kasan: CONFIG_KASAN_INLINE enabled kasan: GPF could be caused by NULL-ptr deref or user memory access general protection fault: 0000 [#1] PREEMPT SMP KASAN CPU: 1 PID: 7612 Comm: syz-fuzzer Not tainted 5.0.0-rc7+ #101 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:lock_accessed kernel/locking/lockdep.c:968 [inline] RIP: 0010:__bfs kernel/locking/lockdep.c:1035 [inline] RIP: 0010:__bfs+0x18a/0x5a0 kernel/locking/lockdep.c:989 Code: 8b 3f 4d 39 fd 0f 84 77 01 00 00 49 8d 7f 10 4c 89 f8 4c 8b 0d 17 8f fa 08 48 89 f9 48 2d a0 27 31 8a 48 c1 e9 03 48 c1 f8 06 <42> 80 3c 31 00 0f 85 db 02 00 00 49 8b 77 10 4c 8d 46 2c 4c 89 c1 xt_connbytes: cannot load conntrack support for proto=7 RSP: 0018:ffff8880ae907828 EFLAGS: 00010003 RAX: 0000000001d73b61 RBX: ffff8880ae9078f0 RCX: 0000000000000002 RDX: 0000000000000000 RSI: 1ffffffff14aad54 RDI: 0000000000000010 RBP: ffff8880ae907890 R08: 0000000000000001 R09: 0000000000003284 R10: ffffed1015d25bcf R11: 0000000000000000 R12: 0000000000000006 R13: ffffffff8a22bbd0 R14: dffffc0000000000 R15: 0000000000000000 FS: 000000c420026068(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000000070b158 CR3: 000000008c875000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 kobject: 'loop1' (0000000074191caa): kobject_uevent_env Call Trace: kobject: 'loop1' (0000000074191caa): fill_kobj_path: path = '/devices/virtual/block/loop1' __bfs_forwards kernel/locking/lockdep.c:1063 [inline] find_usage_forwards kernel/locking/lockdep.c:1363 [inline] check_usage_forwards+0x119/0x340 kernel/locking/lockdep.c:2575 xt_connbytes: cannot load conntrack support for proto=7 mark_lock_irq kernel/locking/lockdep.c:2690 [inline] mark_lock+0x427/0x1380 kernel/locking/lockdep.c:3062 mark_irqflags kernel/locking/lockdep.c:2940 [inline] __lock_acquire+0x128f/0x4700 kernel/locking/lockdep.c:3295 kobject: 'loop4' (000000000e6a169e): kobject_uevent_env kobject: 'loop4' (000000000e6a169e): fill_kobj_path: path = '/devices/virtual/block/loop4' lock_acquire+0x16f/0x3f0 kernel/locking/lockdep.c:3841 __raw_spin_lock include/linux/spinlock_api_smp.h:142 [inline] _raw_spin_lock+0x2f/0x40 kernel/locking/spinlock.c:144 spin_lock include/linux/spinlock.h:329 [inline] __queue_work+0x9ce/0x1180 kernel/workqueue.c:1434 delayed_work_timer_fn+0x5d/0x90 kernel/workqueue.c:1520 call_timer_fn+0x190/0x720 kernel/time/timer.c:1325 expire_timers kernel/time/timer.c:1358 [inline] __run_timers kernel/time/timer.c:1681 [inline] __run_timers kernel/time/timer.c:1649 [inline] run_timer_softirq+0x44c/0x1700 kernel/time/timer.c:1694 __do_softirq+0x266/0x95a kernel/softirq.c:292 invoke_softirq kernel/softirq.c:373 [inline] irq_exit+0x180/0x1d0 kernel/softirq.c:413 exiting_irq arch/x86/include/asm/apic.h:536 [inline] smp_apic_timer_interrupt+0x14a/0x570 arch/x86/kernel/apic/apic.c:1062 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:807 RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:766 [inline] RIP: 0010:seqcount_lockdep_reader_access include/linux/seqlock.h:83 [inline] RIP: 0010:read_seqcount_begin include/linux/seqlock.h:164 [inline] RIP: 0010:ktime_get_ts64+0x143/0x3f0 kernel/time/timekeeping.c:883 Code: 82 92 88 48 c1 e8 03 42 80 3c 30 00 0f 85 ad 02 00 00 48 83 3d 8d 0b 31 07 00 0f 84 2f 02 00 00 e8 12 6a 0e 00 4c 89 e7 57 9d <0f> 1f 44 00 00 e8 03 6a 0e 00 44 8b 3d 3c b0 39 07 31 ff 45 89 fc RSP: 0018:ffff8880a911fc90 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13 RAX: ffff88808e1ec180 RBX: ffff8880a911fd60 RCX: 0000000000000000 RDX: 0000000000000000 RSI: ffffffff8161776e RDI: 0000000000000293 RBP: ffff8880a911fcf0 R08: ffff88808e1ec180 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000293 R13: fffffbfff112505d R14: dffffc0000000000 R15: 0000000000000200 poll_select_copy_remaining+0x17b/0x440 fs/select.c:313 do_pselect fs/select.c:761 [inline] __do_sys_pselect6 fs/select.c:789 [inline] __se_sys_pselect6 fs/select.c:774 [inline] __x64_sys_pselect6+0x3c3/0x480 fs/select.c:774 do_syscall_64+0x103/0x610 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x45d911 Code: 0f 00 f7 f1 48 89 04 24 b8 e8 03 00 00 f7 e2 48 89 44 24 08 31 ff 31 f6 31 d2 45 31 d2 49 89 e0 45 31 c9 b8 0e 01 00 00 0f 05 <48> 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc b8 ba 00 00 00 0f 05 RSP: 002b:000000c420035f18 EFLAGS: 00000246 ORIG_RAX: 000000000000010e RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000045d911 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 000000c420035f28 R08: 000000c420035f18 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000430120 R13: 00000000000000f1 R14: 0000000000000011 R15: 0000000000000000 Modules linked in: ---[ end trace 677e25d43cc038db ]--- RIP: 0010:lock_accessed kernel/locking/lockdep.c:968 [inline] RIP: 0010:__bfs kernel/locking/lockdep.c:1035 [inline] RIP: 0010:__bfs+0x18a/0x5a0 kernel/locking/lockdep.c:989 Code: 8b 3f 4d 39 fd 0f 84 77 01 00 00 49 8d 7f 10 4c 89 f8 4c 8b 0d 17 8f fa 08 48 89 f9 48 2d a0 27 31 8a 48 c1 e9 03 48 c1 f8 06 <42> 80 3c 31 00 0f 85 db 02 00 00 49 8b 77 10 4c 8d 46 2c 4c 89 c1 RSP: 0018:ffff8880ae907828 EFLAGS: 00010003 RAX: 0000000001d73b61 RBX: ffff8880ae9078f0 RCX: 0000000000000002 RDX: 0000000000000000 RSI: 1ffffffff14aad54 RDI: 0000000000000010 RBP: ffff8880ae907890 R08: 0000000000000001 R09: 0000000000003284 R10: ffffed1015d25bcf R11: 0000000000000000 R12: 0000000000000006 R13: ffffffff8a22bbd0 R14: dffffc0000000000 R15: 0000000000000000 FS: 000000c420026068(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000000070b158 CR3: 000000008c875000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400