input: syz1 as /devices/virtual/input/input234
input: syz1 as /devices/virtual/input/input235
input input236: cannot allocate more than FF_MAX_EFFECTS effects
dl_rq->running_bw > dl_rq->this_bw
------------[ cut here ]------------
WARNING: CPU: 0 PID: 19659 at kernel/sched/deadline.c:90 add_running_bw kernel/sched/deadline.c:90 [inline]
WARNING: CPU: 0 PID: 19659 at kernel/sched/deadline.c:90 task_contending.cold+0x6c/0x73 kernel/sched/deadline.c:294
Kernel panic - not syncing: panic_on_warn set ...
CPU: 0 PID: 19659 Comm: syz-executor1 Not tainted 4.14.97+ #4
Call Trace:
<IRQ>
__dump_stack lib/dump_stack.c:17 [inline]
dump_stack+0xb9/0x10e lib/dump_stack.c:53
panic+0x1d9/0x3c2 kernel/panic.c:182
__warn.cold+0x2f/0x3b kernel/panic.c:546
</IRQ>
======================================================
WARNING: possible circular locking dependency detected
4.14.97+ #4 Not tainted
------------------------------------------------------
syz-executor1/19659 is trying to acquire lock:
((console_sem).lock){-.-.}, at: [<ffffffff979eee6e>] down_trylock+0xe/0x60 kernel/locking/semaphore.c:136
but task is already holding lock:
(&rq->lock){-.-.}, at: [<ffffffff9796b78b>] rq_lock kernel/sched/sched.h:1837 [inline]
(&rq->lock){-.-.}, at: [<ffffffff9796b78b>] ttwu_queue kernel/sched/core.c:1882 [inline]
(&rq->lock){-.-.}, at: [<ffffffff9796b78b>] try_to_wake_up+0x6eb/0x12a0 kernel/sched/core.c:2123
which lock already depends on the new lock.
the existing dependency chain (in reverse order) is:
-> #2 (&rq->lock){-.-.}:
-> #1 (&p->pi_lock){-.-.}:
-> #0 ((console_sem).lock){-.-.}:
other info that might help us debug this:
Chain exists of:
(console_sem).lock --> &p->pi_lock --> &rq->lock
Possible unsafe locking scenario:
CPU0 CPU1
---- ----
lock(&rq->lock);
lock(&p->pi_lock);
lock(&rq->lock);
lock((console_sem).lock);
*** DEADLOCK ***
6 locks held by syz-executor1/19659:
#0: (&(ptlock_ptr(page))->rlock#2){+.+.}, at: [<ffffffff97cc404f>] spin_lock include/linux/spinlock.h:317 [inline]
#0: (&(ptlock_ptr(page))->rlock#2){+.+.}, at: [<ffffffff97cc404f>] zap_pte_range mm/memory.c:1303 [inline]
#0: (&(ptlock_ptr(page))->rlock#2){+.+.}, at: [<ffffffff97cc404f>] zap_pmd_range mm/memory.c:1444 [inline]
#0: (&(ptlock_ptr(page))->rlock#2){+.+.}, at: [<ffffffff97cc404f>] zap_pud_range mm/memory.c:1473 [inline]
#0: (&(ptlock_ptr(page))->rlock#2){+.+.}, at: [<ffffffff97cc404f>] zap_p4d_range mm/memory.c:1494 [inline]
#0: (&(ptlock_ptr(page))->rlock#2){+.+.}, at: [<ffffffff97cc404f>] unmap_page_range+0x65f/0x12f0 mm/memory.c:1515
#1: (rcu_read_lock){....}, at: [<ffffffff97d35070>] lock_page_memcg+0x0/0x270 include/linux/cgroup.h:601
#2: (rcu_callback){....}, at: [<ffffffff97a4b3b0>] __rcu_reclaim kernel/rcu/rcu.h:185 [inline]
#2: (rcu_callback){....}, at: [<ffffffff97a4b3b0>] rcu_do_batch kernel/rcu/tree.c:2691 [inline]
#2: (rcu_callback){....}, at: [<ffffffff97a4b3b0>] invoke_rcu_callbacks kernel/rcu/tree.c:2954 [inline]
#2: (rcu_callback){....}, at: [<ffffffff97a4b3b0>] __rcu_process_callbacks kernel/rcu/tree.c:2921 [inline]
#2: (rcu_callback){....}, at: [<ffffffff97a4b3b0>] rcu_process_callbacks+0x640/0xf40 kernel/rcu/tree.c:2938
#3: (&x->wait#11){..-.}, at: [<ffffffff979d8843>] complete+0x13/0x70 kernel/sched/completion.c:35
#4: (&p->pi_lock){-.-.}, at: [<ffffffff9796b13a>] try_to_wake_up+0x9a/0x12a0 kernel/sched/core.c:2030
#5: (&rq->lock){-.-.}, at: [<ffffffff9796b78b>] rq_lock kernel/sched/sched.h:1837 [inline]
#5: (&rq->lock){-.-.}, at: [<ffffffff9796b78b>] ttwu_queue kernel/sched/core.c:1882 [inline]
#5: (&rq->lock){-.-.}, at: [<ffffffff9796b78b>] try_to_wake_up+0x6eb/0x12a0 kernel/sched/core.c:2123
stack backtrace:
CPU: 0 PID: 19659 Comm: syz-executor1 Not tainted 4.14.97+ #4
Call Trace:
<IRQ>
__dump_stack lib/dump_stack.c:17 [inline]
dump_stack+0xb9/0x10e lib/dump_stack.c:53
print_circular_bug.isra.0.cold+0x2dc/0x425 kernel/locking/lockdep.c:1258
</IRQ>
Shutting down cpus with NMI
Kernel Offset: 0x16800000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff)
Rebooting in 86400 seconds..