audit: type=1804 audit(1590100101.500:25): pid=8593 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir574420298/syzkaller.GM8jNW/23/file0" dev="sda1" ino=15857 res=1
------------[ cut here ]------------
kernel BUG at mm/memory.c:3947!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 0 PID: 8540 Comm: syz-executor.4 Not tainted 4.19.124-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:wp_huge_pmd mm/memory.c:3947 [inline]
RIP: 0010:__handle_mm_fault+0x29b0/0x43b0 mm/memory.c:4155
Code: d6 d5 ff 84 db 0f 84 81 e7 ff ff e8 ea d4 d5 ff 48 89 ef e8 d2 a0 f4 ff e9 6f e7 ff ff e8 d8 d4 d5 ff 4c 89 e7 e8 b9 33 fd ff <0f> 0b e8 c9 d4 d5 ff 4c 8d 4c 24 60 4c 89 cf e8 5c da 0d 00 41 89
RSP: 0018:ffff88804b8b7ce8 EFLAGS: 00010283
RAX: 0000000000000137 RBX: 0000000000000008 RCX: 0000000000000000
audit: type=1804 audit(1590100101.530:26): pid=8593 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir574420298/syzkaller.GM8jNW/23/file0" dev="sda1" ino=15857 res=1
RDX: 0000000000000000 RSI: ffffffff81534081 RDI: ffffed1009716f78
RBP: 000000003b8000e5 R08: 0000000000000137 R09: ffffed1015ce5081
R10: ffffed1015ce5080 R11: ffff8880ae728407 R12: ffff8880860a2eb0
R13: 1ffff11009716fa3 R14: 0000000000000001 R15: ffff88804b9e73c0
FS:  00000000015e6940(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ffe5dd65cbc CR3: 00000000a8d74000 CR4: 00000000001426f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 handle_mm_fault+0x436/0xafd mm/memory.c:4202
 __do_page_fault+0x6d5/0xde0 arch/x86/mm/fault.c:1412
 page_fault+0x1e/0x30 arch/x86/entry/entry_64.S:1205
RIP: 0033:0x443cd1
Code: 8d 15 b3 1b 0d 00 8b 0c 8a 8b 04 82 29 c8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 fa 20 48 89 f8 73 77 f6 c2 01 74 0b 0f b6 0e <88> 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e 66 89 0f 48 83 c6
RSP: 002b:00007ffe838e22a8 EFLAGS: 00010202
RAX: 00000000200001c0 RBX: 0000000000000000 RCX: 0000000000000063
RDX: 0000000000000013 RSI: 0000000000790808 RDI: 00000000200001c0
RBP: 00000000007907e8 R08: 0000000000000000 R09: 0000000000000000
R10: 00007ffe838e2390 R11: 0000000000000246 R12: 00000000007907f0
R13: 000000000003921e R14: fffffffffffffffe R15: 000000000078c04c
Modules linked in:
---[ end trace 5d7c3112d5c9d32b ]---
RIP: 0010:wp_huge_pmd mm/memory.c:3947 [inline]
RIP: 0010:__handle_mm_fault+0x29b0/0x43b0 mm/memory.c:4155
Code: d6 d5 ff 84 db 0f 84 81 e7 ff ff e8 ea d4 d5 ff 48 89 ef e8 d2 a0 f4 ff e9 6f e7 ff ff e8 d8 d4 d5 ff 4c 89 e7 e8 b9 33 fd ff <0f> 0b e8 c9 d4 d5 ff 4c 8d 4c 24 60 4c 89 cf e8 5c da 0d 00 41 89
RSP: 0018:ffff88804b8b7ce8 EFLAGS: 00010283
RAX: 0000000000000137 RBX: 0000000000000008 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffffffff81534081 RDI: ffffed1009716f78
RBP: 000000003b8000e5 R08: 0000000000000137 R09: ffffed1015ce5081
R10: ffffed1015ce5080 R11: ffff8880ae728407 R12: ffff8880860a2eb0
R13: 1ffff11009716fa3 R14: 0000000000000001 R15: ffff88804b9e73c0
FS:  00000000015e6940(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ffc1b563f97 CR3: 00000000a8d74000 CR4: 00000000001406e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400