page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888043ecaaf0 pfn:0x43eca memcg:ffff88801243f300 flags: 0x4fff00000000001(locked|node=1|zone=1|lastcpupid=0x7ff) raw: 04fff00000000001 0000000000000000 dead000000000122 0000000000000000 raw: ffff888043ecaaf0 0000000000000000 00000001ffffffff ffff88801243f300 page dumped because: VM_BUG_ON_FOLIO(folio_order(folio) < mapping_min_folio_order(mapping)) page_owner tracks the page as allocated page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 5326, tgid 5324 (syz.0.0), ts 87113644940, free_ts 83981060076 set_page_owner include/linux/page_owner.h:32 [inline] post_alloc_hook+0x231/0x280 mm/page_alloc.c:1858 prep_new_page mm/page_alloc.c:1866 [inline] get_page_from_freelist+0x24ba/0x2540 mm/page_alloc.c:3946 __alloc_frozen_pages_noprof+0x18d/0x380 mm/page_alloc.c:5226 alloc_pages_mpol+0x235/0x490 mm/mempolicy.c:2490 alloc_frozen_pages_noprof mm/mempolicy.c:2561 [inline] alloc_pages_noprof+0xac/0x2a0 mm/mempolicy.c:2581 folio_alloc_noprof+0x1e/0x30 mm/mempolicy.c:2591 filemap_alloc_folio_noprof+0x111/0x470 mm/filemap.c:1014 ractl_alloc_folio mm/readahead.c:189 [inline] ra_alloc_folio mm/readahead.c:449 [inline] page_cache_ra_order+0x548/0xe80 mm/readahead.c:515 do_sync_mmap_readahead+0x6ad/0x8e0 mm/filemap.c:3406 filemap_fault+0x703/0x1300 mm/filemap.c:3555 __do_fault+0x138/0x2a0 mm/memory.c:5458 do_read_fault mm/memory.c:5893 [inline] do_fault mm/memory.c:6027 [inline] do_pte_missing+0x2093/0x33f0 mm/memory.c:4550 handle_pte_fault mm/memory.c:6411 [inline] __handle_mm_fault mm/memory.c:6549 [inline] handle_mm_fault+0x1bd7/0x3170 mm/memory.c:6718 faultin_page mm/gup.c:1126 [inline] __get_user_pages+0x1683/0x2720 mm/gup.c:1428 populate_vma_page_range+0x2be/0x3c0 mm/gup.c:1860 __mm_populate+0x25f/0x390 mm/gup.c:1963 page last free pid 10 tgid 10 stack trace: reset_page_owner include/linux/page_owner.h:25 [inline] __free_pages_prepare mm/page_alloc.c:1402 [inline] __free_frozen_pages+0xbc7/0xd30 mm/page_alloc.c:2943 __slab_free+0x274/0x2c0 mm/slub.c:5608 qlink_free mm/kasan/quarantine.c:163 [inline] qlist_free_all+0x99/0x100 mm/kasan/quarantine.c:179 kasan_quarantine_reduce+0x148/0x160 mm/kasan/quarantine.c:286 __kasan_slab_alloc+0x22/0x80 mm/kasan/common.c:350 kasan_slab_alloc include/linux/kasan.h:253 [inline] slab_post_alloc_hook mm/slub.c:4569 [inline] slab_alloc_node mm/slub.c:4898 [inline] __kmalloc_cache_noprof+0x2ba/0x660 mm/slub.c:5410 kmalloc_noprof include/linux/slab.h:950 [inline] kzalloc_noprof include/linux/slab.h:1188 [inline] nsim_fib6_rt_create drivers/net/netdevsim/fib.c:547 [inline] nsim_fib6_rt_insert drivers/net/netdevsim/fib.c:752 [inline] nsim_fib6_event drivers/net/netdevsim/fib.c:856 [inline] nsim_fib_event+0xf36/0xa390 drivers/net/netdevsim/fib.c:889 nsim_fib_event_work+0x254/0x3d0 drivers/net/netdevsim/fib.c:1493 process_one_work kernel/workqueue.c:3302 [inline] process_scheduled_works+0xb5d/0x1860 kernel/workqueue.c:3385 worker_thread+0xa53/0xfc0 kernel/workqueue.c:3466 kthread+0x388/0x470 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 ------------[ cut here ]------------ kernel BUG at mm/filemap.c:860! Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI CPU: 0 UID: 0 PID: 5326 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 RIP: 0010:__filemap_add_folio+0x11bc/0x1330 mm/filemap.c:859 Code: a2 c1 ff 4c 89 e7 48 c7 c6 80 cc d7 8b e8 4c f6 23 ff 90 0f 0b e8 54 a2 c1 ff 4c 89 e7 48 c7 c6 e0 c0 d7 8b e8 35 f6 23 ff 90 <0f> 0b e8 3d a2 c1 ff 4c 89 e7 48 c7 c6 80 cc d7 8b e8 1e f6 23 ff RSP: 0018:ffffc9000e00f1e0 EFLAGS: 00010246 RAX: b1740ae3eae0bd00 RBX: 0000000000000000 RCX: 0000000000000000 RDX: 0000000000000007 RSI: ffffffff8dfa8d7d RDI: 00000000ffffffff RBP: ffffc9000e00f360 R08: ffffffff9030ccf7 R09: 1ffffffff206199e R10: dffffc0000000000 R11: fffffbfff206199f R12: ffffea00010fb280 R13: dffffc0000000000 R14: ffffea00010fb288 R15: 0000000000000004 FS: 00007ff093cc86c0(0000) GS:ffff88808c885000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f3685f56720 CR3: 0000000012599000 CR4: 0000000000352ef0 Call Trace: filemap_add_folio+0x264/0x530 mm/filemap.c:967 ra_alloc_folio mm/readahead.c:456 [inline] page_cache_ra_order+0x6a9/0xe80 mm/readahead.c:515 do_sync_mmap_readahead+0x6ad/0x8e0 mm/filemap.c:3406 filemap_fault+0x703/0x1300 mm/filemap.c:3555 __do_fault+0x138/0x2a0 mm/memory.c:5458 do_read_fault mm/memory.c:5893 [inline] do_fault mm/memory.c:6027 [inline] do_pte_missing+0x2093/0x33f0 mm/memory.c:4550 handle_pte_fault mm/memory.c:6411 [inline] __handle_mm_fault mm/memory.c:6549 [inline] handle_mm_fault+0x1bd7/0x3170 mm/memory.c:6718 faultin_page mm/gup.c:1126 [inline] __get_user_pages+0x1683/0x2720 mm/gup.c:1428 populate_vma_page_range+0x2be/0x3c0 mm/gup.c:1860 __mm_populate+0x25f/0x390 mm/gup.c:1963 mm_populate include/linux/mm.h:4137 [inline] vm_mmap_pgoff+0x3aa/0x4f0 mm/util.c:586 ksys_mmap_pgoff+0x51e/0x760 mm/mmap.c:606 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x15f/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7ff092d9cdd9 Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007ff093cc7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 RAX: ffffffffffffffda RBX: 00007ff093016090 RCX: 00007ff092d9cdd9 RDX: 0000000001000002 RSI: 0000000000b36000 RDI: 0000200000000000 RBP: 00007ff092e32d69 R08: 0000000000000006 R09: 000000002c93a000 R10: 0000000000028011 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ff093016128 R14: 00007ff093016090 R15: 00007ffc62f6c018 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:__filemap_add_folio+0x11bc/0x1330 mm/filemap.c:859 Code: a2 c1 ff 4c 89 e7 48 c7 c6 80 cc d7 8b e8 4c f6 23 ff 90 0f 0b e8 54 a2 c1 ff 4c 89 e7 48 c7 c6 e0 c0 d7 8b e8 35 f6 23 ff 90 <0f> 0b e8 3d a2 c1 ff 4c 89 e7 48 c7 c6 80 cc d7 8b e8 1e f6 23 ff RSP: 0018:ffffc9000e00f1e0 EFLAGS: 00010246 RAX: b1740ae3eae0bd00 RBX: 0000000000000000 RCX: 0000000000000000 RDX: 0000000000000007 RSI: ffffffff8dfa8d7d RDI: 00000000ffffffff RBP: ffffc9000e00f360 R08: ffffffff9030ccf7 R09: 1ffffffff206199e R10: dffffc0000000000 R11: fffffbfff206199f R12: ffffea00010fb280 R13: dffffc0000000000 R14: ffffea00010fb288 R15: 0000000000000004 FS: 00007ff093cc86c0(0000) GS:ffff88808c885000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ff093ce99a0 CR3: 0000000012599000 CR4: 0000000000352ef0