ci2 starts bisection 2024-09-01 15:51:59.290538105 +0000 UTC m=+169627.435535064
bisecting fixing commit since 79bd336c7a94039e3d325195b978a04f3b89d2f3
building syzkaller on 048c640a64fd064361382a8800de05c87ff630cb
ensuring issue is reproducible on original commit 79bd336c7a94039e3d325195b978a04f3b89d2f3

testing commit 79bd336c7a94039e3d325195b978a04f3b89d2f3 gcc
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: cfb95321bfdaba07c97a7b9a996e1a4c5c5ff5058589583700e80ba6676cd9bf
run #0: crashed: BUG: soft lockup in sys_getsockopt
run #1: crashed: BUG: soft lockup in syscall_exit_to_user_mode
run #2: crashed: BUG: soft lockup in addrconf_dad_work
run #3: crashed: BUG: soft lockup in sys_openat
run #4: crashed: BUG: soft lockup in sys_openat
run #5: crashed: BUG: soft lockup in kernfs_fop_write_iter
run #6: crashed: BUG: soft lockup in syscall_exit_to_user_mode
run #7: crashed: BUG: soft lockup in asm_exc_page_fault
run #8: crashed: BUG: soft lockup in unix_release
run #9: crashed: BUG: soft lockup in syscall_exit_to_user_mode
run #10: crashed: BUG: soft lockup in corrupted
run #11: crashed: BUG: soft lockup in sys_readlink
run #12: crashed: BUG: soft lockup in syscall_exit_to_user_mode
run #13: crashed: BUG: soft lockup in addrconf_rs_timer
run #14: crashed: BUG: soft lockup in syscall_exit_to_user_mode
run #15: crashed: BUG: soft lockup in sys_newfstatat
run #16: crashed: BUG: soft lockup in sys_socket
run #17: crashed: BUG: soft lockup in sys_getsockopt
run #18: crashed: BUG: soft lockup in sys_unlink
run #19: crashed: BUG: soft lockup in sys_readlink
representative crash: BUG: soft lockup in sys_getsockopt, types: [HANG]
check whether we can drop unnecessary instrumentation
disabling configs for [LEAK UBSAN BUG KASAN LOCKDEP ATOMIC_SLEEP], they are not needed
testing commit 79bd336c7a94039e3d325195b978a04f3b89d2f3 gcc
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: d8c7799ce40883ae157fd681e2bdb5adc424861d05f569d44f847c1bc84f503c
all runs: OK
false negative chance: 0.000
kconfig minimization: base=4920 full=6158 leaves diff=244
split chunks (needed=false): <244>
split chunk #0 of len 244 into 5 parts
testing without sub-chunk 1/5
testing commit 79bd336c7a94039e3d325195b978a04f3b89d2f3 gcc
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: ba6afc150d5c4271adf9303212de96006ef4f0e8c13c563a6ab6441451d2c348
run #0: crashed: BUG: soft lockup in syscall_exit_to_user_mode
run #1: crashed: BUG: soft lockup in mld_ifc_work
run #2: crashed: BUG: soft lockup in sys_umount
run #3: crashed: BUG: soft lockup in syscall_exit_to_user_mode
run #4: crashed: BUG: soft lockup in mld_dad_work
run #5: crashed: BUG: soft lockup in corrupted
run #6: crashed: BUG: soft lockup in bpf_link_release
run #7: crashed: BUG: soft lockup in syscall_exit_to_user_mode
run #8: crashed: BUG: soft lockup in unix_release
run #9: crashed: BUG: soft lockup in syscall_exit_to_user_mode
representative crash: BUG: soft lockup in syscall_exit_to_user_mode, types: [HANG]
the chunk can be dropped
testing without sub-chunk 2/5
testing commit 79bd336c7a94039e3d325195b978a04f3b89d2f3 gcc
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: e103176be118393d051600a61450e96a4bf65a8cce0b5e86346ec9ff69ec9887
run #0: crashed: BUG: soft lockup in sys_exit_group
run #1: crashed: BUG: soft lockup in sys_mkdirat
run #2: crashed: BUG: soft lockup in mld_ifc_work
run #3: crashed: BUG: soft lockup in syscall_exit_to_user_mode
run #4: crashed: BUG: soft lockup in syscall_exit_to_user_mode
run #5: crashed: BUG: soft lockup in syscall_exit_to_user_mode
run #6: crashed: BUG: soft lockup in syscall_exit_to_user_mode
run #7: crashed: BUG: soft lockup in mld_ifc_work
run #8: crashed: BUG: soft lockup in bpf_link_release
run #9: crashed: BUG: soft lockup in sys_getdents64
representative crash: BUG: soft lockup in sys_exit_group, types: [HANG]
the chunk can be dropped
testing without sub-chunk 3/5
testing commit 79bd336c7a94039e3d325195b978a04f3b89d2f3 gcc
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: aa28868b31387acf3711a456060ef904e4b6de9c15667682101297ae585da44a
run #0: crashed: BUG: soft lockup in syscall_exit_to_user_mode
run #1: crashed: BUG: soft lockup in vfork
run #2: crashed: BUG: soft lockup in syscall_exit_to_user_mode
run #3: crashed: BUG: soft lockup in sys_exit_group
run #4: crashed: BUG: soft lockup in syscall_exit_to_user_mode
run #5: crashed: BUG: soft lockup in unix_release
run #6: crashed: BUG: soft lockup in sys_getsockopt
run #7: crashed: BUG: soft lockup in unix_release
run #8: crashed: BUG: soft lockup in syscall_exit_to_user_mode
run #9: crashed: BUG: soft lockup in corrupted
representative crash: BUG: soft lockup in syscall_exit_to_user_mode, types: [HANG]
the chunk can be dropped
testing without sub-chunk 4/5
testing commit 79bd336c7a94039e3d325195b978a04f3b89d2f3 gcc
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: 1fe3f7804b259706a6243f7590d79b6ac3a33d156a1c1d730cc558a75e357c70
run #0: crashed: BUG: soft lockup in sys_newfstatat
run #1: crashed: BUG: soft lockup in syscall_exit_to_user_mode
run #2: crashed: BUG: soft lockup in syscall_exit_to_user_mode
run #3: crashed: BUG: soft lockup in syscall_exit_to_user_mode
run #4: crashed: BUG: soft lockup in sys_sendto
run #5: crashed: BUG: soft lockup in sys_lsetxattr
run #6: crashed: BUG: soft lockup in syscall_exit_to_user_mode
run #7: crashed: BUG: soft lockup in sys_exit_group
run #8: crashed: BUG: soft lockup in sys_getsockopt
run #9: crashed: BUG: soft lockup in syscall_exit_to_user_mode
representative crash: BUG: soft lockup in sys_newfstatat, types: [HANG]
the chunk can be dropped
testing without sub-chunk 5/5
testing commit 79bd336c7a94039e3d325195b978a04f3b89d2f3 gcc
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40
failed building 79bd336c7a94039e3d325195b978a04f3b89d2f3: net/socket.c:1191: undefined reference to `wext_handle_ioctl'
net/socket.c:3385: undefined reference to `compat_wext_handle_ioctl'
net/core/net-procfs.c:343: undefined reference to `wext_proc_exit'
net/core/net-procfs.c:327: undefined reference to `wext_proc_init'
minimized to 48 configs; suspects: [HID_ZEROPLUS USB_NET_CDC_SUBSET USB_NET_CDC_SUBSET_ENABLE USB_NET_DM9601 USB_NET_GL620A USB_NET_MCS7830 USB_NET_NET1080 USB_NET_PLUSB USB_NET_RNDIS_HOST USB_NET_SMSC75XX USB_NET_SMSC95XX USB_NET_SR9700 USB_NET_SR9800 USB_NET_ZAURUS USB_OHCI_HCD USB_OHCI_HCD_PCI USB_OHCI_HCD_PLATFORM USB_OTG USB_OTG_FSM USB_PRINTER USB_SERIAL USB_SERIAL_FTDI_SIO USB_SERIAL_GENERIC USB_SERIAL_PL2303 USB_STORAGE_ALAUDA USB_STORAGE_CYPRESS_ATACB USB_STORAGE_DATAFAB USB_STORAGE_FREECOM USB_STORAGE_ISD200 USB_STORAGE_JUMPSHOT USB_STORAGE_KARMA USB_STORAGE_ONETOUCH USB_STORAGE_SDDR09 USB_STORAGE_SDDR55 USB_STORAGE_USBAT USB_TRANCEVIBRATOR USB_U_AUDIO USB_U_ETHER USB_U_SERIAL USB_WDM WLAN WLAN_VENDOR_ATH WLAN_VENDOR_ATMEL WLAN_VENDOR_BROADCOM WLAN_VENDOR_INTERSIL WLAN_VENDOR_MARVELL WLAN_VENDOR_MEDIATEK WLAN_VENDOR_MICROCHIP WLAN_VENDOR_RALINK WLAN_VENDOR_REALTEK WLAN_VENDOR_RSI WLAN_VENDOR_ZYDAS X86_X32 ZEROPLUS_FF]
testing current HEAD 29d153aabd54226781d6165592fbcfa1e00e571c
testing commit 29d153aabd54226781d6165592fbcfa1e00e571c gcc
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: 2cdb0d3ea8fe58084527b926bffb317e6ed6cd9a94d6f3a51835c75b201e23ab
run #0: crashed: BUG: soft lockup in syscall_exit_to_user_mode
run #1: crashed: BUG: soft lockup in x64_sys_call
run #2: crashed: BUG: soft lockup in addrconf_dad_work
run #3: crashed: BUG: soft lockup in x64_sys_call
run #4: crashed: BUG: soft lockup in syscall_exit_to_user_mode
run #5: crashed: BUG: soft lockup in syscall_exit_to_user_mode
run #6: crashed: BUG: soft lockup in mld_ifc_work
run #7: crashed: BUG: soft lockup in asm_exc_page_fault
run #8: crashed: BUG: soft lockup in x64_sys_call
run #9: crashed: BUG: soft lockup in x64_sys_call
representative crash: BUG: soft lockup in syscall_exit_to_user_mode, types: [HANG]
crash still not fixed/happens on the oldest tested release
revisions tested: 7, total time: 1h17m3.626166927s (build: 16m47.439370936s, test: 56m49.453486978s)
crash still not fixed or there were kernel test errors
commit msg: Merge 5.15.156 into android13-5.15-lts
crash: BUG: soft lockup in syscall_exit_to_user_mode
RBP: 00007ffbb9ae2f80 R08: 00007ffbb952e6c0 R09: 00007ffbb952e6c0
R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffbb9ae2f8c
R13: 000000000000000b R14: 00007ffcaa1940b0 R15: 00007ffcaa194198
 </TASK>
watchdog: BUG: soft lockup - CPU#1 stuck for 226s! [syz-executor.3:684]
Modules linked in:
CPU: 1 PID: 684 Comm: syz-executor.3 Not tainted 5.15.156-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
RIP: 0010:pv_wait_head_or_lock kernel/locking/qspinlock_paravirt.h:434 [inline]
RIP: 0010:__pv_queued_spin_lock_slowpath+0x3f3/0xc10 kernel/locking/qspinlock.c:508
Code: b8 00 00 00 00 00 fc ff df 41 c6 44 24 01 01 48 c1 e9 03 41 bf 00 80 00 00 83 e3 07 4c 8d 2c 01 41 be 01 00 00 00 eb 0c f3 90 <41> 83 ef 01 0f 84 a7 04 00 00 41 0f b6 45 00 38 d8 7f 08 84 c0 0f
RSP: 0018:ffffc900006571d0 EFLAGS: 00000206
RAX: 0000000000000003 RBX: 0000000000000000 RCX: 1ffff11022dce15b
RDX: 0000000000000001 RSI: 0000000000000003 RDI: ffff888116e70ad8
RBP: ffffc900006572a0 R08: 0000000000000001 R09: ffff888116e70ad8
R10: ffffed1022dce15b R11: 0000000000000001 R12: ffff888116e70ad8
R13: ffffed1022dce15b R14: 0000000000000001 R15: 0000000000002f25
FS:  0000000000000000(0000) GS:ffff8881f7300000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 000000000520f000 CR4: 00000000003506a0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <IRQ>
 </IRQ>
 <TASK>
 pv_queued_spin_lock_slowpath arch/x86/include/asm/paravirt.h:585 [inline]
 queued_spin_lock_slowpath arch/x86/include/asm/qspinlock.h:51 [inline]
 queued_spin_lock include/asm-generic/qspinlock.h:85 [inline]
 do_raw_spin_lock include/linux/spinlock.h:187 [inline]
 __raw_spin_lock_bh include/linux/spinlock_api_smp.h:136 [inline]
 _raw_spin_lock_bh+0xeb/0x110 kernel/locking/spinlock.c:178
 sock_hash_delete_elem+0xd8/0x350 net/core/sock_map.c:943
 bpf_prog_2c29ac5cdc6b1842+0x3a/0x544
 bpf_dispatcher_nop_func include/linux/bpf.h:785 [inline]
 __bpf_prog_run include/linux/filter.h:628 [inline]
 bpf_prog_run include/linux/filter.h:635 [inline]
 __bpf_trace_run kernel/trace/bpf_trace.c:1880 [inline]
 bpf_trace_run4+0xac/0x1c0 kernel/trace/bpf_trace.c:1919
 __bpf_trace_mm_page_alloc+0xa5/0xd0 include/trace/events/kmem.h:201
 __traceiter_mm_page_alloc+0x3e/0x60 include/trace/events/kmem.h:201
 trace_mm_page_alloc include/trace/events/kmem.h:201 [inline]
 __alloc_pages+0x506/0x2730 mm/page_alloc.c:5801
 __alloc_pages_node include/linux/gfp.h:591 [inline]
 alloc_pages_node include/linux/gfp.h:605 [inline]
 alloc_pages include/linux/gfp.h:618 [inline]
 __get_free_pages+0x10/0x40 mm/page_alloc.c:5816
 tlb_next_batch mm/mmu_gather.c:29 [inline]
 __tlb_remove_page_size+0x158/0x310 mm/mmu_gather.c:83
 __tlb_remove_page include/asm-generic/tlb.h:444 [inline]
 zap_pte_range mm/memory.c:1437 [inline]
 zap_pmd_range mm/memory.c:1559 [inline]
 zap_pud_range mm/memory.c:1588 [inline]
 zap_p4d_range mm/memory.c:1609 [inline]
 unmap_page_range+0xb9a/0x1ae0 mm/memory.c:1630
 unmap_single_vma mm/memory.c:1675 [inline]
 unmap_vmas+0x1dc/0x3a0 mm/memory.c:1707
 exit_mmap+0x1fb/0x890 mm/mmap.c:3215
 __mmput+0x70/0x3a0 kernel/fork.c:1179
 mmput kernel/fork.c:1202 [inline]
 mmput+0x35/0xf0 kernel/fork.c:1196
 exit_mm kernel/exit.c:552 [inline]
 do_exit+0x88b/0x24c0 kernel/exit.c:865
 do_group_exit+0xe6/0x290 kernel/exit.c:1000
 get_signal+0x230/0x20b0 kernel/signal.c:2896
 arch_do_signal_or_restart+0x2b4/0x21c0 arch/x86/kernel/signal.c:867
 handle_signal_work kernel/entry/common.c:154 [inline]
 exit_to_user_mode_loop kernel/entry/common.c:178 [inline]
 exit_to_user_mode_prepare+0x102/0x150 kernel/entry/common.c:214
 __syscall_exit_to_user_mode_work kernel/entry/common.c:296 [inline]
 syscall_exit_to_user_mode+0x21/0x40 kernel/entry/common.c:307
 do_syscall_64+0x40/0xb0 arch/x86/entry/common.c:86
 entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7ffbb99abf69
Code: Unable to access opcode bytes at RIP 0x7ffbb99abf3f.
RSP: 002b:00007ffbb952e178 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: fffffffffffffe00 RBX: 00007ffbb9ae2f88 RCX: 00007ffbb99abf69
RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ffbb9ae2f88
RBP: 00007ffbb9ae2f80 R08: 00007ffbb952e6c0 R09: 00007ffbb952e6c0
R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffbb9ae2f8c
R13: 000000000000000b R14: 00007ffcaa1940b0 R15: 00007ffcaa194198
 </TASK>
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 PID: 678 Comm: syz-executor.1 Not tainted 5.15.156-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
RIP: 0010:kvm_wait+0x91/0xc0 arch/x86/kernel/kvm.c:922
Code: d0 7f 04 84 c0 75 25 0f b6 07 40 38 f0 74 10 fb c9 c3 c3 66 90 0f 00 2d 1d b2 1b 03 f4 c9 c3 66 90 0f 00 2d 11 b2 1b 03 fb f4 <c9> c3 89 75 f4 48 89 7d f8 e8 31 cd 6d 00 8b 75 f4 48 8b 7d f8 eb
RSP: 0018:ffffc90000726270 EFLAGS: 00000246
RAX: 0000000000000001 RBX: ffff8881f7338c80 RCX: ffffffff81499fe5
RDX: 0000000000000004 RSI: 0000000000000001 RDI: ffff8881f7238c94
RBP: ffffc90000726280 R08: 0000000000000001 R09: ffff8881f7238c94
R10: ffffed103ee47192 R11: 0000000000000001 R12: ffff8881f7238c94
R13: ffffed103ee67192 R14: ffff8881f7338c94 R15: ffff8881f7238c80
FS:  0000000000000000(0000) GS:ffff8881f7200000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ffbb9ae4988 CR3: 000000000520f000 CR4: 00000000003506b0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <NMI>
 </NMI>
 <TASK>
 pv_wait arch/x86/include/asm/paravirt.h:597 [inline]
 pv_wait_node kernel/locking/qspinlock_paravirt.h:325 [inline]
 __pv_queued_spin_lock_slowpath+0x735/0xc10 kernel/locking/qspinlock.c:473
 pv_queued_spin_lock_slowpath arch/x86/include/asm/paravirt.h:585 [inline]
 queued_spin_lock_slowpath arch/x86/include/asm/qspinlock.h:51 [inline]
 queued_spin_lock include/asm-generic/qspinlock.h:85 [inline]
 do_raw_spin_lock include/linux/spinlock.h:187 [inline]
 __raw_spin_lock_bh include/linux/spinlock_api_smp.h:136 [inline]
 _raw_spin_lock_bh+0xeb/0x110 kernel/locking/spinlock.c:178
 sock_hash_delete_elem+0xd8/0x350 net/core/sock_map.c:943
 bpf_prog_2c29ac5cdc6b1842+0x3a/0x544
 bpf_dispatcher_nop_func include/linux/bpf.h:785 [inline]
 __bpf_prog_run include/linux/filter.h:628 [inline]
 bpf_prog_run include/linux/filter.h:635 [inline]
 __bpf_trace_run kernel/trace/bpf_trace.c:1880 [inline]
 bpf_trace_run4+0xac/0x1c0 kernel/trace/bpf_trace.c:1919
 __bpf_trace_mm_page_alloc+0xa5/0xd0 include/trace/events/kmem.h:201
 __traceiter_mm_page_alloc+0x3e/0x60 include/trace/events/kmem.h:201
 trace_mm_page_alloc include/trace/events/kmem.h:201 [inline]
 __alloc_pages+0x506/0x2730 mm/page_alloc.c:5801
 __alloc_pages_node include/linux/gfp.h:591 [inline]
 alloc_pages_node include/linux/gfp.h:605 [inline]
 alloc_pages include/linux/gfp.h:618 [inline]
 __stack_depot_save+0x3bb/0x500 lib/stackdepot.c:326
 stack_depot_save+0xe/0x10 lib/stackdepot.c:383
 save_stack+0x144/0x1c0 mm/page_owner.c:140
 __set_page_owner+0x21/0x260 mm/page_owner.c:200
 set_page_owner include/linux/page_owner.h:33 [inline]
 post_alloc_hook+0x13a/0x160 mm/page_alloc.c:2605
 prep_new_page+0x1b/0x130 mm/page_alloc.c:2611
 get_page_from_freelist+0x1c54/0x3370 mm/page_alloc.c:4485
 __alloc_pages+0x2d5/0x2730 mm/page_alloc.c:5779
 __alloc_pages_node include/linux/gfp.h:591 [inline]
 alloc_pages_node include/linux/gfp.h:605 [inline]
 alloc_pages include/linux/gfp.h:618 [inline]
 __stack_depot_save+0x3bb/0x500 lib/stackdepot.c:326
 kasan_save_stack+0x3a/0x50 mm/kasan/common.c:39
 kasan_set_track+0x25/0x30 mm/kasan/common.c:45
 kasan_set_free_info+0x24/0x40 mm/kasan/generic.c:370
 ____kasan_slab_free mm/kasan/common.c:365 [inline]
 ____kasan_slab_free mm/kasan/common.c:327 [inline]
 __kasan_slab_free+0x111/0x150 mm/kasan/common.c:373
 kasan_slab_free include/linux/kasan.h:193 [inline]
 slab_free_hook mm/slub.c:1723 [inline]
 slab_free_freelist_hook+0x94/0x1a0 mm/slub.c:1749
 slab_free mm/slub.c:3519 [inline]
 kfree+0xc2/0x270 mm/slub.c:4579
 sk_psock_free_link include/linux/skmsg.h:420 [inline]
 sock_map_del_link+0x299/0x540 net/core/sock_map.c:160
 sock_map_unref+0x68/0xd0 net/core/sock_map.c:182
 sock_hash_delete_elem+0x250/0x350 net/core/sock_map.c:947
 bpf_prog_2c29ac5cdc6b1842+0x3a/0x544
 bpf_dispatcher_nop_func include/linux/bpf.h:785 [inline]
 __bpf_prog_run include/linux/filter.h:628 [inline]
 bpf_prog_run include/linux/filter.h:635 [inline]
 __bpf_trace_run kernel/trace/bpf_trace.c:1880 [inline]
 bpf_trace_run4+0xac/0x1c0 kernel/trace/bpf_trace.c:1919
 __bpf_trace_mm_page_alloc+0xa5/0xd0 include/trace/events/kmem.h:201
 __traceiter_mm_page_alloc+0x3e/0x60 include/trace/events/kmem.h:201
 trace_mm_page_alloc include/trace/events/kmem.h:201 [inline]
 __alloc_pages+0x506/0x2730 mm/page_alloc.c:5801
 __alloc_pages_node include/linux/gfp.h:591 [inline]
 alloc_pages_node include/linux/gfp.h:605 [inline]
 alloc_pages include/linux/gfp.h:618 [inline]
 __get_free_pages+0x10/0x40 mm/page_alloc.c:5816
 tlb_next_batch mm/mmu_gather.c:29 [inline]
 __tlb_remove_page_size+0x158/0x310 mm/mmu_gather.c:83
 __tlb_remove_page include/asm-generic/tlb.h:444 [inline]
 zap_pte_range mm/memory.c:1437 [inline]
 zap_pmd_range mm/memory.c:1559 [inline]
 zap_pud_range mm/memory.c:1588 [inline]
 zap_p4d_range mm/memory.c:1609 [inline]
 unmap_page_range+0xb9a/0x1ae0 mm/memory.c:1630
 unmap_single_vma mm/memory.c:1675 [inline]
 unmap_vmas+0x1dc/0x3a0 mm/memory.c:1707
 exit_mmap+0x1fb/0x890 mm/mmap.c:3215
 __mmput+0x70/0x3a0 kernel/fork.c:1179
 mmput kernel/fork.c:1202 [inline]
 mmput+0x35/0xf0 kernel/fork.c:1196
 exit_mm kernel/exit.c:552 [inline]
 do_exit+0x88b/0x24c0 kernel/exit.c:865
 do_group_exit+0xe6/0x290 kernel/exit.c:1000
 get_signal+0x230/0x20b0 kernel/signal.c:2896
 arch_do_signal_or_restart+0x2b4/0x21c0 arch/x86/kernel/signal.c:867
 handle_signal_work kernel/entry/common.c:154 [inline]
 exit_to_user_mode_loop kernel/entry/common.c:178 [inline]
 exit_to_user_mode_prepare+0x102/0x150 kernel/entry/common.c:214
 __syscall_exit_to_user_mode_work kernel/entry/common.c:296 [inline]
 syscall_exit_to_user_mode+0x21/0x40 kernel/entry/common.c:307
 do_syscall_64+0x40/0xb0 arch/x86/entry/common.c:86
 entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7f2dab615f69
Code: Unable to access opcode bytes at RIP 0x7f2dab615f3f.
RSP: 002b:00007f2dab198178 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: fffffffffffffe00 RBX: 00007f2dab74cf88 RCX: 00007f2dab615f69
RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2dab74cf88
RBP: 00007f2dab74cf80 R08: 00007f2dab1986c0 R09: 00007f2dab1986c0
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2dab74cf8c
R13: 000000000000000b R14: 00007ffe974b7930 R15: 00007ffe974b7a18
 </TASK>