kasan: CONFIG_KASAN_INLINE enabled kasan: GPF could be caused by NULL-ptr deref or user memory accessgeneral protection fault: 0000 [#1] PREEMPT SMP KASAN Dumping ftrace buffer: (ftrace buffer empty) Modules linked in: CPU: 1 PID: 201 Comm: kworker/1:1 Not tainted 4.4.138-g226f96b #63 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: events xfrm_hash_rebuild task: ffff8800bb071800 task.stack: ffff8800bbb88000 RIP: 0010:[] [] xfrm_hash_rebuild+0x4c4/0xae0 net/xfrm/xfrm_policy.c:633 RSP: 0018:ffff8800bbb8fbb8 EFLAGS: 00010206 RAX: 00000000ed661ac0 RBX: dffffc0000000000 RCX: 0000000000000001 RDX: 0000000000000000 RSI: ffffffff833c6482 RDI: ffff8800a2ddef70 RBP: ffff8800bbb8fc40 R08: ffffffff853f16e0 R09: 0000000000000000 R10: 0000000000000001 R11: ffff8800bb071800 R12: ffff8801b83d1980 R13: 000000076b30d601 R14: ffff8800a2ddef58 R15: ffff8800a2ddef28 FS: 0000000000000000(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b2d021000 CR3: 00000001d903a000 CR4: 00000000001606f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Stack: ffffffff81181f4f ffff8800bbb8fc00 ffffed00145bbde9 ffff8800a2ddef4c ffff8800a2ddf2f8 ffff8800a2ddef80 1ffff100145bbe80 ffff8800a2ddf01d ffff8800a2ddeef8 ffff8800a2ddd940 ffff8800a2ddefb8 0000000000000002 Call Trace: [] process_one_work+0x7df/0x1600 kernel/workqueue.c:2064 [] worker_thread+0xd9/0xfc0 kernel/workqueue.c:2196 [] kthread+0x268/0x300 kernel/kthread.c:211 audit: type=1326 audit(1529476507.038:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=kernel pid=5790 comm="syz-executor1" exe="/root/syz-executor1" sig=9 arch=c000003e syscall=202 compat=0 ip=0x455b29 code=0x0 binder: 5790:5996 ioctl 2272 200001c0 returned -22 binder: 5790:5996 ioctl 54a1 0 returned -22 [] ret_from_fork+0x55/0x80 arch/x86/entry/entry_64.S:510 Code: 7c 08 84 d2 0f 85 43 04 00 00 48 8b 7d c0 49 8d b4 24 f4 00 00 00 41 0f b7 94 24 74 02 00 00 e8 23 ec ff ff 49 89 c5 48 c1 e8 03 <80> 3c 18 00 0f 85 eb 03 00 00 49 8b 55 00 49 8d 44 24 08 48 89 RIP [] xfrm_hash_rebuild+0x4c4/0xae0 net/xfrm/xfrm_policy.c:633 RSP ---[ end trace 5e7dbffd786aa3bb ]---