ci-upstream-kasan-gce/strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ci-upstream-kasan-gce/syz-executor1899137767

<...>
Warning: Permanently added '10.128.1.154' (ED25519) to the list of known hosts.
execve("ci-upstream-kasan-gce/syz-executor1899137767", ["ci-upstream-kasan-gce/syz-executor1899137767"], 0x7ffc1f167440 /* 10 vars */) = 0
brk(NULL)                               = 0x55557807d000
brk(0x55557807dd80)                     = 0x55557807dd80
arch_prctl(ARCH_SET_FS, 0x55557807d400) = 0
set_tid_address(0x55557807d6d0)         = 5642
set_robust_list(0x55557807d6e0, 24)     = 0
rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlinkat(AT_FDCWD, "/proc/self/exe", "/root/ci-upstream-kasan-gce/syz-executor1899137767", 4096) = 50
getrandom("\x3f\x13\x51\xee\x1e\xc2\x6d\xd2", 8, GRND_NONBLOCK) = 8
brk(NULL)                               = 0x55557807dd80
brk(0x55557809ed80)                     = 0x55557809ed80
brk(0x55557809f000)                     = 0x55557809f000
mprotect(0x7f7ef2572000, 20480, PROT_READ) = 0
mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000
mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000
mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000
rt_sigprocmask(SIG_BLOCK, ~[], [], 8)   = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-kasan-gce/strace-static-x86_64: Process 5643 attached
, child_tidptr=0x55557807d6d0) = 5643
[pid  5643] set_robust_list(0x55557807d6e0, 24 <unfinished ...>
[pid  5642] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid  5643] <... set_robust_list resumed>) = 0
[pid  5643] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid  5643] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5643] setpgid(0, 0)               = 0
[pid  5643] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5643] write(3, "1000", 4)         = 4
[pid  5643] close(3)                    = 0
[pid  5643] write(1, "executing program\n", 18) = 18
executing program
[pid  5643] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3
[pid  5643] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffd09c650f0) = 0
[pid  5643] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0
[pid  5643] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd09c650f0) = 0
[pid  5643] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd09c650f0) = 0
[pid  5643] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd09c650f0) = 0
[pid  5643] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd09c650f0) = 0
[pid  5643] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd09c640e0) = 18
[pid  5643] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd09c650f0) = 0
[  107.032873][    T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[pid  5643] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd09c650f0) = 0
[pid  5643] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd09c650f0) = 0
[pid  5643] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd09c640e0) = 18
[pid  5643] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd09c650f0) = 0
[pid  5643] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd09c640e0) = 9
[pid  5643] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd09c650f0) = 0
[pid  5643] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd09c640e0) = 36
[pid  5643] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd09c650f0) = 0
[pid  5643] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd09c640e0) = 4
[pid  5643] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd09c650f0) = 0
[pid  5643] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd09c640e0) = 8
[pid  5643] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd09c650f0) = 0
[pid  5643] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd09c640e0) = 8
[  107.194548][    T9] usb 1-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice= 0.00
[pid  5643] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd09c650f0) = 0
[pid  5643] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd09c640e0) = 8
[pid  5643] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd09c650f0) = 0
[pid  5643] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0xfa) = 0
[pid  5643] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0
[pid  5643] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f7ef2578b4c) = 9
[pid  5643] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f7ef2578b5c) = 10
[pid  5643] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffd09c640e0) = 0
[  107.261680][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.261738][    T9] usb 1-1: Product: syz
[  107.263171][    T9] usb 1-1: Manufacturer: syz
[  107.263219][    T9] usb 1-1: SerialNumber: syz
[  107.305257][    T9] ums_eneub6250 1-1:1.0: USB Mass Storage device detected
[  107.319394][    T9] scsi host1: usb-storage 1-1:1.0
[pid  5643] openat(AT_FDCWD, "/dev/sg0", O_RDWR|O_LARGEFILE) = 4
[pid  5643] readv(4 <unfinished ...>
[pid  5642] kill(-5643, SIGKILL)        = 0
[pid  5643] <... readv resumed> <unfinished ...>) = ?
[pid  5642] kill(5643, SIGKILL)         = 0
[pid  5643] +++ killed by SIGKILL +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=5643, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} ---
rt_sigprocmask(SIG_BLOCK, ~[], [], 8)   = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-kasan-gce/strace-static-x86_64: Process 5649 attached
, child_tidptr=0x55557807d6d0) = 5649
[pid  5649] set_robust_list(0x55557807d6e0, 24) = 0
[pid  5642] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid  5649] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid  5649] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5649] setpgid(0, 0)               = 0
[pid  5649] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5649] write(3, "1000", 4)         = 4
[pid  5649] close(3)                    = 0
[pid  5649] write(1, "executing program\n", 18) = 18
executing program
[pid  5649] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3
[pid  5649] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffd09c650f0) = 0
[pid  5649] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0
[pid  5649] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd09c650f0) = 0
[  112.772791][ T5647] BUG: kernel NULL pointer dereference, address: 0000000000000000
[  112.780720][ T5647] #PF: supervisor instruction fetch in kernel mode
[  112.787227][ T5647] #PF: error_code(0x0010) - not-present page
[  112.793213][ T5647] PGD 800000006f80d067 P4D 800000006f80d067 PUD 6f9b7067 PMD 0 
[  112.800885][ T5647] Oops: Oops: 0010 [#1] SMP KASAN PTI
[  112.806308][ T5647] CPU: 0 UID: 0 PID: 5647 Comm: usb-storage Not tainted syzkaller #0 PREEMPT(full) 
[  112.815685][ T5647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  112.825781][ T5647] RIP: 0010:0x0
[  112.829291][ T5647] Code: Unable to access opcode bytes at 0xffffffffffffffd6.
[  112.836664][ T5647] RSP: 0018:ffffc90003c3faf8 EFLAGS: 00010246
[  112.842751][ T5647] RAX: 1ffff1100fe1f9f0 RBX: ffff888072e03110 RCX: ffffffff9a9de501
[  112.850763][ T5647] RDX: 0000000000000001 RSI: ffffffff8e474d50 RDI: ffff88807f0fce90
[  112.858747][ T5647] RBP: ffffc90003c3fcd0 R08: ffffffff907a1e7f R09: 1ffffffff20f43cf
[  112.866740][ T5647] R10: dffffc0000000000 R11: 0000000000000000 R12: 1ffff1100fe1f80e
[  112.874729][ T5647] R13: 1ffff92000787f74 R14: ffff88807f0fce90 R15: dffffc0000000000
[  112.882741][ T5647] FS:  0000000000000000(0000) GS:ffff888124cd6000(0000) knlGS:0000000000000000
[  112.891693][ T5647] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  112.898289][ T5647] CR2: ffffffffffffffd6 CR3: 0000000071e6c000 CR4: 00000000003526f0
[  112.906283][ T5647] Call Trace:
[  112.909624][ T5647]  <TASK>
[  112.912595][ T5647]  usb_stor_invoke_transport+0x55a/0x1a40
[  112.918396][ T5647]  ? __pfx_usb_stor_invoke_transport+0x10/0x10
[  112.924623][ T5647]  ? do_raw_spin_lock+0x12b/0x2f0
[  112.929680][ T5647]  ? _raw_spin_unlock_irq+0x23/0x50
[  112.934906][ T5647]  usb_stor_control_thread+0x44c/0x8f0
[  112.940384][ T5647]  ? __pfx_usb_stor_control_thread+0x10/0x10
[  112.946383][ T5647]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  112.952227][ T5647]  ? __kthread_parkme+0x71/0x1f0
[  112.957192][ T5647]  ? __kthread_parkme+0x199/0x1f0
[  112.962243][ T5647]  kthread+0x38b/0x480
[  112.966325][ T5647]  ? __pfx_usb_stor_control_thread+0x10/0x10
[  112.972324][ T5647]  ? __pfx_kthread+0x10/0x10
[  112.976928][ T5647]  ret_from_fork+0x514/0xb70
[  112.981530][ T5647]  ? __pfx_ret_from_fork+0x10/0x10
[  112.986665][ T5647]  ? __switch_to+0xc89/0x1420
[  112.991360][ T5647]  ? __pfx_kthread+0x10/0x10
[  112.995984][ T5647]  ret_from_fork_asm+0x1a/0x30
[  113.000793][ T5647]  </TASK>
[  113.003831][ T5647] Modules linked in:
[  113.007767][ T5647] CR2: 0000000000000000
[  113.011935][ T5647] ---[ end trace 0000000000000000 ]---
[  113.017432][ T5647] RIP: 0010:0x0
[  113.017456][ T5647] Code: Unable to access opcode bytes at 0xffffffffffffffd6.
[  113.017464][ T5647] RSP: 0018:ffffc90003c3faf8 EFLAGS: 00010246
[  113.017478][ T5647] RAX: 1ffff1100fe1f9f0 RBX: ffff888072e03110 RCX: ffffffff9a9de501
[  113.017490][ T5647] RDX: 0000000000000001 RSI: ffffffff8e474d50 RDI: ffff88807f0fce90
[  113.017501][ T5647] RBP: ffffc90003c3fcd0 R08: ffffffff907a1e7f R09: 1ffffffff20f43cf
[  113.017513][ T5647] R10: dffffc0000000000 R11: 0000000000000000 R12: 1ffff1100fe1f80e
[  113.017523][ T5647] R13: 1ffff92000787f74 R14: ffff88807f0fce90 R15: dffffc0000000000
[  113.017535][ T5647] FS:  0000000000000000(0000) GS:ffff888124cd6000(0000) knlGS:0000000000000000
[  113.017548][ T5647] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  113.017558][ T5647] CR2: ffffffffffffffd6 CR3: 0000000071e6c000 CR4: 00000000003526f0
[  113.017574][ T5647] Kernel panic - not syncing: Fatal exception
[  113.104506][ T5647] Kernel Offset: disabled
[  113.108850][ T5647] Rebooting in 86400 seconds..