general protection fault, probably for non-canonical address 0xdffffd8447fc4441: 0000 [#1] PREEMPT SMP KASAN KASAN: probably user-memory-access in range [0x00000c223fe22208-0x00000c223fe2220f] CPU: 0 PID: 6287 Comm: syz-executor.4 Not tainted 5.9.0-rc6-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:compound_head include/linux/page-flags.h:182 [inline] RIP: 0010:PageLocked include/linux/page-flags.h:320 [inline] RIP: 0010:pmd_trans_migrating+0x12d/0x2f0 mm/migrate.c:2052 Code: ff 48 b8 00 00 00 00 00 ea ff ff 48 21 dd 48 c1 ed 06 48 01 c5 48 b8 00 00 00 00 00 fc ff df 48 8d 7d 08 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 90 01 00 00 4c 8b 75 08 31 ff 48 89 eb 4d 89 f5 RSP: 0000:ffffc900091dfbe0 EFLAGS: 00010206 RAX: dffffc0000000000 RBX: 000ffffffffff000 RCX: ffffffff81b8eea4 RDX: 0000018447fc4441 RSI: ffffffff81b8eec4 RDI: 00000c223fe22208 RBP: 00000c223fe22200 R08: 0000000000000001 R09: 0000000000000003 R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff9200123bf7c R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000100 FS: 000000000290c940(0000) GS:ffff8880ae400000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b31e22024 CR3: 000000021ad3d000 CR4: 00000000001506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: do_huge_pmd_numa_page+0x2ad/0x1bb0 mm/huge_memory.c:1396 __handle_mm_fault mm/memory.c:4345 [inline] handle_mm_fault+0x1916/0x4690 mm/memory.c:4456 do_user_addr_fault+0x598/0xbf0 arch/x86/mm/fault.c:1372 handle_page_fault arch/x86/mm/fault.c:1429 [inline] exc_page_fault+0xa8/0x190 arch/x86/mm/fault.c:1482 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:538 RIP: 0033:0x4038c7 Code: 00 00 00 48 83 ec 08 48 8b 15 d5 1a 2a 01 48 8b 05 c6 1a 2a 01 48 39 d0 48 8d 8a 00 00 00 01 72 17 48 39 c8 73 12 48 8d 50 04 <89> 38 48 89 15 a8 1a 2a 01 48 83 c4 08 c3 48 89 c6 bf a8 26 4d 00 RSP: 002b:000000000169fb70 EFLAGS: 00010287 RAX: 0000001b31e22024 RBX: 0000000000000003 RCX: 0000001b32e20000 RDX: 0000001b31e22028 RSI: 0000000000000001 RDI: 000000000000000c RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 R10: 000000000169fcd0 R11: 0000000000000246 R12: 00000000000003e8 R13: 000000000013ffd8 R14: 000000000118d090 R15: 000000000118d09c Modules linked in: ---[ end trace f187b9e433df6948 ]--- RIP: 0010:compound_head include/linux/page-flags.h:182 [inline] RIP: 0010:PageLocked include/linux/page-flags.h:320 [inline] RIP: 0010:pmd_trans_migrating+0x12d/0x2f0 mm/migrate.c:2052 Code: ff 48 b8 00 00 00 00 00 ea ff ff 48 21 dd 48 c1 ed 06 48 01 c5 48 b8 00 00 00 00 00 fc ff df 48 8d 7d 08 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 90 01 00 00 4c 8b 75 08 31 ff 48 89 eb 4d 89 f5 RSP: 0000:ffffc900091dfbe0 EFLAGS: 00010206 RAX: dffffc0000000000 RBX: 000ffffffffff000 RCX: ffffffff81b8eea4 RDX: 0000018447fc4441 RSI: ffffffff81b8eec4 RDI: 00000c223fe22208 RBP: 00000c223fe22200 R08: 0000000000000001 R09: 0000000000000003 R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff9200123bf7c R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000100 FS: 000000000290c940(0000) GS:ffff8880ae400000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b31e22024 CR3: 000000021ad3d000 CR4: 00000000001506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400