=============================
[ BUG: Invalid wait context ]
6.12.0-syzkaller-09073-g9f16d5e6f220 #0 Not tainted
-----------------------------
syz.0.0/5333 is trying to lock:
ffff88801fc3a970 (batched_entropy_u8.lock){..-.}-{3:3}, at: local_lock_acquire include/linux/local_lock_internal.h:29 [inline]
ffff88801fc3a970 (batched_entropy_u8.lock){..-.}-{3:3}, at: get_random_u8+0x1a0/0xaa0 drivers/char/random.c:551
other info that might help us debug this:
context-{2:2}
no locks held by syz.0.0/5333.
stack backtrace:
CPU: 0 UID: 0 PID: 5333 Comm: syz.0.0 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120
 print_lock_invalid_wait_context kernel/locking/lockdep.c:4826 [inline]
 check_wait_context kernel/locking/lockdep.c:4898 [inline]
 __lock_acquire+0x15a8/0x2100 kernel/locking/lockdep.c:5176
 lock_acquire+0x1ed/0x550 kernel/locking/lockdep.c:5849
 local_lock_acquire include/linux/local_lock_internal.h:29 [inline]
 get_random_u8+0x1bd/0xaa0 drivers/char/random.c:551
 get_random_u32_below include/linux/random.h:78 [inline]
 kfence_guarded_alloc+0x9c/0xcd0 mm/kfence/core.c:421
 __kfence_alloc+0x344/0x370 mm/kfence/core.c:1136
 kfence_alloc include/linux/kfence.h:129 [inline]
 slab_alloc_node mm/slub.c:4118 [inline]
 __kmalloc_cache_noprof+0x237/0x2c0 mm/slub.c:4290
 kmalloc_noprof include/linux/slab.h:879 [inline]
 add_stack_record_to_list mm/page_owner.c:172 [inline]
 inc_stack_record_count mm/page_owner.c:214 [inline]
 __set_page_owner+0x55f/0x800 mm/page_owner.c:329
 set_page_owner include/linux/page_owner.h:32 [inline]
 post_alloc_hook+0x1f3/0x230 mm/page_alloc.c:1556
 prep_new_page mm/page_alloc.c:1564 [inline]
 get_page_from_freelist+0x3649/0x3790 mm/page_alloc.c:3474
 __alloc_pages_noprof+0x292/0x710 mm/page_alloc.c:4751
 alloc_pages_mpol_noprof+0x3e8/0x680 mm/mempolicy.c:2265
 stack_depot_save_flags+0x666/0x830 lib/stackdepot.c:627
 kasan_save_stack+0x4f/0x60 mm/kasan/common.c:48
 __kasan_record_aux_stack+0xac/0xc0 mm/kasan/generic.c:541
 task_work_add+0xd9/0x490 kernel/task_work.c:77
 __run_posix_cpu_timers kernel/time/posix-cpu-timers.c:1223 [inline]
 run_posix_cpu_timers+0x6ac/0x810 kernel/time/posix-cpu-timers.c:1422
 tick_sched_handle kernel/time/tick-sched.c:276 [inline]
 tick_nohz_handler+0x37c/0x500 kernel/time/tick-sched.c:297
 __run_hrtimer kernel/time/hrtimer.c:1739 [inline]
 __hrtimer_run_queues+0x551/0xd50 kernel/time/hrtimer.c:1803
 hrtimer_interrupt+0x403/0xa40 kernel/time/hrtimer.c:1865
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1038 [inline]
 __sysvec_apic_timer_interrupt+0x110/0x420 arch/x86/kernel/apic/apic.c:1055
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1049 [inline]
 sysvec_apic_timer_interrupt+0xa1/0xc0 arch/x86/kernel/apic/apic.c:1049
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:generic_exec_single+0x4f6/0x9b0 kernel/smp.c:447
Code: e8 1f 08 0c 00 90 0f 0b 90 e9 64 fc ff ff e8 11 08 0c 00 e8 3c 5b 48 0a 4d 85 e4 0f 84 6e ff ff ff e8 fe 07 0c 00 fb 45 31 f6 <48> c7 44 24 20 0e 36 e0 45 4b c7 04 2f 00 00 00 00 66 43 c7 44 2f
RSP: 0018:ffffc9000d417960 EFLAGS: 00000246
RAX: ffffffff8189d812 RBX: 0000000000000000 RCX: 0000000000100000
RDX: ffffc9000ea7a000 RSI: 000000000000860d RDI: 000000000000860e
RBP: ffffc9000d417a38 R08: ffffffff8189d764 R09: 1ffffffff203c806
R10: dffffc0000000000 R11: fffffbfff203c807 R12: 0000000000000200
R13: 1ffff92001a82f30 R14: 0000000000000000 R15: dffffc0000000000
 smp_call_function_single_async+0x83/0x110 kernel/smp.c:724
 rdmsr_safe_on_cpu+0x146/0x310 arch/x86/lib/msr-smp.c:179
 msr_read+0x15d/0x260 arch/x86/kernel/msr.c:66
 vfs_read+0x1fc/0xb70 fs/read_write.c:563
 ksys_read+0x18f/0x2b0 fs/read_write.c:708
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f7d7ff7e819
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f7d7f9f8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
RAX: ffffffffffffffda RBX: 00007f7d80135fa0 RCX: 00007f7d7ff7e819
RDX: 0000000000018ff8 RSI: 0000000020019680 RDI: 0000000000000003
RBP: 00007f7d7fff175e R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007f7d80135fa0 R15: 00007ffda5a469d8
 </TASK>
----------------
Code disassembly (best guess):
   0:	e8 1f 08 0c 00       	call   0xc0824
   5:	90                   	nop
   6:	0f 0b                	ud2
   8:	90                   	nop
   9:	e9 64 fc ff ff       	jmp    0xfffffc72
   e:	e8 11 08 0c 00       	call   0xc0824
  13:	e8 3c 5b 48 0a       	call   0xa485b54
  18:	4d 85 e4             	test   %r12,%r12
  1b:	0f 84 6e ff ff ff    	je     0xffffff8f
  21:	e8 fe 07 0c 00       	call   0xc0824
  26:	fb                   	sti
  27:	45 31 f6             	xor    %r14d,%r14d
* 2a:	48 c7 44 24 20 0e 36 	movq   $0x45e0360e,0x20(%rsp) <-- trapping instruction
  31:	e0 45
  33:	4b c7 04 2f 00 00 00 	movq   $0x0,(%r15,%r13,1)
  3a:	00
  3b:	66                   	data16
  3c:	43                   	rex.XB
  3d:	c7                   	.byte 0xc7
  3e:	44 2f                	rex.R (bad)