=============================
WARNING: suspicious RCU usage
4.17.0-rc2+ #14 Not tainted
-----------------------------
include/linux/rcupdate.h:304 Illegal context switch in RCU read-side critical section!
other info that might help us debug this:
rcu_scheduler_active = 2, debug_locks = 1
4 locks held by syz-executor7/7858:
#0: (ptrval) (&f->f_pos_lock){+.+.}, at: __fdget_pos+0x1a9/0x1e0 fs/file.c:766
#1: (ptrval) (&sbi->s_journal_flag_rwsem){.+.+}, at: do_writepages+0x9a/0x1a0 mm/page-writeback.c:2341
#2: (ptrval) (jbd2_handle){++++}, at: start_this_handle+0x581/0x1250 fs/jbd2/transaction.c:385
#3: (ptrval) (rcu_read_lock){....}, at: hctx_lock+0x7a/0x1d0 block/blk-mq.c:570
stack backtrace:
CPU: 0 PID: 7858 Comm: syz-executor7 Not tainted 4.17.0-rc2+ #14
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1b9/0x294 lib/dump_stack.c:113
lockdep_rcu_suspicious+0x14a/0x153 kernel/locking/lockdep.c:4592
rcu_preempt_sleep_check include/linux/rcupdate.h:303 [inline]
___might_sleep+0x26d/0x320 kernel/sched/core.c:6153
__might_sleep+0x95/0x190 kernel/sched/core.c:6141
slab_pre_alloc_hook mm/slab.h:421 [inline]
slab_alloc mm/slab.c:3378 [inline]
__do_kmalloc mm/slab.c:3716 [inline]
__kmalloc+0x2b9/0x760 mm/slab.c:3727
kmalloc_array include/linux/slab.h:631 [inline]
kcalloc include/linux/slab.h:642 [inline]
numa_crng_init drivers/char/random.c:798 [inline]
crng_reseed+0x427/0x920 drivers/char/random.c:923
credit_entropy_bits+0x98d/0xa30 drivers/char/random.c:708
add_interrupt_randomness+0x494/0x860 drivers/char/random.c:1254
handle_irq_event_percpu+0xf9/0x1c0 kernel/irq/handle.c:191
handle_irq_event+0xa7/0x135 kernel/irq/handle.c:206
handle_edge_irq+0x20f/0x870 kernel/irq/chip.c:791
generic_handle_irq_desc include/linux/irqdesc.h:159 [inline]
handle_irq+0x18c/0x2e7 arch/x86/kernel/irq_64.c:77
do_IRQ+0x78/0x190 arch/x86/kernel/irq.c:245
common_interrupt+0xf/0xf arch/x86/entry/entry_64.S:642
RIP: 0010:scsi_dispatch_cmd+0x70f/0xcb0 drivers/scsi/scsi_lib.c:1731
RSP: 0018:ffff8801b8bacc40 EFLAGS: 00000202 ORIG_RAX: ffffffffffffffda
RAX: 0000000000000002 RBX: 1ffff10037175989 RCX: ffffffff84bafb35
RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000001
RBP: ffff8801b8bacd90 R08: ffff8801b5880180 R09: ffffed003a1d0993
R10: ffffed003a1d0993 R11: ffff8801d0e84c9f R12: ffff8801d0ee09b8
R13: 0000000000000001 R14: 000000000000000a R15: ffff8801d221c900
scsi_queue_rq+0x1531/0x1ed0 drivers/scsi/scsi_lib.c:2064
blk_mq_dispatch_rq_list+0xe0a/0x2490 block/blk-mq.c:1223
blk_mq_do_dispatch_sched+0x23b/0x560 block/blk-mq-sched.c:120
blk_mq_sched_dispatch_requests+0x63b/0xa60 block/blk-mq-sched.c:216
__blk_mq_run_hw_queue+0x156/0x200 block/blk-mq.c:1334
__blk_mq_delay_run_hw_queue+0x488/0x520 block/blk-mq.c:1402
blk_mq_run_hw_queue+0x1c2/0x390 block/blk-mq.c:1439
blk_mq_sched_insert_requests+0x1b4/0x250 block/blk-mq-sched.c:478
blk_mq_flush_plug_list+0xa79/0x1120 block/blk-mq.c:1689
blk_flush_plug_list+0x1b3/0xb00 block/blk-core.c:3688
blk_mq_make_request+0x1391/0x25c0 block/blk-mq.c:1903
generic_make_request+0x795/0x1510 block/blk-core.c:2459
submit_bio+0xba/0x460 block/blk-core.c:2567
ext4_io_submit+0x190/0x220 fs/ext4/page-io.c:356
io_submit_add_bh fs/ext4/page-io.c:396 [inline]
ext4_bio_write_page+0x7de/0x1534 fs/ext4/page-io.c:506
mpage_submit_page+0x15d/0x270 fs/ext4/inode.c:2209
mpage_map_and_submit_buffers+0x52e/0x9b0 fs/ext4/inode.c:2406
mpage_map_and_submit_extent fs/ext4/inode.c:2544 [inline]
ext4_writepages+0x262b/0x4030 fs/ext4/inode.c:2856
do_writepages+0x9a/0x1a0 mm/page-writeback.c:2341
__filemap_fdatawrite_range+0x333/0x470 mm/filemap.c:445
filemap_write_and_wait_range+0x48/0xd0 mm/filemap.c:656
generic_file_read_iter+0x19cd/0x2f00 mm/filemap.c:2332
ext4_file_read_iter+0x18b/0x3c0 fs/ext4/file.c:77
call_read_iter include/linux/fs.h:1778 [inline]
new_sync_read fs/read_write.c:406 [inline]
__vfs_read+0x696/0xa50 fs/read_write.c:418
vfs_read+0x17f/0x3d0 fs/read_write.c:452
ksys_read+0xf9/0x250 fs/read_write.c:578
__do_sys_read fs/read_write.c:588 [inline]
__se_sys_read fs/read_write.c:586 [inline]
__x64_sys_read+0x73/0xb0 fs/read_write.c:586
do_syscall_64+0x1b1/0x800 arch/x86/entry/common.c:287
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x455389
RSP: 002b:00007fc2d17b5c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
RAX: ffffffffffffffda RBX: 00007fc2d17b66d4 RCX: 0000000000455389
RDX: 00000000ffffff58 RSI: 0000000020000c00 RDI: 0000000000000013
RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 0000000000000490 R14: 00000000006f9e20 R15: 0000000000000000
BUG: sleeping function called from invalid context at mm/slab.h:421
in_atomic(): 1, irqs_disabled(): 1, pid: 7858, name: syz-executor7
4 locks held by syz-executor7/7858:
#0: (ptrval) (&f->f_pos_lock){+.+.}, at: __fdget_pos+0x1a9/0x1e0 fs/file.c:766
#1: (ptrval) (&sbi->s_journal_flag_rwsem){.+.+}, at: do_writepages+0x9a/0x1a0 mm/page-writeback.c:2341
#2: (ptrval) (jbd2_handle){++++}, at: start_this_handle+0x581/0x1250 fs/jbd2/transaction.c:385
#3: (ptrval) (rcu_read_lock){....}, at: hctx_lock+0x7a/0x1d0 block/blk-mq.c:570
irq event stamp: 125216
hardirqs last enabled at (125215): [] seqcount_lockdep_reader_access include/linux/seqlock.h:83 [inline]
hardirqs last enabled at (125215): [] read_seqcount_begin include/linux/seqlock.h:164 [inline]
hardirqs last enabled at (125215): [] ktime_get+0x33e/0x430 kernel/time/timekeeping.c:738
hardirqs last disabled at (125216): [] interrupt_entry+0xb5/0xf0 arch/x86/entry/entry_64.S:625
softirqs last enabled at (124868): [] __do_softirq+0x778/0xaf5 kernel/softirq.c:311
softirqs last disabled at (124859): [] invoke_softirq kernel/softirq.c:365 [inline]
softirqs last disabled at (124859): [] irq_exit+0x1d1/0x200 kernel/softirq.c:405
CPU: 0 PID: 7858 Comm: syz-executor7 Not tainted 4.17.0-rc2+ #14
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1b9/0x294 lib/dump_stack.c:113
___might_sleep.cold.87+0x11f/0x13a kernel/sched/core.c:6188
__might_sleep+0x95/0x190 kernel/sched/core.c:6141
slab_pre_alloc_hook mm/slab.h:421 [inline]
slab_alloc mm/slab.c:3378 [inline]
__do_kmalloc mm/slab.c:3716 [inline]
__kmalloc+0x2b9/0x760 mm/slab.c:3727
kmalloc_array include/linux/slab.h:631 [inline]
kcalloc include/linux/slab.h:642 [inline]
numa_crng_init drivers/char/random.c:798 [inline]
crng_reseed+0x427/0x920 drivers/char/random.c:923
credit_entropy_bits+0x98d/0xa30 drivers/char/random.c:708
add_interrupt_randomness+0x494/0x860 drivers/char/random.c:1254
handle_irq_event_percpu+0xf9/0x1c0 kernel/irq/handle.c:191
handle_irq_event+0xa7/0x135 kernel/irq/handle.c:206
handle_edge_irq+0x20f/0x870 kernel/irq/chip.c:791
generic_handle_irq_desc include/linux/irqdesc.h:159 [inline]
handle_irq+0x18c/0x2e7 arch/x86/kernel/irq_64.c:77
do_IRQ+0x78/0x190 arch/x86/kernel/irq.c:245
common_interrupt+0xf/0xf arch/x86/entry/entry_64.S:642
RIP: 0010:scsi_dispatch_cmd+0x70f/0xcb0 drivers/scsi/scsi_lib.c:1731
RSP: 0018:ffff8801b8bacc40 EFLAGS: 00000202 ORIG_RAX: ffffffffffffffda
RAX: 0000000000000002 RBX: 1ffff10037175989 RCX: ffffffff84bafb35
RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000001
RBP: ffff8801b8bacd90 R08: ffff8801b5880180 R09: ffffed003a1d0993
R10: ffffed003a1d0993 R11: ffff8801d0e84c9f R12: ffff8801d0ee09b8
R13: 0000000000000001 R14: 000000000000000a R15: ffff8801d221c900
scsi_queue_rq+0x1531/0x1ed0 drivers/scsi/scsi_lib.c:2064
blk_mq_dispatch_rq_list+0xe0a/0x2490 block/blk-mq.c:1223
blk_mq_do_dispatch_sched+0x23b/0x560 block/blk-mq-sched.c:120
blk_mq_sched_dispatch_requests+0x63b/0xa60 block/blk-mq-sched.c:216
__blk_mq_run_hw_queue+0x156/0x200 block/blk-mq.c:1334
__blk_mq_delay_run_hw_queue+0x488/0x520 block/blk-mq.c:1402
blk_mq_run_hw_queue+0x1c2/0x390 block/blk-mq.c:1439
blk_mq_sched_insert_requests+0x1b4/0x250 block/blk-mq-sched.c:478
blk_mq_flush_plug_list+0xa79/0x1120 block/blk-mq.c:1689
blk_flush_plug_list+0x1b3/0xb00 block/blk-core.c:3688
blk_mq_make_request+0x1391/0x25c0 block/blk-mq.c:1903
generic_make_request+0x795/0x1510 block/blk-core.c:2459
submit_bio+0xba/0x460 block/blk-core.c:2567
ext4_io_submit+0x190/0x220 fs/ext4/page-io.c:356
io_submit_add_bh fs/ext4/page-io.c:396 [inline]
ext4_bio_write_page+0x7de/0x1534 fs/ext4/page-io.c:506
mpage_submit_page+0x15d/0x270 fs/ext4/inode.c:2209
mpage_map_and_submit_buffers+0x52e/0x9b0 fs/ext4/inode.c:2406
mpage_map_and_submit_extent fs/ext4/inode.c:2544 [inline]
ext4_writepages+0x262b/0x4030 fs/ext4/inode.c:2856
do_writepages+0x9a/0x1a0 mm/page-writeback.c:2341
__filemap_fdatawrite_range+0x333/0x470 mm/filemap.c:445
filemap_write_and_wait_range+0x48/0xd0 mm/filemap.c:656
generic_file_read_iter+0x19cd/0x2f00 mm/filemap.c:2332
ext4_file_read_iter+0x18b/0x3c0 fs/ext4/file.c:77
call_read_iter include/linux/fs.h:1778 [inline]
new_sync_read fs/read_write.c:406 [inline]
__vfs_read+0x696/0xa50 fs/read_write.c:418
vfs_read+0x17f/0x3d0 fs/read_write.c:452
ksys_read+0xf9/0x250 fs/read_write.c:578
__do_sys_read fs/read_write.c:588 [inline]
__se_sys_read fs/read_write.c:586 [inline]
__x64_sys_read+0x73/0xb0 fs/read_write.c:586
do_syscall_64+0x1b1/0x800 arch/x86/entry/common.c:287
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x455389
RSP: 002b:00007fc2d17b5c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
RAX: ffffffffffffffda RBX: 00007fc2d17b66d4 RCX: 0000000000455389
RDX: 00000000ffffff58 RSI: 0000000020000c00 RDI: 0000000000000013
RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 0000000000000490 R14: 00000000006f9e20 R15: 0000000000000000
random: crng init done
EXT4-fs (sda1): resizing filesystem from 524032 to 19 blocks
EXT4-fs warning (device sda1): ext4_resize_fs:1927: can't shrink FS - resize aborted
XFS (loop1): Invalid superblock magic number
XFS (loop1): Invalid superblock magic number
binder: 8070:8073 unknown command 0
binder: 8070:8073 ioctl c0306201 20007000 returned -22
binder: 8070:8086 unknown command 0
binder: 8070:8086 ioctl c0306201 20007000 returned -22
binder: 8070:8086 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
binder: 8070:8086 BC_DEAD_BINDER_DONE 0000000000000000 not found
binder: 8107:8108 unknown command 0
binder: 8107:8108 ioctl c0306201 20007000 returned -22
ntfs: (device loop7): read_ntfs_boot_sector(): Primary boot sector is invalid.
ntfs: (device loop7): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover.
ntfs: (device loop7): ntfs_fill_super(): Not an NTFS volume.
device bridge_slave_1 left promiscuous mode
bridge0: port 2(bridge_slave_1) entered disabled state
binder: 8138:8140 unknown command 0
binder: 8138:8140 ioctl c0306201 20007000 returned -22
device bridge_slave_0 left promiscuous mode
bridge0: port 1(bridge_slave_0) entered disabled state
ntfs: (device loop7): read_ntfs_boot_sector(): Primary boot sector is invalid.
ntfs: (device loop7): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover.
ntfs: (device loop7): ntfs_fill_super(): Not an NTFS volume.
REISERFS warning (device loop4): super-6515 reiserfs_parse_options: journaled quota format not specified.
team0 (unregistering): Port device team_slave_1 removed
IPVS: ftp: loaded support on port[0] = 21
REISERFS warning (device loop4): super-6515 reiserfs_parse_options: journaled quota format not specified.
binder: 8178:8179 unknown command 0
team0 (unregistering): Port device team_slave_0 removed
binder: 8178:8179 ioctl c0306201 20007000 returned -22
bond0 (unregistering): Releasing backup interface bond_slave_1
bond0 (unregistering): Releasing backup interface bond_slave_0
bond0 (unregistering): Released all slaves
bridge0: port 1(bridge_slave_0) entered blocking state
bridge0: port 1(bridge_slave_0) entered disabled state
device bridge_slave_0 entered promiscuous mode
bridge0: port 2(bridge_slave_1) entered blocking state
bridge0: port 2(bridge_slave_1) entered disabled state
device bridge_slave_1 entered promiscuous mode
IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
bond0: Enslaving bond_slave_0 as an active interface with an up link
bond0: Enslaving bond_slave_1 as an active interface with an up link
IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
team0: Port device team_slave_0 added
IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
team0: Port device team_slave_1 added
IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
bridge0: port 2(bridge_slave_1) entered blocking state
bridge0: port 2(bridge_slave_1) entered forwarding state
bridge0: port 1(bridge_slave_0) entered blocking state
bridge0: port 1(bridge_slave_0) entered forwarding state
IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
8021q: adding VLAN 0 to HW filter on device bond0
IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
8021q: adding VLAN 0 to HW filter on device team0
ntfs: (device loop7): read_ntfs_boot_sector(): Primary boot sector is invalid.
ntfs: (device loop7): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover.
ntfs: (device loop7): ntfs_fill_super(): Not an NTFS volume.
ntfs: (device loop7): read_ntfs_boot_sector(): Primary boot sector is invalid.
*** Guest State ***
CR0: actual=0xffffffff9ffffffc, shadow=0xfffffffffffffffc, gh_mask=fffffffffffffff7
CR4: actual=0x0000000000402060, shadow=0x0000000000400060, gh_mask=ffffffffffffe871
CR3 = 0x0000000000002000
PDPTR0 = 0x0000000000020000 PDPTR1 = 0x0000000000020000
PDPTR2 = 0x0000000100000001 PDPTR3 = 0x0000005ec9c4c018
RSP = 0x0000000000000000 RIP = 0x000000000000fff0
RFLAGS=0x00010002 DR7 = 0x0000000000000400
Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000
CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000
DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000
SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000
ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000
FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000
GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000
GDTR: limit=0x00000000, base=0x0000000000000000
LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000
IDTR: limit=0x00000000, base=0x0000000000000000
TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000
EFER = 0x0000000000000000 PAT = 0x0007040600070406
DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000
Interruptibility = 00000000 ActivityState = 00000000
*** Host State ***
RIP = 0xffffffff811f6659 RSP = 0xffff8801a90af390
CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040
FSBase=00007f6d0c53b700 GSBase=ffff8801dae00000 TRBase=fffffe0000003000
GDTBase=fffffe0000001000 IDTBase=fffffe0000000000
CR0=0000000080050033 CR3=00000001d3c41000 CR4=00000000001426f0
Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87801380
EFER = 0x0000000000000d01 PAT = 0x0000000000000000
*** Control State ***
PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2
EntryControls=0000d1ff ExitControls=0023efff
ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000
VMEntry: intr_info=80000306 errcode=00000000 ilen=00000000
VMExit: intr_info=00000000 errcode=00000000 ilen=00000003
reason=80000021 qualification=0000000000000000
IDTVectoring: info=00000000 errcode=00000000
TSC Offset = 0xffffffc332e412f5
EPT pointer = 0x00000001cf87401e
ucma_write: process 374 (syz-executor6) changed security contexts after opening file descriptor, this is not allowed.