Warning: Permanently added '10.128.1.118' (ED25519) to the list of known hosts. executing program syzkaller login: [ 54.519067][ T25] audit: type=1800 audit(1789446391.560:2): pid=4189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor199" name="attr_allow_any_host" dev="configfs" ino=29572 res=0 errno=0 [ 54.524239][ T4189] nvmet_tcp: enabling port 1 (127.0.0.1:4420) [ 54.540961][ T25] audit: type=1800 audit(1789446391.570:3): pid=4189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor199" name="addr_trtype" dev="configfs" ino=29578 res=0 errno=0 [ 54.567772][ T25] audit: type=1800 audit(1789446391.570:4): pid=4189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor199" name="addr_adrfam" dev="configfs" ino=29579 res=0 errno=0 [ 54.589900][ T25] audit: type=1800 audit(1789446391.570:5): pid=4189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor199" name="addr_traddr" dev="configfs" ino=29580 res=0 errno=0 [ 54.611009][ T25] audit: type=1800 audit(1789446391.570:6): pid=4189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor199" name="addr_trsvcid" dev="configfs" ino=29581 res=0 errno=0 [ 54.643156][ T1092] nvmet: creating controller 1 for subsystem test for NQN nqn.2014-08.org.nvmexpress:uuid:887399ac-2cb9-4af5-b8d6-b8548dde7135. [ 54.663738][ T4189] nvme nvme0: creating 2 I/O queues. [ 54.671310][ T4189] nvme nvme0: mapped 2/0/0 default/read/poll queues. [ 54.681029][ T4189] nvme nvme0: new ctrl: NQN "test", addr 127.0.0.1:4420 [ 55.189520][ C0] nvme nvme0: starting error recovery [ 55.197954][ T7] [ 55.200287][ T7] ====================================================== [ 55.207290][ T7] WARNING: possible circular locking dependency detected [ 55.210206][ T154] nvme nvme0: Reconnecting in 10 seconds... [ 55.214294][ T7] syzkaller #0 Not tainted [ 55.224546][ T7] ------------------------------------------------------ [ 55.231542][ T7] kworker/0:0/7 is trying to acquire lock: [ 55.237327][ T7] ffff888147899030 ((work_completion)(&queue->io_work)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 55.247856][ T7] [ 55.247856][ T7] but task is already holding lock: [ 55.255214][ T7] ffffc90000cc7d00 ((work_completion)(&queue->release_work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 55.266583][ T7] [ 55.266583][ T7] which lock already depends on the new lock. [ 55.266583][ T7] [ 55.276960][ T7] [ 55.276960][ T7] the existing dependency chain (in reverse order) is: [ 55.285952][ T7] [ 55.285952][ T7] -> #2 ((work_completion)(&queue->release_work)){+.+.}-{0:0}: [ 55.295655][ T7] process_one_work+0x7ba/0xff0 [ 55.301009][ T7] worker_thread+0xad7/0x12a0 [ 55.306185][ T7] kthread+0x42e/0x520 [ 55.310750][ T7] ret_from_fork+0x1f/0x30 [ 55.315666][ T7] [ 55.315666][ T7] -> #1 ((wq_completion)nvmet-wq){+.+.}-{0:0}: [ 55.323978][ T7] flush_workqueue+0x16a/0x1390 [ 55.329330][ T7] nvmet_tcp_install_queue+0x7e/0x380 [ 55.335206][ T7] nvmet_install_queue+0x335/0x760 [ 55.340815][ T7] nvmet_execute_admin_connect+0x332/0x750 [ 55.347119][ T7] nvmet_tcp_io_work+0x1923/0x8510 [ 55.352734][ T7] process_one_work+0x867/0xff0 [ 55.358100][ T7] worker_thread+0xad7/0x12a0 [ 55.363299][ T7] kthread+0x42e/0x520 [ 55.367868][ T7] ret_from_fork+0x1f/0x30 [ 55.372786][ T7] [ 55.372786][ T7] -> #0 ((work_completion)(&queue->io_work)){+.+.}-{0:0}: [ 55.382054][ T7] __lock_acquire+0x2c66/0x7b50 [ 55.387405][ T7] lock_acquire+0x19e/0x400 [ 55.392408][ T7] __flush_work+0x116/0x210 [ 55.397409][ T7] nvmet_tcp_release_queue_work+0x32f/0xdb0 [ 55.403803][ T7] process_one_work+0x867/0xff0 [ 55.409155][ T7] worker_thread+0xad7/0x12a0 [ 55.414333][ T7] kthread+0x42e/0x520 [ 55.418898][ T7] ret_from_fork+0x1f/0x30 [ 55.423815][ T7] [ 55.423815][ T7] other info that might help us debug this: [ 55.423815][ T7] [ 55.434016][ T7] Chain exists of: [ 55.434016][ T7] (work_completion)(&queue->io_work) --> (wq_completion)nvmet-wq --> (work_completion)(&queue->release_work) [ 55.434016][ T7] [ 55.451451][ T7] Possible unsafe locking scenario: [ 55.451451][ T7] [ 55.458879][ T7] CPU0 CPU1 [ 55.464220][ T7] ---- ---- [ 55.469563][ T7] lock((work_completion)(&queue->release_work)); [ 55.476044][ T7] lock((wq_completion)nvmet-wq); [ 55.483650][ T7] lock((work_completion)(&queue->release_work)); [ 55.492646][ T7] lock((work_completion)(&queue->io_work)); [ 55.498692][ T7] [ 55.498692][ T7] *** DEADLOCK *** [ 55.498692][ T7] [ 55.506811][ T7] 2 locks held by kworker/0:0/7: [ 55.511722][ T7] #0: ffff888021e46938 ((wq_completion)nvmet-wq){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 55.522137][ T7] #1: ffffc90000cc7d00 ((work_completion)(&queue->release_work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 55.533933][ T7] [ 55.533933][ T7] stack backtrace: [ 55.539811][ T7] CPU: 0 PID: 7 Comm: kworker/0:0 Not tainted syzkaller #0 [ 55.546990][ T7] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 55.557025][ T7] Workqueue: nvmet-wq nvmet_tcp_release_queue_work [ 55.563539][ T7] Call Trace: [ 55.566805][ T7] [ 55.569719][ T7] dump_stack_lvl+0x188/0x250 [ 55.574383][ T7] ? load_image+0x410/0x410 [ 55.578872][ T7] ? show_regs_print_info+0x20/0x20 [ 55.584054][ T7] ? print_circular_bug+0x12b/0x1a0 [ 55.589231][ T7] check_noncircular+0x296/0x330 [ 55.594153][ T7] ? look_up_lock_class+0x71/0x110 [ 55.599246][ T7] ? add_chain_block+0x9b0/0x9b0 [ 55.604165][ T7] ? lockdep_lock+0xf1/0x1f0 [ 55.608737][ T7] ? stack_trace_save+0xf0/0xf0 [ 55.613570][ T7] ? mark_lock+0x94/0x320 [ 55.617879][ T7] ? _find_first_zero_bit+0xd1/0xf0 [ 55.623059][ T7] __lock_acquire+0x2c66/0x7b50 [ 55.627893][ T7] ? stack_trace_snprint+0xe0/0xe0 [ 55.632986][ T7] ? lockdep_unlock+0x143/0x2e0 [ 55.637817][ T7] ? verify_lock_unused+0x140/0x140 [ 55.642994][ T7] ? add_lock_to_list+0x18d/0x280 [ 55.647996][ T7] ? __lock_acquire+0x2844/0x7b50 [ 55.653005][ T7] lock_acquire+0x19e/0x400 [ 55.657491][ T7] ? __flush_work+0xfa/0x210 [ 55.662063][ T7] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 55.667935][ T7] ? read_lock_is_recursive+0x10/0x10 [ 55.673287][ T7] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 55.679159][ T7] ? _raw_spin_unlock+0x40/0x40 [ 55.683991][ T7] ? rcu_is_watching+0x11/0xa0 [ 55.688734][ T7] __flush_work+0x116/0x210 [ 55.693216][ T7] ? __flush_work+0xfa/0x210 [ 55.697789][ T7] ? flush_work+0x20/0x20 [ 55.702098][ T7] ? lock_chain_count+0x20/0x20 [ 55.706929][ T7] ? lockdep_hardirqs_on_prepare+0x7c0/0x7c0 [ 55.712890][ T7] ? __local_bh_enable_ip+0x136/0x1c0 [ 55.718260][ T7] ? lockdep_hardirqs_on+0x94/0x140 [ 55.723476][ T7] ? __local_bh_enable_ip+0x136/0x1c0 [ 55.728829][ T7] ? _local_bh_enable+0xa0/0xa0 [ 55.733658][ T7] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 55.739632][ T7] ? __lock_acquire+0x7b50/0x7b50 [ 55.744638][ T7] ? refcount_dec_and_test+0x70/0x70 [ 55.749905][ T7] ? nvmet_tcp_accept_work+0xe50/0xe50 [ 55.755345][ T7] nvmet_tcp_release_queue_work+0x32f/0xdb0 [ 55.761226][ T7] process_one_work+0x867/0xff0 [ 55.766067][ T7] ? worker_detach_from_pool+0x240/0x240 [ 55.771678][ T7] ? lockdep_hardirqs_off+0x70/0x100 [ 55.776945][ T7] ? _raw_spin_lock_irq+0xb7/0xf0 [ 55.781950][ T7] ? _raw_spin_lock_irqsave+0x100/0x100 [ 55.787475][ T7] ? wq_worker_running+0x97/0x170