no interfaces have a carrier [ 27.555820][ T3183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.584983][ T3183] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: [ 27.965497][ T3277] sshd (3277) used greatest stack depth: 22784 bytes left OK syzkaller Warning: Permanently added '10.128.0.134' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 52.564914][ T3608] FAULT_INJECTION: forcing a failure. [ 52.564914][ T3608] name failslab, interval 1, probability 0, space 0, times 1 [ 52.565016][ T3608] [ 52.565020][ T3608] ====================================================== [ 52.565023][ T3608] WARNING: possible circular locking dependency detected [ 52.565027][ T3608] 5.17.0-rc1-syzkaller #0 Not tainted [ 52.565033][ T3608] ------------------------------------------------------ [ 52.565036][ T3608] syz-executor996/3608 is trying to acquire lock: [ 52.565042][ T3608] ffffffff8ba921a0 (console_owner){....}-{0:0}, at: console_unlock+0x303/0xb70 [ 52.565079][ T3608] [ 52.565079][ T3608] but task is already holding lock: [ 52.565082][ T3608] ffff888075b22958 (&port->lock){-.-.}-{2:2}, at: pty_write+0xea/0x1e0 [ 52.565107][ T3608] [ 52.565107][ T3608] which lock already depends on the new lock. [ 52.565107][ T3608] [ 52.565110][ T3608] [ 52.565110][ T3608] the existing dependency chain (in reverse order) is: [ 52.565113][ T3608] [ 52.565113][ T3608] -> #2 (&port->lock){-.-.}-{2:2}: [ 52.565128][ T3608] _raw_spin_lock_irqsave+0x39/0x50 [ 52.565142][ T3608] tty_port_tty_get+0x1f/0x100 [ 52.565156][ T3608] tty_port_default_wakeup+0x11/0x40 [ 52.565171][ T3608] serial8250_tx_chars+0x4f3/0xad0 [ 52.565184][ T3608] serial8250_handle_irq.part.0+0x328/0x3d0 [ 52.565196][ T3608] serial8250_default_handle_irq+0xb2/0x220 [ 52.565209][ T3608] serial8250_interrupt+0xfd/0x200 [ 52.565224][ T3608] __handle_irq_event_percpu+0x22b/0x880 [ 52.565235][ T3608] handle_irq_event+0xa7/0x1e0 [ 52.565246][ T3608] handle_edge_irq+0x25f/0xd00 [ 52.565259][ T3608] __common_interrupt+0x9d/0x210 [ 52.565270][ T3608] common_interrupt+0xa4/0xc0 [ 52.565285][ T3608] asm_common_interrupt+0x1e/0x40 [ 52.565298][ T3608] _raw_spin_unlock_irqrestore+0x38/0x70 [ 52.565310][ T3608] uart_write+0x30d/0x570 [ 52.565322][ T3608] n_tty_write+0x410/0xfd0 [ 52.565334][ T3608] file_tty_write.constprop.0+0x526/0x910 [ 52.565347][ T3608] redirected_tty_write+0xa1/0xc0 [ 52.565358][ T3608] new_sync_write+0x431/0x660 [ 52.565372][ T3608] vfs_write+0x7cd/0xae0 [ 52.565384][ T3608] ksys_write+0x12d/0x250 [ 52.565396][ T3608] do_syscall_64+0x35/0xb0 [ 52.565408][ T3608] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 52.565421][ T3608] [ 52.565421][ T3608] -> #1 (&port_lock_key){-.-.}-{2:2}: [ 52.565435][ T3608] _raw_spin_lock_irqsave+0x39/0x50 [ 52.565447][ T3608] serial8250_console_write+0xb11/0xe90 [ 52.565459][ T3608] console_unlock+0x7a9/0xb70 [ 52.565472][ T3608] vprintk_emit+0x198/0x4f0 [ 52.565485][ T3608] vprintk+0x80/0x90 [ 52.565497][ T3608] _printk+0xba/0xed [ 52.565511][ T3608] register_console+0x410/0x7c0 [ 52.565525][ T3608] univ8250_console_init+0x3a/0x46 [ 52.565540][ T3608] console_init+0x3c1/0x58d [ 52.565554][ T3608] start_kernel+0x30b/0x49b [ 52.565566][ T3608] secondary_startup_64_no_verify+0xc3/0xcb [ 52.565581][ T3608] [ 52.565581][ T3608] -> #0 (console_owner){....}-{0:0}: [ 52.565596][ T3608] __lock_acquire+0x2a2c/0x5470 [ 52.565610][ T3608] lock_acquire+0x1ab/0x510 [ 52.565623][ T3608] console_unlock+0x356/0xb70 [ 52.565636][ T3608] vprintk_emit+0x198/0x4f0 [ 52.565649][ T3608] vprintk+0x80/0x90 [ 52.565661][ T3608] _printk+0xba/0xed [ 52.565673][ T3608] should_fail+0x472/0x5a0 [ 52.565685][ T3608] should_failslab+0x5/0x10 [ 52.565701][ T3608] __kmalloc+0x72/0x340 [ 52.565715][ T3608] tty_buffer_alloc+0x23f/0x2a0 [ 52.565728][ T3608] __tty_buffer_request_room+0x156/0x2a0 [ 52.565742][ T3608] tty_insert_flip_string_fixed_flag+0x93/0x250 [ 52.565757][ T3608] pty_write+0x11c/0x1e0 [ 52.565766][ T3608] n_tty_write+0xa7a/0xfd0 [ 52.565778][ T3608] file_tty_write.constprop.0+0x526/0x910 [ 52.565790][ T3608] new_sync_write+0x431/0x660 [ 52.565802][ T3608] vfs_write+0x7cd/0xae0 [ 52.565814][ T3608] ksys_write+0x12d/0x250 [ 52.565826][ T3608] do_syscall_64+0x35/0xb0 [ 52.565838][ T3608] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 52.565851][ T3608] [ 52.565851][ T3608] other info that might help us debug this: [ 52.565851][ T3608] [ 52.565854][ T3608] Chain exists of: [ 52.565854][ T3608] console_owner --> &port_lock_key --> &port->lock [ 52.565854][ T3608] [ 52.565869][ T3608] Possible unsafe locking scenario: [ 52.565869][ T3608] [ 52.565872][ T3608] CPU0 CPU1 [ 52.565874][ T3608] ---- ---- [ 52.565877][ T3608] lock(&port->lock); [ 52.565883][ T3608] lock(&port_lock_key); [ 52.565889][ T3608] lock(&port->lock); [ 52.565896][ T3608] lock(console_owner); [ 52.565902][ T3608] [ 52.565902][ T3608] *** DEADLOCK *** [ 52.565902][ T3608] [ 52.565904][ T3608] 6 locks held by syz-executor996/3608: [ 52.565911][ T3608] #0: ffff888015cb3098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x22/0x80 [ 52.565949][ T3608] #1: ffff888015cb3130 (&tty->atomic_write_lock){+.+.}-{3:3}, at: file_tty_write.constprop.0+0x29f/0x910 [ 52.565978][ T3608] #2: ffff888015cb32e8 (&tty->termios_rwsem){++++}-{3:3}, at: n_tty_write+0x1bf/0xfd0 [ 52.566007][ T3608] #3: ffffc90001f28378 (&ldata->output_lock){+.+.}-{3:3}, at: n_tty_write+0xa47/0xfd0 [ 52.566035][ T3608] #4: ffff888075b22958 (&port->lock){-.-.}-{2:2}, at: pty_write+0xea/0x1e0 [ 52.566060][ T3608] #5: ffffffff8bb725e0 (console_lock){+.+.}-{0:0}, at: vprintk+0x80/0x90 [ 52.566089][ T3608] [ 52.566089][ T3608] stack backtrace: [ 52.566092][ T3608] CPU: 0 PID: 3608 Comm: syz-executor996 Not tainted 5.17.0-rc1-syzkaller #0 [ 52.566105][ T3608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 52.566112][ T3608] Call Trace: [ 52.566116][ T3608] [ 52.566120][ T3608] dump_stack_lvl+0xcd/0x134 [ 52.566137][ T3608] check_noncircular+0x25f/0x2e0 [ 52.566151][ T3608] ? filter_irq_stacks+0x90/0x90 [ 52.566167][ T3608] ? print_circular_bug+0x1e0/0x1e0 [ 52.566182][ T3608] ? memcpy+0x39/0x60 [ 52.566195][ T3608] ? lockdep_lock+0xc6/0x200 [ 52.566208][ T3608] ? call_rcu_zapped+0xb0/0xb0 [ 52.566223][ T3608] __lock_acquire+0x2a2c/0x5470 [ 52.566240][ T3608] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 52.566257][ T3608] lock_acquire+0x1ab/0x510 [ 52.566270][ T3608] ? console_unlock+0x303/0xb70 [ 52.566285][ T3608] ? lock_release+0x720/0x720 [ 52.566298][ T3608] ? lock_downgrade+0x6e0/0x6e0 [ 52.566313][ T3608] ? do_raw_spin_lock+0x120/0x2b0 [ 52.566328][ T3608] ? rwlock_bug.part.0+0x90/0x90 [ 52.566344][ T3608] console_unlock+0x356/0xb70 [ 52.566357][ T3608] ? console_unlock+0x303/0xb70 [ 52.566372][ T3608] ? devkmsg_read+0x730/0x730 [ 52.566386][ T3608] ? lock_release+0x720/0x720 [ 52.566402][ T3608] ? vprintk+0x80/0x90 [ 52.566417][ T3608] vprintk_emit+0x198/0x4f0 [ 52.566432][ T3608] vprintk+0x80/0x90 [ 52.566446][ T3608] _printk+0xba/0xed [ 52.566459][ T3608] ? record_print_text.cold+0x16/0x16 [ 52.566475][ T3608] ? ___ratelimit+0x222/0x4b0 [ 52.566488][ T3608] should_fail+0x472/0x5a0 [ 52.566501][ T3608] ? tty_buffer_alloc+0x23f/0x2a0 [ 52.566514][ T3608] should_failslab+0x5/0x10 [ 52.566529][ T3608] __kmalloc+0x72/0x340 [ 52.566543][ T3608] tty_buffer_alloc+0x23f/0x2a0 [ 52.566558][ T3608] __tty_buffer_request_room+0x156/0x2a0 [ 52.566574][ T3608] tty_insert_flip_string_fixed_flag+0x93/0x250 [ 52.566592][ T3608] pty_write+0x11c/0x1e0 [ 52.566603][ T3608] n_tty_write+0xa7a/0xfd0 [ 52.566616][ T3608] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 52.566633][ T3608] ? _copy_from_iter+0x12b/0x1410 [ 52.566648][ T3608] ? n_tty_receive_char+0x5b0/0x5b0 [ 52.566662][ T3608] ? __init_waitqueue_head+0xd0/0xd0 [ 52.566677][ T3608] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 52.566693][ T3608] ? __phys_addr+0xc4/0x140 [ 52.566707][ T3608] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 52.566723][ T3608] ? __phys_addr_symbol+0x2c/0x70 [ 52.566737][ T3608] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 52.566752][ T3608] ? __check_object_size+0x16e/0x310 [ 52.566769][ T3608] file_tty_write.constprop.0+0x526/0x910 [ 52.566782][ T3608] ? n_tty_receive_char+0x5b0/0x5b0 [ 52.566797][ T3608] new_sync_write+0x431/0x660 [ 52.566811][ T3608] ? new_sync_read+0x6e0/0x6e0 [ 52.566824][ T3608] ? x86_pmu_start+0x170/0x270 [ 52.566841][ T3608] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 52.566857][ T3608] ? security_file_permission+0xab/0xd0 [ 52.566873][ T3608] vfs_write+0x7cd/0xae0 [ 52.566887][ T3608] ksys_write+0x12d/0x250 [ 52.566900][ T3608] ? __ia32_sys_read+0xb0/0xb0 [ 52.566914][ T3608] ? syscall_enter_from_user_mode+0x21/0x70 [ 52.566933][ T3608] do_syscall_64+0x35/0xb0 [ 52.566946][ T3608] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 52.566960][ T3608] RIP: 0033:0x7f54e370d679 [ 52.566970][ T3608] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 52.566982][ T3608] RSP: 002b:00007fff9e77c4a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 52.566994][ T3608] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f54e370d679 [ 52.567003][ T3608] RDX: 000000000000ff2e RSI: 00000000200000c0 RDI: 0000000000000003 [ 52.567010][ T3608] RBP: 00007fff9e77c4b0 R08: 0000000000000001 R09: 00007f54e36d0033 [ 52.567018][ T3608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 52.567026][ T3608] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 52.567036][ T3608] [ 53.495312][ T3608] CPU: 0 PID: 3608 Comm: syz-executor996 Not tainted 5.17.0-rc1-syzkaller #0 [ 53.504064][ T3608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 53.514112][ T3608] Call Trace: [ 53.517381][ T3608] [ 53.520302][ T3608] dump_stack_lvl+0xcd/0x134 [ 53.524904][ T3608] should_fail.cold+0x5/0xa [ 53.529397][ T3608] ? tty_buffer_alloc+0x23f/0x2a0 [ 53.534430][ T3608] should_failslab+0x5/0x10 [ 53.539030][ T3608] __kmalloc+0x72/0x340 [ 53.543273][ T3608] tty_buffer_alloc+0x23f/0x2a0 [ 53.548118][ T3608] __tty_buffer_request_room+0x156/0x2a0 [ 53.553856][ T3608] tty_insert_flip_string_fixed_flag+0x93/0x250 [ 53.560113][ T3608] pty_write+0x11c/0x1e0 [ 53.564353][ T3608] n_tty_write+0xa7a/0xfd0 [ 53.568765][ T3608] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 53.574481][ T3608] ? _copy_from_iter+0x12b/0x1410 [ 53.579503][ T3608] ? n_tty_receive_char+0x5b0/0x5b0 [ 53.584709][ T3608] ? __init_waitqueue_head+0xd0/0xd0 [ 53.589995][ T3608] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 53.596233][ T3608] ? __phys_addr+0xc4/0x140 [ 53.600734][ T3608] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 53.606969][ T3608] ? __phys_addr_symbol+0x2c/0x70 [ 53.612008][ T3608] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 53.618335][ T3608] ? __check_object_size+0x16e/0x310 [ 53.623618][ T3608] file_tty_write.constprop.0+0x526/0x910 [ 53.629369][ T3608] ? n_tty_receive_char+0x5b0/0x5b0 [ 53.634588][ T3608] new_sync_write+0x431/0x660 [ 53.639338][ T3608] ? new_sync_read+0x6e0/0x6e0 [ 53.644099][ T3608] ? x86_pmu_start+0x170/0x270 [ 53.648861][ T3608] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 53.655109][ T3608] ? security_file_permission+0xab/0xd0 [ 53.660666][ T3608] vfs_write+0x7cd/0xae0 [ 53.664917][ T3608] ksys_write+0x12d/0x250 [ 53.669242][ T3608] ? __ia32_sys_read+0xb0/0xb0 [ 53.674087][ T3608] ? syscall_enter_from_user_mode+0x21/0x70 [ 53.679973][ T3608] do_syscall_64+0x35/0xb0 [ 53.684403][ T3608] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 53.690390][ T3608] RIP: 0033:0x7f54e370d679 [ 53.694814][ T3608] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 53.714430][ T3608] RSP: 002b:00007fff9e77c4a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 53.722854][ T3608] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f54e370d679 [ 53.730833][ T3608] RDX: 000000000000ff2e RSI: 00000000200000c0 RDI: 0000000000000003 [ 53.738816][ T3608] RBP: 00007fff9e77c4b0 R08: 0000000000000001 R09: 00007f54e36d0033 [ 53.746777][ T3608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 53.754739][ T3608] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 53.762707][ T3608]