==================================================================
BUG: KASAN: stack-out-of-bounds in timerqueue_add+0x249/0x2b0 lib/timerqueue.c:52
PANIC: double fault, error_code: 0x0
Read of size 8 at addr ffff8801b01bfcf8 by task syz-executor1/4489
CPU: 0 PID: 15015 Comm: syz-executor1 Not tainted 4.18.0-rc3+ #47

Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:__lock_acquire+0x2e/0x5020 kernel/locking/lockdep.c:3294
CPU: 1 PID: 4489 Comm: syz-executor1 Not tainted 4.18.0-rc3+ #47
Code: 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
41 
Call Trace:
57 41 
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1c9/0x2b4 lib/dump_stack.c:113
89 
cf 
41 
56 
41 55 
 print_address_description+0x6c/0x20b mm/kasan/report.c:256
49 
89 
 kasan_report_error mm/kasan/report.c:354 [inline]
 kasan_report.cold.7+0x242/0x2fe mm/kasan/report.c:412
fd 
 __asan_report_load8_noabort+0x14/0x20 mm/kasan/report.c:433
41 
 timerqueue_add+0x249/0x2b0 lib/timerqueue.c:52
54 
 enqueue_hrtimer+0x18e/0x540 kernel/time/hrtimer.c:960
45 
89 
cc 
53 
65 
4c 
 __hrtimer_start_range_ns kernel/time/hrtimer.c:1089 [inline]
 hrtimer_start_range_ns+0x616/0xd20 kernel/time/hrtimer.c:1115
8b 
34 25 
40 ee 
01 00 
48 
83 e4 
f0 
 hrtimer_start_expires include/linux/hrtimer.h:412 [inline]
 do_nanosleep+0x1b0/0x750 kernel/time/hrtimer.c:1686
48 81 
ec 
60 
03 00 
00 48 
8b 
45 
10 <89> 
94 
 hrtimer_nanosleep+0x2d4/0x620 kernel/time/hrtimer.c:1743
24 
80 
00 
 __do_sys_nanosleep kernel/time/hrtimer.c:1777 [inline]
 __se_sys_nanosleep kernel/time/hrtimer.c:1764 [inline]
 __x64_sys_nanosleep+0x1e7/0x280 kernel/time/hrtimer.c:1764
00 
00 
 do_syscall_64+0x1b9/0x820 arch/x86/entry/common.c:290
48 
ba 
00 
00 00 
00 00 
fc 
ff 
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
df 
RIP: 0033:0x4812b0
48 
Code: 
89 84 
05 
24 98 
48 
3d 
RSP: 0018:ffff8801aeccce80 EFLAGS: 00010082
01 
f0 
RAX: 0000000000000000 RBX: 1ffff10035d99a4d RCX: 0000000000000002
ff 
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff88f92620
ff 
RBP: ffff8801aeccd210 R08: 0000000000000000 R09: 0000000000000000
0f 
R10: ffff8801b03571b8 R11: ffff8801dae236b3 R12: 0000000000000000
83 
R13: ffffffff88f92620 R14: ffff880196b28640 R15: 0000000000000002
0d 
FS:  00007f27d35aa700(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000
03 
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
f9 
CR2: ffff8801aeccce78 CR3: 0000000008e6a000 CR4: 00000000001406f0
ff 
DR0: 0000000020000000 DR1: 0000000020000000 DR2: 0000000000000000
c3 
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
66 
Call Trace:
2e