./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor347782969 <...> forked to background, child pid 3182 no interfaces have a carrier [ 22.447947][ T3183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 22.457454][ T3183] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.187' (ECDSA) to the list of known hosts. execve("./syz-executor347782969", ["./syz-executor347782969"], 0x7ffc5d5e4a50 /* 10 vars */) = 0 brk(NULL) = 0x5555571ba000 brk(0x5555571bac40) = 0x5555571bac40 arch_prctl(ARCH_SET_FS, 0x5555571ba300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor347782969", 4096) = 27 brk(0x5555571dbc40) = 0x5555571dbc40 brk(0x5555571dc000) = 0x5555571dc000 mprotect(0x7ff050e48000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 ioctl(3, USB_RAW_IOCTL_INIT, 0x7fff66512d80) = 0 ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff66512d80) = 0 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff66512d80) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fff66511d70) = 18 syzkaller login: [ 43.251716][ T918] usb 1-1: new high-speed USB device number 2 using dummy_hcd ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff66512d80) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fff66511d70) = 18 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff66512d80) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fff66511d70) = 9 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff66512d80) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fff66511d70) = 36 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff66512d80) = 0 ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [ 43.611776][ T918] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50183, setting to 1024 [ 43.623870][ T918] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 43.634133][ T918] usb 1-1: New USB device found, idVendor=05ac, idProduct=0253, bcdDevice= 0.40 [ 43.643223][ T918] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.655091][ T918] usb 1-1: config 0 descriptor?? ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7ff050e4e3ac) = -1 EINVAL (Invalid argument) ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7fff66511d70) = 0 [ 43.674341][ T3610] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 43.694582][ T918] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input5 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff66512db0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fff66511da0) = 8 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff66512db0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7fff66511da0) = 8 [ 44.122028][ T2955] ------------[ cut here ]------------ [ 44.127819][ T2955] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 44.134256][ T2955] WARNING: CPU: 1 PID: 2955 at drivers/usb/core/urb.c:502 usb_submit_urb+0xed2/0x1880 [ 44.143968][ T2955] Modules linked in: [ 44.147849][ T2955] CPU: 1 PID: 2955 Comm: acpid Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0 [ 44.157165][ T2955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 44.167352][ T2955] RIP: 0010:usb_submit_urb+0xed2/0x1880 [ 44.173002][ T2955] Code: 7c 24 18 e8 c0 0d ef fb 48 8b 7c 24 18 e8 a6 6f 03 ff 41 89 d8 44 89 e1 4c 89 ea 48 89 c6 48 c7 c7 40 dc 8f 8a e8 2b c3 ac 03 <0f> 0b e9 58 f8 ff ff e8 92 0d ef fb 48 81 c5 c0 05 00 00 e9 84 f7 [ 44.192751][ T2955] RSP: 0018:ffffc90002d8f830 EFLAGS: 00010282 [ 44.198830][ T2955] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 44.206850][ T2955] RDX: ffff88807de05880 RSI: ffffffff8161f148 RDI: fffff520005b1ef8 [ 44.214852][ T2955] RBP: ffff88801ce71500 R08: 0000000000000005 R09: 0000000000000000 [ 44.222847][ T2955] R10: 0000000080000000 R11: 0000000000000000 R12: 0000000000000001 [ 44.230926][ T2955] R13: ffff888017aebe10 R14: 0000000000000002 R15: ffff88801267bd00 [ 44.238948][ T2955] FS: 00007f663d91f740(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 44.248171][ T2955] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 44.254894][ T2955] CR2: 00007fffced2dff8 CR3: 000000007e691000 CR4: 0000000000350ee0 [ 44.262912][ T2955] Call Trace: [ 44.266241][ T2955] [ 44.269162][ T2955] bcm5974_start_traffic+0xbd/0x170 [ 44.274505][ T2955] bcm5974_open+0x9f/0x160 [ 44.278932][ T2955] input_open_device+0x1bb/0x320 [ 44.283898][ T2955] ? bcm5974_resume+0xc0/0xc0 [ 44.288584][ T2955] mousedev_open_device+0xdc/0x140 [ 44.293748][ T2955] mousedev_open+0x2f8/0x580 [ 44.298356][ T2955] ? mousedev_event+0x1370/0x1370 [ 44.303402][ T2955] chrdev_open+0x266/0x770 [ 44.307914][ T2955] ? cdev_device_add+0x220/0x220 [ 44.312918][ T2955] ? fsnotify_perm.part.0+0x221/0x610 [ 44.318329][ T2955] do_dentry_open+0x4a4/0x13a0 exit_group(0) = ? +++ exited with 0 +++ [