syzbot

------------[ cut here ]------------
kernel BUG at kernel/sched/deadline.c:1068!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
Modules linked in:
CPU: 0 PID: 5751 Comm: syz-executor848 Not tainted 4.9.185+ #8
task: 00000000c24355c6 task.stack: 00000000cefb8d64
RIP: 0010:[<ffffffff811eccd2>]  [<0000000095e918f0>] enqueue_task_dl+0x772/0x2050 /kernel/sched/deadline.c:1068
RSP: 0018:ffff8801cee4f438  EFLAGS: 00010087
RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff8801ce4f08b0
RDX: 1ffff10039927365 RSI: ffff8801cc9397c0 RDI: ffff8801cc939b28
RBP: ffff8801cee4f4a8 R08: ffff88021fffd01c R09: ffff88021fffd008
R10: ffff88021fffd010 R11: 0000000000000001 R12: ffff8801cc9397c0
R13: 0000000000000078 R14: ffff8801db721000 R15: ffff8801cc939ad0
FS:  00007f59f99cf700(0000) GS:ffff8801db600000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000004 CR3: 00000001c7dbd000 CR4: 00000000001606b0
Stack:
 ffffffff811893f4 ffff8801ce4f0000 0000000000000000 ffff8801cc9397d0
 0000000000000046 ffff8801db721018 ffff8801ce4f0000 0000000000000000
 ffff8801cc9397d0 ffffffff82a4c9e0 ffff8801cc9397c0 ffff8801db721000
Call Trace:
 [<00000000e6db0521>] enqueue_task /kernel/sched/core.c:763 [inline]
 [<00000000e6db0521>] activate_task+0x15a/0x290 /kernel/sched/core.c:781
 [<0000000091fc231b>] push_dl_task.part.0+0x30e/0x470 /kernel/sched/deadline.c:1638
 [<000000007c43fa38>] push_dl_task /kernel/sched/deadline.c:1578 [inline]
 [<000000007c43fa38>] push_dl_tasks+0x46/0x60 /kernel/sched/deadline.c:1654
 [<00000000b4a7aa92>] __balance_callback+0x9a/0xe0 /kernel/sched/core.c:2857
 [<0000000036acbea8>] balance_callback /kernel/sched/core.c:2865 [inline]
 [<0000000036acbea8>] __schedule+0x1118/0x1f10 /kernel/sched/core.c:3497
 [<00000000bde8777a>] schedule+0x92/0x1c0 /kernel/sched/core.c:3546
 [<0000000032830edc>] __rt_mutex_slowlock+0x99/0x290 /kernel/locking/rtmutex.c:1221
 [<000000009037d33a>] rt_mutex_slowlock+0x199/0x4c0 /kernel/locking/rtmutex.c:1293
 [<0000000083bfebee>] rt_mutex_fastlock /kernel/locking/rtmutex.c:1439 [inline]
 [<0000000083bfebee>] rt_mutex_lock+0x2d/0x40 /kernel/locking/rtmutex.c:1499
 [<0000000091c2d2cb>] process_notifier /drivers/misc/uid_sys_stats.c:636 [inline]
 [<0000000091c2d2cb>] process_notifier+0x96/0x670 /drivers/misc/uid_sys_stats.c:625
 [<00000000788acfcf>] notifier_call_chain+0xb4/0x1d0 /kernel/notifier.c:93
 [<0000000068b947b1>] __blocking_notifier_call_chain /kernel/notifier.c:317 [inline]
 [<0000000068b947b1>] __blocking_notifier_call_chain /kernel/notifier.c:304 [inline]
 [<0000000068b947b1>] blocking_notifier_call_chain /kernel/notifier.c:328 [inline]
 [<0000000068b947b1>] blocking_notifier_call_chain+0x80/0xa0 /kernel/notifier.c:325
 [<000000003e5ef9a7>] profile_task_exit+0x1f/0x30 /kernel/profile.c:140
 [<00000000d56296e0>] do_exit+0x90/0x2aa0 /kernel/exit.c:744
 [<00000000b1cd20b2>] do_group_exit+0x111/0x300 /kernel/exit.c:945
 [<00000000aafc2a64>] get_signal+0x377/0x1cb0 /kernel/signal.c:2382
 [<000000004d89b48b>] do_signal+0x9c/0x1920 /arch/x86/kernel/signal.c:812
 [<0000000010dd1070>] exit_to_usermode_loop+0x11c/0x160 /arch/x86/entry/common.c:159
 [<000000002a21959a>] prepare_exit_to_usermode /arch/x86/entry/common.c:195 [inline]
 [<000000002a21959a>] syscall_return_slowpath /arch/x86/entry/common.c:266 [inline]
 [<000000002a21959a>] do_syscall_64+0x3ab/0x5c0 /arch/x86/entry/common.c:293
 [<0000000051b636e5>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb
Code: 38 d0 7c 08 84 d2 0f 85 f6 11 00 00 41 83 bc 24 cc 03 00 00 01 0f 8e b5 f9 ff ff 4c 89 e6 4c 89 f7 e8 93 f4 ff ff e9 a5 f9 ff ff <0f> 0b 4c 89 ee 4c 89 ff e8 91 b4 ff ff 48 c7 c2 00 10 02 00 4d 
RIP  [<0000000095e918f0>] enqueue_task_dl+0x772/0x2050 /kernel/sched/deadline.c:1093
 RSP <ffff8801cee4f438>
---[ end trace 4f2e470cf4017c98 ]---