./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1855131083 <...> forked to background, child pid 3186 no interfaces have a carrier [ 25.630868][ T3187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.645541][ T3187] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.10.26' (ECDSA) to the list of known hosts. execve("./syz-executor1855131083", ["./syz-executor1855131083"], 0x7ffefd1e5470 /* 10 vars */) = 0 brk(NULL) = 0x555557434000 brk(0x555557434c40) = 0x555557434c40 arch_prctl(ARCH_SET_FS, 0x555557434300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor1855131083", 4096) = 28 brk(0x555557455c40) = 0x555557455c40 brk(0x555557456000) = 0x555557456000 mprotect(0x7f41af90d000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffebe400f10) = 0 ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffebe400f10) = 0 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffebe400f10) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffebe3fff00) = 18 syzkaller login: [ 44.056266][ T146] usb 1-1: new high-speed USB device number 2 using dummy_hcd ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffebe400f10) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffebe3fff00) = 18 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffebe400f10) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffebe3fff00) = 0 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffebe400f10) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffebe3fff00) = 0 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffebe400f10) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffebe3fff00) = 0 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffebe400f10) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffebe3fff00) = 9 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffebe400f10) = 0 [ 44.456340][ T146] usb 1-1: unable to get BOS descriptor or descriptor too short ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffebe3fff00) = 128 [ 44.536346][ T146] usb 1-1: config 0 has an invalid interface number: 39 but max is 2 [ 44.544889][ T146] usb 1-1: config 0 has an invalid interface number: 182 but max is 2 [ 44.553165][ T146] usb 1-1: config 0 has an invalid interface number: 182 but max is 2 [ 44.561351][ T146] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 44.570379][ T146] usb 1-1: config 0 has no interface number 0 [ 44.576484][ T146] usb 1-1: config 0 has no interface number 1 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffebe400f10) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffebe3fff00) = 0 [ 44.582579][ T146] usb 1-1: config 0 interface 39 altsetting 9 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 44.593485][ T146] usb 1-1: config 0 interface 39 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 44.604044][ T146] usb 1-1: Duplicate descriptor for config 0 interface 182 altsetting 0, skipping [ 44.613343][ T146] usb 1-1: config 0 interface 39 has no altsetting 0 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffebe400f10) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffebe3fff00) = 0 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffebe400f10) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffebe3fff00) = 0 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffebe400f10) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffebe3fff00) = 0 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffebe400f10) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffebe3fff00) = 0 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffebe400f10) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffebe3fff00) = 0 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffebe400f10) = 0 ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0x92) = 0 ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f41af9133ac) = 1 ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffebe3fff00) = 0 [ 44.866335][ T146] usb 1-1: string descriptor 0 read error: -22 [ 44.872717][ T146] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=9c.90 [ 44.881803][ T146] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.897693][ T146] usb 1-1: config 0 descriptor?? [ 44.942058][ T146] ------------[ cut here ]------------ [ 44.947734][ T146] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 44.953825][ T146] WARNING: CPU: 1 PID: 146 at drivers/usb/core/urb.c:503 usb_submit_urb+0xce2/0x1920 [ 44.964018][ T146] Modules linked in: [ 44.968108][ T146] CPU: 1 PID: 146 Comm: kworker/1:2 Not tainted 6.0.0-rc7-syzkaller-00029-g3800a713b607 #0 [ 44.978140][ T146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 44.988351][ T146] Workqueue: usb_hub_wq hub_event [ 44.993394][ T146] RIP: 0010:usb_submit_urb+0xce2/0x1920 [ 44.998987][ T146] Code: 48 c1 e8 03 8a 04 18 84 c0 0f 85 d4 08 00 00 45 8b 06 48 c7 c7 c0 e4 53 8b 48 8b 74 24 20 4c 89 fa 89 e9 31 c0 e8 8e 8b 3d fb <0f> 0b 4c 8b 74 24 30 44 89 e5 48 89 ef 48 c7 c6 f0 03 77 8d e8 25 [ 45.018653][ T146] RSP: 0018:ffffc9000298e750 EFLAGS: 00010246 [ 45.024729][ T146] RAX: 655be801ee8acf00 RBX: dffffc0000000000 RCX: ffff88801c723b00 [ 45.032785][ T146] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 45.040822][ T146] RBP: 0000000000000001 R08: ffffffff816d5a8d R09: ffffed1017364f14 [ 45.048872][ T146] R10: ffffed1017364f14 R11: 1ffff11017364f13 R12: 0000000000000002 [ 45.056899][ T146] R13: ffff8880174a2200 R14: ffffffff8b53e2a8 R15: ffff8880180617a8 [ 45.064875][ T146] FS: 0000000000000000(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 45.073871][ T146] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 45.080485][ T146] CR2: 000055a7a5b160e0 CR3: 000000007edd3000 CR4: 00000000003506e0 exit_group(0) = ? +++ exited with 0 +++ [ 45.088533][ T146] DR0: 0000000000000000 DR1: