raw: 0000000000000003 0000000000000000 00000001ffffffff ffff0000cb67f500 page dumped because: VM_BUG_ON_FOLIO(folio_order(folio) < mapping_min_folio_order(mapping)) ------------[ cut here ]------------ kernel BUG at mm/filemap.c:859! Internal error: Oops - BUG: 00000000f2000800 [#1] SMP Modules linked in: CPU: 0 UID: 0 PID: 10719 Comm: syz.4.1203 Not tainted syzkaller #0 PREEMPT Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : __filemap_add_folio+0xdec/0x1164 mm/filemap.c:858 lr : __filemap_add_folio+0xdec/0x1164 mm/filemap.c:858 sp : ffff800092756f60 x29: ffff8000927570a0 x28: 1fffffbff86325d9 x27: 1fffffbff86325d8 x26: ffff0000c14b7bd0 x25: 0000000000000000 x24: ffff800092757020 x23: 0000000000000004 x22: ffff7000124eae00 x21: fffffdffc3192ec0 x20: 0000000000000000 x19: ffff0000c14b7ce8 x18: 1fffe00035bc5428 x17: 6e697070616d203c x16: 20296f696c6f6628 x15: 726564726f5f6f69 x14: 6c6f66284f494c4f x13: 0000000000000001 x12: 0000000000000000 x11: 0000000000000000 x10: 0000000000080000 x9 : 47f21f48451ba200 x8 : 47f21f48451ba200 x7 : ffff80008048de94 x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff800080498bc8 x2 : 0000000100000000 x1 : ffff0000d0ae3a80 x0 : 0000000000000001 Call trace: __filemap_add_folio+0xdec/0x1164 mm/filemap.c:858 (P) filemap_add_folio+0x4e4/0x7fc mm/filemap.c:966 ra_alloc_folio mm/readahead.c:470 [inline] page_cache_ra_order+0x55c/0xe20 mm/readahead.c:535 do_sync_mmap_readahead+0x740/0xaa8 mm/filemap.c:-1 filemap_fault+0x6b4/0x1498 mm/filemap.c:3582 __do_fault+0xf4/0x4a8 mm/memory.c:5425 do_shared_fault mm/memory.c:5924 [inline] do_fault mm/memory.c:5998 [inline] do_pte_missing+0x4f0/0x2a24 mm/memory.c:4566 handle_pte_fault mm/memory.c:6379 [inline] __handle_mm_fault mm/memory.c:6517 [inline] handle_mm_fault+0x15a4/0x253c mm/memory.c:6686 do_page_fault+0x4b0/0xb88 arch/arm64/mm/fault.c:752 do_translation_fault+0xc4/0x114 arch/arm64/mm/fault.c:845 do_mem_abort+0x70/0x194 arch/arm64/mm/fault.c:985 el1_abort+0x50/0x74 arch/arm64/kernel/entry-common.c:322 el1h_64_sync_handler+0xdc/0x130 arch/arm64/kernel/entry-common.c:449 el1h_64_sync+0x6c/0x70 arch/arm64/kernel/entry.S:589 __uaccess_mask_ptr arch/arm64/include/asm/uaccess.h:167 [inline] (P) __sys_sendmmsg+0x374/0x580 net/socket.c:2832 (P) __do_sys_sendmmsg net/socket.c:2854 [inline] __se_sys_sendmmsg net/socket.c:2851 [inline] __arm64_sys_sendmmsg+0xa4/0xc0 net/socket.c:2851 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x244 arch/arm64/kernel/syscall.c:49 el0_svc_common+0xec/0x23c arch/arm64/kernel/syscall.c:121 do_el0_svc+0x4c/0x5c arch/arm64/kernel/syscall.c:140 el0_svc+0x64/0x260 arch/arm64/kernel/entry-common.c:736 el0t_64_sync_handler+0x48/0x148 arch/arm64/kernel/entry-common.c:755 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:594 Code: 90030881 91210021 aa1503e0 97ddfa3f (d4210000) ---[ end trace 0000000000000000 ]---