------------[ cut here ]------------ WARNING: CPU: 1 PID: 3375 at mm/hugetlb.c:7048 hugetlb_change_protection+0x4d4/0x54c mm/hugetlb.c:7037 Modules linked in: CPU: 1 PID: 3375 Comm: syz-executor.1 Not tainted 6.9.0-rc2-syzkaller-00080-gc85af715cac0 #0 Hardware name: linux,dummy-virt (DT) pstate: 61400009 (nZCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) pc : hugetlb_change_protection+0x4d4/0x54c mm/hugetlb.c:7048 lr : hugetlb_change_protection+0x25c/0x54c mm/hugetlb.c:7024 sp : ffff800088e6ba10 x29: ffff800088e6ba10 x28: 0000000000000000 x27: ffff80008283c358 x26: 0000000000000000 x25: 0000000020800000 x24: f8ff000005b35300 x23: 0000000000200000 x22: f2ff00000c14cf00 x21: fffffdffc03056e8 x20: ffff00000c15b810 x19: 0000000020400000 x18: ffff800088e6bd38 x17: 0000ffff998edfff x16: 0000ffff997fffff x15: 0000ffff993fffff x14: 0000aaaad77fafff x13: 0000ffff998f5fff x12: 0000ffff998edfff x11: 0000ffff997fffff x10: 0000000000000006 x9 : 0000000000000001 x8 : fdff00000c145480 x7 : 0000000040000000 x6 : 0000000040000000 x5 : 0000000040000000 x4 : 000000000000001f x3 : 0000000000000001 x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0400000000000001 Call trace: hugetlb_change_protection+0x4d4/0x54c mm/hugetlb.c:7037 change_protection+0x670/0xbdc mm/mprotect.c:537 mprotect_fixup+0x108/0x278 mm/mprotect.c:653 do_mprotect_pkey.constprop.0+0x26c/0x3cc mm/mprotect.c:809 __do_sys_mprotect mm/mprotect.c:830 [inline] __se_sys_mprotect mm/mprotect.c:827 [inline] __arm64_sys_mprotect+0x1c/0xe0 mm/mprotect.c:827 __invoke_syscall arch/arm64/kernel/syscall.c:34 [inline] invoke_syscall+0x48/0x114 arch/arm64/kernel/syscall.c:48 el0_svc_common.constprop.0+0x40/0xe0 arch/arm64/kernel/syscall.c:133 do_el0_svc+0x1c/0x28 arch/arm64/kernel/syscall.c:152 el0_svc+0x34/0xf8 arch/arm64/kernel/entry-common.c:712 el0t_64_sync_handler+0x100/0x12c arch/arm64/kernel/entry-common.c:730 el0t_64_sync+0x19c/0x1a0 arch/arm64/kernel/entry.S:598 ---[ end trace 0000000000000000 ]---