ci2 starts bisection 2023-11-18 14:46:31.925404816 +0000 UTC m=+419459.033435549 bisecting fixing commit since ca1c9012c941ab1520851938d5f695f5a4d23634 building syzkaller on 62df2017e3b1edd786a4c737bd4ccba2b4581d88 ensuring issue is reproducible on original commit ca1c9012c941ab1520851938d5f695f5a4d23634 testing commit ca1c9012c941ab1520851938d5f695f5a4d23634 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 2147f2e28a1dcc9641f98f21e09d872891ad7b6fe19762a74ae6363a88e0d124 all runs: crashed: WARNING in ar5523_submit_rx_cmd/usb_submit_urb representative crash: WARNING in ar5523_submit_rx_cmd/usb_submit_urb, types: [WARNING] check whether we can drop unnecessary instrumentation disabling configs for [UBSAN KASAN LOCKDEP ATOMIC_SLEEP HANG LEAK], they are not needed testing commit ca1c9012c941ab1520851938d5f695f5a4d23634 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 82ec289e3134c882fe5c9d5027fd8afd130f51207206fc86b5f711954b301df9 all runs: crashed: WARNING in ar5523_submit_rx_cmd/usb_submit_urb representative crash: WARNING in ar5523_submit_rx_cmd/usb_submit_urb, types: [WARNING] the bug reproduces without the instrumentation disabling configs for [HANG LEAK UBSAN KASAN LOCKDEP ATOMIC_SLEEP], they are not needed kconfig minimization: base=7498 full=9689 leaves diff=1935 split chunks (needed=false): <1935> split chunk #0 of len 1935 into 5 parts testing without sub-chunk 1/5 disabling configs for [KASAN LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN], they are not needed testing commit ca1c9012c941ab1520851938d5f695f5a4d23634 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: cc0df275cea72faf5b39f096e9f6c347f1ea7dac0be99d34e08dd43622077b23 all runs: OK false negative chance: 0.000 testing without sub-chunk 2/5 disabling configs for [LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN KASAN], they are not needed testing commit ca1c9012c941ab1520851938d5f695f5a4d23634 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: faf40157d558a05bc8294fc1cbbda158d6e0b7e6818e8a962eb03655a03a2a7e all runs: boot failed: can't ssh into the instance unable to determine the verdict: 0 good runs (wanted 5), for bad wanted 5 in total, got 0 testing without sub-chunk 3/5 disabling configs for [HANG LEAK UBSAN KASAN LOCKDEP ATOMIC_SLEEP], they are not needed testing commit ca1c9012c941ab1520851938d5f695f5a4d23634 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 1887271ce75e7a75f8d0b97b04548ddf724d82b8be078c11ef393b917c32d379 all runs: crashed: WARNING in ar5523_submit_rx_cmd/usb_submit_urb representative crash: WARNING in ar5523_submit_rx_cmd/usb_submit_urb, types: [WARNING] the chunk can be dropped testing without sub-chunk 4/5 disabling configs for [HANG LEAK UBSAN KASAN LOCKDEP ATOMIC_SLEEP], they are not needed testing commit ca1c9012c941ab1520851938d5f695f5a4d23634 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: b11425a788785ab2cc66a59e5234afdfab543a3413ad0b2e80dd8c6f47caac46 all runs: crashed: WARNING in ar5523_submit_rx_cmd/usb_submit_urb representative crash: WARNING in ar5523_submit_rx_cmd/usb_submit_urb, types: [WARNING] the chunk can be dropped testing without sub-chunk 5/5 disabling configs for [UBSAN KASAN LOCKDEP ATOMIC_SLEEP HANG LEAK], they are not needed testing commit ca1c9012c941ab1520851938d5f695f5a4d23634 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: e915edd4f9245efe05afac235ba5751ee9f2f0e28254f08b1a1d51dc4ae7619c all runs: OK false negative chance: 0.000 minimized to 1161 configs; suspects: [6LOWPAN 6LOWPAN_GHC_EXT_HDR_DEST 6LOWPAN_GHC_EXT_HDR_FRAG 6LOWPAN_GHC_EXT_HDR_HOP 6LOWPAN_GHC_EXT_HDR_ROUTE 6LOWPAN_GHC_ICMPV6 6LOWPAN_GHC_UDP 6LOWPAN_NHC 6LOWPAN_NHC_DEST 6LOWPAN_NHC_FRAGMENT 6LOWPAN_NHC_HOP 6LOWPAN_NHC_IPV6 6LOWPAN_NHC_MOBILITY 6LOWPAN_NHC_ROUTING 6LOWPAN_NHC_UDP 6PACK 842_COMPRESS 842_DECOMPRESS 9P_FSCACHE 9P_FS_POSIX_ACL 9P_FS_SECURITY ACORN_PARTITION ACORN_PARTITION_ADFS ACORN_PARTITION_CUMANA ACORN_PARTITION_EESOX ACORN_PARTITION_ICS ACORN_PARTITION_POWERTEC ACORN_PARTITION_RISCIX ACPI_DOCK ACPI_VIDEO ADFS_FS AFFS_FS AFS_FS AFS_FSCACHE AF_KCM AF_RXRPC AF_RXRPC_IPV6 AIX_PARTITION AMIGA_PARTITION ANDROID_BINDERFS ANDROID_BINDER_IPC ANON_VMA_NAME AR5523 ASM_MODVERSIONS ASYNC_CORE ASYNC_MEMCPY ASYNC_PQ ASYNC_RAID6_RECOV ASYNC_TX_DMA ASYNC_XOR ATARI_PARTITION ATA_GENERIC ATA_OVER_ETH ATA_PIIX ATH10K ATH10K_CE ATH10K_PCI ATH10K_SNOC ATH10K_USB ATH11K ATH11K_AHB ATH11K_PCI ATH6KL ATH6KL_USB ATH9K ATH9K_AHB ATH9K_BTCOEX_SUPPORT ATH9K_CHANNEL_CONTEXT ATH9K_COMMON ATH9K_COMMON_DEBUG ATH9K_DEBUGFS ATH9K_DYNACK ATH9K_HTC ATH9K_HTC_DEBUGFS ATH9K_HW ATH9K_PCI ATH9K_PCOEM ATH9K_RFKILL ATH_COMMON ATM ATM_BR2684 ATM_CLIP ATM_DRIVERS ATM_LANE ATM_MPOA ATM_TCP AX25 AX25_DAMA_SLAVE BAREUDP BATMAN_ADV BATMAN_ADV_BATMAN_V BATMAN_ADV_BLA BATMAN_ADV_DAT BATMAN_ADV_MCAST BATMAN_ADV_NC BCACHE BCMA BCMA_HOST_PCI_POSSIBLE BEFS_FS BFQ_CGROUP_DEBUG BFQ_GROUP_IOSCHED BFS_FS BIG_KEYS BINFMT_MISC BLK_CGROUP_IOCOST BLK_CGROUP_IOLATENCY BLK_CGROUP_RWSTAT BLK_DEBUG_FS_ZONED BLK_DEV_NULL_BLK BLK_DEV_NULL_BLK_FAULT_INJECTION BLK_DEV_RAM BLK_DEV_RNBD BLK_DEV_RNBD_CLIENT BLK_DEV_SR BLK_DEV_THROTTLING BLK_DEV_ZONED BLK_ICQ BLK_INLINE_ENCRYPTION BLK_INLINE_ENCRYPTION_FALLBACK BLK_MQ_RDMA BLK_RQ_ALLOC_TIME BLK_WBT BLK_WBT_MQ BONDING BPF_JIT_ALWAYS_ON BPF_STREAM_PARSER BPQETHER BRIDGE_CFM BRIDGE_EBT_802_3 BRIDGE_EBT_AMONG BRIDGE_EBT_ARP BRIDGE_EBT_ARPREPLY BRIDGE_EBT_BROUTE BRIDGE_EBT_DNAT BRIDGE_EBT_IP BRIDGE_EBT_IP6 BRIDGE_EBT_LIMIT BRIDGE_EBT_LOG BRIDGE_EBT_MARK BRIDGE_EBT_MARK_T BRIDGE_EBT_NFLOG BRIDGE_EBT_PKTTYPE BRIDGE_EBT_REDIRECT BRIDGE_EBT_SNAT BRIDGE_EBT_STP BRIDGE_EBT_T_FILTER BRIDGE_EBT_T_NAT BRIDGE_EBT_VLAN BRIDGE_MRP BRIDGE_NF_EBTABLES BSD_DISKLABEL BTRFS_ASSERT BTRFS_FS_REF_VERIFY BT_6LOWPAN BT_ATH3K BT_BNEP BT_BNEP_MC_FILTER BT_BNEP_PROTO_FILTER BT_CMTP BT_HCIBCM203X BT_HCIBFUSB BT_HCIBPA10X BT_HCIBTUSB_MTK BT_HCIUART_3WIRE BT_HCIUART_AG6XX BT_HCIUART_BCSP BT_HCIVHCI BT_HS BT_LE BT_MSFTEXT BT_MTK BT_RFCOMM BT_RFCOMM_TTY CACHEFILES CAIF CAIF_DEBUG CAIF_DRIVERS CAIF_NETDEV CAIF_TTY CAIF_USB CAIF_VIRTIO CAN_8DEV_USB CAN_EMS_USB CAN_GS_USB CAN_IFI_CANFD CAN_ISOTP CAN_J1939 CAN_KVASER_USB CAN_MCBA_USB CAN_PEAK_USB CAN_SLCAN CAN_VCAN CAN_VXCAN CAPI_TRACE CARL9170 CARL9170_HWRNG CARL9170_LEDS CARL9170_WPC CC_HAS_ZERO_CALL_USED_REGS CDROM CEC_CORE CEC_NOTIFIER CEPH_FS CEPH_FSCACHE CEPH_FS_POSIX_ACL CEPH_LIB CEPH_LIB_USE_DNS_RESOLVER CFG80211 CFG80211_CRDA_SUPPORT CFG80211_DEBUGFS CFG80211_DEFAULT_PS CFG80211_REQUIRE_SIGNED_REGDB CFG80211_USE_KERNEL_REGDB_KEYS CFG80211_WEXT CFS_BANDWIDTH CGROUP_NET_CLASSID CGROUP_NET_PRIO CGROUP_RDMA CHARGER_BQ24190 CHARGER_ISP1704 CHECKPOINT_RESTORE CHECK_SIGNATURE CHR_DEV_SG CHR_DEV_ST CIFS CIFS_ALLOW_INSECURE_LEGACY CIFS_DEBUG CIFS_DFS_UPCALL CIFS_FSCACHE CIFS_POSIX CIFS_SMB_DIRECT CIFS_SWN_UPCALL CIFS_UPCALL CIFS_XATTR CLS_U32_MARK CLS_U32_PERF CMDLINE_PARTITION COMEDI COMEDI_DT9812 COMEDI_NI_USB6501 COMEDI_USBDUX COMEDI_USBDUXFAST COMEDI_USBDUXSIGMA COMEDI_USB_DRIVERS COMEDI_VMK80XX COMPAT_NETLINK_MESSAGES CONNECTOR COUNTER CPU_FREQ_DEFAULT_GOV_USERSPACE CRAMFS CRAMFS_BLOCKDEV CRAMFS_MTD CRC4 CRYPTO_842 CRYPTO_ADIANTUM CRYPTO_AEGIS128 CRYPTO_AES_ARM64 CRYPTO_AES_TI CRYPTO_ANUBIS CRYPTO_ARC4 CRYPTO_ARCH_HAVE_LIB_POLY1305 CRYPTO_ARIA CRYPTO_BLOWFISH CRYPTO_BLOWFISH_COMMON CRYPTO_CAMELLIA CRYPTO_CFB CRYPTO_CHACHA20 CRYPTO_CHACHA20POLY1305 CRYPTO_CRC32 CRYPTO_CTS CRYPTO_DEV_CCP CRYPTO_DEV_CCP_DD CRYPTO_DEV_VIRTIO CRYPTO_DRBG_CTR CRYPTO_DRBG_HASH CRYPTO_ECRDSA CRYPTO_ESSIV CRYPTO_FCRYPT CRYPTO_HCTR2 CRYPTO_KDF800108_CTR CRYPTO_KEYWRAP CRYPTO_KHAZAD CRYPTO_LIB_ARC4 CRYPTO_LIB_CHACHA CRYPTO_LIB_CHACHA20POLY1305 CRYPTO_LIB_CURVE25519 CRYPTO_LIB_POLY1305 CRYPTO_LIB_POLY1305_GENERIC CRYPTO_LRW CRYPTO_LZ4 CRYPTO_LZ4HC CRYPTO_LZO CRYPTO_NHPOLY1305 CRYPTO_OFB CRYPTO_PCBC CRYPTO_PCRYPT CRYPTO_POLY1305 CRYPTO_POLY1305_NEON CRYPTO_POLYVAL CRYPTO_RMD160 CRYPTO_SEED CRYPTO_SEQIV CRYPTO_SM2 CRYPTO_SM4_ARM64_CE CRYPTO_SM4_ARM64_CE_BLK CRYPTO_SM4_ARM64_NEON_BLK CRYPTO_STREEBOG CRYPTO_TEA CRYPTO_TWOFISH CRYPTO_TWOFISH_COMMON CRYPTO_USER CRYPTO_USER_API_AEAD CRYPTO_USER_API_HASH CRYPTO_USER_API_SKCIPHER CRYPTO_VMAC CRYPTO_WP512 CRYPTO_XCBC CRYPTO_XCTR CRYPTO_ZSTD CYPRESS_FIRMWARE DAMON DAMON_DBGFS DAMON_PADDR DAMON_RECLAIM DAMON_VADDR DAX DCB DEFAULT_CUBIC DEFAULT_PFIFO_FAST DEVICE_MIGRATION DEVICE_PRIVATE DLM DLN2_ADC DMABUF_HEAPS DMABUF_HEAPS_CMA DMABUF_HEAPS_SYSTEM DMABUF_MOVE_NOTIFY DM_AUDIT DM_BIO_PRISON DM_BUFIO DM_CACHE DM_CACHE_SMQ DM_CLONE DM_CRYPT DM_FLAKEY DM_INTEGRITY DM_MULTIPATH DM_MULTIPATH_QL DM_MULTIPATH_ST DM_PERSISTENT_DATA DM_RAID DM_SNAPSHOT DM_THIN_PROVISIONING DM_UEVENT DM_VERITY DM_VERITY_FEC DM_WRITECACHE DM_ZONED DRAGONRISE_FF DRM DRM_ANALOGIX_DP DRM_BOCHS DRM_BRIDGE DRM_CDNS_MHDP8546 DRM_CDNS_MHDP8546_J721E DRM_CIRRUS_QEMU DRM_DEBUG_MM DRM_DISPLAY_CONNECTOR DRM_DISPLAY_DP_HELPER DRM_DISPLAY_HDCP_HELPER DRM_DISPLAY_HDMI_HELPER DRM_DISPLAY_HELPER DRM_DP_AUX_BUS DRM_DW_HDMI DRM_DW_HDMI_AHB_AUDIO DRM_DW_HDMI_CEC DRM_DW_HDMI_I2S_AUDIO DRM_DW_MIPI_DSI DRM_ETNAVIV DRM_ETNAVIV_THERMAL DRM_EXYNOS DRM_EXYNOS5433_DECON DRM_EXYNOS7_DECON DRM_EXYNOS_DSI DRM_EXYNOS_HDMI DRM_EXYNOS_MIC DRM_FBDEV_EMULATION DRM_GEM_DMA_HELPER DRM_GEM_SHMEM_HELPER DRM_HDLCD DRM_HISI_HIBMC DRM_HISI_KIRIN DRM_I2C_ADV7511 DRM_I2C_ADV7511_AUDIO DRM_I2C_ADV7511_CEC DRM_I2C_CH7006 DRM_I2C_NXP_TDA998X DRM_I2C_SIL164 DRM_IMX_DCSS DRM_KMS_HELPER DRM_KOMEDA DRM_LEGACY DRM_LIMA DRM_LONTIUM_LT8912B DRM_LONTIUM_LT9611 DRM_LONTIUM_LT9611UXC DRM_MALI_DISPLAY DRM_MEDIATEK DRM_MEDIATEK_HDMI DRM_MESON DRM_MESON_DW_HDMI DRM_MIPI_DSI DRM_MSM DRM_MSM_DP DRM_MSM_DPU DRM_MSM_DSI DRM_MSM_DSI_10NM_PHY DRM_MSM_DSI_14NM_PHY DRM_MSM_DSI_20NM_PHY DRM_MSM_DSI_28NM_8960_PHY DRM_MSM_DSI_28NM_PHY DRM_MSM_DSI_7NM_PHY DRM_MSM_GPU_STATE DRM_MSM_HDMI DRM_MSM_HDMI_HDCP DRM_MSM_MDP4 DRM_MSM_MDP5 DRM_MSM_MDSS DRM_MXS DRM_MXSFB DRM_NOMODESET DRM_NOUVEAU DRM_NOUVEAU_BACKLIGHT DRM_NWL_MIPI_DSI DRM_PANEL DRM_PANEL_BOE_TV101WUM_NL6 DRM_PANEL_BRIDGE DRM_PANEL_EDP DRM_PANEL_LVDS DRM_PANEL_MANTIX_MLAF057WE51 DRM_PANEL_RAYDIUM_RM67191 DRM_PANEL_SIMPLE DRM_PANEL_SITRONIX_ST7703 DRM_PANEL_TRULY_NT35597_WQXGA DRM_PANFROST DRM_PARADE_PS8640 DRM_PL111 DRM_RCAR_CMM DRM_RCAR_DU DRM_RCAR_DW_HDMI DRM_RCAR_LVDS DRM_RCAR_MIPI_DSI DRM_RCAR_USE_CMM DRM_RCAR_USE_LVDS DRM_RCAR_USE_MIPI_DSI DRM_RCAR_VSP DRM_RCAR_WRITEBACK DRM_SCHED DRM_SII902X DRM_SIMPLEDRM DRM_SIMPLE_BRIDGE DRM_SUN4I DRM_SUN6I_DSI DRM_SUN8I_DW_HDMI DRM_SUN8I_MIXER DRM_SUN8I_TCON_TOP DRM_TEGRA DRM_THINE_THC63LVD1024 DRM_TIDSS DRM_TI_SN65DSI86 DRM_TTM DRM_TTM_HELPER DRM_UDL DRM_V3D DRM_VC4 DRM_VGEM DRM_VIRTIO_GPU DRM_VKMS DRM_VRAM_HELPER DUMMY DVB_AF9013 DVB_AF9033 DVB_AS102 DVB_AS102_FE DVB_B2C2_FLEXCOP DVB_B2C2_FLEXCOP_USB DVB_DIB3000MB DVB_DIB3000MC DVB_EC100 DVB_GP8PSK_FE DVB_RTL2830 DVB_RTL2832 DVB_RTL2832_SDR DVB_TEST_DRIVERS DVB_TTUSB_BUDGET DVB_TTUSB_DEC DVB_USB DVB_USB_A800 DVB_USB_AF9005 DVB_USB_AF9005_REMOTE DVB_USB_AF9015 DVB_USB_AF9035 DVB_USB_ANYSEE DVB_USB_AU6610 DVB_USB_AZ6007 DVB_USB_AZ6027 DVB_USB_CE6230 DVB_USB_CINERGY_T2 DVB_USB_CXUSB DVB_USB_DIB0700 DVB_USB_DIB3000MC DVB_USB_DIBUSB_MB DVB_USB_DIBUSB_MC DVB_USB_DIGITV DVB_USB_DTT200U DVB_USB_DTV5100 DVB_USB_DVBSKY DVB_USB_DW2102 DVB_USB_EC168 DVB_USB_GL861 DVB_USB_GP8PSK DVB_USB_LME2510 DVB_USB_M920X DVB_USB_MXL111SF DVB_USB_NOVA_T_USB2 DVB_USB_OPERA1 DVB_USB_PCTV452E DVB_USB_RTL28XXU DVB_USB_TECHNISAT_USB2 DVB_USB_TTUSB2 DVB_USB_UMT_010 DVB_USB_V2 DVB_USB_VP702X DVB_USB_VP7045 DVB_USB_ZD1301 DVB_VIDTV DVB_ZL10353 E100 ECRYPT_FS ECRYPT_FS_MESSAGING EEPROM_93CX6 EFS_FS ENCRYPTED_KEYS EQUALIZER EROFS_FS EROFS_FS_POSIX_ACL EROFS_FS_SECURITY EROFS_FS_XATTR EROFS_FS_ZIP EVM EVM_ADD_XATTRS EVM_ATTR_FSUUID EXFAT_FS EXPORTFS_BLOCK_OPS EXT3_FS_POSIX_ACL EXT3_FS_SECURITY EXT4_FS_SECURITY F2FS_CHECK_FS F2FS_FAULT_INJECTION F2FS_FS F2FS_FS_COMPRESSION F2FS_FS_LZ4 F2FS_FS_LZ4HC F2FS_FS_LZO F2FS_FS_LZORLE F2FS_FS_POSIX_ACL F2FS_FS_SECURITY F2FS_FS_XATTR F2FS_FS_ZSTD F2FS_STAT_FS FB_DEFERRED_IO FB_SYS_COPYAREA FB_SYS_FILLRECT FB_SYS_FOPS FB_SYS_IMAGEBLIT FB_TILEBLITTING FB_VIRTUAL FDDI FIB_RULES FIREWIRE FIREWIRE_NET FIREWIRE_OHCI FIREWIRE_SBP2 FRAMEBUFFER_CONSOLE_ROTATION FRONTSWAP FSCACHE FS_DAX FS_DAX_PMD FS_ENCRYPTION FS_ENCRYPTION_ALGS FS_VERITY FS_VERITY_BUILTIN_SIGNATURES FTL FW_LOADER_COMPRESS FW_LOADER_USER_HELPER_FALLBACK GACT_PROB GET_FREE_REGION GFS2_FS GFS2_FS_LOCKING_DLM GOOGLE_COREBOOT_TABLE GOOGLE_FIRMWARE GOOGLE_MEMCONSOLE GOOGLE_MEMCONSOLE_COREBOOT GOOGLE_VPD GPIO_DLN2 GPIO_VIPERBOARD GREENASIA_FF GREYBUS GREYBUS_BRIDGED_PHY GREYBUS_ES2 GREYBUS_HID GREYBUS_USB GTP GVE HAMRADIO HAVE_ARCH_USERFAULTFD_MINOR HAVE_IMA_KEXEC HDLC HDLC_CISCO HDLC_FR HDLC_PPP HDLC_RAW HDLC_RAW_ETH HDLC_X25 HDMI HFSPLUS_FS HFS_FS HIDRAW HID_ACCUTOUCH HID_ACRUX HID_ACRUX_FF HID_ALPS HID_APPLEIR HID_ASUS HID_AUREAL HID_BATTERY_STRENGTH HID_BETOP_FF HID_CMEDIA HID_CORSAIR HID_CP2112 HID_DRAGONRISE HID_ELECOM HID_ELO HID_EMS_FF HID_GEMBIRD HID_GFRM HID_GREENASIA HID_GT683R HID_GYRATION HID_HOLTEK HID_ICADE HID_KEYTOUCH HID_KYE HID_LCPOWER HID_LED HID_LENOVO HID_LOGITECH_DJ HID_LOGITECH_HIDPP HID_MAGICMOUSE HID_MAYFLASH HID_NTI HID_NTRIG HID_ORTEK HID_PENMOUNT HID_PETALYNX HID_PICOLCD HID_PICOLCD_BACKLIGHT HID_PICOLCD_CIR HID_PICOLCD_FB HID_PICOLCD_LCD HID_PICOLCD_LEDS HID_PID HID_PLANTRONICS HID_PRIMAX HID_PRODIKEYS HID_RETRODE HID_RMI HID_ROCCAT HID_SAITEK HID_SAMSUNG HID_SENSOR_ACCEL_3D HID_SENSOR_ALS HID_SENSOR_CUSTOM_SENSOR HID_SENSOR_DEVICE_ROTATION HID_SENSOR_GYRO_3D HID_SENSOR_HUB HID_SENSOR_HUMIDITY HID_SENSOR_IIO_COMMON HID_SENSOR_IIO_TRIGGER HID_SENSOR_INCLINOMETER_3D HID_SENSOR_MAGNETOMETER_3D HID_SENSOR_PRESS HID_SENSOR_PROX HID_SENSOR_TEMP HID_SPEEDLINK HID_STEELSERIES HID_SUNPLUS HID_THINGM HID_THRUSTMASTER HID_TIVO HID_TOPSEED HID_TWINHAN HID_UCLOGIC HID_UDRAW_PS3 HID_WACOM HID_WALTOP HID_WIIMOTE HID_XINMO HID_ZEROPLUS HID_ZYDACRON HMM_MIRROR HOLTEK_FF HOTPLUG_PCI_PCIE HPFS_FS I2C_DIOLAN_U2C I2C_DLN2 I2C_MUX_REG I2C_ROBOTFUZZ_OSIF I2C_SI4713 I2C_SLAVE_EEPROM I2C_TINY_USB I2C_VIPERBOARD IEEE802154 IEEE802154_6LOWPAN IEEE802154_ATUSB IEEE802154_DRIVERS IEEE802154_HWSIM IEEE802154_NL802154_EXPERIMENTAL IEEE802154_SOCKET IFB IMA IMA_APPRAISE IMA_APPRAISE_MODSIG IMA_DEFAULT_HASH_SHA256 IMA_LSM_RULES IMA_MEASURE_ASYMMETRIC_KEYS IMA_NG_TEMPLATE IMA_QUEUE_EARLY_BOOT_KEYS IMA_READ_POLICY IMA_WRITE_POLICY INET6_AH INET6_ESP INET6_ESPINTCP INET6_ESP_OFFLOAD INET6_IPCOMP INET6_TUNNEL INET6_XFRM_TUNNEL INET_AH INET_DCCP_DIAG INET_DIAG_DESTROY INET_ESP INET_ESPINTCP INET_ESP_OFFLOAD INET_IPCOMP INET_MPTCP_DIAG INET_RAW_DIAG INET_SCTP_DIAG INET_UDP_DIAG INET_XFRM_TUNNEL INFINIBAND INFINIBAND_ADDR_TRANS INFINIBAND_ADDR_TRANS_CONFIGFS INFINIBAND_IPOIB INFINIBAND_IPOIB_CM INFINIBAND_IPOIB_DEBUG INFINIBAND_ISER INFINIBAND_ON_DEMAND_PAGING INFINIBAND_RTRS INFINIBAND_RTRS_CLIENT INFINIBAND_SRP INFINIBAND_USER_ACCESS INFINIBAND_USER_MAD INFINIBAND_USER_MEM INPUT_ATI_REMOTE2 INPUT_CM109 INPUT_IMS_PCU INPUT_JOYDEV INPUT_JOYSTICK INPUT_KEYSPAN_REMOTE INPUT_LEDS INPUT_MOUSEDEV INPUT_MOUSEDEV_PSAUX INPUT_POWERMATE INPUT_TOUCHSCREEN INPUT_UINPUT INPUT_YEALINK INTEGRITY INTEGRITY_ASYMMETRIC_KEYS INTEGRITY_AUDIT INTEGRITY_SIGNATURE INTEGRITY_TRUSTED_KEYRING IOSCHED_BFQ IP6_NF_MATCH_AH IP6_NF_MATCH_EUI64 IP6_NF_MATCH_FRAG IP6_NF_MATCH_HL IP6_NF_MATCH_IPV6HEADER IP6_NF_MATCH_MH IP6_NF_MATCH_OPTS IP6_NF_MATCH_RPFILTER IP6_NF_MATCH_RT IP6_NF_MATCH_SRH IP6_NF_RAW IP6_NF_SECURITY IP6_NF_TARGET_HL IP6_NF_TARGET_NPT IP6_NF_TARGET_SYNPROXY IPV6_FOU IPV6_FOU_TUNNEL IPV6_GRE IPV6_ILA IPV6_MIP6 IPV6_MROUTE IPV6_MROUTE_MULTIPLE_TABLES IPV6_MULTIPLE_TABLES IPV6_OPTIMISTIC_DAD IPV6_PIMSM_V2 IPV6_ROUTER_PREF IPV6_ROUTE_INFO IPV6_RPL_LWTUNNEL IPV6_SEG6_BPF IPV6_SEG6_HMAC IPV6_SEG6_LWTUNNEL IPV6_SIT_6RD IPV6_SUBTREES IPV6_TUNNEL IPV6_VTI IPVLAN IPVLAN_L3S IPVTAP IP_ADVANCED_ROUTER IP_DCCP IP_DCCP_CCID3 IP_DCCP_TFRC_LIB IP_FIB_TRIE_STATS IP_MROUTE IP_MROUTE_COMMON IP_MROUTE_MULTIPLE_TABLES IP_NF_ARPFILTER IP_NF_ARPTABLES IP_NF_ARP_MANGLE IP_NF_MATCH_AH IP_NF_MATCH_ECN IP_NF_MATCH_RPFILTER IP_NF_MATCH_TTL IP_NF_RAW IP_NF_SECURITY IP_NF_TARGET_CLUSTERIP IP_NF_TARGET_ECN IP_NF_TARGET_NETMAP IP_NF_TARGET_REDIRECT IP_NF_TARGET_SYNPROXY IP_NF_TARGET_TTL IP_PIMSM_V1 IP_PIMSM_V2 IP_PNP_RARP IP_ROUTE_CLASSID IP_ROUTE_MULTIPATH IP_ROUTE_VERBOSE IP_SCTP IP_SET IP_SET_BITMAP_IP IP_SET_BITMAP_IPMAC IP_SET_BITMAP_PORT IP_SET_HASH_IP IP_SET_HASH_IPMAC IP_SET_HASH_IPMARK IP_SET_HASH_IPPORT IP_SET_HASH_IPPORTIP IP_SET_HASH_IPPORTNET IP_SET_HASH_MAC IP_SET_HASH_NET IP_SET_HASH_NETIFACE IP_SET_HASH_NETNET IP_SET_HASH_NETPORT IP_SET_HASH_NETPORTNET IP_SET_LIST_SET IP_VS_DH IP_VS_FO IP_VS_FTP IP_VS_IPV6 IP_VS_LBLC IP_VS_LBLCR IP_VS_LC IP_VS_MH IP_VS_NFCT IP_VS_NQ IP_VS_OVF IP_VS_PE_SIP IP_VS_PROTO_AH IP_VS_PROTO_AH_ESP IP_VS_PROTO_ESP IP_VS_PROTO_SCTP IP_VS_PROTO_TCP IP_VS_PROTO_UDP IP_VS_RR IP_VS_SED IP_VS_SH IP_VS_TWOS IP_VS_WLC IP_VS_WRR IR_IGORPLUGUSB IR_IGUANA IR_IMON IR_MCEUSB IR_REDRAT3 IR_STREAMZAP IR_TTUSBIR ISDN ISDN_CAPI ISDN_CAPI_MIDDLEWARE ISO9660_FS JFFS2_CMODE_PRIORITY JFFS2_COMPRESSION_OPTIONS JFFS2_FS JFFS2_FS_POSIX_ACL JFFS2_FS_SECURITY JFFS2_FS_WRITEBUFFER JFFS2_FS_XATTR JFFS2_LZO JFFS2_RTIME JFFS2_RUBIN JFFS2_SUMMARY JFFS2_ZLIB JFS_DEBUG JFS_FS JFS_POSIX_ACL JFS_SECURITY JOLIET JOYSTICK_IFORCE JOYSTICK_IFORCE_USB JOYSTICK_XPAD JOYSTICK_XPAD_FF JOYSTICK_XPAD_LEDS KARMA_PARTITION KCOV KCOV_ENABLE_COMPARISONS KCOV_INSTRUMENT_ALL LAPB LCD_CLASS_DEVICE MAC80211 MAC80211_LEDS MAC802154 MEDIA_CEC_SUPPORT MEDIA_RADIO_SUPPORT MEDIA_TEST_SUPPORT MFD_DLN2 MFD_VIPERBOARD MPTCP MTD_UBI NET_CLS_U32 NET_IPGRE_DEMUX NET_SCH_DEFAULT NFT_FWD_NETDEV NF_CONNTRACK_FTP NF_CONNTRACK_SIP NF_TABLES NF_TABLES_NETDEV PARPORT PARTITION_ADVANCED PCCARD PCMCIA PHONET RADIO_ADAPTERS RADIO_SI470X RADIO_SI4713 RFKILL SND SND_SOC SOUND SSB TARGET_CORE TCP_CONG_ADVANCED THERMAL_NETLINK THRUSTMASTER_FF TIPC TIPC_CRYPTO TIPC_DIAG TIPC_MEDIA_IB TIPC_MEDIA_UDP TLS TLS_DEVICE TLS_TOE TOUCHSCREEN_ATMEL_MXT TOUCHSCREEN_EDT_FT5X06 TOUCHSCREEN_GOODIX TOUCHSCREEN_SUR40 TOUCHSCREEN_USB_3M TOUCHSCREEN_USB_COMPOSITE TOUCHSCREEN_USB_DMC_TSC10 TOUCHSCREEN_USB_E2I TOUCHSCREEN_USB_EASYTOUCH TOUCHSCREEN_USB_EGALAX TOUCHSCREEN_USB_ELO TOUCHSCREEN_USB_ETT_TC45USB TOUCHSCREEN_USB_ETURBO TOUCHSCREEN_USB_GENERAL_TOUCH TOUCHSCREEN_USB_GOTOP TOUCHSCREEN_USB_GUNZE TOUCHSCREEN_USB_IDEALTEK TOUCHSCREEN_USB_IRTOUCH TOUCHSCREEN_USB_ITM TOUCHSCREEN_USB_JASTEC TOUCHSCREEN_USB_NEXIO TOUCHSCREEN_USB_PANJIT TOUCHSCREEN_USB_ZYTRONIC TRANSPARENT_HUGEPAGE_MADVISE TRUSTED_KEYS TTPCI_EEPROM TTY_PRINTK TUN_VNET_CROSS_LE TYPEC_UCSI UBIFS_ATIME_SUPPORT UBIFS_FS UBIFS_FS_ADVANCED_COMPR UBIFS_FS_LZO UBIFS_FS_SECURITY UBIFS_FS_XATTR UBIFS_FS_ZLIB UBIFS_FS_ZSTD UCSI_ACPI UDF_FS UDMABUF UFS_FS UFS_FS_WRITE UHID ULTRIX_PARTITION UNICODE UNIXWARE_DISKLABEL UNIX_DIAG USB4 USB4_NET USBIP_CORE USBIP_HOST USBIP_VHCI_HCD USBIP_VUDC USBPCWATCHDOG USB_ADUTUX USB_AIRSPY USB_ALI_M5632 USB_AMD5536UDC USB_AN2720 USB_ANNOUNCE_NEW_DEVICES USB_APPLEDISPLAY USB_ATM USB_C67X00_HCD USB_CATC USB_CDC_PHONET USB_CHAOSKEY USB_CONFIGFS_F_HID USB_CONFIGFS_F_LB_SS USB_CONFIGFS_F_MIDI USB_CONFIGFS_F_PRINTER USB_CONFIGFS_F_TCM USB_CONFIGFS_F_UAC1 USB_CONFIGFS_F_UAC1_LEGACY USB_CONFIGFS_F_UAC2 USB_CONFIGFS_F_UVC USB_CONFIGFS_PHONET USB_CXACRU USB_CYPRESS_CY7C63 USB_CYTHERM USB_DSBR USB_DUMMY_HCD USB_DWC2_PCI USB_DWC3_GADGET USB_DWC3_ULPI USB_DYNAMIC_MINORS USB_EG20T USB_EHSET_TEST_FIXTURE USB_EMI26 USB_EMI62 USB_EPSON2888 USB_EZUSB_FX2 USB_FEW_INIT_RETRIES USB_FOTG210_HCD USB_FOTG210_UDC USB_FTDI_ELAN USB_F_HID USB_F_MIDI USB_F_PHONET USB_F_PRINTER USB_F_SS_LB USB_F_TCM USB_F_UAC1 USB_F_UAC1_LEGACY USB_F_UAC2 USB_F_UVC USB_GADGETFS USB_GADGET_DEBUG_FILES USB_GADGET_DEBUG_FS USB_GL860 USB_GOKU USB_GPIO_VBUS USB_GR_UDC USB_GSPCA USB_GSPCA_BENQ USB_GSPCA_CONEX USB_GSPCA_CPIA1 USB_GSPCA_DTCS033 USB_GSPCA_ETOMS USB_GSPCA_FINEPIX USB_GSPCA_JEILINJ USB_GSPCA_JL2005BCD USB_GSPCA_KINECT USB_GSPCA_KONICA USB_GSPCA_MARS USB_GSPCA_MR97310A USB_GSPCA_NW80X USB_GSPCA_OV519 USB_GSPCA_OV534 USB_GSPCA_OV534_9 USB_GSPCA_PAC207 USB_GSPCA_PAC7302 USB_GSPCA_PAC7311 USB_GSPCA_SE401 USB_GSPCA_SN9C2028 USB_GSPCA_SN9C20X USB_GSPCA_SONIXB USB_GSPCA_SONIXJ USB_GSPCA_SPCA1528 USB_GSPCA_SPCA500 USB_GSPCA_SPCA501 USB_GSPCA_SPCA505 USB_GSPCA_SPCA506 USB_GSPCA_SPCA508 USB_GSPCA_SPCA561 USB_GSPCA_SQ905 USB_GSPCA_SQ905C USB_GSPCA_SQ930X USB_GSPCA_STK014 USB_GSPCA_STK1135 USB_GSPCA_STV0680 USB_GSPCA_SUNPLUS USB_GSPCA_T613 USB_GSPCA_TOPRO USB_GSPCA_TOUPTEK USB_GSPCA_TV8532 USB_GSPCA_VC032X USB_GSPCA_VICAM USB_GSPCA_XIRLINK_CIT USB_GSPCA_ZC3XX USB_HACKRF USB_HCD_BCMA USB_HCD_SSB USB_HIDDEV USB_HSIC_USB4604 USB_HSO USB_HUB_USB251XB USB_IDMOUSE USB_IOWARRIOR USB_IPHETH USB_ISIGHTFW USB_ISP116X_HCD USB_ISP1301 USB_KAWETH USB_KC2190 USB_KEENE USB_LCD USB_LD USB_LEDS_TRIGGER_USBPORT USB_LED_TRIG USB_LEGOTOWER USB_LINK_LAYER_TEST USB_M5602 USB_MA901 USB_MAX3421_HCD USB_MDC800 USB_MICROTEK USB_MON USB_MR800 USB_MSI2500 USB_MV_U3D USB_MV_UDC USB_NET2272 USB_NET2272_DMA USB_NET2280 USB_NET_CDC_EEM USB_NET_CDC_MBIM USB_NET_CH9200 USB_NET_CX82310_ETH USB_NET_GL620A USB_NET_HUAWEI_CDC_NCM USB_NET_INT51X1 USB_NET_KALMIA USB_NET_QMI_WWAN USB_NET_RNDIS_HOST USB_NET_RNDIS_WLAN USB_NET_SR9700 USB_OTG_FSM USB_OXU210HP_HCD USB_PRINTER USB_PULSE8_CEC USB_PWC USB_PWC_INPUT_EVDEV USB_PXA27X USB_R8A66597 USB_R8A66597_HCD USB_RAINSHADOW_CEC USB_RAREMONO USB_RAW_GADGET USB_S2255 USB_SERIAL_AIRCABLE USB_SERIAL_ARK3116 USB_SERIAL_BELKIN USB_SERIAL_CH341 USB_SERIAL_CONSOLE USB_SERIAL_CYBERJACK USB_SERIAL_CYPRESS_M8 USB_SERIAL_DEBUG USB_SERIAL_DIGI_ACCELEPORT USB_SERIAL_EDGEPORT USB_SERIAL_EDGEPORT_TI USB_SERIAL_EMPEG USB_SERIAL_F81232 USB_SERIAL_F8153X USB_SERIAL_GARMIN USB_SERIAL_GENERIC USB_SERIAL_IPAQ USB_SERIAL_IPW USB_SERIAL_IR USB_SERIAL_IUU USB_SERIAL_KEYSPAN USB_SERIAL_KEYSPAN_PDA USB_SERIAL_KLSI USB_SERIAL_KOBIL_SCT USB_SERIAL_MCT_U232 USB_SERIAL_METRO USB_SERIAL_MOS7715_PARPORT USB_SERIAL_MOS7720 USB_SERIAL_MOS7840 USB_SERIAL_MXUPORT USB_SERIAL_NAVMAN USB_SERIAL_OMNINET USB_SERIAL_OPTICON USB_SERIAL_OTI6858 USB_SERIAL_PL2303 USB_SERIAL_QCAUX USB_SERIAL_QT2 USB_SERIAL_QUALCOMM USB_SERIAL_SAFE USB_SERIAL_SIERRAWIRELESS USB_SERIAL_SIMPLE USB_SERIAL_SPCP8X5 USB_SERIAL_SSU100 USB_SERIAL_SYMBOL USB_SERIAL_TI USB_SERIAL_UPD78F0730 USB_SERIAL_VISOR USB_SERIAL_WHITEHEAT USB_SERIAL_WISHBONE USB_SERIAL_XR USB_SERIAL_XSENS_MT USB_SEVSEG USB_SI470X USB_SI4713 USB_SIERRA_NET USB_SISUSBVGA USB_SL811_CS USB_SL811_HCD USB_SL811_HCD_ISO USB_SPEEDTOUCH USB_STORAGE_ALAUDA USB_STORAGE_CYPRESS_ATACB USB_STORAGE_DATAFAB USB_STORAGE_ENE_UB6250 USB_STORAGE_FREECOM USB_STORAGE_ISD200 USB_STORAGE_JUMPSHOT USB_STORAGE_KARMA USB_STORAGE_ONETOUCH USB_STORAGE_SDDR09 USB_STORAGE_SDDR55 USB_STORAGE_USBAT USB_STV06XX USB_TEST USB_TMC USB_TRANCEVIBRATOR USB_U132_HCD USB_UAS USB_UEAGLEATM USB_UHCI_HCD USB_USS720 USB_U_AUDIO USB_VL600 USB_WDM USB_XHCI_DBGCAP USB_XUSBATM USB_YUREX USERFAULTFD USERIO U_SERIAL_CONSOLE V4L_TEST_DRIVERS VALIDATE_FS_PARSER VDPA VDPA_SIM VDPA_SIM_BLOCK VDPA_SIM_NET VDPA_USER VHOST VHOST_CROSS_ENDIAN_LEGACY VHOST_IOTLB VHOST_NET VHOST_RING VHOST_VDPA VHOST_VSOCK VIDEOMODE_HELPERS VIDEO_AU0828 VIDEO_AU0828_RC VIDEO_AU0828_V4L2 VIDEO_CS53L32A VIDEO_CX231XX VIDEO_CX231XX_ALSA VIDEO_CX231XX_DVB VIDEO_CX231XX_RC VIDEO_CX2341X VIDEO_CX25840 VIDEO_EM28XX VIDEO_EM28XX_ALSA VIDEO_EM28XX_DVB VIDEO_EM28XX_RC VIDEO_EM28XX_V4L2 VIDEO_GO7007 VIDEO_GO7007_LOADER VIDEO_GO7007_USB VIDEO_GO7007_USB_S2250_BOARD VIDEO_HDPVR VIDEO_MSP3400 VIDEO_PVRUSB2 VIDEO_PVRUSB2_DVB VIDEO_PVRUSB2_SYSFS VIDEO_SAA711X VIDEO_STK1160 VIDEO_STK1160_COMMON VIDEO_TUNER VIDEO_TVEEPROM VIDEO_USBTV VIDEO_V4L2_TPG VIDEO_VICODEC VIDEO_VIM2M VIDEO_VIMC VIDEO_VIVID VIDEO_VIVID_CEC VIDEO_WM8775 VIPERBOARD_ADC VIRTIO_DMA_SHARED_BUFFER VIRTIO_FS VIRTIO_MMIO_CMDLINE_DEVICES VIRTIO_VDPA VIRTIO_VSOCKETS VIRTIO_VSOCKETS_COMMON VIRT_WIFI VMXNET3 VP_VDPA VSOCKETS VSOCKETS_DIAG VSOCKETS_LOOPBACK VSOCKMON VXFS_FS WAN WCN36XX WEXT_CORE WEXT_PRIV WEXT_PROC WIREGUARD WIRELESS WIRELESS_EXT WLAN WLAN_VENDOR_ADMTEK WLAN_VENDOR_ATH WLAN_VENDOR_PURELIFI WLAN_VENDOR_SILABS XDP_SOCKETS XDP_SOCKETS_DIAG XFRM XFRM_AH XFRM_ALGO XFRM_ESP XFRM_ESPINTCP XFRM_INTERFACE XFRM_IPCOMP XFRM_MIGRATE XFRM_OFFLOAD XFRM_STATISTICS XFRM_SUB_POLICY XFRM_USER XFS_FS XFS_POSIX_ACL XFS_QUOTA XFS_RT XFS_SUPPORT_V4 ZBUD ZEROPLUS_FF ZISOFS ZONEFS_FS ZONE_DEVICE ZPOOL ZRAM ZRAM_DEF_COMP_LZORLE ZSMALLOC ZSWAP ZSWAP_COMPRESSOR_DEFAULT_LZO ZSWAP_ZPOOL_DEFAULT_ZBUD] disabling configs for [LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN KASAN], they are not needed testing current HEAD fb2635ac69abac0060cc2be2873dc4f524f12e66 testing commit fb2635ac69abac0060cc2be2873dc4f524f12e66 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: c2d5fffa4e8c888fb9ff677c6932fbad9f10d40fbbe4c304d6ad9713f1e3a1e0 all runs: crashed: WARNING in ar5523_submit_rx_cmd/usb_submit_urb representative crash: WARNING in ar5523_submit_rx_cmd/usb_submit_urb, types: [WARNING] crash still not fixed/happens on the oldest tested release revisions tested: 8, total time: 1h36m21.396254018s (build: 50m3.257642574s, test: 43m33.062240548s) crash still not fixed or there were kernel test errors commit msg: Linux 6.1.62 crash: WARNING in ar5523_submit_rx_cmd/usb_submit_urb usb 1-1: Product: syz usb 1-1: Manufacturer: syz usb 1-1: SerialNumber: syz ------------[ cut here ]------------ usb 1-1: BOGUS urb xfer, pipe 3 != type 1 WARNING: CPU: 1 PID: 3748 at drivers/usb/core/urb.c:505 usb_submit_urb+0x594/0x9b4 drivers/usb/core/urb.c:504 Modules linked in: CPU: 1 PID: 3748 Comm: kworker/1:3 Not tainted 6.1.62-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 Workqueue: usb_hub_wq hub_event pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : usb_submit_urb+0x594/0x9b4 drivers/usb/core/urb.c:504 lr : usb_submit_urb+0x594/0x9b4 drivers/usb/core/urb.c:504 sp : ffff8000129d3430 x29: ffff8000129d3440 x28: ffff0000cf839000 x27: ffff0000c52da35c x26: ffff80000d20ad34 x25: ffff0000cf8390a8 x24: ffff0000c68a6200 x23: ffff80000d235b0c x22: 0000000000000400 x21: 0000000000000003 x20: 0000000000000a20 x19: ffff0000c52da300 x18: 0000000000000000 x17: 0000000000000000 x16: 0000000000000002 x15: 0000000000000000 x14: 0000000000000000 x13: 205d383437335420 x12: ffff80000eab2000 x11: ff808000080e0e64 x10: 0000000000000000 x9 : dca9c63ff8a09800 x8 : dca9c63ff8a09800 x7 : 0000000000000000 x6 : ffff80000bffb55c x5 : 0000000000000000 x4 : 0000000000000080 x3 : 0000000000000000 x2 : 0000000000000000 x1 : 0000000100000000 x0 : 0000000000000000 Call trace: usb_submit_urb+0x594/0x9b4 drivers/usb/core/urb.c:504 ar5523_submit_rx_cmd+0x74/0xf4 drivers/net/wireless/ath/ar5523/ar5523.c:212 ar5523_probe+0x41c/0xbb8 drivers/net/wireless/ath/ar5523/ar5523.c:1652 usb_probe_interface+0x2fc/0x4ac drivers/usb/core/driver.c:396 really_probe+0x218/0x61c drivers/base/dd.c:639 __driver_probe_device+0xe8/0x1fc drivers/base/dd.c:785 driver_probe_device+0x54/0x2f4 drivers/base/dd.c:815 __device_attach_driver+0x19c/0x2e4 drivers/base/dd.c:943 bus_for_each_drv+0xb4/0x124 drivers/base/bus.c:427 __device_attach+0x148/0x270 drivers/base/dd.c:1015 device_initial_probe+0x24/0x34 drivers/base/dd.c:1064 bus_probe_device+0x5c/0xf0 drivers/base/bus.c:487 device_add+0x754/0x968 drivers/base/core.c:3664 usb_set_configuration+0xb0c/0xd18 drivers/usb/core/message.c:2165 usb_generic_driver_probe+0x5c/0xe8 drivers/usb/core/generic.c:238 usb_probe_device+0xd0/0x180 drivers/usb/core/driver.c:293 really_probe+0x218/0x61c drivers/base/dd.c:639 __driver_probe_device+0xe8/0x1fc drivers/base/dd.c:785 driver_probe_device+0x54/0x2f4 drivers/base/dd.c:815 __device_attach_driver+0x19c/0x2e4 drivers/base/dd.c:943 bus_for_each_drv+0xb4/0x124 drivers/base/bus.c:427 __device_attach+0x148/0x270 drivers/base/dd.c:1015 device_initial_probe+0x24/0x34 drivers/base/dd.c:1064 bus_probe_device+0x5c/0xf0 drivers/base/bus.c:487 device_add+0x754/0x968 drivers/base/core.c:3664 usb_new_device+0x428/0x8a8 drivers/usb/core/hub.c:2583 hub_port_connect drivers/usb/core/hub.c:5434 [inline] hub_port_connect_change drivers/usb/core/hub.c:5574 [inline] port_event drivers/usb/core/hub.c:5730 [inline] hub_event+0x1728/0x258c drivers/usb/core/hub.c:5812 process_one_work+0x2d4/0x4e0 kernel/workqueue.c:2292 worker_thread+0x340/0x5f8 kernel/workqueue.c:2439 kthread+0x120/0x14c kernel/kthread.c:376 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:864 ---[ end trace 0000000000000000 ]--- usb 1-1: error -22 when submitting rx urb usb 1-1: Failed to submit rx cmd ar5523: probe of 1-1:64.245 failed with error -22 ------------[ cut here ]------------ usb 1-1: BOGUS urb xfer, pipe 3 != type 1 WARNING: CPU: 1 PID: 3748 at drivers/usb/core/urb.c:505 usb_submit_urb+0x594/0x9b4 drivers/usb/core/urb.c:504 Modules linked in: CPU: 1 PID: 3748 Comm: kworker/1:3 Tainted: G W 6.1.62-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 Workqueue: usb_hub_wq hub_event pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : usb_submit_urb+0x594/0x9b4 drivers/usb/core/urb.c:504 lr : usb_submit_urb+0x594/0x9b4 drivers/usb/core/urb.c:504 sp : ffff8000129d3430 x29: ffff8000129d3440 x28: ffff0000cf839000 x27: ffff0000cc23835c x26: ffff80000d20ad34 x25: ffff0000cf8390a8 x24: ffff0000c68a6200 x23: ffff80000d235b0c x22: 0000000000000400 x21: 0000000000000003 x20: 0000000000000a20 x19: ffff0000cc238300 x18: ffff80000c03d2c4 x17: 0000000000000000 x16: 0000000000000002 x15: 0000000000000000 x14: 0000000000000000 x13: 205d383437335420 x12: ffff80000eab2000 x11: ff808000080e0e64 x10: 0000000000000000 x9 : dca9c63ff8a09800 x8 : dca9c63ff8a09800 x7 : 0000000000000000 x6 : ffff80000bffb55c x5 : 0000000000000000 x4 : 0000000000000080 x3 : 0000000000000000 x2 : 0000000000000000 x1 : 0000000100000000 x0 : 0000000000000000 Call trace: usb_submit_urb+0x594/0x9b4 drivers/usb/core/urb.c:504 ar5523_submit_rx_cmd+0x74/0xf4 drivers/net/wireless/ath/ar5523/ar5523.c:212 ar5523_probe+0x41c/0xbb8 drivers/net/wireless/ath/ar5523/ar5523.c:1652 usb_probe_interface+0x2fc/0x4ac drivers/usb/core/driver.c:396 really_probe+0x218/0x61c drivers/base/dd.c:639 __driver_probe_device+0xe8/0x1fc drivers/base/dd.c:785 driver_probe_device+0x54/0x2f4 drivers/base/dd.c:815 __device_attach_driver+0x19c/0x2e4 drivers/base/dd.c:943 bus_for_each_drv+0xb4/0x124 drivers/base/bus.c:427 __device_attach+0x148/0x270 drivers/base/dd.c:1015 device_initial_probe+0x24/0x34 drivers/base/dd.c:1064 bus_probe_device+0x5c/0xf0 drivers/base/bus.c:487 device_add+0x754/0x968 drivers/base/core.c:3664 usb_set_configuration+0xb0c/0xd18 drivers/usb/core/message.c:2165 usb_generic_driver_probe+0x5c/0xe8 drivers/usb/core/generic.c:238 usb_probe_device+0xd0/0x180 drivers/usb/core/driver.c:293 really_probe+0x218/0x61c drivers/base/dd.c:639 __driver_probe_device+0xe8/0x1fc drivers/base/dd.c:785 driver_probe_device+0x54/0x2f4 drivers/base/dd.c:815 __device_attach_driver+0x19c/0x2e4 drivers/base/dd.c:943 bus_for_each_drv+0xb4/0x124 drivers/base/bus.c:427 __device_attach+0x148/0x270 drivers/base/dd.c:1015 device_initial_probe+0x24/0x34 drivers/base/dd.c:1064 bus_probe_device+0x5c/0xf0 drivers/base/bus.c:487 device_add+0x754/0x968 drivers/base/core.c:3664 usb_new_device+0x428/0x8a8 drivers/usb/core/hub.c:2583 hub_port_connect drivers/usb/core/hub.c:5434 [inline] hub_port_connect_change drivers/usb/core/hub.c:5574 [inline] port_event drivers/usb/core/hub.c:5730 [inline] hub_event+0x1728/0x258c drivers/usb/core/hub.c:5812 process_one_work+0x2d4/0x4e0 kernel/workqueue.c:2292 worker_thread+0x340/0x5f8 kernel/workqueue.c:2439 kthread+0x120/0x14c kernel/kthread.c:376 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:864 ---[ end trace 0000000000000000 ]--- usb 1-1: error -22 when submitting rx urb usb 1-1: Failed to submit rx cmd ar5523: probe of 1-1:64.155 failed with error -22 ------------[ cut here ]------------ usb 1-1: BOGUS urb xfer, pipe 3 != type 1 WARNING: CPU: 1 PID: 3748 at drivers/usb/core/urb.c:505 usb_submit_urb+0x594/0x9b4 drivers/usb/core/urb.c:504 Modules linked in: CPU: 1 PID: 3748 Comm: kworker/1:3 Tainted: G W 6.1.62-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 Workqueue: usb_hub_wq hub_event pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : usb_submit_urb+0x594/0x9b4 drivers/usb/core/urb.c:504 lr : usb_submit_urb+0x594/0x9b4 drivers/usb/core/urb.c:504 sp : ffff8000129d3430 x29: ffff8000129d3440 x28: ffff0000cf839000 x27: ffff0000c52da05c x26: ffff80000d20ad34 x25: ffff0000cf8390a8 x24: ffff0000c68a6200 x23: ffff80000d235b0c x22: 0000000000000400 x21: 0000000000000003 x20: 0000000000000a20 x19: ffff0000c52da000 x18: 0000000000000000 x17: 0000000000000000 x16: 0000000000000002 x15: 0000000000000000 x14: 0000000000000000 x13: 205d383437335420 x12: ffff80000eab2000 x11: ff808000080e0e64 x10: 0000000000000000 x9 : dca9c63ff8a09800 x8 : dca9c63ff8a09800 x7 : 0000000000000000 x6 : ffff80000bffb55c x5 : 0000000000000000 x4 : 0000000000000080 x3 : 0000000000000000 x2 : 0000000000000000 x1 : 0000000100000000 x0 : 0000000000000000 Call trace: usb_submit_urb+0x594/0x9b4 drivers/usb/core/urb.c:504 ar5523_submit_rx_cmd+0x74/0xf4 drivers/net/wireless/ath/ar5523/ar5523.c:212 ar5523_probe+0x41c/0xbb8 drivers/net/wireless/ath/ar5523/ar5523.c:1652 usb_probe_interface+0x2fc/0x4ac drivers/usb/core/driver.c:396 really_probe+0x218/0x61c drivers/base/dd.c:639 __driver_probe_device+0xe8/0x1fc drivers/base/dd.c:785 driver_probe_device+0x54/0x2f4 drivers/base/dd.c:815 __device_attach_driver+0x19c/0x2e4 drivers/base/dd.c:943 bus_for_each_drv+0xb4/0x124 drivers/base/bus.c:427 __device_attach+0x148/0x270 drivers/base/dd.c:1015 device_initial_probe+0x24/0x34 drivers/base/dd.c:1064 bus_probe_device+0x5c/0xf0 drivers/base/bus.c:487 device_add+0x754/0x968 drivers/base/core.c:3664 usb_set_configuration+0xb0c/0xd18 drivers/usb/core/message.c:2165 usb_generic_driver_probe+0x5c/0xe8 drivers/usb/core/generic.c:238 usb_probe_device+0xd0/0x180 drivers/usb/core/driver.c:293 really_probe+0x218/0x61c drivers/base/dd.c:639 __driver_probe_device+0xe8/0x1fc drivers/base/dd.c:785 driver_probe_device+0x54/0x2f4 drivers/base/dd.c:815 __device_attach_driver+0x19c/0x2e4 drivers/base/dd.c:943 bus_for_each_drv+0xb4/0x124 drivers/base/bus.c:427 __device_attach+0x148/0x270 drivers/base/dd.c:1015 device_initial_probe+0x24/0x34 drivers/base/dd.c:1064 bus_probe_device+0x5c/0xf0 drivers/base/bus.c:487 device_add+0x754/0x968 drivers/base/core.c:3664 usb_new_device+0x428/0x8a8 drivers/usb/core/hub.c:2583 hub_port_connect drivers/usb/core/hub.c:5434 [inline] hub_port_connect_change drivers/usb/core/hub.c:5574 [inline] port_event drivers/usb/core/hub.c:5730 [inline] hub_event+0x1728/0x258c drivers/usb/core/hub.c:5812 process_one_work+0x2d4/0x4e0 kernel/workqueue.c:2292 worker_thread+0x340/0x5f8 kernel/workqueue.c:2439 kthread+0x120/0x14c kernel/kthread.c:376 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:864 ---[ end trace 0000000000000000 ]--- usb 1-1: error -22 when submitting rx urb usb 1-1: Failed to submit rx cmd ar5523: probe of 1-1:64.243 failed with error -22 usb 1-1: USB disconnect, device number 2 usb 1-1: new high-speed USB device number 3 using dummy_hcd usb 1-1: Using ep0 maxpacket: 32 usb 1-1: config 64 has an invalid interface number: 245 but max is 2 usb 1-1: config 64 has an invalid interface number: 155 but max is 2 usb 1-1: config 64 contains an unexpected descriptor of type 0x2, skipping usb 1-1: config 64 contains an unexpected descriptor of type 0x1, skipping usb 1-1: config 64 has an invalid interface number: 243 but max is 2 usb 1-1: config 64 has no interface number 0 usb 1-1: config 64 has no interface number 1 usb 1-1: config 64 has no interface number 2 usb 1-1: config 64 interface 245 altsetting 7 endpoint 0x8 has invalid maxpacket 1024, setting to 64 usb 1-1: config 64 interface 245 altsetting 7 endpoint 0x3 has invalid maxpacket 1023, setting to 64 usb 1-1: config 64 interface 245 altsetting 7 has an invalid endpoint descriptor of length 2, skipping usb 1-1: config 64 interface 245 altsetting 7 has 5 endpoint descriptors, different from the interface descriptor's value: 4 usb 1-1: config 64 interface 155 altsetting 1 endpoint 0x9 has invalid maxpacket 512, setting to 64 usb 1-1: config 64 interface 155 altsetting 1 has an invalid endpoint with address 0x0, skipping usb 1-1: config 64 interface 155 altsetting 1 has an invalid endpoint with address 0x0, skipping usb 1-1: config 64 interface 155 altsetting 1 endpoint 0xA has invalid maxpacket 72, setting to 64 usb 1-1: config 64 interface 155 altsetting 1 endpoint 0x81 has an invalid bInterval 139, changing to 11 usb 1-1: config 64 interface 155 altsetting 1 endpoint 0x81 has invalid maxpacket 18251, setting to 1024 usb 1-1: config 64 interface 155 altsetting 1 has a duplicate endpoint with address 0xA, skipping usb 1-1: config 64 interface 155 altsetting 1 has an invalid endpoint with address 0x0, skipping usb 1-1: config 64 interface 155 altsetting 1 has 9 endpoint descriptors, different from the interface descriptor's value: 8 usb 1-1: config 64 interface 243 altsetting 31 endpoint 0xF has invalid maxpacket 512, setting to 64 usb 1-1: config 64 interface 245 has no altsetting 0 usb 1-1: config 64 interface 155 has no altsetting 0 usb 1-1: config 64 interface 243 has no altsetting 0 usb 1-1: New USB device found, idVendor=083a, idProduct=4506, bcdDevice=6d.7d usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 usb 1-1: Product: syz usb 1-1: Manufacturer: syz usb 1-1: SerialNumber: syz ------------[ cut here ]------------ usb 1-1: BOGUS urb xfer, pipe 3 != type 1 WARNING: CPU: 1 PID: 3748 at drivers/usb/core/urb.c:505 usb_submit_urb+0x594/0x9b4 drivers/usb/core/urb.c:504 Modules linked in: CPU: 1 PID: 3748 Comm: kworker/1:3 Tainted: G W 6.1.62-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 Workqueue: usb_hub_wq hub_event pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : usb_submit_urb+0x594/0x9b4 drivers/usb/core/urb.c:504 lr : usb_submit_urb+0x594/0x9b4 drivers/usb/core/urb.c:504 sp : ffff8000129d3430 x29: ffff8000129d3440 x28: ffff0000ca11a800 x27: ffff0000cc23805c x26: ffff80000d20ad34 x25: ffff0000ca11a8a8 x24: ffff0000cac95c80 x23: ffff80000d235b0c x22: 0000000000000400 x21: 0000000000000003 x20: 0000000000000a20 x19: ffff0000cc238000 x18: 0000000000000000 x17: 0000000000000000 x16: 0000000000000002 x15: 0000000000000000 x14: 0000000000000000 x13: 205d383437335420 x12: ffff80000eab2000 x11: ff808000080e0e64 x10: 0000000000000000 x9 : dca9c63ff8a09800 x8 : dca9c63ff8a09800 x7 : 0000000000000000 x6 : ffff80000bffb55c x5 : 0000000000000000 x4 : 0000000000000080 x3 : 0000000000000000 x2 : 0000000000000000 x1 : 0000000100000000 x0 : 0000000000000000 Call trace: usb_submit_urb+0x594/0x9b4 drivers/usb/core/urb.c:504 ar5523_submit_rx_cmd+0x74/0xf4 drivers/net/wireless/ath/ar5523/ar5523.c:212 ar5523_probe+0x41c/0xbb8 drivers/net/wireless/ath/ar5523/ar5523.c:1652 usb_probe_interface+0x2fc/0x4ac drivers/usb/core/driver.c:396 really_probe+0x218/0x61c drivers/base/dd.c:639 __driver_probe_device+0xe8/0x1fc drivers/base/dd.c:785 driver_probe_device+0x54/0x2f4 drivers/base/dd.c:815 __device_attach_driver+0x19c/0x2e4 drivers/base/dd.c:943 bus_for_each_drv+0xb4/0x124 drivers/base/bus.c:427 __device_attach+0x148/0x270 drivers/base/dd.c:1015 device_initial_probe+0x24/0x34 drivers/base/dd.c:1064 bus_probe_device+0x5c/0xf0 drivers/base/bus.c:487 device_add+0x754/0x968 drivers/base/core.c:3664 usb_set_configuration+0xb0c/0xd18 drivers/usb/core/message.c:2165 usb_generic_driver_probe+0x5c/0xe8 drivers/usb/core/generic.c:238 usb_probe_device+0xd0/0x180 drivers/usb/core/driver.c:293 really_probe+0x218/0x61c drivers/base/dd.c:639 __driver_probe_device+0xe8/0x1fc drivers/base/dd.c:785 driver_probe_device+0x54/0x2f4 drivers/base/dd.c:815 __device_attach_driver+0x19c/0x2e4 drivers/base/dd.c:943 bus_for_each_drv+0xb4/0x124 drivers/base/bus.c:427 __device_attach+0x148/0x270 drivers/base/dd.c:1015 device_initial_probe+0x24/0x34 drivers/base/dd.c:1064 bus_probe_device+0x5c/0xf0 drivers/base/bus.c:487 device_add+0x754/0x968 drivers/base/core.c:3664 usb_new_device+0x428/0x8a8 drivers/usb/core/hub.c:2583 hub_port_connect drivers/usb/core/hub.c:5434 [inline] hub_port_connect_change drivers/usb/core/hub.c:5574 [inline] port_event drivers/usb/core/hub.c:5730 [inline] hub_event+0x1728/0x258c drivers/usb/core/hub.c:5812 process_one_work+0x2d4/0x4e0 kernel/workqueue.c:2292 process_scheduled_works kernel/workqueue.c:2355 [inline] worker_thread+0x42c/0x5f8 kernel/workqueue.c:2441 kthread+0x120/0x14c kernel/kthread.c:376 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:864 ---[ end trace 0000000000000000 ]--- usb 1-1: error -22 when submitting rx urb usb 1-1: Failed to submit rx cmd ar5523: probe of 1-1:64.245 failed with error -22 ------------[ cut here ]------------ usb 1-1: BOGUS urb xfer, pipe 3 != type 1 WARNING: CPU: 1 PID: 3748 at drivers/usb/core/urb.c:505 usb_submit_urb+0x594/0x9b4 drivers/usb/core/urb.c:504 Modules linked in: CPU: 1 PID: 3748 Comm: kworker/1:3 Tainted: G W 6.1.62-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 Workqueue: usb_hub_wq hub_event pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : usb_submit_urb+0x594/0x9b4 drivers/usb/core/urb.c:504 lr : usb_submit_urb+0x594/0x9b4 drivers/usb/core/urb.c:504 sp : ffff8000129d3430 x29: ffff8000129d3440 x28: ffff0000ca11a800 x27: ffff0000c52da15c x26: ffff80000d20ad34 x25: ffff0000ca11a8a8 x24: ffff0000cac95c80 x23: ffff80000d235b0c x22: 0000000000000400 x21: 0000000000000003 x20: 0000000000000a20 x19: ffff0000c52da100 x18: ffff80000c03d2c4 x17: 0000000000058000 x16: 0000000000000002 x15: 0000000000000000 x14: 0000000000000000 x13: 205d383437335420 x12: ffff80000eab2000 x11: ff808000080e0e64 x10: 0000000000000000 x9 : dca9c63ff8a09800 x8 : dca9c63ff8a09800 x7 : 0000000000000000 x6 : ffff80000bffb55c x5 : 0000000000000000 x4 : 0000000000000080 x3 : 0000000000000000 x2 : 0000000000000000 x1 : 0000000100000000 x0 : 0000000000000000 Call trace: usb_submit_urb+0x594/0x9b4 drivers/usb/core/urb.c:504 ar5523_submit_rx_cmd+0x74/0xf4 drivers/net/wireless/ath/ar5523/ar5523.c:212 ar5523_probe+0x41c/0xbb8 drivers/net/wireless/ath/ar5523/ar5523.c:1652 usb_probe_interface+0x2fc/0x4ac drivers/usb/core/driver.c:396 really_probe+0x218/0x61c drivers/base/dd.c:639 __driver_probe_device+0xe8/0x1fc drivers/base/dd.c:785 driver_probe_device+0x54/0x2f4 drivers/base/dd.c:815 __device_attach_driver+0x19c/0x2e4 drivers/base/dd.c:943 bus_for_each_drv+0xb4/0x124 drivers/base/bus.c:427 __device_attach+0x148/0x270 drivers/base/dd.c:1015 device_initial_probe+0x24/0x34 drivers/base/dd.c:1064 bus_probe_device+0x5c/0xf0 drivers/base/bus.c:487 device_add+0x754/0x968 drivers/base/core.c:3664 usb_set_configuration+0xb0c/0xd18 drivers/usb/core/message.c:2165 usb_generic_driver_probe+0x5c/0xe8 drivers/usb/core/generic.c:238 usb_probe_device+0xd0/0x180 drivers/usb/core/driver.c:293 really_probe+0x218/0x61c drivers/base/dd.c:639 __driver_probe_device+0xe8/0x1fc drivers/base/dd.c:785 driver_probe_device+0x54/0x2f4 drivers/base/dd.c:815 __device_attach_driver+0x19c/0x2e4 drivers/base/dd.c:943 bus_for_each_drv+0xb4/0x124 drivers/base/bus.c:427 __device_attach+0x148/0x270 drivers/base/dd.c:1015 device_initial_probe+0x24/0x34 drivers/base/dd.c:1064 bus_probe_device+0x5c/0xf0 drivers/base/bus.c:487 device_add+0x754/0x968 drivers/base/core.c:3664 usb_new_device+0x428/0x8a8 drivers/usb/core/hub.c:2583 hub_port_connect drivers/usb/core/hub.c:5434 [inline] hub_port_connect_change drivers/usb/core/hub.c:5574 [inline] port_event drivers/usb/core/hub.c:5730 [inline] hub_event+0x1728/0x258c drivers/usb/core/hub.c:5812 process_one_work+0x2d4/0x4e0 kernel/workqueue.c:2292 process_scheduled_works kernel/workqueue.c:2355 [inline] worker_thread+0x42c/0x5f8 kernel/workqueue.c:2441 kthread+0x120/0x14c kernel/kthread.c:376 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:864 ---[ end trace 0000000000000000 ]--- usb 1-1: error -22 when submitting rx urb usb 1-1: Failed to submit rx cmd ar5523: probe of 1-1:64.155 failed with error -22 ------------[ cut here ]------------ usb 1-1: BOGUS urb xfer, pipe 3 != type 1 WARNING: CPU: 1 PID: 3748 at drivers/usb/core/urb.c:505 usb_submit_urb+0x594/0x9b4 drivers/usb/core/urb.c:504 Modules linked in: CPU: 1 PID: 3748 Comm: kworker/1:3 Tainted: G W 6.1.62-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 Workqueue: usb_hub_wq hub_event pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : usb_submit_urb+0x594/0x9b4 drivers/usb/core/urb.c:504 lr : usb_submit_urb+0x594/0x9b4 drivers/usb/core/urb.c:504 sp : ffff8000129d3430 x29: ffff8000129d3440 x28: ffff0000ca11a800 x27: ffff0000cc23815c x26: ffff80000d20ad34 x25: ffff0000ca11a8a8 x24: ffff0000cac95c80 x23: ffff80000d235b0c x22: 0000000000000400 x21: 0000000000000003 x20: 0000000000000a20 x19: ffff0000cc238100 x18: 0000000000000000 x17: 0000000000020a96 x16: 0000000000000002 x15: 0000000000000000 x14: 0000000000000000 x13: 205d383437335420 x12: ffff80000eab2000 x11: ff808000080e0e64 x10: 0000000000000000 x9 : dca9c63ff8a09800 x8 : dca9c63ff8a09800 x7 : 0000000000000000 x6 : ffff80000bffb55c x5 : 0000000000000000 x4 : 0000000000000080 x3 : 0000000000000000 x2 : 0000000000000000 x1 : 0000000100000000 x0 : 0000000000000000 Call trace: usb_submit_urb+0x594/0x9b4 drivers/usb/core/urb.c:504 ar5523_submit_rx_cmd+0x74/0xf4 drivers/net/wireless/ath/ar5523/ar5523.c:212 ar5523_probe+0x41c/0xbb8 drivers/net/wireless/ath/ar5523/ar5523.c:1652 usb_probe_interface+0x2fc/0x4ac drivers/usb/core/driver.c:396 really_probe+0x218/0x61c drivers/base/dd.c:639 __driver_probe_device+0xe8/0x1fc drivers/base/dd.c:785 driver_probe_device+0x54/0x2f4 drivers/base/dd.c:815 __device_attach_driver+0x19c/0x2e4 drivers/base/dd.c:943 bus_for_each_drv+0xb4/0x124 drivers/base/bus.c:427 __device_attach+0x148/0x270 drivers/base/dd.c:1015 device_initial_probe+0x24/0x34 drivers/base/dd.c:1064 bus_probe_device+0x5c/0xf0 drivers/base/bus.c:487 device_add+0x754/0x968 drivers/base/core.c:3664 usb_set_configuration+0xb0c/0xd18 drivers/usb/core/message.c:2165 usb_generic_driver_probe+0x5c/0xe8 drivers/usb/core/generic.c:238 usb_probe_device+0xd0/0x180 drivers/usb/core/driver.c:293 really_probe+0x218/0x61c drivers/base/dd.c:639 __driver_probe_device+0xe8/0x1fc drivers/base/dd.c:785 driver_probe_device+0x54/0x2f4 drivers/base/dd.c:815 __device_attach_driver+0x19c/0x2e4 drivers/base/dd.c:943 bus_for_each_drv+0xb4/0x124 drivers/base/bus.c:427 __device_attach+0x148/0x270 drivers/base/dd.c:1015 device_initial_probe+0x24/0x34 drivers/base/dd.c:1064 bus_probe_device+0x5c/0xf0 drivers/base/bus.c:487 device_add+0x754/0x968 drivers/base/core.c:3664 usb_new_device+0x428/0x8a8 drivers/usb/core/hub.c:2583 hub_port_connect drivers/usb/core/hub.c:5434 [inline] hub_port_connect_change drivers/usb/core/hub.c:5574 [inline] port_event drivers/usb/core/hub.c:5730 [inline] hub_event+0x1728/0x258c drivers/usb/core/hub.c:5812 process_one_work+0x2d4/0x4e0 kernel/workqueue.c:2292 process_scheduled_works kernel/workqueue.c:2355 [inline] worker_thread+0x42c/0x5f8 kernel/workqueue.c:2441 kthread+0x120/0x14c kernel/kthread.c:376 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:864 ---[ end trace 0000000000000000 ]--- usb 1-1: error -22 when submitting rx urb usb 1-1: Failed to submit rx cmd ar5523: probe of 1-1:64.243 failed with error -22 usb 1-1: USB disconnect, device number 3 usb 1-1: new high-speed USB device number 4 using dummy_hcd usb 1-1: Using ep0 maxpacket: 32 usb 1-1: config 64 has an invalid interface number: 245 but max is 2 usb 1-1: config 64 has an invalid interface number: 155 but max is 2 usb 1-1: config 64 contains an unexpected descriptor of type 0x2, skipping usb 1-1: config 64 contains an unexpected descriptor of type 0x1, skipping usb 1-1: config 64 has an invalid interface number: 243 but max is 2 usb 1-1: config 64 has no interface number 0 usb 1-1: config 64 has no interface number 1 usb 1-1: config 64 has no interface number 2 usb 1-1: config 64 interface 245 altsetting 7 endpoint 0x8 has invalid maxpacket 1024, setting to 64 usb 1-1: config 64 interface 245 altsetting 7 endpoint 0x3 has invalid maxpacket 1023, setting to 64 usb 1-1: config 64 interface 245 altsetting 7 has an invalid endpoint descriptor of length 2, skipping usb 1-1: config 64 interface 245 altsetting 7 has 5 endpoint descriptors, different from the interface descriptor's value: 4 usb 1-1: config 64 interface 155 altsetting 1 endpoint 0x9 has invalid maxpacket 512, setting to 64 usb 1-1: config 64 interface 155 altsetting 1 has an invalid endpoint with address 0x0, skipping usb 1-1: config 64 interface 155 altsetting 1 has an invalid endpoint with address 0x0, skipping usb 1-1: config 64 interface 155 altsetting 1 endpoint 0xA has invalid maxpacket 72, setting to 64 usb 1-1: config 64 interface 155 altsetting 1 endpoint 0x81 has an invalid bInterval 139, changing to 11 usb 1-1: config 64 interface 155 altsetting 1 endpoint 0x81 has invalid maxpacket 18251, setting to 1024 usb 1-1: config 64 interface 155 altsetting 1 has a duplicate endpoint with address 0xA, skipping usb 1-1: config 64 interface 155 altsetting 1 has an invalid endpoint with address 0x0, skipping usb 1-1: config 64 interface 155 altsetting 1 has 9 endpoint descriptors, different from the interface descriptor's value: 8 usb 1-1: config 64 interface 243 altsetting 31 endpoint 0xF has invalid maxpacket 512, setting to 64 usb 1-1: config 64 interface 245 has no altsetting 0 usb 1-1: config 64 interface 155 has no altsetting 0 usb 1-1: config 64 interface 243 has no altsetting 0 usb 1-1: New USB device found, idVendor=083a, idProduct=4506, bcdDevice=6d.7d usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 usb 1-1: Product: syz usb 1-1: Manufacturer: syz usb 1-1: SerialNumber: syz ------------[ cut here ]------------ usb 1-1: BOGUS urb xfer, pipe 3 != type 1 WARNING: CPU: 1 PID: 3748 at drivers/usb/core/urb.c:505 usb_submit_urb+0x594/0x9b4 drivers/usb/core/urb.c:504 Modules linked in: CPU: 1 PID: 3748 Comm: kworker/1:3 Tainted: G W 6.1.62-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 Workqueue: usb_hub_wq hub_event pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : usb_submit_urb+0x594/0x9b4 drivers/usb/core/urb.c:504 lr : usb_submit_urb+0x594/0x9b4 drivers/usb/core/urb.c:504 sp : ffff8000129d3430 x29: ffff8000129d3440 x28: ffff0000ca11a800 x27: ffff0000c52da35c x26: ffff80000d20ad34 x25: ffff0000ca11a8a8 x24: ffff0000c9bbe700 x23: ffff80000d235b0c x22: 0000000000000400 x21: 0000000000000003 x20: 0000000000000a20 x19: ffff0000c52da300 x18: 0000000000000000 x17: 000000000000000a x16: 0000000000000002 x15: 0000000000000000 x14: 0000000000000000 x13: 205d383437335420 x12: ffff80000eab2000 x11: ff808000080e0e64 x10: 0000000000000000 x9 : dca9c63ff8a09800 x8 : dca9c63ff8a09800 x7 : 0000000000000000 x6 : ffff80000bffb55c x5 : 0000000000000000 x4 : 0000000000000080 x3 : 0000000000000000 x2 : 0000000000000000 x1 : 0000000100000000 x0 : 0000000000000000 Call trace: usb_submit_urb+0x594/0x9b4 drivers/usb/core/urb.c:504 ar5523_submit_rx_cmd+0x74/0xf4 drivers/net/wireless/ath/ar5523/ar5523.c:212 ar5523_probe+0x41c/0xbb8 drivers/net/wireless/ath/ar5523/ar5523.c:1652 usb_probe_interface+0x2fc/0x4ac drivers/usb/core/driver.c:396 really_probe+0x218/0x61c drivers/base/dd.c:639 __driver_probe_device+0xe8/0x1fc drivers/base/dd.c:785 driver_probe_device+0x54/0x2f4 drivers/base/dd.c:815 __device_attach_driver+0x19c/0x2e4 drivers/base/dd.c:943 bus_for_each_drv+0xb4/0x124 drivers/base/bus.c:427 __device_attach+0x148/0x270 drivers/base/dd.c:1015 device_initial_probe+0x24/0x34 drivers/base/dd.c:1064 bus_probe_device+0x5c/0xf0 drivers/base/bus.c:487 device_add+0x754/0x968 drivers/base/core.c:3664 usb_set_configuration+0xb0c/0xd18 drivers/usb/core/message.c:2165 usb_generic_driver_probe+0x5c/0xe8 drivers/usb/core/generic.c:238 usb_probe_device+0xd0/0x180 drivers/usb/core/driver.c:293 really_probe+0x218/0x61c drivers/base/dd.c:639 __driver_probe_device+0xe8/0x1fc drivers/base/dd.c:785 driver_probe_device+0x54/0x2f4 drivers/base/dd.c:815 __device_attach_driver+0x19c/0x2e4 drivers/base/dd.c:943 bus_for_each_drv+0xb4/0x124 drivers/base/bus.c:427 __device_attach+0x148/0x270 drivers/base/dd.c:1015 device_initial_probe+0x24/0x34 drivers/base/dd.c:1064 bus_probe_device+0x5c/0xf0 drivers/base/bus.c:487 device_add+0x754/0x968 drivers/base/core.c:3664 usb_new_device+0x428/0x8a8 drivers/usb/core/hub.c:2583 hub_port_connect drivers/usb/core/hub.c:5434 [inline] hub_port_connect_change drivers/usb/core/hub.c:5574 [inline] port_event drivers/usb/core/hub.c:5730 [inline] hub_event+0x1728/0x258c drivers/usb/core/hub.c:5812 process_one_work+0x2d4/0x4e0 kernel/workqueue.c:2292 process_scheduled_works kernel/workqueue.c:2355 [inline] worker_thread+0x42c/0x5f8 kernel/workqueue.c:2441 kthread+0x120/0x14c kernel/kthread.c:376 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:864 ---[ end trace 0000000000000000 ]--- usb 1-1: error -22 when submitting rx urb usb 1-1: Failed to submit rx cmd ar5523: probe of 1-1:64.245 failed with error -22 ------------[ cut here ]------------ usb 1-1: BOGUS urb xfer, pipe 3 != type 1 WARNING: CPU: 1 PID: 3748 at drivers/usb/core/urb.c:505 usb_submit_urb+0x594/0x9b4 drivers/usb/core/urb.c:504 Modules linked in: CPU: 1 PID: 3748 Comm: kworker/1:3 Tainted: G W 6.1.62-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 Workqueue: usb_hub_wq hub_event pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : usb_submit_urb+0x594/0x9b4 drivers/usb/core/urb.c:504 lr : usb_submit_urb+0x594/0x9b4 drivers/usb/core/urb.c:504 sp : ffff8000129d3430 x29: ffff8000129d3440 x28: ffff0000ca11a800 x27: ffff0000cc23835c x26: ffff80000d20ad34 x25: ffff0000ca11a8a8 x24: ffff0000c9bbe700 x23: ffff80000d235b0c x22: 0000000000000400 x21: 0000000000000003 x20: 0000000000000a20 x19: ffff0000cc238300 x18: ffff80000c03d2c4 x17: 0000000000050000 x16: 0000000000000002 x15: 0000000000000000 x14: 0000000000000000 x13: 205d383437335420 x12: ffff80000eab2000 x11: ff808000080e0e64 x10: 0000000000000000 x9 : dca9c63ff8a09800 x8 : dca9c63ff8a09800 x7 : 0000000000000000 x6 : ffff80000bffb55c x5 : 0000000000000000 x4 : 0000000000000080 x3 : 0000000000000000 x2 : 0000000000000000 x1 : 0000000100000000 x0 : 0000000000000000 Call trace: usb_submit_urb+0x594/0x9b4 drivers/usb/core/urb.c:504 ar5523_submit_rx_cmd+0x74/0xf4 drivers/net/wireless/ath/ar5523/ar5523.c:212 ar5523_probe+0x41c/0xbb8 drivers/net/wireless/ath/ar5523/ar5523.c:1652 usb_probe_interface+0x2fc/0x4ac drivers/usb/core/driver.c:396 really_probe+0x218/0x61c drivers/base/dd.c:639 __driver_probe_device+0xe8/0x1fc drivers/base/dd.c:785 driver_probe_device+0x54/0x2f4 drivers/base/dd.c:815 __device_attach_driver+0x19c/0x2e4 drivers/base/dd.c:943 bus_for_each_drv+0xb4/0x124 drivers/base/bus.c:427 __device_attach+0x148/0x270 drivers/base/dd.c:1015 device_initial_probe+0x24/0x34 drivers/base/dd.c:1064 bus_probe_device+0x5c/0xf0 drivers/base/bus.c:487 device_add+0x754/0x968 drivers/base/core.c:3664 usb_set_configuration+0xb0c/0xd18 drivers/usb/core/message.c:2165 usb_generic_driver_probe+0x5c/0xe8 drivers/usb/core/generic.c:238 usb_probe_device+0xd0/0x180 drivers/usb/core/driver.c:293 really_probe+0x218/0x61c drivers/base/dd.c:639 __driver_probe_device+0xe8/0x1fc drivers/base/dd.c:785 driver_probe_device+0x54/0x2f4 drivers/base/dd.c:815 __device_attach_driver+0x19c/0x2e4 drivers/base/dd.c:943 bus_for_each_drv+0xb4/0x124 drivers/base/bus.c:427 __device_attach+0x148/0x270 drivers/base/dd.c:1015 device_initial_probe+0x24/0x34 drivers/base/dd.c:1064 bus_probe_device+0x5c/0xf0 drivers/base/bus.c:487 device_add+0x754/0x968 drivers/base/core.c:3664 usb_new_device+0x428/0x8a8 drivers/usb/core/hub.c:2583 hub_port_connect drivers/usb/core/hub.c:5434 [inline] hub_port_connect_change drivers/usb/core/hub.c:5574 [inline] port_event drivers/usb/core/hub.c:5730 [inline] hub_event+0x1728/0x258c drivers/usb/core/hub.c:5812 process_one_work+0x2d4/0x4e0 kernel/workqueue.c:2292 process_scheduled_works kernel/workqueue.c:2355 [inline] worker_thread+0x42c/0x5f8 kernel/workqueue.c:2441 kthread+0x120/0x14c kernel/kthread.c:376 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:864 ---[ end trace 0000000000000000 ]--- usb 1-1: error -22 when submitting rx urb usb 1-1: Failed to submit rx cmd ar5523: probe of 1-1:64.155 failed with error -22 ------------[ cut here ]------------ usb 1-1: BOGUS urb xfer, pipe 3 != type 1 WARNING: CPU: 1 PID: 3748 at drivers/usb/core/urb.c:505 usb_submit_urb+0x594/0x9b4 drivers/usb/core/urb.c:504 Modules linked in: CPU: 1 PID: 3748 Comm: kworker/1:3 Tainted: G W 6.1.62-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 Workqueue: usb_hub_wq hub_event pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : usb_submit_urb+0x594/0x9b4 drivers/usb/core/urb.c:504 lr : usb_submit_urb+0x594/0x9b4 drivers/usb/core/urb.c:504 sp : ffff8000129d3430 x29: ffff8000129d3440 x28: ffff0000ca11a800 x27: ffff0000c52da05c x26: ffff80000d20ad34 x25: ffff0000ca11a8a8 x24: ffff0000c9bbe700 x23: ffff80000d235b0c x22: 0000000000000400 x21: 0000000000000003 x20: 0000000000000a20 x19: ffff0000c52da000 x18: 0000000000000000 x17: 0000000000000000 x16: 0000000000000002 x15: 0000000000000000 x14: 0000000000000000 x13: 205d383437335420 x12: ffff80000eab2000 x11: ff808000080e0e64 x10: 0000000000000000 x9 : dca9c63ff8a09800 x8 : dca9c63ff8a09800 x7 : 0000000000000000 x6 : ffff80000bffb55c x5 : 0000000000000000 x4 : 0000000000000080 x3 : 0000000000000000 x2 : 0000000000000000 x1 : 0000000100000000 x0 : 0000000000000000 Call trace: usb_submit_urb+0x594/0x9b4 drivers/usb/core/urb.c:504 ar5523_submit_rx_cmd+0x74/0xf4 drivers/net/wireless/ath/ar5523/ar5523.c:212 ar5523_probe+0x41c/0xbb8 drivers/net/wireless/ath/ar5523/ar5523.c:1652 usb_probe_interface+0x2fc/0x4ac drivers/usb/core/driver.c:396 really_probe+0x218/0x61c drivers/base/dd.c:639 __driver_probe_device+0xe8/0x1fc drivers/base/dd.c:785 driver_probe_device+0x54/0x2f4 drivers/base/dd.c:815 __device_attach_driver+0x19c/0x2e4 drivers/base/dd.c:943 bus_for_each_drv+0xb4/0x124 drivers/base/bus.c:427 __device_attach+0x148/0x270 drivers/base/dd.c:1015 device_initial_probe+0x24/0x34 drivers/base/dd.c:1064 bus_probe_device+0x5c/0xf0 drivers/base/bus.c:487 device_add+0x754/0x968 drivers/base/core.c:3664 usb_set_configuration+0xb0c/0xd18 drivers/usb/core/message.c:2165 usb_generic_driver_probe+0x5c/0xe8 drivers/usb/core/generic.c:238 usb_probe_device+0xd0/0x180 drivers/usb/core/driver.c:293 really_probe+0x218/0x61c drivers/base/dd.c:639 __driver_probe_device+0xe8/0x1fc drivers/base/dd.c:785 driver_probe_device+0x54/0x2f4 drivers/base/dd.c:815 __device_attach_driver+0x19c/0x2e4 drivers/base/dd.c:943 bus_for_each_drv+0xb4/0x124 drivers/base/bus.c:427 __device_attach+0x148/0x270 drivers/base/dd.c:1015 device_initial_probe+0x24/0x34 drivers/base/dd.c:1064 bus_probe_device+0x5c/0xf0 drivers/base/bus.c:487 device_add+0x754/0x968 drivers/base/core.c:3664 usb_new_device+0x428/0x8a8 drivers/usb/core/hub.c:2583 hub_port_connect drivers/usb/core/hub.c:5434 [inline] hub_port_connect_change drivers/usb/core/hub.c:5574 [inline] port_event drivers/usb/core/hub.c:5730 [inline] hub_event+0x1728/0x258c drivers/usb/core/hub.c:5812 process_one_work+0x2d4/0x4e0 kernel/workqueue.c:2292 process_scheduled_works kernel/workqueue.c:2355 [inline] worker_thread+0x42c/0x5f8 kernel/workqueue.c:2441 kthread+0x120/0x14c kernel/kthread.c:376 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:864 ---[ end trace 0000000000000000 ]--- usb 1-1: error -22 when submitting rx urb usb 1-1: Failed to submit rx cmd ar5523: probe of 1-1:64.243 failed with error -22 usb 1-1: USB disconnect, device number 4 usb 1-1: new high-speed USB device number 5 using dummy_hcd usb 1-1: Using ep0 maxpacket: 32 usb 1-1: config 64 has an invalid interface number: 245 but max is 2 usb 1-1: config 64 has an invalid interface number: 155 but max is 2 usb 1-1: config 64 contains an unexpected descriptor of type 0x2, skipping usb 1-1: config 64 contains an unexpected descriptor of type 0x1, skipping usb 1-1: config 64 has an invalid interface number: 243 but max is 2 usb 1-1: config 64 has no interface number 0 usb 1-1: config 64 has no interface number 1 usb 1-1: config 64 has no interface number 2 usb 1-1: config 64 interface 245 altsetting 7 endpoint 0x8 has invalid maxpacket 1024, setting to 64 usb 1-1: config 64 interface 245 altsetting 7 endpoint 0x3 has invalid maxpacket 1023, setting to 64 usb 1-1: config 64 interface 245 altsetting 7 has an invalid endpoint descriptor of length 2, skipping usb 1-1: config 64 interface 245 altsetting 7 has 5 endpoint descriptors, different from the interface descriptor's value: 4 usb 1-1: config 64 interface 155 altsetting 1 endpoint 0x9 has invalid maxpacket 512, setting to 64 usb 1-1: config 64 interface 155 altsetting 1 has an invalid endpoint with address 0x0, skipping usb 1-1: config 64 interface 155 altsetting 1 has an invalid endpoint with address 0x0, skipping usb 1-1: config 64 interface 155 altsetting 1 endpoint 0xA has invalid maxpacket 72, setting to 64 usb 1-1: config 64 interface 155 altsetting 1 endpoint 0x81 has an invalid bInterval 139, changing to 11 usb 1-1: config 64 interface 155 altsetting 1 endpoint 0x81 has invalid maxpacket 18251, setting to 1024 usb 1-1: config 64 interface 155 altsetting 1 has a duplicate endpoint with address 0xA, skipping usb 1-1: config 64 interface 155 altsetting 1 has an invalid endpoint with address 0x0, skipping usb 1-1: config 64 interface 155 altsetting 1 has 9 endpoint descriptors, different from the interface descriptor's value: 8 usb 1-1: config 64 interface 243 altsetting 31 endpoint 0xF has invalid maxpacket 512, setting to 64 usb 1-1: config 64 interface 245 has no altsetting 0 usb 1-1: config 64 interface 155 has no altsetting 0 usb 1-1: config 64 interface 243 has no altsetting 0 usb 1-1: New USB device found, idVendor=083a, idProduct=4506, bcdDevice=6d.7d usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 usb 1-1: Product: syz usb 1-1: Manufacturer: syz usb 1-1: SerialNumber: syz ------------[ cut here ]------------ usb 1-1: BOGUS urb xfer, pipe 3 != type 1 WARNING: CPU: 1 PID: 3748 at drivers/usb/core/urb.c:505 usb_submit_urb+0x594/0x9b4 drivers/usb/core/urb.c:504 Modules linked in: CPU: 1 PID: 3748 Comm: kworker/1:3 Tainted: G W 6.1.62-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 Workqueue: usb_hub_wq hub_event pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : usb_submit_urb+0x594/0x9b4 drivers/usb/core/urb.c:504 lr : usb_submit_urb+0x594/0x9b4 drivers/usb/core/urb.c:504 sp : ffff8000129d3430 x29: ffff8000129d3440 x28: ffff0000ca11a800 x27: ffff0000cc23815c x26: ffff80000d20ad34 x25: ffff0000ca11a8a8 x24: ffff0000ca3e8080 x23: ffff80000d235b0c x22: 0000000000000400 x21: 0000000000000003 x20: 0000000000000a20 x19: ffff0000cc238100 x18: 0000000000000000 x17: 0000000000000000 x16: 0000000000000002 x15: 0000000000000000 x14: 0000000000000000 x13: 205d383437335420 x12: ffff80000eab2000 x11: ff808000080e0e64 x10: 0000000000000000 x9 : dca9c63ff8a09800 x8 : dca9c63ff8a09800 x7 : 0000000000000000 x6 : ffff80000bffb55c x5 : 0000000000000000 x4 : 0000000000000080 x3 : 0000000000000000 x2 : 0000000000000000 x1 : 0000000100000000 x0 : 0000000000000000 Call trace: usb_submit_urb+0x594/0x9b4 drivers/usb/core/urb.c:504 ar5523_submit_rx_cmd+0x74/0xf4 drivers/net/wireless/ath/ar5523/ar5523.c:212 ar5523_probe+0x41c/0xbb8 drivers/net/wireless/ath/ar5523/ar5523.c:1652 usb_probe_interface+0x2fc/0x4ac drivers/usb/core/driver.c:396 really_probe+0x218/0x61c drivers/base/dd.c:639 __driver_probe_device+0xe8/0x1fc drivers/base/dd.c:785 driver_probe_device+0x54/0x2f4 drivers/base/dd.c:815 __device_attach_driver+0x19c/0x2e4 drivers/base/dd.c:943 bus_for_each_drv+0xb4/0x124 drivers/base/bus.c:427 __device_attach+0x148/0x270 drivers/base/dd.c:1015 device_initial_probe+0x24/0x34 drivers/base/dd.c:1064 bus_probe_device+0x5c/0xf0 drivers/base/bus.c:487 device_add+0x754/0x968 drivers/base/core.c:3664 usb_set_configuration+0xb0c/0xd18 drivers/usb/core/message.c:2165 usb_generic_driver_probe+0x5c/0xe8 drivers/usb/core/generic.c:238 usb_probe_device+0xd0/0x180 drivers/usb/core/driver.c:293 really_probe+0x218/0x61c drivers/base/dd.c:639 __driver_probe_device+0xe8/0x1fc drivers/base/dd.c:785 driver_probe_device+0x54/0x2f4 drivers/base/dd.c:815 __device_attach_driver+0x19c/0x2e4 drivers/base/dd.c:943 bus_for_each_drv+0xb4/0x124 drivers/base/bus.c:427 __device_attach+0x148/0x270 drivers/base/dd.c:1015 device_initial_probe+0x24/0x34 drivers/base/dd.c:1064 bus_probe_device+0x5c/0xf0 drivers/base/bus.c:487 device_add+0x754/0x968 drivers/base/core.c:3664 usb_new_device+0x428/0x8a8 drivers/usb/core/hub.c:2583 hub_port_connect drivers/usb/core/hub.c:5434 [inline] hub_port_connect_change drivers/usb/core/hub.c:5574 [inline] port_event drivers/usb/core/hub.c:5730 [inline] hub_event+0x1728/0x258c drivers/usb/core/hub.c:5812 process_one_work+0x2d4/0x4e0 kernel/workqueue.c:2292 process_scheduled_works kernel/workqueue.c:2355 [inline] worker_thread+0x42c/0x5f8 kernel/workqueue.c:2441 kthread+0x120/0x14c kernel/kthread.c:376 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:864 ---[ end trace 0000000000000000 ]--- usb 1-1: error -22 when submitting rx urb usb 1-1: Failed to submit rx cmd ar5523: probe of 1-1:64.245 failed with error -22 ------------[ cut here ]------------ usb 1-1: BOGUS urb xfer, pipe 3 != type 1 WARNING: CPU: 1 PID: 3748 at drivers/usb/core/urb.c:505 usb_submit_urb+0x594/0x9b4 drivers/usb/core/urb.c:504 Modules linked in: CPU: 1 PID: 3748 Comm: kworker/1:3 Tainted: G W 6.1.62-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 Workqueue: usb_hub_wq hub_event pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : usb_submit_urb+0x594/0x9b4 drivers/usb/core/urb.c:504 lr : usb_submit_urb+0x594/0x9b4 drivers/usb/core/urb.c:504 sp : ffff8000129d3430 x29: ffff8000129d3440 x28: ffff0000ca11a800 x27: ffff0000c52da05c x26: ffff80000d20ad34 x25: ffff0000ca11a8a8 x24: ffff0000ca3e8080 x23: ffff80000d235b0c x22: 0000000000000400 x21: 0000000000000003 x20: 0000000000000a20 x19: ffff0000c52da000 x18: ffff80000c03d2c4 x17: 0000000000000000 x16: 0000000000000002 x15: 0000000000000000 x14: 0000000000000000 x13: 205d383437335420 x12: ffff80000eab2000 x11: ff808000080e0e64 x10: 0000000000000000 x9 : dca9c63ff8a09800 x8 : dca9c63ff8a09800 x7 : 0000000000000000 x6 : ffff80000bffb55c x5 : 0000000000000000 x4 : 0000000000000080 x3 : 0000000000000000 x2 : 0000000000000000 x1 : 0000000100000000 x0 : 0000000000000000 Call trace: usb_submit_urb+0x594/0x9b4 drivers/usb/core/urb.c:504 ar5523_submit_rx_cmd+0x74/0xf4 drivers/net/wireless/ath/ar5523/ar5523.c:212 ar5523_probe+0x41c/0xbb8 drivers/net/wireless/ath/ar5523/ar5523.c:1652 usb_probe_interface+0x2fc/0x4ac drivers/usb/core/driver.c:396 really_probe+0x218/0x61c drivers/base/dd.c:639 __driver_probe_device+0xe8/0x1fc drivers/base/dd.c:785 driver_probe_device+0x54/0x2f4 drivers/base/dd.c:815 __device_attach_driver+0x19c/0x2e4 drivers/base/dd.c:943 bus_for_each_drv+0xb4/0x124 drivers/base/bus.c:427 __device_attach+0x148/0x270 drivers/base/dd.c:1015 device_initial_probe+0x24/0x34 drivers/base/dd.c:1064 bus_probe_device+0x5c/0xf0 drivers/base/bus.c:487 device_add+0x754/0x968 drivers/base/core.c:3664 usb_set_configuration+0xb0c/0xd18 drivers/usb/core/message.c:2165 usb_generic_driver_probe+0x5c/0xe8 drivers/usb/core/generic.c:238 usb_probe_device+0xd0/0x180 drivers/usb/core/driver.c:293 really_probe+0x218/0x61c drivers/base/dd.c:639 __driver_probe_device+0xe8/0x1fc drivers/base/dd.c:785 driver_probe_device+0x54/0x2f4 drivers/base/dd.c:815 __device_attach_driver+0x19c/0x2e4 drivers/base/dd.c:943 bus_for_each_drv+0xb4/0x124 drivers/base/bus.c:427 __device_attach+0x148/0x270 drivers/base/dd.c:1015 device_initial_probe+0x24/0x34 drivers/base/dd.c:1064 bus_probe_device+0x5c/0xf0 drivers/base/bus.c:487 device_add+0x754/0x968 drivers/base/core.c:3664 usb_new_device+0x428/0x8a8 drivers/usb/core/hub.c:2583 hub_port_connect drivers/usb/core/hub.c:5434 [inline] hub_port_connect_change drivers/usb/core/hub.c:5574 [inline] port_event drivers/usb/core/hub.c:5730 [inline] hub_event+0x1728/0x258c drivers/usb/core/hub.c:5812 process_one_work+0x2d4/0x4e0 kernel/workqueue.c:2292 process_scheduled_works kernel/workqueue.c:2355 [inline] worker_thread+0x42c/0x5f8 kernel/workqueue.c:2441 kthread+0x120/0x14c kernel/kthread.c:376 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:864 ---[ end trace 0000000000000000 ]--- usb 1-1: error -22 when submitting rx urb usb 1-1: Failed to submit rx cmd ar5523: probe of 1-1:64.155 failed with error -22 ------------[ cut here ]------------ usb 1-1: BOGUS urb xfer, pipe 3 != type 1 WARNING: CPU: 1 PID: 3748 at drivers/usb/core/urb.c:505 usb_submit_urb+0x594/0x9b4 drivers/usb/core/urb.c:504 Modules linked in: CPU: 1 PID: 3748 Comm: kworker/1:3 Tainted: G W 6.1.62-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 Workqueue: usb_hub_wq hub_event pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : usb_submit_urb+0x594/0x9b4 drivers/usb/core/urb.c:504 lr : usb_submit_urb+0x594/0x9b4 drivers/usb/core/urb.c:504 sp : ffff8000129d3430 x29: ffff8000129d3440 x28: ffff0000ca11a800 x27: ffff0000cc238f5c x26: ffff80000d20ad34 x25: ffff0000ca11a8a8 x24: ffff0000ca3e8080 x23: ffff80000d235b0c x22: 0000000000000400 x21: 0000000000000003 x20: 0000000000000a20 x19: ffff0000cc238f00 x18: 0000000000000000 x17: 0000000000000001 x16: 0000000000000002 x15: 0000000000000000 x14: 0000000000000000 x13: 205d383437335420 x12: ffff80000eab2000 x11: ff808000080e0e64 x10: 0000000000000000 x9 : dca9c63ff8a09800 x8 : dca9c63ff8a09800 x7 : 0000000000000000 x6 : ffff80000bffb55c x5 : 0000000000000000 x4 : 0000000000000080 x3 : 0000000000000000 x2 : 0000000000000000 x1 : 0000000100000000 x0 : 0000000000000000 Call trace: usb_submit_urb+0x594/0x9b4 drivers/usb/core/urb.c:504 ar5523_submit_rx_cmd+0x74/0xf4 drivers/net/wireless/ath/ar5523/ar5523.c:212 ar5523_probe+0x41c/0xbb8 drivers/net/wireless/ath/ar5523/ar5523.c:1652 usb_probe_interface+0x2fc/0x4ac drivers/usb/core/driver.c:396 really_probe+0x218/0x61c drivers/base/dd.c:639 __driver_probe_device+0xe8/0x1fc drivers/base/dd.c:785 driver_probe_device+0x54/0x2f4 drivers/base/dd.c:815 __device_attach_driver+0x19c/0x2e4 drivers/base/dd.c:943 bus_for_each_drv+0xb4/0x124 drivers/base/bus.c:427 __device_attach+0x148/0x270 drivers/base/dd.c:1015 device_initial_probe+0x24/0x34 drivers/base/dd.c:1064 bus_probe_device+0x5c/0xf0 drivers/base/bus.c:487 device_add+0x754/0x968 drivers/base/core.c:3664 usb_set_configuration+0xb0c/0xd18 drivers/usb/core/message.c:2165 usb_generic_driver_probe+0x5c/0xe8 drivers/usb/core/generic.c:238 usb_probe_device+0xd0/0x180 drivers/usb/core/driver.c:293 really_probe+0x218/0x61c drivers/base/dd.c:639 __driver_probe_device+0xe8/0x1fc drivers/base/dd.c:785 driver_probe_device+0x54/0x2f4 drivers/base/dd.c:815 __device_attach_driver+0x19c/0x2e4 drivers/base/dd.c:943 bus_for_each_drv+0xb4/0x124 drivers/base/bus.c:427 __device_attach+0x148/0x270 drivers/base/dd.c:1015 device_initial_probe+0x24/0x34 drivers/base/dd.c:1064 bus_probe_device+0x5c/0xf0 drivers/base/bus.c:487 device_add+0x754/0x968 drivers/base/core.c:3664 usb_new_device+0x428/0x8a8 drivers/usb/core/hub.c:2583 hub_port_connect drivers/usb/core/hub.c:5434 [inline] hub_port_connect_change drivers/usb/core/hub.c:5574 [inline] port_event drivers/usb/core/hub.c:5730 [inline] hub_event+0x1728/0x258c drivers/usb/core/hub.c:5812 process_one_work+0x2d4/0x4e0 kernel/workqueue.c:2292 process_scheduled_works kernel/workqueue.c:2355 [inline] worker_thread+0x42c/0x5f8 kernel/workqueue.c:2441 kthread+0x120/0x14c kernel/kthread.c:376 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:864 ---[ end trace 0000000000000000 ]--- usb 1-1: error -22 when submitting rx urb usb 1-1: Failed to submit rx cmd ar5523: probe of 1-1:64.243 failed with error -22 usb 1-1: USB disconnect, device number 5 usb 1-1: new high-speed USB device number 6 using dummy_hcd usb 1-1: Using ep0 maxpacket: 32 usb 1-1: config 64 has an invalid interface number: 245 but max is 2 usb 1-1: config 64 has an invalid interface number: 155 but max is 2 usb 1-1: config 64 contains an unexpected descriptor of type 0x2, skipping usb 1-1: config 64 contains an unexpected descriptor of type 0x1, skipping usb 1-1: config 64 has an invalid interface number: 243 but max is 2 usb 1-1: config 64 has no interface number 0 usb 1-1: config 64 has no interface number 1 usb 1-1: config 64 has no interface number 2 usb 1-1: config 64 interface 245 altsetting 7 endpoint 0x8 has invalid maxpacket 1024, setting to 64 usb 1-1: config 64 interface 245 altsetting 7 endpoint 0x3 has invalid maxpacket 1023, setting to 64 usb 1-1: config 64 interface 245 altsetting 7 has an invalid endpoint descriptor of length 2, skipping usb 1-1: config 64 interface 245 altsetting 7 has 5 endpoint descriptors, different from the interface descriptor's value: 4 usb 1-1: config 64 interface 155 altsetting 1 endpoint 0x9 has invalid maxpacket 512, setting to 64 usb 1-1: config 64 interface 155 altsetting 1 has an invalid endpoint with address 0x0, skipping usb 1-1: config 64 interface 155 altsetting 1 has an invalid endpoint with address 0x0, skipping usb 1-1: config 64 interface 155 altsetting 1 endpoint 0xA has invalid maxpacket 72, setting to 64 usb 1-1: config 64 interface 155 altsetting 1 endpoint 0x81 has an invalid bInterval 139, changing to 11 usb 1-1: config 64 interface 155 altsetting 1 endpoint 0x81 has invalid maxpacket 18251, setting to 1024 usb 1-1: config 64 interface 155 altsetting 1 has a duplicate endpoint with address 0xA, skipping usb 1-1: config 64 interface 155 altsetting 1 has an invalid endpoint with address 0x0, skipping usb 1-1: config 64 interface 155 altsetting 1 has 9 endpoint descriptors, different from the interface descriptor's value: 8 usb 1-1: config 64 interface 243 altsetting 31 endpoint 0xF has invalid maxpacket 512, setting to 64 usb 1-1: config 64 interface 245 has no altsetting 0 usb 1-1: config 64 interface 155 has no altsetting 0 usb 1-1: config 64 interface 243 has no altsetting 0 usb 1-1: New USB device found, idVendor=083a, idProduct=4506, bcdDevice=6d.7d usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 usb 1-1: Product: syz usb 1-1: Manufacturer: syz usb 1-1: SerialNumber: syz ------------[ cut here ]------------ usb 1-1: BOGUS urb xfer, pipe 3 != type 1 WARNING: CPU: 1 PID: 3748 at drivers/usb/core/urb.c:505 usb_submit_urb+0x594/0x9b4 drivers/usb/core/urb.c:504 Modules linked in: CPU: 1 PID: 3748 Comm: kworker/1:3 Tainted: G W 6.1.62-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 Workqueue: usb_hub_wq hub_event pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : usb_submit_urb+0x594/0x9b4 drivers/usb/core/urb.c:504 lr : usb_submit_urb+0x594/0x9b4 drivers/usb/core/urb.c:504 sp : ffff8000129d3430 x29: ffff8000129d3440 x28: ffff0000ca11a800 x27: ffff0000c52da45c x26: ffff80000d20ad34 x25: ffff0000ca11a8a8 x24: ffff0000ca3e8680 x23: ffff80000d235b0c x22: 0000000000000400 x21: 0000000000000003 x20: 0000000000000a20 x19: ffff0000c52da400 x18: ffff80000c03d2c4 x17: 0000000000000000 x16: 0000000000000002 x15: 0000000000000000 x14: 0000000000000000 x13: 205d383437335420 x12: ffff80000eab2000 x11: ff808000080e0e64 x10: 0000000000000000 x9 : dca9c63ff8a09800 x8 : dca9c63ff8a09800 x7 : 0000000000000000 x6 : ffff80000bffb55c x5 : 0000000000000000 x4 : 0000000000000080 x3 : 0000000000000000 x2 : 0000000000000000 x1 : 0000000100000000 x0 : 0000000000000000 Call trace: usb_submit_urb+0x594/0x9b4 drivers/usb/core/urb.c:504 ar5523_submit_rx_cmd+0x74/0xf4 drivers/net/wireless/ath/ar5523/ar5523.c:212 ar5523_probe+0x41c/0xbb8 drivers/net/wireless/ath/ar5523/ar5523.c:1652 usb_probe_interface+0x2fc/0x4ac drivers/usb/core/driver.c:396 really_probe+0x218/0x61c drivers/base/dd.c:639 __driver_probe_device+0xe8/0x1fc drivers/base/dd.c:785 driver_probe_device+0x54/0x2f4 drivers/base/dd.c:815 __device_attach_driver+0x19c/0x2e4 drivers/base/dd.c:943 bus_for_each_drv+0xb4/0x124 drivers/base/bus.c:427 __device_attach+0x148/0x270 drivers/base/dd.c:1015 device_initial_probe+0x24/0x34 drivers/base/dd.c:1064 bus_probe_device+0x5c/0xf0 drivers/base/bus.c:487 device_add+0x754/0x968 drivers/base/core.c:3664 usb_set_configuration+0xb0c/0xd18 drivers/usb/core/message.c:2165 usb_generic_driver_probe+0x5c/0xe8 drivers/usb/core/generic.c:238 usb_probe_device+0xd0/0x180 drivers/usb/core/driver.c:293 really_probe+0x218/0x61c drivers/base/dd.c:639 __driver_probe_device+0xe8/0x1fc drivers/base/dd.c:785 driver_probe_device+0x54/0x2f4 drivers/base/dd.c:815 __device_attach_driver+0x19c/0x2e4 drivers/base/dd.c:943 bus_for_each_drv+0xb4/0x124 drivers/base/bus.c:427 __device_attach+0x148/0x270 drivers/base/dd.c:1015 device_initial_probe+0x24/0x34 drivers/base/dd.c:1064 bus_probe_device+0x5c/0xf0 drivers/base/bus.c:487 device_add+0x754/0x968 drivers/base/core.c:3664 usb_new_device+0x428/0x8a8 drivers/usb/core/hub.c:2583 hub_port_connect drivers/usb/core/hub.c:5434 [inline] hub_port_connect_change drivers/usb/core/hub.c:5574 [inline] port_event drivers/usb/core/hub.c:5730 [inline] hub_event+0x1728/0x258c drivers/usb/core/hub.c:5812 process_one_work+0x2d4/0x4e0 kernel/workqueue.c:2292 process_scheduled_works kernel/workqueue.c:2355 [inline] worker_thread+0x42c/0x5f8 kernel/workqueue.c:2441 kthread+0x120/0x14c kernel/kthread.c:376 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:864 ---[ end trace 0000000000000000 ]--- usb 1-1: error -22 when submitting rx urb usb 1-1: Failed to submit rx cmd ar5523: probe of 1-1:64.245 failed with error -22 ------------[ cut here ]------------ usb 1-1: BOGUS urb xfer, pipe 3 != type 1 WARNING: CPU: 1 PID: 3748 at drivers/usb/core/urb.c:505 usb_submit_urb+0x594/0x9b4 drivers/usb/core/urb.c:504 Modules linked in: CPU: 1 PID: 3748 Comm: kworker/1:3 Tainted: G W 6.1.62-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 Workqueue: usb_hub_wq hub_event pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : usb_submit_urb+0x594/0x9b4 drivers/usb/core/urb.c:504 lr : usb_submit_urb+0x594/0x9b4 drivers/usb/core/urb.c:504 sp : ffff8000129d3430 x29: ffff8000129d3440 x28: ffff0000ca11a800 x27: ffff0000cc23805c x26: ffff80000d20ad34 x25: ffff0000ca11a8a8 x24: ffff0000ca3e8680 x23: ffff80000d235b0c x22: 0000000000000400 x21: 0000000000000003 x20: 0000000000000a20 x19: ffff0000cc238000 x18: ffff80000c03d2c4 x17: 0000000000000000 x16: 0000000000000002 x15: 0000000000000000 x14: 0000000000000000 x13: 205d383437335420 x12: ffff80000eab2000 x11: ff808000080e0e64 x10: 0000000000000000 x9 : dca9c63ff8a09800 x8 : dca9c63ff8a09800 x7 : 0000000000000000 x6 : ffff80000bffb55c x5 : 0000000000000000 x4 : 0000000000000080 x3 : 0000000000000000 x2 : 0000000000000000 x1 : 0000000100000000 x0 : 0000000000000000 Call trace: usb_submit_urb+0x594/0x9b4 drivers/usb/core/urb.c:504 ar5523_submit_rx_cmd+0x74/0xf4 drivers/net/wireless/ath/ar5523/ar5523.c:212 ar5523_probe+0x41c/0xbb8 drivers/net/wireless/ath/ar5523/ar5523.c:1652 usb_probe_interface+0x2fc/0x4ac drivers/usb/core/driver.c:396 really_probe+0x218/0x61c drivers/base/dd.c:639 __driver_probe_device+0xe8/0x1fc drivers/base/dd.c:785 driver_probe_device+0x54/0x2f4 drivers/base/dd.c:815 __device_attach_driver+0x19c/0x2e4 drivers/base/dd.c:943 bus_for_each_drv+0xb4/0x124 drivers/base/bus.c:427 __device_attach+0x148/0x270 drivers/base/dd.c:1015 device_initial_probe+0x24/0x34 drivers/base/dd.c:1064 bus_probe_device+0x5c/0xf0 drivers/base/bus.c:487 device_add+0x754/0x968 drivers/base/core.c:3664 usb_set_configuration+0xb0c/0xd18 drivers/usb/core/message.c:2165 usb_generic_driver_probe+0x5c/0xe8 drivers/usb/core/generic.c:238 usb_probe_device+0xd0/0x180 drivers/usb/core/driver.c:293 really_probe+0x218/0x61c drivers/base/dd.c:639 __driver_probe_device+0xe8/0x1fc drivers/base/dd.c:785 driver_probe_device+0x54/0x2f4 drivers/base/dd.c:815 __device_attach_driver+0x19c/0x2e4 drivers/base/dd.c:943 bus_for_each_drv+0xb4/0x124 drivers/base/bus.c:427 __device_attach+0x148/0x270 drivers/base/dd.c:1015 device_initial_probe+0x24/0x34 drivers/base/dd.c:1064 bus_probe_device+0x5c/0xf0 drivers/base/bus.c:487 device_add+0x754/0x968 drivers/base/core.c:3664 usb_new_device+0x428/0x8a8 drivers/usb/core/hub.c:2583 hub_port_connect drivers/usb/core/hub.c:5434 [inline] hub_port_connect_change drivers/usb/core/hub.c:5574 [inline] port_event drivers/usb/core/hub.c:5730 [inline] hub_event+0x1728/0x258c drivers/usb/core/hub.c:5812 process_one_work+0x2d4/0x4e0 kernel/workqueue.c:2292 process_scheduled_works kernel/workqueue.c:2355 [inline] worker_thread+0x42c/0x5f8 kernel/workqueue.c:2441 kthread+0x120/0x14c kernel/kthread.c:376 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:864 ---[ end trace 0000000000000000 ]--- usb 1-1: error -22 when submitting rx urb usb 1-1: Failed to submit rx cmd ar5523: probe of 1-1:64.155 failed with error -22 ------------[ cut here ]------------ usb 1-1: BOGUS urb xfer, pipe 3 != type 1 WARNING: CPU: 1 PID: 3748 at drivers/usb/core/urb.c:505 usb_submit_urb+0x594/0x9b4 drivers/usb/core/urb.c:504 Modules linked in: CPU: 1 PID: 3748 Comm: kworker/1:3 Tainted: G W 6.1.62-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 Workqueue: usb_hub_wq hub_event pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : usb_submit_urb+0x594/0x9b4 drivers/usb/core/urb.c:504 lr : usb_submit_urb+0x594/0x9b4 drivers/usb/core/urb.c:504 sp : ffff8000129d3430 x29: ffff8000129d3440 x28: ffff0000ca11a800 x27: ffff0000c52da15c x26: ffff80000d20ad34 x25: ffff0000ca11a8a8 x24: ffff0000ca3e8680 x23: ffff80000d235b0c x22: 0000000000000400 x21: 0000000000000003 x20: 0000000000000a20 x19: ffff0000c52da100 x18: 0000000000000000 x17: 0000000000000001 x16: 0000000000000002 x15: 0000000000000000 x14: 0000000000000000 x13: 205d383437335420 x12: ffff80000eab2000 x11: ff808000080e0e64 x10: 0000000000000000 x9 : dca9c63ff8a09800 x8 : dca9c63ff8a09800 x7 : 0000000000000000 x6 : ffff80000bffb55c x5 : 0000000000000000 x4 : 0000000000000080 x3 : 0000000000000000 x2 : 0000000000000000 x1 : 0000000100000000 x0 : 0000000000000000 Call trace: usb_submit_urb+0x594/0x9b4 drivers/usb/core/urb.c:504 ar5523_submit_rx_cmd+0x74/0xf4 drivers/net/wireless/ath/ar5523/ar5523.c:212 ar5523_probe+0x41c/0xbb8 drivers/net/wireless/ath/ar5523/ar5523.c:1652 usb_probe_interface+0x2fc/0x4ac drivers/usb/core/driver.c:396 really_probe+0x218/0x61c drivers/base/dd.c:639 __driver_probe_device+0xe8/0x1fc drivers/base/dd.c:785 driver_probe_device+0x54/0x2f4 drivers/base/dd.c:815 __device_attach_driver+0x19c/0x2e4 drivers/base/dd.c:943 bus_for_each_drv+0xb4/0x124 drivers/base/bus.c:427 __device_attach+0x148/0x270 drivers/base/dd.c:1015 device_initial_probe+0x24/0x34 drivers/base/dd.c:1064 bus_probe_device+0x5c/0xf0 drivers/base/bus.c:487 device_add+0x754/0x968 drivers/base/core.c:3664 usb_set_configuration+0xb0c/0xd18 drivers/usb/core/message.c:2165 usb_generic_driver_probe+0x5c/0xe8 drivers/usb/core/generic.c:238 usb_probe_device+0xd0/0x180 drivers/usb/core/driver.c:293 really_probe+0x218/0x61c drivers/base/dd.c:639 __driver_probe_device+0xe8/0x1fc drivers/base/dd.c:785 driver_probe_device+0x54/0x2f4 drivers/base/dd.c:815 __device_attach_driver+0x19c/0x2e4 drivers/base/dd.c:943 bus_for_each_drv+0xb4/0x124 drivers/base/bus.c:427 __device_attach+0x148/0x270 drivers/base/dd.c:1015 device_initial_probe+0x24/0x34 drivers/base/dd.c:1064 bus_probe_device+0x5c/0xf0 drivers/base/bus.c:487 device_add+0x754/0x968 drivers/base/core.c:3664 usb_new_device+0x428/0x8a8 drivers/usb/core/hub.c:2583 hub_port_connect drivers/usb/core/hub.c:5434 [inline] hub_port_connect_change drivers/usb/core/hub.c:5574 [inline] port_event drivers/usb/core/hub.c:5730 [inline] hub_event+0x1728/0x258c drivers/usb/core/hub.c:5812 process_one_work+0x2d4/0x4e0 kernel/workqueue.c:2292 process_scheduled_works kernel/workqueue.c:2355 [inline] worker_thread+0x42c/0x5f8 kernel/workqueue.c:2441 kthread+0x120/0x14c kernel/kthread.c:376 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:864 ---[ end trace 0000000000000000 ]--- usb 1-1: error -22 when submitting rx urb usb 1-1: Failed to submit rx cmd ar5523: probe of 1-1:64.243 failed with error -22 usb 1-1: USB disconnect, device number 6 usb 1-1: new high-speed USB device number 7 using dummy_hcd usb 1-1: Using ep0 maxpacket: 32 usb 1-1: config 64 has an invalid interface number: 245 but max is 2 usb 1-1: config 64 has an invalid interface number: 155 but max is 2 usb 1-1: config 64 contains an unexpected descriptor of type 0x2, skipping usb 1-1: config 64 contains an unexpected descriptor of type 0x1, skipping usb 1-1: config 64 has an invalid interface number: 243 but max is 2 usb 1-1: config 64 has no interface number 0 usb 1-1: config 64 has no interface number 1 usb 1-1: config 64 has no interface number 2 usb 1-1: config 64 interface 245 altsetting 7 endpoint 0x8 has invalid maxpacket 1024, setting to 64 usb 1-1: config 64 interface 245 altsetting 7 endpoint 0x3 has invalid maxpacket 1023, setting to 64 usb 1-1: config 64 interface 245 altsetting 7 has an invalid endpoint descriptor of length 2, skipping usb 1-1: config 64 interface 245 altsetting 7 has 5 endpoint descriptors, different from the interface descriptor's value: 4 usb 1-1: config 64 interface 155 altsetting 1 endpoint 0x9 has invalid maxpacket 512, setting to 64 usb 1-1: config 64 interface 155 altsetting 1 has an invalid endpoint with address 0x0, skipping usb 1-1: config 64 interface 155 altsetting 1 has an invalid endpoint with address 0x0, skipping usb 1-1: config 64 interface 155 altsetting 1 endpoint 0xA has invalid maxpacket 72, setting to 64 usb 1-1: config 64 interface 155 altsetting 1 endpoint 0x81 has an invalid bInterval 139, changing to 11 usb 1-1: config 64 interface 155 altsetting 1 endpoint 0x81 has invalid maxpacket 18251, setting to 1024 usb 1-1: config 64 interface 155 altsetting 1 has a duplicate endpoint with address 0xA, skipping usb 1-1: config 64 interface 155 altsetting 1 has an invalid endpoint with address 0x0, skipping usb 1-1: config 64 interface 155 altsetting 1 has 9 endpoint descriptors, different from the interface descriptor's value: 8 usb 1-1: config 64 interface 243 altsetting 31 endpoint 0xF has invalid maxpacket 512, setting to 64 usb 1-1: config 64 interface 245 has no altsetting 0 usb 1-1: config 64 interface 155 has no altsetting 0 usb 1-1: config 64 interface 243 has no altsetting 0 usb 1-1: New USB device found, idVendor=083a, idProduct=4506, bcdDevice=6d.7d usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 usb 1-1: Product: syz usb 1-1: Manufacturer: syz usb 1-1: SerialNumber: syz ------------[ cut here ]------------ usb 1-1: BOGUS urb xfer, pipe 3 != type 1 WARNING: CPU: 1 PID: 3748 at drivers/usb/core/urb.c:505 usb_submit_urb+0x594/0x9b4 drivers/usb/core/urb.c:504 Modules linked in: CPU: 1 PID: 3748 Comm: kworker/1:3 Tainted: G W 6.1.62-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 Workqueue: usb_hub_wq hub_event pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : usb_submit_urb+0x594/0x9b4 drivers/usb/core/urb.c:504 lr : usb_submit_urb+0x594/0x9b4 drivers/usb/core/urb.c:504 sp : ffff8000129d3430 x29: ffff8000129d3440 x28: ffff0000ca118800 x27: ffff0000cc23835c x26: ffff80000d20ad34 x25: ffff0000ca1188a8 x24: ffff0000c68a4000 x23: ffff80000d235b0c x22: 0000000000000400 x21: 0000000000000003 x20: 0000000000000a20 x19: ffff0000cc238300 x18: 000000001e77384d x17: 000000000efca970 x16: 0000000000000002 x15: 0000000000000000 x14: 0000000000000000 x13: 205d383437335420 x12: ffff80000eab2000 x11: ff808000080e0e64 x10: 0000000000000000 x9 : dca9c63ff8a09800 x8 : dca9c63ff8a09800 x7 : 0000000000000000 x6 : ffff80000bffb55c x5 : 0000000000000000 x4 : 0000000000000080 x3 : 0000000000000000 x2 : 0000000000000000 x1 : 0000000100000000 x0 : 0000000000000000 Call trace: usb_submit_urb+0x594/0x9b4 drivers/usb/core/urb.c:504 ar5523_submit_rx_cmd+0x74/0xf4 drivers/net/wireless/ath/ar5523/ar5523.c:212 ar5523_probe+0x41c/0xbb8 drivers/net/wireless/ath/ar5523/ar5523.c:1652 usb_probe_interface+0x2fc/0x4ac drivers/usb/core/driver.c:396 really_probe+0x218/0x61c drivers/base/dd.c:639 __driver_probe_device+0xe8/0x1fc drivers/base/dd.c:785 driver_probe_device+0x54/0x2f4 drivers/base/dd.c:815 __device_attach_driver+0x19c/0x2e4 drivers/base/dd.c:943 bus_for_each_drv+0xb4/0x124 drivers/base/bus.c:427 __device_attach+0x148/0x270 drivers/base/dd.c:1015 device_initial_probe+0x24/0x34 drivers/base/dd.c:1064 bus_probe_device+0x5c/0xf0 drivers/base/bus.c:487 device_add+0x754/0x968 drivers/base/core.c:3664 usb_set_configuration+0xb0c/0xd18 drivers/usb/core/message.c:2165 usb_generic_driver_probe+0x5c/0xe8 drivers/usb/core/generic.c:238 usb_probe_device+0xd0/0x180 drivers/usb/core/driver.c:293 really_probe+0x218/0x61c drivers/base/dd.c:639 __driver_probe_device+0xe8/0x1fc drivers/base/dd.c:785 driver_probe_device+0x54/0x2f4 drivers/base/dd.c:815 __device_attach_driver+0x19c/0x2e4 drivers/base/dd.c:943 bus_for_each_drv+0xb4/0x124 drivers/base/bus.c:427 __device_attach+0x148/0x270 drivers/base/dd.c:1015 device_initial_probe+0x24/0x34 drivers/base/dd.c:1064 bus_probe_device+0x5c/0xf0 drivers/base/bus.c:487 device_add+0x754/0x968 drivers/base/core.c:3664 usb_new_device+0x428/0x8a8 drivers/usb/core/hub.c:2583 hub_port_connect drivers/usb/core/hub.c:5434 [inline] hub_port_connect_change drivers/usb/core/hub.c:5574 [inline] port_event drivers/usb/core/hub.c:5730 [inline] hub_event+0x1728/0x258c drivers/usb/core/hub.c:5812 process_one_work+0x2d4/0x4e0 kernel/workqueue.c:2292 process_scheduled_works kernel/workqueue.c:2355 [inline] worker_thread+0x42c/0x5f8 kernel/workqueue.c:2441 kthread+0x120/0x14c kernel/kthread.c:376 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:864 ---[ end trace 0000000000000000 ]--- usb 1-1: error -22 when submitting rx urb usb 1-1: Failed to submit rx cmd ar5523: probe of 1-1:64.245 failed with error -22 ------------[ cut here ]------------ usb 1-1: BOGUS urb xfer, pipe 3 != type 1 WARNING: CPU: 1 PID: 3748 at drivers/usb/core/urb.c:505 usb_submit_urb+0x594/0x9b4 drivers/usb/core/urb.c:504 Modules linked in: CPU: 1 PID: 3748 Comm: kworker/1:3 Tainted: G W 6.1.62-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 Workqueue: usb_hub_wq hub_event pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : usb_submit_urb+0x594/0x9b4 drivers/usb/core/urb.c:504 lr : usb_submit_urb+0x594/0x9b4 drivers/usb/core/urb.c:504 sp : ffff8000129d3430 x29: ffff8000129d3440 x28: ffff0000ca118800 x27: ffff0000c52da45c x26: ffff80000d20ad34 x25: ffff0000ca1188a8 x24: ffff0000c68a4000 x23: ffff80000d235b0c x22: 0000000000000400 x21: 0000000000000003 x20: 0000000000000a20 x19: ffff0000c52da400 x18: ffff80000c03d2c4 x17: 0000000000038000 x16: 0000000000000002 x15: 0000000000000000 x14: 0000000000000000 x13: 205d383437335420 x12: ffff80000eab2000 x11: ff808000080e0e64 x10: 0000000000000000 x9 : dca9c63ff8a09800 x8 : dca9c63ff8a09800 x7 : 0000000000000000 x6 : ffff80000bffb55c x5 : 0000000000000000 x4 : 0000000000000080 x3 : 0000000000000000 x2 : 0000000000000000 x1 : 0000000100000000 x0 : 0000000000000000 Call trace: usb_submit_urb+0x594/0x9b4 drivers/usb/core/urb.c:504 ar5523_submit_rx_cmd+0x74/0xf4 drivers/net/wireless/ath/ar5523/ar5523.c:212 ar5523_probe+0x41c/0xbb8 drivers/net/wireless/ath/ar5523/ar5523.c:1652 usb_probe_interface+0x2fc/0x4ac drivers/usb/core/driver.c:396 really_probe+0x218/0x61c drivers/base/dd.c:639 __driver_probe_device+0xe8/0x1fc drivers/base/dd.c:785 driver_probe_device+0x54/0x2f4 drivers/base/dd.c:815 __device_attach_driver+0x19c/0x2e4 drivers/base/dd.c:943 bus_for_each_drv+0xb4/0x124 drivers/base/bus.c:427 __device_attach+0x148/0x270 drivers/base/dd.c:1015 device_initial_probe+0x24/0x34 drivers/base/dd.c:1064 bus_probe_device+0x5c/0xf0 drivers/base/bus.c:487 device_add+0x754/0x968 drivers/base/core.c:3664 usb_set_configuration+0xb0c/0xd18 drivers/usb/core/message.c:2165 usb_generic_driver_probe+0x5c/0xe8 drivers/usb/core/generic.c:238 usb_probe_device+0xd0/0x180 drivers/usb/core/driver.c:293 really_probe+0x218/0x61c drivers/base/dd.c:639 __driver_probe_device+0xe8/0x1fc drivers/base/dd.c:785 driver_probe_device+0x54/0x2f4 drivers/base/dd.c:815 __device_attach_driver+0x19c/0x2e4 drivers/base/dd.c:943 bus_for_each_drv+0xb4/0x124 drivers/base/bus.c:427 __device_attach+0x148/0x270 drivers/base/dd.c:1015 device_initial_probe+0x24/0x34 drivers/base/dd.c:1064 bus_probe_device+0x5c/0xf0 drivers/base/bus.c:487 device_add+0x754/0x968 drivers/base/core.c:3664 usb_new_device+0x428/0x8a8 drivers/usb/core/hub.c:2583 hub_port_connect drivers/usb/core/hub.c:5434 [inline] hub_port_connect_change drivers/usb/core/hub.c:5574 [inline] port_event drivers/usb/core/hub.c:5730 [inline] hub_event+0x1728/0x258c drivers/usb/core/hub.c:5812 process_one_work+0x2d4/0x4e0 kernel/workqueue.c:2292 process_scheduled_works kernel/workqueue.c:2355 [inline] worker_thread+0x42c/0x5f8 kernel/workqueue.c:2441 kthread+0x120/0x14c kernel/kthread.c:376 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:864 ---[ end trace 0000000000000000 ]--- usb 1-1: error -22 when submitting rx urb usb 1-1: Failed to submit rx cmd ar5523: probe of 1-1:64.155 failed with error -22 ------------[ cut here ]------------ usb 1-1: BOGUS urb xfer, pipe 3 != type 1 WARNING: CPU: 1 PID: 3748 at drivers/usb/core/urb.c:505 usb_submit_urb+0x594/0x9b4 drivers/usb/core/urb.c:504 Modules linked in: CPU: 1 PID: 3748 Comm: kworker/1:3 Tainted: G W 6.1.62-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 Workqueue: usb_hub_wq hub_event pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : usb_submit_urb+0x594/0x9b4 drivers/usb/core/urb.c:504 lr : usb_submit_urb+0x594/0x9b4 drivers/usb/core/urb.c:504 sp : ffff8000129d3430 x29: ffff8000129d3440 x28: ffff0000ca118800 x27: ffff0000cc238e5c x26: ffff80000d20ad34 x25: ffff0000ca1188a8 x24: ffff0000c68a4000 x23: ffff80000d235b0c x22: 0000000000000400 x21: 0000000000000003 x20: 0000000000000a20 x19: ffff0000cc238e00 x18: 0000000000000000 x17: 000000000002332b x16: 0000000000000002 x15: 0000000000000000 x14: 0000000000000000 x13: 205d383437335420 x12: ffff80000eab2000 x11: ff808000080e0e64 x10: 0000000000000000 x9 : dca9c63ff8a09800 x8 : dca9c63ff8a09800 x7 : 0000000000000000 x6 : ffff80000bffb55c x5 : 0000000000000000 x4 : 0000000000000080 x3 : 0000000000000000 x2 : 0000000000000000 x1 : 0000000100000000 x0 : 0000000000000000 Call trace: usb_submit_urb+0x594/0x9b4 drivers/usb/core/urb.c:504 ar5523_submit_rx_cmd+0x74/0xf4 drivers/net/wireless/ath/ar5523/ar5523.c:212 ar5523_probe+0x41c/0xbb8 drivers/net/wireless/ath/ar5523/ar5523.c:1652 usb_probe_interface+0x2fc/0x4ac drivers/usb/core/driver.c:396 really_probe+0x218/0x61c drivers/base/dd.c:639 __driver_probe_device+0xe8/0x1fc drivers/base/dd.c:785 driver_probe_device+0x54/0x2f4 drivers/base/dd.c:815 __device_attach_driver+0x19c/0x2e4 drivers/base/dd.c:943 bus_for_each_drv+0xb4/0x124 drivers/base/bus.c:427 __device_attach+0x148/0x270 drivers/base/dd.c:1015 device_initial_probe+0x24/0x34 drivers/base/dd.c:1064 bus_probe_device+0x5c/0xf0 drivers/base/bus.c:487 device_add+0x754/0x968 drivers/base/core.c:3664 usb_set_configuration+0xb0c/0xd18 drivers/usb/core/message.c:2165 usb_generic_driver_probe+0x5c/0xe8 drivers/usb/core/generic.c:238 usb_probe_device+0xd0/0x180 drivers/usb/core/driver.c:293 really_probe+0x218/0x61c drivers/base/dd.c:639 __driver_probe_device+0xe8/0x1fc drivers/base/dd.c:785 driver_probe_device+0x54/0x2f4 drivers/base/dd.c:815 __device_attach_driver+0x19c/0x2e4 drivers/base/dd.c:943 bus_for_each_drv+0xb4/0x124 drivers/base/bus.c:427 __device_attach+0x148/0x270 drivers/base/dd.c:1015 device_initial_probe+0x24/0x34 drivers/base/dd.c:1064 bus_probe_device+0x5c/0xf0 drivers/base/bus.c:487 device_add+0x754/0x968 drivers/base/core.c:3664 usb_new_device+0x428/0x8a8 drivers/usb/core/hub.c:2583 hub_port_connect drivers/usb/core/hub.c:5434 [inline] hub_port_connect_change drivers/usb/core/hub.c:5574 [inline] port_event drivers/usb/core/hub.c:5730 [inline] hub_event+0x1728/0x258c drivers/usb/core/hub.c:5812 process_one_work+0x2d4/0x4e0 kernel/workqueue.c:2292 process_scheduled_works kernel/workqueue.c:2355 [inline] worker_thread+0x42c/0x5f8 kernel/workqueue.c:2441 kthread+0x120/0x14c kernel/kthread.c:376 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:864 ---[ end trace 0000000000000000 ]--- usb 1-1: error -22 when submitting rx urb usb 1-1: Failed to submit rx cmd ar5523: probe of 1-1:64.243 failed with error -22 usb 1-1: USB disconnect, device number 7 usb 1-1: new high-speed USB device number 8 using dummy_hcd usb 1-1: Using ep0 maxpacket: 32 usb 1-1: config 64 has an invalid interface number: 245 but max is 2 usb 1-1: config 64 has an invalid interface number: 155 but max is 2 usb 1-1: config 64 contains an unexpected descriptor of type 0x2, skipping