============================= [ BUG: Invalid wait context ] 6.12.0-next-20241122 #1 Not tainted ----------------------------- syz-executor.7/13502 is trying to lock: ffff88807ffdcf78 (&zone->lock){..-.}-{3:3}, at: __rmqueue_pcplist+0x4cd/0xe60 other info that might help us debug this: context-{2:2} 2 locks held by syz-executor.7/13502: #0: ffffffff85c16140 (rcu_read_lock){....}-{1:3}, at: lock_vma_under_rcu+0xd6/0x800 #1: ffff88806cf41518 (&pcp->lock){+.+.}-{3:3}, at: get_page_from_freelist+0x4a5/0x2130 stack backtrace: CPU: 1 UID: 0 PID: 13502 Comm: syz-executor.7 Not tainted 6.12.0-next-20241122 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xca/0x120 __lock_acquire+0x1535/0x4430 lock_acquire.part.0+0xeb/0x320 _raw_spin_lock_irqsave+0x3a/0x60 __rmqueue_pcplist+0x4cd/0xe60 get_page_from_freelist+0x500/0x2130 __alloc_pages_noprof+0x213/0x1f90 alloc_pages_mpol_noprof+0xf2/0x330 stack_depot_save_flags+0x575/0x900 kasan_save_stack+0x34/0x50 __kasan_record_aux_stack+0x8c/0xa0 task_work_add+0xb8/0x390 run_posix_cpu_timers+0x65e/0x760 tick_nohz_handler+0x414/0x6d0 __hrtimer_run_queues+0x57c/0xa70 hrtimer_interrupt+0x369/0x830 __sysvec_apic_timer_interrupt+0xc2/0x330 sysvec_apic_timer_interrupt+0x6b/0x80 asm_sysvec_apic_timer_interrupt+0x1a/0x20 RIP: 0010:rcu_lockdep_current_cpu_online+0x5e/0x110 Code: 48 8b 05 cd b9 c8 7e 48 8d b8 a0 c7 03 00 48 8d 98 80 c7 03 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 <0f> 85 94 00 00 00 48 8d 7b 18 48 8b 6b 20 48 b8 00 00 00 00 00 fc RSP: 0000:ffff88800d4a7c68 EFLAGS: 00000246 RAX: dffffc0000000000 RBX: ffff88806cf3c780 RCX: ffffffff847cd90b RDX: 1ffff1100d9e78f4 RSI: ffffffff847cd914 RDI: ffff88806cf3c7a0 RBP: 00007f42d6204000 R08: 0000000000000001 R09: fffffbfff0fdddec R10: 0000000000000000 R11: 0000000000000000 R12: ffff88800d3f7a80 R13: 0000000000000009 R14: ffff888039f90b60 R15: 00007f42d6223fff rcu_read_lock_held+0x29/0x50 mtree_range_walk+0x259/0xb90 mas_walk+0x4b7/0x8a0 lock_vma_under_rcu+0x2b9/0x800 do_user_addr_fault+0x4aa/0xf40 exc_page_fault+0x9c/0x1a0 asm_exc_page_fault+0x26/0x30 RIP: 0033:0x7f42d60bad30 Code: 75 c8 48 89 d8 eb 0c 0f 1f 00 48 8b 78 f8 48 3b 38 74 21 48 89 c2 48 83 c0 08 49 39 c4 75 eb e9 ff fe ff ff 66 0f 1f 44 00 00 <47> 89 44 95 00 e9 b3 fe ff ff 49 39 d4 74 73 48 8d 72 10 4c 39 e6 RSP: 002b:00007ffe76b5e7b0 EFLAGS: 00010246 RAX: 000000003165f8f1 RBX: 00007f42d5e84008 RCX: 0000001b32320000 RDX: 0000001b3232002c RSI: ffffffff817928c5 RDI: 0000000000000000 RBP: 0000000000000001 R08: 000000003165f8f1 R09: 0000001b3232001c R10: 00000000000018f1 R11: 000000003165f8f5 R12: 0000000000000003 R13: 00007f42d6214000 R14: ffffffff817928c5 R15: 00007f42d621fff0 iso9660: Unknown parameter 'uf8' iso9660: Unknown parameter 'uf8' ---------------- Code disassembly (best guess): 0: 48 8b 05 cd b9 c8 7e mov 0x7ec8b9cd(%rip),%rax # 0x7ec8b9d4 7: 48 8d b8 a0 c7 03 00 lea 0x3c7a0(%rax),%rdi e: 48 8d 98 80 c7 03 00 lea 0x3c780(%rax),%rbx 15: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 1c: fc ff df 1f: 48 89 fa mov %rdi,%rdx 22: 48 c1 ea 03 shr $0x3,%rdx 26: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) * 2a: 0f 85 94 00 00 00 jne 0xc4 <-- trapping instruction 30: 48 8d 7b 18 lea 0x18(%rbx),%rdi 34: 48 8b 6b 20 mov 0x20(%rbx),%rbp 38: 48 rex.W 39: b8 00 00 00 00 mov $0x0,%eax 3e: 00 fc add %bh,%ah