QAT: Invalid ioctl
kasan: CONFIG_KASAN_INLINE enabled
netlink: 'syz-executor0': attribute type 10 has an invalid length.
kasan: GPF could be caused by NULL-ptr deref or user memory access
QAT: Invalid ioctl
general protection fault: 0000 [#1] PREEMPT SMP KASAN
CPU: 0 PID: 19909 Comm: syz-executor4 Not tainted 4.20.0 #290
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:keyctl_pkey_params_parse security/keys/keyctl_pkey.c:56 [inline]
RIP: 0010:keyctl_pkey_params_get+0x2e7/0x560 security/keys/keyctl_pkey.c:96
Code: fe 48 8b 44 24 38 48 c1 e8 03 42 80 3c 28 00 0f 85 f8 01 00 00 4c 8b a4 24 e0 00 00 00 4c 89 e0 4c 89 e2 48 c1 e8 03 83 e2 07 <42> 0f b6 04 28 38 d0 7f 08 84 c0 0f 85 e1 01 00 00 41 0f b6 04 24
RSP: 0018:ffff888189107a40 EFLAGS: 00010206
RAX: 0000000000000000 RBX: ffff888189107d08 RCX: ffffc9000de55000
RDX: 0000000000000005 RSI: ffffffff833f0cbe RDI: 0000000000000001
RBP: ffff888189107ba8 R08: ffff8881c0bec6c0 R09: ffffed103a476968
R10: ffffed103a476968 R11: ffff8881d23b4b47 R12: 0000000000000005
R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000
FS:  0000000000000000(0000) GS:ffff8881dae00000(0063) knlGS:00000000f5f1db40
CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
CR2: 00007fc136ac0518 CR3: 00000001b4d56000 CR4: 00000000001406f0
DR0: 0000000020000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
Call Trace:
 keyctl_pkey_params_get_2+0x12f/0x580 security/keys/keyctl_pkey.c:130
 keyctl_pkey_e_d_s+0xb0/0x4f0 security/keys/keyctl_pkey.c:218
 __do_compat_sys_keyctl security/keys/compat.c:154 [inline]
 __se_compat_sys_keyctl security/keys/compat.c:59 [inline]
 __ia32_compat_sys_keyctl+0x13d/0x430 security/keys/compat.c:59
 do_syscall_32_irqs_on arch/x86/entry/common.c:326 [inline]
 do_fast_syscall_32+0x34d/0xfb2 arch/x86/entry/common.c:397
 entry_SYSENTER_compat+0x70/0x7f arch/x86/entry/entry_64_compat.S:139
RIP: 0023:0xf7f21a49
Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
RSP: 002b:00000000f5f1d0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000120
RAX: ffffffffffffffda RBX: 000000000000001b RCX: 0000000020352b6c
RDX: 0000000020000a40 RSI: 0000000020000a80 RDI: 0000000000000000
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
Modules linked in:
kobject: 'loop0' (00000000df2c1c26): kobject_uevent_env
kobject: 'loop0' (00000000df2c1c26): fill_kobj_path: path = '/devices/virtual/block/loop0'
kobject: 'vti0' (000000002694f2df): kobject_add_internal: parent: 'net', set: 'devices'
kobject: 'loop2' (00000000aa59dfc2): kobject_uevent_env
kobject: 'vti0' (000000002694f2df): kobject_uevent_env
kobject: 'vti0' (000000002694f2df): fill_kobj_path: path = '/devices/virtual/net/vti0'
kobject: 'loop2' (00000000aa59dfc2): fill_kobj_path: path = '/devices/virtual/block/loop2'
binder_alloc: 19918: binder_alloc_buf failed to map page at 20002000 in userspace
kobject: 'queues' (0000000053d46029): kobject_add_internal: parent: 'vti0', set: '<NULL>'
---[ end trace 0e6b5b95ffc3d4e7 ]---
RIP: 0010:keyctl_pkey_params_parse security/keys/keyctl_pkey.c:56 [inline]
RIP: 0010:keyctl_pkey_params_get+0x2e7/0x560 security/keys/keyctl_pkey.c:96
Code: fe 48 8b 44 24 38 48 c1 e8 03 42 80 3c 28 00 0f 85 f8 01 00 00 4c 8b a4 24 e0 00 00 00 4c 89 e0 4c 89 e2 48 c1 e8 03 83 e2 07 <42> 0f b6 04 28 38 d0 7f 08 84 c0 0f 85 e1 01 00 00 41 0f b6 04 24
kobject: 'queues' (0000000053d46029): kobject_uevent_env
RSP: 0018:ffff888189107a40 EFLAGS: 00010206
kobject: 'queues' (0000000053d46029): kobject_uevent_env: filter function caused the event to drop!
RAX: 0000000000000000 RBX: ffff888189107d08 RCX: ffffc9000de55000
kobject: 'loop1' (000000003c66f04c): kobject_uevent_env
kobject: 'rx-0' (000000005201689d): kobject_add_internal: parent: 'queues', set: 'queues'
kobject: 'loop1' (000000003c66f04c): fill_kobj_path: path = '/devices/virtual/block/loop1'
kobject: 'rx-0' (000000005201689d): kobject_uevent_env
RDX: 0000000000000005 RSI: ffffffff833f0cbe RDI: 0000000000000001
kobject: 'rx-0' (000000005201689d): fill_kobj_path: path = '/devices/virtual/net/vti0/queues/rx-0'
kobject: 'tx-0' (000000000d675a81): kobject_add_internal: parent: 'queues', set: 'queues'
RBP: ffff888189107ba8 R08: ffff8881c0bec6c0 R09: ffffed103a476968
kobject: 'tx-0' (000000000d675a81): kobject_uevent_env
kobject: 'loop5' (00000000fdb88efa): kobject_uevent_env
kobject: 'tx-0' (000000000d675a81): fill_kobj_path: path = '/devices/virtual/net/vti0/queues/tx-0'
kobject: 'loop5' (00000000fdb88efa): fill_kobj_path: path = '/devices/virtual/block/loop5'
R10: ffffed103a476968 R11: ffff8881d23b4b47 R12: 0000000000000005
binder_alloc: 19927: binder_alloc_buf failed to map page at 20002000 in userspace
R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000
FS:  0000000000000000(0000) GS:ffff8881daf00000(0063) knlGS:00000000f5f1db40
kobject: 'loop2' (00000000aa59dfc2): kobject_uevent_env
kobject: 'rx-0' (000000005201689d): kobject_cleanup, parent 0000000053d46029
kobject: 'loop2' (00000000aa59dfc2): fill_kobj_path: path = '/devices/virtual/block/loop2'
CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
kobject: 'rx-0' (000000005201689d): auto cleanup 'remove' event
CR2: 0000000033628000 CR3: 00000001b4d56000 CR4: 00000000001406e0
kobject: 'rx-0' (000000005201689d): kobject_uevent_env
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
kobject: 'rx-0' (000000005201689d): fill_kobj_path: path = '/devices/virtual/net/vti0/queues/rx-0'