BUG: stack guard page was hit at ffffc90007ce7fd8 (stack is ffffc90007ce8000..ffffc90007ceffff) kernel stack overflow (double-fault): 0000 [#1] PREEMPT SMP KASAN CPU: 0 PID: 2899 Comm: syz-executor.1 Not tainted 5.10.110-syzkaller-01300-ge08dd85cc95e #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:generic_file_buffered_read+0x95/0x2850 mm/filemap.c:2199 Code: 40 01 00 00 48 c1 e8 03 42 c7 04 28 f1 f1 f1 f1 42 c7 44 28 08 f2 f2 f2 f2 48 89 84 24 10 01 00 00 42 c7 44 28 10 f3 f3 f3 f3 06 a2 dd ff 48 89 d9 48 89 d8 48 c1 e8 03 42 80 3c 28 00 48 89 RSP: 0018:ffffc90007ce7fe0 EFLAGS: 00010a06 RAX: 1ffff92000f9d024 RBX: ffffc90007ce8460 RCX: ffff8881133013c0 RDX: 0000000000000000 RSI: ffffc90007ce84b0 RDI: ffffc90007ce8460 RBP: ffffc90007ce8210 R08: ffffffff818f3675 R09: ffffed102170b653 R10: ffffed102170b653 R11: 1ffff1102170b652 R12: 1ffff92000f9d050 R13: dffffc0000000000 R14: ffffc90007ce84b0 R15: 0000000000000000 FS: 00007f5a0a330700(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc90007ce7fd8 CR3: 0000000109fd4000 CR4: 00000000003506b0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: Modules linked in: ---[ end trace bcdba2a9f3385763 ]--- RIP: 0010:generic_file_buffered_read+0x95/0x2850 mm/filemap.c:2199 Code: 40 01 00 00 48 c1 e8 03 42 c7 04 28 f1 f1 f1 f1 42 c7 44 28 08 f2 f2 f2 f2 48 89 84 24 10 01 00 00 42 c7 44 28 10 f3 f3 f3 f3 06 a2 dd ff 48 89 d9 48 89 d8 48 c1 e8 03 42 80 3c 28 00 48 89 RSP: 0018:ffffc90007ce7fe0 EFLAGS: 00010a06 RAX: 1ffff92000f9d024 RBX: ffffc90007ce8460 RCX: ffff8881133013c0 RDX: 0000000000000000 RSI: ffffc90007ce84b0 RDI: ffffc90007ce8460 RBP: ffffc90007ce8210 R08: ffffffff818f3675 R09: ffffed102170b653 R10: ffffed102170b653 R11: 1ffff1102170b652 R12: 1ffff92000f9d050 R13: dffffc0000000000 R14: ffffc90007ce84b0 R15: 0000000000000000 FS: 00007f5a0a330700(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc90007ce7fd8 CR3: 0000000109fd4000 CR4: 00000000003506b0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 ---------------- Code disassembly (best guess): 0: 40 01 00 rex add %eax,(%rax) 3: 00 48 c1 add %cl,-0x3f(%rax) 6: e8 03 42 c7 04 callq 0x4c7420e b: 28 f1 sub %dh,%cl d: f1 icebp e: f1 icebp f: f1 icebp 10: 42 c7 44 28 08 f2 f2 movl $0xf2f2f2f2,0x8(%rax,%r13,1) 17: f2 f2 19: 48 89 84 24 10 01 00 mov %rax,0x110(%rsp) 20: 00 21: 42 c7 44 28 10 f3 f3 movl $0xf3f3f3f3,0x10(%rax,%r13,1) 28: f3 f3 * 2a: e8 06 a2 dd ff callq 0xffdda235 <-- trapping instruction 2f: 48 89 d9 mov %rbx,%rcx 32: 48 89 d8 mov %rbx,%rax 35: 48 c1 e8 03 shr $0x3,%rax 39: 42 80 3c 28 00 cmpb $0x0,(%rax,%r13,1) 3e: 48 rex.W 3f: 89 .byte 0x89