devpts: called with bogus options BUG: unable to handle kernel NULL pointer dereference at 0000000000000268 kobject: 'veth102' (ffff88805c50aff0): kobject_uevent_env IP: atomic_add_return arch/x86/include/asm/atomic.h:157 [inline] IP: rxrpc_send_data_packet+0xc8/0x13f0 net/rxrpc/output.c:281 PGD 63c53067 P4D 63c53067 PUD 8ab14067 PMD 0 Oops: 0002 [#1] PREEMPT SMP KASAN kobject: 'veth102' (ffff88805c50aff0): fill_kobj_path: path = '/devices/virtual/net/veth102' Modules linked in: CPU: 1 PID: 18 Comm: kworker/1:0 Not tainted 4.14.149 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: krxrpcd rxrpc_process_call kobject: 'queues' (ffff88808fa86948): kobject_add_internal: parent: 'veth102', set: '' task: ffff8880a9d5e4c0 task.stack: ffff8880a9d68000 RIP: 0010:atomic_add_return arch/x86/include/asm/atomic.h:157 [inline] RIP: 0010:rxrpc_send_data_packet+0xc8/0x13f0 net/rxrpc/output.c:281 RSP: 0018:ffff8880a9d6fab0 EFLAGS: 00010246 kobject: 'kvm' (ffff888219fde550): kobject_uevent_env RAX: 0000000000000001 RBX: 0000000000000000 RCX: 1ffff110153abdb1 RDX: 0000000000000000 RSI: ffff8880920f4540 RDI: ffff88805d5e3c10 RBP: ffff8880a9d6fc60 R08: 0000000000000001 R09: ffff8880a9d5ed88 R10: ffff8880a9d6fc78 R11: 0000000000000000 R12: ffff8880920f4540 R13: ffff88805d5e3d18 R14: ffff88805d5e3c00 R15: ffff8880920f4540 FS: 0000000000000000(0000) GS:ffff8880aef00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000268 CR3: 00000000824e4000 CR4: 00000000001426e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: audit: type=1804 audit(1570952070.959:170): pid=16667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.1" name="/root/syzkaller-testdir164151274/syzkaller.51bmbD/372/file0" dev="sda1" ino=16644 res=1 kobject: 'queues' (ffff88808fa86948): kobject_uevent_env kobject: 'kvm' (ffff888219fde550): fill_kobj_path: path = '/devices/virtual/misc/kvm' rxrpc_resend net/rxrpc/call_event.c:322 [inline] rxrpc_process_call+0x56f/0x1169 net/rxrpc/call_event.c:407 process_one_work+0x863/0x1600 kernel/workqueue.c:2114 kobject: 'queues' (ffff88808fa86948): kobject_uevent_env: filter function caused the event to drop! worker_thread+0x5d9/0x1050 kernel/workqueue.c:2248 kobject: 'rx-0' (ffff8880948f7310): kobject_add_internal: parent: 'queues', set: 'queues' kthread+0x319/0x430 kernel/kthread.c:232 kobject: 'rx-0' (ffff8880948f7310): kobject_uevent_env ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:404 Code: f3 c7 40 24 f3 f3 f3 f3 e8 76 1e c6 fb 49 8d 7e 10 48 89 f8 48 c1 e8 03 80 3c 18 00 0f 85 31 11 00 00 kobject: 'rx-0' (ffff8880948f7310): fill_kobj_path: path = '/devices/virtual/net/veth102/queues/rx-0' 49 8b 5e 10 b8 01 00 00 00 0f c1 83 kobject: 'tx-0' (ffff8880a4d5dcd8): kobject_add_internal: parent: 'queues', set: 'queues' 68 02 00 00 83 c0 01 48 89 da 48 c1 ea kobject: 'tx-0' (ffff8880a4d5dcd8): kobject_uevent_env 03 89 85 8c RIP: atomic_add_return arch/x86/include/asm/atomic.h:157 [inline] RSP: ffff8880a9d6fab0 RIP: rxrpc_send_data_packet+0xc8/0x13f0 net/rxrpc/output.c:281 RSP: ffff8880a9d6fab0 CR2: 0000000000000268 kobject: 'tx-0' (ffff8880a4d5dcd8): fill_kobj_path: path = '/devices/virtual/net/veth102/queues/tx-0' ---[ end trace 9929a3100f6aeb05 ]---