Warning: Permanently added '10.128.0.232' (ECDSA) to the list of known hosts. executing program [ 48.525573] audit: type=1400 audit(1566528170.862:36): avc: denied { map } for pid=7619 comm="syz-executor778" path="/root/syz-executor778619765" dev="sda1" ino=16484 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 48.566095] [ 48.567733] ======================================================== [ 48.574198] WARNING: possible irq lock inversion dependency detected [ 48.580682] 4.19.67 #41 Not tainted [ 48.584281] -------------------------------------------------------- [ 48.590746] swapper/0/0 just changed the state of lock: [ 48.596084] 0000000018156d6b (&(&ctx->ctx_lock)->rlock){..-.}, at: free_ioctx_users+0x2d/0x490 [ 48.604834] but this lock took another, SOFTIRQ-unsafe lock in the past: [ 48.611652] (&fiq->waitq){+.+.} [ 48.611660] [ 48.611660] [ 48.611660] and interrupts could create inverse lock ordering between them. [ 48.611660] [ 48.626498] [ 48.626498] other info that might help us debug this: [ 48.633140] Possible interrupt unsafe locking scenario: [ 48.633140] [ 48.640072] CPU0 CPU1 [ 48.644717] ---- ---- [ 48.649355] lock(&fiq->waitq); [ 48.652702] local_irq_disable(); [ 48.658730] lock(&(&ctx->ctx_lock)->rlock); [ 48.665730] lock(&fiq->waitq); [ 48.671588] [ 48.674316] lock(&(&ctx->ctx_lock)->rlock); [ 48.678958] [ 48.678958] *** DEADLOCK *** [ 48.678958] [ 48.684994] 2 locks held by swapper/0/0: [ 48.689029] #0: 00000000e2581676 (rcu_callback){....}, at: rcu_process_callbacks+0xc79/0x1a30 [ 48.697809] #1: 00000000f5f3623a (rcu_read_lock_sched){....}, at: percpu_ref_switch_to_atomic_rcu+0x1ca/0x540 [ 48.707957] [ 48.707957] the shortest dependencies between 2nd lock and 1st lock: [ 48.715919] -> (&fiq->waitq){+.+.} ops: 4 { [ 48.720312] HARDIRQ-ON-W at: [ 48.723661] lock_acquire+0x16f/0x3f0 [ 48.729262] _raw_spin_lock+0x2f/0x40 [ 48.734864] flush_bg_queue+0x1f3/0x3d0 [ 48.740639] fuse_request_send_background_locked+0x26d/0x4e0 [ 48.748236] fuse_request_send_background+0x12b/0x180 [ 48.755223] cuse_channel_open+0x5ba/0x830 [ 48.761256] misc_open+0x395/0x4c0 [ 48.766598] chrdev_open+0x245/0x6b0 [ 48.772115] do_dentry_open+0x4c3/0x1210 [ 48.777974] vfs_open+0xa0/0xd0 [ 48.783053] path_openat+0x10d7/0x45e0 [ 48.788739] do_filp_open+0x1a1/0x280 [ 48.794340] do_sys_open+0x3fe/0x550 [ 48.799871] __x64_sys_openat+0x9d/0x100 [ 48.805739] do_syscall_64+0xfd/0x620 [ 48.811339] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 48.818326] SOFTIRQ-ON-W at: [ 48.821668] lock_acquire+0x16f/0x3f0 [ 48.827267] _raw_spin_lock+0x2f/0x40 [ 48.832882] flush_bg_queue+0x1f3/0x3d0 [ 48.838661] fuse_request_send_background_locked+0x26d/0x4e0 [ 48.846258] fuse_request_send_background+0x12b/0x180 [ 48.853257] cuse_channel_open+0x5ba/0x830 [ 48.859290] misc_open+0x395/0x4c0 [ 48.865240] chrdev_open+0x245/0x6b0 [ 48.870759] do_dentry_open+0x4c3/0x1210 [ 48.876633] vfs_open+0xa0/0xd0 [ 48.881711] path_openat+0x10d7/0x45e0 [ 48.887421] do_filp_open+0x1a1/0x280 [ 48.893023] do_sys_open+0x3fe/0x550 [ 48.898536] __x64_sys_openat+0x9d/0x100 [ 48.904397] do_syscall_64+0xfd/0x620 [ 48.909999] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 48.916983] INITIAL USE at: [ 48.920241] lock_acquire+0x16f/0x3f0 [ 48.925753] _raw_spin_lock+0x2f/0x40 [ 48.931269] flush_bg_queue+0x1f3/0x3d0 [ 48.936958] fuse_request_send_background_locked+0x26d/0x4e0 [ 48.944469] fuse_request_send_background+0x12b/0x180 [ 48.951372] cuse_channel_open+0x5ba/0x830 [ 48.957320] misc_open+0x395/0x4c0 [ 48.962571] chrdev_open+0x245/0x6b0 [ 48.967998] do_dentry_open+0x4c3/0x1210 [ 48.973768] vfs_open+0xa0/0xd0 [ 48.978761] path_openat+0x10d7/0x45e0 [ 48.984364] do_filp_open+0x1a1/0x280 [ 48.989880] do_sys_open+0x3fe/0x550 [ 48.995307] __x64_sys_openat+0x9d/0x100 [ 49.001083] do_syscall_64+0xfd/0x620 [ 49.006605] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 49.013514] } [ 49.015385] ... key at: [] __key.42212+0x0/0x40 [ 49.022194] ... acquired at: [ 49.025365] _raw_spin_lock+0x2f/0x40 [ 49.029322] io_submit_one+0xef2/0x2eb0 [ 49.033449] __x64_sys_io_submit+0x1aa/0x520 [ 49.038006] do_syscall_64+0xfd/0x620 [ 49.041957] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 49.047297] [ 49.048899] -> (&(&ctx->ctx_lock)->rlock){..-.} ops: 2 { [ 49.054330] IN-SOFTIRQ-W at: [ 49.057588] lock_acquire+0x16f/0x3f0 [ 49.063013] _raw_spin_lock_irq+0x60/0x80 [ 49.068786] free_ioctx_users+0x2d/0x490 [ 49.074496] percpu_ref_switch_to_atomic_rcu+0x407/0x540 [ 49.081573] rcu_process_callbacks+0xba0/0x1a30 [ 49.087881] __do_softirq+0x25c/0x921 [ 49.093312] irq_exit+0x180/0x1d0 [ 49.098391] smp_apic_timer_interrupt+0x13b/0x550 [ 49.104862] apic_timer_interrupt+0xf/0x20 [ 49.110723] native_safe_halt+0xe/0x10 [ 49.116241] arch_cpu_idle+0xa/0x10 [ 49.121494] default_idle_call+0x36/0x90 [ 49.127191] do_idle+0x377/0x560 [ 49.132207] cpu_startup_entry+0xc8/0xe0 [ 49.137896] rest_init+0x219/0x222 [ 49.143076] start_kernel+0x88c/0x8c5 [ 49.148502] x86_64_start_reservations+0x29/0x2b [ 49.154883] x86_64_start_kernel+0x77/0x7b [ 49.160761] secondary_startup_64+0xa4/0xb0 [ 49.166708] INITIAL USE at: [ 49.169890] lock_acquire+0x16f/0x3f0 [ 49.175227] _raw_spin_lock_irq+0x60/0x80 [ 49.180916] io_submit_one+0xead/0x2eb0 [ 49.186428] __x64_sys_io_submit+0x1aa/0x520 [ 49.192374] do_syscall_64+0xfd/0x620 [ 49.197713] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 49.204443] } [ 49.206225] ... key at: [] __key.50212+0x0/0x40 [ 49.212948] ... acquired at: [ 49.216031] mark_lock+0x420/0x1370 [ 49.219808] __lock_acquire+0xc62/0x49c0 [ 49.224015] lock_acquire+0x16f/0x3f0 [ 49.227965] _raw_spin_lock_irq+0x60/0x80 [ 49.232263] free_ioctx_users+0x2d/0x490 [ 49.236479] percpu_ref_switch_to_atomic_rcu+0x407/0x540 [ 49.242079] rcu_process_callbacks+0xba0/0x1a30 [ 49.246896] __do_softirq+0x25c/0x921 [ 49.250850] irq_exit+0x180/0x1d0 [ 49.254452] smp_apic_timer_interrupt+0x13b/0x550 [ 49.259442] apic_timer_interrupt+0xf/0x20 [ 49.263842] native_safe_halt+0xe/0x10 [ 49.267881] arch_cpu_idle+0xa/0x10 [ 49.271657] default_idle_call+0x36/0x90 [ 49.275866] do_idle+0x377/0x560 [ 49.279381] cpu_startup_entry+0xc8/0xe0 [ 49.283589] rest_init+0x219/0x222 [ 49.287283] start_kernel+0x88c/0x8c5 [ 49.291240] x86_64_start_reservations+0x29/0x2b [ 49.296144] x86_64_start_kernel+0x77/0x7b [ 49.300530] secondary_startup_64+0xa4/0xb0 [ 49.304995] [ 49.306598] [ 49.306598] stack backtrace: [ 49.311076] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 4.19.67 #41 [ 49.317281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 49.326608] Call Trace: [ 49.329165] [ 49.331295] dump_stack+0x172/0x1f0 [ 49.334903] print_irq_inversion_bug.part.0+0x2c0/0x2cd [ 49.340245] check_usage_forwards.cold+0x20/0x29 [ 49.344979] ? check_usage_backwards+0x340/0x340 [ 49.349716] ? save_stack_trace+0x1a/0x20 [ 49.353845] ? save_trace+0xe0/0x290 [ 49.357536] mark_lock+0x420/0x1370 [ 49.361146] ? check_usage_backwards+0x340/0x340 [ 49.365882] __lock_acquire+0xc62/0x49c0 [ 49.369918] ? mark_held_locks+0x100/0x100 [ 49.374130] ? mark_held_locks+0x100/0x100 [ 49.378344] ? __wake_up_common_lock+0xfe/0x190 [ 49.382992] ? mark_held_locks+0x100/0x100 [ 49.387215] ? __wake_up_common_lock+0xfe/0x190 [ 49.391879] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 49.396963] ? lockdep_hardirqs_on+0x19b/0x5d0 [ 49.401522] ? trace_hardirqs_on+0x67/0x220 [ 49.405847] ? kasan_check_read+0x11/0x20 [ 49.409974] lock_acquire+0x16f/0x3f0 [ 49.413755] ? free_ioctx_users+0x2d/0x490 [ 49.417968] _raw_spin_lock_irq+0x60/0x80 [ 49.422093] ? free_ioctx_users+0x2d/0x490 [ 49.426308] free_ioctx_users+0x2d/0x490 [ 49.430354] ? rcu_dynticks_curr_cpu_in_eqs+0x51/0xb0 [ 49.435527] percpu_ref_switch_to_atomic_rcu+0x407/0x540 [ 49.440964] ? percpu_ref_exit+0xd0/0xd0 [ 49.445001] rcu_process_callbacks+0xba0/0x1a30 [ 49.449649] ? __rcu_read_unlock+0x170/0x170 [ 49.454040] __do_softirq+0x25c/0x921 [ 49.457817] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 49.463333] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 49.468852] irq_exit+0x180/0x1d0 [ 49.472281] smp_apic_timer_interrupt+0x13b/0x550 [ 49.477100] apic_timer_interrupt+0xf/0x20 [ 49.481310] [ 49.483530] RIP: 0010:native_safe_halt+0xe/0x10 [ 49.488192] Code: ff ff 48 89 df e8 c2 47 ae fa eb 82 e9 07 00 00 00 0f 00 2d 84 2e 54 00 f4 c3 66 90 e9 07 00 00 00 0f 00 2d 74 2e 54 00 fb f4 90 55 48 89 e5 41 57 41 56 41 55 41 54 53 e8 7e 2b 66 fa e8 99 [ 49.507084] RSP: 0018:ffffffff88607ca8 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff13 [ 49.514773] RAX: 1ffffffff10e489c RBX: ffffffff88679ec0 RCX: 0000000000000000 [ 49.522022] RDX: dffffc0000000000 RSI: 0000000000000001 RDI: ffffffff8867a73c [ 49.529287] RBP: ffffffff88607cd8 R08: ffffffff88679ec0 R09: 0000000000000000 [ 49.536547] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 49.543798] R13: ffffffff887244d0 R14: 0000000000000000 R15: 0000000000000000 [ 49.551058] ? default_idle+0x4e/0x320 [ 49.554923] arch_cpu_idle+0xa/0x10 [ 49.558528] default_idle_call+0x36/0x90 [ 49.562564] do_idle+0x377/0x560 [ 49.565911] ? arch_cpu_idle_exit+0x80/0x80 [ 49.570210] cpu_startup_entry+0xc8/0xe0 [ 49.574259] ? cpu_in_idle+0x20/0x20 [ 49.577952] rest_init+