BUG: stack guard page was hit at ffffc90006257fd8 (stack is ffffc90006258000..ffffc9000625ffff) kernel stack overflow (double-fault): 0000 [#1] PREEMPT SMP KASAN CPU: 1 PID: 29206 Comm: syz-executor.0 Not tainted 5.10.110-syzkaller-01300-ge08dd85cc95e #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:cgroup_rstat_updated+0x16/0x3c0 kernel/cgroup/rstat.c:26 Code: 20 fd 3a 86 e8 8b e3 3f 00 5d c3 cc cc cc cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 ec 40 89 f3 49 89 fe d5 2b 06 00 89 5d d4 48 63 db bf 08 00 00 00 89 de e8 33 30 06 RSP: 0018:ffffc90006257fe0 EFLAGS: 00010082 RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffff8881113fe2c0 RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff888117042000 RBP: ffffc90006258048 R08: ffffffff81669864 R09: 0000000000000003 R10: fffff52000c4b041 R11: 1ffff92000c4b040 R12: 0000000000000001 R13: dffffc0000000000 R14: ffff888117042000 R15: ffff888117042000 FS: 00007fbd23d4f700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc90006257fd8 CR3: 0000000139c66000 CR4: 00000000003506a0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: Modules linked in: ---[ end trace 8b2a1bebb7094aab ]--- RIP: 0010:cgroup_rstat_updated+0x16/0x3c0 kernel/cgroup/rstat.c:26 Code: 20 fd 3a 86 e8 8b e3 3f 00 5d c3 cc cc cc cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 ec 40 89 f3 49 89 fe d5 2b 06 00 89 5d d4 48 63 db bf 08 00 00 00 89 de e8 33 30 06 RSP: 0018:ffffc90006257fe0 EFLAGS: 00010082 RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffff8881113fe2c0 RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff888117042000 RBP: ffffc90006258048 R08: ffffffff81669864 R09: 0000000000000003 R10: fffff52000c4b041 R11: 1ffff92000c4b040 R12: 0000000000000001 R13: dffffc0000000000 R14: ffff888117042000 R15: ffff888117042000 FS: 00007fbd23d4f700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc90006257fd8 CR3: 0000000139c66000 CR4: 00000000003506a0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 ---------------- Code disassembly (best guess): 0: 20 fd and %bh,%ch 2: 3a 86 e8 8b e3 3f cmp 0x3fe38be8(%rsi),%al 8: 00 5d c3 add %bl,-0x3d(%rbp) b: cc int3 c: cc int3 d: cc int3 e: cc int3 f: cc int3 10: cc int3 11: cc int3 12: cc int3 13: cc int3 14: 55 push %rbp 15: 48 89 e5 mov %rsp,%rbp 18: 41 57 push %r15 1a: 41 56 push %r14 1c: 41 55 push %r13 1e: 41 54 push %r12 20: 53 push %rbx 21: 48 83 ec 40 sub $0x40,%rsp 25: 89 f3 mov %esi,%ebx 27: 49 89 fe mov %rdi,%r14 * 2a: e8 d5 2b 06 00 callq 0x62c04 <-- trapping instruction 2f: 89 5d d4 mov %ebx,-0x2c(%rbp) 32: 48 63 db movslq %ebx,%rbx 35: bf 08 00 00 00 mov $0x8,%edi 3a: 89 de mov %ebx,%esi 3c: e8 .byte 0xe8 3d: 33 30 xor (%rax),%esi 3f: 06 (bad)