./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3649898340
<...>
Warning: Permanently added '10.128.0.48' (ED25519) to the list of known hosts.
execve("./syz-executor3649898340", ["./syz-executor3649898340"], 0x7ffea1aa2160 /* 10 vars */) = 0
brk(NULL) = 0x555589c38000
brk(0x555589c38d00) = 0x555589c38d00
arch_prctl(ARCH_SET_FS, 0x555589c38380) = 0
set_tid_address(0x555589c38650) = 5225
set_robust_list(0x555589c38660, 24) = 0
rseq(0x555589c38ca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor3649898340", 4096) = 28
getrandom("\x24\x8d\xd2\x6d\x67\x4d\x3b\x4f", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x555589c38d00
brk(0x555589c59d00) = 0x555589c59d00
brk(0x555589c5a000) = 0x555589c5a000
mprotect(0x7f44be667000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5226 attached
, child_tidptr=0x555589c38650) = 5226
[pid 5226] set_robust_list(0x555589c38660, 24) = 0
[pid 5226] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5226] setpgid(0, 0) = 0
[pid 5226] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5226] write(3, "1000", 4) = 4
[pid 5226] close(3) = 0
[pid 5226] write(1, "executing program\n", 18executing program
) = 18
[pid 5226] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3
[pid 5226] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffdb58be250) = 0
[pid 5226] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0
[pid 5226] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffdb58be250) = 0
[pid 5226] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffdb58be250) = 0
[pid 5226] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffdb58be250) = 0
[pid 5226] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffdb58be250) = 0
[pid 5226] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffdb58bd240) = 18
[pid 5226] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffdb58be250) = 0
[ 62.817747][ T1564] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[pid 5226] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffdb58be250) = 0
[pid 5226] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffdb58be250) = 0
[pid 5226] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffdb58bd240) = 18
[pid 5226] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffdb58be250) = 0
[pid 5226] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffdb58bd240) = 9
[pid 5226] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffdb58be250) = 0
[pid 5226] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffdb58bd240) = 18
[pid 5226] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffdb58be250) = 0
[pid 5226] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0
[pid 5226] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0
[pid 5226] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffdb58bd240) = 0
[ 63.032522][ T1564] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e
[ 63.041884][ T1564] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 63.052803][ T1564] usb 1-1: config 0 descriptor??
[pid 5226] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffdb58be270) = 0
[pid 5226] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffdb58bd260) = 4
[pid 5226] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffdb58be270) = 0
[pid 5226] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffdb58bd260) = 8
[pid 5226] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffdb58be270) = 0
[pid 5226] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffdb58bd260) = 0
[ 63.678556][ T1564] ------------[ cut here ]------------
[ 63.684209][ T1564] WARNING: CPU: 1 PID: 1564 at drivers/net/wireless/ath/ath6kl/bmi.c:90 ath6kl_bmi_get_target_info+0x44a/0x590
[ 63.684255][ T1564] Modules linked in:
[ 63.684274][ T1564] CPU: 1 UID: 0 PID: 1564 Comm: kworker/1:2 Not tainted 6.10.0-next-20240726-syzkaller #0
[ 63.684286][ T1564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 63.684294][ T1564] Workqueue: usb_hub_wq hub_event
[ 63.684311][ T1564] RIP: 0010:ath6kl_bmi_get_target_info+0x44a/0x590
[ 63.684328][ T1564] Code: 04 30 84 c0 0f 85 3a 01 00 00 48 8b 44 24 08 8b 30 48 c7 c7 e0 50 a4 8c 89 da e8 a1 1b fe ff e9 04 fe ff ff e8 e7 62 c9 fa 90 <0f> 0b 90 bb ea ff ff ff e9 f1 fd ff ff e8 d4 62 c9 fa 31 db e9 e5
[ 63.684341][ T1564] RSP: 0018:ffffc90004d1eb60 EFLAGS: 00010293
[ 63.684350][ T1564] RAX: ffffffff86ca6839 RBX: 0000000000000000 RCX: ffff888023fd8000
[ 63.684358][ T1564] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000c
[ 63.684364][ T1564] RBP: ffffc90004d1ec30 R08: ffffffff86ca6790 R09: 1ffffffff26e6f0e
[ 63.684372][ T1564] R10: dffffc0000000000 R11: fffffbfff26e6f0f R12: ffffc90004d1ece4
[ 63.684379][ T1564] R13: ffff888024a60e40 R14: dffffc0000000000 R15: 1ffff920009a3d74
[ 63.684387][ T1564] FS: 0000000000000000(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000
[ 63.684396][ T1564] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 63.684403][ T1564] CR2: 000055c0c27046f8 CR3: 0000000023d78000 CR4: 00000000003506f0
[ 63.684413][ T1564] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 63.684419][ T1564] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 63.684426][ T1564] Call Trace:
[ 63.684430][ T1564]
[ 63.684436][ T1564] ? __warn+0x168/0x4e0
[ 63.684447][ T1564] ? ath6kl_bmi_get_target_info+0x44a/0x590
[ 63.684465][ T1564] ? report_bug+0x2b3/0x500
[ 63.684482][ T1564] ? ath6kl_bmi_get_target_info+0x44a/0x590
[ 63.684501][ T1564] ? handle_bug+0x3e/0x70
[ 63.684511][ T1564] ? exc_invalid_op+0x1a/0x50
[ 63.684521][ T1564] ? asm_exc_invalid_op+0x1a/0x20
[ 63.684537][ T1564] ? ath6kl_bmi_get_target_info+0x3a0/0x590
[ 63.684551][ T1564] ? ath6kl_bmi_get_target_info+0x449/0x590
[ 63.684569][ T1564] ? ath6kl_bmi_get_target_info+0x44a/0x590
[ 63.684591][ T1564] ? __pfx_ath6kl_bmi_get_target_info+0x10/0x10
[ 63.684605][ T1564] ? ath6kl_bmi_init+0x6d/0xf0
[ 63.684614][ T1564] ? __kmalloc_noprof+0x21a/0x400
[ 63.684633][ T1564] ath6kl_core_init+0x1eb/0x1140
[ 63.684650][ T1564] ? __pfx_lockdep_init_map_type+0x10/0x10
[ 63.684669][ T1564] ? __kasan_kmalloc+0x98/0xb0
[ 63.684680][ T1564] ? __pfx_ath6kl_core_init+0x10/0x10
[ 63.684694][ T1564] ? ath6kl_core_create+0x7d8/0x950
[ 63.684715][ T1564] ath6kl_usb_probe+0x129b/0x1390
[ 63.684731][ T1564] ? _raw_spin_unlock_irqrestore+0xdd/0x140
[ 63.684749][ T1564] ? usb_disable_lpm+0x77/0x380
[ 63.684765][ T1564] usb_probe_interface+0x645/0xbb0
[ 63.684788][ T1564] ? __pfx_usb_probe_interface+0x10/0x10
[ 63.684803][ T1564] really_probe+0x2b8/0xad0
[ 63.684821][ T1564] __driver_probe_device+0x1a2/0x390
[ 63.684836][ T1564] driver_probe_device+0x50/0x430
[ 63.684850][ T1564] __device_attach_driver+0x2d6/0x530
[ 63.684864][ T1564] bus_for_each_drv+0x24e/0x2e0
[ 63.684880][ T1564] ? __pfx___device_attach_driver+0x10/0x10
[ 63.684893][ T1564] ? __pfx_bus_for_each_drv+0x10/0x10
[ 63.684913][ T1564] __device_attach+0x333/0x520
[ 63.684925][ T1564] ? __pfx_lock_release+0x10/0x10
[ 63.684941][ T1564] ? __pfx___device_attach+0x10/0x10
[ 63.684953][ T1564] ? do_raw_spin_unlock+0x13c/0x8b0
[ 63.684971][ T1564] bus_probe_device+0x189/0x260
[ 63.684988][ T1564] device_add+0x856/0xbf0
[ 63.685002][ T1564] usb_set_configuration+0x1976/0x1fb0
[ 63.685031][ T1564] usb_generic_driver_probe+0x88/0x140
[ 63.685045][ T1564] usb_probe_device+0x1b8/0x380
[ 63.685061][ T1564] ? __pfx_usb_probe_device+0x10/0x10
[ 63.685075][ T1564] really_probe+0x2b8/0xad0
[ 63.685092][ T1564] __driver_probe_device+0x1a2/0x390
[ 63.685106][ T1564] driver_probe_device+0x50/0x430
[ 63.685120][ T1564] __device_attach_driver+0x2d6/0x530
[ 63.685139][ T1564] bus_for_each_drv+0x24e/0x2e0
[ 63.685154][ T1564] ? __pfx___device_attach_driver+0x10/0x10
[ 63.685166][ T1564] ? __pfx_bus_for_each_drv+0x10/0x10
[ 63.685186][ T1564] __device_attach+0x333/0x520
[ 63.685201][ T1564] ? __pfx___device_attach+0x10/0x10
[ 63.685219][ T1564] bus_probe_device+0x189/0x260
[ 63.685235][ T1564] device_add+0x856/0xbf0
[ 63.685249][ T1564] usb_new_device+0x104a/0x19a0
[ 63.685273][ T1564] ? __pfx_usb_new_device+0x10/0x10
[ 63.685287][ T1564] ? _raw_spin_unlock_irq+0x23/0x50
[ 63.685300][ T1564] ? lockdep_hardirqs_on+0x99/0x150
[ 63.685316][ T1564] hub_event+0x2d6d/0x5150
[ 63.685358][ T1564] ? __pfx_hub_event+0x10/0x10
[ 63.685374][ T1564] ? __pfx_lock_acquire+0x10/0x10
[ 63.685388][ T1564] ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 63.685404][ T1564] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 63.685426][ T1564] ? process_scheduled_works+0x945/0x1830
[ 63.685440][ T1564] process_scheduled_works+0xa2c/0x1830
[ 63.685470][ T1564] ? __pfx_process_scheduled_works+0x10/0x10
[ 63.685489][ T1564] ? assign_work+0x364/0x3d0
[ 63.685506][ T1564] worker_thread+0x86d/0xd40
[ 63.685526][ T1564] ? _raw_spin_unlock_irqrestore+0xdd/0x140
[ 63.685542][ T1564] ? __kthread_parkme+0x169/0x1d0
[ 63.685559][ T1564] ? __pfx_worker_thread+0x10/0x10
[ 63.685573][ T1564] kthread+0x2f0/0x390
[ 63.685583][ T1564] ? __pfx_worker_thread+0x10/0x10
[ 63.685597][ T1564] ? __pfx_kthread+0x10/0x10
[ 63.685607][ T1564] ret_from_fork+0x4b/0x80
[ 63.685622][ T1564] ? __pfx_kthread+0x10/0x10
[ 63.685632][ T1564] ret_from_fork_asm+0x1a/0x30
[ 63.685657][ T1564]
[ 63.685663][ T1564] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 64.233237][ T1564] CPU: 1 UID: 0 PID: 1564 Comm: kworker/1:2 Not tainted 6.10.0-next-20240726-syzkaller #0
[ 64.243125][ T1564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 64.253175][ T1564] Workqueue: usb_hub_wq hub_event
[ 64.258206][ T1564] Call Trace:
[ 64.261478][ T1564]
[ 64.264401][ T1564] dump_stack_lvl+0x241/0x360
[ 64.269083][ T1564] ? __pfx_dump_stack_lvl+0x10/0x10
[ 64.274282][ T1564] ? __pfx__printk+0x10/0x10
[ 64.278873][ T1564] ? vscnprintf+0x5d/0x90
[ 64.283195][ T1564] panic+0x349/0x870
[ 64.287089][ T1564] ? __warn+0x177/0x4e0
[ 64.291236][ T1564] ? __pfx_panic+0x10/0x10
[ 64.295655][ T1564] ? ret_from_fork_asm+0x1a/0x30
[ 64.300591][ T1564] __warn+0x34b/0x4e0
[ 64.304562][ T1564] ? ath6kl_bmi_get_target_info+0x44a/0x590
[ 64.310455][ T1564] report_bug+0x2b3/0x500
[ 64.314781][ T1564] ? ath6kl_bmi_get_target_info+0x44a/0x590
[ 64.320672][ T1564] handle_bug+0x3e/0x70
[ 64.324827][ T1564] exc_invalid_op+0x1a/0x50
[ 64.329319][ T1564] asm_exc_invalid_op+0x1a/0x20
[ 64.334163][ T1564] RIP: 0010:ath6kl_bmi_get_target_info+0x44a/0x590
[ 64.340663][ T1564] Code: 04 30 84 c0 0f 85 3a 01 00 00 48 8b 44 24 08 8b 30 48 c7 c7 e0 50 a4 8c 89 da e8 a1 1b fe ff e9 04 fe ff ff e8 e7 62 c9 fa 90 <0f> 0b 90 bb ea ff ff ff e9 f1 fd ff ff e8 d4 62 c9 fa 31 db e9 e5
[ 64.360265][ T1564] RSP: 0018:ffffc90004d1eb60 EFLAGS: 00010293
[ 64.366328][ T1564] RAX: ffffffff86ca6839 RBX: 0000000000000000 RCX: ffff888023fd8000
[ 64.374289][ T1564] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000c
[ 64.382253][ T1564] RBP: ffffc90004d1ec30 R08: ffffffff86ca6790 R09: 1ffffffff26e6f0e
[ 64.390216][ T1564] R10: dffffc0000000000 R11: fffffbfff26e6f0f R12: ffffc90004d1ece4
[ 64.398196][ T1564] R13: ffff888024a60e40 R14: dffffc0000000000 R15: 1ffff920009a3d74
[ 64.406163][ T1564] ? ath6kl_bmi_get_target_info+0x3a0/0x590
[ 64.412058][ T1564] ? ath6kl_bmi_get_target_info+0x449/0x590
[ 64.417969][ T1564] ? __pfx_ath6kl_bmi_get_target_info+0x10/0x10
[ 64.424244][ T1564] ? ath6kl_bmi_init+0x6d/0xf0
[ 64.428999][ T1564] ? __kmalloc_noprof+0x21a/0x400
[ 64.434029][ T1564] ath6kl_core_init+0x1eb/0x1140
[ 64.438970][ T1564] ? __pfx_lockdep_init_map_type+0x10/0x10
[ 64.444775][ T1564] ? __kasan_kmalloc+0x98/0xb0
[ 64.449532][ T1564] ? __pfx_ath6kl_core_init+0x10/0x10
[ 64.454896][ T1564] ? ath6kl_core_create+0x7d8/0x950
[ 64.460099][ T1564] ath6kl_usb_probe+0x129b/0x1390
[ 64.465123][ T1564] ? _raw_spin_unlock_irqrestore+0xdd/0x140
[ 64.471015][ T1564] ? usb_disable_lpm+0x77/0x380
[ 64.475879][ T1564] usb_probe_interface+0x645/0xbb0
[ 64.481000][ T1564] ? __pfx_usb_probe_interface+0x10/0x10
[ 64.486647][ T1564] really_probe+0x2b8/0xad0
[ 64.491171][ T1564] __driver_probe_device+0x1a2/0x390
[ 64.496486][ T1564] driver_probe_device+0x50/0x430
[ 64.501529][ T1564] __device_attach_driver+0x2d6/0x530
[ 64.506906][ T1564] bus_for_each_drv+0x24e/0x2e0
[ 64.511758][ T1564] ? __pfx___device_attach_driver+0x10/0x10
[ 64.517644][ T1564] ? __pfx_bus_for_each_drv+0x10/0x10
[ 64.523021][ T1564] __device_attach+0x333/0x520
[ 64.527778][ T1564] ? __pfx_lock_release+0x10/0x10
[ 64.532800][ T1564] ? __pfx___device_attach+0x10/0x10
[ 64.538081][ T1564] ? do_raw_spin_unlock+0x13c/0x8b0
[ 64.543279][ T1564] bus_probe_device+0x189/0x260
[ 64.548127][ T1564] device_add+0x856/0xbf0
[ 64.552450][ T1564] usb_set_configuration+0x1976/0x1fb0
[ 64.557926][ T1564] usb_generic_driver_probe+0x88/0x140
[ 64.563464][ T1564] usb_probe_device+0x1b8/0x380
[ 64.568313][ T1564] ? __pfx_usb_probe_device+0x10/0x10
[ 64.573724][ T1564] really_probe+0x2b8/0xad0
[ 64.578227][ T1564] __driver_probe_device+0x1a2/0x390
[ 64.583510][ T1564] driver_probe_device+0x50/0x430
[ 64.588531][ T1564] __device_attach_driver+0x2d6/0x530
[ 64.593900][ T1564] bus_for_each_drv+0x24e/0x2e0
[ 64.598750][ T1564] ? __pfx___device_attach_driver+0x10/0x10
[ 64.604634][ T1564] ? __pfx_bus_for_each_drv+0x10/0x10
[ 64.610011][ T1564] __device_attach+0x333/0x520
[ 64.614771][ T1564] ? __pfx___device_attach+0x10/0x10
[ 64.620056][ T1564] bus_probe_device+0x189/0x260
[ 64.624911][ T1564] device_add+0x856/0xbf0
[ 64.629243][ T1564] usb_new_device+0x104a/0x19a0
[ 64.634116][ T1564] ? __pfx_usb_new_device+0x10/0x10
[ 64.639317][ T1564] ? _raw_spin_unlock_irq+0x23/0x50
[ 64.644517][ T1564] ? lockdep_hardirqs_on+0x99/0x150
[ 64.649712][ T1564] hub_event+0x2d6d/0x5150
[ 64.654165][ T1564] ? __pfx_hub_event+0x10/0x10
[ 64.658927][ T1564] ? __pfx_lock_acquire+0x10/0x10
[ 64.663959][ T1564] ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 64.670022][ T1564] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 64.676465][ T1564] ? process_scheduled_works+0x945/0x1830
[ 64.682227][ T1564] process_scheduled_works+0xa2c/0x1830
[ 64.687811][ T1564] ? __pfx_process_scheduled_works+0x10/0x10
[ 64.693795][ T1564] ? assign_work+0x364/0x3d0
[ 64.698387][ T1564] worker_thread+0x86d/0xd40
[ 64.702981][ T1564] ? _raw_spin_unlock_irqrestore+0xdd/0x140
[ 64.708875][ T1564] ? __kthread_parkme+0x169/0x1d0
[ 64.713910][ T1564] ? __pfx_worker_thread+0x10/0x10
[ 64.719019][ T1564] kthread+0x2f0/0x390
[ 64.723079][ T1564] ? __pfx_worker_thread+0x10/0x10
[ 64.728183][ T1564] ? __pfx_kthread+0x10/0x10
[ 64.732763][ T1564] ret_from_fork+0x4b/0x80
[ 64.737176][ T1564] ? __pfx_kthread+0x10/0x10
[ 64.741847][ T1564] ret_from_fork_asm+0x1a/0x30
[ 64.746620][ T1564]
[ 64.749854][ T1564] Kernel Offset: disabled
[ 64.754206][ T1564] Rebooting in 86400 seconds..