FAULT_INJECTION: forcing a failure. name fail_usercopy, interval 1, probability 0, space 0, times 1 CPU: 1 PID: 4614 Comm: syz-executor.4 Not tainted 6.0.0-rc1-next-20220819 #1 BUG: sleeping function called from invalid context at kernel/locking/rwsem.c:1521 in_atomic(): 0, irqs_disabled(): 1, non_block: 0, pid: 4614, name: syz-executor.4 preempt_count: 0, expected: 0 RCU nest depth: 0, expected: 0 1 lock held by syz-executor.4/4614: #0: ffff88800cf48d68 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe7/0x100 irq event stamp: 826 hardirqs last enabled at (825): [] __up_console_sem+0x78/0x80 hardirqs last disabled at (826): [] dump_stack_lvl+0x2e/0xb3 softirqs last enabled at (820): [] __irq_exit_rcu+0x11b/0x180 softirqs last disabled at (811): [] __irq_exit_rcu+0x11b/0x180 CPU: 1 PID: 4614 Comm: syz-executor.4 Not tainted 6.0.0-rc1-next-20220819 #1 syz-executor.4[4614] cmdline: /syz-executor.4 exec Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 Call Trace: dump_stack_lvl+0x8b/0xb3 __might_resched.cold+0x222/0x26b down_read_killable+0x75/0x490 __access_remote_vm+0xac/0x6f0 get_mm_cmdline.part.0+0x214/0x600 get_task_cmdline_kernel+0x1e9/0x230 dump_stack_print_cmdline.part.0+0x82/0x150 dump_stack_print_info+0x185/0x190 dump_stack_lvl+0x7f/0xb3 should_fail.cold+0x5/0xa _copy_to_user+0x2a/0x140 simple_read_from_buffer+0xcc/0x160 proc_fail_nth_read+0x198/0x230 vfs_read+0x253/0x930 ksys_read+0x127/0x250 do_syscall_64+0x3b/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7ff04604369c Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 RSP: 002b:00007ff043606170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff04604369c RDX: 000000000000000f RSI: 00007ff0436061e0 RDI: 0000000000000004 RBP: 00007ff0436061d0 R08: 0000000000000000 R09: 0000000000000000 semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. The task syz-executor.1 (4617) triggered the difference, watch for misbehavior. R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007fff789796cf R14: 00007ff043606300 R15: 0000000000022000 syz-executor.4[4614] cmdline: /syz-executor.4 exec Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 Call Trace: dump_stack_lvl+0x8b/0xb3 should_fail.cold+0x5/0xa _copy_to_user+0x2a/0x140 simple_read_from_buffer+0xcc/0x160 proc_fail_nth_read+0x198/0x230 vfs_read+0x253/0x930 ksys_read+0x127/0x250 do_syscall_64+0x3b/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7ff04604369c Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 RSP: 002b:00007ff043606170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff04604369c RDX: 000000000000000f RSI: 00007ff0436061e0 RDI: 0000000000000004 RBP: 00007ff0436061d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007fff789796cf R14: 00007ff043606300 R15: 0000000000022000 FAULT_INJECTION: forcing a failure. name fail_usercopy, interval 1, probability 0, space 0, times 0 CPU: 0 PID: 4634 Comm: syz-executor.6 Tainted: G W 6.0.0-rc1-next-20220819 #1 syz-executor.6[4634] cmdline: /syz-executor.6 exec Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 Call Trace: dump_stack_lvl+0x8b/0xb3 should_fail.cold+0x5/0xa strncpy_from_user+0x34/0x3e0 getname_flags.part.0+0x95/0x4f0 getname+0x8e/0xd0 do_sys_openat2+0xf9/0x4c0 __x64_sys_openat+0x13f/0x1f0 do_syscall_64+0x3b/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7fd376e13a04 Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 RSP: 002b:00007fd3743d6060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00007fd376f73f60 RCX: 00007fd376e13a04 RDX: 0000000000000002 RSI: 00007fd3743d60f0 RDI: 00000000ffffff9c RBP: 00007fd3743d60f0 R08: 0000000000000000 R09: 00007fd3743d5f70 R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 R13: 00007ffc4bc21a2f R14: 00007fd3743d6300 R15: 0000000000022000