Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x194/0x24d lib/dump_stack.c:53 kasan: CONFIG_KASAN_INLINE enabled fail_dump lib/fault-inject.c:51 [inline] should_fail+0x8c0/0xa40 lib/fault-inject.c:149 kasan: GPF could be caused by NULL-ptr deref or user memory access general protection fault: 0000 [#1] SMP KASAN Dumping ftrace buffer: (ftrace buffer empty) Modules linked in: should_failslab+0xec/0x120 mm/failslab.c:32 slab_pre_alloc_hook mm/slab.h:422 [inline] slab_alloc_node mm/slab.c:3286 [inline] kmem_cache_alloc_node_trace+0x5a/0x760 mm/slab.c:3648 CPU: 1 PID: 7639 Comm: syz-executor3 Not tainted 4.16.0-rc6+ #284 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 kmalloc_node include/linux/slab.h:550 [inline] kzalloc_node include/linux/slab.h:712 [inline] __get_vm_area_node+0xae/0x340 mm/vmalloc.c:1402 RIP: 0010:__list_del_entry_valid+0x7e/0x150 lib/list_debug.c:51 RSP: 0018:ffff8801a4486a68 EFLAGS: 00010202 __vmalloc_node_range+0xa3/0x650 mm/vmalloc.c:1754 RAX: dffffc0000000000 RBX: 00000000000001c0 RCX: 0000000000000000 RDX: 0000000000000038 RSI: ffff8801cc0031d8 RDI: ffff8801cc0031e0 __vmalloc_node mm/vmalloc.c:1804 [inline] __vmalloc+0x45/0x50 mm/vmalloc.c:1810 RBP: ffff8801a4486a80 R08: 1ffff10034890c91 R09: 0000000000000004 R10: ffff8801a4486948 R11: 0000000000000002 R12: 0000000000400040 bpf_prog_alloc+0xaa/0x350 kernel/bpf/core.c:84 R13: ffff8801a4486c20 R14: ffff8801cc0031d8 R15: ffff8801a58f8780 FS: 00007fbee2216700(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 __get_filter+0xe0/0x220 net/core/filter.c:1289 CR2: 00007f98485a5db8 CR3: 0000000007a22001 CR4: 00000000001606e0 sk_reuseport_attach_filter+0x1d/0x80 net/core/filter.c:1342 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 sock_setsockopt+0x1583/0x1ad0 net/core/sock.c:954 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: __list_del_entry include/linux/list.h:117 [inline] list_del_init include/linux/list.h:159 [inline] tipc_nametbl_unsubscribe+0x337/0x990 net/tipc/name_table.c:808 SYSC_setsockopt net/socket.c:1846 [inline] SyS_setsockopt+0x2ff/0x360 net/socket.c:1829 tipc_sub_unsubscribe+0x6d/0x2e0 net/tipc/subscr.c:164 tipc_conn_delete_sub+0x324/0x4a0 net/tipc/topsrv.c:245 do_syscall_64+0x281/0x940 arch/x86/entry/common.c:287 tipc_topsrv_kern_unsubscr+0x21d/0x350 net/tipc/topsrv.c:598 tipc_group_delete+0x2c0/0x3d0 net/tipc/group.c:231 entry_SYSCALL_64_after_hwframe+0x42/0xb7 RIP: 0033:0x4548b9 RSP: 002b:00007fc120022c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 tipc_sk_leave+0x10b/0x200 net/tipc/socket.c:2800 RAX: ffffffffffffffda RBX: 00007fc1200236d4 RCX: 00000000004548b9 RDX: 0000000000000033 RSI: 0000000000000001 RDI: 0000000000000013 RBP: 000000000072bea0 R08: 0000000000000010 R09: 0000000000000000 R10: 0000000020000400 R11: 0000000000000246 R12: 0000000000000014 R13: 0000000000000525 R14: 00000000006f9c18 R15: 0000000000000000 tipc_release+0x154/0xff0 net/tipc/socket.c:576 syz-executor5: vmalloc: allocation failure: 4096 bytes, mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) syz-executor5 cpuset= syz5 mems_allowed=0 CPU: 0 PID: 7661 Comm: syz-executor5 Not tainted 4.16.0-rc6+ #284 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 sock_release+0x8d/0x1e0 net/socket.c:594 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x194/0x24d lib/dump_stack.c:53 sock_close+0x16/0x20 net/socket.c:1149 __fput+0x327/0x7e0 fs/file_table.c:209 warn_alloc+0x19a/0x2b0 mm/page_alloc.c:3312 ____fput+0x15/0x20 fs/file_table.c:243 task_work_run+0x199/0x270 kernel/task_work.c:113 __vmalloc_node_range+0x4f0/0x650 mm/vmalloc.c:1775 __vmalloc_node mm/vmalloc.c:1804 [inline] __vmalloc+0x45/0x50 mm/vmalloc.c:1810 exit_task_work include/linux/task_work.h:22 [inline] do_exit+0x9bb/0x1ad0 kernel/exit.c:865 bpf_prog_alloc+0xaa/0x350 kernel/bpf/core.c:84 __get_filter+0xe0/0x220 net/core/filter.c:1289 sk_reuseport_attach_filter+0x1d/0x80 net/core/filter.c:1342 sock_setsockopt+0x1583/0x1ad0 net/core/sock.c:954 SYSC_setsockopt net/socket.c:1846 [inline] SyS_setsockopt+0x2ff/0x360 net/socket.c:1829 do_group_exit+0x149/0x400 kernel/exit.c:968 do_syscall_64+0x281/0x940 arch/x86/entry/common.c:287 get_signal+0x73a/0x16d0 kernel/signal.c:2469 entry_SYSCALL_64_after_hwframe+0x42/0xb7 do_signal+0x90/0x1e90 arch/x86/kernel/signal.c:809 RIP: 0033:0x4548b9 RSP: 002b:00007fc120022c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 RAX: ffffffffffffffda RBX: 00007fc1200236d4 RCX: 00000000004548b9 RDX: 0000000000000033 RSI: 0000000000000001 RDI: 0000000000000013 RBP: 000000000072bea0 R08: 0000000000000010 R09: 0000000000000000 R10: 0000000020000400 R11: 0000000000000246 R12: 0000000000000014 R13: 0000000000000525 R14: 00000000006f9c18 R15: 0000000000000000 exit_to_usermode_loop+0x258/0x2f0 arch/x86/entry/common.c:162 Mem-Info: prepare_exit_to_usermode arch/x86/entry/common.c:196 [inline] syscall_return_slowpath arch/x86/entry/common.c:265 [inline] do_syscall_64+0x6ec/0x940 arch/x86/entry/common.c:292 active_anon:67764 inactive_anon:78 isolated_anon:0 active_file:3463 inactive_file:8092 isolated_file:0 unevictable:0 dirty:261 writeback:0 unstable:0 slab_reclaimable:8779 slab_unreclaimable:94220 mapped:24365 shmem:85 pagetables:625 bounce:0 free:1414868 free_pcp:425 free_cma:0 Node 0 active_anon:271056kB inactive_anon:312kB active_file:13852kB inactive_file:32368kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:97460kB dirty:1044kB writeback:0kB shmem:340kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 120832kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no Node 0 entry_SYSCALL_64_after_hwframe+0x42/0xb7 RIP: 0033:0x4548b9 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB RSP: 002b:00007fbee2215ce8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: fffffffffffffe00 RBX: 000000000072bec8 RCX: 00000000004548b9 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000072bec8 RBP: 000000000072bec8 R08: 0000000000000034 R09: 000000000072bea0 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 lowmem_reserve[]: R13: 0000000000a3e89f R14: 00007fbee22169c0 R15: 0000000000000000 Code: 0 00 00 00 00 ad de 49 2851 39 c4 74 66 48 b8 00 02 6358 00 00 00 00 ad de 48 89 6358 da 48 39 c3 74 65 48 c1 ea 03 48 b8 00 00 00 00 00 fc ff Node 0 df <80> 3c 02 00 75 7b 48 DMA32 free:2921356kB min:30224kB low:37780kB high:45336kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2922072kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:716kB local_pcp:716kB free_cma:0kB 8b 13 48 39 f2 75 57 49 lowmem_reserve[]: 8d 7c 24 08 48 b8 RIP: __list_del_entry_valid+0x7e/0x150 lib/list_debug.c:51 RSP: ffff8801a4486a68 ---[ end trace baecdd13dcb98c84 ]--- 0