INFO: task jbd2/sda1-8:5152 blocked for more than 143 seconds.
Tainted: G U L syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:jbd2/sda1-8 state:D stack:26456 pid:5152 tgid:5152 ppid:2 task_flags:0x240040 flags:0x00080000
Call Trace:
context_switch kernel/sched/core.c:5295 [inline]
__schedule+0xfee/0x6020 kernel/sched/core.c:6907
__schedule_loop kernel/sched/core.c:6989 [inline]
schedule+0xdd/0x390 kernel/sched/core.c:7004
jbd2_journal_wait_updates+0x119/0x240 fs/jbd2/transaction.c:843
jbd2_journal_commit_transaction+0x7fe/0x6680 fs/jbd2/commit.c:454
kjournald2+0x200/0x760 fs/jbd2/journal.c:201
kthread+0x370/0x450 kernel/kthread.c:467
ret_from_fork+0x754/0xd80 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
INFO: task syz-executor:5808 blocked for more than 143 seconds.
Tainted: G U L syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor state:D stack:22760 pid:5808 tgid:5808 ppid:5807 task_flags:0x400100 flags:0x00080000
Call Trace:
context_switch kernel/sched/core.c:5295 [inline]
__schedule+0xfee/0x6020 kernel/sched/core.c:6907
__schedule_loop kernel/sched/core.c:6989 [inline]
schedule+0xdd/0x390 kernel/sched/core.c:7004
wait_transaction_locked+0x1a1/0x230 fs/jbd2/transaction.c:152
add_transaction_credits+0x110/0xe60 fs/jbd2/transaction.c:222
start_this_handle+0x3de/0x13a0 fs/jbd2/transaction.c:403
jbd2__journal_start+0x394/0x6a0 fs/jbd2/transaction.c:501
__ext4_journal_start_sb+0x32a/0x5c0 fs/ext4/ext4_jbd2.c:114
__ext4_journal_start fs/ext4/ext4_jbd2.h:242 [inline]
ext4_dirty_inode+0xa1/0x130 fs/ext4/inode.c:6447
__mark_inode_dirty+0x1f3/0x1600 fs/fs-writeback.c:2609
generic_update_time fs/inode.c:2198 [inline]
file_update_time_flags+0x46b/0x500 fs/inode.c:2428
ext4_page_mkwrite+0x35b/0x1980 fs/ext4/inode.c:6616
do_page_mkwrite+0x17a/0x440 mm/memory.c:3581
do_shared_fault mm/memory.c:5866 [inline]
do_fault+0x3d7/0x1a00 mm/memory.c:5928
do_pte_missing mm/memory.c:4469 [inline]
handle_pte_fault mm/memory.c:6308 [inline]
__handle_mm_fault+0x180f/0x2b60 mm/memory.c:6446
handle_mm_fault+0x36d/0xa20 mm/memory.c:6615
do_user_addr_fault+0x5a3/0x12f0 arch/x86/mm/fault.c:1334
handle_page_fault arch/x86/mm/fault.c:1474 [inline]
exc_page_fault+0x6f/0xd0 arch/x86/mm/fault.c:1527
asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:618
RIP: 0033:0x7fab73e7a667
RSP: 002b:00007ffda57c4300 EFLAGS: 00010246
RAX: 00007fab72974000 RBX: 000055556a1e3550 RCX: 0000000000000000
RDX: 00000000000014c1 RSI: 000055556a2122b0 RDI: 0000000000000001
RBP: 00007ffda57c4800 R08: 000000000000036e R09: 000055556a2122c8
R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffda57c4640
R13: 00007ffda57c4430 R14: 585858582e7a7973 R15: 00007ffda57c4380
INFO: task kworker/u10:37:30371 blocked for more than 143 seconds.
Tainted: G U L syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/u10:37 state:D stack:24856 pid:30371 tgid:30371 ppid:2 task_flags:0x4248060 flags:0x00080000
Workqueue: writeback wb_workfn (flush-8:0)
Call Trace:
context_switch kernel/sched/core.c:5295 [inline]
__schedule+0xfee/0x6020 kernel/sched/core.c:6907
__schedule_loop kernel/sched/core.c:6989 [inline]
schedule+0xdd/0x390 kernel/sched/core.c:7004
io_schedule+0x8a/0xf0 kernel/sched/core.c:7831
bit_wait_io+0xd/0xe0 kernel/sched/wait_bit.c:250
__wait_on_bit+0x65/0x180 kernel/sched/wait_bit.c:52
out_of_line_wait_on_bit+0xdc/0x110 kernel/sched/wait_bit.c:67
wait_on_bit_io include/linux/wait_bit.h:105 [inline]
__wait_on_buffer+0x64/0x70 fs/buffer.c:124
wait_on_buffer include/linux/buffer_head.h:420 [inline]
ext4_read_bh+0x2a0/0x300 fs/ext4/super.c:208
__read_extent_tree_block+0x36b/0x610 fs/ext4/extents.c:570
ext4_find_extent+0x48b/0xa40 fs/ext4/extents.c:941
ext4_ext_map_blocks+0x215/0x5860 fs/ext4/extents.c:4263
ext4_map_create_blocks+0xec/0x5e0 fs/ext4/inode.c:616
ext4_map_blocks+0x46b/0xd30 fs/ext4/inode.c:809
mpage_map_one_extent fs/ext4/inode.c:2373 [inline]
mpage_map_and_submit_extent fs/ext4/inode.c:2467 [inline]
ext4_do_writepages+0x21ee/0x3df0 fs/ext4/inode.c:2925
ext4_writepages+0x347/0x790 fs/ext4/inode.c:3019
do_writepages+0x278/0x600 mm/page-writeback.c:2554
__writeback_single_inode+0x164/0x1220 fs/fs-writeback.c:1750
writeback_sb_inodes+0x72e/0x1b90 fs/fs-writeback.c:2041
__writeback_inodes_wb+0xf8/0x2d0 fs/fs-writeback.c:2118
wb_writeback+0x6b4/0xab0 fs/fs-writeback.c:2229
wb_check_old_data_flush fs/fs-writeback.c:2333 [inline]
wb_do_writeback fs/fs-writeback.c:2386 [inline]
wb_workfn+0x885/0xbb0 fs/fs-writeback.c:2414
process_one_work+0x9c2/0x1840 kernel/workqueue.c:3275
process_scheduled_works kernel/workqueue.c:3358 [inline]
worker_thread+0x5da/0xe40 kernel/workqueue.c:3439
kthread+0x370/0x450 kernel/kthread.c:467
ret_from_fork+0x754/0xd80 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
INFO: task syz.7.6386:14942 blocked for more than 144 seconds.
Tainted: G U L syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.7.6386 state:D stack:27400 pid:14942 tgid:14941 ppid:10554 task_flags:0x400140 flags:0x00080002
Call Trace:
context_switch kernel/sched/core.c:5295 [inline]
__schedule+0xfee/0x6020 kernel/sched/core.c:6907
__schedule_loop kernel/sched/core.c:6989 [inline]
schedule+0xdd/0x390 kernel/sched/core.c:7004
wb_wait_for_completion fs/fs-writeback.c:226 [inline]
wb_wait_for_completion+0x1a6/0x260 fs/fs-writeback.c:222
__writeback_inodes_sb_nr+0x208/0x2b0 fs/fs-writeback.c:2838
sync_filesystem fs/sync.c:54 [inline]
sync_filesystem+0xbb/0x290 fs/sync.c:30
fs_bdev_sync+0x2c/0x40 fs/super.c:1493
blkdev_flushbuf block/ioctl.c:515 [inline]
blkdev_common_ioctl+0xf76/0x2ba0 block/ioctl.c:653
blkdev_ioctl+0x43b/0x6f0 block/ioctl.c:786
vfs_ioctl fs/ioctl.c:51 [inline]
__do_sys_ioctl fs/ioctl.c:597 [inline]
__se_sys_ioctl fs/ioctl.c:583 [inline]
__x64_sys_ioctl+0x18e/0x210 fs/ioctl.c:583
do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
do_syscall_64+0x106/0xf80 arch/x86/entry/syscall_64.c:94
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fa1b919bf79
RSP: 002b:00007fa1ba0cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007fa1b9415fa0 RCX: 00007fa1b919bf79
RDX: 0000000000000000 RSI: 0000000000001261 RDI: 0000000000000005
RBP: 00007fa1b92327e0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fa1b9416038 R14: 00007fa1b9415fa0 R15: 00007ffe0c55b3b8
INFO: task syz.0.6389:14953 blocked for more than 144 seconds.
Tainted: G U L syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.0.6389 state:D stack:25656 pid:14953 tgid:14951 ppid:813 task_flags:0x400140 flags:0x00080002
Call Trace:
context_switch kernel/sched/core.c:5295 [inline]
__schedule+0xfee/0x6020 kernel/sched/core.c:6907
__schedule_loop kernel/sched/core.c:6989 [inline]
schedule+0xdd/0x390 kernel/sched/core.c:7004
wb_wait_for_completion fs/fs-writeback.c:226 [inline]
wb_wait_for_completion+0x1a6/0x260 fs/fs-writeback.c:222
__writeback_inodes_sb_nr+0x208/0x2b0 fs/fs-writeback.c:2838
sync_filesystem fs/sync.c:54 [inline]
sync_filesystem+0xbb/0x290 fs/sync.c:30
fs_bdev_sync+0x2c/0x40 fs/super.c:1493
blkdev_flushbuf block/ioctl.c:515 [inline]
blkdev_common_ioctl+0xf76/0x2ba0 block/ioctl.c:653
blkdev_ioctl+0x43b/0x6f0 block/ioctl.c:786
vfs_ioctl fs/ioctl.c:51 [inline]
__do_sys_ioctl fs/ioctl.c:597 [inline]
__se_sys_ioctl fs/ioctl.c:583 [inline]
__x64_sys_ioctl+0x18e/0x210 fs/ioctl.c:583
do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
do_syscall_64+0x106/0xf80 arch/x86/entry/syscall_64.c:94
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f0ddcd9bf79
RSP: 002b:00007f0dddbd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f0ddd015fa0 RCX: 00007f0ddcd9bf79
RDX: 0000000000000000 RSI: 0000000000001261 RDI: 0000000000000004
RBP: 00007f0ddce327e0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f0ddd016038 R14: 00007f0ddd015fa0 R15: 00007fff1042e9a8
INFO: task syz.0.6389:14966 blocked for more than 144 seconds.
Tainted: G U L syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.0.6389 state:D stack:29000 pid:14966 tgid:14951 ppid:813 task_flags:0x400140 flags:0x00080002
Call Trace:
context_switch kernel/sched/core.c:5295 [inline]
__schedule+0xfee/0x6020 kernel/sched/core.c:6907
__schedule_loop kernel/sched/core.c:6989 [inline]
schedule+0xdd/0x390 kernel/sched/core.c:7004
wb_wait_for_completion fs/fs-writeback.c:226 [inline]
wb_wait_for_completion+0x1a6/0x260 fs/fs-writeback.c:222
__writeback_inodes_sb_nr+0x208/0x2b0 fs/fs-writeback.c:2838
sync_filesystem fs/sync.c:54 [inline]
sync_filesystem+0xbb/0x290 fs/sync.c:30
fs_bdev_sync+0x2c/0x40 fs/super.c:1493
blkdev_flushbuf block/ioctl.c:515 [inline]
blkdev_common_ioctl+0xf76/0x2ba0 block/ioctl.c:653
blkdev_ioctl+0x43b/0x6f0 block/ioctl.c:786
vfs_ioctl fs/ioctl.c:51 [inline]
__do_sys_ioctl fs/ioctl.c:597 [inline]
__se_sys_ioctl fs/ioctl.c:583 [inline]
__x64_sys_ioctl+0x18e/0x210 fs/ioctl.c:583
do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
do_syscall_64+0x106/0xf80 arch/x86/entry/syscall_64.c:94
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f0ddcd9bf79
RSP: 002b:00007f0dddbb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f0ddd016090 RCX: 00007f0ddcd9bf79
RDX: 0000000000000000 RSI: 0000000000001261 RDI: 0000000000000004
RBP: 00007f0ddce327e0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f0ddd016128 R14: 00007f0ddd016090 R15: 00007fff1042e9a8
INFO: task syz.3.6391:14991 blocked for more than 145 seconds.
Tainted: G U L syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.3.6391 state:D stack:26536 pid:14991 tgid:14991 ppid:32372 task_flags:0x400040 flags:0x00080002
Call Trace:
context_switch kernel/sched/core.c:5295 [inline]
__schedule+0xfee/0x6020 kernel/sched/core.c:6907
__schedule_loop kernel/sched/core.c:6989 [inline]
schedule+0xdd/0x390 kernel/sched/core.c:7004
wait_transaction_locked+0x1a1/0x230 fs/jbd2/transaction.c:152
add_transaction_credits+0x110/0xe60 fs/jbd2/transaction.c:222
start_this_handle+0x3de/0x13a0 fs/jbd2/transaction.c:403
jbd2__journal_start+0x394/0x6a0 fs/jbd2/transaction.c:501
__ext4_journal_start_sb+0x32a/0x5c0 fs/ext4/ext4_jbd2.c:114
__ext4_journal_start fs/ext4/ext4_jbd2.h:242 [inline]
ext4_dirty_inode+0xa1/0x130 fs/ext4/inode.c:6447
__mark_inode_dirty+0x1f3/0x1600 fs/fs-writeback.c:2609
generic_update_time fs/inode.c:2198 [inline]
file_update_time_flags+0x46b/0x500 fs/inode.c:2428
ext4_page_mkwrite+0x35b/0x1980 fs/ext4/inode.c:6616
do_page_mkwrite+0x17a/0x440 mm/memory.c:3581
do_shared_fault mm/memory.c:5866 [inline]
do_fault+0x3d7/0x1a00 mm/memory.c:5928
do_pte_missing mm/memory.c:4469 [inline]
handle_pte_fault mm/memory.c:6308 [inline]
__handle_mm_fault+0x180f/0x2b60 mm/memory.c:6446
handle_mm_fault+0x36d/0xa20 mm/memory.c:6615
do_user_addr_fault+0x5a3/0x12f0 arch/x86/mm/fault.c:1334
handle_page_fault arch/x86/mm/fault.c:1474 [inline]
exc_page_fault+0x6f/0xd0 arch/x86/mm/fault.c:1527
asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:618
RIP: 0033:0x7fe460270780
RSP: 002b:00007ffe377e8c70 EFLAGS: 00010202
RAX: 0000001b32af3000 RBX: ffffffff82831ced RCX: 0000001b32af2ff8
RDX: 0000001b32724220 RSI: 0000000000000008 RDI: 00007fe461145720
RBP: 0000000000000182 R08: 00007fe460600000 R09: 00007fe460602000
R10: 0000000082831cf1 R11: 0000000000000018 R12: 00007fe460616218
R13: 00000000000001d5 R14: ffffffff82831696 R15: 00007fe461145720
INFO: task syz.6.6393:15010 blocked for more than 145 seconds.
Tainted: G U L syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.6.6393 state:D stack:26536 pid:15010 tgid:15010 ppid:2246 task_flags:0x400040 flags:0x00080002
Call Trace:
context_switch kernel/sched/core.c:5295 [inline]
__schedule+0xfee/0x6020 kernel/sched/core.c:6907
__schedule_loop kernel/sched/core.c:6989 [inline]
schedule+0xdd/0x390 kernel/sched/core.c:7004
wait_transaction_locked+0x1a1/0x230 fs/jbd2/transaction.c:152
add_transaction_credits+0x110/0xe60 fs/jbd2/transaction.c:222
start_this_handle+0x3de/0x13a0 fs/jbd2/transaction.c:403
jbd2__journal_start+0x394/0x6a0 fs/jbd2/transaction.c:501
__ext4_journal_start_sb+0x32a/0x5c0 fs/ext4/ext4_jbd2.c:114
__ext4_journal_start fs/ext4/ext4_jbd2.h:242 [inline]
ext4_dirty_inode+0xa1/0x130 fs/ext4/inode.c:6447
__mark_inode_dirty+0x1f3/0x1600 fs/fs-writeback.c:2609
generic_update_time fs/inode.c:2198 [inline]
file_update_time_flags+0x46b/0x500 fs/inode.c:2428
ext4_page_mkwrite+0x35b/0x1980 fs/ext4/inode.c:6616
do_page_mkwrite+0x17a/0x440 mm/memory.c:3581
do_shared_fault mm/memory.c:5866 [inline]
do_fault+0x3d7/0x1a00 mm/memory.c:5928
do_pte_missing mm/memory.c:4469 [inline]
handle_pte_fault mm/memory.c:6308 [inline]
__handle_mm_fault+0x180f/0x2b60 mm/memory.c:6446
handle_mm_fault+0x36d/0xa20 mm/memory.c:6615
do_user_addr_fault+0x5a3/0x12f0 arch/x86/mm/fault.c:1334
handle_page_fault arch/x86/mm/fault.c:1474 [inline]
exc_page_fault+0x6f/0xd0 arch/x86/mm/fault.c:1527
asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:618
RIP: 0033:0x7fef05c70780
RSP: 002b:00007ffd883de400 EFLAGS: 00010202
RAX: 0000001b3151d000 RBX: ffffffff8b74f2ad RCX: 0000001b3151cff8
RDX: 0000001b31124220 RSI: 0000000000000008 RDI: 00007fef06b45720
RBP: 0000000000000084 R08: 00007fef06000000 R09: 00007fef06002000
R10: 000000008b74f2b1 R11: 0000000000000008 R12: 00007fef06016218
R13: 0000000000000083 R14: ffffffff8b74fc29 R15: 00007fef06b45720
Showing all locks held in the system:
1 lock held by khungtaskd/30:
#0: ffffffff8e7e7460 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:312 [inline]
#0: ffffffff8e7e7460 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:850 [inline]
#0: ffffffff8e7e7460 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 kernel/locking/lockdep.c:6775
2 locks held by syz-executor/5808:
#0: ffff88803565ed08 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x11d/0x590 mm/mmap_lock.c:310
#1: ffff888033826518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x17a/0x440 mm/memory.c:3581
1 lock held by kworker/u10:35/30369:
#0: ffff8880b843b0e0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested kernel/sched/core.c:655 [inline]
#0: ffff8880b843b0e0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 kernel/sched/core.c:639
6 locks held by kworker/u10:37/30371:
#0: ffff88801cac3948 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 kernel/workqueue.c:3250
#1: ffffc9000448fd08 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 kernel/workqueue.c:3251
#2: ffff8880338260e0 (&type->s_umount_key#34){++++}-{4:4}, at: super_trylock_shared+0x1e/0xf0 fs/super.c:565
#3: ffff888033824b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: do_writepages+0x278/0x600 mm/page-writeback.c:2554
#4: ffff888033822950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfaa/0x13a0 fs/jbd2/transaction.c:444
#5: ffff8880776515a0 (&ei->i_data_sem){++++}-{4:4}, at: ext4_map_blocks+0x45a/0xd30 fs/ext4/inode.c:808
1 lock held by syz.7.6386/14942:
#0: ffff8880338260e0 (&type->s_umount_key#34){++++}-{4:4}, at: __super_lock fs/super.c:60 [inline]
#0: ffff8880338260e0 (&type->s_umount_key#34){++++}-{4:4}, at: super_lock+0x320/0x3f0 fs/super.c:122
1 lock held by syz.0.6389/14953:
#0: ffff8880338260e0 (&type->s_umount_key#34){++++}-{4:4}, at: __super_lock fs/super.c:60 [inline]
#0: ffff8880338260e0 (&type->s_umount_key#34){++++}-{4:4}, at: super_lock+0x320/0x3f0 fs/super.c:122
1 lock held by syz.0.6389/14966:
#0: ffff8880338260e0 (&type->s_umount_key#34){++++}-{4:4}, at: __super_lock fs/super.c:60 [inline]
#0: ffff8880338260e0 (&type->s_umount_key#34){++++}-{4:4}, at: super_lock+0x320/0x3f0 fs/super.c:122
2 locks held by syz.3.6391/14991:
#0: ffff888067cd8808 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x11d/0x590 mm/mmap_lock.c:310
#1: ffff888033826518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x17a/0x440 mm/memory.c:3581
2 locks held by syz.6.6393/15010:
#0: ffff8880265e46c8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x11d/0x590 mm/mmap_lock.c:310
#1: ffff888033826518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x17a/0x440 mm/memory.c:3581
=============================================
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full)
Tainted: [U]=USER, [L]=SOFTLOCKUP
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
Call Trace:
__dump_stack lib/dump_stack.c:94 [inline]
dump_stack_lvl+0x100/0x190 lib/dump_stack.c:120
nmi_cpu_backtrace.cold+0x12d/0x151 lib/nmi_backtrace.c:113
nmi_trigger_cpumask_backtrace+0x1d7/0x230 lib/nmi_backtrace.c:62
trigger_all_cpu_backtrace include/linux/nmi.h:161 [inline]
__sys_info lib/sys_info.c:157 [inline]
sys_info+0x141/0x190 lib/sys_info.c:165
check_hung_uninterruptible_tasks kernel/hung_task.c:346 [inline]
watchdog+0xcc3/0xfe0 kernel/hung_task.c:515
kthread+0x370/0x450 kernel/kthread.c:467
ret_from_fork+0x754/0xd80 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 30369 Comm: kworker/u10:35 Tainted: G U L syzkaller #0 PREEMPT(full)
Tainted: [U]=USER, [L]=SOFTLOCKUP
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
Workqueue: events_unbound toggle_allocation_gate
RIP: 0010:get_current arch/x86/include/asm/current.h:23 [inline]
RIP: 0010:__sanitizer_cov_trace_pc+0xf/0x70 kernel/kcov.c:216
Code: 00 00 00 5b e9 a2 ad e3 02 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 65 8b 05 c5 6d 02 12 48 8b 34 24 <65> 48 8b 15 a1 6d 02 12 a9 00 01 ff 00 74 1b f6 c4 01 74 07 a9 00
RSP: 0018:ffffc900044af818 EFLAGS: 00000293
RAX: 0000000080000000 RBX: 00002aaaaaaab000 RCX: ffffc900044af998
RDX: ffffc900044af878 RSI: ffffffff825b96d8 RDI: ffff88813fe8baa8
RBP: ffff88813fe8baa8 R08: 0000000000000007 R09: 0000000000000000
R10: 000000013fe8e007 R11: 0000000000000000 R12: ffffc900044af878
R13: ffff88813fe8baa8 R14: ffffc900044af998 R15: 8000000000000063
FS: 0000000000000000(0000) GS:ffff888124392000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055aa879e5a38 CR3: 000000000e596000 CR4: 00000000003526f0
Call Trace:
rcu_read_lock include/linux/rcupdate.h:848 [inline]
__pte_offset_map+0x18/0x310 mm/pgtable-generic.c:288
pte_offset_map_lock+0x8d/0x320 mm/pgtable-generic.c:398
get_locked_pte+0x79/0xc0 mm/memory.c:2281
__text_poke+0x250/0xae0 arch/x86/kernel/alternative.c:2560
smp_text_poke_batch_finish+0x6b5/0xc60 arch/x86/kernel/alternative.c:3034
arch_jump_label_transform_apply+0x1c/0x30 arch/x86/kernel/jump_label.c:146
jump_label_update+0x37a/0x550 kernel/jump_label.c:919
static_key_enable_cpuslocked+0x1bc/0x270 kernel/jump_label.c:210
static_key_enable+0x1a/0x20 kernel/jump_label.c:223
toggle_allocation_gate mm/kfence/core.c:899 [inline]
toggle_allocation_gate+0xfe/0x2d0 mm/kfence/core.c:891
process_one_work+0x9c2/0x1840 kernel/workqueue.c:3275
process_scheduled_works kernel/workqueue.c:3358 [inline]
worker_thread+0x5da/0xe40 kernel/workqueue.c:3439
kthread+0x370/0x450 kernel/kthread.c:467
ret_from_fork+0x754/0xd80 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245