BUG: Bad page state in process syz-executor.0 pfn:1b317b page:00000000b430fc6f refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1b317b flags: 0x5ffc00000001000(reserved|node=0|zone=2|lastcpupid=0x7ff) page_type: 0xffffffff() raw: 05ffc00000001000 fffffc0005cc5ec8 fffffc0005cc5ec8 0000000000000000 raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set Modules linked in: CPU: 0 PID: 6018 Comm: syz-executor.0 Not tainted 6.5.0-rc5-syzkaller-g6f09e57d8cf6 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 Call trace: dump_backtrace+0x1b8/0x1e4 arch/arm64/kernel/stacktrace.c:233 show_stack+0x2c/0x44 arch/arm64/kernel/stacktrace.c:240 __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0xd0/0x124 lib/dump_stack.c:106 dump_stack+0x1c/0x28 lib/dump_stack.c:113 bad_page+0x1a4/0x1c4 mm/page_alloc.c:533 free_page_is_bad_report+0xf4/0x16c mm/page_alloc.c:974 free_page_is_bad mm/page_alloc.c:984 [inline] free_pages_prepare mm/page_alloc.c:1153 [inline] free_unref_page_prepare+0x988/0xadc mm/page_alloc.c:2348 free_unref_page+0x80/0x3dc mm/page_alloc.c:2443 __folio_put_small mm/swap.c:106 [inline] __folio_put+0xd0/0x12c mm/swap.c:129 folio_put include/linux/mm.h:1440 [inline] put_page include/linux/mm.h:1509 [inline] extract_user_to_sg lib/scatterlist.c:1151 [inline] extract_iter_to_sg+0xb94/0x1c08 lib/scatterlist.c:1349 hash_sendmsg+0x480/0xe84 crypto/algif_hash.c:119 sock_sendmsg_nosec net/socket.c:725 [inline] sock_sendmsg net/socket.c:748 [inline] ____sys_sendmsg+0x56c/0x840 net/socket.c:2494 ___sys_sendmsg net/socket.c:2548 [inline] __sys_sendmmsg+0x318/0x7d8 net/socket.c:2634 __do_sys_sendmmsg net/socket.c:2663 [inline] __se_sys_sendmmsg net/socket.c:2660 [inline] __arm64_sys_sendmmsg+0xa0/0xbc net/socket.c:2660 __invoke_syscall arch/arm64/kernel/syscall.c:37 [inline] invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:51 el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:136 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:155 el0_svc+0x58/0x16c arch/arm64/kernel/entry-common.c:678 el0t_64_sync_handler+0x84/0xfc arch/arm64/kernel/entry-common.c:696 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:591