ci-upstream-kasan-gce/strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ci-upstream-kasan-gce/syz-executor376281472

<...>
Warning: Permanently added '10.128.1.99' (ED25519) to the list of known hosts.
execve("ci-upstream-kasan-gce/syz-executor376281472", ["ci-upstream-kasan-gce/syz-executor376281472"], 0x7fff65907630 /* 10 vars */) = 0
brk(NULL)                               = 0x55558cba1000
brk(0x55558cba1d80)                     = 0x55558cba1d80
arch_prctl(ARCH_SET_FS, 0x55558cba1400) = 0
set_tid_address(0x55558cba16d0)         = 5631
set_robust_list(0x55558cba16e0, 24)     = 0
rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlinkat(AT_FDCWD, "/proc/self/exe", "/root/ci-upstream-kasan-gce/syz-executor376281472", 4096) = 49
getrandom("\x0b\xac\x68\x9c\x29\x59\xe1\x14", 8, GRND_NONBLOCK) = 8
brk(NULL)                               = 0x55558cba1d80
brk(0x55558cbc2d80)                     = 0x55558cbc2d80
brk(0x55558cbc3000)                     = 0x55558cbc3000
mprotect(0x7fe016452000, 20480, PROT_READ) = 0
mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000
mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000
mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000
rt_sigprocmask(SIG_BLOCK, ~[], [], 8)   = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-kasan-gce/strace-static-x86_64: Process 5632 attached
 <unfinished ...>
[pid  5632] set_robust_list(0x55558cba16e0, 24 <unfinished ...>
[pid  5631] <... clone resumed>, child_tidptr=0x55558cba16d0) = 5632
[pid  5632] <... set_robust_list resumed>) = 0
[pid  5631] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid  5632] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid  5631] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid  5632] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid  5632] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5632] setpgid(0, 0)               = 0
[pid  5632] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5632] write(3, "1000", 4)         = 4
[pid  5632] close(3)                    = 0
[pid  5632] write(1, "executing program\n", 18) = 18
[pid  5632] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3
executing program
[pid  5632] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffd1cc6c890) = 0
[pid  5632] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0
[pid  5632] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd1cc6c890) = 0
[pid  5632] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd1cc6c890) = 0
[pid  5632] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd1cc6c890) = 0
[pid  5632] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd1cc6c890) = 0
[pid  5632] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd1cc6b880) = 18
[pid  5632] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd1cc6c890) = 0
[   72.043427][   T44] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[pid  5632] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd1cc6c890) = 0
[pid  5632] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd1cc6c890) = 0
[pid  5632] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd1cc6b880) = 18
[pid  5632] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd1cc6c890) = 0
[pid  5632] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd1cc6b880) = 9
[pid  5632] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd1cc6c890) = 0
[pid  5632] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd1cc6b880) = 36
[pid  5632] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd1cc6c890) = 0
[pid  5632] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd1cc6b880) = 4
[pid  5632] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd1cc6c890) = 0
[pid  5632] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd1cc6b880) = 8
[pid  5632] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd1cc6c890) = 0
[pid  5632] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd1cc6b880) = 8
[pid  5632] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd1cc6c890) = 0
[pid  5632] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd1cc6b880) = 8
[pid  5632] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd1cc6c890) = 0
[pid  5632] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0xfa) = 0
[   72.195162][   T44] usb 1-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice= 0.00
[   72.234301][   T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[pid  5632] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0
[pid  5632] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7fe016458b4c) = 9
[pid  5632] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7fe016458b5c) = 10
[pid  5632] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffd1cc6b880) = 0
[   72.234343][   T44] usb 1-1: Product: syz
[   72.234372][   T44] usb 1-1: Manufacturer: syz
[   72.234388][   T44] usb 1-1: SerialNumber: syz
[   72.287956][   T44] ums_eneub6250 1-1:1.0: USB Mass Storage device detected
[   72.296710][   T44] scsi host1: usb-storage 1-1:1.0
[pid  5632] openat(AT_FDCWD, "/dev/sg0", O_RDWR|O_LARGEFILE) = 4
[pid  5632] readv(4 <unfinished ...>
[pid  5631] kill(-5632, SIGKILL)        = 0
[pid  5631] kill(5632, SIGKILL)         = 0
[pid  5632] <... readv resumed> <unfinished ...>) = ?
[pid  5632] +++ killed by SIGKILL +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=5632, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=3 /* 0.03 s */} ---
restart_syscall(<... resuming interrupted kill ...>) = 0
rt_sigprocmask(SIG_BLOCK, ~[], [], 8)   = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-kasan-gce/strace-static-x86_64: Process 5644 attached
, child_tidptr=0x55558cba16d0) = 5644
[pid  5631] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid  5644] set_robust_list(0x55558cba16e0, 24) = 0
[pid  5644] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid  5644] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5644] setpgid(0, 0)               = 0
[pid  5644] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5644] write(3, "1000", 4)         = 4
[pid  5644] close(3)                    = 0
executing program
[pid  5644] write(1, "executing program\n", 18) = 18
[pid  5644] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3
[pid  5644] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffd1cc6c890) = 0
[pid  5644] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0
[pid  5644] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd1cc6c890) = 0
[   77.803337][ T5637] BUG: kernel NULL pointer dereference, address: 0000000000000000
[   77.811168][ T5637] #PF: supervisor instruction fetch in kernel mode
[   77.817644][ T5637] #PF: error_code(0x0010) - not-present page
[   77.823611][ T5637] PGD 0 P4D 0 
[   77.826969][ T5637] Oops: Oops: 0010 [#1] SMP KASAN PTI
[   77.832324][ T5637] CPU: 0 UID: 0 PID: 5637 Comm: usb-storage Not tainted syzkaller #0 PREEMPT(full) 
[   77.841665][ T5637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   77.851705][ T5637] RIP: 0010:0x0
[   77.855170][ T5637] Code: Unable to access opcode bytes at 0xffffffffffffffd6.
[   77.862517][ T5637] RSP: 0018:ffffc90003a5faf8 EFLAGS: 00010246
[   77.868573][ T5637] RAX: 1ffff110069769f0 RBX: ffff88802751a110 RCX: ffffffff9a9de501
[   77.876522][ T5637] RDX: 0000000000000001 RSI: ffffffff8e474d50 RDI: ffff888034bb4e90
[   77.884470][ T5637] RBP: ffffc90003a5fcd0 R08: ffffffff907a1e7f R09: 1ffffffff20f43cf
[   77.892420][ T5637] R10: dffffc0000000000 R11: 0000000000000000 R12: 1ffff1100697680e
[   77.900372][ T5637] R13: 1ffff9200074bf74 R14: ffff888034bb4e90 R15: dffffc0000000000
[   77.908326][ T5637] FS:  0000000000000000(0000) GS:ffff888124cd6000(0000) knlGS:0000000000000000
[   77.917238][ T5637] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   77.923797][ T5637] CR2: ffffffffffffffd6 CR3: 000000006f412000 CR4: 00000000003526f0
[   77.931744][ T5637] Call Trace:
[   77.935011][ T5637]  <TASK>
[   77.937921][ T5637]  usb_stor_invoke_transport+0x55a/0x1a40
[   77.943638][ T5637]  ? __pfx_usb_stor_invoke_transport+0x10/0x10
[   77.949770][ T5637]  ? do_raw_spin_lock+0x12b/0x2f0
[   77.954773][ T5637]  ? _raw_spin_unlock_irq+0x23/0x50
[   77.959948][ T5637]  usb_stor_control_thread+0x44c/0x8f0
[   77.965384][ T5637]  ? __pfx_usb_stor_control_thread+0x10/0x10
[   77.971335][ T5637]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[   77.977115][ T5637]  ? __kthread_parkme+0x71/0x1f0
[   77.982032][ T5637]  ? __kthread_parkme+0x199/0x1f0
[   77.987033][ T5637]  kthread+0x38b/0x480
[   77.991074][ T5637]  ? __pfx_usb_stor_control_thread+0x10/0x10
[   77.997030][ T5637]  ? __pfx_kthread+0x10/0x10
[   78.001596][ T5637]  ret_from_fork+0x514/0xb70
[   78.006161][ T5637]  ? __pfx_ret_from_fork+0x10/0x10
[   78.011253][ T5637]  ? __switch_to+0xc89/0x1420
[   78.015907][ T5637]  ? __pfx_kthread+0x10/0x10
[   78.020471][ T5637]  ret_from_fork_asm+0x1a/0x30
[   78.025217][ T5637]  </TASK>
[   78.028210][ T5637] Modules linked in:
[   78.032086][ T5637] CR2: 0000000000000000
[   78.036224][ T5637] ---[ end trace 0000000000000000 ]---
[   78.041659][ T5637] RIP: 0010:0x0
[   78.041677][ T5637] Code: Unable to access opcode bytes at 0xffffffffffffffd6.
[   78.041682][ T5637] RSP: 0018:ffffc90003a5faf8 EFLAGS: 00010246
[   78.041691][ T5637] RAX: 1ffff110069769f0 RBX: ffff88802751a110 RCX: ffffffff9a9de501
[   78.041699][ T5637] RDX: 0000000000000001 RSI: ffffffff8e474d50 RDI: ffff888034bb4e90
[   78.041705][ T5637] RBP: ffffc90003a5fcd0 R08: ffffffff907a1e7f R09: 1ffffffff20f43cf
[   78.041713][ T5637] R10: dffffc0000000000 R11: 0000000000000000 R12: 1ffff1100697680e
[   78.041719][ T5637] R13: 1ffff9200074bf74 R14: ffff888034bb4e90 R15: dffffc0000000000
[   78.041727][ T5637] FS:  0000000000000000(0000) GS:ffff888124cd6000(0000) knlGS:0000000000000000
[   78.041734][ T5637] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   78.041741][ T5637] CR2: ffffffffffffffd6 CR3: 000000006f412000 CR4: 00000000003526f0
[   78.041752][ T5637] Kernel panic - not syncing: Fatal exception
[   78.127940][ T5637] Kernel Offset: disabled
[   78.132353][ T5637] Rebooting in 86400 seconds..