INFO: task syz-executor.2:12648 blocked for more than 143 seconds.
Not tainted 5.15.0-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.2 state:D stack:25136 pid:12648 ppid: 6487 flags:0x00024004
Call Trace:
context_switch kernel/sched/core.c:4969 [inline]
__schedule+0xb72/0x1460 kernel/sched/core.c:6250
schedule+0x12b/0x1f0 kernel/sched/core.c:6323
io_uring_cancel_generic+0x5b3/0x661 fs/io_uring.c:9850
io_uring_files_cancel include/linux/io_uring.h:16 [inline]
do_exit+0x281/0x24f0 kernel/exit.c:787
do_group_exit+0x168/0x2d0 kernel/exit.c:929
get_signal+0x16b0/0x2090 kernel/signal.c:2820
arch_do_signal_or_restart+0x9c/0x730 arch/x86/kernel/signal.c:868
handle_signal_work kernel/entry/common.c:148 [inline]
exit_to_user_mode_loop kernel/entry/common.c:172 [inline]
exit_to_user_mode_prepare+0x191/0x220 kernel/entry/common.c:207
__syscall_exit_to_user_mode_work kernel/entry/common.c:289 [inline]
syscall_exit_to_user_mode+0x2e/0x70 kernel/entry/common.c:300
do_syscall_64+0x53/0xd0 arch/x86/entry/common.c:86
entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7fd598f7bae7
RSP: 002b:00007fd5964f1218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: 00000000000000ca RBX: 00007fd59908ef68 RCX: 00007fd598f7bae9
RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd59908ef68
RBP: 00007fd59908ef60 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd59908ef6c
R13: 00007ffe8d4b4abf R14: 00007fd5964f1300 R15: 0000000000022000
Showing all locks held in the system:
1 lock held by khungtaskd/27:
#0: ffffffff8cb1d8c0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30
1 lock held by in:imklog/6163:
#0: ffff88801c7485f0 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x24e/0x2f0 fs/file.c:990
=============================================
NMI backtrace for cpu 1
CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.15.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0x1dc/0x2d8 lib/dump_stack.c:106
nmi_cpu_backtrace+0x45f/0x490 lib/nmi_backtrace.c:105
nmi_trigger_cpumask_backtrace+0x16a/0x280 lib/nmi_backtrace.c:62
trigger_all_cpu_backtrace include/linux/nmi.h:146 [inline]
check_hung_uninterruptible_tasks kernel/hung_task.c:210 [inline]
watchdog+0xc82/0xcd0 kernel/hung_task.c:295
kthread+0x468/0x490 kernel/kthread.c:327
ret_from_fork+0x1f/0x30
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 PID: 2937 Comm: systemd-journal Not tainted 5.15.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:rcu_lockdep_current_cpu_online+0x5a/0x130 kernel/rcu/tree.c:1169
Code: 01 e8 0a 74 91 08 89 c3 83 f8 08 0f 83 cd 00 00 00 49 bf 00 00 00 00 00 fc ff df 48 8d 1c dd 30 48 5a 8c 48 89 d8 48 c1 e8 03 <42> 80 3c 38 00 74 08 48 89 df e8 47 2c 61 00 48 8b 03 48 8d 98 00
RSP: 0018:ffffc90002b8fdf8 EFLAGS: 00000806
RAX: 1ffffffff18b4906 RBX: ffffffff8c5a4830 RCX: 0000000080000001
RDX: ffff88807a070000 RSI: 0000000000000002 RDI: 0000000000000000
RBP: ffffc90002b8feb0 R08: ffffffff81ac92af R09: fffffbfff1bfa13e
R10: fffffbfff1bfa13e R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: dffffc0000000000 R15: dffffc0000000000
FS: 00007f1988c558c0(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f198613d000 CR3: 000000007ba8a000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
rcu_read_lock_held_common kernel/rcu/update.c:112 [inline]
rcu_read_lock_sched_held+0x74/0x130 kernel/rcu/update.c:123
trace_user_exit+0x7e/0x210 include/trace/events/context_tracking.h:48
__context_tracking_exit+0x7f/0xd0 kernel/context_tracking.c:161
user_exit_irqoff include/linux/context_tracking.h:47 [inline]
__enter_from_user_mode kernel/entry/common.c:22 [inline]
syscall_enter_from_user_mode+0x199/0x1b0 kernel/entry/common.c:104
do_syscall_64+0x25/0xd0 arch/x86/entry/common.c:76
entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7f19881e4210
Code: 73 01 c3 48 8b 0d 98 7d 20 00 f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 83 3d b9 c1 20 00 00 75 10 b8 00 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 4e fc ff ff 48 89 04 24
RSP: 002b:00007fff9c186008 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
RAX: ffffffffffffffda RBX: 00007fff9c188a80 RCX: 00007f19881e4210
RDX: 0000000000002000 RSI: 00007fff9c186880 RDI: 0000000000000009
RBP: 0000000000000000 R08: 0000000000000008 R09: 0000000000000070
R10: 00007fff9c1c2118 R11: 0000000000000246 R12: 00007fff9c186880
R13: 00007fff9c1889d8 R14: 0000556a29b76958 R15: 0005d00fb0057b93
----------------
Code disassembly (best guess):
0: 01 e8 add %ebp,%eax
2: 0a 74 91 08 or 0x8(%rcx,%rdx,4),%dh
6: 89 c3 mov %eax,%ebx
8: 83 f8 08 cmp $0x8,%eax
b: 0f 83 cd 00 00 00 jae 0xde
11: 49 bf 00 00 00 00 00 movabs $0xdffffc0000000000,%r15
18: fc ff df
1b: 48 8d 1c dd 30 48 5a lea -0x73a5b7d0(,%rbx,8),%rbx
22: 8c
23: 48 89 d8 mov %rbx,%rax
26: 48 c1 e8 03 shr $0x3,%rax
* 2a: 42 80 3c 38 00 cmpb $0x0,(%rax,%r15,1) <-- trapping instruction
2f: 74 08 je 0x39
31: 48 89 df mov %rbx,%rdi
34: e8 47 2c 61 00 callq 0x612c80
39: 48 8b 03 mov (%rbx),%rax
3c: 48 rex.W
3d: 8d .byte 0x8d
3e: 98 cwtl