From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from kanga.kvack.org (kanga.kvack.org [205.233.56.17]) by smtp.lore.kernel.org (Postfix) with ESMTP id 2ADC3C3A59D for ; Sun, 23 Oct 2022 18:32:32 +0000 (UTC) Received: by kanga.kvack.org (Postfix) id 166ED900003; Sun, 23 Oct 2022 14:32:32 -0400 (EDT) Received: by kanga.kvack.org (Postfix, from userid 40) id 11888900002; Sun, 23 Oct 2022 14:32:32 -0400 (EDT) X-Delivered-To: int-list-linux-mm@kvack.org Received: by kanga.kvack.org (Postfix, from userid 63042) id F20C5900003; Sun, 23 Oct 2022 14:32:31 -0400 (EDT) X-Delivered-To: linux-mm@kvack.org Received: from relay.hostedemail.com (smtprelay0016.hostedemail.com [216.40.44.16]) by kanga.kvack.org (Postfix) with ESMTP id E37BD900002 for ; Sun, 23 Oct 2022 14:32:31 -0400 (EDT) Received: from smtpin22.hostedemail.com (a10.router.float.18 [10.200.18.1]) by unirelay08.hostedemail.com (Postfix) with ESMTP id A5872140964 for ; Sun, 23 Oct 2022 18:32:31 +0000 (UTC) X-FDA: 80053059702.22.6737653 Received: from mail-io1-f71.google.com (mail-io1-f71.google.com [209.85.166.71]) by imf21.hostedemail.com (Postfix) with ESMTP id 44AA71C0010 for ; Sun, 23 Oct 2022 18:32:31 +0000 (UTC) Received: by mail-io1-f71.google.com with SMTP id bx19-20020a056602419300b006bcbf3b91fdso5304700iob.13 for ; Sun, 23 Oct 2022 11:32:31 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=to:from:subject:message-id:date:mime-version:x-gm-message-state :from:to:cc:subject:date:message-id:reply-to; bh=l+0VgJ8Gbl95TmV6Bs0hyU7LlDiuG6XfQ/JBlPd6Jvw=; b=5W3wfdOJINWAHPuTjpN3jJmvcauhKXPgEyjVakfWDwyiThJn5qadW/UZ5w8XYeUeTi rulat0M0FwYv+fjui+LKd4nLpL/TFcZu9pjIzPny/rHGsXuSiF30DOM2yvWoMytqQZ9/ bAJ2o4MSodtbVZMAuPrAB8kcMKU8ZHRvdPGx9KuReEg4enp0lPce5fUifyLMvC7Dx5Gz UT4R02d4dq0H4oWJAbQqwUSERj+HFVB1YeuEx5xbwDzffiyrgRI+3AhQ9xHjIgehY0mk OouVXeAiFP4YvD/ducw8bXxi0DumWLdzk47sekHeAUHdJV8uFCy9qtpqzR99vmWkJB+y rAPQ== X-Gm-Message-State: ACrzQf2vUBtpQdxhXrRdqZndz+VwAuLB4FIguDdvJfu68HgR2bg6MCdz EW6Ef9EG5qvLHYiQUfCouhBycqrxkaWG1OS+dhL5YIz+YQb0 X-Google-Smtp-Source: AMsMyM4ufSOAB+H/L20zddLafaoC1ZpxxXva8ahIgQ9Ws/IbUXseWao9xhVbb/HWlrXMPerhwF0zb8yZatVy9xZAL6u8qCCnGRQ+ MIME-Version: 1.0 X-Received: by 2002:a02:c6d9:0:b0:373:e154:268e with SMTP id r25-20020a02c6d9000000b00373e154268emr1181868jan.291.1666549950546; Sun, 23 Oct 2022 11:32:30 -0700 (PDT) Date: Sun, 23 Oct 2022 11:32:30 -0700 X-Google-Appengine-App-Id: s~syzkaller X-Google-Appengine-App-Id-Alias: syzkaller Message-ID: <000000000000cd8af105ebb7e570@google.com> Subject: [syzbot] inconsistent lock state in _atomic_dec_and_lock From: syzbot To: akpm@linux-foundation.org, linux-fsdevel@vger.kernel.org, linux-kernel@vger.kernel.org, linux-mm@kvack.org, syzkaller-bugs@googlegroups.com, willy@infradead.org Content-Type: text/plain; charset="UTF-8" ARC-Authentication-Results: i=1; imf21.hostedemail.com; dkim=none; spf=pass (imf21.hostedemail.com: domain of 3vohVYwkbAEc178tjuun0jyyrm.pxxpun31n0lxw2nw2.lxv@M3KW2WVRGUFZ5GODRSRYTGD7.apphosting.bounces.google.com designates 209.85.166.71 as permitted sender) smtp.mailfrom=3vohVYwkbAEc178tjuun0jyyrm.pxxpun31n0lxw2nw2.lxv@M3KW2WVRGUFZ5GODRSRYTGD7.apphosting.bounces.google.com; dmarc=fail reason="SPF not aligned (relaxed), No valid DKIM" header.from=appspotmail.com (policy=none) ARC-Seal: i=1; s=arc-20220608; d=hostedemail.com; t=1666549951; a=rsa-sha256; cv=none; b=7TMwoj6IZwCC/8PO4sVDxtGSYWxRBD/048rhqxdWFtnDgmLbe3oLMq3gyaS4qdYC9z0btJ IdCcOWKNPmoKoHcHSn++rvgTd1RTIHtwbdjCKHTpBXM0k1NsJjo/O1Mfip+j1QhYUktPZC Y19JANLq303E8Oe9jRiDsCDRg8TWzhU= ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=hostedemail.com; s=arc-20220608; t=1666549951; h=from:from:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:mime-version:mime-version: content-type:content-type:content-transfer-encoding:in-reply-to: references; bh=l+0VgJ8Gbl95TmV6Bs0hyU7LlDiuG6XfQ/JBlPd6Jvw=; b=8dnKBD39+cGUMRF6HnMEhr/Vn1AsvFPqBoAnmSFKgKW8SupxGgr/Vcksd/Mu70okhBDOnI +v3mrN7ZG0s8ofp4E2n3sVSrnCql+tKy/m0XfVbYlEpyfkxvTpHgesBIxwbOdVnQ1JlccX cGl97HEteWO2apjfqpuQ85/WnorU6xk= X-Rspamd-Queue-Id: 44AA71C0010 X-Rspam-User: Authentication-Results: imf21.hostedemail.com; dkim=none; spf=pass (imf21.hostedemail.com: domain of 3vohVYwkbAEc178tjuun0jyyrm.pxxpun31n0lxw2nw2.lxv@M3KW2WVRGUFZ5GODRSRYTGD7.apphosting.bounces.google.com designates 209.85.166.71 as permitted sender) smtp.mailfrom=3vohVYwkbAEc178tjuun0jyyrm.pxxpun31n0lxw2nw2.lxv@M3KW2WVRGUFZ5GODRSRYTGD7.apphosting.bounces.google.com; dmarc=fail reason="SPF not aligned (relaxed), No valid DKIM" header.from=appspotmail.com (policy=none) X-Rspamd-Server: rspam11 X-Stat-Signature: h18rbt6ojwmcxm88tzqi3b1xa4xz9yhs X-HE-Tag: 1666549951-468538 X-Bogosity: Ham, tests=bogofilter, spamicity=0.000000, version=1.2.4 Sender: owner-linux-mm@kvack.org Precedence: bulk X-Loop: owner-majordomo@kvack.org List-ID: Hello, syzbot found the following issue on: HEAD commit: bbed346d5a96 Merge branch 'for-next/core' into for-kernelci git tree: git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci console output: https://syzkaller.appspot.com/x/log.txt?x=14ee3b3c880000 kernel config: https://syzkaller.appspot.com/x/.config?x=3a4a45d2d827c1e dashboard link: https://syzkaller.appspot.com/bug?extid=9c8140e9162432b9eb20 compiler: Debian clang version 13.0.1-++20220126092033+75e33f71c2da-1~exp1~20220126212112.63, GNU ld (GNU Binutils for Debian) 2.35.2 userspace arch: arm64 syz repro: https://syzkaller.appspot.com/x/repro.syz?x=150865d6880000 Downloadable assets: disk image: https://storage.googleapis.com/syzbot-assets/e8e91bc79312/disk-bbed346d.raw.xz vmlinux: https://storage.googleapis.com/syzbot-assets/c1cb3fb3b77e/vmlinux-bbed346d.xz mounted in repro: https://storage.googleapis.com/syzbot-assets/ebd052ae1e7b/mount_0.gz IMPORTANT: if you fix the issue, please add the following tag to the commit: Reported-by: syzbot+9c8140e9162432b9eb20@syzkaller.appspotmail.com ================================ WARNING: inconsistent lock state 6.0.0-rc7-syzkaller-18095-gbbed346d5a96 #0 Not tainted -------------------------------- inconsistent {IN-HARDIRQ-W} -> {HARDIRQ-ON-W} usage. syz-executor.3/9712 [HC0[0]:SC0[0]:HE1:SE1] takes: ffff0000d10c2577 (&folio_wait_table[i]){?.-.}-{2:2}, at: spin_lock include/linux/spinlock.h:349 [inline] ffff0000d10c2577 (&folio_wait_table[i]){?.-.}-{2:2}, at: _atomic_dec_and_lock+0xc8/0x130 lib/dec_and_lock.c:28 {IN-HARDIRQ-W} state was registered at: lock_acquire+0x100/0x1f8 kernel/locking/lockdep.c:5666 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline] _raw_spin_lock_irqsave+0x6c/0xb4 kernel/locking/spinlock.c:162 folio_wake_bit+0x88/0x254 mm/filemap.c:1143 folio_unlock+0xb4/0x210 mm/filemap.c:1533 unlock_page+0x38/0xb8 mm/folio-compat.c:20 end_buffer_async_read+0x2a8/0x5f8 fs/buffer.c:290 end_buffer_async_read_io+0x118/0x12c fs/buffer.c:335 end_bio_bh_io_sync+0x5c/0xac fs/buffer.c:2672 bio_endio+0x28c/0x2d8 block/bio.c:1564 blk_complete_request block/blk-mq.c:755 [inline] blk_mq_end_request_batch+0x18c/0x5ec block/blk-mq.c:989 nvme_complete_batch drivers/nvme/host/nvme.h:706 [inline] nvme_pci_complete_batch+0x130/0x14c drivers/nvme/host/pci.c:1040 nvme_irq+0x64/0xa8 drivers/nvme/host/pci.c:1141 __handle_irq_event_percpu+0xa8/0x294 kernel/irq/handle.c:158 handle_irq_event_percpu kernel/irq/handle.c:193 [inline] handle_irq_event+0x4c/0xe8 kernel/irq/handle.c:210 handle_fasteoi_irq+0x1b4/0x324 kernel/irq/chip.c:714 generic_handle_irq_desc include/linux/irqdesc.h:158 [inline] handle_irq_desc kernel/irq/irqdesc.c:648 [inline] generic_handle_domain_irq+0x4c/0x6c kernel/irq/irqdesc.c:704 __gic_handle_irq drivers/irqchip/irq-gic-v3.c:695 [inline] __gic_handle_irq_from_irqson drivers/irqchip/irq-gic-v3.c:746 [inline] gic_handle_irq+0x78/0x1b4 drivers/irqchip/irq-gic-v3.c:790 call_on_irq_stack+0x2c/0x54 arch/arm64/kernel/entry.S:889 do_interrupt_handler+0x7c/0xc0 arch/arm64/kernel/entry-common.c:274 __el1_irq arch/arm64/kernel/entry-common.c:470 [inline] el1_interrupt+0x34/0x68 arch/arm64/kernel/entry-common.c:485 el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:490 el1h_64_irq+0x64/0x68 arch/arm64/kernel/entry.S:577 arch_local_irq_restore arch/arm64/include/asm/irqflags.h:122 [inline] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline] _raw_spin_unlock_irqrestore+0x58/0x8c kernel/locking/spinlock.c:194 debug_object_activate+0xb0/0x300 lib/debugobjects.c:692 debug_rcu_head_queue kernel/rcu/rcu.h:189 [inline] call_rcu+0x40/0x484 kernel/rcu/tree.c:2778 tlb_remove_table_free mm/mmu_gather.c:174 [inline] tlb_table_flush mm/mmu_gather.c:215 [inline] tlb_flush_mmu_free+0x298/0x3bc mm/mmu_gather.c:253 tlb_flush_mmu+0x274/0x2f0 mm/mmu_gather.c:262 tlb_finish_mmu+0x64/0xe4 mm/mmu_gather.c:353 exit_mmap+0xe4/0x2e4 mm/mmap.c:3118 __mmput+0x90/0x204 kernel/fork.c:1187 mmput+0x64/0xa0 kernel/fork.c:1208 free_bprm+0xac/0x19c fs/exec.c:1485 kernel_execve+0x4ec/0x540 fs/exec.c:2004 call_usermodehelper_exec_async+0x10c/0x214 kernel/umh.c:112 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:860 irq event stamp: 8353 hardirqs last enabled at (8353): [] raw_spin_rq_unlock_irq kernel/sched/sched.h:1367 [inline] hardirqs last enabled at (8353): [] finish_lock_switch+0x94/0xe8 kernel/sched/core.c:4942 hardirqs last disabled at (8352): [] __schedule+0x84/0x5a0 kernel/sched/core.c:6393 softirqs last enabled at (7378): [] _stext+0x2e4/0x37c softirqs last disabled at (7245): [] ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:79 other info that might help us debug this: Possible unsafe locking scenario: CPU0 ---- lock(&folio_wait_table[i]); lock(&folio_wait_table[i]); *** DEADLOCK *** 1 lock held by syz-executor.3/9712: #0: ffff0000d1a700e0 (&type->s_umount_key#46/1){+.+.}-{3:3}, at: alloc_super+0xf8/0x430 fs/super.c:228 stack backtrace: CPU: 1 PID: 9712 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-18095-gbbed346d5a96 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 Call trace: dump_backtrace+0x1c4/0x1f0 arch/arm64/kernel/stacktrace.c:156 show_stack+0x2c/0x54 arch/arm64/kernel/stacktrace.c:163 __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x104/0x16c lib/dump_stack.c:106 dump_stack+0x1c/0x58 lib/dump_stack.c:113 print_usage_bug+0x39c/0x3cc kernel/locking/lockdep.c:3961 mark_lock_irq+0x4a8/0x4b4 mark_lock+0x154/0x1b4 kernel/locking/lockdep.c:4632 mark_usage kernel/locking/lockdep.c:4541 [inline] __lock_acquire+0x5f8/0x30a4 kernel/locking/lockdep.c:5007 lock_acquire+0x100/0x1f8 kernel/locking/lockdep.c:5666 __raw_spin_lock include/linux/spinlock_api_smp.h:133 [inline] _raw_spin_lock+0x54/0x6c kernel/locking/spinlock.c:154 spin_lock include/linux/spinlock.h:349 [inline] _atomic_dec_and_lock+0xc8/0x130 lib/dec_and_lock.c:28 iput+0x50/0x324 fs/inode.c:1766 ntfs_fill_super+0x1254/0x14a4 fs/ntfs3/super.c:1190 get_tree_bdev+0x1e8/0x2a0 fs/super.c:1323 ntfs_fs_get_tree+0x28/0x38 fs/ntfs3/super.c:1358 vfs_get_tree+0x40/0x140 fs/super.c:1530 do_new_mount+0x1dc/0x4e4 fs/namespace.c:3040 path_mount+0x358/0x914 fs/namespace.c:3370 do_mount fs/namespace.c:3383 [inline] __do_sys_mount fs/namespace.c:3591 [inline] __se_sys_mount fs/namespace.c:3568 [inline] __arm64_sys_mount+0x2c4/0x3c4 fs/namespace.c:3568 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall arch/arm64/kernel/syscall.c:52 [inline] el0_svc_common+0x138/0x220 arch/arm64/kernel/syscall.c:142 do_el0_svc+0x48/0x164 arch/arm64/kernel/syscall.c:206 el0_svc+0x58/0x150 arch/arm64/kernel/entry-common.c:636 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:654 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:581 ntfs3: loop3: Mark volume as dirty due to NTFS errors --- This report is generated by a bot. It may contain errors. See https://goo.gl/tpsmEJ for more information about syzbot. syzbot engineers can be reached at syzkaller@googlegroups.com. syzbot will keep track of this issue. See: https://goo.gl/tpsmEJ#status for how to communicate with syzbot. syzbot can test patches for this issue, for details see: https://goo.gl/tpsmEJ#testing-patches