[ 46.302459][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.449058][ T9] device veth1_macvtap left promiscuous mode [ 46.450683][ T9] device veth0_macvtap left promiscuous mode [ 46.452157][ T9] device veth1_vlan left promiscuous mode [ 46.453617][ T9] device veth0_vlan left promiscuous mode [ 46.638402][ T9] team0 (unregistering): Port device team_slave_1 removed [ 46.646414][ T9] team0 (unregistering): Port device team_slave_0 removed [ 46.657931][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 46.705476][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 46.855658][ T9] bond0 (unregistering): Released all slaves Warning: Permanently added '10.128.0.140' (ED25519) to the list of known hosts. 1970/01/01 00:00:58 ignoring optional flag "sandboxArg"="0" 1970/01/01 00:00:58 ignoring optional flag "type"="gce" 1970/01/01 00:00:58 parsed 1 programs [ 59.120081][ T4278] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS 1970/01/01 00:00:59 executed programs: 0 [ 59.263315][ T4294] chnl_net:caif_netlink_parms(): no params data found [ 59.297352][ T4294] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.299634][ T4294] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.302053][ T4294] device bridge_slave_0 entered promiscuous mode [ 59.305497][ T4294] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.307444][ T4294] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.310116][ T4294] device bridge_slave_1 entered promiscuous mode [ 59.324430][ T4294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.328578][ T4294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.343782][ T4294] team0: Port device team_slave_0 added [ 59.346921][ T4294] team0: Port device team_slave_1 added [ 59.360874][ T4294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.362732][ T4294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.369677][ T4294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.373766][ T4294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.375629][ T4294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.382890][ T4294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.439695][ T4294] device hsr_slave_0 entered promiscuous mode [ 59.478350][ T4294] device hsr_slave_1 entered promiscuous mode [ 60.204599][ T4294] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 60.230023][ T4294] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 60.261383][ T4294] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.310380][ T4294] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 60.401932][ T4294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.412976][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.415383][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.421071][ T4294] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.426250][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.433935][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.436569][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.438604][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.450266][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.452783][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.457124][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.461662][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.463611][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.465886][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.469689][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.482959][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.487737][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.491164][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.494333][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.497140][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.504051][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.506720][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.513092][ T4294] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.516350][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.521352][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.524105][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.594156][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.596265][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.603289][ T4294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.616846][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.619608][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.631919][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.634607][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.637706][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.643857][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.649766][ T4294] device veth0_vlan entered promiscuous mode [ 60.657246][ T4294] device veth1_vlan entered promiscuous mode [ 60.672791][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.675345][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.677825][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.682157][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.686431][ T4294] device veth0_macvtap entered promiscuous mode [ 60.692143][ T4294] device veth1_macvtap entered promiscuous mode [ 60.704953][ T4294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.706983][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.711296][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.713850][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.717124][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.724460][ T4294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.730596][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.733484][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.737309][ T4294] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.740253][ T4294] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.742600][ T4294] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.744903][ T4294] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.785998][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.788411][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.796107][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.810960][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.813954][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.817306][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.128063][ T4370] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 61.229000][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 61.548253][ T4370] usb 1-1: config 0 has an invalid interface number: 10 but max is 0 [ 61.550468][ T4370] usb 1-1: config 0 has no interface number 0 [ 61.552192][ T4370] usb 1-1: config 0 interface 10 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 61.554965][ T4370] usb 1-1: config 0 interface 10 altsetting 0 endpoint 0x81 has invalid maxpacket 21669, setting to 1024 [ 61.558989][ T4370] usb 1-1: config 0 interface 10 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 61.561736][ T4370] usb 1-1: config 0 interface 10 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 61.739427][ T4370] usb 1-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice=d4.d7 [ 61.741863][ T4370] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.743931][ T4370] usb 1-1: Product: syz [ 61.745009][ T4370] usb 1-1: Manufacturer: syz [ 61.746167][ T4370] usb 1-1: SerialNumber: syz [ 61.757760][ T4370] usb 1-1: config 0 descriptor?? [ 61.778970][ T4393] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 61.802813][ T4370] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.10/input/input2 [ 62.228288][ T4296] ------------[ cut here ]------------ [ 62.229929][ T4296] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 62.231856][ T4296] WARNING: CPU: 1 PID: 4296 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1588 [ 62.234303][ T4296] Modules linked in: [ 62.235372][ T4296] CPU: 1 PID: 4296 Comm: udevd Not tainted 5.15.178-syzkaller #0 [ 62.237375][ T4296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 62.240077][ T4296] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 62.242208][ T4296] pc : usb_submit_urb+0xa44/0x1588 [ 62.243536][ T4296] lr : usb_submit_urb+0xa44/0x1588 [ 62.245003][ T4296] sp : ffff800020007370 [ 62.246126][ T4296] x29: ffff8000200073b0 x28: 0000000000000001 x27: ffff800012d51948 [ 62.248300][ T4296] x26: ffff0000d9d9bd00 x25: ffff0000c1674000 x24: 0000000000000400 [ 62.250505][ T4296] x23: ffff800012d58200 x22: dfff800000000000 x21: 0000000000000002 [ 62.252706][ T4296] x20: 0000000000000cc0 x19: ffff0000c159de00 x18: 0000000000000001 [ 62.254931][ T4296] x17: 0000000000000000 x16: ffff800011b4e3fc x15: 00000000ffffffff [ 62.257122][ T4296] x14: ffff0000d7e9d1c0 x13: 0000000000000001 x12: 0000000000000001 [ 62.259281][ T4296] x11: 0000000000000000 x10: 0000000000000000 x9 : e50276e685ecd100 [ 62.261488][ T4296] x8 : e50276e685ecd100 x7 : 0000000000000001 x6 : 0000000000000001 [ 62.263660][ T4296] x5 : ffff800020006ad8 x4 : ffff800014c50660 x3 : ffff8000085568c0 [ 62.265745][ T4296] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000029 [ 62.267972][ T4296] Call trace: [ 62.268852][ T4296] usb_submit_urb+0xa44/0x1588 [ 62.270148][ T4296] bcm5974_start_traffic+0xe0/0x154 [ 62.271631][ T4296] bcm5974_open+0x98/0x134 [ 62.272784][ T4296] input_open_device+0x170/0x29c [ 62.274061][ T4296] evdev_open+0x308/0x4b4 [ 62.275336][ T4296] chrdev_open+0x3e8/0x4fc [ 62.276634][ T4296] do_dentry_open+0x780/0xed8 [ 62.277913][ T4296] vfs_open+0x7c/0x90 [ 62.278991][ T4296] path_openat+0x1ea0/0x26cc [ 62.280205][ T4296] do_filp_open+0x1a8/0x3b4 [ 62.281426][ T4296] do_sys_openat2+0x128/0x3e0 [ 62.282637][ T4296] __arm64_sys_openat+0x1f0/0x240 [ 62.283968][ T4296] invoke_syscall+0x98/0x2b8 [ 62.285203][ T4296] el0_svc_common+0x138/0x258 [ 62.286485][ T4296] do_el0_svc+0x58/0x14c [ 62.287622][ T4296] el0_svc+0x7c/0x1f0 [ 62.288679][ T4296] el0t_64_sync_handler+0x84/0xe4 [ 62.290069][ T4296] el0t_64_sync+0x1a0/0x1a4 [ 62.291286][ T4296] irq event stamp: 8168 [ 62.292396][ T4296] hardirqs last enabled at (8167): [] __up_console_sem+0xb4/0x100 [ 62.295102][ T4296] hardirqs last disabled at (8168): [] el1_dbg+0x24/0x80 [ 62.297380][ T4296] softirqs last enabled at (7432): [] local_bh_enable+0x10/0x34 [ 62.299966][ T4296] softirqs last disabled at (7430): [] local_bh_disable+0x10/0x34 [ 62.302551][ T4296] ---[ end trace b04a6ebb73ceca7d ]--- [ 62.327887][ C1] ------------[ cut here ]------------ [ 62.329585][ C1] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 62.331566][ C1] WARNING: CPU: 1 PID: 0 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1588 [ 62.334055][ C1] Modules linked in: [ 62.335125][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G W 5.15.178-syzkaller #0 [ 62.337602][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 62.340235][ C1] pstate: 604000c5 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 62.342378][ C1] pc : usb_submit_urb+0xa44/0x1588 [ 62.343721][ C1] lr : usb_submit_urb+0xa44/0x1588 [ 62.345118][ C1] sp : ffff8000080175e0 [ 62.346238][ C1] x29: ffff800008017620 x28: 0000000000000001 x27: ffff800012d51948 [ 62.348335][ C1] x26: ffff0000d9d9bd00 x25: ffff0000c1674000 x24: 0000000000000400 [ 62.350665][ C1] x23: ffff800012d58200 x22: dfff800000000000 x21: 0000000000000002 [ 62.352818][ C1] x20: 0000000000000a20 x19: ffff0000c159de00 x18: 0000000000000102 [ 62.354998][ C1] x17: 0000000000000000 x16: ffff800011b4e3fc x15: 00000000ffffffff [ 62.357149][ C1] x14: ffff0000c0a68000 x13: 0000000000000001 x12: 0000000000000001 [ 62.359336][ C1] x11: 0000000000000101 x10: 0000000000000000 x9 : 8777808d28c80600 [ 62.361510][ C1] x8 : 8777808d28c80600 x7 : 0000000000000001 x6 : 0000000000000001 [ 62.363641][ C1] x5 : ffff800008016d58 x4 : ffff800014c50660 x3 : ffff8000085568c0 [ 62.365896][ C1] x2 : 0000000000000001 x1 : 0000000100000101 x0 : 0000000000000029 [ 62.368127][ C1] Call trace: [ 62.368981][ C1] usb_submit_urb+0xa44/0x1588 [ 62.370222][ C1] bcm5974_irq_trackpad+0x20c/0xdd0 [ 62.371641][ C1] __usb_hcd_giveback_urb+0x2e0/0x518 [ 62.373117][ C1] usb_hcd_giveback_urb+0x108/0x41c [ 62.374494][ C1] dummy_timer+0x66c/0x26cc [ 62.375757][ C1] call_timer_fn+0x19c/0x8f0 [ 62.376958][ C1] __run_timers+0x554/0x718 [ 62.378198][ C1] run_timer_softirq+0x7c/0x114 [ 62.379550][ C1] handle_softirqs+0x384/0xdbc [ 62.380784][ C1] __irq_exit_rcu+0x268/0x4d8 [ 62.382076][ C1] irq_exit+0x14/0x88 [ 62.383134][ C1] handle_domain_irq+0xf4/0x178 [ 62.384430][ C1] gic_handle_irq+0x78/0x1c8 [ 62.385708][ C1] call_on_irq_stack+0x24/0x4c [ 62.387067][ C1] do_interrupt_handler+0x74/0x94 [ 62.388377][ C1] el1_interrupt+0x30/0x58 [ 62.389547][ C1] el1h_64_irq_handler+0x18/0x24 [ 62.390953][ C1] el1h_64_irq+0x78/0x7c [ 62.392086][ C1] arch_local_irq_enable+0xc/0x18 [ 62.393440][ C1] default_idle_call+0xcc/0x4a8 [ 62.394759][ C1] do_idle+0x1d4/0x4dc [ 62.395807][ C1] cpu_startup_entry+0x24/0x28 [ 62.397028][ C1] secondary_start_kernel+0x240/0x298 [ 62.398437][ C1] __secondary_switched+0x94/0x98 [ 62.399820][ C1] irq event stamp: 199233 [ 62.400997][ C1] hardirqs last enabled at (199232): [] _raw_spin_unlock_irq+0x9c/0x134 [ 62.403683][ C1] hardirqs last disabled at (199233): [] _raw_spin_lock_irqsave+0xfc/0x14c [ 62.406372][ C1] softirqs last enabled at (199108): [] handle_softirqs+0xb88/0xdbc [ 62.408940][ C1] softirqs last disabled at (199229): [] __irq_exit_rcu+0x268/0x4d8 [ 62.411498][ C1] ---[ end trace b04a6ebb73ceca7e ]--- [ 62.413249][ C1] ------------[ cut here ]------------ [ 62.414709][ C1] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 62.416666][ C1] WARNING: CPU: 1 PID: 0 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1588 [ 62.419182][ C1] Modules linked in: [ 62.420213][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G W 5.15.178-syzkaller #0 [ 62.422650][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 62.425429][ C1] pstate: 604000c5 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 62.427544][ C1] pc : usb_submit_urb+0xa44/0x1588 [ 62.428865][ C1] lr : usb_submit_urb+0xa44/0x1588 [ 62.430200][ C1] sp : ffff8000080175e0 [ 62.431345][ C1] x29: ffff800008017620 x28: 0000000000000001 x27: ffff800012d51948 [ 62.433423][ C1] x26: ffff0000d9d9bd00 x25: ffff0000c1674000 x24: 0000000000000400 [ 62.435637][ C1] x23: ffff800012d58200 x22: dfff800000000000 x21: 0000000000000002 [ 62.437253][ T4370] usb 1-1: USB disconnect, device number 2 [ 62.437788][ C1] x20: 0000000000000a20 x19: ffff0000c159de00 x18: 0000000000000102 [ 62.441451][ C1] x17: 0000000000000000 x16: ffff800008336568 x15: 00000000ffffffff [ 62.443665][ C1] x14: ffff0000c0a68000 x13: 0000000000000001 x12: 0000000000000001 [ 62.445773][ C1] x11: 0000000000000101 x10: 0000000000000000 x9 : 8777808d28c80600 [ 62.447879][ C1] x8 : 8777808d28c80600 x7 : 0000000000000001 x6 : 0000000000000001 [ 62.450014][ C1] x5 : ffff800008016d58 x4 : ffff800014c50660 x3 : ffff8000083366b4 [ 62.452129][ C1] x2 : 0000000000000001 x1 : 0000000000000101 x0 : 0000000000000029 [ 62.454234][ C1] Call trace: [ 62.455014][ C1] usb_submit_urb+0xa44/0x1588 [ 62.456358][ C1] bcm5974_irq_trackpad+0x20c/0xdd0 [ 62.457826][ C1] __usb_hcd_giveback_urb+0x2e0/0x518 [ 62.459263][ C1] usb_hcd_giveback_urb+0x108/0x41c [ 62.460725][ C1] dummy_timer+0x66c/0x26cc [ 62.461979][ C1] call_timer_fn+0x19c/0x8f0 [ 62.463282][ C1] __run_timers+0x554/0x718 [ 62.464578][ C1] run_timer_softirq+0x7c/0x114 [ 62.465967][ C1] handle_softirqs+0x384/0xdbc [ 62.467234][ C1] __irq_exit_rcu+0x268/0x4d8 [ 62.468490][ C1] irq_exit+0x14/0x88 [ 62.469624][ C1] handle_domain_irq+0xf4/0x178 [ 62.470995][ C1] gic_handle_irq+0x78/0x1c8 [ 62.472217][ C1] call_on_irq_stack+0x24/0x4c [ 62.473577][ C1] do_interrupt_handler+0x74/0x94 [ 62.474963][ C1] el1_interrupt+0x30/0x58 [ 62.476156][ C1] el1h_64_irq_handler+0x18/0x24 [ 62.477469][ C1] el1h_64_irq+0x78/0x7c [ 62.478657][ C1] arch_local_irq_enable+0xc/0x18 [ 62.480068][ C1] default_idle_call+0xcc/0x4a8 [ 62.481357][ C1] do_idle+0x1d4/0x4dc [ 62.482411][ C1] cpu_startup_entry+0x24/0x28 [ 62.483761][ C1] secondary_start_kernel+0x240/0x298 [ 62.485265][ C1] __secondary_switched+0x94/0x98 [ 62.486596][ C1] irq event stamp: 199245 [ 62.487751][ C1] hardirqs last enabled at (199244): [] _raw_spin_unlock_irq+0x9c/0x134 [ 62.490504][ C1] hardirqs last disabled at (199245): [] _raw_spin_lock_irqsave+0xfc/0x14c [ 62.493322][ C1] softirqs last enabled at (199108): [] handle_softirqs+0xb88/0xdbc [ 62.495906][ C1] softirqs last disabled at (199229): [] __irq_exit_rcu+0x268/0x4d8 [ 62.498630][ C1] ---[ end trace b04a6ebb73ceca7f ]--- [ 62.500078][ C1] bcm5974 1-1:0.10: trackpad urb failed: -2 [ 62.509868][ T4296] bcm5974 1-1:0.10: could not read from device [ 63.249410][ T21] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 63.308472][ T4370] Bluetooth: hci0: command 0x041b tx timeout [ 63.608099][ T21] usb 1-1: config 0 has an invalid interface number: 10 but max is 0 [ 63.610304][ T21] usb 1-1: config 0 has no interface number 0 [ 63.611967][ T21] usb 1-1: config 0 interface 10 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 63.614831][ T21] usb 1-1: config 0 interface 10 altsetting 0 endpoint 0x81 has invalid maxpacket 21669, setting to 1024 [ 63.618893][ T21] usb 1-1: config 0 interface 10 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 63.621589][ T21] usb 1-1: config 0 interface 10 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 63.778062][ T21] usb 1-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice=d4.d7 [ 63.780661][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.782746][ T21] usb 1-1: Product: syz [ 63.783865][ T21] usb 1-1: Manufacturer: syz [ 63.785093][ T21] usb 1-1: SerialNumber: syz [ 63.789678][ T21] usb 1-1: config 0 descriptor?? [ 63.808343][ T4533] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 63.831727][ T21] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.10/input/input3 [ 64.278192][ T4296] ------------[ cut here ]------------ [ 64.279673][ T4296] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 64.281665][ T4296] WARNING: CPU: 0 PID: 4296 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1588 [ 64.284268][ T4296] Modules linked in: [ 64.285367][ T4296] CPU: 0 PID: 4296 Comm: udevd Tainted: G W 5.15.178-syzkaller #0 [ 64.287762][ T4296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 64.290454][ T4296] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 64.292630][ T4296] pc : usb_submit_urb+0xa44/0x1588 [ 64.294068][ T4296] lr : usb_submit_urb+0xa44/0x1588 [ 64.295416][ T4296] sp : ffff800020007370 [ 64.296586][ T4296] x29: ffff8000200073b0 x28: 0000000000000001 x27: ffff800012d51948 [ 64.298798][ T4296] x26: ffff0000cfd5e600 x25: ffff0000dd54c000 x24: 0000000000000400 [ 64.300923][ T4296] x23: ffff800012d58200 x22: dfff800000000000 x21: 0000000000000002 [ 64.303072][ T4296] x20: 0000000000000cc0 x19: ffff0000c0861c00 x18: 0000000000000001 [ 64.305235][ T4296] x17: 0000000000000000 x16: ffff800011b4e3fc x15: 00000000ffffffff [ 64.307437][ T4296] x14: ffff0000d7e9d1c0 x13: 0000000000000001 x12: 0000000000000001 [ 64.309571][ T4296] x11: 0000000000000000 x10: 0000000000000000 x9 : e50276e685ecd100 [ 64.311751][ T4296] x8 : e50276e685ecd100 x7 : 0000000000000001 x6 : 0000000000000001 [ 64.313812][ T4296] x5 : ffff800020006ad8 x4 : ffff800014c50660 x3 : ffff8000085568c0 [ 64.316013][ T4296] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000029 [ 64.318049][ T4296] Call trace: [ 64.318958][ T4296] usb_submit_urb+0xa44/0x1588 [ 64.320304][ T4296] bcm5974_start_traffic+0xe0/0x154 [ 64.321615][ T4296] bcm5974_open+0x98/0x134 [ 64.322859][ T4296] input_open_device+0x170/0x29c [ 64.324217][ T4296] evdev_open+0x308/0x4b4 [ 64.325413][ T4296] chrdev_open+0x3e8/0x4fc [ 64.326653][ T4296] do_dentry_open+0x780/0xed8 [ 64.327945][ T4296] vfs_open+0x7c/0x90 [ 64.329012][ T4296] path_openat+0x1ea0/0x26cc [ 64.330301][ T4296] do_filp_open+0x1a8/0x3b4 [ 64.331572][ T4296] do_sys_openat2+0x128/0x3e0 [ 64.332825][ T4296] __arm64_sys_openat+0x1f0/0x240 [ 64.334144][ T4296] invoke_syscall+0x98/0x2b8 [ 64.335344][ T4296] el0_svc_common+0x138/0x258 [ 64.336620][ T4296] do_el0_svc+0x58/0x14c [ 64.337768][ T4296] el0_svc+0x7c/0x1f0 [ 64.338826][ T4296] el0t_64_sync_handler+0x84/0xe4 [ 64.340213][ T4296] el0t_64_sync+0x1a0/0x1a4 [ 64.341471][ T4296] irq event stamp: 13928 [ 64.342597][ T4296] hardirqs last enabled at (13927): [] __up_console_sem+0xb4/0x100 [ 64.345188][ T4296] hardirqs last disabled at (13928): [] el1_dbg+0x24/0x80 [ 64.347549][ T4296] softirqs last enabled at (11612): [] local_bh_enable+0x10/0x34 [ 64.350171][ T4296] softirqs last disabled at (11610): [] local_bh_disable+0x10/0x34 [ 64.352781][ T4296] ---[ end trace b04a6ebb73ceca80 ]--- [ 64.377897][ C0] ------------[ cut here ]------------ [ 64.379514][ C0] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 64.381505][ C0] WARNING: CPU: 0 PID: 0 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1588 [ 64.384115][ C0] Modules linked in: [ 64.385228][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G W 5.15.178-syzkaller #0 [ 64.387825][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 64.390568][ C0] pstate: 604000c5 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 64.392701][ C0] pc : usb_submit_urb+0xa44/0x1588 [ 64.394140][ C0] lr : usb_submit_urb+0xa44/0x1588 [ 64.395569][ C0] sp : ffff8000080075e0 [ 64.396686][ C0] x29: ffff800008007620 x28: 0000000000000001 x27: ffff800012d51948 [ 64.398916][ C0] x26: ffff0000cfd5e600 x25: ffff0000dd54c000 x24: 0000000000000400 [ 64.401103][ C0] x23: ffff800012d58200 x22: dfff800000000000 x21: 0000000000000002 [ 64.403274][ C0] x20: 0000000000000a20 x19: ffff0000c0861c00 x18: 0000000000000102 [ 64.405469][ C0] x17: 0000000000000000 x16: ffff800011b4e3fc x15: 00000000ffffffff [ 64.407571][ C0] x14: ffff800014b94b80 x13: 0000000000000001 x12: 0000000000000001 [ 64.409674][ C0] x11: 0000000000000101 x10: 0000000000000000 x9 : 60d5a6a0ca26e900 [ 64.411868][ C0] x8 : 60d5a6a0ca26e900 x7 : 0000000000000001 x6 : 0000000000000001 [ 64.414093][ C0] x5 : ffff800008006d58 x4 : ffff800014c50660 x3 : ffff8000085568c0 [ 64.416315][ C0] x2 : 0000000000000001 x1 : 0000000100000101 x0 : 0000000000000029 [ 64.418455][ C0] Call trace: [ 64.419358][ C0] usb_submit_urb+0xa44/0x1588 [ 64.420643][ C0] bcm5974_irq_trackpad+0x20c/0xdd0 [ 64.422104][ C0] __usb_hcd_giveback_urb+0x2e0/0x518 [ 64.423567][ C0] usb_hcd_giveback_urb+0x108/0x41c [ 64.424957][ C0] dummy_timer+0x66c/0x26cc [ 64.426230][ C0] call_timer_fn+0x19c/0x8f0 [ 64.427491][ C0] __run_timers+0x554/0x718 [ 64.428722][ C0] run_timer_softirq+0x7c/0x114 [ 64.430056][ C0] handle_softirqs+0x384/0xdbc [ 64.431289][ C0] __irq_exit_rcu+0x268/0x4d8 [ 64.432594][ C0] irq_exit+0x14/0x88 [ 64.433736][ C0] handle_domain_irq+0xf4/0x178 [ 64.435064][ C0] gic_handle_irq+0x78/0x1c8 [ 64.436289][ C0] call_on_irq_stack+0x24/0x4c [ 64.437647][ C0] do_interrupt_handler+0x74/0x94 [ 64.438991][ C0] el1_interrupt+0x30/0x58 [ 64.440213][ C0] el1h_64_irq_handler+0x18/0x24 [ 64.441623][ C0] el1h_64_irq+0x78/0x7c [ 64.442750][ C0] arch_local_irq_enable+0xc/0x18 [ 64.444090][ C0] default_idle_call+0xcc/0x4a8 [ 64.445316][ C0] do_idle+0x1d4/0x4dc [ 64.446372][ C0] cpu_startup_entry+0x24/0x28 [ 64.447743][ C0] rest_init+0x364/0x38c [ 64.448931][ C0] arch_call_rest_init+0x14/0x20 [ 64.450302][ C0] start_kernel+0x440/0x600 [ 64.451534][ C0] __primary_switched+0xa8/0xb0 [ 64.452853][ C0] irq event stamp: 266575 [ 64.454051][ C0] hardirqs last enabled at (266574): [] _raw_spin_unlock_irq+0x9c/0x134 [ 64.456805][ C0] hardirqs last disabled at (266575): [] _raw_spin_lock_irqsave+0xfc/0x14c [ 64.459581][ C0] softirqs last enabled at (266462): [] handle_softirqs+0xb88/0xdbc [ 64.462211][ C0] softirqs last disabled at (266571): [] __irq_exit_rcu+0x268/0x4d8 [ 64.464781][ C0] ---[ end trace b04a6ebb73ceca81 ]--- [ 64.528275][ T7] usb 1-1: USB disconnect, device number 3 [ 64.538191][ T4296] bcm5974 1-1:0.10: could not read from device 1970/01/01 00:01:04 executed programs: 2 [ 65.317957][ T7] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 65.388157][ T4370] Bluetooth: hci0: command 0x040f tx timeout [ 65.688140][ T7] usb 1-1: config 0 has an invalid interface number: 10 but max is 0 [ 65.690564][ T7] usb 1-1: config 0 has no interface number 0 [ 65.692307][ T7] usb 1-1: config 0 interface 10 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 65.695143][ T7] usb 1-1: config 0 interface 10 altsetting 0 endpoint 0x81 has invalid maxpacket 21669, setting to 1024 [ 65.699581][ T7] usb 1-1: config 0 interface 10 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 65.702358][ T7] usb 1-1: config 0 interface 10 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 65.888052][ T7] usb 1-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice=d4.d7 [ 65.890747][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.892953][ T7] usb 1-1: Product: syz [ 65.894071][ T7] usb 1-1: Manufacturer: syz [ 65.895357][ T7] usb 1-1: SerialNumber: syz [ 65.899575][ T7] usb 1-1: config 0 descriptor?? [ 65.918647][ T4630] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 65.940830][ T7] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.10/input/input4 [ 66.368030][ T4296] ------------[ cut here ]------------ [ 66.369583][ T4296] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 66.371521][ T4296] WARNING: CPU: 0 PID: 4296 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1588 [ 66.374059][ T4296] Modules linked in: [ 66.375015][ T4296] CPU: 0 PID: 4296 Comm: udevd Tainted: G W 5.15.178-syzkaller #0 [ 66.377342][ T4296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 66.379981][ T4296] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 66.382137][ T4296] pc : usb_submit_urb+0xa44/0x1588 [ 66.383512][ T4296] lr : usb_submit_urb+0xa44/0x1588 [ 66.384971][ T4296] sp : ffff800020007370 [ 66.386057][ T4296] x29: ffff8000200073b0 x28: 0000000000000001 x27: ffff800012d51948 [ 66.388130][ T4296] x26: ffff0000ce906300 x25: ffff0000cb506000 x24: 0000000000000400 [ 66.390309][ T4296] x23: ffff800012d58200 x22: dfff800000000000 x21: 0000000000000002 [ 66.392469][ T4296] x20: 0000000000000cc0 x19: ffff0000cd26d600 x18: 0000000000000001 [ 66.394680][ T4296] x17: 0000000000000000 x16: ffff800011b4e3fc x15: 00000000ffffffff [ 66.396807][ T4296] x14: ffff0000d7e9d1c0 x13: 0000000000000001 x12: 0000000000000001 [ 66.398992][ T4296] x11: 0000000000000000 x10: 0000000000000000 x9 : e50276e685ecd100 [ 66.401231][ T4296] x8 : e50276e685ecd100 x7 : 0000000000000001 x6 : 0000000000000001 [ 66.403393][ T4296] x5 : ffff800020006ad8 x4 : ffff800014c50660 x3 : ffff8000085568c0 [ 66.405586][ T4296] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000029 [ 66.407845][ T4296] Call trace: [ 66.408743][ T4296] usb_submit_urb+0xa44/0x1588 [ 66.410017][ T4296] bcm5974_start_traffic+0xe0/0x154 [ 66.411424][ T4296] bcm5974_open+0x98/0x134 [ 66.412654][ T4296] input_open_device+0x170/0x29c [ 66.413996][ T4296] evdev_open+0x308/0x4b4 [ 66.415158][ T4296] chrdev_open+0x3e8/0x4fc [ 66.416305][ T4296] do_dentry_open+0x780/0xed8 [ 66.417515][ T4296] vfs_open+0x7c/0x90 [ 66.418672][ T4296] path_openat+0x1ea0/0x26cc [ 66.419826][ T4296] do_filp_open+0x1a8/0x3b4 [ 66.421069][ T4296] do_sys_openat2+0x128/0x3e0 [ 66.422349][ T4296] __arm64_sys_openat+0x1f0/0x240 [ 66.423679][ T4296] invoke_syscall+0x98/0x2b8 [ 66.424932][ T4296] el0_svc_common+0x138/0x258 [ 66.426243][ T4296] do_el0_svc+0x58/0x14c [ 66.427357][ T4296] el0_svc+0x7c/0x1f0 [ 66.428440][ T4296] el0t_64_sync_handler+0x84/0xe4 [ 66.429854][ T4296] el0t_64_sync+0x1a0/0x1a4 [ 66.431089][ T4296] irq event stamp: 22122 [ 66.432268][ T4296] hardirqs last enabled at (22121): [] __up_console_sem+0xb4/0x100 [ 66.434971][ T4296] hardirqs last disabled at (22122): [] el1_dbg+0x24/0x80 [ 66.437256][ T4296] softirqs last enabled at (21064): [] local_bh_enable+0x10/0x34 [ 66.439790][ T4296] softirqs last disabled at (21062): [] local_bh_disable+0x10/0x34 [ 66.442360][ T4296] ---[ end trace b04a6ebb73ceca82 ]--- [ 66.457891][ C0] ------------[ cut here ]------------ [ 66.459497][ C0] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 66.461445][ C0] WARNING: CPU: 0 PID: 0 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1588 [ 66.463943][ C0] Modules linked in: [ 66.465036][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G W 5.15.178-syzkaller #0 [ 66.467554][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 66.470383][ C0] pstate: 604000c5 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 66.472414][ C0] pc : usb_submit_urb+0xa44/0x1588 [ 66.473788][ C0] lr : usb_submit_urb+0xa44/0x1588 [ 66.475216][ C0] sp : ffff8000080075e0 [ 66.476385][ C0] x29: ffff800008007620 x28: 0000000000000001 x27: ffff800012d51948 [ 66.478602][ C0] x26: ffff0000ce906300 x25: ffff0000cb506000 x24: 0000000000000400 [ 66.480741][ C0] x23: ffff800012d58200 x22: dfff800000000000 x21: 0000000000000002 [ 66.482825][ C0] x20: 0000000000000a20 x19: ffff0000cd26d600 x18: 0000000000000102 [ 66.484879][ C0] x17: 0000000000000000 x16: ffff800011b4e3fc x15: 00000000ffffffff [ 66.486947][ C0] x14: ffff800014b94b80 x13: 0000000000000001 x12: 0000000000000001 [ 66.489023][ C0] x11: 0000000000000101 x10: 0000000000000000 x9 : 60d5a6a0ca26e900 [ 66.491171][ C0] x8 : 60d5a6a0ca26e900 x7 : 0000000000000001 x6 : 0000000000000001 [ 66.493254][ C0] x5 : ffff800008006d58 x4 : ffff800014c50660 x3 : ffff8000085568c0 [ 66.495371][ C0] x2 : 0000000000000001 x1 : 0000000100000101 x0 : 0000000000000029 [ 66.497523][ C0] Call trace: [ 66.498376][ C0] usb_submit_urb+0xa44/0x1588 [ 66.499668][ C0] bcm5974_irq_trackpad+0x20c/0xdd0 [ 66.501083][ C0] __usb_hcd_giveback_urb+0x2e0/0x518 [ 66.502490][ C0] usb_hcd_giveback_urb+0x108/0x41c [ 66.503955][ C0] dummy_timer+0x66c/0x26cc [ 66.505100][ C0] call_timer_fn+0x19c/0x8f0 [ 66.506350][ C0] __run_timers+0x554/0x718 [ 66.507671][ C0] run_timer_softirq+0x7c/0x114 [ 66.508969][ C0] handle_softirqs+0x384/0xdbc [ 66.510364][ C0] __irq_exit_rcu+0x268/0x4d8 [ 66.511670][ C0] irq_exit+0x14/0x88 [ 66.512706][ C0] handle_domain_irq+0xf4/0x178 [ 66.513956][ C0] gic_handle_irq+0x78/0x1c8 [ 66.515179][ C0] call_on_irq_stack+0x24/0x4c [ 66.516539][ C0] do_interrupt_handler+0x74/0x94 [ 66.517944][ C0] el1_interrupt+0x30/0x58 [ 66.519133][ C0] el1h_64_irq_handler+0x18/0x24 [ 66.520477][ C0] el1h_64_irq+0x78/0x7c [ 66.521643][ C0] arch_local_irq_enable+0xc/0x18 [ 66.523016][ C0] default_idle_call+0xcc/0x4a8 [ 66.524296][ C0] do_idle+0x1d4/0x4dc [ 66.525389][ C0] cpu_startup_entry+0x24/0x28 [ 66.526723][ C0] rest_init+0x364/0x38c [ 66.527828][ C0] arch_call_rest_init+0x14/0x20 [ 66.529138][ C0] start_kernel+0x440/0x600 [ 66.530287][ C0] __primary_switched+0xa8/0xb0 [ 66.531532][ C0] irq event stamp: 287211 [ 66.532728][ C0] hardirqs last enabled at (287210): [] _raw_spin_unlock_irq+0x9c/0x134 [ 66.535572][ C0] hardirqs last disabled at (287211): [] _raw_spin_lock_irqsave+0xfc/0x14c [ 66.538345][ C0] softirqs last enabled at (287034): [] handle_softirqs+0xb88/0xdbc [ 66.541015][ C0] softirqs last disabled at (287207): [] __irq_exit_rcu+0x268/0x4d8 [ 66.543563][ C0] ---[ end trace b04a6ebb73ceca83 ]--- [ 66.545186][ C0] ------------[ cut here ]------------ [ 66.546648][ C0] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 66.548726][ C0] WARNING: CPU: 0 PID: 0 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1588 [ 66.551285][ C0] Modules linked in: [ 66.552348][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G W 5.15.178-syzkaller #0 [ 66.554823][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 66.557564][ C0] pstate: 604000c5 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 66.559704][ C0] pc : usb_submit_urb+0xa44/0x1588 [ 66.561112][ C0] lr : usb_submit_urb+0xa44/0x1588 [ 66.562553][ C0] sp : ffff8000080075e0 [ 66.563700][ C0] x29: ffff800008007620 x28: 0000000000000001 x27: ffff800012d51948 [ 66.565835][ C0] x26: ffff0000ce906300 x25: ffff0000cb506000 x24: 0000000000000400 [ 66.568014][ C0] x23: ffff800012d58200 x22: dfff800000000000 x21: 0000000000000002 [ 66.570209][ C0] x20: 0000000000000a20 x19: ffff0000cd26d600 x18: 0000000000000102 [ 66.570334][ T21] usb 1-1: USB disconnect, device number 4 [ 66.572435][ C0] x17: 0000000000000000 x16: ffff800008336568 x15: 00000000ffffffff [ 66.576167][ C0] x14: ffff800014b94b80 x13: 0000000000000001 x12: 0000000000000001 [ 66.578296][ C0] x11: 0000000000000101 x10: 0000000000000000 x9 : 60d5a6a0ca26e900 [ 66.580546][ C0] x8 : 60d5a6a0ca26e900 x7 : 0000000000000001 x6 : 0000000000000001 [ 66.582615][ C0] x5 : ffff800008006d58 x4 : ffff800014c50660 x3 : ffff8000083366b4 [ 66.584804][ C0] x2 : 0000000000000001 x1 : 0000000000000101 x0 : 0000000000000029 [ 66.587003][ C0] Call trace: [ 66.587883][ C0] usb_submit_urb+0xa44/0x1588 [ 66.589210][ C0] bcm5974_irq_trackpad+0x20c/0xdd0 [ 66.590625][ C0] __usb_hcd_giveback_urb+0x2e0/0x518 [ 66.592006][ C0] usb_hcd_giveback_urb+0x108/0x41c [ 66.593351][ C0] dummy_timer+0x66c/0x26cc [ 66.594515][ C0] call_timer_fn+0x19c/0x8f0 [ 66.595693][ C0] __run_timers+0x554/0x718 [ 66.596913][ C0] run_timer_softirq+0x7c/0x114 [ 66.598230][ C0] handle_softirqs+0x384/0xdbc [ 66.599446][ C0] __irq_exit_rcu+0x268/0x4d8 [ 66.600674][ C0] irq_exit+0x14/0x88 [ 66.601780][ C0] handle_domain_irq+0xf4/0x178 [ 66.602989][ C0] gic_handle_irq+0x78/0x1c8 [ 66.604220][ C0] call_on_irq_stack+0x24/0x4c [ 66.605520][ C0] do_interrupt_handler+0x74/0x94 [ 66.606858][ C0] el1_interrupt+0x30/0x58 [ 66.608110][ C0] el1h_64_irq_handler+0x18/0x24 [ 66.609474][ C0] el1h_64_irq+0x78/0x7c [ 66.610612][ C0] arch_local_irq_enable+0xc/0x18 [ 66.611959][ C0] default_idle_call+0xcc/0x4a8 [ 66.613258][ C0] do_idle+0x1d4/0x4dc [ 66.614371][ C0] cpu_startup_entry+0x24/0x28 [ 66.615766][ C0] rest_init+0x364/0x38c [ 66.616919][ C0] arch_call_rest_init+0x14/0x20 [ 66.618231][ C0] start_kernel+0x440/0x600 [ 66.619469][ C0] __primary_switched+0xa8/0xb0 [ 66.620780][ C0] irq event stamp: 287227 [ 66.621925][ C0] hardirqs last enabled at (287226): [] _raw_spin_unlock_irq+0x9c/0x134 [ 66.624617][ C0] hardirqs last disabled at (287227): [] _raw_spin_lock_irqsave+0xfc/0x14c [ 66.627433][ C0] softirqs last enabled at (287034): [] handle_softirqs+0xb88/0xdbc [ 66.629981][ C0] softirqs last disabled at (287207): [] __irq_exit_rcu+0x268/0x4d8 [ 66.632461][ C0] ---[ end trace b04a6ebb73ceca84 ]--- [ 66.633962][ C0] bcm5974 1-1:0.10: trackpad urb failed: -2 [ 66.639151][ T4296] bcm5974 1-1:0.10: could not read from device [ 67.357965][ T1961] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 67.467953][ T3606] Bluetooth: hci0: command 0x0419 tx timeout [ 67.768034][ T1961] usb 1-1: config 0 has an invalid interface number: 10 but max is 0 [ 67.770147][ T1961] usb 1-1: config 0 has no interface number 0 [ 67.771749][ T1961] usb 1-1: config 0 interface 10 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 67.774493][ T1961] usb 1-1: config 0 interface 10 altsetting 0 endpoint 0x81 has invalid maxpacket 21669, setting to 1024 [ 67.777396][ T1961] usb 1-1: config 0 interface 10 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 67.780226][ T1961] usb 1-1: config 0 interface 10 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 67.938132][ T1961] usb 1-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice=d4.d7 [ 67.940822][ T1961] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.942883][ T1961] usb 1-1: Product: syz [ 67.943987][ T1961] usb 1-1: Manufacturer: syz [ 67.945130][ T1961] usb 1-1: SerialNumber: syz [ 67.948551][ T1961] usb 1-1: config 0 descriptor?? [ 67.968263][ T4632] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 67.991124][ T1961] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.10/input/input5 [ 68.418005][ T4296] ------------[ cut here ]------------ [ 68.419735][ T4296] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 68.421688][ T4296] WARNING: CPU: 1 PID: 4296 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1588 [ 68.424330][ T4296] Modules linked in: [ 68.425350][ T4296] CPU: 1 PID: 4296 Comm: udevd Tainted: G W 5.15.178-syzkaller #0 [ 68.427771][ T4296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 68.430550][ T4296] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 68.432715][ T4296] pc : usb_submit_urb+0xa44/0x1588 [ 68.434049][ T4296] lr : usb_submit_urb+0xa44/0x1588 [ 68.435449][ T4296] sp : ffff800020007370 [ 68.436544][ T4296] x29: ffff8000200073b0 x28: 0000000000000001 x27: ffff800012d51948 [ 68.438667][ T4296] x26: ffff0000d662c500 x25: ffff0000d1145000 x24: 0000000000000400 [ 68.440835][ T4296] x23: ffff800012d58200 x22: dfff800000000000 x21: 0000000000000002 [ 68.443027][ T4296] x20: 0000000000000cc0 x19: ffff0000ccbbb600 x18: 0000000000000001 [ 68.445199][ T4296] x17: 0000000000000000 x16: ffff800011b4e3fc x15: 00000000ffffffff [ 68.447339][ T4296] x14: ffff0000d7e9d1c0 x13: 0000000000000001 x12: 0000000000000001 [ 68.449490][ T4296] x11: 0000000000000000 x10: 0000000000000000 x9 : e50276e685ecd100 [ 68.451707][ T4296] x8 : e50276e685ecd100 x7 : 0000000000000001 x6 : 0000000000000001 [ 68.453866][ T4296] x5 : ffff800020006ad8 x4 : ffff800014c50660 x3 : ffff8000085568c0 [ 68.455994][ T4296] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000029 [ 68.458174][ T4296] Call trace: [ 68.459074][ T4296] usb_submit_urb+0xa44/0x1588 [ 68.460383][ T4296] bcm5974_start_traffic+0xe0/0x154 [ 68.461836][ T4296] bcm5974_open+0x98/0x134 [ 68.463065][ T4296] input_open_device+0x170/0x29c [ 68.464451][ T4296] evdev_open+0x308/0x4b4 [ 68.465642][ T4296] chrdev_open+0x3e8/0x4fc [ 68.466877][ T4296] do_dentry_open+0x780/0xed8 [ 68.468171][ T4296] vfs_open+0x7c/0x90 [ 68.469327][ T4296] path_openat+0x1ea0/0x26cc [ 68.470596][ T4296] do_filp_open+0x1a8/0x3b4 [ 68.471798][ T4296] do_sys_openat2+0x128/0x3e0 [ 68.473036][ T4296] __arm64_sys_openat+0x1f0/0x240 [ 68.474420][ T4296] invoke_syscall+0x98/0x2b8 [ 68.475659][ T4296] el0_svc_common+0x138/0x258 [ 68.476868][ T4296] do_el0_svc+0x58/0x14c [ 68.477984][ T4296] el0_svc+0x7c/0x1f0 [ 68.479054][ T4296] el0t_64_sync_handler+0x84/0xe4 [ 68.480406][ T4296] el0t_64_sync+0x1a0/0x1a4 [ 68.481614][ T4296] irq event stamp: 27934 [ 68.482767][ T4296] hardirqs last enabled at (27933): [] __up_console_sem+0xb4/0x100 [ 68.485355][ T4296] hardirqs last disabled at (27934): [] el1_dbg+0x24/0x80 [ 68.487692][ T4296] softirqs last enabled at (25356): [] local_bh_enable+0x10/0x34 [ 68.490247][ T4296] softirqs last disabled at (25354): [] local_bh_disable+0x10/0x34 [ 68.492818][ T4296] ---[ end trace b04a6ebb73ceca85 ]--- [ 68.507910][ C1] ------------[ cut here ]------------ [ 68.509343][ C1] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 68.511164][ C1] WARNING: CPU: 1 PID: 0 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1588 [ 68.513613][ C1] Modules linked in: [ 68.514590][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G W 5.15.178-syzkaller #0 [ 68.516928][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 68.519590][ C1] pstate: 604000c5 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 68.521635][ C1] pc : usb_submit_urb+0xa44/0x1588 [ 68.522992][ C1] lr : usb_submit_urb+0xa44/0x1588 [ 68.524333][ C1] sp : ffff8000080175e0 [ 68.525344][ C1] x29: ffff800008017620 x28: 0000000000000001 x27: ffff800012d51948 [ 68.527639][ C1] x26: ffff0000d662c500 x25: ffff0000d1145000 x24: 0000000000000400 [ 68.529857][ C1] x23: ffff800012d58200 x22: dfff800000000000 x21: 0000000000000002 [ 68.531973][ C1] x20: 0000000000000a20 x19: ffff0000ccbbb600 x18: 0000000000000102 [ 68.534121][ C1] x17: 0000000000000000 x16: ffff800011b4e3fc x15: 00000000ffffffff [ 68.536235][ C1] x14: ffff0000c0a68000 x13: 0000000000000001 x12: 0000000000000001 [ 68.538381][ C1] x11: 0000000000000101 x10: 0000000000000000 x9 : 8777808d28c80600 [ 68.540499][ C1] x8 : 8777808d28c80600 x7 : 0000000000000001 x6 : 0000000000000001 [ 68.542750][ C1] x5 : ffff800008016d58 x4 : ffff800014c50660 x3 : ffff8000085568c0 [ 68.544996][ C1] x2 : 0000000000000001 x1 : 0000000100000101 x0 : 0000000000000029 [ 68.547226][ C1] Call trace: [ 68.548056][ C1] usb_submit_urb+0xa44/0x1588 [ 68.549273][ C1] bcm5974_irq_trackpad+0x20c/0xdd0 [ 68.550640][ C1] __usb_hcd_giveback_urb+0x2e0/0x518 [ 68.552155][ C1] usb_hcd_giveback_urb+0x108/0x41c [ 68.553546][ C1] dummy_timer+0x66c/0x26cc [ 68.554842][ C1] call_timer_fn+0x19c/0x8f0 [ 68.556089][ C1] __run_timers+0x554/0x718 [ 68.557369][ C1] run_timer_softirq+0x7c/0x114 [ 68.558740][ C1] handle_softirqs+0x384/0xdbc [ 68.559951][ C1] __irq_exit_rcu+0x268/0x4d8 [ 68.561268][ C1] irq_exit+0x14/0x88 [ 68.562359][ C1] handle_domain_irq+0xf4/0x178 [ 68.563661][ C1] gic_handle_irq+0x78/0x1c8 [ 68.564986][ C1] call_on_irq_stack+0x24/0x4c [ 68.566266][ C1] do_interrupt_handler+0x74/0x94 [ 68.567634][ C1] el1_interrupt+0x30/0x58 [ 68.568854][ C1] el1h_64_irq_handler+0x18/0x24 [ 68.570242][ C1] el1h_64_irq+0x78/0x7c [ 68.571447][ C1] arch_local_irq_enable+0xc/0x18 [ 68.572797][ C1] default_idle_call+0xcc/0x4a8 [ 68.574134][ C1] do_idle+0x1d4/0x4dc [ 68.575251][ C1] cpu_startup_entry+0x24/0x28 [ 68.576696][ C1] secondary_start_kernel+0x240/0x298 [ 68.578116][ C1] __secondary_switched+0x94/0x98 [ 68.579552][ C1] irq event stamp: 247837 [ 68.580786][ C1] hardirqs last enabled at (247836): [] _raw_spin_unlock_irq+0x9c/0x134 [ 68.583501][ C1] hardirqs last disabled at (247837): [] _raw_spin_lock_irqsave+0xfc/0x14c [ 68.586187][ C1] softirqs last enabled at (247820): [] handle_softirqs+0xb88/0xdbc [ 68.588817][ C1] softirqs last disabled at (247833): [] __irq_exit_rcu+0x268/0x4d8 [ 68.591421][ C1] ---[ end trace b04a6ebb73ceca86 ]--- [ 68.593059][ C1] ------------[ cut here ]------------ [ 68.594503][ C1] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 68.596575][ C1] WARNING: CPU: 1 PID: 0 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1588 [ 68.599066][ C1] Modules linked in: [ 68.600180][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G W 5.15.178-syzkaller #0 [ 68.602724][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 68.605473][ C1] pstate: 604000c5 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 68.607605][ C1] pc : usb_submit_urb+0xa44/0x1588 [ 68.608956][ C1] lr : usb_submit_urb+0xa44/0x1588 [ 68.610309][ C1] sp : ffff8000080175e0 [ 68.611397][ C1] x29: ffff800008017620 x28: 0000000000000001 x27: ffff800012d51948 [ 68.613442][ C1] x26: ffff0000d662c500 x25: ffff0000d1145000 x24: 0000000000000400 [ 68.615647][ C1] x23: ffff800012d58200 x22: dfff800000000000 x21: 0000000000000002 [ 68.617749][ C1] x20: 0000000000000a20 x19: ffff0000ccbbb600 x18: 0000000000000102 [ 68.619260][ T7] usb 1-1: USB disconnect, device number 5 [ 68.619943][ C1] x17: 0000000000000000 x16: ffff800008336568 x15: 00000000ffffffff [ 68.623658][ C1] x14: ffff0000c0a68000 x13: 0000000000000001 x12: 0000000000000001 [ 68.625869][ C1] x11: 0000000000000101 x10: 0000000000000000 x9 : 8777808d28c80600 [ 68.628123][ C1] x8 : 8777808d28c80600 x7 : 0000000000000001 x6 : 0000000000000001 [ 68.630407][ C1] x5 : ffff800008016d58 x4 : ffff800014c50660 x3 : ffff8000083366b4 [ 68.632549][ C1] x2 : 0000000000000001 x1 : 0000000000000101 x0 : 0000000000000029 [ 68.634634][ C1] Call trace: [ 68.635493][ C1] usb_submit_urb+0xa44/0x1588 [ 68.636737][ C1] bcm5974_irq_trackpad+0x20c/0xdd0 [ 68.638144][ C1] __usb_hcd_giveback_urb+0x2e0/0x518 [ 68.639686][ C1] usb_hcd_giveback_urb+0x108/0x41c [ 68.641133][ C1] dummy_timer+0x66c/0x26cc [ 68.642379][ C1] call_timer_fn+0x19c/0x8f0 [ 68.643638][ C1] __run_timers+0x554/0x718 [ 68.644896][ C1] run_timer_softirq+0x7c/0x114 [ 68.646170][ C1] handle_softirqs+0x384/0xdbc [ 68.647457][ C1] __irq_exit_rcu+0x268/0x4d8 [ 68.648790][ C1] irq_exit+0x14/0x88 [ 68.649868][ C1] handle_domain_irq+0xf4/0x178 [ 68.651203][ C1] gic_handle_irq+0x78/0x1c8 [ 68.652394][ C1] call_on_irq_stack+0x24/0x4c [ 68.653783][ C1] do_interrupt_handler+0x74/0x94 [ 68.655248][ C1] el1_interrupt+0x30/0x58 [ 68.656405][ C1] el1h_64_irq_handler+0x18/0x24 [ 68.657747][ C1] el1h_64_irq+0x78/0x7c [ 68.658903][ C1] arch_local_irq_enable+0xc/0x18 [ 68.660261][ C1] default_idle_call+0xcc/0x4a8 [ 68.661516][ C1] do_idle+0x1d4/0x4dc [ 68.662612][ C1] cpu_startup_entry+0x24/0x28 [ 68.663884][ C1] secondary_start_kernel+0x240/0x298 [ 68.665318][ C1] __secondary_switched+0x94/0x98 [ 68.666711][ C1] irq event stamp: 247851 [ 68.667899][ C1] hardirqs last enabled at (247850): [] _raw_spin_unlock_irq+0x9c/0x134 [ 68.670521][ C1] hardirqs last disabled at (247851): [] _raw_spin_lock_irqsave+0xfc/0x14c [ 68.673198][ C1] softirqs last enabled at (247820): [] handle_softirqs+0xb88/0xdbc [ 68.675809][ C1] softirqs last disabled at (247833): [] __irq_exit_rcu+0x268/0x4d8 [ 68.678342][ C1] ---[ end trace b04a6ebb73ceca87 ]--- [ 68.679850][ C1] bcm5974 1-1:0.10: trackpad urb failed: -2 [ 68.688063][ T4296] bcm5974 1-1:0.10: could not read from device [ 69.407959][ T7] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 69.630987][ T2057] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.632824][ T2057] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.778029][ T7] usb 1-1: config 0 has an invalid interface number: 10 but max is 0 [ 69.780301][ T7] usb 1-1: config 0 has no interface number 0 [ 69.781939][ T7] usb 1-1: config 0 interface 10 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 69.784858][ T7] usb 1-1: config 0 interface 10 altsetting 0 endpoint 0x81 has invalid maxpacket 21669, setting to 1024 [ 69.791013][ T7] usb 1-1: config 0 interface 10 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 69.793802][ T7] usb 1-1: config 0 interface 10 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 69.948016][ T7] usb 1-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice=d4.d7 [ 69.950751][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.952883][ T7] usb 1-1: Product: syz [ 69.954007][ T7] usb 1-1: Manufacturer: syz [ 69.955199][ T7] usb 1-1: SerialNumber: syz [ 69.959690][ T7] usb 1-1: config 0 descriptor?? [ 69.978283][ T4634] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 70.000950][ T7] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.10/input/input6 [ 70.438136][ T4296] ------------[ cut here ]------------ [ 70.439654][ T4296] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 70.441662][ T4296] WARNING: CPU: 0 PID: 4296 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1588 [ 70.444283][ T4296] Modules linked in: [ 70.445292][ T4296] CPU: 0 PID: 4296 Comm: udevd Tainted: G W 5.15.178-syzkaller #0 [ 70.447601][ T4296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 70.450330][ T4296] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 70.452410][ T4296] pc : usb_submit_urb+0xa44/0x1588 [ 70.453776][ T4296] lr : usb_submit_urb+0xa44/0x1588 [ 70.455162][ T4296] sp : ffff800020007370 [ 70.456285][ T4296] x29: ffff8000200073b0 x28: 0000000000000001 x27: ffff800012d51948 [ 70.458658][ T4296] x26: ffff0000d7c5ce00 x25: ffff0000d1515000 x24: 0000000000000400 [ 70.460762][ T4296] x23: ffff800012d58200 x22: dfff800000000000 x21: 0000000000000002 [ 70.462852][ T4296] x20: 0000000000000cc0 x19: ffff0000ccbb3e00 x18: 0000000000000001 [ 70.464934][ T4296] x17: 0000000000000000 x16: ffff800011b4e3fc x15: 00000000ffffffff [ 70.467021][ T4296] x14: ffff0000d7e9d1c0 x13: 0000000000000001 x12: 0000000000000001 [ 70.469218][ T4296] x11: 0000000000000000 x10: 0000000000000000 x9 : e50276e685ecd100 [ 70.471305][ T4296] x8 : e50276e685ecd100 x7 : 0000000000000001 x6 : 0000000000000001 [ 70.473442][ T4296] x5 : ffff800020006ad8 x4 : ffff800014c50660 x3 : ffff8000085568c0 [ 70.475601][ T4296] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000029 [ 70.477671][ T4296] Call trace: [ 70.478509][ T4296] usb_submit_urb+0xa44/0x1588 [ 70.479829][ T4296] bcm5974_start_traffic+0xe0/0x154 [ 70.481311][ T4296] bcm5974_open+0x98/0x134 [ 70.482537][ T4296] input_open_device+0x170/0x29c [ 70.483875][ T4296] evdev_open+0x308/0x4b4 [ 70.485026][ T4296] chrdev_open+0x3e8/0x4fc [ 70.486181][ T4296] do_dentry_open+0x780/0xed8 [ 70.487415][ T4296] vfs_open+0x7c/0x90 [ 70.488456][ T4296] path_openat+0x1ea0/0x26cc [ 70.489691][ T4296] do_filp_open+0x1a8/0x3b4 [ 70.490866][ T4296] do_sys_openat2+0x128/0x3e0 [ 70.492138][ T4296] __arm64_sys_openat+0x1f0/0x240 [ 70.493432][ T4296] invoke_syscall+0x98/0x2b8 [ 70.494670][ T4296] el0_svc_common+0x138/0x258 [ 70.495913][ T4296] do_el0_svc+0x58/0x14c [ 70.497071][ T4296] el0_svc+0x7c/0x1f0 [ 70.498104][ T4296] el0t_64_sync_handler+0x84/0xe4 [ 70.499450][ T4296] el0t_64_sync+0x1a0/0x1a4 [ 70.500666][ T4296] irq event stamp: 33718 [ 70.501749][ T4296] hardirqs last enabled at (33717): [] __up_console_sem+0xb4/0x100 [ 70.504345][ T4296] hardirqs last disabled at (33718): [] el1_dbg+0x24/0x80 [ 70.506694][ T4296] softirqs last enabled at (33450): [] local_bh_enable+0x10/0x34 [ 70.509192][ T4296] softirqs last disabled at (33448): [] local_bh_disable+0x10/0x34 [ 70.511618][ T4296] ---[ end trace b04a6ebb73ceca88 ]--- [ 70.527887][ C0] ------------[ cut here ]------------ [ 70.529283][ C0] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 70.531203][ C0] WARNING: CPU: 0 PID: 0 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1588 [ 70.533801][ C0] Modules linked in: [ 70.534704][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G W 5.15.178-syzkaller #0 [ 70.537242][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 70.539964][ C0] pstate: 604000c5 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 70.542084][ C0] pc : usb_submit_urb+0xa44/0x1588 [ 70.543438][ C0] lr : usb_submit_urb+0xa44/0x1588 [ 70.544835][ C0] sp : ffff8000080075e0 [ 70.545938][ C0] x29: ffff800008007620 x28: 0000000000000001 x27: ffff800012d51948 [ 70.548253][ C0] x26: ffff0000d7c5ce00 x25: ffff0000d1515000 x24: 0000000000000400 [ 70.550447][ C0] x23: ffff800012d58200 x22: dfff800000000000 x21: 0000000000000002 [ 70.552640][ C0] x20: 0000000000000a20 x19: ffff0000ccbb3e00 x18: 0000000000000102 [ 70.554696][ C0] x17: 0000000000000000 x16: ffff800011b4e3fc x15: 00000000ffffffff [ 70.556800][ C0] x14: ffff800014b94b80 x13: 0000000000000001 x12: 0000000000000001 [ 70.558966][ C0] x11: 0000000000000101 x10: 0000000000000000 x9 : 60d5a6a0ca26e900 [ 70.561127][ C0] x8 : 60d5a6a0ca26e900 x7 : 0000000000000001 x6 : 0000000000000001 [ 70.563258][ C0] x5 : ffff800008006d58 x4 : ffff800014c50660 x3 : ffff8000085568c0 [ 70.565461][ C0] x2 : 0000000000000001 x1 : 0000000100000101 x0 : 0000000000000029 [ 70.567678][ C0] Call trace: [ 70.568531][ C0] usb_submit_urb+0xa44/0x1588 [ 70.569769][ C0] bcm5974_irq_trackpad+0x20c/0xdd0 [ 70.571238][ C0] __usb_hcd_giveback_urb+0x2e0/0x518 [ 70.572722][ C0] usb_hcd_giveback_urb+0x108/0x41c [ 70.574146][ C0] dummy_timer+0x66c/0x26cc [ 70.575394][ C0] call_timer_fn+0x19c/0x8f0 [ 70.576683][ C0] __run_timers+0x554/0x718 [ 70.577917][ C0] run_timer_softirq+0x7c/0x114 [ 70.579162][ C0] handle_softirqs+0x384/0xdbc [ 70.580465][ C0] __irq_exit_rcu+0x268/0x4d8 [ 70.581731][ C0] irq_exit+0x14/0x88 [ 70.582852][ C0] handle_domain_irq+0xf4/0x178 [ 70.584162][ C0] gic_handle_irq+0x78/0x1c8 [ 70.585368][ C0] call_on_irq_stack+0x24/0x4c [ 70.586622][ C0] do_interrupt_handler+0x74/0x94 [ 70.587916][ C0] el1_interrupt+0x30/0x58 [ 70.589072][ C0] el1h_64_irq_handler+0x18/0x24 [ 70.590453][ C0] el1h_64_irq+0x78/0x7c [ 70.591655][ C0] arch_local_irq_enable+0xc/0x18 [ 70.593077][ C0] default_idle_call+0xcc/0x4a8 [ 70.594336][ C0] do_idle+0x1d4/0x4dc [ 70.595364][ C0] cpu_startup_entry+0x24/0x28 [ 70.596613][ C0] rest_init+0x364/0x38c [ 70.597743][ C0] arch_call_rest_init+0x14/0x20 [ 70.599005][ C0] start_kernel+0x440/0x600 [ 70.600259][ C0] __primary_switched+0xa8/0xb0 [ 70.601544][ C0] irq event stamp: 319097 [ 70.602731][ C0] hardirqs last enabled at (319096): [] _raw_spin_unlock_irq+0x9c/0x134 [ 70.605427][ C0] hardirqs last disabled at (319097): [] _raw_spin_lock_irqsave+0xfc/0x14c [ 70.608217][ C0] softirqs last enabled at (319086): [] handle_softirqs+0xb88/0xdbc [ 70.610825][ C0] softirqs last disabled at (319093): [] __irq_exit_rcu+0x268/0x4d8 [ 70.613487][ C0] ---[ end trace b04a6ebb73ceca89 ]--- [ 70.639290][ T7] usb 1-1: USB disconnect, device number 6 [ 70.648148][ T4296] bcm5974 1-1:0.10: could not read from device 1970/01/01 00:01:11 executed programs: 5 [ 71.429249][ T7] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 71.788018][ T7] usb 1-1: config 0 has an invalid interface number: 10 but max is 0 [ 71.790409][ T7] usb 1-1: config 0 has no interface number 0 [ 71.791940][ T7] usb 1-1: config 0 interface 10 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 71.794762][ T7] usb 1-1: config 0 interface 10 altsetting 0 endpoint 0x81 has invalid maxpacket 21669, setting to 1024 [ 71.798203][ T7] usb 1-1: config 0 interface 10 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 71.800918][ T7] usb 1-1: config 0 interface 10 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 71.958059][ T7] usb 1-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice=d4.d7 [ 71.960587][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.962621][ T7] usb 1-1: Product: syz [ 71.963677][ T7] usb 1-1: Manufacturer: syz [ 71.964840][ T7] usb 1-1: SerialNumber: syz [ 71.969259][ T7] usb 1-1: config 0 descriptor?? [ 71.989195][ T4636] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 72.010947][ T7] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.10/input/input7