[ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Load/Save RF Kill Switch Status. [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.10.1' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 113.175776][ T6796] FAULT_INJECTION: forcing a failure. [ 113.175776][ T6796] name failslab, interval 1, probability 0, space 0, times 1 [ 113.188737][ T6796] CPU: 0 PID: 6796 Comm: syz-executor036 Not tainted 5.7.0-syzkaller #0 [ 113.197036][ T6796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 113.207065][ T6796] Call Trace: [ 113.210334][ T6796] dump_stack+0x188/0x20d [ 113.214690][ T6796] should_fail.cold+0x5/0xa [ 113.219174][ T6796] ? fault_create_debugfs_attr+0x140/0x140 [ 113.225007][ T6796] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 113.231702][ T6796] should_failslab+0x5/0xf [ 113.236108][ T6796] kmem_cache_alloc+0x44/0x740 [ 113.240889][ T6796] ? unwind_next_frame+0x105a/0x1df0 [ 113.246154][ T6796] ? entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 113.252203][ T6796] radix_tree_node_alloc.constprop.0+0x1e3/0x330 [ 113.258531][ T6796] radix_tree_extend+0x256/0x4e0 [ 113.263445][ T6796] idr_get_free+0x60c/0x8e0 [ 113.267929][ T6796] idr_alloc_u32+0x170/0x2d0 [ 113.272496][ T6796] ? __fprop_inc_percpu_max+0x210/0x210 [ 113.278015][ T6796] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 113.283979][ T6796] ? mutex_trylock+0x2c0/0x2c0 [ 113.288717][ T6796] ? save_trace+0x42/0xaf0 [ 113.293111][ T6796] idr_alloc+0xc2/0x130 [ 113.297240][ T6796] ? idr_alloc_u32+0x2d0/0x2d0 [ 113.301977][ T6796] ? print_usage_bug+0x240/0x240 [ 113.306889][ T6796] __qrtr_bind.isra.0+0x12e/0x5c0 [ 113.311896][ T6796] ? qrtr_release+0x2a0/0x2a0 [ 113.316548][ T6796] ? mark_held_locks+0x9f/0xe0 [ 113.321284][ T6796] ? __local_bh_enable_ip+0x159/0x270 [ 113.326644][ T6796] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 113.332606][ T6796] qrtr_autobind+0xaf/0xf0 [ 113.337091][ T6796] qrtr_sendmsg+0x1d6/0x770 [ 113.341614][ T6796] ? aa_af_perm+0x260/0x260 [ 113.346100][ T6796] ? qrtr_autobind+0xf0/0xf0 [ 113.350674][ T6796] ? qrtr_autobind+0xf0/0xf0 [ 113.355241][ T6796] sock_sendmsg+0xcf/0x120 [ 113.359683][ T6796] ____sys_sendmsg+0x6e6/0x810 [ 113.364435][ T6796] ? kernel_sendmsg+0x50/0x50 [ 113.369088][ T6796] ? _parse_integer+0x180/0x180 [ 113.373916][ T6796] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 113.379889][ T6796] ___sys_sendmsg+0x100/0x170 [ 113.384545][ T6796] ? sendmsg_copy_msghdr+0x70/0x70 [ 113.389630][ T6796] ? get_pid_task+0x116/0x200 [ 113.394287][ T6796] ? lock_downgrade+0x840/0x840 [ 113.399131][ T6796] ? proc_cwd_link+0x210/0x210 [ 113.403867][ T6796] ? rcu_read_lock_held+0x9c/0xb0 [ 113.408866][ T6796] ? rcu_read_lock_held_common+0xa0/0xa0 [ 113.414475][ T6796] ? vfs_write+0x348/0x5d0 [ 113.418882][ T6796] ? debug_smp_processor_id+0x2f/0x185 [ 113.424327][ T6796] ? __fget_light+0x1ab/0x270 [ 113.428984][ T6796] __sys_sendmsg+0xe5/0x1b0 [ 113.433460][ T6796] ? __sys_sendmsg_sock+0xb0/0xb0 [ 113.438456][ T6796] ? vfs_write+0x161/0x5d0 [ 113.442853][ T6796] ? do_syscall_64+0x21/0x7d0 [ 113.447529][ T6796] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 113.453484][ T6796] do_syscall_64+0xf6/0x7d0 [ 113.457966][ T6796] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 113.463828][ T6796] RIP: 0033:0x4406c9 [ 113.467698][ T6796] Code: 25 02 00 85 c0 b8 00 00 00 00 48 0f 44 c3 5b c3 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 113.487376][ T6796] RSP: 002b:00007ffdf01d56c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 113.495767][ T6796] RAX: ffffffffffffffda RBX: 00007ffdf01d56d0 RCX: 00000000004406c9 [ 113.504337][ T6796] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 113.512289][ T6796] RBP: 0000000000000005 R08: 0000000000000001 R09: 0000000000000031 [ 113.520239][ T6796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000401f50 [ 113.528184][ T6796] R13: 0000000000401fe0 R14: 0000000000000000 R15: 0000000000000000 [ 113.546959][ T6796] BUG: using smp_processor_id() in preemptible [00000000] code: syz-executor036/6796 [ 113.556689][ T6796] caller is radix_tree_node_alloc.constprop.0+0x200/0x330 [ 113.563958][ T6796] CPU: 0 PID: 6796 Comm: syz-executor036 Not tainted 5.7.0-syzkaller #0 [ 113.572257][ T6796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 113.582440][ T6796] Call Trace: [ 113.585762][ T6796] dump_stack+0x188/0x20d [ 113.590072][ T6796] debug_smp_processor_id.cold+0x88/0x9b [ 113.595679][ T6796] radix_tree_node_alloc.constprop.0+0x200/0x330 [ 113.602004][ T6796] radix_tree_extend+0x256/0x4e0 [ 113.606927][ T6796] idr_get_free+0x60c/0x8e0 [ 113.611562][ T6796] idr_alloc_u32+0x170/0x2d0 [ 113.616132][ T6796] ? __fprop_inc_percpu_max+0x210/0x210 [ 113.621698][ T6796] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 113.627658][ T6796] ? mutex_trylock+0x2c0/0x2c0 [ 113.632396][ T6796] ? save_trace+0x42/0xaf0 [ 113.636791][ T6796] idr_alloc+0xc2/0x130 [ 113.640922][ T6796] ? idr_alloc_u32+0x2d0/0x2d0 [ 113.645662][ T6796] ? print_usage_bug+0x240/0x240 [ 113.650575][ T6796] __qrtr_bind.isra.0+0x12e/0x5c0 [ 113.655572][ T6796] ? qrtr_release+0x2a0/0x2a0 [ 113.660227][ T6796] ? mark_held_locks+0x9f/0xe0 [ 113.664964][ T6796] ? __local_bh_enable_ip+0x159/0x270 [ 113.670309][ T6796] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 113.676263][ T6796] qrtr_autobind+0xaf/0xf0 [ 113.680652][ T6796] qrtr_sendmsg+0x1d6/0x770 [ 113.685129][ T6796] ? aa_af_perm+0x260/0x260 [ 113.689606][ T6796] ? qrtr_autobind+0xf0/0xf0 [ 113.694174][ T6796] ? qrtr_autobind+0xf0/0xf0 [ 113.698740][ T6796] sock_sendmsg+0xcf/0x120 [ 113.703132][ T6796] ____sys_sendmsg+0x6e6/0x810 [ 113.707874][ T6796] ? kernel_sendmsg+0x50/0x50 [ 113.712535][ T6796] ? _parse_integer+0x180/0x180 [ 113.717624][ T6796] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 113.723582][ T6796] ___sys_sendmsg+0x100/0x170 [ 113.728257][ T6796] ? sendmsg_copy_msghdr+0x70/0x70 [ 113.733341][ T6796] ? get_pid_task+0x116/0x200 [ 113.737995][ T6796] ? lock_downgrade+0x840/0x840 [ 113.742821][ T6796] ? proc_cwd_link+0x210/0x210 [ 113.747559][ T6796] ? rcu_read_lock_held+0x9c/0xb0 [ 113.752567][ T6796] ? rcu_read_lock_held_common+0xa0/0xa0 [ 113.758187][ T6796] ? vfs_write+0x348/0x5d0 [ 113.762580][ T6796] ? debug_smp_processor_id+0x2f/0x185 [ 113.768029][ T6796] ? __fget_light+0x1ab/0x270 [ 113.772680][ T6796] __sys_sendmsg+0xe5/0x1b0 [ 113.777169][ T6796] ? __sys_sendmsg_sock+0xb0/0xb0 [ 113.782251][ T6796] ? vfs_write+0x161/0x5d0 [ 113.786648][ T6796] ? do_syscall_64+0x21/0x7d0 [ 113.791298][ T6796] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 113.797266][ T6796] do_syscall_64+0xf6/0x7d0 [ 113.801759][ T6796] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 113.807640][ T6796] RIP: 0033:0x4406c9 [ 113.811520][ T6796] Code: 25 02 00 85 c0 b8 00 00 00 00 48 0f 44 c3 5b c3 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 113.831115][ T6796] RSP: 002b:00007ffdf01d56c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 113.839507][ T6796] RAX: ffffffffffffffda RBX: 00007ffdf01d56d0 RCX: 00000000004406c9 [ 113.847452][ T6796] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 113.855396][ T6796] RBP: 0000000000000005 R08: 0000000000000001 R09: 0000000000000031 [ 113.863449][ T6796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000401f50 [ 113.871406][ T6796] R13: 0000000000401fe0 R14: 0000000000000000 R15: 0000000000000000