mlock_drain_local+0x353/0x4e0 mm/mlock.c:219
 faultin_page_range+0x2a4/0x9e0 mm/gup.c:1914
 madvise_populate mm/madvise.c:977 [inline]
 madvise_do_behavior+0x354/0x510 mm/madvise.c:1914
 do_madvise+0x238/0x290 mm/madvise.c:2014
 __do_sys_madvise mm/madvise.c:2023 [inline]
 __se_sys_madvise mm/madvise.c:2021 [inline]
 __x64_sys_madvise+0xa9/0x110 mm/madvise.c:2021
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x123/0x790 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
------------[ cut here ]------------
kernel BUG at mm/filemap.c:858!
Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI
CPU: 0 UID: 0 PID: 13569 Comm: syz.0.2075 Tainted: G             L      syzkaller #0 PREEMPT(full) 
Tainted: [L]=SOFTLOCKUP
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
RIP: 0010:__filemap_add_folio+0x108b/0x1370 mm/filemap.c:858
Code: 79 bf ff 48 c7 c6 40 cb fe 8b 4c 89 ef e8 3d fc 12 00 90 0f 0b e8 c5 79 bf ff 48 c7 c6 a0 cb fe 8b 4c 89 ef e8 26 fc 12 00 90 <0f> 0b e8 ae 79 bf ff 48 c7 c6 20 cc fe 8b 4c 89 ef e8 0f fc 12 00
RSP: 0018:ffffc90005d3f7d0 EFLAGS: 00010293
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
RDX: ffff8880489a2580 RSI: ffffffff825f8308 RDI: ffff8880489a2a44
RBP: 0000000000112cc0 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000002
R13: ffffea000162fe00 R14: 0000000000000000 R15: 1ffff92000ba7f26
FS:  000055558f467500(0000) GS:ffff888123b5f000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fa8de5556c8 CR3: 0000000033030000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 filemap_add_folio+0x1d8/0x6a0 mm/filemap.c:972
 ra_alloc_folio mm/readahead.c:470 [inline]
 page_cache_ra_order+0x602/0xed0 mm/readahead.c:535
 do_sync_mmap_readahead mm/filemap.c:3443 [inline]
 filemap_fault+0x1943/0x3130 mm/filemap.c:3597
 __do_fault+0x10b/0x440 mm/memory.c:5565
 do_shared_fault mm/memory.c:6064 [inline]
 do_fault+0x585/0x1830 mm/memory.c:6138
 do_pte_missing mm/memory.c:4700 [inline]
 handle_pte_fault mm/memory.c:6558 [inline]
 __handle_mm_fault+0x150b/0x2f60 mm/memory.c:6707
 handle_mm_fault+0x363/0xa20 mm/memory.c:6876
 do_user_addr_fault+0x59c/0x12f0 arch/x86/mm/fault.c:1343
 handle_page_fault arch/x86/mm/fault.c:1483 [inline]
 exc_page_fault+0x6f/0xd0 arch/x86/mm/fault.c:1536
 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:595
RIP: 0033:0x7f2533e6b528
Code: 25 00 00 00 00 48 8d b8 d8 fe ff ff 4c 89 74 24 50 e8 ac 3c 0d 00 85 c0 75 13 48 8b 84 24 80 00 00 00 48 8b b4 24 c0 00 00 00 <48> 89 30 64 f0 83 2c 25 a0 ff ff ff 01 4c 8b 74 24 50 e9 61 f5 ff
RSP: 002b:00007ffedc5f8ff0 EFLAGS: 00010246
RAX: 0000200000001ac0 RBX: 0000000000000002 RCX: 000000000000002a
RDX: d03c36293e6b0bc5 RSI: 0000000000000000 RDI: 000055558f4673d8
RBP: fffffffffffffffe R08: 0000001b31720000 R09: 000000000000000f
R10: 00001fffffffffff R11: 0000000000000006 R12: 00007ffedc5f9110
R13: 00007f253422627c R14: 00000000000a70c2 R15: 00007f2534226270
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:__filemap_add_folio+0x108b/0x1370 mm/filemap.c:858
Code: 79 bf ff 48 c7 c6 40 cb fe 8b 4c 89 ef e8 3d fc 12 00 90 0f 0b e8 c5 79 bf ff 48 c7 c6 a0 cb fe 8b 4c 89 ef e8 26 fc 12 00 90 <0f> 0b e8 ae 79 bf ff 48 c7 c6 20 cc fe 8b 4c 89 ef e8 0f fc 12 00
RSP: 0018:ffffc90005d3f7d0 EFLAGS: 00010293

RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
RDX: ffff8880489a2580 RSI: ffffffff825f8308 RDI: ffff8880489a2a44
RBP: 0000000000112cc0 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000002
R13: ffffea000162fe00 R14: 0000000000000000 R15: 1ffff92000ba7f26
FS:  000055558f467500(0000) GS:ffff888123b5f000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000110c2f8538 CR3: 0000000033030000 CR4: 00000000003526f0