kasan: CONFIG_KASAN_INLINE enabled kasan: GPF could be caused by NULL-ptr deref or user memory access general protection fault: 0000 [#1] PREEMPT SMP KASAN Dumping ftrace buffer: (ftrace buffer empty) Modules linked in: CPU: 0 PID: 15951 Comm: syz-executor3 Not tainted 4.9.81-g1a93831 #33 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 task: ffff8801cb1e0000 task.stack: ffff8801ca940000 RIP: 0010:[] [] xfrm_policy_ok net/xfrm/xfrm_policy.c:2403 [inline] RIP: 0010:[] [] __xfrm_policy_check+0xbf8/0x1a30 net/xfrm/xfrm_policy.c:2579 RSP: 0018:ffff8801db207598 EFLAGS: 00010202 RAX: 0000000000000006 RBX: 0000000000000000 RCX: ffffffff833c82d7 RDX: 0000000000000002 RSI: ffff8801db2076d8 RDI: 0000000000000032 RBP: ffff8801db2077e0 R08: 0000000000000005 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 R13: dffffc0000000000 R14: dffffc0000000000 R15: 0000000000000000 FS: 00007f5e7a894700(0000) GS:ffff8801db200000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000020150ff4 CR3: 00000001ca9b2000 CR4: 0000000000160670 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Stack: ffffffff833c784d ffff8801db2076d0 ffff8801db207638 0000000100000003 ffff8801db207678 ffff8801cb8588c8 ffff8801db207648 ffff8801c8444ec0 0000000200020970 1ffff1003b640ec3 ffff8801db2076d8 ffff8801db207738 Call Trace: [] __xfrm_policy_check2.constprop.39+0x1bf/0x2d0 include/net/xfrm.h:1067 [] xfrm_policy_check include/net/xfrm.h:1072 [inline] [] xfrm4_policy_check include/net/xfrm.h:1077 [inline] [] tcp_v4_rcv+0x1a94/0x29e0 net/ipv4/tcp_ipv4.c:1743 [] ip_local_deliver_finish+0x285/0xa80 net/ipv4/ip_input.c:216 [] NF_HOOK_THRESH include/linux/netfilter.h:232 [inline] [] NF_HOOK include/linux/netfilter.h:255 [inline] [] ip_local_deliver+0x30a/0x4d0 net/ipv4/ip_input.c:257 [] dst_input include/net/dst.h:513 [inline] [] ip_rcv_finish+0x71b/0x1900 net/ipv4/ip_input.c:396 [] NF_HOOK_THRESH include/linux/netfilter.h:232 [inline] [] NF_HOOK include/linux/netfilter.h:255 [inline] [] ip_rcv+0xbc2/0x1620 net/ipv4/ip_input.c:487 [] __netif_receive_skb_core+0xa33/0x29e0 net/core/dev.c:4252 [] __netif_receive_skb+0x5b/0x1c0 net/core/dev.c:4290 [] process_backlog+0x1d4/0x690 net/core/dev.c:4911 [] napi_poll net/core/dev.c:5212 [inline] [] net_rx_action+0x396/0xe00 net/core/dev.c:5277 [] __do_softirq+0x206/0x951 kernel/softirq.c:284 [] do_softirq_own_stack+0x1c/0x30 arch/x86/entry/entry_64.S:831 [ 88.464407] [] do_softirq.part.16+0x99/0xb0 kernel/softirq.c:328 [] do_softirq kernel/softirq.c:176 [inline] [] __local_bh_enable_ip+0xbe/0xd0 kernel/softirq.c:181 [] local_bh_enable include/linux/bottom_half.h:31 [inline] [] rcu_read_unlock_bh include/linux/rcupdate.h:971 [inline] [] ip_finish_output2+0x737/0x10b0 net/ipv4/ip_output.c:227 [] ip_finish_output+0x6b1/0xa00 net/ipv4/ip_output.c:313 [] NF_HOOK_COND include/linux/netfilter.h:246 [inline] [] ip_output+0x1ca/0x610 net/ipv4/ip_output.c:401 [] dst_output include/net/dst.h:507 [inline] [] ip_local_out+0x95/0x170 net/ipv4/ip_output.c:124 [] ip_queue_xmit+0x884/0x1760 net/ipv4/ip_output.c:500 [] tcp_transmit_skb+0x1847/0x2f00 net/ipv4/tcp_output.c:1036 [] tcp_send_syn_data net/ipv4/tcp_output.c:3324 [inline] [] tcp_connect+0x1518/0x2b30 net/ipv4/tcp_output.c:3359 [] tcp_v4_connect+0x1509/0x1e50 net/ipv4/tcp_ipv4.c:250 [] __inet_stream_connect+0x2bc/0xbd0 net/ipv4/af_inet.c:627 [] tcp_sendmsg_fastopen net/ipv4/tcp.c:1116 [inline] [] tcp_sendmsg+0x1a6e/0x2ff0 net/ipv4/tcp.c:1139 [] inet_sendmsg+0x2bc/0x4c0 net/ipv4/af_inet.c:770 [] sock_sendmsg_nosec net/socket.c:635 [inline] [] sock_sendmsg+0xca/0x110 net/socket.c:645 [] SYSC_sendto+0x2c8/0x340 net/socket.c:1670 [] SyS_sendto+0x40/0x50 net/socket.c:1638 [] do_syscall_64+0x1a5/0x490 arch/x86/entry/common.c:282 [] entry_SYSCALL_64_after_swapgs+0x47/0xc5 Code: ff 48 c1 e8 03 42 80 3c 30 00 0f 85 f9 0b 00 00 48 8b 85 08 fe ff ff 48 8b 18 48 8d 7b 32 48 89 f8 48 89 fa 48 c1 e8 03 83 e2 07 <42> 0f b6 04 30 38 d0 7f 08 84 c0 0f 85 c3 0b 00 00 0f b6 43 32 RIP [] xfrm_policy_ok net/xfrm/xfrm_policy.c:2403 [inline] RIP [] __xfrm_policy_check+0xbf8/0x1a30 net/xfrm/xfrm_policy.c:2579 RSP ---[ end trace 31aaf8b7d9602532 ]---