ci-upstream-rust-kasan-gce/strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ci-upstream-rust-kasan-gce/syz-executor3142659621 <...> Warning: Permanently added '10.128.1.139' (ED25519) to the list of known hosts. execve("ci-upstream-rust-kasan-gce/syz-executor3142659621", ["ci-upstream-rust-kasan-gce/syz-executor3142659621"], 0x7ffd75dd15c0 /* 10 vars */) = 0 brk(NULL) = 0x55558a56b000 brk(0x55558a56bd80) = 0x55558a56bd80 arch_prctl(ARCH_SET_FS, 0x55558a56b400) = 0 set_tid_address(0x55558a56b6d0) = 5631 set_robust_list(0x55558a56b6e0, 24) = 0 rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlinkat(AT_FDCWD, "/proc/self/exe", "/root/ci-upstream-rust-kasan-gce/syz-executor3142659621", 4096) = 55 getrandom("\x96\xed\x40\x0c\x5c\x56\xb4\x48", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55558a56bd80 brk(0x55558a58cd80) = 0x55558a58cd80 brk(0x55558a58d000) = 0x55558a58d000 mprotect(0x7f4a962c1000, 20480, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-rust-kasan-gce/strace-static-x86_64: Process 5632 attached , child_tidptr=0x55558a56b6d0) = 5632 [pid 5631] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5631] openat(AT_FDCWD, "/sys/kernel/debug/x86/nmi_longest_ns", O_WRONLY|O_CLOEXEC [pid 5632] set_robust_list(0x55558a56b6e0, 24) = 0 [pid 5632] rt_sigprocmask(SIG_SETMASK, [] [pid 5631] <... openat resumed>) = 3 [pid 5632] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5631] write(3, "10000000000", 11) = 11 [pid 5631] close(3) = 0 [pid 5631] openat(AT_FDCWD, "/proc/sys/kernel/hung_task_check_interval_secs", O_WRONLY|O_CLOEXEC) = 3 [pid 5631] write(3, "20", 2) = 2 [pid 5631] close(3) = 0 [pid 5631] openat(AT_FDCWD, "/proc/sys/net/core/bpf_jit_kallsyms", O_WRONLY|O_CLOEXEC) = 3 [pid 5631] write(3, "1", 1) = 1 [pid 5631] close(3) = 0 [pid 5631] openat(AT_FDCWD, "/proc/sys/net/core/bpf_jit_harden", O_WRONLY|O_CLOEXEC) = 3 [pid 5631] write(3, "0", 1) = 1 [pid 5631] close(3) = 0 [pid 5631] openat(AT_FDCWD, "/proc/sys/kernel/kptr_restrict", O_WRONLY|O_CLOEXEC) = 3 [pid 5631] write(3, "0", 1) = 1 [pid 5631] close(3) = 0 [pid 5631] openat(AT_FDCWD, "/proc/sys/kernel/softlockup_all_cpu_backtrace", O_WRONLY|O_CLOEXEC) = 3 [pid 5631] write(3, "1", 1) = 1 [pid 5631] close(3) = 0 [pid 5631] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC) = 3 [pid 5631] write(3, "100", 3) = 3 [pid 5631] close(3) = 0 [pid 5631] openat(AT_FDCWD, "/proc/sys/vm/oom_dump_tasks", O_WRONLY|O_CLOEXEC) = 3 [pid 5631] write(3, "0", 1) = 1 [pid 5631] close(3) = 0 [pid 5631] openat(AT_FDCWD, "/proc/sys/debug/exception-trace", O_WRONLY|O_CLOEXEC) = 3 [pid 5631] write(3, "0", 1) = 1 [pid 5631] close(3) = 0 [pid 5631] openat(AT_FDCWD, "/proc/sys/kernel/printk", O_WRONLY|O_CLOEXEC) = 3 [pid 5631] write(3, "7 4 1 3", 7) = 7 [pid 5631] close(3) = 0 [pid 5631] openat(AT_FDCWD, "/proc/sys/kernel/keys/gc_delay", O_WRONLY|O_CLOEXEC) = 3 [pid 5631] write(3, "1", 1) = 1 [pid 5631] close(3) = 0 [pid 5631] openat(AT_FDCWD, "/proc/sys/vm/oom_kill_allocating_task", O_WRONLY|O_CLOEXEC) = 3 [pid 5631] write(3, "1", 1) = 1 [pid 5631] close(3) = 0 [pid 5631] openat(AT_FDCWD, "/sys/kernel/debug/failslab/task-filter", O_WRONLY|O_CLOEXEC) = 3 [pid 5631] write(3, "Y", 1) = 1 [pid 5631] close(3) = 0 [pid 5631] openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/task-filter", O_WRONLY|O_CLOEXEC) = 3 [pid 5631] write(3, "Y", 1) = 1 [pid 5631] close(3) = 0 [pid 5631] openat(AT_FDCWD, "/sys/kernel/debug/fail_futex/task-filter", O_WRONLY|O_CLOEXEC) = 3 [pid 5631] write(3, "Y", 1) = 1 [pid 5631] close(3) = 0 [pid 5631] openat(AT_FDCWD, "/sys/kernel/debug/fail_usercopy/task-filter", O_WRONLY|O_CLOEXEC) = 3 [pid 5631] write(3, "Y", 1) = 1 [pid 5631] close(3) = 0 [pid 5631] openat(AT_FDCWD, "/sys/kernel/debug/fail_make_request/task-filter", O_WRONLY|O_CLOEXEC) = 3 [pid 5631] write(3, "Y", 1) = 1 [pid 5631] close(3) = 0 [pid 5631] openat(AT_FDCWD, "/sys/kernel/debug/fail_io_timeout/task-filter", O_WRONLY|O_CLOEXEC) = 3 [pid 5631] write(3, "Y", 1) = 1 [pid 5631] close(3) = 0 [pid 5631] openat(AT_FDCWD, "/sys/kernel/debug/fail_iommufd/task-filter", O_WRONLY|O_CLOEXEC) = 3 [pid 5631] write(3, "Y", 1) = 1 [pid 5631] close(3) = 0 [pid 5631] openat(AT_FDCWD, "/proc/sys/kernel/ctrl-alt-del", O_WRONLY|O_CLOEXEC) = 3 [pid 5631] write(3, "0", 1) = 1 [pid 5631] close(3) = 0 [pid 5631] openat(AT_FDCWD, "/proc/sys/kernel/cad_pid", O_WRONLY|O_CLOEXEC) = 3 [pid 5631] write(3, "5632", 4) = 4 [pid 5631] close(3) = 0 [pid 5631] kill(5632, SIGKILL) = 0 [pid 5632] +++ killed by SIGKILL +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=5632, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- executing program write(1, "executing program\n", 18) = 18 openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffdc9942180) = 0 ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffdc9942180) = 0 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffdc9942180) = 0 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffdc9942180) = 0 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffdc9942180) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffdc9941170) = 18 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffdc9942180) = 0 [ 77.395858][ T1220] usb 1-1: new high-speed USB device number 2 using dummy_hcd ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffdc9942180) = 0 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffdc9942180) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffdc9941170) = 18 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffdc9942180) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffdc9941170) = 9 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffdc9942180) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffdc9941170) = 32 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffdc9942180) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffdc9941170) = 4 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffdc9942180) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffdc9941170) = 8 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffdc9942180) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffdc9941170) = 8 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffdc9942180) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffdc9941170) = 8 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffdc9942180) = 0 [ 77.557507][ T1220] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice= 1.00 [ 77.603903][ T1220] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0xfa) = 0 ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f4a962c7b4c) = 0 ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f4a962c7b5c) = 1 ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffdc9941170) = 0 [ 77.603930][ T1220] usb 1-1: Product: syz [ 77.603943][ T1220] usb 1-1: Manufacturer: syz [ 77.603955][ T1220] usb 1-1: SerialNumber: syz ioctl(3, USB_RAW_IOCTL_EP_WRITE, 0x7ffdc99421c0) = 6 ioctl(3, USB_RAW_IOCTL_EP_WRITE, 0x7ffdc99421c0) = 20 [ 78.056033][ T1220] ------------[ cut here ]------------ [ 78.056045][ T1220] URB ffff88801bf98300 submitted while active [ 78.056062][ T1220] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x79/0x18b0, CPU#0: kworker/0:2/1220 [ 78.077934][ T1220] Modules linked in: [ 78.081883][ T1220] CPU: 0 UID: 0 PID: 1220 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(full) [ 78.091300][ T1220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 78.101468][ T1220] Workqueue: usb_hub_wq hub_event [ 78.106589][ T1220] RIP: 0010:usb_submit_urb+0x7c/0x18b0 [ 78.112092][ T1220] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 69 02 be fa 49 83 3e 00 74 40 e8 3e d9 4d fa 48 8d 3d f7 3d 2f 09 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 23 d9 4d fa eb 05 e8 1c d9 [ 78.131814][ T1220] RSP: 0018:ffffc90005556ac0 EFLAGS: 00010293 [ 78.137953][ T1220] RAX: ffffffff877a2bb2 RBX: ffff88801bf98300 RCX: ffff8880273b0000 [ 78.145989][ T1220] RDX: 0000000000000000 RSI: ffff88801bf98300 RDI: ffffffff90a969b0 [ 78.153990][ T1220] RBP: dffffc0000000000 R08: ffffffff909bb37f R09: 1ffffffff213766f [ 78.162029][ T1220] R10: dffffc0000000000 R11: fffffbfff2137670 R12: ffff888031253058 [ 78.170093][ T1220] R13: 1ffff1100624a60b R14: ffff88801bf98308 R15: 0000000000000cc0 [ 78.178138][ T1220] FS: 0000000000000000(0000) GS:ffff88812485b000(0000) knlGS:0000000000000000 [ 78.187150][ T1220] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 78.193778][ T1220] CR2: 00007f4a962c60d0 CR3: 000000007443c000 CR4: 00000000003526f0 [ 78.201830][ T1220] Call Trace: [ 78.205152][ T1220] [ 78.208166][ T1220] ? __kmalloc_cache_noprof+0x148/0x600 [ 78.213767][ T1220] ? port100_send_cmd_async+0xbd/0xcc0 [ 78.219295][ T1220] ? skb_put+0x112/0x210 [ 78.223571][ T1220] port100_send_cmd_async+0x84f/0xcc0 [ 78.229041][ T1220] port100_set_command_type+0x1c8/0x390 [ 78.234647][ T1220] ? pcpu_alloc+0x10/0x310 [ 78.239139][ T1220] ? __pfx_port100_set_command_type+0x10/0x10 [ 78.245259][ T1220] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 78.251155][ T1220] port100_probe+0x7b2/0xba0 exit_group(0) = ? +++ exited with 0 +++ [ 78.255812][ T