page:ffffea0001e90000 refcount:2 mapcount:1 mapping:ffff8880901badd9 index:0x20000 compound_mapcount: 1 anon flags: 0x1fffc0000090025(locked|uptodate|active|head|swapbacked) raw: 01fffc0000090025 dead000000000100 dead000000000122 ffff8880901badd9 raw: 0000000000020000 0000000000000000 00000002ffffffff ffff8880a5ca6440 page dumped because: VM_BUG_ON_PAGE(PageActive(page)) page->mem_cgroup:ffff8880a5ca6440 ------------[ cut here ]------------ kernel BUG at mm/vmscan.c:1156! invalid opcode: 0000 [#1] PREEMPT SMP KASAN CPU: 1 PID: 9423 Comm: syz-executor.3 Not tainted 5.3.0-rc1+ #1 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:shrink_page_list+0x195e/0x3810 mm/vmscan.c:1156 Code: 48 c7 c6 40 51 12 87 48 8d 50 ff a8 01 48 0f 44 d3 48 89 d7 e8 03 ff 05 00 0f 0b 48 c7 c6 00 5a 12 87 48 89 df e8 f2 fe 05 00 <0f> 0b 49 8b 45 00 48 c7 c6 40 51 12 87 48 8d 50 ff a8 01 48 0f 44 RSP: 0018:ffff88807a8df5a8 EFLAGS: 00010286 RAX: 0000000000000021 RBX: ffffea0001e90000 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff89da6040 RBP: ffff88807a8df7b8 R08: fffffbfff11f50a0 R09: fffffbfff11f50a0 R10: fffffbfff11f509f R11: ffffffff88fa84ff R12: ffff88807a8df828 R13: ffffea0001e90008 R14: ffffea0001e90000 R15: dffffc0000000000 FS: 00007fc4f961f700(0000) GS:ffff8880aeb00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000000075c091 CR3: 0000000090b88000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: reclaim_pages+0x4a4/0x9b0 mm/vmscan.c:2202 madvise_pageout_pte_range+0x1157/0x2040 mm/madvise.c:551 walk_pmd_range mm/pagewalk.c:51 [inline] walk_pud_range mm/pagewalk.c:109 [inline] walk_p4d_range mm/pagewalk.c:135 [inline] walk_pgd_range mm/pagewalk.c:161 [inline] __walk_page_range+0xa3f/0x1600 mm/pagewalk.c:254 walk_page_range+0x14d/0x340 mm/pagewalk.c:335 madvise_pageout_page_range.isra.18+0x9b/0xd0 mm/madvise.c:634 madvise_pageout+0x1df/0x340 mm/madvise.c:670 madvise_vma mm/madvise.c:1067 [inline] __do_sys_madvise mm/madvise.c:1247 [inline] __se_sys_madvise mm/madvise.c:1175 [inline] __x64_sys_madvise+0x30e/0x1160 mm/madvise.c:1175 do_syscall_64+0xd0/0x540 arch/x86/entry/common.c:296 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x459829 Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007fc4f961ec78 EFLAGS: 00000246 ORIG_RAX: 000000000000001c RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459829 RDX: 0000000000000015 RSI: 0000000000600003 RDI: 0000000020000000 RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc4f961f6d4 R13: 00000000004c5c6d R14: 00000000004da4d8 R15: 00000000ffffffff Modules linked in: ---[ end trace 4848a571efe4f940 ]--- RIP: 0010:shrink_page_list+0x195e/0x3810 mm/vmscan.c:1156 Code: 48 c7 c6 40 51 12 87 48 8d 50 ff a8 01 48 0f 44 d3 48 89 d7 e8 03 ff 05 00 0f 0b 48 c7 c6 00 5a 12 87 48 89 df e8 f2 fe 05 00 <0f> 0b 49 8b 45 00 48 c7 c6 40 51 12 87 48 8d 50 ff a8 01 48 0f 44 RSP: 0018:ffff88807a8df5a8 EFLAGS: 00010286 RAX: 0000000000000021 RBX: ffffea0001e90000 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff89da6040 RBP: ffff88807a8df7b8 R08: fffffbfff11f50a0 R09: fffffbfff11f50a0 R10: fffffbfff11f509f R11: ffffffff88fa84ff R12: ffff88807a8df828 R13: ffffea0001e90008 R14: ffffea0001e90000 R15: dffffc0000000000 FS: 00007fc4f961f700(0000) GS:ffff8880aeb00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000000075c091 CR3: 0000000090b88000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400