BUG: stack guard page was hit at ffffc90008587fd8 (stack is ffffc90008588000..ffffc9000858ffff) kernel stack overflow (double-fault): 0000 [#1] PREEMPT SMP KASAN CPU: 1 PID: 27534 Comm: syz-executor.5 Not tainted 5.10.112-syzkaller-00287-gde64d941a71a #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:generic_file_buffered_read+0x95/0x2850 mm/filemap.c:2199 Code: 40 01 00 00 48 c1 e8 03 42 c7 04 28 f1 f1 f1 f1 42 c7 44 28 08 f2 f2 f2 f2 48 89 84 24 10 01 00 00 42 c7 44 28 10 f3 f3 f3 f3 06 a2 dd ff 48 89 d9 48 89 d8 48 c1 e8 03 42 80 3c 28 00 48 89 RSP: 0018:ffffc90008587fe0 EFLAGS: 00010a06 RAX: 1ffff920010b1024 RBX: ffffc90008588460 RCX: ffff88811a2d93c0 RDX: 0000000000000000 RSI: ffffc900085884b0 RDI: ffffc90008588460 RBP: ffffc90008588210 R08: ffffffff818f3815 R09: ffffed1021697053 R10: ffffed1021697053 R11: 1ffff11021697052 R12: 1ffff920010b1050 R13: dffffc0000000000 R14: ffffc900085884b0 R15: 0000000000000000 FS: 00007fe7d7218700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc90008587fd8 CR3: 000000011c808000 CR4: 00000000003506a0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: Modules linked in: ---[ end trace 365b7228770ab3b3 ]--- RIP: 0010:generic_file_buffered_read+0x95/0x2850 mm/filemap.c:2199 Code: 40 01 00 00 48 c1 e8 03 42 c7 04 28 f1 f1 f1 f1 42 c7 44 28 08 f2 f2 f2 f2 48 89 84 24 10 01 00 00 42 c7 44 28 10 f3 f3 f3 f3 06 a2 dd ff 48 89 d9 48 89 d8 48 c1 e8 03 42 80 3c 28 00 48 89 RSP: 0018:ffffc90008587fe0 EFLAGS: 00010a06 RAX: 1ffff920010b1024 RBX: ffffc90008588460 RCX: ffff88811a2d93c0 RDX: 0000000000000000 RSI: ffffc900085884b0 RDI: ffffc90008588460 RBP: ffffc90008588210 R08: ffffffff818f3815 R09: ffffed1021697053 R10: ffffed1021697053 R11: 1ffff11021697052 R12: 1ffff920010b1050 R13: dffffc0000000000 R14: ffffc900085884b0 R15: 0000000000000000 FS: 00007fe7d7218700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc90008587fd8 CR3: 000000011c808000 CR4: 00000000003506a0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 ---------------- Code disassembly (best guess): 0: 40 01 00 rex add %eax,(%rax) 3: 00 48 c1 add %cl,-0x3f(%rax) 6: e8 03 42 c7 04 callq 0x4c7420e b: 28 f1 sub %dh,%cl d: f1 icebp e: f1 icebp f: f1 icebp 10: 42 c7 44 28 08 f2 f2 movl $0xf2f2f2f2,0x8(%rax,%r13,1) 17: f2 f2 19: 48 89 84 24 10 01 00 mov %rax,0x110(%rsp) 20: 00 21: 42 c7 44 28 10 f3 f3 movl $0xf3f3f3f3,0x10(%rax,%r13,1) 28: f3 f3 * 2a: e8 06 a2 dd ff callq 0xffdda235 <-- trapping instruction 2f: 48 89 d9 mov %rbx,%rcx 32: 48 89 d8 mov %rbx,%rax 35: 48 c1 e8 03 shr $0x3,%rax 39: 42 80 3c 28 00 cmpb $0x0,(%rax,%r13,1) 3e: 48 rex.W 3f: 89 .byte 0x89