syzbot

BUG: unable to handle kernel paging request at ffffea00085b8128
PGD 21f7ef067 P4D 21f7ef067 PUD 10 
Oops: 0000 [#1] SMP PTI
Dumping ftrace buffer:
   (ftrace buffer empty)
Modules linked in:
CPU: 1 PID: 2266 Comm: udevd Not tainted 4.17.0+ #9
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:__list_del_entry_valid+0x117/0x440 lib/list_debug.c:54
RSP: 0000:ffff8801c92de540 EFLAGS: 00010046
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
RDX: ffffffff8b58a000 RSI: 0000000000000008 RDI: ffff88021fd43230
RBP: ffff8801c92de598 R08: 0000000000000000 R09: 00000000ffffffff
R10: 0000000000000000 R11: 0000000000000000 R12: ffffea0007aec160
R13: ffffea00085b8128 R14: 0000000000000000 R15: 0000000000000000
FS:  0000000000000000(0000) GS:ffff88021fd00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffea00085b8128 CR3: 000000000ac30000 CR4: 00000000001406e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 __list_del_entry include/linux/list.h:117 [inline]
 list_del include/linux/list.h:125 [inline]
 __rmqueue_pcplist mm/page_alloc.c:2951 [inline]
 rmqueue_pcplist mm/page_alloc.c:2971 [inline]
 rmqueue mm/page_alloc.c:2993 [inline]
 get_page_from_freelist+0x9d8b/0xb740 mm/page_alloc.c:3352
 __alloc_pages_nodemask+0x792/0x5cc0 mm/page_alloc.c:4371
 __alloc_pages include/linux/gfp.h:458 [inline]
 __alloc_pages_node include/linux/gfp.h:471 [inline]
 alloc_pages_node include/linux/gfp.h:485 [inline]
 kmsan_alloc_meta_for_pages+0x8d/0x3a0 mm/kmsan/kmsan.c:790
 kmsan_alloc_page+0x82/0xe0 mm/kmsan/kmsan.c:889
 __alloc_pages_nodemask+0xf7b/0x5cc0 mm/page_alloc.c:4402
 alloc_pages_current+0x6b1/0x970 mm/mempolicy.c:2093
 alloc_pages include/linux/gfp.h:494 [inline]
 __get_free_pages+0x2d/0xc0 mm/page_alloc.c:4423
 tlb_next_batch mm/memory.c:205 [inline]
 __tlb_remove_page_size mm/memory.c:317 [inline]
 __tlb_remove_page include/asm-generic/tlb.h:150 [inline]
 zap_pte_range mm/memory.c:1341 [inline]
 zap_pmd_range mm/memory.c:1442 [inline]
 zap_pud_range mm/memory.c:1471 [inline]
 zap_p4d_range mm/memory.c:1492 [inline]
 unmap_page_range+0x26d2/0x3be0 mm/memory.c:1513
 unmap_single_vma+0x445/0x5e0 mm/memory.c:1558
 unmap_vmas+0x1f4/0x360 mm/memory.c:1588
 exit_mmap+0x4d7/0x980 mm/mmap.c:3105
 __mmput+0x158/0x600 kernel/fork.c:962
 mmput+0xab/0xf0 kernel/fork.c:983
 exit_mm+0x6ed/0x7a0 kernel/exit.c:545
 do_exit+0xc12/0x3930 kernel/exit.c:854
 do_group_exit+0x1a0/0x360 kernel/exit.c:970
 get_signal+0x1405/0x1ec0 kernel/signal.c:2482
 do_signal+0xb8/0x1d20 arch/x86/kernel/signal.c:810
 exit_to_usermode_loop arch/x86/entry/common.c:162 [inline]
 prepare_exit_to_usermode+0x271/0x3a0 arch/x86/entry/common.c:196
 retint_user+0x8/0x8
RIP: 0033:0x4044ad
RSP: 002b:00007ffeba8e8ae0 EFLAGS: 00010207
RAX: 0000000000000001 RBX: 0000000000000bb8 RCX: 00007f42c5656943
RDX: 0000000000000008 RSI: 00007ffeba8e8bd0 RDI: 000000000000000a
RBP: 0000000000f68420 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000bb8 R11: 0000000000000246 R12: 0000000000000003
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000f66250
Code: 89 e1 48 33 4d c0 48 f7 d0 48 21 c8 0f 84 e1 01 00 00 4c 3b 65 c0 0f 85 f2 01 00 00 49 83 c5 08 48 83 7d a8 00 0f 85 6b 02 00 00 <4d> 8b 7d 00 4c 89 ef e8 9d 91 be fd 4c 8b 20 44 8b 32 4c 89 e0 
RIP: __list_del_entry_valid+0x117/0x440 lib/list_debug.c:54 RSP: ffff8801c92de540
CR2: ffffea00085b8128
---[ end trace fd2292aca28ab360 ]---