WARNING in __might

WARNING in __might_sleep
Status: fixed on 2018/05/08 18:30
Reported-by: syzbot+5716967ee703d0209874@syzkaller.appspotmail.com
Fix commit: 6c1e851c random: fix possible sleeping allocation from irq context
First crash: 367d, last: 363d

similar bugs (2):
Kernel	Title	Repro	Bisected	Count	Last	Reported	Patched	Status
upstream	WARNING in __might_sleep (2)	C		36	89d	116d	12/13	fixed on 2019/03/06 07:43
android-49	WARNING in __might_sleep	syz		11	121d	10d	0/3	public: reported syz repro on 2019/04/14 09:28

Sample crash report:

kernel msg: ebtables bug: please report to author: bad policy
kernel msg: ebtables bug: please report to author: bad policy
IPVS: set_ctl: invalid protocol: 98 0.0.0.6:20000 lc
------------[ cut here ]------------
do not call blocking ops when !TASK_RUNNING; state=2 set at [<        (ptrval)>] prepare_to_wait+0x126/0x4d0 kernel/sched/wait.c:229
WARNING: CPU: 0 PID: 2271 at kernel/sched/core.c:6139 __might_sleep+0x13d/0x190 kernel/sched/core.c:6134
Kernel panic - not syncing: panic_on_warn set ...

CPU: 0 PID: 2271 Comm: jbd2/sda1-8 Not tainted 4.17.0-rc1+ #12
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1b9/0x294 lib/dump_stack.c:113
 panic+0x22f/0x4de kernel/panic.c:184
 __warn.cold.8+0x163/0x1b3 kernel/panic.c:536
 report_bug+0x252/0x2d0 lib/bug.c:186
 fixup_bug arch/x86/kernel/traps.c:178 [inline]
 do_error_trap+0x1de/0x490 arch/x86/kernel/traps.c:296
 do_invalid_op+0x1b/0x20 arch/x86/kernel/traps.c:315
 invalid_op+0x14/0x20 arch/x86/entry/entry_64.S:992
RIP: 0010:__might_sleep+0x13d/0x190 kernel/sched/core.c:6134
RSP: 0000:ffff8801dae07930 EFLAGS: 00010082
RAX: 000000000000006c RBX: ffff8801cc538240 RCX: ffffffff818432e8
RDX: 0000000000010000 RSI: ffffffff8160f4e1 RDI: 0000000000000001
RBP: ffff8801dae07960 R08: ffff8801cc538240 R09: ffffed003b5c3eb2
R10: ffffed003b5c3eb2 R11: ffff8801dae1f597 R12: ffffffff889d450d
R13: 00000000000001a5 R14: 0000000000000000 R15: 00000000014088c0
 slab_pre_alloc_hook mm/slab.h:421 [inline]
 slab_alloc mm/slab.c:3378 [inline]
 __do_kmalloc mm/slab.c:3716 [inline]
 __kmalloc+0x2b9/0x760 mm/slab.c:3727
 kmalloc_array include/linux/slab.h:631 [inline]
 kcalloc include/linux/slab.h:642 [inline]
 numa_crng_init drivers/char/random.c:798 [inline]
 crng_reseed+0x427/0x920 drivers/char/random.c:923
 credit_entropy_bits+0x98d/0xa30 drivers/char/random.c:708
 add_interrupt_randomness+0x494/0x860 drivers/char/random.c:1254
 handle_irq_event_percpu+0xf9/0x1c0 kernel/irq/handle.c:191
 handle_irq_event+0xa7/0x135 kernel/irq/handle.c:206
 handle_edge_irq+0x20f/0x870 kernel/irq/chip.c:791
 generic_handle_irq_desc include/linux/irqdesc.h:159 [inline]
 handle_irq+0x18c/0x2e7 arch/x86/kernel/irq_64.c:77
 do_IRQ+0x78/0x190 arch/x86/kernel/irq.c:245
 common_interrupt+0xf/0xf arch/x86/entry/entry_64.S:642
 </IRQ>
RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:783 [inline]
RIP: 0010:__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:160 [inline]
RIP: 0010:_raw_spin_unlock_irqrestore+0xa1/0xc0 kernel/locking/spinlock.c:184
RSP: 0000:ffff8801cc546b10 EFLAGS: 00000286 ORIG_RAX: ffffffffffffffda
RAX: dffffc0000000000 RBX: 0000000000000286 RCX: 0000000000000000
RDX: 1ffffffff11a312d RSI: 0000000000000001 RDI: 0000000000000286
RBP: ffff8801cc546b20 R08: fffffbfff1181563 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff88c0ab10
R13: ffff8801cc538240 R14: 0000000000000002 R15: ffffffff88c0ab48
 spin_unlock_irqrestore include/linux/spinlock.h:365 [inline]
 prepare_to_wait+0x194/0x4d0 kernel/sched/wait.c:232
 __wait_on_bit+0x58/0x130 kernel/sched/wait_bit.c:46
 out_of_line_wait_on_bit+0x204/0x3a0 kernel/sched/wait_bit.c:63
 wait_on_bit_io include/linux/wait_bit.h:101 [inline]
 __wait_on_buffer+0x76/0x90 fs/buffer.c:118
 wait_on_buffer include/linux/buffer_head.h:356 [inline]
 journal_wait_on_commit_record fs/jbd2/commit.c:174 [inline]
 jbd2_journal_commit_transaction+0x655b/0x8c18 fs/jbd2/commit.c:865
 kjournald2+0x26c/0xb30 fs/jbd2/journal.c:229
 kthread+0x345/0x410 kernel/kthread.c:238
 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:412
Dumping ftrace buffer:
   (ftrace buffer empty)
Kernel Offset: disabled
Rebooting in 86400 seconds..

All crashes (6):
Manager	Time	Kernel	Commit	Syzkaller	Config	Log	Report	Maintainers
ci-upstream-kasan-gce-root	2018/04/22 09:53	upstream	285848b0	d23fcf6c	.config	log	report	arnd@arndb.de, gregkh@linuxfoundation.org, linux-kernel@vger.kernel.org, tytso@mit.edu
ci-upstream-kasan-gce-root	2018/04/26 07:48	upstream	26ed24e4	73417389	.config	log	report	arnd@arndb.de, gregkh@linuxfoundation.org, linux-kernel@vger.kernel.org, tytso@mit.edu
ci-upstream-kasan-gce	2018/04/24 16:11	upstream	6d08b06e	2bf86f40	.config	log	report	arnd@arndb.de, gregkh@linuxfoundation.org, linux-kernel@vger.kernel.org, tytso@mit.edu
ci-upstream-kasan-gce-root	2018/04/24 14:24	upstream	6d08b06e	2bf86f40	.config	log	report	arnd@arndb.de, gregkh@linuxfoundation.org, linux-kernel@vger.kernel.org, tytso@mit.edu
ci-upstream-kasan-gce-root	2018/04/23 04:47	upstream	5ec83b22	d23fcf6c	.config	log	report	arnd@arndb.de, gregkh@linuxfoundation.org, linux-kernel@vger.kernel.org, tytso@mit.edu
ci-upstream-kasan-gce-386	2018/04/25 11:17	upstream	3be4aaf4	73417389	.config	log	report	arnd@arndb.de, gregkh@linuxfoundation.org, linux-kernel@vger.kernel.org, tytso@mit.edu