./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor382069235 <...> Warning: Permanently added '10.128.1.96' (ED25519) to the list of known hosts. execve("./syz-executor382069235", ["./syz-executor382069235"], 0x7ffcc7a2fde0 /* 10 vars */) = 0 brk(NULL) = 0x555556026000 brk(0x555556026d00) = 0x555556026d00 arch_prctl(ARCH_SET_FS, 0x555556026380) = 0 set_tid_address(0x555556026650) = 5067 set_robust_list(0x555556026660, 24) = 0 rseq(0x555556026ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor382069235", 4096) = 27 getrandom("\x2f\x4a\xdc\x46\xdd\x78\x33\xda", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555556026d00 brk(0x555556047d00) = 0x555556047d00 brk(0x555556048000) = 0x555556048000 mprotect(0x7f0f31f9c000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/sys/kernel/debug/failslab/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_futex/ignore-private", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-highmem", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/min-order", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 mkdir("./syzkaller.dMQpwz", 0700) = 0 chmod("./syzkaller.dMQpwz", 0777) = 0 chdir("./syzkaller.dMQpwz") = 0 mkdir("./0", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5068 attached , child_tidptr=0x555556026650) = 5068 [pid 5068] set_robust_list(0x555556026660, 24) = 0 [pid 5068] chdir("./0") = 0 [pid 5068] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5068] setpgid(0, 0) = 0 [pid 5068] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5068] write(3, "1000", 4) = 4 [pid 5068] close(3) = 0 [pid 5068] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5068] memfd_create("syzkaller", 0) = 3 [pid 5068] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0f29a00000 [pid 5068] write(3, "\x68\x73\x71\x73\x07\x00\x00\x00\xfd\xf1\x7c\x63\x00\x40\x00\x00\x00\x00\x00\x00\x03\x00\x0e\x00\xd1\x01\x01\x00\x04\x00\x00\x00\x1f\x01\x00\x00\x00\x00\x00\x00\xed\x02\x00\x00\x00\x00\x00\x00\x91\x02\x00\x00\x00\x00\x00\x00\xd5\x02\x00\x00\x00\x00\x00\x00\x8f\x00\x00\x00\x00\x00\x00\x00\xd0\x01\x00\x00\x00\x00\x00\x00\x49\x02\x00\x00\x00\x00\x00\x00\x83\x02\x00\x00\x00\x00\x00\x00\x1a\x73\x79\x7a"..., 4096) = 4096 [pid 5068] munmap(0x7f0f29a00000, 138412032) = 0 [pid 5068] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5068] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5068] close(3) = 0 [pid 5068] close(4) = 0 [pid 5068] mkdir("./file0", 0777) = 0 [pid 5068] mount("/dev/loop0", "./file0", "squashfs", 0, "") = 0 [pid 5068] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5068] chdir("./file0") = 0 [ 77.430336][ T5068] loop0: detected capacity change from 0 to 8 [pid 5068] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5068] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 5068] write(4, "77", 2) = 2 [ 77.504149][ T5068] SQUASHFS error: Failed to read block 0x8f: -5 [ 77.511669][ T5068] SQUASHFS error: Failed to read block 0xc00090: -5 [ 77.518406][ T5068] SQUASHFS error: Failed to read block 0x8f: -5 [ 77.524688][ T5068] FAULT_INJECTION: forcing a failure. [ 77.524688][ T5068] name failslab, interval 1, probability 0, space 0, times 1 [ 77.537361][ T5068] CPU: 1 PID: 5068 Comm: syz-executor382 Not tainted 6.8.0-rc4-syzkaller-00005-gc664e16bb1ba #0 [ 77.547810][ T5068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 77.557877][ T5068] Call Trace: [ 77.561154][ T5068] [ 77.564084][ T5068] dump_stack_lvl+0x1e7/0x2e0 [ 77.568807][ T5068] ? __pfx_dump_stack_lvl+0x10/0x10 [ 77.574022][ T5068] ? __pfx__printk+0x10/0x10 [ 77.578634][ T5068] ? squashfs_readahead+0x197e/0x2110 [ 77.584023][ T5068] ? srso_return_thunk+0x5/0x5f [ 77.588896][ T5068] should_fail_ex+0x3ae/0x4e0 [ 77.593592][ T5068] ? read_indexes+0x5e/0x380 [ 77.598280][ T5068] should_failslab+0x9/0x20 [ 77.602792][ T5068] kmalloc_trace+0x76/0x360 [ 77.607310][ T5068] ? srso_return_thunk+0x5/0x5f [ 77.612184][ T5068] ? mark_lock+0x9a/0x350 [ 77.616519][ T5068] ? ima_calc_file_hash+0xadb/0x1b30 [ 77.621821][ T5068] read_indexes+0x5e/0x380 [ 77.626268][ T5068] read_blocklist+0x20c7/0x2580 [ 77.631157][ T5068] ? __pfx_read_blocklist+0x10/0x10 [ 77.636372][ T5068] ? __pfx_lock_release+0x10/0x10 [ 77.641416][ T5068] ? xas_descend+0x37e/0x470 [ 77.646029][ T5068] ? srso_return_thunk+0x5/0x5f [ 77.650906][ T5068] squashfs_readahead+0x187a/0x2110 [ 77.656157][ T5068] ? squashfs_readahead+0x6d9/0x2110 [ 77.661463][ T5068] ? __pfx_squashfs_readahead+0x10/0x10 [ 77.667035][ T5068] ? __pfx_lock_release+0x10/0x10 [ 77.672081][ T5068] ? srso_return_thunk+0x5/0x5f [ 77.676952][ T5068] ? srso_return_thunk+0x5/0x5f [ 77.681819][ T5068] ? blk_start_plug+0x6f/0x1b0 [ 77.686596][ T5068] read_pages+0x186/0x840 [ 77.690942][ T5068] ? __pfx_lru_add_fn+0x10/0x10 [ 77.695816][ T5068] ? __pfx_read_pages+0x10/0x10 [ 77.700677][ T5068] ? filemap_add_folio+0x228/0x570 [ 77.705804][ T5068] ? __pfx_filemap_add_folio+0x10/0x10 [ 77.711281][ T5068] ? srso_return_thunk+0x5/0x5f [ 77.716149][ T5068] ? page_cache_ra_order+0xad2/0xc80 [ 77.721456][ T5068] page_cache_ra_unbounded+0x68e/0x7c0 [ 77.726945][ T5068] filemap_get_pages+0x742/0x2090 [ 77.732030][ T5068] ? __pfx_filemap_get_pages+0x10/0x10 [ 77.737514][ T5068] ? __pfx___might_resched+0x10/0x10 [ 77.742810][ T5068] ? srso_return_thunk+0x5/0x5f [ 77.747678][ T5068] ? atime_needs_update+0x1f9/0x660 [ 77.752893][ T5068] ? touch_atime+0xf7/0x670 [ 77.757417][ T5068] filemap_read+0x41b/0xec0 [ 77.761961][ T5068] ? __pfx_filemap_read+0x10/0x10 [ 77.767012][ T5068] ? generic_file_read_iter+0x98/0x550 [ 77.772484][ T5068] ? kasan_save_track+0x51/0x80 [ 77.777357][ T5068] ? kasan_save_track+0x3f/0x80 [ 77.782224][ T5068] ? ima_calc_file_hash+0xaa3/0x1b30 [ 77.787519][ T5068] ? srso_return_thunk+0x5/0x5f [ 77.792401][ T5068] __kernel_read+0x5c9/0xab0 [ 77.797020][ T5068] ? __pfx___kernel_read+0x10/0x10 [ 77.802181][ T5068] ? srso_return_thunk+0x5/0x5f [ 77.807052][ T5068] ? kernel_fpu_begin_mask+0x245/0x300 [ 77.812529][ T5068] integrity_kernel_read+0xb0/0x100 [ 77.817756][ T5068] ? __pfx_integrity_kernel_read+0x10/0x10 [ 77.823581][ T5068] ? kernel_fpu_end+0x51/0x80 [ 77.828267][ T5068] ? srso_return_thunk+0x5/0x5f [ 77.833135][ T5068] ? sha256_ni_update+0x133/0x1f0 [ 77.838173][ T5068] ima_calc_file_hash+0xadb/0x1b30 [ 77.843301][ T5068] ? srso_return_thunk+0x5/0x5f [ 77.848173][ T5068] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 77.854078][ T5068] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 77.860422][ T5068] ? srso_return_thunk+0x5/0x5f [ 77.865305][ T5068] ? __pfx_ima_calc_file_hash+0x10/0x10 [ 77.870902][ T5068] ? srso_return_thunk+0x5/0x5f [ 77.875771][ T5068] ? mark_lock+0x9a/0x350 [ 77.880112][ T5068] ? srso_return_thunk+0x5/0x5f [ 77.884978][ T5068] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 77.890978][ T5068] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 77.897326][ T5068] ? srso_return_thunk+0x5/0x5f [ 77.902194][ T5068] ? make_vfsgid+0x46/0x90 [ 77.906668][ T5068] ? srso_return_thunk+0x5/0x5f [ 77.911588][ T5068] ? generic_fillattr+0x50a/0x740 [ 77.916645][ T5068] ? srso_return_thunk+0x5/0x5f [ 77.921540][ T5068] ima_collect_measurement+0x554/0xb40 [ 77.927033][ T5068] ? __pfx_ima_collect_measurement+0x10/0x10 [ 77.933031][ T5068] ? __mutex_lock+0x2ee/0xd70 [ 77.937748][ T5068] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 77.943236][ T5068] process_measurement+0x136d/0x21d0 [ 77.948563][ T5068] ? __pfx_process_measurement+0x10/0x10 [ 77.954233][ T5068] ? srso_return_thunk+0x5/0x5f [ 77.959106][ T5068] ? aa_get_newest_label+0xff/0x6f0 [ 77.964359][ T5068] ? __pfx_apparmor_file_open+0x10/0x10 [ 77.969924][ T5068] ? tomoyo_file_open+0x167/0x220 [ 77.974976][ T5068] ? srso_return_thunk+0x5/0x5f [ 77.979945][ T5068] ? srso_return_thunk+0x5/0x5f [ 77.984817][ T5068] ? end_current_label_crit_section+0x14d/0x180 [ 77.991084][ T5068] ima_file_check+0xf1/0x170 [ 77.995702][ T5068] ? __pfx_ima_file_check+0x10/0x10 [ 78.000931][ T5068] path_openat+0x28b6/0x3240 [ 78.005571][ T5068] ? __pfx_path_openat+0x10/0x10 [ 78.010547][ T5068] do_filp_open+0x234/0x490 [ 78.015127][ T5068] ? __pfx_do_filp_open+0x10/0x10 [ 78.020192][ T5068] ? srso_return_thunk+0x5/0x5f [ 78.025059][ T5068] ? _raw_spin_unlock+0x28/0x50 [ 78.029921][ T5068] ? srso_return_thunk+0x5/0x5f [ 78.034791][ T5068] ? alloc_fd+0x59c/0x640 [ 78.039150][ T5068] do_sys_openat2+0x13e/0x1d0 [ 78.043844][ T5068] ? __pfx_do_sys_openat2+0x10/0x10 [ 78.049055][ T5068] ? srso_return_thunk+0x5/0x5f [ 78.053923][ T5068] ? lockdep_hardirqs_on+0x98/0x140 [ 78.059140][ T5068] ? _raw_spin_unlock_irq+0x2e/0x50 [ 78.064350][ T5068] ? srso_return_thunk+0x5/0x5f [ 78.069217][ T5068] ? ptrace_notify+0x278/0x380 [ 78.074002][ T5068] __x64_sys_openat+0x247/0x2a0 [ 78.078869][ T5068] ? __pfx___x64_sys_openat+0x10/0x10 [ 78.084257][ T5068] ? do_syscall_64+0x108/0x240 [ 78.089043][ T5068] ? srso_return_thunk+0x5/0x5f [ 78.093912][ T5068] ? syscall_trace_enter+0x5e/0x150 [ 78.099133][ T5068] do_syscall_64+0xfb/0x240 [ 78.103659][ T5068] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 78.109568][ T5068] RIP: 0033:0x7f0f31f28169 [ 78.113990][ T5068] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 21 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 78.133603][ T5068] RSP: 002b:00007fff0cb7ae98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 78.142120][ T5068] RAX: ffffffffffffffda RBX: 00007fff0cb7aec0 RCX: 00007f0f31f28169 [ 78.150101][ T5068] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 00000000ffffff9c [ 78.158080][ T5068] RBP: 0000000000000002 R08: 00007fff0cb7ac36 R09: 0000000000000000 [ 78.166057][ T5068] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff0cb7aef0 [ 78.174034][ T5068] R13: 00007fff0cb7af30 R14: 0000000000001000 R15: 0000000000000003 [ 78.182035][ T5068] [ 78.185441][ T5068] SQUASHFS error: read_indexes: Failed to allocate block_list [ 78.194905][ T5068] SQUASHFS error: Failed to read block 0x8f: -5 [pid 5068] openat(AT_FDCWD, "./file2", O_RDONLY) = 5 [pid 5068] exit_group(0) = ? [pid 5068] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5068, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555560276f0 /* 4 entries */, 32768) = 112 umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./0/binderfs") = 0 umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x55555602f730 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555602f730 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./0/file0") = 0 getdents64(3, 0x5555560276f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./0") = 0 mkdir("./1", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 78.201375][ T5068] SQUASHFS error: Failed to read block 0x8f: -5 [ 78.208171][ T5068] SQUASHFS error: Failed to read block 0x8f: -5 [ 78.214694][ T5068] SQUASHFS error: Failed to read block 0x8f: -5 [ 78.221854][ T27] audit: type=1800 audit(1707868441.855:2): pid=5068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor382" name="file2" dev="loop0" ino=6 res=0 errno=0 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5070 attached [pid 5070] set_robust_list(0x555556026660, 24) = 0 [pid 5070] chdir("./1" [pid 5067] <... clone resumed>, child_tidptr=0x555556026650) = 5070 [pid 5070] <... chdir resumed>) = 0 [pid 5070] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5070] setpgid(0, 0) = 0 [pid 5070] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5070] write(3, "1000", 4) = 4 [pid 5070] close(3) = 0 [pid 5070] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5070] memfd_create("syzkaller", 0) = 3 [pid 5070] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0f29a00000 [pid 5070] write(3, "\x68\x73\x71\x73\x07\x00\x00\x00\xfd\xf1\x7c\x63\x00\x40\x00\x00\x00\x00\x00\x00\x03\x00\x0e\x00\xd1\x01\x01\x00\x04\x00\x00\x00\x1f\x01\x00\x00\x00\x00\x00\x00\xed\x02\x00\x00\x00\x00\x00\x00\x91\x02\x00\x00\x00\x00\x00\x00\xd5\x02\x00\x00\x00\x00\x00\x00\x8f\x00\x00\x00\x00\x00\x00\x00\xd0\x01\x00\x00\x00\x00\x00\x00\x49\x02\x00\x00\x00\x00\x00\x00\x83\x02\x00\x00\x00\x00\x00\x00\x1a\x73\x79\x7a"..., 4096) = 4096 [pid 5070] munmap(0x7f0f29a00000, 138412032) = 0 [pid 5070] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5070] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5070] close(3) = 0 [pid 5070] close(4) = 0 [pid 5070] mkdir("./file0", 0777) = 0 [pid 5070] mount("/dev/loop0", "./file0", "squashfs", 0, "") = 0 [pid 5070] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5070] chdir("./file0") = 0 [ 78.419369][ T5070] loop0: detected capacity change from 0 to 8 [pid 5070] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5070] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 5070] write(4, "77", 2) = 2 [ 78.498780][ T5070] SQUASHFS error: Failed to read block 0x8f: -5 [ 78.505925][ T5070] SQUASHFS error: Failed to read block 0xc00090: -5 [ 78.512807][ T5070] SQUASHFS error: Failed to read block 0x8f: -5 [ 78.519244][ T5070] SQUASHFS error: Failed to read block 0x8f: -5 [ 78.525531][ T5070] FAULT_INJECTION: forcing a failure. [ 78.525531][ T5070] name failslab, interval 1, probability 0, space 0, times 0 [ 78.538185][ T5070] CPU: 0 PID: 5070 Comm: syz-executor382 Not tainted 6.8.0-rc4-syzkaller-00005-gc664e16bb1ba #0 [ 78.548625][ T5070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 78.558696][ T5070] Call Trace: [ 78.561988][ T5070] [ 78.564924][ T5070] dump_stack_lvl+0x1e7/0x2e0 [ 78.569632][ T5070] ? __pfx_dump_stack_lvl+0x10/0x10 [ 78.574848][ T5070] ? __pfx__printk+0x10/0x10 [ 78.579462][ T5070] ? squashfs_readahead+0x197e/0x2110 [ 78.584863][ T5070] ? srso_return_thunk+0x5/0x5f [ 78.589750][ T5070] should_fail_ex+0x3ae/0x4e0 [ 78.594462][ T5070] ? read_indexes+0x5e/0x380 [ 78.599078][ T5070] should_failslab+0x9/0x20 [ 78.603600][ T5070] kmalloc_trace+0x76/0x360 [ 78.608117][ T5070] ? srso_return_thunk+0x5/0x5f [ 78.612988][ T5070] ? mark_lock+0x9a/0x350 [ 78.617331][ T5070] ? ima_calc_file_hash+0xadb/0x1b30 [ 78.622633][ T5070] read_indexes+0x5e/0x380 [ 78.627090][ T5070] read_blocklist+0x20c7/0x2580 [ 78.631986][ T5070] ? __pfx_read_blocklist+0x10/0x10 [ 78.637210][ T5070] ? __pfx_lock_release+0x10/0x10 [ 78.642266][ T5070] ? xas_descend+0x37e/0x470 [ 78.646887][ T5070] ? srso_return_thunk+0x5/0x5f [ 78.651768][ T5070] squashfs_readahead+0x187a/0x2110 [ 78.657028][ T5070] ? squashfs_readahead+0x6d9/0x2110 [ 78.662346][ T5070] ? __pfx_squashfs_readahead+0x10/0x10 [ 78.667930][ T5070] ? __pfx_lock_release+0x10/0x10 [ 78.672979][ T5070] ? srso_return_thunk+0x5/0x5f [ 78.677858][ T5070] ? srso_return_thunk+0x5/0x5f [ 78.682729][ T5070] ? blk_start_plug+0x6f/0x1b0 [ 78.687516][ T5070] read_pages+0x186/0x840 [ 78.691866][ T5070] ? __pfx_lru_add_fn+0x10/0x10 [ 78.696745][ T5070] ? __pfx_read_pages+0x10/0x10 [ 78.701611][ T5070] ? filemap_add_folio+0x228/0x570 [ 78.706745][ T5070] ? __pfx_filemap_add_folio+0x10/0x10 [ 78.712229][ T5070] ? srso_return_thunk+0x5/0x5f [ 78.717108][ T5070] ? page_cache_ra_order+0xad2/0xc80 [ 78.722416][ T5070] page_cache_ra_unbounded+0x68e/0x7c0 [ 78.727912][ T5070] filemap_get_pages+0x742/0x2090 [ 78.732994][ T5070] ? __pfx_filemap_get_pages+0x10/0x10 [ 78.738484][ T5070] ? __pfx___might_resched+0x10/0x10 [ 78.743783][ T5070] ? srso_return_thunk+0x5/0x5f [ 78.748655][ T5070] ? atime_needs_update+0x1f9/0x660 [ 78.753876][ T5070] ? touch_atime+0xf7/0x670 [ 78.758405][ T5070] filemap_read+0x41b/0xec0 [ 78.762955][ T5070] ? __pfx_filemap_read+0x10/0x10 [ 78.768009][ T5070] ? generic_file_read_iter+0x98/0x550 [ 78.773490][ T5070] ? kasan_save_track+0x51/0x80 [ 78.778359][ T5070] ? kasan_save_track+0x3f/0x80 [ 78.783232][ T5070] ? ima_calc_file_hash+0xaa3/0x1b30 [ 78.788524][ T5070] ? srso_return_thunk+0x5/0x5f [ 78.793405][ T5070] __kernel_read+0x5c9/0xab0 [ 78.798031][ T5070] ? __pfx___kernel_read+0x10/0x10 [ 78.803186][ T5070] ? srso_return_thunk+0x5/0x5f [ 78.808060][ T5070] ? kernel_fpu_begin_mask+0x245/0x300 [ 78.813538][ T5070] integrity_kernel_read+0xb0/0x100 [ 78.818762][ T5070] ? __pfx_integrity_kernel_read+0x10/0x10 [ 78.824591][ T5070] ? kernel_fpu_end+0x51/0x80 [ 78.829279][ T5070] ? srso_return_thunk+0x5/0x5f [ 78.834150][ T5070] ? sha256_ni_update+0x133/0x1f0 [ 78.839208][ T5070] ima_calc_file_hash+0xadb/0x1b30 [ 78.844337][ T5070] ? srso_return_thunk+0x5/0x5f [ 78.849209][ T5070] ? stack_trace_save+0x117/0x1d0 [ 78.854258][ T5070] ? srso_return_thunk+0x5/0x5f [ 78.859139][ T5070] ? __pfx_stack_trace_save+0x10/0x10 [ 78.864533][ T5070] ? squashfs_xattr_handler_get+0x585/0x900 [ 78.870460][ T5070] ? __pfx_ima_calc_file_hash+0x10/0x10 [ 78.876065][ T5070] ? srso_return_thunk+0x5/0x5f [ 78.880942][ T5070] ? mark_lock+0x9a/0x350 [ 78.885290][ T5070] ? srso_return_thunk+0x5/0x5f [ 78.890169][ T5070] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 78.896174][ T5070] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 78.902526][ T5070] ? srso_return_thunk+0x5/0x5f [ 78.907401][ T5070] ? make_vfsgid+0x46/0x90 [ 78.911828][ T5070] ? srso_return_thunk+0x5/0x5f [ 78.916697][ T5070] ? generic_fillattr+0x50a/0x740 [ 78.921742][ T5070] ? srso_return_thunk+0x5/0x5f [ 78.926627][ T5070] ima_collect_measurement+0x554/0xb40 [ 78.932163][ T5070] ? __pfx_ima_collect_measurement+0x10/0x10 [ 78.938187][ T5070] ? __mutex_lock+0x2ee/0xd70 [ 78.942908][ T5070] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 78.948404][ T5070] process_measurement+0x136d/0x21d0 [ 78.953740][ T5070] ? __pfx_process_measurement+0x10/0x10 [ 78.959400][ T5070] ? srso_return_thunk+0x5/0x5f [ 78.964273][ T5070] ? aa_get_newest_label+0xff/0x6f0 [ 78.969528][ T5070] ? __pfx_apparmor_file_open+0x10/0x10 [ 78.975094][ T5070] ? tomoyo_file_open+0x167/0x220 [ 78.980129][ T5070] ? srso_return_thunk+0x5/0x5f [ 78.985003][ T5070] ? srso_return_thunk+0x5/0x5f [ 78.989879][ T5070] ? end_current_label_crit_section+0x14d/0x180 [ 78.996149][ T5070] ima_file_check+0xf1/0x170 [ 79.000768][ T5070] ? __pfx_ima_file_check+0x10/0x10 [ 79.005995][ T5070] path_openat+0x28b6/0x3240 [ 79.010648][ T5070] ? __pfx_path_openat+0x10/0x10 [ 79.015623][ T5070] do_filp_open+0x234/0x490 [ 79.020146][ T5070] ? __pfx_do_filp_open+0x10/0x10 [ 79.025212][ T5070] ? srso_return_thunk+0x5/0x5f [ 79.030084][ T5070] ? _raw_spin_unlock+0x28/0x50 [ 79.034947][ T5070] ? srso_return_thunk+0x5/0x5f [ 79.039818][ T5070] ? alloc_fd+0x59c/0x640 [ 79.044178][ T5070] do_sys_openat2+0x13e/0x1d0 [ 79.048872][ T5070] ? __pfx_do_sys_openat2+0x10/0x10 [ 79.054083][ T5070] ? srso_return_thunk+0x5/0x5f [ 79.058951][ T5070] ? lockdep_hardirqs_on+0x98/0x140 [ 79.064167][ T5070] ? _raw_spin_unlock_irq+0x2e/0x50 [ 79.069382][ T5070] ? srso_return_thunk+0x5/0x5f [ 79.074259][ T5070] ? ptrace_notify+0x278/0x380 [ 79.079056][ T5070] __x64_sys_openat+0x247/0x2a0 [ 79.083928][ T5070] ? __pfx___x64_sys_openat+0x10/0x10 [ 79.089324][ T5070] ? do_syscall_64+0x108/0x240 [ 79.094113][ T5070] ? srso_return_thunk+0x5/0x5f [ 79.098989][ T5070] ? syscall_trace_enter+0x5e/0x150 [ 79.104224][ T5070] do_syscall_64+0xfb/0x240 [ 79.108754][ T5070] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 79.114665][ T5070] RIP: 0033:0x7f0f31f28169 [ 79.119089][ T5070] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 21 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 79.138718][ T5070] RSP: 002b:00007fff0cb7ae98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 79.147150][ T5070] RAX: ffffffffffffffda RBX: 00007fff0cb7aec0 RCX: 00007f0f31f28169 [ 79.155131][ T5070] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 00000000ffffff9c [ 79.163126][ T5070] RBP: 0000000000000002 R08: 00007fff0cb7ac36 R09: 0000000000000000 [ 79.171123][ T5070] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff0cb7aef0 [ 79.179111][ T5070] R13: 00007fff0cb7af30 R14: 0000000000001000 R15: 0000000000000003 [ 79.187116][ T5070] [ 79.191010][ T5070] SQUASHFS error: read_indexes: Failed to allocate block_list [pid 5070] openat(AT_FDCWD, "./file2", O_RDONLY) = 5 [pid 5070] exit_group(0) = ? [pid 5070] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5070, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555560276f0 /* 4 entries */, 32768) = 112 umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 79.199194][ T5070] SQUASHFS error: Failed to read block 0x8f: -5 [ 79.206138][ T5070] SQUASHFS error: Failed to read block 0x8f: -5 [ 79.212713][ T5070] SQUASHFS error: Failed to read block 0x8f: -5 [ 79.220489][ T27] audit: type=1800 audit(1707868442.855:3): pid=5070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor382" name="file2" dev="loop0" ino=6 res=0 errno=0 unlink("./1/binderfs") = 0 umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x55555602f730 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555602f730 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./1/file0") = 0 getdents64(3, 0x5555560276f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./1") = 0 mkdir("./2", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5071 attached , child_tidptr=0x555556026650) = 5071 [pid 5071] set_robust_list(0x555556026660, 24) = 0 [pid 5071] chdir("./2") = 0 [pid 5071] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5071] setpgid(0, 0) = 0 [pid 5071] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5071] write(3, "1000", 4) = 4 [pid 5071] close(3) = 0 [pid 5071] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5071] memfd_create("syzkaller", 0) = 3 [pid 5071] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0f29a00000 [pid 5071] write(3, "\x68\x73\x71\x73\x07\x00\x00\x00\xfd\xf1\x7c\x63\x00\x40\x00\x00\x00\x00\x00\x00\x03\x00\x0e\x00\xd1\x01\x01\x00\x04\x00\x00\x00\x1f\x01\x00\x00\x00\x00\x00\x00\xed\x02\x00\x00\x00\x00\x00\x00\x91\x02\x00\x00\x00\x00\x00\x00\xd5\x02\x00\x00\x00\x00\x00\x00\x8f\x00\x00\x00\x00\x00\x00\x00\xd0\x01\x00\x00\x00\x00\x00\x00\x49\x02\x00\x00\x00\x00\x00\x00\x83\x02\x00\x00\x00\x00\x00\x00\x1a\x73\x79\x7a"..., 4096) = 4096 [pid 5071] munmap(0x7f0f29a00000, 138412032) = 0 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5071] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5071] close(3) = 0 [pid 5071] close(4) = 0 [pid 5071] mkdir("./file0", 0777) = 0 [pid 5071] mount("/dev/loop0", "./file0", "squashfs", 0, "") = 0 [pid 5071] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 79.488757][ T5071] loop0: detected capacity change from 0 to 8 [pid 5071] chdir("./file0") = 0 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5071] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 5071] write(4, "77", 2) = 2 [ 79.558121][ T5071] SQUASHFS error: Failed to read block 0x8f: -5 [ 79.565245][ T5071] SQUASHFS error: Failed to read block 0xc00090: -5 [ 79.572045][ T5071] SQUASHFS error: Failed to read block 0x8f: -5 [ 79.578470][ T5071] SQUASHFS error: Failed to read block 0x8f: -5 [ 79.584763][ T5071] FAULT_INJECTION: forcing a failure. [ 79.584763][ T5071] name failslab, interval 1, probability 0, space 0, times 0 [ 79.597498][ T5071] CPU: 0 PID: 5071 Comm: syz-executor382 Not tainted 6.8.0-rc4-syzkaller-00005-gc664e16bb1ba #0 [ 79.607955][ T5071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 79.618040][ T5071] Call Trace: [ 79.621337][ T5071] [ 79.624273][ T5071] dump_stack_lvl+0x1e7/0x2e0 [ 79.628983][ T5071] ? __pfx_dump_stack_lvl+0x10/0x10 [ 79.634235][ T5071] ? __pfx__printk+0x10/0x10 [ 79.638858][ T5071] ? squashfs_readahead+0x197e/0x2110 [ 79.644272][ T5071] ? srso_return_thunk+0x5/0x5f [ 79.649160][ T5071] should_fail_ex+0x3ae/0x4e0 [ 79.653864][ T5071] ? read_indexes+0x5e/0x380 [ 79.658488][ T5071] should_failslab+0x9/0x20 [ 79.663015][ T5071] kmalloc_trace+0x76/0x360 [ 79.667540][ T5071] ? srso_return_thunk+0x5/0x5f [ 79.672416][ T5071] ? mark_lock+0x9a/0x350 [ 79.676762][ T5071] ? ima_calc_file_hash+0xadb/0x1b30 [ 79.682077][ T5071] read_indexes+0x5e/0x380 [ 79.686537][ T5071] read_blocklist+0x20c7/0x2580 [ 79.691442][ T5071] ? __pfx_read_blocklist+0x10/0x10 [ 79.696677][ T5071] ? __pfx_lock_release+0x10/0x10 [ 79.701735][ T5071] ? xas_descend+0x37e/0x470 [ 79.706362][ T5071] ? srso_return_thunk+0x5/0x5f [ 79.711255][ T5071] squashfs_readahead+0x187a/0x2110 [ 79.716522][ T5071] ? squashfs_readahead+0x6d9/0x2110 [ 79.721844][ T5071] ? __pfx_squashfs_readahead+0x10/0x10 [ 79.727428][ T5071] ? __pfx_lock_release+0x10/0x10 [ 79.732477][ T5071] ? srso_return_thunk+0x5/0x5f [ 79.737357][ T5071] ? srso_return_thunk+0x5/0x5f [ 79.742238][ T5071] ? blk_start_plug+0x6f/0x1b0 [ 79.747025][ T5071] read_pages+0x186/0x840 [ 79.751380][ T5071] ? __pfx_lru_add_fn+0x10/0x10 [ 79.756350][ T5071] ? __pfx_read_pages+0x10/0x10 [ 79.761223][ T5071] ? filemap_add_folio+0x228/0x570 [ 79.766358][ T5071] ? __pfx_filemap_add_folio+0x10/0x10 [ 79.771843][ T5071] ? srso_return_thunk+0x5/0x5f [ 79.776716][ T5071] ? page_cache_ra_order+0xad2/0xc80 [ 79.782030][ T5071] page_cache_ra_unbounded+0x68e/0x7c0 [ 79.787532][ T5071] filemap_get_pages+0x742/0x2090 [ 79.792615][ T5071] ? __pfx_filemap_get_pages+0x10/0x10 [ 79.798104][ T5071] ? __pfx___might_resched+0x10/0x10 [ 79.803403][ T5071] ? srso_return_thunk+0x5/0x5f [ 79.808276][ T5071] ? atime_needs_update+0x1f9/0x660 [ 79.813501][ T5071] ? touch_atime+0xf7/0x670 [ 79.818032][ T5071] filemap_read+0x41b/0xec0 [ 79.822588][ T5071] ? __pfx_filemap_read+0x10/0x10 [ 79.827646][ T5071] ? generic_file_read_iter+0x98/0x550 [ 79.833131][ T5071] ? kasan_save_track+0x51/0x80 [ 79.838005][ T5071] ? kasan_save_track+0x3f/0x80 [ 79.842883][ T5071] ? ima_calc_file_hash+0xaa3/0x1b30 [ 79.848179][ T5071] ? srso_return_thunk+0x5/0x5f [ 79.853062][ T5071] __kernel_read+0x5c9/0xab0 [ 79.857689][ T5071] ? __pfx___kernel_read+0x10/0x10 [ 79.862844][ T5071] ? srso_return_thunk+0x5/0x5f [ 79.867715][ T5071] ? kernel_fpu_begin_mask+0x245/0x300 [ 79.873191][ T5071] integrity_kernel_read+0xb0/0x100 [ 79.878417][ T5071] ? __pfx_integrity_kernel_read+0x10/0x10 [ 79.884248][ T5071] ? kernel_fpu_end+0x51/0x80 [ 79.888938][ T5071] ? srso_return_thunk+0x5/0x5f [ 79.893812][ T5071] ? sha256_ni_update+0x133/0x1f0 [ 79.898857][ T5071] ima_calc_file_hash+0xadb/0x1b30 [ 79.903991][ T5071] ? srso_return_thunk+0x5/0x5f [ 79.908872][ T5071] ? stack_trace_save+0x117/0x1d0 [ 79.913927][ T5071] ? srso_return_thunk+0x5/0x5f [ 79.918823][ T5071] ? __pfx_stack_trace_save+0x10/0x10 [ 79.924221][ T5071] ? squashfs_xattr_handler_get+0x585/0x900 [ 79.930143][ T5071] ? __pfx_ima_calc_file_hash+0x10/0x10 [ 79.935752][ T5071] ? srso_return_thunk+0x5/0x5f [ 79.940637][ T5071] ? mark_lock+0x9a/0x350 [ 79.944992][ T5071] ? srso_return_thunk+0x5/0x5f [ 79.949881][ T5071] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 79.955941][ T5071] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 79.962341][ T5071] ? srso_return_thunk+0x5/0x5f [ 79.967230][ T5071] ? make_vfsgid+0x46/0x90 [ 79.971662][ T5071] ? srso_return_thunk+0x5/0x5f [ 79.976538][ T5071] ? generic_fillattr+0x50a/0x740 [ 79.981583][ T5071] ? srso_return_thunk+0x5/0x5f [ 79.986465][ T5071] ima_collect_measurement+0x554/0xb40 [ 79.991954][ T5071] ? __pfx_ima_collect_measurement+0x10/0x10 [ 79.997958][ T5071] ? __mutex_lock+0x2ee/0xd70 [ 80.002688][ T5071] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 80.008186][ T5071] process_measurement+0x136d/0x21d0 [ 80.013527][ T5071] ? __pfx_process_measurement+0x10/0x10 [ 80.019213][ T5071] ? srso_return_thunk+0x5/0x5f [ 80.024131][ T5071] ? aa_get_newest_label+0xff/0x6f0 [ 80.029427][ T5071] ? __pfx_apparmor_file_open+0x10/0x10 [ 80.035008][ T5071] ? tomoyo_file_open+0x167/0x220 [ 80.040071][ T5071] ? srso_return_thunk+0x5/0x5f [ 80.044971][ T5071] ? srso_return_thunk+0x5/0x5f [ 80.049869][ T5071] ? end_current_label_crit_section+0x14d/0x180 [ 80.056170][ T5071] ima_file_check+0xf1/0x170 [ 80.060809][ T5071] ? __pfx_ima_file_check+0x10/0x10 [ 80.066050][ T5071] path_openat+0x28b6/0x3240 [ 80.070702][ T5071] ? __pfx_path_openat+0x10/0x10 [ 80.075681][ T5071] do_filp_open+0x234/0x490 [ 80.080302][ T5071] ? __pfx_do_filp_open+0x10/0x10 [ 80.085381][ T5071] ? srso_return_thunk+0x5/0x5f [ 80.090275][ T5071] ? _raw_spin_unlock+0x28/0x50 [ 80.095155][ T5071] ? srso_return_thunk+0x5/0x5f [ 80.100047][ T5071] ? alloc_fd+0x59c/0x640 [ 80.104421][ T5071] do_sys_openat2+0x13e/0x1d0 [ 80.109124][ T5071] ? __pfx_do_sys_openat2+0x10/0x10 [ 80.114339][ T5071] ? srso_return_thunk+0x5/0x5f [ 80.119218][ T5071] ? lockdep_hardirqs_on+0x98/0x140 [ 80.124438][ T5071] ? _raw_spin_unlock_irq+0x2e/0x50 [ 80.129651][ T5071] ? srso_return_thunk+0x5/0x5f [ 80.134524][ T5071] ? ptrace_notify+0x278/0x380 [ 80.139315][ T5071] __x64_sys_openat+0x247/0x2a0 [ 80.144191][ T5071] ? __pfx___x64_sys_openat+0x10/0x10 [ 80.149585][ T5071] ? do_syscall_64+0x108/0x240 [ 80.154373][ T5071] ? srso_return_thunk+0x5/0x5f [ 80.159248][ T5071] ? syscall_trace_enter+0x5e/0x150 [ 80.164473][ T5071] do_syscall_64+0xfb/0x240 [ 80.169005][ T5071] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 80.174925][ T5071] RIP: 0033:0x7f0f31f28169 [ 80.179351][ T5071] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 21 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 80.198978][ T5071] RSP: 002b:00007fff0cb7ae98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 80.207417][ T5071] RAX: ffffffffffffffda RBX: 00007fff0cb7aec0 RCX: 00007f0f31f28169 [ 80.215403][ T5071] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 00000000ffffff9c [ 80.223384][ T5071] RBP: 0000000000000002 R08: 00007fff0cb7ac36 R09: 0000000000000000 [ 80.231362][ T5071] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff0cb7aef0 [ 80.239341][ T5071] R13: 00007fff0cb7af30 R14: 0000000000001000 R15: 0000000000000003 [ 80.247344][ T5071] [ 80.251563][ T5071] SQUASHFS error: read_indexes: Failed to allocate block_list [pid 5071] openat(AT_FDCWD, "./file2", O_RDONLY) = 5 [pid 5071] exit_group(0) = ? [pid 5071] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5071, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555560276f0 /* 4 entries */, 32768) = 112 umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./2/binderfs") = 0 umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x55555602f730 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555602f730 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./2/file0") = 0 getdents64(3, 0x5555560276f0 /* 0 entries */, 32768) = 0 close(3) = 0 [ 80.259625][ T5071] SQUASHFS error: Failed to read block 0x8f: -5 [ 80.266438][ T5071] SQUASHFS error: Failed to read block 0x8f: -5 [ 80.272969][ T5071] SQUASHFS error: Failed to read block 0x8f: -5 [ 80.279777][ T27] audit: type=1800 audit(1707868443.915:4): pid=5071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor382" name="file2" dev="loop0" ino=6 res=0 errno=0 rmdir("./2") = 0 mkdir("./3", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5072 attached , child_tidptr=0x555556026650) = 5072 [pid 5072] set_robust_list(0x555556026660, 24) = 0 [pid 5072] chdir("./3") = 0 [pid 5072] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5072] setpgid(0, 0) = 0 [pid 5072] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5072] write(3, "1000", 4) = 4 [pid 5072] close(3) = 0 [pid 5072] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5072] memfd_create("syzkaller", 0) = 3 [pid 5072] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0f29a00000 [pid 5072] write(3, "\x68\x73\x71\x73\x07\x00\x00\x00\xfd\xf1\x7c\x63\x00\x40\x00\x00\x00\x00\x00\x00\x03\x00\x0e\x00\xd1\x01\x01\x00\x04\x00\x00\x00\x1f\x01\x00\x00\x00\x00\x00\x00\xed\x02\x00\x00\x00\x00\x00\x00\x91\x02\x00\x00\x00\x00\x00\x00\xd5\x02\x00\x00\x00\x00\x00\x00\x8f\x00\x00\x00\x00\x00\x00\x00\xd0\x01\x00\x00\x00\x00\x00\x00\x49\x02\x00\x00\x00\x00\x00\x00\x83\x02\x00\x00\x00\x00\x00\x00\x1a\x73\x79\x7a"..., 4096) = 4096 [pid 5072] munmap(0x7f0f29a00000, 138412032) = 0 [pid 5072] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5072] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5072] close(3) = 0 [pid 5072] close(4) = 0 [pid 5072] mkdir("./file0", 0777) = 0 [pid 5072] mount("/dev/loop0", "./file0", "squashfs", 0, "") = 0 [pid 5072] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5072] chdir("./file0") = 0 [pid 5072] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5072] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 5072] write(4, "77", 2) = 2 [ 80.468558][ T5072] loop0: detected capacity change from 0 to 8 [ 80.529425][ T5072] SQUASHFS error: Failed to read block 0x8f: -5 [ 80.536638][ T5072] SQUASHFS error: Failed to read block 0xc00090: -5 [ 80.543507][ T5072] SQUASHFS error: Failed to read block 0x8f: -5 [ 80.549922][ T5072] SQUASHFS error: Failed to read block 0x8f: -5 [ 80.556255][ T5072] SQUASHFS error: Failed to read block 0x8f: -5 [ 80.562642][ T5072] SQUASHFS error: Failed to read block 0x8f: -5 [ 80.569002][ T5072] FAULT_INJECTION: forcing a failure. [ 80.569002][ T5072] name failslab, interval 1, probability 0, space 0, times 0 [ 80.581827][ T5072] CPU: 0 PID: 5072 Comm: syz-executor382 Not tainted 6.8.0-rc4-syzkaller-00005-gc664e16bb1ba #0 [ 80.592268][ T5072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 80.602344][ T5072] Call Trace: [ 80.605641][ T5072] [ 80.608580][ T5072] dump_stack_lvl+0x1e7/0x2e0 [ 80.613295][ T5072] ? __pfx_dump_stack_lvl+0x10/0x10 [ 80.618548][ T5072] ? __pfx__printk+0x10/0x10 [ 80.623189][ T5072] should_fail_ex+0x3ae/0x4e0 [ 80.627897][ T5072] ? read_indexes+0x5e/0x380 [ 80.632513][ T5072] should_failslab+0x9/0x20 [ 80.637035][ T5072] kmalloc_trace+0x76/0x360 [ 80.641575][ T5072] read_indexes+0x5e/0x380 [ 80.646019][ T5072] ? srso_return_thunk+0x5/0x5f [ 80.650900][ T5072] ? mark_lock+0x9a/0x350 [ 80.655256][ T5072] read_blocklist+0x20c7/0x2580 [ 80.660157][ T5072] ? __pfx_read_blocklist+0x10/0x10 [ 80.665396][ T5072] ? __pfx___might_resched+0x10/0x10 [ 80.670695][ T5072] ? srso_return_thunk+0x5/0x5f [ 80.675582][ T5072] squashfs_read_folio+0x512/0xee0 [ 80.680739][ T5072] ? page_cache_ra_unbounded+0x698/0x7c0 [ 80.686408][ T5072] ? __pfx_squashfs_read_folio+0x10/0x10 [ 80.692078][ T5072] ? __pfx___up_read+0x10/0x10 [ 80.696878][ T5072] filemap_read_folio+0x1a2/0x790 [ 80.701944][ T5072] ? __pfx_squashfs_read_folio+0x10/0x10 [ 80.707619][ T5072] ? __pfx_filemap_read_folio+0x10/0x10 [ 80.713208][ T5072] filemap_get_pages+0x15a8/0x2090 [ 80.718402][ T5072] ? __pfx_filemap_get_pages+0x10/0x10 [ 80.723910][ T5072] ? __pfx___might_resched+0x10/0x10 [ 80.729218][ T5072] ? srso_return_thunk+0x5/0x5f [ 80.734109][ T5072] ? atime_needs_update+0x1f9/0x660 [ 80.739344][ T5072] ? touch_atime+0xf7/0x670 [ 80.743882][ T5072] filemap_read+0x41b/0xec0 [ 80.748454][ T5072] ? __pfx_filemap_read+0x10/0x10 [ 80.753520][ T5072] ? generic_file_read_iter+0x98/0x550 [ 80.759013][ T5072] ? kasan_save_track+0x51/0x80 [ 80.763898][ T5072] ? kasan_save_track+0x3f/0x80 [ 80.768773][ T5072] ? ima_calc_file_hash+0xaa3/0x1b30 [ 80.774075][ T5072] ? srso_return_thunk+0x5/0x5f [ 80.778964][ T5072] __kernel_read+0x5c9/0xab0 [ 80.783590][ T5072] ? __pfx___kernel_read+0x10/0x10 [ 80.788746][ T5072] ? srso_return_thunk+0x5/0x5f [ 80.793622][ T5072] ? kernel_fpu_begin_mask+0x245/0x300 [ 80.799109][ T5072] integrity_kernel_read+0xb0/0x100 [ 80.804337][ T5072] ? __pfx_integrity_kernel_read+0x10/0x10 [ 80.810171][ T5072] ? kernel_fpu_end+0x51/0x80 [ 80.814865][ T5072] ? srso_return_thunk+0x5/0x5f [ 80.819741][ T5072] ? sha256_ni_update+0x133/0x1f0 [ 80.824786][ T5072] ima_calc_file_hash+0xadb/0x1b30 [ 80.829930][ T5072] ? srso_return_thunk+0x5/0x5f [ 80.834801][ T5072] ? stack_trace_save+0x117/0x1d0 [ 80.839842][ T5072] ? srso_return_thunk+0x5/0x5f [ 80.844720][ T5072] ? __pfx_stack_trace_save+0x10/0x10 [ 80.850124][ T5072] ? squashfs_xattr_handler_get+0x585/0x900 [ 80.856034][ T5072] ? __pfx_ima_calc_file_hash+0x10/0x10 [ 80.861641][ T5072] ? srso_return_thunk+0x5/0x5f [ 80.866519][ T5072] ? mark_lock+0x9a/0x350 [ 80.870878][ T5072] ? srso_return_thunk+0x5/0x5f [ 80.875783][ T5072] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 80.881820][ T5072] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 80.888191][ T5072] ? srso_return_thunk+0x5/0x5f [ 80.893077][ T5072] ? make_vfsgid+0x46/0x90 [ 80.897511][ T5072] ? srso_return_thunk+0x5/0x5f [ 80.902386][ T5072] ? generic_fillattr+0x50a/0x740 [ 80.907432][ T5072] ? srso_return_thunk+0x5/0x5f [ 80.912316][ T5072] ima_collect_measurement+0x554/0xb40 [ 80.917811][ T5072] ? __pfx_ima_collect_measurement+0x10/0x10 [ 80.923823][ T5072] ? __mutex_lock+0x2ee/0xd70 [ 80.928546][ T5072] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 80.934042][ T5072] process_measurement+0x136d/0x21d0 [ 80.939390][ T5072] ? __pfx_process_measurement+0x10/0x10 [ 80.945061][ T5072] ? srso_return_thunk+0x5/0x5f [ 80.949940][ T5072] ? aa_get_newest_label+0xff/0x6f0 [ 80.955212][ T5072] ? __pfx_apparmor_file_open+0x10/0x10 [ 80.960793][ T5072] ? tomoyo_file_open+0x167/0x220 [ 80.965843][ T5072] ? srso_return_thunk+0x5/0x5f [ 80.970733][ T5072] ? srso_return_thunk+0x5/0x5f [ 80.975613][ T5072] ? end_current_label_crit_section+0x14d/0x180 [ 80.981910][ T5072] ima_file_check+0xf1/0x170 [ 80.986548][ T5072] ? __pfx_ima_file_check+0x10/0x10 [ 80.991789][ T5072] path_openat+0x28b6/0x3240 [ 80.996440][ T5072] ? __pfx_path_openat+0x10/0x10 [ 81.001424][ T5072] do_filp_open+0x234/0x490 [ 81.005957][ T5072] ? __pfx_do_filp_open+0x10/0x10 [ 81.011035][ T5072] ? srso_return_thunk+0x5/0x5f [ 81.015917][ T5072] ? _raw_spin_unlock+0x28/0x50 [ 81.020798][ T5072] ? srso_return_thunk+0x5/0x5f [ 81.025684][ T5072] ? alloc_fd+0x59c/0x640 [ 81.030062][ T5072] do_sys_openat2+0x13e/0x1d0 [ 81.034765][ T5072] ? __pfx_do_sys_openat2+0x10/0x10 [ 81.039985][ T5072] ? srso_return_thunk+0x5/0x5f [ 81.044862][ T5072] ? lockdep_hardirqs_on+0x98/0x140 [ 81.050085][ T5072] ? _raw_spin_unlock_irq+0x2e/0x50 [ 81.055304][ T5072] ? srso_return_thunk+0x5/0x5f [ 81.060188][ T5072] ? ptrace_notify+0x278/0x380 [ 81.064985][ T5072] __x64_sys_openat+0x247/0x2a0 [ 81.069860][ T5072] ? __pfx___x64_sys_openat+0x10/0x10 [ 81.075252][ T5072] ? do_syscall_64+0x108/0x240 [ 81.080048][ T5072] ? srso_return_thunk+0x5/0x5f [ 81.084927][ T5072] ? syscall_trace_enter+0x5e/0x150 [ 81.090154][ T5072] do_syscall_64+0xfb/0x240 [ 81.094686][ T5072] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 81.100601][ T5072] RIP: 0033:0x7f0f31f28169 [ 81.105027][ T5072] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 21 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 81.124650][ T5072] RSP: 002b:00007fff0cb7ae98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 81.133087][ T5072] RAX: ffffffffffffffda RBX: 00007fff0cb7aec0 RCX: 00007f0f31f28169 [ 81.141076][ T5072] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 00000000ffffff9c [ 81.149060][ T5072] RBP: 0000000000000002 R08: 00007fff0cb7ac36 R09: 0000000000000000 [ 81.157038][ T5072] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff0cb7aef0 [ 81.165018][ T5072] R13: 00007fff0cb7af30 R14: 0000000000001000 R15: 0000000000000003 [ 81.173020][ T5072] [pid 5072] openat(AT_FDCWD, "./file2", O_RDONLY) = 5 [pid 5072] exit_group(0) = ? [pid 5072] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5072, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555560276f0 /* 4 entries */, 32768) = 112 [ 81.176847][ T5072] SQUASHFS error: read_indexes: Failed to allocate block_list [ 81.184551][ T27] audit: type=1800 audit(1707868444.815:5): pid=5072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor382" name="file2" dev="loop0" ino=6 res=0 errno=0 umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./3/binderfs") = 0 umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x55555602f730 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555602f730 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./3/file0") = 0 getdents64(3, 0x5555560276f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./3") = 0 mkdir("./4", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5073 attached , child_tidptr=0x555556026650) = 5073 [pid 5073] set_robust_list(0x555556026660, 24) = 0 [pid 5073] chdir("./4") = 0 [pid 5073] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5073] setpgid(0, 0) = 0 [pid 5073] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5073] write(3, "1000", 4) = 4 [pid 5073] close(3) = 0 [pid 5073] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5073] memfd_create("syzkaller", 0) = 3 [pid 5073] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0f29a00000 [pid 5073] write(3, "\x68\x73\x71\x73\x07\x00\x00\x00\xfd\xf1\x7c\x63\x00\x40\x00\x00\x00\x00\x00\x00\x03\x00\x0e\x00\xd1\x01\x01\x00\x04\x00\x00\x00\x1f\x01\x00\x00\x00\x00\x00\x00\xed\x02\x00\x00\x00\x00\x00\x00\x91\x02\x00\x00\x00\x00\x00\x00\xd5\x02\x00\x00\x00\x00\x00\x00\x8f\x00\x00\x00\x00\x00\x00\x00\xd0\x01\x00\x00\x00\x00\x00\x00\x49\x02\x00\x00\x00\x00\x00\x00\x83\x02\x00\x00\x00\x00\x00\x00\x1a\x73\x79\x7a"..., 4096) = 4096 [pid 5073] munmap(0x7f0f29a00000, 138412032) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5073] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5073] close(3) = 0 [pid 5073] close(4) = 0 [pid 5073] mkdir("./file0", 0777) = 0 [pid 5073] mount("/dev/loop0", "./file0", "squashfs", 0, "") = 0 [pid 5073] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5073] chdir("./file0") = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5073] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 5073] write(4, "77", 2) = 2 [ 81.412115][ T5073] loop0: detected capacity change from 0 to 8 [ 81.455669][ T5073] SQUASHFS error: Failed to read block 0x8f: -5 [ 81.474561][ T5073] SQUASHFS error: Failed to read block 0xc00090: -5 [ 81.492416][ T5073] SQUASHFS error: Failed to read block 0x8f: -5 [ 81.500638][ T5073] SQUASHFS error: Failed to read block 0x8f: -5 [ 81.507586][ T5073] SQUASHFS error: Failed to read block 0x8f: -5 [ 81.514811][ T5073] SQUASHFS error: Failed to read block 0x8f: -5 [ 81.522036][ T5073] FAULT_INJECTION: forcing a failure. [ 81.522036][ T5073] name failslab, interval 1, probability 0, space 0, times 0 [ 81.535220][ T5073] CPU: 0 PID: 5073 Comm: syz-executor382 Not tainted 6.8.0-rc4-syzkaller-00005-gc664e16bb1ba #0 [ 81.545775][ T5073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 81.555858][ T5073] Call Trace: [ 81.559158][ T5073] [ 81.562103][ T5073] dump_stack_lvl+0x1e7/0x2e0 [ 81.566820][ T5073] ? __pfx_dump_stack_lvl+0x10/0x10 [ 81.572051][ T5073] ? __pfx__printk+0x10/0x10 [ 81.576677][ T5073] ? read_blocklist+0x2189/0x2580 [ 81.581742][ T5073] should_fail_ex+0x3ae/0x4e0 [ 81.586445][ T5073] ? squashfs_readpage_block+0x19a/0xf00 [ 81.592099][ T5073] should_failslab+0x9/0x20 [ 81.596624][ T5073] __kmalloc+0xe6/0x490 [ 81.600814][ T5073] squashfs_readpage_block+0x19a/0xf00 [ 81.606323][ T5073] squashfs_read_folio+0x569/0xee0 [ 81.611464][ T5073] ? page_cache_ra_unbounded+0x698/0x7c0 [ 81.617135][ T5073] ? __pfx_squashfs_read_folio+0x10/0x10 [ 81.622801][ T5073] ? __pfx___up_read+0x10/0x10 [ 81.627597][ T5073] filemap_read_folio+0x1a2/0x790 [ 81.632650][ T5073] ? __pfx_squashfs_read_folio+0x10/0x10 [ 81.638316][ T5073] ? __pfx_filemap_read_folio+0x10/0x10 [ 81.643907][ T5073] filemap_get_pages+0x15a8/0x2090 [ 81.649096][ T5073] ? __pfx_filemap_get_pages+0x10/0x10 [ 81.654593][ T5073] ? __pfx___might_resched+0x10/0x10 [ 81.659897][ T5073] ? srso_return_thunk+0x5/0x5f [ 81.664779][ T5073] ? atime_needs_update+0x1f9/0x660 [ 81.670009][ T5073] ? touch_atime+0xf7/0x670 [ 81.674556][ T5073] filemap_read+0x41b/0xec0 [ 81.679129][ T5073] ? __pfx_filemap_read+0x10/0x10 [ 81.684199][ T5073] ? generic_file_read_iter+0x98/0x550 [ 81.689689][ T5073] ? kasan_save_track+0x51/0x80 [ 81.694567][ T5073] ? kasan_save_track+0x3f/0x80 [ 81.699452][ T5073] ? ima_calc_file_hash+0xaa3/0x1b30 [ 81.704758][ T5073] ? srso_return_thunk+0x5/0x5f [ 81.709646][ T5073] __kernel_read+0x5c9/0xab0 [ 81.714285][ T5073] ? __pfx___kernel_read+0x10/0x10 [ 81.719451][ T5073] ? srso_return_thunk+0x5/0x5f [ 81.724335][ T5073] ? kernel_fpu_begin_mask+0x245/0x300 [ 81.729823][ T5073] integrity_kernel_read+0xb0/0x100 [ 81.735062][ T5073] ? __pfx_integrity_kernel_read+0x10/0x10 [ 81.740902][ T5073] ? kernel_fpu_end+0x51/0x80 [ 81.745605][ T5073] ? srso_return_thunk+0x5/0x5f [ 81.750488][ T5073] ? sha256_ni_update+0x133/0x1f0 [ 81.755539][ T5073] ima_calc_file_hash+0xadb/0x1b30 [ 81.760680][ T5073] ? srso_return_thunk+0x5/0x5f [ 81.765565][ T5073] ? stack_trace_save+0x117/0x1d0 [ 81.770622][ T5073] ? srso_return_thunk+0x5/0x5f [ 81.775511][ T5073] ? __pfx_stack_trace_save+0x10/0x10 [ 81.780926][ T5073] ? squashfs_xattr_handler_get+0x585/0x900 [ 81.786857][ T5073] ? __pfx_ima_calc_file_hash+0x10/0x10 [ 81.792475][ T5073] ? srso_return_thunk+0x5/0x5f [ 81.797368][ T5073] ? mark_lock+0x9a/0x350 [ 81.801730][ T5073] ? srso_return_thunk+0x5/0x5f [ 81.806616][ T5073] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 81.812648][ T5073] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 81.819028][ T5073] ? srso_return_thunk+0x5/0x5f [ 81.823923][ T5073] ? make_vfsgid+0x46/0x90 [ 81.828368][ T5073] ? srso_return_thunk+0x5/0x5f [ 81.833254][ T5073] ? generic_fillattr+0x50a/0x740 [ 81.838314][ T5073] ? srso_return_thunk+0x5/0x5f [ 81.843216][ T5073] ima_collect_measurement+0x554/0xb40 [ 81.848719][ T5073] ? __pfx_ima_collect_measurement+0x10/0x10 [ 81.854737][ T5073] ? __mutex_lock+0x2ee/0xd70 [ 81.859482][ T5073] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 81.864992][ T5073] process_measurement+0x136d/0x21d0 [ 81.870345][ T5073] ? __pfx_process_measurement+0x10/0x10 [ 81.876003][ T5073] ? srso_return_thunk+0x5/0x5f [ 81.880884][ T5073] ? aa_get_newest_label+0xff/0x6f0 [ 81.886144][ T5073] ? __pfx_apparmor_file_open+0x10/0x10 [ 81.891712][ T5073] ? tomoyo_file_open+0x167/0x220 [ 81.896756][ T5073] ? srso_return_thunk+0x5/0x5f [ 81.901651][ T5073] ? srso_return_thunk+0x5/0x5f [ 81.906521][ T5073] ? end_current_label_crit_section+0x14d/0x180 [ 81.912800][ T5073] ima_file_check+0xf1/0x170 [ 81.917436][ T5073] ? __pfx_ima_file_check+0x10/0x10 [ 81.922675][ T5073] path_openat+0x28b6/0x3240 [ 81.927314][ T5073] ? __pfx_path_openat+0x10/0x10 [ 81.932280][ T5073] do_filp_open+0x234/0x490 [ 81.936801][ T5073] ? __pfx_do_filp_open+0x10/0x10 [ 81.941914][ T5073] ? srso_return_thunk+0x5/0x5f [ 81.946810][ T5073] ? _raw_spin_unlock+0x28/0x50 [ 81.951674][ T5073] ? srso_return_thunk+0x5/0x5f [ 81.956634][ T5073] ? alloc_fd+0x59c/0x640 [ 81.961007][ T5073] do_sys_openat2+0x13e/0x1d0 [ 81.965709][ T5073] ? __pfx_do_sys_openat2+0x10/0x10 [ 81.970924][ T5073] ? srso_return_thunk+0x5/0x5f [ 81.975801][ T5073] ? lockdep_hardirqs_on+0x98/0x140 [ 81.981027][ T5073] ? _raw_spin_unlock_irq+0x2e/0x50 [ 81.986251][ T5073] ? srso_return_thunk+0x5/0x5f [ 81.991120][ T5073] ? ptrace_notify+0x278/0x380 [ 81.995914][ T5073] __x64_sys_openat+0x247/0x2a0 [ 82.000791][ T5073] ? __pfx___x64_sys_openat+0x10/0x10 [ 82.006187][ T5073] ? do_syscall_64+0x108/0x240 [ 82.010975][ T5073] ? srso_return_thunk+0x5/0x5f [ 82.015844][ T5073] ? syscall_trace_enter+0x5e/0x150 [ 82.021081][ T5073] do_syscall_64+0xfb/0x240 [ 82.025616][ T5073] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 82.031526][ T5073] RIP: 0033:0x7f0f31f28169 [ 82.035944][ T5073] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 21 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 82.055571][ T5073] RSP: 002b:00007fff0cb7ae98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 82.064013][ T5073] RAX: ffffffffffffffda RBX: 00007fff0cb7aec0 RCX: 00007f0f31f28169 [ 82.072031][ T5073] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 00000000ffffff9c [ 82.080025][ T5073] RBP: 0000000000000002 R08: 00007fff0cb7ac36 R09: 0000000000000000 [ 82.088007][ T5073] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff0cb7aef0 [ 82.095982][ T5073] R13: 00007fff0cb7af30 R14: 0000000000001000 R15: 0000000000000003 [ 82.103982][ T5073] [pid 5073] openat(AT_FDCWD, "./file2", O_RDONLY) = 5 [pid 5073] exit_group(0) = ? [pid 5073] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5073, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555560276f0 /* 4 entries */, 32768) = 112 umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./4/binderfs") = 0 [ 82.108827][ T27] audit: type=1800 audit(1707868445.745:6): pid=5073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor382" name="file2" dev="loop0" ino=6 res=0 errno=0 umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x55555602f730 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555602f730 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./4/file0") = 0 getdents64(3, 0x5555560276f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./4") = 0 mkdir("./5", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5074 attached , child_tidptr=0x555556026650) = 5074 [pid 5074] set_robust_list(0x555556026660, 24) = 0 [pid 5074] chdir("./5") = 0 [pid 5074] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5074] setpgid(0, 0) = 0 [pid 5074] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5074] write(3, "1000", 4) = 4 [pid 5074] close(3) = 0 [pid 5074] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5074] memfd_create("syzkaller", 0) = 3 [pid 5074] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0f29a00000 [pid 5074] write(3, "\x68\x73\x71\x73\x07\x00\x00\x00\xfd\xf1\x7c\x63\x00\x40\x00\x00\x00\x00\x00\x00\x03\x00\x0e\x00\xd1\x01\x01\x00\x04\x00\x00\x00\x1f\x01\x00\x00\x00\x00\x00\x00\xed\x02\x00\x00\x00\x00\x00\x00\x91\x02\x00\x00\x00\x00\x00\x00\xd5\x02\x00\x00\x00\x00\x00\x00\x8f\x00\x00\x00\x00\x00\x00\x00\xd0\x01\x00\x00\x00\x00\x00\x00\x49\x02\x00\x00\x00\x00\x00\x00\x83\x02\x00\x00\x00\x00\x00\x00\x1a\x73\x79\x7a"..., 4096) = 4096 [pid 5074] munmap(0x7f0f29a00000, 138412032) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5074] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5074] close(3) = 0 [pid 5074] close(4) = 0 [pid 5074] mkdir("./file0", 0777) = 0 [pid 5074] mount("/dev/loop0", "./file0", "squashfs", 0, "") = 0 [pid 5074] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5074] chdir("./file0") = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5074] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 5074] write(4, "77", 2) = 2 [ 82.393707][ T5074] loop0: detected capacity change from 0 to 8 [ 82.427583][ T5074] SQUASHFS error: Failed to read block 0x8f: -5 [ 82.434806][ T5074] SQUASHFS error: Failed to read block 0xc00090: -5 [ 82.442036][ T5074] SQUASHFS error: Failed to read block 0x8f: -5 [ 82.448748][ T5074] SQUASHFS error: Failed to read block 0x8f: -5 [ 82.455207][ T5074] SQUASHFS error: Failed to read block 0x8f: -5 [ 82.461605][ T5074] SQUASHFS error: Failed to read block 0x8f: -5 [ 82.468081][ T5074] FAULT_INJECTION: forcing a failure. [ 82.468081][ T5074] name failslab, interval 1, probability 0, space 0, times 0 [ 82.481292][ T5074] CPU: 1 PID: 5074 Comm: syz-executor382 Not tainted 6.8.0-rc4-syzkaller-00005-gc664e16bb1ba #0 [ 82.491748][ T5074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 82.501811][ T5074] Call Trace: [ 82.505109][ T5074] [ 82.508046][ T5074] dump_stack_lvl+0x1e7/0x2e0 [ 82.512735][ T5074] ? __pfx_dump_stack_lvl+0x10/0x10 [ 82.517943][ T5074] ? __pfx__printk+0x10/0x10 [ 82.522544][ T5074] ? read_blocklist+0x2189/0x2580 [ 82.527597][ T5074] should_fail_ex+0x3ae/0x4e0 [ 82.532296][ T5074] ? squashfs_readpage_block+0x19a/0xf00 [ 82.537931][ T5074] should_failslab+0x9/0x20 [ 82.542441][ T5074] __kmalloc+0xe6/0x490 [ 82.546627][ T5074] squashfs_readpage_block+0x19a/0xf00 [ 82.552135][ T5074] squashfs_read_folio+0x569/0xee0 [ 82.557303][ T5074] ? page_cache_ra_unbounded+0x698/0x7c0 [ 82.562969][ T5074] ? __pfx_squashfs_read_folio+0x10/0x10 [ 82.568632][ T5074] ? __pfx___up_read+0x10/0x10 [ 82.573426][ T5074] filemap_read_folio+0x1a2/0x790 [ 82.578481][ T5074] ? __pfx_squashfs_read_folio+0x10/0x10 [ 82.584143][ T5074] ? __pfx_filemap_read_folio+0x10/0x10 [ 82.589725][ T5074] filemap_get_pages+0x15a8/0x2090 [ 82.594896][ T5074] ? __pfx_filemap_get_pages+0x10/0x10 [ 82.600380][ T5074] ? __pfx___might_resched+0x10/0x10 [ 82.605674][ T5074] ? srso_return_thunk+0x5/0x5f [ 82.610548][ T5074] ? atime_needs_update+0x1f9/0x660 [ 82.615769][ T5074] ? touch_atime+0xf7/0x670 [ 82.620294][ T5074] filemap_read+0x41b/0xec0 [ 82.624843][ T5074] ? __pfx_filemap_read+0x10/0x10 [ 82.629900][ T5074] ? generic_file_read_iter+0x98/0x550 [ 82.635378][ T5074] ? kasan_save_track+0x51/0x80 [ 82.640248][ T5074] ? kasan_save_track+0x3f/0x80 [ 82.645125][ T5074] ? ima_calc_file_hash+0xaa3/0x1b30 [ 82.650427][ T5074] ? srso_return_thunk+0x5/0x5f [ 82.655306][ T5074] __kernel_read+0x5c9/0xab0 [ 82.659929][ T5074] ? __pfx___kernel_read+0x10/0x10 [ 82.665083][ T5074] ? srso_return_thunk+0x5/0x5f [ 82.669959][ T5074] ? kernel_fpu_begin_mask+0x245/0x300 [ 82.675443][ T5074] integrity_kernel_read+0xb0/0x100 [ 82.680680][ T5074] ? __pfx_integrity_kernel_read+0x10/0x10 [ 82.686520][ T5074] ? kernel_fpu_end+0x51/0x80 [ 82.691216][ T5074] ? srso_return_thunk+0x5/0x5f [ 82.696091][ T5074] ? sha256_ni_update+0x133/0x1f0 [ 82.701142][ T5074] ima_calc_file_hash+0xadb/0x1b30 [ 82.706279][ T5074] ? srso_return_thunk+0x5/0x5f [ 82.711159][ T5074] ? stack_trace_save+0x117/0x1d0 [ 82.716206][ T5074] ? srso_return_thunk+0x5/0x5f [ 82.721090][ T5074] ? __pfx_stack_trace_save+0x10/0x10 [ 82.726486][ T5074] ? squashfs_xattr_handler_get+0x585/0x900 [ 82.732401][ T5074] ? __pfx_ima_calc_file_hash+0x10/0x10 [ 82.738010][ T5074] ? srso_return_thunk+0x5/0x5f [ 82.742895][ T5074] ? mark_lock+0x9a/0x350 [ 82.747243][ T5074] ? srso_return_thunk+0x5/0x5f [ 82.752204][ T5074] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 82.758216][ T5074] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 82.764579][ T5074] ? srso_return_thunk+0x5/0x5f [ 82.769468][ T5074] ? make_vfsgid+0x46/0x90 [ 82.773909][ T5074] ? srso_return_thunk+0x5/0x5f [ 82.778799][ T5074] ? generic_fillattr+0x50a/0x740 [ 82.783850][ T5074] ? srso_return_thunk+0x5/0x5f [ 82.788740][ T5074] ima_collect_measurement+0x554/0xb40 [ 82.794253][ T5074] ? __pfx_ima_collect_measurement+0x10/0x10 [ 82.800267][ T5074] ? __mutex_lock+0x2ee/0xd70 [ 82.805010][ T5074] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 82.810541][ T5074] process_measurement+0x136d/0x21d0 [ 82.815916][ T5074] ? __pfx_process_measurement+0x10/0x10 [ 82.821602][ T5074] ? srso_return_thunk+0x5/0x5f [ 82.826502][ T5074] ? aa_get_newest_label+0xff/0x6f0 [ 82.831789][ T5074] ? __pfx_apparmor_file_open+0x10/0x10 [ 82.837383][ T5074] ? tomoyo_file_open+0x167/0x220 [ 82.842445][ T5074] ? srso_return_thunk+0x5/0x5f [ 82.847342][ T5074] ? srso_return_thunk+0x5/0x5f [ 82.852234][ T5074] ? end_current_label_crit_section+0x14d/0x180 [ 82.858525][ T5074] ima_file_check+0xf1/0x170 [ 82.863159][ T5074] ? __pfx_ima_file_check+0x10/0x10 [ 82.868403][ T5074] path_openat+0x28b6/0x3240 [ 82.873071][ T5074] ? __pfx_path_openat+0x10/0x10 [ 82.878069][ T5074] do_filp_open+0x234/0x490 [ 82.882619][ T5074] ? __pfx_do_filp_open+0x10/0x10 [ 82.887716][ T5074] ? srso_return_thunk+0x5/0x5f [ 82.892612][ T5074] ? _raw_spin_unlock+0x28/0x50 [ 82.897485][ T5074] ? srso_return_thunk+0x5/0x5f [ 82.902368][ T5074] ? alloc_fd+0x59c/0x640 [ 82.906741][ T5074] do_sys_openat2+0x13e/0x1d0 [ 82.911440][ T5074] ? __pfx_do_sys_openat2+0x10/0x10 [ 82.916661][ T5074] ? srso_return_thunk+0x5/0x5f [ 82.921538][ T5074] ? lockdep_hardirqs_on+0x98/0x140 [ 82.926759][ T5074] ? _raw_spin_unlock_irq+0x2e/0x50 [ 82.931979][ T5074] ? srso_return_thunk+0x5/0x5f [ 82.936869][ T5074] ? ptrace_notify+0x278/0x380 [ 82.941707][ T5074] __x64_sys_openat+0x247/0x2a0 [ 82.946597][ T5074] ? __pfx___x64_sys_openat+0x10/0x10 [ 82.952004][ T5074] ? do_syscall_64+0x108/0x240 [ 82.956799][ T5074] ? srso_return_thunk+0x5/0x5f [ 82.961685][ T5074] ? syscall_trace_enter+0x5e/0x150 [ 82.967042][ T5074] do_syscall_64+0xfb/0x240 [ 82.971612][ T5074] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 82.977550][ T5074] RIP: 0033:0x7f0f31f28169 [ 82.981988][ T5074] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 21 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 83.001622][ T5074] RSP: 002b:00007fff0cb7ae98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 83.010064][ T5074] RAX: ffffffffffffffda RBX: 00007fff0cb7aec0 RCX: 00007f0f31f28169 [ 83.018055][ T5074] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 00000000ffffff9c [ 83.026054][ T5074] RBP: 0000000000000002 R08: 00007fff0cb7ac36 R09: 0000000000000000 [ 83.034048][ T5074] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff0cb7aef0 [pid 5074] openat(AT_FDCWD, "./file2", O_RDONLY) = 5 [pid 5074] exit_group(0) = ? [pid 5074] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5074, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555560276f0 /* 4 entries */, 32768) = 112 umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./5/binderfs") = 0 umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 83.042046][ T5074] R13: 00007fff0cb7af30 R14: 0000000000001000 R15: 0000000000000003 [ 83.050060][ T5074] [ 83.055383][ T27] audit: type=1800 audit(1707868446.685:7): pid=5074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor382" name="file2" dev="loop0" ino=6 res=0 errno=0 openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x55555602f730 /* 2 entries */, 32768) = 48 getdents64(4, 0x55555602f730 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./5/file0") = 0 getdents64(3, 0x5555560276f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./5") = 0 mkdir("./6", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5075 attached , child_tidptr=0x555556026650) = 5075 [pid 5075] set_robust_list(0x555556026660, 24) = 0 [pid 5075] chdir("./6") = 0 [pid 5075] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5075] setpgid(0, 0) = 0 [pid 5075] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5075] write(3, "1000", 4) = 4 [pid 5075] close(3) = 0 [pid 5075] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5075] memfd_create("syzkaller", 0) = 3 [pid 5075] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0f29a00000 [pid 5075] write(3, "\x68\x73\x71\x73\x07\x00\x00\x00\xfd\xf1\x7c\x63\x00\x40\x00\x00\x00\x00\x00\x00\x03\x00\x0e\x00\xd1\x01\x01\x00\x04\x00\x00\x00\x1f\x01\x00\x00\x00\x00\x00\x00\xed\x02\x00\x00\x00\x00\x00\x00\x91\x02\x00\x00\x00\x00\x00\x00\xd5\x02\x00\x00\x00\x00\x00\x00\x8f\x00\x00\x00\x00\x00\x00\x00\xd0\x01\x00\x00\x00\x00\x00\x00\x49\x02\x00\x00\x00\x00\x00\x00\x83\x02\x00\x00\x00\x00\x00\x00\x1a\x73\x79\x7a"..., 4096) = 4096 [pid 5075] munmap(0x7f0f29a00000, 138412032) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5075] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5075] close(3) = 0 [pid 5075] close(4) = 0 [pid 5075] mkdir("./file0", 0777) = 0 [pid 5075] mount("/dev/loop0", "./file0", "squashfs", 0, "") = 0 [pid 5075] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5075] chdir("./file0") = 0 [ 83.314813][ T5075] loop0: detected capacity change from 0 to 8 [pid 5075] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5075] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 5075] write(4, "77", 2) = 2 [ 83.383023][ T5075] SQUASHFS error: Failed to read block 0x8f: -5 [ 83.390469][ T5075] SQUASHFS error: Failed to read block 0xc00090: -5 [ 83.397319][ T5075] SQUASHFS error: Failed to read block 0x8f: -5 [ 83.403701][ T5075] SQUASHFS error: Failed to read block 0x8f: -5 [ 83.410209][ T5075] SQUASHFS error: Failed to read block 0x8f: -5 [ 83.416623][ T5075] SQUASHFS error: Failed to read block 0x8f: -5 [ 83.423161][ T5075] FAULT_INJECTION: forcing a failure. [ 83.423161][ T5075] name failslab, interval 1, probability 0, space 0, times 0 [ 83.435856][ T5075] CPU: 1 PID: 5075 Comm: syz-executor382 Not tainted 6.8.0-rc4-syzkaller-00005-gc664e16bb1ba #0 [ 83.446322][ T5075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 83.456405][ T5075] Call Trace: [ 83.459705][ T5075] [ 83.462644][ T5075] dump_stack_lvl+0x1e7/0x2e0 [ 83.467356][ T5075] ? __pfx_dump_stack_lvl+0x10/0x10 [ 83.472579][ T5075] ? __pfx__printk+0x10/0x10 [ 83.477197][ T5075] ? __pfx___might_resched+0x10/0x10 [ 83.482498][ T5075] ? filemap_get_entry+0x127/0x4e0 [ 83.487647][ T5075] should_fail_ex+0x3ae/0x4e0 [ 83.492357][ T5075] ? squashfs_page_actor_init_special+0x60/0x4d0 [ 83.498706][ T5075] should_failslab+0x9/0x20 [ 83.503225][ T5075] kmalloc_trace+0x76/0x360 [ 83.507742][ T5075] ? srso_return_thunk+0x5/0x5f [ 83.512622][ T5075] squashfs_page_actor_init_special+0x60/0x4d0 [ 83.518794][ T5075] ? srso_return_thunk+0x5/0x5f [ 83.523670][ T5075] squashfs_readpage_block+0x5e0/0xf00 [ 83.529162][ T5075] squashfs_read_folio+0x569/0xee0 [ 83.534301][ T5075] ? page_cache_ra_unbounded+0x698/0x7c0 [ 83.539972][ T5075] ? __pfx_squashfs_read_folio+0x10/0x10 [ 83.545630][ T5075] ? __pfx___up_read+0x10/0x10 [ 83.550419][ T5075] filemap_read_folio+0x1a2/0x790 [ 83.555470][ T5075] ? __pfx_squashfs_read_folio+0x10/0x10 [ 83.561133][ T5075] ? __pfx_filemap_read_folio+0x10/0x10 [ 83.566711][ T5075] filemap_get_pages+0x15a8/0x2090 [ 83.571884][ T5075] ? __pfx_filemap_get_pages+0x10/0x10 [ 83.577378][ T5075] ? __pfx___might_resched+0x10/0x10 [ 83.582673][ T5075] ? srso_return_thunk+0x5/0x5f [ 83.587549][ T5075] ? atime_needs_update+0x1f9/0x660 [ 83.592765][ T5075] ? touch_atime+0xf7/0x670 [ 83.597296][ T5075] filemap_read+0x41b/0xec0 [ 83.601850][ T5075] ? __pfx_filemap_read+0x10/0x10 [ 83.607007][ T5075] ? generic_file_read_iter+0x98/0x550 [ 83.612496][ T5075] ? kasan_save_track+0x51/0x80 [ 83.617366][ T5075] ? kasan_save_track+0x3f/0x80 [ 83.622236][ T5075] ? ima_calc_file_hash+0xaa3/0x1b30 [ 83.627529][ T5075] ? srso_return_thunk+0x5/0x5f [ 83.632408][ T5075] __kernel_read+0x5c9/0xab0 [ 83.637037][ T5075] ? __pfx___kernel_read+0x10/0x10 [ 83.642187][ T5075] ? srso_return_thunk+0x5/0x5f [ 83.647055][ T5075] ? kernel_fpu_begin_mask+0x245/0x300 [ 83.652531][ T5075] integrity_kernel_read+0xb0/0x100 [ 83.657752][ T5075] ? __pfx_integrity_kernel_read+0x10/0x10 [ 83.663578][ T5075] ? kernel_fpu_end+0x51/0x80 [ 83.668272][ T5075] ? srso_return_thunk+0x5/0x5f [ 83.673141][ T5075] ? sha256_ni_update+0x133/0x1f0 [ 83.678182][ T5075] ima_calc_file_hash+0xadb/0x1b30 [ 83.683312][ T5075] ? srso_return_thunk+0x5/0x5f [ 83.688184][ T5075] ? stack_trace_save+0x117/0x1d0 [ 83.693226][ T5075] ? srso_return_thunk+0x5/0x5f [ 83.698103][ T5075] ? __pfx_stack_trace_save+0x10/0x10 [ 83.703497][ T5075] ? squashfs_xattr_handler_get+0x585/0x900 [ 83.709410][ T5075] ? __pfx_ima_calc_file_hash+0x10/0x10 [ 83.715013][ T5075] ? srso_return_thunk+0x5/0x5f [ 83.719889][ T5075] ? mark_lock+0x9a/0x350 [ 83.724236][ T5075] ? srso_return_thunk+0x5/0x5f [ 83.729123][ T5075] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 83.735130][ T5075] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 83.741484][ T5075] ? srso_return_thunk+0x5/0x5f [ 83.746360][ T5075] ? make_vfsgid+0x46/0x90 [ 83.750788][ T5075] ? srso_return_thunk+0x5/0x5f [ 83.755662][ T5075] ? generic_fillattr+0x50a/0x740 [ 83.760709][ T5075] ? srso_return_thunk+0x5/0x5f [ 83.765593][ T5075] ima_collect_measurement+0x554/0xb40 [ 83.771082][ T5075] ? __pfx_ima_collect_measurement+0x10/0x10 [ 83.777087][ T5075] ? __mutex_lock+0x2ee/0xd70 [ 83.781810][ T5075] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 83.787305][ T5075] process_measurement+0x136d/0x21d0 [ 83.792646][ T5075] ? __pfx_process_measurement+0x10/0x10 [ 83.798310][ T5075] ? srso_return_thunk+0x5/0x5f [ 83.803185][ T5075] ? aa_get_newest_label+0xff/0x6f0 [ 83.808440][ T5075] ? __pfx_apparmor_file_open+0x10/0x10 [ 83.814011][ T5075] ? tomoyo_file_open+0x167/0x220 [ 83.819051][ T5075] ? srso_return_thunk+0x5/0x5f [ 83.823931][ T5075] ? srso_return_thunk+0x5/0x5f [ 83.828799][ T5075] ? end_current_label_crit_section+0x14d/0x180 [ 83.835072][ T5075] ima_file_check+0xf1/0x170 [ 83.839695][ T5075] ? __pfx_ima_file_check+0x10/0x10 [ 83.844928][ T5075] path_openat+0x28b6/0x3240 [ 83.849575][ T5075] ? __pfx_path_openat+0x10/0x10 [ 83.854556][ T5075] do_filp_open+0x234/0x490 [ 83.859081][ T5075] ? __pfx_do_filp_open+0x10/0x10 [ 83.864150][ T5075] ? srso_return_thunk+0x5/0x5f [ 83.869027][ T5075] ? _raw_spin_unlock+0x28/0x50 [ 83.873893][ T5075] ? srso_return_thunk+0x5/0x5f [ 83.878763][ T5075] ? alloc_fd+0x59c/0x640 [ 83.883125][ T5075] do_sys_openat2+0x13e/0x1d0 [ 83.887824][ T5075] ? __pfx_do_sys_openat2+0x10/0x10 [ 83.893039][ T5075] ? srso_return_thunk+0x5/0x5f [ 83.897912][ T5075] ? lockdep_hardirqs_on+0x98/0x140 [ 83.903129][ T5075] ? _raw_spin_unlock_irq+0x2e/0x50 [ 83.908339][ T5075] ? srso_return_thunk+0x5/0x5f [ 83.913206][ T5075] ? ptrace_notify+0x278/0x380 [ 83.917996][ T5075] __x64_sys_openat+0x247/0x2a0 [ 83.922867][ T5075] ? __pfx___x64_sys_openat+0x10/0x10 [ 83.928257][ T5075] ? do_syscall_64+0x108/0x240 [ 83.933047][ T5075] ? srso_return_thunk+0x5/0x5f [ 83.937919][ T5075] ? syscall_trace_enter+0x5e/0x150 [ 83.943148][ T5075] do_syscall_64+0xfb/0x240 [ 83.947677][ T5075] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 83.953594][ T5075] RIP: 0033:0x7f0f31f28169 [ 83.958030][ T5075] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 21 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [pid 5075] openat(AT_FDCWD, "./file2", O_RDONLY) = 5 [pid 5075] exit_group(0) = ? [pid 5075] +++ exited with 0 +++ [ 83.977661][ T5075] RSP: 002b:00007fff0cb7ae98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 83.986210][ T5075] RAX: ffffffffffffffda RBX: 00007fff0cb7aec0 RCX: 00007f0f31f28169 [ 83.994242][ T5075] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 00000000ffffff9c [ 84.002237][ T5075] RBP: 0000000000000002 R08: 00007fff0cb7ac36 R09: 0000000000000000 [ 84.010226][ T5075] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff0cb7aef0 [ 84.018213][ T5075] R13: 00007fff0cb7af30 R14: 0000000000001000 R15: 0000000000000003 [ 84.026215][ T5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5075, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555560276f0 /* 4 entries */, 32768) = 112 umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./6/binderfs") = 0 [ 84.030351][ T27] audit: type=1800 audit(1707868447.665:8): pid=5075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor382" name="file2" dev="loop0" ino=6 res=0 errno=0 [ 86.479950][ T780] cfg80211: failed to load regulatory.db [ 286.157130][ T28] INFO: task syz-executor382:5067 blocked for more than 143 seconds. [ 286.165403][ T28] Not tainted 6.8.0-rc4-syzkaller-00005-gc664e16bb1ba #0 [ 286.173106][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.181991][ T28] task:syz-executor382 state:D stack:24216 pid:5067 tgid:5067 ppid:5064 flags:0x00004002 [ 286.192388][ T28] Call Trace: [ 286.195707][ T28] [ 286.198720][ T28] __schedule+0x17d1/0x49f0 [ 286.203297][ T28] ? srso_return_thunk+0x5/0x5f [ 286.208286][ T28] ? __pfx___schedule+0x10/0x10 [ 286.213185][ T28] ? __pfx_lock_release+0x10/0x10 [ 286.218360][ T28] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 286.224753][ T28] ? schedule+0x8e/0x260 [ 286.229130][ T28] schedule+0x149/0x260 [ 286.233338][ T28] io_schedule+0x8c/0x110 [ 286.237795][ T28] folio_wait_bit_common+0x881/0x12b0 [ 286.243260][ T28] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 286.249310][ T28] ? __pfx_wake_page_function+0x10/0x10 [ 286.254937][ T28] ? srso_return_thunk+0x5/0x5f [ 286.259925][ T28] ? __filemap_get_folio+0x935/0xbc0 [ 286.265296][ T28] truncate_inode_pages_range+0xa8b/0xf70 [ 286.271229][ T28] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 286.277613][ T28] ? srso_return_thunk+0x5/0x5f [ 286.282506][ T28] ? mark_lock+0x9a/0x350 [ 286.287020][ T28] ? _raw_spin_unlock_irq+0x23/0x50 [ 286.292277][ T28] ? srso_return_thunk+0x5/0x5f [ 286.297239][ T28] ? lockdep_hardirqs_on+0x98/0x140 [ 286.302500][ T28] evict+0x2bd/0x630 [ 286.306454][ T28] evict_inodes+0x5f8/0x690 [ 286.311094][ T28] ? __pfx_evict_inodes+0x10/0x10 [ 286.316152][ T28] ? srso_return_thunk+0x5/0x5f [ 286.321098][ T28] generic_shutdown_super+0x9d/0x2d0 [ 286.326436][ T28] kill_block_super+0x44/0x90 [ 286.331241][ T28] deactivate_locked_super+0xc6/0x130 [ 286.336667][ T28] cleanup_mnt+0x426/0x4c0 [ 286.341181][ T28] ? _raw_spin_unlock_irq+0x23/0x50 [ 286.346424][ T28] ? srso_return_thunk+0x5/0x5f [ 286.351389][ T28] task_work_run+0x250/0x310 [ 286.356022][ T28] ? __pfx_task_work_run+0x10/0x10 [ 286.361218][ T28] ? path_umount+0x283/0xf80 [ 286.365858][ T28] ? srso_return_thunk+0x5/0x5f [ 286.370858][ T28] ptrace_notify+0x2d1/0x380 [ 286.375500][ T28] ? __pfx_path_umount+0x10/0x10 [ 286.380524][ T28] ? srso_return_thunk+0x5/0x5f [ 286.385424][ T28] ? __pfx_ptrace_notify+0x10/0x10 [ 286.390639][ T28] ? srso_return_thunk+0x5/0x5f [ 286.395535][ T28] ? srso_return_thunk+0x5/0x5f [ 286.400465][ T28] ? __x64_sys_umount+0x126/0x170 [ 286.405535][ T28] ? __pfx___x64_sys_umount+0x10/0x10 [ 286.411016][ T28] syscall_exit_work+0xbb/0x170 [ 286.415911][ T28] syscall_exit_to_user_mode+0x27f/0x370 [ 286.421664][ T28] do_syscall_64+0x108/0x240 [ 286.426323][ T28] ? srso_return_thunk+0x5/0x5f [ 286.431308][ T28] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 286.437316][ T28] RIP: 0033:0x7f0f31f293c7 [ 286.441749][ T28] RSP: 002b:00007fff0cb79da8 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 286.450274][ T28] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f0f31f293c7 [ 286.458331][ T28] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007fff0cb79e60 [ 286.466311][ T28] RBP: 00007fff0cb79e60 R08: 0000000000000000 R09: 0000000000000000 [ 286.474412][ T28] R10: 00000000ffffffff R11: 0000000000000202 R12: 00007fff0cb7aed0 [ 286.482468][ T28] R13: 00005555560276c0 R14: 0000000000000007 R15: 431bde82d7b634db [ 286.490567][ T28] [ 286.493605][ T28] [ 286.493605][ T28] Showing all locks held in the system: [ 286.501397][ T28] 1 lock held by khungtaskd/28: [ 286.506273][ T28] #0: ffffffff8e130ae0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 286.516367][ T28] 2 locks held by getty/4820: [ 286.521115][ T28] #0: ffff88802fed20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 286.531027][ T28] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b4/0x1e10 [ 286.541247][ T28] 1 lock held by syz-executor382/5067: [ 286.546705][ T28] #0: ffff88801193e0e0 (&type->s_umount_key#42){+.+.}-{3:3}, at: deactivate_super+0xb5/0xf0 [ 286.557161][ T28] [ 286.559515][ T28] ============================================= [ 286.559515][ T28] [ 286.568020][ T28] NMI backtrace for cpu 1 [ 286.572354][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.8.0-rc4-syzkaller-00005-gc664e16bb1ba #0 [ 286.582163][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 286.592230][ T28] Call Trace: [ 286.595519][ T28] [ 286.598458][ T28] dump_stack_lvl+0x1e7/0x2e0 [ 286.603163][ T28] ? __pfx_dump_stack_lvl+0x10/0x10 [ 286.608379][ T28] ? __pfx__printk+0x10/0x10 [ 286.612982][ T28] ? vprintk_emit+0x607/0x720 [ 286.617673][ T28] ? __pfx_vprintk_emit+0x10/0x10 [ 286.622717][ T28] nmi_cpu_backtrace+0x49c/0x4d0 [ 286.627676][ T28] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 286.633146][ T28] ? _printk+0xd5/0x120 [ 286.637313][ T28] ? __pfx__printk+0x10/0x10 [ 286.641920][ T28] ? __wake_up_klogd+0xcc/0x110 [ 286.646787][ T28] ? __pfx__printk+0x10/0x10 [ 286.651394][ T28] ? srso_return_thunk+0x5/0x5f [ 286.656263][ T28] ? __rcu_read_unlock+0xa0/0x110 [ 286.661304][ T28] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 286.667297][ T28] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 286.673296][ T28] watchdog+0xfaf/0xff0 [ 286.677475][ T28] ? watchdog+0x1e9/0xff0 [ 286.681831][ T28] ? __pfx_watchdog+0x10/0x10 [ 286.686523][ T28] kthread+0x2f1/0x390 [ 286.690602][ T28] ? __pfx_watchdog+0x10/0x10 [ 286.695295][ T28] ? __pfx_kthread+0x10/0x10 [ 286.699896][ T28] ret_from_fork+0x4d/0x80 [ 286.704328][ T28] ? __pfx_kthread+0x10/0x10 [ 286.708929][ T28] ret_from_fork_asm+0x1b/0x30 [ 286.713727][ T28] [ 286.716868][ T28] Sending NMI from CPU 1 to CPUs 0: [ 286.722107][ C0] NMI backtrace for cpu 0 [ 286.722120][ C0] CPU: 0 PID: 60 Comm: kworker/u4:4 Not tainted 6.8.0-rc4-syzkaller-00005-gc664e16bb1ba #0 [ 286.722142][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 286.722155][ C0] Workqueue: events_unbound toggle_allocation_gate [ 286.722197][ C0] RIP: 0010:smp_call_function_many_cond+0x2200/0x2960 [ 286.722235][ C0] Code: 0f 85 03 02 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 01 db e9 09 e8 9c c6 0b 00 e9 47 e0 ff ff 65 8b 1d c8 e1 7a 7e <31> ff 89 de e8 c7 ca 0b 00 85 db 0f 84 12 01 00 00 e8 7a c6 0b 00 [ 286.722251][ C0] RSP: 0018:ffffc900015b7720 EFLAGS: 00000246 [ 286.722268][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff94482303 [ 286.722281][ C0] RDX: ffff8880187d0000 RSI: 0000000000000000 RDI: 0000000000000000 [ 286.722293][ C0] RBP: ffffc900015b7920 R08: ffffffff818797a2 R09: 1ffffffff1f0ab4d [ 286.722308][ C0] R10: dffffc0000000000 R11: fffffbfff1f0ab4e R12: dffffc0000000000 [ 286.722323][ C0] R13: 0000000000000000 R14: ffffffff8f855a68 R15: 0000000000000003 [ 286.722339][ C0] FS: 0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 286.722356][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 286.722369][ C0] CR2: 00005612dea05600 CR3: 000000002bc1a000 CR4: 0000000000350ef0 [ 286.722385][ C0] Call Trace: [ 286.722393][ C0] [ 286.722399][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 286.722422][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 286.722457][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 286.722476][ C0] ? nmi_handle+0x2a/0x580 [ 286.722508][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 286.722533][ C0] ? nmi_handle+0x151/0x580 [ 286.722552][ C0] ? nmi_handle+0x2a/0x580 [ 286.722572][ C0] ? smp_call_function_many_cond+0x2200/0x2960 [ 286.722598][ C0] ? default_do_nmi+0x63/0x160 [ 286.722620][ C0] ? exc_nmi+0x121/0x210 [ 286.722639][ C0] ? end_repeat_nmi+0xf/0x60 [ 286.722677][ C0] ? smp_call_function_many_cond+0x13f2/0x2960 [ 286.722705][ C0] ? smp_call_function_many_cond+0x2200/0x2960 [ 286.722732][ C0] ? smp_call_function_many_cond+0x2200/0x2960 [ 286.722761][ C0] ? smp_call_function_many_cond+0x2200/0x2960 [ 286.722788][ C0] [ 286.722794][ C0] [ 286.722802][ C0] ? __rcu_read_unlock+0xa0/0x110 [ 286.722828][ C0] ? kmem_cache_alloc_bulk+0x16d/0x780 [ 286.722855][ C0] ? __text_poke+0xb03/0xd30 [ 286.722877][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 286.722904][ C0] ? __pfx_text_poke_memcpy+0x10/0x10 [ 286.722930][ C0] ? kmem_cache_alloc_bulk+0x16c/0x780 [ 286.722956][ C0] ? srso_return_thunk+0x5/0x5f [ 286.722992][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 286.723019][ C0] ? __pfx_perf_event_text_poke+0x10/0x10 [ 286.723040][ C0] ? __mutex_trylock_common+0x182/0x2e0 [ 286.723063][ C0] ? __pfx___might_resched+0x10/0x10 [ 286.723090][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 286.723114][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 286.723142][ C0] text_poke_bp_batch+0x726/0xb30 [ 286.723167][ C0] ? srso_return_thunk+0x5/0x5f [ 286.723205][ C0] ? kmem_cache_alloc_bulk+0x16d/0x780 [ 286.723236][ C0] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 286.723261][ C0] ? srso_return_thunk+0x5/0x5f [ 286.723296][ C0] ? srso_return_thunk+0x5/0x5f [ 286.723327][ C0] ? arch_jump_label_transform_queue+0x9b/0x100 [ 286.723356][ C0] ? srso_return_thunk+0x5/0x5f [ 286.723392][ C0] text_poke_finish+0x30/0x50 [ 286.723415][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 286.723443][ C0] static_key_disable_cpuslocked+0xce/0x1c0 [ 286.723474][ C0] static_key_disable+0x1a/0x20 [ 286.723500][ C0] toggle_allocation_gate+0x1b8/0x250 [ 286.723535][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 286.723569][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 286.723610][ C0] ? process_scheduled_works+0x825/0x1420 [ 286.723644][ C0] process_scheduled_works+0x915/0x1420 [ 286.723696][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 286.723734][ C0] ? srso_return_thunk+0x5/0x5f [ 286.723765][ C0] ? assign_work+0x364/0x3d0 [ 286.723802][ C0] worker_thread+0xa5f/0x1000 [ 286.723840][ C0] ? srso_return_thunk+0x5/0x5f [ 286.723875][ C0] ? srso_return_thunk+0x5/0x5f [ 286.723911][ C0] ? __pfx_worker_thread+0x10/0x10 [ 286.723943][ C0] kthread+0x2f1/0x390 [ 286.723966][ C0] ? __pfx_worker_thread+0x10/0x10 [ 286.723997][ C0] ? __pfx_kthread+0x10/0x10 [ 286.724020][ C0] ret_from_fork+0x4d/0x80 [ 286.724050][ C0] ? __pfx_kthread+0x10/0x10 [ 286.724071][ C0] ret_from_fork_asm+0x1b/0x30 [ 286.724115][ C0] [ 286.724123][ C0] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 2.016 msecs [ 286.725101][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 287.183245][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.8.0-rc4-syzkaller-00005-gc664e16bb1ba #0 [ 287.193062][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 287.203117][ T28] Call Trace: [ 287.206400][ T28] [ 287.209333][ T28] dump_stack_lvl+0x1e7/0x2e0 [ 287.214037][ T28] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.219249][ T28] ? __pfx__printk+0x10/0x10 [ 287.223849][ T28] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 287.229854][ T28] ? srso_return_thunk+0x5/0x5f [ 287.234727][ T28] ? vscnprintf+0x5d/0x90 [ 287.239062][ T28] panic+0x349/0x860 [ 287.242972][ T28] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 287.249131][ T28] ? __pfx_panic+0x10/0x10 [ 287.253559][ T28] ? __pfx_delay_tsc+0x10/0x10 [ 287.258340][ T28] ? srso_return_thunk+0x5/0x5f [ 287.263207][ T28] ? nmi_backtrace_stall_check+0x469/0x480 [ 287.269035][ T28] ? srso_return_thunk+0x5/0x5f [ 287.273903][ T28] ? irq_work_queue+0xd1/0x150 [ 287.278680][ T28] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 287.284677][ T28] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 287.290668][ T28] ? srso_return_thunk+0x5/0x5f [ 287.295538][ T28] ? nmi_trigger_cpumask_backtrace+0x251/0x320 [ 287.301706][ T28] watchdog+0xfee/0xff0 [ 287.305881][ T28] ? watchdog+0x1e9/0xff0 [ 287.310231][ T28] ? __pfx_watchdog+0x10/0x10 [ 287.314926][ T28] kthread+0x2f1/0x390 [ 287.319004][ T28] ? __pfx_watchdog+0x10/0x10 [ 287.323695][ T28] ? __pfx_kthread+0x10/0x10 [ 287.328298][ T28] ret_from_fork+0x4d/0x80 [ 287.332734][ T28] ? __pfx_kthread+0x10/0x10 [ 287.337331][ T28] ret_from_fork_asm+0x1b/0x30 [ 287.342126][ T28] [ 287.345371][ T28] Kernel Offset: disabled [ 287.349694][ T28] Rebooting in 86400 seconds..