ci-upstream-rust-kasan-gce/strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ci-upstream-rust-kasan-gce/syz-executor4070906443 <...> Warning: Permanently added '10.128.0.141' (ED25519) to the list of known hosts. execve("ci-upstream-rust-kasan-gce/syz-executor4070906443", ["ci-upstream-rust-kasan-gce/syz-executor4070906443"], 0x7ffcb9631e70 /* 10 vars */) = 0 brk(NULL) = 0x55557b980000 brk(0x55557b980d80) = 0x55557b980d80 arch_prctl(ARCH_SET_FS, 0x55557b980400) = 0 set_tid_address(0x55557b9806d0) = 5611 set_robust_list(0x55557b9806e0, 24) = 0 rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlinkat(AT_FDCWD, "/proc/self/exe", "/root/ci-upstream-rust-kasan-gce/syz-executor4070906443", 4096) = 55 getrandom("\xad\xd9\x3e\x87\xa0\x28\xe0\xf1", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55557b980d80 brk(0x55557b9a1d80) = 0x55557b9a1d80 brk(0x55557b9a2000) = 0x55557b9a2000 mprotect(0x7f4e7d9a9000, 20480, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-rust-kasan-gce/strace-static-x86_64: Process 5612 attached , child_tidptr=0x55557b9806d0) = 5612 [pid 5611] rt_sigprocmask(SIG_SETMASK, [] [pid 5612] set_robust_list(0x55557b9806e0, 24 [pid 5611] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5612] <... set_robust_list resumed>) = 0 [pid 5612] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5612] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5612] setpgid(0, 0) = 0 [pid 5612] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5612] write(3, "1000", 4) = 4 [pid 5612] close(3) = 0 [pid 5612] write(1, "executing program\n", 18) = 18 executing program [pid 5612] mkdirat(AT_FDCWD, "./my_configfs", 0777) = 0 [pid 5612] mount(NULL, "./my_configfs", "configfs", 0, NULL) = 0 [pid 5612] mkdirat(AT_FDCWD, "./my_configfs/usb_gadget/g1", 0777) = 0 [pid 5612] mkdirat(AT_FDCWD, "./my_configfs/usb_gadget/g1/configs/c.1", 0777) = 0 [pid 5612] mkdirat(AT_FDCWD, "./my_configfs/usb_gadget/g1/functions/midi2.usb0", 0777) = 0 [pid 5612] openat(AT_FDCWD, "./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/direction", O_WRONLY) = 3 [pid 5612] write(3, "1", 1) = 1 [pid 5612] symlinkat("./my_configfs/usb_gadget/g1/functions/midi2.usb0", AT_FDCWD, "./my_configfs/usb_gadget/g1/configs/c.1/midi2.usb0") = 0 [pid 5612] mkdirat(AT_FDCWD, "./config", 0777) = 0 [pid 5612] mount(NULL, "./config", "configfs", 0, NULL) = 0 [pid 5612] openat(AT_FDCWD, "./config/usb_gadget/g1/UDC", O_WRONLY) = 4 [pid 5612] write(4, "usbip-vudc.0", 12) = 12 [ 100.496333][ T5612] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000ee: 0000 [#1] SMP KASAN PTI [ 100.496353][ T5612] KASAN: null-ptr-deref in range [0x0000000000000770-0x0000000000000777] [ 100.496384][ T5612] CPU: 1 UID: 0 PID: 5612 Comm: syz-executor407 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 100.496403][ T5612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 100.496413][ T5612] RIP: 0010:f_midi2_free_ep+0x52/0x2f0 [ 100.496436][ T5612] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 f3 cd de fa 41 bc 70 07 00 00 4d 03 26 4c 89 e0 48 c1 e8 03 48 89 44 24 30 <0f> b6 04 28 84 c0 0f 85 5d 02 00 00 41 8b 1c 24 31 ff 89 de e8 95 [ 100.496448][ T5612] RSP: 0018:ffffc90004b87978 EFLAGS: 00010206 [ 100.496463][ T5612] RAX: 00000000000000ee RBX: ffff8880330fc000 RCX: ffff88802bc90000 [ 100.496474][ T5612] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 100.496483][ T5612] RBP: dffffc0000000000 R08: ffffffff8fd0c47f R09: 1ffffffff1fa188f [ 100.496494][ T5612] R10: dffffc0000000000 R11: fffffbfff1fa1890 R12: 0000000000000770 [ 100.496505][ T5612] R13: dffffc0000000000 R14: ffff8880330fc128 R15: dffffc0000000000 [ 100.496517][ T5612] FS: 000055557b980400(0000) GS:ffff888125af2000(0000) knlGS:0000000000000000 [ 100.496530][ T5612] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 100.496540][ T5612] CR2: 000055a5ec8d7168 CR3: 00000000453fa000 CR4: 00000000003526f0 [ 100.496554][ T5612] Call Trace: [ 100.496559][ T5612] [ 100.496570][ T5612] f_midi2_unbind+0x9b/0x340 [ 100.496585][ T5612] purge_configs_funcs+0x248/0x3d0 [ 100.496610][ T5612] configfs_composite_unbind+0xa0/0x1b0 [ 100.496631][ T5612] gadget_unbind_driver+0x1cb/0x410 [ 100.496648][ T5612] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 100.496663][ T5612] device_release_driver_internal+0x48b/0x880 [ 100.496685][ T5612] driver_detach+0x1f3/0x2d0 [ 100.496704][ T5612] bus_remove_driver+0x229/0x320 [ 100.496729][ T5612] usb_gadget_unregister_driver+0x4e/0x70 [ 100.496755][ T5612] gadget_dev_desc_UDC_store+0x17a/0x2f0 [ 100.496770][ T5612] ? __pfx_gadget_dev_desc_UDC_store+0x10/0x10 [ 100.496787][ T5612] configfs_write_iter+0x33a/0x430 [ 100.496806][ T5612] vfs_write+0x61e/0xbb0 [ 100.496827][ T5612] ? __pfx_vfs_write+0x10/0x10 [ 100.496852][ T5612] ksys_write+0x156/0x270 [ 100.496876][ T5612] ? __pfx_ksys_write+0x10/0x10 [ 100.496897][ T5612] do_syscall_64+0x17b/0x530 [ 100.496913][ T5612] ? irqentry_exit+0x10f/0x8f0 [ 100.496927][ T5612] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.496943][ T5612] ? clear_bhb_loop+0x40/0x90 [ 100.496961][ T5612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.496976][ T5612] RIP: 0033:0x7f4e7d916789 [ 100.496993][ T5612] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48 [ 100.497005][ T5612] RSP: 002b:00007fff00b78268 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 100.497020][ T5612] RAX: ffffffffffffffda RBX: 6769666e6f632f2e RCX: 00007f4e7d916789 [ 100.497031][ T5612] RDX: 0000000000000001 RSI: 00002000000004c0 RDI: 0000000000000004 [ 100.497040][ T5612] RBP: 6e6f635f796d2f2e R08: 0000000000000006 R09: 0000000000000006 [ 100.497049][ T5612] R10: 0000000000000006 R11: 0000000000000246 R12: 00007fff00b783d8 [ 100.497059][ T5612] R13: 431bde82d7b634db R14: 00007f4e7d9a9c40 R15: 0000000000000002 [ 100.497075][ T5612] [ 100.497080][ T5612] Modules linked in: [ 100.497096][ T5612] ---[ end trace 0000000000000000 ]--- [ 100.497106][ T5612] RIP: 0010:f_midi2_free_ep+0x52/0x2f0 [ 100.497124][ T5612] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 f3 cd de fa 41 bc 70 07 00 00 4d 03 26 4c 89 e0 48 c1 e8 03 48 89 44 24 30 <0f> b6 04 28 84 c0 0f 85 5d 02 00 00 41 8b 1c 24 31 ff 89 de e8 95 [ 100.497136][ T5612] RSP: 0018:ffffc90004b87978 EFLAGS: 00010206 [ 100.497148][ T5612] RAX: 00000000000000ee RBX: ffff8880330fc000 RCX: ffff88802bc90000 [ 100.497178][ T5612] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 100.497187][ T5612] RBP: dffffc0000000000 R08: ffffffff8fd0c47f R09: 1ffffffff1fa188f [ 100.497199][ T5612] R10: dffffc0000000000 R11: fffffbfff1fa1890 R12: 0000000000000770 [ 100.497209][ T5612] R13: dffffc0000000000 R14: ffff8880330fc128 R15: dffffc0000000000 [ 100.497221][ T5612] FS: 000055557b980400(0000) GS:ffff888125af2000(0000) knlGS:0000000000000000 [ 100.497234][ T5612] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 100.497245][ T5612] CR2: 000055a5ec8d7168 CR3: 00000000453fa000 CR4: 00000000003526f0 [ 100.497259][ T5612] Kernel panic - not syncing: Fatal exception [ 100.497449][ T5612] Kernel Offset: disabled