Warning: Permanently added '10.128.0.95' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 54.698835][ T3598] FAULT_INJECTION: forcing a failure. [ 54.698835][ T3598] name failslab, interval 1, probability 0, space 0, times 1 [ 54.698935][ T3598] [ 54.698938][ T3598] ====================================================== [ 54.698942][ T3598] WARNING: possible circular locking dependency detected [ 54.698945][ T3598] 5.18.0-rc6-syzkaller-00161-gbc403203d65a #0 Not tainted [ 54.698952][ T3598] ------------------------------------------------------ [ 54.698955][ T3598] syz-executor419/3598 is trying to acquire lock: [ 54.698961][ T3598] ffffffff8bc90700 (console_owner){....}-{0:0}, at: console_unlock+0x35e/0xdd0 [ 54.699000][ T3598] [ 54.699000][ T3598] but task is already holding lock: [ 54.699003][ T3598] ffff88801d14a158 (&port->lock){-...}-{2:2}, at: pty_write+0xea/0x1e0 [ 54.699031][ T3598] [ 54.699031][ T3598] which lock already depends on the new lock. [ 54.699031][ T3598] [ 54.699034][ T3598] [ 54.699034][ T3598] the existing dependency chain (in reverse order) is: [ 54.699037][ T3598] [ 54.699037][ T3598] -> #2 (&port->lock){-...}-{2:2}: [ 54.699052][ T3598] _raw_spin_lock_irqsave+0x39/0x50 [ 54.699070][ T3598] tty_port_tty_get+0x1f/0x100 [ 54.699083][ T3598] tty_port_default_wakeup+0x11/0x40 [ 54.699095][ T3598] serial8250_tx_chars+0x4f3/0xa50 [ 54.699110][ T3598] serial8250_handle_irq.part.0+0x328/0x3d0 [ 54.699125][ T3598] serial8250_default_handle_irq+0xb2/0x220 [ 54.699140][ T3598] serial8250_interrupt+0xfd/0x200 [ 54.699152][ T3598] __handle_irq_event_percpu+0x22b/0x880 [ 54.699165][ T3598] handle_irq_event+0xa7/0x1e0 [ 54.699175][ T3598] handle_edge_irq+0x25f/0xd00 [ 54.699187][ T3598] __common_interrupt+0x9d/0x210 [ 54.699200][ T3598] common_interrupt+0xa4/0xc0 [ 54.699214][ T3598] asm_common_interrupt+0x1e/0x40 [ 54.699228][ T3598] acpi_idle_do_entry+0x1c6/0x250 [ 54.699247][ T3598] acpi_idle_enter+0x361/0x500 [ 54.699259][ T3598] cpuidle_enter_state+0x1b1/0xc80 [ 54.699271][ T3598] cpuidle_enter+0x4a/0xa0 [ 54.699281][ T3598] do_idle+0x3e8/0x590 [ 54.699291][ T3598] cpu_startup_entry+0x14/0x20 [ 54.699302][ T3598] rest_init+0x169/0x270 [ 54.699313][ T3598] arch_call_rest_init+0xf/0x14 [ 54.699325][ T3598] start_kernel+0x47f/0x4a0 [ 54.699335][ T3598] secondary_startup_64_no_verify+0xc3/0xcb [ 54.699350][ T3598] [ 54.699350][ T3598] -> #1 (&port_lock_key){-...}-{2:2}: [ 54.699365][ T3598] _raw_spin_lock_irqsave+0x39/0x50 [ 54.699378][ T3598] serial8250_console_write+0x9cb/0xc30 [ 54.699392][ T3598] console_unlock+0x9bc/0xdd0 [ 54.699405][ T3598] vprintk_emit+0x1b4/0x5f0 [ 54.699418][ T3598] vprintk+0x80/0x90 [ 54.699430][ T3598] _printk+0xba/0xed [ 54.699443][ T3598] register_console+0x410/0x7c0 [ 54.699456][ T3598] univ8250_console_init+0x3a/0x46 [ 54.699470][ T3598] console_init+0x3c1/0x58d [ 54.699485][ T3598] start_kernel+0x30b/0x4a0 [ 54.699495][ T3598] secondary_startup_64_no_verify+0xc3/0xcb [ 54.699509][ T3598] [ 54.699509][ T3598] -> #0 (console_owner){....}-{0:0}: [ 54.699522][ T3598] __lock_acquire+0x2ac6/0x56c0 [ 54.699537][ T3598] lock_acquire+0x1ab/0x510 [ 54.699550][ T3598] console_unlock+0x3b1/0xdd0 [ 54.699562][ T3598] vprintk_emit+0x1b4/0x5f0 [ 54.699575][ T3598] vprintk+0x80/0x90 [ 54.699587][ T3598] _printk+0xba/0xed [ 54.699598][ T3598] should_fail+0x472/0x5a0 [ 54.699610][ T3598] should_failslab+0x5/0x10 [ 54.699622][ T3598] __kmalloc+0x7e/0x350 [ 54.699633][ T3598] tty_buffer_alloc+0x23f/0x2a0 [ 54.699644][ T3598] __tty_buffer_request_room+0x156/0x2a0 [ 54.699657][ T3598] tty_insert_flip_string_fixed_flag+0x8c/0x240 [ 54.699670][ T3598] pty_write+0x11c/0x1e0 [ 54.699682][ T3598] n_tty_write+0xa7a/0xfc0 [ 54.699692][ T3598] file_tty_write.constprop.0+0x520/0x900 [ 54.699708][ T3598] new_sync_write+0x38a/0x560 [ 54.699719][ T3598] vfs_write+0x7c0/0xac0 [ 54.699729][ T3598] ksys_write+0x127/0x250 [ 54.699739][ T3598] __do_fast_syscall_32+0x65/0xf0 [ 54.699752][ T3598] do_fast_syscall_32+0x2f/0x70 [ 54.699766][ T3598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 54.699781][ T3598] [ 54.699781][ T3598] other info that might help us debug this: [ 54.699781][ T3598] [ 54.699784][ T3598] Chain exists of: [ 54.699784][ T3598] console_owner --> &port_lock_key --> &port->lock [ 54.699784][ T3598] [ 54.699799][ T3598] Possible unsafe locking scenario: [ 54.699799][ T3598] [ 54.699802][ T3598] CPU0 CPU1 [ 54.699804][ T3598] ---- ---- [ 54.699806][ T3598] lock(&port->lock); [ 54.699812][ T3598] lock(&port_lock_key); [ 54.699819][ T3598] lock(&port->lock); [ 54.699826][ T3598] lock(console_owner); [ 54.699832][ T3598] [ 54.699832][ T3598] *** DEADLOCK *** [ 54.699832][ T3598] [ 54.699834][ T3598] 6 locks held by syz-executor419/3598: [ 54.699841][ T3598] #0: ffff88801a4d2098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x22/0x80 [ 54.699869][ T3598] #1: ffff88801a4d2130 (&tty->atomic_write_lock){+.+.}-{3:3}, at: file_tty_write.constprop.0+0x299/0x900 [ 54.699900][ T3598] #2: ffff88801a4d22e8 (&tty->termios_rwsem){++++}-{3:3}, at: n_tty_write+0x1bf/0xfc0 [ 54.699926][ T3598] #3: ffffc900013da378 (&ldata->output_lock){+.+.}-{3:3}, at: n_tty_write+0xa47/0xfc0 [ 54.699953][ T3598] #4: ffff88801d14a158 (&port->lock){-...}-{2:2}, at: pty_write+0xea/0x1e0 [ 54.699981][ T3598] #5: ffffffff8bd70b40 (console_lock){+.+.}-{0:0}, at: vprintk+0x80/0x90 [ 54.700009][ T3598] [ 54.700009][ T3598] stack backtrace: [ 54.700012][ T3598] CPU: 0 PID: 3598 Comm: syz-executor419 Not tainted 5.18.0-rc6-syzkaller-00161-gbc403203d65a #0 [ 54.700026][ T3598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 54.700033][ T3598] Call Trace: [ 54.700036][ T3598] [ 54.700041][ T3598] dump_stack_lvl+0xcd/0x134 [ 54.700057][ T3598] check_noncircular+0x25f/0x2e0 [ 54.700071][ T3598] ? filter_irq_stacks+0x90/0x90 [ 54.700086][ T3598] ? print_circular_bug+0x1e0/0x1e0 [ 54.700100][ T3598] ? pointer+0x950/0x950 [ 54.700114][ T3598] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 54.700129][ T3598] ? add_lock_to_list.constprop.0+0x185/0x370 [ 54.700145][ T3598] __lock_acquire+0x2ac6/0x56c0 [ 54.700162][ T3598] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 54.700177][ T3598] ? msg_add_ext_text+0x1d0/0x1d0 [ 54.700193][ T3598] lock_acquire+0x1ab/0x510 [ 54.700206][ T3598] ? console_unlock+0x35e/0xdd0 [ 54.700221][ T3598] ? lock_release+0x720/0x720 [ 54.700234][ T3598] ? lock_downgrade+0x6e0/0x6e0 [ 54.700253][ T3598] ? do_raw_spin_lock+0x120/0x2a0 [ 54.700268][ T3598] ? rwlock_bug.part.0+0x90/0x90 [ 54.700283][ T3598] ? prb_final_commit+0x64/0xa0 [ 54.700299][ T3598] console_unlock+0x3b1/0xdd0 [ 54.700312][ T3598] ? console_unlock+0x35e/0xdd0 [ 54.700327][ T3598] ? devkmsg_read+0x730/0x730 [ 54.700341][ T3598] ? lock_release+0x720/0x720 [ 54.700358][ T3598] ? vprintk+0x80/0x90 [ 54.700372][ T3598] vprintk_emit+0x1b4/0x5f0 [ 54.700386][ T3598] ? add_lock_to_list.constprop.0+0x185/0x370 [ 54.700401][ T3598] vprintk+0x80/0x90 [ 54.700415][ T3598] _printk+0xba/0xed [ 54.700427][ T3598] ? record_print_text.cold+0x16/0x16 [ 54.700443][ T3598] ? ___ratelimit+0x222/0x4b0 [ 54.700455][ T3598] should_fail+0x472/0x5a0 [ 54.700467][ T3598] should_failslab+0x5/0x10 [ 54.700479][ T3598] __kmalloc+0x7e/0x350 [ 54.700489][ T3598] ? tty_buffer_alloc+0x23f/0x2a0 [ 54.700503][ T3598] tty_buffer_alloc+0x23f/0x2a0 [ 54.700516][ T3598] __tty_buffer_request_room+0x156/0x2a0 [ 54.700530][ T3598] tty_insert_flip_string_fixed_flag+0x8c/0x240 [ 54.700547][ T3598] pty_write+0x11c/0x1e0 [ 54.700560][ T3598] n_tty_write+0xa7a/0xfc0 [ 54.700572][ T3598] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 54.700584][ T3598] ? _copy_from_iter+0x12b/0x15a0 [ 54.700599][ T3598] ? n_tty_check_unthrottle+0x440/0x440 [ 54.700611][ T3598] ? rcu_read_lock_sched_held+0x3a/0x70 [ 54.700626][ T3598] ? __init_waitqueue_head+0xd0/0xd0 [ 54.700642][ T3598] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 54.700655][ T3598] ? __phys_addr+0xc4/0x140 [ 54.700669][ T3598] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 54.700682][ T3598] ? __phys_addr_symbol+0x2c/0x70 [ 54.700696][ T3598] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 54.700708][ T3598] ? __check_object_size+0x16c/0x4f0 [ 54.700722][ T3598] file_tty_write.constprop.0+0x520/0x900 [ 54.700738][ T3598] ? n_tty_check_unthrottle+0x440/0x440 [ 54.700752][ T3598] new_sync_write+0x38a/0x560 [ 54.700764][ T3598] ? new_sync_read+0x5f0/0x5f0 [ 54.700775][ T3598] ? find_held_lock+0x2d/0x110 [ 54.700790][ T3598] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 54.700803][ T3598] ? security_file_permission+0xab/0xd0 [ 54.700819][ T3598] vfs_write+0x7c0/0xac0 [ 54.700831][ T3598] ksys_write+0x127/0x250 [ 54.700842][ T3598] ? __ia32_sys_read+0xb0/0xb0 [ 54.700855][ T3598] ? syscall_enter_from_user_mode_prepare+0x17/0x40 [ 54.700870][ T3598] __do_fast_syscall_32+0x65/0xf0 [ 54.700885][ T3598] do_fast_syscall_32+0x2f/0x70 [ 54.700900][ T3598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 54.700916][ T3598] RIP: 0023:0xf7f26549 [ 54.700926][ T3598] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 54.700937][ T3598] RSP: 002b:00000000ffb6a24c EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 54.700948][ T3598] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000300 [ 54.700957][ T3598] RDX: 000000000000ff2e RSI: 0000000000000033 RDI: 00000000ffb6a364 [ 54.700964][ T3598] RBP: 00000000ffb6a36c R08: 0000000000000000 R09: 0000000000000000 [ 54.700972][ T3598] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 54.700979][ T3598] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 54.700989][ T3598] [ 55.663278][ T3598] CPU: 0 PID: 3598 Comm: syz-executor419 Not tainted 5.18.0-rc6-syzkaller-00161-gbc403203d65a #0 [ 55.673787][ T3598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 55.683839][ T3598] Call Trace: [ 55.687105][ T3598] [ 55.690031][ T3598] dump_stack_lvl+0xcd/0x134 [ 55.694632][ T3598] should_fail.cold+0x5/0xa [ 55.699137][ T3598] should_failslab+0x5/0x10 [ 55.703637][ T3598] __kmalloc+0x7e/0x350 [ 55.707787][ T3598] ? tty_buffer_alloc+0x23f/0x2a0 [ 55.712800][ T3598] tty_buffer_alloc+0x23f/0x2a0 [ 55.717640][ T3598] __tty_buffer_request_room+0x156/0x2a0 [ 55.723263][ T3598] tty_insert_flip_string_fixed_flag+0x8c/0x240 [ 55.729498][ T3598] pty_write+0x11c/0x1e0 [ 55.733732][ T3598] n_tty_write+0xa7a/0xfc0 [ 55.738148][ T3598] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 55.743852][ T3598] ? _copy_from_iter+0x12b/0x15a0 [ 55.748875][ T3598] ? n_tty_check_unthrottle+0x440/0x440 [ 55.754406][ T3598] ? rcu_read_lock_sched_held+0x3a/0x70 [ 55.759954][ T3598] ? __init_waitqueue_head+0xd0/0xd0 [ 55.765231][ T3598] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 55.771456][ T3598] ? __phys_addr+0xc4/0x140 [ 55.775949][ T3598] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 55.782176][ T3598] ? __phys_addr_symbol+0x2c/0x70 [ 55.787187][ T3598] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 55.792892][ T3598] ? __check_object_size+0x16c/0x4f0 [ 55.798170][ T3598] file_tty_write.constprop.0+0x520/0x900 [ 55.803894][ T3598] ? n_tty_check_unthrottle+0x440/0x440 [ 55.809428][ T3598] new_sync_write+0x38a/0x560 [ 55.814091][ T3598] ? new_sync_read+0x5f0/0x5f0 [ 55.818841][ T3598] ? find_held_lock+0x2d/0x110 [ 55.823596][ T3598] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 55.829821][ T3598] ? security_file_permission+0xab/0xd0 [ 55.835358][ T3598] vfs_write+0x7c0/0xac0 [ 55.839586][ T3598] ksys_write+0x127/0x250 [ 55.843901][ T3598] ? __ia32_sys_read+0xb0/0xb0 [ 55.848650][ T3598] ? syscall_enter_from_user_mode_prepare+0x17/0x40 [ 55.855230][ T3598] __do_fast_syscall_32+0x65/0xf0 [ 55.860249][ T3598] do_fast_syscall_32+0x2f/0x70 [ 55.865092][ T3598] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 55.871411][ T3598] RIP: 0023:0xf7f26549 [ 55.875471][ T3598] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 55.895071][ T3598] RSP: 002b:00000000ffb6a24c EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 55.903485][ T3598] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000300 [ 55.911451][ T3598] RDX: 000000000000ff2e RSI: 0000000000000033 RDI: 00000000ffb6a364 [ 55.919418][ T3598] RBP: 00000000ffb6a36c R08: 0000000000000000 R09: 0000000000000000 [ 55.927377][ T3598] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 55.935331][ T3598] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 55.943294][ T3598]