INFO: task syz.1.223:7189 blocked for more than 143 seconds. Tainted: G W 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.1.223 state:D stack:23928 pid:7189 tgid:7188 ppid:5837 task_flags:0x400140 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5357 [inline] __schedule+0x16f3/0x4c20 kernel/sched/core.c:6961 __schedule_loop kernel/sched/core.c:7043 [inline] schedule+0x165/0x360 kernel/sched/core.c:7058 io_schedule+0x81/0xe0 kernel/sched/core.c:7903 folio_wait_bit_common+0x6b5/0xb90 mm/filemap.c:1317 folio_lock include/linux/pagemap.h:1133 [inline] release_metapage+0x103/0xab0 fs/jfs/jfs_metapage.c:870 discard_metapage fs/jfs/jfs_metapage.h:88 [inline] __get_metapage+0x9a0/0xde0 fs/jfs/jfs_metapage.c:753 dtSplitPage+0x7f8/0x3b20 fs/jfs/jfs_dtree.c:1471 dtSplitUp fs/jfs/jfs_dtree.c:1092 [inline] dtInsert+0x109b/0x5f40 fs/jfs/jfs_dtree.c:871 jfs_create+0x6c8/0xa80 fs/jfs/namei.c:137 lookup_open fs/namei.c:3708 [inline] open_last_lookups fs/namei.c:3807 [inline] path_openat+0x14fd/0x3840 fs/namei.c:4043 do_filp_open+0x1fa/0x410 fs/namei.c:4073 do_sys_openat2+0x121/0x1c0 fs/open.c:1435 do_sys_open fs/open.c:1450 [inline] __do_sys_openat fs/open.c:1466 [inline] __se_sys_openat fs/open.c:1461 [inline] __x64_sys_openat+0x138/0x170 fs/open.c:1461 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fa41946ebe9 RSP: 002b:00007fa4176d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00007fa419695fa0 RCX: 00007fa41946ebe9 RDX: 0000000000101042 RSI: 0000200000000040 RDI: ffffffffffffff9c RBP: 00007fa4194f1e19 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000015 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fa419696038 R14: 00007fa419695fa0 R15: 00007ffcae9e83c8 INFO: task syz.1.223:7190 blocked for more than 143 seconds. Tainted: G W 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.1.223 state:D stack:26056 pid:7190 tgid:7188 ppid:5837 task_flags:0x400040 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5357 [inline] __schedule+0x16f3/0x4c20 kernel/sched/core.c:6961 __schedule_loop kernel/sched/core.c:7043 [inline] rt_mutex_schedule+0x77/0xf0 kernel/sched/core.c:7339 rt_mutex_slowlock_block kernel/locking/rtmutex.c:1647 [inline] __rt_mutex_slowlock kernel/locking/rtmutex.c:1721 [inline] __rt_mutex_slowlock_locked+0x1e04/0x25e0 kernel/locking/rtmutex.c:1760 rt_mutex_slowlock+0xb5/0x160 kernel/locking/rtmutex.c:1800 __rt_mutex_lock kernel/locking/rtmutex.c:1815 [inline] rwbase_write_lock+0x14f/0x750 kernel/locking/rwbase_rt.c:244 inode_lock include/linux/fs.h:869 [inline] open_last_lookups fs/namei.c:3804 [inline] path_openat+0x8e6/0x3840 fs/namei.c:4043 do_filp_open+0x1fa/0x410 fs/namei.c:4073 do_sys_openat2+0x121/0x1c0 fs/open.c:1435 do_sys_open fs/open.c:1450 [inline] __do_sys_openat fs/open.c:1466 [inline] __se_sys_openat fs/open.c:1461 [inline] __x64_sys_openat+0x138/0x170 fs/open.c:1461 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fa41946ebe9 RSP: 002b:00007fa4176b5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00007fa419696090 RCX: 00007fa41946ebe9 RDX: 0000000000000441 RSI: 0000200000000040 RDI: ffffffffffffff9c RBP: 00007fa4194f1e19 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000104 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fa419696128 R14: 00007fa419696090 R15: 00007ffcae9e83c8 INFO: task syz.1.223:7191 blocked for more than 143 seconds. Tainted: G W 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.1.223 state:D stack:28584 pid:7191 tgid:7188 ppid:5837 task_flags:0x400040 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5357 [inline] __schedule+0x16f3/0x4c20 kernel/sched/core.c:6961 __schedule_loop kernel/sched/core.c:7043 [inline] rt_mutex_schedule+0x77/0xf0 kernel/sched/core.c:7339 rt_mutex_slowlock_block kernel/locking/rtmutex.c:1647 [inline] __rt_mutex_slowlock kernel/locking/rtmutex.c:1721 [inline] __rt_mutex_slowlock_locked+0x1e04/0x25e0 kernel/locking/rtmutex.c:1760 rt_mutex_slowlock+0xb5/0x160 kernel/locking/rtmutex.c:1800 __rt_mutex_lock kernel/locking/rtmutex.c:1815 [inline] rwbase_write_lock+0x14f/0x750 kernel/locking/rwbase_rt.c:244 inode_lock include/linux/fs.h:869 [inline] open_last_lookups fs/namei.c:3804 [inline] path_openat+0x8e6/0x3840 fs/namei.c:4043 do_filp_open+0x1fa/0x410 fs/namei.c:4073 do_sys_openat2+0x121/0x1c0 fs/open.c:1435 do_sys_open fs/open.c:1450 [inline] __do_sys_openat fs/open.c:1466 [inline] __se_sys_openat fs/open.c:1461 [inline] __x64_sys_openat+0x138/0x170 fs/open.c:1461 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fa41946ebe9 RSP: 002b:00007fa417694038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 00007fa419696180 RCX: 00007fa41946ebe9 RDX: 0000000000103042 RSI: 0000200000000100 RDI: ffffffffffffff9c RBP: 00007fa4194f1e19 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fa419696218 R14: 00007fa419696180 R15: 00007ffcae9e83c8 INFO: task syz.1.223:7192 blocked for more than 143 seconds. Tainted: G W 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.1.223 state:D stack:28128 pid:7192 tgid:7188 ppid:5837 task_flags:0x400040 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5357 [inline] __schedule+0x16f3/0x4c20 kernel/sched/core.c:6961 __schedule_loop kernel/sched/core.c:7043 [inline] rt_mutex_schedule+0x77/0xf0 kernel/sched/core.c:7339 rt_mutex_slowlock_block kernel/locking/rtmutex.c:1647 [inline] __rt_mutex_slowlock kernel/locking/rtmutex.c:1721 [inline] __rt_mutex_slowlock_locked+0x1e04/0x25e0 kernel/locking/rtmutex.c:1760 rt_mutex_slowlock+0xb5/0x160 kernel/locking/rtmutex.c:1800 __rt_mutex_lock kernel/locking/rtmutex.c:1815 [inline] rwbase_write_lock+0x14f/0x750 kernel/locking/rwbase_rt.c:244 inode_lock_nested include/linux/fs.h:914 [inline] filename_create+0x1f8/0x3c0 fs/namei.c:4139 do_mkdirat+0xa0/0x590 fs/namei.c:4391 __do_sys_mkdirat fs/namei.c:4416 [inline] __se_sys_mkdirat fs/namei.c:4414 [inline] __x64_sys_mkdirat+0x87/0xa0 fs/namei.c:4414 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fa41946d457 RSP: 002b:00007fa417270e68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 RAX: ffffffffffffffda RBX: 00007fa417270ef0 RCX: 00007fa41946d457 RDX: 00000000000001ff RSI: 0000200000000000 RDI: 00000000ffffff9c RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 R13: 00007fa417270eb0 R14: 0000000000000000 R15: 0000200000002300 Showing all locks held in the system: 1 lock held by khungtaskd/38: #0: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline] #0: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:841 [inline] #0: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 kernel/locking/lockdep.c:6775 6 locks held by kworker/u8:3/57: #0: ffff88801a6f4138 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3211 [inline] #0: ffff88801a6f4138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 kernel/workqueue.c:3319 #1: ffffc9000123fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3212 [inline] #1: ffffc9000123fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 kernel/workqueue.c:3319 #2: ffffffff8ecc4540 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 net/core/net_namespace.c:658 #3: ffff888028ba70d8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:911 [inline] #3: ffff888028ba70d8 (&dev->mutex){....}-{4:4}, at: devl_dev_lock net/devlink/devl_internal.h:108 [inline] #3: ffff888028ba70d8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x10a/0x3d0 net/devlink/core.c:506 #4: ffff8880293da300 (&devlink->lock_key#18){+.+.}-{4:4}, at: devl_lock net/devlink/core.c:276 [inline] #4: ffff8880293da300 (&devlink->lock_key#18){+.+.}-{4:4}, at: devl_dev_lock net/devlink/devl_internal.h:109 [inline] #4: ffff8880293da300 (&devlink->lock_key#18){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x11c/0x3d0 net/devlink/core.c:506 #5: ffffffff8ecd13f8 (rtnl_mutex){+.+.}-{4:4}, at: nsim_init_netdevsim drivers/net/netdevsim/netdev.c:1018 [inline] #5: ffffffff8ecd13f8 (rtnl_mutex){+.+.}-{4:4}, at: nsim_create+0x800/0xf20 drivers/net/netdevsim/netdev.c:1101 3 locks held by kworker/1:2/1127: #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3211 [inline] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 kernel/workqueue.c:3319 #1: ffffc90004f17bc0 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3212 [inline] #1: ffffc90004f17bc0 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 kernel/workqueue.c:3319 #2: ffff88805fa6c260 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x2ac/0x31b0 drivers/net/netdevsim/fib.c:1490 4 locks held by kworker/u8:8/1516: #0: ffff8881404bb938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3211 [inline] #0: ffff8881404bb938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 kernel/workqueue.c:3319 #1: ffffc90005a07bc0 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3212 [inline] #1: ffffc90005a07bc0 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 kernel/workqueue.c:3319 #2: ffff88805ea5c0d0 (&type->s_umount_key#65){++++}-{4:4}, at: super_trylock_shared+0x20/0xf0 fs/super.c:563 #3: ffff88805be332f8 (&jfs_ip->commit_mutex){+.+.}-{4:4}, at: jfs_commit_inode+0x1ca/0x530 fs/jfs/inode.c:102 3 locks held by kworker/u8:9/1539: #0: ffff88802fc21938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3211 [inline] #0: ffff88802fc21938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 kernel/workqueue.c:3319 #1: ffffc90005ae7bc0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3212 [inline] #1: ffffc90005ae7bc0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 kernel/workqueue.c:3319 #2: ffffffff8ecd13f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline] #2: ffffffff8ecd13f8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x119/0x15a0 net/ipv6/addrconf.c:4194 2 locks held by kworker/u8:14/4780: 2 locks held by getty/5594: #0: ffff88823bf728a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243 #1: ffffc90003e832e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 drivers/tty/n_tty.c:2222 4 locks held by syz.1.223/7189: #0: ffff88805ea5c488 (sb_writers#19){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 fs/namespace.c:557 #1: ffff88805be336c8 (&type->i_mutex_dir_key#16){++++}-{4:4}, at: inode_lock include/linux/fs.h:869 [inline] #1: ffff88805be336c8 (&type->i_mutex_dir_key#16){++++}-{4:4}, at: open_last_lookups fs/namei.c:3804 [inline] #1: ffff88805be336c8 (&type->i_mutex_dir_key#16){++++}-{4:4}, at: path_openat+0x8e6/0x3840 fs/namei.c:4043 #2: ffff88805be332f8 (&jfs_ip->commit_mutex){+.+.}-{4:4}, at: jfs_create+0x1f5/0xa80 fs/jfs/namei.c:100 #3: ffff88805be36dd8 (&jfs_ip->commit_mutex/1){+.+.}-{4:4}, at: jfs_create+0x210/0xa80 fs/jfs/namei.c:101 2 locks held by syz.1.223/7190: #0: ffff88805ea5c488 (sb_writers#19){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 fs/namespace.c:557 #1: ffff88805be336c8 (&type->i_mutex_dir_key#16){++++}-{4:4}, at: inode_lock include/linux/fs.h:869 [inline] #1: ffff88805be336c8 (&type->i_mutex_dir_key#16){++++}-{4:4}, at: open_last_lookups fs/namei.c:3804 [inline] #1: ffff88805be336c8 (&type->i_mutex_dir_key#16){++++}-{4:4}, at: path_openat+0x8e6/0x3840 fs/namei.c:4043 2 locks held by syz.1.223/7191: #0: ffff88805ea5c488 (sb_writers#19){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 fs/namespace.c:557 #1: ffff88805be336c8 (&type->i_mutex_dir_key#16){++++}-{4:4}, at: inode_lock include/linux/fs.h:869 [inline] #1: ffff88805be336c8 (&type->i_mutex_dir_key#16){++++}-{4:4}, at: open_last_lookups fs/namei.c:3804 [inline] #1: ffff88805be336c8 (&type->i_mutex_dir_key#16){++++}-{4:4}, at: path_openat+0x8e6/0x3840 fs/namei.c:4043 2 locks held by syz.1.223/7192: #0: ffff88805ea5c488 (sb_writers#19){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 fs/namespace.c:557 #1: ffff88805be336c8 (&type->i_mutex_dir_key#16/1){+.+.}-{4:4}, at: inode_lock_nested include/linux/fs.h:914 [inline] #1: ffff88805be336c8 (&type->i_mutex_dir_key#16/1){+.+.}-{4:4}, at: filename_create+0x1f8/0x3c0 fs/namei.c:4139 1 lock held by syz-executor/7515: #0: ffffffff8ecd13f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock net/core/rtnetlink.c:80 [inline] #0: ffffffff8ecd13f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_nets_lock net/core/rtnetlink.c:341 [inline] #0: ffffffff8ecd13f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 net/core/rtnetlink.c:4056 3 locks held by syz-executor/7554: #0: ffffffff8ed37400 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1218 #1: ffffffff8ed371f8 (genl_mutex){+.+.}-{4:4}, at: genl_lock net/netlink/genetlink.c:35 [inline] #1: ffffffff8ed371f8 (genl_mutex){+.+.}-{4:4}, at: genl_op_lock net/netlink/genetlink.c:60 [inline] #1: ffffffff8ed371f8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 net/netlink/genetlink.c:1209 #2: ffffffff8ecd13f8 (rtnl_mutex){+.+.}-{4:4}, at: wg_set_device+0x15b/0x1fe0 drivers/net/wireguard/netlink.c:514 2 locks held by syz-executor/7578: 1 lock held by syz-executor/7581: #0: ffffffff8ecd13f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock net/core/rtnetlink.c:80 [inline] #0: ffffffff8ecd13f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_nets_lock net/core/rtnetlink.c:341 [inline] #0: ffffffff8ecd13f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 net/core/rtnetlink.c:4056 2 locks held by syz-executor/7690: #0: ffffffff8ecc4540 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 net/core/net_namespace.c:566 #1: ffffffff8ecd13f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline] #1: ffffffff8ecd13f8 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 net/core/dev.c:2082 2 locks held by cmp/7703: ============================================= NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G W 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT_{RT,(full)} Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 Call Trace: dump_stack_lvl+0x189/0x250 lib/dump_stack.c:120 nmi_cpu_backtrace+0x39e/0x3d0 lib/nmi_backtrace.c:113 nmi_trigger_cpumask_backtrace+0x17a/0x300 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:328 [inline] watchdog+0xf93/0xfe0 kernel/hung_task.c:491 kthread+0x711/0x8a0 kernel/kthread.c:463 ret_from_fork+0x3fc/0x770 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 1031 Comm: irq/29-virtio0- Tainted: G W 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT_{RT,(full)} Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 RIP: 0010:arch_irqs_disabled_flags arch/x86/include/asm/irqflags.h:146 [inline] RIP: 0010:check_preemption_disabled+0x5c/0x120 lib/smp_processor_id.c:19 Code: b4 ff 06 48 3b 4c 24 08 0f 85 cc 00 00 00 48 83 c4 10 5b 41 5e 41 5f 5d e9 81 94 03 00 cc 48 c7 04 24 00 00 00 00 9c 8f 04 24 04 24 00 02 00 00 74 c8 65 4c 8b 3c 25 08 b0 f5 91 41 f6 47 2f RSP: 0018:ffffc90004997548 EFLAGS: 00000046 RAX: 0000000000000001 RBX: ffff888025990000 RCX: 0000000080000000 RDX: 0000000000000000 RSI: ffffffff8d04aab6 RDI: ffffffff8b620a80 RBP: ffffc900049976f0 R08: ffffffff8f1d3937 R09: 1ffffffff1e3a726 R10: dffffc0000000000 R11: fffffbfff1e3a727 R12: ffff8880b893bbe0 R13: 1ffff92000932ec8 R14: 1ffff11017127776 R15: 0000000000000075 FS: 0000000000000000(0000) GS:ffff8881269c5000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fd974f38e9c CR3: 0000000024cf4000 CR4: 00000000003526f0 Call Trace: lockdep_recursion_inc kernel/locking/lockdep.c:465 [inline] lockdep_hardirqs_on_prepare+0xc3/0x2a0 kernel/locking/lockdep.c:4409 trace_hardirqs_on+0x28/0x40 kernel/trace/trace_preemptirq.c:78 __call_rcu_common kernel/rcu/tree.c:3148 [inline] call_rcu+0x6ff/0x9c0 kernel/rcu/tree.c:3243 slab_free_hook mm/slub.c:2381 [inline] slab_free mm/slub.c:4680 [inline] kmem_cache_free+0x402/0x510 mm/slub.c:4782 blk_update_request+0x57e/0xe60 block/blk-mq.c:989 blk_mq_end_request+0x3e/0x70 block/blk-mq.c:1151 blk_flush_complete_seq+0x687/0xce0 block/blk-flush.c:191 flush_end_io+0xc46/0xf30 block/blk-flush.c:250 __blk_mq_end_request+0x4df/0x6e0 block/blk-mq.c:1141 scsi_end_request+0x4b3/0x830 drivers/scsi/scsi_lib.c:670 scsi_io_completion+0x131/0x390 drivers/scsi/scsi_lib.c:1078 blk_complete_reqs block/blk-mq.c:1226 [inline] blk_done_softirq+0x107/0x160 block/blk-mq.c:1231 handle_softirqs+0x22c/0x710 kernel/softirq.c:579 __do_softirq kernel/softirq.c:613 [inline] __local_bh_enable_ip+0x179/0x270 kernel/softirq.c:259 local_bh_enable include/linux/bottom_half.h:33 [inline] irq_forced_thread_fn+0xe9/0x120 kernel/irq/manage.c:1156 irq_thread+0x427/0x690 kernel/irq/manage.c:1256 kthread+0x711/0x8a0 kernel/kthread.c:463 ret_from_fork+0x3fc/0x770 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245