FAULT_INJECTION: forcing a failure. name fail_usercopy, interval 1, probability 0, space 0, times 1 CPU: 0 PID: 6891 Comm: syz-executor.0 Not tainted 6.0.0-rc1-next-20220819 #1 BUG: sleeping function called from invalid context at kernel/locking/rwsem.c:1521 in_atomic(): 0, irqs_disabled(): 1, non_block: 0, pid: 6891, name: syz-executor.0 preempt_count: 0, expected: 0 loop2: detected capacity change from 0 to 4 RCU nest depth: 0, expected: 0 1 lock held by syz-executor.0/6891: #0: ffff88800d443268 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe7/0x100 irq event stamp: 1100 hardirqs last enabled at (1099): [] __up_console_sem+0x78/0x80 hardirqs last disabled at (1100): [] dump_stack_lvl+0x2e/0xb3 softirqs last enabled at (1094): [] __irq_exit_rcu+0x11b/0x180 softirqs last disabled at (1071): [] __irq_exit_rcu+0x11b/0x180 CPU: 0 PID: 6891 Comm: syz-executor.0 Not tainted 6.0.0-rc1-next-20220819 #1 EXT4-fs (loop2): Couldn't mount because of unsupported optional features (c2000000) FAULT_INJECTION: forcing a failure. name fail_usercopy, interval 1, probability 0, space 0, times 1 CPU: 0 PID: 6894 Comm: syz-executor.3 Not tainted 6.0.0-rc1-next-20220819 #1 syz-executor.0[6891] cmdline: /syz-executor.0 exec Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 Call Trace: dump_stack_lvl+0x8b/0xb3 __might_resched.cold+0x222/0x26b down_read_killable+0x75/0x490 __access_remote_vm+0xac/0x6f0 get_mm_cmdline.part.0+0x214/0x600 syz-executor.3[6894] cmdline: /syz-executor.3 exec Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 Call Trace: get_task_cmdline_kernel+0x1e9/0x230 dump_stack_print_cmdline.part.0+0x82/0x150 dump_stack_lvl+0x8b/0xb3 dump_stack_print_info+0x185/0x190 dump_stack_lvl+0x7f/0xb3 should_fail.cold+0x5/0xa should_fail.cold+0x5/0xa _copy_to_user+0x2a/0x140 _copy_to_user+0x2a/0x140 simple_read_from_buffer+0xcc/0x160 simple_read_from_buffer+0xcc/0x160 proc_fail_nth_read+0x198/0x230 proc_fail_nth_read+0x198/0x230 vfs_read+0x253/0x930 vfs_read+0x253/0x930 ksys_read+0x127/0x250 ksys_read+0x127/0x250 do_syscall_64+0x3b/0x90 do_syscall_64+0x3b/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7ff0e3b8269c RIP: 0033:0x7f3174d8a69c Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 RSP: 002b:00007f317234d170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3174d8a69c RDX: 000000000000000f RSI: 00007f317234d1e0 RDI: 0000000000000007 Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 RBP: 00007f317234d1d0 R08: 0000000000000000 R09: 0000000000000000 RSP: 002b:00007ff0e1145170 EFLAGS: 00000246 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007ffe17f6d25f R14: 00007f317234d300 R15: 0000000000022000 ORIG_RAX: 0000000000000000 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff0e3b8269c RDX: 000000000000000f RSI: 00007ff0e11451e0 RDI: 0000000000000006 RBP: 00007ff0e11451d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007ffde221168f R14: 00007ff0e1145300 R15: 0000000000022000 FAULT_INJECTION: forcing a failure. name fail_usercopy, interval 1, probability 0, space 0, times 0 syz-executor.0[6891] cmdline: /syz-executor.0 exec Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 Call Trace: dump_stack_lvl+0x8b/0xb3 should_fail.cold+0x5/0xa _copy_to_user+0x2a/0x140 simple_read_from_buffer+0xcc/0x160 proc_fail_nth_read+0x198/0x230 vfs_read+0x253/0x930 ksys_read+0x127/0x250 do_syscall_64+0x3b/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f3174d8a69c Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 RSP: 002b:00007f317234d170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3174d8a69c RDX: 000000000000000f RSI: 00007f317234d1e0 RDI: 0000000000000007 RBP: 00007f317234d1d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007ffe17f6d25f R14: 00007f317234d300 R15: 0000000000022000 CPU: 1 PID: 6904 Comm: syz-executor.2 Tainted: G W 6.0.0-rc1-next-20220819 #1 syz-executor.2[6904] cmdline: /syz-executor.2 exec Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 Call Trace: dump_stack_lvl+0x8b/0xb3 should_fail.cold+0x5/0xa _copy_from_user+0x2a/0x170 __do_sys_memfd_create+0x103/0x4e0 do_syscall_64+0x3b/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f7e91990b19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f7e8ef05f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f RAX: ffffffffffffffda RBX: 0000000020000140 RCX: 00007f7e91990b19 RDX: 0000000000000800 RSI: 0000000000000000 RDI: 00007f7e919ea0fb RBP: 0000000000000001 R08: 0000000000000400 R09: ffffffffffffffff R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 R13: 0000000020000100 R14: 0000000000000800 R15: 0000000020000040 ---------------- Code disassembly (best guess): 0: ec in (%dx),%al 1: 28 48 89 sub %cl,-0x77(%rax) 4: 54 push %rsp 5: 24 18 and $0x18,%al 7: 48 89 74 24 10 mov %rsi,0x10(%rsp) c: 89 7c 24 08 mov %edi,0x8(%rsp) 10: e8 f9 fc ff ff callq 0xfffffd0e 15: 48 8b 54 24 18 mov 0x18(%rsp),%rdx 1a: 48 8b 74 24 10 mov 0x10(%rsp),%rsi 1f: 41 89 c0 mov %eax,%r8d 22: 8b 7c 24 08 mov 0x8(%rsp),%edi 26: 31 c0 xor %eax,%eax 28: 0f 05 syscall * 2a: 48 3d 00 f0 ff ff cmp $0xfffffffffffff000,%rax <-- trapping instruction 30: 77 34 ja 0x66 32: 44 89 c7 mov %r8d,%edi 35: 48 89 44 24 08 mov %rax,0x8(%rsp) 3a: e8 2f fd ff ff callq 0xfffffd6e 3f: 48 rex.W