------------[ cut here ]------------ ====================================================== WARNING: possible circular locking dependency detected 6.12.0-rc4-syzkaller-00161-gae90f6a6170d #0 Not tainted ------------------------------------------------------ kworker/1:6/15421 is trying to acquire lock: ffffffff8e813498 ((console_sem).lock){-.-.}-{2:2}, at: down_trylock+0x20/0xa0 kernel/locking/semaphore.c:139 but task is already holding lock: ffff8880b873ea98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 kernel/sched/core.c:598 which lock already depends on the new lock. the existing dependency chain (in reverse order) is: -> #2 (&rq->__lock){-.-.}-{2:2}: lock_acquire+0x1ed/0x550 kernel/locking/lockdep.c:5825 _raw_spin_lock_nested+0x31/0x40 kernel/locking/spinlock.c:378 raw_spin_rq_lock_nested+0x2a/0x140 kernel/sched/core.c:598 raw_spin_rq_lock kernel/sched/sched.h:1505 [inline] task_rq_lock+0xc6/0x360 kernel/sched/core.c:700 cgroup_move_task+0x9b/0x5a0 kernel/sched/psi.c:1161 css_set_move_task+0x72e/0x950 kernel/cgroup/cgroup.c:898 cgroup_post_fork+0x256/0x880 kernel/cgroup/cgroup.c:6692 copy_process+0x39e9/0x3d50 kernel/fork.c:2598 kernel_clone+0x226/0x8f0 kernel/fork.c:2784 user_mode_thread+0x132/0x1a0 kernel/fork.c:2862 rest_init+0x23/0x300 init/main.c:712 start_kernel+0x47f/0x500 init/main.c:1105 x86_64_start_reservations+0x2a/0x30 arch/x86/kernel/head64.c:507 x86_64_start_kernel+0x9f/0xa0 arch/x86/kernel/head64.c:488 common_startup_64+0x13e/0x147 -> #1 (&p->pi_lock){-.-.}-{2:2}: lock_acquire+0x1ed/0x550 kernel/locking/lockdep.c:5825 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline] _raw_spin_lock_irqsave+0xd5/0x120 kernel/locking/spinlock.c:162 class_raw_spinlock_irqsave_constructor include/linux/spinlock.h:551 [inline] try_to_wake_up+0xbe/0x14b0 kernel/sched/core.c:4165 up+0x72/0x90 kernel/locking/semaphore.c:191 __up_console_sem kernel/printk/printk.c:343 [inline] __console_unlock+0x123/0x1f0 kernel/printk/printk.c:2844 __console_flush_and_unlock kernel/printk/printk.c:3241 [inline] console_unlock+0x18f/0x3b0 kernel/printk/printk.c:3279 vprintk_emit+0x730/0xa10 kernel/printk/printk.c:2407 _printk+0xd5/0x120 kernel/printk/printk.c:2432 netdev_info+0x122/0x170 net/core/dev.c:11868 __dev_set_promiscuity+0x1c1/0x5a0 net/core/dev.c:8630 dev_set_promiscuity+0x51/0xe0 net/core/dev.c:8668 hsr_portdev_setup net/hsr/hsr_slave.c:148 [inline] hsr_add_port+0x53e/0x790 net/hsr/hsr_slave.c:201 hsr_dev_finalize+0x602/0x9a0 net/hsr/hsr_device.c:661 hsr_newlink+0x7ee/0x970 net/hsr/hsr_netlink.c:123 rtnl_newlink_create net/core/rtnetlink.c:3539 [inline] __rtnl_newlink net/core/rtnetlink.c:3759 [inline] rtnl_newlink+0x1591/0x20a0 net/core/rtnetlink.c:3772 rtnetlink_rcv_msg+0x73f/0xcf0 net/core/rtnetlink.c:6675 netlink_rcv_skb+0x1e3/0x430 net/netlink/af_netlink.c:2551 netlink_unicast_kernel net/netlink/af_netlink.c:1331 [inline] netlink_unicast+0x7f6/0x990 net/netlink/af_netlink.c:1357 netlink_sendmsg+0x8e4/0xcb0 net/netlink/af_netlink.c:1901 sock_sendmsg_nosec net/socket.c:729 [inline] __sock_sendmsg+0x221/0x270 net/socket.c:744 ____sys_sendmsg+0x52a/0x7e0 net/socket.c:2607 ___sys_sendmsg net/socket.c:2661 [inline] __sys_sendmsg+0x292/0x380 net/socket.c:2690 do_syscall_32_irqs_on arch/x86/entry/common.c:165 [inline] __do_fast_syscall_32+0xb4/0x110 arch/x86/entry/common.c:386 do_fast_syscall_32+0x34/0x80 arch/x86/entry/common.c:411 entry_SYSENTER_compat_after_hwframe+0x84/0x8e -> #0 ((console_sem).lock){-.-.}-{2:2}: check_prev_add kernel/locking/lockdep.c:3161 [inline] check_prevs_add kernel/locking/lockdep.c:3280 [inline] validate_chain+0x18ef/0x5920 kernel/locking/lockdep.c:3904 __lock_acquire+0x1384/0x2050 kernel/locking/lockdep.c:5202 lock_acquire+0x1ed/0x550 kernel/locking/lockdep.c:5825 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline] _raw_spin_lock_irqsave+0xd5/0x120 kernel/locking/spinlock.c:162 down_trylock+0x20/0xa0 kernel/locking/semaphore.c:139 __down_trylock_console_sem+0x109/0x250 kernel/printk/printk.c:326 console_trylock kernel/printk/printk.c:2827 [inline] console_trylock_spinning kernel/printk/printk.c:1990 [inline] vprintk_emit+0x3d7/0xa10 kernel/printk/printk.c:2406 _printk+0xd5/0x120 kernel/printk/printk.c:2432 __report_bug lib/bug.c:195 [inline] report_bug+0x346/0x500 lib/bug.c:219 handle_bug+0x60/0x90 arch/x86/kernel/traps.c:285 exc_invalid_op+0x1a/0x50 arch/x86/kernel/traps.c:309 asm_exc_invalid_op+0x1a/0x20 arch/x86/include/asm/idtentry.h:621 enqueue_dl_entity+0x1630/0x1d60 kernel/sched/deadline.c:1995 dl_server_start+0xc9/0x240 kernel/sched/deadline.c:1650 enqueue_task_fair+0xb5c/0xea0 kernel/sched/fair.c:7043 enqueue_task+0x7a/0x340 kernel/sched/core.c:2020 activate_task+0x61/0xc0 kernel/sched/core.c:2067 attach_task+0xee/0x190 kernel/sched/fair.c:9634 attach_tasks kernel/sched/fair.c:9669 [inline] sched_balance_rq+0x664a/0x8620 kernel/sched/fair.c:11746 sched_balance_newidle+0x6ba/0xfd0 kernel/sched/fair.c:12788 pick_next_task_fair+0x40/0xc90 kernel/sched/fair.c:8936 __pick_next_task+0xdd/0x400 kernel/sched/core.c:5968 pick_next_task kernel/sched/core.c:6053 [inline] __schedule+0x7c8/0x4bd0 kernel/sched/core.c:6644 __schedule_loop kernel/sched/core.c:6767 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6782 schedule_timeout+0x1be/0x310 kernel/time/timer.c:2615 schedule_timeout_uninterruptible kernel/time/timer.c:2649 [inline] msleep+0x9b/0xe0 kernel/time/timer.c:2770 hub_port_debounce+0x317/0x590 drivers/usb/core/hub.c:4679 hub_port_debounce_be_stable drivers/usb/core/hub.h:183 [inline] hub_port_connect drivers/usb/core/hub.c:5373 [inline] hub_port_connect_change drivers/usb/core/hub.c:5661 [inline] port_event drivers/usb/core/hub.c:5821 [inline] hub_event+0x1f4f/0x5150 drivers/usb/core/hub.c:5903 process_one_work kernel/workqueue.c:3229 [inline] process_scheduled_works+0xa63/0x1850 kernel/workqueue.c:3310 worker_thread+0x870/0xd30 kernel/workqueue.c:3391 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 other info that might help us debug this: Chain exists of: (console_sem).lock --> &p->pi_lock --> &rq->__lock Possible unsafe locking scenario: CPU0 CPU1 ---- ---- lock(&rq->__lock); lock(&p->pi_lock); lock(&rq->__lock); lock((console_sem).lock); *** DEADLOCK *** 5 locks held by kworker/1:6/15421: #0: ffff888021ad4548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3204 [inline] #0: ffff888021ad4548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 kernel/workqueue.c:3310 #1: ffffc900038bfd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3205 [inline] #1: ffffc900038bfd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 kernel/workqueue.c:3310 #2: ffff8880284ff190 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1014 [inline] #2: ffff8880284ff190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 drivers/usb/core/hub.c:5849 #3: ffffffff8e937e20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:337 [inline] #3: ffffffff8e937e20 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #3: ffffffff8e937e20 (rcu_read_lock){....}-{1:2}, at: sched_balance_newidle+0x2c0/0xfd0 kernel/sched/fair.c:12758 #4: ffff8880b873ea98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 kernel/sched/core.c:598 stack backtrace: CPU: 1 UID: 0 PID: 15421 Comm: kworker/1:6 Not tainted 6.12.0-rc4-syzkaller-00161-gae90f6a6170d #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 Workqueue: usb_hub_wq hub_event Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120 print_circular_bug+0x13a/0x1b0 kernel/locking/lockdep.c:2074 check_noncircular+0x36a/0x4a0 kernel/locking/lockdep.c:2206 check_prev_add kernel/locking/lockdep.c:3161 [inline] check_prevs_add kernel/locking/lockdep.c:3280 [inline] validate_chain+0x18ef/0x5920 kernel/locking/lockdep.c:3904 __lock_acquire+0x1384/0x2050 kernel/locking/lockdep.c:5202 lock_acquire+0x1ed/0x550 kernel/locking/lockdep.c:5825 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline] _raw_spin_lock_irqsave+0xd5/0x120 kernel/locking/spinlock.c:162 down_trylock+0x20/0xa0 kernel/locking/semaphore.c:139 __down_trylock_console_sem+0x109/0x250 kernel/printk/printk.c:326 console_trylock kernel/printk/printk.c:2827 [inline] console_trylock_spinning kernel/printk/printk.c:1990 [inline] vprintk_emit+0x3d7/0xa10 kernel/printk/printk.c:2406 _printk+0xd5/0x120 kernel/printk/printk.c:2432 __report_bug lib/bug.c:195 [inline] report_bug+0x346/0x500 lib/bug.c:219 handle_bug+0x60/0x90 arch/x86/kernel/traps.c:285 exc_invalid_op+0x1a/0x50 arch/x86/kernel/traps.c:309 asm_exc_invalid_op+0x1a/0x20 arch/x86/include/asm/idtentry.h:621 RIP: 0010:enqueue_dl_entity+0x1630/0x1d60 kernel/sched/deadline.c:1995 Code: df 0f b6 04 08 84 c0 0f 85 cf 02 00 00 8b 75 00 48 89 df 4c 89 ea 48 83 c4 58 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d1 1f ff ff 90 <0f> 0b 90 e9 09 ea ff ff 90 0f 0b 90 e9 c4 fb ff ff 90 0f 0b 90 e9 RSP: 0000:ffffc900038be970 EFLAGS: 00010017 RAX: dffffc0000000000 RBX: ffff8880b873f480 RCX: 1ffff110170e7e8d RDX: ffffffff816852c0 RSI: 0000000000000001 RDI: ffff8880b873f468 RBP: 0000000000000001 R08: ffff88802077bca7 R09: 0000000000000000 R10: ffff88802077bc90 R11: ffffed10040ef795 R12: ffff8880b873f468 R13: ffff8880b873f468 R14: ffff8880b873f4bc R15: ffff8880b873f540 dl_server_start+0xc9/0x240 kernel/sched/deadline.c:1650 enqueue_task_fair+0xb5c/0xea0 kernel/sched/fair.c:7043 enqueue_task+0x7a/0x340 kernel/sched/core.c:2020 activate_task+0x61/0xc0 kernel/sched/core.c:2067 attach_task+0xee/0x190 kernel/sched/fair.c:9634 attach_tasks kernel/sched/fair.c:9669 [inline] sched_balance_rq+0x664a/0x8620 kernel/sched/fair.c:11746 sched_balance_newidle+0x6ba/0xfd0 kernel/sched/fair.c:12788 pick_next_task_fair+0x40/0xc90 kernel/sched/fair.c:8936 __pick_next_task+0xdd/0x400 kernel/sched/core.c:5968 pick_next_task kernel/sched/core.c:6053 [inline] __schedule+0x7c8/0x4bd0 kernel/sched/core.c:6644 __schedule_loop kernel/sched/core.c:6767 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6782 schedule_timeout+0x1be/0x310 kernel/time/timer.c:2615 schedule_timeout_uninterruptible kernel/time/timer.c:2649 [inline] msleep+0x9b/0xe0 kernel/time/timer.c:2770 hub_port_debounce+0x317/0x590 drivers/usb/core/hub.c:4679 hub_port_debounce_be_stable drivers/usb/core/hub.h:183 [inline] hub_port_connect drivers/usb/core/hub.c:5373 [inline] hub_port_connect_change drivers/usb/core/hub.c:5661 [inline] port_event drivers/usb/core/hub.c:5821 [inline] hub_event+0x1f4f/0x5150 drivers/usb/core/hub.c:5903 process_one_work kernel/workqueue.c:3229 [inline] process_scheduled_works+0xa63/0x1850 kernel/workqueue.c:3310 worker_thread+0x870/0xd30 kernel/workqueue.c:3391 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 WARNING: CPU: 1 PID: 15421 at kernel/sched/deadline.c:1995 enqueue_dl_entity+0x1630/0x1d60 kernel/sched/deadline.c:1995 Modules linked in: CPU: 1 UID: 0 PID: 15421 Comm: kworker/1:6 Not tainted 6.12.0-rc4-syzkaller-00161-gae90f6a6170d #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 Workqueue: usb_hub_wq hub_event RIP: 0010:enqueue_dl_entity+0x1630/0x1d60 kernel/sched/deadline.c:1995 Code: df 0f b6 04 08 84 c0 0f 85 cf 02 00 00 8b 75 00 48 89 df 4c 89 ea 48 83 c4 58 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d1 1f ff ff 90 <0f> 0b 90 e9 09 ea ff ff 90 0f 0b 90 e9 c4 fb ff ff 90 0f 0b 90 e9 RSP: 0000:ffffc900038be970 EFLAGS: 00010017 RAX: dffffc0000000000 RBX: ffff8880b873f480 RCX: 1ffff110170e7e8d RDX: ffffffff816852c0 RSI: 0000000000000001 RDI: ffff8880b873f468 RBP: 0000000000000001 R08: ffff88802077bca7 R09: 0000000000000000 R10: ffff88802077bc90 R11: ffffed10040ef795 R12: ffff8880b873f468 R13: ffff8880b873f468 R14: ffff8880b873f4bc R15: ffff8880b873f540 FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000002033a018 CR3: 000000000e734000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: dl_server_start+0xc9/0x240 kernel/sched/deadline.c:1650 enqueue_task_fair+0xb5c/0xea0 kernel/sched/fair.c:7043 enqueue_task+0x7a/0x340 kernel/sched/core.c:2020 activate_task+0x61/0xc0 kernel/sched/core.c:2067 attach_task+0xee/0x190 kernel/sched/fair.c:9634 attach_tasks kernel/sched/fair.c:9669 [inline] sched_balance_rq+0x664a/0x8620 kernel/sched/fair.c:11746 sched_balance_newidle+0x6ba/0xfd0 kernel/sched/fair.c:12788 pick_next_task_fair+0x40/0xc90 kernel/sched/fair.c:8936 __pick_next_task+0xdd/0x400 kernel/sched/core.c:5968 pick_next_task kernel/sched/core.c:6053 [inline] __schedule+0x7c8/0x4bd0 kernel/sched/core.c:6644 __schedule_loop kernel/sched/core.c:6767 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6782 schedule_timeout+0x1be/0x310 kernel/time/timer.c:2615 schedule_timeout_uninterruptible kernel/time/timer.c:2649 [inline] msleep+0x9b/0xe0 kernel/time/timer.c:2770 hub_port_debounce+0x317/0x590 drivers/usb/core/hub.c:4679 hub_port_debounce_be_stable drivers/usb/core/hub.h:183 [inline] hub_port_connect drivers/usb/core/hub.c:5373 [inline] hub_port_connect_change drivers/usb/core/hub.c:5661 [inline] port_event drivers/usb/core/hub.c:5821 [inline] hub_event+0x1f4f/0x5150 drivers/usb/core/hub.c:5903 process_one_work kernel/workqueue.c:3229 [inline] process_scheduled_works+0xa63/0x1850 kernel/workqueue.c:3310 worker_thread+0x870/0xd30 kernel/workqueue.c:3391 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244