------------[ cut here ]------------
WARNING: CPU: 0 PID: 5251 at mm/highmem.c:622 kunmap_local_indexed+0x20c/0x224 mm/highmem.c:622
Modules linked in:
Kernel panic - not syncing: kernel: panic_on_warn set ...
CPU: 0 UID: 0 PID: 5251 Comm: syz.0.15 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT 
Hardware name: ARM-Versatile Express
Call trace: 
[<80201a00>] (dump_backtrace) from [<80201afc>] (show_stack+0x18/0x1c arch/arm/kernel/traps.c:257)
 r7:00000000 r6:8282083c r5:00000000 r4:8225c0c4
[<80201ae4>] (show_stack) from [<8021fd6c>] (__dump_stack lib/dump_stack.c:94 [inline])
[<80201ae4>] (show_stack) from [<8021fd6c>] (dump_stack_lvl+0x54/0x7c lib/dump_stack.c:120)
[<8021fd18>] (dump_stack_lvl) from [<8021fdac>] (dump_stack+0x18/0x1c lib/dump_stack.c:129)
 r5:00000000 r4:82a6dd18
[<8021fd94>] (dump_stack) from [<80202614>] (panic+0x120/0x374 kernel/panic.c:382)
[<802024f4>] (panic) from [<80258578>] (check_panic_on_warn kernel/panic.c:273 [inline])
[<802024f4>] (panic) from [<80258578>] (get_taint+0x0/0x1c kernel/panic.c:268)
 r3:8280c684 r2:00000001 r1:82242c0c r0:8224a5a4
 r7:804c2a64
[<80258504>] (check_panic_on_warn) from [<802586dc>] (__warn+0x80/0x188 kernel/panic.c:777)
[<8025865c>] (__warn) from [<8025895c>] (warn_slowpath_fmt+0x178/0x1f4 kernel/panic.c:804)
 r8:00000009 r7:82276064 r6:dfa41d1c r5:854b8000 r4:00000000
[<802587e8>] (warn_slowpath_fmt) from [<804c2a64>] (kunmap_local_indexed+0x20c/0x224 mm/highmem.c:622)
 r10:00000000 r9:8541d810 r8:00000000 r7:00000000 r6:00000003 r5:854b8000
 r4:ffefd000
[<804c2858>] (kunmap_local_indexed) from [<8053dd08>] (__kunmap_local include/linux/highmem-internal.h:102 [inline])
[<804c2858>] (kunmap_local_indexed) from [<8053dd08>] (move_pages_pte mm/userfaultfd.c:1457 [inline])
[<804c2858>] (kunmap_local_indexed) from [<8053dd08>] (move_pages+0xb24/0x19c8 mm/userfaultfd.c:1868)
 r7:00000000 r6:fffffffe r5:8541d830 r4:84d9e100
[<8053d1e4>] (move_pages) from [<805c49dc>] (userfaultfd_move fs/userfaultfd.c:1914 [inline])
[<8053d1e4>] (move_pages) from [<805c49dc>] (userfaultfd_ioctl+0xff8/0x21c4 fs/userfaultfd.c:2037)
 r10:84d9e100 r9:dfa41e98 r8:20c16000 r7:00000001 r6:00000000 r5:20000080
 r4:8550c000
[<805c39e4>] (userfaultfd_ioctl) from [<8056e2dc>] (vfs_ioctl fs/ioctl.c:51 [inline])
[<805c39e4>] (userfaultfd_ioctl) from [<8056e2dc>] (do_vfs_ioctl fs/ioctl.c:861 [inline])
[<805c39e4>] (userfaultfd_ioctl) from [<8056e2dc>] (__do_sys_ioctl fs/ioctl.c:905 [inline])
[<805c39e4>] (userfaultfd_ioctl) from [<8056e2dc>] (sys_ioctl+0x130/0xdc8 fs/ioctl.c:893)
 r10:854b8000 r9:8495af00 r8:00000003 r7:20000080 r6:8495af01 r5:00000000
 r4:c028aa05
[<8056e1ac>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c arch/arm/mm/proc-v7.S:67)
Exception stack(0xdfa41fa8 to 0xdfa41ff0)
1fa0:                   00000000 00000000 00000003 c028aa05 20000080 00000000
1fc0: 00000000 00000000 002862f0 00000036 00000000 00006364 003d0f00 76bf50bc
1fe0: 76bf4ec0 76bf4eb0 00018af8 00132ec0
 r10:00000036 r9:854b8000 r8:8020029c r7:00000036 r6:002862f0 r5:00000000
 r4:00000000
Rebooting in 86400 seconds..