[ 29.180170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.187063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.195189] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 29.205460] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.212233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.324488] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 29.762170] can: request_module (can-proto-0) failed. [ 29.771045] can: request_module (can-proto-0) failed. [ 29.780557] can: request_module (can-proto-0) failed. [ 39.518306] unregister_netdevice: waiting for ip6gre0 to become free. Usage count = -1 Warning: Permanently added '10.128.10.0' (ECDSA) to the list of known hosts. [ 47.626666] FAULT_INJECTION: forcing a failure. [ 47.626666] name failslab, interval 1, probability 0, space 0, times 1 [ 47.637955] CPU: 0 PID: 8293 Comm: syz-executor395 Not tainted 4.14.272-syzkaller #0 [ 47.645819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 47.655247] Call Trace: [ 47.657810] dump_stack+0x14b/0x1e7 [ 47.661429] should_fail.cold.2+0x105/0x144 [ 47.665910] should_failslab+0xba/0xf0 [ 47.669771] kmem_cache_alloc_node_trace+0x25b/0x3f0 [ 47.674854] sbitmap_queue_init_node+0x22d/0x540 [ 47.679617] ? rcu_read_lock_sched_held+0x108/0x120 [ 47.684612] blk_mq_init_tags+0x146/0x280 [ 47.688815] blk_mq_alloc_rq_map+0x82/0x1e0 [ 47.693111] blk_mq_sched_alloc_tags.isra.3+0x76/0x150 [ 47.698365] blk_mq_sched_init_hctx+0x8b/0x190 [ 47.702933] blk_mq_realloc_hw_ctxs+0x667/0xe90 [ 47.707574] ? blk_mq_map_queues+0x90/0x2f0 [ 47.711867] ? wait_woken+0x2a0/0x2a0 [ 47.715643] blk_mq_update_nr_hw_queues+0x1ca/0x390 [ 47.720634] nbd_start_device+0x1b6/0xc50 [ 47.724759] ? security_capable+0x6f/0xa0 [ 47.728898] nbd_ioctl+0x1ae/0xad0 [ 47.732499] ? get_pid_task+0x6e/0x100 [ 47.737488] ? nbd_release+0x140/0x140 [ 47.741350] ? get_pid_task+0x8b/0x100 [ 47.745211] blkdev_ioctl+0x7c0/0x1760 [ 47.749085] ? blkpg_ioctl+0x8c0/0x8c0 [ 47.752969] ? lock_downgrade+0x7f0/0x7f0 [ 47.757090] ? __vfs_write+0xdb/0x840 [ 47.760868] ? debug_check_no_obj_freed+0x2d5/0x890 [ 47.765882] block_ioctl+0xd7/0x130 [ 47.769482] do_vfs_ioctl+0x180/0xfb0 [ 47.773256] ? ioctl_preallocate+0x1a0/0x1a0 [ 47.777636] ? __sb_end_write+0xa4/0xd0 [ 47.781592] ? vfs_write+0x30b/0x4f0 [ 47.785281] ? SyS_write+0x100/0x250 [ 47.788969] ? SyS_read+0x250/0x250 [ 47.792573] SyS_ioctl+0x74/0x80 [ 47.795915] ? do_vfs_ioctl+0xfb0/0xfb0 [ 47.799876] do_syscall_64+0x1c7/0x5b0 [ 47.803752] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 47.808581] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 47.813741] RIP: 0033:0x7f8704f8adc9 [ 47.817438] RSP: 002b:00007ffcb7ec46e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 47.825117] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f8704f8adc9 [ 47.832362] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000007 [ 47.839605] RBP: 00007ffcb7ec46f0 R08: 0000000000000002 R09: 00007f8704003631 [ 47.846865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 47.854120] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 47.863888] BUG: unable to handle kernel NULL pointer dereference at 0000000000000120 [ 47.871869] IP: blk_mq_map_swqueue+0x23a/0xa60 [ 47.876435] PGD aa978067 P4D aa978067 PUD aa979067 PMD 0 [ 47.881949] Oops: 0002 [#1] PREEMPT SMP KASAN [ 47.886500] Modules linked in: [ 47.889678] CPU: 1 PID: 8293 Comm: syz-executor395 Not tainted 4.14.272-syzkaller #0 [ 47.897538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 47.906951] task: ffff8880ab38c440 task.stack: ffff8880aac30000 [ 47.913005] RIP: 0010:blk_mq_map_swqueue+0x23a/0xa60 [ 47.918085] RSP: 0018:ffff8880aac379e0 EFLAGS: 00010297 [ 47.923523] RAX: ffff8880ae92eb88 RBX: 0000000000000007 RCX: ffffe8ffffd35240 [ 47.930856] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 47.938190] RBP: ffff8880aac37a58 R08: 0000000000000001 R09: 0000000000000001 [ 47.945436] R10: ffff8880ae92eb80 R11: ffff8880ae92ec40 R12: ffff8880ae95c780 [ 47.953009] R13: fffffbfff14122ee R14: ffff8880ae9c50b0 R15: dffffc0000000000 [ 47.960349] FS: 00005555574d1300(0000) GS:ffff8880ba700000(0000) knlGS:0000000000000000 [ 47.968552] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 47.974410] CR2: 0000000000000120 CR3: 00000000ab3ff000 CR4: 00000000003406e0 [ 47.981939] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 47.989655] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 47.996898] Call Trace: [ 47.999474] blk_mq_update_nr_hw_queues+0x219/0x390 [ 48.004925] nbd_start_device+0x1b6/0xc50 [ 48.009136] ? security_capable+0x6f/0xa0 [ 48.013266] nbd_ioctl+0x1ae/0xad0 [ 48.016787] ? get_pid_task+0x6e/0x100 [ 48.020659] ? nbd_release+0x140/0x140 [ 48.024532] ? get_pid_task+0x8b/0x100 [ 48.028405] blkdev_ioctl+0x7c0/0x1760 [ 48.032275] ? blkpg_ioctl+0x8c0/0x8c0 [ 48.036136] ? lock_downgrade+0x7f0/0x7f0 [ 48.040271] ? __vfs_write+0xdb/0x840 [ 48.044050] ? debug_check_no_obj_freed+0x2d5/0x890 [ 48.049043] block_ioctl+0xd7/0x130 [ 48.052646] do_vfs_ioctl+0x180/0xfb0 [ 48.056419] ? ioctl_preallocate+0x1a0/0x1a0 [ 48.060825] ? __sb_end_write+0xa4/0xd0 [ 48.064800] ? vfs_write+0x30b/0x4f0 [ 48.068503] ? SyS_write+0x100/0x250 [ 48.072238] ? SyS_read+0x250/0x250 [ 48.075960] SyS_ioctl+0x74/0x80 [ 48.079879] ? do_vfs_ioctl+0xfb0/0xfb0 [ 48.083841] do_syscall_64+0x1c7/0x5b0 [ 48.087716] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 48.092535] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 48.097705] RIP: 0033:0x7f8704f8adc9 [ 48.101408] RSP: 002b:00007ffcb7ec46e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 48.109177] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f8704f8adc9 [ 48.116431] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000007 [ 48.123686] RBP: 00007ffcb7ec46f0 R08: 0000000000000002 R09: 00007f8704003631 [ 48.130947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 48.138189] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 48.145435] Code: 0f 85 11 05 00 00 8b 00 49 8d 04 c2 48 89 c6 48 c1 ee 03 42 80 3c 3e 00 0f 85 cc 04 00 00 41 83 f8 07 48 8b 30 0f 87 f3 03 00 00 4c 0f ab 8e 20 01 00 00 48 8d be 78 01 00 00 48 89 f8 48 c1 [ 48.164561] RIP: blk_mq_map_swqueue+0x23a/0xa60 RSP: ffff8880aac379e0 [ 48.171109] CR2: 0000000000000120 [ 48.174539] ---[ end trace c573571a7a36e87e ]--- [ 48.182043] Kernel panic - not syncing: Fatal exception [ 48.187637] Kernel Offset: disabled [ 48.191254] Rebooting in 86400 seconds..