./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor245296155 <...> Warning: Permanently added '10.128.0.108' (ECDSA) to the list of known hosts. execve("./syz-executor245296155", ["./syz-executor245296155"], 0x7ffd30759440 /* 10 vars */) = 0 brk(NULL) = 0x555555cb6000 brk(0x555555cb6c40) = 0x555555cb6c40 arch_prctl(ARCH_SET_FS, 0x555555cb6300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor245296155", 4096) = 27 brk(0x555555cd7c40) = 0x555555cd7c40 brk(0x555555cd8000) = 0x555555cd8000 mprotect(0x7fefe831a000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/dev/ttyS3", O_RDONLY) = 3 ioctl(3, TIOCSETD, [21]) = 0 syzkaller login: [ 39.704493][ T3604] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 39.712403][ T3604] #PF: supervisor instruction fetch in kernel mode [ 39.718880][ T3604] #PF: error_code(0x0010) - not-present page [ 39.724832][ T3604] PGD 1be59067 P4D 1be59067 PUD 1e75f067 PMD 0 [ 39.731060][ T3604] Oops: 0010 [#1] PREEMPT SMP KASAN [ 39.736233][ T3604] CPU: 0 PID: 3604 Comm: syz-executor245 Not tainted 6.0.0-rc2-syzkaller-00327-g8379c0b31fbc #0 [ 39.746619][ T3604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 39.756650][ T3604] RIP: 0010:0x0 [ 39.760094][ T3604] Code: Unable to access opcode bytes at RIP 0xffffffffffffffd6. [ 39.767784][ T3604] RSP: 0018:ffffc90003b5fcf0 EFLAGS: 00010202 [ 39.773829][ T3604] RAX: 0000000000000001 RBX: ffff8881474a2000 RCX: 0000000000000000 [ 39.781779][ T3604] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8881474a2000 [ 39.789727][ T3604] RBP: ffffc90003b5fda1 R08: 0000000000000001 R09: 0000000000000004 [ 39.797762][ T3604] R10: 0000000000000000 R11: 1ffffffff2005487 R12: 0000000000000001 [ 39.805708][ T3604] R13: 0000000000000000 R14: ffffc90003b5fd90 R15: dffffc0000000000 [ 39.813659][ T3604] FS: 0000555555cb6300(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 39.822567][ T3604] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 39.829173][ T3604] CR2: ffffffffffffffd6 CR3: 000000001f485000 CR4: 0000000000350ef0 [ 39.837817][ T3604] Call Trace: [ 39.841073][ T3604] [ 39.844069][ T3604] gsmld_receive_buf+0x1c2/0x2f0 [ 39.849008][ T3604] ? gsmld_write_wakeup+0x130/0x130 [ 39.854183][ T3604] tty_ioctl+0xa75/0x15d0 [ 39.858488][ T3604] ? tty_fasync+0x390/0x390 [ 39.862971][ T3604] ? find_held_lock+0x2d/0x110 [ 39.867716][ T3604] ? ptrace_notify+0xfa/0x140 [ 39.872543][ T3604] ? lock_downgrade+0x6e0/0x6e0 [ 39.877369][ T3604] ? _raw_spin_unlock_irq+0x1f/0x40 [ 39.882549][ T3604] ? bpf_lsm_file_ioctl+0x5/0x10 [ 39.887469][ T3604] ? tty_fasync+0x390/0x390 [ 39.891950][ T3604] __x64_sys_ioctl+0x193/0x200 [ 39.896690][ T3604] do_syscall_64+0x35/0xb0 [ 39.901099][ T3604] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 39.906971][ T3604] RIP: 0033:0x7fefe82adb39 [ 39.911364][ T3604] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 39.930951][ T3604] RSP: 002b:00007fff1e9ea178 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 39.939339][ T3604] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fefe82adb39 [ 39.947292][ T3604] RDX: 00000000200000c0 RSI: 0000000000005412 RDI: 0000000000000003 [ 39.955328][ T3604] RBP: 00007fefe8271ce0 R08: 0000000000000000 R09: 0000000000000000 [ 39.963279][ T3604] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fefe8271d70 [ 39.971243][ T3604] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 39.979219][ T3604] [ 39.982219][ T3604] Modules linked in: [ 39.986092][ T3604] CR2: 0000000000000000 [ 39.990535][ T3604] ---[ end trace 0000000000000000 ]--- [ 39.995970][ T3604] RIP: 0010:0x0 [ 39.999414][ T3604] Code: Unable to access opcode bytes at RIP 0xffffffffffffffd6. [ 40.007105][ T3604] RSP: 0018:ffffc90003b5fcf0 EFLAGS: 00010202 [ 40.013150][ T3604] RAX: 0000000000000001 RBX: ffff8881474a2000 RCX: 0000000000000000 [ 40.021099][ T3604] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8881474a2000 [ 40.029233][ T3604] RBP: ffffc90003b5fda1 R08: 0000000000000001 R09: 0000000000000004 [ 40.037184][ T3604] R10: 0000000000000000 R11: 1ffffffff2005487 R12: 0000000000000001 [ 40.045244][ T3604] R13: 0000000000000000 R14: ffffc90003b5fd90 R15: dffffc0000000000 [ 40.053204][ T3604] FS: 0000555555cb6300(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 40.062119][ T3604] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 40.068862][ T3604] CR2: ffffffffffffffd6 CR3: 000000001f485000 CR4: 0000000000350ef0 [ 40.076817][ T3604] Kernel panic - not syncing: Fatal exception [ 40.083666][ T3604] Kernel Offset: disabled [ 40.087981][ T3604] Rebooting in 86400 seconds..