./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3002104464 <...> Warning: Permanently added '10.128.1.15' (ED25519) to the list of known hosts. execve("./syz-executor3002104464", ["./syz-executor3002104464"], 0x7ffea74cef40 /* 10 vars */) = 0 brk(NULL) = 0x555585025000 brk(0x555585025d00) = 0x555585025d00 arch_prctl(ARCH_SET_FS, 0x555585025380) = 0 set_tid_address(0x555585025650) = 5852 set_robust_list(0x555585025660, 24) = 0 rseq(0x555585025ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3002104464", 4096) = 28 getrandom("\xe5\xdb\xe1\x3d\xec\xd3\x86\x26", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555585025d00 brk(0x555585046d00) = 0x555585046d00 brk(0x555585047000) = 0x555585047000 mprotect(0x7f0b362cc000, 16384, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 executing program write(1, "executing program\n", 18) = 18 openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffc069a8db0) = 0 ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffc069a8db0) = 0 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffc069a8db0) = 0 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffc069a8db0) = 0 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffc069a8db0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffc069a7da0) = 18 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffc069a8db0) = 0 [ 75.125957][ T984] usb 1-1: new high-speed USB device number 2 using dummy_hcd ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffc069a8db0) = 0 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffc069a8db0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffc069a7da0) = 18 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffc069a8db0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffc069a7da0) = 9 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffc069a8db0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffc069a7da0) = 45 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffc069a8db0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffc069a7da0) = 4 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffc069a8db0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffc069a7da0) = 8 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffc069a8db0) = 0 [ 75.329665][ T984] usb 1-1: config 0 has an invalid interface number: 11 but max is 0 [ 75.337896][ T984] usb 1-1: config 0 has no interface number 0 [ 75.343980][ T984] usb 1-1: config 0 interface 11 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 8 [ 75.353737][ T984] usb 1-1: config 0 interface 11 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 75.364688][ T984] usb 1-1: config 0 interface 11 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 1024 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffc069a7da0) = 8 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffc069a8db0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffc069a7da0) = 8 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffc069a8db0) = 0 ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [ 75.440137][ T984] usb 1-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice=b4.ca [ 75.449371][ T984] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.457398][ T984] usb 1-1: Product: syz [ 75.461563][ T984] usb 1-1: Manufacturer: syz [ 75.466171][ T984] usb 1-1: SerialNumber: syz [ 75.473598][ T984] usb 1-1: config 0 descriptor?? ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f0b362d23cc) = -1 EINVAL (Invalid argument) ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f0b362d23dc) = -1 EINVAL (Invalid argument) ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f0b362d23ec) = -1 EINVAL (Invalid argument) ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffc069a7da0) = 0 [ 75.521898][ T5852] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 75.550569][ T5852] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffc069a8de0) = 0 ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = -1 EINVAL (Invalid argument) ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = -1 EINVAL (Invalid argument) ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = -1 EINVAL (Invalid argument) ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f0b362d23cc) = -1 EINVAL (Invalid argument) ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f0b362d23dc) = -1 EINVAL (Invalid argument) ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f0b362d23ec) = -1 EINVAL (Invalid argument) ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffc069a7dd0) = 0 [ 75.813264][ T5852] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 75.841641][ T5852] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffc069a8de0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffc069a7dd0) = 2 [ 76.078743][ T984] sierra_net 1-1:0.11 wwan0: register 'sierra_net' at usb-dummy_hcd.0-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:0b [ 76.092197][ T984] ------------[ cut here ]------------ [ 76.097787][ T984] WARNING: drivers/net/usb/usbnet.c:266 at usbnet_status_start+0x108/0x1d0, CPU#1: kworker/1:2/984 [ 76.108514][ T984] Modules linked in: [ 76.112464][ T984] CPU: 1 UID: 0 PID: 984 Comm: kworker/1:2 Not tainted 6.16.0-rc5-next-20250710-syzkaller #0 PREEMPT(full) [ 76.123989][ T984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 76.134183][ T984] Workqueue: usb_hub_wq hub_event [ 76.139263][ T984] RIP: 0010:usbnet_status_start+0x108/0x1d0 [ 76.145163][ T984] Code: c6 66 90 e8 6a 99 a9 fa 48 8b 7c 24 08 e8 90 57 6b 04 44 89 f0 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d e9 4a d2 6c 04 cc 90 <0f> 0b 90 41 80 3c 2c 00 74 08 4c 89 f7 e8 96 4e 0e fb 49 83 3e 00 [ 76.165661][ T984] RSP: 0018:ffffc90003a4eda0 EFLAGS: 00010246 [ 76.171778][ T984] RAX: ffffffff87166c37 RBX: ffff888027424d80 RCX: ffff888025d6da00 [ 76.179819][ T984] RDX: 0000000000000000 RSI: 0000000000000cc0 RDI: ffff888027424d80 [ 76.187825][ T984] RBP: dffffc0000000000 R08: ffff8880274240af R09: 1ffff11004e84815 [ 76.195871][ T984] R10: dffffc0000000000 R11: ffffed1004e84816 R12: 1ffff11004e84a1e [ 76.203864][ T984] R13: 0000000000000000 R14: ffff8880274250f0 R15: 0000000000000cc0 [ 76.212359][ T984] FS: 0000000000000000(0000) GS:ffff888125898000(0000) knlGS:0000000000000000 [ 76.221335][ T984] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 76.227946][ T984] CR2: 000000000066c7e0 CR3: 0000000076caa000 CR4: 00000000003526f0 [ 76.235965][ T984] Call Trace: [ 76.239233][ T984] [ 76.242164][ T984] sierra_net_probe+0x6a/0xa0 [ 76.246877][ T984] usb_probe_interface+0x637/0xbf0 [ 76.252000][ T984] ? __pfx_usb_probe_interface+0x10/0x10 [ 76.257685][ T984] really_probe+0x26a/0x9e0 [ 76.262204][ T984] __driver_probe_device+0x18c/0x2f0 [ 76.267523][ T984] driver_probe_device+0x4f/0x430 [ 76.272552][ T984] __device_attach_driver+0x2ce/0x530 exit_group(0) = ? +++ exited with 0 +++ [ 76.277951][ T9