kasan: CONFIG_KASAN_INLINE enabled kasan: GPF could be caused by NULL-ptr deref or user memory accessgeneral protection fault: 0000 [#1] PREEMPT SMP KASAN Dumping ftrace buffer: (ftrace buffer empty) Modules linked in: CPU: 0 PID: 5636 Comm: syzkaller277286 Not tainted 4.4.114-g4e74e98 #5 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 task: ffff8800b8834800 task.stack: ffff8800b8c28000 RIP: 0010:[] [] __xfrm_policy_check2 include/net/xfrm.h:1070 [inline] RIP: 0010:[] [] xfrm_policy_check include/net/xfrm.h:1076 [inline] RIP: 0010:[] [] xfrm6_policy_check include/net/xfrm.h:1086 [inline] RIP: 0010:[] [] udpv6_queue_rcv_skb+0x191/0x1510 net/ipv6/udp.c:634 RSP: 0018:ffff8800b8c2f648 EFLAGS: 00010206 RAX: dffffc0000000000 RBX: ffff8800b8ab8640 RCX: ffffffff83373348 RDX: 000000000000000c RSI: ffff8801d762b8c0 RDI: 0000000000000060 RBP: ffff8800b8c2f688 R08: 0000000000000001 R09: 0000000000000001 R10: 0000000000000000 R11: 1ffff10017185e9a R12: ffff8801d762b8c0 R13: 0000000000000001 R14: 0000000000000000 R15: ffff8801d762b918 FS: 00007f7517fb6700(0000) GS:ffff8801db200000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00000000200dcfe4 CR3: 00000001d14f0000 CR4: 0000000000160670 kasan: CONFIG_KASAN_INLINE enabled kasan: GPF could be caused by NULL-ptr deref or user memory access DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Stack: 00000001b8ab86c8 ffff8800b8ab8640 ffff8800b8ab86c8 dffffc0000000000 ffff8800b8ab8640 0000000000000000 ffffed001715714e ffff8801d762b8c0 ffff8800b8c2f6f8 ffffffff82df89e6 ffff8800b8ab87c8 ffff8800b8ab87d0 Call Trace: [] sk_backlog_rcv include/net/sock.h:871 [inline] [] __release_sock net/core/sock.c:2023 [inline] [] release_sock+0x176/0x510 net/core/sock.c:2473 [] udp_sendmsg+0x15c4/0x1c30 net/ipv4/udp.c:1105 [] udpv6_sendmsg+0x1434/0x2500 net/ipv6/udp.c:1178 [] inet_sendmsg+0x2bc/0x4c0 net/ipv4/af_inet.c:755 [] sock_sendmsg_nosec net/socket.c:625 [inline] [] sock_sendmsg+0xca/0x110 net/socket.c:635 [] SYSC_sendto+0x2c8/0x340 net/socket.c:1665 [] SyS_sendto+0x40/0x50 net/socket.c:1633 [] entry_SYSCALL_64_fastpath+0x1c/0x98 Code: 74 24 58 41 f6 c6 01 0f 85 b7 07 00 00 e8 28 da fe fd 49 83 e6 fe 48 b8 00 00 00 00 00 fc ff df 49 8d 7e 60 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 01 0f 8e 7c 0b 00 00 41 f6 46 60 04 RIP [] __xfrm_policy_check2 include/net/xfrm.h:1070 [inline] RIP [] xfrm_policy_check include/net/xfrm.h:1076 [inline] RIP [] xfrm6_policy_check include/net/xfrm.h:1086 [inline] RIP [] udpv6_queue_rcv_skb+0x191/0x1510 net/ipv6/udp.c:634 RSP general protection fault: 0000 [#2] [ 71.923550] ---[ end trace 41d8c23ec214fb7a ]--- Kernel panic - not syncing: Fatal exception in interrupt PREEMPT SMP KASAN Dumping ftrace buffer: (ftrace buffer empty) Modules linked in: CPU: 1 PID: 5657 Comm: syzkaller277286 Tainted: G D 4.4.114-g4e74e98 #5 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 task: ffff8800b95f9800 task.stack: ffff8800b9048000 RIP: 0010:[] [] __xfrm_policy_check2 include/net/xfrm.h:1070 [inline] RIP: 0010:[] [] xfrm_policy_check include/net/xfrm.h:1076 [inline] RIP: 0010:[] [] xfrm6_policy_check include/net/xfrm.h:1086 [inline] RIP: 0010:[] [] udpv6_queue_rcv_skb+0x191/0x1510 net/ipv6/udp.c:634 RSP: 0018:ffff8800b904f648 EFLAGS: 00010206 RAX: dffffc0000000000 RBX: ffff8801d8aa0640 RCX: ffffffff83373348 RDX: 000000000000000c RSI: ffff8800b2645280 RDI: 0000000000000060 RBP: ffff8800b904f688 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000000 R11: 1ffff10017209e9a R12: ffff8800b2645280 R13: 0000000000000001 R14: 0000000000000000 R15: ffff8800b26452d8 FS: 00007f7517fb6700(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00000000200dcfe4 CR3: 00000000bba2a000 CR4: 0000000000160670 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Stack: 00000001d8aa06c8 ffff8801d8aa0640 ffff8801d8aa06c8 dffffc0000000000 ffff8801d8aa0640 0000000000000000 ffffed003b15414e ffff8800b2645280 ffff8800b904f6f8 ffffffff82df89e6 ffff8801d8aa07c8 ffff8801d8aa07d0 Call Trace: [] sk_backlog_rcv include/net/sock.h:871 [inline] [] __release_sock net/core/sock.c:2023 [inline] [] release_sock+0x176/0x510 net/core/sock.c:2473 [] udp_sendmsg+0x15c4/0x1c30 net/ipv4/udp.c:1105 [] udpv6_sendmsg+0x1434/0x2500 net/ipv6/udp.c:1178 [] inet_sendmsg+0x2bc/0x4c0 net/ipv4/af_inet.c:755 [] sock_sendmsg_nosec net/socket.c:625 [inline] [] sock_sendmsg+0xca/0x110 net/socket.c:635 [] SYSC_sendto+0x2c8/0x340 net/socket.c:1665 [] SyS_sendto+0x40/0x50 net/socket.c:1633 [] entry_SYSCALL_64_fastpath+0x1c/0x98 Code: 74 24 58 41 f6 c6 01 0f 85 b7 07 00 00 e8 28 da fe fd 49 83 e6 fe 48 b8 00 00 00 00 00 fc ff df 49 8d 7e 60 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 01 0f 8e 7c 0b 00 00 41 f6 46 60 04 RIP [] __xfrm_policy_check2 include/net/xfrm.h:1070 [inline] RIP [] xfrm_policy_check include/net/xfrm.h:1076 [inline] RIP [] xfrm6_policy_check include/net/xfrm.h:1086 [inline] RIP [] udpv6_queue_rcv_skb+0x191/0x1510 net/ipv6/udp.c:634 RSP Dumping ftrace buffer: (ftrace buffer empty) Kernel Offset: disabled Rebooting in 86400 seconds..