------------[ cut here ]------------ DEBUG_LOCKS_WARN_ON(1) WARNING: CPU: 0 PID: 7798 at kernel/locking/lockdep.c:232 hlock_class kernel/locking/lockdep.c:232 [inline] WARNING: CPU: 0 PID: 7798 at kernel/locking/lockdep.c:232 check_wait_context kernel/locking/lockdep.c:4850 [inline] WARNING: CPU: 0 PID: 7798 at kernel/locking/lockdep.c:232 __lock_acquire+0x564/0x2100 kernel/locking/lockdep.c:5176 Modules linked in: CPU: 0 UID: 0 PID: 7798 Comm: syz.7.457 Not tainted 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 RIP: 0010:hlock_class kernel/locking/lockdep.c:232 [inline] RIP: 0010:check_wait_context kernel/locking/lockdep.c:4850 [inline] RIP: 0010:__lock_acquire+0x564/0x2100 kernel/locking/lockdep.c:5176 Code: 00 00 83 3d 21 f2 9e 0e 00 75 23 90 48 c7 c7 00 96 0a 8c 48 c7 c6 00 99 0a 8c e8 67 5d e5 ff 48 ba 00 00 00 00 00 fc ff df 90 <0f> 0b 90 90 90 31 db 48 81 c3 c4 00 00 00 48 89 d8 48 c1 e8 03 0f RSP: 0018:ffffc900059b6b90 EFLAGS: 00010046 RAX: c6d6e74457db8f00 RBX: 00000000000019d8 RCX: ffff8880300a8000 RDX: dffffc0000000000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 00000000000c19d8 R08: ffffffff81601a42 R09: 1ffff110170c519a R10: dffffc0000000000 R11: ffffed10170c519b R12: ffff8880300a8ac4 R13: 0000000000000005 R14: 1ffff11006015165 R15: ffff8880300a8b28 FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000020006180 CR3: 0000000061c38000 CR4: 0000000000350ef0 Call Trace: lock_acquire+0x1ed/0x550 kernel/locking/lockdep.c:5849 _raw_spin_lock_nested+0x31/0x40 kernel/locking/spinlock.c:378 raw_spin_rq_lock_nested+0xb0/0x140 kernel/sched/core.c:606 raw_spin_rq_lock kernel/sched/sched.h:1523 [inline] rq_lock kernel/sched/sched.h:1822 [inline] __schedule+0x35a/0x4c30 kernel/sched/core.c:6680 preempt_schedule_irq+0xfb/0x1c0 kernel/sched/core.c:7078 irqentry_exit+0x5e/0x90 kernel/entry/common.c:354 asm_sysvec_reschedule_ipi+0x1a/0x20 arch/x86/include/asm/idtentry.h:707 RIP: 0010:__pte_offset_map_lock+0x92/0x300 mm/pgtable-generic.c:395 Code: 24 40 49 c1 ec 03 48 b8 f1 f1 f1 f1 00 f2 f2 f2 49 89 04 1c 66 41 c7 44 1c 09 f3 f3 41 c6 44 1c 0b f3 e8 d1 3a ad ff 4c 89 f8 <49> c1 ef 03 41 80 3c 1f 00 74 10 48 89 c7 e8 5b a4 13 00 48 8d 84 RSP: 0018:ffffc900059b71e0 EFLAGS: 00000293 RAX: ffffc900059b7260 RBX: dffffc0000000000 RCX: ffff8880300a8000 RDX: 0000000000000000 RSI: ffff888028d6b860 RDI: ffff88803044e180 RBP: ffffc900059b72d0 R08: ffffc900059b758f R09: ffffc900059b7580 R10: dffffc0000000000 R11: fffff52000b36eb2 R12: 1ffff92000b36e44 R13: ffff888028d6b860 R14: 00007f566189e000 R15: ffffc900059b7260 pte_offset_map_lock include/linux/mm.h:3026 [inline] zap_pte_range mm/memory.c:1606 [inline] zap_pmd_range mm/memory.c:1753 [inline] zap_pud_range mm/memory.c:1782 [inline] zap_p4d_range mm/memory.c:1803 [inline] unmap_page_range+0x993/0x4040 mm/memory.c:1824 unmap_vmas+0x3cc/0x5f0 mm/memory.c:1914 exit_mmap+0x275/0xc20 mm/mmap.c:1668 __mmput+0x115/0x3c0 kernel/fork.c:1353 exit_mm+0x220/0x310 kernel/exit.c:570 do_exit+0x9b2/0x28e0 kernel/exit.c:925 do_group_exit+0x207/0x2c0 kernel/exit.c:1087 get_signal+0x16b2/0x1750 kernel/signal.c:3017 arch_do_signal_or_restart+0x96/0x860 arch/x86/kernel/signal.c:337 exit_to_user_mode_loop kernel/entry/common.c:111 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:329 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0xce/0x340 kernel/entry/common.c:218 do_syscall_64+0x100/0x230 arch/x86/entry/common.c:89 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f5662785d29 Code: Unable to access opcode bytes at 0x7f5662785cff. RSP: 002b:00007f56635580e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: fffffffffffffe00 RBX: 00007f5662976088 RCX: 00007f5662785d29 RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5662976088 RBP: 00007f5662976080 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007f566297608c R13: 0000000000000000 R14: 00007ffc60efc440 R15: 00007ffc60efc528 ---------------- Code disassembly (best guess): 0: 24 40 and $0x40,%al 2: 49 c1 ec 03 shr $0x3,%r12 6: 48 b8 f1 f1 f1 f1 00 movabs $0xf2f2f200f1f1f1f1,%rax d: f2 f2 f2 10: 49 89 04 1c mov %rax,(%r12,%rbx,1) 14: 66 41 c7 44 1c 09 f3 movw $0xf3f3,0x9(%r12,%rbx,1) 1b: f3 1c: 41 c6 44 1c 0b f3 movb $0xf3,0xb(%r12,%rbx,1) 22: e8 d1 3a ad ff call 0xffad3af8 27: 4c 89 f8 mov %r15,%rax * 2a: 49 c1 ef 03 shr $0x3,%r15 <-- trapping instruction 2e: 41 80 3c 1f 00 cmpb $0x0,(%r15,%rbx,1) 33: 74 10 je 0x45 35: 48 89 c7 mov %rax,%rdi 38: e8 5b a4 13 00 call 0x13a498 3d: 48 rex.W 3e: 8d .byte 0x8d 3f: 84 .byte 0x84