Warning: Permanently added '10.128.1.57' (ED25519) to the list of known hosts. 1970/01/01 00:01:03 ignoring optional flag "sandboxArg"="0" 1970/01/01 00:01:03 parsed 1 programs [ 64.901891][ T4400] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 66.149558][ T4499] chnl_net:caif_netlink_parms(): no params data found [ 66.168005][ T4499] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.169226][ T4499] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.171635][ T4499] device bridge_slave_0 entered promiscuous mode [ 66.173467][ T4499] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.174702][ T4499] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.176084][ T4499] device bridge_slave_1 entered promiscuous mode [ 66.183292][ T4499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.185692][ T4499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.193610][ T4499] team0: Port device team_slave_0 added [ 66.200278][ T4499] team0: Port device team_slave_1 added [ 66.206473][ T4499] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.207556][ T4499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.211805][ T4499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.214032][ T4499] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.215157][ T4499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.219257][ T4499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.281022][ T4499] device hsr_slave_0 entered promiscuous mode [ 66.340131][ T4499] device hsr_slave_1 entered promiscuous mode [ 67.006907][ T4499] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.023392][ T4499] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.081396][ T4499] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.121005][ T4499] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.265512][ T4499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.271157][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.272640][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.275020][ T4499] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.277428][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.279112][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.281619][ T408] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.282670][ T408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.285207][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.288526][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.298724][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.301275][ T408] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.302465][ T408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.304828][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.307595][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.313633][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.315147][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.316559][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.318173][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.319752][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.330638][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.332392][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.335578][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.336988][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.341319][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.383210][ T4499] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.401249][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.402575][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.403767][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.405441][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.409483][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.412238][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.421913][ T4499] device veth0_vlan entered promiscuous mode [ 67.423952][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.425338][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.428375][ T4499] device veth1_vlan entered promiscuous mode [ 67.439444][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.441020][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.442349][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.443879][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.455979][ T4499] device veth0_macvtap entered promiscuous mode [ 67.458722][ T4499] device veth1_macvtap entered promiscuous mode [ 67.464945][ T4499] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.466173][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.467842][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.469273][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.471694][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.475381][ T4499] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.476521][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.478121][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.480930][ T4499] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.482344][ T4499] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.483870][ T4499] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.485321][ T4499] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.676548][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.677838][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.679439][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.692704][ T408] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.694040][ T408] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.695533][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.172001][ T148] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:01:08 executed programs: 0 [ 68.805978][ T4787] chnl_net:caif_netlink_parms(): no params data found [ 68.827726][ T4787] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.829013][ T4787] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.831163][ T4787] device bridge_slave_0 entered promiscuous mode [ 68.833804][ T4787] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.834967][ T4787] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.836577][ T4787] device bridge_slave_1 entered promiscuous mode [ 68.845214][ T4787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.847843][ T4787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.857542][ T4787] team0: Port device team_slave_0 added [ 68.859397][ T4787] team0: Port device team_slave_1 added [ 68.866541][ T4787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.867573][ T4787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.873068][ T4787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.875459][ T4787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.876532][ T4787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.881450][ T4787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.921180][ T4787] device hsr_slave_0 entered promiscuous mode [ 68.940517][ T4787] device hsr_slave_1 entered promiscuous mode [ 68.971387][ T4787] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.972583][ T4787] Cannot create hsr debugfs directory [ 69.621051][ T1544] cfg80211: failed to load regulatory.db [ 69.631119][ T2067] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.632322][ T2067] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.813307][ T148] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.820327][ T4186] Bluetooth: hci0: command 0x0409 tx timeout [ 72.910042][ T4185] Bluetooth: hci0: command 0x041b tx timeout [ 73.372836][ T148] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.423942][ T148] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.474977][ T4787] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.530820][ T4787] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.581551][ T4787] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.641326][ T4787] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.703550][ T4787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.707269][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.708813][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.711961][ T4787] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.714400][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.716085][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.717620][ T1211] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.718681][ T1211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.720043][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.722633][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.724269][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.725767][ T1211] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.726902][ T1211] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.729399][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.733621][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.736770][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.738531][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.740708][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.744471][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.746020][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.749894][ T4787] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.751823][ T4787] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.754209][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.755637][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.757297][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.758747][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.762300][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.798763][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.800259][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.803606][ T4787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.811640][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.813296][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.817887][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.819505][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.821768][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.823056][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.835511][ T4787] device veth0_vlan entered promiscuous mode [ 74.839029][ T4787] device veth1_vlan entered promiscuous mode [ 74.846804][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.848385][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.849849][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.851733][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.854255][ T4787] device veth0_macvtap entered promiscuous mode [ 74.856657][ T4787] device veth1_macvtap entered promiscuous mode [ 74.862201][ T4787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.863834][ T4787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.865887][ T4787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.867145][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.868639][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.870142][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.871688][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.874034][ T4787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.875644][ T4787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.877630][ T4787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.878874][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.881548][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.895284][ T4787] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.896604][ T4787] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.897941][ T4787] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.899167][ T4787] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.920397][ T1211] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.922304][ T1211] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.926713][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.931832][ T1211] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.934537][ T1211] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.936948][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:01:14 executed programs: 2 [ 74.980272][ T4914] Bluetooth: hci0: command 0x040f tx timeout [ 75.219989][ T4185] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 75.460168][ T4185] usb 1-1: Using ep0 maxpacket: 16 [ 75.579987][ T4185] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 646 [ 75.759999][ T4185] usb 1-1: New USB device found, idVendor=05ac, idProduct=024c, bcdDevice=71.b1 [ 75.761354][ T4185] usb 1-1: New USB device strings: Mfr=156, Product=201, SerialNumber=3 [ 75.762537][ T4185] usb 1-1: Product: syz [ 75.763179][ T4185] usb 1-1: Manufacturer: syz [ 75.763963][ T4185] usb 1-1: SerialNumber: syz [ 75.822867][ T4185] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input2 [ 76.260370][ T4894] ------------[ cut here ]------------ [ 76.261353][ T4894] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 76.262424][ T4894] WARNING: CPU: 0 PID: 4894 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1580 [ 76.263770][ T4894] Modules linked in: [ 76.264383][ T4894] CPU: 0 PID: 4894 Comm: udevd Not tainted 5.15.189-syzkaller #0 [ 76.265629][ T4894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 76.267251][ T4894] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 76.268485][ T4894] pc : usb_submit_urb+0xa44/0x1580 [ 76.269280][ T4894] lr : usb_submit_urb+0xa44/0x1580 [ 76.270078][ T4894] sp : ffff80001f3c7470 [ 76.270785][ T4894] x29: ffff80001f3c74b0 x28: 1fffe0001b2eb603 x27: ffff80001239bb48 [ 76.272163][ T4894] x26: ffff0000c272bd00 x25: ffff0000c0fec050 x24: 0000000000000286 [ 76.273344][ T4894] x23: ffff8000123a21a0 x22: dfff800000000000 x21: 0000000000000002 [ 76.274514][ T4894] x20: 0000000000000cc0 x19: ffff0000c0fec000 x18: 0000000000000001 [ 76.275667][ T4894] x17: 0000000000000000 x16: ffff8000111bc798 x15: 00000000ffffffff [ 76.276794][ T4894] x14: 0000000000ff0100 x13: 0000000000000001 x12: 0000000000ff0100 [ 76.277946][ T4894] x11: 0000000000000000 x10: 0000000000000000 x9 : ea50ee95ff447700 [ 76.279173][ T4894] x8 : ea50ee95ff447700 x7 : 0000000000000001 x6 : 0000000000000001 [ 76.280550][ T4894] x5 : ffff80001f3c6d58 x4 : ffff80001424f400 x3 : ffff80000850433c [ 76.281877][ T4894] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000029 [ 76.283052][ T4894] Call trace: [ 76.283545][ T4894] usb_submit_urb+0xa44/0x1580 [ 76.284238][ T4894] bcm5974_start_traffic+0xe0/0x154 [ 76.285013][ T4894] bcm5974_open+0x94/0x130 [ 76.285718][ T4894] input_open_device+0x134/0x288 [ 76.286531][ T4894] evdev_open+0x3c4/0x468 [ 76.287297][ T4894] chrdev_open+0x26c/0x4f0 [ 76.288011][ T4894] do_dentry_open+0x760/0xebc [ 76.288802][ T4894] vfs_open+0x7c/0x90 [ 76.289483][ T4894] path_openat+0x1f80/0x26e4 [ 76.290236][ T4894] do_filp_open+0x164/0x330 [ 76.290982][ T4894] do_sys_openat2+0x128/0x3d8 [ 76.291679][ T4894] __arm64_sys_openat+0x120/0x154 [ 76.292491][ T4894] invoke_syscall+0x98/0x2b8 [ 76.293213][ T4894] el0_svc_common+0x138/0x258 [ 76.293984][ T4894] do_el0_svc+0x58/0x14c [ 76.294704][ T4894] el0_svc+0x78/0x1e0 [ 76.295306][ T4894] el0t_64_sync_handler+0xcc/0xe4 [ 76.296054][ T4894] el0t_64_sync+0x1a0/0x1a4 [ 76.296721][ T4894] irq event stamp: 7580 [ 76.297308][ T4894] hardirqs last enabled at (7579): [] __up_console_sem+0xb4/0x100 [ 76.298694][ T4894] hardirqs last disabled at (7580): [] el1_dbg+0x24/0x80 [ 76.299934][ T4894] softirqs last enabled at (4730): [] local_bh_enable+0x10/0x34 [ 76.301232][ T4894] softirqs last disabled at (4728): [] local_bh_disable+0x10/0x34 [ 76.302602][ T4894] ---[ end trace a32a0a41a37f5335 ]--- [ 76.319942][ C0] ------------[ cut here ]------------ [ 76.320882][ C0] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 76.321891][ C0] WARNING: CPU: 0 PID: 0 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1580 [ 76.323342][ C0] Modules linked in: [ 76.323948][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G W 5.15.189-syzkaller #0 [ 76.325327][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 76.326865][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 76.328084][ C0] pc : usb_submit_urb+0xa44/0x1580 [ 76.328809][ C0] lr : usb_submit_urb+0xa44/0x1580 [ 76.329518][ C0] sp : ffff800008007620 [ 76.330089][ C0] x29: ffff800008007660 x28: 1fffe0001b2eb603 x27: ffff80001239bb48 [ 76.331223][ C0] x26: ffff0000c272bd00 x25: ffff0000c0fec050 x24: 0000000000000286 [ 76.332357][ C0] x23: ffff8000123a21a0 x22: dfff800000000000 x21: 0000000000000002 [ 76.333395][ C0] x20: 0000000000000a20 x19: ffff0000c0fec000 x18: 0000000000000102 [ 76.334671][ C0] x17: 0000000000000000 x16: ffff8000111bc798 x15: 00000000ffffffff [ 76.335962][ C0] x14: 0000000000ff0100 x13: 0000000000000001 x12: 0000000000ff0100 [ 76.337165][ C0] x11: 0000000000000101 x10: 0000000000000000 x9 : 653b31e3e50a3800 [ 76.338546][ C0] x8 : 653b31e3e50a3800 x7 : 0000000000000001 x6 : 0000000000000001 [ 76.339793][ C0] x5 : ffff800008006f18 x4 : ffff80001424f400 x3 : ffff80000850433c [ 76.341068][ C0] x2 : 0000000000000001 x1 : 0000000100000101 x0 : 0000000000000029 [ 76.342275][ C0] Call trace: [ 76.342765][ C0] usb_submit_urb+0xa44/0x1580 [ 76.343555][ C0] bcm5974_irq_trackpad+0x204/0xe88 [ 76.344421][ C0] __usb_hcd_giveback_urb+0x2e0/0x518 [ 76.345275][ C0] usb_hcd_giveback_urb+0x100/0x3e0 [ 76.346107][ C0] dummy_timer+0x5b8/0x231c [ 76.346846][ C0] call_timer_fn+0x19c/0x858 [ 76.347595][ C0] __run_timers+0x46c/0x6c4 [ 76.348310][ C0] run_timer_softirq+0x7c/0x114 [ 76.349018][ C0] handle_softirqs+0x344/0xbf0 [ 76.349736][ C0] __irq_exit_rcu+0x240/0x440 [ 76.350425][ C0] irq_exit+0x14/0x88 [ 76.351069][ C0] handle_domain_irq+0x14c/0x1fc [ 76.351790][ C0] gic_handle_irq+0x78/0x1c8 [ 76.352459][ C0] call_on_irq_stack+0x24/0x30 [ 76.353167][ C0] do_interrupt_handler+0x6c/0x88 [ 76.353916][ C0] el1_interrupt+0x30/0x58 [ 76.354657][ C0] el1h_64_irq_handler+0x18/0x24 [ 76.355428][ C0] el1h_64_irq+0x78/0x7c [ 76.356026][ C0] arch_local_irq_enable+0xc/0x18 [ 76.356861][ C0] default_idle_call+0xcc/0x418 [ 76.357660][ C0] do_idle+0x1c8/0x480 [ 76.358272][ C0] cpu_startup_entry+0x24/0x28 [ 76.359034][ C0] rest_init+0x360/0x390 [ 76.359709][ C0] arch_call_rest_init+0x14/0x20 [ 76.360535][ C0] start_kernel+0x49c/0x54c [ 76.361297][ C0] __primary_switched+0xa8/0xb0 [ 76.362080][ C0] irq event stamp: 444881 [ 76.362736][ C0] hardirqs last enabled at (444880): [] _raw_spin_unlock_irq+0x98/0x128 [ 76.364354][ C0] hardirqs last disabled at (444881): [] _raw_spin_lock_irqsave+0xfc/0x14c [ 76.366021][ C0] softirqs last enabled at (444824): [] handle_softirqs+0xa4c/0xbf0 [ 76.367556][ C0] softirqs last disabled at (444877): [] __irq_exit_rcu+0x240/0x440 [ 76.369135][ C0] ---[ end trace a32a0a41a37f5336 ]--- [ 76.389940][ C0] ------------[ cut here ]------------ [ 76.390860][ C0] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 76.391861][ C0] WARNING: CPU: 0 PID: 0 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1580 [ 76.393326][ C0] Modules linked in: [ 76.393975][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G W 5.15.189-syzkaller #0 [ 76.395371][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 76.396873][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 76.398074][ C0] pc : usb_submit_urb+0xa44/0x1580 [ 76.398868][ C0] lr : usb_submit_urb+0xa44/0x1580 [ 76.399643][ C0] sp : ffff800008007620 [ 76.400295][ C0] x29: ffff800008007660 x28: 1fffe0001b2eb603 x27: ffff80001239bb48 [ 76.401600][ C0] x26: ffff0000c272bd00 x25: ffff0000c0fec050 x24: 0000000000000286 [ 76.402909][ C0] x23: ffff8000123a21a0 x22: dfff800000000000 x21: 0000000000000002 [ 76.404173][ C0] x20: 0000000000000a20 x19: ffff0000c0fec000 x18: 0000000000000102 [ 76.405405][ C0] x17: 0000000000000000 x16: ffff8000111bc798 x15: 00000000ffffffff [ 76.406655][ C0] x14: 0000000000ff0100 x13: 0000000000000001 x12: 0000000000ff0100 [ 76.407832][ C0] x11: 0000000000000101 x10: 0000000000000000 x9 : 653b31e3e50a3800 [ 76.409155][ C0] x8 : 653b31e3e50a3800 x7 : 0000000000000001 x6 : 0000000000000001 [ 76.410549][ C0] x5 : ffff800008006f18 x4 : ffff80001424f400 x3 : ffff80000850433c [ 76.411818][ C0] x2 : 0000000000000001 x1 : 0000000000000101 x0 : 0000000000000029 [ 76.413099][ C0] Call trace: [ 76.413632][ C0] usb_submit_urb+0xa44/0x1580 [ 76.414433][ C0] bcm5974_irq_trackpad+0x204/0xe88 [ 76.415253][ C0] __usb_hcd_giveback_urb+0x2e0/0x518 [ 76.416145][ C0] usb_hcd_giveback_urb+0x100/0x3e0 [ 76.417086][ C0] dummy_timer+0x5b8/0x231c [ 76.417885][ C0] call_timer_fn+0x19c/0x858 [ 76.418692][ C0] __run_timers+0x46c/0x6c4 [ 76.419468][ C0] run_timer_softirq+0x7c/0x114 [ 76.420292][ C0] handle_softirqs+0x344/0xbf0 [ 76.421079][ C0] __irq_exit_rcu+0x240/0x440 [ 76.421903][ C0] irq_exit+0x14/0x88 [ 76.422485][ C0] handle_domain_irq+0x14c/0x1fc [ 76.423248][ C0] gic_handle_irq+0x78/0x1c8 [ 76.423955][ C0] call_on_irq_stack+0x24/0x30 [ 76.424759][ C0] do_interrupt_handler+0x6c/0x88 [ 76.425572][ C0] el1_interrupt+0x30/0x58 [ 76.426310][ C0] el1h_64_irq_handler+0x18/0x24 [ 76.427088][ C0] el1h_64_irq+0x78/0x7c [ 76.427768][ C0] arch_local_irq_enable+0xc/0x18 [ 76.428590][ C0] default_idle_call+0xcc/0x418 [ 76.429371][ C0] do_idle+0x1c8/0x480 [ 76.430023][ C0] cpu_startup_entry+0x24/0x28 [ 76.430804][ C0] rest_init+0x360/0x390 [ 76.431565][ C0] arch_call_rest_init+0x14/0x20 [ 76.432310][ C0] start_kernel+0x49c/0x54c [ 76.433071][ C0] __primary_switched+0xa8/0xb0 [ 76.433770][ C0] irq event stamp: 445025 [ 76.434462][ C0] hardirqs last enabled at (445024): [] _raw_spin_unlock_irq+0x98/0x128 [ 76.436139][ C0] hardirqs last disabled at (445025): [] _raw_spin_lock_irqsave+0xfc/0x14c [ 76.437727][ C0] softirqs last enabled at (444970): [] handle_softirqs+0xa4c/0xbf0 [ 76.439268][ C0] softirqs last disabled at (445017): [] __irq_exit_rcu+0x240/0x440 [ 76.440888][ C0] ---[ end trace a32a0a41a37f5337 ]--- [ 76.459937][ C0] ------------[ cut here ]------------ [ 76.460815][ C0] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 76.461848][ C0] WARNING: CPU: 0 PID: 0 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1580 [ 76.463418][ C0] Modules linked in: [ 76.464076][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G W 5.15.189-syzkaller #0 [ 76.465473][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 76.466992][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 76.468356][ C0] pc : usb_submit_urb+0xa44/0x1580 [ 76.469143][ C0] lr : usb_submit_urb+0xa44/0x1580 [ 76.469938][ C0] sp : ffff800008007620 [ 76.470583][ C0] x29: ffff800008007660 x28: 1fffe0001b2eb603 x27: ffff80001239bb48 [ 76.471790][ C0] x26: ffff0000c272bd00 x25: ffff0000c0fec050 x24: 0000000000000286 [ 76.473002][ C0] x23: ffff8000123a21a0 x22: dfff800000000000 x21: 0000000000000002 [ 76.474255][ C0] x20: 0000000000000a20 x19: ffff0000c0fec000 x18: 0000000000000102 [ 76.475629][ C0] x17: 0000000000000000 x16: ffff8000111bc798 x15: 00000000ffffffff [ 76.477021][ C0] x14: 0000000000ff0100 x13: 0000000000000001 x12: 0000000000ff0100 [ 76.478265][ C0] x11: 0000000000000101 x10: 0000000000000000 x9 : 653b31e3e50a3800 [ 76.479527][ C0] x8 : 653b31e3e50a3800 x7 : 0000000000000001 x6 : 0000000000000001 [ 76.480721][ C0] x5 : ffff800008006f18 x4 : ffff80001424f400 x3 : ffff80000850433c [ 76.481858][ C0] x2 : 0000000000000001 x1 : 0000000000000101 x0 : 0000000000000029 [ 76.483115][ C0] Call trace: [ 76.483567][ C0] usb_submit_urb+0xa44/0x1580 [ 76.484280][ C0] bcm5974_irq_trackpad+0x204/0xe88 [ 76.485042][ C0] __usb_hcd_giveback_urb+0x2e0/0x518 [ 76.485833][ C0] usb_hcd_giveback_urb+0x100/0x3e0 [ 76.486573][ C0] dummy_timer+0x5b8/0x231c [ 76.487248][ C0] call_timer_fn+0x19c/0x858 [ 76.487969][ C0] __run_timers+0x46c/0x6c4 [ 76.488647][ C0] run_timer_softirq+0x7c/0x114 [ 76.489369][ C0] handle_softirqs+0x344/0xbf0 [ 76.490076][ C0] __irq_exit_rcu+0x240/0x440 [ 76.490839][ C0] irq_exit+0x14/0x88 [ 76.491407][ C0] handle_domain_irq+0x14c/0x1fc [ 76.492099][ C0] gic_handle_irq+0x78/0x1c8 [ 76.492744][ C0] call_on_irq_stack+0x24/0x30 [ 76.493412][ C0] do_interrupt_handler+0x6c/0x88 [ 76.494121][ C0] el1_interrupt+0x30/0x58 [ 76.494813][ C0] el1h_64_irq_handler+0x18/0x24 [ 76.495570][ C0] el1h_64_irq+0x78/0x7c [ 76.496253][ C0] arch_local_irq_enable+0xc/0x18 [ 76.497048][ C0] default_idle_call+0xcc/0x418 [ 76.497801][ C0] do_idle+0x1c8/0x480 [ 76.498434][ C0] cpu_startup_entry+0x24/0x28 [ 76.499144][ C0] rest_init+0x360/0x390 [ 76.499834][ C0] arch_call_rest_init+0x14/0x20 [ 76.500603][ C0] start_kernel+0x49c/0x54c [ 76.501298][ C0] __primary_switched+0xa8/0xb0 [ 76.502117][ C0] irq event stamp: 445159 [ 76.502808][ C0] hardirqs last enabled at (445158): [] _raw_spin_unlock_irq+0x98/0x128 [ 76.504351][ C0] hardirqs last disabled at (445159): [] _raw_spin_lock_irqsave+0xfc/0x14c [ 76.505963][ C0] softirqs last enabled at (445098): [] handle_softirqs+0xa4c/0xbf0 [ 76.507483][ C0] softirqs last disabled at (445151): [] __irq_exit_rcu+0x240/0x440 [ 76.509019][ C0] ---[ end trace a32a0a41a37f5338 ]--- [ 76.510005][ C0] ------------[ cut here ]------------ [ 76.510832][ C0] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 76.511769][ T4185] usb 1-1: USB disconnect, device number 2 [ 76.511919][ C0] WARNING: CPU: 0 PID: 0 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1580 [ 76.514079][ C0] Modules linked in: [ 76.514711][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G W 5.15.189-syzkaller #0 [ 76.516214][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 76.517810][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 76.519000][ C0] pc : usb_submit_urb+0xa44/0x1580 [ 76.519871][ C0] lr : usb_submit_urb+0xa44/0x1580 [ 76.520643][ C0] sp : ffff800008007620 [ 76.521245][ C0] x29: ffff800008007660 x28: 1fffe0001b2eb603 x27: ffff80001239bb48 [ 76.522427][ C0] x26: ffff0000c272bd00 x25: ffff0000c0fec050 x24: 0000000000000286 [ 76.523551][ C0] x23: ffff8000123a21a0 x22: dfff800000000000 x21: 0000000000000002 [ 76.524789][ C0] x20: 0000000000000a20 x19: ffff0000c0fec000 x18: 0000000000000102 [ 76.526028][ C0] x17: 0000000000000000 x16: ffff8000083020fc x15: 00000000ffffffff [ 76.527150][ C0] x14: 0000000000ff0100 x13: 0000000000000001 x12: 0000000000ff0100 [ 76.528363][ C0] x11: 0000000000000101 x10: 0000000000000000 x9 : 653b31e3e50a3800 [ 76.529558][ C0] x8 : 653b31e3e50a3800 x7 : 0000000000000001 x6 : 0000000000000001 [ 76.530774][ C0] x5 : ffff800008006f18 x4 : ffff80001424f400 x3 : ffff80000830220c [ 76.531957][ C0] x2 : 0000000000000001 x1 : 0000000000000101 x0 : 0000000000000029 [ 76.533298][ C0] Call trace: [ 76.533824][ C0] usb_submit_urb+0xa44/0x1580 [ 76.534640][ C0] bcm5974_irq_trackpad+0x204/0xe88 [ 76.535505][ C0] __usb_hcd_giveback_urb+0x2e0/0x518 [ 76.536414][ C0] usb_hcd_giveback_urb+0x100/0x3e0 [ 76.537286][ C0] dummy_timer+0x5b8/0x231c [ 76.537998][ C0] call_timer_fn+0x19c/0x858 [ 76.538732][ C0] __run_timers+0x46c/0x6c4 [ 76.539449][ C0] run_timer_softirq+0x7c/0x114 [ 76.540185][ C0] handle_softirqs+0x344/0xbf0 [ 76.540948][ C0] __irq_exit_rcu+0x240/0x440 [ 76.541678][ C0] irq_exit+0x14/0x88 [ 76.542279][ C0] handle_domain_irq+0x14c/0x1fc [ 76.543035][ C0] gic_handle_irq+0x78/0x1c8 [ 76.543746][ C0] call_on_irq_stack+0x24/0x30 [ 76.544431][ C0] do_interrupt_handler+0x6c/0x88 [ 76.545215][ C0] el1_interrupt+0x30/0x58 [ 76.545911][ C0] el1h_64_irq_handler+0x18/0x24 [ 76.546774][ C0] el1h_64_irq+0x78/0x7c [ 76.547471][ C0] arch_local_irq_enable+0xc/0x18 [ 76.548365][ C0] default_idle_call+0xcc/0x418 [ 76.549150][ C0] do_idle+0x1c8/0x480 [ 76.549807][ C0] cpu_startup_entry+0x24/0x28 [ 76.550596][ C0] rest_init+0x360/0x390 [ 76.551307][ C0] arch_call_rest_init+0x14/0x20 [ 76.552078][ C0] start_kernel+0x49c/0x54c [ 76.552767][ C0] __primary_switched+0xa8/0xb0 [ 76.553490][ C0] irq event stamp: 445169 [ 76.554196][ C0] hardirqs last enabled at (445168): [] _raw_spin_unlock_irq+0x98/0x128 [ 76.555649][ C0] hardirqs last disabled at (445169): [] _raw_spin_lock_irqsave+0xfc/0x14c [ 76.557123][ C0] softirqs last enabled at (445098): [] handle_softirqs+0xa4c/0xbf0 [ 76.558498][ C0] softirqs last disabled at (445151): [] __irq_exit_rcu+0x240/0x440 [ 76.559890][ C0] ---[ end trace a32a0a41a37f5339 ]--- [ 76.560712][ C0] bcm5974 1-1:1.0: trackpad urb failed: -2 [ 76.562504][ T4894] bcm5974 1-1:1.0: could not read from device [ 77.060453][ T4914] Bluetooth: hci0: command 0x0419 tx timeout [ 77.274763][ T148] device hsr_slave_0 left promiscuous mode [ 77.289987][ T4186] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 77.310216][ T148] device hsr_slave_1 left promiscuous mode [ 77.409979][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.411380][ T148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.412871][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.414073][ T148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.415542][ T148] device bridge_slave_1 left promiscuous mode [ 77.416560][ T148] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.460500][ T148] device bridge_slave_0 left promiscuous mode [ 77.461607][ T148] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.559964][ T4186] usb 1-1: Using ep0 maxpacket: 16 [ 77.600064][ T148] device veth1_macvtap left promiscuous mode [ 77.601053][ T148] device veth0_macvtap left promiscuous mode [ 77.602114][ T148] device veth1_vlan left promiscuous mode [ 77.603111][ T148] device veth0_vlan left promiscuous mode [ 77.690104][ T4186] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 646 [ 77.697244][ T148] team0 (unregistering): Port device team_slave_1 removed [ 77.701812][ T148] team0 (unregistering): Port device team_slave_0 removed [ 77.705591][ T148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 77.733780][ T148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 77.843083][ T148] bond0 (unregistering): Released all slaves [ 77.890002][ T4186] usb 1-1: New USB device found, idVendor=05ac, idProduct=024c, bcdDevice=71.b1 [ 77.891409][ T4186] usb 1-1: New USB device strings: Mfr=156, Product=201, SerialNumber=3 [ 77.892732][ T4186] usb 1-1: Product: syz [ 77.893384][ T4186] usb 1-1: Manufacturer: syz [ 77.894129][ T4186] usb 1-1: SerialNumber: syz [ 77.942180][ T4186] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input3 [ 78.370035][ T4894] ------------[ cut here ]------------ [ 78.370871][ T4894] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 78.371911][ T4894] WARNING: CPU: 1 PID: 4894 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1580 [ 78.373308][ T4894] Modules linked in: [ 78.373925][ T4894] CPU: 1 PID: 4894 Comm: udevd Tainted: G W 5.15.189-syzkaller #0 [ 78.375560][ T4894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 78.377155][ T4894] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 78.378356][ T4894] pc : usb_submit_urb+0xa44/0x1580 [ 78.379151][ T4894] lr : usb_submit_urb+0xa44/0x1580 [ 78.379982][ T4894] sp : ffff80001f3c7470 [ 78.380659][ T4894] x29: ffff80001f3c74b0 x28: 1fffe000181e1803 x27: ffff80001239bb48 [ 78.381906][ T4894] x26: ffff0000d27b2300 x25: ffff0000ce9ba450 x24: 0000000000000286 [ 78.383179][ T4894] x23: ffff8000123a21a0 x22: dfff800000000000 x21: 0000000000000002 [ 78.384501][ T4894] x20: 0000000000000cc0 x19: ffff0000ce9ba400 x18: 0000000000000001 [ 78.385790][ T4894] x17: 0000000000000000 x16: ffff8000111bc798 x15: 00000000ffffffff [ 78.387113][ T4894] x14: 0000000000ff0100 x13: 0000000000000001 x12: 0000000000ff0100 [ 78.388485][ T4894] x11: 0000000000000000 x10: 0000000000000000 x9 : ea50ee95ff447700 [ 78.389891][ T4894] x8 : ea50ee95ff447700 x7 : 0000000000000001 x6 : 0000000000000001 [ 78.391229][ T4894] x5 : ffff80001f3c6d58 x4 : ffff80001424f400 x3 : ffff80000850433c [ 78.392595][ T4894] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000029 [ 78.394007][ T4894] Call trace: [ 78.394547][ T4894] usb_submit_urb+0xa44/0x1580 [ 78.395371][ T4894] bcm5974_start_traffic+0xe0/0x154 [ 78.396209][ T4894] bcm5974_open+0x94/0x130 [ 78.396929][ T4894] input_open_device+0x134/0x288 [ 78.397707][ T4894] evdev_open+0x3c4/0x468 [ 78.398398][ T4894] chrdev_open+0x26c/0x4f0 [ 78.399200][ T4894] do_dentry_open+0x760/0xebc [ 78.399937][ T4894] vfs_open+0x7c/0x90 [ 78.400607][ T4894] path_openat+0x1f80/0x26e4 [ 78.401314][ T4894] do_filp_open+0x164/0x330 [ 78.402038][ T4894] do_sys_openat2+0x128/0x3d8 [ 78.402769][ T4894] __arm64_sys_openat+0x120/0x154 [ 78.403580][ T4894] invoke_syscall+0x98/0x2b8 [ 78.404287][ T4894] el0_svc_common+0x138/0x258 [ 78.405034][ T4894] do_el0_svc+0x58/0x14c [ 78.405684][ T4894] el0_svc+0x78/0x1e0 [ 78.406333][ T4894] el0t_64_sync_handler+0xcc/0xe4 [ 78.407192][ T4894] el0t_64_sync+0x1a0/0x1a4 [ 78.407883][ T4894] irq event stamp: 11504 [ 78.408615][ T4894] hardirqs last enabled at (11503): [] __up_console_sem+0xb4/0x100 [ 78.410234][ T4894] hardirqs last disabled at (11504): [] el1_dbg+0x24/0x80 [ 78.411803][ T4894] softirqs last enabled at (11242): [] handle_softirqs+0xa4c/0xbf0 [ 78.413428][ T4894] softirqs last disabled at (11235): [] __irq_exit_rcu+0x240/0x440 [ 78.415022][ T4894] ---[ end trace a32a0a41a37f533a ]--- [ 78.429933][ C1] ------------[ cut here ]------------ [ 78.430830][ C1] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 78.431944][ C1] WARNING: CPU: 1 PID: 0 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1580 [ 78.433459][ C1] Modules linked in: [ 78.434116][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G W 5.15.189-syzkaller #0 [ 78.435653][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 78.437281][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 78.438467][ C1] pc : usb_submit_urb+0xa44/0x1580 [ 78.439251][ C1] lr : usb_submit_urb+0xa44/0x1580 [ 78.440021][ C1] sp : ffff800008017620 [ 78.440706][ C1] x29: ffff800008017660 x28: 1fffe000181e1803 x27: ffff80001239bb48 [ 78.441954][ C1] x26: ffff0000d27b2300 x25: ffff0000ce9ba450 x24: 0000000000000286 [ 78.443224][ C1] x23: ffff8000123a21a0 x22: dfff800000000000 x21: 0000000000000002 [ 78.444591][ C1] x20: 0000000000000a20 x19: ffff0000ce9ba400 x18: 0000000000000102 [ 78.445968][ C1] x17: 0000000000000000 x16: ffff8000111bc798 x15: 00000000ffffffff [ 78.447339][ C1] x14: 0000000000ff0100 x13: 0000000000000001 x12: 0000000000ff0100 [ 78.448776][ C1] x11: 0000000000000101 x10: 0000000000000000 x9 : 87152ef5ee410e00 [ 78.450191][ C1] x8 : 87152ef5ee410e00 x7 : 0000000000000001 x6 : 0000000000000001 [ 78.451615][ C1] x5 : ffff800008016f18 x4 : ffff80001424f400 x3 : ffff80000850433c [ 78.452986][ C1] x2 : 0000000000000001 x1 : 0000000000000101 x0 : 0000000000000029 [ 78.454274][ C1] Call trace: [ 78.454821][ C1] usb_submit_urb+0xa44/0x1580 [ 78.455591][ C1] bcm5974_irq_trackpad+0x204/0xe88 [ 78.456469][ C1] __usb_hcd_giveback_urb+0x2e0/0x518 [ 78.457328][ C1] usb_hcd_giveback_urb+0x100/0x3e0 [ 78.458178][ C1] dummy_timer+0x5b8/0x231c [ 78.458865][ C1] call_timer_fn+0x19c/0x858 [ 78.459580][ C1] __run_timers+0x46c/0x6c4 [ 78.460229][ C1] run_timer_softirq+0x7c/0x114 [ 78.460934][ C1] handle_softirqs+0x344/0xbf0 [ 78.461670][ C1] __irq_exit_rcu+0x240/0x440 [ 78.462335][ C1] irq_exit+0x14/0x88 [ 78.462879][ C1] handle_domain_irq+0x14c/0x1fc [ 78.463592][ C1] gic_handle_irq+0x78/0x1c8 [ 78.464317][ C1] call_on_irq_stack+0x24/0x30 [ 78.465006][ C1] do_interrupt_handler+0x6c/0x88 [ 78.465768][ C1] el1_interrupt+0x30/0x58 [ 78.466438][ C1] el1h_64_irq_handler+0x18/0x24 [ 78.467154][ C1] el1h_64_irq+0x78/0x7c [ 78.467827][ C1] arch_local_irq_enable+0xc/0x18 [ 78.468593][ C1] default_idle_call+0xcc/0x418 [ 78.469399][ C1] do_idle+0x1c8/0x480 [ 78.470077][ C1] cpu_startup_entry+0x24/0x28 [ 78.470920][ C1] secondary_start_kernel+0x23c/0x294 [ 78.471788][ C1] __secondary_switched+0x94/0x98 [ 78.472669][ C1] irq event stamp: 461959 [ 78.473321][ C1] hardirqs last enabled at (461958): [] _raw_spin_unlock_irq+0x98/0x128 [ 78.474843][ C1] hardirqs last disabled at (461959): [] _raw_spin_lock_irqsave+0xfc/0x14c [ 78.476393][ C1] softirqs last enabled at (461874): [] handle_softirqs+0xa4c/0xbf0 [ 78.477813][ C1] softirqs last disabled at (461945): [] __irq_exit_rcu+0x240/0x440 [ 78.479266][ C1] ---[ end trace a32a0a41a37f533b ]--- [ 78.574272][ T4913] usb 1-1: USB disconnect, device number 3 [ 78.580251][ T4894] bcm5974 1-1:1.0: could not read from device [ 79.339943][ T4186] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 79.579967][ T4186] usb 1-1: Using ep0 maxpacket: 16 [ 79.700175][ T4186] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 646 [ 79.860168][ T4186] usb 1-1: New USB device found, idVendor=05ac, idProduct=024c, bcdDevice=71.b1 [ 79.861660][ T4186] usb 1-1: New USB device strings: Mfr=156, Product=201, SerialNumber=3 [ 79.862877][ T4186] usb 1-1: Product: syz [ 79.863538][ T4186] usb 1-1: Manufacturer: syz [ 79.864333][ T4186] usb 1-1: SerialNumber: syz [ 79.902154][ T4186] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input4 [ 80.340272][ T4894] ------------[ cut here ]------------ [ 80.341261][ T4894] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 80.342419][ T4894] WARNING: CPU: 1 PID: 4894 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1580 [ 80.343974][ T4894] Modules linked in: [ 80.344625][ T4894] CPU: 1 PID: 4894 Comm: udevd Tainted: G W 5.15.189-syzkaller #0 [ 80.346055][ T4894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 80.347556][ T4894] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 80.348858][ T4894] pc : usb_submit_urb+0xa44/0x1580 [ 80.349739][ T4894] lr : usb_submit_urb+0xa44/0x1580 [ 80.350612][ T4894] sp : ffff80001f3c7470 [ 80.351301][ T4894] x29: ffff80001f3c74b0 x28: 1fffe00018c33e03 x27: ffff80001239bb48 [ 80.352661][ T4894] x26: ffff0000d2073c00 x25: ffff0000c9224050 x24: 0000000000000286 [ 80.353968][ T4894] x23: ffff8000123a21a0 x22: dfff800000000000 x21: 0000000000000002 [ 80.355244][ T4894] x20: 0000000000000cc0 x19: ffff0000c9224000 x18: 0000000000000001 [ 80.356567][ T4894] x17: 0000000000000000 x16: ffff8000111bc798 x15: 00000000ffffffff [ 80.357955][ T4894] x14: 0000000000ff0100 x13: 0000000000000001 x12: 0000000000ff0100 [ 80.359210][ T4894] x11: 0000000000000000 x10: 0000000000000000 x9 : ea50ee95ff447700 [ 80.360489][ T4894] x8 : ea50ee95ff447700 x7 : 0000000000000001 x6 : 0000000000000001 [ 80.361775][ T4894] x5 : ffff80001f3c6d58 x4 : ffff80001424f400 x3 : ffff80000850433c [ 80.362990][ T4894] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000029 [ 80.364250][ T4894] Call trace: [ 80.364752][ T4894] usb_submit_urb+0xa44/0x1580 [ 80.365473][ T4894] bcm5974_start_traffic+0xe0/0x154 [ 80.366259][ T4894] bcm5974_open+0x94/0x130 [ 80.366970][ T4894] input_open_device+0x134/0x288 [ 80.367794][ T4894] evdev_open+0x3c4/0x468 [ 80.368514][ T4894] chrdev_open+0x26c/0x4f0 [ 80.369251][ T4894] do_dentry_open+0x760/0xebc [ 80.370049][ T4894] vfs_open+0x7c/0x90 [ 80.370661][ T4894] path_openat+0x1f80/0x26e4 [ 80.371427][ T4894] do_filp_open+0x164/0x330 [ 80.372157][ T4894] do_sys_openat2+0x128/0x3d8 [ 80.372896][ T4894] __arm64_sys_openat+0x120/0x154 [ 80.373728][ T4894] invoke_syscall+0x98/0x2b8 [ 80.374457][ T4894] el0_svc_common+0x138/0x258 [ 80.375219][ T4894] do_el0_svc+0x58/0x14c [ 80.375919][ T4894] el0_svc+0x78/0x1e0 [ 80.376501][ T4894] el0t_64_sync_handler+0xcc/0xe4 [ 80.377180][ T4894] el0t_64_sync+0x1a0/0x1a4 [ 80.377868][ T4894] irq event stamp: 15660 [ 80.378494][ T4894] hardirqs last enabled at (15659): [] __up_console_sem+0xb4/0x100 [ 80.379886][ T4894] hardirqs last disabled at (15660): [] el1_dbg+0x24/0x80 [ 80.381222][ T4894] softirqs last enabled at (13736): [] handle_softirqs+0xa4c/0xbf0 [ 80.382671][ T4894] softirqs last disabled at (13725): [] __irq_exit_rcu+0x240/0x440 [ 80.384063][ T4894] ---[ end trace a32a0a41a37f533c ]--- [ 80.399934][ C1] ------------[ cut here ]------------ [ 80.400856][ C1] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 80.401955][ C1] WARNING: CPU: 1 PID: 0 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1580 [ 80.403414][ C1] Modules linked in: [ 80.404000][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G W 5.15.189-syzkaller #0 [ 80.405494][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 80.407098][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 80.408383][ C1] pc : usb_submit_urb+0xa44/0x1580 [ 80.409206][ C1] lr : usb_submit_urb+0xa44/0x1580 [ 80.410009][ C1] sp : ffff800008017620 [ 80.410689][ C1] x29: ffff800008017660 x28: 1fffe00018c33e03 x27: ffff80001239bb48 [ 80.411954][ C1] x26: ffff0000d2073c00 x25: ffff0000c9224050 x24: 0000000000000286 [ 80.413200][ C1] x23: ffff8000123a21a0 x22: dfff800000000000 x21: 0000000000000002 [ 80.414517][ C1] x20: 0000000000000a20 x19: ffff0000c9224000 x18: 0000000000000102 [ 80.415866][ C1] x17: 0000000000000000 x16: ffff8000111bc798 x15: 00000000ffffffff [ 80.417161][ C1] x14: 0000000000ff0100 x13: 0000000000000001 x12: 0000000000ff0100 [ 80.418429][ C1] x11: 0000000000000101 x10: 0000000000000000 x9 : 87152ef5ee410e00 [ 80.419687][ C1] x8 : 87152ef5ee410e00 x7 : 0000000000000001 x6 : 0000000000000001 [ 80.420884][ C1] x5 : ffff800008016f18 x4 : ffff80001424f400 x3 : ffff80000850433c [ 80.422189][ C1] x2 : 0000000000000001 x1 : 0000000000000101 x0 : 0000000000000029 [ 80.423505][ C1] Call trace: [ 80.424025][ C1] usb_submit_urb+0xa44/0x1580 [ 80.424841][ C1] bcm5974_irq_trackpad+0x204/0xe88 [ 80.425734][ C1] __usb_hcd_giveback_urb+0x2e0/0x518 [ 80.426619][ C1] usb_hcd_giveback_urb+0x100/0x3e0 [ 80.427432][ C1] dummy_timer+0x5b8/0x231c [ 80.428112][ C1] call_timer_fn+0x19c/0x858 [ 80.428840][ C1] __run_timers+0x46c/0x6c4 [ 80.429508][ C1] run_timer_softirq+0x7c/0x114 [ 80.430211][ C1] handle_softirqs+0x344/0xbf0 [ 80.431022][ C1] __irq_exit_rcu+0x240/0x440 [ 80.431790][ C1] irq_exit+0x14/0x88 [ 80.432456][ C1] handle_domain_irq+0x14c/0x1fc [ 80.433178][ C1] gic_handle_irq+0x78/0x1c8 [ 80.433864][ C1] call_on_irq_stack+0x24/0x30 [ 80.434612][ C1] do_interrupt_handler+0x6c/0x88 [ 80.435347][ C1] el1_interrupt+0x30/0x58 [ 80.436064][ C1] el1h_64_irq_handler+0x18/0x24 [ 80.436854][ C1] el1h_64_irq+0x78/0x7c [ 80.437540][ C1] arch_local_irq_enable+0xc/0x18 [ 80.438346][ C1] default_idle_call+0xcc/0x418 [ 80.439109][ C1] do_idle+0x1c8/0x480 [ 80.439733][ C1] cpu_startup_entry+0x24/0x28 [ 80.440484][ C1] secondary_start_kernel+0x23c/0x294 [ 80.441314][ C1] __secondary_switched+0x94/0x98 [ 80.442050][ C1] irq event stamp: 478201 [ 80.442657][ C1] hardirqs last enabled at (478200): [] _raw_spin_unlock_irq+0x98/0x128 [ 80.444217][ C1] hardirqs last disabled at (478201): [] _raw_spin_lock_irqsave+0xfc/0x14c [ 80.445880][ C1] softirqs last enabled at (478146): [] handle_softirqs+0xa4c/0xbf0 [ 80.447482][ C1] softirqs last disabled at (478193): [] __irq_exit_rcu+0x240/0x440 [ 80.449079][ C1] ---[ end trace a32a0a41a37f533d ]--- [ 80.450103][ C1] ------------[ cut here ]------------ [ 80.450985][ C1] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 80.452100][ C1] WARNING: CPU: 1 PID: 0 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1580 [ 80.453505][ C1] Modules linked in: [ 80.454123][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G W 5.15.189-syzkaller #0 [ 80.455542][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 80.456972][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 80.458166][ C1] pc : usb_submit_urb+0xa44/0x1580 [ 80.458997][ C1] lr : usb_submit_urb+0xa44/0x1580 [ 80.459842][ C1] sp : ffff800008017620 [ 80.460499][ C1] x29: ffff800008017660 x28: 1fffe00018c33e03 x27: ffff80001239bb48 [ 80.461773][ C1] x26: ffff0000d2073c00 x25: ffff0000c9224050 x24: 0000000000000286 [ 80.463030][ C1] x23: ffff8000123a21a0 x22: dfff800000000000 x21: 0000000000000002 [ 80.464307][ C1] x20: 0000000000000a20 x19: ffff0000c9224000 x18: 0000000000000102 [ 80.465480][ C1] x17: 0000000000000000 x16: ffff8000083020fc x15: 00000000ffffffff [ 80.466703][ C1] x14: 0000000000ff0100 x13: 0000000000000001 x12: 0000000000ff0100 [ 80.467897][ C1] x11: 0000000000000101 x10: 0000000000000000 x9 : 87152ef5ee410e00 [ 80.469140][ C1] x8 : 87152ef5ee410e00 x7 : 0000000000000001 x6 : 0000000000000001 [ 80.470543][ C1] x5 : ffff800008016f18 x4 : ffff80001424f400 x3 : ffff80000830220c [ 80.471944][ C1] x2 : 0000000000000001 x1 : 0000000000000101 x0 : 0000000000000029 [ 80.473327][ C1] Call trace: [ 80.473844][ C1] usb_submit_urb+0xa44/0x1580 [ 80.474682][ C1] bcm5974_irq_trackpad+0x204/0xe88 [ 80.475560][ C1] __usb_hcd_giveback_urb+0x2e0/0x518 [ 80.476425][ C1] usb_hcd_giveback_urb+0x100/0x3e0 [ 80.477306][ C1] dummy_timer+0x5b8/0x231c [ 80.478017][ C1] call_timer_fn+0x19c/0x858 [ 80.478729][ C1] __run_timers+0x46c/0x6c4 [ 80.479402][ C1] run_timer_softirq+0x7c/0x114 [ 80.480163][ C1] handle_softirqs+0x344/0xbf0 [ 80.480897][ C1] __irq_exit_rcu+0x240/0x440 [ 80.481604][ C1] irq_exit+0x14/0x88 [ 80.482215][ C1] handle_domain_irq+0x14c/0x1fc [ 80.482894][ C1] gic_handle_irq+0x78/0x1c8 [ 80.483554][ C1] call_on_irq_stack+0x24/0x30 [ 80.484294][ C1] do_interrupt_handler+0x6c/0x88 [ 80.485085][ C1] el1_interrupt+0x30/0x58 [ 80.485831][ C1] el1h_64_irq_handler+0x18/0x24 [ 80.486649][ C1] el1h_64_irq+0x78/0x7c [ 80.487297][ C1] arch_local_irq_enable+0xc/0x18 [ 80.488091][ C1] default_idle_call+0xcc/0x418 [ 80.488903][ C1] do_idle+0x1c8/0x480 [ 80.489544][ C1] cpu_startup_entry+0x24/0x28 [ 80.490226][ C1] secondary_start_kernel+0x23c/0x294 [ 80.491094][ C1] __secondary_switched+0x94/0x98 [ 80.491912][ C1] irq event stamp: 478221 [ 80.492606][ C1] hardirqs last enabled at (478220): [] _raw_spin_unlock_irq+0x98/0x128 [ 80.494247][ C1] hardirqs last disabled at (478221): [] _raw_spin_lock_irqsave+0xfc/0x14c [ 80.495857][ C1] softirqs last enabled at (478146): [] handle_softirqs+0xa4c/0xbf0 [ 80.497427][ C1] softirqs last disabled at (478193): [] __irq_exit_rcu+0x240/0x440 [ 80.498999][ C1] ---[ end trace a32a0a41a37f533e ]--- [ 80.499948][ C1] ------------[ cut here ]------------ [ 80.500828][ C1] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 80.501901][ C1] WARNING: CPU: 1 PID: 0 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1580 [ 80.503229][ C1] Modules linked in: [ 80.503823][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G W 5.15.189-syzkaller #0 [ 80.505244][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 80.506677][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 80.507949][ C1] pc : usb_submit_urb+0xa44/0x1580 [ 80.508774][ C1] lr : usb_submit_urb+0xa44/0x1580 [ 80.509531][ C1] sp : ffff800008017620 [ 80.510184][ C1] x29: ffff800008017660 x28: 1fffe00018c33e03 x27: ffff80001239bb48 [ 80.511559][ C1] x26: ffff0000d2073c00 x25: ffff0000c9224050 x24: 0000000000000286 [ 80.512850][ C1] x23: ffff8000123a21a0 x22: dfff800000000000 x21: 0000000000000002 [ 80.514103][ C1] x20: 0000000000000a20 x19: ffff0000c9224000 x18: 0000000000000102 [ 80.515292][ C1] x17: 0000000000000000 x16: ffff8000083020fc x15: 00000000ffffffff [ 80.516487][ C1] x14: 0000000000ff0100 x13: 0000000000000001 x12: 0000000000ff0100 [ 80.517705][ C1] x11: 0000000000000101 x10: 0000000000000000 x9 : 87152ef5ee410e00 [ 80.518966][ C1] x8 : 87152ef5ee410e00 x7 : 0000000000000001 x6 : 0000000000000001 [ 80.520181][ C1] x5 : ffff800008016f18 x4 : ffff80001424f400 x3 : ffff80000830220c [ 80.521430][ C1] x2 : 0000000000000001 x1 : 0000000000000101 x0 : 0000000000000029 [ 80.522633][ C1] Call trace: [ 80.523146][ C1] usb_submit_urb+0xa44/0x1580 [ 80.523875][ C1] bcm5974_irq_trackpad+0x204/0xe88 [ 80.524720][ C1] __usb_hcd_giveback_urb+0x2e0/0x518 [ 80.525594][ C1] usb_hcd_giveback_urb+0x100/0x3e0 [ 80.526481][ C1] dummy_timer+0x5b8/0x231c [ 80.527243][ C1] call_timer_fn+0x19c/0x858 [ 80.528013][ C1] __run_timers+0x46c/0x6c4 [ 80.528740][ C1] run_timer_softirq+0x7c/0x114 [ 80.529470][ C1] handle_softirqs+0x344/0xbf0 [ 80.530203][ C1] __irq_exit_rcu+0x240/0x440 [ 80.530918][ C1] irq_exit+0x14/0x88 [ 80.531538][ C1] handle_domain_irq+0x14c/0x1fc [ 80.532308][ C1] gic_handle_irq+0x78/0x1c8 [ 80.533035][ C1] call_on_irq_stack+0x24/0x30 [ 80.533741][ C1] do_interrupt_handler+0x6c/0x88 [ 80.534500][ C1] el1_interrupt+0x30/0x58 [ 80.535174][ C1] el1h_64_irq_handler+0x18/0x24 [ 80.536030][ C1] el1h_64_irq+0x78/0x7c [ 80.536696][ C1] arch_local_irq_enable+0xc/0x18 [ 80.537562][ C1] default_idle_call+0xcc/0x418 [ 80.538365][ C1] do_idle+0x1c8/0x480 [ 80.538972][ C1] cpu_startup_entry+0x24/0x28 [ 80.539779][ C1] secondary_start_kernel+0x23c/0x294 [ 80.540593][ C1] __secondary_switched+0x94/0x98 [ 80.541341][ C1] irq event stamp: 478227 [ 80.541990][ C1] hardirqs last enabled at (478226): [] _raw_spin_unlock_irq+0x98/0x128 [ 80.543557][ C1] hardirqs last disabled at (478227): [] _raw_spin_lock_irqsave+0xfc/0x14c [ 80.545147][ C1] softirqs last enabled at (478146): [] handle_softirqs+0xa4c/0xbf0 [ 80.546681][ C1] softirqs last disabled at (478193): [] __irq_exit_rcu+0x240/0x440 [ 80.548172][ C1] ---[ end trace a32a0a41a37f533f ]--- [ 80.549225][ C1] ------------[ cut here ]------------ [ 80.550079][ C1] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 80.551231][ C1] WARNING: CPU: 1 PID: 0 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1580 [ 80.552652][ C1] Modules linked in: [ 80.553085][ T4976] usb 1-1: USB disconnect, device number 4 [ 80.553233][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G W 5.15.189-syzkaller #0 [ 80.555641][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 80.557181][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 80.558416][ C1] pc : usb_submit_urb+0xa44/0x1580 [ 80.559262][ C1] lr : usb_submit_urb+0xa44/0x1580 [ 80.560068][ C1] sp : ffff800008017620 [ 80.560734][ C1] x29: ffff800008017660 x28: 1fffe00018c33e03 x27: ffff80001239bb48 [ 80.561957][ C1] x26: ffff0000d2073c00 x25: ffff0000c9224050 x24: 0000000000000286 [ 80.563200][ C1] x23: ffff8000123a21a0 x22: dfff800000000000 x21: 0000000000000002 [ 80.564387][ C1] x20: 0000000000000a20 x19: ffff0000c9224000 x18: 0000000000000102 [ 80.565672][ C1] x17: 0000000000000000 x16: ffff8000083020fc x15: 00000000ffffffff [ 80.566872][ C1] x14: 0000000000ff0100 x13: 0000000000000001 x12: 0000000000ff0100 [ 80.568067][ C1] x11: 0000000000000101 x10: 0000000000000000 x9 : 87152ef5ee410e00 [ 80.569258][ C1] x8 : 87152ef5ee410e00 x7 : 0000000000000001 x6 : 0000000000000001 [ 80.570484][ C1] x5 : ffff800008016f18 x4 : ffff80001424f400 x3 : ffff80000830220c [ 80.571751][ C1] x2 : 0000000000000001 x1 : 0000000000000101 x0 : 0000000000000029 [ 80.572974][ C1] Call trace: [ 80.573445][ C1] usb_submit_urb+0xa44/0x1580 [ 80.574105][ C1] bcm5974_irq_trackpad+0x204/0xe88 [ 80.574886][ C1] __usb_hcd_giveback_urb+0x2e0/0x518 [ 80.575639][ C1] usb_hcd_giveback_urb+0x100/0x3e0 [ 80.576444][ C1] dummy_timer+0x5b8/0x231c [ 80.577094][ C1] call_timer_fn+0x19c/0x858 [ 80.577736][ C1] __run_timers+0x46c/0x6c4 [ 80.578434][ C1] run_timer_softirq+0x7c/0x114 [ 80.579191][ C1] handle_softirqs+0x344/0xbf0 [ 80.579937][ C1] __irq_exit_rcu+0x240/0x440 [ 80.580623][ C1] irq_exit+0x14/0x88 [ 80.581241][ C1] handle_domain_irq+0x14c/0x1fc [ 80.582111][ C1] gic_handle_irq+0x78/0x1c8 [ 80.582861][ C1] call_on_irq_stack+0x24/0x30 [ 80.583607][ C1] do_interrupt_handler+0x6c/0x88 [ 80.584432][ C1] el1_interrupt+0x30/0x58 [ 80.585128][ C1] el1h_64_irq_handler+0x18/0x24 [ 80.585896][ C1] el1h_64_irq+0x78/0x7c [ 80.586520][ C1] arch_local_irq_enable+0xc/0x18 [ 80.587343][ C1] default_idle_call+0xcc/0x418 [ 80.588129][ C1] do_idle+0x1c8/0x480 [ 80.588794][ C1] cpu_startup_entry+0x24/0x28 [ 80.589612][ C1] secondary_start_kernel+0x23c/0x294 [ 80.590472][ C1] __secondary_switched+0x94/0x98 [ 80.591329][ C1] irq event stamp: 478297 [ 80.592040][ C1] hardirqs last enabled at (478296): [] _raw_spin_unlock_irq+0x98/0x128 [ 80.593527][ C1] hardirqs last disabled at (478297): [] _raw_spin_lock_irqsave+0xfc/0x14c [ 80.595037][ C1] softirqs last enabled at (478146): [] handle_softirqs+0xa4c/0xbf0 [ 80.596621][ C1] softirqs last disabled at (478193): [] __irq_exit_rcu+0x240/0x440 [ 80.598224][ C1] ---[ end trace a32a0a41a37f5340 ]--- [ 80.599167][ C1] bcm5974 1-1:1.0: trackpad urb failed: -2 [ 80.603169][ T4894] bcm5974 1-1:1.0: could not read from device 1970/01/01 00:01:21 executed programs: 5 [ 81.329962][ T4976] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 81.579951][ T4976] usb 1-1: Using ep0 maxpacket: 16 [ 81.700003][ T4976] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 646 [ 81.860334][ T4976] usb 1-1: New USB device found, idVendor=05ac, idProduct=024c, bcdDevice=71.b1 [ 81.861771][ T4976] usb 1-1: New USB device strings: Mfr=156, Product=201, SerialNumber=3 [ 81.863028][ T4976] usb 1-1: Product: syz [ 81.863665][ T4976] usb 1-1: Manufacturer: syz [ 81.864327][ T4976] usb 1-1: SerialNumber: syz [ 81.911582][ T4976] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input5 [ 82.350084][ T4894] ------------[ cut here ]------------ [ 82.351102][ T4894] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 82.352210][ T4894] WARNING: CPU: 0 PID: 4894 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1580 [ 82.353693][ T4894] Modules linked in: [ 82.354267][ T4894] CPU: 0 PID: 4894 Comm: udevd Tainted: G W 5.15.189-syzkaller #0 [ 82.355626][ T4894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 82.357298][ T4894] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 82.358636][ T4894] pc : usb_submit_urb+0xa44/0x1580 [ 82.359444][ T4894] lr : usb_submit_urb+0xa44/0x1580 [ 82.360249][ T4894] sp : ffff80001f3c7470 [ 82.360925][ T4894] x29: ffff80001f3c74b0 x28: 1fffe00019d4ba03 x27: ffff80001239bb48 [ 82.362207][ T4894] x26: ffff0000c82b6e00 x25: ffff0000d0b2f450 x24: 0000000000000286 [ 82.363504][ T4894] x23: ffff8000123a21a0 x22: dfff800000000000 x21: 0000000000000002 [ 82.364780][ T4894] x20: 0000000000000cc0 x19: ffff0000d0b2f400 x18: 0000000000000001 [ 82.365992][ T4894] x17: 0000000000000000 x16: ffff8000111bc798 x15: 00000000ffffffff [ 82.367219][ T4894] x14: 0000000000ff0100 x13: 0000000000000001 x12: 0000000000ff0100 [ 82.368355][ T4894] x11: 0000000000000000 x10: 0000000000000000 x9 : ea50ee95ff447700 [ 82.369476][ T4894] x8 : ea50ee95ff447700 x7 : 0000000000000001 x6 : 0000000000000001 [ 82.370651][ T4894] x5 : ffff80001f3c6d58 x4 : ffff80001424f400 x3 : ffff80000850433c [ 82.371896][ T4894] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000029 [ 82.373036][ T4894] Call trace: [ 82.373473][ T4894] usb_submit_urb+0xa44/0x1580 [ 82.374137][ T4894] bcm5974_start_traffic+0xe0/0x154 [ 82.374899][ T4894] bcm5974_open+0x94/0x130 [ 82.375607][ T4894] input_open_device+0x134/0x288 [ 82.376437][ T4894] evdev_open+0x3c4/0x468 [ 82.377126][ T4894] chrdev_open+0x26c/0x4f0 [ 82.377841][ T4894] do_dentry_open+0x760/0xebc [ 82.378579][ T4894] vfs_open+0x7c/0x90 [ 82.379257][ T4894] path_openat+0x1f80/0x26e4 [ 82.380077][ T4894] do_filp_open+0x164/0x330 [ 82.380759][ T4894] do_sys_openat2+0x128/0x3d8 [ 82.381539][ T4894] __arm64_sys_openat+0x120/0x154 [ 82.382276][ T4894] invoke_syscall+0x98/0x2b8 [ 82.382891][ T4894] el0_svc_common+0x138/0x258 [ 82.383545][ T4894] do_el0_svc+0x58/0x14c [ 82.384138][ T4894] el0_svc+0x78/0x1e0 [ 82.384670][ T4894] el0t_64_sync_handler+0xcc/0xe4 [ 82.385374][ T4894] el0t_64_sync+0x1a0/0x1a4 [ 82.386003][ T4894] irq event stamp: 19848 [ 82.386607][ T4894] hardirqs last enabled at (19847): [] __up_console_sem+0xb4/0x100 [ 82.388025][ T4894] hardirqs last disabled at (19848): [] el1_dbg+0x24/0x80 [ 82.389342][ T4894] softirqs last enabled at (19182): [] handle_softirqs+0xa4c/0xbf0 [ 82.390747][ T4894] softirqs last disabled at (19177): [] __irq_exit_rcu+0x240/0x440 [ 82.392132][ T4894] ---[ end trace a32a0a41a37f5341 ]--- [ 82.419921][ C0] ------------[ cut here ]------------ [ 82.420818][ C0] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 82.421947][ C0] WARNING: CPU: 0 PID: 0 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1580 [ 82.423244][ C0] Modules linked in: [ 82.423820][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G W 5.15.189-syzkaller #0 [ 82.425242][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 82.426857][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 82.428215][ C0] pc : usb_submit_urb+0xa44/0x1580 [ 82.429069][ C0] lr : usb_submit_urb+0xa44/0x1580 [ 82.429871][ C0] sp : ffff800008007620 [ 82.430499][ C0] x29: ffff800008007660 x28: 1fffe00019d4ba03 x27: ffff80001239bb48 [ 82.431865][ C0] x26: ffff0000c82b6e00 x25: ffff0000d0b2f450 x24: 0000000000000286 [ 82.433182][ C0] x23: ffff8000123a21a0 x22: dfff800000000000 x21: 0000000000000002 [ 82.434535][ C0] x20: 0000000000000a20 x19: ffff0000d0b2f400 x18: 0000000000000102 [ 82.435866][ C0] x17: 0000000000000000 x16: ffff8000111bc798 x15: 00000000ffffffff [ 82.437130][ C0] x14: 0000000000ff0100 x13: 0000000000000001 x12: 0000000000ff0100 [ 82.438492][ C0] x11: 0000000000000101 x10: 0000000000000000 x9 : 653b31e3e50a3800 [ 82.439797][ C0] x8 : 653b31e3e50a3800 x7 : 0000000000000001 x6 : 0000000000000001 [ 82.441163][ C0] x5 : ffff800008006f18 x4 : ffff80001424f400 x3 : ffff80000850433c [ 82.442586][ C0] x2 : 0000000000000001 x1 : 0000000100000101 x0 : 0000000000000029 [ 82.443928][ C0] Call trace: [ 82.444438][ C0] usb_submit_urb+0xa44/0x1580 [ 82.445173][ C0] bcm5974_irq_trackpad+0x204/0xe88 [ 82.446009][ C0] __usb_hcd_giveback_urb+0x2e0/0x518 [ 82.446875][ C0] usb_hcd_giveback_urb+0x100/0x3e0 [ 82.447729][ C0] dummy_timer+0x5b8/0x231c [ 82.448486][ C0] call_timer_fn+0x19c/0x858 [ 82.449248][ C0] __run_timers+0x46c/0x6c4 [ 82.449997][ C0] run_timer_softirq+0x7c/0x114 [ 82.450734][ C0] handle_softirqs+0x344/0xbf0 [ 82.451528][ C0] __irq_exit_rcu+0x240/0x440 [ 82.452273][ C0] irq_exit+0x14/0x88 [ 82.452921][ C0] handle_domain_irq+0x14c/0x1fc [ 82.453687][ C0] gic_handle_irq+0x78/0x1c8 [ 82.454408][ C0] call_on_irq_stack+0x24/0x30 [ 82.455100][ C0] do_interrupt_handler+0x6c/0x88 [ 82.455842][ C0] el1_interrupt+0x30/0x58 [ 82.456523][ C0] el1h_64_irq_handler+0x18/0x24 [ 82.457354][ C0] el1h_64_irq+0x78/0x7c [ 82.458048][ C0] arch_local_irq_enable+0xc/0x18 [ 82.458834][ C0] default_idle_call+0xcc/0x418 [ 82.459550][ C0] do_idle+0x1c8/0x480 [ 82.460171][ C0] cpu_startup_entry+0x24/0x28 [ 82.460870][ C0] rest_init+0x360/0x390 [ 82.461503][ C0] arch_call_rest_init+0x14/0x20 [ 82.462196][ C0] start_kernel+0x49c/0x54c [ 82.462910][ C0] __primary_switched+0xa8/0xb0 [ 82.463596][ C0] irq event stamp: 494137 [ 82.464160][ C0] hardirqs last enabled at (494136): [] _raw_spin_unlock_irq+0x98/0x128 [ 82.465614][ C0] hardirqs last disabled at (494137): [] _raw_spin_lock_irqsave+0xfc/0x14c [ 82.467276][ C0] softirqs last enabled at (494086): [] handle_softirqs+0xa4c/0xbf0 [ 82.468716][ C0] softirqs last disabled at (494133): [] __irq_exit_rcu+0x240/0x440 [ 82.470142][ C0] ---[ end trace a32a0a41a37f5342 ]--- [ 82.550836][ T4186] usb 1-1: USB disconnect, device number 5 [ 82.560029][ T4894] bcm5974 1-1:1.0: could not read from device [ 83.339969][ T4186] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 83.599966][ T4186] usb 1-1: Using ep0 maxpacket: 16 [ 83.719986][ T4186] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 646 [ 83.879970][ T4186] usb 1-1: New USB device found, idVendor=05ac, idProduct=024c, bcdDevice=71.b1 [ 83.881454][ T4186] usb 1-1: New USB device strings: Mfr=156, Product=201, SerialNumber=3 [ 83.882885][ T4186] usb 1-1: Product: syz [ 83.883651][ T4186] usb 1-1: Manufacturer: syz [ 83.884422][ T4186] usb 1-1: SerialNumber: syz [ 83.922138][ T4186] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input6 [ 84.350056][ T4894] ------------[ cut here ]------------ [ 84.351068][ T4894] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 84.352333][ T4894] WARNING: CPU: 0 PID: 4894 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1580 [ 84.354008][ T4894] Modules linked in: [ 84.354586][ T4894] CPU: 0 PID: 4894 Comm: udevd Tainted: G W 5.15.189-syzkaller #0 [ 84.356122][ T4894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 84.357603][ T4894] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 84.358885][ T4894] pc : usb_submit_urb+0xa44/0x1580 [ 84.359598][ T4894] lr : usb_submit_urb+0xa44/0x1580 [ 84.360335][ T4894] sp : ffff80001f3c7470 [ 84.360852][ T4894] x29: ffff80001f3c74b0 x28: 1fffe0001b34bc03 x27: ffff80001239bb48 [ 84.362020][ T4894] x26: ffff0000c1a16d00 x25: ffff0000c1835850 x24: 0000000000000286 [ 84.363356][ T4894] x23: ffff8000123a21a0 x22: dfff800000000000 x21: 0000000000000002 [ 84.364769][ T4894] x20: 0000000000000cc0 x19: ffff0000c1835800 x18: 0000000000000001 [ 84.366113][ T4894] x17: 0000000000000000 x16: ffff8000111bc798 x15: 00000000ffffffff [ 84.367513][ T4894] x14: 0000000000ff0100 x13: 0000000000000001 x12: 0000000000ff0100 [ 84.368843][ T4894] x11: 0000000000000000 x10: 0000000000000000 x9 : ea50ee95ff447700 [ 84.370232][ T4894] x8 : ea50ee95ff447700 x7 : 0000000000000001 x6 : 0000000000000001 [ 84.371549][ T4894] x5 : ffff80001f3c6d58 x4 : ffff80001424f400 x3 : ffff80000850433c [ 84.372886][ T4894] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000029 [ 84.374165][ T4894] Call trace: [ 84.374698][ T4894] usb_submit_urb+0xa44/0x1580 [ 84.375454][ T4894] bcm5974_start_traffic+0xe0/0x154 [ 84.376310][ T4894] bcm5974_open+0x94/0x130 [ 84.377034][ T4894] input_open_device+0x134/0x288 [ 84.377819][ T4894] evdev_open+0x3c4/0x468 [ 84.378462][ T4894] chrdev_open+0x26c/0x4f0 [ 84.379240][ T4894] do_dentry_open+0x760/0xebc [ 84.380061][ T4894] vfs_open+0x7c/0x90 [ 84.380735][ T4894] path_openat+0x1f80/0x26e4 [ 84.381494][ T4894] do_filp_open+0x164/0x330 [ 84.382207][ T4894] do_sys_openat2+0x128/0x3d8 [ 84.382975][ T4894] __arm64_sys_openat+0x120/0x154 [ 84.383755][ T4894] invoke_syscall+0x98/0x2b8 [ 84.384481][ T4894] el0_svc_common+0x138/0x258 [ 84.385201][ T4894] do_el0_svc+0x58/0x14c [ 84.385929][ T4894] el0_svc+0x78/0x1e0 [ 84.386617][ T4894] el0t_64_sync_handler+0xcc/0xe4 [ 84.387435][ T4894] el0t_64_sync+0x1a0/0x1a4 [ 84.388182][ T4894] irq event stamp: 26020 [ 84.388825][ T4894] hardirqs last enabled at (26019): [] __up_console_sem+0xb4/0x100 [ 84.390458][ T4894] hardirqs last disabled at (26020): [] el1_dbg+0x24/0x80 [ 84.391971][ T4894] softirqs last enabled at (25068): [] handle_softirqs+0xa4c/0xbf0 [ 84.393635][ T4894] softirqs last disabled at (25053): [] __irq_exit_rcu+0x240/0x440 [ 84.395147][ T4894] ---[ end trace a32a0a41a37f5343 ]--- [ 84.409924][ C0] ------------[ cut here ]------------ [ 84.410794][ C0] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 84.411781][ C0] WARNING: CPU: 0 PID: 0 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1580 [ 84.413051][ C0] Modules linked in: [ 84.413581][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G W 5.15.189-syzkaller #0 [ 84.414945][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 84.416376][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 84.417564][ C0] pc : usb_submit_urb+0xa44/0x1580 [ 84.418277][ C0] lr : usb_submit_urb+0xa44/0x1580 [ 84.419027][ C0] sp : ffff800008007620 [ 84.419610][ C0] x29: ffff800008007660 x28: 1fffe0001b34bc03 x27: ffff80001239bb48 [ 84.420830][ C0] x26: ffff0000c1a16d00 x25: ffff0000c1835850 x24: 0000000000000286 [ 84.421986][ C0] x23: ffff8000123a21a0 x22: dfff800000000000 x21: 0000000000000002 [ 84.423219][ C0] x20: 0000000000000a20 x19: ffff0000c1835800 x18: 0000000000000102 [ 84.424323][ C0] x17: 0000000000000000 x16: ffff8000111bc798 x15: 00000000ffffffff [ 84.425473][ C0] x14: 0000000000ff0100 x13: 0000000000000001 x12: 0000000000ff0100 [ 84.426768][ C0] x11: 0000000000000101 x10: 0000000000000000 x9 : 653b31e3e50a3800 [ 84.427969][ C0] x8 : 653b31e3e50a3800 x7 : 0000000000000001 x6 : 0000000000000001 [ 84.429244][ C0] x5 : ffff800008006f18 x4 : ffff80001424f400 x3 : ffff80000850433c [ 84.430443][ C0] x2 : 0000000000000001 x1 : 0000000100000101 x0 : 0000000000000029 [ 84.431807][ C0] Call trace: [ 84.432349][ C0] usb_submit_urb+0xa44/0x1580 [ 84.433160][ C0] bcm5974_irq_trackpad+0x204/0xe88 [ 84.433968][ C0] __usb_hcd_giveback_urb+0x2e0/0x518 [ 84.434827][ C0] usb_hcd_giveback_urb+0x100/0x3e0 [ 84.435678][ C0] dummy_timer+0x5b8/0x231c [ 84.436365][ C0] call_timer_fn+0x19c/0x858 [ 84.437064][ C0] __run_timers+0x46c/0x6c4 [ 84.437805][ C0] run_timer_softirq+0x7c/0x114 [ 84.438599][ C0] handle_softirqs+0x344/0xbf0 [ 84.439390][ C0] __irq_exit_rcu+0x240/0x440 [ 84.440109][ C0] irq_exit+0x14/0x88 [ 84.440698][ C0] handle_domain_irq+0x14c/0x1fc [ 84.441404][ C0] gic_handle_irq+0x78/0x1c8 [ 84.442110][ C0] call_on_irq_stack+0x24/0x30 [ 84.442813][ C0] do_interrupt_handler+0x6c/0x88 [ 84.443556][ C0] el1_interrupt+0x30/0x58 [ 84.444245][ C0] el1h_64_irq_handler+0x18/0x24 [ 84.444986][ C0] el1h_64_irq+0x78/0x7c [ 84.445640][ C0] arch_local_irq_enable+0xc/0x18 [ 84.446332][ C0] default_idle_call+0xcc/0x418 [ 84.447059][ C0] do_idle+0x1c8/0x480 [ 84.447669][ C0] cpu_startup_entry+0x24/0x28 [ 84.448387][ C0] rest_init+0x360/0x390 [ 84.448993][ C0] arch_call_rest_init+0x14/0x20 [ 84.449718][ C0] start_kernel+0x49c/0x54c [ 84.450417][ C0] __primary_switched+0xa8/0xb0 [ 84.451110][ C0] irq event stamp: 509585 [ 84.451749][ C0] hardirqs last enabled at (509584): [] _raw_spin_unlock_irq+0x98/0x128 [ 84.453489][ C0] hardirqs last disabled at (509585): [] _raw_spin_lock_irqsave+0xfc/0x14c [ 84.455242][ C0] softirqs last enabled at (509534): [] handle_softirqs+0xa4c/0xbf0 [ 84.456825][ C0] softirqs last disabled at (509581): [] __irq_exit_rcu+0x240/0x440 [ 84.458406][ C0] ---[ end trace a32a0a41a37f5344 ]--- [ 84.459420][ C0] ------------[ cut here ]------------ [ 84.460258][ C0] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 84.461310][ C0] WARNING: CPU: 0 PID: 0 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1580 [ 84.462594][ C0] Modules linked in: [ 84.463222][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G W 5.15.189-syzkaller #0 [ 84.464685][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 84.466441][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 84.467738][ C0] pc : usb_submit_urb+0xa44/0x1580 [ 84.468603][ C0] lr : usb_submit_urb+0xa44/0x1580 [ 84.469379][ C0] sp : ffff800008007620 [ 84.470016][ C0] x29: ffff800008007660 x28: 1fffe0001b34bc03 x27: ffff80001239bb48 [ 84.471392][ C0] x26: ffff0000c1a16d00 x25: ffff0000c1835850 x24: 0000000000000286 [ 84.472743][ C0] x23: ffff8000123a21a0 x22: dfff800000000000 x21: 0000000000000002 [ 84.474062][ C0] x20: 0000000000000a20 x19: ffff0000c1835800 x18: 0000000000000102 [ 84.475427][ C0] x17: 0000000000000000 x16: ffff8000083020fc x15: 00000000ffffffff [ 84.476663][ C0] x14: 0000000000ff0100 x13: 0000000000000001 x12: 0000000000ff0100 [ 84.477904][ C0] x11: 0000000000000101 x10: 0000000000000000 x9 : 653b31e3e50a3800 [ 84.479260][ C0] x8 : 653b31e3e50a3800 x7 : 0000000000000001 x6 : 0000000000000001 [ 84.480633][ C0] x5 : ffff800008006f18 x4 : ffff80001424f400 x3 : ffff80000830220c [ 84.481887][ C0] x2 : 0000000000000001 x1 : 0000000000000101 x0 : 0000000000000029 [ 84.483108][ C0] Call trace: [ 84.483637][ C0] usb_submit_urb+0xa44/0x1580 [ 84.484380][ C0] bcm5974_irq_trackpad+0x204/0xe88 [ 84.485268][ C0] __usb_hcd_giveback_urb+0x2e0/0x518 [ 84.486195][ C0] usb_hcd_giveback_urb+0x100/0x3e0 [ 84.486971][ C0] dummy_timer+0x5b8/0x231c [ 84.487713][ C0] call_timer_fn+0x19c/0x858 [ 84.488425][ C0] __run_timers+0x46c/0x6c4 [ 84.489079][ C0] run_timer_softirq+0x7c/0x114 [ 84.489849][ C0] handle_softirqs+0x344/0xbf0 [ 84.490610][ C0] __irq_exit_rcu+0x240/0x440 [ 84.491409][ C0] irq_exit+0x14/0x88 [ 84.492081][ C0] handle_domain_irq+0x14c/0x1fc [ 84.492907][ C0] gic_handle_irq+0x78/0x1c8 [ 84.493615][ C0] call_on_irq_stack+0x24/0x30 [ 84.494345][ C0] do_interrupt_handler+0x6c/0x88 [ 84.495133][ C0] el1_interrupt+0x30/0x58 [ 84.495929][ C0] el1h_64_irq_handler+0x18/0x24 [ 84.496732][ C0] el1h_64_irq+0x78/0x7c [ 84.497421][ C0] arch_local_irq_enable+0xc/0x18 [ 84.498237][ C0] default_idle_call+0xcc/0x418 [ 84.499039][ C0] do_idle+0x1c8/0x480 [ 84.499724][ C0] cpu_startup_entry+0x24/0x28 [ 84.500444][ C0] rest_init+0x360/0x390 [ 84.501105][ C0] arch_call_rest_init+0x14/0x20 [ 84.501928][ C0] start_kernel+0x49c/0x54c [ 84.502768][ C0] __primary_switched+0xa8/0xb0 [ 84.503526][ C0] irq event stamp: 509597 [ 84.504213][ C0] hardirqs last enabled at (509596): [] _raw_spin_unlock_irq+0x98/0x128 [ 84.505868][ C0] hardirqs last disabled at (509597): [] _raw_spin_lock_irqsave+0xfc/0x14c [ 84.507576][ C0] softirqs last enabled at (509534): [] handle_softirqs+0xa4c/0xbf0 [ 84.509164][ C0] softirqs last disabled at (509581): [] __irq_exit_rcu+0x240/0x440 [ 84.510554][ C0] ---[ end trace a32a0a41a37f5345 ]--- [ 84.550533][ T4186] usb 1-1: USB disconnect, device number 6 [ 84.570019][ T4894] bcm5974 1-1:1.0: could not read from device [ 85.329938][ T4976] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 85.609937][ T4976] usb 1-1: Using ep0 maxpacket: 16 [ 85.730013][ T4976] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 646 [ 85.889987][ T4976] usb 1-1: New USB device found, idVendor=05ac, idProduct=024c, bcdDevice=71.b1 [ 85.891509][ T4976] usb 1-1: New USB device strings: Mfr=156, Product=201, SerialNumber=3 [ 85.892797][ T4976] usb 1-1: Product: syz [ 85.893491][ T4976] usb 1-1: Manufacturer: syz [ 85.894201][ T4976] usb 1-1: SerialNumber: syz [ 85.931186][ T4976] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input7