./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor637283450 <...> Warning: Permanently added '10.128.1.190' (ED25519) to the list of known hosts. execve("./syz-executor637283450", ["./syz-executor637283450"], 0x7ffcd2b8f630 /* 10 vars */) = 0 brk(NULL) = 0x5555561c2000 brk(0x5555561c2d00) = 0x5555561c2d00 arch_prctl(ARCH_SET_FS, 0x5555561c2380) = 0 set_tid_address(0x5555561c2650) = 5041 set_robust_list(0x5555561c2660, 24) = 0 rseq(0x5555561c2ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor637283450", 4096) = 27 getrandom("\xa3\xd8\x4e\xa1\x42\xb9\x35\x33", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x5555561c2d00 brk(0x5555561e3d00) = 0x5555561e3d00 brk(0x5555561e4000) = 0x5555561e4000 mprotect(0x7f726d033000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c2650) = 5042 ./strace-static-x86_64: Process 5042 attached [pid 5042] set_robust_list(0x5555561c2660, 24) = 0 [pid 5042] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5042] setpgid(0, 0) = 0 [pid 5042] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5042] write(3, "1000", 4) = 4 [pid 5042] close(3) = 0 [pid 5042] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5042] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffde6703ec0) = 0 [pid 5042] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5042] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffde6703ec0) = 0 [pid 5042] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffde6703ec0) = 0 [pid 5042] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffde6702eb0) = 18 [ 89.672818][ T8] usb 1-1: new high-speed USB device number 2 using dummy_hcd [pid 5042] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffde6703ec0) = 0 [pid 5042] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffde6702eb0) = 18 [pid 5042] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffde6703ec0) = 0 [pid 5042] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffde6702eb0) = 9 [pid 5042] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffde6703ec0) = 0 [pid 5042] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffde6702eb0) = 36 [pid 5042] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffde6703ec0) = 0 [pid 5042] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5042] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5042] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f726d03940c) = 0 [ 90.062830][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.073951][ T8] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 90.083107][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.097011][ T8] usb 1-1: config 0 descriptor?? [pid 5042] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffde6702eb0) = 0 [pid 5042] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffde6703ee0) = 0 [pid 5042] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffde6702ed0) = 0 [pid 5042] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffde6703ee0) = 0 [pid 5042] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffde6702ed0) = 1 [ 90.582884][ T8] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 90.598632][ T8] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0001/input/input5 [ 90.713283][ T8] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [pid 5042] ioctl(-1, HIDIOCGUSAGES, 0x20000d40) = -1 EBADF (Bad file descriptor) [pid 5042] openat(AT_FDCWD, "/dev/input/event4", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|FASYNC|0x800000) = 4 [ 90.777753][ T8] keytouch 0003:0926:3333.0001: implement() called with too large value 8 (n: 1)! (kworker/0:0) [ 90.789081][ T8] ------------[ cut here ]------------ [ 90.794541][ T8] WARNING: CPU: 0 PID: 8 at drivers/hid/hid-core.c:1444 implement+0x22e/0x270 [ 90.803773][ T8] Modules linked in: [ 90.803849][ T8] CPU: 0 PID: 8 Comm: kworker/0:0 Not tainted 6.6.0-rc4-syzkaller-00284-gb9ddbb0cde2a #0 [ 90.817616][ T8] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [pid 5042] write(4, "\xe2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 217088) = 217080 [pid 5042] exit_group(0) = ? [ 90.827689][ T8] Workqueue: events hidinput_led_worker [ 90.833263][ T8] RIP: 0010:implement+0x22e/0x270 [ 90.838311][ T8] Code: 48 c7 c2 40 9e 89 8b 65 48 8b 04 25 c0 bc 03 00 49 8d bd 38 19 00 00 48 c7 c6 60 7d 89 8b 4c 8d 88 98 08 00 00 e8 62 ff 82 fd <0f> 0b 44 21 fd e9 5a ff ff ff 48 89 d7 89 44 24 14 48 89 54 24 08 [ 90.857923][ T8] RSP: 0018:ffffc900000d7ae0 EFLAGS: 00010086 [ 90.864022][ T8] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 90.871997][ T8] RDX: ffff888016e45940 RSI: ffffffff8532e875 RDI: 0000000000000005 [ 90.879971][ T8] RBP: 0000000000000008 R08: 0000000000000005 R09: 0000000000000000 [ 90.887944][ T8] R10: 0000000080000001 R11: 0000000000000001 R12: 0000000000000000 [ 90.895919][ T8] R13: ffff888074318000 R14: 0000000000000008 R15: 0000000000000001 [ 90.903892][ T8] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 90.912828][ T8] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 90.919415][ T8] CR2: 00007f726cfaff40 CR3: 000000001f1c3000 CR4: 00000000003506f0 [ 90.927394][ T8] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 90.935371][ T8] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 90.943350][ T8] Call Trace: [ 90.946629][ T8] [ 90.949565][ T8] ? show_regs+0x8f/0xa0 [ 90.953825][ T8] ? __warn+0xe6/0x380 [ 90.957910][ T8] ? implement+0x22e/0x270 [ 90.962348][ T8] ? report_bug+0x3bc/0x580 [ 90.966864][ T8] ? handle_bug+0x3c/0x70 [ 90.971205][ T8] ? exc_invalid_op+0x17/0x40 [ 90.975893][ T8] ? asm_exc_invalid_op+0x1a/0x20 [ 90.980940][ T8] ? _dev_warn+0xe5/0x120 [ 90.985276][ T8] ? implement+0x22e/0x270 [ 90.989720][ T8] hid_output_report+0x2ef/0x4a0 [ 90.994696][ T8] __usbhid_submit_report+0x774/0xed0 [ 91.000094][ T8] ? usbhid_restart_out_queue.isra.0+0x390/0x390 [ 91.006440][ T8] ? lock_sync+0x190/0x190 [ 91.010885][ T8] usbhid_request+0x79/0xf0 [ 91.015406][ T8] ? usbhid_parse+0xa20/0xa20 [ 91.020107][ T8] hidinput_led_worker+0xbc/0x230 [ 91.025145][ T8] process_one_work+0x884/0x15c0 [ 91.030103][ T8] ? lock_sync+0x190/0x190 [ 91.034538][ T8] ? init_worker_pool+0x770/0x770 [ 91.039583][ T8] ? assign_work+0x1a0/0x240 [ 91.044189][ T8] worker_thread+0x8b9/0x1290 [ 91.048895][ T8] ? process_one_work+0x15c0/0x15c0 [ 91.054112][ T8] kthread+0x33c/0x440 [ 91.058193][ T8] ? _raw_spin_unlock_irq+0x23/0x50 [ 91.063398][ T8] ? kthread_complete_and_exit+0x40/0x40 [ 91.069042][ T8] ret_from_fork+0x45/0x80 [ 91.073471][ T8] ? kthread_complete_and_exit+0x40/0x40 [ 91.079120][ T8] ret_from_fork_asm+0x11/0x20 [ 91.083917][ T8] [ 91.086936][ T8] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 91.094214][ T8] CPU: 0 PID: 8 Comm: kworker/0:0 Not tainted 6.6.0-rc4-syzkaller-00284-gb9ddbb0cde2a #0 [ 91.104023][ T8] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 91.114080][ T8] Workqueue: events hidinput_led_worker [ 91.119635][ T8] Call Trace: [ 91.122912][ T8] [ 91.125846][ T8] dump_stack_lvl+0xd9/0x1b0 [ 91.130445][ T8] panic+0x6a6/0x750 [ 91.134355][ T8] ? panic_smp_self_stop+0xa0/0xa0 [ 91.139497][ T8] ? implement+0x22e/0x270 [ 91.143932][ T8] check_panic_on_warn+0xab/0xb0 [ 91.148883][ T8] __warn+0xf2/0x380 [ 91.152790][ T8] ? implement+0x22e/0x270 [ 91.157229][ T8] report_bug+0x3bc/0x580 [ 91.161568][ T8] handle_bug+0x3c/0x70 [ 91.165746][ T8] exc_invalid_op+0x17/0x40 [ 91.170266][ T8] asm_exc_invalid_op+0x1a/0x20 [ 91.175131][ T8] RIP: 0010:implement+0x22e/0x270 [ 91.180179][ T8] Code: 48 c7 c2 40 9e 89 8b 65 48 8b 04 25 c0 bc 03 00 49 8d bd 38 19 00 00 48 c7 c6 60 7d 89 8b 4c 8d 88 98 08 00 00 e8 62 ff 82 fd <0f> 0b 44 21 fd e9 5a ff ff ff 48 89 d7 89 44 24 14 48 89 54 24 08 [ 91.199798][ T8] RSP: 0018:ffffc900000d7ae0 EFLAGS: 00010086 [ 91.205883][ T8] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 91.213865][ T8] RDX: ffff888016e45940 RSI: ffffffff8532e875 RDI: 0000000000000005 [ 91.221845][ T8] RBP: 0000000000000008 R08: 0000000000000005 R09: 0000000000000000 [ 91.229829][ T8] R10: 0000000080000001 R11: 0000000000000001 R12: 0000000000000000 [ 91.237807][ T8] R13: ffff888074318000 R14: 0000000000000008 R15: 0000000000000001 [ 91.245797][ T8] ? _dev_warn+0xe5/0x120 [ 91.250149][ T8] hid_output_report+0x2ef/0x4a0 [ 91.255123][ T8] __usbhid_submit_report+0x774/0xed0 [ 91.260543][ T8] ? usbhid_restart_out_queue.isra.0+0x390/0x390 [ 91.266916][ T8] ? lock_sync+0x190/0x190 [ 91.271396][ T8] usbhid_request+0x79/0xf0 [ 91.275944][ T8] ? usbhid_parse+0xa20/0xa20 [ 91.280651][ T8] hidinput_led_worker+0xbc/0x230 [ 91.285695][ T8] process_one_work+0x884/0x15c0 [ 91.290651][ T8] ? lock_sync+0x190/0x190 [ 91.295082][ T8] ? init_worker_pool+0x770/0x770 [ 91.300128][ T8] ? assign_work+0x1a0/0x240 [ 91.304732][ T8] worker_thread+0x8b9/0x1290 [ 91.309461][ T8] ? process_one_work+0x15c0/0x15c0 [ 91.314687][ T8] kthread+0x33c/0x440 [ 91.318766][ T8] ? _raw_spin_unlock_irq+0x23/0x50 [ 91.323974][ T8] ? kthread_complete_and_exit+0x40/0x40 [ 91.329636][ T8] ret_from_fork+0x45/0x80 [ 91.334079][ T8] ? kthread_complete_and_exit+0x40/0x40 [ 91.339721][ T8] ret_from_fork_asm+0x11/0x20 [ 91.344517][ T8] [ 91.347826][ T8] Kernel Offset: disabled [ 91.352235][ T8] Rebooting in 86400 seconds..