general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN
KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
CPU: 0 PID: 7260 Comm: syz-executor.3 Not tainted 5.7.0-rc7-next-20200526-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:skb_zcopy include/linux/skbuff.h:1446 [inline]
RIP: 0010:skb_orphan_frags include/linux/skbuff.h:2777 [inline]
RIP: 0010:skb_clone+0x9a/0x3c0 net/core/skbuff.c:1436
Code: c1 ea 03 80 3c 02 00 0f 85 06 03 00 00 4c 03 a5 c0 00 00 00 48 b8 00 00 00 00 00 fc ff df 49 8d 7c 24 03 48 89 fa 48 c1 ea 03 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 64 02 00 00
RSP: 0018:ffffc90000007860 EFLAGS: 00010246
RAX: dffffc0000000000 RBX: ffff888058aa7c40 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffffffff86252493 RDI: 0000000000000003
RBP: ffffffff8a6524e0 R08: 0000000000000000 R09: ffff888058aa7c40
R10: ffff8880ae638c5b R11: ffffed1015cc718b R12: 0000000000000000
R13: 0000000000000a20 R14: 0000000000000071 R15: ffffffff8a6524e0
FS:  0000000001e19940(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b2cb22000 CR3: 0000000067173000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <IRQ>
 ip_icmp_error+0x31/0x5a0 net/ipv4/ip_sockglue.c:397
 tcp_v4_err+0x99e/0x1ce0 net/ipv4/tcp_ipv4.c:576
 icmp_socket_deliver+0x1e1/0x360 net/ipv4/icmp.c:803
 icmp_unreach+0x33b/0xab0 net/ipv4/icmp.c:920
 icmp_rcv+0xee6/0x15f0 net/ipv4/icmp.c:1102
 ip_protocol_deliver_rcu+0x57/0x880 net/ipv4/ip_input.c:204
 ip_local_deliver_finish+0x220/0x360 net/ipv4/ip_input.c:231
 NF_HOOK include/linux/netfilter.h:307 [inline]
 NF_HOOK include/linux/netfilter.h:301 [inline]
 ip_local_deliver+0x1c8/0x4e0 net/ipv4/ip_input.c:252
 dst_input include/net/dst.h:441 [inline]
 ip_rcv_finish+0x1da/0x2f0 net/ipv4/ip_input.c:428
 NF_HOOK include/linux/netfilter.h:307 [inline]
 NF_HOOK include/linux/netfilter.h:301 [inline]
 ip_rcv+0xd0/0x3c0 net/ipv4/ip_input.c:539
 __netif_receive_skb_one_core+0x114/0x180 net/core/dev.c:5268
 __netif_receive_skb+0x27/0x1c0 net/core/dev.c:5382
 process_backlog+0x21e/0x7a0 net/core/dev.c:6214
 napi_poll net/core/dev.c:6659 [inline]
 net_rx_action+0x4e1/0x10d0 net/core/dev.c:6727
 __do_softirq+0x268/0x9ee kernel/softirq.c:292
 invoke_softirq kernel/softirq.c:373 [inline]
 irq_exit+0x192/0x1d0 kernel/softirq.c:413
 exiting_irq arch/x86/include/asm/apic.h:546 [inline]
 smp_apic_timer_interrupt+0x19e/0x600 arch/x86/kernel/apic/apic.c:1107
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:1030
 </IRQ>
RIP: 0010:__raw_spin_unlock_irq include/linux/spinlock_api_smp.h:169 [inline]
RIP: 0010:_raw_spin_unlock_irq+0x4b/0x80 kernel/locking/spinlock.c:199
Code: c0 10 c9 94 89 48 ba 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 75 31 48 83 3d 3e c5 b6 01 00 74 25 fb 66 0f 1f 44 00 00 <bf> 01 00 00 00 e8 cb cf 70 f9 65 8b 05 dc 1a 24 78 85 c0 74 02 5d
RSP: 0018:ffffc90004eb7b50 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13
RAX: 1ffffffff1329922 RBX: ffff88806718e0c0 RCX: 1ffffffff1519a2e
RDX: dffffc0000000000 RSI: 0000000000000000 RDI: ffff88806718e948
RBP: ffff8880ae637d40 R08: 0000000000000000 R09: 0000000000000001
R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880ae637d40
R13: ffff8880872663c0 R14: 0000000000000000 R15: 0000000000000001
 finish_lock_switch kernel/sched/core.c:3173 [inline]
 finish_task_switch+0x147/0x750 kernel/sched/core.c:3273
 context_switch kernel/sched/core.c:3437 [inline]
 __schedule+0x8f2/0x1fa0 kernel/sched/core.c:4159
 schedule+0xd0/0x2a0 kernel/sched/core.c:4234
 freezable_schedule include/linux/freezer.h:172 [inline]
 do_nanosleep+0x21f/0x640 kernel/time/hrtimer.c:1879
 hrtimer_nanosleep+0x1df/0x3a0 kernel/time/hrtimer.c:1932
 __do_sys_nanosleep kernel/time/hrtimer.c:1966 [inline]
 __se_sys_nanosleep kernel/time/hrtimer.c:1953 [inline]
 __x64_sys_nanosleep+0x1dc/0x260 kernel/time/hrtimer.c:1953
 do_syscall_64+0x60/0xe0 arch/x86/entry/common.c:353
 entry_SYSCALL_64_after_hwframe+0x44/0xa9
RIP: 0033:0x45af30
Code: c0 5b 5d c3 66 0f 1f 44 00 00 8b 04 24 48 83 c4 18 5b 5d c3 66 0f 1f 44 00 00 83 3d 21 ef 84 00 00 75 14 b8 23 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 d4 d1 fb ff c3 48 83 ec 08 e8 8a 46 00 00
RSP: 002b:00007ffc5dd15e28 EFLAGS: 00000246 ORIG_RAX: 0000000000000023
RAX: ffffffffffffffda RBX: 000000000007c7a8 RCX: 000000000045af30
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007ffc5dd15e30
RBP: 000000000000065d R08: 0000000000000001 R09: 0000000001e19940
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
R13: 00007ffc5dd15e80 R14: 000000000007c77a R15: 00007ffc5dd15e90
Modules linked in:
---[ end trace ebedf8f60b3655ee ]---
RIP: 0010:skb_zcopy include/linux/skbuff.h:1446 [inline]
RIP: 0010:skb_orphan_frags include/linux/skbuff.h:2777 [inline]
RIP: 0010:skb_clone+0x9a/0x3c0 net/core/skbuff.c:1436
Code: c1 ea 03 80 3c 02 00 0f 85 06 03 00 00 4c 03 a5 c0 00 00 00 48 b8 00 00 00 00 00 fc ff df 49 8d 7c 24 03 48 89 fa 48 c1 ea 03 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 64 02 00 00
RSP: 0018:ffffc90000007860 EFLAGS: 00010246
RAX: dffffc0000000000 RBX: ffff888058aa7c40 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffffffff86252493 RDI: 0000000000000003
RBP: ffffffff8a6524e0 R08: 0000000000000000 R09: ffff888058aa7c40
R10: ffff8880ae638c5b R11: ffffed1015cc718b R12: 0000000000000000
R13: 0000000000000a20 R14: 0000000000000071 R15: ffffffff8a6524e0
FS:  0000000001e19940(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b2cb22000 CR3: 0000000067173000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400