./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3044179604 <...> DUID 00:04:e3:a1:4c:5b:a4:47:39:93:9a:5d:f6:69:14:97:a9:57 forked to background, child pid 3183 [ 22.679375][ T3184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 22.693005][ T3184] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.103' (ECDSA) to the list of known hosts. execve("./syz-executor3044179604", ["./syz-executor3044179604"], 0x7ffee1cecac0 /* 10 vars */) = 0 brk(NULL) = 0x555555bce000 brk(0x555555bcec40) = 0x555555bcec40 arch_prctl(ARCH_SET_FS, 0x555555bce300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor3044179604", 4096) = 28 brk(0x555555befc40) = 0x555555befc40 brk(0x555555bf0000) = 0x555555bf0000 mprotect(0x7f10e31dc000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555bce5d0) = 3606 ./strace-static-x86_64: Process 3606 attached [pid 3606] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 3606] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3606] setsid() = 1 [pid 3606] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 3606] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 3606] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 3606] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 3606] prlimit64(0, RLIMIT_CORE, {rlim_cur=0, rlim_max=0}, NULL) = 0 [pid 3606] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 3606] unshare(CLONE_NEWNS) = 0 [pid 3606] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 3606] unshare(CLONE_NEWIPC) = 0 [pid 3606] unshare(CLONE_NEWCGROUP) = 0 [pid 3606] unshare(CLONE_NEWUTS) = 0 [pid 3606] unshare(CLONE_SYSVSEM) = 0 [pid 3606] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 3606] write(3, "16777216", 8) = 8 [pid 3606] close(3) = 0 [pid 3606] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 3606] write(3, "536870912", 9) = 9 [pid 3606] close(3) = 0 [pid 3606] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 3606] write(3, "1024", 4) = 4 [pid 3606] close(3) = 0 [pid 3606] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 3606] write(3, "8192", 4) = 4 [pid 3606] close(3) = 0 [pid 3606] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 3606] write(3, "1024", 4) = 4 [pid 3606] close(3) = 0 [pid 3606] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 3606] write(3, "1024", 4) = 4 [pid 3606] close(3) = 0 [pid 3606] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 3606] write(3, "1024 1048576 500 1024", 21) = 21 [pid 3606] close(3) = 0 [pid 3606] getpid() = 1 [pid 3606] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< 0b e9 58 f8 ff ff e8 82 43 e9 fb 48 81 c5 c0 05 00 00 e9 84 f7 [ 42.814991][ T6] RSP: 0018:ffffc900000b6d20 EFLAGS: 00010286 [ 42.821086][ T6] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 42.829081][ T6] RDX: ffff88813fe59d40 RSI: ffffffff81620448 RDI: fffff52000016d96 [ 42.837094][ T6] RBP: ffff88806f584940 R08: 0000000000000005 R09: 0000000000000000 [ 42.845049][ T6] R10: 0000000080000000 R11: 3a312d3120627375 R12: 0000000000000003 [ 42.853062][ T6] R13: ffff888020b8cd70 R14: 0000000000000003 R15: ffff888017942400 [ 42.861047][ T6] FS: 0000000000000000(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 42.870087][ T6] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 42.876799][ T6] CR2: 000055ff1ca76678 CR3: 000000002718b000 CR4: 00000000003506f0 [ 42.884776][ T6] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 42.892804][ T6] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 42.900947][ T6] Call Trace: [ 42.904244][ T6] [ 42.907214][ T6] sisusb_send_bulk_msg.constprop.0+0x904/0x1230 [ 42.913567][ T6] ? sisusb_recv_bulk_msg.constprop.0+0x850/0x850 [ 42.919996][ T6] ? usb_probe_interface+0x30b/0x7f0 [ 42.925299][ T6] ? really_probe+0x249/0xb90 [ 42.930030][ T6] ? __driver_probe_device+0x1df/0x4d0 [ 42.935501][ T6] ? driver_probe_device+0x4c/0x1a0 [ 42.940736][ T6] ? dev_printk_emit+0xba/0xf1 [ 42.945519][ T6] sisusb_init_gfxdevice+0x87b/0x4000 [ 42.951021][ T6] ? kthread+0x2e4/0x3a0 [ 42.955269][ T6] ? ret_from_fork+0x1f/0x30 [ 42.959920][ T6] ? __dev_printk+0xcf/0xf5 [ 42.964441][ T6] ? sisusb_set_default_mode+0xbc0/0xbc0 [ 42.970096][ T6] ? _dev_info+0xd7/0x109 [ 42.974439][ T6] ? _dev_notice+0x109/0x109 [ 42.979046][ T6] ? lockdep_init_map_type+0x21a/0x7f0 [ 42.984512][ T6] ? lockdep_init_map_type+0x21a/0x7f0 [ 42.990044][ T6] ? kobject_get+0xbc/0x150 [ 42.994557][ T6] sisusb_probe+0x9c9/0xbde [ 42.999089][ T6] usb_probe_interface+0x30b/0x7f0 [ 43.004225][ T6] ? usb_match_dynamic_id+0x1a0/0x1a0 [ 43.009634][ T6] really_probe+0x249/0xb90 [ 43.014154][ T6] __driver_probe_device+0x1df/0x4d0 [ 43.019561][ T6] ? usb_match_id.part.0+0x15d/0x1b0 [ 43.024875][ T6] driver_probe_device+0x4c/0x1a0 [ 43.030019][ T6] __device_attach_driver+0x206/0x2e0 [ 43.035412][ T6] ? driver_allows_async_probing+0x170/0x170 [ 43.041422][ T6] bus_for_each_drv+0x15f/0x1e0 [ 43.046349][ T6] ? bus_for_each_dev+0x1d0/0x1d0 [ 43.051389][ T6] ? trace_hardirqs_on+0x2d/0x120 [ 43.056434][ T6] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 43.062245][ T6] __device_attach+0x1e4/0x530 [ 43.067034][ T6] ? device_driver_attach+0x210/0x210 [ 43.072416][ T6] ? kobject_uevent_env+0x2a7/0x1640 [ 43.077785][ T6] bus_probe_device+0x1e4/0x290 [ 43.082654][ T6] device_add+0xbd5/0x1e90 [ 43.087121][ T6] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 43.093373][ T6] usb_set_configuration+0x1019/0x1900 [ 43.098874][ T6] usb_generic_driver_probe+0xba/0x100 [ 43.104359][ T6] usb_probe_device+0xd4/0x2c0 [ 43.109257][ T6] ? usb_driver_release_interface+0x180/0x180 [ 43.115346][ T6] really_probe+0x249/0xb90 [ 43.119878][ T6] __driver_probe_device+0x1df/0x4d0 [ 43.125178][ T6] driver_probe_device+0x4c/0x1a0 [ 43.130224][ T6] __device_attach_driver+0x206/0x2e0 [ 43.135609][ T6] ? driver_allows_async_probing+0x170/0x170 [ 43.141649][ T6] bus_for_each_drv+0x15f/0x1e0 [ 43.146553][ T6] ? bus_for_each_dev+0x1d0/0x1d0 [ 43.151570][ T6] ? trace_hardirqs_on+0x2d/0x120 [ 43.156611][ T6] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 43.162436][ T6] __device_attach+0x1e4/0x530 [ 43.167279][ T6] ? device_driver_attach+0x210/0x210 [ 43.172666][ T6] ? kobject_uevent_env+0x2a7/0x1640 [ 43.177971][ T6] bus_probe_device+0x1e4/0x290 [ 43.182832][ T6] device_add+0xbd5/0x1e90 [ 43.187351][ T6] ? trace_hardirqs_on+0x2d/0x120 [ 43.192389][ T6] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 43.198705][ T6] ? add_device_randomness+0xb4/0xe0 [ 43.204001][ T6] usb_new_device.cold+0x685/0x10ad [ 43.209232][ T6] ? do_raw_spin_lock+0x120/0x2a0 [ 43.214264][ T6] ? hub_disconnect+0x510/0x510 [ 43.219125][ T6] ? rwlock_bug.part.0+0x90/0x90 [ 43.224073][ T6] hub_event+0x26c7/0x4610 [ 43.228582][ T6] ? hub_port_debounce+0x3b0/0x3b0 [ 43.233723][ T6] ? perf_trace_irq_matrix_cpu+0x5e0/0x950 [ 43.239550][ T6] ? lock_acquire+0x480/0x570 [ 43.244247][ T6] ? lock_release+0x780/0x780 [ 43.248950][ T6] ? lock_downgrade+0x6e0/0x6e0 [ 43.253807][ T6] ? do_raw_spin_lock+0x120/0x2a0 [ 43.258888][ T6] ? read_word_at_a_time+0xe/0x20 [ 43.263923][ T6] ? strscpy+0xa1/0x2a0 [ 43.268239][ T6] process_one_work+0x991/0x1610 [ 43.273210][ T6] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 43.278617][ T6] ? rwlock_bug.part.0+0x90/0x90 [ 43.283576][ T6] worker_thread+0x665/0x1080 [ 43.288343][ T6] ? process_one_work+0x1610/0x1610 [ 43.293564][ T6] kthread+0x2e4/0x3a0 [ 43.297655][ T6] ? kthread_complete_and_exit+0x40/0x40 [ 43.303297][ T6] ret_from_fork+0x1f/0x30 [ 43.307739][ T6] [ 43.310758][ T6] Kernel panic - not syncing: panic_on_warn set ... [ 43.317322][ T6] CPU: 0 PID: 6 Comm: kworker/0:0 Not tainted 6.0.0-rc3-next-20220901-syzkaller #0 [ 43.326581][ T6] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 43.336632][ T6] Workqueue: usb_hub_wq hub_event [ 43.341643][ T6] Call Trace: [ 43.344904][ T6] [ 43.347817][ T6] dump_stack_lvl+0xcd/0x134 [ 43.352394][ T6] panic+0x2c8/0x622 [ 43.356286][ T6] ? panic_print_sys_info.part.0+0x110/0x110 [ 43.362260][ T6] ? __warn.cold+0x248/0x2c4 [ 43.366837][ T6] ? usb_submit_urb+0xed2/0x1880 [ 43.371765][ T6] __warn.cold+0x259/0x2c4 [ 43.376182][ T6] ? __wake_up_klogd.part.0+0x99/0xf0 [ 43.381538][ T6] ? usb_submit_urb+0xed2/0x1880 [ 43.386464][ T6] report_bug+0x1bc/0x210 [ 43.390777][ T6] handle_bug+0x3c/0x60 [ 43.394921][ T6] exc_invalid_op+0x14/0x40 [ 43.399409][ T6] asm_exc_invalid_op+0x16/0x20 [ 43.404243][ T6] RIP: 0010:usb_submit_urb+0xed2/0x1880 [ 43.409775][ T6] Code: 7c 24 18 e8 b0 43 e9 fb 48 8b 7c 24 18 e8 a6 2e 03 ff 41 89 d8 44 89 e1 4c 89 ea 48 89 c6 48 c7 c7 40 70 90 8a e8 12 8c aa 03 <0f> 0b e9 58 f8 ff ff e8 82 43 e9 fb 48 81 c5 c0 05 00 00 e9 84 f7 [ 43.429368][ T6] RSP: 0018:ffffc900000b6d20 EFLAGS: 00010286 [ 43.435435][ T6] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 43.443400][ T6] RDX: ffff88813fe59d40 RSI: ffffffff81620448 RDI: fffff52000016d96 [ 43.451370][ T6] RBP: ffff88806f584940 R08: 0000000000000005 R09: 0000000000000000 [ 43.459334][ T6] R10: 0000000080000000 R11: 3a312d3120627375 R12: 0000000000000003 [ 43.467300][ T6] R13: ffff888020b8cd70 R14: 0000000000000003 R15: ffff888017942400 [ 43.475274][ T6] ? vprintk+0x88/0x90 [ 43.479354][ T6] sisusb_send_bulk_msg.constprop.0+0x904/0x1230 [ 43.485699][ T6] ? sisusb_recv_bulk_msg.constprop.0+0x850/0x850 [ 43.492121][ T6] ? usb_probe_interface+0x30b/0x7f0 [ 43.497419][ T6] ? really_probe+0x249/0xb90 [ 43.502104][ T6] ? __driver_probe_device+0x1df/0x4d0 [ 43.507567][ T6] ? driver_probe_device+0x4c/0x1a0 [ 43.512775][ T6] ? dev_printk_emit+0xba/0xf1 [ 43.517551][ T6] sisusb_init_gfxdevice+0x87b/0x4000 [ 43.522933][ T6] ? kthread+0x2e4/0x3a0 [ 43.527178][ T6] ? ret_from_fork+0x1f/0x30 [ 43.531779][ T6] ? __dev_printk+0xcf/0xf5 [ 43.536295][ T6] ? sisusb_set_default_mode+0xbc0/0xbc0 [ 43.541936][ T6] ? _dev_info+0xd7/0x109 [ 43.546275][ T6] ? _dev_notice+0x109/0x109 [ 43.550877][ T6] ? lockdep_init_map_type+0x21a/0x7f0 [ 43.556340][ T6] ? lockdep_init_map_type+0x21a/0x7f0 [ 43.561802][ T6] ? kobject_get+0xbc/0x150 [ 43.566317][ T6] sisusb_probe+0x9c9/0xbde [ 43.570827][ T6] usb_probe_interface+0x30b/0x7f0 [ 43.575956][ T6] ? usb_match_dynamic_id+0x1a0/0x1a0 [ 43.581345][ T6] really_probe+0x249/0xb90 [ 43.585863][ T6] __driver_probe_device+0x1df/0x4d0 [ 43.591153][ T6] ? usb_match_id.part.0+0x15d/0x1b0 [ 43.596450][ T6] driver_probe_device+0x4c/0x1a0 [ 43.601481][ T6] __device_attach_driver+0x206/0x2e0 [ 43.606864][ T6] ? driver_allows_async_probing+0x170/0x170 [ 43.612856][ T6] bus_for_each_drv+0x15f/0x1e0 [ 43.617709][ T6] ? bus_for_each_dev+0x1d0/0x1d0 [ 43.622734][ T6] ? trace_hardirqs_on+0x2d/0x120 [ 43.627758][ T6] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 43.633565][ T6] __device_attach+0x1e4/0x530 [ 43.638334][ T6] ? device_driver_attach+0x210/0x210 [ 43.643713][ T6] ? kobject_uevent_env+0x2a7/0x1640 [ 43.649006][ T6] bus_probe_device+0x1e4/0x290 [ 43.653869][ T6] device_add+0xbd5/0x1e90 [ 43.658294][ T6] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 43.664540][ T6] usb_set_configuration+0x1019/0x1900 [ 43.670016][ T6] usb_generic_driver_probe+0xba/0x100 [ 43.675484][ T6] usb_probe_device+0xd4/0x2c0 [ 43.680258][ T6] ? usb_driver_release_interface+0x180/0x180 [ 43.686336][ T6] really_probe+0x249/0xb90 [ 43.690866][ T6] __driver_probe_device+0x1df/0x4d0 [ 43.696163][ T6] driver_probe_device+0x4c/0x1a0 [ 43.701194][ T6] __device_attach_driver+0x206/0x2e0 [ 43.706573][ T6] ? driver_allows_async_probing+0x170/0x170 [ 43.712560][ T6] bus_for_each_drv+0x15f/0x1e0 [ 43.717413][ T6] ? bus_for_each_dev+0x1d0/0x1d0 [ 43.722438][ T6] ? trace_hardirqs_on+0x2d/0x120 [ 43.727461][ T6] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 43.733269][ T6] __device_attach+0x1e4/0x530 [ 43.738039][ T6] ? device_driver_attach+0x210/0x210 [ 43.743418][ T6] ? kobject_uevent_env+0x2a7/0x1640 [ 43.748712][ T6] bus_probe_device+0x1e4/0x290 [ 43.753570][ T6] device_add+0xbd5/0x1e90 [ 43.757990][ T6] ? trace_hardirqs_on+0x2d/0x120 [ 43.763014][ T6] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 43.769257][ T6] ? add_device_randomness+0xb4/0xe0 [ 43.774544][ T6] usb_new_device.cold+0x685/0x10ad [ 43.779744][ T6] ? do_raw_spin_lock+0x120/0x2a0 [ 43.784774][ T6] ? hub_disconnect+0x510/0x510 [ 43.789626][ T6] ? rwlock_bug.part.0+0x90/0x90 [ 43.794569][ T6] hub_event+0x26c7/0x4610 [ 43.798996][ T6] ? hub_port_debounce+0x3b0/0x3b0 [ 43.804109][ T6] ? perf_trace_irq_matrix_cpu+0x5e0/0x950 [ 43.809924][ T6] ? lock_acquire+0x480/0x570 [ 43.814603][ T6] ? lock_release+0x780/0x780 [ 43.819280][ T6] ? lock_downgrade+0x6e0/0x6e0 [ 43.824135][ T6] ? do_raw_spin_lock+0x120/0x2a0 [ 43.829165][ T6] ? read_word_at_a_time+0xe/0x20 [ 43.834195][ T6] ? strscpy+0xa1/0x2a0 [ 43.838354][ T6] process_one_work+0x991/0x1610 [ 43.843306][ T6] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 43.848685][ T6] ? rwlock_bug.part.0+0x90/0x90 [ 43.853633][ T6] worker_thread+0x665/0x1080 [ 43.858321][ T6] ? process_one_work+0x1610/0x1610 [ 43.863527][ T6] kthread+0x2e4/0x3a0 [ 43.867599][ T6] ? kthread_complete_and_exit+0x40/0x40 [ 43.873236][ T6] ret_from_fork+0x1f/0x30 [ 43.877664][ T6] [ 43.880825][ T6] Kernel Offset: disabled [ 43.885144][ T6] Rebooting in 86400 seconds..