kasan: CONFIG_KASAN_INLINE enabled kasan: GPF could be caused by NULL-ptr deref or user memory access general protection fault: 0000 [#1] PREEMPT SMP KASAN CPU: 1 PID: 28647 Comm: syz-executor.3 Not tainted 5.2.0-rc2+ #36 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:rt_cache_valid+0x33/0x190 net/ipv4/route.c:1560 Code: 31 e4 53 48 89 fb e8 dc 03 8b fb 48 85 db 74 4f e8 d2 03 8b fb 48 8d 7b 3a 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 01 38 d0 7c 08 84 d2 0f 85 07 RSP: 0018:ffff888060d3efe8 EFLAGS: 00010202 RAX: dffffc0000000000 RBX: 0000000000000006 RCX: ffffc90005fda000 RDX: 0000000000000008 RSI: ffffffff85e5a09e RDI: 0000000000000040 RBP: ffff888060d3f000 R08: ffff88806ddf2400 R09: ffffed1015d06be0 R10: ffffed1015d06bdf R11: ffff8880ae835efb R12: 0000000000000000 R13: ffff88808f526ea8 R14: ffff888060d16df0 R15: ffff88808d025540 FS: 00007fb2f65a0700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fd00827c16b CR3: 00000000a860b000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: __mkroute_output net/ipv4/route.c:2336 [inline] ip_route_output_key_hash_rcu+0x819/0x2d50 net/ipv4/route.c:2568 ip_route_output_key_hash+0x1ef/0x360 net/ipv4/route.c:2397 __ip_route_output_key include/net/route.h:129 [inline] ip_route_output_flow+0x28/0xc0 net/ipv4/route.c:2655 ip_route_output_key include/net/route.h:139 [inline] sctp_v4_get_dst+0x467/0x1260 net/sctp/protocol.c:435 sctp_transport_route+0x12d/0x360 net/sctp/transport.c:297 sctp_assoc_add_peer+0x53e/0xfc0 net/sctp/associola.c:663 sctp_process_param net/sctp/sm_make_chunk.c:2531 [inline] sctp_process_init+0x2491/0x2b10 net/sctp/sm_make_chunk.c:2344 sctp_sf_do_unexpected_init net/sctp/sm_statefuns.c:1541 [inline] sctp_sf_do_unexpected_init.isra.0+0x7cd/0x1350 net/sctp/sm_statefuns.c:1441 sctp_sf_do_5_2_1_siminit+0x35/0x40 net/sctp/sm_statefuns.c:1670 sctp_do_sm+0x121/0x50e0 net/sctp/sm_sideeffect.c:1147 sctp_assoc_bh_rcv+0x343/0x660 net/sctp/associola.c:1059 sctp_inq_push+0x1e4/0x280 net/sctp/inqueue.c:80 sctp_backlog_rcv+0x196/0xbe0 net/sctp/input.c:339 sk_backlog_rcv include/net/sock.h:950 [inline] __release_sock+0x129/0x390 net/core/sock.c:2418 release_sock+0x59/0x1c0 net/core/sock.c:2934 sctp_wait_for_connect+0x316/0x540 net/sctp/socket.c:9039 __sctp_connect+0xab2/0xcd0 net/sctp/socket.c:1226 sctp_connect net/sctp/socket.c:4846 [inline] sctp_inet_connect+0x29c/0x340 net/sctp/socket.c:4862 __sys_connect+0x264/0x330 net/socket.c:1840 __do_sys_connect net/socket.c:1851 [inline] __se_sys_connect net/socket.c:1848 [inline] __x64_sys_connect+0x73/0xb0 net/socket.c:1848 do_syscall_64+0xfd/0x680 arch/x86/entry/common.c:301 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x459279 Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007fb2f659fc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459279 RDX: 000000000000001c RSI: 0000000020000080 RDI: 0000000000000004 RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb2f65a06d4 R13: 00000000004bf74d R14: 00000000004d0c18 R15: 00000000ffffffff Modules linked in: ---[ end trace 04a1010c043f6729 ]--- RIP: 0010:rt_cache_valid+0x33/0x190 net/ipv4/route.c:1560 Code: 31 e4 53 48 89 fb e8 dc 03 8b fb 48 85 db 74 4f e8 d2 03 8b fb 48 8d 7b 3a 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 01 38 d0 7c 08 84 d2 0f 85 07 RSP: 0018:ffff888060d3efe8 EFLAGS: 00010202 RAX: dffffc0000000000 RBX: 0000000000000006 RCX: ffffc90005fda000 RDX: 0000000000000008 RSI: ffffffff85e5a09e RDI: 0000000000000040 RBP: ffff888060d3f000 R08: ffff88806ddf2400 R09: ffffed1015d06be0 R10: ffffed1015d06bdf R11: ffff8880ae835efb R12: 0000000000000000 R13: ffff88808f526ea8 R14: ffff888060d16df0 R15: ffff88808d025540 FS: 00007fb2f65a0700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ffd54673a80 CR3: 00000000a860b000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400