------------[ cut here ]------------ kernel BUG at mm/memory.c:2163! invalid opcode: 0000 [#1] PREEMPT SMP KASAN CPU: 0 PID: 12347 Comm: syz-executor.4 Not tainted 6.3.0-rc5-syzkaller-00153-gaa318c48808c #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 RIP: 0010:vmf_insert_pfn_prot+0x24c/0x460 mm/memory.c:2163 Code: 0f 0b e8 c7 58 c2 ff 4d 89 f7 bf 20 00 00 00 41 83 e7 28 4c 89 fe e8 23 55 c2 ff 49 83 ff 20 0f 85 a5 fe ff ff e8 a4 58 c2 ff <0f> 0b 49 be ff ff ff ff ff ff 0f 00 e8 93 58 c2 ff 4d 21 ee 4c 89 RSP: 0000:ffffc9000b8a7be0 EFLAGS: 00010293 RAX: 0000000000000000 RBX: 1ffff92001714f7e RCX: 0000000000000000 RDX: ffff8880267d0000 RSI: ffffffff81c07f1c RDI: 0000000000000007 RBP: ffff8880291738c0 R08: 0000000000000007 R09: 0000000000000020 R10: 0000000000000020 R11: 0000000000000005 R12: 0000000020000000 R13: 000000000001d7b6 R14: 000000000c140477 R15: 0000000000000020 FS: 0000555555ff6400(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000555798ab09f4 CR3: 000000003192e000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 000000000000000a DR6: 00000000ffff0ff0 DR7: 0000000000000400 Call Trace: drm_gem_shmem_fault+0x1e1/0x290 drivers/gpu/drm/drm_gem_shmem_helper.c:559 __do_fault+0x107/0x600 mm/memory.c:4141 do_cow_fault mm/memory.c:4522 [inline] do_fault mm/memory.c:4623 [inline] handle_pte_fault mm/memory.c:4909 [inline] __handle_mm_fault+0x32ac/0x3e60 mm/memory.c:5051 handle_mm_fault+0x2ba/0x9c0 mm/memory.c:5197 do_user_addr_fault+0x475/0x1230 arch/x86/mm/fault.c:1407 handle_page_fault arch/x86/mm/fault.c:1498 [inline] exc_page_fault+0x98/0x170 arch/x86/mm/fault.c:1554 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:570 RIP: 0033:0x7faf1d086dc6 Code: 4c 29 c7 4c 01 c2 48 3b 15 f7 40 c5 00 0f 87 cc 00 00 00 0f 10 06 0f 10 4e 10 0f 10 56 20 0f 10 5e 30 48 83 c6 40 48 83 ea 40 <0f> 29 07 0f 29 4f 10 0f 29 57 20 0f 29 5f 30 48 83 c7 40 48 83 fa RSP: 002b:00007faf1d2cfb98 EFLAGS: 00010206 RAX: 00000000200001c0 RBX: 0000000000000000 RCX: 00000000200002af RDX: 00000000000000af RSI: 00007faf1cc00378 RDI: 00000000200001d0 RBP: 00007faf1d2cfc58 R08: fffffffffffffff0 R09: 00007faf1cc00000 R10: 00007faf1cc00310 R11: 00000000200001c0 R12: 000000000016d8c6 R13: 00007faf1d2cfc80 R14: 00007faf1d1abf80 R15: 0000000000000032 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:vmf_insert_pfn_prot+0x24c/0x460 mm/memory.c:2163 Code: 0f 0b e8 c7 58 c2 ff 4d 89 f7 bf 20 00 00 00 41 83 e7 28 4c 89 fe e8 23 55 c2 ff 49 83 ff 20 0f 85 a5 fe ff ff e8 a4 58 c2 ff <0f> 0b 49 be ff ff ff ff ff ff 0f 00 e8 93 58 c2 ff 4d 21 ee 4c 89 RSP: 0000:ffffc9000b8a7be0 EFLAGS: 00010293 RAX: 0000000000000000 RBX: 1ffff92001714f7e RCX: 0000000000000000 RDX: ffff8880267d0000 RSI: ffffffff81c07f1c RDI: 0000000000000007 RBP: ffff8880291738c0 R08: 0000000000000007 R09: 0000000000000020 R10: 0000000000000020 R11: 0000000000000005 R12: 0000000020000000 R13: 000000000001d7b6 R14: 000000000c140477 R15: 0000000000000020 FS: 0000555555ff6400(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000555798ab09f4 CR3: 000000003192e000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 000000000000000a DR6: 00000000ffff0ff0 DR7: 0000000000000400