XFS (loop2): Unmounting Filesystem hub 9-0:1.0: USB hub found hub 9-0:1.0: 8 ports detected VFS: Found a Xenix FS (block size = 512) on device loop3 VFS: Found a Xenix FS (block size = 512) on device loop5 BUG: sleeping function called from invalid context at fs/buffer.c:1381 in_atomic(): 1, irqs_disabled(): 0, pid: 10302, name: syz-executor.3 3 locks held by syz-executor.3/10302: #0: (sb_writers#19){.+.+}, at: [] sb_start_write include/linux/fs.h:1551 [inline] #0: (sb_writers#19){.+.+}, at: [] mnt_want_write+0x3a/0xb0 fs/namespace.c:386 #1: (&sb->s_type->i_mutex_key#24){+.+.}, at: [] inode_lock include/linux/fs.h:719 [inline] #1: (&sb->s_type->i_mutex_key#24){+.+.}, at: [] do_truncate+0xf0/0x1a0 fs/open.c:61 #2: (pointers_lock){.+.+}, at: [] get_block+0x153/0x1230 fs/sysv/itree.c:217 Preemption disabled at: [< (null)>] (null) CPU: 1 PID: 10302 Comm: syz-executor.3 Not tainted 4.14.302-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x281 lib/dump_stack.c:58 ___might_sleep.cold+0x235/0x250 kernel/sched/core.c:6041 __getblk_gfp fs/buffer.c:1381 [inline] __bread_gfp+0x3e/0x2e0 fs/buffer.c:1428 sb_bread include/linux/buffer_head.h:343 [inline] get_branch+0x2ac/0x600 fs/sysv/itree.c:104 get_block+0x176/0x1230 fs/sysv/itree.c:218 block_truncate_page+0x2a8/0x8f0 fs/buffer.c:2944 sysv_truncate+0x1c4/0xd70 fs/sysv/itree.c:383 sysv_setattr+0x115/0x180 fs/sysv/file.c:47 notify_change+0x56b/0xd10 fs/attr.c:315 do_truncate+0xff/0x1a0 fs/open.c:63 vfs_truncate+0x456/0x680 fs/open.c:120 do_sys_truncate.part.0+0xdc/0xf0 fs/open.c:143 do_sys_truncate fs/open.c:137 [inline] SYSC_truncate fs/open.c:155 [inline] SyS_truncate+0x23/0x40 fs/open.c:153 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x5e/0xd3 RIP: 0033:0x7f5747ecf0d9 RSP: 002b:00007f5746441168 EFLAGS: 00000246 ORIG_RAX: 000000000000004c RAX: ffffffffffffffda RBX: 00007f5747feef80 RCX: 00007f5747ecf0d9 RDX: 0000000000000000 RSI: 0000000000008001 RDI: 000000002000a340 RBP: 00007f5747f2aae9 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffdd6d9495f R14: 00007f5746441300 R15: 0000000000022000 usb usb9: usbfs: interface 0 claimed by hub while 'syz-executor.4' sets config #0 usb usb9: usbfs: interface 0 claimed by hub while 'syz-executor.1' sets config #0 VFS: Found a Xenix FS (block size = 512) on device loop3 VFS: Found a Xenix FS (block size = 512) on device loop5 hub 9-0:1.0: USB hub found UDF-fs: warning (device loop5): udf_load_vrs: No VRS found hub 9-0:1.0: 8 ports detected UDF-fs: Scanning with blocksize 512 failed UDF-fs: warning (device loop5): udf_load_vrs: No VRS found UDF-fs: Scanning with blocksize 1024 failed netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. UDF-fs: warning (device loop5): udf_load_vrs: No VRS found UDF-fs: Scanning with blocksize 2048 failed UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) batman_adv: Cannot find parent device device gretap1 entered promiscuous mode usb usb9: usbfs: interface 0 claimed by hub while 'syz-executor.5' sets config #0 usb usb9: usbfs: interface 0 claimed by hub while 'syz-executor.5' sets config #1 usb usb9: usbfs: interface 0 claimed by hub while 'syz-executor.4' sets config #0 usb usb9: usbfs: interface 0 claimed by hub while 'syz-executor.1' sets config #0 usb usb9: usbfs: interface 0 claimed by usbfs while 'syz-executor.0' sets config #0 netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. usb usb9: usbfs: interface 0 claimed by usbfs while 'syz-executor.4' sets config #1 usb usb9: usbfs: interface 0 claimed by usbfs while 'syz-executor.1' sets config #1 netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. batman_adv: Cannot find parent device device gretap2 entered promiscuous mode hub 9-0:1.0: USB hub found hub 9-0:1.0: 8 ports detected netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. batman_adv: Cannot find parent device device gretap3 entered promiscuous mode netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. batman_adv: Cannot find parent device device gretap4 entered promiscuous mode netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. UDF-fs: warning (device loop3): udf_load_vrs: No VRS found UDF-fs: Scanning with blocksize 512 failed UDF-fs: warning (device loop3): udf_load_vrs: No VRS found UDF-fs: Scanning with blocksize 1024 failed UDF-fs: warning (device loop3): udf_load_vrs: No VRS found loop2: AHDI p1 p4 UDF-fs: Scanning with blocksize 2048 failed UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) audit: type=1804 audit(1671607030.964:27): pid=10604 uid=0 auid=4294967295 ses=4294967295 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir4085561529/syzkaller.7YIy7H/27/file0/bus" dev="loop3" ino=842 res=1 loop2: p4 start 3914858496 is beyond EOD, truncated F2FS-fs (loop5): invalid crc value F2FS-fs (loop5): Found nat_bits in checkpoint netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. audit: type=1804 audit(1671607031.074:28): pid=10625 uid=0 auid=4294967295 ses=4294967295 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir4085561529/syzkaller.7YIy7H/27/file0/bus" dev="loop3" ino=842 res=1 F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 loop2: AHDI p1 p4 loop2: p4 start 3914858496 is beyond EOD, truncated audit: type=1804 audit(1671607031.074:29): pid=10625 uid=0 auid=4294967295 ses=4294967295 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir4085561529/syzkaller.7YIy7H/27/file0/bus" dev="loop3" ino=842 res=1 UDF-fs: warning (device loop3): udf_load_vrs: No VRS found UDF-fs: Scanning with blocksize 512 failed UDF-fs: warning (device loop3): udf_load_vrs: No VRS found loop_reread_partitions: partition scan of loop2 () failed (rc=-16) print_req_error: I/O error, dev loop2, sector 8 UDF-fs: Scanning with blocksize 1024 failed UDF-fs: warning (device loop3): udf_load_vrs: No VRS found UDF-fs: Scanning with blocksize 2048 failed print_req_error: I/O error, dev loop2, sector 8 Buffer I/O error on dev loop2p1, logical block 1, async page read UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) audit: type=1804 audit(1671607031.564:30): pid=10635 uid=0 auid=4294967295 ses=4294967295 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir4085561529/syzkaller.7YIy7H/28/file0/bus" dev="loop3" ino=842 res=1 print_req_error: I/O error, dev loop2, sector 8 audit: type=1804 audit(1671607031.624:31): pid=10635 uid=0 auid=4294967295 ses=4294967295 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir4085561529/syzkaller.7YIy7H/28/file0/bus" dev="loop3" ino=842 res=1 audit: type=1804 audit(1671607031.624:32): pid=10635 uid=0 auid=4294967295 ses=4294967295 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir4085561529/syzkaller.7YIy7H/28/file0/bus" dev="loop3" ino=842 res=1 loop_reread_partitions: partition scan of loop2 () failed (rc=-16) UDF-fs: warning (device loop3): udf_load_vrs: No VRS found UDF-fs: Scanning with blocksize 512 failed UDF-fs: warning (device loop3): udf_load_vrs: No VRS found UDF-fs: Scanning with blocksize 1024 failed UDF-fs: warning (device loop3): udf_load_vrs: No VRS found UDF-fs: Scanning with blocksize 2048 failed UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) loop2: AHDI p1 p4 loop2: p4 start 3914858496 is beyond EOD, truncated audit: type=1804 audit(1671607032.034:33): pid=10673 uid=0 auid=4294967295 ses=4294967295 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir4085561529/syzkaller.7YIy7H/29/file0/bus" dev="loop3" ino=842 res=1 audit: type=1804 audit(1671607032.144:34): pid=10673 uid=0 auid=4294967295 ses=4294967295 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir4085561529/syzkaller.7YIy7H/29/file0/bus" dev="loop3" ino=842 res=1 audit: type=1804 audit(1671607032.154:35): pid=10673 uid=0 auid=4294967295 ses=4294967295 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir4085561529/syzkaller.7YIy7H/29/file0/bus" dev="loop3" ino=842 res=1 F2FS-fs (loop5): invalid crc value F2FS-fs (loop5): Found nat_bits in checkpoint F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended EXT4-fs (loop2): orphan cleanup on readonly fs Quota error (device loop2): find_block_dqentry: Quota for id 2 referenced but not present UDF-fs: warning (device loop3): udf_load_vrs: No VRS found UDF-fs: Scanning with blocksize 512 failed EXT4-fs warning (device loop2): ext4_update_dynamic_rev:793: updating to rev 1 because of new feature flag, running e2fsck is recommended UDF-fs: warning (device loop3): udf_load_vrs: No VRS found UDF-fs: Scanning with blocksize 1024 failed UDF-fs: warning (device loop3): udf_load_vrs: No VRS found UDF-fs: Scanning with blocksize 2048 failed EXT4-fs (loop2): 2 truncates cleaned up EXT4-fs (loop2): mounted filesystem without journal. Opts: data_err=ignore,,errors=continue UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) F2FS-fs (loop5): invalid crc value F2FS-fs (loop5): Found nat_bits in checkpoint F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 IPVS: ftp: loaded support on port[0] = 21 F2FS-fs (loop5): invalid crc value hfsplus: can't free extent usb usb9: usbfs: interface 0 claimed by hub while 'syz-executor.2' sets config #0 REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal REISERFS (device loop1): using ordered data mode reiserfs: using flush barriers REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 usb usb9: usbfs: interface 0 claimed by usbfs while 'syz-executor.2' sets config #1 REISERFS (device loop1): checking transaction log (loop1) overlayfs: fs on '.' does not support file handles, falling back to index=off. REISERFS (device loop1): Using r5 hash to sort names REISERFS (device loop1): using 3.5.x disk format REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. hub 9-0:1.0: USB hub found hub 9-0:1.0: 8 ports detected overlayfs: fs on './file0' does not support file handles, falling back to index=off. XFS (loop0): Mounting V4 Filesystem XFS (loop0): Ending clean mount XFS (loop0): Quotacheck needed: Please wait. XFS (loop0): Quotacheck: Done. overlayfs: failed to resolve 'f': -2 XFS (loop0): Unmounting Filesystem usb usb9: usbfs: interface 0 claimed by hub while 'syz-executor.2' sets config #0 attempt to access beyond end of device loop3: rw=0, want=8257674, limit=256 hfsplus: extend alloc file! (8192,0,366) Buffer I/O error on dev loop3, logical block 4128836, async page read L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. attempt to access beyond end of device loop3: rw=0, want=8257674, limit=256 Buffer I/O error on dev loop3, logical block 4128836, async page read