================================================================== BUG: KASAN: use-after-free in __hlist_del include/linux/list.h:704 [inline] BUG: KASAN: use-after-free in hlist_del_rcu include/linux/rculist.h:455 [inline] BUG: KASAN: use-after-free in __xfrm_policy_unlink+0x9ec/0xa00 net/xfrm/xfrm_policy.c:2212 Write of size 8 at addr ffff88807ce38950 by task syz-executor827/13395 CPU: 0 PID: 13395 Comm: syz-executor827 Not tainted 5.0.0-rc2 #25 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1db/0x2d0 lib/dump_stack.c:113 print_address_description.cold+0x7c/0x20d mm/kasan/report.c:187 kasan_report.cold+0x1b/0x40 mm/kasan/report.c:317 __asan_report_store8_noabort+0x17/0x20 mm/kasan/generic_report.c:140 __hlist_del include/linux/list.h:704 [inline] hlist_del_rcu include/linux/rculist.h:455 [inline] __xfrm_policy_unlink+0x9ec/0xa00 net/xfrm/xfrm_policy.c:2212 xfrm_policy_insert+0x223/0x910 net/xfrm/xfrm_policy.c:1587 xfrm_add_policy+0x2a1/0x6c0 net/xfrm/xfrm_user.c:1657 xfrm_user_rcv_msg+0x458/0x8d0 net/xfrm/xfrm_user.c:2663 netlink_rcv_skb+0x17d/0x410 net/netlink/af_netlink.c:2477 xfrm_netlink_rcv+0x70/0x90 net/xfrm/xfrm_user.c:2671 netlink_unicast_kernel net/netlink/af_netlink.c:1310 [inline] netlink_unicast+0x574/0x770 net/netlink/af_netlink.c:1336 netlink_sendmsg+0xa05/0xf90 net/netlink/af_netlink.c:1917 sock_sendmsg_nosec net/socket.c:621 [inline] sock_sendmsg+0xdd/0x130 net/socket.c:631 ___sys_sendmsg+0x7ec/0x910 net/socket.c:2116