kasan: CONFIG_KASAN_INLINE enabled kasan: GPF could be caused by NULL-ptr deref or user memory access general protection fault: 0000 [#1] PREEMPT SMP KASAN CPU: 1 PID: 1268 Comm: syz-executor.4 Not tainted 5.0.0+ #111 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 kobject: 'loop3' (0000000036b93dcf): kobject_uevent_env RIP: 0010:fib6_drop_pcpu_from net/ipv6/ip6_fib.c:924 [inline] RIP: 0010:fib6_purge_rt+0x4b3/0x670 net/ipv6/ip6_fib.c:960 Code: 0f b6 35 57 b8 4a 03 31 ff 44 89 f6 e8 06 56 61 fb 45 84 f6 0f 84 b3 00 00 00 e8 b8 54 61 fb 49 8d 7f 70 48 89 f8 48 c1 e8 03 <80> 3c 18 00 0f 85 64 01 00 00 48 89 f8 4d 8b 77 70 48 c1 e8 03 80 kobject: 'loop3' (0000000036b93dcf): fill_kobj_path: path = '/devices/virtual/block/loop3' RSP: 0018:ffff888054127670 EFLAGS: 00010207 RAX: 0000000000000024 RBX: dffffc0000000000 RCX: ffffc9000a219000 RDX: 0000000000000166 RSI: ffffffff860e61b8 RDI: 0000000000000126 RBP: ffff8880541276c8 R08: ffff88808dbfe700 R09: ffffed100a0fe91e R10: ffffed100a0fe91d R11: ffff8880507f48ef R12: 0000000000000001 R13: ffff8880507f48c0 R14: 0000000000000001 R15: 00000000000000b6 FS: 00007efd8caaa700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00000000004cdeb0 CR3: 000000009ba8d000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: fib6_del_route net/ipv6/ip6_fib.c:1813 [inline] fib6_del+0xac2/0x10a0 net/ipv6/ip6_fib.c:1844 sctp: [Deprecated]: syz-executor.2 (pid 1269) Use of int in maxseg socket option. Use struct sctp_assoc_value instead __ip6_del_rt_siblings net/ipv6/route.c:3209 [inline] ip6_route_del+0xf8e/0x1310 net/ipv6/route.c:3295 ipv6_route_ioctl+0x313/0x350 net/ipv6/route.c:3646 inet6_ioctl+0x11a/0x1c0 net/ipv6/af_inet6.c:558 sock_do_ioctl+0xde/0x300 net/socket.c:972 sock_ioctl+0x32b/0x610 net/socket.c:1096 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:509 [inline] do_vfs_ioctl+0xd6e/0x1390 fs/ioctl.c:696 ksys_ioctl+0xab/0xd0 fs/ioctl.c:713 __do_sys_ioctl fs/ioctl.c:720 [inline] __se_sys_ioctl fs/ioctl.c:718 [inline] __x64_sys_ioctl+0x73/0xb0 fs/ioctl.c:718 do_syscall_64+0x103/0x610 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x457f29 Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007efd8caa9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457f29 RDX: 0000000020000180 RSI: 000000000000890c RDI: 0000000000000005 RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007efd8caaa6d4 R13: 00000000004c3416 R14: 00000000004d61c8 R15: 00000000ffffffff Modules linked in: ---[ end trace 35c891e61d593ae1 ]--- RIP: 0010:fib6_drop_pcpu_from net/ipv6/ip6_fib.c:924 [inline] RIP: 0010:fib6_purge_rt+0x4b3/0x670 net/ipv6/ip6_fib.c:960 Code: 0f b6 35 57 b8 4a 03 31 ff 44 89 f6 e8 06 56 61 fb 45 84 f6 0f 84 b3 00 00 00 e8 b8 54 61 fb 49 8d 7f 70 48 89 f8 48 c1 e8 03 <80> 3c 18 00 0f 85 64 01 00 00 48 89 f8 4d 8b 77 70 48 c1 e8 03 80 RSP: 0018:ffff888054127670 EFLAGS: 00010207 RAX: 0000000000000024 RBX: dffffc0000000000 RCX: ffffc9000a219000 RDX: 0000000000000166 RSI: ffffffff860e61b8 RDI: 0000000000000126 kobject: 'loop0' (0000000038cbc4f9): kobject_uevent_env RBP: ffff8880541276c8 R08: ffff88808dbfe700 R09: ffffed100a0fe91e kobject: 'loop0' (0000000038cbc4f9): fill_kobj_path: path = '/devices/virtual/block/loop0' R10: ffffed100a0fe91d R11: ffff8880507f48ef R12: 0000000000000001 R13: ffff8880507f48c0 R14: 0000000000000001 R15: 00000000000000b6 FS: 00007efd8caaa700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00000000004cdeb0 CR3: 000000009ba8d000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 kobject: 'loop2' (000000007911c94b): kobject_uevent_env