fail_dump lib/fault-inject.c:51 [inline] should_fail.cold+0x10a/0x149 lib/fault-inject.c:149 ODEBUG: assert_init not available (active state 0) object type: timer_list hint: (null) should_failslab+0xd6/0x130 mm/failslab.c:32 ------------[ cut here ]------------ slab_pre_alloc_hook mm/slab.h:421 [inline] slab_alloc mm/slab.c:3376 [inline] kmem_cache_alloc_trace+0x29a/0x3d0 mm/slab.c:3616 WARNING: CPU: 1 PID: 17959 at lib/debugobjects.c:287 debug_print_object.cold+0xa7/0xdb lib/debugobjects.c:287 kmalloc include/linux/slab.h:488 [inline] kzalloc include/linux/slab.h:661 [inline] binder_get_thread drivers/android/binder.c:4246 [inline] binder_get_thread+0x1a9/0x830 drivers/android/binder.c:4237 Kernel panic - not syncing: panic_on_warn set ... binder_poll+0x47/0x420 drivers/android/binder.c:4369 do_select+0xa83/0x1290 fs/select.c:513 core_sys_select+0x32f/0x6a0 fs/select.c:656 do_pselect fs/select.c:733 [inline] SYSC_pselect6 fs/select.c:774 [inline] SyS_pselect6+0x358/0x3c0 fs/select.c:759 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x465f69 RSP: 002b:00007ff847caf188 EFLAGS: 00000246 ORIG_RAX: 000000000000010e RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000040 RBP: 00007ff847caf1d0 R08: 0000000020000200 R09: 0000000000000000 R10: 0000000020000140 R11: 0000000000000246 R12: 0000000000000001 R13: 00007ffe182818df R14: 00007ff847caf300 R15: 0000000000022000 CPU: 1 PID: 17959 Comm: syz-executor.0 Not tainted 4.14.225-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x281 lib/dump_stack.c:58 panic+0x1f9/0x42d kernel/panic.c:183 __warn.cold+0x20/0x44 kernel/panic.c:547 report_bug+0x208/0x250 lib/bug.c:186 fixup_bug arch/x86/kernel/traps.c:177 [inline] fixup_bug arch/x86/kernel/traps.c:172 [inline] do_error_trap+0x195/0x2d0 arch/x86/kernel/traps.c:295 invalid_op+0x1b/0x40 arch/x86/entry/entry_64.S:964 RIP: 0010:debug_print_object.cold+0xa7/0xdb lib/debugobjects.c:287 RSP: 0018:ffff888054a26d48 EFLAGS: 00010086 RAX: 0000000000000061 RBX: 0000000000000005 RCX: 0000000000000000 RDX: 0000000000040000 RSI: ffffffff81441890 RDI: ffffed100a944d9f RBP: ffffffff878b6e40 R08: 0000000000000061 R09: 0000000000000001 R10: 0000000000000000 R11: ffff8880543fa580 R12: 0000000000000000 R13: 0000000000000000 R14: ffff8880b4b765f8 R15: 1ffff1100a944db2 debug_object_assert_init lib/debugobjects.c:656 [inline] debug_object_assert_init+0x1d3/0x2d0 lib/debugobjects.c:627 debug_timer_assert_init kernel/time/timer.c:708 [inline] debug_assert_init kernel/time/timer.c:756 [inline] del_timer+0x5d/0xe0 kernel/time/timer.c:1151 try_to_grab_pending+0x243/0x610 kernel/workqueue.c:1225 __cancel_work_timer+0x90/0x460 kernel/workqueue.c:2923 slave_kobj_release+0x48/0xd0 drivers/net/bonding/bond_main.c:1261 kobject_cleanup lib/kobject.c:646 [inline] kobject_release lib/kobject.c:675 [inline] kref_put include/linux/kref.h:70 [inline] kobject_put+0x251/0x550 lib/kobject.c:692 bond_alloc_slave drivers/net/bonding/bond_main.c:1306 [inline] bond_enslave+0xd2b/0x4cc0 drivers/net/bonding/bond_main.c:1494 do_set_master+0x19e/0x200 net/core/rtnetlink.c:1961 do_setlink+0x8b8/0x2bf0 net/core/rtnetlink.c:2098 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 rtnl_newlink+0x1267/0x1830 net/core/rtnetlink.c:2660 rtnetlink_rcv_msg+0x3be/0xb10 net/core/rtnetlink.c:4316 netlink_rcv_skb+0x125/0x390 net/netlink/af_netlink.c:2433 netlink_unicast_kernel net/netlink/af_netlink.c:1287 [inline] netlink_unicast+0x437/0x610 net/netlink/af_netlink.c:1313 netlink_sendmsg+0x62e/0xb80 net/netlink/af_netlink.c:1878 sock_sendmsg_nosec net/socket.c:646 [inline] sock_sendmsg+0xb5/0x100 net/socket.c:656 ___sys_sendmsg+0x6c8/0x800 net/socket.c:2062 __sys_sendmsg+0xa3/0x120 net/socket.c:2096 SYSC_sendmsg net/socket.c:2107 [inline] SyS_sendmsg+0x27/0x40 net/socket.c:2103 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x465f69 RSP: 002b:00007fc862f12188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 RBP: 00007fc862f121d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007ffef4193aff R14: 00007fc862f12300 R15: 0000000000022000 CPU: 0 PID: 18005 Comm: syz-executor.5 Not tainted 4.14.225-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x281 lib/dump_stack.c:58 fail_dump lib/fault-inject.c:51 [inline] should_fail.cold+0x10a/0x149 lib/fault-inject.c:149 should_failslab+0xd6/0x130 mm/failslab.c:32 slab_pre_alloc_hook mm/slab.h:421 [inline] slab_alloc mm/slab.c:3376 [inline] kmem_cache_alloc_trace+0x29a/0x3d0 mm/slab.c:3616 kmalloc include/linux/slab.h:488 [inline] kzalloc include/linux/slab.h:661 [inline] snd_pcm_oss_change_params_locked+0x15c/0x3530 sound/core/oss/pcm_oss.c:866 snd_pcm_oss_change_params sound/core/oss/pcm_oss.c:1108 [inline] snd_pcm_oss_make_ready+0xbb/0x170 sound/core/oss/pcm_oss.c:1167 snd_pcm_oss_set_trigger.isra.0+0x2bd/0x630 sound/core/oss/pcm_oss.c:2071 snd_pcm_oss_poll+0x3cc/0xa10 sound/core/oss/pcm_oss.c:2852 do_select+0xa83/0x1290 fs/select.c:513 core_sys_select+0x32f/0x6a0 fs/select.c:656 do_pselect fs/select.c:733 [inline] SYSC_pselect6 fs/select.c:774 [inline] SyS_pselect6+0x358/0x3c0 fs/select.c:759 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x465f69 RSP: 002b:00007ff847caf188 EFLAGS: 00000246 ORIG_RAX: 000000000000010e RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000040 RBP: 00007ff847caf1d0 R08: 0000000020000200 R09: 0000000000000000 R10: 0000000020000140 R11: 0000000000000246 R12: 0000000000000001 R13: 00007ffe182818df R14: 00007ff847caf300 R15: 0000000000022000 Kernel Offset: disabled Rebooting in 86400 seconds..