kasan: CONFIG_KASAN_INLINE enabled kasan: GPF could be caused by NULL-ptr deref or user memory access netlink: 'syz-executor0': attribute type 21 has an invalid length. general protection fault: 0000 [#1] PREEMPT SMP KASAN CPU: 0 PID: 5 Comm: kworker/0:0 Not tainted 4.19.0-rc6+ #247 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: events smc_tcp_listen_work RIP: 0010:inet_accept+0x106/0x9e0 net/ipv4/af_inet.c:734 Code: 09 80 fa 03 0f 8e 54 07 00 00 41 c7 86 40 ff ff ff ea ff ff ff 48 8d 78 28 48 ba 00 00 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 <80> 3c 11 00 0f 85 56 07 00 00 48 b9 00 00 00 00 00 fc ff df 48 8b RSP: 0018:ffff8801d9a7f478 EFLAGS: 00010206 RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000005 RDX: dffffc0000000000 RSI: ffffffff868d6353 RDI: 0000000000000028 RBP: ffff8801d9a7f5a0 R08: ffff8801d9a74140 R09: ffffed003b34fe6a R10: ffffed003b34fe6a R11: 0000000000000003 R12: ffff8801b92a4480 R13: ffff8801d9a7f4b8 R14: ffff8801d9a7f578 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000000165f7d0 CR3: 00000001d3bcb000 CR4: 00000000001406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: kernel_accept+0x136/0x310 net/socket.c:3247 smc_clcsock_accept net/smc/af_smc.c:834 [inline] smc_tcp_listen_work+0x218/0x11c0 net/smc/af_smc.c:1302 process_one_work+0xc90/0x1b90 kernel/workqueue.c:2153 worker_thread+0x17f/0x1390 kernel/workqueue.c:2296 kthread+0x35a/0x420 kernel/kthread.c:246 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:413 Modules linked in: kobject: 'loop0' (000000002ecff227): kobject_uevent_env kobject: 'loop0' (000000002ecff227): fill_kobj_path: path = '/devices/virtual/block/loop0' ---[ end trace 4276025bec3258a1 ]--- RIP: 0010:inet_accept+0x106/0x9e0 net/ipv4/af_inet.c:734 netlink: 'syz-executor0': attribute type 21 has an invalid length. kobject: 'loop2' (00000000f6d5a0a9): kobject_uevent_env Code: 09 80 fa 03 0f 8e 54 07 00 00 41 c7 86 40 ff ff ff ea ff ff ff 48 8d 78 28 48 ba 00 00 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 <80> 3c 11 00 0f 85 56 07 00 00 48 b9 00 00 00 00 00 fc ff df 48 8b kobject: 'loop2' (00000000f6d5a0a9): fill_kobj_path: path = '/devices/virtual/block/loop2' kobject: 'loop4' (00000000afdd44ee): kobject_uevent_env kobject: 'loop4' (00000000afdd44ee): fill_kobj_path: path = '/devices/virtual/block/loop4' kobject: 'loop1' (00000000bf73de63): kobject_uevent_env RSP: 0018:ffff8801d9a7f478 EFLAGS: 00010206 kobject: 'loop1' (00000000bf73de63): fill_kobj_path: path = '/devices/virtual/block/loop1' netlink: 'syz-executor0': attribute type 21 has an invalid length. kobject: 'loop3' (000000007003abb7): kobject_uevent_env kobject: 'loop3' (000000007003abb7): fill_kobj_path: path = '/devices/virtual/block/loop3' RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000005 kobject: 'loop0' (000000002ecff227): kobject_uevent_env RDX: dffffc0000000000 RSI: ffffffff868d6353 RDI: 0000000000000028 netlink: 'syz-executor4': attribute type 1 has an invalid length. kobject: 'loop0' (000000002ecff227): fill_kobj_path: path = '/devices/virtual/block/loop0' RBP: ffff8801d9a7f5a0 R08: ffff8801d9a74140 R09: ffffed003b34fe6a kobject: 'loop1' (00000000bf73de63): kobject_uevent_env kobject: 'loop1' (00000000bf73de63): fill_kobj_path: path = '/devices/virtual/block/loop1' R10: ffffed003b34fe6a R11: 0000000000000003 R12: ffff8801b92a4480 kobject: 'loop3' (000000007003abb7): kobject_uevent_env kobject: 'loop3' (000000007003abb7): fill_kobj_path: path = '/devices/virtual/block/loop3' kobject: 'loop2' (00000000f6d5a0a9): kobject_uevent_env kobject: 'loop2' (00000000f6d5a0a9): fill_kobj_path: path = '/devices/virtual/block/loop2' R13: ffff8801d9a7f4b8 R14: ffff8801d9a7f578 R15: dffffc0000000000 kobject: 'loop4' (00000000afdd44ee): kobject_uevent_env kobject: 'loop4' (00000000afdd44ee): fill_kobj_path: path = '/devices/virtual/block/loop4' FS: 0000000000000000(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fe962ebc000 CR3: 00000001ab168000 CR4: 00000000001406f0 kobject: 'loop3' (000000007003abb7): kobject_uevent_env kobject: 'loop3' (000000007003abb7): fill_kobj_path: path = '/devices/virtual/block/loop3' DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 kobject: 'loop5' (00000000aa760683): kobject_uevent_env kobject: 'loop5' (00000000aa760683): fill_kobj_path: path = '/devices/virtual/block/loop5' DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400