ci starts bisection 2023-02-16 23:02:35.459710813 +0000 UTC m=+3212.559774084
bisecting fixing commit since d532dd102151cc69fcd00b13e5a9689b23c0c8d9
building syzkaller on a63719e71f9e7c2496a8eef09aa58118deb0c0bc
ensuring issue is reproducible on original commit d532dd102151cc69fcd00b13e5a9689b23c0c8d9
testing commit d532dd102151cc69fcd00b13e5a9689b23c0c8d9 gcc
compiler: Debian clang version 15.0.7, GNU ld (GNU Binutils for Debian) 2.35.2
kernel signature: bdaaf391cc25ca5554e1809d86c85a9f2434e87fd90f03dba6fddc7f5abe7879
all runs: crashed: BUG: sleeping function called from invalid context in gfs2_glock_wait
testing current HEAD 3ac88fa4605ec98e545fb3ad0154f575fda2de5f
testing commit 3ac88fa4605ec98e545fb3ad0154f575fda2de5f gcc
compiler: Debian clang version 15.0.7, GNU ld (GNU Binutils for Debian) 2.35.2
kernel signature: e05af5595e752357b577672ba114f87628bf8ab5be7fe263444bcc7566d55f10
all runs: crashed: BUG: sleeping function called from invalid context in gfs2_glock_wait
revisions tested: 2, total time: 25m9.638313507s (build: 17m42.785775235s, test: 6m31.841706162s)
the crash still happens on HEAD
commit msg: Merge tag 'net-6.2-final' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
crash: BUG: sleeping function called from invalid context in gfs2_glock_wait
loop0: rw=1, sector=131324, nr_sectors = 4 limit=32768
gfs2: fsid=syz:syz.0: Error 10 writing to journal, jid=0
gfs2: fsid=syz:syz.0: fatal: I/O error(s)
gfs2: fsid=syz:syz.0: about to withdraw this file system
BUG: sleeping function called from invalid context at fs/gfs2/glock.c:1316
in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5497, name: syz-executor.0
preempt_count: 1, expected: 0
RCU nest depth: 0, expected: 0
4 locks held by syz-executor.0/5497:
#0: ffff88807efae0e0 (&type->s_umount_key#51){+.+.}-{3:3}, at: deactivate_super+0x54/0x80
#1: ffff8880763ecb70 (&sdp->sd_quota_sync_mutex){+.+.}-{3:3}, at: gfs2_quota_sync+0x93/0x640
#2: ffff8880763ed058 (&sdp->sd_log_flush_lock){++++}-{3:3}, at: gfs2_log_flush+0xea/0x2290
#3: ffff8880763ece80 (&sdp->sd_log_lock){+.+.}-{2:2}, at: gfs2_flush_revokes+0x4e/0x80
Preemption disabled at:
[<0000000000000000>] 0x0
CPU: 0 PID: 5497 Comm: syz-executor.0 Not tainted 6.2.0-rc8-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023
Call Trace:
dump_stack_lvl+0x167/0x220
__might_resched+0x543/0x6a0
gfs2_glock_wait+0x4f/0x200
gfs2_freeze_lock+0x5e/0xa0
gfs2_withdraw+0x48b/0x11b0
gfs2_ail1_empty+0x775/0x800
gfs2_flush_revokes+0x59/0x80
revoke_lo_before_commit+0x24/0x5b0
gfs2_log_flush+0xb8e/0x2290
do_sync+0x879/0xa90
gfs2_quota_sync+0x311/0x640
gfs2_sync_fs+0x48/0xa0
sync_filesystem+0xc8/0x190
generic_shutdown_super+0x69/0x2a0
kill_block_super+0x79/0xc0
deactivate_locked_super+0x75/0xd0
cleanup_mnt+0x3af/0x430
task_work_run+0x20a/0x290
exit_to_user_mode_loop+0xd9/0x100
exit_to_user_mode_prepare+0xb1/0x140
syscall_exit_to_user_mode+0x64/0x2e0
do_syscall_64+0x4d/0xc0
entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f872ac8d537
Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffc76f89688 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f872ac8d537
RDX: 00007ffc76f89759 RSI: 000000000000000a RDI: 00007ffc76f89750
RBP: 00007ffc76f89750 R08: 00000000ffffffff R09: 00007ffc76f89520
R10: 0000555556ea78b3 R11: 0000000000000246 R12: 00007f872ace6b24
R13: 00007ffc76f8a810 R14: 0000555556ea7810 R15: 00007ffc76f8a850
=============================
[ BUG: Invalid wait context ]
6.2.0-rc8-syzkaller #0 Tainted: G W
-----------------------------
syz-executor.0/5497 is trying to lock:
ffff888016d70c88 (&wq->mutex){+.+.}-{3:3}, at: __flush_workqueue+0x1a9/0x1410
other info that might help us debug this:
context-{4:4}
4 locks held by syz-executor.0/5497:
#0: ffff88807efae0e0 (&type->s_umount_key#51){+.+.}-{3:3}, at: deactivate_super+0x54/0x80
#1: ffff8880763ecb70 (&sdp->sd_quota_sync_mutex){+.+.}-{3:3}, at: gfs2_quota_sync+0x93/0x640
#2: ffff8880763ed058 (&sdp->sd_log_flush_lock){++++}-{3:3}, at: gfs2_log_flush+0xea/0x2290
#3: ffff8880763ece80 (&sdp->sd_log_lock){+.+.}-{2:2}, at: gfs2_flush_revokes+0x4e/0x80
stack backtrace:
CPU: 0 PID: 5497 Comm: syz-executor.0 Tainted: G W 6.2.0-rc8-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023
Call Trace:
dump_stack_lvl+0x167/0x220
__lock_acquire+0x14b1/0x1f80
lock_acquire+0x235/0x630
__mutex_lock_common+0x1d8/0x2530
mutex_lock_nested+0x1b/0x20
__flush_workqueue+0x1a9/0x1410
gfs2_make_fs_ro+0xbb/0x520
gfs2_withdraw+0x49c/0x11b0
gfs2_ail1_empty+0x775/0x800
gfs2_flush_revokes+0x59/0x80
revoke_lo_before_commit+0x24/0x5b0
gfs2_log_flush+0xb8e/0x2290
do_sync+0x879/0xa90
gfs2_quota_sync+0x311/0x640
gfs2_sync_fs+0x48/0xa0
sync_filesystem+0xc8/0x190
generic_shutdown_super+0x69/0x2a0
kill_block_super+0x79/0xc0
deactivate_locked_super+0x75/0xd0
cleanup_mnt+0x3af/0x430
task_work_run+0x20a/0x290
exit_to_user_mode_loop+0xd9/0x100
exit_to_user_mode_prepare+0xb1/0x140
syscall_exit_to_user_mode+0x64/0x2e0
do_syscall_64+0x4d/0xc0
entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f872ac8d537
Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffc76f89688 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f872ac8d537
RDX: 00007ffc76f89759 RSI: 000000000000000a RDI: 00007ffc76f89750
RBP: 00007ffc76f89750 R08: 00000000ffffffff R09: 00007ffc76f89520
R10: 0000555556ea78b3 R11: 0000000000000246 R12: 00007f872ace6b24
R13: 00007ffc76f8a810 R14: 0000555556ea7810 R15: 00007ffc76f8a850
BUG: scheduling while atomic: syz-executor.0/5497/0x00000002
INFO: lockdep is turned off.
Modules linked in:
Preemption disabled at:
[<0000000000000000>] 0x0