BUG: stack guard page was hit at 000000004df2c220 (stack is 00000000280a92e6..00000000643bec32) kernel stack overflow (double-fault): 0000 [#1] PREEMPT SMP KASAN CPU: 1 PID: 177 Comm: kworker/u4:4 Not tainted 5.9.0-rc2-next-20200824-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: bat_events batadv_nc_worker RIP: 0010:no_context+0x33/0x9f0 arch/x86/mm/fault.c:583 Code: fc ff df 41 56 41 89 ce 41 55 49 89 f5 41 54 49 89 d4 55 48 89 fd 53 48 8d 9d 88 00 00 00 48 81 ec d0 00 00 00 48 8d 44 24 30 <44> 89 44 24 10 48 c7 44 24 30 b3 8a b5 41 48 c1 e8 03 48 89 04 24 RSP: 0018:ffffc9000103ff60 EFLAGS: 00010086 RAX: ffffc9000103ff90 RBX: ffffc900010401f0 RCX: 000000000000000b RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffffc90001040168 RBP: ffffc90001040168 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 R13: 0000000000000002 R14: 000000000000000b R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc9000103ff58 CR3: 0000000056161000 CR4: 00000000001526e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: __bad_area_nosemaphore+0xa9/0x480 arch/x86/mm/fault.c:788 do_user_addr_fault+0x760/0xbf0 arch/x86/mm/fault.c:1170 handle_page_fault arch/x86/mm/fault.c:1351 [inline] exc_page_fault+0xa8/0x160 arch/x86/mm/fault.c:1404 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:538 RIP: 0010:preempt_schedule_thunk+0x0/0x18 arch/x86/entry/thunk_64.S:40 Code: ff d3 48 c7 44 24 50 00 00 00 00 eb e3 66 0f 1f 44 00 00 77 00 77 00 77 00 70 07 00 70 07 00 00 00 00 00 77 70 07 00 00 70 07 <00> 00 00 00 00 56 52 51 50 41 50 41 51 41 52 41 53 e8 83 c8 f6 06 RSP: 0018:ffffc90001040210 EFLAGS: 00010046 RAX: 0000000000000000 RBX: ffffc90001040510 RCX: 0000000000000000 RDX: 0000000000000001 RSI: ffffffff839bc0ab RDI: 0000000000000001 RBP: ffffffff81007697 R08: ffffffff83b351c0 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 R13: 000000000000000e R14: 0000000000000002 R15: 0000000000000000 search_module_extables+0xce/0x100 kernel/module.c:4469 search_exception_tables+0x42/0x50 kernel/extable.c:59 fixup_exception+0x4b/0xca arch/x86/mm/extable.c:161 no_context+0xe7/0x9f0 arch/x86/mm/fault.c:598 __bad_area_nosemaphore+0xa9/0x480 arch/x86/mm/fault.c:788 do_user_addr_fault+0x760/0xbf0 arch/x86/mm/fault.c:1170 handle_page_fault arch/x86/mm/fault.c:1351 [inline] exc_page_fault+0xa8/0x160 arch/x86/mm/fault.c:1404 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:538 RIP: 0010:preempt_schedule_thunk+0x0/0x18 arch/x86/entry/thunk_64.S:40 Code: ff d3 48 c7 44 24 50 00 00 00 00 eb e3 66 0f 1f 44 00 00 77 00 77 00 77 00 70 07 00 70 07 00 00 00 00 00 77 70 07 00 00 70 07 <00> 00 00 00 00 56 52 51 50 41 50 41 51 41 52 41 53 e8 83 c8 f6 06 RSP: 0018:ffffc90001040530 EFLAGS: 00010046 RAX: 0000000000000000 RBX: ffffc90001040830 RCX: 0000000000000000 RDX: 0000000000000001 RSI: ffffffff839bc0ab RDI: 0000000000000001 RBP: ffffffff81007697 R08: ffffffff83b351c0 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 R13: 000000000000000e R14: 0000000000000002 R15: 0000000000000000 search_module_extables+0xce/0x100 kernel/module.c:4469 search_exception_tables+0x42/0x50 kernel/extable.c:59 fixup_exception+0x4b/0xca arch/x86/mm/extable.c:161 no_context+0xe7/0x9f0 arch/x86/mm/fault.c:598 __bad_area_nosemaphore+0xa9/0x480 arch/x86/mm/fault.c:788 do_user_addr_fault+0x760/0xbf0 arch/x86/mm/fault.c:1170 handle_page_fault arch/x86/mm/fault.c:1351 [inline] exc_page_fault+0xa8/0x160 arch/x86/mm/fault.c:1404 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:538 RIP: 0010:preempt_schedule_thunk+0x0/0x18 arch/x86/entry/thunk_64.S:40 Code: ff d3 48 c7 44 24 50 00 00 00 00 eb e3 66 0f 1f 44 00 00 77 00 77 00 77 00 70 07 00 70 07 00 00 00 00 00 77 70 07 00 00 70 07 <00> 00 00 00 00 56 52 51 50 41 50 41 51 41 52 41 53 e8 83 c8 f6 06 RSP: 0018:ffffc90001040850 EFLAGS: 00010046 RAX: 0000000000000000 RBX: ffffc90001040b50 RCX: 0000000000000000 RDX: 0000000000000001 RSI: ffffffff839bc0ab RDI: 0000000000000001 RBP: ffffffff81007697 R08: ffffffff83b351c0 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 R13: 000000000000000e R14: 0000000000000002 R15: 0000000000000000 search_module_extables+0xce/0x100 kernel/module.c:4469 search_exception_tables+0x42/0x50 kernel/extable.c:59 fixup_exception+0x4b/0xca arch/x86/mm/extable.c:161 no_context+0xe7/0x9f0 arch/x86/mm/fault.c:598 __bad_area_nosemaphore+0xa9/0x480 arch/x86/mm/fault.c:788 do_user_addr_fault+0x760/0xbf0 arch/x86/mm/fault.c:1170 handle_page_fault arch/x86/mm/fault.c:1351 [inline] exc_page_fault+0xa8/0x160 arch/x86/mm/fault.c:1404 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:538 RIP: 0010:preempt_schedule_thunk+0x0/0x18 arch/x86/entry/thunk_64.S:40 Code: ff d3 48 c7 44 24 50 00 00 00 00 eb e3 66 0f 1f 44 00 00 77 00 77 00 77 00 70 07 00 70 07 00 00 00 00 00 77 70 07 00 00 70 07 <00> 00 00 00 00 56 52 51 50 41 50 41 51 41 52 41 53 e8 83 c8 f6 06 RSP: 0018:ffffc90001040b70 EFLAGS: 00010046 RAX: 0000000000000000 RBX: ffffc90001040e70 RCX: 0000000000000000 RDX: 0000000000000001 RSI: ffffffff839bc0ab RDI: 0000000000000001 RBP: ffffffff81007697 R08: ffffffff83b351c0 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 R13: 000000000000000e R14: 0000000000000002 R15: 0000000000000000 search_module_extables+0xce/0x100 kernel/module.c:4469 search_exception_tables+0x42/0x50 kernel/extable.c:59 fixup_exception+0x4b/0xca arch/x86/mm/extable.c:161 no_context+0xe7/0x9f0 arch/x86/mm/fault.c:598 __bad_area_nosemaphore+0xa9/0x480 arch/x86/mm/fault.c:788 do_user_addr_fault+0x760/0xbf0 arch/x86/mm/fault.c:1170 handle_page_fault arch/x86/mm/fault.c:1351 [inline] exc_page_fault+0xa8/0x160 arch/x86/mm/fault.c:1404 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:538 RIP: 0010:preempt_schedule_thunk+0x0/0x18 arch/x86/entry/thunk_64.S:40 Code: ff d3 48 c7 44 24 50 00 00 00 00 eb e3 66 0f 1f 44 00 00 77 00 77 00 77 00 70 07 00 70 07 00 00 00 00 00 77 70 07 00 00 70 07 <00> 00 00 00 00 56 52 51 50 41 50 41 51 41 52 41 53 e8 83 c8 f6 06 RSP: 0018:ffffc90001040e90 EFLAGS: 00010046 RAX: 0000000000000000 RBX: ffffc90001041190 RCX: 0000000000000000 RDX: 0000000000000001 RSI: ffffffff839bc0ab RDI: 0000000000000001 RBP: ffffffff81007697 R08: ffffffff83b351c0 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 R13: 000000000000000e R14: 0000000000000002 R15: 0000000000000000 search_module_extables+0xce/0x100 kernel/module.c:4469 search_exception_tables+0x42/0x50 kernel/extable.c:59 fixup_exception+0x4b/0xca arch/x86/mm/extable.c:161 no_context+0xe7/0x9f0 arch/x86/mm/fault.c:598 __bad_area_nosemaphore+0xa9/0x480 arch/x86/mm/fault.c:788 do_user_addr_fault+0x760/0xbf0 arch/x86/mm/fault.c:1170 handle_page_fault arch/x86/mm/fault.c:1351 [inline] exc_page_fault+0xa8/0x160 arch/x86/mm/fault.c:1404 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:538 RIP: 0010:preempt_schedule_thunk+0x0/0x18 arch/x86/entry/thunk_64.S:40 Code: ff d3 48 c7 44 24 50 00 00 00 00 eb e3 66 0f 1f 44 00 00 77 00 77 00 77 00 70 07 00 70 07 00 00 00 00 00 77 70 07 00 00 70 07 <00> 00 00 00 00 56 52 51 50 41 50 41 51 41 52 41 53 e8 83 c8 f6 06 RSP: 0018:ffffc900010411b0 EFLAGS: 00010046 RAX: 0000000000000000 RBX: ffffc900010414b0 RCX: 0000000000000000 RDX: 0000000000000001 RSI: ffffffff839bc0ab RDI: 0000000000000001 RBP: ffffffff81007697 R08: ffffffff83b351c0 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 R13: 000000000000000e R14: 0000000000000002 R15: 0000000000000000 search_module_extables+0xce/0x100 kernel/module.c:4469 search_exception_tables+0x42/0x50 kernel/extable.c:59 fixup_exception+0x4b/0xca arch/x86/mm/extable.c:161 no_context+0xe7/0x9f0 arch/x86/mm/fault.c:598 __bad_area_nosemaphore+0xa9/0x480 arch/x86/mm/fault.c:788 do_user_addr_fault+0x760/0xbf0 arch/x86/mm/fault.c:1170 handle_page_fault arch/x86/mm/fault.c:1351 [inline] exc_page_fault+0xa8/0x160 arch/x86/mm/fault.c:1404 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:538 RIP: 0010:preempt_schedule_thunk+0x0/0x18 arch/x86/entry/thunk_64.S:40 Code: ff d3 48 c7 44 24 50 00 00 00 00 eb e3 66 0f 1f 44 00 00 77 00 77 00 77 00 70 07 00 70 07 00 00 00 00 00 77 70 07 00 00 70 07 <00> 00 00 00 00 56 52 51 50 41 50 41 51 41 52 41 53 e8 83 c8 Lost 844 message(s)! ---[ end trace c8f6953e52874f74 ]--- RIP: 0010:no_context+0x33/0x9f0 arch/x86/mm/fault.c:583 Code: fc ff df 41 56 41 89 ce 41 55 49 89 f5 41 54 49 89 d4 55 48 89 fd 53 48 8d 9d 88 00 00 00 48 81 ec d0 00 00 00 48 8d 44 24 30 <44> 89 44 24 10 48 c7 44 24 30 b3 8a b5 41 48 c1 e8 03 48 89 04 24 RSP: 0018:ffffc9000103ff60 EFLAGS: 00010086 RAX: ffffc9000103ff90 RBX: ffffc900010401f0 RCX: 000000000000000b RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffffc90001040168 RBP: ffffc90001040168 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 R13: 0000000000000002 R14: 000000000000000b R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc9000103ff58 CR3: 0000000056161000 CR4: 00000000001526e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400