INFO: task jbd2/sda1-8:2821 blocked in I/O wait for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:jbd2/sda1-8 state:D stack:26200 pid:2821 tgid:2821 ppid:2 task_flags:0x240040 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5387 [inline] __schedule+0xf89/0x4840 kernel/sched/core.c:7188 __schedule_loop kernel/sched/core.c:7267 [inline] schedule+0xdd/0x390 kernel/sched/core.c:7282 io_schedule+0x8a/0xf0 kernel/sched/core.c:8109 bit_wait_io+0xd/0xe0 kernel/sched/wait_bit.c:250 __wait_on_bit+0x65/0x180 kernel/sched/wait_bit.c:52 out_of_line_wait_on_bit+0xdc/0x110 kernel/sched/wait_bit.c:67 Showing all locks held in the system: 3 locks held by kworker/u8:0/12: #0: ffff888112e2b140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0} , at: process_one_work+0x12d6/0x1980 kernel/workqueue.c:3277 #1: ffffc900000cfd18 ( (work_completion)(&(&net->ipv6.addr_chk_work)->work) ){+.+.}-{0:0} , at: process_one_work+0x973/0x1980 kernel/workqueue.c:3278 #2: ffffffff8ab09860 ( rtnl_mutex ){+.+.}-{4:4} , at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline] , at: addrconf_verify_work+0x12/0x30 net/ipv6/addrconf.c:4746 5 locks held by ksoftirqd/1/22: #0: ffffffff896ca000 ( console_lock ){+.+.}-{0:0}, at: raw_spin_rq_lock_nested kernel/sched/core.c:652 [inline] ){+.+.}-{0:0}, at: raw_spin_rq_lock kernel/sched/sched.h:1624 [inline] ){+.+.}-{0:0}, at: rq_lock kernel/sched/sched.h:1968 [inline] ){+.+.}-{0:0}, at: __schedule+0x2bc/0x4840 kernel/sched/core.c:7063 #1: ffffc9000017fb88 ((work_completion)(&bh->bh)){+.-.}-{0:0}, at: process_one_work+0x973/0x1980 kernel/workqueue.c:3278 #2: ffff88810bf9d328 (&bh->lock){..-.}-{3:3}, at: spin_lock_irq include/linux/spinlock.h:372 [inline] #2: ffff88810bf9d328 (&bh->lock){..-.}-{3:3}, at: usb_giveback_urb_bh+0x2ca/0x560 drivers/usb/core/hcd.c:1699 #3: ffff88811bcdc5c0 (&p->pi_lock){-.-.}-{2:2}, at: class_raw_spinlock_irqsave_constructor include/linux/spinlock.h:571 [inline] #3: ffff88811bcdc5c0 (&p->pi_lock){-.-.}-{2:2}, at: try_to_wake_up+0xb5/0x1450 kernel/sched/core.c:4190 #4: ffff8881f57396e0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested kernel/sched/core.c:652 [inline] #4: ffff8881f57396e0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock kernel/sched/sched.h:1624 [inline] #4: ffff8881f57396e0 (&rq->__lock){-.-.}-{2:2}, at: rq_lock kernel/sched/sched.h:1968 [inline] #4: ffff8881f57396e0 (&rq->__lock){-.-.}-{2:2}, at: ttwu_queue kernel/sched/core.c:3976 [inline] #4: ffff8881f57396e0 (&rq->__lock){-.-.}-{2:2}, at: try_to_wake_up+0x669/0x1450 kernel/sched/core.c:4302 3 locks held by kworker/1:0/23: #0: ffff888103ab8140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 kernel/workqueue.c:3277 #1: ffffc9000018fd18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 kernel/workqueue.c:3278 #2: ffff88810bb431d8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1040 [inline] #2: ffff88810bb431d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0 drivers/usb/core/hub.c:5899 1 lock held by khungtaskd/30: #0: ffffffff896ddaa0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:300 [inline] #0: ffffffff896ddaa0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:838 [inline] #0: ffffffff896ddaa0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 kernel/locking/lockdep.c:6775 5 locks held by kworker/u8:4/52: #0: ffff888100e98940 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 kernel/workqueue.c:3277 #1: ffffc90000517d18 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 kernel/workqueue.c:3278 #2: ffffffff8aaf1228 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x9e0 net/core/net_namespace.c:673 #3: ffffffff8ab09860 (rtnl_mutex){+.+.}-{4:4}, at: ops_exit_rtnl_list net/core/net_namespace.c:173 [inline] #3: ffffffff8ab09860 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7ec/0xab0 net/core/net_namespace.c:248 #4: ffffffff896e95e8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 kernel/rcu/tree_exp.h:343 6 locks held by kworker/1:2/2819: #0: ffff888103ab8140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 kernel/workqueue.c:3277 #1: ffffc90006fffd18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 kernel/workqueue.c:3278 #2: ffff88810bf031d8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1040 [inline] #2: ffff88810bf031d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0 drivers/usb/core/hub.c:5899 #3: ffff88811bc771d8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1040 [inline] #3: ffff88811bc771d8 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0x10a/0x9a0 drivers/usb/core/hub.c:2336 #4: ffff88811bf221a0 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1040 [inline] #4: ffff88811bf221a0 (&dev->mutex){....}-{4:4}, at: __device_driver_lock drivers/base/dd.c:1174 [inline] #4: ffff88811bf221a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620 drivers/base/dd.c:1372 #5: ffffffff8a5147c0 (input_mutex){+.+.}-{4:4}, at: class_mutex_constructor include/linux/mutex.h:253 [inline] #5: ffffffff8a5147c0 (input_mutex){+.+.}-{4:4}, at: __input_unregister_device+0x156/0x470 drivers/input/input.c:2187 1 lock held by klogd/2850: #0: ffff8881f56396e0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x20/0x30 kernel/sched/core.c:652 2 locks held by getty/2923: #0: ffff8881163b30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 drivers/tty/tty_ldisc.c:243 #1: ffffc900000452e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0 drivers/tty/n_tty.c:2211 3 locks held by kworker/0:3/5225: #0: ffff88810006b140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 kernel/workqueue.c:3277 #1: ffffc900022efd18 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 kernel/workqueue.c:3278 #2: ffffffff896e95e8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 kernel/rcu/tree_exp.h:343 6 locks held by kworker/1:4/5299: #0: ffff888103ab8140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 kernel/workqueue.c:3277 #1: ffffc9000357fd18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 kernel/workqueue.c:3278 #2: ffff88810c30b1d8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1040 [inline] #2: ffff88810c30b1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0 drivers/usb/core/hub.c:5899 #3: ffff88810c308560 (&port_dev->status_lock){+.+.}-{4:4}, at: usb_lock_port drivers/usb/core/hub.c:3252 [inline] #3: ffff88810c308560 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_port_connect drivers/usb/core/hub.c:5464 [inline] #3: ffff88810c308560 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_port_connect_change drivers/usb/core/hub.c:5707 [inline] #3: ffff88810c308560 (&port_dev->status_lock){+.+.}-{4:4}, at: port_event drivers/usb/core/hub.c:5871 [inline] #3: ffff88810c308560 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2bd2/0x4af0 drivers/usb/core/hub.c:5953 #4: ffff88810abe1860 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_port_connect drivers/usb/core/hub.c:5465 [inline] #4: ffff88810abe1860 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_port_connect_change drivers/usb/core/hub.c:5707 [inline] #4: ffff88810abe1860 (hcd->address0_mutex){+.+.}-{4:4}, at: port_event drivers/usb/core/hub.c:5871 [inline] #4: ffff88810abe1860 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2bfb/0x4af0 drivers/usb/core/hub.c:5953 #5: ffffffff8a2fb988 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x1a5/0x1c60 drivers/usb/core/hub.c:3067 2 locks held by syz-executor/5333: #0: ffffffff8aaf1228 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x41e/0x780 net/core/net_namespace.c:575 #1: ffffffff8ab09860 (rtnl_mutex){+.+.}-{4:4}, at: ops_exit_rtnl_list net/core/net_namespace.c:173 [inline] #1: ffffffff8ab09860 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7ec/0xab0 net/core/net_namespace.c:248 2 locks held by syz-executor/5342: #0: ffffffff8aaf1228 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x41e/0x780 net/core/net_namespace.c:575 #1: ffffffff8ab09860 (rtnl_mutex){+.+.}-{4:4}, at: ops_exit_rtnl_list net/core/net_namespace.c:173 [inline] #1: ffffffff8ab09860 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7ec/0xab0 net/core/net_namespace.c:248 2 locks held by syz-executor/5347: #0: ffffffff8aaf1228 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x41e/0x780 net/core/net_namespace.c:575 #1: ffffffff8ab09860 (rtnl_mutex){+.+.}-{4:4}, at: ops_exit_rtnl_list net/core/net_namespace.c:173 [inline] #1: ffffffff8ab09860 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7ec/0xab0 net/core/net_namespace.c:248 2 locks held by syz-executor/5351: #0: ffffffff8aaf1228 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x41e/0x780 net/core/net_namespace.c:575 #1: ffffffff8ab09860 (rtnl_mutex){+.+.}-{4:4}, at: ops_exit_rtnl_list net/core/net_namespace.c:173 [inline] #1: ffffffff8ab09860 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7ec/0xab0 net/core/net_namespace.c:248 2 locks held by syz-executor/5354: #0: ffffffff8aaf1228 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x41e/0x780 net/core/net_namespace.c:575 #1: ffffffff8ab09860 (rtnl_mutex){+.+.}-{4:4}, at: ops_exit_rtnl_list net/core/net_namespace.c:173 [inline] #1: ffffffff8ab09860 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7ec/0xab0 net/core/net_namespace.c:248 2 locks held by syz-executor/5383: #0: ffffffff8aaf1228 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x41e/0x780 net/core/net_namespace.c:575 #1: ffffffff8ab09860 (rtnl_mutex){+.+.}-{4:4}, at: ops_exit_rtnl_list net/core/net_namespace.c:173 [inline] #1: ffffffff8ab09860 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7ec/0xab0 net/core/net_namespace.c:248 2 locks held by syz-executor/5390: #0: ffffffff8aaf1228 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x41e/0x780 net/core/net_namespace.c:575 #1: ffffffff8ab09860 (rtnl_mutex){+.+.}-{4:4}, at: ops_exit_rtnl_list net/core/net_namespace.c:173 [inline] #1: ffffffff8ab09860 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7ec/0xab0 net/core/net_namespace.c:248 2 locks held by syz-executor/5402: #0: ffffffff8aaf1228 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x41e/0x780 net/core/net_namespace.c:575 #1: ffffffff8ab09860 (rtnl_mutex){+.+.}-{4:4}, at: ops_exit_rtnl_list net/core/net_namespace.c:173 [inline] #1: ffffffff8ab09860 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7ec/0xab0 net/core/net_namespace.c:248 2 locks held by syz-executor/5405: #0: ffffffff8aaf1228 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x41e/0x780 net/core/net_namespace.c:575 #1: ffffffff8ab09860 (rtnl_mutex){+.+.}-{4:4}, at: ops_exit_rtnl_list net/core/net_namespace.c:173 [inline] #1: ffffffff8ab09860 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7ec/0xab0 net/core/net_namespace.c:248 2 locks held by syz-executor/5409: #0: ffffffff8aaf1228 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x41e/0x780 net/core/net_namespace.c:575 #1: ffffffff8ab09860 (rtnl_mutex){+.+.}-{4:4}, at: ops_exit_rtnl_list net/core/net_namespace.c:173 [inline] #1: ffffffff8ab09860 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7ec/0xab0 net/core/net_namespace.c:248 1 lock held by syz-executor/5433: #0: ffffffff8ab09860 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline] #0: ffffffff8ab09860 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x18b0 net/ipv4/devinet.c:978 1 lock held by syz-executor/5437: #0: ffffffff8ab09860 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline] #0: ffffffff8ab09860 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x18b0 net/ipv4/devinet.c:978 1 lock held by syz-executor/5441: #0: ffffffff8ab09860 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline] #0: ffffffff8ab09860 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x18b0 net/ipv4/devinet.c:978 1 lock held by syz-executor/5446: #0: ffffffff8ab09860 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline] #0: ffffffff8ab09860 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x18b0 net/ipv4/devinet.c:978 1 lock held by syz-executor/5448: #0: ffffffff8ab09860 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline] #0: ffffffff8ab09860 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x18b0 net/ipv4/devinet.c:978 1 lock held by syz-executor/5456: #0: ffffffff8ab09860 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline] #0: ffffffff8ab09860 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x18b0 net/ipv4/devinet.c:978 1 lock held by syz-executor/5460: #0: ffffffff8ab09860 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline] #0: ffffffff8ab09860 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x18b0 net/ipv4/devinet.c:978 1 lock held by syz-executor/5464: #0: ffffffff8ab09860 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline] #0: ffffffff8ab09860 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x18b0 net/ipv4/devinet.c:978 1 lock held by syz-executor/5469: #0: ffffffff8ab09860 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline] #0: ffffffff8ab09860 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x18b0 net/ipv4/devinet.c:978 ============================================= NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x100/0x190 lib/dump_stack.c:120 nmi_cpu_backtrace.cold+0x12d/0x151 lib/nmi_backtrace.c:113 nmi_trigger_cpumask_backtrace+0x1d7/0x230 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline] __sys_info lib/sys_info.c:157 [inline] sys_info+0x141/0x190 lib/sys_info.c:165 check_hung_uninterruptible_tasks kernel/hung_task.c:353 [inline] watchdog+0xcb1/0x1030 kernel/hung_task.c:561 kthread+0x370/0x450 kernel/kthread.c:436 ret_from_fork+0x69a/0xc80 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 5433 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 RIP: 0010:__sanitizer_cov_trace_pc+0x3f/0x70 kernel/kcov.c:217 Code: 46 0b a9 00 01 ff 00 74 1b f6 c4 01 74 07 a9 00 00 ff 00 74 05 e9 d1 ff c0 05 8b 82 04 16 00 00 85 c0 74 f1 8b 82 e0 15 00 00 <83> f8 02 75 e6 48 8b 8a e8 15 00 00 8b 92 e4 15 00 00 48 8b 01 48 RSP: 0018:ffffc90003b5f3e8 EFLAGS: 00000246 RAX: 0000000000000000 RBX: ffff8881072756a0 RCX: ffffffff821cf7c1 RDX: ffff8881226e5940 RSI: ffffffff821cf7cf RDI: ffff8881226e5940 RBP: 0000000000000000 R08: 0000000000000006 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000000 R12: ffff8881226e5940 R13: 0000000005920143 R14: 0000000000000001 R15: 0000000006ec00e4 FS: 0000000000000000(0000) GS:ffff888268787000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055733801e390 CR3: 0000000117c4e000 CR4: 00000000003506f0 Call Trace: page_ext_data include/linux/page_ext.h:103 [inline] get_page_owner mm/page_owner.c:152 [inline] __update_page_owner_free_handle.isra.0+0x17f/0x4d0 mm/page_owner.c:285 __reset_page_owner+0x93/0x190 mm/page_owner.c:321 reset_page_owner include/linux/page_owner.h:25 [inline] __free_pages_prepare mm/page_alloc.c:1402 [inline] free_unref_folios+0x9a1/0x1560 mm/page_alloc.c:3004 folios_put_refs+0x487/0x760 mm/swap.c:1008 free_pages_and_swap_cache+0x22d/0x3b0 mm/swap_state.c:401 __tlb_batch_free_encoded_pages+0xe9/0x280 mm/mmu_gather.c:138 tlb_batch_pages_flush mm/mmu_gather.c:151 [inline] tlb_flush_mmu_free mm/mmu_gather.c:417 [inline] tlb_flush_mmu mm/mmu_gather.c:424 [inline] tlb_finish_mmu+0x1b0/0x810 mm/mmu_gather.c:549 exit_mmap+0x454/0xa10 mm/mmap.c:1313 __mmput kernel/fork.c:1178 [inline] mmput+0xe0/0x430 kernel/fork.c:1201 exit_mm kernel/exit.c:581 [inline] do_exit+0x833/0x2a60 kernel/exit.c:963 do_group_exit+0xd5/0x2a0 kernel/exit.c:1117 get_signal+0x1ec7/0x21e0 kernel/signal.c:3037 arch_do_signal_or_restart+0x91/0x7a0 arch/x86/kernel/signal.c:337 __exit_to_user_mode_loop kernel/entry/common.c:64 [inline] exit_to_user_mode_loop+0x7e/0x430 kernel/entry/common.c:98 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:207 [inline] syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:238 [inline] syscall_exit_to_user_mode include/linux/entry-common.h:318 [inline] do_syscall_64+0x682/0x7f0 arch/x86/entry/syscall_64.c:100 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f8df9ee7f57 Code: Unable to access opcode bytes at 0x7f8df9ee7f2d. RSP: 002b:00007ffe46969c10 EFLAGS: 00000202 ORIG_RAX: 000000000000002c RAX: 0000000000000028 RBX: 0000555557ca7500 RCX: 00007f8df9ee7f57 RDX: 0000000000000028 RSI: 00007f8dfacd4670 RDI: 0000000000000003 RBP: 0000000000000001 R08: 00007ffe46969c74 R09: 000000000000000c R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 R13: 0000000000000000 R14: 00007f8dfacd4670 R15: 0000000000000000 ---------------- Code disassembly (best guess): 0: 46 0b a9 00 01 ff 00 rex.RX or 0xff0100(%rcx),%r13d 7: 74 1b je 0x24 9: f6 c4 01 test $0x1,%ah c: 74 07 je 0x15 e: a9 00 00 ff 00 test $0xff0000,%eax 13: 74 05 je 0x1a 15: e9 d1 ff c0 05 jmp 0x5c0ffeb 1a: 8b 82 04 16 00 00 mov 0x1604(%rdx),%eax 20: 85 c0 test %eax,%eax 22: 74 f1 je 0x15 24: 8b 82 e0 15 00 00 mov 0x15e0(%rdx),%eax * 2a: 83 f8 02 cmp $0x2,%eax <-- trapping instruction 2d: 75 e6 jne 0x15 2f: 48 8b 8a e8 15 00 00 mov 0x15e8(%rdx),%rcx 36: 8b 92 e4 15 00 00 mov 0x15e4(%rdx),%edx 3c: 48 8b 01 mov (%rcx),%rax 3f: 48 rex.W