------------[ cut here ]------------
DEBUG_LOCKS_WARN_ON(1)
WARNING: CPU: 1 PID: 6238 at kernel/locking/lockdep.c:232 hlock_class kernel/locking/lockdep.c:232 [inline]
WARNING: CPU: 1 PID: 6238 at kernel/locking/lockdep.c:232 check_wait_context kernel/locking/lockdep.c:4826 [inline]
WARNING: CPU: 1 PID: 6238 at kernel/locking/lockdep.c:232 __lock_acquire+0x58c/0x2050 kernel/locking/lockdep.c:5152
Modules linked in:
CPU: 1 UID: 0 PID: 6238 Comm: syz.2.71 Not tainted 6.12.0-rc7-syzkaller-00212-g4a5df3796467 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
RIP: 0010:hlock_class kernel/locking/lockdep.c:232 [inline]
RIP: 0010:check_wait_context kernel/locking/lockdep.c:4826 [inline]
RIP: 0010:__lock_acquire+0x58c/0x2050 kernel/locking/lockdep.c:5152
Code: 00 00 83 3d b5 db ac 0e 00 75 23 90 48 c7 c7 60 c9 0a 8c 48 c7 c6 00 cc 0a 8c e8 0f 7d e5 ff 48 ba 00 00 00 00 00 fc ff df 90 <0f> 0b 90 90 90 31 db 48 81 c3 c4 00 00 00 48 89 d8 48 c1 e8 03 0f
RSP: 0018:ffffc90000a189d0 EFLAGS: 00010046
RAX: 8b3308ad2ae58b00 RBX: 0000000000001228 RCX: ffff888026160000
RDX: dffffc0000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 000000000000000f R08: ffffffff8155e312 R09: fffffbfff1cf9fd0
R10: dffffc0000000000 R11: fffffbfff1cf9fd0 R12: ffff888026160000
R13: 0000000000001228 R14: 1ffff11004c2c16f R15: ffff888026160b78
FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000110c24e00e CR3: 000000002780a000 CR4: 0000000000350ef0
Call Trace:
lock_acquire+0x1ed/0x550 kernel/locking/lockdep.c:5825
_raw_spin_lock_nested+0x31/0x40 kernel/locking/spinlock.c:378
raw_spin_rq_lock_nested+0xb0/0x140 kernel/sched/core.c:606
raw_spin_rq_lock kernel/sched/sched.h:1506 [inline]
rq_lock kernel/sched/sched.h:1805 [inline]
sched_tick+0x72/0x610 kernel/sched/core.c:5598
update_process_times+0x202/0x230 kernel/time/timer.c:2524
tick_sched_handle kernel/time/tick-sched.c:276 [inline]
tick_nohz_handler+0x37c/0x500 kernel/time/tick-sched.c:297
__run_hrtimer kernel/time/hrtimer.c:1691 [inline]
__hrtimer_run_queues+0x553/0xd50 kernel/time/hrtimer.c:1755
hrtimer_interrupt+0x396/0x990 kernel/time/hrtimer.c:1817
local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1038 [inline]
__sysvec_apic_timer_interrupt+0x112/0x420 arch/x86/kernel/apic/apic.c:1055
instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1049 [inline]
sysvec_apic_timer_interrupt+0xa1/0xc0 arch/x86/kernel/apic/apic.c:1049
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:rcu_is_watching_curr_cpu include/linux/context_tracking.h:128 [inline]
RIP: 0010:rcu_is_watching+0x3a/0xb0 kernel/rcu/tree.c:737
Code: e8 fb 1d 4d 0a 89 c3 83 f8 08 73 7a 49 bf 00 00 00 00 00 fc ff df 4c 8d 34 dd 50 0a 32 8e 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 <74> 08 4c 89 f7 e8 5c f0 83 00 48 c7 c3 98 7e 03 00 49 03 1e 48 89
RSP: 0018:ffffc9000318f288 EFLAGS: 00000246
RAX: 1ffffffff1c6414b RBX: 0000000000000001 RCX: ffffffff81e24d56
RDX: ffff888026160000 RSI: ffffffff8c610d00 RDI: ffffffff8c610cc0
RBP: 0000000000000001 R08: ffffffff81e24d7c R09: 1ffffffff203a195
R10: dffffc0000000000 R11: fffffbfff203a196 R12: ffff88807dfb2a88
R13: dffffc0000000000 R14: ffffffff8e320a58 R15: dffffc0000000000
trace_rss_stat include/trace/events/kmem.h:384 [inline]
mm_trace_rss_stat+0x86/0x220 mm/memory.c:182
add_mm_counter include/linux/mm.h:2601 [inline]
add_mm_rss_vec+0x82/0x310 mm/memory.c:487
zap_pte_range mm/memory.c:1683 [inline]
zap_pmd_range mm/memory.c:1739 [inline]
zap_pud_range mm/memory.c:1768 [inline]
zap_p4d_range mm/memory.c:1789 [inline]
unmap_page_range+0x333e/0x40e0 mm/memory.c:1810
unmap_vmas+0x3cc/0x5f0 mm/memory.c:1900
exit_mmap+0x275/0xc40 mm/mmap.c:1923
__mmput+0x115/0x390 kernel/fork.c:1348
exit_mm+0x220/0x310 kernel/exit.c:571
do_exit+0x9b2/0x28e0 kernel/exit.c:926
do_group_exit+0x207/0x2c0 kernel/exit.c:1088
get_signal+0x16a3/0x1740 kernel/signal.c:2918
arch_do_signal_or_restart+0x96/0x860 arch/x86/kernel/signal.c:337
exit_to_user_mode_loop kernel/entry/common.c:111 [inline]
exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline]
__syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline]
syscall_exit_to_user_mode+0xc9/0x370 kernel/entry/common.c:218
do_syscall_64+0x100/0x230 arch/x86/entry/common.c:89
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7feb7097e719
Code: Unable to access opcode bytes at 0x7feb7097e6ef.
RSP: 002b:00007feb718210e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: fffffffffffffe00 RBX: 00007feb70b35f88 RCX: 00007feb7097e719
RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007feb70b35f88
RBP: 00007feb70b35f80 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007feb70b35f8c
R13: 0000000000000000 R14: 00007fff0eac3370 R15: 00007fff0eac3458
----------------
Code disassembly (best guess):
0: e8 fb 1d 4d 0a call 0xa4d1e00
5: 89 c3 mov %eax,%ebx
7: 83 f8 08 cmp $0x8,%eax
a: 73 7a jae 0x86
c: 49 bf 00 00 00 00 00 movabs $0xdffffc0000000000,%r15
13: fc ff df
16: 4c 8d 34 dd 50 0a 32 lea -0x71cdf5b0(,%rbx,8),%r14
1d: 8e
1e: 4c 89 f0 mov %r14,%rax
21: 48 c1 e8 03 shr $0x3,%rax
25: 42 80 3c 38 00 cmpb $0x0,(%rax,%r15,1)
* 2a: 74 08 je 0x34 <-- trapping instruction
2c: 4c 89 f7 mov %r14,%rdi
2f: e8 5c f0 83 00 call 0x83f090
34: 48 c7 c3 98 7e 03 00 mov $0x37e98,%rbx
3b: 49 03 1e add (%r14),%rbx
3e: 48 rex.W
3f: 89 .byte 0x89