BUG: sleeping function called from invalid context at ./include/linux/percpu-rwsem.h:33 in_atomic(): 1, irqs_disabled(): 0, pid: 9352, name: syz-executor5 4 locks held by syz-executor5/9352: #0: (sb_writers#4){.+.+.+}, at: [] sb_start_write include/linux/fs.h:1573 [inline] #0: (sb_writers#4){.+.+.+}, at: [] mnt_want_write+0x3f/0xb0 fs/namespace.c:391 #1: (&sb->s_type->i_mutex_key#9){++++++}, at: [] inode_lock include/linux/fs.h:766 [inline] #1: (&sb->s_type->i_mutex_key#9){++++++}, at: [] do_truncate2+0x128/0x1f0 fs/open.c:61 #2: (&ei->i_mmap_sem){++++++}, at: [] ext4_setattr+0x11e8/0x2170 fs/ext4/inode.c:5296 #3: (&(&mapping->private_lock)->rlock){+.+...}, at: [] spin_lock include/linux/spinlock.h:302 [inline] #3: (&(&mapping->private_lock)->rlock){+.+...}, at: [] try_to_free_buffers+0x142/0x290 fs/buffer.c:3287 Preemption disabled at:[ 199.862124] [] spin_lock include/linux/spinlock.h:302 [inline] Preemption disabled at:[ 199.862124] [] try_to_free_buffers+0x142/0x290 fs/buffer.c:3287 CPU: 1 PID: 9352 Comm: syz-executor5 Not tainted 4.9.141+ #1 ffff8801db707660 ffffffff81b42e79 ffffffff815bd6e2 0000000000000000 0000000000000101 ffff8801d1b54740 ffff8801d1b54740 ffff8801db707698 ffffffff813f9ecf ffff8801d1b54740 ffffffff82ad6720 0000000000000021 Call Trace: [ 199.903714] [] __dump_stack lib/dump_stack.c:15 [inline] [ 199.903714] [] dump_stack+0xc1/0x128 lib/dump_stack.c:51 [] ___might_sleep.cold.31+0x18a/0x1fc kernel/sched/core.c:7988 [] __might_sleep+0x95/0x1a0 kernel/sched/core.c:7945 [] percpu_down_read_preempt_disable include/linux/percpu-rwsem.h:33 [inline] [] percpu_down_read include/linux/percpu-rwsem.h:58 [inline] [] ext4_writepages+0x16d/0x2e00 fs/ext4/inode.c:2659 [] do_writepages+0xef/0x1d0 mm/page-writeback.c:2331 [] __filemap_fdatawrite_range+0x1a9/0x250 mm/filemap.c:390 [] filemap_write_and_wait_range+0x59/0xb0 mm/filemap.c:578 [] __generic_file_fsync+0x93/0x1a0 fs/libfs.c:974 [] ext4_sync_file+0x659/0x10a0 fs/ext4/fsync.c:116 [] vfs_fsync_range+0x10c/0x260 fs/sync.c:195 [] generic_write_sync include/linux/fs.h:2607 [inline] [] dio_complete+0x512/0x6c0 fs/direct-io.c:282 [] dio_bio_end_aio+0x11c/0x370 fs/direct-io.c:323 [] bio_endio+0x1a5/0x1f0 block/bio.c:1781 [] req_bio_endio block/blk-core.c:157 [inline] [] blk_update_request+0x248/0x9b0 block/blk-core.c:2628 [] scsi_end_request+0x9d/0x5c0 drivers/scsi/scsi_lib.c:606 [] scsi_io_completion+0x273/0x17a0 drivers/scsi/scsi_lib.c:829 [] scsi_finish_command+0x3ba/0x530 drivers/scsi/scsi.c:607 [] scsi_softirq_done+0x250/0x360 drivers/scsi/scsi_lib.c:1567 [] blk_done_softirq+0x27d/0x3e0 block/blk-softirq.c:35 [] __do_softirq+0x20e/0x964 kernel/softirq.c:288 [] invoke_softirq kernel/softirq.c:368 [inline] [] irq_exit+0x11c/0x150 kernel/softirq.c:409 [] exiting_irq arch/x86/include/asm/apic.h:669 [inline] [] do_IRQ+0x10d/0x1c0 arch/x86/kernel/irq.c:252 [] common_interrupt+0x9d/0x9d arch/x86/entry/entry_64.S:461 [ 200.293138] [] ? arch_local_irq_restore arch/x86/include/asm/paravirt.h:768 [inline] [ 200.293138] [] ? lock_acquire+0x173/0x3e0 kernel/locking/lockdep.c:3759 [] __raw_spin_lock include/linux/spinlock_api_smp.h:144 [inline] [] _raw_spin_lock+0x36/0x50 kernel/locking/spinlock.c:151 [] spin_lock include/linux/spinlock.h:302 [inline] [] try_to_free_buffers+0x142/0x290 fs/buffer.c:3287 [] ext4_releasepage+0x211/0x420 fs/ext4/inode.c:3306 [] try_to_release_page+0x138/0x1c0 mm/filemap.c:2941 [] block_invalidatepage+0x24a/0x2f0 fs/buffer.c:1565 [] ext4_invalidatepage+0x11c/0x3a0 fs/ext4/inode.c:3266 [] ext4_da_invalidatepage+0xc0/0xbb0 fs/ext4/inode.c:3111 [] do_invalidatepage mm/truncate.c:99 [inline] [] truncate_complete_page mm/truncate.c:119 [inline] [] truncate_inode_page+0x125/0x260 mm/truncate.c:167 [] truncate_inode_pages_range+0x2be/0x1060 mm/truncate.c:291 [] truncate_inode_pages mm/truncate.c:401 [inline] [] truncate_pagecache+0x66/0x90 mm/truncate.c:706 [] ext4_setattr+0x1211/0x2170 fs/ext4/inode.c:5301 [] notify_change2+0xad7/0xe00 fs/attr.c:313 [] do_truncate2+0x13d/0x1f0 fs/open.c:63 [] handle_truncate fs/namei.c:2990 [inline] [] do_last fs/namei.c:3419 [inline] [] path_openat+0xb86/0x2790 fs/namei.c:3534 [] do_filp_open+0x197/0x270 fs/namei.c:3568 [] do_sys_open+0x30d/0x5c0 fs/open.c:1072 [] SYSC_open fs/open.c:1090 [inline] [] SyS_open fs/open.c:1085 [inline] [] SYSC_creat fs/open.c:1110 [inline] [] SyS_creat+0x27/0x30 fs/open.c:1108 [] do_syscall_64+0x19f/0x550 arch/x86/entry/common.c:285 [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb ========================================================= [ INFO: possible irq lock inversion dependency detected ] 4.9.141+ #1 Tainted: G W --------------------------------------------------------- syz-executor5/9352 just changed the state of lock: (&sbi->s_journal_flag_rwsem){.+.?.+}, at: [] do_writepages+0xef/0x1d0 mm/page-writeback.c:2331 (&ei->i_data_sem){++++..} and interrupts could create inverse lock ordering between them. other info that might help us debug this: Possible interrupt unsafe locking scenario: CPU0 CPU1 ---- ---- lock(&ei->i_data_sem); local_irq_disable(); lock(&sbi->s_journal_flag_rwsem); lock(&ei->i_data_sem); lock(&sbi->s_journal_flag_rwsem); *** DEADLOCK *** 4 locks held by syz-executor5/9352: #0: (sb_writers#4){.+.+.+}, at: [] sb_start_write include/linux/fs.h:1573 [inline] #0: (sb_writers#4){.+.+.+}, at: [] mnt_want_write+0x3f/0xb0 fs/namespace.c:391 #1: (&sb->s_type->i_mutex_key#9){++++++}, at: [] inode_lock include/linux/fs.h:766 [inline] #1: (&sb->s_type->i_mutex_key#9){++++++}, at: [] do_truncate2+0x128/0x1f0 fs/open.c:61 #2: (&ei->i_mmap_sem){++++++}, at: [] ext4_setattr+0x11e8/0x2170 fs/ext4/inode.c:5296 #3: (&(&mapping->private_lock)->rlock){+.+...}, at: [] spin_lock include/linux/spinlock.h:302 [inline] #3: (&(&mapping->private_lock)->rlock){+.+...}, at: [] try_to_free_buffers+0x142/0x290 fs/buffer.c:3287 the shortest dependencies between 2nd lock and 1st lock: -> (&ei->i_data_sem){++++..} ops: 286666 { HARDIRQ-ON-W at: mark_irqflags kernel/locking/lockdep.c:2937 [inline] __lock_acquire+0x10b0/0x4a10 kernel/locking/lockdep.c:3302 lock_acquire+0x130/0x3e0 kernel/locking/lockdep.c:3756 down_write+0x41/0xa0 kernel/locking/rwsem.c:52 ext4_release_file+0x25b/0x2e0 fs/ext4/file.c:50 __fput+0x263/0x700 fs/file_table.c:208 ____fput+0x15/0x20 fs/file_table.c:244 task_work_run+0x10c/0x180 kernel/task_work.c:116 tracehook_notify_resume include/linux/tracehook.h:191 [inline] exit_to_usermode_loop+0x129/0x150 arch/x86/entry/common.c:162 prepare_exit_to_usermode arch/x86/entry/common.c:194 [inline] syscall_return_slowpath arch/x86/entry/common.c:263 [inline] do_syscall_64+0x3e2/0x550 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_swapgs+0x5d/0xdb HARDIRQ-ON-R at: mark_irqflags kernel/locking/lockdep.c:2929 [inline] __lock_acquire+0xb79/0x4a10 kernel/locking/lockdep.c:3302 lock_acquire+0x130/0x3e0 kernel/locking/lockdep.c:3756 down_read+0x44/0xb0 kernel/locking/rwsem.c:22 ext4_map_blocks+0x361/0x16d0 fs/ext4/inode.c:533 ext4_getblk+0x2cc/0x450 fs/ext4/inode.c:943 ext4_find_entry+0xa94/0x12c0 fs/ext4/namei.c:1420 ext4_lookup+0x139/0x5e0 fs/ext4/namei.c:1559 lookup_slow+0x24a/0x470 fs/namei.c:1668 walk_component+0x822/0xcf0 fs/namei.c:1784 lookup_last fs/namei.c:2266 [inline] path_lookupat.isra.10+0x186/0x410 fs/namei.c:2283 filename_lookup.part.18+0x177/0x370 fs/namei.c:2317 filename_lookup fs/namei.c:2310 [inline] user_path_at_empty+0x53/0x70 fs/namei.c:2578 user_path include/linux/namei.h:60 [inline] do_mount+0x134/0x28a0 fs/namespace.c:2816 SYSC_mount fs/namespace.c:3087 [inline] SyS_mount+0xea/0x100 fs/namespace.c:3064 devtmpfs_mount+0x49/0x70 drivers/base/devtmpfs.c:357 prepare_namespace+0x1e4/0x210 init/do_mounts.c:603 kernel_init_freeable+0x38e/0x3ac init/main.c:1036 kernel_init+0x11/0x15e init/main.c:946 ret_from_fork+0x5c/0x70 arch/x86/entry/entry_64.S:373 SOFTIRQ-ON-W at: mark_irqflags kernel/locking/lockdep.c:2941 [inline] __lock_acquire+0xbdd/0x4a10 kernel/locking/lockdep.c:3302 lock_acquire+0x130/0x3e0 kernel/locking/lockdep.c:3756 down_write+0x41/0xa0 kernel/locking/rwsem.c:52 ext4_release_file+0x25b/0x2e0 fs/ext4/file.c:50 __fput+0x263/0x700 fs/file_table.c:208 ____fput+0x15/0x20 fs/file_table.c:244 task_work_run+0x10c/0x180 kernel/task_work.c:116 tracehook_notify_resume include/linux/tracehook.h:191 [inline] exit_to_usermode_loop+0x129/0x150 arch/x86/entry/common.c:162 prepare_exit_to_usermode arch/x86/entry/common.c:194 [inline] syscall_return_slowpath arch/x86/entry/common.c:263 [inline] do_syscall_64+0x3e2/0x550 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_swapgs+0x5d/0xdb SOFTIRQ-ON-R at: mark_irqflags kernel/locking/lockdep.c:2941 [inline] __lock_acquire+0xbdd/0x4a10 kernel/locking/lockdep.c:3302 lock_acquire+0x130/0x3e0 kernel/locking/lockdep.c:3756 down_read+0x44/0xb0 kernel/locking/rwsem.c:22 ext4_map_blocks+0x361/0x16d0 fs/ext4/inode.c:533 ext4_getblk+0x2cc/0x450 fs/ext4/inode.c:943 ext4_find_entry+0xa94/0x12c0 fs/ext4/namei.c:1420 ext4_lookup+0x139/0x5e0 fs/ext4/namei.c:1559 lookup_slow+0x24a/0x470 fs/namei.c:1668 walk_component+0x822/0xcf0 fs/namei.c:1784 lookup_last fs/namei.c:2266 [inline] path_lookupat.isra.10+0x186/0x410 fs/namei.c:2283 filename_lookup.part.18+0x177/0x370 fs/namei.c:2317 filename_lookup fs/namei.c:2310 [inline] user_path_at_empty+0x53/0x70 fs/namei.c:2578 user_path include/linux/namei.h:60 [inline] do_mount+0x134/0x28a0 fs/namespace.c:2816 SYSC_mount fs/namespace.c:3087 [inline] SyS_mount+0xea/0x100 fs/namespace.c:3064 devtmpfs_mount+0x49/0x70 drivers/base/devtmpfs.c:357 prepare_namespace+0x1e4/0x210 init/do_mounts.c:603 kernel_init_freeable+0x38e/0x3ac init/main.c:1036 kernel_init+0x11/0x15e init/main.c:946 ret_from_fork+0x5c/0x70 arch/x86/entry/entry_64.S:373 INITIAL USE at: __lock_acquire+0x654/0x4a10 kernel/locking/lockdep.c:3306 lock_acquire+0x130/0x3e0 kernel/locking/lockdep.c:3756 down_read+0x44/0xb0 kernel/locking/rwsem.c:22 ext4_map_blocks+0x361/0x16d0 fs/ext4/inode.c:533 ext4_getblk+0x2cc/0x450 fs/ext4/inode.c:943 ext4_find_entry+0xa94/0x12c0 fs/ext4/namei.c:1420 ext4_lookup+0x139/0x5e0 fs/ext4/namei.c:1559 lookup_slow+0x24a/0x470 fs/namei.c:1668 walk_component+0x822/0xcf0 fs/namei.c:1784 lookup_last fs/namei.c:2266 [inline] path_lookupat.isra.10+0x186/0x410 fs/namei.c:2283 filename_lookup.part.18+0x177/0x370 fs/namei.c:2317 filename_lookup fs/namei.c:2310 [inline] user_path_at_empty+0x53/0x70 fs/namei.c:2578 user_path include/linux/namei.h:60 [inline] do_mount+0x134/0x28a0 fs/namespace.c:2816 SYSC_mount fs/namespace.c:3087 [inline] SyS_mount+0xea/0x100 fs/namespace.c:3064 devtmpfs_mount+0x49/0x70 drivers/base/devtmpfs.c:357 prepare_namespace+0x1e4/0x210 init/do_mounts.c:603 kernel_init_freeable+0x38e/0x3ac init/main.c:1036 kernel_init+0x11/0x15e init/main.c:946 ret_from_fork+0x5c/0x70 arch/x86/entry/entry_64.S:373 } ... key at: [] __key.74437+0x0/0x40 ... acquired at: lock_acquire+0x130/0x3e0 kernel/locking/lockdep.c:3756 down_write+0x41/0xa0 kernel/locking/rwsem.c:52 ext4_map_blocks+0x6d3/0x16d0 fs/ext4/inode.c:605 mpage_map_one_extent fs/ext4/inode.c:2387 [inline] mpage_map_and_submit_extent fs/ext4/inode.c:2443 [inline] ext4_writepages+0x1551/0x2e00 fs/ext4/inode.c:2783 do_writepages+0xef/0x1d0 mm/page-writeback.c:2331 __filemap_fdatawrite_range+0x1a9/0x250 mm/filemap.c:390 __filemap_fdatawrite mm/filemap.c:398 [inline] filemap_flush+0x23/0x30 mm/filemap.c:423 ext4_alloc_da_blocks+0xd9/0x330 fs/ext4/inode.c:3157 ext4_release_file+0x1ff/0x2e0 fs/ext4/file.c:42 __fput+0x263/0x700 fs/file_table.c:208 ____fput+0x15/0x20 fs/file_table.c:244 task_work_run+0x10c/0x180 kernel/task_work.c:116 tracehook_notify_resume include/linux/tracehook.h:191 [inline] exit_to_usermode_loop+0x129/0x150 arch/x86/entry/common.c:162 prepare_exit_to_usermode arch/x86/entry/common.c:194 [inline] syscall_return_slowpath arch/x86/entry/common.c:263 [inline] do_syscall_64+0x3e2/0x550 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_swapgs+0x5d/0xdb -> (&sbi->s_journal_flag_rwsem){.+.?.+} ops: 3396 { HARDIRQ-ON-R at: mark_irqflags kernel/locking/lockdep.c:2929 [inline] __lock_acquire+0xb79/0x4a10 kernel/locking/lockdep.c:3302 lock_acquire+0x130/0x3e0 kernel/locking/lockdep.c:3756 percpu_down_read_preempt_disable include/linux/percpu-rwsem.h:35 [inline] percpu_down_read include/linux/percpu-rwsem.h:58 [inline] ext4_writepages+0x19e/0x2e00 fs/ext4/inode.c:2659 do_writepages+0xef/0x1d0 mm/page-writeback.c:2331 __filemap_fdatawrite_range+0x1a9/0x250 mm/filemap.c:390 SyS_fadvise64_64+0x6db/0x7d0 mm/fadvise.c:123 SYSC_fadvise64 mm/fadvise.c:182 [inline] SyS_fadvise64+0x2c/0x40 mm/fadvise.c:180 do_syscall_64+0x19f/0x550 arch/x86/entry/common.c:285 entry_SYSCALL_64_after_swapgs+0x5d/0xdb IN-SOFTIRQ-R at: mark_irqflags kernel/locking/lockdep.c:2923 [inline] __lock_acquire+0x1084/0x4a10 kernel/locking/lockdep.c:3302 lock_acquire+0x130/0x3e0 kernel/locking/lockdep.c:3756 percpu_down_read_preempt_disable include/linux/percpu-rwsem.h:35 [inline] percpu_down_read include/linux/percpu-rwsem.h:58 [inline] ext4_writepages+0x19e/0x2e00 fs/ext4/inode.c:2659 do_writepages+0xef/0x1d0 mm/page-writeback.c:2331 __filemap_fdatawrite_range+0x1a9/0x250 mm/filemap.c:390 filemap_write_and_wait_range+0x59/0xb0 mm/filemap.c:578 __generic_file_fsync+0x93/0x1a0 fs/libfs.c:974 ext4_sync_file+0x659/0x10a0 fs/ext4/fsync.c:116 vfs_fsync_range+0x10c/0x260 fs/sync.c:195 generic_write_sync include/linux/fs.h:2607 [inline] dio_complete+0x512/0x6c0 fs/direct-io.c:282 dio_bio_end_aio+0x11c/0x370 fs/direct-io.c:323 bio_endio+0x1a5/0x1f0 block/bio.c:1781 req_bio_endio block/blk-core.c:157 [inline] blk_update_request+0x248/0x9b0 block/blk-core.c:2628 scsi_end_request+0x9d/0x5c0 drivers/scsi/scsi_lib.c:606 scsi_io_completion+0x273/0x17a0 drivers/scsi/scsi_lib.c:829 scsi_finish_command+0x3ba/0x530 drivers/scsi/scsi.c:607 scsi_softirq_done+0x250/0x360 drivers/scsi/scsi_lib.c:1567 blk_done_softirq+0x27d/0x3e0 block/blk-softirq.c:35 __do_softirq+0x20e/0x964 kernel/softirq.c:288 invoke_softirq kernel/softirq.c:368 [inline] irq_exit+0x11c/0x150 kernel/softirq.c:409 exiting_irq arch/x86/include/asm/apic.h:669 [inline] do_IRQ+0x10d/0x1c0 arch/x86/kernel/irq.c:252 ret_from_intr+0x0/0x20 __raw_spin_lock include/linux/spinlock_api_smp.h:144 [inline] _raw_spin_lock+0x36/0x50 kernel/locking/spinlock.c:151 spin_lock include/linux/spinlock.h:302 [inline] try_to_free_buffers+0x142/0x290 fs/buffer.c:3287 ext4_releasepage+0x211/0x420 fs/ext4/inode.c:3306 try_to_release_page+0x138/0x1c0 mm/filemap.c:2941 block_invalidatepage+0x24a/0x2f0 fs/buffer.c:1565 ext4_invalidatepage+0x11c/0x3a0 fs/ext4/inode.c:3266 ext4_da_invalidatepage+0xc0/0xbb0 fs/ext4/inode.c:3111 do_invalidatepage mm/truncate.c:99 [inline] truncate_complete_page mm/truncate.c:119 [inline] truncate_inode_page+0x125/0x260 mm/truncate.c:167 truncate_inode_pages_range+0x2be/0x1060 mm/truncate.c:291 truncate_inode_pages mm/truncate.c:401 [inline] truncate_pagecache+0x66/0x90 mm/truncate.c:706 ext4_setattr+0x1211/0x2170 fs/ext4/inode.c:5301 notify_change2+0xad7/0xe00 fs/attr.c:313 do_truncate2+0x13d/0x1f0 fs/open.c:63 handle_truncate fs/namei.c:2990 [inline] do_last fs/namei.c:3419 [inline] path_openat+0xb86/0x2790 fs/namei.c:3534 do_filp_open+0x197/0x270 fs/namei.c:3568 do_sys_open+0x30d/0x5c0 fs/open.c:1072 SYSC_open fs/open.c:1090 [inline] SyS_open fs/open.c:1085 [inline] SYSC_creat fs/open.c:1110 [inline] SyS_creat+0x27/0x30 fs/open.c:1108 do_syscall_64+0x19f/0x550 arch/x86/entry/common.c:285 entry_SYSCALL_64_after_swapgs+0x5d/0xdb SOFTIRQ-ON-R at: mark_irqflags kernel/locking/lockdep.c:2941 [inline] __lock_acquire+0xbdd/0x4a10 kernel/locking/lockdep.c:3302 lock_acquire+0x130/0x3e0 kernel/locking/lockdep.c:3756 percpu_down_read_preempt_disable include/linux/percpu-rwsem.h:35 [inline] percpu_down_read include/linux/percpu-rwsem.h:58 [inline] ext4_writepages+0x19e/0x2e00 fs/ext4/inode.c:2659 do_writepages+0xef/0x1d0 mm/page-writeback.c:2331 __filemap_fdatawrite_range+0x1a9/0x250 mm/filemap.c:390 SyS_fadvise64_64+0x6db/0x7d0 mm/fadvise.c:123 SYSC_fadvise64 mm/fadvise.c:182 [inline] SyS_fadvise64+0x2c/0x40 mm/fadvise.c:180 do_syscall_64+0x19f/0x550 arch/x86/entry/common.c:285 entry_SYSCALL_64_after_swapgs+0x5d/0xdb RECLAIM_FS-ON-R at: mark_held_locks+0xc7/0x130 kernel/locking/lockdep.c:2660 __lockdep_trace_alloc kernel/locking/lockdep.c:2882 [inline] lockdep_trace_alloc+0x18e/0x2a0 kernel/locking/lockdep.c:2897 slab_pre_alloc_hook mm/slab.h:392 [inline] slab_alloc_node mm/slub.c:2641 [inline] slab_alloc mm/slub.c:2723 [inline] kmem_cache_alloc+0x2d/0x2b0 mm/slub.c:2728 kmem_cache_zalloc include/linux/slab.h:626 [inline] ext4_init_io_end+0x25/0x100 fs/ext4/page-io.c:252 ext4_writepages+0xcd0/0x2e00 fs/ext4/inode.c:2750 do_writepages+0xef/0x1d0 mm/page-writeback.c:2331 __filemap_fdatawrite_range+0x1a9/0x250 mm/filemap.c:390 __filemap_fdatawrite mm/filemap.c:398 [inline] filemap_flush+0x23/0x30 mm/filemap.c:423 ext4_alloc_da_blocks+0xd9/0x330 fs/ext4/inode.c:3157 ext4_release_file+0x1ff/0x2e0 fs/ext4/file.c:42 __fput+0x263/0x700 fs/file_table.c:208 ____fput+0x15/0x20 fs/file_table.c:244 task_work_run+0x10c/0x180 kernel/task_work.c:116 tracehook_notify_resume include/linux/tracehook.h:191 [inline] exit_to_usermode_loop+0x129/0x150 arch/x86/entry/common.c:162 prepare_exit_to_usermode arch/x86/entry/common.c:194 [inline] syscall_return_slowpath arch/x86/entry/common.c:263 [inline] do_syscall_64+0x3e2/0x550 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_swapgs+0x5d/0xdb INITIAL USE at: __lock_acquire+0x654/0x4a10 kernel/locking/lockdep.c:3306 lock_acquire+0x130/0x3e0 kernel/locking/lockdep.c:3756 percpu_down_read_preempt_disable include/linux/percpu-rwsem.h:35 [inline] percpu_down_read include/linux/percpu-rwsem.h:58 [inline] ext4_writepages+0x19e/0x2e00 fs/ext4/inode.c:2659 do_writepages+0xef/0x1d0 mm/page-writeback.c:2331 __filemap_fdatawrite_range+0x1a9/0x250 mm/filemap.c:390 SyS_fadvise64_64+0x6db/0x7d0 mm/fadvise.c:123 SYSC_fadvise64 mm/fadvise.c:182 [inline] SyS_fadvise64+0x2c/0x40 mm/fadvise.c:180 do_syscall_64+0x19f/0x550 arch/x86/entry/common.c:285 entry_SYSCALL_64_after_swapgs+0x5d/0xdb } ... key at: [] rwsem_key.75130+0x0/0x40 ... acquired at: check_usage_forwards+0x14e/0x290 kernel/locking/lockdep.c:2493 mark_lock_irq kernel/locking/lockdep.c:2610 [inline] mark_lock+0x6ec/0x1290 kernel/locking/lockdep.c:3065 mark_irqflags kernel/locking/lockdep.c:2923 [inline] __lock_acquire+0x1084/0x4a10 kernel/locking/lockdep.c:3302 lock_acquire+0x130/0x3e0 kernel/locking/lockdep.c:3756 percpu_down_read_preempt_disable include/linux/percpu-rwsem.h:35 [inline] percpu_down_read include/linux/percpu-rwsem.h:58 [inline] ext4_writepages+0x19e/0x2e00 fs/ext4/inode.c:2659 do_writepages+0xef/0x1d0 mm/page-writeback.c:2331 __filemap_fdatawrite_range+0x1a9/0x250 mm/filemap.c:390 filemap_write_and_wait_range+0x59/0xb0 mm/filemap.c:578 __generic_file_fsync+0x93/0x1a0 fs/libfs.c:974 ext4_sync_file+0x659/0x10a0 fs/ext4/fsync.c:116 vfs_fsync_range+0x10c/0x260 fs/sync.c:195 generic_write_sync include/linux/fs.h:2607 [inline] dio_complete+0x512/0x6c0 fs/direct-io.c:282 dio_bio_end_aio+0x11c/0x370 fs/direct-io.c:323 bio_endio+0x1a5/0x1f0 block/bio.c:1781 req_bio_endio block/blk-core.c:157 [inline] blk_update_request+0x248/0x9b0 block/blk-core.c:2628 scsi_end_request+0x9d/0x5c0 drivers/scsi/scsi_lib.c:606 scsi_io_completion+0x273/0x17a0 drivers/scsi/scsi_lib.c:829 scsi_finish_command+0x3ba/0x530 drivers/scsi/scsi.c:607 scsi_softirq_done+0x250/0x360 drivers/scsi/scsi_lib.c:1567 blk_done_softirq+0x27d/0x3e0 block/blk-softirq.c:35 __do_softirq+0x20e/0x964 kernel/softirq.c:288 invoke_softirq kernel/softirq.c:368 [inline] irq_exit+0x11c/0x150 kernel/softirq.c:409 exiting_irq arch/x86/include/asm/apic.h:669 [inline] do_IRQ+0x10d/0x1c0 arch/x86/kernel/irq.c:252 ret_from_intr+0x0/0x20 __raw_spin_lock include/linux/spinlock_api_smp.h:144 [inline] _raw_spin_lock+0x36/0x50 kernel/locking/spinlock.c:151 spin_lock include/linux/spinlock.h:302 [inline] try_to_free_buffers+0x142/0x290 fs/buffer.c:3287 ext4_releasepage+0x211/0x420 fs/ext4/inode.c:3306 try_to_release_page+0x138/0x1c0 mm/filemap.c:2941 block_invalidatepage+0x24a/0x2f0 fs/buffer.c:1565 ext4_invalidatepage+0x11c/0x3a0 fs/ext4/inode.c:3266 ext4_da_invalidatepage+0xc0/0xbb0 fs/ext4/inode.c:3111 do_invalidatepage mm/truncate.c:99 [inline] truncate_complete_page mm/truncate.c:119 [inline] truncate_inode_page+0x125/0x260 mm/truncate.c:167 truncate_inode_pages_range+0x2be/0x1060 mm/truncate.c:291 truncate_inode_pages mm/truncate.c:401 [inline] truncate_pagecache+0x66/0x90 mm/truncate.c:706 ext4_setattr+0x1211/0x2170 fs/ext4/inode.c:5301 notify_change2+0xad7/0xe00 fs/attr.c:313 do_truncate2+0x13d/0x1f0 fs/open.c:63 handle_truncate fs/namei.c:2990 [inline] do_last fs/namei.c:3419 [inline] path_openat+0xb86/0x2790 fs/namei.c:3534 do_filp_open+0x197/0x270 fs/namei.c:3568 do_sys_open+0x30d/0x5c0 fs/open.c:1072 SYSC_open fs/open.c:1090 [inline] SyS_open fs/open.c:1085 [inline] SYSC_creat fs/open.c:1110 [inline] SyS_creat+0x27/0x30 fs/open.c:1108 do_syscall_64+0x19f/0x550 arch/x86/entry/common.c:285 entry_SYSCALL_64_after_swapgs+0x5d/0xdb stack backtrace: CPU: 1 PID: 9352 Comm: syz-executor5 Tainted: G W 4.9.141+ #1 ffff8801db7072d0 ffffffff81b42e79 ffffffff84010e00 ffff8801db7073a0 ffff8801d1b54740 0000000000000001 ffffffff84010e00 ffff8801db707320 ffffffff813ff4da 0000000100000000 ffffffff83cab520 ffffffff83ca25b0 Call Trace: [ 202.011796] [] __dump_stack lib/dump_stack.c:15 [inline] [ 202.011796] [] dump_stack+0xc1/0x128 lib/dump_stack.c:51 [] print_irq_inversion_bug.cold.38+0x319/0x32d kernel/locking/lockdep.c:2468 [] check_usage_forwards+0x14e/0x290 kernel/locking/lockdep.c:2493 [] mark_lock_irq kernel/locking/lockdep.c:2610 [inline] [] mark_lock+0x6ec/0x1290 kernel/locking/lockdep.c:3065 [] mark_irqflags kernel/locking/lockdep.c:2923 [inline] [] __lock_acquire+0x1084/0x4a10 kernel/locking/lockdep.c:3302 [] lock_acquire+0x130/0x3e0 kernel/locking/lockdep.c:3756 [] percpu_down_read_preempt_disable include/linux/percpu-rwsem.h:35 [inline] [] percpu_down_read include/linux/percpu-rwsem.h:58 [inline] [] ext4_writepages+0x19e/0x2e00 fs/ext4/inode.c:2659 [] do_writepages+0xef/0x1d0 mm/page-writeback.c:2331 [] __filemap_fdatawrite_range+0x1a9/0x250 mm/filemap.c:390 [] filemap_write_and_wait_range+0x59/0xb0 mm/filemap.c:578 [] __generic_file_fsync+0x93/0x1a0 fs/libfs.c:974 [] ext4_sync_file+0x659/0x10a0 fs/ext4/fsync.c:116 [] vfs_fsync_range+0x10c/0x260 fs/sync.c:195 [] generic_write_sync include/linux/fs.h:2607 [inline] [] dio_complete+0x512/0x6c0 fs/direct-io.c:282 [] dio_bio_end_aio+0x11c/0x370 fs/direct-io.c:323 [] bio_endio+0x1a5/0x1f0 block/bio.c:1781 [] req_bio_endio block/blk-core.c:157 [inline] [] blk_update_request+0x248/0x9b0 block/blk-core.c:2628 [] scsi_end_request+0x9d/0x5c0 drivers/scsi/scsi_lib.c:606 [] scsi_io_completion+0x273/0x17a0 drivers/scsi/scsi_lib.c:829 [] scsi_finish_command+0x3ba/0x530 drivers/scsi/scsi.c:607 [] scsi_softirq_done+0x250/0x360 drivers/scsi/scsi_lib.c:1567 [] blk_done_softirq+0x27d/0x3e0 block/blk-softirq.c:35 [] __do_softirq+0x20e/0x964 kernel/softirq.c:288 [] invoke_softirq kernel/softirq.c:368 [inline] [] irq_exit+0x11c/0x150 kernel/softirq.c:409 [] exiting_irq arch/x86/include/asm/apic.h:669 [inline] [] do_IRQ+0x10d/0x1c0 arch/x86/kernel/irq.c:252 [] common_interrupt+0x9d/0x9d arch/x86/entry/entry_64.S:461 [ 202.510166] [] ? arch_local_irq_restore arch/x86/include/asm/paravirt.h:768 [inline] [ 202.510166] [] ? lock_acquire+0x173/0x3e0 kernel/locking/lockdep.c:3759 [] __raw_spin_lock include/linux/spinlock_api_smp.h:144 [inline] [] _raw_spin_lock+0x36/0x50 kernel/locking/spinlock.c:151 [] spin_lock include/linux/spinlock.h:302 [inline] [] try_to_free_buffers+0x142/0x290 fs/buffer.c:3287 [] ext4_releasepage+0x211/0x420 fs/ext4/inode.c:3306 [] try_to_release_page+0x138/0x1c0 mm/filemap.c:2941 [] block_invalidatepage+0x24a/0x2f0 fs/buffer.c:1565 [] ext4_invalidatepage+0x11c/0x3a0 fs/ext4/inode.c:3266 [] ext4_da_invalidatepage+0xc0/0xbb0 fs/ext4/inode.c:3111 [] do_invalidatepage mm/truncate.c:99 [inline] [] truncate_complete_page mm/truncate.c:119 [inline] [] truncate_inode_page+0x125/0x260 mm/truncate.c:167 [] truncate_inode_pages_range+0x2be/0x1060 mm/truncate.c:291 [] truncate_inode_pages mm/truncate.c:401 [inline] [] truncate_pagecache+0x66/0x90 mm/truncate.c:706 [] ext4_setattr+0x1211/0x2170 fs/ext4/inode.c:5301 [] notify_change2+0xad7/0xe00 fs/attr.c:313 [] do_truncate2+0x13d/0x1f0 fs/open.c:63 [] handle_truncate fs/namei.c:2990 [inline] [] do_last fs/namei.c:3419 [inline] [] path_openat+0xb86/0x2790 fs/namei.c:3534 [] do_filp_open+0x197/0x270 fs/namei.c:3568 [] do_sys_open+0x30d/0x5c0 fs/open.c:1072 [] SYSC_open fs/open.c:1090 [inline] [] SyS_open fs/open.c:1085 [inline] [] SYSC_creat fs/open.c:1110 [inline] [] SyS_creat+0x27/0x30 fs/open.c:1108 [] do_syscall_64+0x19f/0x550 arch/x86/entry/common.c:285 [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb BUG: sleeping function called from invalid context at kernel/locking/rwsem.c:51 in_atomic(): 1, irqs_disabled(): 0, pid: 9352, name: syz-executor5 INFO: lockdep is turned off. Preemption disabled at:[ 202.784291] [] spin_lock include/linux/spinlock.h:302 [inline] Preemption disabled at:[ 202.784291] [] try_to_free_buffers+0x142/0x290 fs/buffer.c:3287 CPU: 1 PID: 9352 Comm: syz-executor5 Tainted: G W 4.9.141+ #1 ffff8801db707a20 ffffffff81b42e79 ffffffff815bd6e2 0000000000000000 0000000000000101 ffff8801d1b54740 ffff8801d1b54740 ffff8801db707a58 ffffffff813f9ecf ffff8801d1b54740 ffffffff82a4fa80 0000000000000033 Call Trace: [ 202.827268] [] __dump_stack lib/dump_stack.c:15 [inline] [ 202.827268] [] dump_stack+0xc1/0x128 lib/dump_stack.c:51 [] ___might_sleep.cold.31+0x18a/0x1fc kernel/sched/core.c:7988 [] __might_sleep+0x95/0x1a0 kernel/sched/core.c:7945 [] down_write+0x21/0xa0 kernel/locking/rwsem.c:51 [] inode_lock include/linux/fs.h:766 [inline] [] __generic_file_fsync+0xc1/0x1a0 fs/libfs.c:978 [] ext4_sync_file+0x659/0x10a0 fs/ext4/fsync.c:116 [] vfs_fsync_range+0x10c/0x260 fs/sync.c:195 [] generic_write_sync include/linux/fs.h:2607 [inline] [] dio_complete+0x512/0x6c0 fs/direct-io.c:282 [] dio_bio_end_aio+0x11c/0x370 fs/direct-io.c:323 [] bio_endio+0x1a5/0x1f0 block/bio.c:1781 [] req_bio_endio block/blk-core.c:157 [inline] [] blk_update_request+0x248/0x9b0 block/blk-core.c:2628 [] scsi_end_request+0x9d/0x5c0 drivers/scsi/scsi_lib.c:606 [] scsi_io_completion+0x273/0x17a0 drivers/scsi/scsi_lib.c:829 [] scsi_finish_command+0x3ba/0x530 drivers/scsi/scsi.c:607 [] scsi_softirq_done+0x250/0x360 drivers/scsi/scsi_lib.c:1567 [] blk_done_softirq+0x27d/0x3e0 block/blk-softirq.c:35 [] __do_softirq+0x20e/0x964 kernel/softirq.c:288 [] invoke_softirq kernel/softirq.c:368 [inline] [] irq_exit+0x11c/0x150 kernel/softirq.c:409 [] exiting_irq arch/x86/include/asm/apic.h:669 [inline] [] do_IRQ+0x10d/0x1c0 arch/x86/kernel/irq.c:252 [] common_interrupt+0x9d/0x9d arch/x86/entry/entry_64.S:461 [ 203.028870] [] ? arch_local_irq_restore arch/x86/include/asm/paravirt.h:768 [inline] [ 203.028870] [] ? lock_acquire+0x173/0x3e0 kernel/locking/lockdep.c:3759 [] __raw_spin_lock include/linux/spinlock_api_smp.h:144 [inline] [] _raw_spin_lock+0x36/0x50 kernel/locking/spinlock.c:151 [] spin_lock include/linux/spinlock.h:302 [inline] [] try_to_free_buffers+0x142/0x290 fs/buffer.c:3287 [] ext4_releasepage+0x211/0x420 fs/ext4/inode.c:3306 [] try_to_release_page+0x138/0x1c0 mm/filemap.c:2941 [] block_invalidatepage+0x24a/0x2f0 fs/buffer.c:1565 [] ext4_invalidatepage+0x11c/0x3a0 fs/ext4/inode.c:3266 [] ext4_da_invalidatepage+0xc0/0xbb0 fs/ext4/inode.c:3111 [] do_invalidatepage mm/truncate.c:99 [inline] [] truncate_complete_page mm/truncate.c:119 [inline] [] truncate_inode_page+0x125/0x260 mm/truncate.c:167 [] truncate_inode_pages_range+0x2be/0x1060 mm/truncate.c:291 [] truncate_inode_pages mm/truncate.c:401 [inline] [] truncate_pagecache+0x66/0x90 mm/truncate.c:706 [] ext4_setattr+0x1211/0x2170 fs/ext4/inode.c:5301 [] notify_change2+0xad7/0xe00 fs/attr.c:313 [] do_truncate2+0x13d/0x1f0 fs/open.c:63 [] handle_truncate fs/namei.c:2990 [inline] [] do_last fs/namei.c:3419 [inline] [] path_openat+0xb86/0x2790 fs/namei.c:3534 [] do_filp_open+0x197/0x270 fs/namei.c:3568 [] do_sys_open+0x30d/0x5c0 fs/open.c:1072 [] SYSC_open fs/open.c:1090 [inline] [] SyS_open fs/open.c:1085 [inline] [] SYSC_creat fs/open.c:1110 [inline] [] SyS_creat+0x27/0x30 fs/open.c:1108 [] do_syscall_64+0x19f/0x550 arch/x86/entry/common.c:285 [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb BUG: scheduling while atomic: syz-executor5/9352/0x00000102 INFO: lockdep is turned off. Modules linked in: Preemption disabled at:[ 203.296874] [] spin_lock include/linux/spinlock.h:302 [inline] Preemption disabled at:[ 203.296874] [] try_to_free_buffers+0x142/0x290 fs/buffer.c:3287