__vmalloc_node_noprof+0xc2/0x110 mm/vmalloc.c:4149 alloc_thread_stack_node kernel/fork.c:359 [inline] dup_task_struct+0x228/0x9a0 kernel/fork.c:926 copy_process+0x4ea/0x3950 kernel/fork.c:2056 kernel_clone+0x21e/0x820 kernel/fork.c:2655 user_mode_thread+0xdd/0x140 kernel/fork.c:2731 call_usermodehelper_exec_work+0x5c/0x230 kernel/umh.c:171 process_one_work+0x93a/0x15a0 kernel/workqueue.c:3279 process_scheduled_works kernel/workqueue.c:3362 [inline] worker_thread+0x9b0/0xee0 kernel/workqueue.c:3443 kthread+0x711/0x8a0 kernel/kthread.c:463 ret_from_fork+0x599/0xb30 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 ------------[ cut here ]------------ kernel BUG at mm/filemap.c:859! Oops: invalid opcode: 0000 [#1] SMP KASAN PTI CPU: 0 UID: 0 PID: 6591 Comm: syz.0.3816 Tainted: G L syzkaller #0 PREEMPT(full) Tainted: [L]=SOFTLOCKUP Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 RIP: 0010:__filemap_add_folio+0x118b/0x12d0 mm/filemap.c:858 Code: 89 c7 ff 4c 89 e7 48 c7 c6 40 b4 94 8b e8 bd 9c 2d ff 90 0f 0b e8 b5 89 c7 ff 4c 89 e7 48 c7 c6 20 ab 94 8b e8 a6 9c 2d ff 90 <0f> 0b e8 9e 89 c7 ff 4c 89 e7 48 c7 c6 40 b4 94 8b e8 8f 9c 2d ff RSP: 0018:ffffc9000524f5c0 EFLAGS: 00010246 RAX: 5cc5d79729d28a00 RBX: 0000000000000000 RCX: 0000000000000000 RDX: 0000000000000007 RSI: ffffffff8daa9dc3 RDI: 00000000ffffffff RBP: ffffc9000524f740 R08: ffffffff8fc3d077 R09: 1ffffffff1f87a0e R10: dffffc0000000000 R11: fffffbfff1f87a0f R12: ffffea000088d5c0 R13: dffffc0000000000 R14: ffffea000088d5c8 R15: 0000000000000004 FS: 00007fcfb51b86c0(0000) GS:ffff8881259dc000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fb508364000 CR3: 0000000076396000 CR4: 00000000003526f0 Call Trace: filemap_add_folio+0x26d/0x540 mm/filemap.c:966 ra_alloc_folio mm/readahead.c:453 [inline] page_cache_ra_order+0x6a7/0xe50 mm/readahead.c:512 do_sync_mmap_readahead+0x66a/0x870 mm/filemap.c:3400 filemap_fault+0x6ac/0x1290 mm/filemap.c:3549 __do_fault+0x138/0x390 mm/memory.c:5320 do_read_fault mm/memory.c:5755 [inline] do_fault mm/memory.c:5889 [inline] do_pte_missing+0x2208/0x3330 mm/memory.c:4401 handle_pte_fault mm/memory.c:6273 [inline] __handle_mm_fault mm/memory.c:6411 [inline] handle_mm_fault+0x1b26/0x32b0 mm/memory.c:6580 do_user_addr_fault+0xa7c/0x1380 arch/x86/mm/fault.c:1336 handle_page_fault arch/x86/mm/fault.c:1476 [inline] exc_page_fault+0x82/0x100 arch/x86/mm/fault.c:1532 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:618 RIP: 0033:0x7fcfb4260b40 Code: 46 0a 19 00 31 c0 e8 4f d4 fe ff 48 8d 54 24 60 89 df 31 c0 be 03 55 08 40 e8 dc e7 12 00 41 89 c6 e9 9e fe ff ff 0f 1f 40 00 <48> 8b 4c 06 f8 4c 89 cf 49 89 4c 01 f8 8d 48 ff c1 e9 03 f3 48 a5 RSP: 002b:00007fcfb51b5f70 EFLAGS: 00010216 RAX: 0000000000000012 RBX: 0000000000000007 RCX: 0000000000000012 RDX: 0000000000000100 RSI: 0000200000000000 RDI: 00007fcfb43f1430 RBP: 00007fcfb51b6fe0 R08: 0000000000000080 R09: 00007fcfb51b5fd8 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502 R13: 0000000800000000 R14: 0000000000000012 R15: 00007fcfb441f52a Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:__filemap_add_folio+0x118b/0x12d0 mm/filemap.c:858 Code: 89 c7 ff 4c 89 e7 48 c7 c6 40 b4 94 8b e8 bd 9c 2d ff 90 0f 0b e8 b5 89 c7 ff 4c 89 e7 48 c7 c6 20 ab 94 8b e8 a6 9c 2d ff 90 <0f> 0b e8 9e 89 c7 ff 4c 89 e7 48 c7 c6 40 b4 94 8b e8 8f 9c 2d ff RSP: 0018:ffffc9000524f5c0 EFLAGS: 00010246 RAX: 5cc5d79729d28a00 RBX: 0000000000000000 RCX: 0000000000000000 RDX: 0000000000000007 RSI: ffffffff8daa9dc3 RDI: 00000000ffffffff RBP: ffffc9000524f740 R08: ffffffff8fc3d077 R09: 1ffffffff1f87a0e R10: dffffc0000000000 R11: fffffbfff1f87a0f R12: ffffea000088d5c0 R13: dffffc0000000000 R14: ffffea000088d5c8 R15: 0000000000000004 FS: 00007fcfb51b86c0(0000) GS:ffff888125adc000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055b5da834950 CR3: 0000000076396000 CR4: 00000000003526f0