./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor221492014 <...> no interfaces have a carrier forked to background, child pid 3187 [ 26.359438][ T3188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.372653][ T3188] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.184' (ECDSA) to the list of known hosts. execve("./syz-executor221492014", ["./syz-executor221492014"], 0x7ffe991167f0 /* 10 vars */) = 0 brk(NULL) = 0x555556406000 brk(0x555556406c40) = 0x555556406c40 arch_prctl(ARCH_SET_FS, 0x555556406300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor221492014", 4096) = 27 brk(0x555556427c40) = 0x555556427c40 brk(0x555556428000) = 0x555556428000 mprotect(0x7f1f45a0d000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffe0e01fcd0) = 0 ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe0e01fcd0) = 0 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe0e01fcd0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffe0e01ecc0) = 18 syzkaller login: [ 49.790670][ T142] usb 1-1: new high-speed USB device number 2 using dummy_hcd ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe0e01fcd0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffe0e01ecc0) = 18 [ 50.030654][ T142] usb 1-1: Using ep0 maxpacket: 16 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe0e01fcd0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffe0e01ecc0) = 0 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe0e01fcd0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffe0e01ecc0) = 0 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe0e01fcd0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffe0e01ecc0) = 0 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe0e01fcd0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffe0e01ecc0) = 9 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe0e01fcd0) = 0 [ 50.191303][ T142] usb 1-1: unable to get BOS descriptor or descriptor too short ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffe0e01ecc0) = 330 [ 50.271524][ T142] usb 1-1: config 7 has an invalid interface number: 112 but max is 2 [ 50.279894][ T142] usb 1-1: config 7 has an invalid interface number: 208 but max is 2 [ 50.288127][ T142] usb 1-1: config 7 has an invalid interface number: 86 but max is 2 [ 50.296414][ T142] usb 1-1: config 7 has no interface number 0 [ 50.302564][ T142] usb 1-1: config 7 has no interface number 1 [ 50.308636][ T142] usb 1-1: config 7 has no interface number 2 [ 50.315018][ T142] usb 1-1: config 7 interface 208 altsetting 163 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 50.326173][ T142] usb 1-1: config 7 interface 208 altsetting 163 endpoint 0xA has an invalid bInterval 63, changing to 9 [ 50.337468][ T142] usb 1-1: config 7 interface 208 altsetting 163 has a duplicate endpoint with address 0x7, skipping [ 50.348371][ T142] usb 1-1: config 7 interface 208 altsetting 163 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 50.359524][ T142] usb 1-1: config 7 interface 208 altsetting 163 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 50.370693][ T142] usb 1-1: config 7 interface 208 altsetting 163 bulk endpoint 0x5 has invalid maxpacket 64 [ 50.381192][ T142] usb 1-1: config 7 interface 208 altsetting 163 has a duplicate endpoint with address 0x2, skipping [ 50.392130][ T142] usb 1-1: config 7 interface 208 altsetting 163 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 50.403272][ T142] usb 1-1: config 7 interface 208 altsetting 163 has a duplicate endpoint with address 0x9, skipping ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe0e01fcd0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffe0e01ecc0) = 0 [ 50.414171][ T142] usb 1-1: config 7 interface 208 altsetting 163 has a duplicate endpoint with address 0xA, skipping [ 50.425057][ T142] usb 1-1: config 7 interface 208 altsetting 163 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 50.436239][ T142] usb 1-1: config 7 interface 86 altsetting 169 has an invalid endpoint with address 0x80, skipping [ 50.447034][ T142] usb 1-1: config 7 interface 112 has no altsetting 0 [ 50.453870][ T142] usb 1-1: config 7 interface 208 has no altsetting 0 [ 50.460662][ T142] usb 1-1: config 7 interface 86 has no altsetting 0 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe0e01fcd0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffe0e01ecc0) = 0 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe0e01fcd0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffe0e01ecc0) = 0 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe0e01fcd0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffe0e01ecc0) = 0 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe0e01fcd0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffe0e01ecc0) = 0 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe0e01fcd0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffe0e01ecc0) = 0 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe0e01fcd0) = 0 ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0x3) = 0 ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffe0e01ecc0) = 0 [ 50.701191][ T142] usb 1-1: string descriptor 0 read error: -22 [ 50.707522][ T142] usb 1-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 50.716621][ T142] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.764973][ T142] ------------[ cut here ]------------ [ 50.770491][ T142] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 50.777806][ T142] WARNING: CPU: 0 PID: 142 at drivers/usb/core/urb.c:502 usb_submit_urb+0xed2/0x18a0 [ 50.787351][ T142] Modules linked in: [ 50.791295][ T142] CPU: 0 PID: 142 Comm: kworker/0:2 Not tainted 5.19.0-rc5-syzkaller-00056-ge35e5b6f695d #0 [ 50.801400][ T142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 50.811528][ T142] Workqueue: usb_hub_wq hub_event [ 50.816579][ T142] RIP: 0010:usb_submit_urb+0xed2/0x18a0 [ 50.822296][ T142] Code: 7c 24 18 e8 70 bf ee fb 48 8b 7c 24 18 e8 a6 da 03 ff 41 89 d8 44 89 e1 4c 89 ea 48 89 c6 48 c7 c7 20 f2 6e 8a e8 8d b7 a6 03 <0f> 0b e9 58 f8 ff ff e8 42 bf ee fb 48 81 c5 c0 05 00 00 e9 84 f7 [ 50.841989][ T142] RSP: 0018:ffffc900029bede0 EFLAGS: 00010286 [ 50.848065][ T142] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 50.856484][ T142] RDX: ffff88801b430000 RSI: ffffffff8160cfb8 RDI: fffff52000537dae [ 50.864572][ T142] RBP: ffff88801b9861e0 R08: 0000000000000005 R09: 0000000000000000 [ 50.872592][ T142] R10: 0000000080000000 R11: 0000000000000001 R12: 0000000000000001 [ 50.880683][ T142] R13: ffff888020064ac8 R14: 0000000000000002 R15: ffff888026201100 [ 50.888753][ T142] FS: 0000000000000000(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 50.897767][ T142] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 50.904448][ T142] CR2: 000055f58fcb89c8 CR3: 000000000ba8e000 CR4: 00000000003506f0 exit_group(0) = ? +++ exited with 0 +++ [ 50.912475][ T142] DR0: 000000000