BUG: Bad page map in process systemd-udevd pte:ffffedb65f625 pmd:10ffc5067 addr:00007fc5eda00000 vm_flags:08000075 anon_vma:0000000000000000 mapping:ffff8881289174e0 index:44 file:libc-2.24.so fault:ext4_filemap_fault mmap:ext4_file_mmap readpage:ext4_readpage CPU: 1 PID: 8270 Comm: systemd-udevd Not tainted 5.9.0-rc1-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0xb3/0xec lib/dump_stack.c:118 print_bad_pte.cold.117+0x93/0xbd mm/memory.c:547 vm_normal_page+0x48/0xb0 mm/memory.c:610 do_numa_page mm/memory.c:4049 [inline] handle_pte_fault mm/memory.c:4231 [inline] __handle_mm_fault mm/memory.c:4356 [inline] handle_mm_fault+0xd8d/0x17f0 mm/memory.c:4454 do_user_addr_fault arch/x86/mm/fault.c:1294 [inline] handle_page_fault arch/x86/mm/fault.c:1351 [inline] exc_page_fault+0x34f/0x6f0 arch/x86/mm/fault.c:1404 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:538 RIP: 0033:0x7fc5eda000e0 systemd-udevd: Corrupted page table at address 7fc5eda000b6 PGD 10ffaa067 P4D 10ffaa067 PUD 10ffab067 PMD 10ffc5067 PTE ffffedb65f625 Bad pagetable: 0009 [#1] PREEMPT SMP CPU: 1 PID: 8270 Comm: systemd-udevd Not tainted 5.9.0-rc1-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 arch/x86/lib/copy_user_64.S:205 Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 RSP: 0000:ffffc90002ec7bd8 EFLAGS: 00010046 RAX: 0000000000000002 RBX: 0000000000000040 RCX: 0000000000000040 RDX: 0000000000000040 RSI: 00007fc5eda000b6 RDI: ffffc90002ec7c08 RBP: 00007fc5eda000b6 R08: 0000000000000000 R09: 0000000000000001 R10: 0000000000000000 R11: 4a5ae121e54e1d3c R12: ffffc90002ec7c08 R13: ffff8881106364c0 R14: ffff8881106364c0 R15: ffffffff8401b939 FS: 00007fc5eec248c0(0000) GS:ffff88812c100000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fc5eda000b6 CR3: 000000010ffa3000 CR4: 00000000001506e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: copy_user_generic arch/x86/include/asm/uaccess_64.h:37 [inline] raw_copy_from_user arch/x86/include/asm/uaccess_64.h:68 [inline] __copy_from_user_inatomic include/linux/uaccess.h:79 [inline] copy_from_user_nmi+0x8d/0xa0 arch/x86/lib/usercopy.c:33 copy_code arch/x86/kernel/dumpstack.c:87 [inline] show_opcodes+0x50/0x70 arch/x86/kernel/dumpstack.c:117 show_iret_regs+0xd/0x33 arch/x86/kernel/dumpstack.c:138 __show_regs+0x1f/0x40 arch/x86/kernel/process_64.c:73 show_trace_log_lvl+0x25b/0x2ba arch/x86/kernel/dumpstack.c:281 __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0xb3/0xec lib/dump_stack.c:118 print_bad_pte.cold.117+0x93/0xbd mm/memory.c:547 vm_normal_page+0x48/0xb0 mm/memory.c:610 do_numa_page mm/memory.c:4049 [inline] handle_pte_fault mm/memory.c:4231 [inline] __handle_mm_fault mm/memory.c:4356 [inline] handle_mm_fault+0xd8d/0x17f0 mm/memory.c:4454 do_user_addr_fault arch/x86/mm/fault.c:1294 [inline] handle_page_fault arch/x86/mm/fault.c:1351 [inline] exc_page_fault+0x34f/0x6f0 arch/x86/mm/fault.c:1404 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:538 RIP: 0033:0x7fc5eda000e0 systemd-udevd: Corrupted page table at address 7fc5eda000b6 PGD 10ffaa067 P4D 10ffaa067 PUD 10ffab067 PMD 10ffc5067 PTE ffffedb65f625 Bad pagetable: 0009 [#2] PREEMPT SMP CPU: 1 PID: 8270 Comm: systemd-udevd Not tainted 5.9.0-rc1-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 arch/x86/lib/copy_user_64.S:205 Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 RSP: 0000:ffffc90002ec7898 EFLAGS: 00010046 RAX: 0000000000000002 RBX: 0000000000000040 RCX: 0000000000000040 RDX: 0000000000000040 RSI: 00007fc5eda000b6 RDI: ffffc90002ec78c8 RBP: 00007fc5eda000b6 R08: 0000000000000000 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000000000000 R12: ffffc90002ec78c8 R13: ffff8881106364c0 R14: ffff8881106364c0 R15: ffffffff8401b939 FS: 00007fc5eec248c0(0000) GS:ffff88812c100000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fc5eda000b6 CR3: 000000010ffa3000 CR4: 00000000001506e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: copy_user_generic arch/x86/include/asm/uaccess_64.h:37 [inline] raw_copy_from_user arch/x86/include/asm/uaccess_64.h:68 [inline] __copy_from_user_inatomic include/linux/uaccess.h:79 [inline] copy_from_user_nmi+0x8d/0xa0 arch/x86/lib/usercopy.c:33 copy_code arch/x86/kernel/dumpstack.c:87 [inline] show_opcodes+0x50/0x70 arch/x86/kernel/dumpstack.c:117 show_iret_regs+0xd/0x33 arch/x86/kernel/dumpstack.c:138 __show_regs+0x1f/0x40 arch/x86/kernel/process_64.c:73 show_trace_log_lvl+0x25b/0x2ba arch/x86/kernel/dumpstack.c:281 __die_body+0x15/0x60 arch/x86/kernel/dumpstack.c:400 pgtable_bad+0x50/0x70 arch/x86/mm/fault.c:552 do_user_addr_fault arch/x86/mm/fault.c:1157 [inline] handle_page_fault arch/x86/mm/fault.c:1351 [inline] exc_page_fault+0x570/0x6f0 arch/x86/mm/fault.c:1404 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:538 RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 arch/x86/lib/copy_user_64.S:205 Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 RSP: 0000:ffffc90002ec7bd8 EFLAGS: 00010046 RAX: 0000000000000002 RBX: 0000000000000040 RCX: 0000000000000040 RDX: 0000000000000040 RSI: 00007fc5eda000b6 RDI: ffffc90002ec7c08 RBP: 00007fc5eda000b6 R08: 0000000000000000 R09: 0000000000000001 R10: 0000000000000000 R11: 4a5ae121e54e1d3c R12: ffffc90002ec7c08 R13: ffff8881106364c0 R14: ffff8881106364c0 R15: ffffffff8401b939 copy_user_generic arch/x86/include/asm/uaccess_64.h:37 [inline] raw_copy_from_user arch/x86/include/asm/uaccess_64.h:68 [inline] __copy_from_user_inatomic include/linux/uaccess.h:79 [inline] copy_from_user_nmi+0x8d/0xa0 arch/x86/lib/usercopy.c:33 copy_code arch/x86/kernel/dumpstack.c:87 [inline] show_opcodes+0x50/0x70 arch/x86/kernel/dumpstack.c:117 show_iret_regs+0xd/0x33 arch/x86/kernel/dumpstack.c:138 __show_regs+0x1f/0x40 arch/x86/kernel/process_64.c:73 show_trace_log_lvl+0x25b/0x2ba arch/x86/kernel/dumpstack.c:281 __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0xb3/0xec lib/dump_stack.c:118 print_bad_pte.cold.117+0x93/0xbd mm/memory.c:547 vm_normal_page+0x48/0xb0 mm/memory.c:610 do_numa_page mm/memory.c:4049 [inline] handle_pte_fault mm/memory.c:4231 [inline] __handle_mm_fault mm/memory.c:4356 [inline] handle_mm_fault+0xd8d/0x17f0 mm/memory.c:4454 do_user_addr_fault arch/x86/mm/fault.c:1294 [inline] handle_page_fault arch/x86/mm/fault.c:1351 [inline] exc_page_fault+0x34f/0x6f0 arch/x86/mm/fault.c:1404 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:538 RIP: 0033:0x7fc5eda000e0 systemd-udevd: Corrupted page table at address 7fc5eda000b6 PGD 10ffaa067 P4D 10ffaa067 PUD 10ffab067 PMD 10ffc5067 PTE ffffedb65f625 Bad pagetable: 0009 [#3] PREEMPT SMP CPU: 1 PID: 8270 Comm: systemd-udevd Not tainted 5.9.0-rc1-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 arch/x86/lib/copy_user_64.S:205 Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 RSP: 0000:ffffc90002ec7558 EFLAGS: 00010046 RAX: 0000000000000002 RBX: 0000000000000040 RCX: 0000000000000040 RDX: 0000000000000040 RSI: 00007fc5eda000b6 RDI: ffffc90002ec7588 RBP: 00007fc5eda000b6 R08: 0000000000000000 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000000015fd0 R12: ffffc90002ec7588 R13: ffff8881106364c0 R14: ffff8881106364c0 R15: ffffffff8401b939 FS: 00007fc5eec248c0(0000) GS:ffff88812c100000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fc5eda000b6 CR3: 000000010ffa3000 CR4: 00000000001506e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: copy_user_generic arch/x86/include/asm/uaccess_64.h:37 [inline] raw_copy_from_user arch/x86/include/asm/uaccess_64.h:68 [inline] __copy_from_user_inatomic include/linux/uaccess.h:79 [inline] copy_from_user_nmi+0x8d/0xa0 arch/x86/lib/usercopy.c:33 copy_code arch/x86/kernel/dumpstack.c:87 [inline] show_opcodes+0x50/0x70 arch/x86/kernel/dumpstack.c:117 show_iret_regs+0xd/0x33 arch/x86/kernel/dumpstack.c:138 __show_regs+0x1f/0x40 arch/x86/kernel/process_64.c:73 show_trace_log_lvl+0x25b/0x2ba arch/x86/kernel/dumpstack.c:281 __die_body+0x15/0x60 arch/x86/kernel/dumpstack.c:400 pgtable_bad+0x50/0x70 arch/x86/mm/fault.c:552 do_user_addr_fault arch/x86/mm/fault.c:1157 [inline] handle_page_fault arch/x86/mm/fault.c:1351 [inline] exc_page_fault+0x570/0x6f0 arch/x86/mm/fault.c:1404 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:538 RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 arch/x86/lib/copy_user_64.S:205 Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 RSP: 0000:ffffc90002ec7898 EFLAGS: 00010046 RAX: 0000000000000002 RBX: 0000000000000040 RCX: 0000000000000040 RDX: 0000000000000040 RSI: 00007fc5eda000b6 RDI: ffffc90002ec78c8 RBP: 00007fc5eda000b6 R08: 0000000000000000 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000000000000 R12: ffffc90002ec78c8 R13: ffff8881106364c0 R14: ffff8881106364c0 R15: ffffffff8401b939 copy_user_generic arch/x86/include/asm/uaccess_64.h:37 [inline] raw_copy_from_user arch/x86/include/asm/uaccess_64.h:68 [inline] __copy_from_user_inatomic include/linux/uaccess.h:79 [inline] copy_from_user_nmi+0x8d/0xa0 arch/x86/lib/usercopy.c:33 copy_code arch/x86/kernel/dumpstack.c:87 [inline] show_opcodes+0x50/0x70 arch/x86/kernel/dumpstack.c:117 show_iret_regs+0xd/0x33 arch/x86/kernel/dumpstack.c:138 __show_regs+0x1f/0x40 arch/x86/kernel/process_64.c:73 show_trace_log_lvl+0x25b/0x2ba arch/x86/kernel/dumpstack.c:281 __die_body+0x15/0x60 arch/x86/kernel/dumpstack.c:400 pgtable_bad+0x50/0x70 arch/x86/mm/fault.c:552 do_user_addr_fault arch/x86/mm/fault.c:1157 [inline] handle_page_fault arch/x86/mm/fault.c:1351 [inline] exc_page_fault+0x570/0x6f0 arch/x86/mm/fault.c:1404 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:538 RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 arch/x86/lib/copy_user_64.S:205 Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 RSP: 0000:ffffc90002ec7bd8 EFLAGS: 00010046 RAX: 0000000000000002 RBX: 0000000000000040 RCX: 0000000000000040 RDX: 0000000000000040 RSI: 00007fc5eda000b6 RDI: ffffc90002ec7c08 RBP: 00007fc5eda000b6 R08: 0000000000000000 R09: 0000000000000001 R10: 0000000000000000 R11: 4a5ae121e54e1d3c R12: ffffc90002ec7c08 R13: ffff8881106364c0 R14: ffff8881106364c0 R15: ffffffff8401b939 copy_user_generic arch/x86/include/asm/uaccess_64.h:37 [inline] raw_copy_from_user arch/x86/include/asm/uaccess_64.h:68 [inline] __copy_from_user_inatomic include/linux/uaccess.h:79 [inline] copy_from_user_nmi+0x8d/0xa0 arch/x86/lib/usercopy.c:33 copy_code arch/x86/kernel/dumpstack.c:87 [inline] show_opcodes+0x50/0x70 arch/x86/kernel/dumpstack.c:117 show_iret_regs+0xd/0x33 arch/x86/kernel/dumpstack.c:138 __show_regs+0x1f/0x40 arch/x86/kernel/process_64.c:73 show_trace_log_lvl+0x25b/0x2ba arch/x86/kernel/dumpstack.c:281 __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0xb3/0xec lib/dump_stack.c:118 print_bad_pte.cold.117+0x93/0xbd mm/memory.c:547 vm_normal_page+0x48/0xb0 mm/memory.c:610 do_numa_page mm/memory.c:4049 [inline] handle_pte_fault mm/memory.c:4231 [inline] __handle_mm_fault mm/memory.c:4356 [inline] handle_mm_fault+0xd8d/0x17f0 mm/memory.c:4454 do_user_addr_fault arch/x86/mm/fault.c:1294 [inline] handle_page_fault arch/x86/mm/fault.c:1351 [inline] exc_page_fault+0x34f/0x6f0 arch/x86/mm/fault.c:1404 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:538 RIP: 0033:0x7fc5eda000e0 systemd-udevd: Corrupted page table at address 7fc5eda000b6 PGD 10ffaa067 P4D 10ffaa067 PUD 10ffab067 PMD 10ffc5067 PTE ffffedb65f625 Bad pagetable: 0009 [#4] PREEMPT SMP CPU: 1 PID: 8270 Comm: systemd-udevd Not tainted 5.9.0-rc1-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 arch/x86/lib/copy_user_64.S:205 Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 RSP: 0000:ffffc90002ec7218 EFLAGS: 00010046 RAX: 0000000000000002 RBX: 0000000000000040 RCX: 0000000000000040 RDX: 0000000000000040 RSI: 00007fc5eda000b6 RDI: ffffc90002ec7248 RBP: 00007fc5eda000b6 R08: 0000000000000000 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000000014a80 R12: ffffc90002ec7248 R13: ffff8881106364c0 R14: ffff8881106364c0 R15: ffffffff8401b939 FS: 00007fc5eec248c0(0000) GS:ffff88812c100000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fc5eda000b6 CR3: 000000010ffa3000 CR4: 00000000001506e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: copy_user_generic arch/x86/include/asm/uaccess_64.h:37 [inline] raw_copy_from_user arch/x86/include/asm/uaccess_64.h:68 [inline] __copy_from_user_inatomic include/linux/uaccess.h:79 [inline] copy_from_user_nmi+0x8d/0xa0 arch/x86/lib/usercopy.c:33 copy_code arch/x86/kernel/dumpstack.c:87 [inline] show_opcodes+0x50/0x70 arch/x86/kernel/dumpstack.c:117 show_iret_regs+0xd/0x33 arch/x86/kernel/dumpstack.c:138 __show_regs+0x1f/0x40 arch/x86/kernel/process_64.c:73 show_trace_log_lvl+0x25b/0x2ba arch/x86/kernel/dumpstack.c:281 __die_body+0x15/0x60 arch/x86/kernel/dumpstack.c:400 pgtable_bad+0x50/0x70 arch/x86/mm/fault.c:552 do_user_addr_fault arch/x86/mm/fault.c:1157 [inline] handle_page_fault arch/x86/mm/fault.c:1351 [inline] exc_page_fault+0x570/0x6f0 arch/x86/mm/fault.c:1404 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:538 RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 arch/x86/lib/copy_user_64.S:205 Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 RSP: 0000:ffffc90002ec7558 EFLAGS: 00010046 RAX: 0000000000000002 RBX: 0000000000000040 RCX: 0000000000000040 RDX: 0000000000000040 RSI: 00007fc5eda000b6 RDI: ffffc90002ec7588 RBP: 00007fc5eda000b6 R08: 0000000000000000 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000000015fd0 R12: ffffc90002ec7588 R13: ffff8881106364c0 R14: ffff8881106364c0 R15: ffffffff8401b939 copy_user_generic arch/x86/include/asm/uaccess_64.h:37 [inline] raw_copy_from_user arch/x86/include/asm/uaccess_64.h:68 [inline] __copy_from_user_inatomic include/linux/uaccess.h:79 [inline] copy_from_user_nmi+0x8d/0xa0 arch/x86/lib/usercopy.c:33 copy_code arch/x86/kernel/dumpstack.c:87 [inline] show_opcodes+0x50/0x70 arch/x86/kernel/dumpstack.c:117 show_iret_regs+0xd/0x33 arch/x86/kernel/dumpstack.c:138 __show_regs+0x1f/0x40 arch/x86/kernel/process_64.c:73 show_trace_log_lvl+0x25b/0x2ba arch/x86/kernel/dumpstack.c:281 __die_body+0x15/0x60 arch/x86/kernel/dumpstack.c:400 pgtable_bad+0x50/0x70 arch/x86/mm/fault.c:552 do_user_addr_fault arch/x86/mm/fault.c:1157 [inline] handle_page_fault arch/x86/mm/fault.c:1351 [inline] exc_page_fault+0x570/0x6f0 arch/x86/mm/fault.c:1404 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:538 RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 arch/x86/lib/copy_user_64.S:205 Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 RSP: 0000:ffffc90002ec7898 EFLAGS: 00010046 RAX: 0000000000000002 RBX: 0000000000000040 RCX: 0000000000000040 RDX: 0000000000000040 RSI: 00007fc5eda000b6 RDI: ffffc90002ec78c8 RBP: 00007fc5eda000b6 R08: 0000000000000000 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000000000000 R12: ffffc90002ec78c8 R13: ffff8881106364c0 R14: ffff8881106364c0 R15: ffffffff8401b939 copy_user_generic arch/x86/include/asm/uaccess_64.h:37 [inline] raw_copy_from_user arch/x86/include/asm/uaccess_64.h:68 [inline] __copy_from_user_inatomic include/linux/uaccess.h:79 [inline] copy_from_user_nmi+0x8d/0xa0 arch/x86/lib/usercopy.c:33 copy_code arch/x86/kernel/dumpstack.c:87 [inline] show_opcodes+0x50/0x70 arch/x86/kernel/dumpstack.c:117 show_iret_regs+0xd/0x33 arch/x86/kernel/dumpstack.c:138 __show_regs+0x1f/0x40 arch/x86/kernel/process_64.c:73 show_trace_log_lvl+0x25b/0x2ba arch/x86/kernel/dumpstack.c:281 __die_body+0x15/0x60 arch/x86/kernel/dumpstack.c:400 pgtable_bad+0x50/0x70 arch/x86/mm/fault.c:552 do_user_addr_fault arch/x86/mm/fault.c:1157 [inline] handle_page_fault arch/x86/mm/fault.c:1351 [inline] exc_page_fault+0x570/0x6f0 arch/x86/mm/fault.c:1404 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:538 RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 arch/x86/lib/copy_user_64.S:205 Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 RSP: 0000:ffffc90002ec7bd8 EFLAGS: 00010046 RAX: 0000000000000002 RBX: 0000000000000040 RCX: 0000000000000040 RDX: 0000000000000040 RSI: 00007fc5eda000b6 RDI: ffffc90002ec7c08 RBP: 00007fc5eda000b6 R08: 0000000000000000 R09: 0000000000000001 R10: 0000000000000000 R11: 4a5ae121e54e1d3c R12: ffffc90002ec7c08 R13: ffff8881106364c0 R14: ffff8881106364c0 R15: ffffffff8401b939 copy_user_generic arch/x86/include/asm/uaccess_64.h:37 [inline] raw_copy_from_user arch/x86/include/asm/uaccess_64.h:68 [inline] __copy_from_user_inatomic include/linux/uaccess.h:79 [inline] copy_from_user_nmi+0x8d/0xa0 arch/x86/lib/usercopy.c:33 copy_code arch/x86/kernel/dumpstack.c:87 [inline] show_opcodes+0x50/0x70 arch/x86/kernel/dumpstack.c:117 show_iret_regs+0xd/0x33 arch/x86/kernel/dumpstack.c:138 __show_regs+0x1f/0x40 arch/x86/kernel/process_64.c:73 show_trace_log_lvl+0x25b/0x2ba arch/x86/kernel/dumpstack.c:281 __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0xb3/0xec lib/dump_stack.c:118 print_bad_pte.cold.117+0x93/0xbd mm/memory.c:547 vm_normal_page+0x48/0xb0 mm/memory.c:610 do_numa_page mm/memory.c:4049 [inline] handle_pte_fault mm/memory.c:4231 [inline] __handle_mm_fault mm/memory.c:4356 [inline] handle_mm_fault+0xd8d/0x17f0 mm/memory.c:4454 do_user_addr_fault arch/x86/mm/fault.c:1294 [inline] handle_page_fault arch/x86/mm/fault.c:1351 [inline] exc_page_fault+0x34f/0x6f0 arch/x86/mm/fault.c:1404 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:538 RIP: 0033:0x7fc5eda000e0 systemd-udevd: Corrupted page table at address 7fc5eda000b6 PGD 10ffaa067 P4D 10ffaa067 PUD 10ffab067 PMD 10ffc5067 PTE ffffedb65f625 Bad pagetable: 0009 [#5] PREEMPT SMP CPU: 1 PID: 8270 Comm: systemd-udevd Not tainted 5.9.0-rc1-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 arch/x86/lib/copy_user_64.S:205 Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 RSP: 0000:ffffc90002ec6ed8 EFLAGS: 00010046 RAX: 0000000000000002 RBX: 0000000000000040 RCX: 0000000000000040 RDX: 0000000000000040 RSI: 00007fc5eda000b6 RDI: ffffc90002ec6f08 RBP: 00007fc5eda000b6 R08: 0000000000000000 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000000000000 R12: ffffc90002ec6f08 R13: ffff8881106364c0 R14: ffff8881106364c0 R15: ffffffff8401b939 FS: 00007fc5eec248c0(0000) GS:ffff88812c100000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fc5eda000b6 CR3: 000000010ffa3000 CR4: 00000000001506e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: copy_user_generic arch/x86/include/asm/uaccess_64.h:37 [inline] raw_copy_from_user arch/x86/include/asm/uaccess_64.h:68 [inline] __copy_from_user_inatomic include/linux/uaccess.h:79 [inline] copy_from_user_nmi+0x8d/0xa0 arch/x86/lib/usercopy.c:33 copy_code arch/x86/kernel/dumpstack.c:87 [inline] show_opcodes+0x50/0x70 arch/x86/kernel/dumpstack.c:117 show_iret_regs+0xd/0x33 arch/x86/kernel/dumpstack.c:138 __show_regs+0x1f/0x40 arch/x86/kernel/process_64.c:73 show_trace_log_lvl+0x25b/0x2ba arch/x86/kernel/dumpstack.c:281 __die_body+0x15/0x60 arch/x86/kernel/dumpstack.c:400 pgtable_bad+0x50/0x70 arch/x86/mm/fault.c:552 do_user_addr_fault arch/x86/mm/fault.c:1157 [inline] handle_page_fault arch/x86/mm/fault.c:1351 [inline] exc_page_fault+0x570/0x6f0 arch/x86/mm/fault.c:1404 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:538 RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 arch/x86/lib/copy_user_64.S:205 Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 RSP: 0000:ffffc90002ec7218 EFLAGS: 00010046 RAX: 0000000000000002 RBX: 0000000000000040 RCX: 0000000000000040 RDX: 0000000000000040 RSI: 00007fc5eda000b6 RDI: ffffc90002ec7248 RBP: 00007fc5eda000b6 R08: 0000000000000000 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000000014a80 R12: ffffc90002ec7248 R13: ffff8881106364c0 R14: ffff8881106364c0 R15: ffffffff8401b939 copy_user_generic arch/x86/include/asm/uaccess_64.h:37 [inline] raw_copy_from_user arch/x86/include/asm/uaccess_64.h:68 [inline] __copy_from_user_inatomic include/linux/uaccess.h:79 [inline] copy_from_user_nmi+0x8d/0xa0 arch/x86/lib/usercopy.c:33 copy_code arch/x86/kernel/dumpstack.c:87 [inline] show_opcodes+0x50/0x70 arch/x86/kernel/dumpstack.c:117 show_iret_regs+0xd/0x33 arch/x86/kernel/dumpstack.c:138 __show_regs+0x1f/0x40 arch/x86/kernel/process_64.c:73 show_trace_log_lvl+0x25b/0x2ba arch/x86/kernel/dumpstack.c:281 __die_body+0x15/0x60 arch/x86/kernel/dumpstack.c:400 pgtable_bad+0x50/0x70 arch/x86/mm/fault.c:552 do_user_addr_fault arch/x86/mm/fault.c:1157 [inline] handle_page_fault arch/x86/mm/fault.c:1351 [inline] exc_page_fault+0x570/0x6f0 arch/x86/mm/fault.c:1404 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:538 RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 arch/x86/lib/copy_user_64.S:205 Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 RSP: 0000:ffffc90002ec7558 EFLAGS: 00010046 RAX: 0000000000000002 RBX: 0000000000000040 RCX: 0000000000000040 RDX: 0000000000000040 RSI: 00007fc5eda000b6 RDI: ffffc90002ec7588 RBP: 00007fc5eda000b6 R08: 0000000000000000 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000000015fd0 R12: ffffc90002ec7588 R13: ffff8881106364c0 R14: ffff8881106364c0 R15: ffffffff8401b939 copy_user_generic arch/x86/include/asm/uaccess_64.h:37 [inline] raw_copy_from_user arch/x86/include/asm/uaccess_64.h:68 [inline] __copy_from_user_inatomic include/linux/uaccess.h:79 [inline] copy_from_user_nmi+0x8d/0xa0 arch/x86/lib/usercopy.c:33 copy_code arch/x86/kernel/dumpstack.c:87 [inline] show_opcodes+0x50/0x70 arch/x86/kernel/dumpstack.c:117 show_iret_regs+0xd/0x33 arch/x86/kernel/dumpstack.c:138 __show_regs+0x1f/0x40 arch/x86/kernel/process_64.c:73 show_trace_log_lvl+0x25b/0x2ba arch/x86/kernel/dumpstack.c:281 __die_body+0x15/0x60 arch/x86/kernel/dumpstack.c:400 pgtable_bad+0x50/0x70 arch/x86/mm/fault.c:552 do_user_addr_fault arch/x86/mm/fault.c:1157 [inline] handle_page_fault arch/x86/mm/fault.c:1351 [inline] exc_page_fault+0x570/0x6f0 arch/x86/mm/fault.c:1404 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:538 RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 arch/x86/lib/copy_user_64.S:205 Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 RSP: 0000:ffffc90002ec7898 EFLAGS: 00010046 RAX: 0000000000000002 RBX: 0000000000000040 RCX: 0000000000000040 RDX: 0000000000000040 RSI: 00007fc5eda000b6 RDI: ffffc90002ec78c8 RBP: 00007fc5eda000b6 R08: 0000000000000000 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000000000000 R12: ffffc90002ec78c8 R13: ffff8881106364c0 R14: ffff8881106364c0 R15: ffffffff8401b939 copy_user_generic arch/x86/include/asm/uaccess_64.h:37 [inline] raw_copy_from_user arch/x86/include/asm/uaccess_64.h:68 [inline] __copy_from_user_inatomic include/linux/uaccess.h:79 [inline] copy_from_user_nmi+0x8d/0xa0 arch/x86/lib/usercopy.c:33 copy_code arch/x86/kernel/dumpstack.c:87 [inline] show_opcodes+0x50/0x70 arch/x86/kernel/dumpstack.c:117 show_iret_regs+0xd/0x33 arch/x86/kernel/dumpstack.c:138 __show_regs+0x1f/0x40 arch/x86/kernel/process_64.c:73 show_trace_log_lvl+0x25b/0x2ba arch/x86/kernel/dumpstack.c:281 __die_body+0x15/0x60 arch/x86/kernel/dumpstack.c:400 pgtable_bad+0x50/0x70 arch/x86/mm/fault.c:552 do_user_addr_fault arch/x86/mm/fault.c:1157 [inline] handle_page_fault arch/x86/mm/fault.c:1351 [inline] exc_page_fault+0x570/0x6f0 arch/x86/mm/fault.c:1404 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:538 RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 arch/x86/lib/copy_user_64.S:205 Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 RSP: 0000:ffffc90002ec7bd8 EFLAGS: 00010046 RAX: 0000000000000002 RBX: 0000000000000040 RCX: 0000000000000040 RDX: 0000000000000040 RSI: 00007fc5eda000b6 RDI: ffffc90002ec7c08 RBP: 00007fc5eda000b6 R08: 0000000000000000 R09: 0000000000000001 R10: 0000000000000000 R11: 4a5ae121e54e1d3c R12: ffffc90002ec7c08 R13: ffff8881106364c0 R14: ffff8881106364c0 R15: ffffffff8401b939 copy_user_generic arch/x86/include/asm/uaccess_64.h:37 [inline] raw_copy_from_user arch/x86/include/asm/uaccess_64.h:68 [inline] __copy_from_user_inatomic include/linux/uaccess.h:79 [inline] copy_from_user_nmi+0x8d/0xa0 arch/x86/lib/usercopy.c:33 copy_code arch/x86/kernel/dumpstack.c:87 [inline] show_opcodes+0x50/0x70 arch/x86/kernel/dumpstack.c:117 show_iret_regs+0xd/0x33 arch/x86/kernel/dumpstack.c:138 __show_regs+0x1f/0x40 arch/x86/kernel/process_64.c:73 show_trace_log_lvl+0x25b/0x2ba arch/x86/kernel/dumpstack.c:281 __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0xb3/0xec lib/dump_stack.c:118 print_bad_pte.cold.117+0x93/0xbd mm/memory.c:547 vm_normal_page+0x48/0xb0 mm/memory.c:610 do_numa_page mm/memory.c:4049 [inline] handle_pte_fault mm/memory.c:4231 [inline] __handle_mm_fault mm/memory.c:4356 [inline] handle_mm_fault+0xd8d/0x17f0 mm/memory.c:4454 do_user_addr_fault arch/x86/mm/fault.c:1294 [inline] handle_page_fault arch/x86/mm/fault.c:1351 [inline] exc_page_fault+0x34f/0x6f0 arch/x86/mm/fault.c:1404 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:538 RIP: 0033:0x7fc5eda000e0 systemd-udevd: Corrupted page table at address 7fc5eda000b6 PGD 10ffaa067 P4D 10ffaa067 PUD 10ffab067 PMD 10ffc5067 PTE ffffedb65f625 Bad pagetable: 0009 [#6] PREEMPT SMP CPU: 1 PID: 8270 Comm: systemd-udevd Not tainted 5.9.0-rc1-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 arch/x86/lib/copy_user_64.S:205 Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 RSP: 0000:ffffc90002ec6b98 EFLAGS: 00010046 RAX: 0000000000000002 RBX: 0000000000000040 RCX: 0000000000000040 RDX: 0000000000000040 RSI: 00007fc5eda000b6 RDI: ffffc90002ec6bc8 RBP: 00007fc5eda000b6 R08: 0000000000000000 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000037323854 R12: ffffc90002ec6bc8 R13: ffff8881106364c0 R14: ffff8881106364c0 R15: ffffffff8401b939 FS: 00007fc5eec248c0(0000) GS:ffff88812c100000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fc5eda000b6 CR3: 000000010ffa3000 CR4: 00000000001506e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: copy_user_generic arch/x86/include/asm/uaccess_64.h:37 [inline] raw_copy_from_user arch/x86/include/asm/uaccess_64.h:68 [inline] __copy_from_user_inatomic include/linux/uaccess.h:79 [inline] copy_from_user_nmi+0x8d/0xa0 arch/x86/lib/usercopy.c:33 copy_code arch/x86/kernel/dumpstack.c:87 [inline] show_opcodes+0x50/0x70 arch/x86/kernel/dumpstack.c:117 show_iret_regs+0xd/0x33 arch/x86/kernel/dumpstack.c:138 __show_regs+0x1f/0x40 arch/x86/kernel/process_64.c:73 show_trace_log_lvl+0x25b/0x2ba arch/x86/kernel/dumpstack.c:281 __die_body+0x15/0x60 arch/x86/kernel/dumpstack.c:400 pgtable_bad+0x50/0x70 arch/x86/mm/fault.c:552 do_user_addr_fault arch/x86/mm/fault.c:1157 [inline] handle_page_fault arch/x86/mm/fault.c:1351 [inline] exc_page_fault+0x570/0x6f0 arch/x86/mm/fault.c:1404 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:538 RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 arch/x86/lib/copy_user_64.S:205 Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 RSP: 0000:ffffc90002ec6ed8 EFLAGS: 00010046 RAX: 0000000000000002 RBX: 0000000000000040 RCX: 0000000000000040 RDX: 0000000000000040 RSI: 00007fc5eda000b6 RDI: ffffc90002ec6f08 RBP: 00007fc5eda000b6 R08: 0000000000000000 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000000000000 R12: ffffc90002ec6f08 R13: ffff8881106364c0 R14: ffff8881106364c0 R15: ffffffff8401b939 copy_user_generic arch/x86/include/asm/uaccess_64.h:37 [inline] raw_copy_from_user arch/x86/include/asm/uaccess_64.h:68 [inline] __copy_from_user_inatomic include/linux/uaccess.h:79 [inline] copy_from_user_nmi+0x8d/0xa0 arch/x86/lib/usercopy.c:33 copy_code arch/x86/kernel/dumpstack.c:87 [inline] show_opcodes+0x50/0x70 arch/x86/kernel/dumpstack.c:117 show_iret_regs+0xd/0x33 arch/x86/kernel/dumpstack.c:138 __show_regs+0x1f/0x40 arch/x86/kernel/process_64.c:73 show_trace_log_lvl+0x25b/0x2ba arch/x86/kernel/dumpstack.c:281 __die_body+0x15/0x60 arch/x86/kernel/dumpstack.c:400 pgtable_bad+0x50/0x70 arch/x86/mm/fault.c:552 do_user_addr_fault arch/x86/mm/fault.c:1157 [inline] handle_page_fault arch/x86/mm/fault.c:1351 [inline] exc_page_fault+0x570/0x6f0 arch/x86/mm/fault.c:1404 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:538 RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 arch/x86/lib/copy_user_64.S:205 Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 RSP: 0000:ffffc90002ec7218 EFLAGS: 00010046 RAX: 0000000000000002 RBX: 0000000000000040 RCX: 0000000000000040 RDX: 0000000000000040 RSI: 00007fc5eda000b6 RDI: ffffc90002ec7248 RBP: 00007fc5eda000b6 R08: 0000000000000000 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000000014a80 R12: ffffc90002ec7248 R13: ffff8881106364c0 R14: ffff8881106364c0 R15: ffffffff8401b939 copy_user_generic arch/x86/include/asm/uaccess_64.h:37 [inline] raw_copy_from_user arch/x86/include/asm/uaccess_64.h:68 [inline] __copy_from_user_inatomic include/linux/uaccess.h:79 [inline] copy_from_user_nmi+0x8d/0xa0 arch/x86/lib/usercopy.c:33 copy_code arch/x86/kernel/dumpstack.c:87 [inline] show_opcodes+0x50/0x70 arch/x86/kernel/dumpstack.c:117 show_iret_regs+0xd/0x33 arch/x86/kernel/dumpstack.c:138 __show_regs+0x1f/0x40 arch/x86/kernel/process_64.c:73 show_trace_log_lvl+0x25b/0x2ba arch/x86/kernel/dumpstack.c:281 __die_body+0x15/0x60 arch/x86/kernel/dumpstack.c:400 pgtable_bad+0x50/0x70 arch/x86/mm/fault.c:552 do_user_addr_fault arch/x86/mm/fault.c:1157 [inline] handle_page_fault arch/x86/mm/fault.c:1351 [inline] exc_page_fault+0x570/0x6f0 arch/x86/mm/fault.c:1404 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:538 RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 arch/x86/lib/copy_user_64.S:205 Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 RSP: 0000:ffffc90002ec7558 EFLAGS: 00010046 RAX: 0000000000000002 RBX: 0000000000000040 RCX: 0000000000000040 RDX: 0000000000000040 RSI: 00007fc5eda000b6 RDI: ffffc90002ec7588 RBP: 00007fc5eda000b6 R08: 0000000000000000 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000000015fd0 R12: ffffc90002ec7588 R13: ffff8881106364c0 R14: ffff8881106364c0 R15: ffffffff8401b939 copy_user_generic arch/x86/include/asm/uaccess_64.h:37 [inline] raw_copy_from_user arch/x86/include/asm/uaccess_64.h:68 [inline] __copy_from_user_inatomic include/linux/uaccess.h:79 [inline] copy_from_user_nmi+0x8d/0xa0 arch/x86/lib/usercopy.c:33 copy_code arch/x86/kernel/dumpstack.c:87 [inline] show_opcodes+0x50/0x70 arch/x86/kernel/dumpstack.c:117 show_iret_regs+0xd/0x33 arch/x86/kernel/dumpstack.c:138 __show_regs+0x1f/0x40 arch/x86/kernel/process_64.c:73 show_trace_log_lvl+0x25b/0x2ba arch/x86/kernel/dumpstack.c:281 __die_body+0x15/0x60 arch/x86/kernel/dumpstack.c:400 pgtable_bad+0x50/0x70 arch/x86/mm/fault.c:552 do_user_addr_fault arch/x86/mm/fault.c:1157 [inline] handle_page_fault arch/x86/mm/fault.c:1351 [inline] exc_page_fault+0x570/0x6f0 arch/x86/mm/fault.c:1404 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:538 RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 arch/x86/lib/copy_user_64.S:205 Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 RSP: 0000:ffffc90002ec7898 EFLAGS: 00010046 RAX: 0000000000000002 RBX: 0000000000000040 RCX: 0000000000000040 RDX: 0000000000000040 RSI: 00007fc5eda000b6 RDI: ffffc90002ec78c8 RBP: 00007fc5eda000b6 R08: 0000000000000000 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000000000000 R12: ffffc90002ec78c8 R13: ffff8881106364c0 R14: ffff8881106364c0 R15: ffffffff8401b939 copy_user_generic arch/x86/include/asm/uaccess_64.h:37 [inline] raw_copy_from_user arch/x86/include/asm/uaccess_64.h:68 [inline] __copy_from_user_inatomic include/linux/uaccess.h:79 [inline] copy_from_user_nmi+0x8d/0xa0 arch/x86/lib/usercopy.c:33 copy_code arch/x86/kernel/dumpstack.c:87 [inline] show_opcodes+0x50/0x70 arch/x86/kernel/dumpstack.c:117 show_iret_regs+0xd/0x33 arch/x86/kernel/dumpstack.c:138 __show_regs+0x1f/0x40 arch/x86/kernel/process_64.c:73 show_trace_log_lvl+0x25b/0x2ba arch/x86/kernel/dumpstack.c:281 __die_body+0x15/0x60 arch/x86/kernel/dumpstack.c:400 pgtable_bad+0x50/0x70 arch/x86/mm/fault.c:552 do_user_addr_fault arch/x86/mm/fault.c:1157 [inline] handle_page_fault arch/x86/mm/fault.c:1351 [inline] exc_page_fault+0x570/0x6f0 arch/x86/mm/fault.c:1404 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:538 RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 arch/x86/lib/copy_user_64.S:205 Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 RSP: 0000:ffffc90002ec7bd8 EFLAGS: 00010046 RAX: 0000000000000002 RBX: 0000000000000040 RCX: 0000000000000040 RDX: 0000000000000040 RSI: 00007fc5eda000b6 RDI: ffffc90002ec7c08 RBP: 00007fc5eda000b6 R08: 0000000000000000 R09: 0000000000000001 R10: 0000000000000000 R11: 4a5ae121e54e1d3c R12: ffffc90002ec7c08 R13: ffff8881106364c0 R14: ffff8881106364c0 R15: ffffffff8401b939 copy_user_generic arch/x86/include/asm/uaccess_64.h:37 [inline] raw_copy_from_user arch/x86/include/asm/uaccess_64.h:68 [inline] __copy_from_user_inatomic include/linux/uaccess.h:79 [inline] copy_from_user_nmi+0x8d/0xa0 arch/x86/lib/usercopy.c:33 copy_code arch/x86/kernel/dumpstack.c:87 [inline] show_opcodes+0x50/0x70 arch/x86/kernel/dumpstack.c:117 show_iret_regs+0xd/0x33 arch/x86/kernel/dumpstack.c:138 __show_regs+0x1f/0x40 arch/x86/kernel/process_64.c:73 show_trace_log_lvl+0x25b/0x2ba arch/x86/kernel/dumpstack.c:281 __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0xb3/0xec lib/dump_stack.c:118 print_bad_pte.cold.117+0x93/0xbd mm/memory.c:547 vm_normal_page+0x48/0xb0 mm/memory.c:610 do_numa_page mm/memory.c:4049 [inline] handle_pte_fault mm/memory.c:4231 [inline] __handle_mm_fault mm/memory.c:4356 [inline] handle_mm_fault+0xd8d/0x17f0 mm/memory.c:4454 do_user_addr_fault arch/x86/mm/fault.c:1294 [inline] handle_page_fault arch/x86/mm/fault.c:1351 [inline] exc_page_fault+0x34f/0x6f0 arch/x86/mm/fault.c:1404 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:538 RIP: 0033:0x7fc5eda000e0 systemd-udevd: Corrupted page table at address 7fc5eda000b6 PGD 10ffaa067 P4D 10ffaa067 PUD 10ffab067 PMD 10ffc5067 PTE ffffedb65f625 Bad pagetable: 0009 [#7] PREEMPT SMP CPU: 1 PID: 8270 Comm: systemd-udevd Not tainted 5.9.0-rc1-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 arch/x86/lib/copy_user_64.S:205 Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 RSP: 0000:ffffc90002ec6858 EFLAGS: 00010046 RAX: 0000000000000002 RBX: 0000000000000040 RCX: 0000000000000040 RDX: 0000000000000040 RSI: 00007fc5eda000b6 RDI: ffffc90002ec6888 RBP: 00007fc5eda000b6 R08: 0000000000000000 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000037323854 R12: ffffc90002ec6888 R13: ffff8881106364c0 R14: ffff8881106364c0 R15: ffffffff8401b939 FS: 00007fc5eec248c0(0000) GS:ffff88812c100000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fc5eda000b6 CR3: 000000010ffa3000 CR4: 00000000001506e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: copy_user_generic arch/x86/include/asm/uaccess_64.h:37 [inline] raw_copy_from_user arch/x86/include/asm/uaccess_64.h:68 [inline] __copy_from_user_inatomic include/linux/uaccess.h:79 [inline] copy_from_user_nmi+0x8d/0xa0 arch/x86/lib/usercopy.c:33 copy_code arch/x86/kernel/dumpstack.c:87 [inline] show_opcodes+0x50/0x70 arch/x86/kernel/dumpstack.c:117 show_iret_regs+0xd/0x33 arch/x86/kernel/dumpstack.c:138 __show_regs+0x1f/0x40 arch/x86/kernel/process_64.c:73 show_trace_log_lvl+0x25b/0x2ba arch/x86/kernel/dumpstack.c:281 __die_body+0x15/0x60 arch/x86/kernel/dumpstack.c:400 pgtable_bad+0x50/0x70 arch/x86/mm/fault.c:552 do_user_addr_fault arch/x86/mm/fault.c:1157 [inline] handle_page_fault arch/x86/mm/fault.c:1351 [inline] exc_page_fault+0x570/0x6f0 arch/x86/mm/fault.c:1404 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:538 RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 arch/x86/lib/copy_user_64.S:205 Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 RSP: 0000:ffffc90002ec6b98 EFLAGS: 00010046 RAX: 0000000000000002 RBX: 0000000000000040 RCX: 0000000000000040 RDX: 0000000000000040 RSI: 00007fc5eda000b6 RDI: ffffc90002ec6bc8 RBP: 00007fc5eda000b6 R08: 0000000000000000 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000037323854 R12: ffffc90002ec6bc8 R13: ffff8881106364c0 R14: ffff8881106364c0 R15: ffffffff8401b939 copy_user_generic arch/x86/include/asm/uaccess_64.h:37 [inline] raw_copy_from_user arch/x86/include/asm/uaccess_64.h:68 [inline] __copy_from_user_inatomic include/linux/uaccess.h:79 [inline] copy_from_user_nmi+0x8d/0xa0 arch/x86/lib/usercopy.c:33 copy_code arch/x86/kernel/dumpstack.c:87 [inline] show_opcodes+0x50/0x70 arch/x86/kernel/dumpstack.c:117 show_iret_regs+0xd/0x33 arch/x86/kernel/dumpstack.c:138 __show_regs+0x1f/0x40 arch/x86/kernel/process_64.c:73 show_trace_log_lvl+0x25b/0x2ba arch/x86/kernel/dumpstack.c:281 __die_body+0x15/0x60 arch/x86/kernel/dumpstack.c:400 pgtable_bad+0x50/0x70 arch/x86/mm/fault.c:552 do_user_addr_fault arch/x86/mm/fault.c:1157 [inline] handle_page_fault arch/x86/mm/fault.c:1351 [inline] exc_page_fault+0x570/0x6f0 arch/x86/mm/fault.c:1404 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:538 RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 arch/x86/lib/copy_user_64.S:205 Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 RSP: 0000:ffffc90002ec6ed8 EFLAGS: 00010046 RAX: 0000000000000002 RBX: 0000000000000040 RCX: 0000000000000040 RDX: 0000000000000040 RSI: 00007fc5eda000b6 RDI: ffffc90002ec6f08 RBP: 00007fc5eda000b6 R08: 0000000000000000 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000000000000 R12: ffffc90002ec6f08 R13: ffff8881106364c0 R14: ffff8881106364c0 R15: ffffffff8401b939 copy_user_generic arch/x86/include/asm/uaccess_64.h:37 [inline] raw_copy_from_user arch/x86/include/asm/uaccess_64.h:68 [inline] __copy_from_user_inatomic include/linux/uaccess.h:79 [inline] copy_from_user_nmi+0x8d/0xa0 arch/x86/lib/usercopy.c:33 copy_code arch/x86/kernel/dumpstack.c:87 [inline] show_opcodes+0x50/0x70 arch/x86/kernel/dumpstack.c:117 show_iret_regs+0xd/0x33 arch/x86/kernel/dumpstack.c:138 __show_regs+0x1f/0x40 arch/x86/kernel/process_64.c:73 show_trace_log_lvl+0x25b/0x2ba arch/x86/kernel/dumpstack.c:281 __die_body+0x15/0x60 arch/x86/kernel/dumpstack.c:400 pgtable_bad+0x50/0x70 arch/x86/mm/fault.c:552 do_user_addr_fault arch/x86/mm/fault.c:1157 [inline] handle_page_fault arch/x86/mm/fault.c:1351 [inline] exc_page_fault+0x570/0x6f0 arch/x86/mm/fault.c:1404 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:538 RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 arch/x86/lib/copy_user_64.S:205 Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 RSP: 0000:ffffc90002ec7218 EFLAGS: 00010046 RAX: 0000000000000002 RBX: 0000000000000040 RCX: 0000000000000040 RDX: 0000000000000040 RSI: 00007fc5eda000b6 RDI: ffffc90002ec7248 RBP: 00007fc5eda000b6 R08: 0000000000000000 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000000014a80 R12: ffffc90002ec7248 R13: ffff8881106364c0 R14: ffff8881106364c0 R15: ffffffff8401b939 copy_user_generic arch/x86/include/asm/uaccess_64.h:37 [inline] raw_copy_from_user arch/x86/include/asm/uaccess_64.h:68 [inline] __copy_from_user_inatomic include/linux/uaccess.h:79 [inline] copy_from_user_nmi+0x8d/0xa0 arch/x86/lib/usercopy.c:33 copy_code arch/x86/kernel/dumpstack.c:87 [inline] show_opcodes+0x50/0x70 arch/x86/kernel/dumpstack.c:117 show_iret_regs+0xd/0x33 arch/x86/kernel/dumpstack.c:138 __show_regs+0x1f/0x40 arch/x86/kernel/process_64.c:73 show_trace_log_lvl+0x25b/0x2ba arch/x86/kernel/dumpstack.c:281 __die_body+0x15/0x60 arch/x86/kernel/dumpstack.c:400 pgtable_bad+0x50/0x70 arch/x86/mm/fault.c:552 do_user_addr_fault arch/x86/mm/fault.c:1157 [inline] handle_page_fault arch/x86/mm/fault.c:1351 [inline] exc_page_fault+0x570/0x6f0 arch/x86/mm/fault.c:1404 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:538 RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 arch/x86/lib/copy_user_64.S:205 Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 RSP: 0000:ffffc90002ec7558 EFLAGS: 00010046 RAX: 0000000000000002 RBX: 0000000000000040 RCX: 0000000000000040 RDX: 0000000000000040 RSI: 00007fc5eda000b6 RDI: ffffc90002ec7588 RBP: 00007fc5eda000b6 R08: 0000000000000000 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000000015fd0 R12: ffffc90002ec7588 R13: ffff8881106364c0 R14: ffff8881106364c0 R15: ffffffff8401b939 copy_user_generic arch/x86/include/asm/uaccess_64.h:37 [inline] raw_copy_from_user arch/x86/include/asm/uaccess_64.h:68 [inline] __copy_from_user_inatomic include/linux/uaccess.h:79 [inline] copy_from_user_nmi+0x8d/0xa0 arch/x86/lib/usercopy.c:33 copy_code arch/x86/kernel/dumpstack.c:87 [inline] show_opcodes+0x50/0x70 arch/x86/kernel/dumpstack.c:117 show_iret_regs+0xd/0x33 arch/x86/kernel/dumpstack.c:138 __show_regs+0x1f/0x40 arch/x86/kernel/process_64.c:73 show_trace_log_lvl+0x25b/0x2ba arch/x86/kernel/dumpstack.c:281 __die_body+0x15/0x60 arch/x86/kernel/dumpstack.c:400 pgtable_bad+0x50/0x70 arch/x86/mm/fault.c:552 do_user_addr_fault arch/x86/mm/fault.c:1157 [inline] handle_page_fault arch/x86/mm/fault.c:1351 [inline] exc_page_fault+0x570/0x6f0 arch/x86/mm/fault.c:1404 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:538 RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 arch/x86/lib/copy_user_64.S:205 Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 RSP: 0000:ffffc90002ec7898 EFLAGS: 00010046 RAX: 0000000000000002 RBX: 0000000000000040 RCX: 0000000000000040 RDX: 0000000000000040 RSI: 00007fc5eda000b6 RDI: ffffc90002ec78c8 RBP: 00007fc5eda000b6 R08: 0000000000000000 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000000000000 R12: ffffc90002ec78c8 R13: ffff8881106364c0 R14: ffff8881106364c0 R15: ffffffff8401b939 copy_user_generic arch/x86/include/asm/uaccess_64.h:37 [inline] raw_copy_from_user arch/x86/include/asm/uaccess_64.h:68 [inline] __copy_from_user_inatomic include/linux/uaccess.h:79 [inline] copy_from_user_nmi+0x8d/0xa0 arch/x86/lib/usercopy.c:33 copy_code arch/x86/kernel/dumpstack.c:87 [inline] show_opcodes+0x50/0x70 arch/x86/kernel/dumpstack.c:117 show_iret_regs+0xd/0x33 arch/x86/kernel/dumpstack.c:138 __show_regs+0x1f/0x40 arch/x86/kernel/process_64.c:73 show_trace_log_lvl+0x25b/0x2ba arch/x86/kernel/dumpstack.c:281 __die_body+0x15/0x60 arch/x86/kernel/dumpstack.c:400 pgtable_bad+0x50/0x70 arch/x86/mm/fault.c:552 do_user_addr_fault arch/x86/mm/fault.c:1157 [inline] handle_page_fault arch/x86/mm/fault.c:1351 [inline] exc_page_fault+0x570/0x6f0 arch/x86/mm/fault.c:1404 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:538 RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 arch/x86/lib/copy_user_64.S:205 Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 RSP: 0000:ffffc90002ec7bd8 EFLAGS: 00010046 RAX: 0000000000000002 RBX: 0000000000000040 RCX: 0000000000000040 RDX: 0000000000000040 RSI: 00007fc5eda000b6 RDI: ffffc90002ec7c08 RBP: 00007fc5eda000b6 R08: 0000000000000000 R09: 0000000000000001 R10: 0000000000000000 R11: 4a5ae121e54e1d3c R12: ffffc90002ec7c08 R13: ffff8881106364c0 R14: ffff8881106364c0 R15: ffffffff8401b939 copy_user_generic arch/x86/include/asm/uaccess_64.h:37 [inline] raw_copy_from_user arch/x86/include/asm/uaccess_64.h:68 [inline] __copy_from_user_inatomic include/linux/uaccess.h:79 [inline] copy_from_user_nmi+0x8d/0xa0 arch/x86/lib/usercopy.c:33 copy_code arch/x86/kernel/dumpstack.c:87 [inline] show_opcodes+0x50/0x70 arch/x86/kernel/dumpstack.c:117 show_iret_regs+0xd/0x33 arch/x86/kernel/dumpstack.c:138 __show_regs+0x1f/0x40 arch/x86/kernel/process_64.c:73 show_trace_log_lvl+0x25b/0x2ba arch/x86/kernel/dumpstack.c:281 __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0xb3/0xec lib/dump_stack.c:118 print_bad_pte.cold.117+0x93/0xbd mm/memory.c:547 vm_normal_page+0x48/0xb0 mm/memory.c:610 do_numa_page mm/memory.c:4049 [inline] handle_pte_fault mm/memory.c:4231 [inline] __handle_mm_fault mm/memory.c:4356 [inline] handle_mm_fault+0xd8d/0x17f0 mm/memory.c:4454 do_user_addr_fault arch/x86/mm/fault.c:1294 [inline] handle_page_fault arch/x86/mm/fault.c:1351 [inline] exc_page_fault+0x34f/0x6f0 arch/x86/mm/fault.c:1404 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:538 RIP: 0033:0x7fc5eda000e0 systemd-udevd: Corrupted page table at address 7fc5eda000b6 PGD 10ffaa067 P4D 10ffaa067 PUD 10ffab067 PMD 10ffc5067 PTE ffffedb65f625 Bad pagetable: 0009 [#8] PREEMPT SMP CPU: 1 PID: 8270 Comm: systemd-udevd Not tainted 5.9.0-rc1-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 arch/x86/lib/copy_user_64.S:205 Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 RSP: 0000:ffffc90002ec6518 EFLAGS: 00010046 RAX: 0000000000000002 RBX: 0000000000000040 RCX: 0000000000000040 RDX: 0000000000000040 RSI: 00007fc5eda000b6 RDI: ffffc90002ec6548 RBP: 00007fc5eda000b6 R08: 0000000000000000 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000037323854 R12: ffffc90002ec6548 R13: ffff8881106364c0 R14: ffff8881106364c0 R15: ffffffff8401b939 FS: 00007fc5eec248c0(0000) GS:ffff88812c100000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fc5eda000b6 CR3: 000000010ffa3000 CR4: 00000000001506e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: copy_user_generic arch/x86/include/asm/uaccess_64.h:37 [inline] raw_copy_from_user arch/x86/include/asm/uaccess_64.h:68 [inline] __copy_from_user_inatomic include/linux/uaccess.h:79 [inline] copy_from_user_nmi+0x8d/0xa0 arch/x86/lib/usercopy.c:33 copy_code arch/x86/kernel/dumpstack.c:87 [inline] show_opcodes+0x50/0x70 arch/x86/kernel/dumpstack.c:117 show_iret_regs+0xd/0x33 arch/x86/kernel/dumpstack.c:138 __show_regs+0x1f/0x40 arch/x86/kernel/process_64.c:73 show_trace_log_lvl+0x25b/0x2ba arch/x86/kernel/dumpstack.c:281 __die_body+0x15/0x60 arch/x86/kernel/dumpstack.c:400 pgtable_bad+0x50/0x70 arch/x86/mm/fault.c:552 do_user_addr_fault arch/x86/mm/fault.c:1157 [inline] handle_page_fault arch/x86/mm/fault.c:1351 [inline] exc_page_fault+0x570/0x6f0 arch/x86/mm/fault.c:1404 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:538 RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 arch/x86/lib/copy_user_64.S:205 Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 RSP: 0000:ffffc90002ec6858 EFLAGS: 00010046 RAX: 0000000000000002 RBX: 0000000000000040 RCX: 0000000000000040 RDX: 0000000000000040 RSI: 00007fc5eda000b6 RDI: ffffc90002ec6888 RBP: 00007fc5eda000b6 R08: 0000000000000000 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000037323854 R12: ffffc90002ec6888 R13: ffff8881106364c0 R14: ffff8881106364c0 R15: ffffffff8401b939 copy_user_generic arch/x86/include/asm/uaccess_64.h:37 [inline] raw_copy_from_user arch/x86/include/asm/uaccess_64.h:68 [inline] __copy_from_user_inatomic include/linux/uaccess.h:79 [inline] copy_from_user_nmi+0x8d/0xa0 arch/x86/lib/usercopy.c:33 copy_code arch/x86/kernel/dumpstack.c:87 [inline] show_opcodes+0x50/0x70 arch/x86/kernel/dumpstack.c:117 show_iret_regs+0xd/0x33 arch/x86/kernel/dumpstack.c:138 __show_regs+0x1f/0x40 arch/x86/kernel/process_64.c:73 show_trace_log_lvl+0x25b/0x2ba arch/x86/kernel/dumpstack.c:281 __die_body+0x15/0x60 arch/x86/kernel/dumpstack.c:400 pgtable_bad+0x50/0x70 arch/x86/mm/fault.c:552 do_user_addr_fault arch/x86/mm/fault.c:1157 [inline] handle_page_fault arch/x86/mm/fault.c:1351 [inline] exc_page_fault+0x570/0x6f0 arch/x86/mm/fault.c:1404 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:538 RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 arch/x86/lib/copy_user_64.S:205 Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 RSP: 0000:ffffc90002ec6b98 EFLAGS: 00010046 RAX: 0000000000000002 RBX: 0000000000000040 RCX: 0000000000000040 RDX: 0000000000000040 RSI: 00007fc5eda000b6 RDI: ffffc90002ec6bc8 RBP: 00007fc5eda000b6 R08: 0000000000000000 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000037323854 R12: ffffc90002ec6bc8 R13: ffff8881106364c0 R14: ffff8881106364c0 R15: ffffffff8401b939 copy_user_generic arch/x86/include/asm/uaccess_64.h:37 [inline] raw_copy_from_user arch/x86/include/asm/uaccess_64.h:68 [inline] __copy_from_user_inatomic include/linux/uaccess.h:79 [inline] copy_from_user_nmi+0x8d/0xa0 arch/x86/lib/usercopy.c:33 copy_code arch/x86/kernel/dumpstack.c:87 [inline] show_opcodes+0x50/0x70 arch/x86/kernel/dumpstack.c:117 show_iret_regs+0xd/0x33 arch/x86/kernel/dumpstack.c:138 __show_regs+0x1f/0x40 arch/x86/kernel/process_64.c:73 show_trace_log_lvl+0x25b/0x2ba arch/x86/kernel/dumpstack.c:281 __die_body+0x15/0x60 arch/x86/kernel/dumpstack.c:400 pgtable_bad+0x50/0x70 arch/x86/mm/fault.c:552 do_user_addr_fault arch/x86/mm/fault.c:1157 [inline] handle_page_fault arch/x86/mm/fault.c:1351 [inline] exc_page_fault+0x570/0x6f0 arch/x86/mm/fault.c:1404 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:538 RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 arch/x86/lib/copy_user_64.S:205 Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 RSP: 0000:ffffc90002ec6ed8 EFLAGS: 00010046 RAX: 0000000000000002 RBX: 0000000000000040 RCX: 0000000000000040 RDX: 0000000000000040 RSI: 00007fc5eda000b6 RDI: ffffc90002ec6f08 RBP: 00007fc5eda000b6 R08: 0000000000000000 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000000000000 R12: ffffc90002ec6f08 R13: ffff8881106364c0 R14: ffff8881106364c0 R15: ffffffff8401b939 copy_user_generic arch/x86/include/asm/uaccess_64.h:37 [inline] raw_copy_from_user arch/x86/include/asm/uaccess_64.h:68 [inline] __copy_from_user_inatomic include/linux/uaccess.h:79 [inline] copy_from_user_nmi+0x8d/0xa0 arch/x86/lib/usercopy.c:33 copy_code arch/x86/kernel/dumpstack.c:87 [inline] show_opcodes+0x50/0x70 arch/x86/kernel/dumpstack.c:117 show_iret_regs+0xd/0x33 arch/x86/kernel/dumpstack.c:138 __show_regs+0x1f/0x40 arch/x86/kernel/process_64.c:73 show_trace_log_lvl+0x25b/0x2ba arch/x86/kernel/dumpstack.c:281 __die_body+0x15/0x60 arch/x86/kernel/dumpstack.c:400 pgtable_bad+0x50/0x70 arch/x86/mm/fault.c:552 do_user_addr_fault arch/x86/mm/fault.c:1157 [inline] handle_page_fault arch/x86/mm/fault.c:1351 [inline] exc_page_fault+0x570/0x6f0 arch/x86/mm/fault.c:1404 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:538 RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 arch/x86/lib/copy_user_64.S:205 Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 RSP: 0000:ffffc90002ec7218 EFLAGS: 00010046 RAX: 0000000000000002 RBX: 0000000000000040 RCX: 0000000000000040 RDX: 0000000000000040 RSI: 00007fc5eda000b6 RDI: ffffc90002ec7248 RBP: 00007fc5eda000b6 R08: 0000000000000000 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000000014a80 R12: ffffc90002ec7248 R13: ffff8881106364c0 R14: ffff8881106364c0 R15: ffffffff8401b939 copy_user_generic arch/x86/include/asm/uaccess_64.h:37 [inline] raw_copy_from_user arch/x86/include/asm/uaccess_64.h:68 [inline] __copy_from_user_inatomic include/linux/uaccess.h:79 [inline] copy_from_user_nmi+0x8d/0xa0 arch/x86/lib/usercopy.c:33 copy_code arch/x86/kernel/dumpstack.c:87 [inline] show_opcodes+0x50/0x70 arch/x86/kernel/dumpstack.c:117 show_iret_regs+0xd/0x33 arch/x86/kernel/dumpstack.c:138 __show_regs+0x1f/0x40 arch/x86/kernel/process_64.c:73 show_trace_log_lvl+0x25b/0x2ba arch/x86/kernel/dumpstack.c:281 __die_body+0x15/0x60 arch/x86/kernel/dumpstack.c:400 pgtable_bad+0x50/0x70 arch/x86/mm/fault.c:552 do_user_addr_fault arch/x86/mm/fault.c:1157 [inline] handle_page_fault arch/x86/mm/fault.c:1351 [inline] exc_page_fault+0x570/0x6f0 arch/x86/mm/fault.c:1404 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:538 RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 arch/x86/lib/copy_user_64.S:205 Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 RSP: 0000:ffffc90002ec7558 EFLAGS: 00010046 RAX: 0000000000000002 RBX: 0000000000000040 RCX: 0000000000000040 RDX: 0000000000000040 RSI: 00007fc5eda000b6 RDI: ffffc90002ec7588 RBP: 00007fc5eda000b6 R08: 0000000000000000 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000000015fd0 R12: ffffc90002ec7588 R13: ffff8881106364c0 R14: ffff8881106364c0 R15: ffffffff8401b939 copy_user_generic arch/x86/include/asm/uaccess_64.h:37 [inline] raw_copy_from_user arch/x86/include/asm/uaccess_64.h:68 [inline] __copy_from_user_inatomic include/linux/uaccess.h:79 [inline] copy_from_user_nmi+0x8d/0xa0 arch/x86/lib/usercopy.c:33 copy_code arch/x86/kernel/dumpstack.c:87 [inline] show_opcodes+0x50/0x70 arch/x86/kernel/dumpstack.c:117 show_iret_regs+0xd/0x33 arch/x86/kernel/dumpstack.c:138 __show_regs+0x1f/0x40 arch/x86/kernel/process_64.c:73 show_trace_log_lvl+0x25b/0x2ba arch/x86/kernel/dumpstack.c:281 __die_body+0x15/0x60 arch/x86/kernel/dumpstack.c:400 pgtable_bad+0x50/0x70 arch/x86/mm/fault.c:552 do_user_addr_fault arch/x86/mm/fault.c:1157 [inline] handle_page_fault arch/x86/mm/fault.c:1351 [inline] exc_page_fault+0x570/0x6f0 arch/x86/mm/fault.c:1404 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:538 RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 arch/x86/lib/copy_user_64.S:205 Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 RSP: 0000:ffffc90002ec7898 EFLAGS: 00010046 RAX: 0000000000000002 RBX: 0000000000000040 RCX: 0000000000000040 RDX: 0000000000000040 RSI: 00007fc5eda000b6 RDI: ffffc90002ec78c8 RBP: 00007fc5eda000b6 R08: 0000000000000000 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000000000000 R12: ffffc90002ec78c8 R13: ffff8881106364c0 R14: ffff8881106364c0 R15: ffffffff8401b939 copy_user_generic arch/x86/include/asm/uaccess_64.h:37 [inline] raw_copy_from_user arch/x86/include/asm/uaccess_64.h:68 [inline] __copy_from_user_inatomic include/linux/uaccess.h:79 [inline] copy_from_user_nmi+0x8d/0xa0 arch/x86/lib/usercopy.c:33 copy_code arch/x86/kernel/dumpstack.c:87 [inline] show_opcodes+0x50/0x70 arch/x86/kernel/dumpstack.c:117 show_iret_regs+0xd/0x33 arch/x86/kernel/dumpstack.c:138 __show_regs+0x1f/0x40 arch/x86/kernel/process_64.c:73 show_trace_log_lvl+0x25b/0x2ba arch/x86/kernel/dumpstack.c:281 __die_body+0x15/0x60 arch/x86/kernel/dumpstack.c:400 pgtable_bad+0x50/0x70 arch/x86/mm/fault.c:552 do_user_addr_fault arch/x86/mm/fault.c:1157 [inline] handle_page_fault arch/x86/mm/fault.c:1351 [inline] exc_page_fault+0x570/0x6f0 arch/x86/mm/fault.c:1404 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:538 RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 arch/x86/lib/copy_user_64.S:205 Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 RSP: 0000:ffffc90002ec7bd8 EFLAGS: 00010046 RAX: 0000000000000002 RBX: 0000000000000040 RCX: 0000000000000040 RDX: 0000000000000040 RSI: 00007fc5eda000b6 RDI: ffffc90002ec7c08 RBP: 00007fc5eda000b6 R08: 0000000000000000 R09: 0000000000000001 R10: 0000000000000000 R11: 4a5ae121e54e1d3c R12: ffffc90002ec7c08 R13: ffff8881106364c0 R14: ffff8881106364c0 R15: ffffffff8401b939 copy_user_generic arch/x86/include/asm/uaccess_64.h:37 [inline] raw_copy_from_user arch/x86/include/asm/uaccess_64.h:68 [inline] __copy_from_user_inatomic include/linux/uaccess.h:79 [inline] copy_from_user_nmi+0x8d/0xa0 arch/x86/lib/usercopy.c:33 copy_code arch/x86/kernel/dumpstack.c:87 [inline] show_opcodes+0x50/0x70 arch/x86/kernel/dumpstack.c:117 show_iret_regs+0xd/0x33 arch/x86/kernel/dumpstack.c:138 __show_regs+0x1f/0x40 arch/x86/kernel/process_64.c:73 show_trace_log_lvl+0x25b/0x2ba arch/x86/kernel/dumpstack.c:281 __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0xb3/0xec lib/dump_stack.c:118 print_bad_pte.cold.117+0x93/0xbd mm/memory.c:547 vm_normal_page+0x48/0xb0 mm/memory.c:610 do_numa_page mm/memory.c:4049 [inline] handle_pte_fault mm/memory.c:4231 [inline] __handle_mm_fault mm/memory.c:4356 [inline] handle_mm_fault+0xd8d/0x17f0 mm/memory.c:4454 do_user_addr_fault arch/x86/mm/fault.c:1294 [inline] handle_page_fault arch/x86/mm/fault.c:1351 [inline] exc_page_fault+0x34f/0x6f0 arch/x86/mm/fault.c:1404 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:538 RIP: 0033:0x7fc5eda000e0 systemd-udevd: Corrupted page table at address 7fc5eda000b6 PGD 10ffaa067 P4D 10ffaa067 PUD 10ffab067 PMD 10ffc5067 PTE ffffedb65f625 Bad pagetable: 0009 [#9] PREEMPT SMP CPU: 1 PID: 8270 Comm: systemd-udevd Not tainted 5.9.0-rc1-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 arch/x86/lib/copy_user_64.S:205 Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 RSP: 0000:ffffc90002ec61d8 EFLAGS: 00010046 RAX: 0000000000000002 RBX: 0000000000000040 RCX: 0000000000000040 RDX: 0000000000000040 RSI: 00007fc5eda000b6 RDI: ffffc90002ec6208 RBP: 00007fc5eda000b6 R08: 0000000000000000 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000037323854 R12: ffffc90002ec6208 R13: ffff8881106364c0 R14: ffff8881106364c0 R15: ffffffff8401b939 FS: 00007fc5eec248c0(0000) GS:ffff88812c100000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fc5eda000b6 CR3: 000000010ffa3000 CR4: 00000000001506e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: copy_user_generic arch/x86/include/asm/uaccess_64.h:37 [inline] raw_copy_from_user arch/x86/include/asm/uaccess_64.h:68 [inline] __copy_from_user_inatomic include/linux/uaccess.h:79 [inline] copy_from_user_nmi+0x8d/0xa0 arch/x86/lib/usercopy.c:33 copy_code arch/x86/kernel/dumpstack.c:87 [inline] show_opcodes+0x50/0x70 arch/x86/kernel/dumpstack.c:117 show_iret_regs+0xd/0x33 arch/x86/kernel/dumpstack.c:138 __show_regs+0x1f/0x40 arch/x86/kernel/process_64.c:73 show_trace_log_lvl+0x25b/0x2ba arch/x86/kernel/dumpstack.c:281 __die_body+0x15/0x60 arch/x86/kernel/dumpstack.c:400 pgtable_bad+0x50/0x70 arch/x86/mm/fault.c:552 do_user_addr_fault arch/x86/mm/fault.c:1157 [inline] handle_page_fault arch/x86/mm/fault.c:1351 [inline] exc_page_fault+0x570/0x6f0 arch/x86/mm/fault.c:1404 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:538 RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 arch/x86/lib/copy_user_64.S:205 Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 RSP: 0000:ffffc90002ec6518 EFLAGS: 00010046 RAX: 0000000000000002 RBX: 0000000000000040 RCX: 0000000000000040 RDX: 0000000000000040 RSI: 00007fc5eda000b6 RDI: ffffc90002ec6548 RBP: 00007fc5eda000b6 R08: 0000000000000000 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000037323854 R12: ffffc90002ec6548 R13: ffff8881106364c0 R14: ffff8881106364c0 R15: ffffffff8401b939 copy_user_generic arch/x86/include/asm/uaccess_64.h:37 [inline] raw_copy_from_user arch/x86/include/asm/uaccess_64.h:68 [inline] __copy_from_user_inatomic include/linux/uaccess.h:79 [inline] copy_from_user_nmi+0x8d/0xa0 arch/x86/lib/usercopy.c:33 copy_code arch/x86/kernel/dumpstack.c:87 [inline] show_opcodes+0x50/0x70 arch/x86/kernel/dumpstack.c:117 show_iret_regs+0xd/0x33 arch/x86/kernel/dumpstack.c:138 __show_regs+0x1f/0x40 arch/x86/kernel/process_64.c:73 show_trace_log_lvl+0x25b/0x2ba arch/x86/kernel/dumpstack.c:281 __die_body+0x15/0x60 arch/x86/kernel/dumpstack.c:400 pgtable_bad+0x50/0x70 arch/x86/mm/fault.c:552 do_user_addr_fault arch/x86/mm/fault.c:1157 [inline] handle_page_fault arch/x86/mm/fault.c:1351 [inline] exc_page_fault+0x570/0x6f0 arch/x86/mm/fault.c:1404 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:538 RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 arch/x86/lib/copy_user_64.S:205 Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 RSP: 0000:ffffc90002ec6858 EFLAGS: 00010046 RAX: 0000000000000002 RBX: 0000000000000040 RCX: 0000000000000040 RDX: 0000000000000040 RSI: 00007fc5eda000b6 RDI: ffffc90002ec6888 RBP: 00007fc5eda000b6 R08: 0000000000000000 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000037323854 R12: ffffc90002ec6888 R13: ffff8881106364c0 R14: ffff8881106364c0 R15: ffffffff8401b939 copy_user_generic arch/x86/include/asm/uaccess_64.h:37 [inline] raw_copy_from_user arch/x86/include/asm/uaccess_64.h:68 [inline] __copy_from_user_inatomic include/linux/uaccess.h:79 [inline] copy_from_user_nmi+0x8d/0xa0 arch/x86/lib/usercopy.c:33 copy_code arch/x86/kernel/dumpstack.c:87 [inline] show_opcodes+0x50/0x70 arch/x86/kernel/dumpstack.c:117 show_iret_regs+0xd/0x33 arch/x86/kernel/dumpstack.c:138 __show_regs+0x1f/0x40 arch/x86/kernel/process_64.c:73 show_trace_log_lvl+0x25b/0x2ba arch/x86/kernel/dumpstack.c:281 __die_body+0x15/0x60 arch/x86/kernel/dumpstack.c:400 pgtable_bad+0x50/0x70 arch/x86/mm/fault.c:552 do_user_addr_fault arch/x86/mm/fault.c:1157 [inline] handle_page_fault arch/x86/mm/fault.c:1351 [inline] exc_page_fault+0x570/0x6f0 arch/x86/mm/fault.c:1404 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:538 RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 arch/x86/lib/copy_user_64.S:205 Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 RSP: 0000:ffffc90002ec6b98 EFLAGS: 00010046 RAX: 0000000000000002 RBX: 0000000000000040 RCX: 0000000000000040 RDX: 0000000000000040 RSI: 00007fc5eda000b6 RDI: ffffc90002ec6bc8 RBP: 00007fc5eda000b6 R08: 0000000000000000 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000037323854 R12: ffffc90002ec6bc8 R13: ffff8881106364c0 R14: ffff8881106364c0 R15: ffffffff8401b939 copy_user_generic arch/x86/include/asm/uaccess_64.h:37 [inline] raw_copy_from_user arch/x86/include/asm/uaccess_64.h:68 [inline] __copy_from_user_inatomic include/linux/uaccess.h:79 [inline] copy_from_user_nmi+0x8d/0xa0 arch/x86/lib/usercopy.c:33 copy_code arch/x86/kernel/dumpstack.c:87 [inline] show_opcodes+0x50/0x70 arch/x86/kernel/dumpstack.c:117 show_iret_regs+0xd/0x33 arch/x86/kernel/dumpstack.c:138 __show_regs+0x1f/0x40 arch/x86/kernel/process_64.c:73 show_trace_log_lvl+0x25b/0x2ba arch/x86/kernel/dumpstack.c:281 __die_body+0x15/0x60 arch/x86/kernel/dumpstack.c:400 pgtable_bad+0x50/0x70 arch/x86/mm/fault.c:552 do_user_addr_fault arch/x86/mm/fault.c:1157 [inline] handle_page_fault arch/x86/mm/fault.c:1351 [inline] exc_page_fault+0x570/0x6f0 arch/x86/mm/fault.c:1404 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:538 RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 arch/x86/lib/copy_user_64.S:205 Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 RSP: 0000:ffffc90002ec6ed8 EFLAGS: 00010046 RAX: 0000000000000002 RBX: 0000000000000040 RCX: 0000000000000040 RDX: 0000000000000040 RSI: 00007fc5eda000b6 RDI: ffffc90002ec6f08 RBP: 00007fc5eda000b6 R08: 0000000000000000 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000000000000 R12: ffffc90002ec6f08 R13: ffff8881106364c0 R14: ffff8881106364c0 R15: ffffffff8401b939 copy_user_generic arch/x86/include/asm/uaccess_64.h:37 [inline] raw_copy_from_user arch/x86/include/asm/uaccess_64.h:68 [inline] __copy_from_user_inatomic include/linux/uaccess.h:79 [inline] copy_from_user_nmi+0x8d/0xa0 arch/x86/lib/usercopy.c:33 copy_code arch/x86/kernel/dumpstack.c:87 [inline] show_opcodes+0x50/0x70 arch/x86/kernel/dumpstack.c:117 show_iret_regs+0xd/0x33 arch/x86/kernel/dumpstack.c:138 __show_regs+0x1f/0x40 arch/x86/kernel/process_64.c:73 show_trace_log_lvl+0x25b/0x2ba arch/x86/kernel/dumpstack.c:281 __die_body+0x15/0x60 arch/x86/kernel/dumpstack.c:400 pgtable_bad+0x50/0x70 arch/x86/mm/fault.c:552 do_user_addr_fault arch/x86/mm/fault.c:1157 [inline] handle_page_fault arch/x86/mm/fault.c:1351 [inline] exc_page_fault+0x570/0x6f0 arch/x86/mm/fault.c:1404 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:538 RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 arch/x86/lib/copy_user_64.S:205 Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 RSP: 0000:ffffc90002ec7218 EFLAGS: 00010046 RAX: 0000000000000002 RBX: 0000000000000040 RCX: 0000000000000040 RDX: 0000000000000040 RSI: 00007fc5eda000b6 RDI: ffffc90002ec7248 RBP: 00007fc5eda000b6 R08: 0000000000000000 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000000014a80 R12: ffffc90002ec7248 R13: ffff8881106364c0 R14: ffff8881106364c0 R15: ffffffff8401b939 copy_user_generic arch/x86/include/asm/uaccess_64.h:37 [inline] raw_copy_from_user arch/x86/include/asm/uaccess_64.h:68 [inline] __copy_from_user_inatomic include/linux/uaccess.h:79 [inline] copy_from_user_nmi+0x8d/0xa0 arch/x86/lib/usercopy.c:33 copy_code arch/x86/kernel/dumpstack.c:87 [inline] show_opcodes+0x50/0x70 arch/x86/kernel/dumpstack.c:117 show_iret_regs+0xd/0x33 arch/x86/kernel/dumpstack.c:138 __show_regs+0x1f/0x40 arch/x86/kernel/process_64.c:73 show_trace_log_lvl+0x25b/0x2ba arch/x86/kernel/dumpstack.c:281 __die_body+0x15/0x60 arch/x86/kernel/dumpstack.c:400 pgtable_bad+0x50/0x70 arch/x86/mm/fault.c:552 do_user_addr_fault arch/x86/mm/fault.c:1157 [inline] handle_page_fault arch/x86/mm/fault.c:1351 [inline] exc_page_fault+0x570/0x6f0 arch/x86/mm/fault.c:1404 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:538 RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 arch/x86/lib/copy_user_64.S:205 Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 RSP: 0000:ffffc90002ec7558 EFLAGS: 00010046 RAX: 0000000000000002 RBX: 0000000000000040 RCX: 0000000000000040 RDX: 0000000000000040 RSI: 00007fc5eda000b6 RDI: ffffc90002ec7588 RBP: 00007fc5eda000b6 R08: 0000000000000000 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000000015fd0 R12: ffffc90002ec7588 R13: ffff8881106364c0 R14: ffff8881106364c0 R15: ffffffff8401b939 copy_user_generic arch/x86/include/asm/uaccess_64.h:37 [inline] raw_copy_from_user arch/x86/include/asm/uaccess_64.h:68 [inline] __copy_from_user_inatomic include/linux/uaccess.h:79 [inline] copy_from_user_nmi+0x8d/0xa0 arch/x86/lib/usercopy.c:33 copy_code arch/x86/kernel/dumpstack.c:87 [inline] show_opcodes+0x50/0x70 arch/x86/kernel/dumpstack.c:117 show_iret_regs+0xd/0x33 arch/x86/kernel/dumpstack.c:138 __show_regs+0x1f/0x40 arch/x86/kernel/process_64.c:73 show_trace_log_lvl+0x25b/0x2ba arch/x86/kernel/dumpstack.c:281 __die_body+0x15/0x60 arch/x86/kernel/dumpstack.c:400 pgtable_bad+0x50/0x70 arch/x86/mm/fault.c:552 do_user_addr_fault arch/x86/mm/fault.c:1157 [inline] handle_page_fault arch/x86/mm/fault.c:1351 [inline] exc_page_fault+0x570/0x6f0 arch/x86/mm/fault.c:1404 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:538 RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 arch/x86/lib/copy_user_64.S:205 Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 RSP: 0000:ffffc90002ec7898 EFLAGS: 00010046 RAX: 0000000000000002 RBX: 0000000000000040 RCX: 0000000000000040 RDX: 0000000000000040 RSI: 00007fc5eda000b6 RDI: ffffc90002ec78c8 RBP: 00007fc5eda000b6 R08: 0000000000000000 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000000000000 R12: ffffc90002ec78c8 R13: ffff8881106364c0 R14: ffff8881106364c0 R15: ffffffff8401b939 copy_user_generic arch/x86/include/asm/uaccess_64.h:37 [inline] raw_copy_from_user arch/x86/include/asm/uaccess_64.h:68 [inline] __copy_from_user_inatomic include/linux/uaccess.h:79 [inline] copy_from_user_nmi+0x8d/0xa0 arch/x86/lib/usercopy.c:33 copy_code arch/x86/kernel/dumpstack.c:87 [inline] show_opcodes+0x50/0x70 arch/x86/kernel/dumpstack.c:117 show_iret_regs+0xd/0x33 arch/x86/kernel/dumpstack.c:138 __show_regs+0x1f/0x40 arch/x86/kernel/process_64.c:73 show_trace_log_lvl+0x25b/0x2ba arch/x86/kernel/dumpstack.c:281 __die_body+0x15/0x60 arch/x86/kernel/dumpstack.c:400 pgtable_bad+0x50/0x70 arch/x86/mm/fault.c:552 do_user_addr_fault arch/x86/mm/fault.c:1157 [inline] handle_page_fault arch/x86/mm/fault.c:1351 [inline] exc_page_fault+0x570/0x6f0 arch/x86/mm/fault.c:1404 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:538 RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 arch/x86/lib/copy_user_64.S:205 Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 RSP: 0000:ffffc90002ec7bd8 EFLAGS: 00010046 RAX: 0000000000000002 RBX: 0000000000000040 RCX: 0000000000000040 RDX: 0000000000000040 RSI: 00007fc5eda000b6 RDI: ffffc90002ec7c08 RBP: 00007fc5eda000b6 R08: 0000000000000000 R09: 0000000000000001 R10: 0000000000000000 R11: 4a5ae121e54e1d3c R12: ffffc90002ec7c08 R13: ffff8881106364c0 R14: ffff8881106364c0 R15: ffffffff8401b939 copy_user_generic arch/x86/include/asm/uaccess_64.h:37 [inline] raw_copy_from_user arch/x86/include/asm/uaccess_64.h:68 [inline] __copy_from_user_inatomic include/linux/uaccess.h:79 [inline] copy_from_user_nmi+0x8d/0xa0 arch/x86/lib/usercopy.c:33 copy_code arch/x86/kernel/dumpstack.c:87 [inline] show_opcodes+0x50/0x70 arch/x86/kernel/dumpstack.c:117 show_iret_regs+0xd/0x33 arch/x86/kernel/dumpstack.c:138 __show_regs+0x1f/0x40 arch/x86/kernel/process_64.c:73 show_trace_log_lvl+0x25b/0x2ba arch/x86/kernel/dumpstack.c:281 __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0xb3/0xec lib/dump_stack.c:118 print_bad_pte.cold.117+0x93/0xbd mm/memory.c:547 vm_normal_page+0x48/0xb0 mm/memory.c:610 do_numa_page mm/memory.c:4049 [inline] handle_pte_fault mm/memory.c:4231 [inline] __handle_mm_fault mm/memory.c:4356 [inline] handle_mm_fault+0xd8d/0x17f0 mm/memory.c:4454 do_user_addr_fault arch/x86/mm/fault.c:1294 [inline] handle_page_fault arch/x86/mm/fault.c:1351 [inline] exc_page_fault+0x34f/0x6f0 arch/x86/mm/fault.c:1404 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:538 RIP: 0033:0x7fc5eda000e0 systemd-udevd: Corrupted page table at address 7fc5eda000b6 PGD 10ffaa067 P4D 10ffaa067 PUD 10ffab067 PMD 10ffc5067 PTE ffffedb65f625 Bad pagetable: 0009 [#10] PREEMPT SMP CPU: 1 PID: 8270 Comm: systemd-udevd Not tainted 5.9.0-rc1-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 arch/x86/lib/copy_user_64.S:205 Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 RSP: 0000:ffffc90002ec5e98 EFLAGS: 00010046 RAX: 0000000000000002 RBX: 0000000000000040 RCX: 0000000000000040 RDX: 0000000000000040 RSI: 00007fc5eda000b6 RDI: ffffc90002ec5ec8 RBP: 00007fc5eda000b6 R08: 0000000000000000 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000037323854 R12: ffffc90002ec5ec8 R13: ffff8881106364c0 R14: ffff8881106364c0 R15: ffffffff8401b939 FS: 00007fc5eec248c0(0000) GS:ffff88812c100000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fc5eda000b6 CR3: 000000010ffa3000 CR4: 00000000001506e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: copy_user_generic arch/x86/include/asm/uaccess_64.h:37 [inline] raw_copy_from_user arch/x86/include/asm/uaccess_64.h:68 [inline] __copy_from_user_inatomic include/linux/uaccess.h:79 [inline] copy_from_user_nmi+0x8d/0xa0 arch/x86/lib/usercopy.c:33 copy_code arch/x86/kernel/dumpstack.c:87 [inline] show_opcodes+0x50/0x70 arch/x86/kernel/dumpstack.c:117 show_iret_regs+0xd/0x33 arch/x86/kernel/dumpstack.c:138 __show_regs+0x1f/0x40 arch/x86/kernel/process_64.c:73 show_trace_log_lvl+0x25b/0x2ba arch/x86/kernel/dumpstack.c:281 __die_body+0x15/0x60 arch/x86/kernel/dumpstack.c:400 pgtable_bad+0x50/0x70 arch/x86/mm/fault.c:552 do_user_addr_fault arch/x86/mm/fault.c:1157 [inline] handle_page_fault arch/x86/mm/fault.c:1351 [inline] exc_page_fault+0x570/0x6f0 arch/x86/mm/fault.c:1404 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:538 RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 arch/x86/lib/copy_user_64.S:205 Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 RSP: 0000:ffffc90002ec61d8 EFLAGS: 00010046 RAX: 0000000000000002 RBX: 0000000000000040 RCX: 0000000000000040 RDX: 0000000000000040 RSI: 00007fc5eda000b6 RDI: ffffc90002ec6208 RBP: 00007fc5eda000b6 R08: 0000000000000000 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000037323854 R12: ffffc90002ec6208 R13: ffff8881106364c0 R14: ffff8881106364c0 R15: ffffffff8401b939 copy_user_generic arch/x86/include/asm/uaccess_64.h:37 [inline] raw_copy_from_user arch/x86/include/asm/uaccess_64.h:68 [inline] __copy_from_user_inatomic include/linux/uaccess.h:79 [inline] copy_from_user_nmi+0x8d/0xa0 arch/x86/lib/usercopy.c:33 copy_code arch/x86/kernel/dumpstack.c:87 [inline] show_opcodes+0x50/0x70 arch/x86/kernel/dumpstack.c:117 show_iret_regs+0xd/0x33 arch/x86/kernel/dumpstack.c:138 __show_regs+0x1f/0x40 arch/x86/kernel/process_64.c:73 show_trace_log_lvl+0x25b/0x2ba arch/x86/kernel/dumpstack.c:281 __die_body+0x15/0x60 arch/x86/kernel/dumpstack.c:400 pgtable_bad+0x50/0x70 arch/x86/mm/fault.c:552 do_user_addr_fault arch/x86/mm/fault.c:1157 [inline] handle_page_fault arch/x86/mm/fault.c:1351 [inline] exc_page_fault+0x570/0x6f0 arch/x86/mm/fault.c:1404 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:538 RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 arch/x86/lib/copy_user_64.S:205 Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 RSP: 0000:ffffc90002ec6518 EFLAGS: 00010046 RAX: 0000000000000002 RBX: 0000000000000040 RCX: 0000000000000040 RDX: 0000000000000040 RSI: 00007fc5eda000b6 RDI: ffffc90002ec6548 RBP: 00007fc5eda000b6 R08: 0000000000000000 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000037323854 R12: ffffc90002ec6548 R13: ffff8881106364c0 R14: ffff8881106364c0 R15: ffffffff8401b939 copy_user_generic arch/x86/include/asm/uaccess_64.h:37 [inline] raw_copy_from_user arch/x86/include/asm/uaccess_64.h:68 [inline] __copy_from_user_inatomic include/linux/uaccess.h:79 [inline] copy_from_user_nmi+0x8d/0xa0 arch/x86/lib/usercopy.c:33 copy_code arch/x86/kernel/dumpstack.c:87 [inline] show_opcodes+0x50/0x70 arch/x86/kernel/dumpstack.c:117 show_iret_regs+0xd/0x33 arch/x86/kernel/dumpstack.c:138 __show_regs+0x1f/0x40 arch/x86/kernel/process_64.c:73 show_trace_log_lvl+0x25b/0x2ba arch/x86/kernel/dumpstack.c:281 __die_body+0x15/0x60 arch/x86/kernel/dumpstack.c:400 pgtable_bad+0x50/0x70 arch/x86/mm/fault.c:552 do_user_addr_fault arch/x86/mm/fault.c:1157 [inline] handle_page_fault arch/x86/mm/fault.c:1351 [inline] exc_page_fault+0x570/0x6f0 arch/x86/mm/fault.c:1404 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:538 RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 arch/x86/lib/copy_user_64.S:205 Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 RSP: 0000:ffffc90002ec6858 EFLAGS: 00010046 RAX: 0000000000000002 RBX: 0000000000000040 RCX: 0000000000000040 RDX: 0000000000000040 RSI: 00007fc5eda000b6 RDI: ffffc90002ec6888 RBP: 00007fc5eda000b6 R08: 0000000000000000 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000037323854 R12: ffffc90002ec6888 R13: ffff8881106364c0 R14: ffff8881106364c0 R15: ffffffff8401b939 copy_user_generic arch/x86/include/asm/uaccess_64.h:37 [inline] raw_copy_from_user arch/x86/include/asm/uaccess_64.h:68 [inline] __copy_from_user_inatomic include/linux/uaccess.h:79 [inline] copy_from_user_nmi+0x8d/0xa0 arch/x86/lib/usercopy.c:33 copy_code arch/x86/kernel/dumpstack.c:87 [inline] show_opcodes+0x50/0x70 arch/x86/kernel/dumpstack.c:117 show_iret_regs+0xd/0x33 arch/x86/kernel/dumpstack.c:138 __show_regs+0x1f/0x40 arch/x86/kernel/process_64.c:73 show_trace_log_lvl+0x25b/0x2ba arch/x86/kernel/dumpstack.c:281 __die_body+0x15/0x60 arch/x86/kernel/dumpstack.c:400 pgtable_bad+0x50/0x70 arch/x86/mm/fault.c:552 do_user_addr_fault arch/x86/mm/fault.c:1157 [inline] handle_page_fault arch/x86/mm/fault.c:1351 [inline] exc_page_fault+0x570/0x6f0 arch/x86/mm/fault.c:1404 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:538 RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 arch/x86/lib/copy_user_64.S:205 Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 RSP: 0000:ffffc90002ec6b98 EFLAGS: 00010046 RAX: 0000000000000002 RBX: 0000000000000040 RCX: 0000000000000040 RDX: 0000000000000040 RSI: 00007fc5eda000b6 RDI: ffffc90002ec6bc8 RBP: 00007fc5eda000b6 R08: 0000000000000000 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000037323854 R12: ffffc90002ec6bc8 R13: ffff8881106364c0 R14: ffff8881106364c0 R15: ffffffff8401b939 copy_user_generic arch/x86/include/asm/uaccess_64.h:37 [inline] raw_copy_from_user arch/x86/include/asm/uaccess_64.h:68 [inline] __copy_from_user_inatomic include/linux/uaccess.h:79 [inline] copy_from_user_nmi+0x8d/0xa0 arch/x86/lib/usercopy.c:33 copy_code arch/x86/kernel/dumpstack.c:87 [inline] show_opcodes+0x50/0x70 arch/x86/kernel/dumpstack.c:117 show_iret_regs+0xd/0x33 arch/x86/kernel/dumpstack.c:138 __show_regs+0x1f/0x40 arch/x86/kernel/process_64.c:73 show_trace_log_lvl+0x25b/0x2ba arch/x86/kernel/dumpstack.c:281 __die_body+0x15/0x60 arch/x86/kernel/dumpstack.c:400 pgtable_bad+0x50/0x70 arch/x86/mm/fault.c:552 do_user_addr_fault arch/x86/mm/fault.c:1157 [inline] handle_page_fault arch/x86/mm/fault.c:1351 [inline] exc_page_fault+0x570/0x6f0 arch/x86/mm/fault.c:1404 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:538 RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 arch/x86/lib/copy_user_64.S:205 Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 RSP: 0000:ffffc90002ec6ed8 EFLAGS: 00010046 RAX: 0000000000000002 RBX: 0000000000000040 RCX: 0000000000000040 RDX: 0000000000000040 RSI: 00007fc5eda000b6 RDI: ffffc90002ec6f08 RBP: 00007fc5eda000b6 R08: 0000000000000000 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000000000000 R12: ffffc90002ec6f08 R13: ffff8881106364c0 R14: ffff8881106364c0 R15: ffffffff8401b939 copy_user_generic arch/x86/include/asm/uaccess_64.h:37 [inline] raw_copy_from_user arch/x86/include/asm/uaccess_64.h:68 [inline] __copy_from_user_inatomic include/linux/uaccess.h:79 [inline] copy_from_user_nmi+0x8d/0xa0 arch/x86/lib/usercopy.c:33 copy_code arch/x86/kernel/dumpstack.c:87 [inline] show_opcodes+0x50/0x70 arch/x86/kernel/dumpstack.c:117 show_iret_regs+0xd/0x33 arch/x86/kernel/dumpstack.c:138 __show_regs+0x1f/0x40 arch/x86/kernel/process_64.c:73 show_trace_log_lvl+0x25b/0x2ba arch/x86/kernel/dumpstack.c:281 __die_body+0x15/0x60 arch/x86/kernel/dumpstack.c:400 pgtable_bad+0x50/0x70 arch/x86/mm/fault.c:552 do_user_addr_fault arch/x86/mm/fault.c:1157 [inline] handle_page_fault arch/x86/mm/fault.c:1351 [inline] exc_page_fault+0x570/0x6f0 arch/x86/mm/fault.c:1404 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:538 RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 arch/x86/lib/copy_user_64.S:205 Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 RSP: 0000:ffffc90002ec7218 EFLAGS: 00010046 RAX: 0000000000000002 RBX: 0000000000000040 RCX: 0000000000000040 RDX: 0000000000000040 RSI: 00007fc5eda000b6 RDI: ffffc90002ec7248 RBP: 00007fc5eda000b6 R08: 0000000000000000 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000000014a80 R12: ffffc90002ec7248 R13: ffff8881106364c0 R14: ffff8881106364c0 R15: ffffffff8401b939 copy_user_generic arch/x86/include/asm/uaccess_64.h:37 [inline] raw_copy_from_user arch/x86/include/asm/uaccess_64.h:68 [inline] __copy_from_user_inatomic include/linux/uaccess.h:79 [inline] copy_from_user_nmi+0x8d/0xa0 arch/x86/lib/usercopy.c:33 copy_code arch/x86/kernel/dumpstack.c:87 [inline] show_opcodes+0x50/0x70 arch/x86/kernel/dumpstack.c:117 show_iret_regs+0xd/0x33 arch/x86/kernel/dumpstack.c:138 __show_regs+0x1f/0x40 arch/x86/kernel/process_64.c:73 show_trace_log_lvl+0x25b/0x2ba arch/x86/kernel/dumpstack.c:281 __die_body+0x15/0x60 arch/x86/kernel/dumpstack.c:400 pgtable_bad+0x50/0x70 arch/x86/mm/fault.c:552 do_user_addr_fault arch/x86/mm/fault.c:1157 [inline] handle_page_fault arch/x86/mm/fault.c:1351 [inline] exc_page_fault+0x570/0x6f0 arch/x86/mm/fault.c:1404 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:538 RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 arch/x86/lib/copy_user_64.S:205 Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 RSP: 0000:ffffc90002ec7558 EFLAGS: 00010046 RAX: 0000000000000002 RBX: 0000000000000040 RCX: 0000000000000040 RDX: 0000000000000040 RSI: 00007fc5eda000b6 RDI: ffffc90002ec7588 RBP: 00007fc5eda000b6 R08: 0000000000000000 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000000015fd0 R12: ffffc90002ec7588 R13: ffff8881106364c0 R14: ffff8881106364c0 R15: ffffffff8401b939 copy_user_generic arch/x86/include/asm/uaccess_64.h:37 [inline] raw_copy_from_user arch/x86/include/asm/uaccess_64.h:68 [inline] __copy_from_user_inatomic include/linux/uaccess.h:79 [inline] copy_from_user_nmi+0x8d/0xa0 arch/x86/lib/usercopy.c:33 copy_code arch/x86/kernel/dumpstack.c:87 [inline] show_opcodes+0x50/0x70 arch/x86/kernel/dumpstack.c:117 show_iret_regs+0xd/0x33 arch/x86/kernel/dumpstack.c:138 __show_regs+0x1f/0x40 arch/x86/kernel/process_64.c:73 show_trace_log_lvl+0x25b/0x2ba arch/x86/kernel/dumpstack.c:281 __die_body+0x15/0x60 arch/x86/kernel/dumpstack.c:400 pgtable_bad+0x50/0x70 arch/x86/mm/fault.c:552 do_user_addr_fault arch/x86/mm/fault.c:1157 [inline] handle_page_fault arch/x86/mm/fault.c:1351 [inline] exc_page_fault+0x570/0x6f0 arch/x86/mm/fault.c:1404 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:538 RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 arch/x86/lib/copy_user_64.S:205 Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 RSP: 0000:ffffc90002ec7898 EFLAGS: 00010046 RAX: 0000000000000002 RBX: 0000000000000040 RCX: 0000000000000040 RDX: 0000000000000040 RSI: 00007fc5eda000b6 RDI: ffffc90002ec78c8 RBP: 00007fc5eda000b6 R08: 0000000000000000 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000000000000 R12: ffffc90002ec78c8 R13: ffff8881106364c0 R14: ffff8881106364c0 R15: ffffffff8401b939 copy_user_generic arch/x86/include/asm/uaccess_64.h:37 [inline] raw_copy_from_user arch/x86/include/asm/uaccess_64.h:68 [inline] __copy_from_user_inatomic include/linux/uaccess.h:79 [inline] copy_from_user_nmi+0x8d/0xa0 arch/x86/lib/usercopy.c:33 copy_code arch/x86/kernel/dumpstack.c:87 [inline] show_opcodes+0x50/0x70 arch/x86/kernel/dumpstack.c:117 show_iret_regs+0xd/0x33 arch/x86/kernel/dumpstack.c:138 __show_regs+0x1f/0x40 arch/x86/kernel/process_64.c:73 show_trace_log_lvl+0x25b/0x2ba arch/x86/kernel/dumpstack.c:281 __die_body+0x15/0x60 arch/x86/kernel/dumpstack.c:400 pgtable_bad+0x50/0x70 arch/x86/mm/fault.c:552 do_user_addr_fault arch/x86/mm/fault.c:1157 [inline] handle_page_fault arch/x86/mm/fault.c:1351 [inline] exc_page_fault+0x570/0x6f0 arch/x86/mm/fault.c:1404 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:538 RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 arch/x86/lib/copy_user_64.S:205 Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 RSP: 0000:ffffc90002ec7bd8 EFLAGS: 00010046 RAX: 0000000000000002 RBX: 0000000000000040 RCX: 0000000000000040 RDX: 0000000000000040 RSI: 00007fc5eda000b6 RDI: ffffc90002ec7c08 RBP: 00007fc5eda000b6 R08: 0000000000000000 R09: 0000000000000001 R10: 0000000000000000 R11: 4a5ae121e54e1d3c R12: ffffc90002ec7c08 R13: ffff8881106364c0 R14: ffff8881106364c0 R15: ffffffff8401b939 copy_user_generic arch/x86/include/asm/uaccess_64.h:37 [inline] raw_copy_from_user arch/x86/include/asm/uaccess_64.h:68 [inline] __copy_from_user_inatomic include/linux/uaccess.h:79 [inline] copy_from_user_nmi+0x8d/0xa0 arch/x86/lib/usercopy.c:33 copy_code arch/x86/kernel/dumpstack.c:87 [inline] show_opcodes+0x50/0x70 arch/x86/kernel/dumpstack.c:117 show_iret_regs+0xd/0x33 arch/x86/kernel/dumpstack.c:138 __show_regs+0x1f/0x40 arch/x86/kernel/process_64.c:73 show_trace_log_lvl+0x25b/0x2ba arch/x86/kernel/dumpstack.c:281 __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0xb3/0xec lib/dump_stack.c:118 print_bad_pte.cold.117+0x93/0xbd mm/memory.c:547 vm_normal_page+0x48/0xb0 mm/memory.c:610 do_numa_page mm/memory.c:4049 [inline] handle_pte_fault mm/memory.c:4231 [inline] __handle_mm_fault mm/memory.c:4356 [inline] handle_mm_fault+0xd8d/0x17f0 mm/memory.c:4454 do_user_addr_fault arch/x86/mm/fault.c:1294 [inline] handle_page_fault arch/x86/mm/fault.c:1351 [inline] exc_page_fault+0x34f/0x6f0 arch/x86/mm/fault.c:1404 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:538 RIP: 0033:0x7fc5eda000e0 systemd-udevd: Corrupted page table at address 7fc5eda000b6 PGD 10ffaa067 P4D 10ffaa067 PUD 10ffab067 PMD 10ffc5067 PTE ffffedb65f625 Bad pagetable: 0009 [#11] PREEMPT SMP CPU: 1 PID: 8270 Comm: systemd-udevd Not tainted 5.9.0-rc1-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 arch/x86/lib/copy_user_64.S:205 Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 RSP: 0000:ffffc90002ec5b58 EFLAGS: 00010046 RAX: 0000000000000002 RBX: 0000000000000040 RCX: 0000000000000040 RDX: 0000000000000040 RSI: 00007fc5eda000b6 RDI: ffffc90002ec5b88 RBP: 00007fc5eda000b6 R08: 0000000000000000 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000037323854 R12: ffffc90002ec5b88 R13: ffff8881106364c0 R14: ffff8881106364c0 R15: ffffffff8401b939 FS: 00007fc5eec248c0(0000) GS:ffff88812c100000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fc5eda000b6 CR3: 000000010ffa3000 CR4: 00000000001506e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: copy_user_generic arch/x86/include/asm/uaccess_64.h:37 [inline] raw_copy_from_user arch/x86/include/asm/uaccess_64.h:68 [inline] __copy_from_user_inatomic include/linux/uaccess.h:79 [inline] copy_from_user_nmi+0x8d/0xa0 arch/x86/lib/usercopy.c:33 copy_code arch/x86/kernel/dumpstack.c:87 [inline] show_opcodes+0x50/0x70 arch/x86/kernel/dumpstack.c:117 show_iret_regs+0xd/0x33 arch/x86/kernel/dumpstack.c:138 __show_regs+0x1f/0x40 arch/x86/kernel/process_64.c:73 show_trace_log_lvl+0x25b/0x2ba arch/x86/kernel/dumpstack.c:281 __die_body+0x15/0x60 arch/x86/kernel/dumpstack.c:400 pgtable_bad+0x50/0x70 arch/x86/mm/fault.c:552 do_user_addr_fault arch/x86/mm/fault.c:1157 [inline] handle_page_fault arch/x86/mm/fault.c:1351 [inline] exc_page_fault+0x570/0x6f0 arch/x86/mm/fault.c:1404 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:538 RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 arch/x86/lib/copy_user_64.S:205 Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 RSP: 0000:ffffc90002ec5e98 EFLAGS: 00010046 RAX: 0000000000000002 RBX: 0000000000000040 RCX: 0000000000000040 RDX: 0000000000000040 RSI: 00007fc5eda000b6 RDI: ffffc90002ec5ec8 RBP: 00007fc5eda000b6 R08: 0000000000000000 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000037323854 R12: ffffc90002ec5ec8 R13: ffff8881106364c0 R14: ffff8881106364c0 R15: ffffffff8401b939 copy_user_generic arch/x86/include/asm/uaccess_64.h:37 [inline] raw_copy_from_user arch/x86/include/asm/uaccess_64.h:68 [inline] __copy_from_user_inatomic include/linux/uaccess.h:79 [inline] copy_from_user_nmi+0x8d/0xa0 arch/x86/lib/usercopy.c:33 copy_code arch/x86/kernel/dumpstack.c:87 [inline] show_opcodes+0x50/0x70 arch/x86/kernel/dumpstack.c:117 show_iret_regs+0xd/0x33 arch/x86/kernel/dumpstack.c:138 __show_regs+0x1f/0x40 arch/x86/kernel/process_64.c:73 show_trace_log_lvl+0x25b/0x2ba arch/x86/kernel/dumpstack.c:281 __die_body+0x15/0x60 arch/x86/kernel/dumpstack.c:400 pgtable_bad+0x50/0x70 arch/x86/mm/fault.c:552 do_user_addr_fault arch/x86/mm/fault.c:1157 [inline] handle_page_fault arch/x86/mm/fault.c:1351 [inline] exc_page_fault+0x570/0x6f0 arch/x86/mm/fault.c:1404 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:538 RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 arch/x86/lib/copy_user_64.S:205 Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 RSP: 0000:ffffc90002ec61d8 EFLAGS: 00010046 RAX: 0000000000000002 RBX: 0000000000000040 RCX: 0000000000000040 RDX: 0000000000000040 RSI: 00007fc5eda000b6 RDI: ffffc90002ec6208 RBP: 00007fc5eda000b6 R08: 0000000000000000 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000037323854 R12: ffffc90002ec6208 R13: ffff8881106364c0 R14: ffff8881106364c0 R15: ffffffff8401b939 copy_user_generic arch/x86/include/asm/uaccess_64.h:37 [inline] raw_copy_from_user arch/x86/include/asm/uaccess_64.h:68 [inline] __copy_from_user_inatomic include/linux/uaccess.h:79 [inline] copy_from_user_nmi+0x8d/0xa0 arch/x86/lib/usercopy.c:33 copy_code arch/x86/kernel/dumpstack.c:87 [inline] show_opcodes+0x50/0x70 arch/x86/kernel/dumpstack.c:117 show_iret_regs+0xd/0x33 arch/x86/kernel/dumpstack.c:138 __show_regs+0x1f/0x40 arch/x86/kernel/process_64.c:73 show_trace_log_lvl+0x25b/0x2ba arch/x86/kernel/dumpstack.c:281 __die_body+0x15/0x60 arch/x86/kernel/dumpstack.c:400 pgtable_bad+0x50/0x70 arch/x86/mm/fault.c:552 do_user_addr_fault arch/x86/mm/fault.c:1157 [inline] handle_page_fault arch/x86/mm/fault.c:1351 [inline] exc_page_fault+0x570/0x6f0 arch/x86/mm/fault.c:1404 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:538 RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 arch/x86/lib/copy_user_64.S:205 Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 RSP: 0000:ffffc90002ec6518 EFLAGS: 00010046 RAX: 0000000000000002 RBX: 0000000000000040 RCX: 0000000000000040 RDX: 0000000000000040 RSI: 00007fc5eda000b6 RDI: ffffc90002ec6548 RBP: 00007fc5eda000b6 R08: 0000000000000000 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000037323854 R12: ffffc90002ec6548 R13: ffff8881106364c0 R14: ffff8881106364c0 R15: ffffffff8401b939 copy_user_generic arch/x86/include/asm/uaccess_64.h:37 [inline] raw_copy_from_user arch/x86/include/asm/uaccess_64.h:68 [inline] __copy_from_user_inatomic include/linux/uaccess.h:79 [inline] copy_from_user_nmi+0x8d/0xa0 arch/x86/lib/usercopy.c:33 copy_code arch/x86/kernel/dumpstack.c:87 [inline] show_opcodes+0x50/0x70 arch/x86/kernel/dumpstack.c:117 show_iret_regs+0xd/0x33 arch/x86/kernel/dumpstack.c:138 __show_regs+0x1f/0x40 arch/x86/kernel/process_64.c:73 show_trace_log_lvl+0x25b/0x2ba arch/x86/kernel/dumpstack.c:281 __die_body+0x15/0x60 arch/x86/kernel/dumpstack.c:400 pgtable_bad+0x50/0x70 arch/x86/mm/fault.c:552 do_user_addr_fault arch/x86/mm/fault.c:1157 [inline] handle_page_fault arch/x86/mm/fault.c:1351 [inline] exc_page_fault+0x570/0x6f0 arch/x86/mm/fault.c:1404 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:538 RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 arch/x86/lib/copy_user_64.S:205 Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 RSP: 0000:ffffc90002ec6858 EFLAGS: 00010046 RAX: 0000000000000002 RBX: 0000000000000040 RCX: 0000000000000040 RDX: 0000000000000040 RSI: 00007fc5eda000b6 RDI: ffffc90002ec6888 RBP: 00007fc5eda000b6 R08: 0000000000000000 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000037323854 R12: ffffc90002ec6888 R13: ffff8881106364c0 R14: ffff8881106364c0 R15: ffffffff8401b939 copy_user_generic arch/x86/include/asm/uaccess_64.h:37 [inline] raw_copy_from_user arch/x86/include/asm/uaccess_64.h:68 [inline] __copy_from_user_inatomic include/linux/uaccess.h:79 [inline] copy_from_user_nmi+0x8d/0xa0 arch/x86/lib/usercopy.c:33 copy_code arch/x86/kernel/dumpstack.c:87 [inline] show_opcodes+0x50/0x70 arch/x86/kernel/dumpstack.c:117 show_iret_regs+0xd/0x33 arch/x86/kernel/dumpstack.c:138 __show_regs+0x1f/0x40 arch/x86/kernel/process_64.c:73 show_trace_log_lvl+0x25b/0x2ba arch/x86/kernel/dumpstack.c:281 __die_body+0x15/0x60 arch/x86/kernel/dumpstack.c:400 pgtable_bad+0x50/0x70 arch/x86/mm/fault.c:552 do_user_addr_fault arch/x86/mm/fault.c:1157 [inline] handle_page_fault arch/x86/mm/fault.c:1351 [inline] exc_page_fault+0x570/0x6f0 arch/x86/mm/fault.c:1404 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:538 RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 arch/x86/lib/copy_user_64.S:205 Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 RSP: 0000:ffffc90002ec6b98 EFLAGS: 00010046 RAX: 0000000000000002 RBX: 0000000000000040 RCX: 0000000000000040 RDX: 0000000000000040 RSI: 00007fc5eda000b6 RDI: ffffc90002ec6bc8 RBP: 00007fc5eda000b6 R08: 0000000000000000 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000037323854 R12: ffffc90002ec6bc8 R13: ffff8881106364c0 R14: ffff8881106364c0 R15: ffffffff8401b939 copy_user_generic arch/x86/include/asm/uaccess_64.h:37 [inline] raw_copy_from_user arch/x86/include/asm/uaccess_64.h:68 [inline] __copy_from_user_inatomic include/linux/uaccess.h:79 [inline] copy_from_user_nmi+0x8d/0xa0 arch/x86/lib/usercopy.c:33 copy_code arch/x86/kernel/dumpstack.c:87 [inline] show_opcodes+0x50/0x70 arch/x86/kernel/dumpstack.c:117 show_iret_regs+0xd/0x33 arch/x86/kernel/dumpstack.c:138 __show_regs+0x1f/0x40 arch/x86/kernel/process_64.c:73 show_trace_log_lvl+0x25b/0x2ba arch/x86/kernel/dumpstack.c:281 __die_body+0x15/0x60 arch/x86/kernel/dumpstack.c:400 pgtable_bad+0x50/0x70 arch/x86/mm/fault.c:552 do_user_addr_fault arch/x86/mm/fault.c:1157 [inline] handle_page_fault arch/x86/mm/fault.c:1351 [inline] exc_page_fault+0x570/0x6f0 arch/x86/mm/fault.c:1404 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:538 RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 arch/x86/lib/copy_user_64.S:205 Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 RSP: 0000:ffffc90002ec6ed8 EFLAGS: 00010046 RAX: 0000000000000002 RBX: 0000000000000040 RCX: 0000000000000040 RDX: 0000000000000040 RSI: 00007fc5eda000b6 RDI: ffffc90002ec6f08 RBP: 00007fc5eda000b6 R08: 0000000000000000 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000000000000 R12: ffffc90002ec6f08 R13: ffff8881106364c0 R14: ffff8881106364c0 R15: ffffffff8401b939 copy_user_generic arch/x86/include/asm/uaccess_64.h:37 [inline] raw_copy_from_user arch/x86/include/asm/uaccess_64.h:68 [inline] __copy_from_user_inatomic include/linux/uaccess.h:79 [inline] copy_from_user_nmi+0x8d/0xa0 arch/x86/lib/usercopy.c:33 copy_code arch/x86/kernel/dumpstack.c:87 [inline] show_opcodes+0x50/0x70 arch/x86/kernel/dumpstack.c:117 show_iret_regs+0xd/0x33 arch/x86/kernel/dumpstack.c:138 __show_regs+0x1f/0x40 arch/x86/kernel/process_64.c:73 show_trace_log_lvl+0x25b/0x2ba arch/x86/kernel/dumpstack.c:281 __die_body+0x15/0x60 arch/x86/kernel/dumpstack.c:400 pgtable_bad+0x50/0x70 arch/x86/mm/fault.c:552 do_user_addr_fault arch/x86/mm/fault.c:1157 [inline] handle_page_fault arch/x86/mm/fault.c:1351 [inline] exc_page_fault+0x570/0x6f0 arch/x86/mm/fault.c:1404 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:538 RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 arch/x86/lib/copy_user_64.S:205 Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 RSP: 0000:ffffc90002ec7218 EFLAGS: 00010046 RAX: 0000000000000002 RBX: 0000000000000040 RCX: 0000000000000040 RDX: 0000000000000040 RSI: 00007fc5eda000b6 RDI: ffffc90002ec7248 RBP: 00007fc5eda000b6 R08: 0000000000000000 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000000014a80 R12: ffffc90002ec7248 R13: ffff8881106364c0 R14: ffff8881106364c0 R15: ffffffff8401b939 copy_user_generic arch/x86/include/asm/uaccess_64.h:37 [inline] raw_copy_from_user arch/x86/include/asm/uaccess_64.h:68 [inline] __copy_from_user_inatomic include/linux/uaccess.h:79 [inline] copy_from_user_nmi+0x8d/0xa0 arch/x86/lib/usercopy.c:33 copy_code arch/x86/kernel/dumpstack.c:87 [inline] show_opcodes+0x50/0x70 arch/x86/kernel/dumpstack.c:117 show_iret_regs+0xd/0x33 arch/x86/kernel/dumpstack.c:138 __show_regs+0x1f/0x40 arch/x86/kernel/process_64.c:73 show_trace_log_lvl+0x25b/0x2ba arch/x86/kernel/dumpstack.c:281 __die_body+0x15/0x60 arch/x86/kernel/dumpstack.c:400 pgtable_bad+0x50/0x70 arch/x86/mm/fault.c:552 do_user_addr_fault arch/x86/mm/fault.c:1157 [inline] handle_page_fault arch/x86/mm/fault.c:1351 [inline] exc_page_fault+0x570/0x6f0 arch/x86/mm/fault.c:1404 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:538 RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 arch/x86/lib/copy_user_64.S:205 Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 RSP: 0000:ffffc90002ec7558 EFLAGS: 00010046 RAX: 0000000000000002 RBX: 0000000000000040 RCX: 0000000000000040 RDX: 0000000000000040 RSI: 00007fc5eda000b6 RDI: ffffc90002ec7588 RBP: 00007fc5eda000b6 R08: 0000000000000000 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000000015fd0 R12: ffffc90002ec7588 R13: ffff8881106364c0 R14: ffff8881106364c0 R15: ffffffff8401b939 copy_user_generic arch/x86/include/asm/uaccess_64.h:37 [inline] raw_copy_from_user arch/x86/include/asm/uaccess_64.h:68 [inline] __copy_from_user_inatomic include/linux/uaccess.h:79 [inline] copy_from_user_nmi+0x8d/0xa0 arch/x86/lib/usercopy.c:33 copy_code arch/x86/kernel/dumpstack.c:87 [inline] show_opcodes+0x50/0x70 arch/x86/kernel/dumpstack.c:117 show_iret_regs+0xd/0x33 arch/x86/kernel/dumpstack.c:138 __show_regs+0x1f/0x40 arch/x86/kernel/process_64.c:73 show_trace_log_lvl+0x25b/0x2ba arch/x86/kernel/dumpstack.c:281 __die_body+0x15/0x60 arch/x86/kernel/dumpstack.c:400 pgtable_bad+0x50/0x70 arch/x86/mm/fault.c:552 do_user_addr_fault arch/x86/mm/fault.c:1157 [inline] handle_page_fault arch/x86/mm/fault.c:1351 [inline] exc_page_fault+0x570/0x6f0 arch/x86/mm/fault.c:1404 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:538 RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30 arch/x86/lib/copy_user_64.S:205 Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4 RSP: 0000:ffffc90002ec7898 EFLAGS: 00010046 RAX: 0000000000000002 RBX: 0000000000000040 RCX: 0000000000000040 RDX: 0000000000000040 RSI: 00007fc5eda000b6 RDI: ffffc90002ec78c8 RBP: 00007fc5eda000b6 R08: 0000000000000000 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000000000000 R12: ffffc90002ec78c8 R13: ffff8881106364c0 R14: ffff8881106364c0 R15: ffffffff8401b939 copy_user_generic arch/x86/include/asm/uaccess_64.h:37 [inline] raw_copy_from_user arch/x86/include/asm/uaccess_64.h:68 [inline] __copy_from_user_inatomic include/linux/uaccess.h:79 [inline] copy_from_user_nmi+0x8d/0xa0 arch/x86/lib/usercopy.c:33 copy_code arch/x86/kernel/dumpstack.c:87 [inline] show_opcodes+0x50/0x70 arch/x86/kernel/dumpstack.c:117 show_iret_regs+0xd/0x33 arch/x86/kernel/dumpstack.c:138 __show_regs+0x1f/0x40 arch/x86/kernel/process_64.c:73 show_trace_log_lvl+0x25b/0x2ba arch/x86/kernel/dumpstack.c:281 __die_body+0x15/0x60 arch/x86/kernel/dumpstack.c:400 pgtable_bad+0x50/0x70 arch/x86/mm/fault.c:552 do_user_addr_fault arch/x86/mm/fault.c:1157 [inline] handle_page_fault arch/x86/mm/fault.c:1351 [inline] exc_page_fault+0x570/0x6f0 arch/x86/mm/fault.c:1404 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:538