------------[ cut here ]------------
kernel BUG at [] mm/filemap.c:858!
Kernel BUG [#1]
Modules linked in:
CPU: 0 UID: 0 PID: 5914 Comm: syz.0.683 Tainted: G             L       syzkaller #0 PREEMPT 
Tainted: [L]=SOFTLOCKUP
Hardware name: riscv-virtio,qemu (DT)
epc : __filemap_add_folio+0xff0/0x13cc mm/filemap.c:858
 ra : __filemap_add_folio+0xff0/0x13cc mm/filemap.c:858
epc : ffffffff8096751e ra : ffffffff8096751e sp : ffff8f8003c670d0
 gp : ffffffff8b148680 tp : ffffaf801d051ac0 t0 : ffffffff8850c0b8
 t1 : ffffffff8007e872 t2 : 3a6563617274206b s0 : ffff8f8003c67290
 s1 : 0000000000112cc0 a0 : ffffaf801d051f84 a1 : ffffffff88480438
 a2 : 0000000000080000 a3 : ffffffff80a8a5bc a4 : ffff8f80052a74f8
 a5 : 000000000018b4f8 a6 : 0000000000000003 a7 : 0000000041b58ab3
 s2 : 0000000000000000 s3 : 0000000000112cc0 s4 : 0000000000000004
 s5 : ffff8d8002cf0a40 s6 : 0000000000000000 s7 : 0000000000000000
 s8 : ffffaf801710fbc8 s9 : ffff8f8003c672e0 s10: ffff8f8003c67220
 s11: 0000000000000000 t3 : ffffffff882fcf60 t4 : fffffffef12c1b7b
 t5 : fffffffef12c1b7c t6 : 0000000000000002 ssp : 0000000000000000
status: 0000000200000120 badaddr: ffffffff8096751e cause: 0000000000000003
[<ffffffff8096751e>] __filemap_add_folio+0xff0/0x13cc mm/filemap.c:858
[<ffffffff80967aae>] filemap_add_folio+0x1b4/0xb32 mm/filemap.c:971
[<ffffffff8099f25e>] ra_alloc_folio mm/readahead.c:470 [inline]
[<ffffffff8099f25e>] page_cache_ra_order+0x600/0x13de mm/readahead.c:535
[<ffffffff8096f98a>] do_sync_mmap_readahead mm/filemap.c:3461 [inline]
[<ffffffff8096f98a>] filemap_fault+0x17f4/0x2e3c mm/filemap.c:3615
[<ffffffff80aa7bce>] __do_fault+0xee/0x700 mm/memory.c:5634
[<ffffffff80abfd40>] do_read_fault mm/memory.c:6069 [inline]
[<ffffffff80abfd40>] do_fault+0xac8/0x16c2 mm/memory.c:6203
[<ffffffff80ad1f56>] do_pte_missing mm/memory.c:4763 [inline]
[<ffffffff80ad1f56>] handle_pte_fault mm/memory.c:6627 [inline]
[<ffffffff80ad1f56>] __handle_mm_fault+0x132a/0x2174 mm/memory.c:6776
[<ffffffff80ad2ffc>] handle_mm_fault+0x25c/0x89e mm/memory.c:6943
[<ffffffff80a919de>] faultin_page mm/gup.c:1126 [inline]
[<ffffffff80a919de>] __get_user_pages+0x9f4/0x1bf2 mm/gup.c:1428
[<ffffffff80a98c6c>] populate_vma_page_range+0x266/0x3f2 mm/gup.c:1864
[<ffffffff80a99846>] __mm_populate+0x10e/0x3ae mm/gup.c:1967
[<ffffffff80a2f0d4>] mm_populate include/linux/mm.h:4447 [inline]
[<ffffffff80a2f0d4>] vm_mmap_pgoff+0x406/0x440 mm/util.c:586
[<ffffffff80ae540c>] ksys_mmap_pgoff+0x2c4/0x706 mm/mmap.c:619
[<ffffffff80077ac4>] riscv_sys_mmap arch/riscv/kernel/sys_riscv.c:29 [inline]
[<ffffffff80077ac4>] __do_sys_mmap arch/riscv/kernel/sys_riscv.c:38 [inline]
[<ffffffff80077ac4>] __se_sys_mmap arch/riscv/kernel/sys_riscv.c:34 [inline]
[<ffffffff80077ac4>] __riscv_sys_mmap+0x11c/0x18c arch/riscv/kernel/sys_riscv.c:34
[<ffffffff8007bcb0>] syscall_handler+0x92/0x114 arch/riscv/include/asm/syscall.h:112
[<ffffffff866f763a>] do_trap_ecall_u+0x4ca/0x658 arch/riscv/kernel/traps.c:341
[<ffffffff86725118>] handle_exception+0x168/0x174 arch/riscv/kernel/entry.S:237
Code: f240 8556 b597 063e 8593 4925 3097 0012 80e7 0340 (9002) d097 
---[ end trace 0000000000000000 ]---
----------------
Code disassembly (best guess):
   0:	f240                	fsw	fs0,36(a2)
   2:	8556                	mv	a0,s5
   4:	063eb597          	auipc	a1,0x63eb
   8:	49258593          	addi	a1,a1,1170 # 0x63eb496
   c:	00123097          	auipc	ra,0x123
  10:	034080e7          	jalr	52(ra) # 0x123040
* 14:	9002                	ebreak <-- trapping instruction
  16:	97d0                	.short	0xd097