INFO: task syz.1.18:6704 blocked for more than 143 seconds.
Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.1.18 state:D stack:20568 pid:6704 tgid:6704 ppid:6368 task_flags:0x400640 flags:0x00080002
Call Trace:
context_switch kernel/sched/core.c:5256 [inline]
__schedule+0x14b8/0x4f90 kernel/sched/core.c:6863
__schedule_loop kernel/sched/core.c:6945 [inline]
schedule+0x161/0x360 kernel/sched/core.c:6960
io_schedule+0x7d/0xd0 kernel/sched/core.c:7789
__lock_metapage fs/jfs/jfs_metapage.c:52 [inline]
lock_metapage+0x1ef/0x3f0 fs/jfs/jfs_metapage.c:66
__get_metapage+0x496/0xde0 fs/jfs/jfs_metapage.c:748
xtSplitPage+0x281/0x2150 fs/jfs/jfs_xtree.c:989
xtSplitUp+0x317/0x1f40 fs/jfs/jfs_xtree.c:786
xtInsert+0x411/0xe30 fs/jfs/jfs_xtree.c:608
extAlloc+0xa96/0xfb0 fs/jfs/jfs_extent.c:150
jfs_get_block+0x342/0xab0 fs/jfs/inode.c:254
__block_write_begin_int+0x6b1/0x18f0 fs/buffer.c:2145
block_write_begin+0x89/0x120 fs/buffer.c:2256
jfs_write_begin+0x31/0x70 fs/jfs/inode.c:306
generic_perform_write+0x2c1/0x8f0 mm/filemap.c:4314
generic_file_write_iter+0x113/0x540 mm/filemap.c:4457
__kernel_write_iter+0x3ee/0x8f0 fs/read_write.c:619
dump_emit_page fs/coredump.c:1298 [inline]
dump_user_range+0x89c/0xc70 fs/coredump.c:1372
elf_core_dump+0x336d/0x3960 fs/binfmt_elf.c:2111
coredump_write+0x110e/0x1890 fs/coredump.c:1049
do_coredump fs/coredump.c:1126 [inline]
vfs_coredump+0x32ef/0x3e30 fs/coredump.c:1200
get_signal+0x10d4/0x1310 kernel/signal.c:3019
arch_do_signal_or_restart+0x96/0x790 arch/x86/kernel/signal.c:337
__exit_to_user_mode_loop kernel/entry/common.c:41 [inline]
exit_to_user_mode_loop kernel/entry/common.c:75 [inline]
__exit_to_user_mode_prepare include/linux/irq-entry-common.h:226 [inline]
irqentry_exit_to_user_mode_prepare include/linux/irq-entry-common.h:270 [inline]
irqentry_exit_to_user_mode include/linux/irq-entry-common.h:339 [inline]
irqentry_exit+0x16f/0x600 kernel/entry/common.c:196
exc_page_fault+0xa1/0xf0 arch/x86/mm/fault.c:1535
asm_exc_page_fault+0x22/0x30 arch/x86/include/asm/idtentry.h:618
RIP: 0033:0x7f931998f751
RSP: 002b:00000000fffffe60 EFLAGS: 00010217
RAX: 0000000000000000 RBX: 00007f9319be5fa0 RCX: 00007f931998f749
RDX: 0000000000000000 RSI: 00000000fffffe60 RDI: 0000000000040000
RBP: 00007f9319a13f91 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
R13: 00007f9319be6038 R14: 00007f9319be5fa0 R15: 00007ffe2aaacd48
INFO: task syz-executor:6778 blocked for more than 145 seconds.
Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor state:D stack:20832 pid:6778 tgid:6778 ppid:1 task_flags:0x400140 flags:0x00080002
Call Trace:
context_switch kernel/sched/core.c:5256 [inline]
__schedule+0x14b8/0x4f90 kernel/sched/core.c:6863
__schedule_loop kernel/sched/core.c:6945 [inline]
schedule+0x161/0x360 kernel/sched/core.c:6960
schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:7017
rwsem_down_write_slowpath+0x916/0x1090 kernel/locking/rwsem.c:1185
__down_write_common kernel/locking/rwsem.c:1317 [inline]
__down_write kernel/locking/rwsem.c:1326 [inline]
down_write+0x1a7/0x1f0 kernel/locking/rwsem.c:1591
inode_lock include/linux/fs.h:1027 [inline]
vfs_unlink+0xeb/0x640 fs/namei.c:5355
do_unlinkat+0x2cb/0x560 fs/namei.c:5439
__do_sys_unlink fs/namei.c:5474 [inline]
__se_sys_unlink fs/namei.c:5472 [inline]
__x64_sys_unlink+0x43/0x50 fs/namei.c:5472
do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
do_syscall_64+0x86/0x12e0 arch/x86/entry/syscall_64.c:94
entry_SYSCALL_64_after_hwframe+0x76/0x7e
RIP: 0033:0x7f7726b8ecf7
RSP: 002b:00007fff8e036f58 EFLAGS: 00000206 ORIG_RAX: 0000000000000057
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7726b8ecf7
RDX: 00007fff8e036f80 RSI: 00007fff8e037010 RDI: 00007fff8e037010
RBP: 00007fff8e037010 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000100 R11: 0000000000000206 R12: 00007fff8e038100
R13: 00007f7726c13d7d R14: 000000000002a473 R15: 00007fff8e0391d0
INFO: task syz-executor:6778 blocked on an rw-semaphore likely owned by task syz.8.40:6903
INFO: task syz.8.40:6903 blocked for more than 145 seconds.
Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.8.40 state:D stack:20568 pid:6903 tgid:6903 ppid:6778 task_flags:0x400640 flags:0x00080000
Call Trace:
context_switch kernel/sched/core.c:5256 [inline]
__schedule+0x14b8/0x4f90 kernel/sched/core.c:6863
__schedule_loop kernel/sched/core.c:6945 [inline]
schedule+0x161/0x360 kernel/sched/core.c:6960
io_schedule+0x7d/0xd0 kernel/sched/core.c:7789
__lock_metapage fs/jfs/jfs_metapage.c:52 [inline]
lock_metapage+0x1ef/0x3f0 fs/jfs/jfs_metapage.c:66
__get_metapage+0x496/0xde0 fs/jfs/jfs_metapage.c:748
xtSplitPage+0x281/0x2150 fs/jfs/jfs_xtree.c:989
xtSplitUp+0x317/0x1f40 fs/jfs/jfs_xtree.c:786
xtInsert+0x411/0xe30 fs/jfs/jfs_xtree.c:608
extAlloc+0xa96/0xfb0 fs/jfs/jfs_extent.c:150
jfs_get_block+0x342/0xab0 fs/jfs/inode.c:254
__block_write_begin_int+0x6b1/0x18f0 fs/buffer.c:2145
block_write_begin+0x89/0x120 fs/buffer.c:2256
jfs_write_begin+0x31/0x70 fs/jfs/inode.c:306
generic_perform_write+0x2c1/0x8f0 mm/filemap.c:4314
generic_file_write_iter+0x113/0x540 mm/filemap.c:4457
__kernel_write_iter+0x3ee/0x8f0 fs/read_write.c:619
dump_emit_page fs/coredump.c:1298 [inline]
dump_user_range+0x89c/0xc70 fs/coredump.c:1372
elf_core_dump+0x336d/0x3960 fs/binfmt_elf.c:2111
coredump_write+0x110e/0x1890 fs/coredump.c:1049
do_coredump fs/coredump.c:1126 [inline]
vfs_coredump+0x32ef/0x3e30 fs/coredump.c:1200
get_signal+0x10d4/0x1310 kernel/signal.c:3019
arch_do_signal_or_restart+0x96/0x790 arch/x86/kernel/signal.c:337
__exit_to_user_mode_loop kernel/entry/common.c:41 [inline]
exit_to_user_mode_loop kernel/entry/common.c:75 [inline]
__exit_to_user_mode_prepare include/linux/irq-entry-common.h:226 [inline]
irqentry_exit_to_user_mode_prepare include/linux/irq-entry-common.h:270 [inline]
irqentry_exit_to_user_mode include/linux/irq-entry-common.h:339 [inline]
irqentry_exit+0x16f/0x600 kernel/entry/common.c:196
exc_page_fault+0xa1/0xf0 arch/x86/mm/fault.c:1535
asm_exc_page_fault+0x22/0x30 arch/x86/include/asm/idtentry.h:618
RIP: 0033:0x7f7726b8f751
RSP: 002b:00000000fffffe60 EFLAGS: 00010217
RAX: 0000000000000000 RBX: 00007f7726de5fa0 RCX: 00007f7726b8f749
RDX: 0000000000000000 RSI: 00000000fffffe60 RDI: 0000000000040000
RBP: 00007f7726c13f91 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
R13: 00007f7726de6038 R14: 00007f7726de5fa0 R15: 00007fff8e038db8
Showing all locks held in the system:
1 lock held by khungtaskd/31:
#0: ffffffff8dd3ee40 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline]
#0: ffffffff8dd3ee40 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:867 [inline]
#0: ffffffff8dd3ee40 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2a/0x180 kernel/locking/lockdep.c:6775
5 locks held by kworker/u8:5/1000:
#0: ffff88801aadf148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3232 [inline]
#0: ffff88801aadf148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b0/0x1750 kernel/workqueue.c:3340
#1: ffffc90003c3fb60 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3233 [inline]
#1: ffffc90003c3fb60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9eb/0x1750 kernel/workqueue.c:3340
#2: ffffffff8f0abe70 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf3/0x850 net/core/net_namespace.c:670
#3: ffffffff8f0b8e48 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xd8/0x9e0 net/core/dev.c:13022
#4: ffffffff8dd44978 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock kernel/rcu/tree_exp.h:311 [inline]
#4: ffffffff8dd44978 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f2/0x730 kernel/rcu/tree_exp.h:956
4 locks held by kworker/u8:6/1135:
#0: ffff888141693948 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3232 [inline]
#0: ffff888141693948 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x9b0/0x1750 kernel/workqueue.c:3340
#1: ffffc9000410fb60 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3233 [inline]
#1: ffffc9000410fb60 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9eb/0x1750 kernel/workqueue.c:3340
#2: ffff88807b5580e0 (&type->s_umount_key#54){++++}-{4:4}, at: super_trylock_shared+0x1c/0xf0 fs/super.c:563
#3: ffff88807365d430 (&jfs_ip->commit_mutex){+.+.}-{4:4}, at: jfs_commit_inode+0x1c6/0x520 fs/jfs/inode.c:108
3 locks held by kworker/u8:10/3772:
#0: ffff88814cc37948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3232 [inline]
#0: ffff88814cc37948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b0/0x1750 kernel/workqueue.c:3340
#1: ffffc9000bf97b60 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3233 [inline]
#1: ffffc9000bf97b60 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9eb/0x1750 kernel/workqueue.c:3340
#2: ffffffff8f0b8e48 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline]
#2: ffffffff8f0b8e48 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x10e/0x14b0 net/ipv6/addrconf.c:4194
2 locks held by getty/5562:
#0: ffff88814ce770a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 drivers/tty/tty_ldisc.c:243
#1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x445/0x1450 drivers/tty/n_tty.c:2211
4 locks held by syz.1.18/6704:
#0: ffff88807f3ca420 (sb_writers#12){.+.+}-{0:0}, at: do_coredump fs/coredump.c:1126 [inline]
#0: ffff88807f3ca420 (sb_writers#12){.+.+}-{0:0}, at: vfs_coredump+0x32ef/0x3e30 fs/coredump.c:1200
#1: ffff8880505d17c8 (&sb->s_type->i_mutex_key#24){+.+.}-{4:4}, at: inode_lock include/linux/fs.h:1027 [inline]
#1: ffff8880505d17c8 (&sb->s_type->i_mutex_key#24){+.+.}-{4:4}, at: generic_file_write_iter+0xe7/0x540 mm/filemap.c:4454
#2: ffff8880505d1388 (&jfs_ip->rdwrlock#2){+.+.}-{4:4}, at: jfs_get_block+0x13d/0xab0 fs/jfs/inode.c:219
#3: ffff8880505d1418 (&jfs_ip->commit_mutex){+.+.}-{4:4}, at: extAlloc+0x138/0xfb0 fs/jfs/jfs_extent.c:86
3 locks held by syz-executor/6778:
#0: ffff88807b558420 (sb_writers#12){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 fs/namespace.c:499
#1: ffff88807365ceb8 (&type->i_mutex_dir_key#8/1){+.+.}-{4:4}, at: inode_lock_nested include/linux/fs.h:1072 [inline]
#1: ffff88807365ceb8 (&type->i_mutex_dir_key#8/1){+.+.}-{4:4}, at: __start_dirop fs/namei.c:2864 [inline]
#1: ffff88807365ceb8 (&type->i_mutex_dir_key#8/1){+.+.}-{4:4}, at: start_dirop fs/namei.c:2875 [inline]
#1: ffff88807365ceb8 (&type->i_mutex_dir_key#8/1){+.+.}-{4:4}, at: do_unlinkat+0x1ae/0x560 fs/namei.c:5420
#2: ffff88807365d7e0 (&sb->s_type->i_mutex_key#24){+.+.}-{4:4}, at: inode_lock include/linux/fs.h:1027 [inline]
#2: ffff88807365d7e0 (&sb->s_type->i_mutex_key#24){+.+.}-{4:4}, at: vfs_unlink+0xeb/0x640 fs/namei.c:5355
4 locks held by syz.8.40/6903:
#0: ffff88807b558420 (sb_writers#12){.+.+}-{0:0}, at: do_coredump fs/coredump.c:1126 [inline]
#0: ffff88807b558420 (sb_writers#12){.+.+}-{0:0}, at: vfs_coredump+0x32ef/0x3e30 fs/coredump.c:1200
#1: ffff88807365d7e0 (&sb->s_type->i_mutex_key#24){+.+.}-{4:4}, at: inode_lock include/linux/fs.h:1027 [inline]
#1: ffff88807365d7e0 (&sb->s_type->i_mutex_key#24){+.+.}-{4:4}, at: generic_file_write_iter+0xe7/0x540 mm/filemap.c:4454
#2: ffff88807365d3a0 (&jfs_ip->rdwrlock#2){+.+.}-{4:4}, at: jfs_get_block+0x13d/0xab0 fs/jfs/inode.c:219
#3: ffff88807365d430 (&jfs_ip->commit_mutex){+.+.}-{4:4}, at: extAlloc+0x138/0xfb0 fs/jfs/jfs_extent.c:86
4 locks held by kworker/u8:17/7042:
#0: ffff8880b893a8d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 kernel/sched/core.c:639
#1: ffff8880b8924588 (psi_seq){-.-.}-{0:0}, at: psi_sched_switch kernel/sched/stats.h:225 [inline]
#1: ffff8880b8924588 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2497/0x4f90 kernel/sched/core.c:6857
#2: ffff888055df8788 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: class_wiphy_constructor include/net/cfg80211.h:6363 [inline]
#2: ffff888055df8788 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb0/0x440 net/wireless/core.c:424
#3: ffffffff997eb520 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x7f/0x540 lib/debugobjects.c:818
3 locks held by kworker/u8:20/7283:
#0: ffff88813fe69948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3232 [inline]
#0: ffff88813fe69948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b0/0x1750 kernel/workqueue.c:3340
#1: ffffc90004b37b60 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3233 [inline]
#1: ffffc90004b37b60 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9eb/0x1750 kernel/workqueue.c:3340
#2: ffffffff8f0b8e48 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xa/0x50 net/core/link_watch.c:303
1 lock held by syz-executor/8346:
#0: ffffffff8f0b8e48 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline]
#0: ffffffff8f0b8e48 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_newaddr+0x5b3/0xd10 net/ipv6/addrconf.c:5027
7 locks held by syz-executor/8357:
#0: ffff88803205c420 (sb_writers#7){.+.+}-{0:0}, at: file_start_write include/linux/fs.h:2681 [inline]
#0: ffff88803205c420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x20d/0xb10 fs/read_write.c:682
#1: ffff888056c1bc88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e7/0x530 fs/kernfs/file.c:343
#2: ffff888143f5bb48 (kn->active#57){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline]
#2: ffff888143f5bb48 (kn->active#57){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x23a/0x530 fs/kernfs/file.c:344
#3: ffffffff8e973dc8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: new_device_store+0x128/0x6f0 drivers/net/netdevsim/bus.c:184
#4: ffff8880117ba0e8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:895 [inline]
#4: ffff8880117ba0e8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x84/0x420 drivers/base/dd.c:1006
#5: ffff8880309f6250 (&devlink->lock_key#33){+.+.}-{4:4}, at: nsim_drv_probe+0xbf/0xbc0 drivers/net/netdevsim/dev.c:1637
#6: ffffffff8f0b8e48 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline]
#6: ffffffff8f0b8e48 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x16/0xa0 net/core/dev.c:2083
4 locks held by syz-executor/8385:
#0: ffff88803205c420 (sb_writers#7){.+.+}-{0:0}, at: file_start_write include/linux/fs.h:2681 [inline]
#0: ffff88803205c420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x20d/0xb10 fs/read_write.c:682
#1: ffff88807ed26c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e7/0x530 fs/kernfs/file.c:343
#2: ffff888143f5bb48 (kn->active#57){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline]
#2: ffff888143f5bb48 (kn->active#57){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x23a/0x530 fs/kernfs/file.c:344
#3: ffffffff8e973dc8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: new_device_store+0x128/0x6f0 drivers/net/netdevsim/bus.c:184
2 locks held by syz.1.255/8774:
2 locks held by syz.8.256/8779:
1 lock held by syz.8.258/8783:
4 locks held by sed/8785:
=============================================
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full)
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
Call Trace:
dump_stack_lvl+0x185/0x250 lib/dump_stack.c:120
nmi_cpu_backtrace+0x39a/0x3d0 lib/nmi_backtrace.c:113
nmi_trigger_cpumask_backtrace+0x176/0x2e0 lib/nmi_backtrace.c:62
trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline]
__sys_info lib/sys_info.c:157 [inline]
sys_info+0x131/0x170 lib/sys_info.c:165
check_hung_uninterruptible_tasks kernel/hung_task.c:346 [inline]
watchdog+0x17e1/0x1830 kernel/hung_task.c:515
kthread+0x70d/0x890 kernel/kthread.c:463
ret_from_fork+0x591/0xaf0 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 8779 Comm: syz.8.256 Not tainted syzkaller #0 PREEMPT(full)
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x0/0x90 kernel/kcov.c:315
Code: 89 74 11 18 48 89 44 11 20 e9 7c ee 69 09 cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <48> 8b 04 24 65 48 8b 14 25 08 80 49 92 65 8b 0d dc 4e 89 10 81 e1
RSP: 0000:ffffc9000c446a38 EFLAGS: 00000246
RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff88807c060000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004
R10: dffffc0000000000 R11: fffffbfff332ffd4 R12: ffff88804f986200
R13: ffff888076cc5dc0 R14: ffffffffff7df000 R15: 0000200000821000
FS: 00007ff5335686c0(0000) GS:ffff888126488000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00005616d70d9950 CR3: 000000007a33a000 CR4: 00000000003526f0
Call Trace:
__get_user_pages+0x468/0x29b0 mm/gup.c:1412
__get_user_pages_locked mm/gup.c:1692 [inline]
get_dump_page+0x1a8/0x3e0 mm/gup.c:2192
dump_user_range+0x1da/0xc70 fs/coredump.c:1366
elf_core_dump+0x336d/0x3960 fs/binfmt_elf.c:2111
coredump_write+0x110e/0x1890 fs/coredump.c:1049
do_coredump fs/coredump.c:1126 [inline]
vfs_coredump+0x32ef/0x3e30 fs/coredump.c:1200
get_signal+0x10d4/0x1310 kernel/signal.c:3019
arch_do_signal_or_restart+0x96/0x790 arch/x86/kernel/signal.c:337
__exit_to_user_mode_loop kernel/entry/common.c:41 [inline]
exit_to_user_mode_loop kernel/entry/common.c:75 [inline]
__exit_to_user_mode_prepare include/linux/irq-entry-common.h:226 [inline]
irqentry_exit_to_user_mode_prepare include/linux/irq-entry-common.h:270 [inline]
irqentry_exit_to_user_mode include/linux/irq-entry-common.h:339 [inline]
irqentry_exit+0x16f/0x600 kernel/entry/common.c:196
exc_page_fault+0xa1/0xf0 arch/x86/mm/fault.c:1535
asm_exc_page_fault+0x22/0x30 arch/x86/include/asm/idtentry.h:618
RIP: 0033:0x7ff53278f751
Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f
RSP: 002b:00000000fffffe60 EFLAGS: 00010217
RAX: 0000000000000000 RBX: 00007ff5329e5fa0 RCX: 00007ff53278f749
RDX: 0000000000000000 RSI: 00000000fffffe60 RDI: 0000000000040000
RBP: 00007ff532813f91 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
R13: 00007ff5329e6038 R14: 00007ff5329e5fa0 R15: 00007fffab4feb08