usb 1-1: Manufacturer: syz usb 1-1: SerialNumber: syz usb 1-1: config 0 descriptor?? ------------[ cut here ]------------ usb 1-1: BOGUS urb xfer, pipe 3 != type 1 WARNING: CPU: 0 PID: 4020 at drivers/usb/core/urb.c:505 usb_submit_urb+0xa44/0x1588 drivers/usb/core/urb.c:504 Modules linked in: CPU: 0 PID: 4020 Comm: kworker/0:3 Not tainted 6.1.64-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 Workqueue: usb_hub_wq hub_event pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : usb_submit_urb+0xa44/0x1588 drivers/usb/core/urb.c:504 lr : usb_submit_urb+0xa44/0x1588 drivers/usb/core/urb.c:504 sp : ffff80001dc56980 x29: ffff80001dc569c0 x28: 0000000000000003 x27: ffff80001355fbac x26: ffff0000d47da900 x25: ffff0000c4682000 x24: 00000000000000a5 x23: ffff800013566420 x22: dfff800000000000 x21: 0000000000000003 x20: 0000000000000a20 x19: ffff0000c087a000 x18: ffff80001dc55d80 x17: 0000000000000000 x16: ffff8000121392fc x15: 0000000000000000 x14: 00000000ffffffff x13: 0000000000000001 x12: 0000000000000001 x11: 0000000000ff0100 x10: 0000000000000000 x9 : c54f10d3ad71e900 x8 : c54f10d3ad71e900 x7 : 0000000000000001 x6 : 0000000000000001 x5 : ffff80001dc56278 x4 : ffff8000158f2a20 x3 : ffff8000085890a0 x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000 Call trace: usb_submit_urb+0xa44/0x1588 drivers/usb/core/urb.c:504 ar5523_submit_rx_cmd+0x170/0x28c drivers/net/wireless/ath/ar5523/ar5523.c:212 ar5523_probe+0x91c/0x1a9c drivers/net/wireless/ath/ar5523/ar5523.c:1652 usb_probe_interface+0x500/0x984 drivers/usb/core/driver.c:396 really_probe+0x394/0xacc drivers/base/dd.c:639 __driver_probe_device+0x194/0x3b4 drivers/base/dd.c:785 driver_probe_device+0x78/0x330 drivers/base/dd.c:815 __device_attach_driver+0x2a8/0x4f4 drivers/base/dd.c:943 bus_for_each_drv+0x158/0x1e0 drivers/base/bus.c:427 __device_attach+0x2f0/0x480 drivers/base/dd.c:1015 device_initial_probe+0x24/0x34 drivers/base/dd.c:1064 bus_probe_device+0xbc/0x1c8 drivers/base/bus.c:487 device_add+0xae0/0xef4 drivers/base/core.c:3664 usb_set_configuration+0x15c0/0x1b40 drivers/usb/core/message.c:2165 usb_generic_driver_probe+0x8c/0x148 drivers/usb/core/generic.c:238 usb_probe_device+0x120/0x25c drivers/usb/core/driver.c:293 really_probe+0x394/0xacc drivers/base/dd.c:639 __driver_probe_device+0x194/0x3b4 drivers/base/dd.c:785 driver_probe_device+0x78/0x330 drivers/base/dd.c:815 __device_attach_driver+0x2a8/0x4f4 drivers/base/dd.c:943 bus_for_each_drv+0x158/0x1e0 drivers/base/bus.c:427 __device_attach+0x2f0/0x480 drivers/base/dd.c:1015 device_initial_probe+0x24/0x34 drivers/base/dd.c:1064 bus_probe_device+0xbc/0x1c8 drivers/base/bus.c:487 device_add+0xae0/0xef4 drivers/base/core.c:3664 usb_new_device+0x904/0x142c drivers/usb/core/hub.c:2583 hub_port_connect drivers/usb/core/hub.c:5434 [inline] hub_port_connect_change drivers/usb/core/hub.c:5574 [inline] port_event drivers/usb/core/hub.c:5730 [inline] hub_event+0x23f4/0x4360 drivers/usb/core/hub.c:5812 process_one_work+0x7ac/0x1404 kernel/workqueue.c:2292 worker_thread+0x8e4/0xfec kernel/workqueue.c:2439 kthread+0x250/0x2d8 kernel/kthread.c:376 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:864 irq event stamp: 8394 hardirqs last enabled at (8393): [<ffff80000834308c>] __up_console_sem+0xb4/0x100 kernel/printk/printk.c:261 hardirqs last disabled at (8394): [<ffff800012134fb4>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405 softirqs last enabled at (5758): [<ffff800010af65f4>] local_bh_enable+0x10/0x34 include/linux/bottom_half.h:32 softirqs last disabled at (5756): [<ffff800010af65c0>] local_bh_disable+0x10/0x34 include/linux/bottom_half.h:19 ---[ end trace 0000000000000000 ]--- usb 1-1: error -22 when submitting rx urb usb 1-1: Failed to submit rx cmd ar5523: probe of 1-1:0.0 failed with error -22