program: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./dummy\x00', 0x42, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='p:mygroup/myevent ./dummy:0', 0x1b) write(r0, &(0x7f0000000400)='p:mygroup/myevent ./dummy:0x2', 0x1d) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='p:mygroup/myevent ./dummy:0', 0x1b) (fail_nth: 8) [ 79.803744][ T5280] Bluetooth: hci0: command tx timeout [ 79.975654][ T5316] FAULT_INJECTION: forcing a failure. [ 79.975654][ T5316] name failslab, interval 1, probability 0, space 0, times 1 [ 80.001560][ T5316] CPU: 0 UID: 0 PID: 5316 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 80.001602][ T5316] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 80.001608][ T5316] Call Trace: [ 80.001612][ T5316] [ 80.001618][ T5316] dump_stack_lvl+0xe8/0x150 [ 80.001682][ T5316] should_fail_ex+0x410/0x560 [ 80.001732][ T5316] should_failslab+0xa8/0x100 [ 80.001747][ T5316] __kmalloc_noprof+0xfe/0x720 [ 80.001764][ T5316] ? alloc_trace_uprobe+0x32/0x2a0 [ 80.001780][ T5316] ? alloc_trace_uprobe+0x32/0x2a0 [ 80.001801][ T5316] alloc_trace_uprobe+0x32/0x2a0 [ 80.001820][ T5316] __trace_uprobe_create+0x9b8/0xe40 [ 80.001835][ T5316] ? trace_kmalloc+0x2a/0xf0 [ 80.001849][ T5316] ? __pfx___trace_uprobe_create+0x10/0x10 [ 80.001860][ T5316] ? __kmalloc_noprof+0x38c/0x720 [ 80.001875][ T5316] ? __kmalloc_noprof+0x1ab/0x720 [ 80.001888][ T5316] ? argv_split+0x18d/0x400 [ 80.001935][ T5316] ? argv_split+0x18d/0x400 [ 80.001953][ T5316] ? argv_split+0x378/0x400 [ 80.001973][ T5316] trace_probe_create+0xce/0x130 [ 80.001990][ T5316] ? __pfx___trace_uprobe_create+0x10/0x10 [ 80.002002][ T5316] ? __pfx_trace_probe_create+0x10/0x10 [ 80.002024][ T5316] dyn_event_create+0x59/0x80 [ 80.002037][ T5316] create_or_delete_trace_uprobe+0x65/0xa0 [ 80.002050][ T5316] trace_parse_run_command+0x1f3/0x380 [ 80.002062][ T5316] ? __pfx_create_or_delete_trace_uprobe+0x10/0x10 [ 80.002075][ T5316] ? __pfx_probes_write+0x10/0x10 [ 80.002085][ T5316] vfs_write+0x296/0xba0 [ 80.002111][ T5316] ? __pfx_vfs_write+0x10/0x10 [ 80.002130][ T5316] ? __fget_files+0x2a/0x420 [ 80.002147][ T5316] ? __fget_files+0x3a2/0x420 [ 80.002159][ T5316] ? __fget_files+0x2a/0x420 [ 80.002180][ T5316] ksys_write+0x150/0x270 [ 80.002196][ T5316] ? __pfx_ksys_write+0x10/0x10 [ 80.002237][ T5316] do_syscall_64+0x166/0x520 [ 80.002256][ T5316] ? trace_irq_disable+0x3b/0x140 [ 80.002268][ T5316] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.002281][ T5316] ? clear_bhb_loop+0x70/0xc0 [ 80.002295][ T5316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.002308][ T5316] RIP: 0033:0x7f27d979e159 [ 80.002320][ T5316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.002330][ T5316] RSP: 002b:00007f27da6fffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 80.002344][ T5316] RAX: ffffffffffffffda RBX: 00007f27d9a25fa0 RCX: 00007f27d979e159 [ 80.002352][ T5316] RDX: 000000000000001b RSI: 0000200000000300 RDI: 0000000000000005 [ 80.002360][ T5316] RBP: 00007f27da700050 R08: 0000000000000000 R09: 0000000000000000 [ 80.002366][ T5316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.002373][ T5316] R13: 00007f27d9a26038 R14: 00007f27d9a25fa0 R15: 00007ffe88cf7098 [ 80.002392][ T5316] [ 80.153515][ T5316] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000008: 0000 [#1] SMP KASAN NOPTI [ 80.158585][ T5316] KASAN: null-ptr-deref in range [0x0000000000000040-0x0000000000000047] [ 80.162118][ T5316] CPU: 0 UID: 0 PID: 5316 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 80.166069][ T5316] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 80.170420][ T5316] RIP: 0010:path_put+0x24/0x60 [ 80.172570][ T5316] Code: 90 90 90 90 90 90 f3 0f 1e fa 41 56 53 48 89 fb 49 be 00 00 00 00 00 fc ff df e8 97 db 77 ff 48 8d 7b 08 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 74 05 e8 40 43 e9 ff 48 8b 7b 08 e8 e7 8e 03 00 48 [ 80.180985][ T5316] RSP: 0018:ffffc9000d8879c8 EFLAGS: 00010203 [ 80.183779][ T5316] RAX: 0000000000000008 RBX: 000000000000003c RCX: ffff888033698000 [ 80.187218][ T5316] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000044 [ 80.191247][ T5316] RBP: ffffc9000d887b50 R08: ffffffff9aa35e37 R09: 0000000000000000 [ 80.194985][ T5316] R10: ffffffff9aa35e20 R11: fffffbfff3546bc7 R12: fffffffffffffff4 [ 80.198684][ T5316] R13: dffffc0000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 80.202147][ T5316] FS: 00007f27da7006c0(0000) GS:ffff88808c2cf000(0000) knlGS:0000000000000000 [ 80.206034][ T5316] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 80.208935][ T5316] CR2: 000055e986375660 CR3: 0000000012db4000 CR4: 0000000000352ef0 [ 80.212486][ T5316] Call Trace: [ 80.214013][ T5316] [ 80.215286][ T5316] __trace_uprobe_create+0x53f/0xe40 [ 80.217656][ T5316] ? trace_kmalloc+0x2a/0xf0 [ 80.219711][ T5316] ? __pfx___trace_uprobe_create+0x10/0x10 [ 80.222266][ T5316] ? __kmalloc_noprof+0x38c/0x720 [ 80.224522][ T5316] ? __kmalloc_noprof+0x1ab/0x720 [ 80.226771][ T5316] ? argv_split+0x18d/0x400 [ 80.228868][ T5316] ? argv_split+0x18d/0x400 [ 80.230881][ T5316] ? argv_split+0x378/0x400 [ 80.232918][ T5316] trace_probe_create+0xce/0x130 [ 80.235102][ T5316] ? __pfx___trace_uprobe_create+0x10/0x10 [ 80.237666][ T5316] ? __pfx_trace_probe_create+0x10/0x10 [ 80.240130][ T5316] dyn_event_create+0x59/0x80 [ 80.242248][ T5316] create_or_delete_trace_uprobe+0x65/0xa0 [ 80.244764][ T5316] trace_parse_run_command+0x1f3/0x380 [ 80.247156][ T5316] ? __pfx_create_or_delete_trace_uprobe+0x10/0x10 [ 80.249969][ T5316] ? __pfx_probes_write+0x10/0x10 [ 80.252255][ T5316] vfs_write+0x296/0xba0 [ 80.254208][ T5316] ? __pfx_vfs_write+0x10/0x10 [ 80.256324][ T5316] ? __fget_files+0x2a/0x420 [ 80.258367][ T5316] ? __fget_files+0x3a2/0x420 [ 80.260495][ T5316] ? __fget_files+0x2a/0x420 [ 80.262562][ T5316] ksys_write+0x150/0x270 [ 80.264490][ T5316] ? __pfx_ksys_write+0x10/0x10 [ 80.266574][ T5316] do_syscall_64+0x166/0x520 [ 80.268420][ T5316] ? trace_irq_disable+0x3b/0x140 [ 80.270514][ T5316] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.272987][ T5316] ? clear_bhb_loop+0x70/0xc0 [ 80.275036][ T5316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.277552][ T5316] RIP: 0033:0x7f27d979e159 [ 80.279424][ T5316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.287130][ T5316] RSP: 002b:00007f27da6fffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 80.290441][ T5316] RAX: ffffffffffffffda RBX: 00007f27d9a25fa0 RCX: 00007f27d979e159 [ 80.293973][ T5316] RDX: 000000000000001b RSI: 0000200000000300 RDI: 0000000000000005 [ 80.297422][ T5316] RBP: 00007f27da700050 R08: 0000000000000000 R09: 0000000000000000 [ 80.300821][ T5316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.304340][ T5316] R13: 00007f27d9a26038 R14: 00007f27d9a25fa0 R15: 00007ffe88cf7098 [ 80.307724][ T5316] [ 80.309253][ T5316] Modules linked in: [ 80.311567][ T5316] ---[ end trace 0000000000000000 ]--- [ 80.343973][ T5316] RIP: 0010:path_put+0x24/0x60 [ 80.346288][ T5316] Code: 90 90 90 90 90 90 f3 0f 1e fa 41 56 53 48 89 fb 49 be 00 00 00 00 00 fc ff df e8 97 db 77 ff 48 8d 7b 08 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 74 05 e8 40 43 e9 ff 48 8b 7b 08 e8 e7 8e 03 00 48 [ 80.356017][ T5316] RSP: 0018:ffffc9000d8879c8 EFLAGS: 00010203 [ 80.360564][ T5316] RAX: 0000000000000008 RBX: 000000000000003c RCX: ffff888033698000 [ 80.364273][ T5316] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000044 [ 80.368095][ T5316] RBP: ffffc9000d887b50 R08: ffffffff9aa35e37 R09: 0000000000000000 [ 80.372170][ T5316] R10: ffffffff9aa35e20 R11: fffffbfff3546bc7 R12: fffffffffffffff4 [ 80.376314][ T5316] R13: dffffc0000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 80.380046][ T5316] FS: 00007f27da7006c0(0000) GS:ffff88808c2cf000(0000) knlGS:0000000000000000 [ 80.384217][ T5316] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 80.387511][ T5316] CR2: 000055e986375660 CR3: 0000000012db4000 CR4: 0000000000352ef0 [ 80.391482][ T5316] Kernel panic - not syncing: Fatal exception [ 80.394629][ T5316] Kernel Offset: disabled [ 80.396605][ T5316] Rebooting in 86400 seconds..