------------[ cut here ]------------
======================================================
WARNING: possible circular locking dependency detected
5.15.0-rc5-syzkaller #0 Not tainted
------------------------------------------------------
syz-executor.4/6976 is trying to acquire lock:
ffffffff8b9710d8 ((console_sem).lock){-.-.}-{2:2}, at: down_trylock+0xe/0x60 kernel/locking/semaphore.c:138

but task is already holding lock:
ffff888016215ed8 (&p->pi_lock){-.-.}-{2:2}, at: try_to_wake_up+0xab/0x1570 kernel/sched/core.c:3981

which lock already depends on the new lock.


the existing dependency chain (in reverse order) is:

-> #1 (&p->pi_lock){-.-.}-{2:2}:
       __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline]
       _raw_spin_lock_irqsave+0x39/0x50 kernel/locking/spinlock.c:162
       try_to_wake_up+0xab/0x1570 kernel/sched/core.c:3981
       up+0x75/0xb0 kernel/locking/semaphore.c:190
       __up_console_sem+0xa4/0xc0 kernel/printk/printk.c:254
       console_unlock+0x567/0xb70 kernel/printk/printk.c:2726
       vt_disallocate drivers/tty/vt/vt_ioctl.c:640 [inline]
       vt_ioctl+0x2628/0x2b10 drivers/tty/vt/vt_ioctl.c:903
       tty_ioctl+0xbbd/0x1670 drivers/tty/tty_io.c:2805
       vfs_ioctl fs/ioctl.c:51 [inline]
       __do_sys_ioctl fs/ioctl.c:874 [inline]
       __se_sys_ioctl fs/ioctl.c:860 [inline]
       __x64_sys_ioctl+0x193/0x200 fs/ioctl.c:860
       do_syscall_x64 arch/x86/entry/common.c:50 [inline]
       do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
       entry_SYSCALL_64_after_hwframe+0x44/0xae

-> #0 ((console_sem).lock){-.-.}-{2:2}:
       check_prev_add kernel/locking/lockdep.c:3051 [inline]
       check_prevs_add kernel/locking/lockdep.c:3174 [inline]
       validate_chain kernel/locking/lockdep.c:3789 [inline]
       __lock_acquire+0x2a07/0x54a0 kernel/locking/lockdep.c:5015
       lock_acquire kernel/locking/lockdep.c:5625 [inline]
       lock_acquire+0x1ab/0x510 kernel/locking/lockdep.c:5590
       __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline]
       _raw_spin_lock_irqsave+0x39/0x50 kernel/locking/spinlock.c:162
       down_trylock+0xe/0x60 kernel/locking/semaphore.c:138
       __down_trylock_console_sem+0x40/0x120 kernel/printk/printk.c:237
       console_trylock kernel/printk/printk.c:2541 [inline]
       console_trylock_spinning kernel/printk/printk.c:1843 [inline]
       vprintk_emit+0x146/0x4f0 kernel/printk/printk.c:2243
       vprintk+0x80/0x90 kernel/printk/printk_safe.c:50
       _printk+0xba/0xed kernel/printk/printk.c:2265
       report_bug.cold+0x72/0xab lib/bug.c:195
       handle_bug+0x3c/0x60 arch/x86/kernel/traps.c:239
       exc_invalid_op+0x14/0x40 arch/x86/kernel/traps.c:259
       asm_exc_invalid_op+0x12/0x20 arch/x86/include/asm/idtentry.h:566
       __ttwu_queue_wakelist kernel/sched/core.c:3680 [inline]
       ttwu_queue_wakelist kernel/sched/core.c:3748 [inline]
       ttwu_queue_wakelist+0x275/0x360 kernel/sched/core.c:3741
       ttwu_queue kernel/sched/core.c:3769 [inline]
       try_to_wake_up+0x480/0x1570 kernel/sched/core.c:4097
       hrtimer_wakeup+0x43/0x60 kernel/time/hrtimer.c:1939
       __run_hrtimer kernel/time/hrtimer.c:1685 [inline]
       __hrtimer_run_queues+0x609/0xe50 kernel/time/hrtimer.c:1749
       hrtimer_interrupt+0x31c/0x790 kernel/time/hrtimer.c:1811
       local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1086 [inline]
       __sysvec_apic_timer_interrupt+0x146/0x530 arch/x86/kernel/apic/apic.c:1103
       sysvec_apic_timer_interrupt+0x40/0xc0 arch/x86/kernel/apic/apic.c:1097
       asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:638

other info that might help us debug this:

 Possible unsafe locking scenario:

       CPU0                    CPU1
       ----                    ----
  lock(&p->pi_lock);
                               lock((console_sem).lock);
                               lock(&p->pi_lock);
  lock((console_sem).lock);

 *** DEADLOCK ***

1 lock held by syz-executor.4/6976:
 #0: ffff888016215ed8 (&p->pi_lock){-.-.}-{2:2}, at: try_to_wake_up+0xab/0x1570 kernel/sched/core.c:3981

stack backtrace:
CPU: 1 PID: 6976 Comm: syz-executor.4 Not tainted 5.15.0-rc5-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0xcd/0x134 lib/dump_stack.c:106
 check_noncircular+0x25f/0x2e0 kernel/locking/lockdep.c:2131
 check_prev_add kernel/locking/lockdep.c:3051 [inline]
 check_prevs_add kernel/locking/lockdep.c:3174 [inline]
 validate_chain kernel/locking/lockdep.c:3789 [inline]
 __lock_acquire+0x2a07/0x54a0 kernel/locking/lockdep.c:5015
 lock_acquire kernel/locking/lockdep.c:5625 [inline]
 lock_acquire+0x1ab/0x510 kernel/locking/lockdep.c:5590
 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline]
 _raw_spin_lock_irqsave+0x39/0x50 kernel/locking/spinlock.c:162
 down_trylock+0xe/0x60 kernel/locking/semaphore.c:138
 __down_trylock_console_sem+0x40/0x120 kernel/printk/printk.c:237
 console_trylock kernel/printk/printk.c:2541 [inline]
 console_trylock_spinning kernel/printk/printk.c:1843 [inline]
 vprintk_emit+0x146/0x4f0 kernel/printk/printk.c:2243
 vprintk+0x80/0x90 kernel/printk/printk_safe.c:50
 _printk+0xba/0xed kernel/printk/printk.c:2265
 report_bug.cold+0x72/0xab lib/bug.c:195
 handle_bug+0x3c/0x60 arch/x86/kernel/traps.c:239
 exc_invalid_op+0x14/0x40 arch/x86/kernel/traps.c:259
 asm_exc_invalid_op+0x12/0x20 arch/x86/include/asm/idtentry.h:566
RIP: 0010:ttwu_queue_wakelist kernel/sched/core.c:3744 [inline]
RIP: 0010:ttwu_queue_wakelist+0x275/0x360 kernel/sched/core.c:3741
Code: 00 01 00 00 00 49 8d 75 38 89 ef e8 b5 ce 1b 00 e9 eb fd ff ff 0f 0b e9 b8 fd ff ff e8 24 61 6e 00 eb 95 e8 3d 61 6e 00 eb d1 <0f> 0b e9 cc fd ff ff 48 89 04 24 e8 cb 60 6e 00 48 8b 04 24 e9 0d
RSP: 0000:ffffc90002e6fc60 EFLAGS: 00010046
RAX: 0000000000000001 RBX: ffff8880b9d1f900 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 0000000000010002 RDI: 0000000000000000
RBP: 0000000000000001 R08: 0000000000000000 R09: ffff8880b9d00000
R10: fffffbfff1adcf38 R11: 0000000000000001 R12: 0000000000000000
R13: ffff888016215580 R14: 0000000000000001 R15: 0000000000031a01
 ttwu_queue kernel/sched/core.c:3769 [inline]
 try_to_wake_up+0x480/0x1570 kernel/sched/core.c:4097
 hrtimer_wakeup+0x43/0x60 kernel/time/hrtimer.c:1939
 __run_hrtimer kernel/time/hrtimer.c:1685 [inline]
 __hrtimer_run_queues+0x609/0xe50 kernel/time/hrtimer.c:1749
 hrtimer_interrupt+0x31c/0x790 kernel/time/hrtimer.c:1811
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1086 [inline]
 __sysvec_apic_timer_interrupt+0x146/0x530 arch/x86/kernel/apic/apic.c:1103
 sysvec_apic_timer_interrupt+0x40/0xc0 arch/x86/kernel/apic/apic.c:1097
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:638
RIP: 0033:0x7f7222eb6f60
Code: 10 64 48 8b 3c 25 00 03 00 00 e8 3b 0c f9 ff f4 66 2e 0f 1f 84 00 00 00 00 00 f7 c7 02 00 00 00 75 27 64 8b 04 25 08 03 00 00 <41> 89 c3 41 83 e3 fd f0 64 44 0f b1 1c 25 08 03 00 00 75 ec 44 89
RSP: 002b:00007f72234cad08 EFLAGS: 00000246
RAX: 0000000000000002 RBX: 00000000000001c8 RCX: 00007f7222eb8761
RDX: 00007f72234cad50 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 00007f72234caddc R08: 0000000000000000 R09: 00007ffcd971e080
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000032
R13: 00000000000551ca R14: 0000000000000012 R15: 00007f72234cae40
WARNING: CPU: 1 PID: 6976 at kernel/sched/core.c:3744 __ttwu_queue_wakelist kernel/sched/core.c:3680 [inline]
WARNING: CPU: 1 PID: 6976 at kernel/sched/core.c:3744 ttwu_queue_wakelist kernel/sched/core.c:3748 [inline]
WARNING: CPU: 1 PID: 6976 at kernel/sched/core.c:3744 ttwu_queue_wakelist+0x275/0x360 kernel/sched/core.c:3741
Modules linked in:
CPU: 1 PID: 6976 Comm: syz-executor.4 Not tainted 5.15.0-rc5-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:ttwu_queue_wakelist kernel/sched/core.c:3744 [inline]
RIP: 0010:ttwu_queue_wakelist+0x275/0x360 kernel/sched/core.c:3741
Code: 00 01 00 00 00 49 8d 75 38 89 ef e8 b5 ce 1b 00 e9 eb fd ff ff 0f 0b e9 b8 fd ff ff e8 24 61 6e 00 eb 95 e8 3d 61 6e 00 eb d1 <0f> 0b e9 cc fd ff ff 48 89 04 24 e8 cb 60 6e 00 48 8b 04 24 e9 0d
RSP: 0000:ffffc90002e6fc60 EFLAGS: 00010046
RAX: 0000000000000001 RBX: ffff8880b9d1f900 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 0000000000010002 RDI: 0000000000000000
RBP: 0000000000000001 R08: 0000000000000000 R09: ffff8880b9d00000
R10: fffffbfff1adcf38 R11: 0000000000000001 R12: 0000000000000000
R13: ffff888016215580 R14: 0000000000000001 R15: 0000000000031a01
FS:  0000555557180400(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055ffd6347b58 CR3: 000000007c333000 CR4: 00000000003526e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 ttwu_queue kernel/sched/core.c:3769 [inline]
 try_to_wake_up+0x480/0x1570 kernel/sched/core.c:4097
 hrtimer_wakeup+0x43/0x60 kernel/time/hrtimer.c:1939
 __run_hrtimer kernel/time/hrtimer.c:1685 [inline]
 __hrtimer_run_queues+0x609/0xe50 kernel/time/hrtimer.c:1749
 hrtimer_interrupt+0x31c/0x790 kernel/time/hrtimer.c:1811
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1086 [inline]
 __sysvec_apic_timer_interrupt+0x146/0x530 arch/x86/kernel/apic/apic.c:1103
 sysvec_apic_timer_interrupt+0x40/0xc0 arch/x86/kernel/apic/apic.c:1097
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:638
RIP: 0033:0x7f7222eb6f60
Code: 10 64 48 8b 3c 25 00 03 00 00 e8 3b 0c f9 ff f4 66 2e 0f 1f 84 00 00 00 00 00 f7 c7 02 00 00 00 75 27 64 8b 04 25 08 03 00 00 <41> 89 c3 41 83 e3 fd f0 64 44 0f b1 1c 25 08 03 00 00 75 ec 44 89
RSP: 002b:00007f72234cad08 EFLAGS: 00000246
RAX: 0000000000000002 RBX: 00000000000001c8 RCX: 00007f7222eb8761
RDX: 00007f72234cad50 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 00007f72234caddc R08: 0000000000000000 R09: 00007ffcd971e080
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000032
R13: 00000000000551ca R14: 0000000000000012 R15: 00007f72234cae40