overlayfs: failed to resolve './bus': -2
overlayfs: failed to resolve './bus': -2
overlayfs: failed to resolve './bus': -2
overlayfs: failed to resolve './bus': -2
============================================
WARNING: possible recursive locking detected
4.19.211-syzkaller #0 Not tainted
--------------------------------------------
syz-executor.1/10216 is trying to acquire lock:
00000000fde54302 (&port_lock_key){-.-.}, at: uart_write+0x1ce/0x6f0 drivers/tty/serial/serial_core.c:591
but task is already holding lock:
00000000fde54302 (&port_lock_key){-.-.}, at: serial8250_handle_irq.part.0+0x21/0x3d0 drivers/tty/serial/8250/8250_port.c:1876
other info that might help us debug this:
Possible unsafe locking scenario:
CPU0
----
lock(&port_lock_key);
lock(&port_lock_key);
*** DEADLOCK ***
May be due to missing lock nesting notation
5 locks held by syz-executor.1/10216:
#0: 00000000f8a116f5 (&type->s_umount_key#60/1){+.+.}, at: alloc_super fs/super.c:226 [inline]
#0: 00000000f8a116f5 (&type->s_umount_key#60/1){+.+.}, at: sget_userns+0x20b/0xcd0 fs/super.c:519
#1: 00000000fc4c992f (console_lock){+.+.}, at: vprintk_func+0x79/0x180 kernel/printk/printk_safe.c:405
#2: 000000009ea3686a (&(&i->lock)->rlock){-.-.}, at: spin_lock include/linux/spinlock.h:329 [inline]
#2: 000000009ea3686a (&(&i->lock)->rlock){-.-.}, at: serial8250_interrupt+0x3a/0x240 drivers/tty/serial/8250/8250_core.c:115
#3: 00000000fde54302 (&port_lock_key){-.-.}, at: serial8250_handle_irq.part.0+0x21/0x3d0 drivers/tty/serial/8250/8250_port.c:1876
#4: 00000000a3fd65a9 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref+0x1d/0x80 drivers/tty/tty_ldisc.c:293
stack backtrace:
CPU: 1 PID: 10216 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
print_deadlock_bug kernel/locking/lockdep.c:1764 [inline]
check_deadlock kernel/locking/lockdep.c:1808 [inline]
validate_chain kernel/locking/lockdep.c:2404 [inline]
__lock_acquire.cold+0x121/0x57e kernel/locking/lockdep.c:3416
lock_acquire+0x170/0x3c0 kernel/locking/lockdep.c:3908
__raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline]
_raw_spin_lock_irqsave+0x8c/0xc0 kernel/locking/spinlock.c:152
uart_write+0x1ce/0x6f0 drivers/tty/serial/serial_core.c:591
n_hdlc_send_frames+0x278/0x470 drivers/tty/n_hdlc.c:403
n_hdlc_tty_wakeup+0xa0/0xc0 drivers/tty/n_hdlc.c:479
tty_wakeup+0xd4/0x110 drivers/tty/tty_io.c:534
tty_port_default_wakeup+0x26/0x40 drivers/tty/tty_port.c:50
serial8250_tx_chars+0x490/0xaf0 drivers/tty/serial/8250/8250_port.c:1813
serial8250_handle_irq.part.0+0x31f/0x3d0 drivers/tty/serial/8250/8250_port.c:1900
serial8250_handle_irq drivers/tty/serial/8250/8250_port.c:1873 [inline]
serial8250_default_handle_irq+0xae/0x220 drivers/tty/serial/8250/8250_port.c:1916
serial8250_interrupt+0x101/0x240 drivers/tty/serial/8250/8250_core.c:125
__handle_irq_event_percpu+0x27e/0x8e0 kernel/irq/handle.c:149
handle_irq_event_percpu kernel/irq/handle.c:189 [inline]
handle_irq_event+0x102/0x290 kernel/irq/handle.c:206
handle_edge_irq+0x260/0xcf0 kernel/irq/chip.c:800
generic_handle_irq_desc include/linux/irqdesc.h:155 [inline]
handle_irq+0x35/0x50 arch/x86/kernel/irq_64.c:87
do_IRQ+0x93/0x1c0 arch/x86/kernel/irq.c:246
common_interrupt+0xf/0xf arch/x86/entry/entry_64.S:670
RIP: 0010:ffs arch/x86/include/asm/bitops.h:416 [inline]
RIP: 0010:__do_softirq+0x22d/0x980 kernel/softirq.c:280
Code: c7 c0 98 82 f1 89 48 c1 e8 03 42 80 3c 38 00 0f 85 f6 06 00 00 48 83 3d 78 80 b1 01 00 0f 84 f7 05 00 00 fb 66 0f 1f 44 00 00 ff ff ff ff 48 c7 c3 c0 90 e0 89 0f bc 44 24 04 89 c2 83 c2 01
RSP: 0018:ffff8880ba107f30 EFLAGS: 00000286 ORIG_RAX: ffffffffffffffd2
RAX: 1ffffffff13e3053 RBX: ffff88803eca8340 RCX: 1ffff11007d95182
RDX: 0000000000000000 RSI: ffff88803eca8bf0 RDI: ffff88803eca8bc4
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: dffffc0000000000
invoke_softirq kernel/softirq.c:372 [inline]
irq_exit+0x215/0x260 kernel/softirq.c:412
exiting_irq arch/x86/include/asm/apic.h:536 [inline]
smp_apic_timer_interrupt+0x136/0x550 arch/x86/kernel/apic/apic.c:1098
apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:894
RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:789 [inline]
RIP: 0010:console_unlock+0xe7b/0x1110 kernel/printk/printk.c:2468
Code: ff df 48 c1 e8 03 80 3c 08 00 0f 85 66 02 00 00 48 83 3d cf c3 a3 08 00 0f 84 9e 00 00 00 e8 ac c6 14 00 48 8b 7c 24 30 57 9d <0f> 1f 44 00 00 e9 9b fc ff ff e8 96 c6 14 00 0f 0b e8 8f c6 14 00
RSP: 0018:ffff8880457af8a8 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13
RAX: ffff88803eca8340 RBX: 0000000000000200 RCX: dffffc0000000000
RDX: 0000000000000000 RSI: ffffffff814dbec4 RDI: 0000000000000293
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff8446efa0
R13: 0000000000000038 R14: 0000000000000000 R15: ffffffff8a6dd090
vprintk_emit+0x2d1/0x740 kernel/printk/printk.c:1965
vprintk_func+0x79/0x180 kernel/printk/printk_safe.c:405
printk+0xba/0xed kernel/printk/printk.c:2040
ovl_mount_dir_noesc.cold+0x8d/0xab fs/overlayfs/super.c:731
ovl_mount_dir+0x100/0x1c0 fs/overlayfs/super.c:758
ovl_get_upper fs/overlayfs/super.c:1039 [inline]
ovl_fill_super+0x95e/0x3f10 fs/overlayfs/super.c:1597
mount_nodev+0x60/0x110 fs/super.c:1204
mount_fs+0xa3/0x310 fs/super.c:1261
vfs_kern_mount.part.0+0x68/0x470 fs/namespace.c:961
vfs_kern_mount fs/namespace.c:951 [inline]
do_new_mount fs/namespace.c:2492 [inline]
do_mount+0x115c/0x2f50 fs/namespace.c:2822
ksys_mount+0xcf/0x130 fs/namespace.c:3038
__do_sys_mount fs/namespace.c:3052 [inline]
__se_sys_mount fs/namespace.c:3049 [inline]
__x64_sys_mount+0xba/0x150 fs/namespace.c:3049
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7f0384ec90c9
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f038343b168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00007f0384fe8f80 RCX: 00007f0384ec90c9
RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000
RBP: 00007f0384f24ae9 R08: 0000000020000340 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffe1e7d88ef R14: 00007f038343b300 R15: 0000000000022000
watchdog: BUG: soft lockup - CPU#0 stuck for 22s! [syz-executor.1:10206]
Modules linked in:
irq event stamp: 7286
hardirqs last enabled at (7285): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:160 [inline]
hardirqs last enabled at (7285): [] _raw_spin_unlock_irqrestore+0x79/0xe0 kernel/locking/spinlock.c:184
hardirqs last disabled at (7286): [] __schedule+0x1e1/0x2040 kernel/sched/core.c:3444
softirqs last enabled at (0): [] copy_process.part.0+0x15b9/0x8260 kernel/fork.c:1856
softirqs last disabled at (0): [<0000000000000000>] (null)
CPU: 0 PID: 10206 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
RIP: 0010:csd_lock_wait kernel/smp.c:108 [inline]
RIP: 0010:smp_call_function_single+0x1e0/0x420 kernel/smp.c:302
Code: 00 48 8b 4c 24 08 48 8b 54 24 10 48 8d 74 24 40 8b 7c 24 1c e8 a1 f9 ff ff 41 89 c5 eb 07 e8 e7 03 0a 00 f3 90 44 8b 64 24 58 <31> ff 41 83 e4 01 44 89 e6 e8 42 05 0a 00 45 85 e4 75 e1 e8 c8 03
RSP: 0018:ffff88803a64fa60 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13
RAX: ffff88804348a380 RBX: 1ffff110074c9f50 RCX: ffffffff8158819e
RDX: 0000000000000000 RSI: ffffffff81588189 RDI: 0000000000000005
RBP: ffff88803a64fb30 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000005 R11: 0000000000000000 R12: 0000000000000003
R13: 0000000000000000 R14: 0000000000000001 R15: ffff88803eca837c
FS: 0000555555b1b400(0000) GS:ffff8880ba000000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f31c55e5008 CR3: 00000000af78b000 CR4: 00000000003406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
task_function_call+0xe0/0x170 kernel/events/core.c:115
event_function_call+0x228/0x430 kernel/events/core.c:283
perf_remove_from_context+0x9b/0x1c0 kernel/events/core.c:2113
perf_event_release_kernel+0x169/0xcd0 kernel/events/core.c:4607
perf_release+0x33/0x40 kernel/events/core.c:4703
__fput+0x2ce/0x890 fs/file_table.c:278
task_work_run+0x148/0x1c0 kernel/task_work.c:113
tracehook_notify_resume include/linux/tracehook.h:193 [inline]
exit_to_usermode_loop+0x251/0x2a0 arch/x86/entry/common.c:167
prepare_exit_to_usermode arch/x86/entry/common.c:198 [inline]
syscall_return_slowpath arch/x86/entry/common.c:271 [inline]
do_syscall_64+0x538/0x620 arch/x86/entry/common.c:296
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7f0384e7af7b
Code: 0f 05 48 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 63 fc ff ff 8b 7c 24 0c 41 89 c0 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 44 89 c7 89 44 24 0c e8 a1 fc ff ff 8b 44
RSP: 002b:00007ffe1e7d8950 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007f0384e7af7b
RDX: 0000001b2f820000 RSI: 0000000000000000 RDI: 0000000000000003
RBP: 00007f0384fea980 R08: 0000000000000000 R09: 0000011e485f348f
R10: 001295dd8462c8e0 R11: 0000000000000293 R12: 00000000001101fe
R13: 00007ffe1e7d8a50 R14: 00007f0384fe9050 R15: 0000000000000032
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1 skipped: idling at native_halt+0xd/0x10 arch/x86/include/asm/irqflags.h:66
----------------
Code disassembly (best guess):
0: c7 c0 98 82 f1 89 mov $0x89f18298,%eax
6: 48 c1 e8 03 shr $0x3,%rax
a: 42 80 3c 38 00 cmpb $0x0,(%rax,%r15,1)
f: 0f 85 f6 06 00 00 jne 0x70b
15: 48 83 3d 78 80 b1 01 cmpq $0x0,0x1b18078(%rip) # 0x1b18095
1c: 00
1d: 0f 84 f7 05 00 00 je 0x61a
23: fb sti
24: 66 0f 1f 44 00 00 nopw 0x0(%rax,%rax,1)
* 2a: b8 ff ff ff ff mov $0xffffffff,%eax <-- trapping instruction
2f: 48 c7 c3 c0 90 e0 89 mov $0xffffffff89e090c0,%rbx
36: 0f bc 44 24 04 bsf 0x4(%rsp),%eax
3b: 89 c2 mov %eax,%edx
3d: 83 c2 01 add $0x1,%edx