Warning: Permanently added '10.128.1.113' (ED25519) to the list of known hosts. 1970/01/01 00:00:59 ignoring optional flag "sandboxArg"="0" 1970/01/01 00:00:59 ignoring optional flag "type"="gce" 1970/01/01 00:00:59 parsed 1 programs [ 59.486981][ T4273] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS 1970/01/01 00:00:59 executed programs: 0 [ 59.622990][ T4287] chnl_net:caif_netlink_parms(): no params data found [ 59.659951][ T4287] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.661636][ T4287] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.663973][ T4287] device bridge_slave_0 entered promiscuous mode [ 59.667438][ T4287] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.669522][ T4287] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.671716][ T4287] device bridge_slave_1 entered promiscuous mode [ 59.688364][ T4287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.692050][ T4287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.716271][ T4287] team0: Port device team_slave_0 added [ 59.719385][ T4287] team0: Port device team_slave_1 added [ 59.733067][ T4287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.734572][ T4287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.740013][ T4287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.743674][ T4287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.745191][ T4287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.750911][ T4287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.809844][ T4287] device hsr_slave_0 entered promiscuous mode [ 59.848425][ T4287] device hsr_slave_1 entered promiscuous mode [ 60.517600][ T4287] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 60.560986][ T4287] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 60.611222][ T4287] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.678251][ T4287] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 60.767459][ T4287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.776277][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.780103][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.784172][ T4287] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.788659][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.791470][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.793939][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.795506][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.803744][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.806355][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.808881][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.811009][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.812423][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.814579][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.825253][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.829914][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.832759][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.842664][ T4287] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 60.844878][ T4287] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.851335][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.853592][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.856099][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.858978][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.861327][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.864150][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.866595][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.870140][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.944440][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.946075][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.950938][ T4287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.964736][ T1773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.968403][ T1773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.981375][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.983781][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.986176][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.988772][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.991642][ T4287] device veth0_vlan entered promiscuous mode [ 60.997135][ T4287] device veth1_vlan entered promiscuous mode [ 61.020813][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.023075][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.025396][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.030301][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.035176][ T4287] device veth0_macvtap entered promiscuous mode [ 61.043302][ T4287] device veth1_macvtap entered promiscuous mode [ 61.053955][ T4287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.055596][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.057756][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.063085][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.065778][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.074121][ T4287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.077540][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.083017][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.086271][ T4287] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.089720][ T4287] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.091621][ T4287] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.093392][ T4287] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.146905][ T1773] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.149774][ T1773] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.152383][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.176519][ T1602] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.180527][ T1602] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.183316][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.489272][ T1533] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 61.548997][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 61.888630][ T1533] usb 1-1: config 0 has an invalid interface number: 10 but max is 0 [ 61.890575][ T1533] usb 1-1: config 0 has no interface number 0 [ 61.891915][ T1533] usb 1-1: config 0 interface 10 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 61.894136][ T1533] usb 1-1: config 0 interface 10 altsetting 0 endpoint 0x81 has invalid maxpacket 21669, setting to 1024 [ 61.896833][ T1533] usb 1-1: config 0 interface 10 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 61.899931][ T1533] usb 1-1: config 0 interface 10 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 62.088056][ T1533] usb 1-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice=d4.d7 [ 62.090184][ T1533] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.091960][ T1533] usb 1-1: Product: syz [ 62.092895][ T1533] usb 1-1: Manufacturer: syz [ 62.093808][ T1533] usb 1-1: SerialNumber: syz [ 62.100381][ T1533] usb 1-1: config 0 descriptor?? [ 62.129334][ T4404] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 62.152406][ T1533] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.10/input/input2 [ 62.591258][ T4288] ------------[ cut here ]------------ [ 62.592597][ T4288] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 62.594339][ T4288] WARNING: CPU: 1 PID: 4288 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1588 [ 62.596274][ T4288] Modules linked in: [ 62.597175][ T4288] CPU: 1 PID: 4288 Comm: udevd Not tainted 5.15.167-syzkaller #0 [ 62.598925][ T4288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 62.601135][ T4288] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 62.602892][ T4288] pc : usb_submit_urb+0xa44/0x1588 [ 62.604080][ T4288] lr : usb_submit_urb+0xa44/0x1588 [ 62.605088][ T4288] sp : ffff800020127370 [ 62.605919][ T4288] x29: ffff8000201273b0 x28: 0000000000000001 x27: ffff800012cb2648 [ 62.607635][ T4288] x26: ffff0000ca80a100 x25: ffff0000db630000 x24: 0000000000000400 [ 62.609364][ T4288] x23: ffff800012cb8f00 x22: dfff800000000000 x21: 0000000000000002 [ 62.611180][ T4288] x20: 0000000000000cc0 x19: ffff0000c0fea800 x18: 0000000000000001 [ 62.613035][ T4288] x17: 0000000000000000 x16: ffff800011ac23e0 x15: 00000000ffffffff [ 62.614749][ T4288] x14: ffff0000c1c11b40 x13: 0000000000000001 x12: 0000000000000001 [ 62.616487][ T4288] x11: 0000000000000000 x10: 0000000000000000 x9 : 50f12f0947935400 [ 62.618181][ T4288] x8 : 50f12f0947935400 x7 : 0000000000000001 x6 : 0000000000000001 [ 62.619981][ T4288] x5 : ffff800020126ad8 x4 : ffff800014b9fae0 x3 : ffff800008557c4c [ 62.621571][ T4288] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000029 [ 62.623339][ T4288] Call trace: [ 62.624016][ T4288] usb_submit_urb+0xa44/0x1588 [ 62.625069][ T4288] bcm5974_start_traffic+0xe0/0x154 [ 62.626313][ T4288] bcm5974_open+0x98/0x134 [ 62.627267][ T4288] input_open_device+0x170/0x29c [ 62.628340][ T4288] evdev_open+0x308/0x4b4 [ 62.629317][ T4288] chrdev_open+0x3e8/0x4fc [ 62.630214][ T4288] do_dentry_open+0x780/0xed8 [ 62.631290][ T4288] vfs_open+0x7c/0x90 [ 62.632202][ T4288] path_openat+0x1ea0/0x26cc [ 62.633166][ T4288] do_filp_open+0x1a8/0x3b4 [ 62.634152][ T4288] do_sys_openat2+0x128/0x3e0 [ 62.635238][ T4288] __arm64_sys_openat+0x1f0/0x240 [ 62.636421][ T4288] invoke_syscall+0x98/0x2b8 [ 62.637388][ T4288] el0_svc_common+0x138/0x258 [ 62.638345][ T4288] do_el0_svc+0x58/0x14c [ 62.638373][ T4288] el0_svc+0x7c/0x1f0 [ 62.638385][ T4288] el0t_64_sync_handler+0x84/0xe4 [ 62.641527][ T4288] el0t_64_sync+0x1a0/0x1a4 [ 62.642537][ T4288] irq event stamp: 7612 [ 62.643523][ T4288] hardirqs last enabled at (7611): [] __up_console_sem+0xb4/0x100 [ 62.645656][ T4288] hardirqs last disabled at (7612): [] el1_dbg+0x24/0x80 [ 62.647595][ T4288] softirqs last enabled at (7198): [] local_bh_enable+0x10/0x34 [ 62.649636][ T4288] softirqs last disabled at (7196): [] local_bh_disable+0x10/0x34 [ 62.651732][ T4288] ---[ end trace 581d8f0bec8b52bf ]--- [ 62.667991][ C1] ------------[ cut here ]------------ [ 62.669314][ C1] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 62.670945][ C1] WARNING: CPU: 1 PID: 4502 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1588 [ 62.673004][ C1] Modules linked in: [ 62.673871][ C1] CPU: 1 PID: 4502 Comm: dhcpcd-run-hook Tainted: G W 5.15.167-syzkaller #0 [ 62.675806][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 62.677963][ C1] pstate: 604000c5 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 62.679681][ C1] pc : usb_submit_urb+0xa44/0x1588 [ 62.680739][ C1] lr : usb_submit_urb+0xa44/0x1588 [ 62.681852][ C1] sp : ffff8000080175e0 [ 62.682732][ C1] x29: ffff800008017620 x28: 0000000000000001 x27: ffff800012cb2648 [ 62.684475][ C1] x26: ffff0000ca80a100 x25: ffff0000db630000 x24: 0000000000000400 [ 62.686095][ C1] x23: ffff800012cb8f00 x22: dfff800000000000 x21: 0000000000000002 [ 62.687739][ C1] x20: 0000000000000a20 x19: ffff0000c0fea800 x18: 0000000000000101 [ 62.689489][ C1] x17: 0000000000000000 x16: ffff800011ac23e0 x15: 00000000ffffffff [ 62.691180][ C1] x14: ffff0000c71ed1c0 x13: 0000000000000001 x12: 0000000000000001 [ 62.692917][ C1] x11: 0000000000000100 x10: 0000000000000000 x9 : e4aae42b5fbc1700 [ 62.694542][ C1] x8 : e4aae42b5fbc1700 x7 : 0000000000000001 x6 : 0000000000000001 [ 62.696216][ C1] x5 : ffff800008016d58 x4 : ffff800014b9fae0 x3 : ffff800008557c4c [ 62.697926][ C1] x2 : 0000000000000001 x1 : 0000000000000100 x0 : 0000000000000029 [ 62.699642][ C1] Call trace: [ 62.700318][ C1] usb_submit_urb+0xa44/0x1588 [ 62.701350][ C1] bcm5974_irq_trackpad+0x20c/0xdd0 [ 62.702420][ C1] __usb_hcd_giveback_urb+0x2e0/0x518 [ 62.703661][ C1] usb_hcd_giveback_urb+0x108/0x41c [ 62.704736][ C1] dummy_timer+0x66c/0x26cc [ 62.705608][ C1] call_timer_fn+0x19c/0x8f0 [ 62.706542][ C1] __run_timers+0x554/0x718 [ 62.707520][ C1] run_timer_softirq+0x7c/0x114 [ 62.708638][ C1] handle_softirqs+0x384/0xdbc [ 62.709654][ C1] __irq_exit_rcu+0x268/0x4d8 [ 62.710690][ C1] irq_exit+0x14/0x88 [ 62.711557][ C1] handle_domain_irq+0xf4/0x178 [ 62.712634][ C1] gic_handle_irq+0x78/0x1c8 [ 62.713673][ C1] call_on_irq_stack+0x24/0x4c [ 62.714645][ C1] do_interrupt_handler+0x74/0x94 [ 62.715730][ C1] el1_interrupt+0x30/0x58 [ 62.716741][ C1] el1h_64_irq_handler+0x18/0x24 [ 62.717918][ C1] el1h_64_irq+0x78/0x7c [ 62.718823][ C1] get_page_from_freelist+0x794/0x2cd0 [ 62.719959][ C1] __alloc_pages+0x20c/0x674 [ 62.720943][ C1] alloc_pages+0x368/0x5d4 [ 62.721954][ C1] __pmd_alloc+0xa4/0x52c [ 62.722902][ C1] copy_page_range+0x2904/0x2dac [ 62.724103][ C1] copy_mm+0xa18/0x10fc [ 62.725070][ C1] copy_process+0x1680/0x3750 [ 62.726036][ C1] kernel_clone+0x1d8/0xa58 [ 62.726899][ C1] __arm64_sys_clone+0x1f0/0x24c [ 62.727951][ C1] invoke_syscall+0x98/0x2b8 [ 62.728979][ C1] el0_svc_common+0x138/0x258 [ 62.729956][ C1] do_el0_svc+0x58/0x14c [ 62.730899][ C1] el0_svc+0x7c/0x1f0 [ 62.731833][ C1] el0t_64_sync_handler+0x84/0xe4 [ 62.732933][ C1] el0t_64_sync+0x1a0/0x1a4 [ 62.733866][ C1] irq event stamp: 1203 [ 62.734655][ C1] hardirqs last enabled at (1202): [] _raw_spin_unlock_irq+0x9c/0x134 [ 62.736865][ C1] hardirqs last disabled at (1203): [] _raw_spin_lock_irqsave+0xfc/0x14c [ 62.738869][ C1] softirqs last enabled at (1114): [] local_bh_enable+0x10/0x34 [ 62.740814][ C1] softirqs last disabled at (1199): [] __irq_exit_rcu+0x268/0x4d8 [ 62.742860][ C1] ---[ end trace 581d8f0bec8b52c0 ]--- [ 62.744244][ C1] ------------[ cut here ]------------ [ 62.745369][ C1] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 62.746844][ C1] WARNING: CPU: 1 PID: 4502 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1588 [ 62.748883][ C1] Modules linked in: [ 62.749755][ C1] CPU: 1 PID: 4502 Comm: dhcpcd-run-hook Tainted: G W 5.15.167-syzkaller #0 [ 62.751918][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 62.754086][ C1] pstate: 604000c5 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 62.755864][ C1] pc : usb_submit_urb+0xa44/0x1588 [ 62.757055][ C1] lr : usb_submit_urb+0xa44/0x1588 [ 62.758192][ C1] sp : ffff8000080175e0 [ 62.759141][ C1] x29: ffff800008017620 x28: 0000000000000001 x27: ffff800012cb2648 [ 62.760940][ C1] x26: ffff0000ca80a100 x25: ffff0000db630000 x24: 0000000000000400 [ 62.762678][ C1] x23: ffff800012cb8f00 x22: dfff800000000000 x21: 0000000000000002 [ 62.764389][ C1] x20: 0000000000000a20 x19: ffff0000c0fea800 x18: 0000000000000101 [ 62.766161][ C1] x17: 0000000000000000 x16: ffff800008336530 x15: 00000000ffffffff [ 62.768047][ C1] x14: ffff0000c71ed1c0 x13: 0000000000000001 x12: 0000000000000001 [ 62.769751][ C1] x11: 0000000000000100 x10: 0000000000000000 x9 : e4aae42b5fbc1700 [ 62.771525][ C1] x8 : e4aae42b5fbc1700 x7 : 0000000000000001 x6 : 0000000000000001 [ 62.773279][ C1] x5 : ffff800008016d58 x4 : ffff800014b9fae0 x3 : ffff80000833667c [ 62.775098][ C1] x2 : 0000000000000001 x1 : 0000000000000100 x0 : 0000000000000029 [ 62.776888][ C1] Call trace: [ 62.777571][ C1] usb_submit_urb+0xa44/0x1588 [ 62.778575][ C1] bcm5974_irq_trackpad+0x20c/0xdd0 [ 62.779610][ C1] __usb_hcd_giveback_urb+0x2e0/0x518 [ 62.780739][ C1] usb_hcd_giveback_urb+0x108/0x41c [ 62.781754][ C1] dummy_timer+0x66c/0x26cc [ 62.782773][ C1] call_timer_fn+0x19c/0x8f0 [ 62.783723][ C1] __run_timers+0x554/0x718 [ 62.784680][ C1] run_timer_softirq+0x7c/0x114 [ 62.785850][ C1] handle_softirqs+0x384/0xdbc [ 62.786892][ C1] __irq_exit_rcu+0x268/0x4d8 [ 62.787903][ C1] irq_exit+0x14/0x88 [ 62.788736][ C1] handle_domain_irq+0xf4/0x178 [ 62.789670][ C1] gic_handle_irq+0x78/0x1c8 [ 62.790624][ C1] call_on_irq_stack+0x24/0x4c [ 62.791581][ C1] do_interrupt_handler+0x74/0x94 [ 62.792613][ C1] el1_interrupt+0x30/0x58 [ 62.793584][ C1] el1h_64_irq_handler+0x18/0x24 [ 62.794662][ C1] el1h_64_irq+0x78/0x7c [ 62.795636][ C1] get_page_from_freelist+0x794/0x2cd0 [ 62.796780][ C1] __alloc_pages+0x20c/0x674 [ 62.797686][ C1] alloc_pages+0x368/0x5d4 [ 62.798579][ C1] __pmd_alloc+0xa4/0x52c [ 62.799468][ C1] copy_page_range+0x2904/0x2dac [ 62.800567][ C1] copy_mm+0xa18/0x10fc [ 62.801529][ C1] copy_process+0x1680/0x3750 [ 62.802523][ C1] kernel_clone+0x1d8/0xa58 [ 62.803454][ C1] __arm64_sys_clone+0x1f0/0x24c [ 62.804487][ C1] invoke_syscall+0x98/0x2b8 [ 62.805510][ C1] el0_svc_common+0x138/0x258 [ 62.806542][ C1] do_el0_svc+0x58/0x14c [ 62.807389][ C1] el0_svc+0x7c/0x1f0 [ 62.808255][ C1] el0t_64_sync_handler+0x84/0xe4 [ 62.809434][ C1] el0t_64_sync+0x1a0/0x1a4 [ 62.810420][ C1] irq event stamp: 1217 [ 62.811232][ C1] hardirqs last enabled at (1216): [] _raw_spin_unlock_irq+0x9c/0x134 [ 62.813444][ C1] hardirqs last disabled at (1217): [] _raw_spin_lock_irqsave+0xfc/0x14c [ 62.815592][ C1] softirqs last enabled at (1114): [] local_bh_enable+0x10/0x34 [ 62.817635][ C1] softirqs last disabled at (1199): [] __irq_exit_rcu+0x268/0x4d8 [ 62.819721][ C1] ---[ end trace 581d8f0bec8b52c1 ]--- [ 62.821174][ C1] ------------[ cut here ]------------ [ 62.822273][ C1] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 62.824085][ C1] WARNING: CPU: 1 PID: 4502 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1588 [ 62.826031][ C1] Modules linked in: [ 62.826767][ C1] CPU: 1 PID: 4502 Comm: dhcpcd-run-hook Tainted: G W 5.15.167-syzkaller #0 [ 62.828204][ T7] usb 1-1: USB disconnect, device number 2 [ 62.828830][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 62.832326][ C1] pstate: 604000c5 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 62.834027][ C1] pc : usb_submit_urb+0xa44/0x1588 [ 62.835122][ C1] lr : usb_submit_urb+0xa44/0x1588 [ 62.836221][ C1] sp : ffff8000080175e0 [ 62.837222][ C1] x29: ffff800008017620 x28: 0000000000000001 x27: ffff800012cb2648 [ 62.838961][ C1] x26: ffff0000ca80a100 x25: ffff0000db630000 x24: 0000000000000400 [ 62.840694][ C1] x23: ffff800012cb8f00 x22: dfff800000000000 x21: 0000000000000002 [ 62.842416][ C1] x20: 0000000000000a20 x19: ffff0000c0fea800 x18: 0000000000000101 [ 62.844006][ C1] x17: 0000000000000000 x16: ffff800008336530 x15: 00000000ffffffff [ 62.845713][ C1] x14: ffff0000c71ed1c0 x13: 0000000000000001 x12: 0000000000000001 [ 62.847404][ C1] x11: 0000000000000100 x10: 0000000000000000 x9 : e4aae42b5fbc1700 [ 62.849115][ C1] x8 : e4aae42b5fbc1700 x7 : 0000000000000001 x6 : 0000000000000001 [ 62.850813][ C1] x5 : ffff800008016d58 x4 : ffff800014b9fae0 x3 : ffff80000833667c [ 62.852431][ C1] x2 : 0000000000000001 x1 : 0000000000000100 x0 : 0000000000000029 [ 62.854059][ C1] Call trace: [ 62.854737][ C1] usb_submit_urb+0xa44/0x1588 [ 62.855839][ C1] bcm5974_irq_trackpad+0x20c/0xdd0 [ 62.856987][ C1] __usb_hcd_giveback_urb+0x2e0/0x518 [ 62.858114][ C1] usb_hcd_giveback_urb+0x108/0x41c [ 62.859274][ C1] dummy_timer+0x66c/0x26cc [ 62.860387][ C1] call_timer_fn+0x19c/0x8f0 [ 62.861367][ C1] __run_timers+0x554/0x718 [ 62.862260][ C1] run_timer_softirq+0x7c/0x114 [ 62.863304][ C1] handle_softirqs+0x384/0xdbc [ 62.864413][ C1] __irq_exit_rcu+0x268/0x4d8 [ 62.865618][ C1] irq_exit+0x14/0x88 [ 62.866467][ C1] handle_domain_irq+0xf4/0x178 [ 62.867543][ C1] gic_handle_irq+0x78/0x1c8 [ 62.868480][ C1] call_on_irq_stack+0x24/0x4c [ 62.869543][ C1] do_interrupt_handler+0x74/0x94 [ 62.870576][ C1] el1_interrupt+0x30/0x58 [ 62.871562][ C1] el1h_64_irq_handler+0x18/0x24 [ 62.872654][ C1] el1h_64_irq+0x78/0x7c [ 62.873558][ C1] get_page_from_freelist+0x794/0x2cd0 [ 62.874784][ C1] __alloc_pages+0x20c/0x674 [ 62.875753][ C1] alloc_pages+0x368/0x5d4 [ 62.876765][ C1] __pmd_alloc+0xa4/0x52c [ 62.877682][ C1] copy_page_range+0x2904/0x2dac [ 62.878863][ C1] copy_mm+0xa18/0x10fc [ 62.879771][ C1] copy_process+0x1680/0x3750 [ 62.880849][ C1] kernel_clone+0x1d8/0xa58 [ 62.881703][ C1] __arm64_sys_clone+0x1f0/0x24c [ 62.882806][ C1] invoke_syscall+0x98/0x2b8 [ 62.883878][ C1] el0_svc_common+0x138/0x258 [ 62.884913][ C1] do_el0_svc+0x58/0x14c [ 62.885814][ C1] el0_svc+0x7c/0x1f0 [ 62.886663][ C1] el0t_64_sync_handler+0x84/0xe4 [ 62.887779][ C1] el0t_64_sync+0x1a0/0x1a4 [ 62.888795][ C1] irq event stamp: 1227 [ 62.889599][ C1] hardirqs last enabled at (1226): [] _raw_spin_unlock_irq+0x9c/0x134 [ 62.891699][ C1] hardirqs last disabled at (1227): [] _raw_spin_lock_irqsave+0xfc/0x14c [ 62.893901][ C1] softirqs last enabled at (1114): [] local_bh_enable+0x10/0x34 [ 62.896026][ C1] softirqs last disabled at (1199): [] __irq_exit_rcu+0x268/0x4d8 [ 62.898154][ C1] ---[ end trace 581d8f0bec8b52c2 ]--- [ 62.899547][ C1] bcm5974 1-1:0.10: trackpad urb failed: -2 [ 62.909544][ T4288] bcm5974 1-1:0.10: could not read from device [ 63.628296][ T21] Bluetooth: hci0: command 0x041b tx timeout [ 63.649357][ T7] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 64.049326][ T7] usb 1-1: config 0 has an invalid interface number: 10 but max is 0 [ 64.051047][ T7] usb 1-1: config 0 has no interface number 0 [ 64.052299][ T7] usb 1-1: config 0 interface 10 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 64.054479][ T7] usb 1-1: config 0 interface 10 altsetting 0 endpoint 0x81 has invalid maxpacket 21669, setting to 1024 [ 64.056820][ T7] usb 1-1: config 0 interface 10 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 64.060267][ T7] usb 1-1: config 0 interface 10 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 64.259386][ T7] usb 1-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice=d4.d7 [ 64.261319][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.263128][ T7] usb 1-1: Product: syz [ 64.264034][ T7] usb 1-1: Manufacturer: syz [ 64.264935][ T7] usb 1-1: SerialNumber: syz [ 64.275394][ T7] usb 1-1: config 0 descriptor?? [ 64.289988][ T4535] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 64.321956][ T7] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.10/input/input3 [ 64.768239][ T4288] ------------[ cut here ]------------ [ 64.769560][ T4288] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 64.771185][ T4288] WARNING: CPU: 0 PID: 4288 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1588 [ 64.773035][ T4288] Modules linked in: [ 64.773889][ T4288] CPU: 0 PID: 4288 Comm: udevd Tainted: G W 5.15.167-syzkaller #0 [ 64.775739][ T4288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 64.777892][ T4288] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 64.779618][ T4288] pc : usb_submit_urb+0xa44/0x1588 [ 64.780741][ T4288] lr : usb_submit_urb+0xa44/0x1588 [ 64.781862][ T4288] sp : ffff800020127370 [ 64.782727][ T4288] x29: ffff8000201273b0 x28: 0000000000000001 x27: ffff800012cb2648 [ 64.784532][ T4288] x26: ffff0000c906f800 x25: ffff0000c7f36000 x24: 0000000000000400 [ 64.786258][ T4288] x23: ffff800012cb8f00 x22: dfff800000000000 x21: 0000000000000002 [ 64.788089][ T4288] x20: 0000000000000cc0 x19: ffff0000c0853800 x18: 0000000000000001 [ 64.789715][ T4288] x17: 0000000000000000 x16: ffff800011ac23e0 x15: 00000000ffffffff [ 64.791498][ T4288] x14: ffff0000c1c11b40 x13: 0000000000000001 x12: 0000000000000001 [ 64.793159][ T4288] x11: 0000000000000000 x10: 0000000000000000 x9 : 50f12f0947935400 [ 64.794745][ T4288] x8 : 50f12f0947935400 x7 : 0000000000000001 x6 : 0000000000000001 [ 64.796448][ T4288] x5 : ffff800020126ad8 x4 : ffff800014b9fae0 x3 : ffff800008557c4c [ 64.798290][ T4288] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000029 [ 64.800024][ T4288] Call trace: [ 64.800728][ T4288] usb_submit_urb+0xa44/0x1588 [ 64.801685][ T4288] bcm5974_start_traffic+0xe0/0x154 [ 64.802764][ T4288] bcm5974_open+0x98/0x134 [ 64.803854][ T4288] input_open_device+0x170/0x29c [ 64.805037][ T4288] evdev_open+0x308/0x4b4 [ 64.805891][ T4288] chrdev_open+0x3e8/0x4fc [ 64.806875][ T4288] do_dentry_open+0x780/0xed8 [ 64.807926][ T4288] vfs_open+0x7c/0x90 [ 64.808848][ T4288] path_openat+0x1ea0/0x26cc [ 64.809891][ T4288] do_filp_open+0x1a8/0x3b4 [ 64.810865][ T4288] do_sys_openat2+0x128/0x3e0 [ 64.811989][ T4288] __arm64_sys_openat+0x1f0/0x240 [ 64.813126][ T4288] invoke_syscall+0x98/0x2b8 [ 64.814221][ T4288] el0_svc_common+0x138/0x258 [ 64.815447][ T4288] do_el0_svc+0x58/0x14c [ 64.816531][ T4288] el0_svc+0x7c/0x1f0 [ 64.817354][ T4288] el0t_64_sync_handler+0x84/0xe4 [ 64.818522][ T4288] el0t_64_sync+0x1a0/0x1a4 [ 64.819571][ T4288] irq event stamp: 13570 [ 64.820477][ T4288] hardirqs last enabled at (13569): [] __up_console_sem+0xb4/0x100 [ 64.822477][ T4288] hardirqs last disabled at (13570): [] el1_dbg+0x24/0x80 [ 64.824210][ T4288] softirqs last enabled at (13254): [] local_bh_enable+0x10/0x34 [ 64.826358][ T4288] softirqs last disabled at (13252): [] local_bh_disable+0x10/0x34 [ 64.828351][ T4288] ---[ end trace 581d8f0bec8b52c3 ]--- [ 64.847934][ C0] ------------[ cut here ]------------ [ 64.849270][ C0] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 64.850928][ C0] WARNING: CPU: 0 PID: 4627 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1588 [ 64.852943][ C0] Modules linked in: [ 64.853776][ C0] CPU: 0 PID: 4627 Comm: dhcpcd-run-hook Tainted: G W 5.15.167-syzkaller #0 [ 64.855862][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 64.857938][ C0] pstate: 604000c5 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 64.859606][ C0] pc : usb_submit_urb+0xa44/0x1588 [ 64.860686][ C0] lr : usb_submit_urb+0xa44/0x1588 [ 64.861912][ C0] sp : ffff8000080075e0 [ 64.862808][ C0] x29: ffff800008007620 x28: 0000000000000001 x27: ffff800012cb2648 [ 64.864635][ C0] x26: ffff0000c906f800 x25: ffff0000c7f36000 x24: 0000000000000400 [ 64.866304][ C0] x23: ffff800012cb8f00 x22: dfff800000000000 x21: 0000000000000002 [ 64.868046][ C0] x20: 0000000000000a20 x19: ffff0000c0853800 x18: 0000000000000102 [ 64.869725][ C0] x17: 0000000000000000 x16: ffff800011ac23e0 x15: 00000000ffffffff [ 64.871328][ C0] x14: ffff0000d8709b40 x13: 0000000000000001 x12: 0000000000000001 [ 64.872929][ C0] x11: 0000000000000101 x10: 0000000000000000 x9 : baf7c1468b3ef000 [ 64.874614][ C0] x8 : baf7c1468b3ef000 x7 : 0000000000000001 x6 : 0000000000000001 [ 64.876281][ C0] x5 : ffff800008006d58 x4 : ffff800014b9fae0 x3 : ffff800008557c4c [ 64.878039][ C0] x2 : 0000000000000001 x1 : 0000000100000101 x0 : 0000000000000029 [ 64.879637][ C0] Call trace: [ 64.880312][ C0] usb_submit_urb+0xa44/0x1588 [ 64.881439][ C0] bcm5974_irq_trackpad+0x20c/0xdd0 [ 64.882646][ C0] __usb_hcd_giveback_urb+0x2e0/0x518 [ 64.883916][ C0] usb_hcd_giveback_urb+0x108/0x41c [ 64.885117][ C0] dummy_timer+0x66c/0x26cc [ 64.886234][ C0] call_timer_fn+0x19c/0x8f0 [ 64.887314][ C0] __run_timers+0x554/0x718 [ 64.888247][ C0] run_timer_softirq+0x7c/0x114 [ 64.889383][ C0] handle_softirqs+0x384/0xdbc [ 64.890442][ C0] __irq_exit_rcu+0x268/0x4d8 [ 64.891468][ C0] irq_exit+0x14/0x88 [ 64.892308][ C0] handle_domain_irq+0xf4/0x178 [ 64.893409][ C0] gic_handle_irq+0x78/0x1c8 [ 64.894376][ C0] call_on_irq_stack+0x24/0x4c [ 64.895432][ C0] do_interrupt_handler+0x74/0x94 [ 64.896611][ C0] el1_interrupt+0x30/0x58 [ 64.897586][ C0] el1h_64_irq_handler+0x18/0x24 [ 64.898660][ C0] el1h_64_irq+0x78/0x7c [ 64.899663][ C0] _raw_write_unlock_irq+0xa4/0x134 [ 64.900816][ C0] release_task+0x153c/0x1748 [ 64.901881][ C0] wait_consider_task+0x16d8/0x2978 [ 64.903048][ C0] do_wait+0x2f4/0xac8 [ 64.903972][ C0] kernel_wait4+0x24c/0x400 [ 64.904932][ C0] __arm64_sys_wait4+0x120/0x2d0 [ 64.905991][ C0] invoke_syscall+0x98/0x2b8 [ 64.906885][ C0] el0_svc_common+0x138/0x258 [ 64.908086][ C0] do_el0_svc+0x58/0x14c [ 64.909182][ C0] el0_svc+0x7c/0x1f0 [ 64.910018][ C0] el0t_64_sync_handler+0x84/0xe4 [ 64.911086][ C0] el0t_64_sync+0x1a0/0x1a4 [ 64.912073][ C0] irq event stamp: 9617 [ 64.913105][ C0] hardirqs last enabled at (9616): [] _raw_spin_unlock_irq+0x9c/0x134 [ 64.915096][ C0] hardirqs last disabled at (9617): [] _raw_spin_lock_irqsave+0xfc/0x14c [ 64.917495][ C0] softirqs last enabled at (9562): [] handle_softirqs+0xb88/0xdbc [ 64.919524][ C0] softirqs last disabled at (9607): [] __irq_exit_rcu+0x268/0x4d8 [ 64.921393][ C0] ---[ end trace 581d8f0bec8b52c4 ]--- [ 64.982594][ T7] usb 1-1: USB disconnect, device number 3 [ 64.988955][ T4288] bcm5974 1-1:0.10: could not read from device 1970/01/01 00:01:05 executed programs: 2 [ 65.708531][ T21] Bluetooth: hci0: command 0x040f tx timeout [ 65.768001][ T7] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 66.148150][ T7] usb 1-1: config 0 has an invalid interface number: 10 but max is 0 [ 66.150047][ T7] usb 1-1: config 0 has no interface number 0 [ 66.151679][ T7] usb 1-1: config 0 interface 10 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 66.154026][ T7] usb 1-1: config 0 interface 10 altsetting 0 endpoint 0x81 has invalid maxpacket 21669, setting to 1024 [ 66.156421][ T7] usb 1-1: config 0 interface 10 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 66.158768][ T7] usb 1-1: config 0 interface 10 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 66.318572][ T7] usb 1-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice=d4.d7 [ 66.320652][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.322415][ T7] usb 1-1: Product: syz [ 66.323324][ T7] usb 1-1: Manufacturer: syz [ 66.324285][ T7] usb 1-1: SerialNumber: syz [ 66.328888][ T7] usb 1-1: config 0 descriptor?? [ 66.348783][ T4654] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 66.372497][ T7] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.10/input/input4 [ 66.818098][ T4288] ------------[ cut here ]------------ [ 66.819344][ T4288] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 66.821003][ T4288] WARNING: CPU: 1 PID: 4288 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1588 [ 66.822972][ T4288] Modules linked in: [ 66.823788][ T4288] CPU: 1 PID: 4288 Comm: udevd Tainted: G W 5.15.167-syzkaller #0 [ 66.825624][ T4288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 66.827693][ T4288] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 66.829390][ T4288] pc : usb_submit_urb+0xa44/0x1588 [ 66.830505][ T4288] lr : usb_submit_urb+0xa44/0x1588 [ 66.831640][ T4288] sp : ffff800020127370 [ 66.832556][ T4288] x29: ffff8000201273b0 x28: 0000000000000001 x27: ffff800012cb2648 [ 66.834280][ T4288] x26: ffff0000d6099c00 x25: ffff0000d167a000 x24: 0000000000000400 [ 66.835925][ T4288] x23: ffff800012cb8f00 x22: dfff800000000000 x21: 0000000000000002 [ 66.837668][ T4288] x20: 0000000000000cc0 x19: ffff0000ccd88200 x18: 0000000000000001 [ 66.839344][ T4288] x17: 0000000000000000 x16: ffff800011ac23e0 x15: 00000000ffffffff [ 66.841140][ T4288] x14: ffff0000c1c11b40 x13: 0000000000000001 x12: 0000000000000001 [ 66.842777][ T4288] x11: 0000000000000000 x10: 0000000000000000 x9 : 50f12f0947935400 [ 66.844486][ T4288] x8 : 50f12f0947935400 x7 : 0000000000000001 x6 : 0000000000000001 [ 66.846216][ T4288] x5 : ffff800020126ad8 x4 : ffff800014b9fae0 x3 : ffff800008557c4c [ 66.847950][ T4288] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000029 [ 66.849669][ T4288] Call trace: [ 66.850340][ T4288] usb_submit_urb+0xa44/0x1588 [ 66.851348][ T4288] bcm5974_start_traffic+0xe0/0x154 [ 66.852516][ T4288] bcm5974_open+0x98/0x134 [ 66.853543][ T4288] input_open_device+0x170/0x29c [ 66.854756][ T4288] evdev_open+0x308/0x4b4 [ 66.855676][ T4288] chrdev_open+0x3e8/0x4fc [ 66.856640][ T4288] do_dentry_open+0x780/0xed8 [ 66.857586][ T4288] vfs_open+0x7c/0x90 [ 66.858429][ T4288] path_openat+0x1ea0/0x26cc [ 66.859406][ T4288] do_filp_open+0x1a8/0x3b4 [ 66.860280][ T4288] do_sys_openat2+0x128/0x3e0 [ 66.861288][ T4288] __arm64_sys_openat+0x1f0/0x240 [ 66.862454][ T4288] invoke_syscall+0x98/0x2b8 [ 66.863432][ T4288] el0_svc_common+0x138/0x258 [ 66.864370][ T4288] do_el0_svc+0x58/0x14c [ 66.865269][ T4288] el0_svc+0x7c/0x1f0 [ 66.866090][ T4288] el0t_64_sync_handler+0x84/0xe4 [ 66.867162][ T4288] el0t_64_sync+0x1a0/0x1a4 [ 66.868188][ T4288] irq event stamp: 19810 [ 66.869120][ T4288] hardirqs last enabled at (19809): [] __up_console_sem+0xb4/0x100 [ 66.871246][ T4288] hardirqs last disabled at (19810): [] el1_dbg+0x24/0x80 [ 66.873079][ T4288] softirqs last enabled at (19486): [] local_bh_enable+0x10/0x34 [ 66.875078][ T4288] softirqs last disabled at (19484): [] local_bh_disable+0x10/0x34 [ 66.877084][ T4288] ---[ end trace 581d8f0bec8b52c5 ]--- [ 66.897988][ C1] ------------[ cut here ]------------ [ 66.899219][ C1] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 66.901069][ C1] WARNING: CPU: 1 PID: 0 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1588 [ 66.903083][ C1] Modules linked in: [ 66.903959][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G W 5.15.167-syzkaller #0 [ 66.905955][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 66.908176][ C1] pstate: 604000c5 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 66.909676][ C1] pc : usb_submit_urb+0xa44/0x1588 [ 66.910916][ C1] lr : usb_submit_urb+0xa44/0x1588 [ 66.912057][ C1] sp : ffff8000080175e0 [ 66.912921][ C1] x29: ffff800008017620 x28: 0000000000000001 x27: ffff800012cb2648 [ 66.914919][ C1] x26: ffff0000d6099c00 x25: ffff0000d167a000 x24: 0000000000000400 [ 66.916535][ C1] x23: ffff800012cb8f00 x22: dfff800000000000 x21: 0000000000000002 [ 66.918352][ C1] x20: 0000000000000a20 x19: ffff0000ccd88200 x18: 0000000000000102 [ 66.920161][ C1] x17: 0000000000000000 x16: ffff800011ac23e0 x15: 00000000ffffffff [ 66.922158][ C1] x14: ffff0000c0a70000 x13: 0000000000000001 x12: 0000000000000001 [ 66.924235][ C1] x11: 0000000000000101 x10: 0000000000000000 x9 : b9ebf6770eb78e00 [ 66.926153][ C1] x8 : b9ebf6770eb78e00 x7 : 0000000000000001 x6 : 0000000000000001 [ 66.927923][ C1] x5 : ffff800008016d58 x4 : ffff800014b9fae0 x3 : ffff800008557c4c [ 66.929673][ C1] x2 : 0000000000000001 x1 : 0000000100000101 x0 : 0000000000000029 [ 66.931272][ C1] Call trace: [ 66.931999][ C1] usb_submit_urb+0xa44/0x1588 [ 66.933016][ C1] bcm5974_irq_trackpad+0x20c/0xdd0 [ 66.934189][ C1] __usb_hcd_giveback_urb+0x2e0/0x518 [ 66.935422][ C1] usb_hcd_giveback_urb+0x108/0x41c [ 66.936585][ C1] dummy_timer+0x66c/0x26cc [ 66.937529][ C1] call_timer_fn+0x19c/0x8f0 [ 66.938616][ C1] __run_timers+0x554/0x718 [ 66.939622][ C1] run_timer_softirq+0x7c/0x114 [ 66.940862][ C1] handle_softirqs+0x384/0xdbc [ 66.941888][ C1] __irq_exit_rcu+0x268/0x4d8 [ 66.942917][ C1] irq_exit+0x14/0x88 [ 66.943865][ C1] handle_domain_irq+0xf4/0x178 [ 66.944864][ C1] gic_handle_irq+0x78/0x1c8 [ 66.946043][ C1] call_on_irq_stack+0x24/0x4c [ 66.947102][ C1] do_interrupt_handler+0x74/0x94 [ 66.948234][ C1] el1_interrupt+0x30/0x58 [ 66.949187][ C1] el1h_64_irq_handler+0x18/0x24 [ 66.950289][ C1] el1h_64_irq+0x78/0x7c [ 66.951190][ C1] arch_local_irq_enable+0xc/0x18 [ 66.952295][ C1] default_idle_call+0xcc/0x4a8 [ 66.953312][ C1] do_idle+0x1d4/0x4dc [ 66.954282][ C1] cpu_startup_entry+0x24/0x28 [ 66.955490][ C1] secondary_start_kernel+0x240/0x298 [ 66.956681][ C1] __secondary_switched+0x94/0x98 [ 66.957839][ C1] irq event stamp: 246241 [ 66.958737][ C1] hardirqs last enabled at (246240): [] _raw_spin_unlock_irq+0x9c/0x134 [ 66.960890][ C1] hardirqs last disabled at (246241): [] _raw_spin_lock_irqsave+0xfc/0x14c [ 66.963128][ C1] softirqs last enabled at (246224): [] handle_softirqs+0xb88/0xdbc [ 66.965123][ C1] softirqs last disabled at (246237): [] __irq_exit_rcu+0x268/0x4d8 [ 66.967263][ C1] ---[ end trace 581d8f0bec8b52c6 ]--- [ 66.977959][ C1] ------------[ cut here ]------------ [ 66.979239][ C1] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 66.981016][ C1] WARNING: CPU: 1 PID: 0 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1588 [ 66.982994][ C1] Modules linked in: [ 66.983764][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G W 5.15.167-syzkaller #0 [ 66.985633][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 66.987569][ C1] pstate: 604000c5 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 66.989194][ C1] pc : usb_submit_urb+0xa44/0x1588 [ 66.990370][ C1] lr : usb_submit_urb+0xa44/0x1588 [ 66.991490][ C1] sp : ffff8000080175e0 [ 66.992319][ C1] x29: ffff800008017620 x28: 0000000000000001 x27: ffff800012cb2648 [ 66.994034][ C1] x26: ffff0000d6099c00 x25: ffff0000d167a000 x24: 0000000000000400 [ 66.995881][ C1] x23: ffff800012cb8f00 x22: dfff800000000000 x21: 0000000000000002 [ 66.997768][ C1] x20: 0000000000000a20 x19: ffff0000ccd88200 x18: 0000000000000102 [ 66.999447][ C1] x17: 0000000000000000 x16: ffff800011ac23e0 x15: 00000000ffffffff [ 67.001067][ C1] x14: ffff0000c0a70000 x13: 0000000000000001 x12: 0000000000000001 [ 67.002867][ C1] x11: 0000000000000101 x10: 0000000000000000 x9 : b9ebf6770eb78e00 [ 67.004530][ C1] x8 : b9ebf6770eb78e00 x7 : 0000000000000001 x6 : 0000000000000001 [ 67.006327][ C1] x5 : ffff800008016d58 x4 : ffff800014b9fae0 x3 : ffff800008557c4c [ 67.008069][ C1] x2 : 0000000000000001 x1 : 0000000100000101 x0 : 0000000000000029 [ 67.009767][ C1] Call trace: [ 67.010490][ C1] usb_submit_urb+0xa44/0x1588 [ 67.011501][ C1] bcm5974_irq_trackpad+0x20c/0xdd0 [ 67.012857][ C1] __usb_hcd_giveback_urb+0x2e0/0x518 [ 67.013988][ C1] usb_hcd_giveback_urb+0x108/0x41c [ 67.015107][ C1] dummy_timer+0x66c/0x26cc [ 67.016131][ C1] call_timer_fn+0x19c/0x8f0 [ 67.017300][ C1] __run_timers+0x554/0x718 [ 67.018444][ C1] run_timer_softirq+0x7c/0x114 [ 67.018706][ T7] usb 1-1: USB disconnect, device number 4 [ 67.019605][ C1] handle_softirqs+0x384/0xdbc [ 67.019623][ C1] __irq_exit_rcu+0x268/0x4d8 [ 67.023114][ C1] irq_exit+0x14/0x88 [ 67.024154][ C1] handle_domain_irq+0xf4/0x178 [ 67.025195][ C1] gic_handle_irq+0x78/0x1c8 [ 67.026271][ C1] call_on_irq_stack+0x24/0x4c [ 67.027293][ C1] do_interrupt_handler+0x74/0x94 [ 67.028356][ C1] el1_interrupt+0x30/0x58 [ 67.029343][ C1] el1h_64_irq_handler+0x18/0x24 [ 67.030373][ C1] el1h_64_irq+0x78/0x7c [ 67.031341][ C1] arch_local_irq_enable+0xc/0x18 [ 67.032382][ C1] default_idle_call+0xcc/0x4a8 [ 67.033449][ C1] do_idle+0x1d4/0x4dc [ 67.034376][ C1] cpu_startup_entry+0x24/0x28 [ 67.035397][ C1] secondary_start_kernel+0x240/0x298 [ 67.036589][ C1] __secondary_switched+0x94/0x98 [ 67.037594][ C1] irq event stamp: 246275 [ 67.038596][ C1] hardirqs last enabled at (246274): [] _raw_spin_unlock_irq+0x9c/0x134 [ 67.040818][ C1] hardirqs last disabled at (246275): [] _raw_spin_lock_irqsave+0xfc/0x14c [ 67.043105][ C1] softirqs last enabled at (246258): [] handle_softirqs+0xb88/0xdbc [ 67.045183][ C1] softirqs last disabled at (246271): [] __irq_exit_rcu+0x268/0x4d8 [ 67.047201][ C1] ---[ end trace 581d8f0bec8b52c7 ]--- [ 67.048469][ C1] bcm5974 1-1:0.10: trackpad urb failed: -2 [ 67.058158][ T4288] bcm5974 1-1:0.10: could not read from device [ 67.788005][ T25] Bluetooth: hci0: command 0x0419 tx timeout [ 67.808007][ T21] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 68.178110][ T21] usb 1-1: config 0 has an invalid interface number: 10 but max is 0 [ 68.179812][ T21] usb 1-1: config 0 has no interface number 0 [ 68.180986][ T21] usb 1-1: config 0 interface 10 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 68.183322][ T21] usb 1-1: config 0 interface 10 altsetting 0 endpoint 0x81 has invalid maxpacket 21669, setting to 1024 [ 68.185618][ T21] usb 1-1: config 0 interface 10 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 68.187577][ T21] usb 1-1: config 0 interface 10 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 68.349388][ T21] usb 1-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice=d4.d7 [ 68.351380][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.353226][ T21] usb 1-1: Product: syz [ 68.354002][ T21] usb 1-1: Manufacturer: syz [ 68.355059][ T21] usb 1-1: SerialNumber: syz [ 68.358412][ T21] usb 1-1: config 0 descriptor?? [ 68.378369][ T4657] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 68.400231][ T21] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.10/input/input5 [ 68.848058][ T4288] ------------[ cut here ]------------ [ 68.849288][ T4288] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 68.850882][ T4288] WARNING: CPU: 0 PID: 4288 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1588 [ 68.852921][ T4288] Modules linked in: [ 68.853671][ T4288] CPU: 0 PID: 4288 Comm: udevd Tainted: G W 5.15.167-syzkaller #0 [ 68.855499][ T4288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 68.857626][ T4288] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 68.859292][ T4288] pc : usb_submit_urb+0xa44/0x1588 [ 68.860353][ T4288] lr : usb_submit_urb+0xa44/0x1588 [ 68.861465][ T4288] sp : ffff800020127370 [ 68.862432][ T4288] x29: ffff8000201273b0 x28: 0000000000000001 x27: ffff800012cb2648 [ 68.864251][ T4288] x26: ffff0000d2b7ae00 x25: ffff0000d7b54000 x24: 0000000000000400 [ 68.865951][ T4288] x23: ffff800012cb8f00 x22: dfff800000000000 x21: 0000000000000002 [ 68.867690][ T4288] x20: 0000000000000cc0 x19: ffff0000cb3f4600 x18: 0000000000000001 [ 68.869403][ T4288] x17: 0000000000000000 x16: ffff800011ac23e0 x15: 00000000ffffffff [ 68.871075][ T4288] x14: ffff0000c1c11b40 x13: 0000000000000001 x12: 0000000000000001 [ 68.872667][ T4288] x11: 0000000000000000 x10: 0000000000000000 x9 : 50f12f0947935400 [ 68.874307][ T4288] x8 : 50f12f0947935400 x7 : 0000000000000001 x6 : 0000000000000001 [ 68.876052][ T4288] x5 : ffff800020126ad8 x4 : ffff800014b9fae0 x3 : ffff800008557c4c [ 68.877789][ T4288] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000029 [ 68.879407][ T4288] Call trace: [ 68.880132][ T4288] usb_submit_urb+0xa44/0x1588 [ 68.881367][ T4288] bcm5974_start_traffic+0xe0/0x154 [ 68.882545][ T4288] bcm5974_open+0x98/0x134 [ 68.883495][ T4288] input_open_device+0x170/0x29c [ 68.884509][ T4288] evdev_open+0x308/0x4b4 [ 68.885491][ T4288] chrdev_open+0x3e8/0x4fc [ 68.886496][ T4288] do_dentry_open+0x780/0xed8 [ 68.887559][ T4288] vfs_open+0x7c/0x90 [ 68.888383][ T4288] path_openat+0x1ea0/0x26cc [ 68.889450][ T4288] do_filp_open+0x1a8/0x3b4 [ 68.890453][ T4288] do_sys_openat2+0x128/0x3e0 [ 68.891453][ T4288] __arm64_sys_openat+0x1f0/0x240 [ 68.892524][ T4288] invoke_syscall+0x98/0x2b8 [ 68.893518][ T4288] el0_svc_common+0x138/0x258 [ 68.894593][ T4288] do_el0_svc+0x58/0x14c [ 68.895507][ T4288] el0_svc+0x7c/0x1f0 [ 68.896289][ T4288] el0t_64_sync_handler+0x84/0xe4 [ 68.897501][ T4288] el0t_64_sync+0x1a0/0x1a4 [ 68.898488][ T4288] irq event stamp: 25678 [ 68.899406][ T4288] hardirqs last enabled at (25677): [] __up_console_sem+0xb4/0x100 [ 68.901452][ T4288] hardirqs last disabled at (25678): [] el1_dbg+0x24/0x80 [ 68.903233][ T4288] softirqs last enabled at (25412): [] local_bh_enable+0x10/0x34 [ 68.905199][ T4288] softirqs last disabled at (25410): [] local_bh_disable+0x10/0x34 [ 68.907266][ T4288] ---[ end trace 581d8f0bec8b52c8 ]--- [ 68.927969][ C0] ------------[ cut here ]------------ [ 68.929284][ C0] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 68.930913][ C0] WARNING: CPU: 0 PID: 0 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1588 [ 68.932908][ C0] Modules linked in: [ 68.933733][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G W 5.15.167-syzkaller #0 [ 68.935672][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 68.937805][ C0] pstate: 604000c5 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 68.939359][ C0] pc : usb_submit_urb+0xa44/0x1588 [ 68.940453][ C0] lr : usb_submit_urb+0xa44/0x1588 [ 68.941586][ C0] sp : ffff8000080075e0 [ 68.942474][ C0] x29: ffff800008007620 x28: 0000000000000001 x27: ffff800012cb2648 [ 68.944179][ C0] x26: ffff0000d2b7ae00 x25: ffff0000d7b54000 x24: 0000000000000400 [ 68.945904][ C0] x23: ffff800012cb8f00 x22: dfff800000000000 x21: 0000000000000002 [ 68.947784][ C0] x20: 0000000000000a20 x19: ffff0000cb3f4600 x18: 0000000000000102 [ 68.949509][ C0] x17: 0000000000000000 x16: ffff800011ac23e0 x15: 00000000ffffffff [ 68.951357][ C0] x14: ffff800014ae3f80 x13: 0000000000000001 x12: 0000000000000001 [ 68.953107][ C0] x11: 0000000000000101 x10: 0000000000000000 x9 : 056da16d5e672400 [ 68.954840][ C0] x8 : 056da16d5e672400 x7 : 0000000000000001 x6 : 0000000000000001 [ 68.956593][ C0] x5 : ffff800008006d58 x4 : ffff800014b9fae0 x3 : ffff800008557c4c [ 68.958205][ C0] x2 : 0000000000000001 x1 : 0000000100000101 x0 : 0000000000000029 [ 68.959918][ C0] Call trace: [ 68.960657][ C0] usb_submit_urb+0xa44/0x1588 [ 68.961711][ C0] bcm5974_irq_trackpad+0x20c/0xdd0 [ 68.962861][ C0] __usb_hcd_giveback_urb+0x2e0/0x518 [ 68.964033][ C0] usb_hcd_giveback_urb+0x108/0x41c [ 68.965214][ C0] dummy_timer+0x66c/0x26cc [ 68.966273][ C0] call_timer_fn+0x19c/0x8f0 [ 68.967321][ C0] __run_timers+0x554/0x718 [ 68.968296][ C0] run_timer_softirq+0x7c/0x114 [ 68.969357][ C0] handle_softirqs+0x384/0xdbc [ 68.970449][ C0] __irq_exit_rcu+0x268/0x4d8 [ 68.971503][ C0] irq_exit+0x14/0x88 [ 68.972261][ C0] handle_domain_irq+0xf4/0x178 [ 68.973357][ C0] gic_handle_irq+0x78/0x1c8 [ 68.974323][ C0] call_on_irq_stack+0x24/0x4c [ 68.975404][ C0] do_interrupt_handler+0x74/0x94 [ 68.976502][ C0] el1_interrupt+0x30/0x58 [ 68.977383][ C0] el1h_64_irq_handler+0x18/0x24 [ 68.978433][ C0] el1h_64_irq+0x78/0x7c [ 68.979271][ C0] arch_local_irq_enable+0xc/0x18 [ 68.980318][ C0] default_idle_call+0xcc/0x4a8 [ 68.981392][ C0] do_idle+0x1d4/0x4dc [ 68.982294][ C0] cpu_startup_entry+0x24/0x28 [ 68.983346][ C0] rest_init+0x364/0x38c [ 68.984280][ C0] arch_call_rest_init+0x14/0x20 [ 68.985454][ C0] start_kernel+0x440/0x600 [ 68.986427][ C0] __primary_switched+0xa8/0xb0 [ 68.987447][ C0] irq event stamp: 282471 [ 68.988395][ C0] hardirqs last enabled at (282470): [] _raw_spin_unlock_irq+0x9c/0x134 [ 68.990555][ C0] hardirqs last disabled at (282471): [] _raw_spin_lock_irqsave+0xfc/0x14c [ 68.992760][ C0] softirqs last enabled at (282460): [] handle_softirqs+0xb88/0xdbc [ 68.994835][ C0] softirqs last disabled at (282467): [] __irq_exit_rcu+0x268/0x4d8 [ 68.996967][ C0] ---[ end trace 581d8f0bec8b52c9 ]--- [ 69.007925][ C0] ------------[ cut here ]------------ [ 69.009124][ C0] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 69.010753][ C0] WARNING: CPU: 0 PID: 0 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1588 [ 69.012832][ C0] Modules linked in: [ 69.013645][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G W 5.15.167-syzkaller #0 [ 69.015631][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 69.017695][ C0] pstate: 604000c5 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 69.019407][ C0] pc : usb_submit_urb+0xa44/0x1588 [ 69.020550][ C0] lr : usb_submit_urb+0xa44/0x1588 [ 69.021640][ C0] sp : ffff8000080075e0 [ 69.022568][ C0] x29: ffff800008007620 x28: 0000000000000001 x27: ffff800012cb2648 [ 69.024289][ C0] x26: ffff0000d2b7ae00 x25: ffff0000d7b54000 x24: 0000000000000400 [ 69.026005][ C0] x23: ffff800012cb8f00 x22: dfff800000000000 x21: 0000000000000002 [ 69.027792][ C0] x20: 0000000000000a20 x19: ffff0000cb3f4600 x18: 0000000000000102 [ 69.029555][ C0] x17: 0000000000000000 x16: ffff800011ac23e0 x15: 00000000ffffffff [ 69.031307][ C0] x14: ffff800014ae3f80 x13: 0000000000000001 x12: 0000000000000001 [ 69.033010][ C0] x11: 0000000000000101 x10: 0000000000000000 x9 : 056da16d5e672400 [ 69.034901][ C0] x8 : 056da16d5e672400 x7 : 0000000000000001 x6 : 0000000000000001 [ 69.036703][ C0] x5 : ffff800008006d58 x4 : ffff800014b9fae0 x3 : ffff800008557c4c [ 69.038461][ C0] x2 : 0000000000000001 x1 : 0000000100000101 x0 : 0000000000000029 [ 69.040242][ C0] Call trace: [ 69.040956][ C0] usb_submit_urb+0xa44/0x1588 [ 69.042041][ C0] bcm5974_irq_trackpad+0x20c/0xdd0 [ 69.043175][ C0] __usb_hcd_giveback_urb+0x2e0/0x518 [ 69.044425][ C0] usb_hcd_giveback_urb+0x108/0x41c [ 69.045510][ C0] dummy_timer+0x66c/0x26cc [ 69.046541][ C0] call_timer_fn+0x19c/0x8f0 [ 69.047609][ C0] __run_timers+0x554/0x718 [ 69.048546][ C0] run_timer_softirq+0x7c/0x114 [ 69.049557][ C0] handle_softirqs+0x384/0xdbc [ 69.049948][ T21] usb 1-1: USB disconnect, device number 5 [ 69.050578][ C0] __irq_exit_rcu+0x268/0x4d8 [ 69.052950][ C0] irq_exit+0x14/0x88 [ 69.053809][ C0] handle_domain_irq+0xf4/0x178 [ 69.054738][ C0] gic_handle_irq+0x78/0x1c8 [ 69.055721][ C0] call_on_irq_stack+0x24/0x4c [ 69.056711][ C0] do_interrupt_handler+0x74/0x94 [ 69.057781][ C0] el1_interrupt+0x30/0x58 [ 69.058700][ C0] el1h_64_irq_handler+0x18/0x24 [ 69.059823][ C0] el1h_64_irq+0x78/0x7c [ 69.060736][ C0] arch_local_irq_enable+0xc/0x18 [ 69.061835][ C0] default_idle_call+0xcc/0x4a8 [ 69.062841][ C0] do_idle+0x1d4/0x4dc [ 69.063750][ C0] cpu_startup_entry+0x24/0x28 [ 69.064770][ C0] rest_init+0x364/0x38c [ 69.065658][ C0] arch_call_rest_init+0x14/0x20 [ 69.066902][ C0] start_kernel+0x440/0x600 [ 69.067925][ C0] __primary_switched+0xa8/0xb0 [ 69.069011][ C0] irq event stamp: 282581 [ 69.069877][ C0] hardirqs last enabled at (282580): [] _raw_spin_unlock_irq+0x9c/0x134 [ 69.072086][ C0] hardirqs last disabled at (282581): [] _raw_spin_lock_irqsave+0xfc/0x14c [ 69.074265][ C0] softirqs last enabled at (282484): [] handle_softirqs+0xb88/0xdbc [ 69.076405][ C0] softirqs last disabled at (282577): [] __irq_exit_rcu+0x268/0x4d8 [ 69.078463][ C0] ---[ end trace 581d8f0bec8b52ca ]--- [ 69.079687][ C0] bcm5974 1-1:0.10: trackpad urb failed: -2 [ 69.082417][ T4288] bcm5974 1-1:0.10: could not read from device [ 69.630046][ T3320] cfg80211: failed to load regulatory.db [ 69.639860][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.641519][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.848038][ T1533] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 70.228070][ T1533] usb 1-1: config 0 has an invalid interface number: 10 but max is 0 [ 70.229777][ T1533] usb 1-1: config 0 has no interface number 0 [ 70.231126][ T1533] usb 1-1: config 0 interface 10 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 70.233386][ T1533] usb 1-1: config 0 interface 10 altsetting 0 endpoint 0x81 has invalid maxpacket 21669, setting to 1024 [ 70.235628][ T1533] usb 1-1: config 0 interface 10 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 70.237853][ T1533] usb 1-1: config 0 interface 10 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 70.409709][ T1533] usb 1-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice=d4.d7 [ 70.411754][ T1533] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.413488][ T1533] usb 1-1: Product: syz [ 70.414310][ T1533] usb 1-1: Manufacturer: syz [ 70.415313][ T1533] usb 1-1: SerialNumber: syz [ 70.418907][ T1533] usb 1-1: config 0 descriptor?? [ 70.438332][ T4659] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 70.461015][ T1533] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.10/input/input6 [ 70.898135][ T4288] ------------[ cut here ]------------ [ 70.899426][ T4288] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 70.901091][ T4288] WARNING: CPU: 0 PID: 4288 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1588 [ 70.903293][ T4288] Modules linked in: [ 70.904148][ T4288] CPU: 0 PID: 4288 Comm: udevd Tainted: G W 5.15.167-syzkaller #0 [ 70.905889][ T4288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 70.907978][ T4288] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 70.909566][ T4288] pc : usb_submit_urb+0xa44/0x1588 [ 70.910681][ T4288] lr : usb_submit_urb+0xa44/0x1588 [ 70.911765][ T4288] sp : ffff800020127370 [ 70.912658][ T4288] x29: ffff8000201273b0 x28: 0000000000000001 x27: ffff800012cb2648 [ 70.914430][ T4288] x26: ffff0000c0e9ab00 x25: ffff0000cbc2d000 x24: 0000000000000400 [ 70.916075][ T4288] x23: ffff800012cb8f00 x22: dfff800000000000 x21: 0000000000000002 [ 70.917828][ T4288] x20: 0000000000000cc0 x19: ffff0000cb98d600 x18: 0000000000000001 [ 70.919582][ T4288] x17: 0000000000000000 x16: ffff800011ac23e0 x15: 00000000ffffffff [ 70.921304][ T4288] x14: ffff0000c1c11b40 x13: 0000000000000001 x12: 0000000000000001 [ 70.923035][ T4288] x11: 0000000000000000 x10: 0000000000000000 x9 : 50f12f0947935400 [ 70.924721][ T4288] x8 : 50f12f0947935400 x7 : 0000000000000001 x6 : 0000000000000001 [ 70.926499][ T4288] x5 : ffff800020126ad8 x4 : ffff800014b9fae0 x3 : ffff800008557c4c [ 70.928254][ T4288] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000029 [ 70.929930][ T4288] Call trace: [ 70.930599][ T4288] usb_submit_urb+0xa44/0x1588 [ 70.931532][ T4288] bcm5974_start_traffic+0xe0/0x154 [ 70.932641][ T4288] bcm5974_open+0x98/0x134 [ 70.933594][ T4288] input_open_device+0x170/0x29c [ 70.934569][ T4288] evdev_open+0x308/0x4b4 [ 70.935505][ T4288] chrdev_open+0x3e8/0x4fc [ 70.936462][ T4288] do_dentry_open+0x780/0xed8 [ 70.937575][ T4288] vfs_open+0x7c/0x90 [ 70.938462][ T4288] path_openat+0x1ea0/0x26cc [ 70.939397][ T4288] do_filp_open+0x1a8/0x3b4 [ 70.940494][ T4288] do_sys_openat2+0x128/0x3e0 [ 70.941543][ T4288] __arm64_sys_openat+0x1f0/0x240 [ 70.942620][ T4288] invoke_syscall+0x98/0x2b8 [ 70.943533][ T4288] el0_svc_common+0x138/0x258 [ 70.944526][ T4288] do_el0_svc+0x58/0x14c [ 70.945500][ T4288] el0_svc+0x7c/0x1f0 [ 70.946354][ T4288] el0t_64_sync_handler+0x84/0xe4 [ 70.947501][ T4288] el0t_64_sync+0x1a0/0x1a4 [ 70.948599][ T4288] irq event stamp: 32558 [ 70.949512][ T4288] hardirqs last enabled at (32557): [] __up_console_sem+0xb4/0x100 [ 70.951516][ T4288] hardirqs last disabled at (32558): [] el1_dbg+0x24/0x80 [ 70.953314][ T4288] softirqs last enabled at (32390): [] local_bh_enable+0x10/0x34 [ 70.955283][ T4288] softirqs last disabled at (32388): [] local_bh_disable+0x10/0x34 [ 70.957342][ T4288] ---[ end trace 581d8f0bec8b52cb ]--- [ 70.987961][ C0] ------------[ cut here ]------------ [ 70.989212][ C0] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 70.990863][ C0] WARNING: CPU: 0 PID: 0 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1588 [ 70.992788][ C0] Modules linked in: [ 70.993625][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G W 5.15.167-syzkaller #0 [ 70.995673][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 70.997829][ C0] pstate: 604000c5 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 70.999470][ C0] pc : usb_submit_urb+0xa44/0x1588 [ 71.000553][ C0] lr : usb_submit_urb+0xa44/0x1588 [ 71.001707][ C0] sp : ffff8000080075e0 [ 71.002630][ C0] x29: ffff800008007620 x28: 0000000000000001 x27: ffff800012cb2648 [ 71.004474][ C0] x26: ffff0000c0e9ab00 x25: ffff0000cbc2d000 x24: 0000000000000400 [ 71.006161][ C0] x23: ffff800012cb8f00 x22: dfff800000000000 x21: 0000000000000002 [ 71.007898][ C0] x20: 0000000000000a20 x19: ffff0000cb98d600 x18: 0000000000000102 [ 71.009702][ C0] x17: 0000000000000000 x16: ffff800011ac23e0 x15: 00000000ffffffff [ 71.011516][ C0] x14: ffff800014ae3f80 x13: 0000000000000001 x12: 0000000000000001 [ 71.013389][ C0] x11: 0000000000000101 x10: 0000000000000000 x9 : 056da16d5e672400 [ 71.015261][ C0] x8 : 056da16d5e672400 x7 : 0000000000000001 x6 : 0000000000000001 [ 71.017064][ C0] x5 : ffff800008006d58 x4 : ffff800014b9fae0 x3 : ffff800008557c4c [ 71.018763][ C0] x2 : 0000000000000001 x1 : 0000000100000101 x0 : 0000000000000029 [ 71.020539][ C0] Call trace: [ 71.021324][ C0] usb_submit_urb+0xa44/0x1588 [ 71.022419][ C0] bcm5974_irq_trackpad+0x20c/0xdd0 [ 71.023602][ C0] __usb_hcd_giveback_urb+0x2e0/0x518 [ 71.024771][ C0] usb_hcd_giveback_urb+0x108/0x41c [ 71.025793][ C0] dummy_timer+0x66c/0x26cc [ 71.026797][ C0] call_timer_fn+0x19c/0x8f0 [ 71.027746][ C0] __run_timers+0x554/0x718 [ 71.028769][ C0] run_timer_softirq+0x7c/0x114 [ 71.029860][ C0] handle_softirqs+0x384/0xdbc [ 71.030991][ C0] __irq_exit_rcu+0x268/0x4d8 [ 71.031979][ C0] irq_exit+0x14/0x88 [ 71.032873][ C0] handle_domain_irq+0xf4/0x178 [ 71.034005][ C0] gic_handle_irq+0x78/0x1c8 [ 71.035093][ C0] call_on_irq_stack+0x24/0x4c [ 71.036223][ C0] do_interrupt_handler+0x74/0x94 [ 71.037283][ C0] el1_interrupt+0x30/0x58 [ 71.038355][ C0] el1h_64_irq_handler+0x18/0x24 [ 71.039568][ C0] el1h_64_irq+0x78/0x7c [ 71.040574][ C0] arch_local_irq_enable+0xc/0x18 [ 71.041754][ C0] default_idle_call+0xcc/0x4a8 [ 71.042909][ C0] do_idle+0x1d4/0x4dc [ 71.043881][ C0] cpu_startup_entry+0x24/0x28 [ 71.045015][ C0] rest_init+0x364/0x38c [ 71.045941][ C0] arch_call_rest_init+0x14/0x20 [ 71.046960][ C0] start_kernel+0x440/0x600 [ 71.047919][ C0] __primary_switched+0xa8/0xb0 [ 71.049069][ C0] irq event stamp: 297425 [ 71.049987][ C0] hardirqs last enabled at (297424): [] _raw_spin_unlock_irq+0x9c/0x134 [ 71.052199][ C0] hardirqs last disabled at (297425): [] _raw_spin_lock_irqsave+0xfc/0x14c [ 71.054398][ C0] softirqs last enabled at (297402): [] handle_softirqs+0xb88/0xdbc [ 71.056555][ C0] softirqs last disabled at (297421): [] __irq_exit_rcu+0x268/0x4d8 [ 71.058610][ C0] ---[ end trace 581d8f0bec8b52cc ]--- [ 71.098649][ T21] usb 1-1: USB disconnect, device number 6 [ 71.128150][ T4288] bcm5974 1-1:0.10: could not read from device 1970/01/01 00:01:11 executed programs: 5 [ 71.878042][ T7] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 72.268176][ T7] usb 1-1: config 0 has an invalid interface number: 10 but max is 0 [ 72.269946][ T7] usb 1-1: config 0 has no interface number 0 [ 72.271285][ T7] usb 1-1: config 0 interface 10 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 72.273494][ T7] usb 1-1: config 0 interface 10 altsetting 0 endpoint 0x81 has invalid maxpacket 21669, setting to 1024 [ 72.275954][ T7] usb 1-1: config 0 interface 10 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 72.279743][ T7] usb 1-1: config 0 interface 10 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 72.468116][ T7] usb 1-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice=d4.d7 [ 72.470200][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.471882][ T7] usb 1-1: Product: syz [ 72.472788][ T7] usb 1-1: Manufacturer: syz [ 72.473790][ T7] usb 1-1: SerialNumber: syz [ 72.477263][ T7] usb 1-1: config 0 descriptor?? [ 72.508417][ T4661] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 72.530925][ T7] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.10/input/input7