Warning: Permanently added '10.128.0.168' (ED25519) to the list of known hosts. 1970/01/01 00:01:05 ignoring optional flag "sandboxArg"="0" 1970/01/01 00:01:05 ignoring optional flag "type"="gce" 1970/01/01 00:01:05 parsed 1 programs [ 66.136703][ T4354] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS 1970/01/01 00:01:06 executed programs: 0 [ 66.273949][ T4364] chnl_net:caif_netlink_parms(): no params data found [ 66.308196][ T4364] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.310311][ T4364] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.313118][ T4364] device bridge_slave_0 entered promiscuous mode [ 66.317881][ T4364] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.319943][ T4364] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.322942][ T4364] device bridge_slave_1 entered promiscuous mode [ 66.337482][ T4364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.342072][ T4364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.358390][ T4364] team0: Port device team_slave_0 added [ 66.362534][ T4364] team0: Port device team_slave_1 added [ 66.375571][ T4364] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.377606][ T4364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.385045][ T4364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.389362][ T4364] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.391458][ T4364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.398609][ T4364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.462497][ T4364] device hsr_slave_0 entered promiscuous mode [ 66.530867][ T4364] device hsr_slave_1 entered promiscuous mode [ 67.298621][ T4364] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.342637][ T4364] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.392438][ T4364] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.434117][ T4364] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.596676][ T4364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.604412][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.607104][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.612885][ T4364] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.617426][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.620321][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.623782][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.625809][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.637998][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.640968][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.643792][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.646352][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.648386][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.651613][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.665807][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.669350][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.673130][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.676258][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.679267][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.689357][ T4364] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 67.693322][ T4364] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.697604][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.701829][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.704525][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.707557][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.710275][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.715192][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.801926][ T578] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.804116][ T578] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.821419][ T4364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.836077][ T578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.839102][ T578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.851998][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.854921][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.857967][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.863899][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.868876][ T4364] device veth0_vlan entered promiscuous mode [ 67.877350][ T4364] device veth1_vlan entered promiscuous mode [ 67.895425][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.898165][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.901331][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.904184][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.908821][ T4364] device veth0_macvtap entered promiscuous mode [ 67.914142][ T4364] device veth1_macvtap entered promiscuous mode [ 67.927954][ T4364] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.930244][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.933845][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.936576][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.939907][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.946405][ T4364] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.951875][ T4364] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.954490][ T4364] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.956956][ T4364] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.959333][ T4364] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.963884][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.966891][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.028223][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.031613][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.035007][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.058774][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.061272][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.064573][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.230910][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 68.382229][ T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 68.761999][ T7] usb 1-1: config 0 has an invalid interface number: 10 but max is 0 [ 68.766018][ T7] usb 1-1: config 0 has no interface number 0 [ 68.767708][ T7] usb 1-1: config 0 interface 10 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 68.771063][ T7] usb 1-1: config 0 interface 10 altsetting 0 endpoint 0x81 has invalid maxpacket 21669, setting to 1024 [ 68.774515][ T7] usb 1-1: config 0 interface 10 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 68.777361][ T7] usb 1-1: config 0 interface 10 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 68.980590][ T7] usb 1-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice=d4.d7 [ 68.983227][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.985457][ T7] usb 1-1: Product: syz [ 68.986715][ T7] usb 1-1: Manufacturer: syz [ 68.988027][ T7] usb 1-1: SerialNumber: syz [ 68.994094][ T7] usb 1-1: config 0 descriptor?? [ 69.011764][ T4468] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 69.035573][ T7] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.10/input/input2 [ 69.470835][ T4367] ------------[ cut here ]------------ [ 69.472717][ T4367] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 69.474695][ T4367] WARNING: CPU: 1 PID: 4367 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1580 [ 69.477195][ T4367] Modules linked in: [ 69.478255][ T4367] CPU: 1 PID: 4367 Comm: udevd Not tainted 5.15.189-syzkaller #0 [ 69.480323][ T4367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 69.483118][ T4367] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 69.485279][ T4367] pc : usb_submit_urb+0xa44/0x1580 [ 69.486633][ T4367] lr : usb_submit_urb+0xa44/0x1580 [ 69.488090][ T4367] sp : ffff80001f477470 [ 69.489191][ T4367] x29: ffff80001f4774b0 x28: 1fffe00018fc9003 x27: ffff80001239bb48 [ 69.491443][ T4367] x26: ffff0000d1fd2a00 x25: ffff0000c1815650 x24: 0000000000000400 [ 69.493655][ T4367] x23: ffff8000123a21a0 x22: dfff800000000000 x21: 0000000000000002 [ 69.495905][ T4367] x20: 0000000000000cc0 x19: ffff0000c1815600 x18: 0000000000000001 [ 69.498127][ T4367] x17: 0000000000000000 x16: ffff8000111bc798 x15: 00000000ffffffff [ 69.500385][ T4367] x14: 0000000000ff0100 x13: 0000000000000001 x12: 0000000000ff0100 [ 69.502585][ T4367] x11: 0000000000000000 x10: 0000000000000000 x9 : 5e24b82b9722b500 [ 69.504836][ T4367] x8 : 5e24b82b9722b500 x7 : 0000000000000001 x6 : 0000000000000001 [ 69.507089][ T4367] x5 : ffff80001f476d58 x4 : ffff80001424f400 x3 : ffff80000850433c [ 69.509308][ T4367] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000029 [ 69.511648][ T4367] Call trace: [ 69.512571][ T4367] usb_submit_urb+0xa44/0x1580 [ 69.513948][ T4367] bcm5974_start_traffic+0xe0/0x154 [ 69.515415][ T4367] bcm5974_open+0x94/0x130 [ 69.516627][ T4367] input_open_device+0x134/0x288 [ 69.518041][ T4367] evdev_open+0x3c4/0x468 [ 69.519236][ T4367] chrdev_open+0x26c/0x4f0 [ 69.520439][ T4367] do_dentry_open+0x760/0xebc [ 69.521863][ T4367] vfs_open+0x7c/0x90 [ 69.522984][ T4367] path_openat+0x1f80/0x26e4 [ 69.524279][ T4367] do_filp_open+0x164/0x330 [ 69.525482][ T4367] do_sys_openat2+0x128/0x3d8 [ 69.526786][ T4367] __arm64_sys_openat+0x120/0x154 [ 69.528164][ T4367] invoke_syscall+0x98/0x2b8 [ 69.529470][ T4367] el0_svc_common+0x138/0x258 [ 69.530742][ T4367] do_el0_svc+0x58/0x14c [ 69.531911][ T4367] el0_svc+0x78/0x1e0 [ 69.533088][ T4367] el0t_64_sync_handler+0xcc/0xe4 [ 69.534506][ T4367] el0t_64_sync+0x1a0/0x1a4 [ 69.535840][ T4367] irq event stamp: 5160 [ 69.537049][ T4367] hardirqs last enabled at (5159): [] __up_console_sem+0xb4/0x100 [ 69.539633][ T4367] hardirqs last disabled at (5160): [] el1_dbg+0x24/0x80 [ 69.542049][ T4367] softirqs last enabled at (5060): [] handle_softirqs+0xa4c/0xbf0 [ 69.544597][ T4367] softirqs last disabled at (5017): [] __irq_exit_rcu+0x240/0x440 [ 69.547253][ T4367] ---[ end trace 33a08994fc862f0a ]--- [ 69.570473][ C1] ------------[ cut here ]------------ [ 69.572254][ C1] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 69.574194][ C1] WARNING: CPU: 1 PID: 0 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1580 [ 69.576850][ C1] Modules linked in: [ 69.577955][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G W 5.15.189-syzkaller #0 [ 69.580467][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 69.583307][ C1] pstate: 604000c5 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 69.585639][ C1] pc : usb_submit_urb+0xa44/0x1580 [ 69.587152][ C1] lr : usb_submit_urb+0xa44/0x1580 [ 69.588569][ C1] sp : ffff800008017620 [ 69.589642][ C1] x29: ffff800008017660 x28: 1fffe00018fc9003 x27: ffff80001239bb48 [ 69.591915][ C1] x26: ffff0000d1fd2a00 x25: ffff0000c1815650 x24: 0000000000000400 [ 69.594105][ C1] x23: ffff8000123a21a0 x22: dfff800000000000 x21: 0000000000000002 [ 69.596305][ C1] x20: 0000000000000a20 x19: ffff0000c1815600 x18: 0000000000000102 [ 69.598500][ C1] x17: 0000000000000000 x16: ffff8000111bc798 x15: 00000000ffffffff [ 69.600823][ C1] x14: 0000000000ff0100 x13: 0000000000000001 x12: 0000000000ff0100 [ 69.603083][ C1] x11: 0000000000000101 x10: 0000000000000000 x9 : e89b41f8af048700 [ 69.605324][ C1] x8 : e89b41f8af048700 x7 : 0000000000000001 x6 : 0000000000000001 [ 69.607624][ C1] x5 : ffff800008016f18 x4 : ffff80001424f400 x3 : ffff80000850433c [ 69.609940][ C1] x2 : 0000000000000001 x1 : 0000000100000101 x0 : 0000000000000029 [ 69.612125][ C1] Call trace: [ 69.613073][ C1] usb_submit_urb+0xa44/0x1580 [ 69.614426][ C1] bcm5974_irq_trackpad+0x204/0xe88 [ 69.615915][ C1] __usb_hcd_giveback_urb+0x2e0/0x518 [ 69.617411][ C1] usb_hcd_giveback_urb+0x100/0x3e0 [ 69.618891][ C1] dummy_timer+0x5b8/0x231c [ 69.620174][ C1] call_timer_fn+0x19c/0x858 [ 69.621473][ C1] __run_timers+0x46c/0x6c4 [ 69.622726][ C1] run_timer_softirq+0x7c/0x114 [ 69.624044][ C1] handle_softirqs+0x344/0xbf0 [ 69.625381][ C1] __irq_exit_rcu+0x240/0x440 [ 69.626785][ C1] irq_exit+0x14/0x88 [ 69.627868][ C1] handle_domain_irq+0x14c/0x1fc [ 69.629259][ C1] gic_handle_irq+0x78/0x1c8 [ 69.630595][ C1] call_on_irq_stack+0x24/0x30 [ 69.631960][ C1] do_interrupt_handler+0x6c/0x88 [ 69.633463][ C1] el1_interrupt+0x30/0x58 [ 69.634651][ C1] el1h_64_irq_handler+0x18/0x24 [ 69.636022][ C1] el1h_64_irq+0x78/0x7c [ 69.637224][ C1] arch_local_irq_enable+0xc/0x18 [ 69.638639][ C1] default_idle_call+0xcc/0x418 [ 69.639964][ C1] do_idle+0x1c8/0x480 [ 69.641066][ C1] cpu_startup_entry+0x24/0x28 [ 69.642424][ C1] secondary_start_kernel+0x23c/0x294 [ 69.643983][ C1] __secondary_switched+0x94/0x98 [ 69.645351][ C1] irq event stamp: 227083 [ 69.646515][ C1] hardirqs last enabled at (227082): [] _raw_spin_unlock_irq+0x98/0x128 [ 69.649371][ C1] hardirqs last disabled at (227083): [] _raw_spin_lock_irqsave+0xfc/0x14c [ 69.652299][ C1] softirqs last enabled at (227066): [] handle_softirqs+0xa4c/0xbf0 [ 69.655074][ C1] softirqs last disabled at (227079): [] __irq_exit_rcu+0x240/0x440 [ 69.657805][ C1] ---[ end trace 33a08994fc862f0b ]--- [ 69.659676][ C1] ------------[ cut here ]------------ [ 69.661229][ C1] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 69.663215][ C1] WARNING: CPU: 1 PID: 0 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1580 [ 69.665754][ C1] Modules linked in: [ 69.666850][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G W 5.15.189-syzkaller #0 [ 69.669438][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 69.672340][ C1] pstate: 604000c5 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 69.674623][ C1] pc : usb_submit_urb+0xa44/0x1580 [ 69.676047][ C1] lr : usb_submit_urb+0xa44/0x1580 [ 69.677539][ C1] sp : ffff800008017620 [ 69.678761][ C1] x29: ffff800008017660 x28: 1fffe00018fc9003 x27: ffff80001239bb48 [ 69.681109][ C1] x26: ffff0000d1fd2a00 x25: ffff0000c1815650 x24: 0000000000000400 [ 69.683331][ C1] x23: ffff8000123a21a0 x22: dfff800000000000 x21: 0000000000000002 [ 69.685534][ T7] usb 1-1: USB disconnect, device number 2 [ 69.687161][ C1] x20: 0000000000000a20 x19: ffff0000c1815600 x18: 0000000000000102 [ 69.689290][ C1] x17: 0000000000000000 x16: ffff8000083020fc x15: 00000000ffffffff [ 69.691574][ C1] x14: 0000000000ff0100 x13: 0000000000000001 x12: 0000000000ff0100 [ 69.693902][ C1] x11: 0000000000000101 x10: 0000000000000000 x9 : e89b41f8af048700 [ 69.696160][ C1] x8 : e89b41f8af048700 x7 : 0000000000000001 x6 : 0000000000000001 [ 69.698321][ C1] x5 : ffff800008016f18 x4 : ffff80001424f400 x3 : ffff80000830220c [ 69.700480][ C1] x2 : 0000000000000001 x1 : 0000000000000101 x0 : 0000000000000029 [ 69.702871][ C1] Call trace: [ 69.703747][ C1] usb_submit_urb+0xa44/0x1580 [ 69.705096][ C1] bcm5974_irq_trackpad+0x204/0xe88 [ 69.706514][ C1] __usb_hcd_giveback_urb+0x2e0/0x518 [ 69.708031][ C1] usb_hcd_giveback_urb+0x100/0x3e0 [ 69.709527][ C1] dummy_timer+0x5b8/0x231c [ 69.710783][ C1] call_timer_fn+0x19c/0x858 [ 69.712081][ C1] __run_timers+0x46c/0x6c4 [ 69.713395][ C1] run_timer_softirq+0x7c/0x114 [ 69.714819][ C1] handle_softirqs+0x344/0xbf0 [ 69.716182][ C1] __irq_exit_rcu+0x240/0x440 [ 69.717513][ C1] irq_exit+0x14/0x88 [ 69.718570][ C1] handle_domain_irq+0x14c/0x1fc [ 69.719978][ C1] gic_handle_irq+0x78/0x1c8 [ 69.721243][ C1] call_on_irq_stack+0x24/0x30 [ 69.722624][ C1] do_interrupt_handler+0x6c/0x88 [ 69.724129][ C1] el1_interrupt+0x30/0x58 [ 69.725415][ C1] el1h_64_irq_handler+0x18/0x24 [ 69.726868][ C1] el1h_64_irq+0x78/0x7c [ 69.728156][ C1] arch_local_irq_enable+0xc/0x18 [ 69.729732][ C1] default_idle_call+0xcc/0x418 [ 69.731117][ C1] do_idle+0x1c8/0x480 [ 69.732323][ C1] cpu_startup_entry+0x24/0x28 [ 69.733650][ C1] secondary_start_kernel+0x23c/0x294 [ 69.735166][ C1] __secondary_switched+0x94/0x98 [ 69.736711][ C1] irq event stamp: 227113 [ 69.737957][ C1] hardirqs last enabled at (227112): [] _raw_spin_unlock_irq+0x98/0x128 [ 69.740831][ C1] hardirqs last disabled at (227113): [] _raw_spin_lock_irqsave+0xfc/0x14c [ 69.743737][ C1] softirqs last enabled at (227066): [] handle_softirqs+0xa4c/0xbf0 [ 69.746607][ C1] softirqs last disabled at (227079): [] __irq_exit_rcu+0x240/0x440 [ 69.749441][ C1] ---[ end trace 33a08994fc862f0c ]--- [ 69.751037][ C1] bcm5974 1-1:0.10: trackpad urb failed: -2 [ 69.755582][ T2054] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.757677][ T2054] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.771032][ T4367] bcm5974 1-1:0.10: could not read from device [ 70.311223][ T7] Bluetooth: hci0: command 0x041b tx timeout [ 70.480587][ T25] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 70.840945][ T25] usb 1-1: config 0 has an invalid interface number: 10 but max is 0 [ 70.843394][ T25] usb 1-1: config 0 has no interface number 0 [ 70.845226][ T25] usb 1-1: config 0 interface 10 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 70.848191][ T25] usb 1-1: config 0 interface 10 altsetting 0 endpoint 0x81 has invalid maxpacket 21669, setting to 1024 [ 70.851918][ T25] usb 1-1: config 0 interface 10 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 70.855031][ T25] usb 1-1: config 0 interface 10 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 71.012042][ T25] usb 1-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice=d4.d7 [ 71.014842][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.017054][ T25] usb 1-1: Product: syz [ 71.018202][ T25] usb 1-1: Manufacturer: syz [ 71.019457][ T25] usb 1-1: SerialNumber: syz [ 71.032926][ T25] usb 1-1: config 0 descriptor?? [ 71.051438][ T4592] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 71.074236][ T25] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.10/input/input3 [ 71.510940][ T4367] ------------[ cut here ]------------ [ 71.512450][ T4367] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 71.514540][ T4367] WARNING: CPU: 1 PID: 4367 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1580 [ 71.517222][ T4367] Modules linked in: [ 71.518287][ T4367] CPU: 1 PID: 4367 Comm: udevd Tainted: G W 5.15.189-syzkaller #0 [ 71.520799][ T4367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 71.523479][ T4367] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 71.525650][ T4367] pc : usb_submit_urb+0xa44/0x1580 [ 71.527117][ T4367] lr : usb_submit_urb+0xa44/0x1580 [ 71.528529][ T4367] sp : ffff80001f477470 [ 71.529672][ T4367] x29: ffff80001f4774b0 x28: 1fffe00019c44a03 x27: ffff80001239bb48 [ 71.531978][ T4367] x26: ffff0000cdcd9100 x25: ffff0000c142cc50 x24: 0000000000000400 [ 71.534182][ T4367] x23: ffff8000123a21a0 x22: dfff800000000000 x21: 0000000000000002 [ 71.536468][ T4367] x20: 0000000000000cc0 x19: ffff0000c142cc00 x18: 0000000000000001 [ 71.538735][ T4367] x17: 0000000000000000 x16: ffff8000111bc798 x15: 00000000ffffffff [ 71.540950][ T4367] x14: 0000000000ff0100 x13: 0000000000000001 x12: 0000000000ff0100 [ 71.543107][ T4367] x11: 0000000000000000 x10: 0000000000000000 x9 : 5e24b82b9722b500 [ 71.545390][ T4367] x8 : 5e24b82b9722b500 x7 : 0000000000000001 x6 : 0000000000000001 [ 71.547567][ T4367] x5 : ffff80001f476d58 x4 : ffff80001424f400 x3 : ffff80000850433c [ 71.549785][ T4367] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000029 [ 71.552007][ T4367] Call trace: [ 71.552908][ T4367] usb_submit_urb+0xa44/0x1580 [ 71.554273][ T4367] bcm5974_start_traffic+0xe0/0x154 [ 71.555701][ T4367] bcm5974_open+0x94/0x130 [ 71.556929][ T4367] input_open_device+0x134/0x288 [ 71.558269][ T4367] evdev_open+0x3c4/0x468 [ 71.559457][ T4367] chrdev_open+0x26c/0x4f0 [ 71.560670][ T4367] do_dentry_open+0x760/0xebc [ 71.561989][ T4367] vfs_open+0x7c/0x90 [ 71.563126][ T4367] path_openat+0x1f80/0x26e4 [ 71.564373][ T4367] do_filp_open+0x164/0x330 [ 71.565678][ T4367] do_sys_openat2+0x128/0x3d8 [ 71.567001][ T4367] __arm64_sys_openat+0x120/0x154 [ 71.568376][ T4367] invoke_syscall+0x98/0x2b8 [ 71.569703][ T4367] el0_svc_common+0x138/0x258 [ 71.571066][ T4367] do_el0_svc+0x58/0x14c [ 71.572253][ T4367] el0_svc+0x78/0x1e0 [ 71.573444][ T4367] el0t_64_sync_handler+0xcc/0xe4 [ 71.574862][ T4367] el0t_64_sync+0x1a0/0x1a4 [ 71.576118][ T4367] irq event stamp: 10790 [ 71.577329][ T4367] hardirqs last enabled at (10789): [] __up_console_sem+0xb4/0x100 [ 71.580015][ T4367] hardirqs last disabled at (10790): [] el1_dbg+0x24/0x80 [ 71.582435][ T4367] softirqs last enabled at (9450): [] handle_softirqs+0xa4c/0xbf0 [ 71.585232][ T4367] softirqs last disabled at (9423): [] __irq_exit_rcu+0x240/0x440 [ 71.588092][ T4367] ---[ end trace 33a08994fc862f0d ]--- [ 71.610466][ C1] ------------[ cut here ]------------ [ 71.612049][ C1] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 71.614095][ C1] WARNING: CPU: 1 PID: 0 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1580 [ 71.616736][ C1] Modules linked in: [ 71.617768][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G W 5.15.189-syzkaller #0 [ 71.620247][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 71.623328][ C1] pstate: 604000c5 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 71.625570][ C1] pc : usb_submit_urb+0xa44/0x1580 [ 71.627093][ C1] lr : usb_submit_urb+0xa44/0x1580 [ 71.628529][ C1] sp : ffff800008017620 [ 71.629800][ C1] x29: ffff800008017660 x28: 1fffe00019c44a03 x27: ffff80001239bb48 [ 71.632132][ C1] x26: ffff0000cdcd9100 x25: ffff0000c142cc50 x24: 0000000000000400 [ 71.634441][ C1] x23: ffff8000123a21a0 x22: dfff800000000000 x21: 0000000000000002 [ 71.636670][ C1] x20: 0000000000000a20 x19: ffff0000c142cc00 x18: 0000000000000102 [ 71.638940][ C1] x17: 0000000000000000 x16: ffff8000111bc798 x15: 00000000ffffffff [ 71.641265][ C1] x14: 0000000000ff0100 x13: 0000000000000001 x12: 0000000000ff0100 [ 71.643536][ C1] x11: 0000000000000101 x10: 0000000000000000 x9 : e89b41f8af048700 [ 71.645882][ C1] x8 : e89b41f8af048700 x7 : 0000000000000001 x6 : 0000000000000001 [ 71.648227][ C1] x5 : ffff800008016f18 x4 : ffff80001424f400 x3 : ffff80000850433c [ 71.650478][ C1] x2 : 0000000000000001 x1 : 0000000100000101 x0 : 0000000000000029 [ 71.652781][ C1] Call trace: [ 71.653716][ C1] usb_submit_urb+0xa44/0x1580 [ 71.655103][ C1] bcm5974_irq_trackpad+0x204/0xe88 [ 71.656591][ C1] __usb_hcd_giveback_urb+0x2e0/0x518 [ 71.658188][ C1] usb_hcd_giveback_urb+0x100/0x3e0 [ 71.659637][ C1] dummy_timer+0x5b8/0x231c [ 71.660994][ C1] call_timer_fn+0x19c/0x858 [ 71.662383][ C1] __run_timers+0x46c/0x6c4 [ 71.663715][ C1] run_timer_softirq+0x7c/0x114 [ 71.665142][ C1] handle_softirqs+0x344/0xbf0 [ 71.666534][ C1] __irq_exit_rcu+0x240/0x440 [ 71.667905][ C1] irq_exit+0x14/0x88 [ 71.669047][ C1] handle_domain_irq+0x14c/0x1fc [ 71.670474][ C1] gic_handle_irq+0x78/0x1c8 [ 71.671882][ C1] call_on_irq_stack+0x24/0x30 [ 71.673260][ C1] do_interrupt_handler+0x6c/0x88 [ 71.674823][ C1] el1_interrupt+0x30/0x58 [ 71.676295][ C1] el1h_64_irq_handler+0x18/0x24 [ 71.677759][ C1] el1h_64_irq+0x78/0x7c [ 71.679019][ C1] arch_local_irq_enable+0xc/0x18 [ 71.680425][ C1] default_idle_call+0xcc/0x418 [ 71.681828][ C1] do_idle+0x1c8/0x480 [ 71.682962][ C1] cpu_startup_entry+0x24/0x28 [ 71.684348][ C1] secondary_start_kernel+0x23c/0x294 [ 71.685929][ C1] __secondary_switched+0x94/0x98 [ 71.687418][ C1] irq event stamp: 243083 [ 71.688609][ C1] hardirqs last enabled at (243082): [] _raw_spin_unlock_irq+0x98/0x128 [ 71.691464][ C1] hardirqs last disabled at (243083): [] _raw_spin_lock_irqsave+0xfc/0x14c [ 71.694518][ C1] softirqs last enabled at (243060): [] handle_softirqs+0xa4c/0xbf0 [ 71.697291][ C1] softirqs last disabled at (243079): [] __irq_exit_rcu+0x240/0x440 [ 71.700033][ C1] ---[ end trace 33a08994fc862f0e ]--- [ 71.702705][ C1] ------------[ cut here ]------------ [ 71.704243][ C1] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 71.706184][ C1] WARNING: CPU: 1 PID: 0 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1580 [ 71.708824][ C1] Modules linked in: [ 71.709926][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G W 5.15.189-syzkaller #0 [ 71.712639][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 71.715462][ C1] pstate: 604000c5 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 71.717597][ C1] pc : usb_submit_urb+0xa44/0x1580 [ 71.719020][ C1] lr : usb_submit_urb+0xa44/0x1580 [ 71.720549][ C1] sp : ffff800008017620 [ 71.721803][ C1] x29: ffff800008017660 x28: 1fffe00019c44a03 x27: ffff80001239bb48 [ 71.724106][ C1] x26: ffff0000cdcd9100 x25: ffff0000c142cc50 x24: 0000000000000400 [ 71.726357][ C1] x23: ffff8000123a21a0 x22: dfff800000000000 x21: 0000000000000002 [ 71.728573][ C1] x20: 0000000000000a20 x19: ffff0000c142cc00 x18: 0000000000000102 [ 71.730799][ C1] x17: 0000000000000000 x16: ffff8000083020fc x15: 00000000ffffffff [ 71.733176][ C1] x14: 0000000000ff0100 x13: 0000000000000001 x12: 0000000000ff0100 [ 71.735441][ C1] x11: 0000000000000101 x10: 0000000000000000 x9 : e89b41f8af048700 [ 71.737686][ C1] x8 : e89b41f8af048700 x7 : 0000000000000001 x6 : 0000000000000001 [ 71.739921][ C1] x5 : ffff800008016f18 x4 : ffff80001424f400 x3 : ffff80000830220c [ 71.742207][ C1] x2 : 0000000000000001 x1 : 0000000000000101 x0 : 0000000000000029 [ 71.744488][ C1] Call trace: [ 71.745511][ C1] usb_submit_urb+0xa44/0x1580 [ 71.746890][ C1] bcm5974_irq_trackpad+0x204/0xe88 [ 71.748367][ C1] __usb_hcd_giveback_urb+0x2e0/0x518 [ 71.749869][ C1] usb_hcd_giveback_urb+0x100/0x3e0 [ 71.751373][ C1] dummy_timer+0x5b8/0x231c [ 71.752595][ C1] call_timer_fn+0x19c/0x858 [ 71.753897][ C1] __run_timers+0x46c/0x6c4 [ 71.755140][ C1] run_timer_softirq+0x7c/0x114 [ 71.756474][ C1] handle_softirqs+0x344/0xbf0 [ 71.757860][ C1] __irq_exit_rcu+0x240/0x440 [ 71.759189][ C1] irq_exit+0x14/0x88 [ 71.760257][ C1] handle_domain_irq+0x14c/0x1fc [ 71.761632][ C1] gic_handle_irq+0x78/0x1c8 [ 71.762985][ C1] call_on_irq_stack+0x24/0x30 [ 71.764332][ C1] do_interrupt_handler+0x6c/0x88 [ 71.765506][ C1] el1_interrupt+0x30/0x58 [ 71.766524][ C1] el1h_64_irq_handler+0x18/0x24 [ 71.767675][ C1] el1h_64_irq+0x78/0x7c [ 71.768647][ C1] arch_local_irq_enable+0xc/0x18 [ 71.769938][ C1] default_idle_call+0xcc/0x418 [ 71.771306][ C1] do_idle+0x1c8/0x480 [ 71.772424][ C1] cpu_startup_entry+0x24/0x28 [ 71.773695][ C1] secondary_start_kernel+0x23c/0x294 [ 71.775423][ C1] __secondary_switched+0x94/0x98 [ 71.776907][ C1] irq event stamp: 243183 [ 71.778248][ C1] hardirqs last enabled at (243182): [] _raw_spin_unlock_irq+0x98/0x128 [ 71.781188][ C1] hardirqs last disabled at (243183): [] _raw_spin_lock_irqsave+0xfc/0x14c [ 71.784105][ C1] softirqs last enabled at (243060): [] handle_softirqs+0xa4c/0xbf0 [ 71.787060][ C1] softirqs last disabled at (243079): [] __irq_exit_rcu+0x240/0x440 [ 71.789813][ C1] ---[ end trace 33a08994fc862f0f ]--- [ 71.791521][ C1] ------------[ cut here ]------------ [ 71.793020][ C1] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 71.794898][ C1] WARNING: CPU: 1 PID: 0 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1580 [ 71.797414][ C1] Modules linked in: [ 71.798552][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G W 5.15.189-syzkaller #0 [ 71.801263][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 71.804134][ C1] pstate: 604000c5 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 71.806371][ C1] pc : usb_submit_urb+0xa44/0x1580 [ 71.807823][ C1] lr : usb_submit_urb+0xa44/0x1580 [ 71.809322][ C1] sp : ffff800008017620 [ 71.810507][ C1] x29: ffff800008017660 x28: 1fffe00019c44a03 x27: ffff80001239bb48 [ 71.812721][ C1] x26: ffff0000cdcd9100 x25: ffff0000c142cc50 x24: 0000000000000400 [ 71.814953][ C1] x23: ffff8000123a21a0 x22: dfff800000000000 x21: 0000000000000002 [ 71.817195][ C1] x20: 0000000000000a20 x19: ffff0000c142cc00 x18: 0000000000000102 [ 71.819381][ C1] x17: 0000000000000000 x16: ffff8000083020fc x15: 00000000ffffffff [ 71.821601][ C1] x14: 0000000000ff0100 x13: 0000000000000001 x12: 0000000000ff0100 [ 71.824007][ C1] x11: 0000000000000101 x10: 0000000000000000 x9 : e89b41f8af048700 [ 71.826223][ C1] x8 : e89b41f8af048700 x7 : 0000000000000001 x6 : 0000000000000001 [ 71.828575][ C1] x5 : ffff800008016f18 x4 : ffff80001424f400 x3 : ffff80000830220c [ 71.830900][ C1] x2 : 0000000000000001 x1 : 0000000000000101 x0 : 0000000000000029 [ 71.833197][ C1] Call trace: [ 71.834121][ C1] usb_submit_urb+0xa44/0x1580 [ 71.835462][ C1] bcm5974_irq_trackpad+0x204/0xe88 [ 71.837043][ C1] __usb_hcd_giveback_urb+0x2e0/0x518 [ 71.838544][ C1] usb_hcd_giveback_urb+0x100/0x3e0 [ 71.840032][ C1] dummy_timer+0x5b8/0x231c [ 71.841343][ C1] call_timer_fn+0x19c/0x858 [ 71.842727][ C1] __run_timers+0x46c/0x6c4 [ 71.843980][ C1] run_timer_softirq+0x7c/0x114 [ 71.845285][ C1] handle_softirqs+0x344/0xbf0 [ 71.846562][ C1] __irq_exit_rcu+0x240/0x440 [ 71.847914][ C1] irq_exit+0x14/0x88 [ 71.849014][ C1] handle_domain_irq+0x14c/0x1fc [ 71.850328][ C1] gic_handle_irq+0x78/0x1c8 [ 71.851616][ C1] call_on_irq_stack+0x24/0x30 [ 71.853004][ C1] do_interrupt_handler+0x6c/0x88 [ 71.854402][ C1] el1_interrupt+0x30/0x58 [ 71.855623][ C1] el1h_64_irq_handler+0x18/0x24 [ 71.857038][ C1] el1h_64_irq+0x78/0x7c [ 71.858251][ C1] arch_local_irq_enable+0xc/0x18 [ 71.859686][ C1] default_idle_call+0xcc/0x418 [ 71.861030][ C1] do_idle+0x1c8/0x480 [ 71.862116][ C1] cpu_startup_entry+0x24/0x28 [ 71.863467][ C1] secondary_start_kernel+0x23c/0x294 [ 71.864984][ C1] __secondary_switched+0x94/0x98 [ 71.866351][ C1] irq event stamp: 243197 [ 71.867618][ C1] hardirqs last enabled at (243196): [] _raw_spin_unlock_irq+0x98/0x128 [ 71.870331][ C1] hardirqs last disabled at (243197): [] _raw_spin_lock_irqsave+0xfc/0x14c [ 71.873217][ C1] softirqs last enabled at (243060): [] handle_softirqs+0xa4c/0xbf0 [ 71.875902][ C1] softirqs last disabled at (243079): [] __irq_exit_rcu+0x240/0x440 [ 71.878519][ C1] ---[ end trace 33a08994fc862f10 ]--- [ 71.880246][ C1] ------------[ cut here ]------------ [ 71.881798][ C1] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 71.883838][ C1] WARNING: CPU: 1 PID: 0 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1580 [ 71.886386][ C1] Modules linked in: [ 71.887478][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G W 5.15.189-syzkaller #0 [ 71.890093][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 71.893220][ C1] pstate: 604000c5 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 71.895358][ C1] pc : usb_submit_urb+0xa44/0x1580 [ 71.896775][ C1] lr : usb_submit_urb+0xa44/0x1580 [ 71.898186][ C1] sp : ffff800008017620 [ 71.899337][ C1] x29: ffff800008017660 x28: 1fffe00019c44a03 x27: ffff80001239bb48 [ 71.901651][ C1] x26: ffff0000cdcd9100 x25: ffff0000c142cc50 x24: 0000000000000400 [ 71.903802][ C1] x23: ffff8000123a21a0 x22: dfff800000000000 x21: 0000000000000002 [ 71.906040][ C1] x20: 0000000000000a20 x19: ffff0000c142cc00 x18: 0000000000000102 [ 71.908340][ C1] x17: 0000000000000000 x16: ffff8000083020fc x15: 00000000ffffffff [ 71.910550][ C1] x14: 0000000000ff0100 x13: 0000000000000001 x12: 0000000000ff0100 [ 71.912831][ C1] x11: 0000000000000101 x10: 0000000000000000 x9 : e89b41f8af048700 [ 71.915090][ C1] x8 : e89b41f8af048700 x7 : 0000000000000001 x6 : 0000000000000001 [ 71.917295][ C1] x5 : ffff800008016f18 x4 : ffff80001424f400 x3 : ffff80000830220c [ 71.919533][ C1] x2 : 0000000000000001 x1 : 0000000000000101 x0 : 0000000000000029 [ 71.921747][ C1] Call trace: [ 71.922597][ C1] usb_submit_urb+0xa44/0x1580 [ 71.923909][ C1] bcm5974_irq_trackpad+0x204/0xe88 [ 71.925282][ C1] __usb_hcd_giveback_urb+0x2e0/0x518 [ 71.926871][ C1] usb_hcd_giveback_urb+0x100/0x3e0 [ 71.928277][ C1] dummy_timer+0x5b8/0x231c [ 71.929532][ C1] call_timer_fn+0x19c/0x858 [ 71.930818][ C1] __run_timers+0x46c/0x6c4 [ 71.932121][ C1] run_timer_softirq+0x7c/0x114 [ 71.933511][ C1] handle_softirqs+0x344/0xbf0 [ 71.934160][ T7] usb 1-1: USB disconnect, device number 3 [ 71.934803][ C1] __irq_exit_rcu+0x240/0x440 [ 71.937759][ C1] irq_exit+0x14/0x88 [ 71.938866][ C1] handle_domain_irq+0x14c/0x1fc [ 71.940342][ C1] gic_handle_irq+0x78/0x1c8 [ 71.941625][ C1] call_on_irq_stack+0x24/0x30 [ 71.942906][ C1] do_interrupt_handler+0x6c/0x88 [ 71.944300][ C1] el1_interrupt+0x30/0x58 [ 71.945478][ C1] el1h_64_irq_handler+0x18/0x24 [ 71.946861][ C1] el1h_64_irq+0x78/0x7c [ 71.948038][ C1] arch_local_irq_enable+0xc/0x18 [ 71.949514][ C1] default_idle_call+0xcc/0x418 [ 71.950920][ C1] do_idle+0x1c8/0x480 [ 71.952085][ C1] cpu_startup_entry+0x24/0x28 [ 71.953404][ C1] secondary_start_kernel+0x23c/0x294 [ 71.954928][ C1] __secondary_switched+0x94/0x98 [ 71.956315][ C1] irq event stamp: 243223 [ 71.957464][ C1] hardirqs last enabled at (243222): [] _raw_spin_unlock_irq+0x98/0x128 [ 71.960203][ C1] hardirqs last disabled at (243223): [] _raw_spin_lock_irqsave+0xfc/0x14c [ 71.962994][ C1] softirqs last enabled at (243060): [] handle_softirqs+0xa4c/0xbf0 [ 71.965713][ C1] softirqs last disabled at (243079): [] __irq_exit_rcu+0x240/0x440 [ 71.968369][ C1] ---[ end trace 33a08994fc862f11 ]--- [ 71.969883][ C1] bcm5974 1-1:0.10: trackpad urb failed: -2 [ 71.990773][ T4367] bcm5974 1-1:0.10: could not read from device [ 72.390600][ T7] Bluetooth: hci0: command 0x040f tx timeout 1970/01/01 00:01:12 executed programs: 2 [ 72.720678][ T25] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 73.080679][ T25] usb 1-1: config 0 has an invalid interface number: 10 but max is 0 [ 73.082961][ T25] usb 1-1: config 0 has no interface number 0 [ 73.084654][ T25] usb 1-1: config 0 interface 10 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 73.087545][ T25] usb 1-1: config 0 interface 10 altsetting 0 endpoint 0x81 has invalid maxpacket 21669, setting to 1024 [ 73.092050][ T25] usb 1-1: config 0 interface 10 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 73.094871][ T25] usb 1-1: config 0 interface 10 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 73.250716][ T25] usb 1-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice=d4.d7 [ 73.253447][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.255691][ T25] usb 1-1: Product: syz [ 73.256798][ T25] usb 1-1: Manufacturer: syz [ 73.258130][ T25] usb 1-1: SerialNumber: syz [ 73.267850][ T25] usb 1-1: config 0 descriptor?? [ 73.280988][ T4725] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 73.303732][ T25] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.10/input/input4 [ 73.750645][ T4367] ------------[ cut here ]------------ [ 73.752245][ T4367] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 73.754303][ T4367] WARNING: CPU: 0 PID: 4367 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1580 [ 73.756877][ T4367] Modules linked in: [ 73.757871][ T4367] CPU: 0 PID: 4367 Comm: udevd Tainted: G W 5.15.189-syzkaller #0 [ 73.760484][ T4367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 73.763239][ T4367] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 73.765346][ T4367] pc : usb_submit_urb+0xa44/0x1580 [ 73.766805][ T4367] lr : usb_submit_urb+0xa44/0x1580 [ 73.768293][ T4367] sp : ffff80001f477470 [ 73.769432][ T4367] x29: ffff80001f4774b0 x28: 1fffe0001a584003 x27: ffff80001239bb48 [ 73.771681][ T4367] x26: ffff0000cf346500 x25: ffff0000cbefa450 x24: 0000000000000400 [ 73.773933][ T4367] x23: ffff8000123a21a0 x22: dfff800000000000 x21: 0000000000000002 [ 73.776207][ T4367] x20: 0000000000000cc0 x19: ffff0000cbefa400 x18: 0000000000000001 [ 73.778479][ T4367] x17: 0000000000000000 x16: ffff8000111bc798 x15: 00000000ffffffff [ 73.780761][ T4367] x14: 0000000000ff0100 x13: 0000000000000001 x12: 0000000000ff0100 [ 73.782986][ T4367] x11: 0000000000000000 x10: 0000000000000000 x9 : 5e24b82b9722b500 [ 73.785196][ T4367] x8 : 5e24b82b9722b500 x7 : 0000000000000001 x6 : 0000000000000001 [ 73.787540][ T4367] x5 : ffff80001f476d58 x4 : ffff80001424f400 x3 : ffff80000850433c [ 73.789736][ T4367] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000029 [ 73.791978][ T4367] Call trace: [ 73.792882][ T4367] usb_submit_urb+0xa44/0x1580 [ 73.794192][ T4367] bcm5974_start_traffic+0xe0/0x154 [ 73.795651][ T4367] bcm5974_open+0x94/0x130 [ 73.797062][ T4367] input_open_device+0x134/0x288 [ 73.798562][ T4367] evdev_open+0x3c4/0x468 [ 73.799830][ T4367] chrdev_open+0x26c/0x4f0 [ 73.801101][ T4367] do_dentry_open+0x760/0xebc [ 73.802362][ T4367] vfs_open+0x7c/0x90 [ 73.803470][ T4367] path_openat+0x1f80/0x26e4 [ 73.804792][ T4367] do_filp_open+0x164/0x330 [ 73.806024][ T4367] do_sys_openat2+0x128/0x3d8 [ 73.807361][ T4367] __arm64_sys_openat+0x120/0x154 [ 73.808809][ T4367] invoke_syscall+0x98/0x2b8 [ 73.810184][ T4367] el0_svc_common+0x138/0x258 [ 73.811514][ T4367] do_el0_svc+0x58/0x14c [ 73.812683][ T4367] el0_svc+0x78/0x1e0 [ 73.813819][ T4367] el0t_64_sync_handler+0xcc/0xe4 [ 73.815224][ T4367] el0t_64_sync+0x1a0/0x1a4 [ 73.816467][ T4367] irq event stamp: 17082 [ 73.817686][ T4367] hardirqs last enabled at (17081): [] __up_console_sem+0xb4/0x100 [ 73.820398][ T4367] hardirqs last disabled at (17082): [] el1_dbg+0x24/0x80 [ 73.822917][ T4367] softirqs last enabled at (15204): [] handle_softirqs+0xa4c/0xbf0 [ 73.825634][ T4367] softirqs last disabled at (15187): [] __irq_exit_rcu+0x240/0x440 [ 73.828333][ T4367] ---[ end trace 33a08994fc862f12 ]--- [ 73.850461][ C0] ------------[ cut here ]------------ [ 73.852094][ C0] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 73.854127][ C0] WARNING: CPU: 0 PID: 0 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1580 [ 73.856816][ C0] Modules linked in: [ 73.857877][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G W 5.15.189-syzkaller #0 [ 73.860503][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 73.863280][ C0] pstate: 604000c5 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 73.865444][ C0] pc : usb_submit_urb+0xa44/0x1580 [ 73.866878][ C0] lr : usb_submit_urb+0xa44/0x1580 [ 73.868309][ C0] sp : ffff800008007620 [ 73.869477][ C0] x29: ffff800008007660 x28: 1fffe0001a584003 x27: ffff80001239bb48 [ 73.871652][ C0] x26: ffff0000cf346500 x25: ffff0000cbefa450 x24: 0000000000000400 [ 73.873882][ C0] x23: ffff8000123a21a0 x22: dfff800000000000 x21: 0000000000000002 [ 73.876193][ C0] x20: 0000000000000a20 x19: ffff0000cbefa400 x18: 0000000000000102 [ 73.878470][ C0] x17: 0000000000000000 x16: ffff8000111bc798 x15: 00000000ffffffff [ 73.880795][ C0] x14: 0000000000ff0100 x13: 0000000000000001 x12: 0000000000ff0100 [ 73.883037][ C0] x11: 0000000000000101 x10: 0000000000000000 x9 : e823332f085ee000 [ 73.885224][ C0] x8 : e823332f085ee000 x7 : 0000000000000001 x6 : 0000000000000001 [ 73.887510][ C0] x5 : ffff800008006f18 x4 : ffff80001424f400 x3 : ffff80000850433c [ 73.889653][ C0] x2 : 0000000000000001 x1 : 0000000100000101 x0 : 0000000000000029 [ 73.891954][ C0] Call trace: [ 73.892901][ C0] usb_submit_urb+0xa44/0x1580 [ 73.894302][ C0] bcm5974_irq_trackpad+0x204/0xe88 [ 73.895770][ C0] __usb_hcd_giveback_urb+0x2e0/0x518 [ 73.897266][ C0] usb_hcd_giveback_urb+0x100/0x3e0 [ 73.898781][ C0] dummy_timer+0x5b8/0x231c [ 73.900044][ C0] call_timer_fn+0x19c/0x858 [ 73.901265][ C0] __run_timers+0x46c/0x6c4 [ 73.902459][ C0] run_timer_softirq+0x7c/0x114 [ 73.903804][ C0] handle_softirqs+0x344/0xbf0 [ 73.905101][ C0] __irq_exit_rcu+0x240/0x440 [ 73.906349][ C0] irq_exit+0x14/0x88 [ 73.907528][ C0] handle_domain_irq+0x14c/0x1fc [ 73.908878][ C0] gic_handle_irq+0x78/0x1c8 [ 73.910190][ C0] call_on_irq_stack+0x24/0x30 [ 73.911600][ C0] do_interrupt_handler+0x6c/0x88 [ 73.913022][ C0] el1_interrupt+0x30/0x58 [ 73.914247][ C0] el1h_64_irq_handler+0x18/0x24 [ 73.915638][ C0] el1h_64_irq+0x78/0x7c [ 73.916837][ C0] arch_local_irq_enable+0xc/0x18 [ 73.918399][ C0] default_idle_call+0xcc/0x418 [ 73.919728][ C0] do_idle+0x1c8/0x480 [ 73.920839][ C0] cpu_startup_entry+0x24/0x28 [ 73.922160][ C0] rest_init+0x360/0x390 [ 73.923315][ C0] arch_call_rest_init+0x14/0x20 [ 73.924737][ C0] start_kernel+0x49c/0x54c [ 73.926006][ C0] __primary_switched+0xa8/0xb0 [ 73.927338][ C0] irq event stamp: 245147 [ 73.928509][ C0] hardirqs last enabled at (245146): [] _raw_spin_unlock_irq+0x98/0x128 [ 73.931321][ C0] hardirqs last disabled at (245147): [] _raw_spin_lock_irqsave+0xfc/0x14c [ 73.934256][ C0] softirqs last enabled at (245040): [] handle_softirqs+0xa4c/0xbf0 [ 73.936919][ C0] softirqs last disabled at (245143): [] __irq_exit_rcu+0x240/0x440 [ 73.939627][ C0] ---[ end trace 33a08994fc862f13 ]--- [ 73.941307][ C0] ------------[ cut here ]------------ [ 73.942802][ C0] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 73.944724][ C0] WARNING: CPU: 0 PID: 0 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1580 [ 73.947327][ C0] Modules linked in: [ 73.948367][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G W 5.15.189-syzkaller #0 [ 73.950846][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 73.952097][ T1534] usb 1-1: USB disconnect, device number 4 [ 73.953551][ C0] pstate: 604000c5 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 73.957354][ C0] pc : usb_submit_urb+0xa44/0x1580 [ 73.958821][ C0] lr : usb_submit_urb+0xa44/0x1580 [ 73.960273][ C0] sp : ffff800008007620 [ 73.961356][ C0] x29: ffff800008007660 x28: 1fffe0001a584003 x27: ffff80001239bb48 [ 73.963635][ C0] x26: ffff0000cf346500 x25: ffff0000cbefa450 x24: 0000000000000400 [ 73.965787][ C0] x23: ffff8000123a21a0 x22: dfff800000000000 x21: 0000000000000002 [ 73.967952][ C0] x20: 0000000000000a20 x19: ffff0000cbefa400 x18: 0000000000000102 [ 73.970196][ C0] x17: 0000000000000000 x16: ffff8000083020fc x15: 00000000ffffffff [ 73.972498][ C0] x14: 0000000000ff0100 x13: 0000000000000001 x12: 0000000000ff0100 [ 73.974713][ C0] x11: 0000000000000101 x10: 0000000000000000 x9 : e823332f085ee000 [ 73.976980][ C0] x8 : e823332f085ee000 x7 : 0000000000000001 x6 : 0000000000000001 [ 73.979255][ C0] x5 : ffff800008006f18 x4 : ffff80001424f400 x3 : ffff80000830220c [ 73.981460][ C0] x2 : 0000000000000001 x1 : 0000000000000101 x0 : 0000000000000029 [ 73.983653][ C0] Call trace: [ 73.984545][ C0] usb_submit_urb+0xa44/0x1580 [ 73.985870][ C0] bcm5974_irq_trackpad+0x204/0xe88 [ 73.987304][ C0] __usb_hcd_giveback_urb+0x2e0/0x518 [ 73.988825][ C0] usb_hcd_giveback_urb+0x100/0x3e0 [ 73.990187][ C0] dummy_timer+0x5b8/0x231c [ 73.991402][ C0] call_timer_fn+0x19c/0x858 [ 73.992713][ C0] __run_timers+0x46c/0x6c4 [ 73.993919][ C0] run_timer_softirq+0x7c/0x114 [ 73.995312][ C0] handle_softirqs+0x344/0xbf0 [ 73.996628][ C0] __irq_exit_rcu+0x240/0x440 [ 73.997936][ C0] irq_exit+0x14/0x88 [ 73.999083][ C0] handle_domain_irq+0x14c/0x1fc [ 74.000510][ C0] gic_handle_irq+0x78/0x1c8 [ 74.001785][ C0] call_on_irq_stack+0x24/0x30 [ 74.003143][ C0] do_interrupt_handler+0x6c/0x88 [ 74.004521][ C0] el1_interrupt+0x30/0x58 [ 74.005731][ C0] el1h_64_irq_handler+0x18/0x24 [ 74.007031][ C0] el1h_64_irq+0x78/0x7c [ 74.008156][ C0] arch_local_irq_enable+0xc/0x18 [ 74.009495][ C0] default_idle_call+0xcc/0x418 [ 74.010880][ C0] do_idle+0x1c8/0x480 [ 74.012072][ C0] cpu_startup_entry+0x24/0x28 [ 74.013464][ C0] rest_init+0x360/0x390 [ 74.014671][ C0] arch_call_rest_init+0x14/0x20 [ 74.016037][ C0] start_kernel+0x49c/0x54c [ 74.017295][ C0] __primary_switched+0xa8/0xb0 [ 74.018655][ C0] irq event stamp: 245159 [ 74.019839][ C0] hardirqs last enabled at (245158): [] _raw_spin_unlock_irq+0x98/0x128 [ 74.022577][ C0] hardirqs last disabled at (245159): [] _raw_spin_lock_irqsave+0xfc/0x14c [ 74.025415][ C0] softirqs last enabled at (245040): [] handle_softirqs+0xa4c/0xbf0 [ 74.028080][ C0] softirqs last disabled at (245143): [] __irq_exit_rcu+0x240/0x440 [ 74.030916][ C0] ---[ end trace 33a08994fc862f14 ]--- [ 74.032452][ C0] bcm5974 1-1:0.10: trackpad urb failed: -2 [ 74.061640][ T1534] bcm5974 1-1:0.10: could not read from device [ 74.460534][ T7] Bluetooth: hci0: command 0x0419 tx timeout [ 74.740610][ T1534] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 74.782590][ T21] cfg80211: failed to load regulatory.db [ 75.100523][ T1534] usb 1-1: config 0 has an invalid interface number: 10 but max is 0 [ 75.102831][ T1534] usb 1-1: config 0 has no interface number 0 [ 75.104540][ T1534] usb 1-1: config 0 interface 10 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 75.107389][ T1534] usb 1-1: config 0 interface 10 altsetting 0 endpoint 0x81 has invalid maxpacket 21669, setting to 1024 [ 75.110870][ T1534] usb 1-1: config 0 interface 10 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 75.113559][ T1534] usb 1-1: config 0 interface 10 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 75.270599][ T1534] usb 1-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice=d4.d7 [ 75.273189][ T1534] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.275445][ T1534] usb 1-1: Product: syz [ 75.276631][ T1534] usb 1-1: Manufacturer: syz [ 75.277920][ T1534] usb 1-1: SerialNumber: syz [ 75.281588][ T1534] usb 1-1: config 0 descriptor?? [ 75.300806][ T4730] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 75.323708][ T1534] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.10/input/input5 [ 75.750994][ T4367] ------------[ cut here ]------------ [ 75.752649][ T4367] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 75.754620][ T4367] WARNING: CPU: 0 PID: 4367 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1580 [ 75.757390][ T4367] Modules linked in: [ 75.758458][ T4367] CPU: 0 PID: 4367 Comm: udevd Tainted: G W 5.15.189-syzkaller #0 [ 75.760853][ T4367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 75.763656][ T4367] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 75.765734][ T4367] pc : usb_submit_urb+0xa44/0x1580 [ 75.767158][ T4367] lr : usb_submit_urb+0xa44/0x1580 [ 75.768574][ T4367] sp : ffff80001f477470 [ 75.769818][ T4367] x29: ffff80001f4774b0 x28: 1fffe0001b69fc03 x27: ffff80001239bb48 [ 75.772180][ T4367] x26: ffff0000d99e0d00 x25: ffff0000ce3a5650 x24: 0000000000000400 [ 75.774407][ T4367] x23: ffff8000123a21a0 x22: dfff800000000000 x21: 0000000000000002 [ 75.776601][ T4367] x20: 0000000000000cc0 x19: ffff0000ce3a5600 x18: 0000000000000001 [ 75.778774][ T4367] x17: 0000000000000000 x16: ffff8000111bc798 x15: 00000000ffffffff [ 75.780992][ T4367] x14: 0000000000ff0100 x13: 0000000000000001 x12: 0000000000ff0100 [ 75.783178][ T4367] x11: 0000000000000000 x10: 0000000000000000 x9 : 5e24b82b9722b500 [ 75.785416][ T4367] x8 : 5e24b82b9722b500 x7 : 0000000000000001 x6 : 0000000000000001 [ 75.787684][ T4367] x5 : ffff80001f476d58 x4 : ffff80001424f400 x3 : ffff80000850433c [ 75.789858][ T4367] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000029 [ 75.792095][ T4367] Call trace: [ 75.793034][ T4367] usb_submit_urb+0xa44/0x1580 [ 75.794371][ T4367] bcm5974_start_traffic+0xe0/0x154 [ 75.795920][ T4367] bcm5974_open+0x94/0x130 [ 75.797135][ T4367] input_open_device+0x134/0x288 [ 75.798507][ T4367] evdev_open+0x3c4/0x468 [ 75.799676][ T4367] chrdev_open+0x26c/0x4f0 [ 75.800902][ T4367] do_dentry_open+0x760/0xebc [ 75.802190][ T4367] vfs_open+0x7c/0x90 [ 75.803354][ T4367] path_openat+0x1f80/0x26e4 [ 75.804645][ T4367] do_filp_open+0x164/0x330 [ 75.805928][ T4367] do_sys_openat2+0x128/0x3d8 [ 75.807271][ T4367] __arm64_sys_openat+0x120/0x154 [ 75.808654][ T4367] invoke_syscall+0x98/0x2b8 [ 75.810007][ T4367] el0_svc_common+0x138/0x258 [ 75.811265][ T4367] do_el0_svc+0x58/0x14c [ 75.812406][ T4367] el0_svc+0x78/0x1e0 [ 75.813521][ T4367] el0t_64_sync_handler+0xcc/0xe4 [ 75.814920][ T4367] el0t_64_sync+0x1a0/0x1a4 [ 75.816233][ T4367] irq event stamp: 23788 [ 75.817412][ T4367] hardirqs last enabled at (23787): [] __up_console_sem+0xb4/0x100 [ 75.820135][ T4367] hardirqs last disabled at (23788): [] el1_dbg+0x24/0x80 [ 75.822649][ T4367] softirqs last enabled at (22260): [] handle_softirqs+0xa4c/0xbf0 [ 75.825335][ T4367] softirqs last disabled at (22181): [] __irq_exit_rcu+0x240/0x440 [ 75.827918][ T4367] ---[ end trace 33a08994fc862f15 ]--- [ 75.850437][ C0] ------------[ cut here ]------------ [ 75.852025][ C0] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 75.853995][ C0] WARNING: CPU: 0 PID: 0 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1580 [ 75.856728][ C0] Modules linked in: [ 75.857900][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G W 5.15.189-syzkaller #0 [ 75.860634][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 75.863497][ C0] pstate: 604000c5 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 75.865738][ C0] pc : usb_submit_urb+0xa44/0x1580 [ 75.867146][ C0] lr : usb_submit_urb+0xa44/0x1580 [ 75.868602][ C0] sp : ffff800008007620 [ 75.869740][ C0] x29: ffff800008007660 x28: 1fffe0001b69fc03 x27: ffff80001239bb48 [ 75.871955][ C0] x26: ffff0000d99e0d00 x25: ffff0000ce3a5650 x24: 0000000000000400 [ 75.874247][ C0] x23: ffff8000123a21a0 x22: dfff800000000000 x21: 0000000000000002 [ 75.876409][ C0] x20: 0000000000000a20 x19: ffff0000ce3a5600 x18: 0000000000000102 [ 75.878635][ C0] x17: 0000000000000000 x16: ffff8000111bc798 x15: 00000000ffffffff [ 75.880985][ C0] x14: 0000000000ff0100 x13: 0000000000000001 x12: 0000000000ff0100 [ 75.883180][ C0] x11: 0000000000000101 x10: 0000000000000000 x9 : e823332f085ee000 [ 75.885392][ C0] x8 : e823332f085ee000 x7 : 0000000000000001 x6 : 0000000000000001 [ 75.887667][ C0] x5 : ffff800008006f18 x4 : ffff80001424f400 x3 : ffff80000850433c [ 75.889949][ C0] x2 : 0000000000000001 x1 : 0000000100000101 x0 : 0000000000000029 [ 75.892220][ C0] Call trace: [ 75.893168][ C0] usb_submit_urb+0xa44/0x1580 [ 75.894479][ C0] bcm5974_irq_trackpad+0x204/0xe88 [ 75.895900][ C0] __usb_hcd_giveback_urb+0x2e0/0x518 [ 75.897361][ C0] usb_hcd_giveback_urb+0x100/0x3e0 [ 75.898841][ C0] dummy_timer+0x5b8/0x231c [ 75.900095][ C0] call_timer_fn+0x19c/0x858 [ 75.901358][ C0] __run_timers+0x46c/0x6c4 [ 75.902641][ C0] run_timer_softirq+0x7c/0x114 [ 75.903993][ C0] handle_softirqs+0x344/0xbf0 [ 75.905284][ C0] __irq_exit_rcu+0x240/0x440 [ 75.906618][ C0] irq_exit+0x14/0x88 [ 75.907745][ C0] handle_domain_irq+0x14c/0x1fc [ 75.909108][ C0] gic_handle_irq+0x78/0x1c8 [ 75.910352][ C0] call_on_irq_stack+0x24/0x30 [ 75.911672][ C0] do_interrupt_handler+0x6c/0x88 [ 75.913103][ C0] el1_interrupt+0x30/0x58 [ 75.914377][ C0] el1h_64_irq_handler+0x18/0x24 [ 75.915774][ C0] el1h_64_irq+0x78/0x7c [ 75.916983][ C0] arch_local_irq_enable+0xc/0x18 [ 75.918428][ C0] default_idle_call+0xcc/0x418 [ 75.919857][ C0] do_idle+0x1c8/0x480 [ 75.920972][ C0] cpu_startup_entry+0x24/0x28 [ 75.922424][ C0] rest_init+0x360/0x390 [ 75.923523][ C0] arch_call_rest_init+0x14/0x20 [ 75.924913][ C0] start_kernel+0x49c/0x54c [ 75.926081][ C0] __primary_switched+0xa8/0xb0 [ 75.927467][ C0] irq event stamp: 257629 [ 75.928713][ C0] hardirqs last enabled at (257628): [] _raw_spin_unlock_irq+0x98/0x128 [ 75.931520][ C0] hardirqs last disabled at (257629): [] _raw_spin_lock_irqsave+0xfc/0x14c [ 75.934295][ C0] softirqs last enabled at (257510): [] handle_softirqs+0xa4c/0xbf0 [ 75.936949][ C0] softirqs last disabled at (257625): [] __irq_exit_rcu+0x240/0x440 [ 75.939685][ C0] ---[ end trace 33a08994fc862f16 ]--- [ 75.952500][ T4068] usb 1-1: USB disconnect, device number 5 [ 75.961363][ T4367] bcm5974 1-1:0.10: could not read from device [ 76.750513][ T3614] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 77.110550][ T3614] usb 1-1: config 0 has an invalid interface number: 10 but max is 0 [ 77.112982][ T3614] usb 1-1: config 0 has no interface number 0 [ 77.114686][ T3614] usb 1-1: config 0 interface 10 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 77.117559][ T3614] usb 1-1: config 0 interface 10 altsetting 0 endpoint 0x81 has invalid maxpacket 21669, setting to 1024 [ 77.120858][ T3614] usb 1-1: config 0 interface 10 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 77.123736][ T3614] usb 1-1: config 0 interface 10 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 77.290667][ T3614] usb 1-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice=d4.d7 [ 77.293225][ T3614] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.295450][ T3614] usb 1-1: Product: syz [ 77.296586][ T3614] usb 1-1: Manufacturer: syz [ 77.297842][ T3614] usb 1-1: SerialNumber: syz [ 77.303358][ T3614] usb 1-1: config 0 descriptor?? [ 77.320891][ T4732] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 77.344460][ T3614] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.10/input/input6 [ 77.770615][ T4367] ------------[ cut here ]------------ [ 77.772191][ T4367] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 77.774052][ T4367] WARNING: CPU: 0 PID: 4367 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1580 [ 77.776859][ T4367] Modules linked in: [ 77.777957][ T4367] CPU: 0 PID: 4367 Comm: udevd Tainted: G W 5.15.189-syzkaller #0 [ 77.780544][ T4367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 77.783364][ T4367] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 77.785497][ T4367] pc : usb_submit_urb+0xa44/0x1580 [ 77.786897][ T4367] lr : usb_submit_urb+0xa44/0x1580 [ 77.788325][ T4367] sp : ffff80001f477470 [ 77.789453][ T4367] x29: ffff80001f4774b0 x28: 1fffe00018299603 x27: ffff80001239bb48 [ 77.791627][ T4367] x26: ffff0000c8aa6200 x25: ffff0000ce397450 x24: 0000000000000400 [ 77.793987][ T4367] x23: ffff8000123a21a0 x22: dfff800000000000 x21: 0000000000000002 [ 77.796188][ T4367] x20: 0000000000000cc0 x19: ffff0000ce397400 x18: 0000000000000001 [ 77.798743][ T4367] x17: 0000000000000000 x16: ffff8000111bc798 x15: 00000000ffffffff [ 77.801046][ T4367] x14: 0000000000ff0100 x13: 0000000000000001 x12: 0000000000ff0100 [ 77.803371][ T4367] x11: 0000000000000000 x10: 0000000000000000 x9 : 5e24b82b9722b500 [ 77.805548][ T4367] x8 : 5e24b82b9722b500 x7 : 0000000000000001 x6 : 0000000000000001 [ 77.807922][ T4367] x5 : ffff80001f476d58 x4 : ffff80001424f400 x3 : ffff80000850433c [ 77.810162][ T4367] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000029 [ 77.812409][ T4367] Call trace: [ 77.813287][ T4367] usb_submit_urb+0xa44/0x1580 [ 77.814694][ T4367] bcm5974_start_traffic+0xe0/0x154 [ 77.816231][ T4367] bcm5974_open+0x94/0x130 [ 77.817399][ T4367] input_open_device+0x134/0x288 [ 77.818711][ T4367] evdev_open+0x3c4/0x468 [ 77.819898][ T4367] chrdev_open+0x26c/0x4f0 [ 77.821347][ T4367] do_dentry_open+0x760/0xebc [ 77.822679][ T4367] vfs_open+0x7c/0x90 [ 77.823833][ T4367] path_openat+0x1f80/0x26e4 [ 77.825124][ T4367] do_filp_open+0x164/0x330 [ 77.826344][ T4367] do_sys_openat2+0x128/0x3d8 [ 77.827696][ T4367] __arm64_sys_openat+0x120/0x154 [ 77.829070][ T4367] invoke_syscall+0x98/0x2b8 [ 77.830355][ T4367] el0_svc_common+0x138/0x258 [ 77.831710][ T4367] do_el0_svc+0x58/0x14c [ 77.832887][ T4367] el0_svc+0x78/0x1e0 [ 77.833960][ T4367] el0t_64_sync_handler+0xcc/0xe4 [ 77.835377][ T4367] el0t_64_sync+0x1a0/0x1a4 [ 77.836595][ T4367] irq event stamp: 30606 [ 77.837770][ T4367] hardirqs last enabled at (30605): [] __up_console_sem+0xb4/0x100 [ 77.840448][ T4367] hardirqs last disabled at (30606): [] el1_dbg+0x24/0x80 [ 77.842931][ T4367] softirqs last enabled at (29488): [] local_bh_enable+0x10/0x34 [ 77.845512][ T4367] softirqs last disabled at (29486): [] local_bh_disable+0x10/0x34 [ 77.848313][ T4367] ---[ end trace 33a08994fc862f17 ]--- [ 77.870426][ C0] ------------[ cut here ]------------ [ 77.872089][ C0] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 77.874122][ C0] WARNING: CPU: 0 PID: 0 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1580 [ 77.876710][ C0] Modules linked in: [ 77.877812][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G W 5.15.189-syzkaller #0 [ 77.880327][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 77.883218][ C0] pstate: 604000c5 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 77.885322][ C0] pc : usb_submit_urb+0xa44/0x1580 [ 77.886709][ C0] lr : usb_submit_urb+0xa44/0x1580 [ 77.888136][ C0] sp : ffff800008007620 [ 77.889257][ C0] x29: ffff800008007660 x28: 1fffe00018299603 x27: ffff80001239bb48 [ 77.891481][ C0] x26: ffff0000c8aa6200 x25: ffff0000ce397450 x24: 0000000000000400 [ 77.893767][ C0] x23: ffff8000123a21a0 x22: dfff800000000000 x21: 0000000000000002 [ 77.896069][ C0] x20: 0000000000000a20 x19: ffff0000ce397400 x18: 0000000000000102 [ 77.898504][ C0] x17: 0000000000000000 x16: ffff8000111bc798 x15: 00000000ffffffff [ 77.900842][ C0] x14: 0000000000ff0100 x13: 0000000000000001 x12: 0000000000ff0100 [ 77.903061][ C0] x11: 0000000000000101 x10: 0000000000000000 x9 : e823332f085ee000 [ 77.905448][ C0] x8 : e823332f085ee000 x7 : 0000000000000001 x6 : 0000000000000001 [ 77.907782][ C0] x5 : ffff800008006f18 x4 : ffff80001424f400 x3 : ffff80000850433c [ 77.910105][ C0] x2 : 0000000000000001 x1 : 0000000100000101 x0 : 0000000000000029 [ 77.912288][ C0] Call trace: [ 77.913163][ C0] usb_submit_urb+0xa44/0x1580 [ 77.914537][ C0] bcm5974_irq_trackpad+0x204/0xe88 [ 77.916012][ C0] __usb_hcd_giveback_urb+0x2e0/0x518 [ 77.917553][ C0] usb_hcd_giveback_urb+0x100/0x3e0 [ 77.919093][ C0] dummy_timer+0x5b8/0x231c [ 77.920422][ C0] call_timer_fn+0x19c/0x858 [ 77.921821][ C0] __run_timers+0x46c/0x6c4 [ 77.923154][ C0] run_timer_softirq+0x7c/0x114 [ 77.924497][ C0] handle_softirqs+0x344/0xbf0 [ 77.925764][ C0] __irq_exit_rcu+0x240/0x440 [ 77.927050][ C0] irq_exit+0x14/0x88 [ 77.928144][ C0] handle_domain_irq+0x14c/0x1fc [ 77.929514][ C0] gic_handle_irq+0x78/0x1c8 [ 77.930818][ C0] call_on_irq_stack+0x24/0x30 [ 77.932088][ C0] do_interrupt_handler+0x6c/0x88 [ 77.933534][ C0] el1_interrupt+0x30/0x58 [ 77.934769][ C0] el1h_64_irq_handler+0x18/0x24 [ 77.936187][ C0] el1h_64_irq+0x78/0x7c [ 77.937422][ C0] arch_local_irq_enable+0xc/0x18 [ 77.938790][ C0] default_idle_call+0xcc/0x418 [ 77.940200][ C0] do_idle+0x1c8/0x480 [ 77.941288][ C0] cpu_startup_entry+0x24/0x28 [ 77.942591][ C0] rest_init+0x360/0x390 [ 77.943822][ C0] arch_call_rest_init+0x14/0x20 [ 77.945333][ C0] start_kernel+0x49c/0x54c [ 77.946749][ C0] __primary_switched+0xa8/0xb0 [ 77.948147][ C0] irq event stamp: 270851 [ 77.949299][ C0] hardirqs last enabled at (270850): [] _raw_spin_unlock_irq+0x98/0x128 [ 77.952169][ C0] hardirqs last disabled at (270851): [] _raw_spin_lock_irqsave+0xfc/0x14c [ 77.954952][ C0] softirqs last enabled at (270732): [] handle_softirqs+0xa4c/0xbf0 [ 77.957752][ C0] softirqs last disabled at (270847): [] __irq_exit_rcu+0x240/0x440 [ 77.960431][ C0] ---[ end trace 33a08994fc862f18 ]--- [ 77.973562][ T3614] usb 1-1: USB disconnect, device number 6 [ 77.991858][ T4367] bcm5974 1-1:0.10: could not read from device 1970/01/01 00:01:18 executed programs: 5 [ 78.750526][ T21] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 79.120566][ T21] usb 1-1: config 0 has an invalid interface number: 10 but max is 0 [ 79.122976][ T21] usb 1-1: config 0 has no interface number 0 [ 79.126369][ T21] usb 1-1: config 0 interface 10 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 79.129242][ T21] usb 1-1: config 0 interface 10 altsetting 0 endpoint 0x81 has invalid maxpacket 21669, setting to 1024 [ 79.132415][ T21] usb 1-1: config 0 interface 10 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 79.135169][ T21] usb 1-1: config 0 interface 10 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 79.290645][ T21] usb 1-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice=d4.d7 [ 79.293174][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.295227][ T21] usb 1-1: Product: syz [ 79.296308][ T21] usb 1-1: Manufacturer: syz [ 79.297475][ T21] usb 1-1: SerialNumber: syz [ 79.301364][ T21] usb 1-1: config 0 descriptor?? [ 79.320871][ T4734] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 79.342948][ T21] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.10/input/input7