=============================
[ BUG: Invalid wait context ]
6.12.0-next-20241122 #1 Not tainted
-----------------------------
syz-executor.7/13502 is trying to lock:
ffff88807ffdcf78 (&zone->lock){..-.}-{3:3}, at: __rmqueue_pcplist+0x4cd/0xe60
other info that might help us debug this:
context-{2:2}
2 locks held by syz-executor.7/13502:
 #0: ffffffff85c16140 (rcu_read_lock){....}-{1:3}, at: lock_vma_under_rcu+0xd6/0x800
 #1: ffff88806cf41518 (&pcp->lock){+.+.}-{3:3}, at: get_page_from_freelist+0x4a5/0x2130
stack backtrace:
CPU: 1 UID: 0 PID: 13502 Comm: syz-executor.7 Not tainted 6.12.0-next-20241122 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Call Trace:
 
 dump_stack_lvl+0xca/0x120
 __lock_acquire+0x1535/0x4430
 lock_acquire.part.0+0xeb/0x320
 _raw_spin_lock_irqsave+0x3a/0x60
 __rmqueue_pcplist+0x4cd/0xe60
 get_page_from_freelist+0x500/0x2130
 __alloc_pages_noprof+0x213/0x1f90
 alloc_pages_mpol_noprof+0xf2/0x330
 stack_depot_save_flags+0x575/0x900
 kasan_save_stack+0x34/0x50
 __kasan_record_aux_stack+0x8c/0xa0
 task_work_add+0xb8/0x390
 run_posix_cpu_timers+0x65e/0x760
 tick_nohz_handler+0x414/0x6d0
 __hrtimer_run_queues+0x57c/0xa70
 hrtimer_interrupt+0x369/0x830
 __sysvec_apic_timer_interrupt+0xc2/0x330
 sysvec_apic_timer_interrupt+0x6b/0x80
 
 
 asm_sysvec_apic_timer_interrupt+0x1a/0x20
RIP: 0010:rcu_lockdep_current_cpu_online+0x5e/0x110
Code: 48 8b 05 cd b9 c8 7e 48 8d b8 a0 c7 03 00 48 8d 98 80 c7 03 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 <0f> 85 94 00 00 00 48 8d 7b 18 48 8b 6b 20 48 b8 00 00 00 00 00 fc
RSP: 0000:ffff88800d4a7c68 EFLAGS: 00000246
RAX: dffffc0000000000 RBX: ffff88806cf3c780 RCX: ffffffff847cd90b
RDX: 1ffff1100d9e78f4 RSI: ffffffff847cd914 RDI: ffff88806cf3c7a0
RBP: 00007f42d6204000 R08: 0000000000000001 R09: fffffbfff0fdddec
R10: 0000000000000000 R11: 0000000000000000 R12: ffff88800d3f7a80
R13: 0000000000000009 R14: ffff888039f90b60 R15: 00007f42d6223fff
 rcu_read_lock_held+0x29/0x50
 mtree_range_walk+0x259/0xb90
 mas_walk+0x4b7/0x8a0
 lock_vma_under_rcu+0x2b9/0x800
 do_user_addr_fault+0x4aa/0xf40
 exc_page_fault+0x9c/0x1a0
 asm_exc_page_fault+0x26/0x30
RIP: 0033:0x7f42d60bad30
Code: 75 c8 48 89 d8 eb 0c 0f 1f 00 48 8b 78 f8 48 3b 38 74 21 48 89 c2 48 83 c0 08 49 39 c4 75 eb e9 ff fe ff ff 66 0f 1f 44 00 00 <47> 89 44 95 00 e9 b3 fe ff ff 49 39 d4 74 73 48 8d 72 10 4c 39 e6
RSP: 002b:00007ffe76b5e7b0 EFLAGS: 00010246
RAX: 000000003165f8f1 RBX: 00007f42d5e84008 RCX: 0000001b32320000
RDX: 0000001b3232002c RSI: ffffffff817928c5 RDI: 0000000000000000
RBP: 0000000000000001 R08: 000000003165f8f1 R09: 0000001b3232001c
R10: 00000000000018f1 R11: 000000003165f8f5 R12: 0000000000000003
R13: 00007f42d6214000 R14: ffffffff817928c5 R15: 00007f42d621fff0
 
iso9660: Unknown parameter 'uf8'
iso9660: Unknown parameter 'uf8'
----------------
Code disassembly (best guess):
   0:	48 8b 05 cd b9 c8 7e 	mov    0x7ec8b9cd(%rip),%rax        # 0x7ec8b9d4
   7:	48 8d b8 a0 c7 03 00 	lea    0x3c7a0(%rax),%rdi
   e:	48 8d 98 80 c7 03 00 	lea    0x3c780(%rax),%rbx
  15:	48 b8 00 00 00 00 00 	movabs $0xdffffc0000000000,%rax
  1c:	fc ff df
  1f:	48 89 fa             	mov    %rdi,%rdx
  22:	48 c1 ea 03          	shr    $0x3,%rdx
  26:	80 3c 02 00          	cmpb   $0x0,(%rdx,%rax,1)
* 2a:	0f 85 94 00 00 00    	jne    0xc4 <-- trapping instruction
  30:	48 8d 7b 18          	lea    0x18(%rbx),%rdi
  34:	48 8b 6b 20          	mov    0x20(%rbx),%rbp
  38:	48                   	rex.W
  39:	b8 00 00 00 00       	mov    $0x0,%eax
  3e:	00 fc                	add    %bh,%ah