Warning: Permanently added '10.128.1.173' (ED25519) to the list of known hosts. 1970/01/01 00:01:25 ignoring optional flag "sandboxArg"="0" 1970/01/01 00:01:26 parsed 1 programs [ 88.598055][ T4621] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 96.729275][ T4669] chnl_net:caif_netlink_parms(): no params data found [ 96.762819][ T4669] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.765022][ T4669] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.767721][ T4669] device bridge_slave_0 entered promiscuous mode [ 96.771522][ T4669] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.773528][ T4669] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.776089][ T4669] device bridge_slave_1 entered promiscuous mode [ 96.792364][ T4669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.796833][ T4669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.811868][ T4669] team0: Port device team_slave_0 added [ 96.815320][ T4669] team0: Port device team_slave_1 added [ 96.829621][ T4669] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.831645][ T4669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.838967][ T4669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.843400][ T4669] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.845439][ T4669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.852748][ T4669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.920145][ T4669] device hsr_slave_0 entered promiscuous mode [ 96.958626][ T4669] device hsr_slave_1 entered promiscuous mode [ 97.682534][ T4669] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.740146][ T4669] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.764872][ T4669] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.803281][ T4669] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.937872][ T4669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.956516][ T1854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 97.959311][ T1854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 97.963970][ T4669] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.970380][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 97.973868][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 97.976626][ T1601] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.978625][ T1601] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.988825][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 97.991409][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 97.994125][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 97.996700][ T1601] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.998740][ T1601] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.001054][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 98.006706][ T1854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 98.019222][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 98.022818][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 98.025651][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 98.044153][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 98.047316][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 98.050749][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 98.053560][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 98.060596][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 98.063384][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 98.067921][ T4669] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 98.158579][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 98.160828][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 98.168089][ T4669] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.183578][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 98.186399][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 98.200322][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 98.203130][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 98.206006][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 98.210050][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 98.214849][ T4669] device veth0_vlan entered promiscuous mode [ 98.222441][ T4669] device veth1_vlan entered promiscuous mode [ 98.237242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 98.240624][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 98.243217][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 98.246393][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 98.251586][ T4669] device veth0_macvtap entered promiscuous mode [ 98.257080][ T4669] device veth1_macvtap entered promiscuous mode [ 98.267642][ T4669] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.271302][ T1854] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 98.274007][ T1854] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 98.276616][ T1854] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 98.282308][ T1854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 98.287458][ T4669] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.291847][ T1854] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 98.294672][ T1854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 98.329079][ T4669] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.331614][ T4669] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.334094][ T4669] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.336543][ T4669] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.831437][ T1601] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.833768][ T1601] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.836917][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 98.861009][ T1601] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.863367][ T1601] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.866485][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:01:39 executed programs: 0 [ 99.566812][ T4830] chnl_net:caif_netlink_parms(): no params data found [ 99.603636][ T4830] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.611554][ T4830] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.614186][ T4830] device bridge_slave_0 entered promiscuous mode [ 99.621688][ T4830] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.623728][ T4830] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.626552][ T4830] device bridge_slave_1 entered promiscuous mode [ 99.646961][ T4830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.656002][ T4830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.674989][ T4830] team0: Port device team_slave_0 added [ 99.678547][ T4830] team0: Port device team_slave_1 added [ 99.722022][ T4830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.724104][ T4830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.732166][ T4830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.736874][ T4830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.738911][ T4830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.745926][ T4830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.820338][ T4830] device hsr_slave_0 entered promiscuous mode [ 99.858845][ T4830] device hsr_slave_1 entered promiscuous mode [ 99.908302][ T4830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.910463][ T4830] Cannot create hsr debugfs directory [ 99.993726][ T4830] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.528474][ T4725] Bluetooth: hci0: command 0x0409 tx timeout [ 102.990508][ T4830] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.325201][ T4830] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.367818][ T4830] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.522748][ T4830] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.550546][ T4830] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 103.580099][ T4830] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.609337][ T4328] Bluetooth: hci0: command 0x041b tx timeout [ 103.620858][ T4830] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 103.726918][ T4830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.735415][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 103.738022][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 103.743848][ T4830] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.752085][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 103.754899][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 103.757608][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.759687][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.762562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 103.765282][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 103.767913][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.770005][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.773283][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 103.804722][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 103.810123][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 103.815254][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 103.821759][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 103.824607][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 103.832276][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 103.835282][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 103.844712][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 103.847431][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 103.853697][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 103.856412][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 103.862816][ T4830] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 103.936556][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 103.940066][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 103.946324][ T4830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.961995][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 103.964818][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 103.996180][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 104.000066][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 104.002963][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 104.005463][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 104.012906][ T4830] device veth0_vlan entered promiscuous mode [ 104.019599][ T4830] device veth1_vlan entered promiscuous mode [ 104.033854][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 104.036532][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 104.040253][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 104.042997][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 104.047472][ T4830] device veth0_macvtap entered promiscuous mode [ 104.052610][ T4830] device veth1_macvtap entered promiscuous mode [ 104.063922][ T4830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.066854][ T4830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.071079][ T4830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.073121][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 104.075794][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 104.078877][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 104.081550][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 104.085921][ T4830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.089410][ T4830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.092991][ T4830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.095410][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 104.098583][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 104.104187][ T4830] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.106650][ T4830] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.109444][ T4830] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.111867][ T4830] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.149046][ T1601] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.151436][ T1601] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.163127][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 104.169815][ T1601] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.172099][ T1601] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.175105][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 104.478362][ T4108] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 104.718254][ T4108] usb 1-1: Using ep0 maxpacket: 8 [ 104.838608][ T4108] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 15 [ 104.841574][ T4108] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 104.998562][ T4108] usb 1-1: New USB device found, idVendor=05ac, idProduct=0243, bcdDevice= 0.40 [ 105.001110][ T4108] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.003244][ T4108] usb 1-1: Product: syz [ 105.004301][ T4108] usb 1-1: Manufacturer: syz [ 105.005562][ T4108] usb 1-1: SerialNumber: syz [ 105.052557][ T4108] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input2 [ 105.488369][ T4629] ------------[ cut here ]------------ [ 105.490096][ T4629] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 105.492421][ T4629] WARNING: CPU: 0 PID: 4629 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1580 [ 105.495058][ T4629] Modules linked in: [ 105.496117][ T4629] CPU: 0 PID: 4629 Comm: udevd Not tainted 5.15.182-syzkaller #0 [ 105.498253][ T4629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 105.501056][ T4629] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 105.503267][ T4629] pc : usb_submit_urb+0xa44/0x1580 [ 105.504688][ T4629] lr : usb_submit_urb+0xa44/0x1580 [ 105.506128][ T4629] sp : ffff80001f317470 [ 105.507281][ T4629] x29: ffff80001f3174b0 x28: 1fffe00018571a03 x27: ffff80001237bca8 [ 105.509485][ T4629] x26: ffff0000c984ec00 x25: ffff0000c141dc50 x24: 000000000000000f [ 105.511723][ T4629] x23: ffff800012382300 x22: dfff800000000000 x21: 0000000000000002 [ 105.513933][ T4629] x20: 0000000000000cc0 x19: ffff0000c141dc00 x18: 1fffe0003421f78e [ 105.516244][ T4629] x17: 1fffe0003421f78e x16: ffff8000111a53fc x15: ffff8000141eec20 [ 105.518408][ T4629] x14: ffff0001a10fbc80 x13: 1ffff0000282a06b x12: 0000000000ff0100 [ 105.520603][ T4629] x11: 0000000000000000 x10: 0000000000000000 x9 : fb3fdae21cc0f800 [ 105.522822][ T4629] x8 : fb3fdae21cc0f800 x7 : 0000000000000000 x6 : 0000000000000000 [ 105.525003][ T4629] x5 : 0000000000000080 x4 : 0000000000000000 x3 : ffff800008503828 [ 105.527152][ T4629] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000029 [ 105.529354][ T4629] Call trace: [ 105.530233][ T4629] usb_submit_urb+0xa44/0x1580 [ 105.531563][ T4629] bcm5974_start_traffic+0xe0/0x154 [ 105.533027][ T4629] bcm5974_open+0x94/0x130 [ 105.534250][ T4629] input_open_device+0x134/0x288 [ 105.535703][ T4629] evdev_open+0x3c4/0x468 [ 105.536907][ T4629] chrdev_open+0x26c/0x4f0 [ 105.538129][ T4629] do_dentry_open+0x760/0xebc [ 105.539463][ T4629] vfs_open+0x7c/0x90 [ 105.540541][ T4629] path_openat+0x1f80/0x26e4 [ 105.541807][ T4629] do_filp_open+0x164/0x330 [ 105.543058][ T4629] do_sys_openat2+0x128/0x3d8 [ 105.544354][ T4629] __arm64_sys_openat+0x120/0x154 [ 105.545761][ T4629] invoke_syscall+0x98/0x2b8 [ 105.547012][ T4629] el0_svc_common+0x138/0x258 [ 105.548338][ T4629] do_el0_svc+0x58/0x14c [ 105.549530][ T4629] el0_svc+0x78/0x1e0 [ 105.550641][ T4629] el0t_64_sync_handler+0xcc/0xe4 [ 105.551967][ T4629] el0t_64_sync+0x1a0/0x1a4 [ 105.553292][ T4629] irq event stamp: 16996 [ 105.554420][ T4629] hardirqs last enabled at (16995): [] finish_lock_switch+0xb0/0x1c4 [ 105.557070][ T4629] hardirqs last disabled at (16996): [] el1_dbg+0x24/0x80 [ 105.559476][ T4629] softirqs last enabled at (16990): [] handle_softirqs+0xa4c/0xbf0 [ 105.562182][ T4629] softirqs last disabled at (16925): [] __irq_exit_rcu+0x240/0x440 [ 105.564798][ T4629] ---[ end trace 7acf610d9cc084b3 ]--- [ 105.578238][ C0] ------------[ cut here ]------------ [ 105.579887][ C0] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 105.582007][ C0] WARNING: CPU: 0 PID: 339 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1580 [ 105.584725][ C0] Modules linked in: [ 105.585790][ C0] CPU: 0 PID: 339 Comm: kworker/u4:4 Tainted: G W 5.15.182-syzkaller #0 [ 105.588510][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 105.591373][ C0] Workqueue: netns cleanup_net [ 105.592712][ C0] pstate: 604000c5 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 105.594900][ C0] pc : usb_submit_urb+0xa44/0x1580 [ 105.596319][ C0] lr : usb_submit_urb+0xa44/0x1580 [ 105.597750][ C0] sp : ffff80001be66a60 [ 105.598901][ C0] x29: ffff80001be66aa0 x28: 1fffe00018571a03 x27: ffff80001237bca8 [ 105.601072][ C0] x26: ffff0000c984ec00 x25: ffff0000c141dc50 x24: 000000000000000f [ 105.603315][ C0] x23: ffff800012382300 x22: dfff800000000000 x21: 0000000000000002 [ 105.605530][ C0] x20: 0000000000000a20 x19: ffff0000c141dc00 x18: 0000000000000102 [ 105.607738][ C0] x17: 0000000000000000 x16: ffff8000111a53fc x15: 00000000ffffffff [ 105.609935][ C0] x14: 0000000000ff0100 x13: 0000000000000001 x12: 0000000000ff0100 [ 105.612185][ C0] x11: 0000000000000101 x10: 0000000000000000 x9 : 88f257736558ee00 [ 105.614421][ C0] x8 : 88f257736558ee00 x7 : 0000000000000001 x6 : 0000000000000001 [ 105.616691][ C0] x5 : ffff80001be66358 x4 : ffff80001422f280 x3 : ffff800008503828 [ 105.618903][ C0] x2 : 0000000000000001 x1 : 0000000100000101 x0 : 0000000000000029 [ 105.621111][ C0] Call trace: [ 105.622031][ C0] usb_submit_urb+0xa44/0x1580 [ 105.623352][ C0] bcm5974_irq_trackpad+0x204/0xe88 [ 105.624763][ C0] __usb_hcd_giveback_urb+0x2e0/0x518 [ 105.626311][ C0] usb_hcd_giveback_urb+0x100/0x3e0 [ 105.627797][ C0] dummy_timer+0x5b8/0x231c [ 105.629018][ C0] call_timer_fn+0x19c/0x858 [ 105.630296][ C0] __run_timers+0x46c/0x6c4 [ 105.631560][ C0] run_timer_softirq+0x7c/0x114 [ 105.632882][ C0] handle_softirqs+0x344/0xbf0 [ 105.634224][ C0] do_softirq+0xfc/0x1b0 [ 105.635393][ C0] __local_bh_enable_ip+0x250/0x380 [ 105.636817][ C0] _raw_write_unlock_bh+0xec/0x174 [ 105.638258][ C0] __neigh_ifdown+0x184/0x348 [ 105.639534][ C0] neigh_ifdown+0x2c/0x40 [ 105.640758][ C0] rt6_disable_ip+0x5c4/0x658 [ 105.642037][ C0] addrconf_ifdown+0x148/0x1688 [ 105.643383][ C0] addrconf_notify+0x2f4/0xc6c [ 105.644693][ C0] raw_notifier_call_chain+0xd4/0x164 [ 105.646190][ C0] unregister_netdevice_many+0xe10/0x17d0 [ 105.647794][ C0] ip_tunnel_delete_nets+0x2cc/0x320 [ 105.649272][ C0] ipip_exit_batch_net+0x30/0x40 [ 105.650570][ C0] cleanup_net+0x644/0xa98 [ 105.651846][ C0] process_one_work+0x79c/0x1140 [ 105.653239][ C0] worker_thread+0x8f4/0x101c [ 105.654503][ C0] kthread+0x374/0x454 [ 105.655632][ C0] ret_from_fork+0x10/0x20 [ 105.656841][ C0] irq event stamp: 2136405 [ 105.658081][ C0] hardirqs last enabled at (2136404): [] _raw_spin_unlock_irq+0x98/0x128 [ 105.660839][ C0] hardirqs last disabled at (2136405): [] _raw_spin_lock_irqsave+0xfc/0x14c [ 105.663636][ C0] softirqs last enabled at (2136400): [] __neigh_ifdown+0x184/0x348 [ 105.666280][ C0] softirqs last disabled at (2136401): [] do_softirq+0xfc/0x1b0 [ 105.668836][ C0] ---[ end trace 7acf610d9cc084b4 ]--- [ 105.670568][ C0] ------------[ cut here ]------------ [ 105.672054][ C0] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 105.673945][ C0] WARNING: CPU: 0 PID: 339 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1580 [ 105.676491][ C0] Modules linked in: [ 105.677553][ C0] CPU: 0 PID: 339 Comm: kworker/u4:4 Tainted: G W 5.15.182-syzkaller #0 [ 105.680170][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 105.682917][ C0] Workqueue: netns cleanup_net [ 105.684246][ C0] pstate: 604000c5 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 105.686459][ C0] pc : usb_submit_urb+0xa44/0x1580 [ 105.687882][ C0] lr : usb_submit_urb+0xa44/0x1580 [ 105.689287][ C0] sp : ffff80001be66a60 [ 105.690423][ C0] x29: ffff80001be66aa0 x28: 1fffe00018571a03 x27: ffff80001237bca8 [ 105.692611][ C0] x26: ffff0000c984ec00 x25: ffff0000c141dc50 x24: 000000000000000f [ 105.694834][ C0] x23: ffff800012382300 x22: dfff800000000000 x21: 0000000000000002 [ 105.694890][ T4328] usb 1-1: USB disconnect, device number 2 [ 105.697035][ C0] x20: 0000000000000a20 x19: ffff0000c141dc00 x18: 0000000000000102 [ 105.697069][ C0] x17: 0000000000000000 x16: ffff8000083007d8 x15: 00000000ffffffff [ 105.697086][ C0] x14: 0000000000ff0100 x13: 0000000000000001 x12: 0000000000ff0100 [ 105.697103][ C0] x11: 0000000000000101 x10: 0000000000000000 x9 : 88f257736558ee00 [ 105.697119][ C0] x8 : 88f257736558ee00 x7 : 0000000000000001 x6 : 0000000000000001 [ 105.697136][ C0] x5 : ffff80001be66358 x4 : ffff80001422f280 x3 : ffff8000083008e8 [ 105.697153][ C0] x2 : 0000000000000001 x1 : 0000000000000101 x0 : 0000000000000029 [ 105.697177][ C0] Call trace: [ 105.697182][ C0] usb_submit_urb+0xa44/0x1580 [ 105.697195][ C0] bcm5974_irq_trackpad+0x204/0xe88 [ 105.697218][ C0] __usb_hcd_giveback_urb+0x2e0/0x518 [ 105.697230][ C0] usb_hcd_giveback_urb+0x100/0x3e0 [ 105.697239][ C0] dummy_timer+0x5b8/0x231c [ 105.697250][ C0] call_timer_fn+0x19c/0x858 [ 105.697261][ C0] __run_timers+0x46c/0x6c4 [ 105.697270][ C0] run_timer_softirq+0x7c/0x114 [ 105.697280][ C0] handle_softirqs+0x344/0xbf0 [ 105.697290][ C0] do_softirq+0xfc/0x1b0 [ 105.697300][ C0] __local_bh_enable_ip+0x250/0x380 [ 105.697310][ C0] _raw_write_unlock_bh+0xec/0x174 [ 105.697321][ C0] __neigh_ifdown+0x184/0x348 [ 105.697332][ C0] neigh_ifdown+0x2c/0x40 [ 105.697341][ C0] rt6_disable_ip+0x5c4/0x658 [ 105.728379][ T4336] Bluetooth: hci0: command 0x040f tx timeout [ 105.729799][ C0] addrconf_ifdown+0x148/0x1688 [ 105.729820][ C0] addrconf_notify+0x2f4/0xc6c [ 105.739323][ C0] raw_notifier_call_chain+0xd4/0x164 [ 105.740798][ C0] unregister_netdevice_many+0xe10/0x17d0 [ 105.742400][ C0] ip_tunnel_delete_nets+0x2cc/0x320 [ 105.743887][ C0] ipip_exit_batch_net+0x30/0x40 [ 105.745250][ C0] cleanup_net+0x644/0xa98 [ 105.746476][ C0] process_one_work+0x79c/0x1140 [ 105.747917][ C0] worker_thread+0x8f4/0x101c [ 105.749234][ C0] kthread+0x374/0x454 [ 105.750379][ C0] ret_from_fork+0x10/0x20 [ 105.751587][ C0] irq event stamp: 2136433 [ 105.752830][ C0] hardirqs last enabled at (2136432): [] _raw_spin_unlock_irq+0x98/0x128 [ 105.755736][ C0] hardirqs last disabled at (2136433): [] _raw_spin_lock_irqsave+0xfc/0x14c [ 105.758677][ C0] softirqs last enabled at (2136400): [] __neigh_ifdown+0x184/0x348 [ 105.761395][ C0] softirqs last disabled at (2136401): [] do_softirq+0xfc/0x1b0 [ 105.763988][ C0] ---[ end trace 7acf610d9cc084b5 ]--- [ 105.765618][ C0] bcm5974 1-1:1.0: trackpad urb failed: -2 [ 105.788762][ T4629] bcm5974 1-1:1.0: could not read from device 1970/01/01 00:01:46 executed programs: 3 [ 106.447756][ T339] device hsr_slave_0 left promiscuous mode [ 106.478902][ T339] device hsr_slave_1 left promiscuous mode [ 106.490063][ T4108] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 106.558351][ T339] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.560492][ T339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.563012][ T339] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.565074][ T339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.567547][ T339] device bridge_slave_1 left promiscuous mode [ 106.569462][ T339] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.630023][ T339] device bridge_slave_0 left promiscuous mode [ 106.631991][ T339] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.748531][ T339] device veth1_macvtap left promiscuous mode [ 106.750387][ T339] device veth0_macvtap left promiscuous mode [ 106.752185][ T339] device veth1_vlan left promiscuous mode [ 106.753820][ T339] device veth0_vlan left promiscuous mode [ 106.768335][ T4108] usb 1-1: Using ep0 maxpacket: 8 [ 106.918482][ T4108] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 15 [ 106.921498][ T4108] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 106.968077][ T339] team0 (unregistering): Port device team_slave_1 removed [ 106.976489][ T339] team0 (unregistering): Port device team_slave_0 removed [ 106.987638][ T339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.027051][ T339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.088334][ T4108] usb 1-1: New USB device found, idVendor=05ac, idProduct=0243, bcdDevice= 0.40 [ 107.090947][ T4108] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.093213][ T4108] usb 1-1: Product: syz [ 107.094342][ T4108] usb 1-1: Manufacturer: syz [ 107.095649][ T4108] usb 1-1: SerialNumber: syz [ 107.141700][ T4108] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input3 [ 107.181712][ T339] bond0 (unregistering): Released all slaves [ 107.568358][ T4629] ------------[ cut here ]------------ [ 107.569971][ T4629] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 107.572067][ T4629] WARNING: CPU: 1 PID: 4629 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1580 [ 107.574848][ T4629] Modules linked in: [ 107.575931][ T4629] CPU: 1 PID: 4629 Comm: udevd Tainted: G W 5.15.182-syzkaller #0 [ 107.578547][ T4629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 107.581491][ T4629] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 107.583664][ T4629] pc : usb_submit_urb+0xa44/0x1580 [ 107.585063][ T4629] lr : usb_submit_urb+0xa44/0x1580 [ 107.586562][ T4629] sp : ffff80001f317470 [ 107.587733][ T4629] x29: ffff80001f3174b0 x28: 1fffe00019cde603 x27: ffff80001237bca8 [ 107.590015][ T4629] x26: ffff0000c8c42a00 x25: ffff0000c0fef650 x24: 000000000000000f [ 107.592341][ T4629] x23: ffff800012382300 x22: dfff800000000000 x21: 0000000000000002 [ 107.594625][ T4629] x20: 0000000000000cc0 x19: ffff0000c0fef600 x18: 0000000000000001 [ 107.596910][ T4629] x17: 0000000000000000 x16: ffff8000111a53fc x15: 00000000ffffffff [ 107.599258][ T4629] x14: 0000000000ff0100 x13: 0000000000000001 x12: 0000000000ff0100 [ 107.601565][ T4629] x11: 0000000000000000 x10: 0000000000000000 x9 : fb3fdae21cc0f800 [ 107.603831][ T4629] x8 : fb3fdae21cc0f800 x7 : 0000000000000001 x6 : 0000000000000001 [ 107.606097][ T4629] x5 : ffff80001f316d58 x4 : ffff80001422f280 x3 : ffff800008503828 [ 107.608333][ T4629] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000029 [ 107.610634][ T4629] Call trace: [ 107.611508][ T4629] usb_submit_urb+0xa44/0x1580 [ 107.612823][ T4629] bcm5974_start_traffic+0xe0/0x154 [ 107.614317][ T4629] bcm5974_open+0x94/0x130 [ 107.615599][ T4629] input_open_device+0x134/0x288 [ 107.616992][ T4629] evdev_open+0x3c4/0x468 [ 107.618262][ T4629] chrdev_open+0x26c/0x4f0 [ 107.619449][ T4629] do_dentry_open+0x760/0xebc [ 107.620805][ T4629] vfs_open+0x7c/0x90 [ 107.621909][ T4629] path_openat+0x1f80/0x26e4 [ 107.623200][ T4629] do_filp_open+0x164/0x330 [ 107.624516][ T4629] do_sys_openat2+0x128/0x3d8 [ 107.625950][ T4629] __arm64_sys_openat+0x120/0x154 [ 107.627428][ T4629] invoke_syscall+0x98/0x2b8 [ 107.628811][ T4629] el0_svc_common+0x138/0x258 [ 107.630115][ T4629] do_el0_svc+0x58/0x14c [ 107.631324][ T4629] el0_svc+0x78/0x1e0 [ 107.632443][ T4629] el0t_64_sync_handler+0xcc/0xe4 [ 107.633891][ T4629] el0t_64_sync+0x1a0/0x1a4 [ 107.635136][ T4629] irq event stamp: 24968 [ 107.636296][ T4629] hardirqs last enabled at (24967): [] __up_console_sem+0xb4/0x100 [ 107.638948][ T4629] hardirqs last disabled at (24968): [] el1_dbg+0x24/0x80 [ 107.641400][ T4629] softirqs last enabled at (24800): [] local_bh_enable+0x10/0x34 [ 107.644077][ T4629] softirqs last disabled at (24798): [] local_bh_disable+0x10/0x34 [ 107.646871][ T4629] ---[ end trace 7acf610d9cc084b6 ]--- [ 107.678208][ C1] ------------[ cut here ]------------ [ 107.679764][ C1] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 107.681694][ C1] WARNING: CPU: 1 PID: 1601 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1580 [ 107.684358][ C1] Modules linked in: [ 107.685512][ C1] CPU: 1 PID: 1601 Comm: kworker/u4:5 Tainted: G W 5.15.182-syzkaller #0 [ 107.688249][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 107.691023][ C1] Workqueue: writeback wb_workfn (flush-259:0) [ 107.692766][ C1] pstate: 604000c5 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 107.694936][ C1] pc : usb_submit_urb+0xa44/0x1580 [ 107.696359][ C1] lr : usb_submit_urb+0xa44/0x1580 [ 107.697720][ C1] sp : ffff800008017620 [ 107.698837][ C1] x29: ffff800008017660 x28: 1fffe00019cde603 x27: ffff80001237bca8 [ 107.701032][ C1] x26: ffff0000c8c42a00 x25: ffff0000c0fef650 x24: 000000000000000f [ 107.703255][ C1] x23: ffff800012382300 x22: dfff800000000000 x21: 0000000000000002 [ 107.705467][ C1] x20: 0000000000000a20 x19: ffff0000c0fef600 x18: 0000000000000102 [ 107.707696][ C1] x17: 0000000000000000 x16: ffff8000111a53fc x15: 00000000ffffffff [ 107.709886][ C1] x14: 0000000000ff0100 x13: 0000000000000001 x12: 0000000000ff0100 [ 107.712100][ C1] x11: 0000000000000101 x10: 0000000000000000 x9 : 63b971f8825c3100 [ 107.714371][ C1] x8 : 63b971f8825c3100 x7 : 0000000000000001 x6 : 0000000000000001 [ 107.716581][ C1] x5 : ffff800008016f18 x4 : ffff80001422f280 x3 : ffff800008503828 [ 107.718838][ C1] x2 : 0000000000000001 x1 : 0000000100000101 x0 : 0000000000000029 [ 107.721026][ C1] Call trace: [ 107.721902][ C1] usb_submit_urb+0xa44/0x1580 [ 107.723194][ C1] bcm5974_irq_trackpad+0x204/0xe88 [ 107.724554][ C1] __usb_hcd_giveback_urb+0x2e0/0x518 [ 107.726043][ C1] usb_hcd_giveback_urb+0x100/0x3e0 [ 107.727498][ C1] dummy_timer+0x5b8/0x231c [ 107.728800][ C1] call_timer_fn+0x19c/0x858 [ 107.730040][ C1] __run_timers+0x46c/0x6c4 [ 107.731315][ C1] run_timer_softirq+0x7c/0x114 [ 107.732641][ C1] handle_softirqs+0x344/0xbf0 [ 107.733902][ C1] __irq_exit_rcu+0x240/0x440 [ 107.735250][ C1] irq_exit+0x14/0x88 [ 107.736352][ C1] handle_domain_irq+0x14c/0x1fc [ 107.737769][ C1] gic_handle_irq+0x78/0x1c8 [ 107.739043][ C1] call_on_irq_stack+0x24/0x4c [ 107.740391][ C1] do_interrupt_handler+0x6c/0x88 [ 107.741791][ C1] el1_interrupt+0x30/0x58 [ 107.743046][ C1] el1h_64_irq_handler+0x18/0x24 [ 107.744486][ C1] el1h_64_irq+0x78/0x7c [ 107.745697][ C1] _raw_spin_unlock_irqrestore+0xb8/0x14c [ 107.747255][ C1] __test_set_page_writeback+0x654/0xc34 [ 107.748819][ C1] ext4_bio_write_page+0x22c/0x1dc8 [ 107.750272][ C1] mpage_process_page_bufs+0x6ec/0x8c4 [ 107.751850][ C1] mpage_prepare_extent_to_map+0x9a0/0xda4 [ 107.753464][ C1] ext4_writepages+0x7b0/0x2c14 [ 107.754851][ C1] do_writepages+0x36c/0x578 [ 107.756130][ C1] __writeback_single_inode+0x148/0x11f0 [ 107.757746][ C1] writeback_sb_inodes+0x7fc/0x1378 [ 107.759240][ C1] __writeback_inodes_wb+0x110/0x394 [ 107.760695][ C1] wb_writeback+0x3ec/0xe44 [ 107.761958][ C1] wb_workfn+0xa18/0xdd8 [ 107.763132][ C1] process_one_work+0x79c/0x1140 [ 107.764511][ C1] worker_thread+0x8f4/0x101c [ 107.765755][ C1] kthread+0x374/0x454 [ 107.766845][ C1] ret_from_fork+0x10/0x20 [ 107.768075][ C1] irq event stamp: 1531195 [ 107.769280][ C1] hardirqs last enabled at (1531194): [] _raw_spin_unlock_irq+0x98/0x128 [ 107.772102][ C1] hardirqs last disabled at (1531195): [] _raw_spin_lock_irqsave+0xfc/0x14c [ 107.774023][ T2454] usb 1-1: USB disconnect, device number 3 [ 107.774986][ C1] softirqs last enabled at (1525880): [] handle_softirqs+0xa4c/0xbf0 [ 107.779339][ C1] softirqs last disabled at (1531181): [] __irq_exit_rcu+0x240/0x440 [ 107.782013][ C1] ---[ end trace 7acf610d9cc084b7 ]--- [ 107.783577][ C1] bcm5974 1-1:1.0: trackpad urb failed: -2 [ 107.785511][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 107.798738][ T4629] bcm5974 1-1:1.0: could not read from device [ 108.558326][ T2454] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 108.798310][ T2454] usb 1-1: Using ep0 maxpacket: 8 [ 108.918386][ T2454] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 15 [ 108.921217][ T2454] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 109.088316][ T2454] usb 1-1: New USB device found, idVendor=05ac, idProduct=0243, bcdDevice= 0.40 [ 109.090933][ T2454] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.093093][ T2454] usb 1-1: Product: syz [ 109.094307][ T2454] usb 1-1: Manufacturer: syz [ 109.095672][ T2454] usb 1-1: SerialNumber: syz [ 109.144873][ T2454] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input4 [ 109.568434][ T4629] ------------[ cut here ]------------ [ 109.570044][ T4629] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 109.572008][ T4629] WARNING: CPU: 0 PID: 4629 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1580 [ 109.574636][ T4629] Modules linked in: [ 109.575651][ T4629] CPU: 0 PID: 4629 Comm: udevd Tainted: G W 5.15.182-syzkaller #0 [ 109.578050][ T4629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 109.580894][ T4629] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 109.583105][ T4629] pc : usb_submit_urb+0xa44/0x1580 [ 109.584519][ T4629] lr : usb_submit_urb+0xa44/0x1580 [ 109.585951][ T4629] sp : ffff80001f317470 [ 109.587092][ T4629] x29: ffff80001f3174b0 x28: 1fffe00019da7c03 x27: ffff80001237bca8 [ 109.589326][ T4629] x26: ffff0000c89c2100 x25: ffff0000c1c50250 x24: 000000000000000f [ 109.591656][ T4629] x23: ffff800012382300 x22: dfff800000000000 x21: 0000000000000002 [ 109.593910][ T4629] x20: 0000000000000cc0 x19: ffff0000c1c50200 x18: 0000000000000001 [ 109.596158][ T4629] x17: 0000000000000000 x16: ffff8000111a53fc x15: 00000000ffffffff [ 109.598513][ T4629] x14: 0000000000ff0100 x13: 0000000000000001 x12: 0000000000ff0100 [ 109.600746][ T4629] x11: 0000000000000000 x10: 0000000000000000 x9 : fb3fdae21cc0f800 [ 109.603016][ T4629] x8 : fb3fdae21cc0f800 x7 : 0000000000000001 x6 : 0000000000000001 [ 109.605292][ T4629] x5 : ffff80001f316d58 x4 : ffff80001422f280 x3 : ffff800008503828 [ 109.607501][ T4629] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000029 [ 109.609791][ T4629] Call trace: [ 109.610702][ T4629] usb_submit_urb+0xa44/0x1580 [ 109.612063][ T4629] bcm5974_start_traffic+0xe0/0x154 [ 109.613532][ T4629] bcm5974_open+0x94/0x130 [ 109.614724][ T4629] input_open_device+0x134/0x288 [ 109.616150][ T4629] evdev_open+0x3c4/0x468 [ 109.617384][ T4629] chrdev_open+0x26c/0x4f0 [ 109.618566][ T4629] do_dentry_open+0x760/0xebc [ 109.619962][ T4629] vfs_open+0x7c/0x90 [ 109.621110][ T4629] path_openat+0x1f80/0x26e4 [ 109.622416][ T4629] do_filp_open+0x164/0x330 [ 109.623663][ T4629] do_sys_openat2+0x128/0x3d8 [ 109.624977][ T4629] __arm64_sys_openat+0x120/0x154 [ 109.626427][ T4629] invoke_syscall+0x98/0x2b8 [ 109.627735][ T4629] el0_svc_common+0x138/0x258 [ 109.629084][ T4629] do_el0_svc+0x58/0x14c [ 109.630316][ T4629] el0_svc+0x78/0x1e0 [ 109.631411][ T4629] el0t_64_sync_handler+0xcc/0xe4 [ 109.632849][ T4629] el0t_64_sync+0x1a0/0x1a4 [ 109.634110][ T4629] irq event stamp: 31018 [ 109.635332][ T4629] hardirqs last enabled at (31017): [] __up_console_sem+0xb4/0x100 [ 109.638066][ T4629] hardirqs last disabled at (31018): [] el1_dbg+0x24/0x80 [ 109.640502][ T4629] softirqs last enabled at (30582): [] local_bh_enable+0x10/0x34 [ 109.643156][ T4629] softirqs last disabled at (30580): [] local_bh_disable+0x10/0x34 [ 109.645863][ T4629] ---[ end trace 7acf610d9cc084b8 ]--- [ 109.678224][ C0] ------------[ cut here ]------------ [ 109.679804][ C0] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 109.681796][ C0] WARNING: CPU: 0 PID: 0 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1580 [ 109.684464][ C0] Modules linked in: [ 109.685550][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G W 5.15.182-syzkaller #0 [ 109.688053][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 109.690929][ C0] pstate: 604000c5 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 109.693195][ C0] pc : usb_submit_urb+0xa44/0x1580 [ 109.694692][ C0] lr : usb_submit_urb+0xa44/0x1580 [ 109.696102][ C0] sp : ffff800008007620 [ 109.697287][ C0] x29: ffff800008007660 x28: 1fffe00019da7c03 x27: ffff80001237bca8 [ 109.699577][ C0] x26: ffff0000c89c2100 x25: ffff0000c1c50250 x24: 000000000000000f [ 109.701868][ C0] x23: ffff800012382300 x22: dfff800000000000 x21: 0000000000000002 [ 109.704211][ C0] x20: 0000000000000a20 x19: ffff0000c1c50200 x18: 0000000000000102 [ 109.706546][ C0] x17: 0000000000000000 x16: ffff8000111a53fc x15: 00000000ffffffff [ 109.708783][ C0] x14: 0000000000ff0100 x13: 0000000000000001 x12: 0000000000ff0100 [ 109.711046][ C0] x11: 0000000000000101 x10: 0000000000000000 x9 : a004a05b691d7500 [ 109.713387][ C0] x8 : a004a05b691d7500 x7 : 0000000000000001 x6 : 0000000000000001 [ 109.715669][ C0] x5 : ffff800008006f18 x4 : ffff80001422f280 x3 : ffff800008503828 [ 109.717986][ C0] x2 : 0000000000000001 x1 : 0000000100000101 x0 : 0000000000000029 [ 109.720216][ C0] Call trace: [ 109.721126][ C0] usb_submit_urb+0xa44/0x1580 [ 109.722541][ C0] bcm5974_irq_trackpad+0x204/0xe88 [ 109.724061][ C0] __usb_hcd_giveback_urb+0x2e0/0x518 [ 109.725599][ C0] usb_hcd_giveback_urb+0x100/0x3e0 [ 109.727088][ C0] dummy_timer+0x5b8/0x231c [ 109.728327][ C0] call_timer_fn+0x19c/0x858 [ 109.729587][ C0] __run_timers+0x46c/0x6c4 [ 109.730818][ C0] run_timer_softirq+0x7c/0x114 [ 109.732232][ C0] handle_softirqs+0x344/0xbf0 [ 109.733632][ C0] __irq_exit_rcu+0x240/0x440 [ 109.734941][ C0] irq_exit+0x14/0x88 [ 109.736066][ C0] handle_domain_irq+0x14c/0x1fc [ 109.737426][ C0] gic_handle_irq+0x78/0x1c8 [ 109.738716][ C0] call_on_irq_stack+0x24/0x4c [ 109.740079][ C0] do_interrupt_handler+0x6c/0x88 [ 109.741492][ C0] el1_interrupt+0x30/0x58 [ 109.742719][ C0] el1h_64_irq_handler+0x18/0x24 [ 109.744116][ C0] el1h_64_irq+0x78/0x7c [ 109.745315][ C0] arch_local_irq_enable+0xc/0x18 [ 109.746663][ C0] default_idle_call+0xcc/0x418 [ 109.748012][ C0] do_idle+0x1c8/0x480 [ 109.749203][ C0] cpu_startup_entry+0x24/0x28 [ 109.750600][ C0] rest_init+0x360/0x390 [ 109.751806][ C0] arch_call_rest_init+0x14/0x20 [ 109.753150][ C0] start_kernel+0x49c/0x54c [ 109.754445][ C0] __primary_switched+0xa8/0xb0 [ 109.755803][ C0] irq event stamp: 305335 [ 109.757065][ C0] hardirqs last enabled at (305334): [] _raw_spin_unlock_irq+0x98/0x128 [ 109.759897][ C0] hardirqs last disabled at (305335): [] _raw_spin_lock_irqsave+0xfc/0x14c [ 109.762822][ C0] softirqs last enabled at (305324): [] handle_softirqs+0xa4c/0xbf0 [ 109.765596][ C0] softirqs last disabled at (305331): [] __irq_exit_rcu+0x240/0x440 [ 109.768312][ C0] ---[ end trace 7acf610d9cc084b9 ]--- [ 109.771533][ T4336] usb 1-1: USB disconnect, device number 4 [ 109.800119][ T4629] bcm5974 1-1:1.0: could not read from device [ 110.558258][ T4106] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 110.828281][ T4106] usb 1-1: Using ep0 maxpacket: 8 [ 110.948383][ T4106] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 15 [ 110.951156][ T4106] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 111.128606][ T4106] usb 1-1: New USB device found, idVendor=05ac, idProduct=0243, bcdDevice= 0.40 [ 111.131245][ T4106] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.133575][ T4106] usb 1-1: Product: syz [ 111.134750][ T4106] usb 1-1: Manufacturer: syz [ 111.136032][ T4106] usb 1-1: SerialNumber: syz [ 111.180330][ T4106] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input5 [ 111.618382][ T4629] ------------[ cut here ]------------ [ 111.620140][ T4629] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 111.622114][ T4629] WARNING: CPU: 1 PID: 4629 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1580 [ 111.624780][ T4629] Modules linked in: [ 111.625853][ T4629] CPU: 1 PID: 4629 Comm: udevd Tainted: G W 5.15.182-syzkaller #0 [ 111.628400][ T4629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 111.631185][ T4629] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 111.633431][ T4629] pc : usb_submit_urb+0xa44/0x1580 [ 111.634862][ T4629] lr : usb_submit_urb+0xa44/0x1580 [ 111.636387][ T4629] sp : ffff80001f317470 [ 111.637541][ T4629] x29: ffff80001f3174b0 x28: 1fffe0001b282603 x27: ffff80001237bca8 [ 111.639725][ T4629] x26: ffff0000cdbac700 x25: ffff0000c1419e50 x24: 000000000000000f [ 111.642072][ T4629] x23: ffff800012382300 x22: dfff800000000000 x21: 0000000000000002 [ 111.644274][ T4629] x20: 0000000000000cc0 x19: ffff0000c1419e00 x18: 0000000000000001 [ 111.646549][ T4629] x17: 0000000000000000 x16: ffff8000111a53fc x15: 00000000ffffffff [ 111.648737][ T4629] x14: 0000000000ff0100 x13: 0000000000000001 x12: 0000000000ff0100 [ 111.650989][ T4629] x11: 0000000000000000 x10: 0000000000000000 x9 : fb3fdae21cc0f800 [ 111.653228][ T4629] x8 : fb3fdae21cc0f800 x7 : 0000000000000001 x6 : 0000000000000001 [ 111.655492][ T4629] x5 : ffff80001f316d58 x4 : ffff80001422f280 x3 : ffff800008503828 [ 111.657688][ T4629] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000029 [ 111.659912][ T4629] Call trace: [ 111.660822][ T4629] usb_submit_urb+0xa44/0x1580 [ 111.662134][ T4629] bcm5974_start_traffic+0xe0/0x154 [ 111.663586][ T4629] bcm5974_open+0x94/0x130 [ 111.664808][ T4629] input_open_device+0x134/0x288 [ 111.666211][ T4629] evdev_open+0x3c4/0x468 [ 111.667396][ T4629] chrdev_open+0x26c/0x4f0 [ 111.668590][ T4629] do_dentry_open+0x760/0xebc [ 111.669870][ T4629] vfs_open+0x7c/0x90 [ 111.670995][ T4629] path_openat+0x1f80/0x26e4 [ 111.672332][ T4629] do_filp_open+0x164/0x330 [ 111.673580][ T4629] do_sys_openat2+0x128/0x3d8 [ 111.674845][ T4629] __arm64_sys_openat+0x120/0x154 [ 111.676282][ T4629] invoke_syscall+0x98/0x2b8 [ 111.677546][ T4629] el0_svc_common+0x138/0x258 [ 111.678839][ T4629] do_el0_svc+0x58/0x14c [ 111.679999][ T4629] el0_svc+0x78/0x1e0 [ 111.681056][ T4629] el0t_64_sync_handler+0xcc/0xe4 [ 111.682531][ T4629] el0t_64_sync+0x1a0/0x1a4 [ 111.683747][ T4629] irq event stamp: 38186 [ 111.684883][ T4629] hardirqs last enabled at (38185): [] __up_console_sem+0xb4/0x100 [ 111.687607][ T4629] hardirqs last disabled at (38186): [] el1_dbg+0x24/0x80 [ 111.689994][ T4629] softirqs last enabled at (35374): [] handle_softirqs+0xa4c/0xbf0 [ 111.692734][ T4629] softirqs last disabled at (35365): [] __irq_exit_rcu+0x240/0x440 [ 111.695696][ T4629] ---[ end trace 7acf610d9cc084ba ]--- [ 111.708207][ C1] ------------[ cut here ]------------ [ 111.709795][ C1] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 111.711703][ C1] WARNING: CPU: 1 PID: 0 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1580 [ 111.714211][ C1] Modules linked in: [ 111.715271][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G W 5.15.182-syzkaller #0 [ 111.717704][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 111.720516][ C1] pstate: 604000c5 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 111.722704][ C1] pc : usb_submit_urb+0xa44/0x1580 [ 111.724099][ C1] lr : usb_submit_urb+0xa44/0x1580 [ 111.725539][ C1] sp : ffff800008017620 [ 111.726675][ C1] x29: ffff800008017660 x28: 1fffe0001b282603 x27: ffff80001237bca8 [ 111.728915][ C1] x26: ffff0000cdbac700 x25: ffff0000c1419e50 x24: 000000000000000f [ 111.731170][ C1] x23: ffff800012382300 x22: dfff800000000000 x21: 0000000000000002 [ 111.733481][ C1] x20: 0000000000000a20 x19: ffff0000c1419e00 x18: 0000000000000102 [ 111.735677][ C1] x17: 0000000000000000 x16: ffff8000111a53fc x15: 00000000ffffffff [ 111.737945][ C1] x14: 0000000000ff0100 x13: 0000000000000001 x12: 0000000000ff0100 [ 111.740208][ C1] x11: 0000000000000101 x10: 0000000000000000 x9 : 8714cdbd82bc9b00 [ 111.742492][ C1] x8 : 8714cdbd82bc9b00 x7 : 0000000000000001 x6 : 0000000000000001 [ 111.744778][ C1] x5 : ffff800008016f18 x4 : ffff80001422f280 x3 : ffff800008503828 [ 111.747051][ C1] x2 : 0000000000000001 x1 : 0000000100000101 x0 : 0000000000000029 [ 111.749333][ C1] Call trace: [ 111.750234][ C1] usb_submit_urb+0xa44/0x1580 [ 111.751570][ C1] bcm5974_irq_trackpad+0x204/0xe88 [ 111.753026][ C1] __usb_hcd_giveback_urb+0x2e0/0x518 [ 111.754507][ C1] usb_hcd_giveback_urb+0x100/0x3e0 [ 111.755986][ C1] dummy_timer+0x5b8/0x231c [ 111.757294][ C1] call_timer_fn+0x19c/0x858 [ 111.758592][ C1] __run_timers+0x46c/0x6c4 [ 111.759816][ C1] run_timer_softirq+0x7c/0x114 [ 111.761152][ C1] handle_softirqs+0x344/0xbf0 [ 111.762543][ C1] __irq_exit_rcu+0x240/0x440 [ 111.763898][ C1] irq_exit+0x14/0x88 [ 111.764995][ C1] handle_domain_irq+0x14c/0x1fc [ 111.766430][ C1] gic_handle_irq+0x78/0x1c8 [ 111.767734][ C1] call_on_irq_stack+0x24/0x4c [ 111.769116][ C1] do_interrupt_handler+0x6c/0x88 [ 111.770527][ C1] el1_interrupt+0x30/0x58 [ 111.771731][ C1] el1h_64_irq_handler+0x18/0x24 [ 111.773083][ C1] el1h_64_irq+0x78/0x7c [ 111.774279][ C1] arch_local_irq_enable+0xc/0x18 [ 111.775654][ C1] default_idle_call+0xcc/0x418 [ 111.777038][ C1] do_idle+0x1c8/0x480 [ 111.778170][ C1] cpu_startup_entry+0x24/0x28 [ 111.779473][ C1] secondary_start_kernel+0x23c/0x294 [ 111.780925][ C1] __secondary_switched+0x94/0x98 [ 111.782316][ C1] irq event stamp: 292253 [ 111.783520][ C1] hardirqs last enabled at (292252): [] _raw_spin_unlock_irq+0x98/0x128 [ 111.786257][ C1] hardirqs last disabled at (292253): [] _raw_spin_lock_irqsave+0xfc/0x14c [ 111.789072][ C1] softirqs last enabled at (292236): [] handle_softirqs+0xa4c/0xbf0 [ 111.791732][ C1] softirqs last disabled at (292249): [] __irq_exit_rcu+0x240/0x440 [ 111.794400][ C1] ---[ end trace 7acf610d9cc084bb ]--- [ 111.796111][ C1] ------------[ cut here ]------------ [ 111.797528][ C1] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 111.799433][ C1] WARNING: CPU: 1 PID: 0 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1580 [ 111.802018][ C1] Modules linked in: [ 111.803084][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G W 5.15.182-syzkaller #0 [ 111.805696][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 111.808518][ C1] pstate: 604000c5 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 111.810661][ C1] pc : usb_submit_urb+0xa44/0x1580 [ 111.812030][ C1] lr : usb_submit_urb+0xa44/0x1580 [ 111.813473][ C1] sp : ffff800008017620 [ 111.814622][ C1] x29: ffff800008017660 x28: 1fffe0001b282603 x27: ffff80001237bca8 [ 111.816813][ C1] x26: ffff0000cdbac700 x25: ffff0000c1419e50 x24: 000000000000000f [ 111.818983][ C1] x23: ffff800012382300 x22: dfff800000000000 x21: 0000000000000002 [ 111.821017][ T4106] usb 1-1: USB disconnect, device number 5 [ 111.821174][ C1] x20: 0000000000000a20 x19: ffff0000c1419e00 x18: 0000000000000102 [ 111.824931][ C1] x17: 0000000000000000 x16: ffff8000083007d8 x15: 00000000ffffffff [ 111.827159][ C1] x14: 0000000000ff0100 x13: 0000000000000001 x12: 0000000000ff0100 [ 111.829407][ C1] x11: 0000000000000101 x10: 0000000000000000 x9 : 8714cdbd82bc9b00 [ 111.831579][ C1] x8 : 8714cdbd82bc9b00 x7 : 0000000000000001 x6 : 0000000000000001 [ 111.833778][ C1] x5 : ffff800008016f18 x4 : ffff80001422f280 x3 : ffff8000083008e8 [ 111.835964][ C1] x2 : 0000000000000001 x1 : 0000000000000101 x0 : 0000000000000029 [ 111.838225][ C1] Call trace: [ 111.839135][ C1] usb_submit_urb+0xa44/0x1580 [ 111.840423][ C1] bcm5974_irq_trackpad+0x204/0xe88 [ 111.841855][ C1] __usb_hcd_giveback_urb+0x2e0/0x518 [ 111.843355][ C1] usb_hcd_giveback_urb+0x100/0x3e0 [ 111.844778][ C1] dummy_timer+0x5b8/0x231c [ 111.846041][ C1] call_timer_fn+0x19c/0x858 [ 111.847305][ C1] __run_timers+0x46c/0x6c4 [ 111.848676][ C1] run_timer_softirq+0x7c/0x114 [ 111.850061][ C1] handle_softirqs+0x344/0xbf0 [ 111.851368][ C1] __irq_exit_rcu+0x240/0x440 [ 111.852696][ C1] irq_exit+0x14/0x88 [ 111.853756][ C1] handle_domain_irq+0x14c/0x1fc [ 111.855085][ C1] gic_handle_irq+0x78/0x1c8 [ 111.856365][ C1] call_on_irq_stack+0x24/0x4c [ 111.857703][ C1] do_interrupt_handler+0x6c/0x88 [ 111.859077][ C1] el1_interrupt+0x30/0x58 [ 111.860296][ C1] el1h_64_irq_handler+0x18/0x24 [ 111.861670][ C1] el1h_64_irq+0x78/0x7c [ 111.862835][ C1] arch_local_irq_enable+0xc/0x18 [ 111.864206][ C1] default_idle_call+0xcc/0x418 [ 111.865534][ C1] do_idle+0x1c8/0x480 [ 111.866675][ C1] cpu_startup_entry+0x24/0x28 [ 111.868050][ C1] secondary_start_kernel+0x23c/0x294 [ 111.869762][ C1] __secondary_switched+0x94/0x98 [ 111.871173][ C1] irq event stamp: 292269 [ 111.872373][ C1] hardirqs last enabled at (292268): [] _raw_spin_unlock_irq+0x98/0x128 [ 111.875176][ C1] hardirqs last disabled at (292269): [] _raw_spin_lock_irqsave+0xfc/0x14c [ 111.877989][ C1] softirqs last enabled at (292236): [] handle_softirqs+0xa4c/0xbf0 [ 111.880693][ C1] softirqs last disabled at (292249): [] __irq_exit_rcu+0x240/0x440 [ 111.883359][ C1] ---[ end trace 7acf610d9cc084bc ]--- [ 111.885256][ C1] bcm5974 1-1:1.0: trackpad urb failed: -2 [ 111.887942][ T4629] bcm5974 1-1:1.0: could not read from device 1970/01/01 00:01:52 executed programs: 6 [ 112.598341][ T4106] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 112.838290][ T4106] usb 1-1: Using ep0 maxpacket: 8 [ 112.958389][ T4106] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 15 [ 112.961326][ T4106] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 113.118563][ T4106] usb 1-1: New USB device found, idVendor=05ac, idProduct=0243, bcdDevice= 0.40 [ 113.121137][ T4106] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.123410][ T4106] usb 1-1: Product: syz [ 113.124565][ T4106] usb 1-1: Manufacturer: syz [ 113.125780][ T4106] usb 1-1: SerialNumber: syz [ 113.172271][ T4106] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input6 [ 113.608385][ T4629] ------------[ cut here ]------------ [ 113.610031][ T4629] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 113.612009][ T4629] WARNING: CPU: 1 PID: 4629 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1580 [ 113.614669][ T4629] Modules linked in: [ 113.615798][ T4629] CPU: 1 PID: 4629 Comm: udevd Tainted: G W 5.15.182-syzkaller #0 [ 113.618363][ T4629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 113.621264][ T4629] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 113.623468][ T4629] pc : usb_submit_urb+0xa44/0x1580 [ 113.624887][ T4629] lr : usb_submit_urb+0xa44/0x1580 [ 113.626330][ T4629] sp : ffff80001f317470 [ 113.627499][ T4629] x29: ffff80001f3174b0 x28: 1fffe000195a0203 x27: ffff80001237bca8 [ 113.629777][ T4629] x26: ffff0000ed013300 x25: ffff0000c2df1c50 x24: 000000000000000f [ 113.632054][ T4629] x23: ffff800012382300 x22: dfff800000000000 x21: 0000000000000002 [ 113.634241][ T4629] x20: 0000000000000cc0 x19: ffff0000c2df1c00 x18: 0000000000000001 [ 113.636484][ T4629] x17: 0000000000000000 x16: ffff8000111a53fc x15: 00000000ffffffff [ 113.638664][ T4629] x14: 0000000000ff0100 x13: 0000000000000001 x12: 0000000000ff0100 [ 113.640900][ T4629] x11: 0000000000000000 x10: 0000000000000000 x9 : fb3fdae21cc0f800 [ 113.643133][ T4629] x8 : fb3fdae21cc0f800 x7 : 0000000000000001 x6 : 0000000000000001 [ 113.645348][ T4629] x5 : ffff80001f316d58 x4 : ffff80001422f280 x3 : ffff800008503828 [ 113.647571][ T4629] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000029 [ 113.649799][ T4629] Call trace: [ 113.650709][ T4629] usb_submit_urb+0xa44/0x1580 [ 113.652075][ T4629] bcm5974_start_traffic+0xe0/0x154 [ 113.653597][ T4629] bcm5974_open+0x94/0x130 [ 113.654853][ T4629] input_open_device+0x134/0x288 [ 113.656195][ T4629] evdev_open+0x3c4/0x468 [ 113.657398][ T4629] chrdev_open+0x26c/0x4f0 [ 113.658657][ T4629] do_dentry_open+0x760/0xebc [ 113.659934][ T4629] vfs_open+0x7c/0x90 [ 113.661116][ T4629] path_openat+0x1f80/0x26e4 [ 113.662368][ T4629] do_filp_open+0x164/0x330 [ 113.663644][ T4629] do_sys_openat2+0x128/0x3d8 [ 113.664945][ T4629] __arm64_sys_openat+0x120/0x154 [ 113.666318][ T4629] invoke_syscall+0x98/0x2b8 [ 113.667615][ T4629] el0_svc_common+0x138/0x258 [ 113.668936][ T4629] do_el0_svc+0x58/0x14c [ 113.670125][ T4629] el0_svc+0x78/0x1e0 [ 113.671318][ T4629] el0t_64_sync_handler+0xcc/0xe4 [ 113.672704][ T4629] el0t_64_sync+0x1a0/0x1a4 [ 113.673916][ T4629] irq event stamp: 45284 [ 113.675095][ T4629] hardirqs last enabled at (45283): [] __up_console_sem+0xb4/0x100 [ 113.677793][ T4629] hardirqs last disabled at (45284): [] el1_dbg+0x24/0x80 [ 113.680302][ T4629] softirqs last enabled at (45060): [] handle_softirqs+0xa4c/0xbf0 [ 113.682903][ T4629] softirqs last disabled at (44997): [] __irq_exit_rcu+0x240/0x440 [ 113.685579][ T4629] ---[ end trace 7acf610d9cc084bd ]--- [ 113.698243][ C1] ------------[ cut here ]------------ [ 113.699896][ C1] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 113.701857][ C1] WARNING: CPU: 1 PID: 0 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1580 [ 113.704349][ C1] Modules linked in: [ 113.705390][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G W 5.15.182-syzkaller #0 [ 113.707909][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 113.710678][ C1] pstate: 604000c5 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 113.712840][ C1] pc : usb_submit_urb+0xa44/0x1580 [ 113.714248][ C1] lr : usb_submit_urb+0xa44/0x1580 [ 113.715663][ C1] sp : ffff800008017620 [ 113.716869][ C1] x29: ffff800008017660 x28: 1fffe000195a0203 x27: ffff80001237bca8 [ 113.719008][ C1] x26: ffff0000ed013300 x25: ffff0000c2df1c50 x24: 000000000000000f [ 113.721361][ C1] x23: ffff800012382300 x22: dfff800000000000 x21: 0000000000000002 [ 113.723530][ C1] x20: 0000000000000a20 x19: ffff0000c2df1c00 x18: 0000000000000102 [ 113.725758][ C1] x17: 0000000000000000 x16: ffff8000111a53fc x15: 00000000ffffffff [ 113.728047][ C1] x14: 0000000000ff0100 x13: 0000000000000001 x12: 0000000000ff0100 [ 113.730250][ C1] x11: 0000000000000101 x10: 0000000000000000 x9 : 8714cdbd82bc9b00 [ 113.732511][ C1] x8 : 8714cdbd82bc9b00 x7 : 0000000000000001 x6 : 0000000000000001 [ 113.734762][ C1] x5 : ffff800008016f18 x4 : ffff80001422f280 x3 : ffff800008503828 [ 113.736964][ C1] x2 : 0000000000000001 x1 : 0000000100000101 x0 : 0000000000000029 [ 113.739269][ C1] Call trace: [ 113.740170][ C1] usb_submit_urb+0xa44/0x1580 [ 113.741497][ C1] bcm5974_irq_trackpad+0x204/0xe88 [ 113.742963][ C1] __usb_hcd_giveback_urb+0x2e0/0x518 [ 113.744567][ C1] usb_hcd_giveback_urb+0x100/0x3e0 [ 113.746000][ C1] dummy_timer+0x5b8/0x231c [ 113.747279][ C1] call_timer_fn+0x19c/0x858 [ 113.748544][ C1] __run_timers+0x46c/0x6c4 [ 113.749778][ C1] run_timer_softirq+0x7c/0x114 [ 113.751117][ C1] handle_softirqs+0x344/0xbf0 [ 113.752493][ C1] __irq_exit_rcu+0x240/0x440 [ 113.753806][ C1] irq_exit+0x14/0x88 [ 113.754962][ C1] handle_domain_irq+0x14c/0x1fc [ 113.756366][ C1] gic_handle_irq+0x78/0x1c8 [ 113.757648][ C1] call_on_irq_stack+0x24/0x4c [ 113.759010][ C1] do_interrupt_handler+0x6c/0x88 [ 113.760459][ C1] el1_interrupt+0x30/0x58 [ 113.761738][ C1] el1h_64_irq_handler+0x18/0x24 [ 113.763058][ C1] el1h_64_irq+0x78/0x7c [ 113.764225][ C1] arch_local_irq_enable+0xc/0x18 [ 113.765599][ C1] default_idle_call+0xcc/0x418 [ 113.766950][ C1] do_idle+0x1c8/0x480 [ 113.768103][ C1] cpu_startup_entry+0x24/0x28 [ 113.769470][ C1] secondary_start_kernel+0x23c/0x294 [ 113.770962][ C1] __secondary_switched+0x94/0x98 [ 113.772341][ C1] irq event stamp: 300475 [ 113.773564][ C1] hardirqs last enabled at (300474): [] _raw_spin_unlock_irq+0x98/0x128 [ 113.776329][ C1] hardirqs last disabled at (300475): [] _raw_spin_lock_irqsave+0xfc/0x14c [ 113.779106][ C1] softirqs last enabled at (300434): [] handle_softirqs+0xa4c/0xbf0 [ 113.781809][ C1] softirqs last disabled at (300471): [] __irq_exit_rcu+0x240/0x440 [ 113.784513][ C1] ---[ end trace 7acf610d9cc084be ]--- [ 113.786291][ C1] ------------[ cut here ]------------ [ 113.787846][ C1] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 113.789907][ C1] WARNING: CPU: 1 PID: 0 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1580 [ 113.792585][ C1] Modules linked in: [ 113.793666][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G W 5.15.182-syzkaller #0 [ 113.796212][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 113.799003][ C1] pstate: 604000c5 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 113.801132][ C1] pc : usb_submit_urb+0xa44/0x1580 [ 113.802589][ C1] lr : usb_submit_urb+0xa44/0x1580 [ 113.804020][ C1] sp : ffff800008017620 [ 113.805120][ C1] x29: ffff800008017660 x28: 1fffe000195a0203 x27: ffff80001237bca8 [ 113.807433][ C1] x26: ffff0000ed013300 x25: ffff0000c2df1c50 x24: 000000000000000f [ 113.809636][ C1] x23: ffff800012382300 x22: dfff800000000000 x21: 0000000000000002 [ 113.811902][ C1] x20: 0000000000000a20 x19: ffff0000c2df1c00 x18: 0000000000000102 [ 113.812910][ T4106] usb 1-1: USB disconnect, device number 6 [ 113.814169][ C1] x17: 0000000000000000 x16: ffff8000083007d8 x15: 00000000ffffffff [ 113.814192][ C1] x14: 0000000000ff0100 x13: 0000000000000001 x12: 0000000000ff0100 [ 113.820322][ C1] x11: 0000000000000101 x10: 0000000000000000 x9 : 8714cdbd82bc9b00 [ 113.822598][ C1] x8 : 8714cdbd82bc9b00 x7 : 0000000000000001 x6 : 0000000000000001 [ 113.824818][ C1] x5 : ffff800008016f18 x4 : ffff80001422f280 x3 : ffff8000083008e8 [ 113.827076][ C1] x2 : 0000000000000001 x1 : 0000000000000101 x0 : 0000000000000029 [ 113.829361][ C1] Call trace: [ 113.830282][ C1] usb_submit_urb+0xa44/0x1580 [ 113.831679][ C1] bcm5974_irq_trackpad+0x204/0xe88 [ 113.833100][ C1] __usb_hcd_giveback_urb+0x2e0/0x518 [ 113.834584][ C1] usb_hcd_giveback_urb+0x100/0x3e0 [ 113.836016][ C1] dummy_timer+0x5b8/0x231c [ 113.837210][ C1] call_timer_fn+0x19c/0x858 [ 113.838465][ C1] __run_timers+0x46c/0x6c4 [ 113.839721][ C1] run_timer_softirq+0x7c/0x114 [ 113.841069][ C1] handle_softirqs+0x344/0xbf0 [ 113.842429][ C1] __irq_exit_rcu+0x240/0x440 [ 113.843753][ C1] irq_exit+0x14/0x88 [ 113.844818][ C1] handle_domain_irq+0x14c/0x1fc [ 113.846198][ C1] gic_handle_irq+0x78/0x1c8 [ 113.847498][ C1] call_on_irq_stack+0x24/0x4c [ 113.848879][ C1] do_interrupt_handler+0x6c/0x88 [ 113.850354][ C1] el1_interrupt+0x30/0x58 [ 113.851596][ C1] el1h_64_irq_handler+0x18/0x24 [ 113.852984][ C1] el1h_64_irq+0x78/0x7c [ 113.854196][ C1] arch_local_irq_enable+0xc/0x18 [ 113.855566][ C1] default_idle_call+0xcc/0x418 [ 113.856872][ C1] do_idle+0x1c8/0x480 [ 113.857956][ C1] cpu_startup_entry+0x24/0x28 [ 113.859254][ C1] secondary_start_kernel+0x23c/0x294 [ 113.860713][ C1] __secondary_switched+0x94/0x98 [ 113.862144][ C1] irq event stamp: 300491 [ 113.863358][ C1] hardirqs last enabled at (300490): [] _raw_spin_unlock_irq+0x98/0x128 [ 113.866097][ C1] hardirqs last disabled at (300491): [] _raw_spin_lock_irqsave+0xfc/0x14c [ 113.868989][ C1] softirqs last enabled at (300434): [] handle_softirqs+0xa4c/0xbf0 [ 113.871767][ C1] softirqs last disabled at (300471): [] __irq_exit_rcu+0x240/0x440 [ 113.874450][ C1] ---[ end trace 7acf610d9cc084bf ]--- [ 113.875976][ C1] bcm5974 1-1:1.0: trackpad urb failed: -2 [ 113.888405][ T4629] bcm5974 1-1:1.0: could not read from device [ 114.598266][ T4336] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 114.838306][ T4336] usb 1-1: Using ep0 maxpacket: 8 [ 114.958329][ T4336] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 15 [ 114.961299][ T4336] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 115.118395][ T4336] usb 1-1: New USB device found, idVendor=05ac, idProduct=0243, bcdDevice= 0.40 [ 115.121002][ T4336] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.123234][ T4336] usb 1-1: Product: syz [ 115.124374][ T4336] usb 1-1: Manufacturer: syz [ 115.125573][ T4336] usb 1-1: SerialNumber: syz [ 115.171521][ T4336] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input7