ci-upstream-kasan-gce/strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ci-upstream-kasan-gce/syz-executor3630894995 <...> [ 91.935490][ T10] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.0.24' (ED25519) to the list of known hosts. execve("ci-upstream-kasan-gce/syz-executor3630894995", ["ci-upstream-kasan-gce/syz-executor3630894995"], 0x7ffe8006cad0 /* 10 vars */) = 0 brk(NULL) = 0x55555874d000 brk(0x55555874dd80) = 0x55555874dd80 arch_prctl(ARCH_SET_FS, 0x55555874d400) = 0 set_tid_address(0x55555874d6d0) = 5637 set_robust_list(0x55555874d6e0, 24) = 0 rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlinkat(AT_FDCWD, "/proc/self/exe", "/root/ci-upstream-kasan-gce/syz-executor3630894995", 4096) = 50 getrandom("\x60\x5f\xa5\x31\x22\x0c\xc9\x02", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55555874dd80 brk(0x55555876ed80) = 0x55555876ed80 brk(0x55555876f000) = 0x55555876f000 mprotect(0x7f3b63211000, 20480, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-kasan-gce/strace-static-x86_64: Process 5638 attached , child_tidptr=0x55555874d6d0) = 5638 [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 5638] set_robust_list(0x55555874d6e0, 24 [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5638] <... set_robust_list resumed>) = 0 [pid 5638] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5638] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5638] setpgid(0, 0) = 0 [pid 5638] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5638] write(3, "1000", 4) = 4 [pid 5638] close(3) = 0 [pid 5638] write(1, "executing program\n", 18) = 18 executing program [pid 5638] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5638] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffdd3c71d90) = 0 [pid 5638] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5638] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffdd3c71d90) = 0 [pid 5638] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffdd3c71d90) = 0 [pid 5638] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffdd3c71d90) = 0 [pid 5638] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffdd3c71d90) = 0 [pid 5638] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffdd3c70d80) = 18 [pid 5638] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffdd3c71d90) = 0 [ 94.891469][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [pid 5638] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffdd3c71d90) = 0 [pid 5638] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffdd3c71d90) = 0 [pid 5638] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffdd3c70d80) = 18 [pid 5638] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffdd3c71d90) = 0 [pid 5638] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffdd3c70d80) = 9 [pid 5638] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffdd3c71d90) = 0 [pid 5638] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffdd3c70d80) = 27 [pid 5638] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffdd3c71d90) = 0 [pid 5638] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffdd3c70d80) = 4 [pid 5638] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffdd3c71d90) = 0 [pid 5638] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffdd3c70d80) = 8 [pid 5638] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffdd3c71d90) = 0 [pid 5638] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffdd3c70d80) = 8 [pid 5638] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffdd3c71d90) = 0 [pid 5638] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffdd3c70d80) = 8 [pid 5638] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffdd3c71d90) = 0 [ 95.041053][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 95.043574][ T10] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 95.068239][ T10] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 95.068270][ T10] usb 1-1: config 0 has no interface number 0 [ 95.068319][ T10] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [pid 5638] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0x2) = 0 [pid 5638] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5638] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f3b63217b4c) = -1 EINVAL (Invalid argument) [pid 5638] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffdd3c70d80) = 0 [ 95.121246][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.121276][ T10] usb 1-1: Product: syz [ 95.121292][ T10] usb 1-1: Manufacturer: syz [ 95.121306][ T10] usb 1-1: SerialNumber: syz [ 95.125174][ T10] usb 1-1: config 0 descriptor?? [ 95.166774][ T10] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 95.166804][ T10] em28xx 1-1:0.132: Video interface 132 found: [pid 5638] exit_group(0) = ? [pid 5638] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5638, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-kasan-gce/strace-static-x86_64: Process 5641 attached , child_tidptr=0x55555874d6d0) = 5641 [pid 5637] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5641] set_robust_list(0x55555874d6e0, 24) = 0 [pid 5641] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5641] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5641] setpgid(0, 0) = 0 [pid 5641] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5641] write(3, "1000", 4) = 4 [pid 5641] close(3) = 0 [pid 5641] write(1, "executing program\n", 18) = 18 executing program [pid 5641] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5641] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffdd3c71d90) = 0 [pid 5641] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5641] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffdd3c71d90) = 0 [ 95.421541][ T10] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 95.486962][ T10] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 95.487031][ T10] em28xx 1-1:0.132: board has no eeprom [ 95.541103][ T10] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 95.541141][ T10] em28xx 1-1:0.132: analog set to bulk mode. [ 95.543521][ T189] em28xx 1-1:0.132: Registering V4L2 extension [ 95.559983][ T10] usb 1-1: USB disconnect, device number 2 [ 95.568695][ T10] em28xx 1-1:0.132: Disconnecting em28xx [ 95.677798][ T189] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 95.677819][ T189] em28xx 1-1:0.132: AC97 chip type couldn't ** replaying previous printk message ** [ 95.677819][ T189] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 95.677842][ T189] em28xx 1-1:0.132: No AC97 audio processor [ 95.680455][ T189] usb 1-1: Decoder not found [ 95.680474][ T189] em28xx 1-1:0.132: failed to create media graph [ 95.680503][ T189] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 95.693998][ T189] INFO: trying to register non-static key. [ 95.734569][ T189] The code is fine but needs lockdep annotation, or maybe [ 95.741729][ T189] you didn't initialize this object before use? [ 95.747993][ T189] turning off the locking correctness validator. [ 95.754338][ T189] CPU: 0 UID: 0 PID: 189 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(full) [ 95.763693][ T189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 95.773786][ T189] Workqueue: events request_module_async [ 95.779455][ T189] Call Trace: [ 95.782741][ T189] [ 95.785682][ T189] dump_stack_lvl+0xe8/0x150 [ 95.790287][ T189] assign_lock_key+0x133/0x150 [ 95.795077][ T189] register_lock_class+0xcc/0x2e0 [ 95.800122][ T189] __lock_acquire+0x10c/0x2de0 [ 95.804907][ T189] ? __mutex_trylock_common+0x15f/0x270 [ 95.810470][ T189] ? __pfx___mutex_trylock_common+0x10/0x10 [ 95.816392][ T189] lock_acquire+0x115/0x350 [ 95.820897][ T189] ? __wake_up_common_lock+0x30/0x1f0 [ 95.826337][ T189] ? rcu_is_watching+0x16/0xb0 [ 95.831124][ T189] _raw_spin_lock_irqsave+0x40/0x60 [ 95.836345][ T189] ? __wake_up_common_lock+0x30/0x1f0 [ 95.841743][ T189] __wake_up_common_lock+0x30/0x1f0 [ 95.846991][ T189] ? __pfx___mutex_lock+0x10/0x10 [ 95.852046][ T189] __vb2_queue_cancel+0x2de/0xde0 [ 95.857099][ T189] ? __vb2_cleanup_fileio+0x134/0x1f0 [ 95.862478][ T189] vb2_core_queue_release+0x2f/0x150 [ 95.867768][ T189] vb2_video_unregister_device+0x15b/0x200 [ 95.873587][ T189] em28xx_v4l2_init+0x1c89/0x3150 [ 95.878630][ T189] em28xx_init_extension+0x120/0x1d0 [ 95.883923][ T189] ? process_scheduled_works+0x97a/0x1630 [ 95.889654][ T189] process_scheduled_works+0xc3d/0x1630 [ 95.895225][ T189] ? __pfx_process_scheduled_works+0x10/0x10 [ 95.901239][ T189] ? assign_work+0x3cf/0x5d0 [ 95.905837][ T189] worker_thread+0xa47/0xfb0 [ 95.910479][ T189] ? __kthread_parkme+0x71/0x1f0 [ 95.915429][ T189] kthread+0x38b/0x480 [ 95.919501][ T189] ? __pfx_worker_thread+0x10/0x10 [ 95.924622][ T189] ? __pfx_kthread+0x10/0x10 [ 95.929214][ T189] ret_from_fork+0x514/0xb70 [ 95.933810][ T189] ? __pfx_ret_from_fork+0x10/0x10 [ 95.938928][ T189] ? __switch_to+0xc89/0x1420 [ 95.943631][ T189] ? __pfx_kthread+0x10/0x10 [ 95.948244][ T189] ret_from_fork_asm+0x1a/0x30 [ 95.953035][ T189] [ 95.956121][ T189] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 95.968031][ T189] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 95.976450][ T189] CPU: 0 UID: 0 PID: 189 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(full) [ 95.985739][ T189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 95.995804][ T189] Workqueue: events request_module_async [ 96.001455][ T189] RIP: 0010:__wake_up_common_lock+0xd6/0x1f0 [ 96.007449][ T189] Code: 0f 84 d4 00 00 00 44 8b 64 24 04 eb 13 48 ba 00 00 00 00 00 fc ff df 4c 39 fd 0f 84 ba 00 00 00 49 89 ee 48 89 e8 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 f7 e8 dc 89 98 00 48 ba 00 00 00 00 00 fc [ 96.027074][ T189] RSP: 0018:ffffc9000202f880 EFLAGS: 00010046 [ 96.033165][ T189] RAX: 0000000000000000 RBX: ffff88807f1d5740 RCX: 0000000000000001 [ 96.041140][ T189] RDX: dffffc0000000000 RSI: 0000000000000004 RDI: ffffc9000202f7e0 [ 96.049130][ T189] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 96.057103][ T189] R10: dffffc0000000000 R11: fffff52000405efc R12: 0000000000000000 [ 96.065084][ T189] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88807f1d57d0 [ 96.073061][ T189] FS: 0000000000000000(0000) GS:ffff888123abf000(0000) knlGS:0000000000000000 [ 96.081995][ T189] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 96.088583][ T189] CR2: 00007ffe32e3e5e9 CR3: 00000000728ae000 CR4: 00000000003526f0 [ 96.096559][ T189] Call Trace: [ 96.099861][ T189] [ 96.102800][ T189] __vb2_queue_cancel+0x2de/0xde0 [ 96.107861][ T189] ? __vb2_cleanup_fileio+0x134/0x1f0 [ 96.113243][ T189] vb2_core_queue_release+0x2f/0x150 [ 96.118534][ T189] vb2_video_unregister_device+0x15b/0x200 [ 96.124355][ T189] em28xx_v4l2_init+0x1c89/0x3150 [ 96.129425][ T189] em28xx_init_extension+0x120/0x1d0 [ 96.134720][ T189] ? process_scheduled_works+0x97a/0x1630 [ 96.140475][ T189] process_scheduled_works+0xc3d/0x1630 [ 96.146043][ T189] ? __pfx_process_scheduled_works+0x10/0x10 [ 96.152038][ T189] ? assign_work+0x3cf/0x5d0 [ 96.156636][ T189] worker_thread+0xa47/0xfb0 [ 96.161240][ T189] ? __kthread_parkme+0x71/0x1f0 [ 96.166191][ T189] kthread+0x38b/0x480 [ 96.170263][ T189] ? __pfx_worker_thread+0x10/0x10 [ 96.175379][ T189] ? __pfx_kthread+0x10/0x10 [ 96.179971][ T189] ret_from_fork+0x514/0xb70 [ 96.184572][ T189] ? __pfx_ret_from_fork+0x10/0x10 [ 96.189692][ T189] ? __switch_to+0xc89/0x1420 [ 96.194382][ T189] ? __pfx_kthread+0x10/0x10 [ 96.198978][ T189] ret_from_fork_asm+0x1a/0x30 [ 96.203754][ T189] [ 96.206772][ T189] Modules linked in: [ 96.210680][ T189] ---[ end trace 0000000000000000 ]--- [ 96.216138][ T189] RIP: 0010:__wake_up_common_lock+0xd6/0x1f0 [ 96.216165][ T189] Code: 0f 84 d4 00 00 00 44 8b 64 24 04 eb 13 48 ba 00 00 00 00 00 fc ff df 4c 39 fd 0f 84 ba 00 00 00 49 89 ee 48 89 e8 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 f7 e8 dc 89 98 00 48 ba 00 00 00 00 00 fc [ 96.216177][ T189] RSP: 0018:ffffc9000202f880 EFLAGS: 00010046 [ 96.216191][ T189] RAX: 0000000000000000 RBX: ffff88807f1d5740 RCX: 0000000000000001 [ 96.216201][ T189] RDX: dffffc0000000000 RSI: 0000000000000004 RDI: ffffc9000202f7e0 [ 96.216210][ T189] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 96.216219][ T189] R10: dffffc0000000000 R11: fffff52000405efc R12: 0000000000000000 [ 96.216229][ T189] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88807f1d57d0 [ 96.216239][ T189] FS: 0000000000000000(0000) GS:ffff888123abf000(0000) knlGS:0000000000000000 [ 96.216269][ T189] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 96.216280][ T189] CR2: 00007ffe32e3e5e9 CR3: 00000000728ae000 CR4: 00000000003526f0 [ 96.216295][ T189] Kernel panic - not syncing: Fatal exception [ 96.317394][ T189] Kernel Offset: disabled [ 96.321727][ T189] Rebooting in 86400 seconds..