audit: type=1400 audit(1663596795.562:8): avc: denied { kernel } for pid=3794 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 ------------[ cut here ]------------ ====================================================== WARNING: possible circular locking dependency detected 6.0.0-rc6-next-20220919 #1 Not tainted ------------------------------------------------------ syz-executor.4/3795 is trying to acquire lock: ffffffff853fa838 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 but task is already holding lock: ffff888009883420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 which lock already depends on the new lock. the existing dependency chain (in reverse order) is: -> #3 (&ctx->lock){....}-{2:2}: _raw_spin_lock+0x2a/0x40 __perf_event_task_sched_out+0x53b/0x18d0 __schedule+0xedd/0x2470 schedule+0xda/0x1b0 futex_wait_queue+0xf5/0x1e0 futex_wait+0x28e/0x690 do_futex+0x2ff/0x380 __x64_sys_futex+0x1c6/0x4d0 do_syscall_64+0x3b/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd -> #2 (&rq->__lock){-.-.}-{2:2}: _raw_spin_lock_nested+0x30/0x40 raw_spin_rq_lock_nested+0x1e/0x30 task_fork_fair+0x63/0x4d0 sched_cgroup_fork+0x3d0/0x540 copy_process+0x4183/0x6e20 kernel_clone+0xe7/0x890 user_mode_thread+0xad/0xf0 rest_init+0x24/0x250 arch_call_rest_init+0xf/0x14 start_kernel+0x4c1/0x4e6 secondary_startup_64_no_verify+0xe0/0xeb -> #1 (&p->pi_lock){-.-.}-{2:2}: _raw_spin_lock_irqsave+0x39/0x60 try_to_wake_up+0xab/0x1920 up+0x75/0xb0 __up_console_sem+0x6e/0x80 console_unlock+0x46a/0x590 do_con_write+0xc05/0x1d50 con_write+0x21/0x40 n_tty_write+0x4d4/0xfe0 file_tty_write.constprop.0+0x49c/0x8f0 vfs_write+0x9c3/0xd90 ksys_write+0x127/0x250 do_syscall_64+0x3b/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd -> #0 ((console_sem).lock){....}-{2:2}: __lock_acquire+0x2a02/0x5e70 lock_acquire+0x1a2/0x530 _raw_spin_lock_irqsave+0x39/0x60 down_trylock+0xe/0x70 __down_trylock_console_sem+0x3b/0xd0 vprintk_emit+0x16b/0x560 vprintk+0x84/0xa0 _printk+0xba/0xf1 report_bug.cold+0x72/0xab handle_bug+0x3c/0x70 exc_invalid_op+0x14/0x50 asm_exc_invalid_op+0x16/0x20 group_sched_out.part.0+0x2c7/0x460 ctx_sched_out+0x8f1/0xc10 __perf_event_task_sched_out+0x6d0/0x18d0 __schedule+0xedd/0x2470 schedule+0xda/0x1b0 futex_wait_queue+0xf5/0x1e0 futex_wait+0x28e/0x690 do_futex+0x2ff/0x380 __x64_sys_futex+0x1c6/0x4d0 do_syscall_64+0x3b/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd other info that might help us debug this: Chain exists of: (console_sem).lock --> &rq->__lock --> &ctx->lock Possible unsafe locking scenario: CPU0 CPU1 ---- ---- lock(&ctx->lock); lock(&rq->__lock); lock(&ctx->lock); lock((console_sem).lock); *** DEADLOCK *** 2 locks held by syz-executor.4/3795: #0: ffff88806ce37d18 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 #1: ffff888009883420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 stack backtrace: CPU: 0 PID: 3795 Comm: syz-executor.4 Not tainted 6.0.0-rc6-next-20220919 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 Call Trace: dump_stack_lvl+0x8b/0xb3 check_noncircular+0x263/0x2e0 __lock_acquire+0x2a02/0x5e70 lock_acquire+0x1a2/0x530 _raw_spin_lock_irqsave+0x39/0x60 down_trylock+0xe/0x70 __down_trylock_console_sem+0x3b/0xd0 vprintk_emit+0x16b/0x560 vprintk+0x84/0xa0 _printk+0xba/0xf1 report_bug.cold+0x72/0xab handle_bug+0x3c/0x70 exc_invalid_op+0x14/0x50 asm_exc_invalid_op+0x16/0x20 RIP: 0010:group_sched_out.part.0+0x2c7/0x460 Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d 5b 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 RSP: 0018:ffff888040edf8f8 EFLAGS: 00010006 RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 RDX: ffff88801ec18000 RSI: ffffffff81566077 RDI: 0000000000000005 RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001 R10: 0000000000000000 R11: ffffffff865ac01b R12: ffff888009883400 R13: ffff88806ce3d140 R14: ffffffff8547c620 R15: 0000000000000002 ctx_sched_out+0x8f1/0xc10 __perf_event_task_sched_out+0x6d0/0x18d0 __schedule+0xedd/0x2470 schedule+0xda/0x1b0 futex_wait_queue+0xf5/0x1e0 futex_wait+0x28e/0x690 do_futex+0x2ff/0x380 __x64_sys_futex+0x1c6/0x4d0 do_syscall_64+0x3b/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7fbb04accb19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fbb02042218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: ffffffffffffffda RBX: 00007fbb04bdff68 RCX: 00007fbb04accb19 RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fbb04bdff68 RBP: 00007fbb04bdff60 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbb04bdff6c R13: 00007fff00881d6f R14: 00007fbb02042300 R15: 0000000000022000 WARNING: CPU: 0 PID: 3795 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 Modules linked in: CPU: 0 PID: 3795 Comm: syz-executor.4 Not tainted 6.0.0-rc6-next-20220919 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 RIP: 0010:group_sched_out.part.0+0x2c7/0x460 Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d 5b 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 RSP: 0018:ffff888040edf8f8 EFLAGS: 00010006 RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 RDX: ffff88801ec18000 RSI: ffffffff81566077 RDI: 0000000000000005 RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001 R10: 0000000000000000 R11: ffffffff865ac01b R12: ffff888009883400 R13: ffff88806ce3d140 R14: ffffffff8547c620 R15: 0000000000000002 FS: 00007fbb02042700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f2cf5167368 CR3: 0000000010382000 CR4: 0000000000350ef0 Call Trace: ctx_sched_out+0x8f1/0xc10 __perf_event_task_sched_out+0x6d0/0x18d0 __schedule+0xedd/0x2470 schedule+0xda/0x1b0 futex_wait_queue+0xf5/0x1e0 futex_wait+0x28e/0x690 do_futex+0x2ff/0x380 __x64_sys_futex+0x1c6/0x4d0 do_syscall_64+0x3b/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7fbb04accb19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fbb02042218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: ffffffffffffffda RBX: 00007fbb04bdff68 RCX: 00007fbb04accb19 RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fbb04bdff68 RBP: 00007fbb04bdff60 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbb04bdff6c R13: 00007fff00881d6f R14: 00007fbb02042300 R15: 0000000000022000 irq event stamp: 932 hardirqs last enabled at (931): [] syscall_enter_from_user_mode+0x1d/0x50 hardirqs last disabled at (932): [] __schedule+0x1225/0x2470 softirqs last enabled at (682): [] __irq_exit_rcu+0x11b/0x180 softirqs last disabled at (673): [] __irq_exit_rcu+0x11b/0x180 ---[ end trace 0000000000000000 ]--- loop2: detected capacity change from 0 to 128 loop2: detected capacity change from 0 to 128 loop2: detected capacity change from 0 to 128 loop2: detected capacity change from 0 to 128 netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. loop2: detected capacity change from 0 to 128 loop6: detected capacity change from 0 to 344 netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. loop6: detected capacity change from 0 to 352 loop2: detected capacity change from 0 to 128 netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. loop2: detected capacity change from 0 to 128 loop6: detected capacity change from 0 to 128 loop3: detected capacity change from 0 to 128 loop2: detected capacity change from 0 to 312 ISO 9660 Extensions: Microsoft Joliet Level 3 ISOFS: changing to secondary root loop7: detected capacity change from 0 to 128 loop1: detected capacity change from 0 to 360 loop6: detected capacity change from 0 to 128 loop5: detected capacity change from 0 to 368 loop3: detected capacity change from 0 to 130 loop5: detected capacity change from 0 to 128 loop1: detected capacity change from 0 to 360 loop2: detected capacity change from 0 to 2320 loop6: detected capacity change from 0 to 1300 loop5: detected capacity change from 0 to 1348 ISO 9660 Extensions: Microsoft Joliet Level 3 loop7: detected capacity change from 0 to 128 ISO 9660 Extensions: RRIP_1991A loop1: detected capacity change from 0 to 360 loop3: detected capacity change from 0 to 5392 loop2: detected capacity change from 0 to 736 ISO 9660 Extensions: RRIP_1991A loop5: detected capacity change from 0 to 1348 loop6: detected capacity change from 0 to 256 loop7: detected capacity change from 0 to 128 loop1: detected capacity change from 0 to 360 loop0: detected capacity change from 0 to 264 loop3: detected capacity change from 0 to 3520 loop4: detected capacity change from 0 to 760 ISO 9660 Extensions: RRIP_1991A loop2: detected capacity change from 0 to 3520 ISO 9660 Extensions: Microsoft Joliet Level 3 ISOFS: changing to secondary root ISO 9660 Extensions: Microsoft Joliet Level 3 ISOFS: changing to secondary root loop6: detected capacity change from 0 to 764 ISO 9660 Extensions: Microsoft Joliet Level 3 ISO 9660 Extensions: RRIP_1991A loop2: detected capacity change from 0 to 2304 loop4: detected capacity change from 0 to 760 loop5: detected capacity change from 0 to 1348 ISO 9660 Extensions: Microsoft Joliet Level 3 ISOFS: changing to secondary root ISO 9660 Extensions: Microsoft Joliet Level 3 loop3: detected capacity change from 0 to 3528 ISOFS: changing to secondary root ISO 9660 Extensions: Microsoft Joliet Level 3 ISOFS: changing to secondary root loop6: detected capacity change from 0 to 3520 ISO 9660 Extensions: Microsoft Joliet Level 3 ISO 9660 Extensions: RRIP_1991A loop4: detected capacity change from 0 to 760 ISO 9660 Extensions: Microsoft Joliet Level 3 ISOFS: changing to secondary root loop3: detected capacity change from 0 to 3520 loop6: detected capacity change from 0 to 320 loop2: detected capacity change from 0 to 3520 ISO 9660 Extensions: Microsoft Joliet Level 3 ISO 9660 Extensions: RRIP_1991A ISO 9660 Extensions: Microsoft Joliet Level 3 ISOFS: changing to secondary root loop5: detected capacity change from 0 to 1348 loop7: detected capacity change from 0 to 3504 ISO 9660 Extensions: Microsoft Joliet Level 3 ISOFS: changing to secondary root loop1: detected capacity change from 0 to 512 loop4: detected capacity change from 0 to 760 loop3: detected capacity change from 0 to 4728 ISO 9660 Extensions: Microsoft Joliet Level 3 ISOFS: changing to secondary root ISO 9660 Extensions: Microsoft Joliet Level 3 ISOFS: changing to secondary root EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. loop7: detected capacity change from 0 to 512 loop0: detected capacity change from 0 to 512 EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. loop6: detected capacity change from 0 to 2048 EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. ext4 filesystem being mounted at /syzkaller-testdir280997874/syzkaller.8CbbsJ/13/file0 supports timestamps until 2038 (0x7fffffff) EXT4-fs (loop1): unmounting filesystem. EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. loop3: detected capacity change from 0 to 2048 EXT4-fs (loop0): unmounting filesystem. loop1: detected capacity change from 0 to 512 EXT4-fs (loop7): unmounting filesystem. EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. loop4: detected capacity change from 0 to 512 EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. loop5: detected capacity change from 0 to 640 EXT4-fs (loop6): unmounting filesystem. EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. ext4 filesystem being mounted at /syzkaller-testdir797049141/syzkaller.DVG4oa/10/file0 supports timestamps until 2038 (0x7fffffff) EXT4-fs (loop5): unmounting filesystem. EXT4-fs (loop3): unmounting filesystem. loop7: detected capacity change from 0 to 512 loop0: detected capacity change from 0 to 512 EXT4-fs (loop4): unmounting filesystem. EXT4-fs (loop1): unmounting filesystem. EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. ext4 filesystem being mounted at /syzkaller-testdir280997874/syzkaller.8CbbsJ/14/file0 supports timestamps until 2038 (0x7fffffff) EXT4-fs (loop7): unmounting filesystem. EXT4-fs (loop0): unmounting filesystem. loop6: detected capacity change from 0 to 2048 loop1: detected capacity change from 0 to 512 loop4: detected capacity change from 0 to 1024 loop5: detected capacity change from 0 to 640 loop2: detected capacity change from 0 to 1024 EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. loop3: detected capacity change from 0 to 4096 ext4 filesystem being mounted at /syzkaller-testdir797049141/syzkaller.DVG4oa/11/file0 supports timestamps until 2038 (0x7fffffff) EXT4-fs (loop2): unmounting filesystem. EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. EXT4-fs (loop6): unmounting filesystem. EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. EXT4-fs (loop1): unmounting filesystem. EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. ext4 filesystem being mounted at /syzkaller-testdir000462876/syzkaller.qxRRw5/13/file0 supports timestamps until 2038 (0x7fffffff) loop7: detected capacity change from 0 to 512 EXT4-fs (loop5): unmounting filesystem. loop0: detected capacity change from 0 to 512 EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. EXT4-fs (loop3): unmounting filesystem. EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. EXT4-fs (loop4): unmounting filesystem. ext4 filesystem being mounted at /syzkaller-testdir280997874/syzkaller.8CbbsJ/15/file0 supports timestamps until 2038 (0x7fffffff) EXT4-fs (loop7): unmounting filesystem. EXT4-fs (loop0): unmounting filesystem. loop3: detected capacity change from 0 to 512 loop1: detected capacity change from 0 to 512 loop6: detected capacity change from 0 to 2048 loop7: detected capacity change from 0 to 512 loop4: detected capacity change from 0 to 512 loop2: detected capacity change from 0 to 512 EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. loop0: detected capacity change from 0 to 512 EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. EXT4-fs (loop7): unmounting filesystem. ext4 filesystem being mounted at /syzkaller-testdir000462876/syzkaller.qxRRw5/14/file0 supports timestamps until 2038 (0x7fffffff) EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. loop5: detected capacity change from 0 to 640 ext4 filesystem being mounted at /syzkaller-testdir280997874/syzkaller.8CbbsJ/16/file0 supports timestamps until 2038 (0x7fffffff) EXT4-fs (loop6): unmounting filesystem. EXT4-fs (loop1): unmounting filesystem. EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. EXT4-fs (loop3): unmounting filesystem. ext4 filesystem being mounted at /syzkaller-testdir797049141/syzkaller.DVG4oa/12/file0 supports timestamps until 2038 (0x7fffffff) EXT4-fs (loop2): unmounting filesystem. EXT4-fs (loop4): unmounting filesystem. loop2: detected capacity change from 0 to 2048 loop6: detected capacity change from 0 to 2048 loop1: detected capacity change from 0 to 512 EXT4-fs (loop0): unmounting filesystem. EXT4-fs (loop5): unmounting filesystem. EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. loop5: detected capacity change from 0 to 640 loop3: detected capacity change from 0 to 2048 EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. loop4: detected capacity change from 0 to 2560 EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. ext4 filesystem being mounted at /syzkaller-testdir797049141/syzkaller.DVG4oa/13/file0 supports timestamps until 2038 (0x7fffffff) EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. ext4 filesystem being mounted at /syzkaller-testdir000462876/syzkaller.qxRRw5/15/file0 supports timestamps until 2038 (0x7fffffff) EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. EXT4-fs (loop1): unmounting filesystem. EXT4-fs (loop6): unmounting filesystem. EXT4-fs (loop2): unmounting filesystem. loop7: detected capacity change from 0 to 732 EXT4-fs (loop3): unmounting filesystem. EXT4-fs (loop5): unmounting filesystem. EXT4-fs (loop4): unmounting filesystem. loop7: detected capacity change from 0 to 2560 loop4: detected capacity change from 0 to 2560 ext4 filesystem being mounted at /syzkaller-testdir000462876/syzkaller.qxRRw5/16/file0 supports timestamps until 2038 (0x7fffffff) ext4 filesystem being mounted at /syzkaller-testdir763160900/syzkaller.ldtWPf/14/file0 supports timestamps until 2038 (0x7fffffff) loop1: detected capacity change from 0 to 4096 loop4: detected capacity change from 0 to 2560 ext4 filesystem being mounted at /syzkaller-testdir000462876/syzkaller.qxRRw5/17/file0 supports timestamps until 2038 (0x7fffffff) loop7: detected capacity change from 0 to 2560 ext4 filesystem being mounted at /syzkaller-testdir763160900/syzkaller.ldtWPf/15/file0 supports timestamps until 2038 (0x7fffffff) loop1: detected capacity change from 0 to 4096 loop4: detected capacity change from 0 to 2560 ext4 filesystem being mounted at /syzkaller-testdir000462876/syzkaller.qxRRw5/18/file0 supports timestamps until 2038 (0x7fffffff) loop7: detected capacity change from 0 to 2560 ext4 filesystem being mounted at /syzkaller-testdir763160900/syzkaller.ldtWPf/16/file0 supports timestamps until 2038 (0x7fffffff) hrtimer: interrupt took 18174 ns loop1: detected capacity change from 0 to 4096 loop6: detected capacity change from 0 to 512 loop2: detected capacity change from 0 to 512 loop7: detected capacity change from 0 to 2560 loop5: detected capacity change from 0 to 1024 loop4: detected capacity change from 0 to 2048 loop3: detected capacity change from 0 to 2048 ext4 filesystem being mounted at /syzkaller-testdir763160900/syzkaller.ldtWPf/17/file0 supports timestamps until 2038 (0x7fffffff) loop1: detected capacity change from 0 to 4096 ext4 filesystem being mounted at /syzkaller-testdir530627778/syzkaller.Ko7Ukb/16/file0 supports timestamps until 2038 (0x7fffffff) loop4: detected capacity change from 0 to 512 ext4 filesystem being mounted at /syzkaller-testdir136889306/syzkaller.AxnBFW/20/file0 supports timestamps until 2038 (0x7fffffff) loop5: detected capacity change from 0 to 2048 loop2: detected capacity change from 0 to 512 loop4: detected capacity change from 0 to 512 loop3: detected capacity change from 0 to 2048 ext4 filesystem being mounted at /syzkaller-testdir136889306/syzkaller.AxnBFW/21/file0 supports timestamps until 2038 (0x7fffffff) loop6: detected capacity change from 0 to 1024 loop4: detected capacity change from 0 to 512 loop2: detected capacity change from 0 to 512 loop5: detected capacity change from 0 to 1024 loop4: detected capacity change from 0 to 512 ext4 filesystem being mounted at /syzkaller-testdir797049141/syzkaller.DVG4oa/16/file0 supports timestamps until 2038 (0x7fffffff) loop3: detected capacity change from 0 to 2048 loop0: detected capacity change from 0 to 1024 ext4 filesystem being mounted at /syzkaller-testdir136889306/syzkaller.AxnBFW/22/file0 supports timestamps until 2038 (0x7fffffff) loop0: detected capacity change from 0 to 1024 loop5: detected capacity change from 0 to 512 loop2: detected capacity change from 0 to 512 loop6: detected capacity change from 0 to 1024 loop1: detected capacity change from 0 to 512 loop3: detected capacity change from 0 to 2048 loop7: detected capacity change from 0 to 512 ext4 filesystem being mounted at /syzkaller-testdir136889306/syzkaller.AxnBFW/23/file0 supports timestamps until 2038 (0x7fffffff) loop2: detected capacity change from 0 to 512 ext4 filesystem being mounted at /syzkaller-testdir763160900/syzkaller.ldtWPf/18/file0 supports timestamps until 2038 (0x7fffffff) loop4: detected capacity change from 0 to 2048 loop0: detected capacity change from 0 to 1024 loop6: detected capacity change from 0 to 1024 loop5: detected capacity change from 0 to 512 loop1: detected capacity change from 0 to 512 loop7: detected capacity change from 0 to 512 ext4 filesystem being mounted at /syzkaller-testdir763160900/syzkaller.ldtWPf/19/file0 supports timestamps until 2038 (0x7fffffff) loop5: detected capacity change from 0 to 512 loop0: detected capacity change from 0 to 1024 loop3: detected capacity change from 0 to 1024 loop2: detected capacity change from 0 to 2048 ext4 filesystem being mounted at /syzkaller-testdir627087686/syzkaller.75AZfV/31/file0 supports timestamps until 2038 (0x7fffffff) loop6: detected capacity change from 0 to 1024 loop1: detected capacity change from 0 to 512 loop7: detected capacity change from 0 to 512 loop4: detected capacity change from 0 to 2048 loop5: detected capacity change from 0 to 512 ext4 filesystem being mounted at /syzkaller-testdir763160900/syzkaller.ldtWPf/20/file0 supports timestamps until 2038 (0x7fffffff) loop3: detected capacity change from 0 to 1024 loop2: detected capacity change from 0 to 2048 loop1: detected capacity change from 0 to 512 ext4 filesystem being mounted at /syzkaller-testdir627087686/syzkaller.75AZfV/32/file0 supports timestamps until 2038 (0x7fffffff) loop0: detected capacity change from 0 to 2048 loop7: detected capacity change from 0 to 512 loop4: detected capacity change from 0 to 2048 ext4 filesystem being mounted at /syzkaller-testdir763160900/syzkaller.ldtWPf/21/file0 supports timestamps until 2038 (0x7fffffff) loop2: detected capacity change from 0 to 2048 loop5: detected capacity change from 0 to 512 loop4: detected capacity change from 0 to 2048 loop1: detected capacity change from 0 to 640 loop3: detected capacity change from 0 to 1024 loop0: detected capacity change from 0 to 512 ext4 filesystem being mounted at /syzkaller-testdir140656297/syzkaller.u3PvkR/21/file0 supports timestamps until 2038 (0x7fffffff) ext4 filesystem being mounted at /syzkaller-testdir627087686/syzkaller.75AZfV/33/file0 supports timestamps until 2038 (0x7fffffff) loop7: detected capacity change from 0 to 512 ext4 filesystem being mounted at /syzkaller-testdir763160900/syzkaller.ldtWPf/22/file0 supports timestamps until 2038 (0x7fffffff) loop1: detected capacity change from 0 to 4096 loop3: detected capacity change from 0 to 1024 loop2: detected capacity change from 0 to 2048 loop5: detected capacity change from 0 to 512 ext4 filesystem being mounted at /syzkaller-testdir627087686/syzkaller.75AZfV/34/file0 supports timestamps until 2038 (0x7fffffff) loop0: detected capacity change from 0 to 1024 loop1: detected capacity change from 0 to 640 ext4 filesystem being mounted at /syzkaller-testdir280997874/syzkaller.8CbbsJ/27/file0 supports timestamps until 2038 (0x7fffffff) ext4 filesystem being mounted at /syzkaller-testdir140656297/syzkaller.u3PvkR/23/file0 supports timestamps until 2038 (0x7fffffff) loop5: detected capacity change from 0 to 512 loop1: detected capacity change from 0 to 4096 loop0: detected capacity change from 0 to 4096 loop5: detected capacity change from 0 to 512 loop6: detected capacity change from 0 to 1024 loop6: detected capacity change from 0 to 1024 loop2: detected capacity change from 0 to 2048 ext4 filesystem being mounted at /syzkaller-testdir627087686/syzkaller.75AZfV/36/file0 supports timestamps until 2038 (0x7fffffff) FAULT_INJECTION: forcing a failure. name fail_usercopy, interval 1, probability 0, space 0, times 1 CPU: 0 PID: 4578 Comm: syz-executor.2 Tainted: G W 6.0.0-rc6-next-20220919 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 Call Trace: dump_stack_lvl+0x8b/0xb3 should_fail.cold+0x5/0xa _copy_from_user+0x2a/0x170 __do_sys_memfd_create+0x103/0x4e0 do_syscall_64+0x3b/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7fada0a95b19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 loop6: detected capacity change from 0 to 1024 RSP: 002b:00007fad9e00af48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fada0a95b19 RDX: 00000000000a0000 RSI: 0000000000000000 RDI: 00007fada0aef0fb RBP: 0000000000000019 R08: 0000000000050000 R09: ffffffffffffffff R10: 0000000000000019 R11: 0000000000000246 R12: 0000000008100000 R13: 0000000020000100 R14: 0000000000100000 R15: 0000000020012f00 loop6: detected capacity change from 0 to 1024 process 'syz-executor.7' launched './file1' with NULL argv: empty string added loop2: detected capacity change from 0 to 2048 ext4 filesystem being mounted at /syzkaller-testdir627087686/syzkaller.75AZfV/39/file0 supports timestamps until 2038 (0x7fffffff) loop5: detected capacity change from 0 to 512 loop0: detected capacity change from 0 to 1024 loop4: detected capacity change from 0 to 512 FAULT_INJECTION: forcing a failure. name fail_usercopy, interval 1, probability 0, space 0, times 0 CPU: 0 PID: 4640 Comm: syz-executor.5 Tainted: G W 6.0.0-rc6-next-20220919 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 Call Trace: dump_stack_lvl+0x8b/0xb3 should_fail.cold+0x5/0xa _copy_from_user+0x2a/0x170 __do_sys_memfd_create+0x103/0x4e0 do_syscall_64+0x3b/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7fc9a0cd8b19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fc99e24df48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fc9a0cd8b19 RDX: 0000000000014000 RSI: 0000000000000000 RDI: 00007fc9a0d320fb RBP: 0000000000000018 R08: 000000000000a000 R09: ffffffffffffffff R10: 0000000000000018 R11: 0000000000000246 R12: 0000000008100000 R13: 0000000020000100 R14: 0000000000040000 R15: 0000000020012c00 loop6: detected capacity change from 0 to 1024 ext4 filesystem being mounted at /syzkaller-testdir000462876/syzkaller.qxRRw5/32/file0 supports timestamps until 2038 (0x7fffffff)