------------[ cut here ]------------
kernel BUG at mm/page_table_check.c:83!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 1 PID: 14912 Comm: syz-executor.1 Not tainted 6.4.0-rc1-syzkaller-00138-gd4d58949a6ea #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023
RIP: 0010:page_table_check_clear+0x411/0x4f0 mm/page_table_check.c:83
Code: 75 f6 ff ff e8 30 d1 9c ff e9 66 fc ff ff e8 26 d1 9c ff 48 ff cb 49 89 df e9 0f fe ff ff e8 16 d1 9c ff 0f 0b e8 0f d1 9c ff <0f> 0b e8 08 d1 9c ff 0f 0b e8 01 d1 9c ff 0f 0b e8 fa d0 9c ff 0f
RSP: 0018:ffffc9000631f3b8 EFLAGS: 00010293
RAX: ffffffff81ee9631 RBX: ffff888013903810 RCX: ffff888086220000
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
RBP: 0000000000000001 R08: ffffffff81ee94cd R09: ffffed1002720703
R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8880139037d0
R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000
FS:  0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f710570e824 CR3: 0000000076eab000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 zap_pte_range mm/memory.c:1413 [inline]
 zap_pmd_range mm/memory.c:1563 [inline]
 zap_pud_range mm/memory.c:1592 [inline]
 zap_p4d_range mm/memory.c:1613 [inline]
 unmap_page_range+0x1d10/0x2a30 mm/memory.c:1634
 unmap_vmas+0x347/0x4e0 mm/memory.c:1719
 exit_mmap+0x255/0xaf0 mm/mmap.c:3111
 __mmput+0x115/0x3c0 kernel/fork.c:1351
 exit_mm+0x227/0x310 kernel/exit.c:564
 do_exit+0x612/0x2290 kernel/exit.c:858
 do_group_exit+0x206/0x2c0 kernel/exit.c:1021
 get_signal+0x1701/0x17e0 kernel/signal.c:2874
 arch_do_signal_or_restart+0x91/0x670 arch/x86/kernel/signal.c:306
 exit_to_user_mode_loop+0x6a/0x100 kernel/entry/common.c:168
 exit_to_user_mode_prepare+0xb1/0x140 kernel/entry/common.c:204
 __syscall_exit_to_user_mode_work kernel/entry/common.c:286 [inline]
 syscall_exit_to_user_mode+0x64/0x280 kernel/entry/common.c:297
 do_syscall_64+0x4d/0xc0 arch/x86/entry/common.c:86
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f9feb08c169
Code: Unable to access opcode bytes at 0x7f9feb08c13f.
RSP: 002b:00007f9febd7a168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: 0000000000000181 RBX: 00007f9feb1abf80 RCX: 00007f9feb08c169
RDX: 0400000000000181 RSI: 00000000200030c0 RDI: 0000000000000004
RBP: 00007f9feb0e7ca1 R08: 0000000000000000 R09: 0000000000000000
R10: 920000000000090d R11: 0000000000000246 R12: 0000000000000000
R13: 00007fff41fb696f R14: 00007f9febd7a300 R15: 0000000000022000
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:page_table_check_clear+0x411/0x4f0 mm/page_table_check.c:83
Code: 75 f6 ff ff e8 30 d1 9c ff e9 66 fc ff ff e8 26 d1 9c ff 48 ff cb 49 89 df e9 0f fe ff ff e8 16 d1 9c ff 0f 0b e8 0f d1 9c ff <0f> 0b e8 08 d1 9c ff 0f 0b e8 01 d1 9c ff 0f 0b e8 fa d0 9c ff 0f
RSP: 0018:ffffc9000631f3b8 EFLAGS: 00010293
RAX: ffffffff81ee9631 RBX: ffff888013903810 RCX: ffff888086220000
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
RBP: 0000000000000001 R08: ffffffff81ee94cd R09: ffffed1002720703
R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8880139037d0
R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000
FS:  0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f710570e824 CR3: 0000000076eab000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400