./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor850038807 <...> Warning: Permanently added '10.128.1.70' (ED25519) to the list of known hosts. execve("./syz-executor850038807", ["./syz-executor850038807"], 0x7ffca70c80f0 /* 10 vars */) = 0 brk(NULL) = 0x55556b9bb000 brk(0x55556b9bbd00) = 0x55556b9bbd00 arch_prctl(ARCH_SET_FS, 0x55556b9bb380) = 0 set_tid_address(0x55556b9bb650) = 5851 set_robust_list(0x55556b9bb660, 24) = 0 rseq(0x55556b9bbca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor850038807", 4096) = 27 getrandom("\x3c\x12\xca\xba\xb7\x88\xae\xbc", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55556b9bbd00 brk(0x55556b9dcd00) = 0x55556b9dcd00 brk(0x55556b9dd000) = 0x55556b9dd000 mprotect(0x7f221137c000, 16384, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 write(1, "executing program\n", 18executing program ) = 18 openat(AT_FDCWD, "/dev/comedi0", O_RDONLY|O_EXCL|O_LARGEFILE) = 3 [ 78.266978][ T5851] comedi comedi0: pcl818: I/O port conflict (0x4,16) [ 78.273932][ T5851] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] SMP KASAN PTI [ 78.285808][ T5851] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f] [ 78.294216][ T5851] CPU: 1 UID: 0 PID: 5851 Comm: syz-executor850 Not tainted 6.16.0-rc4-next-20250704-syzkaller #0 PREEMPT(full) [ 78.306193][ T5851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 78.316230][ T5851] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0 [ 78.321792][ T5851] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 79 ca 34 f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 58 ca 34 f9 4d 8b 24 24 48 83 c3 [ 78.341379][ T5851] RSP: 0018:ffffc900040e79f0 EFLAGS: 00010206 [ 78.347428][ T5851] RAX: 0000000000000005 RBX: ffff888031712680 RCX: ffff888033e0da00 [ 78.355394][ T5851] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88802faf0800 [ 78.363349][ T5851] RBP: 0000000000000001 R08: ffff88802faf092f R09: 1ffff11005f5e125 [ 78.371297][ T5851] R10: dffffc0000000000 R11: ffffffff88efad60 R12: 0000000000000028 [ 78.379244][ T5851] R13: dffffc0000000000 R14: ffff88802faf0800 R15: dffffc0000000000 [ 78.387191][ T5851] FS: 000055556b9bb380(0000) GS:ffff8881258af000(0000) knlGS:0000000000000000 [ 78.396095][ T5851] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 78.402653][ T5851] CR2: 00000000005fdeb8 CR3: 00000000733ce000 CR4: 00000000003526f0 [ 78.410606][ T5851] Call Trace: [ 78.413901][ T5851] [ 78.416811][ T5851] pcl818_detach+0x66/0xd0 [ 78.421214][ T5851] comedi_device_detach+0x134/0x720 [ 78.426393][ T5851] comedi_device_attach+0x568/0x670 [ 78.431576][ T5851] comedi_unlocked_ioctl+0x686/0xf40 [ 78.436841][ T5851] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 78.442630][ T5851] ? _raw_spin_lock_irq+0xae/0xf0 [ 78.447649][ T5851] ? __pfx_ptrace_notify+0x10/0x10 [ 78.452757][ T5851] ? bpf_lsm_file_ioctl+0x9/0x20 [ 78.457673][ T5851] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 78.463470][ T5851] __se_sys_ioctl+0xf9/0x170 [ 78.468136][ T5851] do_syscall_64+0xfa/0x3b0 [ 78.472617][ T5851] ? lockdep_hardirqs_on+0x9c/0x150 [ 78.477793][ T5851] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.483834][ T5851] ? clear_bhb_loop+0x60/0xb0 [ 78.488492][ T5851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.494360][ T5851] RIP: 0033:0x7f22113093e9 [ 78.498772][ T5851] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 78.518355][ T5851] RSP: 002b:00007ffdaf9e46e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 78.526752][ T5851] RAX: ffffffffffffffda RBX: 00007ffdaf9e48b8 RCX: 00007f22113093e9 [ 78.534708][ T5851] RDX: 0000200000000080 RSI: 0000000040946400 RDI: 0000000000000003 [ 78.542660][ T5851] RBP: 00007f221137c610 R08: 0000000000000000 R09: 00007ffdaf9e48b8 [ 78.550637][ T5851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.558587][ T5851] R13: 00007ffdaf9e48a8 R14: 0000000000000001 R15: 0000000000000001 [ 78.566543][ T5851] [ 78.569543][ T5851] Modules linked in: [ 78.573572][ T5851] ---[ end trace 0000000000000000 ]--- [ 78.579051][ T5851] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0 [ 78.584647][ T5851] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 79 ca 34 f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 58 ca 34 f9 4d 8b 24 24 48 83 c3 [ 78.604301][ T5851] RSP: 0018:ffffc900040e79f0 EFLAGS: 00010206 [ 78.610371][ T5851] RAX: 0000000000000005 RBX: ffff888031712680 RCX: ffff888033e0da00 [ 78.618448][ T5851] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88802faf0800 [ 78.626481][ T5851] RBP: 0000000000000001 R08: ffff88802faf092f R09: 1ffff11005f5e125 [ 78.634561][ T5851] R10: dffffc0000000000 R11: ffffffff88efad60 R12: 0000000000000028 [ 78.642560][ T5851] R13: dffffc0000000000 R14: ffff88802faf0800 R15: dffffc0000000000 [ 78.650609][ T5851] FS: 000055556b9bb380(0000) GS:ffff8881258af000(0000) knlGS:0000000000000000 [ 78.659594][ T5851] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 78.666303][ T5851] CR2: 00000000005fdeb8 CR3: 00000000733ce000 CR4: 00000000003526f0 [ 78.674363][ T5851] Kernel panic - not syncing: Fatal exception [ 78.680737][ T5851] Kernel Offset: disabled [ 78.685496][ T5851] Rebooting in 86400 seconds..