Extracting prog: 2m48.585984306s
Minimizing prog: 12m45.109629722s
Simplifying prog options: 0s
Extracting C: 34.253576486s
Simplifying C: 8m35.600648678s


extracting reproducer from 1 programs
testing a last program of every proc
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1601000000000010ac054c02b1719cc90301090224000101000000090400000103010200092100800001220000090581968602ae10ff5b85445d2c91bfb2"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000c40)={0x0, 0x0, 0x40, "eae7f89077c9a09951cd3bdf8b83fd91080a5bb0f6334e1f66fd3d0c8bf1bcbd8e0b606e70812feba8cb6b4eb1b7ad20a02192696928b058d03dc209860a0f5c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)

failed to symbolize report: failed to start scripts/get_maintainer.pl [scripts/get_maintainer.pl --git-min-percent=15 -f drivers/input/mouse/bcm5974.c]: fork/exec scripts/get_maintainer.pl: no such file or directory
program crashed: WARNING in bcm5974_start_traffic/usb_submit_urb
single: successfully extracted reproducer
found reproducer with 3 syscalls
minimizing guilty program
testing program (duration=1m0.524254263s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1601000000000010ac054c02b1719cc90301090224000101000000090400000103010200092100800001220000090581968602ae10ff5b85445d2c91bfb2"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000c40)={0x0, 0x0, 0x40, "eae7f89077c9a09951cd3bdf8b83fd91080a5bb0f6334e1f66fd3d0c8bf1bcbd8e0b606e70812feba8cb6b4eb1b7ad20a02192696928b058d03dc209860a0f5c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

program did not crash
testing program (duration=1m0.524254263s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1601000000000010ac054c02b1719cc90301090224000101000000090400000103010200092100800001220000090581968602ae10ff5b85445d2c91bfb2"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

program did not crash
testing program (duration=1m0.524254263s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_control_io-syz_usb_control_io
detailed listing:
executing program 0:
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000c40)={0x0, 0x0, 0x40, "eae7f89077c9a09951cd3bdf8b83fd91080a5bb0f6334e1f66fd3d0c8bf1bcbd8e0b606e70812feba8cb6b4eb1b7ad20a02192696928b058d03dc209860a0f5c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)

program did not crash
testing program (duration=1m0.524254263s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000c40)={0x0, 0x0, 0x40, "eae7f89077c9a09951cd3bdf8b83fd91080a5bb0f6334e1f66fd3d0c8bf1bcbd8e0b606e70812feba8cb6b4eb1b7ad20a02192696928b058d03dc209860a0f5c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)

program did not crash
testing program (duration=1m0.524254263s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000c40)={0x0, 0x0, 0x40, "eae7f89077c9a09951cd3bdf8b83fd91080a5bb0f6334e1f66fd3d0c8bf1bcbd8e0b606e70812feba8cb6b4eb1b7ad20a02192696928b058d03dc209860a0f5c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)

program did not crash
testing program (duration=1m0.524254263s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1601000000000010ac054c02b1719cc90301090224000101000000090400000103010200092100800001220000090581968602ae10ff5b85445d2c91bfb2"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

program did not crash
testing program (duration=1m0.524254263s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1601000000000010ac054c02b1719cc90301090224000101000000090400000103010200092100800001220000090581968602ae10ff5b85445d2c91bfb2"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)

program did not crash
testing program (duration=1m0.524254263s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io
detailed listing:
executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1601000000000010ac054c02b1719cc90301090224000101000000090400000103010200092100800001220000090581968602ae10ff5b85445d2c91bfb2"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000c40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=1m0.524254263s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io
program crashed: WARNING in bcm5974_start_traffic/usb_submit_urb
simplifying C reproducer
testing compiled C program (duration=1m0.524254263s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io
program crashed: WARNING in bcm5974_start_traffic/usb_submit_urb
testing compiled C program (duration=1m0.524254263s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io
program crashed: WARNING in bcm5974_start_traffic/usb_submit_urb
testing compiled C program (duration=1m0.524254263s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io
program crashed: WARNING in bcm5974_start_traffic/usb_submit_urb
testing compiled C program (duration=1m0.524254263s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io
program crashed: WARNING in bcm5974_start_traffic/usb_submit_urb
testing compiled C program (duration=1m0.524254263s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io
program crashed: WARNING in bcm5974_start_traffic/usb_submit_urb
testing compiled C program (duration=1m0.524254263s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io
program crashed: WARNING in bcm5974_start_traffic/usb_submit_urb
testing compiled C program (duration=1m0.524254263s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-syz_usb_control_io-syz_usb_control_io
program crashed: WARNING in bcm5974_start_traffic/usb_submit_urb
reproducing took 24m43.549863623s
repro crashed as (corrupted=false):
------------[ cut here ]------------
usb 1-1: BOGUS urb xfer, pipe 1 != type 3
WARNING: CPU: 1 PID: 4021 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1588 drivers/usb/core/urb.c:502
Modules linked in:
CPU: 1 PID: 4021 Comm: udevd Not tainted 5.15.178-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : usb_submit_urb+0xa44/0x1588 drivers/usb/core/urb.c:502
lr : usb_submit_urb+0xa44/0x1588 drivers/usb/core/urb.c:502
sp : ffff80001f2b7370
x29: ffff80001f2b73b0 x28: 0000000000000001 x27: ffff800012d51948
x26: ffff0000c104ce00 x25: ffff0000da3ee000 x24: 0000000000000286
x23: ffff800012d58200 x22: dfff800000000000 x21: 0000000000000002
x20: 0000000000000cc0 x19: ffff0000c0fdae00 x18: 0000000000000001
x17: 0000000000000000 x16: ffff800011b4e3fc x15: 00000000ffffffff
x14: ffff0000d763b680 x13: 0000000000000001 x12: 0000000000000001
x11: 0000000000000000 x10: 0000000000000000 x9 : 5953197e95b28c00
x8 : 5953197e95b28c00 x7 : 0000000000000001 x6 : 0000000000000001
x5 : ffff80001f2b6ad8 x4 : ffff800014c50660 x3 : ffff8000085568c0
x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000029
Call trace:
 usb_submit_urb+0xa44/0x1588 drivers/usb/core/urb.c:502
 bcm5974_start_traffic+0xe0/0x154 drivers/input/mouse/bcm5974.c:799
 bcm5974_open+0x98/0x134 drivers/input/mouse/bcm5974.c:839
 input_open_device+0x170/0x29c drivers/input/input.c:640
 evdev_open_device drivers/input/evdev.c:400 [inline]
 evdev_open+0x308/0x4b4 drivers/input/evdev.c:487
 chrdev_open+0x3e8/0x4fc fs/char_dev.c:414
 do_dentry_open+0x780/0xed8 fs/open.c:826
 vfs_open+0x7c/0x90 fs/open.c:956
 do_open fs/namei.c:3608 [inline]
 path_openat+0x1ea0/0x26cc fs/namei.c:3742
 do_filp_open+0x1a8/0x3b4 fs/namei.c:3769
 do_sys_openat2+0x128/0x3e0 fs/open.c:1253
 do_sys_open fs/open.c:1269 [inline]
 __do_sys_openat fs/open.c:1285 [inline]
 __se_sys_openat fs/open.c:1280 [inline]
 __arm64_sys_openat+0x1f0/0x240 fs/open.c:1280
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142
 do_el0_svc+0x58/0x14c arch/arm64/kernel/syscall.c:181
 el0_svc+0x7c/0x1f0 arch/arm64/kernel/entry-common.c:608
 el0t_64_sync_handler+0x84/0xe4 arch/arm64/kernel/entry-common.c:626
 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584
irq event stamp: 4784
hardirqs last  enabled at (4783): [<ffff80000832c1b4>] __up_console_sem+0xb4/0x100 kernel/printk/printk.c:257
hardirqs last disabled at (4784): [<ffff800011b49ab0>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:396
softirqs last  enabled at (3782): [<ffff8000080309b8>] local_bh_enable+0x10/0x34 include/linux/bottom_half.h:31
softirqs last disabled at (3780): [<ffff800008030984>] local_bh_disable+0x10/0x34 include/linux/bottom_half.h:18
---[ end trace 26b3b733452fefe9 ]---
bcm5974 1-1:1.0: could not read from device
------------[ cut here ]------------
usb 1-1: BOGUS urb xfer, pipe 1 != type 3
WARNING: CPU: 1 PID: 4021 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1588 drivers/usb/core/urb.c:502
Modules linked in:
CPU: 1 PID: 4021 Comm: udevd Tainted: G        W         5.15.178-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : usb_submit_urb+0xa44/0x1588 drivers/usb/core/urb.c:502
lr : usb_submit_urb+0xa44/0x1588 drivers/usb/core/urb.c:502
sp : ffff80001f2b7370
x29: ffff80001f2b73b0 x28: 0000000000000001 x27: ffff800012d51948
x26: ffff0000c14ae700 x25: ffff0000d9cbb000 x24: 0000000000000286
x23: ffff800012d58200 x22: dfff800000000000 x21: 0000000000000002
x20: 0000000000000cc0 x19: ffff0000c0fc5a00 x18: 0000000000000001
x17: 0000000000000000 x16: ffff800011b4e3fc x15: 00000000ffffffff
x14: ffff0000d763b680 x13: 0000000000000001 x12: 0000000000000001
x11: 0000000000000000 x10: 0000000000000000 x9 : 5953197e95b28c00
x8 : 5953197e95b28c00 x7 : 0000000000000001 x6 : 0000000000000001
x5 : ffff80001f2b6ad8 x4 : ffff800014c50660 x3 : ffff8000085568c0
x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000029
Call trace:
 usb_submit_urb+0xa44/0x1588 drivers/usb/core/urb.c:502
 bcm5974_start_traffic+0xe0/0x154 drivers/input/mouse/bcm5974.c:799
 bcm5974_open+0x98/0x134 drivers/input/mouse/bcm5974.c:839
 input_open_device+0x170/0x29c drivers/input/input.c:640
 evdev_open_device drivers/input/evdev.c:400 [inline]
 evdev_open+0x308/0x4b4 drivers/input/evdev.c:487
 chrdev_open+0x3e8/0x4fc fs/char_dev.c:414
 do_dentry_open+0x780/0xed8 fs/open.c:826
 vfs_open+0x7c/0x90 fs/open.c:956
 do_open fs/namei.c:3608 [inline]
 path_openat+0x1ea0/0x26cc fs/namei.c:3742
 do_filp_open+0x1a8/0x3b4 fs/namei.c:3769
 do_sys_openat2+0x128/0x3e0 fs/open.c:1253
 do_sys_open fs/open.c:1269 [inline]
 __do_sys_openat fs/open.c:1285 [inline]
 __se_sys_openat fs/open.c:1280 [inline]
 __arm64_sys_openat+0x1f0/0x240 fs/open.c:1280
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142
 do_el0_svc+0x58/0x14c arch/arm64/kernel/syscall.c:181
 el0_svc+0x7c/0x1f0 arch/arm64/kernel/entry-common.c:608
 el0t_64_sync_handler+0x84/0xe4 arch/arm64/kernel/entry-common.c:626
 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584
irq event stamp: 13532
hardirqs last  enabled at (13531): [<ffff80000832c1b4>] __up_console_sem+0xb4/0x100 kernel/printk/printk.c:257
hardirqs last disabled at (13532): [<ffff800011b49ab0>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:396
softirqs last  enabled at (11040): [<ffff8000081b6920>] softirq_handle_end kernel/softirq.c:401 [inline]
softirqs last  enabled at (11040): [<ffff8000081b6920>] handle_softirqs+0xb88/0xdbc kernel/softirq.c:586
softirqs last disabled at (11029): [<ffff8000081b6fb8>] __do_softirq kernel/softirq.c:592 [inline]
softirqs last disabled at (11029): [<ffff8000081b6fb8>] do_softirq_own_stack include/asm-generic/softirq_stack.h:10 [inline]
softirqs last disabled at (11029): [<ffff8000081b6fb8>] invoke_softirq kernel/softirq.c:439 [inline]
softirqs last disabled at (11029): [<ffff8000081b6fb8>] __irq_exit_rcu+0x268/0x4d8 kernel/softirq.c:641
---[ end trace 26b3b733452fefec ]---
bcm5974 1-1:1.0: could not read from device
------------[ cut here ]------------
usb 1-1: BOGUS urb xfer, pipe 1 != type 3
WARNING: CPU: 0 PID: 4021 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1588 drivers/usb/core/urb.c:502
Modules linked in:
CPU: 0 PID: 4021 Comm: udevd Tainted: G        W         5.15.178-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : usb_submit_urb+0xa44/0x1588 drivers/usb/core/urb.c:502
lr : usb_submit_urb+0xa44/0x1588 drivers/usb/core/urb.c:502
sp : ffff80001f2b7370
x29: ffff80001f2b73b0 x28: 0000000000000001 x27: ffff800012d51948
x26: ffff0000d5a95e00 x25: ffff0000ccdc5000 x24: 0000000000000286
x23: ffff800012d58200 x22: dfff800000000000 x21: 0000000000000002
x20: 0000000000000cc0 x19: ffff0000c0ff6c00 x18: 0000000000000001
x17: 0000000000000000 x16: ffff800011b4e3fc x15: 00000000ffffffff
x14: ffff0000d763b680 x13: 0000000000000001 x12: 0000000000000001
x11: 0000000000000000 x10: 0000000000000000 x9 : 5953197e95b28c00
x8 : 5953197e95b28c00 x7 : 0000000000000001 x6 : 0000000000000001
x5 : ffff80001f2b6ad8 x4 : ffff800014c50660 x3 : ffff8000085568c0
x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000029
Call trace:
 usb_submit_urb+0xa44/0x1588 drivers/usb/core/urb.c:502
 bcm5974_start_traffic+0xe0/0x154 drivers/input/mouse/bcm5974.c:799
 bcm5974_open+0x98/0x134 drivers/input/mouse/bcm5974.c:839
 input_open_device+0x170/0x29c drivers/input/input.c:640
 evdev_open_device drivers/input/evdev.c:400 [inline]
 evdev_open+0x308/0x4b4 drivers/input/evdev.c:487
 chrdev_open+0x3e8/0x4fc fs/char_dev.c:414
 do_dentry_open+0x780/0xed8 fs/open.c:826
 vfs_open+0x7c/0x90 fs/open.c:956
 do_open fs/namei.c:3608 [inline]
 path_openat+0x1ea0/0x26cc fs/namei.c:3742
 do_filp_open+0x1a8/0x3b4 fs/namei.c:3769
 do_sys_openat2+0x128/0x3e0 fs/open.c:1253
 do_sys_open fs/open.c:1269 [inline]
 __do_sys_openat fs/open.c:1285 [inline]
 __se_sys_openat fs/open.c:1280 [inline]
 __arm64_sys_openat+0x1f0/0x240 fs/open.c:1280
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142
 do_el0_svc+0x58/0x14c arch/arm64/kernel/syscall.c:181
 el0_svc+0x7c/0x1f0 arch/arm64/kernel/entry-common.c:608
 el0t_64_sync_handler+0x84/0xe4 arch/arm64/kernel/entry-common.c:626
 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584
irq event stamp: 22030
hardirqs last  enabled at (22029): [<ffff80000832c1b4>] __up_console_sem+0xb4/0x100 kernel/printk/printk.c:257
hardirqs last disabled at (22030): [<ffff800011b49ab0>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:396
softirqs last  enabled at (21704): [<ffff8000081b6920>] softirq_handle_end kernel/softirq.c:401 [inline]
softirqs last  enabled at (21704): [<ffff8000081b6920>] handle_softirqs+0xb88/0xdbc kernel/softirq.c:586
softirqs last disabled at (21699): [<ffff8000081b6fb8>] __do_softirq kernel/softirq.c:592 [inline]
softirqs last disabled at (21699): [<ffff8000081b6fb8>] do_softirq_own_stack include/asm-generic/softirq_stack.h:10 [inline]
softirqs last disabled at (21699): [<ffff8000081b6fb8>] invoke_softirq kernel/softirq.c:439 [inline]
softirqs last disabled at (21699): [<ffff8000081b6fb8>] __irq_exit_rcu+0x268/0x4d8 kernel/softirq.c:641
---[ end trace 26b3b733452fefee ]---
bcm5974 1-1:1.0: could not read from device
------------[ cut here ]------------
usb 1-1: BOGUS urb xfer, pipe 1 != type 3
WARNING: CPU: 0 PID: 4021 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1588 drivers/usb/core/urb.c:502
Modules linked in:
CPU: 0 PID: 4021 Comm: udevd Tainted: G        W         5.15.178-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : usb_submit_urb+0xa44/0x1588 drivers/usb/core/urb.c:502
lr : usb_submit_urb+0xa44/0x1588 drivers/usb/core/urb.c:502
sp : ffff80001f2b7370
x29: ffff80001f2b73b0 x28: 0000000000000001 x27: ffff800012d51948
x26: ffff0000d372c700 x25: ffff0000cd791000 x24: 0000000000000286
x23: ffff800012d58200 x22: dfff800000000000 x21: 0000000000000002
x20: 0000000000000cc0 x19: ffff0000c0ff1a00 x18: 0000000000000001
x17: 0000000000000000 x16: ffff800011b4e3fc x15: 00000000ffffffff
x14: ffff0000d763b680 x13: 0000000000000001 x12: 0000000000000001
x11: 0000000000000000 x10: 0000000000000000 x9 : 5953197e95b28c00
x8 : 5953197e95b28c00 x7 : 0000000000000001 x6 : 0000000000000001
x5 : ffff80001f2b6ad8 x4 : ffff800014c50660 x3 : ffff8000085568c0
x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000029
Call trace:
 usb_submit_urb+0xa44/0x1588 drivers/usb/core/urb.c:502
 bcm5974_start_traffic+0xe0/0x154 drivers/input/mouse/bcm5974.c:799
 bcm5974_open+0x98/0x134 drivers/input/mouse/bcm5974.c:839
 input_open_device+0x170/0x29c drivers/input/input.c:640
 evdev_open_device drivers/input/evdev.c:400 [inline]
 evdev_open+0x308/0x4b4 drivers/input/evdev.c:487
 chrdev_open+0x3e8/0x4fc fs/char_dev.c:414
 do_dentry_open+0x780/0xed8 fs/open.c:826
 vfs_open+0x7c/0x90 fs/open.c:956
 do_open fs/namei.c:3608 [inline]
 path_openat+0x1ea0/0x26cc fs/namei.c:3742
 do_filp_open+0x1a8/0x3b4 fs/namei.c:3769
 do_sys_openat2+0x128/0x3e0 fs/open.c:1253
 do_sys_open fs/open.c:1269 [inline]
 __do_sys_openat fs/open.c:1285 [inline]
 __se_sys_openat fs/open.c:1280 [inline]
 __arm64_sys_openat+0x1f0/0x240 fs/open.c:1280
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142
 do_el0_svc+0x58/0x14c arch/arm64/kernel/syscall.c:181
 el0_svc+0x7c/0x1f0 arch/arm64/kernel/entry-common.c:608
 el0t_64_sync_handler+0x84/0xe4 arch/arm64/kernel/entry-common.c:626
 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584
irq event stamp: 30520
hardirqs last  enabled at (30519): [<ffff80000832c1b4>] __up_console_sem+0xb4/0x100 kernel/printk/printk.c:257
hardirqs last disabled at (30520): [<ffff800011b49ab0>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:396
softirqs last  enabled at (28888): [<ffff8000080309b8>] local_bh_enable+0x10/0x34 include/linux/bottom_half.h:31
softirqs last disabled at (28886): [<ffff800008030984>] local_bh_disable+0x10/0x34 include/linux/bottom_half.h:18
---[ end trace 26b3b733452feff1 ]---
bcm5974 1-1:1.0: could not read from device
------------[ cut here ]------------
usb 1-1: BOGUS urb xfer, pipe 1 != type 3
WARNING: CPU: 1 PID: 4021 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1588 drivers/usb/core/urb.c:502
Modules linked in:
CPU: 1 PID: 4021 Comm: udevd Tainted: G        W         5.15.178-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : usb_submit_urb+0xa44/0x1588 drivers/usb/core/urb.c:502
lr : usb_submit_urb+0xa44/0x1588 drivers/usb/core/urb.c:502
sp : ffff80001f2b7370
x29: ffff80001f2b73b0 x28: 0000000000000001 x27: ffff800012d51948
x26: ffff0000d6083e00 x25: ffff0000c2962000 x24: 0000000000000286
x23: ffff800012d58200 x22: dfff800000000000 x21: 0000000000000002
x20: 0000000000000cc0 x19: ffff0000c0feb400 x18: 0000000000000001
x17: 0000000000000000 x16: ffff800011b4e3fc x15: 00000000ffffffff
x14: ffff0000d763b680 x13: 0000000000000001 x12: 0000000000000001
x11: 0000000000000000 x10: 0000000000000000 x9 : 5953197e95b28c00
x8 : 5953197e95b28c00 x7 : 0000000000000001 x6 : 0000000000000001
x5 : ffff80001f2b6ad8 x4 : ffff800014c50660 x3 : ffff8000085568c0
x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000029
Call trace:
 usb_submit_urb+0xa44/0x1588 drivers/usb/core/urb.c:502
 bcm5974_start_traffic+0xe0/0x154 drivers/input/mouse/bcm5974.c:799
 bcm5974_open+0x98/0x134 drivers/input/mouse/bcm5974.c:839
 input_open_device+0x170/0x29c drivers/input/input.c:640
 evdev_open_device drivers/input/evdev.c:400 [inline]
 evdev_open+0x308/0x4b4 drivers/input/evdev.c:487
 chrdev_open+0x3e8/0x4fc fs/char_dev.c:414
 do_dentry_open+0x780/0xed8 fs/open.c:826
 vfs_open+0x7c/0x90 fs/open.c:956
 do_open fs/namei.c:3608 [inline]
 path_openat+0x1ea0/0x26cc fs/namei.c:3742
 do_filp_open+0x1a8/0x3b4 fs/namei.c:3769
 do_sys_openat2+0x128/0x3e0 fs/open.c:1253
 do_sys_open fs/open.c:1269 [inline]
 __do_sys_openat fs/open.c:1285 [inline]
 __se_sys_openat fs/open.c:1280 [inline]
 __arm64_sys_openat+0x1f0/0x240 fs/open.c:1280
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142
 do_el0_svc+0x58/0x14c arch/arm64/kernel/syscall.c:181
 el0_svc+0x7c/0x1f0 arch/arm64/kernel/entry-common.c:608
 el0t_64_sync_handler+0x84/0xe4 arch/arm64/kernel/entry-common.c:626
 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584
irq event stamp: 39440
hardirqs last  enabled at (39439): [<ffff80000832c1b4>] __up_console_sem+0xb4/0x100 kernel/printk/printk.c:257
hardirqs last disabled at (39440): [<ffff800011b49ab0>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:396
softirqs last  enabled at (38378): [<ffff8000080309b8>] local_bh_enable+0x10/0x34 include/linux/bottom_half.h:31
softirqs last disabled at (38376): [<ffff800008030984>] local_bh_disable+0x10/0x34 include/linux/bottom_half.h:18
---[ end trace 26b3b733452feff4 ]---
bcm5974 1-1:1.0: could not read from device
------------[ cut here ]------------
usb 1-1: BOGUS urb xfer, pipe 1 != type 3
WARNING: CPU: 0 PID: 4021 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1588 drivers/usb/core/urb.c:502
Modules linked in:
CPU: 0 PID: 4021 Comm: udevd Tainted: G        W         5.15.178-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : usb_submit_urb+0xa44/0x1588 drivers/usb/core/urb.c:502
lr : usb_submit_urb+0xa44/0x1588 drivers/usb/core/urb.c:502
sp : ffff80001f2b7370
x29: ffff80001f2b73b0 x28: 0000000000000001 x27: ffff800012d51948
x26: ffff0000ce0e3d00 x25: ffff0000ce39a000 x24: 0000000000000286
x23: ffff800012d58200 x22: dfff800000000000 x21: 0000000000000002
x20: 0000000000000cc0 x19: ffff0000c0fe4800 x18: 0000000000000001
x17: 0000000000000000 x16: ffff800011b4e3fc x15: 00000000ffffffff
x14: ffff0000d763b680 x13: 0000000000000001 x12: 0000000000000001
x11: 0000000000000000 x10: 0000000000000000 x9 : 5953197e95b28c00
x8 : 5953197e95b28c00 x7 : 0000000000000001 x6 : 0000000000000001
x5 : ffff80001f2b6ad8 x4 : ffff800014c50660 x3 : ffff8000085568c0
x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000029
Call trace:
 usb_submit_urb+0xa44/0x1588 drivers/usb/core/urb.c:502
 bcm5974_start_traffic+0xe0/0x154 drivers/input/mouse/bcm5974.c:799
 bcm5974_open+0x98/0x134 drivers/input/mouse/bcm5974.c:839
 input_open_device+0x170/0x29c drivers/input/input.c:640
 evdev_open_device drivers/input/evdev.c:400 [inline]
 evdev_open+0x308/0x4b4 drivers/input/evdev.c:487
 chrdev_open+0x3e8/0x4fc fs/char_dev.c:414
 do_dentry_open+0x780/0xed8 fs/open.c:826
 vfs_open+0x7c/0x90 fs/open.c:956
 do_open fs/namei.c:3608 [inline]
 path_openat+0x1ea0/0x26cc fs/namei.c:3742
 do_filp_open+0x1a8/0x3b4 fs/namei.c:3769
 do_sys_openat2+0x128/0x3e0 fs/open.c:1253
 do_sys_open fs/open.c:1269 [inline]
 __do_sys_openat fs/open.c:1285 [inline]
 __se_sys_openat fs/open.c:1280 [inline]
 __arm64_sys_openat+0x1f0/0x240 fs/open.c:1280
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142
 do_el0_svc+0x58/0x14c arch/arm64/kernel/syscall.c:181
 el0_svc+0x7c/0x1f0 arch/arm64/kernel/entry-common.c:608
 el0t_64_sync_handler+0x84/0xe4 arch/arm64/kernel/entry-common.c:626
 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584
irq event stamp: 47922
hardirqs last  enabled at (47921): [<ffff80000832c1b4>] __up_console_sem+0xb4/0x100 kernel/printk/printk.c:257
hardirqs last disabled at (47922): [<ffff800011b49ab0>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:396
softirqs last  enabled at (47400): [<ffff8000080309b8>] local_bh_enable+0x10/0x34 include/linux/bottom_half.h:31
softirqs last disabled at (47398): [<ffff800008030984>] local_bh_disable+0x10/0x34 include/linux/bottom_half.h:18
---[ end trace 26b3b733452feff6 ]---
bcm5974 1-1:1.0: could not read from device

final repro crashed as (corrupted=false):
------------[ cut here ]------------
usb 1-1: BOGUS urb xfer, pipe 1 != type 3
WARNING: CPU: 1 PID: 4021 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1588 drivers/usb/core/urb.c:502
Modules linked in:
CPU: 1 PID: 4021 Comm: udevd Not tainted 5.15.178-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : usb_submit_urb+0xa44/0x1588 drivers/usb/core/urb.c:502
lr : usb_submit_urb+0xa44/0x1588 drivers/usb/core/urb.c:502
sp : ffff80001f2b7370
x29: ffff80001f2b73b0 x28: 0000000000000001 x27: ffff800012d51948
x26: ffff0000c104ce00 x25: ffff0000da3ee000 x24: 0000000000000286
x23: ffff800012d58200 x22: dfff800000000000 x21: 0000000000000002
x20: 0000000000000cc0 x19: ffff0000c0fdae00 x18: 0000000000000001
x17: 0000000000000000 x16: ffff800011b4e3fc x15: 00000000ffffffff
x14: ffff0000d763b680 x13: 0000000000000001 x12: 0000000000000001
x11: 0000000000000000 x10: 0000000000000000 x9 : 5953197e95b28c00
x8 : 5953197e95b28c00 x7 : 0000000000000001 x6 : 0000000000000001
x5 : ffff80001f2b6ad8 x4 : ffff800014c50660 x3 : ffff8000085568c0
x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000029
Call trace:
 usb_submit_urb+0xa44/0x1588 drivers/usb/core/urb.c:502
 bcm5974_start_traffic+0xe0/0x154 drivers/input/mouse/bcm5974.c:799
 bcm5974_open+0x98/0x134 drivers/input/mouse/bcm5974.c:839
 input_open_device+0x170/0x29c drivers/input/input.c:640
 evdev_open_device drivers/input/evdev.c:400 [inline]
 evdev_open+0x308/0x4b4 drivers/input/evdev.c:487
 chrdev_open+0x3e8/0x4fc fs/char_dev.c:414
 do_dentry_open+0x780/0xed8 fs/open.c:826
 vfs_open+0x7c/0x90 fs/open.c:956
 do_open fs/namei.c:3608 [inline]
 path_openat+0x1ea0/0x26cc fs/namei.c:3742
 do_filp_open+0x1a8/0x3b4 fs/namei.c:3769
 do_sys_openat2+0x128/0x3e0 fs/open.c:1253
 do_sys_open fs/open.c:1269 [inline]
 __do_sys_openat fs/open.c:1285 [inline]
 __se_sys_openat fs/open.c:1280 [inline]
 __arm64_sys_openat+0x1f0/0x240 fs/open.c:1280
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142
 do_el0_svc+0x58/0x14c arch/arm64/kernel/syscall.c:181
 el0_svc+0x7c/0x1f0 arch/arm64/kernel/entry-common.c:608
 el0t_64_sync_handler+0x84/0xe4 arch/arm64/kernel/entry-common.c:626
 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584
irq event stamp: 4784
hardirqs last  enabled at (4783): [<ffff80000832c1b4>] __up_console_sem+0xb4/0x100 kernel/printk/printk.c:257
hardirqs last disabled at (4784): [<ffff800011b49ab0>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:396
softirqs last  enabled at (3782): [<ffff8000080309b8>] local_bh_enable+0x10/0x34 include/linux/bottom_half.h:31
softirqs last disabled at (3780): [<ffff800008030984>] local_bh_disable+0x10/0x34 include/linux/bottom_half.h:18
---[ end trace 26b3b733452fefe9 ]---
bcm5974 1-1:1.0: could not read from device
------------[ cut here ]------------
usb 1-1: BOGUS urb xfer, pipe 1 != type 3
WARNING: CPU: 1 PID: 4021 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1588 drivers/usb/core/urb.c:502
Modules linked in:
CPU: 1 PID: 4021 Comm: udevd Tainted: G        W         5.15.178-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : usb_submit_urb+0xa44/0x1588 drivers/usb/core/urb.c:502
lr : usb_submit_urb+0xa44/0x1588 drivers/usb/core/urb.c:502
sp : ffff80001f2b7370
x29: ffff80001f2b73b0 x28: 0000000000000001 x27: ffff800012d51948
x26: ffff0000c14ae700 x25: ffff0000d9cbb000 x24: 0000000000000286
x23: ffff800012d58200 x22: dfff800000000000 x21: 0000000000000002
x20: 0000000000000cc0 x19: ffff0000c0fc5a00 x18: 0000000000000001
x17: 0000000000000000 x16: ffff800011b4e3fc x15: 00000000ffffffff
x14: ffff0000d763b680 x13: 0000000000000001 x12: 0000000000000001
x11: 0000000000000000 x10: 0000000000000000 x9 : 5953197e95b28c00
x8 : 5953197e95b28c00 x7 : 0000000000000001 x6 : 0000000000000001
x5 : ffff80001f2b6ad8 x4 : ffff800014c50660 x3 : ffff8000085568c0
x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000029
Call trace:
 usb_submit_urb+0xa44/0x1588 drivers/usb/core/urb.c:502
 bcm5974_start_traffic+0xe0/0x154 drivers/input/mouse/bcm5974.c:799
 bcm5974_open+0x98/0x134 drivers/input/mouse/bcm5974.c:839
 input_open_device+0x170/0x29c drivers/input/input.c:640
 evdev_open_device drivers/input/evdev.c:400 [inline]
 evdev_open+0x308/0x4b4 drivers/input/evdev.c:487
 chrdev_open+0x3e8/0x4fc fs/char_dev.c:414
 do_dentry_open+0x780/0xed8 fs/open.c:826
 vfs_open+0x7c/0x90 fs/open.c:956
 do_open fs/namei.c:3608 [inline]
 path_openat+0x1ea0/0x26cc fs/namei.c:3742
 do_filp_open+0x1a8/0x3b4 fs/namei.c:3769
 do_sys_openat2+0x128/0x3e0 fs/open.c:1253
 do_sys_open fs/open.c:1269 [inline]
 __do_sys_openat fs/open.c:1285 [inline]
 __se_sys_openat fs/open.c:1280 [inline]
 __arm64_sys_openat+0x1f0/0x240 fs/open.c:1280
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142
 do_el0_svc+0x58/0x14c arch/arm64/kernel/syscall.c:181
 el0_svc+0x7c/0x1f0 arch/arm64/kernel/entry-common.c:608
 el0t_64_sync_handler+0x84/0xe4 arch/arm64/kernel/entry-common.c:626
 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584
irq event stamp: 13532
hardirqs last  enabled at (13531): [<ffff80000832c1b4>] __up_console_sem+0xb4/0x100 kernel/printk/printk.c:257
hardirqs last disabled at (13532): [<ffff800011b49ab0>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:396
softirqs last  enabled at (11040): [<ffff8000081b6920>] softirq_handle_end kernel/softirq.c:401 [inline]
softirqs last  enabled at (11040): [<ffff8000081b6920>] handle_softirqs+0xb88/0xdbc kernel/softirq.c:586
softirqs last disabled at (11029): [<ffff8000081b6fb8>] __do_softirq kernel/softirq.c:592 [inline]
softirqs last disabled at (11029): [<ffff8000081b6fb8>] do_softirq_own_stack include/asm-generic/softirq_stack.h:10 [inline]
softirqs last disabled at (11029): [<ffff8000081b6fb8>] invoke_softirq kernel/softirq.c:439 [inline]
softirqs last disabled at (11029): [<ffff8000081b6fb8>] __irq_exit_rcu+0x268/0x4d8 kernel/softirq.c:641
---[ end trace 26b3b733452fefec ]---
bcm5974 1-1:1.0: could not read from device
------------[ cut here ]------------
usb 1-1: BOGUS urb xfer, pipe 1 != type 3
WARNING: CPU: 0 PID: 4021 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1588 drivers/usb/core/urb.c:502
Modules linked in:
CPU: 0 PID: 4021 Comm: udevd Tainted: G        W         5.15.178-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : usb_submit_urb+0xa44/0x1588 drivers/usb/core/urb.c:502
lr : usb_submit_urb+0xa44/0x1588 drivers/usb/core/urb.c:502
sp : ffff80001f2b7370
x29: ffff80001f2b73b0 x28: 0000000000000001 x27: ffff800012d51948
x26: ffff0000d5a95e00 x25: ffff0000ccdc5000 x24: 0000000000000286
x23: ffff800012d58200 x22: dfff800000000000 x21: 0000000000000002
x20: 0000000000000cc0 x19: ffff0000c0ff6c00 x18: 0000000000000001
x17: 0000000000000000 x16: ffff800011b4e3fc x15: 00000000ffffffff
x14: ffff0000d763b680 x13: 0000000000000001 x12: 0000000000000001
x11: 0000000000000000 x10: 0000000000000000 x9 : 5953197e95b28c00
x8 : 5953197e95b28c00 x7 : 0000000000000001 x6 : 0000000000000001
x5 : ffff80001f2b6ad8 x4 : ffff800014c50660 x3 : ffff8000085568c0
x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000029
Call trace:
 usb_submit_urb+0xa44/0x1588 drivers/usb/core/urb.c:502
 bcm5974_start_traffic+0xe0/0x154 drivers/input/mouse/bcm5974.c:799
 bcm5974_open+0x98/0x134 drivers/input/mouse/bcm5974.c:839
 input_open_device+0x170/0x29c drivers/input/input.c:640
 evdev_open_device drivers/input/evdev.c:400 [inline]
 evdev_open+0x308/0x4b4 drivers/input/evdev.c:487
 chrdev_open+0x3e8/0x4fc fs/char_dev.c:414
 do_dentry_open+0x780/0xed8 fs/open.c:826
 vfs_open+0x7c/0x90 fs/open.c:956
 do_open fs/namei.c:3608 [inline]
 path_openat+0x1ea0/0x26cc fs/namei.c:3742
 do_filp_open+0x1a8/0x3b4 fs/namei.c:3769
 do_sys_openat2+0x128/0x3e0 fs/open.c:1253
 do_sys_open fs/open.c:1269 [inline]
 __do_sys_openat fs/open.c:1285 [inline]
 __se_sys_openat fs/open.c:1280 [inline]
 __arm64_sys_openat+0x1f0/0x240 fs/open.c:1280
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142
 do_el0_svc+0x58/0x14c arch/arm64/kernel/syscall.c:181
 el0_svc+0x7c/0x1f0 arch/arm64/kernel/entry-common.c:608
 el0t_64_sync_handler+0x84/0xe4 arch/arm64/kernel/entry-common.c:626
 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584
irq event stamp: 22030
hardirqs last  enabled at (22029): [<ffff80000832c1b4>] __up_console_sem+0xb4/0x100 kernel/printk/printk.c:257
hardirqs last disabled at (22030): [<ffff800011b49ab0>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:396
softirqs last  enabled at (21704): [<ffff8000081b6920>] softirq_handle_end kernel/softirq.c:401 [inline]
softirqs last  enabled at (21704): [<ffff8000081b6920>] handle_softirqs+0xb88/0xdbc kernel/softirq.c:586
softirqs last disabled at (21699): [<ffff8000081b6fb8>] __do_softirq kernel/softirq.c:592 [inline]
softirqs last disabled at (21699): [<ffff8000081b6fb8>] do_softirq_own_stack include/asm-generic/softirq_stack.h:10 [inline]
softirqs last disabled at (21699): [<ffff8000081b6fb8>] invoke_softirq kernel/softirq.c:439 [inline]
softirqs last disabled at (21699): [<ffff8000081b6fb8>] __irq_exit_rcu+0x268/0x4d8 kernel/softirq.c:641
---[ end trace 26b3b733452fefee ]---
bcm5974 1-1:1.0: could not read from device
------------[ cut here ]------------
usb 1-1: BOGUS urb xfer, pipe 1 != type 3
WARNING: CPU: 0 PID: 4021 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1588 drivers/usb/core/urb.c:502
Modules linked in:
CPU: 0 PID: 4021 Comm: udevd Tainted: G        W         5.15.178-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : usb_submit_urb+0xa44/0x1588 drivers/usb/core/urb.c:502
lr : usb_submit_urb+0xa44/0x1588 drivers/usb/core/urb.c:502
sp : ffff80001f2b7370
x29: ffff80001f2b73b0 x28: 0000000000000001 x27: ffff800012d51948
x26: ffff0000d372c700 x25: ffff0000cd791000 x24: 0000000000000286
x23: ffff800012d58200 x22: dfff800000000000 x21: 0000000000000002
x20: 0000000000000cc0 x19: ffff0000c0ff1a00 x18: 0000000000000001
x17: 0000000000000000 x16: ffff800011b4e3fc x15: 00000000ffffffff
x14: ffff0000d763b680 x13: 0000000000000001 x12: 0000000000000001
x11: 0000000000000000 x10: 0000000000000000 x9 : 5953197e95b28c00
x8 : 5953197e95b28c00 x7 : 0000000000000001 x6 : 0000000000000001
x5 : ffff80001f2b6ad8 x4 : ffff800014c50660 x3 : ffff8000085568c0
x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000029
Call trace:
 usb_submit_urb+0xa44/0x1588 drivers/usb/core/urb.c:502
 bcm5974_start_traffic+0xe0/0x154 drivers/input/mouse/bcm5974.c:799
 bcm5974_open+0x98/0x134 drivers/input/mouse/bcm5974.c:839
 input_open_device+0x170/0x29c drivers/input/input.c:640
 evdev_open_device drivers/input/evdev.c:400 [inline]
 evdev_open+0x308/0x4b4 drivers/input/evdev.c:487
 chrdev_open+0x3e8/0x4fc fs/char_dev.c:414
 do_dentry_open+0x780/0xed8 fs/open.c:826
 vfs_open+0x7c/0x90 fs/open.c:956
 do_open fs/namei.c:3608 [inline]
 path_openat+0x1ea0/0x26cc fs/namei.c:3742
 do_filp_open+0x1a8/0x3b4 fs/namei.c:3769
 do_sys_openat2+0x128/0x3e0 fs/open.c:1253
 do_sys_open fs/open.c:1269 [inline]
 __do_sys_openat fs/open.c:1285 [inline]
 __se_sys_openat fs/open.c:1280 [inline]
 __arm64_sys_openat+0x1f0/0x240 fs/open.c:1280
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142
 do_el0_svc+0x58/0x14c arch/arm64/kernel/syscall.c:181
 el0_svc+0x7c/0x1f0 arch/arm64/kernel/entry-common.c:608
 el0t_64_sync_handler+0x84/0xe4 arch/arm64/kernel/entry-common.c:626
 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584
irq event stamp: 30520
hardirqs last  enabled at (30519): [<ffff80000832c1b4>] __up_console_sem+0xb4/0x100 kernel/printk/printk.c:257
hardirqs last disabled at (30520): [<ffff800011b49ab0>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:396
softirqs last  enabled at (28888): [<ffff8000080309b8>] local_bh_enable+0x10/0x34 include/linux/bottom_half.h:31
softirqs last disabled at (28886): [<ffff800008030984>] local_bh_disable+0x10/0x34 include/linux/bottom_half.h:18
---[ end trace 26b3b733452feff1 ]---
bcm5974 1-1:1.0: could not read from device
------------[ cut here ]------------
usb 1-1: BOGUS urb xfer, pipe 1 != type 3
WARNING: CPU: 1 PID: 4021 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1588 drivers/usb/core/urb.c:502
Modules linked in:
CPU: 1 PID: 4021 Comm: udevd Tainted: G        W         5.15.178-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : usb_submit_urb+0xa44/0x1588 drivers/usb/core/urb.c:502
lr : usb_submit_urb+0xa44/0x1588 drivers/usb/core/urb.c:502
sp : ffff80001f2b7370
x29: ffff80001f2b73b0 x28: 0000000000000001 x27: ffff800012d51948
x26: ffff0000d6083e00 x25: ffff0000c2962000 x24: 0000000000000286
x23: ffff800012d58200 x22: dfff800000000000 x21: 0000000000000002
x20: 0000000000000cc0 x19: ffff0000c0feb400 x18: 0000000000000001
x17: 0000000000000000 x16: ffff800011b4e3fc x15: 00000000ffffffff
x14: ffff0000d763b680 x13: 0000000000000001 x12: 0000000000000001
x11: 0000000000000000 x10: 0000000000000000 x9 : 5953197e95b28c00
x8 : 5953197e95b28c00 x7 : 0000000000000001 x6 : 0000000000000001
x5 : ffff80001f2b6ad8 x4 : ffff800014c50660 x3 : ffff8000085568c0
x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000029
Call trace:
 usb_submit_urb+0xa44/0x1588 drivers/usb/core/urb.c:502
 bcm5974_start_traffic+0xe0/0x154 drivers/input/mouse/bcm5974.c:799
 bcm5974_open+0x98/0x134 drivers/input/mouse/bcm5974.c:839
 input_open_device+0x170/0x29c drivers/input/input.c:640
 evdev_open_device drivers/input/evdev.c:400 [inline]
 evdev_open+0x308/0x4b4 drivers/input/evdev.c:487
 chrdev_open+0x3e8/0x4fc fs/char_dev.c:414
 do_dentry_open+0x780/0xed8 fs/open.c:826
 vfs_open+0x7c/0x90 fs/open.c:956
 do_open fs/namei.c:3608 [inline]
 path_openat+0x1ea0/0x26cc fs/namei.c:3742
 do_filp_open+0x1a8/0x3b4 fs/namei.c:3769
 do_sys_openat2+0x128/0x3e0 fs/open.c:1253
 do_sys_open fs/open.c:1269 [inline]
 __do_sys_openat fs/open.c:1285 [inline]
 __se_sys_openat fs/open.c:1280 [inline]
 __arm64_sys_openat+0x1f0/0x240 fs/open.c:1280
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142
 do_el0_svc+0x58/0x14c arch/arm64/kernel/syscall.c:181
 el0_svc+0x7c/0x1f0 arch/arm64/kernel/entry-common.c:608
 el0t_64_sync_handler+0x84/0xe4 arch/arm64/kernel/entry-common.c:626
 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584
irq event stamp: 39440
hardirqs last  enabled at (39439): [<ffff80000832c1b4>] __up_console_sem+0xb4/0x100 kernel/printk/printk.c:257
hardirqs last disabled at (39440): [<ffff800011b49ab0>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:396
softirqs last  enabled at (38378): [<ffff8000080309b8>] local_bh_enable+0x10/0x34 include/linux/bottom_half.h:31
softirqs last disabled at (38376): [<ffff800008030984>] local_bh_disable+0x10/0x34 include/linux/bottom_half.h:18
---[ end trace 26b3b733452feff4 ]---
bcm5974 1-1:1.0: could not read from device
------------[ cut here ]------------
usb 1-1: BOGUS urb xfer, pipe 1 != type 3
WARNING: CPU: 0 PID: 4021 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1588 drivers/usb/core/urb.c:502
Modules linked in:
CPU: 0 PID: 4021 Comm: udevd Tainted: G        W         5.15.178-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : usb_submit_urb+0xa44/0x1588 drivers/usb/core/urb.c:502
lr : usb_submit_urb+0xa44/0x1588 drivers/usb/core/urb.c:502
sp : ffff80001f2b7370
x29: ffff80001f2b73b0 x28: 0000000000000001 x27: ffff800012d51948
x26: ffff0000ce0e3d00 x25: ffff0000ce39a000 x24: 0000000000000286
x23: ffff800012d58200 x22: dfff800000000000 x21: 0000000000000002
x20: 0000000000000cc0 x19: ffff0000c0fe4800 x18: 0000000000000001
x17: 0000000000000000 x16: ffff800011b4e3fc x15: 00000000ffffffff
x14: ffff0000d763b680 x13: 0000000000000001 x12: 0000000000000001
x11: 0000000000000000 x10: 0000000000000000 x9 : 5953197e95b28c00
x8 : 5953197e95b28c00 x7 : 0000000000000001 x6 : 0000000000000001
x5 : ffff80001f2b6ad8 x4 : ffff800014c50660 x3 : ffff8000085568c0
x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000029
Call trace:
 usb_submit_urb+0xa44/0x1588 drivers/usb/core/urb.c:502
 bcm5974_start_traffic+0xe0/0x154 drivers/input/mouse/bcm5974.c:799
 bcm5974_open+0x98/0x134 drivers/input/mouse/bcm5974.c:839
 input_open_device+0x170/0x29c drivers/input/input.c:640
 evdev_open_device drivers/input/evdev.c:400 [inline]
 evdev_open+0x308/0x4b4 drivers/input/evdev.c:487
 chrdev_open+0x3e8/0x4fc fs/char_dev.c:414
 do_dentry_open+0x780/0xed8 fs/open.c:826
 vfs_open+0x7c/0x90 fs/open.c:956
 do_open fs/namei.c:3608 [inline]
 path_openat+0x1ea0/0x26cc fs/namei.c:3742
 do_filp_open+0x1a8/0x3b4 fs/namei.c:3769
 do_sys_openat2+0x128/0x3e0 fs/open.c:1253
 do_sys_open fs/open.c:1269 [inline]
 __do_sys_openat fs/open.c:1285 [inline]
 __se_sys_openat fs/open.c:1280 [inline]
 __arm64_sys_openat+0x1f0/0x240 fs/open.c:1280
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142
 do_el0_svc+0x58/0x14c arch/arm64/kernel/syscall.c:181
 el0_svc+0x7c/0x1f0 arch/arm64/kernel/entry-common.c:608
 el0t_64_sync_handler+0x84/0xe4 arch/arm64/kernel/entry-common.c:626
 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584
irq event stamp: 47922
hardirqs last  enabled at (47921): [<ffff80000832c1b4>] __up_console_sem+0xb4/0x100 kernel/printk/printk.c:257
hardirqs last disabled at (47922): [<ffff800011b49ab0>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:396
softirqs last  enabled at (47400): [<ffff8000080309b8>] local_bh_enable+0x10/0x34 include/linux/bottom_half.h:31
softirqs last disabled at (47398): [<ffff800008030984>] local_bh_disable+0x10/0x34 include/linux/bottom_half.h:18
---[ end trace 26b3b733452feff6 ]---
bcm5974 1-1:1.0: could not read from device