forked to background, child pid 3171 no interfaces have a carrier [ 22.361131][ T3172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 22.372152][ T3172] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.10.7' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 41.298976][ T3587] FAULT_INJECTION: forcing a failure. [ 41.298976][ T3587] name failslab, interval 1, probability 0, space 0, times 1 [ 41.299055][ T3587] [ 41.299059][ T3587] ====================================================== [ 41.299062][ T3587] WARNING: possible circular locking dependency detected [ 41.299066][ T3587] 5.18.0-rc3-syzkaller-00080-gd569e86915b7 #0 Not tainted [ 41.299072][ T3587] ------------------------------------------------------ [ 41.299076][ T3587] syz-executor217/3587 is trying to acquire lock: [ 41.299081][ T3587] ffffffff8bc90400 (console_owner){....}-{0:0}, at: console_unlock+0x35e/0xdd0 [ 41.299131][ T3587] [ 41.299131][ T3587] but task is already holding lock: [ 41.299134][ T3587] ffff888147f0e158 (&port->lock){-.-.}-{2:2}, at: pty_write+0xea/0x1e0 [ 41.299161][ T3587] [ 41.299161][ T3587] which lock already depends on the new lock. [ 41.299161][ T3587] [ 41.299164][ T3587] [ 41.299164][ T3587] the existing dependency chain (in reverse order) is: [ 41.299167][ T3587] [ 41.299167][ T3587] -> #2 (&port->lock){-.-.}-{2:2}: [ 41.299181][ T3587] _raw_spin_lock_irqsave+0x39/0x50 [ 41.299197][ T3587] tty_port_tty_get+0x1f/0x100 [ 41.299209][ T3587] tty_port_default_wakeup+0x11/0x40 [ 41.299221][ T3587] serial8250_tx_chars+0x4f3/0xa50 [ 41.299234][ T3587] serial8250_handle_irq.part.0+0x328/0x3d0 [ 41.299248][ T3587] serial8250_default_handle_irq+0xb2/0x220 [ 41.299262][ T3587] serial8250_interrupt+0xfd/0x200 [ 41.299274][ T3587] __handle_irq_event_percpu+0x22b/0x880 [ 41.299286][ T3587] handle_irq_event+0xa7/0x1e0 [ 41.299297][ T3587] handle_edge_irq+0x25f/0xd00 [ 41.299309][ T3587] __common_interrupt+0x9d/0x210 [ 41.299320][ T3587] common_interrupt+0xa4/0xc0 [ 41.299333][ T3587] asm_common_interrupt+0x1e/0x40 [ 41.299344][ T3587] _raw_spin_unlock_irqrestore+0x38/0x70 [ 41.299355][ T3587] uart_write+0x30d/0x570 [ 41.299366][ T3587] n_tty_write+0x410/0xfc0 [ 41.299375][ T3587] file_tty_write.constprop.0+0x520/0x900 [ 41.299389][ T3587] redirected_tty_write+0xa1/0xc0 [ 41.299402][ T3587] new_sync_write+0x38a/0x560 [ 41.299413][ T3587] vfs_write+0x7c0/0xac0 [ 41.299422][ T3587] ksys_write+0x127/0x250 [ 41.299432][ T3587] do_syscall_64+0x35/0xb0 [ 41.299444][ T3587] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 41.299456][ T3587] [ 41.299456][ T3587] -> #1 (&port_lock_key){-.-.}-{2:2}: [ 41.299470][ T3587] _raw_spin_lock_irqsave+0x39/0x50 [ 41.299482][ T3587] serial8250_console_write+0x91a/0xb70 [ 41.299495][ T3587] console_unlock+0x9bc/0xdd0 [ 41.299507][ T3587] vprintk_emit+0x1b4/0x5f0 [ 41.299520][ T3587] vprintk+0x80/0x90 [ 41.299532][ T3587] _printk+0xba/0xed [ 41.299543][ T3587] register_console+0x410/0x7c0 [ 41.299556][ T3587] univ8250_console_init+0x3a/0x46 [ 41.299568][ T3587] console_init+0x3c1/0x58d [ 41.299580][ T3587] start_kernel+0x30b/0x4a0 [ 41.299592][ T3587] secondary_startup_64_no_verify+0xc3/0xcb [ 41.299606][ T3587] [ 41.299606][ T3587] -> #0 (console_owner){....}-{0:0}: [ 41.299620][ T3587] __lock_acquire+0x2ac6/0x56c0 [ 41.299633][ T3587] lock_acquire+0x1ab/0x510 [ 41.299645][ T3587] console_unlock+0x3b1/0xdd0 [ 41.299658][ T3587] vprintk_emit+0x1b4/0x5f0 [ 41.299670][ T3587] vprintk+0x80/0x90 [ 41.299682][ T3587] _printk+0xba/0xed [ 41.299692][ T3587] should_fail+0x472/0x5a0 [ 41.299703][ T3587] should_failslab+0x5/0x10 [ 41.299714][ T3587] __kmalloc+0x7e/0x350 [ 41.299725][ T3587] tty_buffer_alloc+0x23f/0x2a0 [ 41.299736][ T3587] __tty_buffer_request_room+0x156/0x2a0 [ 41.299747][ T3587] tty_insert_flip_string_fixed_flag+0x8c/0x240 [ 41.299760][ T3587] pty_write+0x11c/0x1e0 [ 41.299771][ T3587] n_tty_write+0x410/0xfc0 [ 41.299781][ T3587] file_tty_write.constprop.0+0x520/0x900 [ 41.299799][ T3587] new_sync_write+0x38a/0x560 [ 41.299809][ T3587] vfs_write+0x7c0/0xac0 [ 41.299819][ T3587] ksys_write+0x127/0x250 [ 41.299828][ T3587] do_syscall_64+0x35/0xb0 [ 41.299840][ T3587] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 41.299852][ T3587] [ 41.299852][ T3587] other info that might help us debug this: [ 41.299852][ T3587] [ 41.299855][ T3587] Chain exists of: [ 41.299855][ T3587] console_owner --> &port_lock_key --> &port->lock [ 41.299855][ T3587] [ 41.299876][ T3587] Possible unsafe locking scenario: [ 41.299876][ T3587] [ 41.299879][ T3587] CPU0 CPU1 [ 41.299882][ T3587] ---- ---- [ 41.299885][ T3587] lock(&port->lock); [ 41.299892][ T3587] lock(&port_lock_key); [ 41.299901][ T3587] lock(&port->lock); [ 41.299910][ T3587] lock(console_owner); [ 41.299918][ T3587] [ 41.299918][ T3587] *** DEADLOCK *** [ 41.299918][ T3587] [ 41.299920][ T3587] 6 locks held by syz-executor217/3587: [ 41.299930][ T3587] #0: ffff888077a51098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x22/0x80 [ 41.299966][ T3587] #1: ffff888077a51130 (&tty->atomic_write_lock){+.+.}-{3:3}, at: file_tty_write.constprop.0+0x299/0x900 [ 41.300006][ T3587] #2: ffff888077a512e8 (&o_tty->termios_rwsem/1){++++}-{3:3}, at: n_tty_write+0x1bf/0xfc0 [ 41.300038][ T3587] #3: ffffc90001a5c378 (&ldata->output_lock){+.+.}-{3:3}, at: n_tty_write+0x53c/0xfc0 [ 41.300067][ T3587] #4: ffff888147f0e158 (&port->lock){-.-.}-{2:2}, at: pty_write+0xea/0x1e0 [ 41.300101][ T3587] #5: ffffffff8bd70840 (console_lock){+.+.}-{0:0}, at: vprintk+0x80/0x90 [ 41.300136][ T3587] [ 41.300136][ T3587] stack backtrace: [ 41.300140][ T3587] CPU: 1 PID: 3587 Comm: syz-executor217 Not tainted 5.18.0-rc3-syzkaller-00080-gd569e86915b7 #0 [ 41.300157][ T3587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 41.300166][ T3587] Call Trace: [ 41.300170][ T3587] [ 41.300176][ T3587] dump_stack_lvl+0xcd/0x134 [ 41.300195][ T3587] check_noncircular+0x25f/0x2e0 [ 41.300211][ T3587] ? filter_irq_stacks+0x90/0x90 [ 41.300230][ T3587] ? print_circular_bug+0x1e0/0x1e0 [ 41.300247][ T3587] ? pointer+0x950/0x950 [ 41.300263][ T3587] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 41.300281][ T3587] ? add_lock_to_list.constprop.0+0x185/0x370 [ 41.300302][ T3587] __lock_acquire+0x2ac6/0x56c0 [ 41.300318][ T3587] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 41.300333][ T3587] ? msg_add_ext_text+0x1d0/0x1d0 [ 41.300348][ T3587] lock_acquire+0x1ab/0x510 [ 41.300361][ T3587] ? console_unlock+0x35e/0xdd0 [ 41.300375][ T3587] ? lock_release+0x720/0x720 [ 41.300388][ T3587] ? lock_downgrade+0x6e0/0x6e0 [ 41.300401][ T3587] ? do_raw_spin_lock+0x120/0x2a0 [ 41.300415][ T3587] ? rwlock_bug.part.0+0x90/0x90 [ 41.300429][ T3587] ? prb_final_commit+0x64/0xa0 [ 41.300445][ T3587] console_unlock+0x3b1/0xdd0 [ 41.300458][ T3587] ? console_unlock+0x35e/0xdd0 [ 41.300472][ T3587] ? devkmsg_read+0x730/0x730 [ 41.300486][ T3587] ? lock_release+0x720/0x720 [ 41.300501][ T3587] ? vprintk+0x80/0x90 [ 41.300515][ T3587] vprintk_emit+0x1b4/0x5f0 [ 41.300528][ T3587] ? add_lock_to_list.constprop.0+0x185/0x370 [ 41.300543][ T3587] vprintk+0x80/0x90 [ 41.300557][ T3587] _printk+0xba/0xed [ 41.300568][ T3587] ? record_print_text.cold+0x16/0x16 [ 41.300583][ T3587] ? ___ratelimit+0x222/0x4b0 [ 41.300595][ T3587] should_fail+0x472/0x5a0 [ 41.300607][ T3587] should_failslab+0x5/0x10 [ 41.300618][ T3587] __kmalloc+0x7e/0x350 [ 41.300628][ T3587] ? tty_buffer_alloc+0x23f/0x2a0 [ 41.300641][ T3587] tty_buffer_alloc+0x23f/0x2a0 [ 41.300653][ T3587] __tty_buffer_request_room+0x156/0x2a0 [ 41.300667][ T3587] tty_insert_flip_string_fixed_flag+0x8c/0x240 [ 41.300683][ T3587] pty_write+0x11c/0x1e0 [ 41.300695][ T3587] ? ptmx_open+0x360/0x360 [ 41.300708][ T3587] n_tty_write+0x410/0xfc0 [ 41.300721][ T3587] ? n_tty_check_unthrottle+0x440/0x440 [ 41.300733][ T3587] ? rcu_read_lock_sched_held+0x3a/0x70 [ 41.300747][ T3587] ? __init_waitqueue_head+0xd0/0xd0 [ 41.300760][ T3587] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 41.300773][ T3587] ? __phys_addr+0xc4/0x140 [ 41.300792][ T3587] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 41.300804][ T3587] ? __phys_addr_symbol+0x2c/0x70 [ 41.300817][ T3587] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 41.300829][ T3587] ? __check_object_size+0x16c/0x4f0 [ 41.300843][ T3587] file_tty_write.constprop.0+0x520/0x900 [ 41.300858][ T3587] ? n_tty_check_unthrottle+0x440/0x440 [ 41.300871][ T3587] new_sync_write+0x38a/0x560 [ 41.300883][ T3587] ? new_sync_read+0x5f0/0x5f0 [ 41.300896][ T3587] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 41.300909][ T3587] ? security_file_permission+0xab/0xd0 [ 41.300924][ T3587] vfs_write+0x7c0/0xac0 [ 41.300936][ T3587] ksys_write+0x127/0x250 [ 41.300947][ T3587] ? __ia32_sys_read+0xb0/0xb0 [ 41.300958][ T3587] ? syscall_enter_from_user_mode+0x21/0x70 [ 41.300972][ T3587] do_syscall_64+0x35/0xb0 [ 41.300985][ T3587] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 41.300998][ T3587] RIP: 0033:0x7f56c376e909 [ 41.301008][ T3587] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 41.301020][ T3587] RSP: 002b:00007ffc39bff3f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 41.301032][ T3587] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f56c376e909 [ 41.301040][ T3587] RDX: 0000000000000014 RSI: 0000000020000100 RDI: 0000000000000003 [ 41.301047][ T3587] RBP: 00007ffc39bff410 R08: 0000000000000001 R09: 0000000000000000 [ 41.301055][ T3587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 41.301063][ T3587] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 41.301076][ T3587] [ 42.244420][ T3587] CPU: 1 PID: 3587 Comm: syz-executor217 Not tainted 5.18.0-rc3-syzkaller-00080-gd569e86915b7 #0 [ 42.254908][ T3587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 42.265047][ T3587] Call Trace: [ 42.268319][ T3587] [ 42.271235][ T3587] dump_stack_lvl+0xcd/0x134 [ 42.275842][ T3587] should_fail.cold+0x5/0xa [ 42.280359][ T3587] should_failslab+0x5/0x10 [ 42.284853][ T3587] __kmalloc+0x7e/0x350 [ 42.288993][ T3587] ? tty_buffer_alloc+0x23f/0x2a0 [ 42.294012][ T3587] tty_buffer_alloc+0x23f/0x2a0 [ 42.298866][ T3587] __tty_buffer_request_room+0x156/0x2a0 [ 42.304518][ T3587] tty_insert_flip_string_fixed_flag+0x8c/0x240 [ 42.310763][ T3587] pty_write+0x11c/0x1e0 [ 42.314992][ T3587] ? ptmx_open+0x360/0x360 [ 42.319393][ T3587] n_tty_write+0x410/0xfc0 [ 42.323801][ T3587] ? n_tty_check_unthrottle+0x440/0x440 [ 42.329340][ T3587] ? rcu_read_lock_sched_held+0x3a/0x70 [ 42.334873][ T3587] ? __init_waitqueue_head+0xd0/0xd0 [ 42.340147][ T3587] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 42.346373][ T3587] ? __phys_addr+0xc4/0x140 [ 42.350870][ T3587] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 42.357272][ T3587] ? __phys_addr_symbol+0x2c/0x70 [ 42.362296][ T3587] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 42.367998][ T3587] ? __check_object_size+0x16c/0x4f0 [ 42.373293][ T3587] file_tty_write.constprop.0+0x520/0x900 [ 42.379023][ T3587] ? n_tty_check_unthrottle+0x440/0x440 [ 42.384566][ T3587] new_sync_write+0x38a/0x560 [ 42.389264][ T3587] ? new_sync_read+0x5f0/0x5f0 [ 42.394024][ T3587] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 42.400254][ T3587] ? security_file_permission+0xab/0xd0 [ 42.405793][ T3587] vfs_write+0x7c0/0xac0 [ 42.410023][ T3587] ksys_write+0x127/0x250 [ 42.414349][ T3587] ? __ia32_sys_read+0xb0/0xb0 [ 42.419115][ T3587] ? syscall_enter_from_user_mode+0x21/0x70 [ 42.425099][ T3587] do_syscall_64+0x35/0xb0 [ 42.429524][ T3587] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 42.435434][ T3587] RIP: 0033:0x7f56c376e909 [ 42.439842][ T3587] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 42.459440][ T3587] RSP: 002b:00007ffc39bff3f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 42.467850][ T3587] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f56c376e909 [ 42.475813][ T3587] RDX: 0000000000000014 RSI: 0000000020000100 RDI: 0000000000000003 [ 42.483813][ T3587] RBP: 00007ffc39bff410 R08: 0000000000000001 R09: 0000000000000000 [ 42.491791][ T3587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 42.499771][ T3587] R13: 0000000000000000 R14: 0000000000000000 R15: 00000000