kasan: CONFIG_KASAN_INLINE enabled kasan: GPF could be caused by NULL-ptr deref or user memory access general protection fault: 0000 [#1] PREEMPT SMP KASAN CPU: 1 PID: 16608 Comm: syz-executor4 Not tainted 4.19.0-rc5-next-20180925+ #80 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:dev_net include/linux/netdevice.h:2164 [inline] RIP: 0010:__skb_flow_dissect+0x3b5/0x5980 net/core/flow_dissector.c:758 Code: 48 c1 ea 03 80 3c 02 00 0f 85 a6 4d 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b 77 10 49 8d be 80 05 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 5c 4d 00 00 4d 8b b6 80 05 00 00 48 b8 00 00 00 RSP: 0018:ffff88018768ed90 EFLAGS: 00010202 RAX: dffffc0000000000 RBX: ffff88018768f160 RCX: ffffc9000a0d3000 RDX: 00000000000000b0 RSI: ffffffff8615a888 RDI: 0000000000000580 RBP: ffff88018768f4f0 R08: ffff8801cf1f8140 R09: ffffed003b585b57 R10: ffffed003b585b57 R11: ffff8801dac2dabb R12: ffffffff8a528244 R13: ffffffff8a528246 R14: 0000000000000000 R15: ffff8801cdaf2300 FS: 00007fcc4e165700(0000) GS:ffff8801dad00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000ecdfd0 CR3: 00000001c8f80000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: skb_flow_dissect_flow_keys_basic include/linux/skbuff.h:1245 [inline] skb_get_poff+0x9b/0x1c0 net/core/flow_dissector.c:1486 ____bpf_skb_get_pay_offset net/core/filter.c:126 [inline] bpf_skb_get_pay_offset+0x15/0x20 net/core/filter.c:124 kobject: 'loop3' (000000005abc9d9f): kobject_uevent_env kobject: 'loop3' (000000005abc9d9f): fill_kobj_path: path = '/devices/virtual/block/loop3' Modules linked in: kobject: 'loop5' (00000000668e8b04): kobject_uevent_env kobject: 'loop5' (00000000668e8b04): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: 'kvm' (00000000991a5e0d): kobject_uevent_env kasan: CONFIG_KASAN_INLINE enabled ---[ end trace 641fd952f2ae294e ]--- kasan: GPF could be caused by NULL-ptr deref or user memory access kobject: 'kvm' (00000000991a5e0d): fill_kobj_path: path = '/devices/virtual/misc/kvm' RIP: 0010:dev_net include/linux/netdevice.h:2164 [inline] RIP: 0010:__skb_flow_dissect+0x3b5/0x5980 net/core/flow_dissector.c:758 kobject: 'loop1' (00000000629c9586): kobject_uevent_env general protection fault: 0000 [#2] PREEMPT SMP KASAN Code: 48 c1 ea 03 80 3c 02 00 0f 85 a6 4d 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b 77 10 49 8d be 80 05 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 5c 4d 00 00 4d 8b b6 80 05 00 00 48 b8 00 00 00 CPU: 0 PID: 16612 Comm: syz-executor4 Tainted: G D 4.19.0-rc5-next-20180925+ #80 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:dev_net include/linux/netdevice.h:2164 [inline] RIP: 0010:__skb_flow_dissect+0x3b5/0x5980 net/core/flow_dissector.c:758 Code: 48 c1 ea 03 80 3c 02 00 0f 85 a6 4d 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b 77 10 49 8d be 80 05 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 5c 4d 00 00 4d 8b b6 80 05 00 00 48 b8 00 00 00 RSP: 0018:ffff880187df6d90 EFLAGS: 00010202 kobject: 'loop1' (00000000629c9586): fill_kobj_path: path = '/devices/virtual/block/loop1' RAX: dffffc0000000000 RBX: ffff880187df7160 RCX: ffffc9000a2d4000 RDX: 00000000000000b0 RSI: ffffffff8615a888 RDI: 0000000000000580 RBP: ffff880187df74f0 R08: ffff88018736c180 R09: 0000000000000000 R10: ffff880187df7508 R11: 0000000000000000 R12: ffffffff8a528244 R13: ffffffff8a528246 R14: 0000000000000000 R15: ffff8801bfce2d40 FS: 00007fcc4e144700(0000) GS:ffff8801dac00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 kobject: 'loop2' (00000000f54d3b56): kobject_uevent_env CR2: 00007f0ef0f0a518 CR3: 00000001c8f80000 CR4: 00000000001426f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: kobject: 'loop2' (00000000f54d3b56): fill_kobj_path: path = '/devices/virtual/block/loop2' RSP: 0018:ffff88018768ed90 EFLAGS: 00010202 RAX: dffffc0000000000 RBX: ffff88018768f160 RCX: ffffc9000a0d3000 RDX: 00000000000000b0 RSI: ffffffff8615a888 RDI: 0000000000000580 RBP: ffff88018768f4f0 R08: ffff8801cf1f8140 R09: ffffed003b585b57 skb_flow_dissect_flow_keys_basic include/linux/skbuff.h:1245 [inline] skb_get_poff+0x9b/0x1c0 net/core/flow_dissector.c:1486 ____bpf_skb_get_pay_offset net/core/filter.c:126 [inline] bpf_skb_get_pay_offset+0x15/0x20 net/core/filter.c:124 Modules linked in: ---[ end trace 641fd952f2ae294f ]--- R10: ffffed003b585b57 R11: ffff8801dac2dabb R12: ffffffff8a528244 RIP: 0010:dev_net include/linux/netdevice.h:2164 [inline] RIP: 0010:__skb_flow_dissect+0x3b5/0x5980 net/core/flow_dissector.c:758 Code: 48 c1 ea 03 80 3c 02 00 0f 85 a6 4d 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b 77 10 49 8d be 80 05 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 5c 4d 00 00 4d 8b b6 80 05 00 00 48 b8 00 00 00 RSP: 0018:ffff88018768ed90 EFLAGS: 00010202 kobject: 'loop1' (00000000629c9586): kobject_uevent_env RAX: dffffc0000000000 RBX: ffff88018768f160 RCX: ffffc9000a0d3000 RDX: 00000000000000b0 RSI: ffffffff8615a888 RDI: 0000000000000580 RBP: ffff88018768f4f0 R08: ffff8801cf1f8140 R09: ffffed003b585b57 kobject: 'loop1' (00000000629c9586): fill_kobj_path: path = '/devices/virtual/block/loop1' R13: ffffffff8a528246 R14: 0000000000000000 R15: ffff8801cdaf2300 R10: ffffed003b585b57 R11: ffff8801dac2dabb R12: ffffffff8a528244 kobject: 'kvm' (00000000991a5e0d): kobject_uevent_env kobject: 'loop2' (00000000f54d3b56): kobject_uevent_env kobject: 'kvm' (00000000991a5e0d): fill_kobj_path: path = '/devices/virtual/misc/kvm' kobject: 'kvm' (00000000991a5e0d): kobject_uevent_env FS: 00007fcc4e165700(0000) GS:ffff8801dad00000(0000) knlGS:0000000000000000 R13: ffffffff8a528246 R14: 0000000000000000 R15: ffff8801cdaf2300 kobject: 'kvm' (00000000991a5e0d): fill_kobj_path: path = '/devices/virtual/misc/kvm' kobject: 'kvm' (00000000991a5e0d): kobject_uevent_env kobject: 'loop2' (00000000f54d3b56): fill_kobj_path: path = '/devices/virtual/block/loop2' kobject: 'kvm' (00000000991a5e0d): fill_kobj_path: path = '/devices/virtual/misc/kvm' CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000ecfd48 CR3: 00000001c8f80000 CR4: 00000000001426e0 kobject: 'loop1' (00000000629c9586): kobject_uevent_env kobject: 'loop1' (00000000629c9586): fill_kobj_path: path = '/devices/virtual/block/loop1' FS: 00007fcc4e144700(0000) GS:ffff8801dac00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 kobject: 'loop3' (000000005abc9d9f): kobject_uevent_env CR2: 00000000007096b4 CR3: 00000001c8f80000 CR4: 00000000001406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 kobject: 'loop3' (000000005abc9d9f): fill_kobj_path: path = '/devices/virtual/block/loop3' DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 kobject: 'loop5' (00000000668e8b04): kobject_uevent_env