======================================================
WARNING: possible circular locking dependency detected
4.14.0-next-20171117+ #45 Not tainted
------------------------------------------------------
syz-executor2/24687 is trying to acquire lock:
 (console_lock){+.+.}, at: [<ffffffff8287d82d>] vcs_write+0x14d/0xca0 drivers/tty/vt/vc_screen.c:397

but task is already holding lock:
 (&pipe->mutex/1){+.+.}, at: [<ffffffff81b00fb6>] pipe_lock_nested fs/pipe.c:67 [inline]
 (&pipe->mutex/1){+.+.}, at: [<ffffffff81b00fb6>] pipe_lock+0x56/0x70 fs/pipe.c:75

which lock already depends on the new lock.


the existing dependency chain (in reverse order) is:

-> #3 (&pipe->mutex/1){+.+.}:
       lock_acquire+0x1d5/0x580 kernel/locking/lockdep.c:4004
       __mutex_lock_common kernel/locking/mutex.c:756 [inline]
       __mutex_lock+0x16f/0x1a80 kernel/locking/mutex.c:893
       mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:908
       pipe_lock_nested fs/pipe.c:67 [inline]
       pipe_lock+0x56/0x70 fs/pipe.c:75
       iter_file_splice_write+0x264/0xf30 fs/splice.c:699
       do_splice_from fs/splice.c:851 [inline]
       do_splice fs/splice.c:1147 [inline]
       SYSC_splice fs/splice.c:1402 [inline]
       SyS_splice+0x7d5/0x1630 fs/splice.c:1382
       entry_SYSCALL_64_fastpath+0x1f/0x96

-> #2 (sb_writers){.+.+}:
       finish_lock_switch kernel/sched/sched.h:1360 [inline]
       finish_task_switch+0x1aa/0x740 kernel/sched/core.c:2666

-> #1 ((completion)&req.done){+.+.}:
       lock_acquire+0x1d5/0x580 kernel/locking/lockdep.c:4004
       complete_acquire include/linux/completion.h:40 [inline]
       __wait_for_common kernel/sched/completion.c:109 [inline]
       wait_for_common kernel/sched/completion.c:123 [inline]
       wait_for_completion+0xcb/0x7b0 kernel/sched/completion.c:144
       devtmpfs_create_node+0x32b/0x4a0 drivers/base/devtmpfs.c:115
       device_add+0x120f/0x1640 drivers/base/core.c:1824
       device_create_groups_vargs+0x1f3/0x250 drivers/base/core.c:2430
       device_create_vargs drivers/base/core.c:2470 [inline]
       device_create+0xda/0x110 drivers/base/core.c:2506
       vcs_make_sysfs+0x35/0x60 drivers/tty/vt/vc_screen.c:629
       vc_allocate+0x4b7/0x6b0 drivers/tty/vt/vt.c:797
       con_install+0x52/0x440 drivers/tty/vt/vt.c:2876
       tty_driver_install_tty drivers/tty/tty_io.c:1215 [inline]
       tty_init_dev+0xf6/0x4a0 drivers/tty/tty_io.c:1315
       tty_open_by_driver drivers/tty/tty_io.c:1942 [inline]
       tty_open+0x608/0xab0 drivers/tty/tty_io.c:1990
       chrdev_open+0x257/0x730 fs/char_dev.c:417
       do_dentry_open+0x682/0xd70 fs/open.c:752
       vfs_open+0x107/0x230 fs/open.c:866
       do_last fs/namei.c:3388 [inline]
       path_openat+0x1157/0x3530 fs/namei.c:3528
       do_filp_open+0x25b/0x3b0 fs/namei.c:3563
       do_sys_open+0x502/0x6d0 fs/open.c:1059
       SYSC_open fs/open.c:1077 [inline]
       SyS_open+0x2d/0x40 fs/open.c:1072
       entry_SYSCALL_64_fastpath+0x1f/0x96

-> #0 (console_lock){+.+.}:
       check_prevs_add kernel/locking/lockdep.c:2031 [inline]
       validate_chain kernel/locking/lockdep.c:2473 [inline]
       __lock_acquire+0x3498/0x47f0 kernel/locking/lockdep.c:3500
       lock_acquire+0x1d5/0x580 kernel/locking/lockdep.c:4004
       console_lock+0x4b/0x80 kernel/printk/printk.c:2047
       vcs_write+0x14d/0xca0 drivers/tty/vt/vc_screen.c:397
       __vfs_write+0xef/0x970 fs/read_write.c:480
       __kernel_write+0xfe/0x350 fs/read_write.c:501
       write_pipe_buf+0x175/0x220 fs/splice.c:797
       splice_from_pipe_feed fs/splice.c:502 [inline]
       __splice_from_pipe+0x328/0x730 fs/splice.c:626
       splice_from_pipe+0x1e9/0x330 fs/splice.c:661
       default_file_splice_write+0x40/0x90 fs/splice.c:809
       do_splice_from fs/splice.c:851 [inline]
       do_splice fs/splice.c:1147 [inline]
       SYSC_splice fs/splice.c:1402 [inline]
       SyS_splice+0x7d5/0x1630 fs/splice.c:1382
       entry_SYSCALL_64_fastpath+0x1f/0x96

other info that might help us debug this:

Chain exists of:
  console_lock --> sb_writers --> &pipe->mutex/1

 Possible unsafe locking scenario:

       CPU0                    CPU1
       ----                    ----
  lock(&pipe->mutex/1);
                               lock(sb_writers);
                               lock(&pipe->mutex/1);
  lock(console_lock);

 *** DEADLOCK ***

1 lock held by syz-executor2/24687:
 #0:  (&pipe->mutex/1){+.+.}, at: [<ffffffff81b00fb6>] pipe_lock_nested fs/pipe.c:67 [inline]
 #0:  (&pipe->mutex/1){+.+.}, at: [<ffffffff81b00fb6>] pipe_lock+0x56/0x70 fs/pipe.c:75

stack backtrace:
CPU: 0 PID: 24687 Comm: syz-executor2 Not tainted 4.14.0-next-20171117+ #45
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x194/0x257 lib/dump_stack.c:53
 print_circular_bug+0x42d/0x610 kernel/locking/lockdep.c:1271
 check_prev_add+0x666/0x15f0 kernel/locking/lockdep.c:1914
 check_prevs_add kernel/locking/lockdep.c:2031 [inline]
 validate_chain kernel/locking/lockdep.c:2473 [inline]
 __lock_acquire+0x3498/0x47f0 kernel/locking/lockdep.c:3500
 lock_acquire+0x1d5/0x580 kernel/locking/lockdep.c:4004
 console_lock+0x4b/0x80 kernel/printk/printk.c:2047
 vcs_write+0x14d/0xca0 drivers/tty/vt/vc_screen.c:397
 __vfs_write+0xef/0x970 fs/read_write.c:480
 __kernel_write+0xfe/0x350 fs/read_write.c:501
 write_pipe_buf+0x175/0x220 fs/splice.c:797
 splice_from_pipe_feed fs/splice.c:502 [inline]
 __splice_from_pipe+0x328/0x730 fs/splice.c:626
 splice_from_pipe+0x1e9/0x330 fs/splice.c:661
 default_file_splice_write+0x40/0x90 fs/splice.c:809
 do_splice_from fs/splice.c:851 [inline]
 do_splice fs/splice.c:1147 [inline]
 SYSC_splice fs/splice.c:1402 [inline]
 SyS_splice+0x7d5/0x1630 fs/splice.c:1382
 entry_SYSCALL_64_fastpath+0x1f/0x96
RIP: 0033:0x452879
RSP: 002b:00007f216464cbe8 EFLAGS: 00000212 ORIG_RAX: 0000000000000113
RAX: ffffffffffffffda RBX: 0000000000758020 RCX: 0000000000452879
RDX: 0000000000000013 RSI: 0000000000000000 RDI: 0000000000000014
RBP: 0000000000000086 R08: 00000000fffff5fc R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f3dd8
R13: 00000000ffffffff R14: 00007f216464d6d4 R15: 0000000000000000
nla_parse: 9 callbacks suppressed
netlink: 3 bytes leftover after parsing attributes in process `syz-executor5'.
netlink: 3 bytes leftover after parsing attributes in process `syz-executor5'.
netlink: 3 bytes leftover after parsing attributes in process `syz-executor5'.
RDS: rds_bind could not find a transport for 172.20.1.170, load rds_tcp or rds_rdma?
FAULT_FLAG_ALLOW_RETRY missing 30
FAULT_FLAG_ALLOW_RETRY missing 30
CPU: 0 PID: 24789 Comm: syz-executor5 Not tainted 4.14.0-next-20171117+ #45
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x194/0x257 lib/dump_stack.c:53
 handle_userfault+0x12fa/0x24c0 fs/userfaultfd.c:427
 do_anonymous_page mm/memory.c:3121 [inline]
 handle_pte_fault mm/memory.c:3934 [inline]
 __handle_mm_fault+0x2e8c/0x3ad0 mm/memory.c:4060
 handle_mm_fault+0x334/0x8d0 mm/memory.c:4097
 __do_page_fault+0x5c9/0xc90 arch/x86/mm/fault.c:1429
 do_page_fault+0xee/0x720 arch/x86/mm/fault.c:1504
 page_fault+0x22/0x30 arch/x86/entry/entry_64.S:1088
RIP: 0010:fault_in_pages_readable include/linux/pagemap.h:601 [inline]
RIP: 0010:iov_iter_fault_in_readable+0x1a7/0x410 lib/iov_iter.c:421
RSP: 0018:ffff880194c4f928 EFLAGS: 00010246
RAX: 0000000000010000 RBX: 0000000020011fd2 RCX: ffffffff825008b1
RDX: 00000000000000fc RSI: ffffc90003f59000 RDI: ffff880194c4fd28
RBP: ffff880194c4fa08 R08: ffff8801c6e64f78 R09: 1ffff10032989edf
R10: ffff8801ce9ec480 R11: ffff8801ce9ec480 R12: 1ffff10032989f28
R13: ffff880194c4f9e0 R14: 0000000000000000 R15: ffff880194c4fd20
 generic_perform_write+0x200/0x600 mm/filemap.c:3129
 __generic_file_write_iter+0x366/0x5b0 mm/filemap.c:3264
 generic_file_write_iter+0x399/0x7a0 mm/filemap.c:3292
 call_write_iter include/linux/fs.h:1772 [inline]
 new_sync_write fs/read_write.c:469 [inline]
 __vfs_write+0x68a/0x970 fs/read_write.c:482
 vfs_write+0x18f/0x510 fs/read_write.c:544
 SYSC_write fs/read_write.c:589 [inline]
 SyS_write+0xef/0x220 fs/read_write.c:581
 entry_SYSCALL_64_fastpath+0x1f/0x96
RIP: 0033:0x452879
RSP: 002b:00007fcd12294be8 EFLAGS: 00000212 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 0000000000758020 RCX: 0000000000452879
RDX: 0000000000000030 RSI: 0000000020011fd2 RDI: 0000000000000015
RBP: 0000000000000058 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006ed8e0
R13: 00000000ffffffff R14: 00007fcd122956d4 R15: 0000000000000000
RDS: rds_bind could not find a transport for 172.20.1.170, load rds_tcp or rds_rdma?
CPU: 0 PID: 24810 Comm: syz-executor5 Not tainted 4.14.0-next-20171117+ #45
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x194/0x257 lib/dump_stack.c:53
 handle_userfault+0x12fa/0x24c0 fs/userfaultfd.c:427
 do_anonymous_page mm/memory.c:3121 [inline]
 handle_pte_fault mm/memory.c:3934 [inline]
 __handle_mm_fault+0x2e8c/0x3ad0 mm/memory.c:4060
 handle_mm_fault+0x334/0x8d0 mm/memory.c:4097
 __do_page_fault+0x5c9/0xc90 arch/x86/mm/fault.c:1429
 do_page_fault+0xee/0x720 arch/x86/mm/fault.c:1504
 page_fault+0x22/0x30 arch/x86/entry/entry_64.S:1088
RIP: 0010:do_strnlen_user lib/strnlen_user.c:49 [inline]
RIP: 0010:strnlen_user+0x15c/0x300 lib/strnlen_user.c:118
RSP: 0018:ffff8801c2b37db8 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 0000000020012000 RCX: ffffffff82598457
RDX: 8080808080808080 RSI: ffffc90004361000 RDI: ffff8801c2b37e10
RBP: ffff8801c2b37e70 R08: ffffed003afe1278 R09: ffffed003afe1278
R10: 0000000000000001 R11: ffffed003afe1278 R12: ffff8801c2b37e48
R13: 0000000000000000 R14: 1ffff10038566fbd R15: 0000000000001000
 strndup_user+0x28/0xb0 mm/util.c:187
 SYSC_request_key security/keys/keyctl.c:186 [inline]
 SyS_request_key+0xbb/0x2a0 security/keys/keyctl.c:158
 entry_SYSCALL_64_fastpath+0x1f/0x96
RIP: 0033:0x452879
RSP: 002b:00007fcd12231be8 EFLAGS: 00000212 ORIG_RAX: 00000000000000f9
RAX: ffffffffffffffda RBX: 0000000000758248 RCX: 0000000000452879
RDX: 0000000020012000 RSI: 0000000020000000 RDI: 0000000020000ffa
RBP: 000000000000005e R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006ed970
R13: 00000000ffffffff R14: 00007fcd122326d4 R15: 0000000000000013
FAULT_FLAG_ALLOW_RETRY missing 30
FAULT_FLAG_ALLOW_RETRY missing 30
CPU: 0 PID: 24903 Comm: syz-executor5 Not tainted 4.14.0-next-20171117+ #45
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x194/0x257 lib/dump_stack.c:53
 handle_userfault+0x12fa/0x24c0 fs/userfaultfd.c:427
 do_anonymous_page mm/memory.c:3121 [inline]
 handle_pte_fault mm/memory.c:3934 [inline]
 __handle_mm_fault+0x2e8c/0x3ad0 mm/memory.c:4060
 handle_mm_fault+0x334/0x8d0 mm/memory.c:4097
 __do_page_fault+0x5c9/0xc90 arch/x86/mm/fault.c:1429
 do_page_fault+0xee/0x720 arch/x86/mm/fault.c:1504
 page_fault+0x22/0x30 arch/x86/entry/entry_64.S:1088
RIP: 0010:do_strnlen_user lib/strnlen_user.c:49 [inline]
RIP: 0010:strnlen_user+0x15c/0x300 lib/strnlen_user.c:118
RSP: 0018:ffff8801c4f6fdb8 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 0000000020012000 RCX: ffffffff82598457
RDX: 8080808080808080 RSI: ffffc90004361000 RDI: ffff8801c4f6fe10
RBP: ffff8801c4f6fe70 R08: ffffed003a82dde0 R09: ffffed003a82dde0
R10: 0000000000000001 R11: ffffed003a82dde0 R12: ffff8801c4f6fe48
R13: 0000000000000000 R14: 1ffff100389edfbd R15: 0000000000001000
 strndup_user+0x28/0xb0 mm/util.c:187
 SYSC_request_key security/keys/keyctl.c:186 [inline]
 SyS_request_key+0xbb/0x2a0 security/keys/keyctl.c:158
 entry_SYSCALL_64_fastpath+0x1f/0x96
RIP: 0033:0x452879
RSP: 002b:00007fcd12231be8 EFLAGS: 00000212 ORIG_RAX: 00000000000000f9
RAX: ffffffffffffffda RBX: 0000000000758248 RCX: 0000000000452879
RDX: 0000000020012000 RSI: 0000000020000000 RDI: 0000000020000ffa
RBP: 000000000000005e R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006ed970
R13: 00000000ffffffff R14: 00007fcd122326d4 R15: 0000000000000013
CPU: 1 PID: 24885 Comm: syz-executor5 Not tainted 4.14.0-next-20171117+ #45
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x194/0x257 lib/dump_stack.c:53
 handle_userfault+0x12fa/0x24c0 fs/userfaultfd.c:427
 do_anonymous_page mm/memory.c:3121 [inline]
 handle_pte_fault mm/memory.c:3934 [inline]
 __handle_mm_fault+0x2e8c/0x3ad0 mm/memory.c:4060
 handle_mm_fault+0x334/0x8d0 mm/memory.c:4097
 __do_page_fault+0x5c9/0xc90 arch/x86/mm/fault.c:1429
 do_page_fault+0xee/0x720 arch/x86/mm/fault.c:1504
 page_fault+0x22/0x30 arch/x86/entry/entry_64.S:1088
RIP: 0010:fault_in_pages_readable include/linux/pagemap.h:601 [inline]
RIP: 0010:iov_iter_fault_in_readable+0x1a7/0x410 lib/iov_iter.c:421
RSP: 0018:ffff8801d90ef928 EFLAGS: 00010246
RAX: 0000000000010000 RBX: 0000000020011fd2 RCX: ffffffff825008b1
RDX: 00000000000000fc RSI: ffffc90003f59000 RDI: ffff8801d90efd28
RBP: ffff8801d90efa08 R08: 0000000000000001 R09: 1ffff1003b21dedf
R10: ffff8801c4ff6500 R11: ffff8801c4ff6500 R12: 1ffff1003b21df28
R13: ffff8801d90ef9e0 R14: 0000000000000000 R15: ffff8801d90efd20
 generic_perform_write+0x200/0x600 mm/filemap.c:3129
 __generic_file_write_iter+0x366/0x5b0 mm/filemap.c:3264
 generic_file_write_iter+0x399/0x7a0 mm/filemap.c:3292
 call_write_iter include/linux/fs.h:1772 [inline]
 new_sync_write fs/read_write.c:469 [inline]
 __vfs_write+0x68a/0x970 fs/read_write.c:482
 vfs_write+0x18f/0x510 fs/read_write.c:544
 SYSC_write fs/read_write.c:589 [inline]
 SyS_write+0xef/0x220 fs/read_write.c:581
 entry_SYSCALL_64_fastpath+0x1f/0x96
RIP: 0033:0x452879
RSP: 002b:00007fcd12294be8 EFLAGS: 00000212 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 0000000000758020 RCX: 0000000000452879
RDX: 0000000000000030 RSI: 0000000020011fd2 RDI: 0000000000000015
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000212 R12: 0000000000000000
R13: 0000000000a6f7ff R14: 00007fcd122959c0 R15: 0000000000000000
RDS: rds_bind could not find a transport for 172.20.3.170, load rds_tcp or rds_rdma?
RDS: rds_bind could not find a transport for 172.20.3.170, load rds_tcp or rds_rdma?
FAULT_FLAG_ALLOW_RETRY missing 30
FAULT_FLAG_ALLOW_RETRY missing 30
CPU: 1 PID: 24962 Comm: syz-executor5 Not tainted 4.14.0-next-20171117+ #45
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x194/0x257 lib/dump_stack.c:53
 handle_userfault+0x12fa/0x24c0 fs/userfaultfd.c:427
 do_anonymous_page mm/memory.c:3121 [inline]
 handle_pte_fault mm/memory.c:3934 [inline]
 __handle_mm_fault+0x2e8c/0x3ad0 mm/memory.c:4060
 handle_mm_fault+0x334/0x8d0 mm/memory.c:4097
 __do_page_fault+0x5c9/0xc90 arch/x86/mm/fault.c:1429
 do_page_fault+0xee/0x720 arch/x86/mm/fault.c:1504
 page_fault+0x22/0x30 arch/x86/entry/entry_64.S:1088
RIP: 0010:do_strnlen_user lib/strnlen_user.c:49 [inline]
RIP: 0010:strnlen_user+0x15c/0x300 lib/strnlen_user.c:118
RSP: 0018:ffff8801c4f6fdb8 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 0000000020012000 RCX: ffffffff82598457
RDX: 8080808080808080 RSI: ffffc90004361000 RDI: ffff8801c4f6fe10
RBP: ffff8801c4f6fe70 R08: ffffed003a740680 R09: ffffed003a740680
R10: 0000000000000001 R11: ffffed003a740680 R12: ffff8801c4f6fe48
R13: 0000000000000000 R14: 1ffff100389edfbd R15: 0000000000001000
 strndup_user+0x28/0xb0 mm/util.c:187
 SYSC_request_key security/keys/keyctl.c:186 [inline]
 SyS_request_key+0xbb/0x2a0 security/keys/keyctl.c:158
 entry_SYSCALL_64_fastpath+0x1f/0x96
RIP: 0033:0x452879
RSP: 002b:00007fcd12231be8 EFLAGS: 00000212 ORIG_RAX: 00000000000000f9
RAX: ffffffffffffffda RBX: 0000000000758248 RCX: 0000000000452879
RDX: 0000000020012000 RSI: 0000000020000000 RDI: 0000000020000ffa
RBP: 000000000000005e R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006ed970
R13: 00000000ffffffff R14: 00007fcd122326d4 R15: 0000000000000013
CPU: 0 PID: 24942 Comm: syz-executor5 Not tainted 4.14.0-next-20171117+ #45
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x194/0x257 lib/dump_stack.c:53
 handle_userfault+0x12fa/0x24c0 fs/userfaultfd.c:427
 do_anonymous_page mm/memory.c:3121 [inline]
 handle_pte_fault mm/memory.c:3934 [inline]
 __handle_mm_fault+0x2e8c/0x3ad0 mm/memory.c:4060
 handle_mm_fault+0x334/0x8d0 mm/memory.c:4097
 __do_page_fault+0x5c9/0xc90 arch/x86/mm/fault.c:1429
 do_page_fault+0xee/0x720 arch/x86/mm/fault.c:1504
 page_fault+0x22/0x30 arch/x86/entry/entry_64.S:1088
RIP: 0010:fault_in_pages_readable include/linux/pagemap.h:601 [inline]
RIP: 0010:iov_iter_fault_in_readable+0x1a7/0x410 lib/iov_iter.c:421
RSP: 0018:ffff8801d90ef928 EFLAGS: 00010246
RAX: 0000000000010000 RBX: 0000000020011fd2 RCX: ffffffff825008b1
RDX: 00000000000000fc RSI: ffffc90003f59000 RDI: ffff8801d90efd28
RBP: ffff8801d90efa08 R08: 0000000000000001 R09: 1ffff1003b21dedf
R10: ffff8801d73d4000 R11: ffff8801d73d4000 R12: 1ffff1003b21df28
R13: ffff8801d90ef9e0 R14: 0000000000000000 R15: ffff8801d90efd20
 generic_perform_write+0x200/0x600 mm/filemap.c:3129
 __generic_file_write_iter+0x366/0x5b0 mm/filemap.c:3264
 generic_file_write_iter+0x399/0x7a0 mm/filemap.c:3292
 call_write_iter include/linux/fs.h:1772 [inline]
 new_sync_write fs/read_write.c:469 [inline]
 __vfs_write+0x68a/0x970 fs/read_write.c:482
 vfs_write+0x18f/0x510 fs/read_write.c:544
 SYSC_write fs/read_write.c:589 [inline]
 SyS_write+0xef/0x220 fs/read_write.c:581
 entry_SYSCALL_64_fastpath+0x1f/0x96
RIP: 0033:0x452879
RSP: 002b:00007fcd12294be8 EFLAGS: 00000212 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 0000000000758020 RCX: 0000000000452879
RDX: 0000000000000030 RSI: 0000000020011fd2 RDI: 0000000000000015
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000212 R12: 0000000000000000
R13: 0000000000a6f7ff R14: 00007fcd122959c0 R15: 0000000000000000
FAULT_FLAG_ALLOW_RETRY missing 30
CPU: 0 PID: 25009 Comm: syz-executor5 Not tainted 4.14.0-next-20171117+ #45
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x194/0x257 lib/dump_stack.c:53
 handle_userfault+0x12fa/0x24c0 fs/userfaultfd.c:427
 do_anonymous_page mm/memory.c:3121 [inline]
 handle_pte_fault mm/memory.c:3934 [inline]
 __handle_mm_fault+0x2e8c/0x3ad0 mm/memory.c:4060
 handle_mm_fault+0x334/0x8d0 mm/memory.c:4097
 __do_page_fault+0x5c9/0xc90 arch/x86/mm/fault.c:1429
 do_page_fault+0xee/0x720 arch/x86/mm/fault.c:1504
 page_fault+0x22/0x30 arch/x86/entry/entry_64.S:1088
RIP: 0010:do_strnlen_user lib/strnlen_user.c:49 [inline]
RIP: 0010:strnlen_user+0x15c/0x300 lib/strnlen_user.c:118
RSP: 0018:ffff8801d83e7db8 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 0000000020012000 RCX: ffffffff82598457
RDX: 8080808080808080 RSI: ffffc90004a6f000 RDI: ffff8801d83e7e10
RBP: ffff8801d83e7e70 R08: ffffed003afee8c8 R09: ffffed003afee8c8
R10: 0000000000000001 R11: ffffed003afee8c8 R12: ffff8801d83e7e48
R13: 0000000000000000 R14: 1ffff1003b07cfbd R15: 0000000000001000
 strndup_user+0x28/0xb0 mm/util.c:187
 SYSC_request_key security/keys/keyctl.c:186 [inline]
 SyS_request_key+0xbb/0x2a0 security/keys/keyctl.c:158
 entry_SYSCALL_64_fastpath+0x1f/0x96
RIP: 0033:0x452879
RSP: 002b:00007fcd12210be8 EFLAGS: 00000212 ORIG_RAX: 00000000000000f9
RAX: ffffffffffffffda RBX: 0000000000758300 RCX: 0000000000452879
RDX: 0000000020012000 RSI: 0000000020000000 RDI: 0000000020000ffa
RBP: 000000000000005e R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006ed970
R13: 00000000ffffffff R14: 00007fcd122116d4 R15: 0000000000000013
FAULT_FLAG_ALLOW_RETRY missing 30
CPU: 1 PID: 24997 Comm: syz-executor5 Not tainted 4.14.0-next-20171117+ #45
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x194/0x257 lib/dump_stack.c:53
 handle_userfault+0x12fa/0x24c0 fs/userfaultfd.c:427
 do_anonymous_page mm/memory.c:3121 [inline]
 handle_pte_fault mm/memory.c:3934 [inline]
 __handle_mm_fault+0x2e8c/0x3ad0 mm/memory.c:4060
 handle_mm_fault+0x334/0x8d0 mm/memory.c:4097
 __do_page_fault+0x5c9/0xc90 arch/x86/mm/fault.c:1429
 do_page_fault+0xee/0x720 arch/x86/mm/fault.c:1504
 page_fault+0x22/0x30 arch/x86/entry/entry_64.S:1088
RIP: 0010:fault_in_pages_readable include/linux/pagemap.h:601 [inline]
RIP: 0010:iov_iter_fault_in_readable+0x1a7/0x410 lib/iov_iter.c:421
RSP: 0018:ffff88019661f928 EFLAGS: 00010246
RAX: 0000000000010000 RBX: 0000000020011fd2 RCX: ffffffff825008b1
RDX: 00000000000000fc RSI: ffffc90003f59000 RDI: ffff88019661fd28
RBP: ffff88019661fa08 R08: ffff8801c40b3978 R09: 1ffff10032cc3edf
R10: ffff880193cf2480 R11: 0000000000000000 R12: 1ffff10032cc3f28
R13: ffff88019661f9e0 R14: 0000000000000000 R15: ffff88019661fd20
 generic_perform_write+0x200/0x600 mm/filemap.c:3129
 __generic_file_write_iter+0x366/0x5b0 mm/filemap.c:3264
 generic_file_write_iter+0x399/0x7a0 mm/filemap.c:3292
 call_write_iter include/linux/fs.h:1772 [inline]
 new_sync_write fs/read_write.c:469 [inline]
 __vfs_write+0x68a/0x970 fs/read_write.c:482
 vfs_write+0x18f/0x510 fs/read_write.c:544
 SYSC_write fs/read_write.c:589 [inline]
 SyS_write+0xef/0x220 fs/read_write.c:581
 entry_SYSCALL_64_fastpath+0x1f/0x96
RIP: 0033:0x452879
RSP: 002b:00007fcd12294be8 EFLAGS: 00000212 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 0000000000758020 RCX: 0000000000452879
RDX: 0000000000000030 RSI: 0000000020011fd2 RDI: 0000000000000015
RBP: 0000000000000058 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006ed8e0
R13: 00000000ffffffff R14: 00007fcd122956d4 R15: 0000000000000000
FAULT_FLAG_ALLOW_RETRY missing 30
FAULT_FLAG_ALLOW_RETRY missing 30
CPU: 1 PID: 25199 Comm: syz-executor5 Not tainted 4.14.0-next-20171117+ #45
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x194/0x257 lib/dump_stack.c:53
 handle_userfault+0x12fa/0x24c0 fs/userfaultfd.c:427
 do_anonymous_page mm/memory.c:3121 [inline]
 handle_pte_fault mm/memory.c:3934 [inline]
 __handle_mm_fault+0x2e8c/0x3ad0 mm/memory.c:4060
 handle_mm_fault+0x334/0x8d0 mm/memory.c:4097
 __do_page_fault+0x5c9/0xc90 arch/x86/mm/fault.c:1429
 do_page_fault+0xee/0x720 arch/x86/mm/fault.c:1504
 page_fault+0x22/0x30 arch/x86/entry/entry_64.S:1088
RIP: 0010:fault_in_pages_readable include/linux/pagemap.h:601 [inline]
RIP: 0010:iov_iter_fault_in_readable+0x1a7/0x410 lib/iov_iter.c:421
RSP: 0018:ffff8801c33ef928 EFLAGS: 00010246
RAX: 0000000000010000 RBX: 0000000020011fd2 RCX: ffffffff825008b1
RDX: 00000000000000c0 RSI: ffffc90003f59000 RDI: ffff8801c33efd28
RBP: ffff8801c33efa08 R08: 1ffff1003218f9a2 R09: 1ffff1003867df1a
R10: ffff8801d01ca380 R11: ffff8801d01ca380 R12: 1ffff1003867df28
R13: ffff8801c33ef9e0 R14: 0000000000000000 R15: ffff8801c33efd20
 generic_perform_write+0x200/0x600 mm/filemap.c:3129
 __generic_file_write_iter+0x366/0x5b0 mm/filemap.c:3264
 generic_file_write_iter+0x399/0x7a0 mm/filemap.c:3292
 call_write_iter include/linux/fs.h:1772 [inline]
 new_sync_write fs/read_write.c:469 [inline]
 __vfs_write+0x68a/0x970 fs/read_write.c:482
 vfs_write+0x18f/0x510 fs/read_write.c:544
 SYSC_write fs/read_write.c:589 [inline]
 SyS_write+0xef/0x220 fs/read_write.c:581
 entry_SYSCALL_64_fastpath+0x1f/0x96
RIP: 0033:0x452879
RSP: 002b:00007fcd12294be8 EFLAGS: 00000212 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 0000000000758020 RCX: 0000000000452879
RDX: 0000000000000030 RSI: 0000000020011fd2 RDI: 0000000000000015
RBP: 0000000000000058 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006ed8e0
R13: 00000000ffffffff R14: 00007fcd122956d4 R15: 0000000000000000
CPU: 1 PID: 25217 Comm: syz-executor5 Not tainted 4.14.0-next-20171117+ #45
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x194/0x257 lib/dump_stack.c:53
 handle_userfault+0x12fa/0x24c0 fs/userfaultfd.c:427
 do_anonymous_page mm/memory.c:3121 [inline]
 handle_pte_fault mm/memory.c:3934 [inline]
 __handle_mm_fault+0x2e8c/0x3ad0 mm/memory.c:4060
 handle_mm_fault+0x334/0x8d0 mm/memory.c:4097
 __do_page_fault+0x5c9/0xc90 arch/x86/mm/fault.c:1429
 do_page_fault+0xee/0x720 arch/x86/mm/fault.c:1504
 page_fault+0x22/0x30 arch/x86/entry/entry_64.S:1088
RIP: 0010:do_strnlen_user lib/strnlen_user.c:49 [inline]
RIP: 0010:strnlen_user+0x15c/0x300 lib/strnlen_user.c:118
RSP: 0018:ffff8801c36dfdb8 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 0000000020012000 RCX: ffffffff82598457
RDX: 8080808080808080 RSI: ffffc90004361000 RDI: ffff8801c36dfe10
RBP: ffff8801c36dfe70 R08: ffffed003aa264a0 R09: ffffed003aa264a0
R10: 0000000000000001 R11: ffffed003aa264a0 R12: ffff8801c36dfe48
R13: 0000000000000000 R14: 1ffff100386dbfbd R15: 0000000000001000
 strndup_user+0x28/0xb0 mm/util.c:187
 SYSC_request_key security/keys/keyctl.c:186 [inline]
 SyS_request_key+0xbb/0x2a0 security/keys/keyctl.c:158
 entry_SYSCALL_64_fastpath+0x1f/0x96
RIP: 0033:0x452879
RSP: 002b:00007fcd12231be8 EFLAGS: 00000212 ORIG_RAX: 00000000000000f9
RAX: ffffffffffffffda RBX: 0000000000758248 RCX: 0000000000452879
RDX: 0000000020012000 RSI: 0000000020000000 RDI: 0000000020000ffa
RBP: 0000000000a6f880 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000212 R12: 0000000000000000
R13: 0000000000a6f7ff R14: 00007fcd122329c0 R15: 0000000000000013
FAULT_FLAG_ALLOW_RETRY missing 30
CPU: 1 PID: 25309 Comm: syz-executor5 Not tainted 4.14.0-next-20171117+ #45
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x194/0x257 lib/dump_stack.c:53
 handle_userfault+0x12fa/0x24c0 fs/userfaultfd.c:427
 do_anonymous_page mm/memory.c:3121 [inline]
 handle_pte_fault mm/memory.c:3934 [inline]
 __handle_mm_fault+0x2e8c/0x3ad0 mm/memory.c:4060
 handle_mm_fault+0x334/0x8d0 mm/memory.c:4097
 __do_page_fault+0x5c9/0xc90 arch/x86/mm/fault.c:1429
 do_page_fault+0xee/0x720 arch/x86/mm/fault.c:1504
 page_fault+0x22/0x30 arch/x86/entry/entry_64.S:1088
RIP: 0010:do_strnlen_user lib/strnlen_user.c:49 [inline]
RIP: 0010:strnlen_user+0x15c/0x300 lib/strnlen_user.c:118
RSP: 0018:ffff8801c9fe7db8 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 0000000020012000 RCX: ffffffff82598457
RDX: 8080808080808080 RSI: ffffc90004361000 RDI: ffff8801c9fe7e10
RBP: ffff8801c9fe7e70 R08: ffffed0038a67620 R09: ffffed0038a67620
R10: 0000000000000001 R11: ffffed0038a67620 R12: ffff8801c9fe7e48
R13: 0000000000000000 R14: 1ffff100393fcfbd R15: 0000000000001000
 strndup_user+0x28/0xb0 mm/util.c:187
 SYSC_request_key security/keys/keyctl.c:186 [inline]
 SyS_request_key+0xbb/0x2a0 security/keys/keyctl.c:158
 entry_SYSCALL_64_fastpath+0x1f/0x96
RIP: 0033:0x452879
RSP: 002b:00007fcd12231be8 EFLAGS: 00000212 ORIG_RAX: 00000000000000f9
RAX: ffffffffffffffda RBX: 0000000000758248 RCX: 0000000000452879
RDX: 0000000020012000 RSI: 0000000020000000 RDI: 0000000020000ffa
RBP: 000000000000005e R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006ed970
R13: 00000000ffffffff R14: 00007fcd122326d4 R15: 0000000000000013
FAULT_FLAG_ALLOW_RETRY missing 30
CPU: 1 PID: 25286 Comm: syz-executor5 Not tainted 4.14.0-next-20171117+ #45
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x194/0x257 lib/dump_stack.c:53
 handle_userfault+0x12fa/0x24c0 fs/userfaultfd.c:427
 do_anonymous_page mm/memory.c:3121 [inline]
 handle_pte_fault mm/memory.c:3934 [inline]
 __handle_mm_fault+0x2e8c/0x3ad0 mm/memory.c:4060
 handle_mm_fault+0x334/0x8d0 mm/memory.c:4097
 __do_page_fault+0x5c9/0xc90 arch/x86/mm/fault.c:1429
 do_page_fault+0xee/0x720 arch/x86/mm/fault.c:1504
 page_fault+0x22/0x30 arch/x86/entry/entry_64.S:1088
RIP: 0010:fault_in_pages_readable include/linux/pagemap.h:601 [inline]
RIP: 0010:iov_iter_fault_in_readable+0x1a7/0x410 lib/iov_iter.c:421
RSP: 0018:ffff8801c9877928 EFLAGS: 00010246
RAX: 0000000000010000 RBX: 0000000020011fd2 RCX: ffffffff825008b1
RDX: 00000000000000fc RSI: ffffc90003f59000 RDI: ffff8801c9877d28
RBP: ffff8801c9877a08 R08: 0000000000000001 R09: 1ffff1003930eedf
R10: ffff8801c88b01c0 R11: ffff8801c88b01c0 R12: 1ffff1003930ef28
R13: ffff8801c98779e0 R14: 0000000000000000 R15: ffff8801c9877d20
 generic_perform_write+0x200/0x600 mm/filemap.c:3129
 __generic_file_write_iter+0x366/0x5b0 mm/filemap.c:3264
 generic_file_write_iter+0x399/0x7a0 mm/filemap.c:3292
 call_write_iter include/linux/fs.h:1772 [inline]
 new_sync_write fs/read_write.c:469 [inline]
 __vfs_write+0x68a/0x970 fs/read_write.c:482
 vfs_write+0x18f/0x510 fs/read_write.c:544
 SYSC_write fs/read_write.c:589 [inline]
 SyS_write+0xef/0x220 fs/read_write.c:581
 entry_SYSCALL_64_fastpath+0x1f/0x96
RIP: 0033:0x452879
RSP: 002b:00007fcd12294be8 EFLAGS: 00000212 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 0000000000758020 RCX: 0000000000452879
RDX: 0000000000000030 RSI: 0000000020011fd2 RDI: 0000000000000015
RBP: 0000000000000058 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006ed8e0
R13: 00000000ffffffff R14: 00007fcd122956d4 R15: 0000000000000000
FAULT_FLAG_ALLOW_RETRY missing 30
CPU: 1 PID: 25327 Comm: syz-executor5 Not tainted 4.14.0-next-20171117+ #45
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x194/0x257 lib/dump_stack.c:53
 handle_userfault+0x12fa/0x24c0 fs/userfaultfd.c:427
 do_anonymous_page mm/memory.c:3121 [inline]
 handle_pte_fault mm/memory.c:3934 [inline]
 __handle_mm_fault+0x2e8c/0x3ad0 mm/memory.c:4060
 handle_mm_fault+0x334/0x8d0 mm/memory.c:4097
 __do_page_fault+0x5c9/0xc90 arch/x86/mm/fault.c:1429
 do_page_fault+0xee/0x720 arch/x86/mm/fault.c:1504
 page_fault+0x22/0x30 arch/x86/entry/entry_64.S:1088
RIP: 0010:fault_in_pages_readable include/linux/pagemap.h:601 [inline]
RIP: 0010:iov_iter_fault_in_readable+0x1a7/0x410 lib/iov_iter.c:421
RSP: 0018:ffff8801c9fe7928 EFLAGS: 00010246
RAX: 0000000000010000 RBX: 0000000020011fd2 RCX: ffffffff825008b1
RDX: 00000000000000c0 RSI: ffffc90003f59000 RDI: ffff8801c9fe7d28
RBP: ffff8801c9fe7a08 R08: 1ffff1003218f9a2 R09: 1ffff100393fcf1a
R10: ffff8801d4ba4480 R11: ffff8801d4ba4480 R12: 1ffff100393fcf28
R13: ffff8801c9fe79e0 R14: 0000000000000000 R15: ffff8801c9fe7d20
 generic_perform_write+0x200/0x600 mm/filemap.c:3129
 __generic_file_write_iter+0x366/0x5b0 mm/filemap.c:3264
 generic_file_write_iter+0x399/0x7a0 mm/filemap.c:3292
 call_write_iter include/linux/fs.h:1772 [inline]
 new_sync_write fs/read_write.c:469 [inline]
 __vfs_write+0x68a/0x970 fs/read_write.c:482
 vfs_write+0x18f/0x510 fs/read_write.c:544
 SYSC_write fs/read_write.c:589 [inline]
 SyS_write+0xef/0x220 fs/read_write.c:581
 entry_SYSCALL_64_fastpath+0x1f/0x96
RIP: 0033:0x452879
RSP: 002b:00007fcd12294be8 EFLAGS: 00000212 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 0000000000758020 RCX: 0000000000452879
RDX: 0000000000000030 RSI: 0000000020011fd2 RDI: 0000000000000015
RBP: 0000000000000058 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006ed8e0
R13: 00000000ffffffff R14: 00007fcd122956d4 R15: 0000000000000000
FAULT_FLAG_ALLOW_RETRY missing 30
CPU: 0 PID: 25342 Comm: syz-executor5 Not tainted 4.14.0-next-20171117+ #45
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x194/0x257 lib/dump_stack.c:53
 handle_userfault+0x12fa/0x24c0 fs/userfaultfd.c:427
 do_anonymous_page mm/memory.c:3121 [inline]
 handle_pte_fault mm/memory.c:3934 [inline]
 __handle_mm_fault+0x2e8c/0x3ad0 mm/memory.c:4060
 handle_mm_fault+0x334/0x8d0 mm/memory.c:4097
 __do_page_fault+0x5c9/0xc90 arch/x86/mm/fault.c:1429
 do_page_fault+0xee/0x720 arch/x86/mm/fault.c:1504
 page_fault+0x22/0x30 arch/x86/entry/entry_64.S:1088
RIP: 0010:do_strnlen_user lib/strnlen_user.c:49 [inline]
RIP: 0010:strnlen_user+0x15c/0x300 lib/strnlen_user.c:118
RSP: 0018:ffff8801c9877db8 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 0000000020012000 RCX: ffffffff82598457
RDX: 8080808080808080 RSI: ffffc90004361000 RDI: ffff8801c9877e10
RBP: ffff8801c9877e70 R08: ffffed0038ca6d30 R09: ffffed0038ca6d30
R10: 0000000000000001 R11: ffffed0038ca6d30 R12: ffff8801c9877e48
R13: 0000000000000000 R14: 1ffff1003930efbd R15: 0000000000001000
 strndup_user+0x28/0xb0 mm/util.c:187
 SYSC_request_key security/keys/keyctl.c:186 [inline]
 SyS_request_key+0xbb/0x2a0 security/keys/keyctl.c:158
 entry_SYSCALL_64_fastpath+0x1f/0x96
RIP: 0033:0x452879
RSP: 002b:00007fcd12231be8 EFLAGS: 00000212 ORIG_RAX: 00000000000000f9
RAX: ffffffffffffffda RBX: 0000000000758248 RCX: 0000000000452879
RDX: 0000000020012000 RSI: 0000000020000000 RDI: 0000000020000ffa
RBP: 000000000000005e R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006ed970
R13: 00000000ffffffff R14: 00007fcd122326d4 R15: 0000000000000013
QAT: Invalid ioctl
FAULT_FLAG_ALLOW_RETRY missing 30
CPU: 1 PID: 25349 Comm: syz-executor5 Not tainted 4.14.0-next-20171117+ #45
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x194/0x257 lib/dump_stack.c:53
 handle_userfault+0x12fa/0x24c0 fs/userfaultfd.c:427
 do_anonymous_page mm/memory.c:3121 [inline]
 handle_pte_fault mm/memory.c:3934 [inline]
 __handle_mm_fault+0x2e8c/0x3ad0 mm/memory.c:4060
 handle_mm_fault+0x334/0x8d0 mm/memory.c:4097
 __do_page_fault+0x5c9/0xc90 arch/x86/mm/fault.c:1429
 do_page_fault+0xee/0x720 arch/x86/mm/fault.c:1504
 page_fault+0x22/0x30 arch/x86/entry/entry_64.S:1088
RIP: 0010:do_strnlen_user lib/strnlen_user.c:49 [inline]
RIP: 0010:strnlen_user+0x15c/0x300 lib/strnlen_user.c:118
RSP: 0018:ffff8801d15d7db8 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 0000000020012000 RCX: ffffffff82598457
RDX: 8080808080808080 RSI: ffffc90004a6f000 RDI: ffff8801d15d7e10
RBP: ffff8801d15d7e70 R08: ffffed003a73f110 R09: ffffed003a73f110
R10: 0000000000000001 R11: ffffed003a73f110 R12: ffff8801d15d7e48
R13: 0000000000000000 R14: 1ffff1003a2bafbd R15: 0000000000001000
 strndup_user+0x28/0xb0 mm/util.c:187
 SYSC_request_key security/keys/keyctl.c:186 [inline]
 SyS_request_key+0xbb/0x2a0 security/keys/keyctl.c:158
 entry_SYSCALL_64_fastpath+0x1f/0x96
RIP: 0033:0x452879
RSP: 002b:00007fcd12210be8 EFLAGS: 00000212 ORIG_RAX: 00000000000000f9
RAX: ffffffffffffffda RBX: 0000000000758300 RCX: 0000000000452879
RDX: 0000000020012000 RSI: 0000000020000000 RDI: 0000000020000ffa
RBP: 00000000000002f1 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f1738
R13: 00000000ffffffff R14: 00007fcd122116d4 R15: 0000000000000015
FAULT_FLAG_ALLOW_RETRY missing 30
CPU: 1 PID: 25335 Comm: syz-executor5 Not tainted 4.14.0-next-20171117+ #45
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x194/0x257 lib/dump_stack.c:53
 handle_userfault+0x12fa/0x24c0 fs/userfaultfd.c:427
 do_anonymous_page mm/memory.c:3121 [inline]
 handle_pte_fault mm/memory.c:3934 [inline]
 __handle_mm_fault+0x2e8c/0x3ad0 mm/memory.c:4060
 handle_mm_fault+0x334/0x8d0 mm/memory.c:4097
 __do_page_fault+0x5c9/0xc90 arch/x86/mm/fault.c:1429
 do_page_fault+0xee/0x720 arch/x86/mm/fault.c:1504
 page_fault+0x22/0x30 arch/x86/entry/entry_64.S:1088
RIP: 0010:fault_in_pages_readable include/linux/pagemap.h:601 [inline]
RIP: 0010:iov_iter_fault_in_readable+0x1a7/0x410 lib/iov_iter.c:421
RSP: 0018:ffff8801948df928 EFLAGS: 00010246
RAX: 0000000000010000 RBX: 0000000020011fd2 RCX: ffffffff825008b1
RDX: 000000000000007d RSI: ffffc90003fda000 RDI: ffff8801948dfd28
RBP: ffff8801948dfa08 R08: 1ffff1003218f9a2 R09: 1ffff1003291bf1a
R10: 0000000000000000 R11: ffff8801c961c500 R12: 1ffff1003291bf28
R13: ffff8801948df9e0 R14: 0000000000000000 R15: ffff8801948dfd20
 generic_perform_write+0x200/0x600 mm/filemap.c:3129
 __generic_file_write_iter+0x366/0x5b0 mm/filemap.c:3264
 generic_file_write_iter+0x399/0x7a0 mm/filemap.c:3292
 call_write_iter include/linux/fs.h:1772 [inline]
 new_sync_write fs/read_write.c:469 [inline]
 __vfs_write+0x68a/0x970 fs/read_write.c:482
 vfs_write+0x18f/0x510 fs/read_write.c:544
 SYSC_write fs/read_write.c:589 [inline]
 SyS_write+0xef/0x220 fs/read_write.c:581
 entry_SYSCALL_64_fastpath+0x1f/0x96
RIP: 0033:0x452879
RSP: 002b:00007fcd12273be8 EFLAGS: 00000212 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 00000000007580d8 RCX: 0000000000452879
RDX: 0000000000000030 RSI: 0000000020011fd2 RDI: 0000000000000015
RBP: 0000000000a6f880 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000212 R12: 0000000000000000
R13: 0000000000a6f7ff R14: 00007fcd122749c0 R15: 000000000000000d
QAT: Invalid ioctl
FAULT_FLAG_ALLOW_RETRY missing 30
CPU: 1 PID: 25379 Comm: syz-executor5 Not tainted 4.14.0-next-20171117+ #45
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x194/0x257 lib/dump_stack.c:53
 handle_userfault+0x12fa/0x24c0 fs/userfaultfd.c:427
 do_anonymous_page mm/memory.c:3121 [inline]
 handle_pte_fault mm/memory.c:3934 [inline]
 __handle_mm_fault+0x2e8c/0x3ad0 mm/memory.c:4060
 handle_mm_fault+0x334/0x8d0 mm/memory.c:4097
 __do_page_fault+0x5c9/0xc90 arch/x86/mm/fault.c:1429
 do_page_fault+0xee/0x720 arch/x86/mm/fault.c:1504