IPVS: Creating netns size=2552 id=2 IPVS: Creating netns size=2552 id=3 kasan: CONFIG_KASAN_INLINE enabled kasan: GPF could be caused by NULL-ptr deref or user memory accessgeneral protection fault: 0000 [#1] PREEMPT SMP [ 27.926118] kasan: CONFIG_KASAN_INLINE enabledkasan: GPF could be caused by NULL-ptr deref or user memory access Dumping ftrace buffer: (ftrace buffer empty) Modules linked in: CPU: 1 PID: 3352 Comm: syz-executor0 Not tainted 4.4.107-g610c835 #12 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 task: ffff8801d0d90000 task.stack: ffff8801d0080000 RIP: 0010:[] [] __write_once_size include/linux/compiler.h:247 [inline] RIP: 0010:[] [] __hlist_del include/linux/list.h:619 [inline] RIP: 0010:[] [] hlist_del include/linux/list.h:626 [inline] RIP: 0010:[] [] __xfrm_policy_unlink+0x1a9/0x370 net/xfrm/xfrm_policy.c:1274 RSP: 0018:ffff8801d0087838 EFLAGS: 00010246 RAX: 0000000000000000 RBX: ffff8800b18cf700 RCX: 0000000000000000 RDX: dffffc0000000000 RSI: 1ffff1003a668484 RDI: ffff8800b18cf720 RBP: ffff8801d0087870 R08: ffff8800b18cf890 R09: ffffffff850e9cd0 R10: 0000000000000001 R11: 1ffff1003a010ed8 R12: ffff8800b18cf890 R13: ffff8801d3342420 R14: ffff8801d1548000 R15: 0000000000000000 FS: 00007f77e0868700(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f77e0867db8 CR3: 00000000b478a000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Stack: 0000000000000000 000000039ce7bb2a 0000000000000000 ffff8801d28601c0 0000000000000000 0000000000000000 ffff8800b18cf700 ffff8801d00878c0 ffffffff832af2d4 ffffffff00000003 ffff8801d15499f8 ffff8801d1548000 Call Trace: [] xfrm_sk_policy_unlink net/xfrm/xfrm_policy.c:1290 [inline] [] xfrm_sk_policy_insert+0x1a4/0x470 net/xfrm/xfrm_policy.c:1334 [] xfrm_user_policy+0x373/0x540 net/xfrm/xfrm_state.c:1877 [] do_ipv6_setsockopt.isra.8+0x1d6c/0x30e0 net/ipv6/ipv6_sockglue.c:796 [] ipv6_setsockopt+0xd7/0x150 net/ipv6/ipv6_sockglue.c:903 [] udpv6_setsockopt+0x45/0x80 net/ipv6/udp.c:1436 [] sock_common_setsockopt+0x95/0xd0 net/core/sock.c:2659 [] SYSC_setsockopt net/socket.c:1767 [inline] [] SyS_setsockopt+0x160/0x250 net/socket.c:1746 [] entry_SYSCALL_64_fastpath+0x16/0x76 Code: 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 bd 01 00 00 48 ba 00 00 00 00 00 fc ff df 48 8b 43 20 48 89 c1 48 c1 e9 03 <80> 3c 11 00 0f 85 5d 01 00 00 4d 85 ff 4c 89 38 48 89 45 c8 74 RIP [] __write_once_size include/linux/compiler.h:247 [inline] RIP [] __hlist_del include/linux/list.h:619 [inline] RIP [] hlist_del include/linux/list.h:626 [inline] RIP [] __xfrm_policy_unlink+0x1a9/0x370 net/xfrm/xfrm_policy.c:1274 RSP general protection fault: 0000 [#2] [ 28.291589] ---[ end trace 21c580203b90d7cf ]--- Kernel panic - not syncing: Fatal exception in interrupt PREEMPT SMP KASAN Dumping ftrace buffer: (ftrace buffer empty) Modules linked in: CPU: 0 PID: 3357 Comm: syz-executor4 Tainted: G D 4.4.107-g610c835 #12 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 task: ffff8801d0f7af80 task.stack: ffff8801d01c8000 RIP: 0010:[] [] __write_once_size include/linux/compiler.h:247 [inline] RIP: 0010:[] [] __hlist_del include/linux/list.h:619 [inline] RIP: 0010:[] [] hlist_del include/linux/list.h:626 [inline] RIP: 0010:[] [] __xfrm_policy_unlink+0x1a9/0x370 net/xfrm/xfrm_policy.c:1274 RSP: 0018:ffff8801d01cf838 EFLAGS: 00010246 RAX: 0000000000000000 RBX: ffff8801d00ff700 RCX: 0000000000000000 RDX: dffffc0000000000 RSI: 1ffff1003ab98f98 RDI: ffff8801d00ff720 RBP: ffff8801d01cf870 R08: ffff8801d00ff890 R09: 0000000000000000 R10: ffffffff83843340 R11: 1ffff1003a039ed8 R12: ffff8801d00ff890 R13: ffff8801d5cc7cc0 R14: ffff8801d1549e00 R15: 0000000000000000 FS: 00007fdf0e5d6700(0000) GS:ffff8801db200000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fdf0e5d5db8 CR3: 00000001d2d41000 CR4: 00000000001406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Stack: 0000000000000000 00000003aebdda25 0000000000000000 ffff8801d4848800 0000000000000000 0000000000000000 ffff8801d00ff700 ffff8801d01cf8c0 ffffffff832af2d4 ffffffff00000003 ffff8801d154b7f8 ffff8801d1549e00 Call Trace: [] xfrm_sk_policy_unlink net/xfrm/xfrm_policy.c:1290 [inline] [] xfrm_sk_policy_insert+0x1a4/0x470 net/xfrm/xfrm_policy.c:1334 [] xfrm_user_policy+0x373/0x540 net/xfrm/xfrm_state.c:1877 [] do_ipv6_setsockopt.isra.8+0x1d6c/0x30e0 net/ipv6/ipv6_sockglue.c:796 [] ipv6_setsockopt+0xd7/0x150 net/ipv6/ipv6_sockglue.c:903 [] udpv6_setsockopt+0x45/0x80 net/ipv6/udp.c:1436 [] sock_common_setsockopt+0x95/0xd0 net/core/sock.c:2659 [] SYSC_setsockopt net/socket.c:1767 [inline] [] SyS_setsockopt+0x160/0x250 net/socket.c:1746 [] entry_SYSCALL_64_fastpath+0x16/0x76 Code: 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 bd 01 00 00 48 ba 00 00 00 00 00 fc ff df 48 8b 43 20 48 89 c1 48 c1 e9 03 <80> 3c 11 00 0f 85 5d 01 00 00 4d 85 ff 4c 89 38 48 89 45 c8 74 RIP [] __write_once_size include/linux/compiler.h:247 [inline] RIP [] __hlist_del include/linux/list.h:619 [inline] RIP [] hlist_del include/linux/list.h:626 [inline] RIP [] __xfrm_policy_unlink+0x1a9/0x370 net/xfrm/xfrm_policy.c:1274 RSP Dumping ftrace buffer: (ftrace buffer empty) Kernel Offset: disabled Rebooting in 86400 seconds..