BUG: unable to handle kernel paging request at ffff8800a3aef618
PGD aaab067 P4D aaab067 PUD 21ffff067 PMD a718d063 PTE ffff8800a718d7a8
Oops: 0002 [#1] SMP PTI
CPU: 1 PID: 19893 Comm: udevd Not tainted 4.18.0-rc8+ #33
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:kmsan_write_aligned_origin mm/kmsan/kmsan.c:591 [inline]
RIP: 0010:kmsan_set_origin+0xb0/0x150 mm/kmsan/kmsan.c:625
Code: 00 00 4c 89 f7 4c 89 fe e8 3d 07 00 00 48 85 c0 74 3d a8 03 0f 85 82 00 00 00 48 c1 eb 02 74 19 b9 01 00 00 00 31 d2 0f 1f 00 <44> 89 2c 90 48 63 d1 83 c1 01 48 39 d3 77 f1 4d 01 fe 45 29 fc 45 
PANIC: double fault, error_code: 0x0
RSP: 0018:ffff8800a14bf538 EFLAGS: 00010046
CPU: 0 PID: 19887 Comm: syz-executor1 Not tainted 4.18.0-rc8+ #33
RAX: ffff8800a3aef618 RBX: 000000000000002a RCX: 0000000000000001
RDX: 0000000000000000 RSI: ffff88021fff2000 RDI: ffffffff7fffffff
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RBP: ffff8800a14bf560 R08: ffffffff7fffffff R09: ffff8800a9e9f618
R10: 0000000000000000 R11: 0000000000000000 R12: 00000000000000a8
RIP: 0010:task_kmsan_context_state+0x0/0x110 mm/kmsan/kmsan.c:93
R13: 0000000000000000 R14: ffff8800a14bf618 R15: 00000000000000a8
FS:  0000000000000000(0000) GS:ffff88021fd00000(0000) knlGS:0000000000000000
Code: 
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffff8800a3aef618 CR3: 000000014e39c000 CR4: 00000000001406e0
0f 
Call Trace:
00 
 kmsan_internal_unpoison_shadow+0x83/0xe0 mm/kmsan/kmsan.c:202
00 
 kmsan_unpoison_shadow+0x66/0xb0 mm/kmsan/kmsan.c:215
5b 
 do_page_fault+0x4d/0xd0 arch/x86/mm/fault.c:1469
41 
 page_fault+0x1e/0x30 arch/x86/entry/entry_64.S:1169
5e 
RIP: 0010:native_save_fl arch/x86/include/asm/irqflags.h:19 [inline]
RIP: 0010:arch_local_save_flags arch/x86/include/asm/irqflags.h:73 [inline]
RIP: 0010:arch_local_irq_save arch/x86/include/asm/irqflags.h:114 [inline]
RIP: 0010:cr4_clear_bits arch/x86/include/asm/tlbflush.h:279 [inline]
RIP: 0010:load_mm_cr4 arch/x86/include/asm/mmu_context.h:36 [inline]
RIP: 0010:switch_mm_irqs_off+0xef3/0x1650 arch/x86/mm/tlb.c:335
41 
Code: 48 
5f 
89 df 
5d 
e8 2f 
c3 
99 a2 
41 
00 48 
8b 
c7 00 
be 
00 00 
90 
00 00 
0c 
48 c7 
00 
45 a8 
00 
00 00 
e8 
00 00 
b4 
9c 8f 
49 
45 a8 
00 
4c 8b 
00 
75 a8 
eb 
48 89 
a1 
df e8 
90 
f0 98 
90 
a2 00 
8a 
48 8b 
04 
00 <8b> 
25 
3a fa 
38 
65 48 
d5 
8b 14 
15 
25 e0 
8a 
95 0b 
c3 
00 48 
0f 
89 d1 
1f 
48 81 
84 
e1 ff 
00 
fe ff 
00 
ff 
00 
RSP: 0018:ffff8800a14bf6c0 EFLAGS: 00010086
00 
RAX: 0000000000000000 RBX: ffff8800a14bf708 RCX: ffff8800a3aef708
RDX: ffff8800a3aef708 RSI: aaaaaaaaaaaab000 RDI: ffffea0003c7c7a0
00 
RBP: ffff8800a14bf760 R08: 000077ff80000000 R09: 0000000000000000
R10: ffffffff7fffffff R11: 0000000000000000 R12: 0000000000000000
<55> 
R13: 0000000000000000 R14: 0000000000000086 R15: 000000014e39c000
48 
 context_switch kernel/sched/core.c:2845 [inline]
 __schedule+0x5d6/0x770 kernel/sched/core.c:3507
89 
 preempt_schedule_common kernel/sched/core.c:3631 [inline]
 _cond_resched+0x4e/0xc0 kernel/sched/core.c:4999
e5 
 down_read+0x2c/0x100 kernel/locking/rwsem.c:23
41 
 exec_mmap fs/exec.c:1024 [inline]
 flush_old_exec+0x1459/0x2090 fs/exec.c:1275
57 
41 
 load_elf_binary+0x140a/0x8fb0 fs/binfmt_elf.c:869
56 
41 
54 
53 
48 
83 
ec 
10 
65 
44 8b 
 search_binary_handler+0x2ef/0xab0 fs/exec.c:1652
3c 
 exec_binprm fs/exec.c:1694 [inline]
 __do_execve_file+0x21d4/0x2d00 fs/exec.c:1818
25 
 do_execveat_common fs/exec.c:1865 [inline]
 do_execve fs/exec.c:1882 [inline]
 __do_sys_execve fs/exec.c:1963 [inline]
 __se_sys_execve fs/exec.c:1958 [inline]
 __x64_sys_execve+0x131/0x180 fs/exec.c:1958
20 
a1 
 do_syscall_64+0x15b/0x220 arch/x86/entry/common.c:290
 entry_SYSCALL_64_after_hwframe+0x63/0xe7
RSP: 0018:ffff8800a3c00000 EFLAGS: 00010083
RIP: 0033:0x7fdc82a17207
Code: Bad RIP value.
RAX: 0000000088c00a77 RBX: 0000000000000000 RCX: ffffffff88c00a77
RSP: 002b:00007fff5f0d6e38 EFLAGS: 00000202 ORIG_RAX: 000000000000003b
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8800a3c00048
RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 00007fdc82a17207
RDX: 0000000000c7a3f0 RSI: 00007fff5f0d6f30 RDI: 00007fff5f0d7f40
RBP: ffff8800a3c00008 R08: 0000000000000000 R09: 0000000000000000
RBP: 0000000000625500 R08: 0000000000004da9 R09: 0000000000004da9
R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000c7a3f0
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000007 R14: 0000000000c75250 R15: 0000000000000005
Modules linked in:
R13: 0000000000000000 R14: 0000000000000000 R15: ffff8800a3c00048
Dumping ftrace buffer:
FS:  0000000001b5f940(0000) GS:ffff88021fc00000(0000) knlGS:0000000000000000
   (ftrace buffer empty)
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffff8800a3aef618
CR2: ffff8800a3bffff8 CR3: 00000000abb6a000 CR4: 00000000001406f0
---[ end trace 8abd5158502fd8ca ]---
DR0: 0000000020000000 DR1: 0000000020000000 DR2: 0000000000000000
RIP: 0010:kmsan_write_aligned_origin mm/kmsan/kmsan.c:591 [inline]
RIP: 0010:kmsan_set_origin+0xb0/0x150 mm/kmsan/kmsan.c:625
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
Code: 00 
Call Trace:
00 4c