__nla_parse: 19 callbacks suppressed netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. kasan: CONFIG_KASAN_INLINE enabled kasan: GPF could be caused by NULL-ptr deref or user memory access general protection fault: 0000 [#1] PREEMPT SMP KASAN CPU: 1 PID: 3837 Comm: kworker/1:2 Not tainted 4.20.0-rc3+ #318 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: events smc_tcp_listen_work RIP: 0010:kernel_accept+0x34/0x310 net/socket.c:3242 Code: d6 41 55 49 89 fd 41 54 49 89 f4 53 48 83 ec 08 e8 61 43 5a fb 49 8d 7d 20 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 4a 02 00 00 48 b8 00 00 00 00 00 fc ff df 49 8b RSP: 0018:ffff8881ba2bf5b0 EFLAGS: 00010202 RAX: dffffc0000000000 RBX: ffff8881b713b380 RCX: 1ffff11037456169 RDX: 0000000000000004 RSI: ffffffff8625477f RDI: 0000000000000020 RBP: ffff8881ba2bf5e0 R08: ffff8881ba2b0b48 R09: 0000000000000006 R10: 0000000000000000 R11: ffff8881ba2b0280 R12: ffff8881ba2bf690 R13: 0000000000000000 R14: 0000000000000000 R15: ffff8881bef1d438 FS: 0000000000000000(0000) GS:ffff8881daf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f10e89e6000 CR3: 0000000178e76000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: smc_clcsock_accept net/smc/af_smc.c:840 [inline] smc_tcp_listen_work+0x218/0x11c0 net/smc/af_smc.c:1307 process_one_work+0xc90/0x1c40 kernel/workqueue.c:2153 netlink: 12 bytes leftover after parsing attributes in process `syz-executor1'. netlink: 12 bytes leftover after parsing attributes in process `syz-executor1'. kobject: 'loop4' (00000000bba48227): kobject_uevent_env worker_thread+0x17f/0x1390 kernel/workqueue.c:2296 kobject: 'loop4' (00000000bba48227): fill_kobj_path: path = '/devices/virtual/block/loop4' kobject: 'loop5' (000000006cb4d466): kobject_uevent_env kobject: 'loop5' (000000006cb4d466): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: 'loop1' (00000000c657a4e5): kobject_uevent_env kobject: 'loop1' (00000000c657a4e5): fill_kobj_path: path = '/devices/virtual/block/loop1' kobject: 'loop2' (00000000a1295f8e): kobject_uevent_env kobject: 'loop2' (00000000a1295f8e): fill_kobj_path: path = '/devices/virtual/block/loop2' kthread+0x35a/0x440 kernel/kthread.c:246 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:352 Modules linked in: kobject: 'rx-0' (00000000c03f8992): kobject_cleanup, parent 00000000d1c17500 ---[ end trace c6b9e1553c14c141 ]--- RIP: 0010:kernel_accept+0x34/0x310 net/socket.c:3242 kobject: 'rx-0' (00000000c03f8992): auto cleanup 'remove' event Code: d6 41 55 49 89 fd 41 54 49 89 f4 53 48 83 ec 08 e8 61 43 5a fb 49 8d 7d 20 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 4a 02 00 00 48 b8 00 00 00 00 00 fc ff df 49 8b kobject: 'rx-0' (00000000c03f8992): kobject_uevent_env kobject: 'rx-0' (00000000c03f8992): kobject_uevent_env: uevent_suppress caused the event to drop! RSP: 0018:ffff8881ba2bf5b0 EFLAGS: 00010202 kobject: 'rx-0' (00000000c03f8992): auto cleanup kobject_del RAX: dffffc0000000000 RBX: ffff8881b713b380 RCX: 1ffff11037456169 kobject: 'rx-0' (00000000c03f8992): calling ktype release RDX: 0000000000000004 RSI: ffffffff8625477f RDI: 0000000000000020 kobject: 'rx-0': free name RBP: ffff8881ba2bf5e0 R08: ffff8881ba2b0b48 R09: 0000000000000006 R10: 0000000000000000 R11: ffff8881ba2b0280 R12: ffff8881ba2bf690 R13: 0000000000000000 R14: 0000000000000000 R15: ffff8881bef1d438 FS: 0000000000000000(0000) GS:ffff8881daf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b2dd2b000 CR3: 00000001d80a6000 CR4: 00000000001406e0 kobject: 'tx-0' (000000001bd22157): kobject_cleanup, parent 00000000d1c17500 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 kobject: 'tx-0' (000000001bd22157): auto cleanup 'remove' event DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 kobject: 'tx-0' (000000001bd22157): kobject_uevent_env