do_filp_open+0x20b/0x470 fs/namei.c:4082
 do_sys_openat2+0x11b/0x1d0 fs/open.c:1437
 do_sys_open fs/open.c:1452 [inline]
 __do_sys_openat fs/open.c:1468 [inline]
 __se_sys_openat fs/open.c:1463 [inline]
 __x64_sys_openat+0x174/0x210 fs/open.c:1463
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xcd/0x4c0 arch/x86/entry/syscall_64.c:94
------------[ cut here ]------------
kernel BUG at mm/filemap.c:867!
Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI
CPU: 0 UID: 0 PID: 6119 Comm: syz.1.36 Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
RIP: 0010:__filemap_add_folio+0xf53/0x11d0 mm/filemap.c:867
Code: cf c7 ff 48 c7 c6 c0 1e b9 8b 4c 89 ef e8 65 13 11 00 90 0f 0b e8 8d cf c7 ff 48 c7 c6 20 1f b9 8b 4c 89 ef e8 4e 13 11 00 90 <0f> 0b e8 76 cf c7 ff 90 0f 0b 90 e9 f2 fb ff ff e8 68 cf c7 ff 48
RSP: 0018:ffffc900058e78b0 EFLAGS: 00010246
RAX: 0000000000080000 RBX: 0000000000000002 RCX: ffffc9000e35f000
RDX: 0000000000080000 RSI: ffffffff81f450f2 RDI: ffff888023704cc4
RBP: 0000000000112cc0 R08: 0000000000000001 R09: 0000000000000001
R10: ffffffff90a81657 R11: 0000000000000001 R12: 0000000000000004
R13: ffffea00015eb500 R14: 000000000003fff8 R15: 0000000000000002
FS:  00007f62ec3f46c0(0000) GS:ffff888124752000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000110c3d7145 CR3: 000000007c478000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 filemap_add_folio+0x10e/0x220 mm/filemap.c:969
 ra_alloc_folio mm/readahead.c:448 [inline]
 page_cache_ra_order+0x586/0xd00 mm/readahead.c:509
 do_sync_mmap_readahead mm/filemap.c:3271 [inline]
 filemap_fault+0x1465/0x26c0 mm/filemap.c:3412
 __do_fault+0x10d/0x490 mm/memory.c:5169
 do_read_fault mm/memory.c:5590 [inline]
 do_fault mm/memory.c:5724 [inline]
 do_pte_missing mm/memory.c:4251 [inline]
 handle_pte_fault mm/memory.c:6069 [inline]
 __handle_mm_fault+0x3c2a/0x5490 mm/memory.c:6212
 handle_mm_fault+0x589/0xd10 mm/memory.c:6381
 do_user_addr_fault+0x60c/0x1370 arch/x86/mm/fault.c:1336
 handle_page_fault arch/x86/mm/fault.c:1476 [inline]
 exc_page_fault+0x5c/0xb0 arch/x86/mm/fault.c:1532
 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623
RIP: 0033:0x7f62eb5729fa
Code: fe 28 7f 27 62 e1 fe 28 7f 6f 01 62 e1 fe 28 7f 77 02 62 e1 fe 28 7f 7f 03 49 83 c0 1f 49 29 d0 48 8d 7c 17 61 e9 e6 04 00 00 <62> e1 fe 28 6f 1e 62 e1 fe 28 6f 56 01 62 b3 7d 20 3f c3 00 c5 fb
RSP: 002b:00007f62ec3f3be8 EFLAGS: 00010246
RAX: 00007f62ec3f3c10 RBX: 0000000000000000 RCX: 0000000000000040
RDX: 00000000000003ff RSI: 00002000000001c0 RDI: 00007f62ec3f3c10
RBP: 00007f62ec3f3c10 R08: 00000000000003ff R09: 0000000000000000
R10: 00002000000001c0 R11: 0000000000000000 R12: cccccccccccccccd
R13: 0000000000000001 R14: 00007f62eb7b6080 R15: 00007ffd3525ee48
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:__filemap_add_folio+0xf53/0x11d0 mm/filemap.c:867
Code: cf c7 ff 48 c7 c6 c0 1e b9 8b 4c 89 ef e8 65 13 11 00 90 0f 0b e8 8d cf c7 ff 48 c7 c6 20 1f b9 8b 4c 89 ef e8 4e 13 11 00 90 <0f> 0b e8 76 cf c7 ff 90 0f 0b 90 e9 f2 fb ff ff e8 68 cf c7 ff 48
RSP: 0018:ffffc900058e78b0 EFLAGS: 00010246
RAX: 0000000000080000 RBX: 0000000000000002 RCX: ffffc9000e35f000
RDX: 0000000000080000 RSI: ffffffff81f450f2 RDI: ffff888023704cc4
RBP: 0000000000112cc0 R08: 0000000000000001 R09: 0000000000000001
R10: ffffffff90a81657 R11: 0000000000000001 R12: 0000000000000004
R13: ffffea00015eb500 R14: 000000000003fff8 R15: 0000000000000002
FS:  00007f62ec3f46c0(0000) GS:ffff888124752000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f1fe9780ab8 CR3: 000000007c478000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400