Kernel panic - not syncing: stack-protector: Kernel stack is corrupted in: symbol_string+0x3aa/0x3b0 kernel tried to execute NX-protected page - exploit attempt? (uid: 0) BUG: unable to handle page fault for address: ffff88806b421e00 #PF: supervisor instruction fetch in kernel mode #PF: error_code(0x0011) - permissions violation PGD 15401067 P4D 15401067 PUD 80000000400000e3 Oops: Oops: 0011 [#1] PREEMPT SMP KASAN PTI CPU: 0 UID: 0 PID: 5397 Comm: syz.4.20 Not tainted 6.11.0-rc4-next-20240820-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 RIP: 0001:rcu_is_watching_curr_cpu include/linux/context_tracking.h:126 [inline] RIP: 0001:rcu_is_watching+0x15/0xb0 kernel/rcu/tree.c:737 RSP: 0000:ffffc90004960000 EFLAGS: ffffc90004958000 ORIG_RAX: ffffc90004960000 RAX: ffffffff8e05d43b RBX: ffffc9000495eb10 RCX: 0000000000000000 RDX: 0000000000000002 RSI: 0000000000000001 RDI: ffffc90004958000 RBP: ffffffff8bb0141b R08: 0000000000000001 R09: ffff88806b421e00 R10: ffffffff8e033cbc R11: ffffffff813393ad R12: ffffc9000495eb10 R13: ffffc9000495ea58 R14: ffffc9000495f870 R15: ffffffff815f9c37 FS: 000055558645e500(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 CS: 0001 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffff88806b421e00 CR3: 000000002cda6000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Modules linked in: CR2: ffff88806b421e00 ---[ end trace 0000000000000000 ]--- RIP: 0010:0xffff88806b421e00 Code: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 <00> 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 Oops: general protection fault, probably for non-canonical address 0xe3fffb2400125797: 0000 [#2] PREEMPT SMP KASAN PTI KASAN: maybe wild-memory-access in range [0x1ffff9200092bcb8-0x1ffff9200092bcbf] CPU: 0 UID: 0 PID: 5397 Comm: syz.4.20 Tainted: G B D 6.11.0-rc4-next-20240820-syzkaller #0 Tainted: [B]=BAD_PAGE, [D]=DIE Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 RIP: 0010:vsnprintf+0x10dd/0x1da0 lib/vsprintf.c:2824 Code: f0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 b9 ba 47 f6 49 8b 1e 48 8d 43 08 49 89 06 4c 8b 7c 24 18 48 89 d8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 df e8 94 ba 47 f6 48 8b 13 48 8b 7c 24 RSP: 0018:ffffc9000495e080 EFLAGS: 00010003 RAX: 03ffff2400125797 RBX: 1ffff9200092bcbc RCX: ffff88806b421e00 RDX: 0000000000000000 RSI: 00000000ffffff04 RDI: 0000000000000029 RBP: ffffc9000495e178 R08: ffffffff8bb48412 R09: ffffffff8bb47ba4 R10: 0000000000000012 R11: ffff88806b421e00 R12: ffffffff8e033db2 R13: dffffc0000000000 R14: ffffc9000495e5c8 R15: ffffffff94f690dc FS: 000055558645e500(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffff88806b421e00 CR3: 000000002cda6000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: vscnprintf+0x42/0x90 lib/vsprintf.c:2930 printk_sprint+0x31/0x4b0 kernel/printk/printk.c:2165 vprintk_store+0x984/0x1160 kernel/printk/printk.c:2279 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:0xffff88806b421e00 Code: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 <00> 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 RSP: 0018:ffffc9000495eaa8 EFLAGS: 00010046 RAX: 0000000000000046 RBX: ffffc9000495eb20 RCX: 0000000000000001 RDX: dffffc0000000000 RSI: 0000000000000004 RDI: ffffc9000495e980 RBP: ffffc9000495ebb0 R08: 0000000000000003 R09: fffff5200092bd30 R10: dffffc0000000000 R11: fffff5200092bd30 R12: dffffc0000000000 R13: 1ffff1100d684525 R14: 1ffff9200092bd60 R15: ffffffff8e815060 FS: 000055558645e500(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffff88806b421e00 CR3: 000000002cda6000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 ---------------- Code disassembly (best guess): 0: f0 48 c1 e8 03 lock shr $0x3,%rax 5: 42 80 3c 28 00 cmpb $0x0,(%rax,%r13,1) a: 74 08 je 0x14 c: 4c 89 f7 mov %r14,%rdi f: e8 b9 ba 47 f6 call 0xf647bacd 14: 49 8b 1e mov (%r14),%rbx 17: 48 8d 43 08 lea 0x8(%rbx),%rax 1b: 49 89 06 mov %rax,(%r14) 1e: 4c 8b 7c 24 18 mov 0x18(%rsp),%r15 23: 48 89 d8 mov %rbx,%rax 26: 48 c1 e8 03 shr $0x3,%rax * 2a: 42 80 3c 28 00 cmpb $0x0,(%rax,%r13,1) <-- trapping instruction 2f: 74 08 je 0x39 31: 48 89 df mov %rbx,%rdi 34: e8 94 ba 47 f6 call 0xf647bacd 39: 48 8b 13 mov (%rbx),%rdx 3c: 48 rex.W 3d: 8b .byte 0x8b 3e: 7c 24 jl 0x64