./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2312380612 <...> Warning: Permanently added '10.128.0.22' (ED25519) to the list of known hosts. execve("./syz-executor2312380612", ["./syz-executor2312380612"], 0x7ffedc0398a0 /* 10 vars */) = 0 brk(NULL) = 0x555560bcc000 brk(0x555560bccd00) = 0x555560bccd00 arch_prctl(ARCH_SET_FS, 0x555560bcc380) = 0 set_tid_address(0x555560bcc650) = 5840 set_robust_list(0x555560bcc660, 24) = 0 rseq(0x555560bccca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2312380612", 4096) = 28 getrandom("\x53\x2c\x70\x0a\x76\x9a\x30\xb3", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555560bccd00 brk(0x555560bedd00) = 0x555560bedd00 brk(0x555560bee000) = 0x555560bee000 mprotect(0x7f88eb6a9000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 write(1, "executing program\n", 18executing program ) = 18 openat(AT_FDCWD, "/dev/uinput", O_RDONLY) = 3 ioctl(3, UI_DEV_SETUP, 0x20000100) = 0 [ 77.434914][ T5840] ================================================================== [ 77.443044][ T5840] BUG: KASAN: null-ptr-deref in input_ff_create+0x213/0x2f0 [ 77.450360][ T5840] Read of size 8 at addr 0000000000000040 by task syz-executor231/5840 [ 77.458593][ T5840] [ 77.460923][ T5840] CPU: 1 UID: 0 PID: 5840 Comm: syz-executor231 Not tainted 6.13.0-rc3-next-20241220-syzkaller #0 [ 77.460945][ T5840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 77.460958][ T5840] Call Trace: [ 77.460965][ T5840] [ 77.460971][ T5840] dump_stack_lvl+0x241/0x360 [ 77.460991][ T5840] ? __pfx_dump_stack_lvl+0x10/0x10 [ 77.461006][ T5840] ? __pfx__printk+0x10/0x10 [ 77.461031][ T5840] ? _printk+0xd5/0x120 [ 77.461056][ T5840] print_report+0xe8/0x550 [ 77.461086][ T5840] ? __asan_memset+0x23/0x50 [ 77.461104][ T5840] ? __virt_addr_valid+0x58/0x530 [ 77.461128][ T5840] ? input_ff_create+0x213/0x2f0 [ 77.461142][ T5840] kasan_report+0x143/0x180 [ 77.461165][ T5840] ? input_ff_create+0x213/0x2f0 [ 77.461181][ T5840] kasan_check_range+0x282/0x290 [ 77.461205][ T5840] input_ff_create+0x213/0x2f0 [ 77.461220][ T5840] uinput_create_device+0x26d/0x630 [ 77.461247][ T5840] uinput_ioctl_handler+0x488/0x1770 [ 77.461275][ T5840] ? __pfx_uinput_ioctl_handler+0x10/0x10 [ 77.461303][ T5840] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 77.461325][ T5840] ? __pfx_uinput_ioctl+0x10/0x10 [ 77.461347][ T5840] __se_sys_ioctl+0xf5/0x170 [ 77.461368][ T5840] do_syscall_64+0xf3/0x230 [ 77.461382][ T5840] ? clear_bhb_loop+0x35/0x90 [ 77.461406][ T5840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.461427][ T5840] RIP: 0033:0x7f88eb636369 [ 77.461445][ T5840] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 77.461461][ T5840] RSP: 002b:00007ffcf89bdb38 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 77.461478][ T5840] RAX: ffffffffffffffda RBX: 00007ffcf89bdd08 RCX: 00007f88eb636369 [ 77.461489][ T5840] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 77.461499][ T5840] RBP: 00007f88eb6a9610 R08: 00007ffcf89bdd08 R09: 00007ffcf89bdd08 [ 77.461510][ T5840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.461520][ T5840] R13: 00007ffcf89bdcf8 R14: 0000000000000001 R15: 0000000000000001 [ 77.461535][ T5840] [ 77.461540][ T5840] ================================================================== [ 77.675823][ T5840] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 77.683054][ T5840] CPU: 1 UID: 0 PID: 5840 Comm: syz-executor231 Not tainted 6.13.0-rc3-next-20241220-syzkaller #0 [ 77.693662][ T5840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 77.703877][ T5840] Call Trace: [ 77.707196][ T5840] [ 77.710154][ T5840] dump_stack_lvl+0x241/0x360 [ 77.714956][ T5840] ? __pfx_dump_stack_lvl+0x10/0x10 [ 77.720212][ T5840] ? __pfx__printk+0x10/0x10 [ 77.724933][ T5840] ? lock_release+0xbf/0xa30 [ 77.729558][ T5840] ? vscnprintf+0x5d/0x90 [ 77.733914][ T5840] panic+0x349/0x880 [ 77.737856][ T5840] ? check_panic_on_warn+0x21/0xb0 [ 77.742999][ T5840] ? __pfx_panic+0x10/0x10 [ 77.747442][ T5840] ? mark_lock+0x9a/0x360 [ 77.751786][ T5840] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 77.757706][ T5840] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 77.763611][ T5840] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 77.769953][ T5840] ? print_report+0xe8/0x550 [ 77.774562][ T5840] check_panic_on_warn+0x86/0xb0 [ 77.779516][ T5840] ? input_ff_create+0x213/0x2f0 [ 77.784567][ T5840] end_report+0x77/0x160 [ 77.788845][ T5840] kasan_report+0x154/0x180 [ 77.793374][ T5840] ? input_ff_create+0x213/0x2f0 [ 77.798325][ T5840] kasan_check_range+0x282/0x290 [ 77.803280][ T5840] input_ff_create+0x213/0x2f0 [ 77.808056][ T5840] uinput_create_device+0x26d/0x630 [ 77.813273][ T5840] uinput_ioctl_handler+0x488/0x1770 [ 77.818574][ T5840] ? __pfx_uinput_ioctl_handler+0x10/0x10 [ 77.824315][ T5840] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 77.830660][ T5840] ? __pfx_uinput_ioctl+0x10/0x10 [ 77.835767][ T5840] __se_sys_ioctl+0xf5/0x170 [ 77.840390][ T5840] do_syscall_64+0xf3/0x230 [ 77.844908][ T5840] ? clear_bhb_loop+0x35/0x90 [ 77.849604][ T5840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.855533][ T5840] RIP: 0033:0x7f88eb636369 [ 77.859957][ T5840] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 77.879593][ T5840] RSP: 002b:00007ffcf89bdb38 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 77.888029][ T5840] RAX: ffffffffffffffda RBX: 00007ffcf89bdd08 RCX: 00007f88eb636369 [ 77.896015][ T5840] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 77.903997][ T5840] RBP: 00007f88eb6a9610 R08: 00007ffcf89bdd08 R09: 00007ffcf89bdd08 [ 77.912100][ T5840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.920205][ T5840] R13: 00007ffcf89bdcf8 R14: 0000000000000001 R15: 0000000000000001 [ 77.928262][ T5840] [ 77.931605][ T5840] Kernel Offset: disabled [ 77.935933][ T5840] Rebooting in 86400 seconds..