------------[ cut here ]------------ softleaf_cached_writable(entry) WARNING: mm/page_table_check.c:206 at page_table_check_pte_flags mm/page_table_check.c:206 [inline], CPU#1: syz.1.215/6486 WARNING: mm/page_table_check.c:206 at __page_table_check_ptes_set+0x186/0x340 mm/page_table_check.c:218, CPU#1: syz.1.215/6486 Modules linked in: CPU: 1 UID: 0 PID: 6486 Comm: syz.1.215 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 RIP: 0010:page_table_check_pte_flags mm/page_table_check.c:206 [inline] RIP: 0010:__page_table_check_ptes_set+0x186/0x340 mm/page_table_check.c:218 Code: 89 fe e8 2d 59 84 ff 48 b8 00 00 00 00 00 00 00 94 4c 01 f8 48 c1 e8 3b 0f 94 c0 4d 39 e5 76 0f 84 c0 74 0b e8 4b 53 84 ff 90 <0f> 0b 90 eb 05 e8 40 53 84 ff 31 ff 89 ee e8 37 58 84 ff 89 e8 85 RSP: 0018:ffffc9000db1f050 EFLAGS: 00010287 RAX: ffffffff82438d25 RBX: dfffe7fff5922e01 RCX: 0000000000080000 RDX: ffffc9000f3cb000 RSI: 000000000001fb99 RDI: 000000000001fb9a RBP: 0000000000000001 R08: 0000000000000001 R09: 1ffffd400029b740 R10: dffffc0000000000 R11: fffff9400029b741 R12: c7fffffffffffffe R13: dfffe7fff5922e06 R14: ffff888029d5e000 R15: 6c00000000000000 FS: 00007fe59148d6c0(0000) GS:ffff88812498a000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b34018ff8 CR3: 000000007d7c6000 CR4: 00000000003526f0 Call Trace: page_table_check_ptes_set include/linux/page_table_check.h:83 [inline] set_ptes include/linux/pgtable.h:447 [inline] try_to_migrate_one+0x2055/0x2b90 mm/rmap.c:2761 rmap_walk_anon+0x6d4/0x910 mm/rmap.c:3053 try_to_migrate+0x33d/0x400 mm/rmap.c:-1 migrate_folio_unmap mm/migrate.c:1338 [inline] migrate_pages_batch+0x1c1c/0x4f50 mm/migrate.c:1918 migrate_pages_sync mm/migrate.c:2035 [inline] migrate_pages+0x1b9f/0x2920 mm/migrate.c:2144 migrate_to_node mm/mempolicy.c:1322 [inline] do_migrate_pages+0x656/0x8b0 mm/mempolicy.c:1421 kernel_migrate_pages mm/mempolicy.c:1935 [inline] __do_sys_migrate_pages mm/mempolicy.c:1953 [inline] __se_sys_migrate_pages+0xaa2/0xc90 mm/mempolicy.c:1949 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline] do_syscall_64+0x166/0x520 arch/x86/entry/syscall_64.c:84 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fe59059e0d9 Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fe59148d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000100 RAX: ffffffffffffffda RBX: 00007fe590826090 RCX: 00007fe59059e0d9 RDX: 0000200000000040 RSI: 0000000000000005 RDI: 0000000000000000 RBP: 00007fe590635024 R08: 0000000000000000 R09: 0000000000000000 R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fe590826128 R14: 00007fe590826090 R15: 00007ffd7d324f48