./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3212056117
<...>
Warning: Permanently added '10.128.1.30' (ED25519) to the list of known hosts.
execve("./syz-executor3212056117", ["./syz-executor3212056117"], 0x7ffcd18980f0 /* 10 vars */) = 0
brk(NULL) = 0x555556cec000
brk(0x555556cecd00) = 0x555556cecd00
arch_prctl(ARCH_SET_FS, 0x555556cec380) = 0
set_tid_address(0x555556cec650) = 5062
set_robust_list(0x555556cec660, 24) = 0
rseq(0x555556cecca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor3212056117", 4096) = 28
getrandom("\xf1\xf1\x4f\xa1\x4e\x11\x8f\x5c", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x555556cecd00
brk(0x555556d0dd00) = 0x555556d0dd00
brk(0x555556d0e000) = 0x555556d0e000
mprotect(0x7f5bd520d000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3
socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 4
sendto(4, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36
recvfrom(4, [{nlmsg_len=784, nlmsg_type=nlctrl, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=5062}, "\x01\x02\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00\x06\x00\x01\x00\x1d\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x2e\x00\x00\x00\x98\x02\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x05\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x03\x00"...], 4096, 0, NULL, NULL) = 784
recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5062}, {error=0, msg={nlmsg_len=36, nlmsg_type=nlctrl, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36
socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 5
ioctl(5, SIOCGIFINDEX, {ifr_name="wpan0", ifr_ifindex=11}) = 0
close(5) = 0
sendto(4, [{nlmsg_len=36, nlmsg_type=nl802154, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x0b\x00\x00\x00\x08\x00\x03\x00\x0b\x00\x00\x00\x06\x00\x0a\x00\xa0\xaa\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36
recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5062}, {error=0, msg={nlmsg_len=36, nlmsg_type=nl802154, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36
socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 5
ioctl(5, SIOCGIFINDEX, {ifr_name="wpan0", ifr_ifindex=11}) = 0
close(5) = 0
sendto(3, [{nlmsg_len=44, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x00\x00\x00\x00\x0b\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x0c\x00\x01\x00\x02\x00\xaa\xaa\xaa\xaa\xaa\xaa"], 44, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 44
recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5062}, {error=0, msg={nlmsg_len=44, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36
sendto(3, [{nlmsg_len=68, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|NLM_F_EXCL|NLM_F_CREATE, nlmsg_seq=0, nlmsg_pid=0}, {ifi_family=AF_UNSPEC, ifi_type=ARPHRD_NETROM, ifi_index=0, ifi_flags=0, ifi_change=0}, [[{nla_len=11, nla_type=IFLA_IFNAME}, "lowpan0"...], [{nla_len=16, nla_type=IFLA_LINKINFO}, [{nla_len=10, nla_type=IFLA_INFO_KIND}, "lowpan"...]], [{nla_len=8, nla_type=IFLA_LINK}, 11]]], 68, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 68
recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5062}, {error=0, msg={nlmsg_len=68, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|NLM_F_EXCL|NLM_F_CREATE, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36
socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 5
ioctl(5, SIOCGIFINDEX, {ifr_name="wpan1", ifr_ifindex=12}) = 0
close(5) = 0
sendto(4, [{nlmsg_len=36, nlmsg_type=nl802154, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x0b\x00\x00\x00\x08\x00\x03\x00\x0c\x00\x00\x00\x06\x00\x0a\x00\xa1\xaa\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36
recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5062}, {error=0, msg={nlmsg_len=36, nlmsg_type=nl802154, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36
socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 5
ioctl(5, SIOCGIFINDEX, {ifr_name="wpan1", ifr_ifindex=12}) = 0
close(5) = 0
sendto(3, [{nlmsg_len=44, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, {ifi_family=AF_UNSPEC, ifi_type=ARPHRD_NETROM, ifi_index=if_nametoindex("wpan1"), ifi_flags=IFF_UP, ifi_change=0x1}, [{nla_len=12, nla_type=IFLA_ADDRESS}, 02:01:aa:aa:aa:aa:aa]], 44, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 44
recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5062}, {error=0, msg={nlmsg_len=44, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36
close(3) = 0
close(4) = 0
mkdir("./syzkaller.IRB0tU", 0700) = 0
chmod("./syzkaller.IRB0tU", 0777) = 0
chdir("./syzkaller.IRB0tU") = 0
openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3
ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffc112517a0) = 0
ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffc112517a0) = 0
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffc112517a0) = 0
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffc112517a0) = 0
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffc112517a0) = 0
ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffc11250790) = 18
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffc112517a0) = 0
[ 58.861390][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffc112517a0) = 0
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffc112517a0) = 0
ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffc11250790) = 18
[ 59.101176][ T9] usb 1-1: Using ep0 maxpacket: 16
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffc112517a0) = 0
ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffc11250790) = 9
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffc112517a0) = 0
ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffc11250790) = 27
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffc112517a0) = 0
ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffc11250790) = 4
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffc112517a0) = 0
[ 59.221589][ T9] usb 1-1: config 0 has an invalid interface number: 8 but max is 0
[ 59.230143][ T9] usb 1-1: config 0 has no interface number 0
[ 59.236569][ T9] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffc11250790) = 8
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffc112517a0) = 0
ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffc11250790) = 8
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffc112517a0) = 0
ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0
ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0
ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f5bd52133ec) = 8
ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffc11250790) = 0
[ 59.361374][ T9] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[ 59.370684][ T9] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[ 59.378813][ T9] usb 1-1: Product: syz
[ 59.383037][ T9] usb 1-1: SerialNumber: syz
[ 59.390196][ T9] usb 1-1: config 0 descriptor??
[ 59.435705][ T9] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input5
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffc112517d0) = 0
ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffc112507c0) = 4
openat(AT_FDCWD, "/dev/char/4:1", O_RDWR) = 4
dup(4) = 5
write(5, "\x0c\x00\x00\x00\xa2\xe3\xad\x21\xed\x0d\x52\xf9\x1b\x45\x09\x09\x87\xf7\x0e\x06\xd0\x38\xe7\xff\x7f\xc6\xe5\x0a\x9b\x32\x44\x07\x8b\x08\x9b\x07\x08\x38\x72\x09\x08\x90\xe0\x87\x8f\x0e\x1a\xc6\xe7\x04\x9b\x33\x4b\x95\x9b\x66\x9a\x24\x0d\x5b\x67\xf3\x98\x8f\x7e\xf3\x19\x52\x01\x00\xff\xe8\xd1\x78\x70\x8c\x52\x3c\x92\x1b\x1b\x5b\x31\x07\x0d\x07\x5d\x06\x36\xcd\x3b\x78\x13\x0d\xaa\x61\xd8\xe8\x09\xea"..., 4110) = 4110
exit_group(0) = ?
[ 59.881240][ C0] cm109 1-1:0.8: cm109_urb_irq_callback: urb status -71
[ 59.888357][ C0] ------------[ cut here ]------------
[ 59.893903][ C0] URB ffff888029abe700 submitted while active
[ 59.900883][ C0] WARNING: CPU: 0 PID: 5062 at drivers/usb/core/urb.c:379 usb_submit_urb+0x14d6/0x1730
[ 59.910513][ C0] Modules linked in:
[ 59.914383][ C0] CPU: 0 PID: 5062 Comm: syz-executor321 Not tainted 6.7.0-rc5-syzkaller #0
[ 59.923029][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023
[ 59.933058][ C0] RIP: 0010:usb_submit_urb+0x14d6/0x1730
[ 59.938671][ C0] Code: fe eb cb bb fe ff ff ff e9 c5 f3 ff ff e8 d2 e4 06 fb c6 05 d1 b5 82 08 01 90 48 c7 c7 e0 fb 85 8b 48 89 de e8 9b 0a cd fa 90 <0f> 0b 90 90 e9 b6 fe ff ff bb f8 ff ff ff e9 95 f3 ff ff 48 89 ef
[ 59.958257][ C0] RSP: 0018:ffffc90000007950 EFLAGS: 00010086
[ 59.964298][ C0] RAX: 0000000000000000 RBX: ffff888029abe700 RCX: ffffffff814db579
[ 59.972270][ C0] RDX: ffff888023f01dc0 RSI: ffffffff814db586 RDI: 0000000000000001
[ 59.980220][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000
[ 59.988173][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000046
[ 59.996128][ C0] R13: ffff888025f86858 R14: 000000000000000f R15: 0000000000000001
[ 60.004087][ C0] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
[ 60.012996][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 60.019576][ C0] CR2: 00007f5bd51e1e48 CR3: 000000000cd77000 CR4: 0000000000350ef0
[ 60.027622][ C0] Call Trace:
[ 60.030884][ C0]
[ 60.033713][ C0] ? show_regs+0x8f/0xa0
[ 60.037944][ C0] ? __warn+0xe6/0x390
[ 60.042000][ C0] ? __wake_up_klogd.part.0+0x99/0xf0
[ 60.047357][ C0] ? usb_submit_urb+0x14d6/0x1730
[ 60.052363][ C0] ? report_bug+0x3bc/0x580
[ 60.056850][ C0] ? handle_bug+0x3d/0x70
[ 60.061176][ C0] ? exc_invalid_op+0x17/0x40
[ 60.065840][ C0] ? asm_exc_invalid_op+0x1a/0x20
[ 60.070850][ C0] ? __warn_printk+0x199/0x350
[ 60.075604][ C0] ? __warn_printk+0x1a6/0x350
[ 60.080361][ C0] ? usb_submit_urb+0x14d6/0x1730
[ 60.085373][ C0] ? spin_bug+0x1d0/0x1d0
[ 60.089689][ C0] ? idr_get_free+0xa30/0xa30
[ 60.094365][ C0] cm109_urb_irq_callback+0x2e7/0xb50
[ 60.099728][ C0] ? usb_hcd_unmap_urb_for_dma+0x109/0x6d0
[ 60.105525][ C0] ? dummy_timer+0x1406/0x3600
[ 60.110290][ C0] __usb_hcd_giveback_urb+0x359/0x5c0
[ 60.115656][ C0] usb_hcd_giveback_urb+0x389/0x430
[ 60.120848][ C0] dummy_timer+0x1415/0x3600
[ 60.125440][ C0] ? dummy_urb_enqueue+0x8f0/0x8f0
[ 60.130537][ C0] ? do_raw_spin_unlock+0x173/0x230
[ 60.135722][ C0] ? dummy_urb_enqueue+0x8f0/0x8f0
[ 60.140818][ C0] call_timer_fn+0x193/0x590
[ 60.145401][ C0] ? timer_fixup_assert_init+0x210/0x210
[ 60.151022][ C0] ? reacquire_held_locks+0x4c0/0x4c0
[ 60.156390][ C0] ? spin_bug+0x1d0/0x1d0
[ 60.160726][ C0] ? dummy_urb_enqueue+0x8f0/0x8f0
[ 60.165824][ C0] __run_timers+0x764/0xb20
[ 60.170340][ C0] ? call_timer_fn+0x590/0x590
[ 60.175094][ C0] ? __sched_core_set+0x400/0x400
[ 60.180131][ C0] ? usb_hcd_giveback_urb+0x430/0x430
[ 60.185508][ C0] ? tasklet_action_common.constprop.0+0x285/0x3d0
[ 60.192006][ C0] run_timer_softirq+0x58/0xd0
[ 60.196761][ C0] __do_softirq+0x21a/0x8de
[ 60.201257][ C0] ? __lock_text_end+0x3/0x3
[ 60.205836][ C0] irq_exit_rcu+0xb7/0x120
[ 60.210239][ C0] sysvec_apic_timer_interrupt+0x95/0xb0
[ 60.215864][ C0]
[ 60.218794][ C0]
[ 60.221715][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 60.227681][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x14/0x60
[ 60.233822][ C0] Code: 00 e8 b0 ff ff ff 31 c0 c3 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 f3 0f 1e fa 65 48 8b 14 25 c0 bc 03 00 65 8b 05 b4 2e 7c 7e 00 01 ff 00 48 8b 34 24 74 0f f6 c4 01 74 35 8b 82 fc 15 00 00
[ 60.253415][ C0] RSP: 0018:ffffc90003bdf748 EFLAGS: 00000246
[ 60.259483][ C0] RAX: 0000000080000001 RBX: ffffc90003bdf7d0 RCX: ffffffff813a04ea
[ 60.267465][ C0] RDX: ffff888023f01dc0 RSI: 0000000000000004 RDI: 0000000000000001
[ 60.275422][ C0] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000004
[ 60.283381][ C0] R10: 0000000000000001 R11: 0000000000000002 R12: ffffffff8ff19564
[ 60.291337][ C0] R13: ffffc90003bdfcd8 R14: 0000000000000001 R15: 0000000000000001
[ 60.299310][ C0] ? unwind_next_frame+0xeaa/0x2390
[ 60.304516][ C0] unwind_next_frame+0x1a25/0x2390
[ 60.309613][ C0] ? driver_unregister+0x76/0xb0
[ 60.314541][ C0] ? write_profile+0x450/0x450
[ 60.319289][ C0] arch_stack_walk+0xfa/0x170
[ 60.323956][ C0] ? usb_gadget_unregister_driver+0x49/0x60
[ 60.329845][ C0] ? dev_uevent_filter+0xc0/0xc0
[ 60.334771][ C0] stack_trace_save+0x96/0xd0
[ 60.339434][ C0] ? filter_irq_stacks+0x90/0x90
[ 60.344364][ C0] kasan_save_stack+0x33/0x50
[ 60.349050][ C0] ? kasan_save_stack+0x33/0x50
[ 60.353891][ C0] ? kasan_set_track+0x25/0x30
[ 60.358645][ C0] ? __kasan_kmalloc+0xa2/0xb0
[ 60.363409][ C0] ? kobject_uevent_env+0x24c/0x1800
[ 60.368685][ C0] ? device_remove+0xc8/0x170
[ 60.373377][ C0] ? device_release_driver_internal+0x44a/0x610
[ 60.379607][ C0] ? driver_detach+0xd8/0x1b0
[ 60.384277][ C0] ? bus_remove_driver+0x13b/0x2c0
[ 60.389378][ C0] ? driver_unregister+0x76/0xb0
[ 60.394320][ C0] kasan_set_track+0x25/0x30
[ 60.398902][ C0] __kasan_kmalloc+0xa2/0xb0
[ 60.403482][ C0] ? usb_gadget_disconnect+0x90/0x90
[ 60.408756][ C0] kobject_uevent_env+0x24c/0x1800
[ 60.413876][ C0] ? gadget_unbind_driver+0x362/0x4d0
[ 60.419233][ C0] ? dummy_udc_set_speed+0xd0/0xd0
[ 60.424331][ C0] ? usb_gadget_disconnect+0x90/0x90
[ 60.429603][ C0] device_remove+0xc8/0x170
[ 60.434099][ C0] device_release_driver_internal+0x44a/0x610
[ 60.440178][ C0] driver_detach+0xd8/0x1b0
[ 60.444690][ C0] ? gadget_unbind+0xd0/0xd0
[ 60.449264][ C0] bus_remove_driver+0x13b/0x2c0
[ 60.454197][ C0] driver_unregister+0x76/0xb0
[ 60.458945][ C0] usb_gadget_unregister_driver+0x49/0x60
[ 60.464657][ C0] raw_release+0x1a1/0x2e0
[ 60.469064][ C0] __fput+0x270/0xbb0
[ 60.473056][ C0] task_work_run+0x14d/0x240
[ 60.477631][ C0] ? task_work_cancel+0x30/0x30
[ 60.482472][ C0] ? do_raw_spin_unlock+0x173/0x230
[ 60.487653][ C0] do_exit+0xa92/0x2ae0
[ 60.491795][ C0] ? do_group_exit+0x1c5/0x2a0
[ 60.496542][ C0] ? reacquire_held_locks+0x4c0/0x4c0
[ 60.501902][ C0] ? do_raw_spin_lock+0x12e/0x2b0
[ 60.506907][ C0] ? mm_update_next_owner+0x840/0x840
[ 60.512264][ C0] ? spin_bug+0x1d0/0x1d0
[ 60.516585][ C0] do_group_exit+0xd4/0x2a0
[ 60.521083][ C0] __x64_sys_exit_group+0x3e/0x50
[ 60.526114][ C0] do_syscall_64+0x40/0x110
[ 60.530612][ C0] entry_SYSCALL_64_after_hwframe+0x63/0x6b
[ 60.536501][ C0] RIP: 0033:0x7f5bd5195e79
[ 60.540895][ C0] Code: Unable to access opcode bytes at 0x7f5bd5195e4f.
[ 60.547888][ C0] RSP: 002b:00007ffc11252818 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[ 60.556287][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5bd5195e79
[ 60.564253][ C0] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000
[ 60.572224][ C0] RBP: 00007f5bd5213370 R08: ffffffffffffffb8 R09: 0000555556ced610
[ 60.580182][ C0] R10: 00007ffc112524f7 R11: 0000000000000246 R12: 00007f5bd5213370
[ 60.588136][ C0] R13: 0000000000000000 R14: 00007f5bd52180e0 R15: 00007f5bd5164c80
[ 60.596104][ C0]
[ 60.599106][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 60.606366][ C0] CPU: 0 PID: 5062 Comm: syz-executor321 Not tainted 6.7.0-rc5-syzkaller #0
[ 60.615041][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023
[ 60.625080][ C0] Call Trace:
[ 60.628345][ C0]
[ 60.631175][ C0] dump_stack_lvl+0xd9/0x1b0
[ 60.635757][ C0] panic+0x6dc/0x790
[ 60.639698][ C0] ? panic_smp_self_stop+0xa0/0xa0
[ 60.644798][ C0] ? show_trace_log_lvl+0x363/0x4f0
[ 60.649986][ C0] ? check_panic_on_warn+0x1f/0xb0
[ 60.655086][ C0] ? usb_submit_urb+0x14d6/0x1730
[ 60.660094][ C0] check_panic_on_warn+0xab/0xb0
[ 60.665019][ C0] __warn+0xf2/0x390
[ 60.668900][ C0] ? __wake_up_klogd.part.0+0x99/0xf0
[ 60.674264][ C0] ? usb_submit_urb+0x14d6/0x1730
[ 60.679285][ C0] report_bug+0x3bc/0x580
[ 60.683607][ C0] handle_bug+0x3d/0x70
[ 60.687755][ C0] exc_invalid_op+0x17/0x40
[ 60.692283][ C0] asm_exc_invalid_op+0x1a/0x20
[ 60.697132][ C0] RIP: 0010:usb_submit_urb+0x14d6/0x1730
[ 60.702865][ C0] Code: fe eb cb bb fe ff ff ff e9 c5 f3 ff ff e8 d2 e4 06 fb c6 05 d1 b5 82 08 01 90 48 c7 c7 e0 fb 85 8b 48 89 de e8 9b 0a cd fa 90 <0f> 0b 90 90 e9 b6 fe ff ff bb f8 ff ff ff e9 95 f3 ff ff 48 89 ef
[ 60.722481][ C0] RSP: 0018:ffffc90000007950 EFLAGS: 00010086
[ 60.728541][ C0] RAX: 0000000000000000 RBX: ffff888029abe700 RCX: ffffffff814db579
[ 60.736498][ C0] RDX: ffff888023f01dc0 RSI: ffffffff814db586 RDI: 0000000000000001
[ 60.744456][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000
[ 60.752410][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000046
[ 60.760385][ C0] R13: ffff888025f86858 R14: 000000000000000f R15: 0000000000000001
[ 60.768362][ C0] ? __warn_printk+0x199/0x350
[ 60.773115][ C0] ? __warn_printk+0x1a6/0x350
[ 60.777891][ C0] ? spin_bug+0x1d0/0x1d0
[ 60.782204][ C0] ? idr_get_free+0xa30/0xa30
[ 60.786867][ C0] cm109_urb_irq_callback+0x2e7/0xb50
[ 60.792226][ C0] ? usb_hcd_unmap_urb_for_dma+0x109/0x6d0
[ 60.798019][ C0] ? dummy_timer+0x1406/0x3600
[ 60.802768][ C0] __usb_hcd_giveback_urb+0x359/0x5c0
[ 60.808128][ C0] usb_hcd_giveback_urb+0x389/0x430
[ 60.813316][ C0] dummy_timer+0x1415/0x3600
[ 60.817908][ C0] ? dummy_urb_enqueue+0x8f0/0x8f0
[ 60.823005][ C0] ? do_raw_spin_unlock+0x173/0x230
[ 60.828197][ C0] ? dummy_urb_enqueue+0x8f0/0x8f0
[ 60.833296][ C0] call_timer_fn+0x193/0x590
[ 60.837893][ C0] ? timer_fixup_assert_init+0x210/0x210
[ 60.843537][ C0] ? reacquire_held_locks+0x4c0/0x4c0
[ 60.848912][ C0] ? spin_bug+0x1d0/0x1d0
[ 60.853234][ C0] ? dummy_urb_enqueue+0x8f0/0x8f0
[ 60.858338][ C0] __run_timers+0x764/0xb20
[ 60.862844][ C0] ? call_timer_fn+0x590/0x590
[ 60.867599][ C0] ? __sched_core_set+0x400/0x400
[ 60.872614][ C0] ? usb_hcd_giveback_urb+0x430/0x430
[ 60.878001][ C0] ? tasklet_action_common.constprop.0+0x285/0x3d0
[ 60.884522][ C0] run_timer_softirq+0x58/0xd0
[ 60.889281][ C0] __do_softirq+0x21a/0x8de
[ 60.893777][ C0] ? __lock_text_end+0x3/0x3
[ 60.898354][ C0] irq_exit_rcu+0xb7/0x120
[ 60.902756][ C0] sysvec_apic_timer_interrupt+0x95/0xb0
[ 60.908378][ C0]
[ 60.911292][ C0]
[ 60.914205][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 60.920171][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x14/0x60
[ 60.926317][ C0] Code: 00 e8 b0 ff ff ff 31 c0 c3 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 f3 0f 1e fa 65 48 8b 14 25 c0 bc 03 00 65 8b 05 b4 2e 7c 7e 00 01 ff 00 48 8b 34 24 74 0f f6 c4 01 74 35 8b 82 fc 15 00 00
[ 60.945912][ C0] RSP: 0018:ffffc90003bdf748 EFLAGS: 00000246
[ 60.951965][ C0] RAX: 0000000080000001 RBX: ffffc90003bdf7d0 RCX: ffffffff813a04ea
[ 60.959918][ C0] RDX: ffff888023f01dc0 RSI: 0000000000000004 RDI: 0000000000000001
[ 60.967871][ C0] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000004
[ 60.975829][ C0] R10: 0000000000000001 R11: 0000000000000002 R12: ffffffff8ff19564
[ 60.983782][ C0] R13: ffffc90003bdfcd8 R14: 0000000000000001 R15: 0000000000000001
[ 60.991747][ C0] ? unwind_next_frame+0xeaa/0x2390
[ 60.996966][ C0] unwind_next_frame+0x1a25/0x2390
[ 61.002066][ C0] ? driver_unregister+0x76/0xb0
[ 61.006987][ C0] ? write_profile+0x450/0x450
[ 61.011736][ C0] arch_stack_walk+0xfa/0x170
[ 61.016400][ C0] ? usb_gadget_unregister_driver+0x49/0x60
[ 61.022287][ C0] ? dev_uevent_filter+0xc0/0xc0
[ 61.027212][ C0] stack_trace_save+0x96/0xd0
[ 61.031875][ C0] ? filter_irq_stacks+0x90/0x90
[ 61.036800][ C0] kasan_save_stack+0x33/0x50
[ 61.041464][ C0] ? kasan_save_stack+0x33/0x50
[ 61.046298][ C0] ? kasan_set_track+0x25/0x30
[ 61.051046][ C0] ? __kasan_kmalloc+0xa2/0xb0
[ 61.055800][ C0] ? kobject_uevent_env+0x24c/0x1800
[ 61.061251][ C0] ? device_remove+0xc8/0x170
[ 61.065917][ C0] ? device_release_driver_internal+0x44a/0x610
[ 61.072149][ C0] ? driver_detach+0xd8/0x1b0
[ 61.076821][ C0] ? bus_remove_driver+0x13b/0x2c0
[ 61.081923][ C0] ? driver_unregister+0x76/0xb0
[ 61.086871][ C0] kasan_set_track+0x25/0x30
[ 61.091456][ C0] __kasan_kmalloc+0xa2/0xb0
[ 61.096045][ C0] ? usb_gadget_disconnect+0x90/0x90
[ 61.101324][ C0] kobject_uevent_env+0x24c/0x1800
[ 61.106430][ C0] ? gadget_unbind_driver+0x362/0x4d0
[ 61.111791][ C0] ? dummy_udc_set_speed+0xd0/0xd0
[ 61.116891][ C0] ? usb_gadget_disconnect+0x90/0x90
[ 61.122172][ C0] device_remove+0xc8/0x170
[ 61.126665][ C0] device_release_driver_internal+0x44a/0x610
[ 61.132724][ C0] driver_detach+0xd8/0x1b0
[ 61.137215][ C0] ? gadget_unbind+0xd0/0xd0
[ 61.141789][ C0] bus_remove_driver+0x13b/0x2c0
[ 61.146713][ C0] driver_unregister+0x76/0xb0
[ 61.151462][ C0] usb_gadget_unregister_driver+0x49/0x60
[ 61.157178][ C0] raw_release+0x1a1/0x2e0
[ 61.161582][ C0] __fput+0x270/0xbb0
[ 61.165557][ C0] task_work_run+0x14d/0x240
[ 61.170128][ C0] ? task_work_cancel+0x30/0x30
[ 61.174963][ C0] ? do_raw_spin_unlock+0x173/0x230
[ 61.180157][ C0] do_exit+0xa92/0x2ae0
[ 61.184334][ C0] ? do_group_exit+0x1c5/0x2a0
[ 61.189086][ C0] ? reacquire_held_locks+0x4c0/0x4c0
[ 61.194454][ C0] ? do_raw_spin_lock+0x12e/0x2b0
[ 61.199461][ C0] ? mm_update_next_owner+0x840/0x840
[ 61.204823][ C0] ? spin_bug+0x1d0/0x1d0
[ 61.209181][ C0] do_group_exit+0xd4/0x2a0
[ 61.213675][ C0] __x64_sys_exit_group+0x3e/0x50
[ 61.218683][ C0] do_syscall_64+0x40/0x110
[ 61.223182][ C0] entry_SYSCALL_64_after_hwframe+0x63/0x6b
[ 61.229067][ C0] RIP: 0033:0x7f5bd5195e79
[ 61.233489][ C0] Code: Unable to access opcode bytes at 0x7f5bd5195e4f.
[ 61.240484][ C0] RSP: 002b:00007ffc11252818 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[ 61.248901][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5bd5195e79
[ 61.256865][ C0] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000
[ 61.264821][ C0] RBP: 00007f5bd5213370 R08: ffffffffffffffb8 R09: 0000555556ced610
[ 61.272781][ C0] R10: 00007ffc112524f7 R11: 0000000000000246 R12: 00007f5bd5213370
[ 61.280736][ C0] R13: 0000000000000000 R14: 00007f5bd52180e0 R15: 00007f5bd5164c80
[ 61.288699][ C0]
[ 61.291970][ C0] Kernel Offset: disabled
[ 61.296361][ C0] Rebooting in 86400 seconds..