Oops: general protection fault, probably for non-canonical address 0xdffffc000000000f: 0000 [#1] SMP KASAN NOPTI KASAN: null-ptr-deref in range [0x0000000000000078-0x000000000000007f] CPU: 0 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 Workqueue: async async_run_entry_fn RIP: 0010:dev_get_drvdata include/linux/device.h:989 [inline] RIP: 0010:rmi_suspend_functions drivers/input/rmi4/rmi_driver.c:283 [inline] RIP: 0010:rmi_driver_suspend+0x2f/0x180 drivers/input/rmi4/rmi_driver.c:994 Code: 57 41 56 41 55 41 89 f5 41 54 49 89 fc 55 53 e8 f7 3d 04 fa 49 8d 7c 24 78 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 3a 01 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b RSP: 0018:ffffc90000ac77b0 EFLAGS: 00010206 RAX: dffffc0000000000 RBX: ffff88807b0d0000 RCX: ffffffff89053ae4 RDX: 000000000000000f RSI: ffffffff880626e9 RDI: 0000000000000078 RBP: 0000000000000001 R08: 0000000000000007 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 R13: 0000000000000000 R14: 1ffff92000158f09 R15: 0000000000000001 FS: 0000000000000000(0000) GS:ffff888123dd8000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fe04828a2fe CR3: 00000000335e8000 CR4: 00000000003526f0 Call Trace: rmi_suspend+0xbd/0x100 drivers/hid/hid-rmi.c:448 hid_driver_suspend+0x7c/0xb0 drivers/hid/hid-core.c:2614 hid_suspend+0x495/0x7a0 drivers/hid/usbhid/hid-core.c:1630 usb_suspend_interface drivers/usb/core/driver.c:1323 [inline] usb_suspend_both+0x288/0x950 drivers/usb/core/driver.c:1446 usb_suspend+0x3b7/0x590 drivers/usb/core/driver.c:1631 dpm_run_callback+0x10f/0x210 drivers/base/power/main.c:510 device_suspend+0x501/0x1280 drivers/base/power/main.c:2025 async_suspend+0x20/0x30 drivers/base/power/main.c:2060 async_run_entry_fn+0x9f/0x580 kernel/async.c:129 process_one_work+0xa23/0x1940 kernel/workqueue.c:3322 process_scheduled_works kernel/workqueue.c:3405 [inline] worker_thread+0x5ef/0xe50 kernel/workqueue.c:3486 kthread+0x370/0x450 kernel/kthread.c:436 ret_from_fork+0x72b/0xd50 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Modules linked in: ------------[ cut here ]------------ console_irqwork_blocked WARNING: kernel/printk/printk.c:4627 at __wake_up_klogd+0x117/0x140 kernel/printk/printk.c:4627, CPU#0: kworker/u8:2/36 Modules linked in: CPU: 0 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 Workqueue: async async_run_entry_fn RIP: 0010:__wake_up_klogd+0x117/0x140 kernel/printk/printk.c:4627 Code: 00 89 de bf 01 00 00 00 e8 06 23 22 00 83 fb 01 0f 85 65 ff ff ff eb b5 e8 86 28 22 00 e8 21 b0 8d ff eb cc e8 7a 28 22 00 90 <0f> 0b 90 eb c1 e8 8f b2 92 00 eb 87 48 89 ee 48 c7 c7 40 3c af 8e RSP: 0018:ffffc90000ac7610 EFLAGS: 00010093 RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff81e83b87 RDX: ffff888021a8ca80 RSI: ffffffff81e83c66 RDI: ffff888021a8ca80 RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000293 R13: ffffc90000ac766c R14: 0000000000000001 R15: dffffc000000000f FS: 0000000000000000(0000) GS:ffff888123dd8000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fe04828a2fe CR3: 00000000335e8000 CR4: 00000000003526f0 Call Trace: bust_spinlocks+0xb4/0xe0 lib/bust_spinlocks.c:27 oops_end+0x2d/0xe0 arch/x86/kernel/dumpstack.c:380 __exc_general_protection arch/x86/kernel/traps.c:968 [inline] exc_general_protection+0x112/0x240 arch/x86/kernel/traps.c:914 asm_exc_general_protection+0x26/0x30 arch/x86/include/asm/idtentry.h:589 RIP: 0010:dev_get_drvdata include/linux/device.h:989 [inline] RIP: 0010:rmi_suspend_functions drivers/input/rmi4/rmi_driver.c:283 [inline] RIP: 0010:rmi_driver_suspend+0x2f/0x180 drivers/input/rmi4/rmi_driver.c:994 Code: 57 41 56 41 55 41 89 f5 41 54 49 89 fc 55 53 e8 f7 3d 04 fa 49 8d 7c 24 78 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 3a 01 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b RSP: 0018:ffffc90000ac77b0 EFLAGS: 00010206 RAX: dffffc0000000000 RBX: ffff88807b0d0000 RCX: ffffffff89053ae4 RDX: 000000000000000f RSI: ffffffff880626e9 RDI: 0000000000000078 RBP: 0000000000000001 R08: 0000000000000007 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 R13: 0000000000000000 R14: 1ffff92000158f09 R15: 0000000000000001 rmi_suspend+0xbd/0x100 drivers/hid/hid-rmi.c:448 hid_driver_suspend+0x7c/0xb0 drivers/hid/hid-core.c:2614 hid_suspend+0x495/0x7a0 drivers/hid/usbhid/hid-core.c:1630 usb_suspend_interface drivers/usb/core/driver.c:1323 [inline] usb_suspend_both+0x288/0x950 drivers/usb/core/driver.c:1446 usb_suspend+0x3b7/0x590 drivers/usb/core/driver.c:1631 dpm_run_callback+0x10f/0x210 drivers/base/power/main.c:510 device_suspend+0x501/0x1280 drivers/base/power/main.c:2025 async_suspend+0x20/0x30 drivers/base/power/main.c:2060 async_run_entry_fn+0x9f/0x580 kernel/async.c:129 process_one_work+0xa23/0x1940 kernel/workqueue.c:3322 process_scheduled_works kernel/workqueue.c:3405 [inline] worker_thread+0x5ef/0xe50 kernel/workqueue.c:3486 kthread+0x370/0x450 kernel/kthread.c:436 ret_from_fork+0x72b/0xd50 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 ---------------- Code disassembly (best guess): 0: 57 push %rdi 1: 41 56 push %r14 3: 41 55 push %r13 5: 41 89 f5 mov %esi,%r13d 8: 41 54 push %r12 a: 49 89 fc mov %rdi,%r12 d: 55 push %rbp e: 53 push %rbx f: e8 f7 3d 04 fa call 0xfa043e0b 14: 49 8d 7c 24 78 lea 0x78(%r12),%rdi 19: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 20: fc ff df 23: 48 89 fa mov %rdi,%rdx 26: 48 c1 ea 03 shr $0x3,%rdx * 2a: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) <-- trapping instruction 2e: 0f 85 3a 01 00 00 jne 0x16e 34: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 3b: fc ff df 3e: 4d rex.WRB 3f: 8b .byte 0x8b