------------[ cut here ]------------
WARNING: CPU: 1 PID: 30766 at kernel/fork.c:2093 copy_process+0xd83/0x6d60
Modules linked in:
CPU: 1 PID: 30766 Comm: syz-executor.2 Not tainted 5.19.0-rc5-next-20220706 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
RIP: 0010:copy_process+0xd83/0x6d60
Code: ff 89 de e8 8f 80 30 00 85 db 75 20 e8 b6 83 30 00 65 8b 1d 6b 00 ee 7e 31 ff 89 de e8 76 80 30 00 85 db 75 07 e8 9d 83 30 00 <0f> 0b e8 96 83 30 00 48 c7 c0 c0 d6 de 86 48 ba 00 00 00 00 00 fc
RSP: 0018:ffff88804c9e7b60 EFLAGS: 00010093
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
RDX: ffff88803c653580 RSI: ffffffff81147563 RDI: 0000000000000005
RBP: ffff88804c9e7d00 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000001 R12: ffff888063f5b580
R13: 00007fd5a3ded9d0 R14: 00000000003d0f00 R15: ffff88804c9e7e48
FS: 0000555556105400(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f09266ab004 CR3: 000000005303a000 CR4: 0000000000350ee0
Call Trace:
kernel_clone+0xe7/0xa60
__do_sys_clone+0xba/0x100
do_syscall_64+0x3b/0x90
entry_SYSCALL_64_after_hwframe+0x46/0xb0
RIP: 0033:0x7fd5a6899f41
Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00
RSP: 002b:00007ffd638181f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
RAX: ffffffffffffffda RBX: 00007fd5a3ded700 RCX: 00007fd5a6899f41
RDX: 00007fd5a3ded9d0 RSI: 00007fd5a3ded2f0 RDI: 00000000003d0f00
RBP: 00007ffd63818430 R08: 00007fd5a3ded700 R09: 00007fd5a3ded700
R10: 00007fd5a3ded9d0 R11: 0000000000000206 R12: 00007ffd638182ae
R13: 00007ffd638182af R14: 00007fd5a3ded300 R15: 0000555556106d50
irq event stamp: 10434
hardirqs last enabled at (10433): [] mod_objcg_state+0x3ab/0x9e0
hardirqs last disabled at (10434): [] get_page_from_freelist+0x1734/0x2cf0
softirqs last enabled at (10364): [] fpu_clone+0x3be/0xb00
softirqs last disabled at (10362): [] fpu_clone+0x331/0xb00
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
WARNING: CPU: 1 PID: 30766 at kernel/softirq.c:376 __local_bh_enable_ip+0xba/0x120
Modules linked in:
CPU: 1 PID: 30766 Comm: syz-executor.2 Tainted: G W 5.19.0-rc5-next-20220706 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
RIP: 0010:__local_bh_enable_ip+0xba/0x120
Code: 45 bf 01 00 00 00 e8 e5 03 09 00 e8 30 38 35 00 fb 65 8b 05 58 e0 eb 7e 85 c0 74 58 5b 5d c3 65 8b 05 86 e7 eb 7e 85 c0 75 a2 <0f> 0b eb 9e e8 0d 37 35 00 eb 9f 48 89 ef e8 23 15 13 00 eb a8 0f
RSP: 0018:ffff88804c9e7a98 EFLAGS: 00010046
RAX: 0000000000000000 RBX: 0000000000000200 RCX: 1ffffffff0b1d66d
RDX: 0000000000000000 RSI: 0000000000000200 RDI: ffffffff8109ab9e
RBP: ffffffff8109ab9e R08: 0000000000000007 R09: 0000000000000000
R10: 0000000000010000 R11: 0000000000000001 R12: ffff888063f5cba0
R13: ffff888063f5b580 R14: ffff888063f5cb80 R15: ffff888063f5cbb0
FS: 0000555556105400(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f09266ab004 CR3: 000000005303a000 CR4: 0000000000350ee0
Call Trace:
fpu_clone+0x3d4/0xb00
copy_thread+0x390/0xa00
copy_process+0x3892/0x6d60
kernel_clone+0xe7/0xa60
__do_sys_clone+0xba/0x100
do_syscall_64+0x3b/0x90
entry_SYSCALL_64_after_hwframe+0x46/0xb0
RIP: 0033:0x7fd5a6899f41
Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00
RSP: 002b:00007ffd638181f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
RAX: ffffffffffffffda RBX: 00007fd5a3ded700 RCX: 00007fd5a6899f41
RDX: 00007fd5a3ded9d0 RSI: 00007fd5a3ded2f0 RDI: 00000000003d0f00
RBP: 00007ffd63818430 R08: 00007fd5a3ded700 R09: 00007fd5a3ded700
R10: 00007fd5a3ded9d0 R11: 0000000000000206 R12: 00007ffd638182ae
R13: 00007ffd638182af R14: 00007fd5a3ded300 R15: 0000555556106d50
irq event stamp: 10435
hardirqs last enabled at (10433): [] mod_objcg_state+0x3ab/0x9e0
hardirqs last disabled at (10434): [] get_page_from_freelist+0x1734/0x2cf0
softirqs last enabled at (10364): [] fpu_clone+0x3be/0xb00
softirqs last disabled at (10435): [] fpu_clone+0x331/0xb00
---[ end trace 0000000000000000 ]---
================================
WARNING: inconsistent lock state
5.19.0-rc5-next-20220706 #1 Tainted: G W
--------------------------------
inconsistent {IN-SOFTIRQ-W} -> {SOFTIRQ-ON-W} usage.
syz-executor.2/30766 [HC0[0]:SC0[0]:HE0:SE1] takes:
ffff88806cf345c0 (lock#2){+.?.}-{2:2}, at: get_page_from_freelist+0x457/0x2cf0
{IN-SOFTIRQ-W} state was registered at:
lock_acquire+0x1a2/0x530
free_unref_page+0x1f3/0x6f0
bio_free_pages+0x10a/0x220
bio_copy_kern_endio_read+0x62/0x340
bio_endio+0x58e/0x710
blk_update_request+0x394/0x1180
scsi_end_request+0x7a/0x9a0
scsi_io_completion+0xbc/0x1d20
scsi_complete+0x114/0x560
blk_complete_reqs+0xb2/0xf0
__do_softirq+0x1c8/0x8cc
run_ksoftirqd+0x2d/0x60
smpboot_thread_fn+0x66f/0xa00
kthread+0x2ed/0x3a0
ret_from_fork+0x22/0x30
irq event stamp: 10436
hardirqs last enabled at (10433): [] mod_objcg_state+0x3ab/0x9e0
hardirqs last disabled at (10434): [] get_page_from_freelist+0x1734/0x2cf0
softirqs last enabled at (10436): [] fpu_clone+0x3be/0xb00
softirqs last disabled at (10435): [] fpu_clone+0x331/0xb00
other info that might help us debug this:
Possible unsafe locking scenario:
CPU0
----
lock(lock#2);
lock(lock#2);
*** DEADLOCK ***
1 lock held by syz-executor.2/30766:
#0: ffff88806cf345c0 (lock#2){+.?.}-{2:2}, at: get_page_from_freelist+0x457/0x2cf0
stack backtrace:
CPU: 1 PID: 30766 Comm: syz-executor.2 Tainted: G W 5.19.0-rc5-next-20220706 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
Call Trace:
dump_stack_lvl+0x8b/0xb3
mark_lock.part.0.cold+0x3f/0x151
mark_held_locks+0x9e/0xe0
lockdep_hardirqs_on_prepare+0x28b/0x400
trace_hardirqs_on+0x2d/0x110
__local_bh_enable_ip+0xa0/0x120
fpu_clone+0x3d4/0xb00
copy_thread+0x390/0xa00
copy_process+0x3892/0x6d60
kernel_clone+0xe7/0xa60
__do_sys_clone+0xba/0x100
do_syscall_64+0x3b/0x90
entry_SYSCALL_64_after_hwframe+0x46/0xb0
RIP: 0033:0x7fd5a6899f41
Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00
RSP: 002b:00007ffd638181f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
RAX: ffffffffffffffda RBX: 00007fd5a3ded700 RCX: 00007fd5a6899f41
RDX: 00007fd5a3ded9d0 RSI: 00007fd5a3ded2f0 RDI: 00000000003d0f00
RBP: 00007ffd63818430 R08: 00007fd5a3ded700 R09: 00007fd5a3ded700
R10: 00007fd5a3ded9d0 R11: 0000000000000206 R12: 00007ffd638182ae
R13: 00007ffd638182af R14: 00007fd5a3ded300 R15: 0000555556106d50
cgroup: fork rejected by pids controller in /syz4
cgroup: fork rejected by pids controller in /syz0
BUG: sleeping function called from invalid context at include/linux/sched/mm.h:274
in_atomic(): 0, irqs_disabled(): 1, non_block: 0, pid: 31223, name: syz-executor.4
preempt_count: 0, expected: 0
RCU nest depth: 0, expected: 0
INFO: lockdep is turned off.
irq event stamp: 0
hardirqs last enabled at (0): [<0000000000000000>] 0x0
hardirqs last disabled at (0): [] copy_process+0x1db6/0x6d60
softirqs last enabled at (0): [] copy_process+0x1dfa/0x6d60
softirqs last disabled at (0): [<0000000000000000>] 0x0
CPU: 1 PID: 31223 Comm: syz-executor.4 Tainted: G W 5.19.0-rc5-next-20220706 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
Call Trace:
dump_stack_lvl+0x8b/0xb3
__might_resched.cold+0x222/0x26b
kmem_cache_alloc+0x35c/0x490
ptlock_alloc+0x1d/0x70
pte_alloc_one+0x68/0x1f0
__pte_alloc+0x69/0x200
copy_page_range+0x1b95/0x4080
dup_mmap+0x9d9/0xf40
dup_mm+0x91/0x370
copy_process+0x6941/0x6d60
kernel_clone+0xe7/0xa60
__do_sys_fork+0x7c/0xb0
do_syscall_64+0x3b/0x90
entry_SYSCALL_64_after_hwframe+0x46/0xb0
RIP: 0033:0x7f0926193b19
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f0923709188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039
RAX: ffffffffffffffda RBX: 00007f09262a6f60 RCX: 00007f0926193b19
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 00007f09261edf6d R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffe4da9404f R14: 00007f0923709300 R15: 0000000000022000