BUG: sleeping function called from invalid context at drivers/tty/vt/vt.c:2245 in_atomic(): 1, irqs_disabled(): 1, pid: 9707, name: syz-executor.0 3 locks held by syz-executor.0/9707: #0: (&tty->ldisc_sem){++++}, at: [] tty_ldisc_ref_wait+0x22/0x80 drivers/tty/tty_ldisc.c:284 #1: (&tty->atomic_write_lock){+.+.}, at: [] tty_write_lock drivers/tty/tty_io.c:885 [inline] #1: (&tty->atomic_write_lock){+.+.}, at: [] do_tty_write drivers/tty/tty_io.c:908 [inline] #1: (&tty->atomic_write_lock){+.+.}, at: [] tty_write+0x22d/0x740 drivers/tty/tty_io.c:1043 #2: (&(&gsm->tx_lock)->rlock){....}, at: [] gsmld_write+0x5e/0x120 drivers/tty/n_gsm.c:2545 irq event stamp: 20 hardirqs last enabled at (19): [] slab_alloc mm/slab.c:3383 [inline] hardirqs last enabled at (19): [] __do_kmalloc mm/slab.c:3718 [inline] hardirqs last enabled at (19): [] __kmalloc+0x2fb/0x400 mm/slab.c:3729 hardirqs last disabled at (20): [] __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:108 [inline] hardirqs last disabled at (20): [] _raw_spin_lock_irqsave+0x66/0xc0 kernel/locking/spinlock.c:160 softirqs last enabled at (0): [] copy_process.part.0+0x12d0/0x71c0 kernel/fork.c:1734 softirqs last disabled at (0): [< (null)>] (null) Preemption disabled at: [< (null)>] (null) CPU: 0 PID: 9707 Comm: syz-executor.0 Not tainted 4.14.305-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x281 lib/dump_stack.c:58 ___might_sleep.cold+0x235/0x250 kernel/sched/core.c:6040 do_con_write+0xd0/0x19b0 drivers/tty/vt/vt.c:2245 con_write+0x21/0xa0 drivers/tty/vt/vt.c:2822 gsmld_write+0xbb/0x120 drivers/tty/n_gsm.c:2548 do_tty_write drivers/tty/tty_io.c:959 [inline] tty_write+0x410/0x740 drivers/tty/tty_io.c:1043 __vfs_write+0xe4/0x630 fs/read_write.c:480 vfs_write+0x17f/0x4d0 fs/read_write.c:544 SYSC_write fs/read_write.c:590 [inline] SyS_write+0xf2/0x210 fs/read_write.c:582 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x5e/0xd3 RIP: 0033:0x7f3af03ad0f9 RSP: 002b:00007f3aee8fe168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 00007f3af04cd050 RCX: 00007f3af03ad0f9 RDX: 000000000000000b RSI: 0000000020001200 RDI: 0000000000000003 RBP: 00007f3af0408ae9 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffdc4ca63bf R14: 00007f3aee8fe300 R15: 0000000000022000 BUG: sleeping function called from invalid context at drivers/tty/vt/vt.c:2245 in_atomic(): 1, irqs_disabled(): 1, pid: 9911, name: syz-executor.0 3 locks held by syz-executor.0/9911: #0: (&tty->ldisc_sem){++++}, at: [] tty_ldisc_ref_wait+0x22/0x80 drivers/tty/tty_ldisc.c:284 #1: (&tty->atomic_write_lock){+.+.}, at: [] tty_write_lock drivers/tty/tty_io.c:885 [inline] #1: (&tty->atomic_write_lock){+.+.}, at: [] do_tty_write drivers/tty/tty_io.c:908 [inline] #1: (&tty->atomic_write_lock){+.+.}, at: [] tty_write+0x22d/0x740 drivers/tty/tty_io.c:1043 #2: (&(&gsm->tx_lock)->rlock){....}, at: [] gsmld_write+0x5e/0x120 drivers/tty/n_gsm.c:2545 irq event stamp: 20 hardirqs last enabled at (19): [] slab_alloc mm/slab.c:3383 [inline] hardirqs last enabled at (19): [] __do_kmalloc mm/slab.c:3718 [inline] hardirqs last enabled at (19): [] __kmalloc+0x2fb/0x400 mm/slab.c:3729 hardirqs last disabled at (20): [] __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:108 [inline] hardirqs last disabled at (20): [] _raw_spin_lock_irqsave+0x66/0xc0 kernel/locking/spinlock.c:160 softirqs last enabled at (0): [] copy_process.part.0+0x12d0/0x71c0 kernel/fork.c:1734 softirqs last disabled at (0): [< (null)>] (null) Preemption disabled at: [< (null)>] (null) CPU: 0 PID: 9911 Comm: syz-executor.0 Tainted: G W 4.14.305-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x281 lib/dump_stack.c:58 ___might_sleep.cold+0x235/0x250 kernel/sched/core.c:6040 do_con_write+0xd0/0x19b0 drivers/tty/vt/vt.c:2245 con_write+0x21/0xa0 drivers/tty/vt/vt.c:2822 gsmld_write+0xbb/0x120 drivers/tty/n_gsm.c:2548 do_tty_write drivers/tty/tty_io.c:959 [inline] tty_write+0x410/0x740 drivers/tty/tty_io.c:1043 __vfs_write+0xe4/0x630 fs/read_write.c:480 vfs_write+0x17f/0x4d0 fs/read_write.c:544 SYSC_write fs/read_write.c:590 [inline] SyS_write+0xf2/0x210 fs/read_write.c:582 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x5e/0xd3 RIP: 0033:0x7f3af03ad0f9 RSP: 002b:00007f3aee8fe168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 00007f3af04cd050 RCX: 00007f3af03ad0f9 RDX: 000000000000000b RSI: 0000000020001200 RDI: 0000000000000003 RBP: 00007f3af0408ae9 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffdc4ca63bf R14: 00007f3aee8fe300 R15: 0000000000022000 BUG: sleeping function called from invalid context at drivers/tty/vt/vt.c:2245 in_atomic(): 1, irqs_disabled(): 1, pid: 10370, name: syz-executor.1 3 locks held by syz-executor.1/10370: #0: (&tty->ldisc_sem){++++}, at: [] tty_ldisc_ref_wait+0x22/0x80 drivers/tty/tty_ldisc.c:284 #1: (&tty->atomic_write_lock){+.+.}, at: [] tty_write_lock drivers/tty/tty_io.c:885 [inline] #1: (&tty->atomic_write_lock){+.+.}, at: [] do_tty_write drivers/tty/tty_io.c:908 [inline] #1: (&tty->atomic_write_lock){+.+.}, at: [] tty_write+0x22d/0x740 drivers/tty/tty_io.c:1043 #2: (&(&gsm->tx_lock)->rlock){....}, at: [] gsmld_write+0x5e/0x120 drivers/tty/n_gsm.c:2545 irq event stamp: 20 hardirqs last enabled at (19): [] slab_alloc mm/slab.c:3383 [inline] hardirqs last enabled at (19): [] __do_kmalloc mm/slab.c:3718 [inline] hardirqs last enabled at (19): [] __kmalloc+0x2fb/0x400 mm/slab.c:3729 hardirqs last disabled at (20): [] __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:108 [inline] hardirqs last disabled at (20): [] _raw_spin_lock_irqsave+0x66/0xc0 kernel/locking/spinlock.c:160 softirqs last enabled at (0): [] copy_process.part.0+0x12d0/0x71c0 kernel/fork.c:1734 softirqs last disabled at (0): [< (null)>] (null) Preemption disabled at: [< (null)>] (null) CPU: 1 PID: 10370 Comm: syz-executor.1 Tainted: G W 4.14.305-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x281 lib/dump_stack.c:58 ___might_sleep.cold+0x235/0x250 kernel/sched/core.c:6040 do_con_write+0xd0/0x19b0 drivers/tty/vt/vt.c:2245 con_write+0x21/0xa0 drivers/tty/vt/vt.c:2822 gsmld_write+0xbb/0x120 drivers/tty/n_gsm.c:2548 do_tty_write drivers/tty/tty_io.c:959 [inline] tty_write+0x410/0x740 drivers/tty/tty_io.c:1043 __vfs_write+0xe4/0x630 fs/read_write.c:480 BUG: scheduling while atomic: syz-executor.0/10377/0x00000002 3 locks held by syz-executor.0/10377: vfs_write+0x17f/0x4d0 fs/read_write.c:544 SYSC_write fs/read_write.c:590 [inline] SyS_write+0xf2/0x210 fs/read_write.c:582 #0: ( &tty->ldisc_sem do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 ){++++} entry_SYSCALL_64_after_hwframe+0x5e/0xd3 RIP: 0033:0x7fd59ed1c0f9 RSP: 002b:00007fd59d26d168 EFLAGS: 00000246 , at: [] tty_ldisc_ref_wait+0x22/0x80 drivers/tty/tty_ldisc.c:284 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 00007fd59ee3c050 RCX: 00007fd59ed1c0f9 #1: RDX: 000000000000000b RSI: 0000000020001200 RDI: 0000000000000003 ( RBP: 00007fd59ed77ae9 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffecf2bf1bf R14: 00007fd59d26d300 R15: 0000000000022000 BUG: scheduling while atomic: syz-executor.1/10370/0x00000002 &tty->atomic_write_lock 3 locks held by syz-executor.1/10370: ){+.+.} #0: , at: [] tty_write_lock drivers/tty/tty_io.c:885 [inline] , at: [] do_tty_write drivers/tty/tty_io.c:908 [inline] , at: [] tty_write+0x22d/0x740 drivers/tty/tty_io.c:1043 ( #2: &tty->ldisc_sem ( ){++++} &(&gsm->tx_lock)->rlock , at: [] tty_ldisc_ref_wait+0x22/0x80 drivers/tty/tty_ldisc.c:284 ){+.+.} #1: ( , at: [] gsmld_write+0x5e/0x120 drivers/tty/n_gsm.c:2545 &tty->atomic_write_lock){+.+.} Modules linked in: , at: [] tty_write_lock drivers/tty/tty_io.c:885 [inline] , at: [] do_tty_write drivers/tty/tty_io.c:908 [inline] , at: [] tty_write+0x22d/0x740 drivers/tty/tty_io.c:1043 #2: ( Preemption disabled at: &(&gsm->tx_lock)->rlock){+.+.} [< (null)>] (null) , at: [] gsmld_write+0x5e/0x120 drivers/tty/n_gsm.c:2545 Modules linked in: Preemption disabled at: [< (null)>] (null)