============================================
WARNING: possible recursive locking detected
5.16.0-rc2-next-20211125-syzkaller #0 Not tainted
--------------------------------------------
systemd-udevd/7992 is trying to acquire lock:
ffff88803f4dc130 (&runtime->sleep){..-.}-{2:2}, at: io_poll_double_wake+0x2be/0x820 fs/io_uring.c:5461
but task is already holding lock:
ffff88803f4de130 (&runtime->sleep){..-.}-{2:2}, at: __wake_up_common_lock+0xb4/0x130 kernel/sched/wait.c:137
other info that might help us debug this:
Possible unsafe locking scenario:
CPU0
----
lock(&runtime->sleep);
lock(&runtime->sleep);
*** DEADLOCK ***
May be due to missing lock nesting notation
2 locks held by systemd-udevd/7992:
#0: ffff88814a4d5110 (&group->lock){..-.}-{2:2}, at: _snd_pcm_stream_lock_irqsave+0x9f/0xd0 sound/core/pcm_native.c:170
#1: ffff88803f4de130 (&runtime->sleep){..-.}-{2:2}, at: __wake_up_common_lock+0xb4/0x130 kernel/sched/wait.c:137
stack backtrace:
CPU: 0 PID: 7992 Comm: systemd-udevd Not tainted 5.16.0-rc2-next-20211125-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0xcd/0x134 lib/dump_stack.c:106
print_deadlock_bug kernel/locking/lockdep.c:2956 [inline]
check_deadlock kernel/locking/lockdep.c:2999 [inline]
validate_chain kernel/locking/lockdep.c:3788 [inline]
__lock_acquire.cold+0x149/0x3ab kernel/locking/lockdep.c:5027
lock_acquire kernel/locking/lockdep.c:5637 [inline]
lock_acquire+0x1ab/0x510 kernel/locking/lockdep.c:5602
__raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline]
_raw_spin_lock_irqsave+0x39/0x50 kernel/locking/spinlock.c:162
io_poll_double_wake+0x2be/0x820 fs/io_uring.c:5461
__wake_up_common+0x147/0x650 kernel/sched/wait.c:108
__wake_up_common_lock+0xd0/0x130 kernel/sched/wait.c:138
snd_pcm_update_state+0x46a/0x540 sound/core/pcm_lib.c:204
snd_pcm_update_hw_ptr0+0xa75/0x1a50 sound/core/pcm_lib.c:465
snd_pcm_period_elapsed_under_stream_lock+0x15a/0x230 sound/core/pcm_lib.c:1817
snd_pcm_period_elapsed+0x28/0x50 sound/core/pcm_lib.c:1849
dummy_hrtimer_callback+0x94/0x1b0 sound/drivers/dummy.c:377
__run_hrtimer kernel/time/hrtimer.c:1685 [inline]
__hrtimer_run_queues+0x609/0xe50 kernel/time/hrtimer.c:1749
hrtimer_run_softirq+0x17b/0x360 kernel/time/hrtimer.c:1766
__do_softirq+0x29b/0x9c2 kernel/softirq.c:558
invoke_softirq kernel/softirq.c:432 [inline]
__irq_exit_rcu+0x123/0x180 kernel/softirq.c:637
irq_exit_rcu+0x5/0x20 kernel/softirq.c:649
sysvec_apic_timer_interrupt+0x93/0xc0 arch/x86/kernel/apic/apic.c:1097
asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:638
RIP: 0010:shmem_getattr+0x0/0x1f0 mm/shmem.c:1064
Code: 1a 00 e9 29 ff ff ff 48 89 14 24 e8 aa 5c 1a 00 48 8b 14 24 e9 d9 fe ff ff e8 9c 5c 1a 00 e9 a9 fe ff ff 0f 1f 80 00 00 00 00 <41> 55 41 54 55 48 89 f5 53 48 89 d3 e8 7f cd cf ff 48 8d 7d 08 48
RSP: 0018:ffffc90002affd80 EFLAGS: 00000246
RAX: 0000000000000000 RBX: ffffffff81a81750 RCX: 00000000000007ff
RDX: ffffc90002affe28 RSI: ffff88801c1db410 RDI: ffffffff8ba40600
RBP: ffff888080110d98 R08: 0000000000000000 R09: ffffc90002affe28
R10: ffffffff81cf9058 R11: 0000000000000000 R12: ffffc90002affe28
R13: ffff88801c1db410 R14: 00000000000007ff R15: ffffffff8ba40600
vfs_getattr_nosec+0x2b4/0x370 fs/stat.c:123
vfs_getattr fs/stat.c:160 [inline]
vfs_fstat+0x6b/0xb0 fs/stat.c:182
__do_sys_newfstat+0x81/0x100 fs/stat.c:422
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7f475b8ad2e2
Code: 48 8b 05 b9 db 2b 00 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 83 ff 01 77 33 48 63 fe b8 05 00 00 00 48 89 d6 0f 05 <48> 3d 00 f0 ff ff 77 06 f3 c3 0f 1f 40 00 48 8b 15 81 db 2b 00 f7
RSP: 002b:00007ffd077a3ab8 EFLAGS: 00000246 ORIG_RAX: 0000000000000005
RAX: ffffffffffffffda RBX: 00007f475bb68440 RCX: 00007f475b8ad2e2
RDX: 00007ffd077a3ac0 RSI: 00007ffd077a3ac0 RDI: 0000000000000007
RBP: 00005628c4bf3a10 R08: 00007f475ca3b8c0 R09: 0000000000000230
R10: 00005628c37dc6bb R11: 0000000000000246 R12: 00005628c37dc6bb
R13: 0000000000000002 R14: 00007f475bb68440 R15: 0000000000000002
----------------
Code disassembly (best guess):
0: 1a 00 sbb (%rax),%al
2: e9 29 ff ff ff jmpq 0xffffff30
7: 48 89 14 24 mov %rdx,(%rsp)
b: e8 aa 5c 1a 00 callq 0x1a5cba
10: 48 8b 14 24 mov (%rsp),%rdx
14: e9 d9 fe ff ff jmpq 0xfffffef2
19: e8 9c 5c 1a 00 callq 0x1a5cba
1e: e9 a9 fe ff ff jmpq 0xfffffecc
23: 0f 1f 80 00 00 00 00 nopl 0x0(%rax)
* 2a: 41 55 push %r13 <-- trapping instruction
2c: 41 54 push %r12
2e: 55 push %rbp
2f: 48 89 f5 mov %rsi,%rbp
32: 53 push %rbx
33: 48 89 d3 mov %rdx,%rbx
36: e8 7f cd cf ff callq 0xffcfcdba
3b: 48 8d 7d 08 lea 0x8(%rbp),%rdi
3f: 48 rex.W