BUG: Bad rss-counter state mm:ffff88809cbc12c0 idx:0 val:24
kasan: CONFIG_KASAN_INLINE enabled
kasan: CONFIG_KASAN_INLINE enabled
kasan: GPF could be caused by NULL-ptr deref or user memory access
kasan: GPF could be caused by NULL-ptr deref or user memory access
general protection fault: 0000 [#1] PREEMPT SMP KASAN
Modules linked in:
CPU: 1 PID: 17015 Comm: syz-executor.2 Not tainted 4.14.222-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
task: ffff88804b360100 task.stack: ffff888226248000
RIP: 0010:__write_once_size include/linux/compiler.h:210 [inline]
RIP: 0010:__skb_unlink include/linux/skbuff.h:1916 [inline]
RIP: 0010:__skb_dequeue include/linux/skbuff.h:1933 [inline]
RIP: 0010:skb_dequeue+0xf1/0x180 net/core/skbuff.c:2832
RSP: 0018:ffff88822624f8f8 EFLAGS: 00010002
RAX: dffffc0000000000 RBX: ffff8880b33464c8 RCX: 0000000000000063
RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000008
RBP: 0000000000000286 R08: ffffffff8b989dd8 R09: 00000000000c0514
R10: ffff88804b3609b0 R11: ffff88804b360100 R12: ffff888000151580
R13: ffff8880b33464e0 R14: 0000000000000000 R15: ffff8880b33463c0
FS:  00007f89ed68e700(0000) GS:ffff8880ba500000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b2f42b000 CR3: 000000007b00b000 CR4: 00000000001406e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 skb_queue_purge+0x21/0x30 net/core/skbuff.c:2869
 packet_release+0x7ed/0xa80 net/packet/af_packet.c:3120
 __sock_release+0xcd/0x2b0 net/socket.c:602
 sock_close+0x15/0x20 net/socket.c:1139
 __fput+0x25f/0x7a0 fs/file_table.c:210
 task_work_run+0x11f/0x190 kernel/task_work.c:113
 exit_task_work include/linux/task_work.h:22 [inline]
 do_exit+0xa44/0x2850 kernel/exit.c:868
 do_group_exit+0x100/0x2e0 kernel/exit.c:965
 get_signal+0x38d/0x1ca0 kernel/signal.c:2423
 do_signal+0x7c/0x1550 arch/x86/kernel/signal.c:814
 exit_to_usermode_loop+0x160/0x200 arch/x86/entry/common.c:160
 prepare_exit_to_usermode arch/x86/entry/common.c:199 [inline]
 syscall_return_slowpath arch/x86/entry/common.c:270 [inline]
 do_syscall_64+0x4a3/0x640 arch/x86/entry/common.c:297
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x465ef9
RSP: 002b:00007f89ed68e218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: fffffffffffffe00 RBX: 000000000056bf68 RCX: 0000000000465ef9
RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000056bf68
RBP: 000000000056bf60 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf6c
R13: 00007fff9e89acff R14: 00007f89ed68e300 R15: 0000000000022000
Code: 49 8d 7e 08 49 8b 5c 24 08 48 b8 00 00 00 00 00 fc ff df 49 c7 44 24 08 00 00 00 00 48 89 fa 49 c7 04 24 00 00 00 00 48 c1 ea 03 <80> 3c 02 00 75 6d 48 89 da 49 89 5e 08 48 b8 00 00 00 00 00 fc 
RIP: __write_once_size include/linux/compiler.h:210 [inline] RSP: ffff88822624f8f8
RIP: __skb_unlink include/linux/skbuff.h:1916 [inline] RSP: ffff88822624f8f8
RIP: __skb_dequeue include/linux/skbuff.h:1933 [inline] RSP: ffff88822624f8f8
RIP: skb_dequeue+0xf1/0x180 net/core/skbuff.c:2832 RSP: ffff88822624f8f8
---[ end trace 7ddbdc9996f80679 ]---
general protection fault: 0000 [#2] PREEMPT SMP KASAN