Warning: Permanently added '10.128.0.233' (ED25519) to the list of known hosts. executing program [ 42.603239][ T3501] loop0: detected capacity change from 0 to 1024 [ 42.626200][ T3501] FAULT_INJECTION: forcing a failure. [ 42.626200][ T3501] name failslab, interval 1, probability 0, space 0, times 1 [ 42.626312][ T3501] [ 42.626316][ T3501] ====================================================== [ 42.626322][ T3501] WARNING: possible circular locking dependency detected [ 42.626327][ T3501] 5.15.145-syzkaller #0 Not tainted [ 42.626334][ T3501] ------------------------------------------------------ [ 42.626339][ T3501] syz-executor183/3501 is trying to acquire lock: [ 42.626347][ T3501] ffffffff8c913da0 (console_owner){....}-{0:0}, at: console_lock_spinning_enable+0x2c/0x60 [ 42.626399][ T3501] [ 42.626399][ T3501] but task is already holding lock: [ 42.626404][ T3501] ffff88807cd98958 (&port->lock){-...}-{2:2}, at: tty_insert_flip_string_and_push_buffer+0x3a/0x390 [ 42.626448][ T3501] [ 42.626448][ T3501] which lock already depends on the new lock. [ 42.626448][ T3501] [ 42.626453][ T3501] [ 42.626453][ T3501] the existing dependency chain (in reverse order) is: [ 42.626457][ T3501] [ 42.626457][ T3501] -> #2 (&port->lock){-...}-{2:2}: [ 42.626477][ T3501] lock_acquire+0x1db/0x4f0 [ 42.626491][ T3501] _raw_spin_lock_irqsave+0xd1/0x120 [ 42.626508][ T3501] tty_port_default_wakeup+0x21/0x100 [ 42.626526][ T3501] serial8250_tx_chars+0x60d/0x800 [ 42.626540][ T3501] serial8250_handle_irq+0x505/0x600 [ 42.626555][ T3501] serial8250_default_handle_irq+0xc8/0x1e0 [ 42.626571][ T3501] serial8250_interrupt+0xa1/0x1e0 [ 42.626589][ T3501] __handle_irq_event_percpu+0x292/0xa70 [ 42.626607][ T3501] handle_irq_event+0xff/0x2b0 [ 42.626623][ T3501] handle_edge_irq+0x245/0xbf0 [ 42.626640][ T3501] __common_interrupt+0xd7/0x1f0 [ 42.626655][ T3501] common_interrupt+0x9f/0xc0 [ 42.626672][ T3501] asm_common_interrupt+0x22/0x40 [ 42.626688][ T3501] _raw_spin_unlock_irqrestore+0xd4/0x130 [ 42.626704][ T3501] uart_write+0x6af/0x930 [ 42.626719][ T3501] n_tty_write+0xd7e/0x1280 [ 42.626734][ T3501] file_tty_write+0x561/0x920 [ 42.626748][ T3501] vfs_write+0xacf/0xe50 [ 42.626763][ T3501] ksys_write+0x1a2/0x2c0 [ 42.626777][ T3501] do_syscall_64+0x3d/0xb0 [ 42.626793][ T3501] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 42.626810][ T3501] [ 42.626810][ T3501] -> #1 (&port_lock_key){-...}-{2:2}: [ 42.626831][ T3501] lock_acquire+0x1db/0x4f0 [ 42.626844][ T3501] _raw_spin_lock_irqsave+0xd1/0x120 [ 42.626859][ T3501] serial8250_console_write+0x19d/0x1180 [ 42.626875][ T3501] console_unlock+0xced/0x12b0 [ 42.626888][ T3501] vprintk_emit+0xbf/0x150 [ 42.626901][ T3501] _printk+0xd1/0x111 [ 42.626914][ T3501] register_console+0x68c/0x970 [ 42.626928][ T3501] univ8250_console_init+0x41/0x43 [ 42.626944][ T3501] console_init+0x18c/0x652 [ 42.626961][ T3501] start_kernel+0x301/0x535 [ 42.626975][ T3501] secondary_startup_64_no_verify+0xb1/0xbb [ 42.626994][ T3501] [ 42.626994][ T3501] -> #0 (console_owner){....}-{0:0}: [ 42.627015][ T3501] validate_chain+0x1649/0x5930 [ 42.627030][ T3501] __lock_acquire+0x1295/0x1ff0 [ 42.627043][ T3501] lock_acquire+0x1db/0x4f0 [ 42.627056][ T3501] console_lock_spinning_enable+0x51/0x60 [ 42.627072][ T3501] console_unlock+0xa47/0x12b0 [ 42.627086][ T3501] vprintk_emit+0xbf/0x150 [ 42.627099][ T3501] _printk+0xd1/0x111 [ 42.627113][ T3501] should_fail+0x36c/0x4c0 [ 42.627127][ T3501] should_failslab+0x5/0x20 [ 42.627143][ T3501] slab_pre_alloc_hook+0x53/0xc0 [ 42.627159][ T3501] __kmalloc+0x6e/0x300 [ 42.627180][ T3501] __tty_buffer_request_room+0x1ef/0x500 [ 42.627197][ T3501] tty_insert_flip_string_and_push_buffer+0x7c/0x390 [ 42.627217][ T3501] n_tty_write+0x63c/0x1280 [ 42.627232][ T3501] file_tty_write+0x561/0x920 [ 42.627246][ T3501] do_iter_readv_writev+0x594/0x7a0 [ 42.627262][ T3501] do_iter_write+0x1ea/0x760 [ 42.627277][ T3501] iter_file_splice_write+0x806/0xfa0 [ 42.627295][ T3501] direct_splice_actor+0xe3/0x1c0 [ 42.627311][ T3501] splice_direct_to_actor+0x500/0xc10 [ 42.627328][ T3501] do_splice_direct+0x285/0x3d0 [ 42.627344][ T3501] do_sendfile+0x625/0xff0 [ 42.627359][ T3501] __se_sys_sendfile64+0x178/0x1e0 [ 42.627375][ T3501] do_syscall_64+0x3d/0xb0 [ 42.627390][ T3501] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 42.627407][ T3501] [ 42.627407][ T3501] other info that might help us debug this: [ 42.627407][ T3501] [ 42.627412][ T3501] Chain exists of: [ 42.627412][ T3501] console_owner --> &port_lock_key --> &port->lock [ 42.627412][ T3501] [ 42.627435][ T3501] Possible unsafe locking scenario: [ 42.627435][ T3501] [ 42.627438][ T3501] CPU0 CPU1 [ 42.627441][ T3501] ---- ---- [ 42.627445][ T3501] lock(&port->lock); [ 42.627454][ T3501] lock(&port_lock_key); [ 42.627463][ T3501] lock(&port->lock); [ 42.627473][ T3501] lock(console_owner); [ 42.627481][ T3501] [ 42.627481][ T3501] *** DEADLOCK *** [ 42.627481][ T3501] [ 42.627484][ T3501] 6 locks held by syz-executor183/3501: [ 42.627493][ T3501] #0: ffff888142dc8098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 42.627531][ T3501] #1: ffff888142dc8130 (&tty->atomic_write_lock){+.+.}-{3:3}, at: file_tty_write+0x24f/0x920 [ 42.627567][ T3501] #2: ffff888142dc82e8 (&tty->termios_rwsem){++++}-{3:3}, at: n_tty_write+0x252/0x1280 [ 42.627603][ T3501] #3: ffffc900010c8378 (&ldata->output_lock){+.+.}-{3:3}, at: n_tty_write+0x5ee/0x1280 [ 42.627640][ T3501] #4: ffff88807cd98958 (&port->lock){-...}-{2:2}, at: tty_insert_flip_string_and_push_buffer+0x3a/0x390 [ 42.627681][ T3501] #5: ffffffff8c7fbae0 (console_lock){+.+.}-{0:0}, at: vprintk_emit+0xa6/0x150 [ 42.627716][ T3501] [ 42.627716][ T3501] stack backtrace: [ 42.627720][ T3501] CPU: 1 PID: 3501 Comm: syz-executor183 Not tainted 5.15.145-syzkaller #0 [ 42.627736][ T3501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 42.627744][ T3501] Call Trace: [ 42.627749][ T3501] [ 42.627754][ T3501] dump_stack_lvl+0x1e3/0x2cb [ 42.627773][ T3501] ? io_uring_drop_tctx_refs+0x19d/0x19d [ 42.627795][ T3501] ? print_circular_bug+0x12b/0x1a0 [ 42.627813][ T3501] check_noncircular+0x2f8/0x3b0 [ 42.627836][ T3501] ? add_chain_block+0x850/0x850 [ 42.627851][ T3501] ? lockdep_lock+0x11f/0x2a0 [ 42.627876][ T3501] validate_chain+0x1649/0x5930 [ 42.627901][ T3501] ? reacquire_held_locks+0x660/0x660 [ 42.627918][ T3501] ? format_decode+0x72f/0x1f10 [ 42.627938][ T3501] ? vsnprintf+0x1c70/0x1c70 [ 42.627956][ T3501] ? memcpy+0x3c/0x60 [ 42.627972][ T3501] ? mark_lock+0x98/0x340 [ 42.627988][ T3501] __lock_acquire+0x1295/0x1ff0 [ 42.628008][ T3501] lock_acquire+0x1db/0x4f0 [ 42.628022][ T3501] ? console_lock_spinning_enable+0x2c/0x60 [ 42.628042][ T3501] ? read_lock_is_recursive+0x10/0x10 [ 42.628062][ T3501] ? console_lock_spinning_enable+0x2c/0x60 [ 42.628079][ T3501] ? __lock_acquire+0x1ff0/0x1ff0 [ 42.628094][ T3501] ? do_raw_spin_lock+0x14a/0x370 [ 42.628117][ T3501] console_lock_spinning_enable+0x51/0x60 [ 42.628133][ T3501] ? console_lock_spinning_enable+0x2c/0x60 [ 42.628150][ T3501] console_unlock+0xa47/0x12b0 [ 42.628177][ T3501] ? console_trylock_spinning+0x3f0/0x3f0 [ 42.628195][ T3501] ? __down_trylock_console_sem+0x1f2/0x250 [ 42.628211][ T3501] ? vprintk_emit+0xa6/0x150 [ 42.628226][ T3501] ? printk_parse_prefix+0x2c0/0x2c0 [ 42.628241][ T3501] ? vprintk_emit+0xa6/0x150 [ 42.628256][ T3501] ? console_trylock+0x70/0x70 [ 42.628270][ T3501] ? register_lock_class+0x100/0x9a0 [ 42.628295][ T3501] ? vprintk_emit+0x150/0x150 [ 42.628313][ T3501] ? mark_lock+0x98/0x340 [ 42.628330][ T3501] vprintk_emit+0xbf/0x150 [ 42.628346][ T3501] _printk+0xd1/0x111 [ 42.628364][ T3501] ? panic+0x84d/0x84d [ 42.628380][ T3501] ? __might_sleep+0xc0/0xc0 [ 42.628397][ T3501] ? read_lock_is_recursive+0x10/0x10 [ 42.628418][ T3501] should_fail+0x36c/0x4c0 [ 42.628435][ T3501] should_failslab+0x5/0x20 [ 42.628451][ T3501] slab_pre_alloc_hook+0x53/0xc0 [ 42.628469][ T3501] __kmalloc+0x6e/0x300 [ 42.628484][ T3501] ? __tty_buffer_request_room+0x1ef/0x500 [ 42.628506][ T3501] __tty_buffer_request_room+0x1ef/0x500 [ 42.628528][ T3501] tty_insert_flip_string_and_push_buffer+0x7c/0x390 [ 42.628550][ T3501] ? add_wait_queue+0xc1/0x170 [ 42.628571][ T3501] n_tty_write+0x63c/0x1280 [ 42.628589][ T3501] ? _copy_from_iter+0x72e/0xe90 [ 42.628609][ T3501] ? n_tty_read+0x1db0/0x1db0 [ 42.628626][ T3501] ? wait_woken+0x1b0/0x1b0 [ 42.628644][ T3501] ? file_tty_write+0x363/0x920 [ 42.628660][ T3501] ? rcu_is_watching+0x11/0xa0 [ 42.628675][ T3501] ? __virt_addr_valid+0x22b/0x2e0 [ 42.628694][ T3501] ? __phys_addr_symbol+0x2b/0x70 [ 42.628712][ T3501] ? 0xffffffff81000000 [ 42.628724][ T3501] ? __check_object_size+0x300/0x410 [ 42.628744][ T3501] file_tty_write+0x561/0x920 [ 42.628762][ T3501] ? n_tty_read+0x1db0/0x1db0 [ 42.628780][ T3501] do_iter_readv_writev+0x594/0x7a0 [ 42.628800][ T3501] ? generic_file_rw_checks+0x260/0x260 [ 42.628820][ T3501] ? common_file_perm+0x17d/0x1d0 [ 42.628841][ T3501] ? fsnotify_perm+0x67/0x5a0 [ 42.628856][ T3501] ? bpf_lsm_file_permission+0x5/0x10 [ 42.628877][ T3501] do_iter_write+0x1ea/0x760 [ 42.628897][ T3501] ? vfs_iter_write+0x69/0xa0 [ 42.628914][ T3501] iter_file_splice_write+0x806/0xfa0 [ 42.628941][ T3501] ? splice_from_pipe+0x230/0x230 [ 42.628958][ T3501] ? generic_file_splice_read+0x54a/0x790 [ 42.628978][ T3501] ? splice_shrink_spd+0xb0/0xb0 [ 42.628999][ T3501] ? common_file_perm+0x17d/0x1d0 [ 42.629017][ T3501] ? splice_from_pipe+0x230/0x230 [ 42.629034][ T3501] direct_splice_actor+0xe3/0x1c0 [ 42.629053][ T3501] splice_direct_to_actor+0x500/0xc10 [ 42.629076][ T3501] ? do_splice_direct+0x3d0/0x3d0 [ 42.629094][ T3501] ? pipe_to_sendpage+0x350/0x350 [ 42.629112][ T3501] ? fsnotify_perm+0x67/0x5a0 [ 42.629126][ T3501] ? bpf_lsm_file_permission+0x5/0x10 [ 42.629145][ T3501] do_splice_direct+0x285/0x3d0 [ 42.629171][ T3501] ? splice_direct_to_actor+0xc10/0xc10 [ 42.629190][ T3501] ? common_file_perm+0x17d/0x1d0 [ 42.629210][ T3501] ? fsnotify_perm+0x67/0x5a0 [ 42.629224][ T3501] ? bpf_lsm_file_permission+0x5/0x10 [ 42.629244][ T3501] do_sendfile+0x625/0xff0 [ 42.629267][ T3501] ? do_pwritev+0x360/0x360 [ 42.629286][ T3501] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 42.629307][ T3501] __se_sys_sendfile64+0x178/0x1e0 [ 42.629327][ T3501] ? __x64_sys_sendfile64+0xa0/0xa0 [ 42.629345][ T3501] ? syscall_enter_from_user_mode+0x2e/0x230 [ 42.629361][ T3501] ? lockdep_hardirqs_on+0x94/0x130 [ 42.629377][ T3501] ? syscall_enter_from_user_mode+0x2e/0x230 [ 42.629395][ T3501] do_syscall_64+0x3d/0xb0 [ 42.629412][ T3501] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 42.629430][ T3501] RIP: 0033:0x7fe1b7d33f79 [ 42.629443][ T3501] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 42.629456][ T3501] RSP: 002b:00007ffefc6070f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 42.629472][ T3501] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007fe1b7d33f79 [ 42.629484][ T3501] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 42.629493][ T3501] RBP: 00007ffefc607100 R08: 00007ffefc606e97 R09: 00007fe1b7cf0035 [ 42.629504][ T3501] R10: 00000000e0000000 R11: 0000000000000246 R12: 0000000000000000 [ 42.629514][ T3501] R13: 00007ffefc607368 R14: 0000000000000001 R15: 0000000000000001 [ 42.629530][ T3501] [ 43.744911][ T3501] CPU: 1 PID: 3501 Comm: syz-executor183 Not tainted 5.15.145-syzkaller #0 [ 43.753475][ T3501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 43.763506][ T3501] Call Trace: [ 43.766765][ T3501] [ 43.769683][ T3501] dump_stack_lvl+0x1e3/0x2cb [ 43.774346][ T3501] ? io_uring_drop_tctx_refs+0x19d/0x19d [ 43.779959][ T3501] ? panic+0x84d/0x84d [ 43.784007][ T3501] ? __might_sleep+0xc0/0xc0 [ 43.788575][ T3501] ? read_lock_is_recursive+0x10/0x10 [ 43.793929][ T3501] should_fail+0x38a/0x4c0 [ 43.798350][ T3501] should_failslab+0x5/0x20 [ 43.802861][ T3501] slab_pre_alloc_hook+0x53/0xc0 [ 43.807782][ T3501] __kmalloc+0x6e/0x300 [ 43.811917][ T3501] ? __tty_buffer_request_room+0x1ef/0x500 [ 43.817705][ T3501] __tty_buffer_request_room+0x1ef/0x500 [ 43.823324][ T3501] tty_insert_flip_string_and_push_buffer+0x7c/0x390 [ 43.829999][ T3501] ? add_wait_queue+0xc1/0x170 [ 43.834745][ T3501] n_tty_write+0x63c/0x1280 [ 43.839227][ T3501] ? _copy_from_iter+0x72e/0xe90 [ 43.844145][ T3501] ? n_tty_read+0x1db0/0x1db0 [ 43.848797][ T3501] ? wait_woken+0x1b0/0x1b0 [ 43.853347][ T3501] ? file_tty_write+0x363/0x920 [ 43.858179][ T3501] ? rcu_is_watching+0x11/0xa0 [ 43.862920][ T3501] ? __virt_addr_valid+0x22b/0x2e0 [ 43.868013][ T3501] ? __phys_addr_symbol+0x2b/0x70 [ 43.873045][ T3501] ? 0xffffffff81000000 [ 43.877181][ T3501] ? __check_object_size+0x300/0x410 [ 43.882539][ T3501] file_tty_write+0x561/0x920 [ 43.887195][ T3501] ? n_tty_read+0x1db0/0x1db0 [ 43.891852][ T3501] do_iter_readv_writev+0x594/0x7a0 [ 43.897034][ T3501] ? generic_file_rw_checks+0x260/0x260 [ 43.902568][ T3501] ? common_file_perm+0x17d/0x1d0 [ 43.907584][ T3501] ? fsnotify_perm+0x67/0x5a0 [ 43.912238][ T3501] ? bpf_lsm_file_permission+0x5/0x10 [ 43.917593][ T3501] do_iter_write+0x1ea/0x760 [ 43.922170][ T3501] ? vfs_iter_write+0x69/0xa0 [ 43.926831][ T3501] iter_file_splice_write+0x806/0xfa0 [ 43.932186][ T3501] ? splice_from_pipe+0x230/0x230 [ 43.937207][ T3501] ? generic_file_splice_read+0x54a/0x790 [ 43.942912][ T3501] ? splice_shrink_spd+0xb0/0xb0 [ 43.947835][ T3501] ? common_file_perm+0x17d/0x1d0 [ 43.952851][ T3501] ? splice_from_pipe+0x230/0x230 [ 43.957859][ T3501] direct_splice_actor+0xe3/0x1c0 [ 43.962873][ T3501] splice_direct_to_actor+0x500/0xc10 [ 43.968231][ T3501] ? do_splice_direct+0x3d0/0x3d0 [ 43.973239][ T3501] ? pipe_to_sendpage+0x350/0x350 [ 43.978242][ T3501] ? fsnotify_perm+0x67/0x5a0 [ 43.982914][ T3501] ? bpf_lsm_file_permission+0x5/0x10 [ 43.988266][ T3501] do_splice_direct+0x285/0x3d0 [ 43.993095][ T3501] ? splice_direct_to_actor+0xc10/0xc10 [ 43.998619][ T3501] ? common_file_perm+0x17d/0x1d0 [ 44.003624][ T3501] ? fsnotify_perm+0x67/0x5a0 [ 44.008280][ T3501] ? bpf_lsm_file_permission+0x5/0x10 [ 44.013631][ T3501] do_sendfile+0x625/0xff0 [ 44.018032][ T3501] ? do_pwritev+0x360/0x360 [ 44.022531][ T3501] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 44.028496][ T3501] __se_sys_sendfile64+0x178/0x1e0 [ 44.033592][ T3501] ? __x64_sys_sendfile64+0xa0/0xa0 [ 44.038768][ T3501] ? syscall_enter_from_user_mode+0x2e/0x230 [ 44.044724][ T3501] ? lockdep_hardirqs_on+0x94/0x130 [ 44.049899][ T3501] ? syscall_enter_from_user_mode+0x2e/0x230 [ 44.055861][ T3501] do_syscall_64+0x3d/0xb0 [ 44.060262][ T3501] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 44.066164][ T3501] RIP: 0033:0x7fe1b7d33f79 [ 44.070584][ T3501] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 44.090182][ T3501] RSP: 002b:00007ffefc6070f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 44.098575][ T3501] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007fe1b7d33f79 [ 44.106529][ T3501] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 44.114476][ T3501] RBP: 00007ffefc607100 R08: 00007ffefc606e97 R09: 00007fe1b7cf0035 [ 44.122427][ T3501] R10: 00000000e0000000 R11: 0000000000000246 R12: 0000000000000000 [ 44.130375][ T3501] R13: 00007ffefc607368 R14: 0000000000000001 R15: 0000000000000001 [ 44.138338][ T3501]