INFO: task dhcpcd:9226 blocked for more than 143 seconds.
      Tainted: G        W         5.17.0-next-20220321-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:dhcpcd          state:D stack:29880 pid: 9226 ppid:  3174 flags:0x00000000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5106 [inline]
 __schedule+0xa9a/0x4940 kernel/sched/core.c:6415
 schedule+0xd2/0x1f0 kernel/sched/core.c:6487
 synchronize_rcu_expedited+0x471/0x620 kernel/rcu/tree_exp.h:857
 synchronize_net+0x3a/0x50 net/core/dev.c:10645
 __unregister_prot_hook+0x48a/0x5a0 net/packet/af_packet.c:382
 packet_do_bind+0x8bc/0xdc0 net/packet/af_packet.c:3212
 packet_bind+0x152/0x1b0 net/packet/af_packet.c:3296
 __sys_bind+0x1e9/0x250 net/socket.c:1697
 __do_sys_bind net/socket.c:1708 [inline]
 __se_sys_bind net/socket.c:1706 [inline]
 __x64_sys_bind+0x6f/0xb0 net/socket.c:1706
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x35/0x80 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7f7d6d9b9ce7
RSP: 002b:00007ffed0479d88 EFLAGS: 00000217 ORIG_RAX: 0000000000000031
RAX: ffffffffffffffda RBX: 000055d14917eb60 RCX: 00007f7d6d9b9ce7
RDX: 0000000000000014 RSI: 00007ffed0479d98 RDI: 0000000000000005
RBP: 0000000000000000 R08: 000055d14971f430 R09: 00007f7d6da7aa60
R10: 0000000000020000 R11: 0000000000000217 R12: 000055d149724200
R13: 000055d14971fd08 R14: 00007ffed049a66c R15: 00007ffed049a694
 </TASK>
INFO: task dhcpcd:9230 blocked for more than 143 seconds.
      Tainted: G        W         5.17.0-next-20220321-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:dhcpcd          state:D stack:29000 pid: 9230 ppid:  3174 flags:0x00000000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5106 [inline]
 __schedule+0xa9a/0x4940 kernel/sched/core.c:6415
 schedule+0xd2/0x1f0 kernel/sched/core.c:6487
 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:6546
 __mutex_lock_common kernel/locking/mutex.c:673 [inline]
 __mutex_lock+0xa32/0x12f0 kernel/locking/mutex.c:733
 exp_funnel_lock kernel/rcu/tree_exp.h:322 [inline]
 synchronize_rcu_expedited+0x2d5/0x620 kernel/rcu/tree_exp.h:841
 synchronize_net+0x3a/0x50 net/core/dev.c:10645
 __unregister_prot_hook+0x48a/0x5a0 net/packet/af_packet.c:382
 packet_do_bind+0x8bc/0xdc0 net/packet/af_packet.c:3212
 packet_bind+0x152/0x1b0 net/packet/af_packet.c:3296
 __sys_bind+0x1e9/0x250 net/socket.c:1697
 __do_sys_bind net/socket.c:1708 [inline]
 __se_sys_bind net/socket.c:1706 [inline]
 __x64_sys_bind+0x6f/0xb0 net/socket.c:1706
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x35/0x80 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7f7d6d9b9ce7
RSP: 002b:00007ffed0479d88 EFLAGS: 00000217 ORIG_RAX: 0000000000000031
RAX: ffffffffffffffda RBX: 000055d14917eb60 RCX: 00007f7d6d9b9ce7
RDX: 0000000000000014 RSI: 00007ffed0479d98 RDI: 0000000000000005
RBP: 0000000000000000 R08: 000055d14971f430 R09: 00007f7d6da7aa60
R10: 0000000000020000 R11: 0000000000000217 R12: 000055d149724200
R13: 000055d14971fe88 R14: 00007ffed049a66c R15: 00007ffed049a694
 </TASK>
INFO: lockdep is turned off.
NMI backtrace for cpu 0
CPU: 0 PID: 28 Comm: khungtaskd Tainted: G        W         5.17.0-next-20220321-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0xcd/0x134 lib/dump_stack.c:106
 nmi_cpu_backtrace.cold+0x47/0x144 lib/nmi_backtrace.c:111
 nmi_trigger_cpumask_backtrace+0x1e6/0x230 lib/nmi_backtrace.c:62
 trigger_all_cpu_backtrace include/linux/nmi.h:146 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:256 [inline]
 watchdog+0xcb7/0xed0 kernel/hung_task.c:413
 kthread+0x2e9/0x3a0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:298
 </TASK>
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 45 Comm: kworker/u4:2 Tainted: G        W         5.17.0-next-20220321-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: events_unbound toggle_allocation_gate
RIP: 0010:__get_locked_pte+0x142/0x270 mm/memory.c:1752
Code: c7 ff 4c 89 ea 49 21 dc 48 b8 00 00 00 00 80 88 ff ff 48 01 c5 48 c1 ea 03 48 b8 00 00 00 00 00 fc ff df 49 01 ec 80 3c 02 00 <0f> 85 eb 00 00 00 4d 89 75 00 4c 89 f7 e8 3c 91 af 07 e8 87 49 c7
RSP: 0018:ffffc90000b679a8 EFLAGS: 00000246
RAX: dffffc0000000000 RBX: 000ffffffffff000 RCX: 0000000000000000
RDX: 1ffff9200016cf48 RSI: ffffffff81b15f6a RDI: ffffea000043a9a8
RBP: ffff888000000558 R08: 0000000000000000 R09: ffffea0000070f87
R10: ffffffff81b15f05 R11: ffffffff8f2054fb R12: ffff888010ea6558
R13: ffffc90000b67a40 R14: ffff888010db6120 R15: 0000000000000000
FS:  0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f1d1c0ea370 CR3: 000000000ba8e000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 get_locked_pte include/linux/mm.h:2125 [inline]
 __text_poke+0x1ae/0x8c0 arch/x86/kernel/alternative.c:1038
 text_poke arch/x86/kernel/alternative.c:1121 [inline]
 text_poke_bp_batch+0x375/0x6b0 arch/x86/kernel/alternative.c:1385
 text_poke_flush arch/x86/kernel/alternative.c:1542 [inline]
 text_poke_flush arch/x86/kernel/alternative.c:1539 [inline]
 text_poke_finish+0x16/0x30 arch/x86/kernel/alternative.c:1549
 arch_jump_label_transform_apply+0x13/0x20 arch/x86/kernel/jump_label.c:146
 jump_label_update+0x32f/0x410 kernel/jump_label.c:830
 static_key_enable_cpuslocked+0x1b1/0x260 kernel/jump_label.c:177
 static_key_enable+0x16/0x20 kernel/jump_label.c:190
 toggle_allocation_gate mm/kfence/core.c:779 [inline]
 toggle_allocation_gate+0x100/0x390 mm/kfence/core.c:771
 process_one_work+0x996/0x1610 kernel/workqueue.c:2289
 worker_thread+0x665/0x1080 kernel/workqueue.c:2436
 kthread+0x2e9/0x3a0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:298
 </TASK>
INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.262 msecs
----------------
Code disassembly (best guess), 1 bytes skipped:
   0:	ff 4c 89 ea          	decl   -0x16(%rcx,%rcx,4)
   4:	49 21 dc             	and    %rbx,%r12
   7:	48 b8 00 00 00 00 80 	movabs $0xffff888000000000,%rax
   e:	88 ff ff
  11:	48 01 c5             	add    %rax,%rbp
  14:	48 c1 ea 03          	shr    $0x3,%rdx
  18:	48 b8 00 00 00 00 00 	movabs $0xdffffc0000000000,%rax
  1f:	fc ff df
  22:	49 01 ec             	add    %rbp,%r12
  25:	80 3c 02 00          	cmpb   $0x0,(%rdx,%rax,1)
* 29:	0f 85 eb 00 00 00    	jne    0x11a <-- trapping instruction
  2f:	4d 89 75 00          	mov    %r14,0x0(%r13)
  33:	4c 89 f7             	mov    %r14,%rdi
  36:	e8 3c 91 af 07       	callq  0x7af9177
  3b:	e8                   	.byte 0xe8
  3c:	87 49 c7             	xchg   %ecx,-0x39(%rcx)