__kasan_slab_alloc+0x69/0x90 mm/kasan/common.c:361 kasan_slab_alloc include/linux/kasan.h:253 [inline] slab_post_alloc_hook mm/slub.c:4720 [inline] slab_alloc_node mm/slub.c:5033 [inline] __kmalloc_cache_noprof+0x278/0x6d0 mm/slub.c:5676 _kmalloc_noprof include/linux/slab.h:991 [inline] _kzalloc_noprof include/linux/slab.h:1312 [inline] kobject_uevent_env+0x263/0x18b0 lib/kobject_uevent.c:543 driver_bound+0x13e/0x220 drivers/base/dd.c:470 really_probe+0x3d4/0xa60 drivers/base/dd.c:757 __driver_probe_device+0x210/0x460 drivers/base/dd.c:869 driver_probe_device+0x4a/0x140 drivers/base/dd.c:899 __driver_attach+0x231/0x5b0 drivers/base/dd.c:1300 bus_for_each_dev+0x13e/0x1d0 drivers/base/bus.c:383 bus_add_driver+0x4bf/0x620 drivers/base/bus.c:782 driver_register+0x1e2/0x360 drivers/base/driver.c:174 usb_gadget_register_driver_owner+0x132/0x210 drivers/usb/gadget/udc/core.c:1753 raw_ioctl_run drivers/usb/gadget/legacy/raw_gadget.c:596 [inline] raw_ioctl+0x1a85/0x2b80 drivers/usb/gadget/legacy/raw_gadget.c:1307 ------------[ cut here ]------------ kernel BUG at mm/filemap.c:858! Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI CPU: 0 UID: 0 PID: 6041 Comm: syz.2.79 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 RIP: 0010:__filemap_add_folio+0xfe6/0x1290 mm/filemap.c:858 Code: bc b9 ff 48 c7 c6 40 62 1f 8c 4c 89 ef e8 c2 53 13 00 90 0f 0b e8 ea bb b9 ff 48 c7 c6 a0 62 1f 8c 4c 89 ef e8 ab 53 13 00 90 <0f> 0b e8 d3 bb b9 ff 90 0f 0b 90 e9 12 fc ff ff e8 c5 bb b9 ff 48 RSP: 0018:ffffc9000311f398 EFLAGS: 00010246 RAX: 0000000000080000 RBX: 0000000000112cc0 RCX: ffffc900060c9000 RDX: 0000000000080000 RSI: ffffffff8267fd38 RDI: ffff88802e7e2a44 RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000001 R11: 1ffffffff1ffedb9 R12: 0000000000000002 R13: ffffea0001efc600 R14: 0000000000000000 R15: 1ffff92000623e9e FS: 00007f8b645f66c0(0000) GS:ffff88812247c000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f8b663ed200 CR3: 000000004aed8000 CR4: 00000000003526f0 Call Trace: filemap_add_folio+0x1d3/0x640 mm/filemap.c:971 ra_alloc_folio mm/readahead.c:470 [inline] page_cache_ra_order+0x602/0xed0 mm/readahead.c:535 do_sync_mmap_readahead mm/filemap.c:3461 [inline] filemap_fault+0x1953/0x3140 mm/filemap.c:3615 __do_fault+0x10b/0x440 mm/memory.c:5634 do_read_fault mm/memory.c:6069 [inline] do_fault+0xb3f/0x1890 mm/memory.c:6203 do_pte_missing mm/memory.c:4763 [inline] handle_pte_fault mm/memory.c:6627 [inline] __handle_mm_fault+0x150b/0x2f60 mm/memory.c:6776 handle_mm_fault+0x363/0xa20 mm/memory.c:6943 faultin_page mm/gup.c:1126 [inline] __get_user_pages+0x8a9/0x2c20 mm/gup.c:1428 populate_vma_page_range+0x2bb/0x450 mm/gup.c:1864 __mm_populate+0x107/0x3a0 mm/gup.c:1967 mm_populate include/linux/mm.h:4447 [inline] vm_mmap_pgoff+0x44a/0x490 mm/util.c:586 ksys_mmap_pgoff+0x3cb/0x610 mm/mmap.c:619 __do_sys_mmap arch/x86/kernel/sys_x86_64.c:96 [inline] __se_sys_mmap arch/x86/kernel/sys_x86_64.c:89 [inline] __x64_sys_mmap+0x125/0x190 arch/x86/kernel/sys_x86_64.c:89 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline] do_syscall_64+0x123/0x790 arch/x86/entry/syscall_64.c:84 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f8b6639f882 Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 RSP: 002b:00007f8b645f5f38 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8b6639f882 RDX: 0000000000000001 RSI: 0000000000016000 RDI: 0000000000000000 RBP: 0000000000008001 R08: 0000000000000004 R09: 0000000000018000 R10: 0000000000008001 R11: 0000000000000246 R12: 0000200000000a80 R13: 0000200000000b28 R14: 0000000000000e26 R15: 0000000000000001 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:__filemap_add_folio+0xfe6/0x1290 mm/filemap.c:858 Code: bc b9 ff 48 c7 c6 40 62 1f 8c 4c 89 ef e8 c2 53 13 00 90 0f 0b e8 ea bb b9 ff 48 c7 c6 a0 62 1f 8c 4c 89 ef e8 ab 53 13 00 90 <0f> 0b e8 d3 bb b9 ff 90 0f 0b 90 e9 12 fc ff ff e8 c5 bb b9 ff 48 RSP: 0018:ffffc9000311f398 EFLAGS: 00010246 RAX: 0000000000080000 RBX: 0000000000112cc0 RCX: ffffc900060c9000 RDX: 0000000000080000 RSI: ffffffff8267fd38 RDI: ffff88802e7e2a44 RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000001 R11: 1ffffffff1ffedb9 R12: 0000000000000002 R13: ffffea0001efc600 R14: 0000000000000000 R15: 1ffff92000623e9e FS: 00007f8b645f66c0(0000) GS:ffff88812247c000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b33df8ff8 CR3: 000000004aed8000 CR4: 00000000003526f0