program:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$x86(r2, &(0x7f0000000040)={0x0, 0x0})
mremap(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil)
r3 = userfaultfd(0x801)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000280)={0xaa, 0x28})
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil)
migrate_pages(0x0, 0x5, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x272)
[ 93.638054][ T5275] Bluetooth: hci0: command tx timeout
[ 93.651752][ T9] cfg80211: failed to load regulatory.db
[ 93.800695][ T5312] ------------[ cut here ]------------
[ 93.804104][ T5312] softleaf_cached_writable(entry)
[ 93.804120][ T5312] WARNING: mm/page_table_check.c:206 at __page_table_check_ptes_set+0x186/0x340, CPU#0: syz.0.0/5312
[ 93.811334][ T5312] Modules linked in:
[ 93.813716][ T5312] CPU: 0 UID: 0 PID: 5312 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 93.818564][ T5312] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 93.822989][ T5312] RIP: 0010:__page_table_check_ptes_set+0x186/0x340
[ 93.825787][ T5312] Code: 89 fe e8 cd 6e 83 ff 48 b8 00 00 00 00 00 00 00 94 4c 01 f8 48 c1 e8 3b 0f 94 c0 4d 39 e5 76 0f 84 c0 74 0b e8 eb 68 83 ff 90 <0f> 0b 90 eb 05 e8 e0 68 83 ff 31 ff 89 ee e8 d7 6d 83 ff 89 e8 85
[ 93.833741][ T5312] RSP: 0018:ffffc9000e36f030 EFLAGS: 00010283
[ 93.836330][ T5312] RAX: ffffffff8243a6a5 RBX: dfffe7fffd929001 RCX: 0000000000100000
[ 93.839702][ T5312] RDX: ffffc90020001000 RSI: 000000000001209a RDI: 000000000001209b
[ 93.843146][ T5312] RBP: 0000000000000001 R08: 0000000000000001 R09: 1ffffd400009b5b8
[ 93.846439][ T5312] R10: dffffc0000000000 R11: fffff9400009b5b9 R12: c7fffffffffffffe
[ 93.849614][ T5312] R13: dfffe7fffd929006 R14: ffff888043233080 R15: 6c00000000000000
[ 93.853017][ T5312] FS: 00007fe4aed9a6c0(0000) GS:ffff88808c519000(0000) knlGS:0000000000000000
[ 93.856644][ T5312] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 93.859289][ T5312] CR2: 0000200000c100f0 CR3: 000000004233e000 CR4: 0000000000352ef0
[ 93.863166][ T5312] Call Trace:
[ 93.864601][ T5312]
[ 93.865904][ T5312] ? folio_try_share_anon_rmap_pte+0x6c7/0xb60
[ 93.868478][ T5312] try_to_migrate_one+0x1f83/0x2ac0
[ 93.870688][ T5312] ? try_to_migrate_one+0x586/0x2ac0
[ 93.873117][ T5312] ? try_to_migrate_one+0x586/0x2ac0
[ 93.875498][ T5312] ? __pfx_try_to_migrate_one+0x10/0x10
[ 93.877709][ T5312] ? reacquire_held_locks+0x104/0x190
[ 93.879934][ T5312] ? folio_lock_anon_vma_read+0x322/0xa50
[ 93.884759][ T5312] ? anon_vma_interval_tree_iter_first+0x273/0x280
[ 93.888554][ T5312] ? __pfx_try_to_migrate_one+0x10/0x10
[ 93.891598][ T5312] rmap_walk_anon+0x5e3/0x7d0
[ 93.893849][ T5312] try_to_migrate+0x33d/0x400
[ 93.896238][ T5312] ? __pfx_try_to_migrate+0x10/0x10
[ 93.898726][ T5312] ? __pfx_try_to_migrate_one+0x10/0x10
[ 93.901148][ T5312] ? __pfx_folio_not_mapped+0x10/0x10
[ 93.904094][ T5312] ? __pfx_folio_lock_anon_vma_read+0x10/0x10
[ 93.906883][ T5312] ? __pfx_invalid_migration_vma+0x10/0x10
[ 93.909429][ T5312] ? folio_get_anon_vma+0xa8/0x680
[ 93.911601][ T5312] ? folio_get_anon_vma+0xa8/0x680
[ 93.913983][ T5312] ? folio_get_anon_vma+0x464/0x680
[ 93.916227][ T5312] ? folio_get_anon_vma+0xa8/0x680
[ 93.918338][ T5312] migrate_pages_batch+0x1c00/0x4e50
[ 93.920481][ T5312] ? __pfx_alloc_migration_target+0x10/0x10
[ 93.922921][ T5312] ? __pfx_migrate_pages_batch+0x10/0x10
[ 93.925248][ T5312] ? __pfx_queue_folios_pte_range+0x10/0x10
[ 93.927848][ T5312] ? schedule+0x90/0x2b0
[ 93.929763][ T5312] ? walk_pgd_range+0x1d60/0x1e40
[ 93.931806][ T5312] migrate_pages+0x1b9f/0x2920
[ 93.933956][ T5312] ? __pfx_alloc_migration_target+0x10/0x10
[ 93.936723][ T5312] ? __walk_page_range+0x6c1/0x720
[ 93.938974][ T5312] ? __pfx_migrate_pages+0x10/0x10
[ 93.941027][ T5312] ? queue_pages_test_walk+0x3dc/0x410
[ 93.943340][ T5312] ? walk_page_range_mm_unsafe+0x595/0x680
[ 93.945669][ T5312] ? __pfx___up_read+0x10/0x10
[ 93.947612][ T5312] do_migrate_pages+0x656/0x8b0
[ 93.949695][ T5312] ? __pfx_do_migrate_pages+0x10/0x10
[ 93.951778][ T5312] ? rcu_is_watching+0x16/0xb0
[ 93.954011][ T5312] ? security_capable+0xb9/0x2c0
[ 93.956427][ T5312] __se_sys_migrate_pages+0xaa2/0xc90
[ 93.958889][ T5312] ? __se_sys_futex+0x3a8/0x450
[ 93.961087][ T5312] ? __pfx___se_sys_migrate_pages+0x10/0x10
[ 93.963827][ T5312] ? rcu_is_watching+0x16/0xb0
[ 93.965841][ T5312] do_syscall_64+0x166/0x520
[ 93.967929][ T5312] ? trace_irq_disable+0x3b/0x140
[ 93.970171][ T5312] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 93.972952][ T5312] ? clear_bhb_loop+0x70/0xc0
[ 93.975063][ T5312] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 93.977698][ T5312] RIP: 0033:0x7fe4adf9e0d9
[ 93.979713][ T5312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 93.987415][ T5312] RSP: 002b:00007fe4aed99fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000100
[ 93.991136][ T5312] RAX: ffffffffffffffda RBX: 00007fe4ae226090 RCX: 00007fe4adf9e0d9
[ 93.994910][ T5312] RDX: 0000200000000040 RSI: 0000000000000005 RDI: 0000000000000000
[ 93.998268][ T5312] RBP: 00007fe4ae035024 R08: 0000000000000000 R09: 0000000000000000
[ 94.002036][ T5312] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000
[ 94.005909][ T5312] R13: 00007fe4ae226128 R14: 00007fe4ae226090 R15: 00007fff7760a308
[ 94.009363][ T5312]
[ 94.010707][ T5312] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 94.013726][ T5312] CPU: 0 UID: 0 PID: 5312 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 94.017549][ T5312] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 94.021903][ T5312] Call Trace:
[ 94.023454][ T5312]
[ 94.024826][ T5312] vpanic+0x56d/0xa60
[ 94.026600][ T5312] ? __pfx__printk+0x10/0x10
[ 94.028658][ T5312] ? __pfx_vpanic+0x10/0x10
[ 94.030543][ T5312] ? is_bpf_text_address+0x292/0x2b0
[ 94.032819][ T5312] ? is_bpf_text_address+0x26/0x2b0
[ 94.035122][ T5312] panic+0xc5/0xd0
[ 94.036907][ T5312] ? __pfx_panic+0x10/0x10
[ 94.039080][ T5312] __warn+0x315/0x4c0
[ 94.041028][ T5312] ? __page_table_check_ptes_set+0x186/0x340
[ 94.043781][ T5312] ? __page_table_check_ptes_set+0x186/0x340
[ 94.046414][ T5312] __report_bug+0x276/0x570
[ 94.048425][ T5312] ? __page_table_check_ptes_set+0x186/0x340
[ 94.050979][ T5312] ? __pfx___report_bug+0x10/0x10
[ 94.053177][ T5312] ? __mmu_notifier_arch_invalidate_secondary_tlbs+0x52/0x1b0
[ 94.056343][ T5312] ? flush_tlb_mm_range+0xb7d/0x1090
[ 94.058761][ T5312] ? check_pte+0x242/0x300
[ 94.060720][ T5312] ? __page_table_check_ptes_set+0x186/0x340
[ 94.063359][ T5312] report_bug+0x16b/0x220
[ 94.065291][ T5312] ? __page_table_check_ptes_set+0x186/0x340
[ 94.067955][ T5312] ? __page_table_check_ptes_set+0x188/0x340
[ 94.070751][ T5312] handle_bug+0x9c/0x200
[ 94.072901][ T5312] exc_invalid_op+0x1a/0x50
[ 94.074849][ T5312] asm_exc_invalid_op+0x1a/0x20
[ 94.076823][ T5312] RIP: 0010:__page_table_check_ptes_set+0x186/0x340
[ 94.079641][ T5312] Code: 89 fe e8 cd 6e 83 ff 48 b8 00 00 00 00 00 00 00 94 4c 01 f8 48 c1 e8 3b 0f 94 c0 4d 39 e5 76 0f 84 c0 74 0b e8 eb 68 83 ff 90 <0f> 0b 90 eb 05 e8 e0 68 83 ff 31 ff 89 ee e8 d7 6d 83 ff 89 e8 85
[ 94.087438][ T5312] RSP: 0018:ffffc9000e36f030 EFLAGS: 00010283
[ 94.090148][ T5312] RAX: ffffffff8243a6a5 RBX: dfffe7fffd929001 RCX: 0000000000100000
[ 94.093465][ T5312] RDX: ffffc90020001000 RSI: 000000000001209a RDI: 000000000001209b
[ 94.099418][ T5312] RBP: 0000000000000001 R08: 0000000000000001 R09: 1ffffd400009b5b8
[ 94.102970][ T5312] R10: dffffc0000000000 R11: fffff9400009b5b9 R12: c7fffffffffffffe
[ 94.106487][ T5312] R13: dfffe7fffd929006 R14: ffff888043233080 R15: 6c00000000000000
[ 94.110142][ T5312] ? __page_table_check_ptes_set+0x185/0x340
[ 94.112762][ T5312] ? folio_try_share_anon_rmap_pte+0x6c7/0xb60
[ 94.115380][ T5312] try_to_migrate_one+0x1f83/0x2ac0
[ 94.117639][ T5312] ? try_to_migrate_one+0x586/0x2ac0
[ 94.119991][ T5312] ? try_to_migrate_one+0x586/0x2ac0
[ 94.122431][ T5312] ? __pfx_try_to_migrate_one+0x10/0x10
[ 94.124922][ T5312] ? reacquire_held_locks+0x104/0x190
[ 94.127442][ T5312] ? folio_lock_anon_vma_read+0x322/0xa50
[ 94.130010][ T5312] ? anon_vma_interval_tree_iter_first+0x273/0x280
[ 94.132743][ T5312] ? __pfx_try_to_migrate_one+0x10/0x10
[ 94.135037][ T5312] rmap_walk_anon+0x5e3/0x7d0
[ 94.136989][ T5312] try_to_migrate+0x33d/0x400
[ 94.139026][ T5312] ? __pfx_try_to_migrate+0x10/0x10
[ 94.141287][ T5312] ? __pfx_try_to_migrate_one+0x10/0x10
[ 94.143603][ T5312] ? __pfx_folio_not_mapped+0x10/0x10
[ 94.145859][ T5312] ? __pfx_folio_lock_anon_vma_read+0x10/0x10
[ 94.148666][ T5312] ? __pfx_invalid_migration_vma+0x10/0x10
[ 94.151353][ T5312] ? folio_get_anon_vma+0xa8/0x680
[ 94.153509][ T5312] ? folio_get_anon_vma+0xa8/0x680
[ 94.155893][ T5312] ? folio_get_anon_vma+0x464/0x680
[ 94.158234][ T5312] ? folio_get_anon_vma+0xa8/0x680
[ 94.160441][ T5312] migrate_pages_batch+0x1c00/0x4e50
[ 94.162776][ T5312] ? __pfx_alloc_migration_target+0x10/0x10
[ 94.165305][ T5312] ? __pfx_migrate_pages_batch+0x10/0x10
[ 94.167678][ T5312] ? __pfx_queue_folios_pte_range+0x10/0x10
[ 94.170051][ T5312] ? schedule+0x90/0x2b0
[ 94.171771][ T5312] ? walk_pgd_range+0x1d60/0x1e40
[ 94.173862][ T5312] migrate_pages+0x1b9f/0x2920
[ 94.175934][ T5312] ? __pfx_alloc_migration_target+0x10/0x10
[ 94.178449][ T5312] ? __walk_page_range+0x6c1/0x720
[ 94.180558][ T5312] ? __pfx_migrate_pages+0x10/0x10
[ 94.182630][ T5312] ? queue_pages_test_walk+0x3dc/0x410
[ 94.184993][ T5312] ? walk_page_range_mm_unsafe+0x595/0x680
[ 94.187508][ T5312] ? __pfx___up_read+0x10/0x10
[ 94.189579][ T5312] do_migrate_pages+0x656/0x8b0
[ 94.191620][ T5312] ? __pfx_do_migrate_pages+0x10/0x10
[ 94.193898][ T5312] ? rcu_is_watching+0x16/0xb0
[ 94.195937][ T5312] ? security_capable+0xb9/0x2c0
[ 94.198343][ T5312] __se_sys_migrate_pages+0xaa2/0xc90
[ 94.200899][ T5312] ? __se_sys_futex+0x3a8/0x450
[ 94.203183][ T5312] ? __pfx___se_sys_migrate_pages+0x10/0x10
[ 94.205682][ T5312] ? rcu_is_watching+0x16/0xb0
[ 94.207741][ T5312] do_syscall_64+0x166/0x520
[ 94.209791][ T5312] ? trace_irq_disable+0x3b/0x140
[ 94.211976][ T5312] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.214590][ T5312] ? clear_bhb_loop+0x70/0xc0
[ 94.216607][ T5312] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.219078][ T5312] RIP: 0033:0x7fe4adf9e0d9
[ 94.220919][ T5312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 94.228434][ T5312] RSP: 002b:00007fe4aed99fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000100
[ 94.231740][ T5312] RAX: ffffffffffffffda RBX: 00007fe4ae226090 RCX: 00007fe4adf9e0d9
[ 94.234953][ T5312] RDX: 0000200000000040 RSI: 0000000000000005 RDI: 0000000000000000
[ 94.238179][ T5312] RBP: 00007fe4ae035024 R08: 0000000000000000 R09: 0000000000000000
[ 94.241728][ T5312] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000
[ 94.245252][ T5312] R13: 00007fe4ae226128 R14: 00007fe4ae226090 R15: 00007fff7760a308
[ 94.248604][ T5312]
[ 94.250250][ T5312] Kernel Offset: disabled
[ 94.251994][ T5312] Rebooting in 86400 seconds..