------------[ cut here ]------------ WARNING: block/blk-mq.c:2107 at blk_mq_dispatch_rq_list+0x960/0x13a8 block/blk-mq.c:2107, CPU#0: kworker/0:1H/4384 Modules linked in: CPU: 0 UID: 0 PID: 4384 Comm: kworker/0:1H Tainted: G L syzkaller #0 PREEMPT Tainted: [L]=SOFTLOCKUP Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 Workqueue: kblockd blk_mq_run_work_fn pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : blk_mq_dispatch_rq_list+0x960/0x13a8 block/blk-mq.c:2107 lr : blk_mq_dispatch_rq_list+0x960/0x13a8 block/blk-mq.c:2107 sp : ffff800092417800 x29: ffff8000924178e0 x28: 0000000000000000 x27: ffff0000c628e880 x26: 1fffe00019120302 x25: ffff0000c8901848 x24: ffff0000c628e800 x23: dfff800000000000 x22: ffff0000c8901810 x21: ffff800092417a68 x20: ffff800092417a60 x19: ffff0000c628e948 x18: 00000000ffffffff x17: 0000000000000003 x16: ffff800088b97000 x15: ffff80008a849000 x14: ffff80008b0812b0 x13: 0000000000000002 x12: 0000000000000000 x11: 0000000000000000 x10: ffff700012482f16 x9 : 0000000000000000 x8 : 0000000000000000 x7 : 0000000000000000 x6 : 0000000000000000 x5 : ffff80008abd7a60 x4 : 0000000000000000 x3 : 0000000000000010 x2 : 0000000000000000 x1 : ffff0000c5db1d80 x0 : 0000000000000000 Call trace: blk_mq_dispatch_rq_list+0x960/0x13a8 block/blk-mq.c:2107 (P) __blk_mq_sched_dispatch_requests+0x250/0x10e8 block/blk-mq-sched.c:299 blk_mq_sched_dispatch_requests+0xa8/0x158 block/blk-mq-sched.c:329 blk_mq_run_work_fn+0x214/0x2e4 block/blk-mq.c:2532 process_one_work kernel/workqueue.c:3396 [inline] process_scheduled_works+0x91c/0x1250 kernel/workqueue.c:3479 worker_thread+0x798/0xbd0 kernel/workqueue.c:3560 kthread+0x304/0x3d4 kernel/kthread.c:436 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:838 irq event stamp: 17060 hardirqs last enabled at (17059): [] __raw_spin_unlock_irq include/linux/spinlock_api_smp.h:219 [inline] hardirqs last enabled at (17059): [] _raw_spin_unlock_irq+0x30/0x80 kernel/locking/spinlock.c:229 hardirqs last disabled at (17060): [] el1_brk64+0x20/0x54 arch/arm64/kernel/entry-common.c:445 softirqs last enabled at (16482): [] softirq_handle_end kernel/softirq.c:491 [inline] softirqs last enabled at (16482): [] handle_softirqs+0xc28/0xd98 kernel/softirq.c:673 softirqs last disabled at (16477): [] __do_softirq+0x14/0x20 kernel/softirq.c:679 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: block/blk.h:703 at req_ref_put_and_test block/blk.h:703 [inline], CPU#0: kworker/0:1H/4384 WARNING: block/blk.h:703 at blk_mq_free_request+0x190/0x210 block/blk-mq.c:829, CPU#0: kworker/0:1H/4384 Modules linked in: Tainted: [W]=WARN, [L]=SOFTLOCKUP Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 Workqueue: kblockd blk_mq_run_work_fn pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : req_ref_put_and_test block/blk.h:703 [inline] pc : blk_mq_free_request+0x190/0x210 block/blk-mq.c:829 lr : req_ref_put_and_test block/blk.h:703 [inline] lr : blk_mq_free_request+0x190/0x210 block/blk-mq.c:829 sp : ffff800092417750 x29: ffff800092417750 x28: ffff700012482f10 x27: ffff0000c8901800 x26: ffff0000c5db1d80 x25: 1fffe00019120303 x24: 1fffe00019120320 x23: dfff800000000000 x22: dfff800000000000 x21: ffff0000c890189c x20: 000000000000007f x19: ffff0000c8901800 x18: 00000000ffffffff x17: 0000000000000003 x16: ffff800088b97000 x15: ffff80008a849000 x14: 00000000001b6858 x13: 0000000000000001 x12: 0000000000000000 x11: 0000000000000000 x10: ffff600019120314 x9 : 0000000000000000 x8 : 0000000000000000 x7 : ffff80008180fca0 x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000817ea0bc x2 : 000000000000007f x1 : ffff0000c5db1d80 x0 : 0000000000000000 Call trace: req_ref_put_and_test block/blk.h:703 [inline] (P) blk_mq_free_request+0x190/0x210 block/blk-mq.c:829 (P) __blk_mq_end_request+0x32c/0x434 block/blk-mq.c:-1 blk_mq_end_request+0x68/0x8c block/blk-mq.c:1149 blk_mq_dispatch_rq_list+0x410/0x13a8 block/blk-mq.c:2129 __blk_mq_sched_dispatch_requests+0x250/0x10e8 block/blk-mq-sched.c:299 blk_mq_sched_dispatch_requests+0xa8/0x158 block/blk-mq-sched.c:329 blk_mq_run_work_fn+0x214/0x2e4 block/blk-mq.c:2532 process_one_work kernel/workqueue.c:3396 [inline] process_scheduled_works+0x91c/0x1250 kernel/workqueue.c:3479 worker_thread+0x798/0xbd0 kernel/workqueue.c:3560 kthread+0x304/0x3d4 kernel/kthread.c:436 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:838 irq event stamp: 17554 hardirqs last enabled at (17553): [] seqcount_lockdep_reader_access+0x7c/0xf8 include/linux/seqlock.h:75 hardirqs last disabled at (17554): [] el1_brk64+0x20/0x54 arch/arm64/kernel/entry-common.c:445 softirqs last enabled at (17546): [] softirq_handle_end kernel/softirq.c:491 [inline] softirqs last enabled at (17546): [] handle_softirqs+0xc28/0xd98 kernel/softirq.c:673 softirqs last disabled at (17063): [] __do_softirq+0x14/0x20 kernel/softirq.c:679 ---[ end trace 0000000000000000 ]--- non-slab/vmalloc memory list_del corruption. next->prev should be ffff0000c8901c48, but was ffff0000c8902e48. (next=ffff0000c8901e48) ------------[ cut here ]------------ kernel BUG at lib/list_debug.c:67! Internal error: Oops - BUG: 00000000f2000800 [#1] SMP[ 142.058529][ T4384] Internal error: Oops - BUG: 00000000f2000800 [#1] SMP Modules linked in: CPU: 0 UID: 0 PID: 4384 Comm: kworker/0:1H Tainted: G W L syzkaller #0 PREEMPT Tainted: [W]=WARN, [L]=SOFTLOCKUP Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 Workqueue: kblockd blk_mq_run_work_fn pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : __list_del_entry_valid_or_report+0x1b4/0x1b8 lib/list_debug.c:65 lr : __list_del_entry_valid_or_report+0x1b4/0x1b8 lib/list_debug.c:65 sp : ffff8000924177c0 x29: ffff8000924177c0 x28: ffff700012482f10 x27: ffff0000c8901c00 x26: 1ffff00012482f4c x25: ffff0000c8901c48 x24: ffff0000c628e800 x23: ffff0000c8901e50 x22: dfff800000000000 x21: 1fffe000191203ca x20: ffff0000c8901e48 x19: ffff0000c8901c48 x18: 00000000ffffffff x17: 20747562202c3834 x16: 6331303938633030 x15: 3030666666662065 x14: 00000000001b6b58 x13: 0000000000000001 x12: 0000000000000003 x11: 0000000000000000 x10: 0000000000000001 x9 : 28b6ad232afe1700 x8 : 28b6ad232afe1700 x7 : ffff8000804903d4 x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008049b04c x2 : 0000000100000000 x1 : ffff0000c5db1d80 x0 : 000000000000006d Call trace: __list_del_entry_valid_or_report+0x1b4/0x1b8 lib/list_debug.c:65 (P) __list_del_entry_valid include/linux/list.h:140 [inline] __list_del_entry include/linux/list.h:261 [inline] list_del_init include/linux/list.h:333 [inline] blk_mq_dispatch_rq_list+0x2bc/0x13a8 block/blk-mq.c:2112 __blk_mq_sched_dispatch_requests+0x250/0x10e8 block/blk-mq-sched.c:299 blk_mq_sched_dispatch_requests+0xa8/0x158 block/blk-mq-sched.c:329 blk_mq_run_work_fn+0x214/0x2e4 block/blk-mq.c:2532 process_one_work kernel/workqueue.c:3396 [inline] process_scheduled_works+0x91c/0x1250 kernel/workqueue.c:3479 worker_thread+0x798/0xbd0 kernel/workqueue.c:3560 kthread+0x304/0x3d4 kernel/kthread.c:436 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:838 Code: 913a8000 aa1303e1 aa1403e3 979a94f3 (d4210000) ---[ end trace 0000000000000000 ]---