page:ffffea00040b0180 count:1 mapcount:0 mapping:          (null) index:0x0 compound_mapcount: 0
flags: 0x4000000000004080(slab|head)
page dumped because: VM_BUG_ON_PAGE(PageSlab(page))
------------[ cut here ]------------
kernel BUG at ./include/linux/mm.h:533!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
Modules linked in:
CPU: 1 PID: 12712 Comm: syz-executor.2 Not tainted 4.9.141+ #23
task: ffff8801d3890000 task.stack: ffff880053e40000
RIP: 0010:[<ffffffff8148381c>]  [<ffffffff8148381c>] page_mapcount include/linux/mm.h:533 [inline]
RIP: 0010:[<ffffffff8148381c>]  [<ffffffff8148381c>] isolate_migratepages_block+0x14dc/0x1af0 mm/compaction.c:818
RSP: 0018:ffff880053e47560  EFLAGS: 00010293
RAX: 0000000000000000 RBX: ffffea00040b0180 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffffffff814fe94c RDI: ffff8801d38908ac
RBP: ffff880053e476b0 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000001 R12: dffffc0000000000
R13: 0000000000102c06 R14: ffff880053e47840 R15: ffffea00040b0000
FS:  0000000000000000(0000) GS:ffff8801db700000(0063) knlGS:000000000958b900
CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
CR2: 0000000020540000 CR3: 000000012cc1e000 CR4: 00000000001606b0
Stack:
 ffffffff833d3bd0 ffffffff833d3e60 ffff880053e47588 ffff880053e47890
 0000000c00000001 1ffff1000a7c8ebd 0000000000102c00 ffffea00040b0180
 ffffed000a7c8f12 ffffea00040b01a0 ffffea00040b0198 ffffffff833d3ac0
Call Trace:
 [<ffffffff81485b0f>] isolate_migratepages mm/compaction.c:1242 [inline]
 [<ffffffff81485b0f>] compact_zone+0x95f/0x2300 mm/compaction.c:1532
 [<ffffffff814875bf>] compact_zone_order+0x10f/0x180 mm/compaction.c:1656
 [<ffffffff81488c14>] try_to_compact_pages+0x214/0x710 mm/compaction.c:1703
 [<ffffffff814273eb>] __alloc_pages_direct_compact+0xbb/0x310 mm/page_alloc.c:3175
 [<ffffffff81428e3e>] __alloc_pages_slowpath mm/page_alloc.c:3703 [inline]
 [<ffffffff81428e3e>] __alloc_pages_nodemask+0xdbe/0x1bd0 mm/page_alloc.c:3862
 [<ffffffff810d3100>] __alloc_pages include/linux/gfp.h:433 [inline]
 [<ffffffff810d3100>] __alloc_pages_node include/linux/gfp.h:446 [inline]
 [<ffffffff810d3100>] alloc_pages_node include/linux/gfp.h:460 [inline]
 [<ffffffff810d3100>] alloc_thread_stack_node kernel/fork.c:212 [inline]
 [<ffffffff810d3100>] dup_task_struct kernel/fork.c:492 [inline]
 [<ffffffff810d3100>] copy_process.part.8+0x280/0x6a10 kernel/fork.c:1534
 [<ffffffff810d9d12>] copy_process kernel/fork.c:1505 [inline]
 [<ffffffff810d9d12>] _do_fork+0x1b2/0xd30 kernel/fork.c:1972
 [<ffffffff810da967>] SYSC_clone kernel/fork.c:2084 [inline]
 [<ffffffff810da967>] SyS_clone+0x37/0x50 kernel/fork.c:2078
 [<ffffffff81005c6c>] do_syscall_32_irqs_on arch/x86/entry/common.c:328 [inline]
 [<ffffffff81005c6c>] do_int80_syscall_32+0x1cc/0x580 arch/x86/entry/common.c:342
 [<ffffffff82818f54>] entry_INT80_compat+0x74/0xa0 arch/x86/entry/entry_64_compat.S:371
Code: ff ff e8 68 82 e9 ff 48 8b 85 e8 fe ff ff 48 8d 50 ff e9 f6 f6 ff ff e8 53 82 e9 ff 48 c7 c6 a0 32 aa 82 48 89 df e8 64 b5 00 00 <0f> 0b 48 89 95 e8 fe ff ff e8 36 82 e9 ff 48 8b 95 e8 fe ff ff 
RIP  [<ffffffff8148381c>] page_mapcount include/linux/mm.h:533 [inline]
RIP  [<ffffffff8148381c>] isolate_migratepages_block+0x14dc/0x1af0 mm/compaction.c:818
 RSP <ffff880053e47560>
---[ end trace 02b26aa1eb78ab9d ]---