./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1122263651 <...> DUID 00:04:c5:78:79:07:21:f0:b3:e0:09:b6:1a:d6:4d:97:86:4f forked to background, child pid 4668 [ 32.554525][ T4669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.564101][ T4669] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.182' (ECDSA) to the list of known hosts. execve("./syz-executor1122263651", ["./syz-executor1122263651"], 0x7ffcd2fad260 /* 10 vars */) = 0 brk(NULL) = 0x555556ae0000 brk(0x555556ae0c40) = 0x555556ae0c40 arch_prctl(ARCH_SET_FS, 0x555556ae0300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor1122263651", 4096) = 28 brk(0x555556b01c40) = 0x555556b01c40 brk(0x555556b02000) = 0x555556b02000 mprotect(0x7f94cebea000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5001 attached , child_tidptr=0x555556ae05d0) = 5001 [pid 5001] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 5001] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5001] setsid() = 1 [pid 5001] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5001] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5001] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5001] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5001] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5001] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5001] unshare(CLONE_NEWNS) = 0 [pid 5001] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5001] unshare(CLONE_NEWIPC) = 0 [pid 5001] unshare(CLONE_NEWCGROUP) = 0 [pid 5001] unshare(CLONE_NEWUTS) = 0 [pid 5001] unshare(CLONE_SYSVSEM) = 0 [pid 5001] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5001] write(3, "16777216", 8) = 8 [pid 5001] close(3) = 0 [pid 5001] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5001] write(3, "536870912", 9) = 9 [pid 5001] close(3) = 0 [pid 5001] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5001] write(3, "1024", 4) = 4 [pid 5001] close(3) = 0 [pid 5001] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5001] write(3, "8192", 4) = 4 [pid 5001] close(3) = 0 [pid 5001] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5001] write(3, "1024", 4) = 4 [pid 5001] close(3) = 0 [pid 5001] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5001] write(3, "1024", 4) = 4 [pid 5001] close(3) = 0 [pid 5001] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5001] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5001] close(3) = 0 [pid 5001] getpid() = 1 [pid 5001] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< 0b e9 58 f8 ff ff e8 6e f9 5b fb 48 81 c5 c0 05 00 00 e9 84 f7 [ 64.849319][ T26] RSP: 0018:ffffc90000a1efa8 EFLAGS: 00010282 [ 64.855490][ T26] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 64.863683][ T26] RDX: ffff888018e79dc0 RSI: ffffffff814c14e7 RDI: 0000000000000001 [ 64.871835][ T26] RBP: ffff88807876c0f0 R08: 0000000000000001 R09: 0000000000000000 [ 64.879892][ T26] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000003 [ 64.887948][ T26] R13: ffff88802160e2f8 R14: 0000000000000003 R15: ffff888021e31b00 [ 64.895973][ T26] FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 64.904978][ T26] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 64.911830][ T26] CR2: 0000559b1825a0c0 CR3: 000000007766a000 CR4: 00000000003506e0 [ 64.919823][ T26] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 64.927877][ T26] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 64.935916][ T26] Call Trace: [ 64.939190][ T26] [ 64.942190][ T26] ? __kmalloc+0x43/0x190 [ 64.946553][ T26] ar5523_submit_rx_cmd+0x1f1/0x360 [ 64.951823][ T26] ar5523_probe+0xc0b/0x36a0 [ 64.956453][ T26] ? ar5523_hwconfig+0x130/0x130 [ 64.961503][ T26] ? mark_held_locks+0x9f/0xe0 [ 64.966445][ T26] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 64.972362][ T26] ? lockdep_hardirqs_on+0x7d/0x100 [ 64.977598][ T26] ? _raw_spin_unlock_irqrestore+0x41/0x70 [ 64.983495][ T26] ? __pm_runtime_set_status+0x442/0xd90 [ 64.989162][ T26] usb_probe_interface+0x30f/0x960 [ 64.994424][ T26] ? usb_match_dynamic_id+0x1a0/0x1a0 [ 64.999823][ T26] really_probe+0x240/0xca0 [ 65.004410][ T26] __driver_probe_device+0x1df/0x4b0 [ 65.009722][ T26] ? usb_match_id.part.0+0x163/0x1b0 [ 65.015063][ T26] driver_probe_device+0x4c/0x1a0 [ 65.020114][ T26] __device_attach_driver+0x1d4/0x2e0 [ 65.025563][ T26] bus_for_each_drv+0x149/0x1d0 [ 65.030461][ T26] ? driver_probe_device+0x1a0/0x1a0 [ 65.035754][ T26] ? bus_for_each_dev+0x1c0/0x1c0 [ 65.040867][ T26] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 65.046708][ T26] ? lockdep_hardirqs_on+0x7d/0x100 [ 65.051975][ T26] ? _raw_spin_unlock_irqrestore+0x41/0x70 [ 65.057807][ T26] __device_attach+0x1e4/0x4b0 [ 65.062640][ T26] ? device_driver_attach+0x210/0x210 [ 65.068038][ T26] ? do_raw_spin_unlock+0x175/0x230 [ 65.073373][ T26] bus_probe_device+0x17c/0x1c0 [ 65.078259][ T26] device_add+0x112d/0x1a40 [ 65.082834][ T26] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 65.089713][ T26] usb_set_configuration+0x1196/0x1bc0 [ 65.095271][ T26] usb_generic_driver_probe+0xcf/0x130 [ 65.100803][ T26] usb_probe_device+0xd8/0x2c0 [ 65.105622][ T26] ? usb_driver_release_interface+0x190/0x190 [ 65.111841][ T26] really_probe+0x240/0xca0 [ 65.116395][ T26] __driver_probe_device+0x1df/0x4b0 [ 65.121755][ T26] driver_probe_device+0x4c/0x1a0 [ 65.126802][ T26] __device_attach_driver+0x1d4/0x2e0 [ 65.132228][ T26] bus_for_each_drv+0x149/0x1d0 [ 65.137099][ T26] ? driver_probe_device+0x1a0/0x1a0 [ 65.142454][ T26] ? bus_for_each_dev+0x1c0/0x1c0 [ 65.147496][ T26] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 65.153373][ T26] ? lockdep_hardirqs_on+0x7d/0x100 [ 65.158590][ T26] ? _raw_spin_unlock_irqrestore+0x41/0x70 [ 65.164476][ T26] __device_attach+0x1e4/0x4b0 [ 65.169288][ T26] ? device_driver_attach+0x210/0x210 [ 65.174727][ T26] ? do_raw_spin_unlock+0x175/0x230 [ 65.179982][ T26] bus_probe_device+0x17c/0x1c0 [ 65.184922][ T26] device_add+0x112d/0x1a40 [ 65.189459][ T26] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 65.196356][ T26] ? add_device_randomness+0xb8/0xe0 [ 65.201708][ T26] usb_new_device+0xcb2/0x19d0 [ 65.206478][ T26] ? hub_disconnect+0x520/0x520 [ 65.211400][ T26] ? _raw_spin_unlock_irq+0x23/0x50 [ 65.216619][ T26] hub_event+0x2d9e/0x4e40 [ 65.221152][ T26] ? hub_port_debounce+0x3b0/0x3b0 [ 65.226321][ T26] ? lock_sync+0x190/0x190 [ 65.231047][ T26] ? lock_downgrade+0x690/0x690 [ 65.235910][ T26] ? do_raw_spin_lock+0x124/0x2b0 [ 65.241031][ T26] ? _raw_spin_unlock_irq+0x23/0x50 [ 65.246256][ T26] process_one_work+0x99a/0x15e0 [ 65.251266][ T26] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 65.256661][ T26] ? spin_bug+0x1c0/0x1c0 [ 65.261042][ T26] ? _raw_spin_lock_irq+0x45/0x50 [ 65.266094][ T26] worker_thread+0x67d/0x10c0 [ 65.270939][ T26] ? process_one_work+0x15e0/0x15e0 [ 65.276164][ T26] kthread+0x344/0x440 [ 65.280231][ T26] ? kthread_complete_and_exit+0x40/0x40 [ 65.285921][ T26] ret_from_fork+0x1f/0x30 [ 65.290451][ T26] [ 65.293486][ T26] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 65.300781][ T26] CPU: 1 PID: 26 Comm: kworker/1:1 Not tainted 6.3.0-syzkaller-11733-g825a0714d2b3 #0 [ 65.310348][ T26] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 65.320408][ T26] Workqueue: usb_hub_wq hub_event [ 65.325429][ T26] Call Trace: [ 65.328700][ T26] [ 65.331644][ T26] dump_stack_lvl+0xd9/0x150 [ 65.336225][ T26] panic+0x686/0x730 [ 65.340117][ T26] ? panic_smp_self_stop+0xa0/0xa0 [ 65.345223][ T26] ? show_trace_log_lvl+0x285/0x390 [ 65.350444][ T26] ? usb_submit_urb+0xed6/0x1880 [ 65.355406][ T26] check_panic_on_warn+0xb1/0xc0 [ 65.360376][ T26] __warn+0xf2/0x390 [ 65.364286][ T26] ? preempt_schedule_notrace+0x5f/0xd0 [ 65.369856][ T26] ? usb_submit_urb+0xed6/0x1880 [ 65.374810][ T26] report_bug+0x2da/0x500 [ 65.379170][ T26] handle_bug+0x3c/0x70 [ 65.383331][ T26] exc_invalid_op+0x18/0x50 [ 65.387842][ T26] asm_exc_invalid_op+0x1a/0x20 [ 65.392709][ T26] RIP: 0010:usb_submit_urb+0xed6/0x1880 [ 65.398270][ T26] Code: 7c 24 18 e8 9c f9 5b fb 48 8b 7c 24 18 e8 f2 22 f0 fe 41 89 d8 44 89 e1 4c 89 ea 48 89 c6 48 c7 c7 20 c1 fc 8a e8 9a ae 23 fb <0f> 0b e9 58 f8 ff ff e8 6e f9 5b fb 48 81 c5 c0 05 00 00 e9 84 f7 [ 65.417887][ T26] RSP: 0018:ffffc90000a1efa8 EFLAGS: 00010282 [ 65.423963][ T26] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 65.431942][ T26] RDX: ffff888018e79dc0 RSI: ffffffff814c14e7 RDI: 0000000000000001 [ 65.439923][ T26] RBP: ffff88807876c0f0 R08: 0000000000000001 R09: 0000000000000000 [ 65.447899][ T26] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000003 [ 65.455876][ T26] R13: ffff88802160e2f8 R14: 0000000000000003 R15: ffff888021e31b00 [ 65.463861][ T26] ? __warn_printk+0x187/0x310 [ 65.468649][ T26] ? usb_submit_urb+0xed6/0x1880 [ 65.473601][ T26] ? __kmalloc+0x43/0x190 [ 65.477942][ T26] ar5523_submit_rx_cmd+0x1f1/0x360 [ 65.483166][ T26] ar5523_probe+0xc0b/0x36a0 [ 65.487785][ T26] ? ar5523_hwconfig+0x130/0x130 [ 65.492741][ T26] ? mark_held_locks+0x9f/0xe0 [ 65.497522][ T26] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 65.503345][ T26] ? lockdep_hardirqs_on+0x7d/0x100 [ 65.508555][ T26] ? _raw_spin_unlock_irqrestore+0x41/0x70 [ 65.514381][ T26] ? __pm_runtime_set_status+0x442/0xd90 [ 65.520043][ T26] usb_probe_interface+0x30f/0x960 [ 65.525176][ T26] ? usb_match_dynamic_id+0x1a0/0x1a0 [ 65.530578][ T26] really_probe+0x240/0xca0 [ 65.535126][ T26] __driver_probe_device+0x1df/0x4b0 [ 65.540449][ T26] ? usb_match_id.part.0+0x163/0x1b0 [ 65.545766][ T26] driver_probe_device+0x4c/0x1a0 [ 65.550821][ T26] __device_attach_driver+0x1d4/0x2e0 [ 65.556225][ T26] bus_for_each_drv+0x149/0x1d0 [ 65.561094][ T26] ? driver_probe_device+0x1a0/0x1a0 [ 65.566471][ T26] ? bus_for_each_dev+0x1c0/0x1c0 [ 65.571537][ T26] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 65.577378][ T26] ? lockdep_hardirqs_on+0x7d/0x100 [ 65.582594][ T26] ? _raw_spin_unlock_irqrestore+0x41/0x70 [ 65.588439][ T26] __device_attach+0x1e4/0x4b0 [ 65.593337][ T26] ? device_driver_attach+0x210/0x210 [ 65.598748][ T26] ? do_raw_spin_unlock+0x175/0x230 [ 65.603998][ T26] bus_probe_device+0x17c/0x1c0 [ 65.608887][ T26] device_add+0x112d/0x1a40 [ 65.613506][ T26] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 65.620388][ T26] usb_set_configuration+0x1196/0x1bc0 [ 65.625887][ T26] usb_generic_driver_probe+0xcf/0x130 [ 65.631368][ T26] usb_probe_device+0xd8/0x2c0 [ 65.636152][ T26] ? usb_driver_release_interface+0x190/0x190 [ 65.642239][ T26] really_probe+0x240/0xca0 [ 65.646770][ T26] __driver_probe_device+0x1df/0x4b0 [ 65.652091][ T26] driver_probe_device+0x4c/0x1a0 [ 65.657141][ T26] __device_attach_driver+0x1d4/0x2e0 [ 65.662539][ T26] bus_for_each_drv+0x149/0x1d0 [ 65.667409][ T26] ? driver_probe_device+0x1a0/0x1a0 [ 65.672717][ T26] ? bus_for_each_dev+0x1c0/0x1c0 [ 65.677760][ T26] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 65.683588][ T26] ? lockdep_hardirqs_on+0x7d/0x100 [ 65.688801][ T26] ? _raw_spin_unlock_irqrestore+0x41/0x70 [ 65.694631][ T26] __device_attach+0x1e4/0x4b0 [ 65.699418][ T26] ? device_driver_attach+0x210/0x210 [ 65.704815][ T26] ? do_raw_spin_unlock+0x175/0x230 [ 65.710043][ T26] bus_probe_device+0x17c/0x1c0 [ 65.714948][ T26] device_add+0x112d/0x1a40 [ 65.719497][ T26] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 65.726464][ T26] ? add_device_randomness+0xb8/0xe0 [ 65.731790][ T26] usb_new_device+0xcb2/0x19d0 [ 65.736611][ T26] ? hub_disconnect+0x520/0x520 [ 65.741490][ T26] ? _raw_spin_unlock_irq+0x23/0x50 [ 65.746712][ T26] hub_event+0x2d9e/0x4e40 [ 65.751160][ T26] ? hub_port_debounce+0x3b0/0x3b0 [ 65.756287][ T26] ? lock_sync+0x190/0x190 [ 65.760718][ T26] ? lock_downgrade+0x690/0x690 [ 65.765588][ T26] ? do_raw_spin_lock+0x124/0x2b0 [ 65.770637][ T26] ? _raw_spin_unlock_irq+0x23/0x50 [ 65.775874][ T26] process_one_work+0x99a/0x15e0 [ 65.780857][ T26] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 65.786270][ T26] ? spin_bug+0x1c0/0x1c0 [ 65.790624][ T26] ? _raw_spin_lock_irq+0x45/0x50 [ 65.795694][ T26] worker_thread+0x67d/0x10c0 [ 65.800410][ T26] ? process_one_work+0x15e0/0x15e0 [ 65.805650][ T26] kthread+0x344/0x440 [ 65.809748][ T26] ? kthread_complete_and_exit+0x40/0x40 [ 65.815427][ T26] ret_from_fork+0x1f/0x30 [ 65.819886][ T26] [ 65.822975][ T26] Kernel Offset: disabled [ 65.827381][ T26] Rebooting in 86400 seconds..