------------[ cut here ]------------ WARNING: CPU: 0 PID: 14494 at mm/huge_memory.c:2465 __split_huge_page_tail+0x4c0/0xd38 mm/huge_memory.c:2465 Modules linked in: CPU: 0 PID: 14494 Comm: syz-executor.4 Not tainted 6.1.0-rc2-syzkaller-154433-g247f34f7b803 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 pstate: 604000c5 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : __split_huge_page_tail+0x4c0/0xd38 mm/huge_memory.c:2465 lr : __split_huge_page_tail+0x4b8/0xd38 mm/huge_memory.c:2465 sp : ffff80001f373640 x29: ffff80001f373640 x28: 000000000000009e x27: 000000000000009f x26: fffffc0004bf27c0 x25: 000000000000009e x24: fffffc0004bf27a8 x23: ffff80000d95f000 x22: fffffc0004bf0000 x21: ffff00011903b800 x20: ffff80001f3738d0 x19: fffffc0004bf2780 x18: 0000000000000000 x17: 203d212065746176 x16: 6972703e2d6c6961 x15: 745f656761702845 x14: 4741505f45434e4f x13: 2930203d21206574 x12: 0000000000040000 x11: 000000000003ffff x10: ffff80001cc56000 x9 : 33f641974331df00 x8 : 0000000000000001 x7 : 6163656220646570 x6 : ffff8000081c3974 x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000000 x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000042 Call trace: __split_huge_page_tail+0x4c0/0xd38 mm/huge_memory.c:2465 __split_huge_page+0x418/0x153c mm/huge_memory.c:2527 split_huge_page_to_list+0xc50/0xffc mm/huge_memory.c:2756 split_folio_to_list include/linux/huge_mm.h:444 [inline] shrink_folio_list+0xacc/0x337c mm/vmscan.c:1851 reclaim_folio_list mm/vmscan.c:2662 [inline] reclaim_pages+0x3e0/0x5c4 mm/vmscan.c:2698 madvise_cold_or_pageout_pte_range+0x1040/0x16d4 mm/madvise.c:403 walk_pmd_range mm/pagewalk.c:128 [inline] walk_pud_range mm/pagewalk.c:205 [inline] walk_p4d_range mm/pagewalk.c:240 [inline] walk_pgd_range+0x444/0x9c4 mm/pagewalk.c:277 __walk_page_range+0xa4/0x210 mm/pagewalk.c:379 walk_page_range+0x1f4/0x318 mm/pagewalk.c:477 madvise_pageout_page_range mm/madvise.c:552 [inline] madvise_pageout mm/madvise.c:589 [inline] madvise_vma_behavior+0x6d4/0x7f4 mm/madvise.c:1011 madvise_walk_vmas mm/madvise.c:1240 [inline] do_madvise+0x438/0x5c0 mm/madvise.c:1419 __do_sys_madvise mm/madvise.c:1432 [inline] __se_sys_madvise mm/madvise.c:1430 [inline] __arm64_sys_madvise+0x2c/0x40 mm/madvise.c:1430 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall arch/arm64/kernel/syscall.c:52 [inline] el0_svc_common+0x138/0x220 arch/arm64/kernel/syscall.c:142 do_el0_svc+0x48/0x164 arch/arm64/kernel/syscall.c:206 el0_svc+0x58/0x150 arch/arm64/kernel/entry-common.c:636 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:654 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:581 irq event stamp: 0 hardirqs last enabled at (0): [<0000000000000000>] 0x0 hardirqs last disabled at (0): [] copy_process+0x928/0x16ec kernel/fork.c:2197 softirqs last enabled at (0): [] copy_process+0x938/0x16ec kernel/fork.c:2198 softirqs last disabled at (0): [<0000000000000000>] 0x0 ---[ end trace 0000000000000000 ]---