binder: 8035:8037 unknown command 1627677444
=============================
WARNING: suspicious RCU usage
4.17.0-rc2+ #14 Not tainted
binder: 8035:8037 ioctl c0306201 20000680 returned -22
-----------------------------
include/linux/rcupdate.h:304 Illegal context switch in RCU read-side critical section!
other info that might help us debug this:
rcu_scheduler_active = 2, debug_locks = 1
2 locks held by syz-executor0/4469:
#0: (ptrval) (shrinker_rwsem){++++}, at: shrink_slab.part.39+0xe6/0xf90 mm/vmscan.c:509
#1: (ptrval)
binder: BINDER_SET_CONTEXT_MGR already set
(rcu_read_lock){....}, at: list_lru_count_one+0xc4/0x440 mm/list_lru.c:183
stack backtrace:
CPU: 1 PID: 4469 Comm: syz-executor0 Not tainted 4.17.0-rc2+ #14
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1b9/0x294 lib/dump_stack.c:113
binder: 8035:8043 ioctl 40046207 0 returned -16
lockdep_rcu_suspicious+0x14a/0x153 kernel/locking/lockdep.c:4592
rcu_preempt_sleep_check include/linux/rcupdate.h:303 [inline]
___might_sleep+0x26d/0x320 kernel/sched/core.c:6153
__might_sleep+0x95/0x190 kernel/sched/core.c:6141
slab_pre_alloc_hook mm/slab.h:421 [inline]
slab_alloc mm/slab.c:3378 [inline]
__do_kmalloc mm/slab.c:3716 [inline]
__kmalloc+0x2b9/0x760 mm/slab.c:3727
kmalloc_array include/linux/slab.h:631 [inline]
kcalloc include/linux/slab.h:642 [inline]
numa_crng_init drivers/char/random.c:798 [inline]
crng_reseed+0x427/0x920 drivers/char/random.c:923
credit_entropy_bits+0x98d/0xa30 drivers/char/random.c:708
add_interrupt_randomness+0x494/0x860 drivers/char/random.c:1254
handle_irq_event_percpu+0xf9/0x1c0 kernel/irq/handle.c:191
handle_irq_event+0xa7/0x135 kernel/irq/handle.c:206
handle_edge_irq+0x20f/0x870 kernel/irq/chip.c:791
generic_handle_irq_desc include/linux/irqdesc.h:159 [inline]
handle_irq+0x18c/0x2e7 arch/x86/kernel/irq_64.c:77
do_IRQ+0x78/0x190 arch/x86/kernel/irq.c:245
common_interrupt+0xf/0xf arch/x86/entry/entry_64.S:642
RIP: 0010:__read_once_size include/linux/compiler.h:188 [inline]
RIP: 0010:check_kcov_mode kernel/kcov.c:69 [inline]
RIP: 0010:__sanitizer_cov_trace_pc+0x26/0x50 kernel/kcov.c:101
RSP: 0000:ffff88019a2cf338 EFLAGS: 00000246 ORIG_RAX: ffffffffffffffd8
RAX: ffff88019a2c4300 RBX: ffff8801da97e000 RCX: ffffffff81a5306c
RDX: 0000000000000000 RSI: ffffffff81a53290 RDI: 0000000000000001
RBP: ffff88019a2cf338 R08: ffff88019a2c4300 R09: 0000000000000001
R10: ffff88019a2c4b60 R11: ffff88019a2c4300 R12: 1ffff10033459e6a
R13: 0000000000000004 R14: ffff88019a2cf3b0 R15: 0000000000000000
rcu_read_lock include/linux/rcupdate.h:633 [inline]
__list_lru_count_one mm/list_lru.c:172 [inline]
list_lru_count_one+0x350/0x440 mm/list_lru.c:183
list_lru_shrink_count include/linux/list_lru.h:118 [inline]
super_cache_count+0x10f/0x280 fs/super.c:134
do_shrink_slab mm/vmscan.c:374 [inline]
shrink_slab.part.39+0x330/0xf90 mm/vmscan.c:531
shrink_slab+0xa1/0xc0 mm/vmscan.c:506
shrink_node+0x4f2/0x1740 mm/vmscan.c:2561
shrink_zones mm/vmscan.c:2794 [inline]
do_try_to_free_pages+0x3c9/0x1240 mm/vmscan.c:2856
try_to_free_mem_cgroup_pages+0x475/0xc50 mm/vmscan.c:3146
reclaim_high.constprop.67+0x12f/0x1d0 mm/memcontrol.c:1862
mem_cgroup_handle_over_high+0x8d/0x130 mm/memcontrol.c:1887
tracehook_notify_resume include/linux/tracehook.h:193 [inline]
exit_to_usermode_loop+0x274/0x310 arch/x86/entry/common.c:166
prepare_exit_to_usermode+0x32e/0x390 arch/x86/entry/common.c:196
retint_user+0x8/0x18
RIP: 0033:0x409dce
RSP: 002b:0000000000a3eac0 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 0000000000000023 RCX: 0000000000453a3a
RDX: 0000000000000000 RSI: 0000000000000168 RDI: 00000000004ba841
RBP: 0000000000000013 R08: 0000000000000001 R09: 0000000000db9940
R10: 0000000000db9c10 R11: 0000000000000246 R12: 0000000000000013
R13: 0000000000000000 R14: 0000000000000168 R15: 0000000000001380
BUG: sleeping function called from invalid context at mm/slab.h:421
in_atomic(): 1, irqs_disabled(): 1, pid: 4469, name: syz-executor0
2 locks held by syz-executor0/4469:
#0: (ptrval) (shrinker_rwsem){++++}, at: shrink_slab.part.39+0xe6/0xf90 mm/vmscan.c:509
#1: (ptrval) (rcu_read_lock){....}, at: list_lru_count_one+0xc4/0x440 mm/list_lru.c:183
irq event stamp: 357456
hardirqs last enabled at (357455): [] restore_regs_and_return_to_kernel+0x0/0x2b
hardirqs last disabled at (357456): [] interrupt_entry+0xb5/0xf0 arch/x86/entry/entry_64.S:625
softirqs last enabled at (357454): [] __do_softirq+0x778/0xaf5 kernel/softirq.c:311
softirqs last disabled at (357411): [] invoke_softirq kernel/softirq.c:365 [inline]
softirqs last disabled at (357411): [] irq_exit+0x1d1/0x200 kernel/softirq.c:405
CPU: 1 PID: 4469 Comm: syz-executor0 Not tainted 4.17.0-rc2+ #14
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1b9/0x294 lib/dump_stack.c:113
___might_sleep.cold.87+0x11f/0x13a kernel/sched/core.c:6188
__might_sleep+0x95/0x190 kernel/sched/core.c:6141
slab_pre_alloc_hook mm/slab.h:421 [inline]
slab_alloc mm/slab.c:3378 [inline]
__do_kmalloc mm/slab.c:3716 [inline]
__kmalloc+0x2b9/0x760 mm/slab.c:3727
kmalloc_array include/linux/slab.h:631 [inline]
kcalloc include/linux/slab.h:642 [inline]
numa_crng_init drivers/char/random.c:798 [inline]
crng_reseed+0x427/0x920 drivers/char/random.c:923
credit_entropy_bits+0x98d/0xa30 drivers/char/random.c:708
add_interrupt_randomness+0x494/0x860 drivers/char/random.c:1254
handle_irq_event_percpu+0xf9/0x1c0 kernel/irq/handle.c:191
handle_irq_event+0xa7/0x135 kernel/irq/handle.c:206
handle_edge_irq+0x20f/0x870 kernel/irq/chip.c:791
generic_handle_irq_desc include/linux/irqdesc.h:159 [inline]
handle_irq+0x18c/0x2e7 arch/x86/kernel/irq_64.c:77
do_IRQ+0x78/0x190 arch/x86/kernel/irq.c:245
common_interrupt+0xf/0xf arch/x86/entry/entry_64.S:642
RIP: 0010:__read_once_size include/linux/compiler.h:188 [inline]
RIP: 0010:check_kcov_mode kernel/kcov.c:69 [inline]
RIP: 0010:__sanitizer_cov_trace_pc+0x26/0x50 kernel/kcov.c:101
RSP: 0000:ffff88019a2cf338 EFLAGS: 00000246 ORIG_RAX: ffffffffffffffd8
RAX: ffff88019a2c4300 RBX: ffff8801da97e000 RCX: ffffffff81a5306c
RDX: 0000000000000000 RSI: ffffffff81a53290 RDI: 0000000000000001
RBP: ffff88019a2cf338 R08: ffff88019a2c4300 R09: 0000000000000001
R10: ffff88019a2c4b60 R11: ffff88019a2c4300 R12: 1ffff10033459e6a
R13: 0000000000000004 R14: ffff88019a2cf3b0 R15: 0000000000000000
rcu_read_lock include/linux/rcupdate.h:633 [inline]
__list_lru_count_one mm/list_lru.c:172 [inline]
list_lru_count_one+0x350/0x440 mm/list_lru.c:183
list_lru_shrink_count include/linux/list_lru.h:118 [inline]
super_cache_count+0x10f/0x280 fs/super.c:134
do_shrink_slab mm/vmscan.c:374 [inline]
shrink_slab.part.39+0x330/0xf90 mm/vmscan.c:531
shrink_slab+0xa1/0xc0 mm/vmscan.c:506
shrink_node+0x4f2/0x1740 mm/vmscan.c:2561
shrink_zones mm/vmscan.c:2794 [inline]
do_try_to_free_pages+0x3c9/0x1240 mm/vmscan.c:2856
try_to_free_mem_cgroup_pages+0x475/0xc50 mm/vmscan.c:3146
reclaim_high.constprop.67+0x12f/0x1d0 mm/memcontrol.c:1862
mem_cgroup_handle_over_high+0x8d/0x130 mm/memcontrol.c:1887
tracehook_notify_resume include/linux/tracehook.h:193 [inline]
exit_to_usermode_loop+0x274/0x310 arch/x86/entry/common.c:166
prepare_exit_to_usermode+0x32e/0x390 arch/x86/entry/common.c:196
retint_user+0x8/0x18
RIP: 0033:0x409dce
RSP: 002b:0000000000a3eac0 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 0000000000000023 RCX: 0000000000453a3a
RDX: 0000000000000000 RSI: 0000000000000168 RDI: 00000000004ba841
RBP: 0000000000000013 R08: 0000000000000001 R09: 0000000000db9940
R10: 0000000000db9c10 R11: 0000000000000246 R12: 0000000000000013
R13: 0000000000000000 R14: 0000000000000168 R15: 0000000000001380
random: crng init done
QAT: Invalid ioctl
QAT: Invalid ioctl
QAT: Invalid ioctl
QAT: Invalid ioctl
mmap: syz-executor6 (8108): VmData 18423808 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
binder: 8263:8265 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2
binder: 8263:8265 unknown command 65536
could not allocate digest TFM handle rmd256-genericÁM(6‚¢–
binder: 8263:8265 ioctl c0306201 20000300 returned -22
binder: BINDER_SET_CONTEXT_MGR already set
could not allocate digest TFM handle rmd256-genericÁM(6‚¢–
binder: 8263:8277 ioctl 40046207 0 returned -16
binder: 8263:8265 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2
binder: 8263:8265 unknown command 65536
binder: 8263:8265 ioctl c0306201 20000300 returned -22
netlink: 28 bytes leftover after parsing attributes in process `syz-executor5'.
PF_BRIDGE: br_mdb_parse() with unknown ifindex
binder: 8349:8350 unknown command 1183657859
binder: 8349:8350 ioctl c0306201 20004000 returned -22
netlink: 28 bytes leftover after parsing attributes in process `syz-executor5'.
PF_BRIDGE: br_mdb_parse() with unknown ifindex
binder: 8349:8371 unknown command 1183657859
binder: 8349:8371 ioctl c0306201 20004000 returned -22
netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'.
netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'.
netlink: 20 bytes leftover after parsing attributes in process `syz-executor7'.