./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2052056804 <...> forked to background, child pid 3185 no interfaces have a carrier [ 22.231748][ T3186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 22.241778][ T3186] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.223' (ECDSA) to the list of known hosts. execve("./syz-executor2052056804", ["./syz-executor2052056804"], 0x7ffc3ae966d0 /* 10 vars */) = 0 brk(NULL) = 0x55555661a000 brk(0x55555661ac40) = 0x55555661ac40 arch_prctl(ARCH_SET_FS, 0x55555661a300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor2052056804", 4096) = 28 brk(0x55555663bc40) = 0x55555663bc40 brk(0x55555663c000) = 0x55555663c000 mprotect(0x7f6dbd6c7000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffed50e3820) = 0 ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffed50e3820) = 0 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffed50e3820) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffed50e2810) = 18 syzkaller login: [ 42.683137][ T2937] usb 1-1: new high-speed USB device number 2 using dummy_hcd ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffed50e3820) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffed50e2810) = 18 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffed50e3820) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffed50e2810) = 9 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffed50e3820) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffed50e2810) = 27 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffed50e3820) = 0 ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6dbd6cd3ac) = 10 ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffed50e2810) = 0 [ 43.043652][ T2937] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 43.053200][ T2937] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.064992][ T2937] usb 1-1: config 0 descriptor?? ioctl(3, USB_RAW_IOCTL_EP_WRITE, 0x7ffed50e3860) = 4 [ 43.324063][ T6] ------------[ cut here ]------------ [ 43.329701][ T6] WARNING: CPU: 0 PID: 6 at drivers/net/wireless/ath/ath6kl/htc_pipe.c:963 ath6kl_htc_pipe_rx_complete+0xd97/0x10c0 [ 43.341957][ T6] Modules linked in: [ 43.345921][ T6] CPU: 0 PID: 6 Comm: kworker/0:0 Not tainted 5.19.0-rc8-syzkaller #0 [ 43.354099][ T6] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 43.364292][ T6] Workqueue: events ath6kl_usb_io_comp_work [ 43.370187][ T6] RIP: 0010:ath6kl_htc_pipe_rx_complete+0xd97/0x10c0 [ 43.377367][ T6] Code: e4 e8 9d 38 3a 04 48 c7 44 24 38 00 00 00 00 e9 66 fa ff ff e8 5a ef 39 fc 8b 9c 24 8c 00 00 00 e9 71 f8 ff ff e8 49 ef 39 fc <0f> 0b 48 c7 c7 80 08 62 8a 41 bc ea ff ff ff e8 72 28 11 04 e9 37 [ 43.397197][ T6] RSP: 0018:ffffc900000b7ba8 EFLAGS: 00010293 [ 43.403302][ T6] RAX: 0000000000000000 RBX: ffff888070870de0 RCX: 0000000000000000 [ 43.411256][ T6] RDX: ffff88813fea9d80 RSI: ffffffff85407cb7 RDI: ffff888070870e50 [ 43.419289][ T6] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 43.427370][ T6] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880205fc000 [ 43.435403][ T6] R13: ffff888070870de0 R14: 0000000000000000 R15: ffff8880205fc920 [ 43.443420][ T6] FS: 0000000000000000(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 43.452338][ T6] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 43.459000][ T6] CR2: 00005650d098d588 CR3: 000000000ba8e000 CR4: 0000000000350ef0 [ 43.467086][ T6] Call Trace: [ 43.470349][ T6] exit_group(0) = ? +++ exited with 0 +++ [ 43.473339][