Warning: Permanently added '10.128.0.246' (ED25519) to the list of known hosts. 2024/06/01 04:18:57 ignoring optional flag "sandboxArg"="0" 2024/06/01 04:18:58 parsed 1 programs 2024/06/01 04:18:58 executed programs: 0 [ 39.283825][ T4050] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 39.357387][ T4056] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.359266][ T4056] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.361373][ T4056] device bridge_slave_0 entered promiscuous mode [ 39.363353][ T4056] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.365212][ T4056] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.367217][ T4056] device bridge_slave_1 entered promiscuous mode [ 39.390959][ T4056] team0: Port device team_slave_0 added [ 39.392875][ T4056] team0: Port device team_slave_1 added [ 39.451635][ T4056] device hsr_slave_0 entered promiscuous mode [ 39.491187][ T4056] device hsr_slave_1 entered promiscuous mode [ 40.075034][ T4056] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 40.091759][ T4056] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 40.131603][ T4056] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 40.141952][ T4056] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 40.175170][ T4056] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.177074][ T4056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.179050][ T4056] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.180803][ T4056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.230981][ T4056] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.233454][ T3542] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.235615][ T3542] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.238353][ T3542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.240368][ T3542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.246396][ T4056] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 40.249238][ T4056] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.252968][ T3542] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.255103][ T3542] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.256878][ T3542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.258889][ T3542] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.261365][ T3542] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.263346][ T3542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.265365][ T3542] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.267670][ T3542] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.269958][ T3542] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.272490][ T3542] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.275262][ T3542] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 40.277231][ T3542] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 40.388503][ T4056] device veth0_vlan entered promiscuous mode [ 40.390905][ T4056] device veth1_vlan entered promiscuous mode [ 40.393191][ T3765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.395463][ T3765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.397646][ T3765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.399829][ T3765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.402659][ T3765] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 40.406861][ T4056] device veth0_macvtap entered promiscuous mode [ 40.409040][ T4056] device veth1_macvtap entered promiscuous mode [ 40.411185][ T3765] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.413288][ T3765] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.415320][ T3765] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 40.417362][ T3765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.419536][ T3765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.421903][ T3765] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 40.425574][ T3765] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 40.427651][ T3765] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.429819][ T3765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.432300][ T3765] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.434474][ T3765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.491732][ T1659] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.493649][ T1659] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.495876][ T3765] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 40.501073][ T528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.503146][ T528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.505297][ T3542] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 40.811062][ T21] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 41.241087][ T21] usb 1-1: config 0 has an invalid interface number: 10 but max is 0 [ 41.243229][ T21] usb 1-1: config 0 has no interface number 0 [ 41.244746][ T21] usb 1-1: config 0 interface 10 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 41.247450][ T21] usb 1-1: config 0 interface 10 altsetting 0 endpoint 0x81 has invalid maxpacket 21669, setting to 1024 [ 41.250286][ T21] usb 1-1: config 0 interface 10 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 41.252904][ T21] usb 1-1: config 0 interface 10 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 41.411102][ T21] usb 1-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice=d4.d7 [ 41.413516][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.415671][ T21] usb 1-1: Product: syz [ 41.416720][ T21] usb 1-1: Manufacturer: syz [ 41.417899][ T21] usb 1-1: SerialNumber: syz [ 41.419737][ T21] usb 1-1: config 0 descriptor?? [ 41.441165][ T4393] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 41.461977][ T21] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.10/input/input2 [ 41.891101][ T4097] ------------[ cut here ]------------ [ 41.892620][ T4097] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 41.894315][ T4097] WARNING: CPU: 1 PID: 4097 at drivers/usb/core/urb.c:505 usb_submit_urb+0x594/0x9b4 [ 41.896813][ T4097] Modules linked in: [ 41.897822][ T4097] CPU: 1 PID: 4097 Comm: udevd Not tainted 6.1.92-syzkaller #0 [ 41.899705][ T4097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 41.902273][ T4097] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 41.904333][ T4097] pc : usb_submit_urb+0x594/0x9b4 [ 41.905648][ T4097] lr : usb_submit_urb+0x594/0x9b4 [ 41.906988][ T4097] sp : ffff8000125438e0 [ 41.908036][ T4097] x29: ffff8000125438f0 x28: ffff0000c62f7800 x27: ffff0000cd420a5c [ 41.910167][ T4097] x26: ffff80000ce43f68 x25: ffff0000c62f78a8 x24: ffff0000cd595600 [ 41.912295][ T4097] x23: ffff80000ce6eea2 x22: 0000000000000400 x21: 0000000000000002 [ 41.914445][ T4097] x20: 0000000000000cc0 x19: ffff0000cd420a00 x18: ffff80000bd3d2cc [ 41.916590][ T4097] x17: 0000000000018000 x16: 0000000000000079 x15: 0000000000000000 [ 41.918709][ T4097] x14: 0000000000000000 x13: 205d373930345420 x12: ffff80000e679000 [ 41.920863][ T4097] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ef8cc79bfa2daf00 [ 41.923030][ T4097] x8 : ef8cc79bfa2daf00 x7 : 0000000000000000 x6 : ffff80000bcfad2c [ 41.925253][ T4097] x5 : 0000000000000000 x4 : 0000000000000080 x3 : 0000000000000000 [ 41.927404][ T4097] x2 : 0000000000000000 x1 : 0000000100000000 x0 : 0000000000000000 [ 41.929519][ T4097] Call trace: [ 41.930388][ T4097] usb_submit_urb+0x594/0x9b4 [ 41.931659][ T4097] bcm5974_start_traffic+0xa0/0xfc [ 41.933001][ T4097] bcm5974_open+0x5c/0xb4 [ 41.934142][ T4097] input_open_device+0xe8/0x14c [ 41.935418][ T4097] evdev_open+0x1b4/0x258 [ 41.936599][ T4097] chrdev_open+0x27c/0x2b0 [ 41.937760][ T4097] do_dentry_open+0x36c/0x6f8 [ 41.939036][ T4097] vfs_open+0x38/0x48 [ 41.940028][ T4097] path_openat+0xf04/0x1328 [ 41.941224][ T4097] do_filp_open+0xd0/0x1a8 [ 41.942390][ T4097] do_sys_openat2+0xb8/0x22c [ 41.943521][ T4097] __arm64_sys_openat+0xb0/0xe0 [ 41.944807][ T4097] invoke_syscall+0x64/0x178 [ 41.945990][ T4097] el0_svc_common+0xb8/0x174 [ 41.947162][ T4097] do_el0_svc+0x48/0x174 [ 41.948298][ T4097] el0_svc+0x34/0x110 [ 41.949366][ T4097] el0t_64_sync_handler+0x84/0xf0 [ 41.950781][ T4097] el0t_64_sync+0x18c/0x190 [ 41.951944][ T4097] ---[ end trace 0000000000000000 ]--- [ 41.971041][ C1] ------------[ cut here ]------------ [ 41.972524][ C1] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 41.974176][ C1] WARNING: CPU: 1 PID: 0 at drivers/usb/core/urb.c:505 usb_submit_urb+0x594/0x9b4 [ 41.976717][ C1] Modules linked in: [ 41.977760][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G W 6.1.92-syzkaller #0 [ 41.980077][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 41.982741][ C1] pstate: 604000c5 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 41.984863][ C1] pc : usb_submit_urb+0x594/0x9b4 [ 41.986164][ C1] lr : usb_submit_urb+0x594/0x9b4 [ 41.987404][ C1] sp : ffff80000800bba0 [ 41.988521][ C1] x29: ffff80000800bbb0 x28: ffff0000c62f7800 x27: ffff0000cd420a5c [ 41.990648][ C1] x26: ffff80000ce43f68 x25: ffff0000c62f78a8 x24: ffff0000cd595600 [ 41.992772][ C1] x23: ffff80000ce6eea2 x22: 0000000000000400 x21: 0000000000000002 [ 41.994814][ C1] x20: 0000000000000a20 x19: ffff0000cd420a00 x18: ffff0000c00a66b0 [ 41.996855][ C1] x17: ffff8001f1632000 x16: ffff800008008000 x15: 0000000000000000 [ 41.998930][ C1] x14: 0000000000000000 x13: 205d314320202020 x12: ffff80000e679000 [ 42.001039][ C1] x11: 0000000000ff0100 x10: 0000000000000000 x9 : d32eaedf49652100 [ 42.003171][ C1] x8 : d32eaedf49652100 x7 : 0000000000000000 x6 : ffff80000bcfad2c [ 42.005415][ C1] x5 : 0000000000000000 x4 : 0000000000000080 x3 : 0000000000000000 [ 42.007562][ C1] x2 : 0000000000000000 x1 : 0000000100000101 x0 : 0000000000000000 [ 42.009663][ C1] Call trace: [ 42.010534][ C1] usb_submit_urb+0x594/0x9b4 [ 42.011795][ C1] bcm5974_irq_trackpad+0x138/0x524 [ 42.013257][ C1] __usb_hcd_giveback_urb+0x16c/0x244 [ 42.014650][ C1] usb_hcd_giveback_urb+0x78/0x238 [ 42.015942][ C1] dummy_timer+0x2c8/0x102c [ 42.017225][ C1] call_timer_fn+0x7c/0x15c [ 42.018390][ C1] __run_timers+0x60c/0x6f8 [ 42.019582][ C1] run_timer_softirq+0x34/0x5c [ 42.020852][ C1] __do_softirq+0x100/0x29c [ 42.022063][ C1] ____do_softirq+0x14/0x20 [ 42.023253][ C1] call_on_irq_stack+0x24/0x4c [ 42.024475][ C1] do_softirq_own_stack+0x20/0x2c [ 42.025799][ C1] __irq_exit_rcu+0xb0/0x124 [ 42.026983][ C1] irq_exit_rcu+0x10/0x1c [ 42.028135][ C1] el1_interrupt+0x38/0x68 [ 42.029321][ C1] el1h_64_irq_handler+0x18/0x24 [ 42.030617][ C1] el1h_64_irq+0x64/0x68 [ 42.031744][ C1] arch_local_irq_enable+0xc/0x18 [ 42.033102][ C1] do_idle+0x110/0x2d8 [ 42.034189][ C1] cpu_startup_entry+0x34/0x38 [ 42.035431][ C1] secondary_start_kernel+0x150/0x178 [ 42.036876][ C1] __secondary_switched+0xb0/0xb4 [ 42.038172][ C1] ---[ end trace 0000000000000000 ]--- [ 42.091494][ T3765] usb 1-1: USB disconnect, device number 2 [ 42.111070][ T4097] bcm5974 1-1:0.10: could not read from device [ 42.871097][ T21] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 43.241083][ T21] usb 1-1: config 0 has an invalid interface number: 10 but max is 0 [ 43.243297][ T21] usb 1-1: config 0 has no interface number 0 [ 43.244909][ T21] usb 1-1: config 0 interface 10 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 43.247561][ T21] usb 1-1: config 0 interface 10 altsetting 0 endpoint 0x81 has invalid maxpacket 21669, setting to 1024 [ 43.250522][ T21] usb 1-1: config 0 interface 10 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 43.253152][ T21] usb 1-1: config 0 interface 10 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 43.411150][ T21] usb 1-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice=d4.d7 [ 43.413483][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.415523][ T21] usb 1-1: Product: syz [ 43.416566][ T21] usb 1-1: Manufacturer: syz [ 43.417801][ T21] usb 1-1: SerialNumber: syz [ 43.419525][ T21] usb 1-1: config 0 descriptor?? [ 43.431133][ T4500] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 43.451765][ T21] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.10/input/input3 [ 43.891108][ T4097] ------------[ cut here ]------------ [ 43.892523][ T4097] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 43.894245][ T4097] WARNING: CPU: 0 PID: 4097 at drivers/usb/core/urb.c:505 usb_submit_urb+0x594/0x9b4 [ 43.896718][ T4097] Modules linked in: [ 43.897752][ T4097] CPU: 0 PID: 4097 Comm: udevd Tainted: G W 6.1.92-syzkaller #0 [ 43.900112][ T4097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 43.902767][ T4097] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 43.904917][ T4097] pc : usb_submit_urb+0x594/0x9b4 [ 43.906279][ T4097] lr : usb_submit_urb+0x594/0x9b4 [ 43.907600][ T4097] sp : ffff8000125438e0 [ 43.908694][ T4097] x29: ffff8000125438f0 x28: ffff0000cc95f800 x27: ffff0000cd5a895c [ 43.910778][ T4097] x26: ffff80000ce43f68 x25: ffff0000cc95f8a8 x24: ffff0000cd5c4200 [ 43.912895][ T4097] x23: ffff80000ce6eea2 x22: 0000000000000400 x21: 0000000000000002 [ 43.915070][ T4097] x20: 0000000000000cc0 x19: ffff0000cd5a8900 x18: 0000000000000000 [ 43.917125][ T4097] x17: 0000000000000000 x16: 0000000000000007 x15: 0000000000000000 [ 43.919269][ T4097] x14: 0000000000000000 x13: 205d373930345420 x12: ffff80000e679000 [ 43.921347][ T4097] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ef8cc79bfa2daf00 [ 43.923415][ T4097] x8 : ef8cc79bfa2daf00 x7 : 0000000000000000 x6 : ffff80000bcfad2c [ 43.925581][ T4097] x5 : 0000000000000000 x4 : 0000000000000080 x3 : 0000000000000000 [ 43.927751][ T4097] x2 : 0000000000000000 x1 : 0000000100000000 x0 : 0000000000000000 [ 43.929836][ T4097] Call trace: [ 43.930695][ T4097] usb_submit_urb+0x594/0x9b4 [ 43.931924][ T4097] bcm5974_start_traffic+0xa0/0xfc [ 43.933267][ T4097] bcm5974_open+0x5c/0xb4 [ 43.934400][ T4097] input_open_device+0xe8/0x14c [ 43.935696][ T4097] evdev_open+0x1b4/0x258 [ 43.936815][ T4097] chrdev_open+0x27c/0x2b0 [ 43.937925][ T4097] do_dentry_open+0x36c/0x6f8 [ 43.939111][ T4097] vfs_open+0x38/0x48 [ 43.940135][ T4097] path_openat+0xf04/0x1328 [ 43.941371][ T4097] do_filp_open+0xd0/0x1a8 [ 43.942569][ T4097] do_sys_openat2+0xb8/0x22c [ 43.943755][ T4097] __arm64_sys_openat+0xb0/0xe0 [ 43.945015][ T4097] invoke_syscall+0x64/0x178 [ 43.946186][ T4097] el0_svc_common+0xb8/0x174 [ 43.947418][ T4097] do_el0_svc+0x48/0x174 [ 43.948489][ T4097] el0_svc+0x34/0x110 [ 43.949544][ T4097] el0t_64_sync_handler+0x84/0xf0 [ 43.950781][ T4097] el0t_64_sync+0x18c/0x190 [ 43.951912][ T4097] ---[ end trace 0000000000000000 ]--- [ 43.971048][ C0] ------------[ cut here ]------------ [ 43.972439][ C0] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 43.974183][ C0] WARNING: CPU: 0 PID: 0 at drivers/usb/core/urb.c:505 usb_submit_urb+0x594/0x9b4 [ 43.976578][ C0] Modules linked in: [ 43.977534][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G W 6.1.92-syzkaller #0 [ 43.979904][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 43.982497][ C0] pstate: 604000c5 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 43.984544][ C0] pc : usb_submit_urb+0x594/0x9b4 [ 43.985903][ C0] lr : usb_submit_urb+0x594/0x9b4 [ 43.987201][ C0] sp : ffff800008003ba0 [ 43.988250][ C0] x29: ffff800008003bb0 x28: ffff0000cc95f800 x27: ffff0000cd5a895c [ 43.990340][ C0] x26: ffff80000ce43f68 x25: ffff0000cc95f8a8 x24: ffff0000cd5c4200 [ 43.992333][ C0] x23: ffff80000ce6eea2 x22: 0000000000000400 x21: 0000000000000002 [ 43.994420][ C0] x20: 0000000000000a20 x19: ffff0000cd5a8900 x18: 0000000000000000 [ 43.996529][ C0] x17: ffff8001f161a000 x16: ffff800008000000 x15: 0000000000000000 [ 43.998640][ C0] x14: 0000000000000000 x13: 205d304320202020 x12: ffff80000e679000 [ 44.000712][ C0] x11: 0000000000ff0100 x10: 0000000000000000 x9 : a0fb6f4130527100 [ 44.002782][ C0] x8 : a0fb6f4130527100 x7 : 0000000000000000 x6 : ffff80000bcfad2c [ 44.004835][ C0] x5 : 0000000000000000 x4 : 0000000000000080 x3 : 0000000000000000 [ 44.006902][ C0] x2 : 0000000000000000 x1 : 0000000100000101 x0 : 0000000000000000 [ 44.008990][ C0] Call trace: [ 44.009788][ C0] usb_submit_urb+0x594/0x9b4 [ 44.011027][ C0] bcm5974_irq_trackpad+0x138/0x524 [ 44.012366][ C0] __usb_hcd_giveback_urb+0x16c/0x244 [ 44.013773][ C0] usb_hcd_giveback_urb+0x78/0x238 [ 44.015055][ C0] dummy_timer+0x2c8/0x102c [ 44.016250][ C0] call_timer_fn+0x7c/0x15c [ 44.017451][ C0] __run_timers+0x60c/0x6f8 [ 44.018668][ C0] run_timer_softirq+0x34/0x5c [ 44.019901][ C0] __do_softirq+0x100/0x29c [ 44.021067][ C0] ____do_softirq+0x14/0x20 [ 44.022238][ C0] call_on_irq_stack+0x24/0x4c [ 44.023531][ C0] do_softirq_own_stack+0x20/0x2c [ 44.024830][ C0] __irq_exit_rcu+0xb0/0x124 [ 44.026034][ C0] irq_exit_rcu+0x10/0x1c [ 44.027139][ C0] el1_interrupt+0x38/0x68 [ 44.028349][ C0] el1h_64_irq_handler+0x18/0x24 [ 44.029651][ C0] el1h_64_irq+0x64/0x68 [ 44.030695][ C0] arch_local_irq_enable+0xc/0x18 [ 44.031976][ C0] do_idle+0x110/0x2d8 [ 44.033083][ C0] cpu_startup_entry+0x34/0x38 [ 44.034419][ C0] kernel_init+0x0/0x290 [ 44.035549][ C0] start_kernel+0x0/0x4c0 [ 44.036702][ C0] start_kernel+0x30c/0x4c0 [ 44.037882][ C0] __primary_switched+0xb4/0xbc [ 44.039160][ C0] ---[ end trace 0000000000000000 ]--- [ 44.040610][ C0] ------------[ cut here ]------------ [ 44.041968][ C0] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 44.043732][ C0] WARNING: CPU: 0 PID: 0 at drivers/usb/core/urb.c:505 usb_submit_urb+0x594/0x9b4 [ 44.046206][ C0] Modules linked in: [ 44.047214][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G W 6.1.92-syzkaller #0 [ 44.049560][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 44.052248][ C0] pstate: 604000c5 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 44.054278][ C0] pc : usb_submit_urb+0x594/0x9b4 [ 44.055709][ C0] lr : usb_submit_urb+0x594/0x9b4 [ 44.057106][ C0] sp : ffff800008003ba0 [ 44.058143][ C0] x29: ffff800008003bb0 x28: ffff0000cc95f800 x27: ffff0000cd5a895c [ 44.060233][ C0] x26: ffff80000ce43f68 x25: ffff0000cc95f8a8 x24: ffff0000cd5c4200 [ 44.062389][ C0] x23: ffff80000ce6eea2 x22: 0000000000000400 x21: 0000000000000002 [ 44.064550][ C0] x20: 0000000000000a20 x19: ffff0000cd5a8900 x18: ffff80000bd3d2cc [ 44.066579][ C0] x17: 0000000000000000 x16: 0000000000000010 x15: 0000000000000000 [ 44.068728][ C0] x14: 0000000000000000 x13: 205d304320202020 x12: ffff80000e679000 [ 44.070842][ C0] x11: 0000000000ff0100 x10: 0000000000000000 x9 : a0fb6f4130527100 [ 44.073026][ C0] x8 : a0fb6f4130527100 x7 : 0000000000000000 x6 : ffff80000bcfad2c [ 44.075128][ C0] x5 : 0000000000000000 x4 : 0000000000000080 x3 : 0000000000000000 [ 44.077244][ C0] x2 : 0000000000000000 x1 : 0000000000000101 x0 : 0000000000000000 [ 44.079390][ C0] Call trace: [ 44.080259][ C0] usb_submit_urb+0x594/0x9b4 [ 44.081537][ C0] bcm5974_irq_trackpad+0x138/0x524 [ 44.082910][ C0] __usb_hcd_giveback_urb+0x16c/0x244 [ 44.084296][ C0] usb_hcd_giveback_urb+0x78/0x238 [ 44.085675][ C0] dummy_timer+0x2c8/0x102c [ 44.086836][ C0] call_timer_fn+0x7c/0x15c [ 44.088039][ C0] __run_timers+0x60c/0x6f8 [ 44.089287][ C0] run_timer_softirq+0x34/0x5c [ 44.090565][ C0] __do_softirq+0x100/0x29c [ 44.091486][ T21] usb 1-1: USB disconnect, device number 3 [ 44.091765][ C0] ____do_softirq+0x14/0x20 [ 44.094545][ C0] call_on_irq_stack+0x24/0x4c [ 44.095830][ C0] do_softirq_own_stack+0x20/0x2c [ 44.097204][ C0] __irq_exit_rcu+0xb0/0x124 [ 44.098423][ C0] irq_exit_rcu+0x10/0x1c [ 44.099535][ C0] el1_interrupt+0x38/0x68 [ 44.100744][ C0] el1h_64_irq_handler+0x18/0x24 [ 44.102030][ C0] el1h_64_irq+0x64/0x68 [ 44.103152][ C0] arch_local_irq_enable+0xc/0x18 [ 44.104601][ C0] do_idle+0x110/0x2d8 [ 44.105731][ C0] cpu_startup_entry+0x34/0x38 [ 44.106987][ C0] kernel_init+0x0/0x290 [ 44.108090][ C0] start_kernel+0x0/0x4c0 [ 44.109228][ C0] start_kernel+0x30c/0x4c0 [ 44.110396][ C0] __primary_switched+0xb4/0xbc [ 44.111672][ C0] ---[ end trace 0000000000000000 ]--- [ 44.113131][ C0] bcm5974 1-1:0.10: trackpad urb failed: -2 [ 44.115069][ T4097] bcm5974 1-1:0.10: could not read from device 2024/06/01 04:19:03 executed programs: 2 [ 44.861046][ T21] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 45.251111][ T21] usb 1-1: config 0 has an invalid interface number: 10 but max is 0 [ 45.253290][ T21] usb 1-1: config 0 has no interface number 0 [ 45.254902][ T21] usb 1-1: config 0 interface 10 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 45.257657][ T21] usb 1-1: config 0 interface 10 altsetting 0 endpoint 0x81 has invalid maxpacket 21669, setting to 1024 [ 45.260560][ T21] usb 1-1: config 0 interface 10 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 45.263161][ T21] usb 1-1: config 0 interface 10 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 45.421109][ T21] usb 1-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice=d4.d7 [ 45.423570][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.425574][ T21] usb 1-1: Product: syz [ 45.426579][ T21] usb 1-1: Manufacturer: syz [ 45.427697][ T21] usb 1-1: SerialNumber: syz [ 45.429298][ T21] usb 1-1: config 0 descriptor?? [ 45.441147][ T4502] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 45.461745][ T21] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.10/input/input4 [ 45.901120][ T4097] ------------[ cut here ]------------ [ 45.902724][ T4097] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 45.904571][ T4097] WARNING: CPU: 0 PID: 4097 at drivers/usb/core/urb.c:505 usb_submit_urb+0x594/0x9b4 [ 45.907131][ T4097] Modules linked in: [ 45.908267][ T4097] CPU: 0 PID: 4097 Comm: udevd Tainted: G W 6.1.92-syzkaller #0 [ 45.910709][ T4097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 45.913397][ T4097] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 45.915455][ T4097] pc : usb_submit_urb+0x594/0x9b4 [ 45.916911][ T4097] lr : usb_submit_urb+0x594/0x9b4 [ 45.918196][ T4097] sp : ffff8000125438e0 [ 45.919390][ T4097] x29: ffff8000125438f0 x28: ffff0000cc95f800 x27: ffff0000cd5a825c [ 45.921519][ T4097] x26: ffff80000ce43f68 x25: ffff0000cc95f8a8 x24: ffff0000cca5b900 [ 45.923706][ T4097] x23: ffff80000ce6eea2 x22: 0000000000000400 x21: 0000000000000002 [ 45.925794][ T4097] x20: 0000000000000cc0 x19: ffff0000cd5a8200 x18: 0000000000000000 [ 45.928067][ T4097] x17: 00000000000768ce x16: 0000000000000009 x15: 0000000000000000 [ 45.930153][ T4097] x14: 0000000000000000 x13: 205d373930345420 x12: ffff80000e679000 [ 45.932315][ T4097] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ef8cc79bfa2daf00 [ 45.934478][ T4097] x8 : ef8cc79bfa2daf00 x7 : 0000000000000000 x6 : ffff80000bcfad2c [ 45.936639][ T4097] x5 : 0000000000000000 x4 : 0000000000000080 x3 : 0000000000000000 [ 45.938844][ T4097] x2 : 0000000000000000 x1 : 0000000100000000 x0 : 0000000000000000 [ 45.940997][ T4097] Call trace: [ 45.941819][ T4097] usb_submit_urb+0x594/0x9b4 [ 45.943034][ T4097] bcm5974_start_traffic+0xa0/0xfc [ 45.944392][ T4097] bcm5974_open+0x5c/0xb4 [ 45.945626][ T4097] input_open_device+0xe8/0x14c [ 45.946929][ T4097] evdev_open+0x1b4/0x258 [ 45.948101][ T4097] chrdev_open+0x27c/0x2b0 [ 45.949254][ T4097] do_dentry_open+0x36c/0x6f8 [ 45.950553][ T4097] vfs_open+0x38/0x48 [ 45.951663][ T4097] path_openat+0xf04/0x1328 [ 45.952799][ T4097] do_filp_open+0xd0/0x1a8 [ 45.954060][ T4097] do_sys_openat2+0xb8/0x22c [ 45.955320][ T4097] __arm64_sys_openat+0xb0/0xe0 [ 45.956661][ T4097] invoke_syscall+0x64/0x178 [ 45.957874][ T4097] el0_svc_common+0xb8/0x174 [ 45.959075][ T4097] do_el0_svc+0x48/0x174 [ 45.960257][ T4097] el0_svc+0x34/0x110 [ 45.961297][ T4097] el0t_64_sync_handler+0x84/0xf0 [ 45.962623][ T4097] el0t_64_sync+0x18c/0x190 [ 45.963753][ T4097] ---[ end trace 0000000000000000 ]--- [ 45.981042][ C0] ------------[ cut here ]------------ [ 45.982547][ C0] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 45.984393][ C0] WARNING: CPU: 0 PID: 0 at drivers/usb/core/urb.c:505 usb_submit_urb+0x594/0x9b4 [ 45.986935][ C0] Modules linked in: [ 45.988040][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G W 6.1.92-syzkaller #0 [ 45.990529][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 45.993274][ C0] pstate: 604000c5 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 45.995337][ C0] pc : usb_submit_urb+0x594/0x9b4 [ 45.996820][ C0] lr : usb_submit_urb+0x594/0x9b4 [ 45.998233][ C0] sp : ffff800008003ba0 [ 45.999401][ C0] x29: ffff800008003bb0 x28: ffff0000cc95f800 x27: ffff0000cd5a825c [ 46.001573][ C0] x26: ffff80000ce43f68 x25: ffff0000cc95f8a8 x24: ffff0000cca5b900 [ 46.003996][ C0] x23: ffff80000ce6eea2 x22: 0000000000000400 x21: 0000000000000002 [ 46.006225][ C0] x20: 0000000000000a20 x19: ffff0000cd5a8200 x18: 0000000000000000 [ 46.008349][ C0] x17: ffff8001f161a000 x16: ffff800008000000 x15: 0000000000000000 [ 46.010478][ C0] x14: 0000000000000000 x13: 205d304320202020 x12: ffff80000e679000 [ 46.012613][ C0] x11: 0000000000ff0100 x10: 0000000000000000 x9 : a0fb6f4130527100 [ 46.014730][ C0] x8 : a0fb6f4130527100 x7 : 0000000000000000 x6 : ffff80000bcfad2c [ 46.016884][ C0] x5 : 0000000000000000 x4 : 0000000000000080 x3 : 0000000000000000 [ 46.018991][ C0] x2 : 0000000000000000 x1 : 0000000100000101 x0 : 0000000000000000 [ 46.021178][ C0] Call trace: [ 46.022143][ C0] usb_submit_urb+0x594/0x9b4 [ 46.023400][ C0] bcm5974_irq_trackpad+0x138/0x524 [ 46.024829][ C0] __usb_hcd_giveback_urb+0x16c/0x244 [ 46.026341][ C0] usb_hcd_giveback_urb+0x78/0x238 [ 46.027765][ C0] dummy_timer+0x2c8/0x102c [ 46.028958][ C0] call_timer_fn+0x7c/0x15c [ 46.030168][ C0] __run_timers+0x60c/0x6f8 [ 46.031312][ C0] run_timer_softirq+0x34/0x5c [ 46.032589][ C0] __do_softirq+0x100/0x29c [ 46.033752][ C0] ____do_softirq+0x14/0x20 [ 46.034875][ C0] call_on_irq_stack+0x24/0x4c [ 46.036096][ C0] do_softirq_own_stack+0x20/0x2c [ 46.037419][ C0] __irq_exit_rcu+0xb0/0x124 [ 46.038647][ C0] irq_exit_rcu+0x10/0x1c [ 46.039745][ C0] el1_interrupt+0x38/0x68 [ 46.040932][ C0] el1h_64_irq_handler+0x18/0x24 [ 46.042260][ C0] el1h_64_irq+0x64/0x68 [ 46.043344][ C0] arch_local_irq_enable+0xc/0x18 [ 46.044669][ C0] do_idle+0x110/0x2d8 [ 46.045772][ C0] cpu_startup_entry+0x34/0x38 [ 46.047025][ C0] kernel_init+0x0/0x290 [ 46.048157][ C0] start_kernel+0x0/0x4c0 [ 46.049335][ C0] start_kernel+0x30c/0x4c0 [ 46.050553][ C0] __primary_switched+0xb4/0xbc [ 46.051854][ C0] ---[ end trace 0000000000000000 ]--- [ 46.061044][ C0] ------------[ cut here ]------------ [ 46.062571][ C0] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 46.064332][ C0] WARNING: CPU: 0 PID: 0 at drivers/usb/core/urb.c:505 usb_submit_urb+0x594/0x9b4 [ 46.066621][ C0] Modules linked in: [ 46.067644][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G W 6.1.92-syzkaller #0 [ 46.070138][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 46.072863][ C0] pstate: 604000c5 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 46.075048][ C0] pc : usb_submit_urb+0x594/0x9b4 [ 46.076355][ C0] lr : usb_submit_urb+0x594/0x9b4 [ 46.077639][ C0] sp : ffff800008003ba0 [ 46.078721][ C0] x29: ffff800008003bb0 x28: ffff0000cc95f800 x27: ffff0000cd5a825c [ 46.080796][ C0] x26: ffff80000ce43f68 x25: ffff0000cc95f8a8 x24: ffff0000cca5b900 [ 46.082963][ C0] x23: ffff80000ce6eea2 x22: 0000000000000400 x21: 0000000000000002 [ 46.085076][ C0] x20: 0000000000000a20 x19: ffff0000cd5a8200 x18: 0000000000000000 [ 46.087191][ C0] x17: ffff8001f161a000 x16: ffff800008000000 x15: 0000000000000000 [ 46.089318][ C0] x14: 0000000000000000 x13: 205d304320202020 x12: ffff80000e679000 [ 46.091415][ C0] x11: 0000000000ff0100 x10: 0000000000000000 x9 : a0fb6f4130527100 [ 46.093615][ C0] x8 : a0fb6f4130527100 x7 : 0000000000000000 x6 : ffff80000bcfad2c [ 46.095771][ C0] x5 : 0000000000000000 x4 : 0000000000000080 x3 : 0000000000000000 [ 46.097892][ C0] x2 : 0000000000000000 x1 : 0000000100000101 x0 : 0000000000000000 [ 46.099966][ C0] Call trace: [ 46.100796][ C0] usb_submit_urb+0x594/0x9b4 [ 46.102052][ C0] bcm5974_irq_trackpad+0x138/0x524 [ 46.103446][ C0] __usb_hcd_giveback_urb+0x16c/0x244 [ 46.104942][ C0] usb_hcd_giveback_urb+0x78/0x238 [ 46.106281][ C0] dummy_timer+0x2c8/0x102c [ 46.107448][ C0] call_timer_fn+0x7c/0x15c [ 46.108603][ C0] __run_timers+0x60c/0x6f8 [ 46.109758][ C0] run_timer_softirq+0x34/0x5c [ 46.111040][ C0] __do_softirq+0x100/0x29c [ 46.112232][ C0] ____do_softirq+0x14/0x20 [ 46.113436][ C0] call_on_irq_stack+0x24/0x4c [ 46.114730][ C0] do_softirq_own_stack+0x20/0x2c [ 46.116146][ C0] __irq_exit_rcu+0xb0/0x124 [ 46.117349][ C0] irq_exit_rcu+0x10/0x1c [ 46.118503][ C0] el1_interrupt+0x38/0x68 [ 46.119660][ C0] el1h_64_irq_handler+0x18/0x24 [ 46.120978][ C0] el1h_64_irq+0x64/0x68 [ 46.122135][ C0] arch_local_irq_enable+0xc/0x18 [ 46.123448][ C0] do_idle+0x110/0x2d8 [ 46.124485][ C0] cpu_startup_entry+0x34/0x38 [ 46.125787][ C0] kernel_init+0x0/0x290 [ 46.126908][ C0] start_kernel+0x0/0x4c0 [ 46.128060][ C0] start_kernel+0x30c/0x4c0 [ 46.129212][ C0] __primary_switched+0xb4/0xbc [ 46.130566][ C0] ---[ end trace 0000000000000000 ]--- [ 46.132890][ T21] usb 1-1: USB disconnect, device number 4 [ 46.151069][ T4097] bcm5974 1-1:0.10: could not read from device [ 46.901080][ T3725] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 47.261097][ T3725] usb 1-1: config 0 has an invalid interface number: 10 but max is 0 [ 47.263262][ T3725] usb 1-1: config 0 has no interface number 0 [ 47.264835][ T3725] usb 1-1: config 0 interface 10 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 47.267516][ T3725] usb 1-1: config 0 interface 10 altsetting 0 endpoint 0x81 has invalid maxpacket 21669, setting to 1024 [ 47.270500][ T3725] usb 1-1: config 0 interface 10 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 47.273271][ T3725] usb 1-1: config 0 interface 10 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 47.431098][ T3725] usb 1-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice=d4.d7 [ 47.433564][ T3725] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.435609][ T3725] usb 1-1: Product: syz [ 47.436664][ T3725] usb 1-1: Manufacturer: syz [ 47.437909][ T3725] usb 1-1: SerialNumber: syz [ 47.439845][ T3725] usb 1-1: config 0 descriptor?? [ 47.461171][ T4504] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 47.481987][ T3725] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.10/input/input5 [ 47.921086][ T4097] ------------[ cut here ]------------ [ 47.922621][ T4097] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 47.924335][ T4097] WARNING: CPU: 0 PID: 4097 at drivers/usb/core/urb.c:505 usb_submit_urb+0x594/0x9b4 [ 47.926867][ T4097] Modules linked in: [ 47.927863][ T4097] CPU: 0 PID: 4097 Comm: udevd Tainted: G W 6.1.92-syzkaller #0 [ 47.930242][ T4097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 47.932875][ T4097] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 47.935032][ T4097] pc : usb_submit_urb+0x594/0x9b4 [ 47.936333][ T4097] lr : usb_submit_urb+0x594/0x9b4 [ 47.937686][ T4097] sp : ffff8000125438e0 [ 47.938734][ T4097] x29: ffff8000125438f0 x28: ffff0000c93a8800 x27: ffff0000cd7f085c [ 47.940847][ T4097] x26: ffff80000ce43f68 x25: ffff0000c93a88a8 x24: ffff0000cca5b280 [ 47.942918][ T4097] x23: ffff80000ce6eea2 x22: 0000000000000400 x21: 0000000000000002 [ 47.944987][ T4097] x20: 0000000000000cc0 x19: ffff0000cd7f0800 x18: 0000000000000000 [ 47.947133][ T4097] x17: 00000000000618d8 x16: 0000000000000005 x15: 0000000000000000 [ 47.949232][ T4097] x14: 0000000000000000 x13: 205d373930345420 x12: ffff80000e679000 [ 47.951277][ T4097] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ef8cc79bfa2daf00 [ 47.953341][ T4097] x8 : ef8cc79bfa2daf00 x7 : 0000000000000000 x6 : ffff80000bcfad2c [ 47.955466][ T4097] x5 : 0000000000000000 x4 : 0000000000000080 x3 : 0000000000000000 [ 47.957562][ T4097] x2 : 0000000000000000 x1 : 0000000100000000 x0 : 0000000000000000 [ 47.959612][ T4097] Call trace: [ 47.960459][ T4097] usb_submit_urb+0x594/0x9b4 [ 47.961725][ T4097] bcm5974_start_traffic+0xa0/0xfc [ 47.963018][ T4097] bcm5974_open+0x5c/0xb4 [ 47.964101][ T4097] input_open_device+0xe8/0x14c [ 47.965380][ T4097] evdev_open+0x1b4/0x258 [ 47.966506][ T4097] chrdev_open+0x27c/0x2b0 [ 47.967683][ T4097] do_dentry_open+0x36c/0x6f8 [ 47.968909][ T4097] vfs_open+0x38/0x48 [ 47.969945][ T4097] path_openat+0xf04/0x1328 [ 47.971093][ T4097] do_filp_open+0xd0/0x1a8 [ 47.972237][ T4097] do_sys_openat2+0xb8/0x22c [ 47.973465][ T4097] __arm64_sys_openat+0xb0/0xe0 [ 47.974736][ T4097] invoke_syscall+0x64/0x178 [ 47.975950][ T4097] el0_svc_common+0xb8/0x174 [ 47.977198][ T4097] do_el0_svc+0x48/0x174 [ 47.978344][ T4097] el0_svc+0x34/0x110 [ 47.979397][ T4097] el0t_64_sync_handler+0x84/0xf0 [ 47.980669][ T4097] el0t_64_sync+0x18c/0x190 [ 47.981799][ T4097] ---[ end trace 0000000000000000 ]--- [ 48.001042][ C0] ------------[ cut here ]------------ [ 48.002541][ C0] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 48.004254][ C0] WARNING: CPU: 0 PID: 0 at drivers/usb/core/urb.c:505 usb_submit_urb+0x594/0x9b4 [ 48.006621][ C0] Modules linked in: [ 48.007637][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G W 6.1.92-syzkaller #0 [ 48.010047][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 48.012689][ C0] pstate: 604000c5 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 48.014764][ C0] pc : usb_submit_urb+0x594/0x9b4 [ 48.016104][ C0] lr : usb_submit_urb+0x594/0x9b4 [ 48.017349][ C0] sp : ffff800008003ba0 [ 48.018440][ C0] x29: ffff800008003bb0 x28: ffff0000c93a8800 x27: ffff0000cd7f085c [ 48.020564][ C0] x26: ffff80000ce43f68 x25: ffff0000c93a88a8 x24: ffff0000cca5b280 [ 48.022756][ C0] x23: ffff80000ce6eea2 x22: 0000000000000400 x21: 0000000000000002 [ 48.024863][ C0] x20: 0000000000000a20 x19: ffff0000cd7f0800 x18: 0000000000000000 [ 48.026956][ C0] x17: ffff8001f161a000 x16: ffff800008000000 x15: 0000000000000000 [ 48.029078][ C0] x14: 0000000000000000 x13: 205d304320202020 x12: ffff80000e679000 [ 48.031161][ C0] x11: 0000000000ff0100 x10: 0000000000000000 x9 : a0fb6f4130527100 [ 48.033235][ C0] x8 : a0fb6f4130527100 x7 : 0000000000000000 x6 : ffff80000bcfad2c [ 48.035304][ C0] x5 : 0000000000000000 x4 : 0000000000000080 x3 : 0000000000000000 [ 48.037350][ C0] x2 : 0000000000000000 x1 : 0000000100000101 x0 : 0000000000000000 [ 48.039372][ C0] Call trace: [ 48.040214][ C0] usb_submit_urb+0x594/0x9b4 [ 48.041398][ C0] bcm5974_irq_trackpad+0x138/0x524 [ 48.042815][ C0] __usb_hcd_giveback_urb+0x16c/0x244 [ 48.044215][ C0] usb_hcd_giveback_urb+0x78/0x238 [ 48.045577][ C0] dummy_timer+0x2c8/0x102c [ 48.046743][ C0] call_timer_fn+0x7c/0x15c [ 48.047940][ C0] __run_timers+0x60c/0x6f8 [ 48.049087][ C0] run_timer_softirq+0x34/0x5c [ 48.050333][ C0] __do_softirq+0x100/0x29c [ 48.051498][ C0] ____do_softirq+0x14/0x20 [ 48.052672][ C0] call_on_irq_stack+0x24/0x4c [ 48.053887][ C0] do_softirq_own_stack+0x20/0x2c [ 48.055252][ C0] __irq_exit_rcu+0xb0/0x124 [ 48.056422][ C0] irq_exit_rcu+0x10/0x1c [ 48.057514][ C0] el1_interrupt+0x38/0x68 [ 48.058717][ C0] el1h_64_irq_handler+0x18/0x24 [ 48.060037][ C0] el1h_64_irq+0x64/0x68 [ 48.061173][ C0] arch_local_irq_enable+0xc/0x18 [ 48.062525][ C0] do_idle+0x110/0x2d8 [ 48.063625][ C0] cpu_startup_entry+0x34/0x38 [ 48.064863][ C0] kernel_init+0x0/0x290 [ 48.066035][ C0] start_kernel+0x0/0x4c0 [ 48.067144][ C0] start_kernel+0x30c/0x4c0 [ 48.068315][ C0] __primary_switched+0xb4/0xbc [ 48.069560][ C0] ---[ end trace 0000000000000000 ]--- [ 48.071125][ C0] ------------[ cut here ]------------ [ 48.072464][ C0] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 48.074269][ C0] WARNING: CPU: 0 PID: 14 at drivers/usb/core/urb.c:505 usb_submit_urb+0x594/0x9b4 [ 48.076791][ C0] Modules linked in: [ 48.077812][ C0] CPU: 0 PID: 14 Comm: ksoftirqd/0 Tainted: G W 6.1.92-syzkaller #0 [ 48.080250][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 48.082965][ C0] pstate: 604000c5 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 48.084984][ C0] pc : usb_submit_urb+0x594/0x9b4 [ 48.086282][ C0] lr : usb_submit_urb+0x594/0x9b4 [ 48.087729][ C0] sp : ffff80000eaab9c0 [ 48.088846][ C0] x29: ffff80000eaab9d0 x28: ffff0000c93a8800 x27: ffff0000cd7f085c [ 48.090872][ C0] x26: ffff80000ce43f68 x25: ffff0000c93a88a8 x24: ffff0000cca5b280 [ 48.092924][ C0] x23: ffff80000ce6eea2 x22: 0000000000000400 x21: 0000000000000002 [ 48.095002][ C0] x20: 0000000000000a20 x19: ffff0000cd7f0800 x18: 0000000092525f0a [ 48.097078][ C0] x17: 000000000d5b2a7e x16: 0000000000000033 x15: 0000000000000000 [ 48.099182][ C0] x14: 0000000000000000 x13: 205d304320202020 x12: ffff80000e679000 [ 48.101257][ C0] x11: 0000000000ff0100 x10: 0000000000000000 x9 : cce5b511879b6200 [ 48.103349][ C0] x8 : cce5b511879b6200 x7 : 0000000000000000 x6 : ffff80000bcfad2c [ 48.105432][ C0] x5 : 0000000000000000 x4 : 0000000000000080 x3 : 0000000000000000 [ 48.107505][ C0] x2 : 0000000000000000 x1 : 0000000100000100 x0 : 0000000000000000 [ 48.109571][ C0] Call trace: [ 48.110396][ C0] usb_submit_urb+0x594/0x9b4 [ 48.111528][ C0] bcm5974_irq_trackpad+0x138/0x524 [ 48.112889][ C0] __usb_hcd_giveback_urb+0x16c/0x244 [ 48.114325][ C0] usb_hcd_giveback_urb+0x78/0x238 [ 48.115822][ C0] dummy_timer+0x2c8/0x102c [ 48.117123][ C0] call_timer_fn+0x7c/0x15c [ 48.118345][ C0] __run_timers+0x60c/0x6f8 [ 48.119522][ C0] run_timer_softirq+0x34/0x5c [ 48.120795][ C0] __do_softirq+0x100/0x29c [ 48.121323][ T3790] usb 1-1: USB disconnect, device number 5 [ 48.121986][ C0] run_ksoftirqd+0x3c/0x13c [ 48.124662][ C0] smpboot_thread_fn+0x174/0x39c [ 48.125932][ C0] kthread+0x120/0x14c [ 48.127016][ C0] ret_from_fork+0x10/0x20 [ 48.128204][ C0] ---[ end trace 0000000000000000 ]--- [ 48.129605][ C0] bcm5974 1-1:0.10: trackpad urb failed: -2 [ 48.131257][ T4097] bcm5974 1-1:0.10: could not read from device [ 48.891071][ T3790] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 49.251101][ T3790] usb 1-1: config 0 has an invalid interface number: 10 but max is 0 [ 49.253493][ T3790] usb 1-1: config 0 has no interface number 0 [ 49.255088][ T3790] usb 1-1: config 0 interface 10 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 49.257832][ T3790] usb 1-1: config 0 interface 10 altsetting 0 endpoint 0x81 has invalid maxpacket 21669, setting to 1024 [ 49.260659][ T3790] usb 1-1: config 0 interface 10 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 49.263238][ T3790] usb 1-1: config 0 interface 10 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 49.421077][ T3790] usb 1-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice=d4.d7 [ 49.423483][ T3790] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.425506][ T3790] usb 1-1: Product: syz [ 49.426635][ T3790] usb 1-1: Manufacturer: syz [ 49.427769][ T3790] usb 1-1: SerialNumber: syz [ 49.429666][ T3790] usb 1-1: config 0 descriptor?? [ 49.441169][ T4506] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 49.461944][ T3790] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.10/input/input6 [ 49.891076][ T4097] ------------[ cut here ]------------ [ 49.892657][ T4097] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 49.894466][ T4097] WARNING: CPU: 1 PID: 4097 at drivers/usb/core/urb.c:505 usb_submit_urb+0x594/0x9b4 [ 49.896886][ T4097] Modules linked in: [ 49.897898][ T4097] CPU: 1 PID: 4097 Comm: udevd Tainted: G W 6.1.92-syzkaller #0 [ 49.900283][ T4097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 49.902924][ T4097] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 49.905029][ T4097] pc : usb_submit_urb+0x594/0x9b4 [ 49.906369][ T4097] lr : usb_submit_urb+0x594/0x9b4 [ 49.907683][ T4097] sp : ffff8000125438e0 [ 49.908716][ T4097] x29: ffff8000125438f0 x28: ffff0000cc95f800 x27: ffff0000cd5a885c [ 49.910832][ T4097] x26: ffff80000ce43f68 x25: ffff0000cc95f8a8 x24: ffff0000cc8f9f00 [ 49.912933][ T4097] x23: ffff80000ce6eea2 x22: 0000000000000400 x21: 0000000000000002 [ 49.914998][ T4097] x20: 0000000000000cc0 x19: ffff0000cd5a8800 x18: 0000000000000000 [ 49.917123][ T4097] x17: 0000000000000000 x16: 000000000000000c x15: 0000000000000000 [ 49.919154][ T4097] x14: 0000000000000000 x13: 205d373930345420 x12: ffff80000e679000 [ 49.921228][ T4097] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ef8cc79bfa2daf00 [ 49.923400][ T4097] x8 : ef8cc79bfa2daf00 x7 : 0000000000000000 x6 : ffff80000bcfad2c [ 49.925570][ T4097] x5 : 0000000000000000 x4 : 0000000000000080 x3 : 0000000000000000 [ 49.927631][ T4097] x2 : 0000000000000000 x1 : 0000000100000000 x0 : 0000000000000000 [ 49.929735][ T4097] Call trace: [ 49.930601][ T4097] usb_submit_urb+0x594/0x9b4 [ 49.931808][ T4097] bcm5974_start_traffic+0xa0/0xfc [ 49.933176][ T4097] bcm5974_open+0x5c/0xb4 [ 49.934275][ T4097] input_open_device+0xe8/0x14c [ 49.935646][ T4097] evdev_open+0x1b4/0x258 [ 49.936824][ T4097] chrdev_open+0x27c/0x2b0 [ 49.938062][ T4097] do_dentry_open+0x36c/0x6f8 [ 49.939299][ T4097] vfs_open+0x38/0x48 [ 49.940371][ T4097] path_openat+0xf04/0x1328 [ 49.941549][ T4097] do_filp_open+0xd0/0x1a8 [ 49.942749][ T4097] do_sys_openat2+0xb8/0x22c [ 49.943988][ T4097] __arm64_sys_openat+0xb0/0xe0 [ 49.945236][ T4097] invoke_syscall+0x64/0x178 [ 49.946430][ T4097] el0_svc_common+0xb8/0x174 [ 49.947662][ T4097] do_el0_svc+0x48/0x174 [ 49.948718][ T4097] el0_svc+0x34/0x110 [ 49.949734][ T4097] el0t_64_sync_handler+0x84/0xf0 [ 49.951020][ T4097] el0t_64_sync+0x18c/0x190 [ 49.952155][ T4097] ---[ end trace 0000000000000000 ]--- [ 49.971050][ C1] ------------[ cut here ]------------ [ 49.972559][ C1] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 49.974269][ C1] WARNING: CPU: 1 PID: 0 at drivers/usb/core/urb.c:505 usb_submit_urb+0x594/0x9b4 [ 49.976596][ C1] Modules linked in: [ 49.977534][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G W 6.1.92-syzkaller #0 [ 49.979902][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 49.982450][ C1] pstate: 604000c5 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 49.984488][ C1] pc : usb_submit_urb+0x594/0x9b4 [ 49.985872][ C1] lr : usb_submit_urb+0x594/0x9b4 [ 49.987271][ C1] sp : ffff80000800bba0 [ 49.988460][ C1] x29: ffff80000800bbb0 x28: ffff0000cc95f800 x27: ffff0000cd5a885c [ 49.990577][ C1] x26: ffff80000ce43f68 x25: ffff0000cc95f8a8 x24: ffff0000cc8f9f00 [ 49.992668][ C1] x23: ffff80000ce6eea2 x22: 0000000000000400 x21: 0000000000000002 [ 49.994820][ C1] x20: 0000000000000a20 x19: ffff0000cd5a8800 x18: 0000000000000000 [ 49.997038][ C1] x17: ffff8001f1632000 x16: ffff800008008000 x15: 0000000000000000 [ 49.999159][ C1] x14: 0000000000000000 x13: 205d314320202020 x12: ffff80000e679000 [ 50.001374][ C1] x11: 0000000000ff0100 x10: 0000000000000000 x9 : d32eaedf49652100 [ 50.003400][ C1] x8 : d32eaedf49652100 x7 : 0000000000000000 x6 : ffff80000bcfad2c [ 50.005547][ C1] x5 : 0000000000000000 x4 : 0000000000000080 x3 : 0000000000000000 [ 50.007746][ C1] x2 : 0000000000000000 x1 : 0000000100000101 x0 : 0000000000000000 [ 50.009815][ C1] Call trace: [ 50.010642][ C1] usb_submit_urb+0x594/0x9b4 [ 50.011916][ C1] bcm5974_irq_trackpad+0x138/0x524 [ 50.013220][ C1] __usb_hcd_giveback_urb+0x16c/0x244 [ 50.014626][ C1] usb_hcd_giveback_urb+0x78/0x238 [ 50.016057][ C1] dummy_timer+0x2c8/0x102c [ 50.017218][ C1] call_timer_fn+0x7c/0x15c [ 50.018440][ C1] __run_timers+0x60c/0x6f8 [ 50.019577][ C1] run_timer_softirq+0x34/0x5c [ 50.020798][ C1] __do_softirq+0x100/0x29c [ 50.021900][ C1] ____do_softirq+0x14/0x20 [ 50.023171][ C1] call_on_irq_stack+0x24/0x4c [ 50.024460][ C1] do_softirq_own_stack+0x20/0x2c [ 50.025747][ C1] __irq_exit_rcu+0xb0/0x124 [ 50.026947][ C1] irq_exit_rcu+0x10/0x1c [ 50.028018][ C1] el1_interrupt+0x38/0x68 [ 50.029159][ C1] el1h_64_irq_handler+0x18/0x24 [ 50.030404][ C1] el1h_64_irq+0x64/0x68 [ 50.031552][ C1] arch_local_irq_enable+0xc/0x18 [ 50.032880][ C1] do_idle+0x110/0x2d8 [ 50.033970][ C1] cpu_startup_entry+0x34/0x38 [ 50.035228][ C1] secondary_start_kernel+0x150/0x178 [ 50.036666][ C1] __secondary_switched+0xb0/0xb4 [ 50.037952][ C1] ---[ end trace 0000000000000000 ]--- [ 50.091304][ T3725] usb 1-1: USB disconnect, device number 6 [ 50.101081][ T4097] bcm5974 1-1:0.10: could not read from device 2024/06/01 04:19:09 executed programs: 5 [ 50.861144][ T3725] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 51.231064][ T3725] usb 1-1: config 0 has an invalid interface number: 10 but max is 0 [ 51.233270][ T3725] usb 1-1: config 0 has no interface number 0 [ 51.234876][ T3725] usb 1-1: config 0 interface 10 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 51.237611][ T3725] usb 1-1: config 0 interface 10 altsetting 0 endpoint 0x81 has invalid maxpacket 21669, setting to 1024 [ 51.240527][ T3725] usb 1-1: config 0 interface 10 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 51.243138][ T3725] usb 1-1: config 0 interface 10 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 51.401119][ T3725] usb 1-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice=d4.d7 [ 51.403557][ T3725] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.405610][ T3725] usb 1-1: Product: syz [ 51.406673][ T3725] usb 1-1: Manufacturer: syz [ 51.407814][ T3725] usb 1-1: SerialNumber: syz [ 51.409475][ T3725] usb 1-1: config 0 descriptor?? [ 51.421193][ T4508] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 51.441733][ T3725] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.10/input/input7 [ 51.871117][ T4097] ------------[ cut here ]------------ [ 51.872632][ T4097] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 51.874450][ T4097] WARNING: CPU: 0 PID: 4097 at drivers/usb/core/urb.c:505 usb_submit_urb+0x594/0x9b4 [ 51.876922][ T4097] Modules linked in: [ 51.877969][ T4097] CPU: 0 PID: 4097 Comm: udevd Tainted: G W 6.1.92-syzkaller #0 [ 51.880207][ T4097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 51.882915][ T4097] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 51.884936][ T4097] pc : usb_submit_urb+0x594/0x9b4 [ 51.886199][ T4097] lr : usb_submit_urb+0x594/0x9b4 [ 51.887556][ T4097] sp : ffff8000125438e0 [ 51.888675][ T4097] x29: ffff8000125438f0 x28: ffff0000c93ab000 x27: ffff0000cd7f035c [ 51.890806][ T4097] x26: ffff80000ce43f68 x25: ffff0000c93ab0a8 x24: ffff0000c7d0f900 [ 51.892870][ T4097] x23: ffff80000ce6eea2 x22: 0000000000000400 x21: 0000000000000002 [ 51.894959][ T4097] x20: 0000000000000cc0 x19: ffff0000cd7f0300 x18: 0000000000000000