input: syz1 as /devices/virtual/input/input48 kasan: CONFIG_KASAN_INLINE enabled kasan: GPF could be caused by NULL-ptr deref or user memory accessgeneral protection fault: 0000 [#1] PREEMPT SMP KASAN Modules linked in: CPU: 0 PID: 14874 Comm: syz-executor.1 Not tainted 4.4.174+ #17 task: ffff8801c07f0000 task.stack: ffff8800a7100000 RIP: 0010:[] [] __lock_acquire+0x5f3/0x4f50 kernel/locking/lockdep.c:3092 RSP: 0018:ffff8800a71077f0 EFLAGS: 00010002 RAX: dffffc0000000000 RBX: ffff8801c07f0000 RCX: 0000000000000001 RDX: 0000000000000015 RSI: 0000000000000000 RDI: 0000000000000001 RBP: ffff8800a7107968 R08: 0000000000000001 R09: 0000000000000000 R10: ffffffff82836880 R11: ffffffff831a5078 R12: ffff8801c07f0000 R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff8801db600000(0063) knlGS:00000000f54f9b40 CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 CR2: 00007fad172a3af0 CR3: 00000001cc2a6000 CR4: 00000000001606b0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Stack: ffff8801c07f0000 ffff8801c07f08c8 0000000000000003 0000000000000000 ffff8800a7107998 0000000000000046 ffffffff82718079 ffff8801db61e880 1ffffffff0506d10 ffff8800a7107848 ffffffff8123a761 ffff880000000000 Call Trace: [] lock_acquire+0x15e/0x450 kernel/locking/lockdep.c:3592 [] __mutex_lock_common kernel/locking/mutex.c:521 [inline] [] mutex_lock_nested+0xc1/0xb80 kernel/locking/mutex.c:621 [] input_ff_erase+0x7c/0xc0 drivers/input/ff-core.c:231 [] evdev_do_ioctl drivers/input/evdev.c:1107 [inline] [] evdev_ioctl_handler+0x752/0x19c0 drivers/input/evdev.c:1302 [] evdev_ioctl_compat+0x29/0x30 drivers/input/evdev.c:1318 [] C_SYSC_ioctl fs/compat_ioctl.c:1592 [inline] [] compat_SyS_ioctl+0x403/0x2210 fs/compat_ioctl.c:1544 [] do_syscall_32_irqs_on arch/x86/entry/common.c:330 [inline] [] do_fast_syscall_32+0x32d/0xa90 arch/x86/entry/common.c:397 [] sysenter_flags_fixed+0xd/0x1a Code: 0f 85 7f 32 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 48 8b 94 24 88 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 a7 33 00 00 48 8b 84 24 88 00 00 00 48 81 38 RIP [] __lock_acquire+0x5f3/0x4f50 kernel/locking/lockdep.c:3092 RSP ---[ end trace 83ea79608255872c ]---