general protection fault, probably for non-canonical address 0xe0edfc0ee00ee00e: 0000 [#1] PREEMPT SMP KASAN
KASAN: maybe wild-memory-access in range [0x0770007700770070-0x0770007700770077]
CPU: 1 PID: 6103 Comm: syz-executor.3 Not tainted 5.9.0-rc2-next-20200828-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:__rb_insert lib/rbtree.c:117 [inline]
RIP: 0010:rb_insert_color+0x91/0x7a0 lib/rbtree.c:436
Code: 89 f8 48 c1 e8 03 42 80 3c 28 00 0f 85 01 05 00 00 4c 8b 75 08 49 39 de 0f 84 6d 01 00 00 4d 85 f6 74 1c 4c 89 f0 48 c1 e8 03 <42> 80 3c 28 00 0f 85 16 05 00 00 41 f6 06 01 0f 84 3d 04 00 00 4c
RSP: 0018:ffffc9000903f6c8 EFLAGS: 00010203
RAX: 00ee000ee00ee00e RBX: ffff888095dc9540 RCX: ffffc9000eb26000
RDX: 1ffff1101303e178 RSI: ffff8880a6733be8 RDI: ffff888000108288
RBP: ffff888000108280 R08: 0000000000000001 R09: ffffffff8d61bba7
R10: 0000000000000000 R11: 0000000000000001 R12: ffff8880981f0bc0
R13: dffffc0000000000 R14: 0770007700770077 R15: ffff8880981f0bc0
FS:  00007f82daf40700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b2f826000 CR3: 00000002123fc000 CR4: 00000000001526e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 tcp_data_queue_ofo net/ipv4/tcp_input.c:4786 [inline]
 tcp_data_queue+0x2ec9/0x4ae0 net/ipv4/tcp_input.c:5002
 tcp_rcv_established+0x851/0x1eb0 net/ipv4/tcp_input.c:5861
 tcp_v4_do_rcv+0x5d1/0x870 net/ipv4/tcp_ipv4.c:1643
 sk_backlog_rcv include/net/sock.h:1011 [inline]
 __release_sock+0x134/0x3a0 net/core/sock.c:2528
 release_sock+0x54/0x1b0 net/core/sock.c:3051
 sk_stream_wait_memory+0x5bd/0xe60 net/core/stream.c:145
 tcp_sendmsg_locked+0xcdb/0x2d00 net/ipv4/tcp.c:1403
 tcp_sendmsg+0x2b/0x40 net/ipv4/tcp.c:1443
 inet_sendmsg+0x99/0xe0 net/ipv4/af_inet.c:817
 sock_sendmsg_nosec net/socket.c:651 [inline]
 sock_sendmsg+0xcf/0x120 net/socket.c:671
 __sys_sendto+0x21c/0x320 net/socket.c:1992
 __do_sys_sendto net/socket.c:2004 [inline]
 __se_sys_sendto net/socket.c:2000 [inline]
 __x64_sys_sendto+0xdd/0x1b0 net/socket.c:2000
 do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xa9
RIP: 0033:0x45d5b9
Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007f82daf3fc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 000000000002d140 RCX: 000000000045d5b9
RDX: 000000000000fe6a RSI: 00000000200012c0 RDI: 0000000000000004
RBP: 000000000118cf98 R08: 0000000000000000 R09: 0000000000000027
R10: 000000000020c49a R11: 0000000000000246 R12: 000000000118cf4c
R13: 00007fff833c125f R14: 00007f82daf409c0 R15: 000000000118cf4c
Modules linked in: