* [PATCH v1 0/2] block: brd/loop error-path cleanup
@ 2026-08-31 15:20 Iván Ezequiel Rodriguez
2026-08-31 15:20 ` [PATCH v1 1/2] block: brd: destroy xa on allocation failure Iván Ezequiel Rodriguez
` (3 more replies)
0 siblings, 4 replies; 5+ messages in thread
From: Iván Ezequiel Rodriguez @ 2026-08-31 15:20 UTC (permalink / raw)
To: Jens Axboe; +Cc: linux-block, linux-kernel, Iván Ezequiel Rodriguez
Hi,
Two small error-path cleanups in brd and loop.
Patch 1 destroys the brd xarray on allocation failure after xa_init().
Patch 2 restores backing-file GFP mask, clears lo_backing_file /
lo_device, and re-enables uevents when loop_configure() fails after
loop_assign_backing_file().
Base: v7.3-rc1
Tested: built bzImage with CONFIG_BLK_DEV_RAM=y and CONFIG_BLK_DEV_LOOP=y;
booted QEMU initramfs smoke (ram0 present + LOOP_CONFIGURE happy path).
Thanks,
Iván
Iván Ezequiel Rodriguez (2):
block: brd: destroy xa on allocation failure
block: loop: restore state on loop_configure() error
drivers/block/brd.c | 1 +
drivers/block/loop.c | 7 +++++++
2 files changed, 8 insertions(+)
--
2.43.0
^ permalink raw reply [flat|nested] 5+ messages in thread
* [PATCH v1 1/2] block: brd: destroy xa on allocation failure
2026-08-31 15:20 [PATCH v1 0/2] block: brd/loop error-path cleanup Iván Ezequiel Rodriguez
@ 2026-08-31 15:20 ` Iván Ezequiel Rodriguez
2026-08-31 15:20 ` [PATCH v1 2/2] block: loop: restore state on loop_configure() error Iván Ezequiel Rodriguez
` (2 subsequent siblings)
3 siblings, 0 replies; 5+ messages in thread
From: Iván Ezequiel Rodriguez @ 2026-08-31 15:20 UTC (permalink / raw)
To: Jens Axboe; +Cc: linux-block, linux-kernel, Iván Ezequiel Rodriguez
xa_init() runs before blk_alloc_disk(); on error the path called
brd_free_device() without xa_destroy(), leaking the xarray state.
Signed-off-by: Iván Ezequiel Rodriguez <ivanrwcm25@gmail.com>
---
drivers/block/brd.c | 1 +
1 file changed, 1 insertion(+)
diff --git a/drivers/block/brd.c b/drivers/block/brd.c
index 00cc8122068f..c18262295c39 100644
--- a/drivers/block/brd.c
+++ b/drivers/block/brd.c
@@ -346,6 +346,7 @@ static int brd_alloc(int i)
out_cleanup_disk:
put_disk(disk);
out_free_dev:
+ xa_destroy(&brd->brd_pages);
brd_free_device(brd);
return err;
}
--
2.43.0
^ permalink raw reply [flat|nested] 5+ messages in thread
* [PATCH v1 2/2] block: loop: restore state on loop_configure() error
2026-08-31 15:20 [PATCH v1 0/2] block: brd/loop error-path cleanup Iván Ezequiel Rodriguez
2026-08-31 15:20 ` [PATCH v1 1/2] block: brd: destroy xa on allocation failure Iván Ezequiel Rodriguez
@ 2026-08-31 15:20 ` Iván Ezequiel Rodriguez
2026-09-01 6:59 ` [syzbot ci] Re: block: brd/loop error-path cleanup syzbot ci
2026-09-15 12:10 ` [PATCH v1 0/2] " Shin'ichiro Kawasaki
3 siblings, 0 replies; 5+ messages in thread
From: Iván Ezequiel Rodriguez @ 2026-08-31 15:20 UTC (permalink / raw)
To: Jens Axboe; +Cc: linux-block, linux-kernel, Iván Ezequiel Rodriguez
On failure after loop_assign_backing_file(), restore the backing
file GFP mask, clear lo_backing_file/lo_device, and re-enable uevents
before unlocking and dropping the file reference.
Signed-off-by: Iván Ezequiel Rodriguez <ivanrwcm25@gmail.com>
---
drivers/block/loop.c | 7 +++++++
1 file changed, 7 insertions(+)
diff --git a/drivers/block/loop.c b/drivers/block/loop.c
index 6f12976035b0..838554bd980e 100644
--- a/drivers/block/loop.c
+++ b/drivers/block/loop.c
@@ -1123,6 +1123,13 @@ static int loop_configure(struct loop_device *lo, blk_mode_t mode,
return 0;
out_unlock:
+ if (lo->lo_backing_file) {
+ mapping_set_gfp_mask(lo->lo_backing_file->f_mapping,
+ lo->old_gfp_mask);
+ lo->lo_backing_file = NULL;
+ lo->lo_device = NULL;
+ }
+ dev_set_uevent_suppress(disk_to_dev(lo->lo_disk), 0);
loop_global_unlock(lo, is_loop);
out_bdev:
if (!(mode & BLK_OPEN_EXCL))
--
2.43.0
^ permalink raw reply [flat|nested] 5+ messages in thread
* [syzbot ci] Re: block: brd/loop error-path cleanup
2026-08-31 15:20 [PATCH v1 0/2] block: brd/loop error-path cleanup Iván Ezequiel Rodriguez
2026-08-31 15:20 ` [PATCH v1 1/2] block: brd: destroy xa on allocation failure Iván Ezequiel Rodriguez
2026-08-31 15:20 ` [PATCH v1 2/2] block: loop: restore state on loop_configure() error Iván Ezequiel Rodriguez
@ 2026-09-01 6:59 ` syzbot ci
2026-09-15 12:10 ` [PATCH v1 0/2] " Shin'ichiro Kawasaki
3 siblings, 0 replies; 5+ messages in thread
From: syzbot ci @ 2026-09-01 6:59 UTC (permalink / raw)
To: axboe, ivanrwcm25, linux-block, linux-kernel; +Cc: syzbot, syzkaller-bugs
syzbot ci has tested the following series
[v1] block: brd/loop error-path cleanup
https://lore.kernel.org/all/20260831152044.166353-1-ivanrwcm25@gmail.com
* [PATCH v1 1/2] block: brd: destroy xa on allocation failure
* [PATCH v1 2/2] block: loop: restore state on loop_configure() error
and found the following issues:
* general protection fault in lo_release
* general protection fault in lo_rw_aio
Full report is available here:
https://ci.syzbot.org/series/9ab490fc-567e-414a-9754-890ca131012d
***
general protection fault in lo_release
tree: axboe
URL: https://kernel.googlesource.com/pub/scm/linux/kernel/git/axboe/linux.git
base: 44e96e364b04163ddddc8a24289cef4982b7e36e
arch: amd64
compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8
config: https://ci.syzbot.org/builds/f5d23472-69ec-45bc-b33a-b59f7c0e7493/config
syz repro: https://ci.syzbot.org/findings/a48673c0-89de-4ffc-b71c-3aa9e5313ec8/syz_repro
Oops: general protection fault, probably for non-canonical address 0xdffffc000000000a: 0000 [#1] SMP KASAN PTI
KASAN: null-ptr-deref in range [0x0000000000000050-0x0000000000000057]
CPU: 0 UID: 0 PID: 5946 Comm: syz.0.87 Not tainted syzkaller #0 PREEMPT(full)
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
RIP: 0010:__loop_clr_fd drivers/block/loop.c:1177 [inline]
RIP: 0010:lo_release+0x47c/0x7e0 drivers/block/loop.c:1780
Code: 89 e7 e8 77 60 fc fb bf e0 01 00 00 49 03 3c 24 be 02 00 00 00 e8 84 c6 9c 05 48 8b 44 24 30 4c 8d 70 50 4c 89 f0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 f7 e8 45 60 fc fb 41 bc e8 00 00 00 4d
RSP: 0018:ffffc90003787b60 EFLAGS: 00010206
RAX: 000000000000000a RBX: ffff8881063f93c8 RCX: 0000000000000046
RDX: 0000000000000006 RSI: ffffffff8e46de57 RDI: ffffffff8c6d5780
RBP: ffffc90003787d08 R08: ffffffff9079c73f R09: 1ffffffff20f38e7
R10: dffffc0000000000 R11: fffffbfff20f38e8 R12: ffff8881063f8080
R13: dffffc0000000000 R14: 0000000000000050 R15: 1ffff920006f0f74
FS: 00007fae103d46c0(0000) GS:ffff88818d6f1000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fae0f5eb840 CR3: 000000010c31a000 CR4: 00000000000006f0
Call Trace:
<TASK>
bdev_release+0x571/0x690 block/bdev.c:-1
blkdev_release+0x15/0x20 block/fops.c:682
__fput+0x418/0xa50 fs/file_table.c:512
fput_close_sync+0x11f/0x240 fs/file_table.c:617
__do_sys_close fs/open.c:1560 [inline]
__se_sys_close fs/open.c:1545 [inline]
__x64_sys_close+0x7e/0x110 fs/open.c:1545
do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
do_syscall_64+0x166/0x520 arch/x86/entry/syscall_64.c:84
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fae0f55e98e
Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
RSP: 002b:00007fae103d3da8 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
RAX: ffffffffffffffda RBX: 00007fae103d46c0 RCX: 00007fae0f55e98e
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
RBP: 0000000000000010 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
R13: 00007fae103d3ee0 R14: 00007fae103d46a8 R15: 00007fae06600000
</TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:__loop_clr_fd drivers/block/loop.c:1177 [inline]
RIP: 0010:lo_release+0x47c/0x7e0 drivers/block/loop.c:1780
Code: 89 e7 e8 77 60 fc fb bf e0 01 00 00 49 03 3c 24 be 02 00 00 00 e8 84 c6 9c 05 48 8b 44 24 30 4c 8d 70 50 4c 89 f0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 f7 e8 45 60 fc fb 41 bc e8 00 00 00 4d
RSP: 0018:ffffc90003787b60 EFLAGS: 00010206
RAX: 000000000000000a RBX: ffff8881063f93c8 RCX: 0000000000000046
RDX: 0000000000000006 RSI: ffffffff8e46de57 RDI: ffffffff8c6d5780
RBP: ffffc90003787d08 R08: ffffffff9079c73f R09: 1ffffffff20f38e7
R10: dffffc0000000000 R11: fffffbfff20f38e8 R12: ffff8881063f8080
R13: dffffc0000000000 R14: 0000000000000050 R15: 1ffff920006f0f74
FS: 00007fae103d46c0(0000) GS:ffff8882a8cf1000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ffd52a75ff8 CR3: 000000010c31a000 CR4: 00000000000006f0
----------------
Code disassembly (best guess):
0: 89 e7 mov %esp,%edi
2: e8 77 60 fc fb call 0xfbfc607e
7: bf e0 01 00 00 mov $0x1e0,%edi
c: 49 03 3c 24 add (%r12),%rdi
10: be 02 00 00 00 mov $0x2,%esi
15: e8 84 c6 9c 05 call 0x59cc69e
1a: 48 8b 44 24 30 mov 0x30(%rsp),%rax
1f: 4c 8d 70 50 lea 0x50(%rax),%r14
23: 4c 89 f0 mov %r14,%rax
26: 48 c1 e8 03 shr $0x3,%rax
* 2a: 42 80 3c 28 00 cmpb $0x0,(%rax,%r13,1) <-- trapping instruction
2f: 74 08 je 0x39
31: 4c 89 f7 mov %r14,%rdi
34: e8 45 60 fc fb call 0xfbfc607e
39: 41 bc e8 00 00 00 mov $0xe8,%r12d
3f: 4d rex.WRB
***
general protection fault in lo_rw_aio
tree: axboe
URL: https://kernel.googlesource.com/pub/scm/linux/kernel/git/axboe/linux.git
base: 44e96e364b04163ddddc8a24289cef4982b7e36e
arch: amd64
compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8
config: https://ci.syzbot.org/builds/f5d23472-69ec-45bc-b33a-b59f7c0e7493/config
syz repro: https://ci.syzbot.org/findings/556532c0-64a7-4471-9558-ea3a7a213af7/syz_repro
Oops: general protection fault, probably for non-canonical address 0xdffffc0000000009: 0000 [#1] SMP KASAN PTI
KASAN: null-ptr-deref in range [0x0000000000000048-0x000000000000004f]
CPU: 0 UID: 0 PID: 83 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT(full)
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
Workqueue: loop0 loop_rootcg_workfn
RIP: 0010:lo_rw_aio+0xc36/0xf20 include/linux/percpu-rwsem.h:-1
Code: fb 48 8d 35 00 00 00 00 bf 60 04 00 00 48 03 3b e8 9f 51 68 fb bb 30 00 00 00 4c 8b 74 24 58 49 83 c6 48 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 8b 6c fc fb 49 03 1e 48 89 d8 48
RSP: 0018:ffffc9000277f620 EFLAGS: 00010206
RAX: 0000000000000009 RBX: 0000000000000028 RCX: ffff888102725a00
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffc9000277f790 R08: ffff88810aa529a7 R09: 1ffff1102154a534
R10: dffffc0000000000 R11: ffffed102154a535 R12: dffffc0000000000
R13: 0000000000000000 R14: 0000000000000048 R15: ffff88810aa529b0
FS: 0000000000000000(0000) GS:ffff88818d6f1000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000558fd5b46210 CR3: 00000001bb152000 CR4: 00000000000006f0
Call Trace:
<TASK>
do_req_filebacked drivers/block/loop.c:432 [inline]
loop_handle_cmd drivers/block/loop.c:1954 [inline]
loop_process_work+0x960/0x11c0 drivers/block/loop.c:1989
process_one_work kernel/workqueue.c:3387 [inline]
process_scheduled_works+0xc3d/0x1630 kernel/workqueue.c:3470
worker_thread+0xa47/0xfb0 kernel/workqueue.c:3551
kthread+0x38b/0x480 kernel/kthread.c:436
ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
</TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:lo_rw_aio+0xc36/0xf20 include/linux/percpu-rwsem.h:-1
Code: fb 48 8d 35 00 00 00 00 bf 60 04 00 00 48 03 3b e8 9f 51 68 fb bb 30 00 00 00 4c 8b 74 24 58 49 83 c6 48 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 8b 6c fc fb 49 03 1e 48 89 d8 48
RSP: 0018:ffffc9000277f620 EFLAGS: 00010206
RAX: 0000000000000009 RBX: 0000000000000028 RCX: ffff888102725a00
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffc9000277f790 R08: ffff88810aa529a7 R09: 1ffff1102154a534
R10: dffffc0000000000 R11: ffffed102154a535 R12: dffffc0000000000
R13: 0000000000000000 R14: 0000000000000048 R15: ffff88810aa529b0
FS: 0000000000000000(0000) GS:ffff88818d6f1000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000558fd5b46210 CR3: 0000000169ee2000 CR4: 00000000000006f0
----------------
Code disassembly (best guess):
0: fb sti
1: 48 8d 35 00 00 00 00 lea 0x0(%rip),%rsi # 0x8
8: bf 60 04 00 00 mov $0x460,%edi
d: 48 03 3b add (%rbx),%rdi
10: e8 9f 51 68 fb call 0xfb6851b4
15: bb 30 00 00 00 mov $0x30,%ebx
1a: 4c 8b 74 24 58 mov 0x58(%rsp),%r14
1f: 49 83 c6 48 add $0x48,%r14
23: 4c 89 f0 mov %r14,%rax
26: 48 c1 e8 03 shr $0x3,%rax
* 2a: 42 80 3c 20 00 cmpb $0x0,(%rax,%r12,1) <-- trapping instruction
2f: 74 08 je 0x39
31: 4c 89 f7 mov %r14,%rdi
34: e8 8b 6c fc fb call 0xfbfc6cc4
39: 49 03 1e add (%r14),%rbx
3c: 48 89 d8 mov %rbx,%rax
3f: 48 rex.W
***
If these findings have caused you to resend the series or submit a
separate fix, please add the following tag to your commit message:
Tested-by: syzbot@syzkaller.appspotmail.com
---
This report is generated by a bot. It may contain errors.
syzbot ci engineers can be reached at syzkaller@googlegroups.com.
To test a fix for this bug, please reply with `#syz test`
(on a separate line) and attach the patch to the email.
Notes:
- The patch will be applied on top of the tested series (as an
incremental fix).
- To test a new version of the whole series, please send it directly
to syzbot@lists.linux.dev.
- Arguments like custom git repos and branches are not supported.
^ permalink raw reply [flat|nested] 5+ messages in thread
* Re: [PATCH v1 0/2] block: brd/loop error-path cleanup
2026-08-31 15:20 [PATCH v1 0/2] block: brd/loop error-path cleanup Iván Ezequiel Rodriguez
` (2 preceding siblings ...)
2026-09-01 6:59 ` [syzbot ci] Re: block: brd/loop error-path cleanup syzbot ci
@ 2026-09-15 12:10 ` Shin'ichiro Kawasaki
3 siblings, 0 replies; 5+ messages in thread
From: Shin'ichiro Kawasaki @ 2026-09-15 12:10 UTC (permalink / raw)
To: Iván Ezequiel Rodriguez; +Cc: Jens Axboe, linux-block, linux-kernel
On Aug 31, 2026 / 12:20, Iván Ezequiel Rodriguez wrote:
> Hi,
>
> Two small error-path cleanups in brd and loop.
>
> Patch 1 destroys the brd xarray on allocation failure after xa_init().
> Patch 2 restores backing-file GFP mask, clears lo_backing_file /
> lo_device, and re-enables uevents when loop_configure() fails after
> loop_assign_backing_file().
>
> Base: v7.3-rc1
>
> Tested: built bzImage with CONFIG_BLK_DEV_RAM=y and CONFIG_BLK_DEV_LOOP=y;
> booted QEMU initramfs smoke (ram0 present + LOOP_CONFIGURE happy path).
FYI, blktests CI trial run caught loop/012 failure for this patch series. The
kernel reported KASAN null-ptr-deref as below:
2026-09-14T17:55:39Z {detected_level="unknown"} [ 3622.477316] run blktests loop/012 at 2026-09-14 17:55:39
2026-09-14T17:55:40Z {detected_level="unknown"} [ 3623.520634] loop0: detected capacity change from 0 to 6144
2026-09-14T17:55:40Z {detected_level="unknown"} [ 3623.530439] loop0: p1
2026-09-14T17:55:40Z {detected_level="unknown"} [ 3623.633046] loop0: detected capacity change from 0 to 6144
2026-09-14T17:55:40Z {detected_level="unknown"} [ 3623.643002] loop0: p1
2026-09-14T17:55:40Z {detected_level="unknown"} [ 3623.693612] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000009: 0000 [#1] SMP KASAN NOPTI
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.695495] KASAN: null-ptr-deref in range [0x0000000000000048-0x000000000000004f]
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.696865] CPU: 0 UID: 0 PID: 28463 Comm: kworker/u16:27 Tainted: G E 7.3.0-rc2 #1 PREEMPT(lazy)
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.698871] Tainted: [E]=UNSIGNED_MODULE
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.699766] Hardware name: KubeVirt None/RHEL, BIOS 1.16.3-4.el9 04/01/2014
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.701145] Workqueue: loop0 loop_rootcg_workfn [loop]
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.702235] RIP: 0010:lo_rw_aio.isra.0+0x61c/0xe00 [loop]
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.703357] Code: 00 0f 85 fa 06 00 00 4c 89 63 30 41 83 ff 01 0f 84 f6 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8d 7d 48 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 d7 06 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.706843] RSP: 0018:ffff888132667a48 EFLAGS: 00010216
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.707993] RAX: dffffc0000000000 RBX: ffff888133df8090 RCX: ffffffffc0c78e40
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.709446] RDX: 0000000000000009 RSI: 0000000000000004 RDI: 0000000000000048
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.710897] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed10267bf014
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.712355] R10: ffff888133df80a7 R11: ffff8881474e6468 R12: 0000000000000000
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.713813] R13: 0000000000000000 R14: ffff888133df80b0 R15: 0000000000000000
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.715280] FS: 0000000000000000(0000) GS:ffff8882ac2cb000(0000) knlGS:0000000000000000
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.716901] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.718158] CR2: 000056307edcb0a8 CR3: 00000001487b0006 CR4: 0000000000770ef0
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.719640] PKRU: 55555554
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.720439] Call Trace:
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.721189] <TASK>
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.721888] ? srso_alias_return_thunk+0x5/0xfbef5
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.723020] ? __lock_acquire+0x677/0xc90
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.724034] ? __pfx_lo_rw_aio.isra.0+0x10/0x10 [loop]
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.725232] ? lock_acquire.part.0+0xc7/0x240
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.726304] ? srso_alias_return_thunk+0x5/0xfbef5
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.727445] ? mark_held_locks+0x40/0x70
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.728464] ? _raw_spin_unlock_irq+0x28/0x50
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.729555] ? srso_alias_return_thunk+0x5/0xfbef5
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.730706] ? lockdep_hardirqs_on_prepare.part.0+0x9b/0x140
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.732002] loop_process_work+0x692/0xe80 [loop]
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.733169] process_one_work+0x916/0x16b0
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.734234] ? __pfx_process_one_work+0x10/0x10
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.735361] ? lock_acquire.part.0+0xc7/0x240
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.736485] ? lock_is_held_type+0x9a/0x110
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.737564] ? srso_alias_return_thunk+0x5/0xfbef5
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.738745] worker_thread+0x60b/0x1000
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.739781] ? __pfx_worker_thread+0x10/0x10
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.740900] kthread+0x35f/0x460
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.741842] ? srso_alias_return_thunk+0x5/0xfbef5
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.743050] ? __pfx_kthread+0x10/0x10
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.744095] ret_from_fork+0x558/0x850
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.745129] ? __pfx_ret_from_fork+0x10/0x10
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.746235] ? srso_alias_return_thunk+0x5/0xfbef5
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.747411] ? __switch_to+0x479/0xd60
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.748422] ? __switch_to_asm+0x39/0x70
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.749445] ? __pfx_kthread+0x10/0x10
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.750437] ret_from_fork_asm+0x1a/0x30
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.751462] </TASK>
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.752218] Modules linked in: vsock_loopback(E) vmw_vsock_virtio_transport_common(E) vmw_vsock_vmci_transport(E) vsock(E) vmw_vmci(E) dm_dust(E) loop(E) iw_cm(E) ib_cm(E) ib_core(E) xfs(E) tun(E) iTCO_wdt(E) nvme(E) intel_pmc_bxt(E) nvme_core(E) intel_rapl_msr(E) intel_rapl_common(E) i2c_i801(E) nvme_keyring(E) pcspkr(E) nvme_auth(E) i2c_smbus(E) virtio_balloon(E) lpc_ich(E) virtio_scsi(E) bochs(E) serio_raw(E) qemu_fw_cfg(E)
2026-09-14T17:55:41Z {detected_level="debug"} [ 3623.752350] Unloaded tainted modules: nvme_tcp(E):2 rdma_cm(E):63 nvme_rdma(E):63 nvmet_rdma(E):63 siw(E):63 nvmet(E):126 nvme_fabrics(E):126 nvme_loop(E):63 loop(E):28 ublk_drv(E):2 null_blk(E):47 scsi_debug(E):56 amd_atl(E):1 edac_mce_amd(E):1 bpf_preload(E):1 [last unloaded: scsi_debug(E)]
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.764501] ---[ end trace 0000000000000000 ]---
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.766235] RIP: 0010:lo_rw_aio.isra.0+0x61c/0xe00 [loop]
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.768862] Code: 00 0f 85 fa 06 00 00 4c 89 63 30 41 83 ff 01 0f 84 f6 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8d 7d 48 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 d7 06 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.772272] RSP: 0018:ffff888132667a48 EFLAGS: 00010216
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.773285] RAX: dffffc0000000000 RBX: ffff888133df8090 RCX: ffffffffc0c78e40
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.774121] RDX: 0000000000000009 RSI: 0000000000000004 RDI: 0000000000000048
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.774942] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed10267bf014
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.775743] R10: ffff888133df80a7 R11: ffff8881474e6468 R12: 0000000000000000
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.776634] R13: 0000000000000000 R14: ffff888133df80b0 R15: 0000000000000000
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.777789] FS: 0000000000000000(0000) GS:ffff8882ac3cb000(0000) knlGS:0000000000000000
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.778601] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.779448] CR2: 0000555d8efd7d5c CR3: 000000011ecad006 CR4: 0000000000770ef0
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.780308] PKRU: 55555554
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.807921] ------------[ cut here ]------------
2026-09-14T17:55:41Z {detected_level="warn"} [ 3623.808875] WARNING: kernel/kthread.c:134 at free_kthread_struct+0x10e/0x150, CPU#2: swapper/2/0
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.812044] Modules linked in: vsock_loopback(E) vmw_vsock_virtio_transport_common(E) vmw_vsock_vmci_transport(E) vsock(E) vmw_vmci(E) dm_dust(E) loop(E) iw_cm(E) ib_cm(E) ib_core(E) xfs(E) tun(E) iTCO_wdt(E) nvme(E) intel_pmc_bxt(E) nvme_core(E) intel_rapl_msr(E) intel_rapl_common(E) i2c_i801(E) nvme_keyring(E) pcspkr(E) nvme_auth(E) i2c_smbus(E) virtio_balloon(E) lpc_ich(E) virtio_scsi(E) bochs(E) serio_raw(E) qemu_fw_cfg(E)
2026-09-14T17:55:41Z {detected_level="debug"} [ 3623.812233] Unloaded tainted modules: nvme_tcp(E):2 rdma_cm(E):63 nvme_rdma(E):63 nvmet_rdma(E):63 siw(E):63 nvmet(E):126 nvme_fabrics(E):126 nvme_loop(E):63 loop(E):28 ublk_drv(E):2 null_blk(E):47 scsi_debug(E):56 amd_atl(E):1 edac_mce_amd(E):1 bpf_preload(E):1 [last unloaded: scsi_debug(E)]
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.827023] CPU: 2 UID: 0 PID: 0 Comm: swapper/2 Tainted: G D E 7.3.0-rc2 #1 PREEMPT(lazy)
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.829334] Tainted: [D]=DIE, [E]=UNSIGNED_MODULE
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.830574] Hardware name: KubeVirt None/RHEL, BIOS 1.16.3-4.el9 04/01/2014
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.832140] RIP: 0010:free_kthread_struct+0x10e/0x150
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.833455] Code: 75 57 48 8b bd e0 00 00 00 e8 ae e6 a0 00 48 89 ef 5b 5d 41 5c e9 a2 e6 a0 00 5b 5d 41 5c e9 d4 7c aa ff 0f 0b e9 3a ff ff ff <0f> 0b eb 94 e8 09 ae aa 00 e9 22 ff ff ff 4c 89 e7 e8 2c ae aa 00
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.837259] RSP: 0018:ffff888235108d30 EFLAGS: 00010282
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.838625] RAX: dffffc0000000000 RBX: ffff8881474e35c0 RCX: ffffffff815b9352
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.840298] RDX: 1ffff1102950ff1b RSI: 0000000000000000 RDI: ffff88814a87f8d8
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.841983] RBP: ffff88814a87f800 R08: 0000000000000000 R09: ffffed1028e9cca1
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.843626] R10: ffff8881474e650b R11: ffff88810012bcd8 R12: ffff8881474e40d0
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.845291] R13: 0000000000000000 R14: ffff888100bf0000 R15: ffff8881474e64a0
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.846965] FS: 0000000000000000(0000) GS:ffff8882ac3cb000(0000) knlGS:0000000000000000
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.848762] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.850254] CR2: 0000555d93a66788 CR3: 00000000066a6001 CR4: 0000000000770ef0
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.851935] PKRU: 55555554
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.852983] Call Trace:
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.853983] <IRQ>
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.854922] free_task+0x12d/0x170
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.856064] ? rcu_do_batch+0x349/0x1980
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.857284] rcu_do_batch+0x34e/0x1980
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.858477] ? __pfx_rcu_do_batch+0x10/0x10
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.859728] ? _raw_spin_unlock_irqrestore+0x45/0x60
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.861194] ? srso_alias_return_thunk+0x5/0xfbef5
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.862512] ? trace_hardirqs_on+0x18/0x160
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.863746] ? srso_alias_return_thunk+0x5/0xfbef5
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.865062] ? _raw_spin_unlock_irqrestore+0x45/0x60
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.866372] rcu_core+0x475/0x7d0
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.867446] ? __pfx_rcu_core+0x10/0x10
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.868589] ? srso_alias_return_thunk+0x5/0xfbef5
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.869867] handle_softirqs+0x1e0/0x880
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.870995] ? __pfx_handle_softirqs+0x10/0x10
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.872158] ? srso_alias_return_thunk+0x5/0xfbef5
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.873376] __irq_exit_rcu+0x15f/0x290
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.874451] irq_exit_rcu+0xe/0x20
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.875464] sysvec_apic_timer_interrupt+0x71/0x90
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.876684] </IRQ>
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.877505] <TASK>
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.878318] asm_sysvec_apic_timer_interrupt+0x1a/0x20
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.879560] RIP: 0010:pv_native_safe_halt+0xf/0x20
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.880766] Code: 20 d0 e9 7f a4 13 fc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d d3 72 2c 00 fb f4 <e9> 57 a4 13 fc 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.884461] RSP: 0018:ffff888100c37df0 EFLAGS: 00000246
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.885747] RAX: 0000000000000002 RBX: 0000000000000000 RCX: ffffffff84fcb57f
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.887308] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8173ec01
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.888869] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffed1046a27cbd
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.890360] R10: ffff88823513e5eb R11: 0000000000000002 R12: 1ffff11020186fc1
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.891937] R13: ffff888100bf0000 R14: dffffc0000000000 R15: 0000000000000000
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.893633] ? ct_kernel_exit.isra.0+0xbf/0xf0
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.894752] ? cpuidle_idle_call+0x251/0x310
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.895868] default_idle+0x9/0x20
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.896872] default_idle_call+0x6a/0xb0
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.897917] cpuidle_idle_call+0x251/0x310
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.898958] ? __pfx_cpuidle_idle_call+0x10/0x10
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.900053] ? mark_tsc_async_resets+0x1/0x20
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.901105] ? srso_alias_return_thunk+0x5/0xfbef5
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.902195] ? trace_hardirqs_on+0x18/0x160
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.903207] do_idle+0xf8/0x1f0
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.904069] cpu_startup_entry+0x54/0x60
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.905039] start_secondary+0x21f/0x2c0
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.906004] ? __pfx_start_secondary+0x10/0x10
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.907040] common_startup_64+0x13e/0x151
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.908037] </TASK>
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.908740] irq event stamp: 37826328
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.909658] hardirqs last enabled at (37826327): [<ffffffff81917ba3>] tick_nohz_idle_exit+0x113/0x320
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.911373] hardirqs last disabled at (37826328): [<ffffffff84fd759a>] __schedule+0x10ea/0x1ac0
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.913026] softirqs last enabled at (37826310): [<ffffffff815df2c8>] handle_softirqs+0x638/0x880
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.914697] softirqs last disabled at (37826297): [<ffffffff815df67f>] __irq_exit_rcu+0x15f/0x290
2026-09-14T17:55:41Z {detected_level="unknown"} [ 3623.916365] ---[ end trace 0000000000000000 ]--
^ permalink raw reply [flat|nested] 5+ messages in thread
end of thread, other threads:[~2026-09-15 12:10 UTC | newest]
Thread overview: 5+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2026-08-31 15:20 [PATCH v1 0/2] block: brd/loop error-path cleanup Iván Ezequiel Rodriguez
2026-08-31 15:20 ` [PATCH v1 1/2] block: brd: destroy xa on allocation failure Iván Ezequiel Rodriguez
2026-08-31 15:20 ` [PATCH v1 2/2] block: loop: restore state on loop_configure() error Iván Ezequiel Rodriguez
2026-09-01 6:59 ` [syzbot ci] Re: block: brd/loop error-path cleanup syzbot ci
2026-09-15 12:10 ` [PATCH v1 0/2] " Shin'ichiro Kawasaki
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox
all inboxes | Powered by JetHome®