__dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x16e/0x1f6 lib/dump_stack.c:113 kasan: CONFIG_KASAN_INLINE enabled fail_dump lib/fault-inject.c:51 [inline] should_fail.cold.4+0xa/0x17 lib/fault-inject.c:149 kasan: GPF could be caused by NULL-ptr deref or user memory access __should_failslab+0x124/0x180 mm/failslab.c:32 general protection fault: 0000 [#1] PREEMPT SMP KASAN should_failslab+0x9/0x14 mm/slab_common.c:1604 CPU: 0 PID: 7339 Comm: syz-executor.5 Not tainted 5.0.0+ #1 slab_pre_alloc_hook mm/slab.h:423 [inline] slab_alloc mm/slab.c:3374 [inline] kmem_cache_alloc_trace+0x2db/0x750 mm/slab.c:3613 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.2-1 04/01/2014 RIP: 0010:sctp_assoc_rwnd_increase+0x34/0x510 net/sctp/associola.c:1498 Code: 41 89 f5 41 54 53 48 89 fb 48 83 ec 08 e8 54 06 f5 fa 48 8d bb 60 06 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 27 04 00 00 44 8b a3 60 06 00 kmalloc include/linux/slab.h:545 [inline] kzalloc include/linux/slab.h:740 [inline] sctp_add_bind_addr+0x96/0x3a0 net/sctp/bind_addr.c:159 RSP: 0018:ffff888075e2f5d8 EFLAGS: 00010203 sctp_bind_addr_dup+0xd8/0x140 net/sctp/bind_addr.c:114 RAX: dffffc0000000000 RBX: ffffffffffffffff RCX: 0000000000000001 sctp_sock_migrate+0x526/0x13c0 net/sctp/socket.c:9223 RDX: 00000000000000cb RSI: ffffffff867aba5c RDI: 000000000000065f RBP: ffff888075e2f608 R08: ffff888073620000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: ffff88807af3776f R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 sctp_do_peeloff+0x2ef/0x470 net/sctp/socket.c:5646 FS: 00007f9cc3f51700(0000) GS:ffff88802d800000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000625208 CR3: 000000001fa88000 CR4: 00000000007406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 PKRU: 55555554 sctp_getsockopt_peeloff_common.isra.31+0x8e/0x260 net/sctp/socket.c:5665 Call Trace: sctp_ulpevent_release_data net/sctp/ulpevent.c:1092 [inline] sctp_ulpevent_free+0x21f/0x4e0 net/sctp/ulpevent.c:1129 sctp_queue_purge_ulpevents+0xbf/0x110 net/sctp/ulpevent.c:1146 sctp_close+0x13a/0x850 net/sctp/socket.c:1515 sctp_getsockopt_peeloff net/sctp/socket.c:5707 [inline] sctp_getsockopt+0x1ad9/0x676c net/sctp/socket.c:7802 inet_release+0x104/0x1f0 net/ipv4/af_inet.c:428 inet6_release+0x50/0x70 net/ipv6/af_inet6.c:473 __sock_release+0x204/0x2b0 net/socket.c:579 sock_release+0x17/0x20 net/socket.c:599 sctp_do_peeloff+0x384/0x470 net/sctp/socket.c:5649 sctp_getsockopt_peeloff_common.isra.31+0x8e/0x260 net/sctp/socket.c:5665 sctp_getsockopt_peeloff net/sctp/socket.c:5707 [inline] sctp_getsockopt+0x1ad9/0x676c net/sctp/socket.c:7802 sock_common_getsockopt+0x9a/0xe0 net/core/sock.c:3079 __sys_getsockopt+0x175/0x260 net/socket.c:1960 __do_sys_getsockopt net/socket.c:1971 [inline] __se_sys_getsockopt net/socket.c:1968 [inline] __x64_sys_getsockopt+0xbe/0x150 net/socket.c:1968 do_syscall_64+0x103/0x600 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x457799 Code: 8d b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007fb34a5abc88 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 RAX: ffffffffffffffda RBX: 000000000071bfa0 RCX: 0000000000457799 RDX: 0000000000000066 RSI: 0000000000000084 RDI: 0000000000000003 RBP: 00007fb34a5abca0 R08: 0000000020000140 R09: 0000000000000000 R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000004 R13: 00000000006e3ef8 R14: 00000000004b0af8 R15: 00007fb34a5ac6d4 sock_common_getsockopt+0x9a/0xe0 net/core/sock.c:3079 CPU: 1 PID: 7340 Comm: syz-executor.3 Not tainted 5.0.0+ #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.2-1 04/01/2014 __sys_getsockopt+0x175/0x260 net/socket.c:1960 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x16e/0x1f6 lib/dump_stack.c:113 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold.4+0xa/0x17 lib/fault-inject.c:149 __should_failslab+0x124/0x180 mm/failslab.c:32 __do_sys_getsockopt net/socket.c:1971 [inline] __se_sys_getsockopt net/socket.c:1968 [inline] __x64_sys_getsockopt+0xbe/0x150 net/socket.c:1968 should_failslab+0x9/0x14 mm/slab_common.c:1604 do_syscall_64+0x103/0x600 arch/x86/entry/common.c:290 slab_pre_alloc_hook mm/slab.h:423 [inline] slab_alloc mm/slab.c:3374 [inline] kmem_cache_alloc_trace+0x2db/0x750 mm/slab.c:3613 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x457799 Code: 8d b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 kmalloc include/linux/slab.h:545 [inline] kzalloc include/linux/slab.h:740 [inline] sctp_add_bind_addr+0x96/0x3a0 net/sctp/bind_addr.c:159 RSP: 002b:00007f9cc3f50c88 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 sctp_bind_addr_dup+0xd8/0x140 net/sctp/bind_addr.c:114 RAX: ffffffffffffffda RBX: 000000000071bfa0 RCX: 0000000000457799 sctp_sock_migrate+0x526/0x13c0 net/sctp/socket.c:9223 RDX: 0000000000000066 RSI: 0000000000000084 RDI: 0000000000000003 RBP: 00007f9cc3f50ca0 R08: 0000000020000140 R09: 0000000000000000 R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000004 sctp_do_peeloff+0x2ef/0x470 net/sctp/socket.c:5646 R13: 00000000006e3ef8 R14: 00000000004b0af8 R15: 00007f9cc3f516d4 Modules linked in: sctp_getsockopt_peeloff_common.isra.31+0x8e/0x260 net/sctp/socket.c:5665 sctp_getsockopt_peeloff net/sctp/socket.c:5707 [inline] sctp_getsockopt+0x1ad9/0x676c net/sctp/socket.c:7802 ---[ end trace 2103fac05e604873 ]--- RIP: 0010:sctp_assoc_rwnd_increase+0x34/0x510 net/sctp/associola.c:1498 Code: 41 89 f5 41 54 53 48 89 fb 48 83 ec 08 e8 54 06 f5 fa 48 8d bb 60 06 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 27 04 00 00 44 8b a3 60 06 00 RSP: 0018:ffff888075e2f5d8 EFLAGS: 00010203 RAX: dffffc0000000000 RBX: ffffffffffffffff RCX: 0000000000000001 RDX: 00000000000000cb RSI: ffffffff867aba5c RDI: 000000000000065f RBP: ffff888075e2f608 R08: ffff888073620000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: ffff88807af3776f R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 FS: 00007f9cc3f51700(0000) GS:ffff88802d800000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000625208 CR3: 000000001fa88000 CR4: 00000000007406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 PKRU: 55555554