BUG: stack guard page was hit at ffffc90005f4ffe8 (stack is ffffc90005f50000..ffffc90005f57fff) kernel stack overflow (double-fault): 0000 [#1] PREEMPT SMP KASAN CPU: 1 PID: 13549 Comm: syz-executor.0 Not tainted 5.10.112-syzkaller-00287-gde64d941a71a #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:native_save_fl arch/x86/include/asm/irqflags.h:22 [inline] RIP: 0010:arch_local_save_flags arch/x86/include/asm/irqflags.h:79 [inline] RIP: 0010:check_preemption_disabled+0x53/0x100 lib/smp_processor_id.c:19 Code: 7b a9 ff ff ff 7f 74 22 65 48 8b 04 25 28 00 00 00 48 3b 45 d8 0f 85 b5 00 00 00 89 d8 48 83 c4 10 5b 41 5c 41 5e 41 5f 5d c3 <48> c7 45 d0 00 00 00 00 9c 8f 45 d0 f7 45 d0 00 02 00 00 74 c9 65 RSP: 0018:ffffc90005f4fff8 EFLAGS: 00010046 RAX: 0000000080000000 RBX: 0000000000000001 RCX: dffffc0000000000 RDX: 0000000000000000 RSI: ffffffff8543d240 RDI: ffffffff8543d200 RBP: ffffc90005f50028 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 R13: 0000000000000000 R14: ffff88813d9562c0 R15: 0000000000000000 FS: 00007f17cc2a3700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc90005f4ffe8 CR3: 0000000118ffe000 CR4: 00000000003506a0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: Modules linked in: ---[ end trace 1e4c67933a778bc9 ]--- RIP: 0010:native_save_fl arch/x86/include/asm/irqflags.h:22 [inline] RIP: 0010:arch_local_save_flags arch/x86/include/asm/irqflags.h:79 [inline] RIP: 0010:check_preemption_disabled+0x53/0x100 lib/smp_processor_id.c:19 Code: 7b a9 ff ff ff 7f 74 22 65 48 8b 04 25 28 00 00 00 48 3b 45 d8 0f 85 b5 00 00 00 89 d8 48 83 c4 10 5b 41 5c 41 5e 41 5f 5d c3 <48> c7 45 d0 00 00 00 00 9c 8f 45 d0 f7 45 d0 00 02 00 00 74 c9 65 RSP: 0018:ffffc90005f4fff8 EFLAGS: 00010046 RAX: 0000000080000000 RBX: 0000000000000001 RCX: dffffc0000000000 RDX: 0000000000000000 RSI: ffffffff8543d240 RDI: ffffffff8543d200 RBP: ffffc90005f50028 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 R13: 0000000000000000 R14: ffff88813d9562c0 R15: 0000000000000000 FS: 00007f17cc2a3700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc90005f4ffe8 CR3: 0000000118ffe000 CR4: 00000000003506a0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 ---------------- Code disassembly (best guess), 1 bytes skipped: 0: a9 ff ff ff 7f test $0x7fffffff,%eax 5: 74 22 je 0x29 7: 65 48 8b 04 25 28 00 mov %gs:0x28,%rax e: 00 00 10: 48 3b 45 d8 cmp -0x28(%rbp),%rax 14: 0f 85 b5 00 00 00 jne 0xcf 1a: 89 d8 mov %ebx,%eax 1c: 48 83 c4 10 add $0x10,%rsp 20: 5b pop %rbx 21: 41 5c pop %r12 23: 41 5e pop %r14 25: 41 5f pop %r15 27: 5d pop %rbp 28: c3 retq * 29: 48 c7 45 d0 00 00 00 movq $0x0,-0x30(%rbp) <-- trapping instruction 30: 00 31: 9c pushfq 32: 8f 45 d0 popq -0x30(%rbp) 35: f7 45 d0 00 02 00 00 testl $0x200,-0x30(%rbp) 3c: 74 c9 je 0x7 3e: 65 gs