FAULT_INJECTION: forcing a failure. name fail_usercopy, interval 1, probability 0, space 0, times 1 CPU: 0 PID: 5373 Comm: syz-executor.1 Not tainted 6.0.0-rc1-next-20220819 #1 BUG: sleeping function called from invalid context at kernel/locking/rwsem.c:1521 in_atomic(): 0, irqs_disabled(): 1, non_block: 0, pid: 5373, name: syz-executor.1 preempt_count: 0, expected: 0 RCU nest depth: 0, expected: 0 1 lock held by syz-executor.1/5373: #0: ffff88801ba4b768 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe7/0x100 irq event stamp: 468 hardirqs last enabled at (467): [] __up_console_sem+0x78/0x80 hardirqs last disabled at (468): [] dump_stack_lvl+0x2e/0xb3 softirqs last enabled at (462): [] __irq_exit_rcu+0x11b/0x180 softirqs last disabled at (435): [] __irq_exit_rcu+0x11b/0x180 CPU: 0 PID: 5373 Comm: syz-executor.1 Not tainted 6.0.0-rc1-next-20220819 #1 syz-executor.1[5373] cmdline: /syz-executor.1 exec Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 Call Trace: dump_stack_lvl+0x8b/0xb3 __might_resched.cold+0x222/0x26b down_read_killable+0x75/0x490 __access_remote_vm+0xac/0x6f0 get_mm_cmdline.part.0+0x214/0x600 get_task_cmdline_kernel+0x1e9/0x230 dump_stack_print_cmdline.part.0+0x82/0x150 dump_stack_print_info+0x185/0x190 dump_stack_lvl+0x7f/0xb3 should_fail.cold+0x5/0xa _copy_to_user+0x2a/0x140 simple_read_from_buffer+0xcc/0x160 proc_fail_nth_read+0x198/0x230 vfs_read+0x253/0x930 ksys_read+0x127/0x250 do_syscall_64+0x3b/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f49d9c8269c Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 RSP: 002b:00007f49d7245170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f49d9c8269c RDX: 000000000000000f RSI: 00007f49d72451e0 RDI: 0000000000000004 RBP: 00007f49d72451d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007ffd4d1b45bf R14: 00007f49d7245300 R15: 0000000000022000 loop4: detected capacity change from 0 to 40 loop3: detected capacity change from 0 to 40 FAT-fs (loop4): invalid media value (0x00) FAT-fs (loop4): Can't find a valid FAT filesystem sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] FAT-fs (loop7): invalid media value (0x00) sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present FAT-fs (loop7): Can't find a valid FAT filesystem sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 blk_print_req_error: 31 callbacks suppressed I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 sr 1:0:0:0: [sr0] tag#0 unaligned transfer I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 buffer_io_error: 30 callbacks suppressed Buffer I/O error on dev sr0, logical block 0, async page read syz-executor.1[5373] cmdline: /syz-executor.1 exec sr 1:0:0:0: [sr0] tag#0 unaligned transfer Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 Call Trace: Buffer I/O error on dev sr0, logical block 1, async page read sr 1:0:0:0: [sr0] tag#0 unaligned transfer dump_stack_lvl+0x8b/0xb3 I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 should_fail.cold+0x5/0xa Buffer I/O error on dev sr0, logical block 2, async page read _copy_to_user+0x2a/0x140 sr 1:0:0:0: [sr0] tag#0 unaligned transfer simple_read_from_buffer+0xcc/0x160 I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 proc_fail_nth_read+0x198/0x230 Buffer I/O error on dev sr0, logical block 3, async page read sr 1:0:0:0: [sr0] tag#0 unaligned transfer I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 Buffer I/O error on dev sr0, logical block 4, async page read vfs_read+0x253/0x930 sr 1:0:0:0: [sr0] tag#0 unaligned transfer I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 Buffer I/O error on dev sr0, logical block 5, async page read sr 1:0:0:0: [sr0] tag#0 unaligned transfer I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 ksys_read+0x127/0x250 Buffer I/O error on dev sr0, logical block 6, async page read sr 1:0:0:0: [sr0] tag#0 unaligned transfer I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 Buffer I/O error on dev sr0, logical block 7, async page read sr 1:0:0:0: [sr0] tag#0 unaligned transfer I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 do_syscall_64+0x3b/0x90 Buffer I/O error on dev sr0, logical block 0, async page read sr 1:0:0:0: [sr0] tag#0 unaligned transfer entry_SYSCALL_64_after_hwframe+0x63/0xcd Buffer I/O error on dev sr0, logical block 1, async page read RIP: 0033:0x7f49d9c8269c sr 1:0:0:0: [sr0] tag#0 unaligned transfer Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 sr 1:0:0:0: [sr0] tag#0 unaligned transfer RSP: 002b:00007f49d7245170 EFLAGS: 00000246 sr 1:0:0:0: [sr0] tag#0 unaligned transfer ORIG_RAX: 0000000000000000 sr 1:0:0:0: [sr0] tag#0 unaligned transfer RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f49d9c8269c sr 1:0:0:0: [sr0] tag#0 unaligned transfer RDX: 000000000000000f RSI: 00007f49d72451e0 RDI: 0000000000000004 sr 1:0:0:0: [sr0] tag#0 unaligned transfer RBP: 00007f49d72451d0 R08: 0000000000000000 R09: 0000000000000000 sr 1:0:0:0: [sr0] tag#0 unaligned transfer R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 sr 1:0:0:0: [sr0] tag#0 unaligned transfer R13: 00007ffd4d1b45bf R14: 00007f49d7245300 R15: 0000000000022000 sr 1:0:0:0: [sr0] tag#0 unaligned transfer sr 1:0:0:0: [sr0] tag#0 unaligned transfer sr 1:0:0:0: [sr0] tag#0 unaligned transfer sr 1:0:0:0: [sr0] tag#0 unaligned transfer sr 1:0:0:0: [sr0] tag#0 unaligned transfer sr 1:0:0:0: [sr0] tag#0 unaligned transfer sr 1:0:0:0: [sr0] tag#0 unaligned transfer sr 1:0:0:0: [sr0] tag#0 unaligned transfer sr 1:0:0:0: [sr0] tag#0 unaligned transfer sr 1:0:0:0: [sr0] tag#0 unaligned transfer sr 1:0:0:0: [sr0] tag#0 unaligned transfer sr 1:0:0:0: [sr0] tag#0 unaligned transfer sr 1:0:0:0: [sr0] tag#0 unaligned transfer sr 1:0:0:0: [sr0] tag#0 unaligned transfer sr 1:0:0:0: [sr0] tag#0 unaligned transfer sr 1:0:0:0: [sr0] tag#0 unaligned transfer sr 1:0:0:0: [sr0] tag#0 unaligned transfer sr 1:0:0:0: [sr0] tag#0 unaligned transfer sr 1:0:0:0: [sr0] tag#0 unaligned transfer loop2: detected capacity change from 0 to 40 sr 1:0:0:0: [sr0] tag#0 unaligned transfer sr 1:0:0:0: [sr0] tag#0 unaligned transfer sr 1:0:0:0: [sr0] tag#0 unaligned transfer FAULT_INJECTION: forcing a failure. name fail_usercopy, interval 1, probability 0, space 0, times 0 CPU: 1 PID: 5390 Comm: syz-executor.5 Tainted: G W 6.0.0-rc1-next-20220819 #1 syz-executor.5[5390] cmdline: /syz-executor.5 exec Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 Call Trace: dump_stack_lvl+0x8b/0xb3 should_fail.cold+0x5/0xa strncpy_from_user+0x34/0x3e0 getname_flags.part.0+0x95/0x4f0 getname_flags+0x9a/0xe0 user_path_at_empty+0x2b/0x60 __x64_sys_chdir+0xb6/0x260 do_syscall_64+0x3b/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f90f2679b19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f90efbef188 EFLAGS: 00000246 ORIG_RAX: 0000000000000050 RAX: ffffffffffffffda RBX: 00007f90f278cf60 RCX: 00007f90f2679b19 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000140 RBP: 00007f90efbef1d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007ffe6e84a86f R14: 00007f90efbef300 R15: 0000000000022000 loop7: detected capacity change from 0 to 40 FAT-fs (loop7): invalid media value (0x00) FAT-fs (loop7): Can't find a valid FAT filesystem ---------------- Code disassembly (best guess): 0: ec in (%dx),%al 1: 28 48 89 sub %cl,-0x77(%rax) 4: 54 push %rsp 5: 24 18 and $0x18,%al 7: 48 89 74 24 10 mov %rsi,0x10(%rsp) c: 89 7c 24 08 mov %edi,0x8(%rsp) 10: e8 f9 fc ff ff callq 0xfffffd0e 15: 48 8b 54 24 18 mov 0x18(%rsp),%rdx 1a: 48 8b 74 24 10 mov 0x10(%rsp),%rsi 1f: 41 89 c0 mov %eax,%r8d 22: 8b 7c 24 08 mov 0x8(%rsp),%edi 26: 31 c0 xor %eax,%eax 28: 0f 05 syscall * 2a: 48 3d 00 f0 ff ff cmp $0xfffffffffffff000,%rax <-- trapping instruction 30: 77 34 ja 0x66 32: 44 89 c7 mov %r8d,%edi 35: 48 89 44 24 08 mov %rax,0x8(%rsp) 3a: e8 2f fd ff ff callq 0xfffffd6e 3f: 48 rex.W