------------[ cut here ]------------ kernel BUG at mm/khugepaged.c:1800! Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP Modules linked in: CPU: 0 PID: 3114 Comm: syz-executor636 Not tainted 6.1.0-rc8-syzkaller-33330-ga5541c0811a0 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 pstate: 804000c5 (Nzcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : collapse_file+0x18a0/0x2ffc mm/khugepaged.c:1800 lr : collapse_file+0x18a0/0x2ffc mm/khugepaged.c:1800 sp : ffff800010fd3990 x29: ffff800010fd3a80 x28: 0000000000000000 x27: ffff0000c9b35200 x26: 0000000000000036 x25: 0000000000000200 x24: 000000000000013f x23: ffff0000cb14bdd8 x22: 0000000000000200 x21: 00000000000002c0 x20: ffffffffffffffd2 x19: 00000000000002c1 x18: 00000000000000c0 x17: ffff80000dda8198 x16: ffff80000dbe6158 x15: ffff0000c7c88000 x14: 0000000000000050 x13: 00000000ffffffff x12: ffff0000c7c88000 x11: ff8080000856b2c8 x10: 0000000000000000 x9 : ffff80000856b2c8 x8 : ffff0000c7c88000 x7 : ffff800008425d24 x6 : 0000000000000000 x5 : 0000000000000080 x4 : 00000000ffffffff x3 : 0000000000402800 x2 : ffff0000c001c100 x1 : 00000000000002c0 x0 : 00000000000002c1 Call trace: collapse_file+0x18a0/0x2ffc mm/khugepaged.c:1800 hpage_collapse_scan_file+0x944/0xb6c mm/khugepaged.c:2206 madvise_collapse+0x324/0x860 mm/khugepaged.c:2660 madvise_vma_behavior+0x148/0x7f4 mm/madvise.c:1076 madvise_walk_vmas mm/madvise.c:1250 [inline] do_madvise+0x438/0x5c0 mm/madvise.c:1429 __do_sys_madvise mm/madvise.c:1442 [inline] __se_sys_madvise mm/madvise.c:1440 [inline] __arm64_sys_madvise+0x2c/0x40 mm/madvise.c:1440 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall arch/arm64/kernel/syscall.c:52 [inline] el0_svc_common+0x138/0x220 arch/arm64/kernel/syscall.c:142 do_el0_svc+0x48/0x140 arch/arm64/kernel/syscall.c:197 el0_svc+0x58/0x150 arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:584 Code: 17ffffa4 97f4edda d4210000 97f4edd8 (d4210000) ---[ end trace 0000000000000000 ]---