page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x1c pfn:0x52bc4 head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 memcg:ffff88801c2c8d00 flags: 0x4fff00000000041(locked|head|node=1|zone=1|lastcpupid=0x7ff) raw: 04fff00000000041 0000000000000000 dead000000000122 0000000000000000 raw: 000000000000001c 0000000000000000 00000001ffffffff ffff88801c2c8d00 head: 04fff00000000041 0000000000000000 dead000000000122 0000000000000000 head: 000000000000001c 0000000000000000 00000001ffffffff ffff88801c2c8d00 head: 04fff00000000202 ffffea00014af101 00000000ffffffff 00000000ffffffff head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 page dumped because: VM_BUG_ON_FOLIO(folio_order(folio) < mapping_min_folio_order(mapping)) page_owner tracks the page as allocated page last allocated via order 2, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 5319, tgid 5319 (syz.0.0), ts 68232444774, free_ts 68232184916 set_page_owner include/linux/page_owner.h:32 [inline] post_alloc_hook+0x240/0x2a0 mm/page_alloc.c:1704 prep_new_page mm/page_alloc.c:1712 [inline] get_page_from_freelist+0x21e4/0x22c0 mm/page_alloc.c:3669 __alloc_frozen_pages_noprof+0x181/0x370 mm/page_alloc.c:4959 alloc_pages_mpol+0x232/0x4a0 mm/mempolicy.c:2419 alloc_frozen_pages_noprof mm/mempolicy.c:2490 [inline] alloc_pages_noprof+0xa9/0x190 mm/mempolicy.c:2510 folio_alloc_noprof+0x1e/0x30 mm/mempolicy.c:2520 filemap_alloc_folio_noprof+0xdf/0x470 mm/filemap.c:1007 ractl_alloc_folio mm/readahead.c:186 [inline] ra_alloc_folio mm/readahead.c:441 [inline] page_cache_ra_order+0x5e5/0xc70 mm/readahead.c:509 do_sync_mmap_readahead+0x4b5/0x5f0 mm/filemap.c:3271 filemap_fault+0x62a/0x1200 mm/filemap.c:3412 __do_fault+0x138/0x390 mm/memory.c:5169 do_shared_fault mm/memory.c:5654 [inline] do_fault mm/memory.c:5728 [inline] do_pte_missing mm/memory.c:4251 [inline] handle_pte_fault mm/memory.c:6069 [inline] __handle_mm_fault+0x198b/0x5620 mm/memory.c:6212 handle_mm_fault+0x40a/0x8e0 mm/memory.c:6381 do_user_addr_fault+0xa81/0x1390 arch/x86/mm/fault.c:1336 handle_page_fault arch/x86/mm/fault.c:1476 [inline] exc_page_fault+0x76/0xf0 arch/x86/mm/fault.c:1532 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623 page last free pid 5320 tgid 5319 stack trace: reset_page_owner include/linux/page_owner.h:25 [inline] free_pages_prepare mm/page_alloc.c:1248 [inline] free_unref_folios+0xc66/0x14d0 mm/page_alloc.c:2763 folios_put_refs+0x559/0x640 mm/swap.c:992 folio_batch_release include/linux/pagevec.h:101 [inline] truncate_inode_pages_range+0x346/0xda0 mm/truncate.c:383 kill_bdev block/bdev.c:91 [inline] set_blocksize+0x32a/0x500 block/bdev.c:207 blkdev_bszset+0x1ac/0x220 block/ioctl.c:553 blkdev_ioctl+0x430/0x6d0 block/ioctl.c:687 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:907 [inline] __se_sys_ioctl+0xf9/0x170 fs/ioctl.c:893 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f ------------[ cut here ]------------ kernel BUG at mm/filemap.c:868! Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI CPU: 0 UID: 0 PID: 5319 Comm: syz.0.0 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 RIP: 0010:__filemap_add_folio+0x11ad/0x12f0 mm/filemap.c:867 Code: fe c8 ff 4c 89 e7 48 c7 c6 20 37 94 8b e8 fb a3 10 00 90 0f 0b e8 03 fe c8 ff 4c 89 e7 48 c7 c6 00 2e 94 8b e8 e4 a3 10 00 90 <0f> 0b e8 ec fd c8 ff 4c 89 e7 48 c7 c6 20 37 94 8b e8 cd a3 10 00 RSP: 0018:ffffc9000d717680 EFLAGS: 00010246 RAX: fd233906ba916b00 RBX: 0000000000000002 RCX: 0000000000000000 RDX: 0000000000000007 RSI: ffffffff8d98202e RDI: 00000000ffffffff RBP: ffffc9000d7177e8 R08: ffffffff8fa104f7 R09: 1ffffffff1f4209e R10: dffffc0000000000 R11: fffffbfff1f4209f R12: ffffea00014af100 R13: dffffc0000000000 R14: ffffea00014af108 R15: 0000000000000004 FS: 000055558e936500(0000) GS:ffff88808d250000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000020000057eff8 CR3: 0000000042ace000 CR4: 0000000000352ef0 Call Trace: filemap_add_folio+0xd5/0x270 mm/filemap.c:969 ra_alloc_folio mm/readahead.c:448 [inline] page_cache_ra_order+0x74c/0xc70 mm/readahead.c:509 do_sync_mmap_readahead+0x4b5/0x5f0 mm/filemap.c:3271 filemap_fault+0x62a/0x1200 mm/filemap.c:3412 __do_fault+0x138/0x390 mm/memory.c:5169 do_shared_fault mm/memory.c:5654 [inline] do_fault mm/memory.c:5728 [inline] do_pte_missing mm/memory.c:4251 [inline] handle_pte_fault mm/memory.c:6069 [inline] __handle_mm_fault+0x198b/0x5620 mm/memory.c:6212 handle_mm_fault+0x40a/0x8e0 mm/memory.c:6381 do_user_addr_fault+0xa81/0x1390 arch/x86/mm/fault.c:1336 handle_page_fault arch/x86/mm/fault.c:1476 [inline] exc_page_fault+0x76/0xf0 arch/x86/mm/fault.c:1532 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623 RIP: 0033:0x7f3166654e53 Code: 48 85 c0 74 1b 48 83 f8 01 0f 85 3b 03 00 00 0f b7 44 24 18 66 c1 c0 08 0f b7 c0 48 89 44 24 18 48 8b 44 24 10 0f b7 54 24 18 <66> 89 10 e9 82 fe ff ff 48 83 3c 24 08 0f 85 a1 02 00 00 48 8b 44 RSP: 002b:00007ffcdb9c4050 EFLAGS: 00010246 RAX: 000020000057eff8 RBX: 0000000000000002 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055558e9363c8 RBP: 00007ffcdb9c4158 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 00007f31669b5fac R13: 00007f31669b5fa0 R14: fffffffffffffffe R15: 0000000000000003 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:__filemap_add_folio+0x11ad/0x12f0 mm/filemap.c:867 Code: fe c8 ff 4c 89 e7 48 c7 c6 20 37 94 8b e8 fb a3 10 00 90 0f 0b e8 03 fe c8 ff 4c 89 e7 48 c7 c6 00 2e 94 8b e8 e4 a3 10 00 90 <0f> 0b e8 ec fd c8 ff 4c 89 e7 48 c7 c6 20 37 94 8b e8 cd a3 10 00 RSP: 0018:ffffc9000d717680 EFLAGS: 00010246 RAX: fd233906ba916b00 RBX: 0000000000000002 RCX: 0000000000000000 RDX: 0000000000000007 RSI: ffffffff8d98202e RDI: 00000000ffffffff RBP: ffffc9000d7177e8 R08: ffffffff8fa104f7 R09: 1ffffffff1f4209e R10: dffffc0000000000 R11: fffffbfff1f4209f R12: ffffea00014af100 R13: dffffc0000000000 R14: ffffea00014af108 R15: 0000000000000004 FS: 000055558e936500(0000) GS:ffff88808d250000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000020000057eff8 CR3: 0000000042ace000 CR4: 0000000000352ef0