Warning: Permanently added '[localhost]:3159' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 148.763009][ T1729] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 149.002762][ T1729] usb 1-1: Using ep0 maxpacket: 16 [ 149.164296][ T1729] usb 1-1: unable to get BOS descriptor or descriptor too short [ 149.243373][ T1729] usb 1-1: config 101 has an invalid interface number: 16 but max is 1 [ 149.244406][ T1729] usb 1-1: config 101 has an invalid interface number: 101 but max is 1 [ 149.247177][ T1729] usb 1-1: config 101 has an invalid interface association descriptor of length 2, skipping [ 149.248184][ T1729] usb 1-1: config 101 has no interface number 0 [ 149.248932][ T1729] usb 1-1: config 101 has no interface number 1 [ 149.250333][ T1729] usb 1-1: config 101 interface 16 altsetting 220 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 149.251717][ T1729] usb 1-1: config 101 interface 16 altsetting 220 has an invalid endpoint with address 0x80, skipping [ 149.253857][ T1729] usb 1-1: config 101 interface 16 altsetting 220 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 149.256183][ T1729] usb 1-1: config 101 interface 16 altsetting 220 has an invalid endpoint with address 0x80, skipping [ 149.257879][ T1729] usb 1-1: config 101 interface 16 altsetting 220 has a duplicate endpoint with address 0x9, skipping [ 149.258884][ T1729] usb 1-1: config 101 interface 16 altsetting 220 has a duplicate endpoint with address 0x9, skipping [ 149.260006][ T1729] usb 1-1: config 101 interface 16 altsetting 220 bulk endpoint 0x4 has invalid maxpacket 1023 [ 149.261173][ T1729] usb 1-1: config 101 interface 16 altsetting 220 has a duplicate endpoint with address 0x86, skipping [ 149.262810][ T1729] usb 1-1: config 101 interface 16 altsetting 220 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 149.263933][ T1729] usb 1-1: config 101 interface 101 altsetting 7 has a duplicate endpoint with address 0x5, skipping [ 149.265087][ T1729] usb 1-1: config 101 interface 101 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 149.266186][ T1729] usb 1-1: config 101 interface 101 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 149.267206][ T1729] usb 1-1: config 101 interface 101 altsetting 7 has a duplicate endpoint with address 0x1, skipping [ 149.268261][ T1729] usb 1-1: config 101 interface 101 altsetting 7 has a duplicate endpoint with address 0x6, skipping [ 149.269182][ T1729] usb 1-1: config 101 interface 101 altsetting 7 has a duplicate endpoint with address 0x1, skipping [ 149.270949][ T1729] usb 1-1: config 101 interface 101 altsetting 7 has a duplicate endpoint with address 0x5, skipping [ 149.272499][ T1729] usb 1-1: config 101 interface 16 has no altsetting 0 [ 149.273260][ T1729] usb 1-1: config 101 interface 101 has no altsetting 0 [ 149.513093][ T1729] usb 1-1: string descriptor 0 read error: -22 [ 149.514352][ T1729] usb 1-1: New USB device found, idVendor=0525, idProduct=2888, bcdDevice=6e.b7 [ 149.515249][ T1729] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.858588][ T1729] cdc_subset 1-1:101.16 usb0: register 'cdc_subset' at usb-dummy_hcd.0-1, Epson USB Device, ca:21:f9:8d:84:b2 [ 150.075430][ T1729] cdc_subset 1-1:101.101 usb1: register 'cdc_subset' at usb-dummy_hcd.0-1, Epson USB Device, ca:21:f9:8d:84:b2 [ 155.323116][ T9] ------------[ cut here ]------------ [ 155.324054][ T9] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 155.325554][ T9] WARNING: CPU: 0 PID: 9 at drivers/usb/core/urb.c:504 usb_submit_urb+0x3ec/0x5c8 [ 155.332752][ T9] Modules linked in: [ 155.335753][ T9] CPU: 0 PID: 9 Comm: kworker/0:1 Not tainted 6.4.0-rc5-syzkaller-00016-ga4d7d7011219 #0 [ 155.336852][ T9] Hardware name: linux,dummy-virt (DT) [ 155.337705][ T9] Workqueue: mld mld_ifc_work [ 155.338631][ T9] pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 155.339499][ T9] pc : usb_submit_urb+0x3ec/0x5c8 [ 155.340596][ T9] lr : usb_submit_urb+0x3ec/0x5c8 [ 155.341183][ T9] sp : ffff80000a80b870 [ 155.341671][ T9] x29: ffff80000a80b870 x28: 0000000000000000 x27: fdff00000593f000 [ 155.343030][ T9] x26: 0000000000000001 x25: f8ff0000057458a8 x24: ffff800009ad45b8 [ 155.343909][ T9] x23: 0000000000000003 x22: 0000000000000003 x21: 0000000000000820 [ 155.344804][ T9] x20: f8ff000005745800 x19: f6ff000005b27900 x18: 00000000fffffffe [ 155.345980][ T9] x17: ffff800075617000 x16: ffff800008000000 x15: 0000000000000020 [ 155.347077][ T9] x14: ffff80000a3ecc78 x13: 000000000000088e x12: 00000000000002da [ 155.348074][ T9] x11: 202c726566782062 x10: ffff80000a49cc78 x9 : 00000000ffffe000 [ 155.349089][ T9] x8 : ffff80000a3ecc78 x7 : ffff80000a49cc78 x6 : 0000000000000000 [ 155.349983][ T9] x5 : ffff00007f9b7c88 x4 : 0000000000000000 x3 : ffff800075617000 [ 155.350828][ T9] x2 : 0000000000000000 x1 : 0000000000000000 x0 : f5ff000003098000 [ 155.351842][ T9] Call trace: [ 155.352621][ T9] usb_submit_urb+0x3ec/0x5c8 [ 155.353343][ T9] usbnet_start_xmit+0x340/0x5dc [ 155.353848][ T9] dev_hard_start_xmit+0x94/0x148 [ 155.354330][ T9] sch_direct_xmit+0x90/0x1e4 [ 155.354816][ T9] __dev_queue_xmit+0x468/0xd40 [ 155.355277][ T9] neigh_resolve_output+0xfc/0x1c8 [ 155.356068][ T9] ip6_finish_output2+0x1b0/0x7b8 [ 155.356661][ T9] ip6_finish_output+0x220/0x360 [ 155.357468][ T9] ip6_output+0x74/0x1d4 [ 155.357997][ T9] NF_HOOK.constprop.0+0x50/0xe0 [ 155.358545][ T9] mld_sendpack+0x280/0x4b8 [ 155.359257][ T9] mld_ifc_work+0x1d0/0x4bc [ 155.359773][ T9] process_one_work+0x1c0/0x30c [ 155.360373][ T9] worker_thread+0x70/0x418 [ 155.360902][ T9] kthread+0x118/0x11c [ 155.361400][ T9] ret_from_fork+0x10/0x20 [ 155.362311][ T9] ---[ end trace 0000000000000000 ]--- [ 155.765114][ T9] ------------[ cut here ]------------ [ 155.765821][ T9] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 155.766556][ T9] WARNING: CPU: 0 PID: 9 at drivers/usb/core/urb.c:504 usb_submit_urb+0x3ec/0x5c8 [ 155.767417][ T9] Modules linked in: [ 155.768113][ T9] CPU: 0 PID: 9 Comm: kworker/0:1 Tainted: G W 6.4.0-rc5-syzkaller-00016-ga4d7d7011219 #0 [ 155.769003][ T9] Hardware name: linux,dummy-virt (DT) [ 155.769667][ T9] Workqueue: ipv6_addrconf addrconf_dad_work [ 155.770596][ T9] pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 155.771276][ T9] pc : usb_submit_urb+0x3ec/0x5c8 [ 155.772127][ T9] lr : usb_submit_urb+0x3ec/0x5c8 [ 155.772687][ T9] sp : ffff80000a80b800 [ 155.773114][ T9] x29: ffff80000a80b800 x28: 0000000000000000 x27: fdff00000593f000 [ 155.773935][ T9] x26: 0000000000000001 x25: f8ff0000057458a8 x24: ffff800009ad45b8 [ 155.774736][ T9] x23: 0000000000000003 x22: 0000000000000003 x21: 0000000000000820 [ 155.775696][ T9] x20: f8ff000005745800 x19: f0ff000005b27900 x18: 00000000fffffffe [ 155.776958][ T9] x17: ffff800075617000 x16: ffff800008000000 x15: 0000000000000020 [ 155.778082][ T9] x14: ffff80000a3ecc78 x13: 0000000000000903 x12: 0000000000000301 [ 155.779122][ T9] x11: 202c726566782062 x10: ffff80000a49cc78 x9 : 00000000ffffe000 [ 155.780141][ T9] x8 : ffff80000a3ecc78 x7 : ffff80000a49cc78 x6 : 0000000000000000 [ 155.781023][ T9] x5 : ffff00007f9b7c88 x4 : 0000000000000000 x3 : ffff800075617000 [ 155.781963][ T9] x2 : 0000000000000000 x1 : 0000000000000000 x0 : f5ff000003098000 [ 155.782943][ T9] Call trace: [ 155.783354][ T9] usb_submit_urb+0x3ec/0x5c8 [ 155.783852][ T9] usbnet_start_xmit+0x340/0x5dc [ 155.784398][ T9] dev_hard_start_xmit+0x94/0x148 [ 155.784898][ T9] sch_direct_xmit+0x90/0x1e4 [ 155.785418][ T9] __dev_queue_xmit+0x468/0xd40 [ 155.785900][ T9] neigh_resolve_output+0xfc/0x1c8 [ 155.786365][ T9] ip6_finish_output2+0x1b0/0x7b8 [ 155.786868][ T9] ip6_finish_output+0x220/0x360 [ 155.787522][ T9] ip6_output+0x74/0x1d4 [ 155.788069][ T9] NF_HOOK.constprop.0+0x50/0xe0 [ 155.788738][ T9] ndisc_send_skb+0x2f0/0x488 [ 155.789262][ T9] ndisc_send_ns+0x64/0xb0 [ 155.789885][ T9] addrconf_dad_work+0x3d4/0x594 [ 155.790350][ T9] process_one_work+0x1c0/0x30c [ 155.791061][ T9] worker_thread+0x70/0x418 [ 155.791515][ T9] kthread+0x118/0x11c [ 155.792159][ T9] ret_from_fork+0x10/0x20 [ 155.792711][ T9] ---[ end trace 0000000000000000 ]--- [ 156.449033][ T9] ------------[ cut here ]------------ [ 156.449758][ T9] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 156.450529][ T9] WARNING: CPU: 0 PID: 9 at drivers/usb/core/urb.c:504 usb_submit_urb+0x3ec/0x5c8 [ 156.451416][ T9] Modules linked in: [ 156.452044][ T9] CPU: 0 PID: 9 Comm: kworker/0:1 Tainted: G W 6.4.0-rc5-syzkaller-00016-ga4d7d7011219 #0 [ 156.453022][ T9] Hardware name: linux,dummy-virt (DT) [ 156.453645][ T9] Workqueue: mld mld_ifc_work [ 156.455180][ T9] pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 156.457532][ T9] pc : usb_submit_urb+0x3ec/0x5c8 [ 156.459316][ T9] lr : usb_submit_urb+0x3ec/0x5c8 [ 156.461081][ T9] sp : ffff80000a80b8b0 [ 156.462804][ T9] x29: ffff80000a80b8b0 x28: 0000000000000000 x27: fdff00000593f000 [ 156.464842][ T9] x26: 0000000000000001 x25: f8ff0000057458a8 x24: ffff800009ad45b8 [ 156.466825][ T9] x23: 0000000000000003 x22: 0000000000000003 x21: 0000000000000820 [ 156.468716][ T9] x20: f8ff000005745800 x19: f4ff000005b27900 x18: 00000000fffffffe [ 156.471555][ T9] x17: ffff800075617000 x16: ffff800008000000 x15: 0000000000000020 [ 156.474014][ T9] x14: ffff80000a3ecc78 x13: 000000000000097b x12: 0000000000000329 [ 156.474756][ T9] x11: 202c726566782062 x10: ffff80000a49cc78 x9 : 00000000ffffe000 [ 156.475659][ T9] x8 : ffff80000a3ecc78 x7 : ffff80000a49cc78 x6 : 0000000000000000 [ 156.476634][ T9] x5 : ffff00007f9b7c88 x4 : 0000000000000000 x3 : ffff800075617000 [ 156.477525][ T9] x2 : 0000000000000000 x1 : 0000000000000000 x0 : f5ff000003098000 [ 156.478520][ T9] Call trace: [ 156.478963][ T9] usb_submit_urb+0x3ec/0x5c8 [ 156.479523][ T9] usbnet_start_xmit+0x340/0x5dc [ 156.480195][ T9] dev_hard_start_xmit+0x94/0x148 [ 156.480777][ T9] sch_direct_xmit+0x90/0x1e4 [ 156.481337][ T9] __dev_queue_xmit+0x468/0xd40 [ 156.482028][ T9] ip6_finish_output2+0x268/0x7b8 [ 156.482838][ T9] ip6_finish_output+0x220/0x360 [ 156.483414][ T9] ip6_output+0x74/0x1d4 [ 156.483880][ T9] NF_HOOK.constprop.0+0x50/0xe0 [ 156.484337][ T9] mld_sendpack+0x280/0x4b8 [ 156.484828][ T9] mld_ifc_work+0x1d0/0x4bc [ 156.485341][ T9] process_one_work+0x1c0/0x30c [ 156.485911][ T9] worker_thread+0x70/0x418 [ 156.486443][ T9] kthread+0x118/0x11c [ 156.486941][ T9] ret_from_fork+0x10/0x20 [ 156.487508][ T9] ---[ end trace 0000000000000000 ]--- [ 156.782662][ T9] ------------[ cut here ]------------ [ 156.783391][ T9] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 156.784222][ T9] WARNING: CPU: 0 PID: 9 at drivers/usb/core/urb.c:504 usb_submit_urb+0x3ec/0x5c8 [ 156.785441][ T9] Modules linked in: [ 156.785981][ T9] CPU: 0 PID: 9 Comm: kworker/0:1 Tainted: G W 6.4.0-rc5-syzkaller-00016-ga4d7d7011219 #0 [ 156.787253][ T9] Hardware name: linux,dummy-virt (DT) [ 156.787795][ T9] Workqueue: ipv6_addrconf addrconf_dad_work [ 156.788469][ T9] pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 156.789076][ T9] pc : usb_submit_urb+0x3ec/0x5c8 [ 156.789632][ T9] lr : usb_submit_urb+0x3ec/0x5c8 [ 156.790353][ T9] sp : ffff80000a80b800 [ 156.790793][ T9] x29: ffff80000a80b800 x28: 0000000000000000 x27: fdff00000593f000 [ 156.791861][ T9] x26: 0000000000000001 x25: f8ff0000057458a8 x24: ffff800009ad45b8 [ 156.792808][ T9] x23: 0000000000000003 x22: 0000000000000003 x21: 0000000000000820 [ 156.793666][ T9] x20: f8ff000005745800 x19: fbff000005b27900 x18: 00000000fffffffe [ 156.794539][ T9] x17: ffff800075617000 x16: ffff800008000000 x15: 0000000000000020 [ 156.795483][ T9] x14: ffff80000a3ecc78 x13: 00000000000009ed x12: 000000000000034f [ 156.796527][ T9] x11: 202c726566782062 x10: ffff80000a49cc78 x9 : 00000000ffffe000 [ 156.797329][ T9] x8 : ffff80000a3ecc78 x7 : ffff80000a49cc78 x6 : 0000000000000000 [ 156.798129][ T9] x5 : ffff00007f9b7c88 x4 : 0000000000000000 x3 : ffff800075617000 [ 156.798638][ T9] x2 : 0000000000000000 x1 : 0000000000000000 x0 : f5ff000003098000 [ 156.799378][ T9] Call trace: [ 156.799753][ T9] usb_submit_urb+0x3ec/0x5c8 [ 156.800261][ T9] usbnet_start_xmit+0x340/0x5dc [ 156.800557][ T9] dev_hard_start_xmit+0x94/0x148 [ 156.800869][ T9] sch_direct_xmit+0x90/0x1e4 [ 156.801140][ T9] __dev_queue_xmit+0x468/0xd40 [ 156.801489][ T9] ip6_finish_output2+0x268/0x7b8 [ 156.802324][ T9] ip6_finish_output+0x220/0x360 [ 156.802932][ T9] ip6_output+0x74/0x1d4 [ 156.803446][ T9] NF_HOOK.constprop.0+0x50/0xe0 [ 156.804019][ T9] mld_sendpack+0x280/0x4b8 [ 156.804634][ T9] mld_send_initial_cr.part.0.isra.0+0x5c/0x70 [ 156.805216][ T9] ipv6_mc_dad_complete+0x78/0x17c [ 156.805977][ T9] addrconf_dad_completed+0x31c/0x3a8 [ 156.806649][ T9] addrconf_dad_work+0x254/0x594 [ 156.807186][ T9] process_one_work+0x1c0/0x30c [ 156.807988][ T9] worker_thread+0x70/0x418 [ 156.808462][ T9] kthread+0x118/0x11c [ 156.809040][ T9] ret_from_fork+0x10/0x20 [ 156.809563][ T9] ---[ end trace 0000000000000000 ]--- [ 156.971540][ T9] ------------[ cut here ]------------ [ 156.972381][ T9] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 156.973234][ T9] WARNING: CPU: 0 PID: 9 at drivers/usb/core/urb.c:504 usb_submit_urb+0x3ec/0x5c8 [ 156.974040][ T9] Modules linked in: [ 156.974492][ T9] CPU: 0 PID: 9 Comm: kworker/0:1 Tainted: G W 6.4.0-rc5-syzkaller-00016-ga4d7d7011219 #0 [ 156.975199][ T9] Hardware name: linux,dummy-virt (DT) [ 156.975693][ T9] Workqueue: mld mld_ifc_work [ 156.976260][ T9] pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 156.976905][ T9] pc : usb_submit_urb+0x3ec/0x5c8 [ 156.977430][ T9] lr : usb_submit_urb+0x3ec/0x5c8 [ 156.977927][ T9] sp : ffff80000a80b870 [ 156.978404][ T9] x29: ffff80000a80b870 x28: 0000000000000000 x27: fbff00000593b000 [ 156.979368][ T9] x26: 0000000000000001 x25: f8ff0000057458a8 x24: ffff800009ad45b8 [ 156.980270][ T9] x23: 0000000000000003 x22: 0000000000000003 x21: 0000000000000820 [ 156.981099][ T9] x20: f8ff000005745800 x19: f0ff000005b27a00 x18: 00000000fffffffe [ 156.981979][ T9] x17: ffff800075617000 x16: ffff800008000000 x15: 0000000000000020 [ 156.983053][ T9] x14: ffff80000a3ecc78 x13: 0000000000000a68 x12: 0000000000000378 [ 156.983884][ T9] x11: 202c726566782062 x10: ffff80000a49cc78 x9 : 00000000ffffe000 [ 156.984794][ T9] x8 : ffff80000a3ecc78 x7 : ffff80000a49cc78 x6 : 0000000000000000 [ 156.985591][ T9] x5 : ffff00007f9b7c88 x4 : 0000000000000000 x3 : ffff800075617000 [ 156.986373][ T9] x2 : 0000000000000000 x1 : 0000000000000000 x0 : f5ff000003098000 [ 156.987212][ T9] Call trace: [ 156.987591][ T9] usb_submit_urb+0x3ec/0x5c8 [ 156.988084][ T9] usbnet_start_xmit+0x340/0x5dc [ 156.988588][ T9] dev_hard_start_xmit+0x94/0x148 [ 156.989080][ T9] sch_direct_xmit+0x90/0x1e4 [ 156.989584][ T9] __dev_queue_xmit+0x468/0xd40 [ 156.990244][ T9] neigh_resolve_output+0xfc/0x1c8 [ 156.990736][ T9] ip6_finish_output2+0x1b0/0x7b8 [ 156.991490][ T9] ip6_finish_output+0x220/0x360 [ 156.992111][ T9] ip6_output+0x74/0x1d4 [ 156.992711][ T9] NF_HOOK.constprop.0+0x50/0xe0 [ 156.993207][ T9] mld_sendpack+0x280/0x4b8 [ 156.993672][ T9] mld_ifc_work+0x1d0/0x4bc [ 156.994129][ T9] process_one_work+0x1c0/0x30c [ 156.994597][ T9] worker_thread+0x70/0x418 [ 156.995035][ T9] kthread+0x118/0x11c [ 156.995510][ T9] ret_from_fork+0x10/0x20 [ 156.996025][ T9] ---[ end trace 0000000000000000 ]--- [ 157.416790][ T9] ------------[ cut here ]------------ [ 157.417595][ T9] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 157.418105][ T9] WARNING: CPU: 0 PID: 9 at drivers/usb/core/urb.c:504 usb_submit_urb+0x3ec/0x5c8 [ 157.418916][ T9] Modules linked in: [ 157.419422][ T9] CPU: 0 PID: 9 Comm: kworker/0:1 Tainted: G W 6.4.0-rc5-syzkaller-00016-ga4d7d7011219 #0 [ 157.420127][ T9] Hardware name: linux,dummy-virt (DT) [ 157.420630][ T9] Workqueue: mld mld_dad_work [ 157.421175][ T9] pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 157.421937][ T9] pc : usb_submit_urb+0x3ec/0x5c8 [ 157.422685][ T9] lr : usb_submit_urb+0x3ec/0x5c8 [ 157.423071][ T9] sp : ffff80000a80b8d0 [ 157.423432][ T9] x29: ffff80000a80b8d0 x28: 0000000000000000 x27: fdff00000593f000 [ 157.424102][ T9] x26: 0000000000000001 x25: f8ff0000057458a8 x24: ffff800009ad45b8 [ 157.425113][ T9] x23: 0000000000000003 x22: 0000000000000003 x21: 0000000000000820 [ 157.425785][ T9] x20: f8ff000005745800 x19: fcff000005b27a00 x18: 00000000fffffffe [ 157.426383][ T9] x17: ffff800075617000 x16: ffff800008000000 x15: 0000000000000020 [ 157.427537][ T9] x14: ffff80000a3ecc78 x13: 0000000000000add x12: 000000000000039f [ 157.428467][ T9] x11: 202c726566782062 x10: ffff80000a49cc78 x9 : 00000000ffffe000 [ 157.429572][ T9] x8 : ffff80000a3ecc78 x7 : ffff80000a49cc78 x6 : 0000000000000000 [ 157.430422][ T9] x5 : ffff00007f9b7c88 x4 : 0000000000000000 x3 : ffff800075617000 [ 157.431624][ T9] x2 : 0000000000000000 x1 : 0000000000000000 x0 : f5ff000003098000 [ 157.433041][ T9] Call trace: [ 157.433648][ T9] usb_submit_urb+0x3ec/0x5c8 [ 157.434172][ T9] usbnet_start_xmit+0x340/0x5dc [ 157.434846][ T9] dev_hard_start_xmit+0x94/0x148 [ 157.435364][ T9] sch_direct_xmit+0x90/0x1e4 [ 157.436052][ T9] __dev_queue_xmit+0x468/0xd40 [ 157.436602][ T9] ip6_finish_output2+0x268/0x7b8 [ 157.437414][ T9] ip6_finish_output+0x220/0x360 [ 157.438020][ T9] ip6_output+0x74/0x1d4 [ 157.438621][ T9] NF_HOOK.constprop.0+0x50/0xe0 [ 157.439165][ T9] mld_sendpack+0x280/0x4b8 [ 157.440024][ T9] mld_send_initial_cr.part.0.isra.0+0x5c/0x70 [ 157.440722][ T9] mld_dad_work+0x60/0x20c [ 157.441215][ T9] process_one_work+0x1c0/0x30c [ 157.442504][ T9] worker_thread+0x70/0x418 [ 157.443981][ T9] kthread+0x118/0x11c [ 157.444626][ T9] ret_from_fork+0x10/0x20 [ 157.445190][ T9] ---[ end trace 0000000000000000 ]--- [ 157.485460][ T2915] ------------[ cut here ]------------ [ 157.486138][ T2915] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 157.486829][ T2915] WARNING: CPU: 1 PID: 2915 at drivers/usb/core/urb.c:504 usb_submit_urb+0x3ec/0x5c8 [ 157.487767][ T2915] Modules linked in: [ 157.488278][ T2915] CPU: 1 PID: 2915 Comm: dhcpcd Tainted: G W 6.4.0-rc5-syzkaller-00016-ga4d7d7011219 #0 [ 157.489097][ T2915] Hardware name: linux,dummy-virt (DT) [ 157.489602][ T2915] pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 157.490316][ T2915] pc : usb_submit_urb+0x3ec/0x5c8 [ 157.490810][ T2915] lr : usb_submit_urb+0x3ec/0x5c8 [ 157.491264][ T2915] sp : ffff80000dd33550 [ 157.491639][ T2915] x29: ffff80000dd33550 x28: 0000000000000000 x27: fdff00000593f000 [ 157.492771][ T2915] x26: 0000000000000001 x25: f8ff0000057458a8 x24: ffff800009ad45b8 [ 157.493648][ T2915] x23: 0000000000000003 x22: 0000000000000003 x21: 0000000000000820 [ 157.494512][ T2915] x20: f8ff000005745800 x19: f2ff000005a63500 x18: 00000000fffffffb [ 157.495329][ T2915] x17: ffff80007562d000 x16: ffff800008008000 x15: 0000000000000020 [ 157.496190][ T2915] x14: ffff80000a3ecc78 x13: 0000000000000b52 x12: 00000000000003c6 [ 157.497058][ T2915] x11: 202c726566782062 x10: ffff80000a49cc78 x9 : 00000000ffffe000 [ 157.497900][ T2915] x8 : ffff80000a3ecc78 x7 : ffff80000a49cc78 x6 : 0000000000000000 [ 157.498684][ T2915] x5 : 0000000000017ff4 x4 : 0000000000000000 x3 : 0000000000000000 [ 157.499497][ T2915] x2 : 0000000000000000 x1 : 0000000000000000 x0 : f6ff000004073f00 [ 157.500392][ T2915] Call trace: [ 157.500764][ T2915] usb_submit_urb+0x3ec/0x5c8 [ 157.501367][ T2915] usbnet_start_xmit+0x340/0x5dc [ 157.501940][ T2915] dev_hard_start_xmit+0x94/0x148 [ 157.502687][ T2915] sch_direct_xmit+0x90/0x1e4 [ 157.503192][ T2915] __dev_queue_xmit+0x468/0xd40 [ 157.503703][ T2915] neigh_resolve_output+0xfc/0x1c8 [ 157.504229][ T2915] ip6_finish_output2+0x1b0/0x7b8 [ 157.504730][ T2915] ip6_finish_output+0x220/0x360 [ 157.505233][ T2915] ip6_output+0x74/0x1d4 [ 157.505715][ T2915] ip6_local_out+0x48/0x5c [ 157.506207][ T2915] ip6_send_skb+0x28/0x120 [ 157.506704][ T2915] ip6_push_pending_frames+0x48/0x5c [ 157.507199][ T2915] rawv6_sendmsg+0xd0c/0x1068 [ 157.507703][ T2915] inet_sendmsg+0x44/0x70 [ 157.508202][ T2915] sock_sendmsg+0x54/0x60 [ 157.508688][ T2915] ____sys_sendmsg+0x268/0x2a4 [ 157.509199][ T2915] ___sys_sendmsg+0x80/0xdc [ 157.509693][ T2915] __sys_sendmsg+0x68/0xc4 [ 157.510178][ T2915] __arm64_sys_sendmsg+0x24/0x30 [ 157.510681][ T2915] invoke_syscall+0x48/0x114 [ 157.511156][ T2915] el0_svc_common.constprop.0+0x44/0xec [ 157.511616][ T2915] do_el0_svc+0x38/0xa4 [ 157.512240][ T2915] el0_svc+0x2c/0xb0 [ 157.512714][ T2915] el0t_64_sync_handler+0xb8/0xbc [ 157.513196][ T2915] el0t_64_sync+0x19c/0x1a0 [ 157.513701][ T2915] ---[ end trace 0000000000000000 ]--- [ 157.815086][ T9] ------------[ cut here ]------------ [ 157.815743][ T9] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 157.816495][ T9] WARNING: CPU: 0 PID: 9 at drivers/usb/core/urb.c:504 usb_submit_urb+0x3ec/0x5c8 [ 157.817623][ T9] Modules linked in: [ 157.818125][ T9] CPU: 0 PID: 9 Comm: kworker/0:1 Tainted: G W 6.4.0-rc5-syzkaller-00016-ga4d7d7011219 #0 [ 157.818929][ T9] Hardware name: linux,dummy-virt (DT) [ 157.819569][ T9] Workqueue: ipv6_addrconf addrconf_dad_work [ 157.820265][ T9] pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 157.820940][ T9] pc : usb_submit_urb+0x3ec/0x5c8 [ 157.821450][ T9] lr : usb_submit_urb+0x3ec/0x5c8 [ 157.822063][ T9] sp : ffff80000a80b800 [ 157.822558][ T9] x29: ffff80000a80b800 x28: 0000000000000000 x27: fbff00000593b000 [ 157.823391][ T9] x26: 0000000000000001 x25: f8ff0000057458a8 x24: ffff800009ad45b8 [ 157.824290][ T9] x23: 0000000000000003 x22: 0000000000000003 x21: 0000000000000820 [ 157.825131][ T9] x20: f8ff000005745800 x19: f6ff000005b27c00 x18: 00000000fffffffe [ 157.826172][ T9] x17: ffff800075617000 x16: ffff800008000000 x15: 0000000000000020 [ 157.827026][ T9] x14: ffff80000a3ecc78 x13: 0000000000000bdf x12: 00000000000003f5 [ 157.827911][ T9] x11: 202c726566782062 x10: ffff80000a49cc78 x9 : 00000000ffffe000 [ 157.828750][ T9] x8 : ffff80000a3ecc78 x7 : ffff80000a49cc78 x6 : 0000000000000000 [ 157.829709][ T9] x5 : 0000000000017ff4 x4 : 0000000000000000 x3 : 0000000000000000 [ 157.830542][ T9] x2 : 0000000000000000 x1 : 0000000000000000 x0 : f5ff000003098000 [ 157.831493][ T9] Call trace: [ 157.831976][ T9] usb_submit_urb+0x3ec/0x5c8 [ 157.832494][ T9] usbnet_start_xmit+0x340/0x5dc [ 157.832989][ T9] dev_hard_start_xmit+0x94/0x148 [ 157.833646][ T9] sch_direct_xmit+0x90/0x1e4 [ 157.834135][ T9] __dev_queue_xmit+0x468/0xd40 [ 157.834982][ T9] neigh_resolve_output+0xfc/0x1c8 [ 157.835515][ T9] ip6_finish_output2+0x1b0/0x7b8 [ 157.836061][ T9] ip6_finish_output+0x220/0x360 [ 157.836622][ T9] ip6_output+0x74/0x1d4 [ 157.837162][ T9] NF_HOOK.constprop.0+0x50/0xe0 [ 157.837702][ T9] ndisc_send_skb+0x2f0/0x488 [ 157.838242][ T9] ndisc_send_ns+0x64/0xb0 [ 157.838722][ T9] addrconf_dad_work+0x3d4/0x594 [ 157.839298][ T9] process_one_work+0x1c0/0x30c [ 157.839827][ T9] worker_thread+0x70/0x418 [ 157.840493][ T9] kthread+0x118/0x11c [ 157.840959][ T9] ret_from_fork+0x10/0x20 [ 157.841490][ T9] ---[ end trace 0000000000000000 ]--- [ 157.997135][ T3087] ------------[ cut here ]------------ [ 157.997842][ T3087] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 157.998643][ T3087] WARNING: CPU: 0 PID: 3087 at drivers/usb/core/urb.c:504 usb_submit_urb+0x3ec/0x5c8 [ 157.999603][ T3087] Modules linked in: [ 158.000313][ T3087] CPU: 0 PID: 3087 Comm: dhcpcd Tainted: G W 6.4.0-rc5-syzkaller-00016-ga4d7d7011219 #0 [ 158.001188][ T3087] Hardware name: linux,dummy-virt (DT) [ 158.001729][ T3087] pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 158.002619][ T3087] pc : usb_submit_urb+0x3ec/0x5c8 [ 158.003161][ T3087] lr : usb_submit_urb+0x3ec/0x5c8 [ 158.003863][ T3087] sp : ffff80000ab43810 [ 158.004289][ T3087] x29: ffff80000ab43810 x28: 0000000000000000 x27: fdff00000593f000 [ 158.005430][ T3087] x26: 0000000000000001 x25: f8ff0000057458a8 x24: ffff800009ad45b8 [ 158.006350][ T3087] x23: 0000000000000003 x22: 0000000000000003 x21: 0000000000000820 [ 158.007288][ T3087] x20: f8ff000005745800 x19: f4ff000005b27c00 x18: 00000000fffffffb [ 158.008325][ T3087] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000020 [ 158.009581][ T3087] x14: ffff80000a3ecc78 x13: 0000000000000c57 x12: 000000000000041d [ 158.010486][ T3087] x11: 202c726566782062 x10: ffff80000a49cc78 x9 : 00000000ffffe000 [ 158.011406][ T3087] x8 : ffff80000a3ecc78 x7 : ffff80000a49cc78 x6 : 0000000000000000 [ 158.012557][ T3087] x5 : ffff00007f9b7c88 x4 : 0000000000000000 x3 : ffff800075617000 [ 158.013594][ T3087] x2 : 0000000000000000 x1 : 0000000000000000 x0 : fcff00000548bf00 [ 158.014799][ T3087] Call trace: [ 158.015243][ T3087] usb_submit_urb+0x3ec/0x5c8 [ 158.015907][ T3087] usbnet_start_xmit+0x340/0x5dc [ 158.016535][ T3087] dev_hard_start_xmit+0x94/0x148 [ 158.017116][ T3087] sch_direct_xmit+0x90/0x1e4 [ 158.017667][ T3087] __dev_queue_xmit+0x468/0xd40 [ 158.018218][ T3087] packet_xmit+0xd8/0x14c [ 158.018782][ T3087] packet_sendmsg+0xeec/0x13d0 [ 158.019350][ T3087] sock_sendmsg+0x54/0x60 [ 158.019953][ T3087] sock_write_iter+0x94/0xf0 [ 158.020499][ T3087] do_iter_readv_writev+0xb8/0x144 [ 158.021092][ T3087] do_iter_write+0x94/0x214 [ 158.021621][ T3087] vfs_writev+0xac/0x170 [ 158.022518][ T3087] do_writev+0x118/0x130 [ 158.023084][ T3087] __arm64_sys_writev+0x20/0x2c [ 158.023623][ T3087] invoke_syscall+0x48/0x114 [ 158.024169][ T3087] el0_svc_common.constprop.0+0xcc/0xec [ 158.024740][ T3087] do_el0_svc+0x38/0xa4 [ 158.025404][ T3087] el0_svc+0x2c/0xb0 [ 158.025925][ T3087] el0t_64_sync_handler+0xb8/0xbc [ 158.026628][ T3087] el0t_64_sync+0x19c/0x1a0 [ 158.027224][ T3087] ---[ end trace 0000000000000000 ]--- [ 158.049092][ T9] ------------[ cut here ]------------ [ 158.049913][ T9] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 158.050806][ T9] WARNING: CPU: 0 PID: 9 at drivers/usb/core/urb.c:504 usb_submit_urb+0x3ec/0x5c8 [ 158.051798][ T9] Modules linked in: [ 158.052529][ T9] CPU: 0 PID: 9 Comm: kworker/0:1 Tainted: G W 6.4.0-rc5-syzkaller-00016-ga4d7d7011219 #0 [ 158.053486][ T9] Hardware name: linux,dummy-virt (DT) [ 158.054038][ T9] Workqueue: mld mld_ifc_work [ 158.054855][ T9] pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 158.055530][ T9] pc : usb_submit_urb+0x3ec/0x5c8 [ 158.056273][ T9] lr : usb_submit_urb+0x3ec/0x5c8 [ 158.056955][ T9] sp : ffff80000a80b8b0 [ 158.057371][ T9] x29: ffff80000a80b8b0 x28: 0000000000000000 x27: fbff00000593b000 [ 158.058445][ T9] x26: 0000000000000001 x25: f8ff0000057458a8 x24: ffff800009ad45b8 [ 158.059399][ T9] x23: 0000000000000003 x22: 0000000000000003 x21: 0000000000000820 [ 158.060570][ T9] x20: f8ff000005745800 x19: fdff000005b27c00 x18: 00000000fffffffe [ 158.061467][ T9] x17: ffff800075617000 x16: ffff800008000000 x15: 0000000000000020 [ 158.062557][ T9] x14: ffff80000a3ecc78 x13: 0000000000000cd5 x12: 0000000000000447 [ 158.063492][ T9] x11: 202c726566782062 x10: ffff80000a49cc78 x9 : 00000000ffffe000 [ 158.064550][ T9] x8 : ffff80000a3ecc78 x7 : ffff80000a49cc78 x6 : 0000000000000000 [ 158.065491][ T9] x5 : 0000000000017ff4 x4 : 0000000000000000 x3 : 0000000000000000 [ 158.066459][ T9] x2 : 0000000000000000 x1 : 0000000000000000 x0 : f5ff000003098000 [ 158.067505][ T9] Call trace: [ 158.067949][ T9] usb_submit_urb+0x3ec/0x5c8 [ 158.068503][ T9] usbnet_start_xmit+0x340/0x5dc [ 158.069088][ T9] dev_hard_start_xmit+0x94/0x148 [ 158.069748][ T9] sch_direct_xmit+0x90/0x1e4 [ 158.070397][ T9] __dev_queue_xmit+0x468/0xd40 [ 158.070875][ T9] ip6_finish_output2+0x268/0x7b8 [ 158.071576][ T9] ip6_finish_output+0x220/0x360 [ 158.072374][ T9] ip6_output+0x74/0x1d4 [ 158.072914][ T9] NF_HOOK.constprop.0+0x50/0xe0 [ 158.073497][ T9] mld_sendpack+0x280/0x4b8 [ 158.073993][ T9] mld_ifc_work+0x1d0/0x4bc [ 158.074577][ T9] process_one_work+0x1c0/0x30c [ 158.075204][ T9] worker_thread+0x70/0x418 [ 158.075721][ T9] kthread+0x118/0x11c [ 158.076301][ T9] ret_from_fork+0x10/0x20 [ 158.076811][ T9] ---[ end trace 0000000000000000 ]--- [ 158.627433][ T3088] ------------[ cut here ]------------ [ 158.628110][ T3088] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 158.628815][ T3088] WARNING: CPU: 1 PID: 3088 at drivers/usb/core/urb.c:504 usb_submit_urb+0x3ec/0x5c8 [ 158.629712][ T3088] Modules linked in: [ 158.630301][ T3088] CPU: 1 PID: 3088 Comm: dhcpcd Tainted: G W 6.4.0-rc5-syzkaller-00016-ga4d7d7011219 #0 [ 158.631085][ T3088] Hardware name: linux,dummy-virt (DT) [ 158.631556][ T3088] pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 158.632422][ T3088] pc : usb_submit_urb+0x3ec/0x5c8 [ 158.632906][ T3088] lr : usb_submit_urb+0x3ec/0x5c8 [ 158.633398][ T3088] sp : ffff80000ab5b810 [ 158.633802][ T3088] x29: ffff80000ab5b810 x28: 0000000000000000 x27: fbff00000593b000 [ 158.634852][ T3088] x26: 0000000000000001 x25: f8ff0000057458a8 x24: ffff800009ad45b8 [ 158.635697][ T3088] x23: 0000000000000003 x22: 0000000000000003 x21: 0000000000000820 [ 158.636653][ T3088] x20: f8ff000005745800 x19: f9ff000005b84100 x18: 00000000fffffffb [ 158.637486][ T3088] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000020 [ 158.638558][ T3088] x14: ffff80000a3ecc78 x13: 0000000000000d47 x12: 000000000000046d [ 158.639371][ T3088] x11: 202c726566782062 x10: ffff80000a49cc78 x9 : 00000000ffffe000 [ 158.640302][ T3088] x8 : ffff80000a3ecc78 x7 : ffff80000a49cc78 x6 : 0000000000000000 [ 158.641182][ T3088] x5 : ffff00007f9cdc88 x4 : 0000000000000000 x3 : ffff80007562d000 [ 158.642016][ T3088] x2 : 0000000000000000 x1 : 0000000000000000 x0 : fdff00000405af40 [ 158.642947][ T3088] Call trace: [ 158.643360][ T3088] usb_submit_urb+0x3ec/0x5c8 [ 158.643925][ T3088] usbnet_start_xmit+0x340/0x5dc [ 158.644445][ T3088] dev_hard_start_xmit+0x94/0x148 [ 158.645025][ T3088] sch_direct_xmit+0x90/0x1e4 [ 158.645544][ T3088] __dev_queue_xmit+0x468/0xd40 [ 158.646198][ T3088] packet_xmit+0xd8/0x14c [ 158.646723][ T3088] packet_sendmsg+0xeec/0x13d0 [ 158.647234][ T3088] sock_sendmsg+0x54/0x60 [ 158.647696][ T3088] sock_write_iter+0x94/0xf0 [ 158.648292][ T3088] do_iter_readv_writev+0xb8/0x144 [ 158.648918][ T3088] do_iter_write+0x94/0x214 [ 158.649384][ T3088] vfs_writev+0xac/0x170 [ 158.650111][ T3088] do_writev+0x118/0x130 [ 158.650635][ T3088] __arm64_sys_writev+0x20/0x2c [ 158.651159][ T3088] invoke_syscall+0x48/0x114 [ 158.651658][ T3088] el0_svc_common.constprop.0+0xcc/0xec [ 158.652261][ T3088] do_el0_svc+0x38/0xa4 [ 158.652726][ T3088] el0_svc+0x2c/0xb0 [ 158.653210][ T3088] el0t_64_sync_handler+0xb8/0xbc [ 158.653717][ T3088] el0t_64_sync+0x19c/0x1a0 [ 158.654322][ T3088] ---[ end trace 0000000000000000 ]--- [ 158.862946][ T9] ------------[ cut here ]------------ [ 158.863573][ T9] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 158.864289][ T9] WARNING: CPU: 0 PID: 9 at drivers/usb/core/urb.c:504 usb_submit_urb+0x3ec/0x5c8 [ 158.865146][ T9] Modules linked in: [ 158.865616][ T9] CPU: 0 PID: 9 Comm: kworker/0:1 Tainted: G W 6.4.0-rc5-syzkaller-00016-ga4d7d7011219 #0 [ 158.866390][ T9] Hardware name: linux,dummy-virt (DT) [ 158.866850][ T9] Workqueue: ipv6_addrconf addrconf_dad_work [ 158.867435][ T9] pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 158.868085][ T9] pc : usb_submit_urb+0x3ec/0x5c8 [ 158.868567][ T9] lr : usb_submit_urb+0x3ec/0x5c8 [ 158.869067][ T9] sp : ffff80000a80b800 [ 158.869461][ T9] x29: ffff80000a80b800 x28: 0000000000000000 x27: fbff00000593b000 [ 158.870370][ T9] x26: 0000000000000001 x25: f8ff0000057458a8 x24: ffff800009ad45b8 [ 158.871203][ T9] x23: 0000000000000003 x22: 0000000000000003 x21: 0000000000000820 [ 158.872223][ T9] x20: f8ff000005745800 x19: f0ff000005b27c00 x18: 00000000fffffffe [ 158.873152][ T9] x17: ffff800075617000 x16: ffff800008000000 x15: 0000000000000020 [ 158.873994][ T9] x14: ffff80000a3ecc78 x13: 0000000000000dc5 x12: 0000000000000497 [ 158.874797][ T9] x11: 202c726566782062 x10: ffff80000a49cc78 x9 : 00000000ffffe000 [ 158.875584][ T9] x8 : ffff80000a3ecc78 x7 : ffff80000a49cc78 x6 : 0000000000000000 [ 158.876390][ T9] x5 : ffff00007f9b7c88 x4 : 0000000000000000 x3 : ffff800075617000 [ 158.877215][ T9] x2 : 0000000000000000 x1 : 0000000000000000 x0 : f5ff000003098000 [ 158.878034][ T9] Call trace: [ 158.878410][ T9] usb_submit_urb+0x3ec/0x5c8 [ 158.878971][ T9] usbnet_start_xmit+0x340/0x5dc [ 158.879472][ T9] dev_hard_start_xmit+0x94/0x148 [ 158.880036][ T9] sch_direct_xmit+0x90/0x1e4 [ 158.880538][ T9] __dev_queue_xmit+0x468/0xd40 [ 158.881018][ T9] ip6_finish_output2+0x268/0x7b8 [ 158.882396][ T9] ip6_finish_output+0x220/0x360 [ 158.882909][ T9] ip6_output+0x74/0x1d4 [ 158.883363][ T9] NF_HOOK.constprop.0+0x50/0xe0 [ 158.883899][ T9] mld_sendpack+0x280/0x4b8 [ 158.884388][ T9] mld_send_initial_cr.part.0.isra.0+0x5c/0x70 [ 158.884932][ T9] ipv6_mc_dad_complete+0x78/0x17c [ 158.885423][ T9] addrconf_dad_completed+0x31c/0x3a8 [ 158.885962][ T9] addrconf_dad_work+0x254/0x594 [ 158.886499][ T9] process_one_work+0x1c0/0x30c [ 158.887010][ T9] worker_thread+0x70/0x418 [ 158.887488][ T9] kthread+0x118/0x11c [ 158.887967][ T9] ret_from_fork+0x10/0x20 [ 158.888442][ T9] ---[ end trace 0000000000000000 ]--- [ 158.970834][ T2915] ------------[ cut here ]------------ [ 158.971569][ T2915] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 158.972360][ T2915] WARNING: CPU: 1 PID: 2915 at drivers/usb/core/urb.c:504 usb_submit_urb+0x3ec/0x5c8 [ 158.973219][ T2915] Modules linked in: [ 158.973716][ T2915] CPU: 1 PID: 2915 Comm: dhcpcd Tainted: G W 6.4.0-rc5-syzkaller-00016-ga4d7d7011219 #0 [ 158.974485][ T2915] Hardware name: linux,dummy-virt (DT) [ 158.974966][ T2915] pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 158.975699][ T2915] pc : usb_submit_urb+0x3ec/0x5c8 [ 158.976245][ T2915] lr : usb_submit_urb+0x3ec/0x5c8 [ 158.976792][ T2915] sp : ffff80000dd33550 [ 158.977394][ T2915] x29: ffff80000dd33550 x28: 0000000000000000 x27: fbff00000593b000 [ 158.978228][ T2915] x26: 0000000000000001 x25: f8ff0000057458a8 x24: ffff800009ad45b8 [ 158.979070][ T2915] x23: 0000000000000003 x22: 0000000000000003 x21: 0000000000000820 [ 158.979892][ T2915] x20: f8ff000005745800 x19: f1ff000005b84100 x18: 00000000fffffffb [ 158.980704][ T2915] x17: 0000000000000000 x16: 0000000000000002 x15: 0000000000000020 [ 158.981508][ T2915] x14: ffff80000a3ecc78 x13: 0000000000000e40 x12: 00000000000004c0 [ 158.982467][ T2915] x11: 202c726566782062 x10: ffff80000a49cc78 x9 : 00000000ffffe000 [ 158.983253][ T2915] x8 : ffff80000a3ecc78 x7 : ffff80000a49cc78 x6 : 0000000000000000 [ 158.984098][ T2915] x5 : 0000000000017ff4 x4 : 0000000000000000 x3 : 0000000000000000 [ 158.984900][ T2915] x2 : 0000000000000000 x1 : 0000000000000000 x0 : f6ff000004073f00 [ 158.985727][ T2915] Call trace: [ 158.986109][ T2915] usb_submit_urb+0x3ec/0x5c8 [ 158.986630][ T2915] usbnet_start_xmit+0x340/0x5dc [ 158.987154][ T2915] dev_hard_start_xmit+0x94/0x148 [ 158.987648][ T2915] sch_direct_xmit+0x90/0x1e4 [ 158.988202][ T2915] __dev_queue_xmit+0x468/0xd40 [ 158.988701][ T2915] neigh_resolve_output+0xfc/0x1c8 [ 158.989176][ T2915] ip6_finish_output2+0x1b0/0x7b8 [ 158.989650][ T2915] ip6_finish_output+0x220/0x360 [ 158.990138][ T2915] ip6_output+0x74/0x1d4 [ 158.990612][ T2915] ip6_local_out+0x48/0x5c [ 158.991099][ T2915] ip6_send_skb+0x28/0x120 [ 158.991569][ T2915] ip6_push_pending_frames+0x48/0x5c [ 158.992438][ T2915] rawv6_sendmsg+0xd0c/0x1068 [ 158.992996][ T2915] inet_sendmsg+0x44/0x70 [ 158.993462][ T2915] sock_sendmsg+0x54/0x60 [ 158.994015][ T2915] ____sys_sendmsg+0x268/0x2a4 [ 158.994506][ T2915] ___sys_sendmsg+0x80/0xdc [ 158.995146][ T2915] __sys_sendmsg+0x68/0xc4 [ 158.995664][ T2915] __arm64_sys_sendmsg+0x24/0x30 [ 158.996240][ T2915] invoke_syscall+0x48/0x114 [ 158.996724][ T2915] el0_svc_common.constprop.0+0x44/0xec [ 158.997390][ T2915] do_el0_svc+0x38/0xa4 [ 158.997917][ T2915] el0_svc+0x2c/0xb0 [ 158.998387][ T2915] el0t_64_sync_handler+0xb8/0xbc [ 158.998886][ T2915] el0t_64_sync+0x19c/0x1a0 [ 158.999528][ T2915] ---[ end trace 0000000000000000 ]--- [ 159.572500][ T9] ------------[ cut here ]------------ [ 159.573202][ T9] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 159.574126][ T9] WARNING: CPU: 0 PID: 9 at drivers/usb/core/urb.c:504 usb_submit_urb+0x3ec/0x5c8 [ 159.575193][ T9] Modules linked in: [ 159.575735][ T9] CPU: 0 PID: 9 Comm: kworker/0:1 Tainted: G W 6.4.0-rc5-syzkaller-00016-ga4d7d7011219 #0 [ 159.576604][ T9] Hardware name: linux,dummy-virt (DT) [ 159.577117][ T9] Workqueue: mld mld_dad_work [ 159.577826][ T9] pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 159.578527][ T9] pc : usb_submit_urb+0x3ec/0x5c8 [ 159.579199][ T9] lr : usb_submit_urb+0x3ec/0x5c8 [ 159.579902][ T9] sp : ffff80000a80b8d0 [ 159.580385][ T9] x29: ffff80000a80b8d0 x28: 0000000000000000 x27: fbff00000593b000 [ 159.581410][ T9] x26: 0000000000000001 x25: f8ff0000057458a8 x24: ffff800009ad45b8 [ 159.582551][ T9] x23: 0000000000000003 x22: 0000000000000003 x21: 0000000000000820 [ 159.583738][ T9] x20: f8ff000005745800 x19: f8ff000005b27c00 x18: 00000000fffffffe [ 159.584694][ T9] x17: ffff800075617000 x16: ffff800008000000 x15: 0000000000000020 [ 159.585637][ T9] x14: ffff80000a3ecc78 x13: 0000000000000ecd x12: 00000000000004ef [ 159.586534][ T9] x11: 202c726566782062 x10: ffff80000a49cc78 x9 : 00000000ffffe000 [ 159.587561][ T9] x8 : ffff80000a3ecc78 x7 : ffff80000a49cc78 x6 : 0000000000000000 [ 159.588407][ T9] x5 : ffff00007f9b7c88 x4 : 0000000000000000 x3 : ffff800075617000 [ 159.589356][ T9] x2 : 0000000000000000 x1 : 0000000000000000 x0 : f5ff000003098000 [ 159.590192][ T9] Call trace: [ 159.590643][ T9] usb_submit_urb+0x3ec/0x5c8 [ 159.591201][ T9] usbnet_start_xmit+0x340/0x5dc [ 159.591700][ T9] dev_hard_start_xmit+0x94/0x148 [ 159.592588][ T9] sch_direct_xmit+0x90/0x1e4 [ 159.593142][ T9] __dev_queue_xmit+0x468/0xd40 [ 159.593726][ T9] ip6_finish_output2+0x268/0x7b8 [ 159.594298][ T9] ip6_finish_output+0x220/0x360 [ 159.594935][ T9] ip6_output+0x74/0x1d4 [ 159.595454][ T9] NF_HOOK.constprop.0+0x50/0xe0 [ 159.596002][ T9] mld_sendpack+0x280/0x4b8 [ 159.596587][ T9] mld_send_initial_cr.part.0.isra.0+0x5c/0x70 [ 159.597235][ T9] mld_dad_work+0x60/0x20c [ 159.597719][ T9] process_one_work+0x1c0/0x30c [ 159.598245][ T9] worker_thread+0x70/0x418 [ 159.598814][ T9] kthread+0x118/0x11c [ 159.599336][ T9] ret_from_fork+0x10/0x20 [ 159.599909][ T9] ---[ end trace 0000000000000000 ]--- [ 160.453553][ T3087] ------------[ cut here ]------------ [ 160.454159][ T3087] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 160.454896][ T3087] WARNING: CPU: 1 PID: 3087 at drivers/usb/core/urb.c:504 usb_submit_urb+0x3ec/0x5c8 [ 160.455898][ T3087] Modules linked in: [ 160.456638][ T3087] CPU: 1 PID: 3087 Comm: dhcpcd Tainted: G W 6.4.0-rc5-syzkaller-00016-ga4d7d7011219 #0 [ 160.458112][ T3087] Hardware name: linux,dummy-virt (DT) [ 160.458964][ T3087] pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 160.459690][ T3087] pc : usb_submit_urb+0x3ec/0x5c8 [ 160.460269][ T3087] lr : usb_submit_urb+0x3ec/0x5c8 [ 160.460881][ T3087] sp : ffff80000ab43810 [ 160.461530][ T3087] x29: ffff80000ab43810 x28: 0000000000000000 x27: fdff00000593f000 [ 160.462569][ T3087] x26: 0000000000000001 x25: f8ff0000057458a8 x24: ffff800009ad45b8 [ 160.463602][ T3087] x23: 0000000000000003 x22: 0000000000000003 x21: 0000000000000820 [ 160.464481][ T3087] x20: f8ff000005745800 x19: f8ff000005b84100 x18: 00000000fffffffb [ 160.465601][ T3087] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000020 [ 160.466647][ T3087] x14: ffff80000a3ecc78 x13: 0000000000000f42 x12: 0000000000000516 [ 160.467734][ T3087] x11: 202c726566782062 x10: ffff80000a49cc78 x9 : 00000000ffffe000 [ 160.468636][ T3087] x8 : ffff80000a3ecc78 x7 : ffff80000a49cc78 x6 : 0000000000000000 [ 160.469735][ T3087] x5 : ffff00007f9cdc88 x4 : 0000000000000000 x3 : ffff80007562d000 [ 160.470658][ T3087] x2 : 0000000000000000 x1 : 0000000000000000 x0 : fcff00000548bf00 [ 160.471869][ T3087] Call trace: [ 160.472406][ T3087] usb_submit_urb+0x3ec/0x5c8 [ 160.472942][ T3087] usbnet_start_xmit+0x340/0x5dc [ 160.473468][ T3087] dev_hard_start_xmit+0x94/0x148 [ 160.473927][ T3087] sch_direct_xmit+0x90/0x1e4 [ 160.474381][ T3087] __dev_queue_xmit+0x468/0xd40 [ 160.474978][ T3087] packet_xmit+0xd8/0x14c [ 160.475574][ T3087] packet_sendmsg+0xeec/0x13d0 [ 160.476094][ T3087] sock_sendmsg+0x54/0x60 [ 160.476974][ T3087] sock_write_iter+0x94/0xf0 [ 160.477593][ T3087] do_iter_readv_writev+0xb8/0x144 [ 160.478139][ T3087] do_iter_write+0x94/0x214 [ 160.478718][ T3087] vfs_writev+0xac/0x170 [ 160.479283][ T3087] do_writev+0x118/0x130 [ 160.479964][ T3087] __arm64_sys_writev+0x20/0x2c [ 160.480530][ T3087] invoke_syscall+0x48/0x114 [ 160.481271][ T3087] el0_svc_common.constprop.0+0xcc/0xec [ 160.482350][ T3087] do_el0_svc+0x38/0xa4 [ 160.482948][ T3087] el0_svc+0x2c/0xb0 [ 160.483458][ T3087] el0t_64_sync_handler+0xb8/0xbc [ 160.484001][ T3087] el0t_64_sync+0x19c/0x1a0 [ 160.484361][ T3087] ---[ end trace 0000000000000000 ]--- [ 161.422724][ T2915] ------------[ cut here ]------------ [ 161.423624][ T2915] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 161.424350][ T2915] WARNING: CPU: 1 PID: 2915 at drivers/usb/core/urb.c:504 usb_submit_urb+0x3ec/0x5c8 [ 161.425579][ T2915] Modules linked in: [ 161.426079][ T2915] CPU: 1 PID: 2915 Comm: dhcpcd Tainted: G W 6.4.0-rc5-syzkaller-00016-ga4d7d7011219 #0 [ 161.427489][ T2915] Hardware name: linux,dummy-virt (DT) [ 161.427983][ T2915] pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 161.428895][ T2915] pc : usb_submit_urb+0x3ec/0x5c8 [ 161.429607][ T2915] lr : usb_submit_urb+0x3ec/0x5c8 [ 161.430152][ T2915] sp : ffff80000dd33590 [ 161.430609][ T2915] x29: ffff80000dd33590 x28: 0000000000000000 x27: fdff00000593f000 [ 161.431622][ T2915] x26: 0000000000000001 x25: f8ff0000057458a8 x24: ffff800009ad45b8 [ 161.432647][ T2915] x23: 0000000000000003 x22: 0000000000000003 x21: 0000000000000820 [ 161.433636][ T2915] x20: f8ff000005745800 x19: f0ff000005b84100 x18: 00000000fffffffb [ 161.434557][ T2915] x17: ffff80007562d000 x16: ffff800008008000 x15: 0000000000000020 [ 161.435532][ T2915] x14: ffff80000a3ecc78 x13: 0000000000000fc0 x12: 0000000000000540 [ 161.436627][ T2915] x11: 202c726566782062 x10: ffff80000a49cc78 x9 : 00000000ffffe000 [ 161.437601][ T2915] x8 : ffff80000a3ecc78 x7 : ffff80000a49cc78 x6 : 0000000000000000 [ 161.438687][ T2915] x5 : ffff00007f9cdc88 x4 : 0000000000000000 x3 : ffff80007562d000 [ 161.439604][ T2915] x2 : 0000000000000000 x1 : 0000000000000000 x0 : f6ff000004073f00 [ 161.440828][ T2915] Call trace: [ 161.441296][ T2915] usb_submit_urb+0x3ec/0x5c8 [ 161.441813][ T2915] usbnet_start_xmit+0x340/0x5dc [ 161.442473][ T2915] dev_hard_start_xmit+0x94/0x148 [ 161.443110][ T2915] sch_direct_xmit+0x90/0x1e4 [ 161.443635][ T2915] __dev_queue_xmit+0x468/0xd40 [ 161.444428][ T2915] ip6_finish_output2+0x268/0x7b8 [ 161.445056][ T2915] ip6_finish_output+0x220/0x360 [ 161.445625][ T2915] ip6_output+0x74/0x1d4 [ 161.446137][ T2915] ip6_local_out+0x48/0x5c [ 161.446777][ T2915] ip6_send_skb+0x28/0x120 [ 161.447375][ T2915] ip6_push_pending_frames+0x48/0x5c [ 161.447939][ T2915] rawv6_sendmsg+0xd0c/0x1068 [ 161.448880][ T2915] inet_sendmsg+0x44/0x70 [ 161.449479][ T2915] sock_sendmsg+0x54/0x60 [ 161.450061][ T2915] ____sys_sendmsg+0x268/0x2a4 [ 161.450646][ T2915] ___sys_sendmsg+0x80/0xdc [ 161.451445][ T2915] __sys_sendmsg+0x68/0xc4 [ 161.452430][ T2915] __arm64_sys_sendmsg+0x24/0x30 [ 161.453015][ T2915] invoke_syscall+0x48/0x114 [ 161.453566][ T2915] el0_svc_common.constprop.0+0x44/0xec [ 161.454142][ T2915] do_el0_svc+0x38/0xa4 [ 161.454621][ T2915] el0_svc+0x2c/0xb0 [ 161.455107][ T2915] el0t_64_sync_handler+0xb8/0xbc [ 161.455721][ T2915] el0t_64_sync+0x19c/0x1a0 [ 161.456222][ T2915] ---[ end trace 0000000000000000 ]--- [ 162.210964][ T3088] ------------[ cut here ]------------ [ 162.211723][ T3088] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 162.212809][ T3088] WARNING: CPU: 1 PID: 3088 at drivers/usb/core/urb.c:504 usb_submit_urb+0x3ec/0x5c8 [ 162.213746][ T3088] Modules linked in: [ 162.214392][ T3088] CPU: 1 PID: 3088 Comm: dhcpcd Tainted: G W 6.4.0-rc5-syzkaller-00016-ga4d7d7011219 #0 [ 162.215235][ T3088] Hardware name: linux,dummy-virt (DT) [ 162.215808][ T3088] pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 162.216611][ T3088] pc : usb_submit_urb+0x3ec/0x5c8 [ 162.217122][ T3088] lr : usb_submit_urb+0x3ec/0x5c8 [ 162.217626][ T3088] sp : ffff80000ab5b810 [ 162.218040][ T3088] x29: ffff80000ab5b810 x28: 0000000000000000 x27: fbff00000593b000 [ 162.218900][ T3088] x26: 0000000000000001 x25: f8ff0000057458a8 x24: ffff800009ad45b8 [ 162.219733][ T3088] x23: 0000000000000003 x22: 0000000000000003 x21: 0000000000000820 [ 162.222235][ T3088] x20: f8ff000005745800 x19: fbff000005b84100 x18: 00000000fffffffb [ 162.223331][ T3088] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000020 [ 162.225025][ T3088] x14: ffff80000a3ecc78 x13: 000000000000104a x12: 000000000000056e [ 162.227945][ T3088] x11: 202c726566782062 x10: ffff80000a49cc78 x9 : 00000000ffffe000 [ 162.230150][ T3088] x8 : ffff80000a3ecc78 x7 : ffff80000a49cc78 x6 : 0000000000000000 [ 162.231168][ T3088] x5 : ffff00007f9cdc88 x4 : 0000000000000000 x3 : ffff80007562d000 [ 162.232055][ T3088] x2 : 0000000000000000 x1 : 0000000000000000 x0 : fdff00000405af40 [ 162.232948][ T3088] Call trace: [ 162.233348][ T3088] usb_submit_urb+0x3ec/0x5c8 [ 162.233898][ T3088] usbnet_start_xmit+0x340/0x5dc [ 162.234590][ T3088] dev_hard_start_xmit+0x94/0x148 [ 162.235253][ T3088] sch_direct_xmit+0x90/0x1e4 [ 162.235781][ T3088] __dev_queue_xmit+0x468/0xd40 [ 162.236432][ T3088] packet_xmit+0xd8/0x14c [ 162.237091][ T3088] packet_sendmsg+0xeec/0x13d0 [ 162.237594][ T3088] sock_sendmsg+0x54/0x60 [ 162.238154][ T3088] sock_write_iter+0x94/0xf0 [ 162.238767][ T3088] do_iter_readv_writev+0xb8/0x144 [ 162.239430][ T3088] do_iter_write+0x94/0x214 [ 162.239961][ T3088] vfs_writev+0xac/0x170 [ 162.240698][ T3088] do_writev+0x118/0x130 [ 162.241248][ T3088] __arm64_sys_writev+0x20/0x2c [ 162.241753][ T3088] invoke_syscall+0x48/0x114 [ 162.242758][ T3088] el0_svc_common.constprop.0+0xcc/0xec [ 162.243344][ T3088] do_el0_svc+0x38/0xa4 [ 162.243805][ T3088] el0_svc+0x2c/0xb0 [ 162.244273][ T3088] el0t_64_sync_handler+0xb8/0xbc [ 162.245075][ T3088] el0t_64_sync+0x19c/0x1a0 [ 162.245758][ T3088] ---[ end trace 0000000000000000 ]--- [ 162.617055][ T3089] ------------[ cut here ]------------ [ 162.617841][ T3089] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 162.618567][ T3089] WARNING: CPU: 1 PID: 3089 at drivers/usb/core/urb.c:504 usb_submit_urb+0x3ec/0x5c8 [ 162.619520][ T3089] Modules linked in: [ 162.620047][ T3089] CPU: 1 PID: 3089 Comm: dhcpcd Tainted: G W 6.4.0-rc5-syzkaller-00016-ga4d7d7011219 #0 [ 162.621450][ T3089] Hardware name: linux,dummy-virt (DT) [ 162.621997][ T3089] pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 162.622652][ T3089] pc : usb_submit_urb+0x3ec/0x5c8 [ 162.623112][ T3089] lr : usb_submit_urb+0x3ec/0x5c8 [ 162.623628][ T3089] sp : ffff80000aae3810 [ 162.624059][ T3089] x29: ffff80000aae3810 x28: 0000000000000000 x27: fdff00000593f000 [ 162.624903][ T3089] x26: 0000000000000001 x25: f8ff0000057458a8 x24: ffff800009ad45b8 [ 162.625872][ T3089] x23: 0000000000000003 x22: 0000000000000003 x21: 0000000000000820 [ 162.626979][ T3089] x20: f8ff000005745800 x19: fdff000005b84200 x18: 00000000fffffffb [ 162.628020][ T3089] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000020 [ 162.628911][ T3089] x14: ffff80000a3ecc78 x13: 00000000000010c8 x12: 0000000000000598 [ 162.629912][ T3089] x11: 202c726566782062 x10: ffff80000a49cc78 x9 : 00000000ffffe000 [ 162.630754][ T3089] x8 : ffff80000a3ecc78 x7 : ffff80000a49cc78 x6 : 0000000000000000 [ 162.631655][ T3089] x5 : ffff00007f9cdc88 x4 : 0000000000000000 x3 : ffff80007562d000 [ 162.632709][ T3089] x2 : 0000000000000000 x1 : 0000000000000000 x0 : f1ff00000405ee40 [ 162.633605][ T3089] Call trace: [ 162.634164][ T3089] usb_submit_urb+0x3ec/0x5c8 [ 162.634644][ T3089] usbnet_start_xmit+0x340/0x5dc [ 162.635158][ T3089] dev_hard_start_xmit+0x94/0x148 [ 162.635700][ T3089] sch_direct_xmit+0x90/0x1e4 [ 162.636358][ T3089] __dev_queue_xmit+0x468/0xd40 [ 162.636833][ T3089] packet_xmit+0xd8/0x14c [ 162.637587][ T3089] packet_sendmsg+0xeec/0x13d0 [ 162.638050][ T3089] sock_sendmsg+0x54/0x60 [ 162.638583][ T3089] sock_write_iter+0x94/0xf0 [ 162.639098][ T3089] do_iter_readv_writev+0xb8/0x144 [ 162.639772][ T3089] do_iter_write+0x94/0x214 [ 162.640378][ T3089] vfs_writev+0xac/0x170 [ 162.640902][ T3089] do_writev+0x118/0x130 [ 162.641388][ T3089] __arm64_sys_writev+0x20/0x2c [ 162.642113][ T3089] invoke_syscall+0x48/0x114 [ 162.642651][ T3089] el0_svc_common.constprop.0+0xcc/0xec [ 162.643238][ T3089] do_el0_svc+0x38/0xa4 [ 162.643664][ T3089] el0_svc+0x2c/0xb0 [ 162.644414][ T3089] el0t_64_sync_handler+0xb8/0xbc [ 162.644975][ T3089] el0t_64_sync+0x19c/0x1a0 [ 162.645489][ T3089] ---[ end trace 0000000000000000 ]--- [ 162.952483][ T2915] ------------[ cut here ]------------ [ 162.954610][ T2915] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 162.956183][ T2915] WARNING: CPU: 1 PID: 2915 at drivers/usb/core/urb.c:504 usb_submit_urb+0x3ec/0x5c8 [ 162.957072][ T2915] Modules linked in: [ 162.957677][ T2915] CPU: 1 PID: 2915 Comm: dhcpcd Tainted: G W 6.4.0-rc5-syzkaller-00016-ga4d7d7011219 #0 [ 162.958494][ T2915] Hardware name: linux,dummy-virt (DT) [ 162.959002][ T2915] pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 162.961697][ T2915] pc : usb_submit_urb+0x3ec/0x5c8 [ 162.963339][ T2915] lr : usb_submit_urb+0x3ec/0x5c8 [ 162.964899][ T2915] sp : ffff80000dd33590 [ 162.966532][ T2915] x29: ffff80000dd33590 x28: 0000000000000000 x27: fbff00000593b000 [ 162.969494][ T2915] x26: 0000000000000001 x25: f8ff0000057458a8 x24: ffff800009ad45b8 [ 162.972786][ T2915] x23: 0000000000000003 x22: 0000000000000003 x21: 0000000000000820 [ 162.974721][ T2915] x20: f8ff000005745800 x19: fdff000005b84200 x18: 00000000fffffffb [ 162.975596][ T2915] x17: ffff80007562d000 x16: ffff800008008000 x15: 0000000000000020 [ 162.976685][ T2915] x14: ffff80000a3ecc78 x13: 0000000000001146 x12: 00000000000005c2 [ 162.977529][ T2915] x11: 202c726566782062 x10: ffff80000a49cc78 x9 : 00000000ffffe000 [ 162.980665][ T2915] x8 : ffff80000a3ecc78 x7 : ffff80000a49cc78 x6 : 0000000000000000 [ 162.983192][ T2915] x5 : ffff00007f9cdc88 x4 : 0000000000000000 x3 : ffff80007562d000 [ 162.984020][ T2915] x2 : 0000000000000000 x1 : 0000000000000000 x0 : f6ff000004073f00 [ 162.984860][ T2915] Call trace: [ 162.985236][ T2915] usb_submit_urb+0x3ec/0x5c8 [ 162.985743][ T2915] usbnet_start_xmit+0x340/0x5dc [ 162.986532][ T2915] dev_hard_start_xmit+0x94/0x148 [ 162.987031][ T2915] sch_direct_xmit+0x90/0x1e4 [ 162.987671][ T2915] __dev_queue_xmit+0x468/0xd40 [ 162.988617][ T2915] ip6_finish_output2+0x268/0x7b8 [ 162.989120][ T2915] ip6_finish_output+0x220/0x360 [ 162.989642][ T2915] ip6_output+0x74/0x1d4 [ 162.990351][ T2915] ip6_local_out+0x48/0x5c [ 162.991113][ T2915] ip6_send_skb+0x28/0x120 [ 162.991616][ T2915] ip6_push_pending_frames+0x48/0x5c [ 162.992319][ T2915] rawv6_sendmsg+0xd0c/0x1068 [ 162.992865][ T2915] inet_sendmsg+0x44/0x70 [ 162.993353][ T2915] sock_sendmsg+0x54/0x60 [ 162.993846][ T2915] ____sys_sendmsg+0x268/0x2a4 [ 162.994532][ T2915] ___sys_sendmsg+0x80/0xdc [ 162.995083][ T2915] __sys_sendmsg+0x68/0xc4 [ 162.995595][ T2915] __arm64_sys_sendmsg+0x24/0x30 [ 162.996144][ T2915] invoke_syscall+0x48/0x114 [ 162.996817][ T2915] el0_svc_common.constprop.0+0x44/0xec [ 162.997549][ T2915] do_el0_svc+0x38/0xa4 [ 162.998033][ T2915] el0_svc+0x2c/0xb0 [ 162.999601][ T2915] el0t_64_sync_handler+0xb8/0xbc [ 163.001580][ T2915] el0t_64_sync+0x19c/0x1a0 [ 163.003163][ T2915] ---[ end trace 0000000000000000 ]--- [ 163.205896][ T3089] ------------[ cut here ]------------ [ 163.206548][ T3089] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 163.207262][ T3089] WARNING: CPU: 1 PID: 3089 at drivers/usb/core/urb.c:504 usb_submit_urb+0x3ec/0x5c8 [ 163.208168][ T3089] Modules linked in: [ 163.208691][ T3089] CPU: 1 PID: 3089 Comm: dhcpcd Tainted: G W 6.4.0-rc5-syzkaller-00016-ga4d7d7011219 #0 [ 163.209561][ T3089] Hardware name: linux,dummy-virt (DT) [ 163.210025][ T3089] pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 163.210669][ T3089] pc : usb_submit_urb+0x3ec/0x5c8 [ 163.211158][ T3089] lr : usb_submit_urb+0x3ec/0x5c8 [ 163.211657][ T3089] sp : ffff80000aae3810 [ 163.212284][ T3089] x29: ffff80000aae3810 x28: 0000000000000000 x27: fdff00000593f000 [ 163.213165][ T3089] x26: 0000000000000001 x25: f8ff0000057458a8 x24: ffff800009ad45b8 [ 163.214009][ T3089] x23: 0000000000000003 x22: 0000000000000003 x21: 0000000000000820 [ 163.214760][ T3089] x20: f8ff000005745800 x19: faff000005b84200 x18: 00000000fffffffb [ 163.215518][ T3089] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000020 [ 163.216379][ T3089] x14: ffff80000a3ecc78 x13: 00000000000011d0 x12: 00000000000005f0 [ 163.217164][ T3089] x11: 202c726566782062 x10: ffff80000a49cc78 x9 : 00000000ffffe000 [ 163.217927][ T3089] x8 : ffff80000a3ecc78 x7 : ffff80000a49cc78 x6 : 0000000000000000 [ 163.218716][ T3089] x5 : 0000000000017ff4 x4 : 0000000000000000 x3 : 0000000000000000 [ 163.219512][ T3089] x2 : 0000000000000000 x1 : 0000000000000000 x0 : f1ff00000405ee40 [ 163.220340][ T3089] Call trace: [ 163.220738][ T3089] usb_submit_urb+0x3ec/0x5c8 [ 163.221251][ T3089] usbnet_start_xmit+0x340/0x5dc [ 163.221785][ T3089] dev_hard_start_xmit+0x94/0x148 [ 163.222532][ T3089] sch_direct_xmit+0x90/0x1e4 [ 163.223030][ T3089] __dev_queue_xmit+0x468/0xd40 [ 163.223566][ T3089] packet_xmit+0xd8/0x14c [ 163.224053][ T3089] packet_sendmsg+0xeec/0x13d0 [ 163.224525][ T3089] sock_sendmsg+0x54/0x60 [ 163.224968][ T3089] sock_write_iter+0x94/0xf0 [ 163.225432][ T3089] do_iter_readv_writev+0xb8/0x144 [ 163.225930][ T3089] do_iter_write+0x94/0x214 [ 163.226414][ T3089] vfs_writev+0xac/0x170 [ 163.226871][ T3089] do_writev+0x118/0x130 [ 163.227449][ T3089] __arm64_sys_writev+0x20/0x2c [ 163.228001][ T3089] invoke_syscall+0x48/0x114 [ 163.228580][ T3089] el0_svc_common.constprop.0+0xcc/0xec [ 163.229191][ T3089] do_el0_svc+0x38/0xa4 [ 163.229692][ T3089] el0_svc+0x2c/0xb0 [ 163.230201][ T3089] el0t_64_sync_handler+0xb8/0xbc [ 163.230730][ T3089] el0t_64_sync+0x19c/0x1a0 [ 163.231266][ T3089] ---[ end trace 0000000000000000 ]--- [ 163.502735][ T1729] usb 1-1: USB disconnect, device number 2 [ 163.547332][ T1729] cdc_subset 1-1:101.16 usb0: unregister 'cdc_subset' usb-dummy_hcd.0-1, Epson USB Device executing program [ 163.737066][ T1729] cdc_subset 1-1:101.101 usb1: unregister 'cdc_subset' usb-dummy_hcd.0-1, Epson USB Device [ 164.273565][ T1729] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 164.533243][ T1729] usb 1-1: Using ep0 maxpacket: 16 [ 164.724053][ T1729] usb 1-1: unable to get BOS descriptor or descriptor too short [ 164.814829][ T1729] usb 1-1: config 101 has an invalid interface number: 16 but max is 1 [ 164.816113][ T1729] usb 1-1: config 101 has an invalid interface number: 101 but max is 1 [ 164.817049][ T1729] usb 1-1: config 101 has an invalid interface association descriptor of length 2, skipping [ 164.818044][ T1729] usb 1-1: config 101 has no interface number 0 [ 164.818755][ T1729] usb 1-1: config 101 has no interface number 1 [ 164.819630][ T1729] usb 1-1: config 101 interface 16 altsetting 220 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 164.821003][ T1729] usb 1-1: config 101 interface 16 altsetting 220 has an invalid endpoint with address 0x80, skipping [ 164.843088][ T1729] usb 1-1: config 101 interface 16 altsetting 220 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 164.844269][ T1729] usb 1-1: config 101 interface 16 altsetting 220 has an invalid endpoint with address 0x80, skipping [ 164.845531][ T1729] usb 1-1: config 101 interface 16 altsetting 220 has a duplicate endpoint with address 0x9, skipping [ 164.846500][ T1729] usb 1-1: config 101 interface 16 altsetting 220 has a duplicate endpoint with address 0x9, skipping [ 164.847541][ T1729] usb 1-1: config 101 interface 16 altsetting 220 bulk endpoint 0x4 has invalid maxpacket 1023 [ 164.848637][ T1729] usb 1-1: config 101 interface 16 altsetting 220 has a duplicate endpoint with address 0x86, skipping [ 164.850034][ T1729] usb 1-1: config 101 interface 16 altsetting 220 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 164.851384][ T1729] usb 1-1: config 101 interface 101 altsetting 7 has a duplicate endpoint with address 0x5, skipping [ 164.873127][ T1729] usb 1-1: config 101 interface 101 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 164.874144][ T1729] usb 1-1: config 101 interface 101 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 164.875202][ T1729] usb 1-1: config 101 interface 101 altsetting 7 has a duplicate endpoint with address 0x1, skipping [ 164.876221][ T1729] usb 1-1: config 101 interface 101 altsetting 7 has a duplicate endpoint with address 0x6, skipping [ 164.877409][ T1729] usb 1-1: config 101 interface 101 altsetting 7 has a duplicate endpoint with address 0x1, skipping [ 164.878314][ T1729] usb 1-1: config 101 interface 101 altsetting 7 has a duplicate endpoint with address 0x5, skipping [ 164.879459][ T1729] usb 1-1: config 101 interface 16 has no altsetting 0 [ 164.880359][ T1729] usb 1-1: config 101 interface 101 has no altsetting 0 [ 165.143470][ T1729] usb 1-1: string descriptor 0 read error: -22 [ 165.144804][ T1729] usb 1-1: New USB device found, idVendor=0525, idProduct=2888, bcdDevice=6e.b7 [ 165.145670][ T1729] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.492847][ T1729] cdc_subset 1-1:101.16 usb0: register 'cdc_subset' at usb-dummy_hcd.0-1, Epson USB Device, ca:21:f9:8d:84:b2 [ 165.695346][ T1729] cdc_subset 1-1:101.101 usb1: register 'cdc_subset' at usb-dummy_hcd.0-1, Epson USB Device, ca:21:f9:8d:84:b2 [ 175.320129][ T9] ------------[ cut here ]------------ [ 175.320747][ T9] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 175.321541][ T9] WARNING: CPU: 0 PID: 9 at drivers/usb/core/urb.c:504 usb_submit_urb+0x3ec/0x5c8 [ 175.322498][ T9] Modules linked in: [ 175.323082][ T9] CPU: 0 PID: 9 Comm: kworker/0:1 Tainted: G W 6.4.0-rc5-syzkaller-00016-ga4d7d7011219 #0 [ 175.323948][ T9] Hardware name: linux,dummy-virt (DT) [ 175.324443][ T9] Workqueue: mld mld_ifc_work [ 175.325135][ T9] pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 175.325892][ T9] pc : usb_submit_urb+0x3ec/0x5c8 [ 175.326517][ T9] lr : usb_submit_urb+0x3ec/0x5c8 [ 175.327087][ T9] sp : ffff80000a80b870 [ 175.327580][ T9] x29: ffff80000a80b870 x28: 0000000000000000 x27: f1ff000005596000 [ 175.328647][ T9] x26: 0000000000000001 x25: f2ff000006d380a8 x24: ffff800009ad45b8 [ 175.329635][ T9] x23: 0000000000000003 x22: 0000000000000003 x21: 0000000000000820 [ 175.330954][ T9] x20: f2ff000006d38000 x19: faff000005b27f00 x18: 00000000fffffffe [ 175.331871][ T9] x17: ffff800075617000 x16: ffff800008000000 x15: 0000000000000020 [ 175.332839][ T9] x14: ffff80000a3ecc78 x13: 00000000000012b4 x12: 000000000000063c [ 175.333689][ T9] x11: 202c726566782062 x10: ffff80000a49cc78 x9 : 00000000ffffe000 [ 175.335094][ T9] x8 : ffff80000a3ecc78 x7 : ffff80000a49cc78 x6 : 0000000000000000 [ 175.335924][ T9] x5 : ffff00007f9b7c88 x4 : 0000000000000000 x3 : ffff800075617000 [ 175.336846][ T9] x2 : 0000000000000000 x1 : 0000000000000000 x0 : f5ff000003098000 [ 175.337920][ T9] Call trace: [ 175.338303][ T9] usb_submit_urb+0x3ec/0x5c8 [ 175.338982][ T9] usbnet_start_xmit+0x340/0x5dc [ 175.339567][ T9] dev_hard_start_xmit+0x94/0x148 [ 175.340143][ T9] sch_direct_xmit+0x90/0x1e4 [ 175.340762][ T9] __dev_queue_xmit+0x468/0xd40 [ 175.341333][ T9] neigh_resolve_output+0xfc/0x1c8 [ 175.341888][ T9] ip6_finish_output2+0x1b0/0x7b8 [ 175.342570][ T9] ip6_finish_output+0x220/0x360 [ 175.343206][ T9] ip6_output+0x74/0x1d4 [ 175.343724][ T9] NF_HOOK.constprop.0+0x50/0xe0 [ 175.344324][ T9] mld_sendpack+0x280/0x4b8 [ 175.344925][ T9] mld_ifc_work+0x1d0/0x4bc [ 175.345419][ T9] process_one_work+0x1c0/0x30c [ 175.345938][ T9] worker_thread+0x70/0x418 [ 175.346547][ T9] kthread+0x118/0x11c [ 175.347041][ T9] ret_from_fork+0x10/0x20 [ 175.347510][ T9] ---[ end trace 0000000000000000 ]--- [ 175.567777][ T9] ------------[ cut here ]------------ [ 175.568479][ T9] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 175.569154][ T9] WARNING: CPU: 0 PID: 9 at drivers/usb/core/urb.c:504 usb_submit_urb+0x3ec/0x5c8 [ 175.569941][ T9] Modules linked in: [ 175.570395][ T9] CPU: 0 PID: 9 Comm: kworker/0:1 Tainted: G W 6.4.0-rc5-syzkaller-00016-ga4d7d7011219 #0 [ 175.571152][ T9] Hardware name: linux,dummy-virt (DT) [ 175.571629][ T9] Workqueue: ipv6_addrconf addrconf_dad_work [ 175.572486][ T9] pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 175.573273][ T9] pc : usb_submit_urb+0x3ec/0x5c8 [ 175.573946][ T9] lr : usb_submit_urb+0x3ec/0x5c8 [ 175.574455][ T9] sp : ffff80000a80b800 [ 175.574867][ T9] x29: ffff80000a80b800 x28: 0000000000000000 x27: f1ff000005596000 [ 175.577544][ T9] x26: 0000000000000001 x25: f2ff000006d380a8 x24: ffff800009ad45b8 [ 175.578419][ T9] x23: 0000000000000003 x22: 0000000000000003 x21: 0000000000000820 [ 175.579224][ T9] x20: f2ff000006d38000 x19: fbff000005b27f00 x18: 00000000fffffffe [ 175.580056][ T9] x17: ffff800075617000 x16: ffff800008000000 x15: 0000000000000020 [ 175.580813][ T9] x14: ffff80000a3ecc78 x13: 0000000000001329 x12: 0000000000000663 [ 175.581580][ T9] x11: 202c726566782062 x10: ffff80000a49cc78 x9 : 00000000ffffe000 [ 175.582822][ T9] x8 : ffff80000a3ecc78 x7 : ffff80000a49cc78 x6 : 0000000000000000 [ 175.583609][ T9] x5 : ffff00007f9b7c88 x4 : 0000000000000000 x3 : ffff800075617000 [ 175.584422][ T9] x2 : 0000000000000000 x1 : 0000000000000000 x0 : f5ff000003098000 [ 175.585197][ T9] Call trace: [ 175.585600][ T9] usb_submit_urb+0x3ec/0x5c8 [ 175.586092][ T9] usbnet_start_xmit+0x340/0x5dc [ 175.586571][ T9] dev_hard_start_xmit+0x94/0x148 [ 175.587077][ T9] sch_direct_xmit+0x90/0x1e4 [ 175.587546][ T9] __dev_queue_xmit+0x468/0xd40 [ 175.588063][ T9] neigh_resolve_output+0xfc/0x1c8 [ 175.588537][ T9] ip6_finish_output2+0x1b0/0x7b8 [ 175.589020][ T9] ip6_finish_output+0x220/0x360 [ 175.589482][ T9] ip6_output+0x74/0x1d4 [ 175.589943][ T9] NF_HOOK.constprop.0+0x50/0xe0 [ 175.590451][ T9] ndisc_send_skb+0x2f0/0x488 [ 175.590957][ T9] ndisc_send_ns+0x64/0xb0 [ 175.591485][ T9] addrconf_dad_work+0x3d4/0x594 [ 175.592273][ T9] process_one_work+0x1c0/0x30c [ 175.592745][ T9] worker_thread+0x70/0x418 [ 175.593205][ T9] kthread+0x118/0x11c [ 175.593658][ T9] ret_from_fork+0x10/0x20 [ 175.594115][ T9] ---[ end trace 0000000000000000 ]--- [ 176.135643][ T1729] ------------[ cut here ]------------ [ 176.136372][ T1729] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 176.137185][ T1729] WARNING: CPU: 1 PID: 1729 at drivers/usb/core/urb.c:504 usb_submit_urb+0x3ec/0x5c8 [ 176.138139][ T1729] Modules linked in: [ 176.138756][ T1729] CPU: 1 PID: 1729 Comm: kworker/1:2 Tainted: G W 6.4.0-rc5-syzkaller-00016-ga4d7d7011219 #0 [ 176.143219][ T1729] Hardware name: linux,dummy-virt (DT) [ 176.145414][ T1729] Workqueue: mld mld_ifc_work [ 176.146001][ T1729] pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 176.147166][ T1729] pc : usb_submit_urb+0x3ec/0x5c8 [ 176.147639][ T1729] lr : usb_submit_urb+0x3ec/0x5c8 [ 176.148324][ T1729] sp : ffff80000c783870 [ 176.148727][ T1729] x29: ffff80000c783870 x28: 0000000000000000 x27: f4ff000005938000 [ 176.149558][ T1729] x26: 0000000000000001 x25: f2ff000006d380a8 x24: ffff800009ad45b8 [ 176.150397][ T1729] x23: 0000000000000003 x22: 0000000000000003 x21: 0000000000000820 [ 176.151338][ T1729] x20: f2ff000006d38000 x19: f2ff000005ad5500 x18: 00000000fffffffb [ 176.152297][ T1729] x17: ffff80007562d000 x16: ffff800008008000 x15: 0000000000000020 [ 176.153149][ T1729] x14: ffff80000a3ecc78 x13: 00000000000013a1 x12: 000000000000068b [ 176.153960][ T1729] x11: 202c726566782062 x10: ffff80000a49cc78 x9 : 00000000ffffe000 [ 176.154756][ T1729] x8 : ffff80000a3ecc78 x7 : ffff80000a49cc78 x6 : 0000000000000000 [ 176.155581][ T1729] x5 : ffff00007f9cdc88 x4 : 0000000000000000 x3 : ffff80007562d000 [ 176.156418][ T1729] x2 : 0000000000000000 x1 : 0000000000000000 x0 : f7ff00000547cec0 [ 176.157171][ T1729] Call trace: [ 176.157513][ T1729] usb_submit_urb+0x3ec/0x5c8 [ 176.157970][ T1729] usbnet_start_xmit+0x340/0x5dc [ 176.158504][ T1729] dev_hard_start_xmit+0x94/0x148 [ 176.158973][ T1729] sch_direct_xmit+0x90/0x1e4 [ 176.159626][ T1729] __dev_queue_xmit+0x468/0xd40 [ 176.160167][ T1729] neigh_resolve_output+0xfc/0x1c8 [ 176.160667][ T1729] ip6_finish_output2+0x1b0/0x7b8 [ 176.161190][ T1729] ip6_finish_output+0x220/0x360 [ 176.161714][ T1729] ip6_output+0x74/0x1d4 [ 176.162339][ T1729] NF_HOOK.constprop.0+0x50/0xe0 [ 176.162872][ T1729] mld_sendpack+0x280/0x4b8 [ 176.163375][ T1729] mld_ifc_work+0x1d0/0x4bc [ 176.163927][ T1729] process_one_work+0x1c0/0x30c [ 176.164439][ T1729] worker_thread+0x70/0x418 [ 176.164924][ T1729] kthread+0x118/0x11c [ 176.165431][ T1729] ret_from_fork+0x10/0x20 [ 176.165985][ T1729] ---[ end trace 0000000000000000 ]--- [ 176.372685][ T9] ------------[ cut here ]------------ [ 176.373351][ T9] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 176.374046][ T9] WARNING: CPU: 0 PID: 9 at drivers/usb/core/urb.c:504 usb_submit_urb+0x3ec/0x5c8 [ 176.374890][ T9] Modules linked in: [ 176.375410][ T9] CPU: 0 PID: 9 Comm: kworker/0:1 Tainted: G W 6.4.0-rc5-syzkaller-00016-ga4d7d7011219 #0 [ 176.376263][ T9] Hardware name: linux,dummy-virt (DT) [ 176.376757][ T9] Workqueue: mld mld_ifc_work [ 176.377382][ T9] pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 176.378046][ T9] pc : usb_submit_urb+0x3ec/0x5c8 [ 176.378548][ T9] lr : usb_submit_urb+0x3ec/0x5c8 [ 176.379055][ T9] sp : ffff80000a80b8b0 [ 176.379464][ T9] x29: ffff80000a80b8b0 x28: 0000000000000000 x27: f1ff000005596000 [ 176.380461][ T9] x26: 0000000000000001 x25: f2ff000006d380a8 x24: ffff800009ad45b8 [ 176.381326][ T9] x23: 0000000000000003 x22: 0000000000000003 x21: 0000000000000820 [ 176.382616][ T9] x20: f2ff000006d38000 x19: f4ff000005b27f00 x18: 00000000fffffffe [ 176.383495][ T9] x17: ffff800075617000 x16: ffff800008000000 x15: 0000000000000020 [ 176.384411][ T9] x14: ffff80000a3ecc78 x13: 0000000000001416 x12: 00000000000006b2 [ 176.385287][ T9] x11: 202c726566782062 x10: ffff80000a49cc78 x9 : 00000000ffffe000 [ 176.386165][ T9] x8 : ffff80000a3ecc78 x7 : ffff80000a49cc78 x6 : 0000000000000000 [ 176.387006][ T9] x5 : ffff00007f9b7c88 x4 : 0000000000000000 x3 : ffff800075617000 [ 176.387894][ T9] x2 : 0000000000000000 x1 : 0000000000000000 x0 : f5ff000003098000 [ 176.388862][ T9] Call trace: [ 176.389246][ T9] usb_submit_urb+0x3ec/0x5c8 [ 176.389768][ T9] usbnet_start_xmit+0x340/0x5dc [ 176.390311][ T9] dev_hard_start_xmit+0x94/0x148 [ 176.390831][ T9] sch_direct_xmit+0x90/0x1e4 [ 176.391335][ T9] __dev_queue_xmit+0x468/0xd40 [ 176.392031][ T9] ip6_finish_output2+0x268/0x7b8 [ 176.392633][ T9] ip6_finish_output+0x220/0x360 [ 176.393151][ T9] ip6_output+0x74/0x1d4 [ 176.393643][ T9] NF_HOOK.constprop.0+0x50/0xe0 [ 176.394164][ T9] mld_sendpack+0x280/0x4b8 [ 176.394669][ T9] mld_ifc_work+0x1d0/0x4bc [ 176.395173][ T9] process_one_work+0x1c0/0x30c [ 176.395681][ T9] worker_thread+0x70/0x418 [ 176.396230][ T9] kthread+0x118/0x11c [ 176.396726][ T9] ret_from_fork+0x10/0x20 [ 176.397244][ T9] ---[ end trace 0000000000000000 ]--- [ 176.420904][ T1729] ------------[ cut here ]------------ [ 176.422852][ T1729] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 176.423735][ T1729] WARNING: CPU: 1 PID: 1729 at drivers/usb/core/urb.c:504 usb_submit_urb+0x3ec/0x5c8 [ 176.424704][ T1729] Modules linked in: [ 176.425287][ T1729] CPU: 1 PID: 1729 Comm: kworker/1:2 Tainted: G W 6.4.0-rc5-syzkaller-00016-ga4d7d7011219 #0 [ 176.426221][ T1729] Hardware name: linux,dummy-virt (DT) [ 176.426787][ T1729] Workqueue: ipv6_addrconf addrconf_dad_work [ 176.427496][ T1729] pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 176.428175][ T1729] pc : usb_submit_urb+0x3ec/0x5c8 [ 176.428821][ T1729] lr : usb_submit_urb+0x3ec/0x5c8 [ 176.429436][ T1729] sp : ffff80000c783800 [ 176.429874][ T1729] x29: ffff80000c783800 x28: 0000000000000000 x27: f4ff000005938000 [ 176.430954][ T1729] x26: 0000000000000001 x25: f2ff000006d380a8 x24: ffff800009ad45b8 [ 176.431990][ T1729] x23: 0000000000000003 x22: 0000000000000003 x21: 0000000000000820 [ 176.433206][ T1729] x20: f2ff000006d38000 x19: fdff000005ad5500 x18: 00000000fffffffb [ 176.434269][ T1729] x17: ffff80007562d000 x16: ffff800008008000 x15: 0000000000000020 [ 176.435404][ T1729] x14: ffff80000a3ecc78 x13: 0000000000001488 x12: 00000000000006d8 [ 176.436297][ T1729] x11: 202c726566782062 x10: ffff80000a49cc78 x9 : 00000000ffffe000 [ 176.437283][ T1729] x8 : ffff80000a3ecc78 x7 : ffff80000a49cc78 x6 : 0000000000000000 [ 176.438165][ T1729] x5 : 0000000000017ff4 x4 : 0000000000000000 x3 : 0000000000000000 [ 176.439047][ T1729] x2 : 0000000000000000 x1 : 0000000000000000 x0 : f7ff00000547cec0 [ 176.440124][ T1729] Call trace: [ 176.440505][ T1729] usb_submit_urb+0x3ec/0x5c8 [ 176.441165][ T1729] usbnet_start_xmit+0x340/0x5dc [ 176.441744][ T1729] dev_hard_start_xmit+0x94/0x148 [ 176.442416][ T1729] sch_direct_xmit+0x90/0x1e4 [ 176.443102][ T1729] __dev_queue_xmit+0x468/0xd40 [ 176.443749][ T1729] neigh_resolve_output+0xfc/0x1c8 [ 176.444256][ T1729] ip6_finish_output2+0x1b0/0x7b8 [ 176.444851][ T1729] ip6_finish_output+0x220/0x360 [ 176.445388][ T1729] ip6_output+0x74/0x1d4 [ 176.445938][ T1729] NF_HOOK.constprop.0+0x50/0xe0 [ 176.446505][ T1729] ndisc_send_skb+0x2f0/0x488 [ 176.447211][ T1729] ndisc_send_ns+0x64/0xb0 [ 176.447724][ T1729] addrconf_dad_work+0x3d4/0x594 [ 176.448289][ T1729] process_one_work+0x1c0/0x30c [ 176.448878][ T1729] worker_thread+0x70/0x418 [ 176.449494][ T1729] kthread+0x118/0x11c [ 176.450156][ T1729] ret_from_fork+0x10/0x20 [ 176.450652][ T1729] ---[ end trace 0000000000000000 ]--- [ 176.680449][ T9] ------------[ cut here ]------------ [ 176.681186][ T9] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 176.681951][ T9] WARNING: CPU: 0 PID: 9 at drivers/usb/core/urb.c:504 usb_submit_urb+0x3ec/0x5c8 [ 176.683087][ T9] Modules linked in: [ 176.683631][ T9] CPU: 0 PID: 9 Comm: kworker/0:1 Tainted: G W 6.4.0-rc5-syzkaller-00016-ga4d7d7011219 #0 [ 176.684475][ T9] Hardware name: linux,dummy-virt (DT) [ 176.684948][ T9] Workqueue: ipv6_addrconf addrconf_dad_work [ 176.685548][ T9] pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 176.686203][ T9] pc : usb_submit_urb+0x3ec/0x5c8 [ 176.686707][ T9] lr : usb_submit_urb+0x3ec/0x5c8 [ 176.687188][ T9] sp : ffff80000a80b800 [ 176.687592][ T9] x29: ffff80000a80b800 x28: 0000000000000000 x27: f1ff000005596000 [ 176.688472][ T9] x26: 0000000000000001 x25: f2ff000006d380a8 x24: ffff800009ad45b8 [ 176.689288][ T9] x23: 0000000000000003 x22: 0000000000000003 x21: 0000000000000820 [ 176.690171][ T9] x20: f2ff000006d38000 x19: f2ff000005b27f00 x18: 00000000fffffffe [ 176.691010][ T9] x17: ffff800075617000 x16: ffff800008000000 x15: 0000000000000020 [ 176.691946][ T9] x14: ffff80000a3ecc78 x13: 0000000000001500 x12: 0000000000000700 [ 176.692825][ T9] x11: 202c726566782062 x10: ffff80000a49cc78 x9 : 00000000ffffe000 [ 176.693663][ T9] x8 : ffff80000a3ecc78 x7 : ffff80000a49cc78 x6 : 0000000000000000 [ 176.694455][ T9] x5 : 0000000000017ff4 x4 : 0000000000000000 x3 : 0000000000000000 [ 176.695247][ T9] x2 : 0000000000000000 x1 : 0000000000000000 x0 : f5ff000003098000 [ 176.696093][ T9] Call trace: [ 176.696474][ T9] usb_submit_urb+0x3ec/0x5c8 [ 176.697010][ T9] usbnet_start_xmit+0x340/0x5dc [ 176.697522][ T9] dev_hard_start_xmit+0x94/0x148 [ 176.698044][ T9] sch_direct_xmit+0x90/0x1e4 [ 176.698515][ T9] __dev_queue_xmit+0x468/0xd40 [ 176.698995][ T9] ip6_finish_output2+0x268/0x7b8 [ 176.699477][ T9] ip6_finish_output+0x220/0x360 [ 176.700137][ T9] ip6_output+0x74/0x1d4 [ 176.701081][ T9] NF_HOOK.constprop.0+0x50/0xe0 [ 176.701588][ T9] mld_sendpack+0x280/0x4b8 [ 176.702176][ T9] mld_send_initial_cr.part.0.isra.0+0x5c/0x70 [ 176.704187][ T9] ipv6_mc_dad_complete+0x78/0x17c [ 176.705618][ T9] addrconf_dad_completed+0x31c/0x3a8 [ 176.706848][ T9] addrconf_dad_work+0x254/0x594 [ 176.708053][ T9] process_one_work+0x1c0/0x30c [ 176.709447][ T9] worker_thread+0x70/0x418 [ 176.710844][ T9] kthread+0x118/0x11c [ 176.711947][ T9] ret_from_fork+0x10/0x20 [ 176.713500][ T9] ---[ end trace 0000000000000000 ]--- [ 177.008807][ T1729] ------------[ cut here ]------------ [ 177.009482][ T1729] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 177.010179][ T1729] WARNING: CPU: 1 PID: 1729 at drivers/usb/core/urb.c:504 usb_submit_urb+0x3ec/0x5c8 [ 177.011043][ T1729] Modules linked in: [ 177.011545][ T1729] CPU: 1 PID: 1729 Comm: kworker/1:2 Tainted: G W 6.4.0-rc5-syzkaller-00016-ga4d7d7011219 #0 [ 177.012515][ T1729] Hardware name: linux,dummy-virt (DT) [ 177.013105][ T1729] Workqueue: mld mld_ifc_work [ 177.013697][ T1729] pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 177.014463][ T1729] pc : usb_submit_urb+0x3ec/0x5c8 [ 177.014971][ T1729] lr : usb_submit_urb+0x3ec/0x5c8 [ 177.015428][ T1729] sp : ffff80000c7838b0 [ 177.015857][ T1729] x29: ffff80000c7838b0 x28: 0000000000000000 x27: f4ff000005938000 [ 177.016693][ T1729] x26: 0000000000000001 x25: f2ff000006d380a8 x24: ffff800009ad45b8 [ 177.017490][ T1729] x23: 0000000000000003 x22: 0000000000000003 x21: 0000000000000820 [ 177.018242][ T1729] x20: f2ff000006d38000 x19: f4ff000005ad5600 x18: 00000000fffffffb [ 177.019011][ T1729] x17: ffff80007562d000 x16: ffff800008008000 x15: 0000000000000020 [ 177.019866][ T1729] x14: ffff80000a3ecc78 x13: 000000000000157b x12: 0000000000000729 [ 177.020908][ T1729] x11: 202c726566782062 x10: ffff80000a49cc78 x9 : 00000000ffffe000 [ 177.021732][ T1729] x8 : ffff80000a3ecc78 x7 : ffff80000a49cc78 x6 : 0000000000000000 [ 177.022931][ T1729] x5 : 0000000000017ff4 x4 : 0000000000000000 x3 : 0000000000000000 [ 177.023750][ T1729] x2 : 0000000000000000 x1 : 0000000000000000 x0 : f7ff00000547cec0 [ 177.024636][ T1729] Call trace: [ 177.024992][ T1729] usb_submit_urb+0x3ec/0x5c8 [ 177.025477][ T1729] usbnet_start_xmit+0x340/0x5dc [ 177.025944][ T1729] dev_hard_start_xmit+0x94/0x148 [ 177.026579][ T1729] sch_direct_xmit+0x90/0x1e4 [ 177.027092][ T1729] __dev_queue_xmit+0x468/0xd40 [ 177.027871][ T1729] ip6_finish_output2+0x268/0x7b8 [ 177.028425][ T1729] ip6_finish_output+0x220/0x360 [ 177.028922][ T1729] ip6_output+0x74/0x1d4 [ 177.029642][ T1729] NF_HOOK.constprop.0+0x50/0xe0 [ 177.030358][ T1729] mld_sendpack+0x280/0x4b8 [ 177.030805][ T1729] mld_ifc_work+0x1d0/0x4bc [ 177.031266][ T1729] process_one_work+0x1c0/0x30c [ 177.031736][ T1729] worker_thread+0x70/0x418 [ 177.032431][ T1729] kthread+0x118/0x11c [ 177.033098][ T1729] ret_from_fork+0x10/0x20 [ 177.033579][ T1729] ---[ end trace 0000000000000000 ]--- [ 177.503913][ T1729] ------------[ cut here ]------------ [ 177.504289][ T1729] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 177.504728][ T1729] WARNING: CPU: 1 PID: 1729 at drivers/usb/core/urb.c:504 usb_submit_urb+0x3ec/0x5c8 [ 177.505206][ T1729] Modules linked in: [ 177.505470][ T1729] CPU: 1 PID: 1729 Comm: kworker/1:2 Tainted: G W 6.4.0-rc5-syzkaller-00016-ga4d7d7011219 #0 [ 177.506034][ T1729] Hardware name: linux,dummy-virt (DT) [ 177.506293][ T1729] Workqueue: ipv6_addrconf addrconf_dad_work [ 177.506622][ T1729] pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 177.506947][ T1729] pc : usb_submit_urb+0x3ec/0x5c8 [ 177.507201][ T1729] lr : usb_submit_urb+0x3ec/0x5c8 [ 177.507455][ T1729] sp : ffff80000c783800 [ 177.507661][ T1729] x29: ffff80000c783800 x28: 0000000000000000 x27: f4ff000005938000 [ 177.508270][ T1729] x26: 0000000000000001 x25: f2ff000006d380a8 x24: ffff800009ad45b8 [ 177.509258][ T1729] x23: 0000000000000003 x22: 0000000000000003 x21: 0000000000000820 [ 177.509771][ T1729] x20: f2ff000006d38000 x19: f6ff000005ad5700 x18: 00000000fffffffb [ 177.510213][ T1729] x17: ffff80007562d000 x16: ffff800008008000 x15: 0000000000000020 [ 177.510776][ T1729] x14: ffff80000a3ecc78 x13: 00000000000015ed x12: 000000000000074f [ 177.511228][ T1729] x11: 202c726566782062 x10: ffff80000a49cc78 x9 : 00000000ffffe000 [ 177.511665][ T1729] x8 : ffff80000a3ecc78 x7 : ffff80000a49cc78 x6 : 0000000000000000 [ 177.512295][ T1729] x5 : 0000000000017ff4 x4 : 0000000000000000 x3 : 0000000000000000 [ 177.512918][ T1729] x2 : 0000000000000000 x1 : 0000000000000000 x0 : f7ff00000547cec0 [ 177.513397][ T1729] Call trace: [ 177.513611][ T1729] usb_submit_urb+0x3ec/0x5c8 [ 177.513997][ T1729] usbnet_start_xmit+0x340/0x5dc [ 177.514344][ T1729] dev_hard_start_xmit+0x94/0x148 [ 177.514898][ T1729] sch_direct_xmit+0x90/0x1e4 [ 177.515176][ T1729] __dev_queue_xmit+0x468/0xd40 [ 177.515449][ T1729] ip6_finish_output2+0x268/0x7b8 [ 177.516010][ T1729] ip6_finish_output+0x220/0x360 [ 177.516716][ T1729] ip6_output+0x74/0x1d4 [ 177.517168][ T1729] NF_HOOK.constprop.0+0x50/0xe0 [ 177.517575][ T1729] mld_sendpack+0x280/0x4b8 [ 177.517832][ T1729] mld_send_initial_cr.part.0.isra.0+0x5c/0x70 [ 177.518112][ T1729] ipv6_mc_dad_complete+0x78/0x17c [ 177.518506][ T1729] addrconf_dad_completed+0x31c/0x3a8 [ 177.518902][ T1729] addrconf_dad_work+0x254/0x594 [ 177.519165][ T1729] process_one_work+0x1c0/0x30c [ 177.519529][ T1729] worker_thread+0x70/0x418 [ 177.519790][ T1729] kthread+0x118/0x11c [ 177.520262][ T1729] ret_from_fork+0x10/0x20 [ 177.520766][ T1729] ---[ end trace 0000000000000000 ]--- [ 177.646766][ T9] ------------[ cut here ]------------ [ 177.647189][ T9] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 177.647606][ T9] WARNING: CPU: 0 PID: 9 at drivers/usb/core/urb.c:504 usb_submit_urb+0x3ec/0x5c8 [ 177.648129][ T9] Modules linked in: [ 177.648418][ T9] CPU: 0 PID: 9 Comm: kworker/0:1 Tainted: G W 6.4.0-rc5-syzkaller-00016-ga4d7d7011219 #0 [ 177.648870][ T9] Hardware name: linux,dummy-virt (DT) [ 177.649157][ T9] Workqueue: mld mld_dad_work [ 177.649461][ T9] pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 177.649859][ T9] pc : usb_submit_urb+0x3ec/0x5c8 [ 177.650284][ T9] lr : usb_submit_urb+0x3ec/0x5c8 [ 177.650562][ T9] sp : ffff80000a80b8d0 [ 177.650771][ T9] x29: ffff80000a80b8d0 x28: 0000000000000000 x27: f1ff000005596000 [ 177.651248][ T9] x26: 0000000000000001 x25: f2ff000006d380a8 x24: ffff800009ad45b8 [ 177.651693][ T9] x23: 0000000000000003 x22: 0000000000000003 x21: 0000000000000820 [ 177.652376][ T9] x20: f2ff000006d38000 x19: f1ff000005b27f00 x18: 00000000fffffffe [ 177.652828][ T9] x17: ffff800075617000 x16: ffff800008000000 x15: 0000000000000020 [ 177.653270][ T9] x14: ffff80000a3ecc78 x13: 0000000000001668 x12: 0000000000000778 [ 177.653801][ T9] x11: 202c726566782062 x10: ffff80000a49cc78 x9 : 00000000ffffe000 [ 177.654270][ T9] x8 : ffff80000a3ecc78 x7 : ffff80000a49cc78 x6 : 0000000000000000 [ 177.654693][ T9] x5 : 0000000000017ff4 x4 : 0000000000000000 x3 : 0000000000000000 [ 177.655108][ T9] x2 : 0000000000000000 x1 : 0000000000000000 x0 : f5ff000003098000 [ 177.655533][ T9] Call trace: [ 177.655726][ T9] usb_submit_urb+0x3ec/0x5c8 [ 177.656065][ T9] usbnet_start_xmit+0x340/0x5dc [ 177.656337][ T9] dev_hard_start_xmit+0x94/0x148 [ 177.656647][ T9] sch_direct_xmit+0x90/0x1e4 [ 177.657064][ T9] __dev_queue_xmit+0x468/0xd40 [ 177.657489][ T9] ip6_finish_output2+0x268/0x7b8 [ 177.657906][ T9] ip6_finish_output+0x220/0x360 [ 177.658282][ T9] ip6_output+0x74/0x1d4 [ 177.658702][ T9] NF_HOOK.constprop.0+0x50/0xe0 [ 177.659124][ T9] mld_sendpack+0x280/0x4b8 [ 177.659454][ T9] mld_send_initial_cr.part.0.isra.0+0x5c/0x70 [ 177.659880][ T9] mld_dad_work+0x60/0x20c [ 177.660313][ T9] process_one_work+0x1c0/0x30c [ 177.660710][ T9] worker_thread+0x70/0x418 [ 177.661006][ T9] kthread+0x118/0x11c [ 177.661263][ T9] ret_from_fork+0x10/0x20 [ 177.661556][ T9] ---[ end trace 0000000000000000 ]--- [ 177.790276][ T3136] ------------[ cut here ]------------ [ 177.790782][ T3136] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 177.791307][ T3136] WARNING: CPU: 0 PID: 3136 at drivers/usb/core/urb.c:504 usb_submit_urb+0x3ec/0x5c8 [ 177.791916][ T3136] Modules linked in: [ 177.792423][ T3136] CPU: 0 PID: 3136 Comm: dhcpcd Tainted: G W 6.4.0-rc5-syzkaller-00016-ga4d7d7011219 #0 [ 177.793030][ T3136] Hardware name: linux,dummy-virt (DT) [ 177.793423][ T3136] pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 177.793875][ T3136] pc : usb_submit_urb+0x3ec/0x5c8 [ 177.794205][ T3136] lr : usb_submit_urb+0x3ec/0x5c8 [ 177.794511][ T3136] sp : ffff80000ab43810 [ 177.794744][ T3136] x29: ffff80000ab43810 x28: 0000000000000000 x27: f1ff000005596000 [ 177.795224][ T3136] x26: 0000000000000001 x25: f2ff000006d380a8 x24: ffff800009ad45b8 [ 177.795703][ T3136] x23: 0000000000000003 x22: 0000000000000003 x21: 0000000000000820 [ 177.796307][ T3136] x20: f2ff000006d38000 x19: f1ff000005b27f00 x18: 00000000fffffffb [ 177.796815][ T3136] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000020 [ 177.797353][ T3136] x14: ffff80000a3ecc78 x13: 00000000000016dd x12: 000000000000079f [ 177.797868][ T3136] x11: 202c726566782062 x10: ffff80000a49cc78 x9 : 00000000ffffe000 [ 177.798350][ T3136] x8 : ffff80000a3ecc78 x7 : ffff80000a49cc78 x6 : 0000000000000000 [ 177.798854][ T3136] x5 : 0000000000017ff4 x4 : 0000000000000000 x3 : 0000000000000000 [ 177.799381][ T3136] x2 : 0000000000000000 x1 : 0000000000000000 x0 : f9ff00000592af40 [ 177.799947][ T3136] Call trace: [ 177.800178][ T3136] usb_submit_urb+0x3ec/0x5c8 [ 177.800508][ T3136] usbnet_start_xmit+0x340/0x5dc [ 177.800835][ T3136] dev_hard_start_xmit+0x94/0x148 [ 177.801155][ T3136] sch_direct_xmit+0x90/0x1e4 [ 177.801437][ T3136] __dev_queue_xmit+0x468/0xd40 [ 177.801717][ T3136] packet_xmit+0xd8/0x14c [ 177.802117][ T3136] packet_sendmsg+0xeec/0x13d0 [ 177.802470][ T3136] sock_sendmsg+0x54/0x60 [ 177.802749][ T3136] sock_write_iter+0x94/0xf0 [ 177.803124][ T3136] do_iter_readv_writev+0xb8/0x144 [ 177.803464][ T3136] do_iter_write+0x94/0x214 [ 177.803769][ T3136] vfs_writev+0xac/0x170 [ 177.804184][ T3136] do_writev+0x118/0x130 [ 177.804484][ T3136] __arm64_sys_writev+0x20/0x2c [ 177.804920][ T3136] invoke_syscall+0x48/0x114 [ 177.805221][ T3136] el0_svc_common.constprop.0+0xcc/0xec [ 177.805594][ T3136] do_el0_svc+0x38/0xa4 [ 177.805872][ T3136] el0_svc+0x2c/0xb0 [ 177.806143][ T3136] el0t_64_sync_handler+0xb8/0xbc [ 177.806509][ T3136] el0t_64_sync+0x19c/0x1a0 [ 177.806863][ T3136] ---[ end trace 0000000000000000 ]--- [ 178.018767][ T1729] ------------[ cut here ]------------ [ 178.019590][ T1729] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 178.020179][ T1729] WARNING: CPU: 1 PID: 1729 at drivers/usb/core/urb.c:504 usb_submit_urb+0x3ec/0x5c8 [ 178.020743][ T1729] Modules linked in: [ 178.021051][ T1729] CPU: 1 PID: 1729 Comm: kworker/1:2 Tainted: G W 6.4.0-rc5-syzkaller-00016-ga4d7d7011219 #0 [ 178.021549][ T1729] Hardware name: linux,dummy-virt (DT) [ 178.021891][ T1729] Workqueue: mld mld_dad_work [ 178.022343][ T1729] pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 178.022992][ T1729] pc : usb_submit_urb+0x3ec/0x5c8 [ 178.023287][ T1729] lr : usb_submit_urb+0x3ec/0x5c8 [ 178.023607][ T1729] sp : ffff80000c7838d0 [ 178.023947][ T1729] x29: ffff80000c7838d0 x28: 0000000000000000 x27: f4ff000005938000 [ 178.024580][ T1729] x26: 0000000000000001 x25: f2ff000006d380a8 x24: ffff800009ad45b8 [ 178.025075][ T1729] x23: 0000000000000003 x22: 0000000000000003 x21: 0000000000000820 [ 178.025559][ T1729] x20: f2ff000006d38000 x19: faff000005ad5700 x18: 00000000fffffffb [ 178.026129][ T1729] x17: ffff80007562d000 x16: ffff800008008000 x15: 0000000000000020 [ 178.026630][ T1729] x14: ffff80000a3ecc78 x13: 000000000000175b x12: 00000000000007c9 [ 178.027120][ T1729] x11: 202c726566782062 x10: ffff80000a49cc78 x9 : 00000000ffffe000 [ 178.027848][ T1729] x8 : ffff80000a3ecc78 x7 : ffff80000a49cc78 x6 : 0000000000000000 [ 178.028793][ T1729] x5 : 0000000000017ff4 x4 : 0000000000000000 x3 : 0000000000000000 [ 178.030024][ T1729] x2 : 0000000000000000 x1 : 0000000000000000 x0 : f7ff00000547cec0 [ 178.030990][ T1729] Call trace: [ 178.031497][ T1729] usb_submit_urb+0x3ec/0x5c8 [ 178.032243][ T1729] usbnet_start_xmit+0x340/0x5dc [ 178.032826][ T1729] dev_hard_start_xmit+0x94/0x148 [ 178.033506][ T1729] sch_direct_xmit+0x90/0x1e4 [ 178.034023][ T1729] __dev_queue_xmit+0x468/0xd40 [ 178.034552][ T1729] ip6_finish_output2+0x268/0x7b8 [ 178.035309][ T1729] ip6_finish_output+0x220/0x360 [ 178.035878][ T1729] ip6_output+0x74/0x1d4 [ 178.036652][ T1729] NF_HOOK.constprop.0+0x50/0xe0 [ 178.037279][ T1729] mld_sendpack+0x280/0x4b8 [ 178.037771][ T1729] mld_send_initial_cr.part.0.isra.0+0x5c/0x70 [ 178.038530][ T1729] mld_dad_work+0x60/0x20c [ 178.039072][ T1729] process_one_work+0x1c0/0x30c [ 178.039640][ T1729] worker_thread+0x70/0x418 [ 178.040412][ T1729] kthread+0x118/0x11c [ 178.040952][ T1729] ret_from_fork+0x10/0x20 [ 178.041496][ T1729] ---[ end trace 0000000000000000 ]--- [ 178.085100][ T2915] ------------[ cut here ]------------ [ 178.085575][ T2915] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 178.086119][ T2915] WARNING: CPU: 0 PID: 2915 at drivers/usb/core/urb.c:504 usb_submit_urb+0x3ec/0x5c8 [ 178.086849][ T2915] Modules linked in: [ 178.087134][ T2915] CPU: 0 PID: 2915 Comm: dhcpcd Tainted: G W 6.4.0-rc5-syzkaller-00016-ga4d7d7011219 #0 [ 178.087654][ T2915] Hardware name: linux,dummy-virt (DT) [ 178.088033][ T2915] pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 178.088460][ T2915] pc : usb_submit_urb+0x3ec/0x5c8 [ 178.088814][ T2915] lr : usb_submit_urb+0x3ec/0x5c8 [ 178.089238][ T2915] sp : ffff80000dd33550 [ 178.089588][ T2915] x29: ffff80000dd33550 x28: 0000000000000000 x27: f1ff000005596000 [ 178.090235][ T2915] x26: 0000000000000001 x25: f2ff000006d380a8 x24: ffff800009ad45b8 [ 178.091069][ T2915] x23: 0000000000000003 x22: 0000000000000003 x21: 0000000000000820 [ 178.091685][ T2915] x20: f2ff000006d38000 x19: fdff000005b27f00 x18: 00000000fffffffb [ 178.092634][ T2915] x17: ffff800075617000 x16: ffff800008000000 x15: 0000000000000020 [ 178.093256][ T2915] x14: ffff80000a3ecc78 x13: 00000000000017d0 x12: 00000000000007f0 [ 178.093849][ T2915] x11: 202c726566782062 x10: ffff80000a49cc78 x9 : 00000000ffffe000 [ 178.094479][ T2915] x8 : ffff80000a3ecc78 x7 : ffff80000a49cc78 x6 : 0000000000000000 [ 178.095132][ T2915] x5 : 0000000000017ff4 x4 : 0000000000000000 x3 : 0000000000000000 [ 178.095745][ T2915] x2 : 0000000000000000 x1 : 0000000000000000 x0 : f6ff000004073f00 [ 178.096575][ T2915] Call trace: [ 178.096889][ T2915] usb_submit_urb+0x3ec/0x5c8 [ 178.097320][ T2915] usbnet_start_xmit+0x340/0x5dc [ 178.097744][ T2915] dev_hard_start_xmit+0x94/0x148 [ 178.098211][ T2915] sch_direct_xmit+0x90/0x1e4 [ 178.098643][ T2915] __dev_queue_xmit+0x468/0xd40 [ 178.099050][ T2915] neigh_resolve_output+0xfc/0x1c8 [ 178.099465][ T2915] ip6_finish_output2+0x1b0/0x7b8 [ 178.099911][ T2915] ip6_finish_output+0x220/0x360 [ 178.100401][ T2915] ip6_output+0x74/0x1d4 [ 178.100807][ T2915] ip6_local_out+0x48/0x5c [ 178.101209][ T2915] ip6_send_skb+0x28/0x120 [ 178.101596][ T2915] ip6_push_pending_frames+0x48/0x5c [ 178.102307][ T2915] rawv6_sendmsg+0xd0c/0x1068 [ 178.102780][ T2915] inet_sendmsg+0x44/0x70 [ 178.103169][ T2915] sock_sendmsg+0x54/0x60 [ 178.103496][ T2915] ____sys_sendmsg+0x268/0x2a4 [ 178.103853][ T2915] ___sys_sendmsg+0x80/0xdc [ 178.104180][ T2915] __sys_sendmsg+0x68/0xc4 [ 178.104514][ T2915] __arm64_sys_sendmsg+0x24/0x30 [ 178.104868][ T2915] invoke_syscall+0x48/0x114 [ 178.105302][ T2915] el0_svc_common.constprop.0+0x44/0xec [ 178.105766][ T2915] do_el0_svc+0x38/0xa4 [ 178.106209][ T2915] el0_svc+0x2c/0xb0 [ 178.106644][ T2915] el0t_64_sync_handler+0xb8/0xbc [ 178.107053][ T2915] el0t_64_sync+0x19c/0x1a0 [ 178.107443][ T2915] ---[ end trace 0000000000000000 ]--- [ 178.471734][ T2915] ------------[ cut here ]------------ [ 178.472444][ T2915] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 178.473148][ T2915] WARNING: CPU: 1 PID: 2915 at drivers/usb/core/urb.c:504 usb_submit_urb+0x3ec/0x5c8 [ 178.473801][ T2915] Modules linked in: [ 178.474178][ T2915] CPU: 1 PID: 2915 Comm: dhcpcd Tainted: G W 6.4.0-rc5-syzkaller-00016-ga4d7d7011219 #0 [ 178.474815][ T2915] Hardware name: linux,dummy-virt (DT) [ 178.475257][ T2915] pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 178.475946][ T2915] pc : usb_submit_urb+0x3ec/0x5c8 [ 178.476418][ T2915] lr : usb_submit_urb+0x3ec/0x5c8 [ 178.476842][ T2915] sp : ffff80000dd33550 [ 178.477305][ T2915] x29: ffff80000dd33550 x28: 0000000000000000 x27: f4ff000005938000 [ 178.478058][ T2915] x26: 0000000000000001 x25: f2ff000006d380a8 x24: ffff800009ad45b8 [ 178.478752][ T2915] x23: 0000000000000003 x22: 0000000000000003 x21: 0000000000000820 [ 178.479489][ T2915] x20: f2ff000006d38000 x19: f8ff000005ad5700 x18: 00000000fffffffb [ 178.480250][ T2915] x17: ffff80007562d000 x16: ffff800008008000 x15: 0000000000000020 [ 178.480936][ T2915] x14: ffff80000a3ecc78 x13: 000000000000185d x12: 000000000000081f [ 178.481606][ T2915] x11: 202c726566782062 x10: ffff80000a49cc78 x9 : 00000000ffffe000 [ 178.482391][ T2915] x8 : ffff80000a3ecc78 x7 : ffff80000a49cc78 x6 : 0000000000000000 [ 178.483096][ T2915] x5 : ffff00007f9cdc88 x4 : 0000000000000000 x3 : ffff80007562d000 [ 178.483685][ T2915] x2 : 0000000000000000 x1 : 0000000000000000 x0 : f6ff000004073f00 [ 178.484556][ T2915] Call trace: [ 178.484952][ T2915] usb_submit_urb+0x3ec/0x5c8 [ 178.485391][ T2915] usbnet_start_xmit+0x340/0x5dc [ 178.485821][ T2915] dev_hard_start_xmit+0x94/0x148 [ 178.486490][ T2915] sch_direct_xmit+0x90/0x1e4 [ 178.486925][ T2915] __dev_queue_xmit+0x468/0xd40 [ 178.487304][ T2915] neigh_resolve_output+0xfc/0x1c8 [ 178.487690][ T2915] ip6_finish_output2+0x1b0/0x7b8 [ 178.488191][ T2915] ip6_finish_output+0x220/0x360 [ 178.488583][ T2915] ip6_output+0x74/0x1d4 [ 178.488951][ T2915] ip6_local_out+0x48/0x5c [ 178.489476][ T2915] ip6_send_skb+0x28/0x120 [ 178.489933][ T2915] ip6_push_pending_frames+0x48/0x5c [ 178.490313][ T2915] rawv6_sendmsg+0xd0c/0x1068 [ 178.490849][ T2915] inet_sendmsg+0x44/0x70 [ 178.491421][ T2915] sock_sendmsg+0x54/0x60 [ 178.491909][ T2915] ____sys_sendmsg+0x268/0x2a4 [ 178.492251][ T2915] ___sys_sendmsg+0x80/0xdc [ 178.492554][ T2915] __sys_sendmsg+0x68/0xc4 [ 178.492854][ T2915] __arm64_sys_sendmsg+0x24/0x30 [ 178.493312][ T2915] invoke_syscall+0x48/0x114 [ 178.493640][ T2915] el0_svc_common.constprop.0+0x44/0xec [ 178.493984][ T2915] do_el0_svc+0x38/0xa4 [ 178.494285][ T2915] el0_svc+0x2c/0xb0 [ 178.494570][ T2915] el0t_64_sync_handler+0xb8/0xbc [ 178.494881][ T2915] el0t_64_sync+0x19c/0x1a0 [ 178.495228][ T2915] ---[ end trace 0000000000000000 ]--- [ 178.575627][ T1729] usb 1-1: USB disconnect, device number 3 [ 178.589442][ T1729] cdc_subset 1-1:101.16 usb0: unregister 'cdc_subset' usb-dummy_hcd.0-1, Epson USB Device executing program [ 178.734017][ T1729] cdc_subset 1-1:101.101 usb1: unregister 'cdc_subset' usb-dummy_hcd.0-1, Epson USB Device [ 179.222856][ T1729] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 179.472779][ T1729] usb 1-1: Using ep0 maxpacket: 16 [ 179.633638][ T1729] usb 1-1: unable to get BOS descriptor or descriptor too short [ 179.733900][ T1729] usb 1-1: config 101 has an invalid interface number: 16 but max is 1 [ 179.734911][ T1729] usb 1-1: config 101 has an invalid interface number: 101 but max is 1 [ 179.735731][ T1729] usb 1-1: config 101 has an invalid interface association descriptor of length 2, skipping [ 179.736639][ T1729] usb 1-1: config 101 has no interface number 0 [ 179.737328][ T1729] usb 1-1: config 101 has no interface number 1 [ 179.738088][ T1729] usb 1-1: config 101 interface 16 altsetting 220 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 179.739334][ T1729] usb 1-1: config 101 interface 16 altsetting 220 has an invalid endpoint with address 0x80, skipping [ 179.740514][ T1729] usb 1-1: config 101 interface 16 altsetting 220 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 179.741582][ T1729] usb 1-1: config 101 interface 16 altsetting 220 has an invalid endpoint with address 0x80, skipping [ 179.758442][ T1729] usb 1-1: config 101 interface 16 altsetting 220 has a duplicate endpoint with address 0x9, skipping [ 179.760678][ T1729] usb 1-1: config 101 interface 16 altsetting 220 has a duplicate endpoint with address 0x9, skipping [ 179.767459][ T1729] usb 1-1: config 101 interface 16 altsetting 220 bulk endpoint 0x4 has invalid maxpacket 1023 [ 179.769477][ T1729] usb 1-1: config 101 interface 16 altsetting 220 has a duplicate endpoint with address 0x86, skipping [ 179.771442][ T1729] usb 1-1: config 101 interface 16 altsetting 220 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 179.779795][ T1729] usb 1-1: config 101 interface 101 altsetting 7 has a duplicate endpoint with address 0x5, skipping [ 179.785622][ T1729] usb 1-1: config 101 interface 101 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 179.787609][ T1729] usb 1-1: config 101 interface 101 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 179.789610][ T1729] usb 1-1: config 101 interface 101 altsetting 7 has a duplicate endpoint with address 0x1, skipping [ 179.791540][ T1729] usb 1-1: config 101 interface 101 altsetting 7 has a duplicate endpoint with address 0x6, skipping [ 179.800649][ T1729] usb 1-1: config 101 interface 101 altsetting 7 has a duplicate endpoint with address 0x1, skipping [ 179.807303][ T1729] usb 1-1: config 101 interface 101 altsetting 7 has a duplicate endpoint with address 0x5, skipping [ 179.809363][ T1729] usb 1-1: config 101 interface 16 has no altsetting 0 [ 179.810989][ T1729] usb 1-1: config 101 interface 101 has no altsetting 0 [ 180.063844][ T1729] usb 1-1: string descriptor 0 read error: -22 [ 180.065232][ T1729] usb 1-1: New USB device found, idVendor=0525, idProduct=2888, bcdDevice=6e.b7 [ 180.066805][ T1729] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.431758][ T1729] cdc_subset 1-1:101.16 usb0: register 'cdc_subset' at usb-dummy_hcd.0-1, Epson USB Device, ca:21:f9:8d:84:b2 [ 180.649065][ T1729] cdc_subset 1-1:101.101 usb1: register 'cdc_subset' at usb-dummy_hcd.0-1, Epson USB Device, ca:21:f9:8d:84:b2 VM DIAGNOSIS: 03:11:36 Registers: info registers vcpu 0 PC=ffff80000810d158 X00=0000000000000001 X01=f5ff000003098000 X02=0000000000000000 X03=0000000000000000 X04=000000000000b9b8 X05=0000000000000012 X06=00003fffffffffff X07=00003fffffffffff X08=0000000000004488 X09=ffff80000a49cc78 X10=00000000ffffe2db X11=00000000ffffe2db X12=0000000000000009 X13=0000000000000891 X14=fffffffffffcb9b8 X15=fffffffffffcb9b8 X16=627375203430353a X17=5f74696d6275735f X18=00003fffffffffff X19=ffff80000a4a1100 X20=ffff80000a80b358 X21=fffffffffffcb9b8 X22=ffff80000a3ecc20 X23=ffff80000a3fc7c0 X24=ffff80000a80b370 X25=00000000ffffe2db X26=ffff80000a3ecc50 X27=ffff80000a3ecb08 X28=0000000000000004 X29=ffff80000a80b210 X30=ffff80000810d2e8 SP=ffff80000a80b210 PSTATE=624003c9 -ZC- EL2h BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000 P01=0000 P02=0000 P03=0000 P04=0000 P05=0000 P06=0000 P07=0000 P08=0000 P09=0000 P10=0000 P11=0000 P12=0000 P13=0000 P14=0000 P15=0000 FFR=0000 Z00=0000000000000000:0000000000000000 Z01=474953007325202c:7325206465766965 Z02=f00ff00ff00ff00f:f00ff00ff00ff00f Z03=0000000f000f0000:000f000000000000 Z04=f00ff00ff00ff00f:f00ff00ff00ff00f Z05=000f0f000f000000:000f0f000f000000 Z06=cc00000000000000:cc00000000000000 Z07=0000000000000000:0000000000000000 Z08=0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000 Z16=0000000000000000:0000000000000000 Z17=0000000000000000:0000000000000000 Z18=0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000 Z24=0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000 Z26=0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000 Z28=0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000 Z30=0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000 info registers vcpu 1 PC=ffff8000082b0c98 X00=0000000000000000 X01=f7ff000005a63500 X02=0000000000000000 X03=000000000005b1a1 X04=ffff00007f9d98f0 X05=0000000000000000 X06=000000000005b199 X07=0000000000008000 X08=ffff800008010290 X09=0000000000000820 X10=e08b5af7f8e06739 X11=0000000000000001 X12=ffff80000a3bfef0 X13=ffff800009fbc460 X14=0000000000000344 X15=00007c92af56f192 X16=ffff800008008000 X17=ffff80007562d000 X18=0000000000000000 X19=fbff00000593bbc8 X20=0000000000000000 X21=ffff00007f9cd9c0 X22=0000000000000040 X23=0000000000000002 X24=ffff80000a3a8ac0 X25=0000000000000006 X26=0000000000000020 X27=0000000000000000 X28=f9ff000003114ec0 X29=ffff80000800bf60 X30=ffff800008010124 SP=ffff80000800bf60 PSTATE=604000c9 -ZC- EL2h BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000 P01=0000 P02=0000 P03=0000 P04=0000 P05=0000 P06=0000 P07=0000 P08=0000 P09=0000 P10=0000 P11=0000 P12=0000 P13=0000 P14=0000 P15=0000 FFR=0000 Z00=0000000000000000:0000006b636f732e Z01=f00ff00ff00ff00f:f00ff00000000000 Z02=f00ff00ff00ff00f:f00ff00ff00ff00f Z03=fffffffffff00000:fffffffffff00000 Z04=f00ff00ff00ff00f:f00ff00ff00ff00f Z05=ff00000f0f0f0f00:ff00000f0f0f0f00 Z06=00030003ccc0ccc0:00030003ccc0ccc0 Z07=0000000000000000:0000000000000000 Z08=0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000 Z16=0000000000000000:0000000000000000 Z17=0000000000000000:0000000000000000 Z18=0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000 Z24=0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000 Z26=0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000 Z28=0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000 Z30=0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000