============================= [ BUG: Invalid wait context ] 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0 Not tainted ----------------------------- syz.0.710/8566 is trying to lock: ffff88802b43b0a0 (batched_entropy_u8.lock){..-.}-{3:3}, at: local_lock_acquire include/linux/local_lock_internal.h:29 [inline] ffff88802b43b0a0 (batched_entropy_u8.lock){..-.}-{3:3}, at: get_random_u8+0xef/0x7f0 drivers/char/random.c:551 other info that might help us debug this: context-{2:2} 3 locks held by syz.0.710/8566: #0: ffff88802408eb60 (&lo->lo_mutex){+.+.}-{4:4}, at: loop_global_lock_killable drivers/block/loop.c:120 [inline] #0: ffff88802408eb60 (&lo->lo_mutex){+.+.}-{4:4}, at: loop_configure+0x161/0x11f0 drivers/block/loop.c:1044 #1: ffffffff8dda8180 (console_lock){+.+.}-{0:0}, at: vprintk+0x7f/0xa0 kernel/printk/printk_safe.c:86 #2: ffffffff8dda81f0 (console_srcu){....}-{0:0}, at: rcu_try_lock_acquire include/linux/rcupdate.h:342 [inline] #2: ffffffff8dda81f0 (console_srcu){....}-{0:0}, at: srcu_read_lock_nmisafe include/linux/srcu.h:297 [inline] #2: ffffffff8dda81f0 (console_srcu){....}-{0:0}, at: console_srcu_read_lock kernel/printk/printk.c:288 [inline] #2: ffffffff8dda81f0 (console_srcu){....}-{0:0}, at: console_flush_all+0x159/0xc60 kernel/printk/printk.c:3187 stack backtrace: CPU: 0 UID: 0 PID: 8566 Comm: syz.0.710 Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120 print_lock_invalid_wait_context kernel/locking/lockdep.c:4826 [inline] check_wait_context kernel/locking/lockdep.c:4898 [inline] __lock_acquire+0x878/0x3c40 kernel/locking/lockdep.c:5176 lock_acquire.part.0+0x11b/0x380 kernel/locking/lockdep.c:5849 local_lock_acquire include/linux/local_lock_internal.h:29 [inline] get_random_u8+0x107/0x7f0 drivers/char/random.c:551 get_random_u32_below include/linux/random.h:78 [inline] kfence_guarded_alloc mm/kfence/core.c:421 [inline] __kfence_alloc+0x4e8/0x15f0 mm/kfence/core.c:1136 kfence_alloc include/linux/kfence.h:129 [inline] slab_alloc_node mm/slub.c:4137 [inline] __kmalloc_cache_noprof+0x125/0x420 mm/slub.c:4309 kmalloc_noprof include/linux/slab.h:901 [inline] add_stack_record_to_list mm/page_owner.c:172 [inline] inc_stack_record_count mm/page_owner.c:214 [inline] __set_page_owner+0x50f/0x790 mm/page_owner.c:329 set_page_owner include/linux/page_owner.h:32 [inline] post_alloc_hook+0x2d1/0x350 mm/page_alloc.c:1556 prep_new_page mm/page_alloc.c:1564 [inline] get_page_from_freelist+0xfce/0x2f80 mm/page_alloc.c:3474 __alloc_pages_noprof+0x223/0x25b0 mm/page_alloc.c:4751 alloc_pages_mpol_noprof+0x2c9/0x610 mm/mempolicy.c:2269 stack_depot_save_flags+0x8e0/0x9e0 lib/stackdepot.c:627 kasan_save_stack+0x42/0x60 mm/kasan/common.c:48 __kasan_record_aux_stack+0xba/0xd0 mm/kasan/generic.c:544 task_work_add+0xc0/0x3b0 kernel/task_work.c:77 __run_posix_cpu_timers kernel/time/posix-cpu-timers.c:1223 [inline] run_posix_cpu_timers+0x69f/0x7d0 kernel/time/posix-cpu-timers.c:1422 update_process_times+0x1a1/0x2d0 kernel/time/timer.c:2526 tick_sched_handle kernel/time/tick-sched.c:276 [inline] tick_nohz_handler+0x376/0x530 kernel/time/tick-sched.c:297 __run_hrtimer kernel/time/hrtimer.c:1739 [inline] __hrtimer_run_queues+0x5fb/0xae0 kernel/time/hrtimer.c:1803 hrtimer_interrupt+0x392/0x8e0 kernel/time/hrtimer.c:1865 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1038 [inline] __sysvec_apic_timer_interrupt+0x10f/0x400 arch/x86/kernel/apic/apic.c:1055 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1049 [inline] sysvec_apic_timer_interrupt+0x9f/0xc0 arch/x86/kernel/apic/apic.c:1049 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:console_flush_all+0x9a4/0xc60 kernel/printk/printk.c:3211 Code: 00 e8 c0 ca 27 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 ee 1f 20 00 48 85 db 0f 85 55 01 00 00 e8 70 1d 20 00 fb 4c 89 e0 <48> c1 e8 03 42 80 3c 38 00 0f 84 11 ff ff ff 4c 89 e7 e8 85 a4 82 RSP: 0018:ffffc900078e7610 EFLAGS: 00000293 RAX: ffffffff8ea89618 RBX: 0000000000000000 RCX: ffffffff81792072 RDX: ffff8880245cc880 RSI: ffffffff81792080 RDI: 0000000000000007 RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000004 R12: ffffffff8ea89618 R13: ffffffff8ea895c0 R14: ffffc900078e76a0 R15: dffffc0000000000 __console_flush_and_unlock kernel/printk/printk.c:3269 [inline] console_unlock+0xd9/0x210 kernel/printk/printk.c:3309 vprintk_emit+0x41b/0x6f0 kernel/printk/printk.c:2432 vprintk+0x7f/0xa0 kernel/printk/printk_safe.c:86 _printk+0xc8/0x100 kernel/printk/printk.c:2457 set_capacity_and_notify+0x16b/0x250 block/genhd.c:86 loop_set_size drivers/block/loop.c:232 [inline] loop_configure+0xa34/0x11f0 drivers/block/loop.c:1101 lo_ioctl+0xa5d/0x18a0 drivers/block/loop.c:1532 lo_compat_ioctl+0xb9/0x170 drivers/block/loop.c:1692 compat_blkdev_ioctl+0x2f7/0x750 block/ioctl.c:749 __do_compat_sys_ioctl+0x1cb/0x2c0 fs/ioctl.c:1004 do_syscall_32_irqs_on arch/x86/entry/common.c:165 [inline] __do_fast_syscall_32+0x73/0x120 arch/x86/entry/common.c:386 do_fast_syscall_32+0x32/0x80 arch/x86/entry/common.c:411 entry_SYSENTER_compat_after_hwframe+0x84/0x8e RIP: 0023:0xf746e579 Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 RSP: 002b:00000000f514657c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000004c0a RDX: 00000000200002c0 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 ---------------- Code disassembly (best guess): 0: 00 e8 add %ch,%al 2: c0 ca 27 ror $0x27,%dl 5: 00 9c 5b 81 e3 00 02 add %bl,0x200e381(%rbx,%rbx,2) c: 00 00 add %al,(%rax) e: 31 ff xor %edi,%edi 10: 48 89 de mov %rbx,%rsi 13: e8 ee 1f 20 00 call 0x202006 18: 48 85 db test %rbx,%rbx 1b: 0f 85 55 01 00 00 jne 0x176 21: e8 70 1d 20 00 call 0x201d96 26: fb sti 27: 4c 89 e0 mov %r12,%rax * 2a: 48 c1 e8 03 shr $0x3,%rax <-- trapping instruction 2e: 42 80 3c 38 00 cmpb $0x0,(%rax,%r15,1) 33: 0f 84 11 ff ff ff je 0xffffff4a 39: 4c 89 e7 mov %r12,%rdi 3c: e8 .byte 0xe8 3d: 85 .byte 0x85 3e: a4 movsb %ds:(%rsi),%es:(%rdi) 3f: 82 .byte 0x82