ODEBUG: object ffffc90003dd7b90 is on stack ffffc90003dd0000, but NOT annotated.
======================================================
WARNING: possible circular locking dependency detected
6.15.0-rc6-next-20250515-syzkaller-g484803582c77 #0 Not tainted
------------------------------------------------------
bch-copygc/loop/6839 is trying to acquire lock:
ffffffff8cd20480 (console_owner){....}-{0:0}, at: rcu_try_lock_acquire include/linux/rcupdate.h:336 [inline]
ffffffff8cd20480 (console_owner){....}-{0:0}, at: srcu_read_lock_nmisafe include/linux/srcu.h:346 [inline]
ffffffff8cd20480 (console_owner){....}-{0:0}, at: console_srcu_read_lock kernel/printk/printk.c:288 [inline]
ffffffff8cd20480 (console_owner){....}-{0:0}, at: console_flush_all+0x137/0x9e0 kernel/printk/printk.c:3203
but task is already holding lock:
ffffffff97bedd08 (&obj_hash[i].lock){-.-.}-{2:2}, at: __debug_object_init+0x85/0x3c0 lib/debugobjects.c:741
which lock already depends on the new lock.
the existing dependency chain (in reverse order) is:
-> #4 (&obj_hash[i].lock){-.-.}-{2:2}:
lock_acquire+0x120/0x360 kernel/locking/lockdep.c:5871
__raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline]
_raw_spin_lock_irqsave+0xa7/0xf0 kernel/locking/spinlock.c:162
debug_object_activate+0xbb/0x420 lib/debugobjects.c:818
debug_work_activate kernel/workqueue.c:664 [inline]
insert_work+0x30/0x270 kernel/workqueue.c:2180
__queue_work+0x966/0xc10 kernel/workqueue.c:2341
queue_work_on+0x176/0x1d0 kernel/workqueue.c:2392
queue_work include/linux/workqueue.h:662 [inline]
start_poll_synchronize_rcu_expedited+0xfc/0x140 kernel/rcu/tree_exp.h:1075
rcu_init+0x108/0x160 kernel/rcu/tree.c:4854
start_kernel+0x1a9/0x400 init/main.c:991
x86_64_start_reservations+0x2a/0x30 arch/x86/kernel/head64.c:311
x86_64_start_kernel+0x66/0x70 arch/x86/kernel/head64.c:292
common_startup_64+0x13e/0x147
-> #3 (&pool->lock){-.-.}-{2:2}:
lock_acquire+0x120/0x360 kernel/locking/lockdep.c:5871
__raw_spin_lock include/linux/spinlock_api_smp.h:133 [inline]
_raw_spin_lock+0x2e/0x40 kernel/locking/spinlock.c:154
__queue_work+0x597/0xc10 kernel/workqueue.c:-1
queue_work_on+0x176/0x1d0 kernel/workqueue.c:2392
queue_work include/linux/workqueue.h:662 [inline]
rpm_suspend+0xb78/0x1190 drivers/base/power/runtime.c:673
__pm_runtime_idle+0xad/0x110 drivers/base/power/runtime.c:1112
pm_runtime_put include/linux/pm_runtime.h:470 [inline]
__device_attach+0x258/0x370 drivers/base/dd.c:1047
bus_probe_device+0x12d/0x200 drivers/base/bus.c:537
device_add+0x4ee/0x9b0 drivers/base/core.c:3692
serial_base_port_add+0x25a/0x3a0 drivers/tty/serial/serial_base_bus.c:179
serial_core_port_device_add drivers/tty/serial/serial_core.c:3341 [inline]
serial_core_register_port+0x35c/0x24a0 drivers/tty/serial/serial_core.c:3380
serial8250_register_8250_port+0x12ab/0x1b90 drivers/tty/serial/8250/8250_core.c:822
serial_pnp_probe+0x3d7/0x5e0 drivers/tty/serial/8250/8250_pnp.c:480
pnp_device_probe+0x25a/0x3d0 drivers/pnp/driver.c:111
call_driver_probe drivers/base/dd.c:-1 [inline]
really_probe+0x241/0x860 drivers/base/dd.c:657
__driver_probe_device+0x138/0x280 drivers/base/dd.c:799
driver_probe_device+0x4a/0x3a0 drivers/base/dd.c:829
__driver_attach+0x26d/0x5b0 drivers/base/dd.c:1215
bus_for_each_dev+0x20e/0x270 drivers/base/bus.c:370
bus_add_driver+0x2f1/0x570 drivers/base/bus.c:678
driver_register+0x16e/0x2b0 drivers/base/driver.c:249
serial8250_init+0x8f/0x160 drivers/tty/serial/8250/8250_platform.c:315
do_one_initcall+0x1ad/0x5b0 init/main.c:1273
do_initcall_level+0x104/0x190 init/main.c:1335
do_initcalls+0x59/0xa0 init/main.c:1351
kernel_init_freeable+0x334/0x4a0 init/main.c:1583
kernel_init+0x17/0x130 init/main.c:1473
ret_from_fork+0x2bd/0x570 arch/x86/kernel/process.c:148
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
-> #2 (&dev->power.lock){-.-.}-{3:3}:
lock_acquire+0x120/0x360 kernel/locking/lockdep.c:5871
__raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline]
_raw_spin_lock_irqsave+0xa7/0xf0 kernel/locking/spinlock.c:162
__pm_runtime_resume+0xa5/0x110 drivers/base/power/runtime.c:1179
pm_runtime_get include/linux/pm_runtime.h:418 [inline]
__uart_start+0x122/0x350 drivers/tty/serial/serial_core.c:149
uart_write+0xc8/0x110 drivers/tty/serial/serial_core.c:636
process_output_block drivers/tty/n_tty.c:561 [inline]
n_tty_write+0xe36/0x1230 drivers/tty/n_tty.c:2377
iterate_tty_write drivers/tty/tty_io.c:1006 [inline]
file_tty_write+0x497/0x840 drivers/tty/tty_io.c:1081
new_sync_write fs/read_write.c:591 [inline]
vfs_write+0x724/0x930 fs/read_write.c:684
ksys_write+0x108/0x1f0 fs/read_write.c:736
do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94
entry_SYSCALL_64_after_hwframe+0x77/0x7f
-> #1 (&port_lock_key){-.-.}-{3:3}:
lock_acquire+0x120/0x360 kernel/locking/lockdep.c:5871
__raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline]
_raw_spin_lock_irqsave+0xa7/0xf0 kernel/locking/spinlock.c:162
uart_port_lock_irqsave include/linux/serial_core.h:717 [inline]
serial8250_console_write+0x147/0x15b0 drivers/tty/serial/8250/8250_port.c:3415
console_emit_next_record kernel/printk/printk.c:3138 [inline]
console_flush_all+0x55b/0x9e0 kernel/printk/printk.c:3226
__console_flush_and_unlock kernel/printk/printk.c:3285 [inline]
console_unlock+0xb7/0x1e0 kernel/printk/printk.c:3325
vprintk_emit+0x3ea/0x5f0 kernel/printk/printk.c:2450
_printk+0xce/0x120 kernel/printk/printk.c:2475
register_console+0x7bb/0xe40 kernel/printk/printk.c:4125
univ8250_console_init+0x3a/0x70 drivers/tty/serial/8250/8250_core.c:513
console_init+0x10e/0x430 kernel/printk/printk.c:4323
start_kernel+0x252/0x400 init/main.c:1035
x86_64_start_reservations+0x2a/0x30 arch/x86/kernel/head64.c:311
x86_64_start_kernel+0x66/0x70 arch/x86/kernel/head64.c:292
common_startup_64+0x13e/0x147
-> #0 (console_owner){....}-{0:0}:
check_prev_add kernel/locking/lockdep.c:3168 [inline]
check_prevs_add kernel/locking/lockdep.c:3287 [inline]
validate_chain+0xb9b/0x2140 kernel/locking/lockdep.c:3911
__lock_acquire+0xab9/0xd20 kernel/locking/lockdep.c:5240
lock_acquire+0x120/0x360 kernel/locking/lockdep.c:5871
console_lock_spinning_enable kernel/printk/printk.c:1924 [inline]
console_emit_next_record kernel/printk/printk.c:3132 [inline]
console_flush_all+0x4fc/0x9e0 kernel/printk/printk.c:3226
__console_flush_and_unlock kernel/printk/printk.c:3285 [inline]
console_unlock+0xb7/0x1e0 kernel/printk/printk.c:3325
vprintk_emit+0x3ea/0x5f0 kernel/printk/printk.c:2450
_printk+0xce/0x120 kernel/printk/printk.c:2475
debug_object_is_on_stack lib/debugobjects.c:-1 [inline]
lookup_object_or_alloc lib/debugobjects.c:688 [inline]
__debug_object_init+0x2c8/0x3c0 lib/debugobjects.c:743
rhashtable_init_noprof+0x6c5/0xa70 lib/rhashtable.c:1085
bch2_copygc_thread+0x106/0xb90 fs/bcachefs/movinggc.c:354
kthread+0x600/0x770 kernel/kthread.c:464
ret_from_fork+0x2bd/0x570 arch/x86/kernel/process.c:148
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
other info that might help us debug this:
Chain exists of:
console_owner --> &pool->lock --> &obj_hash[i].lock
Possible unsafe locking scenario:
CPU0 CPU1
---- ----
lock(&obj_hash[i].lock);
lock(&pool->lock);
lock(&obj_hash[i].lock);
lock(console_owner);
*** DEADLOCK ***
3 locks held by bch-copygc/loop/6839:
#0: ffffffff97bedd08 (&obj_hash[i].lock){-.-.}-{2:2}, at: __debug_object_init+0x85/0x3c0 lib/debugobjects.c:741
#1: ffffffff8cd204e0 (console_lock){+.+.}-{0:0}, at: _printk+0xce/0x120 kernel/printk/printk.c:2475
#2: ffffffff8cc07db0 (console_srcu){....}-{0:0}, at: rcu_try_lock_acquire include/linux/rcupdate.h:336 [inline]
#2: ffffffff8cc07db0 (console_srcu){....}-{0:0}, at: srcu_read_lock_nmisafe include/linux/srcu.h:346 [inline]
#2: ffffffff8cc07db0 (console_srcu){....}-{0:0}, at: console_srcu_read_lock kernel/printk/printk.c:288 [inline]
#2: ffffffff8cc07db0 (console_srcu){....}-{0:0}, at: console_flush_all+0x137/0x9e0 kernel/printk/printk.c:3203
stack backtrace:
CPU: 1 UID: 0 PID: 6839 Comm: bch-copygc/loop Not tainted 6.15.0-rc6-next-20250515-syzkaller-g484803582c77 #0 PREEMPT(full)
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
Call Trace:
dump_stack_lvl+0xfc/0x190 lib/dump_stack.c:120
print_circular_bug+0x2ee/0x310 kernel/locking/lockdep.c:2046
check_noncircular+0x134/0x160 kernel/locking/lockdep.c:2178
check_prev_add kernel/locking/lockdep.c:3168 [inline]
check_prevs_add kernel/locking/lockdep.c:3287 [inline]
validate_chain+0xb9b/0x2140 kernel/locking/lockdep.c:3911
__lock_acquire+0xab9/0xd20 kernel/locking/lockdep.c:5240
lock_acquire+0x120/0x360 kernel/locking/lockdep.c:5871
console_lock_spinning_enable kernel/printk/printk.c:1924 [inline]
console_emit_next_record kernel/printk/printk.c:3132 [inline]
console_flush_all+0x4fc/0x9e0 kernel/printk/printk.c:3226
__console_flush_and_unlock kernel/printk/printk.c:3285 [inline]
console_unlock+0xb7/0x1e0 kernel/printk/printk.c:3325
vprintk_emit+0x3ea/0x5f0 kernel/printk/printk.c:2450
_printk+0xce/0x120 kernel/printk/printk.c:2475
debug_object_is_on_stack lib/debugobjects.c:-1 [inline]
lookup_object_or_alloc lib/debugobjects.c:688 [inline]
__debug_object_init+0x2c8/0x3c0 lib/debugobjects.c:743
rhashtable_init_noprof+0x6c5/0xa70 lib/rhashtable.c:1085
bch2_copygc_thread+0x106/0xb90 fs/bcachefs/movinggc.c:354
kthread+0x600/0x770 kernel/kthread.c:464
ret_from_fork+0x2bd/0x570 arch/x86/kernel/process.c:148
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
------------[ cut here ]------------
WARNING: CPU: 1 PID: 6839 at lib/debugobjects.c:655 debug_object_is_on_stack lib/debugobjects.c:655 [inline]
WARNING: CPU: 1 PID: 6839 at lib/debugobjects.c:655 lookup_object_or_alloc lib/debugobjects.c:688 [inline]
WARNING: CPU: 1 PID: 6839 at lib/debugobjects.c:655 __debug_object_init+0x2c9/0x3c0 lib/debugobjects.c:743
Modules linked in:
CPU: 1 UID: 0 PID: 6839 Comm: bch-copygc/loop Not tainted 6.15.0-rc6-next-20250515-syzkaller-g484803582c77 #0 PREEMPT(full)
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
RIP: 0010:debug_object_is_on_stack lib/debugobjects.c:655 [inline]
RIP: 0010:lookup_object_or_alloc lib/debugobjects.c:688 [inline]
RIP: 0010:__debug_object_init+0x2c9/0x3c0 lib/debugobjects.c:743
Code: eb 05 cc 41 ff c7 44 89 3d 54 c1 79 13 48 c7 c1 c0 91 a2 8a 48 c7 c7 20 92 a2 8a 84 c0 48 0f 45 f9 48 89 de e8 b8 b5 da fc 90 <0f> 0b 90 e9 c0 fe ff ff e8 3a 1c 00 00 8b 05 ac 27 f8 08 3b 05 aa
RSP: 0018:ffffc90003dd76d8 EFLAGS: 00010046
RAX: 0000000000000050 RBX: ffffc90003dd7b90 RCX: 17201c1b3b630b00
RDX: 0000000000000001 RSI: 0000000000000004 RDI: 00000000ffffffff
RBP: ffff88802d5c8020 R08: ffff8880b8b24293 R09: 1ffff11017164852
R10: dffffc0000000000 R11: ffffed1017164853 R12: ffff88805d8f1278
R13: ffff888078df5850 R14: dffffc0000000000 R15: 0000000000000001
FS: 0000000000000000(0000) GS:ffff888128293000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f7bfa7ed000 CR3: 000000002714c000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
rhashtable_init_noprof+0x6c5/0xa70 lib/rhashtable.c:1085
bch2_copygc_thread+0x106/0xb90 fs/bcachefs/movinggc.c:354
kthread+0x600/0x770 kernel/kthread.c:464
ret_from_fork+0x2bd/0x570 arch/x86/kernel/process.c:148
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245