BUG: unable to handle kernel paging request at ffff888001000000 IP: __writeq arch/x86/include/asm/io.h:100 [inline] IP: bitfill_aligned drivers/video/fbdev/core/cfbfillrect.c:70 [inline] IP: bitfill_aligned+0xef/0x190 drivers/video/fbdev/core/cfbfillrect.c:35 PGD c9dd067 P4D c9dd067 PUD c9de067 PMD 80000000010001e1 Oops: 0003 [#1] PREEMPT SMP KASAN Modules linked in: CPU: 0 PID: 10082 Comm: syz-executor.5 Not tainted 4.14.290-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 task: ffff88805b1bc380 task.stack: ffff888091148000 RIP: 0010:__writeq arch/x86/include/asm/io.h:100 [inline] RIP: 0010:bitfill_aligned drivers/video/fbdev/core/cfbfillrect.c:70 [inline] RIP: 0010:bitfill_aligned+0xef/0x190 drivers/video/fbdev/core/cfbfillrect.c:35 RSP: 0018:ffff88809114f730 EFLAGS: 00010246 RAX: ffff888001000008 RBX: ffff888000ffffd0 RCX: ffffc900090f6000 RDX: 0000000000040000 RSI: ffffffff833a0f04 RDI: 0000000000000600 RBP: 0000000000000018 R08: 0000000000000600 R09: 0000000000000040 R10: ffff8880b0a4131f R11: 0000000000000000 R12: ffff888001000090 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 FS: 00007f5036952700(0000) GS:ffff8880ba400000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffff888001000000 CR3: 000000009ac63000 CR4: 00000000003406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: cfb_fillrect+0x3c7/0x710 drivers/video/fbdev/core/cfbfillrect.c:327 vga16fb_fillrect+0x5fa/0x1820 drivers/video/fbdev/vga16fb.c:951 bit_clear_margins+0x3af/0x480 drivers/video/fbdev/core/bitblit.c:224 fbcon_clear_margins+0x1bb/0x300 drivers/video/fbdev/core/fbcon.c:1266 fbcon_switch+0xde0/0x19e0 drivers/video/fbdev/core/fbcon.c:2133 redraw_screen+0x32c/0x790 drivers/tty/vt/vt.c:689 vc_do_resize+0xc41/0xe40 drivers/tty/vt/vt.c:991 vt_resize+0xa3/0xe0 drivers/tty/vt/vt.c:1032 tiocswinsz drivers/tty/tty_io.c:2267 [inline] tty_ioctl+0xf7e/0x1430 drivers/tty/tty_io.c:2576 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:500 [inline] do_vfs_ioctl+0x75a/0xff0 fs/ioctl.c:684 SYSC_ioctl fs/ioctl.c:701 [inline] SyS_ioctl+0x7f/0xb0 fs/ioctl.c:692 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x7f5037fdd279 RSP: 002b:00007f5036952168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007f50380eff80 RCX: 00007f5037fdd279 RDX: 0000000020000140 RSI: 0000000000005414 RDI: 0000000000000003 RBP: 00007f5038037189 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffe76995a5f R14: 00007f5036952300 R15: 0000000000022000 Code: 41 83 c4 01 49 c1 e4 06 49 01 dc e8 1c 38 1b fe 4c 89 3b 4c 89 7b 08 4c 89 7b 10 4c 89 7b 18 4c 89 7b 20 4c 89 7b 28 48 8d 43 38 <4c> 89 7b 30 48 83 c3 40 4c 89 38 49 39 dc 75 d0 83 e5 07 41 89 RIP: __writeq arch/x86/include/asm/io.h:100 [inline] RSP: ffff88809114f730 RIP: bitfill_aligned drivers/video/fbdev/core/cfbfillrect.c:70 [inline] RSP: ffff88809114f730 RIP: bitfill_aligned+0xef/0x190 drivers/video/fbdev/core/cfbfillrect.c:35 RSP: ffff88809114f730 CR2: ffff888001000000 ---[ end trace a10fdaf5ea812305 ]--- ---------------- Code disassembly (best guess): 0: 41 83 c4 01 add $0x1,%r12d 4: 49 c1 e4 06 shl $0x6,%r12 8: 49 01 dc add %rbx,%r12 b: e8 1c 38 1b fe callq 0xfe1b382c 10: 4c 89 3b mov %r15,(%rbx) 13: 4c 89 7b 08 mov %r15,0x8(%rbx) 17: 4c 89 7b 10 mov %r15,0x10(%rbx) 1b: 4c 89 7b 18 mov %r15,0x18(%rbx) 1f: 4c 89 7b 20 mov %r15,0x20(%rbx) 23: 4c 89 7b 28 mov %r15,0x28(%rbx) 27: 48 8d 43 38 lea 0x38(%rbx),%rax * 2b: 4c 89 7b 30 mov %r15,0x30(%rbx) <-- trapping instruction 2f: 48 83 c3 40 add $0x40,%rbx 33: 4c 89 38 mov %r15,(%rax) 36: 49 39 dc cmp %rbx,%r12 39: 75 d0 jne 0xb 3b: 83 e5 07 and $0x7,%ebp 3e: 41 rex.B 3f: 89 .byte 0x89