BUG: unable to handle page fault for address: ffffea0003ffff88 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 13fff8067 P4D 13fff8067 PUD 13fff7067 PMD 0 Oops: 0000 [#1] PREEMPT SMP KASAN CPU: 1 PID: 8430 Comm: ifupdown-hotplu Not tainted 5.12.0-rc8-next-20210423-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:compound_head include/linux/page-flags.h:184 [inline] RIP: 0010:virt_to_head_page include/linux/mm.h:899 [inline] RIP: 0010:qlink_to_cache mm/kasan/quarantine.c:120 [inline] RIP: 0010:qlist_free_all+0x85/0xc0 mm/kasan/quarantine.c:162 Code: 85 ff 74 3b 4c 89 fe 48 85 ed 48 89 ef 75 cb 48 89 f7 48 89 34 24 e8 4a 2e 7a ff 48 8b 34 24 48 c1 e8 0c 48 c1 e0 06 4c 01 f0 <48> 8b 50 08 48 8d 4a ff 83 e2 01 48 0f 45 c1 48 8b 78 18 eb 9b 49 RSP: 0018:ffffc900016df720 EFLAGS: 00010282 RAX: ffffea0003ffff80 RBX: ffff88801d25eea0 RCX: 0000000000000000 RDX: ffff888020018000 RSI: ffff8880ffffea00 RDI: 0000000000000003 RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000002e R10: ffffffff81342fea R11: 000000000000003f R12: dffffc0000000000 R13: ffffc900016df758 R14: ffffea0000000000 R15: ffff8880ffffea00 FS: 0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffea0003ffff88 CR3: 000000001811f000 CR4: 00000000001506e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: kasan_quarantine_reduce+0x180/0x200 mm/kasan/quarantine.c:272 __kasan_slab_alloc+0x8e/0xa0 mm/kasan/common.c:438 kasan_slab_alloc include/linux/kasan.h:236 [inline] slab_post_alloc_hook mm/slab.h:527 [inline] slab_alloc_node mm/slub.c:2924 [inline] slab_alloc mm/slub.c:2932 [inline] kmem_cache_alloc+0x219/0x3a0 mm/slub.c:2937 ptlock_alloc mm/memory.c:5281 [inline] ptlock_init include/linux/mm.h:2222 [inline] pmd_ptlock_init include/linux/mm.h:2308 [inline] pgtable_pmd_page_ctor include/linux/mm.h:2344 [inline] pmd_alloc_one include/asm-generic/pgalloc.h:129 [inline] __pmd_alloc+0xbf/0x5c0 mm/memory.c:4675 pmd_alloc include/linux/mm.h:2172 [inline] alloc_new_pmd mm/mremap.c:93 [inline] move_page_tables+0x1814/0x23e0 mm/mremap.c:450 shift_arg_pages+0x192/0x410 fs/exec.c:706 setup_arg_pages+0x6b0/0x840 fs/exec.c:823 load_elf_binary+0xab8/0x4b30 fs/binfmt_elf.c:1018 search_binary_handler fs/exec.c:1720 [inline] exec_binprm fs/exec.c:1761 [inline] bprm_execve fs/exec.c:1830 [inline] bprm_execve+0x7ef/0x19b0 fs/exec.c:1792 do_execveat_common+0x621/0x7c0 fs/exec.c:1919 do_execve fs/exec.c:1987 [inline] __do_sys_execve fs/exec.c:2063 [inline] __se_sys_execve fs/exec.c:2058 [inline] __x64_sys_execve+0x8f/0xc0 fs/exec.c:2058 do_syscall_64+0x3a/0xb0 arch/x86/entry/common.c:47 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7f2a3f7ea647 Code: Unable to access opcode bytes at RIP 0x7f2a3f7ea61d. RSP: 002b:00007ffefd6d87d8 EFLAGS: 00000207 ORIG_RAX: 000000000000003b RAX: ffffffffffffffda RBX: 00007ffefd6d8d20 RCX: 00007f2a3f7ea647 RDX: 0000555dd905df30 RSI: 00007ffefd6d8d20 RDI: 00007ffefd6d9120 RBP: 000000000000000f R08: 000000000000fefc R09: 0000000000000070 R10: 0000000000000008 R11: 0000000000000207 R12: 00007ffefd6d88a0 R13: 0000000000000012 R14: 0000555dd905df30 R15: 00007ffefd6da2f0 Modules linked in: CR2: ffffea0003ffff88 ---[ end trace 534a08db857fa0ae ]--- RIP: 0010:compound_head include/linux/page-flags.h:184 [inline] RIP: 0010:virt_to_head_page include/linux/mm.h:899 [inline] RIP: 0010:qlink_to_cache mm/kasan/quarantine.c:120 [inline] RIP: 0010:qlist_free_all+0x85/0xc0 mm/kasan/quarantine.c:162 Code: 85 ff 74 3b 4c 89 fe 48 85 ed 48 89 ef 75 cb 48 89 f7 48 89 34 24 e8 4a 2e 7a ff 48 8b 34 24 48 c1 e8 0c 48 c1 e0 06 4c 01 f0 <48> 8b 50 08 48 8d 4a ff 83 e2 01 48 0f 45 c1 48 8b 78 18 eb 9b 49 RSP: 0018:ffffc900016df720 EFLAGS: 00010282 RAX: ffffea0003ffff80 RBX: ffff88801d25eea0 RCX: 0000000000000000 RDX: ffff888020018000 RSI: ffff8880ffffea00 RDI: 0000000000000003 RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000002e R10: ffffffff81342fea R11: 000000000000003f R12: dffffc0000000000 R13: ffffc900016df758 R14: ffffea0000000000 R15: ffff8880ffffea00 FS: 0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f2a3f7ea61d CR3: 000000001811f000 CR4: 00000000001506e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400