DUID 00:04:c5:78:79:07:21:f0:b3:e0:09:b6:1a:d6:4d:97:86:4f
forked to background, child pid 3182
[   31.952849][ T3183] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.962811][ T3183] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.1.69' (ECDSA) to the list of known hosts.
executing program
syzkaller login: [   47.170810][ T3597] FAULT_INJECTION: forcing a failure.
[   47.170810][ T3597] name failslab, interval 1, probability 0, space 0, times 1
[   47.170935][ T3597] 
[   47.170939][ T3597] ======================================================
[   47.170942][ T3597] WARNING: possible circular locking dependency detected
[   47.170946][ T3597] 5.16.0-rc8-syzkaller #0 Not tainted
[   47.170953][ T3597] ------------------------------------------------------
[   47.170956][ T3597] syz-executor433/3597 is trying to acquire lock:
[   47.170962][ T3597] ffffffff8ba92e80 (console_owner){....}-{0:0}, at: console_unlock+0x303/0xb70
[   47.171006][ T3597] 
[   47.171006][ T3597] but task is already holding lock:
[   47.171009][ T3597] ffff88801ccf0958 (&port->lock){-.-.}-{2:2}, at: pty_write+0xea/0x1e0
[   47.171036][ T3597] 
[   47.171036][ T3597] which lock already depends on the new lock.
[   47.171036][ T3597] 
[   47.171039][ T3597] 
[   47.171039][ T3597] the existing dependency chain (in reverse order) is:
[   47.171042][ T3597] 
[   47.171042][ T3597] -> #2 (&port->lock){-.-.}-{2:2}:
[   47.171057][ T3597]        _raw_spin_lock_irqsave+0x39/0x50
[   47.171076][ T3597]        tty_port_tty_get+0x1f/0x100
[   47.171086][ T3597]        tty_port_default_wakeup+0x11/0x40
[   47.171097][ T3597]        serial8250_tx_chars+0x4f3/0xad0
[   47.171111][ T3597]        serial8250_handle_irq.part.0+0x328/0x3d0
[   47.171124][ T3597]        serial8250_default_handle_irq+0xb2/0x220
[   47.171136][ T3597]        serial8250_interrupt+0xfd/0x200
[   47.171147][ T3597]        __handle_irq_event_percpu+0x303/0x8f0
[   47.171161][ T3597]        handle_irq_event+0x102/0x280
[   47.171174][ T3597]        handle_edge_irq+0x25f/0xd00
[   47.171186][ T3597]        __common_interrupt+0x9d/0x210
[   47.171201][ T3597]        common_interrupt+0xa4/0xc0
[   47.171213][ T3597]        asm_common_interrupt+0x1e/0x40
[   47.171226][ T3597]        acpi_idle_do_entry+0x1c6/0x250
[   47.171238][ T3597]        acpi_idle_enter+0x361/0x500
[   47.171251][ T3597]        cpuidle_enter_state+0x1b1/0xc80
[   47.171266][ T3597]        cpuidle_enter+0x4a/0xa0
[   47.171277][ T3597]        do_idle+0x3e8/0x590
[   47.171289][ T3597]        cpu_startup_entry+0x14/0x20
[   47.171301][ T3597]        start_kernel+0x47a/0x49b
[   47.171314][ T3597]        secondary_startup_64_no_verify+0xb0/0xbb
[   47.171329][ T3597] 
[   47.171329][ T3597] -> #1 (&port_lock_key){-.-.}-{2:2}:
[   47.171343][ T3597]        _raw_spin_lock_irqsave+0x39/0x50
[   47.171356][ T3597]        serial8250_console_write+0x91a/0xb70
[   47.171369][ T3597]        console_unlock+0x7a9/0xb70
[   47.171380][ T3597]        vprintk_emit+0x198/0x4f0
[   47.171392][ T3597]        vprintk+0x80/0x90
[   47.171404][ T3597]        _printk+0xba/0xed
[   47.171418][ T3597]        register_console+0x55f/0x780
[   47.171430][ T3597]        univ8250_console_init+0x3a/0x46
[   47.171442][ T3597]        console_init+0x3c1/0x58d
[   47.171453][ T3597]        start_kernel+0x30b/0x49b
[   47.171464][ T3597]        secondary_startup_64_no_verify+0xb0/0xbb
[   47.171478][ T3597] 
[   47.171478][ T3597] -> #0 (console_owner){....}-{0:0}:
[   47.171491][ T3597]        __lock_acquire+0x2a2c/0x5470
[   47.171504][ T3597]        lock_acquire+0x1ab/0x510
[   47.171516][ T3597]        console_unlock+0x356/0xb70
[   47.171528][ T3597]        vprintk_emit+0x198/0x4f0
[   47.171544][ T3597]        vprintk+0x80/0x90
[   47.171556][ T3597]        _printk+0xba/0xed
[   47.171567][ T3597]        should_fail+0x472/0x5a0
[   47.171581][ T3597]        should_failslab+0x5/0x10
[   47.171594][ T3597]        __kmalloc+0x72/0x340
[   47.171606][ T3597]        tty_buffer_alloc+0x23f/0x2a0
[   47.171620][ T3597]        __tty_buffer_request_room+0x156/0x2a0
[   47.171634][ T3597]        tty_insert_flip_string_fixed_flag+0x93/0x250
[   47.171649][ T3597]        pty_write+0x11c/0x1e0
[   47.171659][ T3597]        n_tty_write+0xa7a/0xfd0
[   47.171670][ T3597]        file_tty_write.constprop.0+0x526/0x910
[   47.171683][ T3597]        new_sync_write+0x429/0x660
[   47.171694][ T3597]        vfs_write+0x7cd/0xae0
[   47.171704][ T3597]        ksys_write+0x12d/0x250
[   47.171714][ T3597]        do_syscall_64+0x35/0xb0
[   47.171725][ T3597]        entry_SYSCALL_64_after_hwframe+0x44/0xae
[   47.171739][ T3597] 
[   47.171739][ T3597] other info that might help us debug this:
[   47.171739][ T3597] 
[   47.171742][ T3597] Chain exists of:
[   47.171742][ T3597]   console_owner --> &port_lock_key --> &port->lock
[   47.171742][ T3597] 
[   47.171758][ T3597]  Possible unsafe locking scenario:
[   47.171758][ T3597] 
[   47.171761][ T3597]        CPU0                    CPU1
[   47.171763][ T3597]        ----                    ----
[   47.171766][ T3597]   lock(&port->lock);
[   47.171771][ T3597]                                lock(&port_lock_key);
[   47.171778][ T3597]                                lock(&port->lock);
[   47.171785][ T3597]   lock(console_owner);
[   47.171791][ T3597] 
[   47.171791][ T3597]  *** DEADLOCK ***
[   47.171791][ T3597] 
[   47.171793][ T3597] 6 locks held by syz-executor433/3597:
[   47.171800][ T3597]  #0: ffff8881472ad098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x22/0x80
[   47.171829][ T3597]  #1: ffff8881472ad130 (&tty->atomic_write_lock){+.+.}-{3:3}, at: file_tty_write.constprop.0+0x29f/0x910
[   47.171858][ T3597]  #2: ffff8881472ad2e8 (&tty->termios_rwsem){++++}-{3:3}, at: n_tty_write+0x1bf/0xfd0
[   47.171886][ T3597]  #3: ffffc90001a28378 (&ldata->output_lock){+.+.}-{3:3}, at: n_tty_write+0xa47/0xfd0
[   47.171913][ T3597]  #4: ffff88801ccf0958 (&port->lock){-.-.}-{2:2}, at: pty_write+0xea/0x1e0
[   47.171939][ T3597]  #5: ffffffff8bb732c0 (console_lock){+.+.}-{0:0}, at: vprintk+0x80/0x90
[   47.171966][ T3597] 
[   47.171966][ T3597] stack backtrace:
[   47.171970][ T3597] CPU: 1 PID: 3597 Comm: syz-executor433 Not tainted 5.16.0-rc8-syzkaller #0
[   47.171983][ T3597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   47.171991][ T3597] Call Trace:
[   47.171994][ T3597]  
[   47.171998][ T3597]  dump_stack_lvl+0xcd/0x134
[   47.172013][ T3597]  check_noncircular+0x25f/0x2e0
[   47.172026][ T3597]  ? filter_irq_stacks+0x90/0x90
[   47.172041][ T3597]  ? print_circular_bug+0x1e0/0x1e0
[   47.172055][ T3597]  ? memcpy+0x39/0x60
[   47.172066][ T3597]  ? lockdep_lock+0xc6/0x200
[   47.172078][ T3597]  ? call_rcu_zapped+0xb0/0xb0
[   47.172092][ T3597]  __lock_acquire+0x2a2c/0x5470
[   47.172108][ T3597]  ? lockdep_hardirqs_on_prepare+0x400/0x400
[   47.172124][ T3597]  lock_acquire+0x1ab/0x510
[   47.172137][ T3597]  ? console_unlock+0x303/0xb70
[   47.172150][ T3597]  ? lock_release+0x720/0x720
[   47.172163][ T3597]  ? lock_downgrade+0x6e0/0x6e0
[   47.172175][ T3597]  ? do_raw_spin_lock+0x120/0x2b0
[   47.172189][ T3597]  ? rwlock_bug.part.0+0x90/0x90
[   47.172204][ T3597]  console_unlock+0x356/0xb70
[   47.172217][ T3597]  ? console_unlock+0x303/0xb70
[   47.172231][ T3597]  ? devkmsg_read+0x730/0x730
[   47.172244][ T3597]  ? lock_release+0x720/0x720
[   47.172260][ T3597]  ? vprintk+0x80/0x90
[   47.172273][ T3597]  vprintk_emit+0x198/0x4f0
[   47.172287][ T3597]  vprintk+0x80/0x90
[   47.172300][ T3597]  _printk+0xba/0xed
[   47.172312][ T3597]  ? record_print_text.cold+0x16/0x16
[   47.172328][ T3597]  ? ___ratelimit+0x222/0x4b0
[   47.172342][ T3597]  should_fail+0x472/0x5a0
[   47.172355][ T3597]  ? tty_buffer_alloc+0x23f/0x2a0
[   47.172369][ T3597]  should_failslab+0x5/0x10
[   47.172381][ T3597]  __kmalloc+0x72/0x340
[   47.172394][ T3597]  tty_buffer_alloc+0x23f/0x2a0
[   47.172409][ T3597]  __tty_buffer_request_room+0x156/0x2a0
[   47.172425][ T3597]  tty_insert_flip_string_fixed_flag+0x93/0x250
[   47.172443][ T3597]  pty_write+0x11c/0x1e0
[   47.172455][ T3597]  n_tty_write+0xa7a/0xfd0
[   47.172469][ T3597]  ? __sanitizer_cov_trace_cmp8+0x1d/0x70
[   47.172487][ T3597]  ? n_tty_receive_char+0x5b0/0x5b0
[   47.172501][ T3597]  ? __init_waitqueue_head+0xd0/0xd0
[   47.172514][ T3597]  ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70
[   47.172529][ T3597]  ? __phys_addr+0xc4/0x140
[   47.172547][ T3597]  ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70
[   47.172561][ T3597]  ? __phys_addr_symbol+0x2c/0x70
[   47.172574][ T3597]  ? __sanitizer_cov_trace_cmp8+0x1d/0x70
[   47.172589][ T3597]  ? __check_object_size+0x16e/0x3f0
[   47.172603][ T3597]  file_tty_write.constprop.0+0x526/0x910
[   47.172616][ T3597]  ? n_tty_receive_char+0x5b0/0x5b0
[   47.172632][ T3597]  new_sync_write+0x429/0x660
[   47.172643][ T3597]  ? new_sync_read+0x6e0/0x6e0
[   47.172655][ T3597]  ? x86_pmu_start+0x160/0x270
[   47.172672][ T3597]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[   47.172687][ T3597]  ? security_file_permission+0xab/0xd0
[   47.172704][ T3597]  vfs_write+0x7cd/0xae0
[   47.172717][ T3597]  ksys_write+0x12d/0x250
[   47.172728][ T3597]  ? __ia32_sys_read+0xb0/0xb0
[   47.172740][ T3597]  ? syscall_enter_from_user_mode+0x21/0x70
[   47.172756][ T3597]  do_syscall_64+0x35/0xb0
[   47.172767][ T3597]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[   47.172783][ T3597] RIP: 0033:0x7f03f8fad679
[   47.172793][ T3597] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[   47.172805][ T3597] RSP: 002b:00007ffc2ef45d08 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   47.172817][ T3597] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f03f8fad679
[   47.172825][ T3597] RDX: 000000000000092c RSI: 0000000020000140 RDI: 0000000000000003
[   47.172832][ T3597] RBP: 00007ffc2ef45d10 R08: 0000000000000001 R09: 00007f03f8f70033
[   47.172840][ T3597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[   47.172847][ T3597] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   47.172858][ T3597]  
[   48.085798][ T3597] CPU: 1 PID: 3597 Comm: syz-executor433 Not tainted 5.16.0-rc8-syzkaller #0
[   48.094537][ T3597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   48.104572][ T3597] Call Trace:
[   48.107832][ T3597]  
[   48.110745][ T3597]  dump_stack_lvl+0xcd/0x134
[   48.115324][ T3597]  should_fail.cold+0x5/0xa
[   48.119809][ T3597]  ? tty_buffer_alloc+0x23f/0x2a0
[   48.124819][ T3597]  should_failslab+0x5/0x10
[   48.129305][ T3597]  __kmalloc+0x72/0x340
[   48.133442][ T3597]  tty_buffer_alloc+0x23f/0x2a0
[   48.138295][ T3597]  __tty_buffer_request_room+0x156/0x2a0
[   48.143912][ T3597]  tty_insert_flip_string_fixed_flag+0x93/0x250
[   48.150148][ T3597]  pty_write+0x11c/0x1e0
[   48.154474][ T3597]  n_tty_write+0xa7a/0xfd0
[   48.158874][ T3597]  ? __sanitizer_cov_trace_cmp8+0x1d/0x70
[   48.164579][ T3597]  ? n_tty_receive_char+0x5b0/0x5b0
[   48.169761][ T3597]  ? __init_waitqueue_head+0xd0/0xd0
[   48.175031][ T3597]  ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70
[   48.181256][ T3597]  ? __phys_addr+0xc4/0x140
[   48.185752][ T3597]  ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70
[   48.191973][ T3597]  ? __phys_addr_symbol+0x2c/0x70
[   48.196979][ T3597]  ? __sanitizer_cov_trace_cmp8+0x1d/0x70
[   48.202687][ T3597]  ? __check_object_size+0x16e/0x3f0
[   48.207956][ T3597]  file_tty_write.constprop.0+0x526/0x910
[   48.213744][ T3597]  ? n_tty_receive_char+0x5b0/0x5b0
[   48.218926][ T3597]  new_sync_write+0x429/0x660
[   48.223586][ T3597]  ? new_sync_read+0x6e0/0x6e0
[   48.228331][ T3597]  ? x86_pmu_start+0x160/0x270
[   48.233094][ T3597]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[   48.239322][ T3597]  ? security_file_permission+0xab/0xd0
[   48.244854][ T3597]  vfs_write+0x7cd/0xae0
[   48.249076][ T3597]  ksys_write+0x12d/0x250
[   48.253384][ T3597]  ? __ia32_sys_read+0xb0/0xb0
[   48.258128][ T3597]  ? syscall_enter_from_user_mode+0x21/0x70
[   48.264012][ T3597]  do_syscall_64+0x35/0xb0
[   48.268410][ T3597]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[   48.274288][ T3597] RIP: 0033:0x7f03f8fad679
[   48.278683][ T3597] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[   48.298272][ T3597] RSP: 002b:00007ffc2ef45d08 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   48.306669][ T3597] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f03f8fad679
[   48.314621][ T3597] RDX: 000000000000092c RSI: 0000000020000140 RDI: 0000000000000003
[   48.322572][ T3597] RBP: 00007ffc2ef45d10 R08: 0000000000000001 R09: 00007f03f8f70033
[   48.330522][ T3597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[   48.338473][ T3597] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   48.346429][ T3597]