kasan: GPF could be caused by NULL-ptr deref or user memory access general protection fault: 0000 [#1] PREEMPT SMP KASAN kobject: 'loop5' (00000000818f1137): kobject_uevent_env CPU: 1 PID: 29962 Comm: syz-executor1 Not tainted 4.19.0-rc4-next-20180918+ #74 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 kobject: 'loop5' (00000000818f1137): fill_kobj_path: path = '/devices/virtual/block/loop5' RIP: 0010:dev_net include/linux/netdevice.h:2165 [inline] RIP: 0010:__skb_flow_dissect+0x3b5/0x5980 net/core/flow_dissector.c:758 Code: 48 c1 ea 03 80 3c 02 00 0f 85 a6 4d 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b 77 10 49 8d be 80 05 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 5c 4d 00 00 4d 8b b6 80 05 00 00 48 b8 00 00 00 RSP: 0018:ffff88012fbbed90 EFLAGS: 00010202 RAX: dffffc0000000000 RBX: ffff88012fbbf160 RCX: ffffc90003268000 RDX: 00000000000000b0 RSI: ffffffff861227d8 RDI: 0000000000000580 RBP: ffff88012fbbf4f0 R08: ffff8801c775a280 R09: ffffed003b585b57 R10: ffffed003b585b57 R11: ffff8801dac2dabb R12: ffffffff8a5202a4 R13: ffffffff8a5202a6 R14: 0000000000000000 R15: ffff8801be041cc0 FS: 00007fa891e14700(0000) GS:ffff8801dad00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fba55ab3000 CR3: 00000001bdd8c000 CR4: 00000000001406e0 DR0: 000000000000b8c4 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 Call Trace: kobject: 'loop4' (0000000060de7114): kobject_uevent_env kobject: 'loop4' (0000000060de7114): fill_kobj_path: path = '/devices/virtual/block/loop4' skb_flow_dissect_flow_keys_basic include/linux/skbuff.h:1232 [inline] skb_get_poff+0x9b/0x1c0 net/core/flow_dissector.c:1486 ____bpf_skb_get_pay_offset net/core/filter.c:126 [inline] bpf_skb_get_pay_offset+0x15/0x20 net/core/filter.c:124 Modules linked in: kobject: 'loop3' (000000000d3c1255): kobject_uevent_env kobject: 'loop3' (000000000d3c1255): fill_kobj_path: path = '/devices/virtual/block/loop3' netlink: 'syz-executor5': attribute type 27 has an invalid length. cgroup: fork rejected by pids controller in /syz4 (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) kobject: 'loop3' (000000000d3c1255): kobject_uevent_env kobject: 'loop3' (000000000d3c1255): fill_kobj_path: path = '/devices/virtual/block/loop3' ---[ end trace c37909f3a2fe012b ]--- RIP: 0010:dev_net include/linux/netdevice.h:2165 [inline] RIP: 0010:__skb_flow_dissect+0x3b5/0x5980 net/core/flow_dissector.c:758 kobject: 'loop5' (00000000818f1137): kobject_uevent_env Code: 48 c1 ea 03 80 3c 02 00 0f 85 a6 4d 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b 77 10 49 8d be 80 05 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 5c 4d 00 00 4d 8b b6 80 05 00 00 48 b8 00 00 00 kobject: 'loop5' (00000000818f1137): fill_kobj_path: path = '/devices/virtual/block/loop5' RSP: 0018:ffff88012fbbed90 EFLAGS: 00010202 RAX: dffffc0000000000 RBX: ffff88012fbbf160 RCX: ffffc90003268000 RDX: 00000000000000b0 RSI: ffffffff861227d8 RDI: 0000000000000580 RBP: ffff88012fbbf4f0 R08: ffff8801c775a280 R09: ffffed003b585b57 kobject: 'loop2' (00000000b950519c): kobject_uevent_env R10: ffffed003b585b57 R11: ffff8801dac2dabb R12: ffffffff8a5202a4 R13: ffffffff8a5202a6 R14: 0000000000000000 R15: ffff8801be041cc0 kobject: 'loop2' (00000000b950519c): fill_kobj_path: path = '/devices/virtual/block/loop2' FS: 00007fa891e14700(0000) GS:ffff8801dad00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f799923fdb8 CR3: 00000001bdd8c000 CR4: 00000000001406e0 DR0: 000000000000b8c4 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 kobject: 'loop0' (00000000484980be): kobject_uevent_env kobject: 'loop0' (00000000484980be): fill_kobj_path: path = '/devices/virtual/block/loop0'