./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2029192372 <...> Warning: Permanently added '10.128.15.221' (ED25519) to the list of known hosts. execve("./syz-executor2029192372", ["./syz-executor2029192372"], 0x7fff67559cb0 /* 10 vars */) = 0 brk(NULL) = 0x555556a29000 brk(0x555556a29d00) = 0x555556a29d00 arch_prctl(ARCH_SET_FS, 0x555556a29380) = 0 set_tid_address(0x555556a29650) = 5031 set_robust_list(0x555556a29660, 24) = 0 rseq(0x555556a29ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2029192372", 4096) = 28 getrandom("\xc2\x1c\xc0\xeb\xf2\x2e\x11\xd3", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555556a29d00 brk(0x555556a4ad00) = 0x555556a4ad00 brk(0x555556a4b000) = 0x555556a4b000 mprotect(0x7f2d5c7cb000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5032 attached , child_tidptr=0x555556a29650) = 5032 [pid 5032] set_robust_list(0x555556a29660, 24) = 0 [pid 5032] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 5032] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5032] setsid() = 1 [pid 5032] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5032] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5032] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5032] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5032] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5032] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5032] unshare(CLONE_NEWNS) = 0 [pid 5032] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5032] unshare(CLONE_NEWIPC) = 0 [pid 5032] unshare(CLONE_NEWCGROUP) = 0 [pid 5032] unshare(CLONE_NEWUTS) = 0 [pid 5032] unshare(CLONE_SYSVSEM) = 0 [pid 5032] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5032] write(3, "16777216", 8) = 8 [pid 5032] close(3) = 0 [pid 5032] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5032] write(3, "536870912", 9) = 9 [pid 5032] close(3) = 0 [pid 5032] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5032] write(3, "1024", 4) = 4 [pid 5032] close(3) = 0 [pid 5032] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5032] write(3, "8192", 4) = 4 [pid 5032] close(3) = 0 [pid 5032] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5032] write(3, "1024", 4) = 4 [pid 5032] close(3) = 0 [pid 5032] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5032] write(3, "1024", 4) = 4 [pid 5032] close(3) = 0 [pid 5032] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5032] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5032] close(3) = 0 [pid 5032] getpid() = 1 [pid 5032] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< 0b e9 a7 f8 ff ff e8 96 47 48 fb 49 81 c4 c0 05 00 00 e9 d2 f7 [ 77.545882][ T22] RSP: 0018:ffffc900001c6f30 EFLAGS: 00010282 [ 77.552016][ T22] RAX: 0000000000000000 RBX: ffff8880204e9c00 RCX: 0000000000000000 [ 77.560186][ T22] RDX: ffff888017663b80 RSI: ffffffff814d59e6 RDI: 0000000000000001 [ 77.568380][ T22] RBP: 0000000000000003 R08: 0000000000000001 R09: 0000000000000000 [ 77.576483][ T22] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000001 [ 77.584572][ T22] R13: ffff88802166d0a8 R14: ffff8880153cb438 R15: 0000000000000003 [ 77.592646][ T22] FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 77.601671][ T22] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 77.608351][ T22] CR2: 000055febc5570a8 CR3: 0000000071153000 CR4: 00000000003506e0 [ 77.616388][ T22] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 77.624398][ T22] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 77.632467][ T22] Call Trace: [ 77.635818][ T22] [ 77.638777][ T22] ? __warn+0xe6/0x380 [ 77.642870][ T22] ? usb_submit_urb+0xe8e/0x1820 [ 77.647912][ T22] ? report_bug+0x3bc/0x580 [ 77.652472][ T22] ? handle_bug+0x3c/0x70 [ 77.656885][ T22] ? exc_invalid_op+0x17/0x40 [ 77.661614][ T22] ? asm_exc_invalid_op+0x1a/0x20 [ 77.666783][ T22] ? __warn_printk+0x1a6/0x350 [ 77.671604][ T22] ? usb_submit_urb+0xe8e/0x1820 [ 77.676669][ T22] ? __kmalloc+0x90/0x100 [ 77.681148][ T22] ar5523_submit_rx_cmd+0x1f1/0x360 [ 77.686476][ T22] ? usb_alloc_coherent+0x67/0x90 [ 77.691569][ T22] ar5523_probe+0xc15/0x36a0 [ 77.696291][ T22] ? ar5523_hwconfig+0x130/0x130 [ 77.701299][ T22] ? mark_held_locks+0x9f/0xe0 [ 77.706208][ T22] ? _raw_spin_unlock_irqrestore+0x4e/0x70 [ 77.712076][ T22] ? lockdep_hardirqs_on+0x7d/0x100 [ 77.717365][ T22] ? _raw_spin_unlock_irqrestore+0x3b/0x70 [ 77.723313][ T22] ? __pm_runtime_set_status+0x45a/0xd20 [ 77.729055][ T22] usb_probe_interface+0x307/0x930 [ 77.734225][ T22] ? usb_match_dynamic_id+0x1a0/0x1a0 [ 77.739673][ T22] really_probe+0x234/0xc90 [ 77.744221][ T22] __driver_probe_device+0x1de/0x4b0 [ 77.749623][ T22] driver_probe_device+0x4c/0x1a0 [ 77.754702][ T22] __device_attach_driver+0x1d4/0x300 [ 77.760291][ T22] ? driver_probe_device+0x1a0/0x1a0 [ 77.765618][ T22] bus_for_each_drv+0x157/0x1d0 [ 77.770590][ T22] ? bus_for_each_dev+0x1d0/0x1d0 [ 77.775684][ T22] ? lockdep_hardirqs_on+0x7d/0x100 [ 77.780957][ T22] ? _raw_spin_unlock_irqrestore+0x3b/0x70 [ 77.786894][ T22] __device_attach+0x1e8/0x4b0 [ 77.791703][ T22] ? device_driver_attach+0x200/0x200 [ 77.797144][ T22] ? do_raw_spin_unlock+0x173/0x230 [ 77.802403][ T22] bus_probe_device+0x17c/0x1c0 [ 77.807354][ T22] device_add+0x11f1/0x1b40 [ 77.811922][ T22] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 77.818921][ T22] usb_set_configuration+0x10cb/0x1c40 [ 77.824477][ T22] usb_generic_driver_probe+0xca/0x130 [ 77.830116][ T22] usb_probe_device+0xda/0x2c0 [ 77.834945][ T22] ? usb_driver_release_interface+0x190/0x190 [ 77.841488][ T22] really_probe+0x234/0xc90 [ 77.846113][ T22] __driver_probe_device+0x1de/0x4b0 [ 77.851457][ T22] ? usb_driver_applicable+0x1c4/0x220 [ 77.857023][ T22] driver_probe_device+0x4c/0x1a0 [ 77.862095][ T22] __device_attach_driver+0x1d4/0x300 [ 77.867566][ T22] ? driver_probe_device+0x1a0/0x1a0 [ 77.872893][ T22] bus_for_each_drv+0x157/0x1d0 [ 77.877864][ T22] ? bus_for_each_dev+0x1d0/0x1d0 [ 77.882959][ T22] ? lockdep_hardirqs_on+0x7d/0x100 [ 77.888266][ T22] ? _raw_spin_unlock_irqrestore+0x3b/0x70 [ 77.894126][ T22] __device_attach+0x1e8/0x4b0 [ 77.898974][ T22] ? device_driver_attach+0x200/0x200 [ 77.904481][ T22] ? do_raw_spin_unlock+0x173/0x230 [ 77.909800][ T22] bus_probe_device+0x17c/0x1c0 [ 77.914786][ T22] device_add+0x11f1/0x1b40 [ 77.919456][ T22] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 77.926540][ T22] ? add_device_randomness+0xb8/0xe0 [ 77.931903][ T22] usb_new_device+0xd80/0x1960 [ 77.936765][ T22] ? hub_disconnect+0x520/0x520 [ 77.941682][ T22] hub_event+0x307f/0x5230 [ 77.946298][ T22] ? hub_port_debounce+0x3d0/0x3d0 [ 77.951500][ T22] ? reacquire_held_locks+0x4b0/0x4b0 [ 77.957026][ T22] ? do_raw_spin_lock+0x12e/0x2b0 [ 77.962134][ T22] ? spin_bug+0x1d0/0x1d0 [ 77.966630][ T22] process_one_work+0xaa2/0x16f0 [ 77.971636][ T22] ? nsim_dev_netdevice_event+0x7b0/0x7b0 [ 77.977464][ T22] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 77.982896][ T22] ? spin_bug+0x1d0/0x1d0 [ 77.987366][ T22] worker_thread+0x687/0x1110 [ 77.992133][ T22] ? process_one_work+0x16f0/0x16f0 [ 77.997484][ T22] kthread+0x33a/0x430 [ 78.001598][ T22] ? kthread_complete_and_exit+0x40/0x40 [ 78.007435][ T22] ret_from_fork+0x2c/0x70 [ 78.011897][ T22] ? kthread_complete_and_exit+0x40/0x40 [ 78.017648][ T22] ret_from_fork_asm+0x11/0x20 [ 78.022553][ T22] RIP: 0000:0x0 [ 78.026134][ T22] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 78.033532][ T22] RSP: 0000:0000000000000000 EFLAGS: 00000000 ORIG_RAX: 0000000000000000 [ 78.042070][ T22] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 78.050132][ T22] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 78.058199][ T22] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 78.066800][ T22] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 78.074784][ T22] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 78.084694][ T22] [ 78.087842][ T22] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 78.095148][ T22] CPU: 1 PID: 22 Comm: kworker/1:0 Not tainted 6.5.0-rc2-next-20230718-syzkaller #0 [ 78.104543][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 78.114617][ T22] Workqueue: usb_hub_wq hub_event [ 78.119688][ T22] Call Trace: [ 78.122980][ T22] [ 78.125941][ T22] dump_stack_lvl+0xd9/0x1b0 [ 78.130581][ T22] panic+0x6a4/0x750 [ 78.134506][ T22] ? panic_smp_self_stop+0xa0/0xa0 [ 78.139646][ T22] ? show_trace_log_lvl+0x29d/0x3c0 [ 78.144913][ T22] ? usb_submit_urb+0xe8e/0x1820 [ 78.149918][ T22] check_panic_on_warn+0xab/0xb0 [ 78.154906][ T22] __warn+0xf2/0x380 [ 78.158836][ T22] ? usb_submit_urb+0xe8e/0x1820 [ 78.163814][ T22] report_bug+0x3bc/0x580 [ 78.168190][ T22] handle_bug+0x3c/0x70 [ 78.172382][ T22] exc_invalid_op+0x17/0x40 [ 78.176924][ T22] asm_exc_invalid_op+0x1a/0x20 [ 78.181809][ T22] RIP: 0010:usb_submit_urb+0xe8e/0x1820 [ 78.187392][ T22] Code: 0f 84 8e 02 00 00 e8 c1 47 48 fb 4c 89 ef e8 c9 04 ee fe 45 89 e0 89 e9 4c 89 f2 48 89 c6 48 c7 c7 e0 7b 1f 8b e8 b2 d2 0e fb <0f> 0b e9 a7 f8 ff ff e8 96 47 48 fb 49 81 c4 c0 05 00 00 e9 d2 f7 [ 78.207048][ T22] RSP: 0018:ffffc900001c6f30 EFLAGS: 00010282 [ 78.213142][ T22] RAX: 0000000000000000 RBX: ffff8880204e9c00 RCX: 0000000000000000 [ 78.221132][ T22] RDX: ffff888017663b80 RSI: ffffffff814d59e6 RDI: 0000000000000001 [ 78.230428][ T22] RBP: 0000000000000003 R08: 0000000000000001 R09: 0000000000000000 [ 78.238419][ T22] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000001 [ 78.246439][ T22] R13: ffff88802166d0a8 R14: ffff8880153cb438 R15: 0000000000000003 [ 78.254444][ T22] ? __warn_printk+0x1a6/0x350 [ 78.259247][ T22] ? __kmalloc+0x90/0x100 [ 78.263620][ T22] ar5523_submit_rx_cmd+0x1f1/0x360 [ 78.268852][ T22] ? usb_alloc_coherent+0x67/0x90 [ 78.273926][ T22] ar5523_probe+0xc15/0x36a0 [ 78.278567][ T22] ? ar5523_hwconfig+0x130/0x130 [ 78.283538][ T22] ? mark_held_locks+0x9f/0xe0 [ 78.288349][ T22] ? _raw_spin_unlock_irqrestore+0x4e/0x70 [ 78.294188][ T22] ? lockdep_hardirqs_on+0x7d/0x100 [ 78.299414][ T22] ? _raw_spin_unlock_irqrestore+0x3b/0x70 [ 78.305252][ T22] ? __pm_runtime_set_status+0x45a/0xd20 [ 78.310921][ T22] usb_probe_interface+0x307/0x930 [ 78.316076][ T22] ? usb_match_dynamic_id+0x1a0/0x1a0 [ 78.321482][ T22] really_probe+0x234/0xc90 [ 78.326015][ T22] __driver_probe_device+0x1de/0x4b0 [ 78.331332][ T22] driver_probe_device+0x4c/0x1a0 [ 78.336385][ T22] __device_attach_driver+0x1d4/0x300 [ 78.341787][ T22] ? driver_probe_device+0x1a0/0x1a0 [ 78.347104][ T22] bus_for_each_drv+0x157/0x1d0 [ 78.351997][ T22] ? bus_for_each_dev+0x1d0/0x1d0 [ 78.357063][ T22] ? lockdep_hardirqs_on+0x7d/0x100 [ 78.362372][ T22] ? _raw_spin_unlock_irqrestore+0x3b/0x70 [ 78.368306][ T22] __device_attach+0x1e8/0x4b0 [ 78.373102][ T22] ? device_driver_attach+0x200/0x200 [ 78.378514][ T22] ? do_raw_spin_unlock+0x173/0x230 [ 78.383760][ T22] bus_probe_device+0x17c/0x1c0 [ 78.388642][ T22] device_add+0x11f1/0x1b40 [ 78.393192][ T22] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 78.400100][ T22] usb_set_configuration+0x10cb/0x1c40 [ 78.405628][ T22] usb_generic_driver_probe+0xca/0x130 [ 78.411116][ T22] usb_probe_device+0xda/0x2c0 [ 78.415911][ T22] ? usb_driver_release_interface+0x190/0x190 [ 78.422012][ T22] really_probe+0x234/0xc90 [ 78.426549][ T22] __driver_probe_device+0x1de/0x4b0 [ 78.431865][ T22] ? usb_driver_applicable+0x1c4/0x220 [ 78.437362][ T22] driver_probe_device+0x4c/0x1a0 [ 78.442414][ T22] __device_attach_driver+0x1d4/0x300 [ 78.447816][ T22] ? driver_probe_device+0x1a0/0x1a0 [ 78.453130][ T22] bus_for_each_drv+0x157/0x1d0 [ 78.458022][ T22] ? bus_for_each_dev+0x1d0/0x1d0 [ 78.463088][ T22] ? lockdep_hardirqs_on+0x7d/0x100 [ 78.468308][ T22] ? _raw_spin_unlock_irqrestore+0x3b/0x70 [ 78.474152][ T22] __device_attach+0x1e8/0x4b0 [ 78.478954][ T22] ? device_driver_attach+0x200/0x200 [ 78.484355][ T22] ? do_raw_spin_unlock+0x173/0x230 [ 78.489607][ T22] bus_probe_device+0x17c/0x1c0 [ 78.494486][ T22] device_add+0x11f1/0x1b40 [ 78.499033][ T22] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 78.505937][ T22] ? add_device_randomness+0xb8/0xe0 [ 78.511265][ T22] usb_new_device+0xd80/0x1960 [ 78.516077][ T22] ? hub_disconnect+0x520/0x520 [ 78.520979][ T22] hub_event+0x307f/0x5230 [ 78.525468][ T22] ? hub_port_debounce+0x3d0/0x3d0 [ 78.530633][ T22] ? reacquire_held_locks+0x4b0/0x4b0 [ 78.536040][ T22] ? do_raw_spin_lock+0x12e/0x2b0 [ 78.541102][ T22] ? spin_bug+0x1d0/0x1d0 [ 78.545477][ T22] process_one_work+0xaa2/0x16f0 [ 78.550455][ T22] ? nsim_dev_netdevice_event+0x7b0/0x7b0 [ 78.556202][ T22] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 78.561614][ T22] ? spin_bug+0x1d0/0x1d0 [ 78.565990][ T22] worker_thread+0x687/0x1110 [ 78.570716][ T22] ? process_one_work+0x16f0/0x16f0 [ 78.575945][ T22] kthread+0x33a/0x430 [ 78.580037][ T22] ? kthread_complete_and_exit+0x40/0x40 [ 78.585704][ T22] ret_from_fork+0x2c/0x70 [ 78.590148][ T22] ? kthread_complete_and_exit+0x40/0x40 [ 78.595814][ T22] ret_from_fork_asm+0x11/0x20 [ 78.600634][ T22] RIP: 0000:0x0 [ 78.604121][ T22] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 78.611502][ T22] RSP: 0000:0000000000000000 EFLAGS: 00000000 ORIG_RAX: 0000000000000000 [ 78.619938][ T22] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 78.627946][ T22] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 78.636016][ T22] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 78.644014][ T22] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 78.652032][ T22] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 78.660148][ T22] [ 78.663387][ T22] Kernel Offset: disabled [ 78.667858][ T22] Rebooting in 86400 seconds..