ci-upstream-kasan-gce-selinux-root/strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ci-upstream-kasan-gce-selinux-root/syz-executor2519138474 <...> Warning: Permanently added '10.128.1.113' (ED25519) to the list of known hosts. execve("ci-upstream-kasan-gce-selinux-root/syz-executor2519138474", ["ci-upstream-kasan-gce-selinux-root/syz-executor2519138474"], 0x7ffd9025d1b0 /* 10 vars */) = 0 brk(NULL) = 0x5555624d4000 brk(0x5555624d4d80) = 0x5555624d4d80 arch_prctl(ARCH_SET_FS, 0x5555624d4400) = 0 set_tid_address(0x5555624d46d0) = 5617 set_robust_list(0x5555624d46e0, 24) = 0 rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlinkat(AT_FDCWD, "/proc/self/exe", "/root/ci-upstream-kasan-gce-selinux-root/syz-executor2519138474", 4096) = 63 getrandom("\x56\xd6\xa5\x2a\x5c\x40\x34\x4e", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x5555624d4d80 brk(0x5555624f5d80) = 0x5555624f5d80 brk(0x5555624f6000) = 0x5555624f6000 mprotect(0x7f73ce4a3000, 20480, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 unshare(CLONE_NEWPID) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-kasan-gce-selinux-root/strace-static-x86_64: Process 5618 attached [pid 5618] set_robust_list(0x5555624d46e0, 24 [pid 5617] <... clone resumed>, child_tidptr=0x5555624d46d0) = 5618 [pid 5617] rt_sigprocmask(SIG_SETMASK, [] [pid 5618] <... set_robust_list resumed>) = 0 [pid 5617] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5618] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5618] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5618] getppid() = 0 [pid 5618] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5618] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5618] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5618] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5618] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5618] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5618] unshare(CLONE_NEWNS) = 0 [pid 5618] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5618] unshare(CLONE_NEWIPC) = 0 [ 63.229363][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 63.229381][ T30] audit: type=1400 audit(1789029501.006:129): avc: denied { execmem } for pid=5617 comm="syz-executor251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [pid 5618] unshare(CLONE_NEWCGROUP) = 0 [pid 5618] unshare(CLONE_NEWUTS) = 0 [pid 5618] unshare(CLONE_SYSVSEM) = 0 [pid 5618] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5618] write(3, "16777216", 8) = 8 [pid 5618] close(3) = 0 [pid 5618] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5618] write(3, "536870912", 9) = 9 [pid 5618] close(3) = 0 [pid 5618] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5618] write(3, "1024", 4) = 4 [pid 5618] close(3) = 0 [pid 5618] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5618] write(3, "8192", 4) = 4 [pid 5618] close(3) = 0 [pid 5618] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5618] write(3, "1024", 4) = 4 [pid 5618] close(3) = 0 [pid 5618] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5618] write(3, "1024", 4) = 4 [pid 5618] close(3) = 0 [pid 5618] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5618] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5618] close(3) = 0 [pid 5618] getpid() = 1 [pid 5618] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [ 68.015613][ T983] dump_stack_lvl+0x100/0x190 [ 68.020278][ T983] register_lock_class+0x79b/0x7b0 [ 68.025364][ T983] __lock_acquire+0x25d/0x1f40 [ 68.030098][ T983] ? lock_acquire+0x5e/0x380 [ 68.034662][ T983] lock_acquire+0x1d1/0x380 [ 68.039138][ T983] ? __wake_up+0x1c/0x60 [ 68.043357][ T983] ? vb2_video_unregister_device+0x12b/0x2e0 [ 68.049325][ T983] ? kobject_put+0xb9/0x640 [ 68.053818][ T983] ? _raw_spin_lock_irqsave+0x52/0x60 [ 68.059161][ T983] _raw_spin_lock_irqsave+0x3a/0x60 [ 68.064342][ T983] ? __wake_up+0x1c/0x60 [ 68.068558][ T983] __wake_up+0x1c/0x60 [ 68.072606][ T983] __vb2_queue_cancel+0x348/0xe90 [ 68.077603][ T983] ? __pfx_device_del+0x10/0x10 [ 68.082425][ T983] ? kobject_put+0xb9/0x640 [ 68.086915][ T983] vb2_core_queue_release+0x27/0x190 [ 68.092171][ T983] vb2_video_unregister_device+0x152/0x2e0 [ 68.097954][ T983] em28xx_v4l2_init.cold+0xe1a/0x3a18 [ 68.103310][ T983] ? __pfx_em28xx_v4l2_init+0x10/0x10 [ 68.108655][ T983] em28xx_init_extension+0x13a/0x200 [ 68.113924][ T983] request_module_async+0x1e/0x30 [ 68.118918][ T983] process_one_work+0xac7/0x1b10 [ 68.123842][ T983] ? __pfx_process_one_work+0x10/0x10 [ 68.129190][ T983] ? lock_acquire+0x1d1/0x380 [ 68.133839][ T983] ? __pfx_request_module_async+0x10/0x10 [ 68.139527][ T983] worker_thread+0x5ef/0xe50 [ 68.144093][ T983] ? __pfx_worker_thread+0x10/0x10 [ 68.149178][ T983] ? kthread+0x13a/0x450 [ 68.153394][ T983] ? __pfx_worker_thread+0x10/0x10 [ 68.158479][ T983] kthread+0x373/0x450 [ 68.162523][ T983] ? __pfx_kthread+0x10/0x10 [ 68.167088][ T983] ret_from_fork+0x730/0xd60 [ 68.171660][ T983] ? __pfx_ret_from_fork+0x10/0x10 [ 68.176747][ T983] ? __switch_to+0x800/0x10f0 [ 68.181399][ T983] ? __pfx_kthread+0x10/0x10 [ 68.185963][ T983] ret_from_fork_asm+0x1a/0x30 [ 68.190698][ T983] [ 68.193706][ T983] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI [ 68.205731][ T983] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 68.214112][ T983] CPU: 1 UID: 0 PID: 983 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT(full) [ 68.223362][ T983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 68.233388][ T983] Workqueue: events request_module_async [ 68.239006][ T983] RIP: 0010:__wake_up_common+0x9b/0x1f0 [ 68.244524][ T983] Code: 02 00 0f 85 5b 01 00 00 48 8b 5b 40 48 8d 43 e8 4c 39 fb 0f 84 b3 00 00 00 48 ba 00 00 00 00 00 fc ff df 48 89 d9 48 c1 e9 03 <80> 3c 11 00 0f 85 18 01 00 00 48 bd 00 00 00 00 00 fc ff df 4c 8b [ 68.264114][ T983] RSP: 0018:ffffc90004cb79a0 EFLAGS: 00010046 [ 68.270151][ T983] RAX: ffffffffffffffe8 RBX: 0000000000000000 RCX: 0000000000000000 [ 68.278095][ T983] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff88803156d790 [ 68.286047][ T983] RBP: ffff88803156d790 R08: 0000000000000000 R09: fffff52000996f2b [ 68.293989][ T983] R10: 0000000000000003 R11: 0000000000000001 R12: 0000000000000003 [ 68.301931][ T983] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88803156d7d0 [ 68.309873][ T983] FS: 0000000000000000(0000) GS:ffff888123c5a000(0000) knlGS:0000000000000000 [ 68.318776][ T983] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 68.325332][ T983] CR2: 00007fc78f805e9c CR3: 000000000eb96000 CR4: 00000000003526f0 [ 68.333285][ T983] Call Trace: [ 68.336536][ T983] [ 68.339451][ T983] __wake_up+0x31/0x60 [ 68.343497][ T983] __vb2_queue_cancel+0x348/0xe90 [ 68.348501][ T983] ? __pfx_device_del+0x10/0x10 [ 68.353323][ T983] ? kobject_put+0xb9/0x640 [ 68.357801][ T983] vb2_core_queue_release+0x27/0x190 [ 68.363055][ T983] vb2_video_unregister_device+0x152/0x2e0 [ 68.368837][ T983] em28xx_v4l2_init.cold+0xe1a/0x3a18 [ 68.374187][ T983] ? __pfx_em28xx_v4l2_init+0x10/0x10 [ 68.379530][ T983] em28xx_init_extension+0x13a/0x200 [ 68.384796][ T983] request_module_async+0x1e/0x30 [ 68.389790][ T983] process_one_work+0xac7/0x1b10 [ 68.394703][ T983] ? __pfx_process_one_work+0x10/0x10 [ 68.400059][ T983] ? lock_acquire+0x1d1/0x380 [ 68.404707][ T983] ? __pfx_request_module_async+0x10/0x10 [ 68.410395][ T983] worker_thread+0x5ef/0xe50 [ 68.414971][ T983] ? __pfx_worker_thread+0x10/0x10 [ 68.420057][ T983] ? kthread+0x13a/0x450 [ 68.424273][ T983] ? __pfx_worker_thread+0x10/0x10 [ 68.429358][ T983] kthread+0x373/0x450 [ 68.433401][ T983] ? __pfx_kthread+0x10/0x10 [ 68.437964][ T983] ret_from_fork+0x730/0xd60 [ 68.442534][ T983] ? __pfx_ret_from_fork+0x10/0x10 [ 68.447614][ T983] ? __switch_to+0x800/0x10f0 [ 68.452264][ T983] ? __pfx_kthread+0x10/0x10 [ 68.456839][ T983] ret_from_fork_asm+0x1a/0x30 [ 68.461578][ T983] [ 68.464567][ T983] Modules linked in: [ 68.468432][ T983] ---[ end trace 0000000000000000 ]--- [ 68.473863][ T983] RIP: 0010:__wake_up_common+0x9b/0x1f0 [ 68.473876][ T983] Code: 02 00 0f 85 5b 01 00 00 48 8b 5b 40 48 8d 43 e8 4c 39 fb 0f 84 b3 00 00 00 48 ba 00 00 00 00 00 fc ff df 48 89 d9 48 c1 e9 03 <80> 3c 11 00 0f 85 18 01 00 00 48 bd 00 00 00 00 00 fc ff df 4c 8b [ 68.473885][ T983] RSP: 0018:ffffc90004cb79a0 EFLAGS: 00010046 [ 68.473894][ T983] RAX: ffffffffffffffe8 RBX: 0000000000000000 RCX: 0000000000000000 [ 68.473900][ T983] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff88803156d790 [ 68.473906][ T983] RBP: ffff88803156d790 R08: 0000000000000000 R09: fffff52000996f2b [ 68.473913][ T983] R10: 0000000000000003 R11: 0000000000000001 R12: 0000000000000003 [ 68.473918][ T983] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88803156d7d0 [ 68.473925][ T983] FS: 0000000000000000(0000) GS:ffff888123c5a000(0000) knlGS:0000000000000000 [ 68.473936][ T983] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 68.473942][ T983] CR2: 00007fc78f805e9c CR3: 000000000eb96000 CR4: 00000000003526f0 [ 68.473950][ T983] Kernel panic - not syncing: Fatal exception [ 68.574323][ T983] Kernel Offset: disabled [ 68.578621][ T983] Rebooting in 86400 seconds..