kasan: CONFIG_KASAN_INLINE enabled kasan: GPF could be caused by NULL-ptr deref or user memory access general protection fault: 0000 [#1] PREEMPT SMP KASAN CPU: 1 PID: 19365 Comm: syz-executor.5 Not tainted 5.1.0-rc6+ #191 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:rt_cache_valid+0x33/0x190 net/ipv4/route.c:1545 Code: 31 e4 53 48 89 fb e8 2c 2c 95 fb 48 85 db 74 4f e8 22 2c 95 fb 48 8d 7b 3a 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 01 38 d0 7c 08 84 d2 0f 85 07 RSP: 0018:ffff8880ae9077e8 EFLAGS: 00010206 RAX: dffffc0000000000 RBX: 00000000000050b8 RCX: ffffffff85dcb1e1 RDX: 0000000000000a1e RSI: ffffffff85db60ce RDI: 00000000000050f2 RBP: ffff8880ae907800 R08: ffff888087d443c0 R09: ffffed1015d25bc8 R10: ffffed1015d25bc7 R11: ffff8880ae92de3b R12: 0000000000000000 R13: 0000000000000000 R14: 00000000000050b8 R15: ffff8880a7f08cc0 FS: 00007f6310a4c700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffffffff600400 CR3: 00000000a09ee000 CR4: 00000000001406e0 Call Trace: __mkroute_output net/ipv4/route.c:2301 [inline] ip_route_output_key_hash_rcu+0x89d/0x30e0 net/ipv4/route.c:2533 ip_route_output_key_hash+0x212/0x380 net/ipv4/route.c:2362 __ip_route_output_key include/net/route.h:124 [inline] ip_route_output_flow+0x28/0xc0 net/ipv4/route.c:2617 ip_route_output_key include/net/route.h:134 [inline] tipc_udp_xmit.isra.0+0x565/0xcc0 net/tipc/udp_media.c:173 tipc_udp_send_msg+0x295/0x4a0 net/tipc/udp_media.c:247 tipc_bearer_xmit_skb+0x172/0x360 net/tipc/bearer.c:503 tipc_disc_timeout+0x933/0xd60 net/tipc/discover.c:332 call_timer_fn+0x190/0x720 kernel/time/timer.c:1325 expire_timers kernel/time/timer.c:1362 [inline] __run_timers kernel/time/timer.c:1681 [inline] __run_timers kernel/time/timer.c:1649 [inline] run_timer_softirq+0x652/0x1700 kernel/time/timer.c:1694 __do_softirq+0x266/0x95a kernel/softirq.c:293 do_softirq_own_stack+0x2a/0x40 arch/x86/entry/entry_64.S:1027 do_softirq.part.0+0x11a/0x170 kernel/softirq.c:338 do_softirq kernel/softirq.c:330 [inline] __local_bh_enable_ip+0x211/0x270 kernel/softirq.c:190 local_bh_enable include/linux/bottom_half.h:32 [inline] rcu_read_unlock_bh include/linux/rcupdate.h:684 [inline] ip6_finish_output2+0xbcf/0x2550 net/ipv6/ip6_output.c:121 ip6_finish_output+0x577/0xc30 net/ipv6/ip6_output.c:154 NF_HOOK_COND include/linux/netfilter.h:278 [inline] ip6_output+0x235/0x7f0 net/ipv6/ip6_output.c:171 dst_output include/net/dst.h:444 [inline] ip6_local_out+0xc4/0x1b0 net/ipv6/output_core.c:176 ip6_send_skb+0xbb/0x350 net/ipv6/ip6_output.c:1735 udp_v6_send_skb.isra.0+0x839/0x14f0 net/ipv6/udp.c:1181 udpv6_sendmsg+0x21e3/0x28d0 net/ipv6/udp.c:1478 inet_sendmsg+0x147/0x5d0 net/ipv4/af_inet.c:798 sock_sendmsg_nosec net/socket.c:651 [inline] sock_sendmsg+0xdd/0x130 net/socket.c:661 ___sys_sendmsg+0x3e2/0x930 net/socket.c:2260 __sys_sendmmsg+0x1bf/0x4d0 net/socket.c:2355 __do_sys_sendmmsg net/socket.c:2384 [inline] __se_sys_sendmmsg net/socket.c:2381 [inline] __x64_sys_sendmmsg+0x9d/0x100 net/socket.c:2381 do_syscall_64+0x103/0x610 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x458da9 Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007f6310a4bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000458da9 RDX: 00000000000004ff RSI: 00000000200092c0 RDI: 0000000000000004 RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6310a4c6d4 R13: 00000000004c5fac R14: 00000000004da760 R15: 00000000ffffffff Modules linked in: ---[ end trace 892b130baa594cea ]--- RIP: 0010:rt_cache_valid+0x33/0x190 net/ipv4/route.c:1545 Code: 31 e4 53 48 89 fb e8 2c 2c 95 fb 48 85 db 74 4f e8 22 2c 95 fb 48 8d 7b 3a 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 01 38 d0 7c 08 84 d2 0f 85 07 RSP: 0018:ffff8880ae9077e8 EFLAGS: 00010206 RAX: dffffc0000000000 RBX: 00000000000050b8 RCX: ffffffff85dcb1e1 RDX: 0000000000000a1e RSI: ffffffff85db60ce RDI: 00000000000050f2 RBP: ffff8880ae907800 R08: ffff888087d443c0 R09: ffffed1015d25bc8 R10: ffffed1015d25bc7 R11: ffff8880ae92de3b R12: 0000000000000000 R13: 0000000000000000 R14: 00000000000050b8 R15: ffff8880a7f08cc0 FS: 00007f6310a4c700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffffffff600400 CR3: 00000000a09ee000 CR4: 00000000001406e0