./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor527440546
<...>
DUID 00:04:11:31:ea:d8:bb:db:47:a8:80:cb:7d:0b:3c:d8:ea:74
forked to background, child pid 4644
[ 35.307381][ T4645] 8021q: adding VLAN 0 to HW filter on device bond0
[ 35.327181][ T4645] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.1.169' (ECDSA) to the list of known hosts.
execve("./syz-executor527440546", ["./syz-executor527440546"], 0x7fffd2584050 /* 10 vars */) = 0
brk(NULL) = 0x5555566e9000
brk(0x5555566e9c40) = 0x5555566e9c40
arch_prctl(ARCH_SET_FS, 0x5555566e9300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor527440546", 4096) = 27
brk(0x55555670ac40) = 0x55555670ac40
brk(0x55555670b000) = 0x55555670b000
mprotect(0x7f8e92d72000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3
ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffffd1b2820) = 0
ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffffd1b2820) = 0
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffffd1b2820) = 0
ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffffd1b1810) = 18
syzkaller login: [ 60.002842][ T22] usb 1-1: new high-speed USB device number 2 using dummy_hcd
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffffd1b2820) = 0
ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffffd1b1810) = 18
[ 60.242769][ T22] usb 1-1: Using ep0 maxpacket: 16
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffffd1b2820) = 0
ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffffd1b1810) = 9
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffffd1b2820) = 0
ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffffd1b1810) = 36
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffffd1b2820) = 0
ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffffd1b1810) = 4
[ 60.363438][ T22] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[ 60.383426][ T22] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffffd1b2820) = 0
ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffffd1b1810) = 8
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffffd1b2820) = 0
ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffffd1b1810) = 8
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffffd1b2820) = 0
ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffffd1b1810) = 8
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffffd1b2820) = 0
ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0
ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0
[ 60.553282][ T22] usb 1-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=af.9e
[ 60.562801][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 60.570904][ T22] usb 1-1: Product: syz
[ 60.575187][ T22] usb 1-1: Manufacturer: syz
[ 60.579999][ T22] usb 1-1: SerialNumber: syz
[ 60.588153][ T22] usb 1-1: config 0 descriptor??
ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8e92d783ac) = -1 EINVAL (Invalid argument)
ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8e92d783bc) = -1 EINVAL (Invalid argument)
ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffffd1b1810) = 0
[ 60.615617][ T5069] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 60.623518][ T5069] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 60.639289][ T22] plusb 1-1:0.0 usb0: register 'plusb' at usb-dummy_hcd.0-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 4a:14:3c:c7:81:73
[ 61.133535][ T4645] ------------[ cut here ]------------
[ 61.139043][ T4645] usb 1-1: BOGUS control dir, pipe 80000280 doesn't match bRequestType c0
[ 61.148531][ T4645] WARNING: CPU: 0 PID: 4645 at drivers/usb/core/urb.c:411 usb_submit_urb+0x14a7/0x1880
[ 61.158670][ T4645] Modules linked in:
[ 61.162591][ T4645] CPU: 1 PID: 4645 Comm: dhcpcd Not tainted 6.2.0-rc6-syzkaller-00050-g9f266ccaa2f5 #0
[ 61.172807][ T4645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
[ 61.183235][ T4645] RIP: 0010:usb_submit_urb+0x14a7/0x1880
[ 61.188959][ T4645] Code: 7c 24 40 e8 ab 4c 80 fb 48 8b 7c 24 40 e8 71 14 01 ff 45 89 e8 44 89 f1 4c 89 e2 48 89 c6 48 c7 c7 20 b0 fa 8a e8 d3 ab be 03 <0f> 0b e9 9f ee ff ff e8 7d 4c 80 fb 0f b6 1d 17 b2 5c 08 31 ff 41
[ 61.208677][ T4645] RSP: 0018:ffffc9000355f5a0 EFLAGS: 00010282
[ 61.214833][ T4645] RAX: 0000000000000000 RBX: ffff888017d2c058 RCX: 0000000000000000
[ 61.222899][ T4645] RDX: ffff88801f901d40 RSI: ffffffff816680ec RDI: fffff520006abea6
[ 61.230909][ T4645] RBP: ffff88801cc501e0 R08: 0000000000000005 R09: 0000000000000000
[ 61.238949][ T4645] R10: 0000000080000000 R11: 0000000000000000 R12: ffff888017a92d98
[ 61.247008][ T4645] R13: 00000000000000c0 R14: 0000000080000280 R15: ffff888017a25200
[ 61.255037][ T4645] FS: 00007f2a38e6d740(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
[ 61.264048][ T4645] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 61.270633][ T4645] CR2: 00007f2f3dabf300 CR3: 0000000021a8d000 CR4: 00000000003506e0
[ 61.278843][ T4645] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 61.286896][ T4645] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 61.295276][ T4645] Call Trace:
[ 61.298589][ T4645]
[ 61.301578][ T4645] usb_start_wait_urb+0x101/0x4b0
[ 61.306791][ T4645] ? usb_api_blocking_completion+0xa0/0xa0
[ 61.312768][ T4645] ? memset+0x24/0x50
[ 61.316777][ T4645] usb_control_msg+0x320/0x4a0
[ 61.321557][ T4645] ? usb_start_wait_urb+0x4b0/0x4b0
[ 61.326843][ T4645] ? mark_held_locks+0x9f/0xe0
[ 61.331671][ T4645] __usbnet_read_cmd+0xb9/0x390
[ 61.336651][ T4645] ? __pm_runtime_resume+0xc9/0x180
[ 61.341885][ T4645] usbnet_read_cmd+0x96/0xf0
[ 61.346604][ T4645] pl_reset+0x2f/0xf0
[ 61.350638][ T4645] usbnet_open+0xcc/0x5d0
[ 61.355095][ T4645] ? net1080_reset+0xa80/0xa80
[ 61.359915][ T4645] ? __handle_link_change+0x190/0x190
[ 61.365535][ T4645] __dev_open+0x297/0x4d0
[ 61.369920][ T4645] ? dev_set_rx_mode+0x90/0x90
[ 61.374788][ T4645] ? __local_bh_enable_ip+0xa4/0x130
[ 61.380112][ T4645] __dev_change_flags+0x587/0x750
[ 61.385229][ T4645] ? dev_set_allmulti+0x30/0x30
[ 61.390170][ T4645] ? apparmor_capable+0x1dc/0x460
[ 61.395304][ T4645] dev_change_flags+0x97/0x170
[ 61.400158][ T4645] devinet_ioctl+0x15a2/0x1d70
[ 61.405028][ T4645] ? inet_ifa_byprefix+0x2b0/0x2b0
[ 61.410263][ T4645] ? _copy_from_user+0xfd/0x170
[ 61.415264][ T4645] inet_ioctl+0x33f/0x380
[ 61.419646][ T4645] ? ipip_gro_complete+0x100/0x100
[ 61.424915][ T4645] ? lock_downgrade+0x6e0/0x6e0
[ 61.430585][ T4645] ? tomoyo_path_number_perm+0x166/0x570
[ 61.436324][ T4645] ? tomoyo_execute_permission+0x4a0/0x4a0
[ 61.442245][ T4645] sock_do_ioctl+0xcc/0x230
[ 61.446913][ T4645] ? get_user_ifreq+0x250/0x250
[ 61.451827][ T4645] ? vfs_fileattr_set+0xbe0/0xbe0
[ 61.457046][ T4645] sock_ioctl+0x1f8/0x680
[ 61.461451][ T4645] ? br_ioctl_call+0xb0/0xb0
[ 61.466170][ T4645] ? fd_install+0x201/0x650
[ 61.470738][ T4645] ? __sys_socket+0x8e/0x250
[ 61.475430][ T4645] ? bpf_lsm_file_ioctl+0x9/0x10
[ 61.480413][ T4645] ? br_ioctl_call+0xb0/0xb0
[ 61.486300][ T4645] __x64_sys_ioctl+0x197/0x210
[ 61.491124][ T4645] do_syscall_64+0x39/0xb0
[ 61.495651][ T4645] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 61.501581][ T4645] RIP: 0033:0x7f2a38f5b0e7
[ 61.506100][ T4645] Code: 3c 1c e8 1c ff ff ff 85 c0 79 87 49 c7 c4 ff ff ff ff 5b 5d 4c 89 e0 41 5c c3 66 0f 1f 84 00 00 00 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 61 9d 0c 00 f7 d8 64 89 01 48
[ 61.525824][ T4645] RSP: 002b:00007ffd77152e38 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 61.534307][ T4645] RAX: ffffffffffffffda RBX: 00007f2a38e6d6c8 RCX: 00007f2a38f5b0e7
[ 61.542310][ T4645] RDX: 00007ffd77163028 RSI: 0000000000008914 RDI: 0000000000000018
[ 61.550433][ T4645] RBP: 00007ffd771731d8 R08: 00007ffd77162fe8 R09: 00007ffd77162f98
[ 61.559363][ T4645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 61.567466][ T4645] R13: 00007ffd77163028 R14: 0000000000000028 R15: 0000000000008914
[ 61.575903][ T4645]
[ 61.578962][ T4645] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 61.586261][ T4645] CPU: 1 PID: 4645 Comm: dhcpcd Not tainted 6.2.0-rc6-syzkaller-00050-g9f266ccaa2f5 #0
[ 61.595913][ T4645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
[ 61.605966][ T4645] Call Trace:
[ 61.609344][ T4645]
[ 61.612276][ T4645] dump_stack_lvl+0xd1/0x138
[ 61.616882][ T4645] panic+0x2cc/0x626
[ 61.620801][ T4645] ? panic_print_sys_info.part.0+0x110/0x110
[ 61.626819][ T4645] ? usb_submit_urb+0x14a7/0x1880
[ 61.631862][ T4645] check_panic_on_warn.cold+0x19/0x35
[ 61.637240][ T4645] __warn+0xf2/0x1a0
[ 61.641159][ T4645] ? __wake_up_klogd.part.0+0x99/0xf0
[ 61.646534][ T4645] ? usb_submit_urb+0x14a7/0x1880
[ 61.651564][ T4645] report_bug+0x1c0/0x210
[ 61.655991][ T4645] handle_bug+0x3c/0x70
[ 61.660165][ T4645] exc_invalid_op+0x18/0x50
[ 61.664687][ T4645] asm_exc_invalid_op+0x1a/0x20
[ 61.669670][ T4645] RIP: 0010:usb_submit_urb+0x14a7/0x1880
[ 61.675342][ T4645] Code: 7c 24 40 e8 ab 4c 80 fb 48 8b 7c 24 40 e8 71 14 01 ff 45 89 e8 44 89 f1 4c 89 e2 48 89 c6 48 c7 c7 20 b0 fa 8a e8 d3 ab be 03 <0f> 0b e9 9f ee ff ff e8 7d 4c 80 fb 0f b6 1d 17 b2 5c 08 31 ff 41
[ 61.694976][ T4645] RSP: 0018:ffffc9000355f5a0 EFLAGS: 00010282
[ 61.701067][ T4645] RAX: 0000000000000000 RBX: ffff888017d2c058 RCX: 0000000000000000
[ 61.709077][ T4645] RDX: ffff88801f901d40 RSI: ffffffff816680ec RDI: fffff520006abea6
[ 61.717086][ T4645] RBP: ffff88801cc501e0 R08: 0000000000000005 R09: 0000000000000000
[ 61.725165][ T4645] R10: 0000000080000000 R11: 0000000000000000 R12: ffff888017a92d98
[ 61.733251][ T4645] R13: 00000000000000c0 R14: 0000000080000280 R15: ffff888017a25200
[ 61.741307][ T4645] ? vprintk+0x8c/0xa0
[ 61.746024][ T4645] usb_start_wait_urb+0x101/0x4b0
[ 61.751091][ T4645] ? usb_api_blocking_completion+0xa0/0xa0
[ 61.756946][ T4645] ? memset+0x24/0x50
[ 61.761089][ T4645] usb_control_msg+0x320/0x4a0
[ 61.765889][ T4645] ? usb_start_wait_urb+0x4b0/0x4b0
[ 61.771123][ T4645] ? mark_held_locks+0x9f/0xe0
[ 61.775915][ T4645] __usbnet_read_cmd+0xb9/0x390
[ 61.780820][ T4645] ? __pm_runtime_resume+0xc9/0x180
[ 61.786134][ T4645] usbnet_read_cmd+0x96/0xf0
[ 61.790761][ T4645] pl_reset+0x2f/0xf0
[ 61.794874][ T4645] usbnet_open+0xcc/0x5d0
[ 61.799238][ T4645] ? net1080_reset+0xa80/0xa80
[ 61.804054][ T4645] ? __handle_link_change+0x190/0x190
[ 61.809510][ T4645] __dev_open+0x297/0x4d0
[ 61.813969][ T4645] ? dev_set_rx_mode+0x90/0x90
[ 61.818789][ T4645] ? __local_bh_enable_ip+0xa4/0x130
[ 61.824132][ T4645] __dev_change_flags+0x587/0x750
[ 61.829214][ T4645] ? dev_set_allmulti+0x30/0x30
[ 61.834103][ T4645] ? apparmor_capable+0x1dc/0x460
[ 61.839171][ T4645] dev_change_flags+0x97/0x170
[ 61.843971][ T4645] devinet_ioctl+0x15a2/0x1d70
[ 61.848767][ T4645] ? inet_ifa_byprefix+0x2b0/0x2b0
[ 61.853907][ T4645] ? _copy_from_user+0xfd/0x170
[ 61.860887][ T4645] inet_ioctl+0x33f/0x380
[ 61.865250][ T4645] ? ipip_gro_complete+0x100/0x100
[ 61.870398][ T4645] ? lock_downgrade+0x6e0/0x6e0
[ 61.875284][ T4645] ? tomoyo_path_number_perm+0x166/0x570
[ 61.880957][ T4645] ? tomoyo_execute_permission+0x4a0/0x4a0
[ 61.886806][ T4645] sock_do_ioctl+0xcc/0x230
[ 61.891344][ T4645] ? get_user_ifreq+0x250/0x250
[ 61.896398][ T4645] ? vfs_fileattr_set+0xbe0/0xbe0
[ 61.901467][ T4645] sock_ioctl+0x1f8/0x680
[ 61.905836][ T4645] ? br_ioctl_call+0xb0/0xb0
[ 61.910458][ T4645] ? fd_install+0x201/0x650
[ 61.914991][ T4645] ? __sys_socket+0x8e/0x250
[ 61.919614][ T4645] ? bpf_lsm_file_ioctl+0x9/0x10
[ 61.924580][ T4645] ? br_ioctl_call+0xb0/0xb0
[ 61.929219][ T4645] __x64_sys_ioctl+0x197/0x210
[ 61.934008][ T4645] do_syscall_64+0x39/0xb0
[ 61.938458][ T4645] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 61.944382][ T4645] RIP: 0033:0x7f2a38f5b0e7
[ 61.948819][ T4645] Code: 3c 1c e8 1c ff ff ff 85 c0 79 87 49 c7 c4 ff ff ff ff 5b 5d 4c 89 e0 41 5c c3 66 0f 1f 84 00 00 00 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 61 9d 0c 00 f7 d8 64 89 01 48
[ 61.968890][ T4645] RSP: 002b:00007ffd77152e38 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 61.977415][ T4645] RAX: ffffffffffffffda RBX: 00007f2a38e6d6c8 RCX: 00007f2a38f5b0e7
[ 61.990806][ T4645] RDX: 00007ffd77163028 RSI: 0000000000008914 RDI: 0000000000000018
[ 61.998807][ T4645] RBP: 00007ffd771731d8 R08: 00007ffd77162fe8 R09: 00007ffd77162f98
[ 62.006796][ T4645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 62.014779][ T4645] R13: 00007ffd77163028 R14: 0000000000000028 R15: 0000000000008914
[ 62.022783][ T4645]
[ 62.025982][ T4645] Kernel Offset: disabled
[ 62.030435][ T4645] Rebooting in 86400 seconds..