ci-upstream-kasan-gce/strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ci-upstream-kasan-gce/syz-executor1551467361 <...> Warning: Permanently added '10.128.1.1' (ED25519) to the list of known hosts. [ 92.083391][ T9] cfg80211: failed to load regulatory.db execve("ci-upstream-kasan-gce/syz-executor1551467361", ["ci-upstream-kasan-gce/syz-executor1551467361"], 0x7ffc4894a330 /* 10 vars */) = 0 brk(NULL) = 0x555568b12000 brk(0x555568b12d80) = 0x555568b12d80 arch_prctl(ARCH_SET_FS, 0x555568b12400) = 0 set_tid_address(0x555568b126d0) = 5636 set_robust_list(0x555568b126e0, 24) = 0 rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlinkat(AT_FDCWD, "/proc/self/exe", "/root/ci-upstream-kasan-gce/syz-executor1551467361", 4096) = 50 getrandom("\x76\x76\x44\x67\xdd\xbf\xe9\xc3", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555568b12d80 brk(0x555568b33d80) = 0x555568b33d80 brk(0x555568b34000) = 0x555568b34000 mprotect(0x7f383f2d5000, 20480, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555568b126d0) = 5637 ci-upstream-kasan-gce/strace-static-x86_64: Process 5637 attached [pid 5636] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5637] set_robust_list(0x555568b126e0, 24) = 0 [pid 5637] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5637] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5637] setpgid(0, 0) = 0 [pid 5637] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5637] write(3, "1000", 4) = 4 [pid 5637] close(3) = 0 executing program [pid 5637] write(1, "executing program\n", 18) = 18 [pid 5637] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5637] ioctl(3, USB_RAW_IOCTL_INIT, 0x7fffa0627b60) = 0 [pid 5637] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5637] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fffa0627b60) = 0 [pid 5637] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fffa0627b60) = 0 [pid 5637] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fffa0627b60) = 0 [pid 5637] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fffa0627b60) = 0 [pid 5637] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fffa0626b50) = 18 [pid 5637] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fffa0627b60) = 0 [pid 5637] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fffa0627b60) = 0 [ 92.737023][ T44] usb 1-1: new high-speed USB device number 2 using dummy_hcd [pid 5637] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fffa0627b60) = 0 [pid 5637] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fffa0626b50) = 18 [pid 5637] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fffa0627b60) = 0 [pid 5637] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fffa0626b50) = 9 [pid 5637] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fffa0627b60) = 0 [pid 5637] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fffa0626b50) = 27 [pid 5637] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fffa0627b60) = 0 [pid 5637] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fffa0626b50) = 4 [ 92.886893][ T44] usb 1-1: Using ep0 maxpacket: 32 [ 92.888925][ T44] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 92.911978][ T44] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 92.912000][ T44] usb 1-1: config 0 has no interface number 0 [ 92.912032][ T44] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has an invalid bInterval 52, changing to 7 [pid 5637] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fffa0627b60) = 0 [pid 5637] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fffa0626b50) = 8 [pid 5637] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fffa0627b60) = 0 [pid 5637] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fffa0626b50) = 8 [pid 5637] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fffa0627b60) = 0 [pid 5637] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fffa0626b50) = 8 [ 92.912050][ T44] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid maxpacket 9272, setting to 1024 [ 92.967478][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.967508][ T44] usb 1-1: Product: syz [ 92.967524][ T44] usb 1-1: Manufacturer: syz [pid 5637] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fffa0627b60) = 0 [pid 5637] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0x2) = 0 [pid 5637] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5637] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f383f2dbb4c) = -1 EINVAL (Invalid argument) [pid 5637] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7fffa0626b50) = 0 [ 92.967539][ T44] usb 1-1: SerialNumber: syz [ 92.972308][ T44] usb 1-1: config 0 descriptor?? [ 93.022653][ T44] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 93.022683][ T44] em28xx 1-1:0.132: Video interface 132 found: isoc [pid 5637] exit_group(0) = ? [pid 5637] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5637, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-kasan-gce/strace-static-x86_64: Process 5641 attached , child_tidptr=0x555568b126d0) = 5641 [pid 5636] rt_sigprocmask(SIG_SETMASK, [] [pid 5641] set_robust_list(0x555568b126e0, 24 [pid 5636] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5641] <... set_robust_list resumed>) = 0 [pid 5641] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5641] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5641] setpgid(0, 0) = 0 [pid 5641] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5641] write(3, "1000", 4) = 4 [pid 5641] close(3) = 0 executing program [pid 5641] write(1, "executing program\n", 18) = 18 [pid 5641] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5641] ioctl(3, USB_RAW_IOCTL_INIT, 0x7fffa0627b60) = 0 [pid 5641] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5641] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fffa0627b60) = 0 [ 93.298460][ T44] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 93.363473][ T44] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 93.363532][ T44] em28xx 1-1:0.132: board has no eeprom [ 93.416874][ T44] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 93.416911][ T44] em28xx 1-1:0.132: analog set to isoc mode. [ 93.427799][ T44] usb 1-1: USB disconnect, device number 2 [ 93.433469][ T44] em28xx 1-1:0.132: Disconnecting em28xx [ 93.441146][ T993] em28xx 1-1:0.132: Registering V4L2 extension [ 93.548058][ T993] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 93.548081][ T993] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 93.548092][ T993] em28xx 1-1:0.132: No AC97 audio processor [ 93.550996][ T993] usb 1-1: Decoder not found [ 93.551010][ T993] em28xx 1-1:0.132: failed to create media graph [ 93.551030][ T993] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 93.554042][ T993] INFO: trying to register non-static key. [ 93.598562][ T993] The code is fine but needs lockdep annotation, or maybe [ 93.605688][ T993] you didn't initialize this object before use? [ 93.611942][ T993] turning off the locking correctness validator. [ 93.618292][ T993] CPU: 1 UID: 0 PID: 993 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT(full) [ 93.627577][ T993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 93.637635][ T993] Workqueue: events request_module_async [ 93.643404][ T993] Call Trace: [ 93.646686][ T993] [ 93.649658][ T993] dump_stack_lvl+0xe8/0x150 [ 93.654257][ T993] assign_lock_key+0x133/0x150 [ 93.659026][ T993] register_lock_class+0xcc/0x2e0 [ 93.664063][ T993] __lock_acquire+0x10c/0x2de0 [ 93.668842][ T993] ? __mutex_trylock_common+0x15f/0x270 [ 93.674406][ T993] ? __pfx___mutex_trylock_common+0x10/0x10 [ 93.680307][ T993] lock_acquire+0x115/0x350 [ 93.684815][ T993] ? __wake_up_common_lock+0x30/0x1f0 [ 93.690205][ T993] ? rcu_is_watching+0x16/0xb0 [ 93.694983][ T993] _raw_spin_lock_irqsave+0x40/0x60 [ 93.700201][ T993] ? __wake_up_common_lock+0x30/0x1f0 [ 93.705592][ T993] __wake_up_common_lock+0x30/0x1f0 [ 93.710817][ T993] ? __pfx___mutex_lock+0x10/0x10 [ 93.715899][ T993] __vb2_queue_cancel+0x2de/0xde0 [ 93.720945][ T993] ? __vb2_cleanup_fileio+0x134/0x1f0 [ 93.726336][ T993] vb2_core_queue_release+0x2f/0x150 [ 93.731632][ T993] vb2_video_unregister_device+0x15b/0x200 [ 93.737482][ T993] em28xx_v4l2_init+0x1c89/0x3150 [ 93.742531][ T993] em28xx_init_extension+0x120/0x1d0 [ 93.747865][ T993] ? process_scheduled_works+0x97a/0x1630 [ 93.753593][ T993] process_scheduled_works+0xc3d/0x1630 [ 93.759160][ T993] ? __pfx_process_scheduled_works+0x10/0x10 [ 93.765157][ T993] ? assign_work+0x3cf/0x5d0 [ 93.769757][ T993] worker_thread+0xa47/0xfb0 [ 93.774365][ T993] ? __kthread_parkme+0x71/0x1f0 [ 93.779321][ T993] kthread+0x38b/0x480 [ 93.783394][ T993] ? __pfx_worker_thread+0x10/0x10 [ 93.788532][ T993] ? __pfx_kthread+0x10/0x10 [ 93.793131][ T993] ret_from_fork+0x514/0xb70 [ 93.797727][ T993] ? __pfx_ret_from_fork+0x10/0x10 [ 93.802875][ T993] ? __switch_to+0xc89/0x1420 [ 93.807581][ T993] ? __pfx_kthread+0x10/0x10 [ 93.812174][ T993] ret_from_fork_asm+0x1a/0x30 [ 93.816958][ T993] [ 93.820046][ T993] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 93.831957][ T993] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 93.840396][ T993] CPU: 1 UID: 0 PID: 993 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT(full) [ 93.849682][ T993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 93.859746][ T993] Workqueue: events request_module_async [ 93.865392][ T993] RIP: 0010:__wake_up_common_lock+0xd6/0x1f0 [ 93.871386][ T993] Code: 0f 84 d4 00 00 00 44 8b 64 24 04 eb 13 48 ba 00 00 00 00 00 fc ff df 4c 39 fd 0f 84 ba 00 00 00 49 89 ee 48 89 e8 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 f7 e8 bc a2 97 00 48 ba 00 00 00 00 00 fc [ 93.891021][ T993] RSP: 0018:ffffc900050cf880 EFLAGS: 00010046 [ 93.897109][ T993] RAX: 0000000000000000 RBX: ffff88807f461740 RCX: 0000000000000001 [ 93.905085][ T993] RDX: dffffc0000000000 RSI: 0000000000000004 RDI: ffffc900050cf7e0 [ 93.913080][ T993] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 93.921068][ T993] R10: dffffc0000000000 R11: fffff52000a19efc R12: 0000000000000000 [ 93.929042][ T993] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88807f4617d0 [ 93.937040][ T993] FS: 0000000000000000(0000) GS:ffff888124dd1000(0000) knlGS:0000000000000000 [ 93.945969][ T993] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 93.952557][ T993] CR2: 000055ba0650b1b8 CR3: 000000007e78a000 CR4: 00000000003526f0 [ 93.960537][ T993] Call Trace: [ 93.963852][ T993] [ 93.966794][ T993] __vb2_queue_cancel+0x2de/0xde0 [ 93.971857][ T993] ? __vb2_cleanup_fileio+0x134/0x1f0 [ 93.977246][ T993] vb2_core_queue_release+0x2f/0x150 [ 93.982553][ T993] vb2_video_unregister_device+0x15b/0x200 [ 93.988391][ T993] em28xx_v4l2_init+0x1c89/0x3150 [ 93.993443][ T993] em28xx_init_extension+0x120/0x1d0 [ 93.998753][ T993] ? process_scheduled_works+0x97a/0x1630 [ 94.004500][ T993] process_scheduled_works+0xc3d/0x1630 [ 94.010076][ T993] ? __pfx_process_scheduled_works+0x10/0x10 [ 94.016083][ T993] ? assign_work+0x3cf/0x5d0 [ 94.020704][ T993] worker_thread+0xa47/0xfb0 [ 94.025317][ T993] ? __kthread_parkme+0x71/0x1f0 [ 94.030277][ T993] kthread+0x38b/0x480 [ 94.034355][ T993] ? __pfx_worker_thread+0x10/0x10 [ 94.039486][ T993] ? __pfx_kthread+0x10/0x10 [ 94.044081][ T993] ret_from_fork+0x514/0xb70 [ 94.048697][ T993] ? __pfx_ret_from_fork+0x10/0x10 [ 94.053895][ T993] ? __switch_to+0xc89/0x1420 [ 94.058605][ T993] ? __pfx_kthread+0x10/0x10 [ 94.063203][ T993] ret_from_fork_asm+0x1a/0x30 [ 94.068007][ T993] [ 94.071026][ T993] Modules linked in: [ 94.074937][ T993] ---[ end trace 0000000000000000 ]--- [ 94.080577][ T993] RIP: 0010:__wake_up_common_lock+0xd6/0x1f0 [ 94.080604][ T993] Code: 0f 84 d4 00 00 00 44 8b 64 24 04 eb 13 48 ba 00 00 00 00 00 fc ff df 4c 39 fd 0f 84 ba 00 00 00 49 89 ee 48 89 e8 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 f7 e8 bc a2 97 00 48 ba 00 00 00 00 00 fc [ 94.080616][ T993] RSP: 0018:ffffc900050cf880 EFLAGS: 00010046 [ 94.080630][ T993] RAX: 0000000000000000 RBX: ffff88807f461740 RCX: 0000000000000001 [ 94.080641][ T993] RDX: dffffc0000000000 RSI: 0000000000000004 RDI: ffffc900050cf7e0 [ 94.080651][ T993] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 94.080659][ T993] R10: dffffc0000000000 R11: fffff52000a19efc R12: 0000000000000000 [ 94.080670][ T993] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88807f4617d0 [ 94.080680][ T993] FS: 0000000000000000(0000) GS:ffff888124dd1000(0000) knlGS:0000000000000000 [ 94.080692][ T993] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 94.080702][ T993] CR2: 000055ba0650b1b8 CR3: 000000007e78a000 CR4: 00000000003526f0 [ 94.080717][ T993] Kernel panic - not syncing: Fatal exception [ 94.182613][ T993] Kernel Offset: disabled [ 94.186958][ T993] Rebooting in 86400 seconds..