handle_page_fault arch/x86/mm/fault.c:1483 [inline] exc_page_fault+0x6f/0xd0 arch/x86/mm/fault.c:1536 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:595 page last free pid 6635 tgid 6633 ts 163106200689 stack trace: reset_page_owner include/linux/page_owner.h:26 [inline] __free_pages_prepare mm/page_alloc.c:1418 [inline] free_unref_folios+0xa4a/0x1790 mm/page_alloc.c:3022 folios_put_refs+0x585/0xaa0 mm/folio.c:1036 folio_batch_release include/linux/folio_batch.h:101 [inline] truncate_inode_pages_range+0x30c/0x1040 mm/truncate.c:408 kill_bdev block/bdev.c:90 [inline] set_blocksize+0x2d1/0x460 block/bdev.c:206 blkdev_bszset+0x19b/0x240 block/ioctl.c:641 blkdev_ioctl+0x513/0x6f0 block/ioctl.c:780 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:597 [inline] __se_sys_ioctl fs/ioctl.c:583 [inline] __x64_sys_ioctl+0x18e/0x210 fs/ioctl.c:583 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline] do_syscall_64+0x123/0x790 arch/x86/entry/syscall_64.c:84 entry_SYSCALL_64_after_hwframe+0x77/0x7f ------------[ cut here ]------------ kernel BUG at mm/filemap.c:858! Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI CPU: 0 UID: 0 PID: 6633 Comm: syz.4.262 Tainted: G Y syzkaller #0 PREEMPT(full) Tainted: [Y]=FORCED_BIND Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 RIP: 0010:__filemap_add_folio+0x1033/0x12f0 mm/filemap.c:858 Code: 4b bf ff 48 c7 c6 00 e8 fe 8b 4c 89 ef e8 85 fa 12 00 90 0f 0b e8 9d 4b bf ff 48 c7 c6 60 e8 fe 8b 4c 89 ef e8 6e fa 12 00 90 <0f> 0b e8 86 4b bf ff 90 0f 0b 90 e9 76 fe ff ff e8 78 4b bf ff 90 RSP: 0018:ffffc900066bf7d8 EFLAGS: 00010293 RAX: 0000000000000000 RBX: 0000000000112cc0 RCX: 0000000000000000 RDX: ffff88802b233e80 RSI: ffffffff82601618 RDI: ffff88802b234344 RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000002 R13: ffffea0000e338c0 R14: 0000000000000000 R15: 1ffff92000cd7f26 FS: 0000555567293500(0000) GS:ffff88812292a000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f1c6ce57ae0 CR3: 000000007622c000 CR4: 0000000000350ef0 Call Trace: filemap_add_folio+0x1d3/0x640 mm/filemap.c:972 ra_alloc_folio mm/readahead.c:470 [inline] page_cache_ra_order+0x602/0xed0 mm/readahead.c:535 do_sync_mmap_readahead mm/filemap.c:3443 [inline] filemap_fault+0x1943/0x3130 mm/filemap.c:3597 __do_fault+0x10b/0x440 mm/memory.c:5565 do_shared_fault mm/memory.c:6064 [inline] do_fault+0x585/0x1830 mm/memory.c:6138 do_pte_missing mm/memory.c:4700 [inline] handle_pte_fault mm/memory.c:6558 [inline] __handle_mm_fault+0x150b/0x2f60 mm/memory.c:6707 handle_mm_fault+0x363/0xa20 mm/memory.c:6876 do_user_addr_fault+0x59c/0x12f0 arch/x86/mm/fault.c:1343 handle_page_fault arch/x86/mm/fault.c:1483 [inline] exc_page_fault+0x6f/0xd0 arch/x86/mm/fault.c:1536 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:595 RIP: 0033:0x7f3abe76dc88 Code: fc 89 37 c3 c5 fa 6f 06 c5 fa 6f 4c 16 f0 c5 fa 7f 07 c5 fa 7f 4c 17 f0 c3 66 0f 1f 84 00 00 00 00 00 48 8b 4c 16 f8 48 8b 36 <48> 89 37 48 89 4c 17 f8 c3 c5 fe 6f 54 16 e0 c5 fe 6f 5c 16 c0 c5 RSP: 002b:00007fffc2b42748 EFLAGS: 00010202 RAX: 00002000000000c0 RBX: 0000000000000004 RCX: 0030626c6c756e2f RDX: 000000000000000c RSI: 6c756e2f7665642f RDI: 00002000000000c0 RBP: fffffffffffffffe R08: 0000001b32720000 R09: 0000000000000001 R10: 7ffffffffffffff3 R11: 0000000000000009 R12: 00007fffc2b42870 R13: 00007f3abea25fac R14: 0000000000027c22 R15: 00007fffc2b42850 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:__filemap_add_folio+0x1033/0x12f0 mm/filemap.c:858 Code: 4b bf ff 48 c7 c6 00 e8 fe 8b 4c 89 ef e8 85 fa 12 00 90 0f 0b e8 9d 4b bf ff 48 c7 c6 60 e8 fe 8b 4c 89 ef e8 6e fa 12 00 90 <0f> 0b e8 86 4b bf ff 90 0f 0b 90 e9 76 fe ff ff e8 78 4b bf ff 90 RSP: 0018:ffffc900066bf7d8 EFLAGS: 00010293 RAX: 0000000000000000 RBX: 0000000000112cc0 RCX: 0000000000000000 RDX: ffff88802b233e80 RSI: ffffffff82601618 RDI: ffff88802b234344 RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000002 R13: ffffea0000e338c0 R14: 0000000000000000 R15: 1ffff92000cd7f26 FS: 0000555567293500(0000) GS:ffff88812292a000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b33713ff8 CR3: 000000007622c000 CR4: 0000000000350ef0