------------[ cut here ]------------ debug_locks && !(lock_is_held(&(__rq_lockp(rq))->dep_map) != 0) WARNING: kernel/sched/sched.h:1666 at lockdep_assert_rq_held kernel/sched/sched.h:1666 [inline], CPU#0: syz.1.359/8006 WARNING: kernel/sched/sched.h:1666 at lockdep_assert_rq_held kernel/sched/sched.h:1663 [inline], CPU#0: syz.1.359/8006 WARNING: kernel/sched/sched.h:1666 at update_rq_clock+0x40a/0xd20 kernel/sched/core.c:875, CPU#0: syz.1.359/8006 Modules linked in: CPU: 0 UID: 0 PID: 8006 Comm: syz.1.359 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 RIP: 0010:lockdep_assert_rq_held kernel/sched/sched.h:1666 [inline] RIP: 0010:lockdep_assert_rq_held kernel/sched/sched.h:1663 [inline] RIP: 0010:update_rq_clock+0x40a/0xd20 kernel/sched/core.c:875 Code: ab c8 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 a3 da 38 ff a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 c0 0b 00 00 48 b8 00 00 00 00 00 RSP: 0018:ffffc90004286b38 EFLAGS: 00010046 RAX: 0000000000000000 RBX: ffff8880b853c040 RCX: 0000000000000001 RDX: 0000000000000046 RSI: ffffffff8e3cb167 RDI: ffffffff8c622280 RBP: ffffc90004286cd8 R08: 0000000000000001 R09: 0000000000000001 R10: ffff8880b843cbd8 R11: 0000000000000000 R12: ffffffff914559e4 R13: ffff8880b853cf20 R14: ffff8880b853c040 R15: 0000000000000001 FS: 00007f48b77b66c0(0000) GS:ffff888123b61000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000110c2f6c49 CR3: 000000005fbde000 CR4: 0000000000350ef0 Call Trace: pick_next_task kernel/sched/core.c:6361 [inline] __schedule+0x1c69/0x6920 kernel/sched/core.c:7185 preempt_schedule_irq+0x4e/0x90 kernel/sched/core.c:7592 irqentry_exit_to_kernel_mode_preempt include/linux/irq-entry-common.h:468 [inline] irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:539 [inline] irqentry_exit+0x205/0xa10 kernel/entry/common.c:167 asm_sysvec_reschedule_ipi+0x1a/0x20 arch/x86/include/asm/idtentry.h:679 RIP: 0010:folio_test_slab include/linux/page-flags.h:1026 [inline] RIP: 0010:folio_mapping+0x14/0x250 mm/util.c:726 Code: 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 54 55 53 48 89 fb e8 10 0e b3 ff 48 8d 7b 30 <48> b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 04 02 84 RSP: 0018:ffffc90004286df0 EFLAGS: 00000293 RAX: 0000000000000000 RBX: ffffea00011a8400 RCX: 0000000000000000 RDX: ffff888032673e80 RSI: ffffffff8258b800 RDI: ffffea00011a8430 RBP: 0000000000001000 R08: 0000000000000001 R09: fffff94000235080 R10: ffffea00011a8407 R11: 0000000000000000 R12: ffffea00011a8434 R13: ffffea00011a8408 R14: 0000000000001000 R15: 0000000000001000 folio_mark_dirty+0x1a/0x200 mm/page-writeback.c:2774 shmem_write_end+0x152/0x6a0 mm/shmem.c:3297 generic_perform_write+0x513/0xa40 mm/filemap.c:4395 shmem_file_write_iter+0x10e/0x140 mm/shmem.c:3440 __kernel_write_iter+0x2ac/0x930 fs/read_write.c:621 dump_emit_page fs/coredump.c:1293 [inline] dump_user_range+0x3f9/0xad0 fs/coredump.c:1367 elf_core_dump+0x2d68/0x3d20 fs/binfmt_elf.c:2106 coredump_write fs/coredump.c:1047 [inline] do_coredump fs/coredump.c:1126 [inline] vfs_coredump+0x281a/0x54a0 fs/coredump.c:1195 get_signal+0x1f2a/0x21e0 kernel/signal.c:3024 arch_do_signal_or_restart+0x91/0x7e0 arch/x86/kernel/signal.c:337 __exit_to_user_mode_loop kernel/entry/common.c:66 [inline] exit_to_user_mode_loop kernel/entry/common.c:101 [inline] __exit_to_user_mode_prepare include/linux/irq-entry-common.h:207 [inline] irqentry_exit_to_user_mode_prepare include/linux/irq-entry-common.h:244 [inline] irqentry_exit_to_user_mode include/linux/irq-entry-common.h:315 [inline] irqentry_exit+0x402/0xa10 kernel/entry/common.c:165 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:595 RIP: 0033:0x7f48b699e161 Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 RAX: 0000000000000000 RBX: 00007f48b6c26090 RCX: 00007f48b699e159 RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 RBP: 00007f48b6a35024 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 R13: 00007f48b6c26128 R14: 00007f48b6c26090 R15: 00007ffc85f2d558 ---------------- Code disassembly (best guess): 0: 84 00 test %al,(%rax) 2: 00 00 add %al,(%rax) 4: 00 00 add %al,(%rax) 6: 90 nop 7: 90 nop 8: 90 nop 9: 90 nop a: 90 nop b: 90 nop c: 90 nop d: 90 nop e: 90 nop f: 90 nop 10: 90 nop 11: 90 nop 12: 90 nop 13: 90 nop 14: 90 nop 15: 90 nop 16: f3 0f 1e fa endbr64 1a: 41 54 push %r12 1c: 55 push %rbp 1d: 53 push %rbx 1e: 48 89 fb mov %rdi,%rbx 21: e8 10 0e b3 ff call 0xffb30e36 26: 48 8d 7b 30 lea 0x30(%rbx),%rdi * 2a: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax <-- trapping instruction 31: fc ff df 34: 48 89 fa mov %rdi,%rdx 37: 48 c1 ea 03 shr $0x3,%rdx 3b: 0f b6 04 02 movzbl (%rdx,%rax,1),%eax 3f: 84 .byte 0x84