bisecting fixing commit since 1ec8f1f0bffe34ebdf95dbe0fd4a6635a84612a8 building syzkaller on 505ab413c77ce8c6bd4658ea5e68ea2534d47b39 testing commit 1ec8f1f0bffe34ebdf95dbe0fd4a6635a84612a8 with gcc (GCC) 8.1.0 kernel signature: 1090b2702718ae30ac831f0d777f7ea6f93deb3470b26e6d26e13778528d0be9 run #0: crashed: possible deadlock in console_unlock run #1: crashed: possible deadlock in pty_write run #2: crashed: possible deadlock in console_unlock run #3: crashed: possible deadlock in pty_write run #4: crashed: possible deadlock in pty_write run #5: crashed: possible deadlock in pty_write run #6: crashed: possible deadlock in console_unlock run #7: crashed: possible deadlock in console_unlock run #8: crashed: possible deadlock in console_unlock run #9: crashed: possible deadlock in console_unlock testing current HEAD 050272a0423e68207fd2367831ae610680129062 testing commit 050272a0423e68207fd2367831ae610680129062 with gcc (GCC) 8.1.0 kernel signature: de2430d2b897f4173baf95f8466395e96d8f48b0890b3296ece369f4defb3273 run #0: crashed: possible deadlock in pty_write run #1: crashed: possible deadlock in pty_write run #2: crashed: possible deadlock in console_unlock run #3: crashed: possible deadlock in pty_write run #4: crashed: possible deadlock in pty_write run #5: crashed: possible deadlock in console_unlock run #6: crashed: possible deadlock in console_unlock run #7: crashed: possible deadlock in pty_write run #8: crashed: possible deadlock in console_unlock run #9: crashed: possible deadlock in console_unlock revisions tested: 2, total time: 23m25.304747549s (build: 16m33.215537654s, test: 6m2.519258586s) the crash still happens on HEAD commit msg: Linux 4.14.177 crash: possible deadlock in console_unlock RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcee33486d4 R13: 00000000004c2ddb R14: 00000000004d5ff0 R15: 0000000000000005 ====================================================== WARNING: possible circular locking dependency detected 4.14.177-syzkaller #0 Not tainted ------------------------------------------------------ syz-executor.3/6945 is trying to acquire lock: (console_owner){-...}, at: [] log_next kernel/printk/printk.c:489 [inline] (console_owner){-...}, at: [] console_unlock+0x389/0xe30 kernel/printk/printk.c:2384 but task is already holding lock: (&(&port->lock)->rlock){-.-.}, at: [] pty_write+0xbf/0x200 drivers/tty/pty.c:120 which lock already depends on the new lock. the existing dependency chain (in reverse order) is: -> #2 (&(&port->lock)->rlock){-.-.}: lock_acquire+0x173/0x400 kernel/locking/lockdep.c:3998 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline] _raw_spin_lock_irqsave+0x99/0xd0 kernel/locking/spinlock.c:160 tty_port_tty_get+0x1b/0x70 drivers/tty/tty_port.c:288 tty_port_default_wakeup+0xa/0x30 drivers/tty/tty_port.c:46 tty_port_tty_wakeup+0x58/0x70 drivers/tty/tty_port.c:390 uart_write_wakeup+0x37/0x50 drivers/tty/serial/serial_core.c:116 serial8250_tx_chars+0x3eb/0xa00 drivers/tty/serial/8250/8250_port.c:1810 serial8250_handle_irq.part.25+0x1c5/0x220 drivers/tty/serial/8250/8250_port.c:1883 serial8250_handle_irq drivers/tty/serial/8250/8250_port.c:1869 [inline] serial8250_default_handle_irq+0x82/0xe0 drivers/tty/serial/8250/8250_port.c:1899 serial8250_interrupt+0xd8/0x170 drivers/tty/serial/8250/8250_core.c:129 __handle_irq_event_percpu+0x101/0x6c0 kernel/irq/handle.c:147 handle_irq_event_percpu+0x64/0x120 kernel/irq/handle.c:187 handle_irq_event+0xa2/0x130 kernel/irq/handle.c:204 handle_edge_irq+0x20b/0x790 kernel/irq/chip.c:770 generic_handle_irq_desc include/linux/irqdesc.h:159 [inline] handle_irq+0x231/0x306 arch/x86/kernel/irq_64.c:87 do_IRQ+0x98/0x1d0 arch/x86/kernel/irq.c:230 ret_from_intr+0x0/0x1e native_safe_halt+0x12/0x20 arch/x86/include/asm/irqflags.h:60 arch_safe_halt arch/x86/include/asm/paravirt.h:94 [inline] default_idle+0x4f/0x370 arch/x86/kernel/process.c:566 arch_cpu_idle+0x10/0x20 arch/x86/kernel/process.c:557 default_idle_call+0x6d/0x90 kernel/sched/idle.c:98 cpuidle_idle_call kernel/sched/idle.c:156 [inline] do_idle+0x311/0x3d0 kernel/sched/idle.c:246 cpu_startup_entry+0x18/0x20 kernel/sched/idle.c:351 rest_init+0x193/0x199 init/main.c:434 start_kernel+0x620/0x645 init/main.c:708 x86_64_start_reservations+0x29/0x2b arch/x86/kernel/head64.c:399 x86_64_start_kernel+0x76/0x79 arch/x86/kernel/head64.c:380 secondary_startup_64+0xa5/0xb0 arch/x86/kernel/head_64.S:240 -> #1 (&port_lock_key){-.-.}: lock_acquire+0x173/0x400 kernel/locking/lockdep.c:3998 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline] _raw_spin_lock_irqsave+0x99/0xd0 kernel/locking/spinlock.c:160 serial8250_console_write+0x6c2/0x880 drivers/tty/serial/8250/8250_port.c:3236 univ8250_console_write+0x4e/0x70 drivers/tty/serial/8250/8250_core.c:596 call_console_drivers kernel/printk/printk.c:1725 [inline] console_unlock+0x8ca/0xe30 kernel/printk/printk.c:2397 vprintk_emit+0x1b4/0x4e0 kernel/printk/printk.c:1923 vprintk_default+0x1a/0x20 kernel/printk/printk.c:1963 vprintk_func+0x49/0x12c kernel/printk/printk_safe.c:401 printk+0x91/0xab kernel/printk/printk.c:1996 register_console+0x59b/0x920 kernel/printk/printk.c:2716 univ8250_console_init+0x1e/0x28 drivers/tty/serial/8250/8250_core.c:691 console_init+0x45/0x4c kernel/printk/printk.c:2797 start_kernel+0x3d6/0x645 init/main.c:634 x86_64_start_reservations+0x29/0x2b arch/x86/kernel/head64.c:399 x86_64_start_kernel+0x76/0x79 arch/x86/kernel/head64.c:380 secondary_startup_64+0xa5/0xb0 arch/x86/kernel/head_64.S:240 -> #0 (console_owner){-...}: check_prev_add kernel/locking/lockdep.c:1905 [inline] check_prevs_add kernel/locking/lockdep.c:2022 [inline] validate_chain kernel/locking/lockdep.c:2464 [inline] __lock_acquire+0x2e94/0x4500 kernel/locking/lockdep.c:3491 lock_acquire+0x173/0x400 kernel/locking/lockdep.c:3998 console_lock_spinning_enable kernel/printk/printk.c:1588 [inline] console_unlock+0x3eb/0xe30 kernel/printk/printk.c:2394 vprintk_emit+0x1b4/0x4e0 kernel/printk/printk.c:1923 vprintk_default+0x1a/0x20 kernel/printk/printk.c:1963 vprintk_func+0x49/0x12c kernel/printk/printk_safe.c:401 printk+0x91/0xab kernel/printk/printk.c:1996 fail_dump lib/fault-inject.c:44 [inline] should_fail.cold.3+0xdf/0x14b lib/fault-inject.c:149 should_failslab+0xba/0xf0 mm/failslab.c:32 slab_pre_alloc_hook mm/slab.h:421 [inline] slab_alloc mm/slab.c:3376 [inline] __do_kmalloc mm/slab.c:3718 [inline] __kmalloc+0x70/0x7b0 mm/slab.c:3729 kmalloc include/linux/slab.h:493 [inline] tty_buffer_alloc drivers/tty/tty_buffer.c:169 [inline] __tty_buffer_request_room+0x191/0x620 drivers/tty/tty_buffer.c:267 tty_insert_flip_string_fixed_flag+0x77/0x1a0 drivers/tty/tty_buffer.c:312 tty_insert_flip_string include/linux/tty_flip.h:37 [inline] pty_write+0xf3/0x200 drivers/tty/pty.c:122 tty_put_char+0xff/0x120 drivers/tty/tty_io.c:2880 __process_echoes+0x203/0x790 drivers/tty/n_tty.c:708 flush_echoes drivers/tty/n_tty.c:829 [inline] __receive_buf drivers/tty/n_tty.c:1648 [inline] n_tty_receive_buf_common+0x75b/0x29a0 drivers/tty/n_tty.c:1742 n_tty_receive_buf+0xc/0xe drivers/tty/n_tty.c:1771 tiocsti drivers/tty/tty_io.c:2186 [inline] tty_ioctl+0x630/0x1270 drivers/tty/tty_io.c:2572 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:500 [inline] do_vfs_ioctl+0x183/0xfc0 fs/ioctl.c:684 SYSC_ioctl fs/ioctl.c:701 [inline] SyS_ioctl+0x74/0x80 fs/ioctl.c:692 do_syscall_64+0x1c9/0x5b0 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x42/0xb7 other info that might help us debug this: Chain exists of: console_owner --> &port_lock_key --> &(&port->lock)->rlock Possible unsafe locking scenario: CPU0 CPU1 ---- ---- lock(&(&port->lock)->rlock); lock(&port_lock_key); lock(&(&port->lock)->rlock); lock(console_owner); *** DEADLOCK *** 5 locks held by syz-executor.3/6945: #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x2d/0x40 drivers/tty/tty_ldsem.c:376 #1: (&o_tty->termios_rwsem/1){++++}, at: [] n_tty_receive_buf_common+0x80/0x29a0 drivers/tty/n_tty.c:1705 #2: (&ldata->output_lock){+.+.}, at: [] flush_echoes drivers/tty/n_tty.c:827 [inline] #2: (&ldata->output_lock){+.+.}, at: [] __receive_buf drivers/tty/n_tty.c:1648 [inline] #2: (&ldata->output_lock){+.+.}, at: [] n_tty_receive_buf_common+0x719/0x29a0 drivers/tty/n_tty.c:1742 #3: (&(&port->lock)->rlock){-.-.}, at: [] pty_write+0xbf/0x200 drivers/tty/pty.c:120 #4: (console_lock){+.+.}, at: [] console_trylock_spinning kernel/printk/printk.c:1650 [inline] #4: (console_lock){+.+.}, at: [] vprintk_emit+0x1ab/0x4e0 kernel/printk/printk.c:1922 stack backtrace: CPU: 1 PID: 6945 Comm: syz-executor.3 Not tainted 4.14.177-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0xf7/0x13b lib/dump_stack.c:58 print_circular_bug.isra.40.cold.67+0x1bd/0x27d kernel/locking/lockdep.c:1258 check_prev_add kernel/locking/lockdep.c:1905 [inline] check_prevs_add kernel/locking/lockdep.c:2022 [inline] validate_chain kernel/locking/lockdep.c:2464 [inline] __lock_acquire+0x2e94/0x4500 kernel/locking/lockdep.c:3491 lock_acquire+0x173/0x400 kernel/locking/lockdep.c:3998 console_lock_spinning_enable kernel/printk/printk.c:1588 [inline] console_unlock+0x3eb/0xe30 kernel/printk/printk.c:2394 vprintk_emit+0x1b4/0x4e0 kernel/printk/printk.c:1923 vprintk_default+0x1a/0x20 kernel/printk/printk.c:1963 vprintk_func+0x49/0x12c kernel/printk/printk_safe.c:401 printk+0x91/0xab kernel/printk/printk.c:1996 fail_dump lib/fault-inject.c:44 [inline] should_fail.cold.3+0xdf/0x14b lib/fault-inject.c:149 should_failslab+0xba/0xf0 mm/failslab.c:32 slab_pre_alloc_hook mm/slab.h:421 [inline] slab_alloc mm/slab.c:3376 [inline] __do_kmalloc mm/slab.c:3718 [inline] __kmalloc+0x70/0x7b0 mm/slab.c:3729 kmalloc include/linux/slab.h:493 [inline] tty_buffer_alloc drivers/tty/tty_buffer.c:169 [inline] __tty_buffer_request_room+0x191/0x620 drivers/tty/tty_buffer.c:267 tty_insert_flip_string_fixed_flag+0x77/0x1a0 drivers/tty/tty_buffer.c:312 tty_insert_flip_string include/linux/tty_flip.h:37 [inline] pty_write+0xf3/0x200 drivers/tty/pty.c:122 tty_put_char+0xff/0x120 drivers/tty/tty_io.c:2880 __process_echoes+0x203/0x790 drivers/tty/n_tty.c:708 flush_echoes drivers/tty/n_tty.c:829 [inline] __receive_buf drivers/tty/n_tty.c:1648 [inline] n_tty_receive_buf_common+0x75b/0x29a0 drivers/tty/n_tty.c:1742 n_tty_receive_buf+0xc/0xe drivers/tty/n_tty.c:1771 tiocsti drivers/tty/tty_io.c:2186 [inline] tty_ioctl+0x630/0x1270 drivers/tty/tty_io.c:2572 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:500 [inline] do_vfs_ioctl+0x183/0xfc0 fs/ioctl.c:684 SYSC_ioctl fs/ioctl.c:701 [inline] SyS_ioctl+0x74/0x80 fs/ioctl.c:692 do_syscall_64+0x1c9/0x5b0 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x42/0xb7 RIP: 0033:0x458c29 RSP: 002b:00007fcee3347c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007fcee3347c90 RCX: 0000000000458c29 RDX: 0000000020000040 RSI: 0000000000005412 RDI: 0000000000000004 RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcee33486d4 R13: 00000000004c2ddb R14: 00000000004d5ff0 R15: 0000000000000005 IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready CPU: 1 PID: 6957 Comm: syz-executor.3 Not tainted 4.14.177-syzkaller #0 IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 bridge0: port 1(bridge_slave_0) entered blocking state Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0xf7/0x13b lib/dump_stack.c:58 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold.3+0x105/0x14b lib/fault-inject.c:149 should_failslab+0xba/0xf0 mm/failslab.c:32 slab_pre_alloc_hook mm/slab.h:421 [inline] slab_alloc mm/slab.c:3376 [inline] __do_kmalloc mm/slab.c:3718 [inline] __kmalloc+0x70/0x7b0 mm/slab.c:3729 bridge0: port 1(bridge_slave_0) entered forwarding state IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready kmalloc include/linux/slab.h:493 [inline] tty_buffer_alloc drivers/tty/tty_buffer.c:169 [inline] __tty_buffer_request_room+0x191/0x620 drivers/tty/tty_buffer.c:267 tty_insert_flip_string_fixed_flag+0x77/0x1a0 drivers/tty/tty_buffer.c:312 tty_insert_flip_string include/linux/tty_flip.h:37 [inline] pty_write+0xf3/0x200 drivers/tty/pty.c:122 tty_put_char+0xff/0x120 drivers/tty/tty_io.c:2880 IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready __process_echoes+0x203/0x790 drivers/tty/n_tty.c:708 bridge0: port 2(bridge_slave_1) entered blocking state flush_echoes drivers/tty/n_tty.c:829 [inline] __receive_buf drivers/tty/n_tty.c:1648 [inline] n_tty_receive_buf_common+0x75b/0x29a0 drivers/tty/n_tty.c:1742 n_tty_receive_buf+0xc/0xe drivers/tty/n_tty.c:1771 tiocsti drivers/tty/tty_io.c:2186 [inline] tty_ioctl+0x630/0x1270 drivers/tty/tty_io.c:2572 bridge0: port 2(bridge_slave_1) entered forwarding state IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:500 [inline] do_vfs_ioctl+0x183/0xfc0 fs/ioctl.c:684 IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready SYSC_ioctl fs/ioctl.c:701 [inline] SyS_ioctl+0x74/0x80 fs/ioctl.c:692 IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready do_syscall_64+0x1c9/0x5b0 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x42/0xb7 RIP: 0033:0x458c29 RSP: 002b:00007fcee3347c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready RAX: ffffffffffffffda RBX: 00007fcee3347c90 RCX: 0000000000458c29 RDX: 0000000020000040 RSI: 0000000000005412 RDI: 0000000000000004 RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcee33486d4 R13: 00000000004c2ddb R14: 00000000004d5ff0 R15: 0000000000000005 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready CPU: 1 PID: 6961 Comm: syz-executor.3 Not tainted 4.14.177-syzkaller #0 IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 8021q: adding VLAN 0 to HW filter on device bond0 Call Trace: IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0xf7/0x13b lib/dump_stack.c:58 IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready fail_dump lib/fault-inject.c:51 [inline] should_fail.cold.3+0x105/0x14b lib/fault-inject.c:149 IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready should_failslab+0xba/0xf0 mm/failslab.c:32 8021q: adding VLAN 0 to HW filter on device team0 slab_pre_alloc_hook mm/slab.h:421 [inline] slab_alloc mm/slab.c:3376 [inline] __do_kmalloc mm/slab.c:3718 [inline] __kmalloc+0x70/0x7b0 mm/slab.c:3729 IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready kmalloc include/linux/slab.h:493 [inline] tty_buffer_alloc drivers/tty/tty_buffer.c:169 [inline] __tty_buffer_request_room+0x191/0x620 drivers/tty/tty_buffer.c:267 IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready tty_insert_flip_string_fixed_flag+0x77/0x1a0 drivers/tty/tty_buffer.c:312 IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready tty_insert_flip_string include/linux/tty_flip.h:37 [inline] pty_write+0xf3/0x200 drivers/tty/pty.c:122 IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready tty_put_char+0xff/0x120 drivers/tty/tty_io.c:2880 IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready __process_echoes+0x203/0x790 drivers/tty/n_tty.c:708 flush_echoes drivers/tty/n_tty.c:829 [inline] __receive_buf drivers/tty/n_tty.c:1648 [inline] n_tty_receive_buf_common+0x75b/0x29a0 drivers/tty/n_tty.c:1742 n_tty_receive_buf+0xc/0xe drivers/tty/n_tty.c:1771 IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready tiocsti drivers/tty/tty_io.c:2186 [inline] tty_ioctl+0x630/0x1270 drivers/tty/tty_io.c:2572 IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:500 [inline] do_vfs_ioctl+0x183/0xfc0 fs/ioctl.c:684 hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network SYSC_ioctl fs/ioctl.c:701 [inline] SyS_ioctl+0x74/0x80 fs/ioctl.c:692 do_syscall_64+0x1c9/0x5b0 arch/x86/entry/common.c:292 IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready entry_SYSCALL_64_after_hwframe+0x42/0xb7 IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready RIP: 0033:0x458c29 RSP: 002b:00007fcee3347c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007fcee3347c90 RCX: 0000000000458c29 RDX: 0000000020000040 RSI: 0000000000005412 RDI: 0000000000000004 RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcee33486d4 R13: 00000000004c2ddb R14: 00000000004d5ff0 R15: 0000000000000005 IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 0 PID: 6968 Comm: syz-executor.3 Not tainted 4.14.177-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0xf7/0x13b lib/dump_stack.c:58 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold.3+0x105/0x14b lib/fault-inject.c:149 should_failslab+0xba/0xf0 mm/failslab.c:32 slab_pre_alloc_hook mm/slab.h:421 [inline] slab_alloc mm/slab.c:3376 [inline] __do_kmalloc mm/slab.c:3718 [inline] __kmalloc+0x70/0x7b0 mm/slab.c:3729 kmalloc include/linux/slab.h:493 [inline] tty_buffer_alloc drivers/tty/tty_buffer.c:169 [inline] __tty_buffer_request_room+0x191/0x620 drivers/tty/tty_buffer.c:267 tty_insert_flip_string_fixed_flag+0x77/0x1a0 drivers/tty/tty_buffer.c:312 tty_insert_flip_string include/linux/tty_flip.h:37 [inline] pty_write+0xf3/0x200 drivers/tty/pty.c:122 tty_put_char+0xff/0x120 drivers/tty/tty_io.c:2880 __process_echoes+0x203/0x790 drivers/tty/n_tty.c:708 flush_echoes drivers/tty/n_tty.c:829 [inline] __receive_buf drivers/tty/n_tty.c:1648 [inline] n_tty_receive_buf_common+0x75b/0x29a0 drivers/tty/n_tty.c:1742 n_tty_receive_buf+0xc/0xe drivers/tty/n_tty.c:1771 tiocsti drivers/tty/tty_io.c:2186 [inline] tty_ioctl+0x630/0x1270 drivers/tty/tty_io.c:2572 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:500 [inline] do_vfs_ioctl+0x183/0xfc0 fs/ioctl.c:684 SYSC_ioctl fs/ioctl.c:701 [inline] SyS_ioctl+0x74/0x80 fs/ioctl.c:692 do_syscall_64+0x1c9/0x5b0 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x42/0xb7 RIP: 0033:0x458c29 RSP: 002b:00007fcee3347c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007fcee3347c90 RCX: 0000000000458c29 RDX: 0000000020000040 RSI: 0000000000005412 RDI: 0000000000000004 RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcee33486d4 R13: 00000000004c2ddb R14: 00000000004d5ff0 R15: 0000000000000005 IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 0 PID: 6974 Comm: syz-executor.3 Not tainted 4.14.177-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0xf7/0x13b lib/dump_stack.c:58 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold.3+0x105/0x14b lib/fault-inject.c:149 should_failslab+0xba/0xf0 mm/failslab.c:32 slab_pre_alloc_hook mm/slab.h:421 [inline] slab_alloc mm/slab.c:3376 [inline] __do_kmalloc mm/slab.c:3718 [inline] __kmalloc+0x70/0x7b0 mm/slab.c:3729 kmalloc include/linux/slab.h:493 [inline] tty_buffer_alloc drivers/tty/tty_buffer.c:169 [inline] __tty_buffer_request_room+0x191/0x620 drivers/tty/tty_buffer.c:267 tty_insert_flip_string_fixed_flag+0x77/0x1a0 drivers/tty/tty_buffer.c:312 tty_insert_flip_string include/linux/tty_flip.h:37 [inline] pty_write+0xf3/0x200 drivers/tty/pty.c:122 tty_put_char+0xff/0x120 drivers/tty/tty_io.c:2880 __process_echoes+0x203/0x790 drivers/tty/n_tty.c:708 flush_echoes drivers/tty/n_tty.c:829 [inline] __receive_buf drivers/tty/n_tty.c:1648 [inline] n_tty_receive_buf_common+0x75b/0x29a0 drivers/tty/n_tty.c:1742 n_tty_receive_buf+0xc/0xe drivers/tty/n_tty.c:1771 tiocsti drivers/tty/tty_io.c:2186 [inline] tty_ioctl+0x630/0x1270 drivers/tty/tty_io.c:2572 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:500 [inline] do_vfs_ioctl+0x183/0xfc0 fs/ioctl.c:684 SYSC_ioctl fs/ioctl.c:701 [inline] SyS_ioctl+0x74/0x80 fs/ioctl.c:692 do_syscall_64+0x1c9/0x5b0 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x42/0xb7 RIP: 0033:0x458c29 RSP: 002b:00007fcee3347c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007fcee3347c90 RCX: 0000000000458c29 RDX: 0000000020000040 RSI: 0000000000005412 RDI: 0000000000000004 RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcee33486d4 R13: 00000000004c2ddb R14: 00000000004d5ff0 R15: 0000000000000005 CPU: 1 PID: 6975 Comm: syz-executor.5 Not tainted 4.14.177-syzkaller #0 IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0xf7/0x13b lib/dump_stack.c:58 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold.3+0x105/0x14b lib/fault-inject.c:149 should_failslab+0xba/0xf0 mm/failslab.c:32 bridge0: port 1(bridge_slave_0) entered blocking state slab_pre_alloc_hook mm/slab.h:421 [inline] slab_alloc mm/slab.c:3376 [inline] __do_kmalloc mm/slab.c:3718 [inline] __kmalloc+0x70/0x7b0 mm/slab.c:3729 kmalloc include/linux/slab.h:493 [inline] tty_buffer_alloc drivers/tty/tty_buffer.c:169 [inline] __tty_buffer_request_room+0x191/0x620 drivers/tty/tty_buffer.c:267 tty_insert_flip_string_fixed_flag+0x77/0x1a0 drivers/tty/tty_buffer.c:312 tty_insert_flip_string include/linux/tty_flip.h:37 [inline] pty_write+0xf3/0x200 drivers/tty/pty.c:122 tty_put_char+0xff/0x120 drivers/tty/tty_io.c:2880 bridge0: port 1(bridge_slave_0) entered forwarding state __process_echoes+0x203/0x790 drivers/tty/n_tty.c:708 flush_echoes drivers/tty/n_tty.c:829 [inline] __receive_buf drivers/tty/n_tty.c:1648 [inline] n_tty_receive_buf_common+0x75b/0x29a0 drivers/tty/n_tty.c:1742 IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready n_tty_receive_buf+0xc/0xe drivers/tty/n_tty.c:1771 tiocsti drivers/tty/tty_io.c:2186 [inline] tty_ioctl+0x630/0x1270 drivers/tty/tty_io.c:2572 IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:500 [inline] do_vfs_ioctl+0x183/0xfc0 fs/ioctl.c:684 bridge0: port 2(bridge_slave_1) entered blocking state SYSC_ioctl fs/ioctl.c:701 [inline] SyS_ioctl+0x74/0x80 fs/ioctl.c:692 do_syscall_64+0x1c9/0x5b0 arch/x86/entry/common.c:292 bridge0: port 2(bridge_slave_1) entered forwarding state entry_SYSCALL_64_after_hwframe+0x42/0xb7 RIP: 0033:0x458c29 RSP: 002b:00007ff61239ac78 EFLAGS: 00000246 IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007ff61239ac90 RCX: 0000000000458c29 RDX: 0000000020000040 RSI: 0000000000005412 RDI: 0000000000000004 RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff61239b6d4 R13: 00000000004c2ddb R14: 00000000004d5ff0 R15: 0000000000000005 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready CPU: 1 PID: 6980 Comm: syz-executor.5 Not tainted 4.14.177-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0xf7/0x13b lib/dump_stack.c:58 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold.3+0x105/0x14b lib/fault-inject.c:149 IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready should_failslab+0xba/0xf0 mm/failslab.c:32 slab_pre_alloc_hook mm/slab.h:421 [inline] slab_alloc mm/slab.c:3376 [inline] __do_kmalloc mm/slab.c:3718 [inline] __kmalloc+0x70/0x7b0 mm/slab.c:3729 IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready kmalloc include/linux/slab.h:493 [inline] tty_buffer_alloc drivers/tty/tty_buffer.c:169 [inline] __tty_buffer_request_room+0x191/0x620 drivers/tty/tty_buffer.c:267 tty_insert_flip_string_fixed_flag+0x77/0x1a0 drivers/tty/tty_buffer.c:312 tty_insert_flip_string include/linux/tty_flip.h:37 [inline] pty_write+0xf3/0x200 drivers/tty/pty.c:122 tty_put_char+0xff/0x120 drivers/tty/tty_io.c:2880 IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready __process_echoes+0x203/0x790 drivers/tty/n_tty.c:708 flush_echoes drivers/tty/n_tty.c:829 [inline] __receive_buf drivers/tty/n_tty.c:1648 [inline] n_tty_receive_buf_common+0x75b/0x29a0 drivers/tty/n_tty.c:1742 n_tty_receive_buf+0xc/0xe drivers/tty/n_tty.c:1771 tiocsti drivers/tty/tty_io.c:2186 [inline] tty_ioctl+0x630/0x1270 drivers/tty/tty_io.c:2572 IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:500 [inline] do_vfs_ioctl+0x183/0xfc0 fs/ioctl.c:684 IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready SYSC_ioctl fs/ioctl.c:701 [inline] SyS_ioctl+0x74/0x80 fs/ioctl.c:692 do_syscall_64+0x1c9/0x5b0 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x42/0xb7 RIP: 0033:0x458c29 RSP: 002b:00007ff61239ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready RAX: ffffffffffffffda RBX: 00007ff61239ac90 RCX: 0000000000458c29 RDX: 0000000020000040 RSI: 0000000000005412 RDI: 0000000000000004 RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff61239b6d4 R13: 00000000004c2ddb R14: 00000000004d5ff0 R15: 0000000000000005 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready CPU: 1 PID: 6984 Comm: syz-executor.5 Not tainted 4.14.177-syzkaller #0 8021q: adding VLAN 0 to HW filter on device batadv0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0xf7/0x13b lib/dump_stack.c:58 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold.3+0x105/0x14b lib/fault-inject.c:149 should_failslab+0xba/0xf0 mm/failslab.c:32 slab_pre_alloc_hook mm/slab.h:421 [inline] slab_alloc mm/slab.c:3376 [inline] __do_kmalloc mm/slab.c:3718 [inline] __kmalloc+0x70/0x7b0 mm/slab.c:3729 kmalloc include/linux/slab.h:493 [inline] tty_buffer_alloc drivers/tty/tty_buffer.c:169 [inline] __tty_buffer_request_room+0x191/0x620 drivers/tty/tty_buffer.c:267 tty_insert_flip_string_fixed_flag+0x77/0x1a0 drivers/tty/tty_buffer.c:312 tty_insert_flip_string include/linux/tty_flip.h:37 [inline] pty_write+0xf3/0x200 drivers/tty/pty.c:122 tty_put_char+0xff/0x120 drivers/tty/tty_io.c:2880 __process_echoes+0x203/0x790 drivers/tty/n_tty.c:708 flush_echoes drivers/tty/n_tty.c:829 [inline] __receive_buf drivers/tty/n_tty.c:1648 [inline] n_tty_receive_buf_common+0x75b/0x29a0 drivers/tty/n_tty.c:1742 n_tty_receive_buf+0xc/0xe drivers/tty/n_tty.c:1771 tiocsti drivers/tty/tty_io.c:2186 [inline] tty_ioctl+0x630/0x1270 drivers/tty/tty_io.c:2572 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:500 [inline] do_vfs_ioctl+0x183/0xfc0 fs/ioctl.c:684 SYSC_ioctl fs/ioctl.c:701 [inline] SyS_ioctl+0x74/0x80 fs/ioctl.c:692 do_syscall_64+0x1c9/0x5b0 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x42/0xb7 RIP: 0033:0x458c29 RSP: 002b:00007ff61239ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007ff61239ac90 RCX: 0000000000458c29 RDX: 0000000020000040 RSI: 0000000000005412 RDI: 0000000000000004 RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff61239b6d4 R13: 00000000004c2ddb R14: 00000000004d5ff0 R15: 0000000000000005 IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready bridge0: port 1(bridge_slave_0) entered blocking state bridge0: port 1(bridge_slave_0) entered disabled state device bridge_slave_0 entered promiscuous mode IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready bridge0: port 2(bridge_slave_1) entered blocking state bridge0: port 2(bridge_slave_1) entered disabled state device bridge_slave_1 entered promiscuous mode IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready CPU: 1 PID: 7011 Comm: syz-executor.4 Not tainted 4.14.177-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0xf7/0x13b lib/dump_stack.c:58 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold.3+0x105/0x14b lib/fault-inject.c:149 should_failslab+0xba/0xf0 mm/failslab.c:32 slab_pre_alloc_hook mm/slab.h:421 [inline] slab_alloc mm/slab.c:3376 [inline] __do_kmalloc mm/slab.c:3718 [inline] __kmalloc+0x70/0x7b0 mm/slab.c:3729 IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready kmalloc include/linux/slab.h:493 [inline] tty_buffer_alloc drivers/tty/tty_buffer.c:169 [inline] __tty_buffer_request_room+0x191/0x620 drivers/tty/tty_buffer.c:267 tty_insert_flip_string_fixed_flag+0x77/0x1a0 drivers/tty/tty_buffer.c:312 tty_insert_flip_string include/linux/tty_flip.h:37 [inline] pty_write+0xf3/0x200 drivers/tty/pty.c:122 tty_put_char+0xff/0x120 drivers/tty/tty_io.c:2880 __process_echoes+0x203/0x790 drivers/tty/n_tty.c:708 flush_echoes drivers/tty/n_tty.c:829 [inline] __receive_buf drivers/tty/n_tty.c:1648 [inline] n_tty_receive_buf_common+0x75b/0x29a0 drivers/tty/n_tty.c:1742 n_tty_receive_buf+0xc/0xe drivers/tty/n_tty.c:1771 tiocsti drivers/tty/tty_io.c:2186 [inline] tty_ioctl+0x630/0x1270 drivers/tty/tty_io.c:2572 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:500 [inline] do_vfs_ioctl+0x183/0xfc0 fs/ioctl.c:684 IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready 8021q: adding VLAN 0 to HW filter on device batadv0 bond0: Enslaving bond_slave_0 as an active interface with an up link SYSC_ioctl fs/ioctl.c:701 [inline] SyS_ioctl+0x74/0x80 fs/ioctl.c:692 do_syscall_64+0x1c9/0x5b0 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x42/0xb7 bond0: Enslaving bond_slave_1 as an active interface with an up link RIP: 0033:0x458c29 8021q: adding VLAN 0 to HW filter on device batadv0 RSP: 002b:00007fc9d59c2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007fc9d59c2c90 RCX: 0000000000458c29 RDX: 0000000020000040 RSI: 0000000000005412 RDI: 0000000000000004 RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc9d59c36d4 R13: 00000000004c2ddb R14: 00000000004d5ff0 R15: 0000000000000005 IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready team0: Port device team_slave_0 added IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready team0: Port device team_slave_1 added IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 0 PID: 7049 Comm: syz-executor.2 Not tainted 4.14.177-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0xf7/0x13b lib/dump_stack.c:58 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold.3+0x105/0x14b lib/fault-inject.c:149 should_failslab+0xba/0xf0 mm/failslab.c:32 slab_pre_alloc_hook mm/slab.h:421 [inline] slab_alloc mm/slab.c:3376 [inline] __do_kmalloc mm/slab.c:3718 [inline] __kmalloc+0x70/0x7b0 mm/slab.c:3729 kmalloc include/linux/slab.h:493 [inline] tty_buffer_alloc drivers/tty/tty_buffer.c:169 [inline] __tty_buffer_request_room+0x191/0x620 drivers/tty/tty_buffer.c:267 tty_insert_flip_string_fixed_flag+0x77/0x1a0 drivers/tty/tty_buffer.c:312 tty_insert_flip_string include/linux/tty_flip.h:37 [inline] pty_write+0xf3/0x200 drivers/tty/pty.c:122 tty_put_char+0xff/0x120 drivers/tty/tty_io.c:2880 __process_echoes+0x203/0x790 drivers/tty/n_tty.c:708 flush_echoes drivers/tty/n_tty.c:829 [inline] __receive_buf drivers/tty/n_tty.c:1648 [inline] n_tty_receive_buf_common+0x75b/0x29a0 drivers/tty/n_tty.c:1742 n_tty_receive_buf+0xc/0xe drivers/tty/n_tty.c:1771 tiocsti drivers/tty/tty_io.c:2186 [inline] tty_ioctl+0x630/0x1270 drivers/tty/tty_io.c:2572 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:500 [inline] do_vfs_ioctl+0x183/0xfc0 fs/ioctl.c:684 SYSC_ioctl fs/ioctl.c:701 [inline] SyS_ioctl+0x74/0x80 fs/ioctl.c:692 do_syscall_64+0x1c9/0x5b0 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x42/0xb7 RIP: 0033:0x458c29 RSP: 002b:00007fb34725ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007fb34725ec90 RCX: 0000000000458c29 RDX: 0000000020000040 RSI: 0000000000005412 RDI: 0000000000000004 RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb34725f6d4 R13: 00000000004c2ddb R14: 00000000004d5ff0 R15: 0000000000000005 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 device hsr_slave_0 entered promiscuous mode CPU: 0 PID: 7053 Comm: syz-executor.5 Not tainted 4.14.177-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0xf7/0x13b lib/dump_stack.c:58 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold.3+0x105/0x14b lib/fault-inject.c:149 should_failslab+0xba/0xf0 mm/failslab.c:32 slab_pre_alloc_hook mm/slab.h:421 [inline] slab_alloc mm/slab.c:3376 [inline] __do_kmalloc mm/slab.c:3718 [inline] __kmalloc+0x70/0x7b0 mm/slab.c:3729 kmalloc include/linux/slab.h:493 [inline] tty_buffer_alloc drivers/tty/tty_buffer.c:169 [inline] __tty_buffer_request_room+0x191/0x620 drivers/tty/tty_buffer.c:267 tty_insert_flip_string_fixed_flag+0x77/0x1a0 drivers/tty/tty_buffer.c:312 tty_insert_flip_string include/linux/tty_flip.h:37 [inline] pty_write+0xf3/0x200 drivers/tty/pty.c:122 tty_put_char+0xff/0x120 drivers/tty/tty_io.c:2880 __process_echoes+0x203/0x790 drivers/tty/n_tty.c:708 flush_echoes drivers/tty/n_tty.c:829 [inline] __receive_buf drivers/tty/n_tty.c:1648 [inline] n_tty_receive_buf_common+0x75b/0x29a0 drivers/tty/n_tty.c:1742 n_tty_receive_buf+0xc/0xe drivers/tty/n_tty.c:1771 tiocsti drivers/tty/tty_io.c:2186 [inline] tty_ioctl+0x630/0x1270 drivers/tty/tty_io.c:2572 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:500 [inline] do_vfs_ioctl+0x183/0xfc0 fs/ioctl.c:684 SYSC_ioctl fs/ioctl.c:701 [inline] SyS_ioctl+0x74/0x80 fs/ioctl.c:692 do_syscall_64+0x1c9/0x5b0 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x42/0xb7 RIP: 0033:0x458c29 RSP: 002b:00007ff61239ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007ff61239ac90 RCX: 0000000000458c29 RDX: 0000000020000040 RSI: 0000000000005412 RDI: 0000000000000004 RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff61239b6d4 R13: 00000000004c2ddb R14: 00000000004d5ff0 R15: 0000000000000005 CPU: 1 PID: 7058 Comm: syz-executor.2 Not tainted 4.14.177-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0xf7/0x13b lib/dump_stack.c:58 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold.3+0x105/0x14b lib/fault-inject.c:149 should_failslab+0xba/0xf0 mm/failslab.c:32 slab_pre_alloc_hook mm/slab.h:421 [inline] slab_alloc mm/slab.c:3376 [inline] __do_kmalloc mm/slab.c:3718 [inline] __kmalloc+0x70/0x7b0 mm/slab.c:3729 kmalloc include/linux/slab.h:493 [inline] tty_buffer_alloc drivers/tty/tty_buffer.c:169 [inline] __tty_buffer_request_room+0x191/0x620 drivers/tty/tty_buffer.c:267 tty_insert_flip_string_fixed_flag+0x77/0x1a0 drivers/tty/tty_buffer.c:312 tty_insert_flip_string include/linux/tty_flip.h:37 [inline] pty_write+0xf3/0x200 drivers/tty/pty.c:122 tty_put_char+0xff/0x120 drivers/tty/tty_io.c:2880 __process_echoes+0x203/0x790 drivers/tty/n_tty.c:708 flush_echoes drivers/tty/n_tty.c:829 [inline] __receive_buf drivers/tty/n_tty.c:1648 [inline] n_tty_receive_buf_common+0x75b/0x29a0 drivers/tty/n_tty.c:1742 n_tty_receive_buf+0xc/0xe drivers/tty/n_tty.c:1771 tiocsti drivers/tty/tty_io.c:2186 [inline] tty_ioctl+0x630/0x1270 drivers/tty/tty_io.c:2572 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:500 [inline] do_vfs_ioctl+0x183/0xfc0 fs/ioctl.c:684 SYSC_ioctl fs/ioctl.c:701 [inline] SyS_ioctl+0x74/0x80 fs/ioctl.c:692 do_syscall_64+0x1c9/0x5b0 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x42/0xb7 RIP: 0033:0x458c29 RSP: 002b:00007fb34725ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007fb34725ec90 RCX: 0000000000458c29 RDX: 0000000020000040 RSI: 0000000000005412 RDI: 0000000000000004 RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb34725f6d4 R13: 00000000004c2ddb R14: 00000000004d5ff0 R15: 0000000000000005 device hsr_slave_1 entered promiscuous mode IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready 8021q: adding VLAN 0 to HW filter on device bond0 IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready 8021q: adding VLAN 0 to HW filter on device team0 IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready bridge0: port 1(bridge_slave_0) entered blocking state bridge0: port 1(bridge_slave_0) entered forwarding state IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready CPU: 1 PID: 7069 Comm: syz-executor.0 Not tainted 4.14.177-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0xf7/0x13b lib/dump_stack.c:58 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold.3+0x105/0x14b lib/fault-inject.c:149 should_failslab+0xba/0xf0 mm/failslab.c:32 slab_pre_alloc_hook mm/slab.h:421 [inline] slab_alloc mm/slab.c:3376 [inline] __do_kmalloc mm/slab.c:3718 [inline] __kmalloc+0x70/0x7b0 mm/slab.c:3729 bridge0: port 2(bridge_slave_1) entered blocking state kmalloc include/linux/slab.h:493 [inline] tty_buffer_alloc drivers/tty/tty_buffer.c:169 [inline] __tty_buffer_request_room+0x191/0x620 drivers/tty/tty_buffer.c:267 bridge0: port 2(bridge_slave_1) entered forwarding state tty_insert_flip_string_fixed_flag+0x77/0x1a0 drivers/tty/tty_buffer.c:312 tty_insert_flip_string include/linux/tty_flip.h:37 [inline] pty_write+0xf3/0x200 drivers/tty/pty.c:122 tty_put_char+0xff/0x120 drivers/tty/tty_io.c:2880 __process_echoes+0x203/0x790 drivers/tty/n_tty.c:708 flush_echoes drivers/tty/n_tty.c:829 [inline] __receive_buf drivers/tty/n_tty.c:1648 [inline] n_tty_receive_buf_common+0x75b/0x29a0 drivers/tty/n_tty.c:1742 n_tty_receive_buf+0xc/0xe drivers/tty/n_tty.c:1771 tiocsti drivers/tty/tty_io.c:2186 [inline] tty_ioctl+0x630/0x1270 drivers/tty/tty_io.c:2572 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:500 [inline] do_vfs_ioctl+0x183/0xfc0 fs/ioctl.c:684 SYSC_ioctl fs/ioctl.c:701 [inline] SyS_ioctl+0x74/0x80 fs/ioctl.c:692 do_syscall_64+0x1c9/0x5b0 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x42/0xb7 RIP: 0033:0x458c29 RSP: 002b:00007fb1ebaa9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007fb1ebaa9c90 RCX: 0000000000458c29 RDX: 0000000020000040 RSI: 0000000000005412 RDI: 0000000000000004 RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb1ebaaa6d4 R13: 00000000004c2ddb R14: 00000000004d5ff0 R15: 0000000000000005 IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready CPU: 0 PID: 7073 Comm: syz-executor.3 Not tainted 4.14.177-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0xf7/0x13b lib/dump_stack.c:58 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold.3+0x105/0x14b lib/fault-inject.c:149 should_failslab+0xba/0xf0 mm/failslab.c:32 slab_pre_alloc_hook mm/slab.h:421 [inline] slab_alloc mm/slab.c:3376 [inline] __do_kmalloc mm/slab.c:3718 [inline] __kmalloc+0x70/0x7b0 mm/slab.c:3729 kmalloc include/linux/slab.h:493 [inline] tty_buffer_alloc drivers/tty/tty_buffer.c:169 [inline] __tty_buffer_request_room+0x191/0x620 drivers/tty/tty_buffer.c:267 tty_insert_flip_string_fixed_flag+0x77/0x1a0 drivers/tty/tty_buffer.c:312 tty_insert_flip_string include/linux/tty_flip.h:37 [inline] pty_write+0xf3/0x200 drivers/tty/pty.c:122 tty_put_char+0xff/0x120 drivers/tty/tty_io.c:2880 __process_echoes+0x203/0x790 drivers/tty/n_tty.c:708 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 flush_echoes drivers/tty/n_tty.c:829 [inline] __receive_buf drivers/tty/n_tty.c:1648 [inline] n_tty_receive_buf_common+0x75b/0x29a0 drivers/tty/n_tty.c:1742 n_tty_receive_buf+0xc/0xe drivers/tty/n_tty.c:1771 tiocsti drivers/tty/tty_io.c:2186 [inline] tty_ioctl+0x630/0x1270 drivers/tty/tty_io.c:2572 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:500 [inline] do_vfs_ioctl+0x183/0xfc0 fs/ioctl.c:684 SYSC_ioctl fs/ioctl.c:701 [inline] SyS_ioctl+0x74/0x80 fs/ioctl.c:692 do_syscall_64+0x1c9/0x5b0 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x42/0xb7 RIP: 0033:0x458c29 RSP: 002b:00007fcee3347c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007fcee3347c90 RCX: 0000000000458c29 RDX: 0000000020000040 RSI: 0000000000005412 RDI: 0000000000000004 RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcee33486d4 R13: 00000000004c2ddb R14: 00000000004d5ff0 R15: 0000000000000005 CPU: 1 PID: 7076 Comm: syz-executor.4 Not tainted 4.14.177-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0xf7/0x13b lib/dump_stack.c:58 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold.3+0x105/0x14b lib/fault-inject.c:149 should_failslab+0xba/0xf0 mm/failslab.c:32 slab_pre_alloc_hook mm/slab.h:421 [inline] slab_alloc mm/slab.c:3376 [inline] __do_kmalloc mm/slab.c:3718 [inline] __kmalloc+0x70/0x7b0 mm/slab.c:3729 kmalloc include/linux/slab.h:493 [inline] tty_buffer_alloc drivers/tty/tty_buffer.c:169 [inline] __tty_buffer_request_room+0x191/0x620 drivers/tty/tty_buffer.c:267 tty_insert_flip_string_fixed_flag+0x77/0x1a0 drivers/tty/tty_buffer.c:312 tty_insert_flip_string include/linux/tty_flip.h:37 [inline] pty_write+0xf3/0x200 drivers/tty/pty.c:122 tty_put_char+0xff/0x120 drivers/tty/tty_io.c:2880 __process_echoes+0x203/0x790 drivers/tty/n_tty.c:708 flush_echoes drivers/tty/n_tty.c:829 [inline] __receive_buf drivers/tty/n_tty.c:1648 [inline] n_tty_receive_buf_common+0x75b/0x29a0 drivers/tty/n_tty.c:1742 n_tty_receive_buf+0xc/0xe drivers/tty/n_tty.c:1771 tiocsti drivers/tty/tty_io.c:2186 [inline] tty_ioctl+0x630/0x1270 drivers/tty/tty_io.c:2572 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:500 [inline] do_vfs_ioctl+0x183/0xfc0 fs/ioctl.c:684 SYSC_ioctl fs/ioctl.c:701 [inline] SyS_ioctl+0x74/0x80 fs/ioctl.c:692 do_syscall_64+0x1c9/0x5b0 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x42/0xb7 RIP: 0033:0x458c29 RSP: 002b:00007fc9d59c2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007fc9d59c2c90 RCX: 0000000000458c29 RDX: 0000000020000040 RSI: 0000000000005412 RDI: 0000000000000004 RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc9d59c36d4 R13: 00000000004c2ddb R14: 00000000004d5ff0 R15: 0000000000000005 CPU: 0 PID: 7074 Comm: syz-executor.0 Not tainted 4.14.177-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0xf7/0x13b lib/dump_stack.c:58 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold.3+0x105/0x14b lib/fault-inject.c:149 should_failslab+0xba/0xf0 mm/failslab.c:32 slab_pre_alloc_hook mm/slab.h:421 [inline] slab_alloc mm/slab.c:3376 [inline] __do_kmalloc mm/slab.c:3718 [inline] __kmalloc+0x70/0x7b0 mm/slab.c:3729 kmalloc include/linux/slab.h:493 [inline] tty_buffer_alloc drivers/tty/tty_buffer.c:169 [inline] __tty_buffer_request_room+0x191/0x620 drivers/tty/tty_buffer.c:267 tty_insert_flip_string_fixed_flag+0x77/0x1a0 drivers/tty/tty_buffer.c:312 IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready tty_insert_flip_string include/linux/tty_flip.h:37 [inline] pty_write+0xf3/0x200 drivers/tty/pty.c:122 IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready tty_put_char+0xff/0x120 drivers/tty/tty_io.c:2880 IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready __process_echoes+0x203/0x790 drivers/tty/n_tty.c:708 flush_echoes drivers/tty/n_tty.c:829 [inline] __receive_buf drivers/tty/n_tty.c:1648 [inline] n_tty_receive_buf_common+0x75b/0x29a0 drivers/tty/n_tty.c:1742 IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready n_tty_receive_buf+0xc/0xe drivers/tty/n_tty.c:1771 tiocsti drivers/tty/tty_io.c:2186 [inline] tty_ioctl+0x630/0x1270 drivers/tty/tty_io.c:2572 IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:500 [inline] do_vfs_ioctl+0x183/0xfc0 fs/ioctl.c:684 IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready SYSC_ioctl fs/ioctl.c:701 [inline] SyS_ioctl+0x74/0x80 fs/ioctl.c:692 do_syscall_64+0x1c9/0x5b0 arch/x86/entry/common.c:292 IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready entry_SYSCALL_64_after_hwframe+0x42/0xb7 IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready RIP: 0033:0x458c29 RSP: 002b:00007fb1ebaa9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007fb1ebaa9c90 RCX: 0000000000458c29 RDX: 0000000020000040 RSI: 0000000000005412 RDI: 0000000000000004 IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb1ebaaa6d4 R13: 00000000004c2ddb R14: 00000000004d5ff0 R15: 0000000000000005 IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready 8021q: adding VLAN 0 to HW filter on device batadv0 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 1 PID: 7091 Comm: syz-executor.1 Not tainted 4.14.177-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0xf7/0x13b lib/dump_stack.c:58 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold.3+0x105/0x14b lib/fault-inject.c:149 should_failslab+0xba/0xf0 mm/failslab.c:32 slab_pre_alloc_hook mm/slab.h:421 [inline] slab_alloc mm/slab.c:3376 [inline] __do_kmalloc mm/slab.c:3718 [inline] __kmalloc+0x70/0x7b0 mm/slab.c:3729 kmalloc include/linux/slab.h:493 [inline] tty_buffer_alloc drivers/tty/tty_buffer.c:169 [inline] __tty_buffer_request_room+0x191/0x620 drivers/tty/tty_buffer.c:267 tty_insert_flip_string_fixed_flag+0x77/0x1a0 drivers/tty/tty_buffer.c:312 tty_insert_flip_string include/linux/tty_flip.h:37 [inline] pty_write+0xf3/0x200 drivers/tty/pty.c:122 tty_put_char+0xff/0x120 drivers/tty/tty_io.c:2880 __process_echoes+0x203/0x790 drivers/tty/n_tty.c:708 flush_echoes drivers/tty/n_tty.c:829 [inline] __receive_buf drivers/tty/n_tty.c:1648 [inline] n_tty_receive_buf_common+0x75b/0x29a0 drivers/tty/n_tty.c:1742 n_tty_receive_buf+0xc/0xe drivers/tty/n_tty.c:1771 tiocsti drivers/tty/tty_io.c:2186 [inline] tty_ioctl+0x630/0x1270 drivers/tty/tty_io.c:2572 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:500 [inline] do_vfs_ioctl+0x183/0xfc0 fs/ioctl.c:684 SYSC_ioctl fs/ioctl.c:701 [inline] SyS_ioctl+0x74/0x80 fs/ioctl.c:692 do_syscall_64+0x1c9/0x5b0 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x42/0xb7 RIP: 0033:0x458c29 RSP: 002b:00007efcda26ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007efcda26ec90 RCX: 0000000000458c29 RDX: 0000000020000040 RSI: 0000000000005412 RDI: 0000000000000004 RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007efcda26f6d4 R13: 00000000004c2ddb R14: 00000000004d5ff0 R15: 0000000000000005 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 1 PID: 7100 Comm: syz-executor.5 Not tainted 4.14.177-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0xf7/0x13b lib/dump_stack.c:58 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold.3+0x105/0x14b lib/fault-inject.c:149 should_failslab+0xba/0xf0 mm/failslab.c:32 slab_pre_alloc_hook mm/slab.h:421 [inline] slab_alloc mm/slab.c:3376 [inline] __do_kmalloc mm/slab.c:3718 [inline] __kmalloc+0x70/0x7b0 mm/slab.c:3729 kmalloc include/linux/slab.h:493 [inline] tty_buffer_alloc drivers/tty/tty_buffer.c:169 [inline] __tty_buffer_request_room+0x191/0x620 drivers/tty/tty_buffer.c:267 tty_insert_flip_string_fixed_flag+0x77/0x1a0 drivers/tty/tty_buffer.c:312 tty_insert_flip_string include/linux/tty_flip.h:37 [inline] pty_write+0xf3/0x200 drivers/tty/pty.c:122 tty_put_char+0xff/0x120 drivers/tty/tty_io.c:2880 __process_echoes+0x203/0x790 drivers/tty/n_tty.c:708 flush_echoes drivers/tty/n_tty.c:829 [inline] __receive_buf drivers/tty/n_tty.c:1648 [inline] n_tty_receive_buf_common+0x75b/0x29a0 drivers/tty/n_tty.c:1742 n_tty_receive_buf+0xc/0xe drivers/tty/n_tty.c:1771 tiocsti drivers/tty/tty_io.c:2186 [inline] tty_ioctl+0x630/0x1270 drivers/tty/tty_io.c:2572 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:500 [inline] do_vfs_ioctl+0x183/0xfc0 fs/ioctl.c:684 SYSC_ioctl fs/ioctl.c:701 [inline] SyS_ioctl+0x74/0x80 fs/ioctl.c:692 do_syscall_64+0x1c9/0x5b0 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x42/0xb7 RIP: 0033:0x458c29 RSP: 002b:00007ff61239ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007ff61239ac90 RCX: 0000000000458c29 RDX: 0000000020000040 RSI: 0000000000005412 RDI: 0000000000000004 RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff61239b6d4 R13: 00000000004c2ddb R14: 00000000004d5ff0 R15: 0000000000000005 CPU: 0 PID: 7104 Comm: syz-executor.0 Not tainted 4.14.177-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0xf7/0x13b lib/dump_stack.c:58 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold.3+0x105/0x14b lib/fault-inject.c:149 should_failslab+0xba/0xf0 mm/failslab.c:32 slab_pre_alloc_hook mm/slab.h:421 [inline] slab_alloc mm/slab.c:3376 [inline] __do_kmalloc mm/slab.c:3718 [inline] __kmalloc+0x70/0x7b0 mm/slab.c:3729 kmalloc include/linux/slab.h:493 [inline] tty_buffer_alloc drivers/tty/tty_buffer.c:169 [inline] __tty_buffer_request_room+0x191/0x620 drivers/tty/tty_buffer.c:267 tty_insert_flip_string_fixed_flag+0x77/0x1a0 drivers/tty/tty_buffer.c:312 tty_insert_flip_string include/linux/tty_flip.h:37 [inline] pty_write+0xf3/0x200 drivers/tty/pty.c:122 tty_put_char+0xff/0x120 drivers/tty/tty_io.c:2880 __process_echoes+0x203/0x790 drivers/tty/n_tty.c:708 flush_echoes drivers/tty/n_tty.c:829 [inline] __receive_buf drivers/tty/n_tty.c:1648 [inline] n_tty_receive_buf_common+0x75b/0x29a0 drivers/tty/n_tty.c:1742 n_tty_receive_buf+0xc/0xe drivers/tty/n_tty.c:1771 tiocsti drivers/tty/tty_io.c:2186 [inline] tty_ioctl+0x630/0x1270 drivers/tty/tty_io.c:2572 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:500 [inline] do_vfs_ioctl+0x183/0xfc0 fs/ioctl.c:684 SYSC_ioctl fs/ioctl.c:701 [inline] SyS_ioctl+0x74/0x80 fs/ioctl.c:692 do_syscall_64+0x1c9/0x5b0 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x42/0xb7 RIP: 0033:0x458c29 RSP: 002b:00007fb1ebaa9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007fb1ebaa9c90 RCX: 0000000000458c29 RDX: 0000000020000040 RSI: 0000000000005412 RDI: 0000000000000004 RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb1ebaaa6d4 R13: 00000000004c2ddb R14: 00000000004d5ff0 R15: 0000000000000005 CPU: 1 PID: 7101 Comm: syz-executor.3 Not tainted 4.14.177-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0xf7/0x13b lib/dump_stack.c:58 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold.3+0x105/0x14b lib/fault-inject.c:149 should_failslab+0xba/0xf0 mm/failslab.c:32 slab_pre_alloc_hook mm/slab.h:421 [inline] slab_alloc mm/slab.c:3376 [inline] __do_kmalloc mm/slab.c:3718 [inline] __kmalloc+0x70/0x7b0 mm/slab.c:3729 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 kmalloc include/linux/slab.h:493 [inline] tty_buffer_alloc drivers/tty/tty_buffer.c:169 [inline] __tty_buffer_request_room+0x191/0x620 drivers/tty/tty_buffer.c:267 tty_insert_flip_string_fixed_flag+0x77/0x1a0 drivers/tty/tty_buffer.c:312 tty_insert_flip_string include/linux/tty_flip.h:37 [inline] pty_write+0xf3/0x200 drivers/tty/pty.c:122 tty_put_char+0xff/0x120 drivers/tty/tty_io.c:2880 __process_echoes+0x203/0x790 drivers/tty/n_tty.c:708 flush_echoes drivers/tty/n_tty.c:829 [inline] __receive_buf drivers/tty/n_tty.c:1648 [inline] n_tty_receive_buf_common+0x75b/0x29a0 drivers/tty/n_tty.c:1742 n_tty_receive_buf+0xc/0xe drivers/tty/n_tty.c:1771 tiocsti drivers/tty/tty_io.c:2186 [inline] tty_ioctl+0x630/0x1270 drivers/tty/tty_io.c:2572 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:500 [inline] do_vfs_ioctl+0x183/0xfc0 fs/ioctl.c:684 SYSC_ioctl fs/ioctl.c:701 [inline] SyS_ioctl+0x74/0x80 fs/ioctl.c:692 do_syscall_64+0x1c9/0x5b0 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x42/0xb7 RIP: 0033:0x458c29 RSP: 002b:00007fcee3347c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007fcee3347c90 RCX: 0000000000458c29 RDX: 0000000020000040 RSI: 0000000000005412 RDI: 0000000000000004 RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcee33486d4 R13: 00000000004c2ddb R14: 00000000004d5ff0 R15: 0000000000000005 CPU: 0 PID: 7105 Comm: syz-executor.4 Not tainted 4.14.177-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0xf7/0x13b lib/dump_stack.c:58 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold.3+0x105/0x14b lib/fault-inject.c:149 should_failslab+0xba/0xf0 mm/failslab.c:32 slab_pre_alloc_hook mm/slab.h:421 [inline] slab_alloc mm/slab.c:3376 [inline] __do_kmalloc mm/slab.c:3718 [inline] __kmalloc+0x70/0x7b0 mm/slab.c:3729 kmalloc include/linux/slab.h:493 [inline] tty_buffer_alloc drivers/tty/tty_buffer.c:169 [inline] __tty_buffer_request_room+0x191/0x620 drivers/tty/tty_buffer.c:267 tty_insert_flip_string_fixed_flag+0x77/0x1a0 drivers/tty/tty_buffer.c:312 tty_insert_flip_string include/linux/tty_flip.h:37 [inline] pty_write+0xf3/0x200 drivers/tty/pty.c:122 tty_put_char+0xff/0x120 drivers/tty/tty_io.c:2880 __process_echoes+0x203/0x790 drivers/tty/n_tty.c:708 flush_echoes drivers/tty/n_tty.c:829 [inline] __receive_buf drivers/tty/n_tty.c:1648 [inline] n_tty_receive_buf_common+0x75b/0x29a0 drivers/tty/n_tty.c:1742 n_tty_receive_buf+0xc/0xe drivers/tty/n_tty.c:1771 tiocsti drivers/tty/tty_io.c:2186 [inline] tty_ioctl+0x630/0x1270 drivers/tty/tty_io.c:2572 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:500 [inline] do_vfs_ioctl+0x183/0xfc0 fs/ioctl.c:684 SYSC_ioctl fs/ioctl.c:701 [inline] SyS_ioctl+0x74/0x80 fs/ioctl.c:692 do_syscall_64+0x1c9/0x5b0 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x42/0xb7 RIP: 0033:0x458c29 RSP: 002b:00007fc9d59c2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007fc9d59c2c90 RCX: 0000000000458c29 RDX: 0000000020000040 RSI: 0000000000005412 RDI: 0000000000000004 RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc9d59c36d4 R13: 00000000004c2ddb R14: 00000000004d5ff0 R15: 0000000000000005 CPU: 1 PID: 7106 Comm: syz-executor.1 Not tainted 4.14.177-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0xf7/0x13b lib/dump_stack.c:58 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold.3+0x105/0x14b lib/fault-inject.c:149 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 should_failslab+0xba/0xf0 mm/failslab.c:32 slab_pre_alloc_hook mm/slab.h:421 [inline] slab_alloc mm/slab.c:3376 [inline] __do_kmalloc mm/slab.c:3718 [inline] __kmalloc+0x70/0x7b0 mm/slab.c:3729 kmalloc include/linux/slab.h:493 [inline] tty_buffer_alloc drivers/tty/tty_buffer.c:169 [inline] __tty_buffer_request_room+0x191/0x620 drivers/tty/tty_buffer.c:267 tty_insert_flip_string_fixed_flag+0x77/0x1a0 drivers/tty/tty_buffer.c:312 tty_insert_flip_string include/linux/tty_flip.h:37 [inline] pty_write+0xf3/0x200 drivers/tty/pty.c:122 tty_put_char+0xff/0x120 drivers/tty/tty_io.c:2880 __process_echoes+0x203/0x790 drivers/tty/n_tty.c:708 flush_echoes drivers/tty/n_tty.c:829 [inline] __receive_buf drivers/tty/n_tty.c:1648 [inline] n_tty_receive_buf_common+0x75b/0x29a0 drivers/tty/n_tty.c:1742 n_tty_receive_buf+0xc/0xe drivers/tty/n_tty.c:1771 tiocsti drivers/tty/tty_io.c:2186 [inline] tty_ioctl+0x630/0x1270 drivers/tty/tty_io.c:2572 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:500 [inline] do_vfs_ioctl+0x183/0xfc0 fs/ioctl.c:684 SYSC_ioctl fs/ioctl.c:701 [inline] SyS_ioctl+0x74/0x80 fs/ioctl.c:692 do_syscall_64+0x1c9/0x5b0 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x42/0xb7 RIP: 0033:0x458c29 RSP: 002b:00007efcda26ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007efcda26ec90 RCX: 0000000000458c29 RDX: 0000000020000040 RSI: 0000000000005412 RDI: 0000000000000004 RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007efcda26f6d4 R13: 00000000004c2ddb R14: 00000000004d5ff0 R15: 0000000000000005 CPU: 0 PID: 7114 Comm: syz-executor.2 Not tainted 4.14.177-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0xf7/0x13b lib/dump_stack.c:58 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold.3+0x105/0x14b lib/fault-inject.c:149 should_failslab+0xba/0xf0 mm/failslab.c:32 slab_pre_alloc_hook mm/slab.h:421 [inline] slab_alloc mm/slab.c:3376 [inline] __do_kmalloc mm/slab.c:3718 [inline] __kmalloc+0x70/0x7b0 mm/slab.c:3729 kmalloc include/linux/slab.h:493 [inline] tty_buffer_alloc drivers/tty/tty_buffer.c:169 [inline] __tty_buffer_request_room+0x191/0x620 drivers/tty/tty_buffer.c:267 tty_insert_flip_string_fixed_flag+0x77/0x1a0 drivers/tty/tty_buffer.c:312 tty_insert_flip_string include/linux/tty_flip.h:37 [inline] pty_write+0xf3/0x200 drivers/tty/pty.c:122 tty_put_char+0xff/0x120 drivers/tty/tty_io.c:2880 __process_echoes+0x203/0x790 drivers/tty/n_tty.c:708 flush_echoes drivers/tty/n_tty.c:829 [inline] __receive_buf drivers/tty/n_tty.c:1648 [inline] n_tty_receive_buf_common+0x75b/0x29a0 drivers/tty/n_tty.c:1742 n_tty_receive_buf+0xc/0xe drivers/tty/n_tty.c:1771 tiocsti drivers/tty/tty_io.c:2186 [inline] tty_ioctl+0x630/0x1270 drivers/tty/tty_io.c:2572 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:500 [inline] do_vfs_ioctl+0x183/0xfc0 fs/ioctl.c:684 SYSC_ioctl fs/ioctl.c:701 [inline] SyS_ioctl+0x74/0x80 fs/ioctl.c:692 do_syscall_64+0x1c9/0x5b0 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x42/0xb7 RIP: 0033:0x458c29 RSP: 002b:00007fb34725ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007fb34725ec90 RCX: 0000000000458c29 RDX: 0000000020000040 RSI: 0000000000005412 RDI: 0000000000000004 RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb34725f6d4 R13: 00000000004c2ddb R14: 00000000004d5ff0 R15: 0000000000000005 CPU: 1 PID: 7116 Comm: syz-executor.5 Not tainted 4.14.177-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0xf7/0x13b lib/dump_stack.c:58 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold.3+0x105/0x14b lib/fault-inject.c:149 should_failslab+0xba/0xf0 mm/failslab.c:32 slab_pre_alloc_hook mm/slab.h:421 [inline] slab_alloc mm/slab.c:3376 [inline] __do_kmalloc mm/slab.c:3718 [inline] __kmalloc+0x70/0x7b0 mm/slab.c:3729 kmalloc include/linux/slab.h:493 [inline] tty_buffer_alloc drivers/tty/tty_buffer.c:169 [inline] __tty_buffer_request_room+0x191/0x620 drivers/tty/tty_buffer.c:267 tty_insert_flip_string_fixed_flag+0x77/0x1a0 drivers/tty/tty_buffer.c:312 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 tty_insert_flip_string include/linux/tty_flip.h:37 [inline] pty_write+0xf3/0x200 drivers/tty/pty.c:122 tty_put_char+0xff/0x120 drivers/tty/tty_io.c:2880 __process_echoes+0x203/0x790 drivers/tty/n_tty.c:708 flush_echoes drivers/tty/n_tty.c:829 [inline] __receive_buf drivers/tty/n_tty.c:1648 [inline] n_tty_receive_buf_common+0x75b/0x29a0 drivers/tty/n_tty.c:1742 n_tty_receive_buf+0xc/0xe drivers/tty/n_tty.c:1771 tiocsti drivers/tty/tty_io.c:2186 [inline] tty_ioctl+0x630/0x1270 drivers/tty/tty_io.c:2572 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:500 [inline] do_vfs_ioctl+0x183/0xfc0 fs/ioctl.c:684 SYSC_ioctl fs/ioctl.c:701 [inline] SyS_ioctl+0x74/0x80 fs/ioctl.c:692 do_syscall_64+0x1c9/0x5b0 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x42/0xb7 RIP: 0033:0x458c29 RSP: 002b:00007ff61239ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007ff61239ac90 RCX: 0000000000458c29 RDX: 0000000020000040 RSI: 0000000000005412 RDI: 0000000000000004 RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff61239b6d4 R13: 00000000004c2ddb R14: 00000000004d5ff0 R15: 0000000000000005 CPU: 0 PID: 7118 Comm: syz-executor.0 Not tainted 4.14.177-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0xf7/0x13b lib/dump_stack.c:58 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold.3+0x105/0x14b lib/fault-inject.c:149 should_failslab+0xba/0xf0 mm/failslab.c:32 slab_pre_alloc_hook mm/slab.h:421 [inline] slab_alloc mm/slab.c:3376 [inline] __do_kmalloc mm/slab.c:3718 [inline] __kmalloc+0x70/0x7b0 mm/slab.c:3729 kmalloc include/linux/slab.h:493 [inline] tty_buffer_alloc drivers/tty/tty_buffer.c:169 [inline] __tty_buffer_request_room+0x191/0x620 drivers/tty/tty_buffer.c:267 tty_insert_flip_string_fixed_flag+0x77/0x1a0 drivers/tty/tty_buffer.c:312 tty_insert_flip_string include/linux/tty_flip.h:37 [inline] pty_write+0xf3/0x200 drivers/tty/pty.c:122 tty_put_char+0xff/0x120 drivers/tty/tty_io.c:2880 __process_echoes+0x203/0x790 drivers/tty/n_tty.c:708 flush_echoes drivers/tty/n_tty.c:829 [inline] __receive_buf drivers/tty/n_tty.c:1648 [inline] n_tty_receive_buf_common+0x75b/0x29a0 drivers/tty/n_tty.c:1742 n_tty_receive_buf+0xc/0xe drivers/tty/n_tty.c:1771 tiocsti drivers/tty/tty_io.c:2186 [inline] tty_ioctl+0x630/0x1270 drivers/tty/tty_io.c:2572 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:500 [inline] do_vfs_ioctl+0x183/0xfc0 fs/ioctl.c:684 SYSC_ioctl fs/ioctl.c:701 [inline] SyS_ioctl+0x74/0x80 fs/ioctl.c:692 do_syscall_64+0x1c9/0x5b0 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x42/0xb7 RIP: 0033:0x458c29 RSP: 002b:00007fb1ebaa9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007fb1ebaa9c90 RCX: 0000000000458c29 RDX: 0000000020000040 RSI: 0000000000005412 RDI: 0000000000000004 RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb1ebaaa6d4 R13: 00000000004c2ddb R14: 00000000004d5ff0 R15: 0000000000000005 CPU: 1 PID: 7129 Comm: syz-executor.1 Not tainted 4.14.177-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0xf7/0x13b lib/dump_stack.c:58 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold.3+0x105/0x14b lib/fault-inject.c:149 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 should_failslab+0xba/0xf0 mm/failslab.c:32 slab_pre_alloc_hook mm/slab.h:421 [inline] slab_alloc mm/slab.c:3376 [inline] __do_kmalloc mm/slab.c:3718 [inline] __kmalloc+0x70/0x7b0 mm/slab.c:3729 kmalloc include/linux/slab.h:493 [inline] tty_buffer_alloc drivers/tty/tty_buffer.c:169 [inline] __tty_buffer_request_room+0x191/0x620 drivers/tty/tty_buffer.c:267 tty_insert_flip_string_fixed_flag+0x77/0x1a0 drivers/tty/tty_buffer.c:312 tty_insert_flip_string include/linux/tty_flip.h:37 [inline] pty_write+0xf3/0x200 drivers/tty/pty.c:122 tty_put_char+0xff/0x120 drivers/tty/tty_io.c:2880 __process_echoes+0x203/0x790 drivers/tty/n_tty.c:708 flush_echoes drivers/tty/n_tty.c:829 [inline] __receive_buf drivers/tty/n_tty.c:1648 [inline] n_tty_receive_buf_common+0x75b/0x29a0 drivers/tty/n_tty.c:1742 n_tty_receive_buf+0xc/0xe drivers/tty/n_tty.c:1771 tiocsti drivers/tty/tty_io.c:2186 [inline] tty_ioctl+0x630/0x1270 drivers/tty/tty_io.c:2572 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:500 [inline] do_vfs_ioctl+0x183/0xfc0 fs/ioctl.c:684 SYSC_ioctl fs/ioctl.c:701 [inline] SyS_ioctl+0x74/0x80 fs/ioctl.c:692 do_syscall_64+0x1c9/0x5b0 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x42/0xb7 RIP: 0033:0x458c29 RSP: 002b:00007efcda26ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007efcda26ec90 RCX: 0000000000458c29 RDX: 0000000020000040 RSI: 0000000000005412 RDI: 0000000000000004 RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007efcda26f6d4 R13: 00000000004c2ddb R14: 00000000004d5ff0 R15: 0000000000000005 CPU: 0 PID: 7131 Comm: syz-executor.4 Not tainted 4.14.177-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0xf7/0x13b lib/dump_stack.c:58 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold.3+0x105/0x14b lib/fault-inject.c:149 should_failslab+0xba/0xf0 mm/failslab.c:32 slab_pre_alloc_hook mm/slab.h:421 [inline] slab_alloc mm/slab.c:3376 [inline] __do_kmalloc mm/slab.c:3718 [inline] __kmalloc+0x70/0x7b0 mm/slab.c:3729 kmalloc include/linux/slab.h:493 [inline] tty_buffer_alloc drivers/tty/tty_buffer.c:169 [inline] __tty_buffer_request_room+0x191/0x620 drivers/tty/tty_buffer.c:267 tty_insert_flip_string_fixed_flag+0x77/0x1a0 drivers/tty/tty_buffer.c:312 tty_insert_flip_string include/linux/tty_flip.h:37 [inline] pty_write+0xf3/0x200 drivers/tty/pty.c:122 tty_put_char+0xff/0x120 drivers/tty/tty_io.c:2880 __process_echoes+0x203/0x790 drivers/tty/n_tty.c:708 flush_echoes drivers/tty/n_tty.c:829 [inline] __receive_buf drivers/tty/n_tty.c:1648 [inline] n_tty_receive_buf_common+0x75b/0x29a0 drivers/tty/n_tty.c:1742 n_tty_receive_buf+0xc/0xe drivers/tty/n_tty.c:1771 tiocsti drivers/tty/tty_io.c:2186 [inline] tty_ioctl+0x630/0x1270 drivers/tty/tty_io.c:2572 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:500 [inline] do_vfs_ioctl+0x183/0xfc0 fs/ioctl.c:684 SYSC_ioctl fs/ioctl.c:701 [inline] SyS_ioctl+0x74/0x80 fs/ioctl.c:692 do_syscall_64+0x1c9/0x5b0 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x42/0xb7 RIP: 0033:0x458c29 RSP: 002b:00007fc9d59c2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007fc9d59c2c90 RCX: 0000000000458c29 RDX: 0000000020000040 RSI: 0000000000005412 RDI: 0000000000000004 RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc9d59c36d4 R13: 00000000004c2ddb R14: 00000000004d5ff0 R15: 0000000000000005 CPU: 1 PID: 7130 Comm: syz-executor.2 Not tainted 4.14.177-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0xf7/0x13b lib/dump_stack.c:58 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold.3+0x105/0x14b lib/fault-inject.c:149 should_failslab+0xba/0xf0 mm/failslab.c:32 slab_pre_alloc_hook mm/slab.h:421 [inline] slab_alloc mm/slab.c:3376 [inline] __do_kmalloc mm/slab.c:3718 [inline] __kmalloc+0x70/0x7b0 mm/slab.c:3729 kmalloc include/linux/slab.h:493 [inline] tty_buffer_alloc drivers/tty/tty_buffer.c:169 [inline] __tty_buffer_request_room+0x191/0x620 drivers/tty/tty_buffer.c:267 tty_insert_flip_string_fixed_flag+0x77/0x1a0 drivers/tty/tty_buffer.c:312 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 tty_insert_flip_string include/linux/tty_flip.h:37 [inline] pty_write+0xf3/0x200 drivers/tty/pty.c:122 tty_put_char+0xff/0x120 drivers/tty/tty_io.c:2880 __process_echoes+0x203/0x790 drivers/tty/n_tty.c:708 flush_echoes drivers/tty/n_tty.c:829 [inline] __receive_buf drivers/tty/n_tty.c:1648 [inline] n_tty_receive_buf_common+0x75b/0x29a0 drivers/tty/n_tty.c:1742 n_tty_receive_buf+0xc/0xe drivers/tty/n_tty.c:1771 tiocsti drivers/tty/tty_io.c:2186 [inline] tty_ioctl+0x630/0x1270 drivers/tty/tty_io.c:2572 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:500 [inline] do_vfs_ioctl+0x183/0xfc0 fs/ioctl.c:684 SYSC_ioctl fs/ioctl.c:701 [inline] SyS_ioctl+0x74/0x80 fs/ioctl.c:692 do_syscall_64+0x1c9/0x5b0 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x42/0xb7 RIP: 0033:0x458c29 RSP: 002b:00007fb34725ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007fb34725ec90 RCX: 0000000000458c29 RDX: 0000000020000040 RSI: 0000000000005412 RDI: 0000000000000004 RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb34725f6d4 R13: 00000000004c2ddb R14: 00000000004d5ff0 R15: 0000000000000005 CPU: 0 PID: 7135 Comm: syz-executor.3 Not tainted 4.14.177-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0xf7/0x13b lib/dump_stack.c:58 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold.3+0x105/0x14b lib/fault-inject.c:149 should_failslab+0xba/0xf0 mm/failslab.c:32 slab_pre_alloc_hook mm/slab.h:421 [inline] slab_alloc mm/slab.c:3376 [inline] __do_kmalloc mm/slab.c:3718 [inline] __kmalloc+0x70/0x7b0 mm/slab.c:3729 kmalloc include/linux/slab.h:493 [inline] tty_buffer_alloc drivers/tty/tty_buffer.c:169 [inline] __tty_buffer_request_room+0x191/0x620 drivers/tty/tty_buffer.c:267 tty_insert_flip_string_fixed_flag+0x77/0x1a0 drivers/tty/tty_buffer.c:312 tty_insert_flip_string include/linux/tty_flip.h:37 [inline] pty_write+0xf3/0x200 drivers/tty/pty.c:122 tty_put_char+0xff/0x120 drivers/tty/tty_io.c:2880 __process_echoes+0x203/0x790 drivers/tty/n_tty.c:708 flush_echoes drivers/tty/n_tty.c:829 [inline] __receive_buf drivers/tty/n_tty.c:1648 [inline] n_tty_receive_buf_common+0x75b/0x29a0 drivers/tty/n_tty.c:1742 n_tty_receive_buf+0xc/0xe drivers/tty/n_tty.c:1771 tiocsti drivers/tty/tty_io.c:2186 [inline] tty_ioctl+0x630/0x1270 drivers/tty/tty_io.c:2572 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:500 [inline] do_vfs_ioctl+0x183/0xfc0 fs/ioctl.c:684 SYSC_ioctl fs/ioctl.c:701 [inline] SyS_ioctl+0x74/0x80 fs/ioctl.c:692 do_syscall_64+0x1c9/0x5b0 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x42/0xb7 RIP: 0033:0x458c29 RSP: 002b:00007fcee3347c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007fcee3347c90 RCX: 0000000000458c29 RDX: 0000000020000040 RSI: 0000000000005412 RDI: 0000000000000004 RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcee33486d4 R13: 00000000004c2ddb R14: 00000000004d5ff0 R15: 0000000000000005 CPU: 1 PID: 7149 Comm: syz-executor.1 Not tainted 4.14.177-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0xf7/0x13b lib/dump_stack.c:58 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold.3+0x105/0x14b lib/fault-inject.c:149 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 should_failslab+0xba/0xf0 mm/failslab.c:32 slab_pre_alloc_hook mm/slab.h:421 [inline] slab_alloc mm/slab.c:3376 [inline] __do_kmalloc mm/slab.c:3718 [inline] __kmalloc+0x70/0x7b0 mm/slab.c:3729 kmalloc include/linux/slab.h:493 [inline] tty_buffer_alloc drivers/tty/tty_buffer.c:169 [inline] __tty_buffer_request_room+0x191/0x620 drivers/tty/tty_buffer.c:267 tty_insert_flip_string_fixed_flag+0x77/0x1a0 drivers/tty/tty_buffer.c:312 tty_insert_flip_string include/linux/tty_flip.h:37 [inline] pty_write+0xf3/0x200 drivers/tty/pty.c:122 tty_put_char+0xff/0x120 drivers/tty/tty_io.c:2880 __process_echoes+0x203/0x790 drivers/tty/n_tty.c:708 flush_echoes drivers/tty/n_tty.c:829 [inline] __receive_buf drivers/tty/n_tty.c:1648 [inline] n_tty_receive_buf_common+0x75b/0x29a0 drivers/tty/n_tty.c:1742 n_tty_receive_buf+0xc/0xe drivers/tty/n_tty.c:1771 tiocsti drivers/tty/tty_io.c:2186 [inline] tty_ioctl+0x630/0x1270 drivers/tty/tty_io.c:2572 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:500 [inline] do_vfs_ioctl+0x183/0xfc0 fs/ioctl.c:684 SYSC_ioctl fs/ioctl.c:701 [inline] SyS_ioctl+0x74/0x80 fs/ioctl.c:692 do_syscall_64+0x1c9/0x5b0 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x42/0xb7 RIP: 0033:0x458c29 RSP: 002b:00007efcda26ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007efcda26ec90 RCX: 0000000000458c29 RDX: 0000000020000040 RSI: 0000000000005412 RDI: 0000000000000004 RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007efcda26f6d4 R13: 00000000004c2ddb R14: 00000000004d5ff0 R15: 0000000000000005 CPU: 0 PID: 7152 Comm: syz-executor.2 Not tainted 4.14.177-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0xf7/0x13b lib/dump_stack.c:58 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold.3+0x105/0x14b lib/fault-inject.c:149 FAULT_INJECTION: forcing a failure.