BUG: stack guard page was hit at ffffc90002cfff38 (stack is ffffc90002d00000..ffffc90002d07fff) kernel stack overflow (double-fault): 0000 [#1] PREEMPT SMP KASAN CPU: 1 PID: 917 Comm: syz-executor.0 Not tainted 5.10.109-syzkaller-00693-g414e6c8e941c #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:find_get_entry+0x3e/0x560 mm/filemap.c:1696 Code: e0 00 00 00 49 89 f6 48 89 fb 65 48 8b 04 25 28 00 00 00 48 89 84 24 c0 00 00 00 49 bf 00 00 00 00 00 fc ff df 4c 8d 64 24 60 <48> c7 44 24 40 b3 8a b5 41 48 c7 44 24 48 4c c7 c9 85 48 c7 44 24 RSP: 0018:ffffc90002cfff40 EFLAGS: 00010282 RAX: c781c531f2291f00 RBX: ffff888120e98ef8 RCX: ffff888115c262c0 RDX: ffff888115c262c0 RSI: 0000000000000000 RDI: ffff888120e98ef8 RBP: ffffc90002d00058 R08: ffffffff818fa352 R09: ffffed1022b84c59 R10: ffffed1022b84c59 R11: 0000000000000000 R12: ffffc90002cfffa0 R13: 0000000000000000 R14: 0000000000000000 R15: dffffc0000000000 FS: 00007faf546bd700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc90002cfff38 CR3: 0000000116fda000 CR4: 00000000003506a0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: Modules linked in: ---[ end trace 4894a3bb8cc9a85f ]--- RIP: 0010:find_get_entry+0x3e/0x560 mm/filemap.c:1696 Code: e0 00 00 00 49 89 f6 48 89 fb 65 48 8b 04 25 28 00 00 00 48 89 84 24 c0 00 00 00 49 bf 00 00 00 00 00 fc ff df 4c 8d 64 24 60 <48> c7 44 24 40 b3 8a b5 41 48 c7 44 24 48 4c c7 c9 85 48 c7 44 24 RSP: 0018:ffffc90002cfff40 EFLAGS: 00010282 RAX: c781c531f2291f00 RBX: ffff888120e98ef8 RCX: ffff888115c262c0 RDX: ffff888115c262c0 RSI: 0000000000000000 RDI: ffff888120e98ef8 RBP: ffffc90002d00058 R08: ffffffff818fa352 R09: ffffed1022b84c59 R10: ffffed1022b84c59 R11: 0000000000000000 R12: ffffc90002cfffa0 R13: 0000000000000000 R14: 0000000000000000 R15: dffffc0000000000 FS: 00007faf546bd700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc90002cfff38 CR3: 0000000116fda000 CR4: 00000000003506a0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 ---------------- Code disassembly (best guess): 0: e0 00 loopne 0x2 2: 00 00 add %al,(%rax) 4: 49 89 f6 mov %rsi,%r14 7: 48 89 fb mov %rdi,%rbx a: 65 48 8b 04 25 28 00 mov %gs:0x28,%rax 11: 00 00 13: 48 89 84 24 c0 00 00 mov %rax,0xc0(%rsp) 1a: 00 1b: 49 bf 00 00 00 00 00 movabs $0xdffffc0000000000,%r15 22: fc ff df 25: 4c 8d 64 24 60 lea 0x60(%rsp),%r12 * 2a: 48 c7 44 24 40 b3 8a movq $0x41b58ab3,0x40(%rsp) <-- trapping instruction 31: b5 41 33: 48 c7 44 24 48 4c c7 movq $0xffffffff85c9c74c,0x48(%rsp) 3a: c9 85 3c: 48 rex.W 3d: c7 .byte 0xc7 3e: 44 rex.R 3f: 24 .byte 0x24