kasan: CONFIG_KASAN_INLINE enabled
kasan: GPF could be caused by NULL-ptr deref or user memory access
kobject: 'loop5' (000000007f8f5bc3): kobject_uevent_env
general protection fault: 0000 [#1] PREEMPT SMP KASAN
CPU: 0 PID: 3764 Comm: syz-executor.2 Not tainted 4.19.49 #21
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:ax25_send_frame+0xe5/0x580 net/ax25/ax25_out.c:59
Code: 88 00 00 48 85 c0 0f 85 d4 03 00 00 e8 c4 f9 43 fb 49 8d bc 24 38 03 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 fb 03 00 00 49 8b 84 24 38 03 00 00 48 85 c0 48
kobject: 'loop5' (000000007f8f5bc3): fill_kobj_path: path = '/devices/virtual/block/loop5'
RSP: 0018:ffff8880ae807a90 EFLAGS: 00010202
RAX: dffffc0000000000 RBX: ffff88821603bc88 RCX: 1ffff1100ac221a6
RDX: 0000000000000067 RSI: ffffffff86270ccc RDI: 0000000000000338
RBP: ffff8880ae807ad0 R08: ffff888056110440 R09: ffff888056110d30
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
kobject: 'loop4' (00000000d1ca0cee): kobject_uevent_env
R13: ffffffff8aee47a0 R14: 0000000000000104 R15: 0000000000000000
FS: 00000000029f4940(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000000046e880 CR3: 00000000852dd000 CR4: 00000000001406f0
Call Trace:
kobject: 'loop4' (00000000d1ca0cee): fill_kobj_path: path = '/devices/virtual/block/loop4'
<IRQ>
rose_send_frame+0xda/0x280 net/rose/rose_link.c:109
rose_transmit_clear_request+0x1de/0x2a0 net/rose/rose_link.c:258
kobject: 'loop4' (00000000d1ca0cee): kobject_uevent_env
rose_rx_call_request+0x4f2/0x19d0 net/rose/af_rose.c:999
kobject: 'loop4' (00000000d1ca0cee): fill_kobj_path: path = '/devices/virtual/block/loop4'
rose_loopback_timer+0x164/0x480 net/rose/rose_loopback.c:103
call_timer_fn+0x18d/0x720 kernel/time/timer.c:1326
kobject: 'loop3' (000000004adef49a): kobject_uevent_env
kobject: 'loop3' (000000004adef49a): fill_kobj_path: path = '/devices/virtual/block/loop3'
expire_timers kernel/time/timer.c:1363 [inline]
__run_timers kernel/time/timer.c:1682 [inline]
__run_timers kernel/time/timer.c:1650 [inline]
run_timer_softirq+0x652/0x1700 kernel/time/timer.c:1695
__do_softirq+0x25c/0x921 kernel/softirq.c:292
kobject: 'loop3' (000000004adef49a): kobject_uevent_env
invoke_softirq kernel/softirq.c:372 [inline]
irq_exit+0x180/0x1d0 kernel/softirq.c:412
exiting_irq arch/x86/include/asm/apic.h:536 [inline]
smp_apic_timer_interrupt+0x13b/0x550 arch/x86/kernel/apic/apic.c:1056
apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:869
kobject: 'loop3' (000000004adef49a): fill_kobj_path: path = '/devices/virtual/block/loop3'
</IRQ>
RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:788 [inline]
RIP: 0010:lock_is_held_type+0x17e/0x210 kernel/locking/lockdep.c:3940
Code: 00 00 00 fc ff df 41 c7 85 7c 08 00 00 00 00 00 00 48 c1 e8 03 80 3c 10 00 75 63 48 83 3d e1 9d 20 07 00 74 30 48 89 df 57 9d <0f> 1f 44 00 00 48 83 c4 08 44 89 e0 5b 41 5c 41 5d 5d c3 48 83 c4
RSP: 0018:ffff8880488e7a60 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13
RAX: 1ffffffff10e46c9 RBX: 0000000000000286 RCX: ffff888056110cc0
RDX: dffffc0000000000 RSI: ffffffff8879d760 RDI: 0000000000000286
RBP: ffff8880488e7a80 R08: ffff888056110440 R09: ffffed1015d04733
R10: ffffed1015d04732 R11: ffff8880ae823993 R12: 0000000000000000
R13: ffff888056110440 R14: 0000000000000000 R15: ffff88808d7caf18
kobject: 'loop3' (000000004adef49a): kobject_uevent_env
lock_is_held include/linux/lockdep.h:344 [inline]
rcu_read_lock_sched_held+0x110/0x130 kernel/rcu/update.c:118
trace_block_touch_buffer include/trace/events/block.h:45 [inline]
touch_buffer fs/buffer.c:58 [inline]
__find_get_block+0xa35/0xcf0 fs/buffer.c:1299
sb_find_get_block include/linux/buffer_head.h:338 [inline]
recently_deleted fs/ext4/ialloc.c:682 [inline]
find_inode_bit.isra.0+0x202/0x510 fs/ext4/ialloc.c:722
kobject: 'loop3' (000000004adef49a): fill_kobj_path: path = '/devices/virtual/block/loop3'
__ext4_new_inode+0x14ab/0x52c0 fs/ext4/ialloc.c:914
ext4_symlink+0x3f8/0xbe0 fs/ext4/namei.c:3099
vfs_symlink fs/namei.c:4126 [inline]
vfs_symlink+0x373/0x5c0 fs/namei.c:4112
do_symlinkat+0x22b/0x290 fs/namei.c:4153
__do_sys_symlink fs/namei.c:4172 [inline]
__se_sys_symlink fs/namei.c:4170 [inline]
__x64_sys_symlink+0x59/0x80 fs/namei.c:4170
do_syscall_64+0xfd/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x458fa7
Code: 0f 1f 00 b8 5c 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 bd ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 9d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007fff2a8d5aa8 EFLAGS: 00000202 ORIG_RAX: 0000000000000058
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000458fa7
RDX: 00007fff2a8d5b43 RSI: 00000000004bea59 RDI: 00007fff2a8d5b30
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000013
R10: 0000000000000075 R11: 0000000000000202 R12: 0000000000000000
R13: 00007fff2a8d5ae0 R14: 0000000000000000 R15: 00007fff2a8d5af0
Modules linked in:
---[ end trace a45c27714c4150f4 ]---
RIP: 0010:ax25_send_frame+0xe5/0x580 net/ax25/ax25_out.c:59
Code: 88 00 00 48 85 c0 0f 85 d4 03 00 00 e8 c4 f9 43 fb 49 8d bc 24 38 03 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 fb 03 00 00 49 8b 84 24 38 03 00 00 48 85 c0 48
RSP: 0018:ffff8880ae807a90 EFLAGS: 00010202
RAX: dffffc0000000000 RBX: ffff88821603bc88 RCX: 1ffff1100ac221a6
RDX: 0000000000000067 RSI: ffffffff86270ccc RDI: 0000000000000338
RBP: ffff8880ae807ad0 R08: ffff888056110440 R09: ffff888056110d30
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: ffffffff8aee47a0 R14: 0000000000000104 R15: 0000000000000000
FS: 00000000029f4940(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000000046e880 CR3: 00000000852dd000 CR4: 00000000001406f0