BUG: stack guard page was hit at 000000005cb1ef4e (stack is 0000000070d17da5..0000000083dcca43) kernel stack overflow (double-fault): 0000 [#1] PREEMPT SMP KASAN CPU: 0 PID: 11712 Comm: syz-executor.3 Not tainted 5.9.0-rc3-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:__pvclock_read_cycles arch/x86/include/asm/pvclock.h:84 [inline] RIP: 0010:pvclock_clocksource_read+0x79/0x510 arch/x86/kernel/pvclock.c:76 Code: e0 83 e0 07 38 c2 0f 9e c1 84 d2 0f 95 c0 84 c1 0f 85 68 04 00 00 48 8d 43 08 8b 0b 48 bd 00 00 00 00 00 fc ff df 48 8d 7b 1c <48> 89 44 24 08 48 c1 e8 03 48 8d 73 1b 49 89 c5 48 89 f8 48 89 7c RSP: 0018:ffffc90008d57fd0 EFLAGS: 00010046 RAX: ffffffff8bed3008 RBX: ffffffff8bed3000 RCX: 000000000000000a RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffffffff8bed301c RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff8bed3003 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 FS: 00007fe8b1da3700(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc90008d57fc8 CR3: 000000004becb000 CR4: 00000000001506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: kvm_clock_read arch/x86/kernel/kvmclock.c:90 [inline] kvm_sched_clock_read+0x14/0x40 arch/x86/kernel/kvmclock.c:102 paravirt_sched_clock arch/x86/include/asm/paravirt.h:22 [inline] sched_clock+0x2a/0x40 arch/x86/kernel/tsc.c:252 sched_clock_cpu+0x18/0x1b0 kernel/sched/clock.c:371 irqtime_account_irq+0x63/0x280 kernel/sched/cputime.c:60 account_irq_enter_time include/linux/vtime.h:109 [inline] irq_enter_rcu+0x5d/0xf0 kernel/softirq.c:362 sysvec_apic_timer_interrupt+0x14/0xf0 arch/x86/kernel/apic/apic.c:1091 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:581 RIP: 0010:get_lock_parent_ip include/linux/ftrace.h:822 [inline] RIP: 0010:preempt_latency_start kernel/sched/core.c:4165 [inline] RIP: 0010:preempt_latency_start kernel/sched/core.c:4162 [inline] RIP: 0010:preempt_count_add+0x74/0x140 kernel/sched/core.c:4190 Code: 0f b6 c0 3d f4 00 00 00 7f 64 65 8b 05 d5 34 b2 7e 25 ff ff ff 7f 39 c3 74 03 5b 5d c3 48 8b 5c 24 10 48 89 df e8 cc 28 0b 00 <85> c0 75 35 65 48 8b 2c 25 c0 fe 01 00 48 8d bd d8 12 00 00 48 b8 RSP: 0018:ffffc90008d581c8 EFLAGS: 00000287 RAX: 0000000000000000 RBX: ffffffff81337ddf RCX: 1ffffffff192e42c RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff81337ddf RBP: 0000000000000001 R08: ffffffff8b60ca10 R09: 0000000000000001 R10: 000000000007201e R11: 0000000000000001 R12: ffffc90008d58300 R13: 0000000000000000 R14: ffff88804e474000 R15: ffffc90008d582b8 unwind_next_frame+0x11f/0x1f90 arch/x86/kernel/unwind_orc.c:434 arch_stack_walk+0x81/0xf0 arch/x86/kernel/stacktrace.c:25 stack_trace_save+0x8c/0xc0 kernel/stacktrace.c:123 kasan_save_stack+0x1b/0x40 mm/kasan/common.c:48 kasan_set_track mm/kasan/common.c:56 [inline] __kasan_kmalloc.constprop.0+0xbf/0xd0 mm/kasan/common.c:461 __kmalloc_reserve net/core/skbuff.c:142 [inline] __alloc_skb+0xae/0x550 net/core/skbuff.c:210 alloc_skb include/linux/skbuff.h:1094 [inline] nlmsg_new include/net/netlink.h:940 [inline] rtmsg_ifinfo_build_skb+0x72/0x1a0 net/core/rtnetlink.c:3804 rtmsg_ifinfo_event net/core/rtnetlink.c:3840 [inline] rtmsg_ifinfo_event net/core/rtnetlink.c:3831 [inline] rtnetlink_event+0x123/0x1d0 net/core/rtnetlink.c:5614 notifier_call_chain+0xb5/0x200 kernel/notifier.c:83 call_netdevice_notifiers_info+0xb5/0x130 net/core/dev.c:2033 call_netdevice_notifiers_extack net/core/dev.c:2045 [inline] call_netdevice_notifiers net/core/dev.c:2059 [inline] netdev_features_change net/core/dev.c:1444 [inline] netdev_sync_lower_features net/core/dev.c:9372 [inline] __netdev_update_features+0x88d/0x1360 net/core/dev.c:9503 netdev_change_features+0x61/0xb0 net/core/dev.c:9575 bond_compute_features+0x562/0xa80 drivers/net/bonding/bond_main.c:1308 bond_slave_netdev_event drivers/net/bonding/bond_main.c:3375 [inline] bond_netdev_event+0x871/0xb80 drivers/net/bonding/bond_main.c:3415 notifier_call_chain+0xb5/0x200 kernel/notifier.c:83 call_netdevice_notifiers_info+0xb5/0x130 net/core/dev.c:2033 call_netdevice_notifiers_extack net/core/dev.c:2045 [inline] call_netdevice_notifiers net/core/dev.c:2059 [inline] netdev_features_change net/core/dev.c:1444 [inline] netdev_sync_lower_features net/core/dev.c:9372 [inline] __netdev_update_features+0x88d/0x1360 net/core/dev.c:9503 netdev_change_features+0x61/0xb0 net/core/dev.c:9575 bond_compute_features+0x562/0xa80 drivers/net/bonding/bond_main.c:1308 bond_slave_netdev_event drivers/net/bonding/bond_main.c:3375 [inline] bond_netdev_event+0x871/0xb80 drivers/net/bonding/bond_main.c:3415 notifier_call_chain+0xb5/0x200 kernel/notifier.c:83 call_netdevice_notifiers_info+0xb5/0x130 net/core/dev.c:2033 call_netdevice_notifiers_extack net/core/dev.c:2045 [inline] call_netdevice_notifiers net/core/dev.c:2059 [inline] netdev_features_change net/core/dev.c:1444 [inline] netdev_sync_lower_features net/core/dev.c:9372 [inline] __netdev_update_features+0x88d/0x1360 net/core/dev.c:9503 netdev_change_features+0x61/0xb0 net/core/dev.c:9575 bond_compute_features+0x562/0xa80 drivers/net/bonding/bond_main.c:1308 bond_slave_netdev_event drivers/net/bonding/bond_main.c:3375 [inline] bond_netdev_event+0x871/0xb80 drivers/net/bonding/bond_main.c:3415 notifier_call_chain+0xb5/0x200 kernel/notifier.c:83 call_netdevice_notifiers_info+0xb5/0x130 net/core/dev.c:2033 call_netdevice_notifiers_extack net/core/dev.c:2045 [inline] call_netdevice_notifiers net/core/dev.c:2059 [inline] netdev_features_change net/core/dev.c:1444 [inline] netdev_sync_lower_features net/core/dev.c:9372 [inline] __netdev_update_features+0x88d/0x1360 net/core/dev.c:9503 netdev_change_features+0x61/0xb0 net/core/dev.c:9575 bond_compute_features+0x562/0xa80 drivers/net/bonding/bond_main.c:1308 bond_slave_netdev_event drivers/net/bonding/bond_main.c:3375 [inline] bond_netdev_event+0x871/0xb80 drivers/net/bonding/bond_main.c:3415 notifier_call_chain+0xb5/0x200 kernel/notifier.c:83 call_netdevice_notifiers_info+0xb5/0x130 net/core/dev.c:2033 call_netdevice_notifiers_extack net/core/dev.c:2045 [inline] call_netdevice_notifiers net/core/dev.c:2059 [inline] netdev_features_change net/core/dev.c:1444 [inline] netdev_sync_lower_features net/core/dev.c:9372 [inline] __netdev_update_features+0x88d/0x1360 net/core/dev.c:9503 Lost 571 message(s)! ---[ end trace 50332eedf182e267 ]--- RIP: 0010:__pvclock_read_cycles arch/x86/include/asm/pvclock.h:84 [inline] RIP: 0010:pvclock_clocksource_read+0x79/0x510 arch/x86/kernel/pvclock.c:76 Code: e0 83 e0 07 38 c2 0f 9e c1 84 d2 0f 95 c0 84 c1 0f 85 68 04 00 00 48 8d 43 08 8b 0b 48 bd 00 00 00 00 00 fc ff df 48 8d 7b 1c <48> 89 44 24 08 48 c1 e8 03 48 8d 73 1b 49 89 c5 48 89 f8 48 89 7c RSP: 0018:ffffc90008d57fd0 EFLAGS: 00010046 RAX: ffffffff8bed3008 RBX: ffffffff8bed3000 RCX: 000000000000000a RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffffffff8bed301c RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff8bed3003 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 FS: 00007fe8b1da3700(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc90008d57fc8 CR3: 000000004becb000 CR4: 00000000001506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400