Buffer I/O error on dev loop5, logical block 13466417, async page read attempt to access beyond end of device loop5: rw=0, want=16147214, limit=128 Buffer I/O error on dev loop5, logical block 8073606, async page read BUG: sleeping function called from invalid context at fs/buffer.c:1381 in_atomic(): 1, irqs_disabled(): 0, pid: 10802, name: syz-executor.5 2 locks held by syz-executor.5/10802: #0: (&type->i_mutex_dir_key#17){.+.+}, at: [] inode_lock_shared include/linux/fs.h:729 [inline] #0: (&type->i_mutex_dir_key#17){.+.+}, at: [] lookup_slow+0x129/0x400 fs/namei.c:1674 #1: (pointers_lock){.+.+}, at: [] get_block+0x153/0x1230 fs/sysv/itree.c:217 Preemption disabled at: [< (null)>] (null) CPU: 0 PID: 10802 Comm: syz-executor.5 Not tainted 4.14.302-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x281 lib/dump_stack.c:58 ___might_sleep.cold+0x235/0x250 kernel/sched/core.c:6041 __getblk_gfp fs/buffer.c:1381 [inline] __bread_gfp+0x3e/0x2e0 fs/buffer.c:1428 sb_bread include/linux/buffer_head.h:343 [inline] get_branch+0x2ac/0x600 fs/sysv/itree.c:104 get_block+0x176/0x1230 fs/sysv/itree.c:218 block_read_full_page+0x25e/0x8d0 fs/buffer.c:2316 do_read_cache_page+0x38e/0xc10 mm/filemap.c:2713 read_mapping_page include/linux/pagemap.h:398 [inline] dir_get_page fs/sysv/dir.c:58 [inline] sysv_find_entry+0x20d/0x610 fs/sysv/dir.c:146 sysv_inode_by_name+0x5b/0x330 fs/sysv/dir.c:360 sysv_lookup fs/sysv/namei.c:53 [inline] sysv_lookup+0x64/0xe0 fs/sysv/namei.c:46 lookup_slow+0x20a/0x400 fs/namei.c:1696 walk_component+0x6a1/0xbc0 fs/namei.c:1825 link_path_walk+0x823/0x10a0 fs/namei.c:2154 path_lookupat+0xcb/0x780 fs/namei.c:2342 filename_lookup+0x18a/0x510 fs/namei.c:2377 user_path include/linux/namei.h:62 [inline] do_mount+0x118/0x2a30 fs/namespace.c:2845 SYSC_mount fs/namespace.c:3121 [inline] SyS_mount+0xa8/0x120 fs/namespace.c:3098 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x5e/0xd3 RIP: 0033:0x7fc9254080a9 RSP: 002b:00007fc92397a168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 00007fc925527f80 RCX: 00007fc9254080a9 RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000000 RBP: 00007fc925463ae9 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fff92e00acf R14: 00007fc92397a300 R15: 0000000000022000 attempt to access beyond end of device loop5: rw=0, want=6491550, limit=128 Buffer I/O error on dev loop5, logical block 3245774, async page read attempt to access beyond end of device loop5: rw=0, want=17669880, limit=128 Buffer I/O error on dev loop5, logical block 8834939, async page read BTRFS info (device loop4): using free space tree BTRFS error (device loop4): cannot mount because of unsupported optional features (0x800) BTRFS error (device loop4): open_ctree failed audit: type=1800 audit(1672014111.647:14): pid=10817 uid=0 auid=4294967295 ses=4294967295 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="bus" dev="loop1" ino=10 res=0 audit: type=1800 audit(1672014111.757:15): pid=10847 uid=0 auid=4294967295 ses=4294967295 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="bus" dev="loop0" ino=10 res=0 EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended attempt to access beyond end of device attempt to access beyond end of device EXT4-fs warning (device loop4): ext4_update_dynamic_rev:793: updating to rev 1 because of new feature flag, running e2fsck is recommended loop1: rw=2049, want=45104, limit=40427 BUG: sleeping function called from invalid context at fs/buffer.c:1381 in_atomic(): 1, irqs_disabled(): 0, pid: 10802, name: syz-executor.5 [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a80ec019, mo2=0002] 2 locks held by syz-executor.5/10802: attempt to access beyond end of device #0: (&type->i_mutex_dir_key#17){.+.+}, at: [] inode_lock_shared include/linux/fs.h:729 [inline] #0: (&type->i_mutex_dir_key#17){.+.+}, at: [] lookup_slow+0x129/0x400 fs/namei.c:1674 #1: (pointers_lock){.+.+}, at: [] get_block+0x153/0x1230 fs/sysv/itree.c:217 Preemption disabled at: [< (null)>] (null) System zones: loop3: rw=2049, want=45112, limit=40427 CPU: 0 PID: 10802 Comm: syz-executor.5 Tainted: G W 4.14.302-syzkaller #0 loop0: rw=2049, want=45104, limit=40427 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x281 lib/dump_stack.c:58 ___might_sleep.cold+0x235/0x250 kernel/sched/core.c:6041 __getblk_gfp fs/buffer.c:1381 [inline] __bread_gfp+0x3e/0x2e0 fs/buffer.c:1428 sb_bread include/linux/buffer_head.h:343 [inline] get_branch+0x2ac/0x600 fs/sysv/itree.c:104 get_block+0x176/0x1230 fs/sysv/itree.c:218 0-2 block_read_full_page+0x25e/0x8d0 fs/buffer.c:2316 , 18-18 , 34-35 do_read_cache_page+0x38e/0xc10 mm/filemap.c:2713 read_mapping_page include/linux/pagemap.h:398 [inline] dir_get_page fs/sysv/dir.c:58 [inline] sysv_find_entry+0x20d/0x610 fs/sysv/dir.c:146 sysv_inode_by_name+0x5b/0x330 fs/sysv/dir.c:360 sysv_lookup fs/sysv/namei.c:53 [inline] sysv_lookup+0x64/0xe0 fs/sysv/namei.c:46 lookup_slow+0x20a/0x400 fs/namei.c:1696 walk_component+0x6a1/0xbc0 fs/namei.c:1825 link_path_walk+0x823/0x10a0 fs/namei.c:2154 path_lookupat+0xcb/0x780 fs/namei.c:2342 filename_lookup+0x18a/0x510 fs/namei.c:2377 user_path include/linux/namei.h:62 [inline] do_mount+0x118/0x2a30 fs/namespace.c:2845 SYSC_mount fs/namespace.c:3121 [inline] SyS_mount+0xa8/0x120 fs/namespace.c:3098 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x5e/0xd3 RIP: 0033:0x7fc9254080a9 RSP: 002b:00007fc92397a168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 00007fc925527f80 RCX: 00007fc9254080a9 RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000000 RBP: 00007fc925463ae9 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fff92e00acf R14: 00007fc92397a300 R15: 0000000000022000 EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,barrier,quota,nombcache,,errors=continue autofs4:pid:10905:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.768), cmd(0xc0189371) autofs4:pid:10905:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189371) f2fs_msg: 17 callbacks suppressed F2FS-fs (loop3): Found nat_bits in checkpoint F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 BUG: sleeping function called from invalid context at fs/buffer.c:1381 attempt to access beyond end of device in_atomic(): 1, irqs_disabled(): 0, pid: 10802, name: syz-executor.5 loop3: rw=2049, want=45112, limit=40427 2 locks held by syz-executor.5/10802: #0: (&type->i_mutex_dir_key#17){.+.+}, at: [] inode_lock_shared include/linux/fs.h:729 [inline] #0: (&type->i_mutex_dir_key#17){.+.+}, at: [] lookup_slow+0x129/0x400 fs/namei.c:1674 #1: (pointers_lock){.+.+}, at: [] get_block+0x153/0x1230 fs/sysv/itree.c:217 Preemption disabled at: [< (null)>] (null) CPU: 1 PID: 10802 Comm: syz-executor.5 Tainted: G W 4.14.302-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x281 lib/dump_stack.c:58 ___might_sleep.cold+0x235/0x250 kernel/sched/core.c:6041 __getblk_gfp fs/buffer.c:1381 [inline] __bread_gfp+0x3e/0x2e0 fs/buffer.c:1428 sb_bread include/linux/buffer_head.h:343 [inline] get_branch+0x2ac/0x600 fs/sysv/itree.c:104 get_block+0x176/0x1230 fs/sysv/itree.c:218 block_read_full_page+0x25e/0x8d0 fs/buffer.c:2316 do_read_cache_page+0x38e/0xc10 mm/filemap.c:2713 read_mapping_page include/linux/pagemap.h:398 [inline] dir_get_page fs/sysv/dir.c:58 [inline] sysv_find_entry+0x20d/0x610 fs/sysv/dir.c:146 sysv_inode_by_name+0x5b/0x330 fs/sysv/dir.c:360 sysv_lookup fs/sysv/namei.c:53 [inline] sysv_lookup+0x64/0xe0 fs/sysv/namei.c:46 lookup_slow+0x20a/0x400 fs/namei.c:1696 walk_component+0x6a1/0xbc0 fs/namei.c:1825 link_path_walk+0x823/0x10a0 fs/namei.c:2154 path_lookupat+0xcb/0x780 fs/namei.c:2342 filename_lookup+0x18a/0x510 fs/namei.c:2377 user_path include/linux/namei.h:62 [inline] do_mount+0x118/0x2a30 fs/namespace.c:2845 SYSC_mount fs/namespace.c:3121 [inline] SyS_mount+0xa8/0x120 fs/namespace.c:3098 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x5e/0xd3 RIP: 0033:0x7fc9254080a9 RSP: 002b:00007fc92397a168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 00007fc925527f80 RCX: 00007fc9254080a9 RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000000 RBP: 00007fc925463ae9 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fff92e00acf R14: 00007fc92397a300 R15: 0000000000022000 BUG: sleeping function called from invalid context at fs/buffer.c:1381 in_atomic(): 1, irqs_disabled(): 0, pid: 10802, name: syz-executor.5 2 locks held by syz-executor.5/10802: #0: (&type->i_mutex_dir_key#17){.+.+}, at: [] inode_lock_shared include/linux/fs.h:729 [inline] #0: (&type->i_mutex_dir_key#17){.+.+}, at: [] lookup_slow+0x129/0x400 fs/namei.c:1674 #1: (pointers_lock){.+.+}, at: [] get_block+0x153/0x1230 fs/sysv/itree.c:217 Preemption disabled at: [< (null)>] (null) CPU: 1 PID: 10802 Comm: syz-executor.5 Tainted: G W 4.14.302-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x281 lib/dump_stack.c:58 ___might_sleep.cold+0x235/0x250 kernel/sched/core.c:6041 __getblk_gfp fs/buffer.c:1381 [inline] __bread_gfp+0x3e/0x2e0 fs/buffer.c:1428 sb_bread include/linux/buffer_head.h:343 [inline] get_branch+0x2ac/0x600 fs/sysv/itree.c:104 get_block+0x176/0x1230 fs/sysv/itree.c:218 block_read_full_page+0x25e/0x8d0 fs/buffer.c:2316 do_read_cache_page+0x38e/0xc10 mm/filemap.c:2713 read_mapping_page include/linux/pagemap.h:398 [inline] dir_get_page fs/sysv/dir.c:58 [inline] sysv_find_entry+0x20d/0x610 fs/sysv/dir.c:146 sysv_inode_by_name+0x5b/0x330 fs/sysv/dir.c:360 sysv_lookup fs/sysv/namei.c:53 [inline] sysv_lookup+0x64/0xe0 fs/sysv/namei.c:46 lookup_slow+0x20a/0x400 fs/namei.c:1696 walk_component+0x6a1/0xbc0 fs/namei.c:1825 link_path_walk+0x823/0x10a0 fs/namei.c:2154 path_lookupat+0xcb/0x780 fs/namei.c:2342 filename_lookup+0x18a/0x510 fs/namei.c:2377 user_path include/linux/namei.h:62 [inline] do_mount+0x118/0x2a30 fs/namespace.c:2845 SYSC_mount fs/namespace.c:3121 [inline] SyS_mount+0xa8/0x120 fs/namespace.c:3098 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x5e/0xd3 RIP: 0033:0x7fc9254080a9 RSP: 002b:00007fc92397a168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 00007fc925527f80 RCX: 00007fc9254080a9 RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000000 RBP: 00007fc925463ae9 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fff92e00acf R14: 00007fc92397a300 R15: 0000000000022000 BUG: sleeping function called from invalid context at fs/buffer.c:1381 in_atomic(): 1, irqs_disabled(): 0, pid: 10802, name: syz-executor.5 2 locks held by syz-executor.5/10802: #0: (&type->i_mutex_dir_key#17){.+.+}, at: [] inode_lock_shared include/linux/fs.h:729 [inline] #0: (&type->i_mutex_dir_key#17){.+.+}, at: [] lookup_slow+0x129/0x400 fs/namei.c:1674 #1: (pointers_lock){.+.+}, at: [] get_block+0x153/0x1230 fs/sysv/itree.c:217 Preemption disabled at: [< (null)>] (null) CPU: 1 PID: 10802 Comm: syz-executor.5 Tainted: G W 4.14.302-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x281 lib/dump_stack.c:58 ___might_sleep.cold+0x235/0x250 kernel/sched/core.c:6041 __getblk_gfp fs/buffer.c:1381 [inline] __bread_gfp+0x3e/0x2e0 fs/buffer.c:1428 sb_bread include/linux/buffer_head.h:343 [inline] get_branch+0x2ac/0x600 fs/sysv/itree.c:104 get_block+0x176/0x1230 fs/sysv/itree.c:218 block_read_full_page+0x25e/0x8d0 fs/buffer.c:2316 do_read_cache_page+0x38e/0xc10 mm/filemap.c:2713 read_mapping_page include/linux/pagemap.h:398 [inline] dir_get_page fs/sysv/dir.c:58 [inline] sysv_find_entry+0x20d/0x610 fs/sysv/dir.c:146 sysv_inode_by_name+0x5b/0x330 fs/sysv/dir.c:360 sysv_lookup fs/sysv/namei.c:53 [inline] sysv_lookup+0x64/0xe0 fs/sysv/namei.c:46 lookup_slow+0x20a/0x400 fs/namei.c:1696 walk_component+0x6a1/0xbc0 fs/namei.c:1825 link_path_walk+0x823/0x10a0 fs/namei.c:2154 path_lookupat+0xcb/0x780 fs/namei.c:2342 filename_lookup+0x18a/0x510 fs/namei.c:2377 user_path include/linux/namei.h:62 [inline] do_mount+0x118/0x2a30 fs/namespace.c:2845 SYSC_mount fs/namespace.c:3121 [inline] SyS_mount+0xa8/0x120 fs/namespace.c:3098 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x5e/0xd3 RIP: 0033:0x7fc9254080a9 RSP: 002b:00007fc92397a168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 00007fc925527f80 RCX: 00007fc9254080a9 RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000000 RBP: 00007fc925463ae9 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fff92e00acf R14: 00007fc92397a300 R15: 0000000000022000 BUG: sleeping function called from invalid context at fs/buffer.c:1381 in_atomic(): 1, irqs_disabled(): 0, pid: 10802, name: syz-executor.5 2 locks held by syz-executor.5/10802: #0: (&type->i_mutex_dir_key#17){.+.+}, at: [] inode_lock_shared include/linux/fs.h:729 [inline] #0: (&type->i_mutex_dir_key#17){.+.+}, at: [] lookup_slow+0x129/0x400 fs/namei.c:1674 #1: (pointers_lock){.+.+}, at: [] get_block+0x153/0x1230 fs/sysv/itree.c:217 Preemption disabled at: [< (null)>] (null) CPU: 1 PID: 10802 Comm: syz-executor.5 Tainted: G W 4.14.302-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x281 lib/dump_stack.c:58 ___might_sleep.cold+0x235/0x250 kernel/sched/core.c:6041 __getblk_gfp fs/buffer.c:1381 [inline] __bread_gfp+0x3e/0x2e0 fs/buffer.c:1428 sb_bread include/linux/buffer_head.h:343 [inline] get_branch+0x2ac/0x600 fs/sysv/itree.c:104 get_block+0x176/0x1230 fs/sysv/itree.c:218 block_read_full_page+0x25e/0x8d0 fs/buffer.c:2316 do_read_cache_page+0x38e/0xc10 mm/filemap.c:2713 read_mapping_page include/linux/pagemap.h:398 [inline] dir_get_page fs/sysv/dir.c:58 [inline] sysv_find_entry+0x20d/0x610 fs/sysv/dir.c:146 sysv_inode_by_name+0x5b/0x330 fs/sysv/dir.c:360 sysv_lookup fs/sysv/namei.c:53 [inline] sysv_lookup+0x64/0xe0 fs/sysv/namei.c:46 lookup_slow+0x20a/0x400 fs/namei.c:1696 walk_component+0x6a1/0xbc0 fs/namei.c:1825 link_path_walk+0x823/0x10a0 fs/namei.c:2154 path_lookupat+0xcb/0x780 fs/namei.c:2342 filename_lookup+0x18a/0x510 fs/namei.c:2377 user_path include/linux/namei.h:62 [inline] do_mount+0x118/0x2a30 fs/namespace.c:2845 SYSC_mount fs/namespace.c:3121 [inline] SyS_mount+0xa8/0x120 fs/namespace.c:3098 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x5e/0xd3 RIP: 0033:0x7fc9254080a9 RSP: 002b:00007fc92397a168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 00007fc925527f80 RCX: 00007fc9254080a9 RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000000 RBP: 00007fc925463ae9 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fff92e00acf R14: 00007fc92397a300 R15: 0000000000022000 BUG: sleeping function called from invalid context at fs/buffer.c:1381 in_atomic(): 1, irqs_disabled(): 0, pid: 10802, name: syz-executor.5 2 locks held by syz-executor.5/10802: #0: (&type->i_mutex_dir_key#17){.+.+}, at: [] inode_lock_shared include/linux/fs.h:729 [inline] #0: (&type->i_mutex_dir_key#17){.+.+}, at: [] lookup_slow+0x129/0x400 fs/namei.c:1674 #1: (pointers_lock){.+.+}, at: [] get_block+0x153/0x1230 fs/sysv/itree.c:217 Preemption disabled at: [< (null)>] (null) CPU: 1 PID: 10802 Comm: syz-executor.5 Tainted: G W 4.14.302-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x281 lib/dump_stack.c:58 ___might_sleep.cold+0x235/0x250 kernel/sched/core.c:6041 __getblk_gfp fs/buffer.c:1381 [inline] __bread_gfp+0x3e/0x2e0 fs/buffer.c:1428 sb_bread include/linux/buffer_head.h:343 [inline] get_branch+0x2ac/0x600 fs/sysv/itree.c:104 get_block+0x176/0x1230 fs/sysv/itree.c:218 block_read_full_page+0x25e/0x8d0 fs/buffer.c:2316 do_read_cache_page+0x38e/0xc10 mm/filemap.c:2713 read_mapping_page include/linux/pagemap.h:398 [inline] dir_get_page fs/sysv/dir.c:58 [inline] sysv_find_entry+0x20d/0x610 fs/sysv/dir.c:146 sysv_inode_by_name+0x5b/0x330 fs/sysv/dir.c:360 sysv_lookup fs/sysv/namei.c:53 [inline] sysv_lookup+0x64/0xe0 fs/sysv/namei.c:46 lookup_slow+0x20a/0x400 fs/namei.c:1696 walk_component+0x6a1/0xbc0 fs/namei.c:1825 link_path_walk+0x823/0x10a0 fs/namei.c:2154 path_lookupat+0xcb/0x780 fs/namei.c:2342 filename_lookup+0x18a/0x510 fs/namei.c:2377 user_path include/linux/namei.h:62 [inline] do_mount+0x118/0x2a30 fs/namespace.c:2845 SYSC_mount fs/namespace.c:3121 [inline] SyS_mount+0xa8/0x120 fs/namespace.c:3098 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x5e/0xd3 RIP: 0033:0x7fc9254080a9 RSP: 002b:00007fc92397a168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 00007fc925527f80 RCX: 00007fc9254080a9 RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000000 RBP: 00007fc925463ae9 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fff92e00acf R14: 00007fc92397a300 R15: 0000000000022000 BUG: sleeping function called from invalid context at fs/buffer.c:1381 in_atomic(): 1, irqs_disabled(): 0, pid: 10802, name: syz-executor.5 2 locks held by syz-executor.5/10802: #0: (&type->i_mutex_dir_key#17){.+.+}, at: [] inode_lock_shared include/linux/fs.h:729 [inline] #0: (&type->i_mutex_dir_key#17){.+.+}, at: [] lookup_slow+0x129/0x400 fs/namei.c:1674 #1: (pointers_lock){.+.+}, at: [] get_block+0x153/0x1230 fs/sysv/itree.c:217 Preemption disabled at: [< (null)>] (null) CPU: 1 PID: 10802 Comm: syz-executor.5 Tainted: G W 4.14.302-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x281 lib/dump_stack.c:58 ___might_sleep.cold+0x235/0x250 kernel/sched/core.c:6041 __getblk_gfp fs/buffer.c:1381 [inline] __bread_gfp+0x3e/0x2e0 fs/buffer.c:1428 sb_bread include/linux/buffer_head.h:343 [inline] get_branch+0x2ac/0x600 fs/sysv/itree.c:104 get_block+0x176/0x1230 fs/sysv/itree.c:218 block_read_full_page+0x25e/0x8d0 fs/buffer.c:2316 do_read_cache_page+0x38e/0xc10 mm/filemap.c:2713 read_mapping_page include/linux/pagemap.h:398 [inline] dir_get_page fs/sysv/dir.c:58 [inline] sysv_find_entry+0x20d/0x610 fs/sysv/dir.c:146 sysv_inode_by_name+0x5b/0x330 fs/sysv/dir.c:360 sysv_lookup fs/sysv/namei.c:53 [inline] sysv_lookup+0x64/0xe0 fs/sysv/namei.c:46 lookup_slow+0x20a/0x400 fs/namei.c:1696 walk_component+0x6a1/0xbc0 fs/namei.c:1825 link_path_walk+0x823/0x10a0 fs/namei.c:2154 path_lookupat+0xcb/0x780 fs/namei.c:2342 filename_lookup+0x18a/0x510 fs/namei.c:2377 user_path include/linux/namei.h:62 [inline] do_mount+0x118/0x2a30 fs/namespace.c:2845 SYSC_mount fs/namespace.c:3121 [inline] SyS_mount+0xa8/0x120 fs/namespace.c:3098 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x5e/0xd3 RIP: 0033:0x7fc9254080a9 RSP: 002b:00007fc92397a168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 00007fc925527f80 RCX: 00007fc9254080a9 RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000000 RBP: 00007fc925463ae9 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fff92e00acf R14: 00007fc92397a300 R15: 0000000000022000 BUG: sleeping function called from invalid context at fs/buffer.c:1381 in_atomic(): 1, irqs_disabled(): 0, pid: 10802, name: syz-executor.5 2 locks held by syz-executor.5/10802: #0: (&type->i_mutex_dir_key#17){.+.+}, at: [] inode_lock_shared include/linux/fs.h:729 [inline] #0: (&type->i_mutex_dir_key#17){.+.+}, at: [] lookup_slow+0x129/0x400 fs/namei.c:1674 #1: (pointers_lock){.+.+}, at: [] get_block+0x153/0x1230 fs/sysv/itree.c:217 Preemption disabled at: [< (null)>] (null) CPU: 0 PID: 10802 Comm: syz-executor.5 Tainted: G W 4.14.302-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x281 lib/dump_stack.c:58 ___might_sleep.cold+0x235/0x250 kernel/sched/core.c:6041 __getblk_gfp fs/buffer.c:1381 [inline] __bread_gfp+0x3e/0x2e0 fs/buffer.c:1428 sb_bread include/linux/buffer_head.h:343 [inline] get_branch+0x2ac/0x600 fs/sysv/itree.c:104 get_block+0x176/0x1230 fs/sysv/itree.c:218 block_read_full_page+0x25e/0x8d0 fs/buffer.c:2316 do_read_cache_page+0x38e/0xc10 mm/filemap.c:2713 read_mapping_page include/linux/pagemap.h:398 [inline] dir_get_page fs/sysv/dir.c:58 [inline] sysv_find_entry+0x20d/0x610 fs/sysv/dir.c:146 sysv_inode_by_name+0x5b/0x330 fs/sysv/dir.c:360 sysv_lookup fs/sysv/namei.c:53 [inline] sysv_lookup+0x64/0xe0 fs/sysv/namei.c:46 lookup_slow+0x20a/0x400 fs/namei.c:1696 walk_component+0x6a1/0xbc0 fs/namei.c:1825 link_path_walk+0x823/0x10a0 fs/namei.c:2154 path_lookupat+0xcb/0x780 fs/namei.c:2342 filename_lookup+0x18a/0x510 fs/namei.c:2377 user_path include/linux/namei.h:62 [inline] do_mount+0x118/0x2a30 fs/namespace.c:2845 SYSC_mount fs/namespace.c:3121 [inline] SyS_mount+0xa8/0x120 fs/namespace.c:3098 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x5e/0xd3 RIP: 0033:0x7fc9254080a9 RSP: 002b:00007fc92397a168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 00007fc925527f80 RCX: 00007fc9254080a9 RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000000 RBP: 00007fc925463ae9 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fff92e00acf R14: 00007fc92397a300 R15: 0000000000022000 BUG: sleeping function called from invalid context at fs/buffer.c:1381 in_atomic(): 1, irqs_disabled(): 0, pid: 10802, name: syz-executor.5 2 locks held by syz-executor.5/10802: #0: (&type->i_mutex_dir_key#17){.+.+}, at: [] inode_lock_shared include/linux/fs.h:729 [inline] #0: (&type->i_mutex_dir_key#17){.+.+}, at: [] lookup_slow+0x129/0x400 fs/namei.c:1674 #1: (pointers_lock){.+.+}, at: [] get_block+0x153/0x1230 fs/sysv/itree.c:217 Preemption disabled at: [< (null)>] (null) CPU: 0 PID: 10802 Comm: syz-executor.5 Tainted: G W 4.14.302-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x281 lib/dump_stack.c:58 ___might_sleep.cold+0x235/0x250 kernel/sched/core.c:6041 __getblk_gfp fs/buffer.c:1381 [inline] __bread_gfp+0x3e/0x2e0 fs/buffer.c:1428 sb_bread include/linux/buffer_head.h:343 [inline] get_branch+0x2ac/0x600 fs/sysv/itree.c:104 get_block+0x176/0x1230 fs/sysv/itree.c:218 block_read_full_page+0x25e/0x8d0 fs/buffer.c:2316 do_read_cache_page+0x38e/0xc10 mm/filemap.c:2713 read_mapping_page include/linux/pagemap.h:398 [inline] dir_get_page fs/sysv/dir.c:58 [inline] sysv_find_entry+0x20d/0x610 fs/sysv/dir.c:146 sysv_inode_by_name+0x5b/0x330 fs/sysv/dir.c:360 sysv_lookup fs/sysv/namei.c:53 [inline] sysv_lookup+0x64/0xe0 fs/sysv/namei.c:46 lookup_slow+0x20a/0x400 fs/namei.c:1696 walk_component+0x6a1/0xbc0 fs/namei.c:1825 link_path_walk+0x823/0x10a0 fs/namei.c:2154 path_lookupat+0xcb/0x780 fs/namei.c:2342 filename_lookup+0x18a/0x510 fs/namei.c:2377 user_path include/linux/namei.h:62 [inline] do_mount+0x118/0x2a30 fs/namespace.c:2845 SYSC_mount fs/namespace.c:3121 [inline] SyS_mount+0xa8/0x120 fs/namespace.c:3098 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x5e/0xd3 RIP: 0033:0x7fc9254080a9 RSP: 002b:00007fc92397a168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 00007fc925527f80 RCX: 00007fc9254080a9 RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000000 RBP: 00007fc925463ae9 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fff92e00acf R14: 00007fc92397a300 R15: 0000000000022000