BUG: unable to handle kernel paging request at ffffea000a731b90
PGD 21f7ef067 P4D 21f7ef067 PUD 10 
Oops: 0000 [#1] SMP PTI
Dumping ftrace buffer:
   (ftrace buffer empty)
Modules linked in:
CPU: 1 PID: 9104 Comm: syz-executor3 Not tainted 4.17.0+ #9
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:kmsan_get_shadow_address+0xf6/0x1f0 mm/kmsan/kmsan.c:1374
RSP: 0018:ffff8801bdd9ef18 EFLAGS: 00010082
RAX: 000000000a731b40 RBX: 00000000000006e0 RCX: ffffea0000000000
RDX: ffffea000a731b40 RSI: ffff8801bdd9efbe RDI: 0000000000000000
RBP: ffff8801bdd9ef30 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: ffff8801bdd9efbe
R13: 0000000000000001 R14: 0000000000000001 R15: 0000000000000001
FS:  00007fe54f357700(0000) GS:ffff88021fd00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffea000a731b90 CR3: 0000000140864000 CR4: 00000000001406e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 kmsan_internal_memset_shadow mm/kmsan/kmsan.c:175 [inline]
 kmsan_internal_unpoison_shadow+0x5c/0xe0 mm/kmsan/kmsan.c:212
 __msan_unpoison_alloca+0x66/0xb0 mm/kmsan/kmsan_instr.c:603
 do_page_fault+0x2a/0x250 arch/x86/mm/fault.c:1468
 page_fault+0x1e/0x30 arch/x86/entry/entry_64.S:1163
RIP: 0010:msan_get_shadow_origin_ptr+0x161/0x230 mm/kmsan/kmsan_instr.c:260
RSP: 0018:ffff8801bdd9f0a8 EFLAGS: 00010006
RAX: 00000000004212c0 RBX: ffffffff8b58a000 RCX: 000000000000b032
RDX: 0000000000000020 RSI: 0000000000000004 RDI: ffffea0000000000
RBP: ffff8801bdd9f0d8 R08: 000077ff80000000 R09: 0000000000000000
R10: ffffffff7fffffff R11: ffffffff813553c0 R12: 0000160000000000
R13: 00000000004212c0 R14: ffffffff8b589000 R15: ffffffff8b0320b8
 __msan_metadata_ptr_for_load_4+0x10/0x20 mm/kmsan/kmsan_instr.c:320
 static_key_false include/linux/jump_label.h:206 [inline]
 trace_tlb_flush_rcuidle include/trace/events/tlb.h:38 [inline]
 switch_mm_irqs_off+0x856/0x1650 arch/x86/mm/tlb.c:314
 context_switch kernel/sched/core.c:2868 [inline]
 __schedule+0x5bc/0x770 kernel/sched/core.c:3524
 preempt_schedule_common kernel/sched/core.c:3648 [inline]
 _cond_resched+0x5e/0xd0 kernel/sched/core.c:4999
 zap_pmd_range mm/memory.c:1444 [inline]
 zap_pud_range mm/memory.c:1471 [inline]
 zap_p4d_range mm/memory.c:1492 [inline]
 unmap_page_range+0x35e0/0x3be0 mm/memory.c:1513
 unmap_single_vma+0x445/0x5e0 mm/memory.c:1558
 unmap_vmas+0x1f4/0x360 mm/memory.c:1588
 exit_mmap+0x4d7/0x980 mm/mmap.c:3105
 __mmput+0x158/0x600 kernel/fork.c:962
 mmput+0xab/0xf0 kernel/fork.c:983
 exit_mm+0x6ed/0x7a0 kernel/exit.c:545
 do_exit+0xc12/0x3930 kernel/exit.c:854
 do_group_exit+0x1a0/0x360 kernel/exit.c:970
 get_signal+0x1405/0x1ec0 kernel/signal.c:2482
 do_signal+0xb8/0x1d20 arch/x86/kernel/signal.c:810
 exit_to_usermode_loop arch/x86/entry/common.c:162 [inline]
 prepare_exit_to_usermode+0x271/0x3a0 arch/x86/entry/common.c:196
 syscall_return_slowpath+0xe9/0x710 arch/x86/entry/common.c:265
 do_syscall_64+0x1ad/0x230 arch/x86/entry/common.c:290
 entry_SYSCALL_64_after_hwframe+0x44/0xa9
RIP: 0033:0x455a99
RSP: 002b:00007fe54f356ce8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: fffffffffffffe00 RBX: 000000000072bec0 RCX: 0000000000455a99
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000072bec0
RBP: 000000000072bec0 R08: 0000000000000000 R09: 000000000072bea0
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000a3e81f R14: 00007fe54f3579c0 R15: 0000000000000000
Code: 48 8b 14 25 10 60 c3 8a eb 0a 48 ba 00 00 00 80 ff 77 00 00 48 01 c2 48 c1 ea 0c 48 8d 04 52 48 c1 e0 05 48 89 c2 48 01 ca 74 4c <80> 7c 01 50 00 75 74 48 8b 44 01 40 48 85 c0 0f 84 85 00 00 00 
RIP: kmsan_get_shadow_address+0xf6/0x1f0 mm/kmsan/kmsan.c:1374 RSP: ffff8801bdd9ef18
CR2: ffffea000a731b90
---[ end trace 1af4d9a7e3f099b3 ]---