------------[ cut here ]------------ debug_locks && !(lock_is_held(&(__rq_lockp(rq))->dep_map) != 0) WARNING: kernel/sched/sched.h:1673 at lockdep_assert_rq_held kernel/sched/sched.h:1673 [inline], CPU#0: syz.8.3576/24821 WARNING: kernel/sched/sched.h:1673 at update_rq_clock+0x34d/0x560 kernel/sched/core.c:876, CPU#0: syz.8.3576/24821 Modules linked in: CPU: 0 UID: 0 PID: 24821 Comm: syz.8.3576 Tainted: G L syzkaller #0 PREEMPT(lazy) Tainted: [L]=SOFTLOCKUP Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 RIP: 0010:lockdep_assert_rq_held kernel/sched/sched.h:1673 [inline] RIP: 0010:update_rq_clock+0x34d/0x560 kernel/sched/core.c:876 Code: 48 c1 e8 03 80 3c 28 00 74 08 48 89 df e8 db 10 a5 00 4c 01 3b 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d e9 45 51 59 0a cc 90 <0f> 0b 90 e9 42 fd ff ff 48 89 df 48 83 c4 10 5b 41 5c 41 5d 41 5e RSP: 0018:ffffc900041d5ed8 EFLAGS: 00010046 RAX: 0000000000000000 RBX: ffff8880b873c140 RCX: 0000000000000002 RDX: 00000000000000ff RSI: ffffffff8e6c2900 RDI: ffffffff8c6df680 RBP: dffffc0000000000 R08: ffffffff9079b1bf R09: 1ffffffff20f3637 R10: dffffc0000000000 R11: ffffffff81a0b5d0 R12: ffff88802a572728 R13: dffffc0000000001 R14: ffff8880b873d008 R15: ffff8880b873c140 FS: 00007f033dfb76c0(0000) GS:ffff888124cbd000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ffdfdbd3f98 CR3: 00000000128fc000 CR4: 00000000003526f0 DR0: 0000000000000004 DR1: 00000000000001f8 DR2: fffffffffffffffe DR3: ffffffdfefffff17 DR6: 00000000ffff0ff0 DR7: 0000000000000400 Call Trace: pick_next_task kernel/sched/core.c:6425 [inline] __schedule+0x3c54/0x5b40 kernel/sched/core.c:7296 preempt_schedule_irq+0x4b/0x90 kernel/sched/core.c:7664 irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:524 [inline] irqentry_exit+0x14f/0x920 kernel/entry/common.c:154 asm_sysvec_reschedule_ipi+0x1a/0x20 arch/x86/include/asm/idtentry.h:679 RIP: 0010:page_zone include/linux/mm.h:2791 [inline] RIP: 0010:bad_range+0x1ba/0x2a0 mm/page_alloc.c:605 Code: 00 4d 8b 7d 00 49 83 ff ff 0f 84 e8 00 00 00 4c 89 f8 48 c1 e8 3a 48 8d 1c c5 80 c6 a6 9a 48 89 d8 48 c1 e8 03 42 80 3c 30 00 <74> 08 48 89 df e8 7c ae 0d 00 4c 8b 33 4c 89 fb 48 c1 eb 37 83 e3 RSP: 0018:ffffc900041d6230 EFLAGS: 00000246 RAX: 1ffffffff354d8d0 RBX: ffffffff9aa6c680 RCX: 0000000000000046 RDX: 0000000000000006 RSI: ffffffff8e43d4e5 RDI: ffffffff8c6df680 RBP: 0000000000001000 R08: ffffffff9079b1bf R09: 1ffffffff20f3637 R10: dffffc0000000000 R11: fffffbfff20f3638 R12: ffff88813fffbb00 R13: ffffea0000e1cc80 R14: dffffc0000000000 R15: 00fff00000000000 rmqueue mm/page_alloc.c:3428 [inline] get_page_from_freelist+0x21fa/0x2280 mm/page_alloc.c:3930 __alloc_frozen_pages_noprof+0x1fc/0x400 mm/page_alloc.c:5471 alloc_pages_mpol+0x21e/0x390 mm/mempolicy.c:2512 folio_alloc_mpol_noprof+0x39/0x160 mm/mempolicy.c:2531 shmem_alloc_folio mm/shmem.c:2137 [inline] shmem_alloc_and_add_folio+0x43e/0xf60 mm/shmem.c:2179 shmem_get_folio_gfp+0x594/0x1330 mm/shmem.c:2732 shmem_get_folio mm/shmem.c:2831 [inline] shmem_write_begin+0x16c/0x330 mm/shmem.c:3466 generic_perform_write+0x2d5/0x8e0 mm/filemap.c:4392 shmem_file_write_iter+0xf8/0x120 mm/shmem.c:3641 __kernel_write_iter+0x44a/0x8f0 fs/read_write.c:621 dump_write_iter fs/coredump.c:1354 [inline] dump_emit_page fs/coredump.c:1527 [inline] dump_user_range+0x715/0xca0 fs/coredump.c:1595 elf_core_dump+0x346a/0x3a70 fs/binfmt_elf.c:2106 coredump_write fs/coredump.c:1146 [inline] do_coredump+0x5e50/0x69c0 fs/coredump.c:1231 vfs_coredump+0xb41/0x10f0 fs/coredump.c:1306 get_signal+0x108f/0x12c0 kernel/signal.c:3097 arch_do_signal_or_restart+0xbb/0x860 arch/x86/kernel/signal.c:337 __exit_to_user_mode_loop kernel/entry/common.c:66 [inline] exit_to_user_mode_loop kernel/entry/common.c:101 [inline] __exit_to_user_mode_prepare include/linux/irq-entry-common.h:207 [inline] irqentry_exit_to_user_mode_prepare include/linux/irq-entry-common.h:244 [inline] irqentry_exit_to_user_mode include/linux/irq-entry-common.h:315 [inline] irqentry_exit+0x2c0/0x920 kernel/entry/common.c:152 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:595 RIP: 0033:0x7f033d19e161 Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 RAX: 0000000000000000 RBX: 00007f033d426090 RCX: 00007f033d19e159 RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 RBP: 00007f033d23506b R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 R13: 00007f033d426128 R14: 00007f033d426090 R15: 00007ffd75b8f748 ---------------- Code disassembly (best guess): 0: 00 4d 8b add %cl,-0x75(%rbp) 3: 7d 00 jge 0x5 5: 49 83 ff ff cmp $0xffffffffffffffff,%r15 9: 0f 84 e8 00 00 00 je 0xf7 f: 4c 89 f8 mov %r15,%rax 12: 48 c1 e8 3a shr $0x3a,%rax 16: 48 8d 1c c5 80 c6 a6 lea -0x65593980(,%rax,8),%rbx 1d: 9a 1e: 48 89 d8 mov %rbx,%rax 21: 48 c1 e8 03 shr $0x3,%rax 25: 42 80 3c 30 00 cmpb $0x0,(%rax,%r14,1) * 2a: 74 08 je 0x34 <-- trapping instruction 2c: 48 89 df mov %rbx,%rdi 2f: e8 7c ae 0d 00 call 0xdaeb0 34: 4c 8b 33 mov (%rbx),%r14 37: 4c 89 fb mov %r15,%rbx 3a: 48 c1 eb 37 shr $0x37,%rbx 3e: 83 .byte 0x83 3f: e3 .byte 0xe3