[ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Started OpenBSD Secure Shell server. [ OK ] Listening on Load/Save RF Kill Switch Status /dev/rfkill Watch. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.195' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 27.950778] FAULT_INJECTION: forcing a failure. [ 27.950778] name failslab, interval 1, probability 0, space 0, times 1 [ 27.962063] CPU: 0 PID: 7963 Comm: syz-executor271 Not tainted 4.14.295-syzkaller #0 [ 27.969928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 27.979259] Call Trace: [ 27.981927] dump_stack+0x1b2/0x281 [ 27.985539] should_fail.cold+0x10a/0x149 [ 27.989670] should_failslab+0xd6/0x130 [ 27.993628] kmem_cache_alloc_node_trace+0x25a/0x400 [ 27.998722] __kmalloc_node+0x38/0x70 [ 28.002520] blk_mq_alloc_rq_map+0xd2/0x220 [ 28.006822] blk_mq_sched_alloc_tags+0xaa/0x240 [ 28.011469] blk_mq_sched_init_hctx+0x5e/0x200 [ 28.016030] blk_mq_realloc_hw_ctxs+0x64e/0xe00 [ 28.020687] ? blk_mq_update_queue_map+0x158/0x1f0 [ 28.025707] blk_mq_update_nr_hw_queues+0x1f3/0x3e0 [ 28.030841] nbd_start_device+0x1d7/0xca0 [ 28.034969] nbd_ioctl+0x3c4/0xac0 [ 28.038485] ? get_pid_task+0x91/0x130 [ 28.042352] ? nbd_disconnect_and_put+0x140/0x140 [ 28.047179] ? lock_downgrade+0x740/0x740 [ 28.051305] ? nbd_disconnect_and_put+0x140/0x140 [ 28.056135] blkdev_ioctl+0x540/0x1830 [ 28.059999] ? proc_fail_nth_write+0x7b/0x180 [ 28.064486] ? blkpg_ioctl+0x8d0/0x8d0 [ 28.068391] ? fsnotify+0x974/0x11b0 [ 28.072078] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 28.076994] ? debug_check_no_obj_freed+0x2c0/0x680 [ 28.082005] block_ioctl+0xd9/0x120 [ 28.085613] ? blkdev_fallocate+0x3a0/0x3a0 [ 28.089911] do_vfs_ioctl+0x75a/0xff0 [ 28.093691] ? ioctl_preallocate+0x1a0/0x1a0 [ 28.098075] ? vfs_write+0x319/0x4d0 [ 28.101762] ? SyS_write+0x14d/0x210 [ 28.105475] ? security_file_ioctl+0x83/0xb0 [ 28.109859] SyS_ioctl+0x7f/0xb0 [ 28.113199] ? do_vfs_ioctl+0xff0/0xff0 [ 28.117147] do_syscall_64+0x1d5/0x640 [ 28.121012] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 28.126175] RIP: 0033:0x7f7d9848ad29 [ 28.129870] RSP: 002b:00007ffee56cac18 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 28.137550] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f7d9848ad29 [ 28.144882] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 28.152127] RBP: 00007ffee56cac20 R08: 0000000000000002 R09: 00007f7d98003631 [ 28.159371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 28.166613] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 28.177236] BUG: unable to handle kernel NULL pointer dereference at 0000000000000120 [ 28.185217] IP: blk_mq_map_swqueue+0x253/0x990 [ 28.189780] PGD a3115067 P4D a3115067 PUD b3825067 PMD 0 [ 28.195294] Oops: 0002 [#1] PREEMPT SMP KASAN [ 28.199761] Modules linked in: [ 28.202928] CPU: 0 PID: 7963 Comm: syz-executor271 Not tainted 4.14.295-syzkaller #0 [ 28.210782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 28.220208] task: ffff8880982a6180 task.stack: ffff8880919d0000 [ 28.226253] RIP: 0010:blk_mq_map_swqueue+0x253/0x990 [ 28.231325] RSP: 0018:ffff8880919d7a80 EFLAGS: 00010297 [ 28.236659] RAX: ffff8880982a6180 RBX: ffff8880ae93b0b0 RCX: 1ffff11015d0a3d1 [ 28.243903] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff88cc8d68 [ 28.251142] RBP: 0000000000000001 R08: ffff8880ae851e80 R09: 0000000000000000 [ 28.258383] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001 [ 28.265624] R13: ffff8882386df840 R14: 0000000000000000 R15: dffffc0000000000 [ 28.272865] FS: 0000555555e07300(0000) GS:ffff8880ba400000(0000) knlGS:0000000000000000 [ 28.281066] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 28.286919] CR2: 0000000000000120 CR3: 00000000ab3ae000 CR4: 00000000003406f0 [ 28.294162] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 28.301405] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 28.308646] Call Trace: [ 28.311218] blk_mq_update_nr_hw_queues+0x246/0x3e0 [ 28.316295] nbd_start_device+0x1d7/0xca0 [ 28.320428] nbd_ioctl+0x3c4/0xac0 [ 28.323950] ? get_pid_task+0x91/0x130 [ 28.327827] ? nbd_disconnect_and_put+0x140/0x140 [ 28.332652] ? lock_downgrade+0x740/0x740 [ 28.336780] ? nbd_disconnect_and_put+0x140/0x140 [ 28.341597] blkdev_ioctl+0x540/0x1830 [ 28.345460] ? proc_fail_nth_write+0x7b/0x180 [ 28.349929] ? blkpg_ioctl+0x8d0/0x8d0 [ 28.353788] ? fsnotify+0x974/0x11b0 [ 28.357475] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 28.362378] ? debug_check_no_obj_freed+0x2c0/0x680 [ 28.367377] block_ioctl+0xd9/0x120 [ 28.370975] ? blkdev_fallocate+0x3a0/0x3a0 [ 28.375275] do_vfs_ioctl+0x75a/0xff0 [ 28.379057] ? ioctl_preallocate+0x1a0/0x1a0 [ 28.383555] ? vfs_write+0x319/0x4d0 [ 28.387248] ? SyS_write+0x14d/0x210 [ 28.390942] ? security_file_ioctl+0x83/0xb0 [ 28.395333] SyS_ioctl+0x7f/0xb0 [ 28.398677] ? do_vfs_ioctl+0xff0/0xff0 [ 28.402624] do_syscall_64+0x1d5/0x640 [ 28.406492] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 28.411654] RIP: 0033:0x7f7d9848ad29 [ 28.415347] RSP: 002b:00007ffee56cac18 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 28.423026] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f7d9848ad29 [ 28.430269] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 28.437524] RBP: 00007ffee56cac20 R08: 0000000000000002 R09: 00007f7d98003631 [ 28.444854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 28.452101] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 28.459352] Code: 4d 8d 34 c8 4c 89 f1 48 c1 e9 03 42 80 3c 39 00 0f 85 37 05 00 00 83 fd 07 4d 8b 36 0f 87 42 04 00 00 48 89 04 24 e8 ad 04 4a fe 4d 0f ab a6 20 01 00 00 49 8d be 78 01 00 00 48 8b 04 24 48 [ 28.478502] RIP: blk_mq_map_swqueue+0x253/0x990 RSP: ffff8880919d7a80 [ 28.485051] CR2: 0000000000000120 [ 28.488479] ---[ end trace 37b25f9166bd04db ]--- [ 28.493205] Kernel panic - not syncing: Fatal exception [ 28.498725] Kernel Offset: disabled [ 28.502357] Rebooting in 86400 seconds..