============================= WARNING: suspicious RCU usage 4.17.0-rc2+ #24 Not tainted ----------------------------- include/linux/rcupdate.h:304 Illegal context switch in RCU read-side critical section! other info that might help us debug this: rcu_scheduler_active = 2, debug_locks = 1 5 locks held by syz-executor7/4533: #0: (ptrval) (sb_writers#4){.+.+}, at: sb_start_write include/linux/fs.h:1550 [inline] #0: (ptrval) (sb_writers#4){.+.+}, at: mnt_want_write+0x3f/0xc0 fs/namespace.c:386 #1: (ptrval) (&type->i_mutex_dir_key/1){+.+.}, at: inode_lock_nested include/linux/fs.h:748 [inline] #1: (ptrval) (&type->i_mutex_dir_key/1){+.+.}, at: do_unlinkat+0x3c4/0xa10 fs/namei.c:4019 #2: (ptrval) (&sb->s_type->i_mutex_key#10){+.+.}, at: inode_lock include/linux/fs.h:713 [inline] #2: (ptrval) (&sb->s_type->i_mutex_key#10){+.+.}, at: vfs_unlink+0xd1/0x510 fs/namei.c:3961 #3: (ptrval) (jbd2_handle){.+.+}, at: start_this_handle+0x581/0x1250 fs/jbd2/transaction.c:385 #4: (ptrval) (rcu_read_lock){....}, at: gro_list_prepare net/core/dev.c:4947 [inline] #4: (ptrval) (rcu_read_lock){....}, at: dev_gro_receive+0x936/0x2250 net/core/dev.c:5007 stack backtrace: CPU: 1 PID: 4533 Comm: syz-executor7 Not tainted 4.17.0-rc2+ #24 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1b9/0x294 lib/dump_stack.c:113 lockdep_rcu_suspicious+0x14a/0x153 kernel/locking/lockdep.c:4592 rcu_preempt_sleep_check include/linux/rcupdate.h:303 [inline] ___might_sleep+0x26d/0x320 kernel/sched/core.c:6153 __might_sleep+0x95/0x190 kernel/sched/core.c:6141 slab_pre_alloc_hook mm/slab.h:421 [inline] slab_alloc mm/slab.c:3378 [inline] __do_kmalloc mm/slab.c:3716 [inline] __kmalloc+0x2b9/0x760 mm/slab.c:3727 kmalloc_array include/linux/slab.h:631 [inline] kcalloc include/linux/slab.h:642 [inline] numa_crng_init drivers/char/random.c:798 [inline] crng_reseed+0x427/0x920 drivers/char/random.c:923 credit_entropy_bits+0x98d/0xa30 drivers/char/random.c:708 add_interrupt_randomness+0x494/0x860 drivers/char/random.c:1254 handle_irq_event_percpu+0xf9/0x1c0 kernel/irq/handle.c:191 handle_irq_event+0xa7/0x135 kernel/irq/handle.c:206 handle_edge_irq+0x20f/0x870 kernel/irq/chip.c:791 generic_handle_irq_desc include/linux/irqdesc.h:159 [inline] handle_irq+0x18c/0x2e7 arch/x86/kernel/irq_64.c:77 do_IRQ+0x78/0x190 arch/x86/kernel/irq.c:245 common_interrupt+0xf/0xf arch/x86/entry/entry_64.S:642 RIP: 0010:__sanitizer_cov_trace_pc+0x1/0x50 kernel/kcov.c:94 RSP: 0018:ffff8801daf06e30 EFLAGS: 00000282 ORIG_RAX: ffffffffffffffd9 RAX: ffffed003b5e0dd6 RBX: dffffc0000000000 RCX: ffffffff85df71ab RDX: 0000000000000100 RSI: ffff8801ae4edcc0 RDI: ffff8801ced32940 RBP: ffff8801daf06f38 R08: ffff8801a568c400 R09: ffffed003b5e46c2 R10: ffffed003b5e46c2 R11: ffff8801daf23613 R12: ffff8801ae4edcf4 R13: 0000000000000001 R14: 0000000000000000 R15: ffff8801ae4edcc0 dev_gro_receive+0xda2/0x2250 net/core/dev.c:5041 napi_gro_receive+0x139/0x5a0 net/core/dev.c:5176 receive_buf+0xc64/0x2b90 drivers/net/virtio_net.c:959 virtnet_receive drivers/net/virtio_net.c:1214 [inline] virtnet_poll+0x3c8/0xdb5 drivers/net/virtio_net.c:1296 napi_poll net/core/dev.c:5787 [inline] net_rx_action+0x7b7/0x1930 net/core/dev.c:5853 __do_softirq+0x2e0/0xaf5 kernel/softirq.c:285 invoke_softirq kernel/softirq.c:365 [inline] irq_exit+0x1d1/0x200 kernel/softirq.c:405 exiting_irq arch/x86/include/asm/apic.h:525 [inline] do_IRQ+0xf1/0x190 arch/x86/kernel/irq.c:257 common_interrupt+0xf/0xf arch/x86/entry/entry_64.S:642 RIP: 0010:__read_once_size include/linux/compiler.h:188 [inline] RIP: 0010:arch_atomic_read arch/x86/include/asm/atomic.h:31 [inline] RIP: 0010:atomic_read include/asm-generic/atomic-instrumented.h:22 [inline] RIP: 0010:jbd2_journal_stop+0xaa3/0x15a0 fs/jbd2/transaction.c:1649 RSP: 0018:ffff8801a5697788 EFLAGS: 00000246 ORIG_RAX: ffffffffffffffd9 RAX: 0000000000000003 RBX: ffff8801ce006b80 RCX: ffffffff8218b70a RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff8801da416408 RBP: ffff8801a56979f8 R08: ffffed003b482c82 R09: ffffed003b482c81 R10: ffffed003b482c81 R11: ffff8801da41640b R12: ffff8801da416340 R13: ffff8801cc52f380 R14: ffff8801a5697810 R15: 0000000000000001 __ext4_journal_stop+0xde/0x1f0 fs/ext4/ext4_jbd2.c:103 ext4_unlink+0x84b/0x11e0 fs/ext4/namei.c:3048 vfs_unlink+0x2db/0x510 fs/namei.c:3970 do_unlinkat+0x6b8/0xa10 fs/namei.c:4033 __do_sys_unlink fs/namei.c:4080 [inline] __se_sys_unlink fs/namei.c:4078 [inline] __x64_sys_unlink+0x42/0x50 fs/namei.c:4078 do_syscall_64+0x1b1/0x800 arch/x86/entry/common.c:287 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x4556c7 RSP: 002b:00007ffc7bfee718 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000004556c7 RDX: 0000000000d259b3 RSI: 00007ffc7bfee7b0 RDI: 00007ffc7bfee7b0 RBP: 00007ffc7bff04c0 R08: 0000000000000000 R09: 000000000000000c R10: 0000000000000006 R11: 0000000000000206 R12: 0000000000d25940 R13: 0000000000000000 R14: 00000000000001e0 R15: 000000000001e1f2 BUG: sleeping function called from invalid context at mm/slab.h:421 in_atomic(): 1, irqs_disabled(): 1, pid: 4533, name: syz-executor7 5 locks held by syz-executor7/4533: #0: (ptrval) (sb_writers#4){.+.+}, at: sb_start_write include/linux/fs.h:1550 [inline] #0: (ptrval) (sb_writers#4){.+.+}, at: mnt_want_write+0x3f/0xc0 fs/namespace.c:386 #1: (ptrval) (&type->i_mutex_dir_key/1){+.+.}, at: inode_lock_nested include/linux/fs.h:748 [inline] #1: (ptrval) (&type->i_mutex_dir_key/1){+.+.}, at: do_unlinkat+0x3c4/0xa10 fs/namei.c:4019 #2: (ptrval) (&sb->s_type->i_mutex_key#10){+.+.}, at: inode_lock include/linux/fs.h:713 [inline] #2: (ptrval) (&sb->s_type->i_mutex_key#10){+.+.}, at: vfs_unlink+0xd1/0x510 fs/namei.c:3961 #3: (ptrval) (jbd2_handle){.+.+}, at: start_this_handle+0x581/0x1250 fs/jbd2/transaction.c:385 #4: (ptrval) (rcu_read_lock){....}, at: gro_list_prepare net/core/dev.c:4947 [inline] #4: (ptrval) (rcu_read_lock){....}, at: dev_gro_receive+0x936/0x2250 net/core/dev.c:5007 irq event stamp: 871973 hardirqs last enabled at (871972): [] slab_alloc mm/slab.c:3385 [inline] hardirqs last enabled at (871972): [] kmem_cache_alloc+0x26f/0x760 mm/slab.c:3552 hardirqs last disabled at (871973): [] interrupt_entry+0xb5/0xf0 arch/x86/entry/entry_64.S:625 softirqs last enabled at (870982): [] __do_softirq+0x778/0xaf5 kernel/softirq.c:311 softirqs last disabled at (871967): [] invoke_softirq kernel/softirq.c:365 [inline] softirqs last disabled at (871967): [] irq_exit+0x1d1/0x200 kernel/softirq.c:405 CPU: 1 PID: 4533 Comm: syz-executor7 Not tainted 4.17.0-rc2+ #24 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1b9/0x294 lib/dump_stack.c:113 ___might_sleep.cold.87+0x11f/0x13a kernel/sched/core.c:6188 __might_sleep+0x95/0x190 kernel/sched/core.c:6141 slab_pre_alloc_hook mm/slab.h:421 [inline] slab_alloc mm/slab.c:3378 [inline] __do_kmalloc mm/slab.c:3716 [inline] __kmalloc+0x2b9/0x760 mm/slab.c:3727 kmalloc_array include/linux/slab.h:631 [inline] kcalloc include/linux/slab.h:642 [inline] numa_crng_init drivers/char/random.c:798 [inline] crng_reseed+0x427/0x920 drivers/char/random.c:923 credit_entropy_bits+0x98d/0xa30 drivers/char/random.c:708 add_interrupt_randomness+0x494/0x860 drivers/char/random.c:1254 handle_irq_event_percpu+0xf9/0x1c0 kernel/irq/handle.c:191 handle_irq_event+0xa7/0x135 kernel/irq/handle.c:206 handle_edge_irq+0x20f/0x870 kernel/irq/chip.c:791 generic_handle_irq_desc include/linux/irqdesc.h:159 [inline] handle_irq+0x18c/0x2e7 arch/x86/kernel/irq_64.c:77 do_IRQ+0x78/0x190 arch/x86/kernel/irq.c:245 common_interrupt+0xf/0xf arch/x86/entry/entry_64.S:642 RIP: 0010:__sanitizer_cov_trace_pc+0x1/0x50 kernel/kcov.c:94 RSP: 0018:ffff8801daf06e30 EFLAGS: 00000282 ORIG_RAX: ffffffffffffffd9 RAX: ffffed003b5e0dd6 RBX: dffffc0000000000 RCX: ffffffff85df71ab RDX: 0000000000000100 RSI: ffff8801ae4edcc0 RDI: ffff8801ced32940 RBP: ffff8801daf06f38 R08: ffff8801a568c400 R09: ffffed003b5e46c2 R10: ffffed003b5e46c2 R11: ffff8801daf23613 R12: ffff8801ae4edcf4 R13: 0000000000000001 R14: 0000000000000000 R15: ffff8801ae4edcc0 dev_gro_receive+0xda2/0x2250 net/core/dev.c:5041 napi_gro_receive+0x139/0x5a0 net/core/dev.c:5176 receive_buf+0xc64/0x2b90 drivers/net/virtio_net.c:959 virtnet_receive drivers/net/virtio_net.c:1214 [inline] virtnet_poll+0x3c8/0xdb5 drivers/net/virtio_net.c:1296 napi_poll net/core/dev.c:5787 [inline] net_rx_action+0x7b7/0x1930 net/core/dev.c:5853 __do_softirq+0x2e0/0xaf5 kernel/softirq.c:285 invoke_softirq kernel/softirq.c:365 [inline] irq_exit+0x1d1/0x200 kernel/softirq.c:405 exiting_irq arch/x86/include/asm/apic.h:525 [inline] do_IRQ+0xf1/0x190 arch/x86/kernel/irq.c:257 common_interrupt+0xf/0xf arch/x86/entry/entry_64.S:642 RIP: 0010:__read_once_size include/linux/compiler.h:188 [inline] RIP: 0010:arch_atomic_read arch/x86/include/asm/atomic.h:31 [inline] RIP: 0010:atomic_read include/asm-generic/atomic-instrumented.h:22 [inline] RIP: 0010:jbd2_journal_stop+0xaa3/0x15a0 fs/jbd2/transaction.c:1649 RSP: 0018:ffff8801a5697788 EFLAGS: 00000246 ORIG_RAX: ffffffffffffffd9 RAX: 0000000000000003 RBX: ffff8801ce006b80 RCX: ffffffff8218b70a RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff8801da416408 RBP: ffff8801a56979f8 R08: ffffed003b482c82 R09: ffffed003b482c81 R10: ffffed003b482c81 R11: ffff8801da41640b R12: ffff8801da416340 R13: ffff8801cc52f380 R14: ffff8801a5697810 R15: 0000000000000001 __ext4_journal_stop+0xde/0x1f0 fs/ext4/ext4_jbd2.c:103 ext4_unlink+0x84b/0x11e0 fs/ext4/namei.c:3048 vfs_unlink+0x2db/0x510 fs/namei.c:3970 do_unlinkat+0x6b8/0xa10 fs/namei.c:4033 __do_sys_unlink fs/namei.c:4080 [inline] __se_sys_unlink fs/namei.c:4078 [inline] __x64_sys_unlink+0x42/0x50 fs/namei.c:4078 do_syscall_64+0x1b1/0x800 arch/x86/entry/common.c:287 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x4556c7 RSP: 002b:00007ffc7bfee718 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000004556c7 RDX: 0000000000d259b3 RSI: 00007ffc7bfee7b0 RDI: 00007ffc7bfee7b0 RBP: 00007ffc7bff04c0 R08: 0000000000000000 R09: 000000000000000c R10: 0000000000000006 R11: 0000000000000206 R12: 0000000000d25940 R13: 0000000000000000 R14: 00000000000001e0 R15: 000000000001e1f2 BUG: sleeping function called from invalid context at mm/slab.c:3067 in_atomic(): 1, irqs_disabled(): 1, pid: 4533, name: syz-executor7 5 locks held by syz-executor7/4533: #0: (ptrval) (sb_writers#4){.+.+}, at: sb_start_write include/linux/fs.h:1550 [inline] #0: (ptrval) (sb_writers#4){.+.+}, at: mnt_want_write+0x3f/0xc0 fs/namespace.c:386 #1: (ptrval) (&type->i_mutex_dir_key/1){+.+.}, at: inode_lock_nested include/linux/fs.h:748 [inline] #1: (ptrval) (&type->i_mutex_dir_key/1){+.+.}, at: do_unlinkat+0x3c4/0xa10 fs/namei.c:4019 #2: (ptrval) (&sb->s_type->i_mutex_key#10){+.+.}, at: inode_lock include/linux/fs.h:713 [inline] #2: (ptrval) (&sb->s_type->i_mutex_key#10){+.+.}, at: vfs_unlink+0xd1/0x510 fs/namei.c:3961 #3: (ptrval) (jbd2_handle){.+.+}, at: start_this_handle+0x581/0x1250 fs/jbd2/transaction.c:385 #4: (ptrval) (rcu_read_lock){....}, at: gro_list_prepare net/core/dev.c:4947 [inline] #4: (ptrval) (rcu_read_lock){....}, at: dev_gro_receive+0x936/0x2250 net/core/dev.c:5007 irq event stamp: 871973 hardirqs last enabled at (871972): [] slab_alloc mm/slab.c:3385 [inline] hardirqs last enabled at (871972): [] kmem_cache_alloc+0x26f/0x760 mm/slab.c:3552 hardirqs last disabled at (871973): [] interrupt_entry+0xb5/0xf0 arch/x86/entry/entry_64.S:625 softirqs last enabled at (870982): [] __do_softirq+0x778/0xaf5 kernel/softirq.c:311 softirqs last disabled at (871967): [] invoke_softirq kernel/softirq.c:365 [inline] softirqs last disabled at (871967): [] irq_exit+0x1d1/0x200 kernel/softirq.c:405 CPU: 1 PID: 4533 Comm: syz-executor7 Tainted: G W 4.17.0-rc2+ #24 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1b9/0x294 lib/dump_stack.c:113 ___might_sleep.cold.87+0x11f/0x13a kernel/sched/core.c:6188 __might_sleep+0x95/0x190 kernel/sched/core.c:6141 cache_alloc_debugcheck_before mm/slab.c:3067 [inline] slab_alloc mm/slab.c:3382 [inline] __do_kmalloc mm/slab.c:3716 [inline] __kmalloc+0x2f8/0x760 mm/slab.c:3727 kmalloc_array include/linux/slab.h:631 [inline] kcalloc include/linux/slab.h:642 [inline] numa_crng_init drivers/char/random.c:798 [inline] crng_reseed+0x427/0x920 drivers/char/random.c:923 credit_entropy_bits+0x98d/0xa30 drivers/char/random.c:708 add_interrupt_randomness+0x494/0x860 drivers/char/random.c:1254 handle_irq_event_percpu+0xf9/0x1c0 kernel/irq/handle.c:191 handle_irq_event+0xa7/0x135 kernel/irq/handle.c:206 handle_edge_irq+0x20f/0x870 kernel/irq/chip.c:791 generic_handle_irq_desc include/linux/irqdesc.h:159 [inline] handle_irq+0x18c/0x2e7 arch/x86/kernel/irq_64.c:77 do_IRQ+0x78/0x190 arch/x86/kernel/irq.c:245 common_interrupt+0xf/0xf arch/x86/entry/entry_64.S:642 RIP: 0010:__sanitizer_cov_trace_pc+0x1/0x50 kernel/kcov.c:94 RSP: 0018:ffff8801daf06e30 EFLAGS: 00000282 ORIG_RAX: ffffffffffffffd9 RAX: ffffed003b5e0dd6 RBX: dffffc0000000000 RCX: ffffffff85df71ab RDX: 0000000000000100 RSI: ffff8801ae4edcc0 RDI: ffff8801ced32940 RBP: ffff8801daf06f38 R08: ffff8801a568c400 R09: ffffed003b5e46c2 R10: ffffed003b5e46c2 R11: ffff8801daf23613 R12: ffff8801ae4edcf4 R13: 0000000000000001 R14: 0000000000000000 R15: ffff8801ae4edcc0 dev_gro_receive+0xda2/0x2250 net/core/dev.c:5041 napi_gro_receive+0x139/0x5a0 net/core/dev.c:5176 receive_buf+0xc64/0x2b90 drivers/net/virtio_net.c:959 virtnet_receive drivers/net/virtio_net.c:1214 [inline] virtnet_poll+0x3c8/0xdb5 drivers/net/virtio_net.c:1296 napi_poll net/core/dev.c:5787 [inline] net_rx_action+0x7b7/0x1930 net/core/dev.c:5853 __do_softirq+0x2e0/0xaf5 kernel/softirq.c:285 invoke_softirq kernel/softirq.c:365 [inline] irq_exit+0x1d1/0x200 kernel/softirq.c:405 exiting_irq arch/x86/include/asm/apic.h:525 [inline] do_IRQ+0xf1/0x190 arch/x86/kernel/irq.c:257 common_interrupt+0xf/0xf arch/x86/entry/entry_64.S:642 RIP: 0010:__read_once_size include/linux/compiler.h:188 [inline] RIP: 0010:arch_atomic_read arch/x86/include/asm/atomic.h:31 [inline] RIP: 0010:atomic_read include/asm-generic/atomic-instrumented.h:22 [inline] RIP: 0010:jbd2_journal_stop+0xaa3/0x15a0 fs/jbd2/transaction.c:1649 RSP: 0018:ffff8801a5697788 EFLAGS: 00000246 ORIG_RAX: ffffffffffffffd9 RAX: 0000000000000003 RBX: ffff8801ce006b80 RCX: ffffffff8218b70a RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff8801da416408 RBP: ffff8801a56979f8 R08: ffffed003b482c82 R09: ffffed003b482c81 R10: ffffed003b482c81 R11: ffff8801da41640b R12: ffff8801da416340 R13: ffff8801cc52f380 R14: ffff8801a5697810 R15: 0000000000000001 __ext4_journal_stop+0xde/0x1f0 fs/ext4/ext4_jbd2.c:103 ext4_unlink+0x84b/0x11e0 fs/ext4/namei.c:3048 vfs_unlink+0x2db/0x510 fs/namei.c:3970 do_unlinkat+0x6b8/0xa10 fs/namei.c:4033 __do_sys_unlink fs/namei.c:4080 [inline] __se_sys_unlink fs/namei.c:4078 [inline] __x64_sys_unlink+0x42/0x50 fs/namei.c:4078 do_syscall_64+0x1b1/0x800 arch/x86/entry/common.c:287 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x4556c7 RSP: 002b:00007ffc7bfee718 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000004556c7 RDX: 0000000000d259b3 RSI: 00007ffc7bfee7b0 RDI: 00007ffc7bfee7b0 RBP: 00007ffc7bff04c0 R08: 0000000000000000 R09: 000000000000000c R10: 0000000000000006 R11: 0000000000000206 R12: 0000000000d25940 R13: 0000000000000000 R14: 00000000000001e0 R15: 000000000001e1f2 BUG: sleeping function called from invalid context at mm/slab.h:421 in_atomic(): 1, irqs_disabled(): 1, pid: 4533, name: syz-executor7 5 locks held by syz-executor7/4533: #0: (ptrval) (sb_writers#4){.+.+}, at: sb_start_write include/linux/fs.h:1550 [inline] #0: (ptrval) (sb_writers#4){.+.+}, at: mnt_want_write+0x3f/0xc0 fs/namespace.c:386 #1: (ptrval) (&type->i_mutex_dir_key/1){+.+.}, at: inode_lock_nested include/linux/fs.h:748 [inline] #1: (ptrval) (&type->i_mutex_dir_key/1){+.+.}, at: do_unlinkat+0x3c4/0xa10 fs/namei.c:4019 #2: (ptrval) (&sb->s_type->i_mutex_key#10){+.+.}, at: inode_lock include/linux/fs.h:713 [inline] #2: (ptrval) (&sb->s_type->i_mutex_key#10){+.+.}, at: vfs_unlink+0xd1/0x510 fs/namei.c:3961 #3: (ptrval) (jbd2_handle){.+.+}, at: start_this_handle+0x581/0x1250 fs/jbd2/transaction.c:385 #4: (ptrval) (rcu_read_lock){....}, at: gro_list_prepare net/core/dev.c:4947 [inline] #4: (ptrval) (rcu_read_lock){....}, at: dev_gro_receive+0x936/0x2250 net/core/dev.c:5007 irq event stamp: 871973 hardirqs last enabled at (871972): [] slab_alloc mm/slab.c:3385 [inline] hardirqs last enabled at (871972): [] kmem_cache_alloc+0x26f/0x760 mm/slab.c:3552 hardirqs last disabled at (871973): [] interrupt_entry+0xb5/0xf0 arch/x86/entry/entry_64.S:625 softirqs last enabled at (870982): [] __do_softirq+0x778/0xaf5 kernel/softirq.c:311 softirqs last disabled at (871967): [] invoke_softirq kernel/softirq.c:365 [inline] softirqs last disabled at (871967): [] irq_exit+0x1d1/0x200 kernel/softirq.c:405 CPU: 1 PID: 4533 Comm: syz-executor7 Tainted: G W 4.17.0-rc2+ #24 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1b9/0x294 lib/dump_stack.c:113 ___might_sleep.cold.87+0x11f/0x13a kernel/sched/core.c:6188 __might_sleep+0x95/0x190 kernel/sched/core.c:6141 slab_pre_alloc_hook mm/slab.h:421 [inline] slab_alloc_node mm/slab.c:3299 [inline] kmem_cache_alloc_node_trace+0x260/0x770 mm/slab.c:3661 kmalloc_node include/linux/slab.h:550 [inline] numa_crng_init drivers/char/random.c:800 [inline] crng_reseed+0x49f/0x920 drivers/char/random.c:923 credit_entropy_bits+0x98d/0xa30 drivers/char/random.c:708 add_interrupt_randomness+0x494/0x860 drivers/char/random.c:1254 handle_irq_event_percpu+0xf9/0x1c0 kernel/irq/handle.c:191 handle_irq_event+0xa7/0x135 kernel/irq/handle.c:206 handle_edge_irq+0x20f/0x870 kernel/irq/chip.c:791 generic_handle_irq_desc include/linux/irqdesc.h:159 [inline] handle_irq+0x18c/0x2e7 arch/x86/kernel/irq_64.c:77 do_IRQ+0x78/0x190 arch/x86/kernel/irq.c:245 common_interrupt+0xf/0xf arch/x86/entry/entry_64.S:642 RIP: 0010:__sanitizer_cov_trace_pc+0x1/0x50 kernel/kcov.c:94 RSP: 0018:ffff8801daf06e30 EFLAGS: 00000282 ORIG_RAX: ffffffffffffffd9 RAX: ffffed003b5e0dd6 RBX: dffffc0000000000 RCX: ffffffff85df71ab RDX: 0000000000000100 RSI: ffff8801ae4edcc0 RDI: ffff8801ced32940 RBP: ffff8801daf06f38 R08: ffff8801a568c400 R09: ffffed003b5e46c2 R10: ffffed003b5e46c2 R11: ffff8801daf23613 R12: ffff8801ae4edcf4 R13: 0000000000000001 R14: 0000000000000000 R15: ffff8801ae4edcc0 dev_gro_receive+0xda2/0x2250 net/core/dev.c:5041 napi_gro_receive+0x139/0x5a0 net/core/dev.c:5176 receive_buf+0xc64/0x2b90 drivers/net/virtio_net.c:959 virtnet_receive drivers/net/virtio_net.c:1214 [inline] virtnet_poll+0x3c8/0xdb5 drivers/net/virtio_net.c:1296 napi_poll net/core/dev.c:5787 [inline] net_rx_action+0x7b7/0x1930 net/core/dev.c:5853 __do_softirq+0x2e0/0xaf5 kernel/softirq.c:285 invoke_softirq kernel/softirq.c:365 [inline] irq_exit+0x1d1/0x200 kernel/softirq.c:405 exiting_irq arch/x86/include/asm/apic.h:525 [inline] do_IRQ+0xf1/0x190 arch/x86/kernel/irq.c:257 common_interrupt+0xf/0xf arch/x86/entry/entry_64.S:642 RIP: 0010:__read_once_size include/linux/compiler.h:188 [inline] RIP: 0010:arch_atomic_read arch/x86/include/asm/atomic.h:31 [inline] RIP: 0010:atomic_read include/asm-generic/atomic-instrumented.h:22 [inline] RIP: 0010:jbd2_journal_stop+0xaa3/0x15a0 fs/jbd2/transaction.c:1649 RSP: 0018:ffff8801a5697788 EFLAGS: 00000246 ORIG_RAX: ffffffffffffffd9 RAX: 0000000000000003 RBX: ffff8801ce006b80 RCX: ffffffff8218b70a RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff8801da416408 RBP: ffff8801a56979f8 R08: ffffed003b482c82 R09: ffffed003b482c81 R10: ffffed003b482c81 R11: ffff8801da41640b R12: ffff8801da416340 R13: ffff8801cc52f380 R14: ffff8801a5697810 R15: 0000000000000001 __ext4_journal_stop+0xde/0x1f0 fs/ext4/ext4_jbd2.c:103 ext4_unlink+0x84b/0x11e0 fs/ext4/namei.c:3048 vfs_unlink+0x2db/0x510 fs/namei.c:3970 do_unlinkat+0x6b8/0xa10 fs/namei.c:4033 __do_sys_unlink fs/namei.c:4080 [inline] __se_sys_unlink fs/namei.c:4078 [inline] __x64_sys_unlink+0x42/0x50 fs/namei.c:4078 do_syscall_64+0x1b1/0x800 arch/x86/entry/common.c:287 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x4556c7 RSP: 002b:00007ffc7bfee718 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000004556c7 RDX: 0000000000d259b3 RSI: 00007ffc7bfee7b0 RDI: 00007ffc7bfee7b0 RBP: 00007ffc7bff04c0 R08: 0000000000000000 R09: 000000000000000c R10: 0000000000000006 R11: 0000000000000206 R12: 0000000000d25940 R13: 0000000000000000 R14: 00000000000001e0 R15: 000000000001e1f2 BUG: sleeping function called from invalid context at mm/slab.c:3067 in_atomic(): 1, irqs_disabled(): 1, pid: 4533, name: syz-executor7 5 locks held by syz-executor7/4533: #0: (ptrval) (sb_writers#4){.+.+}, at: sb_start_write include/linux/fs.h:1550 [inline] #0: (ptrval) (sb_writers#4){.+.+}, at: mnt_want_write+0x3f/0xc0 fs/namespace.c:386 #1: (ptrval) (&type->i_mutex_dir_key/1){+.+.}, at: inode_lock_nested include/linux/fs.h:748 [inline] #1: (ptrval) (&type->i_mutex_dir_key/1){+.+.}, at: do_unlinkat+0x3c4/0xa10 fs/namei.c:4019 #2: (ptrval) (&sb->s_type->i_mutex_key#10){+.+.}, at: inode_lock include/linux/fs.h:713 [inline] #2: (ptrval) (&sb->s_type->i_mutex_key#10){+.+.}, at: vfs_unlink+0xd1/0x510 fs/namei.c:3961 #3: (ptrval) (jbd2_handle){.+.+}, at: start_this_handle+0x581/0x1250 fs/jbd2/transaction.c:385 #4: (ptrval) (rcu_read_lock){....}, at: gro_list_prepare net/core/dev.c:4947 [inline] #4: (ptrval) (rcu_read_lock){....}, at: dev_gro_receive+0x936/0x2250 net/core/dev.c:5007 irq event stamp: 871973 hardirqs last enabled at (871972): [] slab_alloc mm/slab.c:3385 [inline] hardirqs last enabled at (871972): [] kmem_cache_alloc+0x26f/0x760 mm/slab.c:3552 hardirqs last disabled at (871973): [] interrupt_entry+0xb5/0xf0 arch/x86/entry/entry_64.S:625 softirqs last enabled at (870982): [] __do_softirq+0x778/0xaf5 kernel/softirq.c:311 softirqs last disabled at (871967): [] invoke_softirq kernel/softirq.c:365 [inline] softirqs last disabled at (871967): [] irq_exit+0x1d1/0x200 kernel/softirq.c:405 CPU: 1 PID: 4533 Comm: syz-executor7 Tainted: G W 4.17.0-rc2+ #24 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1b9/0x294 lib/dump_stack.c:113 ___might_sleep.cold.87+0x11f/0x13a kernel/sched/core.c:6188 __might_sleep+0x95/0x190 kernel/sched/core.c:6141 cache_alloc_debugcheck_before mm/slab.c:3067 [inline] slab_alloc_node mm/slab.c:3303 [inline] kmem_cache_alloc_node_trace+0x29f/0x770 mm/slab.c:3661 kmalloc_node include/linux/slab.h:550 [inline] numa_crng_init drivers/char/random.c:800 [inline] crng_reseed+0x49f/0x920 drivers/char/random.c:923 credit_entropy_bits+0x98d/0xa30 drivers/char/random.c:708 add_interrupt_randomness+0x494/0x860 drivers/char/random.c:1254 handle_irq_event_percpu+0xf9/0x1c0 kernel/irq/handle.c:191 handle_irq_event+0xa7/0x135 kernel/irq/handle.c:206 handle_edge_irq+0x20f/0x870 kernel/irq/chip.c:791 generic_handle_irq_desc include/linux/irqdesc.h:159 [inline] handle_irq+0x18c/0x2e7 arch/x86/kernel/irq_64.c:77 do_IRQ+0x78/0x190 arch/x86/kernel/irq.c:245 common_interrupt+0xf/0xf arch/x86/entry/entry_64.S:642 RIP: 0010:__sanitizer_cov_trace_pc+0x1/0x50 kernel/kcov.c:94 RSP: 0018:ffff8801daf06e30 EFLAGS: 00000282 ORIG_RAX: ffffffffffffffd9 RAX: ffffed003b5e0dd6 RBX: dffffc0000000000 RCX: ffffffff85df71ab RDX: 0000000000000100 RSI: ffff8801ae4edcc0 RDI: ffff8801ced32940 RBP: ffff8801daf06f38 R08: ffff8801a568c400 R09: ffffed003b5e46c2 R10: ffffed003b5e46c2 R11: ffff8801daf23613 R12: ffff8801ae4edcf4 R13: 0000000000000001 R14: 0000000000000000 R15: ffff8801ae4edcc0 dev_gro_receive+0xda2/0x2250 net/core/dev.c:5041 napi_gro_receive+0x139/0x5a0 net/core/dev.c:5176 receive_buf+0xc64/0x2b90 drivers/net/virtio_net.c:959 virtnet_receive drivers/net/virtio_net.c:1214 [inline] virtnet_poll+0x3c8/0xdb5 drivers/net/virtio_net.c:1296 napi_poll net/core/dev.c:5787 [inline] net_rx_action+0x7b7/0x1930 net/core/dev.c:5853 __do_softirq+0x2e0/0xaf5 kernel/softirq.c:285 invoke_softirq kernel/softirq.c:365 [inline] irq_exit+0x1d1/0x200 kernel/softirq.c:405 exiting_irq arch/x86/include/asm/apic.h:525 [inline] do_IRQ+0xf1/0x190 arch/x86/kernel/irq.c:257 common_interrupt+0xf/0xf arch/x86/entry/entry_64.S:642 RIP: 0010:__read_once_size include/linux/compiler.h:188 [inline] RIP: 0010:arch_atomic_read arch/x86/include/asm/atomic.h:31 [inline] RIP: 0010:atomic_read include/asm-generic/atomic-instrumented.h:22 [inline] RIP: 0010:jbd2_journal_stop+0xaa3/0x15a0 fs/jbd2/transaction.c:1649 RSP: 0018:ffff8801a5697788 EFLAGS: 00000246 ORIG_RAX: ffffffffffffffd9 RAX: 0000000000000003 RBX: ffff8801ce006b80 RCX: ffffffff8218b70a RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff8801da416408 RBP: ffff8801a56979f8 R08: ffffed003b482c82 R09: ffffed003b482c81 R10: ffffed003b482c81 R11: ffff8801da41640b R12: ffff8801da416340 R13: ffff8801cc52f380 R14: ffff8801a5697810 R15: 0000000000000001 __ext4_journal_stop+0xde/0x1f0 fs/ext4/ext4_jbd2.c:103 ext4_unlink+0x84b/0x11e0 fs/ext4/namei.c:3048 vfs_unlink+0x2db/0x510 fs/namei.c:3970 do_unlinkat+0x6b8/0xa10 fs/namei.c:4033 __do_sys_unlink fs/namei.c:4080 [inline] __se_sys_unlink fs/namei.c:4078 [inline] __x64_sys_unlink+0x42/0x50 fs/namei.c:4078 do_syscall_64+0x1b1/0x800 arch/x86/entry/common.c:287 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x4556c7 RSP: 002b:00007ffc7bfee718 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000004556c7 RDX: 0000000000d259b3 RSI: 00007ffc7bfee7b0 RDI: 00007ffc7bfee7b0 RBP: 00007ffc7bff04c0 R08: 0000000000000000 R09: 000000000000000c R10: 0000000000000006 R11: 0000000000000206 R12: 0000000000d25940 R13: 0000000000000000 R14: 00000000000001e0 R15: 000000000001e1f2 random: crng init done devpts: called with bogus options lo: Invalid MTU -734107472 requested, hw min 0 devpts: called with bogus options lo: Invalid MTU -734107472 requested, hw min 0 tmpfs: No value for mount option 'ח 7Ht"02P8ϮY(~(p;»o+Gb4b*k'(ƪ4pA _L' device lo entered promiscuous mode can: request_module (can-proto-0) failed. gfs2: gfs2 mount does not exist devpts: called with bogus options can: request_module (can-proto-0) failed. gfs2: gfs2 mount does not exist IPVS: ftp: loaded support on port[0] = 21