ci-upstream-kasan-gce/strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ci-upstream-kasan-gce/syz-executor3456093338 <...> Warning: Permanently added '10.128.1.138' (ED25519) to the list of known hosts. execve("ci-upstream-kasan-gce/syz-executor3456093338", ["ci-upstream-kasan-gce/syz-executor3456093338"], 0x7ffc177dcbc0 /* 10 vars */) = 0 brk(NULL) = 0x555583ce4000 brk(0x555583ce4d80) = 0x555583ce4d80 arch_prctl(ARCH_SET_FS, 0x555583ce4400) = 0 set_tid_address(0x555583ce46d0) = 5631 set_robust_list(0x555583ce46e0, 24) = 0 rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlinkat(AT_FDCWD, "/proc/self/exe", "/root/ci-upstream-kasan-gce/syz-executor3456093338", 4096) = 50 getrandom("\x95\x83\x21\xa9\x9e\x2b\x1c\xbb", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555583ce4d80 brk(0x555583d05d80) = 0x555583d05d80 brk(0x555583d06000) = 0x555583d06000 mprotect(0x7fad02421000, 20480, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-kasan-gce/strace-static-x86_64: Process 5632 attached , child_tidptr=0x555583ce46d0) = 5632 [pid 5631] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5632] set_robust_list(0x555583ce46e0, 24) = 0 [pid 5632] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5632] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5632] setpgid(0, 0) = 0 [pid 5632] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5632] write(3, "1000", 4) = 4 [pid 5632] close(3) = 0 [pid 5632] write(1, "executing program\n", 18) = 18 [pid 5632] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 executing program [pid 5632] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffd22653e10) = 0 [pid 5632] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5632] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd22653e10) = 0 [pid 5632] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd22653e10) = 0 [pid 5632] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd22653e10) = 0 [pid 5632] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd22653e10) = 0 [pid 5632] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd22652e00) = 18 [pid 5632] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd22653e10) = 0 [ 90.358830][ T1226] usb 1-1: new high-speed USB device number 2 using dummy_hcd [pid 5632] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd22653e10) = 0 [pid 5632] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd22653e10) = 0 [pid 5632] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd22652e00) = 18 [pid 5632] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd22653e10) = 0 [pid 5632] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd22652e00) = 9 [pid 5632] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd22653e10) = 0 [pid 5632] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd22652e00) = 27 [pid 5632] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd22653e10) = 0 [pid 5632] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd22652e00) = 4 [ 90.528548][ T1226] usb 1-1: Using ep0 maxpacket: 32 [ 90.545358][ T1226] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 90.557582][ T1226] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 90.557641][ T1226] usb 1-1: config 0 has no interface number 0 [pid 5632] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd22653e10) = 0 [pid 5632] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd22652e00) = 8 [pid 5632] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd22653e10) = 0 [pid 5632] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd22652e00) = 8 [pid 5632] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd22653e10) = 0 [ 90.557788][ T1226] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [pid 5632] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd22652e00) = 8 [pid 5632] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd22653e10) = 0 [pid 5632] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0x2) = 0 [pid 5632] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5632] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7fad02427b4c) = -1 EINVAL (Invalid argument) [pid 5632] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffd22652e00) = 0 [ 90.613708][ T1226] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.613753][ T1226] usb 1-1: Product: syz [ 90.613787][ T1226] usb 1-1: Manufacturer: syz [ 90.613806][ T1226] usb 1-1: SerialNumber: syz [ 90.641507][ T1226] usb 1-1: config 0 descriptor?? [ 90.659589][ T1226] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 90.659664][ T1226] em28xx 1-1:0.132: Video interface 132 found: [pid 5632] exit_group(0) = ? [pid 5632] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5632, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-kasan-gce/strace-static-x86_64: Process 5639 attached , child_tidptr=0x555583ce46d0) = 5639 [pid 5639] set_robust_list(0x555583ce46e0, 24) = 0 [pid 5639] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5639] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5639] setpgid(0, 0) = 0 [pid 5639] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5631] rt_sigprocmask(SIG_SETMASK, [] [pid 5639] <... openat resumed>) = 3 [pid 5631] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5639] write(3, "1000", 4) = 4 [pid 5639] close(3) = 0 [pid 5639] write(1, "executing program\n", 18) = 18 executing program [pid 5639] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5639] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffd22653e10) = 0 [pid 5639] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5639] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd22653e10) = 0 [ 90.919028][ T1226] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 90.986897][ T1226] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 90.987123][ T1226] em28xx 1-1:0.132: board has no eeprom [ 91.048514][ T1226] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 91.048576][ T1226] em28xx 1-1:0.132: analog set to bulk mode. [ 91.060813][ T5636] em28xx 1-1:0.132: Registering V4L2 extension [ 91.083125][ T1226] usb 1-1: USB disconnect, device number 2 [ 91.095803][ T1226] em28xx 1-1:0.132: Disconnecting em28xx [ 91.172486][ T5636] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 91.172537][ T5636] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 91.177712][ T5636] em28xx 1-1:0.132: No AC97 audio processor [ 91.202686][ T5636] usb 1-1: Decoder not found [ 91.210318][ T5636] em28xx 1-1:0.132: failed to create media graph [ 91.211554][ T5636] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 91.224747][ T5636] INFO: trying to register non-static key. [ 91.231274][ T5636] The code is fine but needs lockdep annotation, or maybe [ 91.238598][ T5636] you didn't initialize this object before use? [ 91.244939][ T5636] turning off the locking correctness validator. [ 91.252006][ T5636] CPU: 1 UID: 0 PID: 5636 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT(full) [ 91.261671][ T5636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 91.271926][ T5636] Workqueue: events request_module_async [ 91.277725][ T5636] Call Trace: [ 91.281132][ T5636] [ 91.284258][ T5636] dump_stack_lvl+0xe8/0x150 [ 91.288879][ T5636] assign_lock_key+0x133/0x150 [ 91.293672][ T5636] register_lock_class+0xcc/0x2e0 [ 91.298726][ T5636] __lock_acquire+0x10c/0x2de0 [ 91.303518][ T5636] ? __mutex_trylock_common+0x15f/0x270 [ 91.309250][ T5636] ? __pfx___mutex_trylock_common+0x10/0x10 [ 91.316044][ T5636] lock_acquire+0x115/0x350 [ 91.320767][ T5636] ? __wake_up_common_lock+0x30/0x1f0 [ 91.326295][ T5636] ? rcu_is_watching+0x16/0xb0 [ 91.331816][ T5636] _raw_spin_lock_irqsave+0x40/0x60 [ 91.337443][ T5636] ? __wake_up_common_lock+0x30/0x1f0 [ 91.343042][ T5636] __wake_up_common_lock+0x30/0x1f0 [ 91.348712][ T5636] ? __pfx___mutex_lock+0x10/0x10 [ 91.353949][ T5636] __vb2_queue_cancel+0x2de/0xde0 [ 91.359462][ T5636] ? __vb2_cleanup_fileio+0x134/0x1f0 [ 91.364970][ T5636] vb2_core_queue_release+0x2f/0x150 [ 91.370324][ T5636] vb2_video_unregister_device+0x15b/0x200 [ 91.376547][ T5636] em28xx_v4l2_init+0x1c89/0x3150 [ 91.381720][ T5636] em28xx_init_extension+0x120/0x1d0 [ 91.387069][ T5636] ? process_scheduled_works+0x97a/0x1630 [ 91.393020][ T5636] process_scheduled_works+0xc3d/0x1630 [ 91.398725][ T5636] ? __pfx_process_scheduled_works+0x10/0x10 [ 91.404781][ T5636] ? assign_work+0x3cf/0x5d0 [ 91.409410][ T5636] worker_thread+0xa47/0xfb0 [ 91.414034][ T5636] ? __kthread_parkme+0x71/0x1f0 [ 91.419047][ T5636] kthread+0x38b/0x480 [ 91.423258][ T5636] ? __pfx_worker_thread+0x10/0x10 [ 91.428408][ T5636] ? __pfx_kthread+0x10/0x10 [ 91.433218][ T5636] ret_from_fork+0x514/0xb70 [ 91.438457][ T5636] ? __pfx_ret_from_fork+0x10/0x10 [ 91.443709][ T5636] ? __switch_to+0xc89/0x1420 [ 91.448435][ T5636] ? __pfx_kthread+0x10/0x10 [ 91.453070][ T5636] ret_from_fork_asm+0x1a/0x30 [ 91.457893][ T5636] [ 91.461103][ T5636] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 91.473140][ T5636] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 91.481679][ T5636] CPU: 1 UID: 0 PID: 5636 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT(full) [ 91.491082][ T5636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 91.501259][ T5636] Workqueue: events request_module_async [ 91.507134][ T5636] RIP: 0010:__wake_up_common_lock+0xd6/0x1f0 [ 91.513160][ T5636] Code: 0f 84 d4 00 00 00 44 8b 64 24 04 eb 13 48 ba 00 00 00 00 00 fc ff df 4c 39 fd 0f 84 ba 00 00 00 49 89 ee 48 89 e8 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 f7 e8 4c a1 97 00 48 ba 00 00 00 00 00 fc [ 91.532980][ T5636] RSP: 0018:ffffc900037ef880 EFLAGS: 00010046 [ 91.539165][ T5636] RAX: 0000000000000000 RBX: ffff888012399740 RCX: 0000000000000001 [ 91.547157][ T5636] RDX: dffffc0000000000 RSI: 0000000000000004 RDI: ffffc900037ef7e0 [ 91.555248][ T5636] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 91.563268][ T5636] R10: dffffc0000000000 R11: fffff520006fdefc R12: 0000000000000000 [ 91.571356][ T5636] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8880123997d0 [ 91.579629][ T5636] FS: 0000000000000000(0000) GS:ffff888124dd6000(0000) knlGS:0000000000000000 [ 91.588591][ T5636] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 91.595224][ T5636] CR2: 00007f8b2c460e9c CR3: 000000007f8e0000 CR4: 00000000003526f0 [ 91.603401][ T5636] Call Trace: [ 91.606709][ T5636] [ 91.609695][ T5636] __vb2_queue_cancel+0x2de/0xde0 [ 91.614757][ T5636] ? __vb2_cleanup_fileio+0x134/0x1f0 [ 91.620257][ T5636] vb2_core_queue_release+0x2f/0x150 [ 91.626244][ T5636] vb2_video_unregister_device+0x15b/0x200 [ 91.632109][ T5636] em28xx_v4l2_init+0x1c89/0x3150 [ 91.637559][ T5636] em28xx_init_extension+0x120/0x1d0 [ 91.642901][ T5636] ? process_scheduled_works+0x97a/0x1630 [ 91.649203][ T5636] process_scheduled_works+0xc3d/0x1630 [ 91.654802][ T5636] ? __pfx_process_scheduled_works+0x10/0x10 [ 91.660915][ T5636] ? assign_work+0x3cf/0x5d0 [ 91.665582][ T5636] worker_thread+0xa47/0xfb0 [ 91.670253][ T5636] ? __kthread_parkme+0x71/0x1f0 [ 91.675323][ T5636] kthread+0x38b/0x480 [ 91.679513][ T5636] ? __pfx_worker_thread+0x10/0x10 [ 91.684846][ T5636] ? __pfx_kthread+0x10/0x10 [ 91.689548][ T5636] ret_from_fork+0x514/0xb70 [ 91.694161][ T5636] ? __pfx_ret_from_fork+0x10/0x10 [ 91.699310][ T5636] ? __switch_to+0xc89/0x1420 [ 91.704031][ T5636] ? __pfx_kthread+0x10/0x10 [ 91.708792][ T5636] ret_from_fork_asm+0x1a/0x30 [ 91.713656][ T5636] [ 91.716722][ T5636] Modules linked in: [ 91.720792][ T5636] ---[ end trace 0000000000000000 ]--- [ 91.726575][ T5636] RIP: 0010:__wake_up_common_lock+0xd6/0x1f0 [ 91.726621][ T5636] Code: 0f 84 d4 00 00 00 44 8b 64 24 04 eb 13 48 ba 00 00 00 00 00 fc ff df 4c 39 fd 0f 84 ba 00 00 00 49 89 ee 48 89 e8 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 f7 e8 4c a1 97 00 48 ba 00 00 00 00 00 fc [ 91.726636][ T5636] RSP: 0018:ffffc900037ef880 EFLAGS: 00010046 [ 91.726653][ T5636] RAX: 0000000000000000 RBX: ffff888012399740 RCX: 0000000000000001 [ 91.726665][ T5636] RDX: dffffc0000000000 RSI: 0000000000000004 RDI: ffffc900037ef7e0 [ 91.726677][ T5636] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 91.726686][ T5636] R10: dffffc0000000000 R11: fffff520006fdefc R12: 0000000000000000 [ 91.726698][ T5636] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8880123997d0 [ 91.726710][ T5636] FS: 0000000000000000(0000) GS:ffff888124dd6000(0000) knlGS:0000000000000000 [ 91.726724][ T5636] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 91.726735][ T5636] CR2: 00007f8b2c460e9c CR3: 000000007f8e0000 CR4: 00000000003526f0 [ 91.726754][ T5636] Kernel panic - not syncing: Fatal exception [ 91.833449][ T5636] Kernel Offset: disabled [ 91.837797][ T5636] Rebooting in 86400 seconds..