program: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x4000) (async) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000100)=0x10000) (async) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) [ 84.958721][ T5341] Bluetooth: hci0: command tx timeout [ 85.019638][ T5364] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x23 pfn:0x52fc4 [ 85.023499][ T5364] memcg:ffff88801bee0d00 [ 85.025236][ T5364] flags: 0x4fff00000000001(locked|node=1|zone=1|lastcpupid=0x7ff) [ 85.042516][ T5364] raw: 04fff00000000001 0000000000000000 dead000000000122 0000000000000000 [ 85.046120][ T5364] raw: 0000000000000023 0000000000000000 00000001ffffffff ffff88801bee0d00 [ 85.050659][ T5364] page dumped because: VM_BUG_ON_FOLIO(folio_order(folio) < mapping_min_folio_order(mapping)) [ 85.055198][ T5364] page_owner tracks the page as allocated [ 85.061206][ T5364] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 5364, tgid 5364 (syz.0.0), ts 85019613625, free_ts 85019330916 [ 85.070861][ T5364] post_alloc_hook+0x240/0x2a0 [ 85.073111][ T5364] get_page_from_freelist+0x21e4/0x22c0 [ 85.075608][ T5364] __alloc_frozen_pages_noprof+0x181/0x370 [ 85.079391][ T5364] alloc_pages_mpol+0x232/0x4a0 [ 85.081629][ T5364] alloc_pages_noprof+0xa9/0x190 [ 85.083738][ T5364] folio_alloc_noprof+0x1e/0x30 [ 85.085715][ T5364] filemap_alloc_folio_noprof+0xdf/0x470 [ 85.089098][ T5364] page_cache_ra_order+0x4de/0xd40 [ 85.091221][ T5364] do_sync_mmap_readahead+0x25e/0x7a0 [ 85.094666][ T5364] filemap_fault+0x62c/0x1200 [ 85.096810][ T5364] __do_fault+0x138/0x390 [ 85.099602][ T5364] __handle_mm_fault+0x1847/0x5440 [ 85.102346][ T5364] handle_mm_fault+0x40a/0x8e0 [ 85.105163][ T5364] do_user_addr_fault+0xa81/0x1390 [ 85.107453][ T5364] exc_page_fault+0x76/0xf0 [ 85.110673][ T5364] asm_exc_page_fault+0x26/0x30 [ 85.112822][ T5364] page last free pid 5365 tgid 5364 stack trace: [ 85.115538][ T5364] free_unref_folios+0xdbd/0x1520 [ 85.117666][ T5364] folios_put_refs+0x559/0x640 [ 85.120276][ T5364] truncate_inode_pages_range+0x346/0xda0 [ 85.122700][ T5364] set_blocksize+0x32a/0x500 [ 85.124574][ T5364] blkdev_bszset+0x1ac/0x220 [ 85.126542][ T5364] blkdev_ioctl+0x430/0x6d0 [ 85.129664][ T5364] __se_sys_ioctl+0xf9/0x170 [ 85.131811][ T5364] do_syscall_64+0xfa/0x3b0 [ 85.133948][ T5364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.137393][ T5364] ------------[ cut here ]------------ [ 85.139865][ T5364] kernel BUG at mm/filemap.c:868! [ 85.142694][ T5364] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 85.145901][ T5364] CPU: 0 UID: 0 PID: 5364 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 85.150923][ T5364] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.155825][ T5364] RIP: 0010:__filemap_add_folio+0x11ad/0x12f0 [ 85.158344][ T5364] Code: cf c7 ff 4c 89 e7 48 c7 c6 80 4d 94 8b e8 9b 0d 30 ff 90 0f 0b e8 13 cf c7 ff 4c 89 e7 48 c7 c6 60 44 94 8b e8 84 0d 30 ff 90 <0f> 0b e8 fc ce c7 ff 4c 89 e7 48 c7 c6 80 4d 94 8b e8 6d 0d 30 ff [ 85.166249][ T5364] RSP: 0018:ffffc9000d4ff6a0 EFLAGS: 00010246 [ 85.168883][ T5364] RAX: 200cf045ab585700 RBX: 0000000000000000 RCX: 0000000000000000 [ 85.172780][ T5364] RDX: 0000000000000007 RSI: ffffffff8d9bbb7f RDI: 00000000ffffffff [ 85.176443][ T5364] RBP: ffffc9000d4ff810 R08: ffffffff8fa3b637 R09: 1ffffffff1f476c6 [ 85.179625][ T5364] R10: dffffc0000000000 R11: fffffbfff1f476c7 R12: ffffea00014bf100 [ 85.182790][ T5364] R13: dffffc0000000000 R14: ffffea00014bf108 R15: 0000000000000004 [ 85.185950][ T5364] FS: 000055558d4a2500(0000) GS:ffff88808d20d000(0000) knlGS:0000000000000000 [ 85.189575][ T5364] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 85.192336][ T5364] CR2: 000020000057eff8 CR3: 00000000436fc000 CR4: 0000000000352ef0 [ 85.196022][ T5364] Call Trace: [ 85.197658][ T5364] [ 85.198968][ T5364] ? percpu_ref_put+0x19/0x180 [ 85.201042][ T5364] ? __pfx___filemap_add_folio+0x10/0x10 [ 85.203326][ T5364] filemap_add_folio+0xd5/0x270 [ 85.205290][ T5364] page_cache_ra_order+0x643/0xd40 [ 85.207285][ T5364] do_sync_mmap_readahead+0x25e/0x7a0 [ 85.209423][ T5364] ? __pfx_do_sync_mmap_readahead+0x10/0x10 [ 85.211949][ T5364] ? count_memcg_event_mm+0x1d/0x250 [ 85.214566][ T5364] ? count_memcg_event_mm+0x1d/0x250 [ 85.217302][ T5364] filemap_fault+0x62c/0x1200 [ 85.219806][ T5364] ? __pagetable_ctor+0x253/0x340 [ 85.222315][ T5364] ? __pfx_filemap_fault+0x10/0x10 [ 85.224625][ T5364] ? rcu_is_watching+0x15/0xb0 [ 85.226718][ T5364] ? __raw_spin_lock_init+0x45/0x100 [ 85.228849][ T5364] __do_fault+0x138/0x390 [ 85.230489][ T5364] __handle_mm_fault+0x1847/0x5440 [ 85.232723][ T5364] ? __lock_acquire+0xab9/0xd20 [ 85.234717][ T5364] ? __pfx___handle_mm_fault+0x10/0x10 [ 85.236814][ T5364] ? lock_vma_under_rcu+0xdf/0x3d0 [ 85.238988][ T5364] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 85.241451][ T5364] ? rcu_is_watching+0x15/0xb0 [ 85.243800][ T5364] handle_mm_fault+0x40a/0x8e0 [ 85.245916][ T5364] do_user_addr_fault+0xa81/0x1390 [ 85.248065][ T5364] ? rcu_is_watching+0x15/0xb0 [ 85.250090][ T5364] ? trace_page_fault_user+0x84/0x1e0 [ 85.252416][ T5364] exc_page_fault+0x76/0xf0 [ 85.254447][ T5364] asm_exc_page_fault+0x26/0x30 [ 85.256584][ T5364] RIP: 0033:0x7fa663455003 [ 85.258604][ T5364] Code: 48 85 c0 74 1b 48 83 f8 01 0f 85 3b 03 00 00 0f b7 44 24 18 66 c1 c0 08 0f b7 c0 48 89 44 24 18 48 8b 44 24 10 0f b7 54 24 18 <66> 89 10 e9 82 fe ff ff 48 83 3c 24 08 0f 85 a1 02 00 00 48 8b 44 [ 85.267138][ T5364] RSP: 002b:00007ffee52955b0 EFLAGS: 00010246 [ 85.269839][ T5364] RAX: 000020000057eff8 RBX: 0000000000000002 RCX: 0000000000000000 [ 85.273353][ T5364] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055558d4a23c8 [ 85.277158][ T5364] RBP: 00007ffee52956b8 R08: 0000000000000000 R09: 0000000000000000 [ 85.280818][ T5364] R10: 0000000000000000 R11: 0000000000000000 R12: 00007fa6637c5fac [ 85.284222][ T5364] R13: 00007fa6637c5fa0 R14: fffffffffffffffe R15: 0000000000000003 [ 85.287549][ T5364] [ 85.288844][ T5364] Modules linked in: [ 85.291212][ T5364] ---[ end trace 0000000000000000 ]--- [ 85.299499][ T5364] RIP: 0010:__filemap_add_folio+0x11ad/0x12f0 [ 85.302092][ T5364] Code: cf c7 ff 4c 89 e7 48 c7 c6 80 4d 94 8b e8 9b 0d 30 ff 90 0f 0b e8 13 cf c7 ff 4c 89 e7 48 c7 c6 60 44 94 8b e8 84 0d 30 ff 90 <0f> 0b e8 fc ce c7 ff 4c 89 e7 48 c7 c6 80 4d 94 8b e8 6d 0d 30 ff [ 85.311134][ T5364] RSP: 0018:ffffc9000d4ff6a0 EFLAGS: 00010246 [ 85.313821][ T5364] RAX: 200cf045ab585700 RBX: 0000000000000000 RCX: 0000000000000000 [ 85.317340][ T5364] RDX: 0000000000000007 RSI: ffffffff8d9bbb7f RDI: 00000000ffffffff [ 85.321583][ T5364] RBP: ffffc9000d4ff810 R08: ffffffff8fa3b637 R09: 1ffffffff1f476c6 [ 85.325072][ T5364] R10: dffffc0000000000 R11: fffffbfff1f476c7 R12: ffffea00014bf100 [ 85.328990][ T5364] R13: dffffc0000000000 R14: ffffea00014bf108 R15: 0000000000000004 [ 85.332509][ T5364] FS: 000055558d4a2500(0000) GS:ffff88808d20d000(0000) knlGS:0000000000000000 [ 85.336275][ T5364] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 85.339522][ T5364] CR2: 000020000057eff8 CR3: 00000000436fc000 CR4: 0000000000352ef0 [ 85.343320][ T5364] Kernel panic - not syncing: Fatal exception [ 85.346143][ T5364] Kernel Offset: disabled [ 85.347965][ T5364] Rebooting in 86400 seconds..