program: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)={0x4c, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0xfffffffffffffd63, 0xb, 0x5}, {0x6, 0x11, 0x6}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x840}, 0x4) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r2, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x8084}, 0x20100c0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) (async) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000017, 0x38011, r3, 0x4000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000017, 0x38011, r3, 0x4000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0) (async) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40081271, &(0x7f0000000980)=0x4000) (async) ioctl$FS_IOC_SETFLAGS(r4, 0x40081271, &(0x7f0000000980)=0x4000) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) [ 76.549680][ T4667] Bluetooth: hci0: command tx timeout [ 76.554115][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.556968][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.667827][ T5319] netlink: 16 bytes leftover after parsing attributes in process `syz.0.0'. [ 76.685480][ T5318] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x23 pfn:0x42915 [ 76.690372][ T5318] memcg:ffff88801bae8d00 [ 76.692227][ T5318] flags: 0x4fff00000000001(locked|node=1|zone=1|lastcpupid=0x7ff) [ 76.698532][ T5318] raw: 04fff00000000001 0000000000000000 dead000000000122 0000000000000000 [ 76.702038][ T5318] raw: 0000000000000023 0000000000000000 00000001ffffffff ffff88801bae8d00 [ 76.705914][ T5318] page dumped because: VM_BUG_ON_FOLIO(folio_order(folio) < mapping_min_folio_order(mapping)) [ 76.709727][ T5318] page_owner tracks the page as allocated [ 76.712646][ T5318] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 5318, tgid 5318 (syz.0.0), ts 76685456571, free_ts 76685199988 [ 76.722526][ T5318] post_alloc_hook+0x240/0x2a0 [ 76.725505][ T5318] get_page_from_freelist+0x2365/0x2440 [ 76.727898][ T5318] __alloc_frozen_pages_noprof+0x181/0x370 [ 76.730485][ T5318] alloc_pages_mpol+0x232/0x4a0 [ 76.733806][ T5318] alloc_pages_noprof+0xa9/0x190 [ 76.736139][ T5318] folio_alloc_noprof+0x1e/0x30 [ 76.738239][ T5318] filemap_alloc_folio_noprof+0xdf/0x470 [ 76.740604][ T5318] page_cache_ra_order+0x55b/0xe70 [ 76.742975][ T5318] do_sync_mmap_readahead+0x25e/0x7a0 [ 76.746138][ T5318] filemap_fault+0x6b9/0x12b0 [ 76.748382][ T5318] __do_fault+0x138/0x390 [ 76.750370][ T5318] __handle_mm_fault+0x1847/0x5400 [ 76.752500][ T5318] handle_mm_fault+0x40a/0x8e0 [ 76.755436][ T5318] do_user_addr_fault+0xa7c/0x1380 [ 76.757705][ T5318] exc_page_fault+0x82/0x100 [ 76.759793][ T5318] asm_exc_page_fault+0x26/0x30 [ 76.761970][ T5318] page last free pid 5319 tgid 5318 stack trace: [ 76.765777][ T5318] free_unref_folios+0xdb3/0x14f0 [ 76.768082][ T5318] folios_put_refs+0x584/0x670 [ 76.770395][ T5318] truncate_inode_pages_range+0x346/0xda0 [ 76.772888][ T5318] set_blocksize+0x32a/0x500 [ 76.775602][ T5318] blkdev_bszset+0x1ac/0x220 [ 76.777433][ T5318] blkdev_ioctl+0x437/0x6d0 [ 76.779119][ T5318] __se_sys_ioctl+0xfc/0x170 [ 76.781060][ T5318] do_syscall_64+0xfa/0xfa0 [ 76.782874][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.787249][ T5318] ------------[ cut here ]------------ [ 76.789500][ T5318] kernel BUG at mm/filemap.c:871! [ 76.791838][ T5318] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 76.794639][ T5318] CPU: 0 UID: 0 PID: 5318 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 76.798272][ T5318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 76.802959][ T5318] RIP: 0010:__filemap_add_folio+0x11ad/0x12f0 [ 76.805588][ T5318] Code: 8b c6 ff 4c 89 e7 48 c7 c6 00 75 74 8b e8 7b 63 2e ff 90 0f 0b e8 03 8b c6 ff 4c 89 e7 48 c7 c6 e0 6b 74 8b e8 64 63 2e ff 90 <0f> 0b e8 ec 8a c6 ff 4c 89 e7 48 c7 c6 00 75 74 8b e8 4d 63 2e ff [ 76.813583][ T5318] RSP: 0018:ffffc9000d3a7680 EFLAGS: 00010246 [ 76.816098][ T5318] RAX: 62e7c9681f1f3f00 RBX: 0000000000000000 RCX: 0000000000000000 [ 76.819482][ T5318] RDX: 0000000000000007 RSI: ffffffff8d7100d2 RDI: 00000000ffffffff [ 76.822905][ T5318] RBP: ffffc9000d3a77e8 R08: ffffffff8f7cfb77 R09: 1ffffffff1ef9f6e [ 76.825993][ T5318] R10: dffffc0000000000 R11: fffffbfff1ef9f6f R12: ffffea00010a4540 [ 76.829441][ T5318] R13: dffffc0000000000 R14: ffffea00010a4548 R15: 0000000000000002 [ 76.832718][ T5318] FS: 000055555637b500(0000) GS:ffff88808d732000(0000) knlGS:0000000000000000 [ 76.836883][ T5318] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 76.839800][ T5318] CR2: 00007f206eecfad0 CR3: 000000000b551000 CR4: 0000000000352ef0 [ 76.843240][ T5318] Call Trace: [ 76.844695][ T5318] [ 76.845987][ T5318] ? percpu_ref_put+0x19/0x180 [ 76.848026][ T5318] ? __pfx___filemap_add_folio+0x10/0x10 [ 76.850523][ T5318] ? percpu_ref_put+0xf9/0x180 [ 76.852660][ T5318] filemap_add_folio+0x26d/0x540 [ 76.854970][ T5318] page_cache_ra_order+0x6bc/0xe70 [ 76.857145][ T5318] do_sync_mmap_readahead+0x25e/0x7a0 [ 76.859506][ T5318] ? __pfx_do_sync_mmap_readahead+0x10/0x10 [ 76.862117][ T5318] ? count_memcg_event_mm+0x1d/0x250 [ 76.864522][ T5318] ? count_memcg_event_mm+0x1d/0x250 [ 76.866704][ T5318] filemap_fault+0x6b9/0x12b0 [ 76.868672][ T5318] ? __pfx_filemap_fault+0x10/0x10 [ 76.870760][ T5318] __do_fault+0x138/0x390 [ 76.872657][ T5318] __handle_mm_fault+0x1847/0x5400 [ 76.874976][ T5318] ? lock_vma_under_rcu+0x1a3/0x450 [ 76.877225][ T5318] ? __pfx___handle_mm_fault+0x10/0x10 [ 76.879421][ T5318] ? lock_vma_under_rcu+0x3d2/0x450 [ 76.881495][ T5318] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 76.883705][ T5318] ? __rseq_handle_notify_resume+0x384/0x1220 [ 76.886097][ T5318] handle_mm_fault+0x40a/0x8e0 [ 76.887935][ T5318] do_user_addr_fault+0xa7c/0x1380 [ 76.889899][ T5318] ? rcu_is_watching+0x15/0xb0 [ 76.891821][ T5318] ? trace_page_fault_user+0x84/0x1e0 [ 76.894193][ T5318] exc_page_fault+0x82/0x100 [ 76.896206][ T5318] asm_exc_page_fault+0x26/0x30 [ 76.898240][ T5318] RIP: 0033:0x7ff4abe55601 [ 76.900242][ T5318] Code: 48 8b 54 24 08 48 85 d2 74 17 8b 44 24 18 0f c8 89 c0 48 89 44 24 18 48 83 fa 01 0f 85 b3 01 00 00 48 8b 44 24 10 8b 54 24 18 <89> 10 e9 15 fd ff ff 48 8b 44 24 10 8b 10 48 8b 44 24 08 48 85 c0 [ 76.908282][ T5318] RSP: 002b:00007ffd5f11e2b0 EFLAGS: 00010246 [ 76.910880][ T5318] RAX: 0000200000000980 RBX: 0000000000000004 RCX: 0000000000000000 [ 76.914207][ T5318] RDX: 0000000000004000 RSI: 0000000000000000 RDI: 000055555637b3c8 [ 76.917658][ T5318] RBP: 00007ffd5f11e3b8 R08: 0000000000000000 R09: 0000000000000000 [ 76.920999][ T5318] R10: 0000000000000000 R11: 0000000000000002 R12: 00007ff4ac1e5fac [ 76.924209][ T5318] R13: 00007ff4ac1e5fa0 R14: fffffffffffffffe R15: 0000000000000003 [ 76.927330][ T5318] [ 76.928578][ T5318] Modules linked in: [ 76.930608][ T5318] ---[ end trace 0000000000000000 ]--- [ 76.938359][ T5318] RIP: 0010:__filemap_add_folio+0x11ad/0x12f0 [ 76.940958][ T5318] Code: 8b c6 ff 4c 89 e7 48 c7 c6 00 75 74 8b e8 7b 63 2e ff 90 0f 0b e8 03 8b c6 ff 4c 89 e7 48 c7 c6 e0 6b 74 8b e8 64 63 2e ff 90 <0f> 0b e8 ec 8a c6 ff 4c 89 e7 48 c7 c6 00 75 74 8b e8 4d 63 2e ff [ 76.949768][ T5318] RSP: 0018:ffffc9000d3a7680 EFLAGS: 00010246 [ 76.952465][ T5318] RAX: 62e7c9681f1f3f00 RBX: 0000000000000000 RCX: 0000000000000000 [ 76.956623][ T5318] RDX: 0000000000000007 RSI: ffffffff8d7100d2 RDI: 00000000ffffffff [ 76.960052][ T5318] RBP: ffffc9000d3a77e8 R08: ffffffff8f7cfb77 R09: 1ffffffff1ef9f6e [ 76.963899][ T5318] R10: dffffc0000000000 R11: fffffbfff1ef9f6f R12: ffffea00010a4540 [ 76.967302][ T5318] R13: dffffc0000000000 R14: ffffea00010a4548 R15: 0000000000000002 [ 76.970615][ T5318] FS: 000055555637b500(0000) GS:ffff88808d732000(0000) knlGS:0000000000000000 [ 76.974835][ T5318] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 76.977414][ T5318] CR2: 00007f206eecfad0 CR3: 000000000b551000 CR4: 0000000000352ef0 [ 76.980894][ T5318] Kernel panic - not syncing: Fatal exception [ 76.983850][ T5318] Kernel Offset: disabled [ 76.985691][ T5318] Rebooting in 86400 seconds..