BUG: sleeping function called from invalid context at block/blk-sysfs.c:766 in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 4671, name: syz-executor.2 preempt_count: 101, expected: 0 RCU nest depth: 0, expected: 0 INFO: lockdep is turned off. Preemption disabled at: [<0000000000000000>] 0x0 CPU: 1 PID: 4671 Comm: syz-executor.2 Tainted: G W 5.17.0-syzkaller-13547-g11f8e7c122ce #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0xcd/0x134 lib/dump_stack.c:106 __might_resched.cold+0x222/0x26b kernel/sched/core.c:9733 blk_release_queue+0x1f/0x320 block/blk-sysfs.c:766 kobject_cleanup lib/kobject.c:705 [inline] kobject_release lib/kobject.c:736 [inline] kref_put include/linux/kref.h:65 [inline] kobject_put+0x1c8/0x540 lib/kobject.c:753 blkg_free.part.0+0x112/0x1f0 block/blk-cgroup.c:86 blkg_free block/blk-cgroup.c:78 [inline] __blkg_release+0x105/0x160 block/blk-cgroup.c:102 rcu_do_batch kernel/rcu/tree.c:2535 [inline] rcu_core+0x7b1/0x1880 kernel/rcu/tree.c:2786 __do_softirq+0x29b/0x9c2 kernel/softirq.c:558 invoke_softirq kernel/softirq.c:432 [inline] __irq_exit_rcu+0x123/0x180 kernel/softirq.c:637 irq_exit_rcu+0x5/0x20 kernel/softirq.c:649 sysvec_apic_timer_interrupt+0x93/0xc0 arch/x86/kernel/apic/apic.c:1097 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:645 RIP: 0010:__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:152 [inline] RIP: 0010:_raw_spin_unlock_irqrestore+0x38/0x70 kernel/locking/spinlock.c:194 Code: 74 24 10 e8 2a ac fc f7 48 89 ef e8 72 2b fd f7 81 e3 00 02 00 00 75 25 9c 58 f6 c4 02 75 2d 48 85 db 74 01 fb bf 01 00 00 00 33 44 f0 f7 65 8b 05 cc bc a1 76 85 c0 74 0a 5b 5d c3 e8 60 31 RSP: 0018:ffffc9000308f940 EFLAGS: 00000206 RAX: 0000000000000046 RBX: 0000000000000200 RCX: 1ffffffff1b6d6c5 RDX: 0000000000000000 RSI: ffffffff817ee4b1 RDI: 0000000000000001 RBP: ffff88807c038050 R08: 0000000000000000 R09: 0000000000000000 R10: ffffffff817ee498 R11: 0000000000000000 R12: 000000000000000e R13: dffffc0000000000 R14: ffffc9000308fc20 R15: 000000000000000f spin_unlock_irqrestore include/linux/spinlock.h:404 [inline] unlock_page_lruvec_irqrestore include/linux/memcontrol.h:1550 [inline] release_pages+0xfc6/0x2290 mm/swap.c:975 __pagevec_release+0x77/0x100 mm/swap.c:998 pagevec_release include/linux/pagevec.h:82 [inline] folio_batch_release include/linux/pagevec.h:146 [inline] truncate_inode_pages_range+0x319/0x1530 mm/truncate.c:373 ext4_evict_inode+0x515/0x1960 fs/ext4/inode.c:221 evict+0x2ed/0x6b0 fs/inode.c:664 iput_final fs/inode.c:1744 [inline] iput.part.0+0x562/0x820 fs/inode.c:1770 iput+0x58/0x70 fs/inode.c:1760 do_unlinkat+0x418/0x650 fs/namei.c:4225 __do_sys_unlink fs/namei.c:4266 [inline] __se_sys_unlink fs/namei.c:4264 [inline] __x64_sys_unlink+0xc6/0x110 fs/namei.c:4264 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x35/0x80 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7f650a088987 Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007ffd900df2d8 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f650a088987 RDX: 00007ffd900df310 RSI: 00007ffd900df310 RDI: 00007ffd900df3a0 RBP: 00007ffd900df3a0 R08: 0000000000000001 R09: 00007ffd900df170 R10: 0000555557185893 R11: 0000000000000206 R12: 00007f650a0e21ea R13: 00007ffd900e0460 R14: 0000555557185810 R15: 00007ffd900e04a0 ---------------- Code disassembly (best guess): 0: 74 24 je 0x26 2: 10 e8 adc %ch,%al 4: 2a ac fc f7 48 89 ef sub -0x1076b709(%rsp,%rdi,8),%ch b: e8 72 2b fd f7 callq 0xf7fd2b82 10: 81 e3 00 02 00 00 and $0x200,%ebx 16: 75 25 jne 0x3d 18: 9c pushfq 19: 58 pop %rax 1a: f6 c4 02 test $0x2,%ah 1d: 75 2d jne 0x4c 1f: 48 85 db test %rbx,%rbx 22: 74 01 je 0x25 24: fb sti 25: bf 01 00 00 00 mov $0x1,%edi * 2a: e8 33 44 f0 f7 callq 0xf7f04462 <-- trapping instruction 2f: 65 8b 05 cc bc a1 76 mov %gs:0x76a1bccc(%rip),%eax # 0x76a1bd02 36: 85 c0 test %eax,%eax 38: 74 0a je 0x44 3a: 5b pop %rbx 3b: 5d pop %rbp 3c: c3 retq 3d: e8 .byte 0xe8 3e: 60 (bad) 3f: 31 .byte 0x31