------------[ cut here ]------------ DEBUG_LOCKS_WARN_ON(1) WARNING: CPU: 0 PID: 2999 at kernel/locking/lockdep.c:234 hlock_class kernel/locking/lockdep.c:234 [inline] WARNING: CPU: 0 PID: 2999 at kernel/locking/lockdep.c:234 check_wait_context kernel/locking/lockdep.c:4852 [inline] WARNING: CPU: 0 PID: 2999 at kernel/locking/lockdep.c:234 __lock_acquire+0x564/0x2100 kernel/locking/lockdep.c:5178 Modules linked in: CPU: 0 UID: 0 PID: 2999 Comm: kworker/u8:8 Not tainted 6.14.0-rc7-syzkaller-00137-g5fc319360819 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 Workqueue: events_unbound toggle_allocation_gate RIP: 0010:hlock_class kernel/locking/lockdep.c:234 [inline] RIP: 0010:check_wait_context kernel/locking/lockdep.c:4852 [inline] RIP: 0010:__lock_acquire+0x564/0x2100 kernel/locking/lockdep.c:5178 Code: 00 00 83 3d 01 4f a0 0e 00 75 23 90 48 c7 c7 40 b2 2a 8c 48 c7 c6 40 b5 2a 8c e8 97 bc e4 ff 48 ba 00 00 00 00 00 fc ff df 90 <0f> 0b 90 90 90 31 db 48 81 c3 c4 00 00 00 48 89 d8 48 c1 e8 03 0f RSP: 0018:ffffc9000c3f7370 EFLAGS: 00010046 RAX: 346d40817b04c400 RBX: 0000000000001b20 RCX: ffff888030b49e00 RDX: dffffc0000000000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 00000000000c1b20 R08: ffffffff81819e52 R09: 1ffff110170c519a R10: dffffc0000000000 R11: ffffed10170c519b R12: ffff888030b4a8d4 R13: 0000000000000014 R14: 1ffff11006169536 R15: ffff888030b4a9b0 FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000200000024030 CR3: 000000005e440000 CR4: 0000000000350ef0 Call Trace: lock_acquire+0x1ed/0x550 kernel/locking/lockdep.c:5851 _raw_spin_lock_nested+0x31/0x40 kernel/locking/spinlock.c:378 raw_spin_rq_lock_nested+0xb0/0x140 kernel/sched/core.c:606 raw_spin_rq_lock kernel/sched/sched.h:1521 [inline] rq_lock kernel/sched/sched.h:1852 [inline] __schedule+0x357/0x4c90 kernel/sched/core.c:6688 preempt_schedule_irq+0xfb/0x1c0 kernel/sched/core.c:7087 irqentry_exit+0x5e/0x90 kernel/entry/common.c:354 asm_sysvec_reschedule_ipi+0x1a/0x20 arch/x86/include/asm/idtentry.h:707 RIP: 0010:__jump_label_update+0x2a1/0x3a0 kernel/jump_label.c:508 Code: c8 ff 48 8b 5c 24 08 49 be 00 00 00 00 00 fc ff df 4a 8d 44 23 10 48 3b 44 24 18 0f 83 e3 00 00 00 e8 83 b6 c8 ff 49 83 c4 10 9c fd ff ff e8 75 b6 c8 ff c6 05 f2 e1 2d 0e 01 90 48 b9 00 00 RSP: 0018:ffffc9000c3f79a8 EFLAGS: 00000206 RAX: ffffffff81f929fd RBX: ffffffff8e5e4790 RCX: ffff888030b49e00 RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffc9000c3f7900 RBP: 000000000c0d9db9 R08: ffffc9000c3f7907 R09: 1ffff9200187ef20 R10: dffffc0000000000 R11: fffff5200187ef21 R12: 0000000000000060 R13: ffffffff8e5e47e8 R14: dffffc0000000000 R15: 1ffffffff1cbc8fd static_key_enable_cpuslocked+0x136/0x260 kernel/jump_label.c:210 static_key_enable+0x1a/0x20 kernel/jump_label.c:223 toggle_allocation_gate+0xbc/0x260 mm/kfence/core.c:850 process_one_work kernel/workqueue.c:3238 [inline] process_scheduled_works+0xac0/0x18e0 kernel/workqueue.c:3319 worker_thread+0x870/0xd30 kernel/workqueue.c:3400 kthread+0x7ab/0x920 kernel/kthread.c:464 ret_from_fork+0x4d/0x80 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 ---------------- Code disassembly (best guess): 0: c8 ff 48 8b enter $0x48ff,$0x8b 4: 5c pop %rsp 5: 24 08 and $0x8,%al 7: 49 be 00 00 00 00 00 movabs $0xdffffc0000000000,%r14 e: fc ff df 11: 4a 8d 44 23 10 lea 0x10(%rbx,%r12,1),%rax 16: 48 3b 44 24 18 cmp 0x18(%rsp),%rax 1b: 0f 83 e3 00 00 00 jae 0x104 21: e8 83 b6 c8 ff call 0xffc8b6a9 26: 49 83 c4 10 add $0x10,%r12 * 2a: e9 9c fd ff ff jmp 0xfffffdcb <-- trapping instruction 2f: e8 75 b6 c8 ff call 0xffc8b6a9 34: c6 05 f2 e1 2d 0e 01 movb $0x1,0xe2de1f2(%rip) # 0xe2de22d 3b: 90 nop 3c: 48 rex.W 3d: b9 .byte 0xb9