Debian GNU/Linux 7 syzkaller ttyS0 executing program syzkaller login: [ 15.021315] FAULT_INJECTION: forcing a failure. [ 15.021315] name failslab, interval 1, probability 0, space 0, times 1 [ 15.022924] CPU: 0 PID: 2979 Comm: syzkaller521009 Not tainted 4.14.0-rc7-next-20171103+ #10 [ 15.024432] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS Bochs 01/01/2011 [ 15.025535] Call Trace: [ 15.025895] dump_stack+0x194/0x257 [ 15.026390] ? arch_local_irq_restore+0x53/0x53 [ 15.027055] should_fail+0x8c0/0xa40 [ 15.027557] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 15.028191] ? find_held_lock+0x39/0x1d0 [ 15.028704] ? lock_downgrade+0x990/0x990 [ 15.029235] ? lock_acquire+0x1d5/0x580 [ 15.029765] ? trace_event_raw_event_sched_switch+0x8a0/0x8a0 [ 15.030544] ? rcu_note_context_switch+0x710/0x710 [ 15.031207] ? kvm_clock_get_cycles+0x25/0x30 [ 15.031827] should_failslab+0xec/0x120 [ 15.032335] kmem_cache_alloc_trace+0x4b/0x750 [ 15.032941] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 15.033643] ? __lockdep_init_map+0xe4/0x650 [ 15.034243] ? __lockdep_init_map+0xe4/0x650 [ 15.034866] lockdep_init_task+0x187/0x210 [ 15.035450] copy_process.part.37+0x16f8/0x4b30 [ 15.036089] ? __cleanup_sighand+0x40/0x40 [ 15.036657] ? perf_trace_buf_update+0x66/0xb0 [ 15.037264] ? perf_tp_event+0x7f4/0xae0 [ 15.037828] ? find_get_context.isra.84+0x670/0x670 [ 15.038518] ? perf_trace_run_bpf_submit+0x206/0x330 [ 15.039275] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 15.039954] ? trace_event_raw_event_lock+0x340/0x340 [ 15.040648] ? __lock_acquire+0x739/0x4770 [ 15.041246] ? memset+0x31/0x40 [ 15.041709] ? perf_trace_run_bpf_submit+0x206/0x330 [ 15.042415] ? perf_trace_run_bpf_submit+0x20d/0x330 [ 15.043074] ? trace_event_raw_event_lock+0x340/0x340 [ 15.043784] ? memset+0x31/0x40 [ 15.044275] ? trace_event_raw_event_lock+0x340/0x340 [ 15.044979] ? check_noncircular+0x20/0x20 [ 15.045870] ? perf_trace_run_bpf_submit+0x206/0x330 [ 15.046567] ? lock_downgrade+0x990/0x990 [ 15.047121] ? perf_trace_run_bpf_submit+0x206/0x330 [ 15.047747] ? perf_trace_run_bpf_submit+0x20d/0x330 [ 15.048370] ? perf_tp_event+0xae0/0xae0 [ 15.048866] ? find_held_lock+0x39/0x1d0 [ 15.049503] ? memset+0x31/0x40 [ 15.049977] ? perf_trace_lock+0x4d6/0x900 [ 15.050557] ? __lock_is_held+0xbc/0x140 [ 15.051146] _do_fork+0x1ef/0xfe0 [ 15.051620] ? pid_task+0xf7/0x1a0 [ 15.052120] ? fork_idle+0x2d0/0x2d0 [ 15.052628] ? putname+0xee/0x130 [ 15.053126] ? get_pid_task+0xbc/0x140 [ 15.053665] ? proc_fail_nth_write+0xb5/0x260 [ 15.054287] ? find_held_lock+0x39/0x1d0 [ 15.054873] ? lock_downgrade+0x990/0x990 [ 15.055451] ? map_files_get_link+0x3a0/0x3a0 [ 15.056058] ? __vfs_write+0xf7/0x970 [ 15.056582] ? lock_acquire+0x1d5/0x580 [ 15.057141] ? vfs_write+0x410/0x510 [ 15.057648] ? kernel_read+0x120/0x120 [ 15.058217] SyS_clone+0x37/0x50 [ 15.058666] ? ptregs_sys_rt_sigreturn+0x10/0x10 [ 15.059313] do_syscall_64+0x26c/0x8d0 [ 15.059842] ? __sb_end_write+0x9e/0xd0 [ 15.060385] ? syscall_return_slowpath+0x510/0x510 [ 15.061062] ? SyS_write+0x184/0x220 [ 15.061565] ? entry_SYSCALL_64_fastpath+0x5/0xbe [ 15.062230] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 15.062884] ? sys_vfork+0x30/0x30 [ 15.063376] entry_SYSCALL64_slow_path+0x25/0x25 [ 15.064009] RIP: 0033:0x4358a9 [ 15.064440] RSP: 002b:00007fff53c078e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 15.065442] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000004358a9 [ 15.066978] RDX: 0000000020acc000 RSI: 0000000020218fa0 RDI: 0000000000000000 [ 15.068143] RBP: 0000000000000000 R08: 00000000201fa000 R09: 0000000000000000 [ 15.069253] R10: 000000002097b000 R11: 0000000000000246 R12: 0000000000000001 [ 15.070326] R13: 0000000000402260 R14: 00000000004022f0 R15: 0000000000000000 [ 15.072990] kasan: CONFIG_KASAN_INLINE enabled [ 15.073637] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 15.074509] general protection fault: 0000 [#1] SMP KASAN [ 15.075180] Dumping ftrace buffer: [ 15.075634] (ftrace buffer empty) [ 15.076069] Modules linked in: [ 15.076447] CPU: 3 PID: 2982 Comm: syzkaller521009 Not tainted 4.14.0-rc7-next-20171103+ #10 [ 15.077665] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS Bochs 01/01/2011 [ 15.078678] task: ffff88003d6b25c0 task.stack: ffff88003abd0000 [ 15.079527] RIP: 0010:lockdep_invariant_state+0xd6/0x120 [ 15.080312] RSP: 0018:ffff88003abd7e38 EFLAGS: 00010002 [ 15.081053] RAX: dffffc0000000000 RBX: 0000000000001d88 RCX: ffffffff81008d3f [ 15.082016] RDX: 00000000000003bc RSI: 0000000000000000 RDI: 0000000000001de0 [ 15.082978] RBP: ffff88003abd7e48 R08: ffffffff85f3b680 R09: 0000000000000000 [ 15.083939] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 15.084900] R13: ffff88003abd7ee0 R14: ffff88003d6b25c0 R15: ffffffff85ecb390 [ 15.085949] FS: 0000000002024880(0000) GS:ffff88006df00000(0000) knlGS:0000000000000000 [ 15.087298] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 15.088035] CR2: 00005585762cd008 CR3: 000000003a704000 CR4: 00000000000006e0 [ 15.088940] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 15.089889] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 15.090756] Call Trace: [ 15.091067] lockdep_sys_exit+0x47/0xf0 [ 15.091552] syscall_return_slowpath+0x244/0x510 [ 15.092179] ? finish_task_switch+0x1f6/0x740 [ 15.092711] ? prepare_exit_to_usermode+0x2d0/0x2d0 [ 15.093309] ? preempt_notifier_dec+0x20/0x20 [ 15.093900] ret_from_fork+0x15/0x40 [ 15.094336] RIP: 0033:0x4358a9 [ 15.094712] RSP: 002b:0000000020218fa0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 15.095670] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 00000000004358a9 [ 15.096561] RDX: 0000000020acc000 RSI: 0000000020218fa0 RDI: 0000000000000000 [ 15.097522] RBP: 0000000000000000 R08: 00000000201fa000 R09: 0000000000000000 [ 15.098257] R10: 000000002097b000 R11: 0000000000000246 R12: 0000000000000001 [ 15.098966] R13: 0000000000402260 R14: 00000000004022f0 R15: 0000000000000000 [ 15.099751] Code: 83 90 11 00 00 83 e0 3f 48 89 c2 48 c1 e2 04 48 29 c2 48 b8 00 00 00 00 00 fc ff df 49 8d 1c d4 48 8d 7b 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 75 2f 48 c7 43 58 00 00 00 00 5b 41 5c 5d c3 0f ff [ 15.101888] RIP: lockdep_invariant_state+0xd6/0x120 RSP: ffff88003abd7e38 [ 15.102611] ---[ end trace b75e41873a1a07c3 ]--- [ 15.103107] Kernel panic - not syncing: Fatal exception [ 15.103713] Dumping ftrace buffer: [ 15.104087] (ftrace buffer empty) [ 15.104465] Kernel Offset: disabled [ 15.104845] Rebooting in 86400 seconds..