BUG: workqueue lockup - pool cpus=0 node=0 flags=0x0 nice=0 stuck for 264s! Showing busy workqueues and worker pools: workqueue events: flags=0x0 pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=15/256 refcnt=19 in-flight: 3293:p9_poll_workfn p9_poll_workfn BAR(3578) BAR(3576) BAR(3574) pending: p9_read_work, p9_read_work, p9_write_work, p9_read_work, p9_write_work, p9_read_work, p9_write_work, p9_read_work, vmstat_shepherd, psi_avgs_work, ovs_dp_masks_rebalance, kfree_rcu_monitor, ima_keys_handler workqueue events_long: flags=0x0 pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 pending: defense_work_handler workqueue events_unbound: flags=0x2 pwq 4: cpus=0-1 flags=0x4 nice=0 active=5/512 refcnt=8 in-flight: 9:toggle_allocation_gate, 38:fsnotify_connector_destroy_workfn fsnotify_connector_destroy_workfn, 1104:fsnotify_mark_destroy_workfn fsnotify_mark_destroy_workfn workqueue events_power_efficient: flags=0x80 pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=6/256 refcnt=7 pending: neigh_managed_work, neigh_managed_work, neigh_periodic_work, neigh_periodic_work, do_cache_clean, check_lifetime workqueue rcu_gp: flags=0x8 pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 pending: srcu_invoke_callbacks workqueue mm_percpu_wq: flags=0x8 pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 pending: vmstat_update workqueue ipv6_addrconf: flags=0x40008 pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/1 refcnt=2 pending: addrconf_verify_work workqueue krxrpcd: flags=0x0 pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/1 refcnt=2 pending: rxrpc_peer_keepalive_worker pool 0: cpus=0 node=0 flags=0x0 nice=0 hung=265s workers=3 idle: 7 934 pool 4: cpus=0-1 flags=0x4 nice=0 hung=0s workers=6 idle: 9 11 3581 51 NMI backtrace for cpu 0 CPU: 0 PID: 3293 Comm: kworker/0:3 Not tainted 6.1.81-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 Workqueue: events p9_poll_workfn RIP: 0010:hlock_class kernel/locking/lockdep.c:228 [inline] RIP: 0010:check_wait_context kernel/locking/lockdep.c:4748 [inline] RIP: 0010:__lock_acquire+0x794/0x1f80 kernel/locking/lockdep.c:4999 Code: 8b 5d 00 81 e3 ff 1f 00 00 48 89 d8 48 c1 e8 06 48 8d 3c c5 20 52 49 90 be 08 00 00 00 e8 24 9b 77 00 48 0f a3 1d fc f6 de 0e <73> 1b 48 8d 04 5b 48 c1 e0 06 48 8d 98 20 b1 18 90 48 ba 00 00 00 RSP: 0018:ffffc900036ef8e0 EFLAGS: 00000057 RAX: 0000000000000001 RBX: 0000000000000669 RCX: ffffffff816a5b1c RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff904952e8 RBP: ffff888020bd0b28 R08: dffffc0000000000 R09: fffffbfff2092a5e R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 R13: ffff888020bd0b28 R14: 0000000000000001 R15: 0000000000000004 FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000056234fd18030 CR3: 000000000ce8e000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: lock_acquire+0x1f8/0x5a0 kernel/locking/lockdep.c:5662 __raw_spin_lock_irq include/linux/spinlock_api_smp.h:119 [inline] _raw_spin_lock_irq+0xcf/0x110 kernel/locking/spinlock.c:170 spin_lock_irq include/linux/spinlock.h:376 [inline] dma_buf_poll+0x16d/0x6a0 drivers/dma-buf/dma-buf.c:261 vfs_poll include/linux/poll.h:88 [inline] p9_fd_poll net/9p/trans_fd.c:238 [inline] p9_poll_mux net/9p/trans_fd.c:630 [inline] p9_poll_workfn+0x2cd/0x5c0 net/9p/trans_fd.c:1174 process_one_work+0x8a9/0x11d0 kernel/workqueue.c:2292 worker_thread+0xa47/0x1200 kernel/workqueue.c:2439 kthread+0x28d/0x320 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:307 INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.439 msecs ---------------- Code disassembly (best guess): 0: 8b 5d 00 mov 0x0(%rbp),%ebx 3: 81 e3 ff 1f 00 00 and $0x1fff,%ebx 9: 48 89 d8 mov %rbx,%rax c: 48 c1 e8 06 shr $0x6,%rax 10: 48 8d 3c c5 20 52 49 lea -0x6fb6ade0(,%rax,8),%rdi 17: 90 18: be 08 00 00 00 mov $0x8,%esi 1d: e8 24 9b 77 00 call 0x779b46 22: 48 0f a3 1d fc f6 de bt %rbx,0xedef6fc(%rip) # 0xedef726 29: 0e * 2a: 73 1b jae 0x47 <-- trapping instruction 2c: 48 8d 04 5b lea (%rbx,%rbx,2),%rax 30: 48 c1 e0 06 shl $0x6,%rax 34: 48 8d 98 20 b1 18 90 lea -0x6fe74ee0(%rax),%rbx 3b: 48 rex.W 3c: ba .byte 0xba 3d: 00 00 add %al,(%rax)