sock: sock_set_timeout: `syz-executor2' (pid 5086) tries to set negative timeout ------------[ cut here ]------------ WARNING: CPU: 0 PID: 5090 at kernel/kthread.c:87 free_kthread_struct+0xa2/0xe0 kernel/kthread.c:87 Kernel panic - not syncing: panic_on_warn set ... CPU: 0 PID: 5090 Comm: syz-executor1 Not tainted 4.14.0-rc2-next-20170929+ #32 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:16 [inline] dump_stack+0x194/0x257 lib/dump_stack.c:52 panic+0x1e4/0x41c kernel/panic.c:181 __warn+0x1c4/0x1e0 kernel/panic.c:542 report_bug+0x211/0x2d0 lib/bug.c:183 fixup_bug+0x40/0x90 arch/x86/kernel/traps.c:178 do_trap_no_signal arch/x86/kernel/traps.c:212 [inline] do_trap+0x260/0x390 arch/x86/kernel/traps.c:261 do_error_trap+0x120/0x390 arch/x86/kernel/traps.c:298 do_invalid_op+0x1b/0x20 arch/x86/kernel/traps.c:311 invalid_op+0x18/0x20 arch/x86/entry/entry_64.S:905 RIP: 0010:free_kthread_struct+0xa2/0xe0 kernel/kthread.c:87 RSP: 0018:ffff8801db207768 EFLAGS: 00010206 RAX: ffff8801d12ce580 RBX: ffff8801d5155d40 RCX: 1ffff1003b640ee1 RDX: 0000000000000100 RSI: 0000000000000000 RDI: ffff8801d5155ec8 RBP: ffff8801db207770 R08: ffff8801db21f5a8 R09: 1ffff1003b640ed4 R10: ffff8801d12ce580 R11: 0000000000000002 R12: 1ffff1003b640ef0 R13: 1ffff1003b640ef4 R14: 0000000000000000 R15: ffff8801db2077e0 free_task+0x134/0x1a0 kernel/fork.c:386 __put_task_struct+0x229/0x3b0 kernel/fork.c:667 put_task_struct include/linux/sched/task.h:95 [inline] delayed_put_task_struct+0xca/0x3d0 kernel/exit.c:180 __rcu_reclaim kernel/rcu/rcu.h:195 [inline] rcu_do_batch kernel/rcu/tree.c:2758 [inline] invoke_rcu_callbacks kernel/rcu/tree.c:3012 [inline] __rcu_process_callbacks kernel/rcu/tree.c:2979 [inline] rcu_process_callbacks+0xd74/0x17d0 kernel/rcu/tree.c:2996 __do_softirq+0x29d/0xbb2 kernel/softirq.c:284 invoke_softirq kernel/softirq.c:364 [inline] irq_exit+0x1d3/0x210 kernel/softirq.c:405 exiting_irq arch/x86/include/asm/apic.h:540 [inline] smp_apic_timer_interrupt+0x16b/0x700 arch/x86/kernel/apic/apic.c:1041 apic_timer_interrupt+0x9d/0xb0 arch/x86/entry/entry_64.S:770 RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:777 [inline] RIP: 0010:qlink_free mm/kasan/quarantine.c:150 [inline] RIP: 0010:qlist_free_all+0xa9/0x160 mm/kasan/quarantine.c:166 RSP: 0018:ffff8801cd5b78d8 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff11 RAX: 0000000000000007 RBX: 0000000000000286 RCX: 0000000000000006 RDX: 0000000000000000 RSI: ffff8801d12cee28 RDI: 0000000000000286 RBP: ffff8801cd5b7910 R08: ffff8801db21f500 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 R13: ffff8801dac79680 R14: ffff8801d1b4cb40 R15: ffffffff85acb860 quarantine_reduce+0x141/0x170 mm/kasan/quarantine.c:259 kasan_kmalloc+0xca/0xe0 mm/kasan/kasan.c:536 kasan_slab_alloc+0x12/0x20 mm/kasan/kasan.c:489 slab_post_alloc_hook mm/slab.h:448 [inline] slab_alloc mm/slab.c:3398 [inline] kmem_cache_alloc+0x11b/0x760 mm/slab.c:3560 kmem_cache_zalloc include/linux/slab.h:687 [inline] alloc_vfsmnt+0xe0/0x9c0 fs/namespace.c:205 vfs_kern_mount.part.26+0x84/0x4a0 fs/namespace.c:1028 vfs_kern_mount fs/namespace.c:2507 [inline] do_new_mount fs/namespace.c:2510 [inline] do_mount+0xea1/0x2bb0 fs/namespace.c:2838 SYSC_mount fs/namespace.c:3054 [inline] SyS_mount+0xab/0x120 fs/namespace.c:3031 entry_SYSCALL_64_fastpath+0x1f/0xbe RIP: 0033:0x4520a9 RSP: 002b:00007f58ac253c08 EFLAGS: 00000216 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 00000000007180b0 RCX: 00000000004520a9 RDX: 0000000020ce8ff9 RSI: 00000000208f8ff8 RDI: 0000000020ad0000 RBP: 0000000000000086 R08: 0000000020000000 R09: 0000000000000000 R10: 0000000000000004 R11: 0000000000000216 R12: 00000000004b7fd1 R13: 00000000ffffffff R14: 0000000020000000 R15: 0000000000fff000 Dumping ftrace buffer: (ftrace buffer empty) Kernel Offset: disabled Rebooting in 86400 seconds..