RAX: ffffffffffffffda RBX: 00007f376cfc3c90 RCX: 00000000004592c9 RDX: 000000000001a000 RSI: 0000000020000000 RDI: 0000000000000003 RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 kasan: GPF could be caused by NULL-ptr deref or user memory access R10: 0000000000000000 R11: 0000000000000246 R12: 00007f376cfc46d4 general protection fault: 0000 [#1] PREEMPT SMP KASAN R13: 00000000004c9150 R14: 00000000004e00d0 R15: 0000000000000004 CPU: 1 PID: 13138 Comm: syz-executor.1 Not tainted 5.0.0-rc3+ #1 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:sctp_sched_prio_sched+0x86/0x6a0 net/sctp/stream_sched_prio.c:147 Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 ba 04 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 6b 50 49 8d 4d 20 48 89 ca 48 c1 ea 03 <80> 3c 02 00 0f 85 a1 04 00 00 4d 8b 7d 20 4d 85 ff 0f 84 eb 00 00 RSP: 0018:ffff88808b52f498 EFLAGS: 00010202 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 RAX: dffffc0000000000 RBX: ffff88808df34d00 RCX: 0000000000000020 RDX: 0000000000000004 RSI: ffff88808df34d00 RDI: ffff88808df34d50 RBP: ffff88808b52f4d0 R08: ffff888093424d58 R09: ffff88808ab58018 R10: ffff88808df34d38 R11: ffff88808df34d30 R12: ffff88808df34d40 R13: 0000000000000000 R14: ffff8880914d4b20 R15: ffff8880914d4b60 FS: 00007faae41ce700(0000) GS:ffff8880aeb00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f608708a000 CR3: 000000009686a000 CR4: 00000000001406e0 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: sctp_sched_prio_enqueue+0xfe/0x170 net/sctp/stream_sched_prio.c:258 CPU: 0 PID: 13157 Comm: syz-executor.2 Not tainted 5.0.0-rc3+ #1 sctp_cmd_send_msg net/sctp/sm_sideeffect.c:1111 [inline] sctp_cmd_interpreter net/sctp/sm_sideeffect.c:1784 [inline] sctp_side_effects net/sctp/sm_sideeffect.c:1220 [inline] sctp_do_sm+0x2bf5/0x4c90 net/sctp/sm_sideeffect.c:1191 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x113/0x167 lib/dump_stack.c:113 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold.4+0x5/0x13 lib/fault-inject.c:149 __should_failslab+0xba/0xf0 mm/failslab.c:32 should_failslab+0x9/0x14 mm/slab_common.c:1603 slab_pre_alloc_hook mm/slab.h:423 [inline] slab_alloc_node mm/slab.c:3288 [inline] kmem_cache_alloc_node+0x270/0x730 mm/slab.c:3631 sctp_primitive_SEND+0x7c/0xc0 net/sctp/primitive.c:178 sctp_sendmsg_to_asoc+0x89f/0x1500 net/sctp/socket.c:1955 __alloc_skb+0xa7/0x570 net/core/skbuff.c:196 alloc_skb include/linux/skbuff.h:1011 [inline] _sctp_make_chunk+0x3f/0x260 net/sctp/sm_make_chunk.c:1407 sctp_make_data net/sctp/sm_make_chunk.c:1439 [inline] sctp_make_datafrag_empty+0x159/0x260 net/sctp/sm_make_chunk.c:753 sctp_datamsg_from_user+0x4d7/0xf30 net/sctp/chunk.c:279 sctp_sendmsg_to_asoc+0x48f/0x1500 net/sctp/socket.c:1941 sctp_sendmsg+0xb80/0x1710 net/sctp/socket.c:2113 inet_sendmsg+0x108/0x440 net/ipv4/af_inet.c:798 sock_sendmsg_nosec net/socket.c:621 [inline] sock_sendmsg+0xb5/0xf0 net/socket.c:631 sctp_sendmsg+0xb80/0x1710 net/sctp/socket.c:2113 sock_write_iter+0x1e9/0x3d0 net/socket.c:900 call_write_iter include/linux/fs.h:1862 [inline] new_sync_write fs/read_write.c:474 [inline] __vfs_write+0x4a3/0x970 fs/read_write.c:487 inet_sendmsg+0x108/0x440 net/ipv4/af_inet.c:798 sock_sendmsg_nosec net/socket.c:621 [inline] sock_sendmsg+0xb5/0xf0 net/socket.c:631 vfs_write+0x150/0x4e0 fs/read_write.c:549 sock_write_iter+0x1e9/0x3d0 net/socket.c:900 ksys_write+0xcd/0x1b0 fs/read_write.c:598 call_write_iter include/linux/fs.h:1862 [inline] new_sync_write fs/read_write.c:474 [inline] __vfs_write+0x4a3/0x970 fs/read_write.c:487 __do_sys_write fs/read_write.c:610 [inline] __se_sys_write fs/read_write.c:607 [inline] __x64_sys_write+0x6e/0xb0 fs/read_write.c:607 do_syscall_64+0xd0/0x4d0 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x49/0xbe vfs_write+0x150/0x4e0 fs/read_write.c:549 RIP: 0033:0x4592c9 ksys_write+0xcd/0x1b0 fs/read_write.c:598 Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007faae41cdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000004592c9 RDX: 0000000000010094 RSI: 0000000020000040 RDI: 0000000000000003 __do_sys_write fs/read_write.c:610 [inline] __se_sys_write fs/read_write.c:607 [inline] __x64_sys_write+0x6e/0xb0 fs/read_write.c:607 RBP: 000000000075c118 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007faae41ce6d4 do_syscall_64+0xd0/0x4d0 arch/x86/entry/common.c:290 R13: 00000000004c9150 R14: 00000000004e00d0 R15: 00000000ffffffff entry_SYSCALL_64_after_hwframe+0x49/0xbe Modules linked in: RIP: 0033:0x4592c9 kobject: 'loop0' (000000008c4a88bc): kobject_uevent_env Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007f9b59660c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 00007f9b59660c90 RCX: 00000000004592c9 RDX: 000000000001a000 RSI: 0000000020000000 RDI: 0000000000000003 RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9b596616d4 R13: 00000000004c9150 R14: 00000000004e00d0 R15: 0000000000000004 CPU: 0 PID: 13123 Comm: syz-executor.4 Tainted: G D 5.0.0-rc3+ #1 kobject: 'loop0' (000000008c4a88bc): fill_kobj_path: path = '/devices/virtual/block/loop0' Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x113/0x167 lib/dump_stack.c:113 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold.4+0x5/0x13 lib/fault-inject.c:149 kobject: 'loop2' (00000000f3840132): kobject_uevent_env __should_failslab+0xba/0xf0 mm/failslab.c:32 should_failslab+0x9/0x14 mm/slab_common.c:1603 slab_pre_alloc_hook mm/slab.h:423 [inline] slab_alloc_node mm/slab.c:3288 [inline] kmem_cache_alloc_node+0x270/0x730 mm/slab.c:3631 __alloc_skb+0xa7/0x570 net/core/skbuff.c:196 alloc_skb include/linux/skbuff.h:1011 [inline] _sctp_make_chunk+0x3f/0x260 net/sctp/sm_make_chunk.c:1407 kobject: 'loop2' (00000000f3840132): fill_kobj_path: path = '/devices/virtual/block/loop2' sctp_make_data net/sctp/sm_make_chunk.c:1439 [inline] sctp_make_datafrag_empty+0x159/0x260 net/sctp/sm_make_chunk.c:753 ---[ end trace e5eb669c404e8400 ]--- sctp_datamsg_from_user+0x4d7/0xf30 net/sctp/chunk.c:279 sctp_sendmsg_to_asoc+0x48f/0x1500 net/sctp/socket.c:1941 sctp_sendmsg+0xb80/0x1710 net/sctp/socket.c:2113 RIP: 0010:sctp_sched_prio_sched+0x86/0x6a0 net/sctp/stream_sched_prio.c:147 inet_sendmsg+0x108/0x440 net/ipv4/af_inet.c:798 sock_sendmsg_nosec net/socket.c:621 [inline] sock_sendmsg+0xb5/0xf0 net/socket.c:631 sock_write_iter+0x1e9/0x3d0 net/socket.c:900 call_write_iter include/linux/fs.h:1862 [inline] new_sync_write fs/read_write.c:474 [inline] __vfs_write+0x4a3/0x970 fs/read_write.c:487 Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 ba 04 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 6b 50 49 8d 4d 20 48 89 ca 48 c1 ea 03 <80> 3c 02 00 0f 85 a1 04 00 00 4d 8b 7d 20 4d 85 ff 0f 84 eb 00 00 vfs_write+0x150/0x4e0 fs/read_write.c:549 ksys_write+0xcd/0x1b0 fs/read_write.c:598 __do_sys_write fs/read_write.c:610 [inline] __se_sys_write fs/read_write.c:607 [inline] __x64_sys_write+0x6e/0xb0 fs/read_write.c:607 do_syscall_64+0xd0/0x4d0 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x4592c9 Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007fec74b17c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 00007fec74b17c90 RCX: 00000000004592c9 RDX: 000000000001a000 RSI: 0000000020000000 RDI: 0000000000000003 RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007fec74b186d4 R13: 00000000004c9150 R14: 00000000004e00d0 R15: 0000000000000004 CPU: 0 PID: 13155 Comm: syz-executor.0 Tainted: G D 5.0.0-rc3+ #1 kobject: 'loop5' (000000009113c797): kobject_uevent_env Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 kobject: 'loop5' (000000009113c797): fill_kobj_path: path = '/devices/virtual/block/loop5' Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x113/0x167 lib/dump_stack.c:113 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold.4+0x5/0x13 lib/fault-inject.c:149 RSP: 0018:ffff88808b52f498 EFLAGS: 00010202 __should_failslab+0xba/0xf0 mm/failslab.c:32 should_failslab+0x9/0x14 mm/slab_common.c:1603 slab_pre_alloc_hook mm/slab.h:423 [inline] slab_alloc_node mm/slab.c:3288 [inline] kmem_cache_alloc_node+0x270/0x730 mm/slab.c:3631 __alloc_skb+0xa7/0x570 net/core/skbuff.c:196 alloc_skb include/linux/skbuff.h:1011 [inline] _sctp_make_chunk+0x3f/0x260 net/sctp/sm_make_chunk.c:1407 sctp_make_data net/sctp/sm_make_chunk.c:1439 [inline] sctp_make_datafrag_empty+0x159/0x260 net/sctp/sm_make_chunk.c:753 sctp_datamsg_from_user+0x4d7/0xf30 net/sctp/chunk.c:279 RAX: dffffc0000000000 RBX: ffff88808df34d00 RCX: 0000000000000020 sctp_sendmsg_to_asoc+0x48f/0x1500 net/sctp/socket.c:1941 RDX: 0000000000000004 RSI: ffff88808df34d00 RDI: ffff88808df34d50 sctp_sendmsg+0xb80/0x1710 net/sctp/socket.c:2113 inet_sendmsg+0x108/0x440 net/ipv4/af_inet.c:798 RBP: ffff88808b52f4d0 R08: ffff888093424d58 R09: ffff88808ab58018 sock_sendmsg_nosec net/socket.c:621 [inline] sock_sendmsg+0xb5/0xf0 net/socket.c:631 sock_write_iter+0x1e9/0x3d0 net/socket.c:900 call_write_iter include/linux/fs.h:1862 [inline] new_sync_write fs/read_write.c:474 [inline] __vfs_write+0x4a3/0x970 fs/read_write.c:487 R10: ffff88808df34d38 R11: ffff88808df34d30 R12: ffff88808df34d40 R13: 0000000000000000 R14: ffff8880914d4b20 R15: ffff8880914d4b60 vfs_write+0x150/0x4e0 fs/read_write.c:549 ksys_write+0xcd/0x1b0 fs/read_write.c:598 __do_sys_write fs/read_write.c:610 [inline] __se_sys_write fs/read_write.c:607 [inline] __x64_sys_write+0x6e/0xb0 fs/read_write.c:607 FS: 00007faae41ce700(0000) GS:ffff8880aeb00000(0000) knlGS:0000000000000000 do_syscall_64+0xd0/0x4d0 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x4592c9 Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007f8bbded6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 RAX: ffffffffffffffda RBX: 00007f8bbded6c90 RCX: 00000000004592c9 RDX: 000000000001a000 RSI: 0000000020000000 RDI: 0000000000000003 RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8bbded76d4 R13: 00000000004c9150 R14: 00000000004e00d0 R15: 0000000000000004 kobject: 'loop0' (000000008c4a88bc): kobject_uevent_env CR2: 00007f6086a40518 CR3: 000000009686a000 CR4: 00000000001406e0 kobject: 'loop0' (000000008c4a88bc): fill_kobj_path: path = '/devices/virtual/block/loop0' DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 kobject: 'loop4' (00000000aa314042): kobject_uevent_env DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 kobject: 'loop4' (00000000aa314042): fill_kobj_path: path = '/devices/virtual/block/loop4' FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 kobject: 'loop3' (000000002716c46d): kobject_uevent_env