./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3086841440
<...>
[ 101.394255][ T972] cfg80211: failed to load regulatory.db
Warning: Permanently added '10.128.0.193' (ED25519) to the list of known hosts.
execve("./syz-executor3086841440", ["./syz-executor3086841440"], 0x7fffa296e380 /* 10 vars */) = 0
brk(NULL) = 0x555558039000
brk(0x555558039d00) = 0x555558039d00
arch_prctl(ARCH_SET_FS, 0x555558039380) = 0
set_tid_address(0x555558039650) = 5835
set_robust_list(0x555558039660, 24) = 0
rseq(0x555558039ca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor3086841440", 4096) = 28
getrandom("\x22\x96\xf9\xda\x92\x24\xbf\x7b", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x555558039d00
brk(0x55555805ad00) = 0x55555805ad00
brk(0x55555805b000) = 0x55555805b000
mprotect(0x7fa17e897000, 16384, PROT_READ) = 0
mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000
mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000
mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555558039650) = 5836
./strace-static-x86_64: Process 5836 attached
[pid 5836] set_robust_list(0x555558039660, 24) = 0
[pid 5836] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5836] setpgid(0, 0) = 0
[pid 5836] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5836] write(3, "1000", 4) = 4
[pid 5836] close(3) = 0
executing program
[pid 5836] write(1, "executing program\n", 18) = 18
[pid 5836] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3
[pid 5836] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffd59daec50) = 0
[pid 5836] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0
[pid 5836] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd59daec50) = 0
[pid 5836] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd59daec50) = 0
[pid 5836] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd59daec50) = 0
[pid 5836] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd59daec50) = 0
[pid 5836] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd59dadc40) = 18
[pid 5836] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd59daec50) = 0
[ 105.279648][ T1212] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[pid 5836] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd59daec50) = 0
[pid 5836] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd59daec50) = 0
[pid 5836] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd59dadc40) = 18
[pid 5836] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd59daec50) = 0
[pid 5836] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd59dadc40) = 9
[pid 5836] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd59daec50) = 0
[pid 5836] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd59dadc40) = 18
[pid 5836] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd59daec50) = 0
[pid 5836] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd59dadc40) = 4
[pid 5836] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd59daec50) = 0
[pid 5836] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd59dadc40) = 8
[pid 5836] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd59daec50) = 0
[ 105.473770][ T1212] usb 1-1: config 0 has an invalid interface number: 93 but max is 0
[ 105.482024][ T1212] usb 1-1: config 0 has no interface number 0
[pid 5836] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd59dadc40) = 8
[pid 5836] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd59daec50) = 0
[pid 5836] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd59dadc40) = 8
[pid 5836] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd59daec50) = 0
[pid 5836] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0
[pid 5836] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0
[pid 5836] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffd59dadc40) = 0
[ 105.536865][ T1212] usb 1-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65
[ 105.546096][ T1212] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 105.554142][ T1212] usb 1-1: Product: syz
[ 105.558324][ T1212] usb 1-1: Manufacturer: syz
[ 105.562965][ T1212] usb 1-1: SerialNumber: syz
[ 105.571298][ T1212] usb 1-1: config 0 descriptor??
[pid 5836] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffd59daec80) = 0
[pid 5836] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffd59dadc70) = 16
[ 105.805301][ T1212] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state.
[ 105.818025][ T1212] dvb-usb: will use the device's hardware PID filter (table count: 32).
[ 105.827383][ T1212] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design)
[ 105.836190][ T1212] usb 1-1: media controller created
[ 105.844834][ T1212] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 105.895191][ T1212] DVB: Unable to find symbol dib7000p_attach()
[ 105.901406][ T1212] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design'
[ 105.912726][ T1212] dvb-usb: will use the device's hardware PID filter (table count: 32).
[ 105.922274][ T1212] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design)
[ 105.931193][ T1212] usb 1-1: media controller created
[pid 5836] openat(AT_FDCWD, "/dev/i2c-1", O_RDWR|O_APPEND) = 4
[ 105.939009][ T1212] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 105.955247][ T1212] dib0700: the master dib7090 has to be initialized first
[ 105.962423][ T1212] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design'
[ 106.017652][ T5836] ------------[ cut here ]------------
[ 106.023263][ T5836] usb 1-1: BOGUS control dir, pipe 80000280 doesn't match bRequestType c0
[ 106.029379][ T1212] rc_core: IR keymap rc-dib0700-rc5 not found
[ 106.037932][ T1212] Registered IR keymap rc-empty
[ 106.039556][ T5836] WARNING: CPU: 1 PID: 5836 at drivers/usb/core/urb.c:411 usb_submit_urb+0x13c3/0x1790
[ 106.052467][ T5836] Modules linked in:
[ 106.056425][ T5836] CPU: 1 UID: 0 PID: 5836 Comm: syz-executor308 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full)
[ 106.068893][ T5836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 106.079041][ T5836] RIP: 0010:usb_submit_urb+0x13c3/0x1790
[ 106.084748][ T5836] Code: e8 b2 12 89 fa 4c 89 ef e8 ba b7 d5 fe 44 8b 44 24 28 44 89 f9 48 8b 54 24 38 48 89 c6 48 c7 c7 40 06 73 8c e8 fe d7 47 fa 90 <0f> 0b 90 90 e9 84 ef ff ff e8 7f 12 89 fa 0f b6 2d d9 8d 5d 09 31
[ 106.104454][ T5836] RSP: 0018:ffffc90003eff980 EFLAGS: 00010286
[ 106.110603][ T5836] RAX: 0000000000000000 RBX: ffff888020ef6800 RCX: ffffffff817ae248
[ 106.118580][ T5836] RDX: ffff888012e9bc00 RSI: ffffffff817ae255 RDI: 0000000000000001
[ 106.126609][ T5836] RBP: ffff888140fef058 R08: 0000000000000001 R09: 0000000000000000
[ 106.134634][ T5836] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88803498ce80
[ 106.142669][ T5836] R13: ffff888140fef0b0 R14: 0000000000000001 R15: 0000000080000280
[ 106.150703][ T5836] FS: 0000555558039380(0000) GS:ffff88812485a000(0000) knlGS:0000000000000000
[ 106.159705][ T5836] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 106.166312][ T5836] CR2: 0000200000002580 CR3: 0000000073ffa000 CR4: 0000000000350ef0
[ 106.174333][ T5836] Call Trace:
[ 106.177625][ T5836]
[ 106.180619][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5
[ 106.186296][ T5836] ? __init_swait_queue_head+0xca/0x150
[ 106.191934][ T5836] usb_start_wait_urb+0x104/0x4b0
[ 106.197011][ T5836] ? __pfx_usb_start_wait_urb+0x10/0x10
[ 106.202655][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5
[ 106.208344][ T5836] ? __asan_memset+0x23/0x50
[ 106.213014][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5
[ 106.218696][ T5836] usb_control_msg+0x326/0x4a0
[ 106.223536][ T5836] ? __pfx_usb_control_msg+0x10/0x10
[ 106.228855][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5
[ 106.234599][ T5836] dib0700_ctrl_rd+0x1b2/0x350
[ 106.239485][ T5836] dib0700_i2c_xfer+0xa9a/0xe40
[ 106.244393][ T5836] __i2c_transfer+0x6b6/0x2190
[ 106.249203][ T5836] ? lockdep_hardirqs_on+0x7c/0x110
[ 106.254489][ T5836] ? __pfx___i2c_transfer+0x10/0x10
[ 106.259787][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5
[ 106.265461][ T5836] ? rt_mutex_slowtrylock+0xc9/0x100
[ 106.270868][ T5836] i2c_transfer+0x1da/0x380
[ 106.275427][ T5836] i2cdev_ioctl_rdwr+0x373/0x710
[ 106.280485][ T5836] i2cdev_ioctl+0x5ff/0x820
[ 106.285040][ T5836] ? __pfx_i2cdev_ioctl+0x10/0x10
[ 106.290160][ T5836] ? __pfx_i2cdev_ioctl+0x10/0x10
[ 106.295259][ T5836] __x64_sys_ioctl+0x18e/0x210
[ 106.300125][ T5836] do_syscall_64+0xcd/0x4c0
[ 106.304683][ T5836] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 106.310650][ T5836] RIP: 0033:0x7fa17e8248f9
[ 106.315094][ T5836] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 106.334906][ T5836] RSP: 002b:00007ffd59dafc98 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 106.343396][ T5836] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa17e8248f9
[ 106.351463][ T5836] RDX: 0000200000002580 RSI: 0000000000000707 RDI: 0000000000000004
[ 106.359507][ T5836] RBP: 00007fa17e8975f0 R08: 00232d6332692f76 R09: 0000000000000006
[ 106.367502][ T5836] R10: 000000000000001f R11: 0000000000000246 R12: 0000000000000001
[ 106.375561][ T5836] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001
[ 106.383600][ T5836]
[ 106.386640][ T5836] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 106.393938][ T5836] CPU: 1 UID: 0 PID: 5836 Comm: syz-executor308 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full)
[ 106.406357][ T5836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 106.416415][ T5836] Call Trace:
[ 106.419692][ T5836]
[ 106.422624][ T5836] dump_stack_lvl+0x3d/0x1f0
[ 106.427247][ T5836] panic+0x71c/0x800
[ 106.431164][ T5836] ? __pfx_panic+0x10/0x10
[ 106.435603][ T5836] ? show_trace_log_lvl+0x29b/0x3e0
[ 106.440837][ T5836] ? check_panic_on_warn+0x1f/0xb0
[ 106.445986][ T5836] ? usb_submit_urb+0x13c3/0x1790
[ 106.451021][ T5836] check_panic_on_warn+0xab/0xb0
[ 106.455985][ T5836] __warn+0xf6/0x3c0
[ 106.459910][ T5836] ? preempt_schedule_notrace+0x62/0xe0
[ 106.465480][ T5836] ? usb_submit_urb+0x13c3/0x1790
[ 106.470512][ T5836] report_bug+0x3c3/0x580
[ 106.474863][ T5836] ? usb_submit_urb+0x13c3/0x1790
[ 106.479906][ T5836] handle_bug+0x184/0x210
[ 106.484241][ T5836] exc_invalid_op+0x17/0x50
[ 106.488763][ T5836] asm_exc_invalid_op+0x1a/0x20
[ 106.493634][ T5836] RIP: 0010:usb_submit_urb+0x13c3/0x1790
[ 106.499291][ T5836] Code: e8 b2 12 89 fa 4c 89 ef e8 ba b7 d5 fe 44 8b 44 24 28 44 89 f9 48 8b 54 24 38 48 89 c6 48 c7 c7 40 06 73 8c e8 fe d7 47 fa 90 <0f> 0b 90 90 e9 84 ef ff ff e8 7f 12 89 fa 0f b6 2d d9 8d 5d 09 31
[ 106.518923][ T5836] RSP: 0018:ffffc90003eff980 EFLAGS: 00010286
[ 106.525009][ T5836] RAX: 0000000000000000 RBX: ffff888020ef6800 RCX: ffffffff817ae248
[ 106.532998][ T5836] RDX: ffff888012e9bc00 RSI: ffffffff817ae255 RDI: 0000000000000001
[ 106.540984][ T5836] RBP: ffff888140fef058 R08: 0000000000000001 R09: 0000000000000000
[ 106.548963][ T5836] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88803498ce80
[ 106.557031][ T5836] R13: ffff888140fef0b0 R14: 0000000000000001 R15: 0000000080000280
[ 106.565025][ T5836] ? __warn_printk+0x198/0x350
[ 106.569826][ T5836] ? __warn_printk+0x1a5/0x350
[ 106.574638][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5
[ 106.580298][ T5836] ? __init_swait_queue_head+0xca/0x150
[ 106.585872][ T5836] usb_start_wait_urb+0x104/0x4b0
[ 106.590940][ T5836] ? __pfx_usb_start_wait_urb+0x10/0x10
[ 106.596521][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5
[ 106.602180][ T5836] ? __asan_memset+0x23/0x50
[ 106.606785][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5
[ 106.612450][ T5836] usb_control_msg+0x326/0x4a0
[ 106.617237][ T5836] ? __pfx_usb_control_msg+0x10/0x10
[ 106.622544][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5
[ 106.628210][ T5836] dib0700_ctrl_rd+0x1b2/0x350
[ 106.633025][ T5836] dib0700_i2c_xfer+0xa9a/0xe40
[ 106.637933][ T5836] __i2c_transfer+0x6b6/0x2190
[ 106.642740][ T5836] ? lockdep_hardirqs_on+0x7c/0x110
[ 106.647981][ T5836] ? __pfx___i2c_transfer+0x10/0x10
[ 106.653221][ T5836] ? srso_alias_return_thunk+0x5/0xfbef5
[ 106.658877][ T5836] ? rt_mutex_slowtrylock+0xc9/0x100
[ 106.664198][ T5836] i2c_transfer+0x1da/0x380
[ 106.668741][ T5836] i2cdev_ioctl_rdwr+0x373/0x710
[ 106.673729][ T5836] i2cdev_ioctl+0x5ff/0x820
[ 106.678267][ T5836] ? __pfx_i2cdev_ioctl+0x10/0x10
[ 106.683340][ T5836] ? __pfx_i2cdev_ioctl+0x10/0x10
[ 106.688401][ T5836] __x64_sys_ioctl+0x18e/0x210
[ 106.693212][ T5836] do_syscall_64+0xcd/0x4c0
[ 106.697738][ T5836] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 106.703652][ T5836] RIP: 0033:0x7fa17e8248f9
[ 106.708081][ T5836] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 106.727714][ T5836] RSP: 002b:00007ffd59dafc98 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 106.736151][ T5836] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa17e8248f9
[ 106.744159][ T5836] RDX: 0000200000002580 RSI: 0000000000000707 RDI: 0000000000000004
[ 106.752148][ T5836] RBP: 00007fa17e8975f0 R08: 00232d6332692f76 R09: 0000000000000006
[ 106.760135][ T5836] R10: 000000000000001f R11: 0000000000000246 R12: 0000000000000001
[ 106.768116][ T5836] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001
[ 106.776124][ T5836]
[ 106.779345][ T5836] Kernel Offset: disabled
[ 106.783679][ T5836] Rebooting in 86400 seconds..