R13: 00000000ffffffff R14: 00007f932a8576d4 R15: 0000000000000000 BUG: unable to handle kernel paging request at 00000000c3b16ab1 IP: lock_acquire+0x183/0x580 kernel/locking/lockdep.c:4002 PGD 5e28067 P4D 5e28067 PUD 5e2a067 PMD 0 Oops: 0002 [#1] SMP KASAN Dumping ftrace buffer: (ftrace buffer empty) Modules linked in: CPU: 0 PID: 10250 Comm: syz-executor7 Not tainted 4.15.0-rc2-next-20171204+ #58 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 task: 0000000073e34fe9 task.stack: 000000003a4882e1 RIP: 0010:lock_acquire+0x183/0x580 kernel/locking/lockdep.c:4002 RSP: 0018:ffff8801db407cc0 EFLAGS: 00010046 RAX: 0000000000000007 RBX: 0000000000000000 RCX: 0000000000000000 RDX: ffff8801d0c34180 RSI: 0000000000000000 RDI: ffff8801d0c34a04 RBP: ffff8801db407db8 R08: 0000000000000001 R09: 0000000000000000 R10: 1ffff1003b680f9e R11: 0000000000000000 R12: 1ffff1003b680f9e R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000001 FS: 00007fdac8a75700(0000) GS:ffff8801db400000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: fffffffffffffff8 CR3: 00000001d9f04000 CR4: 00000000001426f0 Call Trace: __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline] _raw_spin_lock_irqsave+0x96/0xc0 kernel/locking/spinlock.c:159 hrtimer_interrupt+0xc2/0x6f0 kernel/time/hrtimer.c:1450 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1025 [inline] smp_apic_timer_interrupt+0x14a/0x700 arch/x86/kernel/apic/apic.c:1050 apic_timer_interrupt+0xa9/0xb0 arch/x86/entry/entry_64.S:907 RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:777 [inline] RIP: 0010:console_unlock+0x954/0xd70 kernel/printk/printk.c:2235 RSP: 0018:ffff8801d1aeeec0 EFLAGS: 00000212 ORIG_RAX: ffffffffffffff11 RAX: 0000000000010000 RBX: 0000000000000000 RCX: ffffffff8159c61b RDX: 0000000000010000 RSI: ffffc9000230d000 RDI: 0000000000000212 RBP: ffff8801d1aeefa8 R08: 1ffff1003a35dda6 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff83a2e360 vprintk_emit+0x4ad/0x590 kernel/printk/printk.c:1757 vprintk_default+0x28/0x30 kernel/printk/printk.c:1796 vprintk_func+0x57/0xc0 kernel/printk/printk_safe.c:379 printk+0xaa/0xca kernel/printk/printk.c:1829 handle_userfault+0x12f5/0x24c0 fs/userfaultfd.c:424 do_anonymous_page mm/memory.c:3109 [inline] handle_pte_fault mm/memory.c:3922 [inline] __handle_mm_fault+0x3402/0x3dd0 mm/memory.c:4048 handle_mm_fault+0x38f/0x930 mm/memory.c:4085 __do_page_fault+0x5c9/0xc90 arch/x86/mm/fault.c:1429 do_page_fault+0xee/0x720 arch/x86/mm/fault.c:1504 page_fault+0x2c/0x60 arch/x86/entry/entry_64.S:1230 RIP: 0010:copy_user_generic_unrolled+0x86/0xc0 arch/x86/lib/copy_user_64.S:65 RSP: 0018:ffff8801d1aefbc8 EFLAGS: 00010202 RAX: ffffed003a35dfa2 RBX: 0000000020013000 RCX: 0000000000000001 RDX: 0000000000000000 RSI: 0000000020013000 RDI: ffff8801d1aefd08 RBP: ffff8801d1aefbf8 R08: ffffed003a35dfa2 R09: ffffed003a35dfa2 R10: 0000000000000001 R11: ffffed003a35dfa1 R12: 0000000000000008 R13: ffff8801d1aefd08 R14: 00007ffffffff000 R15: 0000000020013008 copy_from_user include/linux/uaccess.h:147 [inline] get_fd_set fs/select.c:367 [inline] core_sys_select+0x397/0x960 fs/select.c:647 SYSC_select fs/select.c:696 [inline] SyS_select+0x194/0x230 fs/select.c:678 entry_SYSCALL_64_fastpath+0x1f/0x96 RIP: 0033:0x4529d9 RSP: 002b:00007fdac8a74c58 EFLAGS: 00000212 ORIG_RAX: 0000000000000017 RAX: ffffffffffffffda RBX: 00000000007580d8 RCX: 00000000004529d9 RDX: 0000000020012000 RSI: 0000000020013000 RDI: 0000000000000040 RBP: 0000000000000044 R08: 0000000020004ff0 R09: 0000000000000000 R10: 0000000020001fc0 R11: 0000000000000212 R12: 00000000006ed700 R13: 00000000ffffffff R14: 00007fdac8a756d4 R15: 000000000000000c Code: df 48 89 f9 48 c1 e9 03 0f b6 0c 01 48 89 f8 83 e0 07 83 c0 03 38 c8 7c 08 84 c9 0f 85 fe 02 00 00 c7 82 84 08 00 00 01 00 00 00 06 01 00 00 65 8b 05 c1 c7 aa 7e 89 c0 48 0f a3 05 07 5e 08 RIP: lock_acquire+0x183/0x580 kernel/locking/lockdep.c:4002 RSP: ffff8801db407cc0 CR2: fffffffffffffff8 ---[ end trace 4b7a7e0f6f3c7ac3 ]---