BUG: sleeping function called from invalid context at block/blk-sysfs.c:766 in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 3586, name: syz-fuzzer preempt_count: 101, expected: 0 RCU nest depth: 0, expected: 0 INFO: lockdep is turned off. Preemption disabled at: [<0000000000000000>] 0x0 CPU: 1 PID: 3586 Comm: syz-fuzzer Tainted: G W 5.17.0-syzkaller-13536-ge3d37210df5c #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0xcd/0x134 lib/dump_stack.c:106 __might_resched.cold+0x222/0x26b kernel/sched/core.c:9733 blk_release_queue+0x1f/0x320 block/blk-sysfs.c:766 kobject_cleanup lib/kobject.c:705 [inline] kobject_release lib/kobject.c:736 [inline] kref_put include/linux/kref.h:65 [inline] kobject_put+0x1c8/0x540 lib/kobject.c:753 blkg_free.part.0+0x112/0x1f0 block/blk-cgroup.c:86 blkg_free block/blk-cgroup.c:78 [inline] __blkg_release+0x105/0x160 block/blk-cgroup.c:102 rcu_do_batch kernel/rcu/tree.c:2535 [inline] rcu_core+0x7b1/0x1880 kernel/rcu/tree.c:2786 __do_softirq+0x29b/0x9c2 kernel/softirq.c:558 invoke_softirq kernel/softirq.c:432 [inline] __irq_exit_rcu+0x123/0x180 kernel/softirq.c:637 irq_exit_rcu+0x5/0x20 kernel/softirq.c:649 sysvec_apic_timer_interrupt+0x93/0xc0 arch/x86/kernel/apic/apic.c:1097 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:645 RIP: 0010:get_current arch/x86/include/asm/current.h:15 [inline] RIP: 0010:__sanitizer_cov_trace_pc+0x13/0x60 kernel/kcov.c:199 Code: 02 66 0f 1f 44 00 00 48 8b be a8 01 00 00 e8 b4 ff ff ff 31 c0 c3 90 65 8b 05 99 d2 89 7e 89 c1 48 8b 34 24 81 e1 00 01 00 00 <65> 48 8b 14 25 00 70 02 00 a9 00 01 ff 00 74 0e 85 c9 74 35 8b 82 RSP: 0018:ffffc900038cfc00 EFLAGS: 00000246 RAX: 0000000080000001 RBX: 0000000000000001 RCX: 0000000000000000 RDX: 0000000000000000 RSI: ffffffff81b4d601 RDI: 0000000000000003 RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000000 R10: ffffffff81b4d5f2 R11: 0000000000000001 R12: ffffea0000f70a08 R13: ffffea0000f70a00 R14: 000000c003c29000 R15: ffff88801a444148 change_pte_range mm/mprotect.c:98 [inline] change_pmd_range mm/mprotect.c:290 [inline] change_pud_range mm/mprotect.c:318 [inline] change_p4d_range mm/mprotect.c:338 [inline] change_protection_range mm/mprotect.c:363 [inline] change_protection+0x1141/0x2750 mm/mprotect.c:386 change_prot_numa+0x2c/0x80 mm/mempolicy.c:641 task_numa_work+0x3ec/0x8c0 kernel/sched/fair.c:2814 task_work_run+0xdd/0x1a0 kernel/task_work.c:164 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline] exit_to_user_mode_loop kernel/entry/common.c:183 [inline] exit_to_user_mode_prepare+0x23c/0x250 kernel/entry/common.c:215 __syscall_exit_to_user_mode_work kernel/entry/common.c:297 [inline] syscall_exit_to_user_mode+0x19/0x60 kernel/entry/common.c:308 do_syscall_64+0x42/0x80 arch/x86/entry/common.c:86 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x49dfbb Code: e8 aa 4b fc ff eb 88 cc cc cc cc cc cc cc cc e8 bb 8f fc ff 48 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 28 ff ff ff ff 48 c7 44 24 30 RSP: 002b:000000c001299408 EFLAGS: 00000216 ORIG_RAX: 0000000000000001 RAX: 00000000000000f0 RBX: 000000c00001e000 RCX: 000000000049dfbb RDX: 00000000000000f0 RSI: 000000c00000a200 RDI: 0000000000000006 RBP: 000000c001299458 R08: 0000000000000001 R09: 000000c000526380 R10: 00000000000000f0 R11: 0000000000000216 R12: 000000c0012994e8 R13: 0000000000000000 R14: 000000c0000831e0 R15: 000000000000007f BUG: sleeping function called from invalid context at block/blk-sysfs.c:766 in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 8, name: kworker/u4:0 preempt_count: 101, expected: 0 RCU nest depth: 1, expected: 0 INFO: lockdep is turned off. Preemption disabled at: [] preempt_schedule_notrace_thunk+0x16/0x18 arch/x86/entry/thunk_64.S:36 CPU: 1 PID: 8 Comm: kworker/u4:0 Tainted: G W 5.17.0-syzkaller-13536-ge3d37210df5c #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: bat_events batadv_nc_worker Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0xcd/0x134 lib/dump_stack.c:106 __might_resched.cold+0x222/0x26b kernel/sched/core.c:9733 blk_release_queue+0x1f/0x320 block/blk-sysfs.c:766 kobject_cleanup lib/kobject.c:705 [inline] kobject_release lib/kobject.c:736 [inline] kref_put include/linux/kref.h:65 [inline] kobject_put+0x1c8/0x540 lib/kobject.c:753 blkg_free.part.0+0x112/0x1f0 block/blk-cgroup.c:86 blkg_free block/blk-cgroup.c:78 [inline] __blkg_release+0x105/0x160 block/blk-cgroup.c:102 rcu_do_batch kernel/rcu/tree.c:2535 [inline] rcu_core+0x7b1/0x1880 kernel/rcu/tree.c:2786 __do_softirq+0x29b/0x9c2 kernel/softirq.c:558 invoke_softirq kernel/softirq.c:432 [inline] __irq_exit_rcu+0x123/0x180 kernel/softirq.c:637 irq_exit_rcu+0x5/0x20 kernel/softirq.c:649 sysvec_apic_timer_interrupt+0x93/0xc0 arch/x86/kernel/apic/apic.c:1097 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:645 RIP: 0010:finish_task_switch.isra.0+0x323/0xb80 kernel/sched/core.c:4953 Code: a3 44 0c 08 85 c0 75 02 0f 0b 48 85 db 0f 85 25 01 00 00 4c 89 f7 e8 fc f7 ff ff e8 87 70 2d 00 fb 65 48 8b 1c 25 00 70 02 00 <48> 8d bb 80 15 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 RSP: 0018:ffffc900000d7a60 EFLAGS: 00000246 RAX: 0000000000000007 RBX: ffff888010e85700 RCX: 1ffffffff1b6d69d RDX: 0000000000000000 RSI: ffffffff817ee4b1 RDI: ffffffff815173d9 RBP: ffffc900000d7aa8 R08: 0000000000000000 R09: 0000000000000000 R10: ffffffff817ee498 R11: 0000000000000001 R12: ffff8880b9d3acd8 R13: ffff888071c2d700 R14: ffff8880b9d39f80 R15: ffff8880b9d3a9b8 context_switch kernel/sched/core.c:5076 [inline] __schedule+0xaa2/0x4940 kernel/sched/core.c:6382 preempt_schedule_notrace+0x5b/0xd0 kernel/sched/core.c:6640 preempt_schedule_notrace_thunk+0x16/0x18 arch/x86/entry/thunk_64.S:36 rcu_is_watching+0x7f/0xb0 kernel/rcu/tree.c:1139 rcu_read_unlock include/linux/rcupdate.h:723 [inline] batadv_nc_purge_orig_hash net/batman-adv/network-coding.c:412 [inline] batadv_nc_worker+0x836/0xfa0 net/batman-adv/network-coding.c:719 process_one_work+0x996/0x1610 kernel/workqueue.c:2289 worker_thread+0x665/0x1080 kernel/workqueue.c:2436 kthread+0x2e9/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:298 IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 lapbether: lapb_data_request error - 4 ---------------- Code disassembly (best guess), 1 bytes skipped: 0: 66 0f 1f 44 00 00 nopw 0x0(%rax,%rax,1) 6: 48 8b be a8 01 00 00 mov 0x1a8(%rsi),%rdi d: e8 b4 ff ff ff callq 0xffffffc6 12: 31 c0 xor %eax,%eax 14: c3 retq 15: 90 nop 16: 65 8b 05 99 d2 89 7e mov %gs:0x7e89d299(%rip),%eax # 0x7e89d2b6 1d: 89 c1 mov %eax,%ecx 1f: 48 8b 34 24 mov (%rsp),%rsi 23: 81 e1 00 01 00 00 and $0x100,%ecx * 29: 65 48 8b 14 25 00 70 mov %gs:0x27000,%rdx <-- trapping instruction 30: 02 00 32: a9 00 01 ff 00 test $0xff0100,%eax 37: 74 0e je 0x47 39: 85 c9 test %ecx,%ecx 3b: 74 35 je 0x72 3d: 8b .byte 0x8b 3e: 82 .byte 0x82