block nbd5: Receive control failed (result -22) block nbd5: shutting down sockets ============================================ WARNING: possible recursive locking detected 4.14.150 #0 Not tainted -------------------------------------------- kobject: 'loop2' (ffff8880a4a0e960): kobject_uevent_env kworker/u5:1/9031 is trying to acquire lock: ("knbd%d-recv"nbd->index){+.+.}, at: [] flush_workqueue+0xda/0x1400 kernel/workqueue.c:2613 but task is already holding lock: kobject: 'loop2' (ffff8880a4a0e960): fill_kobj_path: path = '/devices/virtual/block/loop2' ("knbd%d-recv"nbd->index){+.+.}, at: [] work_static include/linux/workqueue.h:199 [inline] ("knbd%d-recv"nbd->index){+.+.}, at: [] set_work_data kernel/workqueue.c:619 [inline] ("knbd%d-recv"nbd->index){+.+.}, at: [] set_work_pool_and_clear_pending kernel/workqueue.c:646 [inline] ("knbd%d-recv"nbd->index){+.+.}, at: [] process_one_work+0x76e/0x1600 kernel/workqueue.c:2085 other info that might help us debug this: Possible unsafe locking scenario: CPU0 ---- lock("knbd%d-recv"nbd->index); lock("knbd%d-recv"nbd->index); *** DEADLOCK *** May be due to missing lock nesting notation 3 locks held by kworker/u5:1/9031: #0: ("knbd%d-recv"nbd->index){+.+.}, at: [] work_static include/linux/workqueue.h:199 [inline] #0: ("knbd%d-recv"nbd->index){+.+.}, at: [] set_work_data kernel/workqueue.c:619 [inline] #0: ("knbd%d-recv"nbd->index){+.+.}, at: [] set_work_pool_and_clear_pending kernel/workqueue.c:646 [inline] #0: ("knbd%d-recv"nbd->index){+.+.}, at: [] process_one_work+0x76e/0x1600 kernel/workqueue.c:2085 #1: ((&args->work)){+.+.}, at: [] process_one_work+0x7ab/0x1600 kernel/workqueue.c:2089 #2: (&nbd->config_lock){+.+.}, at: [] refcount_dec_and_mutex_lock lib/refcount.c:312 [inline] #2: (&nbd->config_lock){+.+.}, at: [] refcount_dec_and_mutex_lock+0x49/0x6c lib/refcount.c:307 stack backtrace: CPU: 0 PID: 9031 Comm: kworker/u5:1 Not tainted 4.14.150 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: knbd5-recv recv_work Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x138/0x197 lib/dump_stack.c:53 print_deadlock_bug kernel/locking/lockdep.c:1796 [inline] check_deadlock kernel/locking/lockdep.c:1843 [inline] validate_chain kernel/locking/lockdep.c:2444 [inline] __lock_acquire.cold+0x2bf/0x8dc kernel/locking/lockdep.c:3487 lock_acquire+0x16f/0x430 kernel/locking/lockdep.c:3994 flush_workqueue+0x109/0x1400 kernel/workqueue.c:2616 drain_workqueue+0x177/0x3e0 kernel/workqueue.c:2781 destroy_workqueue+0x21/0x620 kernel/workqueue.c:4088 nbd_config_put+0x43c/0x7a0 drivers/block/nbd.c:1124 recv_work+0x18d/0x1f0 drivers/block/nbd.c:724 process_one_work+0x863/0x1600 kernel/workqueue.c:2114 worker_thread+0x5d9/0x1050 kernel/workqueue.c:2248 kthread+0x319/0x430 kernel/kthread.c:232 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:404 kobject: 'loop3' (ffff8880a4a4a9e0): kobject_uevent_env kobject: 'loop3' (ffff8880a4a4a9e0): fill_kobj_path: path = '/devices/virtual/block/loop3' kobject: 'loop4' (ffff8880a4a952e0): kobject_uevent_env kobject: 'loop4' (ffff8880a4a952e0): fill_kobj_path: path = '/devices/virtual/block/loop4' ptrace attach of "/root/syz-executor.2"[7090] was attempted by " °ÿ àÿ 0 p €  ÿ  p \x0d  \x09 !    \x0a    /dev/media# ÿÿÿ þÿÿÿÿÿÿÿ \x0c   ÿ\x0d é\x0a ”5w  \x09 @ kobject: 'loop2' (ffff8880a4a0e960): kobject_uevent_env ptrace attach of "/root/syz-executor.2"[7090] was attempted by " °ÿ àÿ 0 p €  ÿ  p \x0d  \x09 !    \x0a    /dev/media# ÿÿÿ þÿÿÿÿÿÿÿ \x0c   ÿ\x0d é\x0a ”5w  \x09  Ì¿}Ý @ kobject: 'loop2' (ffff8880a4a0e960): fill_kobj_path: path = '/devices/virtual/block/loop2' kobject: 'brif' (ffff8880a1852e80): kobject_cleanup, parent ffff888050555670 kobject: 'brif' (ffff8880a1852e80): auto cleanup kobject_del kobject: 'brif' (ffff8880a1852e80): calling ktype release kobject: (ffff8880a1852e80): dynamic_kobj_release kobject: 'brif': free name kobject: 'batman_adv' (ffff8880a1852800): kobject_uevent_env kobject: 'batman_adv' (ffff8880a1852800): kobject_uevent_env: filter function caused the event to drop! kobject: 'batman_adv' (ffff8880a1852800): kobject_cleanup, parent (null) kobject: 'batman_adv' (ffff8880a1852800): calling ktype release kobject: (ffff8880a1852800): dynamic_kobj_release kobject: 'batman_adv': free name kobject: 'hwsim6' (ffff88805bb8eed0): kobject_add_internal: parent: 'mac80211_hwsim', set: 'devices' kobject: 'hwsim6' (ffff88805bb8eed0): kobject_uevent_env kobject: 'hwsim6' (ffff88805bb8eed0): fill_kobj_path: path = '/devices/virtual/mac80211_hwsim/hwsim6' kobject: 'rx-0' (ffff8880a40bba90): kobject_cleanup, parent ffff8880a8ff8648 kobject: 'rx-0' (ffff8880a40bba90): auto cleanup 'remove' event kobject: 'hwsim6' (ffff88805bb8eed0): kobject_uevent_env kobject: 'rx-0' (ffff8880a40bba90): kobject_uevent_env kobject: 'hwsim6' (ffff88805bb8eed0): fill_kobj_path: path = '/devices/virtual/mac80211_hwsim/hwsim6' kobject: 'rx-0' (ffff8880a40bba90): fill_kobj_path: path = '/devices/virtual/net/þ€/queues/rx-0' kobject: 'rx-0' (ffff8880a40bba90): auto cleanup kobject_del kobject: 'rx-0' (ffff8880a40bba90): calling ktype release kobject: 'rx-0': free name kobject: 'tx-0' (ffff888056e31558): kobject_cleanup, parent ffff8880a8ff8648 kobject: 'tx-0' (ffff888056e31558): auto cleanup 'remove' event kobject: 'tx-0' (ffff888056e31558): kobject_uevent_env kobject: 'tx-0' (ffff888056e31558): fill_kobj_path: path = '/devices/virtual/net/þ€/queues/tx-0' kobject: 'tx-0' (ffff888056e31558): auto cleanup kobject_del kobject: 'tx-0' (ffff888056e31558): calling ktype release kobject: 'tx-0': free name kobject: 'queues' (ffff8880a8ff8648): kobject_cleanup, parent (null) kobject: 'queues' (ffff8880a8ff8648): calling ktype release kobject: 'queues' (ffff8880a8ff8648): kset_release kobject: 'queues': free name kobject: 'þ€' (ffff888050555670): kobject_uevent_env kobject: 'þ€' (ffff888050555670): fill_kobj_path: path = '/devices/virtual/net/þ€' kobject: 'ieee80211' (ffff8880a80cf580): kobject_add_internal: parent: 'hwsim6', set: '(null)' kobject: 'loop3' (ffff8880a4a4a9e0): kobject_uevent_env kobject: 'loop3' (ffff8880a4a4a9e0): fill_kobj_path: path = '/devices/virtual/block/loop3' kobject: 'loop3' (ffff8880a4a4a9e0): kobject_uevent_env kobject: 'phy6' (ffff888059fc8e70): kobject_add_internal: parent: 'ieee80211', set: 'devices' kobject: 'loop3' (ffff8880a4a4a9e0): fill_kobj_path: path = '/devices/virtual/block/loop3' kobject: 'kvm' (ffff8880a6ee62d0): kobject_uevent_env kobject: 'loop1' (ffff8880a49be6e0): kobject_uevent_env kobject: 'kvm' (ffff8880a6ee62d0): fill_kobj_path: path = '/devices/virtual/misc/kvm' kobject: 'phy6' (ffff888059fc8e70): kobject_uevent_env kobject: 'loop1' (ffff8880a49be6e0): fill_kobj_path: path = '/devices/virtual/block/loop1' loop3: p1 < > p4 kobject: 'kvm' (ffff8880a6ee62d0): kobject_uevent_env kobject: 'phy6' (ffff888059fc8e70): fill_kobj_path: path = '/devices/virtual/mac80211_hwsim/hwsim6/ieee80211/phy6' loop3: partition table partially beyond EOD, kobject: 'kvm' (ffff8880a6ee62d0): fill_kobj_path: path = '/devices/virtual/misc/kvm' kobject: 'rfkill8' (ffff8880597ba368): kobject_add_internal: parent: 'phy6', set: 'devices' kobject: 'þ€' (ffff888050555670): kobject_cleanup, parent (null) kobject: 'rfkill8' (ffff8880597ba368): kobject_uevent_env kobject: 'þ€' (ffff888050555670): calling ktype release truncated kobject: 'þ€': free name kobject: 'rfkill8' (ffff8880597ba368): fill_kobj_path: path = '/devices/virtual/mac80211_hwsim/hwsim6/ieee80211/phy6/rfkill8' kobject: 'loop2' (ffff8880a4a0e960): kobject_uevent_env kobject: 'kvm' (ffff8880a6ee62d0): kobject_uevent_env kobject: 'loop2' (ffff8880a4a0e960): fill_kobj_path: path = '/devices/virtual/block/loop2' kobject: 'loop3' (ffff8880a4a4a9e0): kobject_uevent_env kobject: 'kvm' (ffff8880a6ee62d0): fill_kobj_path: path = '/devices/virtual/misc/kvm' kobject: 'loop0' (ffff8880599c6160): kobject_uevent_env ieee80211 phy6: Selected rate control algorithm 'minstrel_ht' kobject: 'loop3' (ffff8880a4a4a9e0): fill_kobj_path: path = '/devices/virtual/block/loop3' kobject: 'net' (ffff8880aa95a200): kobject_add_internal: parent: 'hwsim6', set: '(null)' kobject: 'loop0' (ffff8880599c6160): fill_kobj_path: path = '/devices/virtual/block/loop0' kobject: 'kvm' (ffff8880a6ee62d0): kobject_uevent_env kobject: 'wlan0' (ffff888059a05270): kobject_add_internal: parent: 'net', set: 'devices' kobject: 'kvm' (ffff8880a6ee62d0): fill_kobj_path: path = '/devices/virtual/misc/kvm' kobject: 'wlan0' (ffff888059a05270): kobject_uevent_env loop3: p1 size 2 extends beyond EOD, kobject: 'wlan0' (ffff888059a05270): fill_kobj_path: path = '/devices/virtual/mac80211_hwsim/hwsim6/net/wlan0' truncated kobject: 'queues' (ffff88809eb48c48): kobject_add_internal: parent: 'wlan0', set: '' kobject: 'queues' (ffff88809eb48c48): kobject_uevent_env kobject: 'loop3p1' (ffff88805186c058): kobject_add_internal: parent: 'loop3', set: 'devices' kobject: 'queues' (ffff88809eb48c48): kobject_uevent_env: filter function caused the event to drop! kobject: 'loop1' (ffff8880a49be6e0): kobject_uevent_env kobject: 'loop1' (ffff8880a49be6e0): fill_kobj_path: path = '/devices/virtual/block/loop1' kobject: 'rx-0' (ffff8880a89b0f10): kobject_add_internal: parent: 'queues', set: 'queues' kobject: 'loop3p1' (ffff88805186c058): kobject_uevent_env kobject: 'rx-0' (ffff8880a89b0f10): kobject_uevent_env kobject: 'rx-0' (ffff8880a89b0f10): fill_kobj_path: path = '/devices/virtual/mac80211_hwsim/hwsim6/net/wlan0/queues/rx-0' kobject: 'loop3p1' (ffff88805186c058): kobject_uevent_env: uevent_suppress caused the event to drop! kobject: 'tx-0' (ffff8880511d5198): kobject_add_internal: parent: 'queues', set: 'queues' kobject: 'tx-0' (ffff8880511d5198): kobject_uevent_env kobject: 'holders' (ffff888096661000): kobject_add_internal: parent: 'loop3p1', set: '' kobject: 'tx-0' (ffff8880511d5198): fill_kobj_path: path = '/devices/virtual/mac80211_hwsim/hwsim6/net/wlan0/queues/tx-0' kobject: 'tx-1' (ffff8880511d5318): kobject_add_internal: parent: 'queues', set: 'queues' kobject: 'loop3p1' (ffff88805186c058): kobject_uevent_env kobject: 'tx-1' (ffff8880511d5318): kobject_uevent_env kobject: 'loop3p1' (ffff88805186c058): fill_kobj_path: path = '/devices/virtual/block/loop3/loop3p1' kobject: 'tx-1' (ffff8880511d5318): fill_kobj_path: path = '/devices/virtual/mac80211_hwsim/hwsim6/net/wlan0/queues/tx-1' loop3: p4 start 1854537728 is beyond EOD, truncated kobject: 'tx-2' (ffff8880511d5498): kobject_add_internal: parent: 'queues', set: 'queues' kobject: 'tx-2' (ffff8880511d5498): kobject_uevent_env kobject: 'tx-2' (ffff8880511d5498): fill_kobj_path: path = '/devices/virtual/mac80211_hwsim/hwsim6/net/wlan0/queues/tx-2' kobject: 'tx-3' (ffff8880511d5618): kobject_add_internal: parent: 'queues', set: 'queues' kobject: 'tx-3' (ffff8880511d5618): kobject_uevent_env kobject: 'tx-3' (ffff8880511d5618): fill_kobj_path: path = '/devices/virtual/mac80211_hwsim/hwsim6/net/wlan0/queues/tx-3' kobject: 'loop3' (ffff8880a4a4a9e0): kobject_uevent_env kobject: 'batman_adv' (ffff88809124f300): kobject_add_internal: parent: 'wlan0', set: '' kobject: 'loop3' (ffff8880a4a4a9e0): fill_kobj_path: path = '/devices/virtual/block/loop3' ieee80211 phy6: hwaddr 02:00:00:00:06:00 registered kobject: 'holders' (ffff888096661000): kobject_cleanup, parent ffff88805186c058 kobject: 'holders' (ffff888096661000): auto cleanup kobject_del kobject: 'hwsim7' (ffff888052e0ed10): kobject_add_internal: parent: 'mac80211_hwsim', set: 'devices' kobject: 'holders' (ffff888096661000): calling ktype release kobject: 'hwsim7' (ffff888052e0ed10): kobject_uevent_env kobject: (ffff888096661000): dynamic_kobj_release kobject: 'holders': free name kobject: 'loop3p1' (ffff88805186c058): kobject_uevent_env kobject: 'hwsim7' (ffff888052e0ed10): fill_kobj_path: path = '/devices/virtual/mac80211_hwsim/hwsim7' kobject: 'loop3p1' (ffff88805186c058): fill_kobj_path: path = '/devices/virtual/block/loop3/loop3p1' kobject: 'loop1' (ffff8880a49be6e0): kobject_uevent_env kobject: 'loop1' (ffff8880a49be6e0): fill_kobj_path: path = '/devices/virtual/block/loop1' kobject: 'hwsim7' (ffff888052e0ed10): kobject_uevent_env kobject: 'hwsim7' (ffff888052e0ed10): fill_kobj_path: path = '/devices/virtual/mac80211_hwsim/hwsim7' kobject: 'loop3p1' (ffff88805186c058): kobject_cleanup, parent (null) kobject: 'loop3p1' (ffff88805186c058): calling ktype release kobject: 'loop3p1': free name kobject: 'ieee80211' (ffff888092cc5300): kobject_add_internal: parent: 'hwsim7', set: '(null)' kobject: 'phy7' (ffff88805a3d8e30): kobject_add_internal: parent: 'ieee80211', set: 'devices' kobject: 'phy7' (ffff88805a3d8e30): kobject_uevent_env kobject: 'phy7' (ffff88805a3d8e30): fill_kobj_path: path = '/devices/virtual/mac80211_hwsim/hwsim7/ieee80211/phy7' kobject: 'rfkill9' (ffff8880a5692a28): kobject_add_internal: parent: 'phy7', set: 'devices' kobject: 'loop2' (ffff8880a4a0e960): kobject_uevent_env kobject: 'loop2' (ffff8880a4a0e960): fill_kobj_path: path = '/devices/virtual/block/loop2' kobject: 'rfkill9' (ffff8880a5692a28): kobject_uevent_env kobject: 'rfkill9' (ffff8880a5692a28): fill_kobj_path: path = '/devices/virtual/mac80211_hwsim/hwsim7/ieee80211/phy7/rfkill9' ieee80211 phy7: Selected rate control algorithm 'minstrel_ht' kobject: 'net' (ffff8880a9900400): kobject_add_internal: parent: 'hwsim7', set: '(null)' kobject: 'wlan1' (ffff888051d5d0b0): kobject_add_internal: parent: 'net', set: 'devices' kobject: 'wlan1' (ffff888051d5d0b0): kobject_uevent_env kobject: 'wlan1' (ffff888051d5d0b0): fill_kobj_path: path = '/devices/virtual/mac80211_hwsim/hwsim7/net/wlan1' kobject: 'loop0' (ffff8880599c6160): kobject_uevent_env kobject: 'queues' (ffff888091f24048): kobject_add_internal: parent: 'wlan1', set: '' kobject: 'loop0' (ffff8880599c6160): fill_kobj_path: path = '/devices/virtual/block/loop0' kobject: 'queues' (ffff888091f24048): kobject_uevent_env kobject: 'queues' (ffff888091f24048): kobject_uevent_env: filter function caused the event to drop! kobject: 'rx-0' (ffff88809f428910): kobject_add_internal: parent: 'queues', set: 'queues' kobject: 'rx-0' (ffff88809f428910): kobject_uevent_env kobject: 'rx-0' (ffff88809f428910): fill_kobj_path: path = '/devices/virtual/mac80211_hwsim/hwsim7/net/wlan1/queues/rx-0' kobject: 'tx-0' (ffff88808ceba218): kobject_add_internal: parent: 'queues', set: 'queues' kobject: 'tx-0' (ffff88808ceba218): kobject_uevent_env kobject: 'tx-0' (ffff88808ceba218): fill_kobj_path: path = '/devices/virtual/mac80211_hwsim/hwsim7/net/wlan1/queues/tx-0' kobject: 'tx-1' (ffff88808ceba398): kobject_add_internal: parent: 'queues', set: 'queues' kobject: 'tx-1' (ffff88808ceba398): kobject_uevent_env kobject: 'tx-1' (ffff88808ceba398): fill_kobj_path: path = '/devices/virtual/mac80211_hwsim/hwsim7/net/wlan1/queues/tx-1' kobject: 'tx-2' (ffff88808ceba518): kobject_add_internal: parent: 'queues', set: 'queues' kobject: 'tx-2' (ffff88808ceba518): kobject_uevent_env kobject: 'tx-2' (ffff88808ceba518): fill_kobj_path: path = '/devices/virtual/mac80211_hwsim/hwsim7/net/wlan1/queues/tx-2' kobject: 'tx-3' (ffff88808ceba698): kobject_add_internal: parent: 'queues', set: 'queues' kobject: 'tx-3' (ffff88808ceba698): kobject_uevent_env kobject: 'tx-3' (ffff88808ceba698): fill_kobj_path: path = '/devices/virtual/mac80211_hwsim/hwsim7/net/wlan1/queues/tx-3' kobject: 'batman_adv' (ffff88808d904300): kobject_add_internal: parent: 'wlan1', set: '' ieee80211 phy7: hwaddr 02:00:00:00:07:00 registered kobject: 'loop4' (ffff8880a4a952e0): kobject_uevent_env kobject: 'loop4' (ffff8880a4a952e0): fill_kobj_path: path = '/devices/virtual/block/loop4'