syzbot

 sign-in | mailing list | source | docs
🐞 Open [994] ≡ Subsystems 🐞 Fixed [5242] 🐞 Invalid [12515] ⬇ Missing Backports [83] 📈 Kernel Health 📈 Bug Lifetimes 📈 Fuzzing 📈 Crashes 💬 Send us feedback

BUG: sleeping function called from invalid context at mm/slab.h:LINE (3)

Status: closed as dup on 2018/02/12 16:15
Subsystems: kernel
[Documentation on labels]
Reported-by: syzbot+f8af40b8331eed0c4ada@syzkaller.appspotmail.com
First crash: 2266d, last: 2180d
▶ ▼ Duplicate of
Title Repro Cause bisect Fix bisect Count Last Reported
WARNING: suspicious RCU usage in rds_loop_conn_alloc rds C 34303 2257d 2265d
▶ ▼ Discussions (1)
Title Replies (including bot) Last reply
BUG: sleeping function called from invalid context at mm/slab.h:LINE (3) 1 (2) 2018/02/12 16:14
▶ ▼ Similar bugs (4)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream BUG: sleeping function called from invalid context at mm/slab.h:LINE (2) bpf 2 2285d 2285d 4/26 fixed on 2018/02/01 04:00
upstream BUG: sleeping function called from invalid context at mm/slab.h:LINE (4) crypto C 36 1957d 2118d 11/26 fixed on 2019/01/11 01:22
upstream BUG: sleeping function called from invalid context at mm/slab.h:LINE C 8 2446d 2450d 2/26 fixed on 2017/09/06 01:15
android-49 BUG: sleeping function called from invalid context at mm/slab.h:LINE C 3 2454d 2467d 1/3 fixed on 2017/10/23 20:15

Sample crash report:
random: sshd: uninitialized urandom read (32 bytes read)
random: sshd: uninitialized urandom read (32 bytes read)
random: sshd: uninitialized urandom read (32 bytes read)
random: sshd: uninitialized urandom read (32 bytes read)
BUG: sleeping function called from invalid context at mm/slab.h:421
in_atomic(): 1, irqs_disabled(): 1, pid: 2271, name: jbd2/sda1-8
no locks held by jbd2/sda1-8/2271.
irq event stamp: 50522
hardirqs last  enabled at (50521): [<ffffffff876ecf67>] __raw_spin_unlock_irq include/linux/spinlock_api_smp.h:168 [inline]
hardirqs last  enabled at (50521): [<ffffffff876ecf67>] _raw_spin_unlock_irq+0x27/0x70 kernel/locking/spinlock.c:192
hardirqs last disabled at (50522): [<ffffffff87800905>] interrupt_entry+0xb5/0xf0 arch/x86/entry/entry_64.S:625
softirqs last  enabled at (49832): [<ffffffff87a00778>] __do_softirq+0x778/0xaf5 kernel/softirq.c:311
softirqs last disabled at (49825): [<ffffffff81475041>] invoke_softirq kernel/softirq.c:365 [inline]
softirqs last disabled at (49825): [<ffffffff81475041>] irq_exit+0x1d1/0x200 kernel/softirq.c:405
CPU: 0 PID: 2271 Comm: jbd2/sda1-8 Not tainted 4.17.0-rc2+ #18
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1b9/0x294 lib/dump_stack.c:113
 ___might_sleep.cold.87+0x11f/0x13a kernel/sched/core.c:6188
 __might_sleep+0x95/0x190 kernel/sched/core.c:6141
 slab_pre_alloc_hook mm/slab.h:421 [inline]
 slab_alloc mm/slab.c:3378 [inline]
 __do_kmalloc mm/slab.c:3716 [inline]
 __kmalloc+0x2b9/0x760 mm/slab.c:3727
 kmalloc_array include/linux/slab.h:631 [inline]
 kcalloc include/linux/slab.h:642 [inline]
 numa_crng_init drivers/char/random.c:798 [inline]
 crng_reseed+0x427/0x920 drivers/char/random.c:923
 credit_entropy_bits+0x98d/0xa30 drivers/char/random.c:708
 add_interrupt_randomness+0x494/0x860 drivers/char/random.c:1254
 handle_irq_event_percpu+0xf9/0x1c0 kernel/irq/handle.c:191
 handle_irq_event+0xa7/0x135 kernel/irq/handle.c:206
 handle_edge_irq+0x20f/0x870 kernel/irq/chip.c:791
 generic_handle_irq_desc include/linux/irqdesc.h:159 [inline]
 handle_irq+0x18c/0x2e7 arch/x86/kernel/irq_64.c:77
 do_IRQ+0x78/0x190 arch/x86/kernel/irq.c:245
 common_interrupt+0xf/0xf arch/x86/entry/entry_64.S:642
 </IRQ>
RIP: 0010:arch_local_irq_enable arch/x86/include/asm/paravirt.h:793 [inline]
RIP: 0010:__raw_spin_unlock_irq include/linux/spinlock_api_smp.h:168 [inline]
RIP: 0010:_raw_spin_unlock_irq+0x56/0x70 kernel/locking/spinlock.c:192
RSP: 0018:ffff8801cc5562a0 EFLAGS: 00000282 ORIG_RAX: ffffffffffffffda
RAX: dffffc0000000000 RBX: ffff8801dae2c580 RCX: 0000000000000000
RDX: 1ffffffff11a315f RSI: 0000000000000001 RDI: ffffffff88d18af8
RBP: ffff8801cc5562a8 R08: ffffed003b5c58b1 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: ffff8801cc54c240
R13: ffff8801d9a88180 R14: ffff8801b09cf2c0 R15: ffff8801cc54c240
 finish_lock_switch kernel/sched/core.c:2603 [inline]
 finish_task_switch+0x1ca/0x810 kernel/sched/core.c:2701
 context_switch kernel/sched/core.c:2851 [inline]
 __schedule+0x809/0x1e30 kernel/sched/core.c:3490
 schedule+0xef/0x430 kernel/sched/core.c:3549
 io_schedule+0x1c/0x70 kernel/sched/core.c:5169
 wait_on_page_bit_common mm/filemap.c:1100 [inline]
 __lock_page+0x587/0x750 mm/filemap.c:1273
 lock_page include/linux/pagemap.h:483 [inline]
 write_cache_pages+0xabc/0x1690 mm/page-writeback.c:2207
 generic_writepages+0xcc/0x120 mm/page-writeback.c:2326
 journal_submit_inode_data_buffers fs/jbd2/commit.c:199 [inline]
 journal_submit_data_buffers fs/jbd2/commit.c:232 [inline]
 jbd2_journal_commit_transaction+0x163a/0x8c18 fs/jbd2/commit.c:526
can: request_module (can-proto-0) failed.
can: request_module (can-proto-0) failed.
 kjournald2+0x26c/0xb30 fs/jbd2/journal.c:229
 kthread+0x345/0x410 kernel/kthread.c:238
 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:412
random: crng init done
IPVS: ftp: loaded support on port[0] = 21
IPVS: ftp: loaded support on port[0] = 21
IPVS: ftp: loaded support on port[0] = 21
IPVS: ftp: loaded support on port[0] = 21
IPVS: ftp: loaded support on port[0] = 21
IPVS: ftp: loaded support on port[0] = 21
IPVS: ftp: loaded support on port[0] = 21
IPVS: ftp: loaded support on port[0] = 21
bridge0: port 1(bridge_slave_0) entered blocking state
bridge0: port 1(bridge_slave_0) entered disabled state
device bridge_slave_0 entered promiscuous mode
bridge0: port 1(bridge_slave_0) entered blocking state
bridge0: port 1(bridge_slave_0) entered disabled state
device bridge_slave_0 entered promiscuous mode
bridge0: port 1(bridge_slave_0) entered blocking state
bridge0: port 1(bridge_slave_0) entered disabled state
device bridge_slave_0 entered promiscuous mode
bridge0: port 1(bridge_slave_0) entered blocking state
bridge0: port 1(bridge_slave_0) entered disabled state
device bridge_slave_0 entered promiscuous mode
bridge0: port 1(bridge_slave_0) entered blocking state
bridge0: port 1(bridge_slave_0) entered disabled state
device bridge_slave_0 entered promiscuous mode
bridge0: port 2(bridge_slave_1) entered blocking state
bridge0: port 2(bridge_slave_1) entered disabled state
device bridge_slave_1 entered promiscuous mode
bridge0: port 1(bridge_slave_0) entered blocking state
bridge0: port 1(bridge_slave_0) entered disabled state
device bridge_slave_0 entered promiscuous mode
bridge0: port 1(bridge_slave_0) entered blocking state
bridge0: port 1(bridge_slave_0) entered disabled state
device bridge_slave_0 entered promiscuous mode
bridge0: port 2(bridge_slave_1) entered blocking state
bridge0: port 2(bridge_slave_1) entered disabled state
device bridge_slave_1 entered promiscuous mode
bridge0: port 2(bridge_slave_1) entered blocking state
bridge0: port 2(bridge_slave_1) entered disabled state
device bridge_slave_1 entered promiscuous mode
bridge0: port 2(bridge_slave_1) entered blocking state
bridge0: port 2(bridge_slave_1) entered disabled state
device bridge_slave_1 entered promiscuous mode
bridge0: port 2(bridge_slave_1) entered blocking state
bridge0: port 2(bridge_slave_1) entered disabled state
device bridge_slave_1 entered promiscuous mode
bridge0: port 2(bridge_slave_1) entered blocking state
bridge0: port 2(bridge_slave_1) entered disabled state
device bridge_slave_1 entered promiscuous mode
IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
bridge0: port 2(bridge_slave_1) entered blocking state
bridge0: port 2(bridge_slave_1) entered disabled state
device bridge_slave_1 entered promiscuous mode
bridge0: port 1(bridge_slave_0) entered blocking state
bridge0: port 1(bridge_slave_0) entered disabled state
device bridge_slave_0 entered promiscuous mode
IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready

Crashes (339):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/04/26 23:28 upstream 69bfd470f462 73417389 .config console log report ci-upstream-kasan-gce-root
2018/04/26 04:39 upstream 26ed24e429d8 73417389 .config console log report ci-upstream-kasan-gce
2018/02/12 11:17 upstream 7928b2cbe55b 88bc17df .config console log report ci-upstream-kasan-gce
2018/02/19 11:12 upstream 0e06fb5b9ac8 833f78c7 .config console log report ci-upstream-kasan-gce-386
2018/05/08 04:41 bpf-next e94fa1d93117 045bbd4a .config console log report ci-upstream-bpf-next-kasan-gce
2018/05/08 01:09 bpf-next e94fa1d93117 9e0846e8 .config console log report ci-upstream-bpf-next-kasan-gce
2018/05/07 23:48 bpf-next e94fa1d93117 9e0846e8 .config console log report ci-upstream-bpf-next-kasan-gce
2018/05/07 21:37 bpf-next e94fa1d93117 9e0846e8 .config console log report ci-upstream-bpf-next-kasan-gce
2018/05/07 20:35 bpf-next e94fa1d93117 9e0846e8 .config console log report ci-upstream-bpf-next-kasan-gce
2018/05/07 18:00 bpf-next e94fa1d93117 9e0846e8 .config console log report ci-upstream-bpf-next-kasan-gce
2018/05/07 16:10 bpf-next e94fa1d93117 a211da1a .config console log report ci-upstream-bpf-next-kasan-gce
2018/05/07 14:23 bpf-next e94fa1d93117 a211da1a .config console log report ci-upstream-bpf-next-kasan-gce
2018/05/07 10:02 bpf-next e94fa1d93117 a211da1a .config console log report ci-upstream-bpf-next-kasan-gce
2018/05/07 09:01 bpf-next e94fa1d93117 a211da1a .config console log report ci-upstream-bpf-next-kasan-gce
2018/05/07 07:49 bpf-next e94fa1d93117 a211da1a .config console log report ci-upstream-bpf-next-kasan-gce
2018/05/07 06:05 bpf-next e94fa1d93117 a211da1a .config console log report ci-upstream-bpf-next-kasan-gce
2018/05/06 23:31 bpf-next e94fa1d93117 a211da1a .config console log report ci-upstream-bpf-next-kasan-gce
2018/05/06 20:59 bpf-next e94fa1d93117 6c18ddb0 .config console log report ci-upstream-bpf-next-kasan-gce
2018/05/06 19:34 bpf-next e94fa1d93117 6c18ddb0 .config console log report ci-upstream-bpf-next-kasan-gce
2018/05/06 16:56 bpf-next e94fa1d93117 6c18ddb0 .config console log report ci-upstream-bpf-next-kasan-gce
2018/05/06 15:41 bpf-next e94fa1d93117 6c18ddb0 .config console log report ci-upstream-bpf-next-kasan-gce
2018/05/06 12:25 bpf-next e94fa1d93117 6c18ddb0 .config console log report ci-upstream-bpf-next-kasan-gce
2018/05/06 10:55 bpf-next e94fa1d93117 6c18ddb0 .config console log report ci-upstream-bpf-next-kasan-gce
2018/05/06 08:09 bpf-next e94fa1d93117 78b251cb .config console log report ci-upstream-bpf-next-kasan-gce
2018/05/06 06:49 bpf-next e94fa1d93117 78b251cb .config console log report ci-upstream-bpf-next-kasan-gce
2018/05/06 02:38 bpf-next e94fa1d93117 78b251cb .config console log report ci-upstream-bpf-next-kasan-gce
2018/05/06 01:02 bpf-next e94fa1d93117 78b251cb .config console log report ci-upstream-bpf-next-kasan-gce
2018/05/05 22:26 bpf-next e94fa1d93117 78b251cb .config console log report ci-upstream-bpf-next-kasan-gce
2018/05/05 19:40 bpf-next e94fa1d93117 6a0382b5 .config console log report ci-upstream-bpf-next-kasan-gce
2018/05/05 17:09 bpf-next e94fa1d93117 6a0382b5 .config console log report ci-upstream-bpf-next-kasan-gce
2018/05/05 16:01 bpf-next e94fa1d93117 6a0382b5 .config console log report ci-upstream-bpf-next-kasan-gce
2018/05/05 12:31 bpf-next e94fa1d93117 6a0382b5 .config console log report ci-upstream-bpf-next-kasan-gce
2018/05/05 04:54 bpf-next e94fa1d93117 9ce14f4b .config console log report ci-upstream-bpf-next-kasan-gce
2018/05/05 03:43 bpf-next e94fa1d93117 9ce14f4b .config console log report ci-upstream-bpf-next-kasan-gce
2018/05/05 02:39 bpf-next e94fa1d93117 9ce14f4b .config console log report ci-upstream-bpf-next-kasan-gce
2018/05/05 01:17 bpf-next e94fa1d93117 9ce14f4b .config console log report ci-upstream-bpf-next-kasan-gce
2018/05/04 22:37 bpf-next e94fa1d93117 9ce14f4b .config console log report ci-upstream-bpf-next-kasan-gce
2018/05/04 20:59 bpf-next 5234ccf2be0e 9ce14f4b .config console log report ci-upstream-bpf-next-kasan-gce
2018/05/04 18:05 bpf-next 5234ccf2be0e 9ce14f4b .config console log report ci-upstream-bpf-next-kasan-gce
2018/05/04 12:03 bpf-next 5234ccf2be0e 9ce14f4b .config console log report ci-upstream-bpf-next-kasan-gce
2018/05/04 10:56 bpf-next 5234ccf2be0e 9ce14f4b .config console log report ci-upstream-bpf-next-kasan-gce
2018/05/04 09:25 bpf-next 5234ccf2be0e 9ce14f4b .config console log report ci-upstream-bpf-next-kasan-gce
2018/05/04 07:43 bpf-next 03f5781be2c7 9ce14f4b .config console log report ci-upstream-bpf-next-kasan-gce
2018/05/04 06:07 bpf-next 03f5781be2c7 9ce14f4b .config console log report ci-upstream-bpf-next-kasan-gce
2018/05/01 20:22 net-next-old 90d52d4fd820 d5b114b4 .config console log report ci-upstream-net-kasan-gce
2018/02/10 21:35 net-next-old 9a61df9e5f74 e67d44e0 .config console log report ci-upstream-net-kasan-gce
* Struck through repros no longer work on HEAD.