===================================================== WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected 6.9.0-rc3-next-20240412-syzkaller #0 Not tainted ----------------------------------------------------- udevd/5344 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: ffffffff8e43c560 (mmu_notifier_invalidate_range_start){+.+.}-{0:0}, at: fs_reclaim_acquire+0x93/0x140 mm/page_alloc.c:3842 and this task is already holding: ffff88801a6b9c18 (&pool->lock#5){..-.}-{2:2}, at: mempool_alloc_noprof+0x286/0x5a0 mm/mempool.c:406 which would create a new lock dependency: (&pool->lock#5){..-.}-{2:2} -> (mmu_notifier_invalidate_range_start){+.+.}-{0:0} but this new dependency connects a SOFTIRQ-irq-safe lock: (&pool->lock#5){..-.}-{2:2} ... which became SOFTIRQ-irq-safe at: lock_acquire+0x1ed/0x550 kernel/locking/lockdep.c:5754 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline] _raw_spin_lock_irqsave+0xd5/0x120 kernel/locking/spinlock.c:162 mempool_free+0x115/0x390 mm/mempool.c:539 req_bio_endio block/blk-mq.c:787 [inline] blk_update_request+0x545/0x1020 block/blk-mq.c:932 scsi_end_request+0x80/0x880 drivers/scsi/scsi_lib.c:631 scsi_io_completion+0x1bd/0x430 drivers/scsi/scsi_lib.c:1068 blk_complete_reqs block/blk-mq.c:1130 [inline] blk_done_softirq+0x100/0x150 block/blk-mq.c:1135 __do_softirq+0x2c6/0x980 kernel/softirq.c:554 invoke_softirq kernel/softirq.c:428 [inline] __irq_exit_rcu+0xf2/0x1c0 kernel/softirq.c:633 irq_exit_rcu+0x9/0x30 kernel/softirq.c:645 common_interrupt+0xaa/0xd0 arch/x86/kernel/irq.c:247 asm_common_interrupt+0x26/0x40 arch/x86/include/asm/idtentry.h:693 __find_get_block+0x52d/0x10d0 fs/buffer.c:1399 bdev_getblk+0x38/0x610 fs/buffer.c:1423 __bread_gfp+0xac/0x430 fs/buffer.c:1474 sb_bread_unmovable include/linux/buffer_head.h:327 [inline] ntfs_bread fs/ntfs3/fsntfs.c:1025 [inline] ntfs_read_run_nb+0x59d/0xf70 fs/ntfs3/fsntfs.c:1245 ntfs_read_bh+0x40/0x780 fs/ntfs3/fsntfs.c:1313 indx_read+0x2ea/0xc50 fs/ntfs3/index.c:1067 indx_find+0x47a/0xbf0 fs/ntfs3/index.c:1181 dir_search_u+0x1b7/0x3a0 fs/ntfs3/dir.c:254 ntfs_lookup+0x106/0x1f0 fs/ntfs3/namei.c:85 lookup_one_qstr_excl+0x11f/0x260 fs/namei.c:1607 filename_create+0x297/0x540 fs/namei.c:3893 do_mkdirat+0xbd/0x3a0 fs/namei.c:4138 __do_sys_mkdirat fs/namei.c:4161 [inline] __se_sys_mkdirat fs/namei.c:4159 [inline] __x64_sys_mkdirat+0x89/0xa0 fs/namei.c:4159 do_syscall_x64 arch/x86/entry/common.c:74 [inline] do_syscall_64+0xfa/0x250 arch/x86/entry/common.c:105 entry_SYSCALL_64_after_hwframe+0x77/0x7f to a SOFTIRQ-irq-unsafe lock: (mmu_notifier_invalidate_range_start){+.+.}-{0:0} ... which became SOFTIRQ-irq-unsafe at: ... lock_acquire+0x1ed/0x550 kernel/locking/lockdep.c:5754 fs_reclaim_acquire+0xaf/0x140 mm/page_alloc.c:3842 might_alloc include/linux/sched/mm.h:334 [inline] slab_pre_alloc_hook mm/slub.c:3847 [inline] slab_alloc_node mm/slub.c:3937 [inline] kmalloc_trace_noprof+0x3d/0x2b0 mm/slub.c:4104 kmalloc_noprof include/linux/slab.h:660 [inline] kzalloc_noprof include/linux/slab.h:775 [inline] __kthread_create_worker+0x5c/0x3e0 kernel/kthread.c:865 kthread_create_worker+0xda/0x120 kernel/kthread.c:908 wq_cpu_intensive_thresh_init+0x18/0x160 kernel/workqueue.c:7762 workqueue_init+0x26/0x8c0 kernel/workqueue.c:7811 kernel_init_freeable+0x3fe/0x5d0 init/main.c:1558 kernel_init+0x1d/0x2b0 init/main.c:1463 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 other info that might help us debug this: Possible interrupt unsafe locking scenario: CPU0 CPU1 ---- ---- lock(mmu_notifier_invalidate_range_start); local_irq_disable(); lock(&pool->lock#5); lock(mmu_notifier_invalidate_range_start); lock(&pool->lock#5); *** DEADLOCK *** 3 locks held by udevd/5344: #0: ffff8880247ea3a0 (mapping.invalidate_lock){++++}-{3:3}, at: filemap_invalidate_lock_shared include/linux/fs.h:846 [inline] #0: ffff8880247ea3a0 (mapping.invalidate_lock){++++}-{3:3}, at: page_cache_ra_unbounded+0xf7/0x7f0 mm/readahead.c:225 #1: ffffffff8e3340e0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:329 [inline] #1: ffffffff8e3340e0 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:841 [inline] #1: ffffffff8e3340e0 (rcu_read_lock){....}-{1:2}, at: blk_mq_run_hw_queue+0x40c/0xae0 block/blk-mq.c:2279 #2: ffff88801a6b9c18 (&pool->lock#5){..-.}-{2:2}, at: mempool_alloc_noprof+0x286/0x5a0 mm/mempool.c:406 the dependencies between SOFTIRQ-irq-safe lock and the holding lock: -> (&pool->lock#5){..-.}-{2:2} { IN-SOFTIRQ-W at: lock_acquire+0x1ed/0x550 kernel/locking/lockdep.c:5754 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline] _raw_spin_lock_irqsave+0xd5/0x120 kernel/locking/spinlock.c:162 mempool_free+0x115/0x390 mm/mempool.c:539 req_bio_endio block/blk-mq.c:787 [inline] blk_update_request+0x545/0x1020 block/blk-mq.c:932 scsi_end_request+0x80/0x880 drivers/scsi/scsi_lib.c:631 scsi_io_completion+0x1bd/0x430 drivers/scsi/scsi_lib.c:1068 blk_complete_reqs block/blk-mq.c:1130 [inline] blk_done_softirq+0x100/0x150 block/blk-mq.c:1135 __do_softirq+0x2c6/0x980 kernel/softirq.c:554 invoke_softirq kernel/softirq.c:428 [inline] __irq_exit_rcu+0xf2/0x1c0 kernel/softirq.c:633 irq_exit_rcu+0x9/0x30 kernel/softirq.c:645 common_interrupt+0xaa/0xd0 arch/x86/kernel/irq.c:247 asm_common_interrupt+0x26/0x40 arch/x86/include/asm/idtentry.h:693 __find_get_block+0x52d/0x10d0 fs/buffer.c:1399 bdev_getblk+0x38/0x610 fs/buffer.c:1423 __bread_gfp+0xac/0x430 fs/buffer.c:1474 sb_bread_unmovable include/linux/buffer_head.h:327 [inline] ntfs_bread fs/ntfs3/fsntfs.c:1025 [inline] ntfs_read_run_nb+0x59d/0xf70 fs/ntfs3/fsntfs.c:1245 ntfs_read_bh+0x40/0x780 fs/ntfs3/fsntfs.c:1313 indx_read+0x2ea/0xc50 fs/ntfs3/index.c:1067 indx_find+0x47a/0xbf0 fs/ntfs3/index.c:1181 dir_search_u+0x1b7/0x3a0 fs/ntfs3/dir.c:254 ntfs_lookup+0x106/0x1f0 fs/ntfs3/namei.c:85 lookup_one_qstr_excl+0x11f/0x260 fs/namei.c:1607 filename_create+0x297/0x540 fs/namei.c:3893 do_mkdirat+0xbd/0x3a0 fs/namei.c:4138 __do_sys_mkdirat fs/namei.c:4161 [inline] __se_sys_mkdirat fs/namei.c:4159 [inline] __x64_sys_mkdirat+0x89/0xa0 fs/namei.c:4159 do_syscall_x64 arch/x86/entry/common.c:74 [inline] do_syscall_64+0xfa/0x250 arch/x86/entry/common.c:105 entry_SYSCALL_64_after_hwframe+0x77/0x7f INITIAL USE at: lock_acquire+0x1ed/0x550 kernel/locking/lockdep.c:5754 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline] _raw_spin_lock_irqsave+0xd5/0x120 kernel/locking/spinlock.c:162 mempool_alloc_noprof+0x286/0x5a0 mm/mempool.c:406 bio_alloc_bioset+0x26f/0x1130 block/bio.c:543 bio_alloc include/linux/bio.h:437 [inline] swap_writepage_bdev_async mm/page_io.c:364 [inline] __swap_writepage+0x534/0x13e0 mm/page_io.c:393 swap_writepage+0xd5/0x1d0 mm/page_io.c:209 pageout mm/vmscan.c:677 [inline] shrink_folio_list+0x36e9/0x8ea0 mm/vmscan.c:1358 evict_folios+0xb2e/0x2710 mm/vmscan.c:4572 try_to_shrink_lruvec+0x9ae/0xbb0 mm/vmscan.c:4768 shrink_one+0x3cf/0x880 mm/vmscan.c:4807 shrink_many mm/vmscan.c:4870 [inline] lru_gen_shrink_node mm/vmscan.c:4970 [inline] shrink_node+0x3b17/0x4310 mm/vmscan.c:5929 shrink_zones mm/vmscan.c:6187 [inline] do_try_to_free_pages+0x780/0x1d60 mm/vmscan.c:6249 try_to_free_pages+0x9f0/0x10a0 mm/vmscan.c:6484 __perform_reclaim mm/page_alloc.c:3901 [inline] __alloc_pages_direct_reclaim mm/page_alloc.c:3923 [inline] __alloc_pages_slowpath+0xdc3/0x23d0 mm/page_alloc.c:4329 __alloc_pages_noprof+0x43e/0x6c0 mm/page_alloc.c:4715 alloc_pages_mpol_noprof+0x3e8/0x680 mm/mempolicy.c:2265 alloc_pages_noprof mm/mempolicy.c:2336 [inline] folio_alloc_noprof+0x128/0x180 mm/mempolicy.c:2343 filemap_alloc_folio_noprof+0xdf/0x500 mm/filemap.c:1008 page_cache_ra_unbounded+0x1f4/0x7f0 mm/readahead.c:248 do_sync_mmap_readahead+0x444/0x850 filemap_fault+0x7e8/0x16a0 mm/filemap.c:3314 __do_fault+0x135/0x460 mm/memory.c:4580 do_read_fault mm/memory.c:4943 [inline] do_fault mm/memory.c:5073 [inline] do_pte_missing mm/memory.c:3881 [inline] handle_pte_fault+0x4357/0x6c10 mm/memory.c:5397 __handle_mm_fault mm/memory.c:5538 [inline] handle_mm_fault+0x10e7/0x1bb0 mm/memory.c:5703 do_user_addr_fault arch/x86/mm/fault.c:1368 [inline] handle_page_fault arch/x86/mm/fault.c:1511 [inline] exc_page_fault+0x459/0x900 arch/x86/mm/fault.c:1569 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623 } ... key at: [] mempool_init_node.__key+0x0/0x20 the dependencies between the lock to be acquired and SOFTIRQ-irq-unsafe lock: -> (mmu_notifier_invalidate_range_start){+.+.}-{0:0} { HARDIRQ-ON-W at: lock_acquire+0x1ed/0x550 kernel/locking/lockdep.c:5754 fs_reclaim_acquire+0xaf/0x140 mm/page_alloc.c:3842 might_alloc include/linux/sched/mm.h:334 [inline] slab_pre_alloc_hook mm/slub.c:3847 [inline] slab_alloc_node mm/slub.c:3937 [inline] kmalloc_trace_noprof+0x3d/0x2b0 mm/slub.c:4104 kmalloc_noprof include/linux/slab.h:660 [inline] kzalloc_noprof include/linux/slab.h:775 [inline] __kthread_create_worker+0x5c/0x3e0 kernel/kthread.c:865 kthread_create_worker+0xda/0x120 kernel/kthread.c:908 wq_cpu_intensive_thresh_init+0x18/0x160 kernel/workqueue.c:7762 workqueue_init+0x26/0x8c0 kernel/workqueue.c:7811 kernel_init_freeable+0x3fe/0x5d0 init/main.c:1558 kernel_init+0x1d/0x2b0 init/main.c:1463 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 SOFTIRQ-ON-W at: lock_acquire+0x1ed/0x550 kernel/locking/lockdep.c:5754 fs_reclaim_acquire+0xaf/0x140 mm/page_alloc.c:3842 might_alloc include/linux/sched/mm.h:334 [inline] slab_pre_alloc_hook mm/slub.c:3847 [inline] slab_alloc_node mm/slub.c:3937 [inline] kmalloc_trace_noprof+0x3d/0x2b0 mm/slub.c:4104 kmalloc_noprof include/linux/slab.h:660 [inline] kzalloc_noprof include/linux/slab.h:775 [inline] __kthread_create_worker+0x5c/0x3e0 kernel/kthread.c:865 kthread_create_worker+0xda/0x120 kernel/kthread.c:908 wq_cpu_intensive_thresh_init+0x18/0x160 kernel/workqueue.c:7762 workqueue_init+0x26/0x8c0 kernel/workqueue.c:7811 kernel_init_freeable+0x3fe/0x5d0 init/main.c:1558 kernel_init+0x1d/0x2b0 init/main.c:1463 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 INITIAL USE at: lock_acquire+0x1ed/0x550 kernel/locking/lockdep.c:5754 fs_reclaim_acquire+0xaf/0x140 mm/page_alloc.c:3842 might_alloc include/linux/sched/mm.h:334 [inline] slab_pre_alloc_hook mm/slub.c:3847 [inline] slab_alloc_node mm/slub.c:3937 [inline] kmalloc_trace_noprof+0x3d/0x2b0 mm/slub.c:4104 kmalloc_noprof include/linux/slab.h:660 [inline] kzalloc_noprof include/linux/slab.h:775 [inline] __kthread_create_worker+0x5c/0x3e0 kernel/kthread.c:865 kthread_create_worker+0xda/0x120 kernel/kthread.c:908 wq_cpu_intensive_thresh_init+0x18/0x160 kernel/workqueue.c:7762 workqueue_init+0x26/0x8c0 kernel/workqueue.c:7811 kernel_init_freeable+0x3fe/0x5d0 init/main.c:1558 kernel_init+0x1d/0x2b0 init/main.c:1463 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 } ... key at: [] __mmu_notifier_invalidate_range_start_map+0x0/0x40 ... acquired at: lock_acquire+0x1ed/0x550 kernel/locking/lockdep.c:5754 fs_reclaim_acquire+0xaf/0x140 mm/page_alloc.c:3842 might_alloc include/linux/sched/mm.h:334 [inline] prepare_alloc_pages+0x147/0x5d0 mm/page_alloc.c:4473 __alloc_pages_noprof+0x166/0x6c0 mm/page_alloc.c:4691 alloc_pages_mpol_noprof+0x3e8/0x680 mm/mempolicy.c:2265 stack_depot_save_flags+0x666/0x830 lib/stackdepot.c:635 kasan_save_stack mm/kasan/common.c:48 [inline] kasan_save_track+0x51/0x80 mm/kasan/common.c:68 unpoison_slab_object mm/kasan/common.c:312 [inline] __kasan_mempool_unpoison_object+0xa0/0x170 mm/kasan/common.c:535 remove_element+0x129/0x1a0 mm/mempool.c:150 mempool_alloc_noprof+0x54e/0x5a0 mm/mempool.c:408 __sg_alloc_table+0xcc/0x3c0 lib/scatterlist.c:321 sg_alloc_table_chained+0xe6/0x1c0 lib/sg_pool.c:133 scsi_alloc_sgtables+0x290/0xcb0 drivers/scsi/scsi_lib.c:1133 sd_setup_read_write_cmnd drivers/scsi/sd.c:1227 [inline] sd_init_command+0x3f1/0x1e40 drivers/scsi/sd.c:1352 scsi_prepare_cmd drivers/scsi/scsi_lib.c:1698 [inline] scsi_queue_rq+0x1988/0x3050 drivers/scsi/scsi_lib.c:1832 blk_mq_dispatch_rq_list+0x5ad/0x1d30 block/blk-mq.c:2054 __blk_mq_do_dispatch_sched block/blk-mq-sched.c:170 [inline] blk_mq_do_dispatch_sched block/blk-mq-sched.c:184 [inline] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 block/blk-mq-sched.c:309 blk_mq_sched_dispatch_requests+0xcb/0x140 block/blk-mq-sched.c:331 blk_mq_run_hw_queue+0x9a5/0xae0 block/blk-mq.c:2279 blk_mq_flush_plug_list+0x1115/0x1880 block/blk-mq.c:2828 __blk_flush_plug+0x44b/0x500 block/blk-core.c:1188 blk_finish_plug+0x5e/0x80 block/blk-core.c:1214 read_pages+0x644/0x840 mm/readahead.c:183 page_cache_ra_unbounded+0x188/0x7f0 mm/readahead.c:242 do_sync_mmap_readahead+0x444/0x850 filemap_fault+0x7e8/0x16a0 mm/filemap.c:3314 __do_fault+0x135/0x460 mm/memory.c:4580 do_read_fault mm/memory.c:4943 [inline] do_fault mm/memory.c:5073 [inline] do_pte_missing mm/memory.c:3881 [inline] handle_pte_fault+0x4357/0x6c10 mm/memory.c:5397 __handle_mm_fault mm/memory.c:5538 [inline] handle_mm_fault+0x10e7/0x1bb0 mm/memory.c:5703 do_user_addr_fault arch/x86/mm/fault.c:1368 [inline] handle_page_fault arch/x86/mm/fault.c:1511 [inline] exc_page_fault+0x459/0x900 arch/x86/mm/fault.c:1569 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623 stack backtrace: CPU: 1 PID: 5344 Comm: udevd Not tainted 6.9.0-rc3-next-20240412-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x241/0x360 lib/dump_stack.c:114 print_bad_irq_dependency kernel/locking/lockdep.c:2626 [inline] check_irq_usage kernel/locking/lockdep.c:2865 [inline] check_prev_add kernel/locking/lockdep.c:3138 [inline] check_prevs_add kernel/locking/lockdep.c:3253 [inline] validate_chain+0x4dc7/0x58e0 kernel/locking/lockdep.c:3869 __lock_acquire+0x1346/0x1fd0 kernel/locking/lockdep.c:5137 lock_acquire+0x1ed/0x550 kernel/locking/lockdep.c:5754 fs_reclaim_acquire+0xaf/0x140 mm/page_alloc.c:3842 might_alloc include/linux/sched/mm.h:334 [inline] prepare_alloc_pages+0x147/0x5d0 mm/page_alloc.c:4473 __alloc_pages_noprof+0x166/0x6c0 mm/page_alloc.c:4691 alloc_pages_mpol_noprof+0x3e8/0x680 mm/mempolicy.c:2265 stack_depot_save_flags+0x666/0x830 lib/stackdepot.c:635 kasan_save_stack mm/kasan/common.c:48 [inline] kasan_save_track+0x51/0x80 mm/kasan/common.c:68 unpoison_slab_object mm/kasan/common.c:312 [inline] __kasan_mempool_unpoison_object+0xa0/0x170 mm/kasan/common.c:535 remove_element+0x129/0x1a0 mm/mempool.c:150 mempool_alloc_noprof+0x54e/0x5a0 mm/mempool.c:408 __sg_alloc_table+0xcc/0x3c0 lib/scatterlist.c:321 sg_alloc_table_chained+0xe6/0x1c0 lib/sg_pool.c:133 scsi_alloc_sgtables+0x290/0xcb0 drivers/scsi/scsi_lib.c:1133 sd_setup_read_write_cmnd drivers/scsi/sd.c:1227 [inline] sd_init_command+0x3f1/0x1e40 drivers/scsi/sd.c:1352 scsi_prepare_cmd drivers/scsi/scsi_lib.c:1698 [inline] scsi_queue_rq+0x1988/0x3050 drivers/scsi/scsi_lib.c:1832 blk_mq_dispatch_rq_list+0x5ad/0x1d30 block/blk-mq.c:2054 __blk_mq_do_dispatch_sched block/blk-mq-sched.c:170 [inline] blk_mq_do_dispatch_sched block/blk-mq-sched.c:184 [inline] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 block/blk-mq-sched.c:309 blk_mq_sched_dispatch_requests+0xcb/0x140 block/blk-mq-sched.c:331 blk_mq_run_hw_queue+0x9a5/0xae0 block/blk-mq.c:2279 blk_mq_flush_plug_list+0x1115/0x1880 block/blk-mq.c:2828 __blk_flush_plug+0x44b/0x500 block/blk-core.c:1188 blk_finish_plug+0x5e/0x80 block/blk-core.c:1214 read_pages+0x644/0x840 mm/readahead.c:183 page_cache_ra_unbounded+0x188/0x7f0 mm/readahead.c:242 do_sync_mmap_readahead+0x444/0x850 filemap_fault+0x7e8/0x16a0 mm/filemap.c:3314 __do_fault+0x135/0x460 mm/memory.c:4580 do_read_fault mm/memory.c:4943 [inline] do_fault mm/memory.c:5073 [inline] do_pte_missing mm/memory.c:3881 [inline] handle_pte_fault+0x4357/0x6c10 mm/memory.c:5397 __handle_mm_fault mm/memory.c:5538 [inline] handle_mm_fault+0x10e7/0x1bb0 mm/memory.c:5703 do_user_addr_fault arch/x86/mm/fault.c:1368 [inline] handle_page_fault arch/x86/mm/fault.c:1511 [inline] exc_page_fault+0x459/0x900 arch/x86/mm/fault.c:1569 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623 RIP: 0033:0x563b08893a0f Code: Unable to access opcode bytes at 0x563b088939e5. RSP: 002b:00007fffb46233f0 EFLAGS: 00010203 RAX: 0000000000000001 RBX: 0000000000000000 RCX: 00007ff0ed523457 RDX: 0000000000000004 RSI: 00007fffb4623428 RDI: 0000000000000004 RBP: 0000563b1370e410 R08: 0000000000000007 R09: a5dcd8f1a76960e9 R10: 00000000ffffffff R11: 0000000000000246 R12: 0000563b13712d50 R13: 00007fffb4623428 R14: 0000000000000008 R15: 0000563b136ef910 BUG: sleeping function called from invalid context at include/linux/sched/mm.h:337 in_atomic(): 1, irqs_disabled(): 1, non_block: 0, pid: 5344, name: udevd preempt_count: 1, expected: 0 RCU nest depth: 1, expected: 0 INFO: lockdep is turned off. irq event stamp: 449022 hardirqs last enabled at (449021): [] seqcount_lockdep_reader_access+0x13b/0x1e0 include/linux/seqlock.h:74 hardirqs last disabled at (449022): [] __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:108 [inline] hardirqs last disabled at (449022): [] _raw_spin_lock_irqsave+0xb0/0x120 kernel/locking/spinlock.c:162 softirqs last enabled at (448672): [] invoke_softirq kernel/softirq.c:428 [inline] softirqs last enabled at (448672): [] __irq_exit_rcu+0xf2/0x1c0 kernel/softirq.c:633 softirqs last disabled at (448645): [] invoke_softirq kernel/softirq.c:428 [inline] softirqs last disabled at (448645): [] __irq_exit_rcu+0xf2/0x1c0 kernel/softirq.c:633 Preemption disabled at: [<0000000000000000>] 0x0 CPU: 1 PID: 5344 Comm: udevd Not tainted 6.9.0-rc3-next-20240412-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x241/0x360 lib/dump_stack.c:114 __might_resched+0x5d4/0x780 kernel/sched/core.c:10197 might_alloc include/linux/sched/mm.h:337 [inline] prepare_alloc_pages+0x1c9/0x5d0 mm/page_alloc.c:4473 __alloc_pages_noprof+0x166/0x6c0 mm/page_alloc.c:4691 alloc_pages_mpol_noprof+0x3e8/0x680 mm/mempolicy.c:2265 stack_depot_save_flags+0x666/0x830 lib/stackdepot.c:635 kasan_save_stack mm/kasan/common.c:48 [inline] kasan_save_track+0x51/0x80 mm/kasan/common.c:68 unpoison_slab_object mm/kasan/common.c:312 [inline] __kasan_mempool_unpoison_object+0xa0/0x170 mm/kasan/common.c:535 remove_element+0x129/0x1a0 mm/mempool.c:150 mempool_alloc_noprof+0x54e/0x5a0 mm/mempool.c:408 __sg_alloc_table+0xcc/0x3c0 lib/scatterlist.c:321 sg_alloc_table_chained+0xe6/0x1c0 lib/sg_pool.c:133 scsi_alloc_sgtables+0x290/0xcb0 drivers/scsi/scsi_lib.c:1133 sd_setup_read_write_cmnd drivers/scsi/sd.c:1227 [inline] sd_init_command+0x3f1/0x1e40 drivers/scsi/sd.c:1352 scsi_prepare_cmd drivers/scsi/scsi_lib.c:1698 [inline] scsi_queue_rq+0x1988/0x3050 drivers/scsi/scsi_lib.c:1832 blk_mq_dispatch_rq_list+0x5ad/0x1d30 block/blk-mq.c:2054 __blk_mq_do_dispatch_sched block/blk-mq-sched.c:170 [inline] blk_mq_do_dispatch_sched block/blk-mq-sched.c:184 [inline] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 block/blk-mq-sched.c:309 blk_mq_sched_dispatch_requests+0xcb/0x140 block/blk-mq-sched.c:331 blk_mq_run_hw_queue+0x9a5/0xae0 block/blk-mq.c:2279 blk_mq_flush_plug_list+0x1115/0x1880 block/blk-mq.c:2828 __blk_flush_plug+0x44b/0x500 block/blk-core.c:1188 blk_finish_plug+0x5e/0x80 block/blk-core.c:1214 read_pages+0x644/0x840 mm/readahead.c:183 page_cache_ra_unbounded+0x188/0x7f0 mm/readahead.c:242 do_sync_mmap_readahead+0x444/0x850 filemap_fault+0x7e8/0x16a0 mm/filemap.c:3314 __do_fault+0x135/0x460 mm/memory.c:4580 do_read_fault mm/memory.c:4943 [inline] do_fault mm/memory.c:5073 [inline] do_pte_missing mm/memory.c:3881 [inline] handle_pte_fault+0x4357/0x6c10 mm/memory.c:5397 __handle_mm_fault mm/memory.c:5538 [inline] handle_mm_fault+0x10e7/0x1bb0 mm/memory.c:5703 do_user_addr_fault arch/x86/mm/fault.c:1368 [inline] handle_page_fault arch/x86/mm/fault.c:1511 [inline] exc_page_fault+0x459/0x900 arch/x86/mm/fault.c:1569 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623 RIP: 0033:0x563b08893a0f Code: Unable to access opcode bytes at 0x563b088939e5. RSP: 002b:00007fffb46233f0 EFLAGS: 00010203 RAX: 0000000000000001 RBX: 0000000000000000 RCX: 00007ff0ed523457 RDX: 0000000000000004 RSI: 00007fffb4623428 RDI: 0000000000000004 RBP: 0000563b1370e410 R08: 0000000000000007 R09: a5dcd8f1a76960e9 R10: 00000000ffffffff R11: 0000000000000246 R12: 0000563b13712d50 R13: 00007fffb4623428 R14: 0000000000000008 R15: 0000563b136ef910 BUG: scheduling while atomic: udevd/5344/0x00000002 INFO: lockdep is turned off.