Buffer I/O error on dev loop5, logical block 13466417, async page read attempt to access beyond end of device loop5: rw=0, want=8073606, limit=128 Buffer I/O error on dev loop5, logical block 8073605, async page read BUG: sleeping function called from invalid context at fs/buffer.c:1381 in_atomic(): 1, irqs_disabled(): 0, pid: 9960, name: syz-executor.5 2 locks held by syz-executor.5/9960: #0: (&iint->mutex){+.+.}, at: [] process_measurement+0x270/0xb20 security/integrity/ima/ima_main.c:225 #1: (pointers_lock){.+.+}, at: [] get_block+0x153/0x1230 fs/sysv/itree.c:217 Preemption disabled at: [< (null)>] (null) CPU: 0 PID: 9960 Comm: syz-executor.5 Not tainted 4.14.302-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x281 lib/dump_stack.c:58 ___might_sleep.cold+0x235/0x250 kernel/sched/core.c:6041 __getblk_gfp fs/buffer.c:1381 [inline] __bread_gfp+0x3e/0x2e0 fs/buffer.c:1428 sb_bread include/linux/buffer_head.h:343 [inline] get_branch+0x2ac/0x600 fs/sysv/itree.c:104 get_block+0x176/0x1230 fs/sysv/itree.c:218 block_read_full_page+0x25e/0x8d0 fs/buffer.c:2316 read_pages mm/readahead.c:131 [inline] __do_page_cache_readahead+0x69b/0x940 mm/readahead.c:199 ra_submit mm/internal.h:66 [inline] ondemand_readahead.isra.0+0x514/0xb60 mm/readahead.c:486 page_cache_sync_readahead mm/readahead.c:518 [inline] page_cache_sync_readahead+0xa6/0xf0 mm/readahead.c:503 generic_file_buffered_read mm/filemap.c:2003 [inline] generic_file_read_iter+0xfbc/0x21c0 mm/filemap.c:2273 call_read_iter include/linux/fs.h:1774 [inline] new_sync_read fs/read_write.c:401 [inline] __vfs_read+0x449/0x620 fs/read_write.c:413 integrity_kernel_read+0x11b/0x1b0 security/integrity/iint.c:199 ima_calc_file_hash_tfm security/integrity/ima/ima_crypto.c:381 [inline] ima_calc_file_shash security/integrity/ima/ima_crypto.c:410 [inline] ima_calc_file_hash+0x3ee/0x780 security/integrity/ima/ima_crypto.c:467 ima_collect_measurement+0x39d/0x430 security/integrity/ima/ima_api.c:227 process_measurement+0x78b/0xb20 security/integrity/ima/ima_main.c:264 do_last fs/namei.c:3435 [inline] path_openat+0x10ad/0x2970 fs/namei.c:3571 do_filp_open+0x179/0x3c0 fs/namei.c:3605 do_sys_open+0x296/0x410 fs/open.c:1081 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x5e/0xd3 RIP: 0033:0x7f70d7a5f0d9 RSP: 002b:00007f70d5fd1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 RAX: ffffffffffffffda RBX: 00007f70d7b7ef80 RCX: 00007f70d7a5f0d9 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 RBP: 00007f70d7abaae9 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffc72ea44bf R14: 00007f70d5fd1300 R15: 0000000000022000 attempt to access beyond end of device loop5: rw=0, want=3245519, limit=128 Buffer I/O error on dev loop5, logical block 3245518, async page read attempt to access beyond end of device loop5: rw=0, want=8769404, limit=128 Buffer I/O error on dev loop5, logical block 8769403, async page read attempt to access beyond end of device loop5: rw=0, want=3245513, limit=128 attempt to access beyond end of device loop5: rw=0, want=8767868, limit=128 attempt to access beyond end of device loop5: rw=0, want=13269810, limit=128 attempt to access beyond end of device loop5: rw=0, want=8073606, limit=128 attempt to access beyond end of device loop5: rw=0, want=3245516, limit=128 attempt to access beyond end of device loop5: rw=0, want=8768636, limit=128 attempt to access beyond end of device loop5: rw=0, want=13466418, limit=128 attempt to access beyond end of device loop5: rw=0, want=8073606, limit=128 kauditd_printk_skb: 21 callbacks suppressed audit: type=1800 audit(1671035834.478:42): pid=9960 uid=0 auid=4294967295 ses=4294967295 op="collect_data" cause="failed" comm="syz-executor.5" name="/" dev="loop5" ino=2 res=0 audit: type=1804 audit(1671035834.478:43): pid=9960 uid=0 auid=4294967295 ses=4294967295 op="invalid_pcr" cause="ToMToU" comm="syz-executor.5" name="/root/syzkaller-testdir2607292661/syzkaller.9542W5/21/file0" dev="loop5" ino=2 res=1 sysv_free_block: flc_count > flc_size sysv_free_block: flc_count > flc_size sysv_free_block: flc_count > flc_size sysv_free_block: flc_count > flc_size sysv_free_block: flc_count > flc_size sysv_free_block: flc_count > flc_size sysv_free_block: flc_count > flc_size sysv_free_block: flc_count > flc_size sysv_free_block: flc_count > flc_size sysv_free_block: flc_count > flc_size IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready VFS: Found a Xenix FS (block size = 512) on device loop5 attempt to access beyond end of device loop5: rw=0, want=3245513, limit=128 attempt to access beyond end of device loop5: rw=0, want=8767868, limit=128 attempt to access beyond end of device loop5: rw=0, want=13269810, limit=128 attempt to access beyond end of device loop5: rw=0, want=8073606, limit=128 attempt to access beyond end of device loop5: rw=0, want=3245516, limit=128 attempt to access beyond end of device loop5: rw=0, want=8768636, limit=128 attempt to access beyond end of device loop5: rw=0, want=13466418, limit=128 attempt to access beyond end of device loop5: rw=0, want=8073606, limit=128 attempt to access beyond end of device loop5: rw=0, want=3245519, limit=128 attempt to access beyond end of device loop5: rw=0, want=8769404, limit=128 attempt to access beyond end of device loop5: rw=0, want=3245513, limit=128 attempt to access beyond end of device loop5: rw=0, want=8767868, limit=128 attempt to access beyond end of device loop5: rw=0, want=13269810, limit=128 attempt to access beyond end of device loop5: rw=0, want=8073606, limit=128 attempt to access beyond end of device loop5: rw=0, want=3245516, limit=128 attempt to access beyond end of device loop5: rw=0, want=8768636, limit=128 attempt to access beyond end of device loop5: rw=0, want=13466418, limit=128 attempt to access beyond end of device loop5: rw=0, want=8073606, limit=128 audit: type=1800 audit(1671035834.628:44): pid=9968 uid=0 auid=4294967295 ses=4294967295 op="collect_data" cause="failed" comm="syz-executor.5" name="/" dev="loop5" ino=2 res=0 audit: type=1804 audit(1671035834.628:45): pid=9968 uid=0 auid=4294967295 ses=4294967295 op="invalid_pcr" cause="ToMToU" comm="syz-executor.5" name="/root/syzkaller-testdir2607292661/syzkaller.9542W5/22/file0" dev="loop5" ino=2 res=1 sysv_free_block: flc_count > flc_size sysv_free_block: flc_count > flc_size sysv_free_block: flc_count > flc_size sysv_free_block: flc_count > flc_size sysv_free_block: flc_count > flc_size sysv_free_block: flc_count > flc_size sysv_free_block: flc_count > flc_size sysv_free_block: flc_count > flc_size sysv_free_block: flc_count > flc_size sysv_free_block: flc_count > flc_size audit: type=1804 audit(1671035834.748:46): pid=9975 uid=0 auid=4294967295 ses=4294967295 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir2607292661/syzkaller.9542W5/23/file0" dev="sda1" ino=13945 res=1 audit: type=1804 audit(1671035834.758:47): pid=9975 uid=0 auid=4294967295 ses=4294967295 op="invalid_pcr" cause="ToMToU" comm="syz-executor.5" name="/root/syzkaller-testdir2607292661/syzkaller.9542W5/23/file0" dev="sda1" ino=13945 res=1 VFS: Found a Xenix FS (block size = 512) on device loop5 attempt to access beyond end of device loop5: rw=0, want=3245513, limit=128 attempt to access beyond end of device loop5: rw=0, want=8767868, limit=128 attempt to access beyond end of device loop5: rw=0, want=13269810, limit=128 attempt to access beyond end of device loop5: rw=0, want=8073606, limit=128 attempt to access beyond end of device loop5: rw=0, want=3245516, limit=128 attempt to access beyond end of device loop5: rw=0, want=8768636, limit=128 attempt to access beyond end of device loop5: rw=0, want=13466418, limit=128 attempt to access beyond end of device loop5: rw=0, want=8073606, limit=128 BUG: sleeping function called from invalid context at fs/buffer.c:1381 in_atomic(): 1, irqs_disabled(): 0, pid: 9983, name: syz-executor.5 2 locks held by syz-executor.5/9983: #0: (&iint->mutex){+.+.}, at: [] process_measurement+0x270/0xb20 security/integrity/ima/ima_main.c:225 #1: (pointers_lock){.+.+}, at: [] get_block+0x153/0x1230 fs/sysv/itree.c:217 Preemption disabled at: [< (null)>] (null) CPU: 1 PID: 9983 Comm: syz-executor.5 Tainted: G W 4.14.302-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x281 lib/dump_stack.c:58 ___might_sleep.cold+0x235/0x250 kernel/sched/core.c:6041 __getblk_gfp fs/buffer.c:1381 [inline] __bread_gfp+0x3e/0x2e0 fs/buffer.c:1428 sb_bread include/linux/buffer_head.h:343 [inline] get_branch+0x2ac/0x600 fs/sysv/itree.c:104 get_block+0x176/0x1230 fs/sysv/itree.c:218 block_read_full_page+0x25e/0x8d0 fs/buffer.c:2316 read_pages mm/readahead.c:131 [inline] __do_page_cache_readahead+0x69b/0x940 mm/readahead.c:199 ra_submit mm/internal.h:66 [inline] ondemand_readahead.isra.0+0x514/0xb60 mm/readahead.c:486 page_cache_sync_readahead mm/readahead.c:518 [inline] page_cache_sync_readahead+0xa6/0xf0 mm/readahead.c:503 generic_file_buffered_read mm/filemap.c:2003 [inline] generic_file_read_iter+0xfbc/0x21c0 mm/filemap.c:2273 call_read_iter include/linux/fs.h:1774 [inline] new_sync_read fs/read_write.c:401 [inline] __vfs_read+0x449/0x620 fs/read_write.c:413 integrity_kernel_read+0x11b/0x1b0 security/integrity/iint.c:199 ima_calc_file_hash_tfm security/integrity/ima/ima_crypto.c:381 [inline] ima_calc_file_shash security/integrity/ima/ima_crypto.c:410 [inline] ima_calc_file_hash+0x3ee/0x780 security/integrity/ima/ima_crypto.c:467 ima_collect_measurement+0x39d/0x430 security/integrity/ima/ima_api.c:227 process_measurement+0x78b/0xb20 security/integrity/ima/ima_main.c:264 do_last fs/namei.c:3435 [inline] path_openat+0x10ad/0x2970 fs/namei.c:3571 do_filp_open+0x179/0x3c0 fs/namei.c:3605 do_sys_open+0x296/0x410 fs/open.c:1081 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x5e/0xd3 RIP: 0033:0x7f70d7a5f0d9 RSP: 002b:00007f70d5fd1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 RAX: ffffffffffffffda RBX: 00007f70d7b7ef80 RCX: 00007f70d7a5f0d9 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 RBP: 00007f70d7abaae9 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffc72ea44bf R14: 00007f70d5fd1300 R15: 0000000000022000 attempt to access beyond end of device loop5: rw=0, want=3245519, limit=128 attempt to access beyond end of device loop5: rw=0, want=8769404, limit=128 attempt to access beyond end of device loop5: rw=0, want=3245513, limit=128 attempt to access beyond end of device loop5: rw=0, want=8767868, limit=128 attempt to access beyond end of device loop5: rw=0, want=13269810, limit=128 attempt to access beyond end of device loop5: rw=0, want=8073606, limit=128 attempt to access beyond end of device loop5: rw=0, want=3245516, limit=128 attempt to access beyond end of device loop5: rw=0, want=8768636, limit=128 attempt to access beyond end of device loop5: rw=0, want=13466418, limit=128 attempt to access beyond end of device loop5: rw=0, want=8073606, limit=128 audit: type=1800 audit(1671035835.858:48): pid=9983 uid=0 auid=4294967295 ses=4294967295 op="collect_data" cause="failed" comm="syz-executor.5" name="/" dev="loop5" ino=2 res=0 audit: type=1804 audit(1671035835.878:49): pid=9983 uid=0 auid=4294967295 ses=4294967295 op="invalid_pcr" cause="ToMToU" comm="syz-executor.5" name="/root/syzkaller-testdir2607292661/syzkaller.9542W5/24/file0" dev="loop5" ino=2 res=1 sysv_free_block: flc_count > flc_size sysv_free_block: flc_count > flc_size sysv_free_block: flc_count > flc_size sysv_free_block: flc_count > flc_size sysv_free_block: flc_count > flc_size sysv_free_block: flc_count > flc_size sysv_free_block: flc_count > flc_size sysv_free_block: flc_count > flc_size sysv_free_block: flc_count > flc_size sysv_free_block: flc_count > flc_size IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready VFS: Found a Xenix FS (block size = 512) on device loop1 attempt to access beyond end of device loop1: rw=0, want=3245513, limit=128 attempt to access beyond end of device loop1: rw=0, want=8767868, limit=128 attempt to access beyond end of device loop1: rw=0, want=13269810, limit=128 attempt to access beyond end of device loop1: rw=0, want=8073606, limit=128 attempt to access beyond end of device loop1: rw=0, want=3245516, limit=128 attempt to access beyond end of device loop1: rw=0, want=8768636, limit=128 attempt to access beyond end of device loop1: rw=0, want=13466418, limit=128 attempt to access beyond end of device loop1: rw=0, want=8073606, limit=128 BUG: sleeping function called from invalid context at fs/buffer.c:1381 in_atomic(): 1, irqs_disabled(): 0, pid: 10055, name: syz-executor.1 2 locks held by syz-executor.1/10055: #0: (&iint->mutex){+.+.}, at: [] process_measurement+0x270/0xb20 security/integrity/ima/ima_main.c:225 #1: (pointers_lock){.+.+}, at: [] get_block+0x153/0x1230 fs/sysv/itree.c:217 Preemption disabled at: [< (null)>] (null) CPU: 1 PID: 10055 Comm: syz-executor.1 Tainted: G W 4.14.302-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x281 lib/dump_stack.c:58 ___might_sleep.cold+0x235/0x250 kernel/sched/core.c:6041 __getblk_gfp fs/buffer.c:1381 [inline] __bread_gfp+0x3e/0x2e0 fs/buffer.c:1428 sb_bread include/linux/buffer_head.h:343 [inline] get_branch+0x2ac/0x600 fs/sysv/itree.c:104 get_block+0x176/0x1230 fs/sysv/itree.c:218 block_read_full_page+0x25e/0x8d0 fs/buffer.c:2316 read_pages mm/readahead.c:131 [inline] __do_page_cache_readahead+0x69b/0x940 mm/readahead.c:199 ra_submit mm/internal.h:66 [inline] ondemand_readahead.isra.0+0x514/0xb60 mm/readahead.c:486 page_cache_sync_readahead mm/readahead.c:518 [inline] page_cache_sync_readahead+0xa6/0xf0 mm/readahead.c:503 generic_file_buffered_read mm/filemap.c:2003 [inline] generic_file_read_iter+0xfbc/0x21c0 mm/filemap.c:2273 call_read_iter include/linux/fs.h:1774 [inline] new_sync_read fs/read_write.c:401 [inline] __vfs_read+0x449/0x620 fs/read_write.c:413 integrity_kernel_read+0x11b/0x1b0 security/integrity/iint.c:199 ima_calc_file_hash_tfm security/integrity/ima/ima_crypto.c:381 [inline] ima_calc_file_shash security/integrity/ima/ima_crypto.c:410 [inline] ima_calc_file_hash+0x3ee/0x780 security/integrity/ima/ima_crypto.c:467 ima_collect_measurement+0x39d/0x430 security/integrity/ima/ima_api.c:227 process_measurement+0x78b/0xb20 security/integrity/ima/ima_main.c:264 do_last fs/namei.c:3435 [inline] path_openat+0x10ad/0x2970 fs/namei.c:3571 do_filp_open+0x179/0x3c0 fs/namei.c:3605 do_sys_open+0x296/0x410 fs/open.c:1081 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x5e/0xd3 RIP: 0033:0x7f4a5eced0d9 RSP: 002b:00007f4a5d25f168 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 RAX: ffffffffffffffda RBX: 00007f4a5ee0cf80 RCX: 00007f4a5eced0d9 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 RBP: 00007f4a5ed48ae9 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffcfd5fd7bf R14: 00007f4a5d25f300 R15: 0000000000022000 attempt to access beyond end of device loop1: rw=0, want=3245519, limit=128 attempt to access beyond end of device loop1: rw=0, want=8769404, limit=128 attempt to access beyond end of device loop1: rw=0, want=3245513, limit=128 attempt to access beyond end of device loop1: rw=0, want=8767868, limit=128 attempt to access beyond end of device loop1: rw=0, want=13269810, limit=128 attempt to access beyond end of device loop1: rw=0, want=8073606, limit=128 attempt to access beyond end of device loop1: rw=0, want=3245516, limit=128 attempt to access beyond end of device loop1: rw=0, want=8768636, limit=128 attempt to access beyond end of device loop1: rw=0, want=13466418, limit=128 attempt to access beyond end of device loop1: rw=0, want=8073606, limit=128 audit: type=1800 audit(1671035838.228:50): pid=10055 uid=0 auid=4294967295 ses=4294967295 op="collect_data" cause="failed" comm="syz-executor.1" name="/" dev="loop1" ino=2 res=0 audit: type=1804 audit(1671035838.238:51): pid=10055 uid=0 auid=4294967295 ses=4294967295 op="invalid_pcr" cause="ToMToU" comm="syz-executor.1" name="/root/syzkaller-testdir2722260414/syzkaller.aLBhFb/18/file0" dev="loop1" ino=2 res=1 sysv_free_block: flc_count > flc_size sysv_free_block: flc_count > flc_size sysv_free_block: flc_count > flc_size sysv_free_block: flc_count > flc_size sysv_free_block: flc_count > flc_size sysv_free_block: flc_count > flc_size sysv_free_block: flc_count > flc_size sysv_free_block: flc_count > flc_size sysv_free_block: flc_count > flc_size sysv_free_block: flc_count > flc_size VFS: Found a Xenix FS (block size = 512) on device loop1 attempt to access beyond end of device loop1: rw=0, want=3245513, limit=128 attempt to access beyond end of device loop1: rw=0, want=8767868, limit=128 attempt to access beyond end of device loop1: rw=0, want=13269810, limit=128 attempt to access beyond end of device loop1: rw=0, want=8073606, limit=128 attempt to access beyond end of device loop1: rw=0, want=3245516, limit=128 attempt to access beyond end of device loop1: rw=0, want=8768636, limit=128 attempt to access beyond end of device loop1: rw=0, want=13466418, limit=128 attempt to access beyond end of device loop1: rw=0, want=8073606, limit=128 attempt to access beyond end of device loop1: rw=0, want=3245519, limit=128 attempt to access beyond end of device loop1: rw=0, want=8769404, limit=128 attempt to access beyond end of device loop1: rw=0, want=3245513, limit=128 attempt to access beyond end of device loop1: rw=0, want=8767868, limit=128 attempt to access beyond end of device loop1: rw=0, want=13269810, limit=128 attempt to access beyond end of device loop1: rw=0, want=8073606, limit=128 attempt to access beyond end of device loop1: rw=0, want=3245516, limit=128 attempt to access beyond end of device loop1: rw=0, want=8768636, limit=128 attempt to access beyond end of device loop1: rw=0, want=13466418, limit=128 attempt to access beyond end of device loop1: rw=0, want=8073606, limit=128 sysv_free_block: flc_count > flc_size sysv_free_block: flc_count > flc_size sysv_free_block: flc_count > flc_size sysv_free_block: flc_count > flc_size sysv_free_block: flc_count > flc_size sysv_free_block: flc_count > flc_size sysv_free_block: flc_count > flc_size sysv_free_block: flc_count > flc_size sysv_free_block: flc_count > flc_size sysv_free_block: flc_count > flc_size A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. VFS: Found a Xenix FS (block size = 512) on device loop1 attempt to access beyond end of device loop1: rw=0, want=3245513, limit=128 attempt to access beyond end of device loop1: rw=0, want=8767868, limit=128 attempt to access beyond end of device loop1: rw=0, want=13269810, limit=128 attempt to access beyond end of device loop1: rw=0, want=8073606, limit=128 attempt to access beyond end of device loop1: rw=0, want=3245516, limit=128 attempt to access beyond end of device loop1: rw=0, want=8768636, limit=128 attempt to access beyond end of device loop1: rw=0, want=13466418, limit=128 attempt to access beyond end of device loop1: rw=0, want=8073606, limit=128 BUG: sleeping function called from invalid context at fs/buffer.c:1381 in_atomic(): 1, irqs_disabled(): 0, pid: 10071, name: syz-executor.1 2 locks held by syz-executor.1/10071: #0: (&iint->mutex){+.+.}, at: [] process_measurement+0x270/0xb20 security/integrity/ima/ima_main.c:225 #1: (pointers_lock){.+.+}, at: [] get_block+0x153/0x1230 fs/sysv/itree.c:217 Preemption disabled at: [< (null)>] (null) CPU: 0 PID: 10071 Comm: syz-executor.1 Tainted: G W 4.14.302-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x281 lib/dump_stack.c:58 ___might_sleep.cold+0x235/0x250 kernel/sched/core.c:6041 __getblk_gfp fs/buffer.c:1381 [inline] __bread_gfp+0x3e/0x2e0 fs/buffer.c:1428 sb_bread include/linux/buffer_head.h:343 [inline] get_branch+0x2ac/0x600 fs/sysv/itree.c:104 get_block+0x176/0x1230 fs/sysv/itree.c:218 block_read_full_page+0x25e/0x8d0 fs/buffer.c:2316 read_pages mm/readahead.c:131 [inline] __do_page_cache_readahead+0x69b/0x940 mm/readahead.c:199 ra_submit mm/internal.h:66 [inline] ondemand_readahead.isra.0+0x514/0xb60 mm/readahead.c:486 page_cache_sync_readahead mm/readahead.c:518 [inline] page_cache_sync_readahead+0xa6/0xf0 mm/readahead.c:503 generic_file_buffered_read mm/filemap.c:2003 [inline] generic_file_read_iter+0xfbc/0x21c0 mm/filemap.c:2273 call_read_iter include/linux/fs.h:1774 [inline] new_sync_read fs/read_write.c:401 [inline] __vfs_read+0x449/0x620 fs/read_write.c:413 integrity_kernel_read+0x11b/0x1b0 security/integrity/iint.c:199 ima_calc_file_hash_tfm security/integrity/ima/ima_crypto.c:381 [inline] ima_calc_file_shash security/integrity/ima/ima_crypto.c:410 [inline] ima_calc_file_hash+0x3ee/0x780 security/integrity/ima/ima_crypto.c:467 ima_collect_measurement+0x39d/0x430 security/integrity/ima/ima_api.c:227 process_measurement+0x78b/0xb20 security/integrity/ima/ima_main.c:264 do_last fs/namei.c:3435 [inline] path_openat+0x10ad/0x2970 fs/namei.c:3571 do_filp_open+0x179/0x3c0 fs/namei.c:3605 do_sys_open+0x296/0x410 fs/open.c:1081 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x5e/0xd3 RIP: 0033:0x7f4a5eced0d9 RSP: 002b:00007f4a5d25f168 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 RAX: ffffffffffffffda RBX: 00007f4a5ee0cf80 RCX: 00007f4a5eced0d9 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 RBP: 00007f4a5ed48ae9 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffcfd5fd7bf R14: 00007f4a5d25f300 R15: 0000000000022000 attempt to access beyond end of device loop1: rw=0, want=3245519, limit=128 attempt to access beyond end of device loop1: rw=0, want=8769404, limit=128 attempt to access beyond end of device loop1: rw=0, want=3245513, limit=128 attempt to access beyond end of device loop1: rw=0, want=8767868, limit=128 attempt to access beyond end of device loop1: rw=0, want=13269810, limit=128 attempt to access beyond end of device loop1: rw=0, want=8073606, limit=128 attempt to access beyond end of device loop1: rw=0, want=3245516, limit=128 attempt to access beyond end of device loop1: rw=0, want=8768636, limit=128 attempt to access beyond end of device loop1: rw=0, want=13466418, limit=128 attempt to access beyond end of device loop1: rw=0, want=8073606, limit=128 sysv_free_block: flc_count > flc_size sysv_free_block: flc_count > flc_size sysv_free_block: flc_count > flc_size sysv_free_block: flc_count > flc_size sysv_free_block: flc_count > flc_size sysv_free_block: flc_count > flc_size sysv_free_block: flc_count > flc_size sysv_free_block: flc_count > flc_size sysv_free_block: flc_count > flc_size sysv_free_block: flc_count > flc_size usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. hfs: get root inode failed hfs: get root inode failed hfs: get root inode failed print_req_error: I/O error, dev loop2, sector 0 buffer_io_error: 98 callbacks suppressed Buffer I/O error on dev loop2, logical block 0, async page read print_req_error: I/O error, dev loop2, sector 1 Buffer I/O error on dev loop2, logical block 1, async page read print_req_error: I/O error, dev loop2, sector 4 Buffer I/O error on dev loop2, logical block 4, async page read print_req_error: I/O error, dev loop2, sector 5 Buffer I/O error on dev loop2, logical block 5, async page read print_req_error: I/O error, dev loop2, sector 6 Buffer I/O error on dev loop2, logical block 6, async page read print_req_error: I/O error, dev loop2, sector 7 Buffer I/O error on dev loop2, logical block 7, async page read (syz-executor.5,10098,0):ocfs2_parse_options:1498 ERROR: Invalid heartbeat mount options (syz-executor.5,10098,0):ocfs2_fill_super:1217 ERROR: status = -22 hfs: get root inode failed BFS-fs: bfs_fill_super(): Last block not available: 66 BFS-fs: bfs_fill_super(): Last block not available: 66 BFS-fs: bfs_fill_super(): Last block not available: 66 BFS-fs: bfs_fill_super(): Last block not available: 66 EXT4-fs (loop4): mounted filesystem without journal. Opts: stripe=0x0000000000000004,,errors=continue EXT4-fs (loop4): mounted filesystem without journal. Opts: stripe=0x0000000000000004,,errors=continue EXT4-fs (loop4): mounted filesystem without journal. Opts: stripe=0x0000000000000004,,errors=continue