Oops: general protection fault, probably for non-canonical address 0x1ffff1101c7a0b00: 0000 [#1] SMP KASAN NOPTI CPU: 0 UID: 0 PID: 80 Comm: kswapd1 Not tainted syzkaller #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 RIP: 0010:0xffffffffa0003ea8 Code: e3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 41 ff e3 cc 41 ff e3 cc <41> ff e3 cc 41 ff e3 cc 41 ff e3 cc 41 ff e3 cc 41 ff e3 cc 41 ff RSP: 0018:ffffc90000007b98 EFLAGS: 00010046 RAX: ffffffff81aecab9 RBX: 0000000000000102 RCX: ffff888032998000 RDX: 0000000000000100 RSI: ffffffff8be034c0 RDI: ffffc9000def7740 RBP: ffffc90000007c90 R08: ffffffff8fa19777 R09: 1ffffffff1f432ee R10: dffffc0000000000 R11: 1ffff1101c7a0b00 R12: 0000000000000000 R13: ffffc9000def7740 R14: 1ffff92000000f78 R15: 0000000000000001 FS: 0000000000000000(0000) GS:ffff88808d239000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f1ed39e7dac CR3: 000000001f8a1000 CR4: 0000000000352ef0 Call Trace: expire_timers kernel/time/timer.c:1794 [inline] __run_timers kernel/time/timer.c:2373 [inline] __run_timer_base+0x646/0x860 kernel/time/timer.c:2385 run_timer_base kernel/time/timer.c:2394 [inline] run_timer_softirq+0xb7/0x180 kernel/time/timer.c:2404 handle_softirqs+0x27d/0x850 kernel/softirq.c:622 __do_softirq kernel/softirq.c:656 [inline] invoke_softirq kernel/softirq.c:496 [inline] __irq_exit_rcu+0xca/0x1f0 kernel/softirq.c:723 irq_exit_rcu+0x9/0x30 kernel/softirq.c:739 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1056 [inline] sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1056 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697 RIP: 0010:check_preemption_disabled+0x0/0x120 lib/smp_processor_id.c:13 Code: c7 80 34 e0 8b 48 c7 c6 c0 34 e0 8b eb 1c 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <55> 41 57 41 56 53 48 83 ec 10 65 48 8b 05 1e 92 41 07 48 89 44 24 RSP: 0018:ffffc900012beb48 EFLAGS: 00000283 RAX: 0000000000000000 RBX: ffffffff9033b301 RCX: ee3f8caff45ee900 RDX: ffffc900012bed01 RSI: ffffffff8be034c0 RDI: ffffffff8be03480 RBP: dffffc0000000000 R08: ffffc900012bed90 R09: 0000000000000000 R10: ffffc900012bed58 R11: fffff52000257dad R12: ffffc900012beda0 R13: ffffffff81743f85 R14: ffffffff8e1419e0 R15: ffffffff81743f85 rcu_is_watching_curr_cpu include/linux/context_tracking.h:128 [inline] rcu_is_watching+0x15/0xb0 kernel/rcu/tree.c:751 trace_lock_release include/trace/events/lock.h:69 [inline] lock_release+0x4b/0x3b0 kernel/locking/lockdep.c:5879 rcu_lock_release include/linux/rcupdate.h:341 [inline] rcu_read_unlock include/linux/rcupdate.h:897 [inline] class_rcu_destructor include/linux/rcupdate.h:1195 [inline] unwind_next_frame+0x19a9/0x2390 arch/x86/kernel/unwind_orc.c:680 __unwind_start+0x5b9/0x760 arch/x86/kernel/unwind_orc.c:758 unwind_start arch/x86/include/asm/unwind.h:64 [inline] arch_stack_walk+0xe4/0x150 arch/x86/kernel/stacktrace.c:24 stack_trace_save+0x9c/0xe0 kernel/stacktrace.c:122 kasan_save_stack+0x3e/0x60 mm/kasan/common.c:56 kasan_record_aux_stack+0xbd/0xd0 mm/kasan/generic.c:556 __call_rcu_common kernel/rcu/tree.c:3119 [inline] call_rcu+0x157/0x9c0 kernel/rcu/tree.c:3239 __dentry_kill+0x4d2/0x660 fs/dcache.c:689 shrink_kill+0xa9/0x2c0 fs/dcache.c:1137 shrink_dentry_list+0x2e0/0x5e0 fs/dcache.c:1164 prune_dcache_sb+0x10e/0x180 fs/dcache.c:1246 super_cache_scan+0x369/0x4b0 fs/super.c:222 do_shrink_slab+0x6df/0x10d0 mm/shrinker.c:437 shrink_slab+0xd74/0x10d0 mm/shrinker.c:664 shrink_one+0x2d9/0x720 mm/vmscan.c:4919 shrink_many mm/vmscan.c:4980 [inline] lru_gen_shrink_node mm/vmscan.c:5058 [inline] shrink_node+0x2f7d/0x35b0 mm/vmscan.c:6045 kswapd_shrink_node mm/vmscan.c:6899 [inline] balance_pgdat mm/vmscan.c:7082 [inline] kswapd+0x145a/0x2820 mm/vmscan.c:7352 kthread+0x711/0x8a0 kernel/kthread.c:463 ret_from_fork+0x599/0xb30 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:0xffffffffa0003ea8 Code: e3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 41 ff e3 cc 41 ff e3 cc <41> ff e3 cc 41 ff e3 cc 41 ff e3 cc 41 ff e3 cc 41 ff e3 cc 41 ff RSP: 0018:ffffc90000007b98 EFLAGS: 00010046 RAX: ffffffff81aecab9 RBX: 0000000000000102 RCX: ffff888032998000 RDX: 0000000000000100 RSI: ffffffff8be034c0 RDI: ffffc9000def7740 RBP: ffffc90000007c90 R08: ffffffff8fa19777 R09: 1ffffffff1f432ee R10: dffffc0000000000 R11: 1ffff1101c7a0b00 R12: 0000000000000000 R13: ffffc9000def7740 R14: 1ffff92000000f78 R15: 0000000000000001 FS: 0000000000000000(0000) GS:ffff88808d239000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f1ed39e7dac CR3: 000000001f8a1000 CR4: 0000000000352ef0 ---------------- Code disassembly (best guess): 0: e3 cc jrcxz 0xffffffce 2: cc int3 3: cc int3 4: cc int3 5: cc int3 6: cc int3 7: cc int3 8: cc int3 9: cc int3 a: cc int3 b: cc int3 c: cc int3 d: cc int3 e: cc int3 f: cc int3 10: cc int3 11: cc int3 12: cc int3 13: cc int3 14: cc int3 15: cc int3 16: cc int3 17: cc int3 18: cc int3 19: cc int3 1a: cc int3 1b: cc int3 1c: cc int3 1d: cc int3 1e: cc int3 1f: cc int3 20: cc int3 21: cc int3 22: 41 ff e3 jmp *%r11 25: cc int3 26: 41 ff e3 jmp *%r11 29: cc int3 * 2a: 41 ff e3 jmp *%r11 <-- trapping instruction 2d: cc int3 2e: 41 ff e3 jmp *%r11 31: cc int3 32: 41 ff e3 jmp *%r11 35: cc int3 36: 41 ff e3 jmp *%r11 39: cc int3 3a: 41 ff e3 jmp *%r11 3d: cc int3 3e: 41 rex.B 3f: ff .byte 0xff