ci starts bisection 2025-07-20 05:46:26.242024217 +0000 UTC m=+85802.341025282 bisecting cause commit starting from bf61759db409ce21a8f2a5bb442b7c35905a713d building syzkaller on 7117feecc9626dc60b06fb3e91c0f7632d99d30b ensuring issue is reproducible on original commit bf61759db409ce21a8f2a5bb442b7c35905a713d testing commit bf61759db409ce21a8f2a5bb442b7c35905a713d gcc compiler: gcc (Debian 12.2.0-14+deb12u1) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 8853bdbaf1550fe7d8ad01801eedebaf52cd110669261f3223c10bc42766bc38 all runs: crashed: possible deadlock in kernfs_iop_getattr representative crash: possible deadlock in kernfs_iop_getattr, types: [LOCKDEP] check whether we can drop unnecessary instrumentation disabling configs for [atomic_sleep hang memleak ubsan bug_or_warning kasan], they are not needed testing commit bf61759db409ce21a8f2a5bb442b7c35905a713d gcc compiler: gcc (Debian 12.2.0-14+deb12u1) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: b975006bfc3de5ec3388546f4c46eda91baf9d29f2474a864a343275f0dcb45e all runs: crashed: possible deadlock in kernfs_iop_getattr representative crash: possible deadlock in kernfs_iop_getattr, types: [LOCKDEP] the bug reproduces without the instrumentation disabling configs for [memleak ubsan bug_or_warning kasan atomic_sleep hang], they are not needed kconfig minimization: base=4089 full=8469 leaves diff=2181 split chunks (needed=false): <2181> split chunk #0 of len 2181 into 5 parts testing without sub-chunk 1/5 disabling configs for [ubsan bug_or_warning kasan atomic_sleep hang memleak], they are not needed testing commit bf61759db409ce21a8f2a5bb442b7c35905a713d gcc compiler: gcc (Debian 12.2.0-14+deb12u1) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 0493678551903d02e21f621e454fd4910fab53793f0857b7bdd7050e249f8b12 all runs: crashed: possible deadlock in kernfs_iop_getattr representative crash: possible deadlock in kernfs_iop_getattr, types: [LOCKDEP] the chunk can be dropped testing without sub-chunk 2/5 disabling configs for [bug_or_warning kasan atomic_sleep hang memleak ubsan], they are not needed testing commit bf61759db409ce21a8f2a5bb442b7c35905a713d gcc compiler: gcc (Debian 12.2.0-14+deb12u1) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 24c398aac496fe53fe99bd8803ca4d86cf94b0930c292427514306982d4a9f7f all runs: crashed: possible deadlock in kernfs_iop_getattr representative crash: possible deadlock in kernfs_iop_getattr, types: [LOCKDEP] the chunk can be dropped testing without sub-chunk 3/5 disabling configs for [bug_or_warning kasan atomic_sleep hang memleak ubsan], they are not needed testing commit bf61759db409ce21a8f2a5bb442b7c35905a713d gcc compiler: gcc (Debian 12.2.0-14+deb12u1) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 7db065e6e0103a4a06b6e9fe5be37dede3bad59251ca81247c89aae4a83ce233 all runs: crashed: possible deadlock in kernfs_iop_getattr representative crash: possible deadlock in kernfs_iop_getattr, types: [LOCKDEP] the chunk can be dropped testing without sub-chunk 4/5 disabling configs for [ubsan bug_or_warning kasan atomic_sleep hang memleak], they are not needed testing commit bf61759db409ce21a8f2a5bb442b7c35905a713d gcc compiler: gcc (Debian 12.2.0-14+deb12u1) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 33cb630c5415b95949dca9a5ee0c9ed855e95b0525db7f5a1d1eca63b8f1657a all runs: crashed: possible deadlock in kernfs_iop_getattr representative crash: possible deadlock in kernfs_iop_getattr, types: [LOCKDEP] the chunk can be dropped testing without sub-chunk 5/5 disabling configs for [hang memleak ubsan bug_or_warning kasan atomic_sleep], they are not needed testing commit bf61759db409ce21a8f2a5bb442b7c35905a713d gcc compiler: gcc (Debian 12.2.0-14+deb12u1) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 8af1f357fe7ee2e59c032eb235546f0673a87aa1a96ab6ba4076eb3c7512dbeb all runs: crashed: possible deadlock in kernfs_iop_getattr representative crash: possible deadlock in kernfs_iop_getattr, types: [LOCKDEP] the chunk can be dropped disabling configs for [kasan atomic_sleep hang memleak ubsan bug_or_warning], they are not needed picked [v6.15 v6.14 v6.13 v6.11 v6.9 v6.7 v6.5 v6.3 v6.0 v5.17 v5.14 v5.11 v5.8 v5.5 v5.2 v4.20 v4.19] out of 38 release tags testing release v6.15 testing commit 0ff41df1cb268fc69e703a08a57ee14ae967d0ca gcc compiler: gcc (Debian 12.2.0-14+deb12u1) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 4a967b8181b7752f45fe14d59ed1524900bb7095dcb0612fc380f1401fa54eb4 all runs: crashed: possible deadlock in kernfs_iop_getattr representative crash: possible deadlock in kernfs_iop_getattr, types: [LOCKDEP] testing release v6.14 testing commit 38fec10eb60d687e30c8c6b5420d86e8149f7557 gcc compiler: gcc (Debian 12.2.0-14+deb12u1) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 912ebbb500f4daaa522617537686d4db73068cf89b6674724cf65498fd7668f9 all runs: OK false negative chance: 0.000 # git bisect start 0ff41df1cb268fc69e703a08a57ee14ae967d0ca 38fec10eb60d687e30c8c6b5420d86e8149f7557 Bisecting: 8357 revisions left to test after this (roughly 13 steps) [390513642ee6763c7ada07f0a1470474986e6c1c] io_uring: always do atomic put from iowq testing commit 390513642ee6763c7ada07f0a1470474986e6c1c gcc compiler: gcc (Debian 12.2.0-14+deb12u1) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: c304762a9f0a1d37fa8ca3976031cf79fc06c169f12acb3979bb29c4f432834e all runs: crashed: possible deadlock in kernfs_iop_getattr representative crash: possible deadlock in kernfs_iop_getattr, types: [LOCKDEP] # git bisect bad 390513642ee6763c7ada07f0a1470474986e6c1c Bisecting: 3789 revisions left to test after this (roughly 12 steps) [9b960d8cd6f712cb2c03e2bdd4d5ca058238037f] Merge tag 'for-6.15/block-20250322' of git://git.kernel.dk/linux testing commit 9b960d8cd6f712cb2c03e2bdd4d5ca058238037f gcc compiler: gcc (Debian 12.2.0-14+deb12u1) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 22e6099083d1fe792211a38aa763bf141590c2e2645f414e528cecaebba2bfcd all runs: crashed: possible deadlock in kernfs_iop_getattr representative crash: possible deadlock in kernfs_iop_getattr, types: [LOCKDEP] # git bisect bad 9b960d8cd6f712cb2c03e2bdd4d5ca058238037f Bisecting: 1851 revisions left to test after this (roughly 11 steps) [7d20aa5c32ac8bd272b5470ddbd7ac6e0cb35714] Merge tag 'pm-6.15-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm testing commit 7d20aa5c32ac8bd272b5470ddbd7ac6e0cb35714 gcc compiler: gcc (Debian 12.2.0-14+deb12u1) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 55999fbfa828ff0f71f796125df034df145f9e5214627633a7c70b7b5b26e743 all runs: boot failed: BUG: unable to handle kernel NULL pointer dereference in msix_prepare_msi_desc unable to determine the verdict: 0 good runs (wanted 5), for bad wanted 5 in total, got 0 # git bisect skip 7d20aa5c32ac8bd272b5470ddbd7ac6e0cb35714 Bisecting: 1851 revisions left to test after this (roughly 11 steps) [43a2930348040b3a7ad3b809e211dea233267f28] ASoC: rockchip: Convert to RUNTIME_PM_OPS() & co testing commit 43a2930348040b3a7ad3b809e211dea233267f28 gcc compiler: gcc (Debian 12.2.0-14+deb12u1) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 90ec05c14af905b2dad55164c1b008525979dbe99c6f16260029cc91f1e37215 all runs: OK false negative chance: 0.000 # git bisect good 43a2930348040b3a7ad3b809e211dea233267f28 Bisecting: 1720 revisions left to test after this (roughly 11 steps) [27bd3ce4038baad9976d287ce883df1674f3220e] Merge tag 'm68k-for-v6.15-tag1' of git://git.kernel.org/pub/scm/linux/kernel/git/geert/linux-m68k testing commit 27bd3ce4038baad9976d287ce883df1674f3220e gcc compiler: gcc (Debian 12.2.0-14+deb12u1) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 8c0a2e9ff3e522d49cf98570a5ebe951ee1197b95996d7ac79e31bc3bf5da685 all runs: OK false negative chance: 0.000 # git bisect good 27bd3ce4038baad9976d287ce883df1674f3220e Bisecting: 847 revisions left to test after this (roughly 10 steps) [2a2274e90a76c24a03287e386f1ad128a8cc3b67] Merge tag 'pmdomain-v6.15' of git://git.kernel.org/pub/scm/linux/kernel/git/ulfh/linux-pm testing commit 2a2274e90a76c24a03287e386f1ad128a8cc3b67 gcc compiler: gcc (Debian 12.2.0-14+deb12u1) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 72378a7c357650e9d7587836b19414c5e8bd358302d80aed34ba5050aadbc764 all runs: boot failed: BUG: unable to handle kernel NULL pointer dereference in msix_prepare_msi_desc unable to determine the verdict: 0 good runs (wanted 5), for bad wanted 5 in total, got 0 # git bisect skip 2a2274e90a76c24a03287e386f1ad128a8cc3b67 Bisecting: 847 revisions left to test after this (roughly 10 steps) [8015443e24e76fac97268603e91c4793970ce657] gpio: Hide valid_mask from direct assignments testing commit 8015443e24e76fac97268603e91c4793970ce657 gcc compiler: gcc (Debian 12.2.0-14+deb12u1) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 3ef092a861f9e85f25b8cdabee93fa4f73a033b48b9a99ea4001ec97334c0bd4 all runs: OK false negative chance: 0.000 # git bisect good 8015443e24e76fac97268603e91c4793970ce657 Bisecting: 827 revisions left to test after this (roughly 10 steps) [c84907a1459588c883ef84a35bb69d46ca37e4e7] Merge tag 'auxdisplay-v6.15-1' of git://git.kernel.org/pub/scm/linux/kernel/git/andy/linux-auxdisplay testing commit c84907a1459588c883ef84a35bb69d46ca37e4e7 gcc compiler: gcc (Debian 12.2.0-14+deb12u1) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 8359f88f4396e6ffe704239a2e9bdb7f076f0edb6da67a3ab56ed89843b1ac5c all runs: boot failed: BUG: unable to handle kernel NULL pointer dereference in msix_prepare_msi_desc unable to determine the verdict: 0 good runs (wanted 5), for bad wanted 5 in total, got 0 # git bisect skip c84907a1459588c883ef84a35bb69d46ca37e4e7 Bisecting: 827 revisions left to test after this (roughly 10 steps) [aa85822c611aef7cd4dc17d27121d43e21bb82f0] ALSA: hda/realtek: Enable PC beep passthrough for HP EliteBook 855 G7 testing commit aa85822c611aef7cd4dc17d27121d43e21bb82f0 gcc compiler: gcc (Debian 12.2.0-14+deb12u1) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 92e048825cc30b590c2be9bbfae8193d4f6c02ad1c7984d93c67120452dc5b88 all runs: OK false negative chance: 0.000 # git bisect good aa85822c611aef7cd4dc17d27121d43e21bb82f0 Bisecting: 812 revisions left to test after this (roughly 10 steps) [4742da9774a416908ef8e3916164192c15c0e2d1] cpufreq: scpi: compare kHz instead of Hz testing commit 4742da9774a416908ef8e3916164192c15c0e2d1 gcc compiler: gcc (Debian 12.2.0-14+deb12u1) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 5745c6bb63b4198dc757a1e5021e956e09397c42c6a88bbe96dc0fada4433ed5 all runs: OK false negative chance: 0.000 # git bisect good 4742da9774a416908ef8e3916164192c15c0e2d1 Bisecting: 812 revisions left to test after this (roughly 10 steps) [bf1bb26f23f10f835e596337604d32d34ab798a6] hwmon: add driver for HTU31 testing commit bf1bb26f23f10f835e596337604d32d34ab798a6 gcc compiler: gcc (Debian 12.2.0-14+deb12u1) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: f896e3042e84363de7f369d6fa63332b1d54df02441c3a3c2f4117a09e2ae9df all runs: OK false negative chance: 0.000 # git bisect good bf1bb26f23f10f835e596337604d32d34ab798a6 Bisecting: 812 revisions left to test after this (roughly 10 steps) [78f4ca3c6f6fd305b9af8c51470643617df85e11] ALSA: hda/realtek: fix micmute LEDs on HP Laptops with ALC3247 testing commit 78f4ca3c6f6fd305b9af8c51470643617df85e11 gcc compiler: gcc (Debian 12.2.0-14+deb12u1) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: e6f5ccd2e49a5a892194f7ccf9e2662f13f8d534e6ffedfae23908ce9d77b9f2 all runs: OK false negative chance: 0.000 # git bisect good 78f4ca3c6f6fd305b9af8c51470643617df85e11 Bisecting: 807 revisions left to test after this (roughly 10 steps) [978540050a85a2b7fc77b60a1cfaec110682e9c3] nvme-fc: Utilise min3() to simplify queue count calculation testing commit 978540050a85a2b7fc77b60a1cfaec110682e9c3 gcc compiler: gcc (Debian 12.2.0-14+deb12u1) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: c44f328de696d86f7068b437795c39798d102dc64f0f775b33dc3918fa5cc6c0 all runs: crashed: possible deadlock in kernfs_iop_getattr representative crash: possible deadlock in kernfs_iop_getattr, types: [LOCKDEP] # git bisect bad 978540050a85a2b7fc77b60a1cfaec110682e9c3 Bisecting: 48 revisions left to test after this (roughly 6 steps) [3efe7571c3ae2b6481253a2616c2bb3fbadd503b] block: protect nr_requests update using q->elevator_lock testing commit 3efe7571c3ae2b6481253a2616c2bb3fbadd503b gcc compiler: gcc (Debian 12.2.0-14+deb12u1) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 28659cc425ab907f3bddb08fb85b46962fc9a7472d73853b8695afb10011c331 all runs: OK false negative chance: 0.000 # git bisect good 3efe7571c3ae2b6481253a2616c2bb3fbadd503b Bisecting: 23 revisions left to test after this (roughly 5 steps) [78800f5997d8ae0f20d4aced66a524f0f2fc4c7f] block: remove unnecessary goto labels in debugfs attribute read methods testing commit 78800f5997d8ae0f20d4aced66a524f0f2fc4c7f gcc compiler: gcc (Debian 12.2.0-14+deb12u1) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 3b80ca698593e89e9d762ae9104f76ae033ed62d22eff3e887b36ec98875c10e all runs: OK false negative chance: 0.000 # git bisect good 78800f5997d8ae0f20d4aced66a524f0f2fc4c7f Bisecting: 11 revisions left to test after this (roughly 4 steps) [5c12a9cdb5ad54621f1b7c02df7993a4a1b86a46] nvme: add nvme_auth_generate_psk() testing commit 5c12a9cdb5ad54621f1b7c02df7993a4a1b86a46 gcc compiler: gcc (Debian 12.2.0-14+deb12u1) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 8d2264bdb5a6ea755644d5c76aa8ff55dc25db59f77a3013aebce130d99c5319 all runs: crashed: possible deadlock in kernfs_iop_getattr representative crash: possible deadlock in kernfs_iop_getattr, types: [LOCKDEP] # git bisect bad 5c12a9cdb5ad54621f1b7c02df7993a4a1b86a46 Bisecting: 5 revisions left to test after this (roughly 3 steps) [989bcd623a8b0c32b76d9258767d8b37e53419e6] ublk: remove io_cmds list in ublk_queue testing commit 989bcd623a8b0c32b76d9258767d8b37e53419e6 gcc compiler: gcc (Debian 12.2.0-14+deb12u1) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: a152e2ad158fba24c301ff37424163aae6292ac5477ce7dda063ef70a4eed407 all runs: crashed: possible deadlock in kernfs_iop_getattr representative crash: possible deadlock in kernfs_iop_getattr, types: [LOCKDEP] # git bisect bad 989bcd623a8b0c32b76d9258767d8b37e53419e6 Bisecting: 2 revisions left to test after this (roughly 2 steps) [ffa1e7ada456087c2402b37cd6b2863ced29aff0] block: Make request_queue lockdep splats show up earlier testing commit ffa1e7ada456087c2402b37cd6b2863ced29aff0 gcc compiler: gcc (Debian 12.2.0-14+deb12u1) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: e06f70cf00ae0f1309a49f7b97c4b64ec01ae6f164fb35a1804ad634dc06582c all runs: crashed: possible deadlock in kernfs_iop_getattr representative crash: possible deadlock in kernfs_iop_getattr, types: [LOCKDEP] # git bisect bad ffa1e7ada456087c2402b37cd6b2863ced29aff0 Bisecting: 1 revision left to test after this (roughly 1 step) [0e94ed33681424a6dce65c62837e08e4c7aa09ac] block: protect debugfs attribute method hctx_busy_show testing commit 0e94ed33681424a6dce65c62837e08e4c7aa09ac gcc compiler: gcc (Debian 12.2.0-14+deb12u1) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 8c4f596fadbe1fd7aae269964a68f10c8364fb16b0c8534a891188d918a82f5e all runs: OK false negative chance: 0.000 # git bisect good 0e94ed33681424a6dce65c62837e08e4c7aa09ac Bisecting: 0 revisions left to test after this (roughly 0 steps) [b0d42581195603f38184d7c130d0e2f43f40fb33] block: fix a comment in the queue_attrs[] array testing commit b0d42581195603f38184d7c130d0e2f43f40fb33 gcc compiler: gcc (Debian 12.2.0-14+deb12u1) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: e37edd59087e0e73b2e28eea3c050cbc0bc82ed31c26c090a1a173369c8cea52 all runs: OK false negative chance: 0.000 # git bisect good b0d42581195603f38184d7c130d0e2f43f40fb33 ffa1e7ada456087c2402b37cd6b2863ced29aff0 is the first bad commit commit ffa1e7ada456087c2402b37cd6b2863ced29aff0 Author: Thomas Hellström Date: Tue Mar 18 10:55:48 2025 +0100 block: Make request_queue lockdep splats show up earlier In recent kernels, there are lockdep splats around the struct request_queue::io_lockdep_map, similar to [1], but they typically don't show up until reclaim with writeback happens. Having multiple kernel versions released with a known risc of kernel deadlock during reclaim writeback should IMHO be addressed and backported to -stable with the highest priority. In order to have these lockdep splats show up earlier, preferrably during system initialization, prime the struct request_queue::io_lockdep_map as GFP_KERNEL reclaim- tainted. This will instead lead to lockdep splats looking similar to [2], but without the need for reclaim + writeback happening. [1]: [ 189.762244] ====================================================== [ 189.762432] WARNING: possible circular locking dependency detected [ 189.762441] 6.14.0-rc6-xe+ #6 Tainted: G U [ 189.762450] ------------------------------------------------------ [ 189.762459] kswapd0/119 is trying to acquire lock: [ 189.762467] ffff888110ceb710 (&q->q_usage_counter(io)#26){++++}-{0:0}, at: __submit_bio+0x76/0x230 [ 189.762485] but task is already holding lock: [ 189.762494] ffffffff834c97c0 (fs_reclaim){+.+.}-{0:0}, at: balance_pgdat+0xbe/0xb00 [ 189.762507] which lock already depends on the new lock. [ 189.762519] the existing dependency chain (in reverse order) is: [ 189.762529] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 189.762540] fs_reclaim_acquire+0xc5/0x100 [ 189.762548] kmem_cache_alloc_lru_noprof+0x4a/0x480 [ 189.762558] alloc_inode+0xaa/0xe0 [ 189.762566] iget_locked+0x157/0x330 [ 189.762573] kernfs_get_inode+0x1b/0x110 [ 189.762582] kernfs_get_tree+0x1b0/0x2e0 [ 189.762590] sysfs_get_tree+0x1f/0x60 [ 189.762597] vfs_get_tree+0x2a/0xf0 [ 189.762605] path_mount+0x4cd/0xc00 [ 189.762613] __x64_sys_mount+0x119/0x150 [ 189.762621] x64_sys_call+0x14f2/0x2310 [ 189.762630] do_syscall_64+0x91/0x180 [ 189.762637] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 189.762647] -> #1 (&root->kernfs_rwsem){++++}-{3:3}: [ 189.762659] down_write+0x3e/0xf0 [ 189.762667] kernfs_remove+0x32/0x60 [ 189.762676] sysfs_remove_dir+0x4f/0x60 [ 189.762685] __kobject_del+0x33/0xa0 [ 189.762709] kobject_del+0x13/0x30 [ 189.762716] elv_unregister_queue+0x52/0x80 [ 189.762725] elevator_switch+0x68/0x360 [ 189.762733] elv_iosched_store+0x14b/0x1b0 [ 189.762756] queue_attr_store+0x181/0x1e0 [ 189.762765] sysfs_kf_write+0x49/0x80 [ 189.762773] kernfs_fop_write_iter+0x17d/0x250 [ 189.762781] vfs_write+0x281/0x540 [ 189.762790] ksys_write+0x72/0xf0 [ 189.762798] __x64_sys_write+0x19/0x30 [ 189.762807] x64_sys_call+0x2a3/0x2310 [ 189.762815] do_syscall_64+0x91/0x180 [ 189.762823] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 189.762833] -> #0 (&q->q_usage_counter(io)#26){++++}-{0:0}: [ 189.762845] __lock_acquire+0x1525/0x2760 [ 189.762854] lock_acquire+0xca/0x310 [ 189.762861] blk_mq_submit_bio+0x8a2/0xba0 [ 189.762870] __submit_bio+0x76/0x230 [ 189.762878] submit_bio_noacct_nocheck+0x323/0x430 [ 189.762888] submit_bio_noacct+0x2cc/0x620 [ 189.762896] submit_bio+0x38/0x110 [ 189.762904] __swap_writepage+0xf5/0x380 [ 189.762912] swap_writepage+0x3c7/0x600 [ 189.762920] shmem_writepage+0x3da/0x4f0 [ 189.762929] pageout+0x13f/0x310 [ 189.762937] shrink_folio_list+0x61c/0xf60 [ 189.763261] evict_folios+0x378/0xcd0 [ 189.763584] try_to_shrink_lruvec+0x1b0/0x360 [ 189.763946] shrink_one+0x10e/0x200 [ 189.764266] shrink_node+0xc02/0x1490 [ 189.764586] balance_pgdat+0x563/0xb00 [ 189.764934] kswapd+0x1e8/0x430 [ 189.765249] kthread+0x10b/0x260 [ 189.765559] ret_from_fork+0x44/0x70 [ 189.765889] ret_from_fork_asm+0x1a/0x30 [ 189.766198] other info that might help us debug this: [ 189.767089] Chain exists of: &q->q_usage_counter(io)#26 --> &root->kernfs_rwsem --> fs_reclaim [ 189.767971] Possible unsafe locking scenario: [ 189.768555] CPU0 CPU1 [ 189.768849] ---- ---- [ 189.769136] lock(fs_reclaim); [ 189.769421] lock(&root->kernfs_rwsem); [ 189.769714] lock(fs_reclaim); [ 189.770016] rlock(&q->q_usage_counter(io)#26); [ 189.770305] *** DEADLOCK *** [ 189.771167] 1 lock held by kswapd0/119: [ 189.771453] #0: ffffffff834c97c0 (fs_reclaim){+.+.}-{0:0}, at: balance_pgdat+0xbe/0xb00 [ 189.771770] stack backtrace: [ 189.772351] CPU: 4 UID: 0 PID: 119 Comm: kswapd0 Tainted: G U 6.14.0-rc6-xe+ #6 [ 189.772353] Tainted: [U]=USER [ 189.772354] Hardware name: ASUS System Product Name/PRIME B560M-A AC, BIOS 2001 02/01/2023 [ 189.772354] Call Trace: [ 189.772355] [ 189.772356] dump_stack_lvl+0x6e/0xa0 [ 189.772359] dump_stack+0x10/0x18 [ 189.772360] print_circular_bug.cold+0x17a/0x1b7 [ 189.772363] check_noncircular+0x13a/0x150 [ 189.772365] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 189.772368] __lock_acquire+0x1525/0x2760 [ 189.772368] ? ret_from_fork_asm+0x1a/0x30 [ 189.772371] lock_acquire+0xca/0x310 [ 189.772372] ? __submit_bio+0x76/0x230 [ 189.772375] ? lock_release+0xd5/0x2c0 [ 189.772376] blk_mq_submit_bio+0x8a2/0xba0 [ 189.772378] ? __submit_bio+0x76/0x230 [ 189.772380] __submit_bio+0x76/0x230 [ 189.772382] ? trace_hardirqs_on+0x1e/0xe0 [ 189.772384] submit_bio_noacct_nocheck+0x323/0x430 [ 189.772386] ? submit_bio_noacct_nocheck+0x323/0x430 [ 189.772387] ? __might_sleep+0x58/0xa0 [ 189.772390] submit_bio_noacct+0x2cc/0x620 [ 189.772391] ? count_memcg_events+0x68/0x90 [ 189.772393] submit_bio+0x38/0x110 [ 189.772395] __swap_writepage+0xf5/0x380 [ 189.772396] swap_writepage+0x3c7/0x600 [ 189.772397] shmem_writepage+0x3da/0x4f0 [ 189.772401] pageout+0x13f/0x310 [ 189.772406] shrink_folio_list+0x61c/0xf60 [ 189.772409] ? isolate_folios+0xe80/0x16b0 [ 189.772410] ? mark_held_locks+0x46/0x90 [ 189.772412] evict_folios+0x378/0xcd0 [ 189.772414] ? evict_folios+0x34a/0xcd0 [ 189.772415] ? lock_is_held_type+0xa3/0x130 [ 189.772417] try_to_shrink_lruvec+0x1b0/0x360 [ 189.772420] shrink_one+0x10e/0x200 [ 189.772421] shrink_node+0xc02/0x1490 [ 189.772423] ? shrink_node+0xa08/0x1490 [ 189.772424] ? shrink_node+0xbd8/0x1490 [ 189.772425] ? mem_cgroup_iter+0x366/0x480 [ 189.772427] balance_pgdat+0x563/0xb00 [ 189.772428] ? balance_pgdat+0x563/0xb00 [ 189.772430] ? trace_hardirqs_on+0x1e/0xe0 [ 189.772431] ? finish_task_switch.isra.0+0xcb/0x330 [ 189.772433] ? __switch_to_asm+0x33/0x70 [ 189.772437] kswapd+0x1e8/0x430 [ 189.772438] ? __pfx_autoremove_wake_function+0x10/0x10 [ 189.772440] ? __pfx_kswapd+0x10/0x10 [ 189.772441] kthread+0x10b/0x260 [ 189.772443] ? __pfx_kthread+0x10/0x10 [ 189.772444] ret_from_fork+0x44/0x70 [ 189.772446] ? __pfx_kthread+0x10/0x10 [ 189.772447] ret_from_fork_asm+0x1a/0x30 [ 189.772450] [2]: [ 8.760253] ====================================================== [ 8.760254] WARNING: possible circular locking dependency detected [ 8.760255] 6.14.0-rc6-xe+ #7 Tainted: G U [ 8.760256] ------------------------------------------------------ [ 8.760257] (udev-worker)/674 is trying to acquire lock: [ 8.760259] ffff888100e39148 (&root->kernfs_rwsem){++++}-{3:3}, at: kernfs_remove+0x32/0x60 [ 8.760265] but task is already holding lock: [ 8.760266] ffff888110dc7680 (&q->q_usage_counter(io)#27){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x12/0x30 [ 8.760272] which lock already depends on the new lock. [ 8.760272] the existing dependency chain (in reverse order) is: [ 8.760273] -> #2 (&q->q_usage_counter(io)#27){++++}-{0:0}: [ 8.760276] blk_alloc_queue+0x30a/0x350 [ 8.760279] blk_mq_alloc_queue+0x6b/0xe0 [ 8.760281] scsi_alloc_sdev+0x276/0x3c0 [ 8.760284] scsi_probe_and_add_lun+0x22a/0x440 [ 8.760286] __scsi_scan_target+0x109/0x230 [ 8.760288] scsi_scan_channel+0x65/0xc0 [ 8.760290] scsi_scan_host_selected+0xff/0x140 [ 8.760292] do_scsi_scan_host+0xa7/0xc0 [ 8.760293] do_scan_async+0x1c/0x160 [ 8.760295] async_run_entry_fn+0x32/0x150 [ 8.760299] process_one_work+0x224/0x5f0 [ 8.760302] worker_thread+0x1d4/0x3e0 [ 8.760304] kthread+0x10b/0x260 [ 8.760306] ret_from_fork+0x44/0x70 [ 8.760309] ret_from_fork_asm+0x1a/0x30 [ 8.760312] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 8.760315] fs_reclaim_acquire+0xc5/0x100 [ 8.760317] kmem_cache_alloc_lru_noprof+0x4a/0x480 [ 8.760319] alloc_inode+0xaa/0xe0 [ 8.760322] iget_locked+0x157/0x330 [ 8.760323] kernfs_get_inode+0x1b/0x110 [ 8.760325] kernfs_get_tree+0x1b0/0x2e0 [ 8.760327] sysfs_get_tree+0x1f/0x60 [ 8.760329] vfs_get_tree+0x2a/0xf0 [ 8.760332] path_mount+0x4cd/0xc00 [ 8.760334] __x64_sys_mount+0x119/0x150 [ 8.760336] x64_sys_call+0x14f2/0x2310 [ 8.760338] do_syscall_64+0x91/0x180 [ 8.760340] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 8.760342] -> #0 (&root->kernfs_rwsem){++++}-{3:3}: [ 8.760345] __lock_acquire+0x1525/0x2760 [ 8.760347] lock_acquire+0xca/0x310 [ 8.760348] down_write+0x3e/0xf0 [ 8.760350] kernfs_remove+0x32/0x60 [ 8.760351] sysfs_remove_dir+0x4f/0x60 [ 8.760353] __kobject_del+0x33/0xa0 [ 8.760355] kobject_del+0x13/0x30 [ 8.760356] elv_unregister_queue+0x52/0x80 [ 8.760358] elevator_switch+0x68/0x360 [ 8.760360] elv_iosched_store+0x14b/0x1b0 [ 8.760362] queue_attr_store+0x181/0x1e0 [ 8.760364] sysfs_kf_write+0x49/0x80 [ 8.760366] kernfs_fop_write_iter+0x17d/0x250 [ 8.760367] vfs_write+0x281/0x540 [ 8.760370] ksys_write+0x72/0xf0 [ 8.760372] __x64_sys_write+0x19/0x30 [ 8.760374] x64_sys_call+0x2a3/0x2310 [ 8.760376] do_syscall_64+0x91/0x180 [ 8.760377] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 8.760380] other info that might help us debug this: [ 8.760380] Chain exists of: &root->kernfs_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#27 [ 8.760384] Possible unsafe locking scenario: [ 8.760384] CPU0 CPU1 [ 8.760385] ---- ---- [ 8.760385] lock(&q->q_usage_counter(io)#27); [ 8.760387] lock(fs_reclaim); [ 8.760388] lock(&q->q_usage_counter(io)#27); [ 8.760390] lock(&root->kernfs_rwsem); [ 8.760391] *** DEADLOCK *** [ 8.760391] 6 locks held by (udev-worker)/674: [ 8.760392] #0: ffff8881209ac420 (sb_writers#4){.+.+}-{0:0}, at: ksys_write+0x72/0xf0 [ 8.760398] #1: ffff88810c80f488 (&of->mutex#2){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x136/0x250 [ 8.760402] #2: ffff888125d1d330 (kn->active#101){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x13f/0x250 [ 8.760406] #3: ffff888110dc7bb0 (&q->sysfs_lock){+.+.}-{3:3}, at: queue_attr_store+0x148/0x1e0 [ 8.760411] #4: ffff888110dc7680 (&q->q_usage_counter(io)#27){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x12/0x30 [ 8.760416] #5: ffff888110dc76b8 (&q->q_usage_counter(queue)#27){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x12/0x30 [ 8.760421] stack backtrace: [ 8.760422] CPU: 7 UID: 0 PID: 674 Comm: (udev-worker) Tainted: G U 6.14.0-rc6-xe+ #7 [ 8.760424] Tainted: [U]=USER [ 8.760425] Hardware name: ASUS System Product Name/PRIME B560M-A AC, BIOS 2001 02/01/2023 [ 8.760426] Call Trace: [ 8.760427] [ 8.760428] dump_stack_lvl+0x6e/0xa0 [ 8.760431] dump_stack+0x10/0x18 [ 8.760433] print_circular_bug.cold+0x17a/0x1b7 [ 8.760437] check_noncircular+0x13a/0x150 [ 8.760441] ? save_trace+0x54/0x360 [ 8.760445] __lock_acquire+0x1525/0x2760 [ 8.760446] ? irqentry_exit+0x3a/0xb0 [ 8.760448] ? sysvec_apic_timer_interrupt+0x57/0xc0 [ 8.760452] lock_acquire+0xca/0x310 [ 8.760453] ? kernfs_remove+0x32/0x60 [ 8.760457] down_write+0x3e/0xf0 [ 8.760459] ? kernfs_remove+0x32/0x60 [ 8.760460] kernfs_remove+0x32/0x60 [ 8.760462] sysfs_remove_dir+0x4f/0x60 [ 8.760464] __kobject_del+0x33/0xa0 [ 8.760466] kobject_del+0x13/0x30 [ 8.760467] elv_unregister_queue+0x52/0x80 [ 8.760470] elevator_switch+0x68/0x360 [ 8.760472] elv_iosched_store+0x14b/0x1b0 [ 8.760475] queue_attr_store+0x181/0x1e0 [ 8.760479] ? lock_acquire+0xca/0x310 [ 8.760480] ? kernfs_fop_write_iter+0x13f/0x250 [ 8.760482] ? lock_is_held_type+0xa3/0x130 [ 8.760485] sysfs_kf_write+0x49/0x80 [ 8.760487] kernfs_fop_write_iter+0x17d/0x250 [ 8.760489] vfs_write+0x281/0x540 [ 8.760494] ksys_write+0x72/0xf0 [ 8.760497] __x64_sys_write+0x19/0x30 [ 8.760499] x64_sys_call+0x2a3/0x2310 [ 8.760502] do_syscall_64+0x91/0x180 [ 8.760504] ? trace_hardirqs_off+0x5d/0xe0 [ 8.760506] ? handle_softirqs+0x479/0x4d0 [ 8.760508] ? hrtimer_interrupt+0x13f/0x280 [ 8.760511] ? irqentry_exit_to_user_mode+0x8b/0x260 [ 8.760513] ? clear_bhb_loop+0x15/0x70 [ 8.760515] ? clear_bhb_loop+0x15/0x70 [ 8.760516] ? clear_bhb_loop+0x15/0x70 [ 8.760518] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 8.760520] RIP: 0033:0x7aa3bf2f5504 [ 8.760522] Code: c7 00 16 00 00 00 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 80 3d c5 8b 10 00 00 74 13 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 54 c3 0f 1f 00 55 48 89 e5 48 83 ec 20 48 89 [ 8.760523] RSP: 002b:00007ffc1e3697d8 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 8.760526] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007aa3bf2f5504 [ 8.760527] RDX: 0000000000000003 RSI: 00007ffc1e369ae0 RDI: 000000000000001c [ 8.760528] RBP: 00007ffc1e369800 R08: 00007aa3bf3f51c8 R09: 00007ffc1e3698b0 [ 8.760528] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 [ 8.760529] R13: 00007ffc1e369ae0 R14: 0000613ccf21f2f0 R15: 00007aa3bf3f4e80 [ 8.760533] v2: - Update a code comment to increase readability (Ming Lei). Cc: Jens Axboe Cc: linux-block@vger.kernel.org Cc: linux-kernel@vger.kernel.org Cc: Ming Lei Signed-off-by: Thomas Hellström Reviewed-by: Ming Lei Link: https://lore.kernel.org/r/20250318095548.5187-1-thomas.hellstrom@linux.intel.com Signed-off-by: Jens Axboe block/blk-core.c | 6 ++++++ 1 file changed, 6 insertions(+) accumulated error probability: 0.00 culprit signature: e06f70cf00ae0f1309a49f7b97c4b64ec01ae6f164fb35a1804ad634dc06582c parent signature: e37edd59087e0e73b2e28eea3c050cbc0bc82ed31c26c090a1a173369c8cea52 revisions tested: 29, total time: 7h45m38.178552599s (build: 3h56m42.845880875s, test: 3h18m35.913416825s) first bad commit: ffa1e7ada456087c2402b37cd6b2863ced29aff0 block: Make request_queue lockdep splats show up earlier recipients (to): ["axboe@kernel.dk" "ming.lei@redhat.com" "thomas.hellstrom@linux.intel.com"] recipients (cc): [] crash: possible deadlock in kernfs_iop_getattr loop7: detected capacity change from 0 to 7 ====================================================== WARNING: possible circular locking dependency detected 6.14.0-rc2-syzkaller #0 Not tainted ------------------------------------------------------ syz.3.16/2896 is trying to acquire lock: ffff88810069e1e0 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x3f/0x80 fs/kernfs/inode.c:191 but task is already holding lock: ffff888106ad40c0 (&q->q_usage_counter(io)#8){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0xd/0x20 block/blk-mq.c:215 which lock already depends on the new lock. the existing dependency chain (in reverse order) is: -> #3 (&q->q_usage_counter(io)#8){++++}-{0:0}: blk_alloc_queue+0x317/0x360 block/blk-core.c:461 blk_mq_alloc_queue+0x61/0xd0 block/blk-mq.c:4349 __blk_mq_alloc_disk+0x13/0x60 block/blk-mq.c:4396 loop_add+0x1f5/0x3e0 drivers/block/loop.c:2059 loop_init+0xb4/0x100 drivers/block/loop.c:2294 do_one_initcall+0x6f/0x340 init/main.c:1257 do_initcall_level init/main.c:1319 [inline] do_initcalls init/main.c:1335 [inline] do_basic_setup init/main.c:1354 [inline] kernel_init_freeable+0x23e/0x3f0 init/main.c:1568 kernel_init+0x15/0x1b0 init/main.c:1457 ret_from_fork+0x2c/0x50 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 -> #2 (fs_reclaim){+.+.}-{0:0}: __fs_reclaim_acquire mm/page_alloc.c:3853 [inline] fs_reclaim_acquire+0x98/0xd0 mm/page_alloc.c:3867 might_alloc include/linux/sched/mm.h:318 [inline] slab_pre_alloc_hook mm/slub.c:4066 [inline] slab_alloc_node mm/slub.c:4144 [inline] kmem_cache_alloc_noprof+0x4f/0x430 mm/slub.c:4171 __kernfs_iattrs+0x5a/0xf0 fs/kernfs/inode.c:37 kernfs_iattrs fs/kernfs/inode.c:60 [inline] __kernfs_setattr+0x20/0xb0 fs/kernfs/inode.c:73 kernfs_iop_setattr+0x7a/0xa0 fs/kernfs/inode.c:127 notify_change+0x1df/0x500 fs/attr.c:552 do_truncate+0x93/0xe0 fs/open.c:65 handle_truncate fs/namei.c:3451 [inline] do_open fs/namei.c:3834 [inline] path_openat+0xa93/0xc80 fs/namei.c:3989 do_filp_open+0xd3/0x180 fs/namei.c:4016 do_sys_openat2+0xa6/0xe0 fs/open.c:1428 do_sys_open fs/open.c:1443 [inline] __do_sys_openat fs/open.c:1459 [inline] __se_sys_openat fs/open.c:1454 [inline] __x64_sys_openat+0x69/0xa0 fs/open.c:1454 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0x80/0x190 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f -> #1 (iattr_mutex){+.+.}-{4:4}: __mutex_lock_common kernel/locking/mutex.c:585 [inline] __mutex_lock+0xc6/0xa90 kernel/locking/mutex.c:730 __kernfs_iattrs+0x1d/0xf0 fs/kernfs/inode.c:32 kernfs_iattrs fs/kernfs/inode.c:60 [inline] __kernfs_setattr+0x20/0xb0 fs/kernfs/inode.c:73 kernfs_iop_setattr+0x7a/0xa0 fs/kernfs/inode.c:127 notify_change+0x1df/0x500 fs/attr.c:552 do_truncate+0x93/0xe0 fs/open.c:65 handle_truncate fs/namei.c:3451 [inline] do_open fs/namei.c:3834 [inline] path_openat+0xa93/0xc80 fs/namei.c:3989 do_filp_open+0xd3/0x180 fs/namei.c:4016 do_sys_openat2+0xa6/0xe0 fs/open.c:1428 do_sys_open fs/open.c:1443 [inline] __do_sys_openat fs/open.c:1459 [inline] __se_sys_openat fs/open.c:1454 [inline] __x64_sys_openat+0x69/0xa0 fs/open.c:1454 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0x80/0x190 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: check_prev_add kernel/locking/lockdep.c:3163 [inline] check_prevs_add kernel/locking/lockdep.c:3282 [inline] validate_chain kernel/locking/lockdep.c:3906 [inline] __lock_acquire+0x1360/0x1ba0 kernel/locking/lockdep.c:5228 lock_acquire kernel/locking/lockdep.c:5851 [inline] lock_acquire+0xce/0x2d0 kernel/locking/lockdep.c:5816 down_read+0x2c/0x100 kernel/locking/rwsem.c:1524 kernfs_iop_getattr+0x3f/0x80 fs/kernfs/inode.c:191 loop_query_min_dio_size.isra.0+0x4f/0xa0 drivers/block/loop.c:535 loop_assign_backing_file drivers/block/loop.c:588 [inline] loop_change_fd drivers/block/loop.c:644 [inline] lo_ioctl+0x8da/0xa20 drivers/block/loop.c:1561 blkdev_ioctl+0x13d/0x2a0 block/ioctl.c:698 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:906 [inline] __se_sys_ioctl fs/ioctl.c:892 [inline] __x64_sys_ioctl+0x8f/0xc0 fs/ioctl.c:892 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0x80/0x190 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f other info that might help us debug this: Chain exists of: &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#8 Possible unsafe locking scenario: CPU0 CPU1 ---- ---- lock(&q->q_usage_counter(io)#8); lock(fs_reclaim); lock(&q->q_usage_counter(io)#8); rlock(&root->kernfs_iattr_rwsem); *** DEADLOCK *** 3 locks held by syz.3.16/2896: #0: ffff888102adc368 (&lo->lo_mutex){+.+.}-{4:4}, at: loop_global_lock_killable drivers/block/loop.c:118 [inline] #0: ffff888102adc368 (&lo->lo_mutex){+.+.}-{4:4}, at: loop_change_fd drivers/block/loop.c:616 [inline] #0: ffff888102adc368 (&lo->lo_mutex){+.+.}-{4:4}, at: lo_ioctl+0xca/0xa20 drivers/block/loop.c:1561 #1: ffff888106ad40c0 (&q->q_usage_counter(io)#8){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0xd/0x20 block/blk-mq.c:215 #2: ffff888106ad40f8 (&q->q_usage_counter(queue)#2){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0xd/0x20 block/blk-mq.c:215 stack backtrace: CPU: 1 UID: 0 PID: 2896 Comm: syz.3.16 Not tainted 6.14.0-rc2-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x78/0xe0 lib/dump_stack.c:120 print_circular_bug+0x26e/0x2f0 kernel/locking/lockdep.c:2076 check_noncircular+0x11d/0x130 kernel/locking/lockdep.c:2208 check_prev_add kernel/locking/lockdep.c:3163 [inline] check_prevs_add kernel/locking/lockdep.c:3282 [inline] validate_chain kernel/locking/lockdep.c:3906 [inline] __lock_acquire+0x1360/0x1ba0 kernel/locking/lockdep.c:5228 lock_acquire kernel/locking/lockdep.c:5851 [inline] lock_acquire+0xce/0x2d0 kernel/locking/lockdep.c:5816 down_read+0x2c/0x100 kernel/locking/rwsem.c:1524 kernfs_iop_getattr+0x3f/0x80 fs/kernfs/inode.c:191 loop_query_min_dio_size.isra.0+0x4f/0xa0 drivers/block/loop.c:535 loop_assign_backing_file drivers/block/loop.c:588 [inline] loop_change_fd drivers/block/loop.c:644 [inline] lo_ioctl+0x8da/0xa20 drivers/block/loop.c:1561 blkdev_ioctl+0x13d/0x2a0 block/ioctl.c:698 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:906 [inline] __se_sys_ioctl fs/ioctl.c:892 [inline] __x64_sys_ioctl+0x8f/0xc0 fs/ioctl.c:892 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0x80/0x190 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f72e4f7e9a9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f72e49ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007f72e51a5fa0 RCX: 00007f72e4f7e9a9 RDX: 0000000000000004 RSI: 0000000000004c06 RDI: 0000000000000003 RBP: 00007f72e5000d69 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000000 R14: 00007f72e51a5fa0 R15: 00007fff6eb85b78