BUG: stack guard page was hit at ffffc900038affd8 (stack is ffffc900038b0000..ffffc900038b7fff) kernel stack overflow (double-fault): 0000 [#1] PREEMPT SMP KASAN CPU: 0 PID: 8444 Comm: syz-executor.0 Not tainted 5.10.109-syzkaller-00693-g414e6c8e941c #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:generic_file_buffered_read+0x95/0x2850 mm/filemap.c:2199 Code: 40 01 00 00 48 c1 e8 03 42 c7 04 28 f1 f1 f1 f1 42 c7 44 28 08 f2 f2 f2 f2 48 89 84 24 10 01 00 00 42 c7 44 28 10 f3 f3 f3 f3 96 a0 dd ff 48 89 d9 48 89 d8 48 c1 e8 03 42 80 3c 28 00 48 89 RSP: 0018:ffffc900038affe0 EFLAGS: 00010a06 RAX: 1ffff92000716024 RBX: ffffc900038b0460 RCX: ffff88810d3d2780 RDX: 0000000000000000 RSI: ffffc900038b04b0 RDI: ffffc900038b0460 RBP: ffffc900038b0210 R08: ffffffff818f3dc5 R09: ffffed102168ca53 R10: ffffed102168ca53 R11: 1ffff1102168ca52 R12: 1ffff92000716050 R13: dffffc0000000000 R14: ffffc900038b04b0 R15: 0000000000000000 FS: 00007f578f4d1700(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc900038affd8 CR3: 000000011c6b9000 CR4: 00000000003506b0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: Modules linked in: ---[ end trace e12ee828c2fac2b6 ]--- RIP: 0010:generic_file_buffered_read+0x95/0x2850 mm/filemap.c:2199 Code: 40 01 00 00 48 c1 e8 03 42 c7 04 28 f1 f1 f1 f1 42 c7 44 28 08 f2 f2 f2 f2 48 89 84 24 10 01 00 00 42 c7 44 28 10 f3 f3 f3 f3 96 a0 dd ff 48 89 d9 48 89 d8 48 c1 e8 03 42 80 3c 28 00 48 89 RSP: 0018:ffffc900038affe0 EFLAGS: 00010a06 RAX: 1ffff92000716024 RBX: ffffc900038b0460 RCX: ffff88810d3d2780 RDX: 0000000000000000 RSI: ffffc900038b04b0 RDI: ffffc900038b0460 RBP: ffffc900038b0210 R08: ffffffff818f3dc5 R09: ffffed102168ca53 R10: ffffed102168ca53 R11: 1ffff1102168ca52 R12: 1ffff92000716050 R13: dffffc0000000000 R14: ffffc900038b04b0 R15: 0000000000000000 FS: 00007f578f4d1700(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc900038affd8 CR3: 000000011c6b9000 CR4: 00000000003506b0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 ---------------- Code disassembly (best guess): 0: 40 01 00 rex add %eax,(%rax) 3: 00 48 c1 add %cl,-0x3f(%rax) 6: e8 03 42 c7 04 callq 0x4c7420e b: 28 f1 sub %dh,%cl d: f1 icebp e: f1 icebp f: f1 icebp 10: 42 c7 44 28 08 f2 f2 movl $0xf2f2f2f2,0x8(%rax,%r13,1) 17: f2 f2 19: 48 89 84 24 10 01 00 mov %rax,0x110(%rsp) 20: 00 21: 42 c7 44 28 10 f3 f3 movl $0xf3f3f3f3,0x10(%rax,%r13,1) 28: f3 f3 * 2a: e8 96 a0 dd ff callq 0xffdda0c5 <-- trapping instruction 2f: 48 89 d9 mov %rbx,%rcx 32: 48 89 d8 mov %rbx,%rax 35: 48 c1 e8 03 shr $0x3,%rax 39: 42 80 3c 28 00 cmpb $0x0,(%rax,%r13,1) 3e: 48 rex.W 3f: 89 .byte 0x89