------------[ cut here ]------------ task_rq(p) != rq WARNING: kernel/sched/fair.c:7656 at hrtick_start_fair+0x196/0x1f0 kernel/sched/fair.c:7656, CPU#0: kworker/0:1/10 Modules linked in: CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 Workqueue: events_power_efficient wg_ratelimiter_gc_entries RIP: 0010:hrtick_start_fair+0x196/0x1f0 kernel/sched/fair.c:7656 Code: 42 80 3c 20 00 74 08 4c 89 ff e8 c5 e5 97 00 4d 39 37 0f 85 0c ff ff ff 48 89 df 5b 41 5c 41 5d 41 5e 41 5f e9 7b 64 fa ff 90 <0f> 0b 90 e9 d1 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 82 RSP: 0018:ffffc900000f7620 EFLAGS: 00010087 RAX: ffff8880b873ba40 RBX: ffff8880b863ba40 RCX: ffffffff819778ae RDX: 0000000000000000 RSI: ffff8880363e5d00 RDI: ffff8880b863ba40 RBP: dffffc0000000000 R08: ffffffff8f8d5d0f R09: 1ffffffff1f1aba1 R10: dffffc0000000000 R11: fffffbfff1f1aba2 R12: dffffc0000000000 R13: 1ffff110170c78d6 R14: ffff8880363e5d00 R15: ffffffff8d9027d8 FS: 0000000000000000(0000) GS:ffff888125ebb000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b2fc63fff CR3: 000000000ddb8000 CR4: 00000000003526f0 Call Trace: set_next_task_fair+0xa68/0xce0 kernel/sched/fair.c:15065 put_prev_set_next_task kernel/sched/sched.h:2770 [inline] pick_next_task kernel/sched/core.c:6442 [inline] __schedule+0x3e03/0x5550 kernel/sched/core.c:7143 preempt_schedule_irq+0x4d/0xa0 kernel/sched/core.c:7552 irqentry_exit_to_kernel_mode include/linux/irq-entry-common.h:539 [inline] irqentry_exit+0x14f/0x8c0 kernel/entry/common.c:167 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674 RIP: 0010:lock_acquire+0x221/0x350 kernel/locking/lockdep.c:5874 Code: ff ff ff e8 b1 bd 92 09 f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 5b 78 d5 10 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 80 85 96 09 cc 48 8d 3d e8 e6 ef RSP: 0018:ffffc900000f79e0 EFLAGS: 00000282 RAX: 75195da67d4def00 RBX: 0000000000000000 RCX: 0000000000000046 RDX: 0000000053bc2d00 RSI: ffffffff8d8bb44d RDI: ffffffff8baa5680 RBP: ffffffff860286cd R08: ffffffff860286cd R09: ffffffff8ead23f8 R10: dffffc0000000000 R11: fffffbfff1f1ab9f R12: 0000000000000000 R13: ffffffff8ead23f8 R14: 0000000000000001 R15: 0000000000000246 rt_spin_lock+0x83/0x400 kernel/locking/spinlock_rt.c:56 spin_lock include/linux/spinlock_rt.h:45 [inline] wg_ratelimiter_gc_entries+0x5d/0x480 drivers/net/wireguard/ratelimiter.c:63 process_one_work+0x98b/0x1630 kernel/workqueue.c:3326 process_scheduled_works kernel/workqueue.c:3409 [inline] worker_thread+0xb49/0x1140 kernel/workqueue.c:3490 kthread+0x388/0x470 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 ---------------- Code disassembly (best guess), 2 bytes skipped: 0: ff ljmp (bad) 1: e8 b1 bd 92 09 call 0x992bdb7 6: f7 44 24 08 00 02 00 testl $0x200,0x8(%rsp) d: 00 e: 0f 84 3a ff ff ff je 0xffffff4e 14: 65 48 8b 05 5b 78 d5 mov %gs:0x10d5785b(%rip),%rax # 0x10d57877 1b: 10 1c: 48 3b 44 24 58 cmp 0x58(%rsp),%rax 21: 75 33 jne 0x56 23: fb sti 24: 48 83 c4 60 add $0x60,%rsp * 28: 5b pop %rbx <-- trapping instruction 29: 41 5c pop %r12 2b: 41 5d pop %r13 2d: 41 5e pop %r14 2f: 41 5f pop %r15 31: 5d pop %rbp 32: e9 80 85 96 09 jmp 0x99685b7 37: cc int3 38: 48 rex.W 39: 8d .byte 0x8d 3a: 3d .byte 0x3d 3b: e8 .byte 0xe8 3c: e6 ef out %al,$0xef