BUG: TASK stack guard page was hit at ffffc90005b57ff8 (stack is ffffc90005b58000..ffffc90005b60000) Oops: stack guard page: 0000 [#1] PREEMPT SMP KASAN NOPTI CPU: 1 UID: 0 PID: 13634 Comm: iou-wrk-13633 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 RIP: 0010:kasan_check_range+0x10/0x1a0 mm/kasan/generic.c:188 Code: 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 85 f6 0f 84 50 01 00 00 48 89 f8 <41> 54 44 0f b6 c2 48 01 f0 55 53 0f 82 c6 00 00 00 48 b8 ff ff ff RSP: 0018:ffffc90005b58000 EFLAGS: 00010006 RAX: ffffc90005b58078 RBX: ffffc90005b58078 RCX: ffffffff81495ffe RDX: 0000000000000001 RSI: 0000000000000060 RDI: ffffc90005b58078 RBP: 0000000000000060 R08: 0000000000000005 R09: 0000000000000000 R10: ffff88804fbf12c8 R11: 0000000000000002 R12: 0000000000000000 R13: ffffc90005b58138 R14: ffffc90005b58078 R15: ffffc90005b580a0 FS: 00007f27b16776c0(0000) GS:ffff88806a700000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc90005b57ff8 CR3: 0000000037a6e000 CR4: 0000000000352ef0 DR0: 0000000000000000 DR1: 00000000fec00000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 Call Trace: <#DF> __asan_memset+0x23/0x50 mm/kasan/shadow.c:84 __unwind_start+0x2e/0x7f0 arch/x86/kernel/unwind_orc.c:688 unwind_start arch/x86/include/asm/unwind.h:64 [inline] arch_stack_walk+0x74/0x100 arch/x86/kernel/stacktrace.c:24 stack_trace_save+0x95/0xd0 kernel/stacktrace.c:122 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47 kasan_save_track+0x14/0x30 mm/kasan/common.c:68 unpoison_slab_object mm/kasan/common.c:319 [inline] __kasan_slab_alloc+0x89/0x90 mm/kasan/common.c:345 kasan_slab_alloc include/linux/kasan.h:250 [inline] slab_post_alloc_hook mm/slub.c:4119 [inline] slab_alloc_node mm/slub.c:4168 [inline] kmem_cache_alloc_noprof+0x226/0x3d0 mm/slub.c:4175 radix_tree_node_alloc.constprop.0+0x1e8/0x350 lib/radix-tree.c:253 idr_get_free+0x528/0xa40 lib/radix-tree.c:1506 idr_alloc_u32+0x191/0x2f0 lib/idr.c:46 idr_alloc+0xc1/0x130 lib/idr.c:87 p9_tag_alloc+0x394/0x870 net/9p/client.c:321 p9_client_prepare_req+0x19f/0x4d0 net/9p/client.c:644 p9_client_zc_rpc.constprop.0+0x105/0x880 net/9p/client.c:793 p9_client_read_once+0x443/0x820 net/9p/client.c:1570 p9_client_read+0x13f/0x1b0 net/9p/client.c:1534 v9fs_issue_read+0x115/0x340 fs/9p/vfs_addr.c:76 netfs_retry_read_subrequests fs/netfs/read_retry.c:62 [inline] netfs_retry_reads+0x1508/0x1d40 fs/netfs/read_retry.c:234 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409 netfs_retry_reads+0x159a/0x1d40 fs/netfs/read_retry.c:237 netfs_rreq_assess+0x5d3/0x870 fs/netfs/read_collect.c:374 netfs_rreq_terminated+0xe5/0x110 fs/netfs/read_collect.c:409 netfs_dispatch_unbuffered_reads fs/netfs/direct_read.c:103 [inline] netfs_unbuffered_read fs/netfs/direct_read.c:127 [inline] netfs_unbuffered_read_iter_locked+0x12e1/0x19a0 fs/netfs/direct_read.c:221 netfs_unbuffered_read_iter+0xc5/0x100 fs/netfs/direct_read.c:256 v9fs_file_read_iter+0xbf/0x100 fs/9p/vfs_file.c:361 io_iter_do_read io_uring/rw.c:770 [inline] __io_read+0x320/0x1190 io_uring/rw.c:869 io_read+0x1e/0x70 io_uring/rw.c:947 io_issue_sqe+0x175/0x1200 io_uring/io_uring.c:1740 io_wq_submit_work+0x3fc/0xec0 io_uring/io_uring.c:1849 io_worker_handle_work+0x4e5/0x1680 io_uring/io-wq.c:601 io_wq_worker+0x33f/0xdf0 io_uring/io-wq.c:655 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:kasan_check_range+0x10/0x1a0 mm/kasan/generic.c:188 Code: 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 85 f6 0f 84 50 01 00 00 48 89 f8 <41> 54 44 0f b6 c2 48 01 f0 55 53 0f 82 c6 00 00 00 48 b8 ff ff ff RSP: 0018:ffffc90005b58000 EFLAGS: 00010006 RAX: ffffc90005b58078 RBX: ffffc90005b58078 RCX: ffffffff81495ffe RDX: 0000000000000001 RSI: 0000000000000060 RDI: ffffc90005b58078 RBP: 0000000000000060 R08: 0000000000000005 R09: 0000000000000000 R10: ffff88804fbf12c8 R11: 0000000000000002 R12: 0000000000000000 R13: ffffc90005b58138 R14: ffffc90005b58078 R15: ffffc90005b580a0 FS: 00007f27b16776c0(0000) GS:ffff88806a700000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc90005b57ff8 CR3: 0000000037a6e000 CR4: 0000000000352ef0 DR0: 0000000000000000 DR1: 00000000fec00000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 ---------------- Code disassembly (best guess): 0: 66 2e 0f 1f 84 00 00 cs nopw 0x0(%rax,%rax,1) 7: 00 00 00 a: 90 nop b: 90 nop c: 90 nop d: 90 nop e: 90 nop f: 90 nop 10: 90 nop 11: 90 nop 12: 90 nop 13: 90 nop 14: 90 nop 15: 90 nop 16: 90 nop 17: 90 nop 18: 90 nop 19: 90 nop 1a: 66 0f 1f 00 nopw (%rax) 1e: 48 85 f6 test %rsi,%rsi 21: 0f 84 50 01 00 00 je 0x177 27: 48 89 f8 mov %rdi,%rax * 2a: 41 54 push %r12 <-- trapping instruction 2c: 44 0f b6 c2 movzbl %dl,%r8d 30: 48 01 f0 add %rsi,%rax 33: 55 push %rbp 34: 53 push %rbx 35: 0f 82 c6 00 00 00 jb 0x101 3b: 48 rex.W 3c: b8 .byte 0xb8 3d: ff (bad) 3e: ff (bad) 3f: ff .byte 0xff