ci-upstream-kasan-gce-root/strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ci-upstream-kasan-gce-root/syz-executor3260679829 <...> Warning: Permanently added '10.128.0.73' (ED25519) to the list of known hosts. execve("ci-upstream-kasan-gce-root/syz-executor3260679829", ["ci-upstream-kasan-gce-root/syz-executor3260679829"], 0x7ffd8e6107f0 /* 10 vars */) = 0 brk(NULL) = 0x555563ac3000 brk(0x555563ac3d80) = 0x555563ac3d80 arch_prctl(ARCH_SET_FS, 0x555563ac3400) = 0 set_tid_address(0x555563ac36d0) = 5648 set_robust_list(0x555563ac36e0, 24) = 0 rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlinkat(AT_FDCWD, "/proc/self/exe", "/root/ci-upstream-kasan-gce-root/syz-executor3260679829", 4096) = 55 getrandom("\x64\xb4\xb5\xbe\x7e\xd5\x9b\x55", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555563ac3d80 brk(0x555563ae4d80) = 0x555563ae4d80 brk(0x555563ae5000) = 0x555563ae5000 mprotect(0x7fe44ec69000, 20480, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-kasan-gce-root/strace-static-x86_64: Process 5649 attached [pid 5649] set_robust_list(0x555563ac36e0, 24 [pid 5648] <... clone resumed>, child_tidptr=0x555563ac36d0) = 5649 [pid 5649] <... set_robust_list resumed>) = 0 [pid 5648] rt_sigprocmask(SIG_SETMASK, [] [pid 5649] rt_sigprocmask(SIG_SETMASK, [] [pid 5648] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5649] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5649] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5649] setpgid(0, 0) = 0 [pid 5649] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5649] write(3, "1000", 4) = 4 [pid 5649] close(3) = 0 [pid 5649] write(1, "executing program\n", 18) = 18 executing program [pid 5649] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5649] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffd4023da90) = 0 [pid 5649] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5649] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd4023da90) = 0 [pid 5649] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd4023da90) = 0 [pid 5649] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd4023da90) = 0 [pid 5649] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd4023da90) = 0 [pid 5649] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd4023ca80) = 18 [pid 5649] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd4023da90) = 0 [ 144.422190][ T1225] usb 1-1: new high-speed USB device number 2 using dummy_hcd [pid 5649] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd4023da90) = 0 [pid 5649] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd4023da90) = 0 [pid 5649] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd4023ca80) = 18 [pid 5649] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd4023da90) = 0 [pid 5649] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd4023ca80) = 9 [pid 5649] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd4023da90) = 0 [pid 5649] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd4023ca80) = 32 [pid 5649] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd4023da90) = 0 [pid 5649] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0x32) = 0 [pid 5649] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5649] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7fe44ec6fb4c) = 0 [pid 5649] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7fe44ec6fb5c) = 1 [pid 5649] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffd4023ca80) = 0 [ 144.584932][ T1225] usb 1-1: New USB device found, idVendor=05c6, idProduct=1000, bcdDevice= 0.00 [ 144.589414][ T1225] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.635947][ T1225] usb-storage 1-1:1.0: USB Mass Storage device detected [pid 5649] mkdir("./debug", 0767) = 0 [pid 5649] mount(NULL, "./debug", "debugfs", 0, NULL) = 0 [pid 5649] openat(AT_FDCWD, "./debug/usb/devices", O_RDONLY) = 4 [pid 5649] read(4 [pid 5648] kill(-5649, SIGKILL) = 0 [pid 5648] kill(5649, SIGKILL) = 0 [pid 5648] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5648] fstat(3, {st_mode=S_IFDIR|0755, st_size=0, ...}) = 0 [pid 5648] getdents64(3, 0x555563ac47a0 /* 2 entries */, 32768) = 48 [pid 5648] getdents64(3, 0x555563ac47a0 /* 0 entries */, 32768) = 0 [pid 5648] close(3) = 0 [ 291.981574][ T32] INFO: task syz-executor326:5649 blocked for more than 143 seconds. [ 291.981605][ T32] Not tainted syzkaller #0 [ 291.981616][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 291.981625][ T32] task:syz-executor326 state:D stack:26856 pid:5649 tgid:5649 ppid:5648 task_flags:0x400140 flags:0x00080002 [ 291.981734][ T32] Call Trace: [ 291.981744][ T32] [ 291.981759][ T32] __schedule+0x17db/0x58f0 [ 291.981820][ T32] ? __pfx___schedule+0x10/0x10 [ 291.981859][ T32] ? schedule+0x90/0x2b0 [ 291.981889][ T32] schedule+0x164/0x2b0 [ 291.981914][ T32] schedule_preempt_disabled+0x13/0x30 [ 291.981934][ T32] __mutex_lock+0x7c1/0x1550 [ 291.981959][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 291.981998][ T32] ? __mutex_lock+0x5d4/0x1550 [ 291.982032][ T32] ? usb_device_read+0x17c/0x2c0 [ 291.982071][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 291.982102][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 291.982133][ T32] ? rcu_is_watching+0x16/0xb0 [ 291.982169][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 291.982196][ T32] ? trace_sched_exit_tp+0x3a/0x130 [ 291.982228][ T32] usb_device_read+0x17c/0x2c0 [ 291.982259][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 291.982309][ T32] ? __pfx_usb_device_read+0x10/0x10 [ 291.982349][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 291.982381][ T32] full_proxy_read+0x127/0x1f0 [ 291.982415][ T32] ? __pfx_full_proxy_read+0x10/0x10 [ 291.982450][ T32] vfs_read+0x213/0xa80 [ 291.982478][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 291.982511][ T32] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 291.982546][ T32] ? __pfx_vfs_read+0x10/0x10 [ 291.982570][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 291.982606][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 291.982637][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 291.982662][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 291.982689][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 291.982718][ T32] ksys_read+0x150/0x270 [ 291.982750][ T32] ? __pfx_ksys_read+0x10/0x10 [ 291.982789][ T32] do_syscall_64+0x166/0x520 [ 291.982817][ T32] ? trace_irq_disable+0x3b/0x140 [ 291.982839][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.982866][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.982893][ T32] RIP: 0033:0x7fe44ebd6009 [ 291.982916][ T32] RSP: 002b:00007ffd4023ead8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 291.982941][ T32] RAX: ffffffffffffffda RBX: 0067756265642f2e RCX: 00007fe44ebd6009 [ 291.982959][ T32] RDX: 0000000000002020 RSI: 00002000000010c0 RDI: 0000000000000004 [ 291.982971][ T32] RBP: 0000000000000001 R08: 0000000000000006 R09: 0000000000000006 [ 291.982983][ T32] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffd4023ec48 [ 291.982996][ T32] R13: 431bde82d7b634db R14: 00007fe44ec69c40 R15: 0000000000000002 [ 291.983031][ T32] [ 291.983047][ T32] [ 291.983047][ T32] Showing all locks held in the system: [ 291.983062][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 291.983080][ T32] #0: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 291.983141][ T32] locks held by kworker/u8:5/80: 2, on CPU#0: [ 291.983154][ T32] #0: ffff88801c0a4140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 291.983227][ T32] #1: ffffc900024bfc40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 291.983307][ T32] locks held by kworker/1:2/1225: 5, on CPU#1: [ 291.983321][ T32] #0: ffff8880246e9140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 291.983393][ T32] #1: ffffc9000586fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 291.983455][ T32] #2: ffff88802a6911d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 291.983525][ T32] #3: ffff888036d7b1d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 291.983593][ T32] #4: ffff88807f63f1a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 291.983676][ T32] locks held by getty/5367: 2, on CPU#0: [ 291.983693][ T32] #0: ffff888036e290a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 291.983753][ T32] #1: ffffc9000323b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 291.983828][ T32] locks held by syz-executor326/5649: 2, on CPU#0: [ 291.983845][ T32] #0: ffffffff90b04160 (usb_bus_idr_lock){+.+.}-{4:4}, at: usb_device_read+0xe7/0x2c0 [ 291.983911][ T32] #1: ffff88802a6911d8 (&dev->mutex){....}-{4:4}, at: usb_device_read+0x17c/0x2c0 [ 291.983982][ T32] [ 291.983988][ T32] ============================================= [ 291.983988][ T32] [ 291.983999][ T32] NMI backtrace for cpu 0 [ 291.984015][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 291.984038][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 291.984049][ T32] Call Trace: [ 291.984057][ T32] [ 291.984066][ T32] dump_stack_lvl+0xe8/0x150 [ 291.984103][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 291.984143][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 291.984188][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 291.984220][ T32] sys_info+0x135/0x170 [ 291.984252][ T32] watchdog+0xfd7/0x1030 [ 291.984299][ T32] ? watchdog+0x1c7/0x1030 [ 291.984334][ T32] kthread+0x38b/0x480 [ 291.984357][ T32] ? __pfx_watchdog+0x10/0x10 [ 291.984375][ T32] ? __pfx_kthread+0x10/0x10 [ 291.984400][ T32] ret_from_fork+0x514/0xb70 [ 291.984431][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 291.984454][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 291.984482][ T32] ? __switch_to+0xc89/0x1420 [ 291.984512][ T32] ? __pfx_kthread+0x10/0x10 [ 291.984533][ T32] ret_from_fork_asm+0x1a/0x30 [ 291.984576][ T32] [ 291.984585][ T32] Sending NMI from CPU 0 to CPUs 1: [ 291.984617][ C1] NMI backtrace for cpu 1 [ 291.984638][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 291.984663][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 291.984676][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 291.984712][ C1] Code: 1b 8b 02 e9 6e 8f 27 f5 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 d5 20 00 fb f4 47 8f 27 f5 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 291.984731][ C1] RSP: 0018:ffffc900001a7e40 EFLAGS: 00000242 [ 291.984752][ C1] RAX: 0000000000d319a7 RBX: ffffffff819beb9c RCX: 8000000000000001 [ 291.984770][ C1] RDX: 0000000000000001 RSI: ffffffff8e469729 RDI: ffffffff8c6dde80 [ 291.984797][ C1] RBP: ffffc900001a7f10 R08: ffff8880b8533a1b R09: 1ffff110170a6743 [ 291.984814][ C1] R10: dffffc0000000000 R11: ffffed10170a6744 R12: 0000000000000000 [ 291.984831][ C1] R13: 1ffff11003e5ebb8 R14: 1ffff92000034fd0 R15: dffffc0000000000 [ 291.984852][ C1] FS: 0000000000000000(0000) GS:ffff888123bbf000(0000) knlGS:0000000000000000 [ 291.984871][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 291.984888][ C1] CR2: 000055d3450f0168 CR3: 000000007f10a000 CR4: 0000000000350ef0 [ 291.984907][ C1] Call Trace: [ 291.984917][ C1] [ 291.984925][ C1] default_idle+0x9/0x20 [ 291.984955][ C1] default_idle_call+0x72/0xb0 [ 291.984987][ C1] do_idle+0x1cc/0x540 [ 291.985015][ C1] ? __pfx_do_idle+0x10/0x10 [ 291.985041][ C1] ? do_idle+0x4d8/0x540 [ 291.985066][ C1] cpu_startup_entry+0x43/0x60 [ 291.985090][ C1] start_secondary+0x101/0x110 [ 291.985131][ C1] common_startup_64+0x13e/0x157 [ 291.985176][ C1] [ 291.985965][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 292.797026][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 292.806361][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 292.817834][ T32] Call Trace: [ 292.821673][ T32] [ 292.825220][ T32] vpanic+0x56d/0xa60 [ 292.829812][ T32] ? __pfx___schedule+0x10/0x10 [ 292.835136][ T32] ? __pfx_vpanic+0x10/0x10 [ 292.840565][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 292.846930][ T32] panic+0xc5/0xd0 [ 292.850878][ T32] ? __pfx_panic+0x10/0x10 [ 292.855574][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 292.862919][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 292.869694][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 292.878575][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 292.885385][ T32] watchdog+0x1030/0x1030 [ 292.890139][ T32] ? watchdog+0x1c7/0x1030 [ 292.894863][ T32] kthread+0x38b/0x480 [ 292.899759][ T32] ? __pfx_watchdog+0x10/0x10 [ 292.904997][ T32] ? __pfx_kthread+0x10/0x10 [ 292.910171][ T32] ret_from_fork+0x514/0xb70 [ 292.914858][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 292.920108][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 292.925781][ T32] ? __switch_to+0xc89/0x1420 [ 292.930497][ T32] ? __pfx_kthread+0x10/0x10 [ 292.935152][ T32] ret_from_fork_asm+0x1a/0x30 [ 292.939953][ T32] [ 292.943363][ T32] Kernel Offset: disabled [ 292.947712][ T32] Rebooting in 86400 seconds..