asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:618
------------[ cut here ]------------
kernel BUG at mm/filemap.c:3579!
Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI
CPU: 2 UID: 0 PID: 7665 Comm: syz.3.570 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
RIP: 0010:filemap_fault+0x21da/0x37c0 mm/filemap.c:3579
Code: 3c c6 ff 48 c7 c6 20 0d 9d 8b 48 89 df e8 6e 81 11 00 90 0f 0b e8 a6 3c c6 ff 48 c7 c6 20 1b 9d 8b 48 89 df e8 57 81 11 00 90 <0f> 0b e8 8f 3c c6 ff 48 c7 c6 c0 08 9d 8b 48 89 df e8 40 81 11 00
RSP: 0018:ffffc90003ccf488 EFLAGS: 00010246
RAX: 0000000000080000 RBX: ffffea00043f1f00 RCX: ffffc9000e294000
RDX: 0000000000080000 RSI: ffffffff825240e8 RDI: ffff888023ffce04
RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001
R13: ffff888028501d60 R14: ffffea00043f1f08 R15: ffffc90003ccf738
FS:  00007f07a9c926c0(0000) GS:ffff8880d67d9000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000110c373718 CR3: 0000000055fb0000 CR4: 0000000000352ef0
Call Trace:
 <TASK>
 __do_fault+0x10d/0x550 mm/memory.c:5323
 do_shared_fault mm/memory.c:5822 [inline]
 do_fault+0x2db/0x1990 mm/memory.c:5896
 do_pte_missing mm/memory.c:4404 [inline]
 handle_pte_fault mm/memory.c:6276 [inline]
 __handle_mm_fault+0x1807/0x2b50 mm/memory.c:6414
 handle_mm_fault+0x36d/0xa20 mm/memory.c:6583
 do_user_addr_fault+0x74c/0x12f0 arch/x86/mm/fault.c:1385
 handle_page_fault arch/x86/mm/fault.c:1474 [inline]
 exc_page_fault+0x6f/0xd0 arch/x86/mm/fault.c:1527
 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:618
RIP: 0010:__put_user_nocheck_4+0x3/0x10 arch/x86/lib/putuser.S:104
Code: d9 0f 01 cb 89 01 31 c9 0f 01 ca e9 c7 b9 03 00 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90
RSP: 0018:ffffc90003ccf9d8 EFLAGS: 00050246
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000020000007d7b0
RDX: 0000000000080000 RSI: ffffffff894024b1 RDI: ffff888023ffc980
RBP: ffffc90003ccfd80 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000000000002 R11: 0000000000000002 R12: 0000000000000000
R13: 000020000007d780 R14: ffffc90003ccfdc4 R15: 0000000000000002
 ____sys_recvmsg+0x2ec/0x6b0 net/socket.c:2825
 ___sys_recvmsg+0x16a/0x1a0 net/socket.c:2854
 do_recvmmsg+0x301/0x760 net/socket.c:2949
 __sys_recvmmsg net/socket.c:3023 [inline]
 __do_sys_recvmmsg net/socket.c:3046 [inline]
 __se_sys_recvmmsg net/socket.c:3039 [inline]
 __x64_sys_recvmmsg+0x22a/0x280 net/socket.c:3039
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xc9/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f07a8d9aeb9
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f07a9c92028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
RAX: ffffffffffffffda RBX: 00007f07a9016090 RCX: 00007f07a8d9aeb9
RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000005
RBP: 00007f07a8e08c1f R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f07a9016128 R14: 00007f07a9016090 R15: 00007fff5a3da228
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:filemap_fault+0x21da/0x37c0 mm/filemap.c:3579
Code: 3c c6 ff 48 c7 c6 20 0d 9d 8b 48 89 df e8 6e 81 11 00 90 0f 0b e8 a6 3c c6 ff 48 c7 c6 20 1b 9d 8b 48 89 df e8 57 81 11 00 90 <0f> 0b e8 8f 3c c6 ff 48 c7 c6 c0 08 9d 8b 48 89 df e8 40 81 11 00
RSP: 0018:ffffc90003ccf488 EFLAGS: 00010246
RAX: 0000000000080000 RBX: ffffea00043f1f00 RCX: ffffc9000e294000
RDX: 0000000000080000 RSI: ffffffff825240e8 RDI: ffff888023ffce04
RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001
R13: ffff888028501d60 R14: ffffea00043f1f08 R15: ffffc90003ccf738
FS:  00007f07a9c926c0(0000) GS:ffff8880d67d9000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fd39a7c98a4 CR3: 0000000055fb0000 CR4: 0000000000352ef0
----------------
Code disassembly (best guess):
   0:	d9 0f                	(bad) (%rdi)
   2:	01 cb                	add    %ecx,%ebx
   4:	89 01                	mov    %eax,(%rcx)
   6:	31 c9                	xor    %ecx,%ecx
   8:	0f 01 ca             	clac
   b:	e9 c7 b9 03 00       	jmp    0x3b9d7
  10:	0f 1f 80 00 00 00 00 	nopl   0x0(%rax)
  17:	90                   	nop
  18:	90                   	nop
  19:	90                   	nop
  1a:	90                   	nop
  1b:	90                   	nop
  1c:	90                   	nop
  1d:	90                   	nop
  1e:	90                   	nop
  1f:	90                   	nop
  20:	90                   	nop
  21:	90                   	nop
  22:	90                   	nop
  23:	90                   	nop
  24:	90                   	nop
  25:	90                   	nop
  26:	90                   	nop
  27:	0f 01 cb             	stac
* 2a:	89 01                	mov    %eax,(%rcx) <-- trapping instruction
  2c:	31 c9                	xor    %ecx,%ecx
  2e:	0f 01 ca             	clac
  31:	c3                   	ret
  32:	cc                   	int3
  33:	cc                   	int3
  34:	cc                   	int3
  35:	cc                   	int3
  36:	90                   	nop
  37:	90                   	nop
  38:	90                   	nop
  39:	90                   	nop
  3a:	90                   	nop
  3b:	90                   	nop
  3c:	90                   	nop
  3d:	90                   	nop
  3e:	90                   	nop
  3f:	90                   	nop