BUG: unable to handle kernel paging request at ffff8881d9a61850 PGD be01067 P4D be01067 PUD 1d9a8a063 BAD Oops: 0000 [#1] PREEMPT SMP KASAN CPU: 0 PID: 9272 Comm: syz-executor3 Not tainted 4.20.0-rc4+ #323 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:select_task_rq_fair+0x4b0/0x32f0 kernel/sched/fair.c:6364 Code: 84 8d 01 00 00 49 8d 78 50 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 04 02 84 c0 74 08 3c 03 0f 8e 8f 2c 00 00 <41> 8b 40 50 a8 01 0f 84 5c 01 00 00 31 c9 8b b5 d8 fb ff ff 48 ba RSP: 0018:ffff8881dae07418 EFLAGS: 00010046 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 RDX: 1ffff1103b34c30a RSI: 0000000000000000 RDI: ffff8881d9a61850 RBP: ffff8881dae078e8 R08: ffff8881d9a61800 R09: ffffed103b5c5b67 R10: ffffed103b5c5b67 R11: ffff8881dae2db3b R12: 000000000002ccc0 R13: 0000000000000001 R14: ffff8881dae078c0 R15: ffff8881d9a61800 FS: 00007ff101010700(0000) GS:ffff8881dae00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffff8881d9a8a668 CR3: 00000001a2947000 CR4: 00000000001406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: select_task_rq kernel/sched/core.c:1536 [inline] try_to_wake_up+0x4e7/0x1490 kernel/sched/core.c:2041 wake_up_process+0x10/0x20 kernel/sched/core.c:2129 hrtimer_wakeup+0x48/0x60 kernel/time/hrtimer.c:1646 __run_hrtimer kernel/time/hrtimer.c:1398 [inline] __hrtimer_run_queues+0x41c/0x10d0 kernel/time/hrtimer.c:1460 hrtimer_interrupt+0x313/0x780 kernel/time/hrtimer.c:1518 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1034 [inline] smp_apic_timer_interrupt+0x1a1/0x760 arch/x86/kernel/apic/apic.c:1059 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:804 RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x13/0x20 kernel/kcov.c:195 Code: 00 48 89 e5 48 8b 4d 08 e8 6a fe ff ff 5d c3 0f 1f 84 00 00 00 00 00 55 48 89 f2 48 89 fe bf 07 00 00 00 48 89 e5 48 8b 4d 08 48 fe ff ff 5d c3 66 0f 1f 44 00 00 55 48 89 e5 41 57 41 56 41 RSP: 0018:ffff8881c1f06a68 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffffffff81badc7b RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 RBP: ffff8881c1f06a68 R08: ffff8881b2942440 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: ffffea000691ba00 R13: ffffea000691ba00 R14: dead000000000100 R15: ffff8881c1f06c20 compound_head include/linux/page-flags.h:145 [inline] PageSwapCache include/linux/page-flags.h:350 [inline] free_swap_cache mm/swap_state.c:266 [inline] free_pages_and_swap_cache+0x19b/0x6f0 mm/swap_state.c:294 tlb_flush_mmu_free+0xcf/0x170 mm/mmu_gather.c:74 zap_pte_range mm/memory.c:1158 [inline] zap_pmd_range mm/memory.c:1193 [inline] zap_pud_range mm/memory.c:1222 [inline] zap_p4d_range mm/memory.c:1243 [inline] unmap_page_range+0x2068/0x2930 mm/memory.c:1264 unmap_single_vma+0x19b/0x310 mm/memory.c:1309 unmap_vmas+0x125/0x200 mm/memory.c:1339 exit_mmap+0x2be/0x590 mm/mmap.c:3145 __mmput kernel/fork.c:1045 [inline] mmput+0x247/0x610 kernel/fork.c:1066 exit_mm kernel/exit.c:545 [inline] do_exit+0xe74/0x26d0 kernel/exit.c:854 do_group_exit+0x177/0x440 kernel/exit.c:970 get_signal+0x8b0/0x1980 kernel/signal.c:2517 do_signal+0x9c/0x21c0 arch/x86/kernel/signal.c:816 exit_to_usermode_loop+0x2e5/0x380 arch/x86/entry/common.c:162 prepare_exit_to_usermode arch/x86/entry/common.c:197 [inline] syscall_return_slowpath arch/x86/entry/common.c:268 [inline] do_syscall_64+0x6be/0x820 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x457569 Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007ff10100fcf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: fffffffffffffe00 RBX: 000000000072bf08 RCX: 0000000000457569 RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000072bf08 RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000072bf0c R13: 00007ffe53d861ef R14: 00007ff1010109c0 R15: 0000000000000000 Modules linked in: CR2: ffff8881d9a61850 ---[ end trace b2153d5aa75eb4ad ]--- RIP: 0010:select_task_rq_fair+0x4b0/0x32f0 kernel/sched/fair.c:6364 Code: 84 8d 01 00 00 49 8d 78 50 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 04 02 84 c0 74 08 3c 03 0f 8e 8f 2c 00 00 <41> 8b 40 50 a8 01 0f 84 5c 01 00 00 31 c9 8b b5 d8 fb ff ff 48 ba RSP: 0018:ffff8881dae07418 EFLAGS: 00010046 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 RDX: 1ffff1103b34c30a RSI: 0000000000000000 RDI: ffff8881d9a61850 RBP: ffff8881dae078e8 R08: ffff8881d9a61800 R09: ffffed103b5c5b67 R10: ffffed103b5c5b67 R11: ffff8881dae2db3b R12: 000000000002ccc0 R13: 0000000000000001 R14: ffff8881dae078c0 R15: ffff8881d9a61800 FS: 00007ff101010700(0000) GS:ffff8881dae00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffff8881d9a8a668 CR3: 00000001a2947000 CR4: 00000000001406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400