./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor363761542 <...> Warning: Permanently added '10.128.0.213' (ED25519) to the list of known hosts. execve("./syz-executor363761542", ["./syz-executor363761542"], 0x7ffdf76e28b0 /* 10 vars */) = 0 brk(NULL) = 0x555556ccb000 brk(0x555556ccbd00) = 0x555556ccbd00 arch_prctl(ARCH_SET_FS, 0x555556ccb380) = 0 set_tid_address(0x555556ccb650) = 5054 set_robust_list(0x555556ccb660, 24) = 0 rseq(0x555556ccbca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor363761542", 4096) = 27 getrandom("\xcf\xc7\x9e\xfd\x2a\x8f\xa8\xec", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555556ccbd00 brk(0x555556cecd00) = 0x555556cecd00 brk(0x555556ced000) = 0x555556ced000 mprotect(0x7f4b9ce70000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 ioctl(3, USB_RAW_IOCTL_INIT, 0x7fff748d3d30) = 0 ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff748d3d30) = 0 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff748d3d30) = 0 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff748d3d30) = 0 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff748d3d30) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fff748d2d20) = 18 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff748d3d30) = 0 [ 59.896242][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff748d3d30) = 0 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff748d3d30) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fff748d2d20) = 18 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff748d3d30) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fff748d2d20) = 9 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff748d3d30) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fff748d2d20) = 36 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff748d3d30) = 0 ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f4b9ce763ec) = 0 ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7fff748d2d20) = 0 [ 60.256359][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.267783][ T9] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 60.277122][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.287768][ T9] usb 1-1: config 0 descriptor?? ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff748d3d60) = 0 ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7fff748d2d50) = 0 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff748d3d60) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fff748d2d50) = 1 [ 60.770869][ T9] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 60.782792][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0001/input/input5 [ 60.874729][ T9] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 ioctl(-1, HIDIOCGUSAGES, 0x20000d40) = -1 EBADF (Bad file descriptor) openat(AT_FDCWD, "/dev/input/event4", O_WRONLY|O_NOCTTY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW|FASYNC|0x800000) = 4 [ 60.970965][ T9] keytouch 0003:0926:3333.0001: implement() called with too large value 8 (n: 1)! (kworker/0:1) [ 60.981935][ T9] ------------[ cut here ]------------ [ 60.987390][ T9] WARNING: CPU: 0 PID: 9 at drivers/hid/hid-core.c:1451 implement+0x22f/0x270 [ 60.996260][ T9] Modules linked in: [ 61.000147][ T9] CPU: 0 PID: 9 Comm: kworker/0:1 Not tainted 6.7.0-syzkaller-12377-g9d1694dc91ce #0 [ 61.009599][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 61.019652][ T9] Workqueue: events hidinput_led_worker [ 61.025200][ T9] RIP: 0010:implement+0x22f/0x270 [ 61.030232][ T9] Code: c7 c2 a0 88 d0 8b 65 48 8b 04 25 80 c2 03 00 49 8d bd 38 19 00 00 48 c7 c6 c0 67 d0 8b 4c 8d 88 90 08 00 00 e8 a2 18 84 fd 90 <0f> 0b 90 44 21 fd e9 58 ff ff ff 48 89 d7 89 44 24 14 48 89 54 24 [ 61.049886][ T9] RSP: 0018:ffffc900000e7ae0 EFLAGS: 00010086 [ 61.055957][ T9] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff816afbf9 [ 61.063925][ T9] RDX: ffff8880156a0000 RSI: ffffffff8578bd75 RDI: 0000000000000005 [ 61.071895][ T9] RBP: 0000000000000008 R08: 0000000000000005 R09: 0000000000000000 [ 61.079864][ T9] R10: 0000000080000001 R11: 0000000000000001 R12: 0000000000000000 [ 61.087832][ T9] R13: ffff888072c90000 R14: 0000000000000008 R15: 0000000000000001 [ 61.095804][ T9] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 61.104816][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 61.111395][ T9] CR2: 000000000066c7e0 CR3: 0000000071cd5000 CR4: 0000000000350ef0 [ 61.119365][ T9] Call Trace: [ 61.122641][ T9] [ 61.125571][ T9] ? show_regs+0x8f/0xa0 [ 61.129821][ T9] ? __warn+0xe6/0x390 [ 61.133900][ T9] ? implement+0x22f/0x270 [ 61.138489][ T9] ? report_bug+0x3bc/0x580 [ 61.142998][ T9] ? handle_bug+0x3d/0x70 [ 61.147325][ T9] ? exc_invalid_op+0x17/0x40 [ 61.152011][ T9] ? asm_exc_invalid_op+0x1a/0x20 [ 61.157035][ T9] ? __wake_up_klogd.part.0+0x99/0xf0 [ 61.162402][ T9] ? _dev_warn+0xe5/0x120 [ 61.166722][ T9] ? implement+0x22f/0x270 [ 61.171141][ T9] hid_output_report+0x2ef/0x4a0 [ 61.176088][ T9] __usbhid_submit_report+0x774/0xed0 [ 61.181458][ T9] ? usbhid_restart_out_queue.isra.0+0x390/0x390 [ 61.187788][ T9] ? lock_sync+0x190/0x190 [ 61.192207][ T9] usbhid_request+0x79/0xf0 [ 61.196711][ T9] ? usbhid_parse+0xa20/0xa20 [ 61.201389][ T9] hidinput_led_worker+0xbc/0x230 [ 61.206421][ T9] process_one_work+0x886/0x15d0 [ 61.211376][ T9] ? lock_sync+0x190/0x190 [ 61.215784][ T9] ? workqueue_congested+0x300/0x300 [ 61.221078][ T9] ? assign_work+0x1a0/0x250 [ 61.225736][ T9] worker_thread+0x8b9/0x1290 [ 61.230610][ T9] ? __kthread_parkme+0x14b/0x220 [ 61.235722][ T9] ? process_one_work+0x15d0/0x15d0 [ 61.240928][ T9] kthread+0x2c6/0x3a0 [ 61.244999][ T9] ? _raw_spin_unlock_irq+0x23/0x50 [ 61.250195][ T9] ? kthread_complete_and_exit+0x40/0x40 [ 61.255825][ T9] ret_from_fork+0x45/0x80 [ 61.260237][ T9] ? kthread_complete_and_exit+0x40/0x40 [ 61.265866][ T9] ret_from_fork_asm+0x11/0x20 [ 61.270644][ T9] [ 61.273748][ T9] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 61.281013][ T9] CPU: 0 PID: 9 Comm: kworker/0:1 Not tainted 6.7.0-syzkaller-12377-g9d1694dc91ce #0 [ 61.290457][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 61.300507][ T9] Workqueue: events hidinput_led_worker [ 61.306059][ T9] Call Trace: [ 61.309330][ T9] [ 61.312261][ T9] dump_stack_lvl+0xd9/0x1b0 [ 61.316848][ T9] panic+0x6dc/0x790 [ 61.320746][ T9] ? panic_smp_self_stop+0xa0/0xa0 [ 61.325852][ T9] ? show_trace_log_lvl+0x363/0x4f0 [ 61.331057][ T9] ? check_panic_on_warn+0x1f/0xb0 [ 61.336167][ T9] ? implement+0x22f/0x270 [ 61.340579][ T9] check_panic_on_warn+0xab/0xb0 [ 61.345515][ T9] __warn+0xf2/0x390 [ 61.349408][ T9] ? implement+0x22f/0x270 [ 61.353825][ T9] report_bug+0x3bc/0x580 [ 61.358150][ T9] handle_bug+0x3d/0x70 [ 61.362299][ T9] exc_invalid_op+0x17/0x40 [ 61.366798][ T9] asm_exc_invalid_op+0x1a/0x20 [ 61.371641][ T9] RIP: 0010:implement+0x22f/0x270 [ 61.376660][ T9] Code: c7 c2 a0 88 d0 8b 65 48 8b 04 25 80 c2 03 00 49 8d bd 38 19 00 00 48 c7 c6 c0 67 d0 8b 4c 8d 88 90 08 00 00 e8 a2 18 84 fd 90 <0f> 0b 90 44 21 fd e9 58 ff ff ff 48 89 d7 89 44 24 14 48 89 54 24 [ 61.396269][ T9] RSP: 0018:ffffc900000e7ae0 EFLAGS: 00010086 [ 61.402332][ T9] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff816afbf9 [ 61.410294][ T9] RDX: ffff8880156a0000 RSI: ffffffff8578bd75 RDI: 0000000000000005 [ 61.418256][ T9] RBP: 0000000000000008 R08: 0000000000000005 R09: 0000000000000000 [ 61.426215][ T9] R10: 0000000080000001 R11: 0000000000000001 R12: 0000000000000000 [ 61.434173][ T9] R13: ffff888072c90000 R14: 0000000000000008 R15: 0000000000000001 [ 61.442139][ T9] ? __wake_up_klogd.part.0+0x99/0xf0 [ 61.447507][ T9] ? _dev_warn+0xe5/0x120 [ 61.451839][ T9] hid_output_report+0x2ef/0x4a0 [ 61.456786][ T9] __usbhid_submit_report+0x774/0xed0 [ 61.462331][ T9] ? usbhid_restart_out_queue.isra.0+0x390/0x390 [ 61.468657][ T9] ? lock_sync+0x190/0x190 [ 61.473069][ T9] usbhid_request+0x79/0xf0 [ 61.477566][ T9] ? usbhid_parse+0xa20/0xa20 [ 61.482235][ T9] hidinput_led_worker+0xbc/0x230 [ 61.487259][ T9] process_one_work+0x886/0x15d0 [ 61.492199][ T9] ? lock_sync+0x190/0x190 [ 61.496604][ T9] ? workqueue_congested+0x300/0x300 [ 61.501891][ T9] ? assign_work+0x1a0/0x250 [ 61.506477][ T9] worker_thread+0x8b9/0x1290 [ 61.511155][ T9] ? __kthread_parkme+0x14b/0x220 [ 61.516173][ T9] ? process_one_work+0x15d0/0x15d0 [ 61.521375][ T9] kthread+0x2c6/0x3a0 [ 61.525440][ T9] ? _raw_spin_unlock_irq+0x23/0x50 [ 61.530640][ T9] ? kthread_complete_and_exit+0x40/0x40 [ 61.536290][ T9] ret_from_fork+0x45/0x80 [ 61.540722][ T9] ? kthread_complete_and_exit+0x40/0x40 [ 61.546350][ T9] ret_from_fork_asm+0x11/0x20 [ 61.551126][ T9] [ 61.554367][ T9] Kernel Offset: disabled [ 61.558765][ T9] Rebooting in 86400 seconds..