Warning: Permanently added '10.128.0.90' (ED25519) to the list of known hosts. executing program [ 38.504854][ T1770] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 38.654555][ T1770] usb 1-1: Using ep0 maxpacket: 16 [ 38.656904][ T1770] usb 1-1: unable to get BOS descriptor or descriptor too short [ 38.658718][ T1770] usb 1-1: config 7 has an invalid interface number: 255 but max is 2 [ 38.658770][ T1770] usb 1-1: config 7 has an invalid interface number: 150 but max is 2 [ 38.658794][ T1770] usb 1-1: config 7 has an invalid interface number: 100 but max is 2 [ 38.658817][ T1770] usb 1-1: config 7 has no interface number 0 [ 38.658839][ T1770] usb 1-1: config 7 has no interface number 1 [ 38.658860][ T1770] usb 1-1: config 7 has no interface number 2 [ 38.658896][ T1770] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 38.658923][ T1770] usb 1-1: config 7 interface 255 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 38.658948][ T1770] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 38.658974][ T1770] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0xE has invalid wMaxPacketSize 0 [ 38.658999][ T1770] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0x1 has an invalid bInterval 128, changing to 11 [ 38.659026][ T1770] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 38.659052][ T1770] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0xD has invalid maxpacket 1072, setting to 64 [ 38.659078][ T1770] usb 1-1: config 7 interface 255 altsetting 4 has a duplicate endpoint with address 0xB, skipping [ 38.659103][ T1770] usb 1-1: config 7 interface 255 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 1024 [ 38.659128][ T1770] usb 1-1: config 7 interface 255 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 38.659155][ T1770] usb 1-1: config 7 interface 100 altsetting 2 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 38.659181][ T1770] usb 1-1: config 7 interface 100 altsetting 2 has a duplicate endpoint with address 0x6, skipping [ 38.659206][ T1770] usb 1-1: config 7 interface 255 has no altsetting 0 [ 38.659228][ T1770] usb 1-1: config 7 interface 150 has no altsetting 0 [ 38.659250][ T1770] usb 1-1: config 7 interface 100 has no altsetting 0 [ 38.660794][ T1770] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=5d.a6 [ 38.660827][ T1770] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.660850][ T1770] usb 1-1: Product: syz [ 38.660870][ T1770] usb 1-1: Manufacturer: syz [ 38.660890][ T1770] usb 1-1: SerialNumber: syz [ 38.874742][ ** replaying previous printk message ** [ 38.874742][ T1770] ------------[ cut here ]------------ [ 38.874813][ T1770] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 38.875301][ T1770] WARNING: CPU: 1 PID: 1770 at drivers/usb/core/urb.c:504 usb_submit_urb+0x9e8/0x1448 [ 38.882315][ T1770] Modules linked in: [ 38.883320][ T1770] CPU: 1 UID: 0 PID: 1770 Comm: kworker/1:2 Not tainted 6.15.0-rc7-syzkaller-gd7fa1af5b33e #0 PREEMPT [ 38.886662][ T1770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 38.889499][ T1770] Workqueue: usb_hub_wq hub_event [ 38.890949][ T1770] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 38.893202][ T1770] pc : usb_submit_urb+0x9e8/0x1448 [ 38.894731][ T1770] lr : usb_submit_urb+0x9e8/0x1448 [ 38.896183][ T1770] sp : ffff80009f3768c0 [ 38.897321][ T1770] x29: ffff80009f376900 x28: ffff0000c81aca68 x27: ffff80008c77d9a8 [ 38.899541][ T1770] x26: ffff0000caecbf20 x25: ffff80008c77d9a0 x24: ffff0000c24c2a5c [ 38.901739][ T1770] x23: ffff80008c784720 x22: dfff800000000000 x21: 0000000000000002 [ 38.903950][ T1770] x20: 0000000000000c00 x19: ffff0000c24c2a00 x18: 00000000ffffffff [ 38.906068][ T1770] x17: 0000000000000000 x16: ffff80008adbe9e4 x15: 0000000000000001 [ 38.908262][ T1770] x14: 1fffe0003386f2e2 x13: 0000000000000000 x12: 0000000000000000 [ 38.910533][ T1770] x11: ffff60003386f2e3 x10: 0000000000ff0100 x9 : b2843552d518b900 [ 38.912947][ T1770] x8 : b2843552d518b900 x7 : 0000000000000001 x6 : 0000000000000001 [ 38.915116][ T1770] x5 : ffff80009f376218 x4 : ffff80008f415ba0 x3 : ffff8000807b4b68 [ 38.917455][ T1770] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000 [ 38.919713][ T1770] Call trace: [ 38.920627][ T1770] usb_submit_urb+0x9e8/0x1448 (P) [ 38.922075][ T1770] usb_start_wait_urb+0xe8/0x3bc [ 38.923422][ T1770] usb_bulk_msg+0x2e4/0x3e4 [ 38.924738][ T1770] amradio_set_mute+0x1a4/0x3f4 [ 38.926062][ T1770] usb_amradio_probe+0x3d4/0x700 [ 38.927524][ T1770] usb_probe_interface+0x584/0xa44 [ 38.928975][ T1770] really_probe+0x394/0x910 [ 38.930285][ T1770] __driver_probe_device+0x180/0x2d4 [ 38.931817][ T1770] driver_probe_device+0x78/0x330 [ 38.933233][ T1770] __device_attach_driver+0x290/0x4e0 [ 38.934806][ T1770] bus_for_each_drv+0x220/0x2b4 [ 38.936249][ T1770] __device_attach+0x26c/0x388 [ 38.937683][ T1770] device_initial_probe+0x24/0x34 [ 38.939188][ T1770] bus_probe_device+0x178/0x240 [ 38.940746][ T1770] device_add+0x71c/0xa60 [ 38.942048][ T1770] usb_set_configuration+0x1640/0x1bac [ 38.943521][ T1770] usb_generic_driver_probe+0x8c/0x144 [ 38.945097][ T1770] usb_probe_device+0x1a4/0x348 [ 38.946445][ T1770] really_probe+0x394/0x910 [ 38.947757][ T1770] __driver_probe_device+0x180/0x2d4 [ 38.949272][ T1770] driver_probe_device+0x78/0x330 [ 38.950750][ T1770] __device_attach_driver+0x290/0x4e0 [ 38.952179][ T1770] bus_for_each_drv+0x220/0x2b4 [ 38.953575][ T1770] __device_attach+0x26c/0x388 [ 38.954935][ T1770] device_initial_probe+0x24/0x34 [ 38.956383][ T1770] bus_probe_device+0x178/0x240 [ 38.957760][ T1770] device_add+0x71c/0xa60 [ 38.959039][ T1770] usb_new_device+0x7f0/0x1220 [ 38.960306][ T1770] hub_event+0x2148/0x3cf0 [ 38.961585][ T1770] process_one_work+0x7e8/0x156c [ 38.962981][ T1770] worker_thread+0x958/0xed8 [ 38.964302][ T1770] kthread+0x5fc/0x75c [ 38.965379][ T1770] ret_from_fork+0x10/0x20 [ 38.966575][ T1770] irq event stamp: 95534 [ 38.967738][ T1770] hardirqs last enabled at (95533): [] __console_unlock+0x70/0xc4 [ 38.970404][ T1770] hardirqs last disabled at (95534): [] el1_dbg+0x24/0x80 [ 38.972903][ T1770] softirqs last enabled at (95464): [] handle_softirqs+0xaf8/0xc88 [ 38.975595][ T1770] softirqs last disabled at (95449): [] __do_softirq+0x14/0x20 [ 38.978114][ T1770] ---[ end trace 0000000000000000 ]--- executing program [ 38.982220][ T1770] (null): radio-mr800 - initialization failed [ 38.982356][ T1770] radio-mr800 1-1:7.255: probe with driver radio-mr800 failed with error -71 [ 38.982629][ T1770] usbhid 1-1:7.255: couldn't find an input interrupt endpoint [ 38.997444][ T1770] usb 1-1: USB disconnect, device number 2 [ 39.294674][ T1770] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 39.444617][ T1770] usb 1-1: Using ep0 maxpacket: 16 [ 39.446289][ T1770] usb 1-1: unable to get BOS descriptor or descriptor too short [ 39.447910][ T1770] usb 1-1: config 7 has an invalid interface number: 255 but max is 2 [ 39.447952][ T1770] usb 1-1: config 7 has an invalid interface number: 150 but max is 2 [ 39.447977][ T1770] usb 1-1: config 7 has an invalid interface number: 100 but max is 2 [ 39.448002][ T1770] usb 1-1: config 7 has no interface number 0 [ 39.448029][ T1770] usb 1-1: config 7 has no interface number 1 [ 39.448052][ T1770] usb 1-1: config 7 has no interface number 2 [ 39.448090][ T1770] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 39.448123][ T1770] usb 1-1: config 7 interface 255 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 39.448153][ T1770] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 39.448186][ T1770] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0xE has invalid wMaxPacketSize 0 [ 39.448215][ T1770] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0x1 has an invalid bInterval 128, changing to 11 [ 39.448242][ T1770] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 39.448273][ T1770] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0xD has invalid maxpacket 1072, setting to 64 [ 39.448300][ T1770] usb 1-1: config 7 interface 255 altsetting 4 has a duplicate endpoint with address 0xB, skipping [ 39.448331][ T1770] usb 1-1: config 7 interface 255 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 1024 [ 39.448445][ T1770] usb 1-1: config 7 interface 255 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 39.448487][ T1770] usb 1-1: config 7 interface 100 altsetting 2 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 39.448520][ T1770] usb 1-1: config 7 interface 100 altsetting 2 has a duplicate endpoint with address 0x6, skipping [ 39.448551][ T1770] usb 1-1: config 7 interface 255 has no altsetting 0 [ 39.448574][ T1770] usb 1-1: config 7 interface 150 has no altsetting 0 [ 39.448599][ T1770] usb 1-1: config 7 interface 100 has no altsetting 0 [ 39.450454][ T1770] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=5d.a6 [ 39.450501][ T1770] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.450524][ T1770] usb 1-1: Product: syz [ 39.450545][ T1770] usb 1-1: Manufacturer: syz [ 39.450565][ T1770] usb 1-1: SerialNumber: syz [ 39.662761][ T1 ** replaying previous printk message ** [ 39.662761][ T1770] ------------[ cut here ]------------ [ 39.662829][ T1770] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 39.663367][ T1770] WARNING: CPU: 1 PID: 1770 at drivers/usb/core/urb.c:504 usb_submit_urb+0x9e8/0x1448 [ 39.670508][ T1770] Modules linked in: [ 39.671495][ T1770] CPU: 1 UID: 0 PID: 1770 Comm: kworker/1:2 Tainted: G W 6.15.0-rc7-syzkaller-gd7fa1af5b33e #0 PREEMPT [ 39.675557][ T1770] Tainted: [W]=WARN [ 39.676655][ T1770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 39.679559][ T1770] Workqueue: usb_hub_wq hub_event [ 39.681034][ T1770] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 39.683328][ T1770] pc : usb_submit_urb+0x9e8/0x1448 [ 39.684755][ T1770] lr : usb_submit_urb+0x9e8/0x1448 [ 39.686191][ T1770] sp : ffff80009f3768c0 [ 39.687376][ T1770] x29: ffff80009f376900 x28: ffff0000c81af268 x27: ffff80008c77d9a8 [ 39.689661][ T1770] x26: ffff0000cd637600 x25: ffff80008c77d9a0 x24: ffff0000c1bc9c5c [ 39.691953][ T1770] x23: ffff80008c784720 x22: dfff800000000000 x21: 0000000000000002 [ 39.694275][ T1770] x20: 0000000000000c00 x19: ffff0000c1bc9c00 x18: 00000000ffffffff [ 39.696547][ T1770] x17: 0000000000000000 x16: ffff80008adbe9e4 x15: 0000000000000001 [ 39.698822][ T1770] x14: 1fffe0003386f2e2 x13: 0000000000000000 x12: 0000000000000000 [ 39.701148][ T1770] x11: ffff60003386f2e3 x10: 0000000000ff0100 x9 : b2843552d518b900 [ 39.703491][ T1770] x8 : b2843552d518b900 x7 : 0000000000000001 x6 : 0000000000000001 [ 39.705780][ T1770] x5 : ffff80009f376218 x4 : ffff80008f415ba0 x3 : ffff8000807b4b68 [ 39.708050][ T1770] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000 [ 39.710299][ T1770] Call trace: [ 39.711246][ T1770] usb_submit_urb+0x9e8/0x1448 (P) [ 39.712791][ T1770] usb_start_wait_urb+0xe8/0x3bc [ 39.714225][ T1770] usb_bulk_msg+0x2e4/0x3e4 [ 39.715577][ T1770] amradio_set_mute+0x1a4/0x3f4 [ 39.717002][ T1770] usb_amradio_probe+0x3d4/0x700 [ 39.718443][ T1770] usb_probe_interface+0x584/0xa44 [ 39.719905][ T1770] really_probe+0x394/0x910 [ 39.721176][ T1770] __driver_probe_device+0x180/0x2d4 [ 39.722711][ T1770] driver_probe_device+0x78/0x330 [ 39.724207][ T1770] __device_attach_driver+0x290/0x4e0 [ 39.725743][ T1770] bus_for_each_drv+0x220/0x2b4 [ 39.727175][ T1770] __device_attach+0x26c/0x388 [ 39.728549][ T1770] device_initial_probe+0x24/0x34 [ 39.729990][ T1770] bus_probe_device+0x178/0x240 [ 39.731412][ T1770] device_add+0x71c/0xa60 [ 39.732632][ T1770] usb_set_configuration+0x1640/0x1bac [ 39.734227][ T1770] usb_generic_driver_probe+0x8c/0x144 [ 39.735864][ T1770] usb_probe_device+0x1a4/0x348 [ 39.737293][ T1770] really_probe+0x394/0x910 [ 39.738705][ T1770] __driver_probe_device+0x180/0x2d4 [ 39.740293][ T1770] driver_probe_device+0x78/0x330 [ 39.741810][ T1770] __device_attach_driver+0x290/0x4e0 [ 39.743391][ T1770] bus_for_each_drv+0x220/0x2b4 [ 39.744855][ T1770] __device_attach+0x26c/0x388 [ 39.746259][ T1770] device_initial_probe+0x24/0x34 [ 39.747835][ T1770] bus_probe_device+0x178/0x240 [ 39.749417][ T1770] device_add+0x71c/0xa60 [ 39.750733][ T1770] usb_new_device+0x7f0/0x1220 [ 39.752174][ T1770] hub_event+0x2148/0x3cf0 [ 39.753472][ T1770] process_one_work+0x7e8/0x156c [ 39.754976][ T1770] worker_thread+0x990/0xed8 [ 39.756449][ T1770] kthread+0x5fc/0x75c [ 39.757670][ T1770] ret_from_fork+0x10/0x20 [ 39.758965][ T1770] irq event stamp: 103848 [ 39.760201][ T1770] hardirqs last enabled at (103847): [] __console_unlock+0x70/0xc4 [ 39.762933][ T1770] hardirqs last disabled at (103848): [] el1_dbg+0x24/0x80 [ 39.765413][ T1770] softirqs last enabled at (100784): [] handle_softirqs+0xaf8/0xc88 [ 39.768273][ T1770] softirqs last disabled at (100769): [] __do_softirq+0x14/0x20 [ 39.770997][ T1770] ---[ end trace 0000000000000000 ]--- [ 39.775119][ T1770] (null): radio-mr800 - initialization failed [ 39.775282][ T1770] radio-mr800 1-1:7.255: probe with driver radio-mr800 failed with error -71 [ 39.775600][ T1770] usbhid 1-1:7.255: couldn't find an input interrupt endpoint executing program [ 39.787876][ T1770] usb 1-1: USB disconnect, device number 3 [ 40.084630][ T1770] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 40.234594][ T1770] usb 1-1: Using ep0 maxpacket: 16 [ 40.236158][ T1770] usb 1-1: unable to get BOS descriptor or descriptor too short [ 40.237832][ T1770] usb 1-1: config 7 has an invalid interface number: 255 but max is 2 [ 40.237869][ T1770] usb 1-1: config 7 has an invalid interface number: 150 but max is 2 [ 40.237893][ T1770] usb 1-1: config 7 has an invalid interface number: 100 but max is 2 [ 40.237918][ T1770] usb 1-1: config 7 has no interface number 0 [ 40.237941][ T1770] usb 1-1: config 7 has no interface number 1 [ 40.237962][ T1770] usb 1-1: config 7 has no interface number 2 [ 40.237999][ T1770] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 40.238029][ T1770] usb 1-1: config 7 interface 255 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 40.238056][ T1770] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 40.238082][ T1770] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0xE has invalid wMaxPacketSize 0 [ 40.238107][ T1770] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0x1 has an invalid bInterval 128, changing to 11 [ 40.238134][ T1770] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 40.238161][ T1770] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0xD has invalid maxpacket 1072, setting to 64 [ 40.238187][ T1770] usb 1-1: config 7 interface 255 altsetting 4 has a duplicate endpoint with address 0xB, skipping [ 40.238212][ T1770] usb 1-1: config 7 interface 255 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 1024 [ 40.238237][ T1770] usb 1-1: config 7 interface 255 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 40.238264][ T1770] usb 1-1: config 7 interface 100 altsetting 2 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 40.238290][ T1770] usb 1-1: config 7 interface 100 altsetting 2 has a duplicate endpoint with address 0x6, skipping [ 40.238314][ T1770] usb 1-1: config 7 interface 255 has no altsetting 0 [ 40.238336][ T1770] usb 1-1: config 7 interface 150 has no altsetting 0 [ 40.238358][ T1770] usb 1-1: config 7 interface 100 has no altsetting 0 [ 40.239819][ T1770] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=5d.a6 [ 40.239850][ T1770] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.239874][ T1770] usb 1-1: Product: syz [ 40.239894][ T1770] usb 1-1: Manufacturer: syz [ 40.239914][ T1770] usb 1-1: SerialNumber: syz [ 40.449262][ T17 ** replaying previous printk message ** [ 40.449262][ T1770] ------------[ cut here ]------------ [ 40.449332][ T1770] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 40.449865][ T1770] WARNING: CPU: 1 PID: 1770 at drivers/usb/core/urb.c:504 usb_submit_urb+0x9e8/0x1448 [ 40.456901][ T1770] Modules linked in: [ 40.458054][ T1770] CPU: 1 UID: 0 PID: 1770 Comm: kworker/1:2 Tainted: G W 6.15.0-rc7-syzkaller-gd7fa1af5b33e #0 PREEMPT [ 40.461645][ T1770] Tainted: [W]=WARN [ 40.462758][ T1770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 40.465650][ T1770] Workqueue: usb_hub_wq hub_event [ 40.467118][ T1770] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 40.469298][ T1770] pc : usb_submit_urb+0x9e8/0x1448 [ 40.470758][ T1770] lr : usb_submit_urb+0x9e8/0x1448 [ 40.472210][ T1770] sp : ffff80009f3768c0 [ 40.473407][ T1770] x29: ffff80009f376900 x28: ffff0000c8271a68 x27: ffff80008c77d9a8 executing program [ 40.475758][ T1770] x26: ffff0000c229b220 x25: ffff80008c77d9a0 x24: ffff0000c230955c [ 40.478064][ T1770] x23: ffff80008c784720 x22: dfff800000000000 x21: 0000000000000002 [ 40.480335][ T1770] x20: 0000000000000c00 x19: ffff0000c2309500 x18: 1fffe0003386f276 [ 40.482572][ T1770] x17: 0000000000000000 x16: ffff80008adbe9e4 x15: 0000000000000001 [ 40.484903][ T1770] x14: 1fffe0003386f2e2 x13: 0000000000000000 x12: 0000000000000000 [ 40.487171][ T1770] x11: ffff60003386f2e3 x10: 0000000000ff0100 x9 : b2843552d518b900 [ 40.489416][ T1770] x8 : b2843552d518b900 x7 : 0000000000000001 x6 : 0000000000000001 [ 40.491738][ T1770] x5 : ffff80009f376218 x4 : ffff80008f415ba0 x3 : ffff8000807b4b68 [ 40.494054][ T1770] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000 [ 40.496355][ T1770] Call trace: [ 40.497258][ T1770] usb_submit_urb+0x9e8/0x1448 (P) [ 40.498682][ T1770] usb_start_wait_urb+0xe8/0x3bc [ 40.500122][ T1770] usb_bulk_msg+0x2e4/0x3e4 [ 40.501429][ T1770] amradio_set_mute+0x1a4/0x3f4 [ 40.502779][ T1770] usb_amradio_probe+0x3d4/0x700 [ 40.504176][ T1770] usb_probe_interface+0x584/0xa44 [ 40.505664][ T1770] really_probe+0x394/0x910 [ 40.506972][ T1770] __driver_probe_device+0x180/0x2d4 [ 40.508523][ T1770] driver_probe_device+0x78/0x330 [ 40.509960][ T1770] __device_attach_driver+0x290/0x4e0 [ 40.511472][ T1770] bus_for_each_drv+0x220/0x2b4 [ 40.512875][ T1770] __device_attach+0x26c/0x388 [ 40.514265][ T1770] device_initial_probe+0x24/0x34 [ 40.515748][ T1770] bus_probe_device+0x178/0x240 [ 40.517097][ T1770] device_add+0x71c/0xa60 [ 40.518349][ T1770] usb_set_configuration+0x1640/0x1bac [ 40.519847][ T1770] usb_generic_driver_probe+0x8c/0x144 [ 40.521439][ T1770] usb_probe_device+0x1a4/0x348 [ 40.522804][ T1770] really_probe+0x394/0x910 [ 40.524091][ T1770] __driver_probe_device+0x180/0x2d4 [ 40.525599][ T1770] driver_probe_device+0x78/0x330 [ 40.527001][ T1770] __device_attach_driver+0x290/0x4e0 [ 40.528518][ T1770] bus_for_each_drv+0x220/0x2b4 [ 40.529902][ T1770] __device_attach+0x26c/0x388 [ 40.531365][ T1770] device_initial_probe+0x24/0x34 [ 40.532786][ T1770] bus_probe_device+0x178/0x240 [ 40.534122][ T1770] device_add+0x71c/0xa60 [ 40.535339][ T1770] usb_new_device+0x7f0/0x1220 [ 40.536681][ T1770] hub_event+0x2148/0x3cf0 [ 40.537914][ T1770] process_one_work+0x7e8/0x156c [ 40.539371][ T1770] worker_thread+0x990/0xed8 [ 40.540700][ T1770] kthread+0x5fc/0x75c [ 40.541833][ T1770] ret_from_fork+0x10/0x20 [ 40.543176][ T1770] irq event stamp: 112002 [ 40.544364][ T1770] hardirqs last enabled at (112001): [] __console_unlock+0x70/0xc4 [ 40.547121][ T1770] hardirqs last disabled at (112002): [] el1_dbg+0x24/0x80 [ 40.549651][ T1770] softirqs last enabled at (109012): [] handle_softirqs+0xaf8/0xc88 [ 40.552417][ T1770] softirqs last disabled at (108997): [] __do_softirq+0x14/0x20 [ 40.555119][ T1770] ---[ end trace 0000000000000000 ]--- [ 40.558841][ T1770] (null): radio-mr800 - initialization failed [ 40.558953][ T1770] radio-mr800 1-1:7.255: probe with driver radio-mr800 failed with error -71 [ 40.559226][ T1770] usbhid 1-1:7.255: couldn't find an input interrupt endpoint [ 40.570567][ T1770] usb 1-1: USB disconnect, device number 4 [ 40.874674][ T1770] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 41.024567][ T1770] usb 1-1: Using ep0 maxpacket: 16 [ 41.026322][ T1770] usb 1-1: unable to get BOS descriptor or descriptor too short [ 41.027190][ T1770] usb 1-1: config 7 has an invalid interface number: 255 but max is 2 [ 41.027218][ T1770] usb 1-1: config 7 has an invalid interface number: 150 but max is 2 [ 41.027242][ T1770] usb 1-1: config 7 has an invalid interface number: 100 but max is 2 [ 41.027265][ T1770] usb 1-1: config 7 has no interface number 0 [ 41.027286][ T1770] usb 1-1: config 7 has no interface number 1 [ 41.027307][ T1770] usb 1-1: config 7 has no interface number 2 [ 41.027338][ T1770] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 41.027365][ T1770] usb 1-1: config 7 interface 255 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 41.027389][ T1770] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 41.027416][ T1770] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0xE has invalid wMaxPacketSize 0 [ 41.027441][ T1770] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0x1 has an invalid bInterval 128, changing to 11 [ 41.027476][ T1770] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 41.027503][ T1770] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0xD has invalid maxpacket 1072, setting to 64 [ 41.027563][ T1770] usb 1-1: config 7 interface 255 altsetting 4 has a duplicate endpoint with address 0xB, skipping [ 41.027589][ T1770] usb 1-1: config 7 interface 255 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 1024 [ 41.027614][ T1770] usb 1-1: config 7 interface 255 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 41.027641][ T1770] usb 1-1: config 7 interface 100 altsetting 2 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 41.027673][ T1770] usb 1-1: config 7 interface 100 altsetting 2 has a duplicate endpoint with address 0x6, skipping [ 41.027697][ T1770] usb 1-1: config 7 interface 255 has no altsetting 0 [ 41.027720][ T1770] usb 1-1: config 7 interface 150 has no altsetting 0 [ 41.027742][ T1770] usb 1-1: config 7 interface 100 has no altsetting 0 [ 41.029422][ T1770] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=5d.a6 [ 41.029452][ T1770] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.029482][ T1770] usb 1-1: Product: syz [ 41.029502][ T1770] usb 1-1: Manufacturer: syz [ 41.029526][ T1770] usb 1-1: SerialNumber: syz [ 41.238658][ T1 ** replaying previous printk message ** [ 41.238658][ T1770] ------------[ cut here ]------------ [ 41.238726][ T1770] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 41.239231][ T1770] WARNING: CPU: 1 PID: 1770 at drivers/usb/core/urb.c:504 usb_submit_urb+0x9e8/0x1448 [ 41.246350][ T1770] Modules linked in: [ 41.247544][ T1770] CPU: 1 UID: 0 PID: 1770 Comm: kworker/1:2 Tainted: G W 6.15.0-rc7-syzkaller-gd7fa1af5b33e #0 PREEMPT [ 41.251112][ T1770] Tainted: [W]=WARN [ 41.252186][ T1770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 41.255126][ T1770] Workqueue: usb_hub_wq hub_event [ 41.256596][ T1770] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 41.258858][ T1770] pc : usb_submit_urb+0x9e8/0x1448 [ 41.260343][ T1770] lr : usb_submit_urb+0x9e8/0x1448 [ 41.261837][ T1770] sp : ffff80009f3768c0 [ 41.263089][ T1770] x29: ffff80009f376900 x28: ffff0000c8274268 x27: ffff80008c77d9a8 [ 41.265399][ T1770] x26: ffff0000c229bc00 x25: ffff80008c77d9a0 x24: ffff0000c22f915c [ 41.267765][ T1770] x23: ffff80008c784720 x22: dfff800000000000 x21: 0000000000000002 [ 41.270040][ T1770] x20: 0000000000000c00 x19: ffff0000c22f9100 x18: 00000000ffffffff [ 41.272381][ T1770] x17: 0000000000000000 x16: ffff80008adbe9e4 x15: 0000000000000001 [ 41.274677][ T1770] x14: 1fffe0003386f2e2 x13: 0000000000000000 x12: 0000000000000000 [ 41.277064][ T1770] x11: ffff60003386f2e3 x10: 0000000000ff0100 x9 : b2843552d518b900 [ 41.279553][ T1770] x8 : b2843552d518b900 x7 : 0000000000000001 x6 : 0000000000000001 [ 41.282361][ T1770] x5 : ffff80009f376218 x4 : ffff80008f415ba0 x3 : ffff8000807b4b68 [ 41.285116][ T1770] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000 [ 41.287351][ T1770] Call trace: [ 41.288255][ T1770] usb_submit_urb+0x9e8/0x1448 (P) [ 41.289637][ T1770] usb_start_wait_urb+0xe8/0x3bc [ 41.291155][ T1770] usb_bulk_msg+0x2e4/0x3e4 [ 41.292511][ T1770] amradio_set_mute+0x1a4/0x3f4 [ 41.293927][ T1770] usb_amradio_probe+0x3d4/0x700 [ 41.295357][ T1770] usb_probe_interface+0x584/0xa44 [ 41.296813][ T1770] really_probe+0x394/0x910 [ 41.298096][ T1770] __driver_probe_device+0x180/0x2d4 [ 41.299627][ T1770] driver_probe_device+0x78/0x330 [ 41.301318][ T1770] __device_attach_driver+0x290/0x4e0 [ 41.302861][ T1770] bus_for_each_drv+0x220/0x2b4 [ 41.304241][ T1770] __device_attach+0x26c/0x388 [ 41.305594][ T1770] device_initial_probe+0x24/0x34 [ 41.307028][ T1770] bus_probe_device+0x178/0x240 [ 41.308426][ T1770] device_add+0x71c/0xa60 [ 41.309777][ T1770] usb_set_configuration+0x1640/0x1bac [ 41.311433][ T1770] usb_generic_driver_probe+0x8c/0x144 [ 41.312993][ T1770] usb_probe_device+0x1a4/0x348 [ 41.314413][ T1770] really_probe+0x394/0x910 [ 41.315658][ T1770] __driver_probe_device+0x180/0x2d4 [ 41.317181][ T1770] driver_probe_device+0x78/0x330 [ 41.318541][ T1770] __device_attach_driver+0x290/0x4e0 [ 41.320214][ T1770] bus_for_each_drv+0x220/0x2b4 [ 41.321611][ T1770] __device_attach+0x26c/0x388 [ 41.322930][ T1770] device_initial_probe+0x24/0x34 [ 41.324359][ T1770] bus_probe_device+0x178/0x240 [ 41.325758][ T1770] device_add+0x71c/0xa60 [ 41.327007][ T1770] usb_new_device+0x7f0/0x1220 [ 41.328387][ T1770] hub_event+0x2148/0x3cf0 [ 41.330082][ T1770] process_one_work+0x7e8/0x156c [ 41.331805][ T1770] worker_thread+0x990/0xed8 [ 41.333130][ T1770] kthread+0x5fc/0x75c [ 41.334313][ T1770] ret_from_fork+0x10/0x20 [ 41.335608][ T1770] irq event stamp: 119500 [ 41.336845][ T1770] hardirqs last enabled at (119499): [] __console_unlock+0x70/0xc4 [ 41.339681][ T1770] hardirqs last disabled at (119500): [] el1_dbg+0x24/0x80 [ 41.342179][ T1770] softirqs last enabled at (115074): [] handle_softirqs+0xaf8/0xc88 [ 41.344879][ T1770] softirqs last disabled at (115067): [] __do_softirq+0x14/0x20 [ 41.347599][ T1770] ---[ end trace 0000000000000000 ]--- executing program [ 41.352334][ T1770] (null): radio-mr800 - initialization failed [ 41.352488][ T1770] radio-mr800 1-1:7.255: probe with driver radio-mr800 failed with error -71 [ 41.352732][ T1770] usbhid 1-1:7.255: couldn't find an input interrupt endpoint [ 41.364814][ T1770] usb 1-1: USB disconnect, device number 5 [ 41.674658][ T1770] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 41.824607][ T1770] usb 1-1: Using ep0 maxpacket: 16 [ 41.827486][ T1770] usb 1-1: unable to get BOS descriptor or descriptor too short [ 41.828397][ T1770] usb 1-1: config 7 has an invalid interface number: 255 but max is 2 [ 41.828435][ T1770] usb 1-1: config 7 has an invalid interface number: 150 but max is 2 [ 41.828458][ T1770] usb 1-1: config 7 has an invalid interface number: 100 but max is 2 [ 41.828492][ T1770] usb 1-1: config 7 has no interface number 0 [ 41.828513][ T1770] usb 1-1: config 7 has no interface number 1 [ 41.828534][ T1770] usb 1-1: config 7 has no interface number 2 [ 41.828568][ T1770] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 41.828606][ T1770] usb 1-1: config 7 interface 255 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 41.828632][ T1770] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 41.828658][ T1770] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0xE has invalid wMaxPacketSize 0 [ 41.828684][ T1770] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0x1 has an invalid bInterval 128, changing to 11 [ 41.828712][ T1770] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 41.828740][ T1770] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0xD has invalid maxpacket 1072, setting to 64 [ 41.828771][ T1770] usb 1-1: config 7 interface 255 altsetting 4 has a duplicate endpoint with address 0xB, skipping [ 41.828796][ T1770] usb 1-1: config 7 interface 255 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 1024 [ 41.828821][ T1770] usb 1-1: config 7 interface 255 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 41.828850][ T1770] usb 1-1: config 7 interface 100 altsetting 2 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 41.828877][ T1770] usb 1-1: config 7 interface 100 altsetting 2 has a duplicate endpoint with address 0x6, skipping [ 41.828901][ T1770] usb 1-1: config 7 interface 255 has no altsetting 0 [ 41.828927][ T1770] usb 1-1: config 7 interface 150 has no altsetting 0 [ 41.828955][ T1770] usb 1-1: config 7 interface 100 has no altsetting 0 [ 41.830699][ T1770] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=5d.a6 [ 41.830730][ T1770] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.830753][ T1770] usb 1-1: Product: syz [ 41.830773][ T1770] usb 1-1: Manufacturer: syz [ 41.830793][ T1770] usb 1-1: SerialNumber: syz [ 42.040426][ T1770 ** replaying previous printk message ** [ 42.040426][ T1770] ------------[ cut here ]------------ [ 42.040501][ T1770] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 42.040997][ T1770] WARNING: CPU: 1 PID: 1770 at drivers/usb/core/urb.c:504 usb_submit_urb+0x9e8/0x1448 [ 42.047673][ T1770] Modules linked in: [ 42.048699][ T1770] CPU: 1 UID: 0 PID: 1770 Comm: kworker/1:2 Tainted: G W 6.15.0-rc7-syzkaller-gd7fa1af5b33e #0 PREEMPT [ 42.052162][ T1770] Tainted: [W]=WARN [ 42.053166][ T1770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 42.056069][ T1770] Workqueue: usb_hub_wq hub_event [ 42.057452][ T1770] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 42.059510][ T1770] pc : usb_submit_urb+0x9e8/0x1448 [ 42.060941][ T1770] lr : usb_submit_urb+0x9e8/0x1448 [ 42.062359][ T1770] sp : ffff80009f3768c0 [ 42.063472][ T1770] x29: ffff80009f376900 x28: ffff0000c8277a68 x27: ffff80008c77d9a8 [ 42.065828][ T1770] x26: ffff0000c1b8f580 x25: ffff80008c77d9a0 x24: ffff0000c29a165c [ 42.067985][ T1770] x23: ffff80008c784720 x22: dfff800000000000 x21: 0000000000000002 [ 42.070193][ T1770] x20: 0000000000000c00 x19: ffff0000c29a1600 x18: 1fffe0003386f276 [ 42.072365][ T1770] x17: 0000000000000000 x16: ffff80008adbe9e4 x15: 0000000000000001 [ 42.074717][ T1770] x14: 1fffe0003386f2e2 x13: 0000000000000000 x12: 0000000000000000 [ 42.076861][ T1770] x11: ffff60003386f2e3 x10: 0000000000ff0100 x9 : b2843552d518b900 [ 42.079082][ T1770] x8 : b2843552d518b900 x7 : 0000000000000001 x6 : 0000000000000001 [ 42.081268][ T1770] x5 : ffff80009f376218 x4 : ffff80008f415ba0 x3 : ffff8000807b4b68 [ 42.083638][ T1770] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000 [ 42.085749][ T1770] Call trace: [ 42.086623][ T1770] usb_submit_urb+0x9e8/0x1448 (P) [ 42.088079][ T1770] usb_start_wait_urb+0xe8/0x3bc [ 42.089436][ T1770] usb_bulk_msg+0x2e4/0x3e4 [ 42.090679][ T1770] amradio_set_mute+0x1a4/0x3f4 [ 42.092098][ T1770] usb_amradio_probe+0x3d4/0x700 [ 42.093505][ T1770] usb_probe_interface+0x584/0xa44 [ 42.094852][ T1770] really_probe+0x394/0x910 [ 42.096035][ T1770] __driver_probe_device+0x180/0x2d4 [ 42.097437][ T1770] driver_probe_device+0x78/0x330 [ 42.098836][ T1770] __device_attach_driver+0x290/0x4e0 [ 42.100261][ T1770] bus_for_each_drv+0x220/0x2b4 [ 42.101751][ T1770] __device_attach+0x26c/0x388 [ 42.103041][ T1770] device_initial_probe+0x24/0x34 [ 42.104423][ T1770] bus_probe_device+0x178/0x240 [ 42.105793][ T1770] device_add+0x71c/0xa60 [ 42.106966][ T1770] usb_set_configuration+0x1640/0x1bac [ 42.108459][ T1770] usb_generic_driver_probe+0x8c/0x144 [ 42.109970][ T1770] usb_probe_device+0x1a4/0x348 [ 42.111434][ T1770] really_probe+0x394/0x910 [ 42.112682][ T1770] __driver_probe_device+0x180/0x2d4 [ 42.114064][ T1770] driver_probe_device+0x78/0x330 [ 42.115417][ T1770] __device_attach_driver+0x290/0x4e0 [ 42.116877][ T1770] bus_for_each_drv+0x220/0x2b4 [ 42.118191][ T1770] __device_attach+0x26c/0x388 [ 42.119560][ T1770] device_initial_probe+0x24/0x34 [ 42.121100][ T1770] bus_probe_device+0x178/0x240 [ 42.122479][ T1770] device_add+0x71c/0xa60 [ 42.123683][ T1770] usb_new_device+0x7f0/0x1220 [ 42.124917][ T1770] hub_event+0x2148/0x3cf0 [ 42.126142][ T1770] process_one_work+0x7e8/0x156c [ 42.127498][ T1770] worker_thread+0x990/0xed8 [ 42.128724][ T1770] kthread+0x5fc/0x75c [ 42.129974][ T1770] ret_from_fork+0x10/0x20 [ 42.131199][ T1770] irq event stamp: 128016 [ 42.132364][ T1770] hardirqs last enabled at (128015): [] __console_unlock+0x70/0xc4 [ 42.134976][ T1770] hardirqs last disabled at (128016): [] el1_dbg+0x24/0x80 [ 42.137284][ T1770] softirqs last enabled at (124048): [] handle_softirqs+0xaf8/0xc88 [ 42.139940][ T1770] softirqs last disabled at (123489): [] __do_softirq+0x14/0x20 [ 42.142455][ T1770] ---[ end trace 0000000000000000 ]--- [ 42.144790][ T1770] (null): radio-mr800 - initialization failed [ 42.144897][ T1770] radio-mr800 1-1:7.255: probe with driver radio-mr800 failed with error -71 [ 42.145147][ T1770] usbhid 1-1:7.255: couldn't find an input interrupt endpoint executing program [ 42.165504][ T1770] usb 1-1: USB disconnect, device number 6 [ 42.474637][ T1770] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 42.624568][ T1770] usb 1-1: Using ep0 maxpacket: 16 [ 42.626429][ T1770] usb 1-1: unable to get BOS descriptor or descriptor too short [ 42.627351][ T1770] usb 1-1: config 7 has an invalid interface number: 255 but max is 2 [ 42.627382][ T1770] usb 1-1: config 7 has an invalid interface number: 150 but max is 2 [ 42.627407][ T1770] usb 1-1: config 7 has an invalid interface number: 100 but max is 2 [ 42.627431][ T1770] usb 1-1: config 7 has no interface number 0 [ 42.627453][ T1770] usb 1-1: config 7 has no interface number 1 [ 42.627484][ T1770] usb 1-1: config 7 has no interface number 2 [ 42.627518][ T1770] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 42.627547][ T1770] usb 1-1: config 7 interface 255 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 42.627572][ T1770] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 42.627599][ T1770] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0xE has invalid wMaxPacketSize 0 [ 42.627624][ T1770] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0x1 has an invalid bInterval 128, changing to 11 [ 42.627658][ T1770] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 42.627685][ T1770] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0xD has invalid maxpacket 1072, setting to 64 [ 42.627711][ T1770] usb 1-1: config 7 interface 255 altsetting 4 has a duplicate endpoint with address 0xB, skipping [ 42.627736][ T1770] usb 1-1: config 7 interface 255 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 1024 [ 42.627761][ T1770] usb 1-1: config 7 interface 255 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 42.627792][ T1770] usb 1-1: config 7 interface 100 altsetting 2 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 42.627818][ T1770] usb 1-1: config 7 interface 100 altsetting 2 has a duplicate endpoint with address 0x6, skipping [ 42.627842][ T1770] usb 1-1: config 7 interface 255 has no altsetting 0 [ 42.627865][ T1770] usb 1-1: config 7 interface 150 has no altsetting 0 [ 42.627887][ T1770] usb 1-1: config 7 interface 100 has no altsetting 0 [ 42.629598][ T1770] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=5d.a6 [ 42.629628][ T1770] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.629660][ T1770] usb 1-1: Product: syz [ 42.629681][ T1770] usb 1-1: Manufacturer: syz [ 42.629701][ T1770] usb 1-1: SerialNumber: syz [ 42.842070][ T1770] ** replaying previous printk message ** [ 42.842070][ T1770] ------------[ cut here ]------------ [ 42.842131][ T1770] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 42.842653][ T1770] WARNING: CPU: 1 PID: 1770 at drivers/usb/core/urb.c:504 usb_submit_urb+0x9e8/0x1448 [ 42.849791][ T1770] Modules linked in: executing program [ 42.850851][ T1770] CPU: 1 UID: 0 PID: 1770 Comm: kworker/1:2 Tainted: G W 6.15.0-rc7-syzkaller-gd7fa1af5b33e #0 PREEMPT [ 42.854531][ T1770] Tainted: [W]=WARN [ 42.855592][ T1770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 42.858435][ T1770] Workqueue: usb_hub_wq hub_event [ 42.859860][ T1770] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 42.861953][ T1770] pc : usb_submit_urb+0x9e8/0x1448 [ 42.863352][ T1770] lr : usb_submit_urb+0x9e8/0x1448 [ 42.864719][ T1770] sp : ffff80009f3768c0 [ 42.865967][ T1770] x29: ffff80009f376900 x28: ffff0000cb50aa68 x27: ffff80008c77d9a8 [ 42.868099][ T1770] x26: ffff0000c22c92e0 x25: ffff80008c77d9a0 x24: ffff0000c227a45c [ 42.870354][ T1770] x23: ffff80008c784720 x22: dfff800000000000 x21: 0000000000000002 [ 42.872772][ T1770] x20: 0000000000000c00 x19: ffff0000c227a400 x18: 1fffe0003386f276 [ 42.874921][ T1770] x17: 0000000000000000 x16: ffff80008adbe9e4 x15: 0000000000000001 [ 42.877217][ T1770] x14: 1fffe0003386f2e2 x13: 0000000000000000 x12: 0000000000000000 [ 42.879518][ T1770] x11: ffff60003386f2e3 x10: 0000000000ff0100 x9 : b2843552d518b900 [ 42.881932][ T1770] x8 : b2843552d518b900 x7 : 0000000000000001 x6 : 0000000000000001 [ 42.884121][ T1770] x5 : ffff80009f376218 x4 : ffff80008f415ba0 x3 : ffff8000807b4b68 [ 42.886409][ T1770] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000 [ 42.888726][ T1770] Call trace: [ 42.889631][ T1770] usb_submit_urb+0x9e8/0x1448 (P) [ 42.891065][ T1770] usb_start_wait_urb+0xe8/0x3bc [ 42.892448][ T1770] usb_bulk_msg+0x2e4/0x3e4 [ 42.893685][ T1770] amradio_set_mute+0x1a4/0x3f4 [ 42.894967][ T1770] usb_amradio_probe+0x3d4/0x700 [ 42.896255][ T1770] usb_probe_interface+0x584/0xa44 [ 42.897756][ T1770] really_probe+0x394/0x910 [ 42.898907][ T1770] __driver_probe_device+0x180/0x2d4 [ 42.900370][ T1770] driver_probe_device+0x78/0x330 [ 42.901737][ T1770] __device_attach_driver+0x290/0x4e0 [ 42.903308][ T1770] bus_for_each_drv+0x220/0x2b4 [ 42.904723][ T1770] __device_attach+0x26c/0x388 [ 42.906016][ T1770] device_initial_probe+0x24/0x34 [ 42.907456][ T1770] bus_probe_device+0x178/0x240 [ 42.908886][ T1770] device_add+0x71c/0xa60 [ 42.910153][ T1770] usb_set_configuration+0x1640/0x1bac [ 42.911806][ T1770] usb_generic_driver_probe+0x8c/0x144 [ 42.913345][ T1770] usb_probe_device+0x1a4/0x348 [ 42.914681][ T1770] really_probe+0x394/0x910 [ 42.916001][ T1770] __driver_probe_device+0x180/0x2d4 [ 42.917413][ T1770] driver_probe_device+0x78/0x330 [ 42.918800][ T1770] __device_attach_driver+0x290/0x4e0 [ 42.920245][ T1770] bus_for_each_drv+0x220/0x2b4 [ 42.921556][ T1770] __device_attach+0x26c/0x388 [ 42.923089][ T1770] device_initial_probe+0x24/0x34 [ 42.924926][ T1770] bus_probe_device+0x178/0x240 [ 42.926344][ T1770] device_add+0x71c/0xa60 [ 42.927581][ T1770] usb_new_device+0x7f0/0x1220 [ 42.928991][ T1770] hub_event+0x2148/0x3cf0 [ 42.930371][ T1770] process_one_work+0x7e8/0x156c [ 42.931818][ T1770] worker_thread+0x990/0xed8 [ 42.933420][ T1770] kthread+0x5fc/0x75c [ 42.934517][ T1770] ret_from_fork+0x10/0x20 [ 42.935944][ T1770] irq event stamp: 135442 [ 42.937150][ T1770] hardirqs last enabled at (135441): [] __console_unlock+0x70/0xc4 [ 42.939773][ T1770] hardirqs last disabled at (135442): [] el1_dbg+0x24/0x80 [ 42.942212][ T1770] softirqs last enabled at (132794): [] handle_softirqs+0xaf8/0xc88 [ 42.945023][ T1770] softirqs last disabled at (132779): [] __do_softirq+0x14/0x20 [ 42.947515][ T1770] ---[ end trace 0000000000000000 ]--- [ 42.950026][ T1770] (null): radio-mr800 - initialization failed [ 42.950139][ T1770] radio-mr800 1-1:7.255: probe with driver radio-mr800 failed with error -71 [ 42.950407][ T1770] usbhid 1-1:7.255: couldn't find an input interrupt endpoint [ 42.964669][ T1770] usb 1-1: USB disconnect, device number 7 [ 43.274621][ T1770] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 43.424616][ T1770] usb 1-1: Using ep0 maxpacket: 16 [ 43.426669][ T1770] usb 1-1: unable to get BOS descriptor or descriptor too short [ 43.427593][ T1770] usb 1-1: config 7 has an invalid interface number: 255 but max is 2 [ 43.427624][ T1770] usb 1-1: config 7 has an invalid interface number: 150 but max is 2 [ 43.427658][ T1770] usb 1-1: config 7 has an invalid interface number: 100 but max is 2 [ 43.427682][ T1770] usb 1-1: config 7 has no interface number 0 [ 43.427704][ T1770] usb 1-1: config 7 has no interface number 1 [ 43.427725][ T1770] usb 1-1: config 7 has no interface number 2 [ 43.427755][ T1770] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 43.427782][ T1770] usb 1-1: config 7 interface 255 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 43.427807][ T1770] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 43.427834][ T1770] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0xE has invalid wMaxPacketSize 0 [ 43.427859][ T1770] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0x1 has an invalid bInterval 128, changing to 11 [ 43.427889][ T1770] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 43.427916][ T1770] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0xD has invalid maxpacket 1072, setting to 64 [ 43.427942][ T1770] usb 1-1: config 7 interface 255 altsetting 4 has a duplicate endpoint with address 0xB, skipping [ 43.427967][ T1770] usb 1-1: config 7 interface 255 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 1024 [ 43.427992][ T1770] usb 1-1: config 7 interface 255 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 43.428019][ T1770] usb 1-1: config 7 interface 100 altsetting 2 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 43.428045][ T1770] usb 1-1: config 7 interface 100 altsetting 2 has a duplicate endpoint with address 0x6, skipping [ 43.428069][ T1770] usb 1-1: config 7 interface 255 has no altsetting 0 [ 43.428092][ T1770] usb 1-1: config 7 interface 150 has no altsetting 0 [ 43.428114][ T1770] usb 1-1: config 7 interface 100 has no altsetting 0 [ 43.429776][ T1770] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=5d.a6 [ 43.429805][ T1770] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.429829][ T1770] usb 1-1: Product: syz [ 43.429849][ T1770] usb 1-1: Manufacturer: syz [ 43.429869][ T1770] usb 1-1: SerialNumber: syz [ 43.638967][ T1770 ** replaying previous printk message ** [ 43.638967][ T1770] ------------[ cut here ]------------ [ 43.639031][ T1770] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 43.639542][ T1770] WARNING: CPU: 1 PID: 1770 at drivers/usb/core/urb.c:504 usb_submit_urb+0x9e8/0x1448 [ 43.646674][ T1770] Modules linked in: [ 43.647753][ T1770] CPU: 1 UID: 0 PID: 1770 Comm: kworker/1:2 Tainted: G W 6.15.0-rc7-syzkaller-gd7fa1af5b33e #0 PREEMPT [ 43.651235][ T1770] Tainted: [W]=WARN [ 43.652251][ T1770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 43.655108][ T1770] Workqueue: usb_hub_wq hub_event [ 43.656426][ T1770] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 43.658605][ T1770] pc : usb_submit_urb+0x9e8/0x1448 [ 43.660085][ T1770] lr : usb_submit_urb+0x9e8/0x1448 [ 43.661657][ T1770] sp : ffff80009f3768c0 [ 43.662856][ T1770] x29: ffff80009f376900 x28: ffff0000cb50d268 x27: ffff80008c77d9a8 [ 43.665044][ T1770] x26: ffff0000c22c9ca0 x25: ffff80008c77d9a0 x24: ffff0000c299ef5c [ 43.667352][ T1770] x23: ffff80008c784720 x22: dfff800000000000 x21: 0000000000000002 [ 43.669658][ T1770] x20: 0000000000000c00 x19: ffff0000c299ef00 x18: 1fffe0003386f276 [ 43.671941][ T1770] x17: 0000000000000000 x16: ffff80008adbe9e4 x15: 0000000000000001 [ 43.674214][ T1770] x14: 1fffe0003386f2e2 x13: 0000000000000000 x12: 0000000000000000 [ 43.676476][ T1770] x11: ffff60003386f2e3 x10: 0000000000ff0100 x9 : b2843552d518b900 [ 43.678719][ T1770] x8 : b2843552d518b900 x7 : 0000000000000001 x6 : 0000000000000001 [ 43.680967][ T1770] x5 : ffff80009f376218 x4 : ffff80008f415ba0 x3 : ffff8000807b4b68 [ 43.683193][ T1770] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000 [ 43.685336][ T1770] Call trace: [ 43.686263][ T1770] usb_submit_urb+0x9e8/0x1448 (P) [ 43.687613][ T1770] usb_start_wait_urb+0xe8/0x3bc [ 43.688919][ T1770] usb_bulk_msg+0x2e4/0x3e4 [ 43.690209][ T1770] amradio_set_mute+0x1a4/0x3f4 [ 43.691554][ T1770] usb_amradio_probe+0x3d4/0x700 [ 43.692864][ T1770] usb_probe_interface+0x584/0xa44 [ 43.694337][ T1770] really_probe+0x394/0x910 [ 43.695613][ T1770] __driver_probe_device+0x180/0x2d4 [ 43.697080][ T1770] driver_probe_device+0x78/0x330 [ 43.698554][ T1770] __device_attach_driver+0x290/0x4e0 [ 43.700051][ T1770] bus_for_each_drv+0x220/0x2b4 [ 43.701381][ T1770] __device_attach+0x26c/0x388 [ 43.702776][ T1770] device_initial_probe+0x24/0x34 [ 43.704182][ T1770] bus_probe_device+0x178/0x240 [ 43.705517][ T1770] device_add+0x71c/0xa60 [ 43.706801][ T1770] usb_set_configuration+0x1640/0x1bac [ 43.708261][ T1770] usb_generic_driver_probe+0x8c/0x144 [ 43.709789][ T1770] usb_probe_device+0x1a4/0x348 [ 43.711149][ T1770] really_probe+0x394/0x910 [ 43.712393][ T1770] __driver_probe_device+0x180/0x2d4 [ 43.713980][ T1770] driver_probe_device+0x78/0x330 [ 43.715337][ T1770] __device_attach_driver+0x290/0x4e0 [ 43.716819][ T1770] bus_for_each_drv+0x220/0x2b4 [ 43.718153][ T1770] __device_attach+0x26c/0x388 [ 43.719487][ T1770] device_initial_probe+0x24/0x34 [ 43.720909][ T1770] bus_probe_device+0x178/0x240 [ 43.722280][ T1770] device_add+0x71c/0xa60 [ 43.723439][ T1770] usb_new_device+0x7f0/0x1220 [ 43.724786][ T1770] hub_event+0x2148/0x3cf0 [ 43.726087][ T1770] process_one_work+0x7e8/0x156c [ 43.727446][ T1770] worker_thread+0x990/0xed8 [ 43.728771][ T1770] kthread+0x5fc/0x75c [ 43.729852][ T1770] ret_from_fork+0x10/0x20 [ 43.731100][ T1770] irq event stamp: 143372 [ 43.732265][ T1770] hardirqs last enabled at (143371): [] __console_unlock+0x70/0xc4 [ 43.734925][ T1770] hardirqs last disabled at (143372): [] el1_dbg+0x24/0x80 [ 43.737303][ T1770] softirqs last enabled at (140536): [] handle_softirqs+0xaf8/0xc88 [ 43.740062][ T1770] softirqs last disabled at (140521): [] __do_softirq+0x14/0x20 [ 43.742526][ T1770] ---[ end trace 0000000000000000 ]--- [ 43.746283][ T1770] (null): radio-mr800 - initialization failed [ 43.746392][ T1770] radio-mr800 1-1:7.255: probe with driver radio-mr800 failed with error -71 executing program [ 43.746651][ T1770] usbhid 1-1:7.255: couldn't find an input interrupt endpoint [ 43.760596][ T1770] usb 1-1: USB disconnect, device number 8 [ 44.054641][ T1770] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 44.204606][ T1770] usb 1-1: Using ep0 maxpacket: 16 [ 44.206723][ T1770] usb 1-1: unable to get BOS descriptor or descriptor too short [ 44.207707][ T1770] usb 1-1: config 7 has an invalid interface number: 255 but max is 2 [ 44.207741][ T1770] usb 1-1: config 7 has an invalid interface number: 150 but max is 2 [ 44.207765][ T1770] usb 1-1: config 7 has an invalid interface number: 100 but max is 2 [ 44.207789][ T1770] usb 1-1: config 7 has no interface number 0 [ 44.207810][ T1770] usb 1-1: config 7 has no interface number 1 [ 44.207831][ T1770] usb 1-1: config 7 has no interface number 2 [ 44.207863][ T1770] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 44.207889][ T1770] usb 1-1: config 7 interface 255 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 44.207914][ T1770] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 44.207941][ T1770] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0xE has invalid wMaxPacketSize 0 [ 44.207965][ T1770] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0x1 has an invalid bInterval 128, changing to 11 [ 44.207992][ T1770] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 44.208019][ T1770] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0xD has invalid maxpacket 1072, setting to 64 [ 44.208045][ T1770] usb 1-1: config 7 interface 255 altsetting 4 has a duplicate endpoint with address 0xB, skipping [ 44.208069][ T1770] usb 1-1: config 7 interface 255 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 1024 [ 44.208095][ T1770] usb 1-1: config 7 interface 255 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 44.208121][ T1770] usb 1-1: config 7 interface 100 altsetting 2 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 44.208148][ T1770] usb 1-1: config 7 interface 100 altsetting 2 has a duplicate endpoint with address 0x6, skipping [ 44.208174][ T1770] usb 1-1: config 7 interface 255 has no altsetting 0 [ 44.208198][ T1770] usb 1-1: config 7 interface 150 has no altsetting 0 [ 44.208221][ T1770] usb 1-1: config 7 interface 100 has no altsetting 0 [ 44.209705][ T1770] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=5d.a6 [ 44.209737][ T1770] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.209762][ T1770] usb 1-1: Product: syz [ 44.209783][ T1770] usb 1-1: Manufacturer: syz [ 44.209804][ T1770] usb 1-1: SerialNumber: syz [ 44.419770][ ** replaying previous printk message ** [ 44.419770][ T1770] ------------[ cut here ]------------ [ 44.419828][ T1770] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 44.420321][ T1770] WARNING: CPU: 1 PID: 1770 at drivers/usb/core/urb.c:504 usb_submit_urb+0x9e8/0x1448 [ 44.427214][ T1770] Modules linked in: [ 44.428314][ T1770] CPU: 1 UID: 0 PID: 1770 Comm: kworker/1:2 Tainted: G W 6.15.0-rc7-syzkaller-gd7fa1af5b33e #0 PREEMPT [ 44.431722][ T1770] Tainted: [W]=WARN [ 44.432753][ T1770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 44.435673][ T1770] Workqueue: usb_hub_wq hub_event [ 44.437042][ T1770] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 44.439194][ T1770] pc : usb_submit_urb+0x9e8/0x1448 [ 44.440647][ T1770] lr : usb_submit_urb+0x9e8/0x1448 [ 44.442084][ T1770] sp : ffff80009f3768c0 [ 44.443274][ T1770] x29: ffff80009f376900 x28: ffff0000cb50fa68 x27: ffff80008c77d9a8 [ 44.445444][ T1770] x26: ffff0000cd6bb7c0 x25: ffff80008c77d9a0 x24: ffff0000c259675c [ 44.447697][ T1770] x23: ffff80008c784720 x22: dfff800000000000 x21: 0000000000000002 [ 44.449855][ T1770] x20: 0000000000000c00 x19: ffff0000c2596700 x18: 1fffe0003386f276 [ 44.452078][ T1770] x17: 0000000000000000 x16: ffff80008adbe9e4 x15: 0000000000000001 [ 44.454243][ T1770] x14: 1fffe0003386f2e2 x13: 0000000000000000 x12: 0000000000000000 [ 44.456507][ T1770] x11: ffff60003386f2e3 x10: 0000000000ff0100 x9 : b2843552d518b900 [ 44.458628][ T1770] x8 : b2843552d518b900 x7 : 0000000000000001 x6 : 0000000000000001 [ 44.460877][ T1770] x5 : ffff80009f376218 x4 : ffff80008f415ba0 x3 : ffff8000807b4b68 [ 44.463084][ T1770] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000 [ 44.465325][ T1770] Call trace: [ 44.466236][ T1770] usb_submit_urb+0x9e8/0x1448 (P) [ 44.467694][ T1770] usb_start_wait_urb+0xe8/0x3bc [ 44.469020][ T1770] usb_bulk_msg+0x2e4/0x3e4 [ 44.470248][ T1770] amradio_set_mute+0x1a4/0x3f4 [ 44.471658][ T1770] usb_amradio_probe+0x3d4/0x700 [ 44.473012][ T1770] usb_probe_interface+0x584/0xa44 [ 44.474483][ T1770] really_probe+0x394/0x910 [ 44.475790][ T1770] __driver_probe_device+0x180/0x2d4 [ 44.477229][ T1770] driver_probe_device+0x78/0x330 [ 44.478624][ T1770] __device_attach_driver+0x290/0x4e0 [ 44.480214][ T1770] bus_for_each_drv+0x220/0x2b4 [ 44.481542][ T1770] __device_attach+0x26c/0x388 [ 44.482849][ T1770] device_initial_probe+0x24/0x34 [ 44.484256][ T1770] bus_probe_device+0x178/0x240 [ 44.485627][ T1770] device_add+0x71c/0xa60 [ 44.486805][ T1770] usb_set_configuration+0x1640/0x1bac [ 44.488386][ T1770] usb_generic_driver_probe+0x8c/0x144 [ 44.489924][ T1770] usb_probe_device+0x1a4/0x348 [ 44.491297][ T1770] really_probe+0x394/0x910 [ 44.492633][ T1770] __driver_probe_device+0x180/0x2d4 [ 44.494071][ T1770] driver_probe_device+0x78/0x330 [ 44.495537][ T1770] __device_attach_driver+0x290/0x4e0 [ 44.496971][ T1770] bus_for_each_drv+0x220/0x2b4 [ 44.498283][ T1770] __device_attach+0x26c/0x388 [ 44.499726][ T1770] device_initial_probe+0x24/0x34 [ 44.501232][ T1770] bus_probe_device+0x178/0x240 [ 44.502539][ T1770] device_add+0x71c/0xa60 [ 44.503738][ T1770] usb_new_device+0x7f0/0x1220 [ 44.505055][ T1770] hub_event+0x2148/0x3cf0 [ 44.506264][ T1770] process_one_work+0x7e8/0x156c [ 44.507636][ T1770] worker_thread+0x990/0xed8 [ 44.508840][ T1770] kthread+0x5fc/0x75c [ 44.509947][ T1770] ret_from_fork+0x10/0x20 [ 44.511131][ T1770] irq event stamp: 150880 [ 44.512357][ T1770] hardirqs last enabled at (150879): [] __console_unlock+0x70/0xc4 [ 44.514950][ T1770] hardirqs last disabled at (150880): [] el1_dbg+0x24/0x80 [ 44.517383][ T1770] softirqs last enabled at (148262): [] handle_softirqs+0xaf8/0xc88 [ 44.520151][ T1770] softirqs last disabled at (148247): [] __do_softirq+0x14/0x20 [ 44.522705][ T1770] ---[ end trace 0000000000000000 ]--- [ 44.525810][ T1770] (null): radio-mr800 - initialization failed [ 44.525927][ T1770] radio-mr800 1-1:7.255: probe with driver radio-mr800 failed with error -71 [ 44.526173][ T1770] usbhid 1-1:7.255: couldn't find an input interrupt endpoint executing program [ 44.541364][ T1770] usb 1-1: USB disconnect, device number 9 [ 44.834606][ T1770] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 44.984631][ T1770] usb 1-1: Using ep0 maxpacket: 16 [ 44.986437][ T1770] usb 1-1: unable to get BOS descriptor or descriptor too short [ 44.988199][ T1770] usb 1-1: config 7 has an invalid interface number: 255 but max is 2 [ 44.988234][ T1770] usb 1-1: config 7 has an invalid interface number: 150 but max is 2 [ 44.988258][ T1770] usb 1-1: config 7 has an invalid interface number: 100 but max is 2 [ 44.988281][ T1770] usb 1-1: config 7 has no interface number 0 [ 44.988303][ T1770] usb 1-1: config 7 has no interface number 1 [ 44.988324][ T1770] usb 1-1: config 7 has no interface number 2 [ 44.988355][ T1770] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 44.988382][ T1770] usb 1-1: config 7 interface 255 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 44.988407][ T1770] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 44.988434][ T1770] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0xE has invalid wMaxPacketSize 0 [ 44.988458][ T1770] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0x1 has an invalid bInterval 128, changing to 11 [ 44.988497][ T1770] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 44.988524][ T1770] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0xD has invalid maxpacket 1072, setting to 64 [ 44.988551][ T1770] usb 1-1: config 7 interface 255 altsetting 4 has a duplicate endpoint with address 0xB, skipping [ 44.988575][ T1770] usb 1-1: config 7 interface 255 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 1024 [ 44.988600][ T1770] usb 1-1: config 7 interface 255 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 44.988631][ T1770] usb 1-1: config 7 interface 100 altsetting 2 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 44.988657][ T1770] usb 1-1: config 7 interface 100 altsetting 2 has a duplicate endpoint with address 0x6, skipping [ 44.988705][ T1770] usb 1-1: config 7 interface 255 has no altsetting 0 [ 44.988728][ T1770] usb 1-1: config 7 interface 150 has no altsetting 0 [ 44.988750][ T1770] usb 1-1: config 7 interface 100 has no altsetting 0 [ 44.990243][ T1770] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=5d.a6 [ 44.990284][ T1770] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.990309][ T1770] usb 1-1: Product: syz [ 44.990330][ T1770] usb 1-1: Manufacturer: syz [ 44.990352][ T1770] usb 1-1: SerialNumber: syz [ 45.198097][ ** replaying previous printk message ** [ 45.198097][ T1770] ------------[ cut here ]------------ [ 45.198149][ T1770] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 45.198659][ T1770] WARNING: CPU: 1 PID: 1770 at drivers/usb/core/urb.c:504 usb_submit_urb+0x9e8/0x1448 [ 45.205580][ T1770] Modules linked in: [ 45.206698][ T1770] CPU: 1 UID: 0 PID: 1770 Comm: kworker/1:2 Tainted: G W 6.15.0-rc7-syzkaller-gd7fa1af5b33e #0 PREEMPT [ 45.209984][ T1770] Tainted: [W]=WARN [ 45.210995][ T1770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 45.213680][ T1770] Workqueue: usb_hub_wq hub_event [ 45.215038][ T1770] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 45.217229][ T1770] pc : usb_submit_urb+0x9e8/0x1448 [ 45.218605][ T1770] lr : usb_submit_urb+0x9e8/0x1448 [ 45.220039][ T1770] sp : ffff80009f3768c0 [ 45.221122][ T1770] x29: ffff80009f376900 x28: ffff0000cb141268 x27: ffff80008c77d9a8 [ 45.223309][ T1770] x26: ffff0000d00a8280 x25: ffff80008c77d9a0 x24: ffff0000c5a1ec5c [ 45.225566][ T1770] x23: ffff80008c784720 x22: dfff800000000000 x21: 0000000000000002 [ 45.227720][ T1770] x20: 0000000000000c00 x19: ffff0000c5a1ec00 x18: 1fffe0003386f276 [ 45.229865][ T1770] x17: 0000000000000000 x16: ffff80008adbe9e4 x15: 0000000000000001 [ 45.232025][ T1770] x14: 1fffe0003386f2e2 x13: 0000000000000000 x12: 0000000000000000 [ 45.234273][ T1770] x11: ffff60003386f2e3 x10: 0000000000ff0100 x9 : b2843552d518b900 [ 45.236630][ T1770] x8 : b2843552d518b900 x7 : 0000000000000001 x6 : 0000000000000001 [ 45.238773][ T1770] x5 : ffff80009f376218 x4 : ffff80008f415ba0 x3 : ffff8000807b4b68 [ 45.241061][ T1770] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000 [ 45.243249][ T1770] Call trace: [ 45.244135][ T1770] usb_submit_urb+0x9e8/0x1448 (P) [ 45.245571][ T1770] usb_start_wait_urb+0xe8/0x3bc [ 45.246923][ T1770] usb_bulk_msg+0x2e4/0x3e4 [ 45.248135][ T1770] amradio_set_mute+0x1a4/0x3f4 [ 45.249529][ T1770] usb_amradio_probe+0x3d4/0x700 [ 45.250899][ T1770] usb_probe_interface+0x584/0xa44 [ 45.252294][ T1770] really_probe+0x394/0x910 [ 45.253581][ T1770] __driver_probe_device+0x180/0x2d4 [ 45.254994][ T1770] driver_probe_device+0x78/0x330 [ 45.256288][ T1770] __device_attach_driver+0x290/0x4e0 [ 45.257791][ T1770] bus_for_each_drv+0x220/0x2b4 [ 45.259077][ T1770] __device_attach+0x26c/0x388 [ 45.260341][ T1770] device_initial_probe+0x24/0x34 [ 45.261727][ T1770] bus_probe_device+0x178/0x240 [ 45.263011][ T1770] device_add+0x71c/0xa60 [ 45.264222][ T1770] usb_set_configuration+0x1640/0x1bac [ 45.265811][ T1770] usb_generic_driver_probe+0x8c/0x144 [ 45.267271][ T1770] usb_probe_device+0x1a4/0x348 [ 45.268626][ T1770] really_probe+0x394/0x910 [ 45.269948][ T1770] __driver_probe_device+0x180/0x2d4 [ 45.271362][ T1770] driver_probe_device+0x78/0x330 [ 45.272733][ T1770] __device_attach_driver+0x290/0x4e0 [ 45.274235][ T1770] bus_for_each_drv+0x220/0x2b4 [ 45.275501][ T1770] __device_attach+0x26c/0x388 [ 45.276782][ T1770] device_initial_probe+0x24/0x34 [ 45.278243][ T1770] bus_probe_device+0x178/0x240 [ 45.279638][ T1770] device_add+0x71c/0xa60 [ 45.280787][ T1770] usb_new_device+0x7f0/0x1220 [ 45.282100][ T1770] hub_event+0x2148/0x3cf0 [ 45.283306][ T1770] process_one_work+0x7e8/0x156c [ 45.284634][ T1770] worker_thread+0x990/0xed8 [ 45.285876][ T1770] kthread+0x5fc/0x75c [ 45.286973][ T1770] ret_from_fork+0x10/0x20 [ 45.288128][ T1770] irq event stamp: 158486 [ 45.289279][ T1770] hardirqs last enabled at (158485): [] __console_unlock+0x70/0xc4 [ 45.291918][ T1770] hardirqs last disabled at (158486): [] el1_dbg+0x24/0x80 [ 45.294366][ T1770] softirqs last enabled at (150906): [] handle_softirqs+0xaf8/0xc88 [ 45.296905][ T1770] softirqs last disabled at (150883): [] __do_softirq+0x14/0x20 [ 45.299461][ T1770] ---[ end trace 0000000000000000 ]--- [ 45.301843][ T1770] (null): radio-mr800 - initialization failed [ 45.301954][ T1770] radio-mr800 1-1:7.255: probe with driver radio-mr800 failed with error -71 [ 45.302208][ T1770] usbhid 1-1:7.255: couldn't find an input interrupt endpoint executing program [ 45.316953][ T1770] usb 1-1: USB disconnect, device number 10 [ 45.624629][ T1770] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 45.784598][ T1770] usb 1-1: Using ep0 maxpacket: 16 [ 45.787134][ T1770] usb 1-1: unable to get BOS descriptor or descriptor too short [ 45.788118][ T1770] usb 1-1: config 7 has an invalid interface number: 255 but max is 2 [ 45.788150][ T1770] usb 1-1: config 7 has an invalid interface number: 150 but max is 2 [ 45.788174][ T1770] usb 1-1: config 7 has an invalid interface number: 100 but max is 2 [ 45.788197][ T1770] usb 1-1: config 7 has no interface number 0 [ 45.788219][ T1770] usb 1-1: config 7 has no interface number 1 [ 45.788240][ T1770] usb 1-1: config 7 has no interface number 2 [ 45.788271][ T1770] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 45.788298][ T1770] usb 1-1: config 7 interface 255 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 45.788323][ T1770] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 45.788349][ T1770] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0xE has invalid wMaxPacketSize 0 [ 45.788374][ T1770] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0x1 has an invalid bInterval 128, changing to 11 [ 45.788401][ T1770] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 45.788428][ T1770] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0xD has invalid maxpacket 1072, setting to 64 [ 45.788454][ T1770] usb 1-1: config 7 interface 255 altsetting 4 has a duplicate endpoint with address 0xB, skipping [ 45.788487][ T1770] usb 1-1: config 7 interface 255 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 1024 [ 45.788513][ T1770] usb 1-1: config 7 interface 255 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 45.788540][ T1770] usb 1-1: config 7 interface 100 altsetting 2 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 45.788566][ T1770] usb 1-1: config 7 interface 100 altsetting 2 has a duplicate endpoint with address 0x6, skipping [ 45.788591][ T1770] usb 1-1: config 7 interface 255 has no altsetting 0 [ 45.788619][ T1770] usb 1-1: config 7 interface 150 has no altsetting 0 [ 45.788643][ T1770] usb 1-1: config 7 interface 100 has no altsetting 0 [ 45.790112][ T1770] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=5d.a6 [ 45.790141][ T1770] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.790165][ T1770] usb 1-1: Product: syz [ 45.790185][ T1770] usb 1-1: Manufacturer: syz [ 45.790206][ T1770] usb 1-1: SerialNumber: syz [ 46.000562][ T1770] ------------[ cut here ]------------ [ 46.000621][ T1770] usb 1-1: executing program ** replaying previous printk message ** [ 46.000621][ T1770] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 46.002973][ T1770] WARNING: CPU: 1 PID: 1770 at drivers/usb/core/urb.c:504 usb_submit_urb+0x9e8/0x1448 [ 46.008482][ T1770] Modules linked in: [ 46.009836][ T1770] CPU: 1 UID: 0 PID: 1770 Comm: kworker/1:2 Tainted: G W 6.15.0-rc7-syzkaller-gd7fa1af5b33e #0 PREEMPT [ 46.013178][ T1770] Tainted: [W]=WARN [ 46.014272][ T1770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 46.016938][ T1770] Workqueue: usb_hub_wq hub_event [ 46.018400][ T1770] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 46.020669][ T1770] pc : usb_submit_urb+0x9e8/0x1448 [ 46.022133][ T1770] lr : usb_submit_urb+0x9e8/0x1448 [ 46.023518][ T1770] sp : ffff80009f3768c0 [ 46.024655][ T1770] x29: ffff80009f376900 x28: ffff0000cb142a68 x27: ffff80008c77d9a8 [ 46.026882][ T1770] x26: ffff0000c541c6c0 x25: ffff80008c77d9a0 x24: ffff0000c3694d5c [ 46.029086][ T1770] x23: ffff80008c784720 x22: dfff800000000000 x21: 0000000000000002 [ 46.031353][ T1770] x20: 0000000000000c00 x19: ffff0000c3694d00 x18: 1fffe0003386f276 [ 46.033577][ T1770] x17: ffff80008f31e000 x16: ffff80008adbe9e4 x15: 0000000000000001 [ 46.035791][ T1770] x14: 1fffe00033871ce8 x13: 0000000000000000 x12: 0000000000000000 [ 46.038044][ T1770] x11: ffff800092d38c40 x10: 0000000000000003 x9 : b2843552d518b900 [ 46.040201][ T1770] x8 : b2843552d518b900 x7 : ffff800080485878 x6 : 0000000000000000 [ 46.042440][ T1770] x5 : 0000000000000001 x4 : 0000000000000001 x3 : 0000000000000010 [ 46.044682][ T1770] x2 : 0000000000000006 x1 : ffff80008b3ebc40 x0 : 0000000000000001 [ 46.046924][ T1770] Call trace: [ 46.047834][ T1770] usb_submit_urb+0x9e8/0x1448 (P) [ 46.049193][ T1770] usb_start_wait_urb+0xe8/0x3bc [ 46.050710][ T1770] usb_bulk_msg+0x2e4/0x3e4 [ 46.051967][ T1770] amradio_set_mute+0x1a4/0x3f4 [ 46.053296][ T1770] usb_amradio_probe+0x3d4/0x700 [ 46.054737][ T1770] usb_probe_interface+0x584/0xa44 [ 46.056158][ T1770] really_probe+0x394/0x910 [ 46.057419][ T1770] __driver_probe_device+0x180/0x2d4 [ 46.058972][ T1770] driver_probe_device+0x78/0x330 [ 46.060329][ T1770] __device_attach_driver+0x290/0x4e0 [ 46.061805][ T1770] bus_for_each_drv+0x220/0x2b4 [ 46.063184][ T1770] __device_attach+0x26c/0x388 [ 46.064447][ T1770] device_initial_probe+0x24/0x34 [ 46.065775][ T1770] bus_probe_device+0x178/0x240 [ 46.067154][ T1770] device_add+0x71c/0xa60 [ 46.068360][ T1770] usb_set_configuration+0x1640/0x1bac [ 46.069910][ T1770] usb_generic_driver_probe+0x8c/0x144 [ 46.071485][ T1770] usb_probe_device+0x1a4/0x348 [ 46.072797][ T1770] really_probe+0x394/0x910 [ 46.073972][ T1770] __driver_probe_device+0x180/0x2d4 [ 46.075516][ T1770] driver_probe_device+0x78/0x330 [ 46.076911][ T1770] __device_attach_driver+0x290/0x4e0 [ 46.078456][ T1770] bus_for_each_drv+0x220/0x2b4 [ 46.079808][ T1770] __device_attach+0x26c/0x388 [ 46.081089][ T1770] device_initial_probe+0x24/0x34 [ 46.082557][ T1770] bus_probe_device+0x178/0x240 [ 46.083909][ T1770] device_add+0x71c/0xa60 [ 46.085074][ T1770] usb_new_device+0x7f0/0x1220 [ 46.086446][ T1770] hub_event+0x2148/0x3cf0 [ 46.087752][ T1770] process_one_work+0x7e8/0x156c [ 46.089155][ T1770] worker_thread+0x990/0xed8 [ 46.090568][ T1770] kthread+0x5fc/0x75c [ 46.091764][ T1770] ret_from_fork+0x10/0x20 [ 46.093018][ T1770] irq event stamp: 166354 [ 46.094437][ T1770] hardirqs last enabled at (166353): [] finish_lock_switch+0xb0/0x1c0 [ 46.097187][ T1770] hardirqs last disabled at (166354): [] el1_dbg+0x24/0x80 [ 46.099652][ T1770] softirqs last enabled at (163538): [] handle_softirqs+0xaf8/0xc88 [ 46.102274][ T1770] softirqs last disabled at (163523): [] __do_softirq+0x14/0x20 [ 46.104947][ T1770] ---[ end trace 0000000000000000 ]--- [ 46.108404][ T1770] (null): radio-mr800 - initialization failed [ 46.108515][ T1770] radio-mr800 1-1:7.255: probe with driver radio-mr800 failed with error -71 [ 46.108781][ T1770] usbhid 1-1:7.255: couldn't find an input interrupt endpoint [ 46.123402][ T1770] usb 1-1: USB disconnect, device number 11 [ 46.444691][ T1770] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 46.594597][ T1770] usb 1-1: Using ep0 maxpacket: 16 [ 46.597636][ T1770] usb 1-1: unable to get BOS descriptor or descriptor too short [ 46.598424][ T1770] usb 1-1: config 7 has an invalid interface number: 255 but max is 2 [ 46.598454][ T1770] usb 1-1: config 7 has an invalid interface number: 150 but max is 2 [ 46.598487][ T1770] usb 1-1: config 7 has an invalid interface number: 100 but max is 2 [ 46.598521][ T1770] usb 1-1: config 7 has no interface number 0 [ 46.598545][ T1770] usb 1-1: config 7 has no interface number 1 [ 46.598566][ T1770] usb 1-1: config 7 has no interface number 2 [ 46.598600][ T1770] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 46.598627][ T1770] usb 1-1: config 7 interface 255 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 46.598652][ T1770] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 46.598679][ T1770] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0xE has invalid wMaxPacketSize 0 [ 46.598703][ T1770] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0x1 has an invalid bInterval 128, changing to 11 [ 46.598730][ T1770] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 46.598757][ T1770] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0xD has invalid maxpacket 1072, setting to 64 [ 46.598783][ T1770] usb 1-1: config 7 interface 255 altsetting 4 has a duplicate endpoint with address 0xB, skipping [ 46.598808][ T1770] usb 1-1: config 7 interface 255 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 1024 [ 46.598833][ T1770] usb 1-1: config 7 interface 255 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 46.598859][ T1770] usb 1-1: config 7 interface 100 altsetting 2 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 46.598886][ T1770] usb 1-1: config 7 interface 100 altsetting 2 has a duplicate endpoint with address 0x6, skipping [ 46.598910][ T1770] usb 1-1: config 7 interface 255 has no altsetting 0 [ 46.598932][ T1770] usb 1-1: config 7 interface 150 has no altsetting 0 [ 46.598954][ T1770] usb 1-1: config 7 interface 100 has no altsetting 0 [ 46.600413][ T1770] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=5d.a6 [ 46.600445][ T1770] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.600482][ T1770] usb 1-1: Product: syz [ 46.600504][ T1770] usb 1-1: Manufacturer: syz [ 46.600534][ T1770] usb 1-1: SerialNumber: syz [ 46.809175][ T1 ** replaying previous printk message ** [ 46.809175][ T1770] ------------[ cut here ]------------ [ 46.809232][ T1770] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 46.809967][ T1770] WARNING: CPU: 1 PID: 1770 at drivers/usb/core/urb.c:504 usb_submit_urb+0x9e8/0x1448 [ 46.816828][ T1770] Modules linked in: executing program [ 46.818079][ T1770] CPU: 1 UID: 0 PID: 1770 Comm: kworker/1:2 Tainted: G W 6.15.0-rc7-syzkaller-gd7fa1af5b33e #0 PREEMPT [ 46.821490][ T1770] Tainted: [W]=WARN [ 46.822595][ T1770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 46.825252][ T1770] Workqueue: usb_hub_wq hub_event [ 46.826768][ T1770] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 46.828903][ T1770] pc : usb_submit_urb+0x9e8/0x1448 [ 46.830324][ T1770] lr : usb_submit_urb+0x9e8/0x1448 [ 46.831685][ T1770] sp : ffff80009f3768c0 [ 46.832799][ T1770] x29: ffff80009f376900 x28: ffff0000cb145a68 x27: ffff80008c77d9a8 [ 46.835006][ T1770] x26: ffff0000c56082e0 x25: ffff80008c77d9a0 x24: ffff0000c556f25c [ 46.837142][ T1770] x23: ffff80008c784720 x22: dfff800000000000 x21: 0000000000000002 [ 46.839415][ T1770] x20: 0000000000000c00 x19: ffff0000c556f200 x18: 1fffe0003386f276 [ 46.841564][ T1770] x17: ffff80008f31e000 x16: ffff80008adbe9e4 x15: 0000000000000001 [ 46.843745][ T1770] x14: 1fffe00033871ce8 x13: 0000000000000000 x12: 0000000000000000 [ 46.845850][ T1770] x11: ffff800092d38c40 x10: 0000000000000003 x9 : b2843552d518b900 [ 46.848063][ T1770] x8 : b2843552d518b900 x7 : ffff800080485878 x6 : 0000000000000000 [ 46.850398][ T1770] x5 : 0000000000000001 x4 : 0000000000000001 x3 : 0000000000000010 [ 46.852915][ T1770] x2 : 0000000000000006 x1 : ffff80008b3ebc40 x0 : 0000000000000001 [ 46.855057][ T1770] Call trace: [ 46.855945][ T1770] usb_submit_urb+0x9e8/0x1448 (P) [ 46.857306][ T1770] usb_start_wait_urb+0xe8/0x3bc [ 46.858778][ T1770] usb_bulk_msg+0x2e4/0x3e4 [ 46.859982][ T1770] amradio_set_mute+0x1a4/0x3f4 [ 46.861243][ T1770] usb_amradio_probe+0x3d4/0x700 [ 46.862614][ T1770] usb_probe_interface+0x584/0xa44 [ 46.864090][ T1770] really_probe+0x394/0x910 [ 46.865285][ T1770] __driver_probe_device+0x180/0x2d4 [ 46.866740][ T1770] driver_probe_device+0x78/0x330 [ 46.868084][ T1770] __device_attach_driver+0x290/0x4e0 [ 46.869460][ T1770] bus_for_each_drv+0x220/0x2b4 [ 46.870746][ T1770] __device_attach+0x26c/0x388 [ 46.872103][ T1770] device_initial_probe+0x24/0x34 [ 46.873476][ T1770] bus_probe_device+0x178/0x240 [ 46.874820][ T1770] device_add+0x71c/0xa60 [ 46.876016][ T1770] usb_set_configuration+0x1640/0x1bac [ 46.877548][ T1770] usb_generic_driver_probe+0x8c/0x144 [ 46.878932][ T1770] usb_probe_device+0x1a4/0x348 [ 46.880298][ T1770] really_probe+0x394/0x910 [ 46.881518][ T1770] __driver_probe_device+0x180/0x2d4 [ 46.882905][ T1770] driver_probe_device+0x78/0x330 [ 46.884318][ T1770] __device_attach_driver+0x290/0x4e0 [ 46.885778][ T1770] bus_for_each_drv+0x220/0x2b4 [ 46.887219][ T1770] __device_attach+0x26c/0x388 [ 46.888526][ T1770] device_initial_probe+0x24/0x34 [ 46.889958][ T1770] bus_probe_device+0x178/0x240 [ 46.891298][ T1770] device_add+0x71c/0xa60 [ 46.892408][ T1770] usb_new_device+0x7f0/0x1220 [ 46.893786][ T1770] hub_event+0x2148/0x3cf0 [ 46.894993][ T1770] process_one_work+0x7e8/0x156c [ 46.896381][ T1770] worker_thread+0x990/0xed8 [ 46.897616][ T1770] kthread+0x5fc/0x75c [ 46.898720][ T1770] ret_from_fork+0x10/0x20 [ 46.899933][ T1770] irq event stamp: 174344 [ 46.901335][ T1770] hardirqs last enabled at (174343): [] finish_lock_switch+0xb0/0x1c0 [ 46.904062][ T1770] hardirqs last disabled at (174344): [] el1_dbg+0x24/0x80 [ 46.906401][ T1770] softirqs last enabled at (170456): [] handle_softirqs+0xaf8/0xc88 [ 46.908973][ T1770] softirqs last disabled at (170445): [] __do_softirq+0x14/0x20 [ 46.911525][ T1770] ---[ end trace 0000000000000000 ]--- [ 46.913654][ T1770] (null): radio-mr800 - initialization failed [ 46.913756][ T1770] radio-mr800 1-1:7.255: probe with driver radio-mr800 failed with error -71 [ 46.915018][ T1770] usbhid 1-1:7.255: couldn't find an input interrupt endpoint [ 46.928042][ T1770] usb 1-1: USB disconnect, device number 12 [ 47.224616][ T1770] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 47.374610][ T1770] usb 1-1: Using ep0 maxpacket: 16 [ 47.376176][ T1770] usb 1-1: unable to get BOS descriptor or descriptor too short [ 47.376974][ T1770] usb 1-1: config 7 has an invalid interface number: 255 but max is 2 [ 47.377003][ T1770] usb 1-1: config 7 has an invalid interface number: 150 but max is 2 [ 47.377027][ T1770] usb 1-1: config 7 has an invalid interface number: 100 but max is 2 [ 47.377050][ T1770] usb 1-1: config 7 has no interface number 0 [ 47.377072][ T1770] usb 1-1: config 7 has no interface number 1 [ 47.377092][ T1770] usb 1-1: config 7 has no interface number 2 [ 47.377127][ T1770] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 47.377154][ T1770] usb 1-1: config 7 interface 255 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 47.377179][ T1770] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 47.377206][ T1770] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0xE has invalid wMaxPacketSize 0 [ 47.377230][ T1770] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0x1 has an invalid bInterval 128, changing to 11 [ 47.377257][ T1770] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 47.377283][ T1770] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0xD has invalid maxpacket 1072, setting to 64 [ 47.377310][ T1770] usb 1-1: config 7 interface 255 altsetting 4 has a duplicate endpoint with address 0xB, skipping [ 47.377335][ T1770] usb 1-1: config 7 interface 255 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 1024 [ 47.377360][ T1770] usb 1-1: config 7 interface 255 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 47.377390][ T1770] usb 1-1: config 7 interface 100 altsetting 2 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 47.377416][ T1770] usb 1-1: config 7 interface 100 altsetting 2 has a duplicate endpoint with address 0x6, skipping [ 47.377440][ T1770] usb 1-1: config 7 interface 255 has no altsetting 0 [ 47.377471][ T1770] usb 1-1: config 7 interface 150 has no altsetting 0 [ 47.377495][ T1770] usb 1-1: config 7 interface 100 has no altsetting 0 [ 47.379711][ T1770] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=5d.a6 [ 47.379744][ T1770] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.379767][ T1770] usb 1-1: Product: syz [ 47.379788][ T1770] usb 1-1: Manufacturer: syz [ 47.379808][ T1770] usb 1-1: SerialNumber: syz [ 47.590634][ T ** replaying previous printk message ** [ 47.590634][ T1770] ------------[ cut here ]------------ [ 47.590690][ T1770] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 47.591197][ T1770] WARNING: CPU: 1 PID: 1770 at drivers/usb/core/urb.c:504 usb_submit_urb+0x9e8/0x1448 [ 47.597891][ T1770] Modules linked in: executing program [ 47.599000][ T1770] CPU: 1 UID: 0 PID: 1770 Comm: kworker/1:2 Tainted: G W 6.15.0-rc7-syzkaller-gd7fa1af5b33e #0 PREEMPT [ 47.602542][ T1770] Tainted: [W]=WARN [ 47.603535][ T1770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 47.606304][ T1770] Workqueue: usb_hub_wq hub_event [ 47.607716][ T1770] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 47.609953][ T1770] pc : usb_submit_urb+0x9e8/0x1448 [ 47.611351][ T1770] lr : usb_submit_urb+0x9e8/0x1448 [ 47.612754][ T1770] sp : ffff80009f3768c0 [ 47.613998][ T1770] x29: ffff80009f376900 x28: ffff0000d9891a68 x27: ffff80008c77d9a8 [ 47.616217][ T1770] x26: ffff0000c67edc00 x25: ffff80008c77d9a0 x24: ffff0000c550ba5c [ 47.618460][ T1770] x23: ffff80008c784720 x22: dfff800000000000 x21: 0000000000000002 [ 47.620653][ T1770] x20: 0000000000000c00 x19: ffff0000c550ba00 x18: 1fffe0003386f276 [ 47.622879][ T1770] x17: 0000000000000000 x16: ffff80008ad27e48 x15: ffff700011e740c0 [ 47.625114][ T1770] x14: 1ffff00011e740c0 x13: 0000000000000004 x12: ffffffffffffffff [ 47.627384][ T1770] x11: ffff700011e740c0 x10: 0000000000ff0100 x9 : b2843552d518b900 [ 47.629701][ T1770] x8 : b2843552d518b900 x7 : 0000000000000001 x6 : 0000000000000001 [ 47.631902][ T1770] x5 : ffff80009f376218 x4 : ffff80008f415ba0 x3 : ffff800080548ef0 [ 47.634112][ T1770] x2 : 0000000000000000 x1 : 0000000100000000 x0 : 0000000000000000 [ 47.636409][ T1770] Call trace: [ 47.637293][ T1770] usb_submit_urb+0x9e8/0x1448 (P) [ 47.638762][ T1770] usb_start_wait_urb+0xe8/0x3bc [ 47.640094][ T1770] usb_bulk_msg+0x2e4/0x3e4 [ 47.641317][ T1770] amradio_set_mute+0x1a4/0x3f4 [ 47.642728][ T1770] usb_amradio_probe+0x3d4/0x700 [ 47.644070][ T1770] usb_probe_interface+0x584/0xa44 [ 47.645489][ T1770] really_probe+0x394/0x910 [ 47.646795][ T1770] __driver_probe_device+0x180/0x2d4 [ 47.648177][ T1770] driver_probe_device+0x78/0x330 [ 47.649569][ T1770] __device_attach_driver+0x290/0x4e0 [ 47.651025][ T1770] bus_for_each_drv+0x220/0x2b4 [ 47.652349][ T1770] __device_attach+0x26c/0x388 [ 47.653690][ T1770] device_initial_probe+0x24/0x34 [ 47.655140][ T1770] bus_probe_device+0x178/0x240 [ 47.656518][ T1770] device_add+0x71c/0xa60 [ 47.657679][ T1770] usb_set_configuration+0x1640/0x1bac [ 47.659241][ T1770] usb_generic_driver_probe+0x8c/0x144 [ 47.660786][ T1770] usb_probe_device+0x1a4/0x348 [ 47.662169][ T1770] really_probe+0x394/0x910 [ 47.663398][ T1770] __driver_probe_device+0x180/0x2d4 [ 47.664833][ T1770] driver_probe_device+0x78/0x330 [ 47.666231][ T1770] __device_attach_driver+0x290/0x4e0 [ 47.667696][ T1770] bus_for_each_drv+0x220/0x2b4 [ 47.669022][ T1770] __device_attach+0x26c/0x388 [ 47.670403][ T1770] device_initial_probe+0x24/0x34 [ 47.671839][ T1770] bus_probe_device+0x178/0x240 [ 47.673127][ T1770] device_add+0x71c/0xa60 [ 47.674390][ T1770] usb_new_device+0x7f0/0x1220 [ 47.675668][ T1770] hub_event+0x2148/0x3cf0 [ 47.676894][ T1770] process_one_work+0x7e8/0x156c [ 47.678238][ T1770] worker_thread+0x990/0xed8 [ 47.679436][ T1770] kthread+0x5fc/0x75c [ 47.680579][ T1770] ret_from_fork+0x10/0x20 [ 47.681831][ T1770] irq event stamp: 182460 [ 47.682994][ T1770] hardirqs last enabled at (182459): [] __console_unlock+0x70/0xc4 [ 47.685625][ T1770] hardirqs last disabled at (182460): [] el1_dbg+0x24/0x80 [ 47.688116][ T1770] softirqs last enabled at (178432): [] handle_softirqs+0xaf8/0xc88 [ 47.690857][ T1770] softirqs last disabled at (178415): [] __do_softirq+0x14/0x20 [ 47.693317][ T1770] ---[ end trace 0000000000000000 ]--- [ 47.695971][ T1770] (null): radio-mr800 - initialization failed [ 47.696075][ T1770] radio-mr800 1-1:7.255: probe with driver radio-mr800 failed with error -71 [ 47.696322][ T1770] usbhid 1-1:7.255: couldn't find an input interrupt endpoint [ 47.709711][ T1770] usb 1-1: USB disconnect, device number 13 [ 48.004565][ T1770] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 48.154669][ T1770] usb 1-1: Using ep0 maxpacket: 16 [ 48.158039][ T1770] usb 1-1: unable to get BOS descriptor or descriptor too short [ 48.159010][ T1770] usb 1-1: config 7 has an invalid interface number: 255 but max is 2 [ 48.159049][ T1770] usb 1-1: config 7 has an invalid interface number: 150 but max is 2 [ 48.159073][ T1770] usb 1-1: config 7 has an invalid interface number: 100 but max is 2 [ 48.159096][ T1770] usb 1-1: config 7 has no interface number 0 [ 48.159118][ T1770] usb 1-1: config 7 has no interface number 1 [ 48.159139][ T1770] usb 1-1: config 7 has no interface number 2 [ 48.159170][ T1770] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 48.159202][ T1770] usb 1-1: config 7 interface 255 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 48.159227][ T1770] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 48.159254][ T1770] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0xE has invalid wMaxPacketSize 0 [ 48.159279][ T1770] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0x1 has an invalid bInterval 128, changing to 11 [ 48.159306][ T1770] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 48.159332][ T1770] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0xD has invalid maxpacket 1072, setting to 64 [ 48.159358][ T1770] usb 1-1: config 7 interface 255 altsetting 4 has a duplicate endpoint with address 0xB, skipping [ 48.159383][ T1770] usb 1-1: config 7 interface 255 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 1024 [ 48.159408][ T1770] usb 1-1: config 7 interface 255 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 48.159435][ T1770] usb 1-1: config 7 interface 100 altsetting 2 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 48.159461][ T1770] usb 1-1: config 7 interface 100 altsetting 2 has a duplicate endpoint with address 0x6, skipping [ 48.159494][ T1770] usb 1-1: config 7 interface 255 has no altsetting 0 [ 48.159521][ T1770] usb 1-1: config 7 interface 150 has no altsetting 0 [ 48.159543][ T1770] usb 1-1: config 7 interface 100 has no altsetting 0 [ 48.160994][ T1770] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=5d.a6 [ 48.161024][ T1770] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.161047][ T1770] usb 1-1: Product: syz [ 48.161067][ T1770] usb 1-1: Manufacturer: syz [ 48.161087][ T1770] usb 1-1: SerialNumber: syz [ 48.371203][ T ** replaying previous printk message ** [ 48.371203][ T1770] ------------[ cut here ]------------ [ 48.371266][ T1770] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 48.371775][ T1770] WARNING: CPU: 1 PID: 1770 at drivers/usb/core/urb.c:504 usb_submit_urb+0x9e8/0x1448 [ 48.378703][ T1770] Modules linked in: executing program [ 48.379784][ T1770] CPU: 1 UID: 0 PID: 1770 Comm: kworker/1:2 Tainted: G W 6.15.0-rc7-syzkaller-gd7fa1af5b33e #0 PREEMPT [ 48.383230][ T1770] Tainted: [W]=WARN [ 48.384321][ T1770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 48.387166][ T1770] Workqueue: usb_hub_wq hub_event [ 48.388611][ T1770] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 48.390798][ T1770] pc : usb_submit_urb+0x9e8/0x1448 [ 48.392172][ T1770] lr : usb_submit_urb+0x9e8/0x1448 [ 48.393528][ T1770] sp : ffff80009f3768c0 [ 48.394742][ T1770] x29: ffff80009f376900 x28: ffff0000d9894a68 x27: ffff80008c77d9a8 [ 48.396888][ T1770] x26: ffff0000c54e7180 x25: ffff80008c77d9a0 x24: ffff0000c683855c [ 48.399176][ T1770] x23: ffff80008c784720 x22: dfff800000000000 x21: 0000000000000002 [ 48.401340][ T1770] x20: 0000000000000c00 x19: ffff0000c6838500 x18: 1fffe0003386f276 [ 48.403633][ T1770] x17: 0000000000000000 x16: ffff80008adbe9e4 x15: 0000000000000001 [ 48.405927][ T1770] x14: 1fffe0003386f2e2 x13: 0000000000000000 x12: 0000000000000000 [ 48.408067][ T1770] x11: ffff60003386f2e3 x10: 0000000000ff0100 x9 : b2843552d518b900 [ 48.410314][ T1770] x8 : b2843552d518b900 x7 : 0000000000000001 x6 : 0000000000000001 [ 48.412545][ T1770] x5 : ffff80009f376218 x4 : ffff80008f415ba0 x3 : ffff8000807b4b68 [ 48.414869][ T1770] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000 [ 48.417050][ T1770] Call trace: [ 48.417937][ T1770] usb_submit_urb+0x9e8/0x1448 (P) [ 48.419416][ T1770] usb_start_wait_urb+0xe8/0x3bc [ 48.420800][ T1770] usb_bulk_msg+0x2e4/0x3e4 [ 48.421972][ T1770] amradio_set_mute+0x1a4/0x3f4 [ 48.423358][ T1770] usb_amradio_probe+0x3d4/0x700 [ 48.424726][ T1770] usb_probe_interface+0x584/0xa44 [ 48.426096][ T1770] really_probe+0x394/0x910 [ 48.427336][ T1770] __driver_probe_device+0x180/0x2d4 [ 48.428737][ T1770] driver_probe_device+0x78/0x330 [ 48.430104][ T1770] __device_attach_driver+0x290/0x4e0 [ 48.431603][ T1770] bus_for_each_drv+0x220/0x2b4 [ 48.432912][ T1770] __device_attach+0x26c/0x388 [ 48.434226][ T1770] device_initial_probe+0x24/0x34 [ 48.435663][ T1770] bus_probe_device+0x178/0x240 [ 48.436935][ T1770] device_add+0x71c/0xa60 [ 48.438124][ T1770] usb_set_configuration+0x1640/0x1bac [ 48.439714][ T1770] usb_generic_driver_probe+0x8c/0x144 [ 48.441217][ T1770] usb_probe_device+0x1a4/0x348 [ 48.442596][ T1770] really_probe+0x394/0x910 [ 48.443795][ T1770] __driver_probe_device+0x180/0x2d4 [ 48.445172][ T1770] driver_probe_device+0x78/0x330 [ 48.446490][ T1770] __device_attach_driver+0x290/0x4e0 [ 48.447967][ T1770] bus_for_each_drv+0x220/0x2b4 [ 48.449310][ T1770] __device_attach+0x26c/0x388 [ 48.450679][ T1770] device_initial_probe+0x24/0x34 [ 48.452094][ T1770] bus_probe_device+0x178/0x240 [ 48.453343][ T1770] device_add+0x71c/0xa60 [ 48.454537][ T1770] usb_new_device+0x7f0/0x1220 [ 48.456086][ T1770] hub_event+0x2148/0x3cf0 [ 48.457312][ T1770] process_one_work+0x7e8/0x156c [ 48.458695][ T1770] worker_thread+0x990/0xed8 [ 48.459958][ T1770] kthread+0x5fc/0x75c [ 48.461040][ T1770] ret_from_fork+0x10/0x20 [ 48.462252][ T1770] irq event stamp: 190000 [ 48.463493][ T1770] hardirqs last enabled at (189999): [] __console_unlock+0x70/0xc4 [ 48.466153][ T1770] hardirqs last disabled at (190000): [] el1_dbg+0x24/0x80 [ 48.468609][ T1770] softirqs last enabled at (186146): [] handle_softirqs+0xaf8/0xc88 [ 48.471274][ T1770] softirqs last disabled at (186131): [] __do_softirq+0x14/0x20 [ 48.473868][ T1770] ---[ end trace 0000000000000000 ]--- [ 48.476729][ T1770] (null): radio-mr800 - initialization failed [ 48.476838][ T1770] radio-mr800 1-1:7.255: probe with driver radio-mr800 failed with error -71 [ 48.477088][ T1770] usbhid 1-1:7.255: couldn't find an input interrupt endpoint [ 48.487810][ T1770] usb 1-1: USB disconnect, device number 14 [ 48.784594][ T1770] usb 1-1: new high-speed USB device number 15 using dummy_hcd