BUG: unable to handle kernel paging request at ffff8800a3aef618
PGD aaab067 P4D aaab067 PUD 21ffff067 PMD a718d063 PTE ffff8800a718d7a8
Oops: 0002 [#1] SMP PTI
CPU: 1 PID: 19893 Comm: udevd Not tainted 4.18.0-rc8+ #33
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:kmsan_write_aligned_origin mm/kmsan/kmsan.c:591 [inline]
RIP: 0010:kmsan_set_origin+0xb0/0x150 mm/kmsan/kmsan.c:625
Code: 00 00 4c 89 f7 4c 89 fe e8 3d 07 00 00 48 85 c0 74 3d a8 03 0f 85 82 00 00 00 48 c1 eb 02 74 19 b9 01 00 00 00 31 d2 0f 1f 00 <44> 89 2c 90 48 63 d1 83 c1 01 48 39 d3 77 f1 4d 01 fe 45 29 fc 45
PANIC: double fault, error_code: 0x0
RSP: 0018:ffff8800a14bf538 EFLAGS: 00010046
CPU: 0 PID: 19887 Comm: syz-executor1 Not tainted 4.18.0-rc8+ #33
RAX: ffff8800a3aef618 RBX: 000000000000002a RCX: 0000000000000001
RDX: 0000000000000000 RSI: ffff88021fff2000 RDI: ffffffff7fffffff
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RBP: ffff8800a14bf560 R08: ffffffff7fffffff R09: ffff8800a9e9f618
R10: 0000000000000000 R11: 0000000000000000 R12: 00000000000000a8
RIP: 0010:task_kmsan_context_state+0x0/0x110 mm/kmsan/kmsan.c:93
R13: 0000000000000000 R14: ffff8800a14bf618 R15: 00000000000000a8
FS: 0000000000000000(0000) GS:ffff88021fd00000(0000) knlGS:0000000000000000
Code:
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffff8800a3aef618 CR3: 000000014e39c000 CR4: 00000000001406e0
0f
Call Trace:
00
kmsan_internal_unpoison_shadow+0x83/0xe0 mm/kmsan/kmsan.c:202
00
kmsan_unpoison_shadow+0x66/0xb0 mm/kmsan/kmsan.c:215
5b
do_page_fault+0x4d/0xd0 arch/x86/mm/fault.c:1469
41
page_fault+0x1e/0x30 arch/x86/entry/entry_64.S:1169
5e
RIP: 0010:native_save_fl arch/x86/include/asm/irqflags.h:19 [inline]
RIP: 0010:arch_local_save_flags arch/x86/include/asm/irqflags.h:73 [inline]
RIP: 0010:arch_local_irq_save arch/x86/include/asm/irqflags.h:114 [inline]
RIP: 0010:cr4_clear_bits arch/x86/include/asm/tlbflush.h:279 [inline]
RIP: 0010:load_mm_cr4 arch/x86/include/asm/mmu_context.h:36 [inline]
RIP: 0010:switch_mm_irqs_off+0xef3/0x1650 arch/x86/mm/tlb.c:335
41
Code: 48
5f
89 df
5d
e8 2f
c3
99 a2
41
00 48
8b
c7 00
be
00 00
90
00 00
0c
48 c7
00
45 a8
00
00 00
e8
00 00
b4
9c 8f
49
45 a8
00
4c 8b
00
75 a8
eb
48 89
a1
df e8
90
f0 98
90
a2 00
8a
48 8b
04
00 <8b>
25
3a fa
38
65 48
d5
8b 14
15
25 e0
8a
95 0b
c3
00 48
0f
89 d1
1f
48 81
84
e1 ff
00
fe ff
00
ff
00
RSP: 0018:ffff8800a14bf6c0 EFLAGS: 00010086
00
RAX: 0000000000000000 RBX: ffff8800a14bf708 RCX: ffff8800a3aef708
RDX: ffff8800a3aef708 RSI: aaaaaaaaaaaab000 RDI: ffffea0003c7c7a0
00
RBP: ffff8800a14bf760 R08: 000077ff80000000 R09: 0000000000000000
R10: ffffffff7fffffff R11: 0000000000000000 R12: 0000000000000000
<55>
R13: 0000000000000000 R14: 0000000000000086 R15: 000000014e39c000
48
context_switch kernel/sched/core.c:2845 [inline]
__schedule+0x5d6/0x770 kernel/sched/core.c:3507
89
preempt_schedule_common kernel/sched/core.c:3631 [inline]
_cond_resched+0x4e/0xc0 kernel/sched/core.c:4999
e5
down_read+0x2c/0x100 kernel/locking/rwsem.c:23
41
exec_mmap fs/exec.c:1024 [inline]
flush_old_exec+0x1459/0x2090 fs/exec.c:1275
57
41
load_elf_binary+0x140a/0x8fb0 fs/binfmt_elf.c:869
56
41
54
53
48
83
ec
10
65
44 8b
search_binary_handler+0x2ef/0xab0 fs/exec.c:1652
3c
exec_binprm fs/exec.c:1694 [inline]
__do_execve_file+0x21d4/0x2d00 fs/exec.c:1818
25
do_execveat_common fs/exec.c:1865 [inline]
do_execve fs/exec.c:1882 [inline]
__do_sys_execve fs/exec.c:1963 [inline]
__se_sys_execve fs/exec.c:1958 [inline]
__x64_sys_execve+0x131/0x180 fs/exec.c:1958
20
a1
do_syscall_64+0x15b/0x220 arch/x86/entry/common.c:290
entry_SYSCALL_64_after_hwframe+0x63/0xe7
RSP: 0018:ffff8800a3c00000 EFLAGS: 00010083
RIP: 0033:0x7fdc82a17207
Code: Bad RIP value.
RAX: 0000000088c00a77 RBX: 0000000000000000 RCX: ffffffff88c00a77
RSP: 002b:00007fff5f0d6e38 EFLAGS: 00000202 ORIG_RAX: 000000000000003b
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8800a3c00048
RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 00007fdc82a17207
RDX: 0000000000c7a3f0 RSI: 00007fff5f0d6f30 RDI: 00007fff5f0d7f40
RBP: ffff8800a3c00008 R08: 0000000000000000 R09: 0000000000000000
RBP: 0000000000625500 R08: 0000000000004da9 R09: 0000000000004da9
R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000c7a3f0
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000007 R14: 0000000000c75250 R15: 0000000000000005
Modules linked in:
R13: 0000000000000000 R14: 0000000000000000 R15: ffff8800a3c00048
Dumping ftrace buffer:
FS: 0000000001b5f940(0000) GS:ffff88021fc00000(0000) knlGS:0000000000000000
(ftrace buffer empty)
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffff8800a3aef618
CR2: ffff8800a3bffff8 CR3: 00000000abb6a000 CR4: 00000000001406f0
---[ end trace 8abd5158502fd8ca ]---
DR0: 0000000020000000 DR1: 0000000020000000 DR2: 0000000000000000
RIP: 0010:kmsan_write_aligned_origin mm/kmsan/kmsan.c:591 [inline]
RIP: 0010:kmsan_set_origin+0xb0/0x150 mm/kmsan/kmsan.c:625
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
Code: 00
Call Trace:
00 4c