaimable slab info: Name Used Total pid_3 7KB 7KB pid_2 49KB 56KB IEEE-802.15.4-MAC 63KB 63KB p9_req_t 8KB 8KB fib6_nodes 28KB 28KB ip6_dst_cache 18KB 18KB RAWv6 126KB 126KB UDPLITEv6 62KB 62KB UDPv6 62KB 62KB tw_sock_TCPv6 15KB 15KB TCPv6 62KB 62KB scsi_sense_cache 8KB 8KB virtio_scsi_cmd 16KB 16KB bio-120 7KB 7KB sgpool-128 127KB 267KB sgpool-64 63KB 63KB sgpool-32 63KB 63KB sgpool-16 22KB 22KB sgpool-8 45KB 45KB io_kiocb 18KB 18KB mqueue_inode_cache 60KB 60KB nfs_commit_data 15KB 15KB nfs_write_data 47KB 47KB jbd2_inode 7KB 7KB ext4_system_zone 7KB 7KB ext4_io_end_vec 7KB 7KB ext4_bio_post_read_ctx 15KB 15KB kioctx 31KB 31KB aio_kiocb 7KB 7KB fasync_cache 7KB 7KB pid_namespace 7KB 7KB posix_timers_cache 7KB 7KB rpc_buffers 31KB 31KB rpc_tasks 3KB 3KB UNIX-STREAM 120KB 288KB UNIX 198KB 256KB UDP-Lite 63KB 63KB tcp_bind_bucket 8KB 8KB ip_fib_trie 8KB 8KB ip_fib_alias 11KB 11KB ip_dst_cache 37KB 84KB RAW 62KB 62KB UDP 112KB 189KB request_sock_TCP 15KB 15KB TCP 58KB 58KB hugetlbfs_inode_cache 31KB 31KB bio-248 11KB 11KB ep_head 8KB 8KB eventpoll_pwq 19KB 19KB eventpoll_epi 31KB 31KB inotify_inode_mark 42KB 42KB request_queue 63KB 63KB blkdev_ioc 8KB 8KB bio-184 36KB 36KB biovec-max 714KB 714KB biovec-128 31KB 31KB biovec-64 78KB 141KB biovec-16 22KB 22KB user_namespace 30KB 30KB uid_cache 7KB 7KB dmaengine-unmap-2 4KB 4KB audit_buffer 7KB 7KB skbuff_fclone_cache 90KB 120KB skbuff_head_cache 246KB 367KB configfs_dir_cache 8KB 8KB file_lock_cache 82KB 82KB file_lock_ctx 7KB 7KB fsnotify_mark_connector 36KB 36KB taskstats 63KB 63KB proc_dir_entry 393KB 393KB pde_opener 7KB 7KB seq_file 71KB 71KB sigqueue 51KB 51KB shmem_inode_cache 1471KB 1701KB kernfs_iattrs_cache 247KB 247KB kernfs_node_cache 5430KB 5430KB mnt_cache 220KB 220KB filp 1955KB 2133KB names_cache 14632KB 15291KB net_namespace 63KB 63KB hashtab_node 274KB 274KB ebitmap_node 1149KB 1149KB avtab_node 4976KB 4976KB avc_node 31KB 31KB lsm_inode_cache 3329KB 3451KB lsm_file_cache 104KB 144KB key_jar 23KB 23KB uts_namespace 15KB 15KB nsproxy 7KB 7KB vm_area_struct 1054KB 1219KB mm_struct 227KB 283KB fs_cache 42KB 48KB files_cache 165KB 175KB signal_cache 354KB 394KB sighand_cache 390KB 390KB task_struct 1518KB 1685KB cred_jar 162KB 200KB anon_vma_chain 288KB 318KB anon_vma 356KB 356KB pid 79KB 82KB Acpi-Operand 73KB 130KB Acpi-ParseExt 31KB 31KB Acpi-Parse 23KB 39KB Acpi-State 63KB 82KB Acpi-Namespace 28KB 28KB numa_policy 7KB 7KB perf_event 98KB 190KB trace_event_file 175KB 175KB ftrace_event_field 308KB 308KB pool_workqueue 40KB 40KB maple_node 1711KB 1912KB task_group 16KB 16KB vmap_area 48KB 59KB page->ptl 214KB 259KB kmemleak_scan_area 35KB 35KB kmemleak_object 139912KB 149551KB kmalloc-cg-8k 64KB 64KB kmalloc-cg-4k 2432KB 2496KB kmalloc-cg-2k 1936KB 2048KB kmalloc-cg-1k 480KB 512KB kmalloc-cg-512 275KB 320KB kmalloc-cg-256 49KB 56KB kmalloc-cg-192 44KB 44KB kmalloc-cg-128 36KB 36KB kmalloc-cg-96 42KB 44KB kmalloc-cg-64 36KB 36KB kmalloc-cg-32 47KB 80KB kmalloc-cg-16 8KB 8KB kmalloc-cg-8 15KB 15KB kmalloc-8k 5456KB 5632KB kmalloc-4k 4024KB 4320KB kmalloc-2k 3336KB 3456KB kmalloc-1k 2492KB 3136KB kmalloc-512 2154KB 2592KB kmalloc-256 1081KB 1096KB kmalloc-192 540KB 560KB kmalloc-128 285KB 364KB kmalloc-96 305KB 428KB kmalloc-64 1053KB 1164KB kmalloc-32 460KB 552KB kmalloc-16 325KB 340KB kmalloc-8 270KB 278KB kmem_cache_node 51KB 51KB kmem_cache 78KB 78KB oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz7,mems_allowed=0,global_oom,task_memcg=/syz7,task=syz-executor.7,pid=6356,uid=0 Out of memory (oom_kill_allocating_task): Killed process 6354 (syz-executor.7) total-vm:93412kB, anon-rss:384kB, file-rss:33984kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 netlink: 256 bytes leftover after parsing attributes in process `syz-executor.5'. loop5: detected capacity change from 0 to 40 syz-executor.5: attempt to access beyond end of device loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 Buffer I/O error on dev loop5, logical block 10, lost async page write syz-executor.5: attempt to access beyond end of device loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 Buffer I/O error on dev loop5, logical block 10, lost async page write loop6: detected capacity change from 0 to 40 loop5: detected capacity change from 0 to 40 syz-executor.6: attempt to access beyond end of device loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 Buffer I/O error on dev loop6, logical block 10, lost async page write syz-executor.5: attempt to access beyond end of device loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 Buffer I/O error on dev loop5, logical block 10, lost async page write loop6: detected capacity change from 0 to 40 syz-executor.6: attempt to access beyond end of device loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 Buffer I/O error on dev loop6, logical block 10, lost async page write loop5: detected capacity change from 0 to 40 loop6: detected capacity change from 0 to 40 syz-executor.6: attempt to access beyond end of device loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 Buffer I/O error on dev loop6, logical block 10, lost async page write syz-executor.5: attempt to access beyond end of device loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 Buffer I/O error on dev loop5, logical block 10, lost async page write loop5: detected capacity change from 0 to 40 syz-executor.5: attempt to access beyond end of device loop5: rw=2049, sector=40, nr_sectors = 4 limit=40 Buffer I/O error on dev loop5, logical block 10, lost async page write syz-executor.3 uses obsolete (PF_INET,SOCK_PACKET) EXT4-fs (sda): re-mounted. Quota mode: none. EXT4-fs (sda): re-mounted. Quota mode: none. EXT4-fs (sda): re-mounted. Quota mode: none. EXT4-fs (sda): re-mounted. Quota mode: none. EXT4-fs (sda): re-mounted. Quota mode: none.