INFO: task syz-executor.3:14952 blocked for more than 143 seconds. Not tainted 6.0.0-rc6-syzkaller-00210-gbf682942cd26 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.3 state:D stack:27960 pid:14952 ppid: 3639 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5182 [inline] __schedule+0x91f/0xdf0 kernel/sched/core.c:6494 schedule+0xcb/0x190 kernel/sched/core.c:6570 rwsem_down_write_slowpath+0xf1c/0x1350 kernel/locking/rwsem.c:1182 __down_write_common kernel/locking/rwsem.c:1297 [inline] __down_write kernel/locking/rwsem.c:1306 [inline] down_write+0x163/0x170 kernel/locking/rwsem.c:1553 inode_lock include/linux/fs.h:756 [inline] __generic_file_fsync+0x96/0x190 fs/libfs.c:1119 generic_file_fsync+0x6f/0xe0 fs/libfs.c:1156 vfs_fsync_range fs/sync.c:188 [inline] vfs_fsync fs/sync.c:202 [inline] do_fsync fs/sync.c:212 [inline] __do_sys_fdatasync fs/sync.c:225 [inline] __se_sys_fdatasync fs/sync.c:223 [inline] __x64_sys_fdatasync+0xb1/0x100 fs/sync.c:223 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x3d/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7fef4d88a669 RSP: 002b:00007fef4ea48168 EFLAGS: 00000246 ORIG_RAX: 000000000000004b RAX: ffffffffffffffda RBX: 00007fef4d9ac050 RCX: 00007fef4d88a669 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 RBP: 00007fef4d8e5560 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fffa12a2dcf R14: 00007fef4ea48300 R15: 0000000000022000 Showing all locks held in the system: 1 lock held by rcu_tasks_kthre/13: #0: ffffffff8cb233f0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x30/0xd00 kernel/rcu/tasks.h:507 1 lock held by rcu_tasks_trace/14: #0: ffffffff8cb23bf0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x30/0xd00 kernel/rcu/tasks.h:507 1 lock held by khungtaskd/29: #0: ffffffff8cb23220 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 3 locks held by kworker/u4:4/93: 2 locks held by getty/3284: #0: ffff888145dd6098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 drivers/tty/tty_ldisc.c:244 #1: ffffc90002d232f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x53b/0x1650 drivers/tty/n_tty.c:2177 2 locks held by kworker/u4:6/4216: #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7f2/0xdb0 #1: ffffc90007fdfd00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x831/0xdb0 kernel/workqueue.c:2264 2 locks held by syz-executor.3/14949: 1 lock held by syz-executor.3/14952: #0: ffff888049be5180 (&type->i_mutex_dir_key#14){++++}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline] #0: ffff888049be5180 (&type->i_mutex_dir_key#14){++++}-{3:3}, at: __generic_file_fsync+0x96/0x190 fs/libfs.c:1119 1 lock held by udevd/14989: #0: ffff88801bb9f6c0 (mapping.invalidate_lock#2){.+.+}-{3:3}, at: filemap_invalidate_lock_shared include/linux/fs.h:811 [inline] #0: ffff88801bb9f6c0 (mapping.invalidate_lock#2){.+.+}-{3:3}, at: page_cache_ra_unbounded+0xf0/0x640 mm/readahead.c:220 1 lock held by syz-executor.3/15010: #0: ffff8880b9a39c18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x25/0x110 kernel/sched/core.c:544 2 locks held by kworker/u4:9/15339: #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7f2/0xdb0 #1: ffffc9000766fd00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x831/0xdb0 kernel/workqueue.c:2264 2 locks held by kworker/u4:10/15340: #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7f2/0xdb0 #1: ffffc900071f7d00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x831/0xdb0 kernel/workqueue.c:2264 2 locks held by kworker/u4:11/15341: #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7f2/0xdb0 #1: ffffc90006d4fd00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x831/0xdb0 kernel/workqueue.c:2264 2 locks held by kworker/u4:12/15342: #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7f2/0xdb0 #1: ffffc90007b17d00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x831/0xdb0 kernel/workqueue.c:2264 4 locks held by kworker/u4:13/15346: #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7f2/0xdb0 #1: ffffc90007b57d00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x831/0xdb0 kernel/workqueue.c:2264 #2: ffff8880b9a39c18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x25/0x110 kernel/sched/core.c:544 #3: ffff8880b9a27748 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x5b3/0x8a0 kernel/sched/psi.c:885 2 locks held by kworker/u4:15/15353: #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7f2/0xdb0 #1: ffffc90007fcfd00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x831/0xdb0 kernel/workqueue.c:2264 2 locks held by kworker/u4:16/15357: #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7f2/0xdb0 #1: ffffc9000801fd00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x831/0xdb0 kernel/workqueue.c:2264 2 locks held by kworker/u4:17/15358: #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7f2/0xdb0 #1: ffffc90007b27d00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x831/0xdb0 kernel/workqueue.c:2264 2 locks held by kworker/u4:18/15361: #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7f2/0xdb0 #1: ffffc900068dfd00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x831/0xdb0 kernel/workqueue.c:2264 2 locks held by kworker/u4:19/15362: #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7f2/0xdb0 #1: ffffc90007fefd00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x831/0xdb0 kernel/workqueue.c:2264 2 locks held by kworker/u4:20/15363: #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7f2/0xdb0 #1: ffffc9000804fd00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x831/0xdb0 kernel/workqueue.c:2264 2 locks held by kworker/u4:21/15364: #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7f2/0xdb0 #1: ffffc9000805fd00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x831/0xdb0 kernel/workqueue.c:2264 2 locks held by kworker/u4:22/15365: #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7f2/0xdb0 #1: ffffc9000806fd00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x831/0xdb0 kernel/workqueue.c:2264 2 locks held by kworker/u4:23/15366: #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7f2/0xdb0 #1: ffffc9000807fd00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x831/0xdb0 kernel/workqueue.c:2264 2 locks held by kworker/u4:24/15367: #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7f2/0xdb0 #1: ffffc90008487d00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x831/0xdb0 kernel/workqueue.c:2264 2 locks held by kworker/u4:25/15368: #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7f2/0xdb0 #1: ffffc90008497d00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x831/0xdb0 kernel/workqueue.c:2264 2 locks held by kworker/u4:26/15369: 2 locks held by kworker/u4:27/15370: #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7f2/0xdb0 #1: ffffc900084b7d00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x831/0xdb0 kernel/workqueue.c:2264 2 locks held by kworker/u4:28/15371: #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7f2/0xdb0 #1: ffffc900084c7d00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x831/0xdb0 kernel/workqueue.c:2264 2 locks held by kworker/u4:29/15372: #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7f2/0xdb0 #1: ffffc9000802fd00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x831/0xdb0 kernel/workqueue.c:2264 2 locks held by kworker/u4:30/20994: #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7f2/0xdb0 #1: ffffc9000b89fd00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x831/0xdb0 kernel/workqueue.c:2264 2 locks held by kworker/u4:31/20995: #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7f2/0xdb0 #1: ffffc9000b88fd00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x831/0xdb0 kernel/workqueue.c:2264 2 locks held by kworker/u4:32/20996: #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7f2/0xdb0 #1: ffffc9000b7ffd00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x831/0xdb0 kernel/workqueue.c:2264 2 locks held by kworker/u4:33/21455: #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7f2/0xdb0 #1: ffffc900033a7d00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x831/0xdb0 kernel/workqueue.c:2264 2 locks held by kworker/u4:34/21456: #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7f2/0xdb0 #1: ffffc900035bfd00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x831/0xdb0 kernel/workqueue.c:2264 2 locks held by kworker/u4:35/21457: #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7f2/0xdb0 #1: ffffc9000369fd00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x831/0xdb0 kernel/workqueue.c:2264 2 locks held by kworker/u4:36/21458: #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7f2/0xdb0 #1: ffffc900036afd00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x831/0xdb0 kernel/workqueue.c:2264 2 locks held by kworker/u4:37/21459: #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7f2/0xdb0 #1: ffffc900036cfd00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x831/0xdb0 kernel/workqueue.c:2264 2 locks held by kworker/u4:38/21460: #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7f2/0xdb0 #1: ffffc900036dfd00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x831/0xdb0 kernel/workqueue.c:2264 2 locks held by kworker/u4:39/21461: #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7f2/0xdb0 #1: ffffc900036ffd00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x831/0xdb0 kernel/workqueue.c:2264 2 locks held by kworker/u4:40/21462: #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7f2/0xdb0 #1: ffffc9000370fd00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x831/0xdb0 kernel/workqueue.c:2264 2 locks held by kworker/u4:41/21463: #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7f2/0xdb0 #1: ffffc9000371fd00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x831/0xdb0 kernel/workqueue.c:2264 2 locks held by kworker/u4:42/21464: #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7f2/0xdb0 #1: ffffc9000373fd00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x831/0xdb0 kernel/workqueue.c:2264 2 locks held by kworker/u4:43/21465: #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7f2/0xdb0 #1: ffffc9000375fd00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x831/0xdb0 kernel/workqueue.c:2264 2 locks held by kworker/u4:44/21466: #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7f2/0xdb0 #1: ffffc9000376fd00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x831/0xdb0 kernel/workqueue.c:2264 2 locks held by kworker/u4:45/21467: #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7f2/0xdb0 #1: ffffc9000377fd00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x831/0xdb0 kernel/workqueue.c:2264 2 locks held by kworker/u4:46/21468: #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7f2/0xdb0 #1: ffffc9000365fd00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x831/0xdb0 kernel/workqueue.c:2264 2 locks held by kworker/u4:47/21469: #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7f2/0xdb0 #1: ffffc9000366fd00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x831/0xdb0 kernel/workqueue.c:2264 2 locks held by kworker/u4:48/21470: #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7f2/0xdb0 #1: ffffc9000378fd00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x831/0xdb0 kernel/workqueue.c:2264 2 locks held by kworker/u4:49/21471: #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7f2/0xdb0 #1: ffffc9000379fd00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x831/0xdb0 kernel/workqueue.c:2264 2 locks held by kworker/u4:50/21472: #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7f2/0xdb0 #1: ffffc900037afd00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x831/0xdb0 kernel/workqueue.c:2264 2 locks held by kworker/u4:51/21473: #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7f2/0xdb0 #1: ffffc900037cfd00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x831/0xdb0 kernel/workqueue.c:2264 2 locks held by kworker/u4:52/21474: #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7f2/0xdb0 #1: ffffc900037dfd00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x831/0xdb0 kernel/workqueue.c:2264 2 locks held by kworker/u4:53/21475: #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7f2/0xdb0 #1: ffffc900037efd00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x831/0xdb0 kernel/workqueue.c:2264 2 locks held by kworker/u4:54/21476: #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7f2/0xdb0 #1: ffffc900037ffd00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x831/0xdb0 kernel/workqueue.c:2264 2 locks held by kworker/u4:55/21477: #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7f2/0xdb0 #1: ffffc9000380fd00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x831/0xdb0 kernel/workqueue.c:2264 2 locks held by kworker/u4:56/21478: #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7f2/0xdb0 #1: ffffc9000381fd00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x831/0xdb0 kernel/workqueue.c:2264 2 locks held by kworker/u4:58/21483: #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7f2/0xdb0 #1: ffffc90003887d00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x831/0xdb0 kernel/workqueue.c:2264 2 locks held by kworker/u4:59/21486: #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7f2/0xdb0 #1: ffffc90003897d00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x831/0xdb0 kernel/workqueue.c:2264 2 locks held by kworker/u4:60/21489: #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7f2/0xdb0 #1: ffffc900032b7d00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x831/0xdb0 kernel/workqueue.c:2264 2 locks held by kworker/u4:61/21503: #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7f2/0xdb0 #1: ffffc9000384fd00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x831/0xdb0 kernel/workqueue.c:2264 2 locks held by kworker/u4:62/21507: #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7f2/0xdb0 #1: ffffc90003937d00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x831/0xdb0 kernel/workqueue.c:2264 2 locks held by kworker/u4:63/21526: #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7f2/0xdb0 #1: ffffc90003adfd00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x831/0xdb0 kernel/workqueue.c:2264 2 locks held by kworker/u4:64/21527: #0: ffff888012069138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7f2/0xdb0 #1: ffffc900038b7d00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x831/0xdb0 kernel/workqueue.c:2264 2 locks held by kworker/u4:68/21557: ============================================= NMI backtrace for cpu 1 CPU: 1 PID: 29 Comm: khungtaskd Not tainted 6.0.0-rc6-syzkaller-00210-gbf682942cd26 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x1b1/0x28e lib/dump_stack.c:106 nmi_cpu_backtrace+0x425/0x450 lib/nmi_backtrace.c:111 nmi_trigger_cpumask_backtrace+0x169/0x280 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:148 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:212 [inline] watchdog+0xcd5/0xd20 kernel/hung_task.c:369 kthread+0x266/0x300 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 21527 Comm: kworker/u4:64 Not tainted 6.0.0-rc6-syzkaller-00210-gbf682942cd26 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 Workqueue: events_unbound io_ring_exit_work RIP: 0010:__lock_acquire+0x93/0x1f60 Code: e8 03 80 3c 10 00 74 12 4c 89 ef e8 b7 bd 72 00 48 ba 00 00 00 00 00 fc ff df 48 c7 c0 40 7f cc 8f 49 39 45 00 75 03 45 31 e4 <89> 6c 24 44 44 89 74 24 60 44 89 7c 24 28 83 fb 01 77 2f 89 d8 49 RSP: 0018:ffffc900038b7748 EFLAGS: 00000006 RAX: ffffffff8fcc7f40 RBX: 0000000000000000 RCX: 0000000000000000 RDX: dffffc0000000000 RSI: 0000000000000000 RDI: ffff888050d81c98 RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 R10: fffffbfff1c164fe R11: 1ffffffff1c164fd R12: 0000000000000001 R13: ffff888050d81c98 R14: 0000000000000000 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fe64ac55d78 CR3: 000000007e96a000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: lock_acquire+0x182/0x3c0 kernel/locking/lockdep.c:5666 __raw_spin_lock include/linux/spinlock_api_smp.h:133 [inline] _raw_spin_lock+0x2a/0x40 kernel/locking/spinlock.c:154 spin_lock include/linux/spinlock.h:349 [inline] io_poll_remove_all_table+0xc2/0x2ce io_uring/poll.c:675 io_poll_remove_all+0x3b/0x45 io_uring/poll.c:698 io_uring_try_cancel_requests+0x368/0x3e5 io_uring/io_uring.c:2772 io_ring_exit_work+0xf7/0x6bb io_uring/io_uring.c:2576 process_one_work+0x877/0xdb0 kernel/workqueue.c:2289 worker_thread+0xb14/0x1330 kernel/workqueue.c:2436 kthread+0x266/0x300 kernel/kthread.c:376 ret_from_fork+0x1f/0x30