program: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r0, &(0x7f00000001c0)='r:s/p ./file0:0\f$a', 0x12) (fail_nth: 8) [ 86.699485][ T5270] Bluetooth: hci0: command tx timeout [ 86.786230][ T5306] FAULT_INJECTION: forcing a failure. [ 86.786230][ T5306] name failslab, interval 1, probability 0, space 0, times 1 [ 86.792180][ T5306] CPU: 0 UID: 0 PID: 5306 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 86.792193][ T5306] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.792197][ T5306] Call Trace: [ 86.792201][ T5306] [ 86.792204][ T5306] dump_stack_lvl+0xe8/0x150 [ 86.792272][ T5306] should_fail_ex+0x40c/0x560 [ 86.792347][ T5306] should_failslab+0xa8/0x100 [ 86.792360][ T5306] __kmalloc_noprof+0xfe/0x720 [ 86.792373][ T5306] ? __kasan_kmalloc+0x93/0xb0 [ 86.792384][ T5306] ? alloc_trace_uprobe+0x32/0x2a0 [ 86.792396][ T5306] ? alloc_trace_uprobe+0x32/0x2a0 [ 86.792411][ T5306] alloc_trace_uprobe+0x32/0x2a0 [ 86.792425][ T5306] __trace_uprobe_create+0x9b5/0xe40 [ 86.792441][ T5306] ? __pfx___trace_uprobe_create+0x10/0x10 [ 86.792452][ T5306] ? __kmalloc_noprof+0x396/0x720 [ 86.792463][ T5306] ? argv_split+0x18d/0x400 [ 86.792506][ T5306] ? argv_split+0x18d/0x400 [ 86.792522][ T5306] ? argv_split+0x378/0x400 [ 86.792539][ T5306] trace_probe_create+0xce/0x130 [ 86.792550][ T5306] ? __pfx___trace_uprobe_create+0x10/0x10 [ 86.792561][ T5306] ? __pfx_trace_probe_create+0x10/0x10 [ 86.792574][ T5306] dyn_event_create+0x4f/0x70 [ 86.792584][ T5306] create_or_delete_trace_uprobe+0x65/0xa0 [ 86.792596][ T5306] trace_parse_run_command+0x1f3/0x380 [ 86.792608][ T5306] ? __pfx_create_or_delete_trace_uprobe+0x10/0x10 [ 86.792623][ T5306] ? __pfx_probes_write+0x10/0x10 [ 86.792634][ T5306] vfs_write+0x296/0xba0 [ 86.792654][ T5306] ? __pfx_vfs_write+0x10/0x10 [ 86.792667][ T5306] ? __fget_files+0x2a/0x420 [ 86.792682][ T5306] ? __fget_files+0x3a2/0x420 [ 86.792692][ T5306] ? __fget_files+0x2a/0x420 [ 86.792708][ T5306] ksys_write+0x150/0x270 [ 86.792722][ T5306] ? __pfx_ksys_write+0x10/0x10 [ 86.792740][ T5306] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.792753][ T5306] do_syscall_64+0x174/0x580 [ 86.792767][ T5306] ? trace_irq_disable+0x3b/0x140 [ 86.792779][ T5306] ? clear_bhb_loop+0x70/0xc0 [ 86.792795][ T5306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.792804][ T5306] RIP: 0033:0x7f3fc539e0d9 [ 86.792816][ T5306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.792825][ T5306] RSP: 002b:00007f3fc624ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 86.792839][ T5306] RAX: ffffffffffffffda RBX: 00007f3fc5625fa0 RCX: 00007f3fc539e0d9 [ 86.792846][ T5306] RDX: 0000000000000012 RSI: 00002000000001c0 RDI: 0000000000000004 [ 86.792853][ T5306] RBP: 00007f3fc6250050 R08: 0000000000000000 R09: 0000000000000000 [ 86.792858][ T5306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.792864][ T5306] R13: 00007f3fc5626038 R14: 00007f3fc5625fa0 R15: 00007ffd771cd198 [ 86.792882][ T5306] [ 86.927923][ T5306] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000008: 0000 [#1] SMP KASAN NOPTI [ 86.932925][ T5306] KASAN: null-ptr-deref in range [0x0000000000000040-0x0000000000000047] [ 86.936403][ T5306] CPU: 0 UID: 0 PID: 5306 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 86.940201][ T5306] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.944434][ T5306] RIP: 0010:path_put+0x24/0x60 [ 86.946452][ T5306] Code: 90 90 90 90 90 90 f3 0f 1e fa 41 56 53 48 89 fb 49 be 00 00 00 00 00 fc ff df e8 07 eb 7a ff 48 8d 7b 08 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 74 05 e8 20 1f ea ff 48 8b 7b 08 e8 37 88 03 00 48 [ 86.954443][ T5306] RSP: 0018:ffffc9000df779c8 EFLAGS: 00010203 [ 86.957055][ T5306] RAX: 0000000000000008 RBX: 000000000000003c RCX: ffff88801ae90000 [ 86.960285][ T5306] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000044 [ 86.963568][ T5306] RBP: ffffc9000df77b50 R08: ffffffff9a7dbdb7 R09: 0000000000000000 [ 86.966847][ T5306] R10: ffffffff9a7dbda0 R11: fffffbfff34fb7b7 R12: fffffffffffffff4 [ 86.970179][ T5306] R13: dffffc0000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 86.973520][ T5306] FS: 00007f3fc62506c0(0000) GS:ffff88808c54a000(0000) knlGS:0000000000000000 [ 86.977166][ T5306] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.979782][ T5306] CR2: 0000557180e70168 CR3: 0000000043e21000 CR4: 0000000000352ef0 [ 86.982974][ T5306] Call Trace: [ 86.984442][ T5306] [ 86.985608][ T5306] __trace_uprobe_create+0x53c/0xe40 [ 86.987813][ T5306] ? __pfx___trace_uprobe_create+0x10/0x10 [ 86.990290][ T5306] ? __kmalloc_noprof+0x396/0x720 [ 86.992404][ T5306] ? argv_split+0x18d/0x400 [ 86.994283][ T5306] ? argv_split+0x18d/0x400 [ 86.996156][ T5306] ? argv_split+0x378/0x400 [ 86.998023][ T5306] trace_probe_create+0xce/0x130 [ 87.000181][ T5306] ? __pfx___trace_uprobe_create+0x10/0x10 [ 87.002632][ T5306] ? __pfx_trace_probe_create+0x10/0x10 [ 87.005019][ T5306] dyn_event_create+0x4f/0x70 [ 87.006954][ T5306] create_or_delete_trace_uprobe+0x65/0xa0 [ 87.009595][ T5306] trace_parse_run_command+0x1f3/0x380 [ 87.012411][ T5306] ? __pfx_create_or_delete_trace_uprobe+0x10/0x10 [ 87.015243][ T5306] ? __pfx_probes_write+0x10/0x10 [ 87.017374][ T5306] vfs_write+0x296/0xba0 [ 87.019161][ T5306] ? __pfx_vfs_write+0x10/0x10 [ 87.021263][ T5306] ? __fget_files+0x2a/0x420 [ 87.023216][ T5306] ? __fget_files+0x3a2/0x420 [ 87.025218][ T5306] ? __fget_files+0x2a/0x420 [ 87.027151][ T5306] ksys_write+0x150/0x270 [ 87.029038][ T5306] ? __pfx_ksys_write+0x10/0x10 [ 87.031109][ T5306] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.033738][ T5306] do_syscall_64+0x174/0x580 [ 87.035670][ T5306] ? trace_irq_disable+0x3b/0x140 [ 87.037867][ T5306] ? clear_bhb_loop+0x70/0xc0 [ 87.039893][ T5306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.042490][ T5306] RIP: 0033:0x7f3fc539e0d9 [ 87.045005][ T5306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.055172][ T5306] RSP: 002b:00007f3fc624ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 87.058908][ T5306] RAX: ffffffffffffffda RBX: 00007f3fc5625fa0 RCX: 00007f3fc539e0d9 [ 87.062212][ T5306] RDX: 0000000000000012 RSI: 00002000000001c0 RDI: 0000000000000004 [ 87.065603][ T5306] RBP: 00007f3fc6250050 R08: 0000000000000000 R09: 0000000000000000 [ 87.068872][ T5306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.072352][ T5306] R13: 00007f3fc5626038 R14: 00007f3fc5625fa0 R15: 00007ffd771cd198 [ 87.075826][ T5306] [ 87.077310][ T5306] Modules linked in: [ 87.079532][ T5306] ---[ end trace 0000000000000000 ]--- [ 87.086500][ T5306] RIP: 0010:path_put+0x24/0x60 [ 87.088681][ T5306] Code: 90 90 90 90 90 90 f3 0f 1e fa 41 56 53 48 89 fb 49 be 00 00 00 00 00 fc ff df e8 07 eb 7a ff 48 8d 7b 08 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 74 05 e8 20 1f ea ff 48 8b 7b 08 e8 37 88 03 00 48 [ 87.097770][ T5306] RSP: 0018:ffffc9000df779c8 EFLAGS: 00010203 [ 87.101160][ T5306] RAX: 0000000000000008 RBX: 000000000000003c RCX: ffff88801ae90000 [ 87.105013][ T5306] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000044 [ 87.108451][ T5306] RBP: ffffc9000df77b50 R08: ffffffff9a7dbdb7 R09: 0000000000000000 [ 87.111902][ T5306] R10: ffffffff9a7dbda0 R11: fffffbfff34fb7b7 R12: fffffffffffffff4 [ 87.115922][ T5306] R13: dffffc0000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 87.119317][ T5306] FS: 00007f3fc62506c0(0000) GS:ffff88808c54a000(0000) knlGS:0000000000000000 [ 87.123506][ T5306] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 87.126393][ T5306] CR2: 0000557180e70168 CR3: 0000000043e21000 CR4: 0000000000352ef0 [ 87.130115][ T5306] Kernel panic - not syncing: Fatal exception [ 87.133813][ T5306] Kernel Offset: disabled [ 87.135562][ T5306] Rebooting in 86400 seconds..