ci-upstream-kasan-gce/strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ci-upstream-kasan-gce/syz-executor711944505 <...> Warning: Permanently added '10.128.0.133' (ED25519) to the list of known hosts. execve("ci-upstream-kasan-gce/syz-executor711944505", ["ci-upstream-kasan-gce/syz-executor711944505"], 0x7fff2d7496b0 /* 10 vars */) = 0 brk(NULL) = 0x55558f215000 brk(0x55558f215d80) = 0x55558f215d80 arch_prctl(ARCH_SET_FS, 0x55558f215400) = 0 set_tid_address(0x55558f2156d0) = 5639 set_robust_list(0x55558f2156e0, 24) = 0 rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlinkat(AT_FDCWD, "/proc/self/exe", "/root/ci-upstream-kasan-gce/syz-executor711944505", 4096) = 49 getrandom("\x9c\x13\x64\xa8\x21\x83\x64\x1c", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55558f215d80 brk(0x55558f236d80) = 0x55558f236d80 brk(0x55558f237000) = 0x55558f237000 mprotect(0x7f8c9b8e9000, 20480, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-kasan-gce/strace-static-x86_64: Process 5640 attached , child_tidptr=0x55558f2156d0) = 5640 [pid 5639] rt_sigprocmask(SIG_SETMASK, [] [pid 5640] set_robust_list(0x55558f2156e0, 24 [pid 5639] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5640] <... set_robust_list resumed>) = 0 [pid 5640] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5640] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5640] setpgid(0, 0) = 0 [pid 5640] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5640] write(3, "1000", 4) = 4 [pid 5640] close(3) = 0 executing program [pid 5640] write(1, "executing program\n", 18) = 18 [pid 5640] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5640] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffd98bffe00) = 0 [pid 5640] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5640] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd98bffe00) = 0 [pid 5640] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd98bffe00) = 0 [pid 5640] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd98bffe00) = 0 [pid 5640] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd98bffe00) = 0 [pid 5640] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd98bfedf0) = 18 [pid 5640] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd98bffe00) = 0 [ 86.412987][ T808] usb 1-1: new high-speed USB device number 2 using dummy_hcd [pid 5640] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd98bffe00) = 0 [pid 5640] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd98bffe00) = 0 [pid 5640] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd98bfedf0) = 18 [pid 5640] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd98bffe00) = 0 [ 86.572314][ T808] usb 1-1: Using ep0 maxpacket: 16 [pid 5640] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd98bfedf0) = 9 [pid 5640] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd98bffe00) = 0 [pid 5640] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd98bfedf0) = 18 [pid 5640] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd98bffe00) = 0 [pid 5640] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd98bfedf0) = 4 [pid 5640] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd98bffe00) = 0 [pid 5640] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd98bfedf0) = 8 [pid 5640] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd98bffe00) = 0 [pid 5640] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd98bfedf0) = 8 [pid 5640] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd98bffe00) = 0 [pid 5640] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd98bfedf0) = 8 [pid 5640] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd98bffe00) = 0 [pid 5640] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5640] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5640] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffd98bfedf0) = 0 [ 86.678007][ T808] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 86.687325][ T808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.696403][ T808] usb 1-1: Product: syz [ 86.700616][ T808] usb 1-1: Manufacturer: syz [ 86.705278][ T808] usb 1-1: SerialNumber: syz [ 86.714217][ T808] usb 1-1: config 0 descriptor?? [pid 5640] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd98bffe30) = 0 [pid 5640] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffd98bfee20) = 0 [pid 5640] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd98bffe30) = 0 [pid 5640] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffd98bfee20) = 0 [ 87.151344][ T808] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 87.163362][ T808] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 87.173405][ T808] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 87.181456][ T808] usb 1-1: media controller created [ 87.196837][ T808] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [pid 5640] openat(AT_FDCWD, "/dev/i2c-1", O_RDWR|O_APPEND) = 4 [ 87.743145][ T808] zl10353_read_register: readreg error (reg=127, ret==0) [ 87.750275][ T808] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 87.758272][ T808] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 87.772344][ T5640] ------------[ cut here ]------------ [ 87.777971][ T5640] usb 1-1: BOGUS control dir, pipe 80000280 doesn't match bRequestType c0 [ 87.786613][ T5640] WARNING: drivers/usb/core/urb.c:413 at usb_submit_urb+0x1057/0x18b0, CPU#1: syz-executor711/5640 [ 87.797936][ T5640] Modules linked in: [ 87.801994][ T5640] CPU: 1 UID: 0 PID: 5640 Comm: syz-executor711 Not tainted syzkaller #0 PREEMPT(full) [ 87.811797][ T5640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 87.821982][ T5640] RIP: 0010:usb_submit_urb+0x1100/0x18b0 [ 87.827726][ T5640] Code: b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 0f 85 b2 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 18 4c 89 f2 44 89 f9 <67> 48 0f b9 3a 48 bd 00 00 00 00 00 fc ff df e9 ba f2 ff ff 44 89 [ 87.847825][ T5640] RSP: 0018:ffffc90003d1f958 EFLAGS: 00010246 [ 87.853988][ T5640] RAX: 0000000000000000 RBX: ffff8880202adb00 RCX: 0000000080000280 [ 87.862009][ T5640] RDX: ffff888033704aa0 RSI: ffffffff8ca31d40 RDI: ffffffff906589b0 [ 87.870070][ T5640] RBP: dffffc0000000000 R08: 00000000000000c0 R09: 0000000000000000 [ 87.878174][ T5640] R10: ffffc90003d1fa40 R11: fffff520007a3f54 R12: 1ffff11006ab6954 [ 87.886236][ T5640] R13: ffff8880355b4aa0 R14: ffff888033704aa0 R15: 0000000080000280 [ 87.894291][ T5640] FS: 000055558f215400(0000) GS:ffff88812504d000(0000) knlGS:0000000000000000 [ 87.903315][ T5640] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 87.909947][ T5640] CR2: 00005569f83c7b00 CR3: 000000006f8c2000 CR4: 00000000003526f0 [ 87.918055][ T5640] Call Trace: [ 87.921413][ T5640] [ 87.924515][ T5640] usb_start_wait_urb+0x13f/0x5b0 [ 87.929622][ T5640] ? trace_kmalloc+0x2a/0xf0 [ 87.934838][ T5640] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 87.940569][ T5640] usb_control_msg+0x234/0x3e0 [ 87.945474][ T5640] dtv5100_i2c_msg+0x231/0x2f0 [ 87.950322][ T5640] dtv5100_i2c_xfer+0x280/0x610 [ 87.955304][ T5640] __i2c_transfer+0x7be/0x1fe0 [ 87.960133][ T5640] ? rt_mutex_lock_nested+0x167/0x1c0 [ 87.965672][ T5640] ? i2c_transfer+0xc8/0x2d0 [ 87.970368][ T5640] i2c_transfer+0x1cc/0x2d0 [ 87.975010][ T5640] i2cdev_ioctl_rdwr+0x460/0x740 [ 87.980027][ T5640] i2cdev_ioctl+0x6a5/0x880 [ 87.984660][ T5640] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 87.989760][ T5640] ? bpf_lsm_file_ioctl+0x9/0x20 [ 87.994849][ T5640] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 87.999940][ T5640] __se_sys_ioctl+0xfc/0x170 [ 88.004661][ T5640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.010786][ T5640] do_syscall_64+0x174/0x580 [ 88.015512][ T5640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.021623][ T5640] ? clear_bhb_loop+0x40/0x90 [ 88.026443][ T5640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.032437][ T5640] RIP: 0033:0x7f8c9b857109 [ 88.036922][ T5640] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48 [ 88.056911][ T5640] RSP: 002b:00007ffd98c00e48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 88.065406][ T5640] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8c9b857109 [ 88.073573][ T5640] RDX: 0000200000000240 RSI: 0000000000000707 RDI: 0000000000000004 [ 88.081615][ T5640] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000006 [ 88.089902][ T5640] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd98c00fb8 [ 88.097949][ T5640] R13: 431bde82d7b634db R14: 00007f8c9b8e9c40 R15: 0000000000000002 [ 88.106021][ T5640] [ 88.109055][ T5640] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 88.116449][ T5640] CPU: 1 UID: 0 PID: 5640 Comm: syz-executor711 Not tainted syzkaller #0 PREEMPT(full) [ 88.126176][ T5640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 88.136254][ T5640] Call Trace: [ 88.139563][ T5640] [ 88.142504][ T5640] vpanic+0x56c/0xa60 [ 88.146506][ T5640] ? __pfx__printk+0x10/0x10 [ 88.151101][ T5640] ? __pfx_vpanic+0x10/0x10 [ 88.155708][ T5640] ? is_bpf_text_address+0x292/0x2b0 [ 88.161018][ T5640] ? is_bpf_text_address+0x26/0x2b0 [ 88.166257][ T5640] panic+0xc5/0xd0 [ 88.170008][ T5640] ? __pfx_panic+0x10/0x10 [ 88.174488][ T5640] __warn+0x315/0x4c0 [ 88.178610][ T5640] ? usb_submit_urb+0x1057/0x18b0 [ 88.183718][ T5640] ? usb_submit_urb+0x1057/0x18b0 [ 88.188764][ T5640] __report_bug+0x276/0x570 [ 88.193287][ T5640] ? usb_submit_urb+0x1057/0x18b0 [ 88.198386][ T5640] ? __pfx___report_bug+0x10/0x10 [ 88.203420][ T5640] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 88.209505][ T5640] ? __kmalloc_noprof+0x1ad/0x720 [ 88.214551][ T5640] ? kasan_save_track+0x4f/0x80 [ 88.219446][ T5640] report_bug_entry+0x19a/0x290 [ 88.224329][ T5640] ? usb_submit_urb+0x1100/0x18b0 [ 88.229403][ T5640] ? usb_submit_urb+0x1105/0x18b0 [ 88.234459][ T5640] handle_bug+0xce/0x200 [ 88.238735][ T5640] exc_invalid_op+0x1a/0x50 [ 88.243263][ T5640] asm_exc_invalid_op+0x1a/0x20 [ 88.248135][ T5640] RIP: 0010:usb_submit_urb+0x1100/0x18b0 [ 88.253795][ T5640] Code: b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 0f 85 b2 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 18 4c 89 f2 44 89 f9 <67> 48 0f b9 3a 48 bd 00 00 00 00 00 fc ff df e9 ba f2 ff ff 44 89 [ 88.273597][ T5640] RSP: 0018:ffffc90003d1f958 EFLAGS: 00010246 [ 88.279699][ T5640] RAX: 0000000000000000 RBX: ffff8880202adb00 RCX: 0000000080000280 [ 88.287690][ T5640] RDX: ffff888033704aa0 RSI: ffffffff8ca31d40 RDI: ffffffff906589b0 [ 88.295692][ T5640] RBP: dffffc0000000000 R08: 00000000000000c0 R09: 0000000000000000 [ 88.303691][ T5640] R10: ffffc90003d1fa40 R11: fffff520007a3f54 R12: 1ffff11006ab6954 [ 88.311684][ T5640] R13: ffff8880355b4aa0 R14: ffff888033704aa0 R15: 0000000080000280 [ 88.319694][ T5640] ? usb_submit_urb+0x1091/0x18b0 [ 88.324760][ T5640] usb_start_wait_urb+0x13f/0x5b0 [ 88.329822][ T5640] ? trace_kmalloc+0x2a/0xf0 [ 88.334447][ T5640] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 88.340038][ T5640] usb_control_msg+0x234/0x3e0 [ 88.344837][ T5640] dtv5100_i2c_msg+0x231/0x2f0 [ 88.349643][ T5640] dtv5100_i2c_xfer+0x280/0x610 [ 88.354532][ T5640] __i2c_transfer+0x7be/0x1fe0 [ 88.359342][ T5640] ? rt_mutex_lock_nested+0x167/0x1c0 [ 88.364741][ T5640] ? i2c_transfer+0xc8/0x2d0 [ 88.369492][ T5640] i2c_transfer+0x1cc/0x2d0 [ 88.374029][ T5640] i2cdev_ioctl_rdwr+0x460/0x740 [ 88.379000][ T5640] i2cdev_ioctl+0x6a5/0x880 [ 88.383534][ T5640] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 88.388593][ T5640] ? bpf_lsm_file_ioctl+0x9/0x20 [ 88.393557][ T5640] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 88.398607][ T5640] __se_sys_ioctl+0xfc/0x170 [ 88.403222][ T5640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.409312][ T5640] do_syscall_64+0x174/0x580 [ 88.413927][ T5640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.420021][ T5640] ? clear_bhb_loop+0x40/0x90 [ 88.424727][ T5640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.430644][ T5640] RIP: 0033:0x7f8c9b857109 [ 88.435091][ T5640] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48 [ 88.454712][ T5640] RSP: 002b:00007ffd98c00e48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 88.463152][ T5640] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8c9b857109 [ 88.471167][ T5640] RDX: 0000200000000240 RSI: 0000000000000707 RDI: 0000000000000004 [ 88.479165][ T5640] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000006 [ 88.487162][ T5640] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd98c00fb8 [ 88.495257][ T5640] R13: 431bde82d7b634db R14: 00007f8c9b8e9c40 R15: 0000000000000002 [ 88.503396][ T5640] [ 88.506622][ T5640] Kernel Offset: disabled [ 88.510969][ T5640] Rebooting in 86400 seconds..