VFS: Found a Xenix FS (block size = 512) on device loop2 BUG: sleeping function called from invalid context at fs/buffer.c:1381 in_atomic(): 1, irqs_disabled(): 0, pid: 10776, name: syz-executor.2 3 locks held by syz-executor.2/10776: #0: (sb_writers#21){.+.+}, at: [] sb_start_write include/linux/fs.h:1551 [inline] #0: (sb_writers#21){.+.+}, at: [] mnt_want_write+0x3a/0xb0 fs/namespace.c:386 #1: (&sb->s_type->i_mutex_key#27){+.+.}, at: [] inode_lock include/linux/fs.h:719 [inline] #1: (&sb->s_type->i_mutex_key#27){+.+.}, at: [] do_truncate+0xf0/0x1a0 fs/open.c:61 #2: (pointers_lock){.+.+}, at: [] get_block+0x153/0x1230 fs/sysv/itree.c:217 Preemption disabled at: [< (null)>] (null) CPU: 0 PID: 10776 Comm: syz-executor.2 Not tainted 4.14.305-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x281 lib/dump_stack.c:58 ___might_sleep.cold+0x235/0x250 kernel/sched/core.c:6040 __getblk_gfp fs/buffer.c:1381 [inline] __bread_gfp+0x3e/0x2e0 fs/buffer.c:1428 sb_bread include/linux/buffer_head.h:343 [inline] get_branch+0x2ac/0x600 fs/sysv/itree.c:104 get_block+0x176/0x1230 fs/sysv/itree.c:218 block_truncate_page+0x2a8/0x8f0 fs/buffer.c:2944 sysv_truncate+0x1c4/0xd70 fs/sysv/itree.c:383 sysv_setattr+0x115/0x180 fs/sysv/file.c:47 notify_change+0x56b/0xd10 fs/attr.c:315 do_truncate+0xff/0x1a0 fs/open.c:63 vfs_truncate+0x456/0x680 fs/open.c:120 do_sys_truncate.part.0+0xdc/0xf0 fs/open.c:143 do_sys_truncate fs/open.c:137 [inline] SYSC_truncate fs/open.c:155 [inline] SyS_truncate+0x23/0x40 fs/open.c:153 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x5e/0xd3 RIP: 0033:0x7fdf5aeca0f9 RSP: 002b:00007fdf5943c168 EFLAGS: 00000246 ORIG_RAX: 000000000000004c RAX: ffffffffffffffda RBX: 00007fdf5afe9f80 RCX: 00007fdf5aeca0f9 RDX: 0000000000000000 RSI: 000000000000317b RDI: 00000000200001c0 RBP: 00007fdf5af25ae9 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fffa9b0d9ff R14: 00007fdf5943c300 R15: 0000000000022000 XFS (loop5): Mounting V4 Filesystem XFS (loop5): Ending clean mount XFS (loop5): Unmounting Filesystem XFS (loop3): Mounting V4 Filesystem XFS (loop3): Ending clean mount XFS (loop3): Unmounting Filesystem syz-executor.2 uses obsolete (PF_INET,SOCK_PACKET) netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. Zero length message leads to an empty skb XFS (loop3): Mounting V4 Filesystem XFS (loop3): Ending clean mount XFS (loop3): Unmounting Filesystem XFS (loop5): Mounting V4 Filesystem XFS (loop5): Ending clean mount XFS (loop5): Unmounting Filesystem rock: corrupted directory entry. extent=32, offset=2044, size=237 FAT-fs (loop2): Directory bread(block 196) failed FAT-fs (loop2): Directory bread(block 197) failed FAT-fs (loop2): Directory bread(block 198) failed FAT-fs (loop2): Directory bread(block 199) failed FAT-fs (loop2): Directory bread(block 200) failed FAT-fs (loop2): Directory bread(block 201) failed FAT-fs (loop2): Directory bread(block 202) failed FAT-fs (loop2): Directory bread(block 203) failed FAT-fs (loop2): Directory bread(block 196) failed FAT-fs (loop2): Directory bread(block 197) failed overlayfs: fs on './file0' does not support file handles, falling back to index=off. capability: warning: `syz-executor.2' uses deprecated v2 capabilities in a way that may be insecure rock: corrupted directory entry. extent=32, offset=2044, size=237 rock: corrupted directory entry. extent=32, offset=2044, size=237 overlayfs: fs on './file0' does not support file handles, falling back to index=off. overlayfs: fs on './file0' does not support file handles, falling back to index=off. syz-executor.4 (11034) used greatest stack depth: 24192 bytes left unregister_netdevice: waiting for ip6gre0 to become free. Usage count = -1 rock: corrupted directory entry. extent=32, offset=2044, size=237 rock: corrupted directory entry. extent=32, offset=2044, size=237 overlayfs: fs on './file0' does not support file handles, falling back to index=off. overlayfs: fs on './file0' does not support file handles, falling back to index=off. rock: corrupted directory entry. extent=32, offset=2044, size=237 rock: corrupted directory entry. extent=32, offset=2044, size=237 new mount options do not match the existing superblock, will be ignored batman_adv: Cannot find parent device device gretap1 entered promiscuous mode 9pnet: Insufficient options for proto=fd overlayfs: fs on './file0' does not support file handles, falling back to index=off. new mount options do not match the existing superblock, will be ignored