syzbot

 sign-in | mailing list | source | docs
🐞 Open [73] 🐞 Fixed [70] 🐞 Invalid [133] 📈 Kernel Health 📈 Bug Lifetimes 📈 Fuzzing 📈 Crashes 💬 Send us feedback

BUG: scheduling while atomic in f2fs_register_inmem_page

Status: closed as invalid on 2023/05/12 10:22
Reported-by: syzbot+1797812e4d8839a03370@syzkaller.appspotmail.com
First crash: 406d, last: 406d
Cause bisection: failed (error log, bisect log)
  
Fix bisection the fix commit could be any of (bisect log):
  416c4356f372 Merge 5.10.161 into android12-5.10-lts
  90eb02302b5e Revert "HID: core: Provide new max_buffer_size attribute to over-ride the default"
   
▶ ▼ Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
android-54 BUG: scheduling while atomic in f2fs_register_inmem_page 1 383d 383d 0/2 closed as invalid on 2023/05/12 10:24
android-5-15 BUG: scheduling while atomic in f2fs_register_inmem_page origin:lts C error done 4 151d 406d 0/2 auto-obsoleted due to no activity on 2024/03/04 10:27
▶ ▼ Last patch testing requests (1)
Created Duration User Patch Repo Result
2023/05/11 09:00 8m tudor.ambarus@linaro.org https://android.googlesource.com/kernel/common 416c4356f37295d6da2d7b290069f9adb349dc9f report log

Sample crash report:
BUG: scheduling while atomic: syz-executor370/465/0x00000002
Modules linked in:
Preemption disabled at:
[<ffffffff819bc8c4>] spin_lock include/linux/spinlock.h:354 [inline]
[<ffffffff819bc8c4>] zap_pte_range mm/memory.c:1284 [inline]
[<ffffffff819bc8c4>] zap_pmd_range mm/memory.c:1444 [inline]
[<ffffffff819bc8c4>] zap_pud_range mm/memory.c:1473 [inline]
[<ffffffff819bc8c4>] zap_p4d_range mm/memory.c:1494 [inline]
[<ffffffff819bc8c4>] unmap_page_range+0xad4/0x2070 mm/memory.c:1516
CPU: 0 PID: 465 Comm: syz-executor370 Not tainted 5.10.161-syzkaller-00019-g416c4356f372 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack_lvl+0x1e2/0x24b lib/dump_stack.c:118
 dump_stack+0x15/0x17 lib/dump_stack.c:135
 __schedule_bug+0x1b1/0x2b0 kernel/sched/core.c:4535
 schedule_debug+0x97/0x180 kernel/sched/core.c:4562
 __schedule+0x106/0xc00 kernel/sched/core.c:4690
 schedule+0x14b/0x1e0 kernel/sched/core.c:4874
 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:4933
 __mutex_lock_common kernel/locking/mutex.c:1057 [inline]
 __mutex_lock+0x8c2/0x1340 kernel/locking/mutex.c:1122
 __mutex_lock_slowpath+0xe/0x10 kernel/locking/mutex.c:1385
 mutex_lock+0x134/0x1e0 kernel/locking/mutex.c:301
 f2fs_register_inmem_page+0x22a/0x480 fs/f2fs/segment.c:199
 f2fs_set_data_page_dirty+0x5d0/0x750 fs/f2fs/data.c:3805
 set_page_dirty+0x1c6/0x350 mm/page-writeback.c:2586
 zap_pte_range mm/memory.c:1319 [inline]
 zap_pmd_range mm/memory.c:1444 [inline]
 zap_pud_range mm/memory.c:1473 [inline]
 zap_p4d_range mm/memory.c:1494 [inline]
 unmap_page_range+0xffa/0x2070 mm/memory.c:1516
 unmap_single_vma mm/memory.c:1562 [inline]
 unmap_vmas+0x3d4/0x5b0 mm/memory.c:1594
 exit_mmap+0x2f9/0x5c0 mm/mmap.c:3341
 __mmput+0x95/0x2c0 kernel/fork.c:1133
 mmput+0x4b/0x50 kernel/fork.c:1154
 exit_mm+0x5cd/0x790 kernel/exit.c:489
 do_exit+0x5f2/0x2340 kernel/exit.c:800
 do_group_exit+0x13a/0x300 kernel/exit.c:910
 get_signal+0xe17/0x1440 kernel/signal.c:2780
 arch_do_signal+0x8e/0x650 arch/x86/kernel/signal.c:805
 exit_to_user_mode_loop+0xa3/0xe0 kernel/entry/common.c:161
 exit_to_user_mode_prepare kernel/entry/common.c:191 [inline]
 syscall_exit_to_user_mode+0x77/0xa0 kernel/entry/common.c:266
 do_syscall_64+0x40/0x70 arch/x86/entry/common.c:56
 entry_SYSCALL_64_after_hwframe+0x61/0xc6
RIP: 0033:0x7f86813636c9
Code: Unable to access opcode bytes at RIP 0x7f868136369f.
RSP: 002b:00007f868130f308 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
RAX: 0000000001179000 RBX: 00007f86813f07e8 RCX: 00007f86813636c9
RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004
RBP: 00007f86813f07e0 R08: 0000000000000000 R09: 0000000000000000
R10: 0001000000201005 R11: 0000000000000246 R12: 00007f86813f07ec
R13: 00007f86813bcf28 R14: 0032656c69662f2e R15: 0000000000022000
check_preemption_disabled: 4 callbacks suppressed
BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor370/465
caller is __this_cpu_preempt_check+0x13/0x20 lib/smp_processor_id.c:65
CPU: 0 PID: 465 Comm: syz-executor370 Tainted: G        W         5.10.161-syzkaller-00019-g416c4356f372 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack_lvl+0x1e2/0x24b lib/dump_stack.c:118
 dump_stack+0x15/0x17 lib/dump_stack.c:135
 check_preemption_disabled+0xf7/0x100 lib/smp_processor_id.c:48
 __this_cpu_preempt_check+0x13/0x20 lib/smp_processor_id.c:65
 __mod_node_page_state+0x6d/0xf0 mm/vmstat.c:349
 __mod_lruvec_state+0x48/0x70 mm/memcontrol.c:855
 __mod_lruvec_page_state include/linux/memcontrol.h:873 [inline]
 page_remove_file_rmap+0x65c/0x960 mm/rmap.c:1322
 page_remove_rmap+0x158/0x6d0 mm/rmap.c:1395
 zap_pte_range mm/memory.c:1326 [inline]
 zap_pmd_range mm/memory.c:1444 [inline]
 zap_pud_range mm/memory.c:1473 [inline]
 zap_p4d_range mm/memory.c:1494 [inline]
 unmap_page_range+0x119b/0x2070 mm/memory.c:1516
 unmap_single_vma mm/memory.c:1562 [inline]
 unmap_vmas+0x3d4/0x5b0 mm/memory.c:1594
 exit_mmap+0x2f9/0x5c0 mm/mmap.c:3341
 __mmput+0x95/0x2c0 kernel/fork.c:1133
 mmput+0x4b/0x50 kernel/fork.c:1154
 exit_mm+0x5cd/0x790 kernel/exit.c:489
 do_exit+0x5f2/0x2340 kernel/exit.c:800
 do_group_exit+0x13a/0x300 kernel/exit.c:910
 get_signal+0xe17/0x1440 kernel/signal.c:2780
 arch_do_signal+0x8e/0x650 arch/x86/kernel/signal.c:805
 exit_to_user_mode_loop+0xa3/0xe0 kernel/entry/common.c:161
 exit_to_user_mode_prepare kernel/entry/common.c:191 [inline]
 syscall_exit_to_user_mode+0x77/0xa0 kernel/entry/common.c:266
 do_syscall_64+0x40/0x70 arch/x86/entry/common.c:56
 entry_SYSCALL_64_after_hwframe+0x61/0xc6
RIP: 0033:0x7f86813636c9
Code: Unable to access opcode bytes at RIP 0x7f868136369f.
RSP: 002b:00007f868130f308 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
RAX: 0000000001179000 RBX: 00007f86813f07e8 RCX: 00007f86813636c9
RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004
RBP: 00007f86813f07e0 R08: 0000000000000000 R09: 0000000000000000
R10: 0001000000201005 R11: 0000000000000246 R12: 00007f86813f07ec
R13: 00007f86813bcf28 R14: 0032656c69662f2e R15: 0000000000022000
BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor370/465
caller is __this_cpu_preempt_check+0x13/0x20 lib/smp_processor_id.c:65
CPU: 0 PID: 465 Comm: syz-executor370 Tainted: G        W         5.10.161-syzkaller-00019-g416c4356f372 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack_lvl+0x1e2/0x24b lib/dump_stack.c:118
 dump_stack+0x15/0x17 lib/dump_stack.c:135
 check_preemption_disabled+0xf7/0x100 lib/smp_processor_id.c:48
 __this_cpu_preempt_check+0x13/0x20 lib/smp_processor_id.c:65
 __mod_node_page_state+0x89/0xf0 mm/vmstat.c:351
 __mod_lruvec_state+0x48/0x70 mm/memcontrol.c:855
 __mod_lruvec_page_state include/linux/memcontrol.h:873 [inline]
 page_remove_file_rmap+0x65c/0x960 mm/rmap.c:1322
 page_remove_rmap+0x158/0x6d0 mm/rmap.c:1395
 zap_pte_range mm/memory.c:1326 [inline]
 zap_pmd_range mm/memory.c:1444 [inline]
 zap_pud_range mm/memory.c:1473 [inline]
 zap_p4d_range mm/memory.c:1494 [inline]
 unmap_page_range+0x119b/0x2070 mm/memory.c:1516
 unmap_single_vma mm/memory.c:1562 [inline]
 unmap_vmas+0x3d4/0x5b0 mm/memory.c:1594
 exit_mmap+0x2f9/0x5c0 mm/mmap.c:3341
 __mmput+0x95/0x2c0 kernel/fork.c:1133
 mmput+0x4b/0x50 kernel/fork.c:1154
 exit_mm+0x5cd/0x790 kernel/exit.c:489
 do_exit+0x5f2/0x2340 kernel/exit.c:800
 do_group_exit+0x13a/0x300 kernel/exit.c:910
 get_signal+0xe17/0x1440 kernel/signal.c:2780
 arch_do_signal+0x8e/0x650 arch/x86/kernel/signal.c:805
 exit_to_user_mode_loop+0xa3/0xe0 kernel/entry/common.c:161
 exit_to_user_mode_prepare kernel/entry/common.c:191 [inline]
 syscall_exit_to_user_mode+0x77/0xa0 kernel/entry/common.c:266
 do_syscall_64+0x40/0x70 arch/x86/entry/common.c:56
 entry_SYSCALL_64_after_hwframe+0x61/0xc6
RIP: 0033:0x7f86813636c9
Code: Unable to access opcode bytes at RIP 0x7f868136369f.
RSP: 002b:00007f868130f308 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
RAX: 0000000001179000 RBX: 00007f86813f07e8 RCX: 00007f86813636c9
RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004
RBP: 00007f86813f07e0 R08: 0000000000000000 R09: 0000000000000000
R10: 0001000000201005 R11: 0000000000000246 R12: 00007f86813f07ec
R13: 00007f86813bcf28 R14: 0032656c69662f2e R15: 0000000000022000
BUG: using __this_cpu_write() in preemptible [00000000] code: syz-executor370/465
caller is __this_cpu_preempt_check+0x13/0x20 lib/smp_processor_id.c:65
CPU: 0 PID: 465 Comm: syz-executor370 Tainted: G        W         5.10.161-syzkaller-00019-g416c4356f372 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack_lvl+0x1e2/0x24b lib/dump_stack.c:118
 dump_stack+0x15/0x17 lib/dump_stack.c:135
 check_preemption_disabled+0xf7/0x100 lib/smp_processor_id.c:48
 __this_cpu_preempt_check+0x13/0x20 lib/smp_processor_id.c:65
 __mod_node_page_state+0xac/0xf0 mm/vmstat.c:357
 __mod_lruvec_state+0x48/0x70 mm/memcontrol.c:855
 __mod_lruvec_page_state include/linux/memcontrol.h:873 [inline]
 page_remove_file_rmap+0x65c/0x960 mm/rmap.c:1322
 page_remove_rmap+0x158/0x6d0 mm/rmap.c:1395
 zap_pte_range mm/memory.c:1326 [inline]
 zap_pmd_range mm/memory.c:1444 [inline]
 zap_pud_range mm/memory.c:1473 [inline]
 zap_p4d_range mm/memory.c:1494 [inline]
 unmap_page_range+0x119b/0x2070 mm/memory.c:1516
 unmap_single_vma mm/memory.c:1562 [inline]
 unmap_vmas+0x3d4/0x5b0 mm/memory.c:1594
 exit_mmap+0x2f9/0x5c0 mm/mmap.c:3341
 __mmput+0x95/0x2c0 kernel/fork.c:1133
 mmput+0x4b/0x50 kernel/fork.c:1154
 exit_mm+0x5cd/0x790 kernel/exit.c:489
 do_exit+0x5f2/0x2340 kernel/exit.c:800
 do_group_exit+0x13a/0x300 kernel/exit.c:910
 get_signal+0xe17/0x1440 kernel/signal.c:2780
 arch_do_signal+0x8e/0x650 arch/x86/kernel/signal.c:805
 exit_to_user_mode_loop+0xa3/0xe0 kernel/entry/common.c:161
 exit_to_user_mode_prepare kernel/entry/common.c:191 [inline]
 syscall_exit_to_user_mode+0x77/0xa0 kernel/entry/common.c:266
 do_syscall_64+0x40/0x70 arch/x86/entry/common.c:56
 entry_SYSCALL_64_after_hwframe+0x61/0xc6
RIP: 0033:0x7f86813636c9
Code: Unable to access opcode bytes at RIP 0x7f868136369f.
RSP: 002b:00007f868130f308 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
RAX: 0000000001179000 RBX: 00007f86813f07e8 RCX: 00007f86813636c9
RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004
RBP: 00007f86813f07e0 R08: 0000000000000000 R09: 0000000000000000
R10: 0001000000201005 R11: 0000000000000246 R12: 00007f86813f07ec
R13: 00007f86813bcf28 R14: 0032656c69662f2e R15: 0000000000022000
BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor370/465
caller is __this_cpu_preempt_check+0x13/0x20 lib/smp_processor_id.c:65
CPU: 0 PID: 465 Comm: syz-executor370 Tainted: G        W         5.10.161-syzkaller-00019-g416c4356f372 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack_lvl+0x1e2/0x24b lib/dump_stack.c:118
 dump_stack+0x15/0x17 lib/dump_stack.c:135
 check_preemption_disabled+0xf7/0x100 lib/smp_processor_id.c:48
 __this_cpu_preempt_check+0x13/0x20 lib/smp_processor_id.c:65
 __mod_memcg_state+0x51/0x230 mm/memcontrol.c:783
 __mod_memcg_lruvec_state+0x50/0x310 mm/memcontrol.c:821
 __mod_lruvec_state+0x5b/0x70 mm/memcontrol.c:859
 __mod_lruvec_page_state include/linux/memcontrol.h:873 [inline]
 page_remove_file_rmap+0x65c/0x960 mm/rmap.c:1322
 page_remove_rmap+0x158/0x6d0 mm/rmap.c:1395
 zap_pte_range mm/memory.c:1326 [inline]
 zap_pmd_range mm/memory.c:1444 [inline]
 zap_pud_range mm/memory.c:1473 [inline]
 zap_p4d_range mm/memory.c:1494 [inline]
 unmap_page_range+0x119b/0x2070 mm/memory.c:1516
 unmap_single_vma mm/memory.c:1562 [inline]
 unmap_vmas+0x3d4/0x5b0 mm/memory.c:1594
 exit_mmap+0x2f9/0x5c0 mm/mmap.c:3341
 __mmput+0x95/0x2c0 kernel/fork.c:1133
 mmput+0x4b/0x50 kernel/fork.c:1154
 exit_mm+0x5cd/0x790 kernel/exit.c:489
 do_exit+0x5f2/0x2340 kernel/exit.c:800
 do_group_exit+0x13a/0x300 kernel/exit.c:910
 get_signal+0xe17/0x1440 kernel/signal.c:2780
 arch_do_signal+0x8e/0x650 arch/x86/kernel/signal.c:805
 exit_to_user_mode_loop+0xa3/0xe0 kernel/entry/common.c:161
 exit_to_user_mode_prepare kernel/entry/common.c:191 [inline]
 syscall_exit_to_user_mode+0x77/0xa0 kernel/entry/common.c:266
 do_syscall_64+0x40/0x70 arch/x86/entry/common.c:56
 entry_SYSCALL_64_after_hwframe+0x61/0xc6
RIP: 0033:0x7f86813636c9
Code: Unable to access opcode bytes at RIP 0x7f868136369f.
RSP: 002b:00007f868130f308 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
RAX: 0000000001179000 RBX: 00007f86813f07e8 RCX: 00007f86813636c9
RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004
RBP: 00007f86813f07e0 R08: 0000000000000000 R09: 0000000000000000
R10: 0001000000201005 R11: 0000000000000246 R12: 00007f86813f07ec
R13: 00007f86813bcf28 R14: 0032656c69662f2e R15: 0000000000022000
BUG: using __this_cpu_write() in preemptible [00000000] code: syz-executor370/465
caller is __this_cpu_preempt_check+0x13/0x20 lib/smp_processor_id.c:65
CPU: 0 PID: 465 Comm: syz-executor370 Tainted: G        W         5.10.161-syzkaller-00019-g416c4356f372 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack_lvl+0x1e2/0x24b lib/dump_stack.c:118
 dump_stack+0x15/0x17 lib/dump_stack.c:135
 check_preemption_disabled+0xf7/0x100 lib/smp_processor_id.c:48
 __this_cpu_preempt_check+0x13/0x20 lib/smp_processor_id.c:65
 __mod_memcg_state+0xb4/0x230 mm/memcontrol.c:796
 __mod_memcg_lruvec_state+0x50/0x310 mm/memcontrol.c:821
 __mod_lruvec_state+0x5b/0x70 mm/memcontrol.c:859
 __mod_lruvec_page_state include/linux/memcontrol.h:873 [inline]
 page_remove_file_rmap+0x65c/0x960 mm/rmap.c:1322
 page_remove_rmap+0x158/0x6d0 mm/rmap.c:1395
 zap_pte_range mm/memory.c:1326 [inline]
 zap_pmd_range mm/memory.c:1444 [inline]
 zap_pud_range mm/memory.c:1473 [inline]
 zap_p4d_range mm/memory.c:1494 [inline]
 unmap_page_range+0x119b/0x2070 mm/memory.c:1516
 unmap_single_vma mm/memory.c:1562 [inline]
 unmap_vmas+0x3d4/0x5b0 mm/memory.c:1594
 exit_mmap+0x2f9/0x5c0 mm/mmap.c:3341
 __mmput+0x95/0x2c0 kernel/fork.c:1133
 mmput+0x4b/0x50 kernel/fork.c:1154
 exit_mm+0x5cd/0x790 kernel/exit.c:489
 do_exit+0x5f2/0x2340 kernel/exit.c:800
 do_group_exit+0x13a/0x300 kernel/exit.c:910
 get_signal+0xe17/0x1440 kernel/signal.c:2780
 arch_do_signal+0x8e/0x650 arch/x86/kernel/signal.c:805
 exit_to_user_mode_loop+0xa3/0xe0 kernel/entry/common.c:161
 exit_to_user_mode_prepare kernel/entry/common.c:191 [inline]
 syscall_exit_to_user_mode+0x77/0xa0 kernel/entry/common.c:266
 do_syscall_64+0x40/0x70 arch/x86/entry/common.c:56
 entry_SYSCALL_64_after_hwframe+0x61/0xc6
RIP: 0033:0x7f86813636c9
Code: Unable to access opcode bytes at RIP 0x7f868136369f.
RSP: 002b:00007f868130f308 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
RAX: 0000000001179000 RBX: 00007f86813f07e8 RCX: 00007f86813636c9
RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004
RBP: 00007f86813f07e0 R08: 0000000000000000 R09: 0000000000000000
R10: 0001000000201005 R11: 0000000000000246 R12: 00007f86813f07ec
R13: 00007f86813bcf28 R14: 0032656c69662f2e R15: 0000000000022000
BUG: using __this_cpu_add() in preemptible [00000000] code: syz-executor370/465
caller is __this_cpu_preempt_check+0x13/0x20 lib/smp_processor_id.c:65
CPU: 0 PID: 465 Comm: syz-executor370 Tainted: G        W         5.10.161-syzkaller-00019-g416c4356f372 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack_lvl+0x1e2/0x24b lib/dump_stack.c:118
 dump_stack+0x15/0x17 lib/dump_stack.c:135
 check_preemption_disabled+0xf7/0x100 lib/smp_processor_id.c:48
 __this_cpu_preempt_check+0x13/0x20 lib/smp_processor_id.c:65
 __mod_memcg_lruvec_state+0x5c/0x310 mm/memcontrol.c:824
 __mod_lruvec_state+0x5b/0x70 mm/memcontrol.c:859
 __mod_lruvec_page_state include/linux/memcontrol.h:873 [inline]
 page_remove_file_rmap+0x65c/0x960 mm/rmap.c:1322
 page_remove_rmap+0x158/0x6d0 mm/rmap.c:1395
 zap_pte_range mm/memory.c:1326 [inline]
 zap_pmd_range mm/memory.c:1444 [inline]
 zap_pud_range mm/memory.c:1473 [inline]
 zap_p4d_range mm/memory.c:1494 [inline]
 unmap_page_range+0x119b/0x2070 mm/memory.c:1516
 unmap_single_vma mm/memory.c:1562 [inline]
 unmap_vmas+0x3d4/0x5b0 mm/memory.c:1594
 exit_mmap+0x2f9/0x5c0 mm/mmap.c:3341
 __mmput+0x95/0x2c0 kernel/fork.c:1133
 mmput+0x4b/0x50 kernel/fork.c:1154
 exit_mm+0x5cd/0x790 kernel/exit.c:489
 do_exit+0x5f2/0x2340 kernel/exit.c:800
 do_group_exit+0x13a/0x300 kernel/exit.c:910
 get_signal+0xe17/0x1440 kernel/signal.c:2780
 arch_do_signal+0x8e/0x650 arch/x86/kernel/signal.c:805
 exit_to_user_mode_loop+0xa3/0xe0 kernel/entry/common.c:161
 exit_to_user_mode_prepare kernel/entry/common.c:191 [inline]
 syscall_exit_to_user_mode+0x77/0xa0 kernel/entry/common.c:266
 do_syscall_64+0x40/0x70 arch/x86/entry/common.c:56
 entry_SYSCALL_64_after_hwframe+0x61/0xc6
RIP: 0033:0x7f86813636c9
Code: Unable to access opcode bytes at RIP 0x7f868136369f.
RSP: 002b:00007f868130f308 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
RAX: 0000000001179000 RBX: 00007f86813f07e8 RCX: 00007f86813636c9
RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004
RBP: 00007f86813f07e0 R08: 0000000000000000 R09: 0000000000000000
R10: 0001000000201005 R11: 0000000000000246 R12: 00007f86813f07ec
R13: 00007f86813bcf28 R14: 0032656c69662f2e R15: 0000000000022000
BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor370/465
caller is __this_cpu_preempt_check+0x13/0x20 lib/smp_processor_id.c:65
CPU: 0 PID: 465 Comm: syz-executor370 Tainted: G        W         5.10.161-syzkaller-00019-g416c4356f372 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack_lvl+0x1e2/0x24b lib/dump_stack.c:118
 dump_stack+0x15/0x17 lib/dump_stack.c:135
 check_preemption_disabled+0xf7/0x100 lib/smp_processor_id.c:48
 __this_cpu_preempt_check+0x13/0x20 lib/smp_processor_id.c:65
 __mod_memcg_lruvec_state+0xbf/0x310 mm/memcontrol.c:829
 __mod_lruvec_state+0x5b/0x70 mm/memcontrol.c:859
 __mod_lruvec_page_state include/linux/memcontrol.h:873 [inline]
 page_remove_file_rmap+0x65c/0x960 mm/rmap.c:1322
 page_remove_rmap+0x158/0x6d0 mm/rmap.c:1395
 zap_pte_range mm/memory.c:1326 [inline]
 zap_pmd_range mm/memory.c:1444 [inline]
 zap_pud_range mm/memory.c:1473 [inline]
 zap_p4d_range mm/memory.c:1494 [inline]
 unmap_page_range+0x119b/0x2070 mm/memory.c:1516
 unmap_single_vma mm/memory.c:1562 [inline]
 unmap_vmas+0x3d4/0x5b0 mm/memory.c:1594
 exit_mmap+0x2f9/0x5c0 mm/mmap.c:3341
 __mmput+0x95/0x2c0 kernel/fork.c:1133
 mmput+0x4b/0x50 kernel/fork.c:1154
 exit_mm+0x5cd/0x790 kernel/exit.c:489
 do_exit+0x5f2/0x2340 kernel/exit.c:800
 do_group_exit+0x13a/0x300 kernel/exit.c:910
 get_signal+0xe17/0x1440 kernel/signal.c:2780
 arch_do_signal+0x8e/0x650 arch/x86/kernel/signal.c:805
 exit_to_user_mode_loop+0xa3/0xe0 kernel/entry/common.c:161
 exit_to_user_mode_prepare kernel/entry/common.c:191 [inline]
 syscall_exit_to_user_mode+0x77/0xa0 kernel/entry/common.c:266
 do_syscall_64+0x40/0x70 arch/x86/entry/common.c:56
 entry_SYSCALL_64_after_hwframe+0x61/0xc6
RIP: 0033:0x7f86813636c9
Code: Unable to access opcode bytes at RIP 0x7f868136369f.
RSP: 002b:00007f868130f308 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
RAX: 0000000001179000 RBX: 00007f86813f07e8 RCX: 00007f86813636c9
RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004
RBP: 00007f86813f07e0 R08: 0000000000000000 R09: 0000000000000000
R10: 0001000000201005 R11: 0000000000000246 R12: 00007f86813f07ec
R13: 00007f86813bcf28 R14: 0032656c69662f2e R15: 0000000000022000
BUG: using __this_cpu_write() in preemptible [00000000] code: syz-executor370/465
caller is __this_cpu_preempt_check+0x13/0x20 lib/smp_processor_id.c:65
CPU: 0 PID: 465 Comm: syz-executor370 Tainted: G        W         5.10.161-syzkaller-00019-g416c4356f372 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack_lvl+0x1e2/0x24b lib/dump_stack.c:118
 dump_stack+0x15/0x17 lib/dump_stack.c:135
 check_preemption_disabled+0xf7/0x100 lib/smp_processor_id.c:48
 __this_cpu_preempt_check+0x13/0x20 lib/smp_processor_id.c:65
 __mod_memcg_lruvec_state+0x136/0x310 mm/memcontrol.c:838
 __mod_lruvec_state+0x5b/0x70 mm/memcontrol.c:859
 __mod_lruvec_page_state include/linux/memcontrol.h:873 [inline]
 page_remove_file_rmap+0x65c/0x960 mm/rmap.c:1322
 page_remove_rmap+0x158/0x6d0 mm/rmap.c:1395
 zap_pte_range mm/memory.c:1326 [inline]
 zap_pmd_range mm/memory.c:1444 [inline]
 zap_pud_range mm/memory.c:1473 [inline]
 zap_p4d_range mm/memory.c:1494 [inline]
 unmap_page_range+0x119b/0x2070 mm/memory.c:1516
 unmap_single_vma mm/memory.c:1562 [inline]
 unmap_vmas+0x3d4/0x5b0 mm/memory.c:1594
 exit_mmap+0x2f9/0x5c0 mm/mmap.c:3341
 __mmput+0x95/0x2c0 kernel/fork.c:1133
 mmput+0x4b/0x50 kernel/fork.c:1154
 exit_mm+0x5cd/0x790 kernel/exit.c:489
 do_exit+0x5f2/0x2340 kernel/exit.c:800
 do_group_exit+0x13a/0x300 kernel/exit.c:910
 get_signal+0xe17/0x1440 kernel/signal.c:2780
 arch_do_signal+0x8e/0x650 arch/x86/kernel/signal.c:805
 exit_to_user_mode_loop+0xa3/0xe0 kernel/entry/common.c:161
 exit_to_user_mode_prepare kernel/entry/common.c:191 [inline]
 syscall_exit_to_user_mode+0x77/0xa0 kernel/entry/common.c:266
 do_syscall_64+0x40/0x70 arch/x86/entry/common.c:56
 entry_SYSCALL_64_after_hwframe+0x61/0xc6
RIP: 0033:0x7f86813636c9
Code: Unable to access opcode bytes at RIP 0x7f868136369f.
RSP: 002b:00007f868130f308 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
RAX: 0000000001179000 RBX: 00007f86813f07e8 RCX: 00007f86813636c9
RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004
RBP: 00007f86813f07e0 R08: 0000000000000000 R09: 0000000000000000
R10: 0001000000201005 R11: 0000000000000246 R12: 00007f86813f07ec
R13: 00007f86813bcf28 R14: 0032656c69662f2e R15: 0000000000022000
------------[ cut here ]------------
DEBUG_LOCKS_WARN_ON(val > preempt_count())
WARNING: CPU: 1 PID: 465 at kernel/sched/core.c:4477 preempt_count_sub+0xa8/0x160 kernel/sched/core.c:4477
Modules linked in:
CPU: 1 PID: 465 Comm: syz-executor370 Tainted: G        W         5.10.161-syzkaller-00019-g416c4356f372 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023
RIP: 0010:preempt_count_sub+0xa8/0x160 kernel/sched/core.c:4477
Code: 42 8a 04 30 84 c0 0f 85 89 00 00 00 83 3d 37 e6 54 05 00 75 d2 48 c7 c7 20 5d e9 84 48 c7 c6 c0 5d e9 84 31 c0 e8 58 f3 f4 ff <0f> 0b eb b9 e8 7f 2a 00 01 85 c0 74 b0 48 c7 c0 38 2b 9f 86 48 c1
RSP: 0018:ffffc90000df7528 EFLAGS: 00010246
RAX: 4430a681aca5f100 RBX: 0000000000000001 RCX: ffff88810c658000
RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
RBP: ffffc90000df7538 R08: ffffffff81540db8 R09: ffffed103ee24e93
R10: ffffed103ee24e93 R11: 1ffff1103ee24e92 R12: 1ffff920001bef20
R13: dffffc0000000000 R14: dffffc0000000000 R15: ffffc90000df78e0
FS:  0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f8681310000 CR3: 000000011e6ea000 CR4: 00000000003506b0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 __raw_spin_unlock include/linux/spinlock_api_smp.h:152 [inline]
 _raw_spin_unlock+0x4d/0x70 kernel/locking/spinlock.c:183
 spin_unlock include/linux/spinlock.h:394 [inline]
 zap_pte_range mm/memory.c:1385 [inline]
 zap_pmd_range mm/memory.c:1444 [inline]
 zap_pud_range mm/memory.c:1473 [inline]
 zap_p4d_range mm/memory.c:1494 [inline]
 unmap_page_range+0x1dd8/0x2070 mm/memory.c:1516
 unmap_single_vma mm/memory.c:1562 [inline]
 unmap_vmas+0x3d4/0x5b0 mm/memory.c:1594
 exit_mmap+0x2f9/0x5c0 mm/mmap.c:3341
 __mmput+0x95/0x2c0 kernel/fork.c:1133
 mmput+0x4b/0x50 kernel/fork.c:1154
 exit_mm+0x5cd/0x790 kernel/exit.c:489
 do_exit+0x5f2/0x2340 kernel/exit.c:800
 do_group_exit+0x13a/0x300 kernel/exit.c:910
 get_signal+0xe17/0x1440 kernel/signal.c:2780
 arch_do_signal+0x8e/0x650 arch/x86/kernel/signal.c:805
 exit_to_user_mode_loop+0xa3/0xe0 kernel/entry/common.c:161
 exit_to_user_mode_prepare kernel/entry/common.c:191 [inline]
 syscall_exit_to_user_mode+0x77/0xa0 kernel/entry/common.c:266
 do_syscall_64+0x40/0x70 arch/x86/entry/common.c:56
 entry_SYSCALL_64_after_hwframe+0x61/0xc6
RIP: 0033:0x7f86813636c9
Code: Unable to access opcode bytes at RIP 0x7f868136369f.
RSP: 002b:00007f868130f308 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
RAX: 0000000001179000 RBX: 00007f86813f07e8 RCX: 00007f86813636c9
RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004
RBP: 00007f86813f07e0 R08: 0000000000000000 R09: 0000000000000000
R10: 0001000000201005 R11: 0000000000000246 R12: 00007f86813f07ec
R13: 00007f86813bcf28 R14: 0032656c69662f2e R15: 0000000000022000
---[ end trace 76762afaf09b868f ]---

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2023/03/16 04:26 android12-5.10-lts 416c4356f372 18b58603 .config strace log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-android-5-10 BUG: scheduling while atomic in f2fs_register_inmem_page
* Struck through repros no longer work on HEAD.