Extracting prog: 1m13.321018574s
Minimizing prog: 11m32.080613387s
Simplifying prog options: 0s
Extracting C: 24.286778462s
Simplifying C: 5m16.207888497s
extracting reproducer from 1 programs
testing a last program of every proc
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prctl$PR_SCHED_CORE-mmap-mkdirat-mount-openat-write-write
detailed listing:
executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='off', 0x3)
write(r0, &(0x7f0000000180)='on\n', 0x3)
program crashed: possible deadlock in console_lock_spinning_enable
single: successfully extracted reproducer
found reproducer with 7 syscalls
minimizing guilty program
testing program (duration=40.368892593s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prctl$PR_SCHED_CORE-mmap-mkdirat-mount-openat-write
detailed listing:
executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='off', 0x3)
program did not crash
testing program (duration=40.368892593s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prctl$PR_SCHED_CORE-mmap-mkdirat-mount-openat-write
detailed listing:
executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='on\n', 0x3)
program did not crash
testing program (duration=40.368892593s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prctl$PR_SCHED_CORE-mmap-mkdirat-mount-write-write
detailed listing:
executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)='off', 0x3)
write(0xffffffffffffffff, &(0x7f0000000180)='on\n', 0x3)
program did not crash
testing program (duration=40.368892593s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prctl$PR_SCHED_CORE-mmap-mkdirat-openat-write-write
detailed listing:
executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='off', 0x3)
write(r0, &(0x7f0000000180)='on\n', 0x3)
program crashed: lost connection to test machine
ignore low priority crash: lost connection to test machine
testing program (duration=40.368892593s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prctl$PR_SCHED_CORE-mmap-mount-openat-write-write
detailed listing:
executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='off', 0x3)
write(r0, &(0x7f0000000180)='on\n', 0x3)
program did not crash
testing program (duration=40.368892593s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prctl$PR_SCHED_CORE-mkdirat-mount-openat-write-write
detailed listing:
executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='off', 0x3)
write(r0, &(0x7f0000000180)='on\n', 0x3)
program crashed: possible deadlock in console_lock_spinning_enable
testing program (duration=40.368892593s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-write-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='off', 0x3)
write(r0, &(0x7f0000000180)='on\n', 0x3)
program crashed: lost connection to test machine
ignore low priority crash: lost connection to test machine
testing program (duration=40.368892593s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prctl$PR_SCHED_CORE-mkdirat-mount-openat-write-write
detailed listing:
executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='off', 0x3)
write(r0, &(0x7f0000000180)='on\n', 0x3)
program did not crash
testing program (duration=40.368892593s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prctl$PR_SCHED_CORE-mkdirat-mount-openat-write-write
detailed listing:
executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='off', 0x3)
write(r0, &(0x7f0000000180)='on\n', 0x3)
program did not crash
testing program (duration=40.368892593s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prctl$PR_SCHED_CORE-mkdirat-mount-openat-write-write
detailed listing:
executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='off', 0x3)
write(r0, &(0x7f0000000180)='on\n', 0x3)
program crashed: lost connection to test machine
ignore low priority crash: lost connection to test machine
testing program (duration=40.368892593s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prctl$PR_SCHED_CORE-mkdirat-mount-openat-write-write
detailed listing:
executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r0, &(0x7f0000000140)='off', 0x3)
write(r0, &(0x7f0000000180)='on\n', 0x3)
program did not crash
testing program (duration=40.368892593s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prctl$PR_SCHED_CORE-mkdirat-mount-openat-write-write
detailed listing:
executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0)
write(r0, 0x0, 0x0)
write(r0, &(0x7f0000000180)='on\n', 0x3)
program did not crash
testing program (duration=40.368892593s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prctl$PR_SCHED_CORE-mkdirat-mount-openat-write-write
detailed listing:
executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140), 0x0)
write(r0, &(0x7f0000000180)='on\n', 0x3)
program crashed: lost connection to test machine
ignore low priority crash: lost connection to test machine
testing program (duration=40.368892593s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prctl$PR_SCHED_CORE-mkdirat-mount-openat-write-write
detailed listing:
executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='off', 0x3)
write(r0, 0x0, 0x0)
program did not crash
testing program (duration=40.368892593s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prctl$PR_SCHED_CORE-mkdirat-mount-openat-write-write
detailed listing:
executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='off', 0x3)
write(r0, &(0x7f0000000180), 0x0)
program did not crash
extracting C reproducer
testing compiled C program (duration=40.368892593s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prctl$PR_SCHED_CORE-mkdirat-mount-openat-write-write
program crashed: possible deadlock in console_lock_spinning_enable
simplifying C reproducer
testing compiled C program (duration=40.368892593s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prctl$PR_SCHED_CORE-mkdirat-mount-openat-write-write
program did not crash
testing compiled C program (duration=40.368892593s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prctl$PR_SCHED_CORE-mkdirat-mount-openat-write-write
program did not crash
testing compiled C program (duration=40.368892593s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prctl$PR_SCHED_CORE-mkdirat-mount-openat-write-write
program did not crash
testing compiled C program (duration=40.368892593s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prctl$PR_SCHED_CORE-mkdirat-mount-openat-write-write
program crashed: possible deadlock in console_lock_spinning_enable
testing compiled C program (duration=40.368892593s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prctl$PR_SCHED_CORE-mkdirat-mount-openat-write-write
program crashed: possible deadlock in console_lock_spinning_enable
testing compiled C program (duration=40.368892593s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prctl$PR_SCHED_CORE-mkdirat-mount-openat-write-write
program crashed: possible deadlock in console_lock_spinning_enable
testing compiled C program (duration=40.368892593s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prctl$PR_SCHED_CORE-mkdirat-mount-openat-write-write
program crashed: possible deadlock in console_lock_spinning_enable
testing compiled C program (duration=40.368892593s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prctl$PR_SCHED_CORE-mkdirat-mount-openat-write-write
program crashed: possible deadlock in console_lock_spinning_enable
testing program (duration=40.368892593s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prctl$PR_SCHED_CORE-mkdirat-mount-openat-write-write
detailed listing:
executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='off', 0x3)
write(r0, &(0x7f0000000180)='on\n', 0x3)
program crashed: possible deadlock in console_lock_spinning_enable
validation run: crashed=true
testing program (duration=40.368892593s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prctl$PR_SCHED_CORE-mkdirat-mount-openat-write-write
detailed listing:
executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='off', 0x3)
write(r0, &(0x7f0000000180)='on\n', 0x3)
program crashed: possible deadlock in console_lock_spinning_enable
validation run: crashed=true
testing program (duration=40.368892593s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prctl$PR_SCHED_CORE-mkdirat-mount-openat-write-write
detailed listing:
executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='off', 0x3)
write(r0, &(0x7f0000000180)='on\n', 0x3)
program crashed: possible deadlock in console_lock_spinning_enable
validation run: crashed=true
reproducing took 21m3.757526058s
repro crashed as (corrupted=false):
------------[ cut here ]------------
======================================================
WARNING: possible circular locking dependency detected
syzkaller #0 Not tainted
------------------------------------------------------
udevd/5749 is trying to acquire lock:
ffffffff8eaf3f60 (console_owner){....}-{0:0}, at: console_lock_spinning_enable+0x61/0x80 kernel/printk/printk.c:1902
but task is already holding lock:
ffff88802b23b660 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested kernel/sched/core.c:675 [inline]
ffff88802b23b660 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 kernel/sched/core.c:659
which lock already depends on the new lock.
the existing dependency chain (in reverse order) is:
-> #4 (&rq->__lock){-.-.}-{2:2}:
lock_acquire kernel/locking/lockdep.c:5868 [inline]
lock_acquire+0x1b9/0x370 kernel/locking/lockdep.c:5825
_raw_spin_lock_nested+0x31/0x40 kernel/locking/spinlock.c:382
raw_spin_rq_lock_nested+0x2c/0x140 kernel/sched/core.c:667
raw_spin_rq_lock kernel/sched/sched.h:1653 [inline]
_task_rq_lock+0xcf/0x500 kernel/sched/core.c:762
cgroup_move_task+0x81/0x320 kernel/sched/psi.c:1176
css_set_move_task+0x285/0x600 kernel/cgroup/cgroup.c:925
cgroup_post_fork+0x1f9/0x9a0 kernel/cgroup/cgroup.c:7009
copy_process+0x6b7a/0x8030 kernel/fork.c:2550
kernel_clone+0x176/0x9d0 kernel/fork.c:2748
user_mode_thread+0xcc/0x110 kernel/fork.c:2824
rest_init+0x21/0x260 init/main.c:682
start_kernel+0x48e/0x490 init/main.c:1175
x86_64_start_reservations+0x24/0x30 arch/x86/kernel/head64.c:310
x86_64_start_kernel+0x12b/0x130 arch/x86/kernel/head64.c:291
common_startup_64+0x13e/0x158
-> #3 (&p->pi_lock){-.-.}-{2:2}:
lock_acquire kernel/locking/lockdep.c:5868 [inline]
lock_acquire+0x1b9/0x370 kernel/locking/lockdep.c:5825
__raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:132 [inline]
_raw_spin_lock_irqsave+0x3a/0x60 kernel/locking/spinlock.c:166
class_raw_spinlock_irqsave_constructor include/linux/spinlock.h:571 [inline]
try_to_wake_up+0xbd/0x1c90 kernel/sched/core.c:4292
__wake_up_common+0x135/0x1f0 kernel/sched/wait.c:108
__wake_up_common_lock kernel/sched/wait.c:125 [inline]
__wake_up+0x31/0x60 kernel/sched/wait.c:146
tty_port_default_wakeup+0x47/0x60 drivers/tty/tty_port.c:67
serial8250_tx_chars+0x68f/0x860 drivers/tty/serial/8250/8250_port.c:1723
serial8250_handle_irq_locked+0x770/0x9a0 drivers/tty/serial/8250/8250_port.c:1837
serial8250_handle_irq.part.0+0xb4/0x530 drivers/tty/serial/8250/8250_port.c:1853
serial8250_handle_irq drivers/tty/serial/8250/8250_port.c:1849 [inline]
serial8250_default_handle_irq+0xc2/0x280 drivers/tty/serial/8250/8250_port.c:1867
serial8250_interrupt+0xf8/0x1b0 drivers/tty/serial/8250/8250_core.c:86
__handle_irq_event_percpu+0x232/0x880 kernel/irq/handle.c:209
handle_irq_event_percpu kernel/irq/handle.c:246 [inline]
handle_irq_event+0xab/0x1e0 kernel/irq/handle.c:263
handle_edge_irq+0x34c/0x950 kernel/irq/chip.c:859
generic_handle_irq_desc include/linux/irqdesc.h:188 [inline]
handle_irq arch/x86/kernel/irq.c:209 [inline]
call_irq_handler arch/x86/kernel/irq.c:265 [inline]
__common_interrupt+0xd8/0x2f0 arch/x86/kernel/irq.c:280
common_interrupt+0xb9/0xe0 arch/x86/kernel/irq.c:273
asm_common_interrupt+0x26/0x40 arch/x86/include/asm/idtentry.h:665
native_safe_halt arch/x86/include/asm/irqflags.h:48 [inline]
pv_native_safe_halt+0xf/0x20 arch/x86/kernel/paravirt.c:63
arch_safe_halt arch/x86/include/asm/paravirt.h:62 [inline]
default_idle+0x9/0x10 arch/x86/kernel/process.c:768
default_idle_call+0x6c/0xb0 kernel/sched/idle.c:122
cpuidle_idle_call kernel/sched/idle.c:199 [inline]
do_idle+0x3a7/0x5b0 kernel/sched/idle.c:355
cpu_startup_entry+0x4f/0x60 kernel/sched/idle.c:454
start_secondary+0x21d/0x2d0 arch/x86/kernel/smpboot.c:312
common_startup_64+0x13e/0x158
-> #2 (&tty->write_wait){-...}-{3:3}:
lock_acquire kernel/locking/lockdep.c:5868 [inline]
lock_acquire+0x1b9/0x370 kernel/locking/lockdep.c:5825
__raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:132 [inline]
_raw_spin_lock_irqsave+0x3a/0x60 kernel/locking/spinlock.c:166
__wake_up_common_lock kernel/sched/wait.c:124 [inline]
__wake_up+0x1c/0x60 kernel/sched/wait.c:146
tty_port_default_wakeup+0x47/0x60 drivers/tty/tty_port.c:67
serial8250_tx_chars+0x68f/0x860 drivers/tty/serial/8250/8250_port.c:1723
__start_tx+0x3e4/0x490 drivers/tty/serial/8250/8250_port.c:1430
serial8250_start_tx+0x368/0x540 drivers/tty/serial/8250/8250_port.c:1539
__uart_start+0x295/0x510 drivers/tty/serial/serial_core.c:161
uart_write+0x211/0xb20 drivers/tty/serial/serial_core.c:629
process_output_block drivers/tty/n_tty.c:557 [inline]
n_tty_write+0x431/0x1160 drivers/tty/n_tty.c:2366
iterate_tty_write drivers/tty/tty_io.c:1006 [inline]
file_tty_write.isra.0+0x4d2/0x890 drivers/tty/tty_io.c:1081
tty_write drivers/tty/tty_io.c:1102 [inline]
redirected_tty_write drivers/tty/tty_io.c:1125 [inline]
redirected_tty_write+0xd4/0x120 drivers/tty/tty_io.c:1105
new_sync_write fs/read_write.c:595 [inline]
vfs_write+0x6ac/0x1050 fs/read_write.c:687
ksys_write+0x12a/0x250 fs/read_write.c:739
do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
do_syscall_64+0x115/0x840 arch/x86/entry/syscall_64.c:94
entry_SYSCALL_64_after_hwframe+0x77/0x7f
-> #1 (&port_lock_key){-...}-{3:3}:
lock_acquire kernel/locking/lockdep.c:5868 [inline]
lock_acquire+0x1b9/0x370 kernel/locking/lockdep.c:5825
__raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:132 [inline]
_raw_spin_lock_irqsave+0x3a/0x60 kernel/locking/spinlock.c:166
uart_port_lock_irqsave include/linux/serial_core.h:719 [inline]
serial8250_console_write+0x177/0x1a50 drivers/tty/serial/8250/8250_port.c:3344
console_emit_next_record kernel/printk/printk.c:3183 [inline]
console_flush_one_record+0x790/0xe50 kernel/printk/printk.c:3269
console_flush_all kernel/printk/printk.c:3343 [inline]
__console_flush_and_unlock kernel/printk/printk.c:3373 [inline]
console_unlock+0x103/0x260 kernel/printk/printk.c:3413
vprintk_emit+0x407/0x6b0 kernel/printk/printk.c:2479
_printk+0xcf/0x110 kernel/printk/printk.c:2504
register_console.cold+0xc0/0x248 kernel/printk/printk.c:4208
univ8250_console_init+0x6f/0x80 drivers/tty/serial/8250/8250_core.c:515
console_init+0x3d5/0x5b0 kernel/printk/printk.c:4407
start_kernel+0x314/0x490 init/main.c:1112
x86_64_start_reservations+0x24/0x30 arch/x86/kernel/head64.c:310
x86_64_start_kernel+0x12b/0x130 arch/x86/kernel/head64.c:291
common_startup_64+0x13e/0x158
-> #0 (console_owner){....}-{0:0}:
check_prev_add+0xeb/0xe60 kernel/locking/lockdep.c:3165
check_prevs_add kernel/locking/lockdep.c:3284 [inline]
validate_chain kernel/locking/lockdep.c:3908 [inline]
__lock_acquire+0x136c/0x1a40 kernel/locking/lockdep.c:5237
lock_acquire kernel/locking/lockdep.c:5868 [inline]
lock_acquire+0x1b9/0x370 kernel/locking/lockdep.c:5825
console_lock_spinning_enable+0x72/0x80 kernel/printk/printk.c:1902
console_emit_next_record kernel/printk/printk.c:3177 [inline]
console_flush_one_record+0x739/0xe50 kernel/printk/printk.c:3269
console_flush_all kernel/printk/printk.c:3343 [inline]
__console_flush_and_unlock kernel/printk/printk.c:3373 [inline]
console_unlock+0x103/0x260 kernel/printk/printk.c:3413
vprintk_emit+0x407/0x6b0 kernel/printk/printk.c:2479
_printk+0xcf/0x110 kernel/printk/printk.c:2504
__report_bug.cold+0x34/0x141 lib/bug.c:248
report_bug+0xb2/0x220 lib/bug.c:286
handle_bug+0x16a/0x2a0 arch/x86/kernel/traps.c:436
exc_invalid_op+0x17/0x50 arch/x86/kernel/traps.c:490
asm_exc_invalid_op+0x1a/0x20 arch/x86/include/asm/idtentry.h:593
lockdep_assert_rq_held kernel/sched/sched.h:1641 [inline]
lockdep_assert_rq_held kernel/sched/sched.h:1638 [inline]
update_rq_clock+0x40a/0xd20 kernel/sched/core.c:865
pick_next_task kernel/sched/core.c:6338 [inline]
__schedule+0x1e2d/0x6730 kernel/sched/core.c:7149
preempt_schedule_irq+0x50/0x90 kernel/sched/core.c:7556
irqentry_exit_to_kernel_mode_preempt include/linux/irq-entry-common.h:468 [inline]
irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:539 [inline]
irqentry_exit+0x205/0xa00 kernel/entry/common.c:167
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674
check_kcov_mode kernel/kcov.c:185 [inline]
write_comp_data+0x40/0x90 kernel/kcov.c:246
rcu_read_lock include/linux/rcupdate.h:841 [inline]
__d_lookup+0x94/0x4a0 fs/dcache.c:2610
d_lookup+0xba/0x190 fs/dcache.c:2559
lookup_dcache+0x21/0x170 fs/namei.c:1768
lookup_one_qstr_excl+0x26/0x250 fs/namei.c:1797
__start_dirop fs/namei.c:2920 [inline]
start_dirop fs/namei.c:2942 [inline]
filename_unlinkat+0x275/0x730 fs/namei.c:5566
__do_sys_unlink fs/namei.c:5620 [inline]
__se_sys_unlink fs/namei.c:5617 [inline]
__x64_sys_unlink+0x46/0x70 fs/namei.c:5617
do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
do_syscall_64+0x115/0x840 arch/x86/entry/syscall_64.c:94
entry_SYSCALL_64_after_hwframe+0x77/0x7f
other info that might help us debug this:
Chain exists of:
console_owner --> &p->pi_lock --> &rq->__lock
Possible unsafe locking scenario:
CPU0 CPU1
---- ----
lock(&rq->__lock);
lock(&p->pi_lock);
lock(&rq->__lock);
lock(console_owner);
*** DEADLOCK ***
6 locks held by udevd/5749:
#0: ffff8880219cc450 (sb_writers#5){.+.+}-{0:0}, at: filename_unlinkat+0x1ad/0x730 fs/namei.c:5562
#1: ffff88804687ef18 (&type->i_mutex_dir_key#5/1){+.+.}-{4:4}, at: inode_lock_nested include/linux/fs.h:1069 [inline]
#1: ffff88804687ef18 (&type->i_mutex_dir_key#5/1){+.+.}-{4:4}, at: __start_dirop fs/namei.c:2918 [inline]
#1: ffff88804687ef18 (&type->i_mutex_dir_key#5/1){+.+.}-{4:4}, at: start_dirop fs/namei.c:2942 [inline]
#1: ffff88804687ef18 (&type->i_mutex_dir_key#5/1){+.+.}-{4:4}, at: filename_unlinkat+0x262/0x730 fs/namei.c:5566
#2: ffffffff8ebe8000 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:300 [inline]
#2: ffffffff8ebe8000 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:840 [inline]
#2: ffffffff8ebe8000 (rcu_read_lock){....}-{1:3}, at: __d_lookup+0x73/0x4a0 fs/dcache.c:2610
#3: ffff88802b23b660 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested kernel/sched/core.c:675 [inline]
#3: ffff88802b23b660 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 kernel/sched/core.c:659
#4: ffffffff8ebd43a0 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x110 kernel/printk/printk.c:2504
#5: ffffffff8ebd4418 (console_srcu){....}-{0:0}, at: rcu_try_lock_acquire include/linux/rcupdate.h:305 [inline]
#5: ffffffff8ebd4418 (console_srcu){....}-{0:0}, at: srcu_read_lock_nmisafe include/linux/srcu.h:428 [inline]
#5: ffffffff8ebd4418 (console_srcu){....}-{0:0}, at: console_srcu_read_lock kernel/printk/printk.c:291 [inline]
#5: ffffffff8ebd4418 (console_srcu){....}-{0:0}, at: console_flush_one_record+0xfd/0xe50 kernel/printk/printk.c:3246
stack backtrace:
CPU: 0 UID: 0 PID: 5749 Comm: udevd Not tainted syzkaller #0 PREEMPT(full)
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
Call Trace:
__dump_stack lib/dump_stack.c:94 [inline]
dump_stack_lvl+0x100/0x190 lib/dump_stack.c:120
print_circular_bug.cold+0x178/0x1c7 kernel/locking/lockdep.c:2043
check_noncircular+0x146/0x160 kernel/locking/lockdep.c:2175
check_prev_add+0xeb/0xe60 kernel/locking/lockdep.c:3165
check_prevs_add kernel/locking/lockdep.c:3284 [inline]
validate_chain kernel/locking/lockdep.c:3908 [inline]
__lock_acquire+0x136c/0x1a40 kernel/locking/lockdep.c:5237
lock_acquire kernel/locking/lockdep.c:5868 [inline]
lock_acquire+0x1b9/0x370 kernel/locking/lockdep.c:5825
console_lock_spinning_enable+0x72/0x80 kernel/printk/printk.c:1902
console_emit_next_record kernel/printk/printk.c:3177 [inline]
console_flush_one_record+0x739/0xe50 kernel/printk/printk.c:3269
console_flush_all kernel/printk/printk.c:3343 [inline]
__console_flush_and_unlock kernel/printk/printk.c:3373 [inline]
console_unlock+0x103/0x260 kernel/printk/printk.c:3413
vprintk_emit+0x407/0x6b0 kernel/printk/printk.c:2479
_printk+0xcf/0x110 kernel/printk/printk.c:2504
__report_bug.cold+0x34/0x141 lib/bug.c:248
report_bug+0xb2/0x220 lib/bug.c:286
handle_bug+0x16a/0x2a0 arch/x86/kernel/traps.c:436
exc_invalid_op+0x17/0x50 arch/x86/kernel/traps.c:490
asm_exc_invalid_op+0x1a/0x20 arch/x86/include/asm/idtentry.h:593
RIP: 0010:lockdep_assert_rq_held kernel/sched/sched.h:1641 [inline]
RIP: 0010:lockdep_assert_rq_held kernel/sched/sched.h:1638 [inline]
RIP: 0010:update_rq_clock+0x40a/0xd20 kernel/sched/core.c:865
Code: ab c8 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 58 71 e5 09 a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 c0 0b 00 00 48 b8 00 00 00 00 00
RSP: 0018:ffffc900049ffa20 EFLAGS: 00010046
RAX: 0000000000000000 RBX: ffff88802b33b600 RCX: 0000000000000001
RDX: 0000000000000046 RSI: ffffffff8e17ce3f RDI: ffffffff8c3fe580
RBP: ffffc900049ffbc8 R08: 0000000000000001 R09: 0000000000000001
R10: ffffffff9121bad7 R11: 0000000000000000 R12: ffffffff9121ee84
R13: ffff88802b33c4e0 R14: ffff888000748000 R15: ffff88802b23c198
pick_next_task kernel/sched/core.c:6338 [inline]
__schedule+0x1e2d/0x6730 kernel/sched/core.c:7149
preempt_schedule_irq+0x50/0x90 kernel/sched/core.c:7556
irqentry_exit_to_kernel_mode_preempt include/linux/irq-entry-common.h:468 [inline]
irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:539 [inline]
irqentry_exit+0x205/0xa00 kernel/entry/common.c:167
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674
RIP: 0010:write_comp_data+0x40/0x90 kernel/kcov.c:246
Code: 59 12 a9 00 01 ff 00 74 1b f6 c4 01 74 07 a9 00 00 ff 00 74 05 c3 cc cc cc cc 8b 87 24 17 00 00 85 c0 74 f1 8b 87 f8 16 00 00 <83> f8 03 75 e6 48 8b 87 00 17 00 00 8b bf fc 16 00 00 48 8b 30 48
RSP: 0018:ffffc900049ffce8 EFLAGS: 00000246
RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff82953664
RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff8880263b4a80
RBP: ffffc900003b9570 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000000 R12: 00000000dcab8160
R13: 0000000000000ce0 R14: ffff88802adeb490 R15: 0000000000000000
rcu_read_lock include/linux/rcupdate.h:841 [inline]
__d_lookup+0x94/0x4a0 fs/dcache.c:2610
d_lookup+0xba/0x190 fs/dcache.c:2559
lookup_dcache+0x21/0x170 fs/namei.c:1768
lookup_one_qstr_excl+0x26/0x250 fs/namei.c:1797
__start_dirop fs/namei.c:2920 [inline]
start_dirop fs/namei.c:2942 [inline]
filename_unlinkat+0x275/0x730 fs/namei.c:5566
__do_sys_unlink fs/namei.c:5620 [inline]
__se_sys_unlink fs/namei.c:5617 [inline]
__x64_sys_unlink+0x46/0x70 fs/namei.c:5617
do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
do_syscall_64+0x115/0x840 arch/x86/entry/syscall_64.c:94
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fcb6dd15937
Code: 00 00 e9 a9 fd ff ff 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 5f 00 00 00 0f 05 c3 0f 1f 84 00 00 00 00 00 b8 57 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 91 b4 0d 00 f7 d8 64 89 02 b8
RSP: 002b:00007fffb4ffe4e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000057
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcb6dd15937
RDX: 0000000000000000 RSI: 00000000000003e1 RDI: 00007fffb4ffe500
RBP: 000055c62812f980 R08: 0000000000000000 R09: 0000000000000020
R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffb4ffe500
R13: 000055c627fec630 R14: 000055c5ed9ac100 R15: 000055c5ed9ac140
debug_locks && !(lock_is_held(&(__rq_lockp(rq))->dep_map) != 0)
WARNING: kernel/sched/sched.h:1641 at lockdep_assert_rq_held kernel/sched/sched.h:1641 [inline], CPU#0: udevd/5749
WARNING: kernel/sched/sched.h:1641 at lockdep_assert_rq_held kernel/sched/sched.h:1638 [inline], CPU#0: udevd/5749
WARNING: kernel/sched/sched.h:1641 at update_rq_clock+0x40a/0xd20 kernel/sched/core.c:865, CPU#0: udevd/5749
Modules linked in:
CPU: 0 UID: 0 PID: 5749 Comm: udevd Not tainted syzkaller #0 PREEMPT(full)
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
RIP: 0010:lockdep_assert_rq_held kernel/sched/sched.h:1641 [inline]
RIP: 0010:lockdep_assert_rq_held kernel/sched/sched.h:1638 [inline]
RIP: 0010:update_rq_clock+0x40a/0xd20 kernel/sched/core.c:865
Code: ab c8 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 58 71 e5 09 a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 c0 0b 00 00 48 b8 00 00 00 00 00
RSP: 0018:ffffc900049ffa20 EFLAGS: 00010046
RAX: 0000000000000000 RBX: ffff88802b33b600 RCX: 0000000000000001
RDX: 0000000000000046 RSI: ffffffff8e17ce3f RDI: ffffffff8c3fe580
RBP: ffffc900049ffbc8 R08: 0000000000000001 R09: 0000000000000001
R10: ffffffff9121bad7 R11: 0000000000000000 R12: ffffffff9121ee84
R13: ffff88802b33c4e0 R14: ffff888000748000 R15: ffff88802b23c198
FS: 00007fcb6e4b2880(0000) GS:ffff888096bf3000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fcb6db446f1 CR3: 0000000054b48000 CR4: 0000000000352ef0
Call Trace:
pick_next_task kernel/sched/core.c:6338 [inline]
__schedule+0x1e2d/0x6730 kernel/sched/core.c:7149
preempt_schedule_irq+0x50/0x90 kernel/sched/core.c:7556
irqentry_exit_to_kernel_mode_preempt include/linux/irq-entry-common.h:468 [inline]
irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:539 [inline]
irqentry_exit+0x205/0xa00 kernel/entry/common.c:167
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674
RIP: 0010:write_comp_data+0x40/0x90 kernel/kcov.c:246
Code: 59 12 a9 00 01 ff 00 74 1b f6 c4 01 74 07 a9 00 00 ff 00 74 05 c3 cc cc cc cc 8b 87 24 17 00 00 85 c0 74 f1 8b 87 f8 16 00 00 <83> f8 03 75 e6 48 8b 87 00 17 00 00 8b bf fc 16 00 00 48 8b 30 48
RSP: 0018:ffffc900049ffce8 EFLAGS: 00000246
RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff82953664
RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff8880263b4a80
RBP: ffffc900003b9570 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000000 R12: 00000000dcab8160
R13: 0000000000000ce0 R14: ffff88802adeb490 R15: 0000000000000000
rcu_read_lock include/linux/rcupdate.h:841 [inline]
__d_lookup+0x94/0x4a0 fs/dcache.c:2610
d_lookup+0xba/0x190 fs/dcache.c:2559
lookup_dcache+0x21/0x170 fs/namei.c:1768
lookup_one_qstr_excl+0x26/0x250 fs/namei.c:1797
__start_dirop fs/namei.c:2920 [inline]
start_dirop fs/namei.c:2942 [inline]
filename_unlinkat+0x275/0x730 fs/namei.c:5566
__do_sys_unlink fs/namei.c:5620 [inline]
__se_sys_unlink fs/namei.c:5617 [inline]
__x64_sys_unlink+0x46/0x70 fs/namei.c:5617
do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
do_syscall_64+0x115/0x840 arch/x86/entry/syscall_64.c:94
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fcb6dd15937
Code: 00 00 e9 a9 fd ff ff 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 5f 00 00 00 0f 05 c3 0f 1f 84 00 00 00 00 00 b8 57 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 91 b4 0d 00 f7 d8 64 89 02 b8
RSP: 002b:00007fffb4ffe4e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000057
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcb6dd15937
RDX: 0000000000000000 RSI: 00000000000003e1 RDI: 00007fffb4ffe500
RBP: 000055c62812f980 R08: 0000000000000000 R09: 0000000000000020
R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffb4ffe500
R13: 000055c627fec630 R14: 000055c5ed9ac100 R15: 000055c5ed9ac140
----------------
Code disassembly (best guess):
0: 59 pop %rcx
1: 12 a9 00 01 ff 00 adc 0xff0100(%rcx),%ch
7: 74 1b je 0x24
9: f6 c4 01 test $0x1,%ah
c: 74 07 je 0x15
e: a9 00 00 ff 00 test $0xff0000,%eax
13: 74 05 je 0x1a
15: c3 ret
16: cc int3
17: cc int3
18: cc int3
19: cc int3
1a: 8b 87 24 17 00 00 mov 0x1724(%rdi),%eax
20: 85 c0 test %eax,%eax
22: 74 f1 je 0x15
24: 8b 87 f8 16 00 00 mov 0x16f8(%rdi),%eax
* 2a: 83 f8 03 cmp $0x3,%eax <-- trapping instruction
2d: 75 e6 jne 0x15
2f: 48 8b 87 00 17 00 00 mov 0x1700(%rdi),%rax
36: 8b bf fc 16 00 00 mov 0x16fc(%rdi),%edi
3c: 48 8b 30 mov (%rax),%rsi
3f: 48 rex.W
final repro crashed as (corrupted=false):
------------[ cut here ]------------
======================================================
WARNING: possible circular locking dependency detected
syzkaller #0 Not tainted
------------------------------------------------------
udevd/5749 is trying to acquire lock:
ffffffff8eaf3f60 (console_owner){....}-{0:0}, at: console_lock_spinning_enable+0x61/0x80 kernel/printk/printk.c:1902
but task is already holding lock:
ffff88802b23b660 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested kernel/sched/core.c:675 [inline]
ffff88802b23b660 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 kernel/sched/core.c:659
which lock already depends on the new lock.
the existing dependency chain (in reverse order) is:
-> #4 (&rq->__lock){-.-.}-{2:2}:
lock_acquire kernel/locking/lockdep.c:5868 [inline]
lock_acquire+0x1b9/0x370 kernel/locking/lockdep.c:5825
_raw_spin_lock_nested+0x31/0x40 kernel/locking/spinlock.c:382
raw_spin_rq_lock_nested+0x2c/0x140 kernel/sched/core.c:667
raw_spin_rq_lock kernel/sched/sched.h:1653 [inline]
_task_rq_lock+0xcf/0x500 kernel/sched/core.c:762
cgroup_move_task+0x81/0x320 kernel/sched/psi.c:1176
css_set_move_task+0x285/0x600 kernel/cgroup/cgroup.c:925
cgroup_post_fork+0x1f9/0x9a0 kernel/cgroup/cgroup.c:7009
copy_process+0x6b7a/0x8030 kernel/fork.c:2550
kernel_clone+0x176/0x9d0 kernel/fork.c:2748
user_mode_thread+0xcc/0x110 kernel/fork.c:2824
rest_init+0x21/0x260 init/main.c:682
start_kernel+0x48e/0x490 init/main.c:1175
x86_64_start_reservations+0x24/0x30 arch/x86/kernel/head64.c:310
x86_64_start_kernel+0x12b/0x130 arch/x86/kernel/head64.c:291
common_startup_64+0x13e/0x158
-> #3 (&p->pi_lock){-.-.}-{2:2}:
lock_acquire kernel/locking/lockdep.c:5868 [inline]
lock_acquire+0x1b9/0x370 kernel/locking/lockdep.c:5825
__raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:132 [inline]
_raw_spin_lock_irqsave+0x3a/0x60 kernel/locking/spinlock.c:166
class_raw_spinlock_irqsave_constructor include/linux/spinlock.h:571 [inline]
try_to_wake_up+0xbd/0x1c90 kernel/sched/core.c:4292
__wake_up_common+0x135/0x1f0 kernel/sched/wait.c:108
__wake_up_common_lock kernel/sched/wait.c:125 [inline]
__wake_up+0x31/0x60 kernel/sched/wait.c:146
tty_port_default_wakeup+0x47/0x60 drivers/tty/tty_port.c:67
serial8250_tx_chars+0x68f/0x860 drivers/tty/serial/8250/8250_port.c:1723
serial8250_handle_irq_locked+0x770/0x9a0 drivers/tty/serial/8250/8250_port.c:1837
serial8250_handle_irq.part.0+0xb4/0x530 drivers/tty/serial/8250/8250_port.c:1853
serial8250_handle_irq drivers/tty/serial/8250/8250_port.c:1849 [inline]
serial8250_default_handle_irq+0xc2/0x280 drivers/tty/serial/8250/8250_port.c:1867
serial8250_interrupt+0xf8/0x1b0 drivers/tty/serial/8250/8250_core.c:86
__handle_irq_event_percpu+0x232/0x880 kernel/irq/handle.c:209
handle_irq_event_percpu kernel/irq/handle.c:246 [inline]
handle_irq_event+0xab/0x1e0 kernel/irq/handle.c:263
handle_edge_irq+0x34c/0x950 kernel/irq/chip.c:859
generic_handle_irq_desc include/linux/irqdesc.h:188 [inline]
handle_irq arch/x86/kernel/irq.c:209 [inline]
call_irq_handler arch/x86/kernel/irq.c:265 [inline]
__common_interrupt+0xd8/0x2f0 arch/x86/kernel/irq.c:280
common_interrupt+0xb9/0xe0 arch/x86/kernel/irq.c:273
asm_common_interrupt+0x26/0x40 arch/x86/include/asm/idtentry.h:665
native_safe_halt arch/x86/include/asm/irqflags.h:48 [inline]
pv_native_safe_halt+0xf/0x20 arch/x86/kernel/paravirt.c:63
arch_safe_halt arch/x86/include/asm/paravirt.h:62 [inline]
default_idle+0x9/0x10 arch/x86/kernel/process.c:768
default_idle_call+0x6c/0xb0 kernel/sched/idle.c:122
cpuidle_idle_call kernel/sched/idle.c:199 [inline]
do_idle+0x3a7/0x5b0 kernel/sched/idle.c:355
cpu_startup_entry+0x4f/0x60 kernel/sched/idle.c:454
start_secondary+0x21d/0x2d0 arch/x86/kernel/smpboot.c:312
common_startup_64+0x13e/0x158
-> #2 (&tty->write_wait){-...}-{3:3}:
lock_acquire kernel/locking/lockdep.c:5868 [inline]
lock_acquire+0x1b9/0x370 kernel/locking/lockdep.c:5825
__raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:132 [inline]
_raw_spin_lock_irqsave+0x3a/0x60 kernel/locking/spinlock.c:166
__wake_up_common_lock kernel/sched/wait.c:124 [inline]
__wake_up+0x1c/0x60 kernel/sched/wait.c:146
tty_port_default_wakeup+0x47/0x60 drivers/tty/tty_port.c:67
serial8250_tx_chars+0x68f/0x860 drivers/tty/serial/8250/8250_port.c:1723
__start_tx+0x3e4/0x490 drivers/tty/serial/8250/8250_port.c:1430
serial8250_start_tx+0x368/0x540 drivers/tty/serial/8250/8250_port.c:1539
__uart_start+0x295/0x510 drivers/tty/serial/serial_core.c:161
uart_write+0x211/0xb20 drivers/tty/serial/serial_core.c:629
process_output_block drivers/tty/n_tty.c:557 [inline]
n_tty_write+0x431/0x1160 drivers/tty/n_tty.c:2366
iterate_tty_write drivers/tty/tty_io.c:1006 [inline]
file_tty_write.isra.0+0x4d2/0x890 drivers/tty/tty_io.c:1081
tty_write drivers/tty/tty_io.c:1102 [inline]
redirected_tty_write drivers/tty/tty_io.c:1125 [inline]
redirected_tty_write+0xd4/0x120 drivers/tty/tty_io.c:1105
new_sync_write fs/read_write.c:595 [inline]
vfs_write+0x6ac/0x1050 fs/read_write.c:687
ksys_write+0x12a/0x250 fs/read_write.c:739
do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
do_syscall_64+0x115/0x840 arch/x86/entry/syscall_64.c:94
entry_SYSCALL_64_after_hwframe+0x77/0x7f
-> #1 (&port_lock_key){-...}-{3:3}:
lock_acquire kernel/locking/lockdep.c:5868 [inline]
lock_acquire+0x1b9/0x370 kernel/locking/lockdep.c:5825
__raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:132 [inline]
_raw_spin_lock_irqsave+0x3a/0x60 kernel/locking/spinlock.c:166
uart_port_lock_irqsave include/linux/serial_core.h:719 [inline]
serial8250_console_write+0x177/0x1a50 drivers/tty/serial/8250/8250_port.c:3344
console_emit_next_record kernel/printk/printk.c:3183 [inline]
console_flush_one_record+0x790/0xe50 kernel/printk/printk.c:3269
console_flush_all kernel/printk/printk.c:3343 [inline]
__console_flush_and_unlock kernel/printk/printk.c:3373 [inline]
console_unlock+0x103/0x260 kernel/printk/printk.c:3413
vprintk_emit+0x407/0x6b0 kernel/printk/printk.c:2479
_printk+0xcf/0x110 kernel/printk/printk.c:2504
register_console.cold+0xc0/0x248 kernel/printk/printk.c:4208
univ8250_console_init+0x6f/0x80 drivers/tty/serial/8250/8250_core.c:515
console_init+0x3d5/0x5b0 kernel/printk/printk.c:4407
start_kernel+0x314/0x490 init/main.c:1112
x86_64_start_reservations+0x24/0x30 arch/x86/kernel/head64.c:310
x86_64_start_kernel+0x12b/0x130 arch/x86/kernel/head64.c:291
common_startup_64+0x13e/0x158
-> #0 (console_owner){....}-{0:0}:
check_prev_add+0xeb/0xe60 kernel/locking/lockdep.c:3165
check_prevs_add kernel/locking/lockdep.c:3284 [inline]
validate_chain kernel/locking/lockdep.c:3908 [inline]
__lock_acquire+0x136c/0x1a40 kernel/locking/lockdep.c:5237
lock_acquire kernel/locking/lockdep.c:5868 [inline]
lock_acquire+0x1b9/0x370 kernel/locking/lockdep.c:5825
console_lock_spinning_enable+0x72/0x80 kernel/printk/printk.c:1902
console_emit_next_record kernel/printk/printk.c:3177 [inline]
console_flush_one_record+0x739/0xe50 kernel/printk/printk.c:3269
console_flush_all kernel/printk/printk.c:3343 [inline]
__console_flush_and_unlock kernel/printk/printk.c:3373 [inline]
console_unlock+0x103/0x260 kernel/printk/printk.c:3413
vprintk_emit+0x407/0x6b0 kernel/printk/printk.c:2479
_printk+0xcf/0x110 kernel/printk/printk.c:2504
__report_bug.cold+0x34/0x141 lib/bug.c:248
report_bug+0xb2/0x220 lib/bug.c:286
handle_bug+0x16a/0x2a0 arch/x86/kernel/traps.c:436
exc_invalid_op+0x17/0x50 arch/x86/kernel/traps.c:490
asm_exc_invalid_op+0x1a/0x20 arch/x86/include/asm/idtentry.h:593
lockdep_assert_rq_held kernel/sched/sched.h:1641 [inline]
lockdep_assert_rq_held kernel/sched/sched.h:1638 [inline]
update_rq_clock+0x40a/0xd20 kernel/sched/core.c:865
pick_next_task kernel/sched/core.c:6338 [inline]
__schedule+0x1e2d/0x6730 kernel/sched/core.c:7149
preempt_schedule_irq+0x50/0x90 kernel/sched/core.c:7556
irqentry_exit_to_kernel_mode_preempt include/linux/irq-entry-common.h:468 [inline]
irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:539 [inline]
irqentry_exit+0x205/0xa00 kernel/entry/common.c:167
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674
check_kcov_mode kernel/kcov.c:185 [inline]
write_comp_data+0x40/0x90 kernel/kcov.c:246
rcu_read_lock include/linux/rcupdate.h:841 [inline]
__d_lookup+0x94/0x4a0 fs/dcache.c:2610
d_lookup+0xba/0x190 fs/dcache.c:2559
lookup_dcache+0x21/0x170 fs/namei.c:1768
lookup_one_qstr_excl+0x26/0x250 fs/namei.c:1797
__start_dirop fs/namei.c:2920 [inline]
start_dirop fs/namei.c:2942 [inline]
filename_unlinkat+0x275/0x730 fs/namei.c:5566
__do_sys_unlink fs/namei.c:5620 [inline]
__se_sys_unlink fs/namei.c:5617 [inline]
__x64_sys_unlink+0x46/0x70 fs/namei.c:5617
do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
do_syscall_64+0x115/0x840 arch/x86/entry/syscall_64.c:94
entry_SYSCALL_64_after_hwframe+0x77/0x7f
other info that might help us debug this:
Chain exists of:
console_owner --> &p->pi_lock --> &rq->__lock
Possible unsafe locking scenario:
CPU0 CPU1
---- ----
lock(&rq->__lock);
lock(&p->pi_lock);
lock(&rq->__lock);
lock(console_owner);
*** DEADLOCK ***
6 locks held by udevd/5749:
#0: ffff8880219cc450 (sb_writers#5){.+.+}-{0:0}, at: filename_unlinkat+0x1ad/0x730 fs/namei.c:5562
#1: ffff88804687ef18 (&type->i_mutex_dir_key#5/1){+.+.}-{4:4}, at: inode_lock_nested include/linux/fs.h:1069 [inline]
#1: ffff88804687ef18 (&type->i_mutex_dir_key#5/1){+.+.}-{4:4}, at: __start_dirop fs/namei.c:2918 [inline]
#1: ffff88804687ef18 (&type->i_mutex_dir_key#5/1){+.+.}-{4:4}, at: start_dirop fs/namei.c:2942 [inline]
#1: ffff88804687ef18 (&type->i_mutex_dir_key#5/1){+.+.}-{4:4}, at: filename_unlinkat+0x262/0x730 fs/namei.c:5566
#2: ffffffff8ebe8000 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:300 [inline]
#2: ffffffff8ebe8000 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:840 [inline]
#2: ffffffff8ebe8000 (rcu_read_lock){....}-{1:3}, at: __d_lookup+0x73/0x4a0 fs/dcache.c:2610
#3: ffff88802b23b660 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested kernel/sched/core.c:675 [inline]
#3: ffff88802b23b660 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 kernel/sched/core.c:659
#4: ffffffff8ebd43a0 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x110 kernel/printk/printk.c:2504
#5: ffffffff8ebd4418 (console_srcu){....}-{0:0}, at: rcu_try_lock_acquire include/linux/rcupdate.h:305 [inline]
#5: ffffffff8ebd4418 (console_srcu){....}-{0:0}, at: srcu_read_lock_nmisafe include/linux/srcu.h:428 [inline]
#5: ffffffff8ebd4418 (console_srcu){....}-{0:0}, at: console_srcu_read_lock kernel/printk/printk.c:291 [inline]
#5: ffffffff8ebd4418 (console_srcu){....}-{0:0}, at: console_flush_one_record+0xfd/0xe50 kernel/printk/printk.c:3246
stack backtrace:
CPU: 0 UID: 0 PID: 5749 Comm: udevd Not tainted syzkaller #0 PREEMPT(full)
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
Call Trace:
__dump_stack lib/dump_stack.c:94 [inline]
dump_stack_lvl+0x100/0x190 lib/dump_stack.c:120
print_circular_bug.cold+0x178/0x1c7 kernel/locking/lockdep.c:2043
check_noncircular+0x146/0x160 kernel/locking/lockdep.c:2175
check_prev_add+0xeb/0xe60 kernel/locking/lockdep.c:3165
check_prevs_add kernel/locking/lockdep.c:3284 [inline]
validate_chain kernel/locking/lockdep.c:3908 [inline]
__lock_acquire+0x136c/0x1a40 kernel/locking/lockdep.c:5237
lock_acquire kernel/locking/lockdep.c:5868 [inline]
lock_acquire+0x1b9/0x370 kernel/locking/lockdep.c:5825
console_lock_spinning_enable+0x72/0x80 kernel/printk/printk.c:1902
console_emit_next_record kernel/printk/printk.c:3177 [inline]
console_flush_one_record+0x739/0xe50 kernel/printk/printk.c:3269
console_flush_all kernel/printk/printk.c:3343 [inline]
__console_flush_and_unlock kernel/printk/printk.c:3373 [inline]
console_unlock+0x103/0x260 kernel/printk/printk.c:3413
vprintk_emit+0x407/0x6b0 kernel/printk/printk.c:2479
_printk+0xcf/0x110 kernel/printk/printk.c:2504
__report_bug.cold+0x34/0x141 lib/bug.c:248
report_bug+0xb2/0x220 lib/bug.c:286
handle_bug+0x16a/0x2a0 arch/x86/kernel/traps.c:436
exc_invalid_op+0x17/0x50 arch/x86/kernel/traps.c:490
asm_exc_invalid_op+0x1a/0x20 arch/x86/include/asm/idtentry.h:593
RIP: 0010:lockdep_assert_rq_held kernel/sched/sched.h:1641 [inline]
RIP: 0010:lockdep_assert_rq_held kernel/sched/sched.h:1638 [inline]
RIP: 0010:update_rq_clock+0x40a/0xd20 kernel/sched/core.c:865
Code: ab c8 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 58 71 e5 09 a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 c0 0b 00 00 48 b8 00 00 00 00 00
RSP: 0018:ffffc900049ffa20 EFLAGS: 00010046
RAX: 0000000000000000 RBX: ffff88802b33b600 RCX: 0000000000000001
RDX: 0000000000000046 RSI: ffffffff8e17ce3f RDI: ffffffff8c3fe580
RBP: ffffc900049ffbc8 R08: 0000000000000001 R09: 0000000000000001
R10: ffffffff9121bad7 R11: 0000000000000000 R12: ffffffff9121ee84
R13: ffff88802b33c4e0 R14: ffff888000748000 R15: ffff88802b23c198
pick_next_task kernel/sched/core.c:6338 [inline]
__schedule+0x1e2d/0x6730 kernel/sched/core.c:7149
preempt_schedule_irq+0x50/0x90 kernel/sched/core.c:7556
irqentry_exit_to_kernel_mode_preempt include/linux/irq-entry-common.h:468 [inline]
irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:539 [inline]
irqentry_exit+0x205/0xa00 kernel/entry/common.c:167
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674
RIP: 0010:write_comp_data+0x40/0x90 kernel/kcov.c:246
Code: 59 12 a9 00 01 ff 00 74 1b f6 c4 01 74 07 a9 00 00 ff 00 74 05 c3 cc cc cc cc 8b 87 24 17 00 00 85 c0 74 f1 8b 87 f8 16 00 00 <83> f8 03 75 e6 48 8b 87 00 17 00 00 8b bf fc 16 00 00 48 8b 30 48
RSP: 0018:ffffc900049ffce8 EFLAGS: 00000246
RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff82953664
RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff8880263b4a80
RBP: ffffc900003b9570 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000000 R12: 00000000dcab8160
R13: 0000000000000ce0 R14: ffff88802adeb490 R15: 0000000000000000
rcu_read_lock include/linux/rcupdate.h:841 [inline]
__d_lookup+0x94/0x4a0 fs/dcache.c:2610
d_lookup+0xba/0x190 fs/dcache.c:2559
lookup_dcache+0x21/0x170 fs/namei.c:1768
lookup_one_qstr_excl+0x26/0x250 fs/namei.c:1797
__start_dirop fs/namei.c:2920 [inline]
start_dirop fs/namei.c:2942 [inline]
filename_unlinkat+0x275/0x730 fs/namei.c:5566
__do_sys_unlink fs/namei.c:5620 [inline]
__se_sys_unlink fs/namei.c:5617 [inline]
__x64_sys_unlink+0x46/0x70 fs/namei.c:5617
do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
do_syscall_64+0x115/0x840 arch/x86/entry/syscall_64.c:94
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fcb6dd15937
Code: 00 00 e9 a9 fd ff ff 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 5f 00 00 00 0f 05 c3 0f 1f 84 00 00 00 00 00 b8 57 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 91 b4 0d 00 f7 d8 64 89 02 b8
RSP: 002b:00007fffb4ffe4e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000057
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcb6dd15937
RDX: 0000000000000000 RSI: 00000000000003e1 RDI: 00007fffb4ffe500
RBP: 000055c62812f980 R08: 0000000000000000 R09: 0000000000000020
R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffb4ffe500
R13: 000055c627fec630 R14: 000055c5ed9ac100 R15: 000055c5ed9ac140
debug_locks && !(lock_is_held(&(__rq_lockp(rq))->dep_map) != 0)
WARNING: kernel/sched/sched.h:1641 at lockdep_assert_rq_held kernel/sched/sched.h:1641 [inline], CPU#0: udevd/5749
WARNING: kernel/sched/sched.h:1641 at lockdep_assert_rq_held kernel/sched/sched.h:1638 [inline], CPU#0: udevd/5749
WARNING: kernel/sched/sched.h:1641 at update_rq_clock+0x40a/0xd20 kernel/sched/core.c:865, CPU#0: udevd/5749
Modules linked in:
CPU: 0 UID: 0 PID: 5749 Comm: udevd Not tainted syzkaller #0 PREEMPT(full)
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
RIP: 0010:lockdep_assert_rq_held kernel/sched/sched.h:1641 [inline]
RIP: 0010:lockdep_assert_rq_held kernel/sched/sched.h:1638 [inline]
RIP: 0010:update_rq_clock+0x40a/0xd20 kernel/sched/core.c:865
Code: ab c8 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 58 71 e5 09 a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 c0 0b 00 00 48 b8 00 00 00 00 00
RSP: 0018:ffffc900049ffa20 EFLAGS: 00010046
RAX: 0000000000000000 RBX: ffff88802b33b600 RCX: 0000000000000001
RDX: 0000000000000046 RSI: ffffffff8e17ce3f RDI: ffffffff8c3fe580
RBP: ffffc900049ffbc8 R08: 0000000000000001 R09: 0000000000000001
R10: ffffffff9121bad7 R11: 0000000000000000 R12: ffffffff9121ee84
R13: ffff88802b33c4e0 R14: ffff888000748000 R15: ffff88802b23c198
FS: 00007fcb6e4b2880(0000) GS:ffff888096bf3000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fcb6db446f1 CR3: 0000000054b48000 CR4: 0000000000352ef0
Call Trace:
pick_next_task kernel/sched/core.c:6338 [inline]
__schedule+0x1e2d/0x6730 kernel/sched/core.c:7149
preempt_schedule_irq+0x50/0x90 kernel/sched/core.c:7556
irqentry_exit_to_kernel_mode_preempt include/linux/irq-entry-common.h:468 [inline]
irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:539 [inline]
irqentry_exit+0x205/0xa00 kernel/entry/common.c:167
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674
RIP: 0010:write_comp_data+0x40/0x90 kernel/kcov.c:246
Code: 59 12 a9 00 01 ff 00 74 1b f6 c4 01 74 07 a9 00 00 ff 00 74 05 c3 cc cc cc cc 8b 87 24 17 00 00 85 c0 74 f1 8b 87 f8 16 00 00 <83> f8 03 75 e6 48 8b 87 00 17 00 00 8b bf fc 16 00 00 48 8b 30 48
RSP: 0018:ffffc900049ffce8 EFLAGS: 00000246
RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff82953664
RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff8880263b4a80
RBP: ffffc900003b9570 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000000 R12: 00000000dcab8160
R13: 0000000000000ce0 R14: ffff88802adeb490 R15: 0000000000000000
rcu_read_lock include/linux/rcupdate.h:841 [inline]
__d_lookup+0x94/0x4a0 fs/dcache.c:2610
d_lookup+0xba/0x190 fs/dcache.c:2559
lookup_dcache+0x21/0x170 fs/namei.c:1768
lookup_one_qstr_excl+0x26/0x250 fs/namei.c:1797
__start_dirop fs/namei.c:2920 [inline]
start_dirop fs/namei.c:2942 [inline]
filename_unlinkat+0x275/0x730 fs/namei.c:5566
__do_sys_unlink fs/namei.c:5620 [inline]
__se_sys_unlink fs/namei.c:5617 [inline]
__x64_sys_unlink+0x46/0x70 fs/namei.c:5617
do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
do_syscall_64+0x115/0x840 arch/x86/entry/syscall_64.c:94
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fcb6dd15937
Code: 00 00 e9 a9 fd ff ff 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 5f 00 00 00 0f 05 c3 0f 1f 84 00 00 00 00 00 b8 57 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 91 b4 0d 00 f7 d8 64 89 02 b8
RSP: 002b:00007fffb4ffe4e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000057
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcb6dd15937
RDX: 0000000000000000 RSI: 00000000000003e1 RDI: 00007fffb4ffe500
RBP: 000055c62812f980 R08: 0000000000000000 R09: 0000000000000020
R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffb4ffe500
R13: 000055c627fec630 R14: 000055c5ed9ac100 R15: 000055c5ed9ac140
----------------
Code disassembly (best guess):
0: 59 pop %rcx
1: 12 a9 00 01 ff 00 adc 0xff0100(%rcx),%ch
7: 74 1b je 0x24
9: f6 c4 01 test $0x1,%ah
c: 74 07 je 0x15
e: a9 00 00 ff 00 test $0xff0000,%eax
13: 74 05 je 0x1a
15: c3 ret
16: cc int3
17: cc int3
18: cc int3
19: cc int3
1a: 8b 87 24 17 00 00 mov 0x1724(%rdi),%eax
20: 85 c0 test %eax,%eax
22: 74 f1 je 0x15
24: 8b 87 f8 16 00 00 mov 0x16f8(%rdi),%eax
* 2a: 83 f8 03 cmp $0x3,%eax <-- trapping instruction
2d: 75 e6 jne 0x15
2f: 48 8b 87 00 17 00 00 mov 0x1700(%rdi),%rax
36: 8b bf fc 16 00 00 mov 0x16fc(%rdi),%edi
3c: 48 8b 30 mov (%rax),%rsi
3f: 48 rex.W