raw: 05ffc0000009001d fffffc0004f20008 fffffc0004f7e848 ffff00011d1b7af9 raw: 0000000000020d66 0000000000000000 00000000ffffffff ffff000119844000 page dumped because: VM_WARN_ON_ONCE_PAGE(page_tail->private != 0) ------------[ cut here ]------------ WARNING: CPU: 1 PID: 14749 at mm/huge_memory.c:2465 __split_huge_page_tail+0x4c0/0xd38 mm/huge_memory.c:2465 Modules linked in: CPU: 1 PID: 14749 Comm: syz-executor.4 Not tainted 6.1.0-rc2-syzkaller-154433-g247f34f7b803 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 pstate: 604000c5 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : __split_huge_page_tail+0x4c0/0xd38 mm/huge_memory.c:2465 lr : __split_huge_page_tail+0x4b8/0xd38 mm/huge_memory.c:2465 sp : ffff80001422b6e0 x29: ffff80001422b6e0 x28: 00000000000001a0 x27: 0000000000020f07 x26: fffffc0004f7e840 x25: 00000000000001a0 x24: fffffc0004f7e828 x23: ffff80000d95f000 x22: fffffc0004f78000 x21: ffff000119704800 x20: 0000000000000000 x19: fffffc0004f7e800 x18: 000000000000013b x17: 203d212065746176 x16: 6972703e2d6c6961 x15: 745f656761702845 x14: 4741505f45434e4f x13: 205d393437343154 x12: 0000000000040000 x11: 000000000001fbfd x10: ffff800019f10000 x9 : 41a407818d4d3e00 x8 : 0000000000000001 x7 : 545b5d3930303530 x6 : ffff80000c0903b4 x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000000 x2 : 0000000000000000 x1 : 0000000100000001 x0 : 0000000000000042 Call trace: __split_huge_page_tail+0x4c0/0xd38 mm/huge_memory.c:2465 __split_huge_page+0x418/0x153c mm/huge_memory.c:2527 split_huge_page_to_list+0xc50/0xffc mm/huge_memory.c:2756 split_huge_page include/linux/huge_mm.h:188 [inline] madvise_free_huge_pmd+0x3b8/0xb34 mm/huge_memory.c:1600 madvise_free_pte_range+0xb4/0xfd8 mm/madvise.c:611 walk_pmd_range mm/pagewalk.c:128 [inline] walk_pud_range mm/pagewalk.c:205 [inline] walk_p4d_range mm/pagewalk.c:240 [inline] walk_pgd_range+0x444/0x9c4 mm/pagewalk.c:277 __walk_page_range+0xa4/0x210 mm/pagewalk.c:379 walk_page_range+0x1f4/0x318 mm/pagewalk.c:477 madvise_free_single_vma mm/madvise.c:762 [inline] madvise_dontneed_free+0x4e4/0x5b0 mm/madvise.c:878 madvise_vma_behavior+0x184/0x7f4 mm/madvise.c:1015 madvise_walk_vmas mm/madvise.c:1240 [inline] do_madvise+0x438/0x5c0 mm/madvise.c:1419 __do_sys_madvise mm/madvise.c:1432 [inline] __se_sys_madvise mm/madvise.c:1430 [inline] __arm64_sys_madvise+0x2c/0x40 mm/madvise.c:1430 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall arch/arm64/kernel/syscall.c:52 [inline] el0_svc_common+0x138/0x220 arch/arm64/kernel/syscall.c:142 do_el0_svc+0x48/0x164 arch/arm64/kernel/syscall.c:206 el0_svc+0x58/0x150 arch/arm64/kernel/entry-common.c:636 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:654 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:581 irq event stamp: 0 hardirqs last enabled at (0): [<0000000000000000>] 0x0 hardirqs last disabled at (0): [] copy_process+0x928/0x16ec kernel/fork.c:2197 softirqs last enabled at (0): [] copy_process+0x938/0x16ec kernel/fork.c:2198 softirqs last disabled at (0): [<0000000000000000>] 0x0 ---[ end trace 0000000000000000 ]---