------------[ cut here ]------------
kernel BUG at mm/page_table_check.c:148!
Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP
Modules linked in:
CPU: 1 PID: 12672 Comm: syz-executor.4 Not tainted 6.5.0-rc1-syzkaller-g05d881b85b48 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023
pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __page_table_check_zero+0x280/0x2bc mm/page_table_check.c:148
lr : __page_table_check_zero+0x280/0x2bc mm/page_table_check.c:148
sp : ffff8000a5df71f0
x29: ffff8000a5df71f0 x28: ffff800092543000 x27: 0000000000000000
x26: dfff800000000000 x25: 0000000000000000 x24: ffff0000c0bd8abc
x23: 1ffff000124a8708 x22: dfff800000000000 x21: 0000000000000000
x20: ffff0000c0bd8ab8 x19: 0000000000000000 x18: 000000002100efff
x17: ffff80008e07d000 x16: ffff800080314db0 x15: 0000000000000001
x14: 1fffe0001817b157 x13: 0000000000000000 x12: 0000000000000000
x11: 0000000000040000 x10: 000000000003ffff x9 : ffff80009e601000
x8 : 0000000000040000 x7 : ffff800080a44cb8 x6 : 0000000000000000
x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff800080a45118
x2 : 0000000000000000 x1 : 0000000000000004 x0 : 0000000000000001
Call trace:
 __page_table_check_zero+0x280/0x2bc mm/page_table_check.c:148
 page_table_check_free include/linux/page_table_check.h:46 [inline]
 free_pages_prepare mm/page_alloc.c:1120 [inline]
 free_unref_page_prepare+0xa2c/0xadc mm/page_alloc.c:2348
 free_unref_page+0x80/0x3dc mm/page_alloc.c:2443
 __folio_put_small mm/swap.c:106 [inline]
 __folio_put+0xd0/0x12c mm/swap.c:129
 folio_put include/linux/mm.h:1423 [inline]
 put_page include/linux/mm.h:1492 [inline]
 extract_user_to_sg lib/scatterlist.c:1151 [inline]
 extract_iter_to_sg+0xb94/0x1c08 lib/scatterlist.c:1349
 hash_sendmsg+0x484/0xe9c crypto/algif_hash.c:117
 sock_sendmsg_nosec net/socket.c:725 [inline]
 sock_sendmsg net/socket.c:748 [inline]
 ____sys_sendmsg+0x56c/0x840 net/socket.c:2494
 ___sys_sendmsg net/socket.c:2548 [inline]
 __sys_sendmmsg+0x318/0x7d8 net/socket.c:2634
 __do_sys_sendmmsg net/socket.c:2663 [inline]
 __se_sys_sendmmsg net/socket.c:2660 [inline]
 __arm64_sys_sendmmsg+0xa0/0xbc net/socket.c:2660
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2c0 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x244 arch/arm64/kernel/syscall.c:142
 do_el0_svc+0x64/0x198 arch/arm64/kernel/syscall.c:191
 el0_svc+0x4c/0x160 arch/arm64/kernel/entry-common.c:647
 el0t_64_sync_handler+0x84/0xfc arch/arm64/kernel/entry-common.c:665
 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:591
Code: d4210000 97eb39fa d4210000 97eb39f8 (d4210000) 
---[ end trace 0000000000000000 ]---