Warning: Permanently added '10.128.0.12' (ED25519) to the list of known hosts.
executing program
[ 40.175751][ T29] audit: type=1400 audit(1744904530.964:80): avc: denied { execmem } for pid=2939 comm="syz-executor401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 40.195899][ T29] audit: type=1400 audit(1744904530.964:81): avc: denied { read write } for pid=2940 comm="syz-executor401" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 40.219835][ T29] audit: type=1400 audit(1744904530.964:82): avc: denied { open } for pid=2940 comm="syz-executor401" path="/dev/raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 40.243806][ T29] audit: type=1400 audit(1744904530.964:83): avc: denied { ioctl } for pid=2940 comm="syz-executor401" path="/dev/raw-gadget" dev="devtmpfs" ino=236 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 40.422017][ T42] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 40.571901][ T42] usb 1-1: Using ep0 maxpacket: 16
[ 40.579199][ T42] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 40.588262][ T42] usb 1-1: config 7 has an invalid interface number: 180 but max is 1
[ 40.596521][ T42] usb 1-1: config 7 contains an unexpected descriptor of type 0x2, skipping
[ 40.605342][ T42] usb 1-1: config 7 contains an unexpected descriptor of type 0x2, skipping
[ 40.614071][ T42] usb 1-1: config 7 has an invalid interface number: 226 but max is 1
[ 40.622297][ T42] usb 1-1: config 7 has no interface number 0
[ 40.628414][ T42] usb 1-1: config 7 has no interface number 1
[ 40.634590][ T42] usb 1-1: config 7 interface 180 altsetting 2 bulk endpoint 0x2 has invalid maxpacket 16
[ 40.644542][ T42] usb 1-1: config 7 interface 180 altsetting 2 bulk endpoint 0x83 has invalid maxpacket 1023
[ 40.654777][ T42] usb 1-1: config 7 interface 180 altsetting 2 endpoint 0x5 has an invalid bInterval 205, changing to 11
[ 40.666053][ T42] usb 1-1: config 7 interface 180 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[ 40.676957][ T42] usb 1-1: config 7 interface 180 altsetting 2 endpoint 0x9 has an invalid bInterval 129, changing to 7
[ 40.688122][ T42] usb 1-1: config 7 interface 180 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[ 40.699032][ T42] usb 1-1: config 7 interface 180 altsetting 2 has a duplicate endpoint with address 0x9, skipping
[ 40.709754][ T42] usb 1-1: config 7 interface 180 altsetting 2 endpoint 0xC has invalid maxpacket 1023, setting to 64
[ 40.720750][ T42] usb 1-1: config 7 interface 180 altsetting 2 has a duplicate endpoint with address 0x5, skipping
[ 40.731473][ T42] usb 1-1: config 7 interface 180 altsetting 2 has 12 endpoint descriptors, different from the interface descriptor's value: 14
[ 40.744759][ T42] usb 1-1: config 7 interface 226 altsetting 2 has a duplicate endpoint with address 0xB, skipping
[ 40.755523][ T42] usb 1-1: config 7 interface 226 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 1024
[ 40.765661][ T42] usb 1-1: config 7 interface 180 has no altsetting 0
[ 40.772518][ T42] usb 1-1: config 7 interface 226 has no altsetting 0
[ 40.781375][ T42] usb 1-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=5f.56
[ 40.790465][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 40.798542][ T42] usb 1-1: Product: syz
[ 40.802770][ T42] usb 1-1: Manufacturer: syz
[ 40.807384][ T42] usb 1-1: SerialNumber: syz
[ 40.816234][ T2940] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 40.823701][ T2940] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
executing program
[ 41.045003][ T42] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:7.180/input/input6
[ 41.056368][ T2825] ------------[ cut here ]------------
[ 41.062174][ T2825] usb 1-1: BOGUS urb xfer, pipe 1 != type 3
[ 41.068507][ T2825] WARNING: CPU: 1 PID: 2825 at drivers/usb/core/urb.c:503 usb_submit_urb+0xe4a/0x1730
[ 41.078952][ T2825] Modules linked in:
[ 41.083446][ T2825] CPU: 1 UID: 0 PID: 2825 Comm: acpid Not tainted 6.15.0-rc1-syzkaller-00082-gf41f7b3d9daf #0 PREEMPT(voluntary)
[ 41.095808][ T2825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 41.106205][ T2825] RIP: 0010:usb_submit_urb+0xe4a/0x1730
[ 41.111858][ T2825] Code: 84 38 02 00 00 e8 66 43 e7 fc 4c 89 ef e8 5e f9 d3 fe 45 89 e0 89 e9 4c 89 f2 48 89 c6 48 c7 c7 40 42 c3 87 e8 77 c4 aa fc 90 <0f> 0b 90 90 e9 ea f8 ff ff e8 38 43 e7 fc 49 81 c4 c0 05 00 00 e9
[ 41.131517][ T2825] RSP: 0018:ffffc9000141f7f0 EFLAGS: 00010286
[ 41.137623][ T2825] RAX: 0000000000000000 RBX: ffff8881158cca00 RCX: ffffffff813fcc28
[ 41.145637][ T2825] RDX: ffff888116520000 RSI: ffffffff813fcc35 RDI: 0000000000000001
[ 41.153664][ T2825] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000
[ 41.161685][ T2825] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000003
[ 41.169698][ T2825] R13: ffff888108aa30b0 R14: ffff88810cbf8160 R15: 0000000000000002
[ 41.177730][ T2825] FS: 00007f4928008740(0000) GS:ffff8882692d3000(0000) knlGS:0000000000000000
[ 41.186713][ T2825] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 41.193338][ T2825] CR2: 00007ffdaebfbda8 CR3: 0000000116538000 CR4: 00000000003506f0
[ 41.201314][ T2825] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 41.209320][ T2825] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 41.217362][ T2825] Call Trace:
[ 41.220644][ T2825]
[ 41.223611][ T2825] ? _raw_spin_unlock_irq+0x21/0x50
[ 41.228849][ T2825] bcm5974_start_traffic+0xb8/0x180
[ 41.234110][ T2825] bcm5974_open+0xa2/0x180
[ 41.238571][ T2825] input_open_device+0x230/0x390
[ 41.243553][ T2825] ? __pfx_bcm5974_open+0x10/0x10
[ 41.248612][ T2825] evdev_open+0x52a/0x690
[ 41.253061][ T2825] ? __pfx_evdev_open+0x10/0x10
[ 41.257938][ T2825] chrdev_open+0x231/0x6a0
[ 41.262436][ T2825] ? __pfx_chrdev_open+0x10/0x10
[ 41.267445][ T2825] do_dentry_open+0x6d7/0x13a0
[ 41.272322][ T2825] ? __pfx_chrdev_open+0x10/0x10
[ 41.277345][ T2825] ? inode_permission+0xdd/0x5f0
[ 41.282357][ T2825] vfs_open+0x82/0x3f0
[ 41.286472][ T2825] ? may_open+0x1f2/0x400
[ 41.290823][ T2825] path_openat+0x1e5e/0x2d40
[ 41.295520][ T2825] ? __pfx_path_openat+0x10/0x10
[ 41.300501][ T2825] do_filp_open+0x20b/0x470
[ 41.305076][ T2825] ? __pfx_do_filp_open+0x10/0x10
[ 41.310129][ T2825] ? find_held_lock+0x2b/0x80
[ 41.314885][ T2825] ? alloc_fd+0x420/0x760
[ 41.319276][ T2825] do_sys_openat2+0x11b/0x1d0
[ 41.324010][ T2825] ? __pfx_do_sys_openat2+0x10/0x10
[ 41.329247][ T2825] ? sigprocmask+0xef/0x330
[ 41.333815][ T2825] __x64_sys_openat+0x174/0x210
[ 41.338723][ T2825] ? __pfx___x64_sys_openat+0x10/0x10
[ 41.344140][ T2825] ? ksys_read+0x1b9/0x240
[ 41.348579][ T2825] ? rcu_is_watching+0x12/0xc0
[ 41.353462][ T2825] do_syscall_64+0xcd/0x260
[ 41.358025][ T2825] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 41.364008][ T2825] RIP: 0033:0x7f49280d29a4
[ 41.368458][ T2825] Code: 24 20 48 8d 44 24 30 48 89 44 24 28 64 8b 04 25 18 00 00 00 85 c0 75 2c 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 60 48 8b 15 55 a4 0d 00 f7 d8 64 89 02 48 83
[ 41.388215][ T2825] RSP: 002b:00007ffc04d86b80 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 41.396726][ T2825] RAX: ffffffffffffffda RBX: 00007ffc04d86e68 RCX: 00007f49280d29a4
[ 41.404831][ T2825] RDX: 0000000000080800 RSI: 00007ffc04d86d68 RDI: 00000000ffffff9c
[ 41.412849][ T2825] RBP: 00007ffc04d86d68 R08: 00000000000000f4 R09: 00007ffc04d86d68
[ 41.420827][ T2825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000080800
[ 41.428829][ T2825] R13: 0000000000000020 R14: 00007ffc04d86e68 R15: 00007ffc04d86d68
[ 41.436848][ T2825]
[ 41.439866][ T2825] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 41.447139][ T2825] CPU: 1 UID: 0 PID: 2825 Comm: acpid Not tainted 6.15.0-rc1-syzkaller-00082-gf41f7b3d9daf #0 PREEMPT(voluntary)
[ 41.459116][ T2825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 41.469202][ T2825] Call Trace:
[ 41.472495][ T2825]
[ 41.475433][ T2825] dump_stack_lvl+0x3d/0x1f0
[ 41.480053][ T2825] panic+0x71c/0x800
[ 41.483955][ T2825] ? __pfx_panic+0x10/0x10
[ 41.488542][ T2825] ? show_trace_log_lvl+0x29b/0x3e0
[ 41.493777][ T2825] ? check_panic_on_warn+0x1f/0xb0
[ 41.498901][ T2825] ? usb_submit_urb+0xe4a/0x1730
[ 41.503855][ T2825] check_panic_on_warn+0xab/0xb0
[ 41.508808][ T2825] __warn+0xf6/0x3c0
[ 41.512714][ T2825] ? __pfx_vprintk_emit+0x10/0x10
[ 41.517762][ T2825] ? usb_submit_urb+0xe4a/0x1730
[ 41.522724][ T2825] report_bug+0x3c3/0x580
[ 41.527070][ T2825] ? usb_submit_urb+0xe4a/0x1730
[ 41.532024][ T2825] handle_bug+0x184/0x210
[ 41.536388][ T2825] exc_invalid_op+0x17/0x50
[ 41.540899][ T2825] asm_exc_invalid_op+0x1a/0x20
[ 41.545766][ T2825] RIP: 0010:usb_submit_urb+0xe4a/0x1730
[ 41.551324][ T2825] Code: 84 38 02 00 00 e8 66 43 e7 fc 4c 89 ef e8 5e f9 d3 fe 45 89 e0 89 e9 4c 89 f2 48 89 c6 48 c7 c7 40 42 c3 87 e8 77 c4 aa fc 90 <0f> 0b 90 90 e9 ea f8 ff ff e8 38 43 e7 fc 49 81 c4 c0 05 00 00 e9
[ 41.570940][ T2825] RSP: 0018:ffffc9000141f7f0 EFLAGS: 00010286
[ 41.577011][ T2825] RAX: 0000000000000000 RBX: ffff8881158cca00 RCX: ffffffff813fcc28
[ 41.584982][ T2825] RDX: ffff888116520000 RSI: ffffffff813fcc35 RDI: 0000000000000001
[ 41.592964][ T2825] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000
[ 41.600954][ T2825] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000003
[ 41.608922][ T2825] R13: ffff888108aa30b0 R14: ffff88810cbf8160 R15: 0000000000000002
[ 41.616917][ T2825] ? __warn_printk+0x198/0x350
[ 41.621691][ T2825] ? __warn_printk+0x1a5/0x350
[ 41.626488][ T2825] ? _raw_spin_unlock_irq+0x21/0x50
[ 41.631691][ T2825] bcm5974_start_traffic+0xb8/0x180
[ 41.636988][ T2825] bcm5974_open+0xa2/0x180
[ 41.641416][ T2825] input_open_device+0x230/0x390
[ 41.646371][ T2825] ? __pfx_bcm5974_open+0x10/0x10
[ 41.651472][ T2825] evdev_open+0x52a/0x690
[ 41.655834][ T2825] ? __pfx_evdev_open+0x10/0x10
[ 41.660720][ T2825] chrdev_open+0x231/0x6a0
[ 41.665156][ T2825] ? __pfx_chrdev_open+0x10/0x10
[ 41.670147][ T2825] do_dentry_open+0x6d7/0x13a0
[ 41.674926][ T2825] ? __pfx_chrdev_open+0x10/0x10
[ 41.679881][ T2825] ? inode_permission+0xdd/0x5f0
[ 41.684843][ T2825] vfs_open+0x82/0x3f0
[ 41.688929][ T2825] ? may_open+0x1f2/0x400
[ 41.693268][ T2825] path_openat+0x1e5e/0x2d40
[ 41.697886][ T2825] ? __pfx_path_openat+0x10/0x10
[ 41.702847][ T2825] do_filp_open+0x20b/0x470
[ 41.707362][ T2825] ? __pfx_do_filp_open+0x10/0x10
[ 41.712418][ T2825] ? find_held_lock+0x2b/0x80
[ 41.717131][ T2825] ? alloc_fd+0x420/0x760
[ 41.721475][ T2825] do_sys_openat2+0x11b/0x1d0
[ 41.726208][ T2825] ? __pfx_do_sys_openat2+0x10/0x10
[ 41.731439][ T2825] ? sigprocmask+0xef/0x330
[ 41.735967][ T2825] __x64_sys_openat+0x174/0x210
[ 41.740849][ T2825] ? __pfx___x64_sys_openat+0x10/0x10
[ 41.746240][ T2825] ? ksys_read+0x1b9/0x240
[ 41.750681][ T2825] ? rcu_is_watching+0x12/0xc0
[ 41.755504][ T2825] do_syscall_64+0xcd/0x260
[ 41.760112][ T2825] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 41.766017][ T2825] RIP: 0033:0x7f49280d29a4
[ 41.770463][ T2825] Code: 24 20 48 8d 44 24 30 48 89 44 24 28 64 8b 04 25 18 00 00 00 85 c0 75 2c 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 60 48 8b 15 55 a4 0d 00 f7 d8 64 89 02 48 83
[ 41.790161][ T2825] RSP: 002b:00007ffc04d86b80 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 41.798581][ T2825] RAX: ffffffffffffffda RBX: 00007ffc04d86e68 RCX: 00007f49280d29a4
[ 41.806552][ T2825] RDX: 0000000000080800 RSI: 00007ffc04d86d68 RDI: 00000000ffffff9c
[ 41.814538][ T2825] RBP: 00007ffc04d86d68 R08: 00000000000000f4 R09: 00007ffc04d86d68
[ 41.822514][ T2825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000080800
[ 41.830488][ T2825] R13: 0000000000000020 R14: 00007ffc04d86e68 R15: 00007ffc04d86d68
[ 41.838499][ T2825]
[ 41.841834][ T2825] Kernel Offset: disabled
[ 41.846247][ T2825] Rebooting in 86400 seconds..