CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffff8800fffffdd8 CR3: 00000001c5753000 CR4: 00000000001406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: Kernel panic - not syncing: Machine halted. CPU: 0 PID: 17085 Comm: syz-executor905 Not tainted 4.18.0-rc3+ #55 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: <#DF> __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1c9/0x2b4 lib/dump_stack.c:113 panic+0x238/0x4e7 kernel/panic.c:184 df_debug+0x2d/0x2e arch/x86/kernel/doublefault.c:81 do_double_fault+0x113/0x200 arch/x86/kernel/traps.c:444 double_fault+0x23/0x30 arch/x86/entry/entry_64.S:994 RIP: 0010:__lock_acquire+0x2e/0x5020 kernel/locking/lockdep.c:3294 Code: 41 57 41 89 cf 41 56 41 55 49 89 fd 41 54 45 89 cc 53 65 4c 8b 34 25 40 ee 01 00 48 83 e4 f0 48 81 ec 60 03 00 00 48 8b 45 10 <89> 94 24 80 00 00 00 48 ba 00 00 00 00 00 fc ff df 48 89 84 24 98 RSP: 0018:ffff8800fffffde0 EFLAGS: 00010082 RAX: 0000000000000000 RBX: 1ffff10020000039 RCX: 0000000000000002 RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff88f92620 RBP: ffff880100000170 R08: 0000000000000000 R09: 0000000000000000 R10: ffff8801aa917be0 R11: ffff8801ba488e7b R12: 0000000000000000 R13: ffffffff88f92620 R14: ffff8801ba488700 R15: 0000000000000002 WARNING: kernel stack regs at (____ptrval____) in syz-executor905:17085 has bad 'bp' value (____ptrval____) unwind stack type:0 next_sp:(____ptrval____) mask:0x20 graph_idx:0 (____ptrval____): fffffe0000008d78 (0xfffffe0000008d78) (____ptrval____): ffffffff812a9105 (show_trace_log_lvl+0x1f6/0x28c) (____ptrval____): ffffffff815ea86e (__lock_acquire+0x2e/0x5020) (____ptrval____): fffffe0000008fd8 (0xfffffe0000008fd8) (____ptrval____): 0000000000000020 (0x20) (____ptrval____): 0000000000000005 (0x5) (____ptrval____): fffffe0000007000 (0xfffffe0000007000) (____ptrval____): fffffe0000009000 (0xfffffe0000009000) (____ptrval____): ffff8800fffffde0 (0xffff8800fffffde0) (____ptrval____): 0000000000000000 ... (____ptrval____): fffffe0000007000 (0xfffffe0000007000) (____ptrval____): fffffe0000009000 (0xfffffe0000009000) (____ptrval____): ffff8800fffffde0 (0xffff8800fffffde0) (____ptrval____): 0000000000000020 (0x20) (____ptrval____): ffff8801ba488700 (0xffff8801ba488700) (____ptrval____): 0000010100000000 (0x10100000000) (____ptrval____): 0000000000000000 ... (____ptrval____): fffffe0000008ca8 (0xfffffe0000008ca8) (____ptrval____): ffffffff815ea86e (__lock_acquire+0x2e/0x5020) (____ptrval____): fffffe0000008f58 (0xfffffe0000008f58) (____ptrval____): 7745ab19d2766f00 (0x7745ab19d2766f00) (____ptrval____): 0000000000000093 (0x93) (____ptrval____): 0000000000000000 ... (____ptrval____): ffffffff88f1b060 (pv_cpu_ops+0x120/0x120) (____ptrval____): 00000000ffffffff (0xffffffff) (____ptrval____): fffffe0000008d88 (0xfffffe0000008d88) (____ptrval____): ffffffff812a91d3 (show_stack+0x38/0x3a) (____ptrval____): fffffe0000008e38 (0xfffffe0000008e38) (____ptrval____): ffffffff878e8c55 (dump_stack+0x1c9/0x2b4) (____ptrval____): fffffbfff11e360c (0xfffffbfff11e360c) (____ptrval____): dffffc0000000000 (0xdffffc0000000000) (____ptrval____): 1fffffc0000011b6 (0x1fffffc0000011b6) (____ptrval____): 0000000041b58ab3 (0x41b58ab3) (____ptrval____): ffffffff88bd685c (regoff.33338+0x368e7c/0x37b9c0) (____ptrval____): ffffffff878e8a8c (dump_stack_print_info.cold.2+0x52/0x52) (____ptrval____): fffffe0000008df8 (0xfffffe0000008df8) (____ptrval____): 0000000000000000 ... (____ptrval____): fffffe0000008e40 (0xfffffe0000008e40) (____ptrval____): ffff880100000000 (0xffff880100000000) (____ptrval____): fffffe0000008e18 (0xfffffe0000008e18) (____ptrval____): 7745ab19d2766f00 (0x7745ab19d2766f00) (____ptrval____): ffff880100000000 (0xffff880100000000) (____ptrval____): ffffffff89e73d60 (buf.37263+0x40/0x40) (____ptrval____): 7745ab19d2766f00 (0x7745ab19d2766f00) (____ptrval____): 0000000000000000 ... (____ptrval____): ffffffff87e742e0 (hpet_msi_domain_info+0xe40/0x1a80) (____ptrval____): 0000000000000000 ... (____ptrval____): fffffe0000008f00 (0xfffffe0000008f00) (____ptrval____): ffffffff81473ab9 (panic+0x238/0x4e7) (____ptrval____): 0000000041b58ab3 (0x41b58ab3) (____ptrval____): ffffffff88bec8cc (K512_4+0x130c/0x120c84) (____ptrval____): ffffffff81473881 (add_taint.cold.5+0x16/0x16) (____ptrval____): 0000000000000000 ... (____ptrval____): 0000000000000008 (0x8) (____ptrval____): fffffe0000008f10 (0xfffffe0000008f10) (____ptrval____): fffffe0000008ea8 (0xfffffe0000008ea8) (____ptrval____): 0000000000000000 ... (____ptrval____): ffff8801ba488700 (0xffff8801ba488700) (____ptrval____): 0000010000000000 (0x10000000000) (____ptrval____): 0000000000000000 ... (____ptrval____): 7745ab19d2766f00 (0x7745ab19d2766f00) (____ptrval____): 0000000000000000 ... (____ptrval____): ffffffff8137bfcc (get_cpu_entry_area+0xc/0x30) (____ptrval____): fffffe0000002000 (0xfffffe0000002000) (____ptrval____): 0000000000000004 (0x4) (____ptrval____): 000000000001ede0 (0x1ede0) (____ptrval____): fffffe0000008e60 (0xfffffe0000008e60) (____ptrval____): fffffe0000008f58 (0xfffffe0000008f58) (____ptrval____): 0000000000000000 ... (____ptrval____): ffffffff87e4a580 (__func__.44285+0x40/0x40) (____ptrval____): ffff8800fffffde0 (0xffff8800fffffde0) (____ptrval____): 0000000000000000 ... (____ptrval____): fffffe0000008f18 (0xfffffe0000008f18) (____ptrval____): ffffffff813470df (df_debug+0x2d/0x2e) (____ptrval____): fffffe0000008f58 (0xfffffe0000008f58) (____ptrval____): fffffe0000008f48 (0xfffffe0000008f48) (____ptrval____): ffffffff8129c1f3 (do_double_fault+0x113/0x200) (____ptrval____): 0000000000000001 (0x1) (____ptrval____): 0000000000000000 ... (____ptrval____): fffffe0000008f59 (0xfffffe0000008f59) (____ptrval____): ffffffff87a00bd3 (double_fault+0x23/0x30) (____ptrval____): 0000000000000002 (0x2) (____ptrval____): ffff8801ba488700 (0xffff8801ba488700) (____ptrval____): ffffffff88f92620 (rcu_bh_lock_map+0x40/0x40) (____ptrval____): 0000000000000000 ... (____ptrval____): ffff880100000170 (0xffff880100000170) (____ptrval____): 1ffff10020000039 (0x1ffff10020000039) (____ptrval____): ffff8801ba488e7b (0xffff8801ba488e7b) (____ptrval____): ffff8801aa917be0 (0xffff8801aa917be0) (____ptrval____): 0000000000000000 ... (____ptrval____): 0000000000000002 (0x2) (____ptrval____): 0000000000000000 ... (____ptrval____): ffffffff88f92620 (rcu_bh_lock_map+0x40/0x40) (____ptrval____): ffffffffffffffff (0xffffffffffffffff) (____ptrval____): ffffffff815ea86e (__lock_acquire+0x2e/0x5020) (____ptrval____): 0000000000000010 (0x10) (____ptrval____): 0000000000010082 (0x10082) (____ptrval____): ffff8800fffffde0 (0xffff8800fffffde0) (____ptrval____): 0000000000000018 (0x18) Dumping ftrace buffer: (ftrace buffer empty) Kernel Offset: disabled Rebooting in 86400 seconds..