Warning: Permanently added '10.128.1.229' (ED25519) to the list of known hosts. 1970/01/01 00:01:26 ignoring optional flag "sandboxArg"="0" 1970/01/01 00:01:26 parsed 1 programs [ 89.541086][ T4461] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 95.817449][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.820018][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.827797][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 95.834397][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.836638][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.839692][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 97.009211][ T4515] chnl_net:caif_netlink_parms(): no params data found [ 97.046186][ T4515] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.049640][ T4515] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.052429][ T4515] device bridge_slave_0 entered promiscuous mode [ 97.056240][ T4515] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.058425][ T4515] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.061092][ T4515] device bridge_slave_1 entered promiscuous mode [ 97.081102][ T4515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.085798][ T4515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.103262][ T4515] team0: Port device team_slave_0 added [ 97.108983][ T4515] team0: Port device team_slave_1 added [ 97.122357][ T4515] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.124364][ T4515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.131785][ T4515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.136048][ T4515] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.138011][ T4515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.145417][ T4515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.220340][ T4515] device hsr_slave_0 entered promiscuous mode [ 97.259772][ T4515] device hsr_slave_1 entered promiscuous mode [ 97.987692][ T4515] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 98.021717][ T4515] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 98.071728][ T4515] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 98.092633][ T4515] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 98.201930][ T4515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.210046][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 98.212671][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 98.217935][ T4515] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.224215][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 98.227019][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 98.230357][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.232429][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.235633][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 98.248947][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 98.251759][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 98.254445][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.256422][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.260142][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 98.263135][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 98.266855][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 98.271199][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 98.283878][ T4515] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 98.286787][ T4515] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 98.291575][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 98.294169][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 98.297034][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 98.301835][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 98.304556][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 98.307345][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 98.310292][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 98.316712][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 98.418615][ T4515] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.421605][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 98.423783][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 98.440092][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 98.442997][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 98.456018][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 98.459781][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 98.462795][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 98.465829][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 98.470960][ T4515] device veth0_vlan entered promiscuous mode [ 98.477603][ T4515] device veth1_vlan entered promiscuous mode [ 98.495633][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 98.500102][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 98.502796][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 98.505921][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 98.511800][ T4515] device veth0_macvtap entered promiscuous mode [ 98.516743][ T4515] device veth1_macvtap entered promiscuous mode [ 98.531721][ T4515] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.533906][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 98.536527][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 98.541289][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 98.544370][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 98.550825][ T4515] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.554927][ T4515] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.557362][ T4515] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.560265][ T4515] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.562743][ T4515] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.566427][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 98.570469][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 1970/01/01 00:01:39 executed programs: 0 [ 99.431889][ T4645] chnl_net:caif_netlink_parms(): no params data found [ 99.472159][ T4645] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.474333][ T4645] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.476903][ T4645] device bridge_slave_0 entered promiscuous mode [ 99.481479][ T4645] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.483567][ T4645] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.486221][ T4645] device bridge_slave_1 entered promiscuous mode [ 99.504417][ T4645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.509055][ T4645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.525921][ T4645] team0: Port device team_slave_0 added [ 99.529961][ T4645] team0: Port device team_slave_1 added [ 99.544546][ T4645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.546515][ T4645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.554547][ T4645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.560706][ T4645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.562910][ T4645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.570128][ T4645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.630384][ T4645] device hsr_slave_0 entered promiscuous mode [ 99.658717][ T4645] device hsr_slave_1 entered promiscuous mode [ 99.700920][ T4645] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.703095][ T4645] Cannot create hsr debugfs directory [ 99.775246][ T4645] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.388422][ T1534] Bluetooth: hci0: command 0x0409 tx timeout [ 101.974979][ T4645] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.468253][ T1534] Bluetooth: hci0: command 0x041b tx timeout [ 103.791080][ T4645] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.838465][ T4645] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.008203][ T4645] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.040599][ T4645] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 104.090617][ T4645] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 104.159535][ T4645] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 104.260093][ T4645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.267042][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 104.273960][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 104.281583][ T4645] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.286553][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 104.290572][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 104.293180][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.295079][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.297911][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 104.320392][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 104.323298][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 104.326023][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.328151][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.333076][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 104.338964][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 104.344293][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 104.347769][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 104.353643][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 104.360093][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 104.363041][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 104.372200][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 104.374999][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 104.377650][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 104.381206][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 104.385502][ T4645] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 104.480114][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 104.482198][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 104.490178][ T4645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.517046][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 104.520712][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 104.532664][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 104.535512][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 104.539554][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 104.542198][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 104.546391][ T4645] device veth0_vlan entered promiscuous mode [ 104.561238][ T4645] device veth1_vlan entered promiscuous mode [ 104.579314][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 104.581902][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 104.584493][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 104.587151][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 104.592362][ T4645] device veth0_macvtap entered promiscuous mode [ 104.596551][ T4645] device veth1_macvtap entered promiscuous mode [ 104.617520][ T4645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.621663][ T4645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.625383][ T4645] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.627938][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 104.631242][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 104.633891][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 104.636613][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 104.641462][ T4645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.644388][ T4645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.647982][ T4645] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.653547][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 104.656343][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 104.661867][ T4645] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.664318][ T4645] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.666623][ T4645] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.669918][ T4645] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.710638][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.717023][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.723485][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.724329][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 104.726162][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.732613][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:01:44 executed programs: 2 [ 105.038375][ T4112] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 105.278237][ T4112] usb 1-1: Using ep0 maxpacket: 8 [ 105.398485][ T4112] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 15 [ 105.401328][ T4112] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 105.548658][ T4107] Bluetooth: hci0: command 0x040f tx timeout [ 105.568321][ T4112] usb 1-1: New USB device found, idVendor=05ac, idProduct=0243, bcdDevice= 0.40 [ 105.570815][ T4112] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.573086][ T4112] usb 1-1: Product: syz [ 105.574247][ T4112] usb 1-1: Manufacturer: syz [ 105.575533][ T4112] usb 1-1: SerialNumber: syz [ 105.636783][ T4112] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input2 [ 105.730296][ T758] device hsr_slave_0 left promiscuous mode [ 105.768702][ T758] device hsr_slave_1 left promiscuous mode [ 105.858476][ T758] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.860551][ T758] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.863121][ T758] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.865273][ T758] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.867679][ T758] device bridge_slave_1 left promiscuous mode [ 105.869871][ T758] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.919347][ T758] device bridge_slave_0 left promiscuous mode [ 105.921140][ T758] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.048515][ T758] device veth1_macvtap left promiscuous mode [ 106.050349][ T758] device veth0_macvtap left promiscuous mode [ 106.052133][ T758] device veth1_vlan left promiscuous mode [ 106.053777][ T758] device veth0_vlan left promiscuous mode [ 106.068351][ T4503] ------------[ cut here ]------------ [ 106.070061][ T4503] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 106.072037][ T4503] WARNING: CPU: 1 PID: 4503 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1580 [ 106.074660][ T4503] Modules linked in: [ 106.075688][ T4503] CPU: 1 PID: 4503 Comm: udevd Not tainted 5.15.189-syzkaller #0 [ 106.077805][ T4503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 106.080696][ T4503] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 106.082828][ T4503] pc : usb_submit_urb+0xa44/0x1580 [ 106.084232][ T4503] lr : usb_submit_urb+0xa44/0x1580 [ 106.085741][ T4503] sp : ffff80001f537470 [ 106.086967][ T4503] x29: ffff80001f5374b0 x28: 1fffe0001d425603 x27: ffff80001239bb48 [ 106.089234][ T4503] x26: ffff0000edbe0c00 x25: ffff0000d0843850 x24: 000000000000000f [ 106.091387][ T4503] x23: ffff8000123a21a0 x22: dfff800000000000 x21: 0000000000000002 [ 106.093594][ T4503] x20: 0000000000000cc0 x19: ffff0000d0843800 x18: 0000000000000001 [ 106.095793][ T4503] x17: 0000000000000000 x16: ffff8000111bc798 x15: 00000000ffffffff [ 106.097998][ T4503] x14: 0000000000ff0100 x13: 0000000000000001 x12: 0000000000ff0100 [ 106.100269][ T4503] x11: 0000000000000000 x10: 0000000000000000 x9 : 98d105fc68b83500 [ 106.102570][ T4503] x8 : 98d105fc68b83500 x7 : 0000000000000001 x6 : 0000000000000001 [ 106.104722][ T4503] x5 : ffff80001f536d58 x4 : ffff80001424f400 x3 : ffff80000850433c [ 106.106929][ T4503] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000029 [ 106.109099][ T4503] Call trace: [ 106.110001][ T4503] usb_submit_urb+0xa44/0x1580 [ 106.111279][ T4503] bcm5974_start_traffic+0xe0/0x154 [ 106.112751][ T4503] bcm5974_open+0x94/0x130 [ 106.113947][ T4503] input_open_device+0x134/0x288 [ 106.115309][ T4503] evdev_open+0x3c4/0x468 [ 106.116488][ T4503] chrdev_open+0x26c/0x4f0 [ 106.117710][ T4503] do_dentry_open+0x760/0xebc [ 106.119036][ T4503] vfs_open+0x7c/0x90 [ 106.120175][ T4503] path_openat+0x1f80/0x26e4 [ 106.121448][ T4503] do_filp_open+0x164/0x330 [ 106.122648][ T4503] do_sys_openat2+0x128/0x3d8 [ 106.123920][ T4503] __arm64_sys_openat+0x120/0x154 [ 106.125271][ T4503] invoke_syscall+0x98/0x2b8 [ 106.126573][ T4503] el0_svc_common+0x138/0x258 [ 106.127893][ T4503] do_el0_svc+0x58/0x14c [ 106.129012][ T4503] el0_svc+0x78/0x1e0 [ 106.130098][ T4503] el0t_64_sync_handler+0xcc/0xe4 [ 106.131477][ T4503] el0t_64_sync+0x1a0/0x1a4 [ 106.132733][ T4503] irq event stamp: 5654 [ 106.133864][ T4503] hardirqs last enabled at (5653): [] __up_console_sem+0xb4/0x100 [ 106.136444][ T4503] hardirqs last disabled at (5654): [] el1_dbg+0x24/0x80 [ 106.138800][ T4503] softirqs last enabled at (5418): [] local_bh_enable+0x10/0x34 [ 106.141406][ T4503] softirqs last disabled at (5416): [] local_bh_disable+0x10/0x34 [ 106.144040][ T4503] ---[ end trace 9a9b8a272ec376ba ]--- [ 106.168193][ C1] ------------[ cut here ]------------ [ 106.169893][ C1] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 106.171814][ C1] WARNING: CPU: 1 PID: 0 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1580 [ 106.174371][ C1] Modules linked in: [ 106.175457][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G W 5.15.189-syzkaller #0 [ 106.177930][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 106.180753][ C1] pstate: 604000c5 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 106.182942][ C1] pc : usb_submit_urb+0xa44/0x1580 [ 106.184319][ C1] lr : usb_submit_urb+0xa44/0x1580 [ 106.185713][ C1] sp : ffff800008017620 [ 106.186810][ C1] x29: ffff800008017660 x28: 1fffe0001d425603 x27: ffff80001239bb48 [ 106.189015][ C1] x26: ffff0000edbe0c00 x25: ffff0000d0843850 x24: 000000000000000f [ 106.191229][ C1] x23: ffff8000123a21a0 x22: dfff800000000000 x21: 0000000000000002 [ 106.193381][ C1] x20: 0000000000000a20 x19: ffff0000d0843800 x18: 0000000000000102 [ 106.195562][ C1] x17: 0000000000000000 x16: ffff8000111bc798 x15: 00000000ffffffff [ 106.197726][ C1] x14: 0000000000ff0100 x13: 0000000000000001 x12: 0000000000ff0100 [ 106.199996][ C1] x11: 0000000000000101 x10: 0000000000000000 x9 : cef64a1b3bbf8300 [ 106.202218][ C1] x8 : cef64a1b3bbf8300 x7 : 0000000000000001 x6 : 0000000000000001 [ 106.204497][ C1] x5 : ffff800008016f18 x4 : ffff80001424f400 x3 : ffff80000850433c [ 106.206597][ C1] x2 : 0000000000000001 x1 : 0000000100000101 x0 : 0000000000000029 [ 106.208765][ C1] Call trace: [ 106.209632][ C1] usb_submit_urb+0xa44/0x1580 [ 106.210999][ C1] bcm5974_irq_trackpad+0x204/0xe88 [ 106.212374][ C1] __usb_hcd_giveback_urb+0x2e0/0x518 [ 106.213866][ C1] usb_hcd_giveback_urb+0x100/0x3e0 [ 106.215283][ C1] dummy_timer+0x5b8/0x231c [ 106.216534][ C1] call_timer_fn+0x19c/0x858 [ 106.217765][ C1] __run_timers+0x46c/0x6c4 [ 106.218983][ C1] run_timer_softirq+0x7c/0x114 [ 106.220281][ C1] handle_softirqs+0x344/0xbf0 [ 106.221632][ C1] __irq_exit_rcu+0x240/0x440 [ 106.222901][ C1] irq_exit+0x14/0x88 [ 106.223950][ C1] handle_domain_irq+0x14c/0x1fc [ 106.225272][ C1] gic_handle_irq+0x78/0x1c8 [ 106.226528][ C1] call_on_irq_stack+0x24/0x30 [ 106.227799][ C1] do_interrupt_handler+0x6c/0x88 [ 106.229174][ C1] el1_interrupt+0x30/0x58 [ 106.230344][ C1] el1h_64_irq_handler+0x18/0x24 [ 106.231634][ C1] el1h_64_irq+0x78/0x7c [ 106.232730][ C1] arch_local_irq_enable+0xc/0x18 [ 106.234082][ C1] default_idle_call+0xcc/0x418 [ 106.235504][ C1] do_idle+0x1c8/0x480 [ 106.236611][ C1] cpu_startup_entry+0x24/0x28 [ 106.237918][ C1] secondary_start_kernel+0x23c/0x294 [ 106.239436][ C1] __secondary_switched+0x94/0x98 [ 106.240816][ C1] irq event stamp: 272577 [ 106.242009][ C1] hardirqs last enabled at (272576): [] _raw_spin_unlock_irq+0x98/0x128 [ 106.244674][ C1] hardirqs last disabled at (272577): [] _raw_spin_lock_irqsave+0xfc/0x14c [ 106.247438][ C1] softirqs last enabled at (272488): [] handle_softirqs+0xa4c/0xbf0 [ 106.250067][ C1] softirqs last disabled at (272573): [] __irq_exit_rcu+0x240/0x440 [ 106.252666][ C1] ---[ end trace 9a9b8a272ec376bb ]--- [ 106.254390][ C1] ------------[ cut here ]------------ [ 106.255896][ C1] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 106.257888][ C1] WARNING: CPU: 1 PID: 0 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1580 [ 106.260433][ C1] Modules linked in: [ 106.261493][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G W 5.15.189-syzkaller #0 [ 106.264098][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 106.266856][ C1] pstate: 604000c5 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 106.268992][ C1] pc : usb_submit_urb+0xa44/0x1580 [ 106.270403][ C1] lr : usb_submit_urb+0xa44/0x1580 [ 106.271882][ C1] sp : ffff800008017620 [ 106.272972][ C1] x29: ffff800008017660 x28: 1fffe0001d425603 x27: ffff80001239bb48 [ 106.275259][ C1] x26: ffff0000edbe0c00 x25: ffff0000d0843850 x24: 000000000000000f [ 106.277451][ C1] x23: ffff8000123a21a0 x22: dfff800000000000 x21: 0000000000000002 [ 106.279691][ C1] x20: 0000000000000a20 x19: ffff0000d0843800 x18: 0000000000000102 [ 106.281998][ C1] x17: 0000000000000000 x16: ffff8000083020fc x15: 00000000ffffffff [ 106.284233][ C1] x14: 0000000000ff0100 x13: 0000000000000001 x12: 0000000000ff0100 [ 106.286478][ C1] x11: 0000000000000101 x10: 0000000000000000 x9 : cef64a1b3bbf8300 [ 106.288769][ C1] x8 : cef64a1b3bbf8300 x7 : 0000000000000001 x6 : 0000000000000001 [ 106.290941][ C1] x5 : ffff800008016f18 x4 : ffff80001424f400 x3 : ffff80000830220c [ 106.293143][ C1] x2 : 0000000000000001 x1 : 0000000000000101 x0 : 0000000000000029 [ 106.295340][ C1] Call trace: [ 106.296217][ C1] usb_submit_urb+0xa44/0x1580 [ 106.297539][ C1] bcm5974_irq_trackpad+0x204/0xe88 [ 106.298973][ C1] __usb_hcd_giveback_urb+0x2e0/0x518 [ 106.300480][ C1] usb_hcd_giveback_urb+0x100/0x3e0 [ 106.301901][ C1] dummy_timer+0x5b8/0x231c [ 106.303109][ C1] call_timer_fn+0x19c/0x858 [ 106.304391][ C1] __run_timers+0x46c/0x6c4 [ 106.305725][ C1] run_timer_softirq+0x7c/0x114 [ 106.307045][ C1] handle_softirqs+0x344/0xbf0 [ 106.308370][ C1] __irq_exit_rcu+0x240/0x440 [ 106.309696][ C1] irq_exit+0x14/0x88 [ 106.310749][ C1] handle_domain_irq+0x14c/0x1fc [ 106.312053][ C1] gic_handle_irq+0x78/0x1c8 [ 106.313387][ C1] call_on_irq_stack+0x24/0x30 [ 106.314729][ C1] do_interrupt_handler+0x6c/0x88 [ 106.316143][ C1] el1_interrupt+0x30/0x58 [ 106.317350][ C1] el1h_64_irq_handler+0x18/0x24 [ 106.318801][ C1] el1h_64_irq+0x78/0x7c [ 106.319975][ C1] arch_local_irq_enable+0xc/0x18 [ 106.320053][ T4107] usb 1-1: USB disconnect, device number 2 [ 106.321382][ C1] default_idle_call+0xcc/0x418 [ 106.324312][ C1] do_idle+0x1c8/0x480 [ 106.325473][ C1] cpu_startup_entry+0x24/0x28 [ 106.326849][ C1] secondary_start_kernel+0x23c/0x294 [ 106.328319][ C1] __secondary_switched+0x94/0x98 [ 106.329801][ C1] irq event stamp: 272609 [ 106.331074][ C1] hardirqs last enabled at (272608): [] _raw_spin_unlock_irq+0x98/0x128 [ 106.333812][ C1] hardirqs last disabled at (272609): [] _raw_spin_lock_irqsave+0xfc/0x14c [ 106.336649][ C1] softirqs last enabled at (272488): [] handle_softirqs+0xa4c/0xbf0 [ 106.339283][ C1] softirqs last disabled at (272573): [] __irq_exit_rcu+0x240/0x440 [ 106.341863][ C1] ---[ end trace 9a9b8a272ec376bc ]--- [ 106.343352][ C1] bcm5974 1-1:1.0: trackpad urb failed: -2 [ 106.357783][ T4503] bcm5974 1-1:1.0: could not read from device [ 106.455169][ T758] team0 (unregistering): Port device team_slave_1 removed [ 106.463979][ T758] team0 (unregistering): Port device team_slave_0 removed [ 106.473682][ T758] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.515764][ T758] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.636787][ T758] bond0 (unregistering): Released all slaves [ 107.098361][ T4549] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 107.358513][ T4549] usb 1-1: Using ep0 maxpacket: 8 [ 107.478483][ T4549] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 15 [ 107.481433][ T4549] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 107.638231][ T4112] Bluetooth: hci0: command 0x0419 tx timeout [ 107.638598][ T4549] usb 1-1: New USB device found, idVendor=05ac, idProduct=0243, bcdDevice= 0.40 [ 107.642743][ T4549] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.644895][ T4549] usb 1-1: Product: syz [ 107.646017][ T4549] usb 1-1: Manufacturer: syz [ 107.647225][ T4549] usb 1-1: SerialNumber: syz [ 107.700720][ T4549] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input3 [ 108.138318][ T4503] ------------[ cut here ]------------ [ 108.139972][ T4503] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 108.141970][ T4503] WARNING: CPU: 0 PID: 4503 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1580 [ 108.144650][ T4503] Modules linked in: [ 108.145715][ T4503] CPU: 0 PID: 4503 Comm: udevd Tainted: G W 5.15.189-syzkaller #0 [ 108.148257][ T4503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 108.151086][ T4503] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 108.153209][ T4503] pc : usb_submit_urb+0xa44/0x1580 [ 108.154598][ T4503] lr : usb_submit_urb+0xa44/0x1580 [ 108.156021][ T4503] sp : ffff80001f537470 [ 108.157172][ T4503] x29: ffff80001f5374b0 x28: 1fffe0001838e003 x27: ffff80001239bb48 [ 108.159444][ T4503] x26: ffff0000ca16da00 x25: ffff0000d0042650 x24: 000000000000000f [ 108.161651][ T4503] x23: ffff8000123a21a0 x22: dfff800000000000 x21: 0000000000000002 [ 108.164203][ T4503] x20: 0000000000000cc0 x19: ffff0000d0042600 x18: 0000000000000001 [ 108.166429][ T4503] x17: 0000000000000000 x16: ffff8000111bc798 x15: 00000000ffffffff [ 108.168711][ T4503] x14: 0000000000ff0100 x13: 0000000000000001 x12: 0000000000ff0100 [ 108.170934][ T4503] x11: 0000000000000000 x10: 0000000000000000 x9 : 98d105fc68b83500 [ 108.173108][ T4503] x8 : 98d105fc68b83500 x7 : 0000000000000001 x6 : 0000000000000001 [ 108.175236][ T4503] x5 : ffff80001f536d58 x4 : ffff80001424f400 x3 : ffff80000850433c [ 108.177393][ T4503] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000029 [ 108.179625][ T4503] Call trace: [ 108.180538][ T4503] usb_submit_urb+0xa44/0x1580 [ 108.181861][ T4503] bcm5974_start_traffic+0xe0/0x154 [ 108.183237][ T4503] bcm5974_open+0x94/0x130 [ 108.184496][ T4503] input_open_device+0x134/0x288 [ 108.185873][ T4503] evdev_open+0x3c4/0x468 [ 108.187109][ T4503] chrdev_open+0x26c/0x4f0 [ 108.188309][ T4503] do_dentry_open+0x760/0xebc [ 108.189657][ T4503] vfs_open+0x7c/0x90 [ 108.190778][ T4503] path_openat+0x1f80/0x26e4 [ 108.192124][ T4503] do_filp_open+0x164/0x330 [ 108.193368][ T4503] do_sys_openat2+0x128/0x3d8 [ 108.194640][ T4503] __arm64_sys_openat+0x120/0x154 [ 108.196057][ T4503] invoke_syscall+0x98/0x2b8 [ 108.197401][ T4503] el0_svc_common+0x138/0x258 [ 108.198705][ T4503] do_el0_svc+0x58/0x14c [ 108.199875][ T4503] el0_svc+0x78/0x1e0 [ 108.201028][ T4503] el0t_64_sync_handler+0xcc/0xe4 [ 108.202368][ T4503] el0t_64_sync+0x1a0/0x1a4 [ 108.203663][ T4503] irq event stamp: 12682 [ 108.204841][ T4503] hardirqs last enabled at (12681): [] __up_console_sem+0xb4/0x100 [ 108.207532][ T4503] hardirqs last disabled at (12682): [] el1_dbg+0x24/0x80 [ 108.210060][ T4503] softirqs last enabled at (12074): [] handle_softirqs+0xa4c/0xbf0 [ 108.212695][ T4503] softirqs last disabled at (12065): [] __irq_exit_rcu+0x240/0x440 [ 108.215443][ T4503] ---[ end trace 9a9b8a272ec376bd ]--- [ 108.238179][ C0] ------------[ cut here ]------------ [ 108.239769][ C0] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 108.241763][ C0] WARNING: CPU: 0 PID: 0 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1580 [ 108.244424][ C0] Modules linked in: [ 108.245512][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G W 5.15.189-syzkaller #0 [ 108.247922][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 108.250738][ C0] pstate: 604000c5 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 108.252883][ C0] pc : usb_submit_urb+0xa44/0x1580 [ 108.254291][ C0] lr : usb_submit_urb+0xa44/0x1580 [ 108.255673][ C0] sp : ffff800008007620 [ 108.256854][ C0] x29: ffff800008007660 x28: 1fffe0001838e003 x27: ffff80001239bb48 [ 108.259083][ C0] x26: ffff0000ca16da00 x25: ffff0000d0042650 x24: 000000000000000f [ 108.261251][ C0] x23: ffff8000123a21a0 x22: dfff800000000000 x21: 0000000000000002 [ 108.263479][ C0] x20: 0000000000000a20 x19: ffff0000d0042600 x18: 0000000000000102 [ 108.265771][ C0] x17: 0000000000000000 x16: ffff8000111bc798 x15: 00000000ffffffff [ 108.268010][ C0] x14: 0000000000ff0100 x13: 0000000000000001 x12: 0000000000ff0100 [ 108.270122][ C0] x11: 0000000000000101 x10: 0000000000000000 x9 : 800c872e5cd4b900 [ 108.272228][ C0] x8 : 800c872e5cd4b900 x7 : 0000000000000001 x6 : 0000000000000001 [ 108.274359][ C0] x5 : ffff800008006f18 x4 : ffff80001424f400 x3 : ffff80000850433c [ 108.276587][ C0] x2 : 0000000000000001 x1 : 0000000100000101 x0 : 0000000000000029 [ 108.278855][ C0] Call trace: [ 108.279812][ C0] usb_submit_urb+0xa44/0x1580 [ 108.281152][ C0] bcm5974_irq_trackpad+0x204/0xe88 [ 108.282601][ C0] __usb_hcd_giveback_urb+0x2e0/0x518 [ 108.284117][ C0] usb_hcd_giveback_urb+0x100/0x3e0 [ 108.285596][ C0] dummy_timer+0x5b8/0x231c [ 108.286933][ C0] call_timer_fn+0x19c/0x858 [ 108.288214][ C0] __run_timers+0x46c/0x6c4 [ 108.289489][ C0] run_timer_softirq+0x7c/0x114 [ 108.290862][ C0] handle_softirqs+0x344/0xbf0 [ 108.292132][ C0] __irq_exit_rcu+0x240/0x440 [ 108.293392][ C0] irq_exit+0x14/0x88 [ 108.294468][ C0] handle_domain_irq+0x14c/0x1fc [ 108.295859][ C0] gic_handle_irq+0x78/0x1c8 [ 108.297060][ C0] call_on_irq_stack+0x24/0x30 [ 108.298274][ C0] do_interrupt_handler+0x6c/0x88 [ 108.299769][ C0] el1_interrupt+0x30/0x58 [ 108.301017][ C0] el1h_64_irq_handler+0x18/0x24 [ 108.302375][ C0] el1h_64_irq+0x78/0x7c [ 108.303555][ C0] arch_local_irq_enable+0xc/0x18 [ 108.304964][ C0] default_idle_call+0xcc/0x418 [ 108.306352][ C0] do_idle+0x1c8/0x480 [ 108.307437][ C0] cpu_startup_entry+0x24/0x28 [ 108.308728][ C0] rest_init+0x360/0x390 [ 108.309869][ C0] arch_call_rest_init+0x14/0x20 [ 108.311206][ C0] start_kernel+0x49c/0x54c [ 108.312462][ C0] __primary_switched+0xa8/0xb0 [ 108.313779][ C0] irq event stamp: 305473 [ 108.315026][ C0] hardirqs last enabled at (305472): [] _raw_spin_unlock_irq+0x98/0x128 [ 108.317834][ C0] hardirqs last disabled at (305473): [] _raw_spin_lock_irqsave+0xfc/0x14c [ 108.320662][ C0] softirqs last enabled at (305462): [] handle_softirqs+0xa4c/0xbf0 [ 108.323419][ C0] softirqs last disabled at (305469): [] __irq_exit_rcu+0x240/0x440 [ 108.326144][ C0] ---[ end trace 9a9b8a272ec376be ]--- [ 108.327877][ C0] ------------[ cut here ]------------ [ 108.329349][ C0] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 108.331276][ C0] WARNING: CPU: 0 PID: 0 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1580 [ 108.334007][ C0] Modules linked in: [ 108.335028][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G W 5.15.189-syzkaller #0 [ 108.337532][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 108.339704][ T4549] usb 1-1: USB disconnect, device number 3 [ 108.340358][ C0] pstate: 604000c5 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 108.344167][ C0] pc : usb_submit_urb+0xa44/0x1580 [ 108.345573][ C0] lr : usb_submit_urb+0xa44/0x1580 [ 108.347059][ C0] sp : ffff800008007620 [ 108.348214][ C0] x29: ffff800008007660 x28: 1fffe0001838e003 x27: ffff80001239bb48 [ 108.350617][ C0] x26: ffff0000ca16da00 x25: ffff0000d0042650 x24: 000000000000000f [ 108.352839][ C0] x23: ffff8000123a21a0 x22: dfff800000000000 x21: 0000000000000002 [ 108.355063][ C0] x20: 0000000000000a20 x19: ffff0000d0042600 x18: 0000000000000102 [ 108.357334][ C0] x17: 0000000000000000 x16: ffff8000083020fc x15: 00000000ffffffff [ 108.359701][ C0] x14: 0000000000ff0100 x13: 0000000000000001 x12: 0000000000ff0100 [ 108.361923][ C0] x11: 0000000000000101 x10: 0000000000000000 x9 : 800c872e5cd4b900 [ 108.364216][ C0] x8 : 800c872e5cd4b900 x7 : 0000000000000001 x6 : 0000000000000001 [ 108.366439][ C0] x5 : ffff800008006f18 x4 : ffff80001424f400 x3 : ffff80000830220c [ 108.368683][ C0] x2 : 0000000000000001 x1 : 0000000000000101 x0 : 0000000000000029 [ 108.370911][ C0] Call trace: [ 108.371808][ C0] usb_submit_urb+0xa44/0x1580 [ 108.373197][ C0] bcm5974_irq_trackpad+0x204/0xe88 [ 108.374728][ C0] __usb_hcd_giveback_urb+0x2e0/0x518 [ 108.376199][ C0] usb_hcd_giveback_urb+0x100/0x3e0 [ 108.377672][ C0] dummy_timer+0x5b8/0x231c [ 108.378944][ C0] call_timer_fn+0x19c/0x858 [ 108.380156][ C0] __run_timers+0x46c/0x6c4 [ 108.381359][ C0] run_timer_softirq+0x7c/0x114 [ 108.382675][ C0] handle_softirqs+0x344/0xbf0 [ 108.383983][ C0] __irq_exit_rcu+0x240/0x440 [ 108.385257][ C0] irq_exit+0x14/0x88 [ 108.386328][ C0] handle_domain_irq+0x14c/0x1fc [ 108.387752][ C0] gic_handle_irq+0x78/0x1c8 [ 108.389112][ C0] call_on_irq_stack+0x24/0x30 [ 108.390505][ C0] do_interrupt_handler+0x6c/0x88 [ 108.391962][ C0] el1_interrupt+0x30/0x58 [ 108.393184][ C0] el1h_64_irq_handler+0x18/0x24 [ 108.394543][ C0] el1h_64_irq+0x78/0x7c [ 108.395751][ C0] arch_local_irq_enable+0xc/0x18 [ 108.397105][ C0] default_idle_call+0xcc/0x418 [ 108.398516][ C0] do_idle+0x1c8/0x480 [ 108.399621][ C0] cpu_startup_entry+0x24/0x28 [ 108.400922][ C0] rest_init+0x360/0x390 [ 108.402055][ C0] arch_call_rest_init+0x14/0x20 [ 108.403436][ C0] start_kernel+0x49c/0x54c [ 108.404705][ C0] __primary_switched+0xa8/0xb0 [ 108.406028][ C0] irq event stamp: 305485 [ 108.407215][ C0] hardirqs last enabled at (305484): [] _raw_spin_unlock_irq+0x98/0x128 [ 108.409933][ C0] hardirqs last disabled at (305485): [] _raw_spin_lock_irqsave+0xfc/0x14c [ 108.412761][ C0] softirqs last enabled at (305462): [] handle_softirqs+0xa4c/0xbf0 [ 108.415493][ C0] softirqs last disabled at (305469): [] __irq_exit_rcu+0x240/0x440 [ 108.418111][ C0] ---[ end trace 9a9b8a272ec376bf ]--- [ 108.419678][ C0] bcm5974 1-1:1.0: trackpad urb failed: -2 [ 108.459913][ T4549] bcm5974 1-1:1.0: could not read from device [ 109.118318][ T25] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 109.358374][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 109.478490][ T25] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 15 [ 109.481338][ T25] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 109.638610][ T25] usb 1-1: New USB device found, idVendor=05ac, idProduct=0243, bcdDevice= 0.40 [ 109.641241][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.643521][ T25] usb 1-1: Product: syz [ 109.644804][ T25] usb 1-1: Manufacturer: syz [ 109.646063][ T25] usb 1-1: SerialNumber: syz [ 109.691324][ T25] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input4 [ 110.128368][ T4503] ------------[ cut here ]------------ [ 110.129971][ T4503] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 110.131909][ T4503] WARNING: CPU: 0 PID: 4503 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1580 [ 110.134548][ T4503] Modules linked in: [ 110.135626][ T4503] CPU: 0 PID: 4503 Comm: udevd Tainted: G W 5.15.189-syzkaller #0 [ 110.138316][ T4503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 110.141184][ T4503] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 110.143355][ T4503] pc : usb_submit_urb+0xa44/0x1580 [ 110.144851][ T4503] lr : usb_submit_urb+0xa44/0x1580 [ 110.146217][ T4503] sp : ffff80001f537470 [ 110.147308][ T4503] x29: ffff80001f5374b0 x28: 1fffe0001a8aac03 x27: ffff80001239bb48 [ 110.149589][ T4503] x26: ffff0000c147bc00 x25: ffff0000d0015050 x24: 000000000000000f [ 110.151825][ T4503] x23: ffff8000123a21a0 x22: dfff800000000000 x21: 0000000000000002 [ 110.154088][ T4503] x20: 0000000000000cc0 x19: ffff0000d0015000 x18: 0000000000000001 [ 110.156386][ T4503] x17: 0000000000000000 x16: ffff8000111bc798 x15: 00000000ffffffff [ 110.158637][ T4503] x14: 0000000000ff0100 x13: 0000000000000001 x12: 0000000000ff0100 [ 110.160916][ T4503] x11: 0000000000000000 x10: 0000000000000000 x9 : 98d105fc68b83500 [ 110.163246][ T4503] x8 : 98d105fc68b83500 x7 : 0000000000000001 x6 : 0000000000000001 [ 110.165435][ T4503] x5 : ffff80001f536d58 x4 : ffff80001424f400 x3 : ffff80000850433c [ 110.167677][ T4503] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000029 [ 110.169909][ T4503] Call trace: [ 110.170819][ T4503] usb_submit_urb+0xa44/0x1580 [ 110.172109][ T4503] bcm5974_start_traffic+0xe0/0x154 [ 110.173557][ T4503] bcm5974_open+0x94/0x130 [ 110.174815][ T4503] input_open_device+0x134/0x288 [ 110.176158][ T4503] evdev_open+0x3c4/0x468 [ 110.177406][ T4503] chrdev_open+0x26c/0x4f0 [ 110.178646][ T4503] do_dentry_open+0x760/0xebc [ 110.179958][ T4503] vfs_open+0x7c/0x90 [ 110.181116][ T4503] path_openat+0x1f80/0x26e4 [ 110.182397][ T4503] do_filp_open+0x164/0x330 [ 110.183632][ T4503] do_sys_openat2+0x128/0x3d8 [ 110.184923][ T4503] __arm64_sys_openat+0x120/0x154 [ 110.186338][ T4503] invoke_syscall+0x98/0x2b8 [ 110.187630][ T4503] el0_svc_common+0x138/0x258 [ 110.188924][ T4503] do_el0_svc+0x58/0x14c [ 110.190149][ T4503] el0_svc+0x78/0x1e0 [ 110.191198][ T4503] el0t_64_sync_handler+0xcc/0xe4 [ 110.192578][ T4503] el0t_64_sync+0x1a0/0x1a4 [ 110.193883][ T4503] irq event stamp: 19670 [ 110.195022][ T4503] hardirqs last enabled at (19669): [] __up_console_sem+0xb4/0x100 [ 110.197660][ T4503] hardirqs last disabled at (19670): [] el1_dbg+0x24/0x80 [ 110.200059][ T4503] softirqs last enabled at (17986): [] local_bh_enable+0x10/0x34 [ 110.202661][ T4503] softirqs last disabled at (17984): [] local_bh_disable+0x10/0x34 [ 110.205320][ T4503] ---[ end trace 9a9b8a272ec376c0 ]--- [ 110.228169][ C0] ------------[ cut here ]------------ [ 110.229784][ C0] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 110.231734][ C0] WARNING: CPU: 0 PID: 0 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1580 [ 110.234272][ C0] Modules linked in: [ 110.235276][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G W 5.15.189-syzkaller #0 [ 110.237794][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 110.240563][ C0] pstate: 604000c5 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 110.242691][ C0] pc : usb_submit_urb+0xa44/0x1580 [ 110.244127][ C0] lr : usb_submit_urb+0xa44/0x1580 [ 110.245572][ C0] sp : ffff800008007620 [ 110.246723][ C0] x29: ffff800008007660 x28: 1fffe0001a8aac03 x27: ffff80001239bb48 [ 110.249034][ C0] x26: ffff0000c147bc00 x25: ffff0000d0015050 x24: 000000000000000f [ 110.251262][ C0] x23: ffff8000123a21a0 x22: dfff800000000000 x21: 0000000000000002 [ 110.253496][ C0] x20: 0000000000000a20 x19: ffff0000d0015000 x18: 0000000000000102 [ 110.255662][ C0] x17: 0000000000000000 x16: ffff8000111bc798 x15: 00000000ffffffff [ 110.257900][ C0] x14: 0000000000ff0100 x13: 0000000000000001 x12: 0000000000ff0100 [ 110.260171][ C0] x11: 0000000000000101 x10: 0000000000000000 x9 : 800c872e5cd4b900 [ 110.262362][ C0] x8 : 800c872e5cd4b900 x7 : 0000000000000001 x6 : 0000000000000001 [ 110.264626][ C0] x5 : ffff800008006f18 x4 : ffff80001424f400 x3 : ffff80000850433c [ 110.266865][ C0] x2 : 0000000000000001 x1 : 0000000100000101 x0 : 0000000000000029 [ 110.269179][ C0] Call trace: [ 110.270062][ C0] usb_submit_urb+0xa44/0x1580 [ 110.271393][ C0] bcm5974_irq_trackpad+0x204/0xe88 [ 110.272863][ C0] __usb_hcd_giveback_urb+0x2e0/0x518 [ 110.274270][ C0] usb_hcd_giveback_urb+0x100/0x3e0 [ 110.275644][ C0] dummy_timer+0x5b8/0x231c [ 110.276905][ C0] call_timer_fn+0x19c/0x858 [ 110.278192][ C0] __run_timers+0x46c/0x6c4 [ 110.279372][ C0] run_timer_softirq+0x7c/0x114 [ 110.280721][ C0] handle_softirqs+0x344/0xbf0 [ 110.282073][ C0] __irq_exit_rcu+0x240/0x440 [ 110.283383][ C0] irq_exit+0x14/0x88 [ 110.284445][ C0] handle_domain_irq+0x14c/0x1fc [ 110.285775][ C0] gic_handle_irq+0x78/0x1c8 [ 110.287052][ C0] call_on_irq_stack+0x24/0x30 [ 110.288332][ C0] do_interrupt_handler+0x6c/0x88 [ 110.289743][ C0] el1_interrupt+0x30/0x58 [ 110.290926][ C0] el1h_64_irq_handler+0x18/0x24 [ 110.292276][ C0] el1h_64_irq+0x78/0x7c [ 110.293397][ C0] arch_local_irq_enable+0xc/0x18 [ 110.294767][ C0] default_idle_call+0xcc/0x418 [ 110.296073][ C0] do_idle+0x1c8/0x480 [ 110.297218][ C0] cpu_startup_entry+0x24/0x28 [ 110.298551][ C0] rest_init+0x360/0x390 [ 110.299747][ C0] arch_call_rest_init+0x14/0x20 [ 110.301062][ C0] start_kernel+0x49c/0x54c [ 110.302266][ C0] __primary_switched+0xa8/0xb0 [ 110.303591][ C0] irq event stamp: 312513 [ 110.304772][ C0] hardirqs last enabled at (312512): [] _raw_spin_unlock_irq+0x98/0x128 [ 110.307511][ C0] hardirqs last disabled at (312513): [] _raw_spin_lock_irqsave+0xfc/0x14c [ 110.310475][ C0] softirqs last enabled at (312496): [] handle_softirqs+0xa4c/0xbf0 [ 110.313145][ C0] softirqs last disabled at (312509): [] __irq_exit_rcu+0x240/0x440 [ 110.315892][ C0] ---[ end trace 9a9b8a272ec376c1 ]--- [ 110.317583][ C0] ------------[ cut here ]------------ [ 110.319062][ C0] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 110.320992][ C0] WARNING: CPU: 0 PID: 0 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1580 [ 110.323613][ C0] Modules linked in: [ 110.324632][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G W 5.15.189-syzkaller #0 [ 110.327103][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 110.329833][ C0] pstate: 604000c5 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 110.330620][ T4549] usb 1-1: USB disconnect, device number 4 [ 110.331978][ C0] pc : usb_submit_urb+0xa44/0x1580 [ 110.335036][ C0] lr : usb_submit_urb+0xa44/0x1580 [ 110.336517][ C0] sp : ffff800008007620 [ 110.337669][ C0] x29: ffff800008007660 x28: 1fffe0001a8aac03 x27: ffff80001239bb48 [ 110.339896][ C0] x26: ffff0000c147bc00 x25: ffff0000d0015050 x24: 000000000000000f [ 110.342145][ C0] x23: ffff8000123a21a0 x22: dfff800000000000 x21: 0000000000000002 [ 110.344364][ C0] x20: 0000000000000a20 x19: ffff0000d0015000 x18: 0000000000000102 [ 110.346643][ C0] x17: 0000000000000000 x16: ffff8000083020fc x15: 00000000ffffffff [ 110.348857][ C0] x14: 0000000000ff0100 x13: 0000000000000001 x12: 0000000000ff0100 [ 110.351033][ C0] x11: 0000000000000101 x10: 0000000000000000 x9 : 800c872e5cd4b900 [ 110.353274][ C0] x8 : 800c872e5cd4b900 x7 : 0000000000000001 x6 : 0000000000000001 [ 110.355477][ C0] x5 : ffff800008006f18 x4 : ffff80001424f400 x3 : ffff80000830220c [ 110.357650][ C0] x2 : 0000000000000001 x1 : 0000000000000101 x0 : 0000000000000029 [ 110.359902][ C0] Call trace: [ 110.360811][ C0] usb_submit_urb+0xa44/0x1580 [ 110.362109][ C0] bcm5974_irq_trackpad+0x204/0xe88 [ 110.363525][ C0] __usb_hcd_giveback_urb+0x2e0/0x518 [ 110.365062][ C0] usb_hcd_giveback_urb+0x100/0x3e0 [ 110.366507][ C0] dummy_timer+0x5b8/0x231c [ 110.367724][ C0] call_timer_fn+0x19c/0x858 [ 110.368997][ C0] __run_timers+0x46c/0x6c4 [ 110.370281][ C0] run_timer_softirq+0x7c/0x114 [ 110.371614][ C0] handle_softirqs+0x344/0xbf0 [ 110.372921][ C0] __irq_exit_rcu+0x240/0x440 [ 110.374246][ C0] irq_exit+0x14/0x88 [ 110.375426][ C0] handle_domain_irq+0x14c/0x1fc [ 110.376809][ C0] gic_handle_irq+0x78/0x1c8 [ 110.378040][ C0] call_on_irq_stack+0x24/0x30 [ 110.379378][ C0] do_interrupt_handler+0x6c/0x88 [ 110.380775][ C0] el1_interrupt+0x30/0x58 [ 110.382049][ C0] el1h_64_irq_handler+0x18/0x24 [ 110.383459][ C0] el1h_64_irq+0x78/0x7c [ 110.384701][ C0] arch_local_irq_enable+0xc/0x18 [ 110.386131][ C0] default_idle_call+0xcc/0x418 [ 110.387462][ C0] do_idle+0x1c8/0x480 [ 110.388539][ C0] cpu_startup_entry+0x24/0x28 [ 110.389906][ C0] rest_init+0x360/0x390 [ 110.391107][ C0] arch_call_rest_init+0x14/0x20 [ 110.392474][ C0] start_kernel+0x49c/0x54c [ 110.393758][ C0] __primary_switched+0xa8/0xb0 [ 110.395086][ C0] irq event stamp: 312535 [ 110.396255][ C0] hardirqs last enabled at (312534): [] _raw_spin_unlock_irq+0x98/0x128 [ 110.398884][ C0] hardirqs last disabled at (312535): [] _raw_spin_lock_irqsave+0xfc/0x14c [ 110.401716][ C0] softirqs last enabled at (312496): [] handle_softirqs+0xa4c/0xbf0 [ 110.404371][ C0] softirqs last disabled at (312509): [] __irq_exit_rcu+0x240/0x440 [ 110.406975][ C0] ---[ end trace 9a9b8a272ec376c2 ]--- [ 110.408504][ C0] bcm5974 1-1:1.0: trackpad urb failed: -2 [ 110.411945][ T4503] bcm5974 1-1:1.0: could not read from device 1970/01/01 00:01:50 executed programs: 5 [ 111.118244][ T7] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 111.368367][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 111.498303][ T7] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 15 [ 111.501057][ T7] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 111.658295][ T7] usb 1-1: New USB device found, idVendor=05ac, idProduct=0243, bcdDevice= 0.40 [ 111.660731][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.662886][ T7] usb 1-1: Product: syz [ 111.663998][ T7] usb 1-1: Manufacturer: syz [ 111.665343][ T7] usb 1-1: SerialNumber: syz [ 111.711231][ T7] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input5 [ 112.148279][ T4503] ------------[ cut here ]------------ [ 112.149849][ T4503] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 112.151763][ T4503] WARNING: CPU: 0 PID: 4503 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1580 [ 112.154407][ T4503] Modules linked in: [ 112.155514][ T4503] CPU: 0 PID: 4503 Comm: udevd Tainted: G W 5.15.189-syzkaller #0 [ 112.157970][ T4503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 112.160904][ T4503] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 112.163104][ T4503] pc : usb_submit_urb+0xa44/0x1580 [ 112.164526][ T4503] lr : usb_submit_urb+0xa44/0x1580 [ 112.165955][ T4503] sp : ffff80001f537470 [ 112.167037][ T4503] x29: ffff80001f5374b0 x28: 1fffe00018372a03 x27: ffff80001239bb48 [ 112.169156][ T4503] x26: ffff0000d8611800 x25: ffff0000cfb32850 x24: 000000000000000f [ 112.171364][ T4503] x23: ffff8000123a21a0 x22: dfff800000000000 x21: 0000000000000002 [ 112.173583][ T4503] x20: 0000000000000cc0 x19: ffff0000cfb32800 x18: 0000000000000001 [ 112.175756][ T4503] x17: 0000000000000000 x16: ffff8000111bc798 x15: 00000000ffffffff [ 112.177891][ T4503] x14: 0000000000ff0100 x13: 0000000000000001 x12: 0000000000ff0100 [ 112.180095][ T4503] x11: 0000000000000000 x10: 0000000000000000 x9 : 98d105fc68b83500 [ 112.182192][ T4503] x8 : 98d105fc68b83500 x7 : 0000000000000001 x6 : 0000000000000001 [ 112.184305][ T4503] x5 : ffff80001f536d58 x4 : ffff80001424f400 x3 : ffff80000850433c [ 112.186492][ T4503] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000029 [ 112.188655][ T4503] Call trace: [ 112.189510][ T4503] usb_submit_urb+0xa44/0x1580 [ 112.190803][ T4503] bcm5974_start_traffic+0xe0/0x154 [ 112.192175][ T4503] bcm5974_open+0x94/0x130 [ 112.193359][ T4503] input_open_device+0x134/0x288 [ 112.194727][ T4503] evdev_open+0x3c4/0x468 [ 112.195875][ T4503] chrdev_open+0x26c/0x4f0 [ 112.197023][ T4503] do_dentry_open+0x760/0xebc [ 112.198246][ T4503] vfs_open+0x7c/0x90 [ 112.199322][ T4503] path_openat+0x1f80/0x26e4 [ 112.200529][ T4503] do_filp_open+0x164/0x330 [ 112.201693][ T4503] do_sys_openat2+0x128/0x3d8 [ 112.202947][ T4503] __arm64_sys_openat+0x120/0x154 [ 112.204297][ T4503] invoke_syscall+0x98/0x2b8 [ 112.205556][ T4503] el0_svc_common+0x138/0x258 [ 112.206845][ T4503] do_el0_svc+0x58/0x14c [ 112.207995][ T4503] el0_svc+0x78/0x1e0 [ 112.209152][ T4503] el0t_64_sync_handler+0xcc/0xe4 [ 112.210561][ T4503] el0t_64_sync+0x1a0/0x1a4 [ 112.211766][ T4503] irq event stamp: 26380 [ 112.212921][ T4503] hardirqs last enabled at (26379): [] __up_console_sem+0xb4/0x100 [ 112.215527][ T4503] hardirqs last disabled at (26380): [] el1_dbg+0x24/0x80 [ 112.217833][ T4503] softirqs last enabled at (25364): [] local_bh_enable+0x10/0x34 [ 112.220593][ T4503] softirqs last disabled at (25362): [] local_bh_disable+0x10/0x34 [ 112.223132][ T4503] ---[ end trace 9a9b8a272ec376c3 ]--- [ 112.238181][ C0] ------------[ cut here ]------------ [ 112.239697][ C0] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 112.241596][ C0] WARNING: CPU: 0 PID: 0 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1580 [ 112.244115][ C0] Modules linked in: [ 112.245126][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G W 5.15.189-syzkaller #0 [ 112.247635][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 112.250370][ C0] pstate: 604000c5 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 112.252554][ C0] pc : usb_submit_urb+0xa44/0x1580 [ 112.253944][ C0] lr : usb_submit_urb+0xa44/0x1580 [ 112.255358][ C0] sp : ffff800008007620 [ 112.256473][ C0] x29: ffff800008007660 x28: 1fffe00018372a03 x27: ffff80001239bb48 [ 112.258622][ C0] x26: ffff0000d8611800 x25: ffff0000cfb32850 x24: 000000000000000f [ 112.260835][ C0] x23: ffff8000123a21a0 x22: dfff800000000000 x21: 0000000000000002 [ 112.263058][ C0] x20: 0000000000000a20 x19: ffff0000cfb32800 x18: 0000000000000102 [ 112.265237][ C0] x17: 0000000000000000 x16: ffff8000111bc798 x15: 00000000ffffffff [ 112.267561][ C0] x14: 0000000000ff0100 x13: 0000000000000001 x12: 0000000000ff0100 [ 112.269746][ C0] x11: 0000000000000101 x10: 0000000000000000 x9 : 800c872e5cd4b900 [ 112.272002][ C0] x8 : 800c872e5cd4b900 x7 : 0000000000000001 x6 : 0000000000000001 [ 112.274194][ C0] x5 : ffff800008006f18 x4 : ffff80001424f400 x3 : ffff80000850433c [ 112.276357][ C0] x2 : 0000000000000001 x1 : 0000000100000101 x0 : 0000000000000029 [ 112.278530][ C0] Call trace: [ 112.279435][ C0] usb_submit_urb+0xa44/0x1580 [ 112.280824][ C0] bcm5974_irq_trackpad+0x204/0xe88 [ 112.282240][ C0] __usb_hcd_giveback_urb+0x2e0/0x518 [ 112.283677][ C0] usb_hcd_giveback_urb+0x100/0x3e0 [ 112.285137][ C0] dummy_timer+0x5b8/0x231c [ 112.286422][ C0] call_timer_fn+0x19c/0x858 [ 112.287697][ C0] __run_timers+0x46c/0x6c4 [ 112.288959][ C0] run_timer_softirq+0x7c/0x114 [ 112.290317][ C0] handle_softirqs+0x344/0xbf0 [ 112.291703][ C0] __irq_exit_rcu+0x240/0x440 [ 112.293019][ C0] irq_exit+0x14/0x88 [ 112.294145][ C0] handle_domain_irq+0x14c/0x1fc [ 112.295641][ C0] gic_handle_irq+0x78/0x1c8 [ 112.296945][ C0] call_on_irq_stack+0x24/0x30 [ 112.298356][ C0] do_interrupt_handler+0x6c/0x88 [ 112.299721][ C0] el1_interrupt+0x30/0x58 [ 112.300934][ C0] el1h_64_irq_handler+0x18/0x24 [ 112.302271][ C0] el1h_64_irq+0x78/0x7c [ 112.303426][ C0] arch_local_irq_enable+0xc/0x18 [ 112.304845][ C0] default_idle_call+0xcc/0x418 [ 112.306203][ C0] do_idle+0x1c8/0x480 [ 112.307340][ C0] cpu_startup_entry+0x24/0x28 [ 112.308608][ C0] rest_init+0x360/0x390 [ 112.309735][ C0] arch_call_rest_init+0x14/0x20 [ 112.311161][ C0] start_kernel+0x49c/0x54c [ 112.312377][ C0] __primary_switched+0xa8/0xb0 [ 112.313804][ C0] irq event stamp: 322341 [ 112.315067][ C0] hardirqs last enabled at (322340): [] _raw_spin_unlock_irq+0x98/0x128 [ 112.317870][ C0] hardirqs last disabled at (322341): [] _raw_spin_lock_irqsave+0xfc/0x14c [ 112.320749][ C0] softirqs last enabled at (322320): [] handle_softirqs+0xa4c/0xbf0 [ 112.323449][ C0] softirqs last disabled at (322337): [] __irq_exit_rcu+0x240/0x440 [ 112.326116][ C0] ---[ end trace 9a9b8a272ec376c4 ]--- [ 112.327777][ C0] ------------[ cut here ]------------ [ 112.329322][ C0] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 112.331340][ C0] WARNING: CPU: 0 PID: 0 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1580 [ 112.333949][ C0] Modules linked in: [ 112.335043][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G W 5.15.189-syzkaller #0 [ 112.337558][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 112.340403][ C0] pstate: 604000c5 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 112.342658][ C0] pc : usb_submit_urb+0xa44/0x1580 [ 112.344059][ C0] lr : usb_submit_urb+0xa44/0x1580 [ 112.345470][ C0] sp : ffff800008007620 [ 112.346640][ C0] x29: ffff800008007660 x28: 1fffe00018372a03 x27: ffff80001239bb48 [ 112.348937][ C0] x26: ffff0000d8611800 x25: ffff0000cfb32850 x24: 000000000000000f [ 112.351225][ C0] x23: ffff8000123a21a0 x22: dfff800000000000 x21: 0000000000000002 [ 112.351691][ T4549] usb 1-1: USB disconnect, device number 5 [ 112.353345][ C0] x20: 0000000000000a20 x19: ffff0000cfb32800 x18: 0000000000000102 [ 112.357405][ C0] x17: 0000000000000000 x16: ffff8000083020fc x15: 00000000ffffffff [ 112.359730][ C0] x14: 0000000000ff0100 x13: 0000000000000001 x12: 0000000000ff0100 [ 112.361931][ C0] x11: 0000000000000101 x10: 0000000000000000 x9 : 800c872e5cd4b900 [ 112.364102][ C0] x8 : 800c872e5cd4b900 x7 : 0000000000000001 x6 : 0000000000000001 [ 112.366395][ C0] x5 : ffff800008006f18 x4 : ffff80001424f400 x3 : ffff80000830220c [ 112.368584][ C0] x2 : 0000000000000001 x1 : 0000000000000101 x0 : 0000000000000029 [ 112.370848][ C0] Call trace: [ 112.371725][ C0] usb_submit_urb+0xa44/0x1580 [ 112.373060][ C0] bcm5974_irq_trackpad+0x204/0xe88 [ 112.374577][ C0] __usb_hcd_giveback_urb+0x2e0/0x518 [ 112.376049][ C0] usb_hcd_giveback_urb+0x100/0x3e0 [ 112.377541][ C0] dummy_timer+0x5b8/0x231c [ 112.378769][ C0] call_timer_fn+0x19c/0x858 [ 112.380078][ C0] __run_timers+0x46c/0x6c4 [ 112.381262][ C0] run_timer_softirq+0x7c/0x114 [ 112.382566][ C0] handle_softirqs+0x344/0xbf0 [ 112.383896][ C0] __irq_exit_rcu+0x240/0x440 [ 112.385175][ C0] irq_exit+0x14/0x88 [ 112.386238][ C0] handle_domain_irq+0x14c/0x1fc [ 112.387567][ C0] gic_handle_irq+0x78/0x1c8 [ 112.388826][ C0] call_on_irq_stack+0x24/0x30 [ 112.390330][ C0] do_interrupt_handler+0x6c/0x88 [ 112.391772][ C0] el1_interrupt+0x30/0x58 [ 112.392991][ C0] el1h_64_irq_handler+0x18/0x24 [ 112.394420][ C0] el1h_64_irq+0x78/0x7c [ 112.395650][ C0] arch_local_irq_enable+0xc/0x18 [ 112.397055][ C0] default_idle_call+0xcc/0x418 [ 112.398370][ C0] do_idle+0x1c8/0x480 [ 112.399509][ C0] cpu_startup_entry+0x24/0x28 [ 112.400807][ C0] rest_init+0x360/0x390 [ 112.401948][ C0] arch_call_rest_init+0x14/0x20 [ 112.403340][ C0] start_kernel+0x49c/0x54c [ 112.404693][ C0] __primary_switched+0xa8/0xb0 [ 112.406046][ C0] irq event stamp: 322357 [ 112.407241][ C0] hardirqs last enabled at (322356): [] _raw_spin_unlock_irq+0x98/0x128 [ 112.409962][ C0] hardirqs last disabled at (322357): [] _raw_spin_lock_irqsave+0xfc/0x14c [ 112.412758][ C0] softirqs last enabled at (322320): [] handle_softirqs+0xa4c/0xbf0 [ 112.415526][ C0] softirqs last disabled at (322337): [] __irq_exit_rcu+0x240/0x440 [ 112.418193][ C0] ---[ end trace 9a9b8a272ec376c5 ]--- [ 112.419731][ C0] bcm5974 1-1:1.0: trackpad urb failed: -2 [ 112.421952][ T4503] bcm5974 1-1:1.0: could not read from device [ 113.138247][ T7] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 113.388241][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 113.508397][ T7] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 15 [ 113.511265][ T7] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 113.678508][ T7] usb 1-1: New USB device found, idVendor=05ac, idProduct=0243, bcdDevice= 0.40 [ 113.680997][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.683202][ T7] usb 1-1: Product: syz [ 113.684510][ T7] usb 1-1: Manufacturer: syz [ 113.685848][ T7] usb 1-1: SerialNumber: syz [ 113.731192][ T7] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input6 [ 114.158520][ T4503] ------------[ cut here ]------------ [ 114.160113][ T4503] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 114.162017][ T4503] WARNING: CPU: 0 PID: 4503 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1580 [ 114.164621][ T4503] Modules linked in: [ 114.165708][ T4503] CPU: 0 PID: 4503 Comm: udevd Tainted: G W 5.15.189-syzkaller #0 [ 114.168154][ T4503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 114.170882][ T4503] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 114.172966][ T4503] pc : usb_submit_urb+0xa44/0x1580 [ 114.174416][ T4503] lr : usb_submit_urb+0xa44/0x1580 [ 114.175777][ T4503] sp : ffff80001f537470 [ 114.176894][ T4503] x29: ffff80001f5374b0 x28: 1fffe0001a52b203 x27: ffff80001239bb48 [ 114.179103][ T4503] x26: ffff0000cfc5f100 x25: ffff0000cfb2f850 x24: 000000000000000f [ 114.181247][ T4503] x23: ffff8000123a21a0 x22: dfff800000000000 x21: 0000000000000002 [ 114.183500][ T4503] x20: 0000000000000cc0 x19: ffff0000cfb2f800 x18: 0000000000000001 [ 114.185751][ T4503] x17: 0000000000000000 x16: ffff8000111bc798 x15: 00000000ffffffff [ 114.187920][ T4503] x14: 0000000000ff0100 x13: 0000000000000001 x12: 0000000000ff0100 [ 114.190205][ T4503] x11: 0000000000000000 x10: 0000000000000000 x9 : 98d105fc68b83500 [ 114.192521][ T4503] x8 : 98d105fc68b83500 x7 : 0000000000000001 x6 : 0000000000000001 [ 114.194849][ T4503] x5 : ffff80001f536d58 x4 : ffff80001424f400 x3 : ffff80000850433c [ 114.197125][ T4503] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000029 [ 114.199310][ T4503] Call trace: [ 114.200248][ T4503] usb_submit_urb+0xa44/0x1580 [ 114.201652][ T4503] bcm5974_start_traffic+0xe0/0x154 [ 114.203078][ T4503] bcm5974_open+0x94/0x130 [ 114.204321][ T4503] input_open_device+0x134/0x288 [ 114.205712][ T4503] evdev_open+0x3c4/0x468 [ 114.206893][ T4503] chrdev_open+0x26c/0x4f0 [ 114.208122][ T4503] do_dentry_open+0x760/0xebc [ 114.209490][ T4503] vfs_open+0x7c/0x90 [ 114.210551][ T4503] path_openat+0x1f80/0x26e4 [ 114.211852][ T4503] do_filp_open+0x164/0x330 [ 114.213121][ T4503] do_sys_openat2+0x128/0x3d8 [ 114.214434][ T4503] __arm64_sys_openat+0x120/0x154 [ 114.215860][ T4503] invoke_syscall+0x98/0x2b8 [ 114.217121][ T4503] el0_svc_common+0x138/0x258 [ 114.218390][ T4503] do_el0_svc+0x58/0x14c [ 114.219547][ T4503] el0_svc+0x78/0x1e0 [ 114.220627][ T4503] el0t_64_sync_handler+0xcc/0xe4 [ 114.222046][ T4503] el0t_64_sync+0x1a0/0x1a4 [ 114.223311][ T4503] irq event stamp: 32514 [ 114.224530][ T4503] hardirqs last enabled at (32513): [] __up_console_sem+0xb4/0x100 [ 114.227206][ T4503] hardirqs last disabled at (32514): [] el1_dbg+0x24/0x80 [ 114.229572][ T4503] softirqs last enabled at (31562): [] local_bh_enable+0x10/0x34 [ 114.232170][ T4503] softirqs last disabled at (31560): [] local_bh_disable+0x10/0x34 [ 114.234858][ T4503] ---[ end trace 9a9b8a272ec376c6 ]--- [ 114.248209][ C0] ------------[ cut here ]------------ [ 114.249835][ C0] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 114.251810][ C0] WARNING: CPU: 0 PID: 0 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1580 [ 114.254491][ C0] Modules linked in: [ 114.255553][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G W 5.15.189-syzkaller #0 [ 114.258029][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 114.260791][ C0] pstate: 604000c5 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 114.262965][ C0] pc : usb_submit_urb+0xa44/0x1580 [ 114.264383][ C0] lr : usb_submit_urb+0xa44/0x1580 [ 114.265792][ C0] sp : ffff800008007620 [ 114.266944][ C0] x29: ffff800008007660 x28: 1fffe0001a52b203 x27: ffff80001239bb48 [ 114.269151][ C0] x26: ffff0000cfc5f100 x25: ffff0000cfb2f850 x24: 000000000000000f [ 114.271318][ C0] x23: ffff8000123a21a0 x22: dfff800000000000 x21: 0000000000000002 [ 114.273640][ C0] x20: 0000000000000a20 x19: ffff0000cfb2f800 x18: 0000000000000102 [ 114.275907][ C0] x17: 0000000000000000 x16: ffff8000111bc798 x15: 00000000ffffffff [ 114.278139][ C0] x14: 0000000000ff0100 x13: 0000000000000001 x12: 0000000000ff0100 [ 114.280318][ C0] x11: 0000000000000101 x10: 0000000000000000 x9 : 800c872e5cd4b900 [ 114.282545][ C0] x8 : 800c872e5cd4b900 x7 : 0000000000000001 x6 : 0000000000000001 [ 114.284877][ C0] x5 : ffff800008006f18 x4 : ffff80001424f400 x3 : ffff80000850433c [ 114.287044][ C0] x2 : 0000000000000001 x1 : 0000000100000101 x0 : 0000000000000029 [ 114.289284][ C0] Call trace: [ 114.290149][ C0] usb_submit_urb+0xa44/0x1580 [ 114.291432][ C0] bcm5974_irq_trackpad+0x204/0xe88 [ 114.292884][ C0] __usb_hcd_giveback_urb+0x2e0/0x518 [ 114.294357][ C0] usb_hcd_giveback_urb+0x100/0x3e0 [ 114.295823][ C0] dummy_timer+0x5b8/0x231c [ 114.297071][ C0] call_timer_fn+0x19c/0x858 [ 114.298315][ C0] __run_timers+0x46c/0x6c4 [ 114.299506][ C0] run_timer_softirq+0x7c/0x114 [ 114.300810][ C0] handle_softirqs+0x344/0xbf0 [ 114.302103][ C0] __irq_exit_rcu+0x240/0x440 [ 114.303476][ C0] irq_exit+0x14/0x88 [ 114.304586][ C0] handle_domain_irq+0x14c/0x1fc [ 114.305938][ C0] gic_handle_irq+0x78/0x1c8 [ 114.307196][ C0] call_on_irq_stack+0x24/0x30 [ 114.308517][ C0] do_interrupt_handler+0x6c/0x88 [ 114.309862][ C0] el1_interrupt+0x30/0x58 [ 114.311019][ C0] el1h_64_irq_handler+0x18/0x24 [ 114.312380][ C0] el1h_64_irq+0x78/0x7c [ 114.313604][ C0] arch_local_irq_enable+0xc/0x18 [ 114.314962][ C0] default_idle_call+0xcc/0x418 [ 114.316247][ C0] do_idle+0x1c8/0x480 [ 114.317350][ C0] cpu_startup_entry+0x24/0x28 [ 114.318709][ C0] rest_init+0x360/0x390 [ 114.319817][ C0] arch_call_rest_init+0x14/0x20 [ 114.321107][ C0] start_kernel+0x49c/0x54c [ 114.322338][ C0] __primary_switched+0xa8/0xb0 [ 114.323644][ C0] irq event stamp: 330303 [ 114.324819][ C0] hardirqs last enabled at (330302): [] _raw_spin_unlock_irq+0x98/0x128 [ 114.327672][ C0] hardirqs last disabled at (330303): [] _raw_spin_lock_irqsave+0xfc/0x14c [ 114.330473][ C0] softirqs last enabled at (330262): [] handle_softirqs+0xa4c/0xbf0 [ 114.333107][ C0] softirqs last disabled at (330299): [] __irq_exit_rcu+0x240/0x440 [ 114.335715][ C0] ---[ end trace 9a9b8a272ec376c7 ]--- [ 114.337367][ C0] ------------[ cut here ]------------ [ 114.338909][ C0] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 114.340880][ C0] WARNING: CPU: 0 PID: 0 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1580 [ 114.343522][ C0] Modules linked in: [ 114.344574][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G W 5.15.189-syzkaller #0 [ 114.347032][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 114.349729][ C0] pstate: 604000c5 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 114.351881][ C0] pc : usb_submit_urb+0xa44/0x1580 [ 114.353290][ C0] lr : usb_submit_urb+0xa44/0x1580 [ 114.354741][ C0] sp : ffff800008007620 [ 114.355929][ C0] x29: ffff800008007660 x28: 1fffe0001a52b203 x27: ffff80001239bb48 [ 114.358151][ C0] x26: ffff0000cfc5f100 x25: ffff0000cfb2f850 x24: 000000000000000f [ 114.360332][ C0] x23: ffff8000123a21a0 x22: dfff800000000000 x21: 0000000000000002 [ 114.361303][ T4549] usb 1-1: USB disconnect, device number 6 [ 114.362608][ C0] x20: 0000000000000a20 x19: ffff0000cfb2f800 x18: 0000000000000102 [ 114.366388][ C0] x17: 0000000000000000 x16: ffff8000083020fc x15: 00000000ffffffff [ 114.368598][ C0] x14: 0000000000ff0100 x13: 0000000000000001 x12: 0000000000ff0100 [ 114.370787][ C0] x11: 0000000000000101 x10: 0000000000000000 x9 : 800c872e5cd4b900 [ 114.372977][ C0] x8 : 800c872e5cd4b900 x7 : 0000000000000001 x6 : 0000000000000001 [ 114.375203][ C0] x5 : ffff800008006f18 x4 : ffff80001424f400 x3 : ffff80000830220c [ 114.377392][ C0] x2 : 0000000000000001 x1 : 0000000000000101 x0 : 0000000000000029 [ 114.379612][ C0] Call trace: [ 114.380524][ C0] usb_submit_urb+0xa44/0x1580 [ 114.381893][ C0] bcm5974_irq_trackpad+0x204/0xe88 [ 114.383306][ C0] __usb_hcd_giveback_urb+0x2e0/0x518 [ 114.384807][ C0] usb_hcd_giveback_urb+0x100/0x3e0 [ 114.386195][ C0] dummy_timer+0x5b8/0x231c [ 114.387379][ C0] call_timer_fn+0x19c/0x858 [ 114.388594][ C0] __run_timers+0x46c/0x6c4 [ 114.389867][ C0] run_timer_softirq+0x7c/0x114 [ 114.391168][ C0] handle_softirqs+0x344/0xbf0 [ 114.392461][ C0] __irq_exit_rcu+0x240/0x440 [ 114.393767][ C0] irq_exit+0x14/0x88 [ 114.394907][ C0] handle_domain_irq+0x14c/0x1fc [ 114.396190][ C0] gic_handle_irq+0x78/0x1c8 [ 114.397515][ C0] call_on_irq_stack+0x24/0x30 [ 114.398831][ C0] do_interrupt_handler+0x6c/0x88 [ 114.400178][ C0] el1_interrupt+0x30/0x58 [ 114.401418][ C0] el1h_64_irq_handler+0x18/0x24 [ 114.402822][ C0] el1h_64_irq+0x78/0x7c [ 114.404028][ C0] arch_local_irq_enable+0xc/0x18 [ 114.405405][ C0] default_idle_call+0xcc/0x418 [ 114.406786][ C0] do_idle+0x1c8/0x480 [ 114.407897][ C0] cpu_startup_entry+0x24/0x28 [ 114.409176][ C0] rest_init+0x360/0x390 [ 114.410377][ C0] arch_call_rest_init+0x14/0x20 [ 114.411761][ C0] start_kernel+0x49c/0x54c [ 114.413029][ C0] __primary_switched+0xa8/0xb0 [ 114.414383][ C0] irq event stamp: 330315 [ 114.415595][ C0] hardirqs last enabled at (330314): [] _raw_spin_unlock_irq+0x98/0x128 [ 114.418391][ C0] hardirqs last disabled at (330315): [] _raw_spin_lock_irqsave+0xfc/0x14c [ 114.421273][ C0] softirqs last enabled at (330262): [] handle_softirqs+0xa4c/0xbf0 [ 114.424011][ C0] softirqs last disabled at (330299): [] __irq_exit_rcu+0x240/0x440 [ 114.426610][ C0] ---[ end trace 9a9b8a272ec376c8 ]--- [ 114.428068][ C0] bcm5974 1-1:1.0: trackpad urb failed: -2 [ 114.430218][ T4503] bcm5974 1-1:1.0: could not read from device [ 115.138268][ T7] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 115.388253][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 115.538281][ T7] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 15 [ 115.541070][ T7] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 115.698360][ T7] usb 1-1: New USB device found, idVendor=05ac, idProduct=0243, bcdDevice= 0.40 [ 115.701023][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.703196][ T7] usb 1-1: Product: syz [ 115.704387][ T7] usb 1-1: Manufacturer: syz [ 115.705629][ T7] usb 1-1: SerialNumber: syz [ 115.751323][ T7] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input7