ci-upstream-rust-kasan-gce/strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ci-upstream-rust-kasan-gce/syz-executor808118897 <...> Warning: Permanently added '10.128.0.119' (ED25519) to the list of known hosts. execve("ci-upstream-rust-kasan-gce/syz-executor808118897", ["ci-upstream-rust-kasan-gce/syz-executor808118897"], 0x7ffd8c00cc00 /* 10 vars */) = 0 brk(NULL) = 0x55558d4ea000 brk(0x55558d4ead80) = 0x55558d4ead80 arch_prctl(ARCH_SET_FS, 0x55558d4ea400) = 0 set_tid_address(0x55558d4ea6d0) = 5614 set_robust_list(0x55558d4ea6e0, 24) = 0 rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlinkat(AT_FDCWD, "/proc/self/exe", "/root/ci-upstream-rust-kasan-gce/syz-executor808118897", 4096) = 54 getrandom("\xbb\x7e\x84\xcd\x23\xbc\x17\x9b", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55558d4ead80 brk(0x55558d50bd80) = 0x55558d50bd80 brk(0x55558d50c000) = 0x55558d50c000 mprotect(0x7f7f44780000, 20480, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-rust-kasan-gce/strace-static-x86_64: Process 5615 attached , child_tidptr=0x55558d4ea6d0) = 5615 [pid 5615] set_robust_list(0x55558d4ea6e0, 24 [pid 5614] rt_sigprocmask(SIG_SETMASK, [] [pid 5615] <... set_robust_list resumed>) = 0 [pid 5614] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5615] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5615] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5615] setpgid(0, 0) = 0 [pid 5615] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5615] write(3, "1000", 4) = 4 [pid 5615] close(3) = 0 [pid 5615] write(1, "executing program\n", 18) = 18 executing program [pid 5615] mkdirat(AT_FDCWD, "./my_configfs", 0777) = 0 [pid 5615] mount(NULL, "./my_configfs", "configfs", 0, NULL) = 0 [pid 5615] mkdirat(AT_FDCWD, "./my_configfs/usb_gadget/g1", 0777) = 0 [pid 5615] mkdirat(AT_FDCWD, "./my_configfs/usb_gadget/g1/configs/c.1", 0777) = 0 [pid 5615] mkdirat(AT_FDCWD, "./my_configfs/usb_gadget/g1/functions/midi2.usb0", 0777) = 0 [pid 5615] openat(AT_FDCWD, "./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/direction", O_WRONLY) = 3 [pid 5615] write(3, "1", 1) = 1 [pid 5615] symlinkat("./my_configfs/usb_gadget/g1/functions/midi2.usb0", AT_FDCWD, "./my_configfs/usb_gadget/g1/configs/c.1/midi2.usb0") = 0 [pid 5615] openat(AT_FDCWD, "./my_configfs/usb_gadget/g1/UDC", O_WRONLY) = 4 [pid 5615] write(4, "dummy_udc.0", 11) = 11 [pid 5615] exit_group(0) = ? [pid 5615] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5615, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-rust-kasan-gce/strace-static-x86_64: Process 5618 attached [pid 5618] set_robust_list(0x55558d4ea6e0, 24 [pid 5614] <... clone resumed>, child_tidptr=0x55558d4ea6d0) = 5618 [pid 5618] <... set_robust_list resumed>) = 0 [pid 5614] rt_sigprocmask(SIG_SETMASK, [] [pid 5618] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5614] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5618] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5618] setpgid(0, 0) = 0 [pid 5618] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5618] write(3, "1000", 4) = 4 [pid 5618] close(3) = 0 executing program [pid 5618] write(1, "executing program\n", 18) = 18 [pid 5618] mkdirat(AT_FDCWD, "./my_configfs", 0777) = -1 EEXIST (File exists) [pid 5618] mount(NULL, "./my_configfs", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 5618] mkdirat(AT_FDCWD, "./my_configfs/usb_gadget/g1", 0777) = -1 EEXIST (File exists) [pid 5618] mkdirat(AT_FDCWD, "./my_configfs/usb_gadget/g1/configs/c.1", 0777) = -1 EEXIST (File exists) [pid 5618] mkdirat(AT_FDCWD, "./my_configfs/usb_gadget/g1/functions/midi2.usb0", 0777) = -1 EEXIST (File exists) [pid 5618] openat(AT_FDCWD, "./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/direction", O_WRONLY) = 3 [pid 5618] write(3, "1", 1) = -1 EBUSY (Device or resource busy) [pid 5618] symlinkat("./my_configfs/usb_gadget/g1/functions/midi2.usb0", AT_FDCWD, "./my_configfs/usb_gadget/g1/configs/c.1/midi2.usb0") = -1 EEXIST (File exists) [pid 5618] openat(AT_FDCWD, "./my_configfs/usb_gadget/g1/UDC", O_WRONLY) = 4 [pid 5618] write(4, "dummy_udc.0", 11) = -1 EBUSY (Device or resource busy) [pid 5618] exit_group(0) = ? [pid 5618] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5618, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-rust-kasan-gce/strace-static-x86_64: Process 5619 attached , child_tidptr=0x55558d4ea6d0) = 5619 [pid 5619] set_robust_list(0x55558d4ea6e0, 24) = 0 [pid 5614] rt_sigprocmask(SIG_SETMASK, [] [pid 5619] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5614] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5619] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5619] setpgid(0, 0) = 0 [pid 5619] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5619] write(3, "1000", 4) = 4 [pid 5619] close(3) = 0 [pid 5619] write(1, "executing program\n", 18) = 18 executing program [pid 5619] mkdirat(AT_FDCWD, "./my_configfs", 0777) = -1 EEXIST (File exists) [pid 5619] mount(NULL, "./my_configfs", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 5619] mkdirat(AT_FDCWD, "./my_configfs/usb_gadget/g1", 0777) = -1 EEXIST (File exists) [pid 5619] mkdirat(AT_FDCWD, "./my_configfs/usb_gadget/g1/configs/c.1", 0777) = -1 EEXIST (File exists) [pid 5619] mkdirat(AT_FDCWD, "./my_configfs/usb_gadget/g1/functions/midi2.usb0", 0777) = -1 EEXIST (File exists) [pid 5619] openat(AT_FDCWD, "./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/direction", O_WRONLY) = 3 [pid 5619] write(3, "1", 1) = -1 EBUSY (Device or resource busy) [ 101.781506][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [pid 5619] symlinkat("./my_configfs/usb_gadget/g1/functions/midi2.usb0", AT_FDCWD, "./my_configfs/usb_gadget/g1/configs/c.1/midi2.usb0") = -1 EEXIST (File exists) [pid 5619] openat(AT_FDCWD, "./my_configfs/usb_gadget/g1/UDC", O_WRONLY) = 4 [pid 5619] write(4, "dummy_udc.0", 11) = -1 EBUSY (Device or resource busy) [pid 5619] exit_group(0) = ? [pid 5619] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5619, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-rust-kasan-gce/strace-static-x86_64: Process 5620 attached , child_tidptr=0x55558d4ea6d0) = 5620 [pid 5620] set_robust_list(0x55558d4ea6e0, 24) = 0 [pid 5614] rt_sigprocmask(SIG_SETMASK, [] [pid 5620] rt_sigprocmask(SIG_SETMASK, [] [pid 5614] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5620] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5620] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5620] setpgid(0, 0) = 0 [pid 5620] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5620] write(3, "1000", 4) = 4 [pid 5620] close(3) = 0 [pid 5620] write(1, "executing program\n", 18) = 18 executing program [pid 5620] mkdirat(AT_FDCWD, "./my_configfs", 0777) = -1 EEXIST (File exists) [pid 5620] mount(NULL, "./my_configfs", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 5620] mkdirat(AT_FDCWD, "./my_configfs/usb_gadget/g1", 0777) = -1 EEXIST (File exists) [pid 5620] mkdirat(AT_FDCWD, "./my_configfs/usb_gadget/g1/configs/c.1", 0777) = -1 EEXIST (File exists) [ 101.946448][ T10] usb 1-1: Dual-Role OTG device on HNP port [ 101.946746][ T10] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 101.946764][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [pid 5620] mkdirat(AT_FDCWD, "./my_configfs/usb_gadget/g1/functions/midi2.usb0", 0777) = -1 EEXIST (File exists) [pid 5620] openat(AT_FDCWD, "./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/direction", O_WRONLY) = 3 [pid 5620] write(3, "1", 1) = -1 EBUSY (Device or resource busy) [ 101.996814][ T10] gspca_main: spca501-2.14.0 probing 0000:0000 [ 102.001886][ T10] gspca_spca501: reg write: error -32 [ 102.001902][ T10] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 102.002156][ T10] spca501 1-1:1.0: probe with driver spca501 failed with error -22 [ 102.035984][ C0] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000ee: 0000 [#1] SMP KASAN PTI [ 102.036010][ C0] KASAN: null-ptr-deref in range [0x0000000000000770-0x0000000000000777] [ 102.036047][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 102.036074][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 102.036088][ C0] RIP: 0010:f_midi2_stop_eps+0x28e/0x4d0 [ 102.036123][ C0] Code: 89 f0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 27 c6 de fa 41 bf 70 07 00 00 4d 03 3e 4c 89 f8 48 c1 e8 03 48 89 44 24 18 <42> 0f b6 04 28 84 c0 0f 85 12 02 00 00 41 8b 1f 31 ff 89 de e8 c9 [ 102.036142][ C0] RSP: 0018:ffffc900001576f8 EFLAGS: 00010206 [ 102.036168][ C0] RAX: 00000000000000ee RBX: ffff88803c288120 RCX: ffff88801daf0000 [ 102.036185][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 102.036199][ C0] RBP: ffff88803c288100 R08: ffffffff8fd0c47f R09: 1ffffffff1fa188f [ 102.036216][ C0] R10: dffffc0000000000 R11: fffffbfff1fa1890 R12: ffff88803c288770 [ 102.036231][ C0] R13: dffffc0000000000 R14: ffff88803c288128 R15: 0000000000000770 [ 102.036246][ C0] FS: 0000000000000000(0000) GS:ffff8881259f2000(0000) knlGS:0000000000000000 [ 102.036262][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 102.036278][ C0] CR2: 00007f7f4472c1f0 CR3: 0000000045da8000 CR4: 00000000003526f0 [ 102.036298][ C0] Call Trace: [ 102.036305][ C0] [ 102.036319][ C0] f_midi2_set_alt+0x11c/0xf00 [ 102.036340][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 102.036365][ C0] ? rcu_is_watching+0x15/0xb0 [ 102.036393][ C0] composite_setup+0x1ffd/0x3480 [ 102.036429][ C0] configfs_composite_setup+0xbd/0x100 [ 102.036470][ C0] dummy_timer+0x2ea8/0x4b30 [ 102.036508][ C0] ? __lock_acquire+0x6df/0x2e40 [ 102.036544][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 102.036580][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 102.036615][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 102.036637][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 102.036668][ C0] __hrtimer_run_queues+0x3eb/0xaf0 [ 102.036706][ C0] hrtimer_run_softirq+0x18f/0x260 [ 102.036739][ C0] handle_softirqs+0x1d9/0x6c0 [ 102.036766][ C0] run_ktimerd+0x69/0x100 [ 102.036792][ C0] smpboot_thread_fn+0x57c/0xa80 [ 102.036818][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 102.036847][ C0] kthread+0x388/0x470 [ 102.036880][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 102.036905][ C0] ? __pfx_kthread+0x10/0x10 [ 102.036934][ C0] ret_from_fork+0x514/0xb70 [ 102.036966][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 102.036996][ C0] ? __switch_to+0xc89/0x1420 [ 102.037021][ C0] ? __pfx_kthread+0x10/0x10 [ 102.037050][ C0] ret_from_fork_asm+0x1a/0x30 [ 102.037086][ C0] [ 102.037094][ C0] Modules linked in: [ 102.037124][ C0] ---[ end trace 0000000000000000 ]--- [ 102.037141][ C0] RIP: 0010:f_midi2_stop_eps+0x28e/0x4d0 [ 102.037168][ C0] Code: 89 f0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 27 c6 de fa 41 bf 70 07 00 00 4d 03 3e 4c 89 f8 48 c1 e8 03 48 89 44 24 18 <42> 0f b6 04 28 84 c0 0f 85 12 02 00 00 41 8b 1f 31 ff 89 de e8 c9 [ 102.037186][ C0] RSP: 0018:ffffc900001576f8 EFLAGS: 00010206 [ 102.037204][ C0] RAX: 00000000000000ee RBX: ffff88803c288120 RCX: ffff88801daf0000 [ 102.037221][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 102.037235][ C0] RBP: ffff88803c288100 R08: ffffffff8fd0c47f R09: 1ffffffff1fa188f [ 102.037252][ C0] R10: dffffc0000000000 R11: fffffbfff1fa1890 R12: ffff88803c288770 [ 102.037269][ C0] R13: dffffc0000000000 R14: ffff88803c288128 R15: 0000000000000770 [ 102.037286][ C0] FS: 0000000000000000(0000) GS:ffff8881259f2000(0000) knlGS:0000000000000000 [ 102.037303][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 102.037318][ C0] CR2: 00007f7f4472c1f0 CR3: 0000000045da8000 CR4: 00000000003526f0 [ 102.037341][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 102.037519][ C0] Kernel Offset: disabled