./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor4240385847 <...> Warning: Permanently added '10.128.0.200' (ED25519) to the list of known hosts. execve("./syz-executor4240385847", ["./syz-executor4240385847"], 0x7ffe4aebff40 /* 10 vars */) = 0 brk(NULL) = 0x55558f260000 brk(0x55558f260d00) = 0x55558f260d00 arch_prctl(ARCH_SET_FS, 0x55558f260380) = 0 set_tid_address(0x55558f260650) = 5084 set_robust_list(0x55558f260660, 24) = 0 rseq(0x55558f260ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor4240385847", 4096) = 28 getrandom("\x0d\x0d\x53\xa1\x5f\x52\x07\x35", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55558f260d00 brk(0x55558f281d00) = 0x55558f281d00 brk(0x55558f282000) = 0x55558f282000 mprotect(0x7f3d478e2000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffe33c5fc20) = 0 ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe33c5fc20) = 0 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe33c5fc20) = 0 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe33c5fc20) = 0 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe33c5fc20) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffe33c5ec10) = 18 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe33c5fc20) = 0 [ 56.993945][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe33c5fc20) = 0 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe33c5fc20) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffe33c5ec10) = 18 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe33c5fc20) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffe33c5ec10) = 9 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe33c5fc20) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffe33c5ec10) = 36 [ 57.353852][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 57.365508][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 57.376680][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 57.389599][ T24] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe33c5fc20) = 0 ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [ 57.398780][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.410132][ T24] usb 1-1: config 0 descriptor?? ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f3d478e83ec) = -1 EINVAL (Invalid argument) ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffe33c5ec10) = 0 [ 57.467588][ T5084] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe33c5fc50) = 0 ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffe33c5ec40) = 0 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe33c5fc50) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffe33c5ec40) = 15 [ 57.968066][ T24] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xd [ 57.977188][ T24] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 57.991456][ T24] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 openat(AT_FDCWD, "/dev/usb/hiddev0", O_RDONLY|O_EXCL|O_NONBLOCK|O_NOFOLLOW) = 4 ioctl(4, HIDIOCSUSAGES, 0x200000c0) = 0 openat(AT_FDCWD, "/dev/usb/hiddev0", O_RDONLY) = 5 [ 58.267464][ T5084] plantronics 0003:047F:FFFF.0001: implement() called with too large value 4 (n: 0)! (syz-executor424) [ 58.278931][ T5084] ------------[ cut here ]------------ [ 58.284387][ T5084] WARNING: CPU: 0 PID: 5084 at drivers/hid/hid-core.c:1451 hid_output_report+0x548/0x760 [ 58.294206][ T5084] Modules linked in: [ 58.298698][ T5084] CPU: 0 PID: 5084 Comm: syz-executor424 Not tainted 6.9.0-rc7-syzkaller-00183-gcf87f46fd34d #0 [ 58.309104][ T5084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 58.319175][ T5084] RIP: 0010:hid_output_report+0x548/0x760 [ 58.324905][ T5084] Code: a8 08 00 00 48 8b 44 24 40 48 8d b8 38 19 00 00 48 c7 c6 40 cf ab 8c 48 c7 c2 1a 67 ca 8d 44 89 f1 45 89 e8 e8 79 0c cb 02 90 <0f> 0b 90 44 23 74 24 18 e9 b7 fd ff ff 89 d9 80 e1 07 80 c1 03 38 [ 58.344772][ T5084] RSP: 0018:ffffc90002e4fbf0 EFLAGS: 00010046 [ 58.350827][ T5084] RAX: d26acac285684c00 RBX: 0000000000000000 RCX: d26acac285684c00 [ 58.358784][ T5084] RDX: 0000000000000000 RSI: 0000000080000001 RDI: 0000000000000000 [ 58.366740][ T5084] RBP: 0000000000000000 R08: ffffffff8176ae9c R09: 1ffff920005c9ed4 [ 58.374715][ T5084] R10: dffffc0000000000 R11: fffff520005c9ed5 R12: 0000000000000000 [ 58.382671][ T5084] R13: 0000000000000000 R14: 0000000000000004 R15: 0000000000000000 [ 58.390652][ T5084] FS: 000055558f260380(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 58.399589][ T5084] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.406170][ T5084] CR2: 0000000020001000 CR3: 000000001e3c6000 CR4: 00000000003506f0 [ 58.414147][ T5084] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 58.422106][ T5084] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 58.430149][ T5084] Call Trace: [ 58.433426][ T5084] [ 58.436343][ T5084] ? __warn+0x163/0x4e0 [ 58.440493][ T5084] ? hid_output_report+0x548/0x760 [ 58.445594][ T5084] ? report_bug+0x2b3/0x500 [ 58.450095][ T5084] ? hid_output_report+0x548/0x760 [ 58.455193][ T5084] ? handle_bug+0x3e/0x70 [ 58.459507][ T5084] ? exc_invalid_op+0x1a/0x50 [ 58.464173][ T5084] ? asm_exc_invalid_op+0x1a/0x20 [ 58.469189][ T5084] ? __wake_up_klogd+0xcc/0x110 [ 58.474029][ T5084] ? hid_output_report+0x548/0x760 [ 58.479128][ T5084] ? __kmalloc+0x251/0x4a0 [ 58.483535][ T5084] usbhid_submit_report+0x43d/0x9e0 [ 58.488727][ T5084] hiddev_ioctl+0x138b/0x1f00 [ 58.493422][ T5084] ? __pfx_hiddev_ioctl+0x10/0x10 [ 58.498457][ T5084] ? bpf_lsm_file_ioctl+0x9/0x10 [ 58.503388][ T5084] ? security_file_ioctl+0x87/0xb0 [ 58.508500][ T5084] ? __pfx_hiddev_ioctl+0x10/0x10 [ 58.513518][ T5084] __se_sys_ioctl+0xfc/0x170 [ 58.518119][ T5084] do_syscall_64+0xf5/0x240 [ 58.522620][ T5084] ? clear_bhb_loop+0x35/0x90 [ 58.527288][ T5084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.533165][ T5084] RIP: 0033:0x7f3d4786f399 [ 58.537567][ T5084] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 31 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 58.557161][ T5084] RSP: 002b:00007ffe33c60c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 58.565560][ T5084] RAX: ffffffffffffffda RBX: 00007ffe33c60e48 RCX: 00007f3d4786f399 [ 58.573514][ T5084] RDX: 00000000200000c0 RSI: 00000000400c4808 RDI: 0000000000000005 [ 58.581553][ T5084] RBP: 00007f3d478e2610 R08: 00007ffe33c60e48 R09: 00007ffe33c60e48 [ 58.589527][ T5084] R10: 000000000000001f R11: 0000000000000246 R12: 0000000000000001 [ 58.597504][ T5084] R13: 00007ffe33c60e38 R14: 0000000000000001 R15: 0000000000000001 [ 58.605485][ T5084] [ 58.608493][ T5084] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 58.615753][ T5084] CPU: 0 PID: 5084 Comm: syz-executor424 Not tainted 6.9.0-rc7-syzkaller-00183-gcf87f46fd34d #0 [ 58.626144][ T5084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 58.636195][ T5084] Call Trace: [ 58.639460][ T5084] [ 58.642379][ T5084] dump_stack_lvl+0x241/0x360 [ 58.647053][ T5084] ? __pfx_dump_stack_lvl+0x10/0x10 [ 58.652236][ T5084] ? __pfx__printk+0x10/0x10 [ 58.656811][ T5084] ? _printk+0xd5/0x120 [ 58.660955][ T5084] ? vscnprintf+0x5d/0x90 [ 58.665271][ T5084] panic+0x349/0x860 [ 58.669180][ T5084] ? __warn+0x172/0x4e0 [ 58.673322][ T5084] ? __pfx_panic+0x10/0x10 [ 58.677723][ T5084] ? show_trace_log_lvl+0x4e6/0x520 [ 58.682919][ T5084] __warn+0x346/0x4e0 [ 58.686890][ T5084] ? hid_output_report+0x548/0x760 [ 58.691987][ T5084] report_bug+0x2b3/0x500 [ 58.696301][ T5084] ? hid_output_report+0x548/0x760 [ 58.701403][ T5084] handle_bug+0x3e/0x70 [ 58.705549][ T5084] exc_invalid_op+0x1a/0x50 [ 58.710210][ T5084] asm_exc_invalid_op+0x1a/0x20 [ 58.715044][ T5084] RIP: 0010:hid_output_report+0x548/0x760 [ 58.720745][ T5084] Code: a8 08 00 00 48 8b 44 24 40 48 8d b8 38 19 00 00 48 c7 c6 40 cf ab 8c 48 c7 c2 1a 67 ca 8d 44 89 f1 45 89 e8 e8 79 0c cb 02 90 <0f> 0b 90 44 23 74 24 18 e9 b7 fd ff ff 89 d9 80 e1 07 80 c1 03 38 [ 58.740340][ T5084] RSP: 0018:ffffc90002e4fbf0 EFLAGS: 00010046 [ 58.746450][ T5084] RAX: d26acac285684c00 RBX: 0000000000000000 RCX: d26acac285684c00 [ 58.754414][ T5084] RDX: 0000000000000000 RSI: 0000000080000001 RDI: 0000000000000000 [ 58.762391][ T5084] RBP: 0000000000000000 R08: ffffffff8176ae9c R09: 1ffff920005c9ed4 [ 58.770367][ T5084] R10: dffffc0000000000 R11: fffff520005c9ed5 R12: 0000000000000000 [ 58.778348][ T5084] R13: 0000000000000000 R14: 0000000000000004 R15: 0000000000000000 [ 58.786316][ T5084] ? __wake_up_klogd+0xcc/0x110 [ 58.791168][ T5084] ? __kmalloc+0x251/0x4a0 [ 58.795571][ T5084] usbhid_submit_report+0x43d/0x9e0 [ 58.800764][ T5084] hiddev_ioctl+0x138b/0x1f00 [ 58.805425][ T5084] ? __pfx_hiddev_ioctl+0x10/0x10 [ 58.810444][ T5084] ? bpf_lsm_file_ioctl+0x9/0x10 [ 58.815387][ T5084] ? security_file_ioctl+0x87/0xb0 [ 58.820483][ T5084] ? __pfx_hiddev_ioctl+0x10/0x10 [ 58.825490][ T5084] __se_sys_ioctl+0xfc/0x170 [ 58.830065][ T5084] do_syscall_64+0xf5/0x240 [ 58.834555][ T5084] ? clear_bhb_loop+0x35/0x90 [ 58.839216][ T5084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.845093][ T5084] RIP: 0033:0x7f3d4786f399 [ 58.849491][ T5084] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 31 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 58.869080][ T5084] RSP: 002b:00007ffe33c60c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 58.877588][ T5084] RAX: ffffffffffffffda RBX: 00007ffe33c60e48 RCX: 00007f3d4786f399 [ 58.885548][ T5084] RDX: 00000000200000c0 RSI: 00000000400c4808 RDI: 0000000000000005 [ 58.893589][ T5084] RBP: 00007f3d478e2610 R08: 00007ffe33c60e48 R09: 00007ffe33c60e48 [ 58.901599][ T5084] R10: 000000000000001f R11: 0000000000000246 R12: 0000000000000001 [ 58.909608][ T5084] R13: 00007ffe33c60e38 R14: 0000000000000001 R15: 0000000000000001 [ 58.917568][ T5084] [ 58.920991][ T5084] Kernel Offset: disabled [ 58.925349][ T5084] Rebooting in 86400 seconds..