./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1912024754 <...> Warning: Permanently added '10.128.0.8' (ED25519) to the list of known hosts. execve("./syz-executor1912024754", ["./syz-executor1912024754"], 0x7ffdcf924550 /* 10 vars */) = 0 brk(NULL) = 0x5555569f8000 brk(0x5555569f8d00) = 0x5555569f8d00 arch_prctl(ARCH_SET_FS, 0x5555569f8380) = 0 set_tid_address(0x5555569f8650) = 5032 set_robust_list(0x5555569f8660, 24) = 0 rseq(0x5555569f8ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1912024754", 4096) = 28 getrandom("\x04\x16\x72\x31\x76\x9c\x31\x5a", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x5555569f8d00 brk(0x555556a19d00) = 0x555556a19d00 brk(0x555556a1a000) = 0x555556a1a000 mprotect(0x7f1347a00000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/sys/kernel/debug/failslab/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_futex/ignore-private", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-highmem", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/min-order", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5033 attached [pid 5033] set_robust_list(0x5555569f8660, 24 [pid 5032] <... clone resumed>, child_tidptr=0x5555569f8650) = 5033 [pid 5033] <... set_robust_list resumed>) = 0 [pid 5033] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5033] setpgid(0, 0) = 0 [pid 5033] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5033] write(3, "1000", 4) = 4 [pid 5033] close(3) = 0 [pid 5033] openat(AT_FDCWD, "/dev/ptmx", O_RDONLY) = 3 [pid 5033] ioctl(3, TIOCSETD, [15]) = 0 [pid 5033] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 5033] write(4, "20", 2) = 2 [ 54.079745][ T5033] FAULT_INJECTION: forcing a failure. [ 54.079745][ T5033] name failslab, interval 1, probability 0, space 0, times 1 [ 54.092484][ T5033] CPU: 0 PID: 5033 Comm: syz-executor191 Not tainted 6.5.0-syzkaller-11075-g92901222f83d #0 [ 54.102639][ T5033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 54.112676][ T5033] Call Trace: [ 54.115945][ T5033] [ 54.118875][ T5033] dump_stack_lvl+0x125/0x1b0 [ 54.123672][ T5033] should_fail_ex+0x496/0x5b0 [ 54.128370][ T5033] should_failslab+0x9/0x20 [ 54.132861][ T5033] kmem_cache_alloc_node+0x389/0x3f0 [ 54.138251][ T5033] ? alloc_unbound_pwq+0x41e/0xd00 [ 54.143360][ T5033] alloc_unbound_pwq+0x41e/0xd00 [ 54.148307][ T5033] ? kasan_set_track+0x25/0x30 [ 54.153115][ T5033] apply_wqattrs_prepare+0x3be/0xa90 [ 54.158407][ T5033] apply_workqueue_attrs_locked+0xcb/0x150 [ 54.164248][ T5033] alloc_workqueue+0xc8b/0x1490 [ 54.169110][ T5033] ? workqueue_sysfs_register+0x400/0x400 [ 54.174834][ T5033] hci_register_dev+0x212/0xbc0 [ 54.179671][ T5033] hci_uart_tty_ioctl+0x83e/0xc70 [ 54.184685][ T5033] ? hci_uart_init_work+0x170/0x170 [ 54.189869][ T5033] tty_ioctl+0x6fd/0x1580 [ 54.194224][ T5033] ? send_break+0x3e0/0x3e0 [ 54.198761][ T5033] ? rcu_is_watching+0x12/0xb0 [ 54.203509][ T5033] ? lock_release+0x4bf/0x680 [ 54.208181][ T5033] ? bpf_lsm_file_ioctl+0x9/0x10 [ 54.213108][ T5033] ? send_break+0x3e0/0x3e0 [ 54.217595][ T5033] __x64_sys_ioctl+0x18f/0x210 [ 54.222346][ T5033] do_syscall_64+0x38/0xb0 [ 54.226756][ T5033] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 54.232639][ T5033] RIP: 0033:0x7f134798cd39 [ 54.237050][ T5033] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 54.256652][ T5033] RSP: 002b:00007ffcb6e97418 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 54.265073][ T5033] RAX: ffffffffffffffda RBX: 00007ffcb6e97430 RCX: 00007f134798cd39 [pid 5033] ioctl(3, _IOC(_IOC_WRITE, 0x55, 0xc8, 0x4), 0) = -1 ENODEV (No such device) [pid 5033] exit_group(0) = ? [pid 5033] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5033, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5034 attached [pid 5034] set_robust_list(0x5555569f8660, 24) = 0 [pid 5034] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5032] <... clone resumed>, child_tidptr=0x5555569f8650) = 5034 [pid 5034] <... prctl resumed>) = 0 [pid 5034] setpgid(0, 0) = 0 [pid 5034] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5034] write(3, "1000", 4) = 4 [pid 5034] close(3) = 0 [pid 5034] openat(AT_FDCWD, "/dev/ptmx", O_RDONLY) = 3 [pid 5034] ioctl(3, TIOCSETD, [15]) = 0 [pid 5034] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 5034] write(4, "20", 2) = 2 [ 54.273024][ T5033] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 54.280986][ T5033] RBP: 0000000000000002 R08: 00007ffcb6e971b6 R09: 00000000000000a0 [ 54.289054][ T5033] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 54.297006][ T5033] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 54.304967][ T5033] [ 54.308687][ T5033] Bluetooth: Can't register HCI device [ 54.326550][ T5034] FAULT_INJECTION: forcing a failure. [ 54.326550][ T5034] name failslab, interval 1, probability 0, space 0, times 0 [ 54.339283][ T5034] CPU: 0 PID: 5034 Comm: syz-executor191 Not tainted 6.5.0-syzkaller-11075-g92901222f83d #0 [ 54.349386][ T5034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 54.359422][ T5034] Call Trace: [ 54.362688][ T5034] [ 54.365630][ T5034] dump_stack_lvl+0x125/0x1b0 [ 54.370299][ T5034] should_fail_ex+0x496/0x5b0 [ 54.374983][ T5034] should_failslab+0x9/0x20 [ 54.379506][ T5034] __kmem_cache_alloc_node+0x2fd/0x350 [ 54.385043][ T5034] ? kstrdup_const+0x5f/0x70 [ 54.389644][ T5034] ? kstrdup_const+0x5f/0x70 [ 54.394228][ T5034] __kmalloc_node_track_caller+0x50/0x100 [ 54.399932][ T5034] kstrdup+0x3c/0x70 [ 54.403820][ T5034] kstrdup_const+0x5f/0x70 [ 54.408251][ T5034] kvasprintf_const+0x10b/0x190 [ 54.413128][ T5034] kobject_set_name_vargs+0x5a/0x130 [ 54.418422][ T5034] dev_set_name+0xc8/0x100 [ 54.422873][ T5034] ? device_initialize+0x510/0x510 [ 54.427973][ T5034] ? up_write+0x1b3/0x510 [ 54.432290][ T5034] ? debugfs_create_dir+0x402/0x630 [ 54.437498][ T5034] hci_register_dev+0x2ea/0xbc0 [ 54.442374][ T5034] hci_uart_tty_ioctl+0x83e/0xc70 [ 54.447384][ T5034] ? hci_uart_init_work+0x170/0x170 [ 54.452574][ T5034] tty_ioctl+0x6fd/0x1580 [ 54.456885][ T5034] ? send_break+0x3e0/0x3e0 [ 54.461371][ T5034] ? rcu_is_watching+0x12/0xb0 [ 54.466117][ T5034] ? lock_release+0x4bf/0x680 [ 54.470800][ T5034] ? bpf_lsm_file_ioctl+0x9/0x10 [ 54.475774][ T5034] ? send_break+0x3e0/0x3e0 [ 54.480257][ T5034] __x64_sys_ioctl+0x18f/0x210 [ 54.485005][ T5034] do_syscall_64+0x38/0xb0 [ 54.489410][ T5034] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 54.495297][ T5034] RIP: 0033:0x7f134798cd39 [ 54.499697][ T5034] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 54.519388][ T5034] RSP: 002b:00007ffcb6e97418 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 54.527790][ T5034] RAX: ffffffffffffffda RBX: 00007ffcb6e97430 RCX: 00007f134798cd39 [ 54.535754][ T5034] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 54.543717][ T5034] RBP: 0000000000000002 R08: 00007ffcb6e971b6 R09: 00000000000000a0 [ 54.551676][ T5034] R10: 0000000000000002 R11: 0000000000000246 R12: 00007ffcb6e9742c [ 54.559725][ T5034] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 54.567717][ T5034] [ 54.571291][ T5034] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 54.583016][ T5034] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 54.591419][ T5034] CPU: 0 PID: 5034 Comm: syz-executor191 Not tainted 6.5.0-syzkaller-11075-g92901222f83d #0 [ 54.601460][ T5034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 54.611493][ T5034] RIP: 0010:strchr+0x1b/0xb0 [ 54.616162][ T5034] Code: 01 ae f7 48 8b 74 24 08 48 8b 14 24 eb 89 90 f3 0f 1e fa 48 b8 00 00 00 00 00 fc ff df 48 89 fa 55 48 c1 ea 03 53 48 83 ec 10 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 04 84 c0 75 51 0f b6 07 89 [ 54.635775][ T5034] RSP: 0018:ffffc9000440fa90 EFLAGS: 00010286 [ 54.641859][ T5034] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 54.649830][ T5034] RDX: 0000000000000000 RSI: 0000000000000025 RDI: 0000000000000000 [ 54.657787][ T5034] RBP: ffffc9000440fb20 R08: 0000000000000001 R09: 0000000000000000 [ 54.665756][ T5034] R10: 0000000000000001 R11: 0000000000000000 R12: ffffc9000440fb20 [ 54.673750][ T5034] R13: 0000000000000cc0 R14: ffff888020187f80 R15: 0000000000000001 [ 54.681706][ T5034] FS: 00005555569f8380(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 54.690621][ T5034] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 54.697187][ T5034] CR2: 00007f13479ea6a4 CR3: 0000000020b59000 CR4: 0000000000350ef0 [ 54.705501][ T5034] Call Trace: [ 54.708767][ T5034] [ 54.711691][ T5034] ? show_regs+0x8f/0xa0 [ 54.715961][ T5034] ? die_addr+0x4f/0xd0 [ 54.720105][ T5034] ? exc_general_protection+0x154/0x230 [ 54.725751][ T5034] ? asm_exc_general_protection+0x26/0x30 [ 54.731507][ T5034] ? strchr+0x1b/0xb0 [ 54.735482][ T5034] ? __mutex_unlock_slowpath+0x165/0x640 [ 54.741096][ T5034] kvasprintf_const+0x25/0x190 [ 54.745843][ T5034] kobject_set_name_vargs+0x5a/0x130 [ 54.751132][ T5034] kobject_add+0x12a/0x240 [ 54.755577][ T5034] ? kset_create_and_add+0x190/0x190 [ 54.760856][ T5034] ? kobject_put+0xbe/0x440 [ 54.765375][ T5034] device_add+0x290/0x1ac0 [ 54.769885][ T5034] ? device_initialize+0x510/0x510 [ 54.774985][ T5034] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 54.781837][ T5034] ? up_write+0x1b3/0x510 [ 54.786187][ T5034] ? debugfs_create_dir+0x402/0x630 [ 54.791376][ T5034] hci_register_dev+0x2f2/0xbc0 [ 54.796214][ T5034] hci_uart_tty_ioctl+0x83e/0xc70 [ 54.801248][ T5034] ? hci_uart_init_work+0x170/0x170 [ 54.806456][ T5034] tty_ioctl+0x6fd/0x1580 [ 54.810770][ T5034] ? send_break+0x3e0/0x3e0 [ 54.815257][ T5034] ? rcu_is_watching+0x12/0xb0 [ 54.820103][ T5034] ? lock_release+0x4bf/0x680 [ 54.824808][ T5034] ? bpf_lsm_file_ioctl+0x9/0x10 [ 54.829736][ T5034] ? send_break+0x3e0/0x3e0 [ 54.834237][ T5034] __x64_sys_ioctl+0x18f/0x210 [ 54.839025][ T5034] do_syscall_64+0x38/0xb0 [ 54.843432][ T5034] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 54.849324][ T5034] RIP: 0033:0x7f134798cd39 [ 54.853729][ T5034] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 54.873320][ T5034] RSP: 002b:00007ffcb6e97418 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 54.881751][ T5034] RAX: ffffffffffffffda RBX: 00007ffcb6e97430 RCX: 00007f134798cd39 [ 54.889739][ T5034] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 54.897700][ T5034] RBP: 0000000000000002 R08: 00007ffcb6e971b6 R09: 00000000000000a0 [ 54.905748][ T5034] R10: 0000000000000002 R11: 0000000000000246 R12: 00007ffcb6e9742c [ 54.913715][ T5034] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 54.921698][ T5034] [ 54.924707][ T5034] Modules linked in: [ 54.929131][ T5034] ---[ end trace 0000000000000000 ]--- [ 54.935098][ T5034] RIP: 0010:strchr+0x1b/0xb0 [ 54.939805][ T5034] Code: 01 ae f7 48 8b 74 24 08 48 8b 14 24 eb 89 90 f3 0f 1e fa 48 b8 00 00 00 00 00 fc ff df 48 89 fa 55 48 c1 ea 03 53 48 83 ec 10 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 04 84 c0 75 51 0f b6 07 89 [ 54.959461][ T5034] RSP: 0018:ffffc9000440fa90 EFLAGS: 00010286 [ 54.965559][ T5034] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 54.973551][ T5034] RDX: 0000000000000000 RSI: 0000000000000025 RDI: 0000000000000000 [ 54.981531][ T5034] RBP: ffffc9000440fb20 R08: 0000000000000001 R09: 0000000000000000 [ 54.989543][ T5034] R10: 0000000000000001 R11: 0000000000000000 R12: ffffc9000440fb20 [ 54.997538][ T5034] R13: 0000000000000cc0 R14: ffff888020187f80 R15: 0000000000000001 [ 55.005534][ T5034] FS: 00005555569f8380(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 55.014485][ T5034] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 55.021053][ T5034] CR2: 00007f13479ea6a4 CR3: 0000000020b59000 CR4: 0000000000350ef0 [ 55.029049][ T5034] Kernel panic - not syncing: Fatal exception [ 55.036091][ T5034] Kernel Offset: disabled [ 55.040396][ T5034] Rebooting in 86400 seconds..