[ 76.081638][ T8] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.1.141' (ED25519) to the list of known hosts. 2023/11/15 15:13:25 ignoring optional flag "sandboxArg"="0" 2023/11/15 15:13:26 parsed 1 programs 2023/11/15 15:13:27 executed programs: 0 [ 80.327959][ T5413] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.377368][ T4463] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.384858][ T4463] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.392695][ T4463] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.401094][ T4463] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.408671][ T4463] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 80.416262][ T4463] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.524980][ T5420] chnl_net:caif_netlink_parms(): no params data found [ 80.577076][ T5420] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.584312][ T5420] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.592173][ T5420] bridge_slave_0: entered allmulticast mode [ 80.598914][ T5420] bridge_slave_0: entered promiscuous mode [ 80.607405][ T5420] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.614657][ T5420] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.621848][ T5420] bridge_slave_1: entered allmulticast mode [ 80.628500][ T5420] bridge_slave_1: entered promiscuous mode [ 80.653742][ T5420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.664897][ T5420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.692017][ T5420] team0: Port device team_slave_0 added [ 80.700258][ T5420] team0: Port device team_slave_1 added [ 80.723433][ T5420] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.730535][ T5420] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.756459][ T5420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.768331][ T5420] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.775317][ T5420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.801296][ T5420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.837424][ T5420] hsr_slave_0: entered promiscuous mode [ 80.843750][ T5420] hsr_slave_1: entered promiscuous mode [ 81.782074][ T5420] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.793143][ T5420] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.804679][ T5420] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.815599][ T5420] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.913455][ T5420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.937004][ T5420] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.950614][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.957896][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.975366][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.982527][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.176251][ T5420] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.226990][ T5420] veth0_vlan: entered promiscuous mode [ 82.239732][ T5420] veth1_vlan: entered promiscuous mode [ 82.276961][ T5420] veth0_macvtap: entered promiscuous mode [ 82.288931][ T5420] veth1_macvtap: entered promiscuous mode [ 82.312039][ T5420] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.328592][ T5420] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.342805][ T5420] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.353019][ T5420] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.363640][ T5420] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.372605][ T5420] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.445483][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.459031][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.482151][ T5067] Bluetooth: hci0: command 0x0409 tx timeout [ 82.489035][ T1244] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.498123][ T1244] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.552725][ T5497] loop0: detected capacity change from 0 to 128 [ 82.567720][ T5497] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 82.583168][ T5497] syz-executor.0: attempt to access beyond end of device [ 82.583168][ T5497] loop0: rw=0, sector=8767744, nr_sectors = 1 limit=128 [ 82.611374][ T5497] Buffer I/O error on dev loop0, logical block 8767744, async page read [ 82.621741][ T5497] syz-executor.0: attempt to access beyond end of device [ 82.621741][ T5497] loop0: rw=0, sector=13269809, nr_sectors = 1 limit=128 [ 82.636190][ T5497] Buffer I/O error on dev loop0, logical block 13269809, async page read [ 82.647241][ T5497] syz-executor.0: attempt to access beyond end of device [ 82.647241][ T5497] loop0: rw=0, sector=1157, nr_sectors = 1 limit=128 [ 82.664249][ T5497] Buffer I/O error on dev loop0, logical block 1157, async page read [ 82.673083][ T5497] syz-executor.0: attempt to access beyond end of device [ 82.673083][ T5497] loop0: rw=0, sector=3211264, nr_sectors = 1 limit=128 [ 82.688284][ T5497] Buffer I/O error on dev loop0, logical block 3211264, async page read [ 82.697624][ T5497] syz-executor.0: attempt to access beyond end of device [ 82.697624][ T5497] loop0: rw=0, sector=8768635, nr_sectors = 1 limit=128 [ 82.712854][ T5497] Buffer I/O error on dev loop0, logical block 8768635, async page read [ 82.721989][ T5497] syz-executor.0: attempt to access beyond end of device [ 82.721989][ T5497] loop0: rw=0, sector=13466417, nr_sectors = 1 limit=128 [ 82.737072][ T5497] Buffer I/O error on dev loop0, logical block 13466417, async page read [ 82.746034][ T5497] syz-executor.0: attempt to access beyond end of device [ 82.746034][ T5497] loop0: rw=0, sector=209285, nr_sectors = 1 limit=128 [ 82.762349][ T5497] Buffer I/O error on dev loop0, logical block 209285, async page read [ 82.771284][ T5497] BUG: sleeping function called from invalid context at include/linux/sched/mm.h:306 [ 82.781117][ T5497] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5497, name: syz-executor.0 [ 82.790527][ T5497] preempt_count: 1, expected: 0 [ 82.795406][ T5497] RCU nest depth: 0, expected: 0 [ 82.800391][ T5497] 3 locks held by syz-executor.0/5497: [ 82.805856][ T5497] #0: ffff88807e3701a8 (&iint_mutex_key[depth]){+.+.}-{3:3}, at: process_measurement+0x896/0x2260 [ 82.817393][ T5497] #1: ffff88807ded0328 (mapping.invalidate_lock#3){.+.+}-{3:3}, at: page_cache_ra_unbounded+0x13a/0x5f0 [ 82.828706][ T5497] #2: ffffffff8d3ce3b8 (pointers_lock){.+.+}-{2:2}, at: get_block+0x18f/0x15c0 [ 82.837903][ T5497] Preemption disabled at: [ 82.837912][ T5497] [<0000000000000000>] 0x0 [ 82.847117][ T5497] CPU: 1 PID: 5497 Comm: syz-executor.0 Not tainted 6.7.0-rc1-syzkaller-00019-gc42d9eeef8e5 #0 [ 82.857451][ T5497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 82.867505][ T5497] Call Trace: [ 82.870787][ T5497] [ 82.873723][ T5497] dump_stack_lvl+0x125/0x1b0 [ 82.878416][ T5497] __might_resched+0x3c3/0x5e0 [ 82.883191][ T5497] ? preempt_count_sub+0x160/0x160 [ 82.888311][ T5497] bdev_getblk+0x89/0xc0 [ 82.892569][ T5497] __bread_gfp+0xaf/0x370 [ 82.896918][ T5497] get_branch+0x2cb/0x660 [ 82.901259][ T5497] get_block+0x1ad/0x15c0 [ 82.905606][ T5497] ? free_branches+0x3c0/0x3c0 [ 82.910381][ T5497] ? reacquire_held_locks+0x4c0/0x4c0 [ 82.915794][ T5497] ? do_raw_spin_lock+0x12e/0x2b0 [ 82.920833][ T5497] ? spin_bug+0x1d0/0x1d0 [ 82.925183][ T5497] ? _raw_spin_unlock+0x28/0x40 [ 82.930044][ T5497] ? zero_user_segments+0x2bc/0x350 [ 82.935267][ T5497] block_read_full_folio+0x3df/0xaa0 [ 82.940571][ T5497] ? free_branches+0x3c0/0x3c0 [ 82.945352][ T5497] ? decrypt_bh+0x480/0x480 [ 82.949886][ T5497] ? folio_add_lru+0x432/0x7f0 [ 82.954697][ T5497] ? sysv_bmap+0x30/0x30 [ 82.958960][ T5497] read_pages+0xa76/0xdc0 [ 82.963317][ T5497] ? folio_add_lru+0x451/0x7f0 [ 82.968092][ T5497] ? folio_flags.constprop.0+0x150/0x150 [ 82.973765][ T5497] page_cache_ra_unbounded+0x457/0x5f0 [ 82.979250][ T5497] page_cache_ra_order+0x72b/0xa80 [ 82.984381][ T5497] ? blk_cgroup_congested+0x15b/0x290 [ 82.989782][ T5497] ondemand_readahead+0x493/0x1130 [ 82.994908][ T5497] page_cache_sync_ra+0x174/0x1d0 [ 82.999946][ T5497] filemap_get_pages+0xc06/0x1830 [ 83.004987][ T5497] ? filemap_add_folio+0x1e0/0x1e0 [ 83.010109][ T5497] ? __orc_find+0x104/0x130 [ 83.014629][ T5497] ? preempt_count_sub+0x160/0x160 [ 83.019754][ T5497] ? print_usage_bug.part.0+0x550/0x550 [ 83.025429][ T5497] ? bpf_ksym_find+0x124/0x1b0 [ 83.030236][ T5497] filemap_read+0x39b/0xcf0 [ 83.034746][ T5497] ? find_held_lock+0x2d/0x110 [ 83.039539][ T5497] ? filemap_get_pages+0x1830/0x1830 [ 83.044845][ T5497] ? kasan_save_stack+0x43/0x50 [ 83.049722][ T5497] ? kasan_save_stack+0x33/0x50 [ 83.054607][ T5497] generic_file_read_iter+0x346/0x450 [ 83.059997][ T5497] ? do_filp_open+0x1de/0x430 [ 83.064707][ T5497] ? do_sys_openat2+0x176/0x1e0 [ 83.069579][ T5497] __kernel_read+0x301/0x870 [ 83.074183][ T5497] ? __ia32_sys_llseek+0x390/0x390 [ 83.079331][ T5497] integrity_kernel_read+0x7f/0xb0 [ 83.084467][ T5497] ? integrity_inode_free+0x1c0/0x1c0 [ 83.089863][ T5497] ? kasan_set_track+0x25/0x30 [ 83.094663][ T5497] ima_calc_file_hash_tfm+0x2c5/0x3d0 [ 83.100052][ T5497] ? calc_buffer_shash_tfm+0x2d0/0x2d0 [ 83.105552][ T5497] ? generic_fillattr+0x64e/0x8a0 [ 83.110592][ T5497] ? sysv_write_begin+0xd0/0xd0 [ 83.115451][ T5497] ? ima_alloc_tfm+0x21d/0x2d0 [ 83.120322][ T5497] ima_calc_file_hash+0x1c6/0x4a0 [ 83.125374][ T5497] ima_collect_measurement+0x85e/0xa20 [ 83.130857][ T5497] ? ima_get_action+0xa0/0xa0 [ 83.135578][ T5497] ? vfs_getxattr_alloc+0xf1/0x340 [ 83.140730][ T5497] ? ima_get_cache_status+0x1f0/0x1f0 [ 83.146126][ T5497] process_measurement+0xe92/0x2260 [ 83.151361][ T5497] ? mmap_violation_check+0x1f0/0x1f0 [ 83.156766][ T5497] ? tomoyo_check_open_permission+0x209/0x3b0 [ 83.162860][ T5497] ? tomoyo_path_number_perm+0x580/0x580 [ 83.168538][ T5497] ? apparmor_getprocattr+0x380/0x380 [ 83.173933][ T5497] ? spin_bug+0x1d0/0x1d0 [ 83.178272][ T5497] ? fsnotify_perm.part.0+0x247/0x5c0 [ 83.183653][ T5497] ima_file_check+0xc2/0x110 [ 83.188270][ T5497] ? process_measurement+0x2260/0x2260 [ 83.193753][ T5497] ? may_open+0x1f2/0x400 [ 83.198092][ T5497] path_openat+0x1821/0x2c50 [ 83.202710][ T5497] ? path_lookupat+0x770/0x770 [ 83.207489][ T5497] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 83.213491][ T5497] do_filp_open+0x1de/0x430 [ 83.218010][ T5497] ? may_open_dev+0xf0/0xf0 [ 83.222532][ T5497] ? find_held_lock+0x2d/0x110 [ 83.227327][ T5497] ? _raw_spin_unlock+0x28/0x40 [ 83.232192][ T5497] ? alloc_fd+0x2da/0x6c0 [ 83.236544][ T5497] do_sys_openat2+0x176/0x1e0 [ 83.241244][ T5497] ? build_open_flags+0x690/0x690 [ 83.246284][ T5497] ? xfd_validate_state+0x5d/0x180 [ 83.251423][ T5497] __x64_sys_open+0x154/0x1e0 [ 83.256118][ T5497] ? do_sys_open+0x160/0x160 [ 83.260723][ T5497] ? syscall_enter_from_user_mode+0x7f/0x120 [ 83.266719][ T5497] ? lockdep_hardirqs_on+0x7d/0x110 [ 83.271949][ T5497] do_syscall_64+0x40/0x110 [ 83.276464][ T5497] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 83.282393][ T5497] RIP: 0033:0x7f1b22e7cb29 [ 83.286818][ T5497] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 83.306433][ T5497] RSP: 002b:00007f1b23b900c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 83.314851][ T5497] RAX: ffffffffffffffda RBX: 00007f1b22f9bf80 RCX: 00007f1b22e7cb29 [ 83.322836][ T5497] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 83.330819][ T5497] RBP: 00007f1b22ec847a R08: 0000000000000000 R09: 0000000000000000 [ 83.338801][ T5497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.346774][ T5497] R13: 000000000000000b R14: 00007f1b22f9bf80 R15: 00007ffcff1f3fe8 [ 83.354765][ T5497] [ 83.383993][ T5497] syz-executor.0: attempt to access beyond end of device [ 83.383993][ T5497] loop0: rw=0, sector=8767744, nr_sectors = 1 limit=128 [ 83.397928][ T5497] Buffer I/O error on dev loop0, logical block 8767744, async page read [ 83.406766][ T5497] syz-executor.0: attempt to access beyond end of device [ 83.406766][ T5497] loop0: rw=0, sector=13269809, nr_sectors = 1 limit=128 [ 83.423033][ T5497] Buffer I/O error on dev loop0, logical block 13269809, async page read [ 83.431749][ T5497] syz-executor.0: attempt to access beyond end of device [ 83.431749][ T5497] loop0: rw=0, sector=1157, nr_sectors = 1 limit=128 [ 83.449284][ T5497] Buffer I/O error on dev loop0, logical block 1157, async page read [ 83.460530][ T28] audit: type=1800 audit(1700061210.393:2): pid=5497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="/" dev="loop0" ino=2 res=0 errno=0 [ 83.492754][ T5420] sysv_free_block: trying to free block not in datazone [ 83.501719][ T5420] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 83.543042][ T5540] loop0: detected capacity change from 0 to 128 [ 83.565007][ T5540] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 83.577217][ T28] audit: type=1800 audit(1700061210.513:3): pid=5540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="/" dev="loop0" ino=2 res=0 errno=0 [ 83.608044][ T5420] sysv_free_block: trying to free block not in datazone [ 83.615942][ T5420] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 83.658558][ T5545] loop0: detected capacity change from 0 to 128 [ 83.667910][ T5545] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 83.696516][ T28] audit: type=1800 audit(1700061210.633:4): pid=5545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="/" dev="loop0" ino=2 res=0 errno=0 [ 83.723396][ T5420] sysv_free_block: trying to free block not in datazone [ 83.731380][ T5420] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 83.764053][ T5550] loop0: detected capacity change from 0 to 128 [ 83.775163][ T5550] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 83.786013][ T5550] BUG: sleeping function called from invalid context at include/linux/sched/mm.h:306 [ 83.795882][ T5550] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5550, name: syz-executor.0 [ 83.805662][ T5550] preempt_count: 1, expected: 0 [ 83.810860][ T5550] RCU nest depth: 0, expected: 0 [ 83.815813][ T5550] 3 locks held by syz-executor.0/5550: [ 83.821648][ T5550] #0: ffff88807e3703f8 (&iint_mutex_key[depth]){+.+.}-{3:3}, at: process_measurement+0x896/0x2260 [ 83.832796][ T5550] #1: ffff88807ded0db8 (mapping.invalidate_lock#3){.+.+}-{3:3}, at: page_cache_ra_unbounded+0x13a/0x5f0 [ 83.844230][ T5550] #2: ffffffff8d3ce3b8 (pointers_lock){.+.+}-{2:2}, at: get_block+0x18f/0x15c0 [ 83.853380][ T5550] Preemption disabled at: [ 83.853392][ T5550] [<0000000000000000>] 0x0 [ 83.862183][ T5550] CPU: 1 PID: 5550 Comm: syz-executor.0 Tainted: G W 6.7.0-rc1-syzkaller-00019-gc42d9eeef8e5 #0 [ 83.873985][ T5550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 83.884041][ T5550] Call Trace: [ 83.887323][ T5550] [ 83.890269][ T5550] dump_stack_lvl+0x125/0x1b0 [ 83.894964][ T5550] __might_resched+0x3c3/0x5e0 [ 83.899739][ T5550] ? preempt_count_sub+0x160/0x160 [ 83.904860][ T5550] bdev_getblk+0x89/0xc0 [ 83.909117][ T5550] __bread_gfp+0xaf/0x370 [ 83.913466][ T5550] get_branch+0x2cb/0x660 [ 83.917823][ T5550] get_block+0x1ad/0x15c0 [ 83.922179][ T5550] ? free_branches+0x3c0/0x3c0 [ 83.926947][ T5550] ? reacquire_held_locks+0x4c0/0x4c0 [ 83.932340][ T5550] ? do_raw_spin_lock+0x12e/0x2b0 [ 83.937376][ T5550] ? spin_bug+0x1d0/0x1d0 [ 83.941721][ T5550] ? _raw_spin_unlock+0x28/0x40 [ 83.946615][ T5550] ? zero_user_segments+0x2bc/0x350 [ 83.951830][ T5550] block_read_full_folio+0x3df/0xaa0 [ 83.957128][ T5550] ? free_branches+0x3c0/0x3c0 [ 83.961901][ T5550] ? decrypt_bh+0x480/0x480 [ 83.966421][ T5550] ? folio_add_lru+0x432/0x7f0 [ 83.971190][ T5550] ? sysv_bmap+0x30/0x30 [ 83.975427][ T5550] read_pages+0xa76/0xdc0 [ 83.979763][ T5550] ? folio_add_lru+0x451/0x7f0 [ 83.984515][ T5550] ? folio_flags.constprop.0+0x150/0x150 [ 83.990156][ T5550] page_cache_ra_unbounded+0x457/0x5f0 [ 83.995728][ T5550] page_cache_ra_order+0x72b/0xa80 [ 84.000832][ T5550] ? blk_cgroup_congested+0x15b/0x290 [ 84.006207][ T5550] ondemand_readahead+0x493/0x1130 [ 84.011313][ T5550] page_cache_sync_ra+0x174/0x1d0 [ 84.016329][ T5550] filemap_get_pages+0xc06/0x1830 [ 84.021379][ T5550] ? filemap_add_folio+0x1e0/0x1e0 [ 84.026490][ T5550] ? __orc_find+0x104/0x130 [ 84.030983][ T5550] ? preempt_count_sub+0x160/0x160 [ 84.036083][ T5550] ? bpf_ksym_find+0x124/0x1b0 [ 84.040844][ T5550] filemap_read+0x39b/0xcf0 [ 84.045359][ T5550] ? kernel_text_address+0x85/0xf0 [ 84.050496][ T5550] ? filemap_get_pages+0x1830/0x1830 [ 84.055778][ T5550] ? kasan_save_stack+0x43/0x50 [ 84.060626][ T5550] ? kasan_save_stack+0x33/0x50 [ 84.065476][ T5550] generic_file_read_iter+0x346/0x450 [ 84.070840][ T5550] ? do_filp_open+0x1de/0x430 [ 84.075512][ T5550] ? do_sys_openat2+0x176/0x1e0 [ 84.080363][ T5550] __kernel_read+0x301/0x870 [ 84.084947][ T5550] ? __ia32_sys_llseek+0x390/0x390 [ 84.090061][ T5550] integrity_kernel_read+0x7f/0xb0 [ 84.095169][ T5550] ? integrity_inode_free+0x1c0/0x1c0 [ 84.100538][ T5550] ? kasan_set_track+0x25/0x30 [ 84.105303][ T5550] ima_calc_file_hash_tfm+0x2c5/0x3d0 [ 84.110672][ T5550] ? calc_buffer_shash_tfm+0x2d0/0x2d0 [ 84.116147][ T5550] ? generic_fillattr+0x64e/0x8a0 [ 84.121166][ T5550] ? kasan_save_stack+0x33/0x50 [ 84.126013][ T5550] ? sysv_write_begin+0xd0/0xd0 [ 84.130852][ T5550] ? ima_alloc_tfm+0x21d/0x2d0 [ 84.135620][ T5550] ima_calc_file_hash+0x1c6/0x4a0 [ 84.140642][ T5550] ima_collect_measurement+0x85e/0xa20 [ 84.146102][ T5550] ? ima_get_action+0xa0/0xa0 [ 84.150784][ T5550] ? vfs_getxattr_alloc+0xf1/0x340 [ 84.155900][ T5550] ? ima_get_cache_status+0x1f0/0x1f0 [ 84.161267][ T5550] process_measurement+0xe92/0x2260 [ 84.166481][ T5550] ? mmap_violation_check+0x1f0/0x1f0 [ 84.171859][ T5550] ? tomoyo_check_open_permission+0x209/0x3b0 [ 84.177923][ T5550] ? tomoyo_path_number_perm+0x580/0x580 [ 84.183570][ T5550] ? apparmor_getprocattr+0x380/0x380 [ 84.188956][ T5550] ? spin_bug+0x1d0/0x1d0 [ 84.193276][ T5550] ? fsnotify_perm.part.0+0x247/0x5c0 [ 84.198641][ T5550] ima_file_check+0xc2/0x110 [ 84.203227][ T5550] ? process_measurement+0x2260/0x2260 [ 84.208681][ T5550] ? may_open+0x1f2/0x400 [ 84.213002][ T5550] path_openat+0x1821/0x2c50 [ 84.217592][ T5550] ? path_lookupat+0x770/0x770 [ 84.222349][ T5550] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 84.228420][ T5550] do_filp_open+0x1de/0x430 [ 84.232922][ T5550] ? may_open_dev+0xf0/0xf0 [ 84.237417][ T5550] ? find_held_lock+0x2d/0x110 [ 84.242189][ T5550] ? _raw_spin_unlock+0x28/0x40 [ 84.247031][ T5550] ? alloc_fd+0x2da/0x6c0 [ 84.252054][ T5550] do_sys_openat2+0x176/0x1e0 [ 84.256730][ T5550] ? build_open_flags+0x690/0x690 [ 84.261752][ T5550] ? xfd_validate_state+0x5d/0x180 [ 84.266865][ T5550] __x64_sys_open+0x154/0x1e0 [ 84.271570][ T5550] ? do_sys_open+0x160/0x160 [ 84.276183][ T5550] ? syscall_enter_from_user_mode+0x7f/0x120 [ 84.282172][ T5550] ? lockdep_hardirqs_on+0x7d/0x110 [ 84.287378][ T5550] do_syscall_64+0x40/0x110 [ 84.291887][ T5550] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 84.297788][ T5550] RIP: 0033:0x7f1b22e7cb29 [ 84.302288][ T5550] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 84.321893][ T5550] RSP: 002b:00007f1b23b900c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 84.330309][ T5550] RAX: ffffffffffffffda RBX: 00007f1b22f9bf80 RCX: 00007f1b22e7cb29 [ 84.338275][ T5550] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 84.346240][ T5550] RBP: 00007f1b22ec847a R08: 0000000000000000 R09: 0000000000000000 [ 84.354211][ T5550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.362176][ T5550] R13: 000000000000000b R14: 00007f1b22f9bf80 R15: 00007ffcff1f3fe8 [ 84.370150][ T5550] [ 84.411704][ T5420] sysv_free_block: trying to free block not in datazone [ 84.420675][ T5420] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 84.436381][ T28] audit: type=1800 audit(1700061211.333:5): pid=5550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="/" dev="loop0" ino=2 res=0 errno=0 [ 84.505988][ T5563] loop0: detected capacity change from 0 to 128 [ 84.514353][ T5563] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 84.526250][ T28] audit: type=1800 audit(1700061211.463:6): pid=5563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="/" dev="loop0" ino=2 res=0 errno=0 [ 84.555701][ T5420] sysv_free_block: trying to free block not in datazone [ 84.562825][ T5067] Bluetooth: hci0: command 0x041b tx timeout [ 84.567181][ T5420] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 84.648658][ T5572] loop0: detected capacity change from 0 to 128 [ 84.658240][ T5572] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 84.686254][ T28] audit: type=1800 audit(1700061211.623:7): pid=5572 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="/" dev="loop0" ino=2 res=0 errno=0 [ 84.713674][ T5420] sysv_free_block: trying to free block not in datazone [ 84.729960][ T5420] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 84.794545][ T5577] loop0: detected capacity change from 0 to 128 [ 84.803238][ T5577] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 84.813075][ T5577] BUG: sleeping function called from invalid context at include/linux/sched/mm.h:306 [ 84.822607][ T5577] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5577, name: syz-executor.0 [ 84.832065][ T5577] preempt_count: 1, expected: 0 [ 84.836918][ T5577] RCU nest depth: 0, expected: 0 [ 84.842005][ T5577] 3 locks held by syz-executor.0/5577: [ 84.847479][ T5577] #0: ffff8880299f8e60 (&iint_mutex_key[depth]){+.+.}-{3:3}, at: process_measurement+0x896/0x2260 [ 84.858260][ T5577] #1: ffff88807de90870 (mapping.invalidate_lock#3){.+.+}-{3:3}, at: page_cache_ra_unbounded+0x13a/0x5f0 [ 84.869631][ T5577] #2: ffffffff8d3ce3b8 (pointers_lock){.+.+}-{2:2}, at: get_block+0x18f/0x15c0 [ 84.878713][ T5577] Preemption disabled at: [ 84.878724][ T5577] [<0000000000000000>] 0x0 [ 84.887531][ T5577] CPU: 0 PID: 5577 Comm: syz-executor.0 Tainted: G W 6.7.0-rc1-syzkaller-00019-gc42d9eeef8e5 #0 [ 84.899345][ T5577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 84.909416][ T5577] Call Trace: [ 84.912697][ T5577] [ 84.915635][ T5577] dump_stack_lvl+0x125/0x1b0 [ 84.920335][ T5577] __might_resched+0x3c3/0x5e0 [ 84.925111][ T5577] ? preempt_count_sub+0x160/0x160 [ 84.930234][ T5577] bdev_getblk+0x89/0xc0 [ 84.934495][ T5577] __bread_gfp+0xaf/0x370 [ 84.938838][ T5577] get_branch+0x2cb/0x660 [ 84.943181][ T5577] get_block+0x1ad/0x15c0 [ 84.947626][ T5577] ? free_branches+0x3c0/0x3c0 [ 84.952415][ T5577] ? reacquire_held_locks+0x4c0/0x4c0 [ 84.957819][ T5577] ? do_raw_spin_lock+0x12e/0x2b0 [ 84.962862][ T5577] ? spin_bug+0x1d0/0x1d0 [ 84.967203][ T5577] ? _raw_spin_unlock+0x28/0x40 [ 84.972082][ T5577] ? zero_user_segments+0x2bc/0x350 [ 84.977307][ T5577] block_read_full_folio+0x3df/0xaa0 [ 84.982614][ T5577] ? free_branches+0x3c0/0x3c0 [ 84.987396][ T5577] ? decrypt_bh+0x480/0x480 [ 84.991911][ T5577] ? folio_add_lru+0x432/0x7f0 [ 84.996667][ T5577] ? sysv_bmap+0x30/0x30 [ 85.000901][ T5577] read_pages+0xa76/0xdc0 [ 85.005236][ T5577] ? folio_add_lru+0x451/0x7f0 [ 85.009993][ T5577] ? folio_flags.constprop.0+0x150/0x150 [ 85.015634][ T5577] page_cache_ra_unbounded+0x457/0x5f0 [ 85.021118][ T5577] page_cache_ra_order+0x72b/0xa80 [ 85.026420][ T5577] ? blk_cgroup_congested+0x15b/0x290 [ 85.031792][ T5577] ondemand_readahead+0x493/0x1130 [ 85.036901][ T5577] page_cache_sync_ra+0x174/0x1d0 [ 85.041920][ T5577] filemap_get_pages+0xc06/0x1830 [ 85.046947][ T5577] ? filemap_add_folio+0x1e0/0x1e0 [ 85.052051][ T5577] ? __orc_find+0x104/0x130 [ 85.056545][ T5577] ? preempt_count_sub+0x160/0x160 [ 85.061652][ T5577] ? bpf_ksym_find+0x124/0x1b0 [ 85.066416][ T5577] filemap_read+0x39b/0xcf0 [ 85.070908][ T5577] ? kernel_text_address+0x85/0xf0 [ 85.076017][ T5577] ? filemap_get_pages+0x1830/0x1830 [ 85.081300][ T5577] ? kasan_save_stack+0x43/0x50 [ 85.086153][ T5577] ? kasan_save_stack+0x33/0x50 [ 85.091000][ T5577] generic_file_read_iter+0x346/0x450 [ 85.096361][ T5577] ? do_filp_open+0x1de/0x430 [ 85.101036][ T5577] ? do_sys_openat2+0x176/0x1e0 [ 85.105888][ T5577] __kernel_read+0x301/0x870 [ 85.110473][ T5577] ? __ia32_sys_llseek+0x390/0x390 [ 85.115593][ T5577] integrity_kernel_read+0x7f/0xb0 [ 85.120703][ T5577] ? integrity_inode_free+0x1c0/0x1c0 [ 85.126075][ T5577] ? kasan_set_track+0x25/0x30 [ 85.130839][ T5577] ima_calc_file_hash_tfm+0x2c5/0x3d0 [ 85.136209][ T5577] ? calc_buffer_shash_tfm+0x2d0/0x2d0 [ 85.141688][ T5577] ? generic_fillattr+0x64e/0x8a0 [ 85.146710][ T5577] ? kasan_save_stack+0x33/0x50 [ 85.151582][ T5577] ? sysv_write_begin+0xd0/0xd0 [ 85.156423][ T5577] ? ima_alloc_tfm+0x21d/0x2d0 [ 85.161186][ T5577] ima_calc_file_hash+0x1c6/0x4a0 [ 85.166211][ T5577] ima_collect_measurement+0x85e/0xa20 [ 85.171676][ T5577] ? ima_get_action+0xa0/0xa0 [ 85.176362][ T5577] ? vfs_getxattr_alloc+0xf1/0x340 [ 85.181485][ T5577] ? ima_get_cache_status+0x1f0/0x1f0 [ 85.186851][ T5577] process_measurement+0xe92/0x2260 [ 85.192062][ T5577] ? mmap_violation_check+0x1f0/0x1f0 [ 85.197435][ T5577] ? tomoyo_check_open_permission+0x209/0x3b0 [ 85.203494][ T5577] ? tomoyo_path_number_perm+0x580/0x580 [ 85.209146][ T5577] ? apparmor_getprocattr+0x380/0x380 [ 85.214521][ T5577] ? spin_bug+0x1d0/0x1d0 [ 85.218846][ T5577] ? fsnotify_perm.part.0+0x247/0x5c0 [ 85.224212][ T5577] ima_file_check+0xc2/0x110 [ 85.228800][ T5577] ? process_measurement+0x2260/0x2260 [ 85.234255][ T5577] ? may_open+0x1f2/0x400 [ 85.238581][ T5577] path_openat+0x1821/0x2c50 [ 85.243174][ T5577] ? path_lookupat+0x770/0x770 [ 85.247934][ T5577] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 85.253917][ T5577] do_filp_open+0x1de/0x430 [ 85.258416][ T5577] ? may_open_dev+0xf0/0xf0 [ 85.262932][ T5577] ? find_held_lock+0x2d/0x110 [ 85.267703][ T5577] ? _raw_spin_unlock+0x28/0x40 [ 85.272544][ T5577] ? alloc_fd+0x2da/0x6c0 [ 85.276868][ T5577] do_sys_openat2+0x176/0x1e0 [ 85.281546][ T5577] ? build_open_flags+0x690/0x690 [ 85.286569][ T5577] ? xfd_validate_state+0x5d/0x180 [ 85.291693][ T5577] __x64_sys_open+0x154/0x1e0 [ 85.296369][ T5577] ? do_sys_open+0x160/0x160 [ 85.300963][ T5577] ? syscall_enter_from_user_mode+0x7f/0x120 [ 85.306939][ T5577] ? lockdep_hardirqs_on+0x7d/0x110 [ 85.312140][ T5577] do_syscall_64+0x40/0x110 [ 85.316638][ T5577] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 85.322535][ T5577] RIP: 0033:0x7f1b22e7cb29 [ 85.326937][ T5577] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 85.346710][ T5577] RSP: 002b:00007f1b23b900c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 85.355113][ T5577] RAX: ffffffffffffffda RBX: 00007f1b22f9bf80 RCX: 00007f1b22e7cb29 [ 85.363075][ T5577] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 85.371040][ T5577] RBP: 00007f1b22ec847a R08: 0000000000000000 R09: 0000000000000000 [ 85.378997][ T5577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.386959][ T5577] R13: 000000000000000b R14: 00007f1b22f9bf80 R15: 00007ffcff1f3fe8 2023/11/15 15:13:32 executed programs: 7 [ 85.394939][ T5577] [ 85.402900][ T28] audit: type=1800 audit(1700061212.343:8): pid=5577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="/" dev="loop0" ino=2 res=0 errno=0 [ 85.445560][ T5420] sysv_free_block: trying to free block not in datazone [ 85.455404][ T5420] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 85.515737][ T5591] loop0: detected capacity change from 0 to 128 [ 85.523627][ T5591] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 85.535292][ T28] audit: type=1800 audit(1700061212.473:9): pid=5591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="/" dev="loop0" ino=2 res=0 errno=0 [ 85.570319][ T5420] sysv_free_block: trying to free block not in datazone [ 85.578396][ T5420] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 85.627488][ T5597] loop0: detected capacity change from 0 to 128 [ 85.635712][ T5597] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 85.654335][ T28] audit: type=1800 audit(1700061212.593:10): pid=5597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="/" dev="loop0" ino=2 res=0 errno=0 [ 85.674911][ T5420] sysv_free_block: trying to free block not in datazone [ 85.702048][ T5420] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 85.749251][ T5604] loop0: detected capacity change from 0 to 128 [ 85.771167][ T5604] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 85.784826][ T28] audit: type=1800 audit(1700061212.723:11): pid=5604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="/" dev="loop0" ino=2 res=0 errno=0 [ 85.815599][ T5420] sysv_free_block: trying to free block not in datazone [ 85.823306][ T5420] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 85.880912][ T5609] loop0: detected capacity change from 0 to 128 [ 85.888602][ T5609] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 85.898162][ T5609] BUG: sleeping function called from invalid context at include/linux/sched/mm.h:306 [ 85.907771][ T5609] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5609, name: syz-executor.0 [ 85.917219][ T5609] preempt_count: 1, expected: 0 [ 85.922106][ T5609] RCU nest depth: 0, expected: 0 [ 85.927045][ T5609] 3 locks held by syz-executor.0/5609: [ 85.932984][ T5609] #0: ffff88807e370898 (&iint_mutex_key[depth]){+.+.}-{3:3}, at: process_measurement+0x896/0x2260 [ 85.943827][ T5609] #1: ffff88807ded22d8 (mapping.invalidate_lock#3){.+.+}-{3:3}, at: page_cache_ra_unbounded+0x13a/0x5f0 [ 85.955164][ T5609] #2: ffffffff8d3ce3b8 (pointers_lock){.+.+}-{2:2}, at: get_block+0x18f/0x15c0 [ 85.964293][ T5609] Preemption disabled at: [ 85.964305][ T5609] [<0000000000000000>] 0x0 [ 85.973114][ T5609] CPU: 1 PID: 5609 Comm: syz-executor.0 Tainted: G W 6.7.0-rc1-syzkaller-00019-gc42d9eeef8e5 #0 [ 85.984928][ T5609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 85.994987][ T5609] Call Trace: [ 85.998361][ T5609] [ 86.001298][ T5609] dump_stack_lvl+0x125/0x1b0 [ 86.005996][ T5609] __might_resched+0x3c3/0x5e0 [ 86.010773][ T5609] ? preempt_count_sub+0x160/0x160 [ 86.015902][ T5609] bdev_getblk+0x89/0xc0 [ 86.020159][ T5609] __bread_gfp+0xaf/0x370 [ 86.024507][ T5609] get_branch+0x2cb/0x660 [ 86.028852][ T5609] get_block+0x1ad/0x15c0 [ 86.033203][ T5609] ? free_branches+0x3c0/0x3c0 [ 86.037985][ T5609] ? reacquire_held_locks+0x4c0/0x4c0 [ 86.043375][ T5609] ? do_raw_spin_lock+0x12e/0x2b0 [ 86.048405][ T5609] ? spin_bug+0x1d0/0x1d0 [ 86.052746][ T5609] ? _raw_spin_unlock+0x28/0x40 [ 86.057613][ T5609] ? zero_user_segments+0x2bc/0x350 [ 86.062822][ T5609] block_read_full_folio+0x3df/0xaa0 [ 86.068119][ T5609] ? free_branches+0x3c0/0x3c0 [ 86.072891][ T5609] ? decrypt_bh+0x480/0x480 [ 86.077414][ T5609] ? folio_add_lru+0x432/0x7f0 [ 86.082187][ T5609] ? sysv_bmap+0x30/0x30 [ 86.086437][ T5609] read_pages+0xa76/0xdc0 [ 86.090799][ T5609] ? folio_add_lru+0x451/0x7f0 [ 86.095567][ T5609] ? folio_flags.constprop.0+0x150/0x150 [ 86.101224][ T5609] page_cache_ra_unbounded+0x457/0x5f0 [ 86.106712][ T5609] page_cache_ra_order+0x72b/0xa80 [ 86.111832][ T5609] ? blk_cgroup_congested+0x15b/0x290 [ 86.117220][ T5609] ondemand_readahead+0x493/0x1130 [ 86.122356][ T5609] page_cache_sync_ra+0x174/0x1d0 [ 86.127392][ T5609] filemap_get_pages+0xc06/0x1830 [ 86.132440][ T5609] ? filemap_add_folio+0x1e0/0x1e0 [ 86.137568][ T5609] ? __orc_find+0x104/0x130 [ 86.142074][ T5609] ? preempt_count_sub+0x160/0x160 [ 86.147193][ T5609] ? bpf_ksym_find+0x124/0x1b0 [ 86.151978][ T5609] filemap_read+0x39b/0xcf0 [ 86.156485][ T5609] ? kernel_text_address+0x85/0xf0 [ 86.161620][ T5609] ? filemap_get_pages+0x1830/0x1830 [ 86.166933][ T5609] ? kasan_save_stack+0x43/0x50 [ 86.171796][ T5609] ? kasan_save_stack+0x33/0x50 [ 86.176662][ T5609] generic_file_read_iter+0x346/0x450 [ 86.182044][ T5609] ? do_filp_open+0x1de/0x430 [ 86.186732][ T5609] ? do_sys_openat2+0x176/0x1e0 [ 86.191603][ T5609] __kernel_read+0x301/0x870 [ 86.196199][ T5609] ? __ia32_sys_llseek+0x390/0x390 [ 86.201336][ T5609] integrity_kernel_read+0x7f/0xb0 [ 86.206467][ T5609] ? integrity_inode_free+0x1c0/0x1c0 [ 86.211855][ T5609] ? kasan_set_track+0x25/0x30 [ 86.216645][ T5609] ima_calc_file_hash_tfm+0x2c5/0x3d0 [ 86.222039][ T5609] ? calc_buffer_shash_tfm+0x2d0/0x2d0 [ 86.227546][ T5609] ? generic_fillattr+0x64e/0x8a0 [ 86.232595][ T5609] ? kasan_save_stack+0x33/0x50 [ 86.237475][ T5609] ? sysv_write_begin+0xd0/0xd0 [ 86.242334][ T5609] ? ima_alloc_tfm+0x21d/0x2d0 [ 86.247116][ T5609] ima_calc_file_hash+0x1c6/0x4a0 [ 86.252160][ T5609] ima_collect_measurement+0x85e/0xa20 [ 86.257644][ T5609] ? ima_get_action+0xa0/0xa0 [ 86.262350][ T5609] ? vfs_getxattr_alloc+0xf1/0x340 [ 86.267494][ T5609] ? ima_get_cache_status+0x1f0/0x1f0 [ 86.272892][ T5609] process_measurement+0xe92/0x2260 [ 86.278122][ T5609] ? mmap_violation_check+0x1f0/0x1f0 [ 86.283510][ T5609] ? tomoyo_check_open_permission+0x209/0x3b0 [ 86.289588][ T5609] ? tomoyo_path_number_perm+0x580/0x580 [ 86.295259][ T5609] ? apparmor_getprocattr+0x380/0x380 [ 86.300646][ T5609] ? spin_bug+0x1d0/0x1d0 [ 86.304986][ T5609] ? fsnotify_perm.part.0+0x247/0x5c0 [ 86.310374][ T5609] ima_file_check+0xc2/0x110 [ 86.314985][ T5609] ? process_measurement+0x2260/0x2260 [ 86.320466][ T5609] ? may_open+0x1f2/0x400 [ 86.324809][ T5609] path_openat+0x1821/0x2c50 [ 86.329422][ T5609] ? path_lookupat+0x770/0x770 [ 86.334202][ T5609] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 86.340205][ T5609] do_filp_open+0x1de/0x430 [ 86.344723][ T5609] ? may_open_dev+0xf0/0xf0 [ 86.349238][ T5609] ? find_held_lock+0x2d/0x110 [ 86.354043][ T5609] ? _raw_spin_unlock+0x28/0x40 [ 86.358924][ T5609] ? alloc_fd+0x2da/0x6c0 [ 86.363275][ T5609] do_sys_openat2+0x176/0x1e0 [ 86.367977][ T5609] ? build_open_flags+0x690/0x690 [ 86.373017][ T5609] ? xfd_validate_state+0x5d/0x180 [ 86.378159][ T5609] __x64_sys_open+0x154/0x1e0 [ 86.382860][ T5609] ? do_sys_open+0x160/0x160 [ 86.387470][ T5609] ? syscall_enter_from_user_mode+0x7f/0x120 [ 86.393465][ T5609] ? lockdep_hardirqs_on+0x7d/0x110 [ 86.398683][ T5609] do_syscall_64+0x40/0x110 [ 86.403201][ T5609] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 86.409124][ T5609] RIP: 0033:0x7f1b22e7cb29 [ 86.413541][ T5609] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 86.433153][ T5609] RSP: 002b:00007f1b23b900c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 86.441582][ T5609] RAX: ffffffffffffffda RBX: 00007f1b22f9bf80 RCX: 00007f1b22e7cb29 [ 86.449563][ T5609] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 86.457541][ T5609] RBP: 00007f1b22ec847a R08: 0000000000000000 R09: 0000000000000000 [ 86.465523][ T5609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.473500][ T5609] R13: 000000000000000b R14: 00007f1b22f9bf80 R15: 00007ffcff1f3fe8 [ 86.481486][ T5609] [ 86.527450][ T5420] sysv_free_block: trying to free block not in datazone [ 86.538009][ T5420] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 86.587438][ T5640] loop0: detected capacity change from 0 to 128 [ 86.595972][ T5640] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 86.627775][ T5420] sysv_free_block: trying to free block not in datazone [ 86.635436][ T5420] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 86.657956][ T5067] Bluetooth: hci0: command 0x040f tx timeout [ 86.687606][ T5646] loop0: detected capacity change from 0 to 128 [ 86.710296][ T5646] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 86.741688][ T5420] sysv_free_block: trying to free block not in datazone [ 86.749795][ T5420] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 86.819217][ T5653] loop0: detected capacity change from 0 to 128 [ 86.827287][ T5653] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 86.879781][ T5420] sysv_free_block: trying to free block not in datazone [ 86.887598][ T5420] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 86.947544][ T5659] loop0: detected capacity change from 0 to 128 [ 86.956834][ T5659] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 86.970110][ T5659] BUG: sleeping function called from invalid context at include/linux/sched/mm.h:306 [ 86.979961][ T5659] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5659, name: syz-executor.0 [ 86.989391][ T5659] preempt_count: 1, expected: 0 [ 86.994246][ T5659] RCU nest depth: 0, expected: 0 [ 86.999185][ T5659] 3 locks held by syz-executor.0/5659: [ 87.004770][ T5659] #0: ffff88807e370c10 (&iint_mutex_key[depth]){+.+.}-{3:3}, at: process_measurement+0x896/0x2260 [ 87.015557][ T5659] #1: ffff88807ded2d68 (mapping.invalidate_lock#3){.+.+}-{3:3}, at: page_cache_ra_unbounded+0x13a/0x5f0 [ 87.027004][ T5659] #2: ffffffff8d3ce3b8 (pointers_lock){.+.+}-{2:2}, at: get_block+0x18f/0x15c0 [ 87.036159][ T5659] Preemption disabled at: [ 87.036168][ T5659] [<0000000000000000>] 0x0 [ 87.044997][ T5659] CPU: 1 PID: 5659 Comm: syz-executor.0 Tainted: G W 6.7.0-rc1-syzkaller-00019-gc42d9eeef8e5 #0 [ 87.056801][ T5659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 87.066859][ T5659] Call Trace: [ 87.070170][ T5659] [ 87.073107][ T5659] dump_stack_lvl+0x125/0x1b0 [ 87.077804][ T5659] __might_resched+0x3c3/0x5e0 [ 87.082574][ T5659] ? preempt_count_sub+0x160/0x160 [ 87.087700][ T5659] bdev_getblk+0x89/0xc0 [ 87.091966][ T5659] __bread_gfp+0xaf/0x370 [ 87.096307][ T5659] get_branch+0x2cb/0x660 [ 87.100652][ T5659] get_block+0x1ad/0x15c0 [ 87.104990][ T5659] ? free_branches+0x3c0/0x3c0 [ 87.109778][ T5659] ? reacquire_held_locks+0x4c0/0x4c0 [ 87.115149][ T5659] ? do_raw_spin_lock+0x12e/0x2b0 [ 87.120165][ T5659] ? spin_bug+0x1d0/0x1d0 [ 87.124508][ T5659] ? _raw_spin_unlock+0x28/0x40 [ 87.129351][ T5659] ? zero_user_segments+0x2bc/0x350 [ 87.134543][ T5659] block_read_full_folio+0x3df/0xaa0 [ 87.139826][ T5659] ? free_branches+0x3c0/0x3c0 [ 87.144582][ T5659] ? decrypt_bh+0x480/0x480 [ 87.149081][ T5659] ? folio_add_lru+0x432/0x7f0 [ 87.153844][ T5659] ? sysv_bmap+0x30/0x30 [ 87.158078][ T5659] read_pages+0xa76/0xdc0 [ 87.162439][ T5659] ? folio_add_lru+0x451/0x7f0 [ 87.167193][ T5659] ? folio_flags.constprop.0+0x150/0x150 [ 87.172833][ T5659] page_cache_ra_unbounded+0x457/0x5f0 [ 87.178303][ T5659] page_cache_ra_order+0x72b/0xa80 [ 87.183414][ T5659] ? blk_cgroup_congested+0x15b/0x290 [ 87.188784][ T5659] ondemand_readahead+0x493/0x1130 [ 87.193918][ T5659] page_cache_sync_ra+0x174/0x1d0 [ 87.198932][ T5659] filemap_get_pages+0xc06/0x1830 [ 87.203956][ T5659] ? filemap_add_folio+0x1e0/0x1e0 [ 87.209060][ T5659] ? __orc_find+0x104/0x130 [ 87.213555][ T5659] ? preempt_count_sub+0x160/0x160 [ 87.218657][ T5659] ? bpf_ksym_find+0x124/0x1b0 [ 87.223417][ T5659] filemap_read+0x39b/0xcf0 [ 87.227916][ T5659] ? kernel_text_address+0x85/0xf0 [ 87.233031][ T5659] ? filemap_get_pages+0x1830/0x1830 [ 87.238315][ T5659] ? kasan_save_stack+0x43/0x50 [ 87.243159][ T5659] ? kasan_save_stack+0x33/0x50 [ 87.248006][ T5659] generic_file_read_iter+0x346/0x450 [ 87.253369][ T5659] ? do_filp_open+0x1de/0x430 [ 87.258045][ T5659] ? do_sys_openat2+0x176/0x1e0 [ 87.262892][ T5659] __kernel_read+0x301/0x870 [ 87.267475][ T5659] ? __ia32_sys_llseek+0x390/0x390 [ 87.272596][ T5659] integrity_kernel_read+0x7f/0xb0 [ 87.277706][ T5659] ? integrity_inode_free+0x1c0/0x1c0 [ 87.283094][ T5659] ? kasan_set_track+0x25/0x30 [ 87.287881][ T5659] ima_calc_file_hash_tfm+0x2c5/0x3d0 [ 87.293254][ T5659] ? calc_buffer_shash_tfm+0x2d0/0x2d0 [ 87.298729][ T5659] ? generic_fillattr+0x64e/0x8a0 [ 87.303754][ T5659] ? kasan_save_stack+0x33/0x50 [ 87.308603][ T5659] ? sysv_write_begin+0xd0/0xd0 [ 87.313444][ T5659] ? ima_alloc_tfm+0x21d/0x2d0 [ 87.318208][ T5659] ima_calc_file_hash+0x1c6/0x4a0 [ 87.323232][ T5659] ima_collect_measurement+0x85e/0xa20 [ 87.328694][ T5659] ? ima_get_action+0xa0/0xa0 [ 87.333377][ T5659] ? vfs_getxattr_alloc+0xf1/0x340 [ 87.338496][ T5659] ? ima_get_cache_status+0x1f0/0x1f0 [ 87.343864][ T5659] process_measurement+0xe92/0x2260 [ 87.349067][ T5659] ? mmap_violation_check+0x1f0/0x1f0 [ 87.354435][ T5659] ? tomoyo_check_open_permission+0x209/0x3b0 [ 87.360492][ T5659] ? tomoyo_path_number_perm+0x580/0x580 [ 87.366157][ T5659] ? apparmor_getprocattr+0x380/0x380 [ 87.371526][ T5659] ? spin_bug+0x1d0/0x1d0 [ 87.375844][ T5659] ? fsnotify_perm.part.0+0x247/0x5c0 [ 87.381206][ T5659] ima_file_check+0xc2/0x110 [ 87.385792][ T5659] ? process_measurement+0x2260/0x2260 [ 87.391247][ T5659] ? may_open+0x1f2/0x400 [ 87.395569][ T5659] path_openat+0x1821/0x2c50 [ 87.400163][ T5659] ? path_lookupat+0x770/0x770 [ 87.404942][ T5659] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 87.410925][ T5659] do_filp_open+0x1de/0x430 [ 87.415425][ T5659] ? may_open_dev+0xf0/0xf0 [ 87.419923][ T5659] ? find_held_lock+0x2d/0x110 [ 87.424695][ T5659] ? _raw_spin_unlock+0x28/0x40 [ 87.429537][ T5659] ? alloc_fd+0x2da/0x6c0 [ 87.433860][ T5659] do_sys_openat2+0x176/0x1e0 [ 87.438533][ T5659] ? build_open_flags+0x690/0x690 [ 87.443555][ T5659] ? xfd_validate_state+0x5d/0x180 [ 87.448667][ T5659] __x64_sys_open+0x154/0x1e0 [ 87.453344][ T5659] ? do_sys_open+0x160/0x160 [ 87.457940][ T5659] ? syscall_enter_from_user_mode+0x7f/0x120 [ 87.463918][ T5659] ? lockdep_hardirqs_on+0x7d/0x110 [ 87.469113][ T5659] do_syscall_64+0x40/0x110 [ 87.473636][ T5659] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 87.479531][ T5659] RIP: 0033:0x7f1b22e7cb29 [ 87.483935][ T5659] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 87.503530][ T5659] RSP: 002b:00007f1b23b900c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 87.511932][ T5659] RAX: ffffffffffffffda RBX: 00007f1b22f9bf80 RCX: 00007f1b22e7cb29 [ 87.519890][ T5659] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 87.527850][ T5659] RBP: 00007f1b22ec847a R08: 0000000000000000 R09: 0000000000000000 [ 87.535818][ T5659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.543776][ T5659] R13: 000000000000000b R14: 00007f1b22f9bf80 R15: 00007ffcff1f3fe8 [ 87.551749][ T5659] [ 87.585338][ T5420] sysv_free_block: trying to free block not in datazone [ 87.594828][ T5420] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 87.650957][ T5672] loop0: detected capacity change from 0 to 128 [ 87.663762][ T5672] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 87.676942][ T5672] bio_check_eod: 200 callbacks suppressed [ 87.676953][ T5672] syz-executor.0: attempt to access beyond end of device [ 87.676953][ T5672] loop0: rw=0, sector=8767744, nr_sectors = 1 limit=128 [ 87.702088][ T5672] buffer_io_error: 200 callbacks suppressed [ 87.702360][ T5672] Buffer I/O error on dev loop0, logical block 8767744, async page read [ 87.717681][ T5672] syz-executor.0: attempt to access beyond end of device [ 87.717681][ T5672] loop0: rw=0, sector=13269809, nr_sectors = 1 limit=128 [ 87.732629][ T5672] Buffer I/O error on dev loop0, logical block 13269809, async page read [ 87.745138][ T5672] syz-executor.0: attempt to access beyond end of device [ 87.745138][ T5672] loop0: rw=0, sector=1157, nr_sectors = 1 limit=128 [ 87.760235][ T5672] Buffer I/O error on dev loop0, logical block 1157, async page read [ 87.768441][ T5672] syz-executor.0: attempt to access beyond end of device [ 87.768441][ T5672] loop0: rw=0, sector=3211264, nr_sectors = 1 limit=128 [ 87.783030][ T5672] Buffer I/O error on dev loop0, logical block 3211264, async page read [ 87.791853][ T5672] syz-executor.0: attempt to access beyond end of device [ 87.791853][ T5672] loop0: rw=0, sector=8768635, nr_sectors = 1 limit=128 [ 87.807725][ T5672] Buffer I/O error on dev loop0, logical block 8768635, async page read [ 87.816773][ T5672] syz-executor.0: attempt to access beyond end of device [ 87.816773][ T5672] loop0: rw=0, sector=13466417, nr_sectors = 1 limit=128 [ 87.831881][ T5672] Buffer I/O error on dev loop0, logical block 13466417, async page read [ 87.845852][ T5672] syz-executor.0: attempt to access beyond end of device [ 87.845852][ T5672] loop0: rw=0, sector=209285, nr_sectors = 1 limit=128 [ 87.860159][ T5672] Buffer I/O error on dev loop0, logical block 209285, async page read [ 87.870409][ T5672] syz-executor.0: attempt to access beyond end of device [ 87.870409][ T5672] loop0: rw=0, sector=8767744, nr_sectors = 1 limit=128 [ 87.884421][ T5672] Buffer I/O error on dev loop0, logical block 8767744, async page read [ 87.893461][ T5672] syz-executor.0: attempt to access beyond end of device [ 87.893461][ T5672] loop0: rw=0, sector=13269809, nr_sectors = 1 limit=128 [ 87.908450][ T5672] Buffer I/O error on dev loop0, logical block 13269809, async page read [ 87.918216][ T5672] syz-executor.0: attempt to access beyond end of device [ 87.918216][ T5672] loop0: rw=0, sector=1157, nr_sectors = 1 limit=128 [ 87.933365][ T5672] Buffer I/O error on dev loop0, logical block 1157, async page read [ 87.951624][ T5420] sysv_free_block: trying to free block not in datazone [ 87.959158][ T5420] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 88.023009][ T5688] loop0: detected capacity change from 0 to 128 [ 88.031745][ T5688] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 88.041825][ T5688] BUG: sleeping function called from invalid context at include/linux/sched/mm.h:306 [ 88.051682][ T5688] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5688, name: syz-executor.0 [ 88.061595][ T5688] preempt_count: 1, expected: 0 [ 88.066453][ T5688] RCU nest depth: 0, expected: 0 [ 88.071894][ T5688] 3 locks held by syz-executor.0/5688: [ 88.077358][ T5688] #0: ffff88807e370d38 (&iint_mutex_key[depth]){+.+.}-{3:3}, at: process_measurement+0x896/0x2260 [ 88.089162][ T5688] #1: ffff88807ded32b0 (mapping.invalidate_lock#3){.+.+}-{3:3}, at: page_cache_ra_unbounded+0x13a/0x5f0 [ 88.100821][ T5688] #2: ffffffff8d3ce3b8 (pointers_lock){.+.+}-{2:2}, at: get_block+0x18f/0x15c0 [ 88.109968][ T5688] Preemption disabled at: [ 88.109977][ T5688] [<0000000000000000>] 0x0 [ 88.118714][ T5688] CPU: 1 PID: 5688 Comm: syz-executor.0 Tainted: G W 6.7.0-rc1-syzkaller-00019-gc42d9eeef8e5 #0 [ 88.130558][ T5688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 88.140621][ T5688] Call Trace: [ 88.143910][ T5688] [ 88.146847][ T5688] dump_stack_lvl+0x125/0x1b0 [ 88.151564][ T5688] __might_resched+0x3c3/0x5e0 [ 88.156347][ T5688] ? preempt_count_sub+0x160/0x160 [ 88.161472][ T5688] bdev_getblk+0x89/0xc0 [ 88.165731][ T5688] __bread_gfp+0xaf/0x370 [ 88.170086][ T5688] get_branch+0x2cb/0x660 [ 88.174443][ T5688] get_block+0x1ad/0x15c0 [ 88.178800][ T5688] ? free_branches+0x3c0/0x3c0 [ 88.183582][ T5688] ? reacquire_held_locks+0x4c0/0x4c0 [ 88.188970][ T5688] ? do_raw_spin_lock+0x12e/0x2b0 [ 88.194010][ T5688] ? spin_bug+0x1d0/0x1d0 [ 88.198383][ T5688] ? _raw_spin_unlock+0x28/0x40 [ 88.203304][ T5688] ? zero_user_segments+0x2bc/0x350 [ 88.208521][ T5688] block_read_full_folio+0x3df/0xaa0 [ 88.213818][ T5688] ? free_branches+0x3c0/0x3c0 [ 88.218596][ T5688] ? decrypt_bh+0x480/0x480 [ 88.223119][ T5688] ? folio_add_lru+0x432/0x7f0 [ 88.227895][ T5688] ? sysv_bmap+0x30/0x30 [ 88.232152][ T5688] read_pages+0xa76/0xdc0 [ 88.236509][ T5688] ? folio_add_lru+0x451/0x7f0 [ 88.241283][ T5688] ? folio_flags.constprop.0+0x150/0x150 [ 88.246959][ T5688] page_cache_ra_unbounded+0x457/0x5f0 [ 88.252448][ T5688] page_cache_ra_order+0x72b/0xa80 [ 88.257574][ T5688] ? blk_cgroup_congested+0x15b/0x290 [ 88.262964][ T5688] ondemand_readahead+0x493/0x1130 [ 88.268094][ T5688] page_cache_sync_ra+0x174/0x1d0 [ 88.273131][ T5688] filemap_get_pages+0xc06/0x1830 [ 88.278174][ T5688] ? filemap_add_folio+0x1e0/0x1e0 [ 88.283302][ T5688] ? __orc_find+0x104/0x130 [ 88.287825][ T5688] ? preempt_count_sub+0x160/0x160 [ 88.292956][ T5688] ? bpf_ksym_find+0x124/0x1b0 [ 88.297749][ T5688] filemap_read+0x39b/0xcf0 [ 88.302271][ T5688] ? kernel_text_address+0x85/0xf0 [ 88.307419][ T5688] ? filemap_get_pages+0x1830/0x1830 [ 88.312738][ T5688] ? kasan_save_stack+0x43/0x50 [ 88.317601][ T5688] ? kasan_save_stack+0x33/0x50 [ 88.322477][ T5688] generic_file_read_iter+0x346/0x450 [ 88.327865][ T5688] ? do_filp_open+0x1de/0x430 [ 88.332556][ T5688] ? do_sys_openat2+0x176/0x1e0 [ 88.337443][ T5688] __kernel_read+0x301/0x870 [ 88.342053][ T5688] ? __ia32_sys_llseek+0x390/0x390 [ 88.347199][ T5688] integrity_kernel_read+0x7f/0xb0 [ 88.352335][ T5688] ? integrity_inode_free+0x1c0/0x1c0 [ 88.357743][ T5688] ? kasan_set_track+0x25/0x30 [ 88.362535][ T5688] ima_calc_file_hash_tfm+0x2c5/0x3d0 [ 88.367933][ T5688] ? calc_buffer_shash_tfm+0x2d0/0x2d0 [ 88.373463][ T5688] ? generic_fillattr+0x64e/0x8a0 [ 88.378524][ T5688] ? kasan_save_stack+0x33/0x50 [ 88.383401][ T5688] ? sysv_write_begin+0xd0/0xd0 [ 88.388260][ T5688] ? ima_alloc_tfm+0x21d/0x2d0 [ 88.393046][ T5688] ima_calc_file_hash+0x1c6/0x4a0 [ 88.398094][ T5688] ima_collect_measurement+0x85e/0xa20 [ 88.403578][ T5688] ? ima_get_action+0xa0/0xa0 [ 88.408303][ T5688] ? vfs_getxattr_alloc+0xf1/0x340 [ 88.413454][ T5688] ? ima_get_cache_status+0x1f0/0x1f0 [ 88.418854][ T5688] process_measurement+0xe92/0x2260 [ 88.424081][ T5688] ? mmap_violation_check+0x1f0/0x1f0 [ 88.429470][ T5688] ? tomoyo_check_open_permission+0x209/0x3b0 [ 88.435553][ T5688] ? tomoyo_path_number_perm+0x580/0x580 [ 88.441223][ T5688] ? apparmor_getprocattr+0x380/0x380 [ 88.446617][ T5688] ? spin_bug+0x1d0/0x1d0 [ 88.450955][ T5688] ? fsnotify_perm.part.0+0x247/0x5c0 [ 88.456342][ T5688] ima_file_check+0xc2/0x110 [ 88.460968][ T5688] ? process_measurement+0x2260/0x2260 [ 88.466454][ T5688] ? may_open+0x1f2/0x400 [ 88.470802][ T5688] path_openat+0x1821/0x2c50 [ 88.475421][ T5688] ? path_lookupat+0x770/0x770 [ 88.480212][ T5688] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 88.486218][ T5688] do_filp_open+0x1de/0x430 [ 88.490748][ T5688] ? may_open_dev+0xf0/0xf0 [ 88.495263][ T5688] ? find_held_lock+0x2d/0x110 [ 88.500062][ T5688] ? _raw_spin_unlock+0x28/0x40 [ 88.504935][ T5688] ? alloc_fd+0x2da/0x6c0 [ 88.509276][ T5688] do_sys_openat2+0x176/0x1e0 [ 88.513975][ T5688] ? build_open_flags+0x690/0x690 [ 88.519023][ T5688] ? xfd_validate_state+0x5d/0x180 [ 88.524156][ T5688] __x64_sys_open+0x154/0x1e0 [ 88.528852][ T5688] ? do_sys_open+0x160/0x160 [ 88.533464][ T5688] ? syscall_enter_from_user_mode+0x7f/0x120 [ 88.539461][ T5688] ? lockdep_hardirqs_on+0x7d/0x110 [ 88.544683][ T5688] do_syscall_64+0x40/0x110 [ 88.549200][ T5688] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 88.555111][ T5688] RIP: 0033:0x7f1b22e7cb29 [ 88.559536][ T5688] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 88.579148][ T5688] RSP: 002b:00007f1b23b900c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 88.587583][ T5688] RAX: ffffffffffffffda RBX: 00007f1b22f9bf80 RCX: 00007f1b22e7cb29 [ 88.595571][ T5688] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 88.603550][ T5688] RBP: 00007f1b22ec847a R08: 0000000000000000 R09: 0000000000000000 [ 88.611528][ T5688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.619515][ T5688] R13: 000000000000000b R14: 00007f1b22f9bf80 R15: 00007ffcff1f3fe8 [ 88.627506][ T5688] [ 88.640544][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 88.640553][ T28] audit: type=1800 audit(1700061215.583:18): pid=5688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="/" dev="loop0" ino=2 res=0 errno=0 [ 88.666927][ T5420] sysv_free_block: trying to free block not in datazone [ 88.675825][ T5420] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 88.719657][ T5067] Bluetooth: hci0: command 0x0419 tx timeout [ 88.781255][ T5721] loop0: detected capacity change from 0 to 128 [ 88.788952][ T5721] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 88.809820][ T28] audit: type=1800 audit(1700061215.743:19): pid=5721 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="/" dev="loop0" ino=2 res=0 errno=0 [ 88.834427][ T5420] sysv_free_block: trying to free block not in datazone [ 88.842223][ T5420] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 88.874469][ T5726] loop0: detected capacity change from 0 to 128 [ 88.889042][ T5726] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 88.910585][ T28] audit: type=1800 audit(1700061215.843:20): pid=5726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="/" dev="loop0" ino=2 res=0 errno=0 [ 88.932981][ T5420] sysv_free_block: trying to free block not in datazone [ 88.941570][ T5420] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 88.995453][ T5730] loop0: detected capacity change from 0 to 128 [ 89.004276][ T5730] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 89.022760][ T28] audit: type=1800 audit(1700061215.963:21): pid=5730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="/" dev="loop0" ino=2 res=0 errno=0 [ 89.052114][ T5420] sysv_free_block: trying to free block not in datazone [ 89.062062][ T5420] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 89.107593][ T5735] loop0: detected capacity change from 0 to 128 [ 89.117479][ T5735] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 89.128997][ T5735] BUG: sleeping function called from invalid context at include/linux/sched/mm.h:306 [ 89.138938][ T5735] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5735, name: syz-executor.0 [ 89.148714][ T5735] preempt_count: 1, expected: 0 [ 89.154008][ T5735] RCU nest depth: 0, expected: 0 [ 89.158960][ T5735] 3 locks held by syz-executor.0/5735: [ 89.164804][ T5735] #0: ffff888028920648 (&iint_mutex_key[depth]){+.+.}-{3:3}, at: process_measurement+0x896/0x2260 [ 89.175967][ T5735] #1: ffff88807de92d68 (mapping.invalidate_lock#3){.+.+}-{3:3}, at: page_cache_ra_unbounded+0x13a/0x5f0 [ 89.187824][ T5735] #2: ffffffff8d3ce3b8 (pointers_lock){.+.+}-{2:2}, at: get_block+0x18f/0x15c0 [ 89.197456][ T5735] Preemption disabled at: [ 89.197465][ T5735] [<0000000000000000>] 0x0 [ 89.206628][ T5735] CPU: 0 PID: 5735 Comm: syz-executor.0 Tainted: G W 6.7.0-rc1-syzkaller-00019-gc42d9eeef8e5 #0 [ 89.218547][ T5735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 89.228727][ T5735] Call Trace: [ 89.232014][ T5735] [ 89.234952][ T5735] dump_stack_lvl+0x125/0x1b0 [ 89.239650][ T5735] __might_resched+0x3c3/0x5e0 [ 89.244433][ T5735] ? preempt_count_sub+0x160/0x160 [ 89.249571][ T5735] bdev_getblk+0x89/0xc0 [ 89.253836][ T5735] __bread_gfp+0xaf/0x370 [ 89.258180][ T5735] get_branch+0x2cb/0x660 [ 89.262526][ T5735] get_block+0x1ad/0x15c0 [ 89.266876][ T5735] ? free_branches+0x3c0/0x3c0 [ 89.271646][ T5735] ? reacquire_held_locks+0x4c0/0x4c0 [ 89.277037][ T5735] ? do_raw_spin_lock+0x12e/0x2b0 [ 89.282200][ T5735] ? spin_bug+0x1d0/0x1d0 [ 89.286549][ T5735] ? _raw_spin_unlock+0x28/0x40 [ 89.291423][ T5735] ? zero_user_segments+0x2bc/0x350 [ 89.296622][ T5735] block_read_full_folio+0x3df/0xaa0 [ 89.301909][ T5735] ? free_branches+0x3c0/0x3c0 [ 89.306673][ T5735] ? decrypt_bh+0x480/0x480 [ 89.311179][ T5735] ? folio_add_lru+0x432/0x7f0 [ 89.315935][ T5735] ? sysv_bmap+0x30/0x30 [ 89.320170][ T5735] read_pages+0xa76/0xdc0 [ 89.324511][ T5735] ? folio_add_lru+0x451/0x7f0 [ 89.329270][ T5735] ? folio_flags.constprop.0+0x150/0x150 [ 89.334921][ T5735] page_cache_ra_unbounded+0x457/0x5f0 [ 89.340390][ T5735] page_cache_ra_order+0x72b/0xa80 [ 89.345502][ T5735] ? blk_cgroup_congested+0x15b/0x290 [ 89.350875][ T5735] ondemand_readahead+0x493/0x1130 [ 89.355982][ T5735] page_cache_sync_ra+0x174/0x1d0 [ 89.361007][ T5735] filemap_get_pages+0xc06/0x1830 [ 89.366037][ T5735] ? filemap_add_folio+0x1e0/0x1e0 [ 89.371151][ T5735] ? __orc_find+0x104/0x130 [ 89.375652][ T5735] ? preempt_count_sub+0x160/0x160 [ 89.380756][ T5735] ? bpf_ksym_find+0x124/0x1b0 [ 89.385520][ T5735] filemap_read+0x39b/0xcf0 [ 89.390019][ T5735] ? kernel_text_address+0x85/0xf0 [ 89.395136][ T5735] ? filemap_get_pages+0x1830/0x1830 [ 89.400425][ T5735] ? kasan_save_stack+0x43/0x50 [ 89.405272][ T5735] ? kasan_save_stack+0x33/0x50 [ 89.410123][ T5735] generic_file_read_iter+0x346/0x450 [ 89.415516][ T5735] ? do_filp_open+0x1de/0x430 [ 89.420192][ T5735] ? do_sys_openat2+0x176/0x1e0 [ 89.425045][ T5735] __kernel_read+0x301/0x870 [ 89.429630][ T5735] ? __ia32_sys_llseek+0x390/0x390 [ 89.434748][ T5735] integrity_kernel_read+0x7f/0xb0 [ 89.439948][ T5735] ? integrity_inode_free+0x1c0/0x1c0 [ 89.445319][ T5735] ? kasan_set_track+0x25/0x30 [ 89.450087][ T5735] ima_calc_file_hash_tfm+0x2c5/0x3d0 [ 89.455465][ T5735] ? calc_buffer_shash_tfm+0x2d0/0x2d0 [ 89.460943][ T5735] ? generic_fillattr+0x64e/0x8a0 [ 89.465964][ T5735] ? kasan_save_stack+0x33/0x50 [ 89.470821][ T5735] ? sysv_write_begin+0xd0/0xd0 [ 89.475668][ T5735] ? ima_alloc_tfm+0x21d/0x2d0 [ 89.480435][ T5735] ima_calc_file_hash+0x1c6/0x4a0 [ 89.485463][ T5735] ima_collect_measurement+0x85e/0xa20 [ 89.490930][ T5735] ? ima_get_action+0xa0/0xa0 [ 89.495619][ T5735] ? vfs_getxattr_alloc+0xf1/0x340 [ 89.500742][ T5735] ? ima_get_cache_status+0x1f0/0x1f0 [ 89.506115][ T5735] process_measurement+0xe92/0x2260 [ 89.511328][ T5735] ? mmap_violation_check+0x1f0/0x1f0 [ 89.516703][ T5735] ? tomoyo_check_open_permission+0x209/0x3b0 [ 89.522768][ T5735] ? tomoyo_path_number_perm+0x580/0x580 [ 89.528417][ T5735] ? apparmor_getprocattr+0x380/0x380 [ 89.533795][ T5735] ? spin_bug+0x1d0/0x1d0 [ 89.538122][ T5735] ? fsnotify_perm.part.0+0x247/0x5c0 [ 89.543496][ T5735] ima_file_check+0xc2/0x110 [ 89.548173][ T5735] ? process_measurement+0x2260/0x2260 [ 89.553631][ T5735] ? may_open+0x1f2/0x400 [ 89.557958][ T5735] path_openat+0x1821/0x2c50 [ 89.562551][ T5735] ? path_lookupat+0x770/0x770 [ 89.567313][ T5735] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 89.573300][ T5735] do_filp_open+0x1de/0x430 [ 89.577800][ T5735] ? may_open_dev+0xf0/0xf0 [ 89.582299][ T5735] ? find_held_lock+0x2d/0x110 [ 89.587071][ T5735] ? _raw_spin_unlock+0x28/0x40 [ 89.591927][ T5735] ? alloc_fd+0x2da/0x6c0 [ 89.596258][ T5735] do_sys_openat2+0x176/0x1e0 [ 89.600945][ T5735] ? build_open_flags+0x690/0x690 [ 89.605975][ T5735] ? xfd_validate_state+0x5d/0x180 [ 89.611092][ T5735] __x64_sys_open+0x154/0x1e0 [ 89.615777][ T5735] ? do_sys_open+0x160/0x160 [ 89.620375][ T5735] ? syscall_enter_from_user_mode+0x7f/0x120 [ 89.626370][ T5735] ? lockdep_hardirqs_on+0x7d/0x110 [ 89.631585][ T5735] do_syscall_64+0x40/0x110 [ 89.636172][ T5735] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 89.642065][ T5735] RIP: 0033:0x7f1b22e7cb29 [ 89.646471][ T5735] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 89.666074][ T5735] RSP: 002b:00007f1b23b900c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 89.674481][ T5735] RAX: ffffffffffffffda RBX: 00007f1b22f9bf80 RCX: 00007f1b22e7cb29 [ 89.682448][ T5735] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 89.690424][ T5735] RBP: 00007f1b22ec847a R08: 0000000000000000 R09: 0000000000000000 [ 89.698383][ T5735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.706361][ T5735] R13: 000000000000000b R14: 00007f1b22f9bf80 R15: 00007ffcff1f3fe8 [ 89.714341][ T5735] [ 89.735334][ T28] audit: type=1800 audit(1700061216.673:22): pid=5735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="/" dev="loop0" ino=2 res=0 errno=0 [ 89.765723][ T5420] sysv_free_block: trying to free block not in datazone [ 89.777658][ T5420] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 89.844101][ T5748] loop0: detected capacity change from 0 to 128 [ 89.858557][ T5748] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 89.870796][ T28] audit: type=1800 audit(1700061216.813:23): pid=5748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="/" dev="loop0" ino=2 res=0 errno=0 [ 89.905652][ T5420] sysv_free_block: trying to free block not in datazone [ 89.913791][ T5420] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 89.950813][ T5753] loop0: detected capacity change from 0 to 128 [ 89.970912][ T5753] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 89.986294][ T28] audit: type=1800 audit(1700061216.923:24): pid=5753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="/" dev="loop0" ino=2 res=0 errno=0 [ 90.016695][ T5420] sysv_free_block: trying to free block not in datazone [ 90.026063][ T5420] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 90.101076][ T5762] loop0: detected capacity change from 0 to 128 [ 90.108859][ T5762] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 90.121145][ T28] audit: type=1800 audit(1700061217.063:25): pid=5762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="/" dev="loop0" ino=2 res=0 errno=0 [ 90.149021][ T5420] sysv_free_block: trying to free block not in datazone [ 90.160904][ T5420] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 90.223933][ T5767] loop0: detected capacity change from 0 to 128 [ 90.240011][ T5767] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 90.251247][ T5767] BUG: sleeping function called from invalid context at include/linux/sched/mm.h:306 [ 90.261124][ T5767] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5767, name: syz-executor.0 [ 90.271029][ T5767] preempt_count: 1, expected: 0 [ 90.275889][ T5767] RCU nest depth: 0, expected: 0 [ 90.281283][ T5767] 3 locks held by syz-executor.0/5767: [ 90.286765][ T5767] #0: ffff888028920770 (&iint_mutex_key[depth]){+.+.}-{3:3}, at: process_measurement+0x896/0x2260 [ 90.297882][ T5767] #1: ffff88807de932b0 (mapping.invalidate_lock#3){.+.+}-{3:3}, at: page_cache_ra_unbounded+0x13a/0x5f0 [ 90.309559][ T5767] #2: ffffffff8d3ce3b8 (pointers_lock){.+.+}-{2:2}, at: get_block+0x18f/0x15c0 [ 90.318635][ T5767] Preemption disabled at: [ 90.318644][ T5767] [<0000000000000000>] 0x0 [ 90.327450][ T5767] CPU: 0 PID: 5767 Comm: syz-executor.0 Tainted: G W 6.7.0-rc1-syzkaller-00019-gc42d9eeef8e5 #0 [ 90.339263][ T5767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 90.349324][ T5767] Call Trace: [ 90.352608][ T5767] [ 90.355546][ T5767] dump_stack_lvl+0x125/0x1b0 [ 90.360237][ T5767] __might_resched+0x3c3/0x5e0 [ 90.365017][ T5767] ? preempt_count_sub+0x160/0x160 [ 90.370161][ T5767] bdev_getblk+0x89/0xc0 [ 90.374453][ T5767] __bread_gfp+0xaf/0x370 [ 90.378804][ T5767] get_branch+0x2cb/0x660 [ 90.383162][ T5767] get_block+0x1ad/0x15c0 [ 90.387511][ T5767] ? free_branches+0x3c0/0x3c0 [ 90.392280][ T5767] ? reacquire_held_locks+0x4c0/0x4c0 [ 90.397659][ T5767] ? do_raw_spin_lock+0x12e/0x2b0 [ 90.402680][ T5767] ? spin_bug+0x1d0/0x1d0 [ 90.407006][ T5767] ? _raw_spin_unlock+0x28/0x40 [ 90.411938][ T5767] ? zero_user_segments+0x2bc/0x350 [ 90.417136][ T5767] block_read_full_folio+0x3df/0xaa0 [ 90.422424][ T5767] ? free_branches+0x3c0/0x3c0 [ 90.427186][ T5767] ? decrypt_bh+0x480/0x480 [ 90.431688][ T5767] ? folio_add_lru+0x432/0x7f0 [ 90.436450][ T5767] ? sysv_bmap+0x30/0x30 [ 90.440777][ T5767] read_pages+0xa76/0xdc0 [ 90.445111][ T5767] ? folio_add_lru+0x451/0x7f0 [ 90.449864][ T5767] ? folio_flags.constprop.0+0x150/0x150 [ 90.455506][ T5767] page_cache_ra_unbounded+0x457/0x5f0 [ 90.460972][ T5767] page_cache_ra_order+0x72b/0xa80 [ 90.466076][ T5767] ? blk_cgroup_congested+0x15b/0x290 [ 90.471450][ T5767] ondemand_readahead+0x493/0x1130 [ 90.476561][ T5767] page_cache_sync_ra+0x174/0x1d0 [ 90.481582][ T5767] filemap_get_pages+0xc06/0x1830 [ 90.486696][ T5767] ? filemap_add_folio+0x1e0/0x1e0 [ 90.491806][ T5767] ? __orc_find+0x104/0x130 [ 90.496314][ T5767] ? preempt_count_sub+0x160/0x160 [ 90.501423][ T5767] ? bpf_ksym_find+0x124/0x1b0 [ 90.506229][ T5767] filemap_read+0x39b/0xcf0 [ 90.510722][ T5767] ? kernel_text_address+0x85/0xf0 [ 90.515835][ T5767] ? filemap_get_pages+0x1830/0x1830 [ 90.521123][ T5767] ? kasan_save_stack+0x43/0x50 [ 90.525970][ T5767] ? kasan_save_stack+0x33/0x50 [ 90.530820][ T5767] generic_file_read_iter+0x346/0x450 [ 90.536188][ T5767] ? do_filp_open+0x1de/0x430 [ 90.540870][ T5767] ? do_sys_openat2+0x176/0x1e0 [ 90.545727][ T5767] __kernel_read+0x301/0x870 [ 90.550310][ T5767] ? __ia32_sys_llseek+0x390/0x390 [ 90.555432][ T5767] integrity_kernel_read+0x7f/0xb0 [ 90.560545][ T5767] ? integrity_inode_free+0x1c0/0x1c0 [ 90.565918][ T5767] ? kasan_set_track+0x25/0x30 [ 90.570685][ T5767] ima_calc_file_hash_tfm+0x2c5/0x3d0 [ 90.576062][ T5767] ? calc_buffer_shash_tfm+0x2d0/0x2d0 [ 90.581544][ T5767] ? generic_fillattr+0x64e/0x8a0 [ 90.586572][ T5767] ? kasan_save_stack+0x33/0x50 [ 90.591424][ T5767] ? sysv_write_begin+0xd0/0xd0 [ 90.596266][ T5767] ? ima_alloc_tfm+0x21d/0x2d0 [ 90.601033][ T5767] ima_calc_file_hash+0x1c6/0x4a0 [ 90.606060][ T5767] ima_collect_measurement+0x85e/0xa20 [ 90.611522][ T5767] ? ima_get_action+0xa0/0xa0 [ 90.616207][ T5767] ? vfs_getxattr_alloc+0xf1/0x340 [ 90.621322][ T5767] ? ima_get_cache_status+0x1f0/0x1f0 [ 90.626690][ T5767] process_measurement+0xe92/0x2260 [ 90.631892][ T5767] ? mmap_violation_check+0x1f0/0x1f0 [ 90.637265][ T5767] ? tomoyo_check_open_permission+0x209/0x3b0 [ 90.643325][ T5767] ? tomoyo_path_number_perm+0x580/0x580 [ 90.648972][ T5767] ? apparmor_getprocattr+0x380/0x380 [ 90.654344][ T5767] ? spin_bug+0x1d0/0x1d0 [ 90.658666][ T5767] ? fsnotify_perm.part.0+0x247/0x5c0 [ 90.664034][ T5767] ima_file_check+0xc2/0x110 [ 90.668626][ T5767] ? process_measurement+0x2260/0x2260 [ 90.674082][ T5767] ? may_open+0x1f2/0x400 [ 90.678414][ T5767] path_openat+0x1821/0x2c50 [ 90.683007][ T5767] ? path_lookupat+0x770/0x770 [ 90.687769][ T5767] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 90.693756][ T5767] do_filp_open+0x1de/0x430 [ 90.698260][ T5767] ? may_open_dev+0xf0/0xf0 [ 90.702761][ T5767] ? find_held_lock+0x2d/0x110 [ 90.707534][ T5767] ? _raw_spin_unlock+0x28/0x40 [ 90.712378][ T5767] ? alloc_fd+0x2da/0x6c0 [ 90.716737][ T5767] do_sys_openat2+0x176/0x1e0 [ 90.721422][ T5767] ? build_open_flags+0x690/0x690 [ 90.726449][ T5767] ? xfd_validate_state+0x5d/0x180 [ 90.731564][ T5767] __x64_sys_open+0x154/0x1e0 [ 90.736239][ T5767] ? do_sys_open+0x160/0x160 [ 90.740837][ T5767] ? syscall_enter_from_user_mode+0x7f/0x120 [ 90.746823][ T5767] ? lockdep_hardirqs_on+0x7d/0x110 [ 90.752022][ T5767] do_syscall_64+0x40/0x110 [ 90.756522][ T5767] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 90.762504][ T5767] RIP: 0033:0x7f1b22e7cb29 [ 90.766911][ T5767] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 90.786510][ T5767] RSP: 002b:00007f1b23b900c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 90.794914][ T5767] RAX: ffffffffffffffda RBX: 00007f1b22f9bf80 RCX: 00007f1b22e7cb29 [ 90.802881][ T5767] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 90.810844][ T5767] RBP: 00007f1b22ec847a R08: 0000000000000000 R09: 0000000000000000 [ 90.818804][ T5767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 2023/11/15 15:13:37 executed programs: 25 [ 90.826775][ T5767] R13: 000000000000000b R14: 00007f1b22f9bf80 R15: 00007ffcff1f3fe8 [ 90.834847][ T5767] [ 90.846051][ T28] audit: type=1800 audit(1700061217.783:26): pid=5767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="/" dev="loop0" ino=2 res=0 errno=0 [ 90.869491][ T5420] sysv_free_block: trying to free block not in datazone [ 90.877087][ T5420] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 90.951129][ T5779] loop0: detected capacity change from 0 to 128 [ 90.966319][ T5779] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 90.985397][ T28] audit: type=1800 audit(1700061217.923:27): pid=5779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="/" dev="loop0" ino=2 res=0 errno=0 [ 91.020596][ T5420] sysv_free_block: trying to free block not in datazone [ 91.028657][ T5420] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 91.079138][ T5784] loop0: detected capacity change from 0 to 128 [ 91.088533][ T5784] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 91.110489][ T5420] sysv_free_block: trying to free block not in datazone [ 91.118428][ T5420] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 91.151098][ T5787] loop0: detected capacity change from 0 to 128 [ 91.172854][ T5787] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 91.204102][ T5420] sysv_free_block: trying to free block not in datazone [ 91.214302][ T5420] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 91.257791][ T5794] loop0: detected capacity change from 0 to 128 [ 91.272979][ T5794] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 91.289930][ T5794] BUG: sleeping function called from invalid context at include/linux/sched/mm.h:306 [ 91.299814][ T5794] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5794, name: syz-executor.0 [ 91.309625][ T5794] preempt_count: 1, expected: 0 [ 91.314853][ T5794] RCU nest depth: 0, expected: 0 [ 91.320238][ T5794] 3 locks held by syz-executor.0/5794: [ 91.325709][ T5794] #0: ffff88807781a770 (&iint_mutex_key[depth]){+.+.}-{3:3}, at: process_measurement+0x896/0x2260 [ 91.336930][ T5794] #1: ffff888077635d90 (mapping.invalidate_lock#3){.+.+}-{3:3}, at: page_cache_ra_unbounded+0x13a/0x5f0 [ 91.348265][ T5794] #2: ffffffff8d3ce3b8 (pointers_lock){.+.+}-{2:2}, at: get_block+0x18f/0x15c0 [ 91.357984][ T5794] Preemption disabled at: [ 91.357992][ T5794] [<0000000000000000>] 0x0 [ 91.366883][ T5794] CPU: 1 PID: 5794 Comm: syz-executor.0 Tainted: G W 6.7.0-rc1-syzkaller-00019-gc42d9eeef8e5 #0 [ 91.378692][ T5794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 91.388751][ T5794] Call Trace: [ 91.392033][ T5794] [ 91.394968][ T5794] dump_stack_lvl+0x125/0x1b0 [ 91.399676][ T5794] __might_resched+0x3c3/0x5e0 [ 91.404459][ T5794] ? preempt_count_sub+0x160/0x160 [ 91.409590][ T5794] bdev_getblk+0x89/0xc0 [ 91.413855][ T5794] __bread_gfp+0xaf/0x370 [ 91.418201][ T5794] get_branch+0x2cb/0x660 [ 91.422540][ T5794] get_block+0x1ad/0x15c0 [ 91.426873][ T5794] ? free_branches+0x3c0/0x3c0 [ 91.431631][ T5794] ? reacquire_held_locks+0x4c0/0x4c0 [ 91.437002][ T5794] ? do_raw_spin_lock+0x12e/0x2b0 [ 91.442020][ T5794] ? spin_bug+0x1d0/0x1d0 [ 91.446343][ T5794] ? _raw_spin_unlock+0x28/0x40 [ 91.451184][ T5794] ? zero_user_segments+0x2bc/0x350 [ 91.456378][ T5794] block_read_full_folio+0x3df/0xaa0 [ 91.461672][ T5794] ? free_branches+0x3c0/0x3c0 [ 91.466428][ T5794] ? decrypt_bh+0x480/0x480 [ 91.470936][ T5794] ? folio_add_lru+0x432/0x7f0 [ 91.475694][ T5794] ? sysv_bmap+0x30/0x30 [ 91.479929][ T5794] read_pages+0xa76/0xdc0 [ 91.484276][ T5794] ? folio_add_lru+0x451/0x7f0 [ 91.489041][ T5794] ? folio_flags.constprop.0+0x150/0x150 [ 91.494687][ T5794] page_cache_ra_unbounded+0x457/0x5f0 [ 91.500180][ T5794] page_cache_ra_order+0x72b/0xa80 [ 91.505304][ T5794] ? blk_cgroup_congested+0x15b/0x290 [ 91.510687][ T5794] ondemand_readahead+0x493/0x1130 [ 91.515806][ T5794] page_cache_sync_ra+0x174/0x1d0 [ 91.520829][ T5794] filemap_get_pages+0xc06/0x1830 [ 91.525861][ T5794] ? filemap_add_folio+0x1e0/0x1e0 [ 91.530972][ T5794] ? __orc_find+0x104/0x130 [ 91.535470][ T5794] ? preempt_count_sub+0x160/0x160 [ 91.540578][ T5794] ? bpf_ksym_find+0x124/0x1b0 [ 91.545341][ T5794] filemap_read+0x39b/0xcf0 [ 91.549840][ T5794] ? kernel_text_address+0x85/0xf0 [ 91.554956][ T5794] ? filemap_get_pages+0x1830/0x1830 [ 91.560242][ T5794] ? kasan_save_stack+0x43/0x50 [ 91.565091][ T5794] ? kasan_save_stack+0x33/0x50 [ 91.569948][ T5794] generic_file_read_iter+0x346/0x450 [ 91.575319][ T5794] ? do_filp_open+0x1de/0x430 [ 91.579995][ T5794] ? do_sys_openat2+0x176/0x1e0 [ 91.584860][ T5794] __kernel_read+0x301/0x870 [ 91.589444][ T5794] ? __ia32_sys_llseek+0x390/0x390 [ 91.594560][ T5794] integrity_kernel_read+0x7f/0xb0 [ 91.599676][ T5794] ? integrity_inode_free+0x1c0/0x1c0 [ 91.605047][ T5794] ? kasan_set_track+0x25/0x30 [ 91.609812][ T5794] ima_calc_file_hash_tfm+0x2c5/0x3d0 [ 91.615188][ T5794] ? calc_buffer_shash_tfm+0x2d0/0x2d0 [ 91.620754][ T5794] ? generic_fillattr+0x64e/0x8a0 [ 91.625862][ T5794] ? kasan_save_stack+0x33/0x50 [ 91.630714][ T5794] ? sysv_write_begin+0xd0/0xd0 [ 91.635557][ T5794] ? ima_alloc_tfm+0x21d/0x2d0 [ 91.640325][ T5794] ima_calc_file_hash+0x1c6/0x4a0 [ 91.645351][ T5794] ima_collect_measurement+0x85e/0xa20 [ 91.650814][ T5794] ? ima_get_action+0xa0/0xa0 [ 91.655514][ T5794] ? vfs_getxattr_alloc+0xf1/0x340 [ 91.660636][ T5794] ? ima_get_cache_status+0x1f0/0x1f0 [ 91.666004][ T5794] process_measurement+0xe92/0x2260 [ 91.671208][ T5794] ? mmap_violation_check+0x1f0/0x1f0 [ 91.676579][ T5794] ? tomoyo_check_open_permission+0x209/0x3b0 [ 91.682638][ T5794] ? tomoyo_path_number_perm+0x580/0x580 [ 91.688282][ T5794] ? apparmor_getprocattr+0x380/0x380 [ 91.693649][ T5794] ? spin_bug+0x1d0/0x1d0 [ 91.697975][ T5794] ? fsnotify_perm.part.0+0x247/0x5c0 [ 91.703347][ T5794] ima_file_check+0xc2/0x110 [ 91.707938][ T5794] ? process_measurement+0x2260/0x2260 [ 91.713396][ T5794] ? may_open+0x1f2/0x400 [ 91.717724][ T5794] path_openat+0x1821/0x2c50 [ 91.722333][ T5794] ? path_lookupat+0x770/0x770 [ 91.727095][ T5794] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 91.733085][ T5794] do_filp_open+0x1de/0x430 [ 91.737587][ T5794] ? may_open_dev+0xf0/0xf0 [ 91.742087][ T5794] ? find_held_lock+0x2d/0x110 [ 91.746864][ T5794] ? _raw_spin_unlock+0x28/0x40 [ 91.751706][ T5794] ? alloc_fd+0x2da/0x6c0 [ 91.756033][ T5794] do_sys_openat2+0x176/0x1e0 [ 91.760714][ T5794] ? build_open_flags+0x690/0x690 [ 91.765741][ T5794] ? xfd_validate_state+0x5d/0x180 [ 91.770857][ T5794] __x64_sys_open+0x154/0x1e0 [ 91.775539][ T5794] ? do_sys_open+0x160/0x160 [ 91.780132][ T5794] ? syscall_enter_from_user_mode+0x7f/0x120 [ 91.786111][ T5794] ? lockdep_hardirqs_on+0x7d/0x110 [ 91.791312][ T5794] do_syscall_64+0x40/0x110 [ 91.795811][ T5794] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 91.801708][ T5794] RIP: 0033:0x7f1b22e7cb29 [ 91.806114][ T5794] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 91.825804][ T5794] RSP: 002b:00007f1b23b900c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 91.834212][ T5794] RAX: ffffffffffffffda RBX: 00007f1b22f9bf80 RCX: 00007f1b22e7cb29 [ 91.842175][ T5794] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 91.850138][ T5794] RBP: 00007f1b22ec847a R08: 0000000000000000 R09: 0000000000000000 [ 91.858126][ T5794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.866086][ T5794] R13: 000000000000000b R14: 00007f1b22f9bf80 R15: 00007ffcff1f3fe8 [ 91.874061][ T5794] [ 91.892308][ T5420] sysv_free_block: trying to free block not in datazone [ 91.907228][ T5420] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 91.945057][ T5803] loop0: detected capacity change from 0 to 128 [ 91.953752][ T5803] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 91.990681][ T5420] sysv_free_block: trying to free block not in datazone [ 91.998285][ T5420] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 92.054079][ T5807] loop0: detected capacity change from 0 to 128 [ 92.071755][ T5807] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 92.112928][ T5420] sysv_free_block: trying to free block not in datazone [ 92.120928][ T5420] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 92.188318][ T5815] loop0: detected capacity change from 0 to 128 [ 92.197377][ T5815] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 92.232845][ T5420] sysv_free_block: trying to free block not in datazone [ 92.244119][ T5420] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 92.301596][ T5821] loop0: detected capacity change from 0 to 128 [ 92.310502][ T5821] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 92.328958][ T5821] BUG: sleeping function called from invalid context at include/linux/sched/mm.h:306 [ 92.338887][ T5821] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5821, name: syz-executor.0 [ 92.348613][ T5821] preempt_count: 1, expected: 0 [ 92.353652][ T5821] RCU nest depth: 0, expected: 0 [ 92.358592][ T5821] 3 locks held by syz-executor.0/5821: [ 92.364085][ T5821] #0: ffff888028920ae8 (&iint_mutex_key[depth]){+.+.}-{3:3}, at: process_measurement+0x896/0x2260 [ 92.374895][ T5821] #1: ffff88807769c328 (mapping.invalidate_lock#3){.+.+}-{3:3}, at: page_cache_ra_unbounded+0x13a/0x5f0 [ 92.386230][ T5821] #2: ffffffff8d3ce3b8 (pointers_lock){.+.+}-{2:2}, at: get_block+0x18f/0x15c0 [ 92.395331][ T5821] Preemption disabled at: [ 92.395340][ T5821] [<0000000000000000>] 0x0 [ 92.404191][ T5821] CPU: 0 PID: 5821 Comm: syz-executor.0 Tainted: G W 6.7.0-rc1-syzkaller-00019-gc42d9eeef8e5 #0 [ 92.416086][ T5821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 92.426146][ T5821] Call Trace: [ 92.429438][ T5821] [ 92.432377][ T5821] dump_stack_lvl+0x125/0x1b0 [ 92.437082][ T5821] __might_resched+0x3c3/0x5e0 [ 92.441866][ T5821] ? preempt_count_sub+0x160/0x160 [ 92.447001][ T5821] bdev_getblk+0x89/0xc0 [ 92.451267][ T5821] __bread_gfp+0xaf/0x370 [ 92.455596][ T5821] get_branch+0x2cb/0x660 [ 92.459928][ T5821] get_block+0x1ad/0x15c0 [ 92.464259][ T5821] ? free_branches+0x3c0/0x3c0 [ 92.469010][ T5821] ? reacquire_held_locks+0x4c0/0x4c0 [ 92.474384][ T5821] ? do_raw_spin_lock+0x12e/0x2b0 [ 92.479426][ T5821] ? spin_bug+0x1d0/0x1d0 [ 92.483756][ T5821] ? _raw_spin_unlock+0x28/0x40 [ 92.488603][ T5821] ? zero_user_segments+0x2bc/0x350 [ 92.493799][ T5821] block_read_full_folio+0x3df/0xaa0 [ 92.499085][ T5821] ? free_branches+0x3c0/0x3c0 [ 92.503845][ T5821] ? decrypt_bh+0x480/0x480 [ 92.508378][ T5821] ? folio_add_lru+0x432/0x7f0 [ 92.513142][ T5821] ? sysv_bmap+0x30/0x30 [ 92.517378][ T5821] read_pages+0xa76/0xdc0 [ 92.521812][ T5821] ? folio_add_lru+0x451/0x7f0 [ 92.526567][ T5821] ? folio_flags.constprop.0+0x150/0x150 [ 92.532211][ T5821] page_cache_ra_unbounded+0x457/0x5f0 [ 92.537684][ T5821] page_cache_ra_order+0x72b/0xa80 [ 92.542790][ T5821] ? blk_cgroup_congested+0x15b/0x290 [ 92.548160][ T5821] ondemand_readahead+0x493/0x1130 [ 92.553268][ T5821] page_cache_sync_ra+0x174/0x1d0 [ 92.558285][ T5821] filemap_get_pages+0xc06/0x1830 [ 92.563309][ T5821] ? filemap_add_folio+0x1e0/0x1e0 [ 92.568421][ T5821] ? __orc_find+0x104/0x130 [ 92.573003][ T5821] ? preempt_count_sub+0x160/0x160 [ 92.578108][ T5821] ? bpf_ksym_find+0x124/0x1b0 [ 92.582869][ T5821] filemap_read+0x39b/0xcf0 [ 92.587365][ T5821] ? kernel_text_address+0x85/0xf0 [ 92.592484][ T5821] ? filemap_get_pages+0x1830/0x1830 [ 92.597769][ T5821] ? kasan_save_stack+0x43/0x50 [ 92.602616][ T5821] ? kasan_save_stack+0x33/0x50 [ 92.607466][ T5821] generic_file_read_iter+0x346/0x450 [ 92.612831][ T5821] ? do_filp_open+0x1de/0x430 [ 92.617506][ T5821] ? do_sys_openat2+0x176/0x1e0 [ 92.622360][ T5821] __kernel_read+0x301/0x870 [ 92.626946][ T5821] ? __ia32_sys_llseek+0x390/0x390 [ 92.632066][ T5821] integrity_kernel_read+0x7f/0xb0 [ 92.637178][ T5821] ? integrity_inode_free+0x1c0/0x1c0 [ 92.642550][ T5821] ? kasan_set_track+0x25/0x30 [ 92.647312][ T5821] ima_calc_file_hash_tfm+0x2c5/0x3d0 [ 92.652685][ T5821] ? calc_buffer_shash_tfm+0x2d0/0x2d0 [ 92.658165][ T5821] ? generic_fillattr+0x64e/0x8a0 [ 92.663187][ T5821] ? kasan_save_stack+0x33/0x50 [ 92.668034][ T5821] ? sysv_write_begin+0xd0/0xd0 [ 92.672874][ T5821] ? ima_alloc_tfm+0x21d/0x2d0 [ 92.677640][ T5821] ima_calc_file_hash+0x1c6/0x4a0 [ 92.682668][ T5821] ima_collect_measurement+0x85e/0xa20 [ 92.688132][ T5821] ? ima_get_action+0xa0/0xa0 [ 92.692821][ T5821] ? vfs_getxattr_alloc+0xf1/0x340 [ 92.697939][ T5821] ? ima_get_cache_status+0x1f0/0x1f0 [ 92.703308][ T5821] process_measurement+0xe92/0x2260 [ 92.708516][ T5821] ? mmap_violation_check+0x1f0/0x1f0 [ 92.713898][ T5821] ? tomoyo_check_open_permission+0x209/0x3b0 [ 92.719961][ T5821] ? tomoyo_path_number_perm+0x580/0x580 [ 92.725614][ T5821] ? apparmor_getprocattr+0x380/0x380 [ 92.730982][ T5821] ? spin_bug+0x1d0/0x1d0 [ 92.735304][ T5821] ? fsnotify_perm.part.0+0x247/0x5c0 [ 92.740672][ T5821] ima_file_check+0xc2/0x110 [ 92.745259][ T5821] ? process_measurement+0x2260/0x2260 [ 92.750721][ T5821] ? may_open+0x1f2/0x400 [ 92.755046][ T5821] path_openat+0x1821/0x2c50 [ 92.759641][ T5821] ? path_lookupat+0x770/0x770 [ 92.764407][ T5821] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 92.770391][ T5821] do_filp_open+0x1de/0x430 [ 92.774899][ T5821] ? may_open_dev+0xf0/0xf0 [ 92.779405][ T5821] ? find_held_lock+0x2d/0x110 [ 92.784212][ T5821] ? _raw_spin_unlock+0x28/0x40 [ 92.789073][ T5821] ? alloc_fd+0x2da/0x6c0 [ 92.793408][ T5821] do_sys_openat2+0x176/0x1e0 [ 92.798090][ T5821] ? build_open_flags+0x690/0x690