[ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty1. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Reached target Login Prompts. [ OK ] Started OpenBSD Secure Shell server. [ OK ] Listening on Load/Save RF Kill Switch Status /dev/rfkill Watch. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.58' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 28.525237] FAULT_INJECTION: forcing a failure. [ 28.525237] name failslab, interval 1, probability 0, space 0, times 1 [ 28.536527] CPU: 1 PID: 7951 Comm: syz-executor401 Not tainted 4.14.266-syzkaller #0 [ 28.544397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 28.553726] Call Trace: [ 28.556292] dump_stack+0x1b2/0x281 [ 28.559897] should_fail.cold+0x10a/0x149 [ 28.564039] should_failslab+0xd6/0x130 [ 28.567991] kmem_cache_alloc_node_trace+0x25a/0x400 [ 28.573075] blk_mq_init_tags+0x5e/0x280 [ 28.577114] blk_mq_alloc_rq_map+0x90/0x220 [ 28.581415] blk_mq_sched_alloc_tags+0xaa/0x240 [ 28.586064] blk_mq_sched_init_hctx+0x5e/0x200 [ 28.590635] blk_mq_realloc_hw_ctxs+0x64e/0xe00 [ 28.595292] ? blk_mq_update_queue_map+0x158/0x1f0 [ 28.600238] blk_mq_update_nr_hw_queues+0x1f3/0x3e0 [ 28.605234] nbd_start_device+0x1d7/0xca0 [ 28.609367] nbd_ioctl+0x3a8/0xa80 [ 28.612883] ? get_pid_task+0x91/0x130 [ 28.616746] ? nbd_disconnect_and_put+0x140/0x140 [ 28.621566] ? lock_downgrade+0x740/0x740 [ 28.625699] ? nbd_disconnect_and_put+0x140/0x140 [ 28.630519] blkdev_ioctl+0x540/0x1830 [ 28.634394] ? proc_fail_nth_write+0x7b/0x180 [ 28.638868] ? blkpg_ioctl+0x8d0/0x8d0 [ 28.642734] ? fsnotify+0x974/0x11b0 [ 28.646422] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 28.651329] ? debug_check_no_obj_freed+0x2c0/0x680 [ 28.656343] block_ioctl+0xd9/0x120 [ 28.659966] ? blkdev_fallocate+0x3a0/0x3a0 [ 28.664273] do_vfs_ioctl+0x75a/0xff0 [ 28.668063] ? ioctl_preallocate+0x1a0/0x1a0 [ 28.672534] ? vfs_write+0x319/0x4d0 [ 28.676223] ? SyS_write+0x14d/0x210 [ 28.679999] ? security_file_ioctl+0x83/0xb0 [ 28.684384] SyS_ioctl+0x7f/0xb0 [ 28.687725] ? do_vfs_ioctl+0xff0/0xff0 [ 28.691681] do_syscall_64+0x1d5/0x640 [ 28.695550] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 28.700719] RIP: 0033:0x7f9db96e5dc9 [ 28.704404] RSP: 002b:00007ffc8af0bdf8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 28.712088] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f9db96e5dc9 [ 28.719342] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000007 [ 28.726590] RBP: 00007ffc8af0be00 R08: 0000000000000002 R09: 00007f9db9003331 [ 28.733838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 28.741089] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 28.751049] BUG: unable to handle kernel NULL pointer dereference at 0000000000000120 [ 28.759033] IP: blk_mq_map_swqueue+0x253/0x990 [ 28.763594] PGD a170d067 P4D a170d067 PUD 96acd067 PMD 0 [ 28.769108] Oops: 0002 [#1] PREEMPT SMP KASAN [ 28.773582] Modules linked in: [ 28.776753] CPU: 1 PID: 7951 Comm: syz-executor401 Not tainted 4.14.266-syzkaller #0 [ 28.784610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 28.793947] task: ffff8880991564c0 task.stack: ffff8880b3620000 [ 28.799984] RIP: 0010:blk_mq_map_swqueue+0x253/0x990 [ 28.805069] RSP: 0018:ffff8880b3627a80 EFLAGS: 00010297 [ 28.810405] RAX: ffff8880991564c0 RBX: ffff8880ae8c30b0 RCX: 1ffff11015deba11 [ 28.817655] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff88cc7d68 [ 28.824902] RBP: 0000000000000001 R08: ffff8880aef5d080 R09: 0000000000000000 [ 28.832151] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001 [ 28.839395] R13: ffff8882386bc500 R14: 0000000000000000 R15: dffffc0000000000 [ 28.846640] FS: 0000555556a3d300(0000) GS:ffff8880ba500000(0000) knlGS:0000000000000000 [ 28.854841] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 28.860699] CR2: 0000000000000120 CR3: 000000009f2cc000 CR4: 00000000003406e0 [ 28.867944] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 28.875188] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 28.882436] Call Trace: [ 28.885008] blk_mq_update_nr_hw_queues+0x246/0x3e0 [ 28.890001] nbd_start_device+0x1d7/0xca0 [ 28.894124] nbd_ioctl+0x3a8/0xa80 [ 28.897636] ? get_pid_task+0x91/0x130 [ 28.901495] ? nbd_disconnect_and_put+0x140/0x140 [ 28.906311] ? lock_downgrade+0x740/0x740 [ 28.910433] ? nbd_disconnect_and_put+0x140/0x140 [ 28.915266] blkdev_ioctl+0x540/0x1830 [ 28.919133] ? proc_fail_nth_write+0x7b/0x180 [ 28.923614] ? blkpg_ioctl+0x8d0/0x8d0 [ 28.927484] ? fsnotify+0x974/0x11b0 [ 28.931171] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 28.936075] ? debug_check_no_obj_freed+0x2c0/0x680 [ 28.941067] block_ioctl+0xd9/0x120 [ 28.944683] ? blkdev_fallocate+0x3a0/0x3a0 [ 28.948980] do_vfs_ioctl+0x75a/0xff0 [ 28.952755] ? ioctl_preallocate+0x1a0/0x1a0 [ 28.957139] ? vfs_write+0x319/0x4d0 [ 28.960827] ? SyS_write+0x14d/0x210 [ 28.964515] ? security_file_ioctl+0x83/0xb0 [ 28.968896] SyS_ioctl+0x7f/0xb0 [ 28.972236] ? do_vfs_ioctl+0xff0/0xff0 [ 28.976184] do_syscall_64+0x1d5/0x640 [ 28.980048] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 28.985217] RIP: 0033:0x7f9db96e5dc9 [ 28.988901] RSP: 002b:00007ffc8af0bdf8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 28.996581] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f9db96e5dc9 [ 29.003829] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000007 [ 29.011075] RBP: 00007ffc8af0be00 R08: 0000000000000002 R09: 00007f9db9003331 [ 29.018324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 29.025567] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 29.032831] Code: 4d 8d 34 c8 4c 89 f1 48 c1 e9 03 42 80 3c 39 00 0f 85 37 05 00 00 83 fd 07 4d 8b 36 0f 87 42 04 00 00 48 89 04 24 e8 cd 5d 4a fe 4d 0f ab a6 20 01 00 00 49 8d be 78 01 00 00 48 8b 04 24 48 [ 29.052072] RIP: blk_mq_map_swqueue+0x253/0x990 RSP: ffff8880b3627a80 [ 29.058623] CR2: 0000000000000120 [ 29.062054] ---[ end trace 3603c3e44a2e4b4e ]--- [ 29.066831] Kernel panic - not syncing: Fatal exception [ 29.072352] Kernel Offset: disabled [ 29.075955] Rebooting in 86400 seconds..