BUG: stack guard page was hit at ffffc900063c7ed8 (stack is ffffc900063c8000..ffffc900063cffff) kernel stack overflow (double-fault): 0000 [#1] PREEMPT SMP KASAN CPU: 0 PID: 649 Comm: syz-executor.5 Not tainted 5.10.110-syzkaller-01300-ge08dd85cc95e #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:rcu_note_context_switch+0x36/0x10c0 kernel/rcu/tree_plugin.h:290 Code: 53 48 83 e4 e0 48 81 ec 40 01 00 00 41 89 fc 65 48 8b 04 25 28 00 00 00 48 89 84 24 20 01 00 00 49 bd 00 00 00 00 00 fc ff df <48> c7 84 24 e0 00 00 00 b3 8a b5 41 48 c7 84 24 e8 00 00 00 d6 ff RSP: 0018:ffffc900063c7ee0 EFLAGS: 00010082 RAX: 29f82f54748a6800 RBX: ffff8881f7055e00 RCX: 1ffff92000c79018 RDX: 1ffff92000c79018 RSI: ffffffff8543d040 RDI: 0000000000000001 RBP: ffffc900063c8050 R08: ffffffff86c2c008 R09: ffffffff86c2c018 R10: ffffffff86c2c010 R11: ffffffff86c2c003 R12: 0000000000000001 R13: dffffc0000000000 R14: dffffc0000000000 R15: ffff888114b48000 FS: 00007f1e36461700(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc900063c7ed8 CR3: 00000001140ee000 CR4: 00000000003506b0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: Modules linked in: ---[ end trace fc345f6f86e20396 ]--- RIP: 0010:rcu_note_context_switch+0x36/0x10c0 kernel/rcu/tree_plugin.h:290 Code: 53 48 83 e4 e0 48 81 ec 40 01 00 00 41 89 fc 65 48 8b 04 25 28 00 00 00 48 89 84 24 20 01 00 00 49 bd 00 00 00 00 00 fc ff df <48> c7 84 24 e0 00 00 00 b3 8a b5 41 48 c7 84 24 e8 00 00 00 d6 ff RSP: 0018:ffffc900063c7ee0 EFLAGS: 00010082 RAX: 29f82f54748a6800 RBX: ffff8881f7055e00 RCX: 1ffff92000c79018 RDX: 1ffff92000c79018 RSI: ffffffff8543d040 RDI: 0000000000000001 RBP: ffffc900063c8050 R08: ffffffff86c2c008 R09: ffffffff86c2c018 R10: ffffffff86c2c010 R11: ffffffff86c2c003 R12: 0000000000000001 R13: dffffc0000000000 R14: dffffc0000000000 R15: ffff888114b48000 FS: 00007f1e36461700(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc900063c7ed8 CR3: 00000001140ee000 CR4: 00000000003506b0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 ---------------- Code disassembly (best guess): 0: 53 push %rbx 1: 48 83 e4 e0 and $0xffffffffffffffe0,%rsp 5: 48 81 ec 40 01 00 00 sub $0x140,%rsp c: 41 89 fc mov %edi,%r12d f: 65 48 8b 04 25 28 00 mov %gs:0x28,%rax 16: 00 00 18: 48 89 84 24 20 01 00 mov %rax,0x120(%rsp) 1f: 00 20: 49 bd 00 00 00 00 00 movabs $0xdffffc0000000000,%r13 27: fc ff df * 2a: 48 c7 84 24 e0 00 00 movq $0x41b58ab3,0xe0(%rsp) <-- trapping instruction 31: 00 b3 8a b5 41 36: 48 rex.W 37: c7 .byte 0xc7 38: 84 24 e8 test %ah,(%rax,%rbp,8) 3b: 00 00 add %al,(%rax) 3d: 00 d6 add %dl,%dh 3f: ff .byte 0xff