====================================== | | WAIT TIMEOUT stdout | [ 5909.838236][ T730] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN | [ 5909.838734][ T730] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 5909.839485][ T730] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 5909.839786][ T730] RIP: 0010:__mkroute_output (net/ipv4/route.c:2663) [ 5909.840034][ T730] Code: 24 30 48 c1 ea 03 80 3c 02 00 0f 85 c3 06 00 00 48 b8 00 00 00 00 00 fc ff df 49 8b 5c 24 18 48 8d 7b 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 95 06 00 00 48 8b 5b 58 49 8d 7f 10 48 b8 00 00 All code ======== 0: 24 30 and $0x30,%al 2: 48 c1 ea 03 shr $0x3,%rdx 6: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) a: 0f 85 c3 06 00 00 jne 0x6d3 10: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 17: fc ff df 1a: 49 8b 5c 24 18 mov 0x18(%r12),%rbx 1f: 48 8d 7b 58 lea 0x58(%rbx),%rdi 23: 48 89 fa mov %rdi,%rdx 26: 48 c1 ea 03 shr $0x3,%rdx 2a:* 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) <-- trapping instruction 2e: 0f 85 95 06 00 00 jne 0x6c9 34: 48 8b 5b 58 mov 0x58(%rbx),%rbx 38: 49 8d 7f 10 lea 0x10(%r15),%rdi 3c: 48 rex.W 3d: b8 .byte 0xb8 ... Code starting with the faulting instruction =========================================== 0: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 4: 0f 85 95 06 00 00 jne 0x69f a: 48 8b 5b 58 mov 0x58(%rbx),%rbx e: 49 8d 7f 10 lea 0x10(%r15),%rdi 12: 48 rex.W 13: b8 .byte 0xb8 ... [ 5909.840858][ T730] RSP: 0018:ffffc90005d17bc0 EFLAGS: 00010202 [ 5909.841154][ T730] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffffad09259f [ 5909.841507][ T730] RDX: 000000000000000b RSI: 0000000000000004 RDI: 0000000000000058 [ 5909.841852][ T730] RBP: ffff888014a95608 R08: 0000000000000000 R09: ffffed1002935bd5 [ 5909.842199][ T730] R10: ffff8880149adeaf R11: ffff888023de15f0 R12: ffffc90005d17c60 [ 5909.842544][ T730] R13: ffff88800b7dd000 R14: 0000000090000000 R15: ffff88801e500f40 [ 5909.842894][ T730] FS: 00007effb2ade300(0000) GS:ffff8880bd32c000(0000) knlGS:0000000000000000 [ 5909.843300][ T730] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 5909.843607][ T730] CR2: 00007effb2d93730 CR3: 000000000e49a002 CR4: 0000000000772ef0 [ 5909.843961][ T730] PKRU: 55555554 [ 5909.844137][ T730] Call Trace: [ 5909.844320][ T730] [ 5909.844445][ T730] ip_route_output_key_hash (net/ipv4/route.c:2701) [ 5909.844684][ T730] ? ip_route_output_key_hash_rcu (net/ipv4/route.c:2688) [ 5909.844986][ T730] ip_route_output_flow (net/ipv4/route.c:2930) [ 5909.845219][ T730] __ip4_datagram_connect (./include/net/route.h:355 net/ipv4/datagram.c:49) [ 5909.845458][ T730] ? inet_autobind (net/ipv4/af_inet.c:570) [ 5909.845689][ T730] udp_connect (net/ipv4/udp.c:2153) [ 5909.845868][ T730] __sys_connect (./include/linux/file.h:62 ./include/linux/file.h:83 net/socket.c:2095) [ 5909.846107][ T730] ? __sys_connect_file (net/socket.c:2093) [ 5909.846337][ T730] ? fd_install (./include/linux/rcupdate.h:341 ./include/linux/rcupdate.h:953 fs/file.c:676) [ 5909.846570][ T730] ? fd_install (./arch/x86/include/asm/preempt.h:104 ./include/linux/rcupdate.h:955 fs/file.c:676) [ 5909.846810][ T730] ? __sys_socket (net/socket.c:503 net/socket.c:1740) [ 5909.847044][ T730] ? update_socket_protocol+0x10/0x10 [ 5909.847280][ T730] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 ./include/linux/atomic/atomic-arch-fallback.h:949 ./include/linux/atomic/atomic-instrumented.h:401 ./include/linux/refcount.h:389 ./include/linux/refcount.h:432 ./include/linux/mmap_lock.h:143 ./include/linux/mmap_lock.h:267 arch/x86/mm/fault.c:1338) [ 5909.847519][ T730] __x64_sys_connect (net/socket.c:2108) [ 5909.847756][ T730] ? lockdep_hardirqs_on (kernel/locking/lockdep.c:4472) [ 5909.847991][ T730] do_syscall_64 (arch/x86/entry/syscall_64.c:63 arch/x86/entry/syscall_64.c:94) [ 5909.848225][ T730] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) [ 5909.848514][ T730] RIP: 0033:0x7effb2d74d77 [ 5909.848759][ T730] Code: 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 2a 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 51 c3 48 83 ec 18 89 54 24 0c 48 89 34 24 89 All code ======== 0: 64 89 01 mov %eax,%fs:(%rcx) 3: 48 83 c8 ff or $0xffffffffffffffff,%rax 7: c3 ret 8: 66 2e 0f 1f 84 00 00 cs nopw 0x0(%rax,%rax,1) f: 00 00 00 12: 90 nop 13: f3 0f 1e fa endbr64 17: 64 8b 04 25 18 00 00 mov %fs:0x18,%eax 1e: 00 1f: 85 c0 test %eax,%eax 21: 75 10 jne 0x33 23: b8 2a 00 00 00 mov $0x2a,%eax 28: 0f 05 syscall 2a:* 48 3d 00 f0 ff ff cmp $0xfffffffffffff000,%rax <-- trapping instruction 30: 77 51 ja 0x83 32: c3 ret 33: 48 83 ec 18 sub $0x18,%rsp 37: 89 54 24 0c mov %edx,0xc(%rsp) 3b: 48 89 34 24 mov %rsi,(%rsp) 3f: 89 .byte 0x89 Code starting with the faulting instruction =========================================== 0: 48 3d 00 f0 ff ff cmp $0xfffffffffffff000,%rax 6: 77 51 ja 0x59 8: c3 ret 9: 48 83 ec 18 sub $0x18,%rsp d: 89 54 24 0c mov %edx,0xc(%rsp) 11: 48 89 34 24 mov %rsi,(%rsp) 15: 89 .byte 0x89 [ 5909.849597][ T730] RSP: 002b:00007ffe852c6008 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 5909.849955][ T730] RAX: ffffffffffffffda RBX: 00007ffe852c8972 RCX: 00007effb2d74d77 [ 5909.850309][ T730] RDX: 0000000000000010 RSI: 00007ffe852c6070 RDI: 0000000000000007 [ 5909.850663][ T730] RBP: 00007ffe852c66c0 R08: 00000000000000ff R09: 0000000000000000 [ 5909.851022][ T730] R10: 00007effb2c6c5a0 R11: 0000000000000246 R12: 00007ffe852c6a18 Finger prints: __mkroute_output:ip_route_output_key_hash:ip_route_output_flow:__ip4_datagram_connect:udp_connect