[] vfs_write+0x187/0x520 fs/read_write.c:557 [] SYSC_write fs/read_write.c:604 [inline] [] SyS_write+0xd9/0x1c0 fs/read_write.c:596 [] do_syscall_64+0x19f/0x550 arch/x86/entry/common.c:285 [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb BUG: sleeping function called from invalid context at ./include/linux/percpu-rwsem.h:33 in_atomic(): 1, irqs_disabled(): 0, pid: 3879, name: syz-executor.3 1 lock held by syz-executor.3/3879: #0: (sk_lock-AF_INET6){+.+.+.}, at: [] lock_sock include/net/sock.h:1404 [inline] #0: (sk_lock-AF_INET6){+.+.+.}, at: [] do_tcp_setsockopt.isra.5+0x124/0x1ca0 net/ipv4/tcp.c:2486 Preemption disabled at:[ 111.834599] [] __do_softirq+0xdd/0x964 kernel/softirq.c:265 CPU: 1 PID: 3879 Comm: syz-executor.3 Not tainted 4.9.141+ #1 ffff8801db707660 ffffffff81b42e79 ffffffff8281ca6d 0000000000000000 0000000000000100 ffff88019f5b97c0 ffff88019f5b97c0 ffff8801db707698 ffffffff813f9ecf ffff88019f5b97c0 ffffffff82ad6720 0000000000000021 Call Trace: [ 111.876175] [] __dump_stack lib/dump_stack.c:15 [inline] [ 111.876175] [] dump_stack+0xc1/0x128 lib/dump_stack.c:51 [] ___might_sleep.cold.31+0x18a/0x1fc kernel/sched/core.c:7988 [] __might_sleep+0x95/0x1a0 kernel/sched/core.c:7945 [] percpu_down_read_preempt_disable include/linux/percpu-rwsem.h:33 [inline] [] percpu_down_read include/linux/percpu-rwsem.h:58 [inline] [] ext4_writepages+0x16d/0x2e00 fs/ext4/inode.c:2659 [] do_writepages+0xef/0x1d0 mm/page-writeback.c:2331 [] __filemap_fdatawrite_range+0x1a9/0x250 mm/filemap.c:390 [] filemap_write_and_wait_range+0x59/0xb0 mm/filemap.c:578 [] __generic_file_fsync+0x93/0x1a0 fs/libfs.c:974 [] ext4_sync_file+0x659/0x10a0 fs/ext4/fsync.c:116 [] vfs_fsync_range+0x10c/0x260 fs/sync.c:195 [] generic_write_sync include/linux/fs.h:2607 [inline] [] dio_complete+0x512/0x6c0 fs/direct-io.c:282 Mem-Info: active_anon:63818 inactive_anon:4959 isolated_anon:0 active_file:4445 inactive_file:19103 isolated_file:0 unevictable:0 dirty:140 writeback:259 unstable:0 slab_reclaimable:4892 slab_unreclaimable:60726 mapped:59513 shmem:6993 pagetables:1501 bounce:0 free:1429113 free_pcp:498 free_cma:0 Node 0 active_anon:255272kB inactive_anon:19836kB active_file:17780kB inactive_file:76412kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:238052kB dirty:560kB writeback:1036kB shmem:27972kB writeback_tmp:0kB unstable:0kB pages_scanned:0 all_unreclaimable? no DMA32 free:3019464kB min:4696kB low:7712kB high:10728kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:3020132kB mlocked:0kB slab_reclaimable:0kB slab_unreclaimable:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:668kB local_pcp:32kB free_cma:0kB Normal free:2696988kB min:5580kB low:9168kB high:12756kB active_anon:255272kB inactive_anon:19836kB active_file:17780kB inactive_file:76412kB unevictable:0kB writepending:1448kB present:4718592kB managed:3589316kB mlocked:0kB slab_reclaimable:19568kB slab_unreclaimable:242904kB kernel_stack:5344kB pagetables:6004kB bounce:0kB free_pcp:1324kB local_pcp:688kB free_cma:0kB DMA32: 2*4kB (UM) 2*8kB (M) 1*16kB (M) 3*32kB (UM) 5*64kB (UM) 4*128kB (UM) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 2*2048kB (UM) 735*4096kB (M) = 3019464kB 0 pages in swap cache Swap cache stats: add 0, delete 0, find 0/0 Free swap = 0kB Total swap = 0kB 1965979 pages RAM 0 pages HighMem/MovableOnly 313617 pages reserved [] dio_bio_end_aio+0x11c/0x370 fs/direct-io.c:323 [] bio_endio+0x1a5/0x1f0 block/bio.c:1781 [] req_bio_endio block/blk-core.c:157 [inline] [] blk_update_request+0x248/0x9b0 block/blk-core.c:2628 [] scsi_end_request+0x9d/0x5c0 drivers/scsi/scsi_lib.c:606 [] scsi_io_completion+0x273/0x17a0 drivers/scsi/scsi_lib.c:829 [] scsi_finish_command+0x3ba/0x530 drivers/scsi/scsi.c:607 [] scsi_softirq_done+0x250/0x360 drivers/scsi/scsi_lib.c:1567 [] blk_done_softirq+0x27d/0x3e0 block/blk-softirq.c:35 [] __do_softirq+0x20e/0x964 kernel/softirq.c:288 [] invoke_softirq kernel/softirq.c:368 [inline] [] irq_exit+0x11c/0x150 kernel/softirq.c:409 [] exiting_irq arch/x86/include/asm/apic.h:669 [inline] [] do_IRQ+0x10d/0x1c0 arch/x86/kernel/irq.c:252 [] common_interrupt+0x9d/0x9d arch/x86/entry/entry_64.S:461 [] __might_fault+0xe9/0x1d0 mm/memory.c:4023 [] copy_from_user arch/x86/include/asm/uaccess.h:711 [inline] [] tcp_repair_options_est net/ipv4/tcp.c:2401 [inline] [] do_tcp_setsockopt.isra.5+0x1736/0x1ca0 net/ipv4/tcp.c:2574 [] tcp_setsockopt+0xb6/0xe0 net/ipv4/tcp.c:2760 [] sock_common_setsockopt+0x9a/0xe0 net/core/sock.c:2706 [] SYSC_setsockopt net/socket.c:1785 [inline] [] SyS_setsockopt+0x166/0x260 net/socket.c:1764 [] do_syscall_64+0x19f/0x550 arch/x86/entry/common.c:285 [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb ========================================================= [ INFO: possible irq lock inversion dependency detected ] 4.9.141+ #1 Tainted: G W --------------------------------------------------------- syz-executor.3/3879 just changed the state of lock: (&sbi->s_journal_flag_rwsem){.+.?.+}, at: [] do_writepages+0xef/0x1d0 mm/page-writeback.c:2331 (&ei->i_data_sem){++++..} and interrupts could create inverse lock ordering between them. other info that might help us debug this: Possible interrupt unsafe locking scenario: CPU0 CPU1 ---- ---- lock(&ei->i_data_sem); local_irq_disable(); lock(&sbi->s_journal_flag_rwsem); lock(&ei->i_data_sem); lock(&sbi->s_journal_flag_rwsem); *** DEADLOCK *** 1 lock held by syz-executor.3/3879: #0: (sk_lock-AF_INET6){+.+.+.}, at: [] lock_sock include/net/sock.h:1404 [inline] #0: (sk_lock-AF_INET6){+.+.+.}, at: [] do_tcp_setsockopt.isra.5+0x124/0x1ca0 net/ipv4/tcp.c:2486 the shortest dependencies between 2nd lock and 1st lock: -> (&ei->i_data_sem){++++..} ops: 42683 { HARDIRQ-ON-W at: mark_irqflags kernel/locking/lockdep.c:2937 [inline] __lock_acquire+0x10b0/0x4a10 kernel/locking/lockdep.c:3302 lock_acquire+0x130/0x3e0 kernel/locking/lockdep.c:3756 down_write+0x41/0xa0 kernel/locking/rwsem.c:52 ext4_release_file+0x25b/0x2e0 fs/ext4/file.c:50 __fput+0x263/0x700 fs/file_table.c:208 ____fput+0x15/0x20 fs/file_table.c:244 task_work_run+0x10c/0x180 kernel/task_work.c:116 tracehook_notify_resume include/linux/tracehook.h:191 [inline] exit_to_usermode_loop+0x129/0x150 arch/x86/entry/common.c:162 prepare_exit_to_usermode arch/x86/entry/common.c:194 [inline] syscall_return_slowpath arch/x86/entry/common.c:263 [inline] do_syscall_64+0x3e2/0x550 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_swapgs+0x5d/0xdb HARDIRQ-ON-R at: mark_irqflags kernel/locking/lockdep.c:2929 [inline] __lock_acquire+0xb79/0x4a10 kernel/locking/lockdep.c:3302 lock_acquire+0x130/0x3e0 kernel/locking/lockdep.c:3756 down_read+0x44/0xb0 kernel/locking/rwsem.c:22 ext4_map_blocks+0x361/0x16d0 fs/ext4/inode.c:533 ext4_getblk+0x2cc/0x450 fs/ext4/inode.c:943 ext4_find_entry+0xa94/0x12c0 fs/ext4/namei.c:1420 ext4_lookup+0x139/0x5e0 fs/ext4/namei.c:1559 lookup_slow+0x24a/0x470 fs/namei.c:1668 walk_component+0x822/0xcf0 fs/namei.c:1784 lookup_last fs/namei.c:2266 [inline] path_lookupat.isra.10+0x186/0x410 fs/namei.c:2283 filename_lookup.part.18+0x177/0x370 fs/namei.c:2317 filename_lookup fs/namei.c:2310 [inline] user_path_at_empty+0x53/0x70 fs/namei.c:2578 user_path include/linux/namei.h:60 [inline] do_mount+0x134/0x28a0 fs/namespace.c:2816 SYSC_mount fs/namespace.c:3087 [inline] SyS_mount+0xea/0x100 fs/namespace.c:3064 devtmpfs_mount+0x49/0x70 drivers/base/devtmpfs.c:357 prepare_namespace+0x1e4/0x210 init/do_mounts.c:603 kernel_init_freeable+0x38e/0x3ac init/main.c:1036 kernel_init+0x11/0x15e init/main.c:946 ret_from_fork+0x5c/0x70 arch/x86/entry/entry_64.S:373 SOFTIRQ-ON-W at: mark_irqflags kernel/locking/lockdep.c:2941 [inline] __lock_acquire+0xbdd/0x4a10 kernel/locking/lockdep.c:3302 lock_acquire+0x130/0x3e0 kernel/locking/lockdep.c:3756 down_write+0x41/0xa0 kernel/locking/rwsem.c:52 ext4_release_file+0x25b/0x2e0 fs/ext4/file.c:50 __fput+0x263/0x700 fs/file_table.c:208 ____fput+0x15/0x20 fs/file_table.c:244 task_work_run+0x10c/0x180 kernel/task_work.c:116 tracehook_notify_resume include/linux/tracehook.h:191 [inline] exit_to_usermode_loop+0x129/0x150 arch/x86/entry/common.c:162 prepare_exit_to_usermode arch/x86/entry/common.c:194 [inline] syscall_return_slowpath arch/x86/entry/common.c:263 [inline] do_syscall_64+0x3e2/0x550 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_swapgs+0x5d/0xdb SOFTIRQ-ON-R at: mark_irqflags kernel/locking/lockdep.c:2941 [inline] __lock_acquire+0xbdd/0x4a10 kernel/locking/lockdep.c:3302 lock_acquire+0x130/0x3e0 kernel/locking/lockdep.c:3756 down_read+0x44/0xb0 kernel/locking/rwsem.c:22 ext4_map_blocks+0x361/0x16d0 fs/ext4/inode.c:533 ext4_getblk+0x2cc/0x450 fs/ext4/inode.c:943 ext4_find_entry+0xa94/0x12c0 fs/ext4/namei.c:1420 ext4_lookup+0x139/0x5e0 fs/ext4/namei.c:1559 lookup_slow+0x24a/0x470 fs/namei.c:1668 walk_component+0x822/0xcf0 fs/namei.c:1784 lookup_last fs/namei.c:2266 [inline] path_lookupat.isra.10+0x186/0x410 fs/namei.c:2283 filename_lookup.part.18+0x177/0x370 fs/namei.c:2317 filename_lookup fs/namei.c:2310 [inline] user_path_at_empty+0x53/0x70 fs/namei.c:2578 user_path include/linux/namei.h:60 [inline] do_mount+0x134/0x28a0 fs/namespace.c:2816 SYSC_mount fs/namespace.c:3087 [inline] SyS_mount+0xea/0x100 fs/namespace.c:3064 devtmpfs_mount+0x49/0x70 drivers/base/devtmpfs.c:357 prepare_namespace+0x1e4/0x210 init/do_mounts.c:603 kernel_init_freeable+0x38e/0x3ac init/main.c:1036 kernel_init+0x11/0x15e init/main.c:946 ret_from_fork+0x5c/0x70 arch/x86/entry/entry_64.S:373 INITIAL USE at: __lock_acquire+0x654/0x4a10 kernel/locking/lockdep.c:3306 lock_acquire+0x130/0x3e0 kernel/locking/lockdep.c:3756 down_read+0x44/0xb0 kernel/locking/rwsem.c:22 ext4_map_blocks+0x361/0x16d0 fs/ext4/inode.c:533 ext4_getblk+0x2cc/0x450 fs/ext4/inode.c:943 ext4_find_entry+0xa94/0x12c0 fs/ext4/namei.c:1420 ext4_lookup+0x139/0x5e0 fs/ext4/namei.c:1559 lookup_slow+0x24a/0x470 fs/namei.c:1668 walk_component+0x822/0xcf0 fs/namei.c:1784 lookup_last fs/namei.c:2266 [inline] path_lookupat.isra.10+0x186/0x410 fs/namei.c:2283 filename_lookup.part.18+0x177/0x370 fs/namei.c:2317 filename_lookup fs/namei.c:2310 [inline] user_path_at_empty+0x53/0x70 fs/namei.c:2578 user_path include/linux/namei.h:60 [inline] do_mount+0x134/0x28a0 fs/namespace.c:2816 SYSC_mount fs/namespace.c:3087 [inline] SyS_mount+0xea/0x100 fs/namespace.c:3064 devtmpfs_mount+0x49/0x70 drivers/base/devtmpfs.c:357 prepare_namespace+0x1e4/0x210 init/do_mounts.c:603 kernel_init_freeable+0x38e/0x3ac init/main.c:1036 kernel_init+0x11/0x15e init/main.c:946 ret_from_fork+0x5c/0x70 arch/x86/entry/entry_64.S:373 } ... key at: [] __key.74437+0x0/0x40 ... acquired at: lock_acquire+0x130/0x3e0 kernel/locking/lockdep.c:3756 down_write+0x41/0xa0 kernel/locking/rwsem.c:52 ext4_map_blocks+0x6d3/0x16d0 fs/ext4/inode.c:605 mpage_map_one_extent fs/ext4/inode.c:2387 [inline] mpage_map_and_submit_extent fs/ext4/inode.c:2443 [inline] ext4_writepages+0x1551/0x2e00 fs/ext4/inode.c:2783 do_writepages+0xef/0x1d0 mm/page-writeback.c:2331 __filemap_fdatawrite_range+0x1a9/0x250 mm/filemap.c:390 __filemap_fdatawrite mm/filemap.c:398 [inline] filemap_flush+0x23/0x30 mm/filemap.c:423 ext4_alloc_da_blocks+0xd9/0x330 fs/ext4/inode.c:3157 ext4_release_file+0x1ff/0x2e0 fs/ext4/file.c:42 __fput+0x263/0x700 fs/file_table.c:208 ____fput+0x15/0x20 fs/file_table.c:244 task_work_run+0x10c/0x180 kernel/task_work.c:116 tracehook_notify_resume include/linux/tracehook.h:191 [inline] exit_to_usermode_loop+0x129/0x150 arch/x86/entry/common.c:162 prepare_exit_to_usermode arch/x86/entry/common.c:194 [inline] syscall_return_slowpath arch/x86/entry/common.c:263 [inline] do_syscall_64+0x3e2/0x550 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_swapgs+0x5d/0xdb -> (&sbi->s_journal_flag_rwsem){.+.?.+} ops: 519 { HARDIRQ-ON-R at: mark_irqflags kernel/locking/lockdep.c:2929 [inline] __lock_acquire+0xb79/0x4a10 kernel/locking/lockdep.c:3302 lock_acquire+0x130/0x3e0 kernel/locking/lockdep.c:3756 percpu_down_read_preempt_disable include/linux/percpu-rwsem.h:35 [inline] percpu_down_read include/linux/percpu-rwsem.h:58 [inline] ext4_writepages+0x19e/0x2e00 fs/ext4/inode.c:2659 do_writepages+0xef/0x1d0 mm/page-writeback.c:2331 __filemap_fdatawrite_range+0x1a9/0x250 mm/filemap.c:390 SyS_fadvise64_64+0x6db/0x7d0 mm/fadvise.c:123 SYSC_fadvise64 mm/fadvise.c:182 [inline] SyS_fadvise64+0x2c/0x40 mm/fadvise.c:180 do_syscall_64+0x19f/0x550 arch/x86/entry/common.c:285 entry_SYSCALL_64_after_swapgs+0x5d/0xdb IN-SOFTIRQ-R at: mark_irqflags kernel/locking/lockdep.c:2923 [inline] __lock_acquire+0x1084/0x4a10 kernel/locking/lockdep.c:3302 lock_acquire+0x130/0x3e0 kernel/locking/lockdep.c:3756 percpu_down_read_preempt_disable include/linux/percpu-rwsem.h:35 [inline] percpu_down_read include/linux/percpu-rwsem.h:58 [inline] ext4_writepages+0x19e/0x2e00 fs/ext4/inode.c:2659 do_writepages+0xef/0x1d0 mm/page-writeback.c:2331 __filemap_fdatawrite_range+0x1a9/0x250 mm/filemap.c:390 filemap_write_and_wait_range+0x59/0xb0 mm/filemap.c:578 __generic_file_fsync+0x93/0x1a0 fs/libfs.c:974 ext4_sync_file+0x659/0x10a0 fs/ext4/fsync.c:116 vfs_fsync_range+0x10c/0x260 fs/sync.c:195 generic_write_sync include/linux/fs.h:2607 [inline] dio_complete+0x512/0x6c0 fs/direct-io.c:282 dio_bio_end_aio+0x11c/0x370 fs/direct-io.c:323 bio_endio+0x1a5/0x1f0 block/bio.c:1781 req_bio_endio block/blk-core.c:157 [inline] blk_update_request+0x248/0x9b0 block/blk-core.c:2628 scsi_end_request+0x9d/0x5c0 drivers/scsi/scsi_lib.c:606 scsi_io_completion+0x273/0x17a0 drivers/scsi/scsi_lib.c:829 scsi_finish_command+0x3ba/0x530 drivers/scsi/scsi.c:607 scsi_softirq_done+0x250/0x360 drivers/scsi/scsi_lib.c:1567 blk_done_softirq+0x27d/0x3e0 block/blk-softirq.c:35 __do_softirq+0x20e/0x964 kernel/softirq.c:288 invoke_softirq kernel/softirq.c:368 [inline] irq_exit+0x11c/0x150 kernel/softirq.c:409 exiting_irq arch/x86/include/asm/apic.h:669 [inline] do_IRQ+0x10d/0x1c0 arch/x86/kernel/irq.c:252 ret_from_intr+0x0/0x20 __might_fault+0xe9/0x1d0 mm/memory.c:4023 copy_from_user arch/x86/include/asm/uaccess.h:711 [inline] tcp_repair_options_est net/ipv4/tcp.c:2401 [inline] do_tcp_setsockopt.isra.5+0x1736/0x1ca0 net/ipv4/tcp.c:2574 tcp_setsockopt+0xb6/0xe0 net/ipv4/tcp.c:2760 sock_common_setsockopt+0x9a/0xe0 net/core/sock.c:2706 SYSC_setsockopt net/socket.c:1785 [inline] SyS_setsockopt+0x166/0x260 net/socket.c:1764 do_syscall_64+0x19f/0x550 arch/x86/entry/common.c:285 entry_SYSCALL_64_after_swapgs+0x5d/0xdb SOFTIRQ-ON-R at: mark_irqflags kernel/locking/lockdep.c:2941 [inline] __lock_acquire+0xbdd/0x4a10 kernel/locking/lockdep.c:3302 lock_acquire+0x130/0x3e0 kernel/locking/lockdep.c:3756 percpu_down_read_preempt_disable include/linux/percpu-rwsem.h:35 [inline] percpu_down_read include/linux/percpu-rwsem.h:58 [inline] ext4_writepages+0x19e/0x2e00 fs/ext4/inode.c:2659 do_writepages+0xef/0x1d0 mm/page-writeback.c:2331 __filemap_fdatawrite_range+0x1a9/0x250 mm/filemap.c:390 SyS_fadvise64_64+0x6db/0x7d0 mm/fadvise.c:123 SYSC_fadvise64 mm/fadvise.c:182 [inline] SyS_fadvise64+0x2c/0x40 mm/fadvise.c:180 do_syscall_64+0x19f/0x550 arch/x86/entry/common.c:285 entry_SYSCALL_64_after_swapgs+0x5d/0xdb RECLAIM_FS-ON-R at: mark_held_locks+0xc7/0x130 kernel/locking/lockdep.c:2660 __lockdep_trace_alloc kernel/locking/lockdep.c:2882 [inline] lockdep_trace_alloc+0x18e/0x2a0 kernel/locking/lockdep.c:2897 slab_pre_alloc_hook mm/slab.h:392 [inline] slab_alloc_node mm/slub.c:2641 [inline] slab_alloc mm/slub.c:2723 [inline] kmem_cache_alloc+0x2d/0x2b0 mm/slub.c:2728 kmem_cache_zalloc include/linux/slab.h:626 [inline] ext4_init_io_end+0x25/0x100 fs/ext4/page-io.c:252 ext4_writepages+0xcd0/0x2e00 fs/ext4/inode.c:2750 do_writepages+0xef/0x1d0 mm/page-writeback.c:2331 __filemap_fdatawrite_range+0x1a9/0x250 mm/filemap.c:390 __filemap_fdatawrite mm/filemap.c:398 [inline] filemap_flush+0x23/0x30 mm/filemap.c:423 ext4_alloc_da_blocks+0xd9/0x330 fs/ext4/inode.c:3157 ext4_release_file+0x1ff/0x2e0 fs/ext4/file.c:42 __fput+0x263/0x700 fs/file_table.c:208 ____fput+0x15/0x20 fs/file_table.c:244 task_work_run+0x10c/0x180 kernel/task_work.c:116 tracehook_notify_resume include/linux/tracehook.h:191 [inline] exit_to_usermode_loop+0x129/0x150 arch/x86/entry/common.c:162 prepare_exit_to_usermode arch/x86/entry/common.c:194 [inline] syscall_return_slowpath arch/x86/entry/common.c:263 [inline] do_syscall_64+0x3e2/0x550 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_swapgs+0x5d/0xdb INITIAL USE at: __lock_acquire+0x654/0x4a10 kernel/locking/lockdep.c:3306 lock_acquire+0x130/0x3e0 kernel/locking/lockdep.c:3756 percpu_down_read_preempt_disable include/linux/percpu-rwsem.h:35 [inline] percpu_down_read include/linux/percpu-rwsem.h:58 [inline] ext4_writepages+0x19e/0x2e00 fs/ext4/inode.c:2659 do_writepages+0xef/0x1d0 mm/page-writeback.c:2331 __filemap_fdatawrite_range+0x1a9/0x250 mm/filemap.c:390 SyS_fadvise64_64+0x6db/0x7d0 mm/fadvise.c:123 SYSC_fadvise64 mm/fadvise.c:182 [inline] SyS_fadvise64+0x2c/0x40 mm/fadvise.c:180 do_syscall_64+0x19f/0x550 arch/x86/entry/common.c:285 entry_SYSCALL_64_after_swapgs+0x5d/0xdb } ... key at: [] rwsem_key.75130+0x0/0x40 ... acquired at: check_usage_forwards+0x14e/0x290 kernel/locking/lockdep.c:2493 mark_lock_irq kernel/locking/lockdep.c:2610 [inline] mark_lock+0x6ec/0x1290 kernel/locking/lockdep.c:3065 mark_irqflags kernel/locking/lockdep.c:2923 [inline] __lock_acquire+0x1084/0x4a10 kernel/locking/lockdep.c:3302 lock_acquire+0x130/0x3e0 kernel/locking/lockdep.c:3756 percpu_down_read_preempt_disable include/linux/percpu-rwsem.h:35 [inline] percpu_down_read include/linux/percpu-rwsem.h:58 [inline] ext4_writepages+0x19e/0x2e00 fs/ext4/inode.c:2659 do_writepages+0xef/0x1d0 mm/page-writeback.c:2331 __filemap_fdatawrite_range+0x1a9/0x250 mm/filemap.c:390 filemap_write_and_wait_range+0x59/0xb0 mm/filemap.c:578 __generic_file_fsync+0x93/0x1a0 fs/libfs.c:974 ext4_sync_file+0x659/0x10a0 fs/ext4/fsync.c:116 vfs_fsync_range+0x10c/0x260 fs/sync.c:195 generic_write_sync include/linux/fs.h:2607 [inline] dio_complete+0x512/0x6c0 fs/direct-io.c:282 dio_bio_end_aio+0x11c/0x370 fs/direct-io.c:323 bio_endio+0x1a5/0x1f0 block/bio.c:1781 req_bio_endio block/blk-core.c:157 [inline] blk_update_request+0x248/0x9b0 block/blk-core.c:2628 scsi_end_request+0x9d/0x5c0 drivers/scsi/scsi_lib.c:606 scsi_io_completion+0x273/0x17a0 drivers/scsi/scsi_lib.c:829 scsi_finish_command+0x3ba/0x530 drivers/scsi/scsi.c:607 scsi_softirq_done+0x250/0x360 drivers/scsi/scsi_lib.c:1567 blk_done_softirq+0x27d/0x3e0 block/blk-softirq.c:35 __do_softirq+0x20e/0x964 kernel/softirq.c:288 invoke_softirq kernel/softirq.c:368 [inline] irq_exit+0x11c/0x150 kernel/softirq.c:409 exiting_irq arch/x86/include/asm/apic.h:669 [inline] do_IRQ+0x10d/0x1c0 arch/x86/kernel/irq.c:252 ret_from_intr+0x0/0x20 __might_fault+0xe9/0x1d0 mm/memory.c:4023 copy_from_user arch/x86/include/asm/uaccess.h:711 [inline] tcp_repair_options_est net/ipv4/tcp.c:2401 [inline] do_tcp_setsockopt.isra.5+0x1736/0x1ca0 net/ipv4/tcp.c:2574 tcp_setsockopt+0xb6/0xe0 net/ipv4/tcp.c:2760 sock_common_setsockopt+0x9a/0xe0 net/core/sock.c:2706 SYSC_setsockopt net/socket.c:1785 [inline] SyS_setsockopt+0x166/0x260 net/socket.c:1764 do_syscall_64+0x19f/0x550 arch/x86/entry/common.c:285 entry_SYSCALL_64_after_swapgs+0x5d/0xdb stack backtrace: CPU: 1 PID: 3879 Comm: syz-executor.3 Tainted: G W 4.9.141+ #1 ffff8801db7072d0 ffffffff81b42e79 ffffffff84011080 ffff8801db7073a0 ffff88019f5b97c0 0000000000000001 ffffffff84011080 ffff8801db707320 ffffffff813ff4da 0000000100000000 ffffffff83cab6d0 ffffffff83ca25b0 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xc1/0x128 lib/dump_stack.c:51 [] print_irq_inversion_bug.cold.38+0x319/0x32d kernel/locking/lockdep.c:2468 [] check_usage_forwards+0x14e/0x290 kernel/locking/lockdep.c:2493 [] mark_lock_irq kernel/locking/lockdep.c:2610 [inline] [] mark_lock+0x6ec/0x1290 kernel/locking/lockdep.c:3065 [] mark_irqflags kernel/locking/lockdep.c:2923 [inline] [] __lock_acquire+0x1084/0x4a10 kernel/locking/lockdep.c:3302 [] lock_acquire+0x130/0x3e0 kernel/locking/lockdep.c:3756 [] percpu_down_read_preempt_disable include/linux/percpu-rwsem.h:35 [inline] [] percpu_down_read include/linux/percpu-rwsem.h:58 [inline] [] ext4_writepages+0x19e/0x2e00 fs/ext4/inode.c:2659 [] do_writepages+0xef/0x1d0 mm/page-writeback.c:2331 [] __filemap_fdatawrite_range+0x1a9/0x250 mm/filemap.c:390 [] filemap_write_and_wait_range+0x59/0xb0 mm/filemap.c:578 [] __generic_file_fsync+0x93/0x1a0 fs/libfs.c:974 [] ext4_sync_file+0x659/0x10a0 fs/ext4/fsync.c:116 [] vfs_fsync_range+0x10c/0x260 fs/sync.c:195 [] generic_write_sync include/linux/fs.h:2607 [inline] [] dio_complete+0x512/0x6c0 fs/direct-io.c:282 [] dio_bio_end_aio+0x11c/0x370 fs/direct-io.c:323 [] bio_endio+0x1a5/0x1f0 block/bio.c:1781 [] req_bio_endio block/blk-core.c:157 [inline] [] blk_update_request+0x248/0x9b0 block/blk-core.c:2628 [] scsi_end_request+0x9d/0x5c0 drivers/scsi/scsi_lib.c:606 [] scsi_io_completion+0x273/0x17a0 drivers/scsi/scsi_lib.c:829 [] scsi_finish_command+0x3ba/0x530 drivers/scsi/scsi.c:607 [] scsi_softirq_done+0x250/0x360 drivers/scsi/scsi_lib.c:1567 [] blk_done_softirq+0x27d/0x3e0 block/blk-softirq.c:35 [] __do_softirq+0x20e/0x964 kernel/softirq.c:288 [] invoke_softirq kernel/softirq.c:368 [inline] [] irq_exit+0x11c/0x150 kernel/softirq.c:409 [] exiting_irq arch/x86/include/asm/apic.h:669 [inline] [] do_IRQ+0x10d/0x1c0 arch/x86/kernel/irq.c:252 [] common_interrupt+0x9d/0x9d arch/x86/entry/entry_64.S:461 [] __might_fault+0xe9/0x1d0 mm/memory.c:4023 [] copy_from_user arch/x86/include/asm/uaccess.h:711 [inline] [] tcp_repair_options_est net/ipv4/tcp.c:2401 [inline] [] do_tcp_setsockopt.isra.5+0x1736/0x1ca0 net/ipv4/tcp.c:2574 [] tcp_setsockopt+0xb6/0xe0 net/ipv4/tcp.c:2760 [] sock_common_setsockopt+0x9a/0xe0 net/core/sock.c:2706 [] SYSC_setsockopt net/socket.c:1785 [inline] [] SyS_setsockopt+0x166/0x260 net/socket.c:1764 [] do_syscall_64+0x19f/0x550 arch/x86/entry/common.c:285 [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb BUG: scheduling while atomic: syz-executor.3/3879/0x00000101 INFO: lockdep is turned off. Modules linked in: Preemption disabled at: [] __do_softirq+0xdd/0x964 kernel/softirq.c:265