INFO: task iou-wrk-9392:9401 blocked for more than 143 seconds. Not tainted 5.15.0-rc2-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:iou-wrk-9392 state:D stack:27952 pid: 9401 ppid: 7038 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:4940 [inline] __schedule+0xb44/0x5960 kernel/sched/core.c:6287 schedule+0xd3/0x270 kernel/sched/core.c:6366 schedule_timeout+0x1db/0x2a0 kernel/time/timer.c:1857 do_wait_for_common kernel/sched/completion.c:85 [inline] __wait_for_common kernel/sched/completion.c:106 [inline] wait_for_common kernel/sched/completion.c:117 [inline] wait_for_completion+0x176/0x280 kernel/sched/completion.c:138 io_worker_exit fs/io-wq.c:183 [inline] io_wqe_worker+0x66d/0xc40 fs/io-wq.c:597 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295 Showing all locks held in the system: 1 lock held by khungtaskd/27: #0: ffffffff8b981ae0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 kernel/locking/lockdep.c:6446 1 lock held by cron/6230: #0: ffff8880b9c31a58 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2b/0x120 kernel/sched/core.c:474 1 lock held by in:imklog/6237: #0: ffff88801db6ad70 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe9/0x100 fs/file.c:990 ============================================= NMI backtrace for cpu 1 CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.15.0-rc2-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0xcd/0x134 lib/dump_stack.c:106 nmi_cpu_backtrace.cold+0x47/0x144 lib/nmi_backtrace.c:105 nmi_trigger_cpumask_backtrace+0x1ae/0x220 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:146 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:210 [inline] watchdog+0xc1d/0xf50 kernel/hung_task.c:295 kthread+0x3e5/0x4d0 kernel/kthread.c:319 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 6872 Comm: kworker/0:4 Not tainted 5.15.0-rc2-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: events nsim_dev_trap_report_work RIP: 0010:set_canary_byte mm/kfence/core.c:214 [inline] RIP: 0010:for_each_canary mm/kfence/core.c:249 [inline] RIP: 0010:kfence_guarded_alloc mm/kfence/core.c:321 [inline] RIP: 0010:__kfence_alloc+0x635/0xca0 mm/kfence/core.c:779 Code: 71 8a b8 ff 48 8b 6c 24 10 48 be 00 00 00 00 00 fc ff df 48 c1 ed 03 48 01 f5 4d 39 f7 73 5c e8 81 84 b8 ff 4c 89 f8 45 89 fe <4c> 89 fa 48 c1 e8 03 41 83 e6 07 83 e2 07 48 b9 00 00 00 00 00 fc RSP: 0018:ffffc9000548fb48 EFLAGS: 00000093 RAX: ffff88823bce0d4b RBX: ffffffff9028ec08 RCX: 0000000000000000 RDX: ffff888079f7d580 RSI: ffffffff81be60df RDI: 0000000000000003 RBP: fffffbfff2051d8e R08: ffff88823bce0d4b R09: ffffffff8eef500f R10: ffffffff81be6131 R11: 0000000000000001 R12: ffff8881441fa000 R13: 00000000000000e8 R14: 000000003bce0d4b R15: ffff88823bce0d4b FS: 0000000000000000(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007efccb07f000 CR3: 000000000b68e000 CR4: 0000000000350ef0 Call Trace: kfence_alloc include/linux/kfence.h:124 [inline] slab_alloc_node mm/slub.c:3124 [inline] kmem_cache_alloc_node+0x213/0x3d0 mm/slub.c:3242 __alloc_skb+0x20b/0x340 net/core/skbuff.c:414 alloc_skb include/linux/skbuff.h:1116 [inline] nsim_dev_trap_skb_build drivers/net/netdevsim/dev.c:664 [inline] nsim_dev_trap_report drivers/net/netdevsim/dev.c:721 [inline] nsim_dev_trap_report_work+0x2ac/0xbd0 drivers/net/netdevsim/dev.c:762 process_one_work+0x9bf/0x16b0 kernel/workqueue.c:2297 worker_thread+0x658/0x11f0 kernel/workqueue.c:2444 kthread+0x3e5/0x4d0 kernel/kthread.c:319 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295 ---------------- Code disassembly (best guess): 0: 71 8a jno 0xffffff8c 2: b8 ff 48 8b 6c mov $0x6c8b48ff,%eax 7: 24 10 and $0x10,%al 9: 48 be 00 00 00 00 00 movabs $0xdffffc0000000000,%rsi 10: fc ff df 13: 48 c1 ed 03 shr $0x3,%rbp 17: 48 01 f5 add %rsi,%rbp 1a: 4d 39 f7 cmp %r14,%r15 1d: 73 5c jae 0x7b 1f: e8 81 84 b8 ff callq 0xffb884a5 24: 4c 89 f8 mov %r15,%rax 27: 45 89 fe mov %r15d,%r14d * 2a: 4c 89 fa mov %r15,%rdx <-- trapping instruction 2d: 48 c1 e8 03 shr $0x3,%rax 31: 41 83 e6 07 and $0x7,%r14d 35: 83 e2 07 and $0x7,%edx 38: 48 rex.W 39: b9 00 00 00 00 mov $0x0,%ecx 3e: 00 fc add %bh,%ah