ci starts bisection 2025-08-31 01:22:40.890287317 +0000 UTC m=+90640.184794008 bisecting cause commit starting from 788bc43d8330511af433bf282021a8fecb6b9009 building syzkaller on 807a3b61ca22f8988561c180eb47268ea6e244db ensuring issue is reproducible on original commit 788bc43d8330511af433bf282021a8fecb6b9009 testing commit 788bc43d8330511af433bf282021a8fecb6b9009 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 128199339c54ed082c531ae0860c86435281e242bab64d0d8c2610375f0e052b all runs: crashed: possible deadlock in inet_shutdown representative crash: possible deadlock in inet_shutdown, types: [LOCKDEP] check whether we can drop unnecessary instrumentation disabling configs for [bug_or_warning kasan atomic_sleep hang memleak ubsan], they are not needed testing commit 788bc43d8330511af433bf282021a8fecb6b9009 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: d21dd501afa01dad213c4531d3216ecf28d1a4dd4582d33d9e547b55cd104be9 run #0: crashed: possible deadlock in inet_shutdown run #1: crashed: possible deadlock in inet_shutdown run #2: crashed: possible deadlock in inet_shutdown run #3: crashed: possible deadlock in inet_shutdown run #4: crashed: possible deadlock in inet_shutdown run #5: crashed: possible deadlock in inet_shutdown run #6: crashed: possible deadlock in inet_shutdown run #7: crashed: possible deadlock in pcpu_alloc_noprof run #8: crashed: possible deadlock in inet_shutdown run #9: crashed: possible deadlock in inet_shutdown representative crash: possible deadlock in inet_shutdown, types: [LOCKDEP] the bug reproduces without the instrumentation disabling configs for [ubsan bug_or_warning kasan atomic_sleep hang memleak], they are not needed kconfig minimization: base=4099 full=8509 leaves diff=2193 split chunks (needed=false): <2193> split chunk #0 of len 2193 into 5 parts testing without sub-chunk 1/5 disabling configs for [bug_or_warning kasan atomic_sleep hang memleak ubsan], they are not needed testing commit 788bc43d8330511af433bf282021a8fecb6b9009 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 89094f8f7787d8e421768af10a3d8bac81b25eca6b9bcf8ac34e94a58df9b9bf all runs: OK false negative chance: 0.000 testing without sub-chunk 2/5 disabling configs for [hang memleak ubsan bug_or_warning kasan atomic_sleep], they are not needed testing commit 788bc43d8330511af433bf282021a8fecb6b9009 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: d5d4cfd9d77b77d72ec0e6f53d36037a803504b25b94c74721c7b46758905ae5 run #0: crashed: possible deadlock in inet_shutdown run #1: crashed: possible deadlock in inet_shutdown run #2: crashed: possible deadlock in pcpu_alloc_noprof run #3: crashed: possible deadlock in inet_shutdown run #4: crashed: possible deadlock in inet_shutdown run #5: crashed: possible deadlock in inet_shutdown run #6: crashed: possible deadlock in inet_shutdown run #7: crashed: possible deadlock in inet_shutdown run #8: crashed: possible deadlock in inet_shutdown run #9: crashed: possible deadlock in inet_shutdown representative crash: possible deadlock in inet_shutdown, types: [LOCKDEP] the chunk can be dropped testing without sub-chunk 3/5 disabling configs for [bug_or_warning kasan atomic_sleep hang memleak ubsan], they are not needed testing commit 788bc43d8330511af433bf282021a8fecb6b9009 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 30570eb574e531df56ee553d3170acbf0d2ce28d6e634ab5470b67bc78b81b3e all runs: crashed: possible deadlock in inet_shutdown representative crash: possible deadlock in inet_shutdown, types: [LOCKDEP] the chunk can be dropped testing without sub-chunk 4/5 disabling configs for [kasan atomic_sleep hang memleak ubsan bug_or_warning], they are not needed testing commit 788bc43d8330511af433bf282021a8fecb6b9009 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 27bf1f7f8fefdc2580edce797739b32f60591050b1d72a55938fda846fc39456 all runs: crashed: possible deadlock in inet_shutdown representative crash: possible deadlock in inet_shutdown, types: [LOCKDEP] the chunk can be dropped testing without sub-chunk 5/5 disabling configs for [atomic_sleep hang memleak ubsan bug_or_warning kasan], they are not needed testing commit 788bc43d8330511af433bf282021a8fecb6b9009 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: e6120a538932d061dfce606d535022709d76c9f902777258c13a1a31cba316c1 all runs: crashed: possible deadlock in inet_shutdown representative crash: possible deadlock in inet_shutdown, types: [LOCKDEP] the chunk can be dropped minimized to 439 configs; suspects: [6LOWPAN 6LOWPAN_GHC_EXT_HDR_DEST 6LOWPAN_GHC_EXT_HDR_FRAG 6LOWPAN_GHC_EXT_HDR_HOP 6LOWPAN_GHC_EXT_HDR_ROUTE 6LOWPAN_GHC_ICMPV6 6LOWPAN_GHC_UDP 6LOWPAN_NHC 6LOWPAN_NHC_DEST 6LOWPAN_NHC_FRAGMENT 6LOWPAN_NHC_HOP 6LOWPAN_NHC_IPV6 6LOWPAN_NHC_MOBILITY 6LOWPAN_NHC_ROUTING 6LOWPAN_NHC_UDP 6PACK 842_COMPRESS 842_DECOMPRESS 9P_FSCACHE 9P_FS_POSIX_ACL 9P_FS_SECURITY ACORN_PARTITION ACORN_PARTITION_ADFS ACORN_PARTITION_CUMANA ACORN_PARTITION_EESOX ACORN_PARTITION_ICS ACORN_PARTITION_POWERTEC ACORN_PARTITION_RISCIX ACPI_NFIT ACPI_NHLT ACPI_PLATFORM_PROFILE ADFS_FS AFFS_FS AFS_FS AFS_FSCACHE AF_KCM AF_RXRPC AF_RXRPC_IPV6 AIX_PARTITION AMD_SFH_HID AMIGA_PARTITION ANDROID_BINDERFS ANDROID_BINDER_IPC ANON_VMA_NAME APERTURE_HELPERS APPLE_MFI_FASTCHARGE AR5523 ARCH_ENABLE_THP_MIGRATION ARCH_HAS_CPU_ATTACK_VECTORS ARCH_HAS_USER_SHADOW_STACK ARCH_SUPPORTS_HUGETLBFS ARCH_SUPPORTS_HUGE_PFNMAP ARCH_SUPPORTS_PMD_PFNMAP ARCH_SUPPORTS_PUD_PFNMAP ARCH_WANT_PMD_MKWRITE ASM_MODVERSIONS ASUS_TF103C_DOCK ASYNC_CORE ASYNC_MEMCPY ASYNC_PQ ASYNC_RAID6_RECOV ASYNC_TX_DMA ASYNC_XOR ATARI_PARTITION ATA_GENERIC ATA_OVER_ETH ATH10K ATH10K_CE ATH10K_LEDS ATH10K_PCI ATH10K_USB ATH11K ATH6KL ATH6KL_USB ATH9K ATH9K_AHB ATH9K_BTCOEX_SUPPORT ATH9K_CHANNEL_CONTEXT ATH9K_COMMON ATH9K_COMMON_DEBUG ATH9K_COMMON_SPECTRAL ATH9K_DEBUGFS ATH9K_DYNACK ATH9K_HTC ATH9K_HTC_DEBUGFS ATH9K_HW ATH9K_PCI ATH9K_PCOEM ATH9K_RFKILL ATH_COMMON ATM ATM_BR2684 ATM_CLIP ATM_DRIVERS ATM_LANE ATM_MPOA ATM_TCP AUXILIARY_BUS AX25 AX25_DAMA_SLAVE AX88796B_PHY BAREUDP BATMAN_ADV BATMAN_ADV_BATMAN_V BATMAN_ADV_BLA BATMAN_ADV_DAT BATMAN_ADV_MCAST BATMAN_ADV_NC BCACHE BCACHEFS_DEBUG BCACHEFS_ERASURE_CODING BCACHEFS_FS BCACHEFS_POSIX_ACL BCACHEFS_QUOTA BCACHEFS_SIX_OPTIMISTIC_SPIN BCMA BCMA_HOST_PCI_POSSIBLE BEFS_FS BFQ_CGROUP_DEBUG BFQ_GROUP_IOSCHED BFS_FS BIG_KEYS BLK_CGROUP_PUNT_BIO BLK_CGROUP_RWSTAT BLK_DEV_BSGLIB BLK_DEV_INTEGRITY BLK_DEV_NBD BLK_DEV_NULL_BLK BLK_DEV_NULL_BLK_FAULT_INJECTION BLK_DEV_NVME BLK_DEV_PMEM BLK_DEV_RAM BLK_DEV_RNBD BLK_DEV_RNBD_CLIENT BLK_DEV_THROTTLING BLK_ICQ BLK_INLINE_ENCRYPTION BLK_INLINE_ENCRYPTION_FALLBACK BLK_WBT BLK_WBT_MQ BONDING BOOT_VESA_SUPPORT BPF_EVENTS BPF_JIT BPF_JIT_ALWAYS_ON BPF_JIT_DEFAULT_ON BPF_LSM BPF_PRELOAD BPF_PRELOAD_UMD BPF_SYSCALL BPQETHER BRIDGE BRIDGE_CFM BRIDGE_EBT_802_3 BRIDGE_EBT_AMONG BRIDGE_EBT_ARP BRIDGE_EBT_ARPREPLY BRIDGE_EBT_DNAT BRIDGE_EBT_IP BRIDGE_EBT_IP6 BRIDGE_EBT_LIMIT BRIDGE_EBT_LOG BRIDGE_EBT_MARK BRIDGE_EBT_MARK_T BRIDGE_EBT_NFLOG BRIDGE_EBT_PKTTYPE BRIDGE_EBT_REDIRECT BRIDGE_EBT_SNAT BRIDGE_EBT_STP BRIDGE_EBT_VLAN BRIDGE_IGMP_SNOOPING BRIDGE_MRP BRIDGE_NF_EBTABLES BRIDGE_VLAN_FILTERING BSD_DISKLABEL BSD_PROCESS_ACCT_V3 BT BTRFS_ASSERT BTRFS_FS BTRFS_FS_POSIX_ACL BTRFS_FS_REF_VERIFY BTT BT_6LOWPAN BT_ATH3K BT_BCM BT_BNEP BT_BNEP_MC_FILTER BT_BNEP_PROTO_FILTER BT_BREDR BT_HCIBCM203X BT_HCIBFUSB BT_HCIBPA10X BT_HCIBTUSB BT_HCIBTUSB_AUTOSUSPEND BT_HCIBTUSB_BCM BT_HCIBTUSB_MTK BT_HCIBTUSB_POLL_SYNC BT_HCIBTUSB_RTL BT_HCIUART BT_HCIUART_3WIRE BT_HCIUART_AG6XX BT_HCIUART_BCSP BT_HCIUART_H4 BT_HCIUART_LL BT_HCIUART_MRVL BT_HCIUART_QCA BT_HCIUART_SERDEV BT_HCIVHCI BT_INTEL BT_LE BT_LEDS BT_LE_L2CAP_ECRED BT_MRVL BT_MRVL_SDIO BT_MSFTEXT BT_MTK BT_MTKSDIO BT_MTKUART BT_QCA BT_RFCOMM BT_RFCOMM_TTY BT_RTL CACHEFILES CAIF CAIF_DEBUG CAIF_DRIVERS CAIF_NETDEV CAIF_TTY CAIF_USB CAIF_VIRTIO CAN CAN_8DEV_USB CAN_BCM CAN_CALC_BITTIMING CAN_DEV CAN_EMS_USB CAN_ESD_USB CAN_ETAS_ES58X CAN_F81604 CAN_GS_USB CAN_GW CAN_IFI_CANFD CAN_ISOTP CAN_J1939 CAN_KVASER_USB CAN_MCBA_USB CAN_NETLINK CAN_PEAK_USB CAN_RAW CAN_RX_OFFLOAD CAN_SLCAN CAN_UCAN CAN_VCAN CAN_VXCAN CARL9170 CARL9170_HWRNG CARL9170_LEDS CARL9170_WPC CEC_CORE CEPH_FS CEPH_FSCACHE CEPH_FS_POSIX_ACL CEPH_LIB CEPH_LIB_USE_DNS_RESOLVER CFG80211 CFG80211_CRDA_SUPPORT CFG80211_DEBUGFS CFG80211_DEFAULT_PS CFG80211_REQUIRE_SIGNED_REGDB CFG80211_USE_KERNEL_REGDB_KEYS CFG80211_WEXT CFS_BANDWIDTH CHARGER_ISP1704 CHR_DEV_ST CIFS CIFS_ALLOW_INSECURE_LEGACY CIFS_DEBUG CIFS_DFS_UPCALL CIFS_FSCACHE CIFS_POSIX CIFS_SMB_DIRECT CIFS_SWN_UPCALL CIFS_UPCALL CIFS_XATTR CLOSURES CLS_U32_MARK CLS_U32_PERF CMA CMA_SIZE_SEL_MAX CMDLINE_PARTITION COMEDI COMEDI_8254 COMEDI_8255 COMEDI_8255_PCI COMEDI_8255_SA COMEDI_ADL_PCI9118 COMEDI_ADQ12B COMEDI_AIO_AIO12_8 COMEDI_AIO_IIRO_16 COMEDI_AMPLC_DIO200 COMEDI_AMPLC_DIO200_ISA COMEDI_AMPLC_PC236 COMEDI_AMPLC_PC236_ISA COMEDI_AMPLC_PC263_ISA COMEDI_BOND COMEDI_C6XDIGIO COMEDI_DAC02 COMEDI_DAS08 COMEDI_DAS08_ISA COMEDI_DAS16M1 COMEDI_DAS1800 COMEDI_DAS6402 COMEDI_DAS800 COMEDI_DMM32AT COMEDI_DT2801 COMEDI_DT2811 COMEDI_DT2814 COMEDI_DT2815 COMEDI_DT2817 COMEDI_DT282X COMEDI_DT9812 COMEDI_FL512 COMEDI_ISADMA COMEDI_ISA_DRIVERS COMEDI_KCOMEDILIB COMEDI_MISC_DRIVERS COMEDI_MPC624 COMEDI_MULTIQ3 COMEDI_NI_ATMIO16D COMEDI_NI_AT_A2150 COMEDI_NI_AT_AO COMEDI_NI_DAQ_700_CS COMEDI_NI_LABPC COMEDI_NI_LABPC_CS COMEDI_NI_LABPC_ISA COMEDI_NI_LABPC_ISADMA COMEDI_NI_LABPC_PCI COMEDI_NI_USB6501 COMEDI_PARPORT COMEDI_PCI_DRIVERS COMEDI_PCL711 COMEDI_PCL724 COMEDI_PCL726 COMEDI_PCL730 COMEDI_PCL812 COMEDI_PCL816 COMEDI_PCL818 COMEDI_PCM3724 COMEDI_PCMAD COMEDI_PCMCIA_DRIVERS COMEDI_PCMDA12 COMEDI_PCMMIO COMEDI_PCMUIO COMEDI_RTI800 COMEDI_RTI802 COMEDI_S526 COMEDI_TEST COMEDI_USBDUX COMEDI_USBDUXFAST COMEDI_USBDUXSIGMA COMEDI_USB_DRIVERS COMEDI_VMK80XX COMPAT_NETLINK_MESSAGES COUNTER CRAMFS CRAMFS_BLOCKDEV CRAMFS_MTD CRC64 CRC64_ARCH CRC8 CRC_CCITT CRC_ITU_T CRC_T10DIF CRC_T10DIF_ARCH CRYPTO_842 CRYPTO_ADIANTUM CRYPTO_AEGIS128 CRYPTO_AEGIS128_AESNI_SSE2 CRYPTO_AES_NI_INTEL CRYPTO_AES_TI CRYPTO_ANSI_CPRNG CRYPTO_ANUBIS CRYPTO_ARC4 CRYPTO_ARCH_HAVE_LIB_BLAKE2S CRYPTO_ARCH_HAVE_LIB_CHACHA CRYPTO_ARCH_HAVE_LIB_CURVE25519 CRYPTO_ARCH_HAVE_LIB_POLY1305 CRYPTO_ARIA CRYPTO_ARIA_AESNI_AVX_X86_64 CRYPTO_BLAKE2B CRYPTO_BLAKE2S_X86 CRYPTO_BLOWFISH CRYPTO_BLOWFISH_COMMON CRYPTO_BLOWFISH_X86_64 CRYPTO_CAMELLIA CRYPTO_CAMELLIA_AESNI_AVX2_X86_64 CRYPTO_CAMELLIA_AESNI_AVX_X86_64 CRYPTO_CAMELLIA_X86_64 CRYPTO_CAST5 CRYPTO_CAST5_AVX_X86_64 CRYPTO_CAST6 CRYPTO_CAST6_AVX_X86_64 CRYPTO_CAST_COMMON CRYPTO_CHACHA20 CRYPTO_CHACHA20POLY1305 CRYPTO_CHACHA20_X86_64 CRYPTO_CRC32C CRYPTO_CRYPTD CRYPTO_CTS CRYPTO_CURVE25519 CRYPTO_CURVE25519_X86 CRYPTO_DEFLATE CRYPTO_DES CRYPTO_DES3_EDE_X86_64 CRYPTO_DEV_CCP CRYPTO_DEV_CCP_DD CRYPTO_DEV_PADLOCK CRYPTO_DEV_PADLOCK_AES CRYPTO_DEV_PADLOCK_SHA CRYPTO_DEV_QAT CRYPTO_DEV_QAT_C3XXX CRYPTO_DEV_QAT_C3XXXVF CRYPTO_DEV_QAT_C62X CRYPTO_DEV_QAT_C62XVF CRYPTO_DEV_QAT_DH895xCC CRYPTO_DEV_QAT_DH895xCCVF CRYPTO_DEV_VIRTIO CRYPTO_DH CRYPTO_DRBG_CTR CRYPTO_DRBG_HASH CRYPTO_ECDH CRYPTO_ECRDSA CRYPTO_ENGINE CRYPTO_ESSIV CRYPTO_FCRYPT CRYPTO_GHASH_CLMUL_NI_INTEL CRYPTO_HCTR2 CRYPTO_HKDF CRYPTO_KDF800108_CTR CRYPTO_KHAZAD CRYPTO_KPP CRYPTO_KRB5 CRYPTO_KRB5ENC CRYPTO_LIB_ARC4 CRYPTO_LIB_CHACHA CRYPTO_LIB_CHACHA20POLY1305 CRYPTO_LIB_CHACHA_GENERIC CRYPTO_LIB_CURVE25519 CRYPTO_LIB_CURVE25519_GENERIC CRYPTO_LIB_CURVE25519_INTERNAL CRYPTO_LIB_DES CRYPTO_LIB_POLY1305 CRYPTO_LIB_POLY1305_GENERIC CRYPTO_LIB_SHA1_ARCH CRYPTO_LIB_SHA256_ARCH CRYPTO_LIB_SHA512 CRYPTO_LIB_SHA512_ARCH CRYPTO_LIB_SM3 CRYPTO_LRW CRYPTO_LZ4 CRYPTO_LZ4HC CRYPTO_MICHAEL_MIC CRYPTO_NHPOLY1305 CRYPTO_NHPOLY1305_AVX2 CRYPTO_NHPOLY1305_SSE2 CRYPTO_PCBC CRYPTO_PCRYPT CRYPTO_POLY1305_X86_64 CRYPTO_POLYVAL CRYPTO_POLYVAL_CLMUL_NI CRYPTO_RMD160 CRYPTO_SEED CRYPTO_SERPENT CRYPTO_SERPENT_AVX2_X86_64 CRYPTO_SERPENT_AVX_X86_64 CRYPTO_SERPENT_SSE2_X86_64 CRYPTO_SM3_AVX_X86_64 CRYPTO_SM4 CRYPTO_SM4_AESNI_AVX2_X86_64 CRYPTO_SM4_AESNI_AVX_X86_64 CRYPTO_SM4_GENERIC CRYPTO_STREEBOG CRYPTO_TEA CRYPTO_TWOFISH CRYPTO_TWOFISH_AVX_X86_64 CRYPTO_TWOFISH_COMMON CRYPTO_TWOFISH_X86_64 CRYPTO_TWOFISH_X86_64_3WAY CRYPTO_USER CRYPTO_USER_API CRYPTO_USER_API_AEAD CRYPTO_USER_API_ENABLE_OBSOLETE CRYPTO_USER_API_HASH CRYPTO_USER_API_RNG CRYPTO_USER_API_SKCIPHER CRYPTO_WP512 CRYPTO_XCBC CRYPTO_XCTR CRYPTO_XTS CRYPTO_XXHASH CRYPTO_ZSTD CUSE CYPRESS_FIRMWARE DAMON DAMON_PADDR DAMON_RECLAIM DAMON_VADDR DCA DCB DEBUG_VFS DEFAULT_CODEL DEVICE_MIGRATION DMA_CMA FSCACHE FUSE_FS GPIOLIB HAMRADIO INFINIBAND INFINIBAND_ADDR_TRANS INFINIBAND_RTRS_CLIENT IOSCHED_BFQ ISA_BUS LIBNVDIMM MAC80211 MAC80211_DEBUGFS MAC80211_LEDS MEDIA_SUPPORT MMC MTD NET_CLS_U32 NET_SCH_DEFAULT PARTITION_ADVANCED PCCARD PCMCIA RFKILL SERIAL_DEV_BUS TLS TLS_DEVICE TRANSPARENT_HUGEPAGE USB_GADGET USB_PHY VLAN_8021Q WANT_COMPAT_NETLINK_MESSAGES WEXT_CORE WIRELESS WLAN WLAN_VENDOR_ATH] disabling configs for [memleak ubsan bug_or_warning kasan atomic_sleep hang], they are not needed picked [v6.16 v6.15 v6.14 v6.12 v6.10 v6.8 v6.6 v6.4 v6.1 v5.18 v5.15 v5.12 v5.9 v5.6 v5.3 v5.0 v4.19] out of 39 release tags testing release v6.16 testing commit 038d61fd642278bab63ee8ef722c50d10ab01e8f gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 0a6f4a91aed4e1ae0d1cea16479c239ac7e9f6c85ab9f54eb3880711c565b006 run #0: crashed: possible deadlock in inet_shutdown run #1: crashed: possible deadlock in pcpu_alloc_noprof run #2: crashed: possible deadlock in inet_shutdown run #3: crashed: possible deadlock in inet_shutdown run #4: crashed: possible deadlock in pcpu_alloc_noprof run #5: crashed: possible deadlock in inet_shutdown run #6: crashed: possible deadlock in pcpu_alloc_noprof run #7: crashed: possible deadlock in pcpu_alloc_noprof run #8: crashed: possible deadlock in inet_shutdown run #9: crashed: possible deadlock in pcpu_alloc_noprof representative crash: possible deadlock in inet_shutdown, types: [LOCKDEP] testing release v6.15 testing commit 0ff41df1cb268fc69e703a08a57ee14ae967d0ca gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 2178e7948d7d1b757a1ec1b43bf836cd8cd14ce4252e4177446d8ece3a8af455 all runs: crashed: possible deadlock in blk_mq_update_nr_hw_queues representative crash: possible deadlock in blk_mq_update_nr_hw_queues, types: [LOCKDEP] testing release v6.14 testing commit 38fec10eb60d687e30c8c6b5420d86e8149f7557 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 706be0ad49335a2f2e266e02a6f5e738139cd3eedec0904929fad2317607f9ec all runs: OK false negative chance: 0.000 # git bisect start 0ff41df1cb268fc69e703a08a57ee14ae967d0ca 38fec10eb60d687e30c8c6b5420d86e8149f7557 Bisecting: 8357 revisions left to test after this (roughly 13 steps) [390513642ee6763c7ada07f0a1470474986e6c1c] io_uring: always do atomic put from iowq testing commit 390513642ee6763c7ada07f0a1470474986e6c1c gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 8300134f7af6f2aa3665c3af8a520e34d2adbc3a9e6f47defaf8eeee3e6ec6b6 all runs: crashed: possible deadlock in blk_mq_update_nr_hw_queues representative crash: possible deadlock in blk_mq_update_nr_hw_queues, types: [LOCKDEP] # git bisect bad 390513642ee6763c7ada07f0a1470474986e6c1c Bisecting: 3789 revisions left to test after this (roughly 12 steps) [9b960d8cd6f712cb2c03e2bdd4d5ca058238037f] Merge tag 'for-6.15/block-20250322' of git://git.kernel.dk/linux testing commit 9b960d8cd6f712cb2c03e2bdd4d5ca058238037f gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 5218728e0b60f449a7263e490d70d66674474a126f38942a30b82f3bfc1d7b9f all runs: crashed: possible deadlock in blk_mq_update_nr_hw_queues representative crash: possible deadlock in blk_mq_update_nr_hw_queues, types: [LOCKDEP] # git bisect bad 9b960d8cd6f712cb2c03e2bdd4d5ca058238037f Bisecting: 1851 revisions left to test after this (roughly 11 steps) [7d20aa5c32ac8bd272b5470ddbd7ac6e0cb35714] Merge tag 'pm-6.15-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm testing commit 7d20aa5c32ac8bd272b5470ddbd7ac6e0cb35714 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: f9340856a7b1d450ccd477e498776fb265d9917aa45b94bcbe7128b91b8feeaa all runs: boot failed: BUG: unable to handle kernel NULL pointer dereference in msix_capability_init unable to determine the verdict: 0 good runs (wanted 5), for bad wanted 5 in total, got 0 # git bisect skip 7d20aa5c32ac8bd272b5470ddbd7ac6e0cb35714 Bisecting: 1851 revisions left to test after this (roughly 11 steps) [43a2930348040b3a7ad3b809e211dea233267f28] ASoC: rockchip: Convert to RUNTIME_PM_OPS() & co testing commit 43a2930348040b3a7ad3b809e211dea233267f28 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: b82e35e5a3a0dac6e31ab350ca08175a336e2e3b5e373e6ee28d3ee6266c6064 all runs: OK false negative chance: 0.000 # git bisect good 43a2930348040b3a7ad3b809e211dea233267f28 Bisecting: 1720 revisions left to test after this (roughly 11 steps) [27bd3ce4038baad9976d287ce883df1674f3220e] Merge tag 'm68k-for-v6.15-tag1' of git://git.kernel.org/pub/scm/linux/kernel/git/geert/linux-m68k testing commit 27bd3ce4038baad9976d287ce883df1674f3220e gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 2ede142cdf80871e13dc995243f3b25bbb604e3794fae416ccb2d2e024545102 run #0: ignore: lost connection to test machine run #1: OK run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK false negative chance: 0.000 # git bisect good 27bd3ce4038baad9976d287ce883df1674f3220e Bisecting: 847 revisions left to test after this (roughly 10 steps) [2a2274e90a76c24a03287e386f1ad128a8cc3b67] Merge tag 'pmdomain-v6.15' of git://git.kernel.org/pub/scm/linux/kernel/git/ulfh/linux-pm testing commit 2a2274e90a76c24a03287e386f1ad128a8cc3b67 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: ac4b1292afd934b2309c8740dcbc1a6be63d6d984454bdf7c4c00d220c24549d all runs: boot failed: BUG: unable to handle kernel NULL pointer dereference in msix_capability_init unable to determine the verdict: 0 good runs (wanted 5), for bad wanted 5 in total, got 0 # git bisect skip 2a2274e90a76c24a03287e386f1ad128a8cc3b67 Bisecting: 847 revisions left to test after this (roughly 10 steps) [8015443e24e76fac97268603e91c4793970ce657] gpio: Hide valid_mask from direct assignments testing commit 8015443e24e76fac97268603e91c4793970ce657 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 00b3a4bf3d94cccb8d0ad804710f4e88014f96317a97b359b46cd7ecf4415ada all runs: OK false negative chance: 0.000 # git bisect good 8015443e24e76fac97268603e91c4793970ce657 Bisecting: 827 revisions left to test after this (roughly 10 steps) [c84907a1459588c883ef84a35bb69d46ca37e4e7] Merge tag 'auxdisplay-v6.15-1' of git://git.kernel.org/pub/scm/linux/kernel/git/andy/linux-auxdisplay testing commit c84907a1459588c883ef84a35bb69d46ca37e4e7 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: bdd5c75ff90db55fdecb3f9befca886b4ed7d293feb50af44cf814dd9f5baa53 all runs: boot failed: BUG: unable to handle kernel NULL pointer dereference in msix_capability_init unable to determine the verdict: 0 good runs (wanted 5), for bad wanted 5 in total, got 0 # git bisect skip c84907a1459588c883ef84a35bb69d46ca37e4e7 Bisecting: 827 revisions left to test after this (roughly 10 steps) [aa85822c611aef7cd4dc17d27121d43e21bb82f0] ALSA: hda/realtek: Enable PC beep passthrough for HP EliteBook 855 G7 testing commit aa85822c611aef7cd4dc17d27121d43e21bb82f0 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: c268201a1d190a992f66b42368469a48f6844a384e5caa790db507c975a73741 all runs: OK false negative chance: 0.000 # git bisect good aa85822c611aef7cd4dc17d27121d43e21bb82f0 Bisecting: 812 revisions left to test after this (roughly 10 steps) [4742da9774a416908ef8e3916164192c15c0e2d1] cpufreq: scpi: compare kHz instead of Hz testing commit 4742da9774a416908ef8e3916164192c15c0e2d1 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 23b8f72bfebda878c423ef3a3fd7e50e426511fdf499f11e3852ac04d6663566 all runs: OK false negative chance: 0.000 # git bisect good 4742da9774a416908ef8e3916164192c15c0e2d1 Bisecting: 812 revisions left to test after this (roughly 10 steps) [bf1bb26f23f10f835e596337604d32d34ab798a6] hwmon: add driver for HTU31 testing commit bf1bb26f23f10f835e596337604d32d34ab798a6 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 2111516c9b89ec60c4f1dcf6254eb8e99795be17d4d3c8b832ad958df840415a all runs: OK false negative chance: 0.000 # git bisect good bf1bb26f23f10f835e596337604d32d34ab798a6 Bisecting: 812 revisions left to test after this (roughly 10 steps) [78f4ca3c6f6fd305b9af8c51470643617df85e11] ALSA: hda/realtek: fix micmute LEDs on HP Laptops with ALC3247 testing commit 78f4ca3c6f6fd305b9af8c51470643617df85e11 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 26ca26161300874c4ac0fc7912e02a72f38e005ba8ccdb716d0673796f787218 all runs: OK false negative chance: 0.000 # git bisect good 78f4ca3c6f6fd305b9af8c51470643617df85e11 Bisecting: 807 revisions left to test after this (roughly 10 steps) [978540050a85a2b7fc77b60a1cfaec110682e9c3] nvme-fc: Utilise min3() to simplify queue count calculation testing commit 978540050a85a2b7fc77b60a1cfaec110682e9c3 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: ee549cb097a935b8f78d5970d7e057927af971abdd872f4b113ded462a10d29b all runs: crashed: possible deadlock in blk_mq_update_nr_hw_queues representative crash: possible deadlock in blk_mq_update_nr_hw_queues, types: [LOCKDEP] # git bisect bad 978540050a85a2b7fc77b60a1cfaec110682e9c3 Bisecting: 48 revisions left to test after this (roughly 6 steps) [3efe7571c3ae2b6481253a2616c2bb3fbadd503b] block: protect nr_requests update using q->elevator_lock testing commit 3efe7571c3ae2b6481253a2616c2bb3fbadd503b gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 98e310ddad7a5fd5768de0a2b75237a4fc96f8336a86f514499cce296b1af527 all runs: OK false negative chance: 0.000 # git bisect good 3efe7571c3ae2b6481253a2616c2bb3fbadd503b Bisecting: 23 revisions left to test after this (roughly 5 steps) [78800f5997d8ae0f20d4aced66a524f0f2fc4c7f] block: remove unnecessary goto labels in debugfs attribute read methods testing commit 78800f5997d8ae0f20d4aced66a524f0f2fc4c7f gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 7b32fd5076eeecfa3a3e11ac1bed928c1c0cd86dff16b01656aa5e021acacee1 all runs: OK false negative chance: 0.000 # git bisect good 78800f5997d8ae0f20d4aced66a524f0f2fc4c7f Bisecting: 11 revisions left to test after this (roughly 4 steps) [5c12a9cdb5ad54621f1b7c02df7993a4a1b86a46] nvme: add nvme_auth_generate_psk() testing commit 5c12a9cdb5ad54621f1b7c02df7993a4a1b86a46 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 56192a882c29ebf9b5de8d302a16fb59257080f8272e4f3b2a43c777f9596b0f all runs: crashed: possible deadlock in blk_mq_update_nr_hw_queues representative crash: possible deadlock in blk_mq_update_nr_hw_queues, types: [LOCKDEP] # git bisect bad 5c12a9cdb5ad54621f1b7c02df7993a4a1b86a46 Bisecting: 5 revisions left to test after this (roughly 3 steps) [989bcd623a8b0c32b76d9258767d8b37e53419e6] ublk: remove io_cmds list in ublk_queue testing commit 989bcd623a8b0c32b76d9258767d8b37e53419e6 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 882f14a383a0d6cceaed4d3364fc6fca3fda2cebe1c57e8ec8f56e00dd51ac08 all runs: crashed: possible deadlock in blk_mq_update_nr_hw_queues representative crash: possible deadlock in blk_mq_update_nr_hw_queues, types: [LOCKDEP] # git bisect bad 989bcd623a8b0c32b76d9258767d8b37e53419e6 Bisecting: 2 revisions left to test after this (roughly 2 steps) [ffa1e7ada456087c2402b37cd6b2863ced29aff0] block: Make request_queue lockdep splats show up earlier testing commit ffa1e7ada456087c2402b37cd6b2863ced29aff0 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: a1caefdd27b54b18973ec80cee9ac895193703b9e27cd1a04fcfeb259686408e all runs: crashed: possible deadlock in blk_mq_update_nr_hw_queues representative crash: possible deadlock in blk_mq_update_nr_hw_queues, types: [LOCKDEP] # git bisect bad ffa1e7ada456087c2402b37cd6b2863ced29aff0 Bisecting: 1 revision left to test after this (roughly 1 step) [0e94ed33681424a6dce65c62837e08e4c7aa09ac] block: protect debugfs attribute method hctx_busy_show testing commit 0e94ed33681424a6dce65c62837e08e4c7aa09ac gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: e7d10f2ddb23c24095db8fcaa37df8a9b17f3bcd6909d9f2d47d7d46d55d1bd8 all runs: OK false negative chance: 0.000 # git bisect good 0e94ed33681424a6dce65c62837e08e4c7aa09ac Bisecting: 0 revisions left to test after this (roughly 0 steps) [b0d42581195603f38184d7c130d0e2f43f40fb33] block: fix a comment in the queue_attrs[] array testing commit b0d42581195603f38184d7c130d0e2f43f40fb33 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: cb758a41cf8377d57a9f1f4d48f2163c2a06e80acec0eafd1089465c577cf046 all runs: OK false negative chance: 0.000 # git bisect good b0d42581195603f38184d7c130d0e2f43f40fb33 ffa1e7ada456087c2402b37cd6b2863ced29aff0 is the first bad commit commit ffa1e7ada456087c2402b37cd6b2863ced29aff0 Author: Thomas Hellström Date: Tue Mar 18 10:55:48 2025 +0100 block: Make request_queue lockdep splats show up earlier In recent kernels, there are lockdep splats around the struct request_queue::io_lockdep_map, similar to [1], but they typically don't show up until reclaim with writeback happens. Having multiple kernel versions released with a known risc of kernel deadlock during reclaim writeback should IMHO be addressed and backported to -stable with the highest priority. In order to have these lockdep splats show up earlier, preferrably during system initialization, prime the struct request_queue::io_lockdep_map as GFP_KERNEL reclaim- tainted. This will instead lead to lockdep splats looking similar to [2], but without the need for reclaim + writeback happening. [1]: [ 189.762244] ====================================================== [ 189.762432] WARNING: possible circular locking dependency detected [ 189.762441] 6.14.0-rc6-xe+ #6 Tainted: G U [ 189.762450] ------------------------------------------------------ [ 189.762459] kswapd0/119 is trying to acquire lock: [ 189.762467] ffff888110ceb710 (&q->q_usage_counter(io)#26){++++}-{0:0}, at: __submit_bio+0x76/0x230 [ 189.762485] but task is already holding lock: [ 189.762494] ffffffff834c97c0 (fs_reclaim){+.+.}-{0:0}, at: balance_pgdat+0xbe/0xb00 [ 189.762507] which lock already depends on the new lock. [ 189.762519] the existing dependency chain (in reverse order) is: [ 189.762529] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 189.762540] fs_reclaim_acquire+0xc5/0x100 [ 189.762548] kmem_cache_alloc_lru_noprof+0x4a/0x480 [ 189.762558] alloc_inode+0xaa/0xe0 [ 189.762566] iget_locked+0x157/0x330 [ 189.762573] kernfs_get_inode+0x1b/0x110 [ 189.762582] kernfs_get_tree+0x1b0/0x2e0 [ 189.762590] sysfs_get_tree+0x1f/0x60 [ 189.762597] vfs_get_tree+0x2a/0xf0 [ 189.762605] path_mount+0x4cd/0xc00 [ 189.762613] __x64_sys_mount+0x119/0x150 [ 189.762621] x64_sys_call+0x14f2/0x2310 [ 189.762630] do_syscall_64+0x91/0x180 [ 189.762637] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 189.762647] -> #1 (&root->kernfs_rwsem){++++}-{3:3}: [ 189.762659] down_write+0x3e/0xf0 [ 189.762667] kernfs_remove+0x32/0x60 [ 189.762676] sysfs_remove_dir+0x4f/0x60 [ 189.762685] __kobject_del+0x33/0xa0 [ 189.762709] kobject_del+0x13/0x30 [ 189.762716] elv_unregister_queue+0x52/0x80 [ 189.762725] elevator_switch+0x68/0x360 [ 189.762733] elv_iosched_store+0x14b/0x1b0 [ 189.762756] queue_attr_store+0x181/0x1e0 [ 189.762765] sysfs_kf_write+0x49/0x80 [ 189.762773] kernfs_fop_write_iter+0x17d/0x250 [ 189.762781] vfs_write+0x281/0x540 [ 189.762790] ksys_write+0x72/0xf0 [ 189.762798] __x64_sys_write+0x19/0x30 [ 189.762807] x64_sys_call+0x2a3/0x2310 [ 189.762815] do_syscall_64+0x91/0x180 [ 189.762823] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 189.762833] -> #0 (&q->q_usage_counter(io)#26){++++}-{0:0}: [ 189.762845] __lock_acquire+0x1525/0x2760 [ 189.762854] lock_acquire+0xca/0x310 [ 189.762861] blk_mq_submit_bio+0x8a2/0xba0 [ 189.762870] __submit_bio+0x76/0x230 [ 189.762878] submit_bio_noacct_nocheck+0x323/0x430 [ 189.762888] submit_bio_noacct+0x2cc/0x620 [ 189.762896] submit_bio+0x38/0x110 [ 189.762904] __swap_writepage+0xf5/0x380 [ 189.762912] swap_writepage+0x3c7/0x600 [ 189.762920] shmem_writepage+0x3da/0x4f0 [ 189.762929] pageout+0x13f/0x310 [ 189.762937] shrink_folio_list+0x61c/0xf60 [ 189.763261] evict_folios+0x378/0xcd0 [ 189.763584] try_to_shrink_lruvec+0x1b0/0x360 [ 189.763946] shrink_one+0x10e/0x200 [ 189.764266] shrink_node+0xc02/0x1490 [ 189.764586] balance_pgdat+0x563/0xb00 [ 189.764934] kswapd+0x1e8/0x430 [ 189.765249] kthread+0x10b/0x260 [ 189.765559] ret_from_fork+0x44/0x70 [ 189.765889] ret_from_fork_asm+0x1a/0x30 [ 189.766198] other info that might help us debug this: [ 189.767089] Chain exists of: &q->q_usage_counter(io)#26 --> &root->kernfs_rwsem --> fs_reclaim [ 189.767971] Possible unsafe locking scenario: [ 189.768555] CPU0 CPU1 [ 189.768849] ---- ---- [ 189.769136] lock(fs_reclaim); [ 189.769421] lock(&root->kernfs_rwsem); [ 189.769714] lock(fs_reclaim); [ 189.770016] rlock(&q->q_usage_counter(io)#26); [ 189.770305] *** DEADLOCK *** [ 189.771167] 1 lock held by kswapd0/119: [ 189.771453] #0: ffffffff834c97c0 (fs_reclaim){+.+.}-{0:0}, at: balance_pgdat+0xbe/0xb00 [ 189.771770] stack backtrace: [ 189.772351] CPU: 4 UID: 0 PID: 119 Comm: kswapd0 Tainted: G U 6.14.0-rc6-xe+ #6 [ 189.772353] Tainted: [U]=USER [ 189.772354] Hardware name: ASUS System Product Name/PRIME B560M-A AC, BIOS 2001 02/01/2023 [ 189.772354] Call Trace: [ 189.772355] [ 189.772356] dump_stack_lvl+0x6e/0xa0 [ 189.772359] dump_stack+0x10/0x18 [ 189.772360] print_circular_bug.cold+0x17a/0x1b7 [ 189.772363] check_noncircular+0x13a/0x150 [ 189.772365] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 189.772368] __lock_acquire+0x1525/0x2760 [ 189.772368] ? ret_from_fork_asm+0x1a/0x30 [ 189.772371] lock_acquire+0xca/0x310 [ 189.772372] ? __submit_bio+0x76/0x230 [ 189.772375] ? lock_release+0xd5/0x2c0 [ 189.772376] blk_mq_submit_bio+0x8a2/0xba0 [ 189.772378] ? __submit_bio+0x76/0x230 [ 189.772380] __submit_bio+0x76/0x230 [ 189.772382] ? trace_hardirqs_on+0x1e/0xe0 [ 189.772384] submit_bio_noacct_nocheck+0x323/0x430 [ 189.772386] ? submit_bio_noacct_nocheck+0x323/0x430 [ 189.772387] ? __might_sleep+0x58/0xa0 [ 189.772390] submit_bio_noacct+0x2cc/0x620 [ 189.772391] ? count_memcg_events+0x68/0x90 [ 189.772393] submit_bio+0x38/0x110 [ 189.772395] __swap_writepage+0xf5/0x380 [ 189.772396] swap_writepage+0x3c7/0x600 [ 189.772397] shmem_writepage+0x3da/0x4f0 [ 189.772401] pageout+0x13f/0x310 [ 189.772406] shrink_folio_list+0x61c/0xf60 [ 189.772409] ? isolate_folios+0xe80/0x16b0 [ 189.772410] ? mark_held_locks+0x46/0x90 [ 189.772412] evict_folios+0x378/0xcd0 [ 189.772414] ? evict_folios+0x34a/0xcd0 [ 189.772415] ? lock_is_held_type+0xa3/0x130 [ 189.772417] try_to_shrink_lruvec+0x1b0/0x360 [ 189.772420] shrink_one+0x10e/0x200 [ 189.772421] shrink_node+0xc02/0x1490 [ 189.772423] ? shrink_node+0xa08/0x1490 [ 189.772424] ? shrink_node+0xbd8/0x1490 [ 189.772425] ? mem_cgroup_iter+0x366/0x480 [ 189.772427] balance_pgdat+0x563/0xb00 [ 189.772428] ? balance_pgdat+0x563/0xb00 [ 189.772430] ? trace_hardirqs_on+0x1e/0xe0 [ 189.772431] ? finish_task_switch.isra.0+0xcb/0x330 [ 189.772433] ? __switch_to_asm+0x33/0x70 [ 189.772437] kswapd+0x1e8/0x430 [ 189.772438] ? __pfx_autoremove_wake_function+0x10/0x10 [ 189.772440] ? __pfx_kswapd+0x10/0x10 [ 189.772441] kthread+0x10b/0x260 [ 189.772443] ? __pfx_kthread+0x10/0x10 [ 189.772444] ret_from_fork+0x44/0x70 [ 189.772446] ? __pfx_kthread+0x10/0x10 [ 189.772447] ret_from_fork_asm+0x1a/0x30 [ 189.772450] [2]: [ 8.760253] ====================================================== [ 8.760254] WARNING: possible circular locking dependency detected [ 8.760255] 6.14.0-rc6-xe+ #7 Tainted: G U [ 8.760256] ------------------------------------------------------ [ 8.760257] (udev-worker)/674 is trying to acquire lock: [ 8.760259] ffff888100e39148 (&root->kernfs_rwsem){++++}-{3:3}, at: kernfs_remove+0x32/0x60 [ 8.760265] but task is already holding lock: [ 8.760266] ffff888110dc7680 (&q->q_usage_counter(io)#27){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x12/0x30 [ 8.760272] which lock already depends on the new lock. [ 8.760272] the existing dependency chain (in reverse order) is: [ 8.760273] -> #2 (&q->q_usage_counter(io)#27){++++}-{0:0}: [ 8.760276] blk_alloc_queue+0x30a/0x350 [ 8.760279] blk_mq_alloc_queue+0x6b/0xe0 [ 8.760281] scsi_alloc_sdev+0x276/0x3c0 [ 8.760284] scsi_probe_and_add_lun+0x22a/0x440 [ 8.760286] __scsi_scan_target+0x109/0x230 [ 8.760288] scsi_scan_channel+0x65/0xc0 [ 8.760290] scsi_scan_host_selected+0xff/0x140 [ 8.760292] do_scsi_scan_host+0xa7/0xc0 [ 8.760293] do_scan_async+0x1c/0x160 [ 8.760295] async_run_entry_fn+0x32/0x150 [ 8.760299] process_one_work+0x224/0x5f0 [ 8.760302] worker_thread+0x1d4/0x3e0 [ 8.760304] kthread+0x10b/0x260 [ 8.760306] ret_from_fork+0x44/0x70 [ 8.760309] ret_from_fork_asm+0x1a/0x30 [ 8.760312] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 8.760315] fs_reclaim_acquire+0xc5/0x100 [ 8.760317] kmem_cache_alloc_lru_noprof+0x4a/0x480 [ 8.760319] alloc_inode+0xaa/0xe0 [ 8.760322] iget_locked+0x157/0x330 [ 8.760323] kernfs_get_inode+0x1b/0x110 [ 8.760325] kernfs_get_tree+0x1b0/0x2e0 [ 8.760327] sysfs_get_tree+0x1f/0x60 [ 8.760329] vfs_get_tree+0x2a/0xf0 [ 8.760332] path_mount+0x4cd/0xc00 [ 8.760334] __x64_sys_mount+0x119/0x150 [ 8.760336] x64_sys_call+0x14f2/0x2310 [ 8.760338] do_syscall_64+0x91/0x180 [ 8.760340] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 8.760342] -> #0 (&root->kernfs_rwsem){++++}-{3:3}: [ 8.760345] __lock_acquire+0x1525/0x2760 [ 8.760347] lock_acquire+0xca/0x310 [ 8.760348] down_write+0x3e/0xf0 [ 8.760350] kernfs_remove+0x32/0x60 [ 8.760351] sysfs_remove_dir+0x4f/0x60 [ 8.760353] __kobject_del+0x33/0xa0 [ 8.760355] kobject_del+0x13/0x30 [ 8.760356] elv_unregister_queue+0x52/0x80 [ 8.760358] elevator_switch+0x68/0x360 [ 8.760360] elv_iosched_store+0x14b/0x1b0 [ 8.760362] queue_attr_store+0x181/0x1e0 [ 8.760364] sysfs_kf_write+0x49/0x80 [ 8.760366] kernfs_fop_write_iter+0x17d/0x250 [ 8.760367] vfs_write+0x281/0x540 [ 8.760370] ksys_write+0x72/0xf0 [ 8.760372] __x64_sys_write+0x19/0x30 [ 8.760374] x64_sys_call+0x2a3/0x2310 [ 8.760376] do_syscall_64+0x91/0x180 [ 8.760377] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 8.760380] other info that might help us debug this: [ 8.760380] Chain exists of: &root->kernfs_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#27 [ 8.760384] Possible unsafe locking scenario: [ 8.760384] CPU0 CPU1 [ 8.760385] ---- ---- [ 8.760385] lock(&q->q_usage_counter(io)#27); [ 8.760387] lock(fs_reclaim); [ 8.760388] lock(&q->q_usage_counter(io)#27); [ 8.760390] lock(&root->kernfs_rwsem); [ 8.760391] *** DEADLOCK *** [ 8.760391] 6 locks held by (udev-worker)/674: [ 8.760392] #0: ffff8881209ac420 (sb_writers#4){.+.+}-{0:0}, at: ksys_write+0x72/0xf0 [ 8.760398] #1: ffff88810c80f488 (&of->mutex#2){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x136/0x250 [ 8.760402] #2: ffff888125d1d330 (kn->active#101){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x13f/0x250 [ 8.760406] #3: ffff888110dc7bb0 (&q->sysfs_lock){+.+.}-{3:3}, at: queue_attr_store+0x148/0x1e0 [ 8.760411] #4: ffff888110dc7680 (&q->q_usage_counter(io)#27){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x12/0x30 [ 8.760416] #5: ffff888110dc76b8 (&q->q_usage_counter(queue)#27){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x12/0x30 [ 8.760421] stack backtrace: [ 8.760422] CPU: 7 UID: 0 PID: 674 Comm: (udev-worker) Tainted: G U 6.14.0-rc6-xe+ #7 [ 8.760424] Tainted: [U]=USER [ 8.760425] Hardware name: ASUS System Product Name/PRIME B560M-A AC, BIOS 2001 02/01/2023 [ 8.760426] Call Trace: [ 8.760427] [ 8.760428] dump_stack_lvl+0x6e/0xa0 [ 8.760431] dump_stack+0x10/0x18 [ 8.760433] print_circular_bug.cold+0x17a/0x1b7 [ 8.760437] check_noncircular+0x13a/0x150 [ 8.760441] ? save_trace+0x54/0x360 [ 8.760445] __lock_acquire+0x1525/0x2760 [ 8.760446] ? irqentry_exit+0x3a/0xb0 [ 8.760448] ? sysvec_apic_timer_interrupt+0x57/0xc0 [ 8.760452] lock_acquire+0xca/0x310 [ 8.760453] ? kernfs_remove+0x32/0x60 [ 8.760457] down_write+0x3e/0xf0 [ 8.760459] ? kernfs_remove+0x32/0x60 [ 8.760460] kernfs_remove+0x32/0x60 [ 8.760462] sysfs_remove_dir+0x4f/0x60 [ 8.760464] __kobject_del+0x33/0xa0 [ 8.760466] kobject_del+0x13/0x30 [ 8.760467] elv_unregister_queue+0x52/0x80 [ 8.760470] elevator_switch+0x68/0x360 [ 8.760472] elv_iosched_store+0x14b/0x1b0 [ 8.760475] queue_attr_store+0x181/0x1e0 [ 8.760479] ? lock_acquire+0xca/0x310 [ 8.760480] ? kernfs_fop_write_iter+0x13f/0x250 [ 8.760482] ? lock_is_held_type+0xa3/0x130 [ 8.760485] sysfs_kf_write+0x49/0x80 [ 8.760487] kernfs_fop_write_iter+0x17d/0x250 [ 8.760489] vfs_write+0x281/0x540 [ 8.760494] ksys_write+0x72/0xf0 [ 8.760497] __x64_sys_write+0x19/0x30 [ 8.760499] x64_sys_call+0x2a3/0x2310 [ 8.760502] do_syscall_64+0x91/0x180 [ 8.760504] ? trace_hardirqs_off+0x5d/0xe0 [ 8.760506] ? handle_softirqs+0x479/0x4d0 [ 8.760508] ? hrtimer_interrupt+0x13f/0x280 [ 8.760511] ? irqentry_exit_to_user_mode+0x8b/0x260 [ 8.760513] ? clear_bhb_loop+0x15/0x70 [ 8.760515] ? clear_bhb_loop+0x15/0x70 [ 8.760516] ? clear_bhb_loop+0x15/0x70 [ 8.760518] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 8.760520] RIP: 0033:0x7aa3bf2f5504 [ 8.760522] Code: c7 00 16 00 00 00 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 80 3d c5 8b 10 00 00 74 13 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 54 c3 0f 1f 00 55 48 89 e5 48 83 ec 20 48 89 [ 8.760523] RSP: 002b:00007ffc1e3697d8 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 8.760526] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007aa3bf2f5504 [ 8.760527] RDX: 0000000000000003 RSI: 00007ffc1e369ae0 RDI: 000000000000001c [ 8.760528] RBP: 00007ffc1e369800 R08: 00007aa3bf3f51c8 R09: 00007ffc1e3698b0 [ 8.760528] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 [ 8.760529] R13: 00007ffc1e369ae0 R14: 0000613ccf21f2f0 R15: 00007aa3bf3f4e80 [ 8.760533] v2: - Update a code comment to increase readability (Ming Lei). Cc: Jens Axboe Cc: linux-block@vger.kernel.org Cc: linux-kernel@vger.kernel.org Cc: Ming Lei Signed-off-by: Thomas Hellström Reviewed-by: Ming Lei Link: https://lore.kernel.org/r/20250318095548.5187-1-thomas.hellstrom@linux.intel.com Signed-off-by: Jens Axboe block/blk-core.c | 6 ++++++ 1 file changed, 6 insertions(+) accumulated error probability: 0.00 culprit signature: a1caefdd27b54b18973ec80cee9ac895193703b9e27cd1a04fcfeb259686408e parent signature: cb758a41cf8377d57a9f1f4d48f2163c2a06e80acec0eafd1089465c577cf046 revisions tested: 30, total time: 12h17m13.030007197s (build: 6h17m16.394149329s, test: 5h13m30.202183479s) first bad commit: ffa1e7ada456087c2402b37cd6b2863ced29aff0 block: Make request_queue lockdep splats show up earlier recipients (to): ["axboe@kernel.dk" "ming.lei@redhat.com" "thomas.hellstrom@linux.intel.com"] recipients (cc): [] crash: possible deadlock in blk_mq_update_nr_hw_queues ====================================================== WARNING: possible circular locking dependency detected syzkaller #0 Not tainted ------------------------------------------------------ syz.2.17/3343 is trying to acquire lock: ffff888108ad6b98 (&q->elevator_lock){+.+.}-{4:4}, at: blk_mq_elv_switch_none block/blk-mq.c:4942 [inline] ffff888108ad6b98 (&q->elevator_lock){+.+.}-{4:4}, at: __blk_mq_update_nr_hw_queues block/blk-mq.c:5022 [inline] ffff888108ad6b98 (&q->elevator_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0x1d2/0x690 block/blk-mq.c:5074 but task is already holding lock: ffff888108ad6668 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: nbd_start_device+0x5e/0x3a0 drivers/block/nbd.c:1476 which lock already depends on the new lock. the existing dependency chain (in reverse order) is: -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: blk_alloc_queue+0x33f/0x370 block/blk-core.c:461 blk_mq_alloc_queue block/blk-mq.c:4349 [inline] __blk_mq_alloc_disk+0x74/0x120 block/blk-mq.c:4396 nbd_dev_add+0x1f0/0x390 drivers/block/nbd.c:1933 nbd_init+0x146/0x160 drivers/block/nbd.c:2670 do_one_initcall+0xe3/0x380 init/main.c:1257 do_initcall_level+0x8f/0x100 init/main.c:1319 do_initcalls+0x54/0x90 init/main.c:1335 kernel_init_freeable+0x183/0x1f0 init/main.c:1568 kernel_init+0x15/0x120 init/main.c:1457 ret_from_fork+0x32/0x40 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 -> #1 (fs_reclaim){+.+.}-{0:0}: __fs_reclaim_acquire mm/page_alloc.c:3853 [inline] fs_reclaim_acquire+0x51/0xc0 mm/page_alloc.c:3867 might_alloc include/linux/sched/mm.h:318 [inline] xa_insert include/linux/xarray.h:783 [inline] blk_mq_init_hctx block/blk-mq.c:3924 [inline] blk_mq_alloc_and_init_hctx+0x361/0x430 block/blk-mq.c:4457 blk_mq_realloc_hw_ctxs+0x62/0x3f0 block/blk-mq.c:4486 blk_mq_init_allocated_queue+0x148/0x540 block/blk-mq.c:4540 blk_mq_alloc_queue block/blk-mq.c:4353 [inline] __blk_mq_alloc_disk+0x8d/0x120 block/blk-mq.c:4396 loop_add+0x1d4/0x3d0 drivers/block/loop.c:2059 loop_init+0xc2/0xe0 drivers/block/loop.c:2294 do_one_initcall+0xe3/0x380 init/main.c:1257 do_initcall_level+0x8f/0x100 init/main.c:1319 do_initcalls+0x54/0x90 init/main.c:1335 kernel_init_freeable+0x183/0x1f0 init/main.c:1568 kernel_init+0x15/0x120 init/main.c:1457 ret_from_fork+0x32/0x40 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 -> #0 (&q->elevator_lock){+.+.}-{4:4}: check_prev_add kernel/locking/lockdep.c:3163 [inline] check_prevs_add kernel/locking/lockdep.c:3282 [inline] validate_chain kernel/locking/lockdep.c:3906 [inline] __lock_acquire+0x12cb/0x20e0 kernel/locking/lockdep.c:5228 lock_acquire+0xea/0x270 kernel/locking/lockdep.c:5851 __mutex_lock_common kernel/locking/mutex.c:585 [inline] __mutex_lock+0xac/0xa90 kernel/locking/mutex.c:730 blk_mq_elv_switch_none block/blk-mq.c:4942 [inline] __blk_mq_update_nr_hw_queues block/blk-mq.c:5022 [inline] blk_mq_update_nr_hw_queues+0x1d2/0x690 block/blk-mq.c:5074 nbd_start_device+0x5e/0x3a0 drivers/block/nbd.c:1476 nbd_genl_connect+0x644/0x8c0 drivers/block/nbd.c:2201 genl_family_rcv_msg_doit+0xed/0x140 net/netlink/genetlink.c:1115 genl_family_rcv_msg net/netlink/genetlink.c:1195 [inline] genl_rcv_msg+0x239/0x250 net/netlink/genetlink.c:1210 netlink_rcv_skb+0xe6/0x120 net/netlink/af_netlink.c:2543 genl_rcv+0x23/0x30 net/netlink/genetlink.c:1219 netlink_unicast_kernel net/netlink/af_netlink.c:1322 [inline] netlink_unicast+0x1e9/0x300 net/netlink/af_netlink.c:1348 netlink_sendmsg+0x33d/0x3d0 net/netlink/af_netlink.c:1892 sock_sendmsg_nosec net/socket.c:718 [inline] __sock_sendmsg+0x81/0xa0 net/socket.c:733 ____sys_sendmsg+0x1bb/0x210 net/socket.c:2573 ___sys_sendmsg+0x28a/0x2d0 net/socket.c:2627 __sys_sendmsg net/socket.c:2659 [inline] __do_sys_sendmsg net/socket.c:2664 [inline] __se_sys_sendmsg net/socket.c:2662 [inline] __x64_sys_sendmsg+0xea/0x140 net/socket.c:2662 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xa4/0x180 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f other info that might help us debug this: Chain exists of: &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#49 Possible unsafe locking scenario: CPU0 CPU1 ---- ---- lock(&q->q_usage_counter(io)#49); lock(fs_reclaim); lock(&q->q_usage_counter(io)#49); lock(&q->elevator_lock); *** DEADLOCK *** 6 locks held by syz.2.17/3343: #0: ffffffff83d30600 (cb_lock){++++}-{4:4}, at: genl_rcv+0x14/0x30 net/netlink/genetlink.c:1218 #1: ffffffff83d304d8 (genl_mutex){+.+.}-{4:4}, at: genl_lock net/netlink/genetlink.c:35 [inline] #1: ffffffff83d304d8 (genl_mutex){+.+.}-{4:4}, at: genl_op_lock net/netlink/genetlink.c:60 [inline] #1: ffffffff83d304d8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x59/0x250 net/netlink/genetlink.c:1209 #2: ffff8881092c4198 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_connect+0x2f4/0x8c0 drivers/block/nbd.c:2111 #3: ffff8881092c40d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0x35/0x690 block/blk-mq.c:5073 #4: ffff888108ad6668 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: nbd_start_device+0x5e/0x3a0 drivers/block/nbd.c:1476 #5: ffff888108ad66a0 (&q->q_usage_counter(queue)){+.+.}-{0:0}, at: nbd_start_device+0x5e/0x3a0 drivers/block/nbd.c:1476 stack backtrace: CPU: 1 UID: 0 PID: 3343 Comm: syz.2.17 Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 Call Trace: dump_stack_lvl+0xaf/0x110 lib/dump_stack.c:120 print_circular_bug+0x29b/0x2b0 kernel/locking/lockdep.c:2076 check_noncircular+0x110/0x130 kernel/locking/lockdep.c:2208 check_prev_add kernel/locking/lockdep.c:3163 [inline] check_prevs_add kernel/locking/lockdep.c:3282 [inline] validate_chain kernel/locking/lockdep.c:3906 [inline] __lock_acquire+0x12cb/0x20e0 kernel/locking/lockdep.c:5228 lock_acquire+0xea/0x270 kernel/locking/lockdep.c:5851 __mutex_lock_common kernel/locking/mutex.c:585 [inline] __mutex_lock+0xac/0xa90 kernel/locking/mutex.c:730 blk_mq_elv_switch_none block/blk-mq.c:4942 [inline] __blk_mq_update_nr_hw_queues block/blk-mq.c:5022 [inline] blk_mq_update_nr_hw_queues+0x1d2/0x690 block/blk-mq.c:5074 nbd_start_device+0x5e/0x3a0 drivers/block/nbd.c:1476 nbd_genl_connect+0x644/0x8c0 drivers/block/nbd.c:2201 genl_family_rcv_msg_doit+0xed/0x140 net/netlink/genetlink.c:1115 genl_family_rcv_msg net/netlink/genetlink.c:1195 [inline] genl_rcv_msg+0x239/0x250 net/netlink/genetlink.c:1210 netlink_rcv_skb+0xe6/0x120 net/netlink/af_netlink.c:2543 genl_rcv+0x23/0x30 net/netlink/genetlink.c:1219 netlink_unicast_kernel net/netlink/af_netlink.c:1322 [inline] netlink_unicast+0x1e9/0x300 net/netlink/af_netlink.c:1348 netlink_sendmsg+0x33d/0x3d0 net/netlink/af_netlink.c:1892 sock_sendmsg_nosec net/socket.c:718 [inline] __sock_sendmsg+0x81/0xa0 net/socket.c:733 ____sys_sendmsg+0x1bb/0x210 net/socket.c:2573 ___sys_sendmsg+0x28a/0x2d0 net/socket.c:2627 __sys_sendmsg net/socket.c:2659 [inline] __do_sys_sendmsg net/socket.c:2664 [inline] __se_sys_sendmsg net/socket.c:2662 [inline] __x64_sys_sendmsg+0xea/0x140 net/socket.c:2662 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xa4/0x180 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fd6a078ebe9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fd69fdfe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007fd6a09c5fa0 RCX: 00007fd6a078ebe9 RDX: 0000000000000800 RSI: 0000200000001ac0 RDI: 0000000000000005 RBP: 00007fd6a0811e19 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fd6a09c6038 R14: 00007fd6a09c5fa0 R15: 00007ffc9235a2c8 nbd0: detected capacity change from 0 to 127