BUG: unable to handle kernel paging request at ffff888001000000
IP: __writeq arch/x86/include/asm/io.h:100 [inline]
IP: bitfill_aligned drivers/video/fbdev/core/cfbfillrect.c:70 [inline]
IP: bitfill_aligned+0xef/0x190 drivers/video/fbdev/core/cfbfillrect.c:35
PGD c9dd067 P4D c9dd067 PUD c9de067 PMD 80000000010001e1
Oops: 0003 [#1] PREEMPT SMP KASAN
Modules linked in:
CPU: 0 PID: 10082 Comm: syz-executor.5 Not tainted 4.14.290-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022
task: ffff88805b1bc380 task.stack: ffff888091148000
RIP: 0010:__writeq arch/x86/include/asm/io.h:100 [inline]
RIP: 0010:bitfill_aligned drivers/video/fbdev/core/cfbfillrect.c:70 [inline]
RIP: 0010:bitfill_aligned+0xef/0x190 drivers/video/fbdev/core/cfbfillrect.c:35
RSP: 0018:ffff88809114f730 EFLAGS: 00010246
RAX: ffff888001000008 RBX: ffff888000ffffd0 RCX: ffffc900090f6000
RDX: 0000000000040000 RSI: ffffffff833a0f04 RDI: 0000000000000600
RBP: 0000000000000018 R08: 0000000000000600 R09: 0000000000000040
R10: ffff8880b0a4131f R11: 0000000000000000 R12: ffff888001000090
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
FS: 00007f5036952700(0000) GS:ffff8880ba400000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffff888001000000 CR3: 000000009ac63000 CR4: 00000000003406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
cfb_fillrect+0x3c7/0x710 drivers/video/fbdev/core/cfbfillrect.c:327
vga16fb_fillrect+0x5fa/0x1820 drivers/video/fbdev/vga16fb.c:951
bit_clear_margins+0x3af/0x480 drivers/video/fbdev/core/bitblit.c:224
fbcon_clear_margins+0x1bb/0x300 drivers/video/fbdev/core/fbcon.c:1266
fbcon_switch+0xde0/0x19e0 drivers/video/fbdev/core/fbcon.c:2133
redraw_screen+0x32c/0x790 drivers/tty/vt/vt.c:689
vc_do_resize+0xc41/0xe40 drivers/tty/vt/vt.c:991
vt_resize+0xa3/0xe0 drivers/tty/vt/vt.c:1032
tiocswinsz drivers/tty/tty_io.c:2267 [inline]
tty_ioctl+0xf7e/0x1430 drivers/tty/tty_io.c:2576
vfs_ioctl fs/ioctl.c:46 [inline]
file_ioctl fs/ioctl.c:500 [inline]
do_vfs_ioctl+0x75a/0xff0 fs/ioctl.c:684
SYSC_ioctl fs/ioctl.c:701 [inline]
SyS_ioctl+0x7f/0xb0 fs/ioctl.c:692
do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x7f5037fdd279
RSP: 002b:00007f5036952168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f50380eff80 RCX: 00007f5037fdd279
RDX: 0000000020000140 RSI: 0000000000005414 RDI: 0000000000000003
RBP: 00007f5038037189 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffe76995a5f R14: 00007f5036952300 R15: 0000000000022000
Code: 41 83 c4 01 49 c1 e4 06 49 01 dc e8 1c 38 1b fe 4c 89 3b 4c 89 7b 08 4c 89 7b 10 4c 89 7b 18 4c 89 7b 20 4c 89 7b 28 48 8d 43 38 <4c> 89 7b 30 48 83 c3 40 4c 89 38 49 39 dc 75 d0 83 e5 07 41 89
RIP: __writeq arch/x86/include/asm/io.h:100 [inline] RSP: ffff88809114f730
RIP: bitfill_aligned drivers/video/fbdev/core/cfbfillrect.c:70 [inline] RSP: ffff88809114f730
RIP: bitfill_aligned+0xef/0x190 drivers/video/fbdev/core/cfbfillrect.c:35 RSP: ffff88809114f730
CR2: ffff888001000000
---[ end trace a10fdaf5ea812305 ]---
----------------
Code disassembly (best guess):
0: 41 83 c4 01 add $0x1,%r12d
4: 49 c1 e4 06 shl $0x6,%r12
8: 49 01 dc add %rbx,%r12
b: e8 1c 38 1b fe callq 0xfe1b382c
10: 4c 89 3b mov %r15,(%rbx)
13: 4c 89 7b 08 mov %r15,0x8(%rbx)
17: 4c 89 7b 10 mov %r15,0x10(%rbx)
1b: 4c 89 7b 18 mov %r15,0x18(%rbx)
1f: 4c 89 7b 20 mov %r15,0x20(%rbx)
23: 4c 89 7b 28 mov %r15,0x28(%rbx)
27: 48 8d 43 38 lea 0x38(%rbx),%rax
* 2b: 4c 89 7b 30 mov %r15,0x30(%rbx) <-- trapping instruction
2f: 48 83 c3 40 add $0x40,%rbx
33: 4c 89 38 mov %r15,(%rax)
36: 49 39 dc cmp %rbx,%r12
39: 75 d0 jne 0xb
3b: 83 e5 07 and $0x7,%ebp
3e: 41 rex.B
3f: 89 .byte 0x89