forked to background, child pid 3171 no interfaces have a carrier [ 22.563558][ T3172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 22.573802][ T3172] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.125' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 43.878156][ T3586] FAULT_INJECTION: forcing a failure. [ 43.878156][ T3586] name failslab, interval 1, probability 0, space 0, times 1 [ 43.878237][ T3586] [ 43.878240][ T3586] ====================================================== [ 43.878244][ T3586] WARNING: possible circular locking dependency detected [ 43.878248][ T3586] 5.18.0-rc4-syzkaller-00197-g2d0de93ca251 #0 Not tainted [ 43.878254][ T3586] ------------------------------------------------------ [ 43.878258][ T3586] syz-executor404/3586 is trying to acquire lock: [ 43.878264][ T3586] ffffffff8bc90700 (console_owner){....}-{0:0}, at: console_unlock+0x35e/0xdd0 [ 43.878315][ T3586] [ 43.878315][ T3586] but task is already holding lock: [ 43.878318][ T3586] ffff88801daa9158 (&port->lock){-.-.}-{2:2}, at: pty_write+0xea/0x1e0 [ 43.878346][ T3586] [ 43.878346][ T3586] which lock already depends on the new lock. [ 43.878346][ T3586] [ 43.878349][ T3586] [ 43.878349][ T3586] the existing dependency chain (in reverse order) is: [ 43.878353][ T3586] [ 43.878353][ T3586] -> #2 (&port->lock){-.-.}-{2:2}: [ 43.878367][ T3586] _raw_spin_lock_irqsave+0x39/0x50 [ 43.878385][ T3586] tty_port_tty_get+0x1f/0x100 [ 43.878397][ T3586] tty_port_default_wakeup+0x11/0x40 [ 43.878410][ T3586] serial8250_tx_chars+0x4f3/0xa50 [ 43.878425][ T3586] serial8250_handle_irq.part.0+0x328/0x3d0 [ 43.878439][ T3586] serial8250_default_handle_irq+0xb2/0x220 [ 43.878454][ T3586] serial8250_interrupt+0xfd/0x200 [ 43.878466][ T3586] __handle_irq_event_percpu+0x22b/0x880 [ 43.878478][ T3586] handle_irq_event+0xa7/0x1e0 [ 43.878488][ T3586] handle_edge_irq+0x25f/0xd00 [ 43.878501][ T3586] __common_interrupt+0x9d/0x210 [ 43.878513][ T3586] common_interrupt+0xa4/0xc0 [ 43.878526][ T3586] asm_common_interrupt+0x1e/0x40 [ 43.878538][ T3586] acpi_idle_do_entry+0x1c6/0x250 [ 43.878549][ T3586] acpi_idle_enter+0x361/0x500 [ 43.878564][ T3586] cpuidle_enter_state+0x1b1/0xc80 [ 43.878576][ T3586] cpuidle_enter+0x4a/0xa0 [ 43.878586][ T3586] do_idle+0x3e8/0x590 [ 43.878597][ T3586] cpu_startup_entry+0x14/0x20 [ 43.878607][ T3586] start_kernel+0x47f/0x4a0 [ 43.878622][ T3586] secondary_startup_64_no_verify+0xc3/0xcb [ 43.878637][ T3586] [ 43.878637][ T3586] -> #1 (&port_lock_key){-.-.}-{2:2}: [ 43.878652][ T3586] _raw_spin_lock_irqsave+0x39/0x50 [ 43.878663][ T3586] serial8250_console_write+0x91a/0xb70 [ 43.878677][ T3586] console_unlock+0x9bc/0xdd0 [ 43.878690][ T3586] vprintk_emit+0x1b4/0x5f0 [ 43.878703][ T3586] vprintk+0x80/0x90 [ 43.878715][ T3586] _printk+0xba/0xed [ 43.878728][ T3586] register_console+0x410/0x7c0 [ 43.878741][ T3586] univ8250_console_init+0x3a/0x46 [ 43.878754][ T3586] console_init+0x3c1/0x58d [ 43.878772][ T3586] start_kernel+0x30b/0x4a0 [ 43.878784][ T3586] secondary_startup_64_no_verify+0xc3/0xcb [ 43.878798][ T3586] [ 43.878798][ T3586] -> #0 (console_owner){....}-{0:0}: [ 43.878812][ T3586] __lock_acquire+0x2ac6/0x56c0 [ 43.878826][ T3586] lock_acquire+0x1ab/0x510 [ 43.878839][ T3586] console_unlock+0x3b1/0xdd0 [ 43.878851][ T3586] vprintk_emit+0x1b4/0x5f0 [ 43.878864][ T3586] vprintk+0x80/0x90 [ 43.878876][ T3586] _printk+0xba/0xed [ 43.878887][ T3586] should_fail+0x472/0x5a0 [ 43.878899][ T3586] should_failslab+0x5/0x10 [ 43.878911][ T3586] __kmalloc+0x7e/0x350 [ 43.878922][ T3586] tty_buffer_alloc+0x23f/0x2a0 [ 43.878933][ T3586] __tty_buffer_request_room+0x156/0x2a0 [ 43.878945][ T3586] tty_insert_flip_string_fixed_flag+0x8c/0x240 [ 43.878958][ T3586] pty_write+0x11c/0x1e0 [ 43.878970][ T3586] n_tty_write+0xa7a/0xfc0 [ 43.878980][ T3586] file_tty_write.constprop.0+0x520/0x900 [ 43.878995][ T3586] new_sync_write+0x38a/0x560 [ 43.879006][ T3586] vfs_write+0x7c0/0xac0 [ 43.879016][ T3586] ksys_write+0x127/0x250 [ 43.879026][ T3586] do_syscall_64+0x35/0xb0 [ 43.879039][ T3586] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 43.879052][ T3586] [ 43.879052][ T3586] other info that might help us debug this: [ 43.879052][ T3586] [ 43.879055][ T3586] Chain exists of: [ 43.879055][ T3586] console_owner --> &port_lock_key --> &port->lock [ 43.879055][ T3586] [ 43.879071][ T3586] Possible unsafe locking scenario: [ 43.879071][ T3586] [ 43.879073][ T3586] CPU0 CPU1 [ 43.879076][ T3586] ---- ---- [ 43.879078][ T3586] lock(&port->lock); [ 43.879084][ T3586] lock(&port_lock_key); [ 43.879091][ T3586] lock(&port->lock); [ 43.879098][ T3586] lock(console_owner); [ 43.879104][ T3586] [ 43.879104][ T3586] *** DEADLOCK *** [ 43.879104][ T3586] [ 43.879106][ T3586] 6 locks held by syz-executor404/3586: [ 43.879113][ T3586] #0: ffff88801a548098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x22/0x80 [ 43.879141][ T3586] #1: ffff88801a548130 (&tty->atomic_write_lock){+.+.}-{3:3}, at: file_tty_write.constprop.0+0x299/0x900 [ 43.879173][ T3586] #2: ffff88801a5482e8 (&tty->termios_rwsem){++++}-{3:3}, at: n_tty_write+0x1bf/0xfc0 [ 43.879199][ T3586] #3: ffffc90001bf9378 (&ldata->output_lock){+.+.}-{3:3}, at: n_tty_write+0xa47/0xfc0 [ 43.879226][ T3586] #4: ffff88801daa9158 (&port->lock){-.-.}-{2:2}, at: pty_write+0xea/0x1e0 [ 43.879254][ T3586] #5: ffffffff8bd70b40 (console_lock){+.+.}-{0:0}, at: vprintk+0x80/0x90 [ 43.879282][ T3586] [ 43.879282][ T3586] stack backtrace: [ 43.879286][ T3586] CPU: 0 PID: 3586 Comm: syz-executor404 Not tainted 5.18.0-rc4-syzkaller-00197-g2d0de93ca251 #0 [ 43.879300][ T3586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 43.879307][ T3586] Call Trace: [ 43.879311][ T3586] [ 43.879315][ T3586] dump_stack_lvl+0xcd/0x134 [ 43.879331][ T3586] check_noncircular+0x25f/0x2e0 [ 43.879345][ T3586] ? filter_irq_stacks+0x90/0x90 [ 43.879361][ T3586] ? print_circular_bug+0x1e0/0x1e0 [ 43.879375][ T3586] ? pointer+0x950/0x950 [ 43.879389][ T3586] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 43.879404][ T3586] ? add_lock_to_list.constprop.0+0x185/0x370 [ 43.879420][ T3586] __lock_acquire+0x2ac6/0x56c0 [ 43.879437][ T3586] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 43.879452][ T3586] ? msg_add_ext_text+0x1d0/0x1d0 [ 43.879468][ T3586] lock_acquire+0x1ab/0x510 [ 43.879481][ T3586] ? console_unlock+0x35e/0xdd0 [ 43.879496][ T3586] ? lock_release+0x720/0x720 [ 43.879509][ T3586] ? lock_downgrade+0x6e0/0x6e0 [ 43.879523][ T3586] ? do_raw_spin_lock+0x120/0x2a0 [ 43.879538][ T3586] ? rwlock_bug.part.0+0x90/0x90 [ 43.879552][ T3586] ? prb_final_commit+0x64/0xa0 [ 43.879568][ T3586] console_unlock+0x3b1/0xdd0 [ 43.879582][ T3586] ? console_unlock+0x35e/0xdd0 [ 43.879596][ T3586] ? devkmsg_read+0x730/0x730 [ 43.879610][ T3586] ? lock_release+0x720/0x720 [ 43.879627][ T3586] ? vprintk+0x80/0x90 [ 43.879641][ T3586] vprintk_emit+0x1b4/0x5f0 [ 43.879655][ T3586] ? add_lock_to_list.constprop.0+0x185/0x370 [ 43.879670][ T3586] vprintk+0x80/0x90 [ 43.879684][ T3586] _printk+0xba/0xed [ 43.879696][ T3586] ? record_print_text.cold+0x16/0x16 [ 43.879711][ T3586] ? ___ratelimit+0x222/0x4b0 [ 43.879724][ T3586] should_fail+0x472/0x5a0 [ 43.879737][ T3586] should_failslab+0x5/0x10 [ 43.879748][ T3586] __kmalloc+0x7e/0x350 [ 43.879766][ T3586] ? tty_buffer_alloc+0x23f/0x2a0 [ 43.879780][ T3586] tty_buffer_alloc+0x23f/0x2a0 [ 43.879793][ T3586] __tty_buffer_request_room+0x156/0x2a0 [ 43.879807][ T3586] tty_insert_flip_string_fixed_flag+0x8c/0x240 [ 43.879823][ T3586] pty_write+0x11c/0x1e0 [ 43.879837][ T3586] n_tty_write+0xa7a/0xfc0 [ 43.879849][ T3586] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 43.879861][ T3586] ? _copy_from_iter+0x12b/0x15a0 [ 43.879876][ T3586] ? n_tty_check_unthrottle+0x440/0x440 [ 43.879888][ T3586] ? rcu_read_lock_sched_held+0x3a/0x70 [ 43.879902][ T3586] ? __init_waitqueue_head+0xd0/0xd0 [ 43.879917][ T3586] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 43.879929][ T3586] ? __phys_addr+0xc4/0x140 [ 43.879944][ T3586] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 43.879956][ T3586] ? __phys_addr_symbol+0x2c/0x70 [ 43.879970][ T3586] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 43.879982][ T3586] ? __check_object_size+0x16c/0x4f0 [ 43.879999][ T3586] file_tty_write.constprop.0+0x520/0x900 [ 43.880017][ T3586] ? n_tty_check_unthrottle+0x440/0x440 [ 43.880031][ T3586] new_sync_write+0x38a/0x560 [ 43.880043][ T3586] ? new_sync_read+0x5f0/0x5f0 [ 43.880057][ T3586] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 43.880070][ T3586] ? security_file_permission+0xab/0xd0 [ 43.880087][ T3586] vfs_write+0x7c0/0xac0 [ 43.880099][ T3586] ksys_write+0x127/0x250 [ 43.880110][ T3586] ? __ia32_sys_read+0xb0/0xb0 [ 43.880123][ T3586] ? syscall_enter_from_user_mode+0x21/0x70 [ 43.880136][ T3586] do_syscall_64+0x35/0xb0 [ 43.880150][ T3586] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 43.880163][ T3586] RIP: 0033:0x7f868e3ad679 [ 43.880174][ T3586] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 43.880186][ T3586] RSP: 002b:00007ffcfe6eafb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 43.880197][ T3586] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f868e3ad679 [ 43.880206][ T3586] RDX: 000000000000ff2e RSI: 00000000200000c0 RDI: 0000000000000003 [ 43.880214][ T3586] RBP: 00007ffcfe6eafc0 R08: 0000000000000001 R09: 00007f868e370033 [ 43.880221][ T3586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 43.880229][ T3586] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 43.880239][ T3586] [ 44.819855][ T3586] CPU: 0 PID: 3586 Comm: syz-executor404 Not tainted 5.18.0-rc4-syzkaller-00197-g2d0de93ca251 #0 [ 44.830451][ T3586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 44.840502][ T3586] Call Trace: [ 44.843774][ T3586] [ 44.846865][ T3586] dump_stack_lvl+0xcd/0x134 [ 44.851448][ T3586] should_fail.cold+0x5/0xa [ 44.855939][ T3586] should_failslab+0x5/0x10 [ 44.860427][ T3586] __kmalloc+0x7e/0x350 [ 44.864572][ T3586] ? tty_buffer_alloc+0x23f/0x2a0 [ 44.869679][ T3586] tty_buffer_alloc+0x23f/0x2a0 [ 44.874518][ T3586] __tty_buffer_request_room+0x156/0x2a0 [ 44.880139][ T3586] tty_insert_flip_string_fixed_flag+0x8c/0x240 [ 44.886376][ T3586] pty_write+0x11c/0x1e0 [ 44.890615][ T3586] n_tty_write+0xa7a/0xfc0 [ 44.895019][ T3586] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 44.900736][ T3586] ? _copy_from_iter+0x12b/0x15a0 [ 44.905757][ T3586] ? n_tty_check_unthrottle+0x440/0x440 [ 44.911293][ T3586] ? rcu_read_lock_sched_held+0x3a/0x70 [ 44.916935][ T3586] ? __init_waitqueue_head+0xd0/0xd0 [ 44.922251][ T3586] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 44.928483][ T3586] ? __phys_addr+0xc4/0x140 [ 44.932977][ T3586] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 44.939203][ T3586] ? __phys_addr_symbol+0x2c/0x70 [ 44.944214][ T3586] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 44.949931][ T3586] ? __check_object_size+0x16c/0x4f0 [ 44.955204][ T3586] file_tty_write.constprop.0+0x520/0x900 [ 44.960936][ T3586] ? n_tty_check_unthrottle+0x440/0x440 [ 44.966474][ T3586] new_sync_write+0x38a/0x560 [ 44.971144][ T3586] ? new_sync_read+0x5f0/0x5f0 [ 44.975911][ T3586] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 44.982132][ T3586] ? security_file_permission+0xab/0xd0 [ 44.987665][ T3586] vfs_write+0x7c0/0xac0 [ 44.991911][ T3586] ksys_write+0x127/0x250 [ 44.996222][ T3586] ? __ia32_sys_read+0xb0/0xb0 [ 45.000966][ T3586] ? syscall_enter_from_user_mode+0x21/0x70 [ 45.006844][ T3586] do_syscall_64+0x35/0xb0 [ 45.011252][ T3586] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 45.017139][ T3586] RIP: 0033:0x7f868e3ad679 [ 45.021541][ T3586] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 45.041134][ T3586] RSP: 002b:00007ffcfe6eafb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 45.049540][ T3586] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f868e3ad679 [ 45.057502][ T3586] RDX: 000000000000ff2e RSI: 00000000200000c0 RDI: 0000000000000003 [ 45.065462][ T3586] RBP: 00007ffcfe6eafc0 R08: 0000000000000001 R09: 00007f868e370033 [ 45.073423][ T3586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 45.081380][ T3586] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 45.089480][ T3586]