input: syz0 as /devices/virtual/input/input20 input: syz0 as /devices/virtual/input/input21 input: syz0 as /devices/virtual/input/input22 input: syz0 as /devices/virtual/input/input23 kasan: CONFIG_KASAN_INLINE enabled kasan: GPF could be caused by NULL-ptr deref or user memory accessgeneral protection fault: 0000 [#1] PREEMPT SMP KASAN Modules linked in: CPU: 1 PID: 2145 Comm: syz-executor227 Not tainted 4.4.172+ #13 task: ffff8801d2d817c0 task.stack: ffff8801d4350000 RIP: 0010:[] [] __lock_acquire+0x5f3/0x4f50 kernel/locking/lockdep.c:3092 RSP: 0018:ffff8801d43577f0 EFLAGS: 00010002 RAX: dffffc0000000000 RBX: ffff8801d2d817c0 RCX: 0000000000000001 RDX: 0000000000000015 RSI: 0000000000000000 RDI: 0000000000000001 RBP: ffff8801d4357968 R08: 0000000000000001 R09: 0000000000000000 R10: ffffffff82836880 R11: ffffffff831a4d78 R12: ffff8801d2d817c0 R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff8801db700000(0063) knlGS:0000000009e28840 CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 CR2: 000000000806b510 CR3: 00000001d49fc000 CR4: 00000000001606b0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Stack: ffff8801d2d817c0 ffff8801d2d82088 0000000000000003 0000000000000000 ffff8801d4357998 0000000000000046 ffff880100000001 ffff8801d2d82078 1ffffffff0506d10 ffff8801d4357848 ffffffff8123a551 ffff880100000000 Call Trace: [] lock_acquire+0x15e/0x450 kernel/locking/lockdep.c:3592 [] __mutex_lock_common kernel/locking/mutex.c:521 [inline] [] mutex_lock_nested+0xc1/0xb80 kernel/locking/mutex.c:621 [] input_ff_erase+0x7c/0xc0 drivers/input/ff-core.c:231 [] evdev_do_ioctl drivers/input/evdev.c:1107 [inline] [] evdev_ioctl_handler+0x752/0x19c0 drivers/input/evdev.c:1302 [] evdev_ioctl_compat+0x29/0x30 drivers/input/evdev.c:1318 [] C_SYSC_ioctl fs/compat_ioctl.c:1592 [inline] [] compat_SyS_ioctl+0x403/0x2210 fs/compat_ioctl.c:1544 [] do_syscall_32_irqs_on arch/x86/entry/common.c:330 [inline] [] do_fast_syscall_32+0x32d/0xa90 arch/x86/entry/common.c:397 [] sysenter_flags_fixed+0xd/0x1a Code: 0f 85 7f 32 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 48 8b 94 24 88 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 a7 33 00 00 48 8b 84 24 88 00 00 00 48 81 38 RIP [] __lock_acquire+0x5f3/0x4f50 kernel/locking/lockdep.c:3092 RSP ---[ end trace eaf3cb4e5e0cc45d ]---