------------[ cut here ]------------ debug_locks && !(lock_is_held(&(__rq_lockp(rq))->dep_map) != 0) WARNING: kernel/sched/sched.h:1666 at lockdep_assert_rq_held kernel/sched/sched.h:1666 [inline], CPU#0: syz.0.53/5965 WARNING: kernel/sched/sched.h:1666 at update_rq_clock+0x34d/0x560 kernel/sched/core.c:876, CPU#0: syz.0.53/5965 Modules linked in: CPU: 0 UID: 0 PID: 5965 Comm: syz.0.53 Tainted: G L syzkaller #0 PREEMPT(full) Tainted: [L]=SOFTLOCKUP Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 RIP: 0010:lockdep_assert_rq_held kernel/sched/sched.h:1666 [inline] RIP: 0010:update_rq_clock+0x34d/0x560 kernel/sched/core.c:876 Code: 48 c1 e8 03 80 3c 28 00 74 08 48 89 df e8 3b 61 a4 00 4c 01 3b 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 90 <0f> 0b 90 e9 42 fd ff ff 48 89 df 48 83 c4 10 5b 41 5c 41 5d 41 5e RSP: 0018:ffffc90004e6e4b8 EFLAGS: 00010046 RAX: 0000000000000000 RBX: ffff8880b873c140 RCX: 0000000000000002 RDX: 00000000000000ff RSI: ffffffff8e6b0b18 RDI: ffffffff8c6dba80 RBP: dffffc0000000000 R08: ffffffff907a1fbf R09: 1ffffffff20f43f7 R10: dffffc0000000000 R11: ffffffff81a12620 R12: ffff88802d4207e8 R13: dffffc0000000001 R14: ffff8880b873d008 R15: ffff8880b873c140 FS: 00007f3cc9de76c0(0000) GS:ffff888124caf000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f0e9dcbc008 CR3: 000000007b5ee000 CR4: 00000000003526f0 Call Trace: pick_next_task kernel/sched/core.c:6377 [inline] __schedule+0x3d7b/0x5c60 kernel/sched/core.c:7220 preempt_schedule_irq+0x4b/0x90 kernel/sched/core.c:7585 irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:524 [inline] irqentry_exit+0x14f/0x910 kernel/entry/common.c:154 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674 RIP: 0010:ptlock_ptr include/linux/mm.h:4022 [inline] RIP: 0010:pte_lockptr include/linux/mm.h:4046 [inline] RIP: 0010:pte_offset_map_lock+0x127/0x210 mm/pgtable-generic.c:422 Code: ff e8 6d 5a a3 ff 4d 21 f5 49 c1 ed 06 4d 01 fd 49 83 c5 28 4c 89 e8 48 c1 e8 03 49 be 00 00 00 00 00 fc ff df 42 80 3c 30 00 <74> 08 4c 89 ef e8 cf a1 14 00 4d 8b 6d 00 4c 89 ef e8 d3 1d c8 09 RSP: 0018:ffffc90004e6e828 EFLAGS: 00000246 RAX: 1ffffd40002b7efd RBX: ffff888031bc2c88 RCX: ffff88802d420000 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 0000000056fdf067 R08: ffffffff82258759 R09: 0000000000000000 R10: dffffc0000000000 R11: ffffed100ec9727d R12: 1ffff11006378591 R13: ffffea00015bf7e8 R14: dffffc0000000000 R15: ffffea0000000000 follow_page_pte+0xc9/0xf10 mm/gup.c:812 follow_pmd_mask mm/gup.c:-1 [inline] follow_pud_mask mm/gup.c:967 [inline] follow_p4d_mask mm/gup.c:984 [inline] follow_page_mask mm/gup.c:1023 [inline] __get_user_pages+0xa65/0x26e0 mm/gup.c:1426 __get_user_pages_locked mm/gup.c:1696 [inline] get_dump_page+0x1b5/0x410 mm/gup.c:2206 dump_user_range+0x20c/0xd30 fs/coredump.c:1582 elf_core_dump+0x346a/0x3a70 fs/binfmt_elf.c:2106 coredump_write fs/coredump.c:1139 [inline] do_coredump+0x5c09/0x6750 fs/coredump.c:1224 vfs_coredump+0xa0a/0xe30 fs/coredump.c:1299 get_signal+0x108f/0x12c0 kernel/signal.c:3097 arch_do_signal_or_restart+0xbb/0x860 arch/x86/kernel/signal.c:337 __exit_to_user_mode_loop kernel/entry/common.c:66 [inline] exit_to_user_mode_loop kernel/entry/common.c:101 [inline] __exit_to_user_mode_prepare include/linux/irq-entry-common.h:207 [inline] irqentry_exit_to_user_mode_prepare include/linux/irq-entry-common.h:244 [inline] irqentry_exit_to_user_mode include/linux/irq-entry-common.h:315 [inline] irqentry_exit+0x2ba/0x910 kernel/entry/common.c:152 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:595 RIP: 0033:0x94 Code: Unable to access opcode bytes at 0x6a. RSP: 002b:00002000000002c8 EFLAGS: 00010217 RAX: 0000000000000000 RBX: 00007f3cc9226090 RCX: 00007f3cc8f9e159 RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000000 RBP: 00007f3cc903506b R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f3cc9226128 R14: 00007f3cc9226090 R15: 00007ffdf0cddbe8 ---------------- Code disassembly (best guess): 0: ff ljmp (bad) 1: e8 6d 5a a3 ff call 0xffa35a73 6: 4d 21 f5 and %r14,%r13 9: 49 c1 ed 06 shr $0x6,%r13 d: 4d 01 fd add %r15,%r13 10: 49 83 c5 28 add $0x28,%r13 14: 4c 89 e8 mov %r13,%rax 17: 48 c1 e8 03 shr $0x3,%rax 1b: 49 be 00 00 00 00 00 movabs $0xdffffc0000000000,%r14 22: fc ff df 25: 42 80 3c 30 00 cmpb $0x0,(%rax,%r14,1) * 2a: 74 08 je 0x34 <-- trapping instruction 2c: 4c 89 ef mov %r13,%rdi 2f: e8 cf a1 14 00 call 0x14a203 34: 4d 8b 6d 00 mov 0x0(%r13),%r13 38: 4c 89 ef mov %r13,%rdi 3b: e8 d3 1d c8 09 call 0x9c81e13