Warning: Permanently added '10.128.0.233' (ECDSA) to the list of known hosts. syzkaller login: [ 49.181667][ T3605] FAULT_INJECTION: forcing a failure. [ 49.181667][ T3605] name failslab, interval 1, probability 0, space 0, times 1 [ 49.181758][ T3605] [ 49.181761][ T3605] ====================================================== [ 49.181765][ T3605] WARNING: possible circular locking dependency detected [ 49.181769][ T3605] 5.16.0-rc8-syzkaller #0 Not tainted [ 49.181774][ T3605] ------------------------------------------------------ [ 49.181778][ T3605] syz-executor505/3605 is trying to acquire lock: [ 49.181784][ T3605] ffffffff8ba92e80 (console_owner){....}-{0:0}, at: console_unlock+0x303/0xb70 [ 49.181828][ T3605] [ 49.181828][ T3605] but task is already holding lock: [ 49.181831][ T3605] ffff88802321a958 (&port->lock){-.-.}-{2:2}, at: pty_write+0xea/0x1e0 [ 49.181856][ T3605] [ 49.181856][ T3605] which lock already depends on the new lock. [ 49.181856][ T3605] [ 49.181859][ T3605] [ 49.181859][ T3605] the existing dependency chain (in reverse order) is: [ 49.181863][ T3605] [ 49.181863][ T3605] -> #2 (&port->lock){-.-.}-{2:2}: [ 49.181877][ T3605] _raw_spin_lock_irqsave+0x39/0x50 [ 49.181896][ T3605] tty_port_tty_get+0x1f/0x100 [ 49.181906][ T3605] tty_port_default_wakeup+0x11/0x40 [ 49.181917][ T3605] serial8250_tx_chars+0x4f3/0xad0 [ 49.181930][ T3605] serial8250_handle_irq.part.0+0x328/0x3d0 [ 49.181943][ T3605] serial8250_default_handle_irq+0xb2/0x220 [ 49.181955][ T3605] serial8250_interrupt+0xfd/0x200 [ 49.181966][ T3605] __handle_irq_event_percpu+0x303/0x8f0 [ 49.181980][ T3605] handle_irq_event+0x102/0x280 [ 49.181994][ T3605] handle_edge_irq+0x25f/0xd00 [ 49.182005][ T3605] __common_interrupt+0x9d/0x210 [ 49.182019][ T3605] common_interrupt+0xa4/0xc0 [ 49.182031][ T3605] asm_common_interrupt+0x1e/0x40 [ 49.182045][ T3605] _raw_spin_unlock_irqrestore+0x38/0x70 [ 49.182058][ T3605] uart_write+0x30d/0x570 [ 49.182071][ T3605] n_tty_write+0x410/0xfd0 [ 49.182084][ T3605] file_tty_write.constprop.0+0x526/0x910 [ 49.182097][ T3605] redirected_tty_write+0xa1/0xc0 executing program [ 49.182108][ T3605] new_sync_write+0x429/0x660 [ 49.182120][ T3605] vfs_write+0x7cd/0xae0 [ 49.182130][ T3605] ksys_write+0x12d/0x250 [ 49.182140][ T3605] do_syscall_64+0x35/0xb0 [ 49.182150][ T3605] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 49.182164][ T3605] [ 49.182164][ T3605] -> #1 (&port_lock_key){-.-.}-{2:2}: [ 49.182179][ T3605] _raw_spin_lock_irqsave+0x39/0x50 [ 49.182192][ T3605] serial8250_console_write+0x91a/0xb70 [ 49.182209][ T3605] console_unlock+0x7a9/0xb70 [ 49.182221][ T3605] vprintk_emit+0x198/0x4f0 [ 49.182233][ T3605] vprintk+0x80/0x90 [ 49.182244][ T3605] _printk+0xba/0xed [ 49.182257][ T3605] register_console+0x55f/0x780 [ 49.182269][ T3605] univ8250_console_init+0x3a/0x46 [ 49.182281][ T3605] console_init+0x3c1/0x58d [ 49.182293][ T3605] start_kernel+0x30b/0x49b [ 49.182305][ T3605] secondary_startup_64_no_verify+0xb0/0xbb [ 49.182319][ T3605] [ 49.182319][ T3605] -> #0 (console_owner){....}-{0:0}: [ 49.182333][ T3605] __lock_acquire+0x2a2c/0x5470 [ 49.182346][ T3605] lock_acquire+0x1ab/0x510 [ 49.182358][ T3605] console_unlock+0x356/0xb70 [ 49.182370][ T3605] vprintk_emit+0x198/0x4f0 [ 49.182382][ T3605] vprintk+0x80/0x90 [ 49.182393][ T3605] _printk+0xba/0xed [ 49.182404][ T3605] should_fail+0x472/0x5a0 [ 49.182417][ T3605] should_failslab+0x5/0x10 [ 49.182430][ T3605] __kmalloc+0x72/0x340 [ 49.182441][ T3605] tty_buffer_alloc+0x23f/0x2a0 [ 49.182454][ T3605] __tty_buffer_request_room+0x156/0x2a0 [ 49.182468][ T3605] tty_insert_flip_string_fixed_flag+0x93/0x250 [ 49.182483][ T3605] pty_write+0x11c/0x1e0 [ 49.182493][ T3605] n_tty_write+0x410/0xfd0 [ 49.182505][ T3605] file_tty_write.constprop.0+0x526/0x910 [ 49.182517][ T3605] new_sync_write+0x429/0x660 [ 49.182527][ T3605] vfs_write+0x7cd/0xae0 [ 49.182537][ T3605] ksys_write+0x12d/0x250 [ 49.182547][ T3605] do_syscall_64+0x35/0xb0 [ 49.182557][ T3605] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 49.182571][ T3605] [ 49.182571][ T3605] other info that might help us debug this: [ 49.182571][ T3605] [ 49.182574][ T3605] Chain exists of: [ 49.182574][ T3605] console_owner --> &port_lock_key --> &port->lock [ 49.182574][ T3605] [ 49.182589][ T3605] Possible unsafe locking scenario: [ 49.182589][ T3605] [ 49.182592][ T3605] CPU0 CPU1 [ 49.182594][ T3605] ---- ---- [ 49.182597][ T3605] lock(&port->lock); [ 49.182602][ T3605] lock(&port_lock_key); [ 49.182609][ T3605] lock(&port->lock); [ 49.182616][ T3605] lock(console_owner); [ 49.182621][ T3605] [ 49.182621][ T3605] *** DEADLOCK *** [ 49.182621][ T3605] [ 49.182623][ T3605] 6 locks held by syz-executor505/3605: [ 49.182630][ T3605] #0: ffff888073c55098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x22/0x80 [ 49.182670][ T3605] #1: ffff888073c55130 (&tty->atomic_write_lock){+.+.}-{3:3}, at: file_tty_write.constprop.0+0x29f/0x910 [ 49.182713][ T3605] #2: ffff888073c552e8 (&o_tty->termios_rwsem/1){++++}-{3:3}, at: n_tty_write+0x1bf/0xfd0 [ 49.182758][ T3605] #3: ffffc90001a6c378 (&ldata->output_lock){+.+.}-{3:3}, at: n_tty_write+0x53c/0xfd0 [ 49.182786][ T3605] #4: ffff88802321a958 (&port->lock){-.-.}-{2:2}, at: pty_write+0xea/0x1e0 [ 49.182812][ T3605] #5: ffffffff8bb732c0 (console_lock){+.+.}-{0:0}, at: vprintk+0x80/0x90 [ 49.182839][ T3605] [ 49.182839][ T3605] stack backtrace: [ 49.182842][ T3605] CPU: 1 PID: 3605 Comm: syz-executor505 Not tainted 5.16.0-rc8-syzkaller #0 [ 49.182855][ T3605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 49.182863][ T3605] Call Trace: [ 49.182866][ T3605] [ 49.182871][ T3605] dump_stack_lvl+0xcd/0x134 [ 49.182886][ T3605] check_noncircular+0x25f/0x2e0 [ 49.182899][ T3605] ? filter_irq_stacks+0x90/0x90 [ 49.182913][ T3605] ? print_circular_bug+0x1e0/0x1e0 [ 49.182927][ T3605] ? memcpy+0x39/0x60 [ 49.182938][ T3605] ? lockdep_lock+0xc6/0x200 [ 49.182950][ T3605] ? call_rcu_zapped+0xb0/0xb0 [ 49.182964][ T3605] __lock_acquire+0x2a2c/0x5470 [ 49.182980][ T3605] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 49.182996][ T3605] lock_acquire+0x1ab/0x510 [ 49.183009][ T3605] ? console_unlock+0x303/0xb70 [ 49.183022][ T3605] ? lock_release+0x720/0x720 [ 49.183035][ T3605] ? lock_downgrade+0x6e0/0x6e0 [ 49.183047][ T3605] ? do_raw_spin_lock+0x120/0x2b0 [ 49.183061][ T3605] ? rwlock_bug.part.0+0x90/0x90 [ 49.183077][ T3605] console_unlock+0x356/0xb70 [ 49.183089][ T3605] ? console_unlock+0x303/0xb70 [ 49.183103][ T3605] ? devkmsg_read+0x730/0x730 [ 49.183116][ T3605] ? lock_release+0x720/0x720 [ 49.183132][ T3605] ? vprintk+0x80/0x90 [ 49.183145][ T3605] vprintk_emit+0x198/0x4f0 [ 49.183159][ T3605] vprintk+0x80/0x90 [ 49.183172][ T3605] _printk+0xba/0xed [ 49.183185][ T3605] ? record_print_text.cold+0x16/0x16 [ 49.183205][ T3605] ? ___ratelimit+0x222/0x4b0 [ 49.183219][ T3605] should_fail+0x472/0x5a0 [ 49.183232][ T3605] ? tty_buffer_alloc+0x23f/0x2a0 [ 49.183246][ T3605] should_failslab+0x5/0x10 [ 49.183259][ T3605] __kmalloc+0x72/0x340 [ 49.183271][ T3605] tty_buffer_alloc+0x23f/0x2a0 [ 49.183286][ T3605] __tty_buffer_request_room+0x156/0x2a0 [ 49.183302][ T3605] tty_insert_flip_string_fixed_flag+0x93/0x250 [ 49.183320][ T3605] pty_write+0x11c/0x1e0 [ 49.183331][ T3605] ? pty_stop+0x160/0x160 [ 49.183343][ T3605] n_tty_write+0x410/0xfd0 [ 49.183359][ T3605] ? n_tty_receive_char+0x5b0/0x5b0 [ 49.183373][ T3605] ? __init_waitqueue_head+0xd0/0xd0 [ 49.183387][ T3605] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 49.183403][ T3605] ? __phys_addr+0xc4/0x140 [ 49.183416][ T3605] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 49.183431][ T3605] ? __phys_addr_symbol+0x2c/0x70 [ 49.183444][ T3605] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 49.183458][ T3605] ? __check_object_size+0x16e/0x3f0 [ 49.183473][ T3605] file_tty_write.constprop.0+0x526/0x910 [ 49.183486][ T3605] ? n_tty_receive_char+0x5b0/0x5b0 [ 49.183501][ T3605] new_sync_write+0x429/0x660 [ 49.183513][ T3605] ? new_sync_read+0x6e0/0x6e0 [ 49.183525][ T3605] ? x86_pmu_start+0x160/0x270 [ 49.183541][ T3605] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 49.183556][ T3605] ? security_file_permission+0xab/0xd0 [ 49.183575][ T3605] vfs_write+0x7cd/0xae0 [ 49.183587][ T3605] ksys_write+0x12d/0x250 [ 49.183598][ T3605] ? __ia32_sys_read+0xb0/0xb0 [ 49.183610][ T3605] ? syscall_enter_from_user_mode+0x21/0x70 [ 49.183626][ T3605] do_syscall_64+0x35/0xb0 [ 49.183637][ T3605] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 49.183652][ T3605] RIP: 0033:0x7fc95b33b789 [ 49.183662][ T3605] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 49.183674][ T3605] RSP: 002b:00007ffe62e2d6f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 49.183686][ T3605] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007fc95b33b789 [ 49.183694][ T3605] RDX: 00000000fffffedf RSI: 0000000020000000 RDI: 0000000000000004 [ 49.183702][ T3605] RBP: 00007ffe62e2d710 R08: 0000000000000001 R09: 0000000000000001 [ 49.183709][ T3605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 49.183716][ T3605] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 49.183727][ T3605] [ 50.101745][ T3605] CPU: 1 PID: 3605 Comm: syz-executor505 Not tainted 5.16.0-rc8-syzkaller #0 [ 50.110485][ T3605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 50.120577][ T3605] Call Trace: [ 50.123843][ T3605] [ 50.126758][ T3605] dump_stack_lvl+0xcd/0x134 [ 50.131337][ T3605] should_fail.cold+0x5/0xa [ 50.135826][ T3605] ? tty_buffer_alloc+0x23f/0x2a0 [ 50.140836][ T3605] should_failslab+0x5/0x10 [ 50.145323][ T3605] __kmalloc+0x72/0x340 [ 50.149462][ T3605] tty_buffer_alloc+0x23f/0x2a0 [ 50.154296][ T3605] __tty_buffer_request_room+0x156/0x2a0 [ 50.159917][ T3605] tty_insert_flip_string_fixed_flag+0x93/0x250 [ 50.166147][ T3605] pty_write+0x11c/0x1e0 [ 50.170371][ T3605] ? pty_stop+0x160/0x160 [ 50.174679][ T3605] n_tty_write+0x410/0xfd0 [ 50.179090][ T3605] ? n_tty_receive_char+0x5b0/0x5b0 [ 50.184286][ T3605] ? __init_waitqueue_head+0xd0/0xd0 [ 50.189563][ T3605] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 50.195909][ T3605] ? __phys_addr+0xc4/0x140 [ 50.200410][ T3605] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 50.206739][ T3605] ? __phys_addr_symbol+0x2c/0x70 [ 50.211755][ T3605] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 50.217463][ T3605] ? __check_object_size+0x16e/0x3f0 [ 50.222925][ T3605] file_tty_write.constprop.0+0x526/0x910 [ 50.228645][ T3605] ? n_tty_receive_char+0x5b0/0x5b0 [ 50.233832][ T3605] new_sync_write+0x429/0x660 [ 50.238498][ T3605] ? new_sync_read+0x6e0/0x6e0 [ 50.243250][ T3605] ? x86_pmu_start+0x160/0x270 [ 50.248005][ T3605] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 50.254239][ T3605] ? security_file_permission+0xab/0xd0 [ 50.259936][ T3605] vfs_write+0x7cd/0xae0 [ 50.264184][ T3605] ksys_write+0x12d/0x250 [ 50.268495][ T3605] ? __ia32_sys_read+0xb0/0xb0 [ 50.273251][ T3605] ? syscall_enter_from_user_mode+0x21/0x70 [ 50.279239][ T3605] do_syscall_64+0x35/0xb0 [ 50.283826][ T3605] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 50.289714][ T3605] RIP: 0033:0x7fc95b33b789 [ 50.294116][ T3605] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 50.313703][ T3605] RSP: 002b:00007ffe62e2d6f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 50.322103][ T3605] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007fc95b33b789 [ 50.330186][ T3605] RDX: 00000000fffffedf RSI: 0000000020000000 RDI: 0000000000000004 [ 50.338344][ T3605] RBP: 00007ffe62e2d710 R08: 0000000000000001 R09: 0000000000000001 [ 50.346298][ T3605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 50.354256][ T3605] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 50.362215][ T3605]