[ 50.087772] default_idle_call+0x36/0x90 [ 50.091794] do_idle+0x24e/0x3b0 [ 50.095122] cpu_startup_entry+0x18/0x20 [ 50.099144] rest_init+0xed/0xf0 [ 50.102474] start_kernel+0x72e/0x754 [ 50.106238] ? mem_encrypt_init+0xb/0xb [ 50.110176] ? memcpy_orig+0x54/0x110 [ 50.113941] x86_64_start_reservations+0x2a/0x2c [ 50.118660] x86_64_start_kernel+0x77/0x7a [ 50.122855] secondary_startup_64+0xa5/0xa5 Warning: Permanently added 'ci-upstream-net-kasan-gce-2,10.128.0.51' (ECDSA) to the list of known hosts. executing program [ 56.247080] device lo entered promiscuous mode [ 56.252287] ================================================================== [ 56.259630] BUG: KASAN: use-after-free in strp_data_ready+0x2fb/0x390 [ 56.266170] Read of size 1 at addr ffff8801cebdda50 by task syzkaller825731/2994 [ 56.273662] [ 56.275256] CPU: 1 PID: 2994 Comm: syzkaller825731 Not tainted 4.14.0-rc4+ #82 [ 56.282575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 56.291890] Call Trace: [ 56.294438] [ 56.296558] dump_stack+0x194/0x257 [ 56.300148] ? arch_local_irq_restore+0x53/0x53 [ 56.304810] ? show_regs_print_info+0x65/0x65 [ 56.309276] ? strp_data_ready+0x2fb/0x390 [ 56.313475] print_address_description+0x73/0x250 [ 56.318282] ? strp_data_ready+0x2fb/0x390 [ 56.322479] kasan_report+0x25b/0x340 [ 56.326246] __asan_report_load1_noabort+0x14/0x20 [ 56.331137] strp_data_ready+0x2fb/0x390 [ 56.335162] psock_data_ready+0x56/0x70 [ 56.339101] tcp_data_queue+0x1da8/0x3e50 [ 56.343221] ? tcp_send_rcvq+0x510/0x510 [ 56.347253] ? selinux_socket_sock_rcv_skb+0x388/0x870 [ 56.352495] ? tcp_set_state+0x1a2/0x470 [ 56.356523] ? tcp_send_dupack+0xc2/0x370 [ 56.360635] ? sk_filter_trim_cap+0x3f3/0x9b0 [ 56.365094] ? lock_downgrade+0x990/0x990 [ 56.369222] ? lock_acquire+0x1d5/0x580 [ 56.373161] ? sk_filter_trim_cap+0x12f/0x9b0 [ 56.377625] ? pvclock_read_flags+0x160/0x160 [ 56.382084] ? tcp_urg+0xf6/0xb50 [ 56.385508] ? tcp_xmit_recovery.part.51+0x110/0x110 [ 56.390573] ? sched_clock+0x31/0x40 [ 56.394253] ? lock_acquire+0x140/0x580 [ 56.398191] tcp_rcv_established+0x844/0x18a0 [ 56.402654] ? tcp_data_queue+0x3e50/0x3e50 [ 56.406940] ? tcp_v4_reqsk_send_ack+0x3e0/0x3e0 [ 56.411660] tcp_v4_do_rcv+0x2ab/0x7d0 [ 56.415514] tcp_v4_rcv+0x24e5/0x2f80 [ 56.419291] ? tcp_v4_early_demux+0xa30/0xa30 [ 56.423750] ? iptable_nat_ipv4_fn+0x40/0x40 [ 56.428126] ip_local_deliver_finish+0x2e2/0xba0 [ 56.432848] ? inet_del_offload+0x40/0x40 [ 56.436960] ? iptable_nat_ipv4_fn+0x2c/0x40 [ 56.441335] ? nf_hook_slow+0xd3/0x1a0 [ 56.445189] ip_local_deliver+0x1ce/0x6e0 [ 56.449305] ? ip_call_ra_chain+0x6d0/0x6d0 [ 56.453598] ? inet_del_offload+0x40/0x40 [ 56.457708] ? __local_bh_enable_ip+0x9d/0x160 [ 56.462253] ? ipt_do_table+0xd6f/0x1330 [ 56.466278] ip_rcv_finish+0x887/0x19a0 [ 56.470218] ? ip_local_deliver_finish+0xba0/0xba0 [ 56.475108] ? iptable_nat_ipv4_fn+0x40/0x40 [ 56.479482] ? nf_nat_ipv4_in_range+0xf0/0xf0 [ 56.483940] ? ip_rcv+0xbf0/0x1820 [ 56.487448] ? nf_nat_ipv4_in+0x1cd/0x270 [ 56.491559] ? iptable_nat_ipv4_fn+0x40/0x40 [ 56.495936] ? iptable_nat_ipv4_in+0x2c/0x40 [ 56.500312] ? nf_hook_slow+0xd3/0x1a0 [ 56.504169] ip_rcv+0xc3f/0x1820 [ 56.507506] ? ip_local_deliver+0x6e0/0x6e0 [ 56.511791] ? cpuacct_charge+0x2de/0x5b0 [ 56.515902] ? lock_downgrade+0x990/0x990 [ 56.520017] ? lock_acquire+0x1d5/0x580 [ 56.523953] ? cpuacct_charge+0xc4/0x5b0 [ 56.527978] ? ip_local_deliver_finish+0xba0/0xba0 [ 56.532871] ? ip_local_deliver+0x6e0/0x6e0 [ 56.537156] __netif_receive_skb_core+0x1a3e/0x34b0 [ 56.542134] ? lock_downgrade+0x990/0x990 [ 56.546250] ? nf_ingress+0x9f0/0x9f0 [ 56.550012] ? cpuusage_read+0x10/0x10 [ 56.553862] ? lock_release+0xd70/0xd70 [ 56.557800] ? try_to_wake_up+0xf9/0x1600 [ 56.561912] ? hrtimer_active+0x2fb/0x410 [ 56.566026] ? hrtimer_forward+0x2d0/0x2d0 [ 56.570224] ? ttwu_do_wakeup+0x37f/0x710 [ 56.574335] ? pvclock_read_flags+0x160/0x160 [ 56.578794] ? do_raw_spin_trylock+0x190/0x190 [ 56.583339] ? task_fork_fair+0x7b0/0x7b0 [ 56.587452] ? __update_load_avg_se.isra.22+0x3c6/0x550 [ 56.592777] ? __update_load_avg_se.isra.22+0x3c6/0x550 [ 56.598106] ? fastpath_timer_check+0x7d5/0xa70 [ 56.602740] ? task_tick_fair+0x11c4/0x2840 [ 56.607025] ? cleanup_timers_list+0x330/0x330 [ 56.611573] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 56.616726] ? active_load_balance_cpu_stop+0x1220/0x1220 [ 56.622232] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 56.627387] ? trigger_load_balance+0x3a9/0x11e0 [ 56.632104] ? process_backlog+0x45f/0x740 [ 56.636309] ? lock_downgrade+0x990/0x990 [ 56.640424] ? lock_acquire+0x1d5/0x580 [ 56.644360] ? process_backlog+0x1ab/0x740 [ 56.648561] ? lock_release+0xd70/0xd70 [ 56.652498] ? default_wake_function+0x30/0x50 [ 56.657045] ? autoremove_wake_function+0xcf/0x350 [ 56.661939] __netif_receive_skb+0x2c/0x1b0 [ 56.666224] ? __netif_receive_skb+0x2c/0x1b0 [ 56.670681] process_backlog+0x203/0x740 [ 56.674709] net_rx_action+0x792/0x1910 [ 56.678655] ? napi_complete_done+0x6c0/0x6c0 [ 56.683114] ? __run_timers+0x947/0xb90 [ 56.687050] ? lock_downgrade+0x990/0x990 [ 56.691164] ? do_raw_spin_trylock+0x190/0x190 [ 56.695711] ? lock_acquire+0x1d5/0x580 [ 56.699649] ? __run_timers+0x1ce/0xb90 [ 56.703586] ? sched_clock_cpu+0x1b/0x170 [ 56.707703] ? timerqueue_add+0x1e9/0x280 [ 56.711819] ? enqueue_hrtimer+0x162/0x490 [ 56.716019] ? trace_hardirqs_on+0xd/0x10 [ 56.720129] ? _raw_spin_unlock_irq+0x27/0x70 [ 56.724586] ? __run_timers+0x16f/0xb90 [ 56.728528] ? del_timer_sync+0x240/0x240 [ 56.732649] ? pvclock_read_flags+0x160/0x160 [ 56.737107] ? hrtimer_interrupt+0x30f/0x5f0 [ 56.741483] ? kvm_clock_get_cycles+0x25/0x30 [ 56.745943] ? ktime_get+0x26f/0x3a0 [ 56.749621] ? do_gettimeofday+0x190/0x190 [ 56.753822] ? do_raw_spin_trylock+0x190/0x190 [ 56.758367] ? do_timer+0x50/0x50 [ 56.761785] ? tick_nohz_handler+0x130/0x130 [ 56.766159] ? native_apic_msr_write+0x5c/0x80 [ 56.770708] ? kvm_clock_get_cycles+0x25/0x30 [ 56.775171] ? clockevents_program_event+0x108/0x2e0 [ 56.780241] ? tick_program_event+0x7f/0xd0 [ 56.784526] ? do_softirq_own_stack+0x2a/0x40 [ 56.788986] __do_softirq+0x29d/0xbb2 [ 56.792758] ? __softirqentry_text_start+0x8/0x8 [ 56.797482] ? smp_reschedule_interrupt+0xf2/0x670 [ 56.802373] ? smp_thermal_interrupt+0x710/0x710 [ 56.807091] ? _raw_spin_lock+0x32/0x40 [ 56.811553] ? handle_edge_irq+0x2b4/0x7c0 [ 56.815759] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 56.820578] do_softirq_own_stack+0x2a/0x40 [ 56.824861] [ 56.827062] do_softirq.part.20+0x14d/0x190 [ 56.831351] ? ip_finish_output2+0x87a/0x1460 [ 56.835809] __local_bh_enable_ip+0x135/0x160 [ 56.840271] ip_finish_output2+0x8ad/0x1460 [ 56.844561] ? dst_output+0x140/0x140 [ 56.848326] ? ipt_do_table+0xd04/0x1330 [ 56.852350] ? trace_hardirqs_on+0xd/0x10 [ 56.856462] ? __local_bh_enable_ip+0x9d/0x160 [ 56.861008] ? ipt_do_table+0xd6f/0x1330 [ 56.865031] ? trace_hardirqs_on+0xd/0x10 [ 56.869146] ? ipv4_mtu+0x28c/0x3d0 [ 56.872738] ? ip_output+0x60a/0x860 [ 56.876415] ? lock_downgrade+0x990/0x990 [ 56.880526] ? iptable_nat_ipv4_fn+0x40/0x40 [ 56.884899] ? nf_nat_ipv4_in_range+0xf0/0xf0 [ 56.889361] ip_finish_output+0x85e/0xd10 [ 56.893471] ? ip_finish_output+0x85e/0xd10 [ 56.897755] ? ip_fragment.constprop.50+0x200/0x200 [ 56.902733] ? iptable_mangle_hook+0xa9/0x550 [ 56.907197] ? nf_hook_slow+0xd3/0x1a0 [ 56.911046] ? ipv4_dst_check+0x193/0x230 [ 56.915164] ip_output+0x1cc/0x860 [ 56.918667] ? ip_mc_output+0x1350/0x1350 [ 56.922779] ? ip_route_output_key_hash+0x252/0x370 [ 56.927758] ? ip_fragment.constprop.50+0x200/0x200 [ 56.932741] ip_local_out+0x95/0x160 [ 56.936417] ? sk_setup_caps+0x1ad/0x5a0 [ 56.940440] ip_queue_xmit+0x8c6/0x18e0 [ 56.944382] ? ip_build_and_send_pkt+0xc30/0xc30 [ 56.949103] ? refcount_dec_if_one+0x20/0x20 [ 56.953479] ? __tcp_v4_send_check+0x1b8/0x350 [ 56.958025] ? tcp_options_write+0x228/0x940 [ 56.962398] tcp_transmit_skb+0x1ab7/0x3840 [ 56.966689] ? __tcp_select_window+0x8d0/0x8d0 [ 56.971236] ? __save_stack_trace+0x7e/0xd0 [ 56.975524] ? depot_save_stack+0x12c/0x490 [ 56.979816] ? save_stack+0xa3/0xd0 [ 56.983404] ? save_stack+0x43/0xd0 [ 56.986997] ? kasan_kmalloc+0xad/0xe0 [ 56.990850] ? __kmalloc_node_track_caller+0x47/0x70 [ 56.995918] ? __kmalloc_reserve.isra.40+0x41/0xd0 [ 57.000813] ? __alloc_skb+0x13b/0x780 [ 57.004661] ? tcp_send_fin+0x27f/0xdb0 [ 57.008598] ? tcp_small_queue_check.isra.23+0x28d/0x380 [ 57.014012] ? tcp_tso_segs+0x1e0/0x1e0 [ 57.017952] ? pvclock_read_flags+0x160/0x160 [ 57.022411] ? entry_SYSCALL_64_fastpath+0x1f/0xbe [ 57.027307] ? lock_downgrade+0x990/0x990 [ 57.031418] ? __free_insn_slot+0x5c0/0x5c0 [ 57.035708] ? sched_clock_cpu+0x1b/0x170 [ 57.039818] ? tcp_init_tso_segs+0x114/0x1f0 [ 57.044192] tcp_write_xmit+0x663/0x4de0 [ 57.048214] ? kasan_kmalloc+0xad/0xe0 [ 57.052073] ? tcp_transmit_skb+0x3840/0x3840 [ 57.056530] ? rt_cpu_seq_show+0x2c0/0x2c0 [ 57.060731] ? tcp_v4_md5_lookup+0x22/0x30 [ 57.064929] ? tcp_established_options+0x2c5/0x420 [ 57.069823] ? tcp_current_mss+0x254/0x380 [ 57.074021] ? tcp_mtu_to_mss+0x460/0x460 [ 57.078132] ? __dentry_kill+0x4cf/0x6d0 [ 57.082161] ? lock_sock_nested+0xa3/0x110 [ 57.086358] ? lock_downgrade+0x990/0x990 [ 57.090470] ? lock_downgrade+0x990/0x990 [ 57.094584] __tcp_push_pending_frames+0xa0/0x250 [ 57.099393] tcp_send_fin+0x1b0/0xdb0 [ 57.103160] ? sk_forced_mem_schedule+0x150/0x150 [ 57.107964] ? __sk_dst_check+0x380/0x380 [ 57.112075] ? trace_hardirqs_on+0xd/0x10 [ 57.116188] ? tcp_set_state+0x1a2/0x470 [ 57.120215] ? tcp_read_sock+0x850/0x850 [ 57.124238] ? lock_sock_nested+0x14/0x110 [ 57.128437] ? trace_hardirqs_on+0xd/0x10 [ 57.132551] tcp_close+0xbe0/0xfc0 [ 57.136054] ? ip_mc_drop_socket+0x1ce/0x230 [ 57.140427] inet_release+0xed/0x1c0 [ 57.144106] sock_release+0x8d/0x1e0 [ 57.147783] ? sock_release+0x1e0/0x1e0 [ 57.151722] sock_close+0x16/0x20 [ 57.155137] __fput+0x333/0x7f0 [ 57.158386] ? fput+0x140/0x140 [ 57.161630] ? check_same_owner+0x320/0x320 [ 57.165914] ? do_raw_spin_trylock+0x190/0x190 [ 57.170460] ____fput+0x15/0x20 [ 57.173703] task_work_run+0x199/0x270 [ 57.177555] ? task_work_cancel+0x210/0x210 [ 57.181840] ? _raw_spin_unlock+0x22/0x30 [ 57.185952] ? switch_task_namespaces+0x87/0xc0 [ 57.190585] do_exit+0x9d2/0x1af0 [ 57.194008] ? mm_update_next_owner+0x930/0x930 [ 57.198646] ? dev_change_flags+0xf5/0x140 [ 57.202847] ? rtnl_unlock+0xe/0x10 [ 57.206439] ? devinet_ioctl+0x48f/0x19b0 [ 57.210552] ? inet_ifa_byprefix+0x1e0/0x1e0 [ 57.214928] ? lock_release+0xd70/0xd70 [ 57.218864] ? check_same_owner+0x320/0x320 [ 57.223156] ? inet_ioctl+0x117/0x1c0 [ 57.226922] ? sock_do_ioctl+0x73/0xb0 [ 57.230773] ? sock_ioctl+0x1e2/0x440 [ 57.234537] ? dlci_ioctl_set+0x40/0x40 [ 57.238477] ? do_vfs_ioctl+0x492/0x1530 [ 57.242503] ? ioctl_preallocate+0x2b0/0x2b0 [ 57.246877] ? selinux_capable+0x40/0x40