handle_pte_fault mm/memory.c:6317 [inline]
 __handle_mm_fault mm/memory.c:6455 [inline]
 handle_mm_fault+0x1bec/0x3310 mm/memory.c:6624
 do_user_addr_fault+0xa73/0x1340 arch/x86/mm/fault.c:1334
 handle_page_fault arch/x86/mm/fault.c:1474 [inline]
 exc_page_fault+0x6a/0xc0 arch/x86/mm/fault.c:1527
 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:618
page last free pid 5875 tgid 5875 stack trace:
 reset_page_owner include/linux/page_owner.h:25 [inline]
 __free_pages_prepare mm/page_alloc.c:1433 [inline]
 __free_frozen_pages+0xc2b/0xdb0 mm/page_alloc.c:2978
 vfree+0x25a/0x400 mm/vmalloc.c:3479
 process_one_work+0x949/0x1650 kernel/workqueue.c:3279
 process_scheduled_works kernel/workqueue.c:3362 [inline]
 worker_thread+0xb46/0x1140 kernel/workqueue.c:3443
 kthread+0x388/0x470 kernel/kthread.c:467
 ret_from_fork+0x51e/0xb90 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
------------[ cut here ]------------
kernel BUG at mm/filemap.c:859!
Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
CPU: 0 UID: 0 PID: 27177 Comm: syz.9.6088 Tainted: G             L      syzkaller #0 PREEMPT(full) 
Tainted: [L]=SOFTLOCKUP
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
RIP: 0010:__filemap_add_folio+0x11bc/0x1350 mm/filemap.c:858
Code: 5a c5 ff 4c 89 e7 48 c7 c6 e0 a5 d7 8b e8 5c 87 27 ff 90 0f 0b e8 c4 5a c5 ff 4c 89 e7 48 c7 c6 80 9a d7 8b e8 45 87 27 ff 90 <0f> 0b e8 ad 5a c5 ff 4c 89 e7 48 c7 c6 e0 a5 d7 8b e8 2e 87 27 ff
RSP: 0018:ffffc9000d9475c0 EFLAGS: 00010246
RAX: 1769899de7ee1c00 RBX: 0000000000000000 RCX: 0000000000000000
RDX: 0000000000000007 RSI: ffffffff8e01552f RDI: 00000000ffffffff
RBP: ffffc9000d947740 R08: ffffffff9033c7b7 R09: 1ffffffff20678f6
R10: dffffc0000000000 R11: fffffbfff20678f7 R12: ffffea00016f8300
R13: dffffc0000000000 R14: ffffea00016f8308 R15: 0000000000000002
FS:  0000555588e9b500(0000) GS:ffff888124fff000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000110c3a658b CR3: 000000003d0ea000 CR4: 00000000003526f0
DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083
DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 filemap_add_folio+0x264/0x530 mm/filemap.c:966
 ra_alloc_folio mm/readahead.c:456 [inline]
 page_cache_ra_order+0x6b5/0xeb0 mm/readahead.c:515
 do_sync_mmap_readahead+0x6ad/0x8e0 mm/filemap.c:3405
 filemap_fault+0x6e2/0x1320 mm/filemap.c:3554
 __do_fault+0x138/0x390 mm/memory.c:5364
 do_shared_fault mm/memory.c:5863 [inline]
 do_fault mm/memory.c:5937 [inline]
 do_pte_missing+0x5c4/0x3750 mm/memory.c:4477
 handle_pte_fault mm/memory.c:6317 [inline]
 __handle_mm_fault mm/memory.c:6455 [inline]
 handle_mm_fault+0x1bec/0x3310 mm/memory.c:6624
 do_user_addr_fault+0xa73/0x1340 arch/x86/mm/fault.c:1334
 handle_page_fault arch/x86/mm/fault.c:1474 [inline]
 exc_page_fault+0x6a/0xc0 arch/x86/mm/fault.c:1527
 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:618
RIP: 0033:0x7fc18d16b558
Code: fc 89 37 c3 c5 fa 6f 06 c5 fa 6f 4c 16 f0 c5 fa 7f 07 c5 fa 7f 4c 17 f0 c3 66 0f 1f 84 00 00 00 00 00 48 8b 4c 16 f8 48 8b 36 <48> 89 37 48 89 4c 17 f8 c3 c5 fe 6f 54 16 e0 c5 fe 6f 5c 16 c0 c5
RSP: 002b:00007ffc87bdbd98 EFLAGS: 00010246
RAX: 00002000000003c0 RBX: 0000000000000004 RCX: 0031313230386c6e
RDX: 0000000000000008 RSI: 0031313230386c6e RDI: 00002000000003c0
RBP: fffffffffffffffe R08: 0000001b2eb20000 R09: 0000000000000001
R10: 7ffffffffffffff7 R11: 0000000000000009 R12: 00007ffc87bdbec0
R13: 00007fc18d41609c R14: 0000000000141728 R15: 00007fc18d416090
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:__filemap_add_folio+0x11bc/0x1350 mm/filemap.c:858
Code: 5a c5 ff 4c 89 e7 48 c7 c6 e0 a5 d7 8b e8 5c 87 27 ff 90 0f 0b e8 c4 5a c5 ff 4c 89 e7 48 c7 c6 80 9a d7 8b e8 45 87 27 ff 90 <0f> 0b e8 ad 5a c5 ff 4c 89 e7 48 c7 c6 e0 a5 d7 8b e8 2e 87 27 ff
RSP: 0018:ffffc9000d9475c0 EFLAGS: 00010246
RAX: 1769899de7ee1c00 RBX: 0000000000000000 RCX: 0000000000000000
RDX: 0000000000000007 RSI: ffffffff8e01552f RDI: 00000000ffffffff
RBP: ffffc9000d947740 R08: ffffffff9033c7b7 R09: 1ffffffff20678f6
R10: dffffc0000000000 R11: fffffbfff20678f7 R12: ffffea00016f8300
R13: dffffc0000000000 R14: ffffea00016f8308 R15: 0000000000000002
FS:  0000555588e9b500(0000) GS:ffff888124fff000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000110c3a658b CR3: 000000003d0ea000 CR4: 00000000003526f0
DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083
DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400