class_filename_flags_constructor include/linux/fs.h:2591 [inline] do_sys_openat2+0xc3/0x1d0 fs/open.c:1441 do_sys_open fs/open.c:1448 [inline] __do_sys_openat fs/open.c:1464 [inline] __se_sys_openat fs/open.c:1459 [inline] __x64_sys_openat+0x12d/0x210 fs/open.c:1459 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline] do_syscall_64+0x123/0x790 arch/x86/entry/syscall_64.c:84 entry_SYSCALL_64_after_hwframe+0x77/0x7f ------------[ cut here ]------------ kernel BUG at mm/filemap.c:858! Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI CPU: 2 UID: 0 PID: 8547 Comm: syz.2.645 Tainted: G L syzkaller #0 PREEMPT(full) Tainted: [L]=SOFTLOCKUP Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 RIP: 0010:__filemap_add_folio+0x1033/0x12f0 mm/filemap.c:858 Code: 51 be ff 48 c7 c6 00 f7 1e 8c 4c 89 ef e8 85 fa 12 00 90 0f 0b e8 bd 51 be ff 48 c7 c6 60 f7 1e 8c 4c 89 ef e8 6e fa 12 00 90 <0f> 0b e8 a6 51 be ff 90 0f 0b 90 e9 76 fe ff ff e8 98 51 be ff 90 RSP: 0018:ffffc9000607ec50 EFLAGS: 00010246 RAX: 0000000000080000 RBX: 0000000000112cc0 RCX: ffffc90007b11000 RDX: 0000000000080000 RSI: ffffffff82625c58 RDI: ffff8880264c4fc4 RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000002 R13: ffffea0000bdec80 R14: 0000000000000000 R15: 1ffff92000c0fdb5 FS: 00007faa15bf66c0(0000) GS:ffff8880d46be000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fc3e1d556c8 CR3: 0000000039235000 CR4: 0000000000352ef0 Call Trace: filemap_add_folio+0x1d3/0x640 mm/filemap.c:972 ra_alloc_folio mm/readahead.c:470 [inline] page_cache_ra_order+0x602/0xed0 mm/readahead.c:535 do_sync_mmap_readahead mm/filemap.c:3443 [inline] filemap_fault+0x1943/0x3130 mm/filemap.c:3597 __do_fault+0x10b/0x440 mm/memory.c:5565 do_read_fault mm/memory.c:6000 [inline] do_fault+0xb3f/0x1830 mm/memory.c:6134 do_pte_missing mm/memory.c:4700 [inline] handle_pte_fault mm/memory.c:6558 [inline] __handle_mm_fault+0x150b/0x2f60 mm/memory.c:6707 handle_mm_fault+0x363/0xa20 mm/memory.c:6876 faultin_page mm/gup.c:1126 [inline] __get_user_pages+0x8a9/0x2c20 mm/gup.c:1428 __get_user_pages_locked mm/gup.c:1692 [inline] __gup_longterm_locked+0x87d/0x16f0 mm/gup.c:2471 gup_fast_fallback+0x16dc/0x2790 mm/gup.c:3209 pin_user_pages_fast+0xa7/0xf0 mm/gup.c:3315 iov_iter_extract_user_pages lib/iov_iter.c:1776 [inline] iov_iter_extract_pages+0xac8/0x2100 lib/iov_iter.c:1845 iov_iter_extract_bvecs+0x1fa/0xc90 lib/iov_iter.c:1957 bio_iov_iter_get_pages+0x581/0xcb0 block/bio.c:1334 blkdev_iov_iter_get_pages block/fops.c:49 [inline] __blkdev_direct_IO block/fops.c:220 [inline] blkdev_direct_IO+0x1376/0x2070 block/fops.c:441 blkdev_direct_write block/fops.c:705 [inline] blkdev_write_iter+0x703/0xd30 block/fops.c:773 new_sync_write fs/read_write.c:595 [inline] vfs_write+0x6af/0x1050 fs/read_write.c:687 ksys_write+0x12a/0x250 fs/read_write.c:739 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline] do_syscall_64+0x123/0x790 arch/x86/entry/syscall_64.c:84 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7faa1799f559 Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007faa15bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 00007faa17c25fa0 RCX: 00007faa1799f559 RDX: 00000000fffffe38 RSI: 0000200000001640 RDI: 0000000000000004 RBP: 00007faa17a36b20 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007faa17c26038 R14: 00007faa17c25fa0 R15: 00007ffd3aaa8948 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:__filemap_add_folio+0x1033/0x12f0 mm/filemap.c:858 Code: 51 be ff 48 c7 c6 00 f7 1e 8c 4c 89 ef e8 85 fa 12 00 90 0f 0b e8 bd 51 be ff 48 c7 c6 60 f7 1e 8c 4c 89 ef e8 6e fa 12 00 90 <0f> 0b e8 a6 51 be ff 90 0f 0b 90 e9 76 fe ff ff e8 98 51 be ff 90 RSP: 0018:ffffc9000607ec50 EFLAGS: 00010246 RAX: 0000000000080000 RBX: 0000000000112cc0 RCX: ffffc90007b11000 RDX: 0000000000080000 RSI: ffffffff82625c58 RDI: ffff8880264c4fc4 RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000002 R13: ffffea0000bdec80 R14: 0000000000000000 R15: 1ffff92000c0fdb5 FS: 00007faa15bf66c0(0000) GS:ffff8880d47be000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f852b55da08 CR3: 0000000039235000 CR4: 0000000000352ef0