------------[ cut here ]------------ task_rq(p) != rq WARNING: kernel/sched/fair.c:7656 at hrtick_start_fair+0x196/0x1f0 kernel/sched/fair.c:7656, CPU#1: syz-executor/5622 Modules linked in: CPU: 1 UID: 0 PID: 5622 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 RIP: 0010:hrtick_start_fair+0x196/0x1f0 kernel/sched/fair.c:7656 Code: 42 80 3c 20 00 74 08 4c 89 ff e8 85 e3 97 00 4d 39 37 0f 85 0c ff ff ff 48 89 df 5b 41 5c 41 5d 41 5e 41 5f e9 4b 65 fa ff 90 <0f> 0b 90 e9 d1 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 82 RSP: 0018:ffffc900042c6fe0 EFLAGS: 00010006 RAX: ffff8880b863ba40 RBX: ffff8880b873ba40 RCX: ffffffff8197c7de RDX: 0000000000000000 RSI: ffff8880296ddd00 RDI: ffff8880b873ba40 RBP: dffffc0000000000 R08: ffffffff8fcf0b0f R09: 1ffffffff1f9e161 R10: dffffc0000000000 R11: fffffbfff1f9e162 R12: dffffc0000000000 R13: 1ffff110170e78d6 R14: ffff8880296ddd00 R15: ffffffff8dc217d0 FS: 0000555591d1a540(0000) GS:ffff888125b76000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055555b45c4e8 CR3: 0000000030de2000 CR4: 00000000003526f0 Call Trace: set_next_task_fair+0xa68/0xce0 kernel/sched/fair.c:15058 put_prev_set_next_task kernel/sched/sched.h:2770 [inline] pick_next_task kernel/sched/core.c:6443 [inline] __schedule+0x3e03/0x5550 kernel/sched/core.c:7144 __schedule_loop kernel/sched/core.c:7308 [inline] schedule_rtlock+0x30/0x70 kernel/sched/core.c:7387 rtlock_slowlock_locked+0x3635/0x3c80 kernel/locking/rtmutex.c:1894 rtlock_slowlock kernel/locking/rtmutex.c:1921 [inline] rtlock_lock kernel/locking/spinlock_rt.c:43 [inline] __rt_spin_lock kernel/locking/spinlock_rt.c:49 [inline] rt_spin_lock+0x165/0x400 kernel/locking/spinlock_rt.c:57 spin_lock include/linux/spinlock_rt.h:45 [inline] remove_wait_queue+0x23/0x110 kernel/sched/wait.c:73 free_poll_entry fs/select.c:132 [inline] poll_freewait+0xb1/0x240 fs/select.c:141 do_select+0x1537/0x15c0 fs/select.c:608 core_sys_select+0x898/0xc30 fs/select.c:677 do_pselect fs/select.c:770 [inline] __do_sys_pselect6 fs/select.c:809 [inline] __se_sys_pselect6+0x267/0x320 fs/select.c:800 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x174/0x580 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f074bd07fd7 Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff RSP: 002b:00007ffe15e14df0 EFLAGS: 00000202 ORIG_RAX: 000000000000010e RAX: ffffffffffffffda RBX: 0000555591d1a540 RCX: 00007f074bd07fd7 RDX: 0000000000000000 RSI: 00007ffe15e14f10 RDI: 0000000000000010 RBP: 00007ffe15e15370 R08: 00007ffe15e14e30 R09: 00007ffe15e14e40 R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffe15e151b0 R13: 00007ffe15e14fa0 R14: 585858582e7a7973 R15: 00007ffe15e153e0