./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1738591960 <...> forked to background, child pid 3183 no interfaces have a carrier [ 22.562900][ T3184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 22.572233][ T3184] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.239' (ECDSA) to the list of known hosts. execve("./syz-executor1738591960", ["./syz-executor1738591960"], 0x7ffe775de260 /* 10 vars */) = 0 brk(NULL) = 0x5555567f1000 brk(0x5555567f1c40) = 0x5555567f1c40 arch_prctl(ARCH_SET_FS, 0x5555567f1300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor1738591960", 4096) = 28 brk(0x555556812c40) = 0x555556812c40 brk(0x555556813000) = 0x555556813000 mprotect(0x7f49f2943000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 ioctl(3, USB_RAW_IOCTL_INIT, 0x7fff00bcc030) = 0 ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff00bcc030) = 0 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff00bcc030) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fff00bcb020) = 18 syzkaller login: [ 43.485140][ T14] usb 1-1: new high-speed USB device number 2 using dummy_hcd ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff00bcc030) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fff00bcb020) = 18 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff00bcc030) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fff00bcb020) = 0 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff00bcc030) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fff00bcb020) = 0 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff00bcc030) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fff00bcb020) = 0 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff00bcc030) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fff00bcb020) = 9 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff00bcc030) = 0 [ 43.885307][ T14] usb 1-1: unable to get BOS descriptor or descriptor too short ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fff00bcb020) = 128 [ 43.965210][ T14] usb 1-1: config 0 has an invalid interface number: 39 but max is 2 [ 43.973465][ T14] usb 1-1: config 0 has an invalid interface number: 182 but max is 2 [ 43.981678][ T14] usb 1-1: config 0 has an invalid interface number: 182 but max is 2 [ 43.989886][ T14] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 43.998842][ T14] usb 1-1: config 0 has no interface number 0 [ 44.004908][ T14] usb 1-1: config 0 has no interface number 1 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff00bcc030) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fff00bcb020) = 0 [ 44.011041][ T14] usb 1-1: config 0 interface 39 altsetting 9 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 44.021922][ T14] usb 1-1: config 0 interface 39 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 44.032464][ T14] usb 1-1: Duplicate descriptor for config 0 interface 182 altsetting 0, skipping [ 44.041767][ T14] usb 1-1: config 0 interface 39 has no altsetting 0 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff00bcc030) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fff00bcb020) = 0 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff00bcc030) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fff00bcb020) = 0 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff00bcc030) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fff00bcb020) = 0 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff00bcc030) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fff00bcb020) = 0 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff00bcc030) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fff00bcb020) = 0 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff00bcc030) = 0 ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0x92) = 0 ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f49f29493ac) = 1 ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7fff00bcb020) = 0 [ 44.285236][ T14] usb 1-1: string descriptor 0 read error: -22 [ 44.291561][ T14] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=9c.90 [ 44.300648][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.311427][ T14] usb 1-1: config 0 descriptor?? [ 44.358228][ T14] ------------[ cut here ]------------ [ 44.363725][ T14] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 44.370050][ T14] WARNING: CPU: 0 PID: 14 at drivers/usb/core/urb.c:502 usb_submit_urb+0xed2/0x18a0 [ 44.379459][ T14] Modules linked in: [ 44.383343][ T14] CPU: 0 PID: 14 Comm: kworker/0:1 Not tainted 5.19.0-rc8-syzkaller-00102-g33ea1340bafe #0 [ 44.393643][ T14] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 44.403745][ T14] Workqueue: usb_hub_wq hub_event [ 44.408986][ T14] RIP: 0010:usb_submit_urb+0xed2/0x18a0 [ 44.414594][ T14] Code: 7c 24 18 e8 90 b0 ee fb 48 8b 7c 24 18 e8 06 d4 03 ff 41 89 d8 44 89 e1 4c 89 ea 48 89 c6 48 c7 c7 80 08 6f 8a e8 4d c5 a6 03 <0f> 0b e9 58 f8 ff ff e8 62 b0 ee fb 48 81 c5 c0 05 00 00 e9 84 f7 [ 44.434592][ T14] RSP: 0018:ffffc90000136e78 EFLAGS: 00010282 [ 44.440704][ T14] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 44.448722][ T14] RDX: ffff88813fef9d80 RSI: ffffffff8160d118 RDI: fffff52000026dc1 [ 44.456743][ T14] RBP: ffff8880267ce600 R08: 0000000000000005 R09: 0000000000000000 [ 44.464715][ T14] R10: 0000000080000000 R11: 0000000000000001 R12: 0000000000000001 [ 44.472746][ T14] R13: ffff88814a673938 R14: 0000000000000002 R15: ffff8880169c6600 [ 44.480807][ T14] FS: 0000000000000000(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 44.489909][ T14] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 44.496538][ T14] CR2: 0000561a7e6cf010 CR3: 000000001f40d000 CR4: 0000000000350ef0 [ 44.504518][ T14] Call Trace: [ 44.507896][ T14] [ 44.510954][ T14] ? lockdep_init_map_type+0x1f2/0x7f0 [ 44.516528][ T14] usb_start_wait_urb+0x101/0x4c0 [ 44.521766][ T14] ? usb_api_blocking_completion+0xa0/0xa0 [ 44.527703][ T14] ? trace_kmalloc+0x32/0xf0 [ 44.532338][ T14] ? memset+0x20/0x40 [ 44.536387][ T14] usb_bulk_msg+0x226/0x550 [ 44.540920][ T14] amradio_send_cmd+0x2d6/0x8b0 [ 44.545837][ T14] ? lockdep_init_map_type+0x21a/0x7f0 [ 44.551309][ T14] ? vidioc_querycap+0x130/0x130 exit_group(0) = ? +++ exited with 0 +++ [ 44.556399][ T14] ? read_wo