------------[ cut here ]------------ do not call blocking ops when !TASK_RUNNING; state=2 set at [] __mutex_waiter_is_first kernel/locking/mutex.c:194 [inline] do not call blocking ops when !TASK_RUNNING; state=2 set at [] __mutex_lock_common kernel/locking/mutex.c:675 [inline] do not call blocking ops when !TASK_RUNNING; state=2 set at [] __mutex_lock+0xa46/0x12f0 kernel/locking/mutex.c:733 WARNING: CPU: 0 PID: 3821 at kernel/sched/core.c:9656 __might_sleep+0x105/0x150 kernel/sched/core.c:9656 Modules linked in: CPU: 0 PID: 3821 Comm: syz-executor.3 Not tainted 5.17.0-syzkaller-13673-ge8b767f5e040 #0 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 RIP: 0010:__might_sleep+0x105/0x150 kernel/sched/core.c:9656 Code: 70 02 00 48 8d bb f0 16 00 00 48 89 fa 48 c1 ea 03 80 3c 02 00 75 34 48 8b 93 f0 16 00 00 48 c7 c7 e0 c8 cb 89 e8 3a 23 c9 07 <0f> 0b e9 75 ff ff ff e8 1f 95 72 00 e9 26 ff ff ff 89 34 24 e8 22 RSP: 0018:ffffc90000007d68 EFLAGS: 00010286 RAX: 0000000000000000 RBX: ffff888070c92040 RCX: 0000000000000000 RDX: ffff888070c92040 RSI: ffffffff815efad8 RDI: fffff52000000f9f RBP: ffffffff8a240440 R08: 0000000000000000 R09: 0000000000000001 R10: ffffffff815ea4ae R11: 0000000000000000 R12: 00000000000002fe R13: 0000000000000000 R14: ffffffff8a240840 R15: 0000000000000000 FS: 00007ff7c581c700(0000) GS:ffff88802ca00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f3c18f691b8 CR3: 000000004b030000 CR4: 0000000000150ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: blk_release_queue+0x1f/0x320 block/blk-sysfs.c:766 kobject_cleanup lib/kobject.c:705 [inline] kobject_release lib/kobject.c:736 [inline] kref_put include/linux/kref.h:65 [inline] kobject_put+0x1c8/0x540 lib/kobject.c:753 blkg_free.part.0+0x112/0x1f0 block/blk-cgroup.c:86 blkg_free block/blk-cgroup.c:78 [inline] __blkg_release+0x105/0x160 block/blk-cgroup.c:102 rcu_do_batch kernel/rcu/tree.c:2535 [inline] rcu_core+0x7b1/0x1880 kernel/rcu/tree.c:2786 __do_softirq+0x29b/0x9c2 kernel/softirq.c:558 invoke_softirq kernel/softirq.c:432 [inline] __irq_exit_rcu+0x123/0x180 kernel/softirq.c:637 irq_exit_rcu+0x5/0x20 kernel/softirq.c:649 sysvec_apic_timer_interrupt+0x93/0xc0 arch/x86/kernel/apic/apic.c:1097 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:645 RIP: 0010:__raw_callee_save___kvm_vcpu_is_preempted+0x12/0x20 Code: 00 8b 14 24 e9 fc fe ff ff cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 48 8b 04 fd e0 78 79 8b 80 b8 50 74 02 00 00 0f 95 c0 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 c3 66 66 2e 0f 1f 84 00 RSP: 0018:ffffc90002b1f8b0 EFLAGS: 00000246 RAX: ffff88802cc00000 RBX: ffffffff8d548140 RCX: ffffffff815b1e7c RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 RBP: ffff88804b3c0240 R08: 0000000000000000 R09: ffffffff8d548147 R10: fffffbfff1aa9028 R11: 0000000000000001 R12: dffffc0000000000 R13: 0000000000000000 R14: ffff888070c92040 R15: ffffed100e192408 pv_vcpu_is_preempted arch/x86/include/asm/paravirt.h:613 [inline] vcpu_is_preempted arch/x86/include/asm/qspinlock.h:63 [inline] owner_on_cpu include/linux/sched.h:2216 [inline] mutex_spin_on_owner+0x13c/0x2e0 kernel/locking/mutex.c:370 mutex_optimistic_spin kernel/locking/mutex.c:473 [inline] __mutex_lock_common kernel/locking/mutex.c:684 [inline] __mutex_lock+0xd65/0x12f0 kernel/locking/mutex.c:733 ipv6_route_ioctl+0x3c7/0x570 net/ipv6/route.c:4463 inet6_ioctl+0x242/0x280 net/ipv6/af_inet6.c:570 sock_do_ioctl+0xcc/0x230 net/socket.c:1122 sock_ioctl+0x2f1/0x640 net/socket.c:1239 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:870 [inline] __se_sys_ioctl fs/ioctl.c:856 [inline] __x64_sys_ioctl+0x193/0x200 fs/ioctl.c:856 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x35/0x80 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7ff7c4689049 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007ff7c581c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007ff7c479c030 RCX: 00007ff7c4689049 RDX: 0000000020000280 RSI: 000000000000890b RDI: 0000000000000004 RBP: 00007ff7c46e308d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffc7e2d2f2f R14: 00007ff7c581c300 R15: 0000000000022000 ---------------- Code disassembly (best guess), 1 bytes skipped: 0: 8b 14 24 mov (%rsp),%edx 3: e9 fc fe ff ff jmpq 0xffffff04 8: cc int3 9: cc int3 a: cc int3 b: cc int3 c: cc int3 d: cc int3 e: cc int3 f: cc int3 10: cc int3 11: cc int3 12: cc int3 13: cc int3 14: cc int3 15: cc int3 16: cc int3 17: 48 8b 04 fd e0 78 79 mov -0x74868720(,%rdi,8),%rax 1e: 8b 1f: 80 b8 50 74 02 00 00 cmpb $0x0,0x27450(%rax) 26: 0f 95 c0 setne %al * 29: c3 retq <-- trapping instruction 2a: 66 66 2e 0f 1f 84 00 data16 nopw %cs:0x0(%rax,%rax,1) 31: 00 00 00 00 35: 66 90 xchg %ax,%ax 37: c3 retq 38: 66 data16 39: 66 data16 3a: 2e cs 3b: 0f .byte 0xf 3c: 1f (bad) 3d: 84 00 test %al,(%rax)