./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1360299450
<...>
Warning: Permanently added '10.128.10.28' (ED25519) to the list of known hosts.
execve("./syz-executor1360299450", ["./syz-executor1360299450"], 0x7ffe4792a520 /* 10 vars */) = 0
brk(NULL) = 0x555555664000
brk(0x555555664d00) = 0x555555664d00
arch_prctl(ARCH_SET_FS, 0x555555664380) = 0
set_tid_address(0x555555664650) = 5065
set_robust_list(0x555555664660, 24) = 0
rseq(0x555555664ca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor1360299450", 4096) = 28
getrandom("\xe5\x89\x8e\x04\x91\x90\xc0\xcd", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x555555664d00
brk(0x555555685d00) = 0x555555685d00
brk(0x555555686000) = 0x555555686000
mprotect(0x7f6d819b6000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3
ioctl(3, USB_RAW_IOCTL_INIT, 0x7fff39857490) = 0
ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff39857490) = 0
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff39857490) = 0
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff39857490) = 0
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff39857490) = 0
ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fff39856480) = 18
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff39857490) = 0
[ 55.116880][ T777] usb 1-1: new high-speed USB device number 2 using dummy_hcd
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff39857490) = 0
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff39857490) = 0
ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fff39856480) = 18
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff39857490) = 0
ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fff39856480) = 9
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff39857490) = 0
ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fff39856480) = 36
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff39857490) = 0
ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0
ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0
ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6d819bc3ec) = 0
ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7fff39856480) = 0
[ 55.476998][ T777] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 55.488005][ T777] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 55.497366][ T777] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 55.506397][ T777] usb 1-1: config 0 descriptor??
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff398574c0) = 0
ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7fff398564b0) = 0
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff398574c0) = 0
ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fff398564b0) = 1
[ 55.988248][ T777] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor
[ 56.001153][ T777] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0001/input/input5
[ 56.087801][ T777] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0
ioctl(-1, HIDIOCGUSAGES, 0x20000d40) = -1 EBADF (Bad file descriptor)
openat(AT_FDCWD, "/dev/input/event4", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|FASYNC|0x800000) = 4
[ 56.189704][ T777] keytouch 0003:0926:3333.0001: implement() called with too large value 8 (n: 1)! (kworker/0:2)
[ 56.200574][ T777] ------------[ cut here ]------------
[ 56.206025][ T777] WARNING: CPU: 0 PID: 777 at drivers/hid/hid-core.c:1451 implement+0x22f/0x270
[ 56.215076][ T777] Modules linked in:
[ 56.218983][ T777] CPU: 0 PID: 777 Comm: kworker/0:2 Not tainted 6.7.0-syzkaller-01193-g6c1dd1fe5d8a #0
[ 56.228618][ T777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023
[ 56.238673][ T777] Workqueue: events hidinput_led_worker
[ 56.244221][ T777] RIP: 0010:implement+0x22f/0x270
[ 56.249244][ T777] Code: c7 c2 c0 d4 cf 8b 65 48 8b 04 25 80 c2 03 00 49 8d bd 38 19 00 00 48 c7 c6 e0 b3 cf 8b 4c 8d 88 90 08 00 00 e8 32 d4 83 fd 90 <0f> 0b 90 44 21 fd e9 58 ff ff ff 48 89 d7 89 44 24 14 48 89 54 24
[ 56.268887][ T777] RSP: 0018:ffffc90003c6fae0 EFLAGS: 00010086
[ 56.274956][ T777] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff816ae9b9
[ 56.283016][ T777] RDX: ffff88801e2abb80 RSI: ffffffff8571a255 RDI: 0000000000000005
[ 56.291070][ T777] RBP: 0000000000000008 R08: 0000000000000005 R09: 0000000000000000
[ 56.299032][ T777] R10: 0000000080000001 R11: 0000000000000001 R12: 0000000000000000
[ 56.306992][ T777] R13: ffff88802dc58000 R14: 0000000000000008 R15: 0000000000000001
[ 56.314953][ T777] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
[ 56.323877][ T777] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 56.330633][ T777] CR2: 00007f61265f1b10 CR3: 0000000075f13000 CR4: 0000000000350ef0
[ 56.338594][ T777] Call Trace:
[ 56.341863][ T777]
[ 56.344782][ T777] ? show_regs+0x8f/0xa0
[ 56.349022][ T777] ? __warn+0xe6/0x390
[ 56.353084][ T777] ? implement+0x22f/0x270
[ 56.357498][ T777] ? report_bug+0x3bc/0x580
[ 56.361996][ T777] ? handle_bug+0x3d/0x70
[ 56.366311][ T777] ? exc_invalid_op+0x17/0x40
[ 56.370976][ T777] ? asm_exc_invalid_op+0x1a/0x20
[ 56.375999][ T777] ? __wake_up_klogd.part.0+0x99/0xf0
[ 56.381364][ T777] ? _dev_warn+0xe5/0x120
[ 56.385689][ T777] ? implement+0x22f/0x270
[ 56.390196][ T777] hid_output_report+0x2ef/0x4a0
[ 56.395221][ T777] __usbhid_submit_report+0x774/0xed0
[ 56.400589][ T777] ? usbhid_restart_out_queue.isra.0+0x390/0x390
[ 56.406919][ T777] ? lock_sync+0x190/0x190
[ 56.411335][ T777] ? lock_sync+0x190/0x190
[ 56.415753][ T777] usbhid_request+0x79/0xf0
[ 56.420257][ T777] ? usbhid_parse+0xa20/0xa20
[ 56.425019][ T777] hidinput_led_worker+0xbc/0x230
[ 56.430038][ T777] process_one_work+0x886/0x15d0
[ 56.434979][ T777] ? lock_sync+0x190/0x190
[ 56.439393][ T777] ? workqueue_congested+0x300/0x300
[ 56.444677][ T777] ? assign_work+0x1a0/0x250
[ 56.449267][ T777] worker_thread+0x8b9/0x1290
[ 56.453980][ T777] ? __kthread_parkme+0x14b/0x220
[ 56.459086][ T777] ? process_one_work+0x15d0/0x15d0
[ 56.464282][ T777] kthread+0x2c6/0x3a0
[ 56.468345][ T777] ? kthread_complete_and_exit+0x40/0x40
[ 56.473970][ T777] ? kthread_complete_and_exit+0x40/0x40
[ 56.479599][ T777] ret_from_fork+0x45/0x80
[ 56.484011][ T777] ? kthread_complete_and_exit+0x40/0x40
[ 56.489640][ T777] ret_from_fork_asm+0x11/0x20
[ 56.494406][ T777]
[ 56.497590][ T777] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 56.504878][ T777] CPU: 0 PID: 777 Comm: kworker/0:2 Not tainted 6.7.0-syzkaller-01193-g6c1dd1fe5d8a #0
[ 56.514509][ T777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023
[ 56.524561][ T777] Workqueue: events hidinput_led_worker
[ 56.530107][ T777] Call Trace:
[ 56.533378][ T777]
[ 56.536300][ T777] dump_stack_lvl+0xd9/0x1b0
[ 56.540893][ T777] panic+0x6dc/0x790
[ 56.544785][ T777] ? panic_smp_self_stop+0xa0/0xa0
[ 56.549887][ T777] ? show_trace_log_lvl+0x363/0x4f0
[ 56.555080][ T777] ? check_panic_on_warn+0x1f/0xb0
[ 56.560188][ T777] ? implement+0x22f/0x270
[ 56.564604][ T777] check_panic_on_warn+0xab/0xb0
[ 56.569536][ T777] __warn+0xf2/0x390
[ 56.573422][ T777] ? implement+0x22f/0x270
[ 56.577833][ T777] report_bug+0x3bc/0x580
[ 56.582162][ T777] handle_bug+0x3d/0x70
[ 56.586307][ T777] exc_invalid_op+0x17/0x40
[ 56.590799][ T777] asm_exc_invalid_op+0x1a/0x20
[ 56.595646][ T777] RIP: 0010:implement+0x22f/0x270
[ 56.600674][ T777] Code: c7 c2 c0 d4 cf 8b 65 48 8b 04 25 80 c2 03 00 49 8d bd 38 19 00 00 48 c7 c6 e0 b3 cf 8b 4c 8d 88 90 08 00 00 e8 32 d4 83 fd 90 <0f> 0b 90 44 21 fd e9 58 ff ff ff 48 89 d7 89 44 24 14 48 89 54 24
[ 56.620454][ T777] RSP: 0018:ffffc90003c6fae0 EFLAGS: 00010086
[ 56.626516][ T777] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff816ae9b9
[ 56.634478][ T777] RDX: ffff88801e2abb80 RSI: ffffffff8571a255 RDI: 0000000000000005
[ 56.642437][ T777] RBP: 0000000000000008 R08: 0000000000000005 R09: 0000000000000000
[ 56.650400][ T777] R10: 0000000080000001 R11: 0000000000000001 R12: 0000000000000000
[ 56.658361][ T777] R13: ffff88802dc58000 R14: 0000000000000008 R15: 0000000000000001
[ 56.666327][ T777] ? __wake_up_klogd.part.0+0x99/0xf0
[ 56.671780][ T777] ? _dev_warn+0xe5/0x120
[ 56.676113][ T777] hid_output_report+0x2ef/0x4a0
[ 56.681057][ T777] __usbhid_submit_report+0x774/0xed0
[ 56.686428][ T777] ? usbhid_restart_out_queue.isra.0+0x390/0x390
[ 56.692751][ T777] ? lock_sync+0x190/0x190
[ 56.697167][ T777] ? lock_sync+0x190/0x190
[ 56.701582][ T777] usbhid_request+0x79/0xf0
[ 56.706085][ T777] ? usbhid_parse+0xa20/0xa20
[ 56.710759][ T777] hidinput_led_worker+0xbc/0x230
[ 56.715777][ T777] process_one_work+0x886/0x15d0
[ 56.720713][ T777] ? lock_sync+0x190/0x190
[ 56.725130][ T777] ? workqueue_congested+0x300/0x300
[ 56.730413][ T777] ? assign_work+0x1a0/0x250
[ 56.735004][ T777] worker_thread+0x8b9/0x1290
[ 56.739676][ T777] ? __kthread_parkme+0x14b/0x220
[ 56.744700][ T777] ? process_one_work+0x15d0/0x15d0
[ 56.749892][ T777] kthread+0x2c6/0x3a0
[ 56.753956][ T777] ? kthread_complete_and_exit+0x40/0x40
[ 56.759670][ T777] ? kthread_complete_and_exit+0x40/0x40
[ 56.765296][ T777] ret_from_fork+0x45/0x80
[ 56.769706][ T777] ? kthread_complete_and_exit+0x40/0x40
[ 56.775336][ T777] ret_from_fork_asm+0x11/0x20
[ 56.780110][ T777]
[ 56.783345][ T777] Kernel Offset: disabled
[ 56.787653][ T777] Rebooting in 86400 seconds..