./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1705401476 <...> Warning: Permanently added '10.128.1.128' (ED25519) to the list of known hosts. execve("./syz-executor1705401476", ["./syz-executor1705401476"], 0x7ffdd8e5b460 /* 10 vars */) = 0 brk(NULL) = 0x55558f672000 brk(0x55558f672d00) = 0x55558f672d00 arch_prctl(ARCH_SET_FS, 0x55558f672380) = 0 set_tid_address(0x55558f672650) = 5087 set_robust_list(0x55558f672660, 24) = 0 rseq(0x55558f672ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1705401476", 4096) = 28 getrandom("\x02\xea\x54\x45\xf3\xe5\x86\x18", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55558f672d00 brk(0x55558f693d00) = 0x55558f693d00 brk(0x55558f694000) = 0x55558f694000 mprotect(0x7f698fd07000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5088 attached , child_tidptr=0x55558f672650) = 5088 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5088] set_robust_list(0x55558f672660, 24) = 0 [pid 5088] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5089 attached [pid 5087] <... clone resumed>, child_tidptr=0x55558f672650) = 5089 [pid 5089] set_robust_list(0x55558f672660, 24 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5089] <... set_robust_list resumed>) = 0 [pid 5089] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5090 attached [pid 5088] <... clone resumed>, child_tidptr=0x55558f672650) = 5090 ./strace-static-x86_64: Process 5091 attached ./strace-static-x86_64: Process 5092 attached [pid 5091] set_robust_list(0x55558f672660, 24 [pid 5087] <... clone resumed>, child_tidptr=0x55558f672650) = 5091 [pid 5090] set_robust_list(0x55558f672660, 24 [pid 5089] <... clone resumed>, child_tidptr=0x55558f672650) = 5092 [pid 5091] <... set_robust_list resumed>) = 0 [pid 5092] set_robust_list(0x55558f672660, 24 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5092] <... set_robust_list resumed>) = 0 [pid 5090] <... set_robust_list resumed>) = 0 [pid 5092] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5091] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5090] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 5093 attached [pid 5092] <... prctl resumed>) = 0 [pid 5087] <... clone resumed>, child_tidptr=0x55558f672650) = 5093 [pid 5093] set_robust_list(0x55558f672660, 24 [pid 5092] setpgid(0, 0 [pid 5090] <... prctl resumed>) = 0 [pid 5092] <... setpgid resumed>) = 0 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5093] <... set_robust_list resumed>) = 0 [pid 5092] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5090] setpgid(0, 0 [pid 5093] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5092] <... openat resumed>) = 3 [pid 5090] <... setpgid resumed>) = 0 ./strace-static-x86_64: Process 5095 attached ./strace-static-x86_64: Process 5094 attached [pid 5092] write(3, "1000", 4 [pid 5091] <... clone resumed>, child_tidptr=0x55558f672650) = 5094 [pid 5090] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5094] set_robust_list(0x55558f672660, 24 [pid 5092] <... write resumed>) = 4 ./strace-static-x86_64: Process 5096 attached [pid 5087] <... clone resumed>, child_tidptr=0x55558f672650) = 5095 [pid 5095] set_robust_list(0x55558f672660, 24 [pid 5094] <... set_robust_list resumed>) = 0 [pid 5093] <... clone resumed>, child_tidptr=0x55558f672650) = 5096 [pid 5095] <... set_robust_list resumed>) = 0 [pid 5096] set_robust_list(0x55558f672660, 24 [pid 5094] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5092] close(3 [pid 5090] <... openat resumed>) = 3 [pid 5096] <... set_robust_list resumed>) = 0 [pid 5095] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5094] <... prctl resumed>) = 0 [pid 5094] setpgid(0, 0 [pid 5092] <... close resumed>) = 0 [pid 5090] write(3, "1000", 4 [pid 5096] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5094] <... setpgid resumed>) = 0 [pid 5092] openat(AT_FDCWD, "/dev/ttyS3", O_RDONLY [pid 5090] <... write resumed>) = 4 [pid 5090] close(3) = 0 ./strace-static-x86_64: Process 5097 attached [pid 5096] <... prctl resumed>) = 0 [pid 5094] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5090] openat(AT_FDCWD, "/dev/ttyS3", O_RDONLY [pid 5097] set_robust_list(0x55558f672660, 24 [pid 5096] setpgid(0, 0 [pid 5094] <... openat resumed>) = 3 [pid 5097] <... set_robust_list resumed>) = 0 [pid 5096] <... setpgid resumed>) = 0 [pid 5095] <... clone resumed>, child_tidptr=0x55558f672650) = 5097 [pid 5092] <... openat resumed>) = 3 [pid 5090] <... openat resumed>) = 3 [pid 5096] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5090] ioctl(3, TIOCSETD, [7] [pid 5097] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5096] <... openat resumed>) = 3 [pid 5094] write(3, "1000", 4 [pid 5092] ioctl(3, TIOCSETD, [7] [pid 5097] <... prctl resumed>) = 0 [pid 5096] write(3, "1000", 4 [pid 5094] <... write resumed>) = 4 [pid 5097] setpgid(0, 0 [pid 5096] <... write resumed>) = 4 [pid 5097] <... setpgid resumed>) = 0 [pid 5094] close(3 [pid 5097] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5096] close(3 [pid 5094] <... close resumed>) = 0 [pid 5097] <... openat resumed>) = 3 [pid 5096] <... close resumed>) = 0 [pid 5094] openat(AT_FDCWD, "/dev/ttyS3", O_RDONLY [pid 5096] openat(AT_FDCWD, "/dev/ttyS3", O_RDONLY [pid 5097] write(3, "1000", 4) = 4 [pid 5097] close(3) = 0 [pid 5090] <... ioctl resumed>) = 0 [pid 5096] <... openat resumed>) = 3 [pid 5094] <... openat resumed>) = 3 [pid 5092] <... ioctl resumed>) = 0 [pid 5090] ioctl(3, TIOCVHANGUP [pid 5092] ioctl(3, TIOCVHANGUP [pid 5097] openat(AT_FDCWD, "/dev/ttyS3", O_RDONLY [pid 5096] ioctl(3, TIOCSETD, [7] [pid 5094] ioctl(3, TIOCSETD, [7] [pid 5096] <... ioctl resumed>) = -1 EIO (Input/output error) [pid 5094] <... ioctl resumed>) = -1 EIO (Input/output error) [pid 5090] <... ioctl resumed>) = -1 EIO (Input/output error) [pid 5096] ioctl(3, TIOCVHANGUP [pid 5094] ioctl(3, TIOCVHANGUP [pid 5096] <... ioctl resumed>) = -1 EIO (Input/output error) [pid 5096] exit_group(0 [pid 5090] exit_group(0 [pid 5096] <... exit_group resumed>) = ? [pid 5090] <... exit_group resumed>) = ? [pid 5094] <... ioctl resumed>) = -1 EIO (Input/output error) [pid 5094] exit_group(0) = ? [ 58.885752][ T5090] sp0: Synchronizing with TNC [pid 5092] <... ioctl resumed>) = 0 [pid 5092] exit_group(0) = ? [ 58.948554][ T5097] sp0: Synchronizing with TNC [ 58.953876][ T5097] ------------[ cut here ]------------ [ 58.954014][ T5097] [ 58.954020][ T5097] ====================================================== [ 58.954026][ T5097] WARNING: possible circular locking dependency detected [ 58.954033][ T5097] 6.9.0-rc6-next-20240503-syzkaller #0 Not tainted [ 58.954042][ T5097] ------------------------------------------------------ [ 58.954048][ T5097] syz-executor170/5097 is trying to acquire lock: [ 58.954057][ T5097] ffffffff8e327fa0 (console_owner){....}-{0:0}, at: console_flush_all+0x152/0xfd0 [ 58.954116][ T5097] [ 58.954116][ T5097] but task is already holding lock: [ 58.954122][ T5097] ffffffff94ad0858 (&port_lock_key){-.-.}-{2:2}, at: uart_write+0x10e/0x320 [ 58.954176][ T5097] [ 58.954176][ T5097] which lock already depends on the new lock. [ 58.954176][ T5097] [ 58.954182][ T5097] [ 58.954182][ T5097] the existing dependency chain (in reverse order) is: [ 58.954188][ T5097] [ 58.954188][ T5097] -> #1 (&port_lock_key){-.-.}-{2:2}: [ 58.954210][ T5097] lock_acquire+0x1ed/0x550 [ 58.954226][ T5097] _raw_spin_lock_irqsave+0xd5/0x120 [ 58.954247][ T5097] serial8250_console_write+0x1a8/0x1770 [ 58.954265][ T5097] console_flush_all+0x867/0xfd0 [ 58.954284][ T5097] console_unlock+0x13b/0x4d0 [ 58.954302][ T5097] vprintk_emit+0x5a6/0x770 [ 58.954319][ T5097] _printk+0xd5/0x120 [ 58.954338][ T5097] register_console+0x722/0xce0 [ 58.954357][ T5097] univ8250_console_init+0x49/0x50 [ 58.954379][ T5097] console_init+0x1b8/0x6f0 [ 58.954396][ T5097] start_kernel+0x2d3/0x500 [ 58.954412][ T5097] x86_64_start_reservations+0x2a/0x30 [ 58.954433][ T5097] x86_64_start_kernel+0x99/0xa0 [ 58.954452][ T5097] common_startup_64+0x13e/0x147 [ 58.954468][ T5097] [ 58.954468][ T5097] -> #0 (console_owner){....}-{0:0}: [ 58.954490][ T5097] validate_chain+0x18cb/0x58e0 [ 58.954508][ T5097] __lock_acquire+0x1346/0x1fd0 [ 58.954522][ T5097] lock_acquire+0x1ed/0x550 [ 58.954537][ T5097] console_flush_all+0x810/0xfd0 [ 58.954555][ T5097] console_unlock+0x13b/0x4d0 [ 58.954571][ T5097] vprintk_emit+0x5a6/0x770 [ 58.954588][ T5097] _printk+0xd5/0x120 [ 58.954606][ T5097] report_bug+0x346/0x500 [ 58.954625][ T5097] handle_bug+0x3e/0x70 [ 58.954647][ T5097] exc_invalid_op+0x1a/0x50 [ 58.954661][ T5097] asm_exc_invalid_op+0x1a/0x20 [ 58.954681][ T5097] uart_write+0x2b0/0x320 [ 58.954695][ T5097] sixpack_open+0x790/0xa80 [ 58.954710][ T5097] tty_ldisc_reinit+0x2d4/0x4a0 [ 58.954726][ T5097] tty_reopen+0x20b/0x2d0 [ 58.954743][ T5097] tty_open+0xa26/0xdf0 [ 58.954760][ T5097] chrdev_open+0x5b0/0x630 [ 58.954778][ T5097] do_dentry_open+0x95a/0x1720 [ 58.954796][ T5097] path_openat+0x289f/0x3280 [ 58.954810][ T5097] do_filp_open+0x235/0x490 [ 58.954824][ T5097] do_sys_openat2+0x13e/0x1d0 [ 58.954841][ T5097] __x64_sys_openat+0x247/0x2a0 [ 58.954860][ T5097] do_syscall_64+0xf5/0x240 [ 58.954873][ T5097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.954893][ T5097] [ 58.954893][ T5097] other info that might help us debug this: [ 58.954893][ T5097] [ 58.954898][ T5097] Possible unsafe locking scenario: [ 58.954898][ T5097] [ 58.954902][ T5097] CPU0 CPU1 [ 58.954907][ T5097] ---- ---- [ 58.954911][ T5097] lock(&port_lock_key); [ 58.954923][ T5097] lock(console_owner); [ 58.954934][ T5097] lock(&port_lock_key); [ 58.954945][ T5097] lock(console_owner); [ 58.954956][ T5097] [ 58.954956][ T5097] *** DEADLOCK *** [ 58.954956][ T5097] [ 58.954960][ T5097] 5 locks held by syz-executor170/5097: [ 58.954970][ T5097] #0: ffff88807d0561c0 (&tty->legacy_mutex){+.+.}-{3:3}, at: tty_lock_interruptible+0x68/0xc0 [ 58.955019][ T5097] #1: ffff88807d0560a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_lock+0x6c/0xc0 [ 58.955057][ T5097] #2: ffffffff94ad0858 (&port_lock_key){-.-.}-{2:2}, at: uart_write+0x10e/0x320 [ 58.955092][ T5097] #3: ffffffff8e20f8c0 (console_lock){+.+.}-{0:0}, at: _printk+0xd5/0x120 [ 58.955131][ T5097] #4: ffffffff8e20f4f0 (console_srcu){....}-{0:0}, at: console_flush_all+0x152/0xfd0 [ 58.955173][ T5097] [ 58.955173][ T5097] stack backtrace: [ 58.955179][ T5097] CPU: 1 PID: 5097 Comm: syz-executor170 Not tainted 6.9.0-rc6-next-20240503-syzkaller #0 [ 58.955196][ T5097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 58.955205][ T5097] Call Trace: [ 58.955211][ T5097] [ 58.955218][ T5097] dump_stack_lvl+0x241/0x360 [ 58.955235][ T5097] ? __pfx_dump_stack_lvl+0x10/0x10 [ 58.955254][ T5097] ? print_circular_bug+0x130/0x1a0 [ 58.955275][ T5097] check_noncircular+0x36a/0x4a0 [ 58.955296][ T5097] ? __pfx_check_noncircular+0x10/0x10 [ 58.955315][ T5097] ? lockdep_lock+0x123/0x2b0 [ 58.955332][ T5097] ? add_lock_to_list+0x1de/0x2e0 [ 58.955356][ T5097] validate_chain+0x18cb/0x58e0 [ 58.955385][ T5097] ? __pfx_validate_chain+0x10/0x10 [ 58.955406][ T5097] ? sprintf+0xda/0x120 [ 58.955425][ T5097] ? vsnprintf+0x1cc3/0x1da0 [ 58.955448][ T5097] ? info_print_prefix+0x204/0x310 [ 58.955467][ T5097] ? mark_lock+0x9a/0x350 [ 58.955487][ T5097] __lock_acquire+0x1346/0x1fd0 [ 58.955511][ T5097] lock_acquire+0x1ed/0x550 [ 58.955527][ T5097] ? console_flush_all+0x152/0xfd0 [ 58.955551][ T5097] ? __pfx_lock_acquire+0x10/0x10 [ 58.955567][ T5097] ? __pfx_lock_release+0x10/0x10 [ 58.955583][ T5097] ? do_raw_spin_lock+0x14f/0x370 [ 58.955609][ T5097] ? do_raw_spin_unlock+0x13c/0x8b0 [ 58.955639][ T5097] ? console_flush_all+0x3a8/0xfd0 [ 58.955661][ T5097] console_flush_all+0x810/0xfd0 [ 58.955683][ T5097] ? console_flush_all+0x152/0xfd0 [ 58.955706][ T5097] ? console_flush_all+0x152/0xfd0 [ 58.955731][ T5097] ? __pfx_console_flush_all+0x10/0x10 [ 58.955753][ T5097] ? __pfx_lock_acquire+0x10/0x10 [ 58.955771][ T5097] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 58.955790][ T5097] ? __pfx__prb_read_valid+0x10/0x10 [ 58.955809][ T5097] console_unlock+0x13b/0x4d0 [ 58.955832][ T5097] ? __pfx_console_unlock+0x10/0x10 [ 58.955851][ T5097] ? _printk+0xd5/0x120 [ 58.955871][ T5097] ? _printk+0xd5/0x120 [ 58.955892][ T5097] ? __pfx___down_trylock_console_sem+0x10/0x10 [ 58.955914][ T5097] ? prb_read_valid+0xa9/0xf0 [ 58.955935][ T5097] vprintk_emit+0x5a6/0x770 [ 58.955956][ T5097] ? __pfx_vprintk_emit+0x10/0x10 [ 58.955975][ T5097] ? __lock_acquire+0x1346/0x1fd0 [ 58.955998][ T5097] _printk+0xd5/0x120 [ 58.956021][ T5097] ? report_bug+0x25e/0x500 [ 58.956042][ T5097] ? __pfx__printk+0x10/0x10 [ 58.956064][ T5097] ? find_bug+0xa3/0x390 [ 58.956083][ T5097] ? uart_write+0x2b0/0x320 [ 58.956099][ T5097] ? do_raw_spin_lock+0x14f/0x370 [ 58.956122][ T5097] report_bug+0x346/0x500 [ 58.956142][ T5097] ? uart_write+0x2b0/0x320 [ 58.956159][ T5097] handle_bug+0x3e/0x70 [ 58.956175][ T5097] exc_invalid_op+0x1a/0x50 [ 58.956191][ T5097] asm_exc_invalid_op+0x1a/0x20 [ 58.956214][ T5097] RIP: 0010:uart_write+0x2b0/0x320 [ 58.956232][ T5097] Code: 74 08 48 89 df e8 10 f4 be fc 48 83 3b 00 74 74 e8 15 45 59 fc eb 97 e8 0e 45 59 fc 45 31 e4 eb 08 e8 04 45 59 fc 45 31 ed 90 <0f> 0b 90 45 84 e4 74 0a e8 f3 44 59 fc 45 31 f6 eb 84 e8 e9 44 59 [ 58.956246][ T5097] RSP: 0018:ffffc900037ff4b8 EFLAGS: 00010046 [ 58.956260][ T5097] RAX: ffffffff853cd0d2 RBX: dffffc0000000000 RCX: ffff88807c5c5a00 [ 58.956273][ T5097] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffc900037ff3a0 [ 58.956285][ T5097] RBP: ffff88801fd70f48 R08: 0000000000000003 R09: fffff520006ffe74 [ 58.956296][ T5097] R10: dffffc0000000000 R11: fffff520006ffe74 R12: 0000000000000000 [ 58.956308][ T5097] R13: 0000000000000246 R14: ffff88801fd70be8 R15: ffffffff94ad0840 [ 58.956324][ T5097] ? uart_write+0x2a2/0x320 [ 58.956343][ T5097] ? uart_write+0x2a2/0x320 [ 58.956360][ T5097] sixpack_open+0x790/0xa80 [ 58.956380][ T5097] ? __pfx_sixpack_open+0x10/0x10 [ 58.956401][ T5097] tty_ldisc_reinit+0x2d4/0x4a0 [ 58.956420][ T5097] tty_reopen+0x20b/0x2d0 [ 58.956441][ T5097] tty_open+0xa26/0xdf0 [ 58.956463][ T5097] ? kobject_get_unless_zero+0x22d/0x330 [ 58.956481][ T5097] ? __pfx_tty_open+0x10/0x10 [ 58.956500][ T5097] ? do_raw_spin_unlock+0x13c/0x8b0 [ 58.956522][ T5097] ? module_put+0x13a/0x2d0 [ 58.956545][ T5097] chrdev_open+0x5b0/0x630 [ 58.956566][ T5097] ? __pfx_chrdev_open+0x10/0x10 [ 58.956587][ T5097] ? security_file_open+0x5bc/0x730 [ 58.956608][ T5097] ? __pfx_chrdev_open+0x10/0x10 [ 58.956634][ T5097] do_dentry_open+0x95a/0x1720 [ 58.956660][ T5097] path_openat+0x289f/0x3280 [ 58.956680][ T5097] ? mark_lock+0x9a/0x350 [ 58.956702][ T5097] ? mark_lock+0x9a/0x350 [ 58.956722][ T5097] ? __pfx_path_openat+0x10/0x10 [ 58.956746][ T5097] do_filp_open+0x235/0x490 [ 58.956763][ T5097] ? __pfx_do_filp_open+0x10/0x10 [ 58.956789][ T5097] ? _raw_spin_unlock+0x28/0x50 [ 58.956805][ T5097] ? alloc_fd+0x59d/0x640 [ 58.956826][ T5097] do_sys_openat2+0x13e/0x1d0 [ 58.956849][ T5097] ? __pfx_do_sys_openat2+0x10/0x10 [ 58.956870][ T5097] ? lockdep_hardirqs_on+0x99/0x150 [ 58.956892][ T5097] ? _raw_spin_unlock_irq+0x2e/0x50 [ 58.956909][ T5097] ? ptrace_notify+0x279/0x380 [ 58.956932][ T5097] __x64_sys_openat+0x247/0x2a0 [ 58.956955][ T5097] ? __pfx___x64_sys_openat+0x10/0x10 [ 58.956977][ T5097] ? exc_page_fault+0x590/0x8c0 [ 58.957002][ T5097] do_syscall_64+0xf5/0x240 [ 58.957018][ T5097] ? clear_bhb_loop+0x35/0x90 [ 58.957035][ T5097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.957058][ T5097] RIP: 0033:0x7f698fc94b29 [ 58.957071][ T5097] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 58.957084][ T5097] RSP: 002b:00007ffc9a8d4f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 58.957115][ T5097] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f698fc94b29 [ 58.957127][ T5097] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 58.957138][ T5097] RBP: 00000000000f4240 R08: 0000000000000000 R09: 00000000000000a0 [ 58.957149][ T5097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.957159][ T5097] R13: 00007ffc9a8d5148 R14: 00007ffc9a8d4f50 R15: 00007ffc9a8d4f40 [ 58.957177][ T5097] [ 59.943511][ T5097] WARNING: CPU: 1 PID: 5097 at drivers/tty/serial/serial_core.c:625 uart_write+0x2b0/0x320 [ 59.953485][ T5097] Modules linked in: [ 59.957366][ T5097] CPU: 1 PID: 5097 Comm: syz-executor170 Not tainted 6.9.0-rc6-next-20240503-syzkaller #0 [ 59.967240][ T5097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 59.977279][ T5097] RIP: 0010:uart_write+0x2b0/0x320 [ 59.982381][ T5097] Code: 74 08 48 89 df e8 10 f4 be fc 48 83 3b 00 74 74 e8 15 45 59 fc eb 97 e8 0e 45 59 fc 45 31 e4 eb 08 e8 04 45 59 fc 45 31 ed 90 <0f> 0b 90 45 84 e4 74 0a e8 f3 44 59 fc 45 31 f6 eb 84 e8 e9 44 59 [ 60.002321][ T5097] RSP: 0018:ffffc900037ff4b8 EFLAGS: 00010046 [ 60.008374][ T5097] RAX: ffffffff853cd0d2 RBX: dffffc0000000000 RCX: ffff88807c5c5a00 [ 60.016333][ T5097] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffc900037ff3a0 [ 60.024288][ T5097] RBP: ffff88801fd70f48 R08: 0000000000000003 R09: fffff520006ffe74 [ 60.032245][ T5097] R10: dffffc0000000000 R11: fffff520006ffe74 R12: 0000000000000000 [ 60.040207][ T5097] R13: 0000000000000246 R14: ffff88801fd70be8 R15: ffffffff94ad0840 [ 60.048173][ T5097] FS: 000055558f672380(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 60.057089][ T5097] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 60.063657][ T5097] CR2: 0000561ea38ce530 CR3: 000000007e8e0000 CR4: 00000000003506f0 [ 60.071620][ T5097] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 60.079579][ T5097] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 60.087538][ T5097] Call Trace: [ 60.090805][ T5097] [ 60.093726][ T5097] ? __warn+0x163/0x4e0 [ 60.097876][ T5097] ? uart_write+0x2b0/0x320 [ 60.102363][ T5097] ? report_bug+0x2b3/0x500 [ 60.106855][ T5097] ? uart_write+0x2b0/0x320 [ 60.111345][ T5097] ? handle_bug+0x3e/0x70 [ 60.115660][ T5097] ? exc_invalid_op+0x1a/0x50 [ 60.120322][ T5097] ? asm_exc_invalid_op+0x1a/0x20 [ 60.125341][ T5097] ? uart_write+0x2a2/0x320 [ 60.129831][ T5097] ? uart_write+0x2b0/0x320 [ 60.134317][ T5097] ? uart_write+0x2a2/0x320 [ 60.138805][ T5097] sixpack_open+0x790/0xa80 [ 60.143302][ T5097] ? __pfx_sixpack_open+0x10/0x10 [ 60.148318][ T5097] tty_ldisc_reinit+0x2d4/0x4a0 [ 60.153157][ T5097] tty_reopen+0x20b/0x2d0 [ 60.157496][ T5097] tty_open+0xa26/0xdf0 [ 60.161666][ T5097] ? kobject_get_unless_zero+0x22d/0x330 [ 60.167299][ T5097] ? __pfx_tty_open+0x10/0x10 [ 60.171965][ T5097] ? do_raw_spin_unlock+0x13c/0x8b0 [ 60.177156][ T5097] ? module_put+0x13a/0x2d0 [ 60.181651][ T5097] chrdev_open+0x5b0/0x630 [ 60.186067][ T5097] ? __pfx_chrdev_open+0x10/0x10 [ 60.190996][ T5097] ? security_file_open+0x5bc/0x730 [ 60.196190][ T5097] ? __pfx_chrdev_open+0x10/0x10 [ 60.201117][ T5097] do_dentry_open+0x95a/0x1720 [ 60.205879][ T5097] path_openat+0x289f/0x3280 [ 60.210458][ T5097] ? mark_lock+0x9a/0x350 [ 60.214776][ T5097] ? mark_lock+0x9a/0x350 [ 60.219096][ T5097] ? __pfx_path_openat+0x10/0x10 [ 60.224036][ T5097] do_filp_open+0x235/0x490 [ 60.228527][ T5097] ? __pfx_do_filp_open+0x10/0x10 [ 60.233543][ T5097] ? _raw_spin_unlock+0x28/0x50 [ 60.238380][ T5097] ? alloc_fd+0x59d/0x640 [ 60.242702][ T5097] do_sys_openat2+0x13e/0x1d0 [ 60.247369][ T5097] ? __pfx_do_sys_openat2+0x10/0x10 [ 60.252560][ T5097] ? lockdep_hardirqs_on+0x99/0x150 [ 60.257752][ T5097] ? _raw_spin_unlock_irq+0x2e/0x50 [ 60.262937][ T5097] ? ptrace_notify+0x279/0x380 [ 60.267697][ T5097] __x64_sys_openat+0x247/0x2a0 [ 60.272539][ T5097] ? __pfx___x64_sys_openat+0x10/0x10 [ 60.277903][ T5097] ? exc_page_fault+0x590/0x8c0 [ 60.282747][ T5097] do_syscall_64+0xf5/0x240 [ 60.287255][ T5097] ? clear_bhb_loop+0x35/0x90 [ 60.291943][ T5097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.298187][ T5097] RIP: 0033:0x7f698fc94b29 [ 60.302591][ T5097] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 60.322195][ T5097] RSP: 002b:00007ffc9a8d4f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 60.330601][ T5097] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f698fc94b29 [ 60.338560][ T5097] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 60.346517][ T5097] RBP: 00000000000f4240 R08: 0000000000000000 R09: 00000000000000a0 [ 60.354475][ T5097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.362436][ T5097] R13: 00007ffc9a8d5148 R14: 00007ffc9a8d4f50 R15: 00007ffc9a8d4f40 [ 60.370406][ T5097] [ 60.373416][ T5097] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 60.380689][ T5097] CPU: 1 PID: 5097 Comm: syz-executor170 Not tainted 6.9.0-rc6-next-20240503-syzkaller #0 [ 60.390560][ T5097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 60.400948][ T5097] Call Trace: [ 60.404219][ T5097] [ 60.407136][ T5097] dump_stack_lvl+0x241/0x360 [ 60.411809][ T5097] ? __pfx_dump_stack_lvl+0x10/0x10 [ 60.417009][ T5097] ? __pfx__printk+0x10/0x10 [ 60.421587][ T5097] ? _printk+0xd5/0x120 [ 60.425736][ T5097] ? vscnprintf+0x5d/0x90 [ 60.430054][ T5097] panic+0x349/0x860 [ 60.433939][ T5097] ? __warn+0x172/0x4e0 [ 60.438085][ T5097] ? __pfx_panic+0x10/0x10 [ 60.442491][ T5097] ? show_trace_log_lvl+0x4e6/0x520 [ 60.447689][ T5097] __warn+0x346/0x4e0 [ 60.451663][ T5097] ? uart_write+0x2b0/0x320 [ 60.456155][ T5097] report_bug+0x2b3/0x500 [ 60.460477][ T5097] ? uart_write+0x2b0/0x320 [ 60.464970][ T5097] handle_bug+0x3e/0x70 [ 60.469115][ T5097] exc_invalid_op+0x1a/0x50 [ 60.473604][ T5097] asm_exc_invalid_op+0x1a/0x20 [ 60.478446][ T5097] RIP: 0010:uart_write+0x2b0/0x320 [ 60.483545][ T5097] Code: 74 08 48 89 df e8 10 f4 be fc 48 83 3b 00 74 74 e8 15 45 59 fc eb 97 e8 0e 45 59 fc 45 31 e4 eb 08 e8 04 45 59 fc 45 31 ed 90 <0f> 0b 90 45 84 e4 74 0a e8 f3 44 59 fc 45 31 f6 eb 84 e8 e9 44 59 [ 60.503571][ T5097] RSP: 0018:ffffc900037ff4b8 EFLAGS: 00010046 [ 60.509624][ T5097] RAX: ffffffff853cd0d2 RBX: dffffc0000000000 RCX: ffff88807c5c5a00 [ 60.517594][ T5097] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffc900037ff3a0 [ 60.525552][ T5097] RBP: ffff88801fd70f48 R08: 0000000000000003 R09: fffff520006ffe74 [ 60.533516][ T5097] R10: dffffc0000000000 R11: fffff520006ffe74 R12: 0000000000000000 [ 60.541474][ T5097] R13: 0000000000000246 R14: ffff88801fd70be8 R15: ffffffff94ad0840 [ 60.549435][ T5097] ? uart_write+0x2a2/0x320 [ 60.553932][ T5097] ? uart_write+0x2a2/0x320 [ 60.558421][ T5097] sixpack_open+0x790/0xa80 [ 60.562917][ T5097] ? __pfx_sixpack_open+0x10/0x10 [ 60.567931][ T5097] tty_ldisc_reinit+0x2d4/0x4a0 [ 60.572773][ T5097] tty_reopen+0x20b/0x2d0 [ 60.577091][ T5097] tty_open+0xa26/0xdf0 [ 60.581254][ T5097] ? kobject_get_unless_zero+0x22d/0x330 [ 60.586875][ T5097] ? __pfx_tty_open+0x10/0x10 [ 60.591538][ T5097] ? do_raw_spin_unlock+0x13c/0x8b0 [ 60.596727][ T5097] ? module_put+0x13a/0x2d0 [ 60.601220][ T5097] chrdev_open+0x5b0/0x630 [ 60.605627][ T5097] ? __pfx_chrdev_open+0x10/0x10 [ 60.610558][ T5097] ? security_file_open+0x5bc/0x730 [ 60.615745][ T5097] ? __pfx_chrdev_open+0x10/0x10 [ 60.620673][ T5097] do_dentry_open+0x95a/0x1720 [ 60.625430][ T5097] path_openat+0x289f/0x3280 [ 60.630012][ T5097] ? mark_lock+0x9a/0x350 [ 60.634331][ T5097] ? mark_lock+0x9a/0x350 [ 60.638653][ T5097] ? __pfx_path_openat+0x10/0x10 [ 60.643582][ T5097] do_filp_open+0x235/0x490 [ 60.648074][ T5097] ? __pfx_do_filp_open+0x10/0x10 [ 60.653092][ T5097] ? _raw_spin_unlock+0x28/0x50 [ 60.657930][ T5097] ? alloc_fd+0x59d/0x640 [ 60.662249][ T5097] do_sys_openat2+0x13e/0x1d0 [ 60.666916][ T5097] ? __pfx_do_sys_openat2+0x10/0x10 [ 60.672102][ T5097] ? lockdep_hardirqs_on+0x99/0x150 [ 60.677291][ T5097] ? _raw_spin_unlock_irq+0x2e/0x50 [ 60.682476][ T5097] ? ptrace_notify+0x279/0x380 [ 60.687232][ T5097] __x64_sys_openat+0x247/0x2a0 [ 60.692075][ T5097] ? __pfx___x64_sys_openat+0x10/0x10 [ 60.697440][ T5097] ? exc_page_fault+0x590/0x8c0 [ 60.702284][ T5097] do_syscall_64+0xf5/0x240 [ 60.706771][ T5097] ? clear_bhb_loop+0x35/0x90 [ 60.711437][ T5097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.717321][ T5097] RIP: 0033:0x7f698fc94b29 [ 60.721721][ T5097] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 60.741313][ T5097] RSP: 002b:00007ffc9a8d4f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 60.749711][ T5097] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f698fc94b29 [ 60.757673][ T5097] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 60.765631][ T5097] RBP: 00000000000f4240 R08: 0000000000000000 R09: 00000000000000a0 [ 60.773592][ T5097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.781550][ T5097] R13: 00007ffc9a8d5148 R14: 00007ffc9a8d4f50 R15: 00007ffc9a8d4f40 [ 60.789513][ T5097] [ 60.792763][ T5097] Kernel Offset: disabled [ 60.797070][ T5097] Rebooting in 86400 seconds..