[ 1308.917689] BUG: sleeping function called from invalid context at mm/mempolicy.c:553
[ 1308.941388] in_atomic(): 1, irqs_disabled(): 0, pid: 23470, name: syz-executor
[ 1308.942311] 2 locks held by syz-executor/23470:
[ 1308.942874] #0: (&mm->mmap_sem){++++++}, at: do_migrate_pages (mm/mempolicy.c:1064)
[ 1308.944150] #1: (&(ptlock_ptr(page))->rlock){+.+...}, at: queue_pages_pte_range (include/linux/spinlock.h:302 include/linux/mm.h:1725 mm/mempolicy.c:497)
[ 1308.945607] CPU: 1 PID: 23470 Comm: syz-executor Not tainted 4.4.0-rc8-next-20160111-sasha-00024-g376a9c2-dirty #2790
[ 1308.946901]  1ffff10018664ee4 00000000384c5e9c ffff8800c33277a0 ffffffffa343054e
[ 1308.947929]  0000000041b58ab3 ffffffffaf95ea80 ffffffffa3430486 ffffffffad2c8fc0
[ 1308.948947]  0000000000000002 0000000000000002 ffff8800c3453bc0 ffff8800c3327788
[ 1308.949986] Call Trace:
[ 1308.960549] dump_stack (lib/dump_stack.c:52)
[ 1308.961261] ? _atomic_dec_and_lock (lib/dump_stack.c:27)
[ 1308.962119] ___might_sleep (kernel/sched/core.c:7703)
[ 1308.962888] queue_pages_pte_range (mm/mempolicy.c:553)
[ 1308.963689] ? queue_pages_hugetlb (mm/mempolicy.c:487)
[ 1308.964487] __walk_page_range (mm/pagewalk.c:51 mm/pagewalk.c:90 mm/pagewalk.c:116 mm/pagewalk.c:204)
[ 1308.965240] walk_page_range (mm/pagewalk.c:282)
[ 1308.965995] queue_pages_range (mm/mempolicy.c:669)
[ 1308.966747] ? mpol_relative_nodemask (mm/mempolicy.c:669)
[ 1308.967547] ? queue_pages_hugetlb (mm/mempolicy.c:487)
[ 1308.968332] ? alloc_pages_current (mm/mempolicy.c:560)
[ 1308.969108] ? change_prot_numa (mm/mempolicy.c:620)
[ 1308.969863] ? debug_check_no_locks_freed (kernel/locking/lockdep.c:3072)
[ 1308.981254] migrate_to_node (include/linux/compiler.h:222 include/linux/list.h:200 mm/mempolicy.c:1004)
[ 1308.982001] ? mpol_rebind_policy (mm/mempolicy.c:987)
[ 1308.982760] ? __lock_is_held (kernel/locking/lockdep.c:3463)
[ 1308.983469] do_migrate_pages (mm/mempolicy.c:1107)
[ 1308.984182] ? queue_pages_test_walk (mm/mempolicy.c:1022)
[ 1308.984980] ? ns_capable (kernel/capability.c:387)
[ 1308.985661] SYSC_migrate_pages (mm/mempolicy.c:1453)
[ 1308.986336] ? SYSC_migrate_pages (./arch/x86/include/asm/preempt.h:69 include/linux/rcupdate.h:309 include/linux/rcupdate.h:872 mm/mempolicy.c:1399)
[ 1308.987045] ? context_tracking_exit.part.5 (./arch/x86/include/asm/paravirt.h:786 kernel/context_tracking.c:177)
[ 1308.987915] ? do_migrate_pages (mm/mempolicy.c:1374)
[ 1308.988650] ? trace_hardirqs_on_caller (kernel/locking/lockdep.c:2614 (discriminator 1))
[ 1308.989448] SyS_migrate_pages (mm/mempolicy.c:1371)
[ 1308.990184] entry_SYSCALL_64_fastpath (arch/x86/entry/entry_64.S:186)
[ 1309.001373]
[ 1309.001619] ================================================
[ 1309.002321] [ BUG: lock held when returning to user space! ]
[ 1309.003002] 4.4.0-rc8-next-20160111-sasha-00024-g376a9c2-dirty #2790 Not tainted
[ 1309.003856] ------------------------------------------------
[ 1309.004493] syz-executor/23470 is leaving the kernel with locks still held!
[ 1309.005337] 1 lock held by syz-executor/23470:
[ 1309.005903] #0: (&(ptlock_ptr(page))->rlock){+.+...}, at: queue_pages_pte_range (include/linux/spinlock.h:302 include/linux/mm.h:1725 mm/mempolicy.c:497)
[ 1309.007328] BUG: scheduling while atomic: syz-executor/23470/0x00000002
[ 1309.008126] INFO: lockdep is turned off.
[ 1309.008630] Modules linked in:
[ 1309.009080] CPU: 1 PID: 23470 Comm: syz-executor Not tainted 4.4.0-rc8-next-20160111-sasha-00024-g376a9c2-dirty #2790
[ 1309.011897]  1ffff10018664fb1 00000000384c5e9c ffff8800c3327e08 ffffffffa343054e
[ 1309.012912]  0000000041b58ab3 ffffffffaf95ea80 ffffffffa3430486 ffff8800c3453bc0
[ 1309.013933]  0000000000000001 0000000000000004 0000000000000000 0000000000000001
[ 1309.014921] Call Trace:
[ 1309.015234] dump_stack (lib/dump_stack.c:52)
[ 1309.015898] ? _atomic_dec_and_lock (lib/dump_stack.c:27)
[ 1309.016616] __schedule_bug (kernel/sched/core.c:3102)
[ 1309.017326] __schedule (./arch/x86/include/asm/preempt.h:27 kernel/sched/core.c:3116 kernel/sched/core.c:3225)
[ 1309.017925] ? queue_pages_pte_range (include/linux/spinlock.h:302 include/linux/mm.h:1725 mm/mempolicy.c:497)
[ 1309.018720] schedule (./arch/x86/include/asm/preempt.h:74 (discriminator 1) kernel/sched/core.c:3312 (discriminator 1))
[ 1309.019347] exit_to_usermode_loop (arch/x86/entry/common.c:240)
[ 1309.020057] syscall_return_slowpath (arch/x86/entry/common.c:282 arch/x86/entry/common.c:344)
[ 1309.021000] int_ret_from_sys_call (arch/x86/entry/entry_64.S:282)