==================================================================
BUG: KASAN: wild-memory-access on address ffe708746f883000
Read of size 20 by task syz-executor1/4902
CPU: 0 PID: 4902 Comm: syz-executor1 Not tainted 4.9.56-g5c73594 #66
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
 ffff8801cb3979e8 ffffffff81d93999 ffe708746f883000 0000000000000014
 0000000000000000 ffff8801c98499c0 ffe708746f883000 ffff8801cb397a70
 ffffffff8153d5cf 0000000000000000 0000000000000001 ffffffff8266527b
Call Trace:
 [<ffffffff81d93999>] __dump_stack lib/dump_stack.c:15 [inline]
 [<ffffffff81d93999>] dump_stack+0xc1/0x128 lib/dump_stack.c:51
 [<ffffffff8153d5cf>] kasan_report_error mm/kasan/report.c:284 [inline]
 [<ffffffff8153d5cf>] kasan_report.part.1+0x40f/0x500 mm/kasan/report.c:309
 [<ffffffff8153d9a0>] kasan_report+0x20/0x30 mm/kasan/report.c:296
 [<ffffffff8153c2e7>] check_memory_region_inline mm/kasan/kasan.c:308 [inline]
 [<ffffffff8153c2e7>] check_memory_region+0x137/0x190 mm/kasan/kasan.c:315
 [<ffffffff8153c351>] kasan_check_read+0x11/0x20 mm/kasan/kasan.c:320
 [<ffffffff8266527b>] __copy_to_user arch/x86/include/asm/uaccess_64.h:182 [inline]
 [<ffffffff8266527b>] sg_read_oxfer drivers/scsi/sg.c:1978 [inline]
 [<ffffffff8266527b>] sg_read+0x124b/0x1400 drivers/scsi/sg.c:520
 [<ffffffff8156bc81>] do_loop_readv_writev.part.17+0x141/0x1e0 fs/read_write.c:714
 [<ffffffff8156fa50>] do_loop_readv_writev fs/read_write.c:880 [inline]
 [<ffffffff8156fa50>] do_readv_writev+0x520/0x750 fs/read_write.c:874
 [<ffffffff8156fd04>] vfs_readv+0x84/0xc0 fs/read_write.c:898
 [<ffffffff8156fe26>] do_readv+0xe6/0x250 fs/read_write.c:924
 [<ffffffff815732a7>] SYSC_readv fs/read_write.c:1011 [inline]
 [<ffffffff815732a7>] SyS_readv+0x27/0x30 fs/read_write.c:1008
 [<ffffffff838ad085>] entry_SYSCALL_64_fastpath+0x23/0xc6
==================================================================
device lo entered promiscuous mode
device lo left promiscuous mode
device lo entered promiscuous mode
device lo left promiscuous mode
SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9472 sclass=netlink_route_socket pig=5208 comm=syz-executor7
SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9472 sclass=netlink_route_socket pig=5258 comm=syz-executor7
IPVS: Creating netns size=2536 id=87
IPVS: Creating netns size=2536 id=88
sock: process `syz-executor0' is using obsolete setsockopt SO_BSDCOMPAT
tmpfs: No value for mount option 'I'
binder: 5407:5408 ioctl 4b60 205baf8c returned -22
binder: 5407:5425 ioctl 89f8 20a5b000 returned -22
binder: 5407:5427 ioctl 4b60 205baf8c returned -22
binder: 5407:5425 ioctl 89f8 20a5b000 returned -22
pktgen: kernel_thread() failed for cpu 0
pktgen: Cannot create thread for cpu 0 (-4)
pktgen: kernel_thread() failed for cpu 1
pktgen: Cannot create thread for cpu 1 (-4)
pktgen: Initialization failed for all threads
pktgen: kernel_thread() failed for cpu 0
pktgen: Cannot create thread for cpu 0 (-4)
pktgen: kernel_thread() failed for cpu 1
pktgen: Cannot create thread for cpu 1 (-4)
pktgen: Initialization failed for all threads
pktgen: kernel_thread() failed for cpu 0
pktgen: Cannot create thread for cpu 0 (-4)
pktgen: kernel_thread() failed for cpu 1
pktgen: Cannot create thread for cpu 1 (-4)
pktgen: Initialization failed for all threads
pktgen: kernel_thread() failed for cpu 0
pktgen: Cannot create thread for cpu 0 (-4)
pktgen: kernel_thread() failed for cpu 1
pktgen: Cannot create thread for cpu 1 (-4)
pktgen: Initialization failed for all threads
device gre0 entered promiscuous mode
pktgen: kernel_thread() failed for cpu 1
pktgen: Cannot create thread for cpu 1 (-4)
IPVS: Creating netns size=2536 id=89
pktgen: kernel_thread() failed for cpu 0
pktgen: Cannot create thread for cpu 0 (-4)
pktgen: kernel_thread() failed for cpu 1
pktgen: Cannot create thread for cpu 1 (-4)
pktgen: Initialization failed for all threads
device lo entered promiscuous mode
FAULT_FLAG_ALLOW_RETRY missing 30
CPU: 1 PID: 5647 Comm: syz-executor3 Tainted: G    B           4.9.56-g5c73594 #66
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
 ffff8801c76a7470 ffffffff81d93999 ffff8801c76a7750 0000000000000000
 ffff8801d4df4890 ffff8801c76a7640 ffff8801d4df4780 ffff8801c76a7668
 ffffffff816613a8 ffff8801c76a75c0 0000000000000000 00000001a9d33067
Call Trace:
 [<ffffffff81d93999>] __dump_stack lib/dump_stack.c:15 [inline]
 [<ffffffff81d93999>] dump_stack+0xc1/0x128 lib/dump_stack.c:51
 [<ffffffff816613a8>] handle_userfault+0xa48/0x1300 fs/userfaultfd.c:323
 [<ffffffff814d02b1>] do_anonymous_page mm/memory.c:2747 [inline]
 [<ffffffff814d02b1>] handle_pte_fault mm/memory.c:3488 [inline]
 [<ffffffff814d02b1>] __handle_mm_fault mm/memory.c:3577 [inline]
 [<ffffffff814d02b1>] handle_mm_fault+0x1fd1/0x2530 mm/memory.c:3614
 [<ffffffff810e0437>] __do_page_fault+0x5b7/0xd70 arch/x86/mm/fault.c:1397
 [<ffffffff810e0c17>] do_page_fault+0x27/0x30 arch/x86/mm/fault.c:1461
 [<ffffffff838ae258>] page_fault+0x28/0x30 arch/x86/entry/entry_64.S:1012
 [<ffffffff8320c3b7>] do_ip_setsockopt.isra.11+0x1977/0x2960 net/ipv4/ip_sockglue.c:1146
 [<ffffffff8320d3da>] ip_setsockopt+0x3a/0xb0 net/ipv4/ip_sockglue.c:1235
 [<ffffffff8322d0c2>] tcp_setsockopt+0x82/0xd0 net/ipv4/tcp.c:2705
 [<ffffffff82ed8245>] sock_common_setsockopt+0x95/0xd0 net/core/sock.c:2707
 [<ffffffff82ed51e0>] SYSC_setsockopt net/socket.c:1771 [inline]
 [<ffffffff82ed51e0>] SyS_setsockopt+0x160/0x250 net/socket.c:1750
 [<ffffffff838ad085>] entry_SYSCALL_64_fastpath+0x23/0xc6
binder: 5675:5676 ioctl 540f 20e75000 returned -22
binder: binder_mmap: 5685 2007d000-2007e000 bad vm_flags failed -1
FAULT_FLAG_ALLOW_RETRY missing 30
FAULT_FLAG_ALLOW_RETRY missing 30
CPU: 0 PID: 5637 Comm: syz-executor3 Tainted: G    B           4.9.56-g5c73594 #66
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
 ffff8801ce6ff930 ffffffff81d93999 ffff8801ce6ffc10 0000000000000000
 ffff8801d4df4d10 ffff8801ce6ffb00 ffff8801d4df4c00 ffff8801ce6ffb28
 ffffffff816613a8 ffff8801ce6ffa80 ffffffff84185bfc 00000001a9d33067
Call Trace:
 [<ffffffff81d93999>] __dump_stack lib/dump_stack.c:15 [inline]
 [<ffffffff81d93999>] dump_stack+0xc1/0x128 lib/dump_stack.c:51
 [<ffffffff816613a8>] handle_userfault+0xa48/0x1300 fs/userfaultfd.c:323
 [<ffffffff814d02b1>] do_anonymous_page mm/memory.c:2747 [inline]
 [<ffffffff814d02b1>] handle_pte_fault mm/memory.c:3488 [inline]
 [<ffffffff814d02b1>] __handle_mm_fault mm/memory.c:3577 [inline]
 [<ffffffff814d02b1>] handle_mm_fault+0x1fd1/0x2530 mm/memory.c:3614
 [<ffffffff810e0437>] __do_page_fault+0x5b7/0xd70 arch/x86/mm/fault.c:1397
 [<ffffffff810e0c17>] do_page_fault+0x27/0x30 arch/x86/mm/fault.c:1461
 [<ffffffff838ae258>] page_fault+0x28/0x30 arch/x86/entry/entry_64.S:1012
 [<ffffffff838ad085>] entry_SYSCALL_64_fastpath+0x23/0xc6
binder: 5675:5689 ioctl 540f 20e75000 returned -22
binder: binder_mmap: 5685 2007d000-2007e000 bad vm_flags failed -1
device lo left promiscuous mode
CPU: 0 PID: 5647 Comm: syz-executor3 Tainted: G    B           4.9.56-g5c73594 #66
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
 ffff8801c76a7470 ffffffff81d93999 ffff8801c76a7750 0000000000000000
 ffff8801d4df4d10 ffff8801c76a7640 ffff8801d4df4c00 ffff8801c76a7668
 ffffffff816613a8 ffff8801c76a75c0 000000000000024d 00000001a9d33067
Call Trace:
 [<ffffffff81d93999>] __dump_stack lib/dump_stack.c:15 [inline]
 [<ffffffff81d93999>] dump_stack+0xc1/0x128 lib/dump_stack.c:51
 [<ffffffff816613a8>] handle_userfault+0xa48/0x1300 fs/userfaultfd.c:323
 [<ffffffff814d02b1>] do_anonymous_page mm/memory.c:2747 [inline]
 [<ffffffff814d02b1>] handle_pte_fault mm/memory.c:3488 [inline]
 [<ffffffff814d02b1>] __handle_mm_fault mm/memory.c:3577 [inline]
 [<ffffffff814d02b1>] handle_mm_fault+0x1fd1/0x2530 mm/memory.c:3614
 [<ffffffff810e0437>] __do_page_fault+0x5b7/0xd70 arch/x86/mm/fault.c:1397
 [<ffffffff810e0c17>] do_page_fault+0x27/0x30 arch/x86/mm/fault.c:1461
 [<ffffffff838ae258>] page_fault+0x28/0x30 arch/x86/entry/entry_64.S:1012
 [<ffffffff8320c3b7>] do_ip_setsockopt.isra.11+0x1977/0x2960 net/ipv4/ip_sockglue.c:1146
 [<ffffffff8320d3da>] ip_setsockopt+0x3a/0xb0 net/ipv4/ip_sockglue.c:1235
 [<ffffffff8322d0c2>] tcp_setsockopt+0x82/0xd0 net/ipv4/tcp.c:2705
 [<ffffffff82ed8245>] sock_common_setsockopt+0x95/0xd0 net/core/sock.c:2707
 [<ffffffff82ed51e0>] SYSC_setsockopt net/socket.c:1771 [inline]
 [<ffffffff82ed51e0>] SyS_setsockopt+0x160/0x250 net/socket.c:1750
 [<ffffffff838ad085>] entry_SYSCALL_64_fastpath+0x23/0xc6
FAULT_FLAG_ALLOW_RETRY missing 30
FAULT_FLAG_ALLOW_RETRY missing 30
CPU: 0 PID: 5734 Comm: syz-executor3 Tainted: G    B           4.9.56-g5c73594 #66
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
 ffff8801ce6ff930 ffffffff81d93999 ffff8801ce6ffc10 0000000000000000
 ffff8801d4df4e90 ffff8801ce6ffb00 ffff8801d4df4d80 ffff8801ce6ffb28
 ffffffff816613a8 ffff8801ce6ffa80 ffffffff84185bfc 00000001ca0a4067
Call Trace:
 [<ffffffff81d93999>] __dump_stack lib/dump_stack.c:15 [inline]
 [<ffffffff81d93999>] dump_stack+0xc1/0x128 lib/dump_stack.c:51
 [<ffffffff816613a8>] handle_userfault+0xa48/0x1300 fs/userfaultfd.c:323
 [<ffffffff814d02b1>] do_anonymous_page mm/memory.c:2747 [inline]
 [<ffffffff814d02b1>] handle_pte_fault mm/memory.c:3488 [inline]
 [<ffffffff814d02b1>] __handle_mm_fault mm/memory.c:3577 [inline]
 [<ffffffff814d02b1>] handle_mm_fault+0x1fd1/0x2530 mm/memory.c:3614
 [<ffffffff810e0437>] __do_page_fault+0x5b7/0xd70 arch/x86/mm/fault.c:1397
 [<ffffffff810e0c17>] do_page_fault+0x27/0x30 arch/x86/mm/fault.c:1461
 [<ffffffff838ae258>] page_fault+0x28/0x30 arch/x86/entry/entry_64.S:1012
 [<ffffffff838ad085>] entry_SYSCALL_64_fastpath+0x23/0xc6
binder: 5789:5791 ioctl c0206416 20ff9000 returned -22
CPU: 0 PID: 5736 Comm: syz-executor3 Tainted: G    B           4.9.56-g5c73594 #66
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
 ffff8801c611f470 ffffffff81d93999 ffff8801c611f750 0000000000000000
 ffff8801d4df4e90 ffff8801c611f640 ffff8801d4df4d80 ffff8801c611f668
 ffffffff816613a8 ffff8801c611f5c0 000000000000024d 00000001ca0a4067
binder: 5789:5801 ioctl c0206416 20ff9000 returned -22
Call Trace:
 [<ffffffff81d93999>] __dump_stack lib/dump_stack.c:15 [inline]
 [<ffffffff81d93999>] dump_stack+0xc1/0x128 lib/dump_stack.c:51
 [<ffffffff816613a8>] handle_userfault+0xa48/0x1300 fs/userfaultfd.c:323
 [<ffffffff814d02b1>] do_anonymous_page mm/memory.c:2747 [inline]
 [<ffffffff814d02b1>] handle_pte_fault mm/memory.c:3488 [inline]
 [<ffffffff814d02b1>] __handle_mm_fault mm/memory.c:3577 [inline]
 [<ffffffff814d02b1>] handle_mm_fault+0x1fd1/0x2530 mm/memory.c:3614
 [<ffffffff810e0437>] __do_page_fault+0x5b7/0xd70 arch/x86/mm/fault.c:1397
 [<ffffffff810e0c17>] do_page_fault+0x27/0x30 arch/x86/mm/fault.c:1461
 [<ffffffff838ae258>] page_fault+0x28/0x30 arch/x86/entry/entry_64.S:1012
 [<ffffffff8320c3b7>] do_ip_setsockopt.isra.11+0x1977/0x2960 net/ipv4/ip_sockglue.c:1146
 [<ffffffff8320d3da>] ip_setsockopt+0x3a/0xb0 net/ipv4/ip_sockglue.c:1235
 [<ffffffff8322d0c2>] tcp_setsockopt+0x82/0xd0 net/ipv4/tcp.c:2705
 [<ffffffff82ed8245>] sock_common_setsockopt+0x95/0xd0 net/core/sock.c:2707
 [<ffffffff82ed51e0>] SYSC_setsockopt net/socket.c:1771 [inline]
 [<ffffffff82ed51e0>] SyS_setsockopt+0x160/0x250 net/socket.c:1750
 [<ffffffff838ad085>] entry_SYSCALL_64_fastpath+0x23/0xc6
FAULT_FLAG_ALLOW_RETRY missing 30
FAULT_FLAG_ALLOW_RETRY missing 30
CPU: 1 PID: 5818 Comm: syz-executor3 Tainted: G    B           4.9.56-g5c73594 #66
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
 ffff8801ce6ff930 ffffffff81d93999 ffff8801ce6ffc10 0000000000000000
 ffff8801d4df5010 ffff8801ce6ffb00 ffff8801d4df4f00 ffff8801ce6ffb28
 ffffffff816613a8 ffff8801ce6ffa80 ffffffff84185bfc 00000001c480c067
Call Trace:
 [<ffffffff81d93999>] __dump_stack lib/dump_stack.c:15 [inline]
 [<ffffffff81d93999>] dump_stack+0xc1/0x128 lib/dump_stack.c:51
 [<ffffffff816613a8>] handle_userfault+0xa48/0x1300 fs/userfaultfd.c:323
 [<ffffffff814d02b1>] do_anonymous_page mm/memory.c:2747 [inline]
 [<ffffffff814d02b1>] handle_pte_fault mm/memory.c:3488 [inline]
 [<ffffffff814d02b1>] __handle_mm_fault mm/memory.c:3577 [inline]
 [<ffffffff814d02b1>] handle_mm_fault+0x1fd1/0x2530 mm/memory.c:3614
 [<ffffffff810e0437>] __do_page_fault+0x5b7/0xd70 arch/x86/mm/fault.c:1397
 [<ffffffff810e0c17>] do_page_fault+0x27/0x30 arch/x86/mm/fault.c:1461
 [<ffffffff838ae258>] page_fault+0x28/0x30 arch/x86/entry/entry_64.S:1012
 [<ffffffff838ad085>] entry_SYSCALL_64_fastpath+0x23/0xc6
CPU: 0 PID: 5820 Comm: syz-executor3 Tainted: G    B           4.9.56-g5c73594 #66
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
 ffff8801a6ee7470 ffffffff81d93999 ffff8801a6ee7750 0000000000000000
 ffff8801d4df5010 ffff8801a6ee7640 ffff8801d4df4f00 ffff8801a6ee7668
 ffffffff816613a8 ffff8801a6ee75c0 000000000000024d 00000001c480c067
Call Trace:
 [<ffffffff81d93999>] __dump_stack lib/dump_stack.c:15 [inline]
 [<ffffffff81d93999>] dump_stack+0xc1/0x128 lib/dump_stack.c:51
 [<ffffffff816613a8>] handle_userfault+0xa48/0x1300 fs/userfaultfd.c:323
 [<ffffffff814d02b1>] do_anonymous_page mm/memory.c:2747 [inline]
 [<ffffffff814d02b1>] handle_pte_fault mm/memory.c:3488 [inline]
 [<ffffffff814d02b1>] __handle_mm_fault mm/memory.c:3577 [inline]
 [<ffffffff814d02b1>] handle_mm_fault+0x1fd1/0x2530 mm/memory.c:3614
 [<ffffffff810e0437>] __do_page_fault+0x5b7/0xd70 arch/x86/mm/fault.c:1397
 [<ffffffff810e0c17>] do_page_fault+0x27/0x30 arch/x86/mm/fault.c:1461
 [<ffffffff838ae258>] page_fault+0x28/0x30 arch/x86/entry/entry_64.S:1012
 [<ffffffff8320c3b7>] do_ip_setsockopt.isra.11+0x1977/0x2960 net/ipv4/ip_sockglue.c:1146
 [<ffffffff8320d3da>] ip_setsockopt+0x3a/0xb0 net/ipv4/ip_sockglue.c:1235
 [<ffffffff8322d0c2>] tcp_setsockopt+0x82/0xd0 net/ipv4/tcp.c:2705
 [<ffffffff82ed8245>] sock_common_setsockopt+0x95/0xd0 net/core/sock.c:2707
 [<ffffffff82ed51e0>] SYSC_setsockopt net/socket.c:1771 [inline]
 [<ffffffff82ed51e0>] SyS_setsockopt+0x160/0x250 net/socket.c:1750
nla_parse: 8 callbacks suppressed
netlink: 6 bytes leftover after parsing attributes in process `syz-executor1'.
 [<ffffffff838ad085>] entry_SYSCALL_64_fastpath+0x23/0xc6
netlink: 6 bytes leftover after parsing attributes in process `syz-executor1'.
FAULT_FLAG_ALLOW_RETRY missing 30
CPU: 0 PID: 5820 Comm: syz-executor3 Tainted: G    B           4.9.56-g5c73594 #66
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
 ffff8801a6ee7470 ffffffff81d93999 ffff8801a6ee7750 0000000000000000
 ffff8801ac86fa90 ffff8801a6ee7640 ffff8801ac86f980 ffff8801a6ee7668
 ffffffff816613a8 ffff8801a6ee75c0 000000000000024d 00000001c480c067
Call Trace:
 [<ffffffff81d93999>] __dump_stack lib/dump_stack.c:15 [inline]
 [<ffffffff81d93999>] dump_stack+0xc1/0x128 lib/dump_stack.c:51
 [<ffffffff816613a8>] handle_userfault+0xa48/0x1300 fs/userfaultfd.c:323
 [<ffffffff814d02b1>] do_anonymous_page mm/memory.c:2747 [inline]
 [<ffffffff814d02b1>] handle_pte_fault mm/memory.c:3488 [inline]
 [<ffffffff814d02b1>] __handle_mm_fault mm/memory.c:3577 [inline]
 [<ffffffff814d02b1>] handle_mm_fault+0x1fd1/0x2530 mm/memory.c:3614
 [<ffffffff810e0437>] __do_page_fault+0x5b7/0xd70 arch/x86/mm/fault.c:1397
 [<ffffffff810e0c17>] do_page_fault+0x27/0x30 arch/x86/mm/fault.c:1461
 [<ffffffff838ae258>] page_fault+0x28/0x30 arch/x86/entry/entry_64.S:1012
 [<ffffffff8320c3b7>] do_ip_setsockopt.isra.11+0x1977/0x2960 net/ipv4/ip_sockglue.c:1146
 [<ffffffff8320d3da>] ip_setsockopt+0x3a/0xb0 net/ipv4/ip_sockglue.c:1235
 [<ffffffff8322d0c2>] tcp_setsockopt+0x82/0xd0 net/ipv4/tcp.c:2705
 [<ffffffff82ed8245>] sock_common_setsockopt+0x95/0xd0 net/core/sock.c:2707
 [<ffffffff82ed51e0>] SYSC_setsockopt net/socket.c:1771 [inline]
 [<ffffffff82ed51e0>] SyS_setsockopt+0x160/0x250 net/socket.c:1750
 [<ffffffff838ad085>] entry_SYSCALL_64_fastpath+0x23/0xc6
FAULT_FLAG_ALLOW_RETRY missing 30
CPU: 1 PID: 5818 Comm: syz-executor3 Tainted: G    B           4.9.56-g5c73594 #66
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
 ffff8801ce6ff930 ffffffff81d93999 ffff8801ce6ffc10 0000000000000000
 ffff8801ac86fa90 ffff8801ce6ffb00 ffff8801ac86f980 ffff8801ce6ffb28
 ffffffff816613a8 ffff8801cc0f4800 0000000000000000 0000000000000000
Call Trace:
 [<ffffffff81d93999>] __dump_stack lib/dump_stack.c:15 [inline]
 [<ffffffff81d93999>] dump_stack+0xc1/0x128 lib/dump_stack.c:51
 [<ffffffff816613a8>] handle_userfault+0xa48/0x1300 fs/userfaultfd.c:323
 [<ffffffff814d02b1>] do_anonymous_page mm/memory.c:2747 [inline]
 [<ffffffff814d02b1>] handle_pte_fault mm/memory.c:3488 [inline]
 [<ffffffff814d02b1>] __handle_mm_fault mm/memory.c:3577 [inline]
 [<ffffffff814d02b1>] handle_mm_fault+0x1fd1/0x2530 mm/memory.c:3614
 [<ffffffff810e0437>] __do_page_fault+0x5b7/0xd70 arch/x86/mm/fault.c:1397
 [<ffffffff810e0c17>] do_page_fault+0x27/0x30 arch/x86/mm/fault.c:1461
 [<ffffffff838ae258>] page_fault+0x28/0x30 arch/x86/entry/entry_64.S:1012
 [<ffffffff838ad085>] entry_SYSCALL_64_fastpath+0x23/0xc6
binder: 5987:5989 ioctl 8018456f 2090e000 returned -22
IPVS: Creating netns size=2536 id=90
IPVS: Creating netns size=2536 id=91
binder: 5987:6008 ioctl 8018456f 2090e000 returned -22
binder: 6018:6023 ioctl 540f 2000a000 returned -22
binder: 6018:6041 ioctl 540f 2000a000 returned -22
binder: 6057:6058 ioctl 4b6a 20df7fb3 returned -22
binder: 6057:6062 ioctl 4b6a 20df7fb3 returned -22
binder: 6069:6070 ioctl 40044591 20776000 returned -22
binder: 6069:6070 ioctl 40044591 20776000 returned -22
binder: 6085:6086 ioctl 4b3b 81 returned -22
binder: 6085:6087 ioctl 4b3b 81 returned -22
binder: 6092:6093 ioctl 4b3b 81 returned -22
binder: 6092:6097 ioctl 4b3b 81 returned -22
binder: 6141:6148 ioctl 4b3b 81 returned -22
binder: 6141:6166 ioctl 4b3b 81 returned -22
binder: 6183:6187 ioctl 80084503 20000f2e returned -22
binder: 6183:6187 ioctl 80084503 20000f2e returned -22
keychord: using input dev AT Translated Set 2 keyboard for fevent
keychord: invalid keycode count 0
keychord: Insufficient bytes present for keycount 18
keychord: using input dev AT Translated Set 2 keyboard for fevent
keychord: invalid keycode count 0
keychord: Insufficient bytes present for keycount 18
device gre0 entered promiscuous mode
SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1794 sclass=netlink_audit_socket pig=6258 comm=syz-executor3
SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1794 sclass=netlink_audit_socket pig=6258 comm=syz-executor3
netlink: 3 bytes leftover after parsing attributes in process `syz-executor5'.
netlink: 3 bytes leftover after parsing attributes in process `syz-executor5'.
binder: 6372:6375 ioctl 4b6a 20df7fb3 returned -22
binder: 6372:6378 ioctl 4b6a 20df7fb3 returned -22
Tx-ring is not supported.
Tx-ring is not supported.
FAULT_FLAG_ALLOW_RETRY missing 30
CPU: 1 PID: 6567 Comm: syz-executor6 Tainted: G    B           4.9.56-g5c73594 #66
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
 ffff8801c72ef870 ffffffff81d93999 ffff8801c72efb50 0000000000000000
 ffff8801d65d0e90 ffff8801c72efa40 ffff8801d65d0d80 ffff8801c72efa68
 ffffffff816613a8 ffff8801c72ef9c0 ffffffff8389b933 00000001ca450067
Call Trace:
 [<ffffffff81d93999>] __dump_stack lib/dump_stack.c:15 [inline]
 [<ffffffff81d93999>] dump_stack+0xc1/0x128 lib/dump_stack.c:51
 [<ffffffff816613a8>] handle_userfault+0xa48/0x1300 fs/userfaultfd.c:323
 [<ffffffff814d02b1>] do_anonymous_page mm/memory.c:2747 [inline]
 [<ffffffff814d02b1>] handle_pte_fault mm/memory.c:3488 [inline]
 [<ffffffff814d02b1>] __handle_mm_fault mm/memory.c:3577 [inline]
 [<ffffffff814d02b1>] handle_mm_fault+0x1fd1/0x2530 mm/memory.c:3614
 [<ffffffff810e0437>] __do_page_fault+0x5b7/0xd70 arch/x86/mm/fault.c:1397
 [<ffffffff810e0c17>] do_page_fault+0x27/0x30 arch/x86/mm/fault.c:1461
 [<ffffffff838ae258>] page_fault+0x28/0x30 arch/x86/entry/entry_64.S:1012
 [<ffffffff81bad196>] SYSC_mq_timedsend ipc/mqueue.c:973 [inline]
 [<ffffffff81bad196>] SyS_mq_timedsend+0xe6/0xa80 ipc/mqueue.c:956
 [<ffffffff838ad085>] entry_SYSCALL_64_fastpath+0x23/0xc6
netlink: 5 bytes leftover after parsing attributes in process `syz-executor2'.
netlink: 202 bytes leftover after parsing attributes in process `syz-executor4'.
netlink: 202 bytes leftover after parsing attributes in process `syz-executor4'.
netlink: 5 bytes leftover after parsing attributes in process `syz-executor2'.
binder: 6650:6653 ioctl 4b3b 81 returned -22
binder: 6650:6662 ioctl 4b3b 81 returned -22
binder: 6709:6712 ioctl 541c 209c8000 returned -22
netlink: 16 bytes leftover after parsing attributes in process `syz-executor0'.
handle_userfault: 1 callbacks suppressed
FAULT_FLAG_ALLOW_RETRY missing 30
FAULT_FLAG_ALLOW_RETRY missing 30
CPU: 0 PID: 6708 Comm: syz-executor6 Tainted: G    B           4.9.56-g5c73594 #66
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
 ffff8801ccaa7970 ffffffff81d93999 ffff8801ccaa7c50 0000000000000000
 ffff8801d65d0410 ffff8801ccaa7b40 ffff8801d65d0300 ffff8801ccaa7b68
 ffffffff816613a8 ffff8801ccaa7ac0 ffff8801d1ed87f8 00000001a5770067
Call Trace:
 [<ffffffff81d93999>] __dump_stack lib/dump_stack.c:15 [inline]
 [<ffffffff81d93999>] dump_stack+0xc1/0x128 lib/dump_stack.c:51
 [<ffffffff816613a8>] handle_userfault+0xa48/0x1300 fs/userfaultfd.c:323
 [<ffffffff814d02b1>] do_anonymous_page mm/memory.c:2747 [inline]
 [<ffffffff814d02b1>] handle_pte_fault mm/memory.c:3488 [inline]
 [<ffffffff814d02b1>] __handle_mm_fault mm/memory.c:3577 [inline]
 [<ffffffff814d02b1>] handle_mm_fault+0x1fd1/0x2530 mm/memory.c:3614
 [<ffffffff810e0437>] __do_page_fault+0x5b7/0xd70 arch/x86/mm/fault.c:1397
 [<ffffffff810e0c17>] do_page_fault+0x27/0x30 arch/x86/mm/fault.c:1461
 [<ffffffff838ae258>] page_fault+0x28/0x30 arch/x86/entry/entry_64.S:1012
 [<ffffffff838ad085>] entry_SYSCALL_64_fastpath+0x23/0xc6
binder: 6709:6739 ioctl 541c 209c8000 returned -22
netlink: 16 bytes leftover after parsing attributes in process `syz-executor0'.
binder: 6760:6761 ioctl c0286404 20c0dfd8 returned -22
binder: 6760:6761 ioctl c0286404 20c0dfd8 returned -22
sock: process `syz-executor3' is using obsolete setsockopt SO_BSDCOMPAT
CPU: 0 PID: 6717 Comm: syz-executor6 Tainted: G    B           4.9.56-g5c73594 #66
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
 ffff8801a75378b0 ffffffff81d93999 ffff8801a7537b90 0000000000000000
 ffff8801d65d0410 ffff8801a7537a80 ffff8801d65d0300 ffff8801a7537aa8
 ffffffff816613a8 ffff8801a7537a00 0000000000000038 00000001a5770067
Call Trace:
 [<ffffffff81d93999>] __dump_stack lib/dump_stack.c:15 [inline]
 [<ffffffff81d93999>] dump_stack+0xc1/0x128 lib/dump_stack.c:51
 [<ffffffff816613a8>] handle_userfault+0xa48/0x1300 fs/userfaultfd.c:323
 [<ffffffff814d02b1>] do_anonymous_page mm/memory.c:2747 [inline]
 [<ffffffff814d02b1>] handle_pte_fault mm/memory.c:3488 [inline]
 [<ffffffff814d02b1>] __handle_mm_fault mm/memory.c:3577 [inline]
 [<ffffffff814d02b1>] handle_mm_fault+0x1fd1/0x2530 mm/memory.c:3614
 [<ffffffff810e0437>] __do_page_fault+0x5b7/0xd70 arch/x86/mm/fault.c:1397
 [<ffffffff810e0c17>] do_page_fault+0x27/0x30 arch/x86/mm/fault.c:1461
 [<ffffffff838ae258>] page_fault+0x28/0x30 arch/x86/entry/entry_64.S:1012
 [<ffffffff81baf4f4>] SyS_mq_getsetattr+0x24/0x30 ipc/mqueue.c:1321
 [<ffffffff838ad085>] entry_SYSCALL_64_fastpath+0x23/0xc6
FAULT_FLAG_ALLOW_RETRY missing 30
FAULT_FLAG_ALLOW_RETRY missing 30
CPU: 0 PID: 6822 Comm: syz-executor2 Tainted: G    B           4.9.56-g5c73594 #66
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
 ffff8801a84b7980 ffffffff81d93999 ffff8801a84b7c60 0000000000000000
 ffff8801d65d0b90 ffff8801a84b7b50 ffff8801d65d0a80 ffff8801a84b7b78
 ffffffff816613a8 ffff8801a84b7ad0 e5534549fd454fd2 00000001a84db067
Call Trace:
 [<ffffffff81d93999>] __dump_stack lib/dump_stack.c:15 [inline]
 [<ffffffff81d93999>] dump_stack+0xc1/0x128 lib/dump_stack.c:51
 [<ffffffff816613a8>] handle_userfault+0xa48/0x1300 fs/userfaultfd.c:323
 [<ffffffff814d02b1>] do_anonymous_page mm/memory.c:2747 [inline]
 [<ffffffff814d02b1>] handle_pte_fault mm/memory.c:3488 [inline]
 [<ffffffff814d02b1>] __handle_mm_fault mm/memory.c:3577 [inline]
 [<ffffffff814d02b1>] handle_mm_fault+0x1fd1/0x2530 mm/memory.c:3614
 [<ffffffff810e0437>] __do_page_fault+0x5b7/0xd70 arch/x86/mm/fault.c:1397
 [<ffffffff810e0c17>] do_page_fault+0x27/0x30 arch/x86/mm/fault.c:1461
 [<ffffffff838ae258>] page_fault+0x28/0x30 arch/x86/entry/entry_64.S:1012
 [<ffffffff811d462d>] SYSC_sched_setscheduler kernel/sched/core.c:4648 [inline]
 [<ffffffff811d462d>] SyS_sched_setscheduler+0xd/0x20 kernel/sched/core.c:4641
 [<ffffffff838ad085>] entry_SYSCALL_64_fastpath+0x23/0xc6
IPVS: Creating netns size=2536 id=92
CPU: 1 PID: 6830 Comm: syz-executor2 Tainted: G    B           4.9.56-g5c73594 #66
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
 ffff8801d57ef8b0 ffffffff81d93999 ffff8801d57efb90 0000000000000000
 ffff8801d65d0b90 ffff8801d57efa80 ffff8801d65d0a80 ffff8801d57efaa8
 ffffffff816613a8 ffff8801d57efa00 0000000000000000 00000001a84db067
Call Trace:
 [<ffffffff81d93999>] __dump_stack lib/dump_stack.c:15 [inline]
 [<ffffffff81d93999>] dump_stack+0xc1/0x128 lib/dump_stack.c:51
 [<ffffffff816613a8>] handle_userfault+0xa48/0x1300 fs/userfaultfd.c:323
 [<ffffffff814d02b1>] do_anonymous_page mm/memory.c:2747 [inline]
 [<ffffffff814d02b1>] handle_pte_fault mm/memory.c:3488 [inline]
 [<ffffffff814d02b1>] __handle_mm_fault mm/memory.c:3577 [inline]
 [<ffffffff814d02b1>] handle_mm_fault+0x1fd1/0x2530 mm/memory.c:3614
 [<ffffffff810e0437>] __do_page_fault+0x5b7/0xd70 arch/x86/mm/fault.c:1397
 [<ffffffff810e0c17>] do_page_fault+0x27/0x30 arch/x86/mm/fault.c:1461
 [<ffffffff838ae258>] page_fault+0x28/0x30 arch/x86/entry/entry_64.S:1012
 [<ffffffff838ad085>] entry_SYSCALL_64_fastpath+0x23/0xc6