loop1: rw=0, want=6756799, limit=112 Buffer I/O error on dev loop1, logical block 6756798, async page read attempt to access beyond end of device loop1: rw=0, want=575895, limit=112 Buffer I/O error on dev loop1, logical block 575894, async page read BUG: sleeping function called from invalid context at fs/buffer.c:1381 in_atomic(): 1, irqs_disabled(): 0, pid: 10196, name: syz-executor.1 2 locks held by syz-executor.1/10196: #0: (&type->i_mutex_dir_key#8){.+.+}, at: [] inode_lock_shared include/linux/fs.h:729 [inline] #0: (&type->i_mutex_dir_key#8){.+.+}, at: [] lookup_slow+0x129/0x400 fs/namei.c:1674 #1: (pointers_lock){.+.+}, at: [] get_block+0x153/0x1230 fs/sysv/itree.c:217 Preemption disabled at: [< (null)>] (null) CPU: 1 PID: 10196 Comm: syz-executor.1 Not tainted 4.14.299-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x281 lib/dump_stack.c:58 ___might_sleep.cold+0x235/0x250 kernel/sched/core.c:6041 __getblk_gfp fs/buffer.c:1381 [inline] __bread_gfp+0x3e/0x2e0 fs/buffer.c:1428 sb_bread include/linux/buffer_head.h:343 [inline] get_branch+0x2ac/0x600 fs/sysv/itree.c:104 get_block+0x176/0x1230 fs/sysv/itree.c:218 block_read_full_page+0x25e/0x8d0 fs/buffer.c:2316 do_read_cache_page+0x38e/0xc10 mm/filemap.c:2713 read_mapping_page include/linux/pagemap.h:398 [inline] dir_get_page fs/sysv/dir.c:58 [inline] sysv_find_entry+0x20d/0x610 fs/sysv/dir.c:146 sysv_inode_by_name+0x5b/0x330 fs/sysv/dir.c:360 sysv_lookup fs/sysv/namei.c:53 [inline] sysv_lookup+0x64/0xe0 fs/sysv/namei.c:46 lookup_slow+0x20a/0x400 fs/namei.c:1696 walk_component+0x6a1/0xbc0 fs/namei.c:1825 lookup_last fs/namei.c:2293 [inline] path_lookupat+0x1bb/0x780 fs/namei.c:2343 filename_lookup+0x18a/0x510 fs/namei.c:2377 user_path include/linux/namei.h:62 [inline] do_mount+0x118/0x2a30 fs/namespace.c:2845 SYSC_mount fs/namespace.c:3121 [inline] SyS_mount+0xa8/0x120 fs/namespace.c:3098 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x5e/0xd3 attempt to access beyond end of device loop1: rw=0, want=10310910, limit=112 Buffer I/O error on dev loop1, logical block 10310909, async page read attempt to access beyond end of device loop1: rw=0, want=9216536, limit=112 Buffer I/O error on dev loop1, logical block 9216535, async page read VFS: Found a V7 FS (block size = 512) on device loop1 9pnet: Insufficient options for proto=fd attempt to access beyond end of device loop1: rw=0, want=9698052, limit=112 attempt to access beyond end of device loop1: rw=0, want=565370, limit=112 attempt to access beyond end of device ip6tnl0: Invalid MTU 536872256 requested, hw max 65407 loop1: rw=0, want=10282938, limit=112 attempt to access beyond end of device loop1: rw=0, want=7284998, limit=112 attempt to access beyond end of device loop1: rw=0, want=3984204, limit=112 attempt to access beyond end of device loop1: rw=0, want=6992027, limit=112 attempt to access beyond end of device 9pnet: Insufficient options for proto=fd loop1: rw=0, want=6756799, limit=112 attempt to access beyond end of device loop1: rw=0, want=575895, limit=112 attempt to access beyond end of device loop1: rw=0, want=10310910, limit=112 attempt to access beyond end of device loop1: rw=0, want=9216536, limit=112 VFS: Found a V7 FS (block size = 512) on device loop1 attempt to access beyond end of device loop1: rw=0, want=9698052, limit=112 attempt to access beyond end of device loop1: rw=0, want=565370, limit=112 attempt to access beyond end of device loop1: rw=0, want=10282938, limit=112 attempt to access beyond end of device loop1: rw=0, want=7284998, limit=112 attempt to access beyond end of device loop1: rw=0, want=3984204, limit=112 attempt to access beyond end of device loop1: rw=0, want=6992027, limit=112 attempt to access beyond end of device loop1: rw=0, want=6756799, limit=112 attempt to access beyond end of device loop1: rw=0, want=575895, limit=112 BUG: sleeping function called from invalid context at fs/buffer.c:1381 in_atomic(): 1, irqs_disabled(): 0, pid: 10271, name: syz-executor.1 2 locks held by syz-executor.1/10271: #0: (&type->i_mutex_dir_key#8){.+.+}, at: [] inode_lock_shared include/linux/fs.h:729 [inline] #0: (&type->i_mutex_dir_key#8){.+.+}, at: [] lookup_slow+0x129/0x400 fs/namei.c:1674 #1: (pointers_lock){.+.+}, at: [] get_block+0x153/0x1230 fs/sysv/itree.c:217 Preemption disabled at: [< (null)>] (null) CPU: 1 PID: 10271 Comm: syz-executor.1 Tainted: G W 4.14.299-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x281 lib/dump_stack.c:58 ___might_sleep.cold+0x235/0x250 kernel/sched/core.c:6041 __getblk_gfp fs/buffer.c:1381 [inline] __bread_gfp+0x3e/0x2e0 fs/buffer.c:1428 sb_bread include/linux/buffer_head.h:343 [inline] get_branch+0x2ac/0x600 fs/sysv/itree.c:104 get_block+0x176/0x1230 fs/sysv/itree.c:218 block_read_full_page+0x25e/0x8d0 fs/buffer.c:2316 do_read_cache_page+0x38e/0xc10 mm/filemap.c:2713 read_mapping_page include/linux/pagemap.h:398 [inline] dir_get_page fs/sysv/dir.c:58 [inline] sysv_find_entry+0x20d/0x610 fs/sysv/dir.c:146 sysv_inode_by_name+0x5b/0x330 fs/sysv/dir.c:360 sysv_lookup fs/sysv/namei.c:53 [inline] sysv_lookup+0x64/0xe0 fs/sysv/namei.c:46 lookup_slow+0x20a/0x400 fs/namei.c:1696 walk_component+0x6a1/0xbc0 fs/namei.c:1825 lookup_last fs/namei.c:2293 [inline] path_lookupat+0x1bb/0x780 fs/namei.c:2343 filename_lookup+0x18a/0x510 fs/namei.c:2377 user_path include/linux/namei.h:62 [inline] do_mount+0x118/0x2a30 fs/namespace.c:2845 SYSC_mount fs/namespace.c:3121 [inline] SyS_mount+0xa8/0x120 fs/namespace.c:3098 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x5e/0xd3 attempt to access beyond end of device loop1: rw=0, want=10310910, limit=112 attempt to access beyond end of device loop1: rw=0, want=9216536, limit=112 VFS: Found a V7 FS (block size = 512) on device loop1 attempt to access beyond end of device loop1: rw=0, want=9698052, limit=112 attempt to access beyond end of device loop1: rw=0, want=565370, limit=112 attempt to access beyond end of device loop1: rw=0, want=10282938, limit=112 attempt to access beyond end of device loop1: rw=0, want=7284998, limit=112 attempt to access beyond end of device loop1: rw=0, want=3984204, limit=112 attempt to access beyond end of device loop1: rw=0, want=6992027, limit=112 attempt to access beyond end of device loop1: rw=0, want=6756799, limit=112 attempt to access beyond end of device loop1: rw=0, want=575895, limit=112 attempt to access beyond end of device loop1: rw=0, want=10310910, limit=112 attempt to access beyond end of device loop1: rw=0, want=9216536, limit=112 bridge0: port 1(bridge_slave_0) entered disabled state bridge0: port 1(bridge_slave_0) entered disabled state bridge0: port 1(bridge_slave_0) entered disabled state bridge0: port 1(bridge_slave_0) entered disabled state EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (8000) nbd: must specify an index to disconnect unregister_netdevice: waiting for ip6gre0 to become free. Usage count = -1 netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. netlink: 112 bytes leftover after parsing attributes in process `syz-executor.5'. audit: type=1800 audit(1668544868.709:2): pid=10882 uid=0 auid=4294967295 ses=4294967295 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="file0" dev="sda1" ino=14074 res=0 audit: type=1804 audit(1668544868.719:3): pid=10882 uid=0 auid=4294967295 ses=4294967295 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir1640548947/syzkaller.8ojada/56/file0" dev="sda1" ino=14074 res=1 syz-executor.2 (10882) used greatest stack depth: 24272 bytes left audit: type=1800 audit(1668544869.039:4): pid=10906 uid=0 auid=4294967295 ses=4294967295 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="file0" dev="sda1" ino=14051 res=0 audit: type=1804 audit(1668544869.049:5): pid=10906 uid=0 auid=4294967295 ses=4294967295 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir1640548947/syzkaller.8ojada/57/file0" dev="sda1" ino=14051 res=1 [U] audit: type=1800 audit(1668544869.349:6): pid=10933 uid=0 auid=4294967295 ses=4294967295 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="file0" dev="sda1" ino=14097 res=0 audit: type=1804 audit(1668544869.379:7): pid=10933 uid=0 auid=4294967295 ses=4294967295 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir1640548947/syzkaller.8ojada/58/file0" dev="sda1" ino=14097 res=1 audit: type=1800 audit(1668544869.569:8): pid=10968 uid=0 auid=4294967295 ses=4294967295 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="file0" dev="sda1" ino=14054 res=0 audit: type=1804 audit(1668544869.599:9): pid=10968 uid=0 auid=4294967295 ses=4294967295 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir1640548947/syzkaller.8ojada/59/file0" dev="sda1" ino=14054 res=1 netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.