======================================================
WARNING: possible circular locking dependency detected
4.14.0+ #181 Not tainted
------------------------------------------------------
syz-executor7/10652 is trying to acquire lock:
 (console_lock){+.+.}, at: [<ffffffff8287d689>] vcs_read+0x129/0xae0 drivers/tty/vt/vc_screen.c:219

but task is already holding lock:
 (&pipe->mutex/1){+.+.}, at: [<ffffffff81b01046>] pipe_lock_nested fs/pipe.c:67 [inline]
 (&pipe->mutex/1){+.+.}, at: [<ffffffff81b01046>] pipe_lock+0x56/0x70 fs/pipe.c:75

which lock already depends on the new lock.


the existing dependency chain (in reverse order) is:

-> #3 (&pipe->mutex/1){+.+.}:
       lock_acquire+0x1d5/0x580 kernel/locking/lockdep.c:4004
       __mutex_lock_common kernel/locking/mutex.c:756 [inline]
       __mutex_lock+0x16f/0x1a80 kernel/locking/mutex.c:893
       mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:908
       pipe_lock_nested fs/pipe.c:67 [inline]
       pipe_lock+0x56/0x70 fs/pipe.c:75
       iter_file_splice_write+0x264/0xf30 fs/splice.c:699
       do_splice_from fs/splice.c:851 [inline]
       do_splice fs/splice.c:1147 [inline]
       SYSC_splice fs/splice.c:1402 [inline]
       SyS_splice+0x7d5/0x1630 fs/splice.c:1382
       entry_SYSCALL_64_fastpath+0x1f/0x96

-> #2 (sb_writers){.+.+}:
       spin_lock include/linux/spinlock.h:315 [inline]
       evict+0x533/0x920 fs/inode.c:565

-> #1 ((completion)&req.done){+.+.}:
       lock_acquire+0x1d5/0x580 kernel/locking/lockdep.c:4004
       complete_acquire include/linux/completion.h:40 [inline]
       __wait_for_common kernel/sched/completion.c:109 [inline]
       wait_for_common kernel/sched/completion.c:123 [inline]
       wait_for_completion+0xcb/0x7b0 kernel/sched/completion.c:144
       devtmpfs_create_node+0x32b/0x4a0 drivers/base/devtmpfs.c:115
       device_add+0x120f/0x1640 drivers/base/core.c:1824
       device_create_groups_vargs+0x1f3/0x250 drivers/base/core.c:2430
       device_create_vargs drivers/base/core.c:2470 [inline]
       device_create+0xda/0x110 drivers/base/core.c:2506
       vcs_make_sysfs+0x35/0x60 drivers/tty/vt/vc_screen.c:629
       vc_allocate+0x4b7/0x6b0 drivers/tty/vt/vt.c:797
       con_install+0x52/0x440 drivers/tty/vt/vt.c:2876
       tty_driver_install_tty drivers/tty/tty_io.c:1215 [inline]
       tty_init_dev+0xf6/0x4a0 drivers/tty/tty_io.c:1315
       tty_open_by_driver drivers/tty/tty_io.c:1942 [inline]
       tty_open+0x608/0xab0 drivers/tty/tty_io.c:1990
       chrdev_open+0x257/0x730 fs/char_dev.c:417
       do_dentry_open+0x682/0xd70 fs/open.c:752
       vfs_open+0x107/0x230 fs/open.c:866
       do_last fs/namei.c:3388 [inline]
       path_openat+0x1157/0x3530 fs/namei.c:3528
       do_filp_open+0x25b/0x3b0 fs/namei.c:3563
       do_sys_open+0x502/0x6d0 fs/open.c:1059
       SYSC_open fs/open.c:1077 [inline]
       SyS_open+0x2d/0x40 fs/open.c:1072
       entry_SYSCALL_64_fastpath+0x1f/0x96

-> #0 (console_lock){+.+.}:
       check_prevs_add kernel/locking/lockdep.c:2031 [inline]
       validate_chain kernel/locking/lockdep.c:2473 [inline]
       __lock_acquire+0x33ad/0x4840 kernel/locking/lockdep.c:3500
       lock_acquire+0x1d5/0x580 kernel/locking/lockdep.c:4004
       console_lock+0x4b/0x80 kernel/printk/printk.c:2047
       vcs_read+0x129/0xae0 drivers/tty/vt/vc_screen.c:219
       do_loop_readv_writev fs/read_write.c:694 [inline]
       do_iter_read+0x3db/0x5b0 fs/read_write.c:918
       vfs_readv+0x121/0x1c0 fs/read_write.c:980
       kernel_readv fs/splice.c:361 [inline]
       default_file_splice_read+0x508/0xae0 fs/splice.c:416
       do_splice_to+0x110/0x170 fs/splice.c:880
       do_splice fs/splice.c:1173 [inline]
       SYSC_splice fs/splice.c:1402 [inline]
       SyS_splice+0x11a8/0x1630 fs/splice.c:1382
       entry_SYSCALL_64_fastpath+0x1f/0x96

other info that might help us debug this:

Chain exists of:
  console_lock --> sb_writers --> &pipe->mutex/1

 Possible unsafe locking scenario:

       CPU0                    CPU1
       ----                    ----
  lock(&pipe->mutex/1);
                               lock(sb_writers);
                               lock(&pipe->mutex/1);
  lock(console_lock);

 *** DEADLOCK ***

1 lock held by syz-executor7/10652:
 #0:  (&pipe->mutex/1){+.+.}, at: [<ffffffff81b01046>] pipe_lock_nested fs/pipe.c:67 [inline]
 #0:  (&pipe->mutex/1){+.+.}, at: [<ffffffff81b01046>] pipe_lock+0x56/0x70 fs/pipe.c:75

stack backtrace:
CPU: 1 PID: 10652 Comm: syz-executor7 Not tainted 4.14.0+ #181
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x194/0x257 lib/dump_stack.c:53
 print_circular_bug+0x42d/0x610 kernel/locking/lockdep.c:1271
 check_prev_add+0x8b1/0x1580 kernel/locking/lockdep.c:1914
 check_prevs_add kernel/locking/lockdep.c:2031 [inline]
 validate_chain kernel/locking/lockdep.c:2473 [inline]
 __lock_acquire+0x33ad/0x4840 kernel/locking/lockdep.c:3500
 lock_acquire+0x1d5/0x580 kernel/locking/lockdep.c:4004
 console_lock+0x4b/0x80 kernel/printk/printk.c:2047
 vcs_read+0x129/0xae0 drivers/tty/vt/vc_screen.c:219
 do_loop_readv_writev fs/read_write.c:694 [inline]
 do_iter_read+0x3db/0x5b0 fs/read_write.c:918
 vfs_readv+0x121/0x1c0 fs/read_write.c:980
 kernel_readv fs/splice.c:361 [inline]
 default_file_splice_read+0x508/0xae0 fs/splice.c:416
 do_splice_to+0x110/0x170 fs/splice.c:880
 do_splice fs/splice.c:1173 [inline]
 SYSC_splice fs/splice.c:1402 [inline]
 SyS_splice+0x11a8/0x1630 fs/splice.c:1382
 entry_SYSCALL_64_fastpath+0x1f/0x96
RIP: 0033:0x452879
RSP: 002b:00007fa974fbebe8 EFLAGS: 00000212 ORIG_RAX: 0000000000000113
RAX: ffffffffffffffda RBX: 0000000000758020 RCX: 0000000000452879
RDX: 0000000000000017 RSI: 0000000000000000 RDI: 0000000000000013
RBP: 0000000000000086 R08: 0000000000000003 R09: 0000000000000008
R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f4d68
R13: 00000000ffffffff R14: 00007fa974fbf6d4 R15: 0000000000000000
rfkill: input handler disabled
rfkill: input handler enabled
rfkill: input handler disabled
rfkill: input handler enabled
handle_userfault: 109 callbacks suppressed
FAULT_FLAG_ALLOW_RETRY missing 31
FAULT_FLAG_ALLOW_RETRY missing 31
CPU: 1 PID: 10813 Comm: syz-executor7 Not tainted 4.14.0+ #181
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x194/0x257 lib/dump_stack.c:53
 handle_userfault+0x12fa/0x24c0 fs/userfaultfd.c:427
 do_anonymous_page mm/memory.c:3161 [inline]
 handle_pte_fault mm/memory.c:3934 [inline]
 __handle_mm_fault+0x2cc1/0x3ad0 mm/memory.c:4060
 handle_mm_fault+0x334/0x8d0 mm/memory.c:4097
 __do_page_fault+0x5c9/0xc90 arch/x86/mm/fault.c:1429
 do_page_fault+0xee/0x720 arch/x86/mm/fault.c:1504
 page_fault+0x22/0x30 arch/x86/entry/entry_64.S:1088
RIP: 0010:copy_user_generic_unrolled+0xa0/0xc0 arch/x86/lib/copy_user_64.S:75
RSP: 0018:ffff8801c5cf79a0 EFLAGS: 00010202
RAX: ffffed003acd6500 RBX: 0000000000000001 RCX: 0000000000000001
RDX: 0000000000000001 RSI: ffff8801d66b2e10 RDI: 0000000020001fb2
RBP: ffff8801c5cf79d0 R08: ffffed003acd65c3 R09: ffffed003acd65c3
R10: 0000000000000001 R11: ffffed003acd65c2 R12: 0000000020001fb2
R13: ffff8801d66b2e10 R14: 00007ffffffff000 R15: 0000000020001fb3
 copy_to_user include/linux/uaccess.h:155 [inline]
 rfkill_fop_read+0x3e8/0x720 net/rfkill/core.c:1189
 do_loop_readv_writev fs/read_write.c:694 [inline]
 do_iter_read+0x3db/0x5b0 fs/read_write.c:918
 vfs_readv+0x121/0x1c0 fs/read_write.c:980
 do_readv+0xfc/0x2a0 fs/read_write.c:1013
 SYSC_readv fs/read_write.c:1100 [inline]
 SyS_readv+0x27/0x30 fs/read_write.c:1097
 entry_SYSCALL_64_fastpath+0x1f/0x96
RIP: 0033:0x452879
RSP: 002b:00007fa974fbebe8 EFLAGS: 00000212 ORIG_RAX: 0000000000000013
RAX: ffffffffffffffda RBX: 0000000000758020 RCX: 0000000000452879
RDX: 0000000000000001 RSI: 0000000020013000 RDI: 0000000000000014
RBP: 00000000000002ee R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f16f0
R13: 00000000ffffffff R14: 00007fa974fbf6d4 R15: 0000000000000000
FAULT_FLAG_ALLOW_RETRY missing 31
CPU: 0 PID: 10832 Comm: syz-executor6 Not tainted 4.14.0+ #181
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x194/0x257 lib/dump_stack.c:53
 handle_userfault+0x12fa/0x24c0 fs/userfaultfd.c:427
 do_anonymous_page mm/memory.c:3161 [inline]
 handle_pte_fault mm/memory.c:3934 [inline]
 __handle_mm_fault+0x2cc1/0x3ad0 mm/memory.c:4060
 handle_mm_fault+0x334/0x8d0 mm/memory.c:4097
 __do_page_fault+0x5c9/0xc90 arch/x86/mm/fault.c:1429
 do_page_fault+0xee/0x720 arch/x86/mm/fault.c:1504
 page_fault+0x22/0x30 arch/x86/entry/entry_64.S:1088
RIP: 0010:copy_user_generic_unrolled+0xa0/0xc0 arch/x86/lib/copy_user_64.S:75
RSP: 0018:ffff8801c4e1f9a0 EFLAGS: 00010202
RAX: ffffed0039362c00 RBX: 0000000000000001 RCX: 0000000000000001
RDX: 0000000000000001 RSI: ffff8801c9b16090 RDI: 0000000020001fb2
RBP: ffff8801c4e1f9d0 R08: ffffed0039362c13 R09: ffffed0039362c13
R10: 0000000000000001 R11: ffffed0039362c12 R12: 0000000020001fb2
R13: ffff8801c9b16090 R14: 00007ffffffff000 R15: 0000000020001fb3
 copy_to_user include/linux/uaccess.h:155 [inline]
 rfkill_fop_read+0x3e8/0x720 net/rfkill/core.c:1189
 do_loop_readv_writev fs/read_write.c:694 [inline]
 do_iter_read+0x3db/0x5b0 fs/read_write.c:918
 vfs_readv+0x121/0x1c0 fs/read_write.c:980
 do_readv+0xfc/0x2a0 fs/read_write.c:1013
 SYSC_readv fs/read_write.c:1100 [inline]
 SyS_readv+0x27/0x30 fs/read_write.c:1097
 entry_SYSCALL_64_fastpath+0x1f/0x96
RIP: 0033:0x452879
RSP: 002b:00007f30bd88ebe8 EFLAGS: 00000212 ORIG_RAX: 0000000000000013
RAX: ffffffffffffffda RBX: 0000000000758020 RCX: 0000000000452879
RDX: 0000000000000001 RSI: 0000000020013000 RDI: 0000000000000014
RBP: 00000000000002ee R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f16f0
R13: 00000000ffffffff R14: 00007f30bd88f6d4 R15: 0000000000000000
FAULT_FLAG_ALLOW_RETRY missing 31
CPU: 1 PID: 10813 Comm: syz-executor7 Not tainted 4.14.0+ #181
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x194/0x257 lib/dump_stack.c:53
 handle_userfault+0x12fa/0x24c0 fs/userfaultfd.c:427
 do_anonymous_page mm/memory.c:3161 [inline]
 handle_pte_fault mm/memory.c:3934 [inline]
 __handle_mm_fault+0x2cc1/0x3ad0 mm/memory.c:4060
 handle_mm_fault+0x334/0x8d0 mm/memory.c:4097
 __do_page_fault+0x5c9/0xc90 arch/x86/mm/fault.c:1429
 do_page_fault+0xee/0x720 arch/x86/mm/fault.c:1504
 page_fault+0x22/0x30 arch/x86/entry/entry_64.S:1088
RIP: 0010:stac arch/x86/include/asm/smap.h:58 [inline]
RIP: 0010:copy_user_handle_tail+0x40/0x80 arch/x86/lib/usercopy_64.c:71
RSP: 0018:ffff8801c5cf7970 EFLAGS: 00010246
RAX: 0000000000010000 RBX: 0000000000000000 RCX: ffffc90003673000
RDX: 0000000000010000 RSI: ffffffff84f1870d RDI: 0000000020001fb2
RBP: ffff8801c5cf7998 R08: ffffed003acd65c3 R09: ffffed003acd65c3
R10: 0000000000000001 R11: ffffed003acd65c2 R12: 0000000000000001
R13: 0000000020001fb2 R14: ffff8801d66b2e11 R15: ffff8801d66b2e00
 copy_user_generic arch/x86/include/asm/uaccess_64.h:37 [inline]
 raw_copy_to_user arch/x86/include/asm/uaccess_64.h:112 [inline]
 _copy_to_user+0x9b/0xc0 lib/usercopy.c:28
 copy_to_user include/linux/uaccess.h:155 [inline]
 rfkill_fop_read+0x3e8/0x720 net/rfkill/core.c:1189
 do_loop_readv_writev fs/read_write.c:694 [inline]
 do_iter_read+0x3db/0x5b0 fs/read_write.c:918
 vfs_readv+0x121/0x1c0 fs/read_write.c:980
 do_readv+0xfc/0x2a0 fs/read_write.c:1013
 SYSC_readv fs/read_write.c:1100 [inline]
 SyS_readv+0x27/0x30 fs/read_write.c:1097
 entry_SYSCALL_64_fastpath+0x1f/0x96
RIP: 0033:0x452879
RSP: 002b:00007fa974fbebe8 EFLAGS: 00000212 ORIG_RAX: 0000000000000013
RAX: ffffffffffffffda RBX: 0000000000758020 RCX: 0000000000452879
RDX: 0000000000000001 RSI: 0000000020013000 RDI: 0000000000000014
RBP: 00000000000002ee R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f16f0
R13: 00000000ffffffff R14: 00007fa974fbf6d4 R15: 0000000000000000
rfkill: input handler disabled
FAULT_FLAG_ALLOW_RETRY missing 31
CPU: 0 PID: 10832 Comm: syz-executor6 Not tainted 4.14.0+ #181
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x194/0x257 lib/dump_stack.c:53
 handle_userfault+0x12fa/0x24c0 fs/userfaultfd.c:427
 do_anonymous_page mm/memory.c:3161 [inline]
 handle_pte_fault mm/memory.c:3934 [inline]
 __handle_mm_fault+0x2cc1/0x3ad0 mm/memory.c:4060
 handle_mm_fault+0x334/0x8d0 mm/memory.c:4097
 __do_page_fault+0x5c9/0xc90 arch/x86/mm/fault.c:1429
 do_page_fault+0xee/0x720 arch/x86/mm/fault.c:1504
 page_fault+0x22/0x30 arch/x86/entry/entry_64.S:1088
RIP: 0010:stac arch/x86/include/asm/smap.h:58 [inline]
RIP: 0010:copy_user_handle_tail+0x40/0x80 arch/x86/lib/usercopy_64.c:71
RSP: 0018:ffff8801c4e1f970 EFLAGS: 00010246
RAX: 0000000000010000 RBX: 0000000000000000 RCX: ffffc90003e02000
RDX: 0000000000010000 RSI: ffffffff84f1870d RDI: 0000000020001fb2
RBP: ffff8801c4e1f998 R08: ffffed0039362c13 R09: ffffed0039362c13
R10: 0000000000000001 R11: ffffed0039362c12 R12: 0000000000000001
R13: 0000000020001fb2 R14: ffff8801c9b16091 R15: ffff8801c9b16000
 copy_user_generic arch/x86/include/asm/uaccess_64.h:37 [inline]
 raw_copy_to_user arch/x86/include/asm/uaccess_64.h:112 [inline]
 _copy_to_user+0x9b/0xc0 lib/usercopy.c:28
 copy_to_user include/linux/uaccess.h:155 [inline]
 rfkill_fop_read+0x3e8/0x720 net/rfkill/core.c:1189
 do_loop_readv_writev fs/read_write.c:694 [inline]
 do_iter_read+0x3db/0x5b0 fs/read_write.c:918
 vfs_readv+0x121/0x1c0 fs/read_write.c:980
 do_readv+0xfc/0x2a0 fs/read_write.c:1013
 SYSC_readv fs/read_write.c:1100 [inline]
 SyS_readv+0x27/0x30 fs/read_write.c:1097
 entry_SYSCALL_64_fastpath+0x1f/0x96
RIP: 0033:0x452879
RSP: 002b:00007f30bd88ebe8 EFLAGS: 00000212 ORIG_RAX: 0000000000000013
RAX: ffffffffffffffda RBX: 0000000000758020 RCX: 0000000000452879
RDX: 0000000000000001 RSI: 0000000020013000 RDI: 0000000000000014
RBP: 00000000000002ee R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f16f0
R13: 00000000ffffffff R14: 00007f30bd88f6d4 R15: 0000000000000000
rfkill: input handler enabled
CPU: 0 PID: 10820 Comm: syz-executor5 Not tainted 4.14.0+ #181
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x194/0x257 lib/dump_stack.c:53
 handle_userfault+0x12fa/0x24c0 fs/userfaultfd.c:427
 do_anonymous_page mm/memory.c:3161 [inline]
 handle_pte_fault mm/memory.c:3934 [inline]
 __handle_mm_fault+0x2cc1/0x3ad0 mm/memory.c:4060
 handle_mm_fault+0x334/0x8d0 mm/memory.c:4097
 __do_page_fault+0x5c9/0xc90 arch/x86/mm/fault.c:1429
 do_page_fault+0xee/0x720 arch/x86/mm/fault.c:1504
 page_fault+0x22/0x30 arch/x86/entry/entry_64.S:1088
RIP: 0010:copy_user_generic_unrolled+0xa0/0xc0 arch/x86/lib/copy_user_64.S:75
RSP: 0018:ffff8801c696f9a0 EFLAGS: 00010202
RAX: ffffed0038727400 RBX: 0000000000000001 RCX: 0000000000000001
RDX: 0000000000000001 RSI: ffff8801c393a210 RDI: 0000000020001fb2
RBP: ffff8801c696f9d0 R08: ffffed0038727443 R09: ffffed0038727443
R10: 0000000000000001 R11: ffffed0038727442 R12: 0000000020001fb2
R13: ffff8801c393a210 R14: 00007ffffffff000 R15: 0000000020001fb3
 copy_to_user include/linux/uaccess.h:155 [inline]
 rfkill_fop_read+0x3e8/0x720 net/rfkill/core.c:1189
 do_loop_readv_writev fs/read_write.c:694 [inline]
 do_iter_read+0x3db/0x5b0 fs/read_write.c:918
 vfs_readv+0x121/0x1c0 fs/read_write.c:980
 do_readv+0xfc/0x2a0 fs/read_write.c:1013
 SYSC_readv fs/read_write.c:1100 [inline]
 SyS_readv+0x27/0x30 fs/read_write.c:1097
 entry_SYSCALL_64_fastpath+0x1f/0x96
RIP: 0033:0x452879
RSP: 002b:00007f367d5d4be8 EFLAGS: 00000212 ORIG_RAX: 0000000000000013
RAX: ffffffffffffffda RBX: 0000000000758020 RCX: 0000000000452879
RDX: 0000000000000001 RSI: 0000000020013000 RDI: 0000000000000014
RBP: 00000000000002ee R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f16f0
R13: 00000000ffffffff R14: 00007f367d5d56d4 R15: 0000000000000000
RDS: rds_bind could not find a transport for 172.20.6.170, load rds_tcp or rds_rdma?
FAULT_FLAG_ALLOW_RETRY missing 31
CPU: 1 PID: 10871 Comm: syz-executor5 Not tainted 4.14.0+ #181
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
FAULT_FLAG_ALLOW_RETRY missing 31
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x194/0x257 lib/dump_stack.c:53
 handle_userfault+0x12fa/0x24c0 fs/userfaultfd.c:427
 do_anonymous_page mm/memory.c:3161 [inline]
 handle_pte_fault mm/memory.c:3934 [inline]
 __handle_mm_fault+0x2cc1/0x3ad0 mm/memory.c:4060
 handle_mm_fault+0x334/0x8d0 mm/memory.c:4097
 __do_page_fault+0x5c9/0xc90 arch/x86/mm/fault.c:1429
 do_page_fault+0xee/0x720 arch/x86/mm/fault.c:1504
 page_fault+0x22/0x30 arch/x86/entry/entry_64.S:1088
RIP: 0010:copy_user_generic_unrolled+0xa0/0xc0 arch/x86/lib/copy_user_64.S:75
RSP: 0018:ffff8801c5cf79a0 EFLAGS: 00010202
RAX: ffffed00385eeb00 RBX: 0000000000000001 RCX: 0000000000000001
RDX: 0000000000000001 RSI: ffff8801c2f758d0 RDI: 0000000020001fb2
RBP: ffff8801c5cf79d0 R08: ffffed00385eeb1b R09: ffffed00385eeb1b
R10: 0000000000000001 R11: ffffed00385eeb1a R12: 0000000020001fb2
R13: ffff8801c2f758d0 R14: 00007ffffffff000 R15: 0000000020001fb3
 copy_to_user include/linux/uaccess.h:155 [inline]
 rfkill_fop_read+0x3e8/0x720 net/rfkill/core.c:1189
 do_loop_readv_writev fs/read_write.c:694 [inline]
 do_iter_read+0x3db/0x5b0 fs/read_write.c:918
 vfs_readv+0x121/0x1c0 fs/read_write.c:980
 do_readv+0xfc/0x2a0 fs/read_write.c:1013
 SYSC_readv fs/read_write.c:1100 [inline]
 SyS_readv+0x27/0x30 fs/read_write.c:1097
 entry_SYSCALL_64_fastpath+0x1f/0x96
RIP: 0033:0x452879
RSP: 002b:00007f367d5d4be8 EFLAGS: 00000212 ORIG_RAX: 0000000000000013
RAX: ffffffffffffffda RBX: 0000000000758020 RCX: 0000000000452879
RDX: 0000000000000001 RSI: 0000000020013000 RDI: 0000000000000014
RBP: 00000000000002ee R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f16f0
R13: 00000000ffffffff R14: 00007f367d5d56d4 R15: 0000000000000000
CPU: 0 PID: 10872 Comm: syz-executor7 Not tainted 4.14.0+ #181
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x194/0x257 lib/dump_stack.c:53
RDS: rds_bind could not find a transport for 172.20.6.170, load rds_tcp or rds_rdma?
 handle_userfault+0x12fa/0x24c0 fs/userfaultfd.c:427
 do_anonymous_page mm/memory.c:3161 [inline]
 handle_pte_fault mm/memory.c:3934 [inline]
 __handle_mm_fault+0x2cc1/0x3ad0 mm/memory.c:4060
 handle_mm_fault+0x334/0x8d0 mm/memory.c:4097
 __do_page_fault+0x5c9/0xc90 arch/x86/mm/fault.c:1429
 do_page_fault+0xee/0x720 arch/x86/mm/fault.c:1504
 page_fault+0x22/0x30 arch/x86/entry/entry_64.S:1088
RIP: 0010:copy_user_generic_unrolled+0xa0/0xc0 arch/x86/lib/copy_user_64.S:75
RSP: 0018:ffff8801c49079a0 EFLAGS: 00010202
RAX: ffffed003ac8f800 RBX: 0000000000000001 RCX: 0000000000000001
RDX: 0000000000000001 RSI: ffff8801d647c610 RDI: 0000000020001fb2
RBP: ffff8801c49079d0 R08: ffffed003ac8f8c3 R09: ffffed003ac8f8c3
R10: 0000000000000001 R11: ffffed003ac8f8c2 R12: 0000000020001fb2
R13: ffff8801d647c610 R14: 00007ffffffff000 R15: 0000000020001fb3
 copy_to_user include/linux/uaccess.h:155 [inline]
 rfkill_fop_read+0x3e8/0x720 net/rfkill/core.c:1189
 do_loop_readv_writev fs/read_write.c:694 [inline]
 do_iter_read+0x3db/0x5b0 fs/read_write.c:918
 vfs_readv+0x121/0x1c0 fs/read_write.c:980
 do_readv+0xfc/0x2a0 fs/read_write.c:1013
 SYSC_readv fs/read_write.c:1100 [inline]
 SyS_readv+0x27/0x30 fs/read_write.c:1097
 entry_SYSCALL_64_fastpath+0x1f/0x96
RIP: 0033:0x452879
RSP: 002b:00007fa974fbebe8 EFLAGS: 00000212 ORIG_RAX: 0000000000000013
RAX: ffffffffffffffda RBX: 0000000000758020 RCX: 0000000000452879
RDX: 0000000000000001 RSI: 0000000020013000 RDI: 0000000000000014
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000212 R12: 0000000000000000
R13: 0000000000a6f7ff R14: 00007fa974fbf9c0 R15: 0000000000000000
FAULT_FLAG_ALLOW_RETRY missing 31
CPU: 1 PID: 10871 Comm: syz-executor5 Not tainted 4.14.0+ #181
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x194/0x257 lib/dump_stack.c:53
 handle_userfault+0x12fa/0x24c0 fs/userfaultfd.c:427
RDS: rds_bind could not find a transport for 172.20.6.170, load rds_tcp or rds_rdma?
RDS: rds_bind could not find a transport for 172.20.6.170, load rds_tcp or rds_rdma?
 do_anonymous_page mm/memory.c:3161 [inline]
 handle_pte_fault mm/memory.c:3934 [inline]
 __handle_mm_fault+0x2cc1/0x3ad0 mm/memory.c:4060
 handle_mm_fault+0x334/0x8d0 mm/memory.c:4097
 __do_page_fault+0x5c9/0xc90 arch/x86/mm/fault.c:1429
 do_page_fault+0xee/0x720 arch/x86/mm/fault.c:1504
 page_fault+0x22/0x30 arch/x86/entry/entry_64.S:1088
RIP: 0010:stac arch/x86/include/asm/smap.h:58 [inline]
RIP: 0010:copy_user_handle_tail+0x40/0x80 arch/x86/lib/usercopy_64.c:71
RSP: 0018:ffff8801c5cf7970 EFLAGS: 00010246
RAX: 0000000000010000 RBX: 0000000000000000 RCX: ffffc900029da000
RDX: 0000000000010000 RSI: ffffffff84f1870d RDI: 0000000020001fb2
RBP: ffff8801c5cf7998 R08: ffffed00385eeb1b R09: ffffed00385eeb1b
R10: 0000000000000001 R11: ffffed00385eeb1a R12: 0000000000000001
R13: 0000000020001fb2 R14: ffff8801c2f758d1 R15: ffff8801c2f75800
 copy_user_generic arch/x86/include/asm/uaccess_64.h:37 [inline]
 raw_copy_to_user arch/x86/include/asm/uaccess_64.h:112 [inline]
 _copy_to_user+0x9b/0xc0 lib/usercopy.c:28
 copy_to_user include/linux/uaccess.h:155 [inline]
 rfkill_fop_read+0x3e8/0x720 net/rfkill/core.c:1189
 do_loop_readv_writev fs/read_write.c:694 [inline]
 do_iter_read+0x3db/0x5b0 fs/read_write.c:918
 vfs_readv+0x121/0x1c0 fs/read_write.c:980
 do_readv+0xfc/0x2a0 fs/read_write.c:1013
 SYSC_readv fs/read_write.c:1100 [inline]
 SyS_readv+0x27/0x30 fs/read_write.c:1097
 entry_SYSCALL_64_fastpath+0x1f/0x96
RIP: 0033:0x452879
RSP: 002b:00007f367d5d4be8 EFLAGS: 00000212 ORIG_RAX: 0000000000000013
RAX: ffffffffffffffda RBX: 0000000000758020 RCX: 0000000000452879
RDX: 0000000000000001 RSI: 0000000020013000 RDI: 0000000000000014
RBP: 00000000000002ee R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f16f0
R13: 00000000ffffffff R14: 00007f367d5d56d4 R15: 0000000000000000
rfkill: input handler disabled
RDS: rds_bind could not find a transport for 172.20.4.170, load rds_tcp or rds_rdma?
RDS: rds_bind could not find a transport for 172.20.1.170, load rds_tcp or rds_rdma?
RDS: rds_bind could not find a transport for 172.20.1.170, load rds_tcp or rds_rdma?
FAULT_FLAG_ALLOW_RETRY missing 31
CPU: 0 PID: 10930 Comm: syz-executor7 Not tainted 4.14.0+ #181
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RDS: rds_bind could not find a transport for 172.20.4.170, load rds_tcp or rds_rdma?
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x194/0x257 lib/dump_stack.c:53
 handle_userfault+0x12fa/0x24c0 fs/userfaultfd.c:427
 do_anonymous_page mm/memory.c:3161 [inline]
 handle_pte_fault mm/memory.c:3934 [inline]
 __handle_mm_fault+0x2cc1/0x3ad0 mm/memory.c:4060
 handle_mm_fault+0x334/0x8d0 mm/memory.c:4097
 __do_page_fault+0x5c9/0xc90 arch/x86/mm/fault.c:1429
 do_page_fault+0xee/0x720 arch/x86/mm/fault.c:1504
 page_fault+0x22/0x30 arch/x86/entry/entry_64.S:1088
RIP: 0010:copy_user_generic_unrolled+0xa0/0xc0 arch/x86/lib/copy_user_64.S:75
RSP: 0018:ffff8801c67079a0 EFLAGS: 00010202
RAX: ffffed00385e0500 RBX: 0000000000000001 RCX: 0000000000000001
RDX: 0000000000000001 RSI: ffff8801c2f02d10 RDI: 0000000020001fb2
RBP: ffff8801c67079d0 R08: ffffed00385e05a3 R09: ffffed00385e05a3
R10: 0000000000000001 R11: ffffed00385e05a2 R12: 0000000020001fb2
R13: ffff8801c2f02d10 R14: 00007ffffffff000 R15: 0000000020001fb3
 copy_to_user include/linux/uaccess.h:155 [inline]
 rfkill_fop_read+0x3e8/0x720 net/rfkill/core.c:1189
 do_loop_readv_writev fs/read_write.c:694 [inline]
 do_iter_read+0x3db/0x5b0 fs/read_write.c:918
 vfs_readv+0x121/0x1c0 fs/read_write.c:980
 do_readv+0xfc/0x2a0 fs/read_write.c:1013
 SYSC_readv fs/read_write.c:1100 [inline]
 SyS_readv+0x27/0x30 fs/read_write.c:1097
 entry_SYSCALL_64_fastpath+0x1f/0x96
RIP: 0033:0x452879
RSP: 002b:00007fa974fbebe8 EFLAGS: 00000212 ORIG_RAX: 0000000000000013
RAX: ffffffffffffffda RBX: 0000000000758020 RCX: 0000000000452879
RDX: 0000000000000001 RSI: 0000000020013000 RDI: 0000000000000014
RBP: 00000000000002ee R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f16f0
R13: 00000000ffffffff R14: 00007fa974fbf6d4 R15: 0000000000000000
rfkill: input handler enabled
RDS: rds_bind could not find a transport for 172.20.6.170, load rds_tcp or rds_rdma?
FAULT_FLAG_ALLOW_RETRY missing 31
CPU: 1 PID: 10930 Comm: syz-executor7 Not tainted 4.14.0+ #181
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x194/0x257 lib/dump_stack.c:53
 handle_userfault+0x12fa/0x24c0 fs/userfaultfd.c:427
RDS: rds_bind could not find a transport for 172.20.4.170, load rds_tcp or rds_rdma?
rfkill: input handler disabled
 do_anonymous_page mm/memory.c:3161 [inline]
 handle_pte_fault mm/memory.c:3934 [inline]
 __handle_mm_fault+0x2cc1/0x3ad0 mm/memory.c:4060
 handle_mm_fault+0x334/0x8d0 mm/memory.c:4097
 __do_page_fault+0x5c9/0xc90 arch/x86/mm/fault.c:1429
 do_page_fault+0xee/0x720 arch/x86/mm/fault.c:1504
 page_fault+0x22/0x30 arch/x86/entry/entry_64.S:1088
RIP: 0010:stac arch/x86/include/asm/smap.h:58 [inline]
RIP: 0010:copy_user_handle_tail+0x40/0x80 arch/x86/lib/usercopy_64.c:71
RSP: 0018:ffff8801c6707970 EFLAGS: 00010246
RAX: 0000000000010000 RBX: 0000000000000000 RCX: ffffc90003673000
RDX: 0000000000010000 RSI: ffffffff84f1870d RDI: 0000000020001fb2
RBP: ffff8801c6707998 R08: ffffed00385e05a3 R09: ffffed00385e05a3
R10: 0000000000000001 R11: ffffed00385e05a2 R12: 0000000000000001
R13: 0000000020001fb2 R14: ffff8801c2f02d11 R15: ffff8801c2f02d00
 copy_user_generic arch/x86/include/asm/uaccess_64.h:37 [inline]
 raw_copy_to_user arch/x86/include/asm/uaccess_64.h:112 [inline]
 _copy_to_user+0x9b/0xc0 lib/usercopy.c:28
 copy_to_user include/linux/uaccess.h:155 [inline]
 rfkill_fop_read+0x3e8/0x720 net/rfkill/core.c:1189
 do_loop_readv_writev fs/read_write.c:694 [inline]
 do_iter_read+0x3db/0x5b0 fs/read_write.c:918
 vfs_readv+0x121/0x1c0 fs/read_write.c:980
 do_readv+0xfc/0x2a0 fs/read_write.c:1013
 SYSC_readv fs/read_write.c:1100 [inline]
 SyS_readv+0x27/0x30 fs/read_write.c:1097
 entry_SYSCALL_64_fastpath+0x1f/0x96
RIP: 0033:0x452879
RSP: 002b:00007fa974fbebe8 EFLAGS: 00000212 ORIG_RAX: 0000000000000013
RAX: ffffffffffffffda RBX: 0000000000758020 RCX: 0000000000452879
RDX: 0000000000000001 RSI: 0000000020013000 RDI: 0000000000000014
RBP: 00000000000002ee R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f16f0
R13: 00000000ffffffff R14: 00007fa974fbf6d4 R15: 0000000000000000
rfkill: input handler enabled
handle_userfault: 2 callbacks suppressed
FAULT_FLAG_ALLOW_RETRY missing 31
FAULT_FLAG_ALLOW_RETRY missing 31
CPU: 1 PID: 10991 Comm: syz-executor5 Not tainted 4.14.0+ #181
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x194/0x257 lib/dump_stack.c:53
 handle_userfault+0x12fa/0x24c0 fs/userfaultfd.c:427
 do_anonymous_page mm/memory.c:3161 [inline]
 handle_pte_fault mm/memory.c:3934 [inline]
 __handle_mm_fault+0x2cc1/0x3ad0 mm/memory.c:4060
 handle_mm_fault+0x334/0x8d0 mm/memory.c:4097
 __do_page_fault+0x5c9/0xc90 arch/x86/mm/fault.c:1429
 do_page_fault+0xee/0x720 arch/x86/mm/fault.c:1504
 page_fault+0x22/0x30 arch/x86/entry/entry_64.S:1088
RIP: 0010:copy_user_generic_unrolled+0xa0/0xc0 arch/x86/lib/copy_user_64.S:75
RSP: 0018:ffff8801c325f9a0 EFLAGS: 00010202
RAX: ffffed003b625800 RBX: 0000000000000001 RCX: 0000000000000001
RDX: 0000000000000001 RSI: ffff8801db12c390 RDI: 0000000020001fb2
RBP: ffff8801c325f9d0 R08: ffffed003b625873 R09: ffffed003b625873
R10: 0000000000000001 R11: ffffed003b625872 R12: 0000000020001fb2
R13: ffff8801db12c390 R14: 00007ffffffff000 R15: 0000000020001fb3
 copy_to_user include/linux/uaccess.h:155 [inline]
 rfkill_fop_read+0x3e8/0x720 net/rfkill/core.c:1189
 do_loop_readv_writev fs/read_write.c:694 [inline]
 do_iter_read+0x3db/0x5b0 fs/read_write.c:918
 vfs_readv+0x121/0x1c0 fs/read_write.c:980
 do_readv+0xfc/0x2a0 fs/read_write.c:1013
 SYSC_readv fs/read_write.c:1100 [inline]
 SyS_readv+0x27/0x30 fs/read_write.c:1097
 entry_SYSCALL_64_fastpath+0x1f/0x96
RIP: 0033:0x452879
RSP: 002b:00007f367d5d4be8 EFLAGS: 00000212 ORIG_RAX: 0000000000000013
RAX: ffffffffffffffda RBX: 0000000000758020 RCX: 0000000000452879
RDX: 0000000000000001 RSI: 0000000020013000 RDI: 0000000000000014
RBP: 00000000000002ee R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f16f0
R13: 00000000ffffffff R14: 00007f367d5d56d4 R15: 0000000000000000
FAULT_FLAG_ALLOW_RETRY missing 31
CPU: 1 PID: 10991 Comm: syz-executor5 Not tainted 4.14.0+ #181
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x194/0x257 lib/dump_stack.c:53
 handle_userfault+0x12fa/0x24c0 fs/userfaultfd.c:427
 do_anonymous_page mm/memory.c:3161 [inline]
 handle_pte_fault mm/memory.c:3934 [inline]
 __handle_mm_fault+0x2cc1/0x3ad0 mm/memory.c:4060
 handle_mm_fault+0x334/0x8d0 mm/memory.c:4097
 __do_page_fault+0x5c9/0xc90 arch/x86/mm/fault.c:1429
 do_page_fault+0xee/0x720 arch/x86/mm/fault.c:1504
 page_fault+0x22/0x30 arch/x86/entry/entry_64.S:1088
RIP: 0010:stac arch/x86/include/asm/smap.h:58 [inline]
RIP: 0010:copy_user_handle_tail+0x40/0x80 arch/x86/lib/usercopy_64.c:71
RSP: 0018:ffff8801c325f970 EFLAGS: 00010246
RAX: 0000000000010000 RBX: 0000000000000000 RCX: ffffc900029da000
RDX: 0000000000010000 RSI: ffffffff84f1870d RDI: 0000000020001fb2
RBP: ffff8801c325f998 R08: ffffed003b625873 R09: ffffed003b625873
R10: 0000000000000001 R11: ffffed003b625872 R12: 0000000000000001
R13: 0000000020001fb2 R14: ffff8801db12c391 R15: ffff8801db12c300
 copy_user_generic arch/x86/include/asm/uaccess_64.h:37 [inline]
 raw_copy_to_user arch/x86/include/asm/uaccess_64.h:112 [inline]
 _copy_to_user+0x9b/0xc0 lib/usercopy.c:28
 copy_to_user include/linux/uaccess.h:155 [inline]
 rfkill_fop_read+0x3e8/0x720 net/rfkill/core.c:1189
 do_loop_readv_writev fs/read_write.c:694 [inline]
 do_iter_read+0x3db/0x5b0 fs/read_write.c:918
 vfs_readv+0x121/0x1c0 fs/read_write.c:980
 do_readv+0xfc/0x2a0 fs/read_write.c:1013
 SYSC_readv fs/read_write.c:1100 [inline]
 SyS_readv+0x27/0x30 fs/read_write.c:1097
 entry_SYSCALL_64_fastpath+0x1f/0x96
RIP: 0033:0x452879
RSP: 002b:00007f367d5d4be8 EFLAGS: 00000212 ORIG_RAX: 0000000000000013
RAX: ffffffffffffffda RBX: 0000000000758020 RCX: 0000000000452879
RDX: 0000000000000001 RSI: 0000000020013000 RDI: 0000000000000014
RBP: 00000000000002ee R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f16f0
R13: 00000000ffffffff R14: 00007f367d5d56d4 R15: 0000000000000000
rfkill: input handler disabled
rfkill: input handler enabled
CPU: 1 PID: 10992 Comm: syz-executor7 Not tainted 4.14.0+ #181
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x194/0x257 lib/dump_stack.c:53
 handle_userfault+0x12fa/0x24c0 fs/userfaultfd.c:427
 do_anonymous_page mm/memory.c:3161 [inline]
 handle_pte_fault mm/memory.c:3934 [inline]
 __handle_mm_fault+0x2cc1/0x3ad0 mm/memory.c:4060
 handle_mm_fault+0x334/0x8d0 mm/memory.c:4097
 __do_page_fault+0x5c9/0xc90 arch/x86/mm/fault.c:1429
 do_page_fault+0xee/0x720 arch/x86/mm/fault.c:1504
 page_fault+0x22/0x30 arch/x86/entry/entry_64.S:1088
RIP: 0010:copy_user_generic_unrolled+0xa0/0xc0 arch/x86/lib/copy_user_64.S:75
RSP: 0018:ffff8801d3bbf9a0 EFLAGS: 00010202
RAX: ffffed0038366800 RBX: 0000000000000001 RCX: 0000000000000001
RDX: 0000000000000001 RSI: ffff8801c1b34150 RDI: 0000000020001fb2
RBP: ffff8801d3bbf9d0 R08: ffffed003836682b R09: ffffed003836682b
R10: 0000000000000001 R11: ffffed003836682a R12: 0000000020001fb2
R13: ffff8801c1b34150 R14: 00007ffffffff000 R15: 0000000020001fb3
 copy_to_user include/linux/uaccess.h:155 [inline]
 rfkill_fop_read+0x3e8/0x720 net/rfkill/core.c:1189
 do_loop_readv_writev fs/read_write.c:694 [inline]
 do_iter_read+0x3db/0x5b0 fs/read_write.c:918
 vfs_readv+0x121/0x1c0 fs/read_write.c:980
 do_readv+0xfc/0x2a0 fs/read_write.c:1013
 SYSC_readv fs/read_write.c:1100 [inline]
 SyS_readv+0x27/0x30 fs/read_write.c:1097
 entry_SYSCALL_64_fastpath+0x1f/0x96
RIP: 0033:0x452879
RSP: 002b:00007fa974fbebe8 EFLAGS: 00000212 ORIG_RAX: 0000000000000013
RAX: ffffffffffffffda RBX: 0000000000758020 RCX: 0000000000452879
RDX: 0000000000000001 RSI: 0000000020013000 RDI: 0000000000000014
RBP: 00000000000002ee R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f16f0
R13: 00000000ffffffff R14: 00007fa974fbf6d4 R15: 0000000000000000
FAULT_FLAG_ALLOW_RETRY missing 31
FAULT_FLAG_ALLOW_RETRY missing 31
CPU: 1 PID: 11061 Comm: syz-executor7 Not tainted 4.14.0+ #181
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x194/0x257 lib/dump_stack.c:53
 handle_userfault+0x12fa/0x24c0 fs/userfaultfd.c:427
 do_anonymous_page mm/memory.c:3161 [inline]
 handle_pte_fault mm/memory.c:3934 [inline]
 __handle_mm_fault+0x2cc1/0x3ad0 mm/memory.c:4060
 handle_mm_fault+0x334/0x8d0 mm/memory.c:4097
 __do_page_fault+0x5c9/0xc90 arch/x86/mm/fault.c:1429
 do_page_fault+0xee/0x720 arch/x86/mm/fault.c:1504
 page_fault+0x22/0x30 arch/x86/entry/entry_64.S:1088
RIP: 0010:copy_user_generic_unrolled+0xa0/0xc0 arch/x86/lib/copy_user_64.S:75
RSP: 0018:ffff8801c5c879a0 EFLAGS: 00010202
RAX: ffffed00384f3c00 RBX: 0000000000000001 RCX: 0000000000000001
RDX: 0000000000000001 RSI: ffff8801c279e090 RDI: 0000000020001fb2
RBP: ffff8801c5c879d0 R08: ffffed00384f3c13 R09: ffffed00384f3c13
R10: 0000000000000001 R11: ffffed00384f3c12 R12: 0000000020001fb2
R13: ffff8801c279e090 R14: 00007ffffffff000 R15: 0000000020001fb3
 copy_to_user include/linux/uaccess.h:155 [inline]
 rfkill_fop_read+0x3e8/0x720 net/rfkill/core.c:1189
 do_loop_readv_writev fs/read_write.c:694 [inline]
 do_iter_read+0x3db/0x5b0 fs/read_write.c:918
 vfs_readv+0x121/0x1c0 fs/read_write.c:980
 do_readv+0xfc/0x2a0 fs/read_write.c:1013
 SYSC_readv fs/read_write.c:1100 [inline]
 SyS_readv+0x27/0x30 fs/read_write.c:1097
 entry_SYSCALL_64_fastpath+0x1f/0x96
RIP: 0033:0x452879
RSP: 002b:00007fa974fbebe8 EFLAGS: 00000212 ORIG_RAX: 0000000000000013
RAX: ffffffffffffffda RBX: 0000000000758020 RCX: 0000000000452879
RDX: 0000000000000001 RSI: 0000000020013000 RDI: 0000000000000014
RBP: 00000000000002ee R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f16f0
R13: 00000000ffffffff R14: 00007fa974fbf6d4 R15: 0000000000000000
FAULT_FLAG_ALLOW_RETRY missing 31
CPU: 1 PID: 11061 Comm: syz-executor7 Not tainted 4.14.0+ #181
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x194/0x257 lib/dump_stack.c:53
 handle_userfault+0x12fa/0x24c0 fs/userfaultfd.c:427
 do_anonymous_page mm/memory.c:3161 [inline]
 handle_pte_fault mm/memory.c:3934 [inline]
 __handle_mm_fault+0x2cc1/0x3ad0 mm/memory.c:4060
 handle_mm_fault+0x334/0x8d0 mm/memory.c:4097
 __do_page_fault+0x5c9/0xc90 arch/x86/mm/fault.c:1429
 do_page_fault+0xee/0x720 arch/x86/mm/fault.c:1504
 page_fault+0x22/0x30 arch/x86/entry/entry_64.S:1088
RIP: 0010:stac arch/x86/include/asm/smap.h:58 [inline]
RIP: 0010:copy_user_handle_tail+0x40/0x80 arch/x86/lib/usercopy_64.c:71
RSP: 0018:ffff8801c5c87970 EFLAGS: 00010246
RAX: 0000000000010000 RBX: 0000000000000000 RCX: ffffc90003673000
RDX: 0000000000010000 RSI: ffffffff84f1870d RDI: 0000000020001fb2
RBP: ffff8801c5c87998 R08: ffffed00384f3c13 R09: ffffed00384f3c13
R10: 0000000000000001 R11: ffffed00384f3c12 R12: 0000000000000001
R13: 0000000020001fb2 R14: ffff8801c279e091 R15: ffff8801c279e000
 copy_user_generic arch/x86/include/asm/uaccess_64.h:37 [inline]
 raw_copy_to_user arch/x86/include/asm/uaccess_64.h:112 [inline]
 _copy_to_user+0x9b/0xc0 lib/usercopy.c:28
 copy_to_user include/linux/uaccess.h:155 [inline]
 rfkill_fop_read+0x3e8/0x720 net/rfkill/core.c:1189
 do_loop_readv_writev fs/read_write.c:694 [inline]
 do_iter_read+0x3db/0x5b0 fs/read_write.c:918
 vfs_readv+0x121/0x1c0 fs/read_write.c:980
 do_readv+0xfc/0x2a0 fs/read_write.c:1013
 SYSC_readv fs/read_write.c:1100 [inline]
 SyS_readv+0x27/0x30 fs/read_write.c:1097
 entry_SYSCALL_64_fastpath+0x1f/0x96
RIP: 0033:0x452879
RSP: 002b:00007fa974fbebe8 EFLAGS: 00000212 ORIG_RAX: 0000000000000013
RAX: ffffffffffffffda RBX: 0000000000758020 RCX: 0000000000452879
RDX: 0000000000000001 RSI: 0000000020013000 RDI: 0000000000000014
RBP: 00000000000002ee R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f16f0
R13: 00000000ffffffff R14: 00007fa974fbf6d4 R15: 0000000000000000
rfkill: input handler disabled
rfkill: input handler enabled
FAULT_FLAG_ALLOW_RETRY missing 31
CPU: 0 PID: 11107 Comm: syz-executor7 Not tainted 4.14.0+ #181
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x194/0x257 lib/dump_stack.c:53
 handle_userfault+0x12fa/0x24c0 fs/userfaultfd.c:427
 do_anonymous_page mm/memory.c:3161 [inline]
 handle_pte_fault mm/memory.c:3934 [inline]
 __handle_mm_fault+0x2cc1/0x3ad0 mm/memory.c:4060
 handle_mm_fault+0x334/0x8d0 mm/memory.c:4097
 __do_page_fault+0x5c9/0xc90 arch/x86/mm/fault.c:1429
 do_page_fault+0xee/0x720 arch/x86/mm/fault.c:1504
 page_fault+0x22/0x30 arch/x86/entry/entry_64.S:1088
RIP: 0010:copy_user_generic_unrolled+0xa0/0xc0 arch/x86/lib/copy_user_64.S:75
RSP: 0018:ffff8801c61ff9a0 EFLAGS: 00010202
RAX: ffffed00384f3c00 RBX: 0000000000000001 RCX: 0000000000000001
RDX: 0000000000000001 RSI: ffff8801c279e650 RDI: 0000000020001fb2
RBP: ffff8801c61ff9d0 R08: ffffed00384f3ccb R09: ffffed00384f3ccb
R10: 0000000000000001 R11: ffffed00384f3cca R12: 0000000020001fb2
R13: ffff8801c279e650 R14: 00007ffffffff000 R15: 0000000020001fb3
 copy_to_user include/linux/uaccess.h:155 [inline]
 rfkill_fop_read+0x3e8/0x720 net/rfkill/core.c:1189
 do_loop_readv_writev fs/read_write.c:694 [inline]
 do_iter_read+0x3db/0x5b0 fs/read_write.c:918
 vfs_readv+0x121/0x1c0 fs/read_write.c:980
 do_readv+0xfc/0x2a0 fs/read_write.c:1013
 SYSC_readv fs/read_write.c:1100 [inline]
 SyS_readv+0x27/0x30 fs/read_write.c:1097
 entry_SYSCALL_64_fastpath+0x1f/0x96
RIP: 0033:0x452879
RSP: 002b:00007fa974fbebe8 EFLAGS: 00000212 ORIG_RAX: 0000000000000013
RAX: ffffffffffffffda RBX: 0000000000758020 RCX: 0000000000452879
RDX: 0000000000000001 RSI: 0000000020013000 RDI: 0000000000000014
RBP: 00000000000002ee R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f16f0
R13: 00000000ffffffff R14: 00007fa974fbf6d4 R15: 0000000000000000
FAULT_FLAG_ALLOW_RETRY missing 31
CPU: 0 PID: 11107 Comm: syz-executor7 Not tainted 4.14.0+ #181
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x194/0x257 lib/dump_stack.c:53
 handle_userfault+0x12fa/0x24c0 fs/userfaultfd.c:427