ci-upstream-linux-next-kasan-gce-root/strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ci-upstream-linux-next-kasan-gce-root/syz-executor1783572833
<...>
Warning: Permanently added '10.128.1.77' (ED25519) to the list of known hosts.
execve("ci-upstream-linux-next-kasan-gce-root/syz-executor1783572833", ["ci-upstream-linux-next-kasan-gce-root/syz-executor1783572833"], 0x7ffc508b2b70 /* 10 vars */) = 0
brk(NULL) = 0x55559262e000
brk(0x55559262ed80) = 0x55559262ed80
arch_prctl(ARCH_SET_FS, 0x55559262e400) = 0
set_tid_address(0x55559262e6d0) = 5636
set_robust_list(0x55559262e6e0, 24) = 0
rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlinkat(AT_FDCWD, "/proc/self/exe", "/root/ci-upstream-linux-next-kasan-gce-root/syz-executor1783572833", 4096) = 66
getrandom("\x15\x85\x14\xd9\x60\x2f\x3c\x66", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x55559262ed80
brk(0x55559264fd80) = 0x55559264fd80
brk(0x555592650000) = 0x555592650000
mprotect(0x7fe159a64000, 20480, PROT_READ) = 0
mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000
mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000
mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000
rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-linux-next-kasan-gce-root/strace-static-x86_64: Process 5637 attached
, child_tidptr=0x55559262e6d0) = 5637
[pid 5637] set_robust_list(0x55559262e6e0, 24) = 0
[pid 5637] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid 5636] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid 5637] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5637] setpgid(0, 0) = 0
[pid 5637] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5637] write(3, "1000", 4) = 4
[pid 5637] close(3) = 0
[pid 5637] write(1, "executing program\n", 18) = 18
executing program
[pid 5637] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3
[pid 5637] ioctl(3, USB_RAW_IOCTL_INIT, 0x7fff6acf6c90) = 0
[pid 5637] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0
[pid 5637] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff6acf6c90) = 0
[pid 5637] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff6acf6c90) = 0
[pid 5637] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff6acf6c90) = 0
[pid 5637] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff6acf6c90) = 0
[pid 5637] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fff6acf5c80) = 18
[pid 5637] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff6acf6c90) = 0
[ 78.726062][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[pid 5637] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff6acf6c90) = 0
[pid 5637] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff6acf6c90) = 0
[pid 5637] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fff6acf5c80) = 18
[pid 5637] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff6acf6c90) = 0
[pid 5637] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fff6acf5c80) = 9
[pid 5637] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff6acf6c90) = 0
[pid 5637] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fff6acf5c80) = 18
[pid 5637] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff6acf6c90) = 0
[pid 5637] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fff6acf5c80) = 4
[pid 5637] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff6acf6c90) = 0
[pid 5637] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fff6acf5c80) = 8
[pid 5637] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff6acf6c90) = 0
[pid 5637] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fff6acf5c80) = 8
[pid 5637] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff6acf6c90) = 0
[pid 5637] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fff6acf5c80) = 8
[ 78.885918][ T10] usb 1-1: Using ep0 maxpacket: 16
[ 78.888065][ T10] usb 1-1: New USB device found: idVendor=06be, idProduct=a232, bcdDevice=33.f3
[pid 5637] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff6acf6c90) = 0
[pid 5637] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0
[pid 5637] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0
[pid 5637] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7fff6acf5c80) = 0
[ 78.947214][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 78.947241][ T10] usb 1-1: Product: syz
[ 78.947253][ T10] usb 1-1: Manufacturer: syz
[ 78.947265][ T10] usb 1-1: SerialNumber: syz
[ 78.951739][ T10] usb 1-1: config 0 descriptor??
[pid 5637] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff6acf6cc0) = 0
[pid 5637] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7fff6acf5cb0) = 0
[pid 5637] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff6acf6cc0) = 0
[pid 5637] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7fff6acf5cb0) = 0
[ 79.393816][ T10] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[ 79.401308][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 79.402351][ T10] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[ 79.402406][ T10] usb 1-1: media controller created
[ 79.416220][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[pid 5637] openat(AT_FDCWD, "/dev/i2c-1", O_RDWR|O_APPEND) = 4
[ 79.967373][ T10] zl10353_read_register: readreg error (reg=127, ret==0)
[ 79.967422][ T10] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[ 79.967436][ T10] dvb-usb: AME DTV-5100 USB
** replaying previous printk message **
[ 79.967436][ T10] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[ 79.987335][ T5637] ------------[ cut here ]------------
[ 79.987349][ T5637] usb 1-1: BOGUS control dir, pipe 80000280 doesn't match bRequestType c0
[ 79.987367][ T5637] WARNING: drivers/usb/core/urb.c:421 at usb_submit_urb+0x1057/0x18b0, CPU#0: syz-executor178/5637
[ 80.025444][ T5637] Modules linked in:
[ 80.029466][ T5637] CPU: 0 UID: 0 PID: 5637 Comm: syz-executor178 Not tainted syzkaller #0 PREEMPT(full)
[ 80.039270][ T5637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 80.049374][ T5637] RIP: 0010:usb_submit_urb+0x1100/0x18b0
[ 80.055035][ T5637] Code: b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 0f 85 b2 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 18 4c 89 f2 44 89 f9 <67> 48 0f b9 3a 48 bd 00 00 00 00 00 fc ff df e9 ba f2 ff ff 44 89
[ 80.074725][ T5637] RSP: 0018:ffffc9000396f958 EFLAGS: 00010246
[ 80.080885][ T5637] RAX: 0000000000000000 RBX: ffff8880246b4e00 RCX: 0000000080000280
[ 80.088924][ T5637] RDX: ffff888035ee7500 RSI: ffffffff8ce66ae0 RDI: ffffffff91cbb250
[ 80.096985][ T5637] RBP: dffffc0000000000 R08: 00000000000000c0 R09: 0000000000000000
[ 80.104977][ T5637] R10: ffffc9000396fa40 R11: fffff5200072df54 R12: 1ffff11006d1b70c
[ 80.113008][ T5637] R13: ffff8880368db860 R14: ffff888035ee7500 R15: 0000000080000280
[ 80.121016][ T5637] FS: 000055559262e400(0000) GS:ffff888123413000(0000) knlGS:0000000000000000
[ 80.129994][ T5637] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 80.136605][ T5637] CR2: 0000557a1e080118 CR3: 000000007454c000 CR4: 00000000003526f0
[ 80.144598][ T5637] Call Trace:
[ 80.147904][ T5637]
[ 80.150852][ T5637] usb_start_wait_urb+0x13f/0x5b0
[ 80.155920][ T5637] ? __pfx_usb_start_wait_urb+0x10/0x10
[ 80.161485][ T5637] usb_control_msg+0x234/0x3e0
[ 80.166291][ T5637] dtv5100_i2c_msg+0x231/0x2f0
[ 80.171090][ T5637] dtv5100_i2c_xfer+0x1a5/0x610
[ 80.175976][ T5637] __i2c_transfer+0x7bf/0x1fe0
[ 80.180775][ T5637] ? rt_mutex_lock_nested+0x15a/0x1c0
[ 80.186285][ T5637] ? i2c_transfer+0xc7/0x2d0
[ 80.190892][ T5637] i2c_transfer+0x1cb/0x2d0
[ 80.195404][ T5637] i2cdev_ioctl_rdwr+0x460/0x740
[ 80.200390][ T5637] i2cdev_ioctl+0x6a5/0x880
[ 80.204894][ T5637] ? __pfx_i2cdev_ioctl+0x10/0x10
[ 80.209958][ T5637] ? bpf_lsm_file_ioctl+0x9/0x20
[ 80.214947][ T5637] ? __pfx_i2cdev_ioctl+0x10/0x10
[ 80.220013][ T5637] __se_sys_ioctl+0xfc/0x170
[ 80.224642][ T5637] do_syscall_64+0x166/0x520
[ 80.229307][ T5637] ? trace_irq_disable+0x3b/0x140
[ 80.234359][ T5637] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 80.240508][ T5637] ? clear_bhb_loop+0x70/0xc0
[ 80.245196][ T5637] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 80.251150][ T5637] RIP: 0033:0x7fe1599d2109
[ 80.255577][ T5637] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48
[ 80.275298][ T5637] RSP: 002b:00007fff6acf7cd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 80.283755][ T5637] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe1599d2109
[ 80.291968][ T5637] RDX: 0000200000000200 RSI: 0000000000000707 RDI: 0000000000000004
[ 80.299988][ T5637] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000006
[ 80.308003][ T5637] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff6acf7e48
[ 80.316003][ T5637] R13: 431bde82d7b634db R14: 00007fe159a64c40 R15: 0000000000000002
[ 80.324772][ T5637]
[ 80.327834][ T5637] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 80.335135][ T5637] CPU: 0 UID: 0 PID: 5637 Comm: syz-executor178 Not tainted syzkaller #0 PREEMPT(full)
[ 80.344828][ T5637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 80.354866][ T5637] Call Trace:
[ 80.358132][ T5637]
[ 80.361056][ T5637] vpanic+0x26f/0x710
[ 80.365064][ T5637] panic+0xc5/0xd0
[ 80.368765][ T5637] ? __pfx_panic+0x10/0x10
[ 80.373172][ T5637] __warn+0x315/0x4c0
[ 80.377150][ T5637] ? usb_submit_urb+0x1057/0x18b0
[ 80.382174][ T5637] ? usb_submit_urb+0x1057/0x18b0
[ 80.387185][ T5637] __report_bug+0x276/0x570
[ 80.391702][ T5637] ? usb_submit_urb+0x1057/0x18b0
[ 80.396731][ T5637] ? __pfx___report_bug+0x10/0x10
[ 80.401750][ T5637] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 80.407570][ T5637] ? kasan_save_track+0x4f/0x80
[ 80.412438][ T5637] report_bug_entry+0x19b/0x290
[ 80.417290][ T5637] ? usb_submit_urb+0x1100/0x18b0
[ 80.422317][ T5637] ? usb_submit_urb+0x1105/0x18b0
[ 80.427353][ T5637] handle_bug+0xce/0x200
[ 80.431596][ T5637] exc_invalid_op+0x1a/0x50
[ 80.436099][ T5637] asm_exc_invalid_op+0x1a/0x20
[ 80.440947][ T5637] RIP: 0010:usb_submit_urb+0x1100/0x18b0
[ 80.446580][ T5637] Code: b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 0f 85 b2 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 18 4c 89 f2 44 89 f9 <67> 48 0f b9 3a 48 bd 00 00 00 00 00 fc ff df e9 ba f2 ff ff 44 89
[ 80.466349][ T5637] RSP: 0018:ffffc9000396f958 EFLAGS: 00010246
[ 80.472417][ T5637] RAX: 0000000000000000 RBX: ffff8880246b4e00 RCX: 0000000080000280
[ 80.480382][ T5637] RDX: ffff888035ee7500 RSI: ffffffff8ce66ae0 RDI: ffffffff91cbb250
[ 80.488351][ T5637] RBP: dffffc0000000000 R08: 00000000000000c0 R09: 0000000000000000
[ 80.496319][ T5637] R10: ffffc9000396fa40 R11: fffff5200072df54 R12: 1ffff11006d1b70c
[ 80.504285][ T5637] R13: ffff8880368db860 R14: ffff888035ee7500 R15: 0000000080000280
[ 80.512277][ T5637] ? usb_submit_urb+0x1091/0x18b0
[ 80.517312][ T5637] usb_start_wait_urb+0x13f/0x5b0
[ 80.522336][ T5637] ? __pfx_usb_start_wait_urb+0x10/0x10
[ 80.527889][ T5637] usb_control_msg+0x234/0x3e0
[ 80.532648][ T5637] dtv5100_i2c_msg+0x231/0x2f0
[ 80.537411][ T5637] dtv5100_i2c_xfer+0x1a5/0x610
[ 80.542265][ T5637] __i2c_transfer+0x7bf/0x1fe0
[ 80.547029][ T5637] ? rt_mutex_lock_nested+0x15a/0x1c0
[ 80.552394][ T5637] ? i2c_transfer+0xc7/0x2d0
[ 80.556981][ T5637] i2c_transfer+0x1cb/0x2d0
[ 80.561479][ T5637] i2cdev_ioctl_rdwr+0x460/0x740
[ 80.566415][ T5637] i2cdev_ioctl+0x6a5/0x880
[ 80.570908][ T5637] ? __pfx_i2cdev_ioctl+0x10/0x10
[ 80.575932][ T5637] ? bpf_lsm_file_ioctl+0x9/0x20
[ 80.580870][ T5637] ? __pfx_i2cdev_ioctl+0x10/0x10
[ 80.585889][ T5637] __se_sys_ioctl+0xfc/0x170
[ 80.590485][ T5637] do_syscall_64+0x166/0x520
[ 80.595068][ T5637] ? trace_irq_disable+0x3b/0x140
[ 80.600094][ T5637] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 80.606168][ T5637] ? clear_bhb_loop+0x70/0xc0
[ 80.610887][ T5637] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 80.616774][ T5637] RIP: 0033:0x7fe1599d2109
[ 80.621188][ T5637] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48
[ 80.640787][ T5637] RSP: 002b:00007fff6acf7cd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 80.649231][ T5637] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe1599d2109
[ 80.657230][ T5637] RDX: 0000200000000200 RSI: 0000000000000707 RDI: 0000000000000004
[ 80.665243][ T5637] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000006
[ 80.673204][ T5637] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff6acf7e48
[ 80.681163][ T5637] R13: 431bde82d7b634db R14: 00007fe159a64c40 R15: 0000000000000002
[ 80.689145][ T5637]
[ 80.692332][ T5637] Kernel Offset: disabled
[ 80.696651][ T5637] Rebooting in 86400 seconds..