./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2779130054 <...> Warning: Permanently added '10.128.0.51' (ECDSA) to the list of known hosts. execve("./syz-executor2779130054", ["./syz-executor2779130054"], 0x7ffd24ce5d50 /* 10 vars */) = 0 brk(NULL) = 0x555556cad000 brk(0x555556cadc40) = 0x555556cadc40 arch_prctl(ARCH_SET_FS, 0x555556cad300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 set_tid_address(0x555556cad5d0) = 3604 set_robust_list(0x555556cad5e0, 24) = 0 rt_sigaction(SIGRTMIN, {sa_handler=0x7fb2c2ce7c70, sa_mask=[], sa_flags=SA_RESTORER|SA_SIGINFO, sa_restorer=0x7fb2c2ce8340}, NULL, 8) = 0 rt_sigaction(SIGRT_1, {sa_handler=0x7fb2c2ce7d10, sa_mask=[], sa_flags=SA_RESTORER|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb2c2ce8340}, NULL, 8) = 0 rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2779130054", 4096) = 28 brk(0x555556ccec40) = 0x555556ccec40 brk(0x555556ccf000) = 0x555556ccf000 mprotect(0x7fb2c2daa000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3605 attached , child_tidptr=0x555556cad5d0) = 3605 [pid 3604] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3605] set_robust_list(0x555556cad5e0, 24) = 0 [pid 3605] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556cad5d0) = 3606 ./strace-static-x86_64: Process 3607 attached ./strace-static-x86_64: Process 3606 attached [pid 3604] <... clone resumed>, child_tidptr=0x555556cad5d0) = 3607 [pid 3607] set_robust_list(0x555556cad5e0, 24) = 0 [pid 3607] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3604] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3606] set_robust_list(0x555556cad5e0, 24./strace-static-x86_64: Process 3608 attached [pid 3607] <... clone resumed>, child_tidptr=0x555556cad5d0) = 3608 [pid 3608] set_robust_list(0x555556cad5e0, 24) = 0 [pid 3608] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3608] setpgid(0, 0) = 0 [pid 3608] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3606] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 3609 attached [pid 3604] <... clone resumed>, child_tidptr=0x555556cad5d0) = 3609 [pid 3608] write(3, "1000", 4 [pid 3606] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3604] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3606] <... prctl resumed>) = 0 [pid 3606] setpgid(0, 0) = 0 [pid 3606] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 3610 attached [pid 3604] <... clone resumed>, child_tidptr=0x555556cad5d0) = 3610 [pid 3609] set_robust_list(0x555556cad5e0, 24 [pid 3608] <... write resumed>) = 4 [pid 3606] <... openat resumed>) = 3 [pid 3604] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3610] set_robust_list(0x555556cad5e0, 24 [pid 3609] <... set_robust_list resumed>) = 0 [pid 3608] close(3 [pid 3606] write(3, "1000", 4./strace-static-x86_64: Process 3611 attached [pid 3610] <... set_robust_list resumed>) = 0 [pid 3609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3608] <... close resumed>) = 0 [pid 3606] <... write resumed>) = 4 [pid 3604] <... clone resumed>, child_tidptr=0x555556cad5d0) = 3611 [pid 3611] set_robust_list(0x555556cad5e0, 24 [pid 3608] futex(0x7fb2c2db04ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3606] close(3 [pid 3604] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3611] <... set_robust_list resumed>) = 0 [pid 3610] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3608] <... futex resumed>) = 0 [pid 3606] <... close resumed>) = 0 [pid 3611] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3609] <... clone resumed>, child_tidptr=0x555556cad5d0) = 3612 [pid 3608] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3606] futex(0x7fb2c2db04ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3604] <... clone resumed>, child_tidptr=0x555556cad5d0) = 3613 [pid 3608] <... mmap resumed>) = 0x7fb2c2cb7000 [pid 3606] <... futex resumed>) = 0 [pid 3611] <... clone resumed>, child_tidptr=0x555556cad5d0) = 3615 [pid 3610] <... clone resumed>, child_tidptr=0x555556cad5d0) = 3614 [pid 3608] mprotect(0x7fb2c2cb8000, 131072, PROT_READ|PROT_WRITE [pid 3606] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3608] <... mprotect resumed>) = 0 [pid 3606] <... mmap resumed>) = 0x7fb2c2cb7000 ./strace-static-x86_64: Process 3612 attached [pid 3608] clone(child_stack=0x7fb2c2cd73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3606] mprotect(0x7fb2c2cb8000, 131072, PROT_READ|PROT_WRITE [pid 3612] set_robust_list(0x555556cad5e0, 24 [pid 3606] <... mprotect resumed>) = 0 ./strace-static-x86_64: Process 3615 attached ./strace-static-x86_64: Process 3614 attached ./strace-static-x86_64: Process 3613 attached [pid 3612] <... set_robust_list resumed>) = 0 [pid 3608] <... clone resumed>, parent_tid=[3616], tls=0x7fb2c2cd7700, child_tidptr=0x7fb2c2cd79d0) = 3616 [pid 3606] clone(child_stack=0x7fb2c2cd73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3615] set_robust_list(0x555556cad5e0, 24 [pid 3614] set_robust_list(0x555556cad5e0, 24 [pid 3613] set_robust_list(0x555556cad5e0, 24 [pid 3612] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3608] futex(0x7fb2c2db04a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3615] <... set_robust_list resumed>) = 0 [pid 3614] <... set_robust_list resumed>) = 0 [pid 3613] <... set_robust_list resumed>) = 0 [pid 3612] <... prctl resumed>) = 0 [pid 3608] <... futex resumed>) = 0 [pid 3606] <... clone resumed>, parent_tid=[3617], tls=0x7fb2c2cd7700, child_tidptr=0x7fb2c2cd79d0) = 3617 ./strace-static-x86_64: Process 3616 attached [pid 3615] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3613] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3612] setpgid(0, 0 [pid 3608] futex(0x7fb2c2db04ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3606] futex(0x7fb2c2db04a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3616] set_robust_list(0x7fb2c2cd79e0, 24 [pid 3615] <... prctl resumed>) = 0 [pid 3614] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3612] <... setpgid resumed>) = 0 [pid 3606] <... futex resumed>) = 0 [pid 3616] <... set_robust_list resumed>) = 0 [pid 3615] setpgid(0, 0 [pid 3614] <... prctl resumed>) = 0 [pid 3612] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3606] futex(0x7fb2c2db04ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 3617 attached [pid 3616] openat(AT_FDCWD, "/dev/usbmon0", O_RDWR|O_TRUNC|O_NONBLOCK|O_DSYNC [pid 3615] <... setpgid resumed>) = 0 [pid 3614] setpgid(0, 0 [pid 3613] <... clone resumed>, child_tidptr=0x555556cad5d0) = 3618 [pid 3612] <... openat resumed>) = 3 [pid 3617] set_robust_list(0x7fb2c2cd79e0, 24 [pid 3616] <... openat resumed>) = 3 [pid 3615] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3614] <... setpgid resumed>) = 0 [pid 3612] write(3, "1000", 4 [pid 3617] <... set_robust_list resumed>) = 0 [pid 3616] futex(0x7fb2c2db04ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3615] <... openat resumed>) = 3 [pid 3612] <... write resumed>) = 4 [pid 3617] openat(AT_FDCWD, "/dev/usbmon0", O_RDWR|O_TRUNC|O_NONBLOCK|O_DSYNC [pid 3616] <... futex resumed>) = 1 [pid 3615] write(3, "1000", 4 [pid 3614] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3612] close(3 [pid 3608] <... futex resumed>) = 0 ./strace-static-x86_64: Process 3618 attached [pid 3616] futex(0x7fb2c2db04a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3615] <... write resumed>) = 4 [pid 3614] <... openat resumed>) = 3 [pid 3612] <... close resumed>) = 0 [pid 3608] futex(0x7fb2c2db04a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3616] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3615] close(3 [pid 3614] write(3, "1000", 4 [pid 3612] futex(0x7fb2c2db04ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3608] <... futex resumed>) = 0 [pid 3617] <... openat resumed>) = 3 [pid 3616] mmap(0x20000000, 8388608, PROT_READ|PROT_WRITE|PROT_GROWSDOWN|0x800000, MAP_SHARED|MAP_FIXED, 3, 0 [pid 3615] <... close resumed>) = 0 [pid 3614] <... write resumed>) = 4 [pid 3612] <... futex resumed>) = 0 [pid 3608] futex(0x7fb2c2db04ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3618] set_robust_list(0x555556cad5e0, 24 [pid 3617] futex(0x7fb2c2db04ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3616] <... mmap resumed>) = 0x20000000 [pid 3615] futex(0x7fb2c2db04ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3614] close(3 [pid 3612] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3618] <... set_robust_list resumed>) = 0 [pid 3617] <... futex resumed>) = 1 [pid 3616] futex(0x7fb2c2db04ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3615] <... futex resumed>) = 0 [pid 3614] <... close resumed>) = 0 [pid 3612] <... mmap resumed>) = 0x7fb2c2cb7000 [pid 3606] <... futex resumed>) = 0 [pid 3618] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3617] futex(0x7fb2c2db04a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3616] <... futex resumed>) = 1 [pid 3615] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3614] futex(0x7fb2c2db04ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3612] mprotect(0x7fb2c2cb8000, 131072, PROT_READ|PROT_WRITE [pid 3608] <... futex resumed>) = 0 [pid 3606] futex(0x7fb2c2db04a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3618] <... prctl resumed>) = 0 [pid 3617] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3616] futex(0x7fb2c2db04a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3615] <... mmap resumed>) = 0x7fb2c2cb7000 [pid 3614] <... futex resumed>) = 0 [pid 3612] <... mprotect resumed>) = 0 [pid 3608] futex(0x7fb2c2db04a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3606] <... futex resumed>) = 0 [pid 3618] setpgid(0, 0 [pid 3617] mmap(0x20000000, 8388608, PROT_READ|PROT_WRITE|PROT_GROWSDOWN|0x800000, MAP_SHARED|MAP_FIXED, 3, 0 [pid 3616] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3615] mprotect(0x7fb2c2cb8000, 131072, PROT_READ|PROT_WRITE [pid 3614] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3612] clone(child_stack=0x7fb2c2cd73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3608] <... futex resumed>) = 0 [pid 3606] futex(0x7fb2c2db04ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 3619 attached [pid 3618] <... setpgid resumed>) = 0 [pid 3617] <... mmap resumed>) = 0x20000000 [pid 3616] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR [pid 3615] <... mprotect resumed>) = 0 [pid 3614] <... mmap resumed>) = 0x7fb2c2cb7000 [pid 3608] futex(0x7fb2c2db04ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 3619] set_robust_list(0x7fb2c2cd79e0, 24 [pid 3618] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3617] futex(0x7fb2c2db04ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3616] <... openat resumed>) = 4 [pid 3615] clone(child_stack=0x7fb2c2cd73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3614] mprotect(0x7fb2c2cb8000, 131072, PROT_READ|PROT_WRITE [pid 3612] <... clone resumed>, parent_tid=[3619], tls=0x7fb2c2cd7700, child_tidptr=0x7fb2c2cd79d0) = 3619 [pid 3618] <... openat resumed>) = 3 [pid 3617] <... futex resumed>) = 1 [pid 3616] ioctl(4, USB_RAW_IOCTL_INIT [pid 3614] <... mprotect resumed>) = 0 [pid 3612] futex(0x7fb2c2db04a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3606] <... futex resumed>) = 0 [pid 3619] <... set_robust_list resumed>) = 0 [pid 3618] write(3, "1000", 4 [pid 3617] futex(0x7fb2c2db04a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3616] <... ioctl resumed>, 0x7fb2c2cd62b0) = 0 [pid 3615] <... clone resumed>, parent_tid=[3620], tls=0x7fb2c2cd7700, child_tidptr=0x7fb2c2cd79d0) = 3620 [pid 3614] clone(child_stack=0x7fb2c2cd73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3612] <... futex resumed>) = 0 [pid 3606] futex(0x7fb2c2db04a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3618] <... write resumed>) = 4 [pid 3617] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3616] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN [pid 3615] futex(0x7fb2c2db04a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3612] futex(0x7fb2c2db04ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3606] <... futex resumed>) = 0 ./strace-static-x86_64: Process 3620 attached [pid 3619] openat(AT_FDCWD, "/dev/usbmon0", O_RDWR|O_TRUNC|O_NONBLOCK|O_DSYNC [pid 3618] close(3 [pid 3617] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR [pid 3616] <... ioctl resumed>, 0) = 0 [pid 3615] <... futex resumed>) = 0 [pid 3614] <... clone resumed>, parent_tid=[3621], tls=0x7fb2c2cd7700, child_tidptr=0x7fb2c2cd79d0) = 3621 [pid 3606] futex(0x7fb2c2db04ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000}./strace-static-x86_64: Process 3621 attached [pid 3620] set_robust_list(0x7fb2c2cd79e0, 24 [pid 3618] <... close resumed>) = 0 [pid 3617] <... openat resumed>) = 4 [pid 3616] ioctl(4, USB_RAW_IOCTL_EVENT_FETCH [pid 3615] futex(0x7fb2c2db04ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3614] futex(0x7fb2c2db04a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3621] set_robust_list(0x7fb2c2cd79e0, 24 [pid 3620] <... set_robust_list resumed>) = 0 [pid 3618] futex(0x7fb2c2db04ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3617] ioctl(4, USB_RAW_IOCTL_INIT [pid 3616] <... ioctl resumed>, 0x7fb2c2cd62b0) = 0 [pid 3614] <... futex resumed>) = 0 [pid 3621] <... set_robust_list resumed>) = 0 [pid 3620] openat(AT_FDCWD, "/dev/usbmon0", O_RDWR|O_TRUNC|O_NONBLOCK|O_DSYNC [pid 3618] <... futex resumed>) = 0 [pid 3617] <... ioctl resumed>, 0x7fb2c2cd62b0) = 0 [pid 3616] ioctl(4, USB_RAW_IOCTL_EVENT_FETCH [pid 3614] futex(0x7fb2c2db04ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3621] openat(AT_FDCWD, "/dev/usbmon0", O_RDWR|O_TRUNC|O_NONBLOCK|O_DSYNC [pid 3620] <... openat resumed>) = 3 [pid 3619] <... openat resumed>) = 3 [pid 3618] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3617] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN [pid 3621] <... openat resumed>) = 3 [pid 3620] futex(0x7fb2c2db04ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3619] futex(0x7fb2c2db04ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3618] <... mmap resumed>) = 0x7fb2c2cb7000 [pid 3621] futex(0x7fb2c2db04ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3620] <... futex resumed>) = 1 [pid 3615] <... futex resumed>) = 0 [pid 3621] <... futex resumed>) = 1 [pid 3620] futex(0x7fb2c2db04a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3617] <... ioctl resumed>, 0) = 0 [pid 3615] futex(0x7fb2c2db04a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3614] <... futex resumed>) = 0 [pid 3618] mprotect(0x7fb2c2cb8000, 131072, PROT_READ|PROT_WRITE [pid 3621] futex(0x7fb2c2db04a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3620] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3619] <... futex resumed>) = 1 [pid 3618] <... mprotect resumed>) = 0 [pid 3617] ioctl(4, USB_RAW_IOCTL_EVENT_FETCH [pid 3615] <... futex resumed>) = 0 [pid 3614] futex(0x7fb2c2db04a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3612] <... futex resumed>) = 0 [pid 3621] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3620] mmap(0x20000000, 8388608, PROT_READ|PROT_WRITE|PROT_GROWSDOWN|0x800000, MAP_SHARED|MAP_FIXED, 3, 0 [pid 3619] mmap(0x20000000, 8388608, PROT_READ|PROT_WRITE|PROT_GROWSDOWN|0x800000, MAP_SHARED|MAP_FIXED, 3, 0 [pid 3618] clone(child_stack=0x7fb2c2cd73f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3617] <... ioctl resumed>, 0x7fb2c2cd62b0) = 0 [pid 3615] futex(0x7fb2c2db04ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3614] <... futex resumed>) = 0 [pid 3612] futex(0x7fb2c2db04a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3621] mmap(0x20000000, 8388608, PROT_READ|PROT_WRITE|PROT_GROWSDOWN|0x800000, MAP_SHARED|MAP_FIXED, 3, 0 [pid 3620] <... mmap resumed>) = 0x20000000 [pid 3617] ioctl(4, USB_RAW_IOCTL_EVENT_FETCH [pid 3614] futex(0x7fb2c2db04ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3612] <... futex resumed>) = 0 [pid 3619] <... mmap resumed>) = 0x20000000 [pid 3621] <... mmap resumed>) = 0x20000000 [pid 3620] futex(0x7fb2c2db04ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3619] futex(0x7fb2c2db04ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3618] <... clone resumed>, parent_tid=[3624], tls=0x7fb2c2cd7700, child_tidptr=0x7fb2c2cd79d0) = 3624 [pid 3612] futex(0x7fb2c2db04ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 3624 attached [pid 3621] futex(0x7fb2c2db04ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3620] <... futex resumed>) = 1 [pid 3619] <... futex resumed>) = 0 [pid 3618] futex(0x7fb2c2db04a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3615] <... futex resumed>) = 0 [pid 3612] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3624] set_robust_list(0x7fb2c2cd79e0, 24 [pid 3621] <... futex resumed>) = 1 [pid 3620] futex(0x7fb2c2db04a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3619] futex(0x7fb2c2db04a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3618] <... futex resumed>) = 0 [pid 3615] futex(0x7fb2c2db04a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3614] <... futex resumed>) = 0 [pid 3612] futex(0x7fb2c2db04a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3624] <... set_robust_list resumed>) = 0 [pid 3621] futex(0x7fb2c2db04a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3620] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3619] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3618] futex(0x7fb2c2db04ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3615] <... futex resumed>) = 0 [pid 3614] futex(0x7fb2c2db04a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3612] <... futex resumed>) = 0 [pid 3624] openat(AT_FDCWD, "/dev/usbmon0", O_RDWR|O_TRUNC|O_NONBLOCK|O_DSYNC [pid 3621] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3620] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR [pid 3619] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR [pid 3615] futex(0x7fb2c2db04ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 3614] <... futex resumed>) = 0 [pid 3612] futex(0x7fb2c2db04ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 3624] <... openat resumed>) = 3 [pid 3621] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR [pid 3620] <... openat resumed>) = 4 [pid 3619] <... openat resumed>) = 4 [pid 3614] futex(0x7fb2c2db04ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 3624] futex(0x7fb2c2db04ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3621] <... openat resumed>) = 4 [pid 3620] ioctl(4, USB_RAW_IOCTL_INIT [pid 3619] ioctl(4, USB_RAW_IOCTL_INIT [pid 3624] <... futex resumed>) = 1 [pid 3621] ioctl(4, USB_RAW_IOCTL_INIT [pid 3620] <... ioctl resumed>, 0x7fb2c2cd62b0) = 0 [pid 3619] <... ioctl resumed>, 0x7fb2c2cd62b0) = 0 [pid 3618] <... futex resumed>) = 0 [pid 3624] futex(0x7fb2c2db04a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3621] <... ioctl resumed>, 0x7fb2c2cd62b0) = 0 [pid 3620] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN [pid 3619] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN [pid 3618] futex(0x7fb2c2db04a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3624] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3621] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN [pid 3620] <... ioctl resumed>, 0) = 0 [pid 3624] mmap(0x20000000, 8388608, PROT_READ|PROT_WRITE|PROT_GROWSDOWN|0x800000, MAP_SHARED|MAP_FIXED, 3, 0 [pid 3621] <... ioctl resumed>, 0) = 0 [pid 3620] ioctl(4, USB_RAW_IOCTL_EVENT_FETCH [pid 3619] <... ioctl resumed>, 0) = 0 [pid 3618] <... futex resumed>) = 0 [pid 3624] <... mmap resumed>) = 0x20000000 [pid 3621] ioctl(4, USB_RAW_IOCTL_EVENT_FETCH [pid 3620] <... ioctl resumed>, 0x7fb2c2cd62b0) = 0 [pid 3619] ioctl(4, USB_RAW_IOCTL_EVENT_FETCH [pid 3618] futex(0x7fb2c2db04ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3624] futex(0x7fb2c2db04ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3621] <... ioctl resumed>, 0x7fb2c2cd62b0) = 0 [pid 3620] ioctl(4, USB_RAW_IOCTL_EVENT_FETCH [pid 3619] <... ioctl resumed>, 0x7fb2c2cd62b0) = 0 [pid 3618] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3624] <... futex resumed>) = 0 [pid 3621] ioctl(4, USB_RAW_IOCTL_EVENT_FETCH [pid 3619] ioctl(4, USB_RAW_IOCTL_EVENT_FETCH [pid 3618] futex(0x7fb2c2db04a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3624] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR [pid 3618] <... futex resumed>) = 0 [pid 3624] <... openat resumed>) = 4 [pid 3618] futex(0x7fb2c2db04ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 3624] ioctl(4, USB_RAW_IOCTL_INIT, 0x7fb2c2cd62b0) = 0 [pid 3624] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 3624] ioctl(4, USB_RAW_IOCTL_EVENT_FETCH, 0x7fb2c2cd62b0) = 0 [pid 3624] ioctl(4, USB_RAW_IOCTL_EVENT_FETCH [pid 3617] <... ioctl resumed>, 0x7fb2c2cd62b0) = 0 [pid 3616] <... ioctl resumed>, 0x7fb2c2cd62b0) = 0 [pid 3617] ioctl(4, USB_RAW_IOCTL_EP0_WRITE [pid 3616] ioctl(4, USB_RAW_IOCTL_EP0_WRITE [pid 3617] <... ioctl resumed>, 0x7fb2c2cd52a0) = 18 [pid 3617] ioctl(4, USB_RAW_IOCTL_EVENT_FETCH [pid 3619] <... ioctl resumed>, 0x7fb2c2cd62b0) = 0 [pid 3619] ioctl(4, USB_RAW_IOCTL_EP0_WRITE [pid 3616] <... ioctl resumed>, 0x7fb2c2cd52a0) = 18 syzkaller login: [ 42.262185][ T14] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 42.272148][ T2986] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 42.292907][ T143] usb 3-1: new high-speed USB device number 2 using dummy_hcd [pid 3619] <... ioctl resumed>, 0x7fb2c2cd52a0) = 18 [pid 3619] ioctl(4, USB_RAW_IOCTL_EVENT_FETCH [pid 3616] ioctl(4, USB_RAW_IOCTL_EVENT_FETCH [pid 3620] <... ioctl resumed>, 0x7fb2c2cd62b0) = 0 [pid 3620] ioctl(4, USB_RAW_IOCTL_EP0_WRITE [pid 3624] <... ioctl resumed>, 0x7fb2c2cd62b0) = 0 [pid 3621] <... ioctl resumed>, 0x7fb2c2cd62b0) = 0 [pid 3620] <... ioctl resumed>, 0x7fb2c2cd52a0) = 18 [pid 3620] ioctl(4, USB_RAW_IOCTL_EVENT_FETCH [pid 3624] ioctl(4, USB_RAW_IOCTL_EP0_WRITE [ 42.322728][ T6] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 42.330518][ T141] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 42.338780][ T3626] usb 6-1: new high-speed USB device number 2 using dummy_hcd [pid 3621] ioctl(4, USB_RAW_IOCTL_EP0_WRITE [pid 3624] <... ioctl resumed>, 0x7fb2c2cd52a0) = 18 [pid 3621] <... ioctl resumed>, 0x7fb2c2cd52a0) = 18 [pid 3624] ioctl(4, USB_RAW_IOCTL_EVENT_FETCH [ 42.462109][ T2986] usb 1-1: device descriptor read/64, error 18 [pid 3621] ioctl(4, USB_RAW_IOCTL_EVENT_FETCH [pid 3619] <... ioctl resumed>, 0x7fb2c2cd62b0) = 0 [ 42.512135][ T14] usb 2-1: device descriptor read/64, error 18 [ 42.532105][ T143] usb 3-1: Using ep0 maxpacket: 16 [pid 3619] ioctl(4, USB_RAW_IOCTL_EP0_WRITE, 0x7fb2c2cd52a0) = 18 [pid 3619] ioctl(4, USB_RAW_IOCTL_EVENT_FETCH, 0x7fb2c2cd62b0) = 0 [pid 3619] ioctl(4, USB_RAW_IOCTL_EP0_WRITE [pid 3620] <... ioctl resumed>, 0x7fb2c2cd62b0) = 0 [pid 3620] ioctl(4, USB_RAW_IOCTL_EP0_WRITE [pid 3619] <... ioctl resumed>, 0x7fb2c2cd52a0) = 9 [pid 3619] ioctl(4, USB_RAW_IOCTL_EVENT_FETCH [pid 3620] <... ioctl resumed>, 0x7fb2c2cd52a0) = 18 [ 42.582214][ T6] usb 5-1: Using ep0 maxpacket: 16 [pid 3620] ioctl(4, USB_RAW_IOCTL_EVENT_FETCH [pid 3619] <... ioctl resumed>, 0x7fb2c2cd62b0) = 0 [pid 3619] ioctl(4, USB_RAW_IOCTL_EP0_WRITE [pid 3624] <... ioctl resumed>, 0x7fb2c2cd62b0) = 0 [pid 3621] <... ioctl resumed>, 0x7fb2c2cd62b0) = 0 [pid 3620] <... ioctl resumed>, 0x7fb2c2cd62b0) = 0 [pid 3619] <... ioctl resumed>, 0x7fb2c2cd52a0) = 36 [pid 3624] ioctl(4, USB_RAW_IOCTL_EP0_WRITE [pid 3621] ioctl(4, USB_RAW_IOCTL_EP0_WRITE [pid 3620] ioctl(4, USB_RAW_IOCTL_EP0_WRITE [ 42.622196][ T3626] usb 6-1: Using ep0 maxpacket: 16 [ 42.627539][ T141] usb 4-1: Using ep0 maxpacket: 16 [ 42.652503][ T143] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 3619] ioctl(4, USB_RAW_IOCTL_EVENT_FETCH [pid 3624] <... ioctl resumed>, 0x7fb2c2cd52a0) = 18 [pid 3621] <... ioctl resumed>, 0x7fb2c2cd52a0) = 18 [pid 3620] <... ioctl resumed>, 0x7fb2c2cd52a0) = 9 [pid 3624] ioctl(4, USB_RAW_IOCTL_EVENT_FETCH [pid 3621] ioctl(4, USB_RAW_IOCTL_EVENT_FETCH [pid 3620] ioctl(4, USB_RAW_IOCTL_EVENT_FETCH [pid 3624] <... ioctl resumed>, 0x7fb2c2cd62b0) = 0 [pid 3621] <... ioctl resumed>, 0x7fb2c2cd62b0) = 0 [pid 3620] <... ioctl resumed>, 0x7fb2c2cd62b0) = 0 [pid 3624] ioctl(4, USB_RAW_IOCTL_EP0_WRITE [pid 3621] ioctl(4, USB_RAW_IOCTL_EP0_WRITE [ 42.665032][ T143] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 42.678224][ T143] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 42.688352][ T143] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.701566][ T143] usb 3-1: config 0 descriptor?? [pid 3620] ioctl(4, USB_RAW_IOCTL_EP0_WRITE [pid 3624] <... ioctl resumed>, 0x7fb2c2cd52a0) = 9 [pid 3621] <... ioctl resumed>, 0x7fb2c2cd52a0) = 9 [pid 3620] <... ioctl resumed>, 0x7fb2c2cd52a0) = 36 [pid 3619] <... ioctl resumed>, 0x7fb2c2cd62b0) = 0 [pid 3624] ioctl(4, USB_RAW_IOCTL_EVENT_FETCH [pid 3621] ioctl(4, USB_RAW_IOCTL_EVENT_FETCH [pid 3620] ioctl(4, USB_RAW_IOCTL_EVENT_FETCH [pid 3619] ioctl(4, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 3619] ioctl(4, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 3619] ioctl(4, USB_RAW_IOCTL_EP_ENABLE, 0x7fb2c2db05ec) = 0 [pid 3619] ioctl(4, USB_RAW_IOCTL_EP0_READ, 0x7fb2c2cd52a0) = 0 [pid 3617] <... ioctl resumed>, 0x7fb2c2cd62b0) = 0 [pid 3617] ioctl(4, USB_RAW_IOCTL_EP0_WRITE [pid 3624] <... ioctl resumed>, 0x7fb2c2cd62b0) = 0 [pid 3621] <... ioctl resumed>, 0x7fb2c2cd62b0) = 0 [pid 3624] ioctl(4, USB_RAW_IOCTL_EP0_WRITE [pid 3621] ioctl(4, USB_RAW_IOCTL_EP0_WRITE [pid 3617] <... ioctl resumed>, 0x7fb2c2cd52a0) = 18 [ 42.722574][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.732180][ T2986] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 42.733966][ T6] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 42.753997][ T6] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 42.763148][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [pid 3617] ioctl(4, USB_RAW_IOCTL_EVENT_FETCH [pid 3624] <... ioctl resumed>, 0x7fb2c2cd52a0) = 36 [pid 3621] <... ioctl resumed>, 0x7fb2c2cd52a0) = 36 [pid 3624] ioctl(4, USB_RAW_IOCTL_EVENT_FETCH [pid 3621] ioctl(4, USB_RAW_IOCTL_EVENT_FETCH [pid 3620] <... ioctl resumed>, 0x7fb2c2cd62b0) = 0 [pid 3620] ioctl(4, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 3620] ioctl(4, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 3620] ioctl(4, USB_RAW_IOCTL_EP_ENABLE, 0x7fb2c2db05ec) = 0 [pid 3620] ioctl(4, USB_RAW_IOCTL_EP0_READ, 0x7fb2c2cd52a0) = 0 [ 42.775418][ T6] usb 5-1: config 0 descriptor?? [ 42.782345][ T3626] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.793367][ T141] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.804467][ T14] usb 2-1: new high-speed USB device number 3 using dummy_hcd [pid 3616] <... ioctl resumed>, 0x7fb2c2cd62b0) = 0 [pid 3616] ioctl(4, USB_RAW_IOCTL_EP0_WRITE, 0x7fb2c2cd52a0) = 18 [ 42.814717][ T3626] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 42.827623][ T141] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 42.840654][ T3626] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 42.849796][ T141] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 42.858954][ T3626] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.867041][ T141] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [pid 3616] ioctl(4, USB_RAW_IOCTL_EVENT_FETCH [pid 3624] <... ioctl resumed>, 0x7fb2c2cd62b0) = 0 [pid 3621] <... ioctl resumed>, 0x7fb2c2cd62b0) = 0 [pid 3624] ioctl(4, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 3624] ioctl(4, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 3624] ioctl(4, USB_RAW_IOCTL_EP_ENABLE, 0x7fb2c2db05ec) = 0 [pid 3621] ioctl(4, USB_RAW_IOCTL_VBUS_DRAW [pid 3624] ioctl(4, USB_RAW_IOCTL_EP0_READ [pid 3621] <... ioctl resumed>, 0) = 0 [pid 3621] ioctl(4, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 3621] ioctl(4, USB_RAW_IOCTL_EP_ENABLE, 0x7fb2c2db05ec) = 0 [ 42.877483][ T3626] usb 6-1: config 0 descriptor?? [ 42.883686][ T141] usb 4-1: config 0 descriptor?? [pid 3621] ioctl(4, USB_RAW_IOCTL_EP0_READ [pid 3624] <... ioctl resumed>, 0x7fb2c2cd52a0) = 0 [pid 3621] <... ioctl resumed>, 0x7fb2c2cd52a0) = 0 [pid 3619] futex(0x7fb2c2db04ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3612] <... futex resumed>) = 0 [pid 3619] futex(0x7fb2c2db04a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3612] futex(0x7fb2c2db04a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3619] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3612] <... futex resumed>) = 0 [pid 3619] ioctl(-1, BTRFS_IOC_SNAP_CREATE_V2, {fd=3, flags=BTRFS_SUBVOL_RDONLY, name="\x48\xc4\x3a\xea\x3a\x62\xa4\xc6\x0c\x02\x7a\x91\xbf\x05\x09\xe4\xc1\xaa\xe5\xb0\xa6\x06\xd3\x57\xc3\x42\xc3\x24\x56\x5d\xba\x3b\x40\x89\xd7\xda\xf2\x7f\x27\x53\xa5\x06\xf4\x3d\x74\x4c\x24\xdc\x0f\xf8\x8c\x74\xa0\xdb\x47\x4b\x9f\xce\x5e\xc7\xe4\x56\x43\xcf\x25\x07\x71\x7f\xb2\x3e\x2d\x73\xf7\xc8\x2d\x72\x40\x59\x2f\x67\xcc\xd5\x5c\xfd\xd7\x2a\x69\x78\xf5\x2f\xc3\x94\x09\x46\xe2\xfa\x7c\x22\x48\xb9\x41\xa5\xa0\x1f\xc7\x22\x7a\x9c\x43\x81\xe7\xc9\x2c\xcf\x69\x06\x2e\xf9\x9b\x18\x47\xab\xdb\xe3\x6c\x25\x39\x3a\xb3\xfc\xc3\x7f\x23\x4f\x63\x3a\xa3\x96\xba\xe3\x23\x8b\x4a\xe2\xd0\xfa\xe0\x20\x47\x36\xec\xde\x52\x24\x77\xf7\xbf\xb6\x37\x58\x72\xf1\x05\x4d\x4d\x74\x53\x6f\x38\x8d\x04\x5f\x85\x05\x62\x75\xe4\x51\xb5\x91\xff\xc4\x2c\x4e\x25\xc9\xeb\xa7\xc8\xc7\x6a\x41"} [pid 3612] futex(0x7fb2c2db04ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3619] <... ioctl resumed>) = -1 EBADF (Bad file descriptor) [pid 3619] futex(0x7fb2c2db04ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3612] <... futex resumed>) = 0 [pid 3619] futex(0x7fb2c2db04a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3612] futex(0x7fb2c2db04a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3619] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3612] <... futex resumed>) = 0 [pid 3619] ioctl(3, _IOC(_IOC_NONE, 0x92, 0x8, 0) [ 42.922133][ T2986] usb 1-1: device descriptor read/64, error 18 [ 42.951594][ T3619] general protection fault, probably for non-canonical address 0xdffffc000000013c: 0000 [#1] PREEMPT SMP KASAN [ 42.963363][ T3619] KASAN: null-ptr-deref in range [0x00000000000009e0-0x00000000000009e7] [ 42.971968][ T3619] CPU: 1 PID: 3619 Comm: syz-executor277 Not tainted 6.0.0-rc5-syzkaller-00025-g3245cb65fd91 #0 [ 42.982406][ T3619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 42.992481][ T3619] RIP: 0010:mon_bin_flush+0x131/0x290 [ 42.997890][ T3619] Code: 48 c1 e9 03 42 80 3c 29 00 0f 85 4f 01 00 00 44 89 f1 81 e1 ff 0f 00 00 48 03 48 08 48 8d 79 24 49 89 cf 48 89 f9 48 c1 e9 03 <42> 0f b6 34 29 48 89 f9 83 e1 07 83 c1 03 40 38 f1 7c 09 40 84 f6 [ 43.019642][ T3619] RSP: 0018:ffffc90003affd98 EFLAGS: 00010017 [ 43.025706][ T3619] RAX: ffff8880205b2ab0 RBX: ffff888079c05c00 RCX: 000000000000013c [ 43.033724][ T3619] RDX: 0000000000000000 RSI: ffffffff859cd599 RDI: 00000000000009e4 [ 43.041725][ T3619] RBP: 000000000f40dd80 R08: 0000000000000005 R09: 0000000000000000 [ 43.049873][ T3619] R10: 000000000f40dd80 R11: 1ffffffff1ff9fb2 R12: 0000000000000003 [ 43.057826][ T3619] R13: dffffc0000000000 R14: 00000000f0bab9c0 R15: 00000000000009c0 [ 43.065809][ T3619] FS: 00007fb2c2cd7700(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 43.074913][ T3619] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 43.081583][ T3619] CR2: 0000000020002000 CR3: 0000000070406000 CR4: 0000000000350ee0 [ 43.089581][ T3619] Call Trace: [ 43.092859][ T3619] [ 43.095774][ T3619] mon_bin_ioctl+0xaab/0xcc0 [ 43.100346][ T3619] ? ptrace_notify+0xfa/0x140 [ 43.105002][ T3619] ? mon_bin_get_event+0x410/0x410 [ 43.110089][ T3619] ? __fget_files+0x26a/0x440 [ 43.114747][ T3619] ? bpf_lsm_file_ioctl+0x5/0x10 [ 43.119664][ T3619] ? mon_bin_get_event+0x410/0x410 [ 43.124771][ T3619] __x64_sys_ioctl+0x193/0x200 [ 43.129538][ T3619] do_syscall_64+0x35/0xb0 [ 43.133940][ T3619] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 43.139811][ T3619] RIP: 0033:0x7fb2c2d2ac39 [ 43.144205][ T3619] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 43.163810][ T3619] RSP: 002b:00007fb2c2cd72f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 43.172210][ T3619] RAX: ffffffffffffffda RBX: 00007fb2c2db04a0 RCX: 00007fb2c2d2ac39 [ 43.180188][ T3619] RDX: 0000000000000006 RSI: 0000000000009208 RDI: 0000000000000003 [ 43.188240][ T3619] RBP: 00007fb2c2d7d094 R08: 0000000000000000 R09: 0000000000000000 [ 43.196374][ T3619] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb2c2d7c0c8 [ 43.204325][ T3619] R13: 6273752f7665642f R14: 0000000100000000 R15: 00007fb2c2db04a8 [ 43.212281][ T3619] [ 43.215295][ T3619] Modules linked in: [ 43.219178][ T3619] ---[ end trace 0000000000000000 ]--- [ 43.224614][ T3619] RIP: 0010:mon_bin_flush+0x131/0x290 [ 43.230147][ T3619] Code: 48 c1 e9 03 42 80 3c 29 00 0f 85 4f 01 00 00 44 89 f1 81 e1 ff 0f 00 00 48 03 48 08 48 8d 79 24 49 89 cf 48 89 f9 48 c1 e9 03 <42> 0f b6 34 29 48 89 f9 83 e1 07 83 c1 03 40 38 f1 7c 09 40 84 f6 [ 43.249998][ T3619] RSP: 0018:ffffc90003affd98 EFLAGS: 00010017 [ 43.256049][ T3619] RAX: ffff8880205b2ab0 RBX: ffff888079c05c00 RCX: 000000000000013c [ 43.264087][ T3619] RDX: 0000000000000000 RSI: ffffffff859cd599 RDI: 00000000000009e4 [ 43.272051][ T3619] RBP: 000000000f40dd80 R08: 0000000000000005 R09: 0000000000000000 [ 43.280087][ T3619] R10: 000000000f40dd80 R11: 1ffffffff1ff9fb2 R12: 0000000000000003 [ 43.288039][ T3619] R13: dffffc0000000000 R14: 00000000f0bab9c0 R15: 00000000000009c0 [ 43.295992][ T3619] FS: 00007fb2c2cd7700(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 43.304910][ T3619] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 43.311474][ T3619] CR2: 0000000020002000 CR3: 0000000070406000 CR4: 0000000000350ee0 [ 43.319870][ T3619] Kernel panic - not syncing: Fatal exception [ 44.413339][ T3619] Shutting down cpus with NMI [ 44.418487][ T3619] Kernel Offset: disabled [ 44.422893][ T3619] Rebooting in 86400 seconds..