__do_sys_exit_group kernel/exit.c:1042 [inline] __se_sys_exit_group kernel/exit.c:1040 [inline] __x64_sys_exit_group+0x3e/0x50 kernel/exit.c:1040 x64_sys_call+0x14a9/0x16a0 arch/x86/include/generated/asm/syscalls_64.h:232 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f ------------[ cut here ]------------ kernel BUG at include/linux/mm.h:1460! Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI CPU: 3 UID: 0 PID: 5333 Comm: syz-executor421 Not tainted 6.11.0-syzkaller-02520-gadfc3ded5c33 #0 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 RIP: 0010:folio_get include/linux/mm.h:1460 [inline] RIP: 0010:get_page include/linux/mm.h:1466 [inline] RIP: 0010:iter_folioq_get_pages lib/iov_iter.c:1030 [inline] RIP: 0010:__iov_iter_get_pages_alloc+0x1d1e/0x2240 lib/iov_iter.c:1201 Code: b0 8b 48 89 df e8 12 f5 49 fd 90 0f 0b 49 89 c5 e9 99 f6 ff ff e8 02 74 05 fd 48 c7 c6 00 b4 b0 8b 4c 89 e7 e8 f3 f4 49 fd 90 <0f> 0b e8 eb 73 05 fd 4c 8b 64 24 48 49 83 ec 01 e9 94 fd ff ff 4c RSP: 0018:ffffc90004476dc0 EFLAGS: 00010293 RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffc90004476c68 RDX: ffff888028d44880 RSI: ffffffff848664cd RDI: ffff888028d44cc4 RBP: ffffea00004ace34 R08: 0000000000000000 R09: fffffbfff2028ddb R10: ffffffff90146edf R11: 0000000000000000 R12: ffffea00004ace00 R13: ffff88802adf9000 R14: 0000000000001000 R15: 0000000000001000 FS: 00007f46cd9356c0(0000) GS:ffff88806a900000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000020021000 CR3: 00000000375b0000 CR4: 0000000000350ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: iov_iter_get_pages_alloc2+0x53/0xf0 lib/iov_iter.c:1225 p9_get_mapped_pages.part.0.constprop.0+0x4ca/0x7d0 net/9p/trans_virtio.c:333 p9_get_mapped_pages net/9p/trans_virtio.c:318 [inline] p9_virtio_zc_request+0x1be/0x1390 net/9p/trans_virtio.c:439 p9_client_zc_rpc.constprop.0+0x29a/0x880 net/9p/client.c:808 p9_client_write+0x447/0x680 net/9p/client.c:1631 v9fs_issue_write+0xe2/0x180 fs/9p/vfs_addr.c:59 netfs_do_issue_write+0x92/0x110 fs/netfs/write_issue.c:223 netfs_issue_write fs/netfs/write_issue.c:250 [inline] netfs_advance_write fs/netfs/write_issue.c:291 [inline] netfs_advance_write+0x384/0xbd0 fs/netfs/write_issue.c:259 netfs_write_folio+0xc44/0x18f0 fs/netfs/write_issue.c:469 netfs_advance_writethrough+0xe9/0x250 fs/netfs/write_issue.c:620 netfs_perform_write+0x15c0/0x2250 fs/netfs/buffered_write.c:358 netfs_buffered_write_iter_locked+0x213/0x2c0 fs/netfs/buffered_write.c:445 netfs_file_write_iter+0x1da/0x460 fs/netfs/buffered_write.c:484 v9fs_file_write_iter+0x9b/0x100 fs/9p/vfs_file.c:407 aio_write+0x3b2/0x8c0 fs/aio.c:1633 __io_submit_one fs/aio.c:2005 [inline] io_submit_one+0x1248/0x1da0 fs/aio.c:2052 __do_sys_io_submit fs/aio.c:2111 [inline] __se_sys_io_submit fs/aio.c:2081 [inline] __x64_sys_io_submit+0x19d/0x330 fs/aio.c:2081 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f46cd979839 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f46cd935168 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 RAX: ffffffffffffffda RBX: 00007f46cda02328 RCX: 00007f46cd979839 RDX: 0000000020000700 RSI: 000000000000140b RDI: 00007f46cd90d000 RBP: 00007f46cda02320 R08: 00007f46cd9356c0 R09: 0000000000000000 R10: 00007f46cd9356c0 R11: 0000000000000246 R12: 00007f46cda0232c R13: 0000000000000000 R14: 00007ffdea4bca40 R15: 00007ffdea4bcb28 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:folio_get include/linux/mm.h:1460 [inline] RIP: 0010:get_page include/linux/mm.h:1466 [inline] RIP: 0010:iter_folioq_get_pages lib/iov_iter.c:1030 [inline] RIP: 0010:__iov_iter_get_pages_alloc+0x1d1e/0x2240 lib/iov_iter.c:1201 Code: b0 8b 48 89 df e8 12 f5 49 fd 90 0f 0b 49 89 c5 e9 99 f6 ff ff e8 02 74 05 fd 48 c7 c6 00 b4 b0 8b 4c 89 e7 e8 f3 f4 49 fd 90 <0f> 0b e8 eb 73 05 fd 4c 8b 64 24 48 49 83 ec 01 e9 94 fd ff ff 4c RSP: 0018:ffffc90004476dc0 EFLAGS: 00010293 RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffc90004476c68 RDX: ffff888028d44880 RSI: ffffffff848664cd RDI: ffff888028d44cc4 RBP: ffffea00004ace34 R08: 0000000000000000 R09: fffffbfff2028ddb R10: ffffffff90146edf R11: 0000000000000000 R12: ffffea00004ace00 R13: ffff88802adf9000 R14: 0000000000001000 R15: 0000000000001000 FS: 00007f46cd9356c0(0000) GS:ffff88806a900000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000020021000 CR3: 00000000375b0000 CR4: 0000000000350ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400