Extracting prog: 1m0.816656441s
Minimizing prog: 15m48.692989649s
Simplifying prog options: 0s
Extracting C: 1m41.347233521s
Simplifying C: 7m14.918060512s


extracting reproducer from 1 programs
testing a last program of every proc
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$tty1-ioctl$KDSKBENT-openat$uinput-ioctl$UI_SET_EVBIT-ioctl$UI_SET_KEYBIT-ioctl$UI_DEV_SETUP-ioctl$UI_DEV_CREATE-write$input_event
detailed listing:
executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000000)={0x0, 0x1c, 0x20f})
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1)
ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x1c)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00', 0x1})
ioctl$UI_DEV_CREATE(r1, 0x5501)
write$input_event(r1, &(0x7f0000000100)={{}, 0x1, 0x1c, 0x1}, 0x18)

program crashed: possible deadlock in n_tty_flush_buffer
single: successfully extracted reproducer
found reproducer with 8 syscalls
minimizing guilty program
testing program (duration=37.583824818s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$tty1-ioctl$KDSKBENT-openat$uinput-ioctl$UI_SET_EVBIT-ioctl$UI_SET_KEYBIT-ioctl$UI_DEV_SETUP-ioctl$UI_DEV_CREATE
detailed listing:
executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000000)={0x0, 0x1c, 0x20f})
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1)
ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x1c)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00', 0x1})
ioctl$UI_DEV_CREATE(r1, 0x5501)

program did not crash
testing program (duration=37.583824818s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$tty1-ioctl$KDSKBENT-openat$uinput-ioctl$UI_SET_EVBIT-ioctl$UI_SET_KEYBIT-ioctl$UI_DEV_SETUP-write$input_event
detailed listing:
executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000000)={0x0, 0x1c, 0x20f})
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1)
ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x1c)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00', 0x1})
write$input_event(r1, &(0x7f0000000100)={{}, 0x1, 0x1c, 0x1}, 0x18)

program did not crash
testing program (duration=37.583824818s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$tty1-ioctl$KDSKBENT-openat$uinput-ioctl$UI_SET_EVBIT-ioctl$UI_SET_KEYBIT-ioctl$UI_DEV_CREATE-write$input_event
detailed listing:
executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000000)={0x0, 0x1c, 0x20f})
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1)
ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x1c)
ioctl$UI_DEV_CREATE(r1, 0x5501)
write$input_event(r1, &(0x7f0000000100)={{}, 0x1, 0x1c, 0x1}, 0x18)

program did not crash
testing program (duration=37.583824818s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$tty1-ioctl$KDSKBENT-openat$uinput-ioctl$UI_SET_EVBIT-ioctl$UI_DEV_SETUP-ioctl$UI_DEV_CREATE-write$input_event
detailed listing:
executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000000)={0x0, 0x1c, 0x20f})
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00', 0x1})
ioctl$UI_DEV_CREATE(r1, 0x5501)
write$input_event(r1, &(0x7f0000000100)={{}, 0x1, 0x1c, 0x1}, 0x18)

program did not crash
testing program (duration=37.583824818s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$tty1-ioctl$KDSKBENT-openat$uinput-ioctl$UI_SET_KEYBIT-ioctl$UI_DEV_SETUP-ioctl$UI_DEV_CREATE-write$input_event
detailed listing:
executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000000)={0x0, 0x1c, 0x20f})
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x1c)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00', 0x1})
ioctl$UI_DEV_CREATE(r1, 0x5501)
write$input_event(r1, &(0x7f0000000100)={{}, 0x1, 0x1c, 0x1}, 0x18)

program did not crash
testing program (duration=37.583824818s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$tty1-ioctl$KDSKBENT-ioctl$UI_SET_EVBIT-ioctl$UI_SET_KEYBIT-ioctl$UI_DEV_SETUP-ioctl$UI_DEV_CREATE-write$input_event
detailed listing:
executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000000)={0x0, 0x1c, 0x20f})
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x1)
ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x1c)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00', 0x1})
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
write$input_event(0xffffffffffffffff, &(0x7f0000000100)={{}, 0x1, 0x1c, 0x1}, 0x18)

program did not crash
testing program (duration=37.583824818s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$tty1-openat$uinput-ioctl$UI_SET_EVBIT-ioctl$UI_SET_KEYBIT-ioctl$UI_DEV_SETUP-ioctl$UI_DEV_CREATE-write$input_event
detailed listing:
executing program 0:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1)
ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x1c)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00', 0x1})
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$input_event(r0, &(0x7f0000000100)={{}, 0x1, 0x1c, 0x1}, 0x18)

program did not crash
testing program (duration=37.583824818s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$KDSKBENT-openat$uinput-ioctl$UI_SET_EVBIT-ioctl$UI_SET_KEYBIT-ioctl$UI_DEV_SETUP-ioctl$UI_DEV_CREATE-write$input_event
detailed listing:
executing program 0:
ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000000)={0x0, 0x1c, 0x20f})
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1)
ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x1c)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00', 0x1})
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$input_event(r0, &(0x7f0000000100)={{}, 0x1, 0x1c, 0x1}, 0x18)

program did not crash
testing program (duration=37.583824818s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$tty1-ioctl$KDSKBENT-openat$uinput-ioctl$UI_SET_EVBIT-ioctl$UI_SET_KEYBIT-ioctl$UI_DEV_SETUP-ioctl$UI_DEV_CREATE-write$input_event
detailed listing:
executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBENT(r0, 0x4b47, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1)
ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x1c)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00', 0x1})
ioctl$UI_DEV_CREATE(r1, 0x5501)
write$input_event(r1, &(0x7f0000000100)={{}, 0x1, 0x1c, 0x1}, 0x18)

program did not crash
testing program (duration=37.583824818s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$tty1-ioctl$KDSKBENT-openat$uinput-ioctl$UI_SET_EVBIT-ioctl$UI_SET_KEYBIT-ioctl$UI_DEV_SETUP-ioctl$UI_DEV_CREATE-write$input_event
detailed listing:
executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000000)={0x0, 0x1c, 0x20f})
r1 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1)
ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x1c)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00', 0x1})
ioctl$UI_DEV_CREATE(r1, 0x5501)
write$input_event(r1, &(0x7f0000000100)={{}, 0x1, 0x1c, 0x1}, 0x18)

program did not crash
testing program (duration=37.583824818s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$tty1-ioctl$KDSKBENT-openat$uinput-ioctl$UI_SET_EVBIT-ioctl$UI_SET_KEYBIT-ioctl$UI_DEV_SETUP-ioctl$UI_DEV_CREATE-write$input_event
detailed listing:
executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000000)={0x0, 0x1c, 0x20f})
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1)
ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x1c)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, 0x0)
ioctl$UI_DEV_CREATE(r1, 0x5501)
write$input_event(r1, &(0x7f0000000100)={{}, 0x1, 0x1c, 0x1}, 0x18)

program did not crash
testing program (duration=37.583824818s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$tty1-ioctl$KDSKBENT-openat$uinput-ioctl$UI_SET_EVBIT-ioctl$UI_SET_KEYBIT-ioctl$UI_DEV_SETUP-ioctl$UI_DEV_CREATE-write$input_event
detailed listing:
executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000000)={0x0, 0x1c, 0x20f})
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1)
ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x1c)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00', 0x1})
ioctl$UI_DEV_CREATE(r1, 0x5501)
write$input_event(r1, 0x0, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=37.583824818s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$tty1-ioctl$KDSKBENT-openat$uinput-ioctl$UI_SET_EVBIT-ioctl$UI_SET_KEYBIT-ioctl$UI_DEV_SETUP-ioctl$UI_DEV_CREATE-write$input_event
program crashed: possible deadlock in n_tty_flush_buffer
simplifying C reproducer
testing compiled C program (duration=37.583824818s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$tty1-ioctl$KDSKBENT-openat$uinput-ioctl$UI_SET_EVBIT-ioctl$UI_SET_KEYBIT-ioctl$UI_DEV_SETUP-ioctl$UI_DEV_CREATE-write$input_event
program crashed: possible deadlock in n_tty_flush_buffer
testing compiled C program (duration=37.583824818s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$tty1-ioctl$KDSKBENT-openat$uinput-ioctl$UI_SET_EVBIT-ioctl$UI_SET_KEYBIT-ioctl$UI_DEV_SETUP-ioctl$UI_DEV_CREATE-write$input_event
program did not crash
testing compiled C program (duration=37.583824818s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$tty1-ioctl$KDSKBENT-openat$uinput-ioctl$UI_SET_EVBIT-ioctl$UI_SET_KEYBIT-ioctl$UI_DEV_SETUP-ioctl$UI_DEV_CREATE-write$input_event
program did not crash
testing compiled C program (duration=37.583824818s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$tty1-ioctl$KDSKBENT-openat$uinput-ioctl$UI_SET_EVBIT-ioctl$UI_SET_KEYBIT-ioctl$UI_DEV_SETUP-ioctl$UI_DEV_CREATE-write$input_event
program crashed: possible deadlock in n_tty_flush_buffer
testing compiled C program (duration=37.583824818s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$tty1-ioctl$KDSKBENT-openat$uinput-ioctl$UI_SET_EVBIT-ioctl$UI_SET_KEYBIT-ioctl$UI_DEV_SETUP-ioctl$UI_DEV_CREATE-write$input_event
program crashed: possible deadlock in n_tty_flush_buffer
testing compiled C program (duration=37.583824818s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$tty1-ioctl$KDSKBENT-openat$uinput-ioctl$UI_SET_EVBIT-ioctl$UI_SET_KEYBIT-ioctl$UI_DEV_SETUP-ioctl$UI_DEV_CREATE-write$input_event
program crashed: possible deadlock in n_tty_flush_buffer
testing compiled C program (duration=37.583824818s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$tty1-ioctl$KDSKBENT-openat$uinput-ioctl$UI_SET_EVBIT-ioctl$UI_SET_KEYBIT-ioctl$UI_DEV_SETUP-ioctl$UI_DEV_CREATE-write$input_event
program crashed: possible deadlock in n_tty_flush_buffer
testing compiled C program (duration=37.583824818s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$tty1-ioctl$KDSKBENT-openat$uinput-ioctl$UI_SET_EVBIT-ioctl$UI_SET_KEYBIT-ioctl$UI_DEV_SETUP-ioctl$UI_DEV_CREATE-write$input_event
program crashed: possible deadlock in n_tty_flush_buffer
testing program (duration=37.583824818s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$tty1-ioctl$KDSKBENT-openat$uinput-ioctl$UI_SET_EVBIT-ioctl$UI_SET_KEYBIT-ioctl$UI_DEV_SETUP-ioctl$UI_DEV_CREATE-write$input_event
detailed listing:
executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000000)={0x0, 0x1c, 0x20f})
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1)
ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x1c)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00', 0x1})
ioctl$UI_DEV_CREATE(r1, 0x5501)
write$input_event(r1, &(0x7f0000000100)={{}, 0x1, 0x1c, 0x1}, 0x18)

program crashed: possible deadlock in n_tty_flush_buffer
validation run: crashed=true
testing program (duration=37.583824818s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$tty1-ioctl$KDSKBENT-openat$uinput-ioctl$UI_SET_EVBIT-ioctl$UI_SET_KEYBIT-ioctl$UI_DEV_SETUP-ioctl$UI_DEV_CREATE-write$input_event
detailed listing:
executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000000)={0x0, 0x1c, 0x20f})
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1)
ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x1c)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00', 0x1})
ioctl$UI_DEV_CREATE(r1, 0x5501)
write$input_event(r1, &(0x7f0000000100)={{}, 0x1, 0x1c, 0x1}, 0x18)

program crashed: possible deadlock in n_tty_flush_buffer
validation run: crashed=true
testing program (duration=37.583824818s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$tty1-ioctl$KDSKBENT-openat$uinput-ioctl$UI_SET_EVBIT-ioctl$UI_SET_KEYBIT-ioctl$UI_DEV_SETUP-ioctl$UI_DEV_CREATE-write$input_event
detailed listing:
executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000000)={0x0, 0x1c, 0x20f})
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1)
ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x1c)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00', 0x1})
ioctl$UI_DEV_CREATE(r1, 0x5501)
write$input_event(r1, &(0x7f0000000100)={{}, 0x1, 0x1c, 0x1}, 0x18)

program crashed: possible deadlock in n_tty_flush_buffer
validation run: crashed=true
reproducing took 29m51.92693766s
repro crashed as (corrupted=false):
======================================================
WARNING: possible circular locking dependency detected
syzkaller #0 Not tainted
------------------------------------------------------
kworker/0:8/5007 is trying to acquire lock:
ffff0000d53002c8 (&tty->termios_rwsem){++++}-{4:4}, at: class_rwsem_write_constructor include/linux/rwsem.h:270 [inline]
ffff0000d53002c8 (&tty->termios_rwsem){++++}-{4:4}, at: n_tty_flush_buffer+0x2c/0xa4 drivers/tty/n_tty.c:349

but task is already holding lock:
ffff0000c006a0b8 (&buf->lock){+.+.}-{4:4}, at: tty_buffer_flush+0x78/0x2b4 drivers/tty/tty_buffer.c:236

which lock already depends on the new lock.


the existing dependency chain (in reverse order) is:

-> #4 (&buf->lock){+.+.}-{4:4}:
       __mutex_lock_common kernel/locking/mutex.c:646 [inline]
       __mutex_lock+0x164/0xf14 kernel/locking/mutex.c:821
       mutex_lock_nested+0x24/0x30 kernel/locking/mutex.c:874
       tty_buffer_flush+0x78/0x2b4 drivers/tty/tty_buffer.c:236
       tty_ldisc_flush+0x30/0x7c drivers/tty/tty_ldisc.c:388
       __do_SAK+0x21c/0x604 drivers/tty/tty_io.c:3025
       vc_SAK+0x74/0xa4 drivers/tty/vt/vt_ioctl.c:996
       process_one_work kernel/workqueue.c:3322 [inline]
       process_scheduled_works+0x788/0x10b8 kernel/workqueue.c:3405
       worker_thread+0x798/0xbd0 kernel/workqueue.c:3486
       kthread+0x304/0x3d4 kernel/kthread.c:436
       ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:838

-> #3 (console_lock){+.+.}-{0:0}:
       console_lock+0x8c/0xac kernel/printk/printk.c:2896
       console_call_setup+0x54/0xa4 kernel/printk/printk.c:3881
       try_enable_preferred_console+0x444/0x5a4 kernel/printk/printk.c:3926
       register_console+0x3a0/0xb98 kernel/printk/printk.c:4120
       univ8250_console_init+0x5c/0x84 drivers/tty/serial/8250/8250_core.c:515
       console_init+0x14c/0x89c kernel/printk/printk.c:4407
       start_kernel+0x25c/0x3c0 init/main.c:1112
       __primary_switched+0x8c/0x94 arch/arm64/kernel/head.S:246

-> #2 (console_mutex){+.+.}-{4:4}:
       __mutex_lock_common kernel/locking/mutex.c:646 [inline]
       __mutex_lock+0x164/0xf14 kernel/locking/mutex.c:821
       mutex_lock_nested+0x24/0x30 kernel/locking/mutex.c:874
       console_list_lock+0x90/0xa8 kernel/printk/printk.c:263
       console_is_registered include/linux/console.h:573 [inline]
       uart_configure_port drivers/tty/serial/serial_core.c:2574 [inline]
       serial_core_add_one_port drivers/tty/serial/serial_core.c:3101 [inline]
       serial_core_register_port+0x1284/0x1b0c drivers/tty/serial/serial_core.c:3322
       serial_ctrl_register_port+0x28/0x38 drivers/tty/serial/serial_ctrl.c:41
       uart_add_one_port+0x28/0x38 drivers/tty/serial/serial_port.c:143
       pl011_register_port+0x194/0x2ec drivers/tty/serial/amba-pl011.c:3009
       sbsa_uart_probe+0x334/0x46c drivers/tty/serial/amba-pl011.c:3185
       platform_probe+0x100/0x1a4 drivers/base/platform.c:1439
       call_driver_probe drivers/base/dd.c:-1 [inline]
       really_probe+0x29c/0x800 drivers/base/dd.c:706
       __driver_probe_device+0x1e0/0x350 drivers/base/dd.c:868
       driver_probe_device+0x6c/0x19c drivers/base/dd.c:898
       __device_attach_driver+0x198/0x2f8 drivers/base/dd.c:1026
       bus_for_each_drv+0x144/0x1dc drivers/base/bus.c:500
       __device_attach+0x248/0x390 drivers/base/dd.c:1098
       device_initial_probe+0x90/0xc8 drivers/base/dd.c:1153
       bus_probe_device+0x58/0x120 drivers/base/bus.c:620
       device_add+0x6cc/0x9e0 drivers/base/core.c:3772
       platform_device_add+0x3dc/0x6f0 drivers/base/platform.c:762
       platform_device_register_full+0x4fc/0x5ac drivers/base/platform.c:902
       acpi_create_platform_device+0x50c/0x6e4 drivers/acpi/acpi_platform.c:181
       acpi_default_enumeration+0x200/0x438 drivers/acpi/scan.c:2281
       acpi_bus_attach+0x64c/0x7e0 drivers/acpi/scan.c:2390
       acpi_dev_for_one_check+0xa0/0xb4 drivers/acpi/bus.c:1278
       device_for_each_child+0xf4/0x184 drivers/base/core.c:4101
       acpi_dev_for_each_child+0x98/0xe4 drivers/acpi/bus.c:1290
       acpi_bus_attach+0x20c/0x7e0 drivers/acpi/scan.c:2395
       acpi_dev_for_one_check+0xa0/0xb4 drivers/acpi/bus.c:1278
       device_for_each_child+0xf4/0x184 drivers/base/core.c:4101
       acpi_dev_for_each_child+0x98/0xe4 drivers/acpi/bus.c:1290
       acpi_bus_attach+0x20c/0x7e0 drivers/acpi/scan.c:2395
       acpi_bus_scan+0x104/0x310 drivers/acpi/scan.c:2745
       acpi_scan_init+0x168/0x3cc drivers/acpi/scan.c:2871
       acpi_init+0x15c/0x1f4 drivers/acpi/bus.c:1605
       do_one_initcall+0x274/0xc38 init/main.c:1347
       do_initcall_level+0x12c/0x1c4 init/main.c:1409
       do_initcalls+0x70/0xd0 init/main.c:1425
       do_basic_setup+0x7c/0x90 init/main.c:1445
       kernel_init_freeable+0x268/0x3a8 init/main.c:1658
       kernel_init+0x24/0x1dc init/main.c:1548
       ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:838

-> #1 (&port->mutex){+.+.}-{4:4}:
       __mutex_lock_common kernel/locking/mutex.c:646 [inline]
       __mutex_lock+0x164/0xf14 kernel/locking/mutex.c:821
       mutex_lock_nested+0x24/0x30 kernel/locking/mutex.c:874
       class_mutex_constructor include/linux/mutex.h:253 [inline]
       uart_set_termios+0x74/0x58c drivers/tty/serial/serial_core.c:1645
       tty_set_termios+0x3b0/0x6d0 drivers/tty/tty_ioctl.c:341
       set_termios+0x428/0x618 drivers/tty/tty_ioctl.c:516
       tty_mode_ioctl+0x45c/0x7f4 drivers/tty/tty_ioctl.c:-1
       n_tty_ioctl_helper+0xa8/0x2d8 drivers/tty/tty_ioctl.c:982
       n_tty_ioctl+0x190/0x434 drivers/tty/n_tty.c:2496
       tty_ioctl+0x8a8/0xcb0 drivers/tty/tty_io.c:2801
       vfs_ioctl fs/ioctl.c:51 [inline]
       __do_sys_ioctl fs/ioctl.c:597 [inline]
       __se_sys_ioctl fs/ioctl.c:583 [inline]
       __arm64_sys_ioctl+0x154/0x1cc fs/ioctl.c:583
       __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline]
       invoke_syscall+0x98/0x244 arch/arm64/kernel/syscall.c:49
       el0_svc_common+0xec/0x23c arch/arm64/kernel/syscall.c:121
       do_el0_svc+0x4c/0x5c arch/arm64/kernel/syscall.c:140
       el0_svc+0x64/0x260 arch/arm64/kernel/entry-common.c:758
       el0t_64_sync_handler+0x44/0x104 arch/arm64/kernel/entry-common.c:777
       el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:590

-> #0 (&tty->termios_rwsem){++++}-{4:4}:
       check_prev_add kernel/locking/lockdep.c:3165 [inline]
       check_prevs_add kernel/locking/lockdep.c:3284 [inline]
       validate_chain kernel/locking/lockdep.c:3908 [inline]
       __lock_acquire+0x17c0/0x2ebc kernel/locking/lockdep.c:5237
       lock_acquire+0x140/0x364 kernel/locking/lockdep.c:5868
       down_write+0x50/0xc0 kernel/locking/rwsem.c:1631
       class_rwsem_write_constructor include/linux/rwsem.h:270 [inline]
       n_tty_flush_buffer+0x2c/0xa4 drivers/tty/n_tty.c:349
       tty_buffer_flush+0x1b8/0x2b4 drivers/tty/tty_buffer.c:248
       tty_ldisc_flush+0x30/0x7c drivers/tty/tty_ldisc.c:388
       __do_SAK+0x21c/0x604 drivers/tty/tty_io.c:3025
       vc_SAK+0x74/0xa4 drivers/tty/vt/vt_ioctl.c:996
       process_one_work kernel/workqueue.c:3322 [inline]
       process_scheduled_works+0x788/0x10b8 kernel/workqueue.c:3405
       worker_thread+0x798/0xbd0 kernel/workqueue.c:3486
       kthread+0x304/0x3d4 kernel/kthread.c:436
       ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:838

other info that might help us debug this:

Chain exists of:
  &tty->termios_rwsem --> console_lock --> &buf->lock

 Possible unsafe locking scenario:

       CPU0                    CPU1
       ----                    ----
  lock(&buf->lock);
                               lock(console_lock);
                               lock(&buf->lock);
  lock(&tty->termios_rwsem);

 *** DEADLOCK ***

5 locks held by kworker/0:8/5007:
 #0: ffff0000c002b540 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline]
 #0: ffff0000c002b540 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x734/0x10b8 kernel/workqueue.c:3405
 #1: ffff80009a777c40 ((work_completion)(&vc_cons[currcons].SAK_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline]
 #1: ffff80009a777c40 ((work_completion)(&vc_cons[currcons].SAK_work)){+.+.}-{0:0}, at: process_scheduled_works+0x73c/0x10b8 kernel/workqueue.c:3405
 #2: ffff800088d1c9e0 (console_lock){+.+.}-{0:0}, at: class_console_lock_constructor include/linux/console.h:734 [inline]
 #2: ffff800088d1c9e0 (console_lock){+.+.}-{0:0}, at: vc_SAK+0x2c/0xa4 drivers/tty/vt/vt_ioctl.c:987
 #3: ffff0000d53000a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x20/0x90 drivers/tty/tty_ldisc.c:263
 #4: ffff0000c006a0b8 (&buf->lock){+.+.}-{4:4}, at: tty_buffer_flush+0x78/0x2b4 drivers/tty/tty_buffer.c:236

stack backtrace:
CPU: 0 UID: 0 PID: 5007 Comm: kworker/0:8 Not tainted syzkaller #0 PREEMPT 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026
Workqueue: events vc_SAK
Call trace:
 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:499 (C)
 __dump_stack+0x30/0x40 lib/dump_stack.c:94
 dump_stack_lvl+0xd8/0x12c lib/dump_stack.c:120
 dump_stack+0x1c/0x28 lib/dump_stack.c:129
 print_circular_bug+0x328/0x330 kernel/locking/lockdep.c:2043
 check_noncircular+0x158/0x174 kernel/locking/lockdep.c:2175
 check_prev_add kernel/locking/lockdep.c:3165 [inline]
 check_prevs_add kernel/locking/lockdep.c:3284 [inline]
 validate_chain kernel/locking/lockdep.c:3908 [inline]
 __lock_acquire+0x17c0/0x2ebc kernel/locking/lockdep.c:5237
 lock_acquire+0x140/0x364 kernel/locking/lockdep.c:5868
 down_write+0x50/0xc0 kernel/locking/rwsem.c:1631
 class_rwsem_write_constructor include/linux/rwsem.h:270 [inline]
 n_tty_flush_buffer+0x2c/0xa4 drivers/tty/n_tty.c:349
 tty_buffer_flush+0x1b8/0x2b4 drivers/tty/tty_buffer.c:248
 tty_ldisc_flush+0x30/0x7c drivers/tty/tty_ldisc.c:388
 __do_SAK+0x21c/0x604 drivers/tty/tty_io.c:3025
 vc_SAK+0x74/0xa4 drivers/tty/vt/vt_ioctl.c:996
 process_one_work kernel/workqueue.c:3322 [inline]
 process_scheduled_works+0x788/0x10b8 kernel/workqueue.c:3405
 worker_thread+0x798/0xbd0 kernel/workqueue.c:3486
 kthread+0x304/0x3d4 kernel/kthread.c:436
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:838
tty tty1: SAK: killed process 5080 (syz.1.18): by fd#3
tty tty1: SAK: killed process 5081 (syz.3.20): by fd#3
tty tty1: SAK: killed process 5082 (syz.4.21): by fd#3
tty tty1: SAK: killed process 5083 (syz.2.27): by fd#3
tty tty1: SAK: killed process 5086 (syz.1.29): by fd#3
tty tty1: SAK: killed process 5087 (syz.4.28): by fd#3
tty tty1: SAK: killed process 5105 (syz.2.40): by fd#3
tty tty1: SAK: killed process 5106 (syz.3.41): by fd#3
tty tty1: SAK: killed process 5107 (syz.1.42): by fd#3
tty tty1: SAK: killed process 5109 (syz.2.45): by fd#3
tty tty1: SAK: killed process 5110 (syz.4.44): by fd#3
tty tty1: SAK: killed process 5111 (syz.3.46): by fd#3
tty tty1: SAK: killed process 5113 (syz.4.47): by fd#3
tty tty1: SAK: killed process 5114 (syz.0.48): by fd#3
tty tty1: SAK: killed process 5115 (syz.3.50): by fd#3
tty tty1: SAK: killed process 5121 (syz.0.56): by fd#3
tty tty1: SAK: killed process 5122 (syz.2.57): by fd#3
tty tty1: SAK: killed process 5123 (syz.3.58): by fd#3
tty tty1: SAK: killed process 5125 (syz.3.61): by fd#3
tty tty1: SAK: killed process 5126 (syz.0.62): by fd#3
tty tty1: SAK: killed process 5127 (syz.2.60): by fd#3
tty tty1: SAK: killed process 5129 (syz.2.64): by fd#3
tty tty1: SAK: killed process 5130 (syz.0.65): by fd#3
tty tty1: SAK: killed process 5131 (syz.3.66): by fd#3
tty tty1: SAK: killed process 5306 (syz.2.237): by fd#3
tty tty1: SAK: killed process 5307 (syz.1.238): by fd#3
tty tty1: SAK: killed process 5308 (syz.0.239): by fd#3
tty tty1: SAK: killed process 5318 (syz.3.250): by fd#3
tty tty1: SAK: killed process 5319 (syz.4.248): by fd#3
tty tty1: SAK: killed process 5320 (syz.0.251): by fd#3
tty tty1: SAK: killed process 5321 (syz.3.254): by fd#3
tty tty1: SAK: killed process 5324 (syz.0.253): by fd#3
tty tty1: SAK: killed process 5321 (syz.3.254): by fd#3
tty tty1: SAK: killed process 5324 (syz.0.253): by fd#3
tty tty1: SAK: killed process 5325 (syz.0.256): by fd#3
tty tty1: SAK: killed process 5326 (syz.1.258): by fd#3
tty tty1: SAK: killed process 5328 (syz.2.259): by fd#3
tty tty1: SAK: killed process 5329 (syz.0.260): by fd#3
tty tty1: SAK: killed process 5330 (syz.2.261): by fd#3
tty tty1: SAK: killed process 5331 (syz.1.262): by fd#3
tty tty1: SAK: killed process 5354 (syz.1.285): by fd#3
tty tty1: SAK: killed process 5355 (syz.4.286): by fd#3
tty tty1: SAK: killed process 5356 (syz.2.287): by fd#3
tty tty1: SAK: killed process 5358 (syz.2.288): by fd#3
tty tty1: SAK: killed process 5359 (syz.4.290): by fd#3
tty tty1: SAK: killed process 5360 (syz.1.291): by fd#3
tty tty1: SAK: killed process 5374 (syz.3.306): by fd#3
tty tty1: SAK: killed process 5375 (syz.1.305): by fd#3
tty tty1: SAK: killed process 5376 (syz.0.307): by fd#3
tty tty1: SAK: killed process 5406 (syz.4.339): by fd#3
tty tty1: SAK: killed process 5407 (syz.1.336): by fd#3
tty tty1: SAK: killed process 5408 (syz.2.337): by fd#3
tty tty1: SAK: killed process 5410 (syz.0.340): by fd#3
tty tty1: SAK: killed process 5411 (syz.2.342): by fd#3
tty tty1: SAK: killed process 5412 (syz.1.343): by fd#3
tty tty1: SAK: killed process 5446 (syz.2.379): by fd#3
tty tty1: SAK: killed process 5447 (syz.1.378): by fd#3
tty tty1: SAK: killed process 5448 (syz.3.377): by fd#3
tty tty1: SAK: killed process 5486 (syz.4.417): by fd#3
tty tty1: SAK: killed process 5487 (syz.0.418): by fd#3
tty tty1: SAK: killed process 5488 (syz.2.419): by fd#3
tty tty1: SAK: killed process 5490 (syz.3.420): by fd#3
tty tty1: SAK: killed process 5491 (syz.4.422): by fd#3
tty tty1: SAK: killed process 5492 (syz.0.423): by fd#3
tty tty1: SAK: killed process 5493 (syz.0.425): by fd#3
tty tty1: SAK: killed process 5495 (syz.1.424): by fd#3
tty tty1: SAK: killed process 5496 (syz.4.427): by fd#3
tty tty1: SAK: killed process 5502 (syz.0.433): by fd#3
tty tty1: SAK: killed process 5503 (syz.4.435): by fd#3
tty tty1: SAK: killed process 5504 (syz.1.434): by fd#3
tty tty1: SAK: killed process 5506 (syz.4.436): by fd#3
tty tty1: SAK: killed process 5507 (syz.1.438): by fd#3
tty tty1: SAK: killed process 5508 (syz.3.439): by fd#3
tty tty1: SAK: killed process 5510 (syz.4.441): by fd#3
tty tty1: SAK: killed process 5511 (syz.1.442): by fd#3
tty tty1: SAK: killed process 5512 (syz.3.443): by fd#3
tty tty1: SAK: killed process 5518 (syz.4.449): by fd#3
tty tty1: SAK: killed process 5519 (syz.1.450): by fd#3
tty tty1: SAK: killed process 5520 (syz.3.451): by fd#3
tty tty1: SAK: killed process 5530 (syz.3.461): by fd#3
tty tty1: SAK: killed process 5531 (syz.1.462): by fd#3
tty tty1: SAK: killed process 5532 (syz.2.463): by fd#3
tty tty1: SAK: killed process 5577 (syz.2.508): by fd#3
tty tty1: SAK: killed process 5578 (syz.1.509): by fd#3
tty tty1: SAK: killed process 5580 (syz.0.511): by fd#3

final repro crashed as (corrupted=false):
======================================================
WARNING: possible circular locking dependency detected
syzkaller #0 Not tainted
------------------------------------------------------
kworker/0:8/5007 is trying to acquire lock:
ffff0000d53002c8 (&tty->termios_rwsem){++++}-{4:4}, at: class_rwsem_write_constructor include/linux/rwsem.h:270 [inline]
ffff0000d53002c8 (&tty->termios_rwsem){++++}-{4:4}, at: n_tty_flush_buffer+0x2c/0xa4 drivers/tty/n_tty.c:349

but task is already holding lock:
ffff0000c006a0b8 (&buf->lock){+.+.}-{4:4}, at: tty_buffer_flush+0x78/0x2b4 drivers/tty/tty_buffer.c:236

which lock already depends on the new lock.


the existing dependency chain (in reverse order) is:

-> #4 (&buf->lock){+.+.}-{4:4}:
       __mutex_lock_common kernel/locking/mutex.c:646 [inline]
       __mutex_lock+0x164/0xf14 kernel/locking/mutex.c:821
       mutex_lock_nested+0x24/0x30 kernel/locking/mutex.c:874
       tty_buffer_flush+0x78/0x2b4 drivers/tty/tty_buffer.c:236
       tty_ldisc_flush+0x30/0x7c drivers/tty/tty_ldisc.c:388
       __do_SAK+0x21c/0x604 drivers/tty/tty_io.c:3025
       vc_SAK+0x74/0xa4 drivers/tty/vt/vt_ioctl.c:996
       process_one_work kernel/workqueue.c:3322 [inline]
       process_scheduled_works+0x788/0x10b8 kernel/workqueue.c:3405
       worker_thread+0x798/0xbd0 kernel/workqueue.c:3486
       kthread+0x304/0x3d4 kernel/kthread.c:436
       ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:838

-> #3 (console_lock){+.+.}-{0:0}:
       console_lock+0x8c/0xac kernel/printk/printk.c:2896
       console_call_setup+0x54/0xa4 kernel/printk/printk.c:3881
       try_enable_preferred_console+0x444/0x5a4 kernel/printk/printk.c:3926
       register_console+0x3a0/0xb98 kernel/printk/printk.c:4120
       univ8250_console_init+0x5c/0x84 drivers/tty/serial/8250/8250_core.c:515
       console_init+0x14c/0x89c kernel/printk/printk.c:4407
       start_kernel+0x25c/0x3c0 init/main.c:1112
       __primary_switched+0x8c/0x94 arch/arm64/kernel/head.S:246

-> #2 (console_mutex){+.+.}-{4:4}:
       __mutex_lock_common kernel/locking/mutex.c:646 [inline]
       __mutex_lock+0x164/0xf14 kernel/locking/mutex.c:821
       mutex_lock_nested+0x24/0x30 kernel/locking/mutex.c:874
       console_list_lock+0x90/0xa8 kernel/printk/printk.c:263
       console_is_registered include/linux/console.h:573 [inline]
       uart_configure_port drivers/tty/serial/serial_core.c:2574 [inline]
       serial_core_add_one_port drivers/tty/serial/serial_core.c:3101 [inline]
       serial_core_register_port+0x1284/0x1b0c drivers/tty/serial/serial_core.c:3322
       serial_ctrl_register_port+0x28/0x38 drivers/tty/serial/serial_ctrl.c:41
       uart_add_one_port+0x28/0x38 drivers/tty/serial/serial_port.c:143
       pl011_register_port+0x194/0x2ec drivers/tty/serial/amba-pl011.c:3009
       sbsa_uart_probe+0x334/0x46c drivers/tty/serial/amba-pl011.c:3185
       platform_probe+0x100/0x1a4 drivers/base/platform.c:1439
       call_driver_probe drivers/base/dd.c:-1 [inline]
       really_probe+0x29c/0x800 drivers/base/dd.c:706
       __driver_probe_device+0x1e0/0x350 drivers/base/dd.c:868
       driver_probe_device+0x6c/0x19c drivers/base/dd.c:898
       __device_attach_driver+0x198/0x2f8 drivers/base/dd.c:1026
       bus_for_each_drv+0x144/0x1dc drivers/base/bus.c:500
       __device_attach+0x248/0x390 drivers/base/dd.c:1098
       device_initial_probe+0x90/0xc8 drivers/base/dd.c:1153
       bus_probe_device+0x58/0x120 drivers/base/bus.c:620
       device_add+0x6cc/0x9e0 drivers/base/core.c:3772
       platform_device_add+0x3dc/0x6f0 drivers/base/platform.c:762
       platform_device_register_full+0x4fc/0x5ac drivers/base/platform.c:902
       acpi_create_platform_device+0x50c/0x6e4 drivers/acpi/acpi_platform.c:181
       acpi_default_enumeration+0x200/0x438 drivers/acpi/scan.c:2281
       acpi_bus_attach+0x64c/0x7e0 drivers/acpi/scan.c:2390
       acpi_dev_for_one_check+0xa0/0xb4 drivers/acpi/bus.c:1278
       device_for_each_child+0xf4/0x184 drivers/base/core.c:4101
       acpi_dev_for_each_child+0x98/0xe4 drivers/acpi/bus.c:1290
       acpi_bus_attach+0x20c/0x7e0 drivers/acpi/scan.c:2395
       acpi_dev_for_one_check+0xa0/0xb4 drivers/acpi/bus.c:1278
       device_for_each_child+0xf4/0x184 drivers/base/core.c:4101
       acpi_dev_for_each_child+0x98/0xe4 drivers/acpi/bus.c:1290
       acpi_bus_attach+0x20c/0x7e0 drivers/acpi/scan.c:2395
       acpi_bus_scan+0x104/0x310 drivers/acpi/scan.c:2745
       acpi_scan_init+0x168/0x3cc drivers/acpi/scan.c:2871
       acpi_init+0x15c/0x1f4 drivers/acpi/bus.c:1605
       do_one_initcall+0x274/0xc38 init/main.c:1347
       do_initcall_level+0x12c/0x1c4 init/main.c:1409
       do_initcalls+0x70/0xd0 init/main.c:1425
       do_basic_setup+0x7c/0x90 init/main.c:1445
       kernel_init_freeable+0x268/0x3a8 init/main.c:1658
       kernel_init+0x24/0x1dc init/main.c:1548
       ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:838

-> #1 (&port->mutex){+.+.}-{4:4}:
       __mutex_lock_common kernel/locking/mutex.c:646 [inline]
       __mutex_lock+0x164/0xf14 kernel/locking/mutex.c:821
       mutex_lock_nested+0x24/0x30 kernel/locking/mutex.c:874
       class_mutex_constructor include/linux/mutex.h:253 [inline]
       uart_set_termios+0x74/0x58c drivers/tty/serial/serial_core.c:1645
       tty_set_termios+0x3b0/0x6d0 drivers/tty/tty_ioctl.c:341
       set_termios+0x428/0x618 drivers/tty/tty_ioctl.c:516
       tty_mode_ioctl+0x45c/0x7f4 drivers/tty/tty_ioctl.c:-1
       n_tty_ioctl_helper+0xa8/0x2d8 drivers/tty/tty_ioctl.c:982
       n_tty_ioctl+0x190/0x434 drivers/tty/n_tty.c:2496
       tty_ioctl+0x8a8/0xcb0 drivers/tty/tty_io.c:2801
       vfs_ioctl fs/ioctl.c:51 [inline]
       __do_sys_ioctl fs/ioctl.c:597 [inline]
       __se_sys_ioctl fs/ioctl.c:583 [inline]
       __arm64_sys_ioctl+0x154/0x1cc fs/ioctl.c:583
       __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline]
       invoke_syscall+0x98/0x244 arch/arm64/kernel/syscall.c:49
       el0_svc_common+0xec/0x23c arch/arm64/kernel/syscall.c:121
       do_el0_svc+0x4c/0x5c arch/arm64/kernel/syscall.c:140
       el0_svc+0x64/0x260 arch/arm64/kernel/entry-common.c:758
       el0t_64_sync_handler+0x44/0x104 arch/arm64/kernel/entry-common.c:777
       el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:590

-> #0 (&tty->termios_rwsem){++++}-{4:4}:
       check_prev_add kernel/locking/lockdep.c:3165 [inline]
       check_prevs_add kernel/locking/lockdep.c:3284 [inline]
       validate_chain kernel/locking/lockdep.c:3908 [inline]
       __lock_acquire+0x17c0/0x2ebc kernel/locking/lockdep.c:5237
       lock_acquire+0x140/0x364 kernel/locking/lockdep.c:5868
       down_write+0x50/0xc0 kernel/locking/rwsem.c:1631
       class_rwsem_write_constructor include/linux/rwsem.h:270 [inline]
       n_tty_flush_buffer+0x2c/0xa4 drivers/tty/n_tty.c:349
       tty_buffer_flush+0x1b8/0x2b4 drivers/tty/tty_buffer.c:248
       tty_ldisc_flush+0x30/0x7c drivers/tty/tty_ldisc.c:388
       __do_SAK+0x21c/0x604 drivers/tty/tty_io.c:3025
       vc_SAK+0x74/0xa4 drivers/tty/vt/vt_ioctl.c:996
       process_one_work kernel/workqueue.c:3322 [inline]
       process_scheduled_works+0x788/0x10b8 kernel/workqueue.c:3405
       worker_thread+0x798/0xbd0 kernel/workqueue.c:3486
       kthread+0x304/0x3d4 kernel/kthread.c:436
       ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:838

other info that might help us debug this:

Chain exists of:
  &tty->termios_rwsem --> console_lock --> &buf->lock

 Possible unsafe locking scenario:

       CPU0                    CPU1
       ----                    ----
  lock(&buf->lock);
                               lock(console_lock);
                               lock(&buf->lock);
  lock(&tty->termios_rwsem);

 *** DEADLOCK ***

5 locks held by kworker/0:8/5007:
 #0: ffff0000c002b540 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline]
 #0: ffff0000c002b540 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x734/0x10b8 kernel/workqueue.c:3405
 #1: ffff80009a777c40 ((work_completion)(&vc_cons[currcons].SAK_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline]
 #1: ffff80009a777c40 ((work_completion)(&vc_cons[currcons].SAK_work)){+.+.}-{0:0}, at: process_scheduled_works+0x73c/0x10b8 kernel/workqueue.c:3405
 #2: ffff800088d1c9e0 (console_lock){+.+.}-{0:0}, at: class_console_lock_constructor include/linux/console.h:734 [inline]
 #2: ffff800088d1c9e0 (console_lock){+.+.}-{0:0}, at: vc_SAK+0x2c/0xa4 drivers/tty/vt/vt_ioctl.c:987
 #3: ffff0000d53000a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x20/0x90 drivers/tty/tty_ldisc.c:263
 #4: ffff0000c006a0b8 (&buf->lock){+.+.}-{4:4}, at: tty_buffer_flush+0x78/0x2b4 drivers/tty/tty_buffer.c:236

stack backtrace:
CPU: 0 UID: 0 PID: 5007 Comm: kworker/0:8 Not tainted syzkaller #0 PREEMPT 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026
Workqueue: events vc_SAK
Call trace:
 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:499 (C)
 __dump_stack+0x30/0x40 lib/dump_stack.c:94
 dump_stack_lvl+0xd8/0x12c lib/dump_stack.c:120
 dump_stack+0x1c/0x28 lib/dump_stack.c:129
 print_circular_bug+0x328/0x330 kernel/locking/lockdep.c:2043
 check_noncircular+0x158/0x174 kernel/locking/lockdep.c:2175
 check_prev_add kernel/locking/lockdep.c:3165 [inline]
 check_prevs_add kernel/locking/lockdep.c:3284 [inline]
 validate_chain kernel/locking/lockdep.c:3908 [inline]
 __lock_acquire+0x17c0/0x2ebc kernel/locking/lockdep.c:5237
 lock_acquire+0x140/0x364 kernel/locking/lockdep.c:5868
 down_write+0x50/0xc0 kernel/locking/rwsem.c:1631
 class_rwsem_write_constructor include/linux/rwsem.h:270 [inline]
 n_tty_flush_buffer+0x2c/0xa4 drivers/tty/n_tty.c:349
 tty_buffer_flush+0x1b8/0x2b4 drivers/tty/tty_buffer.c:248
 tty_ldisc_flush+0x30/0x7c drivers/tty/tty_ldisc.c:388
 __do_SAK+0x21c/0x604 drivers/tty/tty_io.c:3025
 vc_SAK+0x74/0xa4 drivers/tty/vt/vt_ioctl.c:996
 process_one_work kernel/workqueue.c:3322 [inline]
 process_scheduled_works+0x788/0x10b8 kernel/workqueue.c:3405
 worker_thread+0x798/0xbd0 kernel/workqueue.c:3486
 kthread+0x304/0x3d4 kernel/kthread.c:436
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:838
tty tty1: SAK: killed process 5080 (syz.1.18): by fd#3
tty tty1: SAK: killed process 5081 (syz.3.20): by fd#3
tty tty1: SAK: killed process 5082 (syz.4.21): by fd#3
tty tty1: SAK: killed process 5083 (syz.2.27): by fd#3
tty tty1: SAK: killed process 5086 (syz.1.29): by fd#3
tty tty1: SAK: killed process 5087 (syz.4.28): by fd#3
tty tty1: SAK: killed process 5105 (syz.2.40): by fd#3
tty tty1: SAK: killed process 5106 (syz.3.41): by fd#3
tty tty1: SAK: killed process 5107 (syz.1.42): by fd#3
tty tty1: SAK: killed process 5109 (syz.2.45): by fd#3
tty tty1: SAK: killed process 5110 (syz.4.44): by fd#3
tty tty1: SAK: killed process 5111 (syz.3.46): by fd#3
tty tty1: SAK: killed process 5113 (syz.4.47): by fd#3
tty tty1: SAK: killed process 5114 (syz.0.48): by fd#3
tty tty1: SAK: killed process 5115 (syz.3.50): by fd#3
tty tty1: SAK: killed process 5121 (syz.0.56): by fd#3
tty tty1: SAK: killed process 5122 (syz.2.57): by fd#3
tty tty1: SAK: killed process 5123 (syz.3.58): by fd#3
tty tty1: SAK: killed process 5125 (syz.3.61): by fd#3
tty tty1: SAK: killed process 5126 (syz.0.62): by fd#3
tty tty1: SAK: killed process 5127 (syz.2.60): by fd#3
tty tty1: SAK: killed process 5129 (syz.2.64): by fd#3
tty tty1: SAK: killed process 5130 (syz.0.65): by fd#3
tty tty1: SAK: killed process 5131 (syz.3.66): by fd#3
tty tty1: SAK: killed process 5306 (syz.2.237): by fd#3
tty tty1: SAK: killed process 5307 (syz.1.238): by fd#3
tty tty1: SAK: killed process 5308 (syz.0.239): by fd#3
tty tty1: SAK: killed process 5318 (syz.3.250): by fd#3
tty tty1: SAK: killed process 5319 (syz.4.248): by fd#3
tty tty1: SAK: killed process 5320 (syz.0.251): by fd#3
tty tty1: SAK: killed process 5321 (syz.3.254): by fd#3
tty tty1: SAK: killed process 5324 (syz.0.253): by fd#3
tty tty1: SAK: killed process 5321 (syz.3.254): by fd#3
tty tty1: SAK: killed process 5324 (syz.0.253): by fd#3
tty tty1: SAK: killed process 5325 (syz.0.256): by fd#3
tty tty1: SAK: killed process 5326 (syz.1.258): by fd#3
tty tty1: SAK: killed process 5328 (syz.2.259): by fd#3
tty tty1: SAK: killed process 5329 (syz.0.260): by fd#3
tty tty1: SAK: killed process 5330 (syz.2.261): by fd#3
tty tty1: SAK: killed process 5331 (syz.1.262): by fd#3
tty tty1: SAK: killed process 5354 (syz.1.285): by fd#3
tty tty1: SAK: killed process 5355 (syz.4.286): by fd#3
tty tty1: SAK: killed process 5356 (syz.2.287): by fd#3
tty tty1: SAK: killed process 5358 (syz.2.288): by fd#3
tty tty1: SAK: killed process 5359 (syz.4.290): by fd#3
tty tty1: SAK: killed process 5360 (syz.1.291): by fd#3
tty tty1: SAK: killed process 5374 (syz.3.306): by fd#3
tty tty1: SAK: killed process 5375 (syz.1.305): by fd#3
tty tty1: SAK: killed process 5376 (syz.0.307): by fd#3
tty tty1: SAK: killed process 5406 (syz.4.339): by fd#3
tty tty1: SAK: killed process 5407 (syz.1.336): by fd#3
tty tty1: SAK: killed process 5408 (syz.2.337): by fd#3
tty tty1: SAK: killed process 5410 (syz.0.340): by fd#3
tty tty1: SAK: killed process 5411 (syz.2.342): by fd#3
tty tty1: SAK: killed process 5412 (syz.1.343): by fd#3
tty tty1: SAK: killed process 5446 (syz.2.379): by fd#3
tty tty1: SAK: killed process 5447 (syz.1.378): by fd#3
tty tty1: SAK: killed process 5448 (syz.3.377): by fd#3
tty tty1: SAK: killed process 5486 (syz.4.417): by fd#3
tty tty1: SAK: killed process 5487 (syz.0.418): by fd#3
tty tty1: SAK: killed process 5488 (syz.2.419): by fd#3
tty tty1: SAK: killed process 5490 (syz.3.420): by fd#3
tty tty1: SAK: killed process 5491 (syz.4.422): by fd#3
tty tty1: SAK: killed process 5492 (syz.0.423): by fd#3
tty tty1: SAK: killed process 5493 (syz.0.425): by fd#3
tty tty1: SAK: killed process 5495 (syz.1.424): by fd#3
tty tty1: SAK: killed process 5496 (syz.4.427): by fd#3
tty tty1: SAK: killed process 5502 (syz.0.433): by fd#3
tty tty1: SAK: killed process 5503 (syz.4.435): by fd#3
tty tty1: SAK: killed process 5504 (syz.1.434): by fd#3
tty tty1: SAK: killed process 5506 (syz.4.436): by fd#3
tty tty1: SAK: killed process 5507 (syz.1.438): by fd#3
tty tty1: SAK: killed process 5508 (syz.3.439): by fd#3
tty tty1: SAK: killed process 5510 (syz.4.441): by fd#3
tty tty1: SAK: killed process 5511 (syz.1.442): by fd#3
tty tty1: SAK: killed process 5512 (syz.3.443): by fd#3
tty tty1: SAK: killed process 5518 (syz.4.449): by fd#3
tty tty1: SAK: killed process 5519 (syz.1.450): by fd#3
tty tty1: SAK: killed process 5520 (syz.3.451): by fd#3
tty tty1: SAK: killed process 5530 (syz.3.461): by fd#3
tty tty1: SAK: killed process 5531 (syz.1.462): by fd#3
tty tty1: SAK: killed process 5532 (syz.2.463): by fd#3
tty tty1: SAK: killed process 5577 (syz.2.508): by fd#3
tty tty1: SAK: killed process 5578 (syz.1.509): by fd#3
tty tty1: SAK: killed process 5580 (syz.0.511): by fd#3