./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3939841483
<...>
Warning: Permanently added '10.128.1.25' (ED25519) to the list of known hosts.
execve("./syz-executor3939841483", ["./syz-executor3939841483"], 0x7ffe2c90a5d0 /* 10 vars */) = 0
brk(NULL) = 0x55556d23f000
brk(0x55556d23fd00) = 0x55556d23fd00
arch_prctl(ARCH_SET_FS, 0x55556d23f380) = 0
set_tid_address(0x55556d23f650) = 5228
set_robust_list(0x55556d23f660, 24) = 0
rseq(0x55556d23fca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor3939841483", 4096) = 28
getrandom("\x25\x5d\x89\xd6\xcb\xd5\x67\x3f", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x55556d23fd00
brk(0x55556d260d00) = 0x55556d260d00
brk(0x55556d261000) = 0x55556d261000
mprotect(0x7fad2c6e7000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556d23f650) = 5229
./strace-static-x86_64: Process 5229 attached
[pid 5229] set_robust_list(0x55556d23f660, 24) = 0
[pid 5229] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5229] setpgid(0, 0) = 0
[pid 5229] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5229] write(3, "1000", 4) = 4
[pid 5229] close(3) = 0
[pid 5229] write(1, "executing program\n", 18executing program
) = 18
[pid 5229] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3
[pid 5229] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffe3dbc8810) = 0
[pid 5229] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0
[pid 5229] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe3dbc8810) = 0
[pid 5229] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe3dbc8810) = 0
[pid 5229] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe3dbc8810) = 0
[pid 5229] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe3dbc8810) = 0
[pid 5229] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffe3dbc7800) = 18
[pid 5229] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe3dbc8810) = 0
[ 79.855197][ T941] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[pid 5229] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe3dbc8810) = 0
[pid 5229] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe3dbc8810) = 0
[pid 5229] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffe3dbc7800) = 18
[pid 5229] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe3dbc8810) = 0
[pid 5229] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffe3dbc7800) = 9
[pid 5229] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe3dbc8810) = 0
[pid 5229] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffe3dbc7800) = 18
[pid 5229] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe3dbc8810) = 0
[pid 5229] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0
[pid 5229] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0
[pid 5229] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffe3dbc7800) = 0
[ 80.081157][ T941] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e
[ 80.090455][ T941] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 80.102067][ T941] usb 1-1: config 0 descriptor??
[pid 5229] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe3dbc8830) = 0
[pid 5229] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffe3dbc7820) = 4
[pid 5229] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe3dbc8830) = 0
[pid 5229] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffe3dbc7820) = 8
[pid 5229] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe3dbc8830) = 0
[pid 5229] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffe3dbc7820) = 0
[ 80.729375][ T941] ------------[ cut here ]------------
[ 80.735136][ T941] WARNING: CPU: 0 PID: 941 at drivers/net/wireless/ath/ath6kl/bmi.c:90 ath6kl_bmi_get_target_info+0x44a/0x590
[ 80.735190][ T941] Modules linked in:
[ 80.735213][ T941] CPU: 0 UID: 0 PID: 941 Comm: kworker/0:2 Not tainted 6.10.0-next-20240726-syzkaller #0
[ 80.735230][ T941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 80.735240][ T941] Workqueue: usb_hub_wq hub_event
[ 80.735263][ T941] RIP: 0010:ath6kl_bmi_get_target_info+0x44a/0x590
[ 80.735288][ T941] Code: 04 30 84 c0 0f 85 3a 01 00 00 48 8b 44 24 08 8b 30 48 c7 c7 e0 50 a4 8c 89 da e8 a1 1b fe ff e9 04 fe ff ff e8 e7 62 c9 fa 90 <0f> 0b 90 bb ea ff ff ff e9 f1 fd ff ff e8 d4 62 c9 fa 31 db e9 e5
[ 80.735305][ T941] RSP: 0018:ffffc90003f3eb60 EFLAGS: 00010293
[ 80.735318][ T941] RAX: ffffffff86ca6839 RBX: 0000000000000000 RCX: ffff888021800000
[ 80.735329][ T941] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000c
[ 80.735338][ T941] RBP: ffffc90003f3ec30 R08: ffffffff86ca6790 R09: 1ffffffff26e6f0e
[ 80.735350][ T941] R10: dffffc0000000000 R11: fffffbfff26e6f0f R12: ffffc90003f3ece4
[ 80.735361][ T941] R13: ffff88807d9e0e40 R14: dffffc0000000000 R15: 1ffff920007e7d74
[ 80.735373][ T941] FS: 0000000000000000(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000
[ 80.735385][ T941] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 80.735396][ T941] CR2: 00007fad2c6eb0f0 CR3: 0000000011f0e000 CR4: 00000000003506f0
[ 80.735408][ T941] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 80.735417][ T941] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 80.735427][ T941] Call Trace:
[ 80.735433][ T941]
[ 80.735439][ T941] ? __warn+0x168/0x4e0
[ 80.735456][ T941] ? ath6kl_bmi_get_target_info+0x44a/0x590
[ 80.735483][ T941] ? report_bug+0x2b3/0x500
[ 80.735507][ T941] ? ath6kl_bmi_get_target_info+0x44a/0x590
[ 80.735535][ T941] ? handle_bug+0x3e/0x70
[ 80.735549][ T941] ? exc_invalid_op+0x1a/0x50
[ 80.735565][ T941] ? asm_exc_invalid_op+0x1a/0x20
[ 80.735586][ T941] ? ath6kl_bmi_get_target_info+0x3a0/0x590
[ 80.735608][ T941] ? ath6kl_bmi_get_target_info+0x449/0x590
[ 80.735634][ T941] ? ath6kl_bmi_get_target_info+0x44a/0x590
[ 80.735665][ T941] ? __pfx_ath6kl_bmi_get_target_info+0x10/0x10
[ 80.735688][ T941] ? ath6kl_bmi_init+0x6d/0xf0
[ 80.735701][ T941] ? __kmalloc_noprof+0x21a/0x400
[ 80.735728][ T941] ath6kl_core_init+0x1eb/0x1140
[ 80.735752][ T941] ? __pfx_lockdep_init_map_type+0x10/0x10
[ 80.735780][ T941] ? __kasan_kmalloc+0x98/0xb0
[ 80.735797][ T941] ? __pfx_ath6kl_core_init+0x10/0x10
[ 80.735818][ T941] ? ath6kl_core_create+0x7d8/0x950
[ 80.735853][ T941] ath6kl_usb_probe+0x129b/0x1390
[ 80.735878][ T941] ? _raw_spin_unlock_irqrestore+0xdd/0x140
[ 80.735903][ T941] ? usb_disable_lpm+0x77/0x380
[ 80.735927][ T941] usb_probe_interface+0x645/0xbb0
[ 80.735960][ T941] ? __pfx_usb_probe_interface+0x10/0x10
[ 80.735982][ T941] really_probe+0x2b8/0xad0
[ 80.736008][ T941] __driver_probe_device+0x1a2/0x390
[ 80.736029][ T941] driver_probe_device+0x50/0x430
[ 80.736049][ T941] __device_attach_driver+0x2d6/0x530
[ 80.736070][ T941] bus_for_each_drv+0x24e/0x2e0
[ 80.736093][ T941] ? __pfx___device_attach_driver+0x10/0x10
[ 80.736112][ T941] ? __pfx_bus_for_each_drv+0x10/0x10
[ 80.736142][ T941] __device_attach+0x333/0x520
[ 80.736159][ T941] ? __pfx_lock_release+0x10/0x10
[ 80.736183][ T941] ? __pfx___device_attach+0x10/0x10
[ 80.736201][ T941] ? do_raw_spin_unlock+0x13c/0x8b0
[ 80.736227][ T941] bus_probe_device+0x189/0x260
[ 80.736252][ T941] device_add+0x856/0xbf0
[ 80.736273][ T941] usb_set_configuration+0x1976/0x1fb0
[ 80.736313][ T941] usb_generic_driver_probe+0x88/0x140
[ 80.736334][ T941] usb_probe_device+0x1b8/0x380
[ 80.736358][ T941] ? __pfx_usb_probe_device+0x10/0x10
[ 80.736379][ T941] really_probe+0x2b8/0xad0
[ 80.736404][ T941] __driver_probe_device+0x1a2/0x390
[ 80.736425][ T941] driver_probe_device+0x50/0x430
[ 80.736446][ T941] __device_attach_driver+0x2d6/0x530
[ 80.736467][ T941] bus_for_each_drv+0x24e/0x2e0
[ 80.736489][ T941] ? __pfx___device_attach_driver+0x10/0x10
[ 80.736508][ T941] ? __pfx_bus_for_each_drv+0x10/0x10
[ 80.736538][ T941] __device_attach+0x333/0x520
[ 80.736559][ T941] ? __pfx___device_attach+0x10/0x10
[ 80.736585][ T941] bus_probe_device+0x189/0x260
[ 80.736610][ T941] device_add+0x856/0xbf0
[ 80.736630][ T941] usb_new_device+0x104a/0x19a0
[ 80.736663][ T941] ? __pfx_usb_new_device+0x10/0x10
[ 80.736684][ T941] ? _raw_spin_unlock_irq+0x23/0x50
[ 80.736704][ T941] ? lockdep_hardirqs_on+0x99/0x150
[ 80.736728][ T941] hub_event+0x2d6d/0x5150
[ 80.736787][ T941] ? __pfx_hub_event+0x10/0x10
[ 80.736811][ T941] ? __pfx_lock_acquire+0x10/0x10
[ 80.736838][ T941] ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 80.736862][ T941] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 80.736893][ T941] ? process_scheduled_works+0x945/0x1830
[ 80.736913][ T941] process_scheduled_works+0xa2c/0x1830
[ 80.736956][ T941] ? __pfx_process_scheduled_works+0x10/0x10
[ 80.736984][ T941] ? assign_work+0x364/0x3d0
[ 80.737009][ T941] worker_thread+0x86d/0xd40
[ 80.737037][ T941] ? _raw_spin_unlock_irqrestore+0xdd/0x140
[ 80.737061][ T941] ? __kthread_parkme+0x169/0x1d0
[ 80.737086][ T941] ? __pfx_worker_thread+0x10/0x10
[ 80.737107][ T941] kthread+0x2f0/0x390
[ 80.737121][ T941] ? __pfx_worker_thread+0x10/0x10
[ 80.737141][ T941] ? __pfx_kthread+0x10/0x10
[ 80.737157][ T941] ret_from_fork+0x4b/0x80
[ 80.737178][ T941] ? __pfx_kthread+0x10/0x10
[ 80.737192][ T941] ret_from_fork_asm+0x1a/0x30
[ 80.737226][ T941]
[ 80.737236][ T941] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 81.284777][ T941] CPU: 0 UID: 0 PID: 941 Comm: kworker/0:2 Not tainted 6.10.0-next-20240726-syzkaller #0
[ 81.294586][ T941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 81.304642][ T941] Workqueue: usb_hub_wq hub_event
[ 81.309702][ T941] Call Trace:
[ 81.312989][ T941]
[ 81.315954][ T941] dump_stack_lvl+0x241/0x360
[ 81.320686][ T941] ? __pfx_dump_stack_lvl+0x10/0x10
[ 81.325908][ T941] ? __pfx__printk+0x10/0x10
[ 81.330522][ T941] ? vscnprintf+0x5d/0x90
[ 81.334965][ T941] panic+0x349/0x870
[ 81.338874][ T941] ? __warn+0x177/0x4e0
[ 81.343031][ T941] ? __pfx_panic+0x10/0x10
[ 81.347462][ T941] ? ret_from_fork_asm+0x1a/0x30
[ 81.352408][ T941] __warn+0x34b/0x4e0
[ 81.356477][ T941] ? ath6kl_bmi_get_target_info+0x44a/0x590
[ 81.362386][ T941] report_bug+0x2b3/0x500
[ 81.366722][ T941] ? ath6kl_bmi_get_target_info+0x44a/0x590
[ 81.372642][ T941] handle_bug+0x3e/0x70
[ 81.376830][ T941] exc_invalid_op+0x1a/0x50
[ 81.381341][ T941] asm_exc_invalid_op+0x1a/0x20
[ 81.386190][ T941] RIP: 0010:ath6kl_bmi_get_target_info+0x44a/0x590
[ 81.392737][ T941] Code: 04 30 84 c0 0f 85 3a 01 00 00 48 8b 44 24 08 8b 30 48 c7 c7 e0 50 a4 8c 89 da e8 a1 1b fe ff e9 04 fe ff ff e8 e7 62 c9 fa 90 <0f> 0b 90 bb ea ff ff ff e9 f1 fd ff ff e8 d4 62 c9 fa 31 db e9 e5
[ 81.412534][ T941] RSP: 0018:ffffc90003f3eb60 EFLAGS: 00010293
[ 81.418616][ T941] RAX: ffffffff86ca6839 RBX: 0000000000000000 RCX: ffff888021800000
[ 81.426595][ T941] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000c
[ 81.434566][ T941] RBP: ffffc90003f3ec30 R08: ffffffff86ca6790 R09: 1ffffffff26e6f0e
[ 81.442579][ T941] R10: dffffc0000000000 R11: fffffbfff26e6f0f R12: ffffc90003f3ece4
[ 81.450562][ T941] R13: ffff88807d9e0e40 R14: dffffc0000000000 R15: 1ffff920007e7d74
[ 81.458559][ T941] ? ath6kl_bmi_get_target_info+0x3a0/0x590
[ 81.464463][ T941] ? ath6kl_bmi_get_target_info+0x449/0x590
[ 81.470398][ T941] ? __pfx_ath6kl_bmi_get_target_info+0x10/0x10
[ 81.476658][ T941] ? ath6kl_bmi_init+0x6d/0xf0
[ 81.481427][ T941] ? __kmalloc_noprof+0x21a/0x400
[ 81.486484][ T941] ath6kl_core_init+0x1eb/0x1140
[ 81.491437][ T941] ? __pfx_lockdep_init_map_type+0x10/0x10
[ 81.497262][ T941] ? __kasan_kmalloc+0x98/0xb0
[ 81.502048][ T941] ? __pfx_ath6kl_core_init+0x10/0x10
[ 81.507445][ T941] ? ath6kl_core_create+0x7d8/0x950
[ 81.512669][ T941] ath6kl_usb_probe+0x129b/0x1390
[ 81.517728][ T941] ? _raw_spin_unlock_irqrestore+0xdd/0x140
[ 81.523653][ T941] ? usb_disable_lpm+0x77/0x380
[ 81.528522][ T941] usb_probe_interface+0x645/0xbb0
[ 81.533688][ T941] ? __pfx_usb_probe_interface+0x10/0x10
[ 81.539345][ T941] really_probe+0x2b8/0xad0
[ 81.543871][ T941] __driver_probe_device+0x1a2/0x390
[ 81.549173][ T941] driver_probe_device+0x50/0x430
[ 81.554214][ T941] __device_attach_driver+0x2d6/0x530
[ 81.559598][ T941] bus_for_each_drv+0x24e/0x2e0
[ 81.564467][ T941] ? __pfx___device_attach_driver+0x10/0x10
[ 81.570386][ T941] ? __pfx_bus_for_each_drv+0x10/0x10
[ 81.575791][ T941] __device_attach+0x333/0x520
[ 81.580565][ T941] ? __pfx_lock_release+0x10/0x10
[ 81.585694][ T941] ? __pfx___device_attach+0x10/0x10
[ 81.590987][ T941] ? do_raw_spin_unlock+0x13c/0x8b0
[ 81.596217][ T941] bus_probe_device+0x189/0x260
[ 81.601082][ T941] device_add+0x856/0xbf0
[ 81.605431][ T941] usb_set_configuration+0x1976/0x1fb0
[ 81.610921][ T941] usb_generic_driver_probe+0x88/0x140
[ 81.616388][ T941] usb_probe_device+0x1b8/0x380
[ 81.621246][ T941] ? __pfx_usb_probe_device+0x10/0x10
[ 81.626632][ T941] really_probe+0x2b8/0xad0
[ 81.631150][ T941] __driver_probe_device+0x1a2/0x390
[ 81.636448][ T941] driver_probe_device+0x50/0x430
[ 81.641481][ T941] __device_attach_driver+0x2d6/0x530
[ 81.646862][ T941] bus_for_each_drv+0x24e/0x2e0
[ 81.651718][ T941] ? __pfx___device_attach_driver+0x10/0x10
[ 81.657615][ T941] ? __pfx_bus_for_each_drv+0x10/0x10
[ 81.663005][ T941] __device_attach+0x333/0x520
[ 81.667778][ T941] ? __pfx___device_attach+0x10/0x10
[ 81.673248][ T941] bus_probe_device+0x189/0x260
[ 81.678194][ T941] device_add+0x856/0xbf0
[ 81.682529][ T941] usb_new_device+0x104a/0x19a0
[ 81.687401][ T941] ? __pfx_usb_new_device+0x10/0x10
[ 81.692610][ T941] ? _raw_spin_unlock_irq+0x23/0x50
[ 81.697816][ T941] ? lockdep_hardirqs_on+0x99/0x150
[ 81.703034][ T941] hub_event+0x2d6d/0x5150
[ 81.707516][ T941] ? __pfx_hub_event+0x10/0x10
[ 81.712291][ T941] ? __pfx_lock_acquire+0x10/0x10
[ 81.717327][ T941] ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 81.723314][ T941] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 81.729658][ T941] ? process_scheduled_works+0x945/0x1830
[ 81.735386][ T941] process_scheduled_works+0xa2c/0x1830
[ 81.740961][ T941] ? __pfx_process_scheduled_works+0x10/0x10
[ 81.746957][ T941] ? assign_work+0x364/0x3d0
[ 81.751577][ T941] worker_thread+0x86d/0xd40
[ 81.756189][ T941] ? _raw_spin_unlock_irqrestore+0xdd/0x140
[ 81.762093][ T941] ? __kthread_parkme+0x169/0x1d0
[ 81.767124][ T941] ? __pfx_worker_thread+0x10/0x10
[ 81.772242][ T941] kthread+0x2f0/0x390
[ 81.776311][ T941] ? __pfx_worker_thread+0x10/0x10
[ 81.781447][ T941] ? __pfx_kthread+0x10/0x10
[ 81.786042][ T941] ret_from_fork+0x4b/0x80
[ 81.790468][ T941] ? __pfx_kthread+0x10/0x10
[ 81.795072][ T941] ret_from_fork_asm+0x1a/0x30
[ 81.799864][ T941]
[ 81.803202][ T941] Kernel Offset: disabled
[ 81.807593][ T941] Rebooting in 86400 seconds..