------------[ cut here ]------------ debug_locks && !(lock_is_held(&(__rq_lockp(rq))->dep_map) != 0) WARNING: kernel/sched/sched.h:1665 at lockdep_assert_rq_held kernel/sched/sched.h:1665 [inline], CPU#0: syz.1.914/9274 WARNING: kernel/sched/sched.h:1665 at lockdep_assert_rq_held kernel/sched/sched.h:1662 [inline], CPU#0: syz.1.914/9274 WARNING: kernel/sched/sched.h:1665 at update_rq_clock+0x40a/0xd20 kernel/sched/core.c:875, CPU#0: syz.1.914/9274 Modules linked in: CPU: 0 UID: 0 PID: 9274 Comm: syz.1.914 Tainted: G L syzkaller #0 PREEMPT(full) Tainted: [L]=SOFTLOCKUP Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 RIP: 0010:lockdep_assert_rq_held kernel/sched/sched.h:1665 [inline] RIP: 0010:lockdep_assert_rq_held kernel/sched/sched.h:1662 [inline] RIP: 0010:update_rq_clock+0x40a/0xd20 kernel/sched/core.c:875 Code: ab c8 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 48 f3 ff 09 a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 c0 0b 00 00 48 b8 00 00 00 00 00 RSP: 0018:ffffc900072f6878 EFLAGS: 00010046 RAX: 0000000000000000 RBX: ffff8880b833bf00 RCX: 0000000000000001 RDX: 0000000000000046 RSI: ffffffff8e3bd2cb RDI: ffffffff8c625580 RBP: ffffc900072f6a18 R08: 0000000000000001 R09: 0000000000000001 R10: ffff8880b823ca98 R11: 0000006100022800 R12: ffffffff92459904 R13: ffff8880b833cde0 R14: ffff8880b833bf00 R15: 0000000000000001 FS: 00007f05f0caf6c0(0000) GS:ffff888122946000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fc5e83184e8 CR3: 00000000782ac000 CR4: 00000000003526f0 Call Trace: pick_next_task kernel/sched/core.c:6375 [inline] __schedule+0x1c69/0x6920 kernel/sched/core.c:7199 preempt_schedule_irq+0x4e/0x90 kernel/sched/core.c:7606 irqentry_exit_to_kernel_mode_preempt include/linux/irq-entry-common.h:468 [inline] irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:539 [inline] irqentry_exit+0x205/0xa10 kernel/entry/common.c:167 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674 RIP: 0010:memcg1_commit_charge+0x103/0x160 mm/memcontrol-v1.c:604 Code: 75 1a 9c 58 f6 c4 02 75 3b 5b 5d 41 5c c3 cc cc cc cc e8 f0 0e 8c ff e9 2a ff ff ff e8 c6 0c 8c ff 9c 58 f6 c4 02 75 2f fb 5b <5d> 41 5c e9 55 16 4f 09 48 c7 c6 80 62 05 8c 48 89 df e8 26 4f d8 RSP: 0018:ffffc900072f6b30 EFLAGS: 00000246 RAX: 0000000000000002 RBX: ffffea000137bbc0 RCX: 0000000000000040 RDX: 0000000000000000 RSI: ffffffff8e3e3486 RDI: ffffffff8c625580 RBP: 0000000000000200 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000001 R12: ffff88801ea90000 R13: 0000000000000cc0 R14: ffffea000137bbc0 R15: 0000000000000000 charge_memcg+0xe4/0x210 mm/memcontrol.c:5216 __mem_cgroup_charge+0x2b/0x1c0 mm/memcontrol.c:5227 mem_cgroup_charge include/linux/memcontrol.h:662 [inline] shmem_alloc_and_add_folio+0x451/0xd40 mm/shmem.c:1988 shmem_get_folio_gfp+0x75b/0x1980 mm/shmem.c:2531 shmem_get_folio mm/shmem.c:2637 [inline] shmem_write_begin+0x1a4/0x420 mm/shmem.c:3268 generic_perform_write+0x292/0xa40 mm/filemap.c:4374 shmem_file_write_iter+0x10e/0x140 mm/shmem.c:3443 __kernel_write_iter+0x2ac/0x930 fs/read_write.c:621 dump_emit_page fs/coredump.c:1293 [inline] dump_user_range+0x3f9/0xad0 fs/coredump.c:1367 elf_core_dump+0x2d68/0x3d20 fs/binfmt_elf.c:2106 coredump_write fs/coredump.c:1047 [inline] do_coredump fs/coredump.c:1126 [inline] vfs_coredump+0x281a/0x54a0 fs/coredump.c:1195 get_signal+0x1f2a/0x21e0 kernel/signal.c:3097 arch_do_signal_or_restart+0x91/0x7e0 arch/x86/kernel/signal.c:337 __exit_to_user_mode_loop kernel/entry/common.c:66 [inline] exit_to_user_mode_loop kernel/entry/common.c:101 [inline] __exit_to_user_mode_prepare include/linux/irq-entry-common.h:207 [inline] irqentry_exit_to_user_mode_prepare include/linux/irq-entry-common.h:244 [inline] irqentry_exit_to_user_mode include/linux/irq-entry-common.h:315 [inline] irqentry_exit+0x402/0xa10 kernel/entry/common.c:165 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:595 RIP: 0033:0x0 Code: Unable to access opcode bytes at 0xffffffffffffffd6. RSP: 002b:00002000000004c8 EFLAGS: 00010217 RAX: 0000000000000000 RBX: 00007f05f0025fa0 RCX: 00007f05efd9e1d9 RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000020000 RBP: 00007f05efe35888 R08: 0000200000000300 R09: 0000200000000300 R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 R13: 00007f05f0026038 R14: 00007f05f0025fa0 R15: 00007ffc285b0668 ---------------- Code disassembly (best guess): 0: 75 1a jne 0x1c 2: 9c pushf 3: 58 pop %rax 4: f6 c4 02 test $0x2,%ah 7: 75 3b jne 0x44 9: 5b pop %rbx a: 5d pop %rbp b: 41 5c pop %r12 d: c3 ret e: cc int3 f: cc int3 10: cc int3 11: cc int3 12: e8 f0 0e 8c ff call 0xff8c0f07 17: e9 2a ff ff ff jmp 0xffffff46 1c: e8 c6 0c 8c ff call 0xff8c0ce7 21: 9c pushf 22: 58 pop %rax 23: f6 c4 02 test $0x2,%ah 26: 75 2f jne 0x57 28: fb sti 29: 5b pop %rbx * 2a: 5d pop %rbp <-- trapping instruction 2b: 41 5c pop %r12 2d: e9 55 16 4f 09 jmp 0x94f1687 32: 48 c7 c6 80 62 05 8c mov $0xffffffff8c056280,%rsi 39: 48 89 df mov %rbx,%rdi 3c: e8 .byte 0xe8 3d: 26 es 3e: 4f rex.WRXB 3f: d8 .byte 0xd8