kasan: CONFIG_KASAN_INLINE enabled kasan: GPF could be caused by NULL-ptr deref or user memory access kobject: 'loop5' (000000007f8f5bc3): kobject_uevent_env general protection fault: 0000 [#1] PREEMPT SMP KASAN CPU: 0 PID: 3764 Comm: syz-executor.2 Not tainted 4.19.49 #21 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:ax25_send_frame+0xe5/0x580 net/ax25/ax25_out.c:59 Code: 88 00 00 48 85 c0 0f 85 d4 03 00 00 e8 c4 f9 43 fb 49 8d bc 24 38 03 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 fb 03 00 00 49 8b 84 24 38 03 00 00 48 85 c0 48 kobject: 'loop5' (000000007f8f5bc3): fill_kobj_path: path = '/devices/virtual/block/loop5' RSP: 0018:ffff8880ae807a90 EFLAGS: 00010202 RAX: dffffc0000000000 RBX: ffff88821603bc88 RCX: 1ffff1100ac221a6 RDX: 0000000000000067 RSI: ffffffff86270ccc RDI: 0000000000000338 RBP: ffff8880ae807ad0 R08: ffff888056110440 R09: ffff888056110d30 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 kobject: 'loop4' (00000000d1ca0cee): kobject_uevent_env R13: ffffffff8aee47a0 R14: 0000000000000104 R15: 0000000000000000 FS: 00000000029f4940(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000000046e880 CR3: 00000000852dd000 CR4: 00000000001406f0 Call Trace: kobject: 'loop4' (00000000d1ca0cee): fill_kobj_path: path = '/devices/virtual/block/loop4' rose_send_frame+0xda/0x280 net/rose/rose_link.c:109 rose_transmit_clear_request+0x1de/0x2a0 net/rose/rose_link.c:258 kobject: 'loop4' (00000000d1ca0cee): kobject_uevent_env rose_rx_call_request+0x4f2/0x19d0 net/rose/af_rose.c:999 kobject: 'loop4' (00000000d1ca0cee): fill_kobj_path: path = '/devices/virtual/block/loop4' rose_loopback_timer+0x164/0x480 net/rose/rose_loopback.c:103 call_timer_fn+0x18d/0x720 kernel/time/timer.c:1326 kobject: 'loop3' (000000004adef49a): kobject_uevent_env kobject: 'loop3' (000000004adef49a): fill_kobj_path: path = '/devices/virtual/block/loop3' expire_timers kernel/time/timer.c:1363 [inline] __run_timers kernel/time/timer.c:1682 [inline] __run_timers kernel/time/timer.c:1650 [inline] run_timer_softirq+0x652/0x1700 kernel/time/timer.c:1695 __do_softirq+0x25c/0x921 kernel/softirq.c:292 kobject: 'loop3' (000000004adef49a): kobject_uevent_env invoke_softirq kernel/softirq.c:372 [inline] irq_exit+0x180/0x1d0 kernel/softirq.c:412 exiting_irq arch/x86/include/asm/apic.h:536 [inline] smp_apic_timer_interrupt+0x13b/0x550 arch/x86/kernel/apic/apic.c:1056 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:869 kobject: 'loop3' (000000004adef49a): fill_kobj_path: path = '/devices/virtual/block/loop3' RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:788 [inline] RIP: 0010:lock_is_held_type+0x17e/0x210 kernel/locking/lockdep.c:3940 Code: 00 00 00 fc ff df 41 c7 85 7c 08 00 00 00 00 00 00 48 c1 e8 03 80 3c 10 00 75 63 48 83 3d e1 9d 20 07 00 74 30 48 89 df 57 9d <0f> 1f 44 00 00 48 83 c4 08 44 89 e0 5b 41 5c 41 5d 5d c3 48 83 c4 RSP: 0018:ffff8880488e7a60 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 RAX: 1ffffffff10e46c9 RBX: 0000000000000286 RCX: ffff888056110cc0 RDX: dffffc0000000000 RSI: ffffffff8879d760 RDI: 0000000000000286 RBP: ffff8880488e7a80 R08: ffff888056110440 R09: ffffed1015d04733 R10: ffffed1015d04732 R11: ffff8880ae823993 R12: 0000000000000000 R13: ffff888056110440 R14: 0000000000000000 R15: ffff88808d7caf18 kobject: 'loop3' (000000004adef49a): kobject_uevent_env lock_is_held include/linux/lockdep.h:344 [inline] rcu_read_lock_sched_held+0x110/0x130 kernel/rcu/update.c:118 trace_block_touch_buffer include/trace/events/block.h:45 [inline] touch_buffer fs/buffer.c:58 [inline] __find_get_block+0xa35/0xcf0 fs/buffer.c:1299 sb_find_get_block include/linux/buffer_head.h:338 [inline] recently_deleted fs/ext4/ialloc.c:682 [inline] find_inode_bit.isra.0+0x202/0x510 fs/ext4/ialloc.c:722 kobject: 'loop3' (000000004adef49a): fill_kobj_path: path = '/devices/virtual/block/loop3' __ext4_new_inode+0x14ab/0x52c0 fs/ext4/ialloc.c:914 ext4_symlink+0x3f8/0xbe0 fs/ext4/namei.c:3099 vfs_symlink fs/namei.c:4126 [inline] vfs_symlink+0x373/0x5c0 fs/namei.c:4112 do_symlinkat+0x22b/0x290 fs/namei.c:4153 __do_sys_symlink fs/namei.c:4172 [inline] __se_sys_symlink fs/namei.c:4170 [inline] __x64_sys_symlink+0x59/0x80 fs/namei.c:4170 do_syscall_64+0xfd/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x458fa7 Code: 0f 1f 00 b8 5c 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 bd ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 9d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007fff2a8d5aa8 EFLAGS: 00000202 ORIG_RAX: 0000000000000058 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000458fa7 RDX: 00007fff2a8d5b43 RSI: 00000000004bea59 RDI: 00007fff2a8d5b30 RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000013 R10: 0000000000000075 R11: 0000000000000202 R12: 0000000000000000 R13: 00007fff2a8d5ae0 R14: 0000000000000000 R15: 00007fff2a8d5af0 Modules linked in: ---[ end trace a45c27714c4150f4 ]--- RIP: 0010:ax25_send_frame+0xe5/0x580 net/ax25/ax25_out.c:59 Code: 88 00 00 48 85 c0 0f 85 d4 03 00 00 e8 c4 f9 43 fb 49 8d bc 24 38 03 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 fb 03 00 00 49 8b 84 24 38 03 00 00 48 85 c0 48 RSP: 0018:ffff8880ae807a90 EFLAGS: 00010202 RAX: dffffc0000000000 RBX: ffff88821603bc88 RCX: 1ffff1100ac221a6 RDX: 0000000000000067 RSI: ffffffff86270ccc RDI: 0000000000000338 RBP: ffff8880ae807ad0 R08: ffff888056110440 R09: ffff888056110d30 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 R13: ffffffff8aee47a0 R14: 0000000000000104 R15: 0000000000000000 FS: 00000000029f4940(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000000046e880 CR3: 00000000852dd000 CR4: 00000000001406f0