Hello,
The following program triggers WARNING message in rfkill_fop_read:
[ cut here ]
WARNING: CPU: 2 PID: 6975 at kernel/sched/core.c:7663
__might_sleep+0x138/0x1a0()
do not call blocking ops when !TASK_RUNNING; state=1 set at
[] prepare_to_wait_event+0x141/0x410
kernel/sched/wait.c:210
Modules linked in:
CPU: 2 PID: 6975 Comm: a.out Not tainted 4.5.0-rc1+ #283
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS Bochs 01/01/2011
88003369f908 8299a06d 88003369f978
8800338e 864453c0 88003369f948 8134fcf9
813c9cf8 ed00066d3f2b 864453c0 1def
Call Trace:
[< inline >] __dump_stack lib/dump_stack.c:15
[] dump_stack+0x6f/0xa2 lib/dump_stack.c:50
[] warn_slowpath_common+0xd9/0x140 kernel/panic.c:482
[] warn_slowpath_fmt+0xa9/0xd0 kernel/panic.c:494
[] __might_sleep+0x138/0x1a0 kernel/sched/core.c:7658
[] mutex_lock_nested+0x74/0xa50 kernel/locking/mutex.c:617
[< inline >] rfkill_readable net/rfkill/core.c:1102
[] rfkill_fop_read+0x23d/0x3e0 net/rfkill/core.c:1125
[] do_loop_readv_writev+0x141/0x1e0 fs/read_write.c:719
[] do_readv_writev+0x5f8/0x6e0 fs/read_write.c:849
[] vfs_readv+0x83/0xb0 fs/read_write.c:873
[< inline >] SYSC_readv fs/read_write.c:899
[] SyS_readv+0x111/0x2b0 fs/read_write.c:891
[] entry_SYSCALL_64_fastpath+0x16/0x7a
arch/x86/entry/entry_64.S:185
---[ end trace 8fc3336c73e4219c ]---
// autogenerated by syzkaller (http://github.com/google/syzkaller)
#include
#include
#include
#include
#include
#include
#include
#include
#include
#include
long r[8];
void* thr(void* arg)
{
switch ((long)arg) {
case 0:
r[0] = syscall(SYS_mmap, 0x2000ul, 0x5ul, 0x3ul, 0x32ul,
0xul, 0x0ul);
break;
case 1:
r[2] = open("/dev/rfkill", O_RDWR);
break;
case 2:
*(uint64_t*)0x20042fe0 = (uint64_t)0x20042ff9;
*(uint64_t*)0x20042fe8 = (uint64_t)0x7;
*(uint64_t*)0x20042ff0 = (uint64_t)0x20032fa1;
*(uint64_t*)0x20042ff8 = (uint64_t)0xf4;
r[7] = syscall(SYS_readv, r[2], 0x20042fe0ul, 0x2ul, 0, 0, 0);
break;
}
return 0;
}
void worker()
{
long i;
pthread_t th[3];
memset(r, -1, sizeof(r));
for (i = 0; i < 3; i++) {
pthread_create([i], 0, thr, (void*)i);
usleep(1);
}
for (i = 0; i < 3; i++) {
pthread_create([i], 0, thr, (void*)i);
if (i % 2 == 0)
usleep(1);
}
usleep(10);
}
int main()
{
int i, status, pids[16];
for (;;) {
for (i = 0; i < 16; i++) {
if ((pids[i] = fork()) == 0) {
worker();
exit(0);
}
}
for (i = 0; i < 16; i++) {
while (waitpid(pids[i], , __WALL) != pids[i]) {
}
}
}
return 0;
}
On commit 92e963f50fc74041b5e9e744c330dca48e04f08d (Jan 24).
