================================================================== BUG: KASAN: wild-memory-access on address ffe708746ec67000 Read of size 55 by task syz-executor7/23913 CPU: 0 PID: 23913 Comm: syz-executor7 Not tainted 4.9.52-g96a28fc #57 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 ffff8801a5ddf9e8 ffffffff81d93149 ffe708746ec67000 0000000000000037 0000000000000000 ffff8801d01512a0 ffe708746ec67000 ffff8801a5ddfa70 ffffffff8153d08f 0000000000000000 0000000000000001 ffffffff826648db Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xc1/0x128 lib/dump_stack.c:51 [] kasan_report_error mm/kasan/report.c:284 [inline] [] kasan_report.part.1+0x40f/0x500 mm/kasan/report.c:309 [] kasan_report+0x20/0x30 mm/kasan/report.c:296 [] check_memory_region_inline mm/kasan/kasan.c:308 [inline] [] check_memory_region+0x137/0x190 mm/kasan/kasan.c:315 [] kasan_check_read+0x11/0x20 mm/kasan/kasan.c:320 [] __copy_to_user arch/x86/include/asm/uaccess_64.h:182 [inline] [] sg_read_oxfer drivers/scsi/sg.c:1978 [inline] [] sg_read+0x124b/0x1400 drivers/scsi/sg.c:520 [] do_loop_readv_writev.part.17+0x141/0x1e0 fs/read_write.c:714 [] do_loop_readv_writev fs/read_write.c:880 [inline] [] do_readv_writev+0x520/0x750 fs/read_write.c:874 [] vfs_readv+0x84/0xc0 fs/read_write.c:898 [] do_readv+0xe6/0x250 fs/read_write.c:924 [] SYSC_readv fs/read_write.c:1011 [inline] [] SyS_readv+0x27/0x30 fs/read_write.c:1008 [] entry_SYSCALL_64_fastpath+0x23/0xc6 ================================================================== device syz5 entered promiscuous mode syz-executor3 (23936) used greatest stack depth: 24064 bytes left netlink: 8 bytes leftover after parsing attributes in process `syz-executor5'. netlink: 8 bytes leftover after parsing attributes in process `syz-executor5'. binder: binder_mmap: 24015 2007d000-2007e000 bad vm_flags failed -1 binder: binder_mmap: 24015 2007d000-2007e000 bad vm_flags failed -1 blk_update_request: I/O error, dev loop0, sector 0 FAULT_FLAG_ALLOW_RETRY missing 30 CPU: 1 PID: 24027 Comm: syz-executor4 Tainted: G B 4.9.52-g96a28fc #57 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 ffff8801c86279f0 ffffffff81d93149 ffff8801c8627cd0 0000000000000000 ffff8801c9295490 ffff8801c8627bc0 ffff8801c9295380 ffff8801c8627be8 ffffffff81660dc8 ffff8801c8627b40 0000000000718028 00000001ca431067 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xc1/0x128 lib/dump_stack.c:51 [] handle_userfault+0xa48/0x1300 fs/userfaultfd.c:323 [] do_anonymous_page mm/memory.c:2747 [inline] [] handle_pte_fault mm/memory.c:3488 [inline] [] __handle_mm_fault mm/memory.c:3577 [inline] [] handle_mm_fault+0x1fd1/0x2530 mm/memory.c:3614 [] __do_page_fault+0x4eb/0xbd0 arch/x86/mm/fault.c:1397 [] do_page_fault+0x27/0x30 arch/x86/mm/fault.c:1460 [] page_fault+0x28/0x30 arch/x86/entry/entry_64.S:1012 [] SYSC_sched_setscheduler kernel/sched/core.c:4648 [inline] [] SyS_sched_setscheduler+0xd/0x20 kernel/sched/core.c:4641 [] entry_SYSCALL_64_fastpath+0x23/0xc6 netlink: 1 bytes leftover after parsing attributes in process `syz-executor3'. netlink: 1 bytes leftover after parsing attributes in process `syz-executor3'. keychord: using input dev AT Translated Set 2 keyboard for fevent keychord: invalid keycode count 0 device gre0 entered promiscuous mode TCP: request_sock_TCP: Possible SYN flooding on port 20018. Sending cookies. Check SNMP counters. device lo entered promiscuous mode device gre0 entered promiscuous mode device gre0 left promiscuous mode netlink: 5 bytes leftover after parsing attributes in process `syz-executor1'. netlink: 5 bytes leftover after parsing attributes in process `syz-executor1'. SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=24311 comm=syz-executor7 FAULT_FLAG_ALLOW_RETRY missing 30 FAULT_FLAG_ALLOW_RETRY missing 30 CPU: 0 PID: 24321 Comm: syz-executor2 Tainted: G B 4.9.52-g96a28fc #57 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 ffff8801a4cb74e0 ffffffff81d93149 ffff8801a4cb77c0 0000000000000000 ffff8801a7ec4710 ffff8801a4cb76b0 ffff8801a7ec4600 ffff8801a4cb76d8 ffffffff81660dc8 ffff8801a4cb7630 0000000000000000 00000001ab4ff067 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xc1/0x128 lib/dump_stack.c:51 [] handle_userfault+0xa48/0x1300 fs/userfaultfd.c:323 [] do_anonymous_page mm/memory.c:2747 [inline] [] handle_pte_fault mm/memory.c:3488 [inline] [] __handle_mm_fault mm/memory.c:3577 [inline] [] handle_mm_fault+0x1fd1/0x2530 mm/memory.c:3614 [] __do_page_fault+0x4eb/0xbd0 arch/x86/mm/fault.c:1397 [] do_page_fault+0x27/0x30 arch/x86/mm/fault.c:1460 [] page_fault+0x28/0x30 arch/x86/entry/entry_64.S:1012 [] do_ip_setsockopt.isra.11+0x1977/0x2960 net/ipv4/ip_sockglue.c:1146 [] ip_setsockopt+0x3a/0xb0 net/ipv4/ip_sockglue.c:1235 [] tcp_setsockopt+0x82/0xd0 net/ipv4/tcp.c:2705 [] sock_common_setsockopt+0x95/0xd0 net/core/sock.c:2705 [] SYSC_setsockopt net/socket.c:1771 [inline] [] SyS_setsockopt+0x160/0x250 net/socket.c:1750 [] entry_SYSCALL_64_fastpath+0x23/0xc6 CPU: 0 PID: 24353 Comm: syz-executor2 Tainted: G B 4.9.52-g96a28fc #57 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 ffff8801a737f6a0 ffffffff81d93149 ffff8801a737f980 0000000000000000 ffff8801a7ec4710 ffff8801a737f870 ffff8801a7ec4600 ffff8801a737f898 ffffffff81660dc8 ffff8801a737f7f0 000000000000000f 00000001ab4ff067 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xc1/0x128 lib/dump_stack.c:51 [] handle_userfault+0xa48/0x1300 fs/userfaultfd.c:323 [] do_anonymous_page mm/memory.c:2747 [inline] [] handle_pte_fault mm/memory.c:3488 [inline] [] __handle_mm_fault mm/memory.c:3577 [inline] [] handle_mm_fault+0x1fd1/0x2530 mm/memory.c:3614 [] __do_page_fault+0x4eb/0xbd0 arch/x86/mm/fault.c:1397 [] do_page_fault+0x27/0x30 arch/x86/mm/fault.c:1460 [] page_fault+0x28/0x30 arch/x86/entry/entry_64.S:1012 [] __vfs_write+0x103/0x680 fs/read_write.c:510 [] vfs_write+0x170/0x4e0 fs/read_write.c:560 [] SYSC_write fs/read_write.c:607 [inline] [] SyS_write+0xd9/0x1b0 fs/read_write.c:599 [] entry_SYSCALL_64_fastpath+0x23/0xc6 netlink: 1 bytes leftover after parsing attributes in process `syz-executor1'. sg_write: data in/out 65500/34 bytes for SCSI command 0xfc-- guessing data in; program syz-executor4 not setting count and/or reply_len properly SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=24513 comm=syz-executor1 sg_write: data in/out 65500/34 bytes for SCSI command 0xfc-- guessing data in; program syz-executor4 not setting count and/or reply_len properly netlink: 1 bytes leftover after parsing attributes in process `syz-executor5'. device syz7 entered promiscuous mode device syz7 left promiscuous mode binder: 24629:24695 ioctl 8924 204ea000 returned -22 sock: process `syz-executor3' is using obsolete getsockopt SO_BSDCOMPAT device syz7 entered promiscuous mode sock: sock_set_timeout: `syz-executor0' (pid 24845) tries to set negative timeout SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48478 sclass=netlink_route_socket pig=25011 comm=syz-executor7 IPv6: NLM_F_CREATE should be specified when creating new route device gre0 entered promiscuous mode SELinux: unrecognized netlink message: protocol=6 nlmsg_type=770 sclass=netlink_xfrm_socket pig=25014 comm=syz-executor1 SELinux: unrecognized netlink message: protocol=6 nlmsg_type=770 sclass=netlink_xfrm_socket pig=25014 comm=syz-executor1 SELinux: unrecognized netlink message: protocol=6 nlmsg_type=770 sclass=netlink_xfrm_socket pig=25040 comm=syz-executor1 SELinux: unrecognized netlink message: protocol=6 nlmsg_type=770 sclass=netlink_xfrm_socket pig=25047 comm=syz-executor1 SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48478 sclass=netlink_route_socket pig=25030 comm=syz-executor7 binder_alloc: binder_alloc_mmap_handler: 25177 204f0000-204f4000 already mapped failed -16 binder_alloc: binder_alloc_mmap_handler: 25177 204f0000-204f4000 already mapped failed -16 pktgen: kernel_thread() failed for cpu 0 pktgen: Cannot create thread for cpu 0 (-4) pktgen: kernel_thread() failed for cpu 1 pktgen: Cannot create thread for cpu 1 (-4) pktgen: Initialization failed for all threads pktgen: kernel_thread() failed for cpu 0 pktgen: Cannot create thread for cpu 0 (-4) pktgen: kernel_thread() failed for cpu 1 pktgen: Cannot create thread for cpu 1 (-4) pktgen: Initialization failed for all threads pktgen: kernel_thread() failed for cpu 0 pktgen: Cannot create thread for cpu 0 (-4) pktgen: kernel_thread() failed for cpu 1 pktgen: Cannot create thread for cpu 1 (-4) pktgen: Initialization failed for all threads pktgen: kernel_thread() failed for cpu 0 pktgen: Cannot create thread for cpu 0 (-4) pktgen: kernel_thread() failed for cpu 1 pktgen: Cannot create thread for cpu 1 (-4) pktgen: Initialization failed for all threads IPVS: Creating netns size=2536 id=49 device gre0 entered promiscuous mode devpts: called with bogus options IPVS: Creating netns size=2536 id=50 IPVS: Creating netns size=2536 id=51 binder: 25397:25398 ioctl 5420 20185ffc returned -22 binder: 25433:25435 ioctl 4b45 20306000 returned -22 IPVS: Creating netns size=2536 id=52 binder: 25397:25440 ioctl 5420 20185ffc returned -22 binder: 25433:25435 ioctl 4b45 20306000 returned -22 ALSA: seq fatal error: cannot create timer (-19) ALSA: seq fatal error: cannot create timer (-19) qtaguid: iface_stat: create6(lo): no inet dev program syz-executor6 is using a deprecated SCSI ioctl, please convert it to SG_IO sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 program syz-executor6 is using a deprecated SCSI ioctl, please convert it to SG_IO sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 device gre0 entered promiscuous mode pktgen: kernel_thread() failed for cpu 0 pktgen: Cannot create thread for cpu 0 (-4) pktgen: kernel_thread() failed for cpu 1 pktgen: Cannot create thread for cpu 1 (-4) pktgen: Initialization failed for all threads pktgen: kernel_thread() failed for cpu 0 pktgen: Cannot create thread for cpu 0 (-4) IPVS: Creating netns size=2536 id=53 device gre0 entered promiscuous mode binder: 25666:25668 ioctl 5404 207dcfec returned -22 device gre0 entered promiscuous mode devpts: called with bogus options IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready devpts: called with bogus options IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready binder: 25711:25714 ioctl 4c82 0 returned -22 binder: 25701:25704 ioctl 4c00 ffffffffffffffff returned -22 binder: 25711:25714 ioctl 4c80 ffffffffffffffff returned -22 binder: 25701:25723 ioctl 4c00 ffffffffffffffff returned -22 binder: 25711:25714 ioctl 400454d9 20167fd8 returned -22 binder: 25711:25714 ioctl 4c82 0 returned -22 binder: 25711:25732 ioctl 4c80 ffffffffffffffff returned -22 binder: 25711:25736 ioctl 400454d9 20167fd8 returned -22 nla_parse: 13 callbacks suppressed netlink: 1 bytes leftover after parsing attributes in process `syz-executor1'. netlink: 1 bytes leftover after parsing attributes in process `syz-executor1'. FAULT_FLAG_ALLOW_RETRY missing 30 FAULT_FLAG_ALLOW_RETRY missing 30 CPU: 0 PID: 25752 Comm: syz-executor2 Tainted: G B 4.9.52-g96a28fc #57 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 ffff8801c594f470 ffffffff81d93149 ffff8801c594f750 0000000000000000 ffff8801a7ec4d10 ffff8801c594f640 ffff8801a7ec4c00 ffff8801c594f668 ffffffff81660dc8 ffff8801c594f5c0 ffff8801c594f500 00000001c4762067 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xc1/0x128 lib/dump_stack.c:51 [] handle_userfault+0xa48/0x1300 fs/userfaultfd.c:323 [] do_anonymous_page mm/memory.c:2747 [inline] [] handle_pte_fault mm/memory.c:3488 [inline] [] __handle_mm_fault mm/memory.c:3577 [inline] [] handle_mm_fault+0x1fd1/0x2530 mm/memory.c:3614 [] __do_page_fault+0x4eb/0xbd0 arch/x86/mm/fault.c:1397 [] do_page_fault+0x27/0x30 arch/x86/mm/fault.c:1460 [] page_fault+0x28/0x30 arch/x86/entry/entry_64.S:1012 [] tty_mode_ioctl+0x931/0x9c0 drivers/tty/tty_ioctl.c:970 [] n_tty_ioctl_helper+0x40/0x360 drivers/tty/tty_ioctl.c:1161 [] n_tty_ioctl+0x148/0x2d0 drivers/tty/n_tty.c:2437 [] tty_ioctl+0x733/0x2170 drivers/tty/tty_io.c:2992 [] vfs_ioctl fs/ioctl.c:43 [inline] [] do_vfs_ioctl+0x1aa/0x10c0 fs/ioctl.c:679 [] SYSC_ioctl fs/ioctl.c:694 [inline] [] SyS_ioctl+0x8f/0xc0 fs/ioctl.c:685 [] entry_SYSCALL_64_fastpath+0x23/0xc6 CPU: 0 PID: 25774 Comm: syz-executor2 Tainted: G B 4.9.52-g96a28fc #57 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 ffff8801cfabf6d0 ffffffff81d93149 ffff8801cfabf9b0 0000000000000000 ffff8801a7ec4d10 ffff8801cfabf8a0 ffff8801a7ec4c00 ffff8801cfabf8c8 ffffffff81660dc8 ffff8801cfabf820 ffffffff84649140 00000001c4762067 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xc1/0x128 lib/dump_stack.c:51 [] handle_userfault+0xa48/0x1300 fs/userfaultfd.c:323 [] do_anonymous_page mm/memory.c:2747 [inline] [] handle_pte_fault mm/memory.c:3488 [inline] [] __handle_mm_fault mm/memory.c:3577 [inline] [] handle_mm_fault+0x1fd1/0x2530 mm/memory.c:3614 [] __do_page_fault+0x4eb/0xbd0 arch/x86/mm/fault.c:1397 [] do_page_fault+0x27/0x30 arch/x86/mm/fault.c:1460 [] page_fault+0x28/0x30 arch/x86/entry/entry_64.S:1012 [] inet_ioctl+0x89/0x1c0 net/ipv4/af_inet.c:878 [] sock_do_ioctl+0x65/0xb0 net/socket.c:892 [] sock_ioctl+0x2e0/0x3d0 net/socket.c:978 [] vfs_ioctl fs/ioctl.c:43 [inline] [] do_vfs_ioctl+0x1aa/0x10c0 fs/ioctl.c:679 [] SYSC_ioctl fs/ioctl.c:694 [inline] [] SyS_ioctl+0x8f/0xc0 fs/ioctl.c:685 [] entry_SYSCALL_64_fastpath+0x23/0xc6 9pnet_virtio: no channels available for device ./file0 9pnet_virtio: no channels available for device ./file0 device lo left promiscuous mode SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=25882 comm=syz-executor4 device lo entered promiscuous mode SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=25904 comm=syz-executor4 SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=25904 comm=syz-executor4 SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=25882 comm=syz-executor4 SELinux: unrecognized netlink message: protocol=0 nlmsg_type=202 sclass=netlink_route_socket pig=25882 comm=syz-executor4 device lo left promiscuous mode SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=25882 comm=syz-executor4 SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=25882 comm=syz-executor4 SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=25919 comm=syz-executor4 SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=25904 comm=syz-executor4 SELinux: unrecognized netlink message: protocol=0 nlmsg_type=202 sclass=netlink_route_socket pig=25904 comm=syz-executor4 FAULT_FLAG_ALLOW_RETRY missing 30 FAULT_FLAG_ALLOW_RETRY missing 30 CPU: 1 PID: 25953 Comm: syz-executor0 Tainted: G B 4.9.52-g96a28fc #57 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 ffff8801c87a78a0 ffffffff81d93149 ffff8801c87a7b80 0000000000000000 ffff8801c9294a10 ffff8801c87a7a70 ffff8801c9294900 ffff8801c87a7a98 ffffffff81660dc8 ffff8801c87a79f0 ffff8801aa09b000 00000001cf688067 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xc1/0x128 lib/dump_stack.c:51 [] handle_userfault+0xa48/0x1300 fs/userfaultfd.c:323 [] do_anonymous_page mm/memory.c:2747 [inline] [] handle_pte_fault mm/memory.c:3488 [inline] [] __handle_mm_fault mm/memory.c:3577 [inline] [] handle_mm_fault+0x1fd1/0x2530 mm/memory.c:3614 [] __do_page_fault+0x4eb/0xbd0 arch/x86/mm/fault.c:1397 [] do_page_fault+0x27/0x30 arch/x86/mm/fault.c:1460 [] page_fault+0x28/0x30 arch/x86/entry/entry_64.S:1012 [] move_addr_to_kernel net/socket.c:1568 [inline] [] SYSC_connect+0x288/0x310 net/socket.c:1553 [] SyS_connect+0x24/0x30 net/socket.c:1543 [] entry_SYSCALL_64_fastpath+0x23/0xc6 device lo entered promiscuous mode qtaguid: iface_stat: create(lo): no inet dev qtaguid: iface_stat: create6(lo): no inet dev IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready qtaguid: iface_stat: create6(lo): no inet dev device lo left promiscuous mode device lo entered promiscuous mode qtaguid: iface_stat: create(lo): no inet dev qtaguid: iface_stat: create6(lo): no inet dev IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready qtaguid: iface_stat: create6(lo): no inet dev device lo left promiscuous mode CPU: 1 PID: 25966 Comm: syz-executor0 Tainted: G B 4.9.52-g96a28fc #57 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 ffff8801aa96f9b0 ffffffff81d93149 ffff8801aa96fc90 0000000000000000 ffff8801c9294a10 ffff8801aa96fb80 ffff8801c9294900 ffff8801aa96fba8 ffffffff81660dc8 ffff8801aa96fb00 ffffffff8418d980 00000001cf688067 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xc1/0x128 lib/dump_stack.c:51 [] handle_userfault+0xa48/0x1300 fs/userfaultfd.c:323 [] do_anonymous_page mm/memory.c:2747 [inline] [] handle_pte_fault mm/memory.c:3488 [inline] [] __handle_mm_fault mm/memory.c:3577 [inline] [] handle_mm_fault+0x1fd1/0x2530 mm/memory.c:3614 [] __do_page_fault+0x4eb/0xbd0 arch/x86/mm/fault.c:1397 [] do_page_fault+0x27/0x30 arch/x86/mm/fault.c:1460 [] page_fault+0x28/0x30 arch/x86/entry/entry_64.S:1012 [] entry_SYSCALL_64_fastpath+0x23/0xc6 ALSA: seq fatal error: cannot create timer (-22) device gre0 entered promiscuous mode netlink: 5 bytes leftover after parsing attributes in process `syz-executor6'. device gre0 entered promiscuous mode netlink: 5 bytes leftover after parsing attributes in process `syz-executor6'. ALSA: seq fatal error: cannot create timer (-22) 9pnet_virtio: no channels available for device ./file0 qtaguid: iface_stat: create(lo): no inet dev netlink: 5 bytes leftover after parsing attributes in process `syz-executor1'. qtaguid: iface_stat: create6(lo): no inet dev IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'. qtaguid: iface_stat: create6(lo): no inet dev device syz0 entered promiscuous mode IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'. qtaguid: iface_stat: create6(lo): no inet dev device syz0 left promiscuous mode device syz0 entered promiscuous mode PF_BRIDGE: RTM_SETLINK with unknown ifindex PF_BRIDGE: RTM_SETLINK with unknown ifindex FAULT_FLAG_ALLOW_RETRY missing 30 CPU: 1 PID: 26271 Comm: syz-executor0 Tainted: G B 4.9.52-g96a28fc #57 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 ffff8801a85c78d0 ffffffff81d93149 ffff8801a85c7bb0 0000000000000000 ffff8801c9294e90 ffff8801a85c7aa0 ffff8801c9294d80 ffff8801a85c7ac8 ffffffff81660dc8 ffff8801a85c7a20 0000000000000000 00000001cace0067 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xc1/0x128 lib/dump_stack.c:51 [] handle_userfault+0xa48/0x1300 fs/userfaultfd.c:323 [] do_anonymous_page mm/memory.c:2747 [inline] [] handle_pte_fault mm/memory.c:3488 [inline] [] __handle_mm_fault mm/memory.c:3577 [inline] [] handle_mm_fault+0x1fd1/0x2530 mm/memory.c:3614 [] __do_page_fault+0x4eb/0xbd0 arch/x86/mm/fault.c:1397 [] do_page_fault+0x27/0x30 arch/x86/mm/fault.c:1460 [] page_fault+0x28/0x30 arch/x86/entry/entry_64.S:1012 [] SyS_rt_sigtimedwait+0x2d/0x40 kernel/signal.c:2819 [] entry_SYSCALL_64_fastpath+0x23/0xc6 FAULT_FLAG_ALLOW_RETRY missing 30 CPU: 1 PID: 26258 Comm: syz-executor0 Tainted: G B 4.9.52-g96a28fc #57 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 ffff8801d5b679a0 ffffffff81d93149 ffff8801d5b67c80 0000000000000000 ffff8801c9294e90 ffff8801d5b67b70 ffff8801c9294d80 ffff8801d5b67b98 ffffffff81660dc8 ffff8801d5b67af0 ffff8801d5b67bb8 00000001cace0067 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xc1/0x128 lib/dump_stack.c:51 [] handle_userfault+0xa48/0x1300 fs/userfaultfd.c:323 [] do_anonymous_page mm/memory.c:2747 [inline] [] handle_pte_fault mm/memory.c:3488 [inline] [] __handle_mm_fault mm/memory.c:3577 [inline] [] handle_mm_fault+0x1fd1/0x2530 mm/memory.c:3614 [] __do_page_fault+0x4eb/0xbd0 arch/x86/mm/fault.c:1397 [] do_page_fault+0x27/0x30 arch/x86/mm/fault.c:1460 [] page_fault+0x28/0x30 arch/x86/entry/entry_64.S:1012 [] entry_SYSCALL_64_fastpath+0x23/0xc6 devpts: called with bogus options devpts: called with bogus options device gre0 entered promiscuous mode pktgen: kernel_thread() failed for cpu 0 pktgen: Cannot create thread for cpu 0 (-4) netlink: 3 bytes leftover after parsing attributes in process `syz-executor5'. netlink: 3 bytes leftover after parsing attributes in process `syz-executor5'. pktgen: kernel_thread() failed for cpu 1 pktgen: Cannot create thread for cpu 1 (-4) pktgen: Initialization failed for all threads netlink: 3 bytes leftover after parsing attributes in process `syz-executor5'. pktgen: kernel_thread() failed for cpu 0 pktgen: Cannot create thread for cpu 0 (-4) pktgen: kernel_thread() failed for cpu 1 pktgen: Cannot create thread for cpu 1 (-4) pktgen: Initialization failed for all threads keychord: Insufficient bytes present for keycount 186 keychord: Insufficient bytes present for keycount 186 device lo entered promiscuous mode