------------[ cut here ]------------ kernel BUG at mm/page_table_check.c:148! Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP Modules linked in: CPU: 1 PID: 5909 Comm: syz-executor.3 Not tainted 6.5.0-rc3-syzkaller-g6eaae1980760 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : __page_table_check_zero+0x280/0x2bc mm/page_table_check.c:148 lr : __page_table_check_zero+0x280/0x2bc mm/page_table_check.c:148 sp : ffff80009a2d71f0 x29: ffff80009a2d71f0 x28: ffff800092544000 x27: 0000000000000000 x26: dfff800000000000 x25: 0000000000000000 x24: ffff0000c0bd8ac4 x23: 1ffff000124a8908 x22: dfff800000000000 x21: 0000000000000000 x20: ffff0000c0bd8ac0 x19: 0000000000000000 x18: 000000002100efff x17: 2c5cf13fa44e3038 x16: ffff8000803156a8 x15: 0000000000000001 x14: 1fffe0001817b158 x13: 0000000000000000 x12: 0000000000000000 x11: 0000000000040000 x10: 000000000003ffff x9 : ffff800097879000 x8 : 0000000000040000 x7 : ffff800080a47b48 x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff800080a47fa8 x2 : 0000000000000000 x1 : 0000000000000004 x0 : 0000000000000001 Call trace: __page_table_check_zero+0x280/0x2bc mm/page_table_check.c:148 page_table_check_free include/linux/page_table_check.h:46 [inline] free_pages_prepare mm/page_alloc.c:1120 [inline] free_unref_page_prepare+0xa2c/0xadc mm/page_alloc.c:2348 free_unref_page+0x80/0x3dc mm/page_alloc.c:2443 __folio_put_small mm/swap.c:106 [inline] __folio_put+0xd0/0x12c mm/swap.c:129 folio_put include/linux/mm.h:1423 [inline] put_page include/linux/mm.h:1492 [inline] extract_user_to_sg lib/scatterlist.c:1151 [inline] extract_iter_to_sg+0xb94/0x1c08 lib/scatterlist.c:1349 hash_sendmsg+0x480/0xe84 crypto/algif_hash.c:119 sock_sendmsg_nosec net/socket.c:725 [inline] sock_sendmsg net/socket.c:748 [inline] ____sys_sendmsg+0x56c/0x840 net/socket.c:2494 ___sys_sendmsg net/socket.c:2548 [inline] __sys_sendmmsg+0x318/0x7d8 net/socket.c:2634 __do_sys_sendmmsg net/socket.c:2663 [inline] __se_sys_sendmmsg net/socket.c:2660 [inline] __arm64_sys_sendmmsg+0xa0/0xbc net/socket.c:2660 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x2c0 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x138/0x244 arch/arm64/kernel/syscall.c:139 do_el0_svc+0x64/0x198 arch/arm64/kernel/syscall.c:188 el0_svc+0x4c/0x160 arch/arm64/kernel/entry-common.c:647 el0t_64_sync_handler+0x84/0xfc arch/arm64/kernel/entry-common.c:665 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:591 Code: d4210000 97eb3898 d4210000 97eb3896 (d4210000) ---[ end trace 0000000000000000 ]---