./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2427783976 <...> Warning: Permanently added '10.128.1.243' (ED25519) to the list of known hosts. execve("./syz-executor2427783976", ["./syz-executor2427783976"], 0x7ffd17fad020 /* 10 vars */) = 0 brk(NULL) = 0x5555571ff000 brk(0x5555571ffd00) = 0x5555571ffd00 arch_prctl(ARCH_SET_FS, 0x5555571ff380) = 0 set_tid_address(0x5555571ff650) = 5026 set_robust_list(0x5555571ff660, 24) = 0 rseq(0x5555571ffca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2427783976", 4096) = 28 getrandom("\x80\xb4\xe8\x77\x74\x61\x76\xc6", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x5555571ffd00 brk(0x555557220d00) = 0x555557220d00 brk(0x555557221000) = 0x555557221000 mprotect(0x7f8177a6b000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 creat("./file1", 000) = 3 memfd_create("syzkaller", 0) = 4 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f816f5b1000 write(4, "\xb5\x84\x31\x7b\xb6\x84\x31\x7b\xb7\x84\x31\x7b\xb8\x84\x31\x7b\xb9\x84\x31\x7b\xba\x84\x31\x7b\xbb\x84\x31\x7b\xbc\x84\x31\x7b\xbd\x84\x31\x7b\xbe\x84\x31\x7b\xbf\x84\x31\x7b\xc0\x84\x31\x7b\xc1\x84\x31\x7b\xc2\x84\x31\x7b\xc3\x84\x31\x7b\xc4\x84\x31\x7b\xc5\x84\x31\x7b\xc6\x84\x31\x7b\xc7\x84\x31\x7b\xc8\x84\x31\x7b\xc9\x84\x31\x7b\xca\x84\x31\x7b\xcb\x84\x31\x7b\xcc\x84\x31\x7b\xcd\x84\x31\x7b"..., 65536) = 65536 munmap(0x7f816f5b1000, 65536) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 5 ioctl(5, LOOP_SET_FD, 4) = 0 close(4) = 0 mkdir("./file1", 0777) = -1 EEXIST (File exists) mount("/dev/loop0", "./file1", "sysv", 0, "\xff\x03") = 0 openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = -1 ENOTDIR (Not a directory) ioctl(5, LOOP_CLR_FD) = 0 close(5) = 0 [ 43.779555][ T5026] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5026 'syz-executor242' [ 43.793824][ T5026] loop0: detected capacity change from 0 to 128 [ 43.801488][ T5026] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 43.810809][ T5026] syz-executor242: attempt to access beyond end of device [ 43.810809][ T5026] loop0: rw=0, sector=8767744, nr_sectors = 1 limit=128 [ 43.825277][ T5026] Buffer I/O error on dev loop0, logical block 8767744, async page read [ 43.833794][ T5026] syz-executor242: attempt to access beyond end of device [ 43.833794][ T5026] loop0: rw=0, sector=13269809, nr_sectors = 1 limit=128 [ 43.848073][ T5026] Buffer I/O error on dev loop0, logical block 13269809, async page read [ 43.857185][ T5026] syz-executor242: attempt to access beyond end of device [ 43.857185][ T5026] loop0: rw=0, sector=1157, nr_sectors = 1 limit=128 [ 43.871049][ T5026] Buffer I/O error on dev loop0, logical block 1157, async page read [ 43.879222][ T5026] syz-executor242: attempt to access beyond end of device [ 43.879222][ T5026] loop0: rw=0, sector=3211264, nr_sectors = 1 limit=128 [ 43.893156][ T5026] Buffer I/O error on dev loop0, logical block 3211264, async page read [ 43.901473][ T5026] syz-executor242: attempt to access beyond end of device [ 43.901473][ T5026] loop0: rw=0, sector=8768635, nr_sectors = 1 limit=128 [ 43.915388][ T5026] Buffer I/O error on dev loop0, logical block 8768635, async page read [ 43.923761][ T5026] syz-executor242: attempt to access beyond end of device [ 43.923761][ T5026] loop0: rw=0, sector=13466417, nr_sectors = 1 limit=128 [ 43.937744][ T5026] Buffer I/O error on dev loop0, logical block 13466417, async page read [ 43.946180][ T5026] syz-executor242: attempt to access beyond end of device [ 43.946180][ T5026] loop0: rw=0, sector=209285, nr_sectors = 1 limit=128 [ 43.959985][ T5026] Buffer I/O error on dev loop0, logical block 209285, async page read [ 43.968312][ T5026] BUG: sleeping function called from invalid context at fs/buffer.c:1437 [ 43.976760][ T5026] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5026, name: syz-executor242 [ 43.986245][ T5026] preempt_count: 1, expected: 0 [ 43.991082][ T5026] RCU nest depth: 0, expected: 0 [ 43.996026][ T5026] INFO: lockdep is turned off. [ 44.000785][ T5026] Preemption disabled at: [ 44.000797][ T5026] [<0000000000000000>] 0x0 [ 44.009542][ T5026] CPU: 1 PID: 5026 Comm: syz-executor242 Not tainted 6.5.0-rc4-next-20230803-syzkaller #0 [ 44.019412][ T5026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 44.029447][ T5026] Call Trace: [ 44.032708][ T5026] [ 44.035622][ T5026] dump_stack_lvl+0x125/0x1b0 [ 44.040293][ T5026] __might_resched+0x3c3/0x5e0 [ 44.045057][ T5026] ? preempt_count_sub+0x150/0x150 [ 44.050159][ T5026] ? lock_sync+0x190/0x190 [ 44.054567][ T5026] __bread_gfp+0x3f/0x310 [ 44.058881][ T5026] get_branch+0x2cb/0x660 [ 44.063200][ T5026] get_block+0x1ad/0x14f0 [ 44.067532][ T5026] ? free_branches+0x3c0/0x3c0 [ 44.072304][ T5026] ? lock_release+0x4bf/0x680 [ 44.076977][ T5026] ? folio_create_buffers+0x109/0x160 [ 44.082335][ T5026] ? reacquire_held_locks+0x4b0/0x4b0 [ 44.087700][ T5026] ? zero_user_segments+0x2c7/0x360 [ 44.092883][ T5026] block_read_full_folio+0x3df/0xae0 [ 44.098154][ T5026] ? free_branches+0x3c0/0x3c0 [ 44.102907][ T5026] ? decrypt_bh+0x390/0x390 [ 44.107400][ T5026] ? lock_release+0x4bf/0x680 [ 44.112074][ T5026] ? folio_add_lru+0x41c/0x7d0 [ 44.116853][ T5026] ? sysv_bmap+0x30/0x30 [ 44.121111][ T5026] read_pages+0xa5b/0xda0 [ 44.125452][ T5026] ? folio_add_lru+0x452/0x7d0 [ 44.130225][ T5026] ? folio_flags.constprop.0+0x150/0x150 [ 44.135876][ T5026] page_cache_ra_unbounded+0x457/0x5e0 [ 44.141352][ T5026] page_cache_ra_order+0x72b/0xa80 [ 44.146474][ T5026] ? lock_release+0x4bf/0x680 [ 44.151164][ T5026] ? blk_cgroup_congested+0x145/0x2a0 [ 44.156544][ T5026] ondemand_readahead+0x540/0x1150 [ 44.161670][ T5026] page_cache_sync_ra+0x174/0x1d0 [ 44.166704][ T5026] filemap_get_pages+0xc05/0x1820 [ 44.171744][ T5026] ? rcu_is_watching+0x12/0xb0 [ 44.176514][ T5026] ? filemap_add_folio+0x1e0/0x1e0 [ 44.181636][ T5026] ? preempt_count_sub+0x150/0x150 [ 44.186763][ T5026] ? __module_address+0x55/0x3b0 [ 44.191716][ T5026] filemap_read+0x3b3/0xd20 [ 44.196226][ T5026] ? rcu_is_watching+0x12/0xb0 [ 44.200998][ T5026] ? filemap_get_pages+0x1820/0x1820 [ 44.206296][ T5026] ? kasan_save_stack+0x43/0x50 [ 44.211158][ T5026] ? kasan_save_stack+0x33/0x50 [ 44.216025][ T5026] generic_file_read_iter+0x346/0x450 [ 44.221407][ T5026] ? do_filp_open+0x1de/0x430 [ 44.226096][ T5026] ? do_sys_openat2+0x176/0x1e0 [ 44.230963][ T5026] __kernel_read+0x301/0x8a0 [ 44.235557][ T5026] ? __ia32_sys_llseek+0x390/0x390 [ 44.240680][ T5026] integrity_kernel_read+0x7f/0xb0 [ 44.245803][ T5026] ? integrity_inode_free+0x310/0x310 [ 44.251191][ T5026] ? kasan_set_track+0x25/0x30 [ 44.255968][ T5026] ima_calc_file_hash_tfm+0x2c5/0x3d0 [ 44.261355][ T5026] ? calc_buffer_shash_tfm+0x2d0/0x2d0 [ 44.266843][ T5026] ? generic_fillattr+0x65b/0x8c0 [ 44.271877][ T5026] ? kasan_save_stack+0x33/0x50 [ 44.276740][ T5026] ? sysv_write_begin+0xd0/0xd0 [ 44.281602][ T5026] ? ima_alloc_tfm+0x21d/0x2d0 [ 44.286380][ T5026] ima_calc_file_hash+0x1c6/0x4a0 [ 44.291417][ T5026] ima_collect_measurement+0x5e2/0x6f0 [ 44.296894][ T5026] ? ima_get_action+0xa0/0xa0 [ 44.301582][ T5026] ? rcu_is_watching+0x12/0xb0 [ 44.306354][ T5026] ? vfs_getxattr_alloc+0xf1/0x340 [ 44.311481][ T5026] ? do_raw_write_lock+0x11e/0x3b0 [ 44.316608][ T5026] ? ima_get_cache_status+0x1c0/0x1c0 [ 44.321992][ T5026] process_measurement+0xc87/0x1cc0 [ 44.327206][ T5026] ? mmap_violation_check+0x1f0/0x1f0 [ 44.332592][ T5026] ? tomoyo_check_open_permission+0x210/0x3b0 [ 44.338668][ T5026] ? tomoyo_path_number_perm+0x590/0x590 [ 44.344409][ T5026] ? apparmor_socket_create+0x680/0x680 [ 44.349965][ T5026] ? spin_bug+0x1d0/0x1d0 [ 44.354307][ T5026] ? apparmor_current_getsecid_subj+0x208/0x5d0 [ 44.360565][ T5026] ima_file_check+0xc2/0x110 [ 44.365171][ T5026] ? process_measurement+0x1cc0/0x1cc0 [ 44.370644][ T5026] ? may_open+0x1f2/0x400 [ 44.374984][ T5026] path_openat+0x17a1/0x29c0 [ 44.379590][ T5026] ? path_lookupat+0x770/0x770 [ 44.384370][ T5026] do_filp_open+0x1de/0x430 [ 44.388887][ T5026] ? may_open_dev+0xf0/0xf0 [ 44.393402][ T5026] ? expand_files+0x442/0x910 [ 44.398091][ T5026] ? _raw_spin_unlock+0x28/0x40 [ 44.402950][ T5026] ? alloc_fd+0x2da/0x6c0 [ 44.407284][ T5026] do_sys_openat2+0x176/0x1e0 [ 44.411976][ T5026] ? build_open_flags+0x690/0x690 [ 44.417016][ T5026] ? lock_release+0x4bf/0x680 [ 44.421704][ T5026] ? ptrace_notify+0xf4/0x130 [ 44.426383][ T5026] ? reacquire_held_locks+0x4b0/0x4b0 [ 44.431770][ T5026] __x64_sys_open+0x154/0x1e0 [ 44.436483][ T5026] ? do_sys_open+0x160/0x160 [ 44.441090][ T5026] ? _raw_spin_unlock_irq+0x2e/0x50 [ 44.446299][ T5026] ? ptrace_notify+0xf4/0x130 [ 44.450981][ T5026] do_syscall_64+0x38/0xb0 [ 44.455408][ T5026] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 44.461316][ T5026] RIP: 0033:0x7f81779ee989 [ 44.465731][ T5026] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 44.485340][ T5026] RSP: 002b:00007ffc9506a708 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 44.493764][ T5026] RAX: ffffffffffffffda RBX: 0031656c69662f2e RCX: 00007f81779ee989 [ 44.501741][ T5026] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 44.509711][ T5026] RBP: 00007f8177a6b610 R08: 0000000000009e5d R09: 00007ffc9506a8d8 [ 44.517685][ T5026] R10: 00007ffc9506a5d0 R11: 0000000000000246 R12: 0000000000000001 [ 44.525655][ T5026] R13: 00007ffc9506a8c8 R14: 0000000000000001 R15: 0000000000000001 [ 44.533634][ T5026] [ 44.537370][ T5026] syz-executor242: attempt to access beyond end of device [ 44.537370][ T5026] loop0: rw=0, sector=8767744, nr_sectors = 1 limit=128 [ 44.551389][ T5026] Buffer I/O error on dev loop0, logical block 8767744, async page read [ 44.559751][ T5026] syz-executor242: attempt to access beyond end of device [ 44.559751][ T5026] loop0: rw=0, sector=13269809, nr_sectors = 1 limit=128 [ 44.573743][ T5026] Buffer I/O error on dev loop0, logical block 13269809, async page read open("./file1", O_RDONLY) = 4 exit_group(0) = ? +++ exited with 0 +++ [ 44.5821