raw: 00fff00000001000 ffffea00002e14c8 ffffea00002e14c8 0000000000000000 raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 page dumped because: VM_BUG_ON_PAGE(!PageCompound(page)) page_owner info is not present (never set?) ------------[ cut here ]------------ kernel BUG at mm/slub.c:3516! invalid opcode: 0000 [#1] PREEMPT SMP KASAN CPU: 1 PID: 6556 Comm: syz-fuzzer Not tainted 5.15.0-rc3-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:free_nonslab_page mm/slub.c:3516 [inline] RIP: 0010:free_nonslab_page+0xb0/0x130 mm/slub.c:3512 Code: 01 fb 5b 44 89 ee 48 89 ef 5d 41 5c 41 5d e9 27 e8 f6 ff 48 8b 45 08 a8 01 75 97 48 c7 c6 90 8d 16 8b 48 89 ef e8 c0 4f ed ff <0f> 0b 48 8b 45 00 a9 00 00 01 00 75 39 48 8b 45 08 a8 01 74 dc 48 RSP: 0018:ffffc900025efb38 EFLAGS: 00010093 RAX: 0000000000000000 RBX: 1ffff920004bdf6c RCX: 0000000000000000 RDX: ffff88802673b900 RSI: ffffffff81bc89b0 RDI: fffff520004bdf3d RBP: ffffea00002e14c0 R08: 000000000000002b R09: 0000000000000000 R10: ffffffff815d5b7e R11: 0000000000000000 R12: ffffffff8eefb990 R13: ffff888010dad300 R14: ffff88802673c150 R15: 0000000000000017 FS: 000000c000350890(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000c019030014 CR3: 000000007ea12000 CR4: 00000000003506e0 Call Trace: put_ucounts+0x153/0x1c0 kernel/ucount.c:207 __sigqueue_free.part.0+0x9b/0xe0 kernel/signal.c:468 __sigqueue_free kernel/signal.c:465 [inline] collect_signal+0x2f7/0x5a0 kernel/signal.c:610 __dequeue_signal kernel/signal.c:632 [inline] dequeue_signal+0x1eb/0x600 kernel/signal.c:650 get_signal+0x715/0x2160 kernel/signal.c:2750 arch_do_signal_or_restart+0x2a9/0x1c40 arch/x86/kernel/signal.c:865 handle_signal_work kernel/entry/common.c:148 [inline] exit_to_user_mode_loop kernel/entry/common.c:172 [inline] exit_to_user_mode_prepare+0x17d/0x290 kernel/entry/common.c:207 irqentry_exit_to_user_mode+0x5/0x40 kernel/entry/common.c:313 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:638 RIP: 0033:0x40d396 Code: 24 e8 48 3b 41 10 0f 86 6e 0a 00 00 48 81 ec 98 00 00 00 48 89 ac 24 90 00 00 00 48 8d ac 24 90 00 00 00 83 3d e2 4c 78 01 02 <0f> 84 2e 0a 00 00 48 8b 94 24 a0 00 00 00 48 85 d2 0f 84 88 09 00 RSP: 002b:000000c01345efa0 EFLAGS: 00000293 RAX: 000000c01345f020 RBX: 00000000007a78e0 RCX: 000000c00564c000 RDX: 000000000000000f RSI: 000000c00db5dd00 RDI: 000000c00db5dd70 RBP: 000000c01345f030 R08: 0000000000792260 R09: 0000000000203001 R10: 000000c00f4bc410 R11: 000000c00f4bc410 R12: ffffffffffffffff R13: 0000000000000042 R14: 0000000000000041 R15: 0000000000000200 Modules linked in: ---[ end trace 8fc928c7313f7753 ]--- RIP: 0010:free_nonslab_page mm/slub.c:3516 [inline] RIP: 0010:free_nonslab_page+0xb0/0x130 mm/slub.c:3512 Code: 01 fb 5b 44 89 ee 48 89 ef 5d 41 5c 41 5d e9 27 e8 f6 ff 48 8b 45 08 a8 01 75 97 48 c7 c6 90 8d 16 8b 48 89 ef e8 c0 4f ed ff <0f> 0b 48 8b 45 00 a9 00 00 01 00 75 39 48 8b 45 08 a8 01 74 dc 48 RSP: 0018:ffffc900025efb38 EFLAGS: 00010093 RAX: 0000000000000000 RBX: 1ffff920004bdf6c RCX: 0000000000000000 RDX: ffff88802673b900 RSI: ffffffff81bc89b0 RDI: fffff520004bdf3d RBP: ffffea00002e14c0 R08: 000000000000002b R09: 0000000000000000 R10: ffffffff815d5b7e R11: 0000000000000000 R12: ffffffff8eefb990 R13: ffff888010dad300 R14: ffff88802673c150 R15: 0000000000000017 FS: 000000c000350890(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000c019030014 CR3: 000000007ea12000 CR4: 00000000003506e0