./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1345481712 <...> Warning: Permanently added '10.128.1.31' (ED25519) to the list of known hosts. execve("./syz-executor1345481712", ["./syz-executor1345481712"], 0x7fff7a465950 /* 10 vars */) = 0 brk(NULL) = 0x555580316000 brk(0x555580316d00) = 0x555580316d00 arch_prctl(ARCH_SET_FS, 0x555580316380) = 0 set_tid_address(0x555580316650) = 5832 set_robust_list(0x555580316660, 24) = 0 rseq(0x555580316ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1345481712", 4096) = 28 getrandom("\x5a\x27\x64\xe9\x68\x64\xb8\xc3", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555580316d00 brk(0x555580337d00) = 0x555580337d00 brk(0x555580338000) = 0x555580338000 mprotect(0x7f8b53a7d000, 16384, PROT_READ) = 0 mmap(0x3ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x3ffffffff000 mmap(0x400000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x400000000000 mmap(0x400001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x400001000000 socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3 socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 4 sendto(4, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36 recvfrom(4, [{nlmsg_len=864, nlmsg_type=nlctrl, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=5832}, "\x01\x02\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00\x06\x00\x01\x00\x1d\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x30\x00\x00\x00\xe8\x02\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x05\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x03\x00"...], 4096, 0, NULL, NULL) = 864 recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5832}, {error=0, msg={nlmsg_len=36, nlmsg_type=nlctrl, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 5 ioctl(5, SIOCGIFINDEX, {ifr_name="wpan0", ifr_ifindex=11}) = 0 close(5) = 0 sendto(4, [{nlmsg_len=36, nlmsg_type=nl802154, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x0b\x00\x00\x00\x08\x00\x03\x00\x0b\x00\x00\x00\x06\x00\x0a\x00\xa0\xaa\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36 recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5832}, {error=0, msg={nlmsg_len=36, nlmsg_type=nl802154, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 5 ioctl(5, SIOCGIFINDEX, {ifr_name="wpan0", ifr_ifindex=11}) = 0 close(5) = 0 sendto(3, [{nlmsg_len=44, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x00\x00\x00\x00\x0b\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x0c\x00\x01\x00\x02\x00\xaa\xaa\xaa\xaa\xaa\xaa"], 44, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 44 recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5832}, {error=0, msg={nlmsg_len=44, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 sendto(3, [{nlmsg_len=68, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|NLM_F_EXCL|NLM_F_CREATE, nlmsg_seq=0, nlmsg_pid=0}, {ifi_family=AF_UNSPEC, ifi_type=ARPHRD_NETROM, ifi_index=0, ifi_flags=0, ifi_change=0}, [[{nla_len=11, nla_type=IFLA_IFNAME}, "lowpan0"...], [{nla_len=16, nla_type=IFLA_LINKINFO}, [{nla_len=10, nla_type=IFLA_INFO_KIND}, "lowpan"...]], [{nla_len=8, nla_type=IFLA_LINK}, 11]]], 68, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 68 recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5832}, {error=0, msg={nlmsg_len=68, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|NLM_F_EXCL|NLM_F_CREATE, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 5 ioctl(5, SIOCGIFINDEX, {ifr_name="wpan1", ifr_ifindex=12}) = 0 close(5) = 0 sendto(4, [{nlmsg_len=36, nlmsg_type=nl802154, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x0b\x00\x00\x00\x08\x00\x03\x00\x0c\x00\x00\x00\x06\x00\x0a\x00\xa1\xaa\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36 recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5832}, {error=0, msg={nlmsg_len=36, nlmsg_type=nl802154, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 5 ioctl(5, SIOCGIFINDEX, {ifr_name="wpan1", ifr_ifindex=12}) = 0 close(5) = 0 sendto(3, [{nlmsg_len=44, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, {ifi_family=AF_UNSPEC, ifi_type=ARPHRD_NETROM, ifi_index=if_nametoindex("wpan1"), ifi_flags=IFF_UP, ifi_change=0x1}, [{nla_len=12, nla_type=IFLA_ADDRESS}, 02:01:aa:aa:aa:aa:aa]], 44, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 44 recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5832}, {error=0, msg={nlmsg_len=44, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 close(3) = 0 close(4) = 0 mkdir("./syzkaller.72gCXh", 0700) = 0 chmod("./syzkaller.72gCXh", 0777) = 0 chdir("./syzkaller.72gCXh") = 0 mkdir("./0", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5835 attached , child_tidptr=0x555580316650) = 5835 [pid 5835] set_robust_list(0x555580316660, 24) = 0 [pid 5835] chdir("./0") = 0 [pid 5835] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5835] setpgid(0, 0) = 0 [pid 5835] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5835] write(3, "1000", 4) = 4 [pid 5835] close(3) = 0 [pid 5835] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5835] write(1, "executing program\n", 18executing program ) = 18 [pid 5835] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5835] close(3) = 0 [pid 5835] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5835] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5835] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5835] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5835] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5835] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5835] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5835] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5835] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 63.263437][ T80] usb 1-1: new high-speed USB device number 2 using dummy_hcd [pid 5835] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5835] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5835] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5835] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5835] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5835] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5835] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5835] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5835] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5835] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5835] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5835] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 63.448918][ T80] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 63.457960][ T80] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 63.468510][ T80] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 63.477527][ T80] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5835] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5835] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5835] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5835] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5835] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5835] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 63.522895][ T80] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 63.532022][ T80] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 63.540437][ T80] usb 1-1: Product: syz [ 63.544862][ T80] usb 1-1: Manufacturer: syz [ 63.596651][ T80] cdc_wdm 1-1:1.0: skipping garbage [ 63.601913][ T80] cdc_wdm 1-1:1.0: skipping garbage [ 63.609400][ T80] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 63.615398][ T80] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5835] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5835] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5835] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5835] exit_group(0) = ? [ 63.797060][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 63.802824][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 63.808552][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 63.814211][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 63.820021][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 63.825893][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 63.831584][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 63.841246][ C1] cdc_wdm 1-1:1.0: Unexpected error -71 [pid 5835] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5835, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 63.844805][ T1933] usb 1-1: USB disconnect, device number 2 unlink("./0/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./0") = 0 mkdir("./1", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5838 attached , child_tidptr=0x555580316650) = 5838 [pid 5838] set_robust_list(0x555580316660, 24) = 0 [pid 5838] chdir("./1") = 0 [pid 5838] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5838] setpgid(0, 0) = 0 [pid 5838] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5838] write(3, "1000", 4) = 4 [pid 5838] close(3) = 0 [pid 5838] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5838] write(1, "executing program\n", 18executing program ) = 18 [pid 5838] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5838] close(3) = 0 [pid 5838] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5838] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5838] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5838] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5838] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5838] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5838] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5838] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5838] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 64.533208][ T80] usb 1-1: new high-speed USB device number 3 using dummy_hcd [pid 5838] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5838] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5838] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5838] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5838] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5838] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5838] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5838] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5838] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5838] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5838] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5838] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 64.716590][ T80] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 64.725420][ T80] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 64.735888][ T80] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 64.744905][ T80] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5838] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5838] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5838] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5838] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5838] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5838] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 64.790710][ T80] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 64.800067][ T80] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 64.808358][ T80] usb 1-1: Product: syz [ 64.812542][ T80] usb 1-1: Manufacturer: syz [ 64.845457][ T80] cdc_wdm 1-1:1.0: skipping garbage [ 64.850703][ T80] cdc_wdm 1-1:1.0: skipping garbage [ 64.857287][ T80] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 64.863259][ T80] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5838] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5838] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5838] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5838] exit_group(0) = ? [ 65.065888][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 65.071579][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 65.077433][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 65.083120][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 65.088988][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 65.094683][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 65.100522][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 65.106205][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [pid 5838] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5838, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./1/binderfs") = 0 [ 65.111772][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 65.122811][ T80] usb 1-1: USB disconnect, device number 3 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./1") = 0 mkdir("./2", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5839 attached , child_tidptr=0x555580316650) = 5839 [pid 5839] set_robust_list(0x555580316660, 24) = 0 [pid 5839] chdir("./2") = 0 [pid 5839] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5839] setpgid(0, 0) = 0 [pid 5839] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5839] write(3, "1000", 4) = 4 [pid 5839] close(3) = 0 [pid 5839] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5839] write(1, "executing program\n", 18executing program ) = 18 [pid 5839] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5839] close(3) = 0 [pid 5839] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5839] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5839] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5839] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5839] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5839] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5839] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5839] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5839] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 65.773188][ T80] usb 1-1: new high-speed USB device number 4 using dummy_hcd [pid 5839] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5839] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5839] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5839] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5839] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5839] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5839] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5839] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5839] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5839] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 65.956469][ T80] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 65.965389][ T80] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 65.975828][ T80] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 65.984867][ T80] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5839] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5839] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5839] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5839] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5839] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5839] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5839] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5839] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 66.061990][ T80] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 66.071090][ T80] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 66.079133][ T80] usb 1-1: Product: syz [ 66.083333][ T80] usb 1-1: Manufacturer: syz [ 66.113273][ T80] cdc_wdm 1-1:1.0: skipping garbage [ 66.118526][ T80] cdc_wdm 1-1:1.0: skipping garbage [ 66.124987][ T80] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 66.130908][ T80] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5839] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5839] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5839] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5839] exit_group(0) = ? [ 66.333381][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 66.339060][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 66.344977][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 66.350664][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 66.356526][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 66.362640][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 66.368841][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 66.374535][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [pid 5839] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5839, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 [ 66.380175][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 66.390673][ T1933] usb 1-1: USB disconnect, device number 4 umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./2/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./2") = 0 mkdir("./3", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5840 attached , child_tidptr=0x555580316650) = 5840 [pid 5840] set_robust_list(0x555580316660, 24) = 0 [pid 5840] chdir("./3") = 0 [pid 5840] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5840] setpgid(0, 0) = 0 [pid 5840] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5840] write(3, "1000", 4) = 4 [pid 5840] close(3) = 0 [pid 5840] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5840] write(1, "executing program\n", 18) = 18 [pid 5840] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5840] close(3) = 0 [pid 5840] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5840] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5840] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5840] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5840] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5840] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5840] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5840] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5840] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 67.073242][ T1933] usb 1-1: new high-speed USB device number 5 using dummy_hcd [pid 5840] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5840] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5840] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5840] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5840] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5840] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5840] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5840] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5840] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5840] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5840] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 67.256662][ T1933] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 67.265719][ T1933] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 67.275979][ T1933] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 67.285012][ T1933] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5840] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5840] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5840] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5840] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5840] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5840] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [ 67.341670][ T1933] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 67.350835][ T1933] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 67.358894][ T1933] usb 1-1: Product: syz [ 67.363517][ T1933] usb 1-1: Manufacturer: syz [pid 5840] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 67.396435][ T1933] cdc_wdm 1-1:1.0: skipping garbage [ 67.401669][ T1933] cdc_wdm 1-1:1.0: skipping garbage [ 67.408312][ T1933] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 67.414284][ T1933] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5840] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5840] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5840] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5840] exit_group(0) = ? [ 67.618604][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 67.624317][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 67.630211][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 67.636118][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 67.642091][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 67.648065][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 67.653734][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 67.659294][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [pid 5840] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5840, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./3/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./3") = 0 mkdir("./4", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5841 attached , child_tidptr=0x555580316650) = 5841 [pid 5841] set_robust_list(0x555580316660, 24) = 0 [pid 5841] chdir("./4") = 0 [pid 5841] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5841] setpgid(0, 0) = 0 [pid 5841] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 67.669946][ T1933] usb 1-1: USB disconnect, device number 5 [pid 5841] write(3, "1000", 4) = 4 [pid 5841] close(3) = 0 [pid 5841] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5841] write(1, "executing program\n", 18) = 18 [pid 5841] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5841] close(3) = 0 [pid 5841] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5841] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5841] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5841] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5841] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5841] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5841] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5841] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5841] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 68.233215][ T1933] usb 1-1: new high-speed USB device number 6 using dummy_hcd [pid 5841] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5841] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5841] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5841] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5841] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5841] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5841] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5841] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5841] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5841] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5841] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5841] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 68.426788][ T1933] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 68.435503][ T1933] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 68.445635][ T1933] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 68.454653][ T1933] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5841] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5841] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5841] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5841] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5841] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5841] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 68.512586][ T1933] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 68.521796][ T1933] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 68.529845][ T1933] usb 1-1: Product: syz [ 68.534068][ T1933] usb 1-1: Manufacturer: syz [ 68.564612][ T1933] cdc_wdm 1-1:1.0: skipping garbage [ 68.569899][ T1933] cdc_wdm 1-1:1.0: skipping garbage [ 68.575899][ T1933] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 68.581813][ T1933] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5841] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5841] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5841] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5841] exit_group(0) = ? [pid 5841] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5841, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 68.766028][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 68.771738][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 68.778054][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 68.783899][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 68.789677][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 68.795244][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 68.804930][ T1933] usb 1-1: USB disconnect, device number 6 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./4/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./4") = 0 mkdir("./5", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5842 attached , child_tidptr=0x555580316650) = 5842 [pid 5842] set_robust_list(0x555580316660, 24) = 0 [pid 5842] chdir("./5") = 0 [pid 5842] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5842] setpgid(0, 0) = 0 [pid 5842] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5842] write(3, "1000", 4) = 4 [pid 5842] close(3) = 0 [pid 5842] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5842] write(1, "executing program\n", 18) = 18 [pid 5842] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5842] close(3) = 0 [pid 5842] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5842] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5842] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5842] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5842] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5842] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5842] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5842] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5842] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 69.493204][ T1933] usb 1-1: new high-speed USB device number 7 using dummy_hcd [pid 5842] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5842] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5842] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5842] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5842] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5842] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5842] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5842] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5842] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5842] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5842] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5842] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5842] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 69.667721][ T1933] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 69.676431][ T1933] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 69.686595][ T1933] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 69.695603][ T1933] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5842] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5842] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5842] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5842] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [ 69.743610][ T1933] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 69.752726][ T1933] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 69.760771][ T1933] usb 1-1: Product: syz [ 69.765027][ T1933] usb 1-1: Manufacturer: syz [pid 5842] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 69.798258][ T1933] cdc_wdm 1-1:1.0: skipping garbage [ 69.803633][ T1933] cdc_wdm 1-1:1.0: skipping garbage [ 69.809640][ T1933] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 69.815713][ T1933] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5842] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5842] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5842] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5842] exit_group(0) = ? [ 70.019288][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 70.025008][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 70.030731][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 70.036587][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 70.042239][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 70.048058][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 70.053746][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 70.059481][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [pid 5842] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5842, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 70.065162][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 70.075300][ T1933] usb 1-1: USB disconnect, device number 7 openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./5/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./5") = 0 mkdir("./6", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5843 attached , child_tidptr=0x555580316650) = 5843 [pid 5843] set_robust_list(0x555580316660, 24) = 0 [pid 5843] chdir("./6") = 0 [pid 5843] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5843] setpgid(0, 0) = 0 [pid 5843] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5843] write(3, "1000", 4) = 4 [pid 5843] close(3) = 0 [pid 5843] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5843] write(1, "executing program\n", 18) = 18 [pid 5843] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5843] close(3) = 0 [pid 5843] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5843] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5843] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5843] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5843] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5843] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5843] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5843] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5843] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 70.843183][ T80] usb 1-1: new high-speed USB device number 8 using dummy_hcd [pid 5843] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5843] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5843] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5843] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5843] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5843] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5843] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5843] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5843] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5843] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5843] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5843] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5843] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 71.036397][ T80] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 71.045215][ T80] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 71.055342][ T80] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 71.064376][ T80] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5843] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5843] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5843] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5843] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5843] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 71.089047][ T80] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 71.098397][ T80] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 71.106445][ T80] usb 1-1: Product: syz [ 71.110620][ T80] usb 1-1: Manufacturer: syz [ 71.140464][ T80] cdc_wdm 1-1:1.0: skipping garbage [ 71.145800][ T80] cdc_wdm 1-1:1.0: skipping garbage [ 71.151689][ T80] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 71.157710][ T80] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5843] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5843] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5843] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5843] exit_group(0) = ? [ 71.341250][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 71.346981][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 71.352699][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 71.358727][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 71.364537][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 71.370373][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 71.376057][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 71.381621][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [pid 5843] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5843, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./6/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./6") = 0 mkdir("./7", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5844 attached [pid 5844] set_robust_list(0x555580316660, 24 [pid 5832] <... clone resumed>, child_tidptr=0x555580316650) = 5844 [pid 5844] <... set_robust_list resumed>) = 0 [pid 5844] chdir("./7") = 0 [pid 5844] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5844] setpgid(0, 0) = 0 [ 71.391259][ T80] usb 1-1: USB disconnect, device number 8 [pid 5844] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5844] write(3, "1000", 4) = 4 [pid 5844] close(3) = 0 [pid 5844] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5844] write(1, "executing program\n", 18executing program ) = 18 [pid 5844] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5844] close(3) = 0 [pid 5844] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [ 71.676447][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.682812][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [pid 5844] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5844] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5844] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5844] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5844] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5844] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5844] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5844] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 71.973228][ T1933] usb 1-1: new high-speed USB device number 9 using dummy_hcd [pid 5844] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5844] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5844] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5844] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5844] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5844] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5844] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5844] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5844] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5844] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5844] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5844] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 72.156631][ T1933] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 72.165359][ T1933] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 72.175828][ T1933] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 72.184869][ T1933] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5844] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5844] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5844] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5844] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5844] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5844] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 72.229527][ T1933] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 72.238719][ T1933] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 72.247100][ T1933] usb 1-1: Product: syz [ 72.251280][ T1933] usb 1-1: Manufacturer: syz [ 72.272552][ T1933] cdc_wdm 1-1:1.0: skipping garbage [ 72.277924][ T1933] cdc_wdm 1-1:1.0: skipping garbage [ 72.284114][ T1933] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 72.290029][ T1933] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5844] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5844] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5844] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5844] exit_group(0) = ? [pid 5844] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5844, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./7/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 [ 72.484049][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 72.489733][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 72.495442][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 72.502995][ T80] usb 1-1: USB disconnect, device number 9 rmdir("./7") = 0 mkdir("./8", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5845 attached , child_tidptr=0x555580316650) = 5845 [pid 5845] set_robust_list(0x555580316660, 24) = 0 [pid 5845] chdir("./8") = 0 [pid 5845] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5845] setpgid(0, 0) = 0 [pid 5845] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5845] write(3, "1000", 4) = 4 [pid 5845] close(3) = 0 [pid 5845] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5845] write(1, "executing program\n", 18executing program ) = 18 [pid 5845] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5845] close(3) = 0 [pid 5845] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5845] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5845] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5845] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5845] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5845] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5845] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5845] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5845] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 73.083234][ T1933] usb 1-1: new high-speed USB device number 10 using dummy_hcd [pid 5845] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5845] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5845] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5845] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5845] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5845] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5845] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5845] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5845] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5845] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5845] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5845] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 73.296980][ T1933] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 73.305726][ T1933] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 73.316230][ T1933] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 73.325264][ T1933] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5845] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5845] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5845] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5845] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5845] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5845] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 73.380417][ T1933] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 73.389564][ T1933] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 73.397613][ T1933] usb 1-1: Product: syz [ 73.401785][ T1933] usb 1-1: Manufacturer: syz [ 73.435856][ T1933] cdc_wdm 1-1:1.0: skipping garbage [ 73.441137][ T1933] cdc_wdm 1-1:1.0: skipping garbage [ 73.447269][ T1933] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 73.453284][ T1933] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5845] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5845] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5845] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5845] exit_group(0) = ? [ 73.656153][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 73.661861][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 73.667589][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 73.673413][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 73.679084][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 73.684825][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 73.690663][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 73.696382][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [pid 5845] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5845, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./8/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./8") = 0 mkdir("./9", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555580316650) = 5846 ./strace-static-x86_64: Process 5846 attached [pid 5846] set_robust_list(0x555580316660, 24) = 0 [pid 5846] chdir("./9") = 0 [ 73.702100][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 73.707779][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 73.717748][ T80] usb 1-1: USB disconnect, device number 10 [pid 5846] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5846] setpgid(0, 0) = 0 [pid 5846] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5846] write(3, "1000", 4) = 4 [pid 5846] close(3) = 0 [pid 5846] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5846] write(1, "executing program\n", 18) = 18 [pid 5846] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5846] close(3) = 0 [pid 5846] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5846] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5846] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5846] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5846] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5846] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5846] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5846] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5846] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 74.313239][ T1933] usb 1-1: new high-speed USB device number 11 using dummy_hcd [pid 5846] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5846] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5846] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5846] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5846] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5846] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5846] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5846] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5846] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5846] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5846] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5846] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 74.476574][ T1933] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 74.485290][ T1933] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 74.495413][ T1933] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 74.504443][ T1933] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5846] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5846] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5846] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5846] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5846] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5846] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 74.549125][ T1933] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 74.558329][ T1933] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 74.566429][ T1933] usb 1-1: Product: syz [ 74.570605][ T1933] usb 1-1: Manufacturer: syz [ 74.600966][ T1933] cdc_wdm 1-1:1.0: skipping garbage [ 74.606372][ T1933] cdc_wdm 1-1:1.0: skipping garbage [ 74.612391][ T1933] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 74.618383][ T1933] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5846] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5846] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5846] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5846] exit_group(0) = ? [pid 5846] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5846, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./9/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./9") = 0 mkdir("./10", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5847 attached [pid 5847] set_robust_list(0x555580316660, 24 [pid 5832] <... clone resumed>, child_tidptr=0x555580316650) = 5847 [ 74.823762][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 74.829476][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 74.835193][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 74.840862][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 74.846591][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 74.852269][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 74.861162][ C0] cdc_wdm 1-1:1.0: Unexpected error -71 [ 74.862026][ T80] usb 1-1: USB disconnect, device number 11 [pid 5847] <... set_robust_list resumed>) = 0 [pid 5847] chdir("./10") = 0 [pid 5847] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5847] setpgid(0, 0) = 0 [pid 5847] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5847] write(3, "1000", 4) = 4 [pid 5847] close(3) = 0 [pid 5847] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5847] write(1, "executing program\n", 18) = 18 [pid 5847] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5847] close(3) = 0 [pid 5847] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5847] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5847] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5847] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5847] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5847] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5847] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5847] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5847] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 75.433199][ T80] usb 1-1: new high-speed USB device number 12 using dummy_hcd [pid 5847] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5847] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5847] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5847] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5847] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5847] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5847] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5847] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5847] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5847] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5847] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5847] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5847] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 75.606703][ T80] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 75.615627][ T80] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 75.626002][ T80] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 75.635032][ T80] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5847] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5847] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5847] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5847] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5847] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 75.680106][ T80] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 75.689382][ T80] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 75.697562][ T80] usb 1-1: Product: syz [ 75.701740][ T80] usb 1-1: Manufacturer: syz [ 75.735022][ T80] cdc_wdm 1-1:1.0: skipping garbage [ 75.740280][ T80] cdc_wdm 1-1:1.0: skipping garbage [ 75.746346][ T80] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 75.752354][ T80] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5847] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5847] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5847] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5847] exit_group(0) = ? [ 75.955373][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 75.961075][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 75.966942][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 75.972645][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 75.978528][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 75.984201][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 75.990101][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 75.995796][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [pid 5847] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5847, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./10/binderfs") = 0 [ 76.001391][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 76.011505][ T1933] usb 1-1: USB disconnect, device number 12 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./10") = 0 mkdir("./11", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5848 attached , child_tidptr=0x555580316650) = 5848 [pid 5848] set_robust_list(0x555580316660, 24) = 0 [pid 5848] chdir("./11") = 0 [pid 5848] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5848] setpgid(0, 0) = 0 [pid 5848] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5848] write(3, "1000", 4) = 4 [pid 5848] close(3) = 0 [pid 5848] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5848] write(1, "executing program\n", 18executing program ) = 18 [pid 5848] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5848] close(3) = 0 [pid 5848] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5848] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5848] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5848] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5848] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5848] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5848] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5848] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5848] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 76.683185][ T80] usb 1-1: new high-speed USB device number 13 using dummy_hcd [pid 5848] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5848] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5848] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5848] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5848] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5848] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5848] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [ 76.893421][ T80] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 76.902227][ T80] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.933126][ T80] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [pid 5848] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5848] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5848] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5848] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5848] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5848] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 76.942195][ T80] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5848] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5848] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5848] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5848] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5848] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 76.987892][ T80] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 77.003126][ T80] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 77.011134][ T80] usb 1-1: Product: syz [ 77.023137][ T80] usb 1-1: Manufacturer: syz [ 77.037976][ T80] cdc_wdm 1-1:1.0: skipping garbage [ 77.053167][ T80] cdc_wdm 1-1:1.0: skipping garbage [ 77.063910][ T80] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 77.069852][ T80] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5848] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5848] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5848] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [ 77.248613][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 77.254346][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 77.260151][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 77.266021][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 77.271839][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 77.277519][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 77.283398][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 77.289264][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [pid 5848] exit_group(0) = ? [pid 5848] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5848, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 77.294946][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 77.300767][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 77.306450][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 77.316688][ T1210] usb 1-1: USB disconnect, device number 13 newfstatat(AT_FDCWD, "./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./11/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./11") = 0 mkdir("./12", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5850 attached , child_tidptr=0x555580316650) = 5850 [pid 5850] set_robust_list(0x555580316660, 24) = 0 [pid 5850] chdir("./12") = 0 [pid 5850] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5850] setpgid(0, 0) = 0 [pid 5850] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5850] write(3, "1000", 4) = 4 [pid 5850] close(3) = 0 [pid 5850] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5850] write(1, "executing program\n", 18executing program ) = 18 [pid 5850] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5850] close(3) = 0 [pid 5850] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5850] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5850] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5850] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5850] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5850] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5850] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5850] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5850] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 78.003197][ T1933] usb 1-1: new high-speed USB device number 14 using dummy_hcd [pid 5850] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5850] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5850] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5850] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5850] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5850] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5850] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5850] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5850] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5850] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5850] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5850] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5850] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 78.186760][ T1933] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 78.195468][ T1933] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 78.205614][ T1933] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 78.214614][ T1933] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5850] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5850] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5850] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5850] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [ 78.253782][ T1933] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 78.262896][ T1933] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 78.270960][ T1933] usb 1-1: Product: syz [ 78.275170][ T1933] usb 1-1: Manufacturer: syz [ 78.297715][ T1933] cdc_wdm 1-1:1.0: skipping garbage [pid 5850] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 78.303005][ T1933] cdc_wdm 1-1:1.0: skipping garbage [ 78.309447][ T1933] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 78.315468][ T1933] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5850] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5850] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5850] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5850] exit_group(0) = ? [ 78.518712][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 78.524423][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 78.530156][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 78.535826][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 78.541552][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 78.547255][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 78.553002][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 78.558683][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [pid 5850] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5850, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./12/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./12") = 0 mkdir("./13", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5851 attached , child_tidptr=0x555580316650) = 5851 [pid 5851] set_robust_list(0x555580316660, 24) = 0 [pid 5851] chdir("./13") = 0 [ 78.569062][ T1210] usb 1-1: USB disconnect, device number 14 [pid 5851] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5851] setpgid(0, 0) = 0 [pid 5851] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5851] write(3, "1000", 4) = 4 [pid 5851] close(3) = 0 [pid 5851] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5851] write(1, "executing program\n", 18executing program ) = 18 [pid 5851] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5851] close(3) = 0 [pid 5851] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5851] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5851] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5851] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5851] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5851] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5851] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5851] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5851] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 79.143400][ T1210] usb 1-1: new high-speed USB device number 15 using dummy_hcd [pid 5851] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5851] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5851] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5851] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5851] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5851] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5851] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5851] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5851] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [ 79.336484][ T1210] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 79.345409][ T1210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 79.355955][ T1210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 79.364983][ T1210] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5851] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5851] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5851] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5851] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5851] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5851] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5851] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5851] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5851] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 79.421145][ T1210] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 79.430762][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 79.439190][ T1210] usb 1-1: Product: syz [ 79.443441][ T1210] usb 1-1: Manufacturer: syz [ 79.477461][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 79.482719][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 79.488887][ T1210] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 79.494855][ T1210] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5851] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5851] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5851] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5851] exit_group(0) = ? [pid 5851] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5851, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- umount2("./13", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 79.697744][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 79.703479][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 79.709352][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 79.715431][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 79.721127][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 79.730037][ C1] cdc_wdm 1-1:1.0: Unexpected error -71 [ 79.730405][ T1933] usb 1-1: USB disconnect, device number 15 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./13/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./13/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./13") = 0 mkdir("./14", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5852 attached , child_tidptr=0x555580316650) = 5852 [pid 5852] set_robust_list(0x555580316660, 24) = 0 [pid 5852] chdir("./14") = 0 [pid 5852] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5852] setpgid(0, 0) = 0 [pid 5852] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5852] write(3, "1000", 4) = 4 [pid 5852] close(3) = 0 [pid 5852] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5852] write(1, "executing program\n", 18executing program ) = 18 [pid 5852] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5852] close(3) = 0 [pid 5852] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5852] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5852] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5852] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5852] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5852] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5852] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5852] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5852] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 80.493230][ T1210] usb 1-1: new high-speed USB device number 16 using dummy_hcd [pid 5852] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5852] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5852] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5852] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5852] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5852] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5852] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5852] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5852] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5852] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5852] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 80.676660][ T1210] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 80.685471][ T1210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 80.695749][ T1210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 80.704760][ T1210] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5852] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5852] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5852] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5852] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5852] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5852] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5852] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 80.771591][ T1210] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 80.780805][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 80.788845][ T1210] usb 1-1: Product: syz [ 80.793017][ T1210] usb 1-1: Manufacturer: syz [ 80.825320][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 80.830561][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 80.836750][ T1210] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 80.842671][ T1210] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5852] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5852] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5852] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5852] exit_group(0) = ? [ 81.026572][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 81.032278][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 81.038074][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 81.043913][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 81.049574][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 81.055277][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 81.061112][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 81.066787][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [pid 5852] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5852, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./14", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 81.072350][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 81.083226][ T1933] usb 1-1: USB disconnect, device number 16 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./14/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./14/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./14") = 0 mkdir("./15", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5853 attached , child_tidptr=0x555580316650) = 5853 [pid 5853] set_robust_list(0x555580316660, 24) = 0 [pid 5853] chdir("./15") = 0 [pid 5853] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5853] setpgid(0, 0) = 0 [pid 5853] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5853] write(3, "1000", 4) = 4 [pid 5853] close(3) = 0 executing program [pid 5853] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5853] write(1, "executing program\n", 18) = 18 [pid 5853] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5853] close(3) = 0 [pid 5853] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5853] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5853] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5853] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5853] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5853] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5853] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5853] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5853] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 81.783189][ T1210] usb 1-1: new high-speed USB device number 17 using dummy_hcd [pid 5853] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5853] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5853] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5853] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5853] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [ 81.915041][ T9] cfg80211: failed to load regulatory.db [pid 5853] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5853] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5853] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5853] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5853] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5853] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5853] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 81.976647][ T1210] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 81.985419][ T1210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.995724][ T1210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 82.004723][ T1210] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5853] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5853] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5853] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5853] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5853] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5853] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 82.060213][ T1210] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 82.069493][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 82.077529][ T1210] usb 1-1: Product: syz [ 82.081731][ T1210] usb 1-1: Manufacturer: syz [ 82.125398][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 82.130631][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 82.136714][ T1210] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 82.142629][ T1210] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5853] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5853] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5853] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5853] exit_group(0) = ? [pid 5853] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5853, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [ 82.327486][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 82.333205][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 82.339034][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 82.344877][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 82.351025][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 82.356907][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 82.362815][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 82.368521][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./15", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 [ 82.381692][ C1] cdc_wdm 1-1:1.0: Unexpected error -71 [ 82.388301][ T1210] usb 1-1: USB disconnect, device number 17 umount2("./15/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./15/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./15") = 0 mkdir("./16", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5854 attached , child_tidptr=0x555580316650) = 5854 [pid 5854] set_robust_list(0x555580316660, 24) = 0 [pid 5854] chdir("./16") = 0 [pid 5854] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5854] setpgid(0, 0) = 0 [pid 5854] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5854] write(3, "1000", 4) = 4 [pid 5854] close(3) = 0 [pid 5854] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5854] write(1, "executing program\n", 18executing program ) = 18 [pid 5854] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5854] close(3) = 0 [pid 5854] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5854] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5854] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5854] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5854] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5854] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5854] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5854] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5854] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 83.083183][ T1210] usb 1-1: new high-speed USB device number 18 using dummy_hcd [pid 5854] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5854] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5854] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5854] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5854] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5854] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5854] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5854] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5854] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5854] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5854] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5854] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 83.286263][ T1210] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 83.295151][ T1210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.305445][ T1210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 83.314457][ T1210] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5854] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5854] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5854] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5854] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5854] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [ 83.371576][ T1210] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 83.380815][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 83.389049][ T1210] usb 1-1: Product: syz [ 83.393261][ T1210] usb 1-1: Manufacturer: syz [pid 5854] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 83.425862][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 83.431106][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 83.437327][ T1210] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 83.443318][ T1210] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5854] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5854] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5854] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5854] exit_group(0) = ? [ 83.645940][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 83.651643][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 83.657501][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 83.663571][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 83.669486][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 83.675165][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 83.681287][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 83.687000][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [pid 5854] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5854, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- umount2("./16", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./16/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./16/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./16") = 0 mkdir("./17", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5855 attached , child_tidptr=0x555580316650) = 5855 [pid 5855] set_robust_list(0x555580316660, 24) = 0 [pid 5855] chdir("./17") = 0 [pid 5855] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5855] setpgid(0, 0) = 0 [ 83.697583][ T9] usb 1-1: USB disconnect, device number 18 [pid 5855] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5855] write(3, "1000", 4) = 4 [pid 5855] close(3) = 0 [pid 5855] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5855] write(1, "executing program\n", 18) = 18 [pid 5855] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5855] close(3) = 0 [pid 5855] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5855] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5855] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5855] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5855] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5855] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5855] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5855] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5855] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 84.303218][ T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd [pid 5855] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5855] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5855] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5855] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5855] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5855] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5855] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5855] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5855] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5855] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5855] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5855] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5855] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 84.497138][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 84.505863][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 84.516012][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 84.525035][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5855] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5855] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5855] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5855] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5855] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 84.569717][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 84.578866][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 84.586893][ T9] usb 1-1: Product: syz [ 84.591060][ T9] usb 1-1: Manufacturer: syz [ 84.625150][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 84.630448][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 84.636587][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 84.642514][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5855] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5855] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5855] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5855] exit_group(0) = ? [ 84.845865][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 84.851593][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 84.857323][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 84.862999][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 84.868711][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 84.874392][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 84.880117][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 84.885818][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [pid 5855] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5855, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- umount2("./17", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./17/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./17/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./17") = 0 mkdir("./18", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5856 attached , child_tidptr=0x555580316650) = 5856 [pid 5856] set_robust_list(0x555580316660, 24) = 0 [pid 5856] chdir("./18") = 0 [ 84.891415][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 84.902572][ T9] usb 1-1: USB disconnect, device number 19 [pid 5856] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5856] setpgid(0, 0) = 0 [pid 5856] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5856] write(3, "1000", 4) = 4 [pid 5856] close(3) = 0 [pid 5856] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5856] write(1, "executing program\n", 18executing program ) = 18 [pid 5856] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5856] close(3) = 0 [pid 5856] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5856] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5856] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5856] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5856] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5856] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5856] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5856] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5856] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 85.473201][ T1210] usb 1-1: new high-speed USB device number 20 using dummy_hcd [pid 5856] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5856] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5856] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5856] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5856] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5856] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5856] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5856] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5856] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5856] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5856] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5856] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5856] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 85.666566][ T1210] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 85.675480][ T1210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.685793][ T1210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 85.694816][ T1210] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5856] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5856] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5856] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5856] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5856] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 85.741843][ T1210] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 85.751106][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 85.759252][ T1210] usb 1-1: Product: syz [ 85.763453][ T1210] usb 1-1: Manufacturer: syz [ 85.795805][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 85.801058][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 85.807214][ T1210] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 85.813205][ T1210] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5856] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5856] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5856] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5856] exit_group(0) = ? [ 86.006098][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 86.011796][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 86.017696][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 86.023382][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 86.029269][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 86.034971][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 86.040868][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 86.046800][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [pid 5856] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5856, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- umount2("./18", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./18/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./18/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./18") = 0 mkdir("./19", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5857 attached , child_tidptr=0x555580316650) = 5857 [pid 5857] set_robust_list(0x555580316660, 24) = 0 [pid 5857] chdir("./19") = 0 [ 86.052744][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 86.058429][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 86.069743][ T9] usb 1-1: USB disconnect, device number 20 [pid 5857] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5857] setpgid(0, 0) = 0 [pid 5857] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5857] write(3, "1000", 4) = 4 [pid 5857] close(3) = 0 [pid 5857] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5857] write(1, "executing program\n", 18) = 18 [pid 5857] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5857] close(3) = 0 [pid 5857] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5857] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5857] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5857] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5857] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5857] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5857] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5857] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5857] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 86.663189][ T1210] usb 1-1: new high-speed USB device number 21 using dummy_hcd [pid 5857] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5857] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5857] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5857] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5857] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5857] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5857] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5857] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5857] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [ 86.865946][ T1210] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 86.874867][ T1210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.885144][ T1210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 86.894191][ T1210] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5857] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5857] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5857] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5857] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5857] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5857] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5857] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5857] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5857] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 86.951115][ T1210] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 86.960339][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 86.968551][ T1210] usb 1-1: Product: syz [ 86.972729][ T1210] usb 1-1: Manufacturer: syz [ 87.002539][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 87.007934][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 87.014119][ T1210] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 87.020036][ T1210] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5857] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5857] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5857] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5857] exit_group(0) = ? [ 87.213184][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 87.218896][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 87.224609][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 87.230276][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 87.235983][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 87.241661][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 87.247365][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 87.253036][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [pid 5857] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5857, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- umount2("./19", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 87.258765][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 87.264433][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 87.270021][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 87.279734][ T9] usb 1-1: USB disconnect, device number 21 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./19/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./19/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./19/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./19") = 0 mkdir("./20", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5858 attached , child_tidptr=0x555580316650) = 5858 [pid 5858] set_robust_list(0x555580316660, 24) = 0 [pid 5858] chdir("./20") = 0 [pid 5858] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5858] setpgid(0, 0) = 0 [pid 5858] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5858] write(3, "1000", 4) = 4 [pid 5858] close(3) = 0 [pid 5858] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5858] write(1, "executing program\n", 18executing program ) = 18 [pid 5858] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5858] close(3) = 0 [pid 5858] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5858] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5858] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5858] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5858] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5858] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5858] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5858] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5858] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 87.953211][ T9] usb 1-1: new high-speed USB device number 22 using dummy_hcd [pid 5858] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5858] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5858] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5858] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5858] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5858] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5858] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5858] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5858] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5858] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5858] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5858] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5858] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 88.136477][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 88.145223][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.155408][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 88.164605][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5858] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5858] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5858] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5858] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5858] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 88.211603][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 88.220782][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 88.228934][ T9] usb 1-1: Product: syz [ 88.233179][ T9] usb 1-1: Manufacturer: syz [ 88.256751][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 88.262023][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 88.268268][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 88.274262][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5858] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5858] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5858] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5858] exit_group(0) = ? [pid 5858] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5858, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- umount2("./20", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 88.467729][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 88.473431][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 88.479139][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 88.484979][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 88.490646][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 88.496406][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 88.502089][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 88.511422][ T1210] usb 1-1: USB disconnect, device number 22 openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./20/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./20/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./20/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./20") = 0 mkdir("./21", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5859 attached , child_tidptr=0x555580316650) = 5859 [pid 5859] set_robust_list(0x555580316660, 24) = 0 [pid 5859] chdir("./21") = 0 [pid 5859] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5859] setpgid(0, 0) = 0 [pid 5859] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5859] write(3, "1000", 4) = 4 [pid 5859] close(3) = 0 [pid 5859] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5859] write(1, "executing program\n", 18executing program ) = 18 [pid 5859] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5859] close(3) = 0 [pid 5859] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5859] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5859] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5859] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5859] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5859] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5859] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5859] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5859] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 89.263187][ T1210] usb 1-1: new high-speed USB device number 23 using dummy_hcd [pid 5859] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5859] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5859] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5859] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5859] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5859] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5859] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5859] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5859] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5859] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5859] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5859] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5859] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 89.447219][ T1210] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 89.455920][ T1210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 89.466234][ T1210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 89.475293][ T1210] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5859] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5859] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5859] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5859] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5859] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 89.521250][ T1210] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 89.530468][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 89.538667][ T1210] usb 1-1: Product: syz [ 89.542845][ T1210] usb 1-1: Manufacturer: syz [ 89.576005][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 89.581238][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 89.587954][ T1210] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 89.593955][ T1210] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5859] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5859] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5859] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5859] exit_group(0) = ? [ 89.796950][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 89.802669][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 89.808592][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 89.814565][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 89.820444][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 89.826392][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 89.832090][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 89.837696][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [pid 5859] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5859, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- umount2("./21", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./21/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./21/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./21/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./21") = 0 mkdir("./22", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555580316650) = 5860 ./strace-static-x86_64: Process 5860 attached [pid 5860] set_robust_list(0x555580316660, 24) = 0 [pid 5860] chdir("./22") = 0 [pid 5860] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5860] setpgid(0, 0) = 0 [pid 5860] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5860] write(3, "1000", 4) = 4 [ 89.848606][ T9] usb 1-1: USB disconnect, device number 23 [pid 5860] close(3) = 0 [pid 5860] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5860] write(1, "executing program\n", 18) = 18 [pid 5860] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5860] close(3) = 0 [pid 5860] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5860] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5860] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5860] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5860] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5860] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5860] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5860] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5860] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 90.393245][ T9] usb 1-1: new high-speed USB device number 24 using dummy_hcd [pid 5860] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5860] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5860] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5860] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5860] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5860] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5860] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5860] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5860] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5860] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5860] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5860] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 90.597021][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 90.605836][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.615995][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 90.625018][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5860] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5860] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5860] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5860] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5860] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5860] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 90.669658][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 90.678784][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 90.686874][ T9] usb 1-1: Product: syz [ 90.691043][ T9] usb 1-1: Manufacturer: syz [ 90.722843][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 90.728277][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 90.734303][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 90.740218][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5860] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5860] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5860] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [ 90.943637][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 90.949362][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 90.955072][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 90.960741][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 90.966490][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 90.972168][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 90.977921][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 90.983769][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [pid 5860] exit_group(0) = ? [pid 5860] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5860, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 [ 90.989452][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 90.995171][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 91.000849][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 91.010466][ T1210] usb 1-1: USB disconnect, device number 24 umount2("./22", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./22/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./22/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./22/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./22") = 0 mkdir("./23", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5861 attached , child_tidptr=0x555580316650) = 5861 [pid 5861] set_robust_list(0x555580316660, 24) = 0 [pid 5861] chdir("./23") = 0 [pid 5861] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5861] setpgid(0, 0) = 0 [pid 5861] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5861] write(3, "1000", 4) = 4 [pid 5861] close(3) = 0 [pid 5861] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5861] write(1, "executing program\n", 18) = 18 [pid 5861] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5861] close(3) = 0 [pid 5861] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5861] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5861] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5861] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5861] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5861] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5861] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5861] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5861] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 91.753187][ T1210] usb 1-1: new high-speed USB device number 25 using dummy_hcd [pid 5861] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5861] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5861] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5861] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5861] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5861] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5861] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5861] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5861] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5861] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5861] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 91.926304][ T1210] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 91.935199][ T1210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.945488][ T1210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 91.954486][ T1210] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5861] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5861] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5861] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5861] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5861] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5861] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5861] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 92.011487][ T1210] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 92.020696][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 92.028901][ T1210] usb 1-1: Product: syz [ 92.033109][ T1210] usb 1-1: Manufacturer: syz [ 92.053576][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 92.058816][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 92.064980][ T1210] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 92.070904][ T1210] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5861] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5861] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5861] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5861] exit_group(0) = ? [ 92.264242][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 92.269961][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 92.275746][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 92.281589][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 92.287438][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 92.293114][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 92.298977][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 92.304654][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [pid 5861] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5861, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- umount2("./23", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 92.310623][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 92.316292][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 92.321852][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 92.332663][ T1210] usb 1-1: USB disconnect, device number 25 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./23/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./23/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./23/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./23") = 0 mkdir("./24", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5862 attached , child_tidptr=0x555580316650) = 5862 [pid 5862] set_robust_list(0x555580316660, 24) = 0 [pid 5862] chdir("./24") = 0 [pid 5862] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5862] setpgid(0, 0) = 0 [pid 5862] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5862] write(3, "1000", 4) = 4 [pid 5862] close(3) = 0 [pid 5862] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5862] write(1, "executing program\n", 18executing program ) = 18 [pid 5862] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5862] close(3) = 0 [pid 5862] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5862] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5862] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5862] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5862] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5862] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5862] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5862] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5862] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 93.043226][ T1210] usb 1-1: new high-speed USB device number 26 using dummy_hcd [pid 5862] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5862] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5862] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5862] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5862] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5862] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5862] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5862] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5862] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5862] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5862] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 93.206635][ T1210] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 93.215596][ T1210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.225719][ T1210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 93.234703][ T1210] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5862] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5862] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5862] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5862] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5862] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5862] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5862] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 93.299815][ T1210] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 93.309234][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 93.317445][ T1210] usb 1-1: Product: syz [ 93.321628][ T1210] usb 1-1: Manufacturer: syz [ 93.352529][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 93.357850][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 93.364024][ T1210] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 93.369935][ T1210] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5862] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5862] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5862] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5862] exit_group(0) = ? [ 93.562768][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 93.568471][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 93.574296][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 93.580124][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 93.585782][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 93.591642][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 93.597783][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 93.603455][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [pid 5862] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5862, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- umount2("./24", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 93.609196][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 93.614861][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 93.620690][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 93.626369][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 93.631928][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 93.642283][ T1210] usb 1-1: USB disconnect, device number 26 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./24/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./24/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./24/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./24") = 0 mkdir("./25", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5863 attached , child_tidptr=0x555580316650) = 5863 [pid 5863] set_robust_list(0x555580316660, 24) = 0 [pid 5863] chdir("./25") = 0 [pid 5863] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5863] setpgid(0, 0) = 0 [pid 5863] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5863] write(3, "1000", 4) = 4 [pid 5863] close(3) = 0 [pid 5863] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5863] write(1, "executing program\n", 18) = 18 [pid 5863] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5863] close(3) = 0 [pid 5863] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5863] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5863] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5863] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5863] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5863] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5863] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5863] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5863] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 94.383189][ T9] usb 1-1: new high-speed USB device number 27 using dummy_hcd [pid 5863] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5863] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5863] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5863] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5863] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5863] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5863] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5863] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5863] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5863] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5863] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 94.576881][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 94.585597][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.595757][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 94.604763][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5863] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5863] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5863] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5863] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5863] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5863] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5863] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 94.660650][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 94.669833][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 94.677921][ T9] usb 1-1: Product: syz [ 94.682202][ T9] usb 1-1: Manufacturer: syz [ 94.702132][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 94.707541][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 94.714315][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 94.720245][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5863] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5863] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5863] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [ 94.913044][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 94.918755][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 94.924458][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 94.930302][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 94.935959][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 94.941665][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 94.947331][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 94.953041][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [pid 5863] exit_group(0) = ? [pid 5863] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5863, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./25", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 94.958863][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 94.964547][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 94.970313][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 94.975987][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 94.986524][ T1210] usb 1-1: USB disconnect, device number 27 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./25/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./25/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./25/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./25") = 0 mkdir("./26", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5864 attached , child_tidptr=0x555580316650) = 5864 [pid 5864] set_robust_list(0x555580316660, 24) = 0 [pid 5864] chdir("./26") = 0 [pid 5864] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5864] setpgid(0, 0) = 0 [pid 5864] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5864] write(3, "1000", 4) = 4 [pid 5864] close(3) = 0 [pid 5864] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5864] write(1, "executing program\n", 18executing program ) = 18 [pid 5864] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5864] close(3) = 0 [pid 5864] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5864] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5864] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5864] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5864] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5864] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5864] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5864] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5864] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 95.713211][ T1210] usb 1-1: new high-speed USB device number 28 using dummy_hcd [pid 5864] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5864] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5864] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5864] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5864] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5864] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5864] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5864] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5864] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5864] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5864] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 95.906557][ T1210] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 95.915342][ T1210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.925612][ T1210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 95.934624][ T1210] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5864] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5864] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5864] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5864] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5864] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5864] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [ 95.991050][ T1210] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 96.000229][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 96.008469][ T1210] usb 1-1: Product: syz [ 96.012642][ T1210] usb 1-1: Manufacturer: syz [pid 5864] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 96.044610][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 96.049837][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 96.055998][ T1210] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 96.061908][ T1210] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5864] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5864] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5864] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5864] exit_group(0) = ? [pid 5864] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5864, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- umount2("./26", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./26/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./26/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./26/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 [ 96.255495][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 96.261196][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 96.266955][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 96.272622][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 96.278371][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 96.284037][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 96.289596][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 96.299815][ T9] usb 1-1: USB disconnect, device number 28 rmdir("./26") = 0 mkdir("./27", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5865 attached , child_tidptr=0x555580316650) = 5865 [pid 5865] set_robust_list(0x555580316660, 24) = 0 [pid 5865] chdir("./27") = 0 [pid 5865] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5865] setpgid(0, 0) = 0 [pid 5865] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5865] write(3, "1000", 4) = 4 [pid 5865] close(3) = 0 [pid 5865] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5865] write(1, "executing program\n", 18executing program ) = 18 [pid 5865] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5865] close(3) = 0 [pid 5865] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5865] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5865] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5865] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5865] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5865] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5865] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5865] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5865] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 96.863209][ T9] usb 1-1: new high-speed USB device number 29 using dummy_hcd [pid 5865] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5865] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5865] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5865] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5865] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5865] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5865] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5865] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5865] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5865] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5865] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5865] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5865] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 97.027545][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 97.036224][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.046345][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 97.055338][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5865] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5865] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5865] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5865] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5865] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 97.089796][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 97.099012][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 97.107070][ T9] usb 1-1: Product: syz [ 97.111236][ T9] usb 1-1: Manufacturer: syz [ 97.141319][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 97.146674][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 97.152845][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 97.158823][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5865] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5865] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5865] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5865] exit_group(0) = ? [ 97.343095][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 97.348803][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 97.354531][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 97.360396][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 97.366072][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 97.371784][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 97.377455][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 97.386358][ C0] cdc_wdm 1-1:1.0: Unexpected error -71 [pid 5865] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5865, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- umount2("./27", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./27/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./27/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./27/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./27") = 0 mkdir("./28", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5867 attached [pid 5867] set_robust_list(0x555580316660, 24 [pid 5832] <... clone resumed>, child_tidptr=0x555580316650) = 5867 [pid 5867] <... set_robust_list resumed>) = 0 [ 97.386670][ T1210] usb 1-1: USB disconnect, device number 29 [pid 5867] chdir("./28") = 0 [pid 5867] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5867] setpgid(0, 0) = 0 [pid 5867] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5867] write(3, "1000", 4) = 4 [pid 5867] close(3) = 0 [pid 5867] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5867] write(1, "executing program\n", 18) = 18 [pid 5867] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5867] close(3) = 0 [pid 5867] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5867] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5867] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5867] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5867] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5867] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5867] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5867] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5867] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 97.943201][ T1210] usb 1-1: new high-speed USB device number 30 using dummy_hcd [pid 5867] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5867] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5867] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5867] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5867] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5867] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5867] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5867] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5867] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5867] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 98.137196][ T1210] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 98.146132][ T1210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.156324][ T1210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 98.165338][ T1210] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5867] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5867] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5867] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5867] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5867] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5867] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5867] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5867] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 98.220243][ T1210] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 98.229538][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 98.237663][ T1210] usb 1-1: Product: syz [ 98.241831][ T1210] usb 1-1: Manufacturer: syz [ 98.273670][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 98.278911][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 98.285076][ T1210] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 98.290991][ T1210] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5867] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5867] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5867] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5867] exit_group(0) = ? [ 98.494025][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 98.499716][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 98.505538][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 98.511351][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 98.517008][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 98.522879][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 98.528854][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 98.534522][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [pid 5867] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5867, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- umount2("./28", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./28/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 98.540235][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 98.545895][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 98.551479][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 98.561624][ T9] usb 1-1: USB disconnect, device number 30 newfstatat(AT_FDCWD, "./28/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./28/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./28") = 0 mkdir("./29", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5869 attached , child_tidptr=0x555580316650) = 5869 [pid 5869] set_robust_list(0x555580316660, 24) = 0 [pid 5869] chdir("./29") = 0 [pid 5869] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5869] setpgid(0, 0) = 0 [pid 5869] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5869] write(3, "1000", 4) = 4 [pid 5869] close(3) = 0 [pid 5869] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5869] write(1, "executing program\n", 18) = 18 [pid 5869] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5869] close(3) = 0 [pid 5869] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5869] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5869] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5869] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5869] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5869] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5869] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5869] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5869] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 99.243198][ T1210] usb 1-1: new high-speed USB device number 31 using dummy_hcd [pid 5869] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5869] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5869] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5869] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5869] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5869] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5869] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5869] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5869] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5869] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5869] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5869] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 99.447245][ T1210] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 99.456082][ T1210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.466201][ T1210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 99.475193][ T1210] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5869] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5869] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5869] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5869] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5869] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5869] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 99.520599][ T1210] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 99.529802][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 99.537826][ T1210] usb 1-1: Product: syz [ 99.541990][ T1210] usb 1-1: Manufacturer: syz [ 99.574200][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 99.579448][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 99.585586][ T1210] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 99.591498][ T1210] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5869] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5869] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5869] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [ 99.785395][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 99.791104][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 99.796836][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 99.802660][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 99.808486][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 99.814319][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 99.820152][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 99.825821][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [pid 5869] exit_group(0) = ? [pid 5869] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5869, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- umount2("./29", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./29/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./29/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./29/binderfs") = 0 [ 99.831372][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 99.841614][ T1210] usb 1-1: USB disconnect, device number 31 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./29") = 0 mkdir("./30", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5874 attached , child_tidptr=0x555580316650) = 5874 [pid 5874] set_robust_list(0x555580316660, 24) = 0 [pid 5874] chdir("./30") = 0 [pid 5874] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5874] setpgid(0, 0) = 0 [pid 5874] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5874] write(3, "1000", 4) = 4 [pid 5874] close(3) = 0 [pid 5874] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5874] write(1, "executing program\n", 18executing program ) = 18 [pid 5874] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5874] close(3) = 0 [pid 5874] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5874] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5874] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5874] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5874] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5874] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5874] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5874] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5874] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 100.493180][ T1210] usb 1-1: new high-speed USB device number 32 using dummy_hcd [pid 5874] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5874] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5874] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5874] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5874] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5874] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5874] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5874] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5874] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5874] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 100.686687][ T1210] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 100.695449][ T1210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.705740][ T1210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 100.714791][ T1210] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5874] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5874] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5874] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5874] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5874] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5874] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5874] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5874] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 100.779003][ T1210] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 100.788321][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 100.796527][ T1210] usb 1-1: Product: syz [ 100.800692][ T1210] usb 1-1: Manufacturer: syz [ 100.833643][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 100.838885][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 100.844927][ T1210] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 100.850852][ T1210] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5874] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5874] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5874] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5874] exit_group(0) = ? [pid 5874] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5874, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./30", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./30/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./30/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./30/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./30") = 0 mkdir("./31", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5875 attached [pid 5875] set_robust_list(0x555580316660, 24 [pid 5832] <... clone resumed>, child_tidptr=0x555580316650) = 5875 [pid 5875] <... set_robust_list resumed>) = 0 [pid 5875] chdir("./31") = 0 [pid 5875] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5875] setpgid(0, 0) = 0 [pid 5875] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 101.054014][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 101.059693][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 101.065498][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 101.071314][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 101.076970][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 101.084095][ T9] usb 1-1: USB disconnect, device number 32 [pid 5875] write(3, "1000", 4) = 4 [pid 5875] close(3) = 0 executing program [pid 5875] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5875] write(1, "executing program\n", 18) = 18 [pid 5875] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5875] close(3) = 0 [pid 5875] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5875] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5875] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5875] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5875] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5875] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5875] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5875] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5875] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 101.613160][ T9] usb 1-1: new high-speed USB device number 33 using dummy_hcd [pid 5875] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5875] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5875] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5875] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5875] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5875] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5875] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5875] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5875] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5875] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5875] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5875] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5875] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 101.797027][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 101.805763][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.815932][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 101.824929][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5875] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5875] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5875] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5875] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5875] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 101.859313][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 101.868424][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 101.876486][ T9] usb 1-1: Product: syz [ 101.880653][ T9] usb 1-1: Manufacturer: syz [ 101.914660][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 101.919943][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 101.926130][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 101.932055][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5875] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5875] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5875] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5875] exit_group(0) = ? [pid 5875] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5875, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- umount2("./31", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./31/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./31/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./31/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./31") = 0 mkdir("./32", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5876 attached , child_tidptr=0x555580316650) = 5876 [ 102.125773][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 102.131482][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 102.137259][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 102.142925][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 102.148668][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 102.154584][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 102.160254][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 102.170063][ T9] usb 1-1: USB disconnect, device number 33 [pid 5876] set_robust_list(0x555580316660, 24) = 0 [pid 5876] chdir("./32") = 0 [pid 5876] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5876] setpgid(0, 0) = 0 [pid 5876] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5876] write(3, "1000", 4) = 4 [pid 5876] close(3) = 0 [pid 5876] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5876] write(1, "executing program\n", 18executing program ) = 18 [pid 5876] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5876] close(3) = 0 [pid 5876] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5876] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5876] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5876] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5876] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5876] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5876] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5876] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5876] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 102.783183][ T9] usb 1-1: new high-speed USB device number 34 using dummy_hcd [pid 5876] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5876] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5876] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5876] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5876] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5876] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5876] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5876] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5876] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5876] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5876] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5876] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 102.987154][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 102.995850][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 103.005969][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 103.014976][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5876] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5876] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5876] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5876] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5876] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5876] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 103.059428][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 103.068550][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 103.076599][ T9] usb 1-1: Product: syz [ 103.080775][ T9] usb 1-1: Manufacturer: syz [ 103.114201][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 103.119470][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 103.125437][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 103.131345][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5876] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5876] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5876] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5876] exit_group(0) = ? [pid 5876] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5876, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- umount2("./32", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 103.324825][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 103.330524][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 103.336233][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 103.342098][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 103.347792][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 103.353389][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 103.364609][ T9] usb 1-1: USB disconnect, device number 34 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./32/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./32/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./32/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./32") = 0 mkdir("./33", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5877 attached , child_tidptr=0x555580316650) = 5877 [pid 5877] set_robust_list(0x555580316660, 24) = 0 [pid 5877] chdir("./33") = 0 [pid 5877] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5877] setpgid(0, 0) = 0 [pid 5877] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5877] write(3, "1000", 4) = 4 [pid 5877] close(3) = 0 [pid 5877] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5877] write(1, "executing program\n", 18executing program ) = 18 [pid 5877] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5877] close(3) = 0 [pid 5877] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5877] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5877] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5877] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5877] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5877] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5877] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5877] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5877] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 104.083195][ T1210] usb 1-1: new high-speed USB device number 35 using dummy_hcd [pid 5877] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5877] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5877] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5877] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5877] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5877] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5877] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5877] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5877] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5877] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5877] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5877] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 104.276094][ T1210] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 104.284870][ T1210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.295131][ T1210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 104.304134][ T1210] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5877] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5877] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5877] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5877] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5877] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5877] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 104.361095][ T1210] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 104.370359][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 104.378388][ T1210] usb 1-1: Product: syz [ 104.382562][ T1210] usb 1-1: Manufacturer: syz [ 104.414680][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 104.419911][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 104.426003][ T1210] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 104.431914][ T1210] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5877] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5877] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5877] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5877] exit_group(0) = ? [pid 5877] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5877, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- umount2("./33", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 104.625448][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 104.631149][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 104.637020][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 104.642716][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 104.648582][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 104.654259][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 104.659825][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 104.669706][ T9] usb 1-1: USB disconnect, device number 35 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./33/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./33/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./33/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./33") = 0 mkdir("./34", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5878 attached , child_tidptr=0x555580316650) = 5878 [pid 5878] set_robust_list(0x555580316660, 24) = 0 [pid 5878] chdir("./34") = 0 [pid 5878] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5878] setpgid(0, 0) = 0 [pid 5878] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5878] write(3, "1000", 4) = 4 [pid 5878] close(3) = 0 [pid 5878] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5878] write(1, "executing program\n", 18executing program ) = 18 [pid 5878] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5878] close(3) = 0 [pid 5878] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5878] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5878] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5878] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5878] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5878] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5878] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5878] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5878] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 105.323243][ T9] usb 1-1: new high-speed USB device number 36 using dummy_hcd [pid 5878] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5878] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5878] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5878] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5878] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5878] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5878] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5878] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5878] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5878] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5878] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5878] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5878] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 105.507100][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 105.515811][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.525940][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 105.534961][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5878] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5878] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5878] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5878] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5878] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 105.570765][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 105.579926][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 105.587985][ T9] usb 1-1: Product: syz [ 105.592156][ T9] usb 1-1: Manufacturer: syz [ 105.632063][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 105.637481][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 105.644032][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 105.649946][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5878] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5878] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5878] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5878] exit_group(0) = ? [ 105.852703][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 105.858403][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 105.864111][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 105.869947][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 105.875619][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 105.881387][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 105.887085][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 105.892830][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [pid 5878] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5878, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- umount2("./34", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./34/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 105.898537][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 105.907902][ T1210] usb 1-1: USB disconnect, device number 36 newfstatat(AT_FDCWD, "./34/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./34/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./34") = 0 mkdir("./35", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5879 attached , child_tidptr=0x555580316650) = 5879 [pid 5879] set_robust_list(0x555580316660, 24) = 0 [pid 5879] chdir("./35") = 0 [pid 5879] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5879] setpgid(0, 0) = 0 [pid 5879] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5879] write(3, "1000", 4) = 4 [pid 5879] close(3) = 0 [pid 5879] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5879] write(1, "executing program\n", 18executing program ) = 18 [pid 5879] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5879] close(3) = 0 [pid 5879] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5879] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5879] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5879] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5879] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5879] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5879] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5879] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5879] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 106.563251][ T1210] usb 1-1: new high-speed USB device number 37 using dummy_hcd [pid 5879] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5879] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5879] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5879] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5879] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5879] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5879] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5879] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5879] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5879] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5879] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5879] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 106.786227][ T1210] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 106.795050][ T1210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.805382][ T1210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 106.814404][ T1210] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5879] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5879] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5879] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5879] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5879] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [ 106.860780][ T1210] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 106.869979][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 106.878202][ T1210] usb 1-1: Product: syz [ 106.882379][ T1210] usb 1-1: Manufacturer: syz [pid 5879] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 106.913006][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 106.918369][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 106.924500][ T1210] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 106.930417][ T1210] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5879] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5879] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5879] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5879] exit_group(0) = ? [pid 5879] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5879, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- umount2("./35", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 [ 107.133344][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 107.139051][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 107.144875][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 107.150823][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 107.156516][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 107.165556][ C1] cdc_wdm 1-1:1.0: Unexpected error -71 [ 107.166450][ T9] usb 1-1: USB disconnect, device number 37 umount2("./35/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./35/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./35/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./35") = 0 mkdir("./36", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5880 attached , child_tidptr=0x555580316650) = 5880 [pid 5880] set_robust_list(0x555580316660, 24) = 0 [pid 5880] chdir("./36") = 0 [pid 5880] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5880] setpgid(0, 0) = 0 [pid 5880] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5880] write(3, "1000", 4) = 4 [pid 5880] close(3) = 0 [pid 5880] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5880] write(1, "executing program\n", 18executing program ) = 18 [pid 5880] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5880] close(3) = 0 [pid 5880] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5880] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5880] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5880] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5880] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5880] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5880] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5880] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5880] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 107.843197][ T9] usb 1-1: new high-speed USB device number 38 using dummy_hcd [pid 5880] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5880] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5880] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5880] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5880] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5880] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5880] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5880] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5880] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5880] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5880] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5880] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 108.026487][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 108.035258][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.045373][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 108.054466][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5880] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5880] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5880] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5880] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5880] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5880] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 108.101819][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 108.110947][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 108.118971][ T9] usb 1-1: Product: syz [ 108.123188][ T9] usb 1-1: Manufacturer: syz [ 108.152838][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 108.158202][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 108.164800][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 108.170718][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5880] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5880] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5880] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5880] exit_group(0) = ? [ 108.364814][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 108.370518][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 108.376238][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 108.382110][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 108.387804][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 108.393571][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 108.399437][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 108.405551][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [pid 5880] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5880, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- umount2("./36", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 [ 108.411308][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 108.416995][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 108.429811][ T1210] usb 1-1: USB disconnect, device number 38 umount2("./36/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./36/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./36/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./36") = 0 mkdir("./37", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5881 attached , child_tidptr=0x555580316650) = 5881 [pid 5881] set_robust_list(0x555580316660, 24) = 0 [pid 5881] chdir("./37") = 0 [pid 5881] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5881] setpgid(0, 0) = 0 [pid 5881] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5881] write(3, "1000", 4) = 4 [pid 5881] close(3) = 0 [pid 5881] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5881] write(1, "executing program\n", 18executing program ) = 18 [pid 5881] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5881] close(3) = 0 [pid 5881] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5881] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5881] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5881] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5881] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5881] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5881] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5881] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5881] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 109.093238][ T1210] usb 1-1: new high-speed USB device number 39 using dummy_hcd [pid 5881] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5881] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5881] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5881] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5881] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5881] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5881] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5881] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5881] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5881] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5881] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5881] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 109.286448][ T1210] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 109.295400][ T1210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.305663][ T1210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 109.314695][ T1210] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5881] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5881] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5881] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5881] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5881] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5881] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 109.370915][ T1210] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 109.380128][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 109.388318][ T1210] usb 1-1: Product: syz [ 109.392588][ T1210] usb 1-1: Manufacturer: syz [ 109.412250][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 109.417576][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 109.423825][ T1210] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 109.429740][ T1210] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5881] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5881] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5881] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5881] exit_group(0) = ? [pid 5881] +++ exited with 0 +++ [ 109.622944][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 109.628660][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 109.634410][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 109.640081][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 109.645813][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 109.651480][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 109.657045][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5881, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./37", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 109.670586][ T9] usb 1-1: USB disconnect, device number 39 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./37/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./37/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./37/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./37") = 0 mkdir("./38", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5882 attached , child_tidptr=0x555580316650) = 5882 [pid 5882] set_robust_list(0x555580316660, 24) = 0 [pid 5882] chdir("./38") = 0 [pid 5882] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5882] setpgid(0, 0) = 0 [pid 5882] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5882] write(3, "1000", 4) = 4 [pid 5882] close(3) = 0 [pid 5882] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5882] write(1, "executing program\n", 18) = 18 [pid 5882] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5882] close(3) = 0 [pid 5882] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5882] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5882] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5882] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5882] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5882] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5882] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5882] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5882] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 110.383183][ T9] usb 1-1: new high-speed USB device number 40 using dummy_hcd [pid 5882] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5882] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5882] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5882] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5882] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5882] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5882] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5882] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5882] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5882] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5882] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5882] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 110.556979][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 110.565736][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.575901][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 110.584963][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5882] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5882] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5882] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5882] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5882] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5882] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 110.622006][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 110.631215][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 110.639304][ T9] usb 1-1: Product: syz [ 110.643689][ T9] usb 1-1: Manufacturer: syz [ 110.673470][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 110.678712][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 110.684915][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 110.690835][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5882] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5882] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5882] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5882] exit_group(0) = ? [ 110.884970][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 110.890659][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 110.896490][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 110.902150][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 110.908245][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 110.913928][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 110.919988][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 110.925655][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [pid 5882] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5882, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- umount2("./38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 110.931228][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 110.941174][ T1210] usb 1-1: USB disconnect, device number 40 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./38/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./38/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./38/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./38") = 0 mkdir("./39", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5883 attached , child_tidptr=0x555580316650) = 5883 [pid 5883] set_robust_list(0x555580316660, 24) = 0 [pid 5883] chdir("./39") = 0 [pid 5883] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5883] setpgid(0, 0) = 0 [pid 5883] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5883] write(3, "1000", 4) = 4 [pid 5883] close(3) = 0 [pid 5883] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5883] write(1, "executing program\n", 18executing program ) = 18 [pid 5883] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5883] close(3) = 0 [pid 5883] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5883] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5883] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5883] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5883] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5883] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5883] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5883] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5883] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 111.653178][ T9] usb 1-1: new high-speed USB device number 41 using dummy_hcd [pid 5883] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5883] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5883] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5883] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5883] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5883] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5883] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5883] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5883] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5883] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 111.847494][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 111.856234][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.866389][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 111.875422][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5883] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5883] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5883] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5883] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5883] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5883] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5883] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [ 111.941821][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 111.950966][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 111.959027][ T9] usb 1-1: Product: syz [ 111.963237][ T9] usb 1-1: Manufacturer: syz [pid 5883] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 112.002762][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 112.008093][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 112.014381][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 112.020306][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5883] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5883] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5883] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5883] exit_group(0) = ? [pid 5883] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5883, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- umount2("./39", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 112.226478][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 112.232184][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 112.237950][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 112.243880][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 112.249544][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 112.255105][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 112.264419][ C0] cdc_wdm 1-1:1.0: Unexpected error -71 [ 112.264878][ T1210] usb 1-1: USB disconnect, device number 41 openat(AT_FDCWD, "./39", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./39/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./39/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./39/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./39") = 0 mkdir("./40", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5884 attached , child_tidptr=0x555580316650) = 5884 [pid 5884] set_robust_list(0x555580316660, 24) = 0 [pid 5884] chdir("./40") = 0 [pid 5884] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5884] setpgid(0, 0) = 0 [pid 5884] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5884] write(3, "1000", 4) = 4 [pid 5884] close(3) = 0 executing program [pid 5884] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5884] write(1, "executing program\n", 18) = 18 [pid 5884] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5884] close(3) = 0 [pid 5884] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5884] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5884] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5884] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5884] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5884] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5884] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5884] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5884] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 113.003191][ T1210] usb 1-1: new high-speed USB device number 42 using dummy_hcd [pid 5884] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5884] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5884] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5884] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5884] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5884] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5884] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5884] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5884] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5884] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5884] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 113.177022][ T1210] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 113.185819][ T1210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.196129][ T1210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 113.205184][ T1210] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5884] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5884] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5884] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5884] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5884] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5884] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5884] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 113.261222][ T1210] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 113.270460][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 113.278629][ T1210] usb 1-1: Product: syz [ 113.282800][ T1210] usb 1-1: Manufacturer: syz [ 113.312384][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 113.317759][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 113.323795][ T1210] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 113.329739][ T1210] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5884] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5884] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5884] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5884] exit_group(0) = ? [ 113.532675][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 113.538374][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 113.544184][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 113.550002][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 113.555660][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 113.561484][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 113.567523][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 113.573345][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [pid 5884] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5884, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- umount2("./40", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./40", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 [ 113.579021][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 113.588878][ T9] usb 1-1: USB disconnect, device number 42 umount2("./40/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./40/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./40/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./40") = 0 mkdir("./41", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5885 attached , child_tidptr=0x555580316650) = 5885 [pid 5885] set_robust_list(0x555580316660, 24) = 0 [pid 5885] chdir("./41") = 0 [pid 5885] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5885] setpgid(0, 0) = 0 [pid 5885] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5885] write(3, "1000", 4) = 4 [pid 5885] close(3) = 0 [pid 5885] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 5885] write(1, "executing program\n", 18) = 18 [pid 5885] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5885] close(3) = 0 [pid 5885] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5885] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5885] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5885] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5885] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5885] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5885] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5885] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5885] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 114.323190][ T9] usb 1-1: new high-speed USB device number 43 using dummy_hcd [pid 5885] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5885] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5885] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5885] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5885] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5885] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5885] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5885] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5885] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5885] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5885] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5885] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5885] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 114.516542][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 114.525265][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.535377][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 114.544377][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5885] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5885] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5885] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5885] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5885] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 114.571581][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 114.580768][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 114.588812][ T9] usb 1-1: Product: syz [ 114.592999][ T9] usb 1-1: Manufacturer: syz [ 114.626684][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 114.631957][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 114.637958][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 114.644319][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5885] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5885] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5885] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5885] exit_group(0) = ? [ 114.827602][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 114.833327][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 114.839069][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 114.844760][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 114.850493][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 114.856205][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 114.861971][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 114.867643][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [pid 5885] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5885, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./41", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./41", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 114.873223][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 114.883526][ T1210] usb 1-1: USB disconnect, device number 43 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./41/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./41/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./41/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./41") = 0 mkdir("./42", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5886 attached , child_tidptr=0x555580316650) = 5886 [pid 5886] set_robust_list(0x555580316660, 24) = 0 [pid 5886] chdir("./42") = 0 [pid 5886] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5886] setpgid(0, 0) = 0 [pid 5886] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5886] write(3, "1000", 4) = 4 [pid 5886] close(3) = 0 [pid 5886] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5886] write(1, "executing program\n", 18executing program ) = 18 [pid 5886] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5886] close(3) = 0 [pid 5886] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5886] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5886] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5886] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5886] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5886] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5886] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5886] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5886] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 115.623182][ T1210] usb 1-1: new high-speed USB device number 44 using dummy_hcd [pid 5886] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5886] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5886] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5886] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5886] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5886] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5886] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5886] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5886] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5886] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5886] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5886] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5886] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 115.826077][ T1210] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 115.835048][ T1210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.845171][ T1210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 115.854165][ T1210] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5886] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5886] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5886] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5886] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5886] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 115.889168][ T1210] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 115.898473][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 115.906624][ T1210] usb 1-1: Product: syz [ 115.910803][ T1210] usb 1-1: Manufacturer: syz [ 115.943397][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 115.948638][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 115.954650][ T1210] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 115.960557][ T1210] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5886] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5886] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5886] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5886] exit_group(0) = ? [pid 5886] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5886, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- umount2("./42", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./42", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./42/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./42/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./42/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 [ 116.154032][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 116.159735][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 116.165445][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 116.171120][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 116.176833][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 116.182484][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 116.188066][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 116.198094][ T1210] usb 1-1: USB disconnect, device number 44 rmdir("./42") = 0 mkdir("./43", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5887 attached , child_tidptr=0x555580316650) = 5887 [pid 5887] set_robust_list(0x555580316660, 24) = 0 [pid 5887] chdir("./43") = 0 [pid 5887] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5887] setpgid(0, 0) = 0 [pid 5887] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5887] write(3, "1000", 4) = 4 [pid 5887] close(3) = 0 [pid 5887] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5887] write(1, "executing program\n", 18executing program ) = 18 [pid 5887] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5887] close(3) = 0 [pid 5887] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5887] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5887] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5887] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5887] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5887] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5887] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5887] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5887] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 116.783196][ T9] usb 1-1: new high-speed USB device number 45 using dummy_hcd [pid 5887] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5887] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5887] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5887] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5887] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5887] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5887] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5887] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5887] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5887] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5887] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 116.966707][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 116.975458][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.985590][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 116.994632][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5887] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5887] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5887] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5887] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5887] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5887] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5887] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 117.051071][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 117.060257][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 117.068296][ T9] usb 1-1: Product: syz [ 117.072472][ T9] usb 1-1: Manufacturer: syz [ 117.105792][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 117.111079][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 117.117327][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 117.123335][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5887] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5887] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5887] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5887] exit_group(0) = ? [ 117.316292][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 117.321987][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 117.327690][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 117.333358][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 117.339080][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 117.344941][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 117.350577][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 117.356329][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [pid 5887] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5887, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- umount2("./43", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./43", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./43/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./43/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./43/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 [ 117.362007][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 117.371367][ T1210] usb 1-1: USB disconnect, device number 45 rmdir("./43") = 0 mkdir("./44", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5888 attached , child_tidptr=0x555580316650) = 5888 [pid 5888] set_robust_list(0x555580316660, 24) = 0 [pid 5888] chdir("./44") = 0 [pid 5888] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5888] setpgid(0, 0) = 0 [pid 5888] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5888] write(3, "1000", 4) = 4 [pid 5888] close(3) = 0 [pid 5888] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5888] write(1, "executing program\n", 18executing program ) = 18 [pid 5888] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5888] close(3) = 0 [pid 5888] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5888] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5888] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5888] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5888] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5888] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5888] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5888] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5888] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 117.963180][ T1210] usb 1-1: new high-speed USB device number 46 using dummy_hcd [pid 5888] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5888] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5888] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5888] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5888] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5888] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5888] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5888] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5888] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5888] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5888] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 118.156364][ T1210] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 118.165229][ T1210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.175674][ T1210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 118.184766][ T1210] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5888] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5888] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5888] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5888] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5888] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5888] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [ 118.241230][ T1210] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 118.250435][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 118.258793][ T1210] usb 1-1: Product: syz [ 118.262978][ T1210] usb 1-1: Manufacturer: syz [pid 5888] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 118.295715][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 118.301154][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 118.307275][ T1210] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 118.313248][ T1210] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5888] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5888] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5888] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5888] exit_group(0) = ? [pid 5888] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5888, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- umount2("./44", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./44", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./44/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./44/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./44/binderfs") = 0 [ 118.516643][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 118.522421][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 118.528251][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 118.534157][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 118.539841][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 118.548873][ C1] cdc_wdm 1-1:1.0: Unexpected error -71 [ 118.551800][ T9] usb 1-1: USB disconnect, device number 46 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./44") = 0 mkdir("./45", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5889 attached , child_tidptr=0x555580316650) = 5889 [pid 5889] set_robust_list(0x555580316660, 24) = 0 [pid 5889] chdir("./45") = 0 [pid 5889] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5889] setpgid(0, 0) = 0 [pid 5889] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5889] write(3, "1000", 4) = 4 [pid 5889] close(3) = 0 [pid 5889] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5889] write(1, "executing program\n", 18) = 18 [pid 5889] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5889] close(3) = 0 [pid 5889] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5889] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5889] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5889] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5889] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5889] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5889] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5889] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5889] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 119.203219][ T1210] usb 1-1: new high-speed USB device number 47 using dummy_hcd [pid 5889] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5889] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5889] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5889] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5889] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5889] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5889] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5889] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5889] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5889] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5889] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5889] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5889] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 119.397535][ T1210] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 119.406356][ T1210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 119.416703][ T1210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 119.425725][ T1210] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5889] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5889] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5889] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5889] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5889] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 119.471589][ T1210] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 119.480862][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 119.489071][ T1210] usb 1-1: Product: syz [ 119.493273][ T1210] usb 1-1: Manufacturer: syz [ 119.526221][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 119.531440][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 119.537556][ T1210] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 119.543506][ T1210] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5889] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5889] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5889] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5889] exit_group(0) = ? [ 119.746954][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 119.752646][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 119.758509][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 119.764204][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 119.770087][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 119.775777][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 119.781609][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 119.787300][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [pid 5889] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5889, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- umount2("./45", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./45", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./45/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./45/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./45/binderfs") = 0 [ 119.792876][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 119.802888][ T9] usb 1-1: USB disconnect, device number 47 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./45") = 0 mkdir("./46", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5890 attached , child_tidptr=0x555580316650) = 5890 [pid 5890] set_robust_list(0x555580316660, 24) = 0 [pid 5890] chdir("./46") = 0 [pid 5890] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5890] setpgid(0, 0) = 0 [pid 5890] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5890] write(3, "1000", 4) = 4 [pid 5890] close(3) = 0 [pid 5890] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 5890] write(1, "executing program\n", 18) = 18 [pid 5890] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5890] close(3) = 0 [pid 5890] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5890] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5890] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5890] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5890] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5890] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5890] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5890] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5890] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 120.433236][ T1210] usb 1-1: new high-speed USB device number 48 using dummy_hcd [pid 5890] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5890] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5890] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5890] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5890] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5890] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5890] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5890] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5890] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5890] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5890] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5890] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 120.626503][ T1210] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 120.635422][ T1210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.645716][ T1210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 120.654746][ T1210] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5890] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5890] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5890] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5890] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5890] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5890] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 120.692122][ T1210] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 120.701396][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 120.709445][ T1210] usb 1-1: Product: syz [ 120.713642][ T1210] usb 1-1: Manufacturer: syz [ 120.766300][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 120.771519][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 120.777658][ T1210] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 120.783644][ T1210] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5890] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5890] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5890] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5890] exit_group(0) = ? [ 120.976715][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 120.982411][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 120.988278][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 120.994154][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 120.999977][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 121.005627][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 121.011500][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 121.017595][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [pid 5890] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5890, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- umount2("./46", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./46", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./46/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./46/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./46/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./46") = 0 mkdir("./47", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5891 attached [pid 5891] set_robust_list(0x555580316660, 24 [pid 5832] <... clone resumed>, child_tidptr=0x555580316650) = 5891 [pid 5891] <... set_robust_list resumed>) = 0 [ 121.023284][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 121.028855][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 121.039385][ T9] usb 1-1: USB disconnect, device number 48 [pid 5891] chdir("./47") = 0 [pid 5891] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5891] setpgid(0, 0) = 0 [pid 5891] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5891] write(3, "1000", 4) = 4 [pid 5891] close(3) = 0 [pid 5891] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5891] write(1, "executing program\n", 18executing program ) = 18 [pid 5891] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5891] close(3) = 0 [pid 5891] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5891] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5891] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5891] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5891] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5891] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5891] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5891] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5891] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 121.643199][ T9] usb 1-1: new high-speed USB device number 49 using dummy_hcd [pid 5891] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5891] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5891] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5891] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5891] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5891] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5891] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5891] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5891] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5891] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5891] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5891] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5891] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 121.846532][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 121.855244][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.865376][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 121.874390][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5891] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5891] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5891] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5891] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5891] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 121.912099][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 121.921261][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 121.929321][ T9] usb 1-1: Product: syz [ 121.933517][ T9] usb 1-1: Manufacturer: syz [ 121.965125][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 121.970369][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 121.976583][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 121.982499][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5891] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5891] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5891] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5891] exit_group(0) = ? [pid 5891] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5891, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- umount2("./47", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 122.176932][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 122.182629][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 122.188332][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 122.194014][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 122.199769][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 122.205440][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 122.211006][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 122.221146][ T1210] usb 1-1: USB disconnect, device number 49 openat(AT_FDCWD, "./47", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./47/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./47/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./47/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./47") = 0 mkdir("./48", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5892 attached , child_tidptr=0x555580316650) = 5892 [pid 5892] set_robust_list(0x555580316660, 24) = 0 [pid 5892] chdir("./48") = 0 [pid 5892] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5892] setpgid(0, 0) = 0 [pid 5892] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5892] write(3, "1000", 4) = 4 [pid 5892] close(3) = 0 [pid 5892] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5892] write(1, "executing program\n", 18executing program ) = 18 [pid 5892] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5892] close(3) = 0 [pid 5892] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5892] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5892] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5892] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5892] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5892] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5892] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5892] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5892] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 122.913178][ T1210] usb 1-1: new high-speed USB device number 50 using dummy_hcd [pid 5892] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5892] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5892] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5892] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5892] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5892] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5892] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5892] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5892] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5892] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5892] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5892] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 123.096724][ T1210] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 123.105636][ T1210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 123.115951][ T1210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 123.124958][ T1210] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5892] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5892] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5892] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5892] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5892] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5892] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 123.181073][ T1210] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 123.190345][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 123.198783][ T1210] usb 1-1: Product: syz [ 123.202948][ T1210] usb 1-1: Manufacturer: syz [ 123.246338][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 123.251590][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 123.257692][ T1210] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 123.263730][ T1210] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5892] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5892] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5892] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5892] exit_group(0) = ? [ 123.457076][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 123.462777][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 123.468485][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 123.474153][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 123.479853][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 123.485519][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 123.491249][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 123.496917][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [pid 5892] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5892, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- umount2("./48", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./48", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./48/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./48/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./48/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./48") = 0 mkdir("./49", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5893 attached , child_tidptr=0x555580316650) = 5893 [pid 5893] set_robust_list(0x555580316660, 24) = 0 [pid 5893] chdir("./49") = 0 [pid 5893] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 123.502625][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 123.508289][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 123.513849][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 123.523595][ T1210] usb 1-1: USB disconnect, device number 50 [pid 5893] setpgid(0, 0) = 0 [pid 5893] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5893] write(3, "1000", 4) = 4 [pid 5893] close(3) = 0 [pid 5893] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5893] write(1, "executing program\n", 18) = 18 [pid 5893] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5893] close(3) = 0 [pid 5893] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5893] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5893] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5893] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5893] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5893] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5893] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5893] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5893] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 124.083207][ T1210] usb 1-1: new high-speed USB device number 51 using dummy_hcd [pid 5893] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5893] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5893] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5893] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5893] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5893] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5893] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5893] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5893] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5893] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5893] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5893] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5893] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 124.296313][ T1210] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 124.305129][ T1210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.315254][ T1210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 124.324300][ T1210] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5893] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5893] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5893] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5893] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5893] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 124.369327][ T1210] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 124.378559][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 124.386749][ T1210] usb 1-1: Product: syz [ 124.390949][ T1210] usb 1-1: Manufacturer: syz [ 124.431601][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 124.436933][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 124.442752][ T1210] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 124.448742][ T1210] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5893] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5893] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5893] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5893] exit_group(0) = ? [pid 5893] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5893, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- umount2("./49", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./49", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./49/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./49/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./49/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./49") = 0 mkdir("./50", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5894 attached , child_tidptr=0x555580316650) = 5894 [pid 5894] set_robust_list(0x555580316660, 24) = 0 [ 124.632559][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 124.638249][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 124.643984][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 124.649921][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 124.655596][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 124.664487][ C1] cdc_wdm 1-1:1.0: Unexpected error -71 [ 124.670168][ T9] usb 1-1: USB disconnect, device number 51 [pid 5894] chdir("./50") = 0 [pid 5894] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5894] setpgid(0, 0) = 0 [pid 5894] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5894] write(3, "1000", 4) = 4 [pid 5894] close(3) = 0 [pid 5894] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5894] write(1, "executing program\n", 18executing program ) = 18 [pid 5894] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5894] close(3) = 0 [pid 5894] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5894] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5894] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5894] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5894] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5894] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5894] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5894] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5894] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 125.263186][ T9] usb 1-1: new high-speed USB device number 52 using dummy_hcd [pid 5894] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5894] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5894] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5894] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5894] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5894] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5894] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5894] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5894] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5894] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5894] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 125.446510][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 125.455223][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.465381][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 125.474384][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5894] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5894] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5894] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5894] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5894] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5894] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [ 125.531011][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 125.540154][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 125.548213][ T9] usb 1-1: Product: syz [ 125.552398][ T9] usb 1-1: Manufacturer: syz [pid 5894] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 125.596039][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 125.601322][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 125.607321][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 125.613287][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5894] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5894] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5894] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5894] exit_group(0) = ? [ 125.816716][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 125.822410][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 125.828118][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 125.833783][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 125.839516][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 125.845203][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 125.850944][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 125.856605][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [pid 5894] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5894, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./50", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./50", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 [ 125.862168][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 125.872119][ T1210] usb 1-1: USB disconnect, device number 52 umount2("./50/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./50/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./50/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./50") = 0 mkdir("./51", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5895 attached , child_tidptr=0x555580316650) = 5895 [pid 5895] set_robust_list(0x555580316660, 24) = 0 [pid 5895] chdir("./51") = 0 [pid 5895] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5895] setpgid(0, 0) = 0 [pid 5895] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5895] write(3, "1000", 4) = 4 [pid 5895] close(3) = 0 [pid 5895] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5895] write(1, "executing program\n", 18) = 18 [pid 5895] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5895] close(3) = 0 [pid 5895] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5895] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5895] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5895] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5895] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5895] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5895] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5895] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5895] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 126.573192][ T9] usb 1-1: new high-speed USB device number 53 using dummy_hcd [pid 5895] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5895] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5895] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5895] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5895] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5895] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5895] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5895] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5895] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5895] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5895] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5895] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5895] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 126.776695][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 126.785432][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 126.795546][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 126.804555][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5895] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5895] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5895] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5895] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [ 126.839712][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 126.848860][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 126.856914][ T9] usb 1-1: Product: syz [ 126.861089][ T9] usb 1-1: Manufacturer: syz [pid 5895] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 126.893438][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 126.898717][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 126.904892][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 126.910805][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5895] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5895] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5895] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5895] exit_group(0) = ? [ 127.114297][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 127.120007][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 127.125711][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 127.131371][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 127.137081][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 127.142755][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 127.148505][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 127.154178][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [pid 5895] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5895, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./51", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./51", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 127.159920][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 127.165609][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 127.171194][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 127.180835][ T1210] usb 1-1: USB disconnect, device number 53 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./51/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./51/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./51/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./51") = 0 mkdir("./52", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5896 attached , child_tidptr=0x555580316650) = 5896 [pid 5896] set_robust_list(0x555580316660, 24) = 0 [pid 5896] chdir("./52") = 0 [pid 5896] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5896] setpgid(0, 0) = 0 [pid 5896] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5896] write(3, "1000", 4) = 4 [pid 5896] close(3) = 0 [pid 5896] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5896] write(1, "executing program\n", 18) = 18 [pid 5896] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5896] close(3) = 0 [pid 5896] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5896] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5896] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5896] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5896] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5896] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5896] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5896] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5896] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 127.953201][ T9] usb 1-1: new high-speed USB device number 54 using dummy_hcd [pid 5896] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5896] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5896] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5896] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5896] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5896] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5896] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5896] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5896] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5896] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5896] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 128.136706][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 128.145432][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.155609][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 128.164733][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5896] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5896] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5896] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5896] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5896] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5896] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [ 128.219650][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 128.228846][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 128.236883][ T9] usb 1-1: Product: syz [ 128.241069][ T9] usb 1-1: Manufacturer: syz [pid 5896] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 128.274499][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 128.279773][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 128.285878][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 128.291804][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5896] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [ 128.495433][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 128.501146][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 128.506860][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 128.512544][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 128.518252][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 128.523917][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 128.529624][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 128.535295][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [pid 5896] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5896] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5896] exit_group(0) = ? [pid 5896] +++ exited with 0 +++ [ 128.541028][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 128.546696][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 128.552442][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 128.558127][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 128.563871][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 128.569716][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 128.575389][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 128.580947][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5896, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- umount2("./52", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 128.590982][ T9] usb 1-1: USB disconnect, device number 54 openat(AT_FDCWD, "./52", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./52/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./52/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./52/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./52") = 0 mkdir("./53", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5897 attached , child_tidptr=0x555580316650) = 5897 [pid 5897] set_robust_list(0x555580316660, 24) = 0 [pid 5897] chdir("./53") = 0 [pid 5897] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5897] setpgid(0, 0) = 0 [pid 5897] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5897] write(3, "1000", 4) = 4 [pid 5897] close(3) = 0 [pid 5897] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5897] write(1, "executing program\n", 18executing program ) = 18 [pid 5897] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5897] close(3) = 0 [pid 5897] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5897] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5897] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5897] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5897] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5897] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5897] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5897] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5897] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 129.293183][ T1210] usb 1-1: new high-speed USB device number 55 using dummy_hcd [pid 5897] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5897] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5897] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5897] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5897] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5897] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5897] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5897] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5897] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5897] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5897] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 129.486490][ T1210] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 129.495285][ T1210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.505571][ T1210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 129.514584][ T1210] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5897] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5897] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5897] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5897] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5897] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5897] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [ 129.571563][ T1210] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 129.580890][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 129.589196][ T1210] usb 1-1: Product: syz [ 129.593429][ T1210] usb 1-1: Manufacturer: syz [pid 5897] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 129.653510][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 129.658735][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 129.664830][ T1210] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 129.670750][ T1210] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5897] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5897] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5897] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5897] exit_group(0) = ? [ 129.873942][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 129.879636][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 129.885461][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 129.891280][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 129.896943][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 129.902844][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 129.908547][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 129.917564][ C1] cdc_wdm 1-1:1.0: Unexpected error -71 [pid 5897] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5897, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- umount2("./53", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 129.918359][ T9] usb 1-1: USB disconnect, device number 55 openat(AT_FDCWD, "./53", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./53/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./53/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./53/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./53") = 0 mkdir("./54", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5898 attached , child_tidptr=0x555580316650) = 5898 [pid 5898] set_robust_list(0x555580316660, 24) = 0 [pid 5898] chdir("./54") = 0 [pid 5898] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5898] setpgid(0, 0) = 0 [pid 5898] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5898] write(3, "1000", 4) = 4 [pid 5898] close(3) = 0 [pid 5898] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5898] write(1, "executing program\n", 18) = 18 [pid 5898] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5898] close(3) = 0 [pid 5898] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5898] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5898] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5898] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5898] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5898] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5898] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5898] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5898] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 130.653211][ T1210] usb 1-1: new high-speed USB device number 56 using dummy_hcd [pid 5898] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5898] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5898] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5898] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5898] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5898] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5898] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5898] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5898] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5898] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5898] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5898] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5898] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 130.827147][ T1210] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 130.836006][ T1210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 130.846127][ T1210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 130.855124][ T1210] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5898] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5898] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5898] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5898] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5898] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 130.900651][ T1210] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 130.909913][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 130.918127][ T1210] usb 1-1: Product: syz [ 130.922307][ T1210] usb 1-1: Manufacturer: syz [ 130.956699][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 130.961941][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 130.968113][ T1210] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 130.974095][ T1210] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5898] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5898] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5898] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5898] exit_group(0) = ? [pid 5898] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5898, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- umount2("./54", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 131.176916][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 131.182613][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 131.188466][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 131.194152][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 131.200157][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 131.205819][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 131.211376][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 131.221102][ T1210] usb 1-1: USB disconnect, device number 56 openat(AT_FDCWD, "./54", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./54/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./54/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./54/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./54") = 0 mkdir("./55", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5899 attached , child_tidptr=0x555580316650) = 5899 [pid 5899] set_robust_list(0x555580316660, 24) = 0 [pid 5899] chdir("./55") = 0 [pid 5899] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5899] setpgid(0, 0) = 0 [pid 5899] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5899] write(3, "1000", 4) = 4 [pid 5899] close(3) = 0 [pid 5899] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5899] write(1, "executing program\n", 18executing program ) = 18 [pid 5899] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5899] close(3) = 0 [pid 5899] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5899] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5899] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5899] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5899] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5899] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5899] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5899] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5899] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 131.933186][ T9] usb 1-1: new high-speed USB device number 57 using dummy_hcd [pid 5899] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5899] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5899] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5899] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5899] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5899] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5899] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5899] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5899] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5899] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5899] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5899] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 132.126789][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 132.135557][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.145745][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 132.154794][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5899] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5899] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5899] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5899] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5899] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [ 132.201914][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 132.211147][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 132.219210][ T9] usb 1-1: Product: syz [ 132.223452][ T9] usb 1-1: Manufacturer: syz [pid 5899] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 132.253566][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 132.258843][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 132.264946][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 132.270870][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5899] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5899] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5899] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5899] exit_group(0) = ? [ 132.475078][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 132.480802][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 132.486949][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 132.492629][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 132.498520][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 132.504212][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 132.510011][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 132.515689][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [pid 5899] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5899, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- umount2("./55", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./55", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./55/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./55/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 132.521533][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 132.527205][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 132.532778][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 132.542759][ T9] usb 1-1: USB disconnect, device number 57 unlink("./55/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./55") = 0 mkdir("./56", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5900 attached , child_tidptr=0x555580316650) = 5900 [pid 5900] set_robust_list(0x555580316660, 24) = 0 [pid 5900] chdir("./56") = 0 [pid 5900] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5900] setpgid(0, 0) = 0 [pid 5900] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5900] write(3, "1000", 4) = 4 [pid 5900] close(3) = 0 [pid 5900] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5900] write(1, "executing program\n", 18executing program ) = 18 [pid 5900] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5900] close(3) = 0 [pid 5900] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5900] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5900] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5900] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5900] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5900] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 133.115137][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.121445][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [pid 5900] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5900] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5900] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 133.223196][ T1210] usb 1-1: new high-speed USB device number 58 using dummy_hcd [pid 5900] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5900] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5900] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5900] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5900] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5900] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5900] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5900] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5900] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5900] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5900] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 133.406379][ T1210] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 133.415335][ T1210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.425729][ T1210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 133.434789][ T1210] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5900] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5900] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5900] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5900] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5900] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5900] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5900] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 133.491502][ T1210] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 133.500814][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 133.509012][ T1210] usb 1-1: Product: syz [ 133.513207][ T1210] usb 1-1: Manufacturer: syz [ 133.536215][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 133.541456][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 133.547604][ T1210] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 133.553557][ T1210] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5900] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5900] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5900] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5900] exit_group(0) = ? [ 133.757001][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 133.762704][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 133.768443][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 133.774110][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 133.779857][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 133.785526][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 133.791096][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [pid 5900] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5900, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./56", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./56", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 [ 133.803154][ T9] usb 1-1: USB disconnect, device number 58 umount2("./56/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./56/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./56/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./56") = 0 mkdir("./57", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5901 attached , child_tidptr=0x555580316650) = 5901 [pid 5901] set_robust_list(0x555580316660, 24) = 0 [pid 5901] chdir("./57") = 0 [pid 5901] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5901] setpgid(0, 0) = 0 [pid 5901] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5901] write(3, "1000", 4) = 4 [pid 5901] close(3) = 0 [pid 5901] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5901] write(1, "executing program\n", 18executing program ) = 18 [pid 5901] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5901] close(3) = 0 [pid 5901] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5901] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5901] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5901] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5901] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5901] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5901] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5901] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5901] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 134.523202][ T9] usb 1-1: new high-speed USB device number 59 using dummy_hcd [pid 5901] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5901] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5901] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5901] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5901] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5901] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5901] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5901] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5901] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5901] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5901] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5901] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5901] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 134.716489][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 134.725259][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 134.735402][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 134.744404][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5901] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5901] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5901] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5901] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5901] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 134.788876][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 134.797999][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 134.806018][ T9] usb 1-1: Product: syz [ 134.810195][ T9] usb 1-1: Manufacturer: syz [ 134.854092][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 134.859363][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 134.865463][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 134.871375][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5901] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5901] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5901] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5901] exit_group(0) = ? [pid 5901] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5901, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- umount2("./57", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./57", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./57/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./57/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./57/binderfs") = 0 [ 135.074561][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 135.080265][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 135.086084][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 135.091778][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 135.097498][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 135.103187][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 135.108772][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 135.118710][ T9] usb 1-1: USB disconnect, device number 59 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./57") = 0 mkdir("./58", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5902 attached , child_tidptr=0x555580316650) = 5902 [pid 5902] set_robust_list(0x555580316660, 24) = 0 [pid 5902] chdir("./58") = 0 [pid 5902] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5902] setpgid(0, 0) = 0 [pid 5902] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5902] write(3, "1000", 4) = 4 [pid 5902] close(3) = 0 [pid 5902] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5902] write(1, "executing program\n", 18) = 18 [pid 5902] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5902] close(3) = 0 [pid 5902] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5902] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5902] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5902] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5902] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5902] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5902] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5902] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5902] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 135.703207][ T1210] usb 1-1: new high-speed USB device number 60 using dummy_hcd [pid 5902] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5902] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5902] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5902] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5902] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5902] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5902] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5902] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5902] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5902] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5902] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5902] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5902] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 135.896608][ T1210] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 135.905437][ T1210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 135.915714][ T1210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 135.924724][ T1210] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5902] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5902] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5902] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5902] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5902] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 135.970891][ T1210] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 135.980287][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 135.988479][ T1210] usb 1-1: Product: syz [ 135.992654][ T1210] usb 1-1: Manufacturer: syz [ 136.026002][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 136.031269][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 136.037343][ T1210] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 136.043312][ T1210] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5902] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5902] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5902] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [ 136.246202][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 136.251895][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 136.257704][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 136.263560][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 136.269387][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 136.275060][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 136.280900][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 136.286749][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [pid 5902] exit_group(0) = ? [pid 5902] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5902, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 [ 136.292436][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 136.298243][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 136.303936][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 136.314180][ T9] usb 1-1: USB disconnect, device number 60 umount2("./58", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./58", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./58/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./58/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./58/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./58") = 0 mkdir("./59", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5903 attached , child_tidptr=0x555580316650) = 5903 [pid 5903] set_robust_list(0x555580316660, 24) = 0 [pid 5903] chdir("./59") = 0 [pid 5903] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5903] setpgid(0, 0) = 0 [pid 5903] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5903] write(3, "1000", 4) = 4 [pid 5903] close(3) = 0 [pid 5903] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5903] write(1, "executing program\n", 18executing program ) = 18 [pid 5903] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5903] close(3) = 0 [pid 5903] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5903] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5903] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5903] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5903] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5903] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5903] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5903] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5903] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 137.093224][ T9] usb 1-1: new high-speed USB device number 61 using dummy_hcd [pid 5903] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5903] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5903] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5903] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5903] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5903] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5903] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5903] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5903] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5903] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5903] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5903] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 137.276678][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 137.285408][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 137.295521][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 137.304527][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5903] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5903] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5903] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5903] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5903] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5903] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 137.352131][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 137.361743][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 137.369846][ T9] usb 1-1: Product: syz [ 137.374062][ T9] usb 1-1: Manufacturer: syz [ 137.417989][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 137.423361][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 137.429165][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 137.435280][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5903] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5903] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5903] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5903] exit_group(0) = ? [ 137.628359][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 137.634062][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 137.639763][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 137.645426][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 137.651125][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 137.656988][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 137.662663][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 137.668240][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [pid 5903] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5903, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./59", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 137.677661][ T1210] usb 1-1: USB disconnect, device number 61 openat(AT_FDCWD, "./59", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./59/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./59/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./59/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./59") = 0 mkdir("./60", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5904 attached , child_tidptr=0x555580316650) = 5904 [pid 5904] set_robust_list(0x555580316660, 24) = 0 [pid 5904] chdir("./60") = 0 [pid 5904] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5904] setpgid(0, 0) = 0 [pid 5904] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5904] write(3, "1000", 4) = 4 [pid 5904] close(3) = 0 [pid 5904] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5904] write(1, "executing program\n", 18executing program ) = 18 [pid 5904] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5904] close(3) = 0 [pid 5904] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5904] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5904] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5904] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5904] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5904] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5904] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5904] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5904] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 138.403166][ T1210] usb 1-1: new high-speed USB device number 62 using dummy_hcd [pid 5904] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5904] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5904] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5904] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5904] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5904] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5904] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5904] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5904] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5904] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5904] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5904] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5904] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 138.586649][ T1210] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 138.595522][ T1210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 138.605644][ T1210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 138.614643][ T1210] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5904] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5904] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5904] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5904] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [ 138.661761][ T1210] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 138.670888][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 138.678914][ T1210] usb 1-1: Product: syz [ 138.683153][ T1210] usb 1-1: Manufacturer: syz [pid 5904] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 138.735274][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 138.740522][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 138.746744][ T1210] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 138.752664][ T1210] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5904] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5904] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5904] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5904] exit_group(0) = ? [pid 5904] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5904, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- umount2("./60", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./60", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./60/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./60/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 138.956571][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 138.962287][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 138.968010][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 138.973671][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 138.979407][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 138.985088][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 138.994471][ T1210] usb 1-1: USB disconnect, device number 62 unlink("./60/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./60") = 0 mkdir("./61", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5905 attached , child_tidptr=0x555580316650) = 5905 [pid 5905] set_robust_list(0x555580316660, 24) = 0 [pid 5905] chdir("./61") = 0 [pid 5905] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5905] setpgid(0, 0) = 0 [pid 5905] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5905] write(3, "1000", 4) = 4 [pid 5905] close(3) = 0 [pid 5905] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5905] write(1, "executing program\n", 18) = 18 [pid 5905] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5905] close(3) = 0 [pid 5905] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5905] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5905] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5905] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5905] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5905] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5905] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5905] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5905] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 139.603180][ T1210] usb 1-1: new high-speed USB device number 63 using dummy_hcd [pid 5905] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5905] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5905] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5905] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5905] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5905] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5905] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5905] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5905] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5905] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5905] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5905] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5905] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 139.777018][ T1210] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 139.785809][ T1210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.796091][ T1210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 139.805086][ T1210] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5905] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5905] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5905] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5905] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [ 139.850821][ T1210] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 139.860105][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 139.868348][ T1210] usb 1-1: Product: syz [ 139.872545][ T1210] usb 1-1: Manufacturer: syz [pid 5905] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 139.902085][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 139.907398][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 139.913466][ T1210] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 139.919378][ T1210] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5905] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5905] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5905] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5905] exit_group(0) = ? [pid 5905] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5905, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- umount2("./61", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./61", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./61/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./61/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 140.113148][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 140.118849][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 140.124583][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 140.130261][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 140.135999][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 140.141671][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 140.147249][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 140.156654][ T1210] usb 1-1: USB disconnect, device number 63 unlink("./61/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./61") = 0 mkdir("./62", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5906 attached , child_tidptr=0x555580316650) = 5906 [pid 5906] set_robust_list(0x555580316660, 24) = 0 [pid 5906] chdir("./62") = 0 [pid 5906] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5906] setpgid(0, 0) = 0 [pid 5906] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5906] write(3, "1000", 4) = 4 [pid 5906] close(3) = 0 [pid 5906] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5906] write(1, "executing program\n", 18executing program ) = 18 [pid 5906] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5906] close(3) = 0 [pid 5906] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5906] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5906] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5906] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5906] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5906] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5906] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5906] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5906] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 140.813181][ T9] usb 1-1: new high-speed USB device number 64 using dummy_hcd [pid 5906] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5906] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5906] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5906] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5906] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5906] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5906] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5906] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5906] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5906] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5906] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 141.006742][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 141.015475][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.025590][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 141.034597][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5906] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5906] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5906] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5906] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5906] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5906] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5906] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 141.091723][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 141.100883][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 141.108919][ T9] usb 1-1: Product: syz [ 141.113130][ T9] usb 1-1: Manufacturer: syz [ 141.136949][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 141.142208][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 141.148330][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 141.154291][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5906] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5906] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5906] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5906] exit_group(0) = ? [ 141.357927][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 141.363634][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 141.369338][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 141.375172][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 141.380829][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 141.386529][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 141.392354][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 141.398028][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [pid 5906] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5906, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- umount2("./62", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./62", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./62/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./62/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./62/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./62") = 0 mkdir("./63", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5907 attached , child_tidptr=0x555580316650) = 5907 [pid 5907] set_robust_list(0x555580316660, 24) = 0 [ 141.403769][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 141.409446][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 141.418750][ T1210] usb 1-1: USB disconnect, device number 64 [pid 5907] chdir("./63") = 0 [pid 5907] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5907] setpgid(0, 0) = 0 [pid 5907] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5907] write(3, "1000", 4) = 4 [pid 5907] close(3) = 0 [pid 5907] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5907] write(1, "executing program\n", 18executing program ) = 18 [pid 5907] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5907] close(3) = 0 [pid 5907] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5907] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5907] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5907] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5907] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5907] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5907] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5907] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5907] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 142.013181][ T1210] usb 1-1: new high-speed USB device number 65 using dummy_hcd [pid 5907] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5907] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5907] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5907] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5907] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5907] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5907] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5907] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5907] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5907] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5907] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5907] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 142.216581][ T1210] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 142.225479][ T1210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 142.235791][ T1210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 142.244789][ T1210] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5907] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5907] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5907] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5907] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5907] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5907] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 142.289329][ T1210] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 142.298580][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 142.306830][ T1210] usb 1-1: Product: syz [ 142.311023][ T1210] usb 1-1: Manufacturer: syz [ 142.344083][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 142.349297][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 142.355374][ T1210] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 142.361285][ T1210] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5907] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [ 142.545363][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 142.551056][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 142.556763][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 142.562426][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 142.568151][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 142.573813][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 142.579509][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 142.585165][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [pid 5907] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5907] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5907] exit_group(0) = ? [ 142.590896][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 142.596552][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 142.602284][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 142.607947][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 142.613681][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 142.619340][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 142.625035][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 142.630686][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 142.636405][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [pid 5907] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5907, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- umount2("./63", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./63", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./63/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./63/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 142.642067][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 142.648043][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 142.653708][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 142.663836][ T9] usb 1-1: USB disconnect, device number 65 unlink("./63/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./63") = 0 mkdir("./64", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5908 attached , child_tidptr=0x555580316650) = 5908 [pid 5908] set_robust_list(0x555580316660, 24) = 0 [pid 5908] chdir("./64") = 0 [pid 5908] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5908] setpgid(0, 0) = 0 [pid 5908] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5908] write(3, "1000", 4) = 4 [pid 5908] close(3) = 0 [pid 5908] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5908] write(1, "executing program\n", 18) = 18 [pid 5908] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5908] close(3) = 0 [pid 5908] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5908] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5908] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5908] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5908] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5908] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5908] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5908] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5908] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 143.293198][ T9] usb 1-1: new high-speed USB device number 66 using dummy_hcd [pid 5908] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5908] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5908] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5908] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5908] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5908] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5908] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5908] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5908] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5908] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5908] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5908] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5908] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 143.466607][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 143.475337][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 143.485467][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 143.494546][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5908] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5908] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5908] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5908] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [ 143.531719][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 143.540865][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 143.548992][ T9] usb 1-1: Product: syz [ 143.553205][ T9] usb 1-1: Manufacturer: syz [pid 5908] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 143.591325][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 143.596709][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 143.602602][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 143.608594][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5908] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5908] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5908] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5908] exit_group(0) = ? [pid 5908] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5908, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [ 143.812595][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 143.818279][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 143.823988][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 143.829659][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 143.835786][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 143.841458][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 143.847016][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 143.856583][ T9] usb 1-1: USB disconnect, device number 66 umount2("./64", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./64", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./64/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./64/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./64/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./64") = 0 mkdir("./65", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5909 attached , child_tidptr=0x555580316650) = 5909 [pid 5909] set_robust_list(0x555580316660, 24) = 0 [pid 5909] chdir("./65") = 0 [pid 5909] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5909] setpgid(0, 0) = 0 [pid 5909] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5909] write(3, "1000", 4) = 4 [pid 5909] close(3) = 0 [pid 5909] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5909] write(1, "executing program\n", 18) = 18 [pid 5909] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5909] close(3) = 0 [pid 5909] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5909] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5909] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5909] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5909] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5909] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5909] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5909] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5909] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 144.533166][ T1210] usb 1-1: new high-speed USB device number 67 using dummy_hcd [pid 5909] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5909] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5909] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5909] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5909] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5909] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5909] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5909] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5909] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5909] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5909] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5909] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5909] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 144.716889][ T1210] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 144.725745][ T1210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 144.736007][ T1210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 144.745003][ T1210] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5909] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5909] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5909] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5909] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [ 144.791923][ T1210] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 144.801313][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 144.809352][ T1210] usb 1-1: Product: syz [ 144.813582][ T1210] usb 1-1: Manufacturer: syz [pid 5909] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 144.844905][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 144.850140][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 144.856362][ T1210] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 144.862296][ T1210] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5909] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5909] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5909] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5909] exit_group(0) = ? [pid 5909] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5909, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [ 145.065796][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 145.071493][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 145.077195][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 145.082866][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 145.088632][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 145.094330][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 145.099887][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./65", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./65", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./65/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./65/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./65/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 [ 145.111173][ T9] usb 1-1: USB disconnect, device number 67 rmdir("./65") = 0 mkdir("./66", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5910 attached , child_tidptr=0x555580316650) = 5910 [pid 5910] set_robust_list(0x555580316660, 24) = 0 [pid 5910] chdir("./66") = 0 [pid 5910] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5910] setpgid(0, 0) = 0 [pid 5910] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5910] write(3, "1000", 4) = 4 [pid 5910] close(3) = 0 [pid 5910] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5910] write(1, "executing program\n", 18) = 18 [pid 5910] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5910] close(3) = 0 [pid 5910] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5910] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5910] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5910] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5910] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5910] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5910] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5910] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5910] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 145.703180][ T9] usb 1-1: new high-speed USB device number 68 using dummy_hcd [pid 5910] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5910] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5910] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5910] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5910] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5910] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5910] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5910] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5910] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5910] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5910] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 145.896907][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 145.905611][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.915748][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 145.924745][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5910] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5910] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5910] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5910] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5910] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5910] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [ 145.949027][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 145.958232][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 145.966289][ T9] usb 1-1: Product: syz [ 145.970456][ T9] usb 1-1: Manufacturer: syz [ 145.990534][ T9] cdc_wdm 1-1:1.0: skipping garbage [pid 5910] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 145.995875][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 146.001688][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 146.007694][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5910] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5910] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5910] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5910] exit_group(0) = ? [pid 5910] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5910, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- umount2("./66", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./66", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 [ 146.211903][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 146.217586][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 146.223299][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 146.228984][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 146.234981][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 146.240664][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 146.250345][ T9] usb 1-1: USB disconnect, device number 68 umount2("./66/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./66/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./66/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./66") = 0 mkdir("./67", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5911 attached , child_tidptr=0x555580316650) = 5911 [pid 5911] set_robust_list(0x555580316660, 24) = 0 [pid 5911] chdir("./67") = 0 [pid 5911] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5911] setpgid(0, 0) = 0 [pid 5911] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5911] write(3, "1000", 4) = 4 [pid 5911] close(3) = 0 [pid 5911] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5911] write(1, "executing program\n", 18executing program ) = 18 [pid 5911] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5911] close(3) = 0 [pid 5911] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5911] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5911] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5911] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5911] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5911] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5911] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5911] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5911] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 146.953209][ T1210] usb 1-1: new high-speed USB device number 69 using dummy_hcd [pid 5911] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5911] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5911] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5911] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5911] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5911] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5911] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5911] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5911] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5911] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5911] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5911] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 147.136770][ T1210] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 147.145553][ T1210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 147.155798][ T1210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 147.164791][ T1210] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5911] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5911] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5911] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5911] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5911] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5911] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 147.210244][ T1210] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 147.219495][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 147.227524][ T1210] usb 1-1: Product: syz [ 147.231687][ T1210] usb 1-1: Manufacturer: syz [ 147.264344][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 147.269560][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 147.275656][ T1210] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 147.281565][ T1210] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5911] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5911] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5911] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5911] exit_group(0) = ? [pid 5911] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5911, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- umount2("./67", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./67", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 147.474996][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 147.480680][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 147.486475][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 147.492455][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 147.498130][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 147.507150][ C1] cdc_wdm 1-1:1.0: Unexpected error -71 [ 147.507349][ T9] usb 1-1: USB disconnect, device number 69 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./67/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./67/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./67/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./67") = 0 mkdir("./68", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5912 attached , child_tidptr=0x555580316650) = 5912 [pid 5912] set_robust_list(0x555580316660, 24) = 0 [pid 5912] chdir("./68") = 0 [pid 5912] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5912] setpgid(0, 0) = 0 [pid 5912] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5912] write(3, "1000", 4) = 4 [pid 5912] close(3) = 0 [pid 5912] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5912] write(1, "executing program\n", 18executing program ) = 18 [pid 5912] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5912] close(3) = 0 [pid 5912] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5912] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5912] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5912] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5912] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5912] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5912] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5912] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5912] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 148.253188][ T9] usb 1-1: new high-speed USB device number 70 using dummy_hcd [pid 5912] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5912] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5912] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5912] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5912] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5912] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5912] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5912] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5912] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5912] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5912] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5912] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5912] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 148.446590][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 148.455335][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 148.465710][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 148.474810][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5912] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5912] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5912] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5912] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [ 148.519190][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 148.528294][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 148.536332][ T9] usb 1-1: Product: syz [ 148.540493][ T9] usb 1-1: Manufacturer: syz [pid 5912] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 148.570087][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 148.575666][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 148.582449][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 148.588446][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5912] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5912] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5912] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5912] exit_group(0) = ? [ 148.783554][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 148.789266][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 148.795078][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 148.800904][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 148.806555][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 148.812252][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 148.817950][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 148.823675][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [pid 5912] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5912, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./68", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./68", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 148.829332][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 148.834893][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 148.845109][ T9] usb 1-1: USB disconnect, device number 70 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./68/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./68/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./68/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./68") = 0 mkdir("./69", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5913 attached , child_tidptr=0x555580316650) = 5913 [pid 5913] set_robust_list(0x555580316660, 24) = 0 [pid 5913] chdir("./69") = 0 [pid 5913] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5913] setpgid(0, 0) = 0 [pid 5913] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5913] write(3, "1000", 4) = 4 [pid 5913] close(3) = 0 [pid 5913] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5913] write(1, "executing program\n", 18executing program ) = 18 [pid 5913] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5913] close(3) = 0 [pid 5913] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5913] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5913] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5913] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5913] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5913] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5913] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5913] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5913] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 149.583175][ T9] usb 1-1: new high-speed USB device number 71 using dummy_hcd [pid 5913] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5913] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5913] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5913] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5913] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5913] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5913] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5913] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5913] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5913] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5913] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5913] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5913] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 149.766737][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 149.775510][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 149.785631][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 149.794714][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5913] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5913] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5913] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5913] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5913] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 149.841403][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 149.850546][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 149.858603][ T9] usb 1-1: Product: syz [ 149.862777][ T9] usb 1-1: Manufacturer: syz [ 149.896221][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 149.901508][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 149.907545][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 149.913538][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5913] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5913] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [ 150.117048][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 150.122742][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 150.128452][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 150.134315][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 150.140152][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 150.145808][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 150.151522][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 150.157405][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [pid 5913] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5913] exit_group(0) = ? [pid 5913] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5913, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- umount2("./69", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./69", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./69/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./69/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./69/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./69") = 0 mkdir("./70", 0777) = 0 [ 150.163080][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 150.172674][ T1210] usb 1-1: USB disconnect, device number 71 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555580316650) = 5914 ./strace-static-x86_64: Process 5914 attached [pid 5914] set_robust_list(0x555580316660, 24) = 0 [pid 5914] chdir("./70") = 0 [pid 5914] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5914] setpgid(0, 0) = 0 [pid 5914] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5914] write(3, "1000", 4) = 4 [pid 5914] close(3) = 0 [pid 5914] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5914] write(1, "executing program\n", 18) = 18 [pid 5914] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5914] close(3) = 0 [pid 5914] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5914] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5914] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5914] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5914] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5914] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5914] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5914] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5914] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 150.763183][ T1210] usb 1-1: new high-speed USB device number 72 using dummy_hcd [pid 5914] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5914] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5914] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5914] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5914] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5914] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5914] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5914] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5914] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5914] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5914] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 150.946152][ T1210] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 150.955024][ T1210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 150.965286][ T1210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 150.974279][ T1210] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5914] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5914] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5914] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5914] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5914] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5914] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5914] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 151.030881][ T1210] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 151.040019][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 151.048228][ T1210] usb 1-1: Product: syz [ 151.052400][ T1210] usb 1-1: Manufacturer: syz [ 151.072408][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 151.077729][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 151.083788][ T1210] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 151.089701][ T1210] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5914] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5914] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5914] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5914] exit_group(0) = ? [ 151.292688][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 151.298394][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 151.304204][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 151.310044][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 151.315705][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 151.321577][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 151.327581][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 151.333424][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [pid 5914] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5914, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- umount2("./70", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./70", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./70/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./70/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./70/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./70") = 0 mkdir("./71", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5915 attached , child_tidptr=0x555580316650) = 5915 [pid 5915] set_robust_list(0x555580316660, 24) = 0 [ 151.339094][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 151.350500][ T9] usb 1-1: USB disconnect, device number 72 [pid 5915] chdir("./71") = 0 [pid 5915] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5915] setpgid(0, 0) = 0 [pid 5915] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5915] write(3, "1000", 4) = 4 [pid 5915] close(3) = 0 [pid 5915] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5915] write(1, "executing program\n", 18) = 18 [pid 5915] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5915] close(3) = 0 [pid 5915] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5915] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5915] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5915] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5915] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5915] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5915] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5915] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5915] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 151.913198][ T1210] usb 1-1: new high-speed USB device number 73 using dummy_hcd [pid 5915] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5915] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5915] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5915] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5915] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5915] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5915] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5915] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5915] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5915] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5915] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5915] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5915] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 152.106345][ T1210] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 152.115248][ T1210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.125531][ T1210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 152.134536][ T1210] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5915] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5915] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5915] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5915] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5915] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 152.181046][ T1210] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 152.190236][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 152.198396][ T1210] usb 1-1: Product: syz [ 152.202570][ T1210] usb 1-1: Manufacturer: syz [ 152.235829][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 152.241057][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 152.247039][ T1210] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 152.252950][ T1210] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5915] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5915] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5915] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5915] exit_group(0) = ? [pid 5915] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5915, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 [ 152.436939][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 152.442628][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 152.448377][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 152.454072][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 152.459810][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 152.465480][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 152.471033][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 152.480438][ T1210] usb 1-1: USB disconnect, device number 73 umount2("./71", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./71", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./71/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./71/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./71/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./71") = 0 mkdir("./72", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5916 attached , child_tidptr=0x555580316650) = 5916 [pid 5916] set_robust_list(0x555580316660, 24) = 0 [pid 5916] chdir("./72") = 0 [pid 5916] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5916] setpgid(0, 0) = 0 [pid 5916] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5916] write(3, "1000", 4) = 4 [pid 5916] close(3) = 0 [pid 5916] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5916] write(1, "executing program\n", 18executing program ) = 18 [pid 5916] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5916] close(3) = 0 [pid 5916] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5916] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5916] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5916] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5916] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5916] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5916] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5916] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5916] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 153.193181][ T1210] usb 1-1: new high-speed USB device number 74 using dummy_hcd [pid 5916] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5916] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5916] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5916] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5916] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5916] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5916] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5916] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5916] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5916] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5916] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5916] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5916] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 153.386603][ T1210] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 153.395393][ T1210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 153.405872][ T1210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 153.415488][ T1210] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5916] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5916] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5916] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5916] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5916] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 153.451043][ T1210] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 153.460253][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 153.468418][ T1210] usb 1-1: Product: syz [ 153.472593][ T1210] usb 1-1: Manufacturer: syz [ 153.505695][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 153.510956][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 153.516985][ T1210] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 153.522925][ T1210] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5916] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5916] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5916] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5916] exit_group(0) = ? [ 153.716210][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 153.721914][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 153.727620][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 153.733287][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 153.739027][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 153.744697][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 153.750407][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 153.756069][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [pid 5916] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5916, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- umount2("./72", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./72", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./72/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./72/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./72/binderfs") = 0 [ 153.761825][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 153.767504][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 153.773234][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 153.778912][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 153.788785][ T1210] usb 1-1: USB disconnect, device number 74 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./72") = 0 mkdir("./73", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5917 attached , child_tidptr=0x555580316650) = 5917 [pid 5917] set_robust_list(0x555580316660, 24) = 0 [pid 5917] chdir("./73") = 0 [pid 5917] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5917] setpgid(0, 0) = 0 [pid 5917] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5917] write(3, "1000", 4) = 4 [pid 5917] close(3) = 0 [pid 5917] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5917] write(1, "executing program\n", 18executing program ) = 18 [pid 5917] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5917] close(3) = 0 [pid 5917] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5917] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5917] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5917] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5917] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5917] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5917] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5917] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5917] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 154.453191][ T1210] usb 1-1: new high-speed USB device number 75 using dummy_hcd [pid 5917] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5917] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5917] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5917] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5917] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5917] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5917] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5917] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5917] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5917] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5917] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5917] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 154.647287][ T1210] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 154.656076][ T1210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 154.666331][ T1210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 154.675329][ T1210] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5917] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5917] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5917] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5917] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5917] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [ 154.721956][ T1210] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 154.731166][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 154.739536][ T1210] usb 1-1: Product: syz [ 154.743787][ T1210] usb 1-1: Manufacturer: syz [pid 5917] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 154.776135][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 154.781367][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 154.787492][ T1210] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 154.793509][ T1210] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5917] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5917] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5917] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5917] exit_group(0) = ? [ 154.997040][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 155.002747][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 155.008647][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 155.014565][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 155.020407][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 155.026779][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 155.032449][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 155.038447][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [pid 5917] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5917, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- umount2("./73", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./73", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./73/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./73/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./73/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./73") = 0 mkdir("./74", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5918 attached , child_tidptr=0x555580316650) = 5918 [pid 5918] set_robust_list(0x555580316660, 24) = 0 [ 155.044121][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 155.049674][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 155.059718][ T9] usb 1-1: USB disconnect, device number 75 [pid 5918] chdir("./74") = 0 [pid 5918] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5918] setpgid(0, 0) = 0 [pid 5918] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5918] write(3, "1000", 4) = 4 [pid 5918] close(3) = 0 [pid 5918] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5918] write(1, "executing program\n", 18executing program ) = 18 [pid 5918] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5918] close(3) = 0 [pid 5918] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5918] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5918] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5918] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5918] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5918] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5918] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5918] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5918] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 155.673182][ T9] usb 1-1: new high-speed USB device number 76 using dummy_hcd [pid 5918] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5918] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5918] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5918] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5918] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5918] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5918] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5918] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5918] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5918] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5918] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 155.877005][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 155.885761][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 155.896329][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 155.905401][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5918] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5918] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5918] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5918] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5918] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5918] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5918] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 155.960190][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 155.969363][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 155.977397][ T9] usb 1-1: Product: syz [ 155.981571][ T9] usb 1-1: Manufacturer: syz [ 156.025289][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 156.030528][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 156.036590][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 156.042505][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5918] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5918] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5918] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [ 156.236693][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 156.242402][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 156.248120][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 156.253785][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 156.259500][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 156.265178][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 156.270909][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 156.276572][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [pid 5918] exit_group(0) = ? [pid 5918] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5918, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./74", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 156.282282][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 156.287920][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 156.293501][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 156.304275][ T1210] usb 1-1: USB disconnect, device number 76 openat(AT_FDCWD, "./74", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./74/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./74/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./74/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./74") = 0 mkdir("./75", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5919 attached , child_tidptr=0x555580316650) = 5919 [pid 5919] set_robust_list(0x555580316660, 24) = 0 [pid 5919] chdir("./75") = 0 [pid 5919] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5919] setpgid(0, 0) = 0 [pid 5919] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5919] write(3, "1000", 4) = 4 [pid 5919] close(3) = 0 [pid 5919] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5919] write(1, "executing program\n", 18executing program ) = 18 [pid 5919] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5919] close(3) = 0 [pid 5919] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5919] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5919] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5919] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5919] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5919] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5919] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5919] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5919] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 157.023185][ T9] usb 1-1: new high-speed USB device number 77 using dummy_hcd [pid 5919] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5919] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5919] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5919] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5919] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5919] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5919] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5919] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5919] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5919] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5919] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5919] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5919] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 157.206606][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 157.215310][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.225434][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 157.234421][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5919] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5919] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5919] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5919] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5919] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 157.281707][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 157.290869][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 157.298906][ T9] usb 1-1: Product: syz [ 157.303119][ T9] usb 1-1: Manufacturer: syz [ 157.345727][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 157.350993][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 157.357124][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 157.363037][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5919] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5919] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5919] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5919] exit_group(0) = ? [ 157.546650][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 157.552350][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 157.558095][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 157.563766][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 157.569506][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 157.575187][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 157.580902][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 157.586561][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [pid 5919] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5919, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- umount2("./75", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./75", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 157.592300][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 157.597965][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 157.603528][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 157.612999][ T9] usb 1-1: USB disconnect, device number 77 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./75/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./75/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./75/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./75") = 0 mkdir("./76", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5920 attached , child_tidptr=0x555580316650) = 5920 [pid 5920] set_robust_list(0x555580316660, 24) = 0 [pid 5920] chdir("./76") = 0 [pid 5920] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5920] setpgid(0, 0) = 0 [pid 5920] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5920] write(3, "1000", 4) = 4 [pid 5920] close(3) = 0 [pid 5920] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5920] write(1, "executing program\n", 18) = 18 [pid 5920] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5920] close(3) = 0 [pid 5920] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5920] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5920] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5920] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5920] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5920] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5920] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5920] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5920] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 158.343182][ T9] usb 1-1: new high-speed USB device number 78 using dummy_hcd [pid 5920] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5920] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5920] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5920] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5920] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5920] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5920] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5920] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5920] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5920] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5920] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5920] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5920] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 158.536889][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 158.545582][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 158.555746][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 158.564766][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5920] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5920] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5920] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5920] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5920] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 158.609379][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 158.618498][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 158.626553][ T9] usb 1-1: Product: syz [ 158.630716][ T9] usb 1-1: Manufacturer: syz [ 158.664842][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 158.670078][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 158.676171][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 158.682100][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5920] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5920] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [ 158.876227][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 158.881927][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 158.887642][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 158.893308][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 158.899006][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 158.904820][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 158.910671][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 158.916321][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [pid 5920] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5920] exit_group(0) = ? [pid 5920] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5920, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- umount2("./76", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./76", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./76/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./76/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./76/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 [ 158.922037][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 158.927861][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 158.933540][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 158.939292][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 158.944972][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 158.950683][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 158.956354][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 158.968472][ T1210] usb 1-1: USB disconnect, device number 78 rmdir("./76") = 0 mkdir("./77", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5921 attached , child_tidptr=0x555580316650) = 5921 [pid 5921] set_robust_list(0x555580316660, 24) = 0 [pid 5921] chdir("./77") = 0 [pid 5921] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5921] setpgid(0, 0) = 0 [pid 5921] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5921] write(3, "1000", 4) = 4 [pid 5921] close(3) = 0 [pid 5921] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5921] write(1, "executing program\n", 18executing program ) = 18 [pid 5921] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5921] close(3) = 0 [pid 5921] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5921] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5921] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5921] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5921] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5921] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5921] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5921] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5921] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 159.543179][ T1210] usb 1-1: new high-speed USB device number 79 using dummy_hcd [pid 5921] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5921] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5921] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5921] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5921] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5921] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5921] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5921] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5921] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5921] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5921] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5921] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5921] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 159.726737][ T1210] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 159.735776][ T1210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.745904][ T1210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 159.754899][ T1210] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5921] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5921] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5921] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5921] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5921] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 159.799575][ T1210] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 159.808819][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 159.816888][ T1210] usb 1-1: Product: syz [ 159.821053][ T1210] usb 1-1: Manufacturer: syz [ 159.853612][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 159.858836][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 159.864937][ T1210] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 159.870857][ T1210] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5921] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5921] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5921] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5921] exit_group(0) = ? [pid 5921] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5921, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- umount2("./77", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./77", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./77/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./77/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 160.064307][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 160.070009][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 160.075850][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 160.081855][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 160.087528][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 160.096552][ C1] cdc_wdm 1-1:1.0: Unexpected error -71 [ 160.100923][ T9] usb 1-1: USB disconnect, device number 79 unlink("./77/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./77") = 0 mkdir("./78", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5922 attached , child_tidptr=0x555580316650) = 5922 [pid 5922] set_robust_list(0x555580316660, 24) = 0 [pid 5922] chdir("./78") = 0 [pid 5922] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5922] setpgid(0, 0) = 0 [pid 5922] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5922] write(3, "1000", 4) = 4 [pid 5922] close(3) = 0 [pid 5922] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5922] write(1, "executing program\n", 18) = 18 [pid 5922] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5922] close(3) = 0 [pid 5922] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5922] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5922] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5922] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5922] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5922] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5922] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5922] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5922] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 160.753204][ T9] usb 1-1: new high-speed USB device number 80 using dummy_hcd [pid 5922] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5922] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5922] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5922] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5922] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5922] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5922] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5922] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5922] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5922] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5922] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5922] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 160.937252][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 160.945970][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 160.956121][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 160.965116][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5922] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5922] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5922] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5922] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5922] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5922] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 161.020630][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 161.029738][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 161.037806][ T9] usb 1-1: Product: syz [ 161.041973][ T9] usb 1-1: Manufacturer: syz [ 161.085176][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 161.090420][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 161.096505][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 161.102421][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5922] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5922] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5922] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5922] exit_group(0) = ? [ 161.296558][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 161.302249][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 161.307951][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 161.313636][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 161.319376][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 161.325222][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 161.330880][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 161.336613][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [pid 5922] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5922, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./78", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./78", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 161.342468][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 161.348129][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 161.353713][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 161.365430][ T9] usb 1-1: USB disconnect, device number 80 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./78/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./78/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./78/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./78") = 0 mkdir("./79", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5923 attached , child_tidptr=0x555580316650) = 5923 [pid 5923] set_robust_list(0x555580316660, 24) = 0 [pid 5923] chdir("./79") = 0 [pid 5923] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5923] setpgid(0, 0) = 0 [pid 5923] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5923] write(3, "1000", 4) = 4 [pid 5923] close(3) = 0 [pid 5923] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5923] write(1, "executing program\n", 18) = 18 [pid 5923] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5923] close(3) = 0 [pid 5923] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5923] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5923] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5923] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5923] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5923] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5923] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5923] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5923] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 162.093192][ T9] usb 1-1: new high-speed USB device number 81 using dummy_hcd [pid 5923] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5923] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5923] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5923] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5923] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5923] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5923] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5923] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5923] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5923] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5923] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5923] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 162.286903][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 162.295611][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 162.305761][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 162.314813][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5923] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5923] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5923] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5923] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5923] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5923] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 162.359541][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 162.368756][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 162.376791][ T9] usb 1-1: Product: syz [ 162.380959][ T9] usb 1-1: Manufacturer: syz [ 162.411087][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 162.416389][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 162.422413][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 162.428456][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5923] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5923] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5923] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5923] exit_group(0) = ? [pid 5923] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5923, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- umount2("./79", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./79", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./79/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./79/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./79/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./79") = 0 mkdir("./80", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5924 attached , child_tidptr=0x555580316650) = 5924 [pid 5924] set_robust_list(0x555580316660, 24) = 0 [ 162.612817][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 162.618501][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 162.624210][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 162.629989][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 162.635987][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 162.641666][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 162.647243][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 162.657112][ T9] usb 1-1: USB disconnect, device number 81 [pid 5924] chdir("./80") = 0 [pid 5924] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5924] setpgid(0, 0) = 0 [pid 5924] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5924] write(3, "1000", 4) = 4 [pid 5924] close(3) = 0 [pid 5924] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5924] write(1, "executing program\n", 18) = 18 [pid 5924] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5924] close(3) = 0 [pid 5924] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5924] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5924] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5924] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5924] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5924] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5924] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5924] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5924] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 163.203194][ T9] usb 1-1: new high-speed USB device number 82 using dummy_hcd [pid 5924] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5924] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5924] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5924] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5924] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5924] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5924] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5924] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5924] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5924] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5924] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5924] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5924] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 163.386716][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 163.395475][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.405594][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 163.414619][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5924] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5924] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5924] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5924] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5924] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 163.461821][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 163.470956][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 163.479044][ T9] usb 1-1: Product: syz [ 163.483243][ T9] usb 1-1: Manufacturer: syz [ 163.512725][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 163.518115][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 163.524107][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 163.530032][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5924] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5924] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5924] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5924] exit_group(0) = ? [pid 5924] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5924, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- umount2("./80", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./80", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 [ 163.733211][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 163.738914][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 163.744744][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 163.750735][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 163.756410][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 163.765286][ C1] cdc_wdm 1-1:1.0: Unexpected error -71 [ 163.765624][ T9] usb 1-1: USB disconnect, device number 82 umount2("./80/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./80/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./80/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./80") = 0 mkdir("./81", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5925 attached , child_tidptr=0x555580316650) = 5925 [pid 5925] set_robust_list(0x555580316660, 24) = 0 [pid 5925] chdir("./81") = 0 [pid 5925] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5925] setpgid(0, 0) = 0 [pid 5925] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5925] write(3, "1000", 4) = 4 [pid 5925] close(3) = 0 [pid 5925] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5925] write(1, "executing program\n", 18executing program ) = 18 [pid 5925] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5925] close(3) = 0 [pid 5925] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5925] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5925] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5925] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5925] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5925] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5925] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5925] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5925] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 164.463177][ T1210] usb 1-1: new high-speed USB device number 83 using dummy_hcd [pid 5925] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5925] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5925] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5925] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5925] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5925] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5925] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5925] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5925] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5925] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 164.666476][ T1210] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 164.675278][ T1210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.685536][ T1210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 164.694527][ T1210] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5925] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5925] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5925] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5925] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5925] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5925] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5925] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5925] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 164.760654][ T1210] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 164.769864][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 164.777896][ T1210] usb 1-1: Product: syz [ 164.782064][ T1210] usb 1-1: Manufacturer: syz [ 164.824517][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 164.829754][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 164.835992][ T1210] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 164.841902][ T1210] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5925] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5925] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5925] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5925] exit_group(0) = ? [ 165.034880][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 165.040559][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 165.046468][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 165.052137][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 165.057937][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 165.063612][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 165.069427][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 165.075096][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [pid 5925] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5925, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- umount2("./81", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./81", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 165.081282][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 165.086943][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 165.092507][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 165.101895][ T9] usb 1-1: USB disconnect, device number 83 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./81/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./81/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./81/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./81") = 0 mkdir("./82", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5926 attached , child_tidptr=0x555580316650) = 5926 [pid 5926] set_robust_list(0x555580316660, 24) = 0 [pid 5926] chdir("./82") = 0 [pid 5926] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5926] setpgid(0, 0) = 0 [pid 5926] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5926] write(3, "1000", 4) = 4 [pid 5926] close(3) = 0 [pid 5926] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5926] write(1, "executing program\n", 18executing program ) = 18 [pid 5926] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5926] close(3) = 0 [pid 5926] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5926] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5926] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5926] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5926] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5926] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5926] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5926] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5926] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 165.763179][ T9] usb 1-1: new high-speed USB device number 84 using dummy_hcd [pid 5926] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5926] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5926] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5926] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5926] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5926] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5926] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5926] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5926] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5926] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5926] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 165.956292][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 165.965017][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 165.975148][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 165.984146][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5926] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5926] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5926] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5926] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5926] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5926] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5926] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 166.051080][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 166.060177][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 166.068226][ T9] usb 1-1: Product: syz [ 166.072413][ T9] usb 1-1: Manufacturer: syz [ 166.105845][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 166.111147][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 166.117264][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 166.123248][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5926] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5926] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5926] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5926] exit_group(0) = ? [ 166.316222][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 166.321920][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 166.327623][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 166.333293][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 166.339281][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 166.344966][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 166.350680][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 166.356344][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [pid 5926] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5926, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- umount2("./82", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./82", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./82/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./82/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./82/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./82") = 0 mkdir("./83", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5927 attached , child_tidptr=0x555580316650) = 5927 [pid 5927] set_robust_list(0x555580316660, 24) = 0 [pid 5927] chdir("./83") = 0 [ 166.361923][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 166.371794][ T1210] usb 1-1: USB disconnect, device number 84 [pid 5927] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5927] setpgid(0, 0) = 0 [pid 5927] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5927] write(3, "1000", 4) = 4 [pid 5927] close(3) = 0 [pid 5927] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5927] write(1, "executing program\n", 18) = 18 [pid 5927] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5927] close(3) = 0 [pid 5927] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5927] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5927] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5927] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5927] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5927] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5927] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5927] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5927] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 166.963230][ T9] usb 1-1: new high-speed USB device number 85 using dummy_hcd [pid 5927] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5927] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5927] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5927] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5927] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5927] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5927] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5927] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5927] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5927] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5927] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5927] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 167.156218][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 167.164923][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 167.175039][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 167.184059][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5927] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5927] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5927] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5927] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5927] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [ 167.230846][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 167.239965][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 167.248014][ T9] usb 1-1: Product: syz [ 167.252185][ T9] usb 1-1: Manufacturer: syz [pid 5927] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 167.285476][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 167.290761][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 167.296748][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 167.302664][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5927] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5927] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5927] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5927] exit_group(0) = ? [ 167.506746][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 167.512425][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 167.518161][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 167.523836][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 167.529771][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 167.535430][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 167.541164][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 167.546834][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [pid 5927] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5927, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./83", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./83", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 167.552399][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 167.564346][ T9] usb 1-1: USB disconnect, device number 85 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./83/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./83/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./83/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./83") = 0 mkdir("./84", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5928 attached , child_tidptr=0x555580316650) = 5928 [pid 5928] set_robust_list(0x555580316660, 24) = 0 [pid 5928] chdir("./84") = 0 [pid 5928] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5928] setpgid(0, 0) = 0 [pid 5928] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5928] write(3, "1000", 4) = 4 [pid 5928] close(3) = 0 [pid 5928] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5928] write(1, "executing program\n", 18executing program ) = 18 [pid 5928] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5928] close(3) = 0 [pid 5928] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5928] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5928] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5928] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5928] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5928] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5928] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5928] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5928] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 168.323222][ T1210] usb 1-1: new high-speed USB device number 86 using dummy_hcd [pid 5928] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5928] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5928] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5928] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5928] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5928] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5928] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5928] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5928] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5928] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5928] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5928] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 168.516538][ T1210] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 168.525421][ T1210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 168.535813][ T1210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 168.544849][ T1210] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5928] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5928] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5928] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5928] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5928] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5928] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 168.589848][ T1210] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 168.599121][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 168.607359][ T1210] usb 1-1: Product: syz [ 168.611526][ T1210] usb 1-1: Manufacturer: syz [ 168.643381][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 168.648620][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 168.654753][ T1210] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 168.660667][ T1210] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5928] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5928] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5928] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5928] exit_group(0) = ? [pid 5928] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5928, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./84", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./84", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 168.863625][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 168.869315][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 168.875112][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 168.881970][ T1210] usb 1-1: USB disconnect, device number 86 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./84/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./84/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./84/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./84") = 0 mkdir("./85", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5929 attached , child_tidptr=0x555580316650) = 5929 [pid 5929] set_robust_list(0x555580316660, 24) = 0 [pid 5929] chdir("./85") = 0 [pid 5929] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5929] setpgid(0, 0) = 0 [pid 5929] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5929] write(3, "1000", 4) = 4 [pid 5929] close(3) = 0 [pid 5929] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5929] write(1, "executing program\n", 18) = 18 [pid 5929] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5929] close(3) = 0 [pid 5929] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5929] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5929] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5929] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5929] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5929] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5929] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5929] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5929] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 169.643195][ T1210] usb 1-1: new high-speed USB device number 87 using dummy_hcd [pid 5929] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5929] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5929] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5929] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5929] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5929] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5929] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5929] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5929] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5929] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5929] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 169.816810][ T1210] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 169.825604][ T1210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 169.836117][ T1210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 169.845137][ T1210] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5929] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5929] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5929] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5929] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5929] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5929] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [ 169.901648][ T1210] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 169.911018][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 169.919210][ T1210] usb 1-1: Product: syz [ 169.923400][ T1210] usb 1-1: Manufacturer: syz [pid 5929] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 169.953208][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 169.958446][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 169.964635][ T1210] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 169.970556][ T1210] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5929] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5929] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5929] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5929] exit_group(0) = ? [pid 5929] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5929, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./85", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./85", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./85/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./85/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./85/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 [ 170.174095][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 170.179773][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 170.185569][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 170.191416][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 170.197077][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 170.203924][ T1210] usb 1-1: USB disconnect, device number 87 close(3) = 0 rmdir("./85") = 0 mkdir("./86", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5930 attached , child_tidptr=0x555580316650) = 5930 [pid 5930] set_robust_list(0x555580316660, 24) = 0 [pid 5930] chdir("./86") = 0 [pid 5930] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5930] setpgid(0, 0) = 0 [pid 5930] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5930] write(3, "1000", 4) = 4 [pid 5930] close(3) = 0 [pid 5930] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5930] write(1, "executing program\n", 18) = 18 [pid 5930] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5930] close(3) = 0 [pid 5930] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5930] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5930] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5930] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5930] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5930] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5930] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5930] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5930] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 170.813189][ T9] usb 1-1: new high-speed USB device number 88 using dummy_hcd [pid 5930] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5930] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5930] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5930] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5930] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5930] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5930] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5930] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5930] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5930] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5930] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5930] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5930] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 170.996846][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 171.005584][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 171.015760][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 171.024780][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5930] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5930] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5930] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5930] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [ 171.070858][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 171.079977][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 171.087997][ T9] usb 1-1: Product: syz [ 171.092164][ T9] usb 1-1: Manufacturer: syz [pid 5930] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 171.135084][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 171.140296][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 171.146375][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 171.152288][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5930] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5930] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5930] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5930] exit_group(0) = ? [ 171.355998][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 171.361697][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 171.367432][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 171.373123][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 171.378833][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 171.384526][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 171.390255][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 171.395910][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [pid 5930] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5930, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- umount2("./86", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./86", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./86/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./86/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./86/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./86") = 0 mkdir("./87", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5931 attached [pid 5931] set_robust_list(0x555580316660, 24) = 0 [pid 5931] chdir("./87" [pid 5832] <... clone resumed>, child_tidptr=0x555580316650) = 5931 [pid 5931] <... chdir resumed>) = 0 [pid 5931] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5931] setpgid(0, 0) = 0 [pid 5931] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5931] write(3, "1000", 4) = 4 [pid 5931] close(3) = 0 [pid 5931] symlink("/dev/binderfs", "./binderfs") = 0 executing program [ 171.401468][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 171.410962][ T9] usb 1-1: USB disconnect, device number 88 [pid 5931] write(1, "executing program\n", 18) = 18 [pid 5931] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5931] close(3) = 0 [pid 5931] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5931] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5931] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5931] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5931] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5931] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5931] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5931] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5931] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 171.973215][ T9] usb 1-1: new high-speed USB device number 89 using dummy_hcd [pid 5931] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5931] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5931] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5931] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5931] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5931] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5931] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5931] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5931] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5931] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5931] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 172.167064][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 172.175767][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 172.185881][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 172.194901][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5931] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5931] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5931] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5931] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5931] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5931] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5931] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 172.249026][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 172.258150][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 172.266192][ T9] usb 1-1: Product: syz [ 172.270357][ T9] usb 1-1: Manufacturer: syz [ 172.303746][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 172.309024][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 172.315149][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 172.321074][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5931] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5931] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5931] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5931] exit_group(0) = ? [ 172.524524][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 172.530226][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 172.535926][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 172.541586][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 172.547307][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 172.552988][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 172.558738][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 172.564570][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [pid 5931] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5931, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./87", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./87", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 172.570241][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 172.575802][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 172.586874][ T1210] usb 1-1: USB disconnect, device number 89 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./87/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./87/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./87/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./87") = 0 mkdir("./88", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5932 attached , child_tidptr=0x555580316650) = 5932 [pid 5932] set_robust_list(0x555580316660, 24) = 0 [pid 5932] chdir("./88") = 0 [pid 5932] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5932] setpgid(0, 0) = 0 [pid 5932] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5932] write(3, "1000", 4) = 4 [pid 5932] close(3) = 0 [pid 5932] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5932] write(1, "executing program\n", 18executing program ) = 18 [pid 5932] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5932] close(3) = 0 [pid 5932] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5932] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5932] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5932] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5932] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5932] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5932] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5932] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5932] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 173.343182][ T1210] usb 1-1: new high-speed USB device number 90 using dummy_hcd [pid 5932] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5932] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5932] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5932] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5932] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5932] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5932] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5932] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5932] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5932] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5932] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5932] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 173.525951][ T1210] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 173.534939][ T1210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 173.545222][ T1210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 173.554231][ T1210] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5932] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5932] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5932] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5932] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5932] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5932] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 173.590173][ T1210] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 173.599594][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 173.607975][ T1210] usb 1-1: Product: syz [ 173.612150][ T1210] usb 1-1: Manufacturer: syz [ 173.661922][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 173.667230][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 173.673045][ T1210] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 173.679029][ T1210] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5932] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5932] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5932] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5932] exit_group(0) = ? [ 173.872921][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 173.878652][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 173.884409][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 173.890236][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 173.896076][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 173.901915][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 173.907591][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 173.913188][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [pid 5932] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5932, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- umount2("./88", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./88", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 173.923283][ T1210] usb 1-1: USB disconnect, device number 90 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./88/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./88/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./88/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./88") = 0 mkdir("./89", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5933 attached , child_tidptr=0x555580316650) = 5933 [pid 5933] set_robust_list(0x555580316660, 24) = 0 [pid 5933] chdir("./89") = 0 [pid 5933] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5933] setpgid(0, 0) = 0 [pid 5933] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5933] write(3, "1000", 4) = 4 [pid 5933] close(3) = 0 [pid 5933] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5933] write(1, "executing program\n", 18executing program ) = 18 [pid 5933] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5933] close(3) = 0 [pid 5933] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5933] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5933] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5933] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5933] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5933] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5933] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5933] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5933] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 174.683173][ T1210] usb 1-1: new high-speed USB device number 91 using dummy_hcd [pid 5933] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5933] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5933] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5933] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5933] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5933] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5933] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5933] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5933] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5933] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5933] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5933] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5933] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 174.876014][ T1210] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 174.885046][ T1210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 174.895288][ T1210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 174.904283][ T1210] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5933] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5933] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5933] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5933] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5933] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 174.950355][ T1210] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 174.959587][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 174.967725][ T1210] usb 1-1: Product: syz [ 174.971890][ T1210] usb 1-1: Manufacturer: syz [ 175.005310][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 175.010542][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 175.016496][ T1210] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 175.022409][ T1210] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5933] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5933] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5933] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5933] exit_group(0) = ? [ 175.225668][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 175.231375][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 175.237163][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 175.242979][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 175.248642][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 175.254513][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 175.260352][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 175.266154][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [pid 5933] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5933, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- umount2("./89", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./89", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./89/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./89/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./89/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./89") = 0 mkdir("./90", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5934 attached [pid 5934] set_robust_list(0x555580316660, 24 [pid 5832] <... clone resumed>, child_tidptr=0x555580316650) = 5934 [pid 5934] <... set_robust_list resumed>) = 0 [ 175.271821][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 175.277383][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 175.287349][ T9] usb 1-1: USB disconnect, device number 91 [pid 5934] chdir("./90") = 0 [pid 5934] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5934] setpgid(0, 0) = 0 [pid 5934] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5934] write(3, "1000", 4) = 4 [pid 5934] close(3) = 0 [pid 5934] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5934] write(1, "executing program\n", 18) = 18 [pid 5934] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5934] close(3) = 0 [pid 5934] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5934] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5934] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5934] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5934] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5934] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5934] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5934] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5934] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 175.873176][ T1210] usb 1-1: new high-speed USB device number 92 using dummy_hcd [pid 5934] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5934] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5934] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5934] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5934] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5934] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5934] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5934] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5934] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5934] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5934] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5934] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 176.066734][ T1210] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 176.075540][ T1210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 176.085882][ T1210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 176.094917][ T1210] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5934] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5934] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5934] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5934] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5934] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5934] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 176.150277][ T1210] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 176.159587][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 176.167926][ T1210] usb 1-1: Product: syz [ 176.172103][ T1210] usb 1-1: Manufacturer: syz [ 176.204814][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 176.210052][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 176.216169][ T1210] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 176.222090][ T1210] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5934] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [ 176.415625][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 176.421294][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 176.426996][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 176.432660][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 176.438360][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 176.444017][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 176.449711][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 176.455373][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [pid 5934] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5934] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5934] exit_group(0) = ? [ 176.461099][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 176.466759][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 176.472473][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 176.478133][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 176.483857][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 176.489508][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 176.495203][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 176.500865][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 176.506761][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [pid 5934] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5934, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- umount2("./90", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./90", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 176.512573][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 176.518241][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 176.523817][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 176.534194][ T1210] usb 1-1: USB disconnect, device number 92 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./90/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./90/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./90/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./90") = 0 mkdir("./91", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5935 attached , child_tidptr=0x555580316650) = 5935 [pid 5935] set_robust_list(0x555580316660, 24) = 0 [pid 5935] chdir("./91") = 0 [pid 5935] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5935] setpgid(0, 0) = 0 [pid 5935] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5935] write(3, "1000", 4) = 4 [pid 5935] close(3) = 0 [pid 5935] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5935] write(1, "executing program\n", 18) = 18 [pid 5935] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5935] close(3) = 0 [pid 5935] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5935] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5935] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5935] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5935] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5935] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5935] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5935] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5935] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 177.273187][ T9] usb 1-1: new high-speed USB device number 93 using dummy_hcd [pid 5935] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5935] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5935] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5935] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5935] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5935] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5935] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5935] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5935] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5935] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5935] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5935] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 177.467060][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 177.475820][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 177.486216][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 177.495288][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5935] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5935] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5935] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5935] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5935] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5935] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 177.539930][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 177.549058][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 177.557099][ T9] usb 1-1: Product: syz [ 177.561265][ T9] usb 1-1: Manufacturer: syz [ 177.580857][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 177.586283][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 177.592135][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 177.598172][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5935] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5935] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5935] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5935] exit_group(0) = ? [ 177.812292][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 177.817977][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 177.823710][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 177.829546][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 177.835201][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 177.840935][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 177.846602][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 177.852161][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [pid 5935] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5935, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./91", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./91", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 177.861590][ T9] usb 1-1: USB disconnect, device number 93 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./91/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./91/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./91/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./91") = 0 mkdir("./92", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5936 attached , child_tidptr=0x555580316650) = 5936 [pid 5936] set_robust_list(0x555580316660, 24) = 0 [pid 5936] chdir("./92") = 0 [pid 5936] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5936] setpgid(0, 0) = 0 [pid 5936] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5936] write(3, "1000", 4) = 4 [pid 5936] close(3) = 0 [pid 5936] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5936] write(1, "executing program\n", 18executing program ) = 18 [pid 5936] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5936] close(3) = 0 [pid 5936] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5936] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5936] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5936] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5936] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5936] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5936] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5936] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5936] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 178.513179][ T1210] usb 1-1: new high-speed USB device number 94 using dummy_hcd [pid 5936] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5936] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5936] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5936] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5936] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5936] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5936] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5936] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5936] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5936] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5936] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5936] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 178.706020][ T1210] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 178.714814][ T1210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 178.725070][ T1210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 178.734072][ T1210] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5936] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5936] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5936] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5936] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5936] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5936] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 178.770652][ T1210] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 178.779850][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 178.788169][ T1210] usb 1-1: Product: syz [ 178.792347][ T1210] usb 1-1: Manufacturer: syz [ 178.822536][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 178.827850][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 178.833889][ T1210] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 178.839797][ T1210] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5936] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5936] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5936] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [ 179.033154][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 179.038852][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 179.044671][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 179.050346][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 179.056327][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 179.062000][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 179.067734][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 179.073397][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [pid 5936] exit_group(0) = ? [pid 5936] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5936, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./92", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./92", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 179.079279][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 179.084944][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 179.090524][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 179.100143][ T1210] usb 1-1: USB disconnect, device number 94 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./92/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./92/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./92/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./92") = 0 mkdir("./93", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5937 attached , child_tidptr=0x555580316650) = 5937 [pid 5937] set_robust_list(0x555580316660, 24) = 0 [pid 5937] chdir("./93") = 0 [pid 5937] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5937] setpgid(0, 0) = 0 [pid 5937] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5937] write(3, "1000", 4) = 4 [pid 5937] close(3) = 0 [pid 5937] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5937] write(1, "executing program\n", 18) = 18 [pid 5937] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5937] close(3) = 0 [pid 5937] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5937] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5937] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5937] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5937] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5937] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5937] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5937] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5937] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 179.823180][ T1210] usb 1-1: new high-speed USB device number 95 using dummy_hcd [pid 5937] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5937] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5937] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5937] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5937] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5937] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5937] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5937] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5937] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5937] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5937] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 180.016264][ T1210] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 180.025120][ T1210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 180.035393][ T1210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 180.044402][ T1210] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5937] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5937] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5937] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5937] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5937] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5937] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5937] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 180.101263][ T1210] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 180.110485][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 180.118669][ T1210] usb 1-1: Product: syz [ 180.122839][ T1210] usb 1-1: Manufacturer: syz [ 180.163294][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 180.168561][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 180.174622][ T1210] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 180.180539][ T1210] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5937] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5937] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5937] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5937] exit_group(0) = ? [ 180.384228][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 180.389919][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 180.395721][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 180.401543][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 180.407200][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 180.413186][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 180.419140][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 180.424972][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [pid 5937] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5937, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./93", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./93", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 180.430661][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 180.436222][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 180.446262][ T9] usb 1-1: USB disconnect, device number 95 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./93/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./93/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./93/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./93") = 0 mkdir("./94", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5938 attached , child_tidptr=0x555580316650) = 5938 [pid 5938] set_robust_list(0x555580316660, 24) = 0 [pid 5938] chdir("./94") = 0 [pid 5938] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5938] setpgid(0, 0) = 0 [pid 5938] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5938] write(3, "1000", 4) = 4 [pid 5938] close(3) = 0 [pid 5938] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5938] write(1, "executing program\n", 18) = 18 [pid 5938] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5938] close(3) = 0 [pid 5938] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5938] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5938] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5938] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5938] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5938] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5938] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5938] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5938] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 181.083178][ T1210] usb 1-1: new high-speed USB device number 96 using dummy_hcd [pid 5938] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5938] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5938] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5938] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5938] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5938] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5938] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5938] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5938] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5938] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5938] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5938] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5938] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 181.266472][ T1210] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 181.275241][ T1210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 181.285535][ T1210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 181.294536][ T1210] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5938] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5938] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5938] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5938] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5938] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 181.340532][ T1210] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 181.349734][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 181.357773][ T1210] usb 1-1: Product: syz [ 181.361942][ T1210] usb 1-1: Manufacturer: syz [ 181.414127][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 181.419363][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 181.425523][ T1210] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 181.431437][ T1210] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5938] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5938] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5938] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5938] exit_group(0) = ? [ 181.624691][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 181.630391][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 181.636234][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 181.642058][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 181.647726][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 181.653552][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 181.659218][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 181.664777][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [pid 5938] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5938, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./94", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./94", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 181.675032][ T9] usb 1-1: USB disconnect, device number 96 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./94/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./94/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./94/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./94") = 0 mkdir("./95", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5939 attached , child_tidptr=0x555580316650) = 5939 [pid 5939] set_robust_list(0x555580316660, 24) = 0 [pid 5939] chdir("./95") = 0 [pid 5939] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5939] setpgid(0, 0) = 0 [pid 5939] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5939] write(3, "1000", 4) = 4 [pid 5939] close(3) = 0 [pid 5939] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5939] write(1, "executing program\n", 18executing program ) = 18 [pid 5939] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5939] close(3) = 0 [pid 5939] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5939] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5939] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5939] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5939] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5939] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5939] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5939] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5939] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 182.373237][ T9] usb 1-1: new high-speed USB device number 97 using dummy_hcd [pid 5939] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5939] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5939] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5939] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5939] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5939] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5939] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5939] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5939] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5939] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 182.566174][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 182.574909][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 182.585058][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 182.594058][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5939] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5939] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5939] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5939] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5939] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5939] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5939] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5939] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 182.661534][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 182.670764][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 182.678806][ T9] usb 1-1: Product: syz [ 182.682988][ T9] usb 1-1: Manufacturer: syz [ 182.716344][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 182.721612][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 182.727641][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 182.733597][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5939] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5939] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5939] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5939] exit_group(0) = ? [ 182.936767][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 182.942483][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 182.948181][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 182.953854][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 182.959551][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 182.965215][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 182.970940][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 182.976630][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [pid 5939] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5939, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- umount2("./95", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./95", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./95/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./95/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./95/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./95") = 0 mkdir("./96", 0777) = 0 [ 182.982347][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 182.988020][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 182.997457][ T1210] usb 1-1: USB disconnect, device number 97 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5940 attached , child_tidptr=0x555580316650) = 5940 [pid 5940] set_robust_list(0x555580316660, 24) = 0 [pid 5940] chdir("./96") = 0 [pid 5940] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5940] setpgid(0, 0) = 0 [pid 5940] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5940] write(3, "1000", 4) = 4 [pid 5940] close(3) = 0 [pid 5940] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5940] write(1, "executing program\n", 18) = 18 [pid 5940] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5940] close(3) = 0 [pid 5940] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5940] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5940] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5940] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5940] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5940] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5940] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5940] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5940] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 183.603183][ T9] usb 1-1: new high-speed USB device number 98 using dummy_hcd [pid 5940] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5940] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5940] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5940] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5940] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5940] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5940] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5940] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5940] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5940] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5940] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5940] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 183.816487][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 183.825188][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 183.835506][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 183.844572][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5940] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5940] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5940] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5940] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5940] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5940] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 183.900950][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 183.910078][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 183.918129][ T9] usb 1-1: Product: syz [ 183.922305][ T9] usb 1-1: Manufacturer: syz [ 183.955819][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 183.961131][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 183.967419][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 183.973375][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5940] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5940] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5940] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5940] exit_group(0) = ? [ 184.176537][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 184.182241][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 184.187960][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 184.193644][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 184.199367][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 184.205058][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 184.210786][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 184.216449][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [pid 5940] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5940, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- umount2("./96", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./96", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 184.222012][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 184.231511][ T9] usb 1-1: USB disconnect, device number 98 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./96/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./96/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./96/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./96") = 0 mkdir("./97", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5941 attached , child_tidptr=0x555580316650) = 5941 [pid 5941] set_robust_list(0x555580316660, 24) = 0 [pid 5941] chdir("./97") = 0 [pid 5941] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5941] setpgid(0, 0) = 0 [pid 5941] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5941] write(3, "1000", 4) = 4 [pid 5941] close(3) = 0 [pid 5941] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5941] write(1, "executing program\n", 18) = 18 [pid 5941] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5941] close(3) = 0 [pid 5941] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5941] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5941] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5941] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5941] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5941] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5941] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5941] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5941] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 184.953203][ T9] usb 1-1: new high-speed USB device number 99 using dummy_hcd [pid 5941] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5941] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5941] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5941] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5941] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5941] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5941] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5941] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5941] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5941] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5941] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5941] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5941] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 185.136793][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 185.145488][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 185.155625][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 185.164618][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5941] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5941] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5941] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5941] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [ 185.212338][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 185.221489][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 185.229517][ T9] usb 1-1: Product: syz [ 185.233737][ T9] usb 1-1: Manufacturer: syz [pid 5941] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 185.276584][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 185.281867][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 185.287896][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 185.293884][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5941] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5941] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5941] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5941] exit_group(0) = ? [ 185.497473][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 185.503205][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 185.508935][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 185.514790][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 185.520631][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 185.526455][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 185.532274][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 185.538110][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [pid 5941] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5941, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- umount2("./97", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./97", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./97/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./97/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./97/binderfs") = 0 [ 185.543953][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 185.549641][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 185.555219][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 185.567028][ T9] usb 1-1: USB disconnect, device number 99 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./97") = 0 mkdir("./98", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5942 attached , child_tidptr=0x555580316650) = 5942 [pid 5942] set_robust_list(0x555580316660, 24) = 0 [pid 5942] chdir("./98") = 0 [pid 5942] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5942] setpgid(0, 0) = 0 [pid 5942] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5942] write(3, "1000", 4) = 4 [pid 5942] close(3) = 0 [pid 5942] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5942] write(1, "executing program\n", 18) = 18 [pid 5942] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5942] close(3) = 0 [pid 5942] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5942] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5942] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5942] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5942] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5942] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5942] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5942] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5942] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 186.173190][ T9] usb 1-1: new high-speed USB device number 100 using dummy_hcd [pid 5942] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5942] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5942] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5942] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5942] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5942] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5942] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5942] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5942] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5942] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5942] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5942] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 186.356585][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 186.365298][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.375427][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 186.384454][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5942] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5942] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5942] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5942] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5942] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [ 186.441707][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 186.450841][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 186.458881][ T9] usb 1-1: Product: syz [ 186.463046][ T9] usb 1-1: Manufacturer: syz [pid 5942] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 186.512889][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 186.518259][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 186.524383][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 186.530309][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5942] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5942] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5942] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5942] exit_group(0) = ? [ 186.723951][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 186.729659][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 186.735406][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 186.741201][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 186.747102][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 186.752987][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 186.758808][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 186.764485][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [pid 5942] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5942, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- umount2("./98", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./98", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./98/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./98/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./98/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./98") = 0 [ 186.773316][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 186.780509][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -EPIPE [ 186.782020][ T9] usb 1-1: USB disconnect, device number 100 mkdir("./99", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5943 attached , child_tidptr=0x555580316650) = 5943 [pid 5943] set_robust_list(0x555580316660, 24) = 0 [pid 5943] chdir("./99") = 0 [pid 5943] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5943] setpgid(0, 0) = 0 [pid 5943] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5943] write(3, "1000", 4) = 4 [pid 5943] close(3) = 0 [pid 5943] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5943] write(1, "executing program\n", 18executing program ) = 18 [pid 5943] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5943] close(3) = 0 [pid 5943] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5943] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5943] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5943] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5943] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5943] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5943] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5943] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5943] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 187.403195][ T9] usb 1-1: new high-speed USB device number 101 using dummy_hcd [pid 5943] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5943] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5943] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5943] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5943] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5943] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5943] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5943] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5943] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5943] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5943] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5943] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 187.597382][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 187.606083][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 187.616222][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 187.625218][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5943] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5943] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5943] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5943] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5943] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5943] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 187.679625][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 187.688743][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 187.696788][ T9] usb 1-1: Product: syz [ 187.700949][ T9] usb 1-1: Manufacturer: syz [ 187.754600][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 187.759876][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 187.765888][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 187.771808][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5943] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5943] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5943] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [ 187.955763][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 187.961445][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 187.967174][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 187.972845][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 187.978564][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 187.984238][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 187.989997][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 187.995663][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [pid 5943] exit_group(0) = ? [pid 5943] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5943, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- umount2("./99", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./99", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 [ 188.001400][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 188.007063][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 188.012787][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 188.018449][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 188.024010][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 188.033548][ T9] usb 1-1: USB disconnect, device number 101 umount2("./99/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./99/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./99/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./99") = 0 mkdir("./100", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5944 attached , child_tidptr=0x555580316650) = 5944 [pid 5944] set_robust_list(0x555580316660, 24) = 0 [pid 5944] chdir("./100") = 0 [pid 5944] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5944] setpgid(0, 0) = 0 [pid 5944] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5944] write(3, "1000", 4) = 4 [pid 5944] close(3) = 0 [pid 5944] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5944] write(1, "executing program\n", 18) = 18 [pid 5944] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5944] close(3) = 0 [pid 5944] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5944] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5944] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5944] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5944] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5944] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5944] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5944] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5944] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 188.753172][ T1210] usb 1-1: new high-speed USB device number 102 using dummy_hcd [pid 5944] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5944] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5944] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5944] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5944] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5944] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5944] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5944] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5944] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5944] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5944] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5944] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5944] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 188.936128][ T1210] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 188.944976][ T1210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 188.955229][ T1210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 188.964240][ T1210] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5944] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5944] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5944] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5944] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5944] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 189.010812][ T1210] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 189.020164][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 189.028344][ T1210] usb 1-1: Product: syz [ 189.032531][ T1210] usb 1-1: Manufacturer: syz [ 189.062049][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 189.067390][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 189.073331][ T1210] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 189.079269][ T1210] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5944] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5944] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5944] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5944] exit_group(0) = ? [pid 5944] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5944, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- umount2("./100", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./100", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 189.282336][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 189.288039][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 189.294060][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 189.299742][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 189.305679][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 189.311362][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 189.317204][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 189.322881][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./100/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./100/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./100/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./100") = 0 mkdir("./101", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5945 attached , child_tidptr=0x555580316650) = 5945 [pid 5945] set_robust_list(0x555580316660, 24) = 0 [pid 5945] chdir("./101") = 0 [ 189.333421][ T9] usb 1-1: USB disconnect, device number 102 [pid 5945] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5945] setpgid(0, 0) = 0 [pid 5945] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5945] write(3, "1000", 4) = 4 [pid 5945] close(3) = 0 [pid 5945] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5945] write(1, "executing program\n", 18) = 18 [pid 5945] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5945] close(3) = 0 [pid 5945] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5945] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5945] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5945] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5945] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5945] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5945] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5945] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5945] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 189.943240][ T9] usb 1-1: new high-speed USB device number 103 using dummy_hcd [pid 5945] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5945] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5945] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5945] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5945] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5945] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5945] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5945] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5945] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5945] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5945] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 190.136319][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 190.145087][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.155318][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 190.164367][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5945] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5945] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5945] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5945] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5945] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5945] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5945] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 190.221706][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 190.230844][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 190.238907][ T9] usb 1-1: Product: syz [ 190.243159][ T9] usb 1-1: Manufacturer: syz [ 190.276622][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 190.281865][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 190.287970][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 190.293934][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5945] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5945] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5945] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5945] exit_group(0) = ? [pid 5945] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5945, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- umount2("./101", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./101", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./101/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./101/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./101/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./101") = 0 mkdir("./102", 0777) = 0 [ 190.487461][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 190.493163][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 190.498866][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 190.504551][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 190.510276][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 190.515944][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 190.521503][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 190.531476][ T9] usb 1-1: USB disconnect, device number 103 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5946 attached , child_tidptr=0x555580316650) = 5946 [pid 5946] set_robust_list(0x555580316660, 24) = 0 [pid 5946] chdir("./102") = 0 [pid 5946] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5946] setpgid(0, 0) = 0 [pid 5946] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5946] write(3, "1000", 4) = 4 [pid 5946] close(3) = 0 [pid 5946] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5946] write(1, "executing program\n", 18executing program ) = 18 [pid 5946] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5946] close(3) = 0 [pid 5946] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5946] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5946] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5946] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5946] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5946] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5946] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5946] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5946] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 191.113227][ T9] usb 1-1: new high-speed USB device number 104 using dummy_hcd [pid 5946] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5946] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5946] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5946] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5946] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5946] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5946] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5946] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5946] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5946] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5946] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 191.287052][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 191.295742][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 191.305878][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 191.314869][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5946] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5946] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5946] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5946] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5946] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5946] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [ 191.369838][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 191.379003][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 191.387062][ T9] usb 1-1: Product: syz [ 191.391261][ T9] usb 1-1: Manufacturer: syz [pid 5946] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 191.434266][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 191.439561][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 191.445578][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 191.451487][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5946] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5946] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5946] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5946] exit_group(0) = ? [ 191.655696][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 191.661378][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 191.667116][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 191.672791][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 191.678524][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 191.684203][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 191.689939][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 191.695627][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [pid 5946] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5946, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./102", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./102", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./102/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./102/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./102/binderfs") = 0 [ 191.701201][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 191.710842][ T9] usb 1-1: USB disconnect, device number 104 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./102") = 0 mkdir("./103", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5947 attached , child_tidptr=0x555580316650) = 5947 [pid 5947] set_robust_list(0x555580316660, 24) = 0 [pid 5947] chdir("./103") = 0 [pid 5947] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5947] setpgid(0, 0) = 0 [pid 5947] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5947] write(3, "1000", 4) = 4 [pid 5947] close(3) = 0 [pid 5947] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5947] write(1, "executing program\n", 18executing program ) = 18 [pid 5947] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5947] close(3) = 0 [pid 5947] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5947] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5947] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5947] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5947] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5947] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5947] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5947] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5947] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 192.333189][ T9] usb 1-1: new high-speed USB device number 105 using dummy_hcd [pid 5947] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5947] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5947] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5947] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5947] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5947] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5947] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5947] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5947] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5947] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 192.516608][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 192.525318][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 192.535453][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 192.544470][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5947] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5947] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5947] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5947] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5947] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5947] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5947] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [ 192.608910][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 192.618091][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 192.626146][ T9] usb 1-1: Product: syz [ 192.630307][ T9] usb 1-1: Manufacturer: syz [pid 5947] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 192.662879][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 192.668260][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 192.674539][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 192.680460][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5947] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5947] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5947] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5947] exit_group(0) = ? [ 192.885702][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 192.891402][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 192.897203][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 192.903041][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 192.908874][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 192.914540][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 192.920377][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 192.926048][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [pid 5947] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5947, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- umount2("./103", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./103", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 192.932035][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 192.937708][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 192.943297][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 192.952707][ T9] usb 1-1: USB disconnect, device number 105 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./103/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./103/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./103/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./103") = 0 mkdir("./104", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5948 attached , child_tidptr=0x555580316650) = 5948 [pid 5948] set_robust_list(0x555580316660, 24) = 0 [pid 5948] chdir("./104") = 0 [pid 5948] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5948] setpgid(0, 0) = 0 [pid 5948] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5948] write(3, "1000", 4) = 4 [pid 5948] close(3) = 0 [pid 5948] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5948] write(1, "executing program\n", 18executing program ) = 18 [pid 5948] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5948] close(3) = 0 [pid 5948] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5948] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5948] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5948] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5948] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5948] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5948] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5948] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5948] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 193.693188][ T9] usb 1-1: new high-speed USB device number 106 using dummy_hcd [pid 5948] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5948] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5948] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5948] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5948] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5948] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5948] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5948] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5948] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5948] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5948] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5948] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5948] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 193.876748][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 193.885439][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 193.895581][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 193.904589][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5948] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5948] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5948] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5948] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5948] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 193.950365][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 193.959546][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 193.967583][ T9] usb 1-1: Product: syz [ 193.971761][ T9] usb 1-1: Manufacturer: syz [ 194.005050][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 194.010388][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 194.016417][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 194.022336][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5948] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5948] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5948] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5948] exit_group(0) = ? [pid 5948] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5948, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 [ 194.225750][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 194.231435][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 194.237170][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 194.243009][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 194.248660][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 194.254381][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 194.260065][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 umount2("./104", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./104", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./104/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./104/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./104/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 [ 194.270409][ T9] usb 1-1: USB disconnect, device number 106 close(3) = 0 rmdir("./104") = 0 mkdir("./105", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5949 attached , child_tidptr=0x555580316650) = 5949 [pid 5949] set_robust_list(0x555580316660, 24) = 0 [pid 5949] chdir("./105") = 0 [pid 5949] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5949] setpgid(0, 0) = 0 [pid 5949] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5949] write(3, "1000", 4) = 4 [pid 5949] close(3) = 0 [pid 5949] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5949] write(1, "executing program\n", 18executing program ) = 18 [pid 5949] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5949] close(3) = 0 [ 194.554726][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.561037][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [pid 5949] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5949] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5949] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5949] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5949] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5949] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5949] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5949] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5949] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 194.893187][ T1210] usb 1-1: new high-speed USB device number 107 using dummy_hcd [pid 5949] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5949] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5949] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5949] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5949] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5949] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5949] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5949] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5949] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5949] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5949] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5949] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5949] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 195.067187][ T1210] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 195.075871][ T1210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 195.086315][ T1210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 195.095327][ T1210] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5949] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5949] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5949] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5949] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [ 195.141732][ T1210] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 195.150967][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 195.159002][ T1210] usb 1-1: Product: syz [ 195.163198][ T1210] usb 1-1: Manufacturer: syz [pid 5949] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 195.193514][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 195.198769][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 195.204995][ T1210] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 195.210909][ T1210] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5949] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5949] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5949] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [ 195.414398][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 195.420106][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 195.425811][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 195.431474][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 195.437181][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 195.442839][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 195.448537][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 195.454193][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [pid 5949] exit_group(0) = ? [pid 5949] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5949, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- umount2("./105", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./105", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 195.459966][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 195.466007][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 195.471680][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 195.482880][ T9] usb 1-1: USB disconnect, device number 107 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./105/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./105/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./105/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./105") = 0 mkdir("./106", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5950 attached , child_tidptr=0x555580316650) = 5950 [pid 5950] set_robust_list(0x555580316660, 24) = 0 [pid 5950] chdir("./106") = 0 [pid 5950] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5950] setpgid(0, 0) = 0 [pid 5950] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5950] write(3, "1000", 4) = 4 [pid 5950] close(3) = 0 [pid 5950] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5950] write(1, "executing program\n", 18executing program ) = 18 [pid 5950] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5950] close(3) = 0 [pid 5950] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5950] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5950] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5950] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5950] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5950] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5950] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5950] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5950] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 196.203178][ T1210] usb 1-1: new high-speed USB device number 108 using dummy_hcd [pid 5950] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5950] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5950] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5950] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5950] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5950] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5950] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5950] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5950] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5950] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5950] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 196.376360][ T1210] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 196.385334][ T1210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 196.395701][ T1210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 196.404742][ T1210] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5950] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5950] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5950] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5950] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5950] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5950] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5950] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 196.461012][ T1210] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 196.470196][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 196.478348][ T1210] usb 1-1: Product: syz [ 196.482518][ T1210] usb 1-1: Manufacturer: syz [ 196.516299][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 196.521529][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 196.527650][ T1210] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 196.533632][ T1210] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5950] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5950] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5950] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5950] exit_group(0) = ? [ 196.726995][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 196.732680][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 196.738509][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 196.744181][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 196.750136][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 196.755809][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 196.761523][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 196.767184][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [pid 5950] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5950, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./106", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 196.772986][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 196.778650][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 196.784205][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 196.793838][ T9] usb 1-1: USB disconnect, device number 108 openat(AT_FDCWD, "./106", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./106/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./106/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./106/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./106") = 0 mkdir("./107", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5951 attached , child_tidptr=0x555580316650) = 5951 [pid 5951] set_robust_list(0x555580316660, 24) = 0 [pid 5951] chdir("./107") = 0 [pid 5951] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5951] setpgid(0, 0) = 0 [pid 5951] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5951] write(3, "1000", 4) = 4 [pid 5951] close(3) = 0 [pid 5951] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5951] write(1, "executing program\n", 18executing program ) = 18 [pid 5951] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5951] close(3) = 0 [pid 5951] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5951] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5951] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5951] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5951] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5951] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5951] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5951] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5951] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 197.493170][ T1210] usb 1-1: new high-speed USB device number 109 using dummy_hcd [pid 5951] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5951] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5951] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5951] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5951] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5951] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5951] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5951] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5951] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5951] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5951] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 197.666166][ T1210] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 197.674941][ T1210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 197.685186][ T1210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 197.694189][ T1210] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5951] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5951] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5951] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5951] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5951] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5951] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [ 197.750559][ T1210] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 197.759805][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 197.767979][ T1210] usb 1-1: Product: syz [ 197.772150][ T1210] usb 1-1: Manufacturer: syz [pid 5951] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 197.805326][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 197.810565][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 197.816733][ T1210] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 197.822641][ T1210] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5951] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5951] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5951] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5951] exit_group(0) = ? [pid 5951] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5951, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- umount2("./107", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./107", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./107/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./107/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./107/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./107") = 0 mkdir("./108", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555580316650) = 5952 ./strace-static-x86_64: Process 5952 attached [pid 5952] set_robust_list(0x555580316660, 24) = 0 [pid 5952] chdir("./108") = 0 [pid 5952] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5952] setpgid(0, 0) = 0 [pid 5952] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5952] write(3, "1000", 4) = 4 [ 198.016350][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 198.022038][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 198.027786][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 198.033474][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 198.039207][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 198.044896][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 198.050461][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 198.059793][ T1210] usb 1-1: USB disconnect, device number 109 [pid 5952] close(3) = 0 [pid 5952] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5952] write(1, "executing program\n", 18executing program ) = 18 [pid 5952] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5952] close(3) = 0 [pid 5952] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5952] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5952] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5952] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5952] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5952] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5952] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5952] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5952] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 198.593184][ T1210] usb 1-1: new high-speed USB device number 110 using dummy_hcd [pid 5952] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5952] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5952] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5952] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5952] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5952] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5952] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5952] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5952] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5952] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5952] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5952] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 198.776480][ T1210] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 198.785268][ T1210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 198.795554][ T1210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 198.804554][ T1210] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5952] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5952] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5952] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5952] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5952] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5952] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 198.840897][ T1210] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 198.850186][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 198.858402][ T1210] usb 1-1: Product: syz [ 198.862574][ T1210] usb 1-1: Manufacturer: syz [ 198.895045][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 198.900279][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 198.906371][ T1210] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 198.912282][ T1210] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5952] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5952] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5952] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5952] exit_group(0) = ? [ 199.115334][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 199.121011][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 199.126856][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 199.132532][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 199.138469][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 199.144126][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 199.149833][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 199.155499][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [pid 5952] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5952, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- umount2("./108", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./108", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 199.161702][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 199.167369][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 199.172926][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 199.182116][ T9] usb 1-1: USB disconnect, device number 110 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./108/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./108/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./108/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./108") = 0 mkdir("./109", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5953 attached , child_tidptr=0x555580316650) = 5953 [pid 5953] set_robust_list(0x555580316660, 24) = 0 [pid 5953] chdir("./109") = 0 [pid 5953] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5953] setpgid(0, 0) = 0 [pid 5953] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5953] write(3, "1000", 4) = 4 [pid 5953] close(3) = 0 [pid 5953] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5953] write(1, "executing program\n", 18executing program ) = 18 [pid 5953] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5953] close(3) = 0 [pid 5953] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5953] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5953] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5953] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5953] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5953] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5953] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5953] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5953] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 199.883175][ T9] usb 1-1: new high-speed USB device number 111 using dummy_hcd [pid 5953] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5953] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5953] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5953] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5953] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5953] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5953] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5953] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5953] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5953] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5953] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5953] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5953] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 200.066753][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 200.075478][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 200.085633][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 200.094628][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5953] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5953] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5953] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5953] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [ 200.140974][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 200.150177][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 200.158341][ T9] usb 1-1: Product: syz [ 200.162511][ T9] usb 1-1: Manufacturer: syz [pid 5953] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 200.195973][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 200.201190][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 200.207583][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 200.213574][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5953] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5953] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5953] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5953] exit_group(0) = ? [ 200.408163][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 200.413856][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 200.419562][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 200.425392][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 200.431059][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 200.436775][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 200.442600][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 200.448272][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [pid 5953] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5953, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- umount2("./109", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./109", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./109/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./109/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./109/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./109") = 0 mkdir("./110", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5954 attached , child_tidptr=0x555580316650) = 5954 [pid 5954] set_robust_list(0x555580316660, 24) = 0 [pid 5954] chdir("./110") = 0 [pid 5954] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 200.453982][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 200.459653][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 200.468971][ T1210] usb 1-1: USB disconnect, device number 111 [pid 5954] setpgid(0, 0) = 0 [pid 5954] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5954] write(3, "1000", 4) = 4 [pid 5954] close(3) = 0 [pid 5954] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5954] write(1, "executing program\n", 18) = 18 [pid 5954] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5954] close(3) = 0 [pid 5954] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5954] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5954] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5954] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5954] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5954] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5954] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5954] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5954] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 201.063192][ T1210] usb 1-1: new high-speed USB device number 112 using dummy_hcd [pid 5954] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5954] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5954] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5954] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5954] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5954] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5954] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5954] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5954] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5954] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5954] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5954] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5954] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 201.256203][ T1210] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 201.264980][ T1210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 201.275238][ T1210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 201.284230][ T1210] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5954] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5954] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5954] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5954] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5954] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 201.321215][ T1210] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 201.330405][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 201.338549][ T1210] usb 1-1: Product: syz [ 201.342723][ T1210] usb 1-1: Manufacturer: syz [ 201.393000][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 201.398305][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 201.404393][ T1210] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 201.410308][ T1210] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5954] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5954] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5954] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5954] exit_group(0) = ? [ 201.604082][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 201.609753][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 201.615526][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 201.621425][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 201.627236][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 201.632914][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 201.638628][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 201.644286][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [pid 5954] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5954, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- umount2("./110", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./110", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./110/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./110/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 201.649839][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 201.659779][ T1210] usb 1-1: USB disconnect, device number 112 unlink("./110/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./110") = 0 mkdir("./111", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5955 attached , child_tidptr=0x555580316650) = 5955 [pid 5955] set_robust_list(0x555580316660, 24) = 0 [pid 5955] chdir("./111") = 0 [pid 5955] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5955] setpgid(0, 0) = 0 [pid 5955] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5955] write(3, "1000", 4) = 4 [pid 5955] close(3) = 0 [pid 5955] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5955] write(1, "executing program\n", 18executing program ) = 18 [pid 5955] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5955] close(3) = 0 [pid 5955] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5955] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5955] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5955] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5955] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5955] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5955] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5955] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5955] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 202.273283][ T1210] usb 1-1: new high-speed USB device number 113 using dummy_hcd [pid 5955] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5955] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5955] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5955] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5955] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5955] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5955] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5955] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5955] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5955] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5955] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5955] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5955] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 202.476861][ T1210] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 202.485638][ T1210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 202.495991][ T1210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 202.504993][ T1210] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5955] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5955] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5955] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5955] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [ 202.539158][ T1210] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 202.548424][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 202.556620][ T1210] usb 1-1: Product: syz [ 202.560793][ T1210] usb 1-1: Manufacturer: syz [pid 5955] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 202.603944][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 202.609181][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 202.615296][ T1210] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 202.621208][ T1210] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5955] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5955] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5955] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5955] exit_group(0) = ? [ 202.824545][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 202.830254][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 202.836055][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 202.841873][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 202.847531][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 202.853408][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 202.859247][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 202.865064][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [pid 5955] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5955, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./111", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./111", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 202.870731][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 202.876285][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 202.886269][ T9] usb 1-1: USB disconnect, device number 113 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./111/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./111/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./111/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./111") = 0 mkdir("./112", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5956 attached , child_tidptr=0x555580316650) = 5956 [pid 5956] set_robust_list(0x555580316660, 24) = 0 [pid 5956] chdir("./112") = 0 [pid 5956] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5956] setpgid(0, 0) = 0 [pid 5956] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5956] write(3, "1000", 4) = 4 [pid 5956] close(3) = 0 [pid 5956] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5956] write(1, "executing program\n", 18) = 18 [pid 5956] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5956] close(3) = 0 [pid 5956] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5956] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5956] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5956] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5956] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5956] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5956] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5956] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5956] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 203.623207][ T9] usb 1-1: new high-speed USB device number 114 using dummy_hcd [pid 5956] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5956] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5956] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5956] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5956] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5956] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5956] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5956] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5956] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5956] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5956] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5956] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 203.806104][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 203.814821][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 203.824943][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 203.833947][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5956] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5956] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5956] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5956] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5956] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5956] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 203.881047][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 203.890186][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 203.898275][ T9] usb 1-1: Product: syz [ 203.902446][ T9] usb 1-1: Manufacturer: syz [ 203.922765][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 203.928042][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 203.934216][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 203.940125][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5956] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5956] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5956] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5956] exit_group(0) = ? [pid 5956] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5956, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [ 204.124877][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 204.130588][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 204.136426][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 204.142099][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 204.148067][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 204.153888][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 204.159544][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 204.165102][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 umount2("./112", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./112", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 204.175817][ T9] usb 1-1: USB disconnect, device number 114 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./112/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./112/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./112/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./112") = 0 mkdir("./113", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5957 attached , child_tidptr=0x555580316650) = 5957 [pid 5957] set_robust_list(0x555580316660, 24) = 0 [pid 5957] chdir("./113") = 0 [pid 5957] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5957] setpgid(0, 0) = 0 [pid 5957] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5957] write(3, "1000", 4) = 4 [pid 5957] close(3) = 0 [pid 5957] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5957] write(1, "executing program\n", 18executing program ) = 18 [pid 5957] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5957] close(3) = 0 [pid 5957] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5957] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5957] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5957] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5957] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5957] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5957] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5957] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5957] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 204.923192][ T9] usb 1-1: new high-speed USB device number 115 using dummy_hcd [pid 5957] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5957] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5957] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5957] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5957] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5957] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5957] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5957] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5957] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5957] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5957] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5957] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 205.116469][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 205.125176][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 205.135329][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 205.144323][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5957] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5957] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5957] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5957] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5957] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5957] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 205.192106][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 205.201379][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 205.209547][ T9] usb 1-1: Product: syz [ 205.213782][ T9] usb 1-1: Manufacturer: syz [ 205.243747][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 205.248980][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 205.255022][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 205.260936][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5957] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5957] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5957] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [ 205.464498][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 205.470242][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 205.476105][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 205.481967][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 205.487788][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 205.493475][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 205.499287][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 205.504953][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [pid 5957] exit_group(0) = ? [pid 5957] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5957, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- umount2("./113", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./113", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 205.510860][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 205.516515][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 205.522102][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 205.531627][ T9] usb 1-1: USB disconnect, device number 115 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./113/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./113/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./113/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./113") = 0 mkdir("./114", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5958 attached , child_tidptr=0x555580316650) = 5958 [pid 5958] set_robust_list(0x555580316660, 24) = 0 [pid 5958] chdir("./114") = 0 [pid 5958] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5958] setpgid(0, 0) = 0 [pid 5958] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5958] write(3, "1000", 4) = 4 [pid 5958] close(3) = 0 [pid 5958] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5958] write(1, "executing program\n", 18) = 18 [pid 5958] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5958] close(3) = 0 [pid 5958] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5958] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5958] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5958] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5958] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5958] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5958] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5958] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5958] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 206.233178][ T1210] usb 1-1: new high-speed USB device number 116 using dummy_hcd [pid 5958] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5958] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5958] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5958] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5958] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5958] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5958] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5958] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5958] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5958] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5958] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5958] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 206.446530][ T1210] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 206.455323][ T1210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 206.465692][ T1210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 206.474737][ T1210] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5958] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5958] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5958] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5958] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5958] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5958] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 206.530573][ T1210] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 206.539785][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 206.547961][ T1210] usb 1-1: Product: syz [ 206.552126][ T1210] usb 1-1: Manufacturer: syz [ 206.582485][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 206.587826][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 206.594766][ T1210] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 206.600683][ T1210] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5958] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5958] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5958] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5958] exit_group(0) = ? [ 206.783921][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 206.789634][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 206.795358][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 206.801196][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 206.806884][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 206.812636][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 206.818310][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [pid 5958] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5958, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./114", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 206.828412][ T1210] usb 1-1: USB disconnect, device number 116 openat(AT_FDCWD, "./114", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./114/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./114/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./114/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./114") = 0 mkdir("./115", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5959 attached , child_tidptr=0x555580316650) = 5959 [pid 5959] set_robust_list(0x555580316660, 24) = 0 [pid 5959] chdir("./115") = 0 [pid 5959] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5959] setpgid(0, 0) = 0 [pid 5959] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5959] write(3, "1000", 4) = 4 [pid 5959] close(3) = 0 [pid 5959] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5959] write(1, "executing program\n", 18executing program ) = 18 [pid 5959] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5959] close(3) = 0 [pid 5959] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5959] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5959] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5959] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5959] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5959] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5959] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5959] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5959] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 207.553185][ T1210] usb 1-1: new high-speed USB device number 117 using dummy_hcd [pid 5959] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5959] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5959] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5959] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5959] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5959] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5959] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5959] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5959] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5959] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 207.756561][ T1210] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 207.765467][ T1210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 207.775597][ T1210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 207.784608][ T1210] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5959] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5959] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5959] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5959] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5959] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5959] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5959] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5959] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 207.849319][ T1210] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 207.858620][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 207.866699][ T1210] usb 1-1: Product: syz [ 207.870866][ T1210] usb 1-1: Manufacturer: syz [ 207.902994][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 207.908382][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 207.914437][ T1210] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 207.920350][ T1210] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5959] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5959] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5959] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [ 208.103751][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 208.109437][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 208.115311][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 208.121130][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 208.126924][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 208.132798][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 208.138757][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 208.144580][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [pid 5959] exit_group(0) = ? [pid 5959] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5959, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./115", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./115", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 208.150391][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 208.156059][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 208.161923][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 208.167611][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 208.178216][ T9] usb 1-1: USB disconnect, device number 117 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./115/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./115/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./115/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./115") = 0 mkdir("./116", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5960 attached , child_tidptr=0x555580316650) = 5960 [pid 5960] set_robust_list(0x555580316660, 24) = 0 [pid 5960] chdir("./116") = 0 [pid 5960] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5960] setpgid(0, 0) = 0 [pid 5960] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5960] write(3, "1000", 4) = 4 [pid 5960] close(3) = 0 [pid 5960] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5960] write(1, "executing program\n", 18executing program ) = 18 [pid 5960] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5960] close(3) = 0 [pid 5960] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5960] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5960] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5960] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5960] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5960] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5960] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5960] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5960] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 208.893178][ T9] usb 1-1: new high-speed USB device number 118 using dummy_hcd [pid 5960] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5960] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5960] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5960] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5960] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5960] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5960] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5960] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5960] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5960] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5960] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5960] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 209.076556][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 209.085254][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 209.095419][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 209.104435][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5960] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5960] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5960] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5960] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5960] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5960] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 209.160513][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 209.169636][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 209.177659][ T9] usb 1-1: Product: syz [ 209.181832][ T9] usb 1-1: Manufacturer: syz [ 209.214855][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 209.220133][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 209.226155][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 209.232068][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5960] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5960] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5960] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5960] exit_group(0) = ? [pid 5960] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5960, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- umount2("./116", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./116", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./116/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./116/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./116/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 [ 209.425967][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 209.431679][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 209.437395][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 209.443055][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 209.448788][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 209.454468][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 209.464492][ T9] usb 1-1: USB disconnect, device number 118 rmdir("./116") = 0 mkdir("./117", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5961 attached , child_tidptr=0x555580316650) = 5961 [pid 5961] set_robust_list(0x555580316660, 24) = 0 [pid 5961] chdir("./117") = 0 [pid 5961] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5961] setpgid(0, 0) = 0 [pid 5961] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5961] write(3, "1000", 4) = 4 [pid 5961] close(3) = 0 [pid 5961] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5961] write(1, "executing program\n", 18executing program ) = 18 [pid 5961] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5961] close(3) = 0 [pid 5961] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5961] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5961] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5961] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5961] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5961] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5961] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5961] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5961] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 210.063181][ T1210] usb 1-1: new high-speed USB device number 119 using dummy_hcd [pid 5961] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5961] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5961] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5961] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5961] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5961] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5961] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5961] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5961] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5961] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5961] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5961] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5961] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 210.256383][ T1210] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 210.265246][ T1210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 210.275639][ T1210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 210.284648][ T1210] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5961] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5961] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5961] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5961] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5961] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 210.331080][ T1210] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 210.340780][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 210.348816][ T1210] usb 1-1: Product: syz [ 210.352982][ T1210] usb 1-1: Manufacturer: syz [ 210.383037][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 210.388389][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 210.394532][ T1210] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 210.400460][ T1210] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5961] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5961] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5961] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [ 210.593865][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 210.599564][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 210.605273][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 210.610932][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 210.616774][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 210.622602][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 210.628266][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 210.633978][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [pid 5961] exit_group(0) = ? [pid 5961] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5961, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- umount2("./117", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./117", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./117/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 210.639644][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 210.650682][ T9] usb 1-1: USB disconnect, device number 119 newfstatat(AT_FDCWD, "./117/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./117/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./117") = 0 mkdir("./118", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5962 attached , child_tidptr=0x555580316650) = 5962 [pid 5962] set_robust_list(0x555580316660, 24) = 0 [pid 5962] chdir("./118") = 0 [pid 5962] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5962] setpgid(0, 0) = 0 [pid 5962] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5962] write(3, "1000", 4) = 4 [pid 5962] close(3) = 0 [pid 5962] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5962] write(1, "executing program\n", 18executing program ) = 18 [pid 5962] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5962] close(3) = 0 [pid 5962] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5962] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5962] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5962] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5962] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5962] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5962] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5962] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5962] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 211.333188][ T9] usb 1-1: new high-speed USB device number 120 using dummy_hcd [pid 5962] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5962] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5962] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5962] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5962] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5962] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5962] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5962] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5962] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5962] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5962] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5962] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 211.516702][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 211.525449][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 211.535597][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 211.544604][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5962] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5962] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5962] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5962] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5962] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5962] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 211.590693][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 211.599901][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 211.607971][ T9] usb 1-1: Product: syz [ 211.612135][ T9] usb 1-1: Manufacturer: syz [ 211.643791][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 211.649057][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 211.655086][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 211.661009][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5962] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5962] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5962] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5962] exit_group(0) = ? [ 211.864518][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 211.870209][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 211.876060][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 211.881733][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 211.887728][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 211.893394][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 211.899368][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 211.905044][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [pid 5962] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5962, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- umount2("./118", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./118", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 211.910607][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 211.920135][ T9] usb 1-1: USB disconnect, device number 120 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./118/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./118/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./118/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./118") = 0 mkdir("./119", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5963 attached , child_tidptr=0x555580316650) = 5963 [pid 5963] set_robust_list(0x555580316660, 24) = 0 [pid 5963] chdir("./119") = 0 [pid 5963] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5963] setpgid(0, 0) = 0 [pid 5963] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5963] write(3, "1000", 4) = 4 [pid 5963] close(3) = 0 [pid 5963] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5963] write(1, "executing program\n", 18) = 18 [pid 5963] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5963] close(3) = 0 [pid 5963] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5963] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5963] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5963] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5963] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5963] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5963] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5963] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5963] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 212.613177][ T1210] usb 1-1: new high-speed USB device number 121 using dummy_hcd [pid 5963] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5963] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5963] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5963] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5963] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5963] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5963] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5963] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5963] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5963] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5963] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 212.787668][ T1210] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 212.796737][ T1210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 212.807017][ T1210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 212.816031][ T1210] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5963] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5963] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5963] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5963] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5963] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5963] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5963] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 212.884006][ T1210] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 212.893251][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 212.901227][ T1210] usb 1-1: Product: syz [ 212.905439][ T1210] usb 1-1: Manufacturer: syz [ 212.947864][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 212.953196][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 212.959175][ T1210] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 212.965138][ T1210] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5963] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5963] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5963] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5963] exit_group(0) = ? [pid 5963] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5963, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- umount2("./119", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./119", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./119/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./119/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 213.159031][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 213.164727][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 213.170525][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 213.176575][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 213.182251][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 213.191260][ C1] cdc_wdm 1-1:1.0: Unexpected error -71 [ 213.191501][ T9] usb 1-1: USB disconnect, device number 121 unlink("./119/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./119") = 0 mkdir("./120", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5964 attached , child_tidptr=0x555580316650) = 5964 [pid 5964] set_robust_list(0x555580316660, 24) = 0 [pid 5964] chdir("./120") = 0 [pid 5964] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5964] setpgid(0, 0) = 0 [pid 5964] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5964] write(3, "1000", 4) = 4 [pid 5964] close(3) = 0 [pid 5964] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5964] write(1, "executing program\n", 18executing program ) = 18 [pid 5964] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5964] close(3) = 0 [pid 5964] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5964] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5964] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5964] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5964] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5964] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5964] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5964] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5964] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 213.873179][ T1210] usb 1-1: new high-speed USB device number 122 using dummy_hcd [pid 5964] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5964] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5964] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5964] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5964] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5964] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5964] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5964] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5964] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5964] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5964] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5964] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5964] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 214.047268][ T1210] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 214.056043][ T1210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 214.066315][ T1210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 214.075319][ T1210] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5964] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5964] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5964] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5964] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5964] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 214.110126][ T1210] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 214.119411][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 214.127644][ T1210] usb 1-1: Product: syz [ 214.131832][ T1210] usb 1-1: Manufacturer: syz [ 214.161804][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 214.167197][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 214.173211][ T1210] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 214.179214][ T1210] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5964] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5964] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5964] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5964] exit_group(0) = ? [ 214.362365][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 214.368091][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 214.373840][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 214.379499][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 214.385444][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 214.391130][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 214.397061][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 214.402735][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [pid 5964] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5964, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- umount2("./120", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./120", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 214.408294][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 214.418216][ T9] usb 1-1: USB disconnect, device number 122 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./120/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./120/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./120/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./120") = 0 mkdir("./121", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5965 attached , child_tidptr=0x555580316650) = 5965 [pid 5965] set_robust_list(0x555580316660, 24) = 0 [pid 5965] chdir("./121") = 0 [pid 5965] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5965] setpgid(0, 0) = 0 [pid 5965] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5965] write(3, "1000", 4) = 4 [pid 5965] close(3) = 0 [pid 5965] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5965] write(1, "executing program\n", 18executing program ) = 18 [pid 5965] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5965] close(3) = 0 [pid 5965] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5965] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5965] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5965] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5965] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5965] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5965] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5965] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5965] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 215.093195][ T1210] usb 1-1: new high-speed USB device number 123 using dummy_hcd [pid 5965] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5965] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5965] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5965] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5965] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5965] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5965] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5965] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5965] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5965] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5965] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 215.276296][ T1210] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 215.285069][ T1210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 215.295306][ T1210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 215.304294][ T1210] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5965] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5965] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5965] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5965] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5965] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5965] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [ 215.360683][ T1210] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 215.369886][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 215.378039][ T1210] usb 1-1: Product: syz [ 215.382210][ T1210] usb 1-1: Manufacturer: syz [pid 5965] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 215.414908][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 215.420140][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 215.426816][ T1210] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 215.432735][ T1210] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5965] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5965] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5965] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5965] exit_group(0) = ? [ 215.626164][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 215.631859][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 215.637573][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 215.643258][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 215.648986][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 215.654647][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 215.660376][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 215.666047][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [pid 5965] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5965, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- umount2("./121", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./121", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./121/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./121/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./121/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 [ 215.671606][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 215.681553][ T9] usb 1-1: USB disconnect, device number 123 close(3) = 0 rmdir("./121") = 0 mkdir("./122", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5966 attached , child_tidptr=0x555580316650) = 5966 [pid 5966] set_robust_list(0x555580316660, 24) = 0 [pid 5966] chdir("./122") = 0 [pid 5966] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5966] setpgid(0, 0) = 0 [pid 5966] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5966] write(3, "1000", 4) = 4 [pid 5966] close(3) = 0 [pid 5966] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 5966] write(1, "executing program\n", 18) = 18 [pid 5966] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5966] close(3) = 0 [pid 5966] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5966] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5966] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5966] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5966] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5966] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5966] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5966] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5966] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 216.273185][ T9] usb 1-1: new high-speed USB device number 124 using dummy_hcd [pid 5966] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5966] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5966] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5966] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5966] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5966] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5966] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5966] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5966] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [ 216.466820][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 216.475585][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 216.485712][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 216.494747][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5966] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5966] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5966] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5966] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5966] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5966] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5966] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5966] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5966] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 216.552022][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 216.561195][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 216.569242][ T9] usb 1-1: Product: syz [ 216.573471][ T9] usb 1-1: Manufacturer: syz [ 216.606763][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 216.611995][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 216.618121][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 216.624086][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5966] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5966] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5966] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5966] exit_group(0) = ? [ 216.817503][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 216.823201][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 216.828905][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 216.834568][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 216.840264][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 216.845925][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 216.851641][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 216.857328][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [pid 5966] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5966, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./122", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./122", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./122/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./122/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./122/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./122") = 0 mkdir("./123", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5967 attached , child_tidptr=0x555580316650) = 5967 [ 216.863125][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 216.868799][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 216.878826][ T9] usb 1-1: USB disconnect, device number 124 [pid 5967] set_robust_list(0x555580316660, 24) = 0 [pid 5967] chdir("./123") = 0 [pid 5967] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5967] setpgid(0, 0) = 0 [pid 5967] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5967] write(3, "1000", 4) = 4 [pid 5967] close(3) = 0 [pid 5967] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5967] write(1, "executing program\n", 18executing program ) = 18 [pid 5967] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5967] close(3) = 0 [pid 5967] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5967] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5967] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5967] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5967] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5967] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5967] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5967] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5967] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 217.483174][ T1210] usb 1-1: new high-speed USB device number 125 using dummy_hcd [pid 5967] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5967] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5967] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5967] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5967] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5967] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5967] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5967] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5967] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5967] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5967] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5967] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5967] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 217.687110][ T1210] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 217.696162][ T1210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 217.706277][ T1210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 217.715556][ T1210] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5967] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5967] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5967] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5967] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5967] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 217.730413][ T1210] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 217.739631][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 217.747670][ T1210] usb 1-1: Product: syz [ 217.751846][ T1210] usb 1-1: Manufacturer: syz [ 217.781954][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 217.787227][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 217.793042][ T1210] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 217.799024][ T1210] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5967] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5967] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [ 217.992519][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 217.998222][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 218.003925][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 218.009775][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 218.015455][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 218.021191][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 218.026874][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 218.032625][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [pid 5967] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5967] exit_group(0) = ? [pid 5967] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5967, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./123", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./123", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 [ 218.038301][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 218.048441][ T1210] usb 1-1: USB disconnect, device number 125 umount2("./123/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./123/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./123/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./123") = 0 mkdir("./124", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5968 attached , child_tidptr=0x555580316650) = 5968 [pid 5968] set_robust_list(0x555580316660, 24) = 0 [pid 5968] chdir("./124") = 0 [pid 5968] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5968] setpgid(0, 0) = 0 [pid 5968] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5968] write(3, "1000", 4) = 4 [pid 5968] close(3) = 0 [pid 5968] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5968] write(1, "executing program\n", 18) = 18 [pid 5968] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5968] close(3) = 0 [pid 5968] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5968] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5968] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5968] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5968] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5968] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5968] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5968] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5968] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 218.743186][ T1210] usb 1-1: new high-speed USB device number 126 using dummy_hcd [pid 5968] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5968] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5968] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5968] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5968] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5968] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5968] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5968] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5968] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5968] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5968] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5968] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 218.926358][ T1210] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 218.935146][ T1210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 218.945407][ T1210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 218.954404][ T1210] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5968] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5968] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5968] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5968] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5968] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [ 219.010512][ T1210] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 219.019606][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 219.027799][ T1210] usb 1-1: Product: syz [ 219.031981][ T1210] usb 1-1: Manufacturer: syz [pid 5968] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 219.103017][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 219.108305][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 219.114444][ T1210] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 219.120707][ T1210] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5968] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5968] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5968] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5968] exit_group(0) = ? [ 219.313817][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 219.319510][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 219.325218][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 219.331053][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 219.337003][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 219.342914][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 219.348586][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 219.357661][ C1] cdc_wdm 1-1:1.0: Unexpected error -71 [pid 5968] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5968, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- umount2("./124", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./124", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./124/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./124/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./124/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 [ 219.362916][ T9] usb 1-1: USB disconnect, device number 126 close(3) = 0 rmdir("./124") = 0 mkdir("./125", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5969 attached , child_tidptr=0x555580316650) = 5969 [pid 5969] set_robust_list(0x555580316660, 24) = 0 [pid 5969] chdir("./125") = 0 [pid 5969] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5969] setpgid(0, 0) = 0 [pid 5969] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5969] write(3, "1000", 4) = 4 [pid 5969] close(3) = 0 [pid 5969] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5969] write(1, "executing program\n", 18) = 18 [pid 5969] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5969] close(3) = 0 [pid 5969] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5969] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5969] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5969] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5969] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5969] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5969] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5969] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5969] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 219.953192][ T9] usb 1-1: new high-speed USB device number 127 using dummy_hcd [pid 5969] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5969] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5969] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5969] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5969] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5969] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5969] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5969] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5969] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5969] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5969] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5969] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5969] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 220.127094][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 220.135812][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 220.146187][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 220.155274][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5969] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5969] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5969] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5969] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5969] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 220.199960][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 220.209079][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 220.217117][ T9] usb 1-1: Product: syz [ 220.221288][ T9] usb 1-1: Manufacturer: syz [ 220.254324][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 220.259625][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 220.265694][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 220.271604][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5969] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5969] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5969] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5969] exit_group(0) = ? [ 220.474654][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 220.480358][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 220.486063][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 220.491898][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 220.497566][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 220.503285][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 220.509116][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 220.514796][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [pid 5969] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5969, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- umount2("./125", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./125", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 220.520537][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 220.526213][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 220.535553][ T1210] usb 1-1: USB disconnect, device number 127 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./125/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./125/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./125/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./125") = 0 mkdir("./126", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5970 attached , child_tidptr=0x555580316650) = 5970 [pid 5970] set_robust_list(0x555580316660, 24) = 0 [pid 5970] chdir("./126") = 0 [pid 5970] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5970] setpgid(0, 0) = 0 [pid 5970] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5970] write(3, "1000", 4) = 4 [pid 5970] close(3) = 0 [pid 5970] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5970] write(1, "executing program\n", 18) = 18 [pid 5970] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5970] close(3) = 0 [pid 5970] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5970] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5970] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5970] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5970] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5970] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5970] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5970] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5970] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 221.263197][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [pid 5970] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5970] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5970] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5970] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5970] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5970] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5970] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5970] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5970] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5970] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5970] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5970] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 221.437002][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 221.445695][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 221.455847][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 221.464854][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5970] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5970] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5970] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5970] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5970] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5970] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 221.501095][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 221.510251][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 221.518562][ T9] usb 1-1: Product: syz [ 221.522739][ T9] usb 1-1: Manufacturer: syz [ 221.552321][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 221.557651][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 221.563778][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 221.569690][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5970] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5970] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5970] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5970] exit_group(0) = ? [pid 5970] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5970, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- umount2("./126", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./126", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./126/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./126/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./126/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 [ 221.764076][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 221.769773][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 221.775499][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 221.781180][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 221.786898][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 221.792570][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 221.798129][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 221.807725][ T9] usb 1-1: USB disconnect, device number 2 close(3) = 0 rmdir("./126") = 0 mkdir("./127", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5971 attached , child_tidptr=0x555580316650) = 5971 [pid 5971] set_robust_list(0x555580316660, 24) = 0 [pid 5971] chdir("./127") = 0 [pid 5971] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5971] setpgid(0, 0) = 0 [pid 5971] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5971] write(3, "1000", 4) = 4 [pid 5971] close(3) = 0 [pid 5971] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5971] write(1, "executing program\n", 18) = 18 [pid 5971] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5971] close(3) = 0 [pid 5971] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5971] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5971] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5971] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5971] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5971] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5971] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5971] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5971] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 222.393197][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [pid 5971] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5971] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5971] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5971] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5971] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5971] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5971] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5971] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5971] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5971] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 222.587030][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 222.595721][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 222.605865][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 222.614912][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5971] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5971] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5971] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5971] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5971] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5971] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5971] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5971] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 222.682307][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 222.691433][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 222.699478][ T9] usb 1-1: Product: syz [ 222.703685][ T9] usb 1-1: Manufacturer: syz [ 222.737123][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 222.742391][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 222.748510][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 222.754481][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5971] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5971] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5971] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5971] exit_group(0) = ? [ 222.948345][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 222.954034][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 222.959765][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 222.965589][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 222.971397][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 222.977199][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 222.983001][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 222.988789][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [pid 5971] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5971, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- umount2("./127", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./127", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 222.994595][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 223.000265][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 223.006160][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 223.011835][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 223.024188][ T9] usb 1-1: USB disconnect, device number 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./127/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./127/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./127/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./127") = 0 mkdir("./128", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5972 attached , child_tidptr=0x555580316650) = 5972 [pid 5972] set_robust_list(0x555580316660, 24) = 0 [pid 5972] chdir("./128") = 0 [pid 5972] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5972] setpgid(0, 0) = 0 [pid 5972] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5972] write(3, "1000", 4) = 4 [pid 5972] close(3) = 0 [pid 5972] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5972] write(1, "executing program\n", 18) = 18 [pid 5972] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5972] close(3) = 0 [pid 5972] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5972] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5972] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5972] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5972] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5972] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5972] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5972] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5972] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 223.783182][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [pid 5972] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5972] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5972] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5972] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5972] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5972] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5972] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5972] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5972] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5972] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5972] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5972] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 223.956768][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 223.965490][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 223.975659][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 223.984653][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5972] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5972] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5972] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5972] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5972] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5972] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 224.030987][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 224.040182][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 224.048350][ T9] usb 1-1: Product: syz [ 224.052526][ T9] usb 1-1: Manufacturer: syz [ 224.092444][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 224.097803][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 224.103809][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 224.109723][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5972] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5972] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5972] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5972] exit_group(0) = ? [ 224.293538][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 224.299269][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 224.305157][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 224.310839][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 224.316705][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 224.322398][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 224.328182][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 224.333847][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [pid 5972] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5972, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- umount2("./128", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./128", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./128/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./128/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./128/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./128") = 0 mkdir("./129", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5973 attached [pid 5973] set_robust_list(0x555580316660, 24 [pid 5832] <... clone resumed>, child_tidptr=0x555580316650) = 5973 [pid 5973] <... set_robust_list resumed>) = 0 [pid 5973] chdir("./129") = 0 [pid 5973] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 224.339400][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 224.349084][ T9] usb 1-1: USB disconnect, device number 4 [pid 5973] setpgid(0, 0) = 0 [pid 5973] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5973] write(3, "1000", 4) = 4 [pid 5973] close(3) = 0 [pid 5973] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5973] write(1, "executing program\n", 18) = 18 [pid 5973] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5973] close(3) = 0 [pid 5973] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5973] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5973] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5973] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5973] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5973] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5973] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5973] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5973] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 224.923179][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [pid 5973] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5973] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5973] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5973] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5973] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5973] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5973] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5973] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5973] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5973] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5973] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5973] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 225.106623][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 225.115324][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 225.125642][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 225.134684][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5973] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5973] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5973] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5973] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5973] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5973] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 225.178895][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 225.188086][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 225.196230][ T9] usb 1-1: Product: syz [ 225.200488][ T9] usb 1-1: Manufacturer: syz [ 225.250445][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 225.255802][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 225.261607][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 225.268731][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5973] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5973] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5973] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5973] exit_group(0) = ? [ 225.460829][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 225.466533][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 225.472235][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 225.477909][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 225.483670][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 225.489353][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 225.495107][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 225.500940][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [pid 5973] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5973, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- umount2("./129", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./129", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./129/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./129/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./129/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./129") = 0 mkdir("./130", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5975 attached [pid 5975] set_robust_list(0x555580316660, 24 [pid 5832] <... clone resumed>, child_tidptr=0x555580316650) = 5975 [pid 5975] <... set_robust_list resumed>) = 0 [pid 5975] chdir("./130") = 0 [ 225.506605][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 225.512160][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 225.522147][ T1210] usb 1-1: USB disconnect, device number 5 [pid 5975] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5975] setpgid(0, 0) = 0 [pid 5975] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5975] write(3, "1000", 4) = 4 [pid 5975] close(3) = 0 [pid 5975] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5975] write(1, "executing program\n", 18executing program ) = 18 [pid 5975] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5975] close(3) = 0 [pid 5975] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5975] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5975] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5975] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5975] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5975] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5975] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5975] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5975] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 226.083170][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [pid 5975] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5975] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5975] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5975] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5975] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5975] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5975] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5975] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5975] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5975] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5975] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5975] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5975] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 226.256870][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 226.265591][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 226.275733][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 226.284732][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5975] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5975] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5975] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5975] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5975] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 226.329445][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 226.338583][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 226.346624][ T9] usb 1-1: Product: syz [ 226.350799][ T9] usb 1-1: Manufacturer: syz [ 226.384379][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 226.389659][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 226.395971][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 226.401891][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5975] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5975] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5975] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5975] exit_group(0) = ? [ 226.605092][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 226.610821][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 226.616523][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 226.622360][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 226.628037][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 226.633736][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 226.639409][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 226.645124][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [pid 5975] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5975, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./130", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./130", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 226.650799][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 226.660744][ T1210] usb 1-1: USB disconnect, device number 6 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./130/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./130/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./130/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./130") = 0 mkdir("./131", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5979 attached , child_tidptr=0x555580316650) = 5979 [pid 5979] set_robust_list(0x555580316660, 24) = 0 [pid 5979] chdir("./131") = 0 [pid 5979] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5979] setpgid(0, 0) = 0 [pid 5979] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5979] write(3, "1000", 4) = 4 [pid 5979] close(3) = 0 [pid 5979] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5979] write(1, "executing program\n", 18) = 18 [pid 5979] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5979] close(3) = 0 [pid 5979] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5979] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5979] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5979] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5979] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5979] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5979] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5979] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5979] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 227.383215][ T1210] usb 1-1: new high-speed USB device number 7 using dummy_hcd [pid 5979] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5979] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5979] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5979] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5979] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5979] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5979] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5979] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5979] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5979] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 227.586758][ T1210] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 227.595580][ T1210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 227.605894][ T1210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 227.614934][ T1210] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5979] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5979] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5979] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5979] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5979] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5979] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5979] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5979] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 227.672126][ T1210] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 227.681515][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 227.689553][ T1210] usb 1-1: Product: syz [ 227.693749][ T1210] usb 1-1: Manufacturer: syz [ 227.724539][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 227.729811][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 227.735889][ T1210] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 227.741811][ T1210] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5979] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5979] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5979] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5979] exit_group(0) = ? [ 227.934787][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 227.940502][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 227.946239][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 227.952119][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 227.958161][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 227.964113][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 227.969800][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 227.975648][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [pid 5979] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5979, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./131", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./131", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 227.981318][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 227.986906][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 227.996347][ T1210] usb 1-1: USB disconnect, device number 7 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./131/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./131/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./131/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./131") = 0 mkdir("./132", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5982 attached , child_tidptr=0x555580316650) = 5982 [pid 5982] set_robust_list(0x555580316660, 24) = 0 [pid 5982] chdir("./132") = 0 [pid 5982] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5982] setpgid(0, 0) = 0 [pid 5982] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5982] write(3, "1000", 4) = 4 [pid 5982] close(3) = 0 [pid 5982] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 5982] write(1, "executing program\n", 18) = 18 [pid 5982] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5982] close(3) = 0 [pid 5982] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5982] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5982] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5982] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5982] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5982] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5982] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5982] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5982] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 228.763202][ T1210] usb 1-1: new high-speed USB device number 8 using dummy_hcd [pid 5982] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5982] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5982] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5982] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5982] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5982] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5982] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5982] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5982] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5982] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5982] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5982] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5982] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 228.946369][ T1210] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 228.955136][ T1210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 228.965483][ T1210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 228.974505][ T1210] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5982] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5982] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5982] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5982] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5982] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 229.019908][ T1210] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 229.029171][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 229.037193][ T1210] usb 1-1: Product: syz [ 229.041360][ T1210] usb 1-1: Manufacturer: syz [ 229.073513][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 229.078756][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 229.084757][ T1210] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 229.090678][ T1210] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5982] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5982] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5982] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5982] exit_group(0) = ? [ 229.284481][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 229.290208][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 229.296010][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 229.302011][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 229.307859][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 229.313680][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 229.319504][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 229.325416][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [pid 5982] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5982, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- umount2("./132", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./132", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./132/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./132/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./132/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./132") = 0 mkdir("./133", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5983 attached , child_tidptr=0x555580316650) = 5983 [pid 5983] set_robust_list(0x555580316660, 24) = 0 [pid 5983] chdir("./133") = 0 [pid 5983] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 229.331098][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 229.339978][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 229.347046][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -EPIPE [ 229.351292][ T1210] usb 1-1: USB disconnect, device number 8 [pid 5983] setpgid(0, 0) = 0 [pid 5983] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5983] write(3, "1000", 4) = 4 [pid 5983] close(3) = 0 [pid 5983] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5983] write(1, "executing program\n", 18executing program ) = 18 [pid 5983] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5983] close(3) = 0 [pid 5983] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5983] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5983] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5983] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5983] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5983] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5983] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5983] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5983] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 229.883185][ T1210] usb 1-1: new high-speed USB device number 9 using dummy_hcd [pid 5983] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5983] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5983] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5983] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5983] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5983] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5983] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5983] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5983] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5983] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5983] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 230.046856][ T1210] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 230.055644][ T1210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 230.065917][ T1210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 230.074977][ T1210] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5983] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5983] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5983] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5983] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5983] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5983] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [ 230.139875][ T1210] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 230.149168][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 230.157282][ T1210] usb 1-1: Product: syz [ 230.161452][ T1210] usb 1-1: Manufacturer: syz [pid 5983] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 230.204628][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 230.209872][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 230.215945][ T1210] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 230.221861][ T1210] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5983] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5983] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5983] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5983] exit_group(0) = ? [pid 5983] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5983, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- umount2("./133", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./133", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./133/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./133/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./133/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./133") = 0 mkdir("./134", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5984 attached , child_tidptr=0x555580316650) = 5984 [pid 5984] set_robust_list(0x555580316660, 24) = 0 [ 230.425551][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 230.431257][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 230.437114][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 230.443321][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 230.449019][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 230.457900][ C1] cdc_wdm 1-1:1.0: Unexpected error -71 [ 230.458257][ T9] usb 1-1: USB disconnect, device number 9 [pid 5984] chdir("./134") = 0 [pid 5984] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5984] setpgid(0, 0) = 0 [pid 5984] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5984] write(3, "1000", 4) = 4 [pid 5984] close(3) = 0 [pid 5984] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5984] write(1, "executing program\n", 18) = 18 [pid 5984] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5984] close(3) = 0 [pid 5984] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5984] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5984] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5984] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5984] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5984] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5984] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5984] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5984] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 231.043228][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [pid 5984] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5984] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5984] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5984] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5984] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5984] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5984] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5984] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5984] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5984] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5984] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5984] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 231.246888][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 231.255609][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 231.265747][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 231.274757][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5984] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5984] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5984] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5984] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5984] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5984] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 231.342003][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 231.351136][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 231.359194][ T9] usb 1-1: Product: syz [ 231.363395][ T9] usb 1-1: Manufacturer: syz [ 231.406952][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 231.412196][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 231.418367][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 231.424354][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5984] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5984] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5984] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5984] exit_group(0) = ? [ 231.617884][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 231.623597][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 231.629298][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 231.634962][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 231.640678][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 231.646500][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 231.652175][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [pid 5984] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5984, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- umount2("./134", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./134", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./134/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./134/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 231.663826][ T1210] usb 1-1: USB disconnect, device number 10 unlink("./134/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./134") = 0 mkdir("./135", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5985 attached , child_tidptr=0x555580316650) = 5985 [pid 5985] set_robust_list(0x555580316660, 24) = 0 [pid 5985] chdir("./135") = 0 [pid 5985] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5985] setpgid(0, 0) = 0 [pid 5985] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5985] write(3, "1000", 4) = 4 [pid 5985] close(3) = 0 [pid 5985] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5985] write(1, "executing program\n", 18) = 18 [pid 5985] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5985] close(3) = 0 [pid 5985] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5985] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5985] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5985] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5985] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5985] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5985] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5985] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5985] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 232.283171][ T1210] usb 1-1: new high-speed USB device number 11 using dummy_hcd [pid 5985] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5985] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5985] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5985] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5985] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5985] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5985] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5985] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5985] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5985] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5985] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5985] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5985] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 232.456478][ T1210] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 232.465441][ T1210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 232.475723][ T1210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 232.484733][ T1210] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5985] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5985] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5985] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5985] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5985] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 232.531830][ T1210] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 232.541238][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 232.549426][ T1210] usb 1-1: Product: syz [ 232.553630][ T1210] usb 1-1: Manufacturer: syz [ 232.578004][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 232.583334][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 232.589248][ T1210] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 232.595224][ T1210] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5985] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5985] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5985] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5985] exit_group(0) = ? [ 232.788072][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 232.793798][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 232.799654][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 232.805554][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 232.811396][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 232.817418][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 232.823109][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 232.828946][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [pid 5985] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5985, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- umount2("./135", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./135", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 [ 232.834617][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 232.840181][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 232.849570][ T9] usb 1-1: USB disconnect, device number 11 umount2("./135/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./135/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./135/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./135") = 0 mkdir("./136", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5986 attached , child_tidptr=0x555580316650) = 5986 [pid 5986] set_robust_list(0x555580316660, 24) = 0 [pid 5986] chdir("./136") = 0 [pid 5986] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5986] setpgid(0, 0) = 0 [pid 5986] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5986] write(3, "1000", 4) = 4 [pid 5986] close(3) = 0 [pid 5986] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5986] write(1, "executing program\n", 18executing program ) = 18 [pid 5986] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5986] close(3) = 0 [pid 5986] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5986] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5986] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5986] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5986] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5986] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5986] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5986] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5986] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 233.523207][ T1210] usb 1-1: new high-speed USB device number 12 using dummy_hcd [pid 5986] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5986] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5986] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5986] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5986] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5986] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5986] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5986] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5986] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5986] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5986] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5986] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5986] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 233.708015][ T1210] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 233.716881][ T1210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 233.727164][ T1210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 233.736157][ T1210] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5986] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5986] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5986] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5986] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5986] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 233.771244][ T1210] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 233.780426][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 233.788677][ T1210] usb 1-1: Product: syz [ 233.792859][ T1210] usb 1-1: Manufacturer: syz [ 233.826634][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 233.831876][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 233.838041][ T1210] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 233.843997][ T1210] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5986] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5986] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5986] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5986] exit_group(0) = ? [ 234.046920][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 234.052636][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 234.058504][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 234.064184][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 234.069989][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 234.075674][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 234.081452][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 234.087116][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [pid 5986] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5986, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- umount2("./136", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 234.093291][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 234.098963][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 234.104529][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 234.114606][ T1210] usb 1-1: USB disconnect, device number 12 openat(AT_FDCWD, "./136", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./136/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./136/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./136/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./136") = 0 mkdir("./137", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5987 attached , child_tidptr=0x555580316650) = 5987 [pid 5987] set_robust_list(0x555580316660, 24) = 0 [pid 5987] chdir("./137") = 0 [pid 5987] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5987] setpgid(0, 0) = 0 [pid 5987] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5987] write(3, "1000", 4) = 4 [pid 5987] close(3) = 0 [pid 5987] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5987] write(1, "executing program\n", 18) = 18 [pid 5987] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5987] close(3) = 0 [pid 5987] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5987] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5987] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5987] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5987] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5987] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5987] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5987] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5987] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 234.843184][ T1210] usb 1-1: new high-speed USB device number 13 using dummy_hcd [pid 5987] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5987] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5987] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5987] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5987] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5987] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5987] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5987] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5987] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5987] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5987] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5987] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5987] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 235.036007][ T1210] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 235.044904][ T1210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 235.055164][ T1210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 235.064171][ T1210] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5987] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5987] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5987] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5987] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5987] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 235.110857][ T1210] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 235.120137][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 235.128330][ T1210] usb 1-1: Product: syz [ 235.132501][ T1210] usb 1-1: Manufacturer: syz [ 235.182762][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 235.188031][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 235.194106][ T1210] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 235.200021][ T1210] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5987] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5987] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5987] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5987] exit_group(0) = ? [pid 5987] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5987, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- umount2("./137", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./137", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./137/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 235.393579][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 235.399276][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 235.404976][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 235.410815][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 235.416493][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 235.422053][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 235.432368][ T1210] usb 1-1: USB disconnect, device number 13 newfstatat(AT_FDCWD, "./137/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./137/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./137") = 0 mkdir("./138", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5988 attached , child_tidptr=0x555580316650) = 5988 [pid 5988] set_robust_list(0x555580316660, 24) = 0 [pid 5988] chdir("./138") = 0 [pid 5988] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5988] setpgid(0, 0) = 0 [pid 5988] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5988] write(3, "1000", 4) = 4 [pid 5988] close(3) = 0 [pid 5988] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5988] write(1, "executing program\n", 18) = 18 [pid 5988] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5988] close(3) = 0 [pid 5988] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5988] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5988] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5988] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5988] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5988] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5988] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5988] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5988] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 236.093183][ T1210] usb 1-1: new high-speed USB device number 14 using dummy_hcd [pid 5988] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5988] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5988] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5988] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5988] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5988] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5988] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5988] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5988] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5988] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5988] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5988] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5988] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 236.296296][ T1210] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 236.305170][ T1210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 236.315441][ T1210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 236.324455][ T1210] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5988] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5988] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5988] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5988] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5988] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 236.371072][ T1210] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 236.380339][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 236.388561][ T1210] usb 1-1: Product: syz [ 236.392743][ T1210] usb 1-1: Manufacturer: syz [ 236.426400][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 236.431638][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 236.437657][ T1210] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 236.443629][ T1210] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5988] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5988] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5988] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5988] exit_group(0) = ? [ 236.647127][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 236.652820][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 236.658619][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 236.664650][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 236.670480][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 236.676533][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 236.682200][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 236.687764][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [pid 5988] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5988, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- umount2("./138", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./138", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./138/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./138/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./138/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./138") = 0 mkdir("./139", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5989 attached , child_tidptr=0x555580316650) = 5989 [pid 5989] set_robust_list(0x555580316660, 24) = 0 [pid 5989] chdir("./139") = 0 [pid 5989] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 236.697166][ T9] usb 1-1: USB disconnect, device number 14 [pid 5989] setpgid(0, 0) = 0 [pid 5989] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5989] write(3, "1000", 4) = 4 [pid 5989] close(3) = 0 [pid 5989] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5989] write(1, "executing program\n", 18) = 18 executing program [pid 5989] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5989] close(3) = 0 [pid 5989] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5989] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5989] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5989] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5989] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5989] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5989] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5989] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5989] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 237.303223][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [pid 5989] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5989] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5989] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5989] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5989] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5989] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5989] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5989] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5989] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5989] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5989] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 237.487002][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 237.495721][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 237.505886][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 237.514885][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5989] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5989] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5989] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5989] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5989] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5989] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5989] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 237.570088][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 237.579201][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 237.587250][ T9] usb 1-1: Product: syz [ 237.591416][ T9] usb 1-1: Manufacturer: syz [ 237.624579][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 237.629849][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 237.635978][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 237.641906][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5989] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5989] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5989] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5989] exit_group(0) = ? [ 237.845209][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 237.850918][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 237.856633][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 237.862460][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 237.868118][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 237.873821][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 237.879667][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 237.885337][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [pid 5989] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5989, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./139", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./139", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./139/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./139/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./139/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./139") = 0 mkdir("./140", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5990 attached , child_tidptr=0x555580316650) = 5990 [pid 5990] set_robust_list(0x555580316660, 24) = 0 [pid 5990] chdir("./140") = 0 [pid 5990] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 237.891078][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 237.896745][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 237.902326][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 237.911864][ T1210] usb 1-1: USB disconnect, device number 15 [pid 5990] setpgid(0, 0) = 0 [pid 5990] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5990] write(3, "1000", 4) = 4 [pid 5990] close(3) = 0 [pid 5990] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5990] write(1, "executing program\n", 18executing program ) = 18 [pid 5990] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5990] close(3) = 0 [pid 5990] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5990] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5990] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5990] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5990] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5990] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5990] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5990] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5990] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 238.473186][ T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd [pid 5990] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5990] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5990] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5990] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5990] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5990] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5990] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5990] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5990] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5990] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5990] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 238.657036][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 238.665746][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.675873][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 238.684893][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5990] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5990] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5990] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5990] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5990] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5990] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5990] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 238.739425][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 238.748587][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 238.756622][ T9] usb 1-1: Product: syz [ 238.760803][ T9] usb 1-1: Manufacturer: syz [ 238.804392][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 238.809680][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 238.815834][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 238.821757][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5990] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5990] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5990] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5990] exit_group(0) = ? [ 239.015521][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 239.021217][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 239.026931][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 239.032602][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 239.038307][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 239.043972][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 239.049676][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 239.055336][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [pid 5990] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5990, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./140", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./140", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 239.061039][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 239.066879][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 239.072544][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 239.078267][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 239.083946][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 239.094323][ T1210] usb 1-1: USB disconnect, device number 16 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./140/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./140/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./140/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./140") = 0 mkdir("./141", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5991 attached , child_tidptr=0x555580316650) = 5991 [pid 5991] set_robust_list(0x555580316660, 24) = 0 [pid 5991] chdir("./141") = 0 [pid 5991] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5991] setpgid(0, 0) = 0 [pid 5991] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5991] write(3, "1000", 4) = 4 [pid 5991] close(3) = 0 [pid 5991] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5991] write(1, "executing program\n", 18executing program ) = 18 [pid 5991] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5991] close(3) = 0 [pid 5991] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5991] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5991] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5991] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5991] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5991] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5991] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5991] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5991] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 239.773177][ T1210] usb 1-1: new high-speed USB device number 17 using dummy_hcd [pid 5991] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5991] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5991] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5991] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5991] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5991] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5991] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5991] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5991] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5991] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5991] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5991] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5991] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 239.926559][ T1210] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 239.935521][ T1210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 239.945830][ T1210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 239.954863][ T1210] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5991] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5991] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5991] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5991] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5991] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 239.969634][ T1210] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 239.979006][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 239.987035][ T1210] usb 1-1: Product: syz [ 239.991201][ T1210] usb 1-1: Manufacturer: syz [ 240.003697][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 240.008934][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 240.015018][ T1210] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 240.020930][ T1210] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5991] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5991] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5991] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5991] exit_group(0) = ? [pid 5991] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5991, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./141", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./141", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 240.214082][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 240.219770][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 240.225592][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 240.231414][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 240.237071][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 240.245159][ T9] usb 1-1: USB disconnect, device number 17 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./141/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./141/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./141/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./141") = 0 mkdir("./142", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5992 attached , child_tidptr=0x555580316650) = 5992 [pid 5992] set_robust_list(0x555580316660, 24) = 0 [pid 5992] chdir("./142") = 0 [pid 5992] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5992] setpgid(0, 0) = 0 [pid 5992] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5992] write(3, "1000", 4) = 4 [pid 5992] close(3) = 0 [pid 5992] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5992] write(1, "executing program\n", 18) = 18 [pid 5992] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5992] close(3) = 0 [pid 5992] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5992] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5992] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5992] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5992] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5992] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5992] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5992] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5992] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 241.003182][ T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd [pid 5992] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5992] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5992] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5992] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5992] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5992] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5992] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5992] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5992] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5992] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5992] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5992] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 241.196865][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 241.205560][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 241.215705][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 241.224701][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5992] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5992] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5992] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5992] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5992] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [ 241.269246][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 241.278638][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 241.286703][ T9] usb 1-1: Product: syz [ 241.290896][ T9] usb 1-1: Manufacturer: syz [pid 5992] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 241.330710][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 241.336036][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 241.341878][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 241.347860][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5992] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5992] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5992] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5992] exit_group(0) = ? [pid 5992] +++ exited with 0 +++ [ 241.554287][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 241.559967][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 241.565796][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 241.571489][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 241.577336][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 241.583013][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 241.588580][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 241.598650][ T9] usb 1-1: USB disconnect, device number 18 --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5992, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- umount2("./142", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./142", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./142/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./142/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./142/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./142") = 0 mkdir("./143", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5993 attached , child_tidptr=0x555580316650) = 5993 [pid 5993] set_robust_list(0x555580316660, 24) = 0 [pid 5993] chdir("./143") = 0 [pid 5993] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5993] setpgid(0, 0) = 0 [pid 5993] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5993] write(3, "1000", 4) = 4 [pid 5993] close(3) = 0 [pid 5993] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5993] write(1, "executing program\n", 18executing program ) = 18 [pid 5993] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5993] close(3) = 0 [pid 5993] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5993] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5993] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5993] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5993] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5993] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5993] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5993] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5993] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 242.363185][ T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd [pid 5993] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5993] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5993] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5993] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5993] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5993] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5993] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5993] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5993] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5993] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5993] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5993] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 242.546921][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 242.555617][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 242.565773][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 242.574864][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5993] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5993] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5993] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5993] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5993] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [ 242.631232][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 242.640351][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 242.648416][ T9] usb 1-1: Product: syz [ 242.652584][ T9] usb 1-1: Manufacturer: syz [pid 5993] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 242.686238][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 242.691504][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 242.697531][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 242.703506][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5993] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5993] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5993] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5993] exit_group(0) = ? [pid 5993] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5993, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./143", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./143", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./143/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./143/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./143/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./143") = 0 mkdir("./144", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5994 attached [pid 5994] set_robust_list(0x555580316660, 24 [pid 5832] <... clone resumed>, child_tidptr=0x555580316650) = 5994 [pid 5994] <... set_robust_list resumed>) = 0 [ 242.907221][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 242.912924][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 242.918821][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 242.924497][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 242.930451][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 242.936130][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 242.945345][ C1] cdc_wdm 1-1:1.0: Unexpected error -71 [ 242.946288][ T9] usb 1-1: USB disconnect, device number 19 [pid 5994] chdir("./144") = 0 [pid 5994] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5994] setpgid(0, 0) = 0 [pid 5994] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5994] write(3, "1000", 4) = 4 [pid 5994] close(3) = 0 [pid 5994] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5994] write(1, "executing program\n", 18) = 18 [pid 5994] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5994] close(3) = 0 [pid 5994] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5994] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5994] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5994] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5994] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5994] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5994] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5994] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5994] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 243.473194][ T1210] usb 1-1: new high-speed USB device number 20 using dummy_hcd [pid 5994] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5994] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5994] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5994] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5994] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5994] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5994] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5994] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5994] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5994] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5994] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5994] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5994] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 243.647518][ T1210] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 243.656430][ T1210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 243.666718][ T1210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 243.675734][ T1210] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5994] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5994] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5994] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5994] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5994] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 243.721319][ T1210] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 243.730612][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 243.738907][ T1210] usb 1-1: Product: syz [ 243.743135][ T1210] usb 1-1: Manufacturer: syz [ 243.782793][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 243.788119][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 243.794161][ T1210] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 243.800074][ T1210] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5994] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5994] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5994] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5994] exit_group(0) = ? [ 244.003202][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 244.008914][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 244.014789][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 244.020466][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 244.026402][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 244.032110][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 244.037922][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 244.043893][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [pid 5994] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5994, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- umount2("./144", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./144", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 244.049917][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 244.055591][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 244.065555][ T1210] usb 1-1: USB disconnect, device number 20 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./144/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./144/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./144/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./144") = 0 mkdir("./145", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5995 attached , child_tidptr=0x555580316650) = 5995 [pid 5995] set_robust_list(0x555580316660, 24) = 0 [pid 5995] chdir("./145") = 0 [pid 5995] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5995] setpgid(0, 0) = 0 [pid 5995] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5995] write(3, "1000", 4) = 4 [pid 5995] close(3) = 0 [pid 5995] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5995] write(1, "executing program\n", 18) = 18 [pid 5995] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5995] close(3) = 0 [pid 5995] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5995] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5995] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5995] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5995] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5995] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5995] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5995] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5995] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 244.793187][ T9] usb 1-1: new high-speed USB device number 21 using dummy_hcd [pid 5995] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5995] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5995] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5995] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5995] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5995] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5995] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5995] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5995] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5995] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5995] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 244.966402][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 244.975104][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 244.985247][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 244.994267][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5995] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5995] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5995] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5995] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5995] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5995] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5995] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 245.048852][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 245.057992][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 245.066030][ T9] usb 1-1: Product: syz [ 245.070206][ T9] usb 1-1: Manufacturer: syz [ 245.089941][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 245.095295][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 245.101508][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 245.107505][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5995] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5995] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5995] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5995] exit_group(0) = ? [pid 5995] +++ exited with 0 +++ [ 245.320841][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 245.326556][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 245.332297][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 245.338138][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 245.343796][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 245.349587][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 245.355276][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 245.365229][ T1210] usb 1-1: USB disconnect, device number 21 --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5995, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- umount2("./145", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./145", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./145/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./145/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./145/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./145") = 0 mkdir("./146", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5996 attached , child_tidptr=0x555580316650) = 5996 [pid 5996] set_robust_list(0x555580316660, 24) = 0 [pid 5996] chdir("./146") = 0 [pid 5996] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5996] setpgid(0, 0) = 0 [pid 5996] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5996] write(3, "1000", 4) = 4 [pid 5996] close(3) = 0 [pid 5996] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5996] write(1, "executing program\n", 18) = 18 [pid 5996] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5996] close(3) = 0 [pid 5996] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5996] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5996] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5996] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5996] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5996] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5996] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5996] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5996] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 246.053173][ T9] usb 1-1: new high-speed USB device number 22 using dummy_hcd [pid 5996] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5996] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5996] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5996] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5996] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5996] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5996] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5996] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5996] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5996] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5996] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5996] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5996] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 246.257251][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 246.265949][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 246.276092][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 246.285097][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5996] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5996] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5996] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5996] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 5996] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 246.329674][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 246.338802][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 246.346835][ T9] usb 1-1: Product: syz [ 246.351020][ T9] usb 1-1: Manufacturer: syz [ 246.394470][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 246.399749][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 246.405965][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 246.411880][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5996] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5996] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5996] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5996] exit_group(0) = ? [pid 5996] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5996, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./146", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./146", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 246.605327][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 246.611039][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 246.616795][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 246.622455][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 246.628350][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 246.634508][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 246.641308][ T9] usb 1-1: USB disconnect, device number 22 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./146/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./146/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./146/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./146") = 0 mkdir("./147", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5997 attached , child_tidptr=0x555580316650) = 5997 [pid 5997] set_robust_list(0x555580316660, 24) = 0 [pid 5997] chdir("./147") = 0 [pid 5997] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5997] setpgid(0, 0) = 0 [pid 5997] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5997] write(3, "1000", 4) = 4 [pid 5997] close(3) = 0 [pid 5997] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5997] write(1, "executing program\n", 18) = 18 [pid 5997] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5997] close(3) = 0 [pid 5997] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5997] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5997] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5997] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5997] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5997] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5997] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5997] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5997] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 247.313193][ T9] usb 1-1: new high-speed USB device number 23 using dummy_hcd [pid 5997] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5997] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5997] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5997] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5997] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5997] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5997] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5997] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5997] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5997] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5997] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5997] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5997] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 247.517698][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 247.526513][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 247.536640][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 247.545655][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5997] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5997] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5997] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5997] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [ 247.580194][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 247.589360][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 247.597405][ T9] usb 1-1: Product: syz [ 247.601576][ T9] usb 1-1: Manufacturer: syz [pid 5997] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 247.635495][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 247.640730][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 247.647383][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 247.653386][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5997] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5997] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5997] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5997] exit_group(0) = ? [pid 5997] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5997, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- umount2("./147", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 247.848394][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 247.854099][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 247.860318][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 247.866009][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 247.871734][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 247.877406][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 247.882968][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 247.892513][ T9] usb 1-1: USB disconnect, device number 23 openat(AT_FDCWD, "./147", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./147/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./147/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./147/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./147") = 0 mkdir("./148", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5998 attached , child_tidptr=0x555580316650) = 5998 [pid 5998] set_robust_list(0x555580316660, 24) = 0 [pid 5998] chdir("./148") = 0 [pid 5998] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5998] setpgid(0, 0) = 0 [pid 5998] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5998] write(3, "1000", 4) = 4 [pid 5998] close(3) = 0 [pid 5998] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5998] write(1, "executing program\n", 18executing program ) = 18 [pid 5998] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5998] close(3) = 0 [pid 5998] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5998] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5998] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5998] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5998] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5998] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5998] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5998] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5998] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 248.573177][ T1210] usb 1-1: new high-speed USB device number 24 using dummy_hcd [pid 5998] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5998] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5998] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5998] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5998] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5998] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5998] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5998] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5998] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5998] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 248.777061][ T1210] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 248.785868][ T1210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 248.795998][ T1210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 248.805004][ T1210] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5998] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5998] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5998] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5998] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5998] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5998] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5998] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [ 248.859831][ T1210] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 248.869144][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 248.877208][ T1210] usb 1-1: Product: syz [ 248.881387][ T1210] usb 1-1: Manufacturer: syz [pid 5998] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 248.911559][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 248.916902][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 248.922946][ T1210] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 248.928949][ T1210] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5998] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5998] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5998] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5998] exit_group(0) = ? [ 249.132178][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 249.137889][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 249.143624][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 249.149281][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 249.155014][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 249.160682][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 249.166422][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 249.172099][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [pid 5998] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5998, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- umount2("./148", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./148", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./148/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./148/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./148/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 [ 249.181446][ T1210] usb 1-1: USB disconnect, device number 24 close(3) = 0 rmdir("./148") = 0 mkdir("./149", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5999 attached , child_tidptr=0x555580316650) = 5999 [pid 5999] set_robust_list(0x555580316660, 24) = 0 [pid 5999] chdir("./149") = 0 [pid 5999] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5999] setpgid(0, 0) = 0 [pid 5999] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5999] write(3, "1000", 4) = 4 [pid 5999] close(3) = 0 [pid 5999] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5999] write(1, "executing program\n", 18) = 18 [pid 5999] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 5999] close(3) = 0 [pid 5999] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5999] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 5999] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5999] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5999] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5999] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5999] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5999] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5999] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 249.753223][ T9] usb 1-1: new high-speed USB device number 25 using dummy_hcd [pid 5999] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5999] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5999] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 5999] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5999] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 5999] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5999] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 5999] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5999] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 5999] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5999] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5999] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 249.956443][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 249.965154][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 249.975282][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 249.984262][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 5999] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 5999] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 5999] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5999] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5999] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [ 250.030889][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 250.040062][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 250.048126][ T9] usb 1-1: Product: syz [ 250.052293][ T9] usb 1-1: Manufacturer: syz [pid 5999] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 250.085756][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 250.090974][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 250.097570][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 250.103542][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [pid 5999] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 5999] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 5999] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 5999] exit_group(0) = ? [pid 5999] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5999, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- umount2("./149", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./149", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 250.308362][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 250.314044][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 250.319862][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 250.325925][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 250.331607][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 250.340489][ C1] cdc_wdm 1-1:1.0: Unexpected error -71 [ 250.340916][ T9] usb 1-1: USB disconnect, device number 25 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./149/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./149/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./149/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./149") = 0 mkdir("./150", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6000 attached , child_tidptr=0x555580316650) = 6000 [pid 6000] set_robust_list(0x555580316660, 24) = 0 [pid 6000] chdir("./150") = 0 [pid 6000] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6000] setpgid(0, 0) = 0 [pid 6000] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6000] write(3, "1000", 4) = 4 [pid 6000] close(3) = 0 [pid 6000] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6000] write(1, "executing program\n", 18) = 18 [pid 6000] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 6000] close(3) = 0 [pid 6000] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 6000] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 6000] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 6000] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6000] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6000] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6000] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6000] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 6000] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 251.013184][ T9] usb 1-1: new high-speed USB device number 26 using dummy_hcd [pid 6000] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6000] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6000] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 6000] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6000] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 6000] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6000] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 6000] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6000] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 6000] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6000] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 6000] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6000] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 251.196944][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 251.205637][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 251.215775][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 251.224792][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 6000] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6000] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 6000] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 6000] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 6000] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 251.259661][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 251.268820][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 251.276859][ T9] usb 1-1: Product: syz [ 251.281020][ T9] usb 1-1: Manufacturer: syz [ 251.324035][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 251.329357][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 251.335551][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 251.341473][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [pid 6000] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 6000] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 6000] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [ 251.535495][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.541221][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 251.546927][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.552777][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.558595][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.564416][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.570253][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.575932][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [pid 6000] exit_group(0) = ? [pid 6000] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6000, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- umount2("./150", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./150", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 251.581487][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 251.591535][ T9] usb 1-1: USB disconnect, device number 26 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./150/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./150/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./150/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./150") = 0 mkdir("./151", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6001 attached , child_tidptr=0x555580316650) = 6001 [pid 6001] set_robust_list(0x555580316660, 24) = 0 [pid 6001] chdir("./151") = 0 [pid 6001] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6001] setpgid(0, 0) = 0 [pid 6001] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6001] write(3, "1000", 4) = 4 [pid 6001] close(3) = 0 [pid 6001] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6001] write(1, "executing program\n", 18executing program ) = 18 [pid 6001] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 6001] close(3) = 0 [pid 6001] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 6001] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 6001] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 6001] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6001] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6001] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6001] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6001] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 6001] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 252.293226][ T9] usb 1-1: new high-speed USB device number 27 using dummy_hcd [pid 6001] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6001] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6001] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 6001] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6001] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 6001] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6001] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 6001] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6001] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 6001] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6001] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 6001] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 252.476554][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 252.485297][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 252.495429][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 252.504458][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 6001] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 6001] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6001] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 6001] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 6001] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 6001] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 252.561174][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 252.570409][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 252.578454][ T9] usb 1-1: Product: syz [ 252.582628][ T9] usb 1-1: Manufacturer: syz [ 252.635335][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 252.640583][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 252.646762][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 252.652684][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [pid 6001] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 6001] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 6001] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 6001] exit_group(0) = ? [ 252.856099][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.861806][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 252.867515][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.873355][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.879054][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 252.884779][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.890437][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 252.896001][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [pid 6001] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6001, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- umount2("./151", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 252.905496][ T9] usb 1-1: USB disconnect, device number 27 openat(AT_FDCWD, "./151", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./151/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./151/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./151/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./151") = 0 mkdir("./152", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6002 attached , child_tidptr=0x555580316650) = 6002 [pid 6002] set_robust_list(0x555580316660, 24) = 0 [pid 6002] chdir("./152") = 0 [pid 6002] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6002] setpgid(0, 0) = 0 [pid 6002] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6002] write(3, "1000", 4) = 4 [pid 6002] close(3) = 0 [pid 6002] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6002] write(1, "executing program\n", 18executing program ) = 18 [pid 6002] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 6002] close(3) = 0 [pid 6002] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 6002] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 6002] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 6002] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6002] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6002] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6002] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6002] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 6002] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 253.653166][ T9] usb 1-1: new high-speed USB device number 28 using dummy_hcd [pid 6002] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6002] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6002] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 6002] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6002] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 6002] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6002] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 6002] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6002] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 6002] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6002] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 6002] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6002] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 253.846326][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 253.855087][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 253.865258][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 253.874310][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 6002] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6002] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 6002] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 6002] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [ 253.921374][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 253.930544][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 253.938582][ T9] usb 1-1: Product: syz [ 253.942762][ T9] usb 1-1: Manufacturer: syz [pid 6002] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 253.976355][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 253.981595][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 253.987610][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 253.993571][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [pid 6002] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 6002] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 6002] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 6002] exit_group(0) = ? [pid 6002] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6002, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- umount2("./152", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./152", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./152/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./152/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./152/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./152") = 0 mkdir("./153", 0777) = 0 [ 254.187331][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 254.193054][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 254.198776][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 254.204458][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 254.210203][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 254.215875][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 254.221440][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6003 attached , child_tidptr=0x555580316650) = 6003 [pid 6003] set_robust_list(0x555580316660, 24) = 0 [pid 6003] chdir("./153") = 0 [pid 6003] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6003] setpgid(0, 0) = 0 [pid 6003] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6003] write(3, "1000", 4) = 4 [pid 6003] close(3) = 0 [ 254.240428][ T1210] usb 1-1: USB disconnect, device number 28 [pid 6003] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6003] write(1, "executing program\n", 18executing program ) = 18 [pid 6003] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 6003] close(3) = 0 [pid 6003] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 6003] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 6003] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 6003] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6003] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6003] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6003] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6003] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 6003] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 254.813175][ T1210] usb 1-1: new high-speed USB device number 29 using dummy_hcd [pid 6003] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6003] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6003] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 6003] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6003] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 6003] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6003] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 6003] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6003] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 6003] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6003] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 6003] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6003] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 255.006930][ T1210] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 255.015710][ T1210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 255.026108][ T1210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 255.035138][ T1210] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 6003] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6003] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [ 255.081845][ T1210] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 255.091078][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 255.099093][ T1210] usb 1-1: Product: syz [ 255.103286][ T1210] usb 1-1: Manufacturer: syz [pid 6003] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 6003] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 6003] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 255.137234][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 255.142509][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 255.148653][ T1210] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 255.154617][ T1210] cdc_wdm 1-1:1.0: Unknown control protocol [pid 6003] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 6003] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 6003] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 6003] exit_group(0) = ? [pid 6003] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6003, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- umount2("./153", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./153", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./153/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 255.338685][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 255.344391][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 255.350230][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 255.355904][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 255.361836][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 255.367680][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 255.373356][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 255.382736][ T9] usb 1-1: USB disconnect, device number 29 newfstatat(AT_FDCWD, "./153/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./153/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./153") = 0 mkdir("./154", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6004 attached , child_tidptr=0x555580316650) = 6004 [pid 6004] set_robust_list(0x555580316660, 24) = 0 [pid 6004] chdir("./154") = 0 [pid 6004] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6004] setpgid(0, 0) = 0 [pid 6004] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6004] write(3, "1000", 4) = 4 [pid 6004] close(3) = 0 [pid 6004] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6004] write(1, "executing program\n", 18executing program ) = 18 [pid 6004] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 6004] close(3) = 0 [pid 6004] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 6004] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 6004] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 6004] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6004] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6004] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 255.995075][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.001576][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [pid 6004] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6004] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 6004] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 256.053193][ T9] usb 1-1: new high-speed USB device number 30 using dummy_hcd [pid 6004] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6004] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6004] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 6004] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6004] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 6004] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6004] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 6004] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6004] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 6004] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6004] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 6004] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 256.227013][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 256.235773][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 256.245993][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 256.255009][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 6004] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 6004] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6004] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 6004] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 6004] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [ 256.309766][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 256.318875][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 256.326987][ T9] usb 1-1: Product: syz [ 256.331155][ T9] usb 1-1: Manufacturer: syz [pid 6004] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 256.364210][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 256.369495][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 256.375625][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 256.381540][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [pid 6004] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 6004] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 6004] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [ 256.585312][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 256.591029][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 256.596742][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 256.602563][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 256.608382][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 256.614196][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 256.619998][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 256.625859][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [pid 6004] exit_group(0) = ? [pid 6004] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6004, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- umount2("./154", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./154", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./154/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./154/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./154/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./154") = 0 mkdir("./155", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6005 attached [pid 6005] set_robust_list(0x555580316660, 24 [pid 5832] <... clone resumed>, child_tidptr=0x555580316650) = 6005 [pid 6005] <... set_robust_list resumed>) = 0 [pid 6005] chdir("./155") = 0 [pid 6005] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 256.631670][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 256.637351][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 256.643061][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 256.648738][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 256.658074][ T1210] usb 1-1: USB disconnect, device number 30 [pid 6005] setpgid(0, 0) = 0 [pid 6005] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6005] write(3, "1000", 4) = 4 [pid 6005] close(3) = 0 [pid 6005] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6005] write(1, "executing program\n", 18) = 18 [pid 6005] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 6005] close(3) = 0 [pid 6005] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 6005] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 6005] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 6005] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6005] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6005] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6005] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6005] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 6005] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 257.213175][ T1210] usb 1-1: new high-speed USB device number 31 using dummy_hcd [pid 6005] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6005] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6005] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 6005] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6005] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 6005] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6005] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 6005] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6005] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 6005] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6005] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 6005] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6005] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 257.406722][ T1210] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 257.415649][ T1210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 257.426014][ T1210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 257.435056][ T1210] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 6005] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6005] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 6005] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 6005] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 6005] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 257.481598][ T1210] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 257.490868][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 257.499063][ T1210] usb 1-1: Product: syz [ 257.503258][ T1210] usb 1-1: Manufacturer: syz [ 257.546529][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 257.551768][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 257.557905][ T1210] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 257.563869][ T1210] cdc_wdm 1-1:1.0: Unknown control protocol [pid 6005] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 6005] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 6005] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 6005] exit_group(0) = ? [pid 6005] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6005, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- umount2("./155", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 257.757397][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 257.763090][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 257.768810][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 257.774483][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 257.780306][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 257.785980][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 257.791544][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 openat(AT_FDCWD, "./155", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 257.803399][ T9] usb 1-1: USB disconnect, device number 31 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./155/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./155/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./155/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./155") = 0 mkdir("./156", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6006 attached , child_tidptr=0x555580316650) = 6006 [pid 6006] set_robust_list(0x555580316660, 24) = 0 [pid 6006] chdir("./156") = 0 [pid 6006] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6006] setpgid(0, 0) = 0 [pid 6006] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6006] write(3, "1000", 4) = 4 [pid 6006] close(3) = 0 [pid 6006] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6006] write(1, "executing program\n", 18) = 18 [pid 6006] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 6006] close(3) = 0 [pid 6006] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 6006] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 6006] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 6006] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6006] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6006] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6006] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6006] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 6006] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 258.533180][ T1210] usb 1-1: new high-speed USB device number 32 using dummy_hcd [pid 6006] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6006] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6006] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 6006] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6006] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 6006] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6006] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 6006] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6006] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 6006] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6006] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 6006] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6006] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 258.696849][ T1210] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 258.705709][ T1210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 258.716049][ T1210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 258.725074][ T1210] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 6006] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6006] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 6006] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 6006] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [ 258.761419][ T1210] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 258.770685][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 258.778901][ T1210] usb 1-1: Product: syz [ 258.783121][ T1210] usb 1-1: Manufacturer: syz [pid 6006] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 258.812658][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 258.818027][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 258.824264][ T1210] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 258.830188][ T1210] cdc_wdm 1-1:1.0: Unknown control protocol [pid 6006] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 6006] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 6006] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 6006] exit_group(0) = ? [ 259.033350][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 259.039058][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 259.044863][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 259.050732][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 259.056595][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 259.062429][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 259.068088][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 259.074008][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [pid 6006] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6006, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./156", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 259.079846][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 259.085509][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 259.091058][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 259.102494][ T1210] usb 1-1: USB disconnect, device number 32 openat(AT_FDCWD, "./156", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./156/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./156/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./156/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./156") = 0 mkdir("./157", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6007 attached , child_tidptr=0x555580316650) = 6007 [pid 6007] set_robust_list(0x555580316660, 24) = 0 [pid 6007] chdir("./157") = 0 [pid 6007] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6007] setpgid(0, 0) = 0 [pid 6007] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6007] write(3, "1000", 4) = 4 [pid 6007] close(3) = 0 [pid 6007] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6007] write(1, "executing program\n", 18) = 18 [pid 6007] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 6007] close(3) = 0 [pid 6007] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 6007] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 6007] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 6007] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6007] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6007] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6007] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6007] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 6007] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 259.863182][ T1210] usb 1-1: new high-speed USB device number 33 using dummy_hcd [pid 6007] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6007] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6007] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 6007] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6007] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 6007] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6007] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 6007] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6007] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 6007] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6007] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 6007] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 260.057036][ T1210] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 260.065944][ T1210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 260.076086][ T1210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 260.085089][ T1210] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 6007] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 6007] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6007] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 6007] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 6007] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [ 260.121713][ T1210] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 260.130799][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 260.139156][ T1210] usb 1-1: Product: syz [ 260.143399][ T1210] usb 1-1: Manufacturer: syz [pid 6007] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 260.173254][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 260.178505][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 260.184775][ T1210] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 260.190697][ T1210] cdc_wdm 1-1:1.0: Unknown control protocol [pid 6007] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 6007] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 6007] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 6007] exit_group(0) = ? [pid 6007] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6007, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- umount2("./157", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./157", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./157/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./157/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./157/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 [ 260.394043][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 260.399737][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 260.405560][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 260.411592][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 260.417278][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 260.426152][ C1] cdc_wdm 1-1:1.0: Unexpected error -71 [ 260.426501][ T9] usb 1-1: USB disconnect, device number 33 rmdir("./157") = 0 mkdir("./158", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6008 attached , child_tidptr=0x555580316650) = 6008 [pid 6008] set_robust_list(0x555580316660, 24) = 0 [pid 6008] chdir("./158") = 0 [pid 6008] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6008] setpgid(0, 0) = 0 [pid 6008] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6008] write(3, "1000", 4) = 4 [pid 6008] close(3) = 0 [pid 6008] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6008] write(1, "executing program\n", 18executing program ) = 18 [pid 6008] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 6008] close(3) = 0 [pid 6008] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 6008] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 6008] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 6008] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6008] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6008] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6008] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6008] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 6008] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 261.003190][ T9] usb 1-1: new high-speed USB device number 34 using dummy_hcd [pid 6008] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6008] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6008] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 6008] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6008] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 6008] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6008] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 6008] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6008] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 6008] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6008] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 6008] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 261.162964][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 261.172802][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 261.183916][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 261.192903][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 6008] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 6008] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6008] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 6008] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 6008] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 6008] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 261.231432][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 261.241115][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 261.249927][ T9] usb 1-1: Product: syz [ 261.255416][ T9] usb 1-1: Manufacturer: syz [ 261.269513][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 261.274898][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 261.281493][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 261.288286][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [pid 6008] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 6008] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 6008] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 6008] exit_group(0) = ? [ 261.478749][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 261.484451][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 261.490265][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 261.496132][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 261.501944][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 261.507620][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 261.513388][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 261.519060][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [pid 6008] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6008, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- umount2("./158", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./158", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 261.525053][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 261.530748][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 261.540073][ T9] usb 1-1: USB disconnect, device number 34 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./158/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./158/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./158/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./158") = 0 mkdir("./159", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6009 attached , child_tidptr=0x555580316650) = 6009 [pid 6009] set_robust_list(0x555580316660, 24) = 0 [pid 6009] chdir("./159") = 0 [pid 6009] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6009] setpgid(0, 0) = 0 [pid 6009] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6009] write(3, "1000", 4) = 4 [pid 6009] close(3) = 0 [pid 6009] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6009] write(1, "executing program\n", 18) = 18 [pid 6009] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 6009] close(3) = 0 [pid 6009] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 6009] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 6009] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 6009] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6009] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6009] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6009] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6009] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 6009] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 262.243238][ T9] usb 1-1: new high-speed USB device number 35 using dummy_hcd [pid 6009] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6009] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6009] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 6009] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6009] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 6009] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6009] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 6009] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6009] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 6009] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6009] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 262.417200][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 262.425902][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 262.436120][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 262.445143][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 6009] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6009] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 6009] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6009] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 6009] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 6009] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [ 262.481565][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 262.490731][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 262.498814][ T9] usb 1-1: Product: syz [ 262.502988][ T9] usb 1-1: Manufacturer: syz [pid 6009] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 262.532748][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 262.538059][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 262.544659][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 262.550583][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [pid 6009] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 6009] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 6009] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 6009] exit_group(0) = ? [ 262.755714][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 262.761414][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 262.767119][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 262.772959][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 262.778625][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 262.784372][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 262.790049][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 262.795805][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [pid 6009] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6009, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./159", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./159", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 262.801482][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 262.807231][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 262.812909][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 262.822837][ T1210] usb 1-1: USB disconnect, device number 35 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./159/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./159/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./159/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./159") = 0 mkdir("./160", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6010 attached , child_tidptr=0x555580316650) = 6010 [pid 6010] set_robust_list(0x555580316660, 24) = 0 [pid 6010] chdir("./160") = 0 [pid 6010] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6010] setpgid(0, 0) = 0 [pid 6010] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6010] write(3, "1000", 4) = 4 [pid 6010] close(3) = 0 [pid 6010] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6010] write(1, "executing program\n", 18executing program ) = 18 [pid 6010] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 6010] close(3) = 0 [pid 6010] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 6010] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 6010] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 6010] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6010] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6010] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6010] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6010] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 6010] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 263.503189][ T1210] usb 1-1: new high-speed USB device number 36 using dummy_hcd [pid 6010] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6010] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6010] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 6010] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6010] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 6010] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6010] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 6010] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6010] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 6010] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6010] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 263.686244][ T1210] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 263.695005][ T1210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 263.705275][ T1210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 263.714286][ T1210] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 6010] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6010] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 6010] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6010] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 6010] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 6010] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 6010] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 263.760816][ T1210] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 263.770195][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 263.778485][ T1210] usb 1-1: Product: syz [ 263.782698][ T1210] usb 1-1: Manufacturer: syz [ 263.833206][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 263.838442][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 263.844455][ T1210] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 263.850372][ T1210] cdc_wdm 1-1:1.0: Unknown control protocol [pid 6010] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 6010] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 6010] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 6010] exit_group(0) = ? [ 264.044306][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 264.050019][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 264.055742][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 264.061406][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 264.067108][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 264.072775][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 264.078489][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 264.084157][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [pid 6010] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6010, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [ 264.093482][ T9] usb 1-1: USB disconnect, device number 36 umount2("./160", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./160", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./160/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./160/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./160/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./160") = 0 mkdir("./161", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6012 attached , child_tidptr=0x555580316650) = 6012 [pid 6012] set_robust_list(0x555580316660, 24) = 0 [pid 6012] chdir("./161") = 0 [pid 6012] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6012] setpgid(0, 0) = 0 [pid 6012] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6012] write(3, "1000", 4) = 4 [pid 6012] close(3) = 0 [pid 6012] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6012] write(1, "executing program\n", 18) = 18 [pid 6012] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 6012] close(3) = 0 [pid 6012] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 6012] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 6012] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 6012] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6012] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6012] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6012] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6012] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 6012] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 264.853190][ T9] usb 1-1: new high-speed USB device number 37 using dummy_hcd [pid 6012] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6012] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6012] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 6012] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6012] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 6012] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6012] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 6012] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6012] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 6012] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6012] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 6012] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6012] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 265.047120][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 265.055834][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 265.065965][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 265.074990][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 6012] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6012] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 6012] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 6012] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [ 265.109636][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 265.118844][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 265.126881][ T9] usb 1-1: Product: syz [ 265.131046][ T9] usb 1-1: Manufacturer: syz [pid 6012] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 265.163809][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 265.169054][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 265.175129][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 265.181047][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [pid 6012] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 6012] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [ 265.376131][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 265.381850][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 265.387564][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 265.393394][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 265.399206][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 265.405004][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 265.410823][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 265.416811][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [pid 6012] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 6012] exit_group(0) = ? [ 265.422638][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 265.428450][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 265.434113][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 265.439960][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 265.445788][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 265.451597][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 265.457564][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 265.463406][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [pid 6012] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6012, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./161", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./161", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 265.469091][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 265.478136][ C1] cdc_wdm 1-1:1.0: Unexpected error -71 [ 265.480864][ T9] usb 1-1: USB disconnect, device number 37 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./161/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./161/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./161/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./161") = 0 mkdir("./162", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6013 attached , child_tidptr=0x555580316650) = 6013 [pid 6013] set_robust_list(0x555580316660, 24) = 0 [pid 6013] chdir("./162") = 0 [pid 6013] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6013] setpgid(0, 0) = 0 [pid 6013] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6013] write(3, "1000", 4) = 4 [pid 6013] close(3) = 0 [pid 6013] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6013] write(1, "executing program\n", 18executing program ) = 18 [pid 6013] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 6013] close(3) = 0 [pid 6013] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 6013] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 6013] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 6013] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6013] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6013] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6013] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6013] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 6013] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 266.223202][ T9] usb 1-1: new high-speed USB device number 38 using dummy_hcd [pid 6013] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6013] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6013] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 6013] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6013] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 6013] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6013] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 6013] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6013] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 6013] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6013] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 266.397223][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 266.405945][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 266.416092][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 266.425109][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 6013] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6013] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 6013] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6013] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 6013] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 6013] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 6013] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 266.459494][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 266.468692][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 266.476778][ T9] usb 1-1: Product: syz [ 266.480947][ T9] usb 1-1: Manufacturer: syz [ 266.511194][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 266.516526][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 266.522468][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 266.528459][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [pid 6013] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 6013] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 6013] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 6013] exit_group(0) = ? [pid 6013] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6013, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- umount2("./162", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./162", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./162/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./162/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./162/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./162") = 0 mkdir("./163", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6014 attached , child_tidptr=0x555580316650) = 6014 [pid 6014] set_robust_list(0x555580316660, 24) = 0 [pid 6014] chdir("./163") = 0 [pid 6014] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6014] setpgid(0, 0) = 0 [pid 6014] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6014] write(3, "1000", 4) = 4 [pid 6014] close(3) = 0 [pid 6014] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6014] write(1, "executing program\n", 18executing program ) = 18 [pid 6014] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 6014] close(3) = 0 [ 266.722343][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 266.728078][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 266.733829][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 266.739496][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 266.745230][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 266.750913][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 266.760901][ T1210] usb 1-1: USB disconnect, device number 38 [pid 6014] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 6014] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 6014] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 6014] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6014] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6014] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6014] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6014] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 6014] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 267.253194][ T9] usb 1-1: new high-speed USB device number 39 using dummy_hcd [pid 6014] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6014] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6014] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 6014] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6014] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 6014] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6014] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 6014] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6014] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 6014] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6014] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 6014] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6014] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 267.456651][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 267.465373][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 267.476002][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 267.485055][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 6014] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6014] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 6014] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 6014] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 6014] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 267.529599][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 267.538740][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 267.546786][ T9] usb 1-1: Product: syz [ 267.550961][ T9] usb 1-1: Manufacturer: syz [ 267.585011][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 267.590250][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 267.597106][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 267.603030][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [pid 6014] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 6014] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 6014] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 6014] exit_group(0) = ? [ 267.795733][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 267.801438][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 267.807164][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 267.812840][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 267.818568][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 267.824256][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 267.829977][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 267.835663][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [pid 6014] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6014, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- umount2("./163", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./163", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./163/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./163/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./163/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./163") = 0 mkdir("./164", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555580316650) = 6015 ./strace-static-x86_64: Process 6015 attached [pid 6015] set_robust_list(0x555580316660, 24) = 0 [ 267.841386][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 267.847067][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 267.852633][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 267.862689][ T1210] usb 1-1: USB disconnect, device number 39 [pid 6015] chdir("./164") = 0 [pid 6015] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6015] setpgid(0, 0) = 0 [pid 6015] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6015] write(3, "1000", 4) = 4 [pid 6015] close(3) = 0 [pid 6015] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6015] write(1, "executing program\n", 18executing program ) = 18 [pid 6015] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 6015] close(3) = 0 [pid 6015] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 6015] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 6015] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 6015] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6015] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6015] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6015] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6015] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 6015] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 268.413191][ T1210] usb 1-1: new high-speed USB device number 40 using dummy_hcd [pid 6015] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6015] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6015] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 6015] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6015] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 6015] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6015] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 6015] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6015] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 6015] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 268.577154][ T1210] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 268.585971][ T1210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 268.596264][ T1210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 268.605333][ T1210] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 6015] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 6015] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6015] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 6015] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6015] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 6015] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 6015] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 6015] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 268.670489][ T1210] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 268.679746][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 268.688009][ T1210] usb 1-1: Product: syz [ 268.692186][ T1210] usb 1-1: Manufacturer: syz [ 268.743120][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 268.748364][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 268.754353][ T1210] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 268.760270][ T1210] cdc_wdm 1-1:1.0: Unknown control protocol [pid 6015] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 6015] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 6015] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 6015] exit_group(0) = ? [pid 6015] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6015, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- umount2("./164", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./164", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./164/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./164/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./164/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./164") = 0 mkdir("./165", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6016 attached , child_tidptr=0x555580316650) = 6016 [pid 6016] set_robust_list(0x555580316660, 24) = 0 [ 268.954258][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 268.959948][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 268.965781][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 268.971802][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 268.977487][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 268.986354][ C1] cdc_wdm 1-1:1.0: Unexpected error -71 [ 268.991723][ T9] usb 1-1: USB disconnect, device number 40 [pid 6016] chdir("./165") = 0 [pid 6016] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6016] setpgid(0, 0) = 0 [pid 6016] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6016] write(3, "1000", 4) = 4 [pid 6016] close(3) = 0 [pid 6016] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6016] write(1, "executing program\n", 18executing program ) = 18 [pid 6016] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 6016] close(3) = 0 [pid 6016] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 6016] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 6016] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 6016] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6016] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6016] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6016] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6016] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 6016] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 269.583223][ T1210] usb 1-1: new high-speed USB device number 41 using dummy_hcd [pid 6016] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6016] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6016] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 6016] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6016] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 6016] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6016] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 6016] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6016] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 6016] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6016] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 6016] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 269.787127][ T1210] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 269.796155][ T1210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 269.806287][ T1210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 269.815315][ T1210] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 6016] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 6016] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6016] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 6016] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 6016] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [ 269.870470][ T1210] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 269.879742][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 269.887794][ T1210] usb 1-1: Product: syz [ 269.891965][ T1210] usb 1-1: Manufacturer: syz [pid 6016] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 269.923973][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 269.929224][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 269.935423][ T1210] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 269.941348][ T1210] cdc_wdm 1-1:1.0: Unknown control protocol [pid 6016] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 6016] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 6016] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 6016] exit_group(0) = ? [ 270.134818][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 270.140530][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 270.146379][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 270.152238][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 270.157909][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 270.163878][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 270.169755][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 270.175431][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [pid 6016] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6016, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./165", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./165", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./165/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 270.180987][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 270.190925][ T1210] usb 1-1: USB disconnect, device number 41 newfstatat(AT_FDCWD, "./165/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./165/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./165") = 0 mkdir("./166", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6017 attached [pid 6017] set_robust_list(0x555580316660, 24 [pid 5832] <... clone resumed>, child_tidptr=0x555580316650) = 6017 [pid 6017] <... set_robust_list resumed>) = 0 [pid 6017] chdir("./166") = 0 [pid 6017] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6017] setpgid(0, 0) = 0 [pid 6017] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6017] write(3, "1000", 4) = 4 [pid 6017] close(3) = 0 [pid 6017] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6017] write(1, "executing program\n", 18executing program ) = 18 [pid 6017] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 6017] close(3) = 0 [pid 6017] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 6017] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 6017] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 6017] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6017] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6017] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6017] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6017] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 6017] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 270.833188][ T1210] usb 1-1: new high-speed USB device number 42 using dummy_hcd [pid 6017] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6017] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6017] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 6017] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6017] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 6017] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6017] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 6017] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6017] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 6017] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6017] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 271.027039][ T1210] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 271.035740][ T1210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 271.046037][ T1210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 271.055051][ T1210] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 6017] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6017] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 6017] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6017] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 6017] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 6017] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 6017] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 271.109630][ T1210] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 271.118962][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 271.127268][ T1210] usb 1-1: Product: syz [ 271.131452][ T1210] usb 1-1: Manufacturer: syz [ 271.152452][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 271.157734][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 271.164024][ T1210] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 271.169942][ T1210] cdc_wdm 1-1:1.0: Unknown control protocol [pid 6017] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 6017] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 6017] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 6017] exit_group(0) = ? [pid 6017] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6017, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- umount2("./166", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./166", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 271.353805][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 271.359528][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 271.365400][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 271.371256][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 271.377330][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 271.383020][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 271.393204][ T9] usb 1-1: USB disconnect, device number 42 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./166/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./166/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./166/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./166") = 0 mkdir("./167", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6018 attached , child_tidptr=0x555580316650) = 6018 [pid 6018] set_robust_list(0x555580316660, 24) = 0 [pid 6018] chdir("./167") = 0 [pid 6018] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6018] setpgid(0, 0) = 0 [pid 6018] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6018] write(3, "1000", 4) = 4 [pid 6018] close(3) = 0 [pid 6018] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6018] write(1, "executing program\n", 18) = 18 [pid 6018] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 6018] close(3) = 0 [pid 6018] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 6018] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 6018] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 6018] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6018] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6018] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6018] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6018] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 6018] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 272.073207][ T9] usb 1-1: new high-speed USB device number 43 using dummy_hcd [pid 6018] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6018] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6018] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 6018] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6018] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 6018] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6018] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 6018] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6018] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 6018] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6018] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 6018] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6018] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 272.258904][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 272.267634][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 272.277882][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 272.286929][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 6018] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6018] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 6018] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 6018] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 6018] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 272.331532][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 272.340692][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 272.349116][ T9] usb 1-1: Product: syz [ 272.353340][ T9] usb 1-1: Manufacturer: syz [ 272.407606][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 272.412851][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 272.418998][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 272.425006][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [pid 6018] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 6018] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 6018] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 6018] exit_group(0) = ? [ 272.618583][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 272.624322][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 272.630030][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 272.635697][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 272.641412][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 272.647098][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 272.652853][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 272.658533][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [pid 6018] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6018, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- umount2("./167", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./167", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./167/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./167/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./167/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./167") = 0 mkdir("./168", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6019 attached , child_tidptr=0x555580316650) = 6019 [pid 6019] set_robust_list(0x555580316660, 24) = 0 [ 272.664118][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 272.673133][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 272.680215][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -EPIPE [ 272.685733][ T1210] usb 1-1: USB disconnect, device number 43 [pid 6019] chdir("./168") = 0 [pid 6019] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6019] setpgid(0, 0) = 0 [pid 6019] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6019] write(3, "1000", 4) = 4 [pid 6019] close(3) = 0 [pid 6019] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6019] write(1, "executing program\n", 18) = 18 [pid 6019] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 6019] close(3) = 0 [pid 6019] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 6019] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 6019] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 6019] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6019] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6019] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6019] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6019] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 6019] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 273.243258][ T1210] usb 1-1: new high-speed USB device number 44 using dummy_hcd [pid 6019] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6019] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6019] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 6019] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6019] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 6019] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6019] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 6019] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6019] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 6019] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6019] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 6019] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6019] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 273.407056][ T1210] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 273.415926][ T1210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 273.426240][ T1210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 273.435263][ T1210] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 6019] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6019] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 6019] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 6019] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 6019] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 273.490973][ T1210] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 273.500310][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 273.508355][ T1210] usb 1-1: Product: syz [ 273.512537][ T1210] usb 1-1: Manufacturer: syz [ 273.556643][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 273.561890][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 273.568087][ T1210] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 273.574062][ T1210] cdc_wdm 1-1:1.0: Unknown control protocol [pid 6019] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 6019] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 6019] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 6019] exit_group(0) = ? [ 273.777061][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 273.782773][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 273.788621][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 273.794565][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 273.800516][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 273.806432][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 273.812119][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 273.817694][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [pid 6019] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6019, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./168", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./168", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./168/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./168/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./168/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./168") = 0 mkdir("./169", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6020 attached [pid 6020] set_robust_list(0x555580316660, 24 [pid 5832] <... clone resumed>, child_tidptr=0x555580316650) = 6020 [pid 6020] <... set_robust_list resumed>) = 0 [pid 6020] chdir("./169") = 0 [pid 6020] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6020] setpgid(0, 0) = 0 [pid 6020] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6020] write(3, "1000", 4) = 4 [ 273.827130][ T9] usb 1-1: USB disconnect, device number 44 [pid 6020] close(3) = 0 [pid 6020] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6020] write(1, "executing program\n", 18) = 18 [pid 6020] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 6020] close(3) = 0 [pid 6020] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 6020] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 6020] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 6020] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6020] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6020] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6020] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6020] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 6020] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 274.373263][ T9] usb 1-1: new high-speed USB device number 45 using dummy_hcd [pid 6020] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6020] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6020] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 6020] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6020] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 6020] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6020] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 6020] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6020] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 6020] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6020] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 274.577054][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 274.585798][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 274.595977][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 274.605008][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 6020] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6020] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 6020] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6020] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 6020] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 6020] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 6020] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 274.659771][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 274.668933][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 274.676968][ T9] usb 1-1: Product: syz [ 274.681157][ T9] usb 1-1: Manufacturer: syz [ 274.724425][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 274.729685][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 274.735731][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 274.741651][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [pid 6020] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 6020] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 6020] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 6020] exit_group(0) = ? [ 274.935898][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 274.941594][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 274.947312][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 274.952985][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 274.958723][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 274.964422][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 274.970266][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 274.975951][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [pid 6020] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6020, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./169", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./169", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 274.981519][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 274.990958][ T9] usb 1-1: USB disconnect, device number 45 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./169/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./169/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./169/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./169") = 0 mkdir("./170", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6021 attached , child_tidptr=0x555580316650) = 6021 [pid 6021] set_robust_list(0x555580316660, 24) = 0 [pid 6021] chdir("./170") = 0 [pid 6021] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6021] setpgid(0, 0) = 0 [pid 6021] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6021] write(3, "1000", 4) = 4 [pid 6021] close(3) = 0 [pid 6021] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6021] write(1, "executing program\n", 18) = 18 [pid 6021] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 6021] close(3) = 0 [pid 6021] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 6021] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 6021] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 6021] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6021] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6021] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6021] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6021] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 6021] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 275.693214][ T1210] usb 1-1: new high-speed USB device number 46 using dummy_hcd [pid 6021] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6021] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6021] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 6021] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6021] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 6021] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6021] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 6021] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6021] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 6021] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6021] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 6021] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 275.897586][ T1210] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 275.906429][ T1210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 275.916594][ T1210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 275.925603][ T1210] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 6021] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 6021] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6021] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 6021] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 6021] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 6021] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 275.980194][ T1210] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 275.989749][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 275.997801][ T1210] usb 1-1: Product: syz [ 276.001977][ T1210] usb 1-1: Manufacturer: syz [ 276.054757][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 276.060000][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 276.066335][ T1210] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 276.072250][ T1210] cdc_wdm 1-1:1.0: Unknown control protocol [pid 6021] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 6021] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 6021] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 6021] exit_group(0) = ? [ 276.276870][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 276.282563][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 276.288414][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 276.294084][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 276.299963][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 276.305639][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 276.311582][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 276.317281][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [pid 6021] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6021, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- umount2("./170", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./170", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 276.323551][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 276.329241][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 276.334823][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 276.344776][ T1210] usb 1-1: USB disconnect, device number 46 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./170/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./170/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./170/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./170") = 0 mkdir("./171", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6022 attached , child_tidptr=0x555580316650) = 6022 [pid 6022] set_robust_list(0x555580316660, 24) = 0 [pid 6022] chdir("./171") = 0 [pid 6022] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6022] setpgid(0, 0) = 0 [pid 6022] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6022] write(3, "1000", 4) = 4 [pid 6022] close(3) = 0 [pid 6022] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6022] write(1, "executing program\n", 18executing program ) = 18 [pid 6022] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 6022] close(3) = 0 [pid 6022] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 6022] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 6022] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 6022] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6022] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6022] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6022] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6022] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 6022] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 277.083184][ T1210] usb 1-1: new high-speed USB device number 47 using dummy_hcd [pid 6022] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6022] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6022] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 6022] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6022] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 6022] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6022] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 6022] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6022] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 6022] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6022] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 6022] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 277.267022][ T1210] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 277.275962][ T1210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 277.286317][ T1210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 277.295350][ T1210] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 6022] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 6022] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6022] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 6022] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 6022] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [ 277.339619][ T1210] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 277.348935][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 277.357261][ T1210] usb 1-1: Product: syz [ 277.361435][ T1210] usb 1-1: Manufacturer: syz [pid 6022] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 277.395089][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 277.400331][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 277.407131][ T1210] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 277.413056][ T1210] cdc_wdm 1-1:1.0: Unknown control protocol [pid 6022] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 6022] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 6022] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 6022] exit_group(0) = ? [ 277.617612][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 277.623325][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 277.629056][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 277.634735][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 277.640506][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 277.646351][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 277.652039][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 277.657614][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [pid 6022] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6022, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- umount2("./171", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./171", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./171/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./171/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./171/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./171") = 0 mkdir("./172", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6023 attached [pid 6023] set_robust_list(0x555580316660, 24) = 0 [pid 5832] <... clone resumed>, child_tidptr=0x555580316650) = 6023 [pid 6023] chdir("./172") = 0 [pid 6023] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6023] setpgid(0, 0) = 0 [pid 6023] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6023] write(3, "1000", 4) = 4 [ 277.667077][ T1210] usb 1-1: USB disconnect, device number 47 [pid 6023] close(3) = 0 [pid 6023] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6023] write(1, "executing program\n", 18executing program ) = 18 [pid 6023] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 6023] close(3) = 0 [pid 6023] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 6023] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 6023] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 6023] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6023] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6023] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6023] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6023] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 6023] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 278.193220][ T1210] usb 1-1: new high-speed USB device number 48 using dummy_hcd [pid 6023] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6023] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6023] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 6023] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6023] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 6023] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6023] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 6023] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6023] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 6023] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6023] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 6023] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6023] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 278.387307][ T1210] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 278.396199][ T1210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 278.406560][ T1210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 278.415616][ T1210] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 6023] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6023] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 6023] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 6023] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 6023] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 278.451797][ T1210] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 278.461135][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 278.469187][ T1210] usb 1-1: Product: syz [ 278.473382][ T1210] usb 1-1: Manufacturer: syz [ 278.496256][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 278.501500][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 278.507709][ T1210] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 278.513699][ T1210] cdc_wdm 1-1:1.0: Unknown control protocol [pid 6023] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 6023] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 6023] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 6023] exit_group(0) = ? [pid 6023] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6023, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- umount2("./172", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./172", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 [ 278.716773][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 278.722470][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 278.728332][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 278.734263][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 278.739966][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 278.748903][ C1] cdc_wdm 1-1:1.0: Unexpected error -71 [ 278.749212][ T9] usb 1-1: USB disconnect, device number 48 umount2("./172/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./172/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./172/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./172") = 0 mkdir("./173", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6024 attached , child_tidptr=0x555580316650) = 6024 [pid 6024] set_robust_list(0x555580316660, 24) = 0 [pid 6024] chdir("./173") = 0 [pid 6024] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6024] setpgid(0, 0) = 0 [pid 6024] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6024] write(3, "1000", 4) = 4 [pid 6024] close(3) = 0 [pid 6024] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6024] write(1, "executing program\n", 18executing program ) = 18 [pid 6024] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 6024] close(3) = 0 [pid 6024] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 6024] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 6024] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 6024] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6024] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6024] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6024] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6024] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 6024] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 279.403251][ T9] usb 1-1: new high-speed USB device number 49 using dummy_hcd [pid 6024] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6024] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6024] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 6024] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6024] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 6024] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6024] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 6024] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6024] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 6024] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6024] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 6024] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6024] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 279.596739][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 279.605488][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 279.615627][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 279.624653][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 6024] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6024] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 6024] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 6024] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [ 279.662434][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 279.671644][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 279.679722][ T9] usb 1-1: Product: syz [ 279.683953][ T9] usb 1-1: Manufacturer: syz [pid 6024] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 279.726960][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 279.732254][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 279.738300][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 279.744300][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [pid 6024] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 6024] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 6024] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 6024] exit_group(0) = ? [ 279.947875][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 279.953587][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 279.959301][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 279.965154][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 279.970829][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 279.976536][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 279.982381][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 279.988079][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [pid 6024] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6024, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- umount2("./173", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./173", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./173/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./173/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./173/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./173") = 0 mkdir("./174", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6025 attached , child_tidptr=0x555580316650) = 6025 [pid 6025] set_robust_list(0x555580316660, 24) = 0 [pid 6025] chdir("./174") = 0 [pid 6025] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6025] setpgid(0, 0) = 0 [ 279.993824][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 279.999533][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 280.009459][ T1210] usb 1-1: USB disconnect, device number 49 [pid 6025] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6025] write(3, "1000", 4) = 4 [pid 6025] close(3) = 0 [pid 6025] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6025] write(1, "executing program\n", 18executing program ) = 18 [pid 6025] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 6025] close(3) = 0 [pid 6025] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 6025] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 6025] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 6025] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6025] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6025] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6025] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6025] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 6025] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 280.563200][ T9] usb 1-1: new high-speed USB device number 50 using dummy_hcd [pid 6025] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6025] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6025] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 6025] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6025] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 6025] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6025] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 6025] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6025] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 6025] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6025] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 6025] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6025] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 280.767746][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 280.776549][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 280.786892][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 280.796066][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 6025] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6025] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 6025] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 6025] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 6025] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 280.820922][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 280.830141][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 280.838194][ T9] usb 1-1: Product: syz [ 280.842371][ T9] usb 1-1: Manufacturer: syz [ 280.866844][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 280.872085][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 280.878356][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 280.884328][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [pid 6025] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 6025] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [ 281.068350][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 281.074043][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 281.079888][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 281.085755][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 281.091587][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 281.097437][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 281.103284][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 281.109102][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [pid 6025] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 6025] exit_group(0) = ? [pid 6025] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6025, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- umount2("./174", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./174", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 281.115164][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 281.120995][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 281.126808][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 281.132490][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 281.141778][ T9] usb 1-1: USB disconnect, device number 50 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./174/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./174/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./174/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./174") = 0 mkdir("./175", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6026 attached , child_tidptr=0x555580316650) = 6026 [pid 6026] set_robust_list(0x555580316660, 24) = 0 [pid 6026] chdir("./175") = 0 [pid 6026] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6026] setpgid(0, 0) = 0 [pid 6026] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6026] write(3, "1000", 4) = 4 [pid 6026] close(3) = 0 [pid 6026] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6026] write(1, "executing program\n", 18executing program ) = 18 [pid 6026] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 6026] close(3) = 0 [pid 6026] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 6026] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 6026] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 6026] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6026] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6026] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6026] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6026] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 6026] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 281.893194][ T9] usb 1-1: new high-speed USB device number 51 using dummy_hcd [pid 6026] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6026] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6026] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 6026] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6026] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 6026] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6026] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 6026] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6026] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 6026] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6026] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 6026] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 282.076645][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 282.085368][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 282.095493][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 282.104493][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 6026] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 6026] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6026] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 6026] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 6026] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 6026] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 282.161865][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 282.171101][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 282.179136][ T9] usb 1-1: Product: syz [ 282.183363][ T9] usb 1-1: Manufacturer: syz [ 282.216993][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 282.222274][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 282.228305][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 282.234279][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [pid 6026] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 6026] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 6026] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 6026] exit_group(0) = ? [ 282.428421][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 282.434133][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 282.439980][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 282.445883][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 282.451562][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 282.457437][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 282.463352][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 282.469044][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [pid 6026] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6026, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- umount2("./175", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./175", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./175/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./175/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./175/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./175") = 0 mkdir("./176", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6027 attached , child_tidptr=0x555580316650) = 6027 [ 282.478426][ T9] usb 1-1: USB disconnect, device number 51 [pid 6027] set_robust_list(0x555580316660, 24) = 0 [pid 6027] chdir("./176") = 0 [pid 6027] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6027] setpgid(0, 0) = 0 [pid 6027] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6027] write(3, "1000", 4) = 4 [pid 6027] close(3) = 0 [pid 6027] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6027] write(1, "executing program\n", 18) = 18 [pid 6027] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 6027] close(3) = 0 [pid 6027] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 6027] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 6027] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 6027] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6027] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6027] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6027] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6027] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 6027] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 283.053246][ T9] usb 1-1: new high-speed USB device number 52 using dummy_hcd [pid 6027] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6027] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6027] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 6027] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6027] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 6027] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6027] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 6027] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6027] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 6027] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6027] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 6027] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6027] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 283.237183][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 283.245904][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 283.256061][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 283.265063][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 6027] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6027] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 6027] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 6027] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [ 283.311646][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 283.320787][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 283.329057][ T9] usb 1-1: Product: syz [ 283.333268][ T9] usb 1-1: Manufacturer: syz [pid 6027] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 283.366436][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 283.371737][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 283.377995][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 283.383976][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [pid 6027] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 6027] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 6027] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 6027] exit_group(0) = ? [ 283.579310][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 283.585016][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 283.590720][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 283.596391][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 283.602087][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 283.607753][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 283.613486][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 283.619182][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [pid 6027] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6027, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./176", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./176", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./176/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./176/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./176/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./176") = 0 mkdir("./177", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6028 attached , child_tidptr=0x555580316650) = 6028 [pid 6028] set_robust_list(0x555580316660, 24) = 0 [ 283.624901][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 283.630584][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 283.636156][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 283.646396][ T1210] usb 1-1: USB disconnect, device number 52 [pid 6028] chdir("./177") = 0 [pid 6028] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6028] setpgid(0, 0) = 0 [pid 6028] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6028] write(3, "1000", 4) = 4 [pid 6028] close(3) = 0 [pid 6028] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6028] write(1, "executing program\n", 18) = 18 [pid 6028] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 6028] close(3) = 0 [pid 6028] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 6028] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 6028] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 6028] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6028] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6028] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6028] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6028] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 6028] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 284.243204][ T9] usb 1-1: new high-speed USB device number 53 using dummy_hcd [pid 6028] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6028] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6028] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 6028] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6028] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 6028] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6028] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 6028] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6028] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 6028] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6028] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 6028] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6028] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 284.427359][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 284.436072][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 284.446423][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 284.455465][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 6028] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6028] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 6028] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 6028] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 6028] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 284.481152][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 284.490311][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 284.498349][ T9] usb 1-1: Product: syz [ 284.502517][ T9] usb 1-1: Manufacturer: syz [ 284.525020][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 284.530271][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 284.536762][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 284.542700][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [pid 6028] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 6028] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 6028] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 6028] exit_group(0) = ? [pid 6028] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6028, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- umount2("./177", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 284.736949][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 284.742654][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 284.748377][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 284.754041][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 284.759746][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 284.765583][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 284.771267][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 284.781245][ T1210] usb 1-1: USB disconnect, device number 53 openat(AT_FDCWD, "./177", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./177/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./177/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./177/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./177") = 0 mkdir("./178", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6029 attached , child_tidptr=0x555580316650) = 6029 [pid 6029] set_robust_list(0x555580316660, 24) = 0 [pid 6029] chdir("./178") = 0 [pid 6029] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6029] setpgid(0, 0) = 0 [pid 6029] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6029] write(3, "1000", 4) = 4 [pid 6029] close(3) = 0 [pid 6029] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6029] write(1, "executing program\n", 18executing program ) = 18 [pid 6029] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 6029] close(3) = 0 [pid 6029] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 6029] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 6029] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 6029] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6029] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6029] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6029] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6029] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 6029] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 285.483168][ T9] usb 1-1: new high-speed USB device number 54 using dummy_hcd [pid 6029] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6029] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6029] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 6029] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6029] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 6029] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6029] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 6029] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6029] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 6029] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6029] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 285.697039][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 285.705800][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 285.715944][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 285.724994][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 6029] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6029] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 6029] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6029] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 6029] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 6029] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 6029] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 285.780144][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 285.789286][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 285.797510][ T9] usb 1-1: Product: syz [ 285.801699][ T9] usb 1-1: Manufacturer: syz [ 285.831398][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 285.836776][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 285.844165][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 285.850097][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [pid 6029] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 6029] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 6029] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 6029] exit_group(0) = ? [ 286.033586][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 286.039291][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 286.045003][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 286.050717][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 286.056443][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 286.062281][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 286.067952][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 286.073512][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [pid 6029] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6029, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- umount2("./178", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./178", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./178/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./178/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./178/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 [ 286.083306][ T9] usb 1-1: USB disconnect, device number 54 close(3) = 0 rmdir("./178") = 0 mkdir("./179", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6030 attached , child_tidptr=0x555580316650) = 6030 [pid 6030] set_robust_list(0x555580316660, 24) = 0 [pid 6030] chdir("./179") = 0 [pid 6030] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6030] setpgid(0, 0) = 0 [pid 6030] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6030] write(3, "1000", 4) = 4 [pid 6030] close(3) = 0 [pid 6030] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6030] write(1, "executing program\n", 18executing program ) = 18 [pid 6030] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 6030] close(3) = 0 [pid 6030] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 6030] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 6030] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 6030] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6030] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6030] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6030] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6030] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 6030] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 286.703173][ T9] usb 1-1: new high-speed USB device number 55 using dummy_hcd [pid 6030] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6030] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6030] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 6030] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6030] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 6030] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6030] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 6030] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6030] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 6030] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6030] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 6030] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 286.886891][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 286.895593][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 286.905761][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 286.914760][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 6030] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 6030] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6030] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 6030] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 6030] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [ 286.963016][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 286.972147][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 286.980230][ T9] usb 1-1: Product: syz [ 286.984435][ T9] usb 1-1: Manufacturer: syz [pid 6030] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 287.027202][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 287.032495][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 287.038652][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 287.044626][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [pid 6030] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 6030] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 6030] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [ 287.238716][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 287.244421][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 287.250129][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 287.255984][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 287.261857][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 287.267682][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 287.273546][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 287.279382][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [pid 6030] exit_group(0) = ? [pid 6030] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6030, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- umount2("./179", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./179", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./179/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./179/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./179/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 [ 287.285076][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 287.290635][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 287.300364][ T1210] usb 1-1: USB disconnect, device number 55 close(3) = 0 rmdir("./179") = 0 mkdir("./180", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555580316650) = 6031 ./strace-static-x86_64: Process 6031 attached [pid 6031] set_robust_list(0x555580316660, 24) = 0 [pid 6031] chdir("./180") = 0 [pid 6031] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6031] setpgid(0, 0) = 0 [pid 6031] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6031] write(3, "1000", 4) = 4 [pid 6031] close(3) = 0 [pid 6031] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6031] write(1, "executing program\n", 18) = 18 [pid 6031] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 6031] close(3) = 0 [pid 6031] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 6031] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 6031] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 6031] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6031] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6031] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6031] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6031] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 6031] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 287.903194][ T9] usb 1-1: new high-speed USB device number 56 using dummy_hcd [pid 6031] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6031] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6031] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 6031] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6031] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 6031] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6031] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 6031] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6031] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 6031] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6031] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 288.078236][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 288.086968][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 288.097135][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 288.106140][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 6031] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6031] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 6031] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6031] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 6031] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 6031] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 6031] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 288.161499][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 288.170614][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 288.178704][ T9] usb 1-1: Product: syz [ 288.182870][ T9] usb 1-1: Manufacturer: syz [ 288.216323][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 288.221599][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 288.227733][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 288.233717][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [pid 6031] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 6031] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 6031] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 6031] exit_group(0) = ? [ 288.436920][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 288.442631][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 288.448361][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 288.454222][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 288.460091][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 288.465756][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 288.471507][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 288.477188][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [pid 6031] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6031, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- umount2("./180", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./180", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 288.487019][ C0] cdc_wdm 1-1:1.0: Unexpected error -71 [ 288.492788][ T9] usb 1-1: USB disconnect, device number 56 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./180/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./180/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./180/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./180") = 0 mkdir("./181", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6032 attached , child_tidptr=0x555580316650) = 6032 [pid 6032] set_robust_list(0x555580316660, 24) = 0 [pid 6032] chdir("./181") = 0 [pid 6032] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6032] setpgid(0, 0) = 0 [pid 6032] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6032] write(3, "1000", 4) = 4 [pid 6032] close(3) = 0 [pid 6032] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6032] write(1, "executing program\n", 18executing program ) = 18 [pid 6032] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 6032] close(3) = 0 [pid 6032] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 6032] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 6032] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 6032] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6032] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6032] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6032] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6032] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 6032] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 289.233197][ T9] usb 1-1: new high-speed USB device number 57 using dummy_hcd [pid 6032] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6032] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6032] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 6032] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6032] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 6032] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6032] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 6032] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6032] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 6032] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6032] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 6032] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 289.406751][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 289.415477][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 289.425606][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 289.434706][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 6032] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 6032] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6032] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 6032] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 6032] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [ 289.479040][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 289.488165][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 289.496218][ T9] usb 1-1: Product: syz [ 289.500394][ T9] usb 1-1: Manufacturer: syz [pid 6032] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 289.532817][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 289.538221][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 289.544244][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 289.550168][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [pid 6032] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 6032] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 6032] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 6032] exit_group(0) = ? [ 289.753639][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 289.759341][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 289.765042][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 289.770710][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 289.776449][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 289.782138][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 289.787893][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 289.793775][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [pid 6032] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6032, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- umount2("./181", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./181", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 289.799445][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 289.805154][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 289.810828][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 289.816557][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 289.822371][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 289.828052][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 289.837471][ T9] usb 1-1: USB disconnect, device number 57 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./181/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./181/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./181/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./181") = 0 mkdir("./182", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6033 attached , child_tidptr=0x555580316650) = 6033 [pid 6033] set_robust_list(0x555580316660, 24) = 0 [pid 6033] chdir("./182") = 0 [pid 6033] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6033] setpgid(0, 0) = 0 [pid 6033] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6033] write(3, "1000", 4) = 4 [pid 6033] close(3) = 0 [pid 6033] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6033] write(1, "executing program\n", 18executing program ) = 18 [pid 6033] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 6033] close(3) = 0 [pid 6033] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 6033] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 6033] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 6033] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6033] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6033] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6033] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6033] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 6033] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 290.553259][ T1210] usb 1-1: new high-speed USB device number 58 using dummy_hcd [pid 6033] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6033] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6033] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 6033] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6033] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 6033] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6033] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 6033] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6033] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 6033] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6033] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 290.736852][ T1210] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 290.745696][ T1210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 290.755988][ T1210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 290.765008][ T1210] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 6033] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6033] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 6033] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6033] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 6033] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 6033] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 6033] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 290.821306][ T1210] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 290.830816][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 290.839104][ T1210] usb 1-1: Product: syz [ 290.843333][ T1210] usb 1-1: Manufacturer: syz [ 290.865944][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 290.871195][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 290.877340][ T1210] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 290.883324][ T1210] cdc_wdm 1-1:1.0: Unknown control protocol [pid 6033] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 6033] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [ 291.076356][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 291.082067][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 291.087788][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 291.093622][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 291.099456][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 291.105293][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 291.111119][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 291.116803][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [pid 6033] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 6033] exit_group(0) = ? [pid 6033] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6033, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- umount2("./182", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./182", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./182/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./182/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./182/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./182") = 0 mkdir("./183", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6034 attached , child_tidptr=0x555580316650) = 6034 [pid 6034] set_robust_list(0x555580316660, 24) = 0 [ 291.122531][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 291.128218][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 291.137693][ T9] usb 1-1: USB disconnect, device number 58 [pid 6034] chdir("./183") = 0 [pid 6034] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6034] setpgid(0, 0) = 0 [pid 6034] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6034] write(3, "1000", 4) = 4 [pid 6034] close(3) = 0 [pid 6034] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6034] write(1, "executing program\n", 18) = 18 [pid 6034] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 6034] close(3) = 0 [pid 6034] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 6034] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 6034] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 6034] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6034] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6034] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6034] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6034] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 6034] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 291.753272][ T9] usb 1-1: new high-speed USB device number 59 using dummy_hcd [pid 6034] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6034] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6034] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 6034] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6034] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 6034] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6034] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 6034] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6034] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 6034] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6034] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 6034] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 291.937154][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 291.945927][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 291.956090][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 291.965105][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 6034] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 6034] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6034] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 6034] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 6034] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [ 292.010147][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 292.019308][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 292.027558][ T9] usb 1-1: Product: syz [ 292.031748][ T9] usb 1-1: Manufacturer: syz [pid 6034] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 292.061709][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 292.067096][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 292.072971][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 292.078984][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [pid 6034] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 6034] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 6034] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 6034] exit_group(0) = ? [ 292.282496][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 292.288210][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 292.293928][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 292.299779][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 292.305481][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 292.311244][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 292.317094][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 292.322760][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [pid 6034] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6034, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- umount2("./183", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./183", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 292.328547][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 292.334233][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 292.345203][ T1210] usb 1-1: USB disconnect, device number 59 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./183/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./183/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./183/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./183") = 0 mkdir("./184", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6035 attached , child_tidptr=0x555580316650) = 6035 [pid 6035] set_robust_list(0x555580316660, 24) = 0 [pid 6035] chdir("./184") = 0 [pid 6035] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6035] setpgid(0, 0) = 0 [pid 6035] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6035] write(3, "1000", 4) = 4 [pid 6035] close(3) = 0 [pid 6035] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6035] write(1, "executing program\n", 18executing program ) = 18 [pid 6035] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 6035] close(3) = 0 [pid 6035] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 6035] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 6035] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 6035] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6035] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6035] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6035] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6035] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 6035] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 293.053197][ T1210] usb 1-1: new high-speed USB device number 60 using dummy_hcd [pid 6035] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6035] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6035] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 6035] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6035] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 6035] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6035] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 6035] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6035] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 6035] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6035] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 293.236434][ T1210] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 293.245226][ T1210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 293.255518][ T1210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 293.264637][ T1210] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 6035] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6035] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 6035] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6035] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 6035] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 6035] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [ 293.320541][ T1210] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 293.329890][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 293.337931][ T1210] usb 1-1: Product: syz [ 293.342110][ T1210] usb 1-1: Manufacturer: syz [pid 6035] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 293.373962][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 293.379198][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 293.385340][ T1210] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 293.391260][ T1210] cdc_wdm 1-1:1.0: Unknown control protocol [pid 6035] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 6035] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 6035] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 6035] exit_group(0) = ? [ 293.585508][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 293.591213][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 293.596922][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 293.602762][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 293.608434][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 293.614297][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 293.620257][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 293.625936][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [pid 6035] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6035, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./184", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./184", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 [ 293.637181][ T9] usb 1-1: USB disconnect, device number 60 umount2("./184/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./184/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./184/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./184") = 0 mkdir("./185", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6036 attached , child_tidptr=0x555580316650) = 6036 [pid 6036] set_robust_list(0x555580316660, 24) = 0 [pid 6036] chdir("./185") = 0 [pid 6036] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6036] setpgid(0, 0) = 0 [pid 6036] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6036] write(3, "1000", 4) = 4 [pid 6036] close(3) = 0 [pid 6036] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6036] write(1, "executing program\n", 18executing program ) = 18 [pid 6036] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 6036] close(3) = 0 [pid 6036] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 6036] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 6036] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 6036] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6036] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6036] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6036] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6036] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 6036] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 294.303262][ T1210] usb 1-1: new high-speed USB device number 61 using dummy_hcd [pid 6036] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6036] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6036] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 6036] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6036] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 6036] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6036] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 6036] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6036] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 6036] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 294.506319][ T1210] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 294.515381][ T1210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 294.525655][ T1210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 294.534653][ T1210] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 6036] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 6036] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6036] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 6036] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6036] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 6036] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 6036] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 6036] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 294.601161][ T1210] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 294.610378][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 294.618567][ T1210] usb 1-1: Product: syz [ 294.622849][ T1210] usb 1-1: Manufacturer: syz [ 294.663570][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 294.668832][ T1210] cdc_wdm 1-1:1.0: skipping garbage [ 294.675133][ T1210] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 294.681053][ T1210] cdc_wdm 1-1:1.0: Unknown control protocol [pid 6036] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 6036] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 6036] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 6036] exit_group(0) = ? [ 294.874342][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 294.880044][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 294.885867][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 294.891702][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 294.897367][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 294.903391][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 294.909268][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [ 294.915079][ C1] cdc_wdm 1-1:1.0: Stall on int endpoint [pid 6036] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6036, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- umount2("./185", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./185", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./185/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./185/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./185/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./185") = 0 mkdir("./186", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6037 attached , child_tidptr=0x555580316650) = 6037 [pid 6037] set_robust_list(0x555580316660, 24) = 0 [ 294.920762][ C1] cdc_wdm 1-1:1.0: Cannot schedule work [ 294.926326][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 294.936410][ T9] usb 1-1: USB disconnect, device number 61 [pid 6037] chdir("./186") = 0 [pid 6037] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6037] setpgid(0, 0) = 0 [pid 6037] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6037] write(3, "1000", 4) = 4 [pid 6037] close(3) = 0 [pid 6037] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6037] write(1, "executing program\n", 18) = 18 [pid 6037] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 6037] close(3) = 0 [pid 6037] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 6037] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 6037] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 6037] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6037] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6037] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6037] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6037] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 6037] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 295.563235][ T9] usb 1-1: new high-speed USB device number 62 using dummy_hcd [pid 6037] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6037] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6037] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 6037] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6037] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 6037] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6037] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 6037] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6037] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 6037] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6037] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 6037] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6037] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 295.756879][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 295.765614][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 295.776109][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 295.785179][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 6037] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6037] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 6037] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 6037] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 6037] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 295.830811][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 295.839978][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 295.848039][ T9] usb 1-1: Product: syz [ 295.852209][ T9] usb 1-1: Manufacturer: syz [ 295.882043][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 295.887450][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 295.893660][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 295.899583][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [pid 6037] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 6037] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 6037] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 6037] exit_group(0) = ? [ 296.093198][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 296.098914][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 296.104660][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 296.110344][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 296.116100][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 296.121960][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 296.127632][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 296.133389][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 296.139216][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 296.145021][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 296.150882][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 296.156684][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 296.162502][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 296.168306][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 296.174130][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 296.179926][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 296.185800][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [pid 6037] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6037, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- umount2("./186", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./186", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./186/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./186/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./186/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 [ 296.191924][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 296.197619][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 296.208996][ T1210] usb 1-1: USB disconnect, device number 62 close(3) = 0 rmdir("./186") = 0 mkdir("./187", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555580316650) = 6038 ./strace-static-x86_64: Process 6038 attached [pid 6038] set_robust_list(0x555580316660, 24) = 0 [pid 6038] chdir("./187") = 0 [pid 6038] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6038] setpgid(0, 0) = 0 [pid 6038] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6038] write(3, "1000", 4) = 4 [pid 6038] close(3) = 0 [pid 6038] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6038] write(1, "executing program\n", 18executing program ) = 18 [pid 6038] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [pid 6038] close(3) = 0 [pid 6038] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 6038] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb3543330) = 0 [pid 6038] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 6038] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6038] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6038] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6038] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6038] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 6038] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [ 296.843185][ T9] usb 1-1: new high-speed USB device number 63 using dummy_hcd [pid 6038] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6038] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6038] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 18 [pid 6038] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6038] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 9 [pid 6038] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6038] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 96 [pid 6038] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6038] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 4 [pid 6038] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6038] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [pid 6038] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6038] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb3542320) = 8 [ 297.027527][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 297.036365][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 297.046508][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 297.055584][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 6038] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb3543330) = 0 [pid 6038] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 6038] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 6038] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f8b53a833ec) = 0 [pid 6038] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb3542320) = 0 [ 297.101644][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 297.110865][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 297.118932][ T9] usb 1-1: Product: syz [ 297.123170][ T9] usb 1-1: Manufacturer: syz [ 297.156170][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 297.161398][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 297.167581][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 297.173598][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [pid 6038] ioctl(3, USB_RAW_IOCTL_EP_SET_WEDGE, 0) = 0 [pid 6038] openat(AT_FDCWD, "/dev/char/180:0", O_RDWR) = 4 [pid 6038] execveat(-1, NULL, NULL, NULL, AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH) = -1 EFAULT (Bad address) [pid 6038] exit_group(0) = ? [pid 6038] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6038, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [ 297.376541][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 297.382246][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 297.387982][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 297.393658][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 297.399465][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 297.405146][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 297.413916][ T9] ------------[ cut here ]------------ [ 297.414961][ T1210] usb 1-1: USB disconnect, device number 63 umount2("./187", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./187", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555803176f0 /* 3 entries */, 32768) = 80 umount2("./187/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./187/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./187/binderfs") = 0 getdents64(3, 0x5555803176f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./187") = 0 mkdir("./188", 0777) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6039 attached , child_tidptr=0x555580316650) = 6039 [pid 6039] set_robust_list(0x555580316660, 24) = 0 [ 297.419576][ C0] cdc_wdm 1-1:1.0: Unexpected error -71 [ 297.431080][ T9] URB ffff888028cd5700 submitted while active [ 297.437737][ T9] WARNING: CPU: 0 PID: 9 at drivers/usb/core/urb.c:379 usb_submit_urb+0x1039/0x18c0 [ 297.447258][ T9] Modules linked in: [ 297.451203][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:1 Not tainted 6.14.0-rc4-syzkaller-00248-g03d38806a902 #0 [ 297.461810][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 297.471947][ T9] Workqueue: events wdm_rxwork [pid 6039] chdir("./188") = 0 [pid 6039] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6039] setpgid(0, 0) = 0 [pid 6039] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6039] write(3, "1000", 4) = 4 [pid 6039] close(3) = 0 [pid 6039] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6039] write(1, "executing program\n", 18) = 18 [pid 6039] openat(AT_FDCWD, "/dev/input/event0", O_RDONLY) = 3 [ 297.476840][ T9] RIP: 0010:usb_submit_urb+0x1039/0x18c0 [ 297.482508][ T9] Code: 00 eb 66 e8 89 3e 4a fa e9 79 f0 ff ff e8 7f 3e 4a fa c6 05 c6 8e af 08 01 90 48 c7 c7 40 3c d1 8c 4c 89 ee e8 e8 fa 09 fa 90 <0f> 0b 90 90 e9 40 f0 ff ff e8 59 3e 4a fa eb 12 e8 52 3e 4a fa 41 [ 297.502392][ T9] RSP: 0018:ffffc900000e7a48 EFLAGS: 00010246 [ 297.508566][ T9] RAX: f7ad1b3a2bc4de00 RBX: 0000000000000cc0 RCX: ffff88801c2f8000 [ 297.516641][ T9] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 297.524817][ T9] RBP: ffff888028cd5708 R08: ffffffff81817e32 R09: fffffbfff1d3a614 [ 297.532820][ T9] R10: dffffc0000000000 R11: fffffbfff1d3a614 R12: 1ffff11005170012 [ 297.540868][ T9] R13: ffff888028cd5700 R14: dffffc0000000000 R15: ffff888028b80028 [ 297.548894][ T9] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 297.557906][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 297.564558][ T9] CR2: 00007ffcb35422d0 CR3: 0000000077cd0000 CR4: 00000000003526f0 [ 297.572559][ T9] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 297.580596][ T9] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 297.588609][ T9] Call Trace: [ 297.591879][ T9] [ 297.594867][ T9] ? __warn+0x165/0x4d0 [ 297.599065][ T9] ? usb_submit_urb+0x1039/0x18c0 [ 297.604256][ T9] ? report_bug+0x2b3/0x500 [ 297.608800][ T9] ? usb_submit_urb+0x1039/0x18c0 [ 297.613915][ T9] ? handle_bug+0x60/0x90 [ 297.618265][ T9] ? exc_invalid_op+0x1a/0x50 [ 297.622938][ T9] ? asm_exc_invalid_op+0x1a/0x20 [ 297.628023][ T9] ? __warn_printk+0x292/0x360 [ 297.632806][ T9] ? usb_submit_urb+0x1039/0x18c0 [ 297.637902][ T9] ? usb_submit_urb+0x1038/0x18c0 [ 297.642943][ T9] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 297.649338][ T9] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 297.655751][ T9] wdm_rxwork+0x116/0x1f0 [ 297.660115][ T9] ? process_scheduled_works+0x9c6/0x18e0 [ 297.666185][ T9] process_scheduled_works+0xabe/0x18e0 [ 297.671774][ T9] ? __pfx_process_scheduled_works+0x10/0x10 [ 297.677847][ T9] ? assign_work+0x364/0x3d0 [ 297.682472][ T9] worker_thread+0x870/0xd30 [ 297.687155][ T9] ? __kthread_parkme+0x169/0x1d0 [ 297.692219][ T9] ? __pfx_worker_thread+0x10/0x10 [ 297.697594][ T9] kthread+0x7a9/0x920 [ 297.701696][ T9] ? __pfx_kthread+0x10/0x10 [ 297.706370][ T9] ? __pfx_worker_thread+0x10/0x10 [ 297.711943][ T9] ? __pfx_kthread+0x10/0x10 [ 297.716698][ T9] ? __pfx_kthread+0x10/0x10 [ 297.721318][ T9] ? __pfx_kthread+0x10/0x10 [ 297.726017][ T9] ? _raw_spin_unlock_irq+0x23/0x50 [ 297.731259][ T9] ? lockdep_hardirqs_on+0x99/0x150 [ 297.737081][ T9] ? __pfx_kthread+0x10/0x10 [ 297.741725][ T9] ret_from_fork+0x4b/0x80 [ 297.746402][ T9] ? __pfx_kthread+0x10/0x10 [ 297.751023][ T9] ret_from_fork_asm+0x1a/0x30 [ 297.755942][ T9] [ 297.759007][ T9] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 297.766291][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:1 Not tainted 6.14.0-rc4-syzkaller-00248-g03d38806a902 #0 [ 297.776785][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 297.786838][ T9] Workqueue: events wdm_rxwork [ 297.791608][ T9] Call Trace: [ 297.794882][ T9] [ 297.797802][ T9] dump_stack_lvl+0x241/0x360 [ 297.802474][ T9] ? __pfx_dump_stack_lvl+0x10/0x10 [ 297.807662][ T9] ? __pfx__printk+0x10/0x10 [ 297.812239][ T9] ? _printk+0xd5/0x120 [ 297.816393][ T9] ? __init_begin+0x41000/0x41000 [ 297.821427][ T9] ? vscnprintf+0x5d/0x90 [ 297.825758][ T9] panic+0x349/0x880 [ 297.829655][ T9] ? __warn+0x174/0x4d0 [ 297.833811][ T9] ? __pfx_panic+0x10/0x10 [ 297.838230][ T9] ? ret_from_fork_asm+0x1a/0x30 [ 297.843169][ T9] __warn+0x344/0x4d0 [ 297.847153][ T9] ? usb_submit_urb+0x1039/0x18c0 [ 297.852189][ T9] report_bug+0x2b3/0x500 [ 297.856518][ T9] ? usb_submit_urb+0x1039/0x18c0 [ 297.861546][ T9] handle_bug+0x60/0x90 [ 297.865711][ T9] exc_invalid_op+0x1a/0x50 [ 297.870227][ T9] asm_exc_invalid_op+0x1a/0x20 [ 297.875079][ T9] RIP: 0010:usb_submit_urb+0x1039/0x18c0 [ 297.880717][ T9] Code: 00 eb 66 e8 89 3e 4a fa e9 79 f0 ff ff e8 7f 3e 4a fa c6 05 c6 8e af 08 01 90 48 c7 c7 40 3c d1 8c 4c 89 ee e8 e8 fa 09 fa 90 <0f> 0b 90 90 e9 40 f0 ff ff e8 59 3e 4a fa eb 12 e8 52 3e 4a fa 41 [ 297.900328][ T9] RSP: 0018:ffffc900000e7a48 EFLAGS: 00010246 [ 297.906394][ T9] RAX: f7ad1b3a2bc4de00 RBX: 0000000000000cc0 RCX: ffff88801c2f8000 [ 297.914363][ T9] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 297.922328][ T9] RBP: ffff888028cd5708 R08: ffffffff81817e32 R09: fffffbfff1d3a614 [ 297.930293][ T9] R10: dffffc0000000000 R11: fffffbfff1d3a614 R12: 1ffff11005170012 [ 297.938261][ T9] R13: ffff888028cd5700 R14: dffffc0000000000 R15: ffff888028b80028 [ 297.946236][ T9] ? __warn_printk+0x292/0x360 [ 297.951011][ T9] ? usb_submit_urb+0x1038/0x18c0 [ 297.956037][ T9] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 297.962359][ T9] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 297.968694][ T9] wdm_rxwork+0x116/0x1f0 [ 297.973087][ T9] ? process_scheduled_works+0x9c6/0x18e0 [ 297.978811][ T9] process_scheduled_works+0xabe/0x18e0 [ 297.984371][ T9] ? __pfx_process_scheduled_works+0x10/0x10 [ 297.990354][ T9] ? assign_work+0x364/0x3d0 [ 297.996455][ T9] worker_thread+0x870/0xd30 [ 298.001175][ T9] ? __kthread_parkme+0x169/0x1d0 [ 298.006226][ T9] ? __pfx_worker_thread+0x10/0x10 [ 298.011344][ T9] kthread+0x7a9/0x920 [ 298.015417][ T9] ? __pfx_kthread+0x10/0x10 [ 298.020008][ T9] ? __pfx_worker_thread+0x10/0x10 [ 298.025116][ T9] ? __pfx_kthread+0x10/0x10 [ 298.029705][ T9] ? __pfx_kthread+0x10/0x10 [ 298.034310][ T9] ? __pfx_kthread+0x10/0x10 [ 298.038930][ T9] ? _raw_spin_unlock_irq+0x23/0x50 [ 298.044147][ T9] ? lockdep_hardirqs_on+0x99/0x150 [ 298.049348][ T9] ? __pfx_kthread+0x10/0x10 [ 298.053968][ T9] ret_from_fork+0x4b/0x80 [ 298.058408][ T9] ? __pfx_kthread+0x10/0x10 [ 298.063011][ T9] ret_from_fork_asm+0x1a/0x30 [ 298.067787][ T9] [ 298.071052][ T9] Kernel Offset: disabled [ 298.075410][ T9] Rebooting in 86400 seconds..