fc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 763.942107][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 763.950274][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 763.958273][ C1] ? kernel_init_free_pages+0x87/0x100 [ 763.963722][ C1] get_page_from_freelist+0x6b5/0xa90 [ 763.969192][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 763.974563][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 763.980260][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 763.986276][ C1] pipe_write+0x580/0x1930 [ 763.990961][ C1] ? pipe_read+0x1030/0x1030 [ 763.995560][ C1] ? fsnotify_perm+0x67/0x4e0 [ 764.000245][ C1] ? io_schedule+0x120/0x120 [ 764.004848][ C1] ? security_file_permission+0xa8/0xc0 [ 764.010401][ C1] ? iov_iter_init+0x3f/0x120 [ 764.015097][ C1] vfs_write+0xc02/0xf20 [ 764.019390][ C1] ? kernel_write+0x3c0/0x3c0 [ 764.024080][ C1] ? __fget_files+0x310/0x370 [ 764.028835][ C1] ? __fdget_pos+0x1fa/0x300 [ 764.033426][ C1] ? ksys_write+0x77/0x2b0 [ 764.037839][ C1] ksys_write+0x186/0x2b0 [ 764.042168][ C1] ? __ia32_sys_read+0x90/0x90 [ 764.046977][ C1] __x64_sys_write+0x7b/0x90 [ 764.051575][ C1] do_syscall_64+0x31/0x70 [ 764.055992][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 764.061878][ C1] RIP: 0033:0x7f9380d05049 [ 764.066290][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 764.085919][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 764.094356][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 764.102321][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 764.110291][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 764.118260][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 764.126337][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 764.134336][ C1] ---[ end trace 6a7df80a272a8495 ]--- [ 764.139912][ C1] ------------[ cut here ]------------ [ 764.145390][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 764.151448][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 764.161077][ C1] Modules linked in: [ 764.164998][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 764.176716][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 764.186806][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 764.192377][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 764.212154][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 764.218241][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 764.226231][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 764.234219][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: fffff5200002c035 [ 764.242212][ C1] R10: fffff5200002c035 R11: 0000000000000000 R12: ffff88810db870c8 [ 764.250210][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 764.258243][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 764.267191][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 764.273786][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 764.281924][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 764.289923][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 764.297914][ C1] Call Trace: [ 764.301207][ C1] [ 764.304075][ C1] aiptek_irq+0x19b7/0x25f0 [ 764.308598][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 764.314515][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 764.319638][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 764.324684][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 764.330082][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 764.335299][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 764.340165][ C1] dummy_timer+0x798/0x42a0 [ 764.344680][ C1] ? __mod_timer+0x995/0xde0 [ 764.349285][ C1] ? prandom_u32+0x254/0x380 [ 764.353890][ C1] ? __kasan_check_write+0x14/0x20 [ 764.359012][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 764.364313][ C1] ? dummy_free_streams+0x360/0x360 [ 764.369531][ C1] ? __kasan_check_write+0x14/0x20 [ 764.374656][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 764.379785][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 764.385482][ C1] ? dummy_free_streams+0x360/0x360 [ 764.390709][ C1] call_timer_fn+0x35/0x280 [ 764.395248][ C1] ? dummy_free_streams+0x360/0x360 [ 764.400467][ C1] expire_timers+0x21f/0x3b0 [ 764.405082][ C1] __run_timers+0x548/0x680 [ 764.409630][ C1] ? enqueue_timer+0x470/0x470 [ 764.414405][ C1] run_timer_softirq+0x69/0xf0 [ 764.419195][ C1] __do_softirq+0x27e/0x598 [ 764.423723][ C1] asm_call_irq_on_stack+0xf/0x20 [ 764.428835][ C1] [ 764.431786][ C1] do_softirq_own_stack+0x60/0x80 [ 764.436833][ C1] __irq_exit_rcu+0x128/0x150 [ 764.441526][ C1] irq_exit_rcu+0x9/0x10 [ 764.445781][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 764.451439][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 764.457470][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 764.462768][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 764.482532][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 764.488651][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 764.496646][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 764.504630][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 764.512617][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 764.520607][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 764.528617][ C1] ? kernel_init_free_pages+0x87/0x100 [ 764.534102][ C1] get_page_from_freelist+0x6b5/0xa90 [ 764.539495][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 764.544895][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 764.550502][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 764.556515][ C1] pipe_write+0x580/0x1930 [ 764.560964][ C1] ? pipe_read+0x1030/0x1030 [ 764.565575][ C1] ? fsnotify_perm+0x67/0x4e0 [ 764.570287][ C1] ? io_schedule+0x120/0x120 [ 764.574915][ C1] ? security_file_permission+0xa8/0xc0 [ 764.580493][ C1] ? iov_iter_init+0x3f/0x120 [ 764.585182][ C1] vfs_write+0xc02/0xf20 [ 764.589439][ C1] ? kernel_write+0x3c0/0x3c0 [ 764.594147][ C1] ? __fget_files+0x310/0x370 [ 764.598855][ C1] ? __fdget_pos+0x1fa/0x300 [ 764.603478][ C1] ? ksys_write+0x77/0x2b0 [ 764.608042][ C1] ksys_write+0x186/0x2b0 [ 764.612401][ C1] ? __ia32_sys_read+0x90/0x90 [ 764.617385][ C1] __x64_sys_write+0x7b/0x90 [ 764.621991][ C1] do_syscall_64+0x31/0x70 [ 764.626446][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 764.632345][ C1] RIP: 0033:0x7f9380d05049 [ 764.636766][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 764.656392][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 764.664836][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 764.672923][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 764.680913][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 764.688902][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 764.696899][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 764.704900][ C1] ---[ end trace 6a7df80a272a8496 ]--- [ 764.710613][ C1] ------------[ cut here ]------------ [ 764.716099][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 764.722143][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 764.731771][ C1] Modules linked in: [ 764.735672][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 764.747368][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 764.757444][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 764.762980][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 764.782602][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 764.788694][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 764.796697][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 764.804686][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: fffff5200002c035 [ 764.812659][ C1] R10: fffff5200002c035 R11: 0000000000000000 R12: ffff88810db870c8 [ 764.820622][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 764.828609][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 764.837964][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 764.844542][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 764.852526][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 764.860519][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 764.868500][ C1] Call Trace: [ 764.871966][ C1] [ 764.874852][ C1] aiptek_irq+0x19b7/0x25f0 [ 764.879366][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 764.885284][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 764.890421][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 764.895435][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 764.900803][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 764.906016][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 764.910873][ C1] dummy_timer+0x798/0x42a0 [ 764.915380][ C1] ? __mod_timer+0x995/0xde0 [ 764.919965][ C1] ? prandom_u32+0x254/0x380 [ 764.924567][ C1] ? __kasan_check_write+0x14/0x20 [ 764.929678][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 764.934884][ C1] ? dummy_free_streams+0x360/0x360 [ 764.940075][ C1] ? __kasan_check_write+0x14/0x20 [ 764.945183][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 764.950299][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 764.955849][ C1] ? dummy_free_streams+0x360/0x360 [ 764.961043][ C1] call_timer_fn+0x35/0x280 [ 764.965546][ C1] ? dummy_free_streams+0x360/0x360 [ 764.970744][ C1] expire_timers+0x21f/0x3b0 [ 764.975327][ C1] __run_timers+0x548/0x680 [ 764.979848][ C1] ? enqueue_timer+0x470/0x470 [ 764.984623][ C1] run_timer_softirq+0x69/0xf0 [ 764.989395][ C1] __do_softirq+0x27e/0x598 [ 764.993978][ C1] asm_call_irq_on_stack+0xf/0x20 [ 764.998981][ C1] [ 765.001910][ C1] do_softirq_own_stack+0x60/0x80 [ 765.006919][ C1] __irq_exit_rcu+0x128/0x150 [ 765.011587][ C1] irq_exit_rcu+0x9/0x10 [ 765.015824][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 765.021461][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 765.027432][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 765.032732][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 765.052328][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 765.058394][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 765.066443][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 765.074666][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 765.082632][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 765.090594][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 765.098602][ C1] ? kernel_init_free_pages+0x87/0x100 [ 765.104052][ C1] get_page_from_freelist+0x6b5/0xa90 [ 765.109415][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 765.114776][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 765.120305][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 765.126276][ C1] pipe_write+0x580/0x1930 [ 765.130685][ C1] ? pipe_read+0x1030/0x1030 [ 765.135274][ C1] ? fsnotify_perm+0x67/0x4e0 [ 765.139945][ C1] ? io_schedule+0x120/0x120 [ 765.144534][ C1] ? security_file_permission+0xa8/0xc0 [ 765.150074][ C1] ? iov_iter_init+0x3f/0x120 [ 765.154742][ C1] vfs_write+0xc02/0xf20 [ 765.158982][ C1] ? kernel_write+0x3c0/0x3c0 [ 765.163738][ C1] ? __fget_files+0x310/0x370 [ 765.168405][ C1] ? __fdget_pos+0x1fa/0x300 [ 765.172993][ C1] ? ksys_write+0x77/0x2b0 [ 765.177423][ C1] ksys_write+0x186/0x2b0 [ 765.181837][ C1] ? __ia32_sys_read+0x90/0x90 [ 765.186627][ C1] __x64_sys_write+0x7b/0x90 [ 765.191209][ C1] do_syscall_64+0x31/0x70 [ 765.195616][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 765.201508][ C1] RIP: 0033:0x7f9380d05049 [ 765.205924][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 765.225532][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 765.233954][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 765.241922][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 765.249893][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 765.257867][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 765.265837][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 765.273805][ C1] ---[ end trace 6a7df80a272a8497 ]--- [ 765.279396][ C1] ------------[ cut here ]------------ [ 765.284879][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 765.290937][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 765.300715][ C1] Modules linked in: [ 765.304653][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 765.316382][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 765.326469][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 765.332120][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 765.351843][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 765.357936][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 765.365923][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 765.373919][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: fffff5200002c035 [ 765.381911][ C1] R10: fffff5200002c035 R11: 0000000000000000 R12: ffff88810db870c8 [ 765.389907][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 765.397905][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 765.406945][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 765.413549][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 765.421632][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 765.429619][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 765.437604][ C1] Call Trace: [ 765.440902][ C1] [ 765.443776][ C1] aiptek_irq+0x19b7/0x25f0 [ 765.448300][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 765.454123][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 765.459248][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 765.464299][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 765.469703][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 765.474949][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 765.479821][ C1] dummy_timer+0x798/0x42a0 [ 765.484351][ C1] ? __mod_timer+0x995/0xde0 [ 765.488966][ C1] ? prandom_u32+0x254/0x380 [ 765.493576][ C1] ? __kasan_check_write+0x14/0x20 [ 765.498709][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 765.503938][ C1] ? dummy_free_streams+0x360/0x360 [ 765.509246][ C1] ? __kasan_check_write+0x14/0x20 [ 765.514376][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 765.519505][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 765.525075][ C1] ? dummy_free_streams+0x360/0x360 [ 765.530311][ C1] call_timer_fn+0x35/0x280 [ 765.534862][ C1] ? dummy_free_streams+0x360/0x360 [ 765.540096][ C1] expire_timers+0x21f/0x3b0 [ 765.544741][ C1] __run_timers+0x548/0x680 [ 765.549261][ C1] ? enqueue_timer+0x470/0x470 [ 765.554050][ C1] run_timer_softirq+0x69/0xf0 [ 765.558851][ C1] __do_softirq+0x27e/0x598 [ 765.563383][ C1] asm_call_irq_on_stack+0xf/0x20 [ 765.568513][ C1] [ 765.571481][ C1] do_softirq_own_stack+0x60/0x80 [ 765.576519][ C1] __irq_exit_rcu+0x128/0x150 [ 765.581222][ C1] irq_exit_rcu+0x9/0x10 [ 765.585490][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 765.591147][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 765.597180][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 765.602510][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 765.622392][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 765.628504][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 765.636536][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 765.644535][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 765.652528][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 765.660521][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 765.668756][ C1] ? kernel_init_free_pages+0x87/0x100 [ 765.674243][ C1] get_page_from_freelist+0x6b5/0xa90 [ 765.679650][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 765.685073][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 765.690640][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 765.696650][ C1] pipe_write+0x580/0x1930 [ 765.701109][ C1] ? pipe_read+0x1030/0x1030 [ 765.705725][ C1] ? fsnotify_perm+0x67/0x4e0 [ 765.710431][ C1] ? io_schedule+0x120/0x120 [ 765.715055][ C1] ? security_file_permission+0xa8/0xc0 [ 765.720822][ C1] ? iov_iter_init+0x3f/0x120 [ 765.725533][ C1] vfs_write+0xc02/0xf20 [ 765.729798][ C1] ? kernel_write+0x3c0/0x3c0 [ 765.734512][ C1] ? __fget_files+0x310/0x370 [ 765.739234][ C1] ? __fdget_pos+0x1fa/0x300 [ 765.743864][ C1] ? ksys_write+0x77/0x2b0 [ 765.748336][ C1] ksys_write+0x186/0x2b0 [ 765.752712][ C1] ? __ia32_sys_read+0x90/0x90 [ 765.757518][ C1] __x64_sys_write+0x7b/0x90 [ 765.762148][ C1] do_syscall_64+0x31/0x70 [ 765.766590][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 765.772499][ C1] RIP: 0033:0x7f9380d05049 [ 765.776945][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 765.796589][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 765.805019][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 765.813014][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 765.821001][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 765.829158][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 765.837145][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 765.845150][ C1] ---[ end trace 6a7df80a272a8498 ]--- [ 765.850699][ C1] ------------[ cut here ]------------ [ 765.856179][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 765.862226][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 765.871860][ C1] Modules linked in: [ 765.875825][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 765.887669][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 765.897776][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 765.903345][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 765.923154][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 765.929492][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 765.937484][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 765.945477][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: fffff5200002c035 [ 765.953470][ C1] R10: fffff5200002c035 R11: 0000000000000000 R12: ffff88810db870c8 [ 765.961477][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 765.969477][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 765.978431][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 765.985037][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 765.993045][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 766.001050][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 766.009097][ C1] Call Trace: [ 766.012406][ C1] [ 766.015309][ C1] aiptek_irq+0x19b7/0x25f0 [ 766.019846][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 766.025692][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 766.030845][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 766.036033][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 766.041707][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 766.046940][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 766.051994][ C1] dummy_timer+0x798/0x42a0 [ 766.056664][ C1] ? __mod_timer+0x995/0xde0 [ 766.061288][ C1] ? prandom_u32+0x254/0x380 [ 766.065959][ C1] ? __kasan_check_write+0x14/0x20 [ 766.071195][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 766.076453][ C1] ? dummy_free_streams+0x360/0x360 [ 766.081706][ C1] ? __kasan_check_write+0x14/0x20 [ 766.086851][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 766.091999][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 766.097580][ C1] ? dummy_free_streams+0x360/0x360 [ 766.102854][ C1] call_timer_fn+0x35/0x280 [ 766.107402][ C1] ? dummy_free_streams+0x360/0x360 [ 766.112741][ C1] expire_timers+0x21f/0x3b0 [ 766.117386][ C1] __run_timers+0x548/0x680 [ 766.121912][ C1] ? enqueue_timer+0x470/0x470 [ 766.126729][ C1] run_timer_softirq+0x69/0xf0 [ 766.131529][ C1] __do_softirq+0x27e/0x598 [ 766.136070][ C1] asm_call_irq_on_stack+0xf/0x20 [ 766.141102][ C1] [ 766.144063][ C1] do_softirq_own_stack+0x60/0x80 [ 766.149277][ C1] __irq_exit_rcu+0x128/0x150 [ 766.154095][ C1] irq_exit_rcu+0x9/0x10 [ 766.158388][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 766.164080][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 766.170105][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 766.175453][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 766.195081][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 766.202304][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 766.210298][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 766.218329][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 766.226683][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 766.234965][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 766.243004][ C1] ? kernel_init_free_pages+0x87/0x100 [ 766.248500][ C1] get_page_from_freelist+0x6b5/0xa90 [ 766.253934][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 766.259358][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 766.264934][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 766.270989][ C1] pipe_write+0x580/0x1930 [ 766.275487][ C1] ? pipe_read+0x1030/0x1030 [ 766.280110][ C1] ? fsnotify_perm+0x67/0x4e0 [ 766.284823][ C1] ? io_schedule+0x120/0x120 [ 766.289534][ C1] ? security_file_permission+0xa8/0xc0 [ 766.295201][ C1] ? iov_iter_init+0x3f/0x120 [ 766.300085][ C1] vfs_write+0xc02/0xf20 [ 766.304353][ C1] ? kernel_write+0x3c0/0x3c0 [ 766.309049][ C1] ? __fget_files+0x310/0x370 [ 766.313754][ C1] ? __fdget_pos+0x1fa/0x300 [ 766.318576][ C1] ? ksys_write+0x77/0x2b0 [ 766.323018][ C1] ksys_write+0x186/0x2b0 [ 766.327476][ C1] ? __ia32_sys_read+0x90/0x90 [ 766.332356][ C1] __x64_sys_write+0x7b/0x90 [ 766.336996][ C1] do_syscall_64+0x31/0x70 [ 766.341447][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 766.347379][ C1] RIP: 0033:0x7f9380d05049 [ 766.351808][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 766.371551][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 766.380104][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 766.388108][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 766.396114][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 766.405028][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 766.413019][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 766.421188][ C1] ---[ end trace 6a7df80a272a8499 ]--- [ 766.426910][ C1] ------------[ cut here ]------------ [ 766.432396][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 766.438482][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 766.448211][ C1] Modules linked in: [ 766.452147][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 766.463878][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 766.474236][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 766.479845][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 766.499492][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 766.505587][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 766.513681][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 766.521708][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: fffff5200002c035 [ 766.529749][ C1] R10: fffff5200002c035 R11: 0000000000000000 R12: ffff88810db870c8 [ 766.537745][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 766.545755][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 766.554698][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 766.561305][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 766.569327][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 766.577354][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 766.585344][ C1] Call Trace: [ 766.588677][ C1] [ 766.591557][ C1] aiptek_irq+0x19b7/0x25f0 [ 766.596095][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 766.601945][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 766.607077][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 766.613173][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 766.618587][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 766.623837][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 766.628719][ C1] dummy_timer+0x798/0x42a0 [ 766.633250][ C1] ? enqueue_timer+0x1d1/0x470 [ 766.638033][ C1] ? __mod_timer+0x995/0xde0 [ 766.642660][ C1] ? mod_timer_pending+0x30/0x30 [ 766.647610][ C1] ? __kasan_check_write+0x14/0x20 [ 766.652735][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 766.657955][ C1] ? dummy_free_streams+0x360/0x360 [ 766.663176][ C1] ? __kasan_check_write+0x14/0x20 [ 766.668305][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 766.673437][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 766.679018][ C1] ? dummy_free_streams+0x360/0x360 [ 766.684230][ C1] call_timer_fn+0x35/0x280 [ 766.688763][ C1] ? dummy_free_streams+0x360/0x360 [ 766.694008][ C1] expire_timers+0x21f/0x3b0 [ 766.698636][ C1] __run_timers+0x548/0x680 [ 766.703162][ C1] ? enqueue_timer+0x470/0x470 [ 766.707969][ C1] run_timer_softirq+0x69/0xf0 [ 766.712768][ C1] __do_softirq+0x27e/0x598 [ 766.717383][ C1] asm_call_irq_on_stack+0xf/0x20 [ 766.722397][ C1] [ 766.725340][ C1] do_softirq_own_stack+0x60/0x80 [ 766.730393][ C1] __irq_exit_rcu+0x128/0x150 [ 766.735084][ C1] irq_exit_rcu+0x9/0x10 [ 766.739333][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 766.744960][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 766.750935][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 766.756215][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 766.775845][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 766.781934][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 766.789919][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 766.797898][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 766.805883][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 766.813986][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 766.822068][ C1] ? kernel_init_free_pages+0x87/0x100 [ 766.827693][ C1] get_page_from_freelist+0x6b5/0xa90 [ 766.833070][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 766.838436][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 766.843977][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 766.850048][ C1] pipe_write+0x580/0x1930 [ 766.854459][ C1] ? pipe_read+0x1030/0x1030 [ 766.859047][ C1] ? fsnotify_perm+0x67/0x4e0 [ 766.863743][ C1] ? io_schedule+0x120/0x120 [ 766.868328][ C1] ? security_file_permission+0xa8/0xc0 [ 766.873904][ C1] ? iov_iter_init+0x3f/0x120 [ 766.878590][ C1] vfs_write+0xc02/0xf20 [ 766.882848][ C1] ? kernel_write+0x3c0/0x3c0 [ 766.887582][ C1] ? __fget_files+0x310/0x370 [ 766.892280][ C1] ? __fdget_pos+0x1fa/0x300 [ 766.896878][ C1] ? ksys_write+0x77/0x2b0 [ 766.901402][ C1] ksys_write+0x186/0x2b0 [ 766.905735][ C1] ? __ia32_sys_read+0x90/0x90 [ 766.910506][ C1] __x64_sys_write+0x7b/0x90 [ 766.915088][ C1] do_syscall_64+0x31/0x70 [ 766.919499][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 766.925381][ C1] RIP: 0033:0x7f9380d05049 [ 766.929877][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 766.949482][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 766.957985][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 766.965974][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 766.973938][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 766.981902][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 766.989885][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 766.997879][ C1] ---[ end trace 6a7df80a272a849a ]--- [ 767.003456][ C1] ------------[ cut here ]------------ [ 767.008933][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 767.014972][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 767.024617][ C1] Modules linked in: [ 767.028560][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 767.040278][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 767.050376][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 767.055943][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 767.075572][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 767.081678][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 767.089769][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 767.097786][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: fffff5200002c035 [ 767.105788][ C1] R10: fffff5200002c035 R11: 0000000000000000 R12: ffff88810db870c8 [ 767.113798][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 767.121803][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 767.130762][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 767.137377][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 767.145372][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 767.153379][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 767.161371][ C1] Call Trace: [ 767.164752][ C1] [ 767.167637][ C1] aiptek_irq+0x19b7/0x25f0 [ 767.172156][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 767.177983][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 767.183118][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 767.188250][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 767.193651][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 767.198874][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 767.203762][ C1] dummy_timer+0x798/0x42a0 [ 767.208284][ C1] ? enqueue_timer+0x1d1/0x470 [ 767.213071][ C1] ? __mod_timer+0x995/0xde0 [ 767.217683][ C1] ? mod_timer_pending+0x30/0x30 [ 767.222642][ C1] ? __kasan_check_write+0x14/0x20 [ 767.227775][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 767.233001][ C1] ? dummy_free_streams+0x360/0x360 [ 767.238234][ C1] ? __kasan_check_write+0x14/0x20 [ 767.243379][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 767.248535][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 767.254113][ C1] ? dummy_free_streams+0x360/0x360 [ 767.259434][ C1] call_timer_fn+0x35/0x280 [ 767.263979][ C1] ? dummy_free_streams+0x360/0x360 [ 767.269206][ C1] expire_timers+0x21f/0x3b0 [ 767.273821][ C1] __run_timers+0x548/0x680 [ 767.278370][ C1] ? enqueue_timer+0x470/0x470 [ 767.283176][ C1] run_timer_softirq+0x69/0xf0 [ 767.287980][ C1] __do_softirq+0x27e/0x598 [ 767.292518][ C1] asm_call_irq_on_stack+0xf/0x20 [ 767.297558][ C1] [ 767.300539][ C1] do_softirq_own_stack+0x60/0x80 [ 767.305590][ C1] __irq_exit_rcu+0x128/0x150 [ 767.310304][ C1] irq_exit_rcu+0x9/0x10 [ 767.314580][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 767.320245][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 767.326304][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 767.331835][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 767.351468][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 767.357859][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 767.365861][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 767.373841][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 767.381815][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 767.389799][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 767.397815][ C1] ? kernel_init_free_pages+0x87/0x100 [ 767.403270][ C1] get_page_from_freelist+0x6b5/0xa90 [ 767.408739][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 767.414114][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 767.419661][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 767.425784][ C1] pipe_write+0x580/0x1930 [ 767.430243][ C1] ? pipe_read+0x1030/0x1030 [ 767.434841][ C1] ? fsnotify_perm+0x67/0x4e0 [ 767.439540][ C1] ? io_schedule+0x120/0x120 [ 767.444182][ C1] ? security_file_permission+0xa8/0xc0 [ 767.449743][ C1] ? iov_iter_init+0x3f/0x120 [ 767.454431][ C1] vfs_write+0xc02/0xf20 [ 767.458717][ C1] ? kernel_write+0x3c0/0x3c0 [ 767.463400][ C1] ? __fget_files+0x310/0x370 [ 767.468071][ C1] ? __fdget_pos+0x1fa/0x300 [ 767.472683][ C1] ? ksys_write+0x77/0x2b0 [ 767.477158][ C1] ksys_write+0x186/0x2b0 [ 767.481498][ C1] ? __ia32_sys_read+0x90/0x90 [ 767.486307][ C1] __x64_sys_write+0x7b/0x90 [ 767.490929][ C1] do_syscall_64+0x31/0x70 [ 767.495347][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 767.501376][ C1] RIP: 0033:0x7f9380d05049 [ 767.505814][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 767.525453][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 767.533871][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 767.541850][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 767.549817][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 767.557877][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 767.565844][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 767.573836][ C1] ---[ end trace 6a7df80a272a849b ]--- [ 767.579397][ C1] ------------[ cut here ]------------ [ 767.584873][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 767.590936][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 767.600572][ C1] Modules linked in: [ 767.604505][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 767.616223][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 767.626327][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 767.631979][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 767.651611][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 767.657725][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 767.665813][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 767.673816][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: fffff5200002c035 [ 767.681807][ C1] R10: fffff5200002c035 R11: 0000000000000000 R12: ffff88810db870c8 [ 767.689803][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 767.697796][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 767.706745][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 767.713354][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 767.721345][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 767.729340][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 767.737328][ C1] Call Trace: [ 767.740619][ C1] [ 767.743501][ C1] aiptek_irq+0x19b7/0x25f0 [ 767.748019][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 767.753860][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 767.758992][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 767.764045][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 767.769440][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 767.774665][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 767.779533][ C1] dummy_timer+0x798/0x42a0 [ 767.784041][ C1] ? enqueue_timer+0x1d1/0x470 [ 767.788824][ C1] ? __mod_timer+0x995/0xde0 [ 767.793572][ C1] ? mod_timer_pending+0x30/0x30 [ 767.798546][ C1] ? __kasan_check_write+0x14/0x20 [ 767.803680][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 767.808922][ C1] ? dummy_free_streams+0x360/0x360 [ 767.814359][ C1] ? __kasan_check_write+0x14/0x20 [ 767.819579][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 767.824802][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 767.830381][ C1] ? dummy_free_streams+0x360/0x360 [ 767.835607][ C1] call_timer_fn+0x35/0x280 [ 767.840132][ C1] ? dummy_free_streams+0x360/0x360 [ 767.845465][ C1] expire_timers+0x21f/0x3b0 [ 767.850074][ C1] __run_timers+0x548/0x680 [ 767.854599][ C1] ? enqueue_timer+0x470/0x470 [ 767.859380][ C1] run_timer_softirq+0x69/0xf0 [ 767.864243][ C1] __do_softirq+0x27e/0x598 [ 767.868764][ C1] asm_call_irq_on_stack+0xf/0x20 [ 767.873790][ C1] [ 767.876752][ C1] do_softirq_own_stack+0x60/0x80 [ 767.881812][ C1] __irq_exit_rcu+0x128/0x150 [ 767.886548][ C1] irq_exit_rcu+0x9/0x10 [ 767.890813][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 767.896476][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 767.902478][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 767.907774][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 767.927395][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 767.933494][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 767.941654][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 767.949654][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 767.957662][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 767.965666][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 767.973692][ C1] ? kernel_init_free_pages+0x87/0x100 [ 767.979178][ C1] get_page_from_freelist+0x6b5/0xa90 [ 767.984573][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 767.989982][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 767.995561][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 768.001604][ C1] pipe_write+0x580/0x1930 [ 768.006046][ C1] ? pipe_read+0x1030/0x1030 [ 768.010791][ C1] ? fsnotify_perm+0x67/0x4e0 [ 768.015502][ C1] ? io_schedule+0x120/0x120 [ 768.020123][ C1] ? security_file_permission+0xa8/0xc0 [ 768.025693][ C1] ? iov_iter_init+0x3f/0x120 [ 768.030394][ C1] vfs_write+0xc02/0xf20 [ 768.034672][ C1] ? kernel_write+0x3c0/0x3c0 [ 768.039380][ C1] ? __fget_files+0x310/0x370 [ 768.044075][ C1] ? __fdget_pos+0x1fa/0x300 [ 768.048972][ C1] ? ksys_write+0x77/0x2b0 [ 768.053409][ C1] ksys_write+0x186/0x2b0 [ 768.057764][ C1] ? __ia32_sys_read+0x90/0x90 [ 768.062569][ C1] __x64_sys_write+0x7b/0x90 [ 768.067627][ C1] do_syscall_64+0x31/0x70 [ 768.072065][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 768.077973][ C1] RIP: 0033:0x7f9380d05049 [ 768.082418][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 768.102049][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 768.110491][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 768.118491][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 768.126493][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 768.134492][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 768.142605][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 768.150609][ C1] ---[ end trace 6a7df80a272a849c ]--- [ 768.156206][ C1] ------------[ cut here ]------------ [ 768.161876][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 768.167903][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 768.177867][ C1] Modules linked in: [ 768.181776][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 768.193475][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 768.203576][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 768.209142][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 768.228843][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 768.234921][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 768.242892][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 768.250872][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: fffff5200002c035 [ 768.258847][ C1] R10: fffff5200002c035 R11: 0000000000000000 R12: ffff88810db870c8 [ 768.266824][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 768.274805][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 768.283737][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 768.290325][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 768.298430][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 768.306404][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 768.314778][ C1] Call Trace: [ 768.318065][ C1] [ 768.320922][ C1] aiptek_irq+0x19b7/0x25f0 [ 768.325429][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 768.331235][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 768.336352][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 768.341384][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 768.346765][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 768.351967][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 768.356822][ C1] dummy_timer+0x798/0x42a0 [ 768.361327][ C1] ? enqueue_timer+0x1d1/0x470 [ 768.366114][ C1] ? __mod_timer+0x995/0xde0 [ 768.370716][ C1] ? mod_timer_pending+0x30/0x30 [ 768.375660][ C1] ? __kasan_check_write+0x14/0x20 [ 768.380788][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 768.385995][ C1] ? dummy_free_streams+0x360/0x360 [ 768.391383][ C1] ? __kasan_check_write+0x14/0x20 [ 768.396527][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 768.401661][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 768.407394][ C1] ? dummy_free_streams+0x360/0x360 [ 768.412683][ C1] call_timer_fn+0x35/0x280 [ 768.417208][ C1] ? dummy_free_streams+0x360/0x360 [ 768.422525][ C1] expire_timers+0x21f/0x3b0 [ 768.427148][ C1] __run_timers+0x548/0x680 [ 768.431669][ C1] ? enqueue_timer+0x470/0x470 [ 768.436432][ C1] run_timer_softirq+0x69/0xf0 [ 768.441283][ C1] __do_softirq+0x27e/0x598 [ 768.445793][ C1] asm_call_irq_on_stack+0xf/0x20 [ 768.450806][ C1] [ 768.453753][ C1] do_softirq_own_stack+0x60/0x80 [ 768.458781][ C1] __irq_exit_rcu+0x128/0x150 [ 768.463464][ C1] irq_exit_rcu+0x9/0x10 [ 768.467714][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 768.473363][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 768.479449][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 768.484739][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 768.504591][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 768.510681][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 768.518667][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 768.526663][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 768.534660][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 768.542727][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 768.550757][ C1] ? kernel_init_free_pages+0x87/0x100 [ 768.556227][ C1] get_page_from_freelist+0x6b5/0xa90 [ 768.561608][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 768.566990][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 768.572536][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 768.578524][ C1] pipe_write+0x580/0x1930 [ 768.582949][ C1] ? pipe_read+0x1030/0x1030 [ 768.587572][ C1] ? fsnotify_perm+0x67/0x4e0 [ 768.592259][ C1] ? io_schedule+0x120/0x120 [ 768.596861][ C1] ? security_file_permission+0xa8/0xc0 [ 768.602416][ C1] ? iov_iter_init+0x3f/0x120 [ 768.607121][ C1] vfs_write+0xc02/0xf20 [ 768.611381][ C1] ? kernel_write+0x3c0/0x3c0 [ 768.616071][ C1] ? __fget_files+0x310/0x370 [ 768.620751][ C1] ? __fdget_pos+0x1fa/0x300 [ 768.625342][ C1] ? ksys_write+0x77/0x2b0 [ 768.629756][ C1] ksys_write+0x186/0x2b0 [ 768.634124][ C1] ? __ia32_sys_read+0x90/0x90 [ 768.638898][ C1] __x64_sys_write+0x7b/0x90 [ 768.643616][ C1] do_syscall_64+0x31/0x70 [ 768.648026][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 768.653913][ C1] RIP: 0033:0x7f9380d05049 [ 768.658328][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 768.678093][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 768.686636][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 768.694627][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 768.702622][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 768.710612][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 768.718588][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 768.726566][ C1] ---[ end trace 6a7df80a272a849d ]--- [ 768.732227][ C1] ------------[ cut here ]------------ [ 768.739862][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 768.745901][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 768.755532][ C1] Modules linked in: [ 768.759464][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 768.771181][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 768.781293][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 768.786854][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 768.806829][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 768.812968][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 768.820975][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 768.828979][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: fffff5200002c035 [ 768.836974][ C1] R10: fffff5200002c035 R11: 0000000000000000 R12: ffff88810db870c8 [ 768.844965][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 768.852963][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 768.861918][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 768.868529][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 768.876527][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 768.884543][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 768.892532][ C1] Call Trace: [ 768.895823][ C1] [ 768.898703][ C1] aiptek_irq+0x19b7/0x25f0 [ 768.903246][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 768.909072][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 768.914201][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 768.919248][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 768.924658][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 768.929877][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 768.934745][ C1] dummy_timer+0x798/0x42a0 [ 768.939275][ C1] ? enqueue_timer+0x1d1/0x470 [ 768.944065][ C1] ? __mod_timer+0x995/0xde0 [ 768.948694][ C1] ? mod_timer_pending+0x30/0x30 [ 768.953667][ C1] ? __kasan_check_write+0x14/0x20 [ 768.958803][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 768.964016][ C1] ? dummy_free_streams+0x360/0x360 [ 768.969231][ C1] ? __kasan_check_write+0x14/0x20 [ 768.974476][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 768.979635][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 768.985211][ C1] ? dummy_free_streams+0x360/0x360 [ 768.990439][ C1] call_timer_fn+0x35/0x280 [ 768.994970][ C1] ? dummy_free_streams+0x360/0x360 [ 769.000212][ C1] expire_timers+0x21f/0x3b0 [ 769.004916][ C1] __run_timers+0x548/0x680 [ 769.009470][ C1] ? enqueue_timer+0x470/0x470 [ 769.014278][ C1] run_timer_softirq+0x69/0xf0 [ 769.019068][ C1] __do_softirq+0x27e/0x598 [ 769.023590][ C1] asm_call_irq_on_stack+0xf/0x20 [ 769.028613][ C1] [ 769.031572][ C1] do_softirq_own_stack+0x60/0x80 [ 769.036613][ C1] __irq_exit_rcu+0x128/0x150 [ 769.041306][ C1] irq_exit_rcu+0x9/0x10 [ 769.045566][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 769.051218][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 769.057226][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 769.062757][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 769.082497][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 769.088732][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 769.096729][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 769.104729][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 769.112726][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 769.120734][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 769.128755][ C1] ? kernel_init_free_pages+0x87/0x100 [ 769.134251][ C1] get_page_from_freelist+0x6b5/0xa90 [ 769.139655][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 769.145051][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 769.150626][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 769.156630][ C1] pipe_write+0x580/0x1930 [ 769.161065][ C1] ? pipe_read+0x1030/0x1030 [ 769.165662][ C1] ? fsnotify_perm+0x67/0x4e0 [ 769.170356][ C1] ? io_schedule+0x120/0x120 [ 769.174965][ C1] ? security_file_permission+0xa8/0xc0 [ 769.180525][ C1] ? iov_iter_init+0x3f/0x120 [ 769.185223][ C1] vfs_write+0xc02/0xf20 [ 769.189477][ C1] ? kernel_write+0x3c0/0x3c0 [ 769.194168][ C1] ? __fget_files+0x310/0x370 [ 769.198859][ C1] ? __fdget_pos+0x1fa/0x300 [ 769.203465][ C1] ? ksys_write+0x77/0x2b0 [ 769.207893][ C1] ksys_write+0x186/0x2b0 [ 769.212240][ C1] ? __ia32_sys_read+0x90/0x90 [ 769.217060][ C1] __x64_sys_write+0x7b/0x90 [ 769.221662][ C1] do_syscall_64+0x31/0x70 [ 769.226097][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 769.231997][ C1] RIP: 0033:0x7f9380d05049 [ 769.236430][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 769.256049][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 769.264570][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 769.272570][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 769.280562][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 769.288553][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 769.296542][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 769.304543][ C1] ---[ end trace 6a7df80a272a849e ]--- [ 769.310097][ C1] ------------[ cut here ]------------ [ 769.315783][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 769.321833][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 769.331548][ C1] Modules linked in: [ 769.335473][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 769.347277][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 769.357368][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 769.362902][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 769.382511][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 769.388587][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 769.396565][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 769.404538][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 769.412503][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 769.420466][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 769.428443][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 769.437542][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 769.444144][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 769.452142][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 769.460122][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 769.468213][ C1] Call Trace: [ 769.471626][ C1] [ 769.474505][ C1] aiptek_irq+0x19b7/0x25f0 [ 769.479024][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 769.484915][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 769.490066][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 769.495084][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 769.500453][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 769.505644][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 769.510517][ C1] dummy_timer+0x798/0x42a0 [ 769.515014][ C1] ? enqueue_timer+0x1d1/0x470 [ 769.519772][ C1] ? __mod_timer+0x995/0xde0 [ 769.524361][ C1] ? mod_timer_pending+0x30/0x30 [ 769.529399][ C1] ? __kasan_check_write+0x14/0x20 [ 769.534503][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 769.539699][ C1] ? dummy_free_streams+0x360/0x360 [ 769.544978][ C1] ? __kasan_check_write+0x14/0x20 [ 769.550084][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 769.555198][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 769.560737][ C1] ? dummy_free_streams+0x360/0x360 [ 769.565933][ C1] call_timer_fn+0x35/0x280 [ 769.570427][ C1] ? dummy_free_streams+0x360/0x360 [ 769.575630][ C1] expire_timers+0x21f/0x3b0 [ 769.580222][ C1] __run_timers+0x548/0x680 [ 769.584723][ C1] ? enqueue_timer+0x470/0x470 [ 769.589489][ C1] run_timer_softirq+0x69/0xf0 [ 769.594251][ C1] __do_softirq+0x27e/0x598 [ 769.598744][ C1] asm_call_irq_on_stack+0xf/0x20 [ 769.603785][ C1] [ 769.606745][ C1] do_softirq_own_stack+0x60/0x80 [ 769.611766][ C1] __irq_exit_rcu+0x128/0x150 [ 769.616437][ C1] irq_exit_rcu+0x9/0x10 [ 769.620669][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 769.626306][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 769.632289][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 769.637566][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 769.657193][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 769.663305][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 769.671293][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 769.679297][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 769.687300][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 769.695294][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 769.703299][ C1] ? kernel_init_free_pages+0x87/0x100 [ 769.708763][ C1] get_page_from_freelist+0x6b5/0xa90 [ 769.714161][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 769.719575][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 769.725317][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 769.731339][ C1] pipe_write+0x580/0x1930 [ 769.735858][ C1] ? pipe_read+0x1030/0x1030 [ 769.740461][ C1] ? fsnotify_perm+0x67/0x4e0 [ 769.745142][ C1] ? io_schedule+0x120/0x120 [ 769.749761][ C1] ? security_file_permission+0xa8/0xc0 [ 769.755318][ C1] ? iov_iter_init+0x3f/0x120 [ 769.759991][ C1] vfs_write+0xc02/0xf20 [ 769.764262][ C1] ? kernel_write+0x3c0/0x3c0 [ 769.768944][ C1] ? __fget_files+0x310/0x370 [ 769.773624][ C1] ? __fdget_pos+0x1fa/0x300 [ 769.778353][ C1] ? ksys_write+0x77/0x2b0 [ 769.782820][ C1] ksys_write+0x186/0x2b0 [ 769.787173][ C1] ? __ia32_sys_read+0x90/0x90 [ 769.791928][ C1] __x64_sys_write+0x7b/0x90 [ 769.796625][ C1] do_syscall_64+0x31/0x70 [ 769.801046][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 769.806933][ C1] RIP: 0033:0x7f9380d05049 [ 769.811356][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 769.830963][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 769.839397][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 769.847368][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 769.855363][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 769.863329][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 769.871310][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 769.879294][ C1] ---[ end trace 6a7df80a272a849f ]--- [ 769.884934][ C1] ------------[ cut here ]------------ [ 769.890406][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 769.896453][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 769.906088][ C1] Modules linked in: [ 769.910020][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 769.921753][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 769.932037][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 769.937690][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 769.957319][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 769.963410][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 769.971404][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 769.979415][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: fffff5200002c035 [ 769.987416][ C1] R10: fffff5200002c035 R11: 0000000000000000 R12: ffff88810db870c8 [ 769.995410][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 770.003417][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 770.012379][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 770.019002][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 770.026998][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 770.035096][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 770.043101][ C1] Call Trace: [ 770.046398][ C1] [ 770.049293][ C1] aiptek_irq+0x19b7/0x25f0 [ 770.053810][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 770.059636][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 770.064775][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 770.069832][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 770.075234][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 770.080447][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 770.085320][ C1] dummy_timer+0x798/0x42a0 [ 770.089924][ C1] ? enqueue_timer+0x1d1/0x470 [ 770.094710][ C1] ? __mod_timer+0x995/0xde0 [ 770.099343][ C1] ? mod_timer_pending+0x30/0x30 [ 770.104310][ C1] ? __kasan_check_write+0x14/0x20 [ 770.109457][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 770.114682][ C1] ? dummy_free_streams+0x360/0x360 [ 770.119897][ C1] ? __kasan_check_write+0x14/0x20 [ 770.125030][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 770.130251][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 770.135826][ C1] ? dummy_free_streams+0x360/0x360 [ 770.141054][ C1] call_timer_fn+0x35/0x280 [ 770.145610][ C1] ? dummy_free_streams+0x360/0x360 [ 770.150947][ C1] expire_timers+0x21f/0x3b0 [ 770.155646][ C1] __run_timers+0x548/0x680 [ 770.160189][ C1] ? enqueue_timer+0x470/0x470 [ 770.164977][ C1] run_timer_softirq+0x69/0xf0 [ 770.169766][ C1] __do_softirq+0x27e/0x598 [ 770.174297][ C1] asm_call_irq_on_stack+0xf/0x20 [ 770.179322][ C1] [ 770.182284][ C1] do_softirq_own_stack+0x60/0x80 [ 770.187320][ C1] __irq_exit_rcu+0x128/0x150 [ 770.192013][ C1] irq_exit_rcu+0x9/0x10 [ 770.196281][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 770.201934][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 770.207942][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 770.213245][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 770.232875][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 770.238956][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 770.246947][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 770.254943][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 770.262936][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 770.271018][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 770.279026][ C1] ? kernel_init_free_pages+0x87/0x100 [ 770.284527][ C1] get_page_from_freelist+0x6b5/0xa90 [ 770.289934][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 770.295548][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 770.301160][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 770.307177][ C1] pipe_write+0x580/0x1930 [ 770.311613][ C1] ? pipe_read+0x1030/0x1030 [ 770.316213][ C1] ? fsnotify_perm+0x67/0x4e0 [ 770.321061][ C1] ? io_schedule+0x120/0x120 [ 770.325735][ C1] ? security_file_permission+0xa8/0xc0 [ 770.331328][ C1] ? iov_iter_init+0x3f/0x120 [ 770.336034][ C1] vfs_write+0xc02/0xf20 [ 770.340487][ C1] ? kernel_write+0x3c0/0x3c0 [ 770.345186][ C1] ? __fget_files+0x310/0x370 [ 770.349897][ C1] ? __fdget_pos+0x1fa/0x300 [ 770.354517][ C1] ? ksys_write+0x77/0x2b0 [ 770.359041][ C1] ksys_write+0x186/0x2b0 [ 770.363388][ C1] ? __ia32_sys_read+0x90/0x90 [ 770.368168][ C1] __x64_sys_write+0x7b/0x90 [ 770.372779][ C1] do_syscall_64+0x31/0x70 [ 770.377332][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 770.383341][ C1] RIP: 0033:0x7f9380d05049 [ 770.387778][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 770.407417][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 770.415892][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 770.423914][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 770.431908][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 770.440327][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 770.448301][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 770.456269][ C1] ---[ end trace 6a7df80a272a84a0 ]--- [ 770.461841][ C1] ------------[ cut here ]------------ [ 770.467374][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 770.473415][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 770.483138][ C1] Modules linked in: [ 770.487082][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 770.498799][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 770.508862][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 770.514412][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 770.534017][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 770.540079][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 770.548053][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 770.556038][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: fffff5200002c035 [ 770.564005][ C1] R10: fffff5200002c035 R11: 0000000000000000 R12: ffff88810db870c8 [ 770.571973][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 770.579936][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 770.589036][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 770.595609][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 770.603576][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 770.611533][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 770.619599][ C1] Call Trace: [ 770.622872][ C1] [ 770.625759][ C1] aiptek_irq+0x19b7/0x25f0 [ 770.630297][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 770.636118][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 770.641328][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 770.646352][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 770.651738][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 770.656940][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 770.661792][ C1] dummy_timer+0x798/0x42a0 [ 770.666320][ C1] ? enqueue_timer+0x1d1/0x470 [ 770.671082][ C1] ? __mod_timer+0x995/0xde0 [ 770.675666][ C1] ? mod_timer_pending+0x30/0x30 [ 770.680623][ C1] ? __kasan_check_write+0x14/0x20 [ 770.685724][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 770.690920][ C1] ? dummy_free_streams+0x360/0x360 [ 770.696129][ C1] ? __kasan_check_write+0x14/0x20 [ 770.701247][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 770.706363][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 770.711913][ C1] ? dummy_free_streams+0x360/0x360 [ 770.717123][ C1] call_timer_fn+0x35/0x280 [ 770.721642][ C1] ? dummy_free_streams+0x360/0x360 [ 770.726837][ C1] expire_timers+0x21f/0x3b0 [ 770.731592][ C1] __run_timers+0x548/0x680 [ 770.736120][ C1] ? enqueue_timer+0x470/0x470 [ 770.740894][ C1] run_timer_softirq+0x69/0xf0 [ 770.745653][ C1] __do_softirq+0x27e/0x598 [ 770.750165][ C1] asm_call_irq_on_stack+0xf/0x20 [ 770.755171][ C1] [ 770.758209][ C1] do_softirq_own_stack+0x60/0x80 [ 770.765069][ C1] __irq_exit_rcu+0x128/0x150 [ 770.770358][ C1] irq_exit_rcu+0x9/0x10 [ 770.774691][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 770.780323][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 770.786304][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 770.791584][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 770.811284][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 770.817542][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 770.825501][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 770.833468][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 770.841595][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 770.849562][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 770.857560][ C1] ? kernel_init_free_pages+0x87/0x100 [ 770.863013][ C1] get_page_from_freelist+0x6b5/0xa90 [ 770.868558][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 770.873938][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 770.879571][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 770.885554][ C1] pipe_write+0x580/0x1930 [ 770.889970][ C1] ? pipe_read+0x1030/0x1030 [ 770.894590][ C1] ? fsnotify_perm+0x67/0x4e0 [ 770.899269][ C1] ? io_schedule+0x120/0x120 [ 770.903954][ C1] ? security_file_permission+0xa8/0xc0 [ 770.909508][ C1] ? iov_iter_init+0x3f/0x120 [ 770.914192][ C1] vfs_write+0xc02/0xf20 [ 770.918536][ C1] ? kernel_write+0x3c0/0x3c0 [ 770.923203][ C1] ? __fget_files+0x310/0x370 [ 770.927879][ C1] ? __fdget_pos+0x1fa/0x300 [ 770.932467][ C1] ? ksys_write+0x77/0x2b0 [ 770.936883][ C1] ksys_write+0x186/0x2b0 [ 770.941212][ C1] ? __ia32_sys_read+0x90/0x90 [ 770.946001][ C1] __x64_sys_write+0x7b/0x90 [ 770.950609][ C1] do_syscall_64+0x31/0x70 [ 770.955047][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 770.960961][ C1] RIP: 0033:0x7f9380d05049 [ 770.965391][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 770.985182][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 770.993722][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 771.001724][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 771.009716][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 771.017829][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 771.025805][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 771.033779][ C1] ---[ end trace 6a7df80a272a84a1 ]--- [ 771.039348][ C1] ------------[ cut here ]------------ [ 771.044822][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 771.050887][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 771.060523][ C1] Modules linked in: [ 771.064457][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 771.076184][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 771.086289][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 771.091858][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 771.111785][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 771.117878][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 771.126006][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 771.134013][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: fffff5200002c035 [ 771.142107][ C1] R10: fffff5200002c035 R11: 0000000000000000 R12: ffff88810db870c8 [ 771.150113][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 771.158124][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 771.167090][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 771.173693][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 771.181690][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 771.189685][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 771.197677][ C1] Call Trace: [ 771.201413][ C1] [ 771.204298][ C1] aiptek_irq+0x19b7/0x25f0 [ 771.208844][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 771.214665][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 771.219896][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 771.224948][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 771.230347][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 771.235567][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 771.240590][ C1] dummy_timer+0x798/0x42a0 [ 771.245132][ C1] ? enqueue_timer+0x1d1/0x470 [ 771.249916][ C1] ? __mod_timer+0x995/0xde0 [ 771.254618][ C1] ? mod_timer_pending+0x30/0x30 [ 771.259578][ C1] ? __kasan_check_write+0x14/0x20 [ 771.264720][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 771.269944][ C1] ? dummy_free_streams+0x360/0x360 [ 771.275156][ C1] ? __kasan_check_write+0x14/0x20 [ 771.280285][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 771.285407][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 771.291070][ C1] ? dummy_free_streams+0x360/0x360 [ 771.296311][ C1] call_timer_fn+0x35/0x280 [ 771.300855][ C1] ? dummy_free_streams+0x360/0x360 [ 771.306092][ C1] expire_timers+0x21f/0x3b0 [ 771.310726][ C1] __run_timers+0x548/0x680 [ 771.315292][ C1] ? enqueue_timer+0x470/0x470 [ 771.320081][ C1] run_timer_softirq+0x69/0xf0 [ 771.324870][ C1] __do_softirq+0x27e/0x598 [ 771.329397][ C1] asm_call_irq_on_stack+0xf/0x20 [ 771.334425][ C1] [ 771.337394][ C1] do_softirq_own_stack+0x60/0x80 [ 771.342430][ C1] __irq_exit_rcu+0x128/0x150 [ 771.347136][ C1] irq_exit_rcu+0x9/0x10 [ 771.351400][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 771.357078][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 771.363089][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 771.368396][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 771.388035][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 771.394138][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 771.402165][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 771.410161][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 771.418153][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 771.426167][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 771.434184][ C1] ? kernel_init_free_pages+0x87/0x100 [ 771.439678][ C1] get_page_from_freelist+0x6b5/0xa90 [ 771.445097][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 771.450506][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 771.456077][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 771.462079][ C1] pipe_write+0x580/0x1930 [ 771.466611][ C1] ? pipe_read+0x1030/0x1030 [ 771.471215][ C1] ? fsnotify_perm+0x67/0x4e0 [ 771.475909][ C1] ? io_schedule+0x120/0x120 [ 771.480527][ C1] ? security_file_permission+0xa8/0xc0 [ 771.486103][ C1] ? iov_iter_init+0x3f/0x120 [ 771.490808][ C1] vfs_write+0xc02/0xf20 [ 771.495080][ C1] ? kernel_write+0x3c0/0x3c0 [ 771.499780][ C1] ? __fget_files+0x310/0x370 [ 771.504511][ C1] ? __fdget_pos+0x1fa/0x300 [ 771.509125][ C1] ? ksys_write+0x77/0x2b0 [ 771.513564][ C1] ksys_write+0x186/0x2b0 [ 771.517914][ C1] ? __ia32_sys_read+0x90/0x90 [ 771.522694][ C1] __x64_sys_write+0x7b/0x90 [ 771.527300][ C1] do_syscall_64+0x31/0x70 [ 771.531744][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 771.537658][ C1] RIP: 0033:0x7f9380d05049 [ 771.542222][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 771.561847][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 771.570281][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 771.578286][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 771.586291][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 771.594285][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 771.602281][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 771.610280][ C1] ---[ end trace 6a7df80a272a84a2 ]--- [ 771.615827][ C1] ------------[ cut here ]------------ [ 771.621301][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 771.627328][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 771.636937][ C1] Modules linked in: [ 771.640927][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 771.652728][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 771.662802][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 771.668349][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 771.687951][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 771.694044][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 771.702002][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 771.709967][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: fffff5200002c035 [ 771.718114][ C1] R10: fffff5200002c035 R11: 0000000000000000 R12: ffff88810db870c8 [ 771.726083][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 771.734073][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 771.743084][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 771.749665][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 771.757635][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 771.765611][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 771.773574][ C1] Call Trace: [ 771.776853][ C1] [ 771.779710][ C1] aiptek_irq+0x19b7/0x25f0 [ 771.784215][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 771.790015][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 771.795121][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 771.800140][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 771.805519][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 771.810717][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 771.815570][ C1] dummy_timer+0x798/0x42a0 [ 771.820075][ C1] ? enqueue_timer+0x1d1/0x470 [ 771.824833][ C1] ? __mod_timer+0x995/0xde0 [ 771.829524][ C1] ? mod_timer_pending+0x30/0x30 [ 771.834454][ C1] ? __kasan_check_write+0x14/0x20 [ 771.839554][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 771.844746][ C1] ? dummy_free_streams+0x360/0x360 [ 771.849937][ C1] ? __kasan_check_write+0x14/0x20 [ 771.855040][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 771.860141][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 771.865680][ C1] ? dummy_free_streams+0x360/0x360 [ 771.870893][ C1] call_timer_fn+0x35/0x280 [ 771.875392][ C1] ? dummy_free_streams+0x360/0x360 [ 771.880598][ C1] expire_timers+0x21f/0x3b0 [ 771.885180][ C1] __run_timers+0x548/0x680 [ 771.889672][ C1] ? enqueue_timer+0x470/0x470 [ 771.894439][ C1] run_timer_softirq+0x69/0xf0 [ 771.899206][ C1] __do_softirq+0x27e/0x598 [ 771.903710][ C1] asm_call_irq_on_stack+0xf/0x20 [ 771.908719][ C1] [ 771.911654][ C1] do_softirq_own_stack+0x60/0x80 [ 771.916673][ C1] __irq_exit_rcu+0x128/0x150 [ 771.921345][ C1] irq_exit_rcu+0x9/0x10 [ 771.925580][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 771.931231][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 771.937210][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 771.942486][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 771.962093][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 771.968159][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 771.976124][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 771.984086][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 771.992048][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 772.000019][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 772.008016][ C1] ? kernel_init_free_pages+0x87/0x100 [ 772.013469][ C1] get_page_from_freelist+0x6b5/0xa90 [ 772.019096][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 772.024471][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 772.030058][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 772.036037][ C1] pipe_write+0x580/0x1930 [ 772.040445][ C1] ? pipe_read+0x1030/0x1030 [ 772.045017][ C1] ? fsnotify_perm+0x67/0x4e0 [ 772.049680][ C1] ? io_schedule+0x120/0x120 [ 772.054263][ C1] ? security_file_permission+0xa8/0xc0 [ 772.059804][ C1] ? iov_iter_init+0x3f/0x120 [ 772.064471][ C1] vfs_write+0xc02/0xf20 [ 772.068714][ C1] ? kernel_write+0x3c0/0x3c0 [ 772.073382][ C1] ? __fget_files+0x310/0x370 [ 772.078143][ C1] ? __fdget_pos+0x1fa/0x300 [ 772.082741][ C1] ? ksys_write+0x77/0x2b0 [ 772.087191][ C1] ksys_write+0x186/0x2b0 [ 772.091530][ C1] ? __ia32_sys_read+0x90/0x90 [ 772.096281][ C1] __x64_sys_write+0x7b/0x90 [ 772.100859][ C1] do_syscall_64+0x31/0x70 [ 772.105348][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 772.111222][ C1] RIP: 0033:0x7f9380d05049 [ 772.115627][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 772.135226][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 772.143640][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 772.151613][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 772.159575][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 772.167643][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 772.175607][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 772.183583][ C1] ---[ end trace 6a7df80a272a84a3 ]--- [ 772.189157][ C1] ------------[ cut here ]------------ [ 772.194630][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 772.200788][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 772.210425][ C1] Modules linked in: [ 772.214347][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 772.226068][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 772.236166][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 772.241733][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 772.261359][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 772.267454][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 772.275446][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 772.283438][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: fffff5200002c035 [ 772.291512][ C1] R10: fffff5200002c035 R11: 0000000000000000 R12: ffff88810db870c8 [ 772.299501][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 772.307492][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 772.316445][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 772.323051][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 772.331050][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 772.339043][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 772.347025][ C1] Call Trace: [ 772.350321][ C1] [ 772.353217][ C1] aiptek_irq+0x19b7/0x25f0 [ 772.357747][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 772.363583][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 772.368730][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 772.373808][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 772.379310][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 772.384531][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 772.389414][ C1] dummy_timer+0x798/0x42a0 [ 772.393937][ C1] ? enqueue_timer+0x1d1/0x470 [ 772.398719][ C1] ? __mod_timer+0x995/0xde0 [ 772.403327][ C1] ? mod_timer_pending+0x30/0x30 [ 772.408289][ C1] ? __kasan_check_write+0x14/0x20 [ 772.413426][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 772.418645][ C1] ? dummy_free_streams+0x360/0x360 [ 772.423861][ C1] ? __kasan_check_write+0x14/0x20 [ 772.428985][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 772.434124][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 772.439693][ C1] ? dummy_free_streams+0x360/0x360 [ 772.444914][ C1] call_timer_fn+0x35/0x280 [ 772.449624][ C1] ? dummy_free_streams+0x360/0x360 [ 772.454855][ C1] expire_timers+0x21f/0x3b0 [ 772.459483][ C1] __run_timers+0x548/0x680 [ 772.464033][ C1] ? enqueue_timer+0x470/0x470 [ 772.468864][ C1] run_timer_softirq+0x69/0xf0 [ 772.473768][ C1] __do_softirq+0x27e/0x598 [ 772.478307][ C1] asm_call_irq_on_stack+0xf/0x20 [ 772.483340][ C1] [ 772.486318][ C1] do_softirq_own_stack+0x60/0x80 [ 772.491363][ C1] __irq_exit_rcu+0x128/0x150 [ 772.496073][ C1] irq_exit_rcu+0x9/0x10 [ 772.500338][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 772.506000][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 772.512014][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 772.517322][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 772.536946][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 772.543058][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 772.551047][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 772.559038][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 772.567037][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 772.575026][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 772.583044][ C1] ? kernel_init_free_pages+0x87/0x100 [ 772.588532][ C1] get_page_from_freelist+0x6b5/0xa90 [ 772.593927][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 772.599325][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 772.604896][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 772.610909][ C1] pipe_write+0x580/0x1930 [ 772.615352][ C1] ? pipe_read+0x1030/0x1030 [ 772.620177][ C1] ? fsnotify_perm+0x67/0x4e0 [ 772.624873][ C1] ? io_schedule+0x120/0x120 [ 772.629583][ C1] ? security_file_permission+0xa8/0xc0 [ 772.635236][ C1] ? iov_iter_init+0x3f/0x120 [ 772.639930][ C1] vfs_write+0xc02/0xf20 [ 772.644199][ C1] ? kernel_write+0x3c0/0x3c0 [ 772.648983][ C1] ? __fget_files+0x310/0x370 [ 772.653681][ C1] ? __fdget_pos+0x1fa/0x300 [ 772.658305][ C1] ? ksys_write+0x77/0x2b0 [ 772.662759][ C1] ksys_write+0x186/0x2b0 [ 772.667100][ C1] ? __ia32_sys_read+0x90/0x90 [ 772.671885][ C1] __x64_sys_write+0x7b/0x90 [ 772.676495][ C1] do_syscall_64+0x31/0x70 [ 772.681052][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 772.686962][ C1] RIP: 0033:0x7f9380d05049 [ 772.691395][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 772.711203][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 772.719644][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 772.727659][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 772.735692][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 772.743693][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 772.751691][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 772.759687][ C1] ---[ end trace 6a7df80a272a84a4 ]--- [ 772.765275][ C1] ------------[ cut here ]------------ [ 772.770854][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 772.776874][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 772.786521][ C1] Modules linked in: [ 772.790526][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 772.802249][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 772.812354][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 772.817931][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 772.837568][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 772.844110][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 772.852109][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 772.860178][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: fffff5200002c035 [ 772.868177][ C1] R10: fffff5200002c035 R11: 0000000000000000 R12: ffff88810db870c8 [ 772.876173][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 772.884177][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 772.893127][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 772.899730][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 772.907720][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 772.915712][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 772.923696][ C1] Call Trace: [ 772.926994][ C1] [ 772.929887][ C1] aiptek_irq+0x19b7/0x25f0 [ 772.934421][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 772.940252][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 772.945392][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 772.950441][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 772.955835][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 772.961062][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 772.965931][ C1] dummy_timer+0x798/0x42a0 [ 772.970460][ C1] ? enqueue_timer+0x1d1/0x470 [ 772.975240][ C1] ? __mod_timer+0x995/0xde0 [ 772.979847][ C1] ? mod_timer_pending+0x30/0x30 [ 772.984801][ C1] ? __kasan_check_write+0x14/0x20 [ 772.989944][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 772.995160][ C1] ? dummy_free_streams+0x360/0x360 [ 773.000384][ C1] ? __kasan_check_write+0x14/0x20 [ 773.005513][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 773.010650][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 773.016224][ C1] ? dummy_free_streams+0x360/0x360 [ 773.021443][ C1] call_timer_fn+0x35/0x280 [ 773.025993][ C1] ? dummy_free_streams+0x360/0x360 [ 773.031662][ C1] expire_timers+0x21f/0x3b0 [ 773.036295][ C1] __run_timers+0x548/0x680 [ 773.040831][ C1] ? enqueue_timer+0x470/0x470 [ 773.045623][ C1] run_timer_softirq+0x69/0xf0 [ 773.050426][ C1] __do_softirq+0x27e/0x598 [ 773.054971][ C1] asm_call_irq_on_stack+0xf/0x20 [ 773.060120][ C1] [ 773.063085][ C1] do_softirq_own_stack+0x60/0x80 [ 773.068133][ C1] __irq_exit_rcu+0x128/0x150 [ 773.072834][ C1] irq_exit_rcu+0x9/0x10 [ 773.077113][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 773.082819][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 773.088826][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 773.094127][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 773.113965][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 773.120074][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 773.128070][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 773.136065][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 773.144071][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 773.152064][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 773.160105][ C1] ? kernel_init_free_pages+0x87/0x100 [ 773.165594][ C1] get_page_from_freelist+0x6b5/0xa90 [ 773.171026][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 773.176721][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 773.182288][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 773.188382][ C1] pipe_write+0x580/0x1930 [ 773.193277][ C1] ? pipe_read+0x1030/0x1030 [ 773.197892][ C1] ? fsnotify_perm+0x67/0x4e0 [ 773.202623][ C1] ? io_schedule+0x120/0x120 [ 773.207245][ C1] ? security_file_permission+0xa8/0xc0 [ 773.212957][ C1] ? iov_iter_init+0x3f/0x120 [ 773.217668][ C1] vfs_write+0xc02/0xf20 [ 773.221947][ C1] ? kernel_write+0x3c0/0x3c0 [ 773.226653][ C1] ? __fget_files+0x310/0x370 [ 773.231352][ C1] ? __fdget_pos+0x1fa/0x300 [ 773.236001][ C1] ? ksys_write+0x77/0x2b0 [ 773.240446][ C1] ksys_write+0x186/0x2b0 [ 773.244824][ C1] ? __ia32_sys_read+0x90/0x90 [ 773.249610][ C1] __x64_sys_write+0x7b/0x90 [ 773.254241][ C1] do_syscall_64+0x31/0x70 [ 773.258680][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 773.264584][ C1] RIP: 0033:0x7f9380d05049 [ 773.269049][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 773.288750][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 773.297191][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 773.305193][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 773.313206][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 773.321294][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 773.329384][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 773.337386][ C1] ---[ end trace 6a7df80a272a84a5 ]--- [ 773.343149][ C1] ------------[ cut here ]------------ [ 773.348626][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 773.354656][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 773.364310][ C1] Modules linked in: [ 773.368262][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 773.380159][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 773.390329][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 773.395871][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 773.415478][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 773.421548][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 773.429517][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 773.437491][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 773.445466][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 773.453462][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 773.461458][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 773.470387][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 773.477024][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 773.485020][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 773.493171][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 773.501148][ C1] Call Trace: [ 773.504485][ C1] [ 773.507390][ C1] aiptek_irq+0x19b7/0x25f0 [ 773.511892][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 773.517695][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 773.522839][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 773.527862][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 773.533234][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 773.538435][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 773.543302][ C1] dummy_timer+0x798/0x42a0 [ 773.547806][ C1] ? enqueue_timer+0x1d1/0x470 [ 773.552562][ C1] ? __mod_timer+0x995/0xde0 [ 773.557177][ C1] ? mod_timer_pending+0x30/0x30 [ 773.562124][ C1] ? __kasan_check_write+0x14/0x20 [ 773.567240][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 773.572459][ C1] ? dummy_free_streams+0x360/0x360 [ 773.577695][ C1] ? __kasan_check_write+0x14/0x20 [ 773.582811][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 773.587951][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 773.593509][ C1] ? dummy_free_streams+0x360/0x360 [ 773.598732][ C1] call_timer_fn+0x35/0x280 [ 773.603293][ C1] ? dummy_free_streams+0x360/0x360 [ 773.608493][ C1] expire_timers+0x21f/0x3b0 [ 773.613127][ C1] __run_timers+0x548/0x680 [ 773.617645][ C1] ? enqueue_timer+0x470/0x470 [ 773.622430][ C1] run_timer_softirq+0x69/0xf0 [ 773.627410][ C1] __do_softirq+0x27e/0x598 [ 773.631924][ C1] asm_call_irq_on_stack+0xf/0x20 [ 773.636938][ C1] [ 773.639884][ C1] do_softirq_own_stack+0x60/0x80 [ 773.645020][ C1] __irq_exit_rcu+0x128/0x150 [ 773.650016][ C1] irq_exit_rcu+0x9/0x10 [ 773.654293][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 773.660055][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 773.666044][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 773.671338][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 773.690963][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 773.697042][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 773.705017][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 773.713015][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 773.720988][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 773.728968][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 773.736969][ C1] ? kernel_init_free_pages+0x87/0x100 [ 773.742513][ C1] get_page_from_freelist+0x6b5/0xa90 [ 773.747907][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 773.753304][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 773.758861][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 773.764872][ C1] pipe_write+0x580/0x1930 [ 773.769294][ C1] ? pipe_read+0x1030/0x1030 [ 773.773888][ C1] ? fsnotify_perm+0x67/0x4e0 [ 773.778566][ C1] ? io_schedule+0x120/0x120 [ 773.783158][ C1] ? security_file_permission+0xa8/0xc0 [ 773.788716][ C1] ? iov_iter_init+0x3f/0x120 [ 773.793395][ C1] vfs_write+0xc02/0xf20 [ 773.797645][ C1] ? kernel_write+0x3c0/0x3c0 [ 773.802336][ C1] ? __fget_files+0x310/0x370 [ 773.807021][ C1] ? __fdget_pos+0x1fa/0x300 [ 773.811618][ C1] ? ksys_write+0x77/0x2b0 [ 773.816027][ C1] ksys_write+0x186/0x2b0 [ 773.820353][ C1] ? __ia32_sys_read+0x90/0x90 [ 773.825123][ C1] __x64_sys_write+0x7b/0x90 [ 773.829715][ C1] do_syscall_64+0x31/0x70 [ 773.834131][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 773.840114][ C1] RIP: 0033:0x7f9380d05049 [ 773.844546][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 773.864155][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 773.872605][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 773.880605][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 773.888592][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 773.896590][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 773.904577][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 773.912563][ C1] ---[ end trace 6a7df80a272a84a6 ]--- [ 773.918257][ C1] ------------[ cut here ]------------ [ 773.923852][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 773.929911][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 773.939977][ C1] Modules linked in: [ 773.943910][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 773.955643][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 773.965918][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 773.971498][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 773.991221][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 773.997403][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 774.005546][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 774.013546][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: fffff5200002c035 [ 774.021588][ C1] R10: fffff5200002c035 R11: 0000000000000000 R12: ffff88810db870c8 [ 774.029585][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 774.037712][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 774.046675][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 774.053295][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 774.061298][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 774.069310][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 774.077308][ C1] Call Trace: [ 774.080608][ C1] [ 774.083523][ C1] aiptek_irq+0x19b7/0x25f0 [ 774.088061][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 774.093901][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 774.099040][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 774.104097][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 774.109495][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 774.114715][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 774.119588][ C1] dummy_timer+0x798/0x42a0 [ 774.124124][ C1] ? enqueue_timer+0x1d1/0x470 [ 774.128966][ C1] ? __mod_timer+0x995/0xde0 [ 774.133617][ C1] ? mod_timer_pending+0x30/0x30 [ 774.138592][ C1] ? __kasan_check_write+0x14/0x20 [ 774.143750][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 774.148975][ C1] ? dummy_free_streams+0x360/0x360 [ 774.154214][ C1] ? __kasan_check_write+0x14/0x20 [ 774.159354][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 774.164777][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 774.170635][ C1] ? dummy_free_streams+0x360/0x360 [ 774.175875][ C1] call_timer_fn+0x35/0x280 [ 774.180413][ C1] ? dummy_free_streams+0x360/0x360 [ 774.185635][ C1] expire_timers+0x21f/0x3b0 [ 774.190254][ C1] __run_timers+0x548/0x680 [ 774.194786][ C1] ? enqueue_timer+0x470/0x470 [ 774.199671][ C1] run_timer_softirq+0x69/0xf0 [ 774.204458][ C1] __do_softirq+0x27e/0x598 [ 774.209071][ C1] asm_call_irq_on_stack+0xf/0x20 [ 774.214098][ C1] [ 774.217062][ C1] do_softirq_own_stack+0x60/0x80 [ 774.222102][ C1] __irq_exit_rcu+0x128/0x150 [ 774.226790][ C1] irq_exit_rcu+0x9/0x10 [ 774.231051][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 774.236710][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 774.242715][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 774.248006][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 774.267640][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 774.273740][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 774.281735][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 774.289729][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 774.297731][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 774.305739][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 774.313756][ C1] ? kernel_init_free_pages+0x87/0x100 [ 774.319249][ C1] get_page_from_freelist+0x6b5/0xa90 [ 774.324658][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 774.330066][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 774.335640][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 774.341651][ C1] pipe_write+0x580/0x1930 [ 774.346109][ C1] ? pipe_read+0x1030/0x1030 [ 774.350716][ C1] ? fsnotify_perm+0x67/0x4e0 [ 774.355421][ C1] ? io_schedule+0x120/0x120 [ 774.360031][ C1] ? security_file_permission+0xa8/0xc0 [ 774.365630][ C1] ? iov_iter_init+0x3f/0x120 [ 774.370335][ C1] vfs_write+0xc02/0xf20 [ 774.374605][ C1] ? kernel_write+0x3c0/0x3c0 [ 774.379305][ C1] ? __fget_files+0x310/0x370 [ 774.384002][ C1] ? __fdget_pos+0x1fa/0x300 [ 774.388618][ C1] ? ksys_write+0x77/0x2b0 [ 774.393053][ C1] ksys_write+0x186/0x2b0 [ 774.397404][ C1] ? __ia32_sys_read+0x90/0x90 [ 774.402191][ C1] __x64_sys_write+0x7b/0x90 [ 774.406813][ C1] do_syscall_64+0x31/0x70 [ 774.411261][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 774.417187][ C1] RIP: 0033:0x7f9380d05049 [ 774.421620][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 774.444488][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 774.452939][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 774.461025][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 774.469018][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 774.477011][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 774.485010][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 774.493023][ C1] ---[ end trace 6a7df80a272a84a7 ]--- [ 774.498605][ C1] ------------[ cut here ]------------ [ 774.504070][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 774.510085][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 774.519690][ C1] Modules linked in: [ 774.523598][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 774.535571][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 774.545782][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 774.551323][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 774.570931][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 774.576998][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 774.584986][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 774.593038][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: fffff5200002c035 [ 774.601009][ C1] R10: fffff5200002c035 R11: 0000000000000000 R12: ffff88810db870c8 [ 774.608983][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 774.616958][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 774.625887][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 774.632468][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 774.640436][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 774.648503][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 774.656478][ C1] Call Trace: [ 774.659751][ C1] [ 774.662611][ C1] aiptek_irq+0x19b7/0x25f0 [ 774.667124][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 774.673286][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 774.678397][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 774.683436][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 774.688813][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 774.694015][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 774.698891][ C1] dummy_timer+0x798/0x42a0 [ 774.703490][ C1] ? enqueue_timer+0x1d1/0x470 [ 774.708247][ C1] ? __mod_timer+0x995/0xde0 [ 774.712843][ C1] ? mod_timer_pending+0x30/0x30 [ 774.717796][ C1] ? __kasan_check_write+0x14/0x20 [ 774.722909][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 774.728121][ C1] ? dummy_free_streams+0x360/0x360 [ 774.733312][ C1] ? __kasan_check_write+0x14/0x20 [ 774.738420][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 774.743537][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 774.749086][ C1] ? dummy_free_streams+0x360/0x360 [ 774.754299][ C1] call_timer_fn+0x35/0x280 [ 774.758820][ C1] ? dummy_free_streams+0x360/0x360 [ 774.764009][ C1] expire_timers+0x21f/0x3b0 [ 774.768601][ C1] __run_timers+0x548/0x680 [ 774.773131][ C1] ? enqueue_timer+0x470/0x470 [ 774.778018][ C1] run_timer_softirq+0x69/0xf0 [ 774.782790][ C1] __do_softirq+0x27e/0x598 [ 774.787303][ C1] asm_call_irq_on_stack+0xf/0x20 [ 774.792321][ C1] [ 774.795262][ C1] do_softirq_own_stack+0x60/0x80 [ 774.800280][ C1] __irq_exit_rcu+0x128/0x150 [ 774.804975][ C1] irq_exit_rcu+0x9/0x10 [ 774.809226][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 774.814853][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 774.820831][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 774.826113][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 774.845737][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 774.851918][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 774.859899][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 774.867956][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 774.876014][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 774.884203][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 774.892196][ C1] ? kernel_init_free_pages+0x87/0x100 [ 774.897661][ C1] get_page_from_freelist+0x6b5/0xa90 [ 774.903126][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 774.908493][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 774.914141][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 774.920124][ C1] pipe_write+0x580/0x1930 [ 774.924552][ C1] ? pipe_read+0x1030/0x1030 [ 774.929131][ C1] ? fsnotify_perm+0x67/0x4e0 [ 774.933815][ C1] ? io_schedule+0x120/0x120 [ 774.938441][ C1] ? security_file_permission+0xa8/0xc0 [ 774.944014][ C1] ? iov_iter_init+0x3f/0x120 [ 774.948709][ C1] vfs_write+0xc02/0xf20 [ 774.952953][ C1] ? kernel_write+0x3c0/0x3c0 [ 774.957658][ C1] ? __fget_files+0x310/0x370 [ 774.962332][ C1] ? __fdget_pos+0x1fa/0x300 [ 774.966913][ C1] ? ksys_write+0x77/0x2b0 [ 774.971344][ C1] ksys_write+0x186/0x2b0 [ 774.975683][ C1] ? __ia32_sys_read+0x90/0x90 [ 774.980455][ C1] __x64_sys_write+0x7b/0x90 [ 774.985049][ C1] do_syscall_64+0x31/0x70 [ 774.989460][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 774.995387][ C1] RIP: 0033:0x7f9380d05049 [ 774.999806][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 775.019582][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 775.027999][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 775.035969][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 775.043933][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 775.051904][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 775.059869][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 775.068061][ C1] ---[ end trace 6a7df80a272a84a8 ]--- [ 775.073707][ C1] ------------[ cut here ]------------ [ 775.079172][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 775.085242][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 775.095138][ C1] Modules linked in: [ 775.099068][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 775.110788][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 775.121113][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 775.126685][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 775.146431][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 775.152539][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 775.160539][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 775.168540][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: fffff5200002c035 [ 775.176531][ C1] R10: fffff5200002c035 R11: 0000000000000000 R12: ffff88810db870c8 [ 775.184530][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 775.192559][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 775.201533][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 775.208169][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 775.216198][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 775.224194][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 775.232276][ C1] Call Trace: [ 775.235574][ C1] [ 775.238485][ C1] aiptek_irq+0x19b7/0x25f0 [ 775.243016][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 775.248835][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 775.253990][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 775.259049][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 775.264545][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 775.269765][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 775.274653][ C1] dummy_timer+0x798/0x42a0 [ 775.279214][ C1] ? enqueue_timer+0x1d1/0x470 [ 775.284055][ C1] ? __mod_timer+0x995/0xde0 [ 775.288819][ C1] ? mod_timer_pending+0x30/0x30 [ 775.293789][ C1] ? __kasan_check_write+0x14/0x20 [ 775.298944][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 775.304172][ C1] ? dummy_free_streams+0x360/0x360 [ 775.309387][ C1] ? __kasan_check_write+0x14/0x20 [ 775.314610][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 775.319739][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 775.325307][ C1] ? dummy_free_streams+0x360/0x360 [ 775.330534][ C1] call_timer_fn+0x35/0x280 [ 775.335145][ C1] ? dummy_free_streams+0x360/0x360 [ 775.340568][ C1] expire_timers+0x21f/0x3b0 [ 775.345274][ C1] __run_timers+0x548/0x680 [ 775.349794][ C1] ? enqueue_timer+0x470/0x470 [ 775.354578][ C1] run_timer_softirq+0x69/0xf0 [ 775.359356][ C1] __do_softirq+0x27e/0x598 [ 775.364521][ C1] asm_call_irq_on_stack+0xf/0x20 [ 775.369564][ C1] [ 775.372660][ C1] do_softirq_own_stack+0x60/0x80 [ 775.377883][ C1] __irq_exit_rcu+0x128/0x150 [ 775.382777][ C1] irq_exit_rcu+0x9/0x10 [ 775.387039][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 775.392820][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 775.398865][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 775.404316][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 775.424669][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 775.430958][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 775.438986][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 775.446984][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 775.455000][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 775.463169][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 775.471443][ C1] ? kernel_init_free_pages+0x87/0x100 [ 775.477217][ C1] get_page_from_freelist+0x6b5/0xa90 [ 775.482724][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 775.488277][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 775.494082][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 775.500376][ C1] pipe_write+0x580/0x1930 [ 775.504826][ C1] ? pipe_read+0x1030/0x1030 [ 775.509518][ C1] ? fsnotify_perm+0x67/0x4e0 [ 775.514538][ C1] ? io_schedule+0x120/0x120 [ 775.519161][ C1] ? security_file_permission+0xa8/0xc0 [ 775.524730][ C1] ? iov_iter_init+0x3f/0x120 [ 775.529433][ C1] vfs_write+0xc02/0xf20 [ 775.533718][ C1] ? kernel_write+0x3c0/0x3c0 [ 775.538515][ C1] ? __fget_files+0x310/0x370 [ 775.543334][ C1] ? __fdget_pos+0x1fa/0x300 [ 775.548035][ C1] ? ksys_write+0x77/0x2b0 [ 775.552475][ C1] ksys_write+0x186/0x2b0 [ 775.556857][ C1] ? __ia32_sys_read+0x90/0x90 [ 775.561633][ C1] __x64_sys_write+0x7b/0x90 [ 775.566333][ C1] do_syscall_64+0x31/0x70 [ 775.570784][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 775.576970][ C1] RIP: 0033:0x7f9380d05049 [ 775.581495][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 775.601466][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 775.610728][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 775.619185][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 775.627186][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 775.635208][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 775.643210][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 775.651228][ C1] ---[ end trace 6a7df80a272a84a9 ]--- [ 775.656909][ C1] ------------[ cut here ]------------ [ 775.662431][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 775.668477][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 775.678107][ C1] Modules linked in: [ 775.682006][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 775.693702][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 775.703790][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 775.709339][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 775.729121][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 775.735192][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 775.743157][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 775.751127][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: fffff5200002c035 [ 775.759098][ C1] R10: fffff5200002c035 R11: 0000000000000000 R12: ffff88810db870c8 [ 775.767153][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 775.775133][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 775.784081][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 775.790689][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 775.798695][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 775.806671][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 775.814648][ C1] Call Trace: [ 775.817935][ C1] [ 775.820806][ C1] aiptek_irq+0x19b7/0x25f0 [ 775.825312][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 775.831118][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 775.836229][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 775.841353][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 775.846734][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 775.851928][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 775.856787][ C1] dummy_timer+0x798/0x42a0 [ 775.861349][ C1] ? enqueue_timer+0x1d1/0x470 [ 775.866233][ C1] ? __mod_timer+0x995/0xde0 [ 775.870952][ C1] ? mod_timer_pending+0x30/0x30 [ 775.875915][ C1] ? __kasan_check_write+0x14/0x20 [ 775.881037][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 775.886241][ C1] ? dummy_free_streams+0x360/0x360 [ 775.891440][ C1] ? __kasan_check_write+0x14/0x20 [ 775.896554][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 775.901662][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 775.907214][ C1] ? dummy_free_streams+0x360/0x360 [ 775.912408][ C1] call_timer_fn+0x35/0x280 [ 775.916911][ C1] ? dummy_free_streams+0x360/0x360 [ 775.922127][ C1] expire_timers+0x21f/0x3b0 [ 775.926730][ C1] __run_timers+0x548/0x680 [ 775.931227][ C1] ? enqueue_timer+0x470/0x470 [ 775.935990][ C1] run_timer_softirq+0x69/0xf0 [ 775.940761][ C1] __do_softirq+0x27e/0x598 [ 775.945276][ C1] asm_call_irq_on_stack+0xf/0x20 [ 775.950487][ C1] [ 775.953434][ C1] do_softirq_own_stack+0x60/0x80 [ 775.958484][ C1] __irq_exit_rcu+0x128/0x150 [ 775.963162][ C1] irq_exit_rcu+0x9/0x10 [ 775.967411][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 775.973041][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 775.979031][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 775.984327][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 776.004048][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 776.010115][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 776.018093][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 776.026077][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 776.034079][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 776.042055][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 776.050055][ C1] ? kernel_init_free_pages+0x87/0x100 [ 776.055516][ C1] get_page_from_freelist+0x6b5/0xa90 [ 776.060887][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 776.066275][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 776.071819][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 776.077799][ C1] pipe_write+0x580/0x1930 [ 776.082235][ C1] ? pipe_read+0x1030/0x1030 [ 776.086832][ C1] ? fsnotify_perm+0x67/0x4e0 [ 776.091516][ C1] ? io_schedule+0x120/0x120 [ 776.096278][ C1] ? security_file_permission+0xa8/0xc0 [ 776.101843][ C1] ? iov_iter_init+0x3f/0x120 [ 776.106518][ C1] vfs_write+0xc02/0xf20 [ 776.110761][ C1] ? kernel_write+0x3c0/0x3c0 [ 776.115445][ C1] ? __fget_files+0x310/0x370 [ 776.120235][ C1] ? __fdget_pos+0x1fa/0x300 [ 776.124945][ C1] ? ksys_write+0x77/0x2b0 [ 776.129366][ C1] ksys_write+0x186/0x2b0 [ 776.133701][ C1] ? __ia32_sys_read+0x90/0x90 [ 776.138471][ C1] __x64_sys_write+0x7b/0x90 [ 776.143229][ C1] do_syscall_64+0x31/0x70 [ 776.147666][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 776.153555][ C1] RIP: 0033:0x7f9380d05049 [ 776.157988][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 776.177769][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 776.186282][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 776.194257][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 776.202227][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 776.210242][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 776.218331][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 776.226406][ C1] ---[ end trace 6a7df80a272a84aa ]--- [ 776.231994][ C1] ------------[ cut here ]------------ [ 776.237554][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 776.243700][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 776.253421][ C1] Modules linked in: [ 776.257359][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 776.269080][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 776.279258][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 776.284842][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 776.304496][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 776.310631][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 776.318870][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 776.326886][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: fffff5200002c035 [ 776.334879][ C1] R10: fffff5200002c035 R11: 0000000000000000 R12: ffff88810db870c8 [ 776.342874][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 776.350955][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 776.360137][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 776.366756][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 776.374784][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 776.382822][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 776.390838][ C1] Call Trace: [ 776.394134][ C1] [ 776.397037][ C1] aiptek_irq+0x19b7/0x25f0 [ 776.401568][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 776.407393][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 776.412519][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 776.417564][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 776.423079][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 776.428398][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 776.433359][ C1] dummy_timer+0x798/0x42a0 [ 776.437889][ C1] ? enqueue_timer+0x1d1/0x470 [ 776.442707][ C1] ? __mod_timer+0x995/0xde0 [ 776.447391][ C1] ? mod_timer_pending+0x30/0x30 [ 776.452351][ C1] ? __kasan_check_write+0x14/0x20 [ 776.457488][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 776.462793][ C1] ? dummy_free_streams+0x360/0x360 [ 776.468186][ C1] ? __kasan_check_write+0x14/0x20 [ 776.473395][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 776.478622][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 776.484195][ C1] ? dummy_free_streams+0x360/0x360 [ 776.489725][ C1] call_timer_fn+0x35/0x280 [ 776.494373][ C1] ? dummy_free_streams+0x360/0x360 [ 776.499669][ C1] expire_timers+0x21f/0x3b0 [ 776.504282][ C1] __run_timers+0x548/0x680 [ 776.509088][ C1] ? enqueue_timer+0x470/0x470 [ 776.513868][ C1] run_timer_softirq+0x69/0xf0 [ 776.518650][ C1] __do_softirq+0x27e/0x598 [ 776.523204][ C1] asm_call_irq_on_stack+0xf/0x20 [ 776.528232][ C1] [ 776.531235][ C1] do_softirq_own_stack+0x60/0x80 [ 776.536262][ C1] __irq_exit_rcu+0x128/0x150 [ 776.541142][ C1] irq_exit_rcu+0x9/0x10 [ 776.545515][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 776.551164][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 776.557181][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 776.562482][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 776.582371][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 776.588486][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 776.596485][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 776.604483][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 776.612476][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 776.620587][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 776.628609][ C1] ? kernel_init_free_pages+0x87/0x100 [ 776.634104][ C1] get_page_from_freelist+0x6b5/0xa90 [ 776.639957][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 776.645372][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 776.650951][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 776.656955][ C1] pipe_write+0x580/0x1930 [ 776.661414][ C1] ? pipe_read+0x1030/0x1030 [ 776.666050][ C1] ? fsnotify_perm+0x67/0x4e0 [ 776.670742][ C1] ? io_schedule+0x120/0x120 [ 776.675352][ C1] ? security_file_permission+0xa8/0xc0 [ 776.680924][ C1] ? iov_iter_init+0x3f/0x120 [ 776.685615][ C1] vfs_write+0xc02/0xf20 [ 776.689870][ C1] ? kernel_write+0x3c0/0x3c0 [ 776.694562][ C1] ? __fget_files+0x310/0x370 [ 776.699343][ C1] ? __fdget_pos+0x1fa/0x300 [ 776.703949][ C1] ? ksys_write+0x77/0x2b0 [ 776.708389][ C1] ksys_write+0x186/0x2b0 [ 776.712746][ C1] ? __ia32_sys_read+0x90/0x90 [ 776.717534][ C1] __x64_sys_write+0x7b/0x90 [ 776.722142][ C1] do_syscall_64+0x31/0x70 [ 776.726576][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 776.732479][ C1] RIP: 0033:0x7f9380d05049 [ 776.736911][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 776.756534][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 776.764982][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 776.772974][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 776.780963][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 776.788983][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 776.796973][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 776.804970][ C1] ---[ end trace 6a7df80a272a84ab ]--- [ 776.810590][ C1] ------------[ cut here ]------------ [ 776.816066][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 776.822135][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 776.831777][ C1] Modules linked in: [ 776.835705][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 776.847481][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 776.857539][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 776.863073][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 776.882682][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 776.888761][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 776.896747][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 776.904721][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 776.912721][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 776.920702][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 776.928722][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 776.937667][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 776.944287][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 776.952257][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 776.960223][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 776.968269][ C1] Call Trace: [ 776.971540][ C1] [ 776.974395][ C1] aiptek_irq+0x19b7/0x25f0 [ 776.978910][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 776.984722][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 776.989828][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 776.994847][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 777.000217][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 777.005402][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 777.010248][ C1] dummy_timer+0x798/0x42a0 [ 777.014748][ C1] ? enqueue_timer+0x1d1/0x470 [ 777.019497][ C1] ? __mod_timer+0x995/0xde0 [ 777.024086][ C1] ? mod_timer_pending+0x30/0x30 [ 777.029026][ C1] ? __kasan_check_write+0x14/0x20 [ 777.034135][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 777.039354][ C1] ? dummy_free_streams+0x360/0x360 [ 777.044538][ C1] ? __kasan_check_write+0x14/0x20 [ 777.049656][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 777.054762][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 777.060311][ C1] ? dummy_free_streams+0x360/0x360 [ 777.065517][ C1] call_timer_fn+0x35/0x280 [ 777.070026][ C1] ? dummy_free_streams+0x360/0x360 [ 777.075251][ C1] expire_timers+0x21f/0x3b0 [ 777.080015][ C1] __run_timers+0x548/0x680 [ 777.084634][ C1] ? enqueue_timer+0x470/0x470 [ 777.089424][ C1] run_timer_softirq+0x69/0xf0 [ 777.094295][ C1] __do_softirq+0x27e/0x598 [ 777.098807][ C1] asm_call_irq_on_stack+0xf/0x20 [ 777.103848][ C1] [ 777.106805][ C1] do_softirq_own_stack+0x60/0x80 [ 777.111827][ C1] __irq_exit_rcu+0x128/0x150 [ 777.116502][ C1] irq_exit_rcu+0x9/0x10 [ 777.120745][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 777.126468][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 777.132458][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 777.137744][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 777.157372][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 777.163448][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 777.171610][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 777.179577][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 777.187548][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 777.195529][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 777.203522][ C1] ? kernel_init_free_pages+0x87/0x100 [ 777.209017][ C1] get_page_from_freelist+0x6b5/0xa90 [ 777.214397][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 777.219776][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 777.225326][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 777.231307][ C1] pipe_write+0x580/0x1930 [ 777.235751][ C1] ? pipe_read+0x1030/0x1030 [ 777.240363][ C1] ? fsnotify_perm+0x67/0x4e0 [ 777.245033][ C1] ? io_schedule+0x120/0x120 [ 777.249614][ C1] ? security_file_permission+0xa8/0xc0 [ 777.255172][ C1] ? iov_iter_init+0x3f/0x120 [ 777.259865][ C1] vfs_write+0xc02/0xf20 [ 777.264103][ C1] ? kernel_write+0x3c0/0x3c0 [ 777.269101][ C1] ? __fget_files+0x310/0x370 [ 777.273786][ C1] ? __fdget_pos+0x1fa/0x300 [ 777.278369][ C1] ? ksys_write+0x77/0x2b0 [ 777.282778][ C1] ksys_write+0x186/0x2b0 [ 777.287121][ C1] ? __ia32_sys_read+0x90/0x90 [ 777.291886][ C1] __x64_sys_write+0x7b/0x90 [ 777.296471][ C1] do_syscall_64+0x31/0x70 [ 777.300910][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 777.306805][ C1] RIP: 0033:0x7f9380d05049 [ 777.311240][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 777.330947][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 777.339365][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 777.347337][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 777.355311][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 777.363287][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 777.371285][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 777.379267][ C1] ---[ end trace 6a7df80a272a84ac ]--- [ 777.384858][ C1] ------------[ cut here ]------------ [ 777.390331][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 777.396402][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 777.406310][ C1] Modules linked in: [ 777.410425][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 777.422496][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 777.432605][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 777.438178][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 777.458156][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 777.464253][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 777.472246][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 777.480235][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: fffff5200002c035 [ 777.488236][ C1] R10: fffff5200002c035 R11: 0000000000000000 R12: ffff88810db870c8 [ 777.496319][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 777.504311][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 777.513259][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 777.519865][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 777.527858][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 777.535843][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 777.543830][ C1] Call Trace: [ 777.547149][ C1] [ 777.550022][ C1] aiptek_irq+0x19b7/0x25f0 [ 777.554540][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 777.560368][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 777.565495][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 777.570553][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 777.575971][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 777.581198][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 777.586074][ C1] dummy_timer+0x798/0x42a0 [ 777.590602][ C1] ? enqueue_timer+0x1d1/0x470 [ 777.595481][ C1] ? __mod_timer+0x995/0xde0 [ 777.600120][ C1] ? mod_timer_pending+0x30/0x30 [ 777.605083][ C1] ? __kasan_check_write+0x14/0x20 [ 777.610213][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 777.615432][ C1] ? dummy_free_streams+0x360/0x360 [ 777.620642][ C1] ? __kasan_check_write+0x14/0x20 [ 777.625767][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 777.630897][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 777.636468][ C1] ? dummy_free_streams+0x360/0x360 [ 777.641780][ C1] call_timer_fn+0x35/0x280 [ 777.646306][ C1] ? dummy_free_streams+0x360/0x360 [ 777.651606][ C1] expire_timers+0x21f/0x3b0 [ 777.656208][ C1] __run_timers+0x548/0x680 [ 777.660722][ C1] ? enqueue_timer+0x470/0x470 [ 777.665499][ C1] run_timer_softirq+0x69/0xf0 [ 777.670281][ C1] __do_softirq+0x27e/0x598 [ 777.674809][ C1] asm_call_irq_on_stack+0xf/0x20 [ 777.679848][ C1] [ 777.682806][ C1] do_softirq_own_stack+0x60/0x80 [ 777.687859][ C1] __irq_exit_rcu+0x128/0x150 [ 777.692639][ C1] irq_exit_rcu+0x9/0x10 [ 777.696899][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 777.702561][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 777.708566][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 777.713963][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 777.733588][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 777.739679][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 777.747756][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 777.755751][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 777.763744][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 777.771922][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 777.779945][ C1] ? kernel_init_free_pages+0x87/0x100 [ 777.785441][ C1] get_page_from_freelist+0x6b5/0xa90 [ 777.790980][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 777.796375][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 777.801939][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 777.807970][ C1] pipe_write+0x580/0x1930 [ 777.812413][ C1] ? pipe_read+0x1030/0x1030 [ 777.817024][ C1] ? fsnotify_perm+0x67/0x4e0 [ 777.821732][ C1] ? io_schedule+0x120/0x120 [ 777.826343][ C1] ? security_file_permission+0xa8/0xc0 [ 777.831946][ C1] ? iov_iter_init+0x3f/0x120 [ 777.836655][ C1] vfs_write+0xc02/0xf20 [ 777.840943][ C1] ? kernel_write+0x3c0/0x3c0 [ 777.845780][ C1] ? __fget_files+0x310/0x370 [ 777.850515][ C1] ? __fdget_pos+0x1fa/0x300 [ 777.855296][ C1] ? ksys_write+0x77/0x2b0 [ 777.859874][ C1] ksys_write+0x186/0x2b0 [ 777.864229][ C1] ? __ia32_sys_read+0x90/0x90 [ 777.869032][ C1] __x64_sys_write+0x7b/0x90 [ 777.873674][ C1] do_syscall_64+0x31/0x70 [ 777.878209][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 777.884123][ C1] RIP: 0033:0x7f9380d05049 [ 777.888585][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 777.908638][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 777.917087][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 777.925735][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 777.934080][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 777.942165][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 777.950168][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 777.958159][ C1] ---[ end trace 6a7df80a272a84ad ]--- [ 777.963716][ C1] ------------[ cut here ]------------ [ 777.969269][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 777.975333][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 777.984967][ C1] Modules linked in: [ 777.988898][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 778.000705][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 778.010894][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 778.016463][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 778.036343][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 778.042643][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 778.050644][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 778.058675][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: fffff5200002c035 [ 778.066669][ C1] R10: fffff5200002c035 R11: 0000000000000000 R12: ffff88810db870c8 [ 778.074976][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 778.082979][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 778.091957][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 778.099024][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 778.107025][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 778.115108][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 778.123525][ C1] Call Trace: [ 778.126837][ C1] [ 778.130347][ C1] aiptek_irq+0x19b7/0x25f0 [ 778.134886][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 778.140893][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 778.146056][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 778.151158][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 778.156560][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 778.161900][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 778.166780][ C1] dummy_timer+0x798/0x42a0 [ 778.171482][ C1] ? enqueue_timer+0x1d1/0x470 [ 778.176271][ C1] ? __mod_timer+0x995/0xde0 [ 778.180987][ C1] ? mod_timer_pending+0x30/0x30 [ 778.185967][ C1] ? __kasan_check_write+0x14/0x20 [ 778.191095][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 778.196320][ C1] ? dummy_free_streams+0x360/0x360 [ 778.201686][ C1] ? __kasan_check_write+0x14/0x20 [ 778.207078][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 778.212414][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 778.218099][ C1] ? dummy_free_streams+0x360/0x360 [ 778.223433][ C1] call_timer_fn+0x35/0x280 [ 778.228089][ C1] ? dummy_free_streams+0x360/0x360 [ 778.233396][ C1] expire_timers+0x21f/0x3b0 [ 778.238198][ C1] __run_timers+0x548/0x680 [ 778.242815][ C1] ? enqueue_timer+0x470/0x470 [ 778.247708][ C1] run_timer_softirq+0x69/0xf0 [ 778.252499][ C1] __do_softirq+0x27e/0x598 [ 778.257070][ C1] asm_call_irq_on_stack+0xf/0x20 [ 778.262103][ C1] [ 778.265284][ C1] do_softirq_own_stack+0x60/0x80 [ 778.270344][ C1] __irq_exit_rcu+0x128/0x150 [ 778.275081][ C1] irq_exit_rcu+0x9/0x10 [ 778.279573][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 778.285393][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 778.291534][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 778.296837][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 778.316571][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 778.322757][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 778.330860][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 778.338855][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 778.346850][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 778.354845][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 778.362853][ C1] ? kernel_init_free_pages+0x87/0x100 [ 778.368338][ C1] get_page_from_freelist+0x6b5/0xa90 [ 778.373739][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 778.379150][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 778.384720][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 778.390733][ C1] pipe_write+0x580/0x1930 [ 778.395168][ C1] ? pipe_read+0x1030/0x1030 [ 778.399775][ C1] ? fsnotify_perm+0x67/0x4e0 [ 778.404476][ C1] ? io_schedule+0x120/0x120 [ 778.409086][ C1] ? security_file_permission+0xa8/0xc0 [ 778.414657][ C1] ? iov_iter_init+0x3f/0x120 [ 778.419349][ C1] vfs_write+0xc02/0xf20 [ 778.423616][ C1] ? kernel_write+0x3c0/0x3c0 [ 778.428307][ C1] ? __fget_files+0x310/0x370 [ 778.433006][ C1] ? __fdget_pos+0x1fa/0x300 [ 778.437617][ C1] ? ksys_write+0x77/0x2b0 [ 778.442051][ C1] ksys_write+0x186/0x2b0 [ 778.446405][ C1] ? __ia32_sys_read+0x90/0x90 [ 778.451193][ C1] __x64_sys_write+0x7b/0x90 [ 778.455808][ C1] do_syscall_64+0x31/0x70 [ 778.460243][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 778.466154][ C1] RIP: 0033:0x7f9380d05049 [ 778.470587][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 778.490214][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 778.498665][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 778.506666][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 778.514666][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 778.522664][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 778.530664][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 778.538667][ C1] ---[ end trace 6a7df80a272a84ae ]--- [ 778.544248][ C1] ------------[ cut here ]------------ [ 778.549809][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 778.555857][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 778.565478][ C1] Modules linked in: [ 778.569380][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 778.581080][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 778.592760][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 778.598322][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 778.617941][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 778.624007][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 778.631978][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 778.639945][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: fffff5200002c035 [ 778.647915][ C1] R10: fffff5200002c035 R11: 0000000000000000 R12: ffff88810db870c8 [ 778.655893][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 778.664051][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 778.673000][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 778.679619][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 778.687592][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 778.695567][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 778.703624][ C1] Call Trace: [ 778.706906][ C1] [ 778.709785][ C1] aiptek_irq+0x19b7/0x25f0 [ 778.714296][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 778.720098][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 778.725216][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 778.730248][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 778.735625][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 778.740822][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 778.745678][ C1] dummy_timer+0x798/0x42a0 [ 778.750175][ C1] ? enqueue_timer+0x1d1/0x470 [ 778.754941][ C1] ? __mod_timer+0x995/0xde0 [ 778.759534][ C1] ? mod_timer_pending+0x30/0x30 [ 778.764472][ C1] ? __kasan_check_write+0x14/0x20 [ 778.769584][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 778.774789][ C1] ? dummy_free_streams+0x360/0x360 [ 778.779983][ C1] ? __kasan_check_write+0x14/0x20 [ 778.785088][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 778.790214][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 778.795767][ C1] ? dummy_free_streams+0x360/0x360 [ 778.800968][ C1] call_timer_fn+0x35/0x280 [ 778.805481][ C1] ? dummy_free_streams+0x360/0x360 [ 778.810672][ C1] expire_timers+0x21f/0x3b0 [ 778.815262][ C1] __run_timers+0x548/0x680 [ 778.819768][ C1] ? enqueue_timer+0x470/0x470 [ 778.824529][ C1] run_timer_softirq+0x69/0xf0 [ 778.829319][ C1] __do_softirq+0x27e/0x598 [ 778.833821][ C1] asm_call_irq_on_stack+0xf/0x20 [ 778.838837][ C1] [ 778.841798][ C1] do_softirq_own_stack+0x60/0x80 [ 778.846880][ C1] __irq_exit_rcu+0x128/0x150 [ 778.851587][ C1] irq_exit_rcu+0x9/0x10 [ 778.855921][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 778.861578][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 778.867576][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 778.872855][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 778.892458][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 778.898532][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 778.906512][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 778.914491][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 778.922473][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 778.930447][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 778.938449][ C1] ? kernel_init_free_pages+0x87/0x100 [ 778.943914][ C1] get_page_from_freelist+0x6b5/0xa90 [ 778.949291][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 778.954663][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 778.960230][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 778.966217][ C1] pipe_write+0x580/0x1930 [ 778.970660][ C1] ? pipe_read+0x1030/0x1030 [ 778.975254][ C1] ? fsnotify_perm+0x67/0x4e0 [ 778.979956][ C1] ? io_schedule+0x120/0x120 [ 778.984648][ C1] ? security_file_permission+0xa8/0xc0 [ 778.990193][ C1] ? iov_iter_init+0x3f/0x120 [ 778.994902][ C1] vfs_write+0xc02/0xf20 [ 778.999154][ C1] ? kernel_write+0x3c0/0x3c0 [ 779.003826][ C1] ? __fget_files+0x310/0x370 [ 779.008552][ C1] ? __fdget_pos+0x1fa/0x300 [ 779.013174][ C1] ? ksys_write+0x77/0x2b0 [ 779.017626][ C1] ksys_write+0x186/0x2b0 [ 779.021968][ C1] ? __ia32_sys_read+0x90/0x90 [ 779.027040][ C1] __x64_sys_write+0x7b/0x90 [ 779.031639][ C1] do_syscall_64+0x31/0x70 [ 779.036069][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 779.041956][ C1] RIP: 0033:0x7f9380d05049 [ 779.046372][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 779.065974][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 779.074557][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 779.082529][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 779.090490][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 779.098478][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 779.106447][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 779.114435][ C1] ---[ end trace 6a7df80a272a84af ]--- [ 779.120078][ C1] ------------[ cut here ]------------ [ 779.125543][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 779.131573][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 779.141661][ C1] Modules linked in: [ 779.145603][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 779.157327][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 779.167429][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 779.173028][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 779.192657][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 779.198747][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 779.206738][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 779.214727][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: fffff5200002c035 [ 779.222824][ C1] R10: fffff5200002c035 R11: 0000000000000000 R12: ffff88810db870c8 [ 779.230817][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 779.238897][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 779.247844][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 779.254453][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 779.262456][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 779.270454][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 779.278876][ C1] Call Trace: [ 779.282168][ C1] [ 779.285080][ C1] aiptek_irq+0x19b7/0x25f0 [ 779.289636][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 779.295478][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 779.300982][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 779.306026][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 779.311432][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 779.316655][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 779.321555][ C1] dummy_timer+0x798/0x42a0 [ 779.326077][ C1] ? enqueue_timer+0x1d1/0x470 [ 779.330862][ C1] ? __mod_timer+0x995/0xde0 [ 779.335469][ C1] ? mod_timer_pending+0x30/0x30 [ 779.340427][ C1] ? __kasan_check_write+0x14/0x20 [ 779.345668][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 779.350884][ C1] ? dummy_free_streams+0x360/0x360 [ 779.356109][ C1] ? __kasan_check_write+0x14/0x20 [ 779.361237][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 779.366375][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 779.372031][ C1] ? dummy_free_streams+0x360/0x360 [ 779.377250][ C1] call_timer_fn+0x35/0x280 [ 779.381782][ C1] ? dummy_free_streams+0x360/0x360 [ 779.387040][ C1] expire_timers+0x21f/0x3b0 [ 779.391650][ C1] __run_timers+0x548/0x680 [ 779.396273][ C1] ? enqueue_timer+0x470/0x470 [ 779.401059][ C1] run_timer_softirq+0x69/0xf0 [ 779.405846][ C1] __do_softirq+0x27e/0x598 [ 779.410395][ C1] asm_call_irq_on_stack+0xf/0x20 [ 779.415461][ C1] [ 779.418506][ C1] do_softirq_own_stack+0x60/0x80 [ 779.423703][ C1] __irq_exit_rcu+0x128/0x150 [ 779.428423][ C1] irq_exit_rcu+0x9/0x10 [ 779.432804][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 779.438482][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 779.444509][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 779.449825][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 779.470045][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 779.476558][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 779.484694][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 779.492871][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 779.500950][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 779.508978][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 779.516986][ C1] ? kernel_init_free_pages+0x87/0x100 [ 779.522470][ C1] get_page_from_freelist+0x6b5/0xa90 [ 779.527865][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 779.533290][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 779.538862][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 779.544977][ C1] pipe_write+0x580/0x1930 [ 779.549533][ C1] ? pipe_read+0x1030/0x1030 [ 779.554404][ C1] ? fsnotify_perm+0x67/0x4e0 [ 779.559119][ C1] ? io_schedule+0x120/0x120 [ 779.563815][ C1] ? security_file_permission+0xa8/0xc0 [ 779.569382][ C1] ? iov_iter_init+0x3f/0x120 [ 779.574076][ C1] vfs_write+0xc02/0xf20 [ 779.578462][ C1] ? kernel_write+0x3c0/0x3c0 [ 779.583351][ C1] ? __fget_files+0x310/0x370 [ 779.588332][ C1] ? __fdget_pos+0x1fa/0x300 [ 779.592958][ C1] ? ksys_write+0x77/0x2b0 [ 779.597388][ C1] ksys_write+0x186/0x2b0 [ 779.601821][ C1] ? __ia32_sys_read+0x90/0x90 [ 779.606601][ C1] __x64_sys_write+0x7b/0x90 [ 779.611211][ C1] do_syscall_64+0x31/0x70 [ 779.615643][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 779.621586][ C1] RIP: 0033:0x7f9380d05049 [ 779.626051][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 779.645670][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 779.654286][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 779.662324][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 779.670314][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 779.678326][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 779.686320][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 779.694480][ C1] ---[ end trace 6a7df80a272a84b0 ]--- [ 779.700052][ C1] ------------[ cut here ]------------ [ 779.705524][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 779.711573][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 779.721301][ C1] Modules linked in: [ 779.725363][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 779.737077][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 779.747145][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 779.752682][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 779.772311][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 779.778399][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 779.786360][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 779.794330][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 779.802314][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 779.810288][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 779.818257][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 779.827196][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 779.833781][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 779.841750][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 779.850337][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 779.858315][ C1] Call Trace: [ 779.861587][ C1] [ 779.864443][ C1] aiptek_irq+0x19b7/0x25f0 [ 779.868947][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 779.874763][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 779.879871][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 779.884895][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 779.890293][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 779.895500][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 779.900357][ C1] dummy_timer+0x798/0x42a0 [ 779.904887][ C1] ? enqueue_timer+0x1d1/0x470 [ 779.909656][ C1] ? __mod_timer+0x995/0xde0 [ 779.914258][ C1] ? mod_timer_pending+0x30/0x30 [ 779.919316][ C1] ? __kasan_check_write+0x14/0x20 [ 779.924428][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 779.929713][ C1] ? dummy_free_streams+0x360/0x360 [ 779.934909][ C1] ? __kasan_check_write+0x14/0x20 [ 779.940032][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 779.945421][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 779.950970][ C1] ? dummy_free_streams+0x360/0x360 [ 779.956214][ C1] call_timer_fn+0x35/0x280 [ 779.960719][ C1] ? dummy_free_streams+0x360/0x360 [ 779.966053][ C1] expire_timers+0x21f/0x3b0 [ 779.970804][ C1] __run_timers+0x548/0x680 [ 779.975346][ C1] ? enqueue_timer+0x470/0x470 [ 779.980118][ C1] run_timer_softirq+0x69/0xf0 [ 779.984976][ C1] __do_softirq+0x27e/0x598 [ 779.989486][ C1] asm_call_irq_on_stack+0xf/0x20 [ 779.994501][ C1] [ 779.997440][ C1] do_softirq_own_stack+0x60/0x80 [ 780.002457][ C1] __irq_exit_rcu+0x128/0x150 [ 780.007135][ C1] irq_exit_rcu+0x9/0x10 [ 780.011398][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 780.017053][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 780.023080][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 780.028385][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 780.047990][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 780.054140][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 780.062214][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 780.070200][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 780.078171][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 780.086230][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 780.094307][ C1] ? kernel_init_free_pages+0x87/0x100 [ 780.099769][ C1] get_page_from_freelist+0x6b5/0xa90 [ 780.105153][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 780.110528][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 780.116196][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 780.122188][ C1] pipe_write+0x580/0x1930 [ 780.126613][ C1] ? pipe_read+0x1030/0x1030 [ 780.131204][ C1] ? fsnotify_perm+0x67/0x4e0 [ 780.135921][ C1] ? io_schedule+0x120/0x120 [ 780.140788][ C1] ? security_file_permission+0xa8/0xc0 [ 780.146447][ C1] ? iov_iter_init+0x3f/0x120 [ 780.151145][ C1] vfs_write+0xc02/0xf20 [ 780.155407][ C1] ? kernel_write+0x3c0/0x3c0 [ 780.160096][ C1] ? __fget_files+0x310/0x370 [ 780.164791][ C1] ? __fdget_pos+0x1fa/0x300 [ 780.169378][ C1] ? ksys_write+0x77/0x2b0 [ 780.173812][ C1] ksys_write+0x186/0x2b0 [ 780.178152][ C1] ? __ia32_sys_read+0x90/0x90 [ 780.182917][ C1] __x64_sys_write+0x7b/0x90 [ 780.187512][ C1] do_syscall_64+0x31/0x70 [ 780.191930][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 780.197832][ C1] RIP: 0033:0x7f9380d05049 [ 780.202272][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 780.221974][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 780.230401][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 780.238382][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 780.246361][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 780.254361][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 780.262359][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 780.270350][ C1] ---[ end trace 6a7df80a272a84b1 ]--- [ 780.275953][ C1] ------------[ cut here ]------------ [ 780.281423][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 780.287483][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 780.297118][ C1] Modules linked in: [ 780.301052][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 780.312778][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 780.322863][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 780.328441][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 780.348063][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 780.354183][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 780.362182][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 780.370329][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: fffff5200002c035 [ 780.378405][ C1] R10: fffff5200002c035 R11: 0000000000000000 R12: ffff88810db870c8 [ 780.386398][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 780.394394][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 780.403341][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 780.409941][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 780.418122][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 780.426118][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 780.434096][ C1] Call Trace: [ 780.437473][ C1] [ 780.440347][ C1] aiptek_irq+0x19b7/0x25f0 [ 780.444861][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 780.450691][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 780.455842][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 780.460891][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 780.466280][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 780.471665][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 780.476564][ C1] dummy_timer+0x798/0x42a0 [ 780.481201][ C1] ? enqueue_timer+0x1d1/0x470 [ 780.485980][ C1] ? __mod_timer+0x995/0xde0 [ 780.490671][ C1] ? mod_timer_pending+0x30/0x30 [ 780.495623][ C1] ? __kasan_check_write+0x14/0x20 [ 780.500754][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 780.505966][ C1] ? dummy_free_streams+0x360/0x360 [ 780.511207][ C1] ? __kasan_check_write+0x14/0x20 [ 780.516336][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 780.521461][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 780.527108][ C1] ? dummy_free_streams+0x360/0x360 [ 780.532328][ C1] call_timer_fn+0x35/0x280 [ 780.536847][ C1] ? dummy_free_streams+0x360/0x360 [ 780.542071][ C1] expire_timers+0x21f/0x3b0 [ 780.546675][ C1] __run_timers+0x548/0x680 [ 780.551224][ C1] ? enqueue_timer+0x470/0x470 [ 780.556042][ C1] run_timer_softirq+0x69/0xf0 [ 780.560841][ C1] __do_softirq+0x27e/0x598 [ 780.565402][ C1] asm_call_irq_on_stack+0xf/0x20 [ 780.570453][ C1] [ 780.573412][ C1] do_softirq_own_stack+0x60/0x80 [ 780.578475][ C1] __irq_exit_rcu+0x128/0x150 [ 780.583164][ C1] irq_exit_rcu+0x9/0x10 [ 780.587427][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 780.593079][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 780.599069][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 780.604358][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 780.624004][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 780.630205][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 780.638194][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 780.646184][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 780.654182][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 780.662196][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 780.670292][ C1] ? kernel_init_free_pages+0x87/0x100 [ 780.675801][ C1] get_page_from_freelist+0x6b5/0xa90 [ 780.681227][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 780.686617][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 780.692180][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 780.698183][ C1] pipe_write+0x580/0x1930 [ 780.702612][ C1] ? pipe_read+0x1030/0x1030 [ 780.707208][ C1] ? fsnotify_perm+0x67/0x4e0 [ 780.711930][ C1] ? io_schedule+0x120/0x120 [ 780.716574][ C1] ? security_file_permission+0xa8/0xc0 [ 780.722169][ C1] ? iov_iter_init+0x3f/0x120 [ 780.726872][ C1] vfs_write+0xc02/0xf20 [ 780.731157][ C1] ? kernel_write+0x3c0/0x3c0 [ 780.735855][ C1] ? __fget_files+0x310/0x370 [ 780.740787][ C1] ? __fdget_pos+0x1fa/0x300 [ 780.745430][ C1] ? ksys_write+0x77/0x2b0 [ 780.749864][ C1] ksys_write+0x186/0x2b0 [ 780.754209][ C1] ? __ia32_sys_read+0x90/0x90 [ 780.759103][ C1] __x64_sys_write+0x7b/0x90 [ 780.763717][ C1] do_syscall_64+0x31/0x70 [ 780.768158][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 780.774066][ C1] RIP: 0033:0x7f9380d05049 [ 780.778497][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 780.798116][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 780.806552][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 780.814561][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 780.822670][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 780.830681][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 780.838654][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 780.846627][ C1] ---[ end trace 6a7df80a272a84b2 ]--- [ 780.852157][ C1] ------------[ cut here ]------------ [ 780.857639][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 780.863705][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 780.873343][ C1] Modules linked in: [ 780.877252][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 780.888952][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 780.899048][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 780.904596][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 780.924196][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 780.930263][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 780.938255][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 780.946874][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: fffff5200002c035 [ 780.954843][ C1] R10: fffff5200002c035 R11: 0000000000000000 R12: ffff88810db870c8 [ 780.962811][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 780.970782][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 780.979716][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 780.986306][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 780.994287][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 781.002368][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 781.010522][ C1] Call Trace: [ 781.013814][ C1] [ 781.016670][ C1] aiptek_irq+0x19b7/0x25f0 [ 781.021171][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 781.026974][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 781.032209][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 781.037335][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 781.042706][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 781.048083][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 781.053114][ C1] dummy_timer+0x798/0x42a0 [ 781.057629][ C1] ? enqueue_timer+0x1d1/0x470 [ 781.062498][ C1] ? __mod_timer+0x995/0xde0 [ 781.067104][ C1] ? mod_timer_pending+0x30/0x30 [ 781.072074][ C1] ? __kasan_check_write+0x14/0x20 [ 781.077384][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 781.082585][ C1] ? dummy_free_streams+0x360/0x360 [ 781.087799][ C1] ? __kasan_check_write+0x14/0x20 [ 781.092907][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 781.098063][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 781.103724][ C1] ? dummy_free_streams+0x360/0x360 [ 781.108963][ C1] call_timer_fn+0x35/0x280 [ 781.113489][ C1] ? dummy_free_streams+0x360/0x360 [ 781.118686][ C1] expire_timers+0x21f/0x3b0 [ 781.123272][ C1] __run_timers+0x548/0x680 [ 781.127774][ C1] ? enqueue_timer+0x470/0x470 [ 781.132738][ C1] run_timer_softirq+0x69/0xf0 [ 781.137799][ C1] __do_softirq+0x27e/0x598 [ 781.142318][ C1] asm_call_irq_on_stack+0xf/0x20 [ 781.147351][ C1] [ 781.150291][ C1] do_softirq_own_stack+0x60/0x80 [ 781.155578][ C1] __irq_exit_rcu+0x128/0x150 [ 781.160272][ C1] irq_exit_rcu+0x9/0x10 [ 781.164720][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 781.170355][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 781.176370][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 781.181672][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 781.201893][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 781.207977][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 781.215954][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 781.224105][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 781.232079][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 781.240084][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 781.248205][ C1] ? kernel_init_free_pages+0x87/0x100 [ 781.253762][ C1] get_page_from_freelist+0x6b5/0xa90 [ 781.259143][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 781.264523][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 781.270165][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 781.276163][ C1] pipe_write+0x580/0x1930 [ 781.280589][ C1] ? pipe_read+0x1030/0x1030 [ 781.285189][ C1] ? fsnotify_perm+0x67/0x4e0 [ 781.290047][ C1] ? io_schedule+0x120/0x120 [ 781.294654][ C1] ? security_file_permission+0xa8/0xc0 [ 781.300254][ C1] ? iov_iter_init+0x3f/0x120 [ 781.305395][ C1] vfs_write+0xc02/0xf20 [ 781.309743][ C1] ? kernel_write+0x3c0/0x3c0 [ 781.314459][ C1] ? __fget_files+0x310/0x370 [ 781.319154][ C1] ? __fdget_pos+0x1fa/0x300 [ 781.323763][ C1] ? ksys_write+0x77/0x2b0 [ 781.328204][ C1] ksys_write+0x186/0x2b0 [ 781.332629][ C1] ? __ia32_sys_read+0x90/0x90 [ 781.337446][ C1] __x64_sys_write+0x7b/0x90 [ 781.342047][ C1] do_syscall_64+0x31/0x70 [ 781.347033][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 781.352965][ C1] RIP: 0033:0x7f9380d05049 [ 781.357508][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 781.377131][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 781.385573][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 781.393565][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 781.401627][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 781.409597][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 781.417671][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 781.425657][ C1] ---[ end trace 6a7df80a272a84b3 ]--- [ 781.431249][ C1] ------------[ cut here ]------------ [ 781.436946][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 781.443379][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 781.453022][ C1] Modules linked in: [ 781.457060][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 781.470298][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 781.480404][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 781.485967][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 781.506123][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 781.512248][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 781.520247][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 781.528266][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: fffff5200002c035 [ 781.536265][ C1] R10: fffff5200002c035 R11: 0000000000000000 R12: ffff88810db870c8 [ 781.544428][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 781.552604][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 781.561576][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 781.568300][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 781.576294][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 781.584284][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 781.592535][ C1] Call Trace: [ 781.595884][ C1] [ 781.598765][ C1] aiptek_irq+0x19b7/0x25f0 [ 781.603298][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 781.609154][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 781.614815][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 781.619915][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 781.625332][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 781.630579][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 781.635458][ C1] dummy_timer+0x798/0x42a0 [ 781.640002][ C1] ? enqueue_timer+0x1d1/0x470 [ 781.644819][ C1] ? __mod_timer+0x995/0xde0 [ 781.649431][ C1] ? mod_timer_pending+0x30/0x30 [ 781.654397][ C1] ? __kasan_check_write+0x14/0x20 [ 781.659538][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 781.664764][ C1] ? dummy_free_streams+0x360/0x360 [ 781.670081][ C1] ? __kasan_check_write+0x14/0x20 [ 781.675215][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 781.680373][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 781.685956][ C1] ? dummy_free_streams+0x360/0x360 [ 781.691209][ C1] call_timer_fn+0x35/0x280 [ 781.695736][ C1] ? dummy_free_streams+0x360/0x360 [ 781.700960][ C1] expire_timers+0x21f/0x3b0 [ 781.705562][ C1] __run_timers+0x548/0x680 [ 781.710172][ C1] ? enqueue_timer+0x470/0x470 [ 781.714970][ C1] run_timer_softirq+0x69/0xf0 [ 781.719766][ C1] __do_softirq+0x27e/0x598 [ 781.724395][ C1] asm_call_irq_on_stack+0xf/0x20 [ 781.729465][ C1] [ 781.732468][ C1] do_softirq_own_stack+0x60/0x80 [ 781.737527][ C1] __irq_exit_rcu+0x128/0x150 [ 781.742226][ C1] irq_exit_rcu+0x9/0x10 [ 781.746491][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 781.752325][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 781.758598][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 781.763907][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 781.784054][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 781.790151][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 781.798166][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 781.806179][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 781.814168][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 781.822247][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 781.830367][ C1] ? kernel_init_free_pages+0x87/0x100 [ 781.835866][ C1] get_page_from_freelist+0x6b5/0xa90 [ 781.841257][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 781.846643][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 781.852250][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 781.858253][ C1] pipe_write+0x580/0x1930 [ 781.862694][ C1] ? pipe_read+0x1030/0x1030 [ 781.867311][ C1] ? fsnotify_perm+0x67/0x4e0 [ 781.872011][ C1] ? io_schedule+0x120/0x120 [ 781.876620][ C1] ? security_file_permission+0xa8/0xc0 [ 781.882186][ C1] ? iov_iter_init+0x3f/0x120 [ 781.886875][ C1] vfs_write+0xc02/0xf20 [ 781.891122][ C1] ? kernel_write+0x3c0/0x3c0 [ 781.895807][ C1] ? __fget_files+0x310/0x370 [ 781.900499][ C1] ? __fdget_pos+0x1fa/0x300 [ 781.905134][ C1] ? ksys_write+0x77/0x2b0 [ 781.909558][ C1] ksys_write+0x186/0x2b0 [ 781.913928][ C1] ? __ia32_sys_read+0x90/0x90 [ 781.918720][ C1] __x64_sys_write+0x7b/0x90 [ 781.923326][ C1] do_syscall_64+0x31/0x70 [ 781.927781][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 781.933693][ C1] RIP: 0033:0x7f9380d05049 [ 781.938135][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 781.957844][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 781.966313][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 781.974303][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 781.982293][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 781.990293][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 781.998273][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 782.006290][ C1] ---[ end trace 6a7df80a272a84b4 ]--- [ 782.011939][ C1] ------------[ cut here ]------------ [ 782.017399][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 782.023426][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 782.033049][ C1] Modules linked in: [ 782.036957][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 782.048669][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 782.058742][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 782.064291][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 782.083986][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 782.090060][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 782.098025][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 782.106177][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: fffff5200002c035 [ 782.114244][ C1] R10: fffff5200002c035 R11: 0000000000000000 R12: ffff88810db870c8 [ 782.122212][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 782.130191][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 782.139123][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 782.145704][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 782.153754][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 782.161721][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 782.169678][ C1] Call Trace: [ 782.172951][ C1] [ 782.175810][ C1] aiptek_irq+0x19b7/0x25f0 [ 782.180325][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 782.186148][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 782.191357][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 782.196394][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 782.201765][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 782.207142][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 782.211995][ C1] dummy_timer+0x798/0x42a0 [ 782.216492][ C1] ? enqueue_timer+0x1d1/0x470 [ 782.221251][ C1] ? __mod_timer+0x995/0xde0 [ 782.226102][ C1] ? mod_timer_pending+0x30/0x30 [ 782.231038][ C1] ? __kasan_check_write+0x14/0x20 [ 782.236176][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 782.241405][ C1] ? dummy_free_streams+0x360/0x360 [ 782.246605][ C1] ? __kasan_check_write+0x14/0x20 [ 782.251714][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 782.256841][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 782.262401][ C1] ? dummy_free_streams+0x360/0x360 [ 782.267603][ C1] call_timer_fn+0x35/0x280 [ 782.272115][ C1] ? dummy_free_streams+0x360/0x360 [ 782.277320][ C1] expire_timers+0x21f/0x3b0 [ 782.281899][ C1] __run_timers+0x548/0x680 [ 782.286413][ C1] ? enqueue_timer+0x470/0x470 [ 782.291173][ C1] run_timer_softirq+0x69/0xf0 [ 782.295931][ C1] __do_softirq+0x27e/0x598 [ 782.300442][ C1] asm_call_irq_on_stack+0xf/0x20 [ 782.305456][ C1] [ 782.308408][ C1] do_softirq_own_stack+0x60/0x80 [ 782.313428][ C1] __irq_exit_rcu+0x128/0x150 [ 782.318105][ C1] irq_exit_rcu+0x9/0x10 [ 782.322347][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 782.327980][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 782.333952][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 782.339231][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 782.358836][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 782.364899][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 782.372863][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 782.380840][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 782.388803][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 782.396766][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 782.404878][ C1] ? kernel_init_free_pages+0x87/0x100 [ 782.410348][ C1] get_page_from_freelist+0x6b5/0xa90 [ 782.415725][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 782.421097][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 782.426728][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 782.432703][ C1] pipe_write+0x580/0x1930 [ 782.437115][ C1] ? pipe_read+0x1030/0x1030 [ 782.441707][ C1] ? fsnotify_perm+0x67/0x4e0 [ 782.446382][ C1] ? io_schedule+0x120/0x120 [ 782.450980][ C1] ? security_file_permission+0xa8/0xc0 [ 782.456527][ C1] ? iov_iter_init+0x3f/0x120 [ 782.461208][ C1] vfs_write+0xc02/0xf20 [ 782.465449][ C1] ? kernel_write+0x3c0/0x3c0 [ 782.470124][ C1] ? __fget_files+0x310/0x370 [ 782.474793][ C1] ? __fdget_pos+0x1fa/0x300 [ 782.479387][ C1] ? ksys_write+0x77/0x2b0 [ 782.483842][ C1] ksys_write+0x186/0x2b0 [ 782.488186][ C1] ? __ia32_sys_read+0x90/0x90 [ 782.492967][ C1] __x64_sys_write+0x7b/0x90 [ 782.497576][ C1] do_syscall_64+0x31/0x70 [ 782.502225][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 782.508175][ C1] RIP: 0033:0x7f9380d05049 [ 782.512604][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 782.532209][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 782.540627][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 782.548622][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 782.556593][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 782.564572][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 782.572583][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 782.580669][ C1] ---[ end trace 6a7df80a272a84b5 ]--- [ 782.586298][ C1] ------------[ cut here ]------------ [ 782.591789][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 782.597849][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 782.607507][ C1] Modules linked in: [ 782.611439][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 782.623162][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 782.633275][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 782.638852][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 782.658489][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 782.664584][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 782.672761][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 782.680762][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: fffff5200002c035 [ 782.688754][ C1] R10: fffff5200002c035 R11: 0000000000000000 R12: ffff88810db870c8 [ 782.696747][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 782.704746][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 782.713704][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 782.720492][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 782.728500][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 782.736662][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 782.744777][ C1] Call Trace: [ 782.748081][ C1] [ 782.750961][ C1] aiptek_irq+0x19b7/0x25f0 [ 782.755607][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 782.761454][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 782.766598][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 782.771928][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 782.777337][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 782.782575][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 782.787452][ C1] dummy_timer+0x798/0x42a0 [ 782.791975][ C1] ? enqueue_timer+0x1d1/0x470 [ 782.796784][ C1] ? __mod_timer+0x995/0xde0 [ 782.801536][ C1] ? mod_timer_pending+0x30/0x30 [ 782.806521][ C1] ? __kasan_check_write+0x14/0x20 [ 782.811656][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 782.816903][ C1] ? dummy_free_streams+0x360/0x360 [ 782.822163][ C1] ? __kasan_check_write+0x14/0x20 [ 782.827301][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 782.832435][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 782.838007][ C1] ? dummy_free_streams+0x360/0x360 [ 782.843251][ C1] call_timer_fn+0x35/0x280 [ 782.847776][ C1] ? dummy_free_streams+0x360/0x360 [ 782.853000][ C1] expire_timers+0x21f/0x3b0 [ 782.857626][ C1] __run_timers+0x548/0x680 [ 782.862205][ C1] ? enqueue_timer+0x470/0x470 [ 782.867021][ C1] run_timer_softirq+0x69/0xf0 [ 782.871810][ C1] __do_softirq+0x27e/0x598 [ 782.876351][ C1] asm_call_irq_on_stack+0xf/0x20 [ 782.881386][ C1] [ 782.884462][ C1] do_softirq_own_stack+0x60/0x80 [ 782.889540][ C1] __irq_exit_rcu+0x128/0x150 [ 782.894236][ C1] irq_exit_rcu+0x9/0x10 [ 782.898706][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 782.904370][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 782.910481][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 782.915787][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 782.935745][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 782.941929][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 782.949919][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 782.957922][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 782.965916][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 782.973909][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 782.981928][ C1] ? kernel_init_free_pages+0x87/0x100 [ 782.987419][ C1] get_page_from_freelist+0x6b5/0xa90 [ 782.992823][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 782.998328][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 783.003892][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 783.009893][ C1] pipe_write+0x580/0x1930 [ 783.014330][ C1] ? pipe_read+0x1030/0x1030 [ 783.018942][ C1] ? fsnotify_perm+0x67/0x4e0 [ 783.024010][ C1] ? io_schedule+0x120/0x120 [ 783.028643][ C1] ? security_file_permission+0xa8/0xc0 [ 783.034433][ C1] ? iov_iter_init+0x3f/0x120 [ 783.039130][ C1] vfs_write+0xc02/0xf20 [ 783.043389][ C1] ? kernel_write+0x3c0/0x3c0 [ 783.048079][ C1] ? __fget_files+0x310/0x370 [ 783.052765][ C1] ? __fdget_pos+0x1fa/0x300 [ 783.057362][ C1] ? ksys_write+0x77/0x2b0 [ 783.061791][ C1] ksys_write+0x186/0x2b0 [ 783.066130][ C1] ? __ia32_sys_read+0x90/0x90 [ 783.070911][ C1] __x64_sys_write+0x7b/0x90 [ 783.075519][ C1] do_syscall_64+0x31/0x70 [ 783.079958][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 783.085867][ C1] RIP: 0033:0x7f9380d05049 [ 783.090418][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 783.110058][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 783.118518][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 783.126534][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 783.134542][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 783.142558][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 783.150551][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 783.158634][ C1] ---[ end trace 6a7df80a272a84b6 ]--- [ 783.164399][ C1] ------------[ cut here ]------------ [ 783.169879][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 783.176017][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 783.185742][ C1] Modules linked in: [ 783.189662][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 783.201383][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 783.211475][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 783.217044][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 783.236677][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 783.242789][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 783.250796][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 783.258838][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: fffff5200002c035 [ 783.266847][ C1] R10: fffff5200002c035 R11: 0000000000000000 R12: ffff88810db870c8 [ 783.274851][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 783.282861][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 783.291902][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 783.298514][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 783.306521][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 783.314523][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 783.322505][ C1] Call Trace: [ 783.325806][ C1] [ 783.328683][ C1] aiptek_irq+0x19b7/0x25f0 [ 783.333202][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 783.339041][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 783.344172][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 783.349244][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 783.354640][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 783.359855][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 783.364727][ C1] dummy_timer+0x798/0x42a0 [ 783.369246][ C1] ? __mod_timer+0x995/0xde0 [ 783.373863][ C1] ? prandom_u32+0x254/0x380 [ 783.378474][ C1] ? __kasan_check_write+0x14/0x20 [ 783.383612][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 783.388832][ C1] ? dummy_free_streams+0x360/0x360 [ 783.394046][ C1] ? __kasan_check_write+0x14/0x20 [ 783.399176][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 783.404301][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 783.410056][ C1] ? dummy_free_streams+0x360/0x360 [ 783.415285][ C1] call_timer_fn+0x35/0x280 [ 783.419810][ C1] ? dummy_free_streams+0x360/0x360 [ 783.425036][ C1] expire_timers+0x21f/0x3b0 [ 783.429649][ C1] __run_timers+0x548/0x680 [ 783.434265][ C1] ? enqueue_timer+0x470/0x470 [ 783.439066][ C1] run_timer_softirq+0x69/0xf0 [ 783.443987][ C1] __do_softirq+0x27e/0x598 [ 783.448540][ C1] asm_call_irq_on_stack+0xf/0x20 [ 783.453664][ C1] [ 783.456625][ C1] do_softirq_own_stack+0x60/0x80 [ 783.461662][ C1] __irq_exit_rcu+0x128/0x150 [ 783.466353][ C1] irq_exit_rcu+0x9/0x10 [ 783.470616][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 783.476266][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 783.482369][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 783.487685][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 783.507321][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 783.513424][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 783.521424][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 783.529429][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 783.537435][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 783.545440][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 783.553459][ C1] ? kernel_init_free_pages+0x87/0x100 [ 783.558954][ C1] get_page_from_freelist+0x6b5/0xa90 [ 783.564372][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 783.569802][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 783.575743][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 783.582022][ C1] pipe_write+0x580/0x1930 [ 783.586462][ C1] ? pipe_read+0x1030/0x1030 [ 783.591066][ C1] ? fsnotify_perm+0x67/0x4e0 [ 783.595763][ C1] ? io_schedule+0x120/0x120 [ 783.600366][ C1] ? security_file_permission+0xa8/0xc0 [ 783.605941][ C1] ? iov_iter_init+0x3f/0x120 [ 783.610733][ C1] vfs_write+0xc02/0xf20 [ 783.614995][ C1] ? kernel_write+0x3c0/0x3c0 [ 783.619695][ C1] ? __fget_files+0x310/0x370 [ 783.624384][ C1] ? __fdget_pos+0x1fa/0x300 [ 783.628991][ C1] ? ksys_write+0x77/0x2b0 [ 783.633442][ C1] ksys_write+0x186/0x2b0 [ 783.637785][ C1] ? __ia32_sys_read+0x90/0x90 [ 783.642564][ C1] __x64_sys_write+0x7b/0x90 [ 783.647179][ C1] do_syscall_64+0x31/0x70 [ 783.651614][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 783.657525][ C1] RIP: 0033:0x7f9380d05049 [ 783.661970][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 783.682031][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 783.690481][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 783.698569][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 783.706555][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 783.714632][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 783.722628][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 783.730627][ C1] ---[ end trace 6a7df80a272a84b7 ]--- [ 783.736271][ C1] ------------[ cut here ]------------ [ 783.742363][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 783.748396][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 783.758009][ C1] Modules linked in: [ 783.761959][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 783.773655][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 783.783741][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 783.789331][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 783.808951][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 783.815034][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 783.822998][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 783.830969][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: fffff5200002c035 [ 783.838965][ C1] R10: fffff5200002c035 R11: 0000000000000000 R12: ffff88810db870c8 [ 783.846952][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 783.854935][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 783.863881][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 783.870567][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 783.878544][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 783.886533][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 783.894674][ C1] Call Trace: [ 783.897966][ C1] [ 783.900835][ C1] aiptek_irq+0x19b7/0x25f0 [ 783.905345][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 783.911165][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 783.916279][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 783.921304][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 783.926863][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 783.932088][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 783.936941][ C1] dummy_timer+0x798/0x42a0 [ 783.941531][ C1] ? __kasan_check_read+0x11/0x20 [ 783.946698][ C1] ? __kasan_check_write+0x14/0x20 [ 783.951928][ C1] ? __kasan_check_write+0x14/0x20 [ 783.957029][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 783.962330][ C1] ? dummy_free_streams+0x360/0x360 [ 783.967550][ C1] ? __kasan_check_write+0x14/0x20 [ 783.972691][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 783.977802][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 783.983344][ C1] ? dummy_free_streams+0x360/0x360 [ 783.988575][ C1] call_timer_fn+0x35/0x280 [ 783.993078][ C1] ? dummy_free_streams+0x360/0x360 [ 783.998270][ C1] expire_timers+0x21f/0x3b0 [ 784.002869][ C1] __run_timers+0x548/0x680 [ 784.007454][ C1] ? enqueue_timer+0x470/0x470 [ 784.012223][ C1] run_timer_softirq+0x69/0xf0 [ 784.016998][ C1] __do_softirq+0x27e/0x598 [ 784.021503][ C1] asm_call_irq_on_stack+0xf/0x20 [ 784.026515][ C1] [ 784.029480][ C1] do_softirq_own_stack+0x60/0x80 [ 784.034506][ C1] __irq_exit_rcu+0x128/0x150 [ 784.039175][ C1] irq_exit_rcu+0x9/0x10 [ 784.043432][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 784.049081][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 784.055113][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 784.060436][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 784.080071][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 784.086284][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 784.094264][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 784.102239][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 784.110350][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 784.118340][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 784.126421][ C1] ? kernel_init_free_pages+0x87/0x100 [ 784.131906][ C1] get_page_from_freelist+0x6b5/0xa90 [ 784.139655][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 784.145025][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 784.150562][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 784.156552][ C1] pipe_write+0x580/0x1930 [ 784.160973][ C1] ? pipe_read+0x1030/0x1030 [ 784.165549][ C1] ? fsnotify_perm+0x67/0x4e0 [ 784.170367][ C1] ? io_schedule+0x120/0x120 [ 784.174976][ C1] ? security_file_permission+0xa8/0xc0 [ 784.180523][ C1] ? iov_iter_init+0x3f/0x120 [ 784.185196][ C1] vfs_write+0xc02/0xf20 [ 784.189447][ C1] ? kernel_write+0x3c0/0x3c0 [ 784.194155][ C1] ? __fget_files+0x310/0x370 [ 784.199012][ C1] ? __fdget_pos+0x1fa/0x300 [ 784.203621][ C1] ? ksys_write+0x77/0x2b0 [ 784.208058][ C1] ksys_write+0x186/0x2b0 [ 784.212405][ C1] ? __ia32_sys_read+0x90/0x90 [ 784.217176][ C1] __x64_sys_write+0x7b/0x90 [ 784.221756][ C1] do_syscall_64+0x31/0x70 [ 784.226164][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 784.232324][ C1] RIP: 0033:0x7f9380d05049 [ 784.236739][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 784.256441][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 784.264882][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 784.272955][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 784.280922][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 784.288901][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 784.296873][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 784.304849][ C1] ---[ end trace 6a7df80a272a84b8 ]--- [ 784.310471][ C1] ------------[ cut here ]------------ [ 784.316123][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 784.322434][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 784.332157][ C1] Modules linked in: [ 784.336093][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 784.347898][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 784.358011][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 784.363588][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 784.383398][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 784.389499][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 784.397492][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 784.405678][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee2a5d8 [ 784.413764][ C1] R10: ffffed103ee2a5d8 R11: 0000000000000000 R12: ffff88810db870c8 [ 784.421768][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 784.429764][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 784.438715][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 784.445323][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 784.453316][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 784.461413][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 784.469411][ C1] Call Trace: [ 784.472700][ C1] [ 784.475577][ C1] aiptek_irq+0x19b7/0x25f0 [ 784.480355][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 784.486353][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 784.491584][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 784.496634][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 784.502029][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 784.507339][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 784.512448][ C1] dummy_timer+0x798/0x42a0 [ 784.516972][ C1] ? __kasan_check_read+0x11/0x20 [ 784.522017][ C1] ? __kasan_check_write+0x14/0x20 [ 784.527144][ C1] ? __kasan_check_write+0x14/0x20 [ 784.532284][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 784.537512][ C1] ? dummy_free_streams+0x360/0x360 [ 784.542735][ C1] ? __kasan_check_write+0x14/0x20 [ 784.547871][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 784.552998][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 784.558571][ C1] ? dummy_free_streams+0x360/0x360 [ 784.563795][ C1] call_timer_fn+0x35/0x280 [ 784.568321][ C1] ? dummy_free_streams+0x360/0x360 [ 784.573542][ C1] expire_timers+0x21f/0x3b0 [ 784.578439][ C1] __run_timers+0x548/0x680 [ 784.582971][ C1] ? enqueue_timer+0x470/0x470 [ 784.587759][ C1] run_timer_softirq+0x69/0xf0 [ 784.592541][ C1] __do_softirq+0x27e/0x598 [ 784.597062][ C1] asm_call_irq_on_stack+0xf/0x20 [ 784.602079][ C1] [ 784.605037][ C1] do_softirq_own_stack+0x60/0x80 [ 784.610075][ C1] __irq_exit_rcu+0x128/0x150 [ 784.614768][ C1] irq_exit_rcu+0x9/0x10 [ 784.619032][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 784.624867][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 784.630871][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 784.636173][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 784.655797][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 784.661918][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 784.669906][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 784.677907][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 784.685905][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 784.693900][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 784.701915][ C1] ? kernel_init_free_pages+0x87/0x100 [ 784.707391][ C1] get_page_from_freelist+0x6b5/0xa90 [ 784.712784][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 784.718215][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 784.724056][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 784.730057][ C1] pipe_write+0x580/0x1930 [ 784.734555][ C1] ? pipe_read+0x1030/0x1030 [ 784.739160][ C1] ? fsnotify_perm+0x67/0x4e0 [ 784.743951][ C1] ? io_schedule+0x120/0x120 [ 784.748553][ C1] ? security_file_permission+0xa8/0xc0 [ 784.754128][ C1] ? iov_iter_init+0x3f/0x120 [ 784.758818][ C1] vfs_write+0xc02/0xf20 [ 784.763083][ C1] ? kernel_write+0x3c0/0x3c0 [ 784.767777][ C1] ? __fget_files+0x310/0x370 [ 784.772471][ C1] ? __fdget_pos+0x1fa/0x300 [ 784.777070][ C1] ? ksys_write+0x77/0x2b0 [ 784.781503][ C1] ksys_write+0x186/0x2b0 [ 784.786040][ C1] ? __ia32_sys_read+0x90/0x90 [ 784.790818][ C1] __x64_sys_write+0x7b/0x90 [ 784.795433][ C1] do_syscall_64+0x31/0x70 [ 784.799876][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 784.805781][ C1] RIP: 0033:0x7f9380d05049 [ 784.810213][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 784.829828][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 784.838272][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 784.846259][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 784.854513][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 784.862504][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 784.870493][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 784.878486][ C1] ---[ end trace 6a7df80a272a84b9 ]--- [ 784.884100][ C1] ------------[ cut here ]------------ [ 784.889566][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 784.895635][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 784.905269][ C1] Modules linked in: [ 784.909202][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 784.920897][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 784.930961][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 784.936626][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 784.956253][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 784.962316][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 784.970280][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 784.978245][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 784.986231][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 784.994201][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 785.002190][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 785.011242][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 785.017828][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 785.025814][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 785.033871][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 785.041837][ C1] Call Trace: [ 785.045113][ C1] [ 785.047966][ C1] aiptek_irq+0x19b7/0x25f0 [ 785.052461][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 785.058271][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 785.063376][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 785.068399][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 785.073902][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 785.079109][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 785.083982][ C1] dummy_timer+0x798/0x42a0 [ 785.088496][ C1] ? enqueue_timer+0x1d1/0x470 [ 785.093292][ C1] ? __mod_timer+0x995/0xde0 [ 785.097898][ C1] ? mod_timer_pending+0x30/0x30 [ 785.102917][ C1] ? __kasan_check_write+0x14/0x20 [ 785.108108][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 785.113301][ C1] ? dummy_free_streams+0x360/0x360 [ 785.118526][ C1] ? __kasan_check_write+0x14/0x20 [ 785.123628][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 785.128736][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 785.134300][ C1] ? dummy_free_streams+0x360/0x360 [ 785.139593][ C1] call_timer_fn+0x35/0x280 [ 785.144392][ C1] ? dummy_free_streams+0x360/0x360 [ 785.149585][ C1] expire_timers+0x21f/0x3b0 [ 785.154183][ C1] __run_timers+0x548/0x680 [ 785.158690][ C1] ? enqueue_timer+0x470/0x470 [ 785.163461][ C1] run_timer_softirq+0x69/0xf0 [ 785.168233][ C1] __do_softirq+0x27e/0x598 [ 785.172744][ C1] asm_call_irq_on_stack+0xf/0x20 [ 785.177765][ C1] [ 785.180718][ C1] do_softirq_own_stack+0x60/0x80 [ 785.185743][ C1] __irq_exit_rcu+0x128/0x150 [ 785.190445][ C1] irq_exit_rcu+0x9/0x10 [ 785.194680][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 785.200311][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 785.206308][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 785.211597][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 785.231420][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 785.237495][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 785.245467][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 785.253451][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 785.261422][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 785.269668][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 785.277658][ C1] ? kernel_init_free_pages+0x87/0x100 [ 785.283201][ C1] get_page_from_freelist+0x6b5/0xa90 [ 785.288614][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 785.294007][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 785.300087][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 785.306066][ C1] pipe_write+0x580/0x1930 [ 785.310491][ C1] ? pipe_read+0x1030/0x1030 [ 785.315192][ C1] ? fsnotify_perm+0x67/0x4e0 [ 785.319877][ C1] ? io_schedule+0x120/0x120 [ 785.324459][ C1] ? security_file_permission+0xa8/0xc0 [ 785.330551][ C1] ? iov_iter_init+0x3f/0x120 [ 785.335493][ C1] vfs_write+0xc02/0xf20 [ 785.339769][ C1] ? kernel_write+0x3c0/0x3c0 [ 785.344732][ C1] ? __fget_files+0x310/0x370 [ 785.349423][ C1] ? __fdget_pos+0x1fa/0x300 [ 785.354116][ C1] ? ksys_write+0x77/0x2b0 [ 785.358538][ C1] ksys_write+0x186/0x2b0 [ 785.362861][ C1] ? __ia32_sys_read+0x90/0x90 [ 785.367640][ C1] __x64_sys_write+0x7b/0x90 [ 785.372700][ C1] do_syscall_64+0x31/0x70 [ 785.377161][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 785.383330][ C1] RIP: 0033:0x7f9380d05049 [ 785.387844][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 785.407626][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 785.416403][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 785.424394][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 785.432887][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 785.441319][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 785.449563][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 785.457723][ C1] ---[ end trace 6a7df80a272a84ba ]--- [ 785.463386][ C1] ------------[ cut here ]------------ [ 785.469036][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 785.475120][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 785.484931][ C1] Modules linked in: [ 785.488896][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 785.500811][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 785.511146][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 785.516715][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 785.536355][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 785.542454][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 785.550443][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 785.558448][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: fffff5200002c035 [ 785.566642][ C1] R10: fffff5200002c035 R11: 0000000000000000 R12: ffff88810db870c8 [ 785.574646][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 785.582651][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 785.591621][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 785.598239][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 785.606255][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 785.614265][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 785.622272][ C1] Call Trace: [ 785.625569][ C1] [ 785.628453][ C1] aiptek_irq+0x19b7/0x25f0 [ 785.632968][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 785.638807][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 785.643962][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 785.649029][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 785.654504][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 785.659792][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 785.664730][ C1] dummy_timer+0x798/0x42a0 [ 785.669263][ C1] ? enqueue_timer+0x1d1/0x470 [ 785.674057][ C1] ? __mod_timer+0x995/0xde0 [ 785.678761][ C1] ? mod_timer_pending+0x30/0x30 [ 785.683726][ C1] ? __kasan_check_write+0x14/0x20 [ 785.688864][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 785.694093][ C1] ? dummy_free_streams+0x360/0x360 [ 785.699601][ C1] ? __kasan_check_write+0x14/0x20 [ 785.704824][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 785.709957][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 785.715532][ C1] ? dummy_free_streams+0x360/0x360 [ 785.720753][ C1] call_timer_fn+0x35/0x280 [ 785.725285][ C1] ? dummy_free_streams+0x360/0x360 [ 785.730535][ C1] expire_timers+0x21f/0x3b0 [ 785.735176][ C1] __run_timers+0x548/0x680 [ 785.739718][ C1] ? enqueue_timer+0x470/0x470 [ 785.744631][ C1] run_timer_softirq+0x69/0xf0 [ 785.749430][ C1] __do_softirq+0x27e/0x598 [ 785.753971][ C1] asm_call_irq_on_stack+0xf/0x20 [ 785.759006][ C1] [ 785.762060][ C1] do_softirq_own_stack+0x60/0x80 [ 785.767122][ C1] __irq_exit_rcu+0x128/0x150 [ 785.771834][ C1] irq_exit_rcu+0x9/0x10 [ 785.776124][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 785.781824][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 785.787836][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 785.793134][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 785.812768][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 785.818984][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 785.827074][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 785.835169][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 785.843174][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 785.851179][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 785.859193][ C1] ? kernel_init_free_pages+0x87/0x100 [ 785.864692][ C1] get_page_from_freelist+0x6b5/0xa90 [ 785.870099][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 785.875506][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 785.881079][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 785.887101][ C1] pipe_write+0x580/0x1930 [ 785.891542][ C1] ? pipe_read+0x1030/0x1030 [ 785.896156][ C1] ? fsnotify_perm+0x67/0x4e0 [ 785.900944][ C1] ? io_schedule+0x120/0x120 [ 785.905553][ C1] ? security_file_permission+0xa8/0xc0 [ 785.911213][ C1] ? iov_iter_init+0x3f/0x120 [ 785.915914][ C1] vfs_write+0xc02/0xf20 [ 785.920193][ C1] ? kernel_write+0x3c0/0x3c0 [ 785.924889][ C1] ? __fget_files+0x310/0x370 [ 785.929584][ C1] ? __fdget_pos+0x1fa/0x300 [ 785.934221][ C1] ? ksys_write+0x77/0x2b0 [ 785.938664][ C1] ksys_write+0x186/0x2b0 [ 785.943013][ C1] ? __ia32_sys_read+0x90/0x90 [ 785.947794][ C1] __x64_sys_write+0x7b/0x90 [ 785.952405][ C1] do_syscall_64+0x31/0x70 [ 785.956836][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 785.962739][ C1] RIP: 0033:0x7f9380d05049 [ 785.967163][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 785.986880][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 785.995343][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 786.003523][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 786.011568][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 786.019778][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 786.027783][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 786.035791][ C1] ---[ end trace 6a7df80a272a84bb ]--- [ 786.041459][ C1] ------------[ cut here ]------------ [ 786.046940][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 786.052977][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 786.062701][ C1] Modules linked in: [ 786.066790][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 786.078518][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 786.088693][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 786.094241][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 786.114122][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 786.120291][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 786.128552][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 786.136653][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: fffff5200002c035 [ 786.145151][ C1] R10: fffff5200002c035 R11: 0000000000000000 R12: ffff88810db870c8 [ 786.153971][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 786.162087][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 786.171043][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 786.178065][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 786.186247][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 786.194235][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 786.203184][ C1] Call Trace: [ 786.206562][ C1] [ 786.209504][ C1] aiptek_irq+0x19b7/0x25f0 [ 786.214132][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 786.220053][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 786.225343][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 786.230361][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 786.235762][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 786.240961][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 786.246014][ C1] dummy_timer+0x798/0x42a0 [ 786.250717][ C1] ? enqueue_timer+0x1d1/0x470 [ 786.255502][ C1] ? __mod_timer+0x995/0xde0 [ 786.260193][ C1] ? mod_timer_pending+0x30/0x30 [ 786.265307][ C1] ? __kasan_check_write+0x14/0x20 [ 786.270468][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 786.275700][ C1] ? dummy_free_streams+0x360/0x360 [ 786.281382][ C1] ? __kasan_check_write+0x14/0x20 [ 786.286496][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 786.291914][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 786.297498][ C1] ? dummy_free_streams+0x360/0x360 [ 786.302716][ C1] call_timer_fn+0x35/0x280 [ 786.307374][ C1] ? dummy_free_streams+0x360/0x360 [ 786.312673][ C1] expire_timers+0x21f/0x3b0 [ 786.317358][ C1] __run_timers+0x548/0x680 [ 786.322063][ C1] ? enqueue_timer+0x470/0x470 [ 786.326981][ C1] run_timer_softirq+0x69/0xf0 [ 786.332078][ C1] __do_softirq+0x27e/0x598 [ 786.336595][ C1] asm_call_irq_on_stack+0xf/0x20 [ 786.341942][ C1] [ 786.344918][ C1] do_softirq_own_stack+0x60/0x80 [ 786.350085][ C1] __irq_exit_rcu+0x128/0x150 [ 786.355004][ C1] irq_exit_rcu+0x9/0x10 [ 786.359253][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 786.364895][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 786.370887][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 786.376173][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 786.396227][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 786.402297][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 786.410613][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 786.418598][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 786.426821][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 786.437803][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 786.445796][ C1] ? kernel_init_free_pages+0x87/0x100 [ 786.455255][ C1] get_page_from_freelist+0x6b5/0xa90 [ 786.460633][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 786.466177][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 786.471750][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 786.477834][ C1] pipe_write+0x580/0x1930 [ 786.482347][ C1] ? pipe_read+0x1030/0x1030 [ 786.486931][ C1] ? fsnotify_perm+0x67/0x4e0 [ 786.491608][ C1] ? io_schedule+0x120/0x120 [ 786.496363][ C1] ? security_file_permission+0xa8/0xc0 [ 786.502113][ C1] ? iov_iter_init+0x3f/0x120 [ 786.506882][ C1] vfs_write+0xc02/0xf20 [ 786.511614][ C1] ? kernel_write+0x3c0/0x3c0 [ 786.516473][ C1] ? __fget_files+0x310/0x370 [ 786.521153][ C1] ? __fdget_pos+0x1fa/0x300 [ 786.525733][ C1] ? ksys_write+0x77/0x2b0 [ 786.530153][ C1] ksys_write+0x186/0x2b0 [ 786.534616][ C1] ? __ia32_sys_read+0x90/0x90 [ 786.539400][ C1] __x64_sys_write+0x7b/0x90 [ 786.544450][ C1] do_syscall_64+0x31/0x70 [ 786.548877][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 786.554778][ C1] RIP: 0033:0x7f9380d05049 [ 786.559192][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 786.579069][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 786.587943][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 786.596179][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 786.604610][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 786.612847][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 786.620836][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 786.628825][ C1] ---[ end trace 6a7df80a272a84bc ]--- [ 786.634451][ C1] ------------[ cut here ]------------ [ 786.639925][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 786.645982][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 786.655625][ C1] Modules linked in: [ 786.659792][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 786.671543][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 786.681645][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 786.687222][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 786.706863][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 786.712965][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 786.721132][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 786.729363][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: fffff5200002c035 [ 786.737913][ C1] R10: fffff5200002c035 R11: 0000000000000000 R12: ffff88810db870c8 [ 786.745906][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 786.754077][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 786.763045][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 786.769648][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 786.777644][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 786.785733][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 786.793727][ C1] Call Trace: [ 786.797050][ C1] [ 786.799927][ C1] aiptek_irq+0x19b7/0x25f0 [ 786.804459][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 786.810286][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 786.815517][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 786.820569][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 786.825965][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 786.831181][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 786.836055][ C1] dummy_timer+0x798/0x42a0 [ 786.840567][ C1] ? enqueue_timer+0x1d1/0x470 [ 786.845346][ C1] ? __mod_timer+0x995/0xde0 [ 786.849952][ C1] ? mod_timer_pending+0x30/0x30 [ 786.854909][ C1] ? __kasan_check_write+0x14/0x20 [ 786.860123][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 786.865388][ C1] ? dummy_free_streams+0x360/0x360 [ 786.870616][ C1] ? __kasan_check_write+0x14/0x20 [ 786.875759][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 786.881158][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 786.886780][ C1] ? dummy_free_streams+0x360/0x360 [ 786.892005][ C1] call_timer_fn+0x35/0x280 [ 786.896530][ C1] ? dummy_free_streams+0x360/0x360 [ 786.901742][ C1] expire_timers+0x21f/0x3b0 [ 786.906429][ C1] __run_timers+0x548/0x680 [ 786.910954][ C1] ? enqueue_timer+0x470/0x470 [ 786.915736][ C1] run_timer_softirq+0x69/0xf0 [ 786.920514][ C1] __do_softirq+0x27e/0x598 [ 786.925030][ C1] asm_call_irq_on_stack+0xf/0x20 [ 786.930063][ C1] [ 786.933023][ C1] do_softirq_own_stack+0x60/0x80 [ 786.938085][ C1] __irq_exit_rcu+0x128/0x150 [ 786.942778][ C1] irq_exit_rcu+0x9/0x10 [ 786.947045][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 786.952686][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 786.958695][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 786.964000][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 786.983719][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 786.989830][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 786.997835][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 787.005845][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 787.013949][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 787.021947][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 787.029971][ C1] ? kernel_init_free_pages+0x87/0x100 [ 787.035462][ C1] get_page_from_freelist+0x6b5/0xa90 [ 787.040861][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 787.046255][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 787.051844][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 787.057843][ C1] pipe_write+0x580/0x1930 [ 787.062283][ C1] ? pipe_read+0x1030/0x1030 [ 787.066885][ C1] ? fsnotify_perm+0x67/0x4e0 [ 787.071588][ C1] ? io_schedule+0x120/0x120 [ 787.076205][ C1] ? security_file_permission+0xa8/0xc0 [ 787.081870][ C1] ? iov_iter_init+0x3f/0x120 [ 787.086703][ C1] vfs_write+0xc02/0xf20 [ 787.090976][ C1] ? kernel_write+0x3c0/0x3c0 [ 787.095674][ C1] ? __fget_files+0x310/0x370 [ 787.100406][ C1] ? __fdget_pos+0x1fa/0x300 [ 787.105034][ C1] ? ksys_write+0x77/0x2b0 [ 787.109463][ C1] ksys_write+0x186/0x2b0 [ 787.113810][ C1] ? __ia32_sys_read+0x90/0x90 [ 787.118602][ C1] __x64_sys_write+0x7b/0x90 [ 787.123354][ C1] do_syscall_64+0x31/0x70 [ 787.127911][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 787.133833][ C1] RIP: 0033:0x7f9380d05049 [ 787.138325][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 787.157963][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 787.166412][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 787.174501][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 787.182585][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 787.190570][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 787.198556][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 787.206549][ C1] ---[ end trace 6a7df80a272a84bd ]--- [ 787.212082][ C1] ------------[ cut here ]------------ [ 787.217543][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 787.223585][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 787.233248][ C1] Modules linked in: [ 787.237151][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 787.249002][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 787.259082][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 787.264622][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 787.284232][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 787.290400][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 787.298810][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 787.307068][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: fffff5200002c035 [ 787.315228][ C1] R10: fffff5200002c035 R11: 0000000000000000 R12: ffff88810db870c8 [ 787.323306][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 787.331728][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 787.340736][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 787.347755][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 787.355717][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 787.363679][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 787.371820][ C1] Call Trace: [ 787.375118][ C1] [ 787.377986][ C1] aiptek_irq+0x19b7/0x25f0 [ 787.382481][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 787.388283][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 787.393406][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 787.398440][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 787.403805][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 787.409077][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 787.413933][ C1] dummy_timer+0x798/0x42a0 [ 787.418456][ C1] ? enqueue_timer+0x1d1/0x470 [ 787.423222][ C1] ? __mod_timer+0x995/0xde0 [ 787.427812][ C1] ? mod_timer_pending+0x30/0x30 [ 787.432768][ C1] ? __kasan_check_write+0x14/0x20 [ 787.438088][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 787.443325][ C1] ? dummy_free_streams+0x360/0x360 [ 787.448527][ C1] ? __kasan_check_write+0x14/0x20 [ 787.453637][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 787.459114][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 787.464675][ C1] ? dummy_free_streams+0x360/0x360 [ 787.469957][ C1] call_timer_fn+0x35/0x280 [ 787.474557][ C1] ? dummy_free_streams+0x360/0x360 [ 787.480040][ C1] expire_timers+0x21f/0x3b0 [ 787.484626][ C1] __run_timers+0x548/0x680 [ 787.489342][ C1] ? enqueue_timer+0x470/0x470 [ 787.494136][ C1] run_timer_softirq+0x69/0xf0 [ 787.498901][ C1] __do_softirq+0x27e/0x598 [ 787.503488][ C1] asm_call_irq_on_stack+0xf/0x20 [ 787.508749][ C1] [ 787.512502][ C1] do_softirq_own_stack+0x60/0x80 [ 787.517564][ C1] __irq_exit_rcu+0x128/0x150 [ 787.522239][ C1] irq_exit_rcu+0x9/0x10 [ 787.526479][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 787.532106][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 787.538267][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 787.543539][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 787.563145][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 787.569212][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 787.577178][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 787.585147][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 787.593126][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 787.601109][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 787.609105][ C1] ? kernel_init_free_pages+0x87/0x100 [ 787.614560][ C1] get_page_from_freelist+0x6b5/0xa90 [ 787.619944][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 787.625332][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 787.630879][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 787.636854][ C1] pipe_write+0x580/0x1930 [ 787.641270][ C1] ? pipe_read+0x1030/0x1030 [ 787.645884][ C1] ? fsnotify_perm+0x67/0x4e0 [ 787.650555][ C1] ? io_schedule+0x120/0x120 [ 787.655156][ C1] ? security_file_permission+0xa8/0xc0 [ 787.660825][ C1] ? iov_iter_init+0x3f/0x120 [ 787.665510][ C1] vfs_write+0xc02/0xf20 [ 787.669772][ C1] ? kernel_write+0x3c0/0x3c0 [ 787.674470][ C1] ? __fget_files+0x310/0x370 [ 787.679175][ C1] ? __fdget_pos+0x1fa/0x300 [ 787.683782][ C1] ? ksys_write+0x77/0x2b0 [ 787.688293][ C1] ksys_write+0x186/0x2b0 [ 787.692629][ C1] ? __ia32_sys_read+0x90/0x90 [ 787.697417][ C1] __x64_sys_write+0x7b/0x90 [ 787.702001][ C1] do_syscall_64+0x31/0x70 [ 787.706423][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 787.712320][ C1] RIP: 0033:0x7f9380d05049 [ 787.716761][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 787.736389][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 787.744806][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 787.752882][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 787.760856][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 787.768829][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 787.776798][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 787.784804][ C1] ---[ end trace 6a7df80a272a84be ]--- [ 787.790350][ C1] ------------[ cut here ]------------ [ 787.795815][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 787.801859][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 787.811492][ C1] Modules linked in: [ 787.815513][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 787.827254][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 787.837356][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 787.843017][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 787.862657][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 787.868752][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 787.877197][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 787.885202][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: fffff5200002c035 [ 787.893205][ C1] R10: fffff5200002c035 R11: 0000000000000000 R12: ffff88810db870c8 [ 787.901207][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 787.909473][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 787.918420][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 787.925023][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 787.933023][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 787.941012][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 787.949113][ C1] Call Trace: [ 787.952650][ C1] [ 787.955534][ C1] aiptek_irq+0x19b7/0x25f0 [ 787.960053][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 787.965921][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 787.971056][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 787.976109][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 787.981504][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 787.986837][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 787.991785][ C1] dummy_timer+0x798/0x42a0 [ 787.996339][ C1] ? enqueue_timer+0x1d1/0x470 [ 788.001121][ C1] ? __mod_timer+0x995/0xde0 [ 788.005825][ C1] ? mod_timer_pending+0x30/0x30 [ 788.010779][ C1] ? __kasan_check_write+0x14/0x20 [ 788.016003][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 788.021341][ C1] ? dummy_free_streams+0x360/0x360 [ 788.026977][ C1] ? __kasan_check_write+0x14/0x20 [ 788.032140][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 788.037389][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 788.042970][ C1] ? dummy_free_streams+0x360/0x360 [ 788.048204][ C1] call_timer_fn+0x35/0x280 [ 788.052766][ C1] ? dummy_free_streams+0x360/0x360 [ 788.058173][ C1] expire_timers+0x21f/0x3b0 [ 788.063593][ C1] __run_timers+0x548/0x680 [ 788.068129][ C1] ? enqueue_timer+0x470/0x470 [ 788.073112][ C1] run_timer_softirq+0x69/0xf0 [ 788.077913][ C1] __do_softirq+0x27e/0x598 [ 788.082464][ C1] asm_call_irq_on_stack+0xf/0x20 [ 788.087501][ C1] [ 788.090756][ C1] do_softirq_own_stack+0x60/0x80 [ 788.095854][ C1] __irq_exit_rcu+0x128/0x150 [ 788.100562][ C1] irq_exit_rcu+0x9/0x10 [ 788.104842][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 788.110504][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 788.116513][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 788.121919][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 788.141728][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 788.147831][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 788.155821][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 788.163815][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 788.172079][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 788.180076][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 788.188129][ C1] ? kernel_init_free_pages+0x87/0x100 [ 788.193628][ C1] get_page_from_freelist+0x6b5/0xa90 [ 788.199027][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 788.204426][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 788.210030][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 788.216218][ C1] pipe_write+0x580/0x1930 [ 788.220660][ C1] ? pipe_read+0x1030/0x1030 [ 788.225356][ C1] ? fsnotify_perm+0x67/0x4e0 [ 788.230069][ C1] ? io_schedule+0x120/0x120 [ 788.234789][ C1] ? security_file_permission+0xa8/0xc0 [ 788.240428][ C1] ? iov_iter_init+0x3f/0x120 [ 788.245131][ C1] vfs_write+0xc02/0xf20 [ 788.249660][ C1] ? kernel_write+0x3c0/0x3c0 [ 788.254400][ C1] ? __fget_files+0x310/0x370 [ 788.259099][ C1] ? __fdget_pos+0x1fa/0x300 [ 788.264170][ C1] ? ksys_write+0x77/0x2b0 [ 788.268607][ C1] ksys_write+0x186/0x2b0 [ 788.273084][ C1] ? __ia32_sys_read+0x90/0x90 [ 788.277991][ C1] __x64_sys_write+0x7b/0x90 [ 788.282635][ C1] do_syscall_64+0x31/0x70 [ 788.287100][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 788.293198][ C1] RIP: 0033:0x7f9380d05049 [ 788.297732][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 788.317844][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 788.326313][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 788.334399][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 788.342416][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 788.350413][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 788.358583][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 788.366581][ C1] ---[ end trace 6a7df80a272a84bf ]--- [ 788.372465][ C1] ------------[ cut here ]------------ [ 788.378303][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 788.384390][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 788.394327][ C1] Modules linked in: [ 788.398267][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 788.410329][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 788.421061][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 788.426614][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 788.446964][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 788.453206][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 788.461222][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 788.469198][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: fffff5200002c035 [ 788.477201][ C1] R10: fffff5200002c035 R11: 0000000000000000 R12: ffff88810db870c8 [ 788.485294][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 788.493289][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 788.502564][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 788.509164][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 788.517226][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 788.525286][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 788.533313][ C1] Call Trace: [ 788.536601][ C1] [ 788.539462][ C1] aiptek_irq+0x19b7/0x25f0 [ 788.543959][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 788.550314][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 788.555604][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 788.560631][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 788.566014][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 788.571215][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 788.576152][ C1] dummy_timer+0x798/0x42a0 [ 788.580821][ C1] ? enqueue_timer+0x1d1/0x470 [ 788.585588][ C1] ? __mod_timer+0x995/0xde0 [ 788.590343][ C1] ? mod_timer_pending+0x30/0x30 [ 788.595281][ C1] ? __kasan_check_write+0x14/0x20 [ 788.600402][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 788.605610][ C1] ? dummy_free_streams+0x360/0x360 [ 788.611067][ C1] ? __kasan_check_write+0x14/0x20 [ 788.616198][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 788.621303][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 788.626853][ C1] ? dummy_free_streams+0x360/0x360 [ 788.632144][ C1] call_timer_fn+0x35/0x280 [ 788.636862][ C1] ? dummy_free_streams+0x360/0x360 [ 788.642056][ C1] expire_timers+0x21f/0x3b0 [ 788.646693][ C1] __run_timers+0x548/0x680 [ 788.651274][ C1] ? enqueue_timer+0x470/0x470 [ 788.656119][ C1] run_timer_softirq+0x69/0xf0 [ 788.661034][ C1] __do_softirq+0x27e/0x598 [ 788.665530][ C1] asm_call_irq_on_stack+0xf/0x20 [ 788.670667][ C1] [ 788.673864][ C1] do_softirq_own_stack+0x60/0x80 [ 788.678966][ C1] __irq_exit_rcu+0x128/0x150 [ 788.683678][ C1] irq_exit_rcu+0x9/0x10 [ 788.687933][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 788.693746][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 788.699734][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 788.705013][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 788.725003][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 788.731163][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 788.739502][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 788.748060][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 788.756317][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 788.764649][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 788.772748][ C1] ? kernel_init_free_pages+0x87/0x100 [ 788.778250][ C1] get_page_from_freelist+0x6b5/0xa90 [ 788.783677][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 788.789087][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 788.794633][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 788.800728][ C1] pipe_write+0x580/0x1930 [ 788.805255][ C1] ? pipe_read+0x1030/0x1030 [ 788.809850][ C1] ? fsnotify_perm+0x67/0x4e0 [ 788.814526][ C1] ? io_schedule+0x120/0x120 [ 788.819128][ C1] ? security_file_permission+0xa8/0xc0 [ 788.824767][ C1] ? iov_iter_init+0x3f/0x120 [ 788.829443][ C1] vfs_write+0xc02/0xf20 [ 788.833711][ C1] ? kernel_write+0x3c0/0x3c0 [ 788.838379][ C1] ? __fget_files+0x310/0x370 [ 788.843142][ C1] ? __fdget_pos+0x1fa/0x300 [ 788.847848][ C1] ? ksys_write+0x77/0x2b0 [ 788.852280][ C1] ksys_write+0x186/0x2b0 [ 788.856637][ C1] ? __ia32_sys_read+0x90/0x90 [ 788.861635][ C1] __x64_sys_write+0x7b/0x90 [ 788.866636][ C1] do_syscall_64+0x31/0x70 [ 788.871149][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 788.877159][ C1] RIP: 0033:0x7f9380d05049 [ 788.881594][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 788.901216][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 788.909628][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 788.917619][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 788.925834][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 788.933817][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 788.941791][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 788.949793][ C1] ---[ end trace 6a7df80a272a84c0 ]--- [ 788.955423][ C1] ------------[ cut here ]------------ [ 788.960883][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 788.966921][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 788.976648][ C1] Modules linked in: [ 788.980591][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 788.992406][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 789.002678][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 789.008423][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 789.028226][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 789.034312][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 789.042472][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 789.050484][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: fffff5200002c035 [ 789.058475][ C1] R10: fffff5200002c035 R11: 0000000000000000 R12: ffff88810db870c8 [ 789.066461][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 789.074455][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 789.083613][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 789.090300][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 789.098389][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 789.106390][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 789.114488][ C1] Call Trace: [ 789.117781][ C1] [ 789.120682][ C1] aiptek_irq+0x19b7/0x25f0 [ 789.125217][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 789.131078][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 789.136232][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 789.141286][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 789.146679][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 789.151913][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 789.156790][ C1] dummy_timer+0x798/0x42a0 [ 789.161322][ C1] ? enqueue_timer+0x1d1/0x470 [ 789.166113][ C1] ? __mod_timer+0x995/0xde0 [ 789.170725][ C1] ? mod_timer_pending+0x30/0x30 [ 789.175692][ C1] ? __kasan_check_write+0x14/0x20 [ 789.180850][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 789.186092][ C1] ? dummy_free_streams+0x360/0x360 [ 789.191355][ C1] ? __kasan_check_write+0x14/0x20 [ 789.196491][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 789.201632][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 789.207206][ C1] ? dummy_free_streams+0x360/0x360 [ 789.212530][ C1] call_timer_fn+0x35/0x280 [ 789.217061][ C1] ? dummy_free_streams+0x360/0x360 [ 789.222274][ C1] expire_timers+0x21f/0x3b0 [ 789.226898][ C1] __run_timers+0x548/0x680 [ 789.231443][ C1] ? enqueue_timer+0x470/0x470 [ 789.236314][ C1] run_timer_softirq+0x69/0xf0 [ 789.241095][ C1] __do_softirq+0x27e/0x598 [ 789.245719][ C1] asm_call_irq_on_stack+0xf/0x20 [ 789.250771][ C1] [ 789.253748][ C1] do_softirq_own_stack+0x60/0x80 [ 789.258791][ C1] __irq_exit_rcu+0x128/0x150 [ 789.263488][ C1] irq_exit_rcu+0x9/0x10 [ 789.267932][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 789.273695][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 789.279705][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 789.285010][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 789.304646][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 789.310743][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 789.318791][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 789.326788][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 789.334790][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 789.342890][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 789.351059][ C1] ? kernel_init_free_pages+0x87/0x100 [ 789.356555][ C1] get_page_from_freelist+0x6b5/0xa90 [ 789.361961][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 789.367370][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 789.372948][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 789.378958][ C1] pipe_write+0x580/0x1930 [ 789.383412][ C1] ? pipe_read+0x1030/0x1030 [ 789.388019][ C1] ? fsnotify_perm+0x67/0x4e0 [ 789.392712][ C1] ? io_schedule+0x120/0x120 [ 789.397330][ C1] ? security_file_permission+0xa8/0xc0 [ 789.402905][ C1] ? iov_iter_init+0x3f/0x120 [ 789.407698][ C1] vfs_write+0xc02/0xf20 [ 789.411969][ C1] ? kernel_write+0x3c0/0x3c0 [ 789.416675][ C1] ? __fget_files+0x310/0x370 [ 789.421458][ C1] ? __fdget_pos+0x1fa/0x300 [ 789.426111][ C1] ? ksys_write+0x77/0x2b0 [ 789.430681][ C1] ksys_write+0x186/0x2b0 [ 789.435065][ C1] ? __ia32_sys_read+0x90/0x90 [ 789.439857][ C1] __x64_sys_write+0x7b/0x90 [ 789.444480][ C1] do_syscall_64+0x31/0x70 [ 789.448933][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 789.454849][ C1] RIP: 0033:0x7f9380d05049 [ 789.459282][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 789.478911][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 789.487351][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 789.495348][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 789.503353][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 789.511337][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 789.519330][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 789.527323][ C1] ---[ end trace 6a7df80a272a84c1 ]--- [ 789.532914][ C1] ------------[ cut here ]------------ [ 789.538380][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 789.544454][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 789.554178][ C1] Modules linked in: [ 789.558182][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 789.570416][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 789.580498][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 789.586047][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 789.605921][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 789.611986][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 789.619962][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 789.627941][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 789.635937][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 789.643911][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 789.651888][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 789.660823][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 789.667408][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 789.675386][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 789.683367][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 789.691508][ C1] Call Trace: [ 789.694787][ C1] [ 789.697666][ C1] aiptek_irq+0x19b7/0x25f0 [ 789.702168][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 789.708033][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 789.713138][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 789.718158][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 789.723553][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 789.728863][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 789.733711][ C1] dummy_timer+0x798/0x42a0 [ 789.738240][ C1] ? enqueue_timer+0x1d1/0x470 [ 789.743002][ C1] ? __mod_timer+0x995/0xde0 [ 789.747604][ C1] ? mod_timer_pending+0x30/0x30 [ 789.752545][ C1] ? __kasan_check_write+0x14/0x20 [ 789.757656][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 789.762882][ C1] ? dummy_free_streams+0x360/0x360 [ 789.768079][ C1] ? __kasan_check_write+0x14/0x20 [ 789.773190][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 789.778326][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 789.783899][ C1] ? dummy_free_streams+0x360/0x360 [ 789.789098][ C1] call_timer_fn+0x35/0x280 [ 789.793829][ C1] ? dummy_free_streams+0x360/0x360 [ 789.799035][ C1] expire_timers+0x21f/0x3b0 [ 789.803648][ C1] __run_timers+0x548/0x680 [ 789.808142][ C1] ? enqueue_timer+0x470/0x470 [ 789.812910][ C1] run_timer_softirq+0x69/0xf0 [ 789.817683][ C1] __do_softirq+0x27e/0x598 [ 789.822186][ C1] asm_call_irq_on_stack+0xf/0x20 [ 789.827286][ C1] [ 789.830232][ C1] do_softirq_own_stack+0x60/0x80 [ 789.835344][ C1] __irq_exit_rcu+0x128/0x150 [ 789.840011][ C1] irq_exit_rcu+0x9/0x10 [ 789.844251][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 789.849912][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 789.855896][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 789.861184][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 789.880886][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 789.886958][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 789.895012][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 789.903083][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 789.911136][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 789.919122][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 789.927118][ C1] ? kernel_init_free_pages+0x87/0x100 [ 789.932569][ C1] get_page_from_freelist+0x6b5/0xa90 [ 789.937969][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 789.943352][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 789.948903][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 789.955004][ C1] pipe_write+0x580/0x1930 [ 789.959427][ C1] ? pipe_read+0x1030/0x1030 [ 789.964025][ C1] ? fsnotify_perm+0x67/0x4e0 [ 789.968709][ C1] ? io_schedule+0x120/0x120 [ 789.973518][ C1] ? security_file_permission+0xa8/0xc0 [ 789.979104][ C1] ? iov_iter_init+0x3f/0x120 [ 789.983784][ C1] vfs_write+0xc02/0xf20 [ 789.988031][ C1] ? kernel_write+0x3c0/0x3c0 [ 789.992734][ C1] ? __fget_files+0x310/0x370 [ 789.997404][ C1] ? __fdget_pos+0x1fa/0x300 [ 790.002008][ C1] ? ksys_write+0x77/0x2b0 [ 790.006416][ C1] ksys_write+0x186/0x2b0 [ 790.010739][ C1] ? __ia32_sys_read+0x90/0x90 [ 790.015589][ C1] __x64_sys_write+0x7b/0x90 [ 790.020174][ C1] do_syscall_64+0x31/0x70 [ 790.024597][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 790.030485][ C1] RIP: 0033:0x7f9380d05049 [ 790.034912][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 790.054514][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 790.062926][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 790.070900][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 790.078883][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 790.086868][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 790.094927][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 790.102903][ C1] ---[ end trace 6a7df80a272a84c2 ]--- [ 790.108443][ C1] ------------[ cut here ]------------ [ 790.113911][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 790.119970][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 790.129683][ C1] Modules linked in: [ 790.133620][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 790.145540][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 790.155640][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 790.161219][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 790.180876][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 790.186964][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 790.195047][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 790.203042][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: fffff5200002c035 [ 790.211076][ C1] R10: fffff5200002c035 R11: 0000000000000000 R12: ffff88810db870c8 [ 790.219067][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 790.227143][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 790.236126][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 790.242733][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 790.250741][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 790.258820][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 790.266837][ C1] Call Trace: [ 790.270152][ C1] [ 790.273046][ C1] aiptek_irq+0x19b7/0x25f0 [ 790.277558][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 790.283375][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 790.288537][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 790.293585][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 790.298979][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 790.304281][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 790.309186][ C1] dummy_timer+0x798/0x42a0 [ 790.313720][ C1] ? enqueue_timer+0x1d1/0x470 [ 790.318500][ C1] ? __mod_timer+0x995/0xde0 [ 790.323113][ C1] ? mod_timer_pending+0x30/0x30 [ 790.328068][ C1] ? __kasan_check_write+0x14/0x20 [ 790.333204][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 790.338420][ C1] ? dummy_free_streams+0x360/0x360 [ 790.343652][ C1] ? __kasan_check_write+0x14/0x20 [ 790.348803][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 790.353962][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 790.359528][ C1] ? dummy_free_streams+0x360/0x360 [ 790.364776][ C1] call_timer_fn+0x35/0x280 [ 790.369302][ C1] ? dummy_free_streams+0x360/0x360 [ 790.374525][ C1] expire_timers+0x21f/0x3b0 [ 790.379134][ C1] __run_timers+0x548/0x680 [ 790.383698][ C1] ? enqueue_timer+0x470/0x470 [ 790.388667][ C1] run_timer_softirq+0x69/0xf0 [ 790.393455][ C1] __do_softirq+0x27e/0x598 [ 790.398016][ C1] asm_call_irq_on_stack+0xf/0x20 [ 790.403069][ C1] [ 790.406023][ C1] do_softirq_own_stack+0x60/0x80 [ 790.411147][ C1] __irq_exit_rcu+0x128/0x150 [ 790.415840][ C1] irq_exit_rcu+0x9/0x10 [ 790.420112][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 790.425766][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 790.431775][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 790.437179][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 790.456833][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 790.462924][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 790.470949][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 790.478985][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 790.487010][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 790.495022][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 790.503015][ C1] ? kernel_init_free_pages+0x87/0x100 [ 790.508674][ C1] get_page_from_freelist+0x6b5/0xa90 [ 790.514103][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 790.519503][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 790.525066][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 790.531058][ C1] pipe_write+0x580/0x1930 [ 790.535491][ C1] ? pipe_read+0x1030/0x1030 [ 790.540119][ C1] ? fsnotify_perm+0x67/0x4e0 [ 790.544835][ C1] ? io_schedule+0x120/0x120 [ 790.549429][ C1] ? security_file_permission+0xa8/0xc0 [ 790.555012][ C1] ? iov_iter_init+0x3f/0x120 [ 790.559805][ C1] vfs_write+0xc02/0xf20 [ 790.564167][ C1] ? kernel_write+0x3c0/0x3c0 [ 790.568891][ C1] ? __fget_files+0x310/0x370 [ 790.573575][ C1] ? __fdget_pos+0x1fa/0x300 [ 790.578180][ C1] ? ksys_write+0x77/0x2b0 [ 790.582607][ C1] ksys_write+0x186/0x2b0 [ 790.586961][ C1] ? __ia32_sys_read+0x90/0x90 [ 790.591829][ C1] __x64_sys_write+0x7b/0x90 [ 790.596461][ C1] do_syscall_64+0x31/0x70 [ 790.600917][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 790.606854][ C1] RIP: 0033:0x7f9380d05049 [ 790.611290][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 790.630918][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 790.639359][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 790.647378][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 790.655490][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 790.663497][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 790.671994][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 790.680222][ C1] ---[ end trace 6a7df80a272a84c3 ]--- [ 790.685773][ C1] ------------[ cut here ]------------ [ 790.691241][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 790.697391][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 790.707030][ C1] Modules linked in: [ 790.710981][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 790.722694][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 790.732778][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 790.738317][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 790.757924][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 790.763999][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 790.772109][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 790.780109][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: fffff5200002c035 [ 790.788077][ C1] R10: fffff5200002c035 R11: 0000000000000000 R12: ffff88810db870c8 [ 790.796143][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 790.804109][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 790.813039][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 790.819637][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 790.827622][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 790.835598][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 790.843827][ C1] Call Trace: [ 790.847227][ C1] [ 790.850088][ C1] aiptek_irq+0x19b7/0x25f0 [ 790.854617][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 790.860437][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 790.865564][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 790.870580][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 790.875952][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 790.881228][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 790.886087][ C1] dummy_timer+0x798/0x42a0 [ 790.890590][ C1] ? enqueue_timer+0x1d1/0x470 [ 790.895350][ C1] ? __mod_timer+0x995/0xde0 [ 790.899946][ C1] ? mod_timer_pending+0x30/0x30 [ 790.904878][ C1] ? __kasan_check_write+0x14/0x20 [ 790.910684][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 790.915893][ C1] ? dummy_free_streams+0x360/0x360 [ 790.921086][ C1] ? __kasan_check_write+0x14/0x20 [ 790.926196][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 790.931820][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 790.937577][ C1] ? dummy_free_streams+0x360/0x360 [ 790.942799][ C1] call_timer_fn+0x35/0x280 [ 790.947301][ C1] ? dummy_free_streams+0x360/0x360 [ 790.952490][ C1] expire_timers+0x21f/0x3b0 [ 790.957078][ C1] __run_timers+0x548/0x680 [ 790.961569][ C1] ? enqueue_timer+0x470/0x470 [ 790.966342][ C1] run_timer_softirq+0x69/0xf0 [ 790.971103][ C1] __do_softirq+0x27e/0x598 [ 790.975605][ C1] asm_call_irq_on_stack+0xf/0x20 [ 790.980704][ C1] [ 790.983800][ C1] do_softirq_own_stack+0x60/0x80 [ 790.988830][ C1] __irq_exit_rcu+0x128/0x150 [ 790.993612][ C1] irq_exit_rcu+0x9/0x10 [ 790.997866][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 791.003598][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 791.009768][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 791.015166][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 791.034905][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 791.040974][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 791.048938][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 791.056926][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 791.064920][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 791.073850][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 791.081864][ C1] ? kernel_init_free_pages+0x87/0x100 [ 791.087446][ C1] get_page_from_freelist+0x6b5/0xa90 [ 791.092960][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 791.098464][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 791.104042][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 791.110235][ C1] pipe_write+0x580/0x1930 [ 791.114653][ C1] ? pipe_read+0x1030/0x1030 [ 791.119236][ C1] ? fsnotify_perm+0x67/0x4e0 [ 791.123909][ C1] ? io_schedule+0x120/0x120 [ 791.128515][ C1] ? security_file_permission+0xa8/0xc0 [ 791.134079][ C1] ? iov_iter_init+0x3f/0x120 [ 791.138789][ C1] vfs_write+0xc02/0xf20 [ 791.143075][ C1] ? kernel_write+0x3c0/0x3c0 [ 791.148210][ C1] ? __fget_files+0x310/0x370 [ 791.152908][ C1] ? __fdget_pos+0x1fa/0x300 [ 791.157522][ C1] ? ksys_write+0x77/0x2b0 [ 791.161938][ C1] ksys_write+0x186/0x2b0 [ 791.166384][ C1] ? __ia32_sys_read+0x90/0x90 [ 791.171169][ C1] __x64_sys_write+0x7b/0x90 [ 791.175797][ C1] do_syscall_64+0x31/0x70 [ 791.180217][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 791.186157][ C1] RIP: 0033:0x7f9380d05049 [ 791.190702][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 791.210321][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 791.218741][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 791.226849][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 791.234828][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 791.243427][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 791.251398][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 791.259563][ C1] ---[ end trace 6a7df80a272a84c4 ]--- [ 791.265177][ C1] ------------[ cut here ]------------ [ 791.270654][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 791.276729][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 791.286369][ C1] Modules linked in: [ 791.290299][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 791.302101][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 791.312416][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 791.317987][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 791.343011][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 791.349191][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 791.357220][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 791.365390][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: fffff5200002c035 [ 791.373388][ C1] R10: fffff5200002c035 R11: 0000000000000000 R12: ffff88810db870c8 [ 791.381387][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 791.389383][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 791.398351][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 791.404984][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 791.412992][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 791.421495][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 791.430164][ C1] Call Trace: [ 791.433740][ C1] [ 791.436610][ C1] aiptek_irq+0x19b7/0x25f0 [ 791.441221][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 791.447073][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 791.452502][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 791.457613][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 791.463268][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 791.468584][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 791.473501][ C1] dummy_timer+0x798/0x42a0 [ 791.478192][ C1] ? enqueue_timer+0x1d1/0x470 [ 791.483123][ C1] ? __mod_timer+0x995/0xde0 [ 791.487844][ C1] ? mod_timer_pending+0x30/0x30 [ 791.492892][ C1] ? __kasan_check_write+0x14/0x20 [ 791.498113][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 791.503332][ C1] ? dummy_free_streams+0x360/0x360 [ 791.508826][ C1] ? __kasan_check_write+0x14/0x20 [ 791.513956][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 791.519093][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 791.524664][ C1] ? dummy_free_streams+0x360/0x360 [ 791.530018][ C1] call_timer_fn+0x35/0x280 [ 791.534836][ C1] ? dummy_free_streams+0x360/0x360 [ 791.540059][ C1] expire_timers+0x21f/0x3b0 [ 791.544702][ C1] __run_timers+0x548/0x680 [ 791.549228][ C1] ? enqueue_timer+0x470/0x470 [ 791.554011][ C1] run_timer_softirq+0x69/0xf0 [ 791.558853][ C1] __do_softirq+0x27e/0x598 [ 791.563389][ C1] asm_call_irq_on_stack+0xf/0x20 [ 791.568437][ C1] [ 791.571593][ C1] do_softirq_own_stack+0x60/0x80 [ 791.576640][ C1] __irq_exit_rcu+0x128/0x150 [ 791.581356][ C1] irq_exit_rcu+0x9/0x10 [ 791.585804][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 791.591713][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 791.597731][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 791.603031][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 791.624095][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 791.630232][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 791.638243][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 791.646603][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 791.654630][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 791.662710][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 791.670725][ C1] ? kernel_init_free_pages+0x87/0x100 [ 791.676237][ C1] get_page_from_freelist+0x6b5/0xa90 [ 791.681648][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 791.687035][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 791.692615][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 791.698618][ C1] pipe_write+0x580/0x1930 [ 791.703067][ C1] ? pipe_read+0x1030/0x1030 [ 791.707702][ C1] ? fsnotify_perm+0x67/0x4e0 [ 791.712390][ C1] ? io_schedule+0x120/0x120 [ 791.716996][ C1] ? security_file_permission+0xa8/0xc0 [ 791.722591][ C1] ? iov_iter_init+0x3f/0x120 [ 791.727292][ C1] vfs_write+0xc02/0xf20 [ 791.731555][ C1] ? kernel_write+0x3c0/0x3c0 [ 791.736249][ C1] ? __fget_files+0x310/0x370 [ 791.741047][ C1] ? __fdget_pos+0x1fa/0x300 [ 791.745650][ C1] ? ksys_write+0x77/0x2b0 [ 791.750085][ C1] ksys_write+0x186/0x2b0 [ 791.754427][ C1] ? __ia32_sys_read+0x90/0x90 [ 791.759303][ C1] __x64_sys_write+0x7b/0x90 [ 791.764000][ C1] do_syscall_64+0x31/0x70 [ 791.768528][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 791.774437][ C1] RIP: 0033:0x7f9380d05049 [ 791.778876][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 791.798634][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 791.807080][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 791.815170][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 791.823167][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 791.831167][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 791.839160][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 791.847248][ C1] ---[ end trace 6a7df80a272a84c5 ]--- [ 791.852855][ C1] ------------[ cut here ]------------ [ 791.858336][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 791.864417][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 791.874153][ C1] Modules linked in: [ 791.878055][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 791.889749][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 791.899911][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 791.905460][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 791.925152][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 791.931216][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 791.939184][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 791.947238][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: fffff5200002c035 [ 791.955220][ C1] R10: fffff5200002c035 R11: 0000000000000000 R12: ffff88810db870c8 [ 791.963197][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 791.971170][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 791.980094][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 791.986776][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 791.994760][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 792.002734][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 792.011047][ C1] Call Trace: [ 792.014373][ C1] [ 792.017224][ C1] aiptek_irq+0x19b7/0x25f0 [ 792.021739][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 792.027807][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 792.032915][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 792.037944][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 792.043315][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 792.048621][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 792.053463][ C1] dummy_timer+0x798/0x42a0 [ 792.057960][ C1] ? enqueue_timer+0x1d1/0x470 [ 792.062750][ C1] ? __mod_timer+0x995/0xde0 [ 792.067347][ C1] ? mod_timer_pending+0x30/0x30 [ 792.072275][ C1] ? __kasan_check_write+0x14/0x20 [ 792.077388][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 792.082595][ C1] ? dummy_free_streams+0x360/0x360 [ 792.087791][ C1] ? __kasan_check_write+0x14/0x20 [ 792.092909][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 792.098038][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 792.103583][ C1] ? dummy_free_streams+0x360/0x360 [ 792.108781][ C1] call_timer_fn+0x35/0x280 [ 792.113546][ C1] ? dummy_free_streams+0x360/0x360 [ 792.118757][ C1] expire_timers+0x21f/0x3b0 [ 792.123355][ C1] __run_timers+0x548/0x680 [ 792.127852][ C1] ? enqueue_timer+0x470/0x470 [ 792.132610][ C1] run_timer_softirq+0x69/0xf0 [ 792.137374][ C1] __do_softirq+0x27e/0x598 [ 792.141879][ C1] asm_call_irq_on_stack+0xf/0x20 [ 792.146888][ C1] [ 792.149838][ C1] do_softirq_own_stack+0x60/0x80 [ 792.154867][ C1] __irq_exit_rcu+0x128/0x150 [ 792.159544][ C1] irq_exit_rcu+0x9/0x10 [ 792.163791][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 792.169426][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 792.175408][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 792.180696][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 792.200301][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 792.206371][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 792.214343][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 792.222335][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 792.230327][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 792.238323][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 792.246415][ C1] ? kernel_init_free_pages+0x87/0x100 [ 792.251874][ C1] get_page_from_freelist+0x6b5/0xa90 [ 792.257241][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 792.262611][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 792.268159][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 792.274149][ C1] pipe_write+0x580/0x1930 [ 792.278661][ C1] ? pipe_read+0x1030/0x1030 [ 792.283250][ C1] ? fsnotify_perm+0x67/0x4e0 [ 792.287926][ C1] ? io_schedule+0x120/0x120 [ 792.292513][ C1] ? security_file_permission+0xa8/0xc0 [ 792.298089][ C1] ? iov_iter_init+0x3f/0x120 [ 792.302768][ C1] vfs_write+0xc02/0xf20 [ 792.307039][ C1] ? kernel_write+0x3c0/0x3c0 [ 792.311741][ C1] ? __fget_files+0x310/0x370 [ 792.316547][ C1] ? __fdget_pos+0x1fa/0x300 [ 792.321151][ C1] ? ksys_write+0x77/0x2b0 [ 792.325672][ C1] ksys_write+0x186/0x2b0 [ 792.329998][ C1] ? __ia32_sys_read+0x90/0x90 [ 792.334759][ C1] __x64_sys_write+0x7b/0x90 [ 792.339355][ C1] do_syscall_64+0x31/0x70 [ 792.344040][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 792.349924][ C1] RIP: 0033:0x7f9380d05049 [ 792.354344][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 792.374044][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 792.382460][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 792.390448][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 792.398520][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 792.406531][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 792.414698][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 792.422678][ C1] ---[ end trace 6a7df80a272a84c6 ]--- [ 792.428281][ C1] ------------[ cut here ]------------ [ 792.433746][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 792.439993][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 792.449716][ C1] Modules linked in: [ 792.453645][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 792.465364][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 792.475475][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 792.481051][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 792.500759][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 792.506882][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 792.514971][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 792.522967][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: fffff5200002c035 [ 792.530968][ C1] R10: fffff5200002c035 R11: 0000000000000000 R12: ffff88810db870c8 [ 792.538973][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 792.546974][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 792.555928][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 792.562528][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 792.570521][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 792.578504][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 792.586486][ C1] Call Trace: [ 792.589770][ C1] [ 792.592663][ C1] aiptek_irq+0x19b7/0x25f0 [ 792.597184][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 792.603012][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 792.608150][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 792.613202][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 792.618597][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 792.623806][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 792.628678][ C1] dummy_timer+0x798/0x42a0 [ 792.633200][ C1] ? enqueue_timer+0x1d1/0x470 [ 792.637980][ C1] ? __mod_timer+0x995/0xde0 [ 792.642585][ C1] ? mod_timer_pending+0x30/0x30 [ 792.647546][ C1] ? __kasan_check_write+0x14/0x20 [ 792.652671][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 792.657913][ C1] ? dummy_free_streams+0x360/0x360 [ 792.663122][ C1] ? __kasan_check_write+0x14/0x20 [ 792.668268][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 792.673406][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 792.679105][ C1] ? dummy_free_streams+0x360/0x360 [ 792.684316][ C1] call_timer_fn+0x35/0x280 [ 792.688849][ C1] ? dummy_free_streams+0x360/0x360 [ 792.694062][ C1] expire_timers+0x21f/0x3b0 [ 792.698665][ C1] __run_timers+0x548/0x680 [ 792.703187][ C1] ? enqueue_timer+0x470/0x470 [ 792.707991][ C1] run_timer_softirq+0x69/0xf0 [ 792.712779][ C1] __do_softirq+0x27e/0x598 [ 792.717428][ C1] asm_call_irq_on_stack+0xf/0x20 [ 792.722465][ C1] [ 792.725425][ C1] do_softirq_own_stack+0x60/0x80 [ 792.730556][ C1] __irq_exit_rcu+0x128/0x150 [ 792.735252][ C1] irq_exit_rcu+0x9/0x10 [ 792.739516][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 792.745170][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 792.751346][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 792.756642][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 792.776350][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 792.782522][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 792.790510][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 792.798498][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 792.806488][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 792.814477][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 792.822654][ C1] ? kernel_init_free_pages+0x87/0x100 [ 792.828142][ C1] get_page_from_freelist+0x6b5/0xa90 [ 792.833636][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 792.839027][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 792.844599][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 792.850693][ C1] pipe_write+0x580/0x1930 [ 792.855134][ C1] ? pipe_read+0x1030/0x1030 [ 792.859827][ C1] ? fsnotify_perm+0x67/0x4e0 [ 792.864526][ C1] ? io_schedule+0x120/0x120 [ 792.869136][ C1] ? security_file_permission+0xa8/0xc0 [ 792.874707][ C1] ? iov_iter_init+0x3f/0x120 [ 792.879411][ C1] vfs_write+0xc02/0xf20 [ 792.883697][ C1] ? kernel_write+0x3c0/0x3c0 [ 792.888397][ C1] ? __fget_files+0x310/0x370 [ 792.893094][ C1] ? __fdget_pos+0x1fa/0x300 [ 792.897791][ C1] ? ksys_write+0x77/0x2b0 [ 792.902227][ C1] ksys_write+0x186/0x2b0 [ 792.906573][ C1] ? __ia32_sys_read+0x90/0x90 [ 792.911376][ C1] __x64_sys_write+0x7b/0x90 [ 792.915992][ C1] do_syscall_64+0x31/0x70 [ 792.920430][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 792.926335][ C1] RIP: 0033:0x7f9380d05049 [ 792.930853][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 792.950804][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 792.959237][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 792.967230][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 792.975230][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 792.983367][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 792.991354][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 792.999352][ C1] ---[ end trace 6a7df80a272a84c7 ]--- [ 793.004947][ C1] ------------[ cut here ]------------ [ 793.010427][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 793.016447][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 793.026249][ C1] Modules linked in: [ 793.030149][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 793.042117][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 793.052186][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 793.057727][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 793.077474][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 793.083547][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 793.091518][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 793.099505][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: fffff5200002c035 [ 793.107481][ C1] R10: fffff5200002c035 R11: 0000000000000000 R12: ffff88810db870c8 [ 793.115627][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 793.123596][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 793.132525][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 793.139246][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 793.147353][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 793.155332][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 793.163305][ C1] Call Trace: [ 793.166587][ C1] [ 793.169452][ C1] aiptek_irq+0x19b7/0x25f0 [ 793.173952][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 793.179765][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 793.184973][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 793.190176][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 793.195550][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 793.200752][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 793.205685][ C1] dummy_timer+0x798/0x42a0 [ 793.210185][ C1] ? try_invoke_on_locked_down_task+0x290/0x290 [ 793.216448][ C1] ? __queue_work+0x974/0xda0 [ 793.221125][ C1] ? dummy_free_streams+0x360/0x360 [ 793.226321][ C1] ? __kasan_check_write+0x14/0x20 [ 793.231435][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 793.236542][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 793.242093][ C1] ? wg_expired_zero_key_material+0x11d/0x170 [ 793.248173][ C1] ? dummy_free_streams+0x360/0x360 [ 793.253372][ C1] call_timer_fn+0x35/0x280 [ 793.257900][ C1] ? dummy_free_streams+0x360/0x360 [ 793.263100][ C1] expire_timers+0x21f/0x3b0 [ 793.268081][ C1] __run_timers+0x548/0x680 [ 793.272615][ C1] ? enqueue_timer+0x470/0x470 [ 793.277377][ C1] run_timer_softirq+0x69/0xf0 [ 793.282233][ C1] __do_softirq+0x27e/0x598 [ 793.286736][ C1] asm_call_irq_on_stack+0xf/0x20 [ 793.291762][ C1] [ 793.294702][ C1] do_softirq_own_stack+0x60/0x80 [ 793.299734][ C1] __irq_exit_rcu+0x128/0x150 [ 793.304419][ C1] irq_exit_rcu+0x9/0x10 [ 793.308663][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 793.314308][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 793.320295][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 793.325585][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 793.345196][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 793.351268][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 793.359328][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 793.367318][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 793.375302][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 793.383279][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 793.391315][ C1] ? kernel_init_free_pages+0x87/0x100 [ 793.396787][ C1] get_page_from_freelist+0x6b5/0xa90 [ 793.402167][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 793.407567][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 793.413107][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 793.419091][ C1] pipe_write+0x580/0x1930 [ 793.423563][ C1] ? pipe_read+0x1030/0x1030 [ 793.428178][ C1] ? fsnotify_perm+0x67/0x4e0 [ 793.432874][ C1] ? io_schedule+0x120/0x120 [ 793.437463][ C1] ? security_file_permission+0xa8/0xc0 [ 793.443206][ C1] ? iov_iter_init+0x3f/0x120 [ 793.448031][ C1] vfs_write+0xc02/0xf20 [ 793.452308][ C1] ? kernel_write+0x3c0/0x3c0 [ 793.457335][ C1] ? __fget_files+0x310/0x370 [ 793.462127][ C1] ? __fdget_pos+0x1fa/0x300 [ 793.466877][ C1] ? ksys_write+0x77/0x2b0 [ 793.471301][ C1] ksys_write+0x186/0x2b0 [ 793.475648][ C1] ? __ia32_sys_read+0x90/0x90 [ 793.480409][ C1] __x64_sys_write+0x7b/0x90 [ 793.484998][ C1] do_syscall_64+0x31/0x70 [ 793.489428][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 793.495315][ C1] RIP: 0033:0x7f9380d05049 [ 793.499734][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 793.519437][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 793.527866][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 793.535847][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 793.543820][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 793.551880][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 793.559858][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 793.567836][ C1] ---[ end trace 6a7df80a272a84c8 ]--- [ 793.573482][ C1] ------------[ cut here ]------------ [ 793.578956][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 793.585003][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 793.594630][ C1] Modules linked in: [ 793.598556][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 793.610290][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 793.620476][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 793.626051][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 793.645854][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 793.651955][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 793.659956][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 793.667963][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: fffff5200002c035 [ 793.676149][ C1] R10: fffff5200002c035 R11: 0000000000000000 R12: ffff88810db870c8 [ 793.684142][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 793.692138][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 793.701094][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 793.707790][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 793.715800][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 793.723802][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 793.731798][ C1] Call Trace: [ 793.735091][ C1] [ 793.737990][ C1] aiptek_irq+0x19b7/0x25f0 [ 793.742514][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 793.748427][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 793.753560][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 793.758616][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 793.764060][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 793.769368][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 793.774337][ C1] dummy_timer+0x798/0x42a0 [ 793.778870][ C1] ? try_invoke_on_locked_down_task+0x290/0x290 [ 793.785132][ C1] ? __queue_work+0x974/0xda0 [ 793.789843][ C1] ? dummy_free_streams+0x360/0x360 [ 793.795192][ C1] ? __kasan_check_write+0x14/0x20 [ 793.800343][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 793.805575][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 793.811153][ C1] ? wg_expired_zero_key_material+0x11d/0x170 [ 793.817263][ C1] ? dummy_free_streams+0x360/0x360 [ 793.822500][ C1] call_timer_fn+0x35/0x280 [ 793.827042][ C1] ? dummy_free_streams+0x360/0x360 [ 793.832277][ C1] expire_timers+0x21f/0x3b0 [ 793.836983][ C1] __run_timers+0x548/0x680 [ 793.842438][ C1] ? enqueue_timer+0x470/0x470 [ 793.847242][ C1] run_timer_softirq+0x69/0xf0 [ 793.852042][ C1] __do_softirq+0x27e/0x598 [ 793.856674][ C1] asm_call_irq_on_stack+0xf/0x20 [ 793.861715][ C1] [ 793.864731][ C1] do_softirq_own_stack+0x60/0x80 [ 793.870006][ C1] __irq_exit_rcu+0x128/0x150 [ 793.874716][ C1] irq_exit_rcu+0x9/0x10 [ 793.878981][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 793.884638][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 793.890644][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 793.895951][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 793.915585][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 793.921776][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 793.929781][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 793.937781][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 793.945777][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 793.953785][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 793.961817][ C1] ? kernel_init_free_pages+0x87/0x100 [ 793.967316][ C1] get_page_from_freelist+0x6b5/0xa90 [ 793.973023][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 793.978427][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 793.984011][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 793.990036][ C1] pipe_write+0x580/0x1930 [ 793.994484][ C1] ? pipe_read+0x1030/0x1030 [ 793.999100][ C1] ? fsnotify_perm+0x67/0x4e0 [ 794.003808][ C1] ? io_schedule+0x120/0x120 [ 794.008423][ C1] ? security_file_permission+0xa8/0xc0 [ 794.013992][ C1] ? iov_iter_init+0x3f/0x120 [ 794.018700][ C1] vfs_write+0xc02/0xf20 [ 794.022976][ C1] ? kernel_write+0x3c0/0x3c0 [ 794.027890][ C1] ? __fget_files+0x310/0x370 [ 794.032580][ C1] ? __fdget_pos+0x1fa/0x300 [ 794.037190][ C1] ? ksys_write+0x77/0x2b0 [ 794.041734][ C1] ksys_write+0x186/0x2b0 [ 794.046075][ C1] ? __ia32_sys_read+0x90/0x90 [ 794.050861][ C1] __x64_sys_write+0x7b/0x90 [ 794.055477][ C1] do_syscall_64+0x31/0x70 [ 794.059916][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 794.065817][ C1] RIP: 0033:0x7f9380d05049 [ 794.070252][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 794.089871][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 794.099259][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 794.107252][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 794.115333][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 794.123343][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 794.131347][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 794.139362][ C1] ---[ end trace 6a7df80a272a84c9 ]--- [ 794.145186][ C1] ------------[ cut here ]------------ [ 794.150663][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 794.156930][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 794.166568][ C1] Modules linked in: [ 794.170492][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 794.182483][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 794.192580][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 794.198146][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 794.218327][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 794.224531][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 794.232504][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 794.240480][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 794.248631][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 794.256699][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 794.264759][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 794.273692][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 794.280496][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 794.288482][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 794.296458][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 794.304448][ C1] Call Trace: [ 794.307759][ C1] [ 794.310717][ C1] aiptek_irq+0x19b7/0x25f0 [ 794.315248][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 794.321052][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 794.326175][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 794.331202][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 794.336575][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 794.341776][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 794.346623][ C1] dummy_timer+0x798/0x42a0 [ 794.351157][ C1] ? try_invoke_on_locked_down_task+0x290/0x290 [ 794.357403][ C1] ? __queue_work+0x974/0xda0 [ 794.362085][ C1] ? dummy_free_streams+0x360/0x360 [ 794.367395][ C1] ? __kasan_check_write+0x14/0x20 [ 794.372528][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 794.377641][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 794.383182][ C1] ? wg_expired_zero_key_material+0x11d/0x170 [ 794.389257][ C1] ? dummy_free_streams+0x360/0x360 [ 794.394479][ C1] call_timer_fn+0x35/0x280 [ 794.399010][ C1] ? dummy_free_streams+0x360/0x360 [ 794.404213][ C1] expire_timers+0x21f/0x3b0 [ 794.408801][ C1] __run_timers+0x548/0x680 [ 794.413298][ C1] ? enqueue_timer+0x470/0x470 [ 794.418093][ C1] run_timer_softirq+0x69/0xf0 [ 794.422852][ C1] __do_softirq+0x27e/0x598 [ 794.427349][ C1] asm_call_irq_on_stack+0xf/0x20 [ 794.432360][ C1] [ 794.435312][ C1] do_softirq_own_stack+0x60/0x80 [ 794.440327][ C1] __irq_exit_rcu+0x128/0x150 [ 794.445029][ C1] irq_exit_rcu+0x9/0x10 [ 794.449296][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 794.455882][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 794.461885][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 794.467166][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 794.486771][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 794.492836][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 794.500821][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 794.508809][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 794.516802][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 794.524870][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 794.532857][ C1] ? kernel_init_free_pages+0x87/0x100 [ 794.538309][ C1] get_page_from_freelist+0x6b5/0xa90 [ 794.543679][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 794.549086][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 794.554648][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 794.561152][ C1] pipe_write+0x580/0x1930 [ 794.565578][ C1] ? pipe_read+0x1030/0x1030 [ 794.570180][ C1] ? fsnotify_perm+0x67/0x4e0 [ 794.575017][ C1] ? io_schedule+0x120/0x120 [ 794.579603][ C1] ? security_file_permission+0xa8/0xc0 [ 794.585145][ C1] ? iov_iter_init+0x3f/0x120 [ 794.589825][ C1] vfs_write+0xc02/0xf20 [ 794.594099][ C1] ? kernel_write+0x3c0/0x3c0 [ 794.598872][ C1] ? __fget_files+0x310/0x370 [ 794.603567][ C1] ? __fdget_pos+0x1fa/0x300 [ 794.608219][ C1] ? ksys_write+0x77/0x2b0 [ 794.612673][ C1] ksys_write+0x186/0x2b0 [ 794.617011][ C1] ? __ia32_sys_read+0x90/0x90 [ 794.621795][ C1] __x64_sys_write+0x7b/0x90 [ 794.626410][ C1] do_syscall_64+0x31/0x70 [ 794.630841][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 794.636919][ C1] RIP: 0033:0x7f9380d05049 [ 794.641362][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 794.660975][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 794.669486][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 794.677544][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 794.685535][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 794.693507][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 794.701483][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 794.709559][ C1] ---[ end trace 6a7df80a272a84ca ]--- [ 794.715434][ C1] ------------[ cut here ]------------ [ 794.720903][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 794.727074][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 794.736849][ C1] Modules linked in: [ 794.740790][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 794.752707][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 794.763037][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 794.768796][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 794.788614][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 794.794741][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 794.802937][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 794.810938][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: fffff5200002c035 [ 794.819025][ C1] R10: fffff5200002c035 R11: 0000000000000000 R12: ffff88810db870c8 [ 794.827035][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 794.835129][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 794.844094][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 794.850797][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 794.858801][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 794.866842][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 794.874834][ C1] Call Trace: [ 794.878322][ C1] [ 794.881200][ C1] aiptek_irq+0x19b7/0x25f0 [ 794.885732][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 794.891591][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 794.896727][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 794.901771][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 794.907163][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 794.912408][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 794.917295][ C1] dummy_timer+0x798/0x42a0 [ 794.921814][ C1] ? enqueue_timer+0x1d1/0x470 [ 794.926686][ C1] ? __mod_timer+0x995/0xde0 [ 794.931383][ C1] ? mod_timer_pending+0x30/0x30 [ 794.936341][ C1] ? dummy_free_streams+0x360/0x360 [ 794.941570][ C1] ? __kasan_check_write+0x14/0x20 [ 794.946709][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 794.951842][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 794.957415][ C1] ? dummy_free_streams+0x360/0x360 [ 794.962640][ C1] call_timer_fn+0x35/0x280 [ 794.967255][ C1] ? dummy_free_streams+0x360/0x360 [ 794.972481][ C1] expire_timers+0x21f/0x3b0 [ 794.977091][ C1] __run_timers+0x548/0x680 [ 794.981643][ C1] ? enqueue_timer+0x470/0x470 [ 794.986438][ C1] run_timer_softirq+0x69/0xf0 [ 794.991314][ C1] __do_softirq+0x27e/0x598 [ 794.996126][ C1] asm_call_irq_on_stack+0xf/0x20 [ 795.001161][ C1] [ 795.004151][ C1] do_softirq_own_stack+0x60/0x80 [ 795.009199][ C1] __irq_exit_rcu+0x128/0x150 [ 795.014037][ C1] irq_exit_rcu+0x9/0x10 [ 795.018326][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 795.024161][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 795.030424][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 795.035730][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 795.055508][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 795.061641][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 795.070067][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 795.078408][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 795.086511][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 795.094513][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 795.102514][ C1] ? kernel_init_free_pages+0x87/0x100 [ 795.107996][ C1] get_page_from_freelist+0x6b5/0xa90 [ 795.113485][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 795.118885][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 795.124563][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 795.130764][ C1] pipe_write+0x580/0x1930 [ 795.135215][ C1] ? pipe_read+0x1030/0x1030 [ 795.139826][ C1] ? fsnotify_perm+0x67/0x4e0 [ 795.144537][ C1] ? io_schedule+0x120/0x120 [ 795.149146][ C1] ? security_file_permission+0xa8/0xc0 [ 795.154747][ C1] ? iov_iter_init+0x3f/0x120 [ 795.159466][ C1] vfs_write+0xc02/0xf20 [ 795.163740][ C1] ? kernel_write+0x3c0/0x3c0 [ 795.168458][ C1] ? __fget_files+0x310/0x370 [ 795.173193][ C1] ? __fdget_pos+0x1fa/0x300 [ 795.177822][ C1] ? ksys_write+0x77/0x2b0 [ 795.182367][ C1] ksys_write+0x186/0x2b0 [ 795.186716][ C1] ? __ia32_sys_read+0x90/0x90 [ 795.191520][ C1] __x64_sys_write+0x7b/0x90 [ 795.196135][ C1] do_syscall_64+0x31/0x70 [ 795.200930][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 795.206879][ C1] RIP: 0033:0x7f9380d05049 [ 795.211337][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 795.230965][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 795.239423][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 795.247410][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 795.255493][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 795.263584][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 795.271688][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 795.279670][ C1] ---[ end trace 6a7df80a272a84cb ]--- [ 795.285231][ C1] ------------[ cut here ]------------ [ 795.290729][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 795.296787][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 795.306526][ C1] Modules linked in: [ 795.310523][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 795.322226][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 795.332614][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 795.338180][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 795.358228][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 795.364344][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 795.372320][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 795.380311][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: fffff5200002c035 [ 795.388305][ C1] R10: fffff5200002c035 R11: 0000000000000000 R12: ffff88810db870c8 [ 795.396306][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 795.404368][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 795.413416][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 795.420398][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 795.428494][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 795.436496][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 795.444488][ C1] Call Trace: [ 795.447772][ C1] [ 795.450638][ C1] aiptek_irq+0x19b7/0x25f0 [ 795.455159][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 795.461003][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 795.466415][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 795.471797][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 795.477165][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 795.482544][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 795.487395][ C1] dummy_timer+0x798/0x42a0 [ 795.491994][ C1] ? enqueue_timer+0x1d1/0x470 [ 795.496809][ C1] ? __mod_timer+0x995/0xde0 [ 795.501445][ C1] ? mod_timer_pending+0x30/0x30 [ 795.506596][ C1] ? dummy_free_streams+0x360/0x360 [ 795.512079][ C1] ? __kasan_check_write+0x14/0x20 [ 795.517301][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 795.522415][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 795.527969][ C1] ? dummy_free_streams+0x360/0x360 [ 795.533272][ C1] call_timer_fn+0x35/0x280 [ 795.537788][ C1] ? dummy_free_streams+0x360/0x360 [ 795.542996][ C1] expire_timers+0x21f/0x3b0 [ 795.547706][ C1] __run_timers+0x548/0x680 [ 795.552310][ C1] ? enqueue_timer+0x470/0x470 [ 795.557098][ C1] run_timer_softirq+0x69/0xf0 [ 795.561870][ C1] __do_softirq+0x27e/0x598 [ 795.566411][ C1] asm_call_irq_on_stack+0xf/0x20 [ 795.571435][ C1] [ 795.574412][ C1] do_softirq_own_stack+0x60/0x80 [ 795.579452][ C1] __irq_exit_rcu+0x128/0x150 [ 795.584143][ C1] irq_exit_rcu+0x9/0x10 [ 795.588393][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 795.594128][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 795.600117][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 795.605413][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 795.625286][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 795.631463][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 795.639983][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 795.647986][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 795.656101][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 795.664365][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 795.672570][ C1] ? kernel_init_free_pages+0x87/0x100 [ 795.678175][ C1] get_page_from_freelist+0x6b5/0xa90 [ 795.683568][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 795.688947][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 795.694498][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 795.700591][ C1] pipe_write+0x580/0x1930 [ 795.705025][ C1] ? pipe_read+0x1030/0x1030 [ 795.709616][ C1] ? fsnotify_perm+0x67/0x4e0 [ 795.714321][ C1] ? io_schedule+0x120/0x120 [ 795.719004][ C1] ? security_file_permission+0xa8/0xc0 [ 795.724663][ C1] ? iov_iter_init+0x3f/0x120 [ 795.729659][ C1] vfs_write+0xc02/0xf20 [ 795.734062][ C1] ? kernel_write+0x3c0/0x3c0 [ 795.738925][ C1] ? __fget_files+0x310/0x370 [ 795.743695][ C1] ? __fdget_pos+0x1fa/0x300 [ 795.748294][ C1] ? ksys_write+0x77/0x2b0 [ 795.752714][ C1] ksys_write+0x186/0x2b0 [ 795.757170][ C1] ? __ia32_sys_read+0x90/0x90 [ 795.761941][ C1] __x64_sys_write+0x7b/0x90 [ 795.766664][ C1] do_syscall_64+0x31/0x70 [ 795.771494][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 795.777425][ C1] RIP: 0033:0x7f9380d05049 [ 795.782028][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 795.801913][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 795.810878][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 795.818881][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 795.827495][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 795.836179][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 795.844299][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 795.852317][ C1] ---[ end trace 6a7df80a272a84cc ]--- [ 795.857917][ C1] ------------[ cut here ]------------ [ 795.863387][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 795.869531][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 795.879256][ C1] Modules linked in: [ 795.883188][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 795.894905][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 795.905005][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 795.910592][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 795.930224][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 795.936321][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 795.944352][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 795.952587][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: fffff5200002c035 [ 795.960602][ C1] R10: fffff5200002c035 R11: 0000000000000000 R12: ffff88810db870c8 [ 795.968692][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 795.976695][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 795.986008][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 795.992887][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 796.000886][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 796.009057][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 796.017142][ C1] Call Trace: [ 796.020458][ C1] [ 796.023351][ C1] aiptek_irq+0x19b7/0x25f0 [ 796.027875][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 796.033843][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 796.039010][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 796.044057][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 796.049457][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 796.054698][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 796.059603][ C1] dummy_timer+0x798/0x42a0 [ 796.064129][ C1] ? enqueue_timer+0x1d1/0x470 [ 796.069083][ C1] ? __mod_timer+0x995/0xde0 [ 796.073696][ C1] ? mod_timer_pending+0x30/0x30 [ 796.078667][ C1] ? dummy_free_streams+0x360/0x360 [ 796.083901][ C1] ? __kasan_check_write+0x14/0x20 [ 796.089042][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 796.094480][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 796.100068][ C1] ? dummy_free_streams+0x360/0x360 [ 796.105321][ C1] call_timer_fn+0x35/0x280 [ 796.110048][ C1] ? dummy_free_streams+0x360/0x360 [ 796.115273][ C1] expire_timers+0x21f/0x3b0 [ 796.119885][ C1] __run_timers+0x548/0x680 [ 796.124414][ C1] ? enqueue_timer+0x470/0x470 [ 796.129214][ C1] run_timer_softirq+0x69/0xf0 [ 796.134142][ C1] __do_softirq+0x27e/0x598 [ 796.138796][ C1] asm_call_irq_on_stack+0xf/0x20 [ 796.143840][ C1] [ 796.146812][ C1] do_softirq_own_stack+0x60/0x80 [ 796.151881][ C1] __irq_exit_rcu+0x128/0x150 [ 796.156582][ C1] irq_exit_rcu+0x9/0x10 [ 796.160879][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 796.166551][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 796.172652][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 796.177958][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 796.197586][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 796.203680][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 796.211669][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 796.219655][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 796.227648][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 796.235647][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 796.243748][ C1] ? kernel_init_free_pages+0x87/0x100 [ 796.249237][ C1] get_page_from_freelist+0x6b5/0xa90 [ 796.254815][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 796.260408][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 796.265974][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 796.271981][ C1] pipe_write+0x580/0x1930 [ 796.276549][ C1] ? pipe_read+0x1030/0x1030 [ 796.281344][ C1] ? fsnotify_perm+0x67/0x4e0 [ 796.286139][ C1] ? io_schedule+0x120/0x120 [ 796.290748][ C1] ? security_file_permission+0xa8/0xc0 [ 796.296320][ C1] ? iov_iter_init+0x3f/0x120 [ 796.301021][ C1] vfs_write+0xc02/0xf20 [ 796.305288][ C1] ? kernel_write+0x3c0/0x3c0 [ 796.309993][ C1] ? __fget_files+0x310/0x370 [ 796.314793][ C1] ? __fdget_pos+0x1fa/0x300 [ 796.319400][ C1] ? ksys_write+0x77/0x2b0 [ 796.323843][ C1] ksys_write+0x186/0x2b0 [ 796.328207][ C1] ? __ia32_sys_read+0x90/0x90 [ 796.333023][ C1] __x64_sys_write+0x7b/0x90 [ 796.337678][ C1] do_syscall_64+0x31/0x70 [ 796.342119][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 796.348036][ C1] RIP: 0033:0x7f9380d05049 [ 796.352573][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 796.372209][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 796.380918][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 796.388915][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 796.396908][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 796.404901][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 796.412898][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 796.420894][ C1] ---[ end trace 6a7df80a272a84cd ]--- [ 796.426472][ C1] ------------[ cut here ]------------ [ 796.431951][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 796.438006][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 796.447741][ C1] Modules linked in: [ 796.451659][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 796.463362][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 796.473433][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 796.478977][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 796.498689][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 796.504785][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 796.512765][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 796.520743][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: fffff5200002c035 [ 796.528718][ C1] R10: fffff5200002c035 R11: 0000000000000000 R12: ffff88810db870c8 [ 796.536731][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 796.544718][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 796.553751][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 796.560335][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 796.568327][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 796.576420][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 796.584418][ C1] Call Trace: [ 796.587702][ C1] [ 796.590562][ C1] aiptek_irq+0x19b7/0x25f0 [ 796.595071][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 796.600885][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 796.606005][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 796.611039][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 796.616512][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 796.621714][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 796.626578][ C1] dummy_timer+0x798/0x42a0 [ 796.631097][ C1] ? enqueue_timer+0x1d1/0x470 [ 796.636066][ C1] ? __mod_timer+0x995/0xde0 [ 796.640775][ C1] ? mod_timer_pending+0x30/0x30 [ 796.645734][ C1] ? dummy_free_streams+0x360/0x360 [ 796.650939][ C1] ? __kasan_check_write+0x14/0x20 [ 796.656080][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 796.661200][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 796.666763][ C1] ? dummy_free_streams+0x360/0x360 [ 796.672007][ C1] call_timer_fn+0x35/0x280 [ 796.676524][ C1] ? dummy_free_streams+0x360/0x360 [ 796.681735][ C1] expire_timers+0x21f/0x3b0 [ 796.686344][ C1] __run_timers+0x548/0x680 [ 796.690881][ C1] ? enqueue_timer+0x470/0x470 [ 796.695658][ C1] run_timer_softirq+0x69/0xf0 [ 796.700440][ C1] __do_softirq+0x27e/0x598 [ 796.704956][ C1] asm_call_irq_on_stack+0xf/0x20 [ 796.710069][ C1] [ 796.713019][ C1] do_softirq_own_stack+0x60/0x80 [ 796.718067][ C1] __irq_exit_rcu+0x128/0x150 [ 796.722752][ C1] irq_exit_rcu+0x9/0x10 [ 796.728022][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 796.733668][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 796.739656][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 796.744954][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 796.764637][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 796.770712][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 796.778703][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 796.786934][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 796.794921][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 796.802897][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 796.810992][ C1] ? kernel_init_free_pages+0x87/0x100 [ 796.816453][ C1] get_page_from_freelist+0x6b5/0xa90 [ 796.821835][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 796.827221][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 796.832775][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 796.838865][ C1] pipe_write+0x580/0x1930 [ 796.843311][ C1] ? pipe_read+0x1030/0x1030 [ 796.847909][ C1] ? fsnotify_perm+0x67/0x4e0 [ 796.852946][ C1] ? io_schedule+0x120/0x120 [ 796.857565][ C1] ? security_file_permission+0xa8/0xc0 [ 796.863117][ C1] ? iov_iter_init+0x3f/0x120 [ 796.867829][ C1] vfs_write+0xc02/0xf20 [ 796.872081][ C1] ? kernel_write+0x3c0/0x3c0 [ 796.876764][ C1] ? __fget_files+0x310/0x370 [ 796.881672][ C1] ? __fdget_pos+0x1fa/0x300 [ 796.886264][ C1] ? ksys_write+0x77/0x2b0 [ 796.890713][ C1] ksys_write+0x186/0x2b0 [ 796.895223][ C1] ? __ia32_sys_read+0x90/0x90 [ 796.900001][ C1] __x64_sys_write+0x7b/0x90 [ 796.904614][ C1] do_syscall_64+0x31/0x70 [ 796.909051][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 796.914974][ C1] RIP: 0033:0x7f9380d05049 [ 796.919398][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 796.939009][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 796.947529][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 796.955680][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 796.963662][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 796.971741][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 796.979811][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 796.987878][ C1] ---[ end trace 6a7df80a272a84ce ]--- [ 796.993461][ C1] ------------[ cut here ]------------ [ 796.999156][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 797.005421][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 797.015145][ C1] Modules linked in: [ 797.019084][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 797.030888][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 797.041144][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 797.046719][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 797.066353][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 797.072450][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 797.080710][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 797.088723][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: fffff5200002c035 [ 797.096814][ C1] R10: fffff5200002c035 R11: 0000000000000000 R12: ffff88810db870c8 [ 797.104810][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 797.112821][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 797.121863][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 797.128711][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 797.136900][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 797.144894][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 797.152902][ C1] Call Trace: [ 797.156209][ C1] [ 797.159089][ C1] aiptek_irq+0x19b7/0x25f0 [ 797.163623][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 797.169450][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 797.174591][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 797.179731][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 797.185124][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 797.190534][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 797.195412][ C1] dummy_timer+0x798/0x42a0 [ 797.199948][ C1] ? enqueue_timer+0x1d1/0x470 [ 797.204750][ C1] ? __mod_timer+0x995/0xde0 [ 797.209395][ C1] ? mod_timer_pending+0x30/0x30 [ 797.214367][ C1] ? dummy_free_streams+0x360/0x360 [ 797.219592][ C1] ? __kasan_check_write+0x14/0x20 [ 797.224981][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 797.230254][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 797.235837][ C1] ? dummy_free_streams+0x360/0x360 [ 797.241094][ C1] call_timer_fn+0x35/0x280 [ 797.245628][ C1] ? dummy_free_streams+0x360/0x360 [ 797.250849][ C1] expire_timers+0x21f/0x3b0 [ 797.255565][ C1] __run_timers+0x548/0x680 [ 797.260108][ C1] ? enqueue_timer+0x470/0x470 [ 797.265018][ C1] run_timer_softirq+0x69/0xf0 [ 797.269902][ C1] __do_softirq+0x27e/0x598 [ 797.274609][ C1] asm_call_irq_on_stack+0xf/0x20 [ 797.279650][ C1] [ 797.282631][ C1] do_softirq_own_stack+0x60/0x80 [ 797.287685][ C1] __irq_exit_rcu+0x128/0x150 [ 797.292387][ C1] irq_exit_rcu+0x9/0x10 [ 797.296676][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 797.302350][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 797.308470][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 797.313778][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 797.333402][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 797.339505][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 797.347497][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 797.355488][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 797.363486][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 797.371496][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 797.379509][ C1] ? kernel_init_free_pages+0x87/0x100 [ 797.384993][ C1] get_page_from_freelist+0x6b5/0xa90 [ 797.390452][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 797.396009][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 797.401596][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 797.407620][ C1] pipe_write+0x580/0x1930 [ 797.412181][ C1] ? pipe_read+0x1030/0x1030 [ 797.416802][ C1] ? fsnotify_perm+0x67/0x4e0 [ 797.421504][ C1] ? io_schedule+0x120/0x120 [ 797.426241][ C1] ? security_file_permission+0xa8/0xc0 [ 797.431821][ C1] ? iov_iter_init+0x3f/0x120 [ 797.436526][ C1] vfs_write+0xc02/0xf20 [ 797.440790][ C1] ? kernel_write+0x3c0/0x3c0 [ 797.445489][ C1] ? __fget_files+0x310/0x370 [ 797.450188][ C1] ? __fdget_pos+0x1fa/0x300 [ 797.454796][ C1] ? ksys_write+0x77/0x2b0 [ 797.459225][ C1] ksys_write+0x186/0x2b0 [ 797.463585][ C1] ? __ia32_sys_read+0x90/0x90 [ 797.468380][ C1] __x64_sys_write+0x7b/0x90 [ 797.473008][ C1] do_syscall_64+0x31/0x70 [ 797.477600][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 797.483717][ C1] RIP: 0033:0x7f9380d05049 [ 797.488152][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 797.510119][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 797.518685][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 797.526679][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 797.534667][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 797.542659][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 797.550817][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 797.559148][ C1] ---[ end trace 6a7df80a272a84cf ]--- [ 797.564665][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 797.571375][ C1] rcu: 1-....: (1 GPs behind) idle=632/1/0x4000000000000000 softirq=105679/105680 fqs=266 last_accelerate: 9a98/c210 dyntick_enabled: 1 [ 797.585340][ C1] (t=10029 jiffies g=71633 q=2485767) [ 797.590883][ C1] NMI backtrace for cpu 1 [ 797.595374][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 797.607082][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 797.617135][ C1] Call Trace: [ 797.620434][ C1] [ 797.623346][ C1] dump_stack_lvl+0x1e2/0x24b [ 797.628025][ C1] ? nmi_cpu_backtrace+0x79/0x150 [ 797.633044][ C1] ? show_regs_print_info+0x18/0x18 [ 797.638243][ C1] ? __kasan_check_write+0x14/0x20 [ 797.643358][ C1] ? _raw_spin_lock_irqsave+0xf8/0x210 [ 797.648822][ C1] dump_stack+0x15/0x1d [ 797.652981][ C1] nmi_cpu_backtrace+0x140/0x150 [ 797.657956][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 797.664029][ C1] nmi_trigger_cpumask_backtrace+0x135/0x230 [ 797.670064][ C1] arch_trigger_cpumask_backtrace+0x10/0x20 [ 797.675963][ C1] rcu_dump_cpu_stacks+0x19a/0x290 [ 797.681080][ C1] print_cpu_stall+0x2bc/0x560 [ 797.685849][ C1] rcu_sched_clock_irq+0x7e5/0x1350 [ 797.691049][ C1] ? rcutree_dead_cpu+0x360/0x360 [ 797.696083][ C1] update_process_times+0x199/0x200 [ 797.701302][ C1] tick_sched_timer+0x2b6/0x510 [ 797.706169][ C1] ? tick_setup_sched_timer+0x430/0x430 [ 797.711718][ C1] __run_hrtimer+0x199/0x6a0 [ 797.716343][ C1] hrtimer_interrupt+0x639/0x1380 [ 797.721467][ C1] ? usb_hcd_map_urb_for_dma+0x10e0/0x10e0 [ 797.727288][ C1] ? kvm_sched_clock_read+0x19/0x40 [ 797.732493][ C1] ? __hrtimer_init+0x260/0x260 [ 797.737353][ C1] __sysvec_apic_timer_interrupt+0xf9/0x3c0 [ 797.743271][ C1] sysvec_apic_timer_interrupt+0xba/0xe0 [ 797.748982][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 797.755001][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x51/0x80 [ 797.761411][ C1] Code: 74 0c 48 c7 c7 50 3d 4c 86 e8 3b a8 0e fd 48 83 3d a3 fb b3 01 00 74 37 48 89 df e8 7d b8 ba fc 66 90 4c 89 75 e8 ff 75 e8 9d 01 00 00 00 e8 95 76 b2 fc 65 8b 05 ba 2b 6a 7b 85 c0 74 09 48 [ 797.781028][ C1] RSP: 0018:ffffc90000160a38 EFLAGS: 00000246 [ 797.787123][ C1] RAX: 0000000000000001 RBX: ffff88810ac24000 RCX: dffffc0000000000 [ 797.795121][ C1] RDX: 0000000000000102 RSI: 0000000000000246 RDI: ffff88810ac24000 [ 797.803096][ C1] RBP: ffffc90000160a50 R08: ffffffff815cbfda R09: 0000000000000003 [ 797.811245][ C1] R10: fffff5200002c13d R11: 0000000000000004 R12: ffff88810ac89350 [ 797.819237][ C1] R13: dffffc0000000000 R14: 0000000000000246 R15: ffff8881073fca00 [ 797.827230][ C1] ? __mod_timer+0x1aa/0xde0 [ 797.831831][ C1] dummy_timer+0x41ae/0x42a0 [ 797.836423][ C1] ? enqueue_timer+0x1d1/0x470 [ 797.841195][ C1] ? __mod_timer+0x995/0xde0 [ 797.845795][ C1] ? mod_timer_pending+0x30/0x30 [ 797.850744][ C1] ? dummy_free_streams+0x360/0x360 [ 797.855950][ C1] ? __kasan_check_write+0x14/0x20 [ 797.861082][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 797.866201][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 797.871834][ C1] ? dummy_free_streams+0x360/0x360 [ 797.877070][ C1] call_timer_fn+0x35/0x280 [ 797.881583][ C1] ? dummy_free_streams+0x360/0x360 [ 797.886777][ C1] expire_timers+0x21f/0x3b0 [ 797.891388][ C1] __run_timers+0x548/0x680 [ 797.895944][ C1] ? enqueue_timer+0x470/0x470 [ 797.900718][ C1] run_timer_softirq+0x69/0xf0 [ 797.905491][ C1] __do_softirq+0x27e/0x598 [ 797.910108][ C1] asm_call_irq_on_stack+0xf/0x20 [ 797.915228][ C1] [ 797.918183][ C1] do_softirq_own_stack+0x60/0x80 [ 797.923210][ C1] __irq_exit_rcu+0x128/0x150 [ 797.927900][ C1] irq_exit_rcu+0x9/0x10 [ 797.932160][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 797.937946][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 797.943947][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 797.949295][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 797.968921][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 797.975001][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 797.982996][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 797.990988][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 797.998982][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 798.007293][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 798.015423][ C1] ? kernel_init_free_pages+0x87/0x100 [ 798.020887][ C1] get_page_from_freelist+0x6b5/0xa90 [ 798.026252][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 798.031738][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 798.037291][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 798.043525][ C1] pipe_write+0x580/0x1930 [ 798.048102][ C1] ? pipe_read+0x1030/0x1030 [ 798.052695][ C1] ? fsnotify_perm+0x67/0x4e0 [ 798.057384][ C1] ? io_schedule+0x120/0x120 [ 798.062030][ C1] ? security_file_permission+0xa8/0xc0 [ 798.067851][ C1] ? iov_iter_init+0x3f/0x120 [ 798.072526][ C1] vfs_write+0xc02/0xf20 [ 798.076881][ C1] ? kernel_write+0x3c0/0x3c0 [ 798.081576][ C1] ? __fget_files+0x310/0x370 [ 798.086441][ C1] ? __fdget_pos+0x1fa/0x300 [ 798.091033][ C1] ? ksys_write+0x77/0x2b0 [ 798.095445][ C1] ksys_write+0x186/0x2b0 [ 798.099768][ C1] ? __ia32_sys_read+0x90/0x90 [ 798.104553][ C1] __x64_sys_write+0x7b/0x90 [ 798.109169][ C1] do_syscall_64+0x31/0x70 [ 798.113588][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 798.119498][ C1] RIP: 0033:0x7f9380d05049 [ 798.124003][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 798.143628][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 798.152040][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 798.160014][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 798.167998][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 798.176003][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 798.183991][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 798.192064][ C1] ------------[ cut here ]------------ [ 798.197533][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 798.203569][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 798.213206][ C1] Modules linked in: [ 798.217124][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 798.228844][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 798.238934][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 798.244510][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 798.264145][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 798.270250][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 798.278241][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 798.286234][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: fffff5200002c035 [ 798.294234][ C1] R10: fffff5200002c035 R11: 0000000000000000 R12: ffff88810db870c8 [ 798.302408][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 798.310498][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 798.319452][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 798.326066][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 798.334072][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 798.342062][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 798.350052][ C1] Call Trace: [ 798.353342][ C1] [ 798.356478][ C1] aiptek_irq+0x19b7/0x25f0 [ 798.360999][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 798.366902][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 798.372031][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 798.377169][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 798.382565][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 798.387778][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 798.392642][ C1] dummy_timer+0x798/0x42a0 [ 798.397164][ C1] ? enqueue_timer+0x1d1/0x470 [ 798.402036][ C1] ? __mod_timer+0x995/0xde0 [ 798.406640][ C1] ? mod_timer_pending+0x30/0x30 [ 798.411595][ C1] ? dummy_free_streams+0x360/0x360 [ 798.416806][ C1] ? __kasan_check_write+0x14/0x20 [ 798.421942][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 798.427070][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 798.432633][ C1] ? dummy_free_streams+0x360/0x360 [ 798.438026][ C1] call_timer_fn+0x35/0x280 [ 798.442558][ C1] ? dummy_free_streams+0x360/0x360 [ 798.448058][ C1] expire_timers+0x21f/0x3b0 [ 798.452672][ C1] __run_timers+0x548/0x680 [ 798.457192][ C1] ? enqueue_timer+0x470/0x470 [ 798.461979][ C1] run_timer_softirq+0x69/0xf0 [ 798.466778][ C1] __do_softirq+0x27e/0x598 [ 798.471305][ C1] asm_call_irq_on_stack+0xf/0x20 [ 798.476333][ C1] [ 798.479296][ C1] do_softirq_own_stack+0x60/0x80 [ 798.484339][ C1] __irq_exit_rcu+0x128/0x150 [ 798.489080][ C1] irq_exit_rcu+0x9/0x10 [ 798.493340][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 798.499261][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 798.505396][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 798.510702][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 798.530622][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 798.536711][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 798.544711][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 798.552792][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 798.560787][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 798.568784][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 798.576885][ C1] ? kernel_init_free_pages+0x87/0x100 [ 798.582374][ C1] get_page_from_freelist+0x6b5/0xa90 [ 798.587767][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 798.593151][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 798.598712][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 798.604706][ C1] pipe_write+0x580/0x1930 [ 798.609146][ C1] ? pipe_read+0x1030/0x1030 [ 798.613749][ C1] ? fsnotify_perm+0x67/0x4e0 [ 798.618456][ C1] ? io_schedule+0x120/0x120 [ 798.623075][ C1] ? security_file_permission+0xa8/0xc0 [ 798.628825][ C1] ? iov_iter_init+0x3f/0x120 [ 798.633524][ C1] vfs_write+0xc02/0xf20 [ 798.637794][ C1] ? kernel_write+0x3c0/0x3c0 [ 798.642492][ C1] ? __fget_files+0x310/0x370 [ 798.647189][ C1] ? __fdget_pos+0x1fa/0x300 [ 798.651787][ C1] ? ksys_write+0x77/0x2b0 [ 798.656229][ C1] ksys_write+0x186/0x2b0 [ 798.660591][ C1] ? __ia32_sys_read+0x90/0x90 [ 798.665380][ C1] __x64_sys_write+0x7b/0x90 [ 798.669993][ C1] do_syscall_64+0x31/0x70 [ 798.674436][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 798.680372][ C1] RIP: 0033:0x7f9380d05049 [ 798.684806][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 798.704430][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 798.712868][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 798.720863][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 798.728889][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 798.736970][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 798.744968][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 798.752964][ C1] ---[ end trace 6a7df80a272a84d0 ]--- [ 798.758551][ C1] ------------[ cut here ]------------ [ 798.764039][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 798.770174][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 798.779806][ C1] Modules linked in: [ 798.783738][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 798.795459][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 798.805552][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 798.811124][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 798.830760][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 798.836859][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 798.844845][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 798.852840][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee2a5d8 [ 798.860823][ C1] R10: ffffed103ee2a5d8 R11: 0000000000000000 R12: ffff88810db870c8 [ 798.868793][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 798.876764][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 798.885696][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 798.892285][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 798.900260][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 798.908237][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 798.916202][ C1] Call Trace: [ 798.919474][ C1] [ 798.922330][ C1] aiptek_irq+0x19b7/0x25f0 [ 798.926837][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 798.932734][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 798.937852][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 798.942898][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 798.948280][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 798.953476][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 798.958328][ C1] dummy_timer+0x798/0x42a0 [ 798.962859][ C1] ? enqueue_timer+0x1d1/0x470 [ 798.967641][ C1] ? __mod_timer+0x995/0xde0 [ 798.972228][ C1] ? mod_timer_pending+0x30/0x30 [ 798.977177][ C1] ? dummy_free_streams+0x360/0x360 [ 798.982377][ C1] ? __kasan_check_write+0x14/0x20 [ 798.987487][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 798.992624][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 798.998261][ C1] ? dummy_free_streams+0x360/0x360 [ 799.003459][ C1] call_timer_fn+0x35/0x280 [ 799.008025][ C1] ? dummy_free_streams+0x360/0x360 [ 799.013333][ C1] expire_timers+0x21f/0x3b0 [ 799.017927][ C1] __run_timers+0x548/0x680 [ 799.022428][ C1] ? enqueue_timer+0x470/0x470 [ 799.027217][ C1] run_timer_softirq+0x69/0xf0 [ 799.031981][ C1] __do_softirq+0x27e/0x598 [ 799.036510][ C1] asm_call_irq_on_stack+0xf/0x20 [ 799.041518][ C1] [ 799.044485][ C1] do_softirq_own_stack+0x60/0x80 [ 799.049504][ C1] __irq_exit_rcu+0x128/0x150 [ 799.054194][ C1] irq_exit_rcu+0x9/0x10 [ 799.058437][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 799.064154][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 799.070131][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 799.075414][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 799.095269][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 799.101522][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 799.109635][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 799.117613][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 799.125585][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 799.133553][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 799.141562][ C1] ? kernel_init_free_pages+0x87/0x100 [ 799.147027][ C1] get_page_from_freelist+0x6b5/0xa90 [ 799.152410][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 799.157802][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 799.163357][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 799.169347][ C1] pipe_write+0x580/0x1930 [ 799.173864][ C1] ? pipe_read+0x1030/0x1030 [ 799.178474][ C1] ? fsnotify_perm+0x67/0x4e0 [ 799.183150][ C1] ? io_schedule+0x120/0x120 [ 799.187754][ C1] ? security_file_permission+0xa8/0xc0 [ 799.193304][ C1] ? iov_iter_init+0x3f/0x120 [ 799.197983][ C1] vfs_write+0xc02/0xf20 [ 799.202222][ C1] ? kernel_write+0x3c0/0x3c0 [ 799.206899][ C1] ? __fget_files+0x310/0x370 [ 799.211566][ C1] ? __fdget_pos+0x1fa/0x300 [ 799.216150][ C1] ? ksys_write+0x77/0x2b0 [ 799.220567][ C1] ksys_write+0x186/0x2b0 [ 799.224902][ C1] ? __ia32_sys_read+0x90/0x90 [ 799.229669][ C1] __x64_sys_write+0x7b/0x90 [ 799.234277][ C1] do_syscall_64+0x31/0x70 [ 799.238705][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 799.244620][ C1] RIP: 0033:0x7f9380d05049 [ 799.249212][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 799.268830][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 799.277261][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 799.285283][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 799.293261][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 799.301240][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 799.309213][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 799.317187][ C1] ---[ end trace 6a7df80a272a84d1 ]--- [ 799.322767][ C1] ------------[ cut here ]------------ [ 799.328240][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 799.334296][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 799.343930][ C1] Modules linked in: [ 799.347854][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 799.359577][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 799.369672][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 799.375330][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 799.394957][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 799.401048][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 799.409043][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 799.417042][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 799.425041][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 799.433030][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 799.441021][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 799.449966][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 799.456658][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 799.464658][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 799.472649][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 799.480627][ C1] Call Trace: [ 799.483916][ C1] [ 799.486795][ C1] aiptek_irq+0x19b7/0x25f0 [ 799.491338][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 799.497161][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 799.502383][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 799.507439][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 799.512833][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 799.518048][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 799.522918][ C1] dummy_timer+0x798/0x42a0 [ 799.527441][ C1] ? enqueue_timer+0x1d1/0x470 [ 799.532230][ C1] ? __mod_timer+0x995/0xde0 [ 799.536870][ C1] ? mod_timer_pending+0x30/0x30 [ 799.541841][ C1] ? dummy_free_streams+0x360/0x360 [ 799.547070][ C1] ? __kasan_check_write+0x14/0x20 [ 799.552325][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 799.557458][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 799.563032][ C1] ? dummy_free_streams+0x360/0x360 [ 799.568257][ C1] call_timer_fn+0x35/0x280 [ 799.572785][ C1] ? dummy_free_streams+0x360/0x360 [ 799.578004][ C1] expire_timers+0x21f/0x3b0 [ 799.582617][ C1] __run_timers+0x548/0x680 [ 799.587143][ C1] ? enqueue_timer+0x470/0x470 [ 799.591935][ C1] run_timer_softirq+0x69/0xf0 [ 799.596727][ C1] __do_softirq+0x27e/0x598 [ 799.601246][ C1] asm_call_irq_on_stack+0xf/0x20 [ 799.606274][ C1] [ 799.609242][ C1] do_softirq_own_stack+0x60/0x80 [ 799.614295][ C1] __irq_exit_rcu+0x128/0x150 [ 799.618999][ C1] irq_exit_rcu+0x9/0x10 [ 799.623280][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 799.628964][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 799.634970][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 799.640452][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 799.660080][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 799.666166][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 799.674164][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 799.682163][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 799.690163][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 799.698157][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 799.706182][ C1] ? kernel_init_free_pages+0x87/0x100 [ 799.711673][ C1] get_page_from_freelist+0x6b5/0xa90 [ 799.717081][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 799.722487][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 799.728061][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 799.734074][ C1] pipe_write+0x580/0x1930 [ 799.738512][ C1] ? pipe_read+0x1030/0x1030 [ 799.743124][ C1] ? fsnotify_perm+0x67/0x4e0 [ 799.747845][ C1] ? io_schedule+0x120/0x120 [ 799.752636][ C1] ? security_file_permission+0xa8/0xc0 [ 799.758216][ C1] ? iov_iter_init+0x3f/0x120 [ 799.763483][ C1] vfs_write+0xc02/0xf20 [ 799.767755][ C1] ? kernel_write+0x3c0/0x3c0 [ 799.772451][ C1] ? __fget_files+0x310/0x370 [ 799.777234][ C1] ? __fdget_pos+0x1fa/0x300 [ 799.781838][ C1] ? ksys_write+0x77/0x2b0 [ 799.786276][ C1] ksys_write+0x186/0x2b0 [ 799.790629][ C1] ? __ia32_sys_read+0x90/0x90 [ 799.795407][ C1] __x64_sys_write+0x7b/0x90 [ 799.800105][ C1] do_syscall_64+0x31/0x70 [ 799.804526][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 799.810414][ C1] RIP: 0033:0x7f9380d05049 [ 799.814828][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 799.834434][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 799.842854][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 799.850820][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 799.859231][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 799.867204][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 799.875191][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 799.883168][ C1] ---[ end trace 6a7df80a272a84d2 ]--- [ 799.888795][ C1] ------------[ cut here ]------------ [ 799.894276][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 799.900327][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 799.910183][ C1] Modules linked in: [ 799.914131][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 799.925863][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 799.935966][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 799.941534][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 799.961169][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 799.967269][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 799.975296][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 799.983306][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 799.991297][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 799.999273][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 800.007251][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 800.016262][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 800.022848][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 800.030816][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 800.038807][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 800.046984][ C1] Call Trace: [ 800.050264][ C1] [ 800.053364][ C1] aiptek_irq+0x19b7/0x25f0 [ 800.057890][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 800.063703][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 800.068820][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 800.073839][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 800.079224][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 800.084420][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 800.089294][ C1] dummy_timer+0x798/0x42a0 [ 800.093797][ C1] ? enqueue_timer+0x1d1/0x470 [ 800.098569][ C1] ? __mod_timer+0x995/0xde0 [ 800.103195][ C1] ? mod_timer_pending+0x30/0x30 [ 800.108134][ C1] ? dummy_free_streams+0x360/0x360 [ 800.113332][ C1] ? __kasan_check_write+0x14/0x20 [ 800.118448][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 800.123562][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 800.129116][ C1] ? dummy_free_streams+0x360/0x360 [ 800.134321][ C1] call_timer_fn+0x35/0x280 [ 800.138847][ C1] ? dummy_free_streams+0x360/0x360 [ 800.144070][ C1] expire_timers+0x21f/0x3b0 [ 800.148676][ C1] __run_timers+0x548/0x680 [ 800.153218][ C1] ? enqueue_timer+0x470/0x470 [ 800.157990][ C1] run_timer_softirq+0x69/0xf0 [ 800.162758][ C1] __do_softirq+0x27e/0x598 [ 800.167297][ C1] asm_call_irq_on_stack+0xf/0x20 [ 800.172305][ C1] [ 800.175247][ C1] do_softirq_own_stack+0x60/0x80 [ 800.180352][ C1] __irq_exit_rcu+0x128/0x150 [ 800.185030][ C1] irq_exit_rcu+0x9/0x10 [ 800.189302][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 800.195037][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 800.201024][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 800.206304][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 800.226002][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 800.232078][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 800.240044][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 800.248012][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 800.255987][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 800.264047][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 800.272046][ C1] ? kernel_init_free_pages+0x87/0x100 [ 800.277509][ C1] get_page_from_freelist+0x6b5/0xa90 [ 800.282891][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 800.288535][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 800.294095][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 800.300084][ C1] pipe_write+0x580/0x1930 [ 800.304512][ C1] ? pipe_read+0x1030/0x1030 [ 800.309113][ C1] ? fsnotify_perm+0x67/0x4e0 [ 800.313787][ C1] ? io_schedule+0x120/0x120 [ 800.318381][ C1] ? security_file_permission+0xa8/0xc0 [ 800.323927][ C1] ? iov_iter_init+0x3f/0x120 [ 800.328596][ C1] vfs_write+0xc02/0xf20 [ 800.332843][ C1] ? kernel_write+0x3c0/0x3c0 [ 800.337518][ C1] ? __fget_files+0x310/0x370 [ 800.342191][ C1] ? __fdget_pos+0x1fa/0x300 [ 800.346772][ C1] ? ksys_write+0x77/0x2b0 [ 800.351185][ C1] ksys_write+0x186/0x2b0 [ 800.355508][ C1] ? __ia32_sys_read+0x90/0x90 [ 800.360269][ C1] __x64_sys_write+0x7b/0x90 [ 800.364858][ C1] do_syscall_64+0x31/0x70 [ 800.369281][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 800.375358][ C1] RIP: 0033:0x7f9380d05049 [ 800.379773][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 800.399391][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 800.407929][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 800.416518][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 800.424499][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 800.432645][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 800.440616][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 800.448588][ C1] ---[ end trace 6a7df80a272a84d3 ]--- [ 800.454184][ C1] ------------[ cut here ]------------ [ 800.459663][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 800.465800][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 800.475524][ C1] Modules linked in: [ 800.479456][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 800.491180][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 800.501275][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 800.506841][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 800.526560][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 800.532651][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 800.540649][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 800.548641][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 800.556641][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 800.564989][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 800.572992][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 800.581975][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 800.588698][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 800.596696][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 800.604696][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 800.612682][ C1] Call Trace: [ 800.615978][ C1] [ 800.618852][ C1] aiptek_irq+0x19b7/0x25f0 [ 800.623373][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 800.629202][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 800.634599][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 800.639664][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 800.645061][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 800.650280][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 800.655159][ C1] dummy_timer+0x798/0x42a0 [ 800.659688][ C1] ? enqueue_timer+0x1d1/0x470 [ 800.664603][ C1] ? __mod_timer+0x995/0xde0 [ 800.669211][ C1] ? mod_timer_pending+0x30/0x30 [ 800.674170][ C1] ? dummy_free_streams+0x360/0x360 [ 800.679469][ C1] ? __kasan_check_write+0x14/0x20 [ 800.684606][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 800.689754][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 800.695432][ C1] ? dummy_free_streams+0x360/0x360 [ 800.700650][ C1] call_timer_fn+0x35/0x280 [ 800.705171][ C1] ? dummy_free_streams+0x360/0x360 [ 800.710396][ C1] expire_timers+0x21f/0x3b0 [ 800.715004][ C1] __run_timers+0x548/0x680 [ 800.719519][ C1] ? enqueue_timer+0x470/0x470 [ 800.724293][ C1] run_timer_softirq+0x69/0xf0 [ 800.729082][ C1] __do_softirq+0x27e/0x598 [ 800.733606][ C1] asm_call_irq_on_stack+0xf/0x20 [ 800.738635][ C1] [ 800.741598][ C1] do_softirq_own_stack+0x60/0x80 [ 800.746645][ C1] __irq_exit_rcu+0x128/0x150 [ 800.751341][ C1] irq_exit_rcu+0x9/0x10 [ 800.755612][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 800.761621][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 800.767806][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 800.773135][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 800.792850][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 800.798937][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 800.806935][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 800.814926][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 800.822924][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 800.830926][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 800.839059][ C1] ? kernel_init_free_pages+0x87/0x100 [ 800.844549][ C1] get_page_from_freelist+0x6b5/0xa90 [ 800.849950][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 800.855343][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 800.861262][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 800.867270][ C1] pipe_write+0x580/0x1930 [ 800.871732][ C1] ? pipe_read+0x1030/0x1030 [ 800.876347][ C1] ? fsnotify_perm+0x67/0x4e0 [ 800.881048][ C1] ? io_schedule+0x120/0x120 [ 800.885660][ C1] ? security_file_permission+0xa8/0xc0 [ 800.891233][ C1] ? iov_iter_init+0x3f/0x120 [ 800.895929][ C1] vfs_write+0xc02/0xf20 [ 800.900185][ C1] ? kernel_write+0x3c0/0x3c0 [ 800.904875][ C1] ? __fget_files+0x310/0x370 [ 800.909574][ C1] ? __fdget_pos+0x1fa/0x300 [ 800.914185][ C1] ? ksys_write+0x77/0x2b0 [ 800.918616][ C1] ksys_write+0x186/0x2b0 [ 800.922973][ C1] ? __ia32_sys_read+0x90/0x90 [ 800.927767][ C1] __x64_sys_write+0x7b/0x90 [ 800.932382][ C1] do_syscall_64+0x31/0x70 [ 800.936815][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 800.942780][ C1] RIP: 0033:0x7f9380d05049 [ 800.947225][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 800.966859][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 800.975283][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 800.983254][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 800.991223][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 800.999215][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 801.007203][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 801.015352][ C1] ---[ end trace 6a7df80a272a84d4 ]--- [ 801.021058][ C1] ------------[ cut here ]------------ [ 801.026567][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 801.032612][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 801.042242][ C1] Modules linked in: [ 801.046171][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 801.057889][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 801.067978][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 801.073551][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 801.093294][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 801.099387][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 801.107353][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 801.115316][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 801.123279][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 801.131242][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 801.139210][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 801.148135][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 801.154709][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 801.162677][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 801.170644][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 801.178633][ C1] Call Trace: [ 801.181920][ C1] [ 801.184778][ C1] aiptek_irq+0x19b7/0x25f0 [ 801.189379][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 801.195177][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 801.200309][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 801.205344][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 801.210728][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 801.215938][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 801.220959][ C1] dummy_timer+0x798/0x42a0 [ 801.225476][ C1] ? enqueue_timer+0x1d1/0x470 [ 801.230231][ C1] ? __mod_timer+0x995/0xde0 [ 801.234818][ C1] ? mod_timer_pending+0x30/0x30 [ 801.239754][ C1] ? dummy_free_streams+0x360/0x360 [ 801.244949][ C1] ? __kasan_check_write+0x14/0x20 [ 801.250075][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 801.255185][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 801.260943][ C1] ? dummy_free_streams+0x360/0x360 [ 801.266147][ C1] call_timer_fn+0x35/0x280 [ 801.270638][ C1] ? dummy_free_streams+0x360/0x360 [ 801.275843][ C1] expire_timers+0x21f/0x3b0 [ 801.280429][ C1] __run_timers+0x548/0x680 [ 801.284929][ C1] ? enqueue_timer+0x470/0x470 [ 801.289692][ C1] run_timer_softirq+0x69/0xf0 [ 801.294457][ C1] __do_softirq+0x27e/0x598 [ 801.298970][ C1] asm_call_irq_on_stack+0xf/0x20 [ 801.303987][ C1] [ 801.306918][ C1] do_softirq_own_stack+0x60/0x80 [ 801.311938][ C1] __irq_exit_rcu+0x128/0x150 [ 801.316611][ C1] irq_exit_rcu+0x9/0x10 [ 801.320847][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 801.326488][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 801.332559][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 801.337864][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 801.357555][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 801.363619][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 801.371613][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 801.379580][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 801.387637][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 801.395605][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 801.403606][ C1] ? kernel_init_free_pages+0x87/0x100 [ 801.409062][ C1] get_page_from_freelist+0x6b5/0xa90 [ 801.414430][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 801.419811][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 801.425359][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 801.431331][ C1] pipe_write+0x580/0x1930 [ 801.435746][ C1] ? pipe_read+0x1030/0x1030 [ 801.440334][ C1] ? fsnotify_perm+0x67/0x4e0 [ 801.445016][ C1] ? io_schedule+0x120/0x120 [ 801.449607][ C1] ? security_file_permission+0xa8/0xc0 [ 801.455193][ C1] ? iov_iter_init+0x3f/0x120 [ 801.459866][ C1] vfs_write+0xc02/0xf20 [ 801.464124][ C1] ? kernel_write+0x3c0/0x3c0 [ 801.468805][ C1] ? __fget_files+0x310/0x370 [ 801.473486][ C1] ? __fdget_pos+0x1fa/0x300 [ 801.478073][ C1] ? ksys_write+0x77/0x2b0 [ 801.482489][ C1] ksys_write+0x186/0x2b0 [ 801.486823][ C1] ? __ia32_sys_read+0x90/0x90 [ 801.491585][ C1] __x64_sys_write+0x7b/0x90 [ 801.496177][ C1] do_syscall_64+0x31/0x70 [ 801.500585][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 801.506474][ C1] RIP: 0033:0x7f9380d05049 [ 801.510880][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 801.530567][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 801.539000][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 801.547091][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 801.555080][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 801.563047][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 801.571025][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 801.579013][ C1] ---[ end trace 6a7df80a272a84d5 ]--- [ 801.584594][ C1] ------------[ cut here ]------------ [ 801.590062][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 801.597023][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 801.606748][ C1] Modules linked in: [ 801.610674][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 801.622407][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 801.632767][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 801.638336][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 801.658170][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 801.664288][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 801.672320][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 801.680310][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 801.688354][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 801.696352][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 801.704448][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 801.713443][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 801.720083][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 801.728075][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 801.736067][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 801.744077][ C1] Call Trace: [ 801.747364][ C1] [ 801.750238][ C1] aiptek_irq+0x19b7/0x25f0 [ 801.754749][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 801.760574][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 801.765715][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 801.770799][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 801.776194][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 801.781425][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 801.786296][ C1] dummy_timer+0x798/0x42a0 [ 801.790818][ C1] ? enqueue_timer+0x1d1/0x470 [ 801.795770][ C1] ? __mod_timer+0x995/0xde0 [ 801.800390][ C1] ? mod_timer_pending+0x30/0x30 [ 801.805347][ C1] ? dummy_free_streams+0x360/0x360 [ 801.810657][ C1] ? __kasan_check_write+0x14/0x20 [ 801.815783][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 801.820917][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 801.826492][ C1] ? dummy_free_streams+0x360/0x360 [ 801.831800][ C1] call_timer_fn+0x35/0x280 [ 801.836348][ C1] ? dummy_free_streams+0x360/0x360 [ 801.841573][ C1] expire_timers+0x21f/0x3b0 [ 801.846183][ C1] __run_timers+0x548/0x680 [ 801.850710][ C1] ? enqueue_timer+0x470/0x470 [ 801.855501][ C1] run_timer_softirq+0x69/0xf0 [ 801.860295][ C1] __do_softirq+0x27e/0x598 [ 801.864820][ C1] asm_call_irq_on_stack+0xf/0x20 [ 801.869852][ C1] [ 801.872806][ C1] do_softirq_own_stack+0x60/0x80 [ 801.877846][ C1] __irq_exit_rcu+0x128/0x150 [ 801.882540][ C1] irq_exit_rcu+0x9/0x10 [ 801.886809][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 801.892489][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 801.898490][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 801.903821][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 801.923438][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 801.929613][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 801.937637][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 801.945625][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 801.953615][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 801.961602][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 801.969610][ C1] ? kernel_init_free_pages+0x87/0x100 [ 801.975108][ C1] get_page_from_freelist+0x6b5/0xa90 [ 801.980504][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 801.985898][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 801.991470][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 801.997470][ C1] pipe_write+0x580/0x1930 [ 802.001903][ C1] ? pipe_read+0x1030/0x1030 [ 802.006507][ C1] ? fsnotify_perm+0x67/0x4e0 [ 802.011205][ C1] ? io_schedule+0x120/0x120 [ 802.015807][ C1] ? security_file_permission+0xa8/0xc0 [ 802.021372][ C1] ? iov_iter_init+0x3f/0x120 [ 802.026091][ C1] vfs_write+0xc02/0xf20 [ 802.030351][ C1] ? kernel_write+0x3c0/0x3c0 [ 802.035040][ C1] ? __fget_files+0x310/0x370 [ 802.039733][ C1] ? __fdget_pos+0x1fa/0x300 [ 802.044341][ C1] ? ksys_write+0x77/0x2b0 [ 802.048766][ C1] ksys_write+0x186/0x2b0 [ 802.053111][ C1] ? __ia32_sys_read+0x90/0x90 [ 802.057886][ C1] __x64_sys_write+0x7b/0x90 [ 802.062879][ C1] do_syscall_64+0x31/0x70 [ 802.067315][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 802.073226][ C1] RIP: 0033:0x7f9380d05049 [ 802.077666][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 802.097303][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 802.105742][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 802.113746][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 802.121996][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 802.131398][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 802.139390][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 802.147407][ C1] ---[ end trace 6a7df80a272a84d6 ]--- [ 802.152996][ C1] ------------[ cut here ]------------ [ 802.158467][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 802.164501][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 802.174115][ C1] Modules linked in: [ 802.178019][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 802.189746][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 802.199815][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 802.205360][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 802.225067][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 802.231132][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 802.239104][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 802.247100][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 802.255067][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 802.263034][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 802.271005][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 802.279929][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 802.286519][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 802.294485][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 802.302446][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 802.310419][ C1] Call Trace: [ 802.313701][ C1] [ 802.316559][ C1] aiptek_irq+0x19b7/0x25f0 [ 802.321061][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 802.326878][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 802.332004][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 802.337046][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 802.342421][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 802.347629][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 802.352498][ C1] dummy_timer+0x798/0x42a0 [ 802.357018][ C1] ? enqueue_timer+0x1d1/0x470 [ 802.361781][ C1] ? __mod_timer+0x995/0xde0 [ 802.366370][ C1] ? mod_timer_pending+0x30/0x30 [ 802.371310][ C1] ? dummy_free_streams+0x360/0x360 [ 802.376505][ C1] ? __kasan_check_write+0x14/0x20 [ 802.381614][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 802.386731][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 802.392268][ C1] ? dummy_free_streams+0x360/0x360 [ 802.397486][ C1] call_timer_fn+0x35/0x280 [ 802.402012][ C1] ? dummy_free_streams+0x360/0x360 [ 802.407213][ C1] expire_timers+0x21f/0x3b0 [ 802.411819][ C1] __run_timers+0x548/0x680 [ 802.416329][ C1] ? enqueue_timer+0x470/0x470 [ 802.421103][ C1] run_timer_softirq+0x69/0xf0 [ 802.425865][ C1] __do_softirq+0x27e/0x598 [ 802.430382][ C1] asm_call_irq_on_stack+0xf/0x20 [ 802.435397][ C1] [ 802.438426][ C1] do_softirq_own_stack+0x60/0x80 [ 802.443461][ C1] __irq_exit_rcu+0x128/0x150 [ 802.448139][ C1] irq_exit_rcu+0x9/0x10 [ 802.452373][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 802.458013][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 802.463995][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 802.469302][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 802.489024][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 802.495107][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 802.503069][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 802.511057][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 802.519032][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 802.527018][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 802.535093][ C1] ? kernel_init_free_pages+0x87/0x100 [ 802.540544][ C1] get_page_from_freelist+0x6b5/0xa90 [ 802.545911][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 802.551284][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 802.556828][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 802.562830][ C1] pipe_write+0x580/0x1930 [ 802.567293][ C1] ? pipe_read+0x1030/0x1030 [ 802.571904][ C1] ? fsnotify_perm+0x67/0x4e0 [ 802.576581][ C1] ? io_schedule+0x120/0x120 [ 802.581172][ C1] ? security_file_permission+0xa8/0xc0 [ 802.586716][ C1] ? iov_iter_init+0x3f/0x120 [ 802.591386][ C1] vfs_write+0xc02/0xf20 [ 802.595656][ C1] ? kernel_write+0x3c0/0x3c0 [ 802.600362][ C1] ? __fget_files+0x310/0x370 [ 802.605035][ C1] ? __fdget_pos+0x1fa/0x300 [ 802.609620][ C1] ? ksys_write+0x77/0x2b0 [ 802.614034][ C1] ksys_write+0x186/0x2b0 [ 802.618360][ C1] ? __ia32_sys_read+0x90/0x90 [ 802.623122][ C1] __x64_sys_write+0x7b/0x90 [ 802.627724][ C1] do_syscall_64+0x31/0x70 [ 802.632140][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 802.638035][ C1] RIP: 0033:0x7f9380d05049 [ 802.642648][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 802.662263][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 802.670687][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 802.678679][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 802.686646][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 802.694618][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 802.702610][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 802.710583][ C1] ---[ end trace 6a7df80a272a84d7 ]--- [ 802.716318][ C1] ------------[ cut here ]------------ [ 802.719942][T26149] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { [ 802.721768][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 802.721788][T26149] 1-... [ 802.729888][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 802.748212][ C1] Modules linked in: [ 802.749507][T26149] } 10093 jiffies s: 55137 root: 0x2/. [ 802.752139][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 802.757702][T26149] rcu: blocking rcu_node structures: [ 802.769413][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 802.769437][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 802.769448][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 802.769453][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 802.769465][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 802.769481][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 802.789512][T26149] [ 802.790455][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: 0000000000000003 [ 802.839508][T26149] Task dump for CPU 1: [ 802.842403][ C1] R10: fffff5200002c05d R11: 0000000000000004 R12: ffff88810db870c8 [ 802.846458][T26149] task:syz-executor.1 state:R [ 802.854426][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 802.854435][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 802.854441][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 802.854447][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 802.854455][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 802.854460][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 802.854464][ C1] Call Trace: [ 802.854470][ C1] [ 802.854497][ C1] aiptek_irq+0x19b7/0x25f0 [ 802.869504][T26149] running task [ 802.876315][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 802.909501][T26149] stack: 0 pid:26466 ppid: 389 flags:0x0000400c [ 802.910077][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 802.912902][T26149] Call Trace: [ 802.917401][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 802.921743][T26149] __alloc_pages_nodemask+0x3c8/0x820 [ 802.927080][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 802.949518][T26149] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 802.952618][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 802.957989][T26149] ? copy_user_enhanced_fast_string+0xe/0x40 [ 802.963510][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 802.963527][ C1] dummy_timer+0x798/0x42a0 [ 802.963541][ C1] ? enqueue_timer+0x1d1/0x470 [ 802.963550][ C1] ? __mod_timer+0x995/0xde0 [ 802.963559][ C1] ? mod_timer_pending+0x30/0x30 [ 802.963579][ C1] ? dummy_free_streams+0x360/0x360 [ 802.989522][T26149] pipe_write+0x580/0x1930 [ 802.993457][ C1] ? __kasan_check_write+0x14/0x20 [ 802.998378][T26149] ? pipe_read+0x1030/0x1030 [ 803.003570][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 803.003577][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 803.003588][ C1] ? dummy_free_streams+0x360/0x360 [ 803.003601][ C1] call_timer_fn+0x35/0x280 [ 803.003610][ C1] ? dummy_free_streams+0x360/0x360 [ 803.003618][ C1] expire_timers+0x21f/0x3b0 [ 803.003627][ C1] __run_timers+0x548/0x680 [ 803.003637][ C1] ? enqueue_timer+0x470/0x470 [ 803.003654][ C1] run_timer_softirq+0x69/0xf0 [ 803.019519][T26149] ? fsnotify_perm+0x67/0x4e0 [ 803.023216][ C1] __do_softirq+0x27e/0x598 [ 803.028782][T26149] ? io_schedule+0x120/0x120 [ 803.034057][ C1] asm_call_irq_on_stack+0xf/0x20 [ 803.034062][ C1] [ 803.034076][ C1] do_softirq_own_stack+0x60/0x80 [ 803.034084][ C1] __irq_exit_rcu+0x128/0x150 [ 803.034092][ C1] irq_exit_rcu+0x9/0x10 [ 803.034114][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 803.049525][T26149] ? security_file_permission+0xa8/0xc0 [ 803.052989][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 803.057756][T26149] ? iov_iter_init+0x3f/0x120 [ 803.062492][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 803.062503][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 803.062509][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 803.062520][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 803.062526][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 803.062541][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 803.089532][T26149] vfs_write+0xc02/0xf20 [ 803.093952][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 803.098277][T26149] ? kernel_write+0x3c0/0x3c0 [ 803.103911][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 803.103930][ C1] ? kernel_init_free_pages+0x87/0x100 [ 803.103937][ C1] get_page_from_freelist+0x6b5/0xa90 [ 803.103947][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 803.103957][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 803.103979][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 803.129548][T26149] ? __fget_files+0x310/0x370 [ 803.145433][ C1] pipe_write+0x580/0x1930 [ 803.145447][ C1] ? pipe_read+0x1030/0x1030 [ 803.145456][ C1] ? fsnotify_perm+0x67/0x4e0 [ 803.145468][ C1] ? io_schedule+0x120/0x120 [ 803.145477][ C1] ? security_file_permission+0xa8/0xc0 [ 803.145488][ C1] ? iov_iter_init+0x3f/0x120 [ 803.145512][ C1] vfs_write+0xc02/0xf20 [ 803.169489][T26149] ? __fdget_pos+0x1fa/0x300 [ 803.175499][ C1] ? kernel_write+0x3c0/0x3c0 [ 803.175512][ C1] ? __fget_files+0x310/0x370 [ 803.175531][ C1] ? __fdget_pos+0x1fa/0x300 [ 803.190144][T26149] ? ksys_write+0x77/0x2b0 [ 803.192412][ C1] ? ksys_write+0x77/0x2b0 [ 803.192433][ C1] ksys_write+0x186/0x2b0 [ 803.210829][T26149] ksys_write+0x186/0x2b0 [ 803.211241][ C1] ? __ia32_sys_read+0x90/0x90 [ 803.223999][T26149] ? __ia32_sys_read+0x90/0x90 [ 803.228161][ C1] __x64_sys_write+0x7b/0x90 [ 803.228177][ C1] do_syscall_64+0x31/0x70 [ 803.228189][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 803.228211][ C1] RIP: 0033:0x7f9380d05049 [ 803.240477][T26149] __x64_sys_write+0x7b/0x90 [ 803.241861][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 803.252902][T26149] do_syscall_64+0x31/0x70 [ 803.256652][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 803.256682][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 803.271817][T26149] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 803.274947][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 803.274954][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 803.274960][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 803.274978][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 803.289955][T26149] RIP: 0033:0x7f9380d05049 [ 803.293056][ C1] ---[ end trace 6a7df80a272a84d8 ]--- [ 803.293174][ C1] ------------[ cut here ]------------ [ 803.299917][T26149] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 [ 803.301738][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 803.312926][T26149] ORIG_RAX: 0000000000000001 [ 803.316038][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 803.333001][T26149] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 803.335214][ C1] Modules linked in: [ 803.374728][T26149] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 803.375741][ C1] [ 803.375756][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 803.375772][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 803.391977][T26149] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 803.397616][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 803.397634][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 803.415996][T26149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 803.417986][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 803.418001][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 803.418020][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 803.433827][T26149] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 803.435168][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 803.578723][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 803.586712][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 803.594700][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 803.603679][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 803.610279][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 803.618296][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 803.626314][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 803.634329][ C1] Call Trace: [ 803.637620][ C1] [ 803.640504][ C1] aiptek_irq+0x19b7/0x25f0 [ 803.645031][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 803.650849][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 803.656007][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 803.661143][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 803.666551][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 803.671762][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 803.676635][ C1] dummy_timer+0x798/0x42a0 [ 803.681324][ C1] ? enqueue_timer+0x1d1/0x470 [ 803.686110][ C1] ? __mod_timer+0x995/0xde0 [ 803.690697][ C1] ? mod_timer_pending+0x30/0x30 [ 803.695647][ C1] ? dummy_free_streams+0x360/0x360 [ 803.700854][ C1] ? __kasan_check_write+0x14/0x20 [ 803.705976][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 803.711091][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 803.716667][ C1] ? dummy_free_streams+0x360/0x360 [ 803.721864][ C1] call_timer_fn+0x35/0x280 [ 803.726367][ C1] ? dummy_free_streams+0x360/0x360 [ 803.731569][ C1] expire_timers+0x21f/0x3b0 [ 803.736229][ C1] __run_timers+0x548/0x680 [ 803.740729][ C1] ? enqueue_timer+0x470/0x470 [ 803.745493][ C1] run_timer_softirq+0x69/0xf0 [ 803.750255][ C1] __do_softirq+0x27e/0x598 [ 803.754863][ C1] asm_call_irq_on_stack+0xf/0x20 [ 803.759888][ C1] [ 803.762833][ C1] do_softirq_own_stack+0x60/0x80 [ 803.767857][ C1] __irq_exit_rcu+0x128/0x150 [ 803.772537][ C1] irq_exit_rcu+0x9/0x10 [ 803.776796][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 803.782439][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 803.788417][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 803.793691][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 803.813297][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 803.819361][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 803.827341][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 803.835311][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 803.843282][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 803.851248][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 803.859440][ C1] ? kernel_init_free_pages+0x87/0x100 [ 803.864916][ C1] get_page_from_freelist+0x6b5/0xa90 [ 803.870284][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 803.875668][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 803.881222][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 803.887480][ C1] pipe_write+0x580/0x1930 [ 803.891899][ C1] ? pipe_read+0x1030/0x1030 [ 803.896488][ C1] ? fsnotify_perm+0x67/0x4e0 [ 803.901179][ C1] ? io_schedule+0x120/0x120 [ 803.905776][ C1] ? security_file_permission+0xa8/0xc0 [ 803.911312][ C1] ? iov_iter_init+0x3f/0x120 [ 803.916006][ C1] vfs_write+0xc02/0xf20 [ 803.920249][ C1] ? kernel_write+0x3c0/0x3c0 [ 803.924945][ C1] ? __fget_files+0x310/0x370 [ 803.929643][ C1] ? __fdget_pos+0x1fa/0x300 [ 803.934247][ C1] ? ksys_write+0x77/0x2b0 [ 803.938661][ C1] ksys_write+0x186/0x2b0 [ 803.943003][ C1] ? __ia32_sys_read+0x90/0x90 [ 803.947790][ C1] __x64_sys_write+0x7b/0x90 [ 803.952399][ C1] do_syscall_64+0x31/0x70 [ 803.956810][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 803.962708][ C1] RIP: 0033:0x7f9380d05049 [ 803.967136][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 803.987268][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 803.995767][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 804.003734][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 804.011719][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 804.019723][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 804.027820][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 804.035911][ C1] ---[ end trace 6a7df80a272a84d9 ]--- [ 804.041466][ C1] ------------[ cut here ]------------ [ 804.046964][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 804.053017][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 804.062650][ C1] Modules linked in: [ 804.066602][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 804.078326][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 804.088429][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 804.094097][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 804.113813][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 804.119904][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 804.127925][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 804.136585][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 804.144686][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 804.152691][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 804.160718][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 804.169720][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 804.176325][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 804.184557][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 804.192638][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 804.200713][ C1] Call Trace: [ 804.204006][ C1] [ 804.206929][ C1] aiptek_irq+0x19b7/0x25f0 [ 804.211454][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 804.217314][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 804.222475][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 804.227709][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 804.233110][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 804.238342][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 804.243226][ C1] dummy_timer+0x798/0x42a0 [ 804.247748][ C1] ? enqueue_timer+0x1d1/0x470 [ 804.252553][ C1] ? __mod_timer+0x995/0xde0 [ 804.257179][ C1] ? mod_timer_pending+0x30/0x30 [ 804.262236][ C1] ? dummy_free_streams+0x360/0x360 [ 804.267455][ C1] ? __kasan_check_write+0x14/0x20 [ 804.272765][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 804.277983][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 804.284097][ C1] ? dummy_free_streams+0x360/0x360 [ 804.289328][ C1] call_timer_fn+0x35/0x280 [ 804.293854][ C1] ? dummy_free_streams+0x360/0x360 [ 804.299167][ C1] expire_timers+0x21f/0x3b0 [ 804.303795][ C1] __run_timers+0x548/0x680 [ 804.308351][ C1] ? enqueue_timer+0x470/0x470 [ 804.313156][ C1] run_timer_softirq+0x69/0xf0 [ 804.317973][ C1] __do_softirq+0x27e/0x598 [ 804.322525][ C1] asm_call_irq_on_stack+0xf/0x20 [ 804.327558][ C1] [ 804.330519][ C1] do_softirq_own_stack+0x60/0x80 [ 804.335680][ C1] __irq_exit_rcu+0x128/0x150 [ 804.340377][ C1] irq_exit_rcu+0x9/0x10 [ 804.344657][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 804.350322][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 804.356329][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 804.362019][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 804.381929][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 804.388020][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 804.396053][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 804.404084][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 804.412081][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 804.421124][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 804.429144][ C1] ? kernel_init_free_pages+0x87/0x100 [ 804.434705][ C1] get_page_from_freelist+0x6b5/0xa90 [ 804.440259][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 804.445754][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 804.451303][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 804.457492][ C1] pipe_write+0x580/0x1930 [ 804.462013][ C1] ? pipe_read+0x1030/0x1030 [ 804.466610][ C1] ? fsnotify_perm+0x67/0x4e0 [ 804.471760][ C1] ? io_schedule+0x120/0x120 [ 804.476387][ C1] ? security_file_permission+0xa8/0xc0 [ 804.482045][ C1] ? iov_iter_init+0x3f/0x120 [ 804.486760][ C1] vfs_write+0xc02/0xf20 [ 804.491011][ C1] ? kernel_write+0x3c0/0x3c0 [ 804.495709][ C1] ? __fget_files+0x310/0x370 [ 804.500516][ C1] ? __fdget_pos+0x1fa/0x300 [ 804.505109][ C1] ? ksys_write+0x77/0x2b0 [ 804.509520][ C1] ksys_write+0x186/0x2b0 [ 804.513878][ C1] ? __ia32_sys_read+0x90/0x90 [ 804.518664][ C1] __x64_sys_write+0x7b/0x90 [ 804.523292][ C1] do_syscall_64+0x31/0x70 [ 804.527744][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 804.533640][ C1] RIP: 0033:0x7f9380d05049 [ 804.538077][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 804.557696][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 804.566113][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 804.574109][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 804.582097][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 804.590066][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 804.598040][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 804.606042][ C1] ---[ end trace 6a7df80a272a84da ]--- [ 804.611664][ C1] ------------[ cut here ]------------ [ 804.617185][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 804.623233][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 804.632869][ C1] Modules linked in: [ 804.636796][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 804.648598][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 804.658689][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 804.664870][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 804.684542][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 804.690668][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 804.698658][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 804.706646][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 804.714634][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 804.722707][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 804.730697][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 804.739649][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 804.746338][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 804.754697][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 804.763344][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 804.771328][ C1] Call Trace: [ 804.774627][ C1] [ 804.777494][ C1] aiptek_irq+0x19b7/0x25f0 [ 804.782022][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 804.787850][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 804.792978][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 804.798080][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 804.803496][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 804.808710][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 804.813560][ C1] dummy_timer+0x798/0x42a0 [ 804.818412][ C1] ? enqueue_timer+0x1d1/0x470 [ 804.823175][ C1] ? __mod_timer+0x995/0xde0 [ 804.827872][ C1] ? mod_timer_pending+0x30/0x30 [ 804.832838][ C1] ? dummy_free_streams+0x360/0x360 [ 804.838245][ C1] ? __kasan_check_write+0x14/0x20 [ 804.843470][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 804.848581][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 804.854145][ C1] ? dummy_free_streams+0x360/0x360 [ 804.860051][ C1] call_timer_fn+0x35/0x280 [ 804.864586][ C1] ? dummy_free_streams+0x360/0x360 [ 804.869794][ C1] expire_timers+0x21f/0x3b0 [ 804.874394][ C1] __run_timers+0x548/0x680 [ 804.878909][ C1] ? enqueue_timer+0x470/0x470 [ 804.883690][ C1] run_timer_softirq+0x69/0xf0 [ 804.888453][ C1] __do_softirq+0x27e/0x598 [ 804.892946][ C1] asm_call_irq_on_stack+0xf/0x20 [ 804.897955][ C1] [ 804.900895][ C1] do_softirq_own_stack+0x60/0x80 [ 804.905917][ C1] __irq_exit_rcu+0x128/0x150 [ 804.910584][ C1] irq_exit_rcu+0x9/0x10 [ 804.914832][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 804.920462][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 804.926524][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 804.931806][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 804.951425][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 804.957490][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 804.966125][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 804.974111][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 804.982082][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 804.990238][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 804.998226][ C1] ? kernel_init_free_pages+0x87/0x100 [ 805.003686][ C1] get_page_from_freelist+0x6b5/0xa90 [ 805.009323][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 805.014689][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 805.020232][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 805.026227][ C1] pipe_write+0x580/0x1930 [ 805.030649][ C1] ? pipe_read+0x1030/0x1030 [ 805.035253][ C1] ? fsnotify_perm+0x67/0x4e0 [ 805.040026][ C1] ? io_schedule+0x120/0x120 [ 805.044680][ C1] ? security_file_permission+0xa8/0xc0 [ 805.050238][ C1] ? iov_iter_init+0x3f/0x120 [ 805.054910][ C1] vfs_write+0xc02/0xf20 [ 805.059233][ C1] ? kernel_write+0x3c0/0x3c0 [ 805.063993][ C1] ? __fget_files+0x310/0x370 [ 805.068678][ C1] ? __fdget_pos+0x1fa/0x300 [ 805.073262][ C1] ? ksys_write+0x77/0x2b0 [ 805.077688][ C1] ksys_write+0x186/0x2b0 [ 805.082009][ C1] ? __ia32_sys_read+0x90/0x90 [ 805.086774][ C1] __x64_sys_write+0x7b/0x90 [ 805.091388][ C1] do_syscall_64+0x31/0x70 [ 805.096234][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 805.102210][ C1] RIP: 0033:0x7f9380d05049 [ 805.106633][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 805.126501][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 805.135008][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 805.142970][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 805.150936][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 805.158911][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 805.166882][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 805.174852][ C1] ---[ end trace 6a7df80a272a84db ]--- [ 805.180397][ C1] ------------[ cut here ]------------ [ 805.185893][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 805.191934][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 805.201564][ C1] Modules linked in: [ 805.205492][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 805.217263][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 805.227358][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 805.233005][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 805.252831][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 805.258913][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 805.266900][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 805.274893][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 805.282931][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 805.291005][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 805.299008][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 805.307999][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 805.314686][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 805.322682][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 805.330867][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 805.338946][ C1] Call Trace: [ 805.342239][ C1] [ 805.345114][ C1] aiptek_irq+0x19b7/0x25f0 [ 805.349643][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 805.355459][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 805.360583][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 805.365622][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 805.371013][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 805.376241][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 805.381134][ C1] dummy_timer+0x798/0x42a0 [ 805.385699][ C1] ? enqueue_timer+0x1d1/0x470 [ 805.390508][ C1] ? __mod_timer+0x995/0xde0 [ 805.395121][ C1] ? mod_timer_pending+0x30/0x30 [ 805.400184][ C1] ? dummy_free_streams+0x360/0x360 [ 805.405677][ C1] ? __kasan_check_write+0x14/0x20 [ 805.410861][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 805.416014][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 805.421601][ C1] ? dummy_free_streams+0x360/0x360 [ 805.426846][ C1] call_timer_fn+0x35/0x280 [ 805.431498][ C1] ? dummy_free_streams+0x360/0x360 [ 805.436726][ C1] expire_timers+0x21f/0x3b0 [ 805.441450][ C1] __run_timers+0x548/0x680 [ 805.445998][ C1] ? enqueue_timer+0x470/0x470 [ 805.450827][ C1] run_timer_softirq+0x69/0xf0 [ 805.456014][ C1] __do_softirq+0x27e/0x598 [ 805.460558][ C1] asm_call_irq_on_stack+0xf/0x20 [ 805.466026][ C1] [ 805.469857][ C1] do_softirq_own_stack+0x60/0x80 [ 805.475084][ C1] __irq_exit_rcu+0x128/0x150 [ 805.479783][ C1] irq_exit_rcu+0x9/0x10 [ 805.484088][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 805.489827][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 805.495825][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 805.501150][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 805.520810][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 805.526926][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 805.534913][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 805.542934][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 805.551098][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 805.559082][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 805.567083][ C1] ? kernel_init_free_pages+0x87/0x100 [ 805.572559][ C1] get_page_from_freelist+0x6b5/0xa90 [ 805.577962][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 805.583340][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 805.588901][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 805.594882][ C1] pipe_write+0x580/0x1930 [ 805.599415][ C1] ? pipe_read+0x1030/0x1030 [ 805.604011][ C1] ? fsnotify_perm+0x67/0x4e0 [ 805.608704][ C1] ? io_schedule+0x120/0x120 [ 805.613490][ C1] ? security_file_permission+0xa8/0xc0 [ 805.619067][ C1] ? iov_iter_init+0x3f/0x120 [ 805.623768][ C1] vfs_write+0xc02/0xf20 [ 805.628021][ C1] ? kernel_write+0x3c0/0x3c0 [ 805.632989][ C1] ? __fget_files+0x310/0x370 [ 805.637675][ C1] ? __fdget_pos+0x1fa/0x300 [ 805.642292][ C1] ? ksys_write+0x77/0x2b0 [ 805.646712][ C1] ksys_write+0x186/0x2b0 [ 805.651047][ C1] ? __ia32_sys_read+0x90/0x90 [ 805.655994][ C1] __x64_sys_write+0x7b/0x90 [ 805.660611][ C1] do_syscall_64+0x31/0x70 [ 805.665028][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 805.671002][ C1] RIP: 0033:0x7f9380d05049 [ 805.675783][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 805.696357][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 805.704769][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 805.712752][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 805.720727][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 805.728706][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 805.736692][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 805.744675][ C1] ---[ end trace 6a7df80a272a84dc ]--- [ 805.750264][ C1] ------------[ cut here ]------------ [ 805.755739][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 805.761871][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 805.771511][ C1] Modules linked in: [ 805.775459][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 805.787186][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 805.797282][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 805.802931][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 805.822984][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 805.829079][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 805.837080][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 805.845163][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 805.853169][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 805.861186][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 805.869185][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 805.878141][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 805.884830][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 805.892877][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 805.900912][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 805.908944][ C1] Call Trace: [ 805.912247][ C1] [ 805.915127][ C1] aiptek_irq+0x19b7/0x25f0 [ 805.919649][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 805.925489][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 805.930619][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 805.935681][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 805.941077][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 805.946367][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 805.951225][ C1] dummy_timer+0x798/0x42a0 [ 805.955994][ C1] ? enqueue_timer+0x1d1/0x470 [ 805.960768][ C1] ? __mod_timer+0x995/0xde0 [ 805.965386][ C1] ? mod_timer_pending+0x30/0x30 [ 805.970359][ C1] ? dummy_free_streams+0x360/0x360 [ 805.975574][ C1] ? __kasan_check_write+0x14/0x20 [ 805.980685][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 805.985803][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 805.991462][ C1] ? dummy_free_streams+0x360/0x360 [ 805.996768][ C1] call_timer_fn+0x35/0x280 [ 806.001321][ C1] ? dummy_free_streams+0x360/0x360 [ 806.006532][ C1] expire_timers+0x21f/0x3b0 [ 806.011140][ C1] __run_timers+0x548/0x680 [ 806.015650][ C1] ? enqueue_timer+0x470/0x470 [ 806.020409][ C1] run_timer_softirq+0x69/0xf0 [ 806.025441][ C1] __do_softirq+0x27e/0x598 [ 806.030222][ C1] asm_call_irq_on_stack+0xf/0x20 [ 806.035248][ C1] [ 806.038192][ C1] do_softirq_own_stack+0x60/0x80 [ 806.043227][ C1] __irq_exit_rcu+0x128/0x150 [ 806.047906][ C1] irq_exit_rcu+0x9/0x10 [ 806.052195][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 806.057881][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 806.063904][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 806.069197][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 806.088888][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 806.095049][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 806.103016][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 806.111017][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 806.119000][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 806.127082][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 806.135103][ C1] ? kernel_init_free_pages+0x87/0x100 [ 806.140585][ C1] get_page_from_freelist+0x6b5/0xa90 [ 806.145969][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 806.151364][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 806.156916][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 806.162899][ C1] pipe_write+0x580/0x1930 [ 806.167314][ C1] ? pipe_read+0x1030/0x1030 [ 806.171913][ C1] ? fsnotify_perm+0x67/0x4e0 [ 806.176596][ C1] ? io_schedule+0x120/0x120 [ 806.181197][ C1] ? security_file_permission+0xa8/0xc0 [ 806.186863][ C1] ? iov_iter_init+0x3f/0x120 [ 806.191559][ C1] vfs_write+0xc02/0xf20 [ 806.195807][ C1] ? kernel_write+0x3c0/0x3c0 [ 806.200492][ C1] ? __fget_files+0x310/0x370 [ 806.205194][ C1] ? __fdget_pos+0x1fa/0x300 [ 806.209784][ C1] ? ksys_write+0x77/0x2b0 [ 806.214209][ C1] ksys_write+0x186/0x2b0 [ 806.218558][ C1] ? __ia32_sys_read+0x90/0x90 [ 806.223318][ C1] __x64_sys_write+0x7b/0x90 [ 806.227912][ C1] do_syscall_64+0x31/0x70 [ 806.232336][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 806.238240][ C1] RIP: 0033:0x7f9380d05049 [ 806.242663][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 806.262769][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 806.271377][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 806.279360][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 806.287333][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 806.295304][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 806.303273][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 806.311269][ C1] ---[ end trace 6a7df80a272a84dd ]--- [ 806.316871][ C1] ------------[ cut here ]------------ [ 806.322349][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 806.328409][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 806.338079][ C1] Modules linked in: [ 806.342105][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 806.353836][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 806.363947][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 806.369515][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 806.389142][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 806.395235][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 806.403223][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 806.411213][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 806.419206][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 806.427197][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 806.435205][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 806.444250][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 806.450896][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 806.460637][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 806.468634][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 806.477406][ C1] Call Trace: [ 806.480794][ C1] [ 806.483667][ C1] aiptek_irq+0x19b7/0x25f0 [ 806.488184][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 806.494005][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 806.499241][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 806.504342][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 806.509829][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 806.515050][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 806.519963][ C1] dummy_timer+0x798/0x42a0 [ 806.524506][ C1] ? enqueue_timer+0x1d1/0x470 [ 806.529337][ C1] ? __mod_timer+0x995/0xde0 [ 806.533955][ C1] ? mod_timer_pending+0x30/0x30 [ 806.538910][ C1] ? dummy_free_streams+0x360/0x360 [ 806.544128][ C1] ? __kasan_check_write+0x14/0x20 [ 806.549274][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 806.554409][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 806.559985][ C1] ? dummy_free_streams+0x360/0x360 [ 806.565227][ C1] call_timer_fn+0x35/0x280 [ 806.569841][ C1] ? dummy_free_streams+0x360/0x360 [ 806.575232][ C1] expire_timers+0x21f/0x3b0 [ 806.579868][ C1] __run_timers+0x548/0x680 [ 806.584410][ C1] ? enqueue_timer+0x470/0x470 [ 806.589258][ C1] run_timer_softirq+0x69/0xf0 [ 806.594050][ C1] __do_softirq+0x27e/0x598 [ 806.598571][ C1] asm_call_irq_on_stack+0xf/0x20 [ 806.603625][ C1] [ 806.606587][ C1] do_softirq_own_stack+0x60/0x80 [ 806.611715][ C1] __irq_exit_rcu+0x128/0x150 [ 806.616411][ C1] irq_exit_rcu+0x9/0x10 [ 806.620956][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 806.626604][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 806.632628][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 806.638288][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 806.657922][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 806.664040][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 806.672036][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 806.680036][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 806.688285][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 806.696276][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 806.704283][ C1] ? kernel_init_free_pages+0x87/0x100 [ 806.709771][ C1] get_page_from_freelist+0x6b5/0xa90 [ 806.715198][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 806.720595][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 806.726246][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 806.732269][ C1] pipe_write+0x580/0x1930 [ 806.736707][ C1] ? pipe_read+0x1030/0x1030 [ 806.741312][ C1] ? fsnotify_perm+0x67/0x4e0 [ 806.746015][ C1] ? io_schedule+0x120/0x120 [ 806.750614][ C1] ? security_file_permission+0xa8/0xc0 [ 806.756176][ C1] ? iov_iter_init+0x3f/0x120 [ 806.760864][ C1] vfs_write+0xc02/0xf20 [ 806.765122][ C1] ? kernel_write+0x3c0/0x3c0 [ 806.769815][ C1] ? __fget_files+0x310/0x370 [ 806.774531][ C1] ? __fdget_pos+0x1fa/0x300 [ 806.779160][ C1] ? ksys_write+0x77/0x2b0 [ 806.783595][ C1] ksys_write+0x186/0x2b0 [ 806.787951][ C1] ? __ia32_sys_read+0x90/0x90 [ 806.792725][ C1] __x64_sys_write+0x7b/0x90 [ 806.797340][ C1] do_syscall_64+0x31/0x70 [ 806.801790][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 806.807697][ C1] RIP: 0033:0x7f9380d05049 [ 806.812129][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 806.831838][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 806.840277][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 806.848526][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 806.856742][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 806.864732][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 806.872722][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 806.880715][ C1] ---[ end trace 6a7df80a272a84de ]--- [ 806.886316][ C1] ------------[ cut here ]------------ [ 806.891809][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 806.897815][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 806.907660][ C1] Modules linked in: [ 806.911569][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 806.923267][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 806.933344][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 806.938889][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 806.958498][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 806.964654][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 806.972705][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 806.980678][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: fffff5200002c035 [ 806.988669][ C1] R10: fffff5200002c035 R11: 0000000000000000 R12: ffff88810db870c8 [ 806.996661][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 807.004633][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 807.013734][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 807.020320][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 807.028307][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 807.036290][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 807.044266][ C1] Call Trace: [ 807.047537][ C1] [ 807.050397][ C1] aiptek_irq+0x19b7/0x25f0 [ 807.054903][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 807.060708][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 807.065877][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 807.070923][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 807.076311][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 807.081506][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 807.086364][ C1] dummy_timer+0x798/0x42a0 [ 807.090951][ C1] ? enqueue_timer+0x1d1/0x470 [ 807.095724][ C1] ? __mod_timer+0x995/0xde0 [ 807.100320][ C1] ? mod_timer_pending+0x30/0x30 [ 807.105270][ C1] ? dummy_free_streams+0x360/0x360 [ 807.110497][ C1] ? __kasan_check_write+0x14/0x20 [ 807.115625][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 807.120750][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 807.126393][ C1] ? dummy_free_streams+0x360/0x360 [ 807.131699][ C1] call_timer_fn+0x35/0x280 [ 807.136206][ C1] ? dummy_free_streams+0x360/0x360 [ 807.141398][ C1] expire_timers+0x21f/0x3b0 [ 807.146009][ C1] __run_timers+0x548/0x680 [ 807.150512][ C1] ? enqueue_timer+0x470/0x470 [ 807.155284][ C1] run_timer_softirq+0x69/0xf0 [ 807.160049][ C1] __do_softirq+0x27e/0x598 [ 807.164558][ C1] asm_call_irq_on_stack+0xf/0x20 [ 807.169572][ C1] [ 807.172520][ C1] do_softirq_own_stack+0x60/0x80 [ 807.177566][ C1] __irq_exit_rcu+0x128/0x150 [ 807.182253][ C1] irq_exit_rcu+0x9/0x10 [ 807.186514][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 807.192176][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 807.198169][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 807.203447][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 807.223053][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 807.229135][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 807.237112][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 807.245084][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 807.253081][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 807.261074][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 807.269060][ C1] ? kernel_init_free_pages+0x87/0x100 [ 807.274516][ C1] get_page_from_freelist+0x6b5/0xa90 [ 807.279985][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 807.285386][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 807.291213][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 807.297198][ C1] pipe_write+0x580/0x1930 [ 807.301621][ C1] ? pipe_read+0x1030/0x1030 [ 807.306220][ C1] ? fsnotify_perm+0x67/0x4e0 [ 807.310913][ C1] ? io_schedule+0x120/0x120 [ 807.315507][ C1] ? security_file_permission+0xa8/0xc0 [ 807.321049][ C1] ? iov_iter_init+0x3f/0x120 [ 807.325730][ C1] vfs_write+0xc02/0xf20 [ 807.329980][ C1] ? kernel_write+0x3c0/0x3c0 [ 807.334679][ C1] ? __fget_files+0x310/0x370 [ 807.339444][ C1] ? __fdget_pos+0x1fa/0x300 [ 807.344044][ C1] ? ksys_write+0x77/0x2b0 [ 807.348468][ C1] ksys_write+0x186/0x2b0 [ 807.352884][ C1] ? __ia32_sys_read+0x90/0x90 [ 807.357671][ C1] __x64_sys_write+0x7b/0x90 [ 807.362290][ C1] do_syscall_64+0x31/0x70 [ 807.366860][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 807.372764][ C1] RIP: 0033:0x7f9380d05049 [ 807.377176][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 807.396884][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 807.405386][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 807.413450][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 807.421443][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 807.429416][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 807.437401][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 807.445381][ C1] ---[ end trace 6a7df80a272a84df ]--- [ 807.451016][ C1] ------------[ cut here ]------------ [ 807.456571][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 807.462718][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 807.472347][ C1] Modules linked in: [ 807.476624][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 807.488346][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 807.498446][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 807.504015][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 807.523642][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 807.529742][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 807.537733][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 807.545723][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 807.553769][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 807.561802][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 807.569841][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 807.578791][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 807.585417][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 807.593495][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 807.601489][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 807.609530][ C1] Call Trace: [ 807.612821][ C1] [ 807.615725][ C1] aiptek_irq+0x19b7/0x25f0 [ 807.620248][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 807.626082][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 807.631212][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 807.636310][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 807.641880][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 807.647096][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 807.651977][ C1] dummy_timer+0x798/0x42a0 [ 807.656497][ C1] ? enqueue_timer+0x1d1/0x470 [ 807.661288][ C1] ? __mod_timer+0x995/0xde0 [ 807.665922][ C1] ? mod_timer_pending+0x30/0x30 [ 807.670893][ C1] ? dummy_free_streams+0x360/0x360 [ 807.676215][ C1] ? __kasan_check_write+0x14/0x20 [ 807.681459][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 807.686602][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 807.692169][ C1] ? dummy_free_streams+0x360/0x360 [ 807.697387][ C1] call_timer_fn+0x35/0x280 [ 807.701910][ C1] ? dummy_free_streams+0x360/0x360 [ 807.707136][ C1] expire_timers+0x21f/0x3b0 [ 807.711750][ C1] __run_timers+0x548/0x680 [ 807.716280][ C1] ? enqueue_timer+0x470/0x470 [ 807.721097][ C1] run_timer_softirq+0x69/0xf0 [ 807.725885][ C1] __do_softirq+0x27e/0x598 [ 807.730415][ C1] asm_call_irq_on_stack+0xf/0x20 [ 807.735451][ C1] [ 807.738432][ C1] do_softirq_own_stack+0x60/0x80 [ 807.743472][ C1] __irq_exit_rcu+0x128/0x150 [ 807.748170][ C1] irq_exit_rcu+0x9/0x10 [ 807.752427][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 807.758079][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 807.764110][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 807.769410][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 807.789041][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 807.795133][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 807.803126][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 807.811110][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 807.819096][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 807.827097][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 807.835095][ C1] ? kernel_init_free_pages+0x87/0x100 [ 807.840575][ C1] get_page_from_freelist+0x6b5/0xa90 [ 807.845965][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 807.851358][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 807.856927][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 807.862957][ C1] pipe_write+0x580/0x1930 [ 807.867402][ C1] ? pipe_read+0x1030/0x1030 [ 807.872015][ C1] ? fsnotify_perm+0x67/0x4e0 [ 807.876719][ C1] ? io_schedule+0x120/0x120 [ 807.881328][ C1] ? security_file_permission+0xa8/0xc0 [ 807.886908][ C1] ? iov_iter_init+0x3f/0x120 [ 807.891610][ C1] vfs_write+0xc02/0xf20 [ 807.896081][ C1] ? kernel_write+0x3c0/0x3c0 [ 807.900781][ C1] ? __fget_files+0x310/0x370 [ 807.905477][ C1] ? __fdget_pos+0x1fa/0x300 [ 807.910118][ C1] ? ksys_write+0x77/0x2b0 [ 807.914550][ C1] ksys_write+0x186/0x2b0 [ 807.918897][ C1] ? __ia32_sys_read+0x90/0x90 [ 807.923688][ C1] __x64_sys_write+0x7b/0x90 [ 807.928336][ C1] do_syscall_64+0x31/0x70 [ 807.932782][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 807.938697][ C1] RIP: 0033:0x7f9380d05049 [ 807.943126][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 807.962770][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 807.971320][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 807.979406][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 807.987399][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 807.995402][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 808.003403][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 808.011406][ C1] ---[ end trace 6a7df80a272a84e0 ]--- [ 808.017006][ C1] ------------[ cut here ]------------ [ 808.022482][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 808.028538][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 808.038163][ C1] Modules linked in: [ 808.042064][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 808.053854][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 808.063929][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 808.069472][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 808.089104][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 808.095179][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 808.103158][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 808.111149][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee2a5d8 [ 808.119138][ C1] R10: ffffed103ee2a5d8 R11: 0000000000000000 R12: ffff88810db870c8 [ 808.127138][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 808.135111][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 808.144059][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 808.150643][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 808.158651][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 808.166623][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 808.174602][ C1] Call Trace: [ 808.177888][ C1] [ 808.180750][ C1] aiptek_irq+0x19b7/0x25f0 [ 808.185257][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 808.191070][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 808.196185][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 808.201205][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 808.206636][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 808.211835][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 808.216698][ C1] dummy_timer+0x798/0x42a0 [ 808.221259][ C1] ? enqueue_timer+0x1d1/0x470 [ 808.226040][ C1] ? __mod_timer+0x995/0xde0 [ 808.230810][ C1] ? mod_timer_pending+0x30/0x30 [ 808.235753][ C1] ? dummy_free_streams+0x360/0x360 [ 808.240951][ C1] ? __kasan_check_write+0x14/0x20 [ 808.246077][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 808.251188][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 808.256740][ C1] ? dummy_free_streams+0x360/0x360 [ 808.261968][ C1] call_timer_fn+0x35/0x280 [ 808.266500][ C1] ? dummy_free_streams+0x360/0x360 [ 808.271721][ C1] expire_timers+0x21f/0x3b0 [ 808.276341][ C1] __run_timers+0x548/0x680 [ 808.280930][ C1] ? enqueue_timer+0x470/0x470 [ 808.285713][ C1] run_timer_softirq+0x69/0xf0 [ 808.290480][ C1] __do_softirq+0x27e/0x598 [ 808.294992][ C1] asm_call_irq_on_stack+0xf/0x20 [ 808.300010][ C1] [ 808.302954][ C1] do_softirq_own_stack+0x60/0x80 [ 808.307987][ C1] __irq_exit_rcu+0x128/0x150 [ 808.312775][ C1] irq_exit_rcu+0x9/0x10 [ 808.317032][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 808.322674][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 808.328715][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 808.334026][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 808.353643][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 808.360172][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 808.368189][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 808.376200][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 808.384193][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 808.392344][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 808.400336][ C1] ? kernel_init_free_pages+0x87/0x100 [ 808.405810][ C1] get_page_from_freelist+0x6b5/0xa90 [ 808.411280][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 808.416656][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 808.422219][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 808.428212][ C1] pipe_write+0x580/0x1930 [ 808.432647][ C1] ? pipe_read+0x1030/0x1030 [ 808.437438][ C1] ? fsnotify_perm+0x67/0x4e0 [ 808.442121][ C1] ? io_schedule+0x120/0x120 [ 808.446732][ C1] ? security_file_permission+0xa8/0xc0 [ 808.452446][ C1] ? iov_iter_init+0x3f/0x120 [ 808.457143][ C1] vfs_write+0xc02/0xf20 [ 808.461393][ C1] ? kernel_write+0x3c0/0x3c0 [ 808.466084][ C1] ? __fget_files+0x310/0x370 [ 808.470774][ C1] ? __fdget_pos+0x1fa/0x300 [ 808.475367][ C1] ? ksys_write+0x77/0x2b0 [ 808.479928][ C1] ksys_write+0x186/0x2b0 [ 808.484409][ C1] ? __ia32_sys_read+0x90/0x90 [ 808.489257][ C1] __x64_sys_write+0x7b/0x90 [ 808.493853][ C1] do_syscall_64+0x31/0x70 [ 808.498295][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 808.504184][ C1] RIP: 0033:0x7f9380d05049 [ 808.508638][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 808.528254][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 808.536721][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 808.544729][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 808.552737][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 808.560716][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 808.568700][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 808.576696][ C1] ---[ end trace 6a7df80a272a84e1 ]--- [ 808.582650][ C1] ------------[ cut here ]------------ [ 808.588138][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 808.594300][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 808.604028][ C1] Modules linked in: [ 808.607965][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 808.619686][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 808.629783][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 808.635350][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 808.655118][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 808.661217][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 808.669217][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 808.677223][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 808.685310][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 808.693424][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 808.701542][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 808.710496][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 808.717109][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 808.725116][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 808.733113][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 808.741098][ C1] Call Trace: [ 808.744404][ C1] [ 808.747292][ C1] aiptek_irq+0x19b7/0x25f0 [ 808.751914][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 808.757754][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 808.762900][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 808.767959][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 808.773362][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 808.778586][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 808.783476][ C1] dummy_timer+0x798/0x42a0 [ 808.788008][ C1] ? enqueue_timer+0x1d1/0x470 [ 808.792802][ C1] ? __mod_timer+0x995/0xde0 [ 808.797422][ C1] ? mod_timer_pending+0x30/0x30 [ 808.802479][ C1] ? __kasan_check_write+0x14/0x20 [ 808.807628][ C1] ? dummy_free_streams+0x360/0x360 [ 808.812878][ C1] ? __kasan_check_write+0x14/0x20 [ 808.818061][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 808.823218][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 808.828802][ C1] ? dummy_free_streams+0x360/0x360 [ 808.834029][ C1] call_timer_fn+0x35/0x280 [ 808.838571][ C1] ? dummy_free_streams+0x360/0x360 [ 808.843809][ C1] expire_timers+0x21f/0x3b0 [ 808.848430][ C1] __run_timers+0x548/0x680 [ 808.852957][ C1] ? enqueue_timer+0x470/0x470 [ 808.857759][ C1] run_timer_softirq+0x69/0xf0 [ 808.862551][ C1] __do_softirq+0x27e/0x598 [ 808.867086][ C1] asm_call_irq_on_stack+0xf/0x20 [ 808.872124][ C1] [ 808.875090][ C1] do_softirq_own_stack+0x60/0x80 [ 808.880136][ C1] __irq_exit_rcu+0x128/0x150 [ 808.884835][ C1] irq_exit_rcu+0x9/0x10 [ 808.889103][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 808.894759][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 808.900765][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 808.906085][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 808.925718][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 808.931817][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 808.939822][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 808.947973][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 808.955978][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 808.964114][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 808.972138][ C1] ? kernel_init_free_pages+0x87/0x100 [ 808.977629][ C1] get_page_from_freelist+0x6b5/0xa90 [ 808.983034][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 808.988440][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 808.994024][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 809.000046][ C1] pipe_write+0x580/0x1930 [ 809.004489][ C1] ? pipe_read+0x1030/0x1030 [ 809.009417][ C1] ? fsnotify_perm+0x67/0x4e0 [ 809.014130][ C1] ? io_schedule+0x120/0x120 [ 809.018748][ C1] ? security_file_permission+0xa8/0xc0 [ 809.024322][ C1] ? iov_iter_init+0x3f/0x120 [ 809.029081][ C1] vfs_write+0xc02/0xf20 [ 809.033343][ C1] ? kernel_write+0x3c0/0x3c0 [ 809.038169][ C1] ? __fget_files+0x310/0x370 [ 809.042872][ C1] ? __fdget_pos+0x1fa/0x300 [ 809.047501][ C1] ? ksys_write+0x77/0x2b0 [ 809.051935][ C1] ksys_write+0x186/0x2b0 [ 809.056281][ C1] ? __ia32_sys_read+0x90/0x90 [ 809.061065][ C1] __x64_sys_write+0x7b/0x90 [ 809.065763][ C1] do_syscall_64+0x31/0x70 [ 809.070260][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 809.076180][ C1] RIP: 0033:0x7f9380d05049 [ 809.080625][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 809.100254][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 809.108702][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 809.116808][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 809.124804][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 809.132798][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 809.140803][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 809.148809][ C1] ---[ end trace 6a7df80a272a84e2 ]--- [ 809.154428][ C1] ------------[ cut here ]------------ [ 809.159913][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 809.165955][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 809.175569][ C1] Modules linked in: [ 809.179484][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 809.191365][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 809.201432][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 809.206976][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 809.226587][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 809.232663][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 809.240642][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 809.248794][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 809.256776][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 809.264766][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 809.272763][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 809.281931][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 809.288845][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 809.296822][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 809.304849][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 809.312817][ C1] Call Trace: [ 809.316100][ C1] [ 809.318984][ C1] aiptek_irq+0x19b7/0x25f0 [ 809.323483][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 809.329296][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 809.334416][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 809.339568][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 809.344993][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 809.350275][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 809.355124][ C1] dummy_timer+0x798/0x42a0 [ 809.359660][ C1] ? enqueue_timer+0x1d1/0x470 [ 809.364454][ C1] ? __mod_timer+0x995/0xde0 [ 809.369072][ C1] ? mod_timer_pending+0x30/0x30 [ 809.374106][ C1] ? __kasan_check_write+0x14/0x20 [ 809.379311][ C1] ? dummy_free_streams+0x360/0x360 [ 809.384508][ C1] ? __kasan_check_write+0x14/0x20 [ 809.389634][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 809.394774][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 809.400580][ C1] ? dummy_free_streams+0x360/0x360 [ 809.405782][ C1] call_timer_fn+0x35/0x280 [ 809.410314][ C1] ? dummy_free_streams+0x360/0x360 [ 809.415555][ C1] expire_timers+0x21f/0x3b0 [ 809.420501][ C1] __run_timers+0x548/0x680 [ 809.425116][ C1] ? enqueue_timer+0x470/0x470 [ 809.429919][ C1] run_timer_softirq+0x69/0xf0 [ 809.434687][ C1] __do_softirq+0x27e/0x598 [ 809.439330][ C1] asm_call_irq_on_stack+0xf/0x20 [ 809.444356][ C1] [ 809.447302][ C1] do_softirq_own_stack+0x60/0x80 [ 809.452317][ C1] __irq_exit_rcu+0x128/0x150 [ 809.457564][ C1] irq_exit_rcu+0x9/0x10 [ 809.462024][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 809.468262][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 809.474353][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 809.480062][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 809.499758][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 809.505834][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 809.513804][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 809.521895][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 809.529877][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 809.537872][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 809.546165][ C1] ? kernel_init_free_pages+0x87/0x100 [ 809.551630][ C1] get_page_from_freelist+0x6b5/0xa90 [ 809.557014][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 809.562389][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 809.567938][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 809.574141][ C1] pipe_write+0x580/0x1930 [ 809.579026][ C1] ? pipe_read+0x1030/0x1030 [ 809.583618][ C1] ? fsnotify_perm+0x67/0x4e0 [ 809.588299][ C1] ? io_schedule+0x120/0x120 [ 809.592987][ C1] ? security_file_permission+0xa8/0xc0 [ 809.598563][ C1] ? iov_iter_init+0x3f/0x120 [ 809.603240][ C1] vfs_write+0xc02/0xf20 [ 809.607664][ C1] ? kernel_write+0x3c0/0x3c0 [ 809.612578][ C1] ? __fget_files+0x310/0x370 [ 809.617342][ C1] ? __fdget_pos+0x1fa/0x300 [ 809.621935][ C1] ? ksys_write+0x77/0x2b0 [ 809.626349][ C1] ksys_write+0x186/0x2b0 [ 809.630860][ C1] ? __ia32_sys_read+0x90/0x90 [ 809.635804][ C1] __x64_sys_write+0x7b/0x90 [ 809.640419][ C1] do_syscall_64+0x31/0x70 [ 809.644834][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 809.651076][ C1] RIP: 0033:0x7f9380d05049 [ 809.655507][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 809.675394][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 809.683808][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 809.691781][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 809.699871][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 809.707865][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 809.715927][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 809.723906][ C1] ---[ end trace 6a7df80a272a84e3 ]--- [ 809.729509][ C1] ------------[ cut here ]------------ [ 809.735072][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 809.741164][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 809.750799][ C1] Modules linked in: [ 809.754770][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 809.766492][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 809.776606][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 809.782239][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 809.801961][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 809.808054][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 809.816051][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 809.824268][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 809.832386][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 809.840391][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 809.848403][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 809.857448][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 809.864060][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 809.872277][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 809.880530][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 809.888617][ C1] Call Trace: [ 809.891941][ C1] [ 809.894995][ C1] aiptek_irq+0x19b7/0x25f0 [ 809.899548][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 809.905468][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 809.910810][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 809.915963][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 809.921359][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 809.926648][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 809.931562][ C1] dummy_timer+0x798/0x42a0 [ 809.936121][ C1] ? enqueue_timer+0x1d1/0x470 [ 809.940918][ C1] ? __mod_timer+0x995/0xde0 [ 809.945681][ C1] ? mod_timer_pending+0x30/0x30 [ 809.950730][ C1] ? __kasan_check_write+0x14/0x20 [ 809.956134][ C1] ? dummy_free_streams+0x360/0x360 [ 809.961449][ C1] ? __kasan_check_write+0x14/0x20 [ 809.967582][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 809.972736][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 809.978309][ C1] ? dummy_free_streams+0x360/0x360 [ 809.983551][ C1] call_timer_fn+0x35/0x280 [ 809.988138][ C1] ? dummy_free_streams+0x360/0x360 [ 809.993369][ C1] expire_timers+0x21f/0x3b0 [ 809.998124][ C1] __run_timers+0x548/0x680 [ 810.002807][ C1] ? enqueue_timer+0x470/0x470 [ 810.007866][ C1] run_timer_softirq+0x69/0xf0 [ 810.012685][ C1] __do_softirq+0x27e/0x598 [ 810.017228][ C1] asm_call_irq_on_stack+0xf/0x20 [ 810.022348][ C1] [ 810.025311][ C1] do_softirq_own_stack+0x60/0x80 [ 810.030410][ C1] __irq_exit_rcu+0x128/0x150 [ 810.035124][ C1] irq_exit_rcu+0x9/0x10 [ 810.039400][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 810.045789][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 810.051803][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 810.057108][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 810.077086][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 810.083178][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 810.091176][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 810.099187][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 810.107192][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 810.115196][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 810.123391][ C1] ? kernel_init_free_pages+0x87/0x100 [ 810.128884][ C1] get_page_from_freelist+0x6b5/0xa90 [ 810.134405][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 810.139821][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 810.145411][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 810.151437][ C1] pipe_write+0x580/0x1930 [ 810.155883][ C1] ? pipe_read+0x1030/0x1030 [ 810.160499][ C1] ? fsnotify_perm+0x67/0x4e0 [ 810.165211][ C1] ? io_schedule+0x120/0x120 [ 810.169876][ C1] ? security_file_permission+0xa8/0xc0 [ 810.175452][ C1] ? iov_iter_init+0x3f/0x120 [ 810.180157][ C1] vfs_write+0xc02/0xf20 [ 810.184439][ C1] ? kernel_write+0x3c0/0x3c0 [ 810.189230][ C1] ? __fget_files+0x310/0x370 [ 810.193929][ C1] ? __fdget_pos+0x1fa/0x300 [ 810.198552][ C1] ? ksys_write+0x77/0x2b0 [ 810.202998][ C1] ksys_write+0x186/0x2b0 [ 810.207353][ C1] ? __ia32_sys_read+0x90/0x90 [ 810.212151][ C1] __x64_sys_write+0x7b/0x90 [ 810.216758][ C1] do_syscall_64+0x31/0x70 [ 810.221251][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 810.227251][ C1] RIP: 0033:0x7f9380d05049 [ 810.231684][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 810.251465][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 810.259915][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 810.267913][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 810.276000][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 810.284000][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 810.292006][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 810.300019][ C1] ---[ end trace 6a7df80a272a84e4 ]--- [ 810.305814][ C1] ------------[ cut here ]------------ [ 810.311407][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 810.317465][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 810.327084][ C1] Modules linked in: [ 810.331118][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 810.342827][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 810.352908][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 810.358451][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 810.378053][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 810.384208][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 810.392179][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 810.400144][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 810.408117][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 810.416085][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 810.424058][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 810.432982][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 810.439562][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 810.447541][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 810.455513][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 810.463475][ C1] Call Trace: [ 810.466748][ C1] [ 810.469608][ C1] aiptek_irq+0x19b7/0x25f0 [ 810.474141][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 810.480034][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 810.485140][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 810.490171][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 810.495545][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 810.500734][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 810.505597][ C1] dummy_timer+0x798/0x42a0 [ 810.510117][ C1] ? enqueue_timer+0x1d1/0x470 [ 810.514880][ C1] ? __mod_timer+0x995/0xde0 [ 810.519472][ C1] ? mod_timer_pending+0x30/0x30 [ 810.524415][ C1] ? __kasan_check_write+0x14/0x20 [ 810.529559][ C1] ? dummy_free_streams+0x360/0x360 [ 810.534759][ C1] ? __kasan_check_write+0x14/0x20 [ 810.539871][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 810.544987][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 810.550542][ C1] ? dummy_free_streams+0x360/0x360 [ 810.555744][ C1] call_timer_fn+0x35/0x280 [ 810.560254][ C1] ? dummy_free_streams+0x360/0x360 [ 810.565457][ C1] expire_timers+0x21f/0x3b0 [ 810.570052][ C1] __run_timers+0x548/0x680 [ 810.574557][ C1] ? enqueue_timer+0x470/0x470 [ 810.579323][ C1] run_timer_softirq+0x69/0xf0 [ 810.584083][ C1] __do_softirq+0x27e/0x598 [ 810.588583][ C1] asm_call_irq_on_stack+0xf/0x20 [ 810.593600][ C1] [ 810.596575][ C1] do_softirq_own_stack+0x60/0x80 [ 810.601594][ C1] __irq_exit_rcu+0x128/0x150 [ 810.606268][ C1] irq_exit_rcu+0x9/0x10 [ 810.610512][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 810.616169][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 810.622162][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 810.627443][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 810.647069][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 810.653144][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 810.661145][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 810.669210][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 810.677191][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 810.685172][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 810.693180][ C1] ? kernel_init_free_pages+0x87/0x100 [ 810.698641][ C1] get_page_from_freelist+0x6b5/0xa90 [ 810.704013][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 810.709396][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 810.714956][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 810.720948][ C1] pipe_write+0x580/0x1930 [ 810.725375][ C1] ? pipe_read+0x1030/0x1030 [ 810.729965][ C1] ? fsnotify_perm+0x67/0x4e0 [ 810.734649][ C1] ? io_schedule+0x120/0x120 [ 810.739276][ C1] ? security_file_permission+0xa8/0xc0 [ 810.744829][ C1] ? iov_iter_init+0x3f/0x120 [ 810.749531][ C1] vfs_write+0xc02/0xf20 [ 810.753778][ C1] ? kernel_write+0x3c0/0x3c0 [ 810.758455][ C1] ? __fget_files+0x310/0x370 [ 810.763134][ C1] ? __fdget_pos+0x1fa/0x300 [ 810.767737][ C1] ? ksys_write+0x77/0x2b0 [ 810.772166][ C1] ksys_write+0x186/0x2b0 [ 810.776504][ C1] ? __ia32_sys_read+0x90/0x90 [ 810.781269][ C1] __x64_sys_write+0x7b/0x90 [ 810.785956][ C1] do_syscall_64+0x31/0x70 [ 810.790420][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 810.796350][ C1] RIP: 0033:0x7f9380d05049 [ 810.800796][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 810.820415][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 810.828840][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 810.836818][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 810.844788][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 810.852755][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 810.860730][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 810.868708][ C1] ---[ end trace 6a7df80a272a84e5 ]--- [ 810.874303][ C1] ------------[ cut here ]------------ [ 810.879770][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 810.885833][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 810.895463][ C1] Modules linked in: [ 810.899394][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 810.911194][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 810.921286][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 810.926853][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 810.946481][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 810.952750][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 810.960829][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 810.968822][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 810.976818][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 810.984923][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 810.992939][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 811.001900][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 811.008514][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 811.016515][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 811.024520][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 811.032507][ C1] Call Trace: [ 811.035804][ C1] [ 811.038690][ C1] aiptek_irq+0x19b7/0x25f0 [ 811.043223][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 811.049055][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 811.054189][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 811.059228][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 811.064648][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 811.069912][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 811.074789][ C1] dummy_timer+0x798/0x42a0 [ 811.079315][ C1] ? enqueue_timer+0x1d1/0x470 [ 811.084098][ C1] ? __mod_timer+0x995/0xde0 [ 811.088703][ C1] ? mod_timer_pending+0x30/0x30 [ 811.093662][ C1] ? __kasan_check_write+0x14/0x20 [ 811.098793][ C1] ? dummy_free_streams+0x360/0x360 [ 811.103999][ C1] ? __kasan_check_write+0x14/0x20 [ 811.109138][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 811.114274][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 811.119838][ C1] ? dummy_free_streams+0x360/0x360 [ 811.125059][ C1] call_timer_fn+0x35/0x280 [ 811.129579][ C1] ? dummy_free_streams+0x360/0x360 [ 811.134885][ C1] expire_timers+0x21f/0x3b0 [ 811.139506][ C1] __run_timers+0x548/0x680 [ 811.144043][ C1] ? enqueue_timer+0x470/0x470 [ 811.148834][ C1] run_timer_softirq+0x69/0xf0 [ 811.153636][ C1] __do_softirq+0x27e/0x598 [ 811.158151][ C1] asm_call_irq_on_stack+0xf/0x20 [ 811.163179][ C1] [ 811.166144][ C1] do_softirq_own_stack+0x60/0x80 [ 811.171278][ C1] __irq_exit_rcu+0x128/0x150 [ 811.176111][ C1] irq_exit_rcu+0x9/0x10 [ 811.180367][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 811.186024][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 811.192032][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 811.197336][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 811.216953][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 811.223042][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 811.231051][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 811.239055][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 811.247059][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 811.255056][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 811.263067][ C1] ? kernel_init_free_pages+0x87/0x100 [ 811.268554][ C1] get_page_from_freelist+0x6b5/0xa90 [ 811.273963][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 811.279357][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 811.284924][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 811.290933][ C1] pipe_write+0x580/0x1930 [ 811.295377][ C1] ? pipe_read+0x1030/0x1030 [ 811.299985][ C1] ? fsnotify_perm+0x67/0x4e0 [ 811.304683][ C1] ? io_schedule+0x120/0x120 [ 811.309303][ C1] ? security_file_permission+0xa8/0xc0 [ 811.314868][ C1] ? iov_iter_init+0x3f/0x120 [ 811.319582][ C1] vfs_write+0xc02/0xf20 [ 811.323854][ C1] ? kernel_write+0x3c0/0x3c0 [ 811.328556][ C1] ? __fget_files+0x310/0x370 [ 811.333255][ C1] ? __fdget_pos+0x1fa/0x300 [ 811.337880][ C1] ? ksys_write+0x77/0x2b0 [ 811.342313][ C1] ksys_write+0x186/0x2b0 [ 811.346667][ C1] ? __ia32_sys_read+0x90/0x90 [ 811.351466][ C1] __x64_sys_write+0x7b/0x90 [ 811.356078][ C1] do_syscall_64+0x31/0x70 [ 811.360512][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 811.366415][ C1] RIP: 0033:0x7f9380d05049 [ 811.370840][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 811.390480][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 811.398916][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 811.406916][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 811.414918][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 811.422923][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 811.431018][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 811.439459][ C1] ---[ end trace 6a7df80a272a84e6 ]--- [ 811.445075][ C1] ------------[ cut here ]------------ [ 811.450548][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 811.456580][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 811.466380][ C1] Modules linked in: [ 811.470290][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 811.482130][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 811.492404][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 811.497954][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 811.517572][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 811.523658][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 811.531893][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 811.540036][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 811.548015][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 811.555994][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 811.563971][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 811.572910][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 811.579602][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 811.587738][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 811.595723][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 811.603707][ C1] Call Trace: [ 811.606997][ C1] [ 811.609861][ C1] aiptek_irq+0x19b7/0x25f0 [ 811.614388][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 811.620209][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 811.625327][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 811.630428][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 811.635844][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 811.641077][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 811.645948][ C1] dummy_timer+0x798/0x42a0 [ 811.650471][ C1] ? enqueue_timer+0x1d1/0x470 [ 811.655257][ C1] ? __mod_timer+0x995/0xde0 [ 811.659860][ C1] ? mod_timer_pending+0x30/0x30 [ 811.664819][ C1] ? __kasan_check_write+0x14/0x20 [ 811.670041][ C1] ? dummy_free_streams+0x360/0x360 [ 811.675255][ C1] ? __kasan_check_write+0x14/0x20 [ 811.680391][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 811.685510][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 811.691054][ C1] ? dummy_free_streams+0x360/0x360 [ 811.696283][ C1] call_timer_fn+0x35/0x280 [ 811.700840][ C1] ? dummy_free_streams+0x360/0x360 [ 811.706057][ C1] expire_timers+0x21f/0x3b0 [ 811.710798][ C1] __run_timers+0x548/0x680 [ 811.715325][ C1] ? enqueue_timer+0x470/0x470 [ 811.720101][ C1] run_timer_softirq+0x69/0xf0 [ 811.724881][ C1] __do_softirq+0x27e/0x598 [ 811.729395][ C1] asm_call_irq_on_stack+0xf/0x20 [ 811.734453][ C1] [ 811.737407][ C1] do_softirq_own_stack+0x60/0x80 [ 811.742444][ C1] __irq_exit_rcu+0x128/0x150 [ 811.747138][ C1] irq_exit_rcu+0x9/0x10 [ 811.751414][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 811.757064][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 811.763148][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 811.768440][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 811.788058][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 811.794136][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 811.802164][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 811.810143][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 811.818125][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 811.826140][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 811.834142][ C1] ? kernel_init_free_pages+0x87/0x100 [ 811.839611][ C1] get_page_from_freelist+0x6b5/0xa90 [ 811.845122][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 811.850509][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 811.856059][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 811.862048][ C1] pipe_write+0x580/0x1930 [ 811.866472][ C1] ? pipe_read+0x1030/0x1030 [ 811.871078][ C1] ? fsnotify_perm+0x67/0x4e0 [ 811.875761][ C1] ? io_schedule+0x120/0x120 [ 811.880369][ C1] ? security_file_permission+0xa8/0xc0 [ 811.886091][ C1] ? iov_iter_init+0x3f/0x120 [ 811.890786][ C1] vfs_write+0xc02/0xf20 [ 811.895050][ C1] ? kernel_write+0x3c0/0x3c0 [ 811.899742][ C1] ? __fget_files+0x310/0x370 [ 811.904428][ C1] ? __fdget_pos+0x1fa/0x300 [ 811.909023][ C1] ? ksys_write+0x77/0x2b0 [ 811.913509][ C1] ksys_write+0x186/0x2b0 [ 811.917853][ C1] ? __ia32_sys_read+0x90/0x90 [ 811.922725][ C1] __x64_sys_write+0x7b/0x90 [ 811.927330][ C1] do_syscall_64+0x31/0x70 [ 811.931761][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 811.937658][ C1] RIP: 0033:0x7f9380d05049 [ 811.942115][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 811.961857][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 811.970286][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 811.978269][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 811.986259][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 811.994676][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 812.002855][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 812.010841][ C1] ---[ end trace 6a7df80a272a84e7 ]--- [ 812.016453][ C1] ------------[ cut here ]------------ [ 812.021930][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 812.027986][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 812.037717][ C1] Modules linked in: [ 812.041657][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 812.053394][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 812.063898][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 812.069560][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 812.089372][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 812.095471][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 812.103469][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 812.111469][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee2a5d8 [ 812.119479][ C1] R10: ffffed103ee2a5d8 R11: 0000000000000000 R12: ffff88810db870c8 [ 812.127855][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 812.136106][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 812.145152][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 812.151783][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 812.159791][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 812.167801][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 812.175799][ C1] Call Trace: [ 812.179108][ C1] [ 812.182030][ C1] aiptek_irq+0x19b7/0x25f0 [ 812.186560][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 812.192388][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 812.197536][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 812.202595][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 812.207992][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 812.213221][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 812.218102][ C1] dummy_timer+0x798/0x42a0 [ 812.222626][ C1] ? enqueue_timer+0x1d1/0x470 [ 812.227406][ C1] ? __mod_timer+0x995/0xde0 [ 812.232011][ C1] ? mod_timer_pending+0x30/0x30 [ 812.236969][ C1] ? __kasan_check_write+0x14/0x20 [ 812.242114][ C1] ? dummy_free_streams+0x360/0x360 [ 812.247336][ C1] ? __kasan_check_write+0x14/0x20 [ 812.252467][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 812.257725][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 812.263307][ C1] ? dummy_free_streams+0x360/0x360 [ 812.268546][ C1] call_timer_fn+0x35/0x280 [ 812.273078][ C1] ? dummy_free_streams+0x360/0x360 [ 812.278322][ C1] expire_timers+0x21f/0x3b0 [ 812.282946][ C1] __run_timers+0x548/0x680 [ 812.287474][ C1] ? enqueue_timer+0x470/0x470 [ 812.292255][ C1] run_timer_softirq+0x69/0xf0 [ 812.297044][ C1] __do_softirq+0x27e/0x598 [ 812.301752][ C1] asm_call_irq_on_stack+0xf/0x20 [ 812.306783][ C1] [ 812.309752][ C1] do_softirq_own_stack+0x60/0x80 [ 812.314804][ C1] __irq_exit_rcu+0x128/0x150 [ 812.319506][ C1] irq_exit_rcu+0x9/0x10 [ 812.323785][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 812.329531][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 812.335529][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 812.340838][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 812.360722][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 812.366823][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 812.374816][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 812.382818][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 812.390906][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 812.398910][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 812.406928][ C1] ? kernel_init_free_pages+0x87/0x100 [ 812.412425][ C1] get_page_from_freelist+0x6b5/0xa90 [ 812.417908][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 812.423312][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 812.428888][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 812.435459][ C1] pipe_write+0x580/0x1930 [ 812.439923][ C1] ? pipe_read+0x1030/0x1030 [ 812.444558][ C1] ? fsnotify_perm+0x67/0x4e0 [ 812.449395][ C1] ? io_schedule+0x120/0x120 [ 812.454046][ C1] ? security_file_permission+0xa8/0xc0 [ 812.459615][ C1] ? iov_iter_init+0x3f/0x120 [ 812.464342][ C1] vfs_write+0xc02/0xf20 [ 812.468609][ C1] ? kernel_write+0x3c0/0x3c0 [ 812.473320][ C1] ? __fget_files+0x310/0x370 [ 812.478020][ C1] ? __fdget_pos+0x1fa/0x300 [ 812.482626][ C1] ? ksys_write+0x77/0x2b0 [ 812.487241][ C1] ksys_write+0x186/0x2b0 [ 812.491590][ C1] ? __ia32_sys_read+0x90/0x90 [ 812.496371][ C1] __x64_sys_write+0x7b/0x90 [ 812.500980][ C1] do_syscall_64+0x31/0x70 [ 812.505420][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 812.511328][ C1] RIP: 0033:0x7f9380d05049 [ 812.515765][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 812.535478][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 812.543917][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 812.551910][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 812.559911][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 812.567909][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 812.575908][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 812.583913][ C1] ---[ end trace 6a7df80a272a84e8 ]--- [ 812.589540][ C1] ------------[ cut here ]------------ [ 812.595035][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 812.601094][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 812.610816][ C1] Modules linked in: [ 812.614754][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 812.626472][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 812.636574][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 812.642236][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 812.661881][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 812.667973][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 812.675988][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 812.684001][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 812.692009][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 812.700010][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 812.708028][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 812.716997][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 812.723614][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 812.731614][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 812.739618][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 812.747611][ C1] Call Trace: [ 812.750911][ C1] [ 812.753796][ C1] aiptek_irq+0x19b7/0x25f0 [ 812.758382][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 812.764303][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 812.769555][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 812.774647][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 812.780050][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 812.785279][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 812.790148][ C1] dummy_timer+0x798/0x42a0 [ 812.794670][ C1] ? enqueue_timer+0x1d1/0x470 [ 812.799451][ C1] ? __mod_timer+0x995/0xde0 [ 812.804070][ C1] ? mod_timer_pending+0x30/0x30 [ 812.809030][ C1] ? __kasan_check_write+0x14/0x20 [ 812.814169][ C1] ? dummy_free_streams+0x360/0x360 [ 812.819389][ C1] ? __kasan_check_write+0x14/0x20 [ 812.824529][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 812.829666][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 812.835328][ C1] ? dummy_free_streams+0x360/0x360 [ 812.840556][ C1] call_timer_fn+0x35/0x280 [ 812.845087][ C1] ? dummy_free_streams+0x360/0x360 [ 812.850350][ C1] expire_timers+0x21f/0x3b0 [ 812.854992][ C1] __run_timers+0x548/0x680 [ 812.859665][ C1] ? enqueue_timer+0x470/0x470 [ 812.864627][ C1] run_timer_softirq+0x69/0xf0 [ 812.869434][ C1] __do_softirq+0x27e/0x598 [ 812.873971][ C1] asm_call_irq_on_stack+0xf/0x20 [ 812.879017][ C1] [ 812.881991][ C1] do_softirq_own_stack+0x60/0x80 [ 812.887047][ C1] __irq_exit_rcu+0x128/0x150 [ 812.891759][ C1] irq_exit_rcu+0x9/0x10 [ 812.896038][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 812.901705][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 812.907766][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 812.913081][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 812.932727][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 812.938831][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 812.946943][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 812.954945][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 812.962958][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 812.970962][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 812.979063][ C1] ? kernel_init_free_pages+0x87/0x100 [ 812.984910][ C1] get_page_from_freelist+0x6b5/0xa90 [ 812.990328][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 812.995757][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 813.001344][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 813.007365][ C1] pipe_write+0x580/0x1930 [ 813.011826][ C1] ? pipe_read+0x1030/0x1030 [ 813.016440][ C1] ? fsnotify_perm+0x67/0x4e0 [ 813.021163][ C1] ? io_schedule+0x120/0x120 [ 813.025840][ C1] ? security_file_permission+0xa8/0xc0 [ 813.031418][ C1] ? iov_iter_init+0x3f/0x120 [ 813.036129][ C1] vfs_write+0xc02/0xf20 [ 813.040512][ C1] ? kernel_write+0x3c0/0x3c0 [ 813.045232][ C1] ? __fget_files+0x310/0x370 [ 813.049959][ C1] ? __fdget_pos+0x1fa/0x300 [ 813.054595][ C1] ? ksys_write+0x77/0x2b0 [ 813.059042][ C1] ksys_write+0x186/0x2b0 [ 813.063410][ C1] ? __ia32_sys_read+0x90/0x90 [ 813.068219][ C1] __x64_sys_write+0x7b/0x90 [ 813.072840][ C1] do_syscall_64+0x31/0x70 [ 813.077288][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 813.083199][ C1] RIP: 0033:0x7f9380d05049 [ 813.087646][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 813.107292][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 813.115741][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 813.123763][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 813.131850][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 813.139855][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 813.147855][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 813.155863][ C1] ---[ end trace 6a7df80a272a84e9 ]--- [ 813.161469][ C1] ------------[ cut here ]------------ [ 813.166959][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 813.173008][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 813.182638][ C1] Modules linked in: [ 813.186542][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 813.198250][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 813.208333][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 813.213882][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 813.233503][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 813.239586][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 813.247658][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 813.255669][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 813.263656][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 813.271759][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 813.279752][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 813.288804][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 813.295404][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 813.303406][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 813.311660][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 813.319635][ C1] Call Trace: [ 813.322914][ C1] [ 813.325778][ C1] aiptek_irq+0x19b7/0x25f0 [ 813.330295][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 813.336157][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 813.341283][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 813.346352][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 813.351747][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 813.356949][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 813.361805][ C1] dummy_timer+0x798/0x42a0 [ 813.366314][ C1] ? enqueue_timer+0x1d1/0x470 [ 813.371073][ C1] ? __mod_timer+0x995/0xde0 [ 813.375668][ C1] ? mod_timer_pending+0x30/0x30 [ 813.380611][ C1] ? __kasan_check_write+0x14/0x20 [ 813.385731][ C1] ? dummy_free_streams+0x360/0x360 [ 813.390928][ C1] ? __kasan_check_write+0x14/0x20 [ 813.396039][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 813.401148][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 813.406707][ C1] ? dummy_free_streams+0x360/0x360 [ 813.411942][ C1] call_timer_fn+0x35/0x280 [ 813.416454][ C1] ? dummy_free_streams+0x360/0x360 [ 813.421660][ C1] expire_timers+0x21f/0x3b0 [ 813.426255][ C1] __run_timers+0x548/0x680 [ 813.430765][ C1] ? enqueue_timer+0x470/0x470 [ 813.435532][ C1] run_timer_softirq+0x69/0xf0 [ 813.440298][ C1] __do_softirq+0x27e/0x598 [ 813.444814][ C1] asm_call_irq_on_stack+0xf/0x20 [ 813.449964][ C1] [ 813.452915][ C1] do_softirq_own_stack+0x60/0x80 [ 813.458062][ C1] __irq_exit_rcu+0x128/0x150 [ 813.462784][ C1] irq_exit_rcu+0x9/0x10 [ 813.467042][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 813.472702][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 813.478692][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 813.483981][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 813.503601][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 813.509684][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 813.517668][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 813.525787][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 813.534329][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 813.542317][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 813.550347][ C1] ? kernel_init_free_pages+0x87/0x100 [ 813.555817][ C1] get_page_from_freelist+0x6b5/0xa90 [ 813.561208][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 813.566592][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 813.572178][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 813.578189][ C1] pipe_write+0x580/0x1930 [ 813.582737][ C1] ? pipe_read+0x1030/0x1030 [ 813.587371][ C1] ? fsnotify_perm+0x67/0x4e0 [ 813.592062][ C1] ? io_schedule+0x120/0x120 [ 813.596694][ C1] ? security_file_permission+0xa8/0xc0 [ 813.602262][ C1] ? iov_iter_init+0x3f/0x120 [ 813.606934][ C1] vfs_write+0xc02/0xf20 [ 813.611189][ C1] ? kernel_write+0x3c0/0x3c0 [ 813.616666][ C1] ? __fget_files+0x310/0x370 [ 813.621373][ C1] ? __fdget_pos+0x1fa/0x300 [ 813.625964][ C1] ? ksys_write+0x77/0x2b0 [ 813.631064][ C1] ksys_write+0x186/0x2b0 [ 813.635424][ C1] ? __ia32_sys_read+0x90/0x90 [ 813.640227][ C1] __x64_sys_write+0x7b/0x90 [ 813.644854][ C1] do_syscall_64+0x31/0x70 [ 813.649280][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 813.655277][ C1] RIP: 0033:0x7f9380d05049 [ 813.659871][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 813.680898][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 813.689739][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 813.697828][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 813.705914][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 813.714087][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 813.722151][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 813.730169][ C1] ---[ end trace 6a7df80a272a84ea ]--- [ 813.736246][ C1] ------------[ cut here ]------------ [ 813.741933][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 813.748079][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 813.757984][ C1] Modules linked in: [ 813.761911][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 813.773997][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 813.784094][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 813.789668][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 813.809417][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 813.815534][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 813.823657][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 813.831682][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 813.839766][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 813.847937][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 813.856556][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 813.865637][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 813.872249][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 813.880249][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 813.888247][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 813.896333][ C1] Call Trace: [ 813.899682][ C1] [ 813.902593][ C1] aiptek_irq+0x19b7/0x25f0 [ 813.907127][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 813.912996][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 813.918201][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 813.923244][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 813.928724][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 813.933948][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 813.938864][ C1] dummy_timer+0x798/0x42a0 [ 813.943484][ C1] ? __mod_timer+0x995/0xde0 [ 813.948102][ C1] ? prandom_u32+0x254/0x380 [ 813.952996][ C1] ? __kasan_check_write+0x14/0x20 [ 813.958165][ C1] ? dummy_free_streams+0x360/0x360 [ 813.963593][ C1] ? __kasan_check_write+0x14/0x20 [ 813.968841][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 813.973968][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 813.979661][ C1] ? dummy_free_streams+0x360/0x360 [ 813.985097][ C1] call_timer_fn+0x35/0x280 [ 813.989878][ C1] ? dummy_free_streams+0x360/0x360 [ 813.995110][ C1] expire_timers+0x21f/0x3b0 [ 813.999940][ C1] __run_timers+0x548/0x680 [ 814.004557][ C1] ? enqueue_timer+0x470/0x470 [ 814.009447][ C1] run_timer_softirq+0x69/0xf0 [ 814.014260][ C1] __do_softirq+0x27e/0x598 [ 814.018882][ C1] asm_call_irq_on_stack+0xf/0x20 [ 814.023995][ C1] [ 814.027137][ C1] do_softirq_own_stack+0x60/0x80 [ 814.032181][ C1] __irq_exit_rcu+0x128/0x150 [ 814.036886][ C1] irq_exit_rcu+0x9/0x10 [ 814.041173][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 814.046851][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 814.052846][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 814.058234][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 814.078040][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 814.084133][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 814.092220][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 814.100306][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 814.108480][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 814.116567][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 814.124623][ C1] ? kernel_init_free_pages+0x87/0x100 [ 814.130231][ C1] get_page_from_freelist+0x6b5/0xa90 [ 814.135732][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 814.141231][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 814.146811][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 814.152820][ C1] pipe_write+0x580/0x1930 [ 814.157265][ C1] ? pipe_read+0x1030/0x1030 [ 814.161877][ C1] ? fsnotify_perm+0x67/0x4e0 [ 814.166641][ C1] ? io_schedule+0x120/0x120 [ 814.171247][ C1] ? security_file_permission+0xa8/0xc0 [ 814.176865][ C1] ? iov_iter_init+0x3f/0x120 [ 814.181591][ C1] vfs_write+0xc02/0xf20 [ 814.185878][ C1] ? kernel_write+0x3c0/0x3c0 [ 814.190568][ C1] ? __fget_files+0x310/0x370 [ 814.195265][ C1] ? __fdget_pos+0x1fa/0x300 [ 814.200146][ C1] ? ksys_write+0x77/0x2b0 [ 814.204589][ C1] ksys_write+0x186/0x2b0 [ 814.209055][ C1] ? __ia32_sys_read+0x90/0x90 [ 814.213832][ C1] __x64_sys_write+0x7b/0x90 [ 814.218440][ C1] do_syscall_64+0x31/0x70 [ 814.222884][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 814.228802][ C1] RIP: 0033:0x7f9380d05049 [ 814.233231][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 814.253811][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 814.262353][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 814.270545][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 814.278572][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 814.286801][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 814.294826][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 814.303200][ C1] ---[ end trace 6a7df80a272a84eb ]--- [ 814.308967][ C1] ------------[ cut here ]------------ [ 814.314432][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 814.320451][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 814.330078][ C1] Modules linked in: [ 814.334009][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 814.345924][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 814.356026][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 814.361589][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 814.381206][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 814.387276][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 814.395254][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 814.403307][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 814.411561][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 814.419644][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 814.427641][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 814.436672][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 814.443257][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 814.451259][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 814.459246][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 814.467220][ C1] Call Trace: [ 814.470502][ C1] [ 814.473363][ C1] aiptek_irq+0x19b7/0x25f0 [ 814.477873][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 814.483794][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 814.488921][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 814.493962][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 814.499339][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 814.504559][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 814.509413][ C1] dummy_timer+0x798/0x42a0 [ 814.513919][ C1] ? __mod_timer+0x995/0xde0 [ 814.518525][ C1] ? prandom_u32+0x254/0x380 [ 814.523118][ C1] ? __kasan_check_write+0x14/0x20 [ 814.528352][ C1] ? dummy_free_streams+0x360/0x360 [ 814.533566][ C1] ? __kasan_check_write+0x14/0x20 [ 814.538676][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 814.543803][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 814.549375][ C1] ? dummy_free_streams+0x360/0x360 [ 814.554694][ C1] call_timer_fn+0x35/0x280 [ 814.559312][ C1] ? dummy_free_streams+0x360/0x360 [ 814.564559][ C1] expire_timers+0x21f/0x3b0 [ 814.569174][ C1] __run_timers+0x548/0x680 [ 814.573696][ C1] ? enqueue_timer+0x470/0x470 [ 814.578482][ C1] run_timer_softirq+0x69/0xf0 [ 814.583248][ C1] __do_softirq+0x27e/0x598 [ 814.587784][ C1] asm_call_irq_on_stack+0xf/0x20 [ 814.592974][ C1] [ 814.596011][ C1] do_softirq_own_stack+0x60/0x80 [ 814.601029][ C1] __irq_exit_rcu+0x128/0x150 [ 814.605701][ C1] irq_exit_rcu+0x9/0x10 [ 814.609947][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 814.615593][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 814.621611][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 814.627007][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 814.646634][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 814.652701][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 814.660689][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 814.668688][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 814.676659][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 814.684635][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 814.692626][ C1] ? kernel_init_free_pages+0x87/0x100 [ 814.698084][ C1] get_page_from_freelist+0x6b5/0xa90 [ 814.703501][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 814.708878][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 814.714425][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 814.720404][ C1] pipe_write+0x580/0x1930 [ 814.724828][ C1] ? pipe_read+0x1030/0x1030 [ 814.729429][ C1] ? fsnotify_perm+0x67/0x4e0 [ 814.734120][ C1] ? io_schedule+0x120/0x120 [ 814.738720][ C1] ? security_file_permission+0xa8/0xc0 [ 814.744273][ C1] ? iov_iter_init+0x3f/0x120 [ 814.748965][ C1] vfs_write+0xc02/0xf20 [ 814.753334][ C1] ? kernel_write+0x3c0/0x3c0 [ 814.758051][ C1] ? __fget_files+0x310/0x370 [ 814.762770][ C1] ? __fdget_pos+0x1fa/0x300 [ 814.767380][ C1] ? ksys_write+0x77/0x2b0 [ 814.771815][ C1] ksys_write+0x186/0x2b0 [ 814.776150][ C1] ? __ia32_sys_read+0x90/0x90 [ 814.780921][ C1] __x64_sys_write+0x7b/0x90 [ 814.785516][ C1] do_syscall_64+0x31/0x70 [ 814.789955][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 814.795865][ C1] RIP: 0033:0x7f9380d05049 [ 814.800278][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 814.819909][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 814.828333][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 814.836329][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 814.844307][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 814.852289][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 814.860262][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 814.868240][ C1] ---[ end trace 6a7df80a272a84ec ]--- [ 814.873816][ C1] ------------[ cut here ]------------ [ 814.879304][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 814.885502][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 814.895324][ C1] Modules linked in: [ 814.899267][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 814.910986][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 814.921075][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 814.926630][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 814.946253][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 814.952341][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 814.960357][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 814.968443][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 814.976444][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 814.984517][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 814.992515][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 815.001464][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 815.008063][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 815.016056][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 815.024051][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 815.032037][ C1] Call Trace: [ 815.035331][ C1] [ 815.043601][ C1] aiptek_irq+0x19b7/0x25f0 [ 815.048125][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 815.053955][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 815.059085][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 815.064139][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 815.069533][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 815.074744][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 815.079615][ C1] dummy_timer+0x798/0x42a0 [ 815.084137][ C1] ? enqueue_timer+0x1d1/0x470 [ 815.088936][ C1] ? __mod_timer+0x995/0xde0 [ 815.093564][ C1] ? mod_timer_pending+0x30/0x30 [ 815.098527][ C1] ? __kasan_check_write+0x14/0x20 [ 815.103661][ C1] ? dummy_free_streams+0x360/0x360 [ 815.108881][ C1] ? __kasan_check_write+0x14/0x20 [ 815.114102][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 815.119232][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 815.124795][ C1] ? dummy_free_streams+0x360/0x360 [ 815.130002][ C1] call_timer_fn+0x35/0x280 [ 815.134521][ C1] ? dummy_free_streams+0x360/0x360 [ 815.139742][ C1] expire_timers+0x21f/0x3b0 [ 815.144447][ C1] __run_timers+0x548/0x680 [ 815.148975][ C1] ? enqueue_timer+0x470/0x470 [ 815.153770][ C1] run_timer_softirq+0x69/0xf0 [ 815.158639][ C1] __do_softirq+0x27e/0x598 [ 815.163170][ C1] asm_call_irq_on_stack+0xf/0x20 [ 815.168200][ C1] [ 815.171162][ C1] do_softirq_own_stack+0x60/0x80 [ 815.176202][ C1] __irq_exit_rcu+0x128/0x150 [ 815.180895][ C1] irq_exit_rcu+0x9/0x10 [ 815.185159][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 815.190809][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 815.196817][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 815.202113][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 815.221736][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 815.227829][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 815.235824][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 815.243819][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 815.251813][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 815.259829][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 815.267864][ C1] ? kernel_init_free_pages+0x87/0x100 [ 815.273361][ C1] get_page_from_freelist+0x6b5/0xa90 [ 815.278929][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 815.284344][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 815.289913][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 815.295925][ C1] pipe_write+0x580/0x1930 [ 815.300365][ C1] ? pipe_read+0x1030/0x1030 [ 815.304971][ C1] ? fsnotify_perm+0x67/0x4e0 [ 815.309676][ C1] ? io_schedule+0x120/0x120 [ 815.314295][ C1] ? security_file_permission+0xa8/0xc0 [ 815.319864][ C1] ? iov_iter_init+0x3f/0x120 [ 815.324565][ C1] vfs_write+0xc02/0xf20 [ 815.328836][ C1] ? kernel_write+0x3c0/0x3c0 [ 815.333539][ C1] ? __fget_files+0x310/0x370 [ 815.338258][ C1] ? __fdget_pos+0x1fa/0x300 [ 815.342962][ C1] ? ksys_write+0x77/0x2b0 [ 815.347388][ C1] ksys_write+0x186/0x2b0 [ 815.351733][ C1] ? __ia32_sys_read+0x90/0x90 [ 815.356527][ C1] __x64_sys_write+0x7b/0x90 [ 815.361153][ C1] do_syscall_64+0x31/0x70 [ 815.365586][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 815.371495][ C1] RIP: 0033:0x7f9380d05049 [ 815.375923][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 815.395541][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 815.403981][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 815.411977][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 815.419964][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 815.427956][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 815.435949][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 815.443943][ C1] ---[ end trace 6a7df80a272a84ed ]--- [ 815.449615][ C1] ------------[ cut here ]------------ [ 815.455146][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 815.461168][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 815.470801][ C1] Modules linked in: [ 815.474702][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 815.486407][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 815.496681][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 815.502338][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 815.521953][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 815.528017][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 815.535994][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 815.543967][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 815.551949][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 815.559934][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 815.567925][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 815.576861][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 815.583451][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 815.591434][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 815.599403][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 815.607376][ C1] Call Trace: [ 815.610655][ C1] [ 815.613514][ C1] aiptek_irq+0x19b7/0x25f0 [ 815.618021][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 815.623847][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 815.628966][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 815.633991][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 815.639385][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 815.644584][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 815.649530][ C1] dummy_timer+0x798/0x42a0 [ 815.654031][ C1] ? enqueue_timer+0x1d1/0x470 [ 815.658794][ C1] ? __mod_timer+0x995/0xde0 [ 815.663387][ C1] ? mod_timer_pending+0x30/0x30 [ 815.668349][ C1] ? __kasan_check_write+0x14/0x20 [ 815.673463][ C1] ? dummy_free_streams+0x360/0x360 [ 815.678678][ C1] ? __kasan_check_write+0x14/0x20 [ 815.683808][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 815.688923][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 815.694471][ C1] ? dummy_free_streams+0x360/0x360 [ 815.699678][ C1] call_timer_fn+0x35/0x280 [ 815.704193][ C1] ? dummy_free_streams+0x360/0x360 [ 815.709390][ C1] expire_timers+0x21f/0x3b0 [ 815.713996][ C1] __run_timers+0x548/0x680 [ 815.718503][ C1] ? enqueue_timer+0x470/0x470 [ 815.723302][ C1] run_timer_softirq+0x69/0xf0 [ 815.728085][ C1] __do_softirq+0x27e/0x598 [ 815.732595][ C1] asm_call_irq_on_stack+0xf/0x20 [ 815.737607][ C1] [ 815.740548][ C1] do_softirq_own_stack+0x60/0x80 [ 815.745570][ C1] __irq_exit_rcu+0x128/0x150 [ 815.750242][ C1] irq_exit_rcu+0x9/0x10 [ 815.754595][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 815.760223][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 815.766229][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 815.771542][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 815.791162][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 815.797230][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 815.805195][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 815.813170][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 815.821144][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 815.829215][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 815.837210][ C1] ? kernel_init_free_pages+0x87/0x100 [ 815.842670][ C1] get_page_from_freelist+0x6b5/0xa90 [ 815.848044][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 815.853414][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 815.858997][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 815.864989][ C1] pipe_write+0x580/0x1930 [ 815.869409][ C1] ? pipe_read+0x1030/0x1030 [ 815.873995][ C1] ? fsnotify_perm+0x67/0x4e0 [ 815.878672][ C1] ? io_schedule+0x120/0x120 [ 815.883650][ C1] ? security_file_permission+0xa8/0xc0 [ 815.889257][ C1] ? iov_iter_init+0x3f/0x120 [ 815.893943][ C1] vfs_write+0xc02/0xf20 [ 815.898282][ C1] ? kernel_write+0x3c0/0x3c0 [ 815.902992][ C1] ? __fget_files+0x310/0x370 [ 815.907673][ C1] ? __fdget_pos+0x1fa/0x300 [ 815.912264][ C1] ? ksys_write+0x77/0x2b0 [ 815.916678][ C1] ksys_write+0x186/0x2b0 [ 815.921011][ C1] ? __ia32_sys_read+0x90/0x90 [ 815.925788][ C1] __x64_sys_write+0x7b/0x90 [ 815.930378][ C1] do_syscall_64+0x31/0x70 [ 815.934797][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 815.940692][ C1] RIP: 0033:0x7f9380d05049 [ 815.945135][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 815.964916][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 815.973429][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 815.981606][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 815.989598][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 815.997933][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 816.006029][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 816.014191][ C1] ---[ end trace 6a7df80a272a84ee ]--- [ 816.019748][ C1] ------------[ cut here ]------------ [ 816.025209][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 816.031258][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 816.040890][ C1] Modules linked in: [ 816.044822][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 816.056534][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 816.066634][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 816.072195][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 816.091820][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 816.097916][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 816.105953][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 816.114367][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 816.122369][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 816.130367][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 816.138460][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 816.147418][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 816.154033][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 816.162035][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 816.170128][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 816.178133][ C1] Call Trace: [ 816.181459][ C1] [ 816.184338][ C1] aiptek_irq+0x19b7/0x25f0 [ 816.188953][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 816.194792][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 816.200010][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 816.205072][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 816.210476][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 816.215794][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 816.220664][ C1] dummy_timer+0x798/0x42a0 [ 816.225205][ C1] ? enqueue_timer+0x1d1/0x470 [ 816.229990][ C1] ? __mod_timer+0x995/0xde0 [ 816.234685][ C1] ? mod_timer_pending+0x30/0x30 [ 816.239645][ C1] ? __kasan_check_write+0x14/0x20 [ 816.244787][ C1] ? dummy_free_streams+0x360/0x360 [ 816.250096][ C1] ? __kasan_check_write+0x14/0x20 [ 816.255230][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 816.260349][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 816.265922][ C1] ? dummy_free_streams+0x360/0x360 [ 816.271146][ C1] call_timer_fn+0x35/0x280 [ 816.275672][ C1] ? dummy_free_streams+0x360/0x360 [ 816.280894][ C1] expire_timers+0x21f/0x3b0 [ 816.285503][ C1] __run_timers+0x548/0x680 [ 816.290021][ C1] ? enqueue_timer+0x470/0x470 [ 816.294831][ C1] run_timer_softirq+0x69/0xf0 [ 816.299622][ C1] __do_softirq+0x27e/0x598 [ 816.304161][ C1] asm_call_irq_on_stack+0xf/0x20 [ 816.309198][ C1] [ 816.312182][ C1] do_softirq_own_stack+0x60/0x80 [ 816.317257][ C1] __irq_exit_rcu+0x128/0x150 [ 816.321979][ C1] irq_exit_rcu+0x9/0x10 [ 816.326255][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 816.331912][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 816.337929][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 816.343241][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 816.362875][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 816.368970][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 816.376963][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 816.384951][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 816.392940][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 816.400928][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 816.409031][ C1] ? kernel_init_free_pages+0x87/0x100 [ 816.414528][ C1] get_page_from_freelist+0x6b5/0xa90 [ 816.419928][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 816.425320][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 816.430896][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 816.436909][ C1] pipe_write+0x580/0x1930 [ 816.441354][ C1] ? pipe_read+0x1030/0x1030 [ 816.445975][ C1] ? fsnotify_perm+0x67/0x4e0 [ 816.450675][ C1] ? io_schedule+0x120/0x120 [ 816.455279][ C1] ? security_file_permission+0xa8/0xc0 [ 816.460843][ C1] ? iov_iter_init+0x3f/0x120 [ 816.465548][ C1] vfs_write+0xc02/0xf20 [ 816.469812][ C1] ? kernel_write+0x3c0/0x3c0 [ 816.474510][ C1] ? __fget_files+0x310/0x370 [ 816.479214][ C1] ? __fdget_pos+0x1fa/0x300 [ 816.483816][ C1] ? ksys_write+0x77/0x2b0 [ 816.488338][ C1] ksys_write+0x186/0x2b0 [ 816.492680][ C1] ? __ia32_sys_read+0x90/0x90 [ 816.497473][ C1] __x64_sys_write+0x7b/0x90 [ 816.502082][ C1] do_syscall_64+0x31/0x70 [ 816.506522][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 816.512425][ C1] RIP: 0033:0x7f9380d05049 [ 816.516865][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 816.536498][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 816.544944][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 816.552942][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 816.560962][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 816.568956][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 816.576949][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 816.584943][ C1] ---[ end trace 6a7df80a272a84ef ]--- [ 816.590544][ C1] ------------[ cut here ]------------ [ 816.596017][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 816.602070][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 816.611695][ C1] Modules linked in: [ 816.615604][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 816.627309][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 816.637382][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 816.642923][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 816.662529][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 816.668600][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 816.676572][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 816.684541][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 816.692510][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 816.700488][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 816.708569][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 816.717685][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 816.724276][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 816.732255][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 816.740232][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 816.748317][ C1] Call Trace: [ 816.751594][ C1] [ 816.754453][ C1] aiptek_irq+0x19b7/0x25f0 [ 816.758967][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 816.764925][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 816.770052][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 816.775082][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 816.780455][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 816.785655][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 816.790502][ C1] dummy_timer+0x798/0x42a0 [ 816.795062][ C1] ? enqueue_timer+0x1d1/0x470 [ 816.799911][ C1] ? __mod_timer+0x995/0xde0 [ 816.804501][ C1] ? mod_timer_pending+0x30/0x30 [ 816.809440][ C1] ? __kasan_check_write+0x14/0x20 [ 816.814564][ C1] ? dummy_free_streams+0x360/0x360 [ 816.820030][ C1] ? __kasan_check_write+0x14/0x20 [ 816.825143][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 816.830331][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 816.835898][ C1] ? dummy_free_streams+0x360/0x360 [ 816.841140][ C1] call_timer_fn+0x35/0x280 [ 816.845651][ C1] ? dummy_free_streams+0x360/0x360 [ 816.850850][ C1] expire_timers+0x21f/0x3b0 [ 816.855445][ C1] __run_timers+0x548/0x680 [ 816.860053][ C1] ? enqueue_timer+0x470/0x470 [ 816.864906][ C1] run_timer_softirq+0x69/0xf0 [ 816.869672][ C1] __do_softirq+0x27e/0x598 [ 816.874184][ C1] asm_call_irq_on_stack+0xf/0x20 [ 816.879229][ C1] [ 816.882197][ C1] do_softirq_own_stack+0x60/0x80 [ 816.887310][ C1] __irq_exit_rcu+0x128/0x150 [ 816.891990][ C1] irq_exit_rcu+0x9/0x10 [ 816.896243][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 816.901878][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 816.907870][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 816.913223][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 816.932827][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 816.938932][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 816.947087][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 816.955062][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 816.963210][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 816.971183][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 816.979200][ C1] ? kernel_init_free_pages+0x87/0x100 [ 816.984690][ C1] get_page_from_freelist+0x6b5/0xa90 [ 816.990073][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 816.995456][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 817.001030][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 817.007112][ C1] pipe_write+0x580/0x1930 [ 817.011573][ C1] ? pipe_read+0x1030/0x1030 [ 817.016207][ C1] ? fsnotify_perm+0x67/0x4e0 [ 817.020913][ C1] ? io_schedule+0x120/0x120 [ 817.025526][ C1] ? security_file_permission+0xa8/0xc0 [ 817.031097][ C1] ? iov_iter_init+0x3f/0x120 [ 817.035971][ C1] vfs_write+0xc02/0xf20 [ 817.040501][ C1] ? kernel_write+0x3c0/0x3c0 [ 817.045274][ C1] ? __fget_files+0x310/0x370 [ 817.049947][ C1] ? __fdget_pos+0x1fa/0x300 [ 817.054571][ C1] ? ksys_write+0x77/0x2b0 [ 817.059159][ C1] ksys_write+0x186/0x2b0 [ 817.063517][ C1] ? __ia32_sys_read+0x90/0x90 [ 817.068416][ C1] __x64_sys_write+0x7b/0x90 [ 817.073059][ C1] do_syscall_64+0x31/0x70 [ 817.077523][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 817.083418][ C1] RIP: 0033:0x7f9380d05049 [ 817.087840][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 817.107468][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 817.116260][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 817.124238][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 817.132209][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 817.140185][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 817.148169][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 817.156152][ C1] ---[ end trace 6a7df80a272a84f0 ]--- [ 817.161770][ C1] ------------[ cut here ]------------ [ 817.167239][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 817.173287][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 817.183066][ C1] Modules linked in: [ 817.187027][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 817.198758][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 817.208861][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 817.214523][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 817.234240][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 817.240335][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 817.248322][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 817.256316][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 817.264329][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 817.272345][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 817.280519][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 817.289589][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 817.296203][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 817.304202][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 817.312198][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 817.320192][ C1] Call Trace: [ 817.323480][ C1] [ 817.326350][ C1] aiptek_irq+0x19b7/0x25f0 [ 817.330869][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 817.336817][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 817.342042][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 817.347091][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 817.352485][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 817.357726][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 817.362607][ C1] dummy_timer+0x798/0x42a0 [ 817.367133][ C1] ? enqueue_timer+0x1d1/0x470 [ 817.371910][ C1] ? __mod_timer+0x995/0xde0 [ 817.376519][ C1] ? mod_timer_pending+0x30/0x30 [ 817.381465][ C1] ? __kasan_check_write+0x14/0x20 [ 817.386598][ C1] ? dummy_free_streams+0x360/0x360 [ 817.391820][ C1] ? __kasan_check_write+0x14/0x20 [ 817.396969][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 817.402131][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 817.407710][ C1] ? dummy_free_streams+0x360/0x360 [ 817.412928][ C1] call_timer_fn+0x35/0x280 [ 817.417540][ C1] ? dummy_free_streams+0x360/0x360 [ 817.422754][ C1] expire_timers+0x21f/0x3b0 [ 817.427359][ C1] __run_timers+0x548/0x680 [ 817.431881][ C1] ? enqueue_timer+0x470/0x470 [ 817.436674][ C1] run_timer_softirq+0x69/0xf0 [ 817.441458][ C1] __do_softirq+0x27e/0x598 [ 817.445987][ C1] asm_call_irq_on_stack+0xf/0x20 [ 817.451021][ C1] [ 817.453991][ C1] do_softirq_own_stack+0x60/0x80 [ 817.459035][ C1] __irq_exit_rcu+0x128/0x150 [ 817.463807][ C1] irq_exit_rcu+0x9/0x10 [ 817.468066][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 817.473727][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 817.479721][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 817.485025][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 817.504758][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 817.510858][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 817.518861][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 817.526870][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 817.534879][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 817.543219][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 817.551229][ C1] ? kernel_init_free_pages+0x87/0x100 [ 817.556721][ C1] get_page_from_freelist+0x6b5/0xa90 [ 817.562269][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 817.567662][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 817.573229][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 817.579229][ C1] pipe_write+0x580/0x1930 [ 817.583667][ C1] ? pipe_read+0x1030/0x1030 [ 817.588277][ C1] ? fsnotify_perm+0x67/0x4e0 [ 817.592976][ C1] ? io_schedule+0x120/0x120 [ 817.597578][ C1] ? security_file_permission+0xa8/0xc0 [ 817.603159][ C1] ? iov_iter_init+0x3f/0x120 [ 817.607858][ C1] vfs_write+0xc02/0xf20 [ 817.612117][ C1] ? kernel_write+0x3c0/0x3c0 [ 817.616813][ C1] ? __fget_files+0x310/0x370 [ 817.621501][ C1] ? __fdget_pos+0x1fa/0x300 [ 817.626115][ C1] ? ksys_write+0x77/0x2b0 [ 817.630547][ C1] ksys_write+0x186/0x2b0 [ 817.634979][ C1] ? __ia32_sys_read+0x90/0x90 [ 817.639768][ C1] __x64_sys_write+0x7b/0x90 [ 817.644381][ C1] do_syscall_64+0x31/0x70 [ 817.648821][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 817.654806][ C1] RIP: 0033:0x7f9380d05049 [ 817.659233][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 817.678850][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 817.687288][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 817.695279][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 817.703269][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 817.711519][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 817.719644][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 817.727639][ C1] ---[ end trace 6a7df80a272a84f1 ]--- [ 817.733213][ C1] ------------[ cut here ]------------ [ 817.738685][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 817.744739][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 817.754366][ C1] Modules linked in: [ 817.758285][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 817.770248][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 817.780318][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 817.785885][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 817.805501][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 817.811670][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 817.819641][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 817.827621][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 817.835597][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 817.843587][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 817.851571][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 817.860506][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 817.867089][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 817.875169][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 817.883161][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 817.891148][ C1] Call Trace: [ 817.894420][ C1] [ 817.897283][ C1] aiptek_irq+0x19b7/0x25f0 [ 817.901791][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 817.907615][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 817.912725][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 817.917745][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 817.923120][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 817.928328][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 817.933188][ C1] dummy_timer+0x798/0x42a0 [ 817.937706][ C1] ? enqueue_timer+0x1d1/0x470 [ 817.942475][ C1] ? __mod_timer+0x995/0xde0 [ 817.947102][ C1] ? mod_timer_pending+0x30/0x30 [ 817.952048][ C1] ? __kasan_check_write+0x14/0x20 [ 817.957161][ C1] ? dummy_free_streams+0x360/0x360 [ 817.962352][ C1] ? __kasan_check_write+0x14/0x20 [ 817.967629][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 817.972747][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 817.978292][ C1] ? dummy_free_streams+0x360/0x360 [ 817.983484][ C1] call_timer_fn+0x35/0x280 [ 817.988002][ C1] ? dummy_free_streams+0x360/0x360 [ 817.993200][ C1] expire_timers+0x21f/0x3b0 [ 817.997791][ C1] __run_timers+0x548/0x680 [ 818.002344][ C1] ? enqueue_timer+0x470/0x470 [ 818.007110][ C1] run_timer_softirq+0x69/0xf0 [ 818.011881][ C1] __do_softirq+0x27e/0x598 [ 818.016390][ C1] asm_call_irq_on_stack+0xf/0x20 [ 818.021403][ C1] [ 818.024346][ C1] do_softirq_own_stack+0x60/0x80 [ 818.029369][ C1] __irq_exit_rcu+0x128/0x150 [ 818.034076][ C1] irq_exit_rcu+0x9/0x10 [ 818.038317][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 818.043977][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 818.050126][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 818.055515][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 818.075240][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 818.081306][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 818.089417][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 818.097493][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 818.105467][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 818.113433][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 818.121417][ C1] ? kernel_init_free_pages+0x87/0x100 [ 818.126866][ C1] get_page_from_freelist+0x6b5/0xa90 [ 818.132231][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 818.137596][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 818.143142][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 818.149119][ C1] pipe_write+0x580/0x1930 [ 818.153557][ C1] ? pipe_read+0x1030/0x1030 [ 818.158132][ C1] ? fsnotify_perm+0x67/0x4e0 [ 818.162807][ C1] ? io_schedule+0x120/0x120 [ 818.167419][ C1] ? security_file_permission+0xa8/0xc0 [ 818.172960][ C1] ? iov_iter_init+0x3f/0x120 [ 818.177719][ C1] vfs_write+0xc02/0xf20 [ 818.181963][ C1] ? kernel_write+0x3c0/0x3c0 [ 818.186635][ C1] ? __fget_files+0x310/0x370 [ 818.191305][ C1] ? __fdget_pos+0x1fa/0x300 [ 818.195889][ C1] ? ksys_write+0x77/0x2b0 [ 818.200300][ C1] ksys_write+0x186/0x2b0 [ 818.204629][ C1] ? __ia32_sys_read+0x90/0x90 [ 818.209652][ C1] __x64_sys_write+0x7b/0x90 [ 818.214261][ C1] do_syscall_64+0x31/0x70 [ 818.218671][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 818.224574][ C1] RIP: 0033:0x7f9380d05049 [ 818.229000][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 818.248605][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 818.257028][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 818.265003][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 818.272971][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 818.280936][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 818.288965][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 818.296951][ C1] ---[ end trace 6a7df80a272a84f2 ]--- [ 818.302610][ C1] ------------[ cut here ]------------ [ 818.308077][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 818.314137][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 818.323773][ C1] Modules linked in: [ 818.327702][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 818.339425][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 818.349616][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 818.355181][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 818.374837][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 818.380928][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 818.388927][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 818.397009][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee2a5d8 [ 818.405004][ C1] R10: ffffed103ee2a5d8 R11: 0000000000000000 R12: ffff88810db870c8 [ 818.412998][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 818.420998][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 818.429948][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 818.436540][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 818.444530][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 818.452531][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 818.460511][ C1] Call Trace: [ 818.463797][ C1] [ 818.466668][ C1] aiptek_irq+0x19b7/0x25f0 [ 818.471178][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 818.476998][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 818.482333][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 818.487402][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 818.492808][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 818.498029][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 818.502920][ C1] dummy_timer+0x798/0x42a0 [ 818.507448][ C1] ? enqueue_timer+0x1d1/0x470 [ 818.512238][ C1] ? __mod_timer+0x995/0xde0 [ 818.516842][ C1] ? mod_timer_pending+0x30/0x30 [ 818.521792][ C1] ? __kasan_check_write+0x14/0x20 [ 818.526936][ C1] ? dummy_free_streams+0x360/0x360 [ 818.532157][ C1] ? __kasan_check_write+0x14/0x20 [ 818.537282][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 818.542403][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 818.547964][ C1] ? dummy_free_streams+0x360/0x360 [ 818.553191][ C1] call_timer_fn+0x35/0x280 [ 818.557706][ C1] ? dummy_free_streams+0x360/0x360 [ 818.562924][ C1] expire_timers+0x21f/0x3b0 [ 818.567527][ C1] __run_timers+0x548/0x680 [ 818.572052][ C1] ? enqueue_timer+0x470/0x470 [ 818.576821][ C1] run_timer_softirq+0x69/0xf0 [ 818.581594][ C1] __do_softirq+0x27e/0x598 [ 818.586109][ C1] asm_call_irq_on_stack+0xf/0x20 [ 818.591133][ C1] [ 818.594085][ C1] do_softirq_own_stack+0x60/0x80 [ 818.599121][ C1] __irq_exit_rcu+0x128/0x150 [ 818.603813][ C1] irq_exit_rcu+0x9/0x10 [ 818.608075][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 818.613726][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 818.619729][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 818.625027][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 818.644652][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 818.650745][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 818.658736][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 818.666730][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 818.674728][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 818.682727][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 818.690741][ C1] ? kernel_init_free_pages+0x87/0x100 [ 818.696233][ C1] get_page_from_freelist+0x6b5/0xa90 [ 818.701627][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 818.707019][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 818.712574][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 818.718572][ C1] pipe_write+0x580/0x1930 [ 818.723098][ C1] ? pipe_read+0x1030/0x1030 [ 818.727696][ C1] ? fsnotify_perm+0x67/0x4e0 [ 818.732386][ C1] ? io_schedule+0x120/0x120 [ 818.736990][ C1] ? security_file_permission+0xa8/0xc0 [ 818.742558][ C1] ? iov_iter_init+0x3f/0x120 [ 818.747255][ C1] vfs_write+0xc02/0xf20 [ 818.751519][ C1] ? kernel_write+0x3c0/0x3c0 [ 818.756403][ C1] ? __fget_files+0x310/0x370 [ 818.761100][ C1] ? __fdget_pos+0x1fa/0x300 [ 818.765809][ C1] ? ksys_write+0x77/0x2b0 [ 818.770257][ C1] ksys_write+0x186/0x2b0 [ 818.774616][ C1] ? __ia32_sys_read+0x90/0x90 [ 818.779395][ C1] __x64_sys_write+0x7b/0x90 [ 818.783996][ C1] do_syscall_64+0x31/0x70 [ 818.788428][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 818.794349][ C1] RIP: 0033:0x7f9380d05049 [ 818.798787][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 818.818630][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 818.827071][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 818.835150][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 818.843158][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 818.851158][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 818.859159][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 818.867175][ C1] ---[ end trace 6a7df80a272a84f3 ]--- [ 818.873097][ C1] ------------[ cut here ]------------ [ 818.878574][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 818.884604][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 818.894270][ C1] Modules linked in: [ 818.898175][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 818.909870][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 818.919941][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 818.925582][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 818.945329][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 818.951401][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 818.959424][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 818.967391][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 818.975475][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 818.983454][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 818.991438][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 819.000383][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 819.006987][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 819.014961][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 819.022935][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 819.030921][ C1] Call Trace: [ 819.034221][ C1] [ 819.037091][ C1] aiptek_irq+0x19b7/0x25f0 [ 819.041601][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 819.047425][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 819.052562][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 819.057705][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 819.063134][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 819.068346][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 819.073195][ C1] dummy_timer+0x798/0x42a0 [ 819.077697][ C1] ? __mod_timer+0x995/0xde0 [ 819.082295][ C1] ? prandom_u32+0x254/0x380 [ 819.086904][ C1] ? __kasan_check_write+0x14/0x20 [ 819.092032][ C1] ? dummy_free_streams+0x360/0x360 [ 819.097586][ C1] ? __kasan_check_write+0x14/0x20 [ 819.102707][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 819.107836][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 819.113392][ C1] ? dummy_free_streams+0x360/0x360 [ 819.118595][ C1] call_timer_fn+0x35/0x280 [ 819.123097][ C1] ? dummy_free_streams+0x360/0x360 [ 819.128322][ C1] expire_timers+0x21f/0x3b0 [ 819.132908][ C1] __run_timers+0x548/0x680 [ 819.137410][ C1] ? enqueue_timer+0x470/0x470 [ 819.142189][ C1] run_timer_softirq+0x69/0xf0 [ 819.146951][ C1] __do_softirq+0x27e/0x598 [ 819.151459][ C1] asm_call_irq_on_stack+0xf/0x20 [ 819.156472][ C1] [ 819.159431][ C1] do_softirq_own_stack+0x60/0x80 [ 819.164452][ C1] __irq_exit_rcu+0x128/0x150 [ 819.169215][ C1] irq_exit_rcu+0x9/0x10 [ 819.173460][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 819.179095][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 819.185106][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 819.190390][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 819.209995][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 819.216063][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 819.224028][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 819.232001][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 819.239985][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 819.247961][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 819.255960][ C1] ? kernel_init_free_pages+0x87/0x100 [ 819.261446][ C1] get_page_from_freelist+0x6b5/0xa90 [ 819.266920][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 819.272327][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 819.277984][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 819.283964][ C1] pipe_write+0x580/0x1930 [ 819.288388][ C1] ? pipe_read+0x1030/0x1030 [ 819.292977][ C1] ? fsnotify_perm+0x67/0x4e0 [ 819.297662][ C1] ? io_schedule+0x120/0x120 [ 819.302252][ C1] ? security_file_permission+0xa8/0xc0 [ 819.307881][ C1] ? iov_iter_init+0x3f/0x120 [ 819.312558][ C1] vfs_write+0xc02/0xf20 [ 819.316793][ C1] ? kernel_write+0x3c0/0x3c0 [ 819.321462][ C1] ? __fget_files+0x310/0x370 [ 819.326142][ C1] ? __fdget_pos+0x1fa/0x300 [ 819.330727][ C1] ? ksys_write+0x77/0x2b0 [ 819.335141][ C1] ksys_write+0x186/0x2b0 [ 819.339469][ C1] ? __ia32_sys_read+0x90/0x90 [ 819.344228][ C1] __x64_sys_write+0x7b/0x90 [ 819.348816][ C1] do_syscall_64+0x31/0x70 [ 819.353232][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 819.359113][ C1] RIP: 0033:0x7f9380d05049 [ 819.363564][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 819.383170][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 819.391665][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 819.399662][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 819.407637][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 819.415606][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 819.423578][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 819.431554][ C1] ---[ end trace 6a7df80a272a84f4 ]--- [ 819.437226][ C1] ------------[ cut here ]------------ [ 819.442700][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 819.448755][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 819.458386][ C1] Modules linked in: [ 819.462309][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 819.474025][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 819.484122][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 819.489685][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 819.509308][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 819.515395][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 819.523388][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 819.531382][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 819.539372][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 819.547363][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 819.555355][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 819.564306][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 819.570911][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 819.578990][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 819.586983][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 819.594968][ C1] Call Trace: [ 819.598268][ C1] [ 819.601142][ C1] aiptek_irq+0x19b7/0x25f0 [ 819.605668][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 819.611492][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 819.616625][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 819.621676][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 819.627078][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 819.632301][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 819.637178][ C1] dummy_timer+0x798/0x42a0 [ 819.641702][ C1] ? __kasan_check_read+0x11/0x20 [ 819.646834][ C1] ? __kasan_check_write+0x14/0x20 [ 819.651977][ C1] ? __kasan_check_write+0x14/0x20 [ 819.657100][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 819.662314][ C1] ? dummy_free_streams+0x360/0x360 [ 819.667527][ C1] ? __kasan_check_write+0x14/0x20 [ 819.672656][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 819.677791][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 819.683355][ C1] ? dummy_free_streams+0x360/0x360 [ 819.688591][ C1] call_timer_fn+0x35/0x280 [ 819.693125][ C1] ? dummy_free_streams+0x360/0x360 [ 819.698345][ C1] expire_timers+0x21f/0x3b0 [ 819.702963][ C1] __run_timers+0x548/0x680 [ 819.707483][ C1] ? enqueue_timer+0x470/0x470 [ 819.712274][ C1] run_timer_softirq+0x69/0xf0 [ 819.717056][ C1] __do_softirq+0x27e/0x598 [ 819.721574][ C1] asm_call_irq_on_stack+0xf/0x20 [ 819.726594][ C1] [ 819.729548][ C1] do_softirq_own_stack+0x60/0x80 [ 819.734585][ C1] __irq_exit_rcu+0x128/0x150 [ 819.739280][ C1] irq_exit_rcu+0x9/0x10 [ 819.743542][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 819.749197][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 819.755204][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 819.760502][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 819.780210][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 819.786297][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 819.794288][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 819.802275][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 819.810262][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 819.818253][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 819.826369][ C1] ? kernel_init_free_pages+0x87/0x100 [ 819.831854][ C1] get_page_from_freelist+0x6b5/0xa90 [ 819.837255][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 819.842646][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 819.848215][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 819.854225][ C1] pipe_write+0x580/0x1930 [ 819.858668][ C1] ? pipe_read+0x1030/0x1030 [ 819.863294][ C1] ? fsnotify_perm+0x67/0x4e0 [ 819.868000][ C1] ? io_schedule+0x120/0x120 [ 819.872698][ C1] ? security_file_permission+0xa8/0xc0 [ 819.878266][ C1] ? iov_iter_init+0x3f/0x120 [ 819.882965][ C1] vfs_write+0xc02/0xf20 [ 819.887230][ C1] ? kernel_write+0x3c0/0x3c0 [ 819.891926][ C1] ? __fget_files+0x310/0x370 [ 819.896613][ C1] ? __fdget_pos+0x1fa/0x300 [ 819.901221][ C1] ? ksys_write+0x77/0x2b0 [ 819.905656][ C1] ksys_write+0x186/0x2b0 [ 819.910002][ C1] ? __ia32_sys_read+0x90/0x90 [ 819.914776][ C1] __x64_sys_write+0x7b/0x90 [ 819.919391][ C1] do_syscall_64+0x31/0x70 [ 819.923816][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 819.929721][ C1] RIP: 0033:0x7f9380d05049 [ 819.934258][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 819.953882][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 819.962340][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 819.970341][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 819.978338][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 819.986431][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 819.994529][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 820.002526][ C1] ---[ end trace 6a7df80a272a84f5 ]--- [ 820.008097][ C1] ------------[ cut here ]------------ [ 820.013613][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 820.019644][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 820.029347][ C1] Modules linked in: [ 820.033247][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 820.044947][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 820.055024][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 820.060575][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 820.080349][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 820.086413][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 820.094383][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 820.102352][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 820.110317][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 820.118290][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 820.126271][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 820.135214][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 820.141828][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 820.149808][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 820.157766][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 820.165720][ C1] Call Trace: [ 820.168989][ C1] [ 820.171849][ C1] aiptek_irq+0x19b7/0x25f0 [ 820.176343][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 820.182147][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 820.187255][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 820.192272][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 820.197678][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 820.202867][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 820.207721][ C1] dummy_timer+0x798/0x42a0 [ 820.212224][ C1] ? __kasan_check_read+0x11/0x20 [ 820.217336][ C1] ? __kasan_check_write+0x14/0x20 [ 820.222450][ C1] ? __kasan_check_write+0x14/0x20 [ 820.227570][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 820.232770][ C1] ? dummy_free_streams+0x360/0x360 [ 820.237967][ C1] ? __kasan_check_write+0x14/0x20 [ 820.243079][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 820.248196][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 820.253741][ C1] ? dummy_free_streams+0x360/0x360 [ 820.258938][ C1] call_timer_fn+0x35/0x280 [ 820.263448][ C1] ? dummy_free_streams+0x360/0x360 [ 820.268638][ C1] expire_timers+0x21f/0x3b0 [ 820.273236][ C1] __run_timers+0x548/0x680 [ 820.277835][ C1] ? enqueue_timer+0x470/0x470 [ 820.282600][ C1] run_timer_softirq+0x69/0xf0 [ 820.287374][ C1] __do_softirq+0x27e/0x598 [ 820.291868][ C1] asm_call_irq_on_stack+0xf/0x20 [ 820.296918][ C1] [ 820.299858][ C1] do_softirq_own_stack+0x60/0x80 [ 820.304881][ C1] __irq_exit_rcu+0x128/0x150 [ 820.309552][ C1] irq_exit_rcu+0x9/0x10 [ 820.313813][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 820.319447][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 820.325439][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 820.330718][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 820.350343][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 820.356417][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 820.364389][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 820.372357][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 820.380320][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 820.388293][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 820.396282][ C1] ? kernel_init_free_pages+0x87/0x100 [ 820.401730][ C1] get_page_from_freelist+0x6b5/0xa90 [ 820.407106][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 820.412470][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 820.418010][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 820.423999][ C1] pipe_write+0x580/0x1930 [ 820.428495][ C1] ? pipe_read+0x1030/0x1030 [ 820.433097][ C1] ? fsnotify_perm+0x67/0x4e0 [ 820.437786][ C1] ? io_schedule+0x120/0x120 [ 820.442381][ C1] ? security_file_permission+0xa8/0xc0 [ 820.447934][ C1] ? iov_iter_init+0x3f/0x120 [ 820.452624][ C1] vfs_write+0xc02/0xf20 [ 820.456866][ C1] ? kernel_write+0x3c0/0x3c0 [ 820.461542][ C1] ? __fget_files+0x310/0x370 [ 820.466254][ C1] ? __fdget_pos+0x1fa/0x300 [ 820.470855][ C1] ? ksys_write+0x77/0x2b0 [ 820.475274][ C1] ksys_write+0x186/0x2b0 [ 820.479601][ C1] ? __ia32_sys_read+0x90/0x90 [ 820.484376][ C1] __x64_sys_write+0x7b/0x90 [ 820.488969][ C1] do_syscall_64+0x31/0x70 [ 820.493390][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 820.499304][ C1] RIP: 0033:0x7f9380d05049 [ 820.503731][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 820.523335][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 820.531746][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 820.539705][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 820.547669][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 820.555634][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 820.563605][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 820.571660][ C1] ---[ end trace 6a7df80a272a84f6 ]--- [ 820.577247][ C1] ------------[ cut here ]------------ [ 820.582713][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 820.588760][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 820.598389][ C1] Modules linked in: [ 820.602312][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 820.614032][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 820.624216][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 820.629891][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 820.650307][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 820.656402][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 820.664395][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 820.672385][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 820.680390][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 820.688567][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 820.696575][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 820.705520][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 820.712131][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 820.720127][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 820.728112][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 820.736124][ C1] Call Trace: [ 820.739509][ C1] [ 820.742382][ C1] aiptek_irq+0x19b7/0x25f0 [ 820.746907][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 820.752734][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 820.757859][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 820.762903][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 820.768294][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 820.773516][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 820.778489][ C1] dummy_timer+0x798/0x42a0 [ 820.783014][ C1] ? enqueue_timer+0x1d1/0x470 [ 820.787799][ C1] ? __mod_timer+0x995/0xde0 [ 820.792409][ C1] ? mod_timer_pending+0x30/0x30 [ 820.797369][ C1] ? __kasan_check_write+0x14/0x20 [ 820.802509][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 820.807737][ C1] ? dummy_free_streams+0x360/0x360 [ 820.812951][ C1] ? __kasan_check_write+0x14/0x20 [ 820.818080][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 820.823212][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 820.828786][ C1] ? dummy_free_streams+0x360/0x360 [ 820.834013][ C1] call_timer_fn+0x35/0x280 [ 820.838553][ C1] ? dummy_free_streams+0x360/0x360 [ 820.843779][ C1] expire_timers+0x21f/0x3b0 [ 820.848401][ C1] __run_timers+0x548/0x680 [ 820.852928][ C1] ? enqueue_timer+0x470/0x470 [ 820.857722][ C1] run_timer_softirq+0x69/0xf0 [ 820.862508][ C1] __do_softirq+0x27e/0x598 [ 820.867035][ C1] asm_call_irq_on_stack+0xf/0x20 [ 820.872059][ C1] [ 820.875010][ C1] do_softirq_own_stack+0x60/0x80 [ 820.880057][ C1] __irq_exit_rcu+0x128/0x150 [ 820.884759][ C1] irq_exit_rcu+0x9/0x10 [ 820.889017][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 820.894668][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 820.900665][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 820.905963][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 820.925587][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 820.931677][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 820.939666][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 820.947664][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 820.955665][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 820.963660][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 820.971672][ C1] ? kernel_init_free_pages+0x87/0x100 [ 820.977185][ C1] get_page_from_freelist+0x6b5/0xa90 [ 820.982687][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 820.988089][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 820.993656][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 820.999673][ C1] pipe_write+0x580/0x1930 [ 821.004200][ C1] ? pipe_read+0x1030/0x1030 [ 821.008802][ C1] ? fsnotify_perm+0x67/0x4e0 [ 821.013494][ C1] ? io_schedule+0x120/0x120 [ 821.018099][ C1] ? security_file_permission+0xa8/0xc0 [ 821.023661][ C1] ? iov_iter_init+0x3f/0x120 [ 821.028355][ C1] vfs_write+0xc02/0xf20 [ 821.032614][ C1] ? kernel_write+0x3c0/0x3c0 [ 821.037315][ C1] ? __fget_files+0x310/0x370 [ 821.042049][ C1] ? __fdget_pos+0x1fa/0x300 [ 821.046668][ C1] ? ksys_write+0x77/0x2b0 [ 821.051111][ C1] ksys_write+0x186/0x2b0 [ 821.055467][ C1] ? __ia32_sys_read+0x90/0x90 [ 821.060249][ C1] __x64_sys_write+0x7b/0x90 [ 821.064864][ C1] do_syscall_64+0x31/0x70 [ 821.069302][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 821.075292][ C1] RIP: 0033:0x7f9380d05049 [ 821.079720][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 821.099343][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 821.107873][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 821.115879][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 821.123909][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 821.131993][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 821.139992][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 821.147988][ C1] ---[ end trace 6a7df80a272a84f7 ]--- [ 821.153666][ C1] ------------[ cut here ]------------ [ 821.159126][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 821.165138][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 821.174749][ C1] Modules linked in: [ 821.178643][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 821.190338][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 821.200415][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 821.205956][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 821.225566][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 821.231636][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 821.239615][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 821.247719][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 821.255723][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 821.263692][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 821.271660][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 821.280587][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 821.287257][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 821.295234][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 821.303230][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 821.311194][ C1] Call Trace: [ 821.314466][ C1] [ 821.317332][ C1] aiptek_irq+0x19b7/0x25f0 [ 821.321830][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 821.327636][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 821.332745][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 821.337780][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 821.343152][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 821.348343][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 821.353183][ C1] dummy_timer+0x798/0x42a0 [ 821.357730][ C1] ? enqueue_timer+0x1d1/0x470 [ 821.362496][ C1] ? __mod_timer+0x995/0xde0 [ 821.367094][ C1] ? mod_timer_pending+0x30/0x30 [ 821.372055][ C1] ? __kasan_check_write+0x14/0x20 [ 821.377198][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 821.382399][ C1] ? dummy_free_streams+0x360/0x360 [ 821.387638][ C1] ? __kasan_check_write+0x14/0x20 [ 821.392756][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 821.397868][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 821.403421][ C1] ? dummy_free_streams+0x360/0x360 [ 821.408617][ C1] call_timer_fn+0x35/0x280 [ 821.413122][ C1] ? dummy_free_streams+0x360/0x360 [ 821.418362][ C1] expire_timers+0x21f/0x3b0 [ 821.422969][ C1] __run_timers+0x548/0x680 [ 821.427498][ C1] ? enqueue_timer+0x470/0x470 [ 821.432265][ C1] run_timer_softirq+0x69/0xf0 [ 821.437034][ C1] __do_softirq+0x27e/0x598 [ 821.441539][ C1] asm_call_irq_on_stack+0xf/0x20 [ 821.446558][ C1] [ 821.449504][ C1] do_softirq_own_stack+0x60/0x80 [ 821.454522][ C1] __irq_exit_rcu+0x128/0x150 [ 821.459200][ C1] irq_exit_rcu+0x9/0x10 [ 821.463449][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 821.469089][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 821.475078][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 821.480359][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 821.500071][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 821.506150][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 821.514142][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 821.522199][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 821.530172][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 821.538139][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 821.546155][ C1] ? kernel_init_free_pages+0x87/0x100 [ 821.551619][ C1] get_page_from_freelist+0x6b5/0xa90 [ 821.557007][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 821.562472][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 821.568022][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 821.574004][ C1] pipe_write+0x580/0x1930 [ 821.578420][ C1] ? pipe_read+0x1030/0x1030 [ 821.583007][ C1] ? fsnotify_perm+0x67/0x4e0 [ 821.587712][ C1] ? io_schedule+0x120/0x120 [ 821.592299][ C1] ? security_file_permission+0xa8/0xc0 [ 821.597869][ C1] ? iov_iter_init+0x3f/0x120 [ 821.602548][ C1] vfs_write+0xc02/0xf20 [ 821.606885][ C1] ? kernel_write+0x3c0/0x3c0 [ 821.611560][ C1] ? __fget_files+0x310/0x370 [ 821.616244][ C1] ? __fdget_pos+0x1fa/0x300 [ 821.620845][ C1] ? ksys_write+0x77/0x2b0 [ 821.625258][ C1] ksys_write+0x186/0x2b0 [ 821.629588][ C1] ? __ia32_sys_read+0x90/0x90 [ 821.634463][ C1] __x64_sys_write+0x7b/0x90 [ 821.639074][ C1] do_syscall_64+0x31/0x70 [ 821.643491][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 821.649384][ C1] RIP: 0033:0x7f9380d05049 [ 821.653804][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 821.673414][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 821.681829][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 821.689805][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 821.697777][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 821.705777][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 821.713751][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 821.721725][ C1] ---[ end trace 6a7df80a272a84f8 ]--- [ 821.727335][ C1] ------------[ cut here ]------------ [ 821.732814][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 821.738972][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 821.748690][ C1] Modules linked in: [ 821.752618][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 821.764347][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 821.774454][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 821.780023][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 821.799649][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 821.805760][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 821.813787][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 821.821783][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee2a5d8 [ 821.829770][ C1] R10: ffffed103ee2a5d8 R11: 0000000000000000 R12: ffff88810db870c8 [ 821.837765][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 821.845762][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 821.854720][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 821.861415][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 821.869686][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 821.877709][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 821.885698][ C1] Call Trace: [ 821.888992][ C1] [ 821.891878][ C1] aiptek_irq+0x19b7/0x25f0 [ 821.896413][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 821.902258][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 821.907398][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 821.912459][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 821.917859][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 821.923086][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 821.927951][ C1] dummy_timer+0x798/0x42a0 [ 821.932466][ C1] ? enqueue_timer+0x1d1/0x470 [ 821.937377][ C1] ? __mod_timer+0x995/0xde0 [ 821.942010][ C1] ? mod_timer_pending+0x30/0x30 [ 821.946966][ C1] ? __kasan_check_write+0x14/0x20 [ 821.952106][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 821.957323][ C1] ? dummy_free_streams+0x360/0x360 [ 821.962538][ C1] ? __kasan_check_write+0x14/0x20 [ 821.967682][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 821.972818][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 821.978385][ C1] ? dummy_free_streams+0x360/0x360 [ 821.983607][ C1] call_timer_fn+0x35/0x280 [ 821.988135][ C1] ? dummy_free_streams+0x360/0x360 [ 821.993356][ C1] expire_timers+0x21f/0x3b0 [ 821.997971][ C1] __run_timers+0x548/0x680 [ 822.002500][ C1] ? enqueue_timer+0x470/0x470 [ 822.007289][ C1] run_timer_softirq+0x69/0xf0 [ 822.012075][ C1] __do_softirq+0x27e/0x598 [ 822.016599][ C1] asm_call_irq_on_stack+0xf/0x20 [ 822.021623][ C1] [ 822.024591][ C1] do_softirq_own_stack+0x60/0x80 [ 822.029646][ C1] __irq_exit_rcu+0x128/0x150 [ 822.034337][ C1] irq_exit_rcu+0x9/0x10 [ 822.038600][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 822.044251][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 822.050263][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 822.055562][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 822.075194][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 822.081281][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 822.089273][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 822.097360][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 822.105354][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 822.113343][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 822.121362][ C1] ? kernel_init_free_pages+0x87/0x100 [ 822.126863][ C1] get_page_from_freelist+0x6b5/0xa90 [ 822.132359][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 822.137771][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 822.143365][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 822.149378][ C1] pipe_write+0x580/0x1930 [ 822.153820][ C1] ? pipe_read+0x1030/0x1030 [ 822.158435][ C1] ? fsnotify_perm+0x67/0x4e0 [ 822.163133][ C1] ? io_schedule+0x120/0x120 [ 822.167747][ C1] ? security_file_permission+0xa8/0xc0 [ 822.173307][ C1] ? iov_iter_init+0x3f/0x120 [ 822.177996][ C1] vfs_write+0xc02/0xf20 [ 822.182260][ C1] ? kernel_write+0x3c0/0x3c0 [ 822.186958][ C1] ? __fget_files+0x310/0x370 [ 822.191660][ C1] ? __fdget_pos+0x1fa/0x300 [ 822.196278][ C1] ? ksys_write+0x77/0x2b0 [ 822.200717][ C1] ksys_write+0x186/0x2b0 [ 822.205149][ C1] ? __ia32_sys_read+0x90/0x90 [ 822.209930][ C1] __x64_sys_write+0x7b/0x90 [ 822.214543][ C1] do_syscall_64+0x31/0x70 [ 822.218974][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 822.224888][ C1] RIP: 0033:0x7f9380d05049 [ 822.229323][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 822.248951][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 822.257387][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 822.265375][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 822.273376][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 822.281385][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 822.289380][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 822.297473][ C1] ---[ end trace 6a7df80a272a84f9 ]--- [ 822.303078][ C1] ------------[ cut here ]------------ [ 822.308545][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 822.314593][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 822.324224][ C1] Modules linked in: [ 822.328124][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 822.339818][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 822.349880][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 822.355424][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 822.375020][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 822.381080][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 822.389042][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 822.397010][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 822.404977][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 822.413054][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 822.421022][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 822.430030][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 822.436628][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 822.444596][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 822.452568][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 822.460529][ C1] Call Trace: [ 822.463812][ C1] [ 822.466677][ C1] aiptek_irq+0x19b7/0x25f0 [ 822.471175][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 822.476974][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 822.482081][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 822.487097][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 822.492468][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 822.497663][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 822.502522][ C1] dummy_timer+0x798/0x42a0 [ 822.507048][ C1] ? enqueue_timer+0x1d1/0x470 [ 822.511806][ C1] ? __mod_timer+0x995/0xde0 [ 822.516393][ C1] ? mod_timer_pending+0x30/0x30 [ 822.521345][ C1] ? __kasan_check_write+0x14/0x20 [ 822.526459][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 822.531659][ C1] ? dummy_free_streams+0x360/0x360 [ 822.536865][ C1] ? __kasan_check_write+0x14/0x20 [ 822.541996][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 822.547121][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 822.552670][ C1] ? dummy_free_streams+0x360/0x360 [ 822.557866][ C1] call_timer_fn+0x35/0x280 [ 822.562361][ C1] ? dummy_free_streams+0x360/0x360 [ 822.567564][ C1] expire_timers+0x21f/0x3b0 [ 822.572242][ C1] __run_timers+0x548/0x680 [ 822.576749][ C1] ? enqueue_timer+0x470/0x470 [ 822.581508][ C1] run_timer_softirq+0x69/0xf0 [ 822.586270][ C1] __do_softirq+0x27e/0x598 [ 822.590889][ C1] asm_call_irq_on_stack+0xf/0x20 [ 822.595914][ C1] [ 822.598869][ C1] do_softirq_own_stack+0x60/0x80 [ 822.604012][ C1] __irq_exit_rcu+0x128/0x150 [ 822.608689][ C1] irq_exit_rcu+0x9/0x10 [ 822.612967][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 822.618595][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 822.624570][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 822.629845][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 822.649453][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 822.655519][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 822.663479][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 822.671446][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 822.679429][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 822.687493][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 822.695486][ C1] ? kernel_init_free_pages+0x87/0x100 [ 822.700936][ C1] get_page_from_freelist+0x6b5/0xa90 [ 822.706309][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 822.711683][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 822.717224][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 822.723324][ C1] pipe_write+0x580/0x1930 [ 822.727742][ C1] ? pipe_read+0x1030/0x1030 [ 822.732323][ C1] ? fsnotify_perm+0x67/0x4e0 [ 822.737101][ C1] ? io_schedule+0x120/0x120 [ 822.741685][ C1] ? security_file_permission+0xa8/0xc0 [ 822.747226][ C1] ? iov_iter_init+0x3f/0x120 [ 822.751895][ C1] vfs_write+0xc02/0xf20 [ 822.756136][ C1] ? kernel_write+0x3c0/0x3c0 [ 822.760823][ C1] ? __fget_files+0x310/0x370 [ 822.765530][ C1] ? __fdget_pos+0x1fa/0x300 [ 822.770257][ C1] ? ksys_write+0x77/0x2b0 [ 822.774686][ C1] ksys_write+0x186/0x2b0 [ 822.779019][ C1] ? __ia32_sys_read+0x90/0x90 [ 822.783911][ C1] __x64_sys_write+0x7b/0x90 [ 822.788511][ C1] do_syscall_64+0x31/0x70 [ 822.792921][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 822.798809][ C1] RIP: 0033:0x7f9380d05049 [ 822.803318][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 822.823137][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 822.831572][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 822.839552][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 822.847550][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 822.855533][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 822.863502][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 822.871563][ C1] ---[ end trace 6a7df80a272a84fa ]--- [ 822.877231][ C1] ------------[ cut here ]------------ [ 822.883404][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 822.889440][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 822.899066][ C1] Modules linked in: [ 822.902991][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 822.914713][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 822.924821][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 822.930383][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 822.950008][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 822.956103][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 822.964126][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 822.972118][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 822.980110][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 822.988099][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 822.996097][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 823.005049][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 823.011644][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 823.019659][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 823.027840][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 823.035832][ C1] Call Trace: [ 823.039218][ C1] [ 823.042101][ C1] aiptek_irq+0x19b7/0x25f0 [ 823.046652][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 823.052475][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 823.057644][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 823.062695][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 823.068096][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 823.073323][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 823.078205][ C1] dummy_timer+0x798/0x42a0 [ 823.082738][ C1] ? enqueue_timer+0x1d1/0x470 [ 823.087849][ C1] ? __mod_timer+0x995/0xde0 [ 823.092473][ C1] ? mod_timer_pending+0x30/0x30 [ 823.097444][ C1] ? __kasan_check_write+0x14/0x20 [ 823.102648][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 823.107875][ C1] ? dummy_free_streams+0x360/0x360 [ 823.113105][ C1] ? __kasan_check_write+0x14/0x20 [ 823.118234][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 823.123369][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 823.128963][ C1] ? dummy_free_streams+0x360/0x360 [ 823.134280][ C1] call_timer_fn+0x35/0x280 [ 823.138900][ C1] ? dummy_free_streams+0x360/0x360 [ 823.144119][ C1] expire_timers+0x21f/0x3b0 [ 823.148732][ C1] __run_timers+0x548/0x680 [ 823.153250][ C1] ? enqueue_timer+0x470/0x470 [ 823.158023][ C1] run_timer_softirq+0x69/0xf0 [ 823.162819][ C1] __do_softirq+0x27e/0x598 [ 823.167345][ C1] asm_call_irq_on_stack+0xf/0x20 [ 823.172379][ C1] [ 823.175338][ C1] do_softirq_own_stack+0x60/0x80 [ 823.180384][ C1] __irq_exit_rcu+0x128/0x150 [ 823.185076][ C1] irq_exit_rcu+0x9/0x10 [ 823.189342][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 823.195003][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 823.201100][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 823.206406][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 823.226033][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 823.232127][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 823.240118][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 823.248123][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 823.256209][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 823.264203][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 823.272209][ C1] ? kernel_init_free_pages+0x87/0x100 [ 823.277687][ C1] get_page_from_freelist+0x6b5/0xa90 [ 823.283092][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 823.288502][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 823.294077][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 823.300109][ C1] pipe_write+0x580/0x1930 [ 823.304570][ C1] ? pipe_read+0x1030/0x1030 [ 823.309359][ C1] ? fsnotify_perm+0x67/0x4e0 [ 823.314117][ C1] ? io_schedule+0x120/0x120 [ 823.318735][ C1] ? security_file_permission+0xa8/0xc0 [ 823.324311][ C1] ? iov_iter_init+0x3f/0x120 [ 823.329023][ C1] vfs_write+0xc02/0xf20 [ 823.333312][ C1] ? kernel_write+0x3c0/0x3c0 [ 823.338004][ C1] ? __fget_files+0x310/0x370 [ 823.342852][ C1] ? __fdget_pos+0x1fa/0x300 [ 823.347468][ C1] ? ksys_write+0x77/0x2b0 [ 823.351912][ C1] ksys_write+0x186/0x2b0 [ 823.356270][ C1] ? __ia32_sys_read+0x90/0x90 [ 823.361057][ C1] __x64_sys_write+0x7b/0x90 [ 823.365677][ C1] do_syscall_64+0x31/0x70 [ 823.370121][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 823.376039][ C1] RIP: 0033:0x7f9380d05049 [ 823.380486][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 823.400118][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 823.408560][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 823.416552][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 823.424549][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 823.432549][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 823.440537][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 823.448524][ C1] ---[ end trace 6a7df80a272a84fb ]--- [ 823.454227][ C1] ------------[ cut here ]------------ [ 823.459700][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 823.465798][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 823.475541][ C1] Modules linked in: [ 823.479483][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 823.491205][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 823.501474][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 823.507054][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 823.526936][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 823.533029][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 823.541017][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 823.549016][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 823.557016][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 823.565022][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 823.573106][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 823.582065][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 823.588677][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 823.596765][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 823.604852][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 823.612846][ C1] Call Trace: [ 823.616140][ C1] [ 823.619013][ C1] aiptek_irq+0x19b7/0x25f0 [ 823.623534][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 823.629359][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 823.634497][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 823.639550][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 823.644943][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 823.650154][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 823.655030][ C1] dummy_timer+0x798/0x42a0 [ 823.659554][ C1] ? enqueue_timer+0x1d1/0x470 [ 823.664346][ C1] ? __mod_timer+0x995/0xde0 [ 823.668953][ C1] ? mod_timer_pending+0x30/0x30 [ 823.673911][ C1] ? __kasan_check_write+0x14/0x20 [ 823.679038][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 823.684268][ C1] ? dummy_free_streams+0x360/0x360 [ 823.689495][ C1] ? __kasan_check_write+0x14/0x20 [ 823.694628][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 823.699852][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 823.705434][ C1] ? dummy_free_streams+0x360/0x360 [ 823.710660][ C1] call_timer_fn+0x35/0x280 [ 823.715183][ C1] ? dummy_free_streams+0x360/0x360 [ 823.720414][ C1] expire_timers+0x21f/0x3b0 [ 823.725029][ C1] __run_timers+0x548/0x680 [ 823.729550][ C1] ? enqueue_timer+0x470/0x470 [ 823.734337][ C1] run_timer_softirq+0x69/0xf0 [ 823.739145][ C1] __do_softirq+0x27e/0x598 [ 823.743677][ C1] asm_call_irq_on_stack+0xf/0x20 [ 823.748707][ C1] [ 823.751657][ C1] do_softirq_own_stack+0x60/0x80 [ 823.756694][ C1] __irq_exit_rcu+0x128/0x150 [ 823.761384][ C1] irq_exit_rcu+0x9/0x10 [ 823.765647][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 823.771378][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 823.777434][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 823.782753][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 823.802468][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 823.808577][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 823.816575][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 823.824570][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 823.832578][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 823.840570][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 823.848582][ C1] ? kernel_init_free_pages+0x87/0x100 [ 823.854092][ C1] get_page_from_freelist+0x6b5/0xa90 [ 823.859487][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 823.864876][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 823.870444][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 823.876456][ C1] pipe_write+0x580/0x1930 [ 823.880903][ C1] ? pipe_read+0x1030/0x1030 [ 823.885508][ C1] ? fsnotify_perm+0x67/0x4e0 [ 823.890199][ C1] ? io_schedule+0x120/0x120 [ 823.894813][ C1] ? security_file_permission+0xa8/0xc0 [ 823.900385][ C1] ? iov_iter_init+0x3f/0x120 [ 823.905074][ C1] vfs_write+0xc02/0xf20 [ 823.909321][ C1] ? kernel_write+0x3c0/0x3c0 [ 823.914010][ C1] ? __fget_files+0x310/0x370 [ 823.918708][ C1] ? __fdget_pos+0x1fa/0x300 [ 823.923307][ C1] ? ksys_write+0x77/0x2b0 [ 823.927739][ C1] ksys_write+0x186/0x2b0 [ 823.932078][ C1] ? __ia32_sys_read+0x90/0x90 [ 823.936851][ C1] __x64_sys_write+0x7b/0x90 [ 823.941456][ C1] do_syscall_64+0x31/0x70 [ 823.945890][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 823.951791][ C1] RIP: 0033:0x7f9380d05049 [ 823.956235][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 823.975870][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 823.984629][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 823.992622][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 824.000621][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 824.008620][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 824.016651][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 824.024656][ C1] ---[ end trace 6a7df80a272a84fc ]--- [ 824.030847][ C1] ------------[ cut here ]------------ [ 824.036334][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 824.042374][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 824.051997][ C1] Modules linked in: [ 824.055991][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 824.067693][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 824.077767][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 824.083324][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 824.103117][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 824.109195][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 824.117288][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 824.125390][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 824.133381][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 824.141358][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 824.149342][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 824.158286][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 824.164876][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 824.172847][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 824.180820][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 824.188784][ C1] Call Trace: [ 824.192087][ C1] [ 824.194975][ C1] aiptek_irq+0x19b7/0x25f0 [ 824.199478][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 824.205379][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 824.210492][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 824.215532][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 824.220911][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 824.226118][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 824.230969][ C1] dummy_timer+0x798/0x42a0 [ 824.235477][ C1] ? __mod_timer+0x995/0xde0 [ 824.240074][ C1] ? prandom_u32+0x254/0x380 [ 824.244687][ C1] ? __kasan_check_write+0x14/0x20 [ 824.249814][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 824.255029][ C1] ? dummy_free_streams+0x360/0x360 [ 824.260241][ C1] ? __kasan_check_write+0x14/0x20 [ 824.265360][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 824.270476][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 824.276033][ C1] ? dummy_free_streams+0x360/0x360 [ 824.281248][ C1] call_timer_fn+0x35/0x280 [ 824.285752][ C1] ? dummy_free_streams+0x360/0x360 [ 824.290962][ C1] expire_timers+0x21f/0x3b0 [ 824.295551][ C1] __run_timers+0x548/0x680 [ 824.300050][ C1] ? enqueue_timer+0x470/0x470 [ 824.304847][ C1] run_timer_softirq+0x69/0xf0 [ 824.309632][ C1] __do_softirq+0x27e/0x598 [ 824.314139][ C1] asm_call_irq_on_stack+0xf/0x20 [ 824.319154][ C1] [ 824.322186][ C1] do_softirq_own_stack+0x60/0x80 [ 824.327248][ C1] __irq_exit_rcu+0x128/0x150 [ 824.331946][ C1] irq_exit_rcu+0x9/0x10 [ 824.336199][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 824.341832][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 824.347815][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 824.353104][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 824.372816][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 824.378890][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 824.386859][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 824.394833][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 824.402829][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 824.410802][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 824.418799][ C1] ? kernel_init_free_pages+0x87/0x100 [ 824.424262][ C1] get_page_from_freelist+0x6b5/0xa90 [ 824.429642][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 824.435019][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 824.440578][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 824.446574][ C1] pipe_write+0x580/0x1930 [ 824.450989][ C1] ? pipe_read+0x1030/0x1030 [ 824.455577][ C1] ? fsnotify_perm+0x67/0x4e0 [ 824.460274][ C1] ? io_schedule+0x120/0x120 [ 824.464863][ C1] ? security_file_permission+0xa8/0xc0 [ 824.470413][ C1] ? iov_iter_init+0x3f/0x120 [ 824.475097][ C1] vfs_write+0xc02/0xf20 [ 824.479335][ C1] ? kernel_write+0x3c0/0x3c0 [ 824.484010][ C1] ? __fget_files+0x310/0x370 [ 824.488693][ C1] ? __fdget_pos+0x1fa/0x300 [ 824.493277][ C1] ? ksys_write+0x77/0x2b0 [ 824.497694][ C1] ksys_write+0x186/0x2b0 [ 824.502126][ C1] ? __ia32_sys_read+0x90/0x90 [ 824.506941][ C1] __x64_sys_write+0x7b/0x90 [ 824.511527][ C1] do_syscall_64+0x31/0x70 [ 824.515944][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 824.521857][ C1] RIP: 0033:0x7f9380d05049 [ 824.526272][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 824.545901][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 824.554606][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 824.562577][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 824.570570][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 824.578551][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 824.586526][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 824.594513][ C1] ---[ end trace 6a7df80a272a84fd ]--- [ 824.600207][ C1] ------------[ cut here ]------------ [ 824.605703][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 824.611780][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 824.621507][ C1] Modules linked in: [ 824.625431][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 824.637153][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 824.647262][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 824.652841][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 824.672569][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 824.678665][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 824.686684][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 824.694686][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 824.702683][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 824.710685][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 824.718694][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 824.727644][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 824.734374][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 824.742371][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 824.750365][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 824.758358][ C1] Call Trace: [ 824.761844][ C1] [ 824.764720][ C1] aiptek_irq+0x19b7/0x25f0 [ 824.769243][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 824.775071][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 824.780199][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 824.785246][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 824.790642][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 824.795881][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 824.800756][ C1] dummy_timer+0x798/0x42a0 [ 824.805283][ C1] ? enqueue_timer+0x1d1/0x470 [ 824.810068][ C1] ? __mod_timer+0x995/0xde0 [ 824.814803][ C1] ? mod_timer_pending+0x30/0x30 [ 824.819838][ C1] ? __kasan_check_write+0x14/0x20 [ 824.825084][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 824.830332][ C1] ? dummy_free_streams+0x360/0x360 [ 824.835555][ C1] ? __kasan_check_write+0x14/0x20 [ 824.840687][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 824.845825][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 824.851400][ C1] ? dummy_free_streams+0x360/0x360 [ 824.856627][ C1] call_timer_fn+0x35/0x280 [ 824.861159][ C1] ? dummy_free_streams+0x360/0x360 [ 824.866380][ C1] expire_timers+0x21f/0x3b0 [ 824.871002][ C1] __run_timers+0x548/0x680 [ 824.875531][ C1] ? enqueue_timer+0x470/0x470 [ 824.880336][ C1] run_timer_softirq+0x69/0xf0 [ 824.885159][ C1] __do_softirq+0x27e/0x598 [ 824.889699][ C1] asm_call_irq_on_stack+0xf/0x20 [ 824.894757][ C1] [ 824.897739][ C1] do_softirq_own_stack+0x60/0x80 [ 824.902918][ C1] __irq_exit_rcu+0x128/0x150 [ 824.907748][ C1] irq_exit_rcu+0x9/0x10 [ 824.912332][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 824.918023][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 824.924124][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 824.929429][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 824.949406][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 824.955502][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 824.963502][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 824.971501][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 824.979624][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 824.987807][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 824.995937][ C1] ? kernel_init_free_pages+0x87/0x100 [ 825.001683][ C1] get_page_from_freelist+0x6b5/0xa90 [ 825.007386][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 825.012786][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 825.018364][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 825.024383][ C1] pipe_write+0x580/0x1930 [ 825.028832][ C1] ? pipe_read+0x1030/0x1030 [ 825.033595][ C1] ? fsnotify_perm+0x67/0x4e0 [ 825.038307][ C1] ? io_schedule+0x120/0x120 [ 825.042920][ C1] ? security_file_permission+0xa8/0xc0 [ 825.048490][ C1] ? iov_iter_init+0x3f/0x120 [ 825.053240][ C1] vfs_write+0xc02/0xf20 [ 825.057512][ C1] ? kernel_write+0x3c0/0x3c0 [ 825.062208][ C1] ? __fget_files+0x310/0x370 [ 825.066960][ C1] ? __fdget_pos+0x1fa/0x300 [ 825.071579][ C1] ? ksys_write+0x77/0x2b0 [ 825.076022][ C1] ksys_write+0x186/0x2b0 [ 825.080377][ C1] ? __ia32_sys_read+0x90/0x90 [ 825.085392][ C1] __x64_sys_write+0x7b/0x90 [ 825.090004][ C1] do_syscall_64+0x31/0x70 [ 825.094530][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 825.100477][ C1] RIP: 0033:0x7f9380d05049 [ 825.104917][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 825.124546][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 825.133262][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 825.141260][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 825.149255][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 825.157275][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 825.165276][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 825.173264][ C1] ---[ end trace 6a7df80a272a84fe ]--- [ 825.178887][ C1] ------------[ cut here ]------------ [ 825.184362][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 825.190412][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 825.200071][ C1] Modules linked in: [ 825.203979][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 825.215713][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 825.225799][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 825.231364][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 825.251277][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 825.257356][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 825.265365][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 825.273451][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 825.281433][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 825.289411][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 825.297404][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 825.306339][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 825.312922][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 825.320890][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 825.328971][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 825.337029][ C1] Call Trace: [ 825.340313][ C1] [ 825.343176][ C1] aiptek_irq+0x19b7/0x25f0 [ 825.347713][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 825.353528][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 825.358647][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 825.363685][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 825.369090][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 825.374285][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 825.379135][ C1] dummy_timer+0x798/0x42a0 [ 825.383661][ C1] ? enqueue_timer+0x1d1/0x470 [ 825.388430][ C1] ? __mod_timer+0x995/0xde0 [ 825.393032][ C1] ? mod_timer_pending+0x30/0x30 [ 825.397968][ C1] ? __kasan_check_write+0x14/0x20 [ 825.403085][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 825.408309][ C1] ? dummy_free_streams+0x360/0x360 [ 825.413507][ C1] ? __kasan_check_write+0x14/0x20 [ 825.418620][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 825.423853][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 825.429401][ C1] ? dummy_free_streams+0x360/0x360 [ 825.434602][ C1] call_timer_fn+0x35/0x280 [ 825.439104][ C1] ? dummy_free_streams+0x360/0x360 [ 825.444313][ C1] expire_timers+0x21f/0x3b0 [ 825.448915][ C1] __run_timers+0x548/0x680 [ 825.453426][ C1] ? enqueue_timer+0x470/0x470 [ 825.458191][ C1] run_timer_softirq+0x69/0xf0 [ 825.462966][ C1] __do_softirq+0x27e/0x598 [ 825.467476][ C1] asm_call_irq_on_stack+0xf/0x20 [ 825.472499][ C1] [ 825.475447][ C1] do_softirq_own_stack+0x60/0x80 [ 825.480511][ C1] __irq_exit_rcu+0x128/0x150 [ 825.485230][ C1] irq_exit_rcu+0x9/0x10 [ 825.489486][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 825.495128][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 825.501197][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 825.506510][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 825.526119][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 825.532299][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 825.540269][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 825.548252][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 825.556238][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 825.564218][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 825.572223][ C1] ? kernel_init_free_pages+0x87/0x100 [ 825.577686][ C1] get_page_from_freelist+0x6b5/0xa90 [ 825.583060][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 825.588439][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 825.593991][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 825.599973][ C1] pipe_write+0x580/0x1930 [ 825.604424][ C1] ? pipe_read+0x1030/0x1030 [ 825.609014][ C1] ? fsnotify_perm+0x67/0x4e0 [ 825.613695][ C1] ? io_schedule+0x120/0x120 [ 825.618282][ C1] ? security_file_permission+0xa8/0xc0 [ 825.623830][ C1] ? iov_iter_init+0x3f/0x120 [ 825.628505][ C1] vfs_write+0xc02/0xf20 [ 825.632747][ C1] ? kernel_write+0x3c0/0x3c0 [ 825.637529][ C1] ? __fget_files+0x310/0x370 [ 825.642219][ C1] ? __fdget_pos+0x1fa/0x300 [ 825.646809][ C1] ? ksys_write+0x77/0x2b0 [ 825.651230][ C1] ksys_write+0x186/0x2b0 [ 825.655561][ C1] ? __ia32_sys_read+0x90/0x90 [ 825.660324][ C1] __x64_sys_write+0x7b/0x90 [ 825.664934][ C1] do_syscall_64+0x31/0x70 [ 825.669354][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 825.675246][ C1] RIP: 0033:0x7f9380d05049 [ 825.679659][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 825.699274][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 825.707695][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 825.715680][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 825.723658][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 825.731634][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 825.739612][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 825.747597][ C1] ---[ end trace 6a7df80a272a84ff ]--- [ 825.753203][ C1] ------------[ cut here ]------------ [ 825.758680][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 825.764740][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 825.774379][ C1] Modules linked in: [ 825.778314][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 825.790028][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 825.800143][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 825.805723][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 825.825340][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 825.831518][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 825.839558][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 825.847563][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 825.855565][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 825.863736][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 825.871731][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 825.880685][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 825.887286][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 825.895367][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 825.903361][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 825.911349][ C1] Call Trace: [ 825.914647][ C1] [ 825.917703][ C1] aiptek_irq+0x19b7/0x25f0 [ 825.922218][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 825.928049][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 825.933177][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 825.938218][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 825.943605][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 825.948828][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 825.953704][ C1] dummy_timer+0x798/0x42a0 [ 825.958228][ C1] ? enqueue_timer+0x1d1/0x470 [ 825.963023][ C1] ? __mod_timer+0x995/0xde0 [ 825.967803][ C1] ? mod_timer_pending+0x30/0x30 [ 825.972774][ C1] ? __kasan_check_write+0x14/0x20 [ 825.977920][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 825.983145][ C1] ? dummy_free_streams+0x360/0x360 [ 825.988414][ C1] ? __kasan_check_write+0x14/0x20 [ 825.993559][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 825.998692][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 826.004350][ C1] ? dummy_free_streams+0x360/0x360 [ 826.009575][ C1] call_timer_fn+0x35/0x280 [ 826.014106][ C1] ? dummy_free_streams+0x360/0x360 [ 826.019331][ C1] expire_timers+0x21f/0x3b0 [ 826.023966][ C1] __run_timers+0x548/0x680 [ 826.028533][ C1] ? enqueue_timer+0x470/0x470 [ 826.033470][ C1] run_timer_softirq+0x69/0xf0 [ 826.038260][ C1] __do_softirq+0x27e/0x598 [ 826.042799][ C1] asm_call_irq_on_stack+0xf/0x20 [ 826.048004][ C1] [ 826.050983][ C1] do_softirq_own_stack+0x60/0x80 [ 826.056021][ C1] __irq_exit_rcu+0x128/0x150 [ 826.060704][ C1] irq_exit_rcu+0x9/0x10 [ 826.064958][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 826.070637][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 826.076644][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 826.082181][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 826.102083][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 826.108185][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 826.116205][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 826.124226][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 826.132357][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 826.140751][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 826.148796][ C1] ? kernel_init_free_pages+0x87/0x100 [ 826.154297][ C1] get_page_from_freelist+0x6b5/0xa90 [ 826.159711][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 826.165117][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 826.170679][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 826.176683][ C1] pipe_write+0x580/0x1930 [ 826.181145][ C1] ? pipe_read+0x1030/0x1030 [ 826.185761][ C1] ? fsnotify_perm+0x67/0x4e0 [ 826.190464][ C1] ? io_schedule+0x120/0x120 [ 826.195077][ C1] ? security_file_permission+0xa8/0xc0 [ 826.200645][ C1] ? iov_iter_init+0x3f/0x120 [ 826.205344][ C1] vfs_write+0xc02/0xf20 [ 826.209627][ C1] ? kernel_write+0x3c0/0x3c0 [ 826.214330][ C1] ? __fget_files+0x310/0x370 [ 826.219026][ C1] ? __fdget_pos+0x1fa/0x300 [ 826.223636][ C1] ? ksys_write+0x77/0x2b0 [ 826.228081][ C1] ksys_write+0x186/0x2b0 [ 826.232430][ C1] ? __ia32_sys_read+0x90/0x90 [ 826.237209][ C1] __x64_sys_write+0x7b/0x90 [ 826.241824][ C1] do_syscall_64+0x31/0x70 [ 826.246260][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 826.252175][ C1] RIP: 0033:0x7f9380d05049 [ 826.256602][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 826.276406][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 826.284952][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 826.292955][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 826.300962][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 826.308938][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 826.316924][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 826.324914][ C1] ---[ end trace 6a7df80a272a8500 ]--- [ 826.330472][ C1] ------------[ cut here ]------------ [ 826.335949][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 826.342026][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 826.351671][ C1] Modules linked in: [ 826.355604][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 826.367422][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 826.377646][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 826.383334][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 826.402957][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 826.409044][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 826.417042][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 826.425020][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 826.433026][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 826.441003][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 826.449010][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 826.457937][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 826.464516][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 826.472574][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 826.480545][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 826.488519][ C1] Call Trace: [ 826.491991][ C1] [ 826.494850][ C1] aiptek_irq+0x19b7/0x25f0 [ 826.499349][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 826.505155][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 826.510261][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 826.515286][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 826.520655][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 826.525885][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 826.530734][ C1] dummy_timer+0x798/0x42a0 [ 826.535257][ C1] ? enqueue_timer+0x1d1/0x470 [ 826.540026][ C1] ? __mod_timer+0x995/0xde0 [ 826.544725][ C1] ? mod_timer_pending+0x30/0x30 [ 826.549676][ C1] ? __kasan_check_write+0x14/0x20 [ 826.554791][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 826.560004][ C1] ? dummy_free_streams+0x360/0x360 [ 826.565201][ C1] ? __kasan_check_write+0x14/0x20 [ 826.570307][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 826.575415][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 826.580956][ C1] ? dummy_free_streams+0x360/0x360 [ 826.586157][ C1] call_timer_fn+0x35/0x280 [ 826.590662][ C1] ? dummy_free_streams+0x360/0x360 [ 826.595867][ C1] expire_timers+0x21f/0x3b0 [ 826.600450][ C1] __run_timers+0x548/0x680 [ 826.604961][ C1] ? enqueue_timer+0x470/0x470 [ 826.609725][ C1] run_timer_softirq+0x69/0xf0 [ 826.614490][ C1] __do_softirq+0x27e/0x598 [ 826.618997][ C1] asm_call_irq_on_stack+0xf/0x20 [ 826.624013][ C1] [ 826.626951][ C1] do_softirq_own_stack+0x60/0x80 [ 826.631988][ C1] __irq_exit_rcu+0x128/0x150 [ 826.636664][ C1] irq_exit_rcu+0x9/0x10 [ 826.640909][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 826.646562][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 826.652547][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 826.657832][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 826.677440][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 826.683512][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 826.691486][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 826.699453][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 826.707426][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 826.715395][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 826.723392][ C1] ? kernel_init_free_pages+0x87/0x100 [ 826.728848][ C1] get_page_from_freelist+0x6b5/0xa90 [ 826.734221][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 826.739619][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 826.745177][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 826.751188][ C1] pipe_write+0x580/0x1930 [ 826.755611][ C1] ? pipe_read+0x1030/0x1030 [ 826.760218][ C1] ? fsnotify_perm+0x67/0x4e0 [ 826.764911][ C1] ? io_schedule+0x120/0x120 [ 826.769534][ C1] ? security_file_permission+0xa8/0xc0 [ 826.775085][ C1] ? iov_iter_init+0x3f/0x120 [ 826.779752][ C1] vfs_write+0xc02/0xf20 [ 826.783991][ C1] ? kernel_write+0x3c0/0x3c0 [ 826.788669][ C1] ? __fget_files+0x310/0x370 [ 826.793345][ C1] ? __fdget_pos+0x1fa/0x300 [ 826.798077][ C1] ? ksys_write+0x77/0x2b0 [ 826.802541][ C1] ksys_write+0x186/0x2b0 [ 826.806881][ C1] ? __ia32_sys_read+0x90/0x90 [ 826.811642][ C1] __x64_sys_write+0x7b/0x90 [ 826.816253][ C1] do_syscall_64+0x31/0x70 [ 826.820664][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 826.826556][ C1] RIP: 0033:0x7f9380d05049 [ 826.830974][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 826.850579][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 826.858999][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 826.866986][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 826.874961][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 826.882927][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 826.890899][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 826.898897][ C1] ---[ end trace 6a7df80a272a8501 ]--- [ 826.904530][ C1] ------------[ cut here ]------------ [ 826.910000][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 826.916059][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 826.925704][ C1] Modules linked in: [ 826.929635][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 826.941444][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 826.951550][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 826.957122][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 826.976757][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 826.982849][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 826.990956][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 826.998965][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 827.006971][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 827.014967][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 827.023090][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 827.032122][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 827.038747][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 827.046744][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 827.054738][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 827.062724][ C1] Call Trace: [ 827.066020][ C1] [ 827.068891][ C1] aiptek_irq+0x19b7/0x25f0 [ 827.073427][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 827.079337][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 827.084472][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 827.089526][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 827.094926][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 827.100134][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 827.105005][ C1] dummy_timer+0x798/0x42a0 [ 827.109519][ C1] ? enqueue_timer+0x1d1/0x470 [ 827.114298][ C1] ? __mod_timer+0x995/0xde0 [ 827.118925][ C1] ? mod_timer_pending+0x30/0x30 [ 827.123924][ C1] ? __kasan_check_write+0x14/0x20 [ 827.129067][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 827.134316][ C1] ? dummy_free_streams+0x360/0x360 [ 827.139543][ C1] ? __kasan_check_write+0x14/0x20 [ 827.144678][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 827.149810][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 827.155383][ C1] ? dummy_free_streams+0x360/0x360 [ 827.160611][ C1] call_timer_fn+0x35/0x280 [ 827.165134][ C1] ? dummy_free_streams+0x360/0x360 [ 827.170366][ C1] expire_timers+0x21f/0x3b0 [ 827.174976][ C1] __run_timers+0x548/0x680 [ 827.179506][ C1] ? enqueue_timer+0x470/0x470 [ 827.184290][ C1] run_timer_softirq+0x69/0xf0 [ 827.189072][ C1] __do_softirq+0x27e/0x598 [ 827.193590][ C1] asm_call_irq_on_stack+0xf/0x20 [ 827.198703][ C1] [ 827.201668][ C1] do_softirq_own_stack+0x60/0x80 [ 827.206729][ C1] __irq_exit_rcu+0x128/0x150 [ 827.211425][ C1] irq_exit_rcu+0x9/0x10 [ 827.215691][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 827.221372][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 827.227402][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 827.232709][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 827.252341][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 827.258452][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 827.266449][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 827.274453][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 827.282460][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 827.290463][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 827.298477][ C1] ? kernel_init_free_pages+0x87/0x100 [ 827.303969][ C1] get_page_from_freelist+0x6b5/0xa90 [ 827.309376][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 827.314786][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 827.320371][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 827.326394][ C1] pipe_write+0x580/0x1930 [ 827.330844][ C1] ? pipe_read+0x1030/0x1030 [ 827.335668][ C1] ? fsnotify_perm+0x67/0x4e0 [ 827.340370][ C1] ? io_schedule+0x120/0x120 [ 827.344978][ C1] ? security_file_permission+0xa8/0xc0 [ 827.350596][ C1] ? iov_iter_init+0x3f/0x120 [ 827.355303][ C1] vfs_write+0xc02/0xf20 [ 827.359659][ C1] ? kernel_write+0x3c0/0x3c0 [ 827.364350][ C1] ? __fget_files+0x310/0x370 [ 827.369040][ C1] ? __fdget_pos+0x1fa/0x300 [ 827.373662][ C1] ? ksys_write+0x77/0x2b0 [ 827.378100][ C1] ksys_write+0x186/0x2b0 [ 827.382458][ C1] ? __ia32_sys_read+0x90/0x90 [ 827.387248][ C1] __x64_sys_write+0x7b/0x90 [ 827.391853][ C1] do_syscall_64+0x31/0x70 [ 827.396297][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 827.402207][ C1] RIP: 0033:0x7f9380d05049 [ 827.406646][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 827.426372][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 827.434836][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 827.442831][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 827.450832][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 827.458832][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 827.466834][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 827.474848][ C1] ---[ end trace 6a7df80a272a8502 ]--- [ 827.480475][ C1] ------------[ cut here ]------------ [ 827.485956][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 827.492063][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 827.501723][ C1] Modules linked in: [ 827.505640][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 827.517358][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 827.527453][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 827.533303][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 827.552909][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 827.558975][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 827.566946][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 827.575006][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 827.583065][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 827.591034][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 827.599005][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 827.608025][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 827.614607][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 827.622579][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 827.630558][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 827.638521][ C1] Call Trace: [ 827.641796][ C1] [ 827.644661][ C1] aiptek_irq+0x19b7/0x25f0 [ 827.649165][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 827.654970][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 827.660106][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 827.665160][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 827.670539][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 827.675748][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 827.680601][ C1] dummy_timer+0x798/0x42a0 [ 827.685113][ C1] ? enqueue_timer+0x1d1/0x470 [ 827.689877][ C1] ? __mod_timer+0x995/0xde0 [ 827.694485][ C1] ? mod_timer_pending+0x30/0x30 [ 827.699421][ C1] ? __kasan_check_write+0x14/0x20 [ 827.704535][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 827.709752][ C1] ? dummy_free_streams+0x360/0x360 [ 827.714951][ C1] ? __kasan_check_write+0x14/0x20 [ 827.720143][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 827.725248][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 827.730797][ C1] ? dummy_free_streams+0x360/0x360 [ 827.736123][ C1] call_timer_fn+0x35/0x280 [ 827.740635][ C1] ? dummy_free_streams+0x360/0x360 [ 827.745858][ C1] expire_timers+0x21f/0x3b0 [ 827.750465][ C1] __run_timers+0x548/0x680 [ 827.754969][ C1] ? enqueue_timer+0x470/0x470 [ 827.759743][ C1] run_timer_softirq+0x69/0xf0 [ 827.764508][ C1] __do_softirq+0x27e/0x598 [ 827.769011][ C1] asm_call_irq_on_stack+0xf/0x20 [ 827.774037][ C1] [ 827.777063][ C1] do_softirq_own_stack+0x60/0x80 [ 827.782084][ C1] __irq_exit_rcu+0x128/0x150 [ 827.786751][ C1] irq_exit_rcu+0x9/0x10 [ 827.790988][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 827.796623][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 827.802605][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 827.807889][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 827.827498][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 827.833565][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 827.841530][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 827.849503][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 827.857475][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 827.865469][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 827.873463][ C1] ? kernel_init_free_pages+0x87/0x100 [ 827.878919][ C1] get_page_from_freelist+0x6b5/0xa90 [ 827.884288][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 827.889654][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 827.895200][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 827.901174][ C1] pipe_write+0x580/0x1930 [ 827.905610][ C1] ? pipe_read+0x1030/0x1030 [ 827.910192][ C1] ? fsnotify_perm+0x67/0x4e0 [ 827.914871][ C1] ? io_schedule+0x120/0x120 [ 827.919477][ C1] ? security_file_permission+0xa8/0xc0 [ 827.925020][ C1] ? iov_iter_init+0x3f/0x120 [ 827.929694][ C1] vfs_write+0xc02/0xf20 [ 827.933927][ C1] ? kernel_write+0x3c0/0x3c0 [ 827.938606][ C1] ? __fget_files+0x310/0x370 [ 827.943288][ C1] ? __fdget_pos+0x1fa/0x300 [ 827.947867][ C1] ? ksys_write+0x77/0x2b0 [ 827.952280][ C1] ksys_write+0x186/0x2b0 [ 827.956604][ C1] ? __ia32_sys_read+0x90/0x90 [ 827.961375][ C1] __x64_sys_write+0x7b/0x90 [ 827.965971][ C1] do_syscall_64+0x31/0x70 [ 827.970477][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 827.976361][ C1] RIP: 0033:0x7f9380d05049 [ 827.980774][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 828.000378][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 828.008797][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 828.016912][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 828.024883][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 828.032850][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 828.040822][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 828.048798][ C1] ---[ end trace 6a7df80a272a8503 ]--- [ 828.054463][ C1] ------------[ cut here ]------------ [ 828.059929][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 828.065981][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 828.075614][ C1] Modules linked in: [ 828.079552][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 828.091370][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 828.101469][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 828.107033][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 828.126887][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 828.132989][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 828.140998][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 828.148993][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee2a5d8 [ 828.157076][ C1] R10: ffffed103ee2a5d8 R11: 0000000000000000 R12: ffff88810db870c8 [ 828.165074][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 828.173071][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 828.182022][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 828.188637][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 828.196644][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 828.204654][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 828.212642][ C1] Call Trace: [ 828.215941][ C1] [ 828.218811][ C1] aiptek_irq+0x19b7/0x25f0 [ 828.223326][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 828.229149][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 828.234277][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 828.239320][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 828.244713][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 828.249934][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 828.254821][ C1] dummy_timer+0x798/0x42a0 [ 828.259356][ C1] ? enqueue_timer+0x1d1/0x470 [ 828.264137][ C1] ? __mod_timer+0x995/0xde0 [ 828.268768][ C1] ? mod_timer_pending+0x30/0x30 [ 828.273754][ C1] ? __kasan_check_write+0x14/0x20 [ 828.278910][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 828.284142][ C1] ? dummy_free_streams+0x360/0x360 [ 828.289368][ C1] ? __kasan_check_write+0x14/0x20 [ 828.294498][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 828.299627][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 828.305187][ C1] ? dummy_free_streams+0x360/0x360 [ 828.310406][ C1] call_timer_fn+0x35/0x280 [ 828.314922][ C1] ? dummy_free_streams+0x360/0x360 [ 828.320153][ C1] expire_timers+0x21f/0x3b0 [ 828.324778][ C1] __run_timers+0x548/0x680 [ 828.329301][ C1] ? enqueue_timer+0x470/0x470 [ 828.334087][ C1] run_timer_softirq+0x69/0xf0 [ 828.338870][ C1] __do_softirq+0x27e/0x598 [ 828.343388][ C1] asm_call_irq_on_stack+0xf/0x20 [ 828.348412][ C1] [ 828.351386][ C1] do_softirq_own_stack+0x60/0x80 [ 828.356419][ C1] __irq_exit_rcu+0x128/0x150 [ 828.361121][ C1] irq_exit_rcu+0x9/0x10 [ 828.365376][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 828.371029][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 828.377123][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 828.382429][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 828.402240][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 828.408330][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 828.416322][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 828.424329][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 828.432324][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 828.440332][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 828.448345][ C1] ? kernel_init_free_pages+0x87/0x100 [ 828.453838][ C1] get_page_from_freelist+0x6b5/0xa90 [ 828.459247][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 828.464638][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 828.470292][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 828.476286][ C1] pipe_write+0x580/0x1930 [ 828.480726][ C1] ? pipe_read+0x1030/0x1030 [ 828.485330][ C1] ? fsnotify_perm+0x67/0x4e0 [ 828.490028][ C1] ? io_schedule+0x120/0x120 [ 828.494630][ C1] ? security_file_permission+0xa8/0xc0 [ 828.500196][ C1] ? iov_iter_init+0x3f/0x120 [ 828.504887][ C1] vfs_write+0xc02/0xf20 [ 828.509236][ C1] ? kernel_write+0x3c0/0x3c0 [ 828.513929][ C1] ? __fget_files+0x310/0x370 [ 828.518729][ C1] ? __fdget_pos+0x1fa/0x300 [ 828.523341][ C1] ? ksys_write+0x77/0x2b0 [ 828.527777][ C1] ksys_write+0x186/0x2b0 [ 828.532149][ C1] ? __ia32_sys_read+0x90/0x90 [ 828.536950][ C1] __x64_sys_write+0x7b/0x90 [ 828.541586][ C1] do_syscall_64+0x31/0x70 [ 828.546091][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 828.552007][ C1] RIP: 0033:0x7f9380d05049 [ 828.556443][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 828.576074][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 828.584528][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 828.592621][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 828.600623][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 828.608620][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 828.616613][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 828.624624][ C1] ---[ end trace 6a7df80a272a8504 ]--- [ 828.630220][ C1] ------------[ cut here ]------------ [ 828.635692][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 828.641717][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 828.651338][ C1] Modules linked in: [ 828.655243][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 828.666949][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 828.677038][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 828.682670][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 828.702283][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 828.708371][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 828.716365][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 828.724352][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 828.732345][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 828.740341][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 828.748323][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 828.757247][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 828.763825][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 828.771800][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 828.779882][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 828.787860][ C1] Call Trace: [ 828.791140][ C1] [ 828.793998][ C1] aiptek_irq+0x19b7/0x25f0 [ 828.798505][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 828.804309][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 828.809418][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 828.814449][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 828.819821][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 828.825028][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 828.829887][ C1] dummy_timer+0x798/0x42a0 [ 828.834398][ C1] ? enqueue_timer+0x1d1/0x470 [ 828.839164][ C1] ? __mod_timer+0x995/0xde0 [ 828.843748][ C1] ? mod_timer_pending+0x30/0x30 [ 828.848882][ C1] ? __kasan_check_write+0x14/0x20 [ 828.854003][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 828.859197][ C1] ? dummy_free_streams+0x360/0x360 [ 828.864409][ C1] ? __kasan_check_write+0x14/0x20 [ 828.869560][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 828.874868][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 828.880406][ C1] ? dummy_free_streams+0x360/0x360 [ 828.885611][ C1] call_timer_fn+0x35/0x280 [ 828.890108][ C1] ? dummy_free_streams+0x360/0x360 [ 828.895327][ C1] expire_timers+0x21f/0x3b0 [ 828.899933][ C1] __run_timers+0x548/0x680 [ 828.904562][ C1] ? enqueue_timer+0x470/0x470 [ 828.909351][ C1] run_timer_softirq+0x69/0xf0 [ 828.914128][ C1] __do_softirq+0x27e/0x598 [ 828.918644][ C1] asm_call_irq_on_stack+0xf/0x20 [ 828.923653][ C1] [ 828.926592][ C1] do_softirq_own_stack+0x60/0x80 [ 828.931613][ C1] __irq_exit_rcu+0x128/0x150 [ 828.936300][ C1] irq_exit_rcu+0x9/0x10 [ 828.940542][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 828.946176][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 828.952154][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 828.957432][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 828.977039][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 828.983113][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 828.991082][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 828.999078][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 829.007056][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 829.015031][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 829.023025][ C1] ? kernel_init_free_pages+0x87/0x100 [ 829.028484][ C1] get_page_from_freelist+0x6b5/0xa90 [ 829.033860][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 829.039230][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 829.044772][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 829.050771][ C1] pipe_write+0x580/0x1930 [ 829.055194][ C1] ? pipe_read+0x1030/0x1030 [ 829.059775][ C1] ? fsnotify_perm+0x67/0x4e0 [ 829.064456][ C1] ? io_schedule+0x120/0x120 [ 829.069052][ C1] ? security_file_permission+0xa8/0xc0 [ 829.074602][ C1] ? iov_iter_init+0x3f/0x120 [ 829.079279][ C1] vfs_write+0xc02/0xf20 [ 829.083525][ C1] ? kernel_write+0x3c0/0x3c0 [ 829.088201][ C1] ? __fget_files+0x310/0x370 [ 829.092891][ C1] ? __fdget_pos+0x1fa/0x300 [ 829.097486][ C1] ? ksys_write+0x77/0x2b0 [ 829.102440][ C1] ksys_write+0x186/0x2b0 [ 829.106813][ C1] ? __ia32_sys_read+0x90/0x90 [ 829.111583][ C1] __x64_sys_write+0x7b/0x90 [ 829.116177][ C1] do_syscall_64+0x31/0x70 [ 829.120595][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 829.126486][ C1] RIP: 0033:0x7f9380d05049 [ 829.130907][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 829.150528][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 829.158965][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 829.166945][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 829.174931][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 829.182920][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 829.190904][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 829.198884][ C1] ---[ end trace 6a7df80a272a8505 ]--- [ 829.204879][ C1] ------------[ cut here ]------------ [ 829.210400][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 829.216468][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 829.226116][ C1] Modules linked in: [ 829.230047][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 829.241768][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 829.251864][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 829.257438][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 829.277065][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 829.283201][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 829.291196][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 829.299289][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 829.307293][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 829.315320][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 829.323324][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 829.332292][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 829.338894][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 829.346895][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 829.354888][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 829.362873][ C1] Call Trace: [ 829.366200][ C1] [ 829.369078][ C1] aiptek_irq+0x19b7/0x25f0 [ 829.373611][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 829.379461][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 829.384598][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 829.389656][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 829.395058][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 829.400279][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 829.405158][ C1] dummy_timer+0x798/0x42a0 [ 829.409685][ C1] ? __mod_timer+0x995/0xde0 [ 829.414310][ C1] ? prandom_u32+0x254/0x380 [ 829.418918][ C1] ? __kasan_check_write+0x14/0x20 [ 829.424062][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 829.429302][ C1] ? dummy_free_streams+0x360/0x360 [ 829.434526][ C1] ? __kasan_check_write+0x14/0x20 [ 829.439672][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 829.444805][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 829.450494][ C1] ? dummy_free_streams+0x360/0x360 [ 829.455832][ C1] call_timer_fn+0x35/0x280 [ 829.460383][ C1] ? dummy_free_streams+0x360/0x360 [ 829.465639][ C1] expire_timers+0x21f/0x3b0 [ 829.470261][ C1] __run_timers+0x548/0x680 [ 829.474787][ C1] ? enqueue_timer+0x470/0x470 [ 829.479657][ C1] run_timer_softirq+0x69/0xf0 [ 829.484451][ C1] __do_softirq+0x27e/0x598 [ 829.488972][ C1] asm_call_irq_on_stack+0xf/0x20 [ 829.493996][ C1] [ 829.496959][ C1] do_softirq_own_stack+0x60/0x80 [ 829.501999][ C1] __irq_exit_rcu+0x128/0x150 [ 829.506703][ C1] irq_exit_rcu+0x9/0x10 [ 829.510968][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 829.516621][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 829.522712][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 829.528019][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 829.547750][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 829.553930][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 829.561924][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 829.569920][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 829.577912][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 829.585905][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 829.594012][ C1] ? kernel_init_free_pages+0x87/0x100 [ 829.599489][ C1] get_page_from_freelist+0x6b5/0xa90 [ 829.604965][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 829.610559][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 829.616128][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 829.622128][ C1] pipe_write+0x580/0x1930 [ 829.626561][ C1] ? pipe_read+0x1030/0x1030 [ 829.631169][ C1] ? fsnotify_perm+0x67/0x4e0 [ 829.635859][ C1] ? io_schedule+0x120/0x120 [ 829.640462][ C1] ? security_file_permission+0xa8/0xc0 [ 829.646028][ C1] ? iov_iter_init+0x3f/0x120 [ 829.650721][ C1] vfs_write+0xc02/0xf20 [ 829.654997][ C1] ? kernel_write+0x3c0/0x3c0 [ 829.659724][ C1] ? __fget_files+0x310/0x370 [ 829.664430][ C1] ? __fdget_pos+0x1fa/0x300 [ 829.669049][ C1] ? ksys_write+0x77/0x2b0 [ 829.673572][ C1] ksys_write+0x186/0x2b0 [ 829.677921][ C1] ? __ia32_sys_read+0x90/0x90 [ 829.682805][ C1] __x64_sys_write+0x7b/0x90 [ 829.687430][ C1] do_syscall_64+0x31/0x70 [ 829.692075][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 829.698060][ C1] RIP: 0033:0x7f9380d05049 [ 829.702496][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 829.722428][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 829.730971][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 829.739043][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 829.747246][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 829.755317][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 829.763318][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 829.771296][ C1] ---[ end trace 6a7df80a272a8506 ]--- [ 829.776921][ C1] ------------[ cut here ]------------ [ 829.782390][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 829.788445][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 829.798084][ C1] Modules linked in: [ 829.802100][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 829.813819][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 829.823916][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 829.829461][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 829.849062][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 829.855125][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 829.863096][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 829.871077][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee2a5d8 [ 829.879059][ C1] R10: ffffed103ee2a5d8 R11: 0000000000000000 R12: ffff88810db870c8 [ 829.887121][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 829.895125][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 829.904057][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 829.910641][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 829.918616][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 829.926589][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 829.934568][ C1] Call Trace: [ 829.937853][ C1] [ 829.940709][ C1] aiptek_irq+0x19b7/0x25f0 [ 829.945220][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 829.951030][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 829.956143][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 829.961174][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 829.966551][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 829.971780][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 829.976649][ C1] dummy_timer+0x798/0x42a0 [ 829.981155][ C1] ? __mod_timer+0x995/0xde0 [ 829.985754][ C1] ? prandom_u32+0x254/0x380 [ 829.990348][ C1] ? __kasan_check_write+0x14/0x20 [ 829.995481][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 830.000825][ C1] ? dummy_free_streams+0x360/0x360 [ 830.006032][ C1] ? __kasan_check_write+0x14/0x20 [ 830.011164][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 830.016275][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 830.021832][ C1] ? dummy_free_streams+0x360/0x360 [ 830.027036][ C1] call_timer_fn+0x35/0x280 [ 830.031562][ C1] ? dummy_free_streams+0x360/0x360 [ 830.036758][ C1] expire_timers+0x21f/0x3b0 [ 830.041685][ C1] __run_timers+0x548/0x680 [ 830.046235][ C1] ? enqueue_timer+0x470/0x470 [ 830.051027][ C1] run_timer_softirq+0x69/0xf0 [ 830.056047][ C1] __do_softirq+0x27e/0x598 [ 830.060560][ C1] asm_call_irq_on_stack+0xf/0x20 [ 830.065582][ C1] [ 830.068533][ C1] do_softirq_own_stack+0x60/0x80 [ 830.073560][ C1] __irq_exit_rcu+0x128/0x150 [ 830.078418][ C1] irq_exit_rcu+0x9/0x10 [ 830.082663][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 830.088309][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 830.094299][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 830.099594][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 830.119238][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 830.125442][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 830.133439][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 830.141415][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 830.149385][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 830.157360][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 830.165359][ C1] ? kernel_init_free_pages+0x87/0x100 [ 830.170828][ C1] get_page_from_freelist+0x6b5/0xa90 [ 830.176221][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 830.181616][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 830.187173][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 830.193159][ C1] pipe_write+0x580/0x1930 [ 830.197574][ C1] ? pipe_read+0x1030/0x1030 [ 830.202187][ C1] ? fsnotify_perm+0x67/0x4e0 [ 830.206867][ C1] ? io_schedule+0x120/0x120 [ 830.211450][ C1] ? security_file_permission+0xa8/0xc0 [ 830.216996][ C1] ? iov_iter_init+0x3f/0x120 [ 830.221678][ C1] vfs_write+0xc02/0xf20 [ 830.225933][ C1] ? kernel_write+0x3c0/0x3c0 [ 830.230616][ C1] ? __fget_files+0x310/0x370 [ 830.235303][ C1] ? __fdget_pos+0x1fa/0x300 [ 830.239897][ C1] ? ksys_write+0x77/0x2b0 [ 830.244327][ C1] ksys_write+0x186/0x2b0 [ 830.248658][ C1] ? __ia32_sys_read+0x90/0x90 [ 830.253436][ C1] __x64_sys_write+0x7b/0x90 [ 830.258080][ C1] do_syscall_64+0x31/0x70 [ 830.262544][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 830.268663][ C1] RIP: 0033:0x7f9380d05049 [ 830.273240][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 830.293240][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 830.301686][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 830.309681][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 830.317657][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 830.325641][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 830.333622][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 830.341692][ C1] ---[ end trace 6a7df80a272a8507 ]--- [ 830.347305][ C1] ------------[ cut here ]------------ [ 830.352775][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 830.358841][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 830.368474][ C1] Modules linked in: [ 830.372409][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 830.384136][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 830.394238][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 830.399818][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 830.419444][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 830.425536][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 830.433523][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 830.441519][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 830.449513][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 830.457500][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 830.465493][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 830.474444][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 830.481050][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 830.489044][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 830.497054][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 830.505050][ C1] Call Trace: [ 830.508353][ C1] [ 830.511228][ C1] aiptek_irq+0x19b7/0x25f0 [ 830.515750][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 830.521597][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 830.526733][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 830.531796][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 830.537544][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 830.542764][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 830.547666][ C1] dummy_timer+0x798/0x42a0 [ 830.552201][ C1] ? __mod_timer+0x995/0xde0 [ 830.556827][ C1] ? prandom_u32+0x254/0x380 [ 830.561436][ C1] ? __kasan_check_write+0x14/0x20 [ 830.566560][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 830.571789][ C1] ? dummy_free_streams+0x360/0x360 [ 830.577005][ C1] ? __kasan_check_write+0x14/0x20 [ 830.582182][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 830.587318][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 830.592910][ C1] ? dummy_free_streams+0x360/0x360 [ 830.598150][ C1] call_timer_fn+0x35/0x280 [ 830.602687][ C1] ? dummy_free_streams+0x360/0x360 [ 830.607911][ C1] expire_timers+0x21f/0x3b0 [ 830.612531][ C1] __run_timers+0x548/0x680 [ 830.617073][ C1] ? enqueue_timer+0x470/0x470 [ 830.621868][ C1] run_timer_softirq+0x69/0xf0 [ 830.626651][ C1] __do_softirq+0x27e/0x598 [ 830.631173][ C1] asm_call_irq_on_stack+0xf/0x20 [ 830.636212][ C1] [ 830.639171][ C1] do_softirq_own_stack+0x60/0x80 [ 830.644215][ C1] __irq_exit_rcu+0x128/0x150 [ 830.648900][ C1] irq_exit_rcu+0x9/0x10 [ 830.653160][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 830.658813][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 830.664817][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 830.670116][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 830.689749][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 830.695844][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 830.703840][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 830.711841][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 830.719835][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 830.727865][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 830.735870][ C1] ? kernel_init_free_pages+0x87/0x100 [ 830.741359][ C1] get_page_from_freelist+0x6b5/0xa90 [ 830.746796][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 830.752191][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 830.757760][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 830.763771][ C1] pipe_write+0x580/0x1930 [ 830.768218][ C1] ? pipe_read+0x1030/0x1030 [ 830.772851][ C1] ? fsnotify_perm+0x67/0x4e0 [ 830.777820][ C1] ? io_schedule+0x120/0x120 [ 830.782436][ C1] ? security_file_permission+0xa8/0xc0 [ 830.788037][ C1] ? iov_iter_init+0x3f/0x120 [ 830.792755][ C1] vfs_write+0xc02/0xf20 [ 830.797045][ C1] ? kernel_write+0x3c0/0x3c0 [ 830.801741][ C1] ? __fget_files+0x310/0x370 [ 830.806439][ C1] ? __fdget_pos+0x1fa/0x300 [ 830.811042][ C1] ? ksys_write+0x77/0x2b0 [ 830.815468][ C1] ksys_write+0x186/0x2b0 [ 830.819814][ C1] ? __ia32_sys_read+0x90/0x90 [ 830.824592][ C1] __x64_sys_write+0x7b/0x90 [ 830.829209][ C1] do_syscall_64+0x31/0x70 [ 830.833672][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 830.839581][ C1] RIP: 0033:0x7f9380d05049 [ 830.844017][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 830.863655][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 830.872137][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 830.880130][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 830.888129][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 830.896128][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 830.904127][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 830.912119][ C1] ---[ end trace 6a7df80a272a8508 ]--- [ 830.917734][ C1] ------------[ cut here ]------------ [ 830.923204][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 830.929267][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 830.938926][ C1] Modules linked in: [ 830.942875][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 830.954685][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 830.964791][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 830.970397][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 830.990044][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 830.996250][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 831.004246][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 831.012241][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 831.020238][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 831.028239][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 831.036242][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 831.045196][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 831.051893][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 831.059887][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 831.067919][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 831.075943][ C1] Call Trace: [ 831.079262][ C1] [ 831.082136][ C1] aiptek_irq+0x19b7/0x25f0 [ 831.086682][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 831.092511][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 831.097642][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 831.102686][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 831.108081][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 831.113305][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 831.118188][ C1] dummy_timer+0x798/0x42a0 [ 831.122715][ C1] ? enqueue_timer+0x1d1/0x470 [ 831.127496][ C1] ? __mod_timer+0x995/0xde0 [ 831.132115][ C1] ? mod_timer_pending+0x30/0x30 [ 831.137076][ C1] ? __kasan_check_write+0x14/0x20 [ 831.142214][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 831.147438][ C1] ? dummy_free_streams+0x360/0x360 [ 831.152655][ C1] ? __kasan_check_write+0x14/0x20 [ 831.157808][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 831.162935][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 831.168502][ C1] ? dummy_free_streams+0x360/0x360 [ 831.173806][ C1] call_timer_fn+0x35/0x280 [ 831.178344][ C1] ? dummy_free_streams+0x360/0x360 [ 831.183566][ C1] expire_timers+0x21f/0x3b0 [ 831.188182][ C1] __run_timers+0x548/0x680 [ 831.192705][ C1] ? enqueue_timer+0x470/0x470 [ 831.197536][ C1] run_timer_softirq+0x69/0xf0 [ 831.202367][ C1] __do_softirq+0x27e/0x598 [ 831.206894][ C1] asm_call_irq_on_stack+0xf/0x20 [ 831.211924][ C1] [ 831.214887][ C1] do_softirq_own_stack+0x60/0x80 [ 831.219958][ C1] __irq_exit_rcu+0x128/0x150 [ 831.224652][ C1] irq_exit_rcu+0x9/0x10 [ 831.228941][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 831.234596][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 831.240628][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 831.246019][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 831.265919][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 831.272014][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 831.280017][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 831.288039][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 831.296043][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 831.304044][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 831.312236][ C1] ? kernel_init_free_pages+0x87/0x100 [ 831.317721][ C1] get_page_from_freelist+0x6b5/0xa90 [ 831.323139][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 831.328542][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 831.334332][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 831.340343][ C1] pipe_write+0x580/0x1930 [ 831.344807][ C1] ? pipe_read+0x1030/0x1030 [ 831.349422][ C1] ? fsnotify_perm+0x67/0x4e0 [ 831.354156][ C1] ? io_schedule+0x120/0x120 [ 831.358867][ C1] ? security_file_permission+0xa8/0xc0 [ 831.364439][ C1] ? iov_iter_init+0x3f/0x120 [ 831.369134][ C1] vfs_write+0xc02/0xf20 [ 831.373403][ C1] ? kernel_write+0x3c0/0x3c0 [ 831.378102][ C1] ? __fget_files+0x310/0x370 [ 831.382814][ C1] ? __fdget_pos+0x1fa/0x300 [ 831.387421][ C1] ? ksys_write+0x77/0x2b0 [ 831.391876][ C1] ksys_write+0x186/0x2b0 [ 831.396241][ C1] ? __ia32_sys_read+0x90/0x90 [ 831.401038][ C1] __x64_sys_write+0x7b/0x90 [ 831.406636][ C1] do_syscall_64+0x31/0x70 [ 831.411080][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 831.417087][ C1] RIP: 0033:0x7f9380d05049 [ 831.421666][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 831.441386][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 831.449829][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 831.457824][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 831.465994][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 831.473991][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 831.481989][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 831.490076][ C1] ---[ end trace 6a7df80a272a8509 ]--- [ 831.495803][ C1] ------------[ cut here ]------------ [ 831.501376][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 831.507393][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 831.517010][ C1] Modules linked in: [ 831.520958][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 831.532777][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 831.542877][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 831.548434][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 831.568049][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 831.574140][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 831.582214][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 831.590200][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: fffff5200002c035 [ 831.598181][ C1] R10: fffff5200002c035 R11: 0000000000000000 R12: ffff88810db870c8 [ 831.606182][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 831.614173][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 831.623229][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 831.630347][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 831.638344][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 831.646322][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 831.654289][ C1] Call Trace: [ 831.657587][ C1] [ 831.660450][ C1] aiptek_irq+0x19b7/0x25f0 [ 831.664971][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 831.670779][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 831.675906][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 831.680931][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 831.686306][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 831.691506][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 831.696389][ C1] dummy_timer+0x798/0x42a0 [ 831.700892][ C1] ? enqueue_timer+0x1d1/0x470 [ 831.705740][ C1] ? __mod_timer+0x995/0xde0 [ 831.710329][ C1] ? mod_timer_pending+0x30/0x30 [ 831.715283][ C1] ? __kasan_check_write+0x14/0x20 [ 831.720408][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 831.725649][ C1] ? dummy_free_streams+0x360/0x360 [ 831.730864][ C1] ? __kasan_check_write+0x14/0x20 [ 831.735984][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 831.741105][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 831.746662][ C1] ? dummy_free_streams+0x360/0x360 [ 831.751892][ C1] call_timer_fn+0x35/0x280 [ 831.756406][ C1] ? dummy_free_streams+0x360/0x360 [ 831.761615][ C1] expire_timers+0x21f/0x3b0 [ 831.766233][ C1] __run_timers+0x548/0x680 [ 831.770734][ C1] ? enqueue_timer+0x470/0x470 [ 831.775507][ C1] run_timer_softirq+0x69/0xf0 [ 831.780269][ C1] __do_softirq+0x27e/0x598 [ 831.784864][ C1] asm_call_irq_on_stack+0xf/0x20 [ 831.789920][ C1] [ 831.792863][ C1] do_softirq_own_stack+0x60/0x80 [ 831.797884][ C1] __irq_exit_rcu+0x128/0x150 [ 831.802562][ C1] irq_exit_rcu+0x9/0x10 [ 831.806806][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 831.812706][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 831.818697][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 831.823984][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 831.843595][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 831.849662][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 831.857653][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 831.865642][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 831.873717][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 831.881688][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 831.889762][ C1] ? kernel_init_free_pages+0x87/0x100 [ 831.895210][ C1] get_page_from_freelist+0x6b5/0xa90 [ 831.900589][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 831.905946][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 831.911478][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 831.917459][ C1] pipe_write+0x580/0x1930 [ 831.921875][ C1] ? pipe_read+0x1030/0x1030 [ 831.926482][ C1] ? fsnotify_perm+0x67/0x4e0 [ 831.931159][ C1] ? io_schedule+0x120/0x120 [ 831.935748][ C1] ? security_file_permission+0xa8/0xc0 [ 831.941300][ C1] ? iov_iter_init+0x3f/0x120 [ 831.945998][ C1] vfs_write+0xc02/0xf20 [ 831.950245][ C1] ? kernel_write+0x3c0/0x3c0 [ 831.955088][ C1] ? __fget_files+0x310/0x370 [ 831.959763][ C1] ? __fdget_pos+0x1fa/0x300 [ 831.964450][ C1] ? ksys_write+0x77/0x2b0 [ 831.968859][ C1] ksys_write+0x186/0x2b0 [ 831.973224][ C1] ? __ia32_sys_read+0x90/0x90 [ 831.978163][ C1] __x64_sys_write+0x7b/0x90 [ 831.982772][ C1] do_syscall_64+0x31/0x70 [ 831.987181][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 831.993088][ C1] RIP: 0033:0x7f9380d05049 [ 831.997514][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 832.017128][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 832.025539][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 832.033600][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 832.041655][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 832.049716][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 832.057699][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 832.065665][ C1] ---[ end trace 6a7df80a272a850a ]--- [ 832.071470][ C1] ------------[ cut here ]------------ [ 832.076977][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 832.083031][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 832.092663][ C1] Modules linked in: [ 832.096583][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 832.108306][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 832.118492][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 832.124056][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 832.143686][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 832.149798][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 832.157788][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 832.165780][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 832.173779][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 832.181786][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 832.189777][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 832.198725][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 832.205334][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 832.213327][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 832.221321][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 832.229303][ C1] Call Trace: [ 832.232681][ C1] [ 832.235581][ C1] aiptek_irq+0x19b7/0x25f0 [ 832.240101][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 832.245925][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 832.251049][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 832.256088][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 832.261600][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 832.266810][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 832.271686][ C1] dummy_timer+0x798/0x42a0 [ 832.276202][ C1] ? enqueue_timer+0x1d1/0x470 [ 832.281021][ C1] ? __mod_timer+0x995/0xde0 [ 832.285629][ C1] ? mod_timer_pending+0x30/0x30 [ 832.290600][ C1] ? __kasan_check_write+0x14/0x20 [ 832.295727][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 832.300944][ C1] ? dummy_free_streams+0x360/0x360 [ 832.306181][ C1] ? __kasan_check_write+0x14/0x20 [ 832.311584][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 832.316729][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 832.322290][ C1] ? dummy_free_streams+0x360/0x360 [ 832.327506][ C1] call_timer_fn+0x35/0x280 [ 832.332027][ C1] ? dummy_free_streams+0x360/0x360 [ 832.337246][ C1] expire_timers+0x21f/0x3b0 [ 832.341888][ C1] __run_timers+0x548/0x680 [ 832.346414][ C1] ? enqueue_timer+0x470/0x470 [ 832.351283][ C1] run_timer_softirq+0x69/0xf0 [ 832.356063][ C1] __do_softirq+0x27e/0x598 [ 832.360577][ C1] asm_call_irq_on_stack+0xf/0x20 [ 832.365609][ C1] [ 832.368564][ C1] do_softirq_own_stack+0x60/0x80 [ 832.373633][ C1] __irq_exit_rcu+0x128/0x150 [ 832.378330][ C1] irq_exit_rcu+0x9/0x10 [ 832.382585][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 832.388254][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 832.394254][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 832.399552][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 832.419347][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 832.425432][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 832.433422][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 832.441438][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 832.449428][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 832.457426][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 832.465444][ C1] ? kernel_init_free_pages+0x87/0x100 [ 832.471016][ C1] get_page_from_freelist+0x6b5/0xa90 [ 832.476401][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 832.481794][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 832.487392][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 832.493393][ C1] pipe_write+0x580/0x1930 [ 832.497831][ C1] ? pipe_read+0x1030/0x1030 [ 832.502437][ C1] ? fsnotify_perm+0x67/0x4e0 [ 832.507127][ C1] ? io_schedule+0x120/0x120 [ 832.511729][ C1] ? security_file_permission+0xa8/0xc0 [ 832.517288][ C1] ? iov_iter_init+0x3f/0x120 [ 832.522010][ C1] vfs_write+0xc02/0xf20 [ 832.526270][ C1] ? kernel_write+0x3c0/0x3c0 [ 832.530963][ C1] ? __fget_files+0x310/0x370 [ 832.535652][ C1] ? __fdget_pos+0x1fa/0x300 [ 832.540251][ C1] ? ksys_write+0x77/0x2b0 [ 832.544676][ C1] ksys_write+0x186/0x2b0 [ 832.549016][ C1] ? __ia32_sys_read+0x90/0x90 [ 832.553782][ C1] __x64_sys_write+0x7b/0x90 [ 832.558378][ C1] do_syscall_64+0x31/0x70 [ 832.562808][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 832.568715][ C1] RIP: 0033:0x7f9380d05049 [ 832.573151][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 832.592773][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 832.601213][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 832.609215][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 832.617295][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 832.625324][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 832.633318][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 832.641406][ C1] ---[ end trace 6a7df80a272a850b ]--- [ 832.647019][ C1] ------------[ cut here ]------------ [ 832.652484][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 832.658495][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 832.668131][ C1] Modules linked in: [ 832.672031][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 832.683833][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 832.693899][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 832.699464][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 832.719166][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 832.725236][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 832.733218][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 832.741186][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 832.749157][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 832.757126][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 832.765098][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 832.774021][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 832.780605][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 832.788585][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 832.796744][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 832.804708][ C1] Call Trace: [ 832.807986][ C1] [ 832.810841][ C1] aiptek_irq+0x19b7/0x25f0 [ 832.815367][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 832.821189][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 832.826328][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 832.831351][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 832.836753][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 832.841960][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 832.846815][ C1] dummy_timer+0x798/0x42a0 [ 832.851332][ C1] ? enqueue_timer+0x1d1/0x470 [ 832.856099][ C1] ? __mod_timer+0x995/0xde0 [ 832.860778][ C1] ? mod_timer_pending+0x30/0x30 [ 832.865747][ C1] ? __kasan_check_write+0x14/0x20 [ 832.870952][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 832.876161][ C1] ? dummy_free_streams+0x360/0x360 [ 832.881371][ C1] ? __kasan_check_write+0x14/0x20 [ 832.886474][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 832.891579][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 832.897134][ C1] ? dummy_free_streams+0x360/0x360 [ 832.902349][ C1] call_timer_fn+0x35/0x280 [ 832.906854][ C1] ? dummy_free_streams+0x360/0x360 [ 832.912051][ C1] expire_timers+0x21f/0x3b0 [ 832.916632][ C1] __run_timers+0x548/0x680 [ 832.921313][ C1] ? enqueue_timer+0x470/0x470 [ 832.926074][ C1] run_timer_softirq+0x69/0xf0 [ 832.930831][ C1] __do_softirq+0x27e/0x598 [ 832.935331][ C1] asm_call_irq_on_stack+0xf/0x20 [ 832.940459][ C1] [ 832.943444][ C1] do_softirq_own_stack+0x60/0x80 [ 832.948501][ C1] __irq_exit_rcu+0x128/0x150 [ 832.953175][ C1] irq_exit_rcu+0x9/0x10 [ 832.957411][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 832.963038][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 832.969017][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 832.974289][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 832.994003][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 833.000080][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 833.008076][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 833.016065][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 833.024041][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 833.032006][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 833.040164][ C1] ? kernel_init_free_pages+0x87/0x100 [ 833.045626][ C1] get_page_from_freelist+0x6b5/0xa90 [ 833.050999][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 833.056366][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 833.061911][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 833.067898][ C1] pipe_write+0x580/0x1930 [ 833.072398][ C1] ? pipe_read+0x1030/0x1030 [ 833.076981][ C1] ? fsnotify_perm+0x67/0x4e0 [ 833.081659][ C1] ? io_schedule+0x120/0x120 [ 833.086252][ C1] ? security_file_permission+0xa8/0xc0 [ 833.091799][ C1] ? iov_iter_init+0x3f/0x120 [ 833.096622][ C1] vfs_write+0xc02/0xf20 [ 833.100880][ C1] ? kernel_write+0x3c0/0x3c0 [ 833.105548][ C1] ? __fget_files+0x310/0x370 [ 833.110219][ C1] ? __fdget_pos+0x1fa/0x300 [ 833.114803][ C1] ? ksys_write+0x77/0x2b0 [ 833.119218][ C1] ksys_write+0x186/0x2b0 [ 833.123561][ C1] ? __ia32_sys_read+0x90/0x90 [ 833.128343][ C1] __x64_sys_write+0x7b/0x90 [ 833.133043][ C1] do_syscall_64+0x31/0x70 [ 833.137454][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 833.143340][ C1] RIP: 0033:0x7f9380d05049 [ 833.147750][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 833.167346][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 833.175761][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 833.183815][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 833.191804][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 833.199770][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 833.207838][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 833.215958][ C1] ---[ end trace 6a7df80a272a850c ]--- [ 833.221537][ C1] ------------[ cut here ]------------ [ 833.227008][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 833.233062][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 833.242686][ C1] Modules linked in: [ 833.246606][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 833.258322][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 833.268418][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 833.273983][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 833.293611][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 833.299702][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 833.307688][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 833.315766][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 833.323755][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 833.331741][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 833.339734][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 833.348674][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 833.355269][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 833.363261][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 833.371255][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 833.379240][ C1] Call Trace: [ 833.382536][ C1] [ 833.385415][ C1] aiptek_irq+0x19b7/0x25f0 [ 833.389929][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 833.395748][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 833.400876][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 833.405939][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 833.411340][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 833.416554][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 833.421424][ C1] dummy_timer+0x798/0x42a0 [ 833.425947][ C1] ? enqueue_timer+0x1d1/0x470 [ 833.430729][ C1] ? __mod_timer+0x995/0xde0 [ 833.435343][ C1] ? mod_timer_pending+0x30/0x30 [ 833.440292][ C1] ? __kasan_check_write+0x14/0x20 [ 833.445416][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 833.450637][ C1] ? dummy_free_streams+0x360/0x360 [ 833.455847][ C1] ? __kasan_check_write+0x14/0x20 [ 833.460977][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 833.466113][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 833.471686][ C1] ? dummy_free_streams+0x360/0x360 [ 833.476901][ C1] call_timer_fn+0x35/0x280 [ 833.481431][ C1] ? dummy_free_streams+0x360/0x360 [ 833.486648][ C1] expire_timers+0x21f/0x3b0 [ 833.491339][ C1] __run_timers+0x548/0x680 [ 833.495859][ C1] ? enqueue_timer+0x470/0x470 [ 833.500648][ C1] run_timer_softirq+0x69/0xf0 [ 833.505432][ C1] __do_softirq+0x27e/0x598 [ 833.509952][ C1] asm_call_irq_on_stack+0xf/0x20 [ 833.514985][ C1] [ 833.517966][ C1] do_softirq_own_stack+0x60/0x80 [ 833.523007][ C1] __irq_exit_rcu+0x128/0x150 [ 833.527719][ C1] irq_exit_rcu+0x9/0x10 [ 833.532066][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 833.537734][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 833.543740][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 833.549037][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 833.568671][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 833.574758][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 833.582748][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 833.590740][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 833.598726][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 833.606817][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 833.614827][ C1] ? kernel_init_free_pages+0x87/0x100 [ 833.620301][ C1] get_page_from_freelist+0x6b5/0xa90 [ 833.625695][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 833.631142][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 833.636725][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 833.642736][ C1] pipe_write+0x580/0x1930 [ 833.647178][ C1] ? pipe_read+0x1030/0x1030 [ 833.651780][ C1] ? fsnotify_perm+0x67/0x4e0 [ 833.656481][ C1] ? io_schedule+0x120/0x120 [ 833.661100][ C1] ? security_file_permission+0xa8/0xc0 [ 833.666667][ C1] ? iov_iter_init+0x3f/0x120 [ 833.671360][ C1] vfs_write+0xc02/0xf20 [ 833.675621][ C1] ? kernel_write+0x3c0/0x3c0 [ 833.680316][ C1] ? __fget_files+0x310/0x370 [ 833.685008][ C1] ? __fdget_pos+0x1fa/0x300 [ 833.689614][ C1] ? ksys_write+0x77/0x2b0 [ 833.694048][ C1] ksys_write+0x186/0x2b0 [ 833.698401][ C1] ? __ia32_sys_read+0x90/0x90 [ 833.703184][ C1] __x64_sys_write+0x7b/0x90 [ 833.707795][ C1] do_syscall_64+0x31/0x70 [ 833.712235][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 833.718137][ C1] RIP: 0033:0x7f9380d05049 [ 833.722568][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 833.742191][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 833.750631][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 833.758618][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 833.766791][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 833.774784][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 833.782777][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 833.790768][ C1] ---[ end trace 6a7df80a272a850d ]--- [ 833.796411][ C1] ------------[ cut here ]------------ [ 833.801891][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 833.807905][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 833.817524][ C1] Modules linked in: [ 833.821432][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 833.833138][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 833.843217][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 833.848762][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 833.868365][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 833.874430][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 833.882396][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 833.890367][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 833.898426][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 833.906406][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 833.914379][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 833.923309][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 833.929913][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 833.937994][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 833.945966][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 833.953938][ C1] Call Trace: [ 833.957216][ C1] [ 833.960089][ C1] aiptek_irq+0x19b7/0x25f0 [ 833.964607][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 833.970411][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 833.975525][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 833.980548][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 833.985923][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 833.991117][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 833.995971][ C1] dummy_timer+0x798/0x42a0 [ 834.000505][ C1] ? try_invoke_on_locked_down_task+0x290/0x290 [ 834.006760][ C1] ? __queue_work+0x974/0xda0 [ 834.011431][ C1] ? dummy_free_streams+0x360/0x360 [ 834.016654][ C1] ? __kasan_check_write+0x14/0x20 [ 834.021769][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 834.026902][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 834.032461][ C1] ? wg_expired_zero_key_material+0x11d/0x170 [ 834.038557][ C1] ? dummy_free_streams+0x360/0x360 [ 834.043763][ C1] call_timer_fn+0x35/0x280 [ 834.048271][ C1] ? dummy_free_streams+0x360/0x360 [ 834.053599][ C1] expire_timers+0x21f/0x3b0 [ 834.058187][ C1] __run_timers+0x548/0x680 [ 834.062956][ C1] ? enqueue_timer+0x470/0x470 [ 834.067729][ C1] run_timer_softirq+0x69/0xf0 [ 834.072527][ C1] __do_softirq+0x27e/0x598 [ 834.077032][ C1] asm_call_irq_on_stack+0xf/0x20 [ 834.082153][ C1] [ 834.085090][ C1] do_softirq_own_stack+0x60/0x80 [ 834.090127][ C1] __irq_exit_rcu+0x128/0x150 [ 834.094821][ C1] irq_exit_rcu+0x9/0x10 [ 834.099067][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 834.104708][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 834.110688][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 834.115968][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 834.135586][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 834.141649][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 834.149620][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 834.157597][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 834.165562][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 834.173534][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 834.181570][ C1] ? kernel_init_free_pages+0x87/0x100 [ 834.187046][ C1] get_page_from_freelist+0x6b5/0xa90 [ 834.192429][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 834.197807][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 834.203362][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 834.209372][ C1] pipe_write+0x580/0x1930 [ 834.213791][ C1] ? pipe_read+0x1030/0x1030 [ 834.218376][ C1] ? fsnotify_perm+0x67/0x4e0 [ 834.223051][ C1] ? io_schedule+0x120/0x120 [ 834.227641][ C1] ? security_file_permission+0xa8/0xc0 [ 834.233193][ C1] ? iov_iter_init+0x3f/0x120 [ 834.237874][ C1] vfs_write+0xc02/0xf20 [ 834.242115][ C1] ? kernel_write+0x3c0/0x3c0 [ 834.246802][ C1] ? __fget_files+0x310/0x370 [ 834.251492][ C1] ? __fdget_pos+0x1fa/0x300 [ 834.256082][ C1] ? ksys_write+0x77/0x2b0 [ 834.260497][ C1] ksys_write+0x186/0x2b0 [ 834.264857][ C1] ? __ia32_sys_read+0x90/0x90 [ 834.269630][ C1] __x64_sys_write+0x7b/0x90 [ 834.274221][ C1] do_syscall_64+0x31/0x70 [ 834.278639][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 834.284534][ C1] RIP: 0033:0x7f9380d05049 [ 834.289042][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 834.308664][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 834.317092][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 834.325071][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 834.333039][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 834.341034][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 834.349024][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 834.357001][ C1] ---[ end trace 6a7df80a272a850e ]--- [ 834.362605][ C1] ------------[ cut here ]------------ [ 834.368084][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 834.374165][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 834.383799][ C1] Modules linked in: [ 834.387722][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 834.399445][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 834.409544][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 834.415111][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 834.434827][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 834.440911][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 834.448904][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 834.456912][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 834.464904][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 834.472892][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 834.480884][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 834.489885][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 834.496485][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 834.504475][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 834.512467][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 834.520446][ C1] Call Trace: [ 834.523742][ C1] [ 834.526609][ C1] aiptek_irq+0x19b7/0x25f0 [ 834.531124][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 834.536947][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 834.542081][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 834.547132][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 834.552534][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 834.557747][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 834.562614][ C1] dummy_timer+0x798/0x42a0 [ 834.567128][ C1] ? enqueue_timer+0x1d1/0x470 [ 834.571908][ C1] ? __mod_timer+0x995/0xde0 [ 834.576514][ C1] ? mod_timer_pending+0x30/0x30 [ 834.581465][ C1] ? dummy_free_streams+0x360/0x360 [ 834.586675][ C1] ? __kasan_check_write+0x14/0x20 [ 834.591796][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 834.596915][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 834.602476][ C1] ? dummy_free_streams+0x360/0x360 [ 834.607689][ C1] call_timer_fn+0x35/0x280 [ 834.612205][ C1] ? dummy_free_streams+0x360/0x360 [ 834.617411][ C1] expire_timers+0x21f/0x3b0 [ 834.622012][ C1] __run_timers+0x548/0x680 [ 834.626532][ C1] ? enqueue_timer+0x470/0x470 [ 834.631311][ C1] run_timer_softirq+0x69/0xf0 [ 834.636099][ C1] __do_softirq+0x27e/0x598 [ 834.640634][ C1] asm_call_irq_on_stack+0xf/0x20 [ 834.645670][ C1] [ 834.648625][ C1] do_softirq_own_stack+0x60/0x80 [ 834.653662][ C1] __irq_exit_rcu+0x128/0x150 [ 834.658353][ C1] irq_exit_rcu+0x9/0x10 [ 834.662615][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 834.668263][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 834.674263][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 834.679564][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 834.699186][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 834.705283][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 834.713274][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 834.721262][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 834.729262][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 834.737272][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 834.745290][ C1] ? kernel_init_free_pages+0x87/0x100 [ 834.750772][ C1] get_page_from_freelist+0x6b5/0xa90 [ 834.756175][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 834.761575][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 834.767145][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 834.773145][ C1] pipe_write+0x580/0x1930 [ 834.777605][ C1] ? pipe_read+0x1030/0x1030 [ 834.782263][ C1] ? fsnotify_perm+0x67/0x4e0 [ 834.786971][ C1] ? io_schedule+0x120/0x120 [ 834.791584][ C1] ? security_file_permission+0xa8/0xc0 [ 834.797270][ C1] ? iov_iter_init+0x3f/0x120 [ 834.801976][ C1] vfs_write+0xc02/0xf20 [ 834.806242][ C1] ? kernel_write+0x3c0/0x3c0 [ 834.810976][ C1] ? __fget_files+0x310/0x370 [ 834.815667][ C1] ? __fdget_pos+0x1fa/0x300 [ 834.820266][ C1] ? ksys_write+0x77/0x2b0 [ 834.824696][ C1] ksys_write+0x186/0x2b0 [ 834.829047][ C1] ? __ia32_sys_read+0x90/0x90 [ 834.833839][ C1] __x64_sys_write+0x7b/0x90 [ 834.838447][ C1] do_syscall_64+0x31/0x70 [ 834.842885][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 834.848882][ C1] RIP: 0033:0x7f9380d05049 [ 834.853324][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 834.873413][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 834.881852][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 834.889850][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 834.897838][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 834.905826][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 834.913924][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 834.921907][ C1] ---[ end trace 6a7df80a272a850f ]--- [ 834.927508][ C1] ------------[ cut here ]------------ [ 834.932977][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 834.938991][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 834.948617][ C1] Modules linked in: [ 834.952524][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 834.964226][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 834.974298][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 834.979942][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 834.999549][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 835.005612][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 835.013569][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 835.021554][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 835.029524][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 835.037500][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 835.045476][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 835.054398][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 835.060976][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 835.068945][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 835.076932][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 835.085002][ C1] Call Trace: [ 835.088280][ C1] [ 835.091138][ C1] aiptek_irq+0x19b7/0x25f0 [ 835.095636][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 835.101449][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 835.106564][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 835.111611][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 835.116984][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 835.122194][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 835.127060][ C1] dummy_timer+0x798/0x42a0 [ 835.131559][ C1] ? enqueue_timer+0x1d1/0x470 [ 835.136318][ C1] ? __mod_timer+0x995/0xde0 [ 835.140902][ C1] ? mod_timer_pending+0x30/0x30 [ 835.145924][ C1] ? dummy_free_streams+0x360/0x360 [ 835.151117][ C1] ? __kasan_check_write+0x14/0x20 [ 835.156227][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 835.161331][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 835.166872][ C1] ? dummy_free_streams+0x360/0x360 [ 835.172066][ C1] call_timer_fn+0x35/0x280 [ 835.176572][ C1] ? dummy_free_streams+0x360/0x360 [ 835.181792][ C1] expire_timers+0x21f/0x3b0 [ 835.186372][ C1] __run_timers+0x548/0x680 [ 835.190867][ C1] ? enqueue_timer+0x470/0x470 [ 835.195622][ C1] run_timer_softirq+0x69/0xf0 [ 835.200398][ C1] __do_softirq+0x27e/0x598 [ 835.204978][ C1] asm_call_irq_on_stack+0xf/0x20 [ 835.209982][ C1] [ 835.212911][ C1] do_softirq_own_stack+0x60/0x80 [ 835.217923][ C1] __irq_exit_rcu+0x128/0x150 [ 835.222592][ C1] irq_exit_rcu+0x9/0x10 [ 835.226826][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 835.232637][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 835.238617][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 835.243917][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 835.263549][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 835.269634][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 835.277599][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 835.285564][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 835.293525][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 835.301488][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 835.309554][ C1] ? kernel_init_free_pages+0x87/0x100 [ 835.315003][ C1] get_page_from_freelist+0x6b5/0xa90 [ 835.320365][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 835.325729][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 835.331273][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 835.337254][ C1] pipe_write+0x580/0x1930 [ 835.341690][ C1] ? pipe_read+0x1030/0x1030 [ 835.346273][ C1] ? fsnotify_perm+0x67/0x4e0 [ 835.350955][ C1] ? io_schedule+0x120/0x120 [ 835.355536][ C1] ? security_file_permission+0xa8/0xc0 [ 835.361078][ C1] ? iov_iter_init+0x3f/0x120 [ 835.365749][ C1] vfs_write+0xc02/0xf20 [ 835.369990][ C1] ? kernel_write+0x3c0/0x3c0 [ 835.374660][ C1] ? __fget_files+0x310/0x370 [ 835.379351][ C1] ? __fdget_pos+0x1fa/0x300 [ 835.383934][ C1] ? ksys_write+0x77/0x2b0 [ 835.388347][ C1] ksys_write+0x186/0x2b0 [ 835.392666][ C1] ? __ia32_sys_read+0x90/0x90 [ 835.397431][ C1] __x64_sys_write+0x7b/0x90 [ 835.402095][ C1] do_syscall_64+0x31/0x70 [ 835.406506][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 835.412395][ C1] RIP: 0033:0x7f9380d05049 [ 835.416812][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 835.436416][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 835.444827][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 835.452793][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 835.460761][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 835.468737][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 835.476717][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 835.484685][ C1] ---[ end trace 6a7df80a272a8510 ]--- [ 835.490229][ C1] ------------[ cut here ]------------ [ 835.495700][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 835.501747][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 835.511377][ C1] Modules linked in: [ 835.515303][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 835.527022][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 835.537115][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 835.542686][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 835.562313][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 835.568393][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 835.576375][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 835.584363][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 835.592353][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 835.600343][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 835.608338][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 835.617288][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 835.623892][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 835.631886][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 835.639881][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 835.647875][ C1] Call Trace: [ 835.651172][ C1] [ 835.654041][ C1] aiptek_irq+0x19b7/0x25f0 [ 835.658566][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 835.664385][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 835.669510][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 835.674638][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 835.680028][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 835.685245][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 835.690110][ C1] dummy_timer+0x798/0x42a0 [ 835.694628][ C1] ? enqueue_timer+0x1d1/0x470 [ 835.699414][ C1] ? __mod_timer+0x995/0xde0 [ 835.704004][ C1] ? mod_timer_pending+0x30/0x30 [ 835.708958][ C1] ? dummy_free_streams+0x360/0x360 [ 835.714163][ C1] ? __kasan_check_write+0x14/0x20 [ 835.719281][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 835.724417][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 835.729977][ C1] ? dummy_free_streams+0x360/0x360 [ 835.735189][ C1] call_timer_fn+0x35/0x280 [ 835.739708][ C1] ? dummy_free_streams+0x360/0x360 [ 835.744924][ C1] expire_timers+0x21f/0x3b0 [ 835.749530][ C1] __run_timers+0x548/0x680 [ 835.754057][ C1] ? enqueue_timer+0x470/0x470 [ 835.758839][ C1] run_timer_softirq+0x69/0xf0 [ 835.763631][ C1] __do_softirq+0x27e/0x598 [ 835.768159][ C1] asm_call_irq_on_stack+0xf/0x20 [ 835.773189][ C1] [ 835.776147][ C1] do_softirq_own_stack+0x60/0x80 [ 835.781188][ C1] __irq_exit_rcu+0x128/0x150 [ 835.785883][ C1] irq_exit_rcu+0x9/0x10 [ 835.790160][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 835.795815][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 835.801817][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 835.807121][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 835.826749][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 835.832831][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 835.840834][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 835.848826][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 835.856814][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 835.864805][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 835.872810][ C1] ? kernel_init_free_pages+0x87/0x100 [ 835.878291][ C1] get_page_from_freelist+0x6b5/0xa90 [ 835.883701][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 835.889085][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 835.894666][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 835.900672][ C1] pipe_write+0x580/0x1930 [ 835.905105][ C1] ? pipe_read+0x1030/0x1030 [ 835.909703][ C1] ? fsnotify_perm+0x67/0x4e0 [ 835.914395][ C1] ? io_schedule+0x120/0x120 [ 835.918998][ C1] ? security_file_permission+0xa8/0xc0 [ 835.924572][ C1] ? iov_iter_init+0x3f/0x120 [ 835.929265][ C1] vfs_write+0xc02/0xf20 [ 835.933555][ C1] ? kernel_write+0x3c0/0x3c0 [ 835.938263][ C1] ? __fget_files+0x310/0x370 [ 835.942959][ C1] ? __fdget_pos+0x1fa/0x300 [ 835.947567][ C1] ? ksys_write+0x77/0x2b0 [ 835.952137][ C1] ksys_write+0x186/0x2b0 [ 835.956592][ C1] ? __ia32_sys_read+0x90/0x90 [ 835.961380][ C1] __x64_sys_write+0x7b/0x90 [ 835.965990][ C1] do_syscall_64+0x31/0x70 [ 835.970427][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 835.976336][ C1] RIP: 0033:0x7f9380d05049 [ 835.980820][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 836.000615][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 836.009051][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 836.017040][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 836.025032][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 836.033029][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 836.041017][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 836.049112][ C1] ---[ end trace 6a7df80a272a8511 ]--- [ 836.054717][ C1] ------------[ cut here ]------------ [ 836.060185][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 836.066291][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 836.075901][ C1] Modules linked in: [ 836.079811][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 836.091544][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 836.101630][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 836.107168][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 836.126761][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 836.132830][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 836.140795][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 836.148857][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 836.156949][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 836.164917][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 836.172884][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 836.181804][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 836.188384][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 836.196359][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 836.204322][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 836.212278][ C1] Call Trace: [ 836.215553][ C1] [ 836.218408][ C1] aiptek_irq+0x19b7/0x25f0 [ 836.222901][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 836.228702][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 836.233801][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 836.238827][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 836.244199][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 836.249401][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 836.254243][ C1] dummy_timer+0x798/0x42a0 [ 836.258737][ C1] ? enqueue_timer+0x1d1/0x470 [ 836.263490][ C1] ? __mod_timer+0x995/0xde0 [ 836.268074][ C1] ? mod_timer_pending+0x30/0x30 [ 836.273009][ C1] ? dummy_free_streams+0x360/0x360 [ 836.278200][ C1] ? __kasan_check_write+0x14/0x20 [ 836.283304][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 836.288404][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 836.293944][ C1] ? dummy_free_streams+0x360/0x360 [ 836.299144][ C1] call_timer_fn+0x35/0x280 [ 836.303643][ C1] ? dummy_free_streams+0x360/0x360 [ 836.308835][ C1] expire_timers+0x21f/0x3b0 [ 836.313510][ C1] __run_timers+0x548/0x680 [ 836.318029][ C1] ? enqueue_timer+0x470/0x470 [ 836.322782][ C1] run_timer_softirq+0x69/0xf0 [ 836.327538][ C1] __do_softirq+0x27e/0x598 [ 836.332034][ C1] asm_call_irq_on_stack+0xf/0x20 [ 836.337042][ C1] [ 836.339975][ C1] do_softirq_own_stack+0x60/0x80 [ 836.344995][ C1] __irq_exit_rcu+0x128/0x150 [ 836.349666][ C1] irq_exit_rcu+0x9/0x10 [ 836.353920][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 836.359548][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 836.365610][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 836.370885][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 836.390485][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 836.396548][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 836.404535][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 836.412501][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 836.420482][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 836.428449][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 836.436432][ C1] ? kernel_init_free_pages+0x87/0x100 [ 836.441892][ C1] get_page_from_freelist+0x6b5/0xa90 [ 836.447262][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 836.452630][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 836.458170][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 836.464152][ C1] pipe_write+0x580/0x1930 [ 836.468586][ C1] ? pipe_read+0x1030/0x1030 [ 836.473177][ C1] ? fsnotify_perm+0x67/0x4e0 [ 836.477853][ C1] ? io_schedule+0x120/0x120 [ 836.482443][ C1] ? security_file_permission+0xa8/0xc0 [ 836.487985][ C1] ? iov_iter_init+0x3f/0x120 [ 836.492658][ C1] vfs_write+0xc02/0xf20 [ 836.496894][ C1] ? kernel_write+0x3c0/0x3c0 [ 836.501576][ C1] ? __fget_files+0x310/0x370 [ 836.506253][ C1] ? __fdget_pos+0x1fa/0x300 [ 836.510839][ C1] ? ksys_write+0x77/0x2b0 [ 836.515339][ C1] ksys_write+0x186/0x2b0 [ 836.519666][ C1] ? __ia32_sys_read+0x90/0x90 [ 836.524445][ C1] __x64_sys_write+0x7b/0x90 [ 836.529149][ C1] do_syscall_64+0x31/0x70 [ 836.533575][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 836.539547][ C1] RIP: 0033:0x7f9380d05049 [ 836.543973][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 836.563586][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 836.572003][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 836.579998][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 836.587971][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 836.596306][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 836.604305][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 836.612298][ C1] ---[ end trace 6a7df80a272a8512 ]--- [ 836.617887][ C1] ------------[ cut here ]------------ [ 836.623360][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 836.629420][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 836.639040][ C1] Modules linked in: [ 836.642959][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 836.654676][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 836.664772][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 836.670342][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 836.689977][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 836.696071][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 836.704059][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 836.712050][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee2a5d8 [ 836.720044][ C1] R10: ffffed103ee2a5d8 R11: 0000000000000000 R12: ffff88810db870c8 [ 836.728036][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 836.736115][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 836.745054][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 836.751651][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 836.759636][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 836.767625][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 836.775610][ C1] Call Trace: [ 836.779079][ C1] [ 836.781948][ C1] aiptek_irq+0x19b7/0x25f0 [ 836.786463][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 836.792295][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 836.797431][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 836.802480][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 836.807874][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 836.813088][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 836.817955][ C1] dummy_timer+0x798/0x42a0 [ 836.822474][ C1] ? enqueue_timer+0x1d1/0x470 [ 836.827252][ C1] ? __mod_timer+0x995/0xde0 [ 836.831866][ C1] ? mod_timer_pending+0x30/0x30 [ 836.836820][ C1] ? dummy_free_streams+0x360/0x360 [ 836.842028][ C1] ? __kasan_check_write+0x14/0x20 [ 836.847172][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 836.852306][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 836.857874][ C1] ? dummy_free_streams+0x360/0x360 [ 836.863098][ C1] call_timer_fn+0x35/0x280 [ 836.867618][ C1] ? dummy_free_streams+0x360/0x360 [ 836.872831][ C1] expire_timers+0x21f/0x3b0 [ 836.877443][ C1] __run_timers+0x548/0x680 [ 836.881960][ C1] ? enqueue_timer+0x470/0x470 [ 836.886849][ C1] run_timer_softirq+0x69/0xf0 [ 836.891634][ C1] __do_softirq+0x27e/0x598 [ 836.896161][ C1] asm_call_irq_on_stack+0xf/0x20 [ 836.901194][ C1] [ 836.904149][ C1] do_softirq_own_stack+0x60/0x80 [ 836.909184][ C1] __irq_exit_rcu+0x128/0x150 [ 836.913869][ C1] irq_exit_rcu+0x9/0x10 [ 836.918127][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 836.923776][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 836.929767][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 836.935058][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 836.954683][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 836.960769][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 836.968751][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 836.976744][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 836.984740][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 836.992729][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 837.000734][ C1] ? kernel_init_free_pages+0x87/0x100 [ 837.006207][ C1] get_page_from_freelist+0x6b5/0xa90 [ 837.011597][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 837.016984][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 837.022546][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 837.028543][ C1] pipe_write+0x580/0x1930 [ 837.032972][ C1] ? pipe_read+0x1030/0x1030 [ 837.037574][ C1] ? fsnotify_perm+0x67/0x4e0 [ 837.042269][ C1] ? io_schedule+0x120/0x120 [ 837.046963][ C1] ? security_file_permission+0xa8/0xc0 [ 837.052530][ C1] ? iov_iter_init+0x3f/0x120 [ 837.057214][ C1] vfs_write+0xc02/0xf20 [ 837.061464][ C1] ? kernel_write+0x3c0/0x3c0 [ 837.066149][ C1] ? __fget_files+0x310/0x370 [ 837.070840][ C1] ? __fdget_pos+0x1fa/0x300 [ 837.075443][ C1] ? ksys_write+0x77/0x2b0 [ 837.079876][ C1] ksys_write+0x186/0x2b0 [ 837.084230][ C1] ? __ia32_sys_read+0x90/0x90 [ 837.089014][ C1] __x64_sys_write+0x7b/0x90 [ 837.093628][ C1] do_syscall_64+0x31/0x70 [ 837.098063][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 837.103979][ C1] RIP: 0033:0x7f9380d05049 [ 837.108427][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 837.128060][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 837.136503][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 837.144509][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 837.152588][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 837.160576][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 837.168572][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 837.176567][ C1] ---[ end trace 6a7df80a272a8513 ]--- [ 837.182411][ C1] ------------[ cut here ]------------ [ 837.187875][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 837.193888][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 837.203520][ C1] Modules linked in: [ 837.207416][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 837.219114][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 837.229182][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 837.234717][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 837.254932][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 837.260995][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 837.268972][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 837.276949][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 837.284953][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 837.292929][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 837.300898][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 837.309836][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 837.316428][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 837.324413][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 837.332380][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 837.340338][ C1] Call Trace: [ 837.343614][ C1] [ 837.346470][ C1] aiptek_irq+0x19b7/0x25f0 [ 837.350970][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 837.356780][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 837.361886][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 837.366905][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 837.372280][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 837.377471][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 837.382426][ C1] dummy_timer+0x798/0x42a0 [ 837.386928][ C1] ? enqueue_timer+0x1d1/0x470 [ 837.391692][ C1] ? __mod_timer+0x995/0xde0 [ 837.396279][ C1] ? mod_timer_pending+0x30/0x30 [ 837.401211][ C1] ? dummy_free_streams+0x360/0x360 [ 837.406410][ C1] ? __kasan_check_write+0x14/0x20 [ 837.411539][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 837.416650][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 837.422198][ C1] ? dummy_free_streams+0x360/0x360 [ 837.427396][ C1] call_timer_fn+0x35/0x280 [ 837.431897][ C1] ? dummy_free_streams+0x360/0x360 [ 837.437114][ C1] expire_timers+0x21f/0x3b0 [ 837.441706][ C1] __run_timers+0x548/0x680 [ 837.446218][ C1] ? enqueue_timer+0x470/0x470 [ 837.450984][ C1] run_timer_softirq+0x69/0xf0 [ 837.455750][ C1] __do_softirq+0x27e/0x598 [ 837.460251][ C1] asm_call_irq_on_stack+0xf/0x20 [ 837.465262][ C1] [ 837.468204][ C1] do_softirq_own_stack+0x60/0x80 [ 837.473321][ C1] __irq_exit_rcu+0x128/0x150 [ 837.478006][ C1] irq_exit_rcu+0x9/0x10 [ 837.482251][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 837.487902][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 837.493890][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 837.499193][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 837.518804][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 837.524883][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 837.532851][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 837.540824][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 837.548793][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 837.556771][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 837.564770][ C1] ? kernel_init_free_pages+0x87/0x100 [ 837.570219][ C1] get_page_from_freelist+0x6b5/0xa90 [ 837.575590][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 837.580959][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 837.586519][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 837.592623][ C1] pipe_write+0x580/0x1930 [ 837.597053][ C1] ? pipe_read+0x1030/0x1030 [ 837.601651][ C1] ? fsnotify_perm+0x67/0x4e0 [ 837.606320][ C1] ? io_schedule+0x120/0x120 [ 837.610915][ C1] ? security_file_permission+0xa8/0xc0 [ 837.616469][ C1] ? iov_iter_init+0x3f/0x120 [ 837.621144][ C1] vfs_write+0xc02/0xf20 [ 837.625389][ C1] ? kernel_write+0x3c0/0x3c0 [ 837.630057][ C1] ? __fget_files+0x310/0x370 [ 837.634745][ C1] ? __fdget_pos+0x1fa/0x300 [ 837.639326][ C1] ? ksys_write+0x77/0x2b0 [ 837.643744][ C1] ksys_write+0x186/0x2b0 [ 837.648077][ C1] ? __ia32_sys_read+0x90/0x90 [ 837.652984][ C1] __x64_sys_write+0x7b/0x90 [ 837.657615][ C1] do_syscall_64+0x31/0x70 [ 837.662118][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 837.668008][ C1] RIP: 0033:0x7f9380d05049 [ 837.672415][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 837.692032][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 837.700449][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 837.708415][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 837.716388][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 837.724440][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 837.732414][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 837.740393][ C1] ---[ end trace 6a7df80a272a8514 ]--- [ 837.746045][ C1] ------------[ cut here ]------------ [ 837.751520][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 837.757570][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 837.767193][ C1] Modules linked in: [ 837.771140][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 837.782865][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 837.792975][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 837.798541][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 837.818172][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 837.824259][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 837.832239][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 837.840232][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 837.848223][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 837.856232][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 837.864238][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 837.873184][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 837.879780][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 837.887816][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 837.895819][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 837.903819][ C1] Call Trace: [ 837.907202][ C1] [ 837.910071][ C1] aiptek_irq+0x19b7/0x25f0 [ 837.914589][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 837.920414][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 837.925543][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 837.930584][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 837.935983][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 837.941196][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 837.946064][ C1] dummy_timer+0x798/0x42a0 [ 837.950628][ C1] ? enqueue_timer+0x1d1/0x470 [ 837.955404][ C1] ? __mod_timer+0x995/0xde0 [ 837.960094][ C1] ? mod_timer_pending+0x30/0x30 [ 837.965047][ C1] ? dummy_free_streams+0x360/0x360 [ 837.970259][ C1] ? __kasan_check_write+0x14/0x20 [ 837.975381][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 837.980502][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 837.986065][ C1] ? dummy_free_streams+0x360/0x360 [ 837.991341][ C1] call_timer_fn+0x35/0x280 [ 837.995867][ C1] ? dummy_free_streams+0x360/0x360 [ 838.001099][ C1] expire_timers+0x21f/0x3b0 [ 838.005719][ C1] __run_timers+0x548/0x680 [ 838.010253][ C1] ? enqueue_timer+0x470/0x470 [ 838.015049][ C1] run_timer_softirq+0x69/0xf0 [ 838.019839][ C1] __do_softirq+0x27e/0x598 [ 838.024356][ C1] asm_call_irq_on_stack+0xf/0x20 [ 838.029381][ C1] [ 838.032339][ C1] do_softirq_own_stack+0x60/0x80 [ 838.037381][ C1] __irq_exit_rcu+0x128/0x150 [ 838.042077][ C1] irq_exit_rcu+0x9/0x10 [ 838.046337][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 838.051986][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 838.057980][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 838.063283][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 838.082915][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 838.089007][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 838.096999][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 838.105002][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 838.113003][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 838.121100][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 838.129270][ C1] ? kernel_init_free_pages+0x87/0x100 [ 838.135405][ C1] get_page_from_freelist+0x6b5/0xa90 [ 838.140803][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 838.146197][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 838.151844][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 838.157927][ C1] pipe_write+0x580/0x1930 [ 838.162361][ C1] ? pipe_read+0x1030/0x1030 [ 838.166964][ C1] ? fsnotify_perm+0x67/0x4e0 [ 838.171660][ C1] ? io_schedule+0x120/0x120 [ 838.176360][ C1] ? security_file_permission+0xa8/0xc0 [ 838.181925][ C1] ? iov_iter_init+0x3f/0x120 [ 838.186623][ C1] vfs_write+0xc02/0xf20 [ 838.190881][ C1] ? kernel_write+0x3c0/0x3c0 [ 838.195585][ C1] ? __fget_files+0x310/0x370 [ 838.200282][ C1] ? __fdget_pos+0x1fa/0x300 [ 838.204893][ C1] ? ksys_write+0x77/0x2b0 [ 838.209323][ C1] ksys_write+0x186/0x2b0 [ 838.213667][ C1] ? __ia32_sys_read+0x90/0x90 [ 838.218451][ C1] __x64_sys_write+0x7b/0x90 [ 838.223059][ C1] do_syscall_64+0x31/0x70 [ 838.227499][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 838.233409][ C1] RIP: 0033:0x7f9380d05049 [ 838.237844][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 838.257470][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 838.265914][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 838.273915][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 838.281913][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 838.290013][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 838.298122][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 838.306130][ C1] ---[ end trace 6a7df80a272a8515 ]--- [ 838.311707][ C1] ------------[ cut here ]------------ [ 838.317184][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 838.323202][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 838.332825][ C1] Modules linked in: [ 838.336749][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 838.348471][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 838.358660][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 838.364222][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 838.383838][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 838.389910][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 838.397884][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 838.405866][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 838.413853][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 838.421821][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 838.429799][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 838.438727][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 838.445330][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 838.453321][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 838.461292][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 838.469280][ C1] Call Trace: [ 838.472550][ C1] [ 838.475409][ C1] aiptek_irq+0x19b7/0x25f0 [ 838.479909][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 838.485712][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 838.490823][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 838.495846][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 838.501309][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 838.506612][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 838.511464][ C1] dummy_timer+0x798/0x42a0 [ 838.515977][ C1] ? enqueue_timer+0x1d1/0x470 [ 838.520762][ C1] ? __mod_timer+0x995/0xde0 [ 838.525364][ C1] ? mod_timer_pending+0x30/0x30 [ 838.530307][ C1] ? dummy_free_streams+0x360/0x360 [ 838.535518][ C1] ? __kasan_check_write+0x14/0x20 [ 838.540633][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 838.545753][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 838.551298][ C1] ? dummy_free_streams+0x360/0x360 [ 838.556515][ C1] call_timer_fn+0x35/0x280 [ 838.561018][ C1] ? dummy_free_streams+0x360/0x360 [ 838.566220][ C1] expire_timers+0x21f/0x3b0 [ 838.570815][ C1] __run_timers+0x548/0x680 [ 838.575318][ C1] ? enqueue_timer+0x470/0x470 [ 838.580090][ C1] run_timer_softirq+0x69/0xf0 [ 838.584871][ C1] __do_softirq+0x27e/0x598 [ 838.589388][ C1] asm_call_irq_on_stack+0xf/0x20 [ 838.594399][ C1] [ 838.597363][ C1] do_softirq_own_stack+0x60/0x80 [ 838.602387][ C1] __irq_exit_rcu+0x128/0x150 [ 838.607061][ C1] irq_exit_rcu+0x9/0x10 [ 838.611305][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 838.616965][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 838.622946][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 838.628236][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 838.647840][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 838.653904][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 838.661870][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 838.669946][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 838.677937][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 838.685909][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 838.693904][ C1] ? kernel_init_free_pages+0x87/0x100 [ 838.699365][ C1] get_page_from_freelist+0x6b5/0xa90 [ 838.704740][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 838.710108][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 838.715664][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 838.721652][ C1] pipe_write+0x580/0x1930 [ 838.726069][ C1] ? pipe_read+0x1030/0x1030 [ 838.730742][ C1] ? fsnotify_perm+0x67/0x4e0 [ 838.735420][ C1] ? io_schedule+0x120/0x120 [ 838.740004][ C1] ? security_file_permission+0xa8/0xc0 [ 838.745540][ C1] ? iov_iter_init+0x3f/0x120 [ 838.750212][ C1] vfs_write+0xc02/0xf20 [ 838.754453][ C1] ? kernel_write+0x3c0/0x3c0 [ 838.759123][ C1] ? __fget_files+0x310/0x370 [ 838.763824][ C1] ? __fdget_pos+0x1fa/0x300 [ 838.768409][ C1] ? ksys_write+0x77/0x2b0 [ 838.772818][ C1] ksys_write+0x186/0x2b0 [ 838.777143][ C1] ? __ia32_sys_read+0x90/0x90 [ 838.781898][ C1] __x64_sys_write+0x7b/0x90 [ 838.786520][ C1] do_syscall_64+0x31/0x70 [ 838.790963][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 838.796849][ C1] RIP: 0033:0x7f9380d05049 [ 838.801259][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 838.820895][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 838.829408][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 838.837407][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 838.845400][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 838.853364][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 838.861335][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 838.869339][ C1] ---[ end trace 6a7df80a272a8516 ]--- [ 838.874964][ C1] ------------[ cut here ]------------ [ 838.880431][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 838.886485][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 838.896115][ C1] Modules linked in: [ 838.900041][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 838.911757][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 838.921844][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 838.927401][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 838.947028][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 838.953117][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 838.961108][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 838.969098][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee2a5d8 [ 838.977086][ C1] R10: ffffed103ee2a5d8 R11: 0000000000000000 R12: ffff88810db870c8 [ 838.985082][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 838.993072][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 839.002018][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 839.008612][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 839.016605][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 839.024599][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 839.032667][ C1] Call Trace: [ 839.035956][ C1] [ 839.038921][ C1] aiptek_irq+0x19b7/0x25f0 [ 839.043434][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 839.049255][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 839.054378][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 839.059416][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 839.064808][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 839.070019][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 839.074893][ C1] dummy_timer+0x798/0x42a0 [ 839.079595][ C1] ? enqueue_timer+0x1d1/0x470 [ 839.084367][ C1] ? __mod_timer+0x995/0xde0 [ 839.089106][ C1] ? mod_timer_pending+0x30/0x30 [ 839.094081][ C1] ? dummy_free_streams+0x360/0x360 [ 839.099301][ C1] ? __kasan_check_write+0x14/0x20 [ 839.104437][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 839.109572][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 839.115147][ C1] ? dummy_free_streams+0x360/0x360 [ 839.120368][ C1] call_timer_fn+0x35/0x280 [ 839.124886][ C1] ? dummy_free_streams+0x360/0x360 [ 839.130097][ C1] expire_timers+0x21f/0x3b0 [ 839.134709][ C1] __run_timers+0x548/0x680 [ 839.139232][ C1] ? enqueue_timer+0x470/0x470 [ 839.144026][ C1] run_timer_softirq+0x69/0xf0 [ 839.148821][ C1] __do_softirq+0x27e/0x598 [ 839.153355][ C1] asm_call_irq_on_stack+0xf/0x20 [ 839.158386][ C1] [ 839.161351][ C1] do_softirq_own_stack+0x60/0x80 [ 839.166393][ C1] __irq_exit_rcu+0x128/0x150 [ 839.171092][ C1] irq_exit_rcu+0x9/0x10 [ 839.175646][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 839.181309][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 839.187328][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 839.192630][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 839.212254][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 839.218342][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 839.226335][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 839.234334][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 839.242337][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 839.250337][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 839.258362][ C1] ? kernel_init_free_pages+0x87/0x100 [ 839.263850][ C1] get_page_from_freelist+0x6b5/0xa90 [ 839.269250][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 839.274647][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 839.280223][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 839.286235][ C1] pipe_write+0x580/0x1930 [ 839.290673][ C1] ? pipe_read+0x1030/0x1030 [ 839.295279][ C1] ? fsnotify_perm+0x67/0x4e0 [ 839.299970][ C1] ? io_schedule+0x120/0x120 [ 839.304575][ C1] ? security_file_permission+0xa8/0xc0 [ 839.310198][ C1] ? iov_iter_init+0x3f/0x120 [ 839.314988][ C1] vfs_write+0xc02/0xf20 [ 839.319252][ C1] ? kernel_write+0x3c0/0x3c0 [ 839.323954][ C1] ? __fget_files+0x310/0x370 [ 839.328647][ C1] ? __fdget_pos+0x1fa/0x300 [ 839.333277][ C1] ? ksys_write+0x77/0x2b0 [ 839.337708][ C1] ksys_write+0x186/0x2b0 [ 839.342053][ C1] ? __ia32_sys_read+0x90/0x90 [ 839.346830][ C1] __x64_sys_write+0x7b/0x90 [ 839.351434][ C1] do_syscall_64+0x31/0x70 [ 839.355873][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 839.361789][ C1] RIP: 0033:0x7f9380d05049 [ 839.366218][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 839.385844][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 839.394590][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 839.402588][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 839.410579][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 839.418572][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 839.426574][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 839.434568][ C1] ---[ end trace 6a7df80a272a8517 ]--- [ 839.440476][ C1] ------------[ cut here ]------------ [ 839.445952][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 839.452011][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 839.461647][ C1] Modules linked in: [ 839.465580][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 839.477293][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 839.487394][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 839.492959][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 839.512580][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 839.518671][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 839.526664][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 839.534658][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 839.542643][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 839.550634][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 839.558625][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 839.567579][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 839.574535][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 839.582540][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 839.590612][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 839.598596][ C1] Call Trace: [ 839.601896][ C1] [ 839.604770][ C1] aiptek_irq+0x19b7/0x25f0 [ 839.609282][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 839.615152][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 839.620294][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 839.625359][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 839.630763][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 839.635985][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 839.640863][ C1] dummy_timer+0x798/0x42a0 [ 839.645396][ C1] ? __mod_timer+0x995/0xde0 [ 839.650010][ C1] ? prandom_u32+0x254/0x380 [ 839.654623][ C1] ? __kasan_check_write+0x14/0x20 [ 839.659757][ C1] ? dummy_free_streams+0x360/0x360 [ 839.664964][ C1] ? __kasan_check_write+0x14/0x20 [ 839.670099][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 839.675246][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 839.680815][ C1] ? dummy_free_streams+0x360/0x360 [ 839.686037][ C1] call_timer_fn+0x35/0x280 [ 839.690563][ C1] ? dummy_free_streams+0x360/0x360 [ 839.695790][ C1] expire_timers+0x21f/0x3b0 [ 839.700401][ C1] __run_timers+0x548/0x680 [ 839.704930][ C1] ? enqueue_timer+0x470/0x470 [ 839.709727][ C1] run_timer_softirq+0x69/0xf0 [ 839.714527][ C1] __do_softirq+0x27e/0x598 [ 839.719060][ C1] asm_call_irq_on_stack+0xf/0x20 [ 839.724111][ C1] [ 839.727064][ C1] do_softirq_own_stack+0x60/0x80 [ 839.732107][ C1] __irq_exit_rcu+0x128/0x150 [ 839.736810][ C1] irq_exit_rcu+0x9/0x10 [ 839.741074][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 839.746723][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 839.752719][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 839.758012][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 839.777726][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 839.783811][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 839.791812][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 839.799808][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 839.807821][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 839.815823][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 839.823956][ C1] ? kernel_init_free_pages+0x87/0x100 [ 839.829440][ C1] get_page_from_freelist+0x6b5/0xa90 [ 839.834840][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 839.840238][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 839.845811][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 839.851815][ C1] pipe_write+0x580/0x1930 [ 839.856260][ C1] ? pipe_read+0x1030/0x1030 [ 839.860860][ C1] ? fsnotify_perm+0x67/0x4e0 [ 839.865552][ C1] ? io_schedule+0x120/0x120 [ 839.870154][ C1] ? security_file_permission+0xa8/0xc0 [ 839.875721][ C1] ? iov_iter_init+0x3f/0x120 [ 839.880421][ C1] vfs_write+0xc02/0xf20 [ 839.884682][ C1] ? kernel_write+0x3c0/0x3c0 [ 839.889373][ C1] ? __fget_files+0x310/0x370 [ 839.894073][ C1] ? __fdget_pos+0x1fa/0x300 [ 839.898679][ C1] ? ksys_write+0x77/0x2b0 [ 839.903116][ C1] ksys_write+0x186/0x2b0 [ 839.907506][ C1] ? __ia32_sys_read+0x90/0x90 [ 839.912288][ C1] __x64_sys_write+0x7b/0x90 [ 839.916899][ C1] do_syscall_64+0x31/0x70 [ 839.921327][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 839.927240][ C1] RIP: 0033:0x7f9380d05049 [ 839.931684][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 839.951304][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 839.959742][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 839.967735][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 839.975726][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 839.983719][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 839.991711][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 839.999703][ C1] ---[ end trace 6a7df80a272a8518 ]--- [ 840.005291][ C1] ------------[ cut here ]------------ [ 840.010765][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 840.016793][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 840.026747][ C1] Modules linked in: [ 840.030667][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 840.042380][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 840.052510][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 840.058061][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 840.077672][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 840.085217][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 840.093199][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 840.101185][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 840.109155][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 840.117158][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 840.125128][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 840.134042][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 840.140615][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 840.148577][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 840.156545][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 840.164592][ C1] Call Trace: [ 840.167870][ C1] [ 840.170729][ C1] aiptek_irq+0x19b7/0x25f0 [ 840.175222][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 840.181047][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 840.186166][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 840.191175][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 840.196541][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 840.201731][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 840.206583][ C1] dummy_timer+0x798/0x42a0 [ 840.211161][ C1] ? __mod_timer+0x995/0xde0 [ 840.215745][ C1] ? prandom_u32+0x254/0x380 [ 840.220319][ C1] ? __kasan_check_write+0x14/0x20 [ 840.225423][ C1] ? dummy_free_streams+0x360/0x360 [ 840.230607][ C1] ? __kasan_check_write+0x14/0x20 [ 840.235717][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 840.240823][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 840.246375][ C1] ? dummy_free_streams+0x360/0x360 [ 840.251570][ C1] call_timer_fn+0x35/0x280 [ 840.256063][ C1] ? dummy_free_streams+0x360/0x360 [ 840.261259][ C1] expire_timers+0x21f/0x3b0 [ 840.265847][ C1] __run_timers+0x548/0x680 [ 840.270343][ C1] ? enqueue_timer+0x470/0x470 [ 840.275107][ C1] run_timer_softirq+0x69/0xf0 [ 840.279858][ C1] __do_softirq+0x27e/0x598 [ 840.284358][ C1] asm_call_irq_on_stack+0xf/0x20 [ 840.289368][ C1] [ 840.292302][ C1] do_softirq_own_stack+0x60/0x80 [ 840.297319][ C1] __irq_exit_rcu+0x128/0x150 [ 840.301985][ C1] irq_exit_rcu+0x9/0x10 [ 840.306222][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 840.311856][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 840.317835][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 840.323372][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 840.342987][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 840.349051][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 840.357016][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 840.364983][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 840.372944][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 840.380906][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 840.388886][ C1] ? kernel_init_free_pages+0x87/0x100 [ 840.394330][ C1] get_page_from_freelist+0x6b5/0xa90 [ 840.399696][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 840.405054][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 840.410587][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 840.416565][ C1] pipe_write+0x580/0x1930 [ 840.420971][ C1] ? pipe_read+0x1030/0x1030 [ 840.425550][ C1] ? fsnotify_perm+0x67/0x4e0 [ 840.430211][ C1] ? io_schedule+0x120/0x120 [ 840.434796][ C1] ? security_file_permission+0xa8/0xc0 [ 840.440332][ C1] ? iov_iter_init+0x3f/0x120 [ 840.445006][ C1] vfs_write+0xc02/0xf20 [ 840.449330][ C1] ? kernel_write+0x3c0/0x3c0 [ 840.454020][ C1] ? __fget_files+0x310/0x370 [ 840.458695][ C1] ? __fdget_pos+0x1fa/0x300 [ 840.463280][ C1] ? ksys_write+0x77/0x2b0 [ 840.467703][ C1] ksys_write+0x186/0x2b0 [ 840.472024][ C1] ? __ia32_sys_read+0x90/0x90 [ 840.476795][ C1] __x64_sys_write+0x7b/0x90 [ 840.481373][ C1] do_syscall_64+0x31/0x70 [ 840.485773][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 840.491649][ C1] RIP: 0033:0x7f9380d05049 [ 840.496058][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 840.515746][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 840.524157][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 840.532224][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 840.540188][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 840.548156][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 840.556206][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 840.564168][ C1] ---[ end trace 6a7df80a272a8519 ]--- [ 840.569820][ C1] ------------[ cut here ]------------ [ 840.575287][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 840.581329][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 840.590963][ C1] Modules linked in: [ 840.594883][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 840.606604][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 840.616687][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 840.622240][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 840.641855][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 840.647943][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 840.655963][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 840.663951][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 840.671943][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 840.679932][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 840.687951][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 840.696897][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 840.703492][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 840.711480][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 840.719484][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 840.727462][ C1] Call Trace: [ 840.730750][ C1] [ 840.733617][ C1] aiptek_irq+0x19b7/0x25f0 [ 840.738130][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 840.743946][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 840.749076][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 840.754127][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 840.759780][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 840.765009][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 840.769912][ C1] dummy_timer+0x798/0x42a0 [ 840.774447][ C1] ? enqueue_timer+0x1d1/0x470 [ 840.779262][ C1] ? __mod_timer+0x995/0xde0 [ 840.783888][ C1] ? mod_timer_pending+0x30/0x30 [ 840.788842][ C1] ? __kasan_check_write+0x14/0x20 [ 840.793970][ C1] ? dummy_free_streams+0x360/0x360 [ 840.799185][ C1] ? __kasan_check_write+0x14/0x20 [ 840.804312][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 840.809440][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 840.815020][ C1] ? dummy_free_streams+0x360/0x360 [ 840.820246][ C1] call_timer_fn+0x35/0x280 [ 840.824806][ C1] ? dummy_free_streams+0x360/0x360 [ 840.830027][ C1] expire_timers+0x21f/0x3b0 [ 840.834626][ C1] __run_timers+0x548/0x680 [ 840.839148][ C1] ? enqueue_timer+0x470/0x470 [ 840.843930][ C1] run_timer_softirq+0x69/0xf0 [ 840.848726][ C1] __do_softirq+0x27e/0x598 [ 840.853260][ C1] asm_call_irq_on_stack+0xf/0x20 [ 840.858303][ C1] [ 840.861267][ C1] do_softirq_own_stack+0x60/0x80 [ 840.866304][ C1] __irq_exit_rcu+0x128/0x150 [ 840.870999][ C1] irq_exit_rcu+0x9/0x10 [ 840.875255][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 840.880909][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 840.886957][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 840.892260][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 840.911884][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 840.917970][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 840.925961][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 840.934245][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 840.942269][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 840.950260][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 840.958265][ C1] ? kernel_init_free_pages+0x87/0x100 [ 840.963744][ C1] get_page_from_freelist+0x6b5/0xa90 [ 840.969127][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 840.974509][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 840.980069][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 840.986079][ C1] pipe_write+0x580/0x1930 [ 840.990509][ C1] ? pipe_read+0x1030/0x1030 [ 840.995114][ C1] ? fsnotify_perm+0x67/0x4e0 [ 840.999804][ C1] ? io_schedule+0x120/0x120 [ 841.004574][ C1] ? security_file_permission+0xa8/0xc0 [ 841.010153][ C1] ? iov_iter_init+0x3f/0x120 [ 841.014935][ C1] vfs_write+0xc02/0xf20 [ 841.019188][ C1] ? kernel_write+0x3c0/0x3c0 [ 841.023883][ C1] ? __fget_files+0x310/0x370 [ 841.028617][ C1] ? __fdget_pos+0x1fa/0x300 [ 841.033220][ C1] ? ksys_write+0x77/0x2b0 [ 841.037651][ C1] ksys_write+0x186/0x2b0 [ 841.041993][ C1] ? __ia32_sys_read+0x90/0x90 [ 841.046802][ C1] __x64_sys_write+0x7b/0x90 [ 841.051399][ C1] do_syscall_64+0x31/0x70 [ 841.055824][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 841.061731][ C1] RIP: 0033:0x7f9380d05049 [ 841.066179][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 841.085799][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 841.094312][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 841.102319][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 841.110300][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 841.118278][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 841.126267][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 841.134361][ C1] ---[ end trace 6a7df80a272a851a ]--- [ 841.140263][ C1] ------------[ cut here ]------------ [ 841.145733][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 841.151770][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 841.161396][ C1] Modules linked in: [ 841.165321][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 841.177014][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 841.187098][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 841.192638][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 841.212239][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 841.218321][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 841.226299][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 841.234265][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 841.242224][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 841.250182][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 841.258152][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 841.267092][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 841.273729][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 841.281710][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 841.289687][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 841.297668][ C1] Call Trace: [ 841.300943][ C1] [ 841.303811][ C1] aiptek_irq+0x19b7/0x25f0 [ 841.308307][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 841.314103][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 841.319228][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 841.324253][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 841.329627][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 841.334845][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 841.339698][ C1] dummy_timer+0x798/0x42a0 [ 841.344206][ C1] ? enqueue_timer+0x1d1/0x470 [ 841.348964][ C1] ? __mod_timer+0x995/0xde0 [ 841.353558][ C1] ? mod_timer_pending+0x30/0x30 [ 841.358512][ C1] ? __kasan_check_write+0x14/0x20 [ 841.363623][ C1] ? dummy_free_streams+0x360/0x360 [ 841.368821][ C1] ? __kasan_check_write+0x14/0x20 [ 841.373928][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 841.379060][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 841.384598][ C1] ? dummy_free_streams+0x360/0x360 [ 841.390496][ C1] call_timer_fn+0x35/0x280 [ 841.395091][ C1] ? dummy_free_streams+0x360/0x360 [ 841.400292][ C1] expire_timers+0x21f/0x3b0 [ 841.404901][ C1] __run_timers+0x548/0x680 [ 841.409398][ C1] ? enqueue_timer+0x470/0x470 [ 841.414157][ C1] run_timer_softirq+0x69/0xf0 [ 841.418914][ C1] __do_softirq+0x27e/0x598 [ 841.423414][ C1] asm_call_irq_on_stack+0xf/0x20 [ 841.428430][ C1] [ 841.431403][ C1] do_softirq_own_stack+0x60/0x80 [ 841.436422][ C1] __irq_exit_rcu+0x128/0x150 [ 841.441115][ C1] irq_exit_rcu+0x9/0x10 [ 841.445348][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 841.450980][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 841.456953][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 841.462224][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 841.481905][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 841.487963][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 841.495925][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 841.503891][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 841.511865][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 841.519899][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 841.527875][ C1] ? kernel_init_free_pages+0x87/0x100 [ 841.533352][ C1] get_page_from_freelist+0x6b5/0xa90 [ 841.538738][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 841.544121][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 841.549662][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 841.555637][ C1] pipe_write+0x580/0x1930 [ 841.560038][ C1] ? pipe_read+0x1030/0x1030 [ 841.564620][ C1] ? fsnotify_perm+0x67/0x4e0 [ 841.569310][ C1] ? io_schedule+0x120/0x120 [ 841.573894][ C1] ? security_file_permission+0xa8/0xc0 [ 841.579435][ C1] ? iov_iter_init+0x3f/0x120 [ 841.584100][ C1] vfs_write+0xc02/0xf20 [ 841.588332][ C1] ? kernel_write+0x3c0/0x3c0 [ 841.593020][ C1] ? __fget_files+0x310/0x370 [ 841.597686][ C1] ? __fdget_pos+0x1fa/0x300 [ 841.602259][ C1] ? ksys_write+0x77/0x2b0 [ 841.606666][ C1] ksys_write+0x186/0x2b0 [ 841.610981][ C1] ? __ia32_sys_read+0x90/0x90 [ 841.615742][ C1] __x64_sys_write+0x7b/0x90 [ 841.620360][ C1] do_syscall_64+0x31/0x70 [ 841.624765][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 841.630648][ C1] RIP: 0033:0x7f9380d05049 [ 841.635068][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 841.654663][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 841.663078][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 841.671043][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 841.679030][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 841.687010][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 841.694975][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 841.702938][ C1] ---[ end trace 6a7df80a272a851b ]--- [ 841.708489][ C1] ------------[ cut here ]------------ [ 841.713961][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 841.720001][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 841.729637][ C1] Modules linked in: [ 841.733563][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 841.745274][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 841.755367][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 841.760925][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 841.780538][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 841.786620][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 841.794604][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 841.802585][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 841.810568][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 841.818554][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 841.826547][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 841.835489][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 841.842087][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 841.850078][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 841.858066][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 841.866047][ C1] Call Trace: [ 841.869328][ C1] [ 841.872187][ C1] aiptek_irq+0x19b7/0x25f0 [ 841.876696][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 841.882511][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 841.887627][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 841.892665][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 841.898055][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 841.903263][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 841.908116][ C1] dummy_timer+0x798/0x42a0 [ 841.912626][ C1] ? enqueue_timer+0x1d1/0x470 [ 841.917396][ C1] ? __mod_timer+0x995/0xde0 [ 841.921993][ C1] ? mod_timer_pending+0x30/0x30 [ 841.926938][ C1] ? __kasan_check_write+0x14/0x20 [ 841.932058][ C1] ? dummy_free_streams+0x360/0x360 [ 841.937254][ C1] ? __kasan_check_write+0x14/0x20 [ 841.942369][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 841.947516][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 841.953077][ C1] ? dummy_free_streams+0x360/0x360 [ 841.958284][ C1] call_timer_fn+0x35/0x280 [ 841.962790][ C1] ? dummy_free_streams+0x360/0x360 [ 841.968005][ C1] expire_timers+0x21f/0x3b0 [ 841.972610][ C1] __run_timers+0x548/0x680 [ 841.977123][ C1] ? enqueue_timer+0x470/0x470 [ 841.981905][ C1] run_timer_softirq+0x69/0xf0 [ 841.986680][ C1] __do_softirq+0x27e/0x598 [ 841.991188][ C1] asm_call_irq_on_stack+0xf/0x20 [ 841.996206][ C1] [ 841.999156][ C1] do_softirq_own_stack+0x60/0x80 [ 842.004261][ C1] __irq_exit_rcu+0x128/0x150 [ 842.008945][ C1] irq_exit_rcu+0x9/0x10 [ 842.013192][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 842.018833][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 842.024825][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 842.030130][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 842.049763][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 842.055849][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 842.063833][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 842.071819][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 842.079802][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 842.087785][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 842.095793][ C1] ? kernel_init_free_pages+0x87/0x100 [ 842.101356][ C1] get_page_from_freelist+0x6b5/0xa90 [ 842.106752][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 842.112137][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 842.117779][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 842.123856][ C1] pipe_write+0x580/0x1930 [ 842.128286][ C1] ? pipe_read+0x1030/0x1030 [ 842.132881][ C1] ? fsnotify_perm+0x67/0x4e0 [ 842.137564][ C1] ? io_schedule+0x120/0x120 [ 842.142158][ C1] ? security_file_permission+0xa8/0xc0 [ 842.147706][ C1] ? iov_iter_init+0x3f/0x120 [ 842.152387][ C1] vfs_write+0xc02/0xf20 [ 842.156641][ C1] ? kernel_write+0x3c0/0x3c0 [ 842.161337][ C1] ? __fget_files+0x310/0x370 [ 842.166020][ C1] ? __fdget_pos+0x1fa/0x300 [ 842.170615][ C1] ? ksys_write+0x77/0x2b0 [ 842.175032][ C1] ksys_write+0x186/0x2b0 [ 842.179373][ C1] ? __ia32_sys_read+0x90/0x90 [ 842.184146][ C1] __x64_sys_write+0x7b/0x90 [ 842.188740][ C1] do_syscall_64+0x31/0x70 [ 842.193155][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 842.199058][ C1] RIP: 0033:0x7f9380d05049 [ 842.203473][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 842.223089][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 842.231518][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 842.239513][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 842.247578][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 842.255558][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 842.263535][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 842.271595][ C1] ---[ end trace 6a7df80a272a851c ]--- [ 842.277200][ C1] ------------[ cut here ]------------ [ 842.281183][ T25] INFO: task khugepaged:29 blocked for more than 122 seconds. [ 842.282660][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 842.296136][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 842.299480][ T25] Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 842.305763][ C1] Modules linked in: [ 842.318517][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 842.330310][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 842.340367][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 842.345894][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 842.365488][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 842.371563][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 842.379518][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 842.387474][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee2a5d8 [ 842.395431][ C1] R10: ffffed103ee2a5d8 R11: 0000000000000000 R12: ffff88810db870c8 [ 842.403390][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 842.411358][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 842.420284][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 842.426861][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 842.434823][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 842.442776][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 842.450737][ C1] Call Trace: [ 842.454002][ C1] [ 842.456845][ C1] aiptek_irq+0x19b7/0x25f0 [ 842.461332][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 842.467121][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 842.472211][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 842.477221][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 842.482573][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 842.487748][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 842.492580][ C1] dummy_timer+0x798/0x42a0 [ 842.497063][ C1] ? enqueue_timer+0x1d1/0x470 [ 842.501803][ C1] ? __mod_timer+0x995/0xde0 [ 842.506373][ C1] ? mod_timer_pending+0x30/0x30 [ 842.511303][ C1] ? __kasan_check_write+0x14/0x20 [ 842.516393][ C1] ? dummy_free_streams+0x360/0x360 [ 842.521589][ C1] ? __kasan_check_write+0x14/0x20 [ 842.526706][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 842.531799][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 842.537323][ C1] ? dummy_free_streams+0x360/0x360 [ 842.542498][ C1] call_timer_fn+0x35/0x280 [ 842.546980][ C1] ? dummy_free_streams+0x360/0x360 [ 842.552156][ C1] expire_timers+0x21f/0x3b0 [ 842.556726][ C1] __run_timers+0x548/0x680 [ 842.561214][ C1] ? enqueue_timer+0x470/0x470 [ 842.565960][ C1] run_timer_softirq+0x69/0xf0 [ 842.570718][ C1] __do_softirq+0x27e/0x598 [ 842.575202][ C1] asm_call_irq_on_stack+0xf/0x20 [ 842.580199][ C1] [ 842.583117][ C1] do_softirq_own_stack+0x60/0x80 [ 842.588116][ C1] __irq_exit_rcu+0x128/0x150 [ 842.592768][ C1] irq_exit_rcu+0x9/0x10 [ 842.596990][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 842.602601][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 842.608568][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 842.613834][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 842.633417][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 842.639467][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 842.647416][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 842.655369][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 842.663319][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 842.671282][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 842.679249][ C1] ? kernel_init_free_pages+0x87/0x100 [ 842.684708][ C1] get_page_from_freelist+0x6b5/0xa90 [ 842.690060][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 842.695413][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 842.700956][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 842.706919][ C1] pipe_write+0x580/0x1930 [ 842.711317][ C1] ? pipe_read+0x1030/0x1030 [ 842.715884][ C1] ? fsnotify_perm+0x67/0x4e0 [ 842.720541][ C1] ? io_schedule+0x120/0x120 [ 842.725111][ C1] ? security_file_permission+0xa8/0xc0 [ 842.730637][ C1] ? iov_iter_init+0x3f/0x120 [ 842.735310][ C1] vfs_write+0xc02/0xf20 [ 842.739547][ C1] ? kernel_write+0x3c0/0x3c0 [ 842.744204][ C1] ? __fget_files+0x310/0x370 [ 842.748879][ C1] ? __fdget_pos+0x1fa/0x300 [ 842.753447][ C1] ? ksys_write+0x77/0x2b0 [ 842.757844][ C1] ksys_write+0x186/0x2b0 [ 842.762164][ C1] ? __ia32_sys_read+0x90/0x90 [ 842.766911][ C1] __x64_sys_write+0x7b/0x90 [ 842.771482][ C1] do_syscall_64+0x31/0x70 [ 842.775879][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 842.781767][ C1] RIP: 0033:0x7f9380d05049 [ 842.786164][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 842.805765][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 842.814161][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 842.822112][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 842.830064][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 842.838018][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 842.845970][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 842.853926][ C1] ---[ end trace 6a7df80a272a851d ]--- [ 842.859411][ T25] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 842.859472][ C1] ------------[ cut here ]------------ [ 842.868147][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 842.879598][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 842.889221][ C1] Modules linked in: [ 842.889461][ T25] task:khugepaged state:D stack: 0 pid: 29 ppid: 2 flags:0x00004000 [ 842.893127][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 842.893138][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 842.909460][ T25] Call Trace: [ 842.914005][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 842.932930][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 842.939481][ T25] __schedule+0x944/0xda0 [ 842.952531][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 842.952542][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 842.952548][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 842.952555][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 842.952570][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 842.969480][ T25] ? release_firmware_map_entry+0x193/0x193 [ 842.970882][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 842.978855][ T25] schedule+0x14b/0x1e0 [ 842.986796][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 842.986803][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 842.986809][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 842.986818][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 842.986824][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 842.986833][ C1] Call Trace: [ 843.019479][ T25] schedule_timeout+0xa6/0x2e0 [ 843.021746][ C1] [ 843.028324][ T25] ? console_conditional_schedule+0x10/0x10 [ 843.036285][ C1] aiptek_irq+0x19b7/0x25f0 [ 843.036294][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 843.036302][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 843.036310][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 843.036328][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 843.069475][ T25] ? __prepare_to_swait+0xad/0x140 [ 843.073444][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 843.079246][ T25] wait_for_common+0x253/0x3e0 [ 843.084403][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 843.084414][ C1] dummy_timer+0x798/0x42a0 [ 843.084425][ C1] ? enqueue_timer+0x1d1/0x470 [ 843.084434][ C1] ? __mod_timer+0x995/0xde0 [ 843.084449][ C1] ? mod_timer_pending+0x30/0x30 [ 843.109469][ T25] ? wait_for_completion+0x20/0x20 [ 843.109815][ C1] ? __kasan_check_write+0x14/0x20 [ 843.114655][ T25] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 843.119132][ C1] ? dummy_free_streams+0x360/0x360 [ 843.139464][ T25] ? __rcu_read_lock+0x50/0x50 [ 843.143749][ C1] ? __kasan_check_write+0x14/0x20 [ 843.143758][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 843.143773][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 843.159462][ T25] ? __kasan_check_read+0x11/0x20 [ 843.163871][ C1] ? dummy_free_streams+0x360/0x360 [ 843.168964][ T25] ? insert_work+0x234/0x330 [ 843.174474][ C1] call_timer_fn+0x35/0x280 [ 843.174484][ C1] ? dummy_free_streams+0x360/0x360 [ 843.174492][ C1] expire_timers+0x21f/0x3b0 [ 843.174509][ C1] __run_timers+0x548/0x680 [ 843.199464][ T25] wait_for_completion+0x18/0x20 [ 843.203495][ C1] ? enqueue_timer+0x470/0x470 [ 843.207973][ T25] __flush_work+0x544/0x640 [ 843.212871][ C1] run_timer_softirq+0x69/0xf0 [ 843.212882][ C1] __do_softirq+0x27e/0x598 [ 843.212892][ C1] asm_call_irq_on_stack+0xf/0x20 [ 843.212902][ C1] [ 843.229459][ T25] ? flush_work+0x20/0x20 [ 843.231343][ C1] do_softirq_own_stack+0x60/0x80 [ 843.236349][ T25] ? pwq_dec_nr_in_flight+0x970/0x970 [ 843.239259][ C1] __irq_exit_rcu+0x128/0x150 [ 843.258815][ C1] irq_exit_rcu+0x9/0x10 [ 843.259457][ T25] ? wq_worker_last_func+0x50/0x50 [ 843.263064][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 843.268152][ T25] ? find_next_bit+0xf5/0x120 [ 843.273761][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 843.273772][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 843.273783][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 843.273795][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 843.289458][ T25] flush_work+0x17/0x20 [ 843.289835][ C1] [ 843.321909][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 843.329464][ T25] __lru_add_drain_all+0xac3/0xbc0 [ 843.329875][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 843.334967][ T25] lru_add_drain_all+0x10/0x20 [ 843.342919][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 843.342925][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 843.342931][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 843.342945][ C1] ? kernel_init_free_pages+0x87/0x100 [ 843.342960][ C1] get_page_from_freelist+0x6b5/0xa90 [ 843.359455][ T25] khugepaged_do_scan+0xed/0x17d0 [ 843.363694][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 843.389455][ T25] ? release_firmware_map_entry+0x193/0x193 [ 843.392785][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 843.398653][ T25] ? _raw_spin_lock+0x1b0/0x1b0 [ 843.404159][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 843.404171][ C1] pipe_write+0x580/0x1930 [ 843.404183][ C1] ? pipe_read+0x1030/0x1030 [ 843.404197][ C1] ? fsnotify_perm+0x67/0x4e0 [ 843.419453][ T25] ? __kasan_check_write+0x14/0x20 [ 843.423922][ C1] ? io_schedule+0x120/0x120 [ 843.428573][ T25] ? _raw_spin_lock_irqsave+0xf8/0x210 [ 843.433645][ C1] ? security_file_permission+0xa8/0xc0 [ 843.433655][ C1] ? iov_iter_init+0x3f/0x120 [ 843.433665][ C1] vfs_write+0xc02/0xf20 [ 843.433680][ C1] ? kernel_write+0x3c0/0x3c0 [ 843.459459][ T25] ? __kasan_check_read+0x11/0x20 [ 843.462725][ C1] ? __fget_files+0x310/0x370 [ 843.467729][ T25] ? _raw_spin_lock+0x1b0/0x1b0 [ 843.472371][ C1] ? __fdget_pos+0x1fa/0x300 [ 843.472380][ C1] ? ksys_write+0x77/0x2b0 [ 843.472389][ C1] ksys_write+0x186/0x2b0 [ 843.472404][ C1] ? __ia32_sys_read+0x90/0x90 [ 843.489464][ T25] ? alloc_sleep_millisecs_store+0x180/0x180 [ 843.490543][ C1] __x64_sys_write+0x7b/0x90 [ 843.495285][ T25] ? prepare_to_wait_event+0x3a4/0x4f0 [ 843.501250][ C1] do_syscall_64+0x31/0x70 [ 843.501259][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 843.501267][ C1] RIP: 0033:0x7f9380d05049 [ 843.501284][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 843.519463][ T25] ? console_conditional_schedule+0x10/0x10 [ 843.521588][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 [ 843.526076][ T25] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 843.545641][ C1] ORIG_RAX: 0000000000000001 [ 843.545648][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 843.545654][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 843.545660][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 843.545665][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 843.545672][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 843.545684][ C1] ---[ end trace 6a7df80a272a851e ]--- [ 843.579464][ T25] ? __kasan_check_read+0x11/0x20 [ 843.584009][ C1] ------------[ cut here ]------------ [ 843.609471][ T25] khugepaged+0x105/0x760 [ 843.613242][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 843.618250][ T25] ? start_stop_khugepaged+0x170/0x170 [ 843.623795][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 843.639459][ T25] ? io_schedule+0x120/0x120 [ 843.648925][ C1] Modules linked in: [ 843.657469][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 843.669164][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 843.669459][ T25] ? io_schedule+0x120/0x120 [ 843.679218][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 843.689386][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 843.699463][ T25] ? __kasan_check_read+0x11/0x20 [ 843.709684][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 843.709698][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 843.709704][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 843.709711][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 843.709718][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 843.709735][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 843.729472][ T25] ? __kthread_parkme+0xba/0x1d0 [ 843.736704][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 843.759483][ T25] kthread+0x371/0x390 [ 843.760569][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 843.765494][ T25] ? start_stop_khugepaged+0x170/0x170 [ 843.774380][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 843.774389][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 843.774395][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 843.774398][ C1] Call Trace: [ 843.774402][ C1] [ 843.774416][ C1] aiptek_irq+0x19b7/0x25f0 [ 843.774434][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 843.789471][ T25] ? kthread_blkcg+0xd0/0xd0 [ 843.790478][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 843.798429][ T25] ret_from_fork+0x1f/0x30 [ 843.806368][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 843.806379][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 843.806389][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 843.806406][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 843.839471][ T25] INFO: task kworker/0:1:67 blocked for more than 123 seconds. [ 843.840469][ C1] dummy_timer+0x798/0x42a0 [ 843.844852][ T25] Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 843.849847][ C1] ? enqueue_timer+0x1d1/0x470 [ 843.849856][ C1] ? __mod_timer+0x995/0xde0 [ 843.849867][ C1] ? mod_timer_pending+0x30/0x30 [ 843.849884][ C1] ? __kasan_check_write+0x14/0x20 [ 843.869459][ T25] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 843.872778][ C1] ? dummy_free_streams+0x360/0x360 [ 843.877250][ T25] task:kworker/0:1 state:D [ 843.886063][ C1] ? __kasan_check_write+0x14/0x20 [ 843.886072][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 843.886080][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 843.886096][ C1] ? dummy_free_streams+0x360/0x360 [ 843.886115][ C1] call_timer_fn+0x35/0x280 [ 843.909454][ T25] stack: 0 pid: 67 ppid: 2 flags:0x00004000 [ 843.914107][ C1] ? dummy_free_streams+0x360/0x360 [ 843.919279][ T25] Workqueue: events destroy_list_workfn [ 843.924005][ C1] expire_timers+0x21f/0x3b0 [ 843.924015][ C1] __run_timers+0x548/0x680 [ 843.924025][ C1] ? enqueue_timer+0x470/0x470 [ 843.924044][ C1] run_timer_softirq+0x69/0xf0 [ 843.949451][ T25] [ 843.956158][ C1] __do_softirq+0x27e/0x598 [ 843.969444][ T25] Call Trace: [ 843.971437][ C1] asm_call_irq_on_stack+0xf/0x20 [ 843.975908][ T25] __schedule+0x944/0xda0 [ 843.980628][ C1] [ 843.980640][ C1] do_softirq_own_stack+0x60/0x80 [ 843.980649][ C1] __irq_exit_rcu+0x128/0x150 [ 843.980665][ C1] irq_exit_rcu+0x9/0x10 [ 843.999463][ T25] ? release_firmware_map_entry+0x193/0x193 [ 844.000470][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 844.004776][ T25] ? _raw_spin_unlock_irq+0x4e/0x70 [ 844.007687][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 844.044211][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 844.049475][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 844.069314][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 844.075360][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 844.083310][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 844.091258][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 844.099222][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 844.107173][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 844.115134][ C1] ? kernel_init_free_pages+0x87/0x100 [ 844.120568][ C1] get_page_from_freelist+0x6b5/0xa90 [ 844.125915][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 844.131263][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 844.136785][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 844.142750][ C1] pipe_write+0x580/0x1930 [ 844.147146][ C1] ? pipe_read+0x1030/0x1030 [ 844.151710][ C1] ? fsnotify_perm+0x67/0x4e0 [ 844.156363][ C1] ? io_schedule+0x120/0x120 [ 844.160928][ C1] ? security_file_permission+0xa8/0xc0 [ 844.166454][ C1] ? iov_iter_init+0x3f/0x120 [ 844.171122][ C1] vfs_write+0xc02/0xf20 [ 844.175341][ C1] ? kernel_write+0x3c0/0x3c0 [ 844.179993][ C1] ? __fget_files+0x310/0x370 [ 844.184651][ C1] ? __fdget_pos+0x1fa/0x300 [ 844.189214][ C1] ? ksys_write+0x77/0x2b0 [ 844.193610][ C1] ksys_write+0x186/0x2b0 [ 844.198002][ C1] ? __ia32_sys_read+0x90/0x90 [ 844.202748][ C1] __x64_sys_write+0x7b/0x90 [ 844.207336][ C1] do_syscall_64+0x31/0x70 [ 844.211814][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 844.217682][ C1] RIP: 0033:0x7f9380d05049 [ 844.222075][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 844.241656][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 844.250047][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 844.257996][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 844.265944][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 844.273890][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 844.281844][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 844.289793][ C1] ---[ end trace 6a7df80a272a851f ]--- [ 844.295439][ C1] ------------[ cut here ]------------ [ 844.300899][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 844.305398][ T25] ? wq_worker_sleeping+0x19f/0x210 [ 844.306905][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 844.319457][ T25] schedule+0x14b/0x1e0 [ 844.321678][ C1] Modules linked in: [ 844.325814][ T25] schedule_timeout+0xa6/0x2e0 [ 844.325818][ C1] [ 844.325835][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 844.339464][ T25] ? console_conditional_schedule+0x10/0x10 [ 844.348439][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 844.364357][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 844.369468][ T25] ? __prepare_to_swait+0xad/0x140 [ 844.369895][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 844.374984][ T25] wait_for_common+0x253/0x3e0 [ 844.394554][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 844.394565][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 844.394571][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 844.394577][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 844.394584][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 844.394597][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 844.429468][ T25] ? __kasan_check_write+0x14/0x20 [ 844.437204][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 844.459170][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 844.459466][ T25] ? wait_for_completion+0x20/0x20 [ 844.465747][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 844.478792][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 844.479458][ T25] ? __kasan_check_write+0x14/0x20 [ 844.486757][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 844.499805][ C1] Call Trace: [ 844.503079][ C1] [ 844.505932][ C1] aiptek_irq+0x19b7/0x25f0 [ 844.509462][ T25] ? cpumask_next+0x11/0x30 [ 844.510428][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 844.514907][ T25] wait_for_completion+0x18/0x20 [ 844.520698][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 844.520707][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 844.520718][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 844.520735][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 844.539460][ T25] rcu_barrier+0x383/0x410 [ 844.541073][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 844.546271][ T25] rcu_sync_dtor+0xa6/0x170 [ 844.550652][ C1] dummy_timer+0x798/0x42a0 [ 844.550662][ C1] ? __mod_timer+0x995/0xde0 [ 844.550674][ C1] ? prandom_u32+0x254/0x380 [ 844.550689][ C1] ? __kasan_check_write+0x14/0x20 [ 844.569463][ T25] destroy_list_workfn+0x251/0x290 [ 844.573600][ C1] ? dummy_free_streams+0x360/0x360 [ 844.578685][ T25] ? percpu_rwsem_wake_function+0x3a0/0x3a0 [ 844.583761][ C1] ? __kasan_check_write+0x14/0x20 [ 844.583769][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 844.583777][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 844.583787][ C1] ? dummy_free_streams+0x360/0x360 [ 844.583797][ C1] call_timer_fn+0x35/0x280 [ 844.583812][ C1] ? dummy_free_streams+0x360/0x360 [ 844.599467][ T25] ? __kasan_check_read+0x11/0x20 [ 844.599962][ C1] expire_timers+0x21f/0x3b0 [ 844.605050][ T25] process_one_work+0x6b4/0xfb0 [ 844.610559][ C1] __run_timers+0x548/0x680 [ 844.610568][ C1] ? enqueue_timer+0x470/0x470 [ 844.610580][ C1] run_timer_softirq+0x69/0xf0 [ 844.610596][ C1] __do_softirq+0x27e/0x598 [ 844.629471][ T25] worker_thread+0xb15/0x1600 [ 844.630436][ C1] asm_call_irq_on_stack+0xf/0x20 [ 844.635028][ T25] kthread+0x371/0x390 [ 844.639837][ C1] [ 844.639848][ C1] do_softirq_own_stack+0x60/0x80 [ 844.639857][ C1] __irq_exit_rcu+0x128/0x150 [ 844.639865][ C1] irq_exit_rcu+0x9/0x10 [ 844.639882][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 844.649451][ T25] ? process_one_work+0xfb0/0xfb0 [ 844.653830][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 844.658308][ T25] ? kthread_blkcg+0xd0/0xd0 [ 844.662949][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 844.662959][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 844.662966][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 844.689463][ T25] ret_from_fork+0x1f/0x30 [ 844.694582][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 844.709465][ T25] INFO: task jbd2/sda1-8:125 blocked for more than 124 seconds. [ 844.710100][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 844.715360][ T25] Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 844.734930][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 844.734937][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 844.734943][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 844.734960][ C1] ? kernel_init_free_pages+0x87/0x100 [ 844.734975][ C1] get_page_from_freelist+0x6b5/0xa90 [ 844.769454][ T25] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 844.777737][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 844.799450][ T25] task:jbd2/sda1-8 state:D [ 844.801621][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 844.807071][ T25] stack: 0 pid: 125 ppid: 2 flags:0x00004000 [ 844.812581][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 844.812592][ C1] pipe_write+0x580/0x1930 [ 844.812605][ C1] ? pipe_read+0x1030/0x1030 [ 844.812613][ C1] ? fsnotify_perm+0x67/0x4e0 [ 844.812630][ C1] ? io_schedule+0x120/0x120 [ 844.849461][ T25] Call Trace: [ 844.849621][ C1] ? security_file_permission+0xa8/0xc0 [ 844.854012][ T25] __schedule+0x944/0xda0 [ 844.858575][ C1] ? iov_iter_init+0x3f/0x120 [ 844.879487][ T25] ? release_firmware_map_entry+0x193/0x193 [ 844.881073][ C1] vfs_write+0xc02/0xf20 [ 844.885735][ T25] ? __wake_up_pollfree+0x1d0/0x1d0 [ 844.891591][ C1] ? kernel_write+0x3c0/0x3c0 [ 844.891601][ C1] ? __fget_files+0x310/0x370 [ 844.891610][ C1] ? __fdget_pos+0x1fa/0x300 [ 844.891619][ C1] ? ksys_write+0x77/0x2b0 [ 844.891634][ C1] ksys_write+0x186/0x2b0 [ 844.909472][ T25] schedule+0x14b/0x1e0 [ 844.910429][ C1] ? __ia32_sys_read+0x90/0x90 [ 844.914996][ T25] jbd2_journal_commit_transaction+0xc25/0x5e40 [ 844.919394][ C1] __x64_sys_write+0x7b/0x90 [ 844.939474][ T25] ? __kasan_check_write+0x14/0x20 [ 844.943361][ C1] do_syscall_64+0x31/0x70 [ 844.948461][ T25] ? jbd2_journal_finish_inode_data_buffers+0xb0/0xb0 [ 844.952833][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 844.952840][ C1] RIP: 0033:0x7f9380d05049 [ 844.952852][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 844.952857][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 844.969466][ T25] ? load_mm_ldt+0x710/0x710 [ 844.969869][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 845.009468][ T25] ? _raw_spin_lock+0x1b0/0x1b0 [ 845.010370][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 845.015204][ T25] ? lock_timer_base+0x267/0x280 [ 845.023142][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 845.023147][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 845.023154][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 845.023163][ C1] ---[ end trace 6a7df80a272a8520 ]--- [ 845.023243][ C1] ------------[ cut here ]------------ [ 845.062808][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 845.068784][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 845.078467][ C1] Modules linked in: [ 845.082346][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 845.094025][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 845.104078][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 845.109614][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 845.129308][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 845.135361][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 845.143397][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 845.151360][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 845.159310][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 845.167349][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 845.175300][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 845.184207][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 845.190765][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 845.198716][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 845.206662][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 845.214607][ C1] Call Trace: [ 845.217866][ C1] [ 845.220703][ C1] aiptek_irq+0x19b7/0x25f0 [ 845.225186][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 845.230967][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 845.236064][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 845.241067][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 845.246415][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 845.251588][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 845.256416][ C1] dummy_timer+0x798/0x42a0 [ 845.260902][ C1] ? enqueue_timer+0x1d1/0x470 [ 845.265642][ C1] ? __mod_timer+0x995/0xde0 [ 845.270297][ C1] ? mod_timer_pending+0x30/0x30 [ 845.275213][ C1] ? __kasan_check_write+0x14/0x20 [ 845.280301][ C1] ? dummy_free_streams+0x360/0x360 [ 845.285472][ C1] ? __kasan_check_write+0x14/0x20 [ 845.290582][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 845.295671][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 845.301193][ C1] ? dummy_free_streams+0x360/0x360 [ 845.306366][ C1] call_timer_fn+0x35/0x280 [ 845.310847][ C1] ? dummy_free_streams+0x360/0x360 [ 845.316020][ C1] expire_timers+0x21f/0x3b0 [ 845.320597][ C1] __run_timers+0x548/0x680 [ 845.325094][ C1] ? enqueue_timer+0x470/0x470 [ 845.329836][ C1] run_timer_softirq+0x69/0xf0 [ 845.334574][ C1] __do_softirq+0x27e/0x598 [ 845.339053][ C1] asm_call_irq_on_stack+0xf/0x20 [ 845.344053][ C1] [ 845.346969][ C1] do_softirq_own_stack+0x60/0x80 [ 845.351968][ C1] __irq_exit_rcu+0x128/0x150 [ 845.356619][ C1] irq_exit_rcu+0x9/0x10 [ 845.360839][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 845.366453][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 845.372411][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 845.377683][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 845.397263][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 845.403307][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 845.411256][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 845.419209][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 845.427156][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 845.435126][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 845.443084][ C1] ? kernel_init_free_pages+0x87/0x100 [ 845.448521][ C1] get_page_from_freelist+0x6b5/0xa90 [ 845.453870][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 845.459218][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 845.464743][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 845.470700][ C1] pipe_write+0x580/0x1930 [ 845.475098][ C1] ? pipe_read+0x1030/0x1030 [ 845.479665][ C1] ? fsnotify_perm+0x67/0x4e0 [ 845.484318][ C1] ? io_schedule+0x120/0x120 [ 845.488882][ C1] ? security_file_permission+0xa8/0xc0 [ 845.494404][ C1] ? iov_iter_init+0x3f/0x120 [ 845.499059][ C1] vfs_write+0xc02/0xf20 [ 845.503279][ C1] ? kernel_write+0x3c0/0x3c0 [ 845.507931][ C1] ? __fget_files+0x310/0x370 [ 845.512672][ C1] ? __fdget_pos+0x1fa/0x300 [ 845.517259][ C1] ? ksys_write+0x77/0x2b0 [ 845.521661][ C1] ksys_write+0x186/0x2b0 [ 845.525967][ C1] ? __ia32_sys_read+0x90/0x90 [ 845.530708][ C1] __x64_sys_write+0x7b/0x90 [ 845.535274][ C1] do_syscall_64+0x31/0x70 [ 845.539665][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 845.545530][ C1] RIP: 0033:0x7f9380d05049 [ 845.549922][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 845.569500][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 845.577889][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 845.585836][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 845.593783][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 845.601734][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 845.609697][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 845.617657][ C1] ---[ end trace 6a7df80a272a8521 ]--- [ 845.623265][ C1] ------------[ cut here ]------------ [ 845.628720][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 845.634740][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 845.644462][ C1] Modules linked in: [ 845.648364][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 845.649467][ T25] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 845.660053][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 845.660066][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 845.660076][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 845.660082][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 845.669531][ T25] ? try_to_del_timer_sync+0x30b/0x470 [ 845.675911][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 845.699469][ T25] ? io_schedule+0x120/0x120 [ 845.701010][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 845.707056][ T25] kjournald2+0x494/0x8a0 [ 845.712484][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee2a5d8 [ 845.712490][ C1] R10: ffffed103ee2a5d8 R11: 0000000000000000 R12: ffff88810db870c8 [ 845.712496][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 845.712505][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 845.712511][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 845.712524][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 845.739465][ T25] ? jbd2_seq_info_show+0x630/0x630 [ 845.745265][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 845.769467][ T25] ? io_schedule+0x120/0x120 [ 845.770085][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 845.776651][ T25] ? __kasan_check_read+0x11/0x20 [ 845.784584][ C1] Call Trace: [ 845.784588][ C1] [ 845.784601][ C1] aiptek_irq+0x19b7/0x25f0 [ 845.784610][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 845.784619][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 845.784634][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 845.809468][ T25] ? __kthread_parkme+0xba/0x1d0 [ 845.810299][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 845.815301][ T25] kthread+0x371/0x390 [ 845.818558][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 845.829463][ T25] ? jbd2_seq_info_show+0x630/0x630 [ 845.831655][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 845.836740][ T25] ? kthread_blkcg+0xd0/0xd0 [ 845.841731][ C1] dummy_timer+0x798/0x42a0 [ 845.841742][ C1] ? enqueue_timer+0x1d1/0x470 [ 845.841752][ C1] ? __mod_timer+0x995/0xde0 [ 845.841768][ C1] ? mod_timer_pending+0x30/0x30 [ 845.859464][ T25] ret_from_fork+0x1f/0x30 [ 845.861235][ C1] ? __kasan_check_write+0x14/0x20 [ 845.866509][ T25] INFO: task syz-executor.5:387 blocked for more than 125 seconds. [ 845.871347][ C1] ? dummy_free_streams+0x360/0x360 [ 845.871355][ C1] ? __kasan_check_write+0x14/0x20 [ 845.871363][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 845.871371][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 845.871387][ C1] ? dummy_free_streams+0x360/0x360 [ 845.889457][ T25] Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 845.889899][ C1] call_timer_fn+0x35/0x280 [ 845.894802][ T25] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 845.899193][ C1] ? dummy_free_streams+0x360/0x360 [ 845.919445][ T25] task:syz-executor.5 state:D [ 845.922391][ C1] expire_timers+0x21f/0x3b0 [ 845.927470][ T25] stack: 0 pid: 387 ppid: 1 flags:0x00004004 [ 845.932978][ C1] __run_timers+0x548/0x680 [ 845.932988][ C1] ? enqueue_timer+0x470/0x470 [ 845.932999][ C1] run_timer_softirq+0x69/0xf0 [ 845.933016][ C1] __do_softirq+0x27e/0x598 [ 845.959455][ T25] Call Trace: [ 845.960144][ C1] asm_call_irq_on_stack+0xf/0x20 [ 845.965321][ T25] __schedule+0x944/0xda0 [ 845.970040][ C1] [ 845.970051][ C1] do_softirq_own_stack+0x60/0x80 [ 845.970060][ C1] __irq_exit_rcu+0x128/0x150 [ 845.970067][ C1] irq_exit_rcu+0x9/0x10 [ 845.970084][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 845.979457][ T25] ? release_firmware_map_entry+0x193/0x193 [ 845.981460][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 845.985938][ T25] ? __wake_up_pollfree+0x1d0/0x1d0 [ 845.990663][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 845.990673][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 845.990679][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 845.990695][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 846.009477][ T25] ? __kernel_text_address+0x9a/0x110 [ 846.013466][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 846.016404][ T25] schedule+0x14b/0x1e0 [ 846.021397][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 846.021404][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 846.021410][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 846.021429][ C1] ? kernel_init_free_pages+0x87/0x100 [ 846.021448][ C1] get_page_from_freelist+0x6b5/0xa90 [ 846.039474][ T25] wait_transaction_locked+0x1df/0x280 [ 846.041795][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 846.047747][ T25] ? jbd2_journal_begin_ordered_truncate+0x170/0x170 [ 846.052914][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 846.052924][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 846.052936][ C1] pipe_write+0x580/0x1930 [ 846.052953][ C1] ? pipe_read+0x1030/0x1030 [ 846.069471][ T25] ? io_schedule+0x120/0x120 [ 846.077791][ C1] ? fsnotify_perm+0x67/0x4e0 [ 846.099470][ T25] ? stack_trace_save+0x11b/0x1e0 [ 846.105202][ C1] ? io_schedule+0x120/0x120 [ 846.119469][ T25] ? __x64_sys_getdents64+0x7b/0x90 [ 846.125511][ C1] ? security_file_permission+0xa8/0xc0 [ 846.149463][ T25] start_this_handle+0x7d7/0x2030 [ 846.149705][ C1] ? iov_iter_init+0x3f/0x120 [ 846.155057][ T25] ? jbd2__journal_start+0x6f0/0x6f0 [ 846.161693][ C1] vfs_write+0xc02/0xf20 [ 846.161705][ C1] ? kernel_write+0x3c0/0x3c0 [ 846.161715][ C1] ? __fget_files+0x310/0x370 [ 846.161732][ C1] ? __fdget_pos+0x1fa/0x300 [ 846.179475][ T25] ? kmem_cache_alloc+0x1da/0x380 [ 846.182184][ C1] ? ksys_write+0x77/0x2b0 [ 846.186761][ T25] ? jbd2__journal_start+0x14f/0x6f0 [ 846.191400][ C1] ksys_write+0x186/0x2b0 [ 846.191411][ C1] ? __ia32_sys_read+0x90/0x90 [ 846.191420][ C1] __x64_sys_write+0x7b/0x90 [ 846.191429][ C1] do_syscall_64+0x31/0x70 [ 846.191440][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 846.191455][ C1] RIP: 0033:0x7f9380d05049 [ 846.209467][ T25] jbd2__journal_start+0x2eb/0x6f0 [ 846.211730][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 846.216732][ T25] __ext4_journal_start_sb+0x237/0x490 [ 846.221366][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 846.221378][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 846.221384][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 846.221390][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 846.221396][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 846.221409][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 846.239468][ T25] ext4_dirty_inode+0xae/0x120 [ 846.240174][ C1] ---[ end trace 6a7df80a272a8522 ]--- [ 846.244747][ T25] ? __ext4_expand_extra_isize+0x3d0/0x3d0 [ 846.249798][ C1] ------------[ cut here ]------------ [ 846.269467][ T25] __mark_inode_dirty+0xc6/0xa20 [ 846.273053][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 846.277451][ T25] ? memcpy+0x56/0x70 [ 846.283421][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 846.299464][ T25] touch_atime+0x2fe/0x4c0 [ 846.312380][ C1] Modules linked in: [ 846.312398][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 846.312404][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 846.312423][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 846.329462][ T25] ? current_time+0x2f0/0x2f0 [ 846.334321][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 846.359472][ T25] iterate_dir+0x510/0x600 [ 846.366172][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 846.379462][ T25] __se_sys_getdents64+0x1ea/0x4c0 [ 846.382119][ C1] [ 846.387557][ T25] ? __x64_sys_getdents64+0x90/0x90 [ 846.392451][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 846.392458][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 846.392464][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 846.392470][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 846.392477][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 846.392493][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 846.409910][ T25] ? filldir+0x5c0/0x5c0 [ 846.411933][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 846.416329][ T25] ? debug_smp_processor_id+0x1c/0x20 [ 846.420181][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 846.420191][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 846.420196][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 846.420200][ C1] Call Trace: [ 846.420204][ C1] [ 846.420224][ C1] aiptek_irq+0x19b7/0x25f0 [ 846.459464][ T25] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 846.471738][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 846.471748][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 846.471757][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 846.471774][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 846.489463][ T25] __x64_sys_getdents64+0x7b/0x90 [ 846.489608][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 846.494781][ T25] do_syscall_64+0x31/0x70 [ 846.502819][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 846.502830][ C1] dummy_timer+0x798/0x42a0 [ 846.502842][ C1] ? enqueue_timer+0x1d1/0x470 [ 846.502858][ C1] ? __mod_timer+0x995/0xde0 [ 846.529469][ T25] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 846.534678][ C1] ? mod_timer_pending+0x30/0x30 [ 846.559463][ T25] RIP: 0033:0x7f190a3d2e57 [ 846.559727][ C1] ? __kasan_check_write+0x14/0x20 [ 846.567694][ T25] RSP: 002b:00007ffc1f70e688 EFLAGS: 00000293 [ 846.575643][ C1] ? dummy_free_streams+0x360/0x360 [ 846.575651][ C1] ? __kasan_check_write+0x14/0x20 [ 846.575660][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 846.575676][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 846.609460][ T25] ORIG_RAX: 00000000000000d9 [ 846.611203][ C1] ? dummy_free_streams+0x360/0x360 [ 846.616198][ T25] RAX: ffffffffffffffda RBX: 00005555562c4b00 RCX: 00007f190a3d2e57 [ 846.621554][ C1] call_timer_fn+0x35/0x280 [ 846.621564][ C1] ? dummy_free_streams+0x360/0x360 [ 846.621573][ C1] expire_timers+0x21f/0x3b0 [ 846.621589][ C1] __run_timers+0x548/0x680 [ 846.639456][ T25] RDX: 0000000000008000 RSI: 00005555562c4b30 RDI: 0000000000000003 [ 846.640970][ C1] ? enqueue_timer+0x470/0x470 [ 846.645440][ T25] RBP: 00005555562c4b30 R08: 0000000000000030 R09: 00007f190a494640 [ 846.650170][ C1] run_timer_softirq+0x69/0xf0 [ 846.650180][ C1] __do_softirq+0x27e/0x598 [ 846.650190][ C1] asm_call_irq_on_stack+0xf/0x20 [ 846.650200][ C1] [ 846.659444][ T25] R10: 0000000000000231 R11: 0000000000000293 R12: ffffffffffffffb8 [ 846.660654][ C1] do_softirq_own_stack+0x60/0x80 [ 846.665557][ T25] R13: 00005555562c4b04 R14: 0000000000000016 R15: 00007ffc1f70f880 [ 846.669936][ C1] __irq_exit_rcu+0x128/0x150 [ 846.669944][ C1] irq_exit_rcu+0x9/0x10 [ 846.669955][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 846.669971][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 846.689467][ T25] INFO: task syz-executor.0:388 blocked for more than 126 seconds. [ 846.691357][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 846.696434][ T25] Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 846.701941][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 846.701947][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 846.701957][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 846.701964][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 846.701978][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 846.719451][ T25] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 846.719746][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 846.724222][ T25] task:syz-executor.0 state:D [ 846.729388][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 846.749457][ T25] stack: 0 pid: 388 ppid: 1 flags:0x00004004 [ 846.751115][ C1] ? kernel_init_free_pages+0x87/0x100 [ 846.759054][ T25] Call Trace: [ 846.763787][ C1] get_page_from_freelist+0x6b5/0xa90 [ 846.763797][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 846.763807][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 846.763824][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 846.779468][ T25] __schedule+0x944/0xda0 [ 846.784169][ C1] pipe_write+0x580/0x1930 [ 846.789176][ T25] ? release_firmware_map_entry+0x193/0x193 [ 846.797134][ C1] ? pipe_read+0x1030/0x1030 [ 846.797142][ C1] ? fsnotify_perm+0x67/0x4e0 [ 846.797149][ C1] ? io_schedule+0x120/0x120 [ 846.797157][ C1] ? security_file_permission+0xa8/0xc0 [ 846.797173][ C1] ? iov_iter_init+0x3f/0x120 [ 846.829475][ T25] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 846.830819][ C1] vfs_write+0xc02/0xf20 [ 846.849467][ T25] ? prepare_to_wait+0x226/0x290 [ 846.859398][ C1] ? kernel_write+0x3c0/0x3c0 [ 846.879461][ T25] schedule+0x14b/0x1e0 [ 846.881349][ C1] ? __fget_files+0x310/0x370 [ 846.889315][ T25] io_schedule+0x8e/0x120 [ 846.897966][ C1] ? __fdget_pos+0x1fa/0x300 [ 846.897975][ C1] ? ksys_write+0x77/0x2b0 [ 846.897983][ C1] ksys_write+0x186/0x2b0 [ 846.897993][ C1] ? __ia32_sys_read+0x90/0x90 [ 846.898003][ C1] __x64_sys_write+0x7b/0x90 [ 846.898021][ C1] do_syscall_64+0x31/0x70 [ 847.054315][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 847.060182][ C1] RIP: 0033:0x7f9380d05049 [ 847.064572][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 847.084151][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 847.092552][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 847.100511][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 847.108470][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 847.116426][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 847.124374][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 847.132327][ C1] ---[ end trace 6a7df80a272a8523 ]--- [ 847.137846][ C1] ------------[ cut here ]------------ [ 847.143302][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 847.149325][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 847.158942][ C1] Modules linked in: [ 847.159471][ T25] bit_wait_io+0x12/0xa0 [ 847.162835][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 847.162840][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 847.162852][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 847.162868][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 847.167123][ T25] __wait_on_bit+0xc0/0x1a0 [ 847.178759][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 847.178771][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 847.178776][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 847.178783][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 847.178797][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 847.209475][ T25] ? bit_wait+0xa0/0xa0 [ 847.213963][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 847.218447][ T25] out_of_line_wait_on_bit+0x1c3/0x240 [ 847.224472][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 847.224478][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 847.224483][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 847.224492][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 847.224497][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 847.224501][ C1] Call Trace: [ 847.224504][ C1] [ 847.224523][ C1] aiptek_irq+0x19b7/0x25f0 [ 847.259476][ T25] ? bit_wait+0xa0/0xa0 [ 847.260481][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 847.268432][ T25] ? __wait_on_bit+0x1a0/0x1a0 [ 847.273851][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 847.273860][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 847.273870][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 847.273888][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 847.299466][ T25] ? bit_waitqueue+0x30/0x30 [ 847.305274][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 847.329465][ T25] __wait_on_buffer+0x77/0x80 [ 847.333718][ C1] dummy_timer+0x798/0x42a0 [ 847.338451][ T25] __ext4_find_entry+0x113d/0x1bd0 [ 847.343539][ C1] ? enqueue_timer+0x1d1/0x470 [ 847.343548][ C1] ? __mod_timer+0x995/0xde0 [ 847.343558][ C1] ? mod_timer_pending+0x30/0x30 [ 847.343566][ C1] ? __kasan_check_write+0x14/0x20 [ 847.343585][ C1] ? dummy_free_streams+0x360/0x360 [ 847.369465][ T25] ? ext4_ci_compare+0x620/0x620 [ 847.373139][ C1] ? __kasan_check_write+0x14/0x20 [ 847.377623][ T25] ? ext4_fname_setup_ci_filename+0x6b/0x490 [ 847.382698][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 847.382705][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 847.382716][ C1] ? dummy_free_streams+0x360/0x360 [ 847.382733][ C1] call_timer_fn+0x35/0x280 [ 847.399462][ T25] ? __ext4_unlink+0x268/0xc10 [ 847.402020][ C1] ? dummy_free_streams+0x360/0x360 [ 847.407194][ T25] ? memcpy+0x56/0x70 [ 847.412092][ C1] expire_timers+0x21f/0x3b0 [ 847.412102][ C1] __run_timers+0x548/0x680 [ 847.412112][ C1] ? enqueue_timer+0x470/0x470 [ 847.412128][ C1] run_timer_softirq+0x69/0xf0 [ 847.429459][ T25] __ext4_unlink+0x2ce/0xc10 [ 847.433763][ C1] __do_softirq+0x27e/0x598 [ 847.438933][ T25] ? ext4_orphan_del+0x7d0/0x7d0 [ 847.443398][ C1] asm_call_irq_on_stack+0xf/0x20 [ 847.443403][ C1] [ 847.443414][ C1] do_softirq_own_stack+0x60/0x80 [ 847.443422][ C1] __irq_exit_rcu+0x128/0x150 [ 847.443437][ C1] irq_exit_rcu+0x9/0x10 [ 847.459455][ T25] ? kmem_cache_alloc+0x1da/0x380 [ 847.461854][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 847.466333][ T25] ? jbd2__journal_start+0x309/0x6f0 [ 847.471061][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 847.471072][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 847.471080][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 847.471093][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 847.489455][ T25] ? __ext4_journal_start_sb+0x237/0x490 [ 847.489770][ C1] [ 847.494773][ T25] ext4_unlink+0x2ec/0x640 [ 847.497680][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 847.519459][ T25] vfs_unlink+0x30a/0x650 [ 847.522130][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 847.527390][ T25] do_unlinkat+0x448/0x960 [ 847.533326][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 847.533332][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 847.533338][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 847.533351][ C1] ? kernel_init_free_pages+0x87/0x100 [ 847.533367][ C1] get_page_from_freelist+0x6b5/0xa90 [ 847.549459][ T25] ? vfs_unlink+0x650/0x650 [ 847.558209][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 847.579453][ T25] ? strncpy_from_user+0x179/0x2b0 [ 847.584502][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 847.588805][ T25] ? getname_flags+0x207/0x650 [ 847.596743][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 847.596755][ C1] pipe_write+0x580/0x1930 [ 847.596767][ C1] ? pipe_read+0x1030/0x1030 [ 847.596782][ C1] ? fsnotify_perm+0x67/0x4e0 [ 847.680467][ C1] ? io_schedule+0x120/0x120 [ 847.685045][ C1] ? security_file_permission+0xa8/0xc0 [ 847.690565][ C1] ? iov_iter_init+0x3f/0x120 [ 847.695219][ C1] vfs_write+0xc02/0xf20 [ 847.699441][ C1] ? kernel_write+0x3c0/0x3c0 [ 847.704094][ C1] ? __fget_files+0x310/0x370 [ 847.708748][ C1] ? __fdget_pos+0x1fa/0x300 [ 847.713310][ C1] ? ksys_write+0x77/0x2b0 [ 847.717700][ C1] ksys_write+0x186/0x2b0 [ 847.722025][ C1] ? __ia32_sys_read+0x90/0x90 [ 847.726763][ C1] __x64_sys_write+0x7b/0x90 [ 847.731341][ C1] do_syscall_64+0x31/0x70 [ 847.735732][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 847.741601][ C1] RIP: 0033:0x7f9380d05049 [ 847.745999][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 847.765577][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 847.773964][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 847.781912][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 847.789857][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 847.797804][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 847.805761][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 847.813713][ C1] ---[ end trace 6a7df80a272a8524 ]--- [ 847.819243][ C1] ------------[ cut here ]------------ [ 847.824693][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 847.830697][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 847.839466][ T25] __x64_sys_unlink+0x49/0x50 [ 847.840301][ C1] Modules linked in: [ 847.840318][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 847.840331][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 847.845018][ T25] do_syscall_64+0x31/0x70 [ 847.848856][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 847.879461][ T25] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 847.880482][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 847.886348][ T25] RIP: 0033:0x7fc8466d7987 [ 847.905915][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 847.905925][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 847.905930][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 847.905937][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 847.905944][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 847.905957][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 847.939451][ T25] RSP: 002b:00007ffc9b80fc28 EFLAGS: 00000206 [ 847.940226][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 847.948169][ T25] ORIG_RAX: 0000000000000057 [ 847.956111][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 847.956117][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 847.956125][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 847.956131][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 847.956134][ C1] Call Trace: [ 847.956138][ C1] [ 847.956159][ C1] aiptek_irq+0x19b7/0x25f0 [ 847.979453][ T25] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc8466d7987 [ 847.982315][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 848.009459][ T25] RDX: 00007ffc9b80fc60 RSI: 00007ffc9b80fc60 RDI: 00007ffc9b80fcf0 [ 848.012256][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 848.016729][ T25] RBP: 00007ffc9b80fcf0 R08: 0000000000000001 R09: 00007ffc9b80fac0 [ 848.024670][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 848.024681][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 848.024692][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 848.024707][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 848.049457][ T25] R10: 0000555555e22b43 R11: 0000000000000206 R12: 00007fc8467311ea [ 848.051479][ C1] dummy_timer+0x798/0x42a0 [ 848.056469][ T25] R13: 00007ffc9b810db0 R14: 0000555555e22b00 R15: 00007ffc9b810df0 [ 848.061807][ C1] ? enqueue_timer+0x1d1/0x470 [ 848.061817][ C1] ? __mod_timer+0x995/0xde0 [ 848.061828][ C1] ? mod_timer_pending+0x30/0x30 [ 848.061844][ C1] ? __kasan_check_write+0x14/0x20 [ 848.079458][ T25] INFO: task syz-executor.3:390 blocked for more than 128 seconds. [ 848.079795][ C1] ? dummy_free_streams+0x360/0x360 [ 848.084271][ T25] Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 848.092212][ C1] ? __kasan_check_write+0x14/0x20 [ 848.092222][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 848.092230][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 848.092246][ C1] ? dummy_free_streams+0x360/0x360 [ 848.109451][ T25] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 848.111552][ C1] call_timer_fn+0x35/0x280 [ 848.119412][ T25] task:syz-executor.3 state:D [ 848.133410][ C1] ? dummy_free_streams+0x360/0x360 [ 848.133429][ C1] expire_timers+0x21f/0x3b0 [ 848.138563][ T25] stack: 0 pid: 390 ppid: 1 flags:0x00004004 [ 848.143594][ C1] __run_timers+0x548/0x680 [ 848.143604][ C1] ? enqueue_timer+0x470/0x470 [ 848.143622][ C1] run_timer_softirq+0x69/0xf0 [ 848.159631][ T25] Call Trace: [ 848.162974][ C1] __do_softirq+0x27e/0x598 [ 848.167450][ T25] __schedule+0x944/0xda0 [ 848.172175][ C1] asm_call_irq_on_stack+0xf/0x20 [ 848.172180][ C1] [ 848.172190][ C1] do_softirq_own_stack+0x60/0x80 [ 848.172199][ C1] __irq_exit_rcu+0x128/0x150 [ 848.172213][ C1] irq_exit_rcu+0x9/0x10 [ 848.199457][ T25] ? release_firmware_map_entry+0x193/0x193 [ 848.202634][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 848.205891][ T25] ? __wake_up_pollfree+0x1d0/0x1d0 [ 848.210353][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 848.210365][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 848.210381][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 848.219449][ T25] ? __kernel_text_address+0x9a/0x110 [ 848.219666][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 848.222583][ T25] schedule+0x14b/0x1e0 [ 848.227567][ C1] [ 848.301637][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 848.309671][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 848.317630][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 848.325575][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 848.333519][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 848.341477][ C1] ? kernel_init_free_pages+0x87/0x100 [ 848.346912][ C1] get_page_from_freelist+0x6b5/0xa90 [ 848.352257][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 848.357603][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 848.363130][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 848.369084][ C1] pipe_write+0x580/0x1930 [ 848.373476][ C1] ? pipe_read+0x1030/0x1030 [ 848.378041][ C1] ? fsnotify_perm+0x67/0x4e0 [ 848.382694][ C1] ? io_schedule+0x120/0x120 [ 848.387256][ C1] ? security_file_permission+0xa8/0xc0 [ 848.392777][ C1] ? iov_iter_init+0x3f/0x120 [ 848.397430][ C1] vfs_write+0xc02/0xf20 [ 848.401648][ C1] ? kernel_write+0x3c0/0x3c0 [ 848.406302][ C1] ? __fget_files+0x310/0x370 [ 848.410954][ C1] ? __fdget_pos+0x1fa/0x300 [ 848.415514][ C1] ? ksys_write+0x77/0x2b0 [ 848.419903][ C1] ksys_write+0x186/0x2b0 [ 848.424206][ C1] ? __ia32_sys_read+0x90/0x90 [ 848.428944][ C1] __x64_sys_write+0x7b/0x90 [ 848.433523][ C1] do_syscall_64+0x31/0x70 [ 848.437915][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 848.443781][ C1] RIP: 0033:0x7f9380d05049 [ 848.448174][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 848.467752][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 848.476151][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 848.484096][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 848.492041][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 848.499987][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 848.507936][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 848.515885][ C1] ---[ end trace 6a7df80a272a8525 ]--- [ 848.521394][ C1] ------------[ cut here ]------------ [ 848.526846][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 848.530266][ T25] wait_transaction_locked+0x1df/0x280 [ 848.532844][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 848.538165][ T25] ? jbd2_journal_begin_ordered_truncate+0x170/0x170 [ 848.547741][ C1] Modules linked in: [ 848.547757][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 848.547762][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 848.547773][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 848.547790][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 848.579460][ T25] ? io_schedule+0x120/0x120 [ 848.580018][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 848.585546][ T25] ? stack_trace_save+0x11b/0x1e0 [ 848.605106][ C1] [ 848.605114][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 848.605120][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 848.605126][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 848.605133][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 848.605139][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 848.605154][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 848.639463][ T25] ? __x64_sys_getdents64+0x7b/0x90 [ 848.647346][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 848.669471][ T25] start_this_handle+0x7d7/0x2030 [ 848.672155][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 848.677334][ T25] ? jbd2__journal_start+0x6f0/0x6f0 [ 848.683883][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 848.683889][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 848.683892][ C1] Call Trace: [ 848.683896][ C1] [ 848.683909][ C1] aiptek_irq+0x19b7/0x25f0 [ 848.683926][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 848.709475][ T25] ? kmem_cache_alloc+0x1da/0x380 [ 848.710084][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 848.718040][ T25] ? jbd2__journal_start+0x14f/0x6f0 [ 848.721287][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 848.721298][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 848.721309][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 848.721324][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 848.739467][ T25] jbd2__journal_start+0x2eb/0x6f0 [ 848.744520][ C1] dummy_timer+0x798/0x42a0 [ 848.759466][ T25] __ext4_journal_start_sb+0x237/0x490 [ 848.760120][ C1] ? enqueue_timer+0x1d1/0x470 [ 848.765290][ T25] ext4_dirty_inode+0xae/0x120 [ 848.770102][ C1] ? __mod_timer+0x995/0xde0 [ 848.770112][ C1] ? mod_timer_pending+0x30/0x30 [ 848.770122][ C1] ? __kasan_check_write+0x14/0x20 [ 848.770140][ C1] ? dummy_free_streams+0x360/0x360 [ 848.789466][ T25] ? __ext4_expand_extra_isize+0x3d0/0x3d0 [ 848.789889][ C1] ? __kasan_check_write+0x14/0x20 [ 848.794630][ T25] __mark_inode_dirty+0xc6/0xa20 [ 848.799187][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 848.809452][ T25] ? memcpy+0x56/0x70 [ 848.814356][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 848.829459][ T25] touch_atime+0x2fe/0x4c0 [ 848.830152][ C1] ? dummy_free_streams+0x360/0x360 [ 848.835233][ T25] ? current_time+0x2f0/0x2f0 [ 848.839186][ C1] call_timer_fn+0x35/0x280 [ 848.863390][ C1] ? dummy_free_streams+0x360/0x360 [ 848.868590][ C1] expire_timers+0x21f/0x3b0 [ 848.869458][ T25] iterate_dir+0x510/0x600 [ 848.873168][ C1] __run_timers+0x548/0x680 [ 848.877561][ T25] __se_sys_getdents64+0x1ea/0x4c0 [ 848.882027][ C1] ? enqueue_timer+0x470/0x470 [ 848.882037][ C1] run_timer_softirq+0x69/0xf0 [ 848.882048][ C1] __do_softirq+0x27e/0x598 [ 848.882064][ C1] asm_call_irq_on_stack+0xf/0x20 [ 848.899450][ T25] ? up_read+0x9/0x10 [ 848.901084][ C1] [ 848.901102][ C1] do_softirq_own_stack+0x60/0x80 [ 848.906103][ T25] ? __x64_sys_getdents64+0x90/0x90 [ 848.910047][ C1] __irq_exit_rcu+0x128/0x150 [ 848.910054][ C1] irq_exit_rcu+0x9/0x10 [ 848.910066][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 848.910081][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 848.919446][ T25] ? filldir+0x5c0/0x5c0 [ 848.923159][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 848.927807][ T25] ? debug_smp_processor_id+0x1c/0x20 [ 848.932026][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 848.932032][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 848.932043][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 848.932055][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 848.949449][ T25] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 848.953093][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 848.958438][ T25] ? exit_to_user_mode_prepare+0x3b/0xe0 [ 848.978006][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 848.978013][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 848.978026][ C1] ? kernel_init_free_pages+0x87/0x100 [ 848.978035][ C1] get_page_from_freelist+0x6b5/0xa90 [ 848.978051][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 849.019468][ T25] __x64_sys_getdents64+0x7b/0x90 [ 849.019597][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 849.027547][ T25] do_syscall_64+0x31/0x70 [ 849.035493][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 849.035505][ C1] pipe_write+0x580/0x1930 [ 849.035518][ C1] ? pipe_read+0x1030/0x1030 [ 849.035534][ C1] ? fsnotify_perm+0x67/0x4e0 [ 849.069469][ T25] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 849.072523][ C1] ? io_schedule+0x120/0x120 [ 849.076913][ T25] RIP: 0033:0x7f1328a87e57 [ 849.081469][ C1] ? security_file_permission+0xa8/0xc0 [ 849.081478][ C1] ? iov_iter_init+0x3f/0x120 [ 849.081489][ C1] vfs_write+0xc02/0xf20 [ 849.081506][ C1] ? kernel_write+0x3c0/0x3c0 [ 849.099453][ T25] RSP: 002b:00007fffbad052c8 EFLAGS: 00000293 [ 849.101000][ C1] ? __fget_files+0x310/0x370 [ 849.106516][ T25] ORIG_RAX: 00000000000000d9 [ 849.111151][ C1] ? __fdget_pos+0x1fa/0x300 [ 849.111160][ C1] ? ksys_write+0x77/0x2b0 [ 849.111169][ C1] ksys_write+0x186/0x2b0 [ 849.111184][ C1] ? __ia32_sys_read+0x90/0x90 [ 849.129454][ T25] RAX: ffffffffffffffda RBX: 0000555557222b00 RCX: 00007f1328a87e57 [ 849.130750][ C1] __x64_sys_write+0x7b/0x90 [ 849.130768][ C1] do_syscall_64+0x31/0x70 [ 849.135462][ T25] RDX: 0000000000008000 RSI: 0000555557222b30 RDI: 0000000000000003 [ 849.139973][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 849.139981][ C1] RIP: 0033:0x7f9380d05049 [ 849.139999][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 849.208030][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 849.216420][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 849.224367][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 849.232311][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 849.240345][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 849.248289][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 849.256237][ C1] ---[ end trace 6a7df80a272a8526 ]--- [ 849.261755][ C1] ------------[ cut here ]------------ [ 849.262345][ T25] RBP: 0000555557222b30 R08: 0000000000000030 R09: 00007f1328b49640 [ 849.267203][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 849.281149][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 849.289450][ T25] R10: 0000000000000231 R11: 0000000000000293 R12: ffffffffffffffb8 [ 849.290757][ C1] Modules linked in: [ 849.298706][ T25] R13: 0000555557222b04 R14: 0000000000000016 R15: 00007fffbad064c0 [ 849.298716][ C1] [ 849.312842][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 849.319481][ T25] INFO: task syz-executor.4:26474 blocked for more than 129 seconds. [ 849.324535][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 849.339446][ T25] Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 849.342637][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 849.356963][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 849.369441][ T25] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 849.376561][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 849.391249][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 849.399211][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 849.399442][ T25] task:syz-executor.4 state:D [ 849.407166][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 849.407175][ T25] stack: 0 pid:26474 ppid: 391 flags:0x00004004 [ 849.407185][ T25] Call Trace: [ 849.411912][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 849.411919][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 849.411928][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 849.411934][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 849.411947][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 849.439453][ T25] __schedule+0x944/0xda0 [ 849.445789][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 849.469456][ T25] ? release_firmware_map_entry+0x193/0x193 [ 849.473501][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 849.495252][ C1] Call Trace: [ 849.498512][ C1] [ 849.501352][ C1] aiptek_irq+0x19b7/0x25f0 [ 849.505830][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 849.511608][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 849.516693][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 849.521693][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 849.527040][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 849.532210][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 849.537036][ C1] dummy_timer+0x798/0x42a0 [ 849.541518][ C1] ? enqueue_timer+0x1d1/0x470 [ 849.546262][ C1] ? __mod_timer+0x995/0xde0 [ 849.550829][ C1] ? mod_timer_pending+0x30/0x30 [ 849.555741][ C1] ? __kasan_check_write+0x14/0x20 [ 849.560939][ C1] ? dummy_free_streams+0x360/0x360 [ 849.566119][ C1] ? __kasan_check_write+0x14/0x20 [ 849.571201][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 849.576285][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 849.581803][ C1] ? dummy_free_streams+0x360/0x360 [ 849.586973][ C1] call_timer_fn+0x35/0x280 [ 849.591474][ C1] ? dummy_free_streams+0x360/0x360 [ 849.596730][ C1] expire_timers+0x21f/0x3b0 [ 849.601294][ C1] __run_timers+0x548/0x680 [ 849.605770][ C1] ? enqueue_timer+0x470/0x470 [ 849.610518][ C1] run_timer_softirq+0x69/0xf0 [ 849.615259][ C1] __do_softirq+0x27e/0x598 [ 849.619735][ C1] asm_call_irq_on_stack+0xf/0x20 [ 849.624729][ C1] [ 849.627734][ C1] do_softirq_own_stack+0x60/0x80 [ 849.632733][ C1] __irq_exit_rcu+0x128/0x150 [ 849.637382][ C1] irq_exit_rcu+0x9/0x10 [ 849.641600][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 849.647207][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 849.653176][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 849.658434][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 849.678010][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 849.684050][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 849.692008][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 849.699956][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 849.707905][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 849.715937][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 849.723893][ C1] ? kernel_init_free_pages+0x87/0x100 [ 849.729324][ C1] get_page_from_freelist+0x6b5/0xa90 [ 849.734683][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 849.740031][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 849.745549][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 849.751504][ C1] pipe_write+0x580/0x1930 [ 849.755902][ C1] ? pipe_read+0x1030/0x1030 [ 849.760478][ C1] ? fsnotify_perm+0x67/0x4e0 [ 849.765130][ C1] ? io_schedule+0x120/0x120 [ 849.769693][ C1] ? security_file_permission+0xa8/0xc0 [ 849.775229][ C1] ? iov_iter_init+0x3f/0x120 [ 849.779890][ C1] vfs_write+0xc02/0xf20 [ 849.784112][ C1] ? kernel_write+0x3c0/0x3c0 [ 849.788762][ C1] ? __fget_files+0x310/0x370 [ 849.793414][ C1] ? __fdget_pos+0x1fa/0x300 [ 849.797980][ C1] ? ksys_write+0x77/0x2b0 [ 849.802371][ C1] ksys_write+0x186/0x2b0 [ 849.806676][ C1] ? __ia32_sys_read+0x90/0x90 [ 849.811413][ C1] __x64_sys_write+0x7b/0x90 [ 849.815978][ C1] do_syscall_64+0x31/0x70 [ 849.820370][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 849.826233][ C1] RIP: 0033:0x7f9380d05049 [ 849.830635][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 849.850211][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 849.858609][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 849.866553][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 849.874499][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 849.882446][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 849.890391][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 849.898341][ C1] ---[ end trace 6a7df80a272a8527 ]--- [ 849.903817][ T25] ? __kasan_check_write+0x14/0x20 [ 849.903860][ C1] ------------[ cut here ]------------ [ 849.911275][ T25] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 849.914348][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 849.925426][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 849.931735][ T25] ? _raw_spin_lock_irqsave+0x210/0x210 [ 849.935036][ C1] Modules linked in: [ 849.944439][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 849.949449][ T25] ? __up_write+0xad/0x290 [ 849.956141][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 849.970570][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 849.976141][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 849.979454][ T25] schedule+0x14b/0x1e0 [ 849.995739][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 849.995750][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 849.995756][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 849.995763][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: fffff5200002c035 [ 849.995776][ C1] R10: fffff5200002c035 R11: 0000000000000000 R12: ffff88810db870c8 [ 850.019454][ T25] rwsem_down_write_slowpath+0x8c7/0x1270 [ 850.021845][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 850.039461][ T25] ? rwsem_spin_on_owner+0x2b0/0x2b0 [ 850.043468][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 850.059463][ T25] ? futex_exit_release+0xd0/0xd0 [ 850.065944][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 850.077520][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 850.087059][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 850.089457][ T25] ? kvm_arch_create_vcpu_debugfs+0xd4/0x140 [ 850.095022][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 850.108922][ C1] Call Trace: [ 850.109452][ T25] ? kvm_vm_ioctl+0x19ef/0x1fa0 [ 850.112193][ C1] [ 850.117026][ T25] down_write+0x147/0x150 [ 850.119842][ C1] aiptek_irq+0x19b7/0x25f0 [ 850.119851][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 850.119861][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 850.119876][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 850.129451][ T25] ? down_read_killable+0x220/0x220 [ 850.134442][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 850.134453][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 850.134467][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 850.149697][ T25] vfs_setxattr+0xfd/0x2d0 [ 850.149730][ C1] dummy_timer+0x798/0x42a0 [ 850.155078][ T25] ? check_stack_object+0x117/0x130 [ 850.160241][ C1] ? enqueue_timer+0x1d1/0x470 [ 850.160251][ C1] ? __mod_timer+0x995/0xde0 [ 850.160268][ C1] ? mod_timer_pending+0x30/0x30 [ 850.179458][ T25] ? xattr_permission+0x380/0x380 [ 850.183867][ C1] ? __kasan_check_write+0x14/0x20 [ 850.188431][ T25] ? strncpy_from_user+0x179/0x2b0 [ 850.193328][ C1] ? dummy_free_streams+0x360/0x360 [ 850.193336][ C1] ? __kasan_check_write+0x14/0x20 [ 850.193345][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 850.193360][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 850.209455][ T25] setxattr+0x1ea/0x3f0 [ 850.213698][ C1] ? dummy_free_streams+0x360/0x360 [ 850.218781][ T25] ? path_setxattr+0x240/0x240 [ 850.223855][ C1] call_timer_fn+0x35/0x280 [ 850.223865][ C1] ? dummy_free_streams+0x360/0x360 [ 850.223874][ C1] expire_timers+0x21f/0x3b0 [ 850.223890][ C1] __run_timers+0x548/0x680 [ 850.259463][ T25] ? kvm_vcpu_ioctl+0xab9/0xd70 [ 850.262152][ C1] ? enqueue_timer+0x470/0x470 [ 850.267064][ T25] ? mnt_want_write_file+0x24b/0x430 [ 850.271790][ C1] run_timer_softirq+0x69/0xf0 [ 850.271801][ C1] __do_softirq+0x27e/0x598 [ 850.271811][ C1] asm_call_irq_on_stack+0xf/0x20 [ 850.271821][ C1] [ 850.289461][ T25] __se_sys_fsetxattr+0x130/0x1b0 [ 850.291393][ C1] do_softirq_own_stack+0x60/0x80 [ 850.294305][ T25] __x64_sys_fsetxattr+0xbf/0xd0 [ 850.299298][ C1] __irq_exit_rcu+0x128/0x150 [ 850.313878][ C1] irq_exit_rcu+0x9/0x10 [ 850.318113][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 850.319455][ T25] do_syscall_64+0x31/0x70 [ 850.323742][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 850.328133][ T25] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 850.334071][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 850.334080][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 850.334087][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 850.334103][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 850.359458][ T25] RIP: 0033:0x7feeb83bb049 [ 850.364820][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 850.379447][ T25] RSP: 002b:00007feeb7531168 EFLAGS: 00000246 [ 850.383219][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 850.399444][ T25] ORIG_RAX: 00000000000000be [ 850.405156][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 850.417757][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 850.419447][ T25] RAX: ffffffffffffffda RBX: 00007feeb84cdf60 RCX: 00007feeb83bb049 [ 850.425731][ C1] ? kernel_init_free_pages+0x87/0x100 [ 850.439144][ C1] get_page_from_freelist+0x6b5/0xa90 [ 850.444518][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 850.449449][ T25] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000036 [ 850.449877][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 850.457826][ T25] RBP: 00007feeb841508d R08: feffffff00000000 R09: 0000000000000000 [ 850.463333][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 850.463346][ C1] pipe_write+0x580/0x1930 [ 850.463357][ C1] ? pipe_read+0x1030/0x1030 [ 850.463372][ C1] ? fsnotify_perm+0x67/0x4e0 [ 850.490881][ C1] ? io_schedule+0x120/0x120 [ 850.495462][ C1] ? security_file_permission+0xa8/0xc0 [ 850.499448][ T25] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 850.500994][ C1] ? iov_iter_init+0x3f/0x120 [ 850.508947][ T25] R13: 00007ffd68a6074f R14: 00007feeb7531300 R15: 0000000000022000 [ 850.513588][ C1] vfs_write+0xc02/0xf20 [ 850.513599][ C1] ? kernel_write+0x3c0/0x3c0 [ 850.513609][ C1] ? __fget_files+0x310/0x370 [ 850.513624][ C1] ? __fdget_pos+0x1fa/0x300 [ 850.539458][ T25] INFO: task syz-executor.4:26476 blocked for more than 130 seconds. [ 850.539702][ C1] ? ksys_write+0x77/0x2b0 [ 850.547741][ T25] Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 850.552122][ C1] ksys_write+0x186/0x2b0 [ 850.552133][ C1] ? __ia32_sys_read+0x90/0x90 [ 850.552143][ C1] __x64_sys_write+0x7b/0x90 [ 850.552159][ C1] do_syscall_64+0x31/0x70 [ 850.578979][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 850.584858][ C1] RIP: 0033:0x7f9380d05049 [ 850.589263][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 850.589444][ T25] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 850.608849][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 850.608862][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 850.608868][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 850.608873][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 850.608886][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 850.639442][ T25] task:syz-executor.4 state:D [ 850.641815][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 850.659445][ T25] stack: 0 pid:26476 ppid: 391 flags:0x00004004 [ 850.662443][ C1] ---[ end trace 6a7df80a272a8528 ]--- [ 850.682616][ T25] Call Trace: [ 850.682627][ C1] ------------[ cut here ]------------ [ 850.685902][ T25] __schedule+0x944/0xda0 [ 850.691312][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 850.691434][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 850.709452][ T25] ? release_firmware_map_entry+0x193/0x193 [ 850.711181][ C1] Modules linked in: [ 850.717045][ T25] ? __kasan_check_write+0x14/0x20 [ 850.717048][ C1] [ 850.717066][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 850.729449][ T25] schedule+0x14b/0x1e0 [ 850.739986][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 850.739999][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 850.740009][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 850.740025][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 850.759454][ T25] io_schedule+0x8e/0x120 [ 850.759704][ C1] [ 850.791938][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 850.799463][ T25] wait_on_page_bit_common+0x75a/0xd30 [ 850.799990][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 850.805429][ T25] ? wait_on_page_bit+0x50/0x50 [ 850.813364][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 850.813371][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 850.813377][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 850.813385][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 850.813393][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 850.813400][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 850.813413][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 850.828593][ T25] ? trace_raw_output_file_check_and_advance_wb_err+0x1d0/0x1d0 [ 850.834125][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 850.834129][ C1] Call Trace: [ 850.834133][ C1] [ 850.834146][ C1] aiptek_irq+0x19b7/0x25f0 [ 850.834163][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 850.859456][ T25] ? __iomap_dio_rw+0x201/0x10c0 [ 850.865543][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 850.889451][ T25] ? find_get_pages_contig+0x830/0x830 [ 850.892330][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 850.895160][ T25] ? ____kasan_kmalloc+0xf3/0x110 [ 850.899623][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 850.899634][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 850.899642][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 850.899659][ C1] dummy_timer+0x798/0x42a0 [ 850.919453][ T25] wait_on_page_bit+0x46/0x50 [ 850.920855][ C1] ? enqueue_timer+0x1d1/0x470 [ 850.925856][ T25] wait_on_page_writeback+0xda/0x250 [ 850.930839][ C1] ? __mod_timer+0x995/0xde0 [ 850.930849][ C1] ? mod_timer_pending+0x30/0x30 [ 850.930858][ C1] ? __kasan_check_write+0x14/0x20 [ 850.930875][ C1] ? dummy_free_streams+0x360/0x360 [ 850.949463][ T25] __filemap_fdatawait_range+0x20d/0x3d0 [ 850.950685][ C1] ? __kasan_check_write+0x14/0x20 [ 850.955332][ T25] ? filemap_fdatawait_range+0x40/0x40 [ 850.960067][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 850.960075][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 850.960086][ C1] ? dummy_free_streams+0x360/0x360 [ 850.960103][ C1] call_timer_fn+0x35/0x280 [ 850.965797][ T25] ? __filemap_fdatawrite_range+0x361/0x420 [ 850.969914][ C1] ? dummy_free_streams+0x360/0x360 [ 850.969924][ C1] expire_timers+0x21f/0x3b0 [ 850.969939][ C1] __run_timers+0x548/0x680 [ 850.979454][ T25] ? __kasan_kmalloc+0x9/0x10 [ 850.979957][ C1] ? enqueue_timer+0x470/0x470 [ 850.985127][ T25] ? kmem_cache_alloc_trace+0x210/0x3a0 [ 850.990736][ C1] run_timer_softirq+0x69/0xf0 [ 850.990749][ C1] __do_softirq+0x27e/0x598 [ 850.990767][ C1] asm_call_irq_on_stack+0xf/0x20 [ 851.019477][ T25] filemap_write_and_wait_range+0xb1/0xe0 [ 851.021560][ C1] [ 851.027440][ T25] __iomap_dio_rw+0x621/0x10c0 [ 851.032604][ C1] do_softirq_own_stack+0x60/0x80 [ 851.032613][ C1] __irq_exit_rcu+0x128/0x150 [ 851.032621][ C1] irq_exit_rcu+0x9/0x10 [ 851.032639][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 851.049474][ T25] ? iomap_dio_complete+0x690/0x690 [ 851.051091][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 851.056608][ T25] ? __kasan_check_write+0x14/0x20 [ 851.061333][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 851.061343][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 851.061349][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 851.061366][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 851.079468][ T25] ? down_read+0xf1/0x210 [ 851.079567][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 851.084307][ T25] iomap_dio_rw+0x35/0x80 [ 851.089294][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 851.109468][ T25] ext4_file_read_iter+0x3c8/0x4d0 [ 851.115025][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 851.129509][ T25] generic_file_splice_read+0x479/0x760 [ 851.144965][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 851.144983][ C1] ? kernel_init_free_pages+0x87/0x100 [ 851.144992][ C1] get_page_from_freelist+0x6b5/0xa90 [ 851.145010][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 851.169480][ T25] ? splice_shrink_spd+0xb0/0xb0 [ 851.171285][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 851.175595][ T25] ? fsnotify_perm+0x3cc/0x4e0 [ 851.183536][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 851.183547][ C1] pipe_write+0x580/0x1930 [ 851.183559][ C1] ? pipe_read+0x1030/0x1030 [ 851.183566][ C1] ? fsnotify_perm+0x67/0x4e0 [ 851.183585][ C1] ? io_schedule+0x120/0x120 [ 851.209475][ T25] ? security_file_permission+0x9d/0xc0 [ 851.210101][ C1] ? security_file_permission+0xa8/0xc0 [ 851.215538][ T25] ? rw_verify_area+0x1d1/0x370 [ 851.220869][ C1] ? iov_iter_init+0x3f/0x120 [ 851.220878][ C1] vfs_write+0xc02/0xf20 [ 851.220895][ C1] ? kernel_write+0x3c0/0x3c0 [ 851.220911][ C1] ? __fget_files+0x310/0x370 [ 851.239472][ T25] ? splice_shrink_spd+0xb0/0xb0 [ 851.241463][ C1] ? __fdget_pos+0x1fa/0x300 [ 851.247435][ T25] splice_direct_to_actor+0x42c/0xbc0 [ 851.251818][ C1] ? ksys_write+0x77/0x2b0 [ 851.251827][ C1] ksys_write+0x186/0x2b0 [ 851.251836][ C1] ? __ia32_sys_read+0x90/0x90 [ 851.251846][ C1] __x64_sys_write+0x7b/0x90 [ 851.251855][ C1] do_syscall_64+0x31/0x70 [ 851.251874][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 851.269467][ T25] ? do_splice_direct+0x3e0/0x3e0 [ 851.271171][ C1] RIP: 0033:0x7f9380d05049 [ 851.276693][ T25] ? pipe_to_sendpage+0x340/0x340 [ 851.281533][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 851.281539][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 851.281551][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 851.281558][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 851.281570][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 851.299462][ T25] ? security_file_permission+0xa8/0xc0 [ 851.299755][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 851.304672][ T25] ? rw_verify_area+0x1d1/0x370 [ 851.309229][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 851.329462][ T25] do_splice_direct+0x28b/0x3e0 [ 851.332545][ C1] ---[ end trace 6a7df80a272a8529 ]--- [ 851.336938][ T25] ? splice_direct_to_actor+0xbc0/0xbc0 [ 851.342852][ C1] ------------[ cut here ]------------ [ 851.456396][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 851.462374][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 851.471967][ C1] Modules linked in: [ 851.475858][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 851.487538][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 851.497574][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 851.503122][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 851.522702][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 851.528746][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 851.536692][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 851.544639][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 851.552586][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 851.560551][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 851.568501][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 851.577403][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 851.583960][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 851.591910][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 851.599855][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 851.607799][ C1] Call Trace: [ 851.611056][ C1] [ 851.613889][ C1] aiptek_irq+0x19b7/0x25f0 [ 851.618373][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 851.624153][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 851.629238][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 851.634237][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 851.639595][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 851.644769][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 851.649596][ C1] dummy_timer+0x798/0x42a0 [ 851.654077][ C1] ? enqueue_timer+0x1d1/0x470 [ 851.658815][ C1] ? __mod_timer+0x995/0xde0 [ 851.663380][ C1] ? mod_timer_pending+0x30/0x30 [ 851.668292][ C1] ? __kasan_check_write+0x14/0x20 [ 851.673563][ C1] ? dummy_free_streams+0x360/0x360 [ 851.678734][ C1] ? __kasan_check_write+0x14/0x20 [ 851.683820][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 851.688903][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 851.694428][ C1] ? dummy_free_streams+0x360/0x360 [ 851.699598][ C1] call_timer_fn+0x35/0x280 [ 851.704080][ C1] ? dummy_free_streams+0x360/0x360 [ 851.709252][ C1] expire_timers+0x21f/0x3b0 [ 851.713817][ C1] __run_timers+0x548/0x680 [ 851.718309][ C1] ? enqueue_timer+0x470/0x470 [ 851.723048][ C1] run_timer_softirq+0x69/0xf0 [ 851.727785][ C1] __do_softirq+0x27e/0x598 [ 851.732275][ C1] asm_call_irq_on_stack+0xf/0x20 [ 851.737270][ C1] [ 851.740186][ C1] do_softirq_own_stack+0x60/0x80 [ 851.745197][ C1] __irq_exit_rcu+0x128/0x150 [ 851.749848][ C1] irq_exit_rcu+0x9/0x10 [ 851.754065][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 851.759760][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 851.765714][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 851.770974][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 851.790552][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 851.796595][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 851.804542][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 851.812490][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 851.820438][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 851.828400][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 851.836356][ C1] ? kernel_init_free_pages+0x87/0x100 [ 851.841789][ C1] get_page_from_freelist+0x6b5/0xa90 [ 851.847137][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 851.852482][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 851.858001][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 851.863958][ C1] pipe_write+0x580/0x1930 [ 851.868350][ C1] ? pipe_read+0x1030/0x1030 [ 851.872915][ C1] ? fsnotify_perm+0x67/0x4e0 [ 851.877566][ C1] ? io_schedule+0x120/0x120 [ 851.882130][ C1] ? security_file_permission+0xa8/0xc0 [ 851.887647][ C1] ? iov_iter_init+0x3f/0x120 [ 851.892299][ C1] vfs_write+0xc02/0xf20 [ 851.896528][ C1] ? kernel_write+0x3c0/0x3c0 [ 851.901181][ C1] ? __fget_files+0x310/0x370 [ 851.905854][ C1] ? __fdget_pos+0x1fa/0x300 [ 851.910423][ C1] ? ksys_write+0x77/0x2b0 [ 851.914814][ C1] ksys_write+0x186/0x2b0 [ 851.919117][ C1] ? __ia32_sys_read+0x90/0x90 [ 851.923854][ C1] __x64_sys_write+0x7b/0x90 [ 851.928423][ C1] do_syscall_64+0x31/0x70 [ 851.932813][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 851.938688][ C1] RIP: 0033:0x7f9380d05049 [ 851.943091][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 851.962670][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 851.971062][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 851.979009][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 851.986955][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 851.994902][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 852.002851][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 852.010803][ C1] ---[ end trace 6a7df80a272a852a ]--- [ 852.016434][ C1] ------------[ cut here ]------------ [ 852.021887][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 852.027917][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 852.029903][ T25] ? fsnotify_perm+0x67/0x4e0 [ 852.037530][ C1] Modules linked in: [ 852.046087][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 852.057788][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 852.059465][ T25] ? security_file_permission+0x9d/0xc0 [ 852.067846][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 852.078991][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 852.079463][ T25] ? security_file_permission+0xa8/0xc0 [ 852.098581][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 852.098593][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 852.098599][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 852.098606][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: fffff5200002c035 [ 852.098613][ C1] R10: fffff5200002c035 R11: 0000000000000000 R12: ffff88810db870c8 [ 852.098628][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 852.129470][ T25] do_sendfile+0x914/0x1390 [ 852.134048][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 852.134056][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 852.134063][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 852.134077][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 852.159456][ T25] ? putname+0xf8/0x150 [ 852.163458][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 852.179461][ T25] ? do_pwritev+0x690/0x690 [ 852.185915][ C1] Call Trace: [ 852.199852][ T25] ? __kasan_check_write+0x14/0x20 [ 852.202466][ C1] [ 852.205746][ T25] ? __fpregs_load_activate+0x1e7/0x370 [ 852.210818][ C1] aiptek_irq+0x19b7/0x25f0 [ 852.210830][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 852.210838][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 852.210855][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 852.229460][ T25] __x64_sys_sendfile64+0x1c4/0x220 [ 852.234531][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 852.249457][ T25] ? __ia32_sys_sendfile+0x240/0x240 [ 852.250049][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 852.255308][ T25] ? switch_fpu_return+0xe/0x10 [ 852.260467][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 852.260477][ C1] dummy_timer+0x798/0x42a0 [ 852.260489][ C1] ? enqueue_timer+0x1d1/0x470 [ 852.260505][ C1] ? __mod_timer+0x995/0xde0 [ 852.279456][ T25] ? exit_to_user_mode_prepare+0xd4/0xe0 [ 852.283941][ C1] ? mod_timer_pending+0x30/0x30 [ 852.294459][ C1] ? __kasan_check_write+0x14/0x20 [ 852.299454][ T25] do_syscall_64+0x31/0x70 [ 852.299560][ C1] ? dummy_free_streams+0x360/0x360 [ 852.303974][ T25] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 852.309138][ C1] ? __kasan_check_write+0x14/0x20 [ 852.320079][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 852.325179][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 852.329445][ T25] RIP: 0033:0x7feeb83bb049 [ 852.330718][ C1] ? dummy_free_streams+0x360/0x360 [ 852.335099][ T25] RSP: 002b:00007feeb74ef168 EFLAGS: 00000246 [ 852.340261][ C1] call_timer_fn+0x35/0x280 [ 852.340271][ C1] ? dummy_free_streams+0x360/0x360 [ 852.340279][ C1] expire_timers+0x21f/0x3b0 [ 852.340289][ C1] __run_timers+0x548/0x680 [ 852.340305][ C1] ? enqueue_timer+0x470/0x470 [ 852.359931][ T25] ORIG_RAX: 0000000000000028 [ 852.360565][ C1] run_timer_softirq+0x69/0xf0 [ 852.365049][ T25] RAX: ffffffffffffffda RBX: 00007feeb84ce100 RCX: 00007feeb83bb049 [ 852.369781][ C1] __do_softirq+0x27e/0x598 [ 852.369792][ C1] asm_call_irq_on_stack+0xf/0x20 [ 852.369797][ C1] [ 852.369815][ C1] do_softirq_own_stack+0x60/0x80 [ 852.374856][ T25] RDX: 0000000000000000 RSI: 0000000000000036 RDI: 0000000000000003 [ 852.379190][ C1] __irq_exit_rcu+0x128/0x150 [ 852.409450][ T25] RBP: 00007feeb841508d R08: 0000000000000000 R09: 0000000000000000 [ 852.412467][ C1] irq_exit_rcu+0x9/0x10 [ 852.417112][ T25] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000000 [ 852.425052][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 852.425062][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 852.425074][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 852.425090][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 852.439451][ T25] R13: 00007ffd68a6074f R14: 00007feeb74ef300 R15: 0000000000022000 [ 852.442851][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 852.448814][ T25] INFO: task syz-executor.2:26505 blocked for more than 132 seconds. [ 852.454055][ C1] [ 852.454062][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 852.454068][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 852.454075][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 852.454081][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 852.454095][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 852.509458][ T25] Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 852.513951][ C1] ? kernel_init_free_pages+0x87/0x100 [ 852.539459][ T25] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 852.546648][ C1] get_page_from_freelist+0x6b5/0xa90 [ 852.559454][ T25] task:syz-executor.2 state:D [ 852.560726][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 852.566090][ T25] stack: 0 pid:26505 ppid: 393 flags:0x00004004 [ 852.570818][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 852.570828][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 852.570840][ C1] pipe_write+0x580/0x1930 [ 852.570856][ C1] ? pipe_read+0x1030/0x1030 [ 852.589448][ T25] Call Trace: [ 852.594406][ C1] ? fsnotify_perm+0x67/0x4e0 [ 852.598800][ T25] __schedule+0x944/0xda0 [ 852.603348][ C1] ? io_schedule+0x120/0x120 [ 852.603361][ C1] ? security_file_permission+0xa8/0xc0 [ 852.603371][ C1] ? iov_iter_init+0x3f/0x120 [ 852.603387][ C1] vfs_write+0xc02/0xf20 [ 852.619465][ T25] ? release_firmware_map_entry+0x193/0x193 [ 852.620162][ C1] ? kernel_write+0x3c0/0x3c0 [ 852.625681][ T25] ? __kasan_check_write+0x14/0x20 [ 852.630324][ C1] ? __fget_files+0x310/0x370 [ 852.630333][ C1] ? __fdget_pos+0x1fa/0x300 [ 852.630340][ C1] ? ksys_write+0x77/0x2b0 [ 852.630349][ C1] ksys_write+0x186/0x2b0 [ 852.630365][ C1] ? __ia32_sys_read+0x90/0x90 [ 852.649463][ T25] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 852.650179][ C1] __x64_sys_write+0x7b/0x90 [ 852.654831][ T25] ? _raw_spin_lock_irqsave+0x210/0x210 [ 852.659390][ C1] do_syscall_64+0x31/0x70 [ 852.679463][ T25] schedule+0x14b/0x1e0 [ 852.682461][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 852.687983][ T25] rwsem_down_read_slowpath+0x74b/0x1060 [ 852.692358][ C1] RIP: 0033:0x7f9380d05049 [ 852.692370][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 852.692376][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 852.692394][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 852.709462][ T25] ? down_write_killable+0x180/0x180 [ 852.712384][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 852.749465][ T25] ? do_exit+0x619/0x2300 [ 852.753584][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 852.773878][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 852.779461][ T25] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 852.781864][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 852.787924][ T25] ? uprobe_free_utask+0x82/0x160 [ 852.795856][ C1] ---[ end trace 6a7df80a272a852b ]--- [ 852.795919][ C1] ------------[ cut here ]------------ [ 852.811754][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 852.817773][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 852.819462][ T25] down_read+0xa4/0x210 [ 852.827383][ C1] Modules linked in: [ 852.835391][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 852.847089][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 852.849953][ T25] ? exit_mm_release+0x30/0x30 [ 852.857167][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 852.867435][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 852.869464][ T25] ? __down_common+0x5a0/0x5a0 [ 852.887031][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 852.887043][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 852.887048][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 852.887055][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 852.887061][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 852.887076][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 852.919468][ T25] ? mutex_unlock+0x1d/0x40 [ 852.921727][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 852.939467][ T25] ? futex_exit_release+0x92/0xd0 [ 852.942110][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 852.959465][ T25] ? sync_mm_rss+0x2c8/0x490 [ 852.962593][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 852.967163][ T25] exit_mm+0xdd/0x7e0 [ 852.975445][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 852.975451][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 852.975454][ C1] Call Trace: [ 852.975458][ C1] [ 852.975471][ C1] aiptek_irq+0x19b7/0x25f0 [ 852.975488][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 852.999470][ T25] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 853.001471][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 853.005961][ T25] ? do_exit+0x2300/0x2300 [ 853.011726][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 853.011736][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 853.011746][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 853.011754][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 853.011772][ C1] dummy_timer+0x798/0x42a0 [ 853.029603][ T25] ? taskstats_exit+0x47d/0xba0 [ 853.032029][ C1] ? enqueue_timer+0x1d1/0x470 [ 853.037379][ T25] ? mm_trace_rss_stat+0x3f/0x150 [ 853.042536][ C1] ? __mod_timer+0x995/0xde0 [ 853.042546][ C1] ? mod_timer_pending+0x30/0x30 [ 853.042554][ C1] ? __kasan_check_write+0x14/0x20 [ 853.042565][ C1] ? dummy_free_streams+0x360/0x360 [ 853.042579][ C1] ? __kasan_check_write+0x14/0x20 [ 853.059461][ T25] do_exit+0x61e/0x2300 [ 853.061437][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 853.066433][ T25] ? __kasan_check_write+0x14/0x20 [ 853.070982][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 853.070993][ C1] ? dummy_free_streams+0x360/0x360 [ 853.071003][ C1] call_timer_fn+0x35/0x280 [ 853.071019][ C1] ? dummy_free_streams+0x360/0x360 [ 853.089458][ T25] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 853.091287][ C1] expire_timers+0x21f/0x3b0 [ 853.095418][ T25] ? _raw_spin_lock_irqsave+0x210/0x210 [ 853.100488][ C1] __run_timers+0x548/0x680 [ 853.100498][ C1] ? enqueue_timer+0x470/0x470 [ 853.100509][ C1] run_timer_softirq+0x69/0xf0 [ 853.100526][ C1] __do_softirq+0x27e/0x598 [ 853.119464][ T25] ? rwsem_spin_on_owner+0x288/0x2b0 [ 853.120792][ C1] asm_call_irq_on_stack+0xf/0x20 [ 853.125966][ T25] ? mm_update_next_owner+0x6e0/0x6e0 [ 853.131061][ C1] [ 853.131073][ C1] do_softirq_own_stack+0x60/0x80 [ 853.131081][ C1] __irq_exit_rcu+0x128/0x150 [ 853.131090][ C1] irq_exit_rcu+0x9/0x10 [ 853.131101][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 853.131117][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 853.146055][ T25] ? __kasan_check_write+0x14/0x20 [ 853.150420][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 853.150430][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 853.150444][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 853.155491][ T25] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 853.159645][ C1] [ 853.159653][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 853.159660][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 853.159667][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 853.159680][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 853.169456][ T25] do_group_exit+0x16a/0x2d0 [ 853.169936][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 853.175285][ T25] get_signal+0x131f/0x1f70 [ 853.178189][ C1] ? kernel_init_free_pages+0x87/0x100 [ 853.199467][ T25] ? down_write_killable+0x15a/0x180 [ 853.203618][ C1] get_page_from_freelist+0x6b5/0xa90 [ 853.208727][ T25] ? ptrace_notify+0x340/0x340 [ 853.213972][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 853.213981][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 853.213998][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 853.214016][ C1] pipe_write+0x580/0x1930 [ 853.269475][ T25] ? selinux_file_ioctl+0x990/0x990 [ 853.270890][ C1] ? pipe_read+0x1030/0x1030 [ 853.278840][ T25] ? security_mmap_file+0x19b/0x1b0 [ 853.283484][ C1] ? fsnotify_perm+0x67/0x4e0 [ 853.283493][ C1] ? io_schedule+0x120/0x120 [ 853.283502][ C1] ? security_file_permission+0xa8/0xc0 [ 853.283511][ C1] ? iov_iter_init+0x3f/0x120 [ 853.283527][ C1] vfs_write+0xc02/0xf20 [ 853.319467][ T25] arch_do_signal+0x8d/0x620 [ 853.322094][ C1] ? kernel_write+0x3c0/0x3c0 [ 853.327612][ T25] ? account_locked_vm+0x1a0/0x1a0 [ 853.333554][ C1] ? __fget_files+0x310/0x370 [ 853.333563][ C1] ? __fdget_pos+0x1fa/0x300 [ 853.333572][ C1] ? ksys_write+0x77/0x2b0 [ 853.333587][ C1] ksys_write+0x186/0x2b0 [ 853.349462][ T25] ? __do_sys_rt_sigreturn+0x1e0/0x1e0 [ 853.352879][ C1] ? __ia32_sys_read+0x90/0x90 [ 853.357530][ T25] ? ksys_mmap_pgoff+0xf8/0x1f0 [ 853.362082][ C1] __x64_sys_write+0x7b/0x90 [ 853.362092][ C1] do_syscall_64+0x31/0x70 [ 853.362102][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 853.362110][ C1] RIP: 0033:0x7f9380d05049 [ 853.362126][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 853.379461][ T25] ? debug_smp_processor_id+0x1c/0x20 [ 853.381063][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 [ 853.385720][ T25] exit_to_user_mode_prepare+0xaa/0xe0 [ 853.390785][ C1] ORIG_RAX: 0000000000000001 [ 853.390792][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 853.390798][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 853.390804][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 853.390810][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 853.390822][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 853.409454][ T25] syscall_exit_to_user_mode+0x24/0x40 [ 853.414152][ C1] ---[ end trace 6a7df80a272a852c ]--- [ 853.419005][ T25] do_syscall_64+0x3d/0x70 [ 853.423871][ C1] ------------[ cut here ]------------ [ 853.439456][ T25] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 853.443049][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 853.556313][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 853.565906][ C1] Modules linked in: [ 853.569782][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 853.581462][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 853.591513][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 853.597037][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 853.616620][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 853.622662][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 853.630609][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 853.638554][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 853.646500][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 853.654448][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 853.662409][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 853.671308][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 853.677864][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 853.685822][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 853.693767][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 853.701724][ C1] Call Trace: [ 853.704983][ C1] [ 853.707817][ C1] aiptek_irq+0x19b7/0x25f0 [ 853.712294][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 853.718157][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 853.723241][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 853.728239][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 853.733588][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 853.738759][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 853.743587][ C1] dummy_timer+0x798/0x42a0 [ 853.748063][ C1] ? enqueue_timer+0x1d1/0x470 [ 853.752804][ C1] ? __mod_timer+0x995/0xde0 [ 853.757379][ C1] ? mod_timer_pending+0x30/0x30 [ 853.762288][ C1] ? __kasan_check_write+0x14/0x20 [ 853.767374][ C1] ? dummy_free_streams+0x360/0x360 [ 853.772542][ C1] ? __kasan_check_write+0x14/0x20 [ 853.777626][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 853.782723][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 853.788243][ C1] ? dummy_free_streams+0x360/0x360 [ 853.793414][ C1] call_timer_fn+0x35/0x280 [ 853.797889][ C1] ? dummy_free_streams+0x360/0x360 [ 853.803059][ C1] expire_timers+0x21f/0x3b0 [ 853.807638][ C1] __run_timers+0x548/0x680 [ 853.812126][ C1] ? enqueue_timer+0x470/0x470 [ 853.816872][ C1] run_timer_softirq+0x69/0xf0 [ 853.821617][ C1] __do_softirq+0x27e/0x598 [ 853.826108][ C1] asm_call_irq_on_stack+0xf/0x20 [ 853.831110][ C1] [ 853.834032][ C1] do_softirq_own_stack+0x60/0x80 [ 853.839032][ C1] __irq_exit_rcu+0x128/0x150 [ 853.843686][ C1] irq_exit_rcu+0x9/0x10 [ 853.847994][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 853.853600][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 853.859558][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 853.864818][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 853.884436][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 853.890498][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 853.898449][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 853.906405][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 853.914373][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 853.922336][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 853.930309][ C1] ? kernel_init_free_pages+0x87/0x100 [ 853.935741][ C1] get_page_from_freelist+0x6b5/0xa90 [ 853.941088][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 853.946447][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 853.951966][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 853.957923][ C1] pipe_write+0x580/0x1930 [ 853.962330][ C1] ? pipe_read+0x1030/0x1030 [ 853.966892][ C1] ? fsnotify_perm+0x67/0x4e0 [ 853.971546][ C1] ? io_schedule+0x120/0x120 [ 853.976289][ C1] ? security_file_permission+0xa8/0xc0 [ 853.981808][ C1] ? iov_iter_init+0x3f/0x120 [ 853.986463][ C1] vfs_write+0xc02/0xf20 [ 853.990679][ C1] ? kernel_write+0x3c0/0x3c0 [ 853.995362][ C1] ? __fget_files+0x310/0x370 [ 854.000032][ C1] ? __fdget_pos+0x1fa/0x300 [ 854.004632][ C1] ? ksys_write+0x77/0x2b0 [ 854.009031][ C1] ksys_write+0x186/0x2b0 [ 854.013346][ C1] ? __ia32_sys_read+0x90/0x90 [ 854.018094][ C1] __x64_sys_write+0x7b/0x90 [ 854.022668][ C1] do_syscall_64+0x31/0x70 [ 854.027064][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 854.032946][ C1] RIP: 0033:0x7f9380d05049 [ 854.037353][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 854.056955][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 854.065366][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 854.073330][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 854.081287][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 854.089256][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 854.097222][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 854.105177][ C1] ---[ end trace 6a7df80a272a852d ]--- [ 854.110697][ C1] ------------[ cut here ]------------ [ 854.116152][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 854.122170][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 854.129455][ T25] RIP: 0033:0x7f3a292ba092 [ 854.131777][ C1] Modules linked in: [ 854.131795][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 854.131808][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 854.139830][ T25] RSP: 002b:00007ffe8b4f0258 EFLAGS: 00000246 [ 854.140166][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 854.169456][ T25] ORIG_RAX: 0000000000000009 [ 854.173456][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 854.178108][ T25] RAX: fffffffffffffffc RBX: 0000000000020022 RCX: 00007f3a292ba092 [ 854.198281][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 854.198293][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 854.198298][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 854.198305][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 854.198311][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 854.198326][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 854.239453][ T25] RDX: 0000000000000000 RSI: 0000000000021000 RDI: 0000000000000000 [ 854.244114][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 854.268934][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 854.269453][ T25] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 854.275508][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 854.291411][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 854.299375][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 854.299445][ T25] R10: 0000000000020022 R11: 0000000000000246 R12: 00007ffe8b4f0460 [ 854.307330][ C1] Call Trace: [ 854.318537][ C1] [ 854.321390][ C1] aiptek_irq+0x19b7/0x25f0 [ 854.325885][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 854.329446][ T25] R13: 0000000000000006 R14: 0000000000000000 R15: 0000000000022000 [ 854.331680][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 854.344730][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 854.349456][ T25] INFO: task syz-executor.2:26506 blocked for more than 134 seconds. [ 854.349738][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 854.349748][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 854.349757][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 854.349772][ C1] dummy_timer+0x798/0x42a0 [ 854.357803][ T25] Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 854.363142][ C1] ? enqueue_timer+0x1d1/0x470 [ 854.363151][ C1] ? __mod_timer+0x995/0xde0 [ 854.363161][ C1] ? mod_timer_pending+0x30/0x30 [ 854.363177][ C1] ? __kasan_check_write+0x14/0x20 [ 854.379446][ T25] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 854.386468][ C1] ? dummy_free_streams+0x360/0x360 [ 854.409445][ T25] task:syz-executor.2 state:D [ 854.414410][ C1] ? __kasan_check_write+0x14/0x20 [ 854.429414][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 854.429452][ T25] stack: 0 pid:26506 ppid: 393 flags:0x00004004 [ 854.434510][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 854.446768][ C1] ? dummy_free_streams+0x360/0x360 [ 854.449445][ T25] Call Trace: [ 854.451956][ C1] call_timer_fn+0x35/0x280 [ 854.455233][ T25] __schedule+0x944/0xda0 [ 854.459694][ C1] ? dummy_free_streams+0x360/0x360 [ 854.459703][ C1] expire_timers+0x21f/0x3b0 [ 854.459713][ C1] __run_timers+0x548/0x680 [ 854.459722][ C1] ? enqueue_timer+0x470/0x470 [ 854.459738][ C1] run_timer_softirq+0x69/0xf0 [ 854.479474][ T25] ? release_firmware_map_entry+0x193/0x193 [ 854.482983][ C1] __do_softirq+0x27e/0x598 [ 854.487723][ T25] ? __kasan_check_write+0x14/0x20 [ 854.493576][ C1] asm_call_irq_on_stack+0xf/0x20 [ 854.493581][ C1] [ 854.493591][ C1] do_softirq_own_stack+0x60/0x80 [ 854.493600][ C1] __irq_exit_rcu+0x128/0x150 [ 854.493614][ C1] irq_exit_rcu+0x9/0x10 [ 854.509463][ T25] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 854.511114][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 854.516110][ T25] ? _raw_spin_lock_irqsave+0x210/0x210 [ 854.520749][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 854.520760][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 854.520769][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 854.520782][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 854.539462][ T25] schedule+0x14b/0x1e0 [ 854.541380][ C1] [ 854.547342][ T25] rwsem_down_read_slowpath+0x74b/0x1060 [ 854.552582][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 854.552588][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 854.552595][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 854.552600][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 854.552607][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 854.552625][ C1] ? kernel_init_free_pages+0x87/0x100 [ 854.599467][ T25] ? down_write_killable+0x180/0x180 [ 854.606215][ C1] get_page_from_freelist+0x6b5/0xa90 [ 854.629458][ T25] ? _raw_spin_lock_irqsave+0xf8/0x210 [ 854.630059][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 854.635489][ T25] ? __kasan_check_write+0x14/0x20 [ 854.640733][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 854.640744][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 854.640755][ C1] pipe_write+0x580/0x1930 [ 854.640771][ C1] ? pipe_read+0x1030/0x1030 [ 854.659455][ T25] ? uprobe_free_utask+0x82/0x160 [ 854.661970][ C1] ? fsnotify_perm+0x67/0x4e0 [ 854.667491][ T25] down_read+0xa4/0x210 [ 854.673430][ C1] ? io_schedule+0x120/0x120 [ 854.673438][ C1] ? security_file_permission+0xa8/0xc0 [ 854.673448][ C1] ? iov_iter_init+0x3f/0x120 [ 854.673465][ C1] vfs_write+0xc02/0xf20 [ 854.689455][ T25] ? exit_mm_release+0x30/0x30 [ 854.692061][ C1] ? kernel_write+0x3c0/0x3c0 [ 854.696192][ T25] ? __down_common+0x5a0/0x5a0 [ 854.700749][ C1] ? __fget_files+0x310/0x370 [ 854.700760][ C1] ? __fdget_pos+0x1fa/0x300 [ 854.700768][ C1] ? ksys_write+0x77/0x2b0 [ 854.700783][ C1] ksys_write+0x186/0x2b0 [ 854.719454][ T25] ? mutex_unlock+0x1d/0x40 [ 854.719919][ C1] ? __ia32_sys_read+0x90/0x90 [ 854.724604][ T25] ? futex_exit_release+0x92/0xd0 [ 854.729333][ C1] __x64_sys_write+0x7b/0x90 [ 854.749456][ T25] ? sync_mm_rss+0x2c8/0x490 [ 854.751703][ C1] do_syscall_64+0x31/0x70 [ 854.756445][ T25] exit_mm+0xdd/0x7e0 [ 854.761440][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 854.761449][ C1] RIP: 0033:0x7f9380d05049 [ 854.761460][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 854.761472][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 [ 854.779451][ T25] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 854.784799][ C1] ORIG_RAX: 0000000000000001 [ 854.789192][ T25] ? do_exit+0x2300/0x2300 [ 854.808760][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 854.808766][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 854.808771][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 854.808776][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 854.808783][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 854.808796][ C1] ---[ end trace 6a7df80a272a852e ]--- [ 854.849469][ T25] ? taskstats_exit+0x47d/0xba0 [ 854.853847][ C1] ------------[ cut here ]------------ [ 854.879459][ T25] do_exit+0x61e/0x2300 [ 854.879938][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 854.885375][ T25] ? __do_pipe_flags+0x4c/0x210 [ 854.889608][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 854.909453][ T25] ? do_pipe2+0xd0/0x300 [ 854.909811][ C1] Modules linked in: [ 854.914030][ T25] ? mm_update_next_owner+0x6e0/0x6e0 [ 854.914034][ C1] [ 854.914051][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 854.917911][ T25] ? __kasan_check_write+0x14/0x20 [ 854.923255][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 854.923267][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 854.923277][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 854.923290][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 854.939451][ T25] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 854.942354][ C1] [ 854.959467][ T25] do_group_exit+0x16a/0x2d0 [ 854.977512][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 854.977520][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 854.977526][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 854.977532][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 854.977538][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 854.977547][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 854.977563][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 855.009459][ T25] get_signal+0x131f/0x1f70 [ 855.011551][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 855.029452][ T25] ? _raw_spin_lock+0xa3/0x1b0 [ 855.035418][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 855.059451][ T25] ? ptrace_notify+0x340/0x340 [ 855.063299][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 855.068038][ T25] ? _raw_spin_unlock+0x4d/0x70 [ 855.075968][ C1] Call Trace: [ 855.075972][ C1] [ 855.075986][ C1] aiptek_irq+0x19b7/0x25f0 [ 855.075996][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 855.076012][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 855.099469][ T25] ? __alloc_fd+0x4d2/0x570 [ 855.099634][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 855.104114][ T25] arch_do_signal+0x8d/0x620 [ 855.109882][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 855.109892][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 855.109901][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 855.109919][ C1] dummy_timer+0x798/0x42a0 [ 855.129460][ T25] ? __do_sys_rt_sigreturn+0x1e0/0x1e0 [ 855.134380][ C1] ? enqueue_timer+0x1d1/0x470 [ 855.134390][ C1] ? __mod_timer+0x995/0xde0 [ 855.134405][ C1] ? mod_timer_pending+0x30/0x30 [ 855.149455][ T25] ? debug_smp_processor_id+0x1c/0x20 [ 855.154312][ C1] ? __kasan_check_write+0x14/0x20 [ 855.154331][ C1] ? dummy_free_streams+0x360/0x360 [ 855.169455][ T25] exit_to_user_mode_prepare+0xaa/0xe0 [ 855.173886][ C1] ? __kasan_check_write+0x14/0x20 [ 855.178969][ T25] syscall_exit_to_user_mode+0x24/0x40 [ 855.184125][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 855.184133][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 855.184144][ C1] ? dummy_free_streams+0x360/0x360 [ 855.184160][ C1] call_timer_fn+0x35/0x280 [ 855.209460][ T25] do_syscall_64+0x3d/0x70 [ 855.210717][ C1] ? dummy_free_streams+0x360/0x360 [ 855.215881][ T25] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 855.220342][ C1] expire_timers+0x21f/0x3b0 [ 855.220352][ C1] __run_timers+0x548/0x680 [ 855.220362][ C1] ? enqueue_timer+0x470/0x470 [ 855.220379][ C1] run_timer_softirq+0x69/0xf0 [ 855.229448][ T25] RIP: 0033:0x7f3a292ba049 [ 855.229934][ C1] __do_softirq+0x27e/0x598 [ 855.235794][ T25] RSP: 002b:00007f3a28430218 EFLAGS: 00000246 [ 855.240372][ C1] asm_call_irq_on_stack+0xf/0x20 [ 855.240376][ C1] [ 855.240387][ C1] do_softirq_own_stack+0x60/0x80 [ 855.240395][ C1] __irq_exit_rcu+0x128/0x150 [ 855.240410][ C1] irq_exit_rcu+0x9/0x10 [ 855.259449][ T25] ORIG_RAX: 00000000000000ca [ 855.263242][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 855.269272][ T25] RAX: fffffffffffffe00 RBX: 00007f3a293ccf68 RCX: 00007f3a292ba049 [ 855.274259][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 855.274270][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 855.274280][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 855.274293][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 855.289453][ T25] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3a293ccf68 [ 855.291060][ C1] [ 855.295802][ T25] RBP: 00007f3a293ccf60 R08: 0000000000000000 R09: 0000000000000000 [ 855.301394][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 855.301400][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 855.301407][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 855.301413][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 855.301420][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 855.301441][ C1] ? kernel_init_free_pages+0x87/0x100 [ 855.329455][ T25] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3a293ccf6c [ 855.340172][ C1] get_page_from_freelist+0x6b5/0xa90 [ 855.340184][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 855.340201][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 855.349628][ T25] R13: 00007ffe8b4f02cf R14: 00007f3a28430300 R15: 0000000000022000 [ 855.354204][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 855.356508][ T25] NMI backtrace for cpu 0 [ 855.364452][ C1] pipe_write+0x580/0x1930 [ 855.364465][ C1] ? pipe_read+0x1030/0x1030 [ 855.364473][ C1] ? fsnotify_perm+0x67/0x4e0 [ 855.364489][ C1] ? io_schedule+0x120/0x120 [ 855.372441][ T25] CPU: 0 PID: 25 Comm: khungtaskd Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 855.380379][ C1] ? security_file_permission+0xa8/0xc0 [ 855.388317][ T25] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 855.396266][ C1] ? iov_iter_init+0x3f/0x120 [ 855.404208][ T25] Call Trace: [ 855.409642][ C1] vfs_write+0xc02/0xf20 [ 855.417584][ T25] dump_stack_lvl+0x1e2/0x24b [ 855.422922][ C1] ? kernel_write+0x3c0/0x3c0 [ 855.428271][ T25] ? nmi_cpu_backtrace+0x79/0x150 [ 855.433780][ C1] ? __fget_files+0x310/0x370 [ 855.441722][ T25] ? show_regs_print_info+0x18/0x18 [ 855.447667][ C1] ? __fdget_pos+0x1fa/0x300 [ 855.451963][ T25] ? __rcu_read_unlock+0x149/0x4d0 [ 855.456356][ C1] ? ksys_write+0x77/0x2b0 [ 855.460911][ T25] dump_stack+0x15/0x1d [ 855.465569][ C1] ksys_write+0x186/0x2b0 [ 855.470127][ T25] nmi_cpu_backtrace+0x140/0x150 [ 855.481194][ C1] ? __ia32_sys_read+0x90/0x90 [ 855.486727][ T25] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 855.496763][ C1] __x64_sys_write+0x7b/0x90 [ 855.501409][ T25] nmi_trigger_cpumask_backtrace+0x135/0x230 [ 855.504671][ C1] do_syscall_64+0x31/0x70 [ 855.508882][ T25] arch_trigger_cpumask_backtrace+0x10/0x20 [ 855.513528][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 855.518171][ T25] check_hung_uninterruptible_tasks+0x81f/0x970 [ 855.523158][ C1] RIP: 0033:0x7f9380d05049 [ 855.527804][ T25] ? hung_task_panic+0x20/0x20 [ 855.532971][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 855.537531][ T25] watchdog+0x151/0x170 [ 855.542604][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 [ 855.546991][ T25] kthread+0x371/0x390 [ 855.551109][ C1] ORIG_RAX: 0000000000000001 [ 855.555408][ T25] ? hungtask_pm_notify+0x50/0x50 [ 855.560314][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 855.565044][ T25] ? kthread_blkcg+0xd0/0xd0 [ 855.571075][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 855.575635][ T25] ret_from_fork+0x1f/0x30 [ 855.581575][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 855.585986][ T25] Sending NMI from CPU 0 to CPUs 1: [ 855.591813][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 855.591819][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 855.591831][ C1] ---[ end trace 6a7df80a272a852f ]--- [ 855.598693][ T25] NMI backtrace for cpu 1 [ 855.598701][ T25] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 855.598707][ T25] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 855.598711][ T25] RIP: 0010:sprintf+0x6c/0x120 [ 855.598722][ T25] Code: 00 4c 8d 7c 24 60 48 c7 44 24 40 b3 8a b5 41 48 c7 44 24 48 6e 8f c8 85 48 c7 44 24 50 90 4f 6f 82 48 8d 5c 24 40 48 c1 eb 03 <48> b8 f1 f1 f1 f1 00 00 00 f3 49 bd 00 00 00 00 00 fc ff df 4a 89 [ 855.598726][ T25] RSP: 0018:ffffc9000015fee0 EFLAGS: 00000806 [ 855.598734][ T25] RAX: c2fb7b27b4910b00 RBX: 1ffff9200002bfe4 RCX: 000000000007e81b [ 855.598739][ T25] RDX: 0000000000000357 RSI: ffffffff84ebb580 RDI: ffffc90000160120 [ 855.598743][ T25] RBP: ffffc9000015ffd0 R08: ffffffff815466fb R09: ffffc90000160120 [ 855.598748][ T25] R10: fffff5200002c02a R11: 0000000000000000 R12: ffffc90000160120 [ 855.598753][ T25] R13: 0000000000000000 R14: ffffffff84ebb580 R15: ffffc9000015ff40 [ 855.598758][ T25] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 855.598762][ T25] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 855.598767][ T25] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 855.598771][ T25] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 855.598776][ T25] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 855.598779][ T25] Call Trace: [ 855.598782][ T25] [ 855.598785][ T25] ? record_print_text+0x13b/0x410 [ 855.598788][ T25] ? vsprintf+0x40/0x40 [ 855.598792][ T25] info_print_prefix+0x169/0x300 [ 855.598795][ T25] ? devkmsg_emit+0x11a/0x11a [ 855.598799][ T25] record_print_text+0x15a/0x410 [ 855.598802][ T25] ? msg_print_ext_body+0xd00/0xd00 [ 855.598806][ T25] ? prb_read_valid+0xa5/0xf0 [ 855.598810][ T25] ? prb_final_commit+0x2d0/0x2d0 [ 855.598813][ T25] ? prb_reserve+0x1420/0x1420 [ 855.598817][ T25] ? kvm_sched_clock_read+0x19/0x40 [ 855.598820][ T25] console_unlock+0x75f/0xf00 [ 855.598824][ T25] ? __kasan_check_write+0x14/0x20 [ 855.598828][ T25] ? _raw_spin_lock_irqsave+0xf8/0x210 [ 855.598831][ T25] ? vprintk_emit+0x610/0x610 [ 855.598835][ T25] ? _raw_spin_lock+0x1b0/0x1b0 [ 855.598838][ T25] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 855.598842][ T25] ? __kasan_check_write+0x14/0x20 [ 855.598846][ T25] ? _raw_spin_lock+0xa3/0x1b0 [ 855.598849][ T25] vprintk_emit+0x42b/0x610 [ 855.598852][ T25] ? log_output+0x4c0/0x4c0 [ 855.598856][ T25] ? __rcu_read_lock+0x50/0x50 [ 855.598859][ T25] vprintk_default+0x26/0x30 [ 855.598862][ T25] vprintk_func+0x19d/0x1e0 [ 855.598865][ T25] printk+0xcf/0x119 [ 855.598868][ T25] ? show_trace_log_lvl+0x2f7/0x400 [ 855.598871][ T25] ? __warn+0x153/0x260 [ 855.598875][ T25] ? devkmsg_release+0x127/0x127 [ 855.598878][ T25] __warn+0x194/0x260 [ 855.598881][ T25] ? usb_submit_urb+0xbbb/0x15b0 [ 855.598884][ T25] ? usb_submit_urb+0xbbb/0x15b0 [ 855.598888][ T25] report_bug+0x3cb/0x5a0 [ 855.598891][ T25] handle_bug+0x41/0x70 [ 855.598894][ T25] exc_invalid_op+0x1b/0x50 [ 855.598898][ T25] asm_exc_invalid_op+0x12/0x20 [ 855.598901][ T25] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 855.598911][ T25] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 855.598915][ T25] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 855.598922][ T25] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 855.598927][ T25] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 855.598931][ T25] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 855.598936][ T25] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 855.598941][ T25] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 855.598944][ T25] ? wake_up_klogd+0xb8/0xf0 [ 855.598947][ T25] aiptek_irq+0x19b7/0x25f0 [ 855.598951][ T25] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 855.598954][ T25] ? kcov_remote_start+0x19c/0x3e0 [ 855.598957][ T25] ? usb_unanchor_urb+0x171/0x3b0 [ 855.598961][ T25] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 855.598965][ T25] usb_hcd_giveback_urb+0x11d/0x3a0 [ 855.598968][ T25] ? _raw_spin_unlock+0x4d/0x70 [ 855.598971][ T25] dummy_timer+0x798/0x42a0 [ 855.598975][ T25] ? enqueue_timer+0x1d1/0x470 [ 855.598978][ T25] ? __mod_timer+0x995/0xde0 [ 855.598981][ T25] ? mod_timer_pending+0x30/0x30 [ 855.598985][ T25] ? __kasan_check_write+0x14/0x20 [ 855.598988][ T25] ? dummy_free_streams+0x360/0x360 [ 855.598992][ T25] ? __kasan_check_write+0x14/0x20 [ 855.598995][ T25] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 855.598999][ T25] ? _raw_spin_lock_irqsave+0x210/0x210 [ 855.599003][ T25] ? dummy_free_streams+0x360/0x360 [ 855.599006][ T25] call_timer_fn+0x35/0x280 [ 855.599010][ T25] ? dummy_free_streams+0x360/0x360 [ 855.599013][ T25] expire_timers+0x21f/0x3b0 [ 855.599016][ T25] __run_timers+0x548/0x680 [ 855.599019][ T25] ? enqueue_timer+0x470/0x470 [ 855.599023][ T25] run_timer_softirq+0x69/0xf0 [ 855.599026][ T25] __do_softirq+0x27e/0x598 [ 855.599030][ T25] asm_call_irq_on_stack+0xf/0x20 [ 855.599032][ T25] [ 855.599036][ T25] do_softirq_own_stack+0x60/0x80 [ 855.599039][ T25] __irq_exit_rcu+0x128/0x150 [ 855.599042][ T25] irq_exit_rcu+0x9/0x10 [ 855.599046][ T25] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 855.599050][ T25] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 855.599054][ T25] RIP: 0010:clear_page_erms+0x9/0x10 [ 855.599064][ T25] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 855.599068][ T25] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 855.599075][ T25] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 855.599080][ T25] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 855.599085][ T25] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 855.599090][ T25] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 855.599094][ T25] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 855.599099][ T25] ? kernel_init_free_pages+0x87/0x100 [ 855.599102][ T25] get_page_from_freelist+0x6b5/0xa90 [ 855.599106][ T25] __alloc_pages_nodemask+0x3c8/0x820 [ 855.599110][ T25] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 855.599114][ T25] ? copy_user_enhanced_fast_string+0xe/0x40 [ 855.599117][ T25] pipe_write+0x580/0x1930 [ 855.599120][ T25] ? pipe_read+0x1030/0x1030 [ 855.599124][ T25] ? fsnotify_perm+0x67/0x4e0 [ 855.599127][ T25] ? io_schedule+0x120/0x120 [ 855.599131][ T25] ? security_file_permission+0xa8/0xc0 [ 855.599134][ T25] ? iov_iter_init+0x3f/0x120 [ 855.599137][ T25] vfs_write+0xc02/0xf20 [ 855.599140][ T25] ? kernel_write+0x3c0/0x3c0 [ 855.599143][ T25] ? __fget_files+0x310/0x370 [ 855.599147][ T25] ? __fdget_pos+0x1fa/0x300 [ 855.599150][ T25] ? ksys_write+0x77/0x2b0 [ 855.599153][ T25] ksys_write+0x186/0x2b0 [ 855.599157][ T25] ? __ia32_sys_read+0x90/0x90 [ 855.599160][ T25] __x64_sys_write+0x7b/0x90 [ 855.599163][ T25] do_syscall_64+0x31/0x70 [ 855.599167][ T25] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 855.599170][ T25] RIP: 0033:0x7f9380d05049 [ 855.599184][ T25] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 855.599188][ T25] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 855.599196][ T25] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 855.599201][ T25] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 855.599206][ T25] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 855.599211][ T25] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 855.599216][ T25] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 856.490771][ C1] ------------[ cut here ]------------ [ 856.496221][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 856.502247][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 856.511855][ C1] Modules linked in: [ 856.515750][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 856.527449][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 856.537516][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 856.543051][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 856.562653][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 856.568715][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 856.576677][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 856.584641][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 856.592606][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 856.600566][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 856.608621][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 856.617537][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 856.624111][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 856.632079][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 856.640047][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 856.648009][ C1] Call Trace: [ 856.651278][ C1] [ 856.654124][ C1] aiptek_irq+0x19b7/0x25f0 [ 856.658619][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 856.664413][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 856.669511][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 856.674527][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 856.679891][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 856.685075][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 856.689914][ C1] dummy_timer+0x798/0x42a0 [ 856.694406][ C1] ? __kasan_check_read+0x11/0x20 [ 856.699417][ C1] ? __kasan_check_write+0x14/0x20 [ 856.704518][ C1] ? __kasan_check_write+0x14/0x20 [ 856.709625][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 856.714816][ C1] ? dummy_free_streams+0x360/0x360 [ 856.720000][ C1] ? __kasan_check_write+0x14/0x20 [ 856.725110][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 856.730209][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 856.735745][ C1] ? dummy_free_streams+0x360/0x360 [ 856.740933][ C1] call_timer_fn+0x35/0x280 [ 856.745429][ C1] ? dummy_free_streams+0x360/0x360 [ 856.750618][ C1] expire_timers+0x21f/0x3b0 [ 856.755197][ C1] __run_timers+0x548/0x680 [ 856.759691][ C1] ? enqueue_timer+0x470/0x470 [ 856.764537][ C1] run_timer_softirq+0x69/0xf0 [ 856.769290][ C1] __do_softirq+0x27e/0x598 [ 856.773784][ C1] asm_call_irq_on_stack+0xf/0x20 [ 856.778793][ C1] [ 856.781726][ C1] do_softirq_own_stack+0x60/0x80 [ 856.786774][ C1] __irq_exit_rcu+0x128/0x150 [ 856.791466][ C1] irq_exit_rcu+0x9/0x10 [ 856.795700][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 856.801322][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 856.807293][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 856.812592][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 856.832205][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 856.838276][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 856.846244][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 856.854212][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 856.862182][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 856.870149][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 856.878128][ C1] ? kernel_init_free_pages+0x87/0x100 [ 856.883585][ C1] get_page_from_freelist+0x6b5/0xa90 [ 856.888953][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 856.894327][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 856.899871][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 856.905848][ C1] pipe_write+0x580/0x1930 [ 856.910261][ C1] ? pipe_read+0x1030/0x1030 [ 856.914840][ C1] ? fsnotify_perm+0x67/0x4e0 [ 856.919507][ C1] ? io_schedule+0x120/0x120 [ 856.924091][ C1] ? security_file_permission+0xa8/0xc0 [ 856.929634][ C1] ? iov_iter_init+0x3f/0x120 [ 856.934308][ C1] vfs_write+0xc02/0xf20 [ 856.938551][ C1] ? kernel_write+0x3c0/0x3c0 [ 856.943222][ C1] ? __fget_files+0x310/0x370 [ 856.947889][ C1] ? __fdget_pos+0x1fa/0x300 [ 856.952471][ C1] ? ksys_write+0x77/0x2b0 [ 856.956878][ C1] ksys_write+0x186/0x2b0 [ 856.961206][ C1] ? __ia32_sys_read+0x90/0x90 [ 856.965962][ C1] __x64_sys_write+0x7b/0x90 [ 856.970545][ C1] do_syscall_64+0x31/0x70 [ 856.974950][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 856.980829][ C1] RIP: 0033:0x7f9380d05049 [ 856.985234][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 857.005022][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 857.013442][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 857.021496][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 857.029465][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 857.037435][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 857.045401][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 857.053368][ C1] ---[ end trace 6a7df80a272a8530 ]--- [ 857.058912][ C1] ------------[ cut here ]------------ [ 857.064366][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 857.070386][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 857.080001][ C1] Modules linked in: [ 857.083908][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 857.095610][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 857.105673][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 857.111211][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 857.130813][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 857.136879][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 857.144844][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 857.152807][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 857.160775][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 857.168738][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 857.176704][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 857.185624][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 857.192198][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 857.200168][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 857.208218][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 857.216179][ C1] Call Trace: [ 857.219451][ C1] [ 857.222301][ C1] aiptek_irq+0x19b7/0x25f0 [ 857.226796][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 857.232590][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 857.237693][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 857.242711][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 857.248711][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 857.253898][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 857.258742][ C1] dummy_timer+0x798/0x42a0 [ 857.263240][ C1] ? enqueue_timer+0x1d1/0x470 [ 857.268006][ C1] ? __mod_timer+0x995/0xde0 [ 857.272591][ C1] ? mod_timer_pending+0x30/0x30 [ 857.277518][ C1] ? __kasan_check_write+0x14/0x20 [ 857.282615][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 857.287803][ C1] ? dummy_free_streams+0x360/0x360 [ 857.292988][ C1] ? __kasan_check_write+0x14/0x20 [ 857.298086][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 857.303182][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 857.308720][ C1] ? dummy_free_streams+0x360/0x360 [ 857.313928][ C1] call_timer_fn+0x35/0x280 [ 857.318407][ C1] ? dummy_free_streams+0x360/0x360 [ 857.323579][ C1] expire_timers+0x21f/0x3b0 [ 857.328148][ C1] __run_timers+0x548/0x680 [ 857.332656][ C1] ? enqueue_timer+0x470/0x470 [ 857.337396][ C1] run_timer_softirq+0x69/0xf0 [ 857.342135][ C1] __do_softirq+0x27e/0x598 [ 857.346621][ C1] asm_call_irq_on_stack+0xf/0x20 [ 857.351615][ C1] [ 857.354534][ C1] do_softirq_own_stack+0x60/0x80 [ 857.359532][ C1] __irq_exit_rcu+0x128/0x150 [ 857.364182][ C1] irq_exit_rcu+0x9/0x10 [ 857.368402][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 857.374009][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 857.379964][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 857.385239][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 857.404817][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 857.410860][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 857.418819][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 857.426766][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 857.434716][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 857.442759][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 857.450817][ C1] ? kernel_init_free_pages+0x87/0x100 [ 857.456250][ C1] get_page_from_freelist+0x6b5/0xa90 [ 857.461598][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 857.466945][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 857.472468][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 857.478424][ C1] pipe_write+0x580/0x1930 [ 857.482818][ C1] ? pipe_read+0x1030/0x1030 [ 857.487383][ C1] ? fsnotify_perm+0x67/0x4e0 [ 857.492038][ C1] ? io_schedule+0x120/0x120 [ 857.496602][ C1] ? security_file_permission+0xa8/0xc0 [ 857.502120][ C1] ? iov_iter_init+0x3f/0x120 [ 857.506769][ C1] vfs_write+0xc02/0xf20 [ 857.510997][ C1] ? kernel_write+0x3c0/0x3c0 [ 857.515650][ C1] ? __fget_files+0x310/0x370 [ 857.520301][ C1] ? __fdget_pos+0x1fa/0x300 [ 857.524865][ C1] ? ksys_write+0x77/0x2b0 [ 857.529256][ C1] ksys_write+0x186/0x2b0 [ 857.533558][ C1] ? __ia32_sys_read+0x90/0x90 [ 857.538298][ C1] __x64_sys_write+0x7b/0x90 [ 857.542864][ C1] do_syscall_64+0x31/0x70 [ 857.547254][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 857.553125][ C1] RIP: 0033:0x7f9380d05049 [ 857.557516][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 857.577106][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 857.585510][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 857.593462][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 857.601511][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 857.609462][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 857.617418][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 857.625367][ C1] ---[ end trace 6a7df80a272a8531 ]--- [ 857.630891][ C1] ------------[ cut here ]------------ [ 857.636353][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 857.642372][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 857.651984][ C1] Modules linked in: [ 857.655887][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 857.667585][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 857.677648][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 857.683195][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 857.702796][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 857.708891][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 857.716862][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 857.724835][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 857.732800][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 857.740767][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 857.748823][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 857.757834][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 857.764410][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 857.772381][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 857.780345][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 857.788305][ C1] Call Trace: [ 857.791579][ C1] [ 857.794431][ C1] aiptek_irq+0x19b7/0x25f0 [ 857.798929][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 857.804728][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 857.809829][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 857.814844][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 857.820211][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 857.825399][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 857.830257][ C1] dummy_timer+0x798/0x42a0 [ 857.834753][ C1] ? enqueue_timer+0x1d1/0x470 [ 857.839620][ C1] ? __mod_timer+0x995/0xde0 [ 857.844204][ C1] ? mod_timer_pending+0x30/0x30 [ 857.849133][ C1] ? __kasan_check_write+0x14/0x20 [ 857.854239][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 857.859519][ C1] ? dummy_free_streams+0x360/0x360 [ 857.864706][ C1] ? __kasan_check_write+0x14/0x20 [ 857.869812][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 857.874912][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 857.880447][ C1] ? dummy_free_streams+0x360/0x360 [ 857.885636][ C1] call_timer_fn+0x35/0x280 [ 857.890129][ C1] ? dummy_free_streams+0x360/0x360 [ 857.895317][ C1] expire_timers+0x21f/0x3b0 [ 857.899899][ C1] __run_timers+0x548/0x680 [ 857.904394][ C1] ? enqueue_timer+0x470/0x470 [ 857.909158][ C1] run_timer_softirq+0x69/0xf0 [ 857.913916][ C1] __do_softirq+0x27e/0x598 [ 857.918415][ C1] asm_call_irq_on_stack+0xf/0x20 [ 857.923425][ C1] [ 857.926358][ C1] do_softirq_own_stack+0x60/0x80 [ 857.931372][ C1] __irq_exit_rcu+0x128/0x150 [ 857.936044][ C1] irq_exit_rcu+0x9/0x10 [ 857.940280][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 857.945904][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 857.951873][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 857.957145][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 857.976753][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 857.982803][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 857.990752][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 857.998721][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 858.006677][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 858.014635][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 858.022599][ C1] ? kernel_init_free_pages+0x87/0x100 [ 858.028038][ C1] get_page_from_freelist+0x6b5/0xa90 [ 858.033388][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 858.038738][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 858.044278][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 858.050235][ C1] pipe_write+0x580/0x1930 [ 858.054631][ C1] ? pipe_read+0x1030/0x1030 [ 858.059195][ C1] ? fsnotify_perm+0x67/0x4e0 [ 858.063846][ C1] ? io_schedule+0x120/0x120 [ 858.068433][ C1] ? security_file_permission+0xa8/0xc0 [ 858.073954][ C1] ? iov_iter_init+0x3f/0x120 [ 858.078607][ C1] vfs_write+0xc02/0xf20 [ 858.082825][ C1] ? kernel_write+0x3c0/0x3c0 [ 858.087478][ C1] ? __fget_files+0x310/0x370 [ 858.092130][ C1] ? __fdget_pos+0x1fa/0x300 [ 858.096714][ C1] ? ksys_write+0x77/0x2b0 [ 858.101133][ C1] ksys_write+0x186/0x2b0 [ 858.105448][ C1] ? __ia32_sys_read+0x90/0x90 [ 858.110190][ C1] __x64_sys_write+0x7b/0x90 [ 858.114758][ C1] do_syscall_64+0x31/0x70 [ 858.119154][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 858.125026][ C1] RIP: 0033:0x7f9380d05049 [ 858.129429][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 858.149010][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 858.157420][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 858.165369][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 858.173320][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 858.181270][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 858.189219][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 858.197166][ C1] ---[ end trace 6a7df80a272a8532 ]--- [ 858.202676][ C1] ------------[ cut here ]------------ [ 858.208131][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 858.214245][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 858.223859][ C1] Modules linked in: [ 858.227751][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 858.239439][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 858.249503][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 858.255041][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 858.274725][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 858.280786][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 858.288751][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 858.296892][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 858.304866][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 858.312840][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 858.320812][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 858.329748][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 858.336329][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 858.344307][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 858.352272][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 858.360231][ C1] Call Trace: [ 858.363589][ C1] [ 858.366441][ C1] aiptek_irq+0x19b7/0x25f0 [ 858.370942][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 858.376739][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 858.381841][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 858.386855][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 858.392233][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 858.397423][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 858.402268][ C1] dummy_timer+0x798/0x42a0 [ 858.406775][ C1] ? enqueue_timer+0x1d1/0x470 [ 858.411533][ C1] ? __mod_timer+0x995/0xde0 [ 858.416141][ C1] ? mod_timer_pending+0x30/0x30 [ 858.421072][ C1] ? __kasan_check_write+0x14/0x20 [ 858.426176][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 858.431367][ C1] ? dummy_free_streams+0x360/0x360 [ 858.436554][ C1] ? __kasan_check_write+0x14/0x20 [ 858.441671][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 858.446759][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 858.452281][ C1] ? dummy_free_streams+0x360/0x360 [ 858.457453][ C1] call_timer_fn+0x35/0x280 [ 858.461956][ C1] ? dummy_free_streams+0x360/0x360 [ 858.467130][ C1] expire_timers+0x21f/0x3b0 [ 858.471695][ C1] __run_timers+0x548/0x680 [ 858.476177][ C1] ? enqueue_timer+0x470/0x470 [ 858.480916][ C1] run_timer_softirq+0x69/0xf0 [ 858.485654][ C1] __do_softirq+0x27e/0x598 [ 858.490139][ C1] asm_call_irq_on_stack+0xf/0x20 [ 858.495132][ C1] [ 858.498060][ C1] do_softirq_own_stack+0x60/0x80 [ 858.503058][ C1] __irq_exit_rcu+0x128/0x150 [ 858.507713][ C1] irq_exit_rcu+0x9/0x10 [ 858.511933][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 858.517542][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 858.523590][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 858.528853][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 858.548430][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 858.554475][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 858.562424][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 858.570370][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 858.578513][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 858.586460][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 858.594508][ C1] ? kernel_init_free_pages+0x87/0x100 [ 858.599943][ C1] get_page_from_freelist+0x6b5/0xa90 [ 858.605290][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 858.610636][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 858.616168][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 858.622126][ C1] pipe_write+0x580/0x1930 [ 858.626522][ C1] ? pipe_read+0x1030/0x1030 [ 858.631085][ C1] ? fsnotify_perm+0x67/0x4e0 [ 858.635741][ C1] ? io_schedule+0x120/0x120 [ 858.640308][ C1] ? security_file_permission+0xa8/0xc0 [ 858.645827][ C1] ? iov_iter_init+0x3f/0x120 [ 858.650481][ C1] vfs_write+0xc02/0xf20 [ 858.654699][ C1] ? kernel_write+0x3c0/0x3c0 [ 858.659350][ C1] ? __fget_files+0x310/0x370 [ 858.664002][ C1] ? __fdget_pos+0x1fa/0x300 [ 858.668593][ C1] ? ksys_write+0x77/0x2b0 [ 858.672984][ C1] ksys_write+0x186/0x2b0 [ 858.677896][ C1] ? __ia32_sys_read+0x90/0x90 [ 858.682637][ C1] __x64_sys_write+0x7b/0x90 [ 858.687209][ C1] do_syscall_64+0x31/0x70 [ 858.691703][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 858.697566][ C1] RIP: 0033:0x7f9380d05049 [ 858.701961][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 858.721557][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 858.729944][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 858.737895][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 858.745841][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 858.753788][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 858.761737][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 858.769689][ C1] ---[ end trace 6a7df80a272a8533 ]--- [ 858.775204][ C1] ------------[ cut here ]------------ [ 858.780659][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 858.786676][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 858.796295][ C1] Modules linked in: [ 858.800203][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 858.811925][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 858.822000][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 858.827548][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 858.847154][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 858.853224][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 858.861195][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 858.869162][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 858.877208][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 858.885175][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 858.893151][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 858.902078][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 858.908650][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 858.916615][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 858.924582][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 858.932539][ C1] Call Trace: [ 858.935804][ C1] [ 858.938655][ C1] aiptek_irq+0x19b7/0x25f0 [ 858.943147][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 858.948943][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 858.954045][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 858.959179][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 858.964552][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 858.969745][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 858.974595][ C1] dummy_timer+0x798/0x42a0 [ 858.979092][ C1] ? enqueue_timer+0x1d1/0x470 [ 858.983853][ C1] ? __mod_timer+0x995/0xde0 [ 858.988442][ C1] ? mod_timer_pending+0x30/0x30 [ 858.993374][ C1] ? __kasan_check_write+0x14/0x20 [ 858.998480][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 859.003675][ C1] ? dummy_free_streams+0x360/0x360 [ 859.008875][ C1] ? __kasan_check_write+0x14/0x20 [ 859.014067][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 859.019176][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 859.024714][ C1] ? dummy_free_streams+0x360/0x360 [ 859.029908][ C1] call_timer_fn+0x35/0x280 [ 859.034404][ C1] ? dummy_free_streams+0x360/0x360 [ 859.039594][ C1] expire_timers+0x21f/0x3b0 [ 859.044180][ C1] __run_timers+0x548/0x680 [ 859.048677][ C1] ? enqueue_timer+0x470/0x470 [ 859.053434][ C1] run_timer_softirq+0x69/0xf0 [ 859.058190][ C1] __do_softirq+0x27e/0x598 [ 859.062684][ C1] asm_call_irq_on_stack+0xf/0x20 [ 859.067690][ C1] [ 859.070625][ C1] do_softirq_own_stack+0x60/0x80 [ 859.075637][ C1] __irq_exit_rcu+0x128/0x150 [ 859.080306][ C1] irq_exit_rcu+0x9/0x10 [ 859.084677][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 859.090302][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 859.096277][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 859.101559][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 859.121267][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 859.127330][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 859.135385][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 859.143351][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 859.151404][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 859.159369][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 859.167344][ C1] ? kernel_init_free_pages+0x87/0x100 [ 859.172860][ C1] get_page_from_freelist+0x6b5/0xa90 [ 859.178239][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 859.183705][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 859.189242][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 859.195216][ C1] pipe_write+0x580/0x1930 [ 859.199628][ C1] ? pipe_read+0x1030/0x1030 [ 859.204221][ C1] ? fsnotify_perm+0x67/0x4e0 [ 859.208892][ C1] ? io_schedule+0x120/0x120 [ 859.213476][ C1] ? security_file_permission+0xa8/0xc0 [ 859.219012][ C1] ? iov_iter_init+0x3f/0x120 [ 859.223693][ C1] vfs_write+0xc02/0xf20 [ 859.227936][ C1] ? kernel_write+0x3c0/0x3c0 [ 859.232607][ C1] ? __fget_files+0x310/0x370 [ 859.237277][ C1] ? __fdget_pos+0x1fa/0x300 [ 859.241860][ C1] ? ksys_write+0x77/0x2b0 [ 859.246275][ C1] ksys_write+0x186/0x2b0 [ 859.250595][ C1] ? __ia32_sys_read+0x90/0x90 [ 859.255354][ C1] __x64_sys_write+0x7b/0x90 [ 859.259950][ C1] do_syscall_64+0x31/0x70 [ 859.264367][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 859.270257][ C1] RIP: 0033:0x7f9380d05049 [ 859.274685][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 859.294303][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 859.302726][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 859.310693][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 859.318663][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 859.326631][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 859.334688][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 859.342656][ C1] ---[ end trace 6a7df80a272a8534 ]--- [ 859.348191][ C1] ------------[ cut here ]------------ [ 859.349571][ C0] BUG: workqueue lockup - pool [ 859.353665][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 859.353678][ C0] cpus=1 [ 859.358530][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 859.364297][ C0] node=0 [ 859.367197][ C1] Modules linked in: [ 859.376802][ C0] flags=0x0 nice=0 [ 859.379695][ C1] [ 859.379708][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 859.379719][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 859.383582][ C0] stuck for 162s! [ 859.387367][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 859.389669][ C0] BUG: workqueue lockup - pool [ 859.401343][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 859.401350][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 859.411392][ C0] cpus=1 [ 859.415080][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 859.420609][ C0] node=0 [ 859.425349][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 859.445013][ C0] flags=0x0 nice=-20 [ 859.451037][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: 0000000000000003 [ 859.451044][ C1] R10: fffff5200002c05d R11: 0000000000000004 R12: ffff88810db870c8 [ 859.451057][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 859.453965][ C0] stuck for 157s! [ 859.461909][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 859.461923][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 859.464829][ C0] Showing busy workqueues and worker pools: [ 859.472773][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 859.472788][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 859.476736][ C0] workqueue events: flags=0x0 [ 859.484676][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 859.484679][ C1] Call Trace: [ 859.484689][ C1] [ 859.492638][ C0] pwq 2: [ 859.500587][ C1] aiptek_irq+0x19b7/0x25f0 [ 859.504271][ C0] cpus=1 [ 859.513264][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 859.519812][ C0] node=0 [ 859.525680][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 859.533618][ C0] flags=0x0 nice=0 [ 859.541563][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 859.546212][ C0] active=1/256 refcnt=2 [ 859.554160][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 859.557406][ C0] pending: [ 859.560236][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 859.563230][ C0] kfree_rcu_monitor [ 859.567715][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 859.570618][ C0] [ 859.576397][ C1] dummy_timer+0x798/0x42a0 [ 859.579314][ C0] pwq 0: [ 859.584385][ C1] ? enqueue_timer+0x1d1/0x470 [ 859.588171][ C0] cpus=0 [ 859.593169][ C1] ? __mod_timer+0x995/0xde0 [ 859.597373][ C0] node=0 [ 859.602720][ C1] ? mod_timer_pending+0x30/0x30 [ 859.606059][ C0] flags=0x0 nice=0 [ 859.611318][ C1] ? __kasan_check_write+0x14/0x20 [ 859.615182][ C0] active=4/256 refcnt=5 [ 859.620091][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 859.622386][ C0] in-flight: [ 859.626879][ C1] ? dummy_free_streams+0x360/0x360 [ 859.629877][ C0] 67:destroy_list_workfn [ 859.634609][ C1] ? __kasan_check_write+0x14/0x20 [ 859.637518][ C0] destroy_list_workfn [ 859.642077][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 859.644980][ C0] [ 859.649911][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 859.653679][ C0] pending: [ 859.658789][ C1] ? dummy_free_streams+0x360/0x360 [ 859.662999][ C0] kfree_rcu_monitor [ 859.668168][ C1] call_timer_fn+0x35/0x280 [ 859.671680][ C0] , psi_avgs_work [ 859.676862][ C1] ? dummy_free_streams+0x360/0x360 [ 859.681149][ C0] [ 859.686235][ C1] expire_timers+0x21f/0x3b0 [ 859.690286][ C0] workqueue events_long: flags=0x0 [ 859.695372][ C1] __run_timers+0x548/0x680 [ 859.697667][ C0] pwq 2: [ 859.703186][ C1] ? enqueue_timer+0x470/0x470 [ 859.706536][ C0] cpus=1 [ 859.711706][ C1] run_timer_softirq+0x69/0xf0 [ 859.715563][ C0] node=0 [ 859.720041][ C1] __do_softirq+0x27e/0x598 [ 859.723650][ C0] flags=0x0 nice=0 [ 859.728825][ C1] asm_call_irq_on_stack+0xf/0x20 [ 859.731133][ C0] active=1/256 refcnt=2 [ 859.735687][ C1] [ 859.740773][ C0] pending: [ 859.745255][ C1] do_softirq_own_stack+0x60/0x80 [ 859.748247][ C0] br_fdb_cleanup [ 859.752975][ C1] __irq_exit_rcu+0x128/0x150 [ 859.752988][ C1] irq_exit_rcu+0x9/0x10 [ 859.755891][ C0] [ 859.760646][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 859.763561][ C0] pwq 0: [ 859.768023][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 859.771803][ C0] cpus=0 [ 859.776801][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 859.781020][ C0] node=0 [ 859.783939][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 859.787277][ C0] flags=0x0 nice=0 [ 859.792273][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 859.795877][ C0] active=1/256 refcnt=2 [ 859.800517][ C1] [ 859.804728][ C0] pending: [ 859.807032][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 859.812634][ C0] br_fdb_cleanup [ 859.815631][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 859.821660][ C0] [ 859.824595][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 859.829971][ C0] workqueue events_unbound: flags=0x2 [ 859.832843][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 859.852599][ C0] pwq 4: [ 859.856376][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 859.862410][ C0] cpus=0-1 [ 859.866716][ C1] ? kernel_init_free_pages+0x87/0x100 [ 859.869009][ C0] flags=0x4 nice=0 [ 859.872355][ C1] get_page_from_freelist+0x6b5/0xa90 [ 859.880297][ C0] active=1/512 refcnt=3 [ 859.883904][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 859.891857][ C0] pending: [ 859.894163][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 859.902106][ C0] toggle_allocation_gate [ 859.907450][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 859.915386][ C0] [ 859.918391][ C1] pipe_write+0x580/0x1930 [ 859.926774][ C0] workqueue events_power_efficient: flags=0x80 [ 859.929847][ C1] ? pipe_read+0x1030/0x1030 [ 859.929861][ C1] ? fsnotify_perm+0x67/0x4e0 [ 859.935282][ C0] pwq 2: [ 859.939063][ C1] ? io_schedule+0x120/0x120 [ 859.944402][ C0] cpus=1 [ 859.948617][ C1] ? security_file_permission+0xa8/0xc0 [ 859.953951][ C0] node=0 [ 859.957308][ C1] ? iov_iter_init+0x3f/0x120 [ 859.957323][ C1] vfs_write+0xc02/0xf20 [ 859.962832][ C0] flags=0x0 nice=0 [ 859.967134][ C1] ? kernel_write+0x3c0/0x3c0 [ 859.973080][ C0] active=1/256 refcnt=2 [ 859.975383][ C1] ? __fget_files+0x310/0x370 [ 859.979763][ C0] pending: [ 859.985904][ C1] ? __fdget_pos+0x1fa/0x300 [ 859.990548][ C0] check_lifetime [ 859.995194][ C1] ? ksys_write+0x77/0x2b0 [ 859.998195][ C0] [ 860.002774][ C1] ksys_write+0x186/0x2b0 [ 860.005694][ C0] workqueue rcu_gp: flags=0x8 [ 860.011322][ C1] ? __ia32_sys_read+0x90/0x90 [ 860.011333][ C1] __x64_sys_write+0x7b/0x90 [ 860.011352][ C1] do_syscall_64+0x31/0x70 [ 860.014267][ C0] pwq 0: [ 860.018928][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 860.023144][ C0] cpus=0 [ 860.026942][ C1] RIP: 0033:0x7f9380d05049 [ 860.031585][ C0] node=0 [ 860.035820][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 860.040552][ C0] flags=0x0 nice=0 [ 860.043896][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 [ 860.048456][ C0] active=1/256 refcnt=2 [ 860.052058][ C1] ORIG_RAX: 0000000000000001 [ 860.056442][ C0] in-flight: [ 860.058763][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 860.063175][ C0] 26149:wait_rcu_exp_gp [ 860.067995][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 860.072723][ C0] [ 860.077304][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 860.081720][ C0] workqueue mm_percpu_wq: flags=0x8 [ 860.084702][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 860.090575][ C0] pwq 2: [ 860.093484][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 860.097867][ C0] cpus=1 [ 860.100776][ C1] ---[ end trace 6a7df80a272a8535 ]--- [ 860.120352][ C0] node=0 [ 860.124245][ C1] ------------[ cut here ]------------ [ 860.130177][ C0] flags=0x0 nice=0 active=1/256 refcnt=3 [ 860.134403][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 860.139043][ C0] pending: [ 860.142684][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 860.150513][ C0] lru_add_drain_per_cpu [ 860.154720][ C1] Modules linked in: [ 860.162666][ C0] BAR(29) [ 860.164972][ C1] [ 860.172915][ C0] [ 860.178093][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 860.186053][ C0] workqueue kblockd: flags=0x18 [ 860.189026][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 860.196977][ C0] pwq 3: [ 860.199886][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 860.205393][ C0] cpus=1 [ 860.208313][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 860.213736][ C0] node=0 [ 860.219426][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 860.225290][ C0] flags=0x0 nice=-20 [ 860.228631][ C1] [ 860.238225][ C0] active=1/256 refcnt=2 [ 860.242435][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 860.246296][ C0] pending: [ 860.249296][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 860.251599][ C0] blk_mq_timeout_work [ 860.253894][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: 0000000000000003 [ 860.265742][ C0] [ 860.270572][ C1] R10: fffff5200002c05d R11: 0000000000000004 R12: ffff88810db870c8 [ 860.270589][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 860.280657][ C0] workqueue usb_hub_wq: flags=0x4 [ 860.283659][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 860.289181][ C0] pwq 2: [ 860.292100][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 860.311848][ C0] cpus=1 [ 860.314762][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 860.320798][ C0] node=0 [ 860.324763][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 860.327062][ C0] flags=0x0 nice=0 [ 860.331290][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 860.339407][ C0] active=2/256 refcnt=3 [ 860.342754][ C1] Call Trace: [ 860.350698][ C0] in-flight: [ 860.354737][ C1] [ 860.362707][ C0] 11650:hub_event [ 860.365009][ C1] aiptek_irq+0x19b7/0x25f0 [ 860.372948][ C0] hub_event [ 860.380897][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 860.385879][ C0] [ 860.394783][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 860.397817][ C0] workqueue dm_bufio_cache: flags=0x8 [ 860.404325][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 860.404336][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 860.404355][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 860.407260][ C0] pwq 2: [ 860.415211][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 860.418117][ C0] cpus=1 [ 860.426086][ C1] dummy_timer+0x798/0x42a0 [ 860.429855][ C0] node=0 [ 860.437806][ C1] ? enqueue_timer+0x1d1/0x470 [ 860.442009][ C0] flags=0x0 nice=0 [ 860.445274][ C1] ? __mod_timer+0x995/0xde0 [ 860.448785][ C0] active=1/256 refcnt=2 [ 860.451610][ C1] ? mod_timer_pending+0x30/0x30 [ 860.455292][ C0] pending: [ 860.459768][ C1] ? __kasan_check_write+0x14/0x20 [ 860.462941][ C0] work_fn [ 860.468729][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 860.471023][ C0] [ 860.476122][ C1] ? dummy_free_streams+0x360/0x360 [ 860.481488][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 860.486455][ C1] ? __kasan_check_write+0x14/0x20 [ 860.491797][ C0] pwq 2: [ 860.496966][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 860.499964][ C0] cpus=1 [ 860.504784][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 860.507709][ C0] node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 860.512555][ C1] ? dummy_free_streams+0x360/0x360 [ 860.515457][ C0] pending: [ 860.520195][ C1] call_timer_fn+0x35/0x280 [ 860.523977][ C0] wg_packet_tx_worker [ 860.528537][ C1] ? dummy_free_streams+0x360/0x360 [ 860.532751][ C0] , wg_packet_encrypt_worker [ 860.537670][ C1] expire_timers+0x21f/0x3b0 [ 860.541006][ C0] [ 860.546106][ C1] __run_timers+0x548/0x680 [ 860.549204][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 860.554351][ C1] ? enqueue_timer+0x470/0x470 [ 860.554367][ C1] run_timer_softirq+0x69/0xf0 [ 860.556663][ C0] pwq 2: [ 860.561840][ C1] __do_softirq+0x27e/0x598 [ 860.567084][ C0] cpus=1 [ 860.572165][ C1] asm_call_irq_on_stack+0xf/0x20 [ 860.575154][ C0] node=0 [ 860.580245][ C1] [ 860.583161][ C0] flags=0x0 nice=0 [ 860.588855][ C1] do_softirq_own_stack+0x60/0x80 [ 860.595149][ C0] active=3/256 refcnt=4 [ 860.600317][ C1] __irq_exit_rcu+0x128/0x150 [ 860.603656][ C0] pending: [ 860.608133][ C1] irq_exit_rcu+0x9/0x10 [ 860.612171][ C0] wg_packet_encrypt_worker [ 860.617353][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 860.621909][ C0] , wg_packet_tx_worker [ 860.626467][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 860.628764][ C0] , wg_packet_decrypt_worker [ 860.633237][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 860.638480][ C0] [ 860.643216][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 860.647965][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 860.650934][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 860.650943][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 860.650955][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 860.655435][ C0] pwq 2: [ 860.658347][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 860.663358][ C0] cpus=1 [ 860.666265][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 860.669170][ C0] node=0 [ 860.672950][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 860.677940][ C0] flags=0x0 nice=0 [ 860.682246][ C1] ? kernel_init_free_pages+0x87/0x100 [ 860.686884][ C0] active=1/256 refcnt=2 [ 860.690227][ C1] get_page_from_freelist+0x6b5/0xa90 [ 860.694440][ C0] pending: [ 860.698925][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 860.704716][ C0] wg_packet_encrypt_worker [ 860.708844][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 860.714798][ C0] [ 860.719375][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 860.724645][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 860.726928][ C1] pipe_write+0x580/0x1930 [ 860.746507][ C0] pwq 2: [ 860.751756][ C1] ? pipe_read+0x1030/0x1030 [ 860.757801][ C0] cpus=1 [ 860.766373][ C1] ? fsnotify_perm+0x67/0x4e0 [ 860.774311][ C0] node=0 [ 860.777311][ C1] ? io_schedule+0x120/0x120 [ 860.785337][ C0] flags=0x0 nice=0 [ 860.788249][ C1] ? security_file_permission+0xa8/0xc0 [ 860.796188][ C0] active=3/256 refcnt=4 [ 860.799099][ C1] ? iov_iter_init+0x3f/0x120 [ 860.807041][ C0] pending: [ 860.810826][ C1] vfs_write+0xc02/0xf20 [ 860.816252][ C0] wg_packet_decrypt_worker [ 860.820464][ C1] ? kernel_write+0x3c0/0x3c0 [ 860.825802][ C0] , wg_packet_encrypt_worker [ 860.829163][ C1] ? __fget_files+0x310/0x370 [ 860.834511][ C0] , wg_packet_tx_worker [ 860.838986][ C1] ? __fdget_pos+0x1fa/0x300 [ 860.844503][ C0] [ 860.846812][ C1] ? ksys_write+0x77/0x2b0 [ 860.852771][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 860.858006][ C1] ksys_write+0x186/0x2b0 [ 860.862479][ C0] pwq 2: [ 860.865471][ C1] ? __ia32_sys_read+0x90/0x90 [ 860.870032][ C0] cpus=1 [ 860.872947][ C1] __x64_sys_write+0x7b/0x90 [ 860.877585][ C0] node=0 [ 860.880501][ C1] do_syscall_64+0x31/0x70 [ 860.885051][ C0] flags=0x0 nice=0 [ 860.888847][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 860.894355][ C0] active=2/256 refcnt=3 [ 860.898565][ C1] RIP: 0033:0x7f9380d05049 [ 860.903202][ C0] pending: [ 860.906557][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 860.910766][ C0] wg_packet_encrypt_worker [ 860.915247][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 [ 860.919894][ C0] , wg_packet_tx_worker [ 860.924449][ C1] ORIG_RAX: 0000000000000001 [ 860.929182][ C0] [ 860.933484][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 860.938059][ C0] workqueue wg-kex-wg0: flags=0x24 [ 860.940339][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 860.940345][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 860.940357][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 860.944737][ C0] pwq 2: [ 860.950180][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 860.954560][ C0] cpus=1 [ 860.957554][ C1] ---[ end trace 6a7df80a272a8536 ]--- [ 860.962291][ C0] node=0 flags=0x0 nice=0 [ 860.965283][ C1] ------------[ cut here ]------------ [ 860.969784][ C0] active=1/256 refcnt=2 [ 860.972718][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 860.972860][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 860.977218][ C0] pending: [ 860.980996][ C1] Modules linked in: [ 860.986887][ C0] wg_packet_handshake_receive_worker [ 860.991092][ C1] [ 860.995481][ C0] [ 860.998831][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 861.018453][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 861.022893][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 861.022905][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 861.022921][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 861.028951][ C0] pwq 2: [ 861.033079][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 861.037816][ C0] cpus=1 [ 861.040112][ C1] [ 861.048057][ C0] node=0 [ 861.053139][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 861.061079][ C0] flags=0x0 nice=0 [ 861.069024][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 861.076979][ C0] active=2/256 refcnt=3 [ 861.079975][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: 0000000000000003 [ 861.087913][ C0] pending: [ 861.090828][ C1] R10: fffff5200002c0ad R11: 0000000000000004 R12: ffff88810db870c8 [ 861.096262][ C0] wg_packet_encrypt_worker [ 861.100642][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 861.100660][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 861.106101][ C0] , wg_packet_tx_worker [ 861.110311][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 861.116171][ C0] [ 861.125773][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 861.129144][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 861.132977][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 861.132983][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 861.132992][ C1] Call Trace: [ 861.138332][ C0] pwq 2: [ 861.140651][ C1] [ 861.142960][ C0] cpus=1 [ 861.154736][ C1] aiptek_irq+0x19b7/0x25f0 [ 861.159975][ C0] node=0 [ 861.170010][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 861.175517][ C0] flags=0x0 nice=0 [ 861.195097][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 861.198103][ C0] active=2/256 refcnt=3 [ 861.204137][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 861.207219][ C0] pending: [ 861.209526][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 861.212432][ C0] wg_packet_encrypt_worker [ 861.220388][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 861.224158][ C0] , wg_packet_tx_worker [ 861.232102][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 861.236305][ C0] [ 861.244254][ C1] dummy_timer+0x798/0x42a0 [ 861.247620][ C0] workqueue wg-kex-wg2: flags=0x24 [ 861.255545][ C1] ? enqueue_timer+0x1d1/0x470 [ 861.255560][ C1] ? __mod_timer+0x995/0xde0 [ 861.260035][ C0] pwq 2: [ 861.267974][ C1] ? mod_timer_pending+0x30/0x30 [ 861.276870][ C0] cpus=1 [ 861.281010][ C1] ? __kasan_check_write+0x14/0x20 [ 861.287556][ C0] node=0 [ 861.289862][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 861.297810][ C0] flags=0x0 nice=0 [ 861.303073][ C1] ? dummy_free_streams+0x360/0x360 [ 861.311016][ C0] active=1/256 refcnt=2 [ 861.318963][ C1] ? __kasan_check_write+0x14/0x20 [ 861.322213][ C0] pending: [ 861.325220][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 861.328040][ C0] wg_packet_handshake_receive_worker [ 861.330950][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 861.335420][ C0] [ 861.338346][ C1] ? dummy_free_streams+0x360/0x360 [ 861.344227][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 861.347996][ C1] call_timer_fn+0x35/0x280 [ 861.353076][ C0] pwq 2: [ 861.357302][ C1] ? dummy_free_streams+0x360/0x360 [ 861.362290][ C0] cpus=1 [ 861.365644][ C1] expire_timers+0x21f/0x3b0 [ 861.370977][ C0] node=0 [ 861.375455][ C1] __run_timers+0x548/0x680 [ 861.380620][ C0] flags=0x0 nice=0 [ 861.384845][ C1] ? enqueue_timer+0x470/0x470 [ 861.389654][ C0] active=2/256 refcnt=3 [ 861.391957][ C1] run_timer_softirq+0x69/0xf0 [ 861.396420][ C0] pending: [ 861.401506][ C1] __do_softirq+0x27e/0x598 [ 861.406255][ C0] wg_packet_decrypt_worker [ 861.410821][ C1] asm_call_irq_on_stack+0xf/0x20 [ 861.413823][ C0] , wg_packet_encrypt_worker [ 861.418725][ C1] [ 861.421634][ C0] [ 861.426739][ C1] do_softirq_own_stack+0x60/0x80 [ 861.429666][ C0] workqueue wg-kex-wg0: flags=0x24 [ 861.434812][ C1] __irq_exit_rcu+0x128/0x150 [ 861.438583][ C0] pwq 2: [ 861.443768][ C1] irq_exit_rcu+0x9/0x10 [ 861.447977][ C0] cpus=1 [ 861.453090][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 861.456432][ C0] node=0 [ 861.461532][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 861.466863][ C0] flags=0x0 nice=0 [ 861.472383][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 861.474678][ C0] active=1/256 refcnt=2 [ 861.479847][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 861.485097][ C0] pending: [ 861.489594][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 861.492597][ C0] wg_packet_handshake_receive_worker [ 861.497753][ C1] [ 861.500660][ C0] [ 861.505224][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 861.508159][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 861.512603][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 861.512611][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 861.512622][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 861.516396][ C0] pwq 2: [ 861.521130][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 861.525351][ C0] cpus=1 [ 861.530100][ C1] ? kernel_init_free_pages+0x87/0x100 [ 861.533433][ C0] node=0 [ 861.537909][ C1] get_page_from_freelist+0x6b5/0xa90 [ 861.542387][ C0] flags=0x0 nice=0 [ 861.547387][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 861.551943][ C0] active=2/256 refcnt=3 [ 861.554852][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 861.557144][ C0] pending: [ 861.562142][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 861.567214][ C0] wg_packet_encrypt_worker [ 861.571860][ C1] pipe_write+0x580/0x1930 [ 861.574852][ C0] , wg_packet_tx_worker [ 861.579062][ C1] ? pipe_read+0x1030/0x1030 [ 861.581968][ C0] [ 861.587575][ C1] ? fsnotify_perm+0x67/0x4e0 [ 861.590497][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 861.596429][ C1] ? io_schedule+0x120/0x120 [ 861.600209][ C0] pwq 2: [ 861.605463][ C1] ? security_file_permission+0xa8/0xc0 [ 861.609669][ C0] cpus=1 [ 861.629262][ C1] ? iov_iter_init+0x3f/0x120 [ 861.632598][ C0] node=0 [ 861.638725][ C1] vfs_write+0xc02/0xf20 [ 861.644057][ C0] flags=0x0 nice=0 [ 861.646363][ C1] ? kernel_write+0x3c0/0x3c0 [ 861.648660][ C0] active=3/256 refcnt=4 [ 861.656718][ C1] ? __fget_files+0x310/0x370 [ 861.661957][ C0] pending: [ 861.669904][ C1] ? __fdget_pos+0x1fa/0x300 [ 861.677846][ C0] wg_packet_encrypt_worker [ 861.685956][ C1] ? ksys_write+0x77/0x2b0 [ 861.688956][ C0] , wg_packet_tx_worker [ 861.696914][ C1] ksys_write+0x186/0x2b0 [ 861.699846][ C0] , wg_packet_decrypt_worker [ 861.705291][ C1] ? __ia32_sys_read+0x90/0x90 [ 861.708283][ C0] [ 861.713627][ C1] __x64_sys_write+0x7b/0x90 [ 861.717423][ C0] workqueue wg-kex-wg2: flags=0x24 [ 861.722742][ C1] do_syscall_64+0x31/0x70 [ 861.722758][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 861.726963][ C0] pwq 2: [ 861.732477][ C1] RIP: 0033:0x7f9380d05049 [ 861.735817][ C0] cpus=1 [ 861.741766][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 861.746229][ C0] node=0 [ 861.750615][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 [ 861.754735][ C0] flags=0x0 nice=0 [ 861.759290][ C1] ORIG_RAX: 0000000000000001 [ 861.761590][ C0] active=1/256 refcnt=2 [ 861.766236][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 861.771483][ C0] pending: [ 861.776045][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 861.779042][ C0] wg_packet_handshake_receive_worker [ 861.784550][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 861.787457][ C0] [ 861.792102][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 861.795024][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 861.799224][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 861.803025][ C0] pwq 2: [ 861.807775][ C1] ---[ end trace 6a7df80a272a8537 ]--- [ 861.811998][ C0] cpus=1 [ 861.816718][ C1] ------------[ cut here ]------------ [ 861.819984][ C0] node=0 [ 861.824542][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 861.829004][ C0] flags=0x0 nice=0 active=3/256 refcnt=4 [ 861.833525][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 861.837525][ C0] pending: [ 861.841837][ C1] Modules linked in: [ 861.846410][ C0] wg_packet_decrypt_worker [ 861.851128][ C1] [ 861.851149][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 861.853454][ C0] , wg_packet_encrypt_worker [ 861.858009][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 861.863090][ C0] , wg_packet_tx_worker [ 861.867488][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 861.873348][ C0] [ 861.876353][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 861.880767][ C0] pool 0: [ 861.883659][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 861.903232][ C0] cpus=0 [ 861.906139][ C1] [ 861.912172][ C0] node=0 [ 861.915951][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 861.920592][ C0] flags=0x0 nice=0 [ 861.924805][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 861.932745][ C0] hung=2s workers=19 [ 861.936088][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: 0000000000000003 [ 861.944026][ C0] idle: 26151 [ 861.949368][ C1] R10: fffff5200002c05d R11: 0000000000000004 R12: ffff88810db870c8 [ 861.957306][ C0] 26148 [ 861.959609][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 861.967547][ C0] 26150 [ 861.972976][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 861.980914][ C0] 26147 [ 861.983913][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 861.989335][ C0] 26146 [ 861.992239][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 861.992251][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 861.997798][ C0] 26145 [ 862.000716][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 862.006574][ C0] 26144 [ 862.012264][ C1] Call Trace: [ 862.021857][ C0] 2353 [ 862.025198][ C1] [ 862.029060][ C0] 2516 [ 862.033537][ C1] aiptek_irq+0x19b7/0x25f0 [ 862.035825][ C0] 2515 [ 862.047508][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 862.052055][ C0] 434 [ 862.062106][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 862.066222][ C0] 392 [ 862.071738][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 862.074051][ C0] 1257 [ 862.093646][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 862.096548][ C0] 1258 [ 862.102584][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 862.105486][ C0] 394 [ 862.107788][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 862.110691][ C0] 26153 [ 862.118637][ C1] dummy_timer+0x798/0x42a0 [ 862.122404][ C0] 26152 [ 862.130351][ C1] ? enqueue_timer+0x1d1/0x470 [ 862.134290][ C0] [ 862.142241][ C1] ? __mod_timer+0x995/0xde0 [ 862.145597][ C0] pool 2: [ 862.153513][ C1] ? mod_timer_pending+0x30/0x30 [ 862.156332][ C0] cpus=1 [ 862.164277][ C1] ? __kasan_check_write+0x14/0x20 [ 862.167089][ C0] node=0 [ 862.175994][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 862.178807][ C0] flags=0x0 nice=0 [ 862.185366][ C1] ? dummy_free_streams+0x360/0x360 [ 862.188181][ C0] hung=164s workers=14 [ 862.196123][ C1] ? __kasan_check_write+0x14/0x20 [ 862.204071][ C0] idle: 25429 [ 862.206894][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 862.214845][ C0] 624 [ 862.217671][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 862.220924][ C0] 11652 [ 862.223663][ C1] ? dummy_free_streams+0x360/0x360 [ 862.226475][ C0] 25430 [ 862.229213][ C1] call_timer_fn+0x35/0x280 [ 862.233675][ C0] 25431 [ 862.236414][ C1] ? dummy_free_streams+0x360/0x360 [ 862.242206][ C0] 25441 [ 862.244856][ C1] expire_timers+0x21f/0x3b0 [ 862.249926][ C0] 11651 [ 862.252578][ C1] __run_timers+0x548/0x680 [ 862.257561][ C0] 626 [ 862.260299][ C1] ? enqueue_timer+0x470/0x470 [ 862.265629][ C0] 2274 [ 862.268380][ C1] run_timer_softirq+0x69/0xf0 [ 862.273536][ C0] 2276 [ 862.276189][ C1] __do_softirq+0x27e/0x598 [ 862.280998][ C0] 2584 [ 862.283823][ C1] asm_call_irq_on_stack+0xf/0x20 [ 862.288285][ C0] 25446 [ 862.291102][ C1] [ 862.295829][ C0] 25439 [ 862.298136][ C1] do_softirq_own_stack+0x60/0x80 [ 862.302683][ C0] [ 862.305596][ C1] __irq_exit_rcu+0x128/0x150 [ 862.449386][ C1] irq_exit_rcu+0x9/0x10 [ 862.453605][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 862.459214][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 862.465170][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 862.470429][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 862.490007][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 862.496050][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 862.503998][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 862.511977][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 862.519961][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 862.527921][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 862.535885][ C1] ? kernel_init_free_pages+0x87/0x100 [ 862.541341][ C1] get_page_from_freelist+0x6b5/0xa90 [ 862.546689][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 862.552036][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 862.557555][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 862.563521][ C1] pipe_write+0x580/0x1930 [ 862.567914][ C1] ? pipe_read+0x1030/0x1030 [ 862.572478][ C1] ? fsnotify_perm+0x67/0x4e0 [ 862.577129][ C1] ? io_schedule+0x120/0x120 [ 862.581692][ C1] ? security_file_permission+0xa8/0xc0 [ 862.587216][ C1] ? iov_iter_init+0x3f/0x120 [ 862.591867][ C1] vfs_write+0xc02/0xf20 [ 862.596088][ C1] ? kernel_write+0x3c0/0x3c0 [ 862.600737][ C1] ? __fget_files+0x310/0x370 [ 862.605386][ C1] ? __fdget_pos+0x1fa/0x300 [ 862.609949][ C1] ? ksys_write+0x77/0x2b0 [ 862.614336][ C1] ksys_write+0x186/0x2b0 [ 862.618642][ C1] ? __ia32_sys_read+0x90/0x90 [ 862.623379][ C1] __x64_sys_write+0x7b/0x90 [ 862.627943][ C1] do_syscall_64+0x31/0x70 [ 862.632333][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 862.638201][ C1] RIP: 0033:0x7f9380d05049 [ 862.642593][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 862.662170][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 862.670647][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 862.678595][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 862.686540][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 862.694486][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 862.702452][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 862.710407][ C1] ---[ end trace 6a7df80a272a8538 ]--- [ 862.715984][ C1] ------------[ cut here ]------------ [ 862.721428][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 862.727440][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 862.737052][ C1] Modules linked in: [ 862.740950][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 862.752649][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 862.762718][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 862.768266][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 862.787870][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 862.793940][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 862.801908][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 862.809878][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: fffff5200002c035 [ 862.817851][ C1] R10: fffff5200002c035 R11: 0000000000000000 R12: ffff88810db870c8 [ 862.825822][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 862.833796][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 862.842724][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 862.849301][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 862.857276][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 862.865243][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 862.873208][ C1] Call Trace: [ 862.876478][ C1] [ 862.879326][ C1] aiptek_irq+0x19b7/0x25f0 [ 862.883824][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 862.889618][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 862.894720][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 862.899737][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 862.905099][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 862.910285][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 862.915126][ C1] dummy_timer+0x798/0x42a0 [ 862.919622][ C1] ? enqueue_timer+0x1d1/0x470 [ 862.924377][ C1] ? __mod_timer+0x995/0xde0 [ 862.928954][ C1] ? mod_timer_pending+0x30/0x30 [ 862.933880][ C1] ? __kasan_check_write+0x14/0x20 [ 862.938982][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 862.944173][ C1] ? dummy_free_streams+0x360/0x360 [ 862.949359][ C1] ? __kasan_check_write+0x14/0x20 [ 862.954460][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 862.959560][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 862.965182][ C1] ? dummy_free_streams+0x360/0x360 [ 862.970374][ C1] call_timer_fn+0x35/0x280 [ 862.974886][ C1] ? dummy_free_streams+0x360/0x360 [ 862.980075][ C1] expire_timers+0x21f/0x3b0 [ 862.984654][ C1] __run_timers+0x548/0x680 [ 862.989148][ C1] ? enqueue_timer+0x470/0x470 [ 862.993909][ C1] run_timer_softirq+0x69/0xf0 [ 862.998662][ C1] __do_softirq+0x27e/0x598 [ 863.003155][ C1] asm_call_irq_on_stack+0xf/0x20 [ 863.008159][ C1] [ 863.011091][ C1] do_softirq_own_stack+0x60/0x80 [ 863.016107][ C1] __irq_exit_rcu+0x128/0x150 [ 863.020774][ C1] irq_exit_rcu+0x9/0x10 [ 863.025008][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 863.030631][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 863.036629][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 863.041905][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 863.061502][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 863.067565][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 863.075531][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 863.083504][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 863.091476][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 863.099443][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 863.107430][ C1] ? kernel_init_free_pages+0x87/0x100 [ 863.112884][ C1] get_page_from_freelist+0x6b5/0xa90 [ 863.118252][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 863.123619][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 863.129157][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 863.135137][ C1] pipe_write+0x580/0x1930 [ 863.139551][ C1] ? pipe_read+0x1030/0x1030 [ 863.144129][ C1] ? fsnotify_perm+0x67/0x4e0 [ 863.148798][ C1] ? io_schedule+0x120/0x120 [ 863.153373][ C1] ? security_file_permission+0xa8/0xc0 [ 863.158901][ C1] ? iov_iter_init+0x3f/0x120 [ 863.163554][ C1] vfs_write+0xc02/0xf20 [ 863.167772][ C1] ? kernel_write+0x3c0/0x3c0 [ 863.172425][ C1] ? __fget_files+0x310/0x370 [ 863.177094][ C1] ? __fdget_pos+0x1fa/0x300 [ 863.181656][ C1] ? ksys_write+0x77/0x2b0 [ 863.186050][ C1] ksys_write+0x186/0x2b0 [ 863.190356][ C1] ? __ia32_sys_read+0x90/0x90 [ 863.195110][ C1] __x64_sys_write+0x7b/0x90 [ 863.199679][ C1] do_syscall_64+0x31/0x70 [ 863.204072][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 863.209940][ C1] RIP: 0033:0x7f9380d05049 [ 863.214333][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 863.233911][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 863.242316][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 863.250265][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 863.258321][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 863.266278][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 863.274246][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 863.282198][ C1] ---[ end trace 6a7df80a272a8539 ]--- [ 863.287729][ C1] ------------[ cut here ]------------ [ 863.293181][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 863.299200][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 863.308810][ C1] Modules linked in: [ 863.312705][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 863.324399][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 863.334463][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 863.340012][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 863.359613][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 863.365680][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 863.373648][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 863.381619][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 863.389586][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 863.397553][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 863.405520][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 863.414442][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 863.421020][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 863.428988][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 863.436946][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 863.444929][ C1] Call Trace: [ 863.448186][ C1] [ 863.451020][ C1] aiptek_irq+0x19b7/0x25f0 [ 863.455499][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 863.461279][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 863.466364][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 863.471381][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 863.476736][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 863.481907][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 863.486733][ C1] dummy_timer+0x798/0x42a0 [ 863.491212][ C1] ? enqueue_timer+0x1d1/0x470 [ 863.495956][ C1] ? __mod_timer+0x995/0xde0 [ 863.500524][ C1] ? mod_timer_pending+0x30/0x30 [ 863.505434][ C1] ? __kasan_check_write+0x14/0x20 [ 863.510526][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 863.515696][ C1] ? dummy_free_streams+0x360/0x360 [ 863.520869][ C1] ? __kasan_check_write+0x14/0x20 [ 863.525955][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 863.531038][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 863.536557][ C1] ? dummy_free_streams+0x360/0x360 [ 863.541728][ C1] call_timer_fn+0x35/0x280 [ 863.546212][ C1] ? dummy_free_streams+0x360/0x360 [ 863.551383][ C1] expire_timers+0x21f/0x3b0 [ 863.555947][ C1] __run_timers+0x548/0x680 [ 863.560426][ C1] ? enqueue_timer+0x470/0x470 [ 863.565165][ C1] run_timer_softirq+0x69/0xf0 [ 863.569905][ C1] __do_softirq+0x27e/0x598 [ 863.574385][ C1] asm_call_irq_on_stack+0xf/0x20 [ 863.579379][ C1] [ 863.582296][ C1] do_softirq_own_stack+0x60/0x80 [ 863.587306][ C1] __irq_exit_rcu+0x128/0x150 [ 863.591957][ C1] irq_exit_rcu+0x9/0x10 [ 863.596178][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 863.601784][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 863.607740][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 863.612998][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 863.632578][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 863.638621][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 863.646660][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 863.654607][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 863.662553][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 863.670503][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 863.678458][ C1] ? kernel_init_free_pages+0x87/0x100 [ 863.683905][ C1] get_page_from_freelist+0x6b5/0xa90 [ 863.689253][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 863.694599][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 863.700130][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 863.706088][ C1] pipe_write+0x580/0x1930 [ 863.710496][ C1] ? pipe_read+0x1030/0x1030 [ 863.715060][ C1] ? fsnotify_perm+0x67/0x4e0 [ 863.719713][ C1] ? io_schedule+0x120/0x120 [ 863.724279][ C1] ? security_file_permission+0xa8/0xc0 [ 863.729800][ C1] ? iov_iter_init+0x3f/0x120 [ 863.734453][ C1] vfs_write+0xc02/0xf20 [ 863.738675][ C1] ? kernel_write+0x3c0/0x3c0 [ 863.743446][ C1] ? __fget_files+0x310/0x370 [ 863.748098][ C1] ? __fdget_pos+0x1fa/0x300 [ 863.752662][ C1] ? ksys_write+0x77/0x2b0 [ 863.757053][ C1] ksys_write+0x186/0x2b0 [ 863.761359][ C1] ? __ia32_sys_read+0x90/0x90 [ 863.766098][ C1] __x64_sys_write+0x7b/0x90 [ 863.770665][ C1] do_syscall_64+0x31/0x70 [ 863.775070][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 863.780948][ C1] RIP: 0033:0x7f9380d05049 [ 863.785345][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 863.804939][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 863.813335][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 863.821284][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 863.829241][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 863.837190][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 863.845152][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 863.853102][ C1] ---[ end trace 6a7df80a272a853a ]--- [ 863.858623][ C1] ------------[ cut here ]------------ [ 863.864077][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 863.870096][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 863.879713][ C1] Modules linked in: [ 863.883609][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 863.895311][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 863.905381][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 863.910925][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 863.930531][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 863.936689][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 863.944659][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 863.952629][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 863.960632][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 863.968604][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 863.976574][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 863.985505][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 863.992095][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 864.000072][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 864.008051][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 864.016025][ C1] Call Trace: [ 864.019305][ C1] [ 864.022160][ C1] aiptek_irq+0x19b7/0x25f0 [ 864.026663][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 864.032468][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 864.037586][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 864.042620][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 864.047986][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 864.053185][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 864.058029][ C1] dummy_timer+0x798/0x42a0 [ 864.062531][ C1] ? enqueue_timer+0x1d1/0x470 [ 864.067288][ C1] ? __mod_timer+0x995/0xde0 [ 864.071873][ C1] ? mod_timer_pending+0x30/0x30 [ 864.076800][ C1] ? __kasan_check_write+0x14/0x20 [ 864.081901][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 864.087095][ C1] ? dummy_free_streams+0x360/0x360 [ 864.092282][ C1] ? __kasan_check_write+0x14/0x20 [ 864.097383][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 864.102487][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 864.108034][ C1] ? dummy_free_streams+0x360/0x360 [ 864.113242][ C1] call_timer_fn+0x35/0x280 [ 864.117749][ C1] ? dummy_free_streams+0x360/0x360 [ 864.122951][ C1] expire_timers+0x21f/0x3b0 [ 864.127539][ C1] __run_timers+0x548/0x680 [ 864.132042][ C1] ? enqueue_timer+0x470/0x470 [ 864.136803][ C1] run_timer_softirq+0x69/0xf0 [ 864.141561][ C1] __do_softirq+0x27e/0x598 [ 864.146061][ C1] asm_call_irq_on_stack+0xf/0x20 [ 864.151068][ C1] [ 864.153999][ C1] do_softirq_own_stack+0x60/0x80 [ 864.159014][ C1] __irq_exit_rcu+0x128/0x150 [ 864.163678][ C1] irq_exit_rcu+0x9/0x10 [ 864.167913][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 864.173537][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 864.179511][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 864.184782][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 864.204384][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 864.210454][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 864.218421][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 864.226386][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 864.234352][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 864.242320][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 864.250299][ C1] ? kernel_init_free_pages+0x87/0x100 [ 864.255755][ C1] get_page_from_freelist+0x6b5/0xa90 [ 864.261121][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 864.266490][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 864.272029][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 864.278005][ C1] pipe_write+0x580/0x1930 [ 864.282422][ C1] ? pipe_read+0x1030/0x1030 [ 864.287000][ C1] ? fsnotify_perm+0x67/0x4e0 [ 864.291661][ C1] ? io_schedule+0x120/0x120 [ 864.296224][ C1] ? security_file_permission+0xa8/0xc0 [ 864.301744][ C1] ? iov_iter_init+0x3f/0x120 [ 864.306397][ C1] vfs_write+0xc02/0xf20 [ 864.310617][ C1] ? kernel_write+0x3c0/0x3c0 [ 864.315268][ C1] ? __fget_files+0x310/0x370 [ 864.319917][ C1] ? __fdget_pos+0x1fa/0x300 [ 864.324480][ C1] ? ksys_write+0x77/0x2b0 [ 864.328885][ C1] ksys_write+0x186/0x2b0 [ 864.333209][ C1] ? __ia32_sys_read+0x90/0x90 [ 864.337948][ C1] __x64_sys_write+0x7b/0x90 [ 864.342525][ C1] do_syscall_64+0x31/0x70 [ 864.346924][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 864.352791][ C1] RIP: 0033:0x7f9380d05049 [ 864.357185][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 864.376764][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 864.385157][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 864.393110][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 864.401071][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 864.409018][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 864.416977][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 864.424930][ C1] ---[ end trace 6a7df80a272a853b ]--- [ 864.430452][ C1] ------------[ cut here ]------------ [ 864.435906][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 864.441930][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 864.451544][ C1] Modules linked in: [ 864.455444][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 864.467146][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 864.477295][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 864.482836][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 864.502444][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 864.508508][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 864.516473][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 864.524439][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 864.532402][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 864.540375][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 864.548348][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 864.557267][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 864.563847][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 864.571849][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 864.579811][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 864.587762][ C1] Call Trace: [ 864.591021][ C1] [ 864.593857][ C1] aiptek_irq+0x19b7/0x25f0 [ 864.598340][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 864.604126][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 864.609225][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 864.614233][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 864.619581][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 864.624750][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 864.629576][ C1] dummy_timer+0x798/0x42a0 [ 864.634074][ C1] ? enqueue_timer+0x1d1/0x470 [ 864.638814][ C1] ? __mod_timer+0x995/0xde0 [ 864.643396][ C1] ? mod_timer_pending+0x30/0x30 [ 864.648322][ C1] ? __kasan_check_write+0x14/0x20 [ 864.653418][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 864.658593][ C1] ? dummy_free_streams+0x360/0x360 [ 864.663765][ C1] ? __kasan_check_write+0x14/0x20 [ 864.668853][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 864.673939][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 864.679462][ C1] ? dummy_free_streams+0x360/0x360 [ 864.684634][ C1] call_timer_fn+0x35/0x280 [ 864.689135][ C1] ? dummy_free_streams+0x360/0x360 [ 864.694307][ C1] expire_timers+0x21f/0x3b0 [ 864.698873][ C1] __run_timers+0x548/0x680 [ 864.703352][ C1] ? enqueue_timer+0x470/0x470 [ 864.708094][ C1] run_timer_softirq+0x69/0xf0 [ 864.712837][ C1] __do_softirq+0x27e/0x598 [ 864.717313][ C1] asm_call_irq_on_stack+0xf/0x20 [ 864.722307][ C1] [ 864.725239][ C1] do_softirq_own_stack+0x60/0x80 [ 864.730237][ C1] __irq_exit_rcu+0x128/0x150 [ 864.734888][ C1] irq_exit_rcu+0x9/0x10 [ 864.739106][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 864.744718][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 864.750690][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 864.755955][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 864.775541][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 864.781586][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 864.789535][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 864.797497][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 864.805443][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 864.813405][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 864.821384][ C1] ? kernel_init_free_pages+0x87/0x100 [ 864.826828][ C1] get_page_from_freelist+0x6b5/0xa90 [ 864.832180][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 864.837530][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 864.843053][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 864.849010][ C1] pipe_write+0x580/0x1930 [ 864.853405][ C1] ? pipe_read+0x1030/0x1030 [ 864.857985][ C1] ? fsnotify_perm+0x67/0x4e0 [ 864.862636][ C1] ? io_schedule+0x120/0x120 [ 864.867201][ C1] ? security_file_permission+0xa8/0xc0 [ 864.872746][ C1] ? iov_iter_init+0x3f/0x120 [ 864.877396][ C1] vfs_write+0xc02/0xf20 [ 864.881618][ C1] ? kernel_write+0x3c0/0x3c0 [ 864.886268][ C1] ? __fget_files+0x310/0x370 [ 864.890919][ C1] ? __fdget_pos+0x1fa/0x300 [ 864.895480][ C1] ? ksys_write+0x77/0x2b0 [ 864.899871][ C1] ksys_write+0x186/0x2b0 [ 864.904178][ C1] ? __ia32_sys_read+0x90/0x90 [ 864.908933][ C1] __x64_sys_write+0x7b/0x90 [ 864.913500][ C1] do_syscall_64+0x31/0x70 [ 864.917897][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 864.923769][ C1] RIP: 0033:0x7f9380d05049 [ 864.928163][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 864.947744][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 864.956133][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 864.964081][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 864.972034][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 864.979978][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 864.987939][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 864.995886][ C1] ---[ end trace 6a7df80a272a853c ]--- [ 865.001424][ C1] ------------[ cut here ]------------ [ 865.007026][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 865.013053][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 865.023025][ C1] Modules linked in: [ 865.026927][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 865.038624][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 865.048685][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 865.054223][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 865.073942][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 865.080103][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 865.088245][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 865.096212][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 865.104176][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 865.112141][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 865.120109][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 865.129029][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 865.135606][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 865.143570][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 865.151533][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 865.159497][ C1] Call Trace: [ 865.162764][ C1] [ 865.165609][ C1] aiptek_irq+0x19b7/0x25f0 [ 865.170103][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 865.175899][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 865.180999][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 865.186020][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 865.191620][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 865.196814][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 865.201659][ C1] dummy_timer+0x798/0x42a0 [ 865.206152][ C1] ? enqueue_timer+0x1d1/0x470 [ 865.210908][ C1] ? __mod_timer+0x995/0xde0 [ 865.215503][ C1] ? mod_timer_pending+0x30/0x30 [ 865.220427][ C1] ? __kasan_check_write+0x14/0x20 [ 865.225698][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 865.230913][ C1] ? dummy_free_streams+0x360/0x360 [ 865.236102][ C1] ? __kasan_check_write+0x14/0x20 [ 865.241203][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 865.246304][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 865.251855][ C1] ? dummy_free_streams+0x360/0x360 [ 865.257044][ C1] call_timer_fn+0x35/0x280 [ 865.261550][ C1] ? dummy_free_streams+0x360/0x360 [ 865.266738][ C1] expire_timers+0x21f/0x3b0 [ 865.271318][ C1] __run_timers+0x548/0x680 [ 865.275815][ C1] ? enqueue_timer+0x470/0x470 [ 865.280561][ C1] run_timer_softirq+0x69/0xf0 [ 865.285310][ C1] __do_softirq+0x27e/0x598 [ 865.289806][ C1] asm_call_irq_on_stack+0xf/0x20 [ 865.294812][ C1] [ 865.297743][ C1] do_softirq_own_stack+0x60/0x80 [ 865.302760][ C1] __irq_exit_rcu+0x128/0x150 [ 865.307424][ C1] irq_exit_rcu+0x9/0x10 [ 865.311659][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 865.317282][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 865.323252][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 865.328526][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 865.348127][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 865.354193][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 865.362158][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 865.370127][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 865.378089][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 865.386053][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 865.394029][ C1] ? kernel_init_free_pages+0x87/0x100 [ 865.399482][ C1] get_page_from_freelist+0x6b5/0xa90 [ 865.404850][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 865.410210][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 865.415745][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 865.421746][ C1] pipe_write+0x580/0x1930 [ 865.426143][ C1] ? pipe_read+0x1030/0x1030 [ 865.430711][ C1] ? fsnotify_perm+0x67/0x4e0 [ 865.435379][ C1] ? io_schedule+0x120/0x120 [ 865.439987][ C1] ? security_file_permission+0xa8/0xc0 [ 865.445521][ C1] ? iov_iter_init+0x3f/0x120 [ 865.450175][ C1] vfs_write+0xc02/0xf20 [ 865.454395][ C1] ? kernel_write+0x3c0/0x3c0 [ 865.459046][ C1] ? __fget_files+0x310/0x370 [ 865.463700][ C1] ? __fdget_pos+0x1fa/0x300 [ 865.468263][ C1] ? ksys_write+0x77/0x2b0 [ 865.472662][ C1] ksys_write+0x186/0x2b0 [ 865.476967][ C1] ? __ia32_sys_read+0x90/0x90 [ 865.481794][ C1] __x64_sys_write+0x7b/0x90 [ 865.486371][ C1] do_syscall_64+0x31/0x70 [ 865.490768][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 865.496633][ C1] RIP: 0033:0x7f9380d05049 [ 865.501024][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 865.520779][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 865.529168][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 865.537116][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 865.545063][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 865.553010][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 865.560958][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 865.568905][ C1] ---[ end trace 6a7df80a272a853d ]--- [ 865.574415][ C1] ------------[ cut here ]------------ [ 865.579866][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 865.585879][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 865.595488][ C1] Modules linked in: [ 865.599388][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 865.611082][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 865.621143][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 865.626679][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 865.646279][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 865.652382][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 865.660346][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 865.668309][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 865.676272][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 865.684232][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 865.692193][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 865.701111][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 865.707684][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 865.715648][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 865.723605][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 865.731561][ C1] Call Trace: [ 865.734833][ C1] [ 865.737678][ C1] aiptek_irq+0x19b7/0x25f0 [ 865.742174][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 865.747970][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 865.753069][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 865.758087][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 865.763456][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 865.768640][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 865.773571][ C1] dummy_timer+0x798/0x42a0 [ 865.778067][ C1] ? enqueue_timer+0x1d1/0x470 [ 865.782819][ C1] ? __mod_timer+0x995/0xde0 [ 865.787395][ C1] ? mod_timer_pending+0x30/0x30 [ 865.792320][ C1] ? __kasan_check_write+0x14/0x20 [ 865.797418][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 865.802610][ C1] ? dummy_free_streams+0x360/0x360 [ 865.807791][ C1] ? __kasan_check_write+0x14/0x20 [ 865.812892][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 865.817994][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 865.823531][ C1] ? dummy_free_streams+0x360/0x360 [ 865.828721][ C1] call_timer_fn+0x35/0x280 [ 865.833213][ C1] ? dummy_free_streams+0x360/0x360 [ 865.838407][ C1] expire_timers+0x21f/0x3b0 [ 865.842998][ C1] __run_timers+0x548/0x680 [ 865.847500][ C1] ? enqueue_timer+0x470/0x470 [ 865.852262][ C1] run_timer_softirq+0x69/0xf0 [ 865.857026][ C1] __do_softirq+0x27e/0x598 [ 865.861525][ C1] asm_call_irq_on_stack+0xf/0x20 [ 865.866530][ C1] [ 865.869465][ C1] do_softirq_own_stack+0x60/0x80 [ 865.874480][ C1] __irq_exit_rcu+0x128/0x150 [ 865.879170][ C1] irq_exit_rcu+0x9/0x10 [ 865.883402][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 865.889047][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 865.895017][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 865.900382][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 865.919986][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 865.926051][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 865.934014][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 865.941979][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 865.949942][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 865.957915][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 865.966854][ C1] ? kernel_init_free_pages+0x87/0x100 [ 865.972315][ C1] get_page_from_freelist+0x6b5/0xa90 [ 865.977689][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 865.983052][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 865.988596][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 865.994580][ C1] pipe_write+0x580/0x1930 [ 865.999018][ C1] ? pipe_read+0x1030/0x1030 [ 866.003600][ C1] ? fsnotify_perm+0x67/0x4e0 [ 866.008275][ C1] ? io_schedule+0x120/0x120 [ 866.012861][ C1] ? security_file_permission+0xa8/0xc0 [ 866.018403][ C1] ? iov_iter_init+0x3f/0x120 [ 866.023071][ C1] vfs_write+0xc02/0xf20 [ 866.027314][ C1] ? kernel_write+0x3c0/0x3c0 [ 866.031995][ C1] ? __fget_files+0x310/0x370 [ 866.036669][ C1] ? __fdget_pos+0x1fa/0x300 [ 866.041253][ C1] ? ksys_write+0x77/0x2b0 [ 866.045663][ C1] ksys_write+0x186/0x2b0 [ 866.049992][ C1] ? __ia32_sys_read+0x90/0x90 [ 866.054750][ C1] __x64_sys_write+0x7b/0x90 [ 866.059328][ C1] do_syscall_64+0x31/0x70 [ 866.063733][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 866.069611][ C1] RIP: 0033:0x7f9380d05049 [ 866.074019][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 866.093622][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 866.102059][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 866.110035][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 866.118004][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 866.125972][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 866.133943][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 866.141909][ C1] ---[ end trace 6a7df80a272a853e ]--- [ 866.147436][ C1] ------------[ cut here ]------------ [ 866.152882][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 866.158886][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 866.168480][ C1] Modules linked in: [ 866.172361][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 866.184042][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 866.194081][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 866.199607][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 866.219186][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 866.225228][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 866.233173][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 866.241120][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: fffff5200002c035 [ 866.249067][ C1] R10: fffff5200002c035 R11: 0000000000000000 R12: ffff88810db870c8 [ 866.257027][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 866.264975][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 866.273875][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 866.280431][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 866.288378][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 866.296327][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 866.304268][ C1] Call Trace: [ 866.307524][ C1] [ 866.310356][ C1] aiptek_irq+0x19b7/0x25f0 [ 866.314834][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 866.320614][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 866.325703][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 866.330703][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 866.336048][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 866.341218][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 866.346045][ C1] dummy_timer+0x798/0x42a0 [ 866.350526][ C1] ? enqueue_timer+0x1d1/0x470 [ 866.355266][ C1] ? __mod_timer+0x995/0xde0 [ 866.359834][ C1] ? mod_timer_pending+0x30/0x30 [ 866.364749][ C1] ? __kasan_check_write+0x14/0x20 [ 866.369837][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 866.375010][ C1] ? dummy_free_streams+0x360/0x360 [ 866.380179][ C1] ? __kasan_check_write+0x14/0x20 [ 866.385264][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 866.390346][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 866.395866][ C1] ? dummy_free_streams+0x360/0x360 [ 866.401037][ C1] call_timer_fn+0x35/0x280 [ 866.405513][ C1] ? dummy_free_streams+0x360/0x360 [ 866.410685][ C1] expire_timers+0x21f/0x3b0 [ 866.415250][ C1] __run_timers+0x548/0x680 [ 866.419741][ C1] ? enqueue_timer+0x470/0x470 [ 866.424495][ C1] run_timer_softirq+0x69/0xf0 [ 866.429241][ C1] __do_softirq+0x27e/0x598 [ 866.433728][ C1] asm_call_irq_on_stack+0xf/0x20 [ 866.438739][ C1] [ 866.441668][ C1] do_softirq_own_stack+0x60/0x80 [ 866.446676][ C1] __irq_exit_rcu+0x128/0x150 [ 866.451330][ C1] irq_exit_rcu+0x9/0x10 [ 866.455548][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 866.461157][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 866.467113][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 866.472369][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 866.492091][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 866.498135][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 866.506082][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 866.514029][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 866.521973][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 866.529925][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 866.537896][ C1] ? kernel_init_free_pages+0x87/0x100 [ 866.543328][ C1] get_page_from_freelist+0x6b5/0xa90 [ 866.548676][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 866.554021][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 866.559550][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 866.565589][ C1] pipe_write+0x580/0x1930 [ 866.569984][ C1] ? pipe_read+0x1030/0x1030 [ 866.574547][ C1] ? fsnotify_perm+0x67/0x4e0 [ 866.579198][ C1] ? io_schedule+0x120/0x120 [ 866.583762][ C1] ? security_file_permission+0xa8/0xc0 [ 866.589283][ C1] ? iov_iter_init+0x3f/0x120 [ 866.593933][ C1] vfs_write+0xc02/0xf20 [ 866.598152][ C1] ? kernel_write+0x3c0/0x3c0 [ 866.602802][ C1] ? __fget_files+0x310/0x370 [ 866.607455][ C1] ? __fdget_pos+0x1fa/0x300 [ 866.612019][ C1] ? ksys_write+0x77/0x2b0 [ 866.616411][ C1] ksys_write+0x186/0x2b0 [ 866.620718][ C1] ? __ia32_sys_read+0x90/0x90 [ 866.625456][ C1] __x64_sys_write+0x7b/0x90 [ 866.630033][ C1] do_syscall_64+0x31/0x70 [ 866.634439][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 866.640303][ C1] RIP: 0033:0x7f9380d05049 [ 866.644695][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 866.664270][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 866.672660][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 866.680610][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 866.688556][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 866.696502][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 866.704447][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 866.712393][ C1] ---[ end trace 6a7df80a272a853f ]--- [ 866.718004][ C1] ------------[ cut here ]------------ [ 866.723453][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 866.729469][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 866.739076][ C1] Modules linked in: [ 866.743000][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 866.754698][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 866.764753][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 866.770315][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 866.789915][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 866.795989][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 866.803986][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 866.811959][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 866.819926][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 866.827921][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 866.835891][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 866.844813][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 866.851387][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 866.859352][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 866.867317][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 866.875274][ C1] Call Trace: [ 866.878545][ C1] [ 866.881394][ C1] aiptek_irq+0x19b7/0x25f0 [ 866.885883][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 866.891715][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 866.896809][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 866.901823][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 866.907190][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 866.912375][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 866.917217][ C1] dummy_timer+0x798/0x42a0 [ 866.921716][ C1] ? enqueue_timer+0x1d1/0x470 [ 866.926472][ C1] ? __mod_timer+0x995/0xde0 [ 866.931056][ C1] ? mod_timer_pending+0x30/0x30 [ 866.935993][ C1] ? __kasan_check_write+0x14/0x20 [ 866.941098][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 866.946295][ C1] ? dummy_free_streams+0x360/0x360 [ 866.951482][ C1] ? __kasan_check_write+0x14/0x20 [ 866.956579][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 866.961678][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 866.967238][ C1] ? dummy_free_streams+0x360/0x360 [ 866.972429][ C1] call_timer_fn+0x35/0x280 [ 866.976916][ C1] ? dummy_free_streams+0x360/0x360 [ 866.982099][ C1] expire_timers+0x21f/0x3b0 [ 866.986680][ C1] __run_timers+0x548/0x680 [ 866.991170][ C1] ? enqueue_timer+0x470/0x470 [ 866.995927][ C1] run_timer_softirq+0x69/0xf0 [ 867.000683][ C1] __do_softirq+0x27e/0x598 [ 867.005290][ C1] asm_call_irq_on_stack+0xf/0x20 [ 867.010294][ C1] [ 867.013224][ C1] do_softirq_own_stack+0x60/0x80 [ 867.018238][ C1] __irq_exit_rcu+0x128/0x150 [ 867.022903][ C1] irq_exit_rcu+0x9/0x10 [ 867.027132][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 867.032759][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 867.038731][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 867.044001][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 867.063600][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 867.069661][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 867.077709][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 867.085673][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 867.093635][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 867.101600][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 867.109571][ C1] ? kernel_init_free_pages+0x87/0x100 [ 867.115027][ C1] get_page_from_freelist+0x6b5/0xa90 [ 867.120395][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 867.125760][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 867.131301][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 867.137279][ C1] pipe_write+0x580/0x1930 [ 867.141692][ C1] ? pipe_read+0x1030/0x1030 [ 867.146274][ C1] ? fsnotify_perm+0x67/0x4e0 [ 867.150954][ C1] ? io_schedule+0x120/0x120 [ 867.155538][ C1] ? security_file_permission+0xa8/0xc0 [ 867.161076][ C1] ? iov_iter_init+0x3f/0x120 [ 867.165748][ C1] vfs_write+0xc02/0xf20 [ 867.169983][ C1] ? kernel_write+0x3c0/0x3c0 [ 867.174650][ C1] ? __fget_files+0x310/0x370 [ 867.179321][ C1] ? __fdget_pos+0x1fa/0x300 [ 867.183907][ C1] ? ksys_write+0x77/0x2b0 [ 867.188314][ C1] ksys_write+0x186/0x2b0 [ 867.192638][ C1] ? __ia32_sys_read+0x90/0x90 [ 867.197396][ C1] __x64_sys_write+0x7b/0x90 [ 867.201978][ C1] do_syscall_64+0x31/0x70 [ 867.206384][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 867.212265][ C1] RIP: 0033:0x7f9380d05049 [ 867.216667][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 867.236260][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 867.244669][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 867.252629][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 867.260595][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 867.268553][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 867.276512][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 867.284476][ C1] ---[ end trace 6a7df80a272a8540 ]--- [ 867.289985][ C1] ------------[ cut here ]------------ [ 867.295435][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 867.301414][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 867.311008][ C1] Modules linked in: [ 867.314887][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 867.326563][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 867.336601][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 867.342122][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 867.361718][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 867.367770][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 867.375725][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 867.383671][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 867.391617][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 867.399562][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 867.407509][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 867.416410][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 867.422967][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 867.430914][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 867.438864][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 867.446807][ C1] Call Trace: [ 867.450068][ C1] [ 867.452901][ C1] aiptek_irq+0x19b7/0x25f0 [ 867.457378][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 867.463155][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 867.468241][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 867.473241][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 867.478586][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 867.483768][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 867.488595][ C1] dummy_timer+0x798/0x42a0 [ 867.493087][ C1] ? enqueue_timer+0x1d1/0x470 [ 867.497825][ C1] ? __mod_timer+0x995/0xde0 [ 867.502397][ C1] ? mod_timer_pending+0x30/0x30 [ 867.507309][ C1] ? __kasan_check_write+0x14/0x20 [ 867.512394][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 867.517570][ C1] ? dummy_free_streams+0x360/0x360 [ 867.522745][ C1] ? __kasan_check_write+0x14/0x20 [ 867.527833][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 867.532917][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 867.538437][ C1] ? dummy_free_streams+0x360/0x360 [ 867.543608][ C1] call_timer_fn+0x35/0x280 [ 867.548086][ C1] ? dummy_free_streams+0x360/0x360 [ 867.553256][ C1] expire_timers+0x21f/0x3b0 [ 867.557826][ C1] __run_timers+0x548/0x680 [ 867.562306][ C1] ? enqueue_timer+0x470/0x470 [ 867.567045][ C1] run_timer_softirq+0x69/0xf0 [ 867.571795][ C1] __do_softirq+0x27e/0x598 [ 867.576274][ C1] asm_call_irq_on_stack+0xf/0x20 [ 867.581267][ C1] [ 867.584182][ C1] do_softirq_own_stack+0x60/0x80 [ 867.589180][ C1] __irq_exit_rcu+0x128/0x150 [ 867.593832][ C1] irq_exit_rcu+0x9/0x10 [ 867.598048][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 867.603657][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 867.609611][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 867.614878][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 867.634455][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 867.640505][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 867.648470][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 867.656419][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 867.664365][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 867.672312][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 867.680268][ C1] ? kernel_init_free_pages+0x87/0x100 [ 867.685720][ C1] get_page_from_freelist+0x6b5/0xa90 [ 867.691068][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 867.696413][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 867.701955][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 867.707912][ C1] pipe_write+0x580/0x1930 [ 867.712307][ C1] ? pipe_read+0x1030/0x1030 [ 867.716870][ C1] ? fsnotify_perm+0x67/0x4e0 [ 867.721524][ C1] ? io_schedule+0x120/0x120 [ 867.726085][ C1] ? security_file_permission+0xa8/0xc0 [ 867.731602][ C1] ? iov_iter_init+0x3f/0x120 [ 867.736261][ C1] vfs_write+0xc02/0xf20 [ 867.740493][ C1] ? kernel_write+0x3c0/0x3c0 [ 867.745143][ C1] ? __fget_files+0x310/0x370 [ 867.749793][ C1] ? __fdget_pos+0x1fa/0x300 [ 867.754360][ C1] ? ksys_write+0x77/0x2b0 [ 867.758768][ C1] ksys_write+0x186/0x2b0 [ 867.763072][ C1] ? __ia32_sys_read+0x90/0x90 [ 867.767814][ C1] __x64_sys_write+0x7b/0x90 [ 867.772379][ C1] do_syscall_64+0x31/0x70 [ 867.776783][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 867.782646][ C1] RIP: 0033:0x7f9380d05049 [ 867.787036][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 867.806615][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 867.815005][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 867.822978][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 867.830931][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 867.838881][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 867.846837][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 867.854799][ C1] ---[ end trace 6a7df80a272a8541 ]--- [ 867.860309][ C1] ------------[ cut here ]------------ [ 867.865761][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 867.871781][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 867.881389][ C1] Modules linked in: [ 867.885287][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 867.896978][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 867.907030][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 867.912564][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 867.932161][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 867.938224][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 867.946190][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 867.954152][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 867.962114][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 867.970076][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 867.978039][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 867.986961][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 867.993530][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 868.001493][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 868.009449][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 868.017399][ C1] Call Trace: [ 868.020666][ C1] [ 868.023517][ C1] aiptek_irq+0x19b7/0x25f0 [ 868.028013][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 868.033805][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 868.038906][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 868.043925][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 868.049288][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 868.054475][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 868.059336][ C1] dummy_timer+0x798/0x42a0 [ 868.063828][ C1] ? enqueue_timer+0x1d1/0x470 [ 868.068581][ C1] ? __mod_timer+0x995/0xde0 [ 868.073162][ C1] ? mod_timer_pending+0x30/0x30 [ 868.078252][ C1] ? __kasan_check_write+0x14/0x20 [ 868.083371][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 868.088566][ C1] ? dummy_free_streams+0x360/0x360 [ 868.093764][ C1] ? __kasan_check_write+0x14/0x20 [ 868.098870][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 868.103972][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 868.109519][ C1] ? dummy_free_streams+0x360/0x360 [ 868.114712][ C1] call_timer_fn+0x35/0x280 [ 868.119206][ C1] ? dummy_free_streams+0x360/0x360 [ 868.124391][ C1] expire_timers+0x21f/0x3b0 [ 868.128969][ C1] __run_timers+0x548/0x680 [ 868.133465][ C1] ? enqueue_timer+0x470/0x470 [ 868.138222][ C1] run_timer_softirq+0x69/0xf0 [ 868.142979][ C1] __do_softirq+0x27e/0x598 [ 868.147477][ C1] asm_call_irq_on_stack+0xf/0x20 [ 868.152484][ C1] [ 868.155417][ C1] do_softirq_own_stack+0x60/0x80 [ 868.160429][ C1] __irq_exit_rcu+0x128/0x150 [ 868.165094][ C1] irq_exit_rcu+0x9/0x10 [ 868.169327][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 868.174952][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 868.180921][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 868.186194][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 868.205794][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 868.211857][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 868.219817][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 868.227810][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 868.235775][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 868.243735][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 868.251719][ C1] ? kernel_init_free_pages+0x87/0x100 [ 868.257173][ C1] get_page_from_freelist+0x6b5/0xa90 [ 868.262537][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 868.267905][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 868.273448][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 868.279428][ C1] pipe_write+0x580/0x1930 [ 868.283841][ C1] ? pipe_read+0x1030/0x1030 [ 868.288419][ C1] ? fsnotify_perm+0x67/0x4e0 [ 868.293088][ C1] ? io_schedule+0x120/0x120 [ 868.297672][ C1] ? security_file_permission+0xa8/0xc0 [ 868.303211][ C1] ? iov_iter_init+0x3f/0x120 [ 868.307882][ C1] vfs_write+0xc02/0xf20 [ 868.312122][ C1] ? kernel_write+0x3c0/0x3c0 [ 868.316797][ C1] ? __fget_files+0x310/0x370 [ 868.321468][ C1] ? __fdget_pos+0x1fa/0x300 [ 868.326049][ C1] ? ksys_write+0x77/0x2b0 [ 868.330455][ C1] ksys_write+0x186/0x2b0 [ 868.334776][ C1] ? __ia32_sys_read+0x90/0x90 [ 868.339622][ C1] __x64_sys_write+0x7b/0x90 [ 868.344205][ C1] do_syscall_64+0x31/0x70 [ 868.348614][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 868.354513][ C1] RIP: 0033:0x7f9380d05049 [ 868.358918][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 868.378517][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 868.386930][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 868.394894][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 868.402860][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 868.410824][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 868.418792][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 868.426758][ C1] ---[ end trace 6a7df80a272a8542 ]--- [ 868.432293][ C1] ------------[ cut here ]------------ [ 868.437746][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 868.443763][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 868.453377][ C1] Modules linked in: [ 868.457275][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 868.468966][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 868.479027][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 868.484566][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 868.504164][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 868.510223][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 868.518185][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 868.526146][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 868.534111][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 868.542074][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 868.550046][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 868.558961][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 868.565539][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 868.573507][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 868.581468][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 868.589428][ C1] Call Trace: [ 868.592699][ C1] [ 868.595544][ C1] aiptek_irq+0x19b7/0x25f0 [ 868.600063][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 868.605855][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 868.610958][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 868.615974][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 868.621337][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 868.626787][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 868.631631][ C1] dummy_timer+0x798/0x42a0 [ 868.636128][ C1] ? enqueue_timer+0x1d1/0x470 [ 868.640882][ C1] ? __mod_timer+0x995/0xde0 [ 868.645461][ C1] ? mod_timer_pending+0x30/0x30 [ 868.650390][ C1] ? __kasan_check_write+0x14/0x20 [ 868.655499][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 868.660692][ C1] ? dummy_free_streams+0x360/0x360 [ 868.665876][ C1] ? __kasan_check_write+0x14/0x20 [ 868.670980][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 868.676081][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 868.681647][ C1] ? dummy_free_streams+0x360/0x360 [ 868.686834][ C1] call_timer_fn+0x35/0x280 [ 868.691326][ C1] ? dummy_free_streams+0x360/0x360 [ 868.696512][ C1] expire_timers+0x21f/0x3b0 [ 868.701105][ C1] __run_timers+0x548/0x680 [ 868.705601][ C1] ? enqueue_timer+0x470/0x470 [ 868.710360][ C1] run_timer_softirq+0x69/0xf0 [ 868.715116][ C1] __do_softirq+0x27e/0x598 [ 868.719607][ C1] asm_call_irq_on_stack+0xf/0x20 [ 868.724611][ C1] [ 868.727544][ C1] do_softirq_own_stack+0x60/0x80 [ 868.732558][ C1] __irq_exit_rcu+0x128/0x150 [ 868.737225][ C1] irq_exit_rcu+0x9/0x10 [ 868.741456][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 868.747078][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 868.753052][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 868.758325][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 868.778353][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 868.784417][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 868.792382][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 868.800347][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00 [ 868.808306][ C1] R10: fffff94000841f3f R11: 0000000000000000 R12: 0000000000000001 [ 868.816267][ C1] R13: ffff888114126da0 R14: ffffea000420f9c0 R15: dffffc0000000000 [ 868.824250][ C1] ? kernel_init_free_pages+0x87/0x100 [ 868.829700][ C1] get_page_from_freelist+0x6b5/0xa90 [ 868.835063][ C1] __alloc_pages_nodemask+0x3c8/0x820 [ 868.840426][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 868.846136][ C1] ? copy_user_enhanced_fast_string+0xe/0x40 [ 868.852113][ C1] pipe_write+0x580/0x1930 [ 868.856523][ C1] ? pipe_read+0x1030/0x1030 [ 868.861103][ C1] ? fsnotify_perm+0x67/0x4e0 [ 868.865773][ C1] ? io_schedule+0x120/0x120 [ 868.870354][ C1] ? security_file_permission+0xa8/0xc0 [ 868.875890][ C1] ? iov_iter_init+0x3f/0x120 [ 868.880567][ C1] vfs_write+0xc02/0xf20 [ 868.884800][ C1] ? kernel_write+0x3c0/0x3c0 [ 868.889468][ C1] ? __fget_files+0x310/0x370 [ 868.894138][ C1] ? __fdget_pos+0x1fa/0x300 [ 868.898715][ C1] ? ksys_write+0x77/0x2b0 [ 868.903121][ C1] ksys_write+0x186/0x2b0 [ 868.907453][ C1] ? __ia32_sys_read+0x90/0x90 [ 868.912210][ C1] __x64_sys_write+0x7b/0x90 [ 868.916798][ C1] do_syscall_64+0x31/0x70 [ 868.921209][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 868.927090][ C1] RIP: 0033:0x7f9380d05049 [ 868.931502][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 868.951097][ C1] RSP: 002b:00007f937fe7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 868.959509][ C1] RAX: ffffffffffffffda RBX: 00007f9380e17f60 RCX: 00007f9380d05049 [ 868.967468][ C1] RDX: 00000000fffffe5d RSI: 0000000020000100 RDI: 0000000000000001 [ 868.975440][ C1] RBP: 00007f9380d5f08d R08: 0000000000000000 R09: 0000000000000000 [ 868.983410][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 868.991373][ C1] R13: 00007ffd822e85cf R14: 00007f937fe7b300 R15: 0000000000022000 [ 868.999338][ C1] ---[ end trace 6a7df80a272a8543 ]--- [ 869.004868][ C1] ------------[ cut here ]------------ [ 869.010319][ C1] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 869.016309][ C1] WARNING: CPU: 1 PID: 26466 at drivers/usb/core/urb.c:494 usb_submit_urb+0xbbb/0x15b0 [ 869.025907][ C1] Modules linked in: [ 869.029784][ C1] CPU: 1 PID: 26466 Comm: syz-executor.1 Tainted: G W 5.10.102-syzkaller-00171-ge1b86e7f5cbb #0 [ 869.041556][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 869.051600][ C1] RIP: 0010:usb_submit_urb+0xbbb/0x15b0 [ 869.057137][ C1] Code: 48 c1 e8 03 42 8a 04 30 84 c0 0f 85 56 07 00 00 45 8b 07 48 c7 c7 60 36 62 85 48 8b 75 a8 4c 89 e2 89 d9 31 c0 e8 d5 8b 35 fe <0f> 0b 4c 8b 75 88 48 8b 5d a0 41 89 df 4c 89 ff 48 c7 c6 c0 97 8a [ 869.076729][ C1] RSP: 0018:ffffc90000160860 EFLAGS: 00010046 [ 869.082771][ C1] RAX: c2fb7b27b4910b00 RBX: 0000000000000001 RCX: 1ffff9200002c0c4 [ 869.090715][ C1] RDX: 0000000000000101 RSI: 0000000000000101 RDI: 0000000000000000 [ 869.098763][ C1] RBP: ffffc900001608f0 R08: ffffffff81544c88 R09: ffffed103ee24e83 [ 869.106720][ C1] R10: ffffed103ee24e83 R11: 0000000000000000 R12: ffff88810db870c8 [ 869.114678][ C1] R13: ffff88810f79ea00 R14: dffffc0000000000 R15: ffffffff856235e8 [ 869.122637][ C1] FS: 00007f937fe7b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 869.131547][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 869.138110][ C1] CR2: 00000000203ed000 CR3: 000000011319b000 CR4: 00000000003526a0 [ 869.146076][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 869.154026][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 869.161986][ C1] Call Trace: [ 869.165248][ C1] [ 869.168083][ C1] aiptek_irq+0x19b7/0x25f0 [ 869.172565][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 869.178346][ C1] ? kcov_remote_start+0x19c/0x3e0 [ 869.183429][ C1] ? usb_unanchor_urb+0x171/0x3b0 [ 869.188442][ C1] __usb_hcd_giveback_urb+0x32e/0x4d0 [ 869.193788][ C1] usb_hcd_giveback_urb+0x11d/0x3a0 [ 869.198969][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 869.203795][ C1] dummy_timer+0x798/0x42a0 [ 869.208274][ C1] ? enqueue_timer+0x1d1/0x470 [ 869.213011][ C1] ? __mod_timer+0x995/0xde0 [ 869.217580][ C1] ? mod_timer_pending+0x30/0x30 [ 869.222495][ C1] ? __kasan_check_write+0x14/0x20 [ 869.227582][ C1] ? _raw_write_trylock+0x1b0/0x1b0 [ 869.232755][ C1] ? dummy_free_streams+0x360/0x360 [ 869.237924][ C1] ? __kasan_check_write+0x14/0x20 [ 869.243022][ C1] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 869.248105][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 869.253640][ C1] ? dummy_free_streams+0x360/0x360 [ 869.258810][ C1] call_timer_fn+0x35/0x280 [ 869.263286][ C1] ? dummy_free_streams+0x360/0x360 [ 869.268456][ C1] expire_timers+0x21f/0x3b0 [ 869.273020][ C1] __run_timers+0x548/0x680 [ 869.277498][ C1] ? enqueue_timer+0x470/0x470 [ 869.282243][ C1] run_timer_softirq+0x69/0xf0 [ 869.286981][ C1] __do_softirq+0x27e/0x598 [ 869.291477][ C1] asm_call_irq_on_stack+0xf/0x20 [ 869.296471][ C1] [ 869.299386][ C1] do_softirq_own_stack+0x60/0x80 [ 869.304387][ C1] __irq_exit_rcu+0x128/0x150 [ 869.309038][ C1] irq_exit_rcu+0x9/0x10 [ 869.313255][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 869.318864][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 869.324822][ C1] RIP: 0010:clear_page_erms+0x9/0x10 [ 869.330080][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d9 90 c3 0f 1f 80 00 00 00 00 b9 00 10 00 00 31 c0 f3 aa cc cc cc cc cc cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 [ 869.349673][ C1] RSP: 0018:ffffc90006fd7838 EFLAGS: 00000246 [ 869.355727][ C1] RAX: 0000000000000000 RBX: 1ffff11022824db4 RCX: 0000000000000000 [ 869.363675][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8881083e8000 [ 869.371620][ C1] RBP: ffffc90006fd7868 R08: dffffc0000000000 R09: ffffed102107ce00