INFO: task jbd2/sda1-8:5175 blocked for more than 143 seconds. Not tainted 6.15.0-rc3-syzkaller-00076-ge72e9e693307 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:jbd2/sda1-8 state:D stack:26616 pid:5175 tgid:5175 ppid:2 task_flags:0x240040 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5382 [inline] __schedule+0x116f/0x5de0 kernel/sched/core.c:6767 __schedule_loop kernel/sched/core.c:6845 [inline] schedule+0xe7/0x3a0 kernel/sched/core.c:6860 io_schedule+0xbf/0x130 kernel/sched/core.c:7742 bit_wait_io+0x15/0xe0 kernel/sched/wait_bit.c:247 __wait_on_bit+0x62/0x180 kernel/sched/wait_bit.c:49 out_of_line_wait_on_bit+0xd9/0x110 kernel/sched/wait_bit.c:64 wait_on_bit_io include/linux/wait_bit.h:105 [inline] __wait_on_buffer+0x64/0x70 fs/buffer.c:123 wait_on_buffer include/linux/buffer_head.h:413 [inline] jbd2_journal_commit_transaction+0x382e/0x6830 fs/jbd2/commit.c:808 kjournald2+0x1f4/0x760 fs/jbd2/journal.c:201 kthread+0x3c2/0x780 kernel/kthread.c:464 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:153 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 INFO: task syz-executor:5828 blocked for more than 143 seconds. Not tainted 6.15.0-rc3-syzkaller-00076-ge72e9e693307 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:23432 pid:5828 tgid:5828 ppid:5826 task_flags:0x440100 flags:0x00000002 Call Trace: context_switch kernel/sched/core.c:5382 [inline] __schedule+0x116f/0x5de0 kernel/sched/core.c:6767 __schedule_loop kernel/sched/core.c:6845 [inline] schedule+0xe7/0x3a0 kernel/sched/core.c:6860 io_schedule+0xbf/0x130 kernel/sched/core.c:7742 bit_wait_io+0x15/0xe0 kernel/sched/wait_bit.c:247 __wait_on_bit+0x62/0x180 kernel/sched/wait_bit.c:49 out_of_line_wait_on_bit+0xd9/0x110 kernel/sched/wait_bit.c:64 wait_on_bit_io include/linux/wait_bit.h:105 [inline] do_get_write_access+0x93d/0x12a0 fs/jbd2/transaction.c:1092 jbd2_journal_get_write_access+0x1d6/0x280 fs/jbd2/transaction.c:1241 __ext4_journal_get_write_access+0x6a/0x340 fs/ext4/ext4_jbd2.c:241 ext4_reserve_inode_write+0x1be/0x320 fs/ext4/inode.c:5892 __ext4_mark_inode_dirty+0x197/0x870 fs/ext4/inode.c:6066 ext4_dirty_inode+0xd9/0x130 fs/ext4/inode.c:6103 __mark_inode_dirty+0x1eb/0xe50 fs/fs-writeback.c:2527 generic_update_time+0xcf/0xf0 fs/inode.c:2064 inode_update_time fs/inode.c:2077 [inline] __file_update_time fs/inode.c:2305 [inline] file_update_time+0x17d/0x1c0 fs/inode.c:2335 ext4_page_mkwrite+0x35e/0x1750 fs/ext4/inode.c:6221 do_page_mkwrite+0x171/0x380 mm/memory.c:3287 do_shared_fault mm/memory.c:5594 [inline] do_fault mm/memory.c:5656 [inline] do_pte_missing+0x29c/0x3fb0 mm/memory.c:4160 handle_pte_fault mm/memory.c:5997 [inline] __handle_mm_fault+0x103d/0x2a40 mm/memory.c:6140 handle_mm_fault+0x3fe/0xad0 mm/memory.c:6309 do_user_addr_fault+0x60c/0x1370 arch/x86/mm/fault.c:1337 handle_page_fault arch/x86/mm/fault.c:1480 [inline] exc_page_fault+0x5c/0xc0 arch/x86/mm/fault.c:1538 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623 RIP: 0033:0x7f4f05677dcf RSP: 002b:00007ffced7862c0 EFLAGS: 00010246 RAX: 00007f4f03944000 RBX: 00000000000000d1 RCX: 0000000000000000 RDX: 1ffffffff15110f8 RSI: 000055557a7bb6a0 RDI: 0000000000000001 RBP: 00007ffced7865b0 R08: 000055557a7bba58 R09: 000000000000221f R10: 00007f4f05600000 R11: 00007ffced7867c0 R12: 00007ffced786610 R13: 0000000000000004 R14: 00007ffced786330 R15: 00007ffced786400 INFO: task syz.0.1120:8727 blocked for more than 144 seconds. Not tainted 6.15.0-rc3-syzkaller-00076-ge72e9e693307 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.0.1120 state:D stack:28344 pid:8727 tgid:8727 ppid:7045 task_flags:0x440040 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:5382 [inline] __schedule+0x116f/0x5de0 kernel/sched/core.c:6767 __schedule_loop kernel/sched/core.c:6845 [inline] schedule+0xe7/0x3a0 kernel/sched/core.c:6860 io_schedule+0xbf/0x130 kernel/sched/core.c:7742 bit_wait_io+0x15/0xe0 kernel/sched/wait_bit.c:247 __wait_on_bit+0x62/0x180 kernel/sched/wait_bit.c:49 out_of_line_wait_on_bit+0xd9/0x110 kernel/sched/wait_bit.c:64 wait_on_bit_io include/linux/wait_bit.h:105 [inline] do_get_write_access+0x93d/0x12a0 fs/jbd2/transaction.c:1092 jbd2_journal_get_write_access+0x1d6/0x280 fs/jbd2/transaction.c:1241 __ext4_journal_get_write_access+0x6a/0x340 fs/ext4/ext4_jbd2.c:241 ext4_reserve_inode_write+0x1be/0x320 fs/ext4/inode.c:5892 __ext4_mark_inode_dirty+0x197/0x870 fs/ext4/inode.c:6066 ext4_dirty_inode+0xd9/0x130 fs/ext4/inode.c:6103 __mark_inode_dirty+0x1eb/0xe50 fs/fs-writeback.c:2527 generic_update_time+0xcf/0xf0 fs/inode.c:2064 inode_update_time fs/inode.c:2077 [inline] __file_update_time fs/inode.c:2305 [inline] file_update_time+0x17d/0x1c0 fs/inode.c:2335 ext4_page_mkwrite+0x35e/0x1750 fs/ext4/inode.c:6221 do_page_mkwrite+0x171/0x380 mm/memory.c:3287 do_shared_fault mm/memory.c:5594 [inline] do_fault mm/memory.c:5656 [inline] do_pte_missing+0x29c/0x3fb0 mm/memory.c:4160 handle_pte_fault mm/memory.c:5997 [inline] __handle_mm_fault+0x103d/0x2a40 mm/memory.c:6140 handle_mm_fault+0x3fe/0xad0 mm/memory.c:6309 do_user_addr_fault+0x60c/0x1370 arch/x86/mm/fault.c:1337 handle_page_fault arch/x86/mm/fault.c:1480 [inline] exc_page_fault+0x5c/0xc0 arch/x86/mm/fault.c:1538 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623 RIP: 0033:0x7f64f026f282 RSP: 002b:00007ffe19bf2600 EFLAGS: 00010202 RAX: 0000000000005008 RBX: 00007f64f10e5720 RCX: 0000000000000000 RDX: 0000001b33c1b000 RSI: 0000000000000008 RDI: 00007f64f10e5720 RBP: 0000000000000014 R08: 00007f64ef9ff048 R09: 00007f64f05a2000 R10: 00007f64ef9ff008 R11: 0000000000000001 R12: ffffffff847f23df R13: 00007f64f05b6038 R14: 0000000000000008 R15: ffffffffffffb000 INFO: task syz.3.1121:8729 blocked for more than 144 seconds. Not tainted 6.15.0-rc3-syzkaller-00076-ge72e9e693307 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.3.1121 state:D stack:28632 pid:8729 tgid:8729 ppid:5844 task_flags:0x440040 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:5382 [inline] __schedule+0x116f/0x5de0 kernel/sched/core.c:6767 __schedule_loop kernel/sched/core.c:6845 [inline] schedule+0xe7/0x3a0 kernel/sched/core.c:6860 io_schedule+0xbf/0x130 kernel/sched/core.c:7742 bit_wait_io+0x15/0xe0 kernel/sched/wait_bit.c:247 __wait_on_bit+0x62/0x180 kernel/sched/wait_bit.c:49 out_of_line_wait_on_bit+0xd9/0x110 kernel/sched/wait_bit.c:64 wait_on_bit_io include/linux/wait_bit.h:105 [inline] do_get_write_access+0x93d/0x12a0 fs/jbd2/transaction.c:1092 jbd2_journal_get_write_access+0x1d6/0x280 fs/jbd2/transaction.c:1241 __ext4_journal_get_write_access+0x6a/0x340 fs/ext4/ext4_jbd2.c:241 ext4_reserve_inode_write+0x1be/0x320 fs/ext4/inode.c:5892 __ext4_mark_inode_dirty+0x197/0x870 fs/ext4/inode.c:6066 ext4_dirty_inode+0xd9/0x130 fs/ext4/inode.c:6103 __mark_inode_dirty+0x1eb/0xe50 fs/fs-writeback.c:2527 generic_update_time+0xcf/0xf0 fs/inode.c:2064 inode_update_time fs/inode.c:2077 [inline] __file_update_time fs/inode.c:2305 [inline] file_update_time+0x17d/0x1c0 fs/inode.c:2335 ext4_page_mkwrite+0x35e/0x1750 fs/ext4/inode.c:6221 do_page_mkwrite+0x171/0x380 mm/memory.c:3287 do_shared_fault mm/memory.c:5594 [inline] do_fault mm/memory.c:5656 [inline] do_pte_missing+0x29c/0x3fb0 mm/memory.c:4160 handle_pte_fault mm/memory.c:5997 [inline] __handle_mm_fault+0x103d/0x2a40 mm/memory.c:6140 handle_mm_fault+0x3fe/0xad0 mm/memory.c:6309 do_user_addr_fault+0x60c/0x1370 arch/x86/mm/fault.c:1337 handle_page_fault arch/x86/mm/fault.c:1480 [inline] exc_page_fault+0x5c/0xc0 arch/x86/mm/fault.c:1538 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623 RIP: 0033:0x7fd35b26547b RSP: 002b:00007ffe38480990 EFLAGS: 00010246 RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000000000000000 RDX: 0000001b30920000 RSI: 0000000000400000 RDI: 00007fd35b498d50 RBP: 0000000000000000 R08: 0000000000000004 R09: 0000000000040000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 R13: 00000000000927c0 R14: 0000000000033f53 R15: 00007ffe38480c40 INFO: task syz.2.1122:8730 blocked for more than 145 seconds. Not tainted 6.15.0-rc3-syzkaller-00076-ge72e9e693307 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.2.1122 state:D stack:27752 pid:8730 tgid:8730 ppid:5841 task_flags:0x440040 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5382 [inline] __schedule+0x116f/0x5de0 kernel/sched/core.c:6767 __schedule_loop kernel/sched/core.c:6845 [inline] schedule+0xe7/0x3a0 kernel/sched/core.c:6860 io_schedule+0xbf/0x130 kernel/sched/core.c:7742 bit_wait_io+0x15/0xe0 kernel/sched/wait_bit.c:247 __wait_on_bit+0x62/0x180 kernel/sched/wait_bit.c:49 out_of_line_wait_on_bit+0xd9/0x110 kernel/sched/wait_bit.c:64 wait_on_bit_io include/linux/wait_bit.h:105 [inline] do_get_write_access+0x93d/0x12a0 fs/jbd2/transaction.c:1092 jbd2_journal_get_write_access+0x1d6/0x280 fs/jbd2/transaction.c:1241 __ext4_journal_get_write_access+0x6a/0x340 fs/ext4/ext4_jbd2.c:241 ext4_reserve_inode_write+0x1be/0x320 fs/ext4/inode.c:5892 __ext4_mark_inode_dirty+0x197/0x870 fs/ext4/inode.c:6066 ext4_dirty_inode+0xd9/0x130 fs/ext4/inode.c:6103 __mark_inode_dirty+0x1eb/0xe50 fs/fs-writeback.c:2527 generic_update_time+0xcf/0xf0 fs/inode.c:2064 inode_update_time fs/inode.c:2077 [inline] __file_update_time fs/inode.c:2305 [inline] file_update_time+0x17d/0x1c0 fs/inode.c:2335 ext4_page_mkwrite+0x35e/0x1750 fs/ext4/inode.c:6221 do_page_mkwrite+0x171/0x380 mm/memory.c:3287 do_shared_fault mm/memory.c:5594 [inline] do_fault mm/memory.c:5656 [inline] do_pte_missing+0x29c/0x3fb0 mm/memory.c:4160 handle_pte_fault mm/memory.c:5997 [inline] __handle_mm_fault+0x103d/0x2a40 mm/memory.c:6140 handle_mm_fault+0x3fe/0xad0 mm/memory.c:6309 do_user_addr_fault+0x60c/0x1370 arch/x86/mm/fault.c:1337 handle_page_fault arch/x86/mm/fault.c:1480 [inline] exc_page_fault+0x5c/0xc0 arch/x86/mm/fault.c:1538 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623 RIP: 0033:0x7f3245c6547b RSP: 002b:00007ffdeb9c9d90 EFLAGS: 00010246 RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000000000000000 RDX: 0000001b30820000 RSI: 0000000000400000 RDI: 00007f3245e98d50 RBP: 0000000000000000 R08: 0000000000000004 R09: 0000000000040000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 R13: 00000000000927c0 R14: 0000000000033f3f R15: 00007ffdeb9ca040 INFO: task syz.1.1123:8731 blocked for more than 145 seconds. Not tainted 6.15.0-rc3-syzkaller-00076-ge72e9e693307 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.1.1123 state:D stack:28632 pid:8731 tgid:8731 ppid:5846 task_flags:0x440040 flags:0x00000004 Call Trace: context_switch kernel/sched/core.c:5382 [inline] __schedule+0x116f/0x5de0 kernel/sched/core.c:6767 __schedule_loop kernel/sched/core.c:6845 [inline] schedule+0xe7/0x3a0 kernel/sched/core.c:6860 io_schedule+0xbf/0x130 kernel/sched/core.c:7742 bit_wait_io+0x15/0xe0 kernel/sched/wait_bit.c:247 __wait_on_bit+0x62/0x180 kernel/sched/wait_bit.c:49 out_of_line_wait_on_bit+0xd9/0x110 kernel/sched/wait_bit.c:64 wait_on_bit_io include/linux/wait_bit.h:105 [inline] do_get_write_access+0x93d/0x12a0 fs/jbd2/transaction.c:1092 jbd2_journal_get_write_access+0x1d6/0x280 fs/jbd2/transaction.c:1241 __ext4_journal_get_write_access+0x6a/0x340 fs/ext4/ext4_jbd2.c:241 ext4_reserve_inode_write+0x1be/0x320 fs/ext4/inode.c:5892 __ext4_mark_inode_dirty+0x197/0x870 fs/ext4/inode.c:6066 ext4_dirty_inode+0xd9/0x130 fs/ext4/inode.c:6103 __mark_inode_dirty+0x1eb/0xe50 fs/fs-writeback.c:2527 generic_update_time+0xcf/0xf0 fs/inode.c:2064 inode_update_time fs/inode.c:2077 [inline] __file_update_time fs/inode.c:2305 [inline] file_update_time+0x17d/0x1c0 fs/inode.c:2335 ext4_page_mkwrite+0x35e/0x1750 fs/ext4/inode.c:6221 do_page_mkwrite+0x171/0x380 mm/memory.c:3287 do_shared_fault mm/memory.c:5594 [inline] do_fault mm/memory.c:5656 [inline] do_pte_missing+0x29c/0x3fb0 mm/memory.c:4160 handle_pte_fault mm/memory.c:5997 [inline] __handle_mm_fault+0x103d/0x2a40 mm/memory.c:6140 handle_mm_fault+0x3fe/0xad0 mm/memory.c:6309 do_user_addr_fault+0x60c/0x1370 arch/x86/mm/fault.c:1337 handle_page_fault arch/x86/mm/fault.c:1480 [inline] exc_page_fault+0x5c/0xc0 arch/x86/mm/fault.c:1538 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623 RIP: 0033:0x7f096da6547b RSP: 002b:00007fffc82a6630 EFLAGS: 00010246 RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000000000000000 RDX: 0000001b30720000 RSI: 0000000000400000 RDI: 00007f096dc98d50 RBP: 0000000000000000 R08: 0000000000000004 R09: 0000000000040000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 R13: 00000000000927c0 R14: 0000000000033f91 R15: 00007fffc82a68e0 Showing all locks held in the system: 3 locks held by kworker/u8:0/12: #0: ffff8880b8539f18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 kernel/sched/core.c:605 #1: ffff8880b8523c48 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x2c1/0x8e0 kernel/sched/psi.c:987 #2: ffffffff9adacbf8 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_deactivate+0x135/0x3a0 lib/debugobjects.c:873 1 lock held by khungtaskd/31: #0: ffffffff8e3bf440 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline] #0: ffffffff8e3bf440 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:841 [inline] #0: ffffffff8e3bf440 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 kernel/locking/lockdep.c:6764 6 locks held by kworker/u8:8/3477: #0: ffff888021af5148 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 kernel/workqueue.c:3213 #1: ffffc9000c607d18 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 kernel/workqueue.c:3214 #2: ffff8880354d80e0 (&type->s_umount_key#32){++++}-{4:4}, at: super_trylock_shared+0x1e/0xf0 fs/super.c:562 #3: ffff8880354dab98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: do_writepages+0x1b2/0x820 mm/page-writeback.c:2656 #4: ffff8880354dc950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410 fs/jbd2/transaction.c:444 #5: ffff888078ec65d8 (&ei->i_data_sem){++++}-{4:4}, at: ext4_map_blocks+0x355/0x1390 fs/ext4/inode.c:705 1 lock held by klogd/5202: #0: ffff8880b8539f18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 kernel/sched/core.c:605 2 locks held by getty/5597: #0: ffff8880358da0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 drivers/tty/tty_ldisc.c:243 #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 drivers/tty/n_tty.c:2222 3 locks held by syz-executor/5828: #0: ffff888078419e48 (vm_lock){++++}-{0:0}, at: do_user_addr_fault+0x452/0x1370 arch/x86/mm/fault.c:1328 #1: ffff8880354d8518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x171/0x380 mm/memory.c:3287 #2: ffff8880354dc950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410 fs/jbd2/transaction.c:444 2 locks held by kworker/u9:6/5851: #0: ffff888025df3148 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 kernel/workqueue.c:3213 #1: ffffc90003f2fd18 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 kernel/workqueue.c:3214 3 locks held by syz.0.1120/8727: #0: ffff888033a18bc8 (vm_lock){++++}-{0:0}, at: do_user_addr_fault+0x452/0x1370 arch/x86/mm/fault.c:1328 #1: ffff8880354d8518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x171/0x380 mm/memory.c:3287 #2: ffff8880354dc950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410 fs/jbd2/transaction.c:444 3 locks held by syz.3.1121/8729: #0: ffff8880780a3e48 (vm_lock){++++}-{0:0}, at: do_user_addr_fault+0x452/0x1370 arch/x86/mm/fault.c:1328 #1: ffff8880354d8518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x171/0x380 mm/memory.c:3287 #2: ffff8880354dc950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410 fs/jbd2/transaction.c:444 3 locks held by syz.2.1122/8730: #0: ffff88806cf91448 (vm_lock){++++}-{0:0}, at: do_user_addr_fault+0x452/0x1370 arch/x86/mm/fault.c:1328 #1: ffff8880354d8518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x171/0x380 mm/memory.c:3287 #2: ffff8880354dc950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410 fs/jbd2/transaction.c:444 3 locks held by syz.1.1123/8731: #0: ffff88803032b588 (vm_lock){++++}-{0:0}, at: do_user_addr_fault+0x452/0x1370 arch/x86/mm/fault.c:1328 #1: ffff8880354d8518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x171/0x380 mm/memory.c:3287 #2: ffff8880354dc950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410 fs/jbd2/transaction.c:444 ============================================= NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc3-syzkaller-00076-ge72e9e693307 #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120 nmi_cpu_backtrace+0x27b/0x390 lib/nmi_backtrace.c:113 nmi_trigger_cpumask_backtrace+0x29c/0x300 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:158 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:274 [inline] watchdog+0xf70/0x12c0 kernel/hung_task.c:437 kthread+0x3c2/0x780 kernel/kthread.c:464 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:153 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 1150 Comm: kworker/u8:7 Not tainted 6.15.0-rc3-syzkaller-00076-ge72e9e693307 #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 Workqueue: 0x0 (events_unbound) RIP: 0010:__list_del_entry_valid_or_report+0xc3/0x200 lib/list_debug.c:65 Code: 0f 85 2d 01 00 00 48 39 5d 00 0f 85 97 00 00 00 48 b8 00 00 00 00 00 fc ff df 49 8d 6c 24 08 48 89 ea 48 c1 ea 03 80 3c 02 00 <0f> 85 10 01 00 00 49 3b 5c 24 08 0f 85 a8 00 00 00 5b b8 01 00 00 RSP: 0018:ffffc90003fbfd70 EFLAGS: 00000046 RAX: dffffc0000000000 RBX: ffff8880275a9c00 RCX: ffffffff8182a7b9 RDX: 1ffff110041d81c1 RSI: ffffffff8182a647 RDI: ffff8880275a9c08 RBP: ffff888020ec0e08 R08: 0000000000000005 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000000 R12: ffff888020ec0e00 R13: ffff8880275a9c78 R14: 0000000000000001 R15: ffff8880275a9c40 FS: 0000000000000000(0000) GS:ffff888124abf000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ffe29464248 CR3: 000000000e180000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: __list_del_entry_valid include/linux/list.h:124 [inline] __list_del_entry include/linux/list.h:215 [inline] list_del_init include/linux/list.h:287 [inline] worker_leave_idle+0x12f/0x350 kernel/workqueue.c:1073 worker_thread+0x347/0xf10 kernel/workqueue.c:3368 kthread+0x3c2/0x780 kernel/kthread.c:464 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:153 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245