./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3067181304 <...> Warning: Permanently added '10.128.0.86' (ED25519) to the list of known hosts. execve("./syz-executor3067181304", ["./syz-executor3067181304"], 0x7ffd2ff0add0 /* 10 vars */) = 0 brk(NULL) = 0x555555f6f000 brk(0x555555f6fd00) = 0x555555f6fd00 arch_prctl(ARCH_SET_FS, 0x555555f6f380) = 0 set_tid_address(0x555555f6f650) = 5024 set_robust_list(0x555555f6f660, 24) = 0 rseq(0x555555f6fca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3067181304", 4096) = 28 getrandom("\x58\xd2\x79\xdc\x13\xd2\x43\x7a", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555555f6fd00 brk(0x555555f90d00) = 0x555555f90d00 brk(0x555555f91000) = 0x555555f91000 mprotect(0x7f05cbb1c000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/sys/kernel/debug/failslab/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_futex/ignore-private", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-highmem", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/min-order", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555f6f650) = 5025 ./strace-static-x86_64: Process 5025 attached [pid 5025] set_robust_list(0x555555f6f660, 24) = 0 [pid 5025] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5025] setpgid(0, 0) = 0 [pid 5025] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5025] write(3, "1000", 4) = 4 [pid 5025] close(3) = 0 [pid 5025] openat(AT_FDCWD, "/dev/userio", O_RDWR|O_EXCL|O_NOCTTY|O_NOFOLLOW|0x4) = 3 [pid 5025] write(3, "\x01\x42", 2) = 2 [pid 5025] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 5025] write(4, "2", 1) = 1 [ 61.254560][ T5025] FAULT_INJECTION: forcing a failure. [ 61.254560][ T5025] name failslab, interval 1, probability 0, space 0, times 1 [ 61.267481][ T5025] CPU: 1 PID: 5025 Comm: syz-executor306 Not tainted 6.5.0-syzkaller-11938-g65d6e954e378 #0 [ 61.277580][ T5025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 61.287917][ T5025] Call Trace: [ 61.291202][ T5025] [ 61.294143][ T5025] dump_stack_lvl+0x1e7/0x2d0 [ 61.298930][ T5025] ? nf_tcp_handle_invalid+0x650/0x650 [ 61.304396][ T5025] ? panic+0x770/0x770 [ 61.308478][ T5025] ? pointer+0x1200/0x1200 [ 61.312909][ T5025] should_fail_ex+0x3aa/0x4e0 [ 61.317605][ T5025] should_failslab+0x9/0x20 [ 61.322120][ T5025] slab_pre_alloc_hook+0x59/0x2b0 [ 61.327160][ T5025] ? kobject_set_name_vargs+0x61/0x120 [ 61.332634][ T5025] __kmem_cache_alloc_node+0x4b/0x270 [ 61.338025][ T5025] ? ptr_to_hashval+0x80/0x80 [ 61.342718][ T5025] ? kobject_set_name_vargs+0x61/0x120 [ 61.348191][ T5025] __kmalloc_node_track_caller+0xa5/0x230 [ 61.353928][ T5025] kvasprintf+0xdf/0x190 [ 61.358226][ T5025] ? bust_spinlocks+0xd0/0xd0 [ 61.362909][ T5025] ? __asan_memset+0x23/0x40 [ 61.367507][ T5025] ? kvasprintf_const+0x51/0x170 [ 61.372457][ T5025] kobject_set_name_vargs+0x61/0x120 [ 61.377760][ T5025] dev_set_name+0xd5/0x120 [ 61.382192][ T5025] ? __serio_register_port+0x154/0x3e0 [ 61.387660][ T5025] ? get_device+0x30/0x30 [ 61.392022][ T5025] ? __init_waitqueue_head+0xae/0x150 [ 61.397494][ T5025] ? device_initialize+0x266/0x460 [ 61.402618][ T5025] __serio_register_port+0x175/0x3e0 [ 61.407931][ T5025] userio_char_write+0x2d3/0x550 [ 61.412879][ T5025] ? userio_char_read+0x6a0/0x6a0 [ 61.417918][ T5025] ? fsnotify_perm+0x63/0x5a0 [ 61.422599][ T5025] ? security_file_permission+0x79/0xa0 [ 61.428151][ T5025] ? userio_char_read+0x6a0/0x6a0 [ 61.433190][ T5025] vfs_write+0x286/0xaf0 [ 61.437462][ T5025] ? __lock_acquire+0x7f70/0x7f70 [ 61.442500][ T5025] ? file_end_write+0x250/0x250 [ 61.447372][ T5025] ? __asan_memset+0x23/0x40 [ 61.451972][ T5025] ? print_irqtrace_events+0x220/0x220 [ 61.457440][ T5025] ? ptrace_stop+0x75a/0x970 [ 61.462044][ T5025] ? rcu_is_watching+0x15/0xb0 [ 61.466814][ T5025] ? __fdget_pos+0x1df/0x340 [ 61.471418][ T5025] ksys_write+0x1a0/0x2c0 [ 61.475759][ T5025] ? __ia32_sys_read+0x90/0x90 [ 61.480619][ T5025] ? rcu_is_watching+0x15/0xb0 [ 61.485390][ T5025] ? syscall_enter_from_user_mode+0x8c/0x230 [ 61.491390][ T5025] do_syscall_64+0x41/0xc0 [ 61.495817][ T5025] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 61.501721][ T5025] RIP: 0033:0x7f05cbaa8d39 [ 61.506135][ T5025] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 61.525757][ T5025] RSP: 002b:00007ffe999d2458 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 61.534180][ T5025] RAX: ffffffffffffffda RBX: 00007ffe999d2470 RCX: 00007f05cbaa8d39 [ 61.542169][ T5025] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000003 [pid 5025] write(3, "\x00\x00", 2) = 2 [pid 5025] exit_group(0) = ? [ 61.550160][ T5025] RBP: 0000000000000001 R08: 00007ffe999d21f7 R09: 00000000000000a0 [ 61.558137][ T5025] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 61.566108][ T5025] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 61.574093][ T5025] [ 61.577645][ T27] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 61.589416][ T27] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 61.597848][ T27] CPU: 1 PID: 27 Comm: kworker/1:1 Not tainted 6.5.0-syzkaller-11938-g65d6e954e378 #0 [ 61.607396][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 61.617452][ T27] Workqueue: events_long serio_handle_event [ 61.623360][ T27] RIP: 0010:strchr+0x21/0x90 [ 61.627968][ T27] Code: 00 00 00 00 00 0f 1f 40 00 f3 0f 1e fa 55 41 57 41 56 53 41 89 f6 48 89 fb 49 bf 00 00 00 00 00 fc ff df 48 89 f8 48 c1 e8 03 <42> 0f b6 04 38 84 c0 75 4f 0f b6 03 44 38 f0 74 3d 48 8d 6b 01 84 [ 61.647584][ T27] RSP: 0018:ffffc90000a2fa10 EFLAGS: 00010246 [ 61.653673][ T27] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff888018661dc0 [ 61.661662][ T27] RDX: 0000000000000000 RSI: 0000000000000025 RDI: 0000000000000000 [ 61.669729][ T27] RBP: 0000000000000000 R08: ffffffff8abcd929 R09: 0000000000000000 [ 61.677709][ T27] R10: ffffc90000a2fb00 R11: fffff52000145f63 R12: dffffc0000000000 [ 61.685689][ T27] R13: 1ffff11002850e40 R14: 0000000000000025 R15: dffffc0000000000 [ 61.693684][ T27] FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 61.702616][ T27] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 61.709201][ T27] CR2: 00007f05cbb200d0 CR3: 0000000027eb5000 CR4: 00000000003506e0 [ 61.717202][ T27] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 61.725183][ T27] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 61.733159][ T27] Call Trace: [ 61.736437][ T27] [ 61.739370][ T27] ? __die_body+0x8b/0xe0 [ 61.743711][ T27] ? die_addr+0xc9/0x100 [ 61.747982][ T27] ? exc_general_protection+0x3c2/0x5b0 [ 61.753550][ T27] ? asm_exc_general_protection+0x26/0x30 [ 61.759279][ T27] ? kobject_add+0xd9/0x210 [ 61.763792][ T27] ? strchr+0x21/0x90 [ 61.767784][ T27] kvasprintf_const+0x29/0x170 [ 61.772564][ T27] kobject_set_name_vargs+0x61/0x120 [ 61.777864][ T27] kobject_add+0x113/0x210 [ 61.782291][ T27] ? kobject_put+0x3e4/0x430 [ 61.786889][ T27] ? kobject_init+0x1f0/0x1f0 [ 61.791581][ T27] ? bus_get_dev_root+0x127/0x150 [ 61.796610][ T27] ? get_device_parent+0x401/0x410 [ 61.801734][ T27] ? device_add+0x30f/0xc90 [ 61.806253][ T27] device_add+0x449/0xc90 [ 61.810600][ T27] serio_handle_event+0x752/0x910 [ 61.815627][ T27] ? rcu_is_watching+0x15/0xb0 [ 61.820414][ T27] process_one_work+0x781/0x1130 [ 61.825394][ T27] ? worker_detach_from_pool+0x290/0x290 [ 61.831058][ T27] ? assign_work+0x364/0x3d0 [ 61.835672][ T27] worker_thread+0xabf/0x1060 [ 61.840366][ T27] ? _raw_spin_unlock+0x40/0x40 [ 61.845230][ T27] ? __kthread_parkme+0x164/0x1c0 [ 61.850264][ T27] kthread+0x2b8/0x350 [ 61.854339][ T27] ? pr_cont_work+0x5e0/0x5e0 [ 61.859043][ T27] ? kthread_blkcg+0xd0/0xd0 [ 61.863636][ T27] ret_from_fork+0x48/0x80 [ 61.868060][ T27] ? kthread_blkcg+0xd0/0xd0 [ 61.872656][ T27] ret_from_fork_asm+0x11/0x20 [ 61.877432][ T27] [ 61.880449][ T27] Modules linked in: [ 61.885885][ T27] ---[ end trace 0000000000000000 ]--- [ 61.891416][ T27] RIP: 0010:strchr+0x21/0x90 [ 61.896123][ T27] Code: 00 00 00 00 00 0f 1f 40 00 f3 0f 1e fa 55 41 57 41 56 53 41 89 f6 48 89 fb 49 bf 00 00 00 00 00 fc ff df 48 89 f8 48 c1 e8 03 <42> 0f b6 04 38 84 c0 75 4f 0f b6 03 44 38 f0 74 3d 48 8d 6b 01 84 [ 61.915794][ T27] RSP: 0018:ffffc90000a2fa10 EFLAGS: 00010246 [ 61.921908][ T27] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff888018661dc0 [ 61.930047][ T27] RDX: 0000000000000000 RSI: 0000000000000025 RDI: 0000000000000000 [ 61.938050][ T27] RBP: 0000000000000000 R08: ffffffff8abcd929 R09: 0000000000000000 [ 61.946028][ T27] R10: ffffc90000a2fb00 R11: fffff52000145f63 R12: dffffc0000000000 [ 61.954058][ T27] R13: 1ffff11002850e40 R14: 0000000000000025 R15: dffffc0000000000 [ 61.962090][ T27] FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 61.971077][ T27] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 61.977791][ T27] CR2: 00007f05cbb200d0 CR3: 000000000d130000 CR4: 00000000003506e0 [ 61.985787][ T27] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 61.993865][ T27] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 62.001906][ T27] Kernel panic - not syncing: Fatal exception [ 62.008221][ T27] Kernel Offset: disabled [ 62.012545][ T27] Rebooting in 86400 seconds..