ci2-upstream-fs/strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ci2-upstream-fs/syz-executor517154158 <...> Warning: Permanently added '10.128.0.126' (ED25519) to the list of known hosts. execve("ci2-upstream-fs/syz-executor517154158", ["ci2-upstream-fs/syz-executor517154158"], 0x7ffdfe4a9920 /* 10 vars */) = 0 brk(NULL) = 0x5555764f5000 brk(0x5555764f5d80) = 0x5555764f5d80 arch_prctl(ARCH_SET_FS, 0x5555764f5400) = 0 set_tid_address(0x5555764f56d0) = 5606 set_robust_list(0x5555764f56e0, 24) = 0 rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlinkat(AT_FDCWD, "/proc/self/exe", "/root/ci2-upstream-fs/syz-executor517154158", 4096) = 43 getrandom("\xc5\xa0\x3d\x54\x90\xc4\xc3\x24", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x5555764f5d80 brk(0x555576516d80) = 0x555576516d80 brk(0x555576517000) = 0x555576517000 mprotect(0x7fe4f8a52000, 20480, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5607 attached , child_tidptr=0x5555764f56d0) = 5607 [pid 5606] rt_sigprocmask(SIG_SETMASK, [] [pid 5607] set_robust_list(0x5555764f56e0, 24 [pid 5606] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5607] <... set_robust_list resumed>) = 0 [pid 5607] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5607] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5607] setpgid(0, 0) = 0 [pid 5607] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5607] write(3, "1000", 4) = 4 [pid 5607] close(3) = 0 [pid 5607] write(1, "executing program\n", 18) = 18 executing program [pid 5607] mkdirat(AT_FDCWD, "./gadget", 0777) = 0 [pid 5607] mount(NULL, "./gadget", "gadgetfs", 0, NULL) = 0 [pid 5607] openat(AT_FDCWD, "./gadget/dummy_udc", O_RDWR) = 3 [pid 5607] write(3, "\x00\x00\x00\x00\x09\x02\x09\x00\x01\x01\x00\x80\x32\x12\x01\x00\x02\x00\x00\x00\x40\x25\x05\xa0\xa4\x00\x01\x00\x00\x00\x01", 31) = 31 [pid 5607] mkdirat(AT_FDCWD, "./mysys", 0777) = 0 [pid 5607] mount(NULL, "./mysys", "sysfs", 0, NULL) = 0 [pid 5607] openat(AT_FDCWD, "./mysys/bus/platform/drivers/dummy_hcd/unbind", O_WRONLY) = 4 [ 95.174915][ T5607] gadgetfs: bound to dummy_udc driver [ 95.220804][ T5607] dummy_hcd dummy_hcd.0: remove, state 1 [pid 5607] write(4, "dummy_hcd.0", 11) = 11 [pid 5607] exit_group(0) = ? [ 95.298752][ T10] hub 1-0:1.0: activate --> -108 [ 95.300169][ T5607] usb usb1: USB disconnect, device number 1 [ 95.327603][ T5607] dummy_hcd dummy_hcd.0: stopped [ 95.327633][ T5607] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 95.355475][ T5607] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 95.355493][ T5607] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 95.355506][ T5607] CPU: 1 UID: 0 PID: 5607 Comm: syz-executor517 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 95.355520][ T5607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 95.355527][ T5607] RIP: 0010:set_link_state+0x27/0x1000 [ 95.355571][ T5607] Code: 90 90 90 55 41 57 41 56 41 55 41 54 53 48 83 ec 38 49 89 fe 48 bb 00 00 00 00 00 fc ff df e8 20 b4 99 fa 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 8b 2a 03 fb 49 8b 16 4d 8d a6 a3 00 [ 95.355581][ T5607] RSP: 0018:ffffc900045179d0 EFLAGS: 00010246 [ 95.355593][ T5607] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff888038150000 [ 95.355602][ T5607] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 95.355609][ T5607] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 95.355616][ T5607] R10: 0000000000000000 R11: ffffffff8e1c3000 R12: dffffc0000000000 [ 95.355624][ T5607] R13: ffff88802b10d5e9 R14: 0000000000000000 R15: 0000000000000000 [ 95.355632][ T5607] FS: 0000000000000000(0000) GS:ffff888125d46000(0000) knlGS:0000000000000000 [ 95.355641][ T5607] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 95.355649][ T5607] CR2: 00007fe4f8a2683c CR3: 000000004293c000 CR4: 00000000003526f0 [ 95.355662][ T5607] Call Trace: [ 95.355667][ T5607] [ 95.355674][ T5607] dummy_pullup+0xbf/0x120 [ 95.355688][ T5607] ? __pfx_dummy_pullup+0x10/0x10 [ 95.355700][ T5607] usb_gadget_disconnect_locked+0x126/0x480 [ 95.355716][ T5607] gadget_unbind_driver+0xc2/0x410 [ 95.355732][ T5607] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 95.355747][ T5607] device_release_driver_internal+0x48b/0x880 [ 95.355764][ T5607] driver_detach+0x1f3/0x2d0 [ 95.355779][ T5607] bus_remove_driver+0x229/0x320 [ 95.355791][ T5607] usb_gadget_unregister_driver+0x4e/0x70 [ 95.355806][ T5607] dev_release+0x86/0x210 [ 95.355823][ T5607] ? __pfx_dev_release+0x10/0x10 [ 95.355840][ T5607] __fput+0x42a/0xa80 [ 95.355857][ T5607] task_work_run+0x1d9/0x270 [ 95.355875][ T5607] ? __pfx_task_work_run+0x10/0x10 [ 95.355892][ T5607] ? rt_spin_unlock+0x163/0x200 [ 95.355911][ T5607] do_exit+0x73a/0x2360 [ 95.355927][ T5607] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 95.355943][ T5607] ? reacquire_held_locks+0x104/0x190 [ 95.355957][ T5607] ? __pfx_do_exit+0x10/0x10 [ 95.355973][ T5607] ? rt_spin_unlock+0x157/0x200 [ 95.355986][ T5607] ? rt_spin_unlock+0x163/0x200 [ 95.355999][ T5607] do_group_exit+0x22d/0x2f0 [ 95.356015][ T5607] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.356031][ T5607] __x64_sys_exit_group+0x3f/0x40 [ 95.356055][ T5607] x64_sys_call+0x221a/0x2240 [ 95.356073][ T5607] do_syscall_64+0x174/0x580 [ 95.356096][ T5607] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.356114][ T5607] ? clear_bhb_loop+0x70/0xc0 [ 95.356135][ T5607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.356146][ T5607] RIP: 0033:0x7fe4f89bdd85 [ 95.356157][ T5607] Code: Unable to access opcode bytes at 0x7fe4f89bdd5b. [ 95.356162][ T5607] RSP: 002b:00007ffccac7f898 EFLAGS: 00000202 ORIG_RAX: 00000000000000e7 [ 95.356175][ T5607] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007fe4f89bdd85 [ 95.356183][ T5607] RDX: 00000000000000e7 RSI: ffffffffffffffd8 RDI: 0000000000000000 [ 95.356191][ T5607] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000006 [ 95.356197][ T5607] R10: 0000000000000006 R11: 0000000000000202 R12: 0000000000000000 [ 95.356204][ T5607] R13: 00007fe4f8a57110 R14: 00007fe4f8a593a8 R15: 00007fe4f8a593c0 [ 95.356216][ T5607] [ 95.356220][ T5607] Modules linked in: [ 95.356229][ T5607] ---[ end trace 0000000000000000 ]--- [ 95.356236][ T5607] RIP: 0010:set_link_state+0x27/0x1000 [ 95.356249][ T5607] Code: 90 90 90 55 41 57 41 56 41 55 41 54 53 48 83 ec 38 49 89 fe 48 bb 00 00 00 00 00 fc ff df e8 20 b4 99 fa 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 8b 2a 03 fb 49 8b 16 4d 8d a6 a3 00 [ 95.356258][ T5607] RSP: 0018:ffffc900045179d0 EFLAGS: 00010246 [ 95.356268][ T5607] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff888038150000 [ 95.356276][ T5607] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 95.356283][ T5607] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 95.356290][ T5607] R10: 0000000000000000 R11: ffffffff8e1c3000 R12: dffffc0000000000 [ 95.356297][ T5607] R13: ffff88802b10d5e9 R14: 0000000000000000 R15: 0000000000000000 [ 95.356305][ T5607] FS: 0000000000000000(0000) GS:ffff888125d46000(0000) knlGS:0000000000000000 [ 95.356314][ T5607] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 95.356322][ T5607] CR2: 00007fe4f8a2683c CR3: 000000004293c000 CR4: 00000000003526f0 [ 95.356337][ T5607] Kernel panic - not syncing: Fatal exception [ 95.356503][ T5607] Kernel Offset: disabled