./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3715272216

<...>
Warning: Permanently added '10.128.0.144' (ED25519) to the list of known hosts.
execve("./syz-executor3715272216", ["./syz-executor3715272216"], 0x7ffdbffc88d0 /* 10 vars */) = 0
brk(NULL)                               = 0x55556177d000
brk(0x55556177dd00)                     = 0x55556177dd00
arch_prctl(ARCH_SET_FS, 0x55556177d380) = 0
set_tid_address(0x55556177d650)         = 5826
set_robust_list(0x55556177d660, 24)     = 0
rseq(0x55556177dca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor3715272216", 4096) = 28
getrandom("\xe5\x88\xcb\x8c\xa0\xd9\x5e\x1d", 8, GRND_NONBLOCK) = 8
brk(NULL)                               = 0x55556177dd00
brk(0x55556179ed00)                     = 0x55556179ed00
brk(0x55556179f000)                     = 0x55556179f000
mprotect(0x7fde29e90000, 16384, PROT_READ) = 0
mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000
mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000
mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000
write(1, "executing program\n", 18executing program
)     = 18
openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3
ioctl(3, USB_RAW_IOCTL_INIT, 0x7fff4390f170) = 0
ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff4390f170) = 0
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff4390f170) = 0
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff4390f170) = 0
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff4390f170) = 0
ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fff4390e160) = 18
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff4390f170) = 0
[   83.976077][ T1207] usb 1-1: new high-speed USB device number 2 using dummy_hcd
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff4390f170) = 0
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff4390f170) = 0
ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fff4390e160) = 18
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff4390f170) = 0
ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fff4390e160) = 9
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff4390f170) = 0
[   84.145822][ T1207] usb 1-1: Using ep0 maxpacket: 32
ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fff4390e160) = 18
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff4390f170) = 0
ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fff4390e160) = 4
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff4390f170) = 0
ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fff4390e160) = 8
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff4390f170) = 0
ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fff4390e160) = 8
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff4390f170) = 0
ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fff4390e160) = 8
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff4390f170) = 0
ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0)    = 0
ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0)    = 0
ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7fff4390e160) = 0
[   84.289387][ T1207] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[   84.298746][ T1207] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   84.306802][ T1207] usb 1-1: Product: syz
[   84.310984][ T1207] usb 1-1: Manufacturer: syz
[   84.315573][ T1207] usb 1-1: SerialNumber: syz
[   84.323480][ T1207] usb 1-1: config 0 descriptor??
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff4390f1b0) = 0
ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7fff4390e1a0) = 0
[   84.558424][ T1207] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: version d4.15 found at bus 001 address 002
openat(AT_FDCWD, "/dev/i2c-1", O_RDWR|O_APPEND) = 4
[   84.758740][ T5826] ------------[ cut here ]------------
[   84.764311][ T5826] usb 1-1: BOGUS control dir, pipe 80000280 doesn't match bRequestType c1
[   84.773640][ T5826] WARNING: CPU: 0 PID: 5826 at drivers/usb/core/urb.c:413 usb_submit_urb+0x1112/0x1870
[   84.783401][ T5826] Modules linked in:
[   84.787450][ T5826] CPU: 0 UID: 0 PID: 5826 Comm: syz-executor371 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(full) 
[   84.799919][ T5826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[   84.810075][ T5826] RIP: 0010:usb_submit_urb+0x1112/0x1870
[   84.815759][ T5826] Code: 0f b6 44 05 00 84 c0 0f 85 38 06 00 00 45 0f b6 04 24 48 c7 c7 20 5f 12 8c 48 8b 74 24 18 4c 89 fa 44 89 f1 e8 7f 6a 6f fa 90 <0f> 0b 90 90 49 bd 00 00 00 00 00 fc ff df e9 2b f4 ff ff 89 e9 80
[   84.835440][ T5826] RSP: 0018:ffffc90003e3f6d0 EFLAGS: 00010246
[   84.841588][ T5826] RAX: e65f229e61917b00 RBX: ffff88801a100400 RCX: ffff88807c553c00
[   84.849661][ T5826] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[   84.857703][ T5826] RBP: 1ffff11003fee040 R08: 0000000000000003 R09: 0000000000000004
[   84.865776][ T5826] R10: dffffc0000000000 R11: fffffbfff1bba4b4 R12: ffff88801ff70200
[   84.873776][ T5826] R13: dffffc0000000000 R14: 0000000080000280 R15: ffff888020e82640
[   84.881864][ T5826] FS:  000055556177d380(0000) GS:ffff8881260cc000(0000) knlGS:0000000000000000
[   84.890878][ T5826] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   84.897538][ T5826] CR2: 000055e12dc49a10 CR3: 0000000051594000 CR4: 00000000003526f0
[   84.905534][ T5826] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   84.913589][ T5826] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   84.921705][ T5826] Call Trace:
[   84.925010][ T5826]  <TASK>
[   84.928016][ T5826]  usb_start_wait_urb+0x114/0x4c0
[   84.933104][ T5826]  ? __pfx_usb_start_wait_urb+0x10/0x10
[   84.938747][ T5826]  ? __kmalloc_noprof+0x29b/0x4f0
[   84.943814][ T5826]  usb_control_msg+0x232/0x3e0
[   84.948645][ T5826]  osif_xfer+0x21a/0x5e0
[   84.952924][ T5826]  __i2c_transfer+0x871/0x2170
[   84.957749][ T5826]  ? lockdep_hardirqs_on+0x9c/0x150
[   84.962979][ T5826]  ? __pfx___i2c_transfer+0x10/0x10
[   84.968246][ T5826]  ? rt_mutex_lock_nested+0x15e/0x1e0
[   84.973664][ T5826]  ? i2c_transfer+0x11d/0x3a0
[   84.978403][ T5826]  i2c_transfer+0x25b/0x3a0
[   84.982944][ T5826]  ? __pfx_i2c_transfer+0x10/0x10
[   84.988033][ T5826]  ? __lock_acquire+0xaac/0xd20
[   84.992908][ T5826]  ? __pfx_aa_file_perm+0x10/0x10
[   84.998005][ T5826]  ? __lock_acquire+0xaac/0xd20
[   85.002885][ T5826]  i2c_transfer_buffer_flags+0x105/0x190
[   85.008586][ T5826]  ? end_current_label_crit_section+0x152/0x180
[   85.014846][ T5826]  ? __pfx_i2c_transfer_buffer_flags+0x10/0x10
[   85.021087][ T5826]  ? i2cdev_read+0xe8/0x220
[   85.025633][ T5826]  i2cdev_read+0x10d/0x220
[   85.030154][ T5826]  ? __pfx_i2cdev_read+0x10/0x10
[   85.035123][ T5826]  vfs_read+0x1fd/0x980
[   85.039386][ T5826]  ? __pfx_vfs_read+0x10/0x10
[   85.044082][ T5826]  ? _raw_spin_unlock_irq+0x23/0x50
[   85.049350][ T5826]  ? lockdep_hardirqs_on+0x9c/0x150
[   85.054571][ T5826]  ? _raw_spin_unlock_irq+0x2e/0x50
[   85.059811][ T5826]  ? ptrace_notify+0x22d/0x2c0
[   85.064613][ T5826]  ksys_read+0x145/0x250
[   85.068930][ T5826]  ? rcu_is_watching+0x15/0xb0
[   85.073744][ T5826]  ? __pfx_ksys_read+0x10/0x10
[   85.078573][ T5826]  do_syscall_64+0xf6/0x210
[   85.083103][ T5826]  ? clear_bhb_loop+0x45/0xa0
[   85.087850][ T5826]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   85.093759][ T5826] RIP: 0033:0x7fde29e1d119
[   85.098241][ T5826] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 31 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[   85.117948][ T5826] RSP: 002b:00007fff439101c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   85.126447][ T5826] RAX: ffffffffffffffda RBX: 0000200000000000 RCX: 00007fde29e1d119
[   85.134441][ T5826] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[   85.142490][ T5826] RBP: 00007fde29e90610 R08: 00232d6332692f76 R09: 00007fff43910398
[   85.150531][ T5826] R10: 000000000000000f R11: 0000000000000246 R12: 0000000000000001
[   85.158587][ T5826] R13: 00007fff43910388 R14: 0000000000000001 R15: 0000000000000001
[   85.166624][ T5826]  </TASK>
[   85.169702][ T5826] Kernel panic - not syncing: kernel: panic_on_warn set ...
[   85.176986][ T5826] CPU: 0 UID: 0 PID: 5826 Comm: syz-executor371 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(full) 
[   85.189427][ T5826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[   85.199486][ T5826] Call Trace:
[   85.202770][ T5826]  <TASK>
[   85.205711][ T5826]  dump_stack_lvl+0x99/0x250
[   85.210318][ T5826]  ? __asan_memcpy+0x40/0x70
[   85.214912][ T5826]  ? __pfx_dump_stack_lvl+0x10/0x10
[   85.220123][ T5826]  ? __pfx__printk+0x10/0x10
[   85.224726][ T5826]  panic+0x2db/0x790
[   85.228637][ T5826]  ? __pfx_panic+0x10/0x10
[   85.233089][ T5826]  __warn+0x31b/0x4b0
[   85.237079][ T5826]  ? usb_submit_urb+0x1112/0x1870
[   85.242110][ T5826]  ? usb_submit_urb+0x1112/0x1870
[   85.247160][ T5826]  report_bug+0x2be/0x4f0
[   85.251495][ T5826]  ? usb_submit_urb+0x1112/0x1870
[   85.256526][ T5826]  ? usb_submit_urb+0x1112/0x1870
[   85.261558][ T5826]  ? usb_submit_urb+0x1114/0x1870
[   85.266589][ T5826]  handle_bug+0x84/0x160
[   85.270839][ T5826]  exc_invalid_op+0x1a/0x50
[   85.275347][ T5826]  asm_exc_invalid_op+0x1a/0x20
[   85.280199][ T5826] RIP: 0010:usb_submit_urb+0x1112/0x1870
[   85.285844][ T5826] Code: 0f b6 44 05 00 84 c0 0f 85 38 06 00 00 45 0f b6 04 24 48 c7 c7 20 5f 12 8c 48 8b 74 24 18 4c 89 fa 44 89 f1 e8 7f 6a 6f fa 90 <0f> 0b 90 90 49 bd 00 00 00 00 00 fc ff df e9 2b f4 ff ff 89 e9 80
[   85.305453][ T5826] RSP: 0018:ffffc90003e3f6d0 EFLAGS: 00010246
[   85.311530][ T5826] RAX: e65f229e61917b00 RBX: ffff88801a100400 RCX: ffff88807c553c00
[   85.319508][ T5826] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[   85.327479][ T5826] RBP: 1ffff11003fee040 R08: 0000000000000003 R09: 0000000000000004
[   85.335451][ T5826] R10: dffffc0000000000 R11: fffffbfff1bba4b4 R12: ffff88801ff70200
[   85.343423][ T5826] R13: dffffc0000000000 R14: 0000000080000280 R15: ffff888020e82640
[   85.351422][ T5826]  usb_start_wait_urb+0x114/0x4c0
[   85.356473][ T5826]  ? __pfx_usb_start_wait_urb+0x10/0x10
[   85.362031][ T5826]  ? __kmalloc_noprof+0x29b/0x4f0
[   85.367074][ T5826]  usb_control_msg+0x232/0x3e0
[   85.371854][ T5826]  osif_xfer+0x21a/0x5e0
[   85.376142][ T5826]  __i2c_transfer+0x871/0x2170
[   85.380924][ T5826]  ? lockdep_hardirqs_on+0x9c/0x150
[   85.386143][ T5826]  ? __pfx___i2c_transfer+0x10/0x10
[   85.391362][ T5826]  ? rt_mutex_lock_nested+0x15e/0x1e0
[   85.396751][ T5826]  ? i2c_transfer+0x11d/0x3a0
[   85.401440][ T5826]  i2c_transfer+0x25b/0x3a0
[   85.405979][ T5826]  ? __pfx_i2c_transfer+0x10/0x10
[   85.411012][ T5826]  ? __lock_acquire+0xaac/0xd20
[   85.415874][ T5826]  ? __pfx_aa_file_perm+0x10/0x10
[   85.420901][ T5826]  ? __lock_acquire+0xaac/0xd20
[   85.425771][ T5826]  i2c_transfer_buffer_flags+0x105/0x190
[   85.431415][ T5826]  ? end_current_label_crit_section+0x152/0x180
[   85.437678][ T5826]  ? __pfx_i2c_transfer_buffer_flags+0x10/0x10
[   85.443846][ T5826]  ? i2cdev_read+0xe8/0x220
[   85.448361][ T5826]  i2cdev_read+0x10d/0x220
[   85.452795][ T5826]  ? __pfx_i2cdev_read+0x10/0x10
[   85.457743][ T5826]  vfs_read+0x1fd/0x980
[   85.461911][ T5826]  ? __pfx_vfs_read+0x10/0x10
[   85.466598][ T5826]  ? _raw_spin_unlock_irq+0x23/0x50
[   85.471806][ T5826]  ? lockdep_hardirqs_on+0x9c/0x150
[   85.477013][ T5826]  ? _raw_spin_unlock_irq+0x2e/0x50
[   85.482214][ T5826]  ? ptrace_notify+0x22d/0x2c0
[   85.486999][ T5826]  ksys_read+0x145/0x250
[   85.491246][ T5826]  ? rcu_is_watching+0x15/0xb0
[   85.496021][ T5826]  ? __pfx_ksys_read+0x10/0x10
[   85.500795][ T5826]  do_syscall_64+0xf6/0x210
[   85.505326][ T5826]  ? clear_bhb_loop+0x45/0xa0
[   85.510022][ T5826]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   85.515935][ T5826] RIP: 0033:0x7fde29e1d119
[   85.520387][ T5826] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 31 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[   85.540015][ T5826] RSP: 002b:00007fff439101c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   85.548441][ T5826] RAX: ffffffffffffffda RBX: 0000200000000000 RCX: 00007fde29e1d119
[   85.556444][ T5826] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[   85.564432][ T5826] RBP: 00007fde29e90610 R08: 00232d6332692f76 R09: 00007fff43910398
[   85.572424][ T5826] R10: 000000000000000f R11: 0000000000000246 R12: 0000000000000001
[   85.580410][ T5826] R13: 00007fff43910388 R14: 0000000000000001 R15: 0000000000000001
[   85.588403][ T5826]  </TASK>
[   85.591754][ T5826] Kernel Offset: disabled
[   85.596082][ T5826] Rebooting in 86400 seconds..