Warning: Permanently added '10.128.0.103' (ED25519) to the list of known hosts. executing program [ 60.627303][ T26] audit: type=1800 audit(1705872629.556:2): pid=3499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor142" name="bus" dev="sda1" ino=1927 res=0 errno=0 [ 60.629377][ T3499] FAULT_INJECTION: forcing a failure. [ 60.629377][ T3499] name failslab, interval 1, probability 0, space 0, times 1 [ 60.629495][ T3499] [ 60.629502][ T3499] ====================================================== [ 60.629510][ T3499] WARNING: possible circular locking dependency detected [ 60.629516][ T3499] 5.15.147-syzkaller #0 Not tainted [ 60.629524][ T3499] ------------------------------------------------------ [ 60.629529][ T3499] syz-executor142/3499 is trying to acquire lock: [ 60.629538][ T3499] ffffffff8c913da0 (console_owner){-...}-{0:0}, at: console_trylock_spinning+0x185/0x3f0 [ 60.629620][ T3499] [ 60.629620][ T3499] but task is already holding lock: [ 60.629625][ T3499] ffff88801d7ec158 (&port->lock){-...}-{2:2}, at: tty_insert_flip_string_and_push_buffer+0x3a/0x390 [ 60.629676][ T3499] [ 60.629676][ T3499] which lock already depends on the new lock. [ 60.629676][ T3499] [ 60.629680][ T3499] [ 60.629680][ T3499] the existing dependency chain (in reverse order) is: [ 60.629686][ T3499] [ 60.629686][ T3499] -> #2 (&port->lock){-...}-{2:2}: [ 60.629708][ T3499] lock_acquire+0x1db/0x4f0 [ 60.629727][ T3499] _raw_spin_lock_irqsave+0xd1/0x120 [ 60.629745][ T3499] tty_port_default_wakeup+0x21/0x100 [ 60.629765][ T3499] serial8250_tx_chars+0x60d/0x800 [ 60.629782][ T3499] serial8250_handle_irq+0x505/0x600 [ 60.629798][ T3499] serial8250_default_handle_irq+0xc8/0x1e0 [ 60.629818][ T3499] serial8250_interrupt+0xa1/0x1e0 [ 60.629839][ T3499] __handle_irq_event_percpu+0x292/0xa70 [ 60.629858][ T3499] handle_irq_event+0xff/0x2b0 [ 60.629875][ T3499] handle_edge_irq+0x245/0xbf0 [ 60.629894][ T3499] __common_interrupt+0xd7/0x1f0 [ 60.629911][ T3499] common_interrupt+0x9f/0xc0 [ 60.629933][ T3499] asm_common_interrupt+0x22/0x40 [ 60.629951][ T3499] _raw_spin_unlock_irqrestore+0xd4/0x130 [ 60.629968][ T3499] uart_write+0x6af/0x930 [ 60.629991][ T3499] n_tty_write+0xd7e/0x1280 [ 60.630008][ T3499] file_tty_write+0x561/0x920 [ 60.630023][ T3499] vfs_write+0xacf/0xe50 [ 60.630039][ T3499] ksys_write+0x1a2/0x2c0 [ 60.630058][ T3499] do_syscall_64+0x3d/0xb0 [ 60.630076][ T3499] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 60.630094][ T3499] [ 60.630094][ T3499] -> #1 (&port_lock_key){-...}-{2:2}: [ 60.630136][ T3499] lock_acquire+0x1db/0x4f0 [ 60.630152][ T3499] _raw_spin_lock_irqsave+0xd1/0x120 [ 60.630170][ T3499] serial8250_console_write+0x19d/0x1180 [ 60.630192][ T3499] console_unlock+0xced/0x12b0 [ 60.630209][ T3499] vprintk_emit+0xbf/0x150 [ 60.630225][ T3499] _printk+0xd1/0x111 [ 60.630241][ T3499] register_console+0x68c/0x970 [ 60.630258][ T3499] univ8250_console_init+0x41/0x43 [ 60.630281][ T3499] console_init+0x18c/0x652 [ 60.630299][ T3499] start_kernel+0x301/0x535 [ 60.630317][ T3499] secondary_startup_64_no_verify+0xb1/0xbb [ 60.630337][ T3499] [ 60.630337][ T3499] -> #0 (console_owner){-...}-{0:0}: [ 60.630360][ T3499] validate_chain+0x1649/0x5930 [ 60.630381][ T3499] __lock_acquire+0x1295/0x1ff0 [ 60.630397][ T3499] lock_acquire+0x1db/0x4f0 [ 60.630413][ T3499] console_trylock_spinning+0x1a5/0x3f0 [ 60.630431][ T3499] vprintk_emit+0xa6/0x150 [ 60.630450][ T3499] _printk+0xd1/0x111 [ 60.630465][ T3499] should_fail+0x36c/0x4c0 [ 60.630508][ T3499] should_failslab+0x5/0x20 [ 60.630527][ T3499] slab_pre_alloc_hook+0x53/0xc0 [ 60.630550][ T3499] __kmalloc+0x6e/0x300 [ 60.630566][ T3499] __tty_buffer_request_room+0x1ef/0x500 [ 60.630587][ T3499] tty_insert_flip_string_and_push_buffer+0x7c/0x390 [ 60.630610][ T3499] n_tty_write+0x63c/0x1280 [ 60.630631][ T3499] file_tty_write+0x561/0x920 [ 60.630647][ T3499] do_iter_readv_writev+0x594/0x7a0 [ 60.630667][ T3499] do_iter_write+0x1ea/0x760 [ 60.630685][ T3499] iter_file_splice_write+0x806/0xfa0 [ 60.630709][ T3499] direct_splice_actor+0xe3/0x1c0 [ 60.630728][ T3499] splice_direct_to_actor+0x500/0xc10 [ 60.630747][ T3499] do_splice_direct+0x285/0x3d0 [ 60.630766][ T3499] do_sendfile+0x625/0xff0 [ 60.630786][ T3499] __se_sys_sendfile64+0x178/0x1e0 [ 60.630806][ T3499] do_syscall_64+0x3d/0xb0 [ 60.630824][ T3499] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 60.630845][ T3499] [ 60.630845][ T3499] other info that might help us debug this: [ 60.630845][ T3499] [ 60.630850][ T3499] Chain exists of: [ 60.630850][ T3499] console_owner --> &port_lock_key --> &port->lock [ 60.630850][ T3499] [ 60.630881][ T3499] Possible unsafe locking scenario: [ 60.630881][ T3499] [ 60.630885][ T3499] CPU0 CPU1 [ 60.630889][ T3499] ---- ---- [ 60.630894][ T3499] lock(&port->lock); [ 60.630904][ T3499] lock(&port_lock_key); [ 60.630917][ T3499] lock(&port->lock); [ 60.630928][ T3499] lock(console_owner); [ 60.630939][ T3499] [ 60.630939][ T3499] *** DEADLOCK *** [ 60.630939][ T3499] [ 60.630943][ T3499] 5 locks held by syz-executor142/3499: [ 60.630957][ T3499] #0: ffff8881474c6098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 60.631009][ T3499] #1: ffff8881474c6130 (&tty->atomic_write_lock){+.+.}-{3:3}, at: file_tty_write+0x24f/0x920 [ 60.631054][ T3499] #2: ffff8881474c62e8 (&tty->termios_rwsem){++++}-{3:3}, at: n_tty_write+0x252/0x1280 [ 60.631099][ T3499] #3: ffffc900010e8378 (&ldata->output_lock){+.+.}-{3:3}, at: n_tty_write+0x5ee/0x1280 [ 60.631145][ T3499] #4: ffff88801d7ec158 (&port->lock){-...}-{2:2}, at: tty_insert_flip_string_and_push_buffer+0x3a/0x390 [ 60.631196][ T3499] [ 60.631196][ T3499] stack backtrace: [ 60.631202][ T3499] CPU: 1 PID: 3499 Comm: syz-executor142 Not tainted 5.15.147-syzkaller #0 [ 60.631222][ T3499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 60.631235][ T3499] Call Trace: [ 60.631240][ T3499] [ 60.631247][ T3499] dump_stack_lvl+0x1e3/0x2cb [ 60.631270][ T3499] ? io_uring_drop_tctx_refs+0x19d/0x19d [ 60.631296][ T3499] ? print_circular_bug+0x12b/0x1a0 [ 60.631317][ T3499] check_noncircular+0x2f8/0x3b0 [ 60.631339][ T3499] ? add_chain_block+0x850/0x850 [ 60.631359][ T3499] ? lockdep_lock+0x11f/0x2a0 [ 60.631387][ T3499] validate_chain+0x1649/0x5930 [ 60.631416][ T3499] ? reacquire_held_locks+0x660/0x660 [ 60.631434][ T3499] ? __lock_acquire+0x1295/0x1ff0 [ 60.631453][ T3499] ? reacquire_held_locks+0x660/0x660 [ 60.631485][ T3499] ? mark_lock+0x98/0x340 [ 60.631504][ T3499] __lock_acquire+0x1295/0x1ff0 [ 60.631529][ T3499] lock_acquire+0x1db/0x4f0 [ 60.631547][ T3499] ? console_trylock_spinning+0x185/0x3f0 [ 60.631570][ T3499] ? read_lock_is_recursive+0x10/0x10 [ 60.631589][ T3499] ? __lock_acquire+0x1ff0/0x1ff0 [ 60.631607][ T3499] ? do_raw_spin_lock+0x14a/0x370 [ 60.631630][ T3499] ? do_raw_spin_unlock+0x137/0x8b0 [ 60.631653][ T3499] console_trylock_spinning+0x1a5/0x3f0 [ 60.631673][ T3499] ? console_trylock_spinning+0x185/0x3f0 [ 60.631692][ T3499] ? vprintk_emit+0x150/0x150 [ 60.631711][ T3499] ? is_dynamic_key+0x1f0/0x1f0 [ 60.631732][ T3499] ? __lock_acquire+0x1295/0x1ff0 [ 60.631751][ T3499] ? mark_lock+0x98/0x340 [ 60.631772][ T3499] vprintk_emit+0xa6/0x150 [ 60.631791][ T3499] _printk+0xd1/0x111 [ 60.631830][ T3499] ? panic+0x84d/0x84d [ 60.631849][ T3499] ? __might_sleep+0xc0/0xc0 [ 60.631871][ T3499] ? read_lock_is_recursive+0x10/0x10 [ 60.631892][ T3499] should_fail+0x36c/0x4c0 [ 60.631913][ T3499] should_failslab+0x5/0x20 [ 60.631932][ T3499] slab_pre_alloc_hook+0x53/0xc0 [ 60.631955][ T3499] __kmalloc+0x6e/0x300 [ 60.631977][ T3499] ? __tty_buffer_request_room+0x1ef/0x500 [ 60.632008][ T3499] __tty_buffer_request_room+0x1ef/0x500 [ 60.632036][ T3499] tty_insert_flip_string_and_push_buffer+0x7c/0x390 [ 60.632063][ T3499] ? add_wait_queue+0xc1/0x170 [ 60.632091][ T3499] n_tty_write+0x63c/0x1280 [ 60.632113][ T3499] ? _copy_from_iter+0x72e/0xe90 [ 60.632138][ T3499] ? n_tty_read+0x1db0/0x1db0 [ 60.632158][ T3499] ? wait_woken+0x1b0/0x1b0 [ 60.632184][ T3499] ? file_tty_write+0x363/0x920 [ 60.632204][ T3499] ? rcu_is_watching+0x11/0xa0 [ 60.632222][ T3499] ? __virt_addr_valid+0x22b/0x2e0 [ 60.632247][ T3499] ? __phys_addr_symbol+0x2b/0x70 [ 60.632270][ T3499] ? 0xffffffff81000000 [ 60.632287][ T3499] ? __check_object_size+0x300/0x410 [ 60.632311][ T3499] file_tty_write+0x561/0x920 [ 60.632333][ T3499] ? n_tty_read+0x1db0/0x1db0 [ 60.632356][ T3499] do_iter_readv_writev+0x594/0x7a0 [ 60.632384][ T3499] ? generic_file_rw_checks+0x260/0x260 [ 60.632408][ T3499] ? common_file_perm+0x17d/0x1d0 [ 60.632433][ T3499] ? fsnotify_perm+0x67/0x5a0 [ 60.632452][ T3499] ? bpf_lsm_file_permission+0x5/0x10 [ 60.632480][ T3499] do_iter_write+0x1ea/0x760 [ 60.632504][ T3499] ? vfs_iter_write+0x69/0xa0 [ 60.632532][ T3499] iter_file_splice_write+0x806/0xfa0 [ 60.632565][ T3499] ? splice_from_pipe+0x230/0x230 [ 60.632585][ T3499] ? generic_file_splice_read+0x577/0x790 [ 60.632609][ T3499] ? splice_shrink_spd+0xb0/0xb0 [ 60.632632][ T3499] ? __fsnotify_update_child_dentry_flags+0x2a0/0x2a0 [ 60.632663][ T3499] ? common_file_perm+0x17d/0x1d0 [ 60.632685][ T3499] ? splice_from_pipe+0x230/0x230 [ 60.632708][ T3499] direct_splice_actor+0xe3/0x1c0 [ 60.632734][ T3499] splice_direct_to_actor+0x500/0xc10 [ 60.632762][ T3499] ? do_splice_direct+0x3d0/0x3d0 [ 60.632784][ T3499] ? pipe_to_sendpage+0x350/0x350 [ 60.632807][ T3499] ? fsnotify_perm+0x67/0x5a0 [ 60.632829][ T3499] ? bpf_lsm_file_permission+0x5/0x10 [ 60.632854][ T3499] do_splice_direct+0x285/0x3d0 [ 60.632877][ T3499] ? splice_direct_to_actor+0xc10/0xc10 [ 60.632905][ T3499] ? common_file_perm+0x17d/0x1d0 [ 60.632941][ T3499] ? fsnotify_perm+0x67/0x5a0 [ 60.632958][ T3499] ? bpf_lsm_file_permission+0x5/0x10 [ 60.632986][ T3499] do_sendfile+0x625/0xff0 [ 60.633025][ T3499] ? do_pwritev+0x360/0x360 [ 60.633047][ T3499] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 60.633071][ T3499] __se_sys_sendfile64+0x178/0x1e0 [ 60.633091][ T3499] ? __x64_sys_sendfile64+0xa0/0xa0 [ 60.633115][ T3499] ? syscall_enter_from_user_mode+0x2e/0x230 [ 60.633133][ T3499] ? lockdep_hardirqs_on+0x94/0x130 [ 60.633152][ T3499] ? syscall_enter_from_user_mode+0x2e/0x230 [ 60.633172][ T3499] do_syscall_64+0x3d/0xb0 [ 60.633194][ T3499] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 60.633215][ T3499] RIP: 0033:0x7fb353f84139 [ 60.633229][ T3499] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 60.633245][ T3499] RSP: 002b:00007ffc284df168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 60.633266][ T3499] RAX: ffffffffffffffda RBX: 00007ffc284df170 RCX: 00007fb353f84139 [ 60.633280][ T3499] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 60.633291][ T3499] RBP: 0000000000000002 R08: 00007ffc284def06 R09: 00007fb353003432 [ 60.633303][ T3499] R10: 0001000000201005 R11: 0000000000000246 R12: 0000000000000000 [ 60.633316][ T3499] R13: 00007ffc284df3d8 R14: 0000000000000001 R15: 0000000000000001 [ 60.633337][ T3499] [ 61.720148][ T3499] CPU: 1 PID: 3499 Comm: syz-executor142 Not tainted 5.15.147-syzkaller #0 [ 61.728709][ T3499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 61.738738][ T3499] Call Trace: [ 61.742002][ T3499] [ 61.744920][ T3499] dump_stack_lvl+0x1e3/0x2cb [ 61.749577][ T3499] ? io_uring_drop_tctx_refs+0x19d/0x19d [ 61.755186][ T3499] ? panic+0x84d/0x84d [ 61.759231][ T3499] ? __might_sleep+0xc0/0xc0 [ 61.763800][ T3499] ? read_lock_is_recursive+0x10/0x10 [ 61.769159][ T3499] should_fail+0x38a/0x4c0 [ 61.773561][ T3499] should_failslab+0x5/0x20 [ 61.778040][ T3499] slab_pre_alloc_hook+0x53/0xc0 [ 61.782961][ T3499] __kmalloc+0x6e/0x300 [ 61.787108][ T3499] ? __tty_buffer_request_room+0x1ef/0x500 [ 61.792899][ T3499] __tty_buffer_request_room+0x1ef/0x500 [ 61.798519][ T3499] tty_insert_flip_string_and_push_buffer+0x7c/0x390 [ 61.805175][ T3499] ? add_wait_queue+0xc1/0x170 [ 61.809921][ T3499] n_tty_write+0x63c/0x1280 [ 61.814408][ T3499] ? _copy_from_iter+0x72e/0xe90 [ 61.819326][ T3499] ? n_tty_read+0x1db0/0x1db0 [ 61.823979][ T3499] ? wait_woken+0x1b0/0x1b0 [ 61.828464][ T3499] ? file_tty_write+0x363/0x920 [ 61.833293][ T3499] ? rcu_is_watching+0x11/0xa0 [ 61.838046][ T3499] ? __virt_addr_valid+0x22b/0x2e0 [ 61.843139][ T3499] ? __phys_addr_symbol+0x2b/0x70 [ 61.848155][ T3499] ? 0xffffffff81000000 [ 61.852287][ T3499] ? __check_object_size+0x300/0x410 [ 61.857558][ T3499] file_tty_write+0x561/0x920 [ 61.862216][ T3499] ? n_tty_read+0x1db0/0x1db0 [ 61.866880][ T3499] do_iter_readv_writev+0x594/0x7a0 [ 61.872062][ T3499] ? generic_file_rw_checks+0x260/0x260 [ 61.877591][ T3499] ? common_file_perm+0x17d/0x1d0 [ 61.882598][ T3499] ? fsnotify_perm+0x67/0x5a0 [ 61.887258][ T3499] ? bpf_lsm_file_permission+0x5/0x10 [ 61.892612][ T3499] do_iter_write+0x1ea/0x760 [ 61.897187][ T3499] ? vfs_iter_write+0x69/0xa0 [ 61.901850][ T3499] iter_file_splice_write+0x806/0xfa0 [ 61.907216][ T3499] ? splice_from_pipe+0x230/0x230 [ 61.912220][ T3499] ? generic_file_splice_read+0x577/0x790 [ 61.917925][ T3499] ? splice_shrink_spd+0xb0/0xb0 [ 61.922844][ T3499] ? __fsnotify_update_child_dentry_flags+0x2a0/0x2a0 [ 61.929596][ T3499] ? common_file_perm+0x17d/0x1d0 [ 61.934595][ T3499] ? splice_from_pipe+0x230/0x230 [ 61.939602][ T3499] direct_splice_actor+0xe3/0x1c0 [ 61.944605][ T3499] splice_direct_to_actor+0x500/0xc10 [ 61.949956][ T3499] ? do_splice_direct+0x3d0/0x3d0 [ 61.954957][ T3499] ? pipe_to_sendpage+0x350/0x350 [ 61.959958][ T3499] ? fsnotify_perm+0x67/0x5a0 [ 61.964611][ T3499] ? bpf_lsm_file_permission+0x5/0x10 [ 61.969961][ T3499] do_splice_direct+0x285/0x3d0 [ 61.974802][ T3499] ? splice_direct_to_actor+0xc10/0xc10 [ 61.980325][ T3499] ? common_file_perm+0x17d/0x1d0 [ 61.985352][ T3499] ? fsnotify_perm+0x67/0x5a0 [ 61.990013][ T3499] ? bpf_lsm_file_permission+0x5/0x10 [ 61.995362][ T3499] do_sendfile+0x625/0xff0 [ 61.999761][ T3499] ? do_pwritev+0x360/0x360 [ 62.004256][ T3499] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 62.010215][ T3499] __se_sys_sendfile64+0x178/0x1e0 [ 62.015304][ T3499] ? __x64_sys_sendfile64+0xa0/0xa0 [ 62.020481][ T3499] ? syscall_enter_from_user_mode+0x2e/0x230 [ 62.026439][ T3499] ? lockdep_hardirqs_on+0x94/0x130 [ 62.031614][ T3499] ? syscall_enter_from_user_mode+0x2e/0x230 [ 62.037572][ T3499] do_syscall_64+0x3d/0xb0 [ 62.041969][ T3499] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 62.047848][ T3499] RIP: 0033:0x7fb353f84139 [ 62.052244][ T3499] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 62.071837][ T3499] RSP: 002b:00007ffc284df168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 62.080233][ T3499] RAX: fffffffffffff