./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor412558935 <...> Warning: Permanently added '10.128.0.54' (ECDSA) to the list of known hosts. execve("./syz-executor412558935", ["./syz-executor412558935"], 0x7ffcaf0fcb90 /* 10 vars */) = 0 brk(NULL) = 0x555555a13000 brk(0x555555a13c40) = 0x555555a13c40 arch_prctl(ARCH_SET_FS, 0x555555a13300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor412558935", 4096) = 27 brk(0x555555a34c40) = 0x555555a34c40 brk(0x555555a35000) = 0x555555a35000 mprotect(0x7f28332ee000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a135d0) = 4998 ./strace-static-x86_64: Process 4998 attached [pid 4998] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 4998] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4998] setsid() = 1 [pid 4998] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 4998] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 4998] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 4998] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 4998] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 4998] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 4998] unshare(CLONE_NEWNS) = 0 [pid 4998] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 4998] unshare(CLONE_NEWIPC) = 0 [pid 4998] unshare(CLONE_NEWCGROUP) = 0 [pid 4998] unshare(CLONE_NEWUTS) = 0 [pid 4998] unshare(CLONE_SYSVSEM) = 0 [pid 4998] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 4998] write(3, "16777216", 8) = 8 [pid 4998] close(3) = 0 [pid 4998] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 4998] write(3, "536870912", 9) = 9 [pid 4998] close(3) = 0 [pid 4998] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 4998] write(3, "1024", 4) = 4 [pid 4998] close(3) = 0 [pid 4998] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 4998] write(3, "8192", 4) = 4 [pid 4998] close(3) = 0 [pid 4998] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 4998] write(3, "1024", 4) = 4 [pid 4998] close(3) = 0 [pid 4998] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 4998] write(3, "1024", 4) = 4 [pid 4998] close(3) = 0 [pid 4998] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 4998] write(3, "1024 1048576 500 1024", 21) = 21 [pid 4998] close(3) = 0 [pid 4998] getpid() = 1 [pid 4998] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< 0b e9 58 f8 ff ff e8 5e be 5b fb 48 81 c5 c0 05 00 00 e9 84 f7 [ 55.625605][ T5005] RSP: 0018:ffffc90003b4efa8 EFLAGS: 00010282 [ 55.631959][ T5005] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 55.639968][ T5005] RDX: ffff888025cabb80 RSI: ffffffff814c03b7 RDI: 0000000000000001 [ 55.647974][ T5005] RBP: ffff8880762250f0 R08: 0000000000000001 R09: 0000000000000000 [ 55.655973][ T5005] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000003 [ 55.663948][ T5005] R13: ffff88802271b8e8 R14: 0000000000000003 R15: ffff888022692d00 [ 55.672252][ T5005] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 55.681222][ T5005] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 55.687853][ T5005] CR2: 00005611f605d000 CR3: 0000000029458000 CR4: 0000000000350ef0 [ 55.695861][ T5005] Call Trace: [ 55.699130][ T5005] [ 55.702050][ T5005] ? __warn+0xe6/0x390 [ 55.706558][ T5005] ? preempt_schedule_notrace+0x5f/0xd0 [ 55.712153][ T5005] ? usb_submit_urb+0xed6/0x1880 [ 55.717715][ T5005] ? report_bug+0x2da/0x500 [ 55.722342][ T5005] ? handle_bug+0x3c/0x70 [ 55.726787][ T5005] ? exc_invalid_op+0x18/0x50 [ 55.731481][ T5005] ? asm_exc_invalid_op+0x1a/0x20 [ 55.736587][ T5005] ? __warn_printk+0x187/0x310 [ 55.741377][ T5005] ? usb_submit_urb+0xed6/0x1880 [ 55.746390][ T5005] ? usb_submit_urb+0xed6/0x1880 [ 55.751337][ T5005] ? __kmalloc+0xb3/0x190 [ 55.755807][ T5005] ar5523_submit_rx_cmd+0x1f1/0x360 [ 55.761026][ T5005] ar5523_probe+0xc0b/0x36a0 [ 55.765995][ T5005] ? ar5523_hwconfig+0x130/0x130 [ 55.770951][ T5005] ? mark_held_locks+0x9f/0xe0 [ 55.775777][ T5005] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 55.781611][ T5005] ? lockdep_hardirqs_on+0x7d/0x100 [ 55.786887][ T5005] ? _raw_spin_unlock_irqrestore+0x41/0x70 [ 55.792712][ T5005] ? __pm_runtime_set_status+0x442/0xd90 [ 55.798421][ T5005] usb_probe_interface+0x30f/0x960 [ 55.803552][ T5005] ? usb_match_dynamic_id+0x1a0/0x1a0 [ 55.809016][ T5005] really_probe+0x240/0xca0 [ 55.813542][ T5005] __driver_probe_device+0x1df/0x4b0 [ 55.818884][ T5005] ? usb_match_id.part.0+0x163/0x1b0 [ 55.824187][ T5005] driver_probe_device+0x4c/0x1a0 [ 55.829280][ T5005] __device_attach_driver+0x1d4/0x2e0 [ 55.834675][ T5005] bus_for_each_drv+0x149/0x1d0 [ 55.839593][ T5005] ? driver_probe_device+0x1a0/0x1a0 [ 55.844908][ T5005] ? bus_for_each_dev+0x1c0/0x1c0 [ 55.850069][ T5005] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 55.855933][ T5005] ? lockdep_hardirqs_on+0x7d/0x100 [ 55.861131][ T5005] ? _raw_spin_unlock_irqrestore+0x41/0x70 [ 55.867029][ T5005] __device_attach+0x1e4/0x4b0 [ 55.871814][ T5005] ? device_driver_attach+0x210/0x210 [ 55.877239][ T5005] ? do_raw_spin_unlock+0x175/0x230 [ 55.882450][ T5005] bus_probe_device+0x17c/0x1c0 [ 55.887415][ T5005] device_add+0x112d/0x1a40 [ 55.891934][ T5005] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 55.898842][ T5005] usb_set_configuration+0x1196/0x1bc0 [ 55.904325][ T5005] usb_generic_driver_probe+0xcf/0x130 [ 55.909845][ T5005] usb_probe_device+0xd8/0x2c0 [ 55.914626][ T5005] ? usb_driver_release_interface+0x190/0x190 [ 55.920748][ T5005] really_probe+0x240/0xca0 [ 55.925268][ T5005] __driver_probe_device+0x1df/0x4b0 [ 55.930614][ T5005] driver_probe_device+0x4c/0x1a0 [ 55.935676][ T5005] __device_attach_driver+0x1d4/0x2e0 [ 55.941096][ T5005] bus_for_each_drv+0x149/0x1d0 [ 55.946021][ T5005] ? driver_probe_device+0x1a0/0x1a0 [ 55.951324][ T5005] ? bus_for_each_dev+0x1c0/0x1c0 [ 55.956397][ T5005] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 55.962224][ T5005] ? lockdep_hardirqs_on+0x7d/0x100 [ 55.967572][ T5005] ? _raw_spin_unlock_irqrestore+0x41/0x70 [ 55.973480][ T5005] __device_attach+0x1e4/0x4b0 [ 55.978391][ T5005] ? device_driver_attach+0x210/0x210 [ 55.983849][ T5005] ? do_raw_spin_unlock+0x175/0x230 [ 55.989255][ T5005] bus_probe_device+0x17c/0x1c0 [ 55.994185][ T5005] device_add+0x112d/0x1a40 [ 55.998824][ T5005] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 56.005792][ T5005] ? add_device_randomness+0xb8/0xe0 [ 56.011109][ T5005] usb_new_device+0xcb2/0x19d0 [ 56.015944][ T5005] ? hub_disconnect+0x520/0x520 [ 56.020847][ T5005] ? _raw_spin_unlock_irq+0x23/0x50 [ 56.026189][ T5005] hub_event+0x2d9e/0x4e40 [ 56.030651][ T5005] ? hub_port_debounce+0x3b0/0x3b0 [ 56.035851][ T5005] ? lock_sync+0x190/0x190 [ 56.040361][ T5005] ? lock_downgrade+0x690/0x690 [ 56.045231][ T5005] ? move_linked_works+0x1ec/0x2f0 [ 56.050842][ T5005] ? _raw_spin_unlock_irq+0x23/0x50 [ 56.056194][ T5005] process_one_work+0x99a/0x15e0 [ 56.061202][ T5005] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 56.066709][ T5005] ? spin_bug+0x1c0/0x1c0 [ 56.071088][ T5005] ? _raw_spin_lock_irq+0x45/0x50 [ 56.076195][ T5005] worker_thread+0x67d/0x10c0 [ 56.080926][ T5005] ? process_one_work+0x15e0/0x15e0 [ 56.086253][ T5005] kthread+0x344/0x440 [ 56.090364][ T5005] ? kthread_complete_and_exit+0x40/0x40 [ 56.096109][ T5005] ret_from_fork+0x1f/0x30 [ 56.100589][ T5005] [ 56.103638][ T5005] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 56.110915][ T5005] CPU: 0 PID: 5005 Comm: kworker/0:4 Not tainted 6.4.0-rc6-syzkaller-00037-gb6dad5178cea #0 [ 56.120976][ T5005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 56.131034][ T5005] Workqueue: usb_hub_wq hub_event [ 56.136070][ T5005] Call Trace: [ 56.139345][ T5005] [ 56.142273][ T5005] dump_stack_lvl+0xd9/0x150 [ 56.146870][ T5005] panic+0x686/0x730 [ 56.150781][ T5005] ? panic_smp_self_stop+0xa0/0xa0 [ 56.155912][ T5005] ? show_trace_log_lvl+0x284/0x390 [ 56.161154][ T5005] ? usb_submit_urb+0xed6/0x1880 [ 56.166105][ T5005] check_panic_on_warn+0xb1/0xc0 [ 56.171144][ T5005] __warn+0xf2/0x390 [ 56.175055][ T5005] ? preempt_schedule_notrace+0x5f/0xd0 [ 56.180611][ T5005] ? usb_submit_urb+0xed6/0x1880 [ 56.185566][ T5005] report_bug+0x2da/0x500 [ 56.189926][ T5005] handle_bug+0x3c/0x70 [ 56.194074][ T5005] exc_invalid_op+0x18/0x50 [ 56.198588][ T5005] asm_exc_invalid_op+0x1a/0x20 [ 56.203456][ T5005] RIP: 0010:usb_submit_urb+0xed6/0x1880 [ 56.209012][ T5005] Code: 7c 24 18 e8 8c be 5b fb 48 8b 7c 24 18 e8 82 07 f0 fe 41 89 d8 44 89 e1 4c 89 ea 48 89 c6 48 c7 c7 c0 c1 fc 8a e8 ba 79 23 fb <0f> 0b e9 58 f8 ff ff e8 5e be 5b fb 48 81 c5 c0 05 00 00 e9 84 f7 [ 56.228664][ T5005] RSP: 0018:ffffc90003b4efa8 EFLAGS: 00010282 [ 56.234753][ T5005] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 56.242826][ T5005] RDX: ffff888025cabb80 RSI: ffffffff814c03b7 RDI: 0000000000000001 [ 56.250828][ T5005] RBP: ffff8880762250f0 R08: 0000000000000001 R09: 0000000000000000 [ 56.258823][ T5005] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000003 [ 56.266808][ T5005] R13: ffff88802271b8e8 R14: 0000000000000003 R15: ffff888022692d00 [ 56.274797][ T5005] ? __warn_printk+0x187/0x310 [ 56.279630][ T5005] ? usb_submit_urb+0xed6/0x1880 [ 56.284584][ T5005] ? __kmalloc+0xb3/0x190 [ 56.288925][ T5005] ar5523_submit_rx_cmd+0x1f1/0x360 [ 56.294142][ T5005] ar5523_probe+0xc0b/0x36a0 [ 56.298752][ T5005] ? ar5523_hwconfig+0x130/0x130 [ 56.303691][ T5005] ? mark_held_locks+0x9f/0xe0 [ 56.308557][ T5005] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 56.314388][ T5005] ? lockdep_hardirqs_on+0x7d/0x100 [ 56.319606][ T5005] ? _raw_spin_unlock_irqrestore+0x41/0x70 [ 56.325425][ T5005] ? __pm_runtime_set_status+0x442/0xd90 [ 56.331088][ T5005] usb_probe_interface+0x30f/0x960 [ 56.336231][ T5005] ? usb_match_dynamic_id+0x1a0/0x1a0 [ 56.341625][ T5005] really_probe+0x240/0xca0 [ 56.346151][ T5005] __driver_probe_device+0x1df/0x4b0 [ 56.351440][ T5005] ? usb_match_id.part.0+0x163/0x1b0 [ 56.356755][ T5005] driver_probe_device+0x4c/0x1a0 [ 56.361816][ T5005] __device_attach_driver+0x1d4/0x2e0 [ 56.367216][ T5005] bus_for_each_drv+0x149/0x1d0 [ 56.372078][ T5005] ? driver_probe_device+0x1a0/0x1a0 [ 56.377398][ T5005] ? bus_for_each_dev+0x1c0/0x1c0 [ 56.382441][ T5005] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 56.388267][ T5005] ? lockdep_hardirqs_on+0x7d/0x100 [ 56.393479][ T5005] ? _raw_spin_unlock_irqrestore+0x41/0x70 [ 56.399305][ T5005] __device_attach+0x1e4/0x4b0 [ 56.404083][ T5005] ? device_driver_attach+0x210/0x210 [ 56.409466][ T5005] ? do_raw_spin_unlock+0x175/0x230 [ 56.414672][ T5005] bus_probe_device+0x17c/0x1c0 [ 56.419529][ T5005] device_add+0x112d/0x1a40 [ 56.424040][ T5005] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 56.430916][ T5005] usb_set_configuration+0x1196/0x1bc0 [ 56.436491][ T5005] usb_generic_driver_probe+0xcf/0x130 [ 56.441965][ T5005] usb_probe_device+0xd8/0x2c0 [ 56.446736][ T5005] ? usb_driver_release_interface+0x190/0x190 [ 56.452824][ T5005] really_probe+0x240/0xca0 [ 56.457362][ T5005] __driver_probe_device+0x1df/0x4b0 [ 56.462675][ T5005] driver_probe_device+0x4c/0x1a0 [ 56.467741][ T5005] __device_attach_driver+0x1d4/0x2e0 [ 56.473231][ T5005] bus_for_each_drv+0x149/0x1d0 [ 56.478090][ T5005] ? driver_probe_device+0x1a0/0x1a0 [ 56.483388][ T5005] ? bus_for_each_dev+0x1c0/0x1c0 [ 56.488415][ T5005] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 56.494228][ T5005] ? lockdep_hardirqs_on+0x7d/0x100 [ 56.499443][ T5005] ? _raw_spin_unlock_irqrestore+0x41/0x70 [ 56.505269][ T5005] __device_attach+0x1e4/0x4b0 [ 56.510051][ T5005] ? device_driver_attach+0x210/0x210 [ 56.515432][ T5005] ? do_raw_spin_unlock+0x175/0x230 [ 56.520645][ T5005] bus_probe_device+0x17c/0x1c0 [ 56.525514][ T5005] device_add+0x112d/0x1a40 [ 56.530026][ T5005] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 56.536886][ T5005] ? add_device_randomness+0xb8/0xe0 [ 56.542186][ T5005] usb_new_device+0xcb2/0x19d0 [ 56.546964][ T5005] ? hub_disconnect+0x520/0x520 [ 56.551818][ T5005] ? _raw_spin_unlock_irq+0x23/0x50 [ 56.557036][ T5005] hub_event+0x2d9e/0x4e40 [ 56.561487][ T5005] ? hub_port_debounce+0x3b0/0x3b0 [ 56.566615][ T5005] ? lock_sync+0x190/0x190 [ 56.571052][ T5005] ? lock_downgrade+0x690/0x690 [ 56.575914][ T5005] ? move_linked_works+0x1ec/0x2f0 [ 56.581071][ T5005] ? _raw_spin_unlock_irq+0x23/0x50 [ 56.586279][ T5005] process_one_work+0x99a/0x15e0 [ 56.591233][ T5005] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 56.596618][ T5005] ? spin_bug+0x1c0/0x1c0 [ 56.600956][ T5005] ? _raw_spin_lock_irq+0x45/0x50 [ 56.606015][ T5005] worker_thread+0x67d/0x10c0 [ 56.610729][ T5005] ? process_one_work+0x15e0/0x15e0 [ 56.615942][ T5005] kthread+0x344/0x440 [ 56.620015][ T5005] ? kthread_complete_and_exit+0x40/0x40 [ 56.625654][ T5005] ret_from_fork+0x1f/0x30 [ 56.630078][ T5005] [ 56.633846][ T5005] Kernel Offset: disabled [ 56.638340][ T5005] Rebooting in 86400 seconds..