audit: type=1326 audit(1529013531.211:252): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=14177 comm="syz-executor2" exe="/root/syz-executor2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x455b29 code=0x0
Not allocated shadow for addr ffff88000b0cc000 (page ffffea0000424c80)
Attempted to access 4096 bytes
------------[ cut here ]------------
kernel BUG at mm/kmsan/kmsan.c:1382!
invalid opcode: 0000 [#1] SMP PTI
Dumping ftrace buffer:
   (ftrace buffer empty)
Modules linked in:
CPU: 1 PID: 14191 Comm: syz-executor4 Not tainted 4.17.0+ #7
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:kmsan_get_shadow_address+0x1ce/0x1f0 mm/kmsan/kmsan.c:1381
RSP: 0018:ffff88006cddf678 EFLAGS: 00010086
RAX: 000000000000001e RBX: 0000000000000020 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 00000000000326d4 RDI: 00000000000326d5
RBP: ffff88006cddf690 R08: 0000000000000000 R09: 0000000000000001
R10: 0000000000000000 R11: ffffffff86575810 R12: ffff88000b0cc000
R13: 0000000000001000 R14: 0000000000000001 R15: 0000000000001000
FS:  00007f936103c700(0000) GS:ffff88021fd00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000020bea000 CR3: 00000000b19f8000 CR4: 00000000001406e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 kmsan_internal_memset_shadow mm/kmsan/kmsan.c:172 [inline]
 kmsan_internal_unpoison_shadow+0x5c/0xe0 mm/kmsan/kmsan.c:209
 kmsan_unpoison_shadow+0x66/0xb0 mm/kmsan/kmsan.c:223
 get_user_pages_fast+0x493/0x770 mm/gup.c:1831
 rds_pin_pages net/rds/rdma.c:161 [inline]
 rds_cmsg_rdma_args+0x155f/0x2670 net/rds/rdma.c:680
 rds_cmsg_send net/rds/send.c:970 [inline]
 rds_sendmsg+0x20ca/0x43b0 net/rds/send.c:1173
 sock_sendmsg_nosec net/socket.c:629 [inline]
 sock_sendmsg net/socket.c:639 [inline]
 ___sys_sendmsg+0xec8/0x1320 net/socket.c:2117
 __sys_sendmsg net/socket.c:2155 [inline]
 __do_sys_sendmsg net/socket.c:2164 [inline]
 __se_sys_sendmsg net/socket.c:2162 [inline]
 __x64_sys_sendmsg+0x331/0x460 net/socket.c:2162
 do_syscall_64+0x15b/0x230 arch/x86/entry/common.c:287
 entry_SYSCALL_64_after_hwframe+0x44/0xa9
RIP: 0033:0x455b29
RSP: 002b:00007f936103bc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 00007f936103c6d4 RCX: 0000000000455b29
RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000015
RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 00000000004c0e74 R14: 00000000004d08d0 R15: 0000000000000000
Code: 75 29 48 c7 c7 9d 38 97 8a 31 c0 e8 fd 4c 80 ff 80 3c 25 f8 93 53 8b 00 75 11 48 c7 c7 cd 38 97 8a 31 c0 4c 89 fe e8 e2 4c 80 ff <0f> 0b eb fe 48 3d ff ff ff 1f 0f 87 a2 fe ff ff 48 8b 1c 25 10 
RIP: kmsan_get_shadow_address+0x1ce/0x1f0 mm/kmsan/kmsan.c:1381 RSP: ffff88006cddf678
---[ end trace ee938a8369366f04 ]---