------------[ cut here ]------------ kernel BUG at mm/page_table_check.c:80! Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP Modules linked in: CPU: 0 PID: 13961 Comm: syz-executor.2 Not tainted 6.4.0-rc2-syzkaller-gf1fcbaa18b28 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : page_table_check_clear+0x48c/0x498 mm/page_table_check.c:80 lr : page_table_check_clear+0x48c/0x498 mm/page_table_check.c:80 sp : ffff800020c26fa0 x29: ffff800020c26fa0 x28: 1ffff0000345d508 x27: 00000000ffffffff x26: ffff80001617f000 x25: 0000000000000000 x24: ffff80001a2ea000 x23: 0000000000000001 x22: ffff0000c08277d0 x21: 0000000000000001 x20: dfff800000000000 x19: ffff0000c08277d0 x18: 1fffe00036844bbe x17: ffff800015ead000 x16: ffff80000830e4f0 x15: 0000000000000000 x14: ffff800015eb0570 x13: dfff800000000000 x12: 0000000000000001 x11: 0000000000000001 x10: 0000000000000000 x9 : 0000000000000000 x8 : ffff0000d4efd340 x7 : ffff800008a32110 x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff800008a32944 x2 : 0000000000000000 x1 : 0000000000000001 x0 : 0000000000000000 Call trace: page_table_check_clear+0x48c/0x498 mm/page_table_check.c:80 __page_table_check_pte_clear+0x7c/0x9c mm/page_table_check.c:155 page_table_check_pte_clear include/linux/page_table_check.h:55 [inline] ptep_get_and_clear arch/arm64/include/asm/pgtable.h:941 [inline] ptep_get_and_clear_full include/linux/pgtable.h:459 [inline] zap_pte_range mm/memory.c:1413 [inline] zap_pmd_range mm/memory.c:1563 [inline] zap_pud_range mm/memory.c:1592 [inline] zap_p4d_range mm/memory.c:1613 [inline] unmap_page_range+0x1dbc/0x230c mm/memory.c:1634 unmap_single_vma mm/memory.c:1680 [inline] unmap_vmas+0x380/0x540 mm/memory.c:1719 unmap_region+0x19c/0x264 mm/mmap.c:2218 do_vmi_align_munmap+0xe64/0x144c mm/mmap.c:2473 do_vmi_munmap mm/mmap.c:2530 [inline] mmap_region+0x648/0x1aa4 mm/mmap.c:2578 do_mmap+0xa00/0x1108 mm/mmap.c:1394 vm_mmap_pgoff+0x198/0x3b8 mm/util.c:543 ksys_mmap_pgoff+0x3c8/0x5b0 mm/mmap.c:1440 __do_sys_mmap arch/arm64/kernel/sys.c:28 [inline] __se_sys_mmap arch/arm64/kernel/sys.c:21 [inline] __arm64_sys_mmap+0xf8/0x110 arch/arm64/kernel/sys.c:21 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x2c0 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142 do_el0_svc+0x64/0x198 arch/arm64/kernel/syscall.c:193 el0_svc+0x4c/0x15c arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:591 Code: d4210000 97eb58e4 d4210000 97eb58e2 (d4210000) ---[ end trace 0000000000000000 ]---