kasan: CONFIG_KASAN_INLINE enabled kasan: GPF could be caused by NULL-ptr deref or user memory access general protection fault: 0000 [#1] PREEMPT SMP KASAN CPU: 1 PID: 20937 Comm: kworker/1:5 Not tainted 4.20.0-rc2+ #296 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: events smc_tcp_listen_work RIP: 0010:inet_accept+0x106/0x9e0 net/ipv4/af_inet.c:734 Code: 09 80 fa 03 0f 8e 54 07 00 00 41 c7 86 40 ff ff ff ea ff ff ff 48 8d 78 28 48 ba 00 00 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 <80> 3c 11 00 0f 85 56 07 00 00 48 b9 00 00 00 00 00 fc ff df 48 8b RSP: 0018:ffff8881ba6e7478 EFLAGS: 00010206 RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000005 RDX: dffffc0000000000 RSI: ffffffff86a8e063 RDI: 0000000000000028 kobject: 'loop0' (00000000a588ac2d): kobject_uevent_env RBP: ffff8881ba6e75a0 R08: ffff8881b61f0680 R09: ffffed10374dce6a R10: ffffed10374dce6a R11: 0000000000000003 R12: ffff8881b77a4080 R13: ffff8881ba6e74b8 R14: ffff8881ba6e7578 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff8881daf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b2e823000 CR3: 0000000192d08000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: kobject: 'loop0' (00000000a588ac2d): fill_kobj_path: path = '/devices/virtual/block/loop0' kernel_accept+0x136/0x310 net/socket.c:3250 smc_clcsock_accept net/smc/af_smc.c:834 [inline] smc_tcp_listen_work+0x218/0x11c0 net/smc/af_smc.c:1302 process_one_work+0xc90/0x1c40 kernel/workqueue.c:2153 worker_thread+0x17f/0x1390 kernel/workqueue.c:2296 kthread+0x35a/0x440 kernel/kthread.c:246 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:352 Modules linked in: kobject: 'loop4' (00000000dce4ecac): kobject_uevent_env kobject: 'loop4' (00000000dce4ecac): fill_kobj_path: path = '/devices/virtual/block/loop4' netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. kobject: 'loop1' (00000000fd5308c7): kobject_uevent_env kobject: 'loop1' (00000000fd5308c7): fill_kobj_path: path = '/devices/virtual/block/loop1' kobject: 'loop5' (000000001847bc80): kobject_uevent_env kobject: 'loop5' (000000001847bc80): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: 'loop0' (00000000a588ac2d): kobject_uevent_env kobject: 'loop0' (00000000a588ac2d): fill_kobj_path: path = '/devices/virtual/block/loop0' kobject: 'loop5' (000000001847bc80): kobject_uevent_env kobject: 'loop5' (000000001847bc80): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: 'loop2' (00000000d94ec6a2): kobject_uevent_env kobject: 'loop2' (00000000d94ec6a2): fill_kobj_path: path = '/devices/virtual/block/loop2' kobject: 'loop4' (00000000dce4ecac): kobject_uevent_env kobject: 'loop4' (00000000dce4ecac): fill_kobj_path: path = '/devices/virtual/block/loop4' kobject: 'loop3' (00000000023a2942): kobject_uevent_env kobject: 'loop3' (00000000023a2942): fill_kobj_path: path = '/devices/virtual/block/loop3' kobject: 'loop0' (00000000a588ac2d): kobject_uevent_env kobject: 'loop0' (00000000a588ac2d): fill_kobj_path: path = '/devices/virtual/block/loop0' kobject: 'loop2' (00000000d94ec6a2): kobject_uevent_env kobject: 'loop2' (00000000d94ec6a2): fill_kobj_path: path = '/devices/virtual/block/loop2' kobject: 'loop4' (00000000dce4ecac): kobject_uevent_env kobject: 'loop4' (00000000dce4ecac): fill_kobj_path: path = '/devices/virtual/block/loop4' kobject: 'loop2' (00000000d94ec6a2): kobject_uevent_env kobject: 'loop2' (00000000d94ec6a2): fill_kobj_path: path = '/devices/virtual/block/loop2' kobject: 'loop5' (000000001847bc80): kobject_uevent_env kobject: 'loop5' (000000001847bc80): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: 'loop2' (00000000d94ec6a2): kobject_uevent_env sock: sock_set_timeout: `syz-executor3' (pid 30851) tries to set negative timeout kobject: 'loop2' (00000000d94ec6a2): fill_kobj_path: path = '/devices/virtual/block/loop2' kobject: 'loop2' (00000000d94ec6a2): kobject_uevent_env kobject: 'loop2' (00000000d94ec6a2): fill_kobj_path: path = '/devices/virtual/block/loop2' ---[ end trace 6d32c729eb3a9214 ]--- RIP: 0010:inet_accept+0x106/0x9e0 net/ipv4/af_inet.c:734 Code: 09 80 fa 03 0f 8e 54 07 00 00 41 c7 86 40 ff ff ff ea ff ff ff 48 8d 78 28 48 ba 00 00 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 <80> 3c 11 00 0f 85 56 07 00 00 48 b9 00 00 00 00 00 fc ff df 48 8b kobject: 'loop1' (00000000fd5308c7): kobject_uevent_env RSP: 0018:ffff8881ba6e7478 EFLAGS: 00010206 kobject: 'loop1' (00000000fd5308c7): fill_kobj_path: path = '/devices/virtual/block/loop1' RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000005 RDX: dffffc0000000000 RSI: ffffffff86a8e063 RDI: 0000000000000028 kobject: 'loop0' (00000000a588ac2d): kobject_uevent_env kobject: 'loop0' (00000000a588ac2d): fill_kobj_path: path = '/devices/virtual/block/loop0' RBP: ffff8881ba6e75a0 R08: ffff8881b61f0680 R09: ffffed10374dce6a kobject: 'loop5' (000000001847bc80): kobject_uevent_env R10: ffffed10374dce6a R11: 0000000000000003 R12: ffff8881b77a4080 R13: ffff8881ba6e74b8 R14: ffff8881ba6e7578 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff8881daf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f1cc0b96518 CR3: 00000001c4ae7000 CR4: 00000000001406e0 kobject: 'loop5' (000000001847bc80): fill_kobj_path: path = '/devices/virtual/block/loop5' DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400