./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2035776893 <...> Warning: Permanently added '10.128.1.60' (ECDSA) to the list of known hosts. execve("./syz-executor2035776893", ["./syz-executor2035776893"], 0x7ffcfa3ab740 /* 10 vars */) = 0 brk(NULL) = 0x5555564ec000 brk(0x5555564ecc40) = 0x5555564ecc40 arch_prctl(ARCH_SET_FS, 0x5555564ec300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor2035776893", 4096) = 28 brk(0x55555650dc40) = 0x55555650dc40 brk(0x55555650e000) = 0x55555650e000 mprotect(0x7f6b8f67a000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 ioctl(3, USB_RAW_IOCTL_INIT, 0x7fff7357c3f0) = 0 ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff7357c3f0) = 0 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff7357c3f0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fff7357b3e0) = 18 syzkaller login: [ 43.304095][ T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff7357c3f0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fff7357b3e0) = 18 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff7357c3f0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fff7357b3e0) = 9 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff7357c3f0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fff7357b3e0) = 36 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff7357c3f0) = 0 ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [ 43.664458][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50183, setting to 1024 [ 43.675647][ T7] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 43.685706][ T7] usb 1-1: New USB device found, idVendor=05ac, idProduct=0253, bcdDevice= 0.40 [ 43.694769][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.704983][ T7] usb 1-1: config 0 descriptor?? ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6b8f6803ac) = -1 EINVAL (Invalid argument) ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7fff7357b3e0) = 0 [ 43.725188][ T3615] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 43.745741][ T7] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input5 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff7357c420) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7fff7357b410) = 8 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7fff7357c420) = 0 ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7fff7357b410) = 8 [ 44.184151][ T2960] ------------[ cut here ]------------ [ 44.189617][ T2960] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 44.196209][ T2960] WARNING: CPU: 1 PID: 2960 at drivers/usb/core/urb.c:504 usb_submit_urb+0xed2/0x1880 [ 44.205959][ T2960] Modules linked in: [ 44.209842][ T2960] CPU: 1 PID: 2960 Comm: acpid Not tainted 6.0.0-rc6-next-20220923-syzkaller #0 [ 44.219112][ T2960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 44.229235][ T2960] RIP: 0010:usb_submit_urb+0xed2/0x1880 [ 44.234849][ T2960] Code: 7c 24 18 e8 50 88 12 fc 48 8b 7c 24 18 e8 66 4c 02 ff 41 89 d8 44 89 e1 4c 89 ea 48 89 c6 48 c7 c7 20 6d 8c 8a e8 4e c1 dd 03 <0f> 0b e9 58 f8 ff ff e8 22 88 12 fc 48 81 c5 c0 05 00 00 e9 84 f7 [ 44.254495][ T2960] RSP: 0018:ffffc9000316f830 EFLAGS: 00010282 [ 44.260585][ T2960] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 44.268595][ T2960] RDX: ffff88807ee81d40 RSI: ffffffff81620008 RDI: fffff5200062def8 [ 44.276611][ T2960] RBP: ffff888021196080 R08: 0000000000000005 R09: 0000000000000000 [ 44.284610][ T2960] R10: 0000000080000000 R11: 3a312d3120627375 R12: 0000000000000001 [ 44.292594][ T2960] R13: ffff8880218e4e88 R14: 0000000000000002 R15: ffff888016b58c00 [ 44.300607][ T2960] FS: 00007f30d2ede740(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 44.309561][ T2960] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 44.316179][ T2960] CR2: 0000560c48ff2458 CR3: 000000002702b000 CR4: 00000000003506f0 [ 44.324175][ T2960] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 44.332218][ T2960] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 44.340216][ T2960] Call Trace: [ 44.343491][ T2960] [ 44.346443][ T2960] bcm5974_start_traffic+0xbd/0x170 [ 44.351664][ T2960] bcm5974_open+0x9f/0x160 [ 44.356124][ T2960] input_open_device+0x1bb/0x320 [ 44.361076][ T2960] ? bcm5974_resume+0xc0/0xc0 [ 44.365787][ T2960] mousedev_open_device+0xdc/0x140 [ 44.370914][ T2960] mousedev_open+0x2f8/0x580 [ 44.375545][ T2960] ? mousedev_event+0x1370/0x1370 [ 44.380602][ T2960] chrdev_open+0x266/0x770 exit_group(0) = ? +++ exited with 0 +++ [