./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor860725226 <...> Warning: Permanently added '10.128.0.85' (ED25519) to the list of known hosts. execve("./syz-executor860725226", ["./syz-executor860725226"], 0x7ffc4f04d050 /* 10 vars */) = 0 brk(NULL) = 0x555580633000 brk(0x555580633d00) = 0x555580633d00 arch_prctl(ARCH_SET_FS, 0x555580633380) = 0 set_tid_address(0x555580633650) = 5230 set_robust_list(0x555580633660, 24) = 0 rseq(0x555580633ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor860725226", 4096) = 27 getrandom("\x89\x47\x7c\x6d\xd2\x1f\x31\xf2", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555580633d00 brk(0x555580654d00) = 0x555580654d00 brk(0x555580655000) = 0x555580655000 mprotect(0x7f3c47492000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 write(1, "executing program\n", 18executing program ) = 18 bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_PERCPU_ARRAY, key_size=4, value_size=91, max_entries=138, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 3 openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 4 ioctl(4, USB_RAW_IOCTL_INIT, 0x7ffcadd57330) = 0 ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 ioctl(4, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcadd57330) = 0 ioctl(4, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcadd57330) = 0 ioctl(4, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcadd57330) = 0 ioctl(4, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcadd57330) = 0 ioctl(4, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcadd56320) = 18 ioctl(4, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcadd57330) = 0 [ 76.890426][ T8] usb 1-1: new high-speed USB device number 2 using dummy_hcd ioctl(4, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcadd57330) = 0 ioctl(4, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcadd57330) = 0 ioctl(4, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcadd56320) = 18 ioctl(4, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcadd57330) = 0 ioctl(4, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcadd56320) = 9 ioctl(4, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcadd57330) = 0 ioctl(4, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcadd56320) = 36 [ 77.080142][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 77.102262][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 77.112690][ T8] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 77.122521][ T8] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 77.134218][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 255, changing to 11 ioctl(4, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcadd57330) = 0 ioctl(4, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcadd56320) = 4 ioctl(4, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcadd57330) = 0 ioctl(4, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcadd56320) = 8 ioctl(4, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcadd57330) = 0 ioctl(4, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcadd56320) = 8 ioctl(4, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcadd57330) = 0 ioctl(4, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcadd56320) = 8 [ 77.145458][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 59391, setting to 1024 [ 77.166093][ T8] usb 1-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad [ 77.175342][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.183854][ T8] usb 1-1: Product: syz [ 77.188086][ T8] usb 1-1: Manufacturer: syz [ 77.192832][ T8] usb 1-1: SerialNumber: syz ioctl(4, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcadd57330) = 0 ioctl(4, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 ioctl(4, USB_RAW_IOCTL_CONFIGURE, 0) = 0 ioctl(4, USB_RAW_IOCTL_EP_ENABLE, 0x7f3c474983cc) = -1 EINVAL (Invalid argument) [ 77.201221][ T8] usb 1-1: config 0 descriptor?? ioctl(4, USB_RAW_IOCTL_EP_ENABLE, 0x7f3c474983dc) = -1 EINVAL (Invalid argument) ioctl(4, USB_RAW_IOCTL_EP0_READ, 0x7ffcadd56320) = 0 [ 77.231910][ T5230] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 77.244807][ T8] smsusb:smsusb_probe: board id=2, interface number 0 [ 77.255240][ T8] smsusb:siano_media_device_register: media controller created [ 77.264853][ T8] ------------[ cut here ]------------ [ 77.270416][ T8] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 77.276855][ T8] WARNING: CPU: 0 PID: 8 at drivers/usb/core/urb.c:504 usb_submit_urb+0xc4e/0x1930 [ 77.286276][ T8] Modules linked in: [ 77.290339][ T8] CPU: 0 UID: 0 PID: 8 Comm: kworker/0:0 Not tainted 6.11.0-rc5-syzkaller-00057-g86987d84b968 #0 [ 77.301000][ T8] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 77.311162][ T8] Workqueue: usb_hub_wq hub_event [ 77.316292][ T8] RIP: 0010:usb_submit_urb+0xc4e/0x1930 [ 77.321913][ T8] Code: f8 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 ee 08 00 00 45 8b 07 48 c7 c7 60 49 b0 8c 48 8b 34 24 4c 89 e2 89 e9 e8 43 30 2b fa 90 <0f> 0b 90 90 48 8b 5c 24 30 41 89 dc 4c 89 e7 48 c7 c6 f0 8d 55 8f [ 77.341877][ T8] RSP: 0018:ffffc900000d6ae8 EFLAGS: 00010246 [ 77.347987][ T8] RAX: e45b51d1a216cb00 RBX: dffffc0000000000 RCX: ffff888017acda00 [ 77.356079][ T8] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 77.364170][ T8] RBP: 0000000000000003 R08: ffffffff8155b2f2 R09: 1ffff1101724519a [ 77.372282][ T8] R10: dffffc0000000000 R11: ffffed101724519b R12: ffff88801fffce40 [ 77.380391][ T8] R13: ffff8880196bb400 R14: 0000000000000001 R15: ffffffff8cb0474c [ 77.388389][ T8] FS: 0000000000000000(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 77.397490][ T8] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 77.404191][ T8] CR2: 0000559b10d37580 CR3: 000000007e4d0000 CR4: 00000000003506f0 [ 77.412236][ T8] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 77.420368][ T8] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 77.429006][ T8] Call Trace: exit_group(0) = ? [ 77.432547][ T8] [ 77.435532][ T8] ? __warn+0x163/0x4e0 [ 77.439777][ T8] ? usb_submit_urb+0xc4e/0x1930 [ 77.444843][ T8] ? report_bug+0x2b3/0x500 [ 77.449387][ T8] ? usb_submit_urb+0xc4e/0x1930 [ 77.454441][ T8] ? handle_bug+0x3e/0x70 [ 77.459138][ T8] ? exc_invalid_op+0x1a/0x50 [ 77.464013][ T8] ? asm_exc_invalid_op+0x1a/0x20 [ 77.469109][ T8] ? __warn_printk+0x292/0x360 [ 77.474049][ T8] ? usb_submit_urb+0xc4e/0x1930 [ 77.479044][ T8] ? usb_submit_urb+0xc4d/0x1930 [ 77.484122][ T8] smsusb_start_streaming+0x22/0x340 [ 77.489553][ T8] smsusb_probe+0x1c54/0x2410 [ 77.494341][ T8] ? __pfx_smsusb_probe+0x10/0x10 [ 77.499492][ T8] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 77.505153][ T8] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 77.511144][ T8] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 77.517502][ T8] ? __pm_runtime_set_status+0x6c1/0xa10 [ 77.523259][ T8] usb_probe_interface+0x645/0xbb0 [ 77.528430][ T8] ? __pfx_usb_probe_interface+0x10/0x10 [ 77.534149][ T8] really_probe+0x2b8/0xad0 [ 77.538886][ T8] __driver_probe_device+0x1a2/0x390 [ 77.544484][ T8] driver_probe_device+0x50/0x430 [ 77.549597][ T8] __device_attach_driver+0x2d6/0x530 [ 77.555113][ T8] bus_for_each_drv+0x24e/0x2e0 [ 77.560090][ T8] ? __pfx___device_attach_driver+0x10/0x10 [ 77.566036][ T8] ? __pfx_bus_for_each_drv+0x10/0x10 [ 77.571555][ T8] __device_attach+0x333/0x520 [ 77.576359][ T8] ? __pfx_lock_release+0x10/0x10 [ 77.581594][ T8] ? __pfx___device_attach+0x10/0x10 [ 77.586918][ T8] ? do_raw_spin_unlock+0x13c/0x8b0 [ 77.592199][ T8] bus_probe_device+0x189/0x260 [ 77.597183][ T8] device_add+0x856/0xbf0 [ 77.601632][ T8] usb_set_configuration+0x1976/0x1fb0 [ 77.607156][ T8] usb_generic_driver_probe+0x88/0x140 [ 77.612696][ T8] usb_probe_device+0x1b8/0x380 [ 77.617684][ T8] ? __pfx_usb_probe_device+0x10/0x10 [ 77.623166][ T8] really_probe+0x2b8/0xad0 [ 77.627905][ T8] __driver_probe_device+0x1a2/0x390 [ 77.633276][ T8] driver_probe_device+0x50/0x430 [ 77.638343][ T8] __device_attach_driver+0x2d6/0x530 [ 77.643847][ T8] bus_for_each_drv+0x24e/0x2e0 [ 77.648766][ T8] ? __pfx___device_attach_driver+0x10/0x10 [ 77.655091][ T8] ? __pfx_bus_for_each_drv+0x10/0x10 [ 77.660564][ T8] __device_attach+0x333/0x520 [ 77.665342][ T8] ? __pfx___device_attach+0x10/0x10 [ 77.670700][ T8] bus_probe_device+0x189/0x260 [ 77.675590][ T8] device_add+0x856/0xbf0 [ 77.679930][ T8] usb_new_device+0x104a/0x19a0 [ 77.684943][ T8] ? __pfx_usb_new_device+0x10/0x10 [ 77.690256][ T8] ? _raw_spin_unlock_irq+0x23/0x50 [ 77.695523][ T8] ? lockdep_hardirqs_on+0x99/0x150 [ 77.700844][ T8] hub_event+0x2d6d/0x5150 [ 77.705339][ T8] ? __pfx_hub_event+0x10/0x10 [ 77.710200][ T8] ? __pfx_lock_acquire+0x10/0x10 [ 77.715260][ T8] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 77.721361][ T8] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 77.727973][ T8] ? process_scheduled_works+0x945/0x1830 [ 77.733810][ T8] process_scheduled_works+0xa2c/0x1830 [ 77.739449][ T8] ? __pfx_process_scheduled_works+0x10/0x10 [ 77.745597][ T8] ? assign_work+0x364/0x3d0 [ 77.750273][ T8] worker_thread+0x86d/0xd10 [ 77.754918][ T8] ? __kthread_parkme+0x169/0x1d0 [ 77.760087][ T8] ? __pfx_worker_thread+0x10/0x10 [ 77.765323][ T8] kthread+0x2f0/0x390 [ 77.769412][ T8] ? __pfx_worker_thread+0x10/0x10 [ 77.774595][ T8] ? __pfx_kthread+0x10/0x10 [ 77.779333][ T8] ret_from_fork+0x4b/0x80 [ 77.783944][ T8] ? __pfx_kthread+0x10/0x10 [ 77.788574][ T8] ret_from_fork_asm+0x1a/0x30 [ 77.793444][ T8] [ 77.796490][ T8] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 77.803768][ T8] CPU: 0 UID: 0 PID: 8 Comm: kworker/0:0 Not tainted 6.11.0-rc5-syzkaller-00057-g86987d84b968 #0 [ 77.814265][ T8] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 77.824327][ T8] Workqueue: usb_hub_wq hub_event [ 77.829375][ T8] Call Trace: [ 77.832655][ T8] [ 77.835591][ T8] dump_stack_lvl+0x241/0x360 [ 77.840269][ T8] ? __pfx_dump_stack_lvl+0x10/0x10 [ 77.845461][ T8] ? __pfx__printk+0x10/0x10 [ 77.850071][ T8] ? vscnprintf+0x5d/0x90 [ 77.854419][ T8] panic+0x349/0x860 [ 77.858333][ T8] ? __warn+0x172/0x4e0 [ 77.862494][ T8] ? __pfx_panic+0x10/0x10 [ 77.866941][ T8] ? ret_from_fork_asm+0x1a/0x30 [ 77.871994][ T8] __warn+0x346/0x4e0 [ 77.875987][ T8] ? usb_submit_urb+0xc4e/0x1930 [ 77.880942][ T8] report_bug+0x2b3/0x500 [ 77.885287][ T8] ? usb_submit_urb+0xc4e/0x1930 [ 77.890244][ T8] handle_bug+0x3e/0x70 [ 77.894408][ T8] exc_invalid_op+0x1a/0x50 [ 77.899270][ T8] asm_exc_invalid_op+0x1a/0x20 [ 77.904181][ T8] RIP: 0010:usb_submit_urb+0xc4e/0x1930 [ 77.909761][ T8] Code: f8 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 ee 08 00 00 45 8b 07 48 c7 c7 60 49 b0 8c 48 8b 34 24 4c 89 e2 89 e9 e8 43 30 2b fa 90 <0f> 0b 90 90 48 8b 5c 24 30 41 89 dc 4c 89 e7 48 c7 c6 f0 8d 55 8f [ 77.929460][ T8] RSP: 0018:ffffc900000d6ae8 EFLAGS: 00010246 [ 77.935544][ T8] RAX: e45b51d1a216cb00 RBX: dffffc0000000000 RCX: ffff888017acda00 [ 77.943632][ T8] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 77.951611][ T8] RBP: 0000000000000003 R08: ffffffff8155b2f2 R09: 1ffff1101724519a [ 77.959606][ T8] R10: dffffc0000000000 R11: ffffed101724519b R12: ffff88801fffce40 [ 77.967588][ T8] R13: ffff8880196bb400 R14: 0000000000000001 R15: ffffffff8cb0474c [ 77.975572][ T8] ? __warn_printk+0x292/0x360 [ 77.980353][ T8] ? usb_submit_urb+0xc4d/0x1930 [ 77.985312][ T8] smsusb_start_streaming+0x22/0x340 [ 77.990626][ T8] smsusb_probe+0x1c54/0x2410 [ 77.995328][ T8] ? __pfx_smsusb_probe+0x10/0x10 [ 78.000368][ T8] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 78.005949][ T8] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 78.011888][ T8] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 78.018238][ T8] ? __pm_runtime_set_status+0x6c1/0xa10 [ 78.023888][ T8] usb_probe_interface+0x645/0xbb0 [ 78.029026][ T8] ? __pfx_usb_probe_interface+0x10/0x10 [ 78.034762][ T8] really_probe+0x2b8/0xad0 [ 78.039282][ T8] __driver_probe_device+0x1a2/0x390 [ 78.044600][ T8] driver_probe_device+0x50/0x430 [ 78.049723][ T8] __device_attach_driver+0x2d6/0x530 [ 78.055114][ T8] bus_for_each_drv+0x24e/0x2e0 [ 78.059990][ T8] ? __pfx___device_attach_driver+0x10/0x10 [ 78.065905][ T8] ? __pfx_bus_for_each_drv+0x10/0x10 [ 78.071303][ T8] __device_attach+0x333/0x520 [ 78.076076][ T8] ? __pfx_lock_release+0x10/0x10 [ 78.081117][ T8] ? __pfx___device_attach+0x10/0x10 [ 78.086417][ T8] ? do_raw_spin_unlock+0x13c/0x8b0 [ 78.091632][ T8] bus_probe_device+0x189/0x260 [ 78.096504][ T8] device_add+0x856/0xbf0 [ 78.100861][ T8] usb_set_configuration+0x1976/0x1fb0 [ 78.106363][ T8] usb_generic_driver_probe+0x88/0x140 [ 78.111930][ T8] usb_probe_device+0x1b8/0x380 [ 78.116897][ T8] ? __pfx_usb_probe_device+0x10/0x10 [ 78.122374][ T8] really_probe+0x2b8/0xad0 [ 78.126932][ T8] __driver_probe_device+0x1a2/0x390 [ 78.132322][ T8] driver_probe_device+0x50/0x430 [ 78.137473][ T8] __device_attach_driver+0x2d6/0x530 [ 78.142896][ T8] bus_for_each_drv+0x24e/0x2e0 [ 78.147788][ T8] ? __pfx___device_attach_driver+0x10/0x10 [ 78.153714][ T8] ? __pfx_bus_for_each_drv+0x10/0x10 [ 78.159116][ T8] __device_attach+0x333/0x520 [ 78.163924][ T8] ? __pfx___device_attach+0x10/0x10 [ 78.169230][ T8] bus_probe_device+0x189/0x260 [ 78.174099][ T8] device_add+0x856/0xbf0 [ 78.178442][ T8] usb_new_device+0x104a/0x19a0 [ 78.183323][ T8] ? __pfx_usb_new_device+0x10/0x10 [ 78.188539][ T8] ? _raw_spin_unlock_irq+0x23/0x50 [ 78.193748][ T8] ? lockdep_hardirqs_on+0x99/0x150 [ 78.198963][ T8] hub_event+0x2d6d/0x5150 [ 78.203448][ T8] ? __pfx_hub_event+0x10/0x10 [ 78.208228][ T8] ? __pfx_lock_acquire+0x10/0x10 [ 78.213263][ T8] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 78.219256][ T8] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 78.225605][ T8] ? process_scheduled_works+0x945/0x1830 [ 78.231423][ T8] process_scheduled_works+0xa2c/0x1830 [ 78.237027][ T8] ? __pfx_process_scheduled_works+0x10/0x10 [ 78.243043][ T8] ? assign_work+0x364/0x3d0 [ 78.247656][ T8] worker_thread+0x86d/0xd10 [ 78.252283][ T8] ? __kthread_parkme+0x169/0x1d0 [ 78.257330][ T8] ? __pfx_worker_thread+0x10/0x10 [ 78.262459][ T8] kthread+0x2f0/0x390 [ 78.266545][ T8] ? __pfx_worker_thread+0x10/0x10 [ 78.271669][ T8] ? __pfx_kthread+0x10/0x10 [ 78.276274][ T8] ret_from_fork+0x4b/0x80 [ 78.280704][ T8] ? __pfx_kthread+0x10/0x10 [ 78.285310][ T8] ret_from_fork_asm+0x1a/0x30 [ 78.290145][ T8] [ 78.293405][ T8] Kernel Offset: disabled [ 78.297797][ T8] Rebooting in 86400 seconds..