process_one_work+0x9b2/0x1690 kernel/workqueue.c:2298 worker_thread+0x658/0x11f0 kernel/workqueue.c:2445 kthread+0x405/0x4f0 kernel/kthread.c:327 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295 ------------[ cut here ]------------ kernel BUG at mm/page_alloc.c:1071! invalid opcode: 0000 [#1] PREEMPT SMP KASAN CPU: 0 PID: 11644 Comm: syz-executor.4 Not tainted 5.16.0-rc3-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:__free_one_page+0xa10/0xe30 mm/page_alloc.c:1071 Code: 43 34 85 c0 0f 84 79 f9 ff ff 48 c7 c6 c0 51 b7 89 48 89 ef e8 31 e9 f6 ff 0f 0b 48 c7 c6 a0 50 b7 89 4c 89 ef e8 20 e9 f6 ff <0f> 0b 0f 0b 48 c7 c6 00 51 b7 89 4c 89 ef e8 0d e9 f6 ff 0f 0b 48 RSP: 0018:ffffc90004fc75f0 EFLAGS: 00010046 RAX: 0000000000040000 RBX: ffffc90004fc76e8 RCX: ffffc900057fa000 RDX: 0000000000040000 RSI: ffffffff81b3f4d0 RDI: 0000000000000003 RBP: 0000000000055000 R08: 0000000000000018 R09: 00000000ffffffff R10: ffffffff8902d232 R11: 00000000ffffffff R12: 0000000000000009 R13: ffffea0001540000 R14: 0000000000000000 R15: ffff88813fffa700 FS: 00007f65e03a7700(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f65e1545019 CR3: 000000005ae6c000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: free_pcppages_bulk+0x533/0x8a0 mm/page_alloc.c:1531 free_unref_page_commit.constprop.0+0x4cf/0x6f0 mm/page_alloc.c:3375 free_unref_page+0x236/0x690 mm/page_alloc.c:3408 pte_free include/asm-generic/pgalloc.h:102 [inline] zap_deposited_table mm/huge_memory.c:1576 [inline] zap_huge_pmd+0x775/0xfd0 mm/huge_memory.c:1627 zap_pmd_range mm/memory.c:1443 [inline] zap_pud_range mm/memory.c:1496 [inline] zap_p4d_range mm/memory.c:1517 [inline] unmap_page_range+0x1cd1/0x29f0 mm/memory.c:1538 unmap_single_vma+0x198/0x310 mm/memory.c:1583 unmap_vmas+0x16b/0x2f0 mm/memory.c:1615 unmap_region+0x204/0x350 mm/mmap.c:2649 __do_munmap+0x631/0x11a0 mm/mmap.c:2883 do_munmap mm/mmap.c:2894 [inline] munmap_vma_range mm/mmap.c:603 [inline] mmap_region+0x2fd/0x1650 mm/mmap.c:1741 do_mmap+0x869/0xfb0 mm/mmap.c:1575 vm_mmap_pgoff+0x1b7/0x290 mm/util.c:519 ksys_mmap_pgoff+0x40d/0x5a0 mm/mmap.c:1623 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7f65e1431b62 Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 RSP: 002b:00007f65e03a70f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f65e1431b62 RDX: 0000000000000003 RSI: 0000000000200000 RDI: 0000000020000000 RBP: 0000000020000000 R08: 0000000000000004 R09: 0000000010000000 R10: 0000000000008011 R11: 0000000000000206 R12: 0000000000000000 R13: 0000000020000000 R14: 00000000200001c0 R15: 0000000020ffc000 Modules linked in: ---[ end trace 02c16e10b7fa6b93 ]--- RIP: 0010:__free_one_page+0xa10/0xe30 mm/page_alloc.c:1071 Code: 43 34 85 c0 0f 84 79 f9 ff ff 48 c7 c6 c0 51 b7 89 48 89 ef e8 31 e9 f6 ff 0f 0b 48 c7 c6 a0 50 b7 89 4c 89 ef e8 20 e9 f6 ff <0f> 0b 0f 0b 48 c7 c6 00 51 b7 89 4c 89 ef e8 0d e9 f6 ff 0f 0b 48 RSP: 0018:ffffc90004fc75f0 EFLAGS: 00010046 RAX: 0000000000040000 RBX: ffffc90004fc76e8 RCX: ffffc900057fa000 RDX: 0000000000040000 RSI: ffffffff81b3f4d0 RDI: 0000000000000003 RBP: 0000000000055000 R08: 0000000000000018 R09: 00000000ffffffff R10: ffffffff8902d232 R11: 00000000ffffffff R12: 0000000000000009 R13: ffffea0001540000 R14: 0000000000000000 R15: ffff88813fffa700 FS: 00007f65e03a7700(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f65e1545019 CR3: 000000005ae6c000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400