ci-upstream-kasan-gce/strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ci-upstream-kasan-gce/syz-executor3134760007

<...>
Warning: Permanently added '10.128.0.78' (ED25519) to the list of known hosts.
execve("ci-upstream-kasan-gce/syz-executor3134760007", ["ci-upstream-kasan-gce/syz-executor3134760007"], 0x7ffd53cc3820 /* 10 vars */) = 0
brk(NULL)                               = 0x555586a80000
brk(0x555586a80d80)                     = 0x555586a80d80
arch_prctl(ARCH_SET_FS, 0x555586a80400) = 0
set_tid_address(0x555586a806d0)         = 5631
set_robust_list(0x555586a806e0, 24)     = 0
rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlinkat(AT_FDCWD, "/proc/self/exe", "/root/ci-upstream-kasan-gce/syz-executor3134760007", 4096) = 50
getrandom("\xb0\x2d\xcb\xe4\xc2\xb1\x3a\xf9", 8, GRND_NONBLOCK) = 8
brk(NULL)                               = 0x555586a80d80
brk(0x555586aa1d80)                     = 0x555586aa1d80
brk(0x555586aa2000)                     = 0x555586aa2000
mprotect(0x7f0ee6823000, 20480, PROT_READ) = 0
mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000
mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000
mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000
rt_sigprocmask(SIG_BLOCK, ~[], [], 8)   = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-kasan-gce/strace-static-x86_64: Process 5632 attached
 <unfinished ...>
[pid  5632] set_robust_list(0x555586a806e0, 24 <unfinished ...>
[pid  5631] <... clone resumed>, child_tidptr=0x555586a806d0) = 5632
[pid  5632] <... set_robust_list resumed>) = 0
[pid  5632] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid  5631] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid  5632] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid  5632] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5632] setpgid(0, 0)               = 0
[pid  5632] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5632] write(3, "1000", 4)         = 4
[pid  5632] close(3)                    = 0
[pid  5632] write(1, "executing program\n", 18) = 18
executing program
[pid  5632] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3
[pid  5632] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffe9a892490) = 0
[pid  5632] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0
[pid  5632] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe9a892490) = 0
[pid  5632] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe9a892490) = 0
[pid  5632] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe9a892490) = 0
[pid  5632] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe9a892490) = 0
[pid  5632] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffe9a891480) = 18
[pid  5632] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe9a892490) = 0
[   72.644255][ T2080] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[pid  5632] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe9a892490) = 0
[pid  5632] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe9a892490) = 0
[pid  5632] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffe9a891480) = 18
[pid  5632] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe9a892490) = 0
[pid  5632] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffe9a891480) = 9
[pid  5632] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe9a892490) = 0
[pid  5632] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffe9a891480) = 36
[pid  5632] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe9a892490) = 0
[pid  5632] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffe9a891480) = 4
[pid  5632] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe9a892490) = 0
[pid  5632] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffe9a891480) = 8
[pid  5632] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe9a892490) = 0
[pid  5632] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffe9a891480) = 8
[pid  5632] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe9a892490) = 0
[   72.795852][ T2080] usb 1-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice= 0.00
[pid  5632] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffe9a891480) = 8
[pid  5632] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe9a892490) = 0
[pid  5632] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0xfa) = 0
[pid  5632] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0
[pid  5632] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f0ee6829b4c) = 9
[pid  5632] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f0ee6829b5c) = 10
[pid  5632] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffe9a891480) = 0
[   72.853795][ T2080] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   72.853838][ T2080] usb 1-1: Product: syz
[   72.853868][ T2080] usb 1-1: Manufacturer: syz
[   72.853885][ T2080] usb 1-1: SerialNumber: syz
[   72.878205][ T2080] ums_eneub6250 1-1:1.0: USB Mass Storage device detected
[   72.887412][ T2080] scsi host1: usb-storage 1-1:1.0
[pid  5632] openat(AT_FDCWD, "/dev/sg0", O_RDWR|O_LARGEFILE) = 4
[pid  5632] readv(4 <unfinished ...>
[pid  5631] kill(-5632, SIGKILL)        = 0
[pid  5632] <... readv resumed> <unfinished ...>) = ?
[pid  5631] kill(5632, SIGKILL <unfinished ...>
[pid  5632] +++ killed by SIGKILL +++
<... kill resumed>)                     = 0
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=5632, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=1 /* 0.01 s */} ---
rt_sigprocmask(SIG_BLOCK, ~[], [], 8)   = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-kasan-gce/strace-static-x86_64: Process 5640 attached
 <unfinished ...>
[pid  5640] set_robust_list(0x555586a806e0, 24) = 0
[pid  5640] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid  5631] <... clone resumed>, child_tidptr=0x555586a806d0) = 5640
[pid  5640] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid  5631] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid  5640] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid  5631] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid  5640] <... prctl resumed>)        = 0
[pid  5640] setpgid(0, 0)               = 0
[pid  5640] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5640] write(3, "1000", 4)         = 4
[pid  5640] close(3)                    = 0
executing program
[pid  5640] write(1, "executing program\n", 18) = 18
[pid  5640] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3
[pid  5640] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffe9a892490) = 0
[pid  5640] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0
[pid  5640] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe9a892490) = 0
[   78.424088][ T5637] BUG: kernel NULL pointer dereference, address: 0000000000000000
[   78.431931][ T5637] #PF: supervisor instruction fetch in kernel mode
[   78.438417][ T5637] #PF: error_code(0x0010) - not-present page
[   78.444375][ T5637] PGD 0 P4D 0 
[   78.447740][ T5637] Oops: Oops: 0010 [#1] SMP KASAN PTI
[   78.453097][ T5637] CPU: 0 UID: 0 PID: 5637 Comm: usb-storage Not tainted syzkaller #0 PREEMPT(full) 
[   78.462457][ T5637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   78.472497][ T5637] RIP: 0010:0x0
[   78.475949][ T5637] Code: Unable to access opcode bytes at 0xffffffffffffffd6.
[   78.483305][ T5637] RSP: 0018:ffffc90003887af8 EFLAGS: 00010246
[   78.489348][ T5637] RAX: 1ffff1100f0d69f0 RBX: ffff888034ed7110 RCX: ffffffff9a9de501
[   78.497296][ T5637] RDX: 0000000000000001 RSI: ffffffff8e474d50 RDI: ffff8880786b4e90
[   78.505243][ T5637] RBP: ffffc90003887cd0 R08: ffffffff907a1e7f R09: 1ffffffff20f43cf
[   78.513190][ T5637] R10: dffffc0000000000 R11: 0000000000000000 R12: 1ffff1100f0d680e
[   78.521152][ T5637] R13: 1ffff92000710f74 R14: ffff8880786b4e90 R15: dffffc0000000000
[   78.529099][ T5637] FS:  0000000000000000(0000) GS:ffff888124cd6000(0000) knlGS:0000000000000000
[   78.538018][ T5637] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   78.544587][ T5637] CR2: ffffffffffffffd6 CR3: 0000000070a9c000 CR4: 00000000003526f0
[   78.552547][ T5637] Call Trace:
[   78.555816][ T5637]  <TASK>
[   78.558727][ T5637]  usb_stor_invoke_transport+0x55a/0x1a40
[   78.564458][ T5637]  ? __pfx_usb_stor_invoke_transport+0x10/0x10
[   78.570599][ T5637]  ? do_raw_spin_lock+0x12b/0x2f0
[   78.575605][ T5637]  ? _raw_spin_unlock_irq+0x23/0x50
[   78.580781][ T5637]  usb_stor_control_thread+0x44c/0x8f0
[   78.586216][ T5637]  ? __pfx_usb_stor_control_thread+0x10/0x10
[   78.592171][ T5637]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[   78.597955][ T5637]  ? __kthread_parkme+0x71/0x1f0
[   78.602872][ T5637]  ? __kthread_parkme+0x199/0x1f0
[   78.607873][ T5637]  kthread+0x38b/0x480
[   78.611916][ T5637]  ? __pfx_usb_stor_control_thread+0x10/0x10
[   78.617878][ T5637]  ? __pfx_kthread+0x10/0x10
[   78.622465][ T5637]  ret_from_fork+0x514/0xb70
[   78.627039][ T5637]  ? __pfx_ret_from_fork+0x10/0x10
[   78.632157][ T5637]  ? __switch_to+0xc89/0x1420
[   78.636816][ T5637]  ? __pfx_kthread+0x10/0x10
[   78.641384][ T5637]  ret_from_fork_asm+0x1a/0x30
[   78.646131][ T5637]  </TASK>
[   78.649127][ T5637] Modules linked in:
[   78.653014][ T5637] CR2: 0000000000000000
[   78.657154][ T5637] ---[ end trace 0000000000000000 ]---
[   78.662595][ T5637] RIP: 0010:0x0
[   78.662612][ T5637] Code: Unable to access opcode bytes at 0xffffffffffffffd6.
[   78.662617][ T5637] RSP: 0018:ffffc90003887af8 EFLAGS: 00010246
[   78.662627][ T5637] RAX: 1ffff1100f0d69f0 RBX: ffff888034ed7110 RCX: ffffffff9a9de501
[   78.662635][ T5637] RDX: 0000000000000001 RSI: ffffffff8e474d50 RDI: ffff8880786b4e90
[   78.662641][ T5637] RBP: ffffc90003887cd0 R08: ffffffff907a1e7f R09: 1ffffffff20f43cf
[   78.662649][ T5637] R10: dffffc0000000000 R11: 0000000000000000 R12: 1ffff1100f0d680e
[   78.662655][ T5637] R13: 1ffff92000710f74 R14: ffff8880786b4e90 R15: dffffc0000000000
[   78.662663][ T5637] FS:  0000000000000000(0000) GS:ffff888124cd6000(0000) knlGS:0000000000000000
[   78.662670][ T5637] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   78.662677][ T5637] CR2: ffffffffffffffd6 CR3: 0000000070a9c000 CR4: 00000000003526f0
[   78.662689][ T5637] Kernel panic - not syncing: Fatal exception
[   78.748954][ T5637] Kernel Offset: disabled
[   78.753265][ T5637] Rebooting in 86400 seconds..