./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor527440546 <...> DUID 00:04:11:31:ea:d8:bb:db:47:a8:80:cb:7d:0b:3c:d8:ea:74 forked to background, child pid 4644 [ 35.307381][ T4645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.327181][ T4645] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.169' (ECDSA) to the list of known hosts. execve("./syz-executor527440546", ["./syz-executor527440546"], 0x7fffd2584050 /* 10 vars */) = 0 brk(NULL) = 0x5555566e9000 brk(0x5555566e9c40) = 0x5555566e9c40 arch_prctl(ARCH_SET_FS, 0x5555566e9300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor527440546", 4096) = 27 brk(0x55555670ac40) = 0x55555670ac40 brk(0x55555670b000) = 0x55555670b000 mprotect(0x7f8e92d72000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffffd1b2820) = 0 ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffffd1b2820) = 0 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffffd1b2820) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffffd1b1810) = 18 syzkaller login: [ 60.002842][ T22] usb 1-1: new high-speed USB device number 2 using dummy_hcd ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffffd1b2820) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffffd1b1810) = 18 [ 60.242769][ T22] usb 1-1: Using ep0 maxpacket: 16 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffffd1b2820) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffffd1b1810) = 9 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffffd1b2820) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffffd1b1810) = 36 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffffd1b2820) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffffd1b1810) = 4 [ 60.363438][ T22] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 60.383426][ T22] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffffd1b2820) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffffd1b1810) = 8 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffffd1b2820) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffffd1b1810) = 8 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffffd1b2820) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffffd1b1810) = 8 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffffd1b2820) = 0 ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [ 60.553282][ T22] usb 1-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=af.9e [ 60.562801][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.570904][ T22] usb 1-1: Product: syz [ 60.575187][ T22] usb 1-1: Manufacturer: syz [ 60.579999][ T22] usb 1-1: SerialNumber: syz [ 60.588153][ T22] usb 1-1: config 0 descriptor?? ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8e92d783ac) = -1 EINVAL (Invalid argument) ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8e92d783bc) = -1 EINVAL (Invalid argument) ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffffd1b1810) = 0 [ 60.615617][ T5069] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 60.623518][ T5069] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 60.639289][ T22] plusb 1-1:0.0 usb0: register 'plusb' at usb-dummy_hcd.0-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 4a:14:3c:c7:81:73 [ 61.133535][ T4645] ------------[ cut here ]------------ [ 61.139043][ T4645] usb 1-1: BOGUS control dir, pipe 80000280 doesn't match bRequestType c0 [ 61.148531][ T4645] WARNING: CPU: 0 PID: 4645 at drivers/usb/core/urb.c:411 usb_submit_urb+0x14a7/0x1880 [ 61.158670][ T4645] Modules linked in: [ 61.162591][ T4645] CPU: 1 PID: 4645 Comm: dhcpcd Not tainted 6.2.0-rc6-syzkaller-00050-g9f266ccaa2f5 #0 [ 61.172807][ T4645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 61.183235][ T4645] RIP: 0010:usb_submit_urb+0x14a7/0x1880 [ 61.188959][ T4645] Code: 7c 24 40 e8 ab 4c 80 fb 48 8b 7c 24 40 e8 71 14 01 ff 45 89 e8 44 89 f1 4c 89 e2 48 89 c6 48 c7 c7 20 b0 fa 8a e8 d3 ab be 03 <0f> 0b e9 9f ee ff ff e8 7d 4c 80 fb 0f b6 1d 17 b2 5c 08 31 ff 41 [ 61.208677][ T4645] RSP: 0018:ffffc9000355f5a0 EFLAGS: 00010282 [ 61.214833][ T4645] RAX: 0000000000000000 RBX: ffff888017d2c058 RCX: 0000000000000000 [ 61.222899][ T4645] RDX: ffff88801f901d40 RSI: ffffffff816680ec RDI: fffff520006abea6 [ 61.230909][ T4645] RBP: ffff88801cc501e0 R08: 0000000000000005 R09: 0000000000000000 [ 61.238949][ T4645] R10: 0000000080000000 R11: 0000000000000000 R12: ffff888017a92d98 [ 61.247008][ T4645] R13: 00000000000000c0 R14: 0000000080000280 R15: ffff888017a25200 [ 61.255037][ T4645] FS: 00007f2a38e6d740(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 61.264048][ T4645] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 61.270633][ T4645] CR2: 00007f2f3dabf300 CR3: 0000000021a8d000 CR4: 00000000003506e0 [ 61.278843][ T4645] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 61.286896][ T4645] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 61.295276][ T4645] Call Trace: [ 61.298589][ T4645] [ 61.301578][ T4645] usb_start_wait_urb+0x101/0x4b0 [ 61.306791][ T4645] ? usb_api_blocking_completion+0xa0/0xa0 [ 61.312768][ T4645] ? memset+0x24/0x50 [ 61.316777][ T4645] usb_control_msg+0x320/0x4a0 [ 61.321557][ T4645] ? usb_start_wait_urb+0x4b0/0x4b0 [ 61.326843][ T4645] ? mark_held_locks+0x9f/0xe0 [ 61.331671][ T4645] __usbnet_read_cmd+0xb9/0x390 [ 61.336651][ T4645] ? __pm_runtime_resume+0xc9/0x180 [ 61.341885][ T4645] usbnet_read_cmd+0x96/0xf0 [ 61.346604][ T4645] pl_reset+0x2f/0xf0 [ 61.350638][ T4645] usbnet_open+0xcc/0x5d0 [ 61.355095][ T4645] ? net1080_reset+0xa80/0xa80 [ 61.359915][ T4645] ? __handle_link_change+0x190/0x190 [ 61.365535][ T4645] __dev_open+0x297/0x4d0 [ 61.369920][ T4645] ? dev_set_rx_mode+0x90/0x90 [ 61.374788][ T4645] ? __local_bh_enable_ip+0xa4/0x130 [ 61.380112][ T4645] __dev_change_flags+0x587/0x750 [ 61.385229][ T4645] ? dev_set_allmulti+0x30/0x30 [ 61.390170][ T4645] ? apparmor_capable+0x1dc/0x460 [ 61.395304][ T4645] dev_change_flags+0x97/0x170 [ 61.400158][ T4645] devinet_ioctl+0x15a2/0x1d70 [ 61.405028][ T4645] ? inet_ifa_byprefix+0x2b0/0x2b0 [ 61.410263][ T4645] ? _copy_from_user+0xfd/0x170 [ 61.415264][ T4645] inet_ioctl+0x33f/0x380 [ 61.419646][ T4645] ? ipip_gro_complete+0x100/0x100 [ 61.424915][ T4645] ? lock_downgrade+0x6e0/0x6e0 [ 61.430585][ T4645] ? tomoyo_path_number_perm+0x166/0x570 [ 61.436324][ T4645] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 61.442245][ T4645] sock_do_ioctl+0xcc/0x230 [ 61.446913][ T4645] ? get_user_ifreq+0x250/0x250 [ 61.451827][ T4645] ? vfs_fileattr_set+0xbe0/0xbe0 [ 61.457046][ T4645] sock_ioctl+0x1f8/0x680 [ 61.461451][ T4645] ? br_ioctl_call+0xb0/0xb0 [ 61.466170][ T4645] ? fd_install+0x201/0x650 [ 61.470738][ T4645] ? __sys_socket+0x8e/0x250 [ 61.475430][ T4645] ? bpf_lsm_file_ioctl+0x9/0x10 [ 61.480413][ T4645] ? br_ioctl_call+0xb0/0xb0 [ 61.486300][ T4645] __x64_sys_ioctl+0x197/0x210 [ 61.491124][ T4645] do_syscall_64+0x39/0xb0 [ 61.495651][ T4645] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 61.501581][ T4645] RIP: 0033:0x7f2a38f5b0e7 [ 61.506100][ T4645] Code: 3c 1c e8 1c ff ff ff 85 c0 79 87 49 c7 c4 ff ff ff ff 5b 5d 4c 89 e0 41 5c c3 66 0f 1f 84 00 00 00 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 61 9d 0c 00 f7 d8 64 89 01 48 [ 61.525824][ T4645] RSP: 002b:00007ffd77152e38 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 61.534307][ T4645] RAX: ffffffffffffffda RBX: 00007f2a38e6d6c8 RCX: 00007f2a38f5b0e7 [ 61.542310][ T4645] RDX: 00007ffd77163028 RSI: 0000000000008914 RDI: 0000000000000018 [ 61.550433][ T4645] RBP: 00007ffd771731d8 R08: 00007ffd77162fe8 R09: 00007ffd77162f98 [ 61.559363][ T4645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 61.567466][ T4645] R13: 00007ffd77163028 R14: 0000000000000028 R15: 0000000000008914 [ 61.575903][ T4645] [ 61.578962][ T4645] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 61.586261][ T4645] CPU: 1 PID: 4645 Comm: dhcpcd Not tainted 6.2.0-rc6-syzkaller-00050-g9f266ccaa2f5 #0 [ 61.595913][ T4645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 61.605966][ T4645] Call Trace: [ 61.609344][ T4645] [ 61.612276][ T4645] dump_stack_lvl+0xd1/0x138 [ 61.616882][ T4645] panic+0x2cc/0x626 [ 61.620801][ T4645] ? panic_print_sys_info.part.0+0x110/0x110 [ 61.626819][ T4645] ? usb_submit_urb+0x14a7/0x1880 [ 61.631862][ T4645] check_panic_on_warn.cold+0x19/0x35 [ 61.637240][ T4645] __warn+0xf2/0x1a0 [ 61.641159][ T4645] ? __wake_up_klogd.part.0+0x99/0xf0 [ 61.646534][ T4645] ? usb_submit_urb+0x14a7/0x1880 [ 61.651564][ T4645] report_bug+0x1c0/0x210 [ 61.655991][ T4645] handle_bug+0x3c/0x70 [ 61.660165][ T4645] exc_invalid_op+0x18/0x50 [ 61.664687][ T4645] asm_exc_invalid_op+0x1a/0x20 [ 61.669670][ T4645] RIP: 0010:usb_submit_urb+0x14a7/0x1880 [ 61.675342][ T4645] Code: 7c 24 40 e8 ab 4c 80 fb 48 8b 7c 24 40 e8 71 14 01 ff 45 89 e8 44 89 f1 4c 89 e2 48 89 c6 48 c7 c7 20 b0 fa 8a e8 d3 ab be 03 <0f> 0b e9 9f ee ff ff e8 7d 4c 80 fb 0f b6 1d 17 b2 5c 08 31 ff 41 [ 61.694976][ T4645] RSP: 0018:ffffc9000355f5a0 EFLAGS: 00010282 [ 61.701067][ T4645] RAX: 0000000000000000 RBX: ffff888017d2c058 RCX: 0000000000000000 [ 61.709077][ T4645] RDX: ffff88801f901d40 RSI: ffffffff816680ec RDI: fffff520006abea6 [ 61.717086][ T4645] RBP: ffff88801cc501e0 R08: 0000000000000005 R09: 0000000000000000 [ 61.725165][ T4645] R10: 0000000080000000 R11: 0000000000000000 R12: ffff888017a92d98 [ 61.733251][ T4645] R13: 00000000000000c0 R14: 0000000080000280 R15: ffff888017a25200 [ 61.741307][ T4645] ? vprintk+0x8c/0xa0 [ 61.746024][ T4645] usb_start_wait_urb+0x101/0x4b0 [ 61.751091][ T4645] ? usb_api_blocking_completion+0xa0/0xa0 [ 61.756946][ T4645] ? memset+0x24/0x50 [ 61.761089][ T4645] usb_control_msg+0x320/0x4a0 [ 61.765889][ T4645] ? usb_start_wait_urb+0x4b0/0x4b0 [ 61.771123][ T4645] ? mark_held_locks+0x9f/0xe0 [ 61.775915][ T4645] __usbnet_read_cmd+0xb9/0x390 [ 61.780820][ T4645] ? __pm_runtime_resume+0xc9/0x180 [ 61.786134][ T4645] usbnet_read_cmd+0x96/0xf0 [ 61.790761][ T4645] pl_reset+0x2f/0xf0 [ 61.794874][ T4645] usbnet_open+0xcc/0x5d0 [ 61.799238][ T4645] ? net1080_reset+0xa80/0xa80 [ 61.804054][ T4645] ? __handle_link_change+0x190/0x190 [ 61.809510][ T4645] __dev_open+0x297/0x4d0 [ 61.813969][ T4645] ? dev_set_rx_mode+0x90/0x90 [ 61.818789][ T4645] ? __local_bh_enable_ip+0xa4/0x130 [ 61.824132][ T4645] __dev_change_flags+0x587/0x750 [ 61.829214][ T4645] ? dev_set_allmulti+0x30/0x30 [ 61.834103][ T4645] ? apparmor_capable+0x1dc/0x460 [ 61.839171][ T4645] dev_change_flags+0x97/0x170 [ 61.843971][ T4645] devinet_ioctl+0x15a2/0x1d70 [ 61.848767][ T4645] ? inet_ifa_byprefix+0x2b0/0x2b0 [ 61.853907][ T4645] ? _copy_from_user+0xfd/0x170 [ 61.860887][ T4645] inet_ioctl+0x33f/0x380 [ 61.865250][ T4645] ? ipip_gro_complete+0x100/0x100 [ 61.870398][ T4645] ? lock_downgrade+0x6e0/0x6e0 [ 61.875284][ T4645] ? tomoyo_path_number_perm+0x166/0x570 [ 61.880957][ T4645] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 61.886806][ T4645] sock_do_ioctl+0xcc/0x230 [ 61.891344][ T4645] ? get_user_ifreq+0x250/0x250 [ 61.896398][ T4645] ? vfs_fileattr_set+0xbe0/0xbe0 [ 61.901467][ T4645] sock_ioctl+0x1f8/0x680 [ 61.905836][ T4645] ? br_ioctl_call+0xb0/0xb0 [ 61.910458][ T4645] ? fd_install+0x201/0x650 [ 61.914991][ T4645] ? __sys_socket+0x8e/0x250 [ 61.919614][ T4645] ? bpf_lsm_file_ioctl+0x9/0x10 [ 61.924580][ T4645] ? br_ioctl_call+0xb0/0xb0 [ 61.929219][ T4645] __x64_sys_ioctl+0x197/0x210 [ 61.934008][ T4645] do_syscall_64+0x39/0xb0 [ 61.938458][ T4645] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 61.944382][ T4645] RIP: 0033:0x7f2a38f5b0e7 [ 61.948819][ T4645] Code: 3c 1c e8 1c ff ff ff 85 c0 79 87 49 c7 c4 ff ff ff ff 5b 5d 4c 89 e0 41 5c c3 66 0f 1f 84 00 00 00 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 61 9d 0c 00 f7 d8 64 89 01 48 [ 61.968890][ T4645] RSP: 002b:00007ffd77152e38 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 61.977415][ T4645] RAX: ffffffffffffffda RBX: 00007f2a38e6d6c8 RCX: 00007f2a38f5b0e7 [ 61.990806][ T4645] RDX: 00007ffd77163028 RSI: 0000000000008914 RDI: 0000000000000018 [ 61.998807][ T4645] RBP: 00007ffd771731d8 R08: 00007ffd77162fe8 R09: 00007ffd77162f98 [ 62.006796][ T4645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 62.014779][ T4645] R13: 00007ffd77163028 R14: 0000000000000028 R15: 0000000000008914 [ 62.022783][ T4645] [ 62.025982][ T4645] Kernel Offset: disabled [ 62.030435][ T4645] Rebooting in 86400 seconds..