__sock_release+0xb3/0x260 net/socket.c:662 sock_close+0x1c/0x30 net/socket.c:1455 __fput+0x3ff/0xb40 fs/file_table.c:469 task_work_run+0x150/0x240 kernel/task_work.c:233 exit_task_work include/linux/task_work.h:40 [inline] do_exit+0x829/0x2aa0 kernel/exit.c:971 ------------[ cut here ]------------ kernel BUG at mm/filemap.c:858! Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI CPU: 2 UID: 0 PID: 10939 Comm: syz.4.1396 Tainted: G L syzkaller #0 PREEMPT(full) Tainted: [L]=SOFTLOCKUP Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 RIP: 0010:__filemap_add_folio+0xfcf/0x1280 mm/filemap.c:858 Code: 5e c5 ff 48 c7 c6 c0 2f bd 8b 4c 89 ef e8 d9 3f 12 00 90 0f 0b e8 51 5e c5 ff 48 c7 c6 20 30 bd 8b 4c 89 ef e8 c2 3f 12 00 90 <0f> 0b e8 3a 5e c5 ff 90 0f 0b 90 e9 4b fe ff ff e8 2c 5e c5 ff 90 RSP: 0018:ffffc900036ee890 EFLAGS: 00010293 RAX: 0000000000000000 RBX: 0000000000112cc0 RCX: ffffc900036ee774 RDX: ffff8880226a8000 RSI: ffffffff82557c28 RDI: ffff8880226a8484 RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000002 R13: ffffea00006dabc0 R14: 0000000000000000 R15: 1ffff920006ddd3c FS: 00007fa9b7a036c0(0000) GS:ffff8880d654d000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f123dd456b8 CR3: 0000000037678000 CR4: 0000000000352ef0 Call Trace: filemap_add_folio+0x1d8/0x690 mm/filemap.c:966 ra_alloc_folio mm/readahead.c:456 [inline] page_cache_ra_order+0x614/0xf30 mm/readahead.c:515 do_sync_mmap_readahead mm/filemap.c:3400 [inline] filemap_fault+0x191a/0x2eb0 mm/filemap.c:3549 __do_fault+0x10d/0x550 mm/memory.c:5355 do_read_fault mm/memory.c:5790 [inline] do_fault+0xaf9/0x1a00 mm/memory.c:5924 do_pte_missing mm/memory.c:4469 [inline] handle_pte_fault mm/memory.c:6308 [inline] __handle_mm_fault+0x180f/0x2b60 mm/memory.c:6446 handle_mm_fault+0x36d/0xa20 mm/memory.c:6615 faultin_page mm/gup.c:1126 [inline] __get_user_pages+0xf9c/0x34d0 mm/gup.c:1428 __get_user_pages_locked mm/gup.c:1692 [inline] get_dump_page+0x27e/0x3d0 mm/gup.c:2192 dump_user_range+0x18d/0xb50 fs/coredump.c:1367 elf_core_dump+0x2d16/0x3c60 fs/binfmt_elf.c:2111 coredump_write fs/coredump.c:1050 [inline] do_coredump fs/coredump.c:1127 [inline] vfs_coredump+0x27b4/0x5570 fs/coredump.c:1201 get_signal+0x1f2a/0x21e0 kernel/signal.c:3019 arch_do_signal_or_restart+0x91/0x7a0 arch/x86/kernel/signal.c:337 __exit_to_user_mode_loop kernel/entry/common.c:64 [inline] exit_to_user_mode_loop kernel/entry/common.c:98 [inline] __exit_to_user_mode_prepare include/linux/irq-entry-common.h:226 [inline] irqentry_exit_to_user_mode_prepare include/linux/irq-entry-common.h:270 [inline] irqentry_exit_to_user_mode include/linux/irq-entry-common.h:339 [inline] irqentry_exit+0x1f8/0x670 kernel/entry/common.c:219 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:618 RIP: 0033:0x0 Code: Unable to access opcode bytes at 0xffffffffffffffd6. RSP: 002b:00002000000002be EFLAGS: 00010217 RAX: 0000000000000000 RBX: 0000000000000058 RCX: 00007fa9b6b9bf79 RDX: 00007fa9b7a02f10 RSI: 0000000000000058 RDI: 00007fa9b7a02f10 RBP: 00007fa9b6c327e0 R08: 0000000000000000 R09: 0000000000000058 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fa9b6e16128 R14: 00007fa9b6e16090 R15: 00007ffe4b07ca18 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:__filemap_add_folio+0xfcf/0x1280 mm/filemap.c:858 Code: 5e c5 ff 48 c7 c6 c0 2f bd 8b 4c 89 ef e8 d9 3f 12 00 90 0f 0b e8 51 5e c5 ff 48 c7 c6 20 30 bd 8b 4c 89 ef e8 c2 3f 12 00 90 <0f> 0b e8 3a 5e c5 ff 90 0f 0b 90 e9 4b fe ff ff e8 2c 5e c5 ff 90 RSP: 0018:ffffc900036ee890 EFLAGS: 00010293 RAX: 0000000000000000 RBX: 0000000000112cc0 RCX: ffffc900036ee774 RDX: ffff8880226a8000 RSI: ffffffff82557c28 RDI: ffff8880226a8484 RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000002 R13: ffffea00006dabc0 R14: 0000000000000000 R15: 1ffff920006ddd3c FS: 00007fa9b7a036c0(0000) GS:ffff8880d654d000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b2ef23ffc CR3: 0000000037678000 CR4: 0000000000352ef0