------------[ cut here ]------------ ====================================================== WARNING: possible circular locking dependency detected 6.9.0-rc1-syzkaller-00061-g8d025e2092e2 #0 Not tainted ------------------------------------------------------ swapper/2/0 is trying to acquire lock: ffffffff8dabe960 (console_owner){....}-{0:0}, at: console_trylock_spinning kernel/printk/printk.c:1997 [inline] ffffffff8dabe960 (console_owner){....}-{0:0}, at: vprintk_emit kernel/printk/printk.c:2347 [inline] ffffffff8dabe960 (console_owner){....}-{0:0}, at: vprintk_emit+0x42d/0x5a0 kernel/printk/printk.c:2303 but task is already holding lock: ffff88806b23ea58 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 kernel/sched/core.c:559 which lock already depends on the new lock. the existing dependency chain (in reverse order) is: -> #4 (&rq->__lock){-.-.}-{2:2}: _raw_spin_lock_nested+0x31/0x40 kernel/locking/spinlock.c:378 raw_spin_rq_lock_nested+0x29/0x130 kernel/sched/core.c:559 raw_spin_rq_lock kernel/sched/sched.h:1385 [inline] rq_lock kernel/sched/sched.h:1699 [inline] task_fork_fair+0x70/0x240 kernel/sched/fair.c:12635 sched_cgroup_fork+0x3cf/0x510 kernel/sched/core.c:4845 copy_process+0x4106/0x9160 kernel/fork.c:2498 kernel_clone+0xfd/0x980 kernel/fork.c:2796 user_mode_thread+0xb4/0xf0 kernel/fork.c:2874 rest_init+0x23/0x2b0 init/main.c:697 start_kernel+0x3a3/0x490 init/main.c:1074 x86_64_start_reservations+0x18/0x30 arch/x86/kernel/head64.c:507 x86_64_start_kernel+0xb2/0xc0 arch/x86/kernel/head64.c:488 common_startup_64+0x13e/0x148 -> #3 (&p->pi_lock){-.-.}-{2:2}: __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline] _raw_spin_lock_irqsave+0x3a/0x60 kernel/locking/spinlock.c:162 class_raw_spinlock_irqsave_constructor include/linux/spinlock.h:553 [inline] try_to_wake_up+0x9a/0x13e0 kernel/sched/core.c:4262 __wake_up_common+0x131/0x1e0 kernel/sched/wait.c:89 __wake_up_common_lock kernel/sched/wait.c:106 [inline] __wake_up+0x31/0x60 kernel/sched/wait.c:127 tty_port_default_wakeup+0x2a/0x40 drivers/tty/tty_port.c:69 serial8250_tx_chars+0x55a/0x8b0 drivers/tty/serial/8250/8250_port.c:1825 serial8250_handle_irq+0x5d3/0x780 drivers/tty/serial/8250/8250_port.c:1932 serial8250_default_handle_irq+0x9a/0x210 drivers/tty/serial/8250/8250_port.c:1952 serial8250_interrupt+0x103/0x210 drivers/tty/serial/8250/8250_core.c:127 __handle_irq_event_percpu+0x229/0x7c0 kernel/irq/handle.c:158 handle_irq_event_percpu kernel/irq/handle.c:193 [inline] handle_irq_event+0xab/0x1e0 kernel/irq/handle.c:210 handle_edge_irq+0x263/0xd10 kernel/irq/chip.c:831 generic_handle_irq_desc include/linux/irqdesc.h:161 [inline] handle_irq arch/x86/kernel/irq.c:238 [inline] __common_interrupt+0xde/0x250 arch/x86/kernel/irq.c:257 common_interrupt+0xab/0xd0 arch/x86/kernel/irq.c:247 asm_common_interrupt+0x26/0x40 arch/x86/include/asm/idtentry.h:693 native_safe_halt arch/x86/include/asm/irqflags.h:48 [inline] arch_safe_halt arch/x86/include/asm/irqflags.h:86 [inline] default_idle+0xf/0x20 arch/x86/kernel/process.c:742 default_idle_call+0x6d/0xb0 kernel/sched/idle.c:117 cpuidle_idle_call kernel/sched/idle.c:191 [inline] do_idle+0x32c/0x3f0 kernel/sched/idle.c:332 cpu_startup_entry+0x4f/0x60 kernel/sched/idle.c:430 rest_init+0x16b/0x2b0 init/main.c:732 start_kernel+0x3a3/0x490 init/main.c:1074 x86_64_start_reservations+0x18/0x30 arch/x86/kernel/head64.c:507 x86_64_start_kernel+0xb2/0xc0 arch/x86/kernel/head64.c:488 common_startup_64+0x13e/0x148 -> #2 (&tty->write_wait){-.-.}-{2:2}: __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline] _raw_spin_lock_irqsave+0x3a/0x60 kernel/locking/spinlock.c:162 __wake_up_common_lock kernel/sched/wait.c:105 [inline] __wake_up+0x1c/0x60 kernel/sched/wait.c:127 tty_port_default_wakeup+0x2a/0x40 drivers/tty/tty_port.c:69 serial8250_tx_chars+0x55a/0x8b0 drivers/tty/serial/8250/8250_port.c:1825 serial8250_handle_irq+0x5d3/0x780 drivers/tty/serial/8250/8250_port.c:1932 serial8250_default_handle_irq+0x9a/0x210 drivers/tty/serial/8250/8250_port.c:1952 serial8250_interrupt+0x103/0x210 drivers/tty/serial/8250/8250_core.c:127 __handle_irq_event_percpu+0x229/0x7c0 kernel/irq/handle.c:158 handle_irq_event_percpu kernel/irq/handle.c:193 [inline] handle_irq_event+0xab/0x1e0 kernel/irq/handle.c:210 handle_edge_irq+0x263/0xd10 kernel/irq/chip.c:831 generic_handle_irq_desc include/linux/irqdesc.h:161 [inline] handle_irq arch/x86/kernel/irq.c:238 [inline] __common_interrupt+0xde/0x250 arch/x86/kernel/irq.c:257 common_interrupt+0xab/0xd0 arch/x86/kernel/irq.c:247 asm_common_interrupt+0x26/0x40 arch/x86/include/asm/idtentry.h:693 native_safe_halt arch/x86/include/asm/irqflags.h:48 [inline] arch_safe_halt arch/x86/include/asm/irqflags.h:86 [inline] default_idle+0xf/0x20 arch/x86/kernel/process.c:742 default_idle_call+0x6d/0xb0 kernel/sched/idle.c:117 cpuidle_idle_call kernel/sched/idle.c:191 [inline] do_idle+0x32c/0x3f0 kernel/sched/idle.c:332 cpu_startup_entry+0x4f/0x60 kernel/sched/idle.c:430 rest_init+0x16b/0x2b0 init/main.c:732 start_kernel+0x3a3/0x490 init/main.c:1074 x86_64_start_reservations+0x18/0x30 arch/x86/kernel/head64.c:507 x86_64_start_kernel+0xb2/0xc0 arch/x86/kernel/head64.c:488 common_startup_64+0x13e/0x148 -> #1 (&port_lock_key){-.-.}-{2:2}: __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline] _raw_spin_lock_irqsave+0x3a/0x60 kernel/locking/spinlock.c:162 uart_port_lock_irqsave include/linux/serial_core.h:619 [inline] serial8250_console_write+0xaa6/0x1090 drivers/tty/serial/8250/8250_port.c:3355 console_emit_next_record kernel/printk/printk.c:2913 [inline] console_flush_all+0x53f/0xd70 kernel/printk/printk.c:2979 console_unlock+0xae/0x290 kernel/printk/printk.c:3048 vprintk_emit kernel/printk/printk.c:2348 [inline] vprintk_emit+0x11a/0x5a0 kernel/printk/printk.c:2303 vprintk+0x7f/0xa0 kernel/printk/printk_safe.c:45 _printk+0xc8/0x100 kernel/printk/printk.c:2373 register_console+0xaa2/0x10a0 kernel/printk/printk.c:3569 univ8250_console_init+0x35/0x50 drivers/tty/serial/8250/8250_core.c:717 console_init+0xcc/0x680 kernel/printk/printk.c:3715 start_kernel+0x259/0x490 init/main.c:1009 x86_64_start_reservations+0x18/0x30 arch/x86/kernel/head64.c:507 x86_64_start_kernel+0xb2/0xc0 arch/x86/kernel/head64.c:488 common_startup_64+0x13e/0x148 -> #0 (console_owner){....}-{0:0}: check_prev_add kernel/locking/lockdep.c:3134 [inline] check_prevs_add kernel/locking/lockdep.c:3253 [inline] validate_chain kernel/locking/lockdep.c:3869 [inline] __lock_acquire+0x2478/0x3b30 kernel/locking/lockdep.c:5137 lock_acquire kernel/locking/lockdep.c:5754 [inline] lock_acquire+0x1b1/0x560 kernel/locking/lockdep.c:5719 console_trylock_spinning kernel/printk/printk.c:1997 [inline] vprintk_emit kernel/printk/printk.c:2347 [inline] vprintk_emit+0x442/0x5a0 kernel/printk/printk.c:2303 vprintk+0x7f/0xa0 kernel/printk/printk_safe.c:45 _printk+0xc8/0x100 kernel/printk/printk.c:2373 __report_bug lib/bug.c:195 [inline] report_bug+0x4ac/0x580 lib/bug.c:219 handle_bug+0x3d/0x70 arch/x86/kernel/traps.c:239 exc_invalid_op+0x17/0x50 arch/x86/kernel/traps.c:260 asm_exc_invalid_op+0x1a/0x20 arch/x86/include/asm/idtentry.h:621 __local_bh_enable_ip+0xc3/0x120 kernel/softirq.c:362 spin_unlock_bh include/linux/spinlock.h:396 [inline] sock_hash_delete_elem+0x1f4/0x260 net/core/sock_map.c:947 ___bpf_prog_run+0x3e51/0xae80 kernel/bpf/core.c:1997 __bpf_prog_run32+0xc1/0x100 kernel/bpf/core.c:2236 bpf_dispatcher_nop_func include/linux/bpf.h:1234 [inline] __bpf_prog_run include/linux/filter.h:657 [inline] bpf_prog_run include/linux/filter.h:664 [inline] __bpf_trace_run kernel/trace/bpf_trace.c:2381 [inline] bpf_trace_run4+0x176/0x460 kernel/trace/bpf_trace.c:2422 __bpf_trace_sched_switch+0x13e/0x190 include/trace/events/sched.h:222 trace_sched_switch include/trace/events/sched.h:222 [inline] __schedule+0x252c/0x5d00 kernel/sched/core.c:6743 schedule_idle+0x59/0x90 kernel/sched/core.c:6864 do_idle+0x287/0x3f0 kernel/sched/idle.c:360 cpu_startup_entry+0x4f/0x60 kernel/sched/idle.c:430 start_secondary+0x220/0x2b0 arch/x86/kernel/smpboot.c:313 common_startup_64+0x13e/0x148 other info that might help us debug this: Chain exists of: console_owner --> &p->pi_lock --> &rq->__lock Possible unsafe locking scenario: CPU0 CPU1 ---- ---- lock(&rq->__lock); lock(&p->pi_lock); lock(&rq->__lock); lock(console_owner); *** DEADLOCK *** 2 locks held by swapper/2/0: #0: ffff88806b23ea58 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 kernel/sched/core.c:559 #1: ffffffff8dbb14a0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:329 [inline] #1: ffffffff8dbb14a0 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:781 [inline] #1: ffffffff8dbb14a0 (rcu_read_lock){....}-{1:2}, at: __bpf_trace_run kernel/trace/bpf_trace.c:2380 [inline] #1: ffffffff8dbb14a0 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run4+0x107/0x460 kernel/trace/bpf_trace.c:2422 stack backtrace: CPU: 2 PID: 0 Comm: swapper/2 Not tainted 6.9.0-rc1-syzkaller-00061-g8d025e2092e2 #0 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:114 check_noncircular+0x31a/0x400 kernel/locking/lockdep.c:2187 check_prev_add kernel/locking/lockdep.c:3134 [inline] check_prevs_add kernel/locking/lockdep.c:3253 [inline] validate_chain kernel/locking/lockdep.c:3869 [inline] __lock_acquire+0x2478/0x3b30 kernel/locking/lockdep.c:5137 lock_acquire kernel/locking/lockdep.c:5754 [inline] lock_acquire+0x1b1/0x560 kernel/locking/lockdep.c:5719 console_trylock_spinning kernel/printk/printk.c:1997 [inline] vprintk_emit kernel/printk/printk.c:2347 [inline] vprintk_emit+0x442/0x5a0 kernel/printk/printk.c:2303 vprintk+0x7f/0xa0 kernel/printk/printk_safe.c:45 _printk+0xc8/0x100 kernel/printk/printk.c:2373 __report_bug lib/bug.c:195 [inline] report_bug+0x4ac/0x580 lib/bug.c:219 handle_bug+0x3d/0x70 arch/x86/kernel/traps.c:239 exc_invalid_op+0x17/0x50 arch/x86/kernel/traps.c:260 asm_exc_invalid_op+0x1a/0x20 arch/x86/include/asm/idtentry.h:621 RIP: 0010:__local_bh_enable_ip+0xc3/0x120 kernel/softirq.c:362 Code: 00 e8 61 6f 0b 00 e8 0c b7 42 00 fb 65 8b 05 fc 02 b2 7e 85 c0 74 52 5b 5d c3 cc cc cc cc 65 8b 05 be b3 b0 7e 85 c0 75 9e 90 <0f> 0b 90 eb 98 e8 13 b5 42 00 eb 99 48 89 ef e8 a9 f4 19 00 eb a2 RSP: 0018:ffffc900001878e0 EFLAGS: 00010046 RAX: 0000000000000000 RBX: 0000000000000201 RCX: 1ffffffff1fc29bb RDX: 0000000000000000 RSI: 0000000000000201 RDI: ffffffff88d45ce4 RBP: ffffffff88d45ce4 R08: 0000000000000000 R09: ffffed1005eb2b1c R10: ffff88802f5958e3 R11: ffffffff938dc068 R12: fffffffffffffffe R13: ffff88802f5958e0 R14: ffff88802f5958d8 R15: 0000000023700e53 spin_unlock_bh include/linux/spinlock.h:396 [inline] sock_hash_delete_elem+0x1f4/0x260 net/core/sock_map.c:947 ___bpf_prog_run+0x3e51/0xae80 kernel/bpf/core.c:1997 __bpf_prog_run32+0xc1/0x100 kernel/bpf/core.c:2236 bpf_dispatcher_nop_func include/linux/bpf.h:1234 [inline] __bpf_prog_run include/linux/filter.h:657 [inline] bpf_prog_run include/linux/filter.h:664 [inline] __bpf_trace_run kernel/trace/bpf_trace.c:2381 [inline] bpf_trace_run4+0x176/0x460 kernel/trace/bpf_trace.c:2422 __bpf_trace_sched_switch+0x13e/0x190 include/trace/events/sched.h:222 trace_sched_switch include/trace/events/sched.h:222 [inline] __schedule+0x252c/0x5d00 kernel/sched/core.c:6743 schedule_idle+0x59/0x90 kernel/sched/core.c:6864 do_idle+0x287/0x3f0 kernel/sched/idle.c:360 cpu_startup_entry+0x4f/0x60 kernel/sched/idle.c:430 start_secondary+0x220/0x2b0 arch/x86/kernel/smpboot.c:313 common_startup_64+0x13e/0x148 ------------[ cut here ]------------ WARNING: CPU: 1 PID: 0 at arch/x86/mm/tlb.c:515 switch_mm_irqs_off+0x890/0xbc0 arch/x86/mm/tlb.c:515 Modules linked in: CPU: 1 PID: 0 Comm: swapper/1 Not tainted 6.9.0-rc1-syzkaller-00061-g8d025e2092e2 #0 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 RIP: 0010:switch_mm_irqs_off+0x890/0xbc0 arch/x86/mm/tlb.c:515 Code: ff 44 8d 6b 02 48 63 d3 49 8d 8e 18 06 00 00 4d 63 ed 49 c1 e5 04 4d 8d 8d 80 d8 03 00 49 81 c5 88 d8 03 00 e9 75 fd ff ff 90 <0f> 0b 90 e9 e3 f7 ff ff 90 0f 0b 90 e8 df f5 ff ff e9 20 f8 ff ff RSP: 0018:ffffc90000177be8 EFLAGS: 00010202 RAX: 0000000000000282 RBX: ffff888017ee0000 RCX: ffff888024cfaf80 RDX: 1ffff1100499f6ca RSI: ffffffff8b8f46e0 RDI: ffffffff8b8f4720 RBP: ffff888024cfaf80 R08: 0000000000000001 R09: ffffed1002fdc734 R10: ffff888017ee39a7 R11: 0000000000000000 R12: ffff88806b13f501 R13: ffff88802ca44880 R14: ffff888024cfaf80 R15: ffff88806b13ea40 FS: 0000000000000000(0000) GS:ffff88806b100000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000056328857a9d8 CR3: 000000002c02e000 CR4: 0000000000350ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: context_switch kernel/sched/core.c:5393 [inline] __schedule+0xd2b/0x5d00 kernel/sched/core.c:6746 schedule_idle+0x59/0x90 kernel/sched/core.c:6864 do_idle+0x287/0x3f0 kernel/sched/idle.c:360 cpu_startup_entry+0x4f/0x60 kernel/sched/idle.c:430 start_secondary+0x220/0x2b0 arch/x86/kernel/smpboot.c:313 common_startup_64+0x13e/0x148