kasan: CONFIG_KASAN_INLINE enabled kasan: GPF could be caused by NULL-ptr deref or user memory access general protection fault: 0000 [#1] SMP KASAN Dumping ftrace buffer: (ftrace buffer empty) Modules linked in: CPU: 1 PID: 15375 Comm: syz-executor7 Not tainted 4.16.0+ #376 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:__list_del_entry_valid+0x7e/0x150 lib/list_debug.c:51 RSP: 0018:ffff8801ae72e958 EFLAGS: 00010246 RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff81582701 RDX: 0000000000000000 RSI: ffff8801aebefd60 RDI: ffff8801aebefd68 RBP: ffff8801ae72e970 R08: ffffed0039ef27e8 R09: ffffed0039ef27e8 R10: 0000000000000001 R11: ffffed0039ef27e7 R12: 0000000000000000 R13: ffff8801ae72eb10 R14: ffff8801aebefd60 R15: ffff8801cf793f00 FS: 00007f3e6e3aa700(0000) GS:ffff8801db100000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000020ef5000 CR3: 000000000846a002 CR4: 00000000001606e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: __list_del_entry include/linux/list.h:117 [inline] list_del_init include/linux/list.h:159 [inline] tipc_nametbl_unsubscribe+0x318/0x990 net/tipc/name_table.c:848 tipc_subscrb_subscrp_delete+0x1e9/0x460 net/tipc/subscr.c:212 tipc_subscrb_delete net/tipc/subscr.c:242 [inline] tipc_subscrb_release_cb+0x17/0x30 net/tipc/subscr.c:321 tipc_topsrv_kern_unsubscr+0x2c3/0x430 net/tipc/server.c:535 tipc_group_delete+0x2c0/0x3d0 net/tipc/group.c:231 tipc_sk_leave+0x10b/0x200 net/tipc/socket.c:2795 tipc_release+0x154/0x1020 net/tipc/socket.c:577 sock_release+0x8d/0x1e0 net/socket.c:595 sock_close+0x16/0x20 net/socket.c:1149 __fput+0x327/0x7f0 fs/file_table.c:209 ____fput+0x15/0x20 fs/file_table.c:243 task_work_run+0x1ab/0x280 kernel/task_work.c:113 exit_task_work include/linux/task_work.h:22 [inline] do_exit+0x1986/0x2700 kernel/exit.c:865 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 0 PID: 15413 Comm: syz-executor3 Not tainted 4.16.0+ #376 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1a7/0x27d lib/dump_stack.c:53 fail_dump lib/fault-inject.c:51 [inline] should_fail+0x914/0xae0 lib/fault-inject.c:149 should_failslab+0xec/0x120 mm/failslab.c:32 slab_pre_alloc_hook mm/slab.h:422 [inline] slab_alloc mm/slab.c:3366 [inline] kmem_cache_alloc_trace+0x4b/0x740 mm/slab.c:3606 kmalloc include/linux/slab.h:512 [inline] kzalloc include/linux/slab.h:701 [inline] perf_event_alloc+0x200/0x2cd0 kernel/events/core.c:9907 do_group_exit+0x149/0x400 kernel/exit.c:968 get_signal+0x74c/0x16e0 kernel/signal.c:2469 do_signal+0x90/0x1e90 arch/x86/kernel/signal.c:809 exit_to_usermode_loop+0x258/0x2f0 arch/x86/entry/common.c:162 SYSC_perf_event_open+0x384/0x2a20 kernel/events/core.c:10477 prepare_exit_to_usermode arch/x86/entry/common.c:196 [inline] syscall_return_slowpath arch/x86/entry/common.c:265 [inline] do_syscall_64+0x6ec/0x940 arch/x86/entry/common.c:292 SyS_perf_event_open+0x39/0x50 kernel/events/core.c:10366 entry_SYSCALL_64_after_hwframe+0x42/0xb7 RIP: 0033:0x4552d9 do_syscall_64+0x281/0x940 arch/x86/entry/common.c:287 RSP: 002b:00007f3e6e3a9ce8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: fffffffffffffe00 RBX: 000000000072bec8 RCX: 00000000004552d9 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000072bec8 RBP: 000000000072bec8 R08: 0000000000000036 R09: 000000000072bea0 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000a3e81f R14: 00007f3e6e3aa9c0 R15: 0000000000000000 Code: 00 00 00 entry_SYSCALL_64_after_hwframe+0x42/0xb7 00 RIP: 0033:0x4552d9 ad RSP: 002b:00007ff089762c68 EFLAGS: 00000246 de ORIG_RAX: 000000000000012a 49 RAX: ffffffffffffffda RBX: 00007ff0897636d4 RCX: 00000000004552d9 39 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 c4 RBP: 000000000072bf58 R08: 0000000000000000 R09: 0000000000000000 74 R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000013 R13: 0000000000000458 R14: 00000000006f98e0 R15: 0000000000000000 66 48 b8 00 02 00 00 00 00 ad de 48 89 da 48 39 c3 74 65 48 c1 ea 03 48 b8 00 00 00 00 00 fc ff df <80> 3c 02 00 75 7b 48 8b 13 48 39 f2 75 57 49 8d 7c 24 08 48 b8 RIP: __list_del_entry_valid+0x7e/0x150 lib/list_debug.c:51 RSP: ffff8801ae72e958 ---[ end trace 75ea989f07b08a44 ]---