BUG: scheduling while atomic: syz-fuzzer/2191/0x00000102
Modules linked in:
CPU: 1 PID: 2191 Comm: syz-fuzzer Not tainted 5.17.0-syzkaller-13410-g74164d284b29 #0
Hardware name: linux,dummy-virt (DT)
Call trace:
 dump_backtrace.part.0+0xcc/0xe0 arch/arm64/kernel/stacktrace.c:184
 dump_backtrace arch/arm64/kernel/stacktrace.c:190 [inline]
 show_stack+0x18/0x6c arch/arm64/kernel/stacktrace.c:191
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x68/0x84 lib/dump_stack.c:106
 dump_stack+0x18/0x34 lib/dump_stack.c:113
 __schedule_bug+0x60/0x80 kernel/sched/core.c:5617
 schedule_debug kernel/sched/core.c:5644 [inline]
 __schedule+0x74c/0x7f0 kernel/sched/core.c:6273
 schedule+0x54/0xd0 kernel/sched/core.c:6454
 rwsem_down_write_slowpath+0x29c/0x5a0 kernel/locking/rwsem.c:1142
 __down_write_common kernel/locking/rwsem.c:1259 [inline]
 __down_write_common kernel/locking/rwsem.c:1256 [inline]
 __down_write kernel/locking/rwsem.c:1268 [inline]
 down_write+0x58/0x64 kernel/locking/rwsem.c:1515
 inode_lock include/linux/fs.h:777 [inline]
 simple_recursive_removal+0x124/0x270 fs/libfs.c:288
 debugfs_remove fs/debugfs/inode.c:742 [inline]
 debugfs_remove+0x5c/0x80 fs/debugfs/inode.c:736
 blk_release_queue+0x7c/0xf0 block/blk-sysfs.c:784
 kobject_cleanup lib/kobject.c:705 [inline]
 kobject_release lib/kobject.c:736 [inline]
 kref_put include/linux/kref.h:65 [inline]
 kobject_put+0x98/0x114 lib/kobject.c:753
 blk_put_queue+0x14/0x20 block/blk-core.c:270
 blkg_free.part.0+0x54/0x80 block/blk-cgroup.c:86
 blkg_free block/blk-cgroup.c:78 [inline]
 __blkg_release+0x44/0x70 block/blk-cgroup.c:102
 rcu_do_batch kernel/rcu/tree.c:2535 [inline]
 rcu_core+0x324/0x590 kernel/rcu/tree.c:2786
 rcu_core_si+0x10/0x20 kernel/rcu/tree.c:2803
 _stext+0x124/0x2a0
 do_softirq_own_stack include/asm-generic/softirq_stack.h:10 [inline]
 invoke_softirq kernel/softirq.c:439 [inline]
 __irq_exit_rcu+0xe4/0x100 kernel/softirq.c:637
 irq_exit_rcu+0x10/0x1c kernel/softirq.c:649
 __el1_irq arch/arm64/kernel/entry-common.c:459 [inline]
 el1_interrupt+0x38/0x64 arch/arm64/kernel/entry-common.c:473
 el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:478
 el1h_64_irq+0x64/0x68 arch/arm64/kernel/entry.S:577
 arch_local_irq_enable arch/arm64/include/asm/irqflags.h:35 [inline]
 raw_spin_rq_unlock_irq kernel/sched/sched.h:1315 [inline]
 finish_lock_switch kernel/sched/core.c:4833 [inline]
 finish_task_switch.isra.0+0x9c/0x254 kernel/sched/core.c:4951
 context_switch kernel/sched/core.c:5076 [inline]
 __schedule+0x2a8/0x7f0 kernel/sched/core.c:6382
 preempt_schedule_common kernel/sched/core.c:6547 [inline]
 preempt_schedule+0x4c/0x64 kernel/sched/core.c:6571
 try_to_wake_up+0x98/0x590 kernel/sched/core.c:4204
 wake_up_process kernel/sched/core.c:4282 [inline]
 wake_up_q+0x60/0xbc kernel/sched/core.c:1029
 futex_wake+0x170/0x1ac kernel/futex/waitwake.c:184
 do_futex+0xc0/0x1e0 kernel/futex/syscalls.c:111
 __do_sys_futex kernel/futex/syscalls.c:183 [inline]
 __se_sys_futex kernel/futex/syscalls.c:164 [inline]
 __arm64_sys_futex+0x7c/0x1a0 kernel/futex/syscalls.c:164
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x48/0x114 arch/arm64/kernel/syscall.c:52
 el0_svc_common.constprop.0+0x44/0xec arch/arm64/kernel/syscall.c:142
 do_el0_svc+0x6c/0x84 arch/arm64/kernel/syscall.c:181
 el0_svc+0x44/0xb0 arch/arm64/kernel/entry-common.c:616
 el0t_64_sync_handler+0x1a4/0x1b0 arch/arm64/kernel/entry-common.c:634
 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:581
------------[ cut here ]------------
WARNING: CPU: 1 PID: 19 at kernel/rcu/tree.c:2592 rcu_do_batch kernel/rcu/tree.c:2592 [inline]
WARNING: CPU: 1 PID: 19 at kernel/rcu/tree.c:2592 rcu_core+0x4d4/0x590 kernel/rcu/tree.c:2786
Modules linked in:
CPU: 1 PID: 19 Comm: ksoftirqd/1 Tainted: G        W         5.17.0-syzkaller-13410-g74164d284b29 #0
Hardware name: linux,dummy-virt (DT)
pstate: a04000c9 (NzCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : rcu_do_batch kernel/rcu/tree.c:2592 [inline]
pc : rcu_core+0x4d4/0x590 kernel/rcu/tree.c:2786
lr : rcu_do_batch kernel/rcu/tree.c:2572 [inline]
lr : rcu_core+0x38c/0x590 kernel/rcu/tree.c:2786
sp : ffff80000a6d3d00
x29: ffff80000a6d3d00 x28: ffff8000081224e8 x27: 0000000000000000
x26: 000000000000000a x25: fffffffffffffffe x24: ffff80000a6d3d60
x23: ffff80000a36cc00 x22: ffff00007fbd89b8 x21: 0000000000000000
x20: ffff00007fbd8940 x19: 0000000000000000 x18: 0000000000000000
x17: 0000000000000000 x16: 0000000000000000 x15: 0000150fee9b801c
x14: 00000000000000dc x13: 00000000000000dc x12: ffff800009e7e398
x11: ffff80000a25fee8 x10: ffff800075996000 x9 : ffff00007fbd1028
x8 : 0000000000000001 x7 : 0000000000000001 x6 : ffff80000a260000
x5 : ffff8000082f053c x4 : fffffc00004f3960 x3 : 0000000080130012
x2 : 0000000000002710 x1 : ffffffffffffd8f0 x0 : 0000000000000002
Call trace:
 rcu_do_batch kernel/rcu/tree.c:2592 [inline]
 rcu_core+0x4d4/0x590 kernel/rcu/tree.c:2786
 rcu_core_si+0x10/0x20 kernel/rcu/tree.c:2803
 _stext+0x124/0x2a0
 run_ksoftirqd+0x4c/0x60 kernel/softirq.c:921
 smpboot_thread_fn+0x23c/0x270 kernel/smpboot.c:164
 kthread+0x108/0x10c kernel/kthread.c:376
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:867
---[ end trace 0000000000000000 ]---