page dumped because: VM_WARN_ON_FOLIO((_Generic((page), const struct page *: (const struct folio *)_compound_head(page), struct page *: (struct folio *)_compound_head(page))) != folio) ------------[ cut here ]------------ WARNING: CPU: 0 PID: 7966 at ./include/linux/rmap.h:426 __folio_rmap_sanity_checks+0x2c0/0x430 include/linux/rmap.h:426 Modules linked in: CPU: 0 UID: 0 PID: 7966 Comm: syz.6.214 Not tainted syzkaller #0 PREEMPT Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : __folio_rmap_sanity_checks+0x2c0/0x430 include/linux/rmap.h:426 lr : __folio_rmap_sanity_checks+0x2c0/0x430 include/linux/rmap.h:426 sp : ffff8000a50172c0 x29: ffff8000a50172c0 x28: 00000000000007f3 x27: 0000000020010000 x26: 002400013f740bc3 x25: dfff800000000000 x24: 000000000020aa90 x23: fffffdffc382b7c8 x22: fffffdffc3fdd000 x21: 0000000000000000 x20: 00000000000007f3 x19: fffffdffc3fdce00 x18: 00000000ffffffff x17: 3030303030303020 x16: ffff80008b020930 x15: 0000000000000001 x14: 1ffff00014a02d84 x13: 0000000000000000 x12: 0000000000000000 x11: 0000000000080000 x10: 0000000000033076 x9 : df8f82c4a5f37200 x8 : df8f82c4a5f37200 x7 : ffff80008056536c x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000807e00b4 x2 : 0000000000000002 x1 : 0000000000000001 x0 : 00000000000000b8 Call trace: __folio_rmap_sanity_checks+0x2c0/0x430 include/linux/rmap.h:426 (P) __folio_add_rmap mm/rmap.c:1252 [inline] __folio_add_file_rmap mm/rmap.c:1620 [inline] folio_add_file_rmap_ptes+0x84/0x8e8 mm/rmap.c:1642 set_pte_range+0x2e4/0x49c mm/memory.c:5311 filemap_map_folio_range mm/filemap.c:3673 [inline] filemap_map_pages+0xb54/0x155c mm/filemap.c:3783 do_fault_around mm/memory.c:5531 [inline] do_read_fault mm/memory.c:5564 [inline] do_fault mm/memory.c:5707 [inline] do_pte_missing mm/memory.c:4234 [inline] handle_pte_fault mm/memory.c:6052 [inline] __handle_mm_fault mm/memory.c:6195 [inline] handle_mm_fault+0x2b64/0x4d34 mm/memory.c:6364 faultin_page mm/gup.c:1144 [inline] __get_user_pages+0x1f40/0x2da0 mm/gup.c:1446 populate_vma_page_range+0x258/0x348 mm/gup.c:1880 __mm_populate+0x208/0x330 mm/gup.c:1983 mm_populate include/linux/mm.h:3367 [inline] vm_mmap_pgoff+0x398/0x45c mm/util.c:585 ksys_mmap_pgoff+0x394/0x5b8 mm/mmap.c:604 __do_sys_mmap arch/arm64/kernel/sys.c:28 [inline] __se_sys_mmap arch/arm64/kernel/sys.c:21 [inline] __arm64_sys_mmap+0xf8/0x110 arch/arm64/kernel/sys.c:21 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x254 arch/arm64/kernel/syscall.c:49 el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:132 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151 el0_svc+0x5c/0x254 arch/arm64/kernel/entry-common.c:744 el0t_64_sync_handler+0x84/0x12c arch/arm64/kernel/entry-common.c:763 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:596 irq event stamp: 4686 hardirqs last enabled at (4685): [] irqentry_exit+0xd8/0x108 kernel/entry/common.c:214 hardirqs last disabled at (4686): [] el1_brk64+0x20/0x54 arch/arm64/kernel/entry-common.c:434 softirqs last enabled at (4304): [] softirq_handle_end kernel/softirq.c:425 [inline] softirqs last enabled at (4304): [] handle_softirqs+0xaf8/0xc88 kernel/softirq.c:607 softirqs last disabled at (4281): [] __do_softirq+0x14/0x20 kernel/softirq.c:613 ---[ end trace 0000000000000000 ]--- page: refcount:18 mapcount:1 mapping:000000009769a58e index:0x8 pfn:0x13f738 head: order:3 mapcount:8 entire_mapcount:0 nr_pages_mapped:8 pincount:0 memcg:ffff0000d3fca580 aops:ext4_da_aops ino:f dentry name(?):"file1" flags: 0x5ffc00000005079(locked|uptodate|dirty|lru|arch_1|private|head|node=0|zone=2|lastcpupid=0x7ff) raw: 05ffc00000005079 ffff0000f3a748a8 fffffdffc40649c8 ffff0000f400be18 raw: 0000000000000008 ffff0000c15cf9f8 0000001200000000 ffff0000d3fca580 head: 05ffc00000005079 ffff0000f3a748a8 fffffdffc40649c8 ffff0000f400be18 head: 0000000000000008 ffff0000c15cf9f8 0000001200000000 ffff0000d3fca580 head: 05ffc00000000203 fffffdffc3fdce01 0000000800000007 00000000ffffffff head: ffffffff00000007 0000000000000039 0000000000000000 0000000000000008 page dumped because: VM_WARN_ON_FOLIO((_Generic((page + nr_pages - 1), const struct page *: (const struct folio *)_compound_head(page + nr_pages - 1), struct page *: (struct folio *)_compound_head(page + nr_pages - 1))) != folio) ------------[ cut here ]------------ WARNING: CPU: 0 PID: 7966 at ./include/linux/rmap.h:427 __folio_rmap_sanity_checks+0x2ec/0x430 include/linux/rmap.h:427 Modules linked in: CPU: 0 UID: 0 PID: 7966 Comm: syz.6.214 Tainted: G W syzkaller #0 PREEMPT Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : __folio_rmap_sanity_checks+0x2ec/0x430 include/linux/rmap.h:427 lr : __folio_rmap_sanity_checks+0x2ec/0x430 include/linux/rmap.h:427 sp : ffff8000a50172c0 x29: ffff8000a50172c0 x28: 00000000000007f3 x27: 0000000020010000 x26: 002400013f740bc3 x25: dfff800000000000 x24: 000000000020aa90 x23: fffffdffc3ffccc0 x22: 0000000000000000 x21: 0000000000000000 x20: 00000000000007f3 x19: fffffdffc3fdce00 x18: 00000000ffffffff x17: 3030303030303020 x16: ffff80008b020930 x15: 0000000000000001 x14: 1ffff00014a02d84 x13: 0000000000000000 x12: 0000000000000000 x11: 0000000000080000 x10: 000000000004e856 x9 : df8f82c4a5f37200 x8 : df8f82c4a5f37200 x7 : ffff80008056536c x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000807e00b4 x2 : 0000000000000002 x1 : 0000000000000001 x0 : 00000000000000e5 Call trace: __folio_rmap_sanity_checks+0x2ec/0x430 include/linux/rmap.h:427 (P) __folio_add_rmap mm/rmap.c:1252 [inline] __folio_add_file_rmap mm/rmap.c:1620 [inline] folio_add_file_rmap_ptes+0x84/0x8e8 mm/rmap.c:1642 set_pte_range+0x2e4/0x49c mm/memory.c:5311 filemap_map_folio_range mm/filemap.c:3673 [inline] filemap_map_pages+0xb54/0x155c mm/filemap.c:3783 do_fault_around mm/memory.c:5531 [inline] do_read_fault mm/memory.c:5564 [inline] do_fault mm/memory.c:5707 [inline] do_pte_missing mm/memory.c:4234 [inline] handle_pte_fault mm/memory.c:6052 [inline] __handle_mm_fault mm/memory.c:6195 [inline] handle_mm_fault+0x2b64/0x4d34 mm/memory.c:6364 faultin_page mm/gup.c:1144 [inline] __get_user_pages+0x1f40/0x2da0 mm/gup.c:1446 populate_vma_page_range+0x258/0x348 mm/gup.c:1880 __mm_populate+0x208/0x330 mm/gup.c:1983 mm_populate include/linux/mm.h:3367 [inline] vm_mmap_pgoff+0x398/0x45c mm/util.c:585 ksys_mmap_pgoff+0x394/0x5b8 mm/mmap.c:604 __do_sys_mmap arch/arm64/kernel/sys.c:28 [inline] __se_sys_mmap arch/arm64/kernel/sys.c:21 [inline] __arm64_sys_mmap+0xf8/0x110 arch/arm64/kernel/sys.c:21 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x254 arch/arm64/kernel/syscall.c:49 el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:132 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151 el0_svc+0x5c/0x254 arch/arm64/kernel/entry-common.c:744 el0t_64_sync_handler+0x84/0x12c arch/arm64/kernel/entry-common.c:763 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:596 irq event stamp: 5738 hardirqs last enabled at (5737): [] irqentry_exit+0xd8/0x108 kernel/entry/common.c:214 hardirqs last disabled at (5738): [] el1_brk64+0x20/0x54 arch/arm64/kernel/entry-common.c:434 softirqs last enabled at (5692): [] softirq_handle_end kernel/softirq.c:425 [inline] softirqs last enabled at (5692): [] handle_softirqs+0xaf8/0xc88 kernel/softirq.c:607 softirqs last disabled at (5361): [] __do_softirq+0x14/0x20 kernel/softirq.c:613 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 0 PID: 7966 at ./include/linux/rmap.h:214 __folio_large_mapcount_sanity_checks+0x3d4/0x5dc include/linux/rmap.h:214 Modules linked in: CPU: 0 UID: 0 PID: 7966 Comm: syz.6.214 Tainted: G W syzkaller #0 PREEMPT Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : __folio_large_mapcount_sanity_checks+0x3d4/0x5dc include/linux/rmap.h:214 lr : __folio_large_mapcount_sanity_checks+0x3d4/0x5dc include/linux/rmap.h:214 sp : ffff8000a50172b0 x29: ffff8000a50172b0 x28: 00000000000007f3 x27: 1fffffbff87fb9cf x26: 1fffffbff87fb9c0 x25: 1fffffbff87fb9c1 x24: dfff800000000000 x23: 00000000000007f3 x22: fffffdffc3fdce78 x21: 0000000000000008 x20: fffffdffc3fdce08 x19: fffffdffc3fdce00 x18: 00000000ffffffff x17: 3030303030303020 x16: ffff80008b020930 x15: 0000000000000001 x14: 1fffffbff87fb9cd x13: 0000000000000000 x12: 0000000000000000 x11: 0000000000080000 x10: 0000000000067f10 x9 : ffff80009e539000 x8 : 0000000000067f11 x7 : ffff80008056536c x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff800080b683cc x2 : 0000000000000039 x1 : 00000000000007f3 x0 : 0000000000000008 Call trace: __folio_large_mapcount_sanity_checks+0x3d4/0x5dc include/linux/rmap.h:214 (P) folio_add_return_large_mapcount include/linux/rmap.h:250 [inline] __folio_add_rmap mm/rmap.c:1279 [inline] __folio_add_file_rmap mm/rmap.c:1620 [inline] folio_add_file_rmap_ptes+0x344/0x8e8 mm/rmap.c:1642 set_pte_range+0x2e4/0x49c mm/memory.c:5311 filemap_map_folio_range mm/filemap.c:3673 [inline] filemap_map_pages+0xb54/0x155c mm/filemap.c:3783 do_fault_around mm/memory.c:5531 [inline] do_read_fault mm/memory.c:5564 [inline] do_fault mm/memory.c:5707 [inline] do_pte_missing mm/memory.c:4234 [inline] handle_pte_fault mm/memory.c:6052 [inline] __handle_mm_fault mm/memory.c:6195 [inline] handle_mm_fault+0x2b64/0x4d34 mm/memory.c:6364 faultin_page mm/gup.c:1144 [inline] __get_user_pages+0x1f40/0x2da0 mm/gup.c:1446 populate_vma_page_range+0x258/0x348 mm/gup.c:1880 __mm_populate+0x208/0x330 mm/gup.c:1983 mm_populate include/linux/mm.h:3367 [inline] vm_mmap_pgoff+0x398/0x45c mm/util.c:585 ksys_mmap_pgoff+0x394/0x5b8 mm/mmap.c:604 __do_sys_mmap arch/arm64/kernel/sys.c:28 [inline] __se_sys_mmap arch/arm64/kernel/sys.c:21 [inline] __arm64_sys_mmap+0xf8/0x110 arch/arm64/kernel/sys.c:21 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x254 arch/arm64/kernel/syscall.c:49 el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:132 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151 el0_svc+0x5c/0x254 arch/arm64/kernel/entry-common.c:744 el0t_64_sync_handler+0x84/0x12c arch/arm64/kernel/entry-common.c:763 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:596 irq event stamp: 5810 hardirqs last enabled at (5809): [] irqentry_exit+0xd8/0x108 kernel/entry/common.c:214 hardirqs last disabled at (5810): [] el1_brk64+0x20/0x54 arch/arm64/kernel/entry-common.c:434 softirqs last enabled at (5808): [] softirq_handle_end kernel/softirq.c:425 [inline] softirqs last enabled at (5808): [] handle_softirqs+0xaf8/0xc88 kernel/softirq.c:607 softirqs last disabled at (5741): [] __do_softirq+0x14/0x20 kernel/softirq.c:613 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ kernel BUG at mm/page_table_check.c:109! Internal error: Oops - BUG: 00000000f2000800 [#1] SMP Modules linked in: CPU: 0 UID: 0 PID: 7966 Comm: syz.6.214 Tainted: G W syzkaller #0 PREEMPT Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : page_table_check_set+0x58c/0x590 mm/page_table_check.c:109 lr : page_table_check_set+0x58c/0x590 mm/page_table_check.c:109 sp : ffff8000a50171c0 x29: ffff8000a50171d0 x28: 0040000000000000 x27: 00000000f5000000 x26: 1fffffbff87fe801 x25: fffffdffc3ff4000 x24: ffffc1ffc0000000 x23: ffff80008f115000 x22: 00000000f5000000 x21: fffffdffc3ff4008 x20: 0000000000000010 x19: 1ffff00011e22ae4 x18: 00000000ffffffff x17: 3030303030303020 x16: ffff80008b020930 x15: 0000000000000001 x14: 1fffffbff87fe780 x13: 0000000000000000 x12: 0000000000000000 x11: 0000000000080000 x10: 000000000007ffff x9 : ffff80009e539000 x8 : 0000000000080000 x7 : ffff800080d19080 x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000002 x2 : 0000000000000008 x1 : 00000000f5000000 x0 : 00000000f5000000 Call trace: page_table_check_set+0x58c/0x590 mm/page_table_check.c:109 (P) __page_table_check_ptes_set+0x2a8/0x2e0 mm/page_table_check.c:209 page_table_check_ptes_set include/linux/page_table_check.h:76 [inline] __set_ptes_anysz arch/arm64/include/asm/pgtable.h:714 [inline] __set_ptes+0x4a0/0x504 arch/arm64/include/asm/pgtable.h:746 contpte_set_ptes+0x120/0x188 arch/arm64/mm/contpte.c:464 set_ptes arch/arm64/include/asm/pgtable.h:1799 [inline] set_pte_range+0x3ec/0x49c mm/memory.c:5313 filemap_map_folio_range mm/filemap.c:3673 [inline] filemap_map_pages+0xb54/0x155c mm/filemap.c:3783 do_fault_around mm/memory.c:5531 [inline] do_read_fault mm/memory.c:5564 [inline] do_fault mm/memory.c:5707 [inline] do_pte_missing mm/memory.c:4234 [inline] handle_pte_fault mm/memory.c:6052 [inline] __handle_mm_fault mm/memory.c:6195 [inline] handle_mm_fault+0x2b64/0x4d34 mm/memory.c:6364 faultin_page mm/gup.c:1144 [inline] __get_user_pages+0x1f40/0x2da0 mm/gup.c:1446 populate_vma_page_range+0x258/0x348 mm/gup.c:1880 __mm_populate+0x208/0x330 mm/gup.c:1983 mm_populate include/linux/mm.h:3367 [inline] vm_mmap_pgoff+0x398/0x45c mm/util.c:585 ksys_mmap_pgoff+0x394/0x5b8 mm/mmap.c:604 __do_sys_mmap arch/arm64/kernel/sys.c:28 [inline] __se_sys_mmap arch/arm64/kernel/sys.c:21 [inline] __arm64_sys_mmap+0xf8/0x110 arch/arm64/kernel/sys.c:21 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x254 arch/arm64/kernel/syscall.c:49 el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:132 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151 el0_svc+0x5c/0x254 arch/arm64/kernel/entry-common.c:744 el0t_64_sync_handler+0x84/0x12c arch/arm64/kernel/entry-common.c:763 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:596 Code: d4210000 97e861f5 d4210000 97e861f3 (d4210000) ---[ end trace 0000000000000000 ]---