Not allocated shadow for addr ffff8801995b2018 (page ffffea00099822c0)
Attempted to access 120 bytes
------------[ cut here ]------------
kernel BUG at mm/kmsan/kmsan.c:1326!
invalid opcode: 0000 [#1] SMP PTI
Dumping ftrace buffer:
   (ftrace buffer empty)
Modules linked in:
CPU: 1 PID: 4461 Comm: syzkaller375745 Not tainted 4.16.0+ #87
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:kmsan_get_shadow_address+0x1ce/0x1f0 mm/kmsan/kmsan.c:1325
RSP: 0018:ffff8801b447f020 EFLAGS: 00010082
RAX: 000000000000001d RBX: 0000000000000660 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000000
RBP: ffff8801b447f038 R08: 0000000000000000 R09: 0000000000000001
R10: 0000000000000000 R11: 0000000000000000 R12: ffff8801b447f150
R13: ffff88019a618000 R14: 0000000000000001 R15: 0000000000000078
FS:  0000000000a9b880(0000) GS:ffff88021fd00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000455050 CR3: 0000000198528000 CR4: 00000000001406e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 __msan_memcpy+0xaf/0x160 mm/kmsan/kmsan_instr.c:467
 depot_alloc_stack lib/stackdepot.c:143 [inline]
 depot_save_stack+0x360/0x4c0 lib/stackdepot.c:270
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:287 [inline]
 kmsan_save_stack mm/kmsan/kmsan.c:293 [inline]
 kmsan_internal_chain_origin+0x1ab/0x210 mm/kmsan/kmsan.c:684
 kmsan_memcpy_origins+0x11d/0x170 mm/kmsan/kmsan.c:526
 kmsan_copy_to_user+0x132/0x160 mm/kmsan/kmsan.c:1211
 copy_to_user include/linux/uaccess.h:184 [inline]
 simple_read_from_buffer+0x24d/0x3d0 fs/libfs.c:634
 proc_loginuid_read+0x34f/0x410 fs/proc/base.c:1237
 do_loop_readv_writev fs/read_write.c:673 [inline]
 do_iter_read+0x880/0xd70 fs/read_write.c:897
 vfs_readv+0x1ec/0x260 fs/read_write.c:959
 kernel_readv fs/splice.c:361 [inline]
 default_file_splice_read+0xa9a/0x1120 fs/splice.c:416
 do_splice_to fs/splice.c:880 [inline]
 splice_direct_to_actor+0x4c6/0x1040 fs/splice.c:952
 do_splice_direct+0x335/0x540 fs/splice.c:1061
 do_sendfile+0x1067/0x1e40 fs/read_write.c:1413
 SYSC_sendfile64+0x1b3/0x300 fs/read_write.c:1468
 SyS_sendfile64+0x64/0x90 fs/read_write.c:1460
 do_syscall_64+0x309/0x430 arch/x86/entry/common.c:287
 entry_SYSCALL_64_after_hwframe+0x3d/0xa2
RIP: 0033:0x440249
RSP: 002b:00007fff7cd18408 EFLAGS: 00000217 ORIG_RAX: 0000000000000028
RAX: ffffffffffffffda RBX: 00007fff7cd18410 RCX: 0000000000440249
RDX: 0000000020000000 RSI: 0000000000000005 RDI: 0000000000000004
RBP: 0000000000000000 R08: 0000000000000013 R09: 65732f636f72702f
R10: 0000000000000009 R11: 0000000000000217 R12: 6469756e69676f6c
R13: 726f63735f6d6f6f R14: 0000000000000000 R15: 0000000000000000
Code: 75 29 48 c7 c7 fd 92 7d 8a 31 c0 e8 4d 68 86 ff 80 3c 25 e8 03 2c 8b 00 75 11 48 c7 c7 2d 93 7d 8a 31 c0 4c 89 fe e8 32 68 86 ff <0f> 0b eb fe 48 3d ff ff ff 1f 0f 87 a2 fe ff ff 48 8b 1c 25 10 
RIP: kmsan_get_shadow_address+0x1ce/0x1f0 mm/kmsan/kmsan.c:1325 RSP: ffff8801b447f020
---[ end trace e23ac63daf5ddccb ]---