program: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./dummy\x00', 0x42, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)='p:mygrou-/myevent ./dummy:0', 0x1b) (fail_nth: 9) [ 87.030718][ T4645] Bluetooth: hci0: command tx timeout [ 87.041353][ T1378] cfg80211: failed to load regulatory.db [ 87.152875][ T5321] FAULT_INJECTION: forcing a failure. [ 87.152875][ T5321] name failslab, interval 1, probability 0, space 0, times 1 [ 87.160431][ T5321] CPU: 0 UID: 0 PID: 5321 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 87.160475][ T5321] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 87.160481][ T5321] Call Trace: [ 87.160485][ T5321] [ 87.160489][ T5321] dump_stack_lvl+0xe8/0x150 [ 87.160536][ T5321] should_fail_ex+0x410/0x560 [ 87.160574][ T5321] should_failslab+0xa8/0x100 [ 87.160584][ T5321] __kmalloc_noprof+0xfe/0x720 [ 87.160594][ T5321] ? pcpu_alloc_noprof+0x100f/0x1900 [ 87.160604][ T5321] ? trace_probe_init+0x66/0x400 [ 87.160615][ T5321] ? trace_probe_init+0x66/0x400 [ 87.160628][ T5321] trace_probe_init+0x66/0x400 [ 87.160641][ T5321] alloc_trace_uprobe+0xb0/0x2a0 [ 87.160655][ T5321] __trace_uprobe_create+0x9b8/0xe40 [ 87.160665][ T5321] ? trace_kmalloc+0x2a/0xf0 [ 87.160674][ T5321] ? __pfx___trace_uprobe_create+0x10/0x10 [ 87.160681][ T5321] ? __kmalloc_noprof+0x38c/0x720 [ 87.160691][ T5321] ? __kmalloc_noprof+0x1ab/0x720 [ 87.160700][ T5321] ? argv_split+0x18d/0x400 [ 87.160735][ T5321] ? argv_split+0x18d/0x400 [ 87.160747][ T5321] ? argv_split+0x378/0x400 [ 87.160763][ T5321] trace_probe_create+0xce/0x130 [ 87.160780][ T5321] ? __pfx___trace_uprobe_create+0x10/0x10 [ 87.160789][ T5321] ? __pfx_trace_probe_create+0x10/0x10 [ 87.160810][ T5321] dyn_event_create+0x59/0x80 [ 87.160823][ T5321] create_or_delete_trace_uprobe+0x65/0xa0 [ 87.160836][ T5321] trace_parse_run_command+0x1f3/0x380 [ 87.160848][ T5321] ? __pfx_create_or_delete_trace_uprobe+0x10/0x10 [ 87.160861][ T5321] ? __pfx_probes_write+0x10/0x10 [ 87.160871][ T5321] vfs_write+0x296/0xba0 [ 87.160890][ T5321] ? __pfx_vfs_write+0x10/0x10 [ 87.160905][ T5321] ? __fget_files+0x2a/0x420 [ 87.160921][ T5321] ? __fget_files+0x3a2/0x420 [ 87.160933][ T5321] ? __fget_files+0x2a/0x420 [ 87.160950][ T5321] ksys_write+0x150/0x270 [ 87.160967][ T5321] ? __pfx_ksys_write+0x10/0x10 [ 87.160985][ T5321] do_syscall_64+0x166/0x520 [ 87.160999][ T5321] ? trace_irq_disable+0x3b/0x140 [ 87.161010][ T5321] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.161022][ T5321] ? clear_bhb_loop+0x70/0xc0 [ 87.161037][ T5321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.161048][ T5321] RIP: 0033:0x7f9e6c39e159 [ 87.161061][ T5321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.161071][ T5321] RSP: 002b:00007f9e6d26ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 87.161085][ T5321] RAX: ffffffffffffffda RBX: 00007f9e6c625fa0 RCX: 00007f9e6c39e159 [ 87.161092][ T5321] RDX: 000000000000001b RSI: 0000200000000400 RDI: 0000000000000004 [ 87.161097][ T5321] RBP: 00007f9e6d270050 R08: 0000000000000000 R09: 0000000000000000 [ 87.161102][ T5321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.161109][ T5321] R13: 00007f9e6c626038 R14: 00007f9e6c625fa0 R15: 00007ffff1598a88 [ 87.161127][ T5321] [ 87.306971][ T5321] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000008: 0000 [#1] SMP KASAN NOPTI [ 87.312120][ T5321] KASAN: null-ptr-deref in range [0x0000000000000040-0x0000000000000047] [ 87.315767][ T5321] CPU: 0 UID: 0 PID: 5321 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 87.319433][ T5321] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 87.323702][ T5321] RIP: 0010:path_put+0x24/0x60 [ 87.325863][ T5321] Code: 90 90 90 90 90 90 f3 0f 1e fa 41 56 53 48 89 fb 49 be 00 00 00 00 00 fc ff df e8 97 db 77 ff 48 8d 7b 08 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 74 05 e8 40 43 e9 ff 48 8b 7b 08 e8 e7 8e 03 00 48 [ 87.334324][ T5321] RSP: 0018:ffffc9000e1179c8 EFLAGS: 00010203 [ 87.336886][ T5321] RAX: 0000000000000008 RBX: 000000000000003c RCX: ffff888037f22580 [ 87.340322][ T5321] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000044 [ 87.343963][ T5321] RBP: ffffc9000e117b50 R08: ffffffff9aa35e37 R09: 0000000000000000 [ 87.347287][ T5321] R10: ffffffff9aa35e20 R11: fffffbfff3546bc7 R12: fffffffffffffff4 [ 87.350864][ T5321] R13: dffffc0000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 87.354241][ T5321] FS: 00007f9e6d2706c0(0000) GS:ffff88808c2cf000(0000) knlGS:0000000000000000 [ 87.358051][ T5321] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 87.361030][ T5321] CR2: 00007f9e6d15d9d0 CR3: 0000000013093000 CR4: 0000000000352ef0 [ 87.364526][ T5321] Call Trace: [ 87.366013][ T5321] [ 87.367319][ T5321] __trace_uprobe_create+0x53f/0xe40 [ 87.369577][ T5321] ? trace_kmalloc+0x2a/0xf0 [ 87.371697][ T5321] ? __pfx___trace_uprobe_create+0x10/0x10 [ 87.374250][ T5321] ? __kmalloc_noprof+0x38c/0x720 [ 87.376439][ T5321] ? __kmalloc_noprof+0x1ab/0x720 [ 87.378651][ T5321] ? argv_split+0x18d/0x400 [ 87.380688][ T5321] ? argv_split+0x18d/0x400 [ 87.382660][ T5321] ? argv_split+0x378/0x400 [ 87.384664][ T5321] trace_probe_create+0xce/0x130 [ 87.386865][ T5321] ? __pfx___trace_uprobe_create+0x10/0x10 [ 87.389191][ T5321] ? __pfx_trace_probe_create+0x10/0x10 [ 87.391468][ T5321] dyn_event_create+0x59/0x80 [ 87.393382][ T5321] create_or_delete_trace_uprobe+0x65/0xa0 [ 87.395750][ T5321] trace_parse_run_command+0x1f3/0x380 [ 87.397938][ T5321] ? __pfx_create_or_delete_trace_uprobe+0x10/0x10 [ 87.400548][ T5321] ? __pfx_probes_write+0x10/0x10 [ 87.402612][ T5321] vfs_write+0x296/0xba0 [ 87.404300][ T5321] ? __pfx_vfs_write+0x10/0x10 [ 87.406221][ T5321] ? __fget_files+0x2a/0x420 [ 87.408086][ T5321] ? __fget_files+0x3a2/0x420 [ 87.410013][ T5321] ? __fget_files+0x2a/0x420 [ 87.411836][ T5321] ksys_write+0x150/0x270 [ 87.413585][ T5321] ? __pfx_ksys_write+0x10/0x10 [ 87.415566][ T5321] do_syscall_64+0x166/0x520 [ 87.417424][ T5321] ? trace_irq_disable+0x3b/0x140 [ 87.419478][ T5321] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.421894][ T5321] ? clear_bhb_loop+0x70/0xc0 [ 87.423780][ T5321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.426096][ T5321] RIP: 0033:0x7f9e6c39e159 [ 87.427874][ T5321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.435981][ T5321] RSP: 002b:00007f9e6d26ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 87.439470][ T5321] RAX: ffffffffffffffda RBX: 00007f9e6c625fa0 RCX: 00007f9e6c39e159 [ 87.442821][ T5321] RDX: 000000000000001b RSI: 0000200000000400 RDI: 0000000000000004 [ 87.446114][ T5321] RBP: 00007f9e6d270050 R08: 0000000000000000 R09: 0000000000000000 [ 87.449370][ T5321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.452774][ T5321] R13: 00007f9e6c626038 R14: 00007f9e6c625fa0 R15: 00007ffff1598a88 [ 87.456127][ T5321] [ 87.457462][ T5321] Modules linked in: [ 87.460024][ T5321] ---[ end trace 0000000000000000 ]--- [ 87.467392][ T5321] RIP: 0010:path_put+0x24/0x60 [ 87.472288][ T5321] Code: 90 90 90 90 90 90 f3 0f 1e fa 41 56 53 48 89 fb 49 be 00 00 00 00 00 fc ff df e8 97 db 77 ff 48 8d 7b 08 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 74 05 e8 40 43 e9 ff 48 8b 7b 08 e8 e7 8e 03 00 48 [ 87.481565][ T5321] RSP: 0018:ffffc9000e1179c8 EFLAGS: 00010203 [ 87.485032][ T5321] RAX: 0000000000000008 RBX: 000000000000003c RCX: ffff888037f22580 [ 87.488949][ T5321] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000044 [ 87.493023][ T5321] RBP: ffffc9000e117b50 R08: ffffffff9aa35e37 R09: 0000000000000000 [ 87.497154][ T5321] R10: ffffffff9aa35e20 R11: fffffbfff3546bc7 R12: fffffffffffffff4 [ 87.501715][ T5321] R13: dffffc0000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 87.506054][ T5321] FS: 00007f9e6d2706c0(0000) GS:ffff88808c2cf000(0000) knlGS:0000000000000000 [ 87.510296][ T5321] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 87.513548][ T5321] CR2: 00007f9e6d15d9d0 CR3: 0000000013093000 CR4: 0000000000352ef0 [ 87.517841][ T5321] Kernel panic - not syncing: Fatal exception [ 87.521053][ T5321] Kernel Offset: disabled [ 87.523022][ T5321] Rebooting in 86400 seconds..