kasan: CONFIG_KASAN_INLINE enabled
kasan: GPF could be caused by NULL-ptr deref or user memory access
general protection fault: 0000 [#1] PREEMPT SMP KASAN
Dumping ftrace buffer:
   (ftrace buffer empty)
Modules linked in:
CPU: 0 PID: 12162 Comm: syz-executor3 Not tainted 4.9.87-g5244700 #55
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
task: ffff8801d95e4800 task.stack: ffff8801bde90000
RIP: 0010:[<ffffffff83246fb9>]  [<ffffffff83246fb9>] tcp_sacktag_skip net/ipv4/tcp_input.c:1613 [inline]
RIP: 0010:[<ffffffff83246fb9>]  [<ffffffff83246fb9>] tcp_sacktag_write_queue+0x13a9/0x2c60 net/ipv4/tcp_input.c:1815
RSP: 0018:ffff8801db207278  EFLAGS: 00010207
RAX: ffff8801d95e4800 RBX: ffff8801db2075d0 RCX: ffffffff83246fad
RDX: 0000000000000005 RSI: ffff8801db2075d4 RDI: 000000000000002c
RBP: ffff8801db2073e0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000001 R14: dffffc0000000000 R15: 0000000000000253
FS:  00000000012b2940(0000) GS:ffff8801db200000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000a3eb48 CR3: 00000001bd55e000 CR4: 0000000000160670
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Stack:
 0000000000000246 ffff8801d95e4800 ffffffff844de4a0 ffff8801b0d31968
 0000000000000003 1ffff1003b640e67 ffff8801db2075f0 ffff8801db207358
 ffff8801b0d31df0 ffff8801b0d31e90 ffffed00361a632d ffff8801db2075d4
Call Trace:
 [<ffffffff83254e93>] tcp_ack+0x2023/0x5390 net/ipv4/tcp_input.c:3677
 [<ffffffff8325fecb>] tcp_rcv_established+0x53b/0x2070 net/ipv4/tcp_input.c:5551
 [<ffffffff83292ce5>] tcp_v4_do_rcv+0x2d5/0x940 net/ipv4/tcp_ipv4.c:1414
 [<ffffffff832989f4>] tcp_v4_rcv+0x20d4/0x29e0 net/ipv4/tcp_ipv4.c:1730
 [<ffffffff831f0325>] ip_local_deliver_finish+0x285/0xa80 net/ipv4/ip_input.c:216
 [<ffffffff831f136a>] NF_HOOK_THRESH include/linux/netfilter.h:232 [inline]
 [<ffffffff831f136a>] NF_HOOK include/linux/netfilter.h:255 [inline]
 [<ffffffff831f136a>] ip_local_deliver+0x30a/0x4d0 net/ipv4/ip_input.c:257
 [<ffffffff831eeebb>] dst_input include/net/dst.h:513 [inline]
 [<ffffffff831eeebb>] ip_rcv_finish+0x71b/0x1900 net/ipv4/ip_input.c:396
 [<ffffffff831f20f2>] NF_HOOK_THRESH include/linux/netfilter.h:232 [inline]
 [<ffffffff831f20f2>] NF_HOOK include/linux/netfilter.h:255 [inline]
 [<ffffffff831f20f2>] ip_rcv+0xbc2/0x1620 net/ipv4/ip_input.c:487
 [<ffffffff82f3e6b3>] __netif_receive_skb_core+0xa33/0x29e0 net/core/dev.c:4259
 [<ffffffff82f406bb>] __netif_receive_skb+0x5b/0x1c0 net/core/dev.c:4297
 [<ffffffff82f409f4>] process_backlog+0x1d4/0x690 net/core/dev.c:4918
 [<ffffffff82f46b06>] napi_poll net/core/dev.c:5219 [inline]
 [<ffffffff82f46b06>] net_rx_action+0x396/0xe00 net/core/dev.c:5284
 [<ffffffff838bd616>] __do_softirq+0x206/0x951 kernel/softirq.c:284
 [<ffffffff81146db5>] invoke_softirq kernel/softirq.c:364 [inline]
 [<ffffffff81146db5>] irq_exit+0x165/0x190 kernel/softirq.c:405
 [<ffffffff838bc22b>] exiting_irq arch/x86/include/asm/apic.h:659 [inline]
 [<ffffffff838bc22b>] smp_apic_timer_interrupt+0x7b/0xa0 arch/x86/kernel/apic/apic.c:960
 [<ffffffff838b84b0>] apic_timer_interrupt+0xa0/0xb0 arch/x86/entry/entry_64.S:649
 <EOI> [  150.400984]  [<ffffffff81c34fd9>] ? mls_sid_to_context+0x59/0x870 security/selinux/ss/mls.c:99
 [<ffffffff81c2117d>] context_struct_to_string+0x47d/0x680 security/selinux/ss/services.c:1223
 [<ffffffff81c217ca>] security_sid_to_context_core+0x18a/0x250 security/selinux/ss/services.c:1281
 [<ffffffff81c2a855>] security_sid_to_context+0x25/0x30 security/selinux/ss/services.c:1301
 [<ffffffff81bd7deb>] avc_dump_query security/selinux/avc.c:160 [inline]
 [<ffffffff81bd7deb>] avc_audit_post_callback+0x1bb/0x400 security/selinux/avc.c:731
 [<ffffffff81c3c540>] common_lsm_audit+0x5c0/0x1b40 security/lsm_audit.c:446
 [<ffffffff81bdaa91>] slow_avc_audit+0x181/0x210 security/selinux/avc.c:775
 [<ffffffff81beb132>] avc_audit security/selinux/include/avc.h:140 [inline]
 [<ffffffff81beb132>] cred_has_capability+0x252/0x2c0 security/selinux/hooks.c:1684
 [<ffffffff81beb236>] selinux_capable+0x36/0x40 security/selinux/hooks.c:2193
 [<ffffffff81bd0de2>] security_capable+0x82/0xc0 security/security.c:189
 [<ffffffff8115118a>] ns_capable_common+0x11a/0x160 kernel/capability.c:373
 [<ffffffff811511f2>] ns_capable+0x22/0x30 kernel/capability.c:395
 [<ffffffff833844c1>] do_ipt_get_ctl+0xf1/0x9d0 net/ipv4/netfilter/ip_tables.c:1706
 [<ffffffff830a40fa>] nf_sockopt net/netfilter/nf_sockopt.c:103 [inline]
 [<ffffffff830a40fa>] nf_getsockopt+0x6a/0xc0 net/netfilter/nf_sockopt.c:121
 [<ffffffff83210caa>] ip_getsockopt+0x13a/0x180 net/ipv4/ip_sockglue.c:1555
 [<ffffffff832302b2>] tcp_getsockopt+0x82/0xd0 net/ipv4/tcp.c:3103
 [<ffffffff82edfe85>] sock_common_getsockopt+0x95/0xd0 net/core/sock.c:2665
 [<ffffffff82edd48a>] SYSC_getsockopt net/socket.c:1803 [inline]
 [<ffffffff82edd48a>] SyS_getsockopt+0x14a/0x230 net/socket.c:1785
 [<ffffffff81006504>] do_syscall_64+0x1a4/0x490 arch/x86/entry/common.c:282
 [<ffffffff838b6b53>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb
Code: 4b e8 fc 46 12 fe 48 8b 85 50 ff ff ff 4c 39 a0 e8 03 00 00 0f 84 85 00 00 00 e8 e3 46 12 fe 49 8d 7c 24 2c 48 89 fa 48 c1 ea 03 <42> 0f b6 0c 32 48 89 fa 83 e2 07 83 c2 03 38 ca 7c 08 84 c9 0f 
RIP  [<ffffffff83246fb9>] tcp_sacktag_skip net/ipv4/tcp_input.c:1613 [inline]
RIP  [<ffffffff83246fb9>] tcp_sacktag_write_queue+0x13a9/0x2c60 net/ipv4/tcp_input.c:1815
 RSP <ffff8801db207278>
---[ end trace 023a1efac38adc95 ]---