============================================
WARNING: possible recursive locking detected
5.16.0-rc7-syzkaller #0 Not tainted
--------------------------------------------
syz-executor738/3599 is trying to acquire lock:
ffff88814a9a7130 (&runtime->sleep){....}-{2:2}, at: io_poll_double_wake+0x2bf/0x690 fs/io_uring.c:5467
but task is already holding lock:
ffff888015deb130 (&runtime->sleep){....}-{2:2}, at: __wake_up_common_lock kernel/sched/wait.c:137 [inline]
ffff888015deb130 (&runtime->sleep){....}-{2:2}, at: __wake_up+0xf8/0x1c0 kernel/sched/wait.c:157
other info that might help us debug this:
Possible unsafe locking scenario:
CPU0
----
lock(&runtime->sleep);
lock(&runtime->sleep);
*** DEADLOCK ***
May be due to missing lock nesting notation
3 locks held by syz-executor738/3599:
#0: ffff888015deb440 (&runtime->oss.params_lock){+.+.}-{3:3}, at: snd_pcm_oss_change_params sound/core/oss/pcm_oss.c:1101 [inline]
#0: ffff888015deb440 (&runtime->oss.params_lock){+.+.}-{3:3}, at: snd_pcm_oss_get_active_substream+0x19e/0x280 sound/core/oss/pcm_oss.c:1121
#1: ffff888022eb3110 (&group->lock){....}-{2:2}, at: spin_lock_irq include/linux/spinlock.h:374 [inline]
#1: ffff888022eb3110 (&group->lock){....}-{2:2}, at: snd_pcm_group_lock_irq sound/core/pcm_native.c:97 [inline]
#1: ffff888022eb3110 (&group->lock){....}-{2:2}, at: snd_pcm_stream_lock_irq sound/core/pcm_native.c:136 [inline]
#1: ffff888022eb3110 (&group->lock){....}-{2:2}, at: snd_pcm_drop+0x1d0/0x290 sound/core/pcm_native.c:2150
#2: ffff888015deb130 (&runtime->sleep){....}-{2:2}, at: __wake_up_common_lock kernel/sched/wait.c:137 [inline]
#2: ffff888015deb130 (&runtime->sleep){....}-{2:2}, at: __wake_up+0xf8/0x1c0 kernel/sched/wait.c:157
stack backtrace:
CPU: 1 PID: 3599 Comm: syz-executor738 Not tainted 5.16.0-rc7-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
<TASK>
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0x1dc/0x2d8 lib/dump_stack.c:106
print_deadlock_bug kernel/locking/lockdep.c:2956 [inline]
check_deadlock kernel/locking/lockdep.c:2999 [inline]
validate_chain+0x5984/0x8240 kernel/locking/lockdep.c:3788
__lock_acquire+0x1382/0x2b00 kernel/locking/lockdep.c:5027
lock_acquire+0x19f/0x4d0 kernel/locking/lockdep.c:5637
__raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline]
_raw_spin_lock_irqsave+0xd1/0x120 kernel/locking/spinlock.c:162
io_poll_double_wake+0x2bf/0x690 fs/io_uring.c:5467
__wake_up_common+0x2aa/0x4e0 kernel/sched/wait.c:108
__wake_up_common_lock kernel/sched/wait.c:138 [inline]
__wake_up+0x115/0x1c0 kernel/sched/wait.c:157
snd_pcm_post_stop sound/core/pcm_native.c:1455 [inline]
snd_pcm_action_single sound/core/pcm_native.c:1229 [inline]
snd_pcm_action sound/core/pcm_native.c:1310 [inline]
snd_pcm_stop+0x3d9/0x4c0 sound/core/pcm_native.c:1476
snd_pcm_drop+0x16d/0x290 sound/core/pcm_native.c:2155
snd_pcm_oss_change_params_locked+0x243e/0x4460 sound/core/oss/pcm_oss.c:958
snd_pcm_oss_change_params sound/core/oss/pcm_oss.c:1104 [inline]
snd_pcm_oss_get_active_substream+0x1f3/0x280 sound/core/oss/pcm_oss.c:1121
snd_pcm_oss_get_rate sound/core/oss/pcm_oss.c:1778 [inline]
snd_pcm_oss_set_rate sound/core/oss/pcm_oss.c:1770 [inline]
snd_pcm_oss_ioctl+0x1eec/0x3a20 sound/core/oss/pcm_oss.c:2632
vfs_ioctl fs/ioctl.c:51 [inline]
__do_sys_ioctl fs/ioctl.c:874 [inline]
__se_sys_ioctl+0xfb/0x170 fs/ioctl.c:860
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x44/0xd0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7f6f0e966229
Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffea77fb098 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f6f0e966229
RDX: 0000000020000240 RSI: 00000000c0045002 RDI: 0000000000000004
RBP: 00007f6f0e92a210 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6f0e92a2a0
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000