./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor108659293 <...> Warning: Permanently added '10.128.1.99' (ED25519) to the list of known hosts. execve("./syz-executor108659293", ["./syz-executor108659293"], 0x7ffe66119460 /* 10 vars */) = 0 brk(NULL) = 0x5555622ec000 brk(0x5555622ecd40) = 0x5555622ecd40 arch_prctl(ARCH_SET_FS, 0x5555622ec3c0) = 0 set_tid_address(0x5555622ec690) = 5791 set_robust_list(0x5555622ec6a0, 24) = 0 rseq(0x5555622ecce0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor108659293", 4096) = 27 getrandom("\x93\x88\x8d\x23\x16\x7b\x3c\x3c", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x5555622ecd40 brk(0x55556230dd40) = 0x55556230dd40 brk(0x55556230e000) = 0x55556230e000 mprotect(0x7f1318b8c000, 16384, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3 socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 4 sendto(4, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36 recvfrom(4, [{nlmsg_len=864, nlmsg_type=nlctrl, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=5791}, "\x01\x02\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00\x06\x00\x01\x00\x1d\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x30\x00\x00\x00\xe8\x02\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x05\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x03\x00"...], 4096, 0, NULL, NULL) = 864 recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5791}, {error=0, msg={nlmsg_len=36, nlmsg_type=nlctrl, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 5 ioctl(5, SIOCGIFINDEX, {ifr_name="wpan0", ifr_ifindex=11}) = 0 close(5) = 0 sendto(4, [{nlmsg_len=36, nlmsg_type=nl802154, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x0b\x00\x00\x00\x08\x00\x03\x00\x0b\x00\x00\x00\x06\x00\x0a\x00\xa0\xaa\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36 recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5791}, {error=0, msg={nlmsg_len=36, nlmsg_type=nl802154, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 5 ioctl(5, SIOCGIFINDEX, {ifr_name="wpan0", ifr_ifindex=11}) = 0 close(5) = 0 sendto(3, [{nlmsg_len=44, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x00\x00\x00\x00\x0b\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x0c\x00\x01\x00\x02\x00\xaa\xaa\xaa\xaa\xaa\xaa"], 44, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 44 recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5791}, {error=0, msg={nlmsg_len=44, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 sendto(3, [{nlmsg_len=68, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|NLM_F_EXCL|NLM_F_CREATE, nlmsg_seq=0, nlmsg_pid=0}, {ifi_family=AF_UNSPEC, ifi_type=ARPHRD_NETROM, ifi_index=0, ifi_flags=0, ifi_change=0}, [[{nla_len=11, nla_type=IFLA_IFNAME}, "lowpan0"...], [{nla_len=16, nla_type=IFLA_LINKINFO}, [{nla_len=10, nla_type=IFLA_INFO_KIND}, "lowpan"...]], [{nla_len=8, nla_type=IFLA_LINK}, 11]]], 68, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 68 recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5791}, {error=0, msg={nlmsg_len=68, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|NLM_F_EXCL|NLM_F_CREATE, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 5 ioctl(5, SIOCGIFINDEX, {ifr_name="wpan1", ifr_ifindex=12}) = 0 close(5) = 0 sendto(4, [{nlmsg_len=36, nlmsg_type=nl802154, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x0b\x00\x00\x00\x08\x00\x03\x00\x0c\x00\x00\x00\x06\x00\x0a\x00\xa1\xaa\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36 recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5791}, {error=0, msg={nlmsg_len=36, nlmsg_type=nl802154, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 5 ioctl(5, SIOCGIFINDEX, {ifr_name="wpan1", ifr_ifindex=12}) = 0 close(5) = 0 sendto(3, [{nlmsg_len=44, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, {ifi_family=AF_UNSPEC, ifi_type=ARPHRD_NETROM, ifi_index=if_nametoindex("wpan1"), ifi_flags=IFF_UP, ifi_change=0x1}, [{nla_len=12, nla_type=IFLA_ADDRESS}, 02:01:aa:aa:aa:aa:aa]], 44, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 44 recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5791}, {error=0, msg={nlmsg_len=44, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 close(3) = 0 close(4) = 0 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5793 attached , child_tidptr=0x5555622ec690) = 5793 [pid 5793] set_robust_list(0x5555622ec6a0, 24) = 0 [pid 5793] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5793] getppid() = 0 [pid 5793] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5793] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5793] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5793] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5793] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5793] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5793] unshare(CLONE_NEWNS) = 0 [pid 5793] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5793] unshare(CLONE_NEWIPC) = 0 [pid 5793] unshare(CLONE_NEWCGROUP) = 0 [pid 5793] unshare(CLONE_NEWUTS) = 0 [pid 5793] unshare(CLONE_SYSVSEM) = 0 [pid 5793] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5793] write(3, "16777216", 8) = 8 [pid 5793] close(3) = 0 [pid 5793] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5793] write(3, "536870912", 9) = 9 [pid 5793] close(3) = 0 [pid 5793] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5793] write(3, "1024", 4) = 4 [pid 5793] close(3) = 0 [pid 5793] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5793] write(3, "8192", 4) = 4 [pid 5793] close(3) = 0 [pid 5793] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5793] write(3, "1024", 4) = 4 [pid 5793] close(3) = 0 [pid 5793] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5793] write(3, "1024", 4) = 4 [pid 5793] close(3) = 0 [pid 5793] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5793] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5793] close(3) = 0 [pid 5793] getpid() = 1 [pid 5793] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5797] rseq(0x7f1318abffe0, 0x20, 0, 0x53053053) = 0 [pid 5796] <... clone3 resumed> => {parent_tid=[3]}, 88) = 3 [pid 5797] set_robust_list(0x7f1318abf9a0, 24 [pid 5796] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5797] <... set_robust_list resumed>) = 0 [pid 5797] rt_sigprocmask(SIG_SETMASK, [], [pid 5796] futex(0x7f1318b923e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5797] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5796] <... futex resumed>) = 0 [pid 5797] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR [pid 5796] futex(0x7f1318b923ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 5797] <... openat resumed>) = 3 [pid 5797] ioctl(3, USB_RAW_IOCTL_INIT, 0x7f1318abe1f0) = 0 [pid 5797] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5797] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5797] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5797] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5797] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5797] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 18 [pid 5797] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [ 209.041146][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [pid 5797] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5797] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5797] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 18 [pid 5797] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5797] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 9 [pid 5797] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5797] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 36 [pid 5797] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5797] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 4 [pid 5797] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5797] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 8 [pid 5797] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5797] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 8 [pid 5797] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [ 209.202316][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 209.221480][ T9] usb 1-1: config 2 has an invalid interface number: 31 but max is 0 [ 209.229890][ T9] usb 1-1: config 2 has no interface number 0 [ 209.236568][ T9] usb 1-1: config 2 interface 31 has no altsetting 0 [pid 5797] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 8 [pid 5797] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5797] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0x3) = 0 [pid 5797] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5797] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f1318b9252c) = 1 [pid 5797] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f1318b9253c) = 10 [pid 5797] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f1318abd1e0) = 0 [ 209.266601][ T9] usb 1-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 209.276187][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.284599][ T9] usb 1-1: Product: syz [ 209.289026][ T9] usb 1-1: Manufacturer: syz [ 209.294144][ T9] usb 1-1: SerialNumber: syz [pid 5797] futex(0x7f1318b923ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5796] <... futex resumed>) = 0 [pid 5797] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5796] futex(0x7f1318b923e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5797] <... ioctl resumed>, 0x7f1318abe220) = 0 [pid 5796] <... futex resumed>) = 0 [pid 5797] ioctl(3, USB_RAW_IOCTL_EP_DISABLE [pid 5796] futex(0x7f1318b923ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 5797] <... ioctl resumed>, 0x1) = 0 [pid 5797] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xa) = 0 [pid 5797] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f1318b9252c) = 1 [pid 5797] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f1318b9253c) = 10 [pid 5797] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f1318abd210) = 0 [pid 5797] futex(0x7f1318b923ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5796] <... futex resumed>) = 0 [pid 5797] futex(0x7f1318b923e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5796] close(3) = 0 [pid 5796] close(4) = -1 EBADF (Bad file descriptor) [pid 5796] close(5) = -1 EBADF (Bad file descriptor) [pid 5796] close(6) = -1 EBADF (Bad file descriptor) [pid 5796] close(7) = -1 EBADF (Bad file descriptor) [pid 5796] close(8) = -1 EBADF (Bad file descriptor) [pid 5796] close(9) = -1 EBADF (Bad file descriptor) [pid 5796] close(10) = -1 EBADF (Bad file descriptor) [pid 5796] close(11) = -1 EBADF (Bad file descriptor) [pid 5796] close(12) = -1 EBADF (Bad file descriptor) [pid 5796] close(13) = -1 EBADF (Bad file descriptor) [pid 5796] close(14) = -1 EBADF (Bad file descriptor) [pid 5796] close(15) = -1 EBADF (Bad file descriptor) [pid 5796] close(16) = -1 EBADF (Bad file descriptor) [pid 5796] close(17) = -1 EBADF (Bad file descriptor) [pid 5796] close(18) = -1 EBADF (Bad file descriptor) [pid 5796] close(19) = -1 EBADF (Bad file descriptor) [pid 5796] close(20) = -1 EBADF (Bad file descriptor) [pid 5796] close(21) = -1 EBADF (Bad file descriptor) [pid 5796] close(22) = -1 EBADF (Bad file descriptor) [pid 5796] close(23) = -1 EBADF (Bad file descriptor) [pid 5796] close(24) = -1 EBADF (Bad file descriptor) [pid 5796] close(25) = -1 EBADF (Bad file descriptor) [pid 5796] close(26) = -1 EBADF (Bad file descriptor) [pid 5796] close(27) = -1 EBADF (Bad file descriptor) [pid 5796] close(28) = -1 EBADF (Bad file descriptor) [pid 5796] close(29) = -1 EBADF (Bad file descriptor) [pid 5796] exit_group(0) = ? [pid 5797] <... futex resumed>) = ? [pid 5797] +++ exited with 0 +++ [pid 5796] +++ exited with 0 +++ [pid 5793] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [ 209.803783][ T9] ch9200 1-1:2.31: probe with driver ch9200 failed with error -22 [ 209.832474][ T9] usb 1-1: USB disconnect, device number 2 [pid 5793] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5793] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5799 attached [pid 5799] set_robust_list(0x5555622ec6a0, 24 [pid 5793] <... clone resumed>, child_tidptr=0x5555622ec690) = 4 [pid 5799] <... set_robust_list resumed>) = 0 [pid 5799] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5799] setpgid(0, 0) = 0 [pid 5799] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5799] write(3, "1000", 4) = 4 [pid 5799] close(3executing program ) = 0 [pid 5799] write(1, "executing program\n", 18) = 18 [pid 5799] futex(0x7f1318b923ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5799] rt_sigaction(SIGRT_1, {sa_handler=0x7f1318b39d70, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1318b2bb80}, NULL, 8) = 0 [pid 5799] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5799] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1318a9f000 [pid 5799] mprotect(0x7f1318aa0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5799] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5799] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1318abf990, parent_tid=0x7f1318abf990, exit_signal=0, stack=0x7f1318a9f000, stack_size=0x20300, tls=0x7f1318abf6c0} => {parent_tid=[5]}, 88) = 5 [pid 5799] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5799] futex(0x7f1318b923e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5799] futex(0x7f1318b923ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000}./strace-static-x86_64: Process 5800 attached [pid 5800] rseq(0x7f1318abffe0, 0x20, 0, 0x53053053) = 0 [pid 5800] set_robust_list(0x7f1318abf9a0, 24) = 0 [pid 5800] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5800] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5800] ioctl(3, USB_RAW_IOCTL_INIT, 0x7f1318abe1f0) = 0 [pid 5800] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5800] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5800] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5800] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5800] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5800] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 18 [pid 5800] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [ 210.301177][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [pid 5800] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5800] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5800] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 18 [pid 5800] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5800] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 9 [pid 5800] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5800] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 36 [pid 5800] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5800] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 4 [pid 5800] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5800] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 8 [pid 5800] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5800] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 8 [ 210.461030][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 210.478229][ T9] usb 1-1: config 2 has an invalid interface number: 31 but max is 0 [ 210.486788][ T9] usb 1-1: config 2 has no interface number 0 [ 210.493367][ T9] usb 1-1: config 2 interface 31 has no altsetting 0 [pid 5800] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5800] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 8 [pid 5800] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5800] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0x3) = 0 [pid 5800] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5800] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f1318b9252c) = 1 [pid 5800] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f1318b9253c) = 10 [pid 5800] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f1318abd1e0) = 0 [ 210.520376][ T9] usb 1-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 210.529942][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.538363][ T9] usb 1-1: Product: syz [ 210.542828][ T9] usb 1-1: Manufacturer: syz [ 210.547575][ T9] usb 1-1: SerialNumber: syz [pid 5800] futex(0x7f1318b923ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5799] <... futex resumed>) = 0 [pid 5800] futex(0x7f1318b923e8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 5799] futex(0x7f1318b923e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5800] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5799] <... futex resumed>) = 0 [pid 5800] <... ioctl resumed>, 0x7f1318abe220) = 0 [pid 5799] futex(0x7f1318b923ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 5800] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0x1) = 0 [pid 5800] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xa) = 0 [pid 5800] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f1318b9252c) = 1 [pid 5800] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f1318b9253c) = 10 [pid 5800] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f1318abd210) = 0 [pid 5800] futex(0x7f1318b923ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5800] futex(0x7f1318b923e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5799] <... futex resumed>) = 0 [pid 5799] close(3) = 0 [pid 5799] close(4) = -1 EBADF (Bad file descriptor) [pid 5799] close(5) = -1 EBADF (Bad file descriptor) [pid 5799] close(6) = -1 EBADF (Bad file descriptor) [pid 5799] close(7) = -1 EBADF (Bad file descriptor) [pid 5799] close(8) = -1 EBADF (Bad file descriptor) [pid 5799] close(9) = -1 EBADF (Bad file descriptor) [pid 5799] close(10) = -1 EBADF (Bad file descriptor) [pid 5799] close(11) = -1 EBADF (Bad file descriptor) [pid 5799] close(12) = -1 EBADF (Bad file descriptor) [pid 5799] close(13) = -1 EBADF (Bad file descriptor) [pid 5799] close(14) = -1 EBADF (Bad file descriptor) [pid 5799] close(15) = -1 EBADF (Bad file descriptor) [pid 5799] close(16) = -1 EBADF (Bad file descriptor) [pid 5799] close(17) = -1 EBADF (Bad file descriptor) [pid 5799] close(18) = -1 EBADF (Bad file descriptor) [pid 5799] close(19) = -1 EBADF (Bad file descriptor) [pid 5799] close(20) = -1 EBADF (Bad file descriptor) [pid 5799] close(21) = -1 EBADF (Bad file descriptor) [pid 5799] close(22) = -1 EBADF (Bad file descriptor) [pid 5799] close(23) = -1 EBADF (Bad file descriptor) [pid 5799] close(24) = -1 EBADF (Bad file descriptor) [pid 5799] close(25) = -1 EBADF (Bad file descriptor) [pid 5799] close(26) = -1 EBADF (Bad file descriptor) [pid 5799] close(27) = -1 EBADF (Bad file descriptor) [pid 5799] close(28) = -1 EBADF (Bad file descriptor) [pid 5799] close(29) = -1 EBADF (Bad file descriptor) [pid 5799] exit_group(0) = ? [pid 5800] <... futex resumed>) = ? [ 211.024401][ T9] ch9200 1-1:2.31: probe with driver ch9200 failed with error -22 [pid 5800] +++ exited with 0 +++ [pid 5799] +++ exited with 0 +++ [pid 5793] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5793] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5793] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5801 attached , child_tidptr=0x5555622ec690) = 6 [pid 5801] set_robust_list(0x5555622ec6a0, 24) = 0 [pid 5801] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 211.082833][ T9] usb 1-1: USB disconnect, device number 3 [pid 5801] setpgid(0, 0) = 0 [pid 5801] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5801] write(3, "1000", 4executing program ) = 4 [pid 5801] close(3) = 0 [pid 5801] write(1, "executing program\n", 18) = 18 [pid 5801] futex(0x7f1318b923ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5801] rt_sigaction(SIGRT_1, {sa_handler=0x7f1318b39d70, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1318b2bb80}, NULL, 8) = 0 [pid 5801] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5801] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1318a9f000 [pid 5801] mprotect(0x7f1318aa0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5801] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5801] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1318abf990, parent_tid=0x7f1318abf990, exit_signal=0, stack=0x7f1318a9f000, stack_size=0x20300, tls=0x7f1318abf6c0}./strace-static-x86_64: Process 5802 attached [pid 5802] rseq(0x7f1318abffe0, 0x20, 0, 0x53053053 [pid 5801] <... clone3 resumed> => {parent_tid=[7]}, 88) = 7 [pid 5802] <... rseq resumed>) = 0 [pid 5801] rt_sigprocmask(SIG_SETMASK, [], [pid 5802] set_robust_list(0x7f1318abf9a0, 24 [pid 5801] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5802] <... set_robust_list resumed>) = 0 [pid 5802] rt_sigprocmask(SIG_SETMASK, [], [pid 5801] futex(0x7f1318b923e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5802] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5802] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5801] <... futex resumed>) = 0 [pid 5801] futex(0x7f1318b923ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 5802] ioctl(3, USB_RAW_IOCTL_INIT, 0x7f1318abe1f0) = 0 [pid 5802] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5802] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5802] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5802] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5802] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5802] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 18 [pid 5802] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [ 211.511098][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [pid 5802] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5802] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5802] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 18 [pid 5802] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5802] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 9 [pid 5802] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [ 211.681087][ T9] usb 1-1: Using ep0 maxpacket: 8 [pid 5802] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 36 [pid 5802] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5802] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 4 [pid 5802] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5802] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 8 [pid 5802] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5802] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 8 [ 211.705327][ T9] usb 1-1: config 2 has an invalid interface number: 31 but max is 0 [ 211.713886][ T9] usb 1-1: config 2 has no interface number 0 [ 211.720224][ T9] usb 1-1: config 2 interface 31 has no altsetting 0 [pid 5802] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5802] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 8 [pid 5802] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5802] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0x3) = 0 [pid 5802] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5802] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f1318b9252c) = 1 [pid 5802] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f1318b9253c) = 10 [pid 5802] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f1318abd1e0) = 0 [ 211.746831][ T9] usb 1-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 211.756435][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.764818][ T9] usb 1-1: Product: syz [ 211.769199][ T9] usb 1-1: Manufacturer: syz [ 211.774179][ T9] usb 1-1: SerialNumber: syz [pid 5802] futex(0x7f1318b923ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5801] <... futex resumed>) = 0 [pid 5802] futex(0x7f1318b923e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5801] futex(0x7f1318b923e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5802] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5801] <... futex resumed>) = 0 [pid 5802] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5801] futex(0x7f1318b923ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 5802] <... ioctl resumed>, 0x7f1318abe220) = 0 [pid 5802] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0x1) = 0 [pid 5802] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xa) = 0 [pid 5802] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f1318b9252c) = 1 [pid 5802] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f1318b9253c) = 10 [pid 5802] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f1318abd210) = 0 [pid 5802] futex(0x7f1318b923ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5801] <... futex resumed>) = 0 [pid 5802] futex(0x7f1318b923e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5801] close(3) = 0 [pid 5801] close(4) = -1 EBADF (Bad file descriptor) [pid 5801] close(5) = -1 EBADF (Bad file descriptor) [pid 5801] close(6) = -1 EBADF (Bad file descriptor) [pid 5801] close(7) = -1 EBADF (Bad file descriptor) [pid 5801] close(8) = -1 EBADF (Bad file descriptor) [pid 5801] close(9) = -1 EBADF (Bad file descriptor) [pid 5801] close(10) = -1 EBADF (Bad file descriptor) [pid 5801] close(11) = -1 EBADF (Bad file descriptor) [pid 5801] close(12) = -1 EBADF (Bad file descriptor) [pid 5801] close(13) = -1 EBADF (Bad file descriptor) [pid 5801] close(14) = -1 EBADF (Bad file descriptor) [pid 5801] close(15) = -1 EBADF (Bad file descriptor) [pid 5801] close(16) = -1 EBADF (Bad file descriptor) [pid 5801] close(17) = -1 EBADF (Bad file descriptor) [pid 5801] close(18) = -1 EBADF (Bad file descriptor) [pid 5801] close(19) = -1 EBADF (Bad file descriptor) [pid 5801] close(20) = -1 EBADF (Bad file descriptor) [pid 5801] close(21) = -1 EBADF (Bad file descriptor) [ 212.260471][ T9] ch9200 1-1:2.31: probe with driver ch9200 failed with error -22 [pid 5801] close(22) = -1 EBADF (Bad file descriptor) [pid 5801] close(23) = -1 EBADF (Bad file descriptor) [pid 5801] close(24) = -1 EBADF (Bad file descriptor) [pid 5801] close(25) = -1 EBADF (Bad file descriptor) [pid 5801] close(26) = -1 EBADF (Bad file descriptor) [pid 5801] close(27) = -1 EBADF (Bad file descriptor) [pid 5801] close(28) = -1 EBADF (Bad file descriptor) [pid 5801] close(29) = -1 EBADF (Bad file descriptor) [pid 5801] exit_group(0) = ? [pid 5802] <... futex resumed>) = ? [pid 5802] +++ exited with 0 +++ [pid 5801] +++ exited with 0 +++ [pid 5793] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5793] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5793] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5804 attached , child_tidptr=0x5555622ec690) = 8 [pid 5804] set_robust_list(0x5555622ec6a0, 24) = 0 [pid 5804] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5804] setpgid(0, 0) = 0 [pid 5804] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 212.311353][ T9] usb 1-1: USB disconnect, device number 4 executing program [pid 5804] write(3, "1000", 4) = 4 [pid 5804] close(3) = 0 [pid 5804] write(1, "executing program\n", 18) = 18 [pid 5804] futex(0x7f1318b923ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5804] rt_sigaction(SIGRT_1, {sa_handler=0x7f1318b39d70, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1318b2bb80}, NULL, 8) = 0 [pid 5804] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5804] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1318a9f000 [pid 5804] mprotect(0x7f1318aa0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5804] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5804] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1318abf990, parent_tid=0x7f1318abf990, exit_signal=0, stack=0x7f1318a9f000, stack_size=0x20300, tls=0x7f1318abf6c0}./strace-static-x86_64: Process 5805 attached [pid 5805] rseq(0x7f1318abffe0, 0x20, 0, 0x53053053 [pid 5804] <... clone3 resumed> => {parent_tid=[9]}, 88) = 9 [pid 5805] <... rseq resumed>) = 0 [pid 5804] rt_sigprocmask(SIG_SETMASK, [], [pid 5805] set_robust_list(0x7f1318abf9a0, 24) = 0 [pid 5804] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5805] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5804] futex(0x7f1318b923e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5805] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR [pid 5804] <... futex resumed>) = 0 [pid 5804] futex(0x7f1318b923ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 5805] <... openat resumed>) = 3 [pid 5805] ioctl(3, USB_RAW_IOCTL_INIT, 0x7f1318abe1f0) = 0 [pid 5805] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5805] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5805] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5805] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5805] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5805] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 18 [pid 5805] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [ 212.731071][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [pid 5805] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5805] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5805] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 18 [pid 5805] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5805] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 9 [ 212.891051][ T9] usb 1-1: Using ep0 maxpacket: 8 [pid 5805] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5805] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 36 [pid 5805] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5805] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 4 [pid 5805] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5805] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 8 [pid 5805] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5805] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 8 [pid 5805] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [ 212.912062][ T9] usb 1-1: config 2 has an invalid interface number: 31 but max is 0 [ 212.920582][ T9] usb 1-1: config 2 has no interface number 0 [ 212.927168][ T9] usb 1-1: config 2 interface 31 has no altsetting 0 [pid 5805] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 8 [pid 5805] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5805] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0x3) = 0 [pid 5805] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5805] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f1318b9252c) = 1 [pid 5805] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f1318b9253c) = 10 [pid 5805] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f1318abd1e0) = 0 [ 212.955705][ T9] usb 1-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 212.965289][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.973693][ T9] usb 1-1: Product: syz [ 212.978104][ T9] usb 1-1: Manufacturer: syz [ 212.983110][ T9] usb 1-1: SerialNumber: syz [pid 5805] futex(0x7f1318b923ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5805] futex(0x7f1318b923e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5804] <... futex resumed>) = 0 [pid 5804] futex(0x7f1318b923e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5805] <... futex resumed>) = 0 [pid 5804] <... futex resumed>) = 1 [pid 5805] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe220) = 0 [pid 5804] futex(0x7f1318b923ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 5805] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0x1) = 0 [pid 5805] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xa) = 0 [pid 5805] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f1318b9252c) = 1 [pid 5805] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f1318b9253c) = 10 [pid 5805] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f1318abd210) = 0 [pid 5805] futex(0x7f1318b923ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5804] <... futex resumed>) = 0 [pid 5805] futex(0x7f1318b923e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5804] close(3) = 0 [pid 5804] close(4) = -1 EBADF (Bad file descriptor) [pid 5804] close(5) = -1 EBADF (Bad file descriptor) [pid 5804] close(6) = -1 EBADF (Bad file descriptor) [pid 5804] close(7) = -1 EBADF (Bad file descriptor) [pid 5804] close(8) = -1 EBADF (Bad file descriptor) [pid 5804] close(9) = -1 EBADF (Bad file descriptor) [pid 5804] close(10) = -1 EBADF (Bad file descriptor) [pid 5804] close(11) = -1 EBADF (Bad file descriptor) [pid 5804] close(12) = -1 EBADF (Bad file descriptor) [pid 5804] close(13) = -1 EBADF (Bad file descriptor) [pid 5804] close(14) = -1 EBADF (Bad file descriptor) [pid 5804] close(15) = -1 EBADF (Bad file descriptor) [pid 5804] close(16) = -1 EBADF (Bad file descriptor) [pid 5804] close(17) = -1 EBADF (Bad file descriptor) [pid 5804] close(18) = -1 EBADF (Bad file descriptor) [pid 5804] close(19) = -1 EBADF (Bad file descriptor) [pid 5804] close(20) = -1 EBADF (Bad file descriptor) [pid 5804] close(21) = -1 EBADF (Bad file descriptor) [pid 5804] close(22) = -1 EBADF (Bad file descriptor) [pid 5804] close(23) = -1 EBADF (Bad file descriptor) [pid 5804] close(24) = -1 EBADF (Bad file descriptor) [pid 5804] close(25) = -1 EBADF (Bad file descriptor) [pid 5804] close(26) = -1 EBADF (Bad file descriptor) [pid 5804] close(27) = -1 EBADF (Bad file descriptor) [pid 5804] close(28) = -1 EBADF (Bad file descriptor) [ 213.472160][ T9] ch9200 1-1:2.31: probe with driver ch9200 failed with error -22 [ 213.492444][ T9] usb 1-1: USB disconnect, device number 5 [pid 5804] close(29) = -1 EBADF (Bad file descriptor) [pid 5804] exit_group(0 [pid 5805] <... futex resumed>) = ? [pid 5804] <... exit_group resumed>) = ? [pid 5805] +++ exited with 0 +++ [pid 5804] +++ exited with 0 +++ [pid 5793] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5793] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5793] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5806 attached , child_tidptr=0x5555622ec690) = 10 [pid 5806] set_robust_list(0x5555622ec6a0, 24executing program ) = 0 [pid 5806] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5806] setpgid(0, 0) = 0 [pid 5806] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5806] write(3, "1000", 4) = 4 [pid 5806] close(3) = 0 [pid 5806] write(1, "executing program\n", 18) = 18 [pid 5806] futex(0x7f1318b923ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5806] rt_sigaction(SIGRT_1, {sa_handler=0x7f1318b39d70, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1318b2bb80}, NULL, 8) = 0 [pid 5806] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5806] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1318a9f000 [pid 5806] mprotect(0x7f1318aa0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5806] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5806] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1318abf990, parent_tid=0x7f1318abf990, exit_signal=0, stack=0x7f1318a9f000, stack_size=0x20300, tls=0x7f1318abf6c0}./strace-static-x86_64: Process 5807 attached => {parent_tid=[11]}, 88) = 11 [pid 5807] rseq(0x7f1318abffe0, 0x20, 0, 0x53053053 [pid 5806] rt_sigprocmask(SIG_SETMASK, [], [pid 5807] <... rseq resumed>) = 0 [pid 5807] set_robust_list(0x7f1318abf9a0, 24 [pid 5806] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5807] <... set_robust_list resumed>) = 0 [pid 5806] futex(0x7f1318b923e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5807] rt_sigprocmask(SIG_SETMASK, [], [pid 5806] <... futex resumed>) = 0 [pid 5807] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5807] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR [pid 5806] futex(0x7f1318b923ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 5807] <... openat resumed>) = 3 [pid 5807] ioctl(3, USB_RAW_IOCTL_INIT, 0x7f1318abe1f0) = 0 [pid 5807] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5807] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5807] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5807] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5807] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5807] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 18 [pid 5807] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [ 213.941106][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [pid 5807] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5807] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5807] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 18 [pid 5807] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5807] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 9 [pid 5807] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [ 214.101007][ T9] usb 1-1: Using ep0 maxpacket: 8 [pid 5807] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 36 [pid 5807] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5807] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 4 [pid 5807] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5807] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 8 [pid 5807] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5807] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 8 [ 214.121161][ T9] usb 1-1: config 2 has an invalid interface number: 31 but max is 0 [ 214.129567][ T9] usb 1-1: config 2 has no interface number 0 [ 214.136109][ T9] usb 1-1: config 2 interface 31 has no altsetting 0 [pid 5807] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5807] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 8 [pid 5807] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5807] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0x3) = 0 [pid 5807] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5807] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f1318b9252c) = 1 [pid 5807] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f1318b9253c) = 10 [pid 5807] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f1318abd1e0) = 0 [ 214.163515][ T9] usb 1-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 214.172993][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.181485][ T9] usb 1-1: Product: syz [ 214.185870][ T9] usb 1-1: Manufacturer: syz [ 214.190612][ T9] usb 1-1: SerialNumber: syz [pid 5807] futex(0x7f1318b923ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5807] futex(0x7f1318b923e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5806] <... futex resumed>) = 0 [pid 5806] futex(0x7f1318b923e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5807] <... futex resumed>) = 0 [pid 5806] <... futex resumed>) = 1 [pid 5807] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe220) = 0 [pid 5806] futex(0x7f1318b923ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 5807] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0x1) = 0 [pid 5807] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xa) = 0 [pid 5807] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f1318b9252c) = 1 [pid 5807] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f1318b9253c) = 10 [pid 5807] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f1318abd210) = 0 [pid 5807] futex(0x7f1318b923ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5806] <... futex resumed>) = 0 [pid 5807] futex(0x7f1318b923e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5806] close(3) = 0 [pid 5806] close(4) = -1 EBADF (Bad file descriptor) [pid 5806] close(5) = -1 EBADF (Bad file descriptor) [pid 5806] close(6) = -1 EBADF (Bad file descriptor) [pid 5806] close(7) = -1 EBADF (Bad file descriptor) [pid 5806] close(8) = -1 EBADF (Bad file descriptor) [pid 5806] close(9) = -1 EBADF (Bad file descriptor) [pid 5806] close(10) = -1 EBADF (Bad file descriptor) [pid 5806] close(11) = -1 EBADF (Bad file descriptor) [pid 5806] close(12) = -1 EBADF (Bad file descriptor) [pid 5806] close(13) = -1 EBADF (Bad file descriptor) [pid 5806] close(14) = -1 EBADF (Bad file descriptor) [pid 5806] close(15) = -1 EBADF (Bad file descriptor) [pid 5806] close(16) = -1 EBADF (Bad file descriptor) [pid 5806] close(17) = -1 EBADF (Bad file descriptor) [pid 5806] close(18) = -1 EBADF (Bad file descriptor) [pid 5806] close(19) = -1 EBADF (Bad file descriptor) [pid 5806] close(20) = -1 EBADF (Bad file descriptor) [pid 5806] close(21) = -1 EBADF (Bad file descriptor) [pid 5806] close(22) = -1 EBADF (Bad file descriptor) [pid 5806] close(23) = -1 EBADF (Bad file descriptor) [pid 5806] close(24) = -1 EBADF (Bad file descriptor) [pid 5806] close(25) = -1 EBADF (Bad file descriptor) [pid 5806] close(26) = -1 EBADF (Bad file descriptor) [pid 5806] close(27) = -1 EBADF (Bad file descriptor) [pid 5806] close(28) = -1 EBADF (Bad file descriptor) [pid 5806] close(29) = -1 EBADF (Bad file descriptor) [pid 5806] exit_group(0) = ? [pid 5807] <... futex resumed>) = ? [pid 5807] +++ exited with 0 +++ [pid 5806] +++ exited with 0 +++ [pid 5793] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [ 214.670509][ T9] ch9200 1-1:2.31: probe with driver ch9200 failed with error -22 [ 214.702610][ T9] usb 1-1: USB disconnect, device number 6 [pid 5793] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5808 attached [pid 5808] set_robust_list(0x5555622ec6a0, 24 [pid 5793] <... clone resumed>, child_tidptr=0x5555622ec690) = 12 [pid 5808] <... set_robust_list resumed>) = 0 [pid 5808] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5808] setpgid(0, 0) = 0 [pid 5808] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5808] write(3, "1000", 4) = 4 [pid 5808] close(3) = 0 [pid 5808] write(1, "executing program\n", 18executing program ) = 18 [pid 5808] futex(0x7f1318b923ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5808] rt_sigaction(SIGRT_1, {sa_handler=0x7f1318b39d70, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1318b2bb80}, NULL, 8) = 0 [pid 5808] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5808] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1318a9f000 [pid 5808] mprotect(0x7f1318aa0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5808] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5808] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1318abf990, parent_tid=0x7f1318abf990, exit_signal=0, stack=0x7f1318a9f000, stack_size=0x20300, tls=0x7f1318abf6c0}./strace-static-x86_64: Process 5809 attached => {parent_tid=[13]}, 88) = 13 [pid 5808] rt_sigprocmask(SIG_SETMASK, [], [pid 5809] rseq(0x7f1318abffe0, 0x20, 0, 0x53053053 [pid 5808] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5809] <... rseq resumed>) = 0 [pid 5809] set_robust_list(0x7f1318abf9a0, 24 [pid 5808] futex(0x7f1318b923e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5809] <... set_robust_list resumed>) = 0 [pid 5809] rt_sigprocmask(SIG_SETMASK, [], [pid 5808] <... futex resumed>) = 0 [pid 5809] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5808] futex(0x7f1318b923ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 5809] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5809] ioctl(3, USB_RAW_IOCTL_INIT, 0x7f1318abe1f0) = 0 [pid 5809] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5809] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5809] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5809] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5809] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5809] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 18 [pid 5809] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [ 215.101108][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [pid 5809] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5809] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5809] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 18 [pid 5809] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5809] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 9 [ 215.261081][ T9] usb 1-1: Using ep0 maxpacket: 8 [pid 5809] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5809] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 36 [pid 5809] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5809] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 4 [pid 5809] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5809] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 8 [pid 5809] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5809] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 8 [pid 5809] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [ 215.283321][ T9] usb 1-1: config 2 has an invalid interface number: 31 but max is 0 [ 215.291905][ T9] usb 1-1: config 2 has no interface number 0 [ 215.298258][ T9] usb 1-1: config 2 interface 31 has no altsetting 0 [pid 5809] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 8 [pid 5809] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5809] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0x3) = 0 [pid 5809] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5809] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f1318b9252c) = 1 [pid 5809] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f1318b9253c) = 10 [pid 5809] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f1318abd1e0) = 0 [ 215.325333][ T9] usb 1-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 215.335079][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.343511][ T9] usb 1-1: Product: syz [ 215.347946][ T9] usb 1-1: Manufacturer: syz [ 215.352982][ T9] usb 1-1: SerialNumber: syz [pid 5809] futex(0x7f1318b923ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5809] futex(0x7f1318b923e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5808] <... futex resumed>) = 0 [pid 5808] futex(0x7f1318b923e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5808] futex(0x7f1318b923ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 5809] <... futex resumed>) = 0 [pid 5809] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe220) = 0 [pid 5809] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0x1) = 0 [pid 5809] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xa) = 0 [pid 5809] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f1318b9252c) = 1 [pid 5809] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f1318b9253c) = 10 [pid 5809] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f1318abd210) = 0 [pid 5809] futex(0x7f1318b923ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5809] futex(0x7f1318b923e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5808] <... futex resumed>) = 0 [pid 5808] close(3) = 0 [pid 5808] close(4) = -1 EBADF (Bad file descriptor) [pid 5808] close(5) = -1 EBADF (Bad file descriptor) [pid 5808] close(6) = -1 EBADF (Bad file descriptor) [pid 5808] close(7) = -1 EBADF (Bad file descriptor) [pid 5808] close(8) = -1 EBADF (Bad file descriptor) [pid 5808] close(9) = -1 EBADF (Bad file descriptor) [pid 5808] close(10) = -1 EBADF (Bad file descriptor) [pid 5808] close(11) = -1 EBADF (Bad file descriptor) [pid 5808] close(12) = -1 EBADF (Bad file descriptor) [pid 5808] close(13) = -1 EBADF (Bad file descriptor) [pid 5808] close(14) = -1 EBADF (Bad file descriptor) [pid 5808] close(15) = -1 EBADF (Bad file descriptor) [pid 5808] close(16) = -1 EBADF (Bad file descriptor) [pid 5808] close(17) = -1 EBADF (Bad file descriptor) [pid 5808] close(18) = -1 EBADF (Bad file descriptor) [pid 5808] close(19) = -1 EBADF (Bad file descriptor) [pid 5808] close(20) = -1 EBADF (Bad file descriptor) [pid 5808] close(21) = -1 EBADF (Bad file descriptor) [pid 5808] close(22) = -1 EBADF (Bad file descriptor) [pid 5808] close(23) = -1 EBADF (Bad file descriptor) [pid 5808] close(24) = -1 EBADF (Bad file descriptor) [pid 5808] close(25) = -1 EBADF (Bad file descriptor) [pid 5808] close(26) = -1 EBADF (Bad file descriptor) [pid 5808] close(27) = -1 EBADF (Bad file descriptor) [pid 5808] close(28) = -1 EBADF (Bad file descriptor) [pid 5808] close(29) = -1 EBADF (Bad file descriptor) [pid 5808] exit_group(0) = ? [pid 5809] <... futex resumed>) = ? [ 215.839341][ T9] ch9200 1-1:2.31: probe with driver ch9200 failed with error -22 [ 215.872935][ T9] usb 1-1: USB disconnect, device number 7 [pid 5809] +++ exited with 0 +++ [pid 5808] +++ exited with 0 +++ [pid 5793] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5793] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5793] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5810 attached , child_tidptr=0x5555622ec690) = 14 [pid 5810] set_robust_list(0x5555622ec6a0, 24) = 0 [pid 5810] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5810] setpgid(0, 0) = 0 [pid 5810] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5810] write(3, "1000", 4) = 4 [pid 5810] close(3) = 0 executing program [pid 5810] write(1, "executing program\n", 18) = 18 [pid 5810] futex(0x7f1318b923ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5810] rt_sigaction(SIGRT_1, {sa_handler=0x7f1318b39d70, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1318b2bb80}, NULL, 8) = 0 [pid 5810] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5810] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1318a9f000 [pid 5810] mprotect(0x7f1318aa0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5810] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5810] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1318abf990, parent_tid=0x7f1318abf990, exit_signal=0, stack=0x7f1318a9f000, stack_size=0x20300, tls=0x7f1318abf6c0} => {parent_tid=[15]}, 88) = 15 [pid 5810] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5810] futex(0x7f1318b923e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5810] futex(0x7f1318b923ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000}./strace-static-x86_64: Process 5811 attached [pid 5811] rseq(0x7f1318abffe0, 0x20, 0, 0x53053053) = 0 [pid 5811] set_robust_list(0x7f1318abf9a0, 24) = 0 [pid 5811] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5811] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5811] ioctl(3, USB_RAW_IOCTL_INIT, 0x7f1318abe1f0) = 0 [pid 5811] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5811] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5811] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5811] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5811] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5811] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 18 [pid 5811] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [ 216.311102][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [pid 5811] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5811] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5811] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 18 [pid 5811] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5811] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 9 [pid 5811] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5811] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 36 [ 216.471028][ T9] usb 1-1: Using ep0 maxpacket: 8 [pid 5811] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5811] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 4 [pid 5811] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5811] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 8 [pid 5811] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5811] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 8 [pid 5811] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [ 216.496125][ T9] usb 1-1: config 2 has an invalid interface number: 31 but max is 0 [ 216.506320][ T9] usb 1-1: config 2 has no interface number 0 [ 216.512833][ T9] usb 1-1: config 2 interface 31 has no altsetting 0 [pid 5811] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 8 [pid 5811] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5811] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0x3) = 0 [pid 5811] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5811] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f1318b9252c) = 1 [pid 5811] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f1318b9253c) = 10 [pid 5811] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f1318abd1e0) = 0 [ 216.540525][ T9] usb 1-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 216.550126][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.558524][ T9] usb 1-1: Product: syz [ 216.563109][ T9] usb 1-1: Manufacturer: syz [ 216.567917][ T9] usb 1-1: SerialNumber: syz [pid 5811] futex(0x7f1318b923ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5810] <... futex resumed>) = 0 [pid 5811] futex(0x7f1318b923e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5810] futex(0x7f1318b923e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5811] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5810] <... futex resumed>) = 0 [pid 5811] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5810] futex(0x7f1318b923ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 5811] <... ioctl resumed>, 0x7f1318abe220) = 0 [pid 5811] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0x1) = 0 [pid 5811] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xa) = 0 [pid 5811] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f1318b9252c) = 1 [pid 5811] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f1318b9253c) = 10 [pid 5811] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f1318abd210) = 0 [pid 5811] futex(0x7f1318b923ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5810] <... futex resumed>) = 0 [pid 5811] futex(0x7f1318b923e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5810] close(3) = 0 [pid 5810] close(4) = -1 EBADF (Bad file descriptor) [pid 5810] close(5) = -1 EBADF (Bad file descriptor) [pid 5810] close(6) = -1 EBADF (Bad file descriptor) [pid 5810] close(7) = -1 EBADF (Bad file descriptor) [pid 5810] close(8) = -1 EBADF (Bad file descriptor) [pid 5810] close(9) = -1 EBADF (Bad file descriptor) [pid 5810] close(10) = -1 EBADF (Bad file descriptor) [pid 5810] close(11) = -1 EBADF (Bad file descriptor) [pid 5810] close(12) = -1 EBADF (Bad file descriptor) [pid 5810] close(13) = -1 EBADF (Bad file descriptor) [pid 5810] close(14) = -1 EBADF (Bad file descriptor) [pid 5810] close(15) = -1 EBADF (Bad file descriptor) [pid 5810] close(16) = -1 EBADF (Bad file descriptor) [pid 5810] close(17) = -1 EBADF (Bad file descriptor) [pid 5810] close(18) = -1 EBADF (Bad file descriptor) [pid 5810] close(19) = -1 EBADF (Bad file descriptor) [pid 5810] close(20) = -1 EBADF (Bad file descriptor) [pid 5810] close(21) = -1 EBADF (Bad file descriptor) [pid 5810] close(22) = -1 EBADF (Bad file descriptor) [pid 5810] close(23) = -1 EBADF (Bad file descriptor) [pid 5810] close(24) = -1 EBADF (Bad file descriptor) [pid 5810] close(25) = -1 EBADF (Bad file descriptor) [pid 5810] close(26) = -1 EBADF (Bad file descriptor) [ 217.050649][ T9] ch9200 1-1:2.31: probe with driver ch9200 failed with error -22 [ 217.084522][ T9] usb 1-1: USB disconnect, device number 8 [pid 5810] close(27) = -1 EBADF (Bad file descriptor) [pid 5810] close(28) = -1 EBADF (Bad file descriptor) [pid 5810] close(29) = -1 EBADF (Bad file descriptor) [pid 5810] exit_group(0) = ? [pid 5811] <... futex resumed>) = ? [pid 5811] +++ exited with 0 +++ [pid 5810] +++ exited with 0 +++ [pid 5793] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=14, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5793] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5793] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5812 attached , child_tidptr=0x5555622ec690) = 16 [pid 5812] set_robust_list(0x5555622ec6a0, 24) = 0 [pid 5812] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5812] setpgid(0, 0) = 0 [pid 5812] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5812] write(3, "1000", 4) = 4 [pid 5812] close(3) = 0 executing program [pid 5812] write(1, "executing program\n", 18) = 18 [pid 5812] futex(0x7f1318b923ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5812] rt_sigaction(SIGRT_1, {sa_handler=0x7f1318b39d70, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1318b2bb80}, NULL, 8) = 0 [pid 5812] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5812] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1318a9f000 [pid 5812] mprotect(0x7f1318aa0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5812] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5812] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1318abf990, parent_tid=0x7f1318abf990, exit_signal=0, stack=0x7f1318a9f000, stack_size=0x20300, tls=0x7f1318abf6c0} => {parent_tid=[17]}, 88) = 17 [pid 5812] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5812] futex(0x7f1318b923e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5812] futex(0x7f1318b923ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000}./strace-static-x86_64: Process 5813 attached [pid 5813] rseq(0x7f1318abffe0, 0x20, 0, 0x53053053) = 0 [pid 5813] set_robust_list(0x7f1318abf9a0, 24) = 0 [pid 5813] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5813] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5813] ioctl(3, USB_RAW_IOCTL_INIT, 0x7f1318abe1f0) = 0 [pid 5813] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5813] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5813] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5813] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5813] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5813] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 18 [pid 5813] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [ 217.511057][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [pid 5813] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5813] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5813] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 18 [pid 5813] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5813] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 9 [ 217.670983][ T9] usb 1-1: Using ep0 maxpacket: 8 [pid 5813] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5813] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 36 [pid 5813] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5813] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 4 [pid 5813] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5813] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 8 [pid 5813] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5813] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 8 [ 217.693938][ T9] usb 1-1: config 2 has an invalid interface number: 31 but max is 0 [ 217.702508][ T9] usb 1-1: config 2 has no interface number 0 [ 217.708821][ T9] usb 1-1: config 2 interface 31 has no altsetting 0 [pid 5813] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5813] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 8 [pid 5813] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5813] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0x3) = 0 [pid 5813] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5813] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f1318b9252c) = 1 [pid 5813] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f1318b9253c) = 10 [pid 5813] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f1318abd1e0) = 0 [ 217.735039][ T9] usb 1-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 217.744577][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.752997][ T9] usb 1-1: Product: syz [ 217.757368][ T9] usb 1-1: Manufacturer: syz [ 217.762349][ T9] usb 1-1: SerialNumber: syz [pid 5813] futex(0x7f1318b923ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5812] <... futex resumed>) = 0 [pid 5813] futex(0x7f1318b923e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5812] futex(0x7f1318b923e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5813] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5813] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5812] <... futex resumed>) = 0 [pid 5813] <... ioctl resumed>, 0x7f1318abe220) = 0 [pid 5812] futex(0x7f1318b923ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 5813] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0x1) = 0 [pid 5813] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xa) = 0 [pid 5813] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f1318b9252c) = 1 [pid 5813] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f1318b9253c) = 10 [pid 5813] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f1318abd210) = 0 [pid 5813] futex(0x7f1318b923ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5812] <... futex resumed>) = 0 [pid 5813] futex(0x7f1318b923e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5812] close(3) = 0 [pid 5812] close(4) = -1 EBADF (Bad file descriptor) [pid 5812] close(5) = -1 EBADF (Bad file descriptor) [pid 5812] close(6) = -1 EBADF (Bad file descriptor) [pid 5812] close(7) = -1 EBADF (Bad file descriptor) [pid 5812] close(8) = -1 EBADF (Bad file descriptor) [pid 5812] close(9) = -1 EBADF (Bad file descriptor) [pid 5812] close(10) = -1 EBADF (Bad file descriptor) [pid 5812] close(11) = -1 EBADF (Bad file descriptor) [pid 5812] close(12) = -1 EBADF (Bad file descriptor) [pid 5812] close(13) = -1 EBADF (Bad file descriptor) [pid 5812] close(14) = -1 EBADF (Bad file descriptor) [pid 5812] close(15) = -1 EBADF (Bad file descriptor) [pid 5812] close(16) = -1 EBADF (Bad file descriptor) [pid 5812] close(17) = -1 EBADF (Bad file descriptor) [pid 5812] close(18) = -1 EBADF (Bad file descriptor) [pid 5812] close(19) = -1 EBADF (Bad file descriptor) [pid 5812] close(20) = -1 EBADF (Bad file descriptor) [pid 5812] close(21) = -1 EBADF (Bad file descriptor) [pid 5812] close(22) = -1 EBADF (Bad file descriptor) [pid 5812] close(23) = -1 EBADF (Bad file descriptor) [pid 5812] close(24) = -1 EBADF (Bad file descriptor) [pid 5812] close(25) = -1 EBADF (Bad file descriptor) [pid 5812] close(26) = -1 EBADF (Bad file descriptor) [pid 5812] close(27) = -1 EBADF (Bad file descriptor) [pid 5812] close(28) = -1 EBADF (Bad file descriptor) [pid 5812] close(29) = -1 EBADF (Bad file descriptor) [pid 5812] exit_group(0) = ? [pid 5813] <... futex resumed>) = ? [ 218.248019][ T9] ch9200 1-1:2.31: probe with driver ch9200 failed with error -22 [ 218.283656][ T9] usb 1-1: USB disconnect, device number 9 [pid 5813] +++ exited with 0 +++ [pid 5812] +++ exited with 0 +++ [pid 5793] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=16, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5793] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5793] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555622ec690) = 18 executing program ./strace-static-x86_64: Process 5814 attached [pid 5814] set_robust_list(0x5555622ec6a0, 24) = 0 [pid 5814] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5814] setpgid(0, 0) = 0 [pid 5814] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5814] write(3, "1000", 4) = 4 [pid 5814] close(3) = 0 [pid 5814] write(1, "executing program\n", 18) = 18 [pid 5814] futex(0x7f1318b923ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5814] rt_sigaction(SIGRT_1, {sa_handler=0x7f1318b39d70, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1318b2bb80}, NULL, 8) = 0 [pid 5814] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5814] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1318a9f000 [pid 5814] mprotect(0x7f1318aa0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5814] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5814] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1318abf990, parent_tid=0x7f1318abf990, exit_signal=0, stack=0x7f1318a9f000, stack_size=0x20300, tls=0x7f1318abf6c0}./strace-static-x86_64: Process 5815 attached [pid 5815] rseq(0x7f1318abffe0, 0x20, 0, 0x53053053 [pid 5814] <... clone3 resumed> => {parent_tid=[19]}, 88) = 19 [pid 5815] <... rseq resumed>) = 0 [pid 5815] set_robust_list(0x7f1318abf9a0, 24 [pid 5814] rt_sigprocmask(SIG_SETMASK, [], [pid 5815] <... set_robust_list resumed>) = 0 [pid 5815] rt_sigprocmask(SIG_SETMASK, [], [pid 5814] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5815] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5814] futex(0x7f1318b923e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5815] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR [pid 5814] <... futex resumed>) = 0 [pid 5815] <... openat resumed>) = 3 [pid 5814] futex(0x7f1318b923ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 5815] ioctl(3, USB_RAW_IOCTL_INIT, 0x7f1318abe1f0) = 0 [pid 5815] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5815] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5815] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5815] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5815] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5815] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 18 [pid 5815] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [ 218.691110][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [pid 5815] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5815] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5815] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 18 [pid 5815] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5815] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 9 [pid 5815] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [ 218.851115][ T9] usb 1-1: Using ep0 maxpacket: 8 [pid 5815] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 36 [pid 5815] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5815] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 4 [pid 5815] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5815] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 8 [pid 5815] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5815] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 8 [ 218.871667][ T9] usb 1-1: config 2 has an invalid interface number: 31 but max is 0 [ 218.880125][ T9] usb 1-1: config 2 has no interface number 0 [ 218.886731][ T9] usb 1-1: config 2 interface 31 has no altsetting 0 [pid 5815] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5815] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 8 [pid 5815] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5815] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0x3) = 0 [pid 5815] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5815] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f1318b9252c) = 1 [pid 5815] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f1318b9253c) = 10 [pid 5815] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f1318abd1e0) = 0 [ 218.922526][ T9] usb 1-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 218.932106][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.940358][ T9] usb 1-1: Product: syz [ 218.945261][ T9] usb 1-1: Manufacturer: syz [ 218.950058][ T9] usb 1-1: SerialNumber: syz [pid 5815] futex(0x7f1318b923ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5814] <... futex resumed>) = 0 [pid 5815] futex(0x7f1318b923e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5814] futex(0x7f1318b923e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5815] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5814] <... futex resumed>) = 0 [pid 5815] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 5814] futex(0x7f1318b923ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 5815] <... ioctl resumed>, 0x7f1318abe220) = 0 [pid 5815] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0x1) = 0 [pid 5815] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xa) = 0 [pid 5815] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f1318b9252c) = 1 [pid 5815] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f1318b9253c) = 10 [pid 5815] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f1318abd210) = 0 [pid 5815] futex(0x7f1318b923ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5814] <... futex resumed>) = 0 [pid 5815] futex(0x7f1318b923e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5814] close(3) = 0 [pid 5814] close(4) = -1 EBADF (Bad file descriptor) [pid 5814] close(5) = -1 EBADF (Bad file descriptor) [pid 5814] close(6) = -1 EBADF (Bad file descriptor) [pid 5814] close(7) = -1 EBADF (Bad file descriptor) [pid 5814] close(8) = -1 EBADF (Bad file descriptor) [pid 5814] close(9) = -1 EBADF (Bad file descriptor) [pid 5814] close(10) = -1 EBADF (Bad file descriptor) [pid 5814] close(11) = -1 EBADF (Bad file descriptor) [pid 5814] close(12) = -1 EBADF (Bad file descriptor) [pid 5814] close(13) = -1 EBADF (Bad file descriptor) [pid 5814] close(14) = -1 EBADF (Bad file descriptor) [pid 5814] close(15) = -1 EBADF (Bad file descriptor) [pid 5814] close(16) = -1 EBADF (Bad file descriptor) [pid 5814] close(17) = -1 EBADF (Bad file descriptor) [pid 5814] close(18) = -1 EBADF (Bad file descriptor) [pid 5814] close(19) = -1 EBADF (Bad file descriptor) [pid 5814] close(20) = -1 EBADF (Bad file descriptor) [pid 5814] close(21) = -1 EBADF (Bad file descriptor) [pid 5814] close(22) = -1 EBADF (Bad file descriptor) [pid 5814] close(23) = -1 EBADF (Bad file descriptor) [pid 5814] close(24) = -1 EBADF (Bad file descriptor) [pid 5814] close(25) = -1 EBADF (Bad file descriptor) [pid 5814] close(26) = -1 EBADF (Bad file descriptor) [pid 5814] close(27) = -1 EBADF (Bad file descriptor) [pid 5814] close(28) = -1 EBADF (Bad file descriptor) [pid 5814] close(29) = -1 EBADF (Bad file descriptor) [pid 5814] exit_group(0) = ? [pid 5815] <... futex resumed>) = ? [ 219.448312][ T9] ch9200 1-1:2.31: probe with driver ch9200 failed with error -22 [ 219.472903][ T9] usb 1-1: USB disconnect, device number 10 [pid 5815] +++ exited with 0 +++ [pid 5814] +++ exited with 0 +++ [pid 5793] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=18, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5793] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5793] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5817 attached [pid 5817] set_robust_list(0x5555622ec6a0, 24) = 0 [pid 5817] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5793] <... clone resumed>, child_tidptr=0x5555622ec690) = 20 [pid 5817] setpgid(0, 0) = 0 [pid 5817] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5817] write(3, "1000", 4) = 4 [pid 5817] close(3executing program ) = 0 [pid 5817] write(1, "executing program\n", 18) = 18 [pid 5817] futex(0x7f1318b923ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5817] rt_sigaction(SIGRT_1, {sa_handler=0x7f1318b39d70, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1318b2bb80}, NULL, 8) = 0 [pid 5817] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5817] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1318a9f000 [pid 5817] mprotect(0x7f1318aa0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5817] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5817] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1318abf990, parent_tid=0x7f1318abf990, exit_signal=0, stack=0x7f1318a9f000, stack_size=0x20300, tls=0x7f1318abf6c0}./strace-static-x86_64: Process 5818 attached => {parent_tid=[21]}, 88) = 21 [pid 5818] rseq(0x7f1318abffe0, 0x20, 0, 0x53053053) = 0 [pid 5817] rt_sigprocmask(SIG_SETMASK, [], [pid 5818] set_robust_list(0x7f1318abf9a0, 24 [pid 5817] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5818] <... set_robust_list resumed>) = 0 [pid 5817] futex(0x7f1318b923e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5818] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5817] <... futex resumed>) = 0 [pid 5818] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR [pid 5817] futex(0x7f1318b923ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 5818] <... openat resumed>) = 3 [pid 5818] ioctl(3, USB_RAW_IOCTL_INIT, 0x7f1318abe1f0) = 0 [pid 5818] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5818] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5818] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5818] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5818] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5818] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 18 [pid 5818] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [ 219.901102][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [pid 5818] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5818] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5818] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 18 [pid 5818] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5818] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 9 [ 220.071011][ T9] usb 1-1: Using ep0 maxpacket: 8 [pid 5818] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5818] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 36 [pid 5818] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5818] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 4 [pid 5818] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5818] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 8 [pid 5818] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5818] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 8 [pid 5818] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [ 220.094905][ T9] usb 1-1: config 2 has an invalid interface number: 31 but max is 0 [ 220.103367][ T9] usb 1-1: config 2 has no interface number 0 [ 220.109692][ T9] usb 1-1: config 2 interface 31 has no altsetting 0 [pid 5818] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 8 [pid 5818] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5818] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0x3) = 0 [pid 5818] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5818] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f1318b9252c) = 1 [pid 5818] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f1318b9253c) = 10 [pid 5818] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f1318abd1e0) = 0 [ 220.138083][ T9] usb 1-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 220.147559][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.156009][ T9] usb 1-1: Product: syz [ 220.160378][ T9] usb 1-1: Manufacturer: syz [ 220.165341][ T9] usb 1-1: SerialNumber: syz [pid 5818] futex(0x7f1318b923ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5817] <... futex resumed>) = 0 [pid 5818] futex(0x7f1318b923e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5817] futex(0x7f1318b923e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5818] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5817] <... futex resumed>) = 0 [pid 5818] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe220) = 0 [pid 5817] futex(0x7f1318b923ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 5818] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0x1) = 0 [pid 5818] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xa) = 0 [pid 5818] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f1318b9252c) = 1 [pid 5818] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f1318b9253c) = 10 [pid 5818] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f1318abd210) = 0 [pid 5818] futex(0x7f1318b923ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5818] futex(0x7f1318b923e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5817] <... futex resumed>) = 0 [pid 5817] close(3) = 0 [pid 5817] close(4) = -1 EBADF (Bad file descriptor) [pid 5817] close(5) = -1 EBADF (Bad file descriptor) [pid 5817] close(6) = -1 EBADF (Bad file descriptor) [pid 5817] close(7) = -1 EBADF (Bad file descriptor) [pid 5817] close(8) = -1 EBADF (Bad file descriptor) [pid 5817] close(9) = -1 EBADF (Bad file descriptor) [pid 5817] close(10) = -1 EBADF (Bad file descriptor) [pid 5817] close(11) = -1 EBADF (Bad file descriptor) [pid 5817] close(12) = -1 EBADF (Bad file descriptor) [pid 5817] close(13) = -1 EBADF (Bad file descriptor) [pid 5817] close(14) = -1 EBADF (Bad file descriptor) [pid 5817] close(15) = -1 EBADF (Bad file descriptor) [pid 5817] close(16) = -1 EBADF (Bad file descriptor) [pid 5817] close(17) = -1 EBADF (Bad file descriptor) [pid 5817] close(18) = -1 EBADF (Bad file descriptor) [pid 5817] close(19) = -1 EBADF (Bad file descriptor) [pid 5817] close(20) = -1 EBADF (Bad file descriptor) [pid 5817] close(21) = -1 EBADF (Bad file descriptor) [pid 5817] close(22) = -1 EBADF (Bad file descriptor) [pid 5817] close(23) = -1 EBADF (Bad file descriptor) [pid 5817] close(24) = -1 EBADF (Bad file descriptor) [pid 5817] close(25) = -1 EBADF (Bad file descriptor) [pid 5817] close(26executing program ) = -1 EBADF (Bad file descriptor) [pid 5817] close(27) = -1 EBADF (Bad file descriptor) [pid 5817] close(28) = -1 EBADF (Bad file descriptor) [pid 5817] close(29) = -1 EBADF (Bad file descriptor) [pid 5817] exit_group(0) = ? [pid 5818] <... futex resumed>) = ? [pid 5818] +++ exited with 0 +++ [pid 5817] +++ exited with 0 +++ [pid 5793] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=20, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5793] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5819 attached , child_tidptr=0x5555622ec690) = 22 [pid 5819] set_robust_list(0x5555622ec6a0, 24) = 0 [pid 5819] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5819] setpgid(0, 0) = 0 [pid 5819] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5819] write(3, "1000", 4) = 4 [pid 5819] close(3) = 0 [pid 5819] write(1, "executing program\n", 18) = 18 [pid 5819] futex(0x7f1318b923ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5819] rt_sigaction(SIGRT_1, {sa_handler=0x7f1318b39d70, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1318b2bb80}, NULL, 8) = 0 [pid 5819] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5819] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1318a9f000 [pid 5819] mprotect(0x7f1318aa0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5819] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5819] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1318abf990, parent_tid=0x7f1318abf990, exit_signal=0, stack=0x7f1318a9f000, stack_size=0x20300, tls=0x7f1318abf6c0}./strace-static-x86_64: Process 5820 attached [pid 5820] rseq(0x7f1318abffe0, 0x20, 0, 0x53053053 [pid 5819] <... clone3 resumed> => {parent_tid=[23]}, 88) = 23 [pid 5820] <... rseq resumed>) = 0 [pid 5819] rt_sigprocmask(SIG_SETMASK, [], [pid 5820] set_robust_list(0x7f1318abf9a0, 24 [pid 5819] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5820] <... set_robust_list resumed>) = 0 [pid 5820] rt_sigprocmask(SIG_SETMASK, [], [pid 5819] futex(0x7f1318b923e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5820] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5819] <... futex resumed>) = 0 [pid 5820] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR [pid 5819] futex(0x7f1318b923ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 5820] <... openat resumed>) = 3 [pid 5820] ioctl(3, USB_RAW_IOCTL_INIT, 0x7f1318abe1f0) = 0 [pid 5820] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5820] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [ 220.670217][ T9] ch9200 1-1:2.31: probe with driver ch9200 failed with error -22 [ 220.696214][ T9] usb 1-1: USB disconnect, device number 11 [pid 5820] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5820] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5820] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5820] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 18 [pid 5820] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [ 221.031070][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [pid 5820] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5820] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5820] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 18 [pid 5820] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5820] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 9 [pid 5820] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [ 221.191119][ T9] usb 1-1: Using ep0 maxpacket: 8 [pid 5820] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 36 [pid 5820] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5820] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 4 [pid 5820] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5820] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 8 [pid 5820] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5820] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 8 [pid 5820] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5820] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 8 [ 221.212074][ T9] usb 1-1: config 2 has an invalid interface number: 31 but max is 0 [ 221.220474][ T9] usb 1-1: config 2 has no interface number 0 [ 221.227019][ T9] usb 1-1: config 2 interface 31 has no altsetting 0 [ 221.251567][ T9] usb 1-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [pid 5820] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5820] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0x3) = 0 [pid 5820] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5820] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f1318b9252c) = 1 [pid 5820] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f1318b9253c) = 10 [pid 5820] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f1318abd1e0) = 0 [ 221.261107][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.269373][ T9] usb 1-1: Product: syz [ 221.274088][ T9] usb 1-1: Manufacturer: syz [ 221.278941][ T9] usb 1-1: SerialNumber: syz [pid 5820] futex(0x7f1318b923ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5820] futex(0x7f1318b923e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5819] <... futex resumed>) = 0 [pid 5819] futex(0x7f1318b923e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5820] <... futex resumed>) = 0 [pid 5819] <... futex resumed>) = 1 [pid 5820] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe220) = 0 [pid 5819] futex(0x7f1318b923ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 5820] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0x1) = 0 [pid 5820] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xa) = 0 [pid 5820] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f1318b9252c) = 1 [pid 5820] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f1318b9253c) = 10 [pid 5820] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f1318abd210) = 0 [pid 5820] futex(0x7f1318b923ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5819] <... futex resumed>) = 0 [pid 5820] futex(0x7f1318b923e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5819] close(3) = 0 [pid 5819] close(4) = -1 EBADF (Bad file descriptor) [pid 5819] close(5) = -1 EBADF (Bad file descriptor) [pid 5819] close(6) = -1 EBADF (Bad file descriptor) [pid 5819] close(7) = -1 EBADF (Bad file descriptor) [pid 5819] close(8) = -1 EBADF (Bad file descriptor) [pid 5819] close(9) = -1 EBADF (Bad file descriptor) [pid 5819] close(10) = -1 EBADF (Bad file descriptor) [pid 5819] close(11) = -1 EBADF (Bad file descriptor) [pid 5819] close(12) = -1 EBADF (Bad file descriptor) [pid 5819] close(13) = -1 EBADF (Bad file descriptor) [pid 5819] close(14) = -1 EBADF (Bad file descriptor) [pid 5819] close(15) = -1 EBADF (Bad file descriptor) [pid 5819] close(16) = -1 EBADF (Bad file descriptor) [pid 5819] close(17) = -1 EBADF (Bad file descriptor) [pid 5819] close(18) = -1 EBADF (Bad file descriptor) [pid 5819] close(19) = -1 EBADF (Bad file descriptor) [pid 5819] close(20) = -1 EBADF (Bad file descriptor) [pid 5819] close(21) = -1 EBADF (Bad file descriptor) [pid 5819] close(22) = -1 EBADF (Bad file descriptor) [pid 5819] close(23) = -1 EBADF (Bad file descriptor) [pid 5819] close(24) = -1 EBADF (Bad file descriptor) [pid 5819] close(25) = -1 EBADF (Bad file descriptor) [pid 5819] close(26) = -1 EBADF (Bad file descriptor) [pid 5819] close(27) = -1 EBADF (Bad file descriptor) [pid 5819] close(28) = -1 EBADF (Bad file descriptor) [pid 5819] close(29) = -1 EBADF (Bad file descriptor) [pid 5819] exit_group(0) = ? [pid 5820] <... futex resumed>) = ? [ 221.768495][ T9] ch9200 1-1:2.31: probe with driver ch9200 failed with error -22 [ 221.804469][ T9] usb 1-1: USB disconnect, device number 12 [pid 5820] +++ exited with 0 +++ [pid 5819] +++ exited with 0 +++ [pid 5793] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=22, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5793] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5793] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5822 attached , child_tidptr=0x5555622ec690) = 24 [pid 5822] set_robust_list(0x5555622ec6a0, 24) = 0 [pid 5822] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 executing program [pid 5822] setpgid(0, 0) = 0 [pid 5822] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5822] write(3, "1000", 4) = 4 [pid 5822] close(3) = 0 [pid 5822] write(1, "executing program\n", 18) = 18 [pid 5822] futex(0x7f1318b923ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5822] rt_sigaction(SIGRT_1, {sa_handler=0x7f1318b39d70, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1318b2bb80}, NULL, 8) = 0 [pid 5822] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5822] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1318a9f000 [pid 5822] mprotect(0x7f1318aa0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5822] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5822] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1318abf990, parent_tid=0x7f1318abf990, exit_signal=0, stack=0x7f1318a9f000, stack_size=0x20300, tls=0x7f1318abf6c0}./strace-static-x86_64: Process 5823 attached [pid 5823] rseq(0x7f1318abffe0, 0x20, 0, 0x53053053) = 0 [pid 5822] <... clone3 resumed> => {parent_tid=[25]}, 88) = 25 [pid 5823] set_robust_list(0x7f1318abf9a0, 24 [pid 5822] rt_sigprocmask(SIG_SETMASK, [], [pid 5823] <... set_robust_list resumed>) = 0 [pid 5822] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5823] rt_sigprocmask(SIG_SETMASK, [], [pid 5822] futex(0x7f1318b923e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5823] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5822] <... futex resumed>) = 0 [pid 5823] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR [pid 5822] futex(0x7f1318b923ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 5823] <... openat resumed>) = 3 [pid 5823] ioctl(3, USB_RAW_IOCTL_INIT, 0x7f1318abe1f0) = 0 [pid 5823] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5823] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5823] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5823] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5823] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5823] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 18 [pid 5823] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [ 222.211119][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [pid 5823] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5823] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5823] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 18 [pid 5823] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5823] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 9 [pid 5823] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5823] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 36 [pid 5823] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5823] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 4 [pid 5823] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5823] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 8 [pid 5823] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5823] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 8 [pid 5823] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [ 222.371035][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 222.389909][ T9] usb 1-1: config 2 has an invalid interface number: 31 but max is 0 [ 222.398433][ T9] usb 1-1: config 2 has no interface number 0 [ 222.404959][ T9] usb 1-1: config 2 interface 31 has no altsetting 0 [pid 5823] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f1318abd1e0) = 8 [pid 5823] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [pid 5823] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0x3) = 0 [pid 5823] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5823] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f1318b9252c) = 1 [pid 5823] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f1318b9253c) = 10 [pid 5823] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f1318abd1e0) = 0 [ 222.431235][ T9] usb 1-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 222.440694][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.449093][ T9] usb 1-1: Product: syz [ 222.453546][ T9] usb 1-1: Manufacturer: syz [ 222.458338][ T9] usb 1-1: SerialNumber: syz [pid 5823] futex(0x7f1318b923ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5823] futex(0x7f1318b923e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5822] <... futex resumed>) = 0 [pid 5822] futex(0x7f1318b923e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5823] <... futex resumed>) = 0 [pid 5822] <... futex resumed>) = 1 [pid 5823] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe220) = 0 [pid 5822] futex(0x7f1318b923ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 5823] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0x1) = 0 [pid 5823] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xa) = 0 [pid 5823] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f1318b9252c) = 1 [pid 5823] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f1318b9253c) = 10 [pid 5823] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f1318abd210) = 0 [pid 5823] futex(0x7f1318b923ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5822] <... futex resumed>) = 0 [pid 5823] futex(0x7f1318b923e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5822] close(3) = 0 [pid 5822] close(4) = -1 EBADF (Bad file descriptor) [pid 5822] close(5) = -1 EBADF (Bad file descriptor) [pid 5822] close(6) = -1 EBADF (Bad file descriptor) [pid 5822] close(7) = -1 EBADF (Bad file descriptor) [pid 5822] close(8) = -1 EBADF (Bad file descriptor) [pid 5822] close(9) = -1 EBADF (Bad file descriptor) [pid 5822] close(10) = -1 EBADF (Bad file descriptor) [ 222.919039][ T9] ===================================================== [ 222.926521][ T9] BUG: KMSAN: uninit-value in mii_nway_restart+0xfe/0x220 [ 222.934079][ T9] mii_nway_restart+0xfe/0x220 [ 222.939116][ T9] ch9200_bind+0x21c/0xfe0 [ 222.943924][ T9] usbnet_probe+0xbe6/0x4390 [ 222.948742][ T9] usb_probe_interface+0xd04/0x1310 [ 222.954340][ T9] really_probe+0x4d1/0xd90 [ 222.959090][ T9] __driver_probe_device+0x268/0x380 [pid 5822] close(11) = -1 EBADF (Bad file descriptor) [pid 5822] close(12) = -1 EBADF (Bad file descriptor) [pid 5822] close(13) = -1 EBADF (Bad file descriptor) [pid 5822] close(14) = -1 EBADF (Bad file descriptor) [pid 5822] close(15) = -1 EBADF (Bad file descriptor) [pid 5822] close(16) = -1 EBADF (Bad file descriptor) [pid 5822] close(17) = -1 EBADF (Bad file descriptor) [pid 5822] close(18) = -1 EBADF (Bad file descriptor) [pid 5822] close(19) = -1 EBADF (Bad file descriptor) [pid 5822] close(20) = -1 EBADF (Bad file descriptor) [ 222.964777][ T9] driver_probe_device+0x70/0x8b0 [ 222.970053][ T9] __device_attach_driver+0x4ee/0x950 [ 222.976078][ T9] bus_for_each_drv+0x3e3/0x680 [ 222.981215][ T9] __device_attach+0x3c8/0x5c0 [ 222.986330][ T9] device_initial_probe+0x33/0x40 [ 222.991763][ T9] bus_probe_device+0x3ba/0x5e0 [ 222.996927][ T9] device_add+0x12a9/0x1c10 [ 223.001973][ T9] usb_set_configuration+0x3493/0x3b70 [ 223.007680][ T9] usb_generic_driver_probe+0xfc/0x290 [ 223.013508][ T9] usb_probe_device+0x38a/0x690 [pid 5822] close(21) = -1 EBADF (Bad file descriptor) [pid 5822] close(22) = -1 EBADF (Bad file descriptor) [pid 5822] close(23) = -1 EBADF (Bad file descriptor) [pid 5822] close(24) = -1 EBADF (Bad file descriptor) [pid 5822] close(25) = -1 EBADF (Bad file descriptor) [pid 5822] close(26) = -1 EBADF (Bad file descriptor) [pid 5822] close(27) = -1 EBADF (Bad file descriptor) [pid 5822] close(28) = -1 EBADF (Bad file descriptor) [pid 5822] close(29) = -1 EBADF (Bad file descriptor) [pid 5822] exit_group(0) = ? [pid 5823] <... futex resumed>) = ? [ 223.018592][ T9] really_probe+0x4d1/0xd90 [ 223.023421][ T9] __driver_probe_device+0x268/0x380 [ 223.028970][ T9] driver_probe_device+0x70/0x8b0 [ 223.034560][ T9] __device_attach_driver+0x4ee/0x950 [ 223.040169][ T9] bus_for_each_drv+0x3e3/0x680 [ 223.045318][ T9] __device_attach+0x3c8/0x5c0 [ 223.050306][ T9] device_initial_probe+0x33/0x40 [ 223.055639][ T9] bus_probe_device+0x3ba/0x5e0 [ 223.060693][ T9] device_add+0x12a9/0x1c10 [pid 5823] +++ exited with 0 +++ [pid 5822] +++ exited with 0 +++ [pid 5793] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=24, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5793] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5793] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5826 attached [pid 5826] set_robust_list(0x5555622ec6a0, 24) = 0 [pid 5826] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5793] <... clone resumed>, child_tidptr=0x5555622ec690) = 26 [pid 5826] setpgid(0, 0) = 0 [pid 5826] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5826] write(3, "1000", 4) = 4 executing program [pid 5826] close(3) = 0 [ 223.065575][ T9] usb_new_device+0x104b/0x20c0 [ 223.070626][ T9] hub_event+0x5588/0x7580 [ 223.075347][ T9] process_scheduled_works+0xb9a/0x1d90 [ 223.081237][ T9] worker_thread+0xedf/0x1590 [ 223.086147][ T9] kthread+0xd5c/0xf00 [ 223.090466][ T9] ret_from_fork+0x71/0x90 [ 223.095288][ T9] ret_from_fork_asm+0x1a/0x30 [ 223.100461][ T9] [ 223.103040][ T9] Local variable buff created at: [ 223.108206][ T9] ch9200_mdio_read+0x3d/0xd0 [ 223.113198][ T9] mii_nway_restart+0x8f/0x220 [pid 5826] write(1, "executing program\n", 18) = 18 [pid 5826] futex(0x7f1318b923ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5826] rt_sigaction(SIGRT_1, {sa_handler=0x7f1318b39d70, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1318b2bb80}, NULL, 8) = 0 [pid 5826] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5826] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1318a9f000 [pid 5826] mprotect(0x7f1318aa0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5826] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5826] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1318abf990, parent_tid=0x7f1318abf990, exit_signal=0, stack=0x7f1318a9f000, stack_size=0x20300, tls=0x7f1318abf6c0}./strace-static-x86_64: Process 5827 attached [pid 5827] rseq(0x7f1318abffe0, 0x20, 0, 0x53053053 [pid 5826] <... clone3 resumed> => {parent_tid=[27]}, 88) = 27 [pid 5827] <... rseq resumed>) = 0 [pid 5827] set_robust_list(0x7f1318abf9a0, 24 [ 223.118231][ T9] [ 223.120742][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted 6.15.0-syzkaller #0 PREEMPT(undef) [ 223.131049][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 223.141397][ T9] Workqueue: usb_hub_wq hub_event [ 223.146710][ T9] ===================================================== [ 223.153881][ T9] Disabling lock debugging due to kernel taint [ 223.160186][ T9] Kernel panic - not syncing: kmsan.panic set ... [pid 5826] rt_sigprocmask(SIG_SETMASK, [], [pid 5827] <... set_robust_list resumed>) = 0 [pid 5826] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5827] rt_sigprocmask(SIG_SETMASK, [], [pid 5826] futex(0x7f1318b923e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5827] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5826] <... futex resumed>) = 0 [pid 5827] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR [pid 5826] futex(0x7f1318b923ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 5827] <... openat resumed>) = 3 [pid 5827] ioctl(3, USB_RAW_IOCTL_INIT, 0x7f1318abe1f0) = 0 [pid 5827] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [ 223.166790][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Tainted: G B 6.15.0-syzkaller #0 PREEMPT(undef) [ 223.178426][ T9] Tainted: [B]=BAD_PAGE [ 223.182715][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 223.192969][ T9] Workqueue: usb_hub_wq hub_event [ 223.198248][ T9] Call Trace: [ 223.201671][ T9] [ 223.204738][ T9] __dump_stack+0x26/0x30 [ 223.209317][ T9] dump_stack_lvl+0x53/0x270 [ 223.214143][ T9] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [pid 5827] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f1318abe1f0) = 0 [ 223.220258][ T9] dump_stack+0x1e/0x25 [ 223.224650][ T9] panic+0x4bd/0xd50 [ 223.228845][ T9] kmsan_report+0x29d/0x2a0 [ 223.233646][ T9] ? worker_thread+0xedf/0x1590 [ 223.238747][ T9] ? __pfx_warn_thunk_thunk+0x10/0x10 [ 223.244414][ T9] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 223.250465][ T9] ? __msan_warning+0x96/0x120 [ 223.255477][ T9] ? mii_nway_restart+0xfe/0x220 [ 223.260658][ T9] ? ch9200_bind+0x21c/0xfe0 [ 223.265494][ T9] ? usbnet_probe+0xbe6/0x4390 [ 223.270478][ T9] ? usb_probe_interface+0xd04/0x1310 [ 223.276090][ T9] ? really_probe+0x4d1/0xd90 [ 223.281007][ T9] ? __driver_probe_device+0x268/0x380 [ 223.286698][ T9] ? driver_probe_device+0x70/0x8b0 [ 223.292142][ T9] ? __device_attach_driver+0x4ee/0x950 [ 223.297942][ T9] ? bus_for_each_drv+0x3e3/0x680 [ 223.303180][ T9] ? __device_attach+0x3c8/0x5c0 [ 223.308356][ T9] ? device_initial_probe+0x33/0x40 [ 223.313796][ T9] ? bus_probe_device+0x3ba/0x5e0 [ 223.319049][ T9] ? device_add+0x12a9/0x1c10 [ 223.323951][ T9] ? usb_set_configuration+0x3493/0x3b70 [ 223.329800][ T9] ? usb_generic_driver_probe+0xfc/0x290 [ 223.335585][ T9] ? usb_probe_device+0x38a/0x690 [ 223.340745][ T9] ? really_probe+0x4d1/0xd90 [ 223.345664][ T9] ? __driver_probe_device+0x268/0x380 [ 223.351350][ T9] ? driver_probe_device+0x70/0x8b0 [ 223.356720][ T9] ? __device_attach_driver+0x4ee/0x950 [ 223.362489][ T9] ? bus_for_each_drv+0x3e3/0x680 [ 223.367632][ T9] ? __device_attach+0x3c8/0x5c0 [ 223.372707][ T9] ? device_initial_probe+0x33/0x40 [ 223.378046][ T9] ? bus_probe_device+0x3ba/0x5e0 [ 223.383212][ T9] ? device_add+0x12a9/0x1c10 [ 223.388170][ T9] ? usb_new_device+0x104b/0x20c0 [ 223.393309][ T9] ? hub_event+0x5588/0x7580 [ 223.398025][ T9] ? process_scheduled_works+0xb9a/0x1d90 [ 223.403896][ T9] ? worker_thread+0xedf/0x1590 [ 223.408920][ T9] ? kthread+0xd5c/0xf00 [ 223.413331][ T9] ? ret_from_fork+0x71/0x90 [ 223.418097][ T9] ? ret_from_fork_asm+0x1a/0x30 [ 223.423267][ T9] ? control_read+0x26f/0x310 [ 223.428107][ T9] ? kmsan_get_metadata+0x105/0x1b0 [ 223.433476][ T9] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 223.439458][ T9] __msan_warning+0x96/0x120 [ 223.444226][ T9] mii_nway_restart+0xfe/0x220 [ 223.449223][ T9] ch9200_bind+0x21c/0xfe0 [ 223.453784][ T9] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 223.459795][ T9] ? __pfx_ch9200_bind+0x10/0x10 [ 223.464967][ T9] usbnet_probe+0xbe6/0x4390 [ 223.469696][ T9] ? kmsan_get_metadata+0x105/0x1b0 [ 223.475062][ T9] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 223.481581][ T9] ? __pfx_usbnet_probe+0x10/0x10 [ 223.486741][ T9] usb_probe_interface+0xd04/0x1310 [ 223.492113][ T9] ? __pfx_usb_probe_interface+0x10/0x10 [ 223.497974][ T9] really_probe+0x4d1/0xd90 [ 223.502674][ T9] __driver_probe_device+0x268/0x380 [ 223.508193][ T9] driver_probe_device+0x70/0x8b0 [ 223.513376][ T9] ? kmsan_get_metadata+0x105/0x1b0 [ 223.518815][ T9] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 223.524798][ T9] __device_attach_driver+0x4ee/0x950 [ 223.530339][ T9] bus_for_each_drv+0x3e3/0x680 [ 223.535305][ T9] ? __pfx___device_attach_driver+0x10/0x10 [ 223.541364][ T9] __device_attach+0x3c8/0x5c0 [ 223.546272][ T9] device_initial_probe+0x33/0x40 [ 223.551431][ T9] bus_probe_device+0x3ba/0x5e0 [ 223.556419][ T9] device_add+0x12a9/0x1c10 [ 223.561112][ T9] usb_set_configuration+0x3493/0x3b70 [ 223.566855][ T9] usb_generic_driver_probe+0xfc/0x290 [ 223.572460][ T9] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 223.578666][ T9] usb_probe_device+0x38a/0x690 [ 223.583666][ T9] ? __pfx_usb_probe_device+0x10/0x10 [ 223.589175][ T9] really_probe+0x4d1/0xd90 [ 223.593839][ T9] __driver_probe_device+0x268/0x380 [ 223.599303][ T9] driver_probe_device+0x70/0x8b0 [ 223.604549][ T9] ? kmsan_get_metadata+0x105/0x1b0 [ 223.609923][ T9] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 223.615898][ T9] __device_attach_driver+0x4ee/0x950 [ 223.621481][ T9] bus_for_each_drv+0x3e3/0x680 [ 223.626465][ T9] ? __pfx___device_attach_driver+0x10/0x10 [ 223.632545][ T9] __device_attach+0x3c8/0x5c0 [ 223.637473][ T9] device_initial_probe+0x33/0x40 [ 223.642661][ T9] bus_probe_device+0x3ba/0x5e0 [ 223.647680][ T9] device_add+0x12a9/0x1c10 [ 223.652375][ T9] usb_new_device+0x104b/0x20c0 [ 223.657366][ T9] hub_event+0x5588/0x7580 [ 223.661950][ T9] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 223.667955][ T9] ? pwq_dec_nr_in_flight+0x1678/0x1d80 [ 223.673648][ T9] ? kmsan_get_metadata+0x105/0x1b0 [ 223.679035][ T9] ? __pfx_hub_event+0x10/0x10 [ 223.684021][ T9] process_scheduled_works+0xb9a/0x1d90 [ 223.689759][ T9] worker_thread+0xedf/0x1590 [ 223.694656][ T9] kthread+0xd5c/0xf00 [ 223.698954][ T9] ? __pfx_worker_thread+0x10/0x10 [ 223.704243][ T9] ? __pfx_kthread+0x10/0x10 [ 223.708983][ T9] ret_from_fork+0x71/0x90 [ 223.713570][ T9] ? __pfx_kthread+0x10/0x10 [ 223.718420][ T9] ret_from_fork_asm+0x1a/0x30 [ 223.723475][ T9] [ 223.726948][ T9] Kernel Offset: disabled [ 223.731362][ T9] Rebooting in 86400 seconds..