Warning: Permanently added '10.128.1.170' (ED25519) to the list of known hosts. 1970/01/01 00:01:24 ignoring optional flag "sandboxArg"="0" 1970/01/01 00:01:25 parsed 1 programs [ 88.244347][ T4437] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 95.896724][ T4462] chnl_net:caif_netlink_parms(): no params data found [ 95.934285][ T4462] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.936411][ T4462] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.938963][ T4462] device bridge_slave_0 entered promiscuous mode [ 95.942579][ T4462] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.944618][ T4462] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.947204][ T4462] device bridge_slave_1 entered promiscuous mode [ 95.961680][ T4462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.967861][ T4462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.983868][ T4462] team0: Port device team_slave_0 added [ 95.987304][ T4462] team0: Port device team_slave_1 added [ 95.999722][ T4462] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.001725][ T4462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.009179][ T4462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.015624][ T4462] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.017569][ T4462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.024834][ T4462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.084377][ T4462] device hsr_slave_0 entered promiscuous mode [ 96.142871][ T4462] device hsr_slave_1 entered promiscuous mode [ 96.992161][ T4462] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.054833][ T4462] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.094279][ T4462] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.135116][ T4462] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.234576][ T4462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.242271][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 97.244898][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 97.249541][ T4462] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.254646][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 97.257295][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 97.259794][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.261685][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.270383][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 97.274633][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 97.277322][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 97.280188][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.282114][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.285026][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 97.312519][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 97.315465][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 97.323282][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 97.326089][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 97.344788][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 97.347569][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 97.350193][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 97.353015][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 97.355981][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 97.364971][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 97.371044][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 97.474449][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 97.476725][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 97.483488][ T4462] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.496225][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 97.498953][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 97.518886][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 97.521437][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 97.527270][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 97.530188][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 97.534739][ T4462] device veth0_vlan entered promiscuous mode [ 97.541179][ T4462] device veth1_vlan entered promiscuous mode [ 97.585100][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 97.587649][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 97.593993][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 97.596973][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 97.601211][ T4462] device veth0_macvtap entered promiscuous mode [ 97.607049][ T4462] device veth1_macvtap entered promiscuous mode [ 97.634795][ T4462] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.636869][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 97.639516][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 97.642063][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 97.647579][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 97.653372][ T4462] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.657398][ T4462] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.659904][ T4462] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.662210][ T4462] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.665279][ T4462] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.669317][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 97.672111][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 98.021318][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.023703][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.028242][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 98.041849][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.044344][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.047295][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:01:39 executed programs: 0 [ 99.542953][ T4678] chnl_net:caif_netlink_parms(): no params data found [ 99.581424][ T4678] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.583470][ T4678] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.586052][ T4678] device bridge_slave_0 entered promiscuous mode [ 99.591326][ T4678] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.593379][ T4678] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.596137][ T4678] device bridge_slave_1 entered promiscuous mode [ 99.613152][ T4678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.617838][ T4678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.637872][ T4678] team0: Port device team_slave_0 added [ 99.643063][ T4678] team0: Port device team_slave_1 added [ 99.668470][ T4678] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.670511][ T4678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.683220][ T4678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.687325][ T4678] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.689186][ T4678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.712458][ T4678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.784333][ T4678] device hsr_slave_0 entered promiscuous mode [ 99.832762][ T4678] device hsr_slave_1 entered promiscuous mode [ 99.892493][ T4678] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.894565][ T4678] Cannot create hsr debugfs directory [ 99.994303][ T4678] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.502869][ T4111] Bluetooth: hci0: command 0x0409 tx timeout [ 102.828847][ T4678] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.879704][ T4678] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.939522][ T4678] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.168360][ T4678] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.205478][ T4678] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 103.245229][ T4678] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.294667][ T4678] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 103.378727][ T4678] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.386148][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 103.388681][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 103.395953][ T4678] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.400361][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 103.403346][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 103.405847][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.407781][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.410096][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 103.416479][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 103.419236][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 103.421816][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.423848][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.428475][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 103.433983][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 103.440102][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 103.443841][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 103.451723][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 103.455749][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 103.458535][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 103.461210][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 103.464996][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 103.469812][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 103.472716][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 103.479122][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 103.580253][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 103.583155][ T4111] Bluetooth: hci0: command 0x041b tx timeout [ 103.585140][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 103.593903][ T4678] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.605186][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 103.607985][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 103.621103][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 103.624269][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 103.628135][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 103.630670][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 103.636046][ T4678] device veth0_vlan entered promiscuous mode [ 103.643351][ T4678] device veth1_vlan entered promiscuous mode [ 103.656982][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 103.659687][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 103.662187][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 103.665762][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 103.670379][ T4678] device veth0_macvtap entered promiscuous mode [ 103.675131][ T4678] device veth1_macvtap entered promiscuous mode [ 103.686697][ T4678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.689472][ T4678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.693444][ T4678] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.695453][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 103.698076][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 103.700625][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 103.703903][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 103.708075][ T4678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.710785][ T4678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.715193][ T4678] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.717358][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 103.720309][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 103.729827][ T4678] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.732239][ T4678] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.734854][ T4678] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.737213][ T4678] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.771192][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.773759][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.777326][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 103.789377][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.791669][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.797002][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 104.112731][ T4111] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 104.543047][ T4111] usb 1-1: unable to get BOS descriptor or descriptor too short [ 104.632905][ T4111] usb 1-1: config 6 has an invalid interface number: 97 but max is 1 [ 104.635238][ T4111] usb 1-1: config 6 has an invalid interface number: 114 but max is 1 [ 104.637372][ T4111] usb 1-1: config 6 has no interface number 0 [ 104.638999][ T4111] usb 1-1: config 6 has no interface number 1 [ 104.640803][ T4111] usb 1-1: config 6 interface 97 altsetting 1 endpoint 0x6 has an invalid bInterval 17, changing to 8 [ 104.643894][ T4111] usb 1-1: config 6 interface 97 altsetting 1 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 104.646782][ T4111] usb 1-1: config 6 interface 97 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 8 [ 104.649362][ T4111] usb 1-1: config 6 interface 97 altsetting 1 endpoint 0xA has invalid maxpacket 1527, setting to 64 [ 104.652207][ T4111] usb 1-1: config 6 interface 97 has no altsetting 0 [ 104.654088][ T4111] usb 1-1: config 6 interface 114 has no altsetting 0 [ 104.832704][ T4111] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=10.4c [ 104.835198][ T4111] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.837308][ T4111] usb 1-1: Product: syz [ 104.838408][ T4111] usb 1-1: Manufacturer: syz [ 104.839641][ T4111] usb 1-1: SerialNumber: syz [ 104.864916][ T4866] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 105.175914][ T4111] ------------[ cut here ]------------ [ 105.177582][ T4111] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 105.179468][ T4111] WARNING: CPU: 0 PID: 4111 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1580 [ 105.181989][ T4111] Modules linked in: [ 105.183070][ T4111] CPU: 0 PID: 4111 Comm: kworker/0:11 Not tainted 5.15.184-syzkaller #0 [ 105.185327][ T4111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 105.188051][ T4111] Workqueue: usb_hub_wq hub_event [ 105.189419][ T4111] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 105.191530][ T4111] pc : usb_submit_urb+0xa44/0x1580 [ 105.192912][ T4111] lr : usb_submit_urb+0xa44/0x1580 [ 105.194316][ T4111] sp : ffff80001f7e6980 [ 105.195458][ T4111] x29: ffff80001f7e69c0 x28: 1fffe000192a3203 x27: ffff80001237bee8 [ 105.197648][ T4111] x26: ffff0000c8c37100 x25: ffff0000cd5f4450 x24: 0000000000000008 [ 105.199863][ T4111] x23: ffff800012382540 x22: dfff800000000000 x21: 0000000000000002 [ 105.202022][ T4111] x20: 0000000000000c00 x19: ffff0000cd5f4400 x18: 0000000000000001 [ 105.204166][ T4111] x17: 0000000000000000 x16: ffff8000111a5644 x15: 00000000ffffffff [ 105.206327][ T4111] x14: 0000000000ff0100 x13: 0000000000000001 x12: 0000000000ff0100 [ 105.208547][ T4111] x11: 0000000000000000 x10: 0000000000000000 x9 : 530905e990d54600 [ 105.210883][ T4111] x8 : 530905e990d54600 x7 : 0000000000000001 x6 : 0000000000000001 [ 105.213072][ T4111] x5 : ffff80001f7e6278 x4 : ffff80001422f280 x3 : ffff80000850383c [ 105.215248][ T4111] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000029 [ 105.217482][ T4111] Call trace: [ 105.218353][ T4111] usb_submit_urb+0xa44/0x1580 [ 105.219666][ T4111] usb_start_wait_urb+0xe8/0x3bc [ 105.221053][ T4111] usb_bulk_msg+0x2e4/0x3e4 [ 105.222282][ T4111] amradio_set_mute+0x1a4/0x3f4 [ 105.223566][ T4111] usb_amradio_probe+0x36c/0x688 [ 105.224887][ T4111] usb_probe_interface+0x4fc/0x994 [ 105.226263][ T4111] really_probe+0x26c/0xaec [ 105.227577][ T4111] __driver_probe_device+0x180/0x314 [ 105.228955][ T4111] driver_probe_device+0x78/0x34c [ 105.230367][ T4111] __device_attach_driver+0x274/0x4c4 [ 105.231893][ T4111] bus_for_each_drv+0x150/0x1d8 [ 105.233204][ T4111] __device_attach+0x2a8/0x3d4 [ 105.234544][ T4111] device_initial_probe+0x24/0x34 [ 105.235909][ T4111] bus_probe_device+0xbc/0x1c4 [ 105.237188][ T4111] device_add+0xb04/0xf94 [ 105.238330][ T4111] usb_set_configuration+0x15b8/0x1b2c [ 105.239883][ T4111] usb_generic_driver_probe+0x8c/0x144 [ 105.241365][ T4111] usb_probe_device+0x120/0x25c [ 105.242680][ T4111] really_probe+0x26c/0xaec [ 105.243944][ T4111] __driver_probe_device+0x180/0x314 [ 105.245373][ T4111] driver_probe_device+0x78/0x34c [ 105.246765][ T4111] __device_attach_driver+0x274/0x4c4 [ 105.248259][ T4111] bus_for_each_drv+0x150/0x1d8 [ 105.249557][ T4111] __device_attach+0x2a8/0x3d4 [ 105.250793][ T4111] device_initial_probe+0x24/0x34 [ 105.252160][ T4111] bus_probe_device+0xbc/0x1c4 [ 105.253522][ T4111] device_add+0xb04/0xf94 [ 105.254702][ T4111] usb_new_device+0x7ec/0x1164 [ 105.255975][ T4111] hub_event+0x20cc/0x4188 [ 105.257192][ T4111] process_one_work+0x79c/0x1140 [ 105.258532][ T4111] worker_thread+0x8f4/0x101c [ 105.259865][ T4111] kthread+0x374/0x454 [ 105.260938][ T4111] ret_from_fork+0x10/0x20 [ 105.262088][ T4111] irq event stamp: 14744 [ 105.263258][ T4111] hardirqs last enabled at (14743): [] __up_console_sem+0xb4/0x100 [ 105.265916][ T4111] hardirqs last disabled at (14744): [] el1_dbg+0x24/0x80 [ 105.268239][ T4111] softirqs last enabled at (12028): [] handle_softirqs+0xa4c/0xbf0 [ 105.270810][ T4111] softirqs last disabled at (12019): [] __irq_exit_rcu+0x240/0x440 [ 105.273367][ T4111] ---[ end trace b02678f3a87836e2 ]--- [ 105.292621][ T4111] (null): radio-mr800 - initialization failed [ 105.294429][ T4111] radio-mr800: probe of 1-1:6.97 failed with error -71 [ 105.296537][ T4111] usbhid 1-1:6.97: couldn't find an input interrupt endpoint [ 105.336985][ T4111] usb 1-1: USB disconnect, device number 2 1970/01/01 00:01:45 executed programs: 3 [ 105.672749][ T25] Bluetooth: hci0: command 0x040f tx timeout [ 105.892649][ T4047] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 106.303253][ T4047] usb 1-1: unable to get BOS descriptor or descriptor too short [ 106.382712][ T4047] usb 1-1: config 6 has an invalid interface number: 97 but max is 1 [ 106.384951][ T4047] usb 1-1: config 6 has an invalid interface number: 114 but max is 1 [ 106.387131][ T4047] usb 1-1: config 6 has no interface number 0 [ 106.388726][ T4047] usb 1-1: config 6 has no interface number 1 [ 106.390324][ T4047] usb 1-1: config 6 interface 97 altsetting 1 endpoint 0x6 has an invalid bInterval 17, changing to 8 [ 106.393303][ T4047] usb 1-1: config 6 interface 97 altsetting 1 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 106.396184][ T4047] usb 1-1: config 6 interface 97 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 8 [ 106.398765][ T4047] usb 1-1: config 6 interface 97 altsetting 1 endpoint 0xA has invalid maxpacket 1527, setting to 64 [ 106.401605][ T4047] usb 1-1: config 6 interface 97 has no altsetting 0 [ 106.403630][ T4047] usb 1-1: config 6 interface 114 has no altsetting 0 [ 106.562655][ T4047] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=10.4c [ 106.565150][ T4047] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.567271][ T4047] usb 1-1: Product: syz [ 106.568363][ T4047] usb 1-1: Manufacturer: syz [ 106.569603][ T4047] usb 1-1: SerialNumber: syz [ 106.593357][ T4868] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 106.894765][ T4047] ------------[ cut here ]------------ [ 106.896423][ T4047] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 106.898320][ T4047] WARNING: CPU: 1 PID: 4047 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1580 [ 106.900889][ T4047] Modules linked in: [ 106.901930][ T4047] CPU: 1 PID: 4047 Comm: kworker/1:4 Tainted: G W 5.15.184-syzkaller #0 [ 106.904590][ T4047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 106.907417][ T4047] Workqueue: usb_hub_wq hub_event [ 106.908815][ T4047] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 106.911028][ T4047] pc : usb_submit_urb+0xa44/0x1580 [ 106.912443][ T4047] lr : usb_submit_urb+0xa44/0x1580 [ 106.913921][ T4047] sp : ffff80001b946980 [ 106.915062][ T4047] x29: ffff80001b9469c0 x28: 1fffe0001b169a03 x27: ffff80001237bee8 [ 106.917286][ T4047] x26: ffff0000e82c4600 x25: ffff0000dcb64a50 x24: 0000000000000008 [ 106.919480][ T4047] x23: ffff800012382540 x22: dfff800000000000 x21: 0000000000000002 [ 106.921747][ T4047] x20: 0000000000000c00 x19: ffff0000dcb64a00 x18: 0000000000000001 [ 106.923986][ T4047] x17: 0000000000000000 x16: ffff8000111a5644 x15: 00000000ffffffff [ 106.926279][ T4047] x14: 0000000000ff0100 x13: 0000000000000001 x12: 0000000000ff0100 [ 106.928551][ T4047] x11: 0000000000000000 x10: 0000000000000000 x9 : 6daac231cf8dc100 [ 106.930708][ T4047] x8 : 6daac231cf8dc100 x7 : 0000000000000001 x6 : 0000000000000001 [ 106.932938][ T4047] x5 : ffff80001b946278 x4 : ffff80001422f280 x3 : ffff80000850383c [ 106.935249][ T4047] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000029 [ 106.937502][ T4047] Call trace: [ 106.938416][ T4047] usb_submit_urb+0xa44/0x1580 [ 106.939712][ T4047] usb_start_wait_urb+0xe8/0x3bc [ 106.941120][ T4047] usb_bulk_msg+0x2e4/0x3e4 [ 106.942396][ T4047] amradio_set_mute+0x1a4/0x3f4 [ 106.943791][ T4047] usb_amradio_probe+0x36c/0x688 [ 106.945183][ T4047] usb_probe_interface+0x4fc/0x994 [ 106.946586][ T4047] really_probe+0x26c/0xaec [ 106.947819][ T4047] __driver_probe_device+0x180/0x314 [ 106.949376][ T4047] driver_probe_device+0x78/0x34c [ 106.950724][ T4047] __device_attach_driver+0x274/0x4c4 [ 106.952250][ T4047] bus_for_each_drv+0x150/0x1d8 [ 106.953608][ T4047] __device_attach+0x2a8/0x3d4 [ 106.954936][ T4047] device_initial_probe+0x24/0x34 [ 106.956336][ T4047] bus_probe_device+0xbc/0x1c4 [ 106.957618][ T4047] device_add+0xb04/0xf94 [ 106.958816][ T4047] usb_set_configuration+0x15b8/0x1b2c [ 106.960305][ T4047] usb_generic_driver_probe+0x8c/0x144 [ 106.961793][ T4047] usb_probe_device+0x120/0x25c [ 106.963112][ T4047] really_probe+0x26c/0xaec [ 106.964286][ T4047] __driver_probe_device+0x180/0x314 [ 106.965729][ T4047] driver_probe_device+0x78/0x34c [ 106.967084][ T4047] __device_attach_driver+0x274/0x4c4 [ 106.968528][ T4047] bus_for_each_drv+0x150/0x1d8 [ 106.969909][ T4047] __device_attach+0x2a8/0x3d4 [ 106.971227][ T4047] device_initial_probe+0x24/0x34 [ 106.972594][ T4047] bus_probe_device+0xbc/0x1c4 [ 106.973911][ T4047] device_add+0xb04/0xf94 [ 106.975045][ T4047] usb_new_device+0x7ec/0x1164 [ 106.976404][ T4047] hub_event+0x20cc/0x4188 [ 106.977593][ T4047] process_one_work+0x79c/0x1140 [ 106.978934][ T4047] worker_thread+0x8f4/0x101c [ 106.980272][ T4047] kthread+0x374/0x454 [ 106.981396][ T4047] ret_from_fork+0x10/0x20 [ 106.982647][ T4047] irq event stamp: 32974 [ 106.983798][ T4047] hardirqs last enabled at (32973): [] __up_console_sem+0xb4/0x100 [ 106.986410][ T4047] hardirqs last disabled at (32974): [] el1_dbg+0x24/0x80 [ 106.988795][ T4047] softirqs last enabled at (31072): [] handle_softirqs+0xa4c/0xbf0 [ 106.991426][ T4047] softirqs last disabled at (31055): [] __irq_exit_rcu+0x240/0x440 [ 106.994030][ T4047] ---[ end trace b02678f3a87836e3 ]--- [ 107.012526][ T4047] (null): radio-mr800 - initialization failed [ 107.014439][ T4047] radio-mr800: probe of 1-1:6.97 failed with error -71 [ 107.016535][ T4047] usbhid 1-1:6.97: couldn't find an input interrupt endpoint [ 107.027949][ T1632] device hsr_slave_0 left promiscuous mode [ 107.058921][ T4047] usb 1-1: USB disconnect, device number 3 [ 107.065327][ T4481] udevd[4481]: setting owner of /dev/bus/usb/001/003 to uid=0, gid=0 failed: No such file or directory [ 107.072925][ T1632] device hsr_slave_1 left promiscuous mode [ 107.182743][ T1632] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.184948][ T1632] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.187388][ T1632] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.189554][ T1632] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.191956][ T1632] device bridge_slave_1 left promiscuous mode [ 107.194325][ T1632] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.233520][ T1632] device bridge_slave_0 left promiscuous mode [ 107.235337][ T1632] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.362794][ T1632] device veth1_macvtap left promiscuous mode [ 107.364513][ T1632] device veth0_macvtap left promiscuous mode [ 107.366208][ T1632] device veth1_vlan left promiscuous mode [ 107.367788][ T1632] device veth0_vlan left promiscuous mode [ 107.605359][ T1632] team0 (unregistering): Port device team_slave_1 removed [ 107.614177][ T1632] team0 (unregistering): Port device team_slave_0 removed [ 107.621965][ T1632] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.678647][ T1632] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.692534][ T4060] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 107.743031][ T4047] Bluetooth: hci0: command 0x0419 tx timeout [ 107.820260][ T1632] bond0 (unregistering): Released all slaves [ 108.135892][ T4060] usb 1-1: unable to get BOS descriptor or descriptor too short [ 108.212537][ T4060] usb 1-1: config 6 has an invalid interface number: 97 but max is 1 [ 108.214716][ T4060] usb 1-1: config 6 has an invalid interface number: 114 but max is 1 [ 108.216944][ T4060] usb 1-1: config 6 has no interface number 0 [ 108.218530][ T4060] usb 1-1: config 6 has no interface number 1 [ 108.220196][ T4060] usb 1-1: config 6 interface 97 altsetting 1 endpoint 0x6 has an invalid bInterval 17, changing to 8 [ 108.223532][ T4060] usb 1-1: config 6 interface 97 altsetting 1 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 108.226468][ T4060] usb 1-1: config 6 interface 97 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 8 [ 108.229076][ T4060] usb 1-1: config 6 interface 97 altsetting 1 endpoint 0xA has invalid maxpacket 1527, setting to 64 [ 108.231951][ T4060] usb 1-1: config 6 interface 97 has no altsetting 0 [ 108.234046][ T4060] usb 1-1: config 6 interface 114 has no altsetting 0 [ 108.392675][ T4060] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=10.4c [ 108.395216][ T4060] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.397363][ T4060] usb 1-1: Product: syz [ 108.398443][ T4060] usb 1-1: Manufacturer: syz [ 108.399632][ T4060] usb 1-1: SerialNumber: syz [ 108.422850][ T4870] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 108.724499][ T4060] ------------[ cut here ]------------ [ 108.725989][ T4060] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 108.727942][ T4060] WARNING: CPU: 0 PID: 4060 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1580 [ 108.730507][ T4060] Modules linked in: [ 108.731507][ T4060] CPU: 0 PID: 4060 Comm: kworker/0:3 Tainted: G W 5.15.184-syzkaller #0 [ 108.734164][ T4060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 108.736971][ T4060] Workqueue: usb_hub_wq hub_event [ 108.738333][ T4060] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 108.740461][ T4060] pc : usb_submit_urb+0xa44/0x1580 [ 108.741868][ T4060] lr : usb_submit_urb+0xa44/0x1580 [ 108.743268][ T4060] sp : ffff80001f516980 [ 108.744390][ T4060] x29: ffff80001f5169c0 x28: 1fffe0001a841e03 x27: ffff80001237bee8 [ 108.746580][ T4060] x26: ffff0000e838ce00 x25: ffff0000c6cb1a50 x24: 0000000000000008 [ 108.748791][ T4060] x23: ffff800012382540 x22: dfff800000000000 x21: 0000000000000002 [ 108.750988][ T4060] x20: 0000000000000c00 x19: ffff0000c6cb1a00 x18: 0000000000000001 [ 108.753161][ T4060] x17: 0000000000000000 x16: ffff8000111a5644 x15: 00000000ffffffff [ 108.755424][ T4060] x14: 0000000000ff0100 x13: 0000000000000001 x12: 0000000000ff0100 [ 108.757556][ T4060] x11: 0000000000000000 x10: 0000000000000000 x9 : bca0f3848e031b00 [ 108.759754][ T4060] x8 : bca0f3848e031b00 x7 : 0000000000000001 x6 : 0000000000000001 [ 108.762023][ T4060] x5 : ffff80001f516278 x4 : ffff80001422f280 x3 : ffff80000850383c [ 108.764279][ T4060] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000029 [ 108.766507][ T4060] Call trace: [ 108.767444][ T4060] usb_submit_urb+0xa44/0x1580 [ 108.768819][ T4060] usb_start_wait_urb+0xe8/0x3bc [ 108.770177][ T4060] usb_bulk_msg+0x2e4/0x3e4 [ 108.771412][ T4060] amradio_set_mute+0x1a4/0x3f4 [ 108.772760][ T4060] usb_amradio_probe+0x36c/0x688 [ 108.774104][ T4060] usb_probe_interface+0x4fc/0x994 [ 108.775595][ T4060] really_probe+0x26c/0xaec [ 108.776950][ T4060] __driver_probe_device+0x180/0x314 [ 108.778424][ T4060] driver_probe_device+0x78/0x34c [ 108.779851][ T4060] __device_attach_driver+0x274/0x4c4 [ 108.781340][ T4060] bus_for_each_drv+0x150/0x1d8 [ 108.782679][ T4060] __device_attach+0x2a8/0x3d4 [ 108.784073][ T4060] device_initial_probe+0x24/0x34 [ 108.785500][ T4060] bus_probe_device+0xbc/0x1c4 [ 108.786789][ T4060] device_add+0xb04/0xf94 [ 108.787960][ T4060] usb_set_configuration+0x15b8/0x1b2c [ 108.789489][ T4060] usb_generic_driver_probe+0x8c/0x144 [ 108.790979][ T4060] usb_probe_device+0x120/0x25c [ 108.792351][ T4060] really_probe+0x26c/0xaec [ 108.793604][ T4060] __driver_probe_device+0x180/0x314 [ 108.795107][ T4060] driver_probe_device+0x78/0x34c [ 108.796534][ T4060] __device_attach_driver+0x274/0x4c4 [ 108.798026][ T4060] bus_for_each_drv+0x150/0x1d8 [ 108.799304][ T4060] __device_attach+0x2a8/0x3d4 [ 108.800635][ T4060] device_initial_probe+0x24/0x34 [ 108.802067][ T4060] bus_probe_device+0xbc/0x1c4 [ 108.803412][ T4060] device_add+0xb04/0xf94 [ 108.804569][ T4060] usb_new_device+0x7ec/0x1164 [ 108.805850][ T4060] hub_event+0x20cc/0x4188 [ 108.807057][ T4060] process_one_work+0x79c/0x1140 [ 108.808448][ T4060] worker_thread+0x8f4/0x101c [ 108.809746][ T4060] kthread+0x374/0x454 [ 108.810827][ T4060] ret_from_fork+0x10/0x20 [ 108.812054][ T4060] irq event stamp: 91060 [ 108.813165][ T4060] hardirqs last enabled at (91059): [] __up_console_sem+0xb4/0x100 [ 108.815795][ T4060] hardirqs last disabled at (91060): [] el1_dbg+0x24/0x80 [ 108.818260][ T4060] softirqs last enabled at (88330): [] handle_softirqs+0xa4c/0xbf0 [ 108.821000][ T4060] softirqs last disabled at (88259): [] __irq_exit_rcu+0x240/0x440 [ 108.823678][ T4060] ---[ end trace b02678f3a87836e4 ]--- [ 108.842561][ T4060] (null): radio-mr800 - initialization failed [ 108.844575][ T4060] radio-mr800: probe of 1-1:6.97 failed with error -71 [ 108.846791][ T4060] usbhid 1-1:6.97: couldn't find an input interrupt endpoint [ 108.891080][ T4060] usb 1-1: USB disconnect, device number 4 [ 109.422595][ T25] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 109.852497][ T25] usb 1-1: unable to get BOS descriptor or descriptor too short [ 109.932666][ T25] usb 1-1: config 6 has an invalid interface number: 97 but max is 1 [ 109.934889][ T25] usb 1-1: config 6 has an invalid interface number: 114 but max is 1 [ 109.937019][ T25] usb 1-1: config 6 has no interface number 0 [ 109.938930][ T25] usb 1-1: config 6 has no interface number 1 [ 109.940717][ T25] usb 1-1: config 6 interface 97 altsetting 1 endpoint 0x6 has an invalid bInterval 17, changing to 8 [ 109.945365][ T25] usb 1-1: config 6 interface 97 altsetting 1 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 109.948255][ T25] usb 1-1: config 6 interface 97 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 8 [ 109.950906][ T25] usb 1-1: config 6 interface 97 altsetting 1 endpoint 0xA has invalid maxpacket 1527, setting to 64 [ 109.954219][ T25] usb 1-1: config 6 interface 97 has no altsetting 0 [ 109.956011][ T25] usb 1-1: config 6 interface 114 has no altsetting 0 [ 110.112702][ T25] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=10.4c [ 110.115290][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.117425][ T25] usb 1-1: Product: syz [ 110.118494][ T25] usb 1-1: Manufacturer: syz [ 110.119671][ T25] usb 1-1: SerialNumber: syz [ 110.152926][ T4872] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 110.454548][ T25] ------------[ cut here ]------------ [ 110.456057][ T25] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 110.457915][ T25] WARNING: CPU: 1 PID: 25 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1580 [ 110.460392][ T25] Modules linked in: [ 110.461423][ T25] CPU: 1 PID: 25 Comm: kworker/1:1 Tainted: G W 5.15.184-syzkaller #0 [ 110.463986][ T25] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 110.466819][ T25] Workqueue: usb_hub_wq hub_event [ 110.468182][ T25] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 110.470322][ T25] pc : usb_submit_urb+0xa44/0x1580 [ 110.471701][ T25] lr : usb_submit_urb+0xa44/0x1580 [ 110.473078][ T25] sp : ffff80001b3d6980 [ 110.474183][ T25] x29: ffff80001b3d69c0 x28: 1fffe0001d9e0603 x27: ffff80001237bee8 [ 110.476323][ T25] x26: ffff0000cba97700 x25: ffff0000c1db5650 x24: 0000000000000008 [ 110.478503][ T25] x23: ffff800012382540 x22: dfff800000000000 x21: 0000000000000002 [ 110.480670][ T25] x20: 0000000000000c00 x19: ffff0000c1db5600 x18: 0000000000000001 [ 110.482835][ T25] x17: 0000000000000000 x16: ffff8000111a5644 x15: 00000000ffffffff [ 110.484981][ T25] x14: 0000000000ff0100 x13: 0000000000000001 x12: 0000000000ff0100 [ 110.487160][ T25] x11: 0000000000000000 x10: 0000000000000000 x9 : bbc5ad81656db900 [ 110.489387][ T25] x8 : bbc5ad81656db900 x7 : 0000000000000001 x6 : 0000000000000001 [ 110.491528][ T25] x5 : ffff80001b3d6278 x4 : ffff80001422f280 x3 : ffff80000850383c [ 110.493709][ T25] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000029 [ 110.495916][ T25] Call trace: [ 110.496782][ T25] usb_submit_urb+0xa44/0x1580 [ 110.498105][ T25] usb_start_wait_urb+0xe8/0x3bc [ 110.499420][ T25] usb_bulk_msg+0x2e4/0x3e4 [ 110.500736][ T25] amradio_set_mute+0x1a4/0x3f4 [ 110.502052][ T25] usb_amradio_probe+0x36c/0x688 [ 110.503372][ T25] usb_probe_interface+0x4fc/0x994 [ 110.504820][ T25] really_probe+0x26c/0xaec [ 110.506063][ T25] __driver_probe_device+0x180/0x314 [ 110.507478][ T25] driver_probe_device+0x78/0x34c [ 110.508906][ T25] __device_attach_driver+0x274/0x4c4 [ 110.510396][ T25] bus_for_each_drv+0x150/0x1d8 [ 110.511692][ T25] __device_attach+0x2a8/0x3d4 [ 110.512999][ T25] device_initial_probe+0x24/0x34 [ 110.514316][ T25] bus_probe_device+0xbc/0x1c4 [ 110.515580][ T25] device_add+0xb04/0xf94 [ 110.516766][ T25] usb_set_configuration+0x15b8/0x1b2c [ 110.518241][ T25] usb_generic_driver_probe+0x8c/0x144 [ 110.519663][ T25] usb_probe_device+0x120/0x25c [ 110.520957][ T25] really_probe+0x26c/0xaec [ 110.522147][ T25] __driver_probe_device+0x180/0x314 [ 110.523625][ T25] driver_probe_device+0x78/0x34c [ 110.524975][ T25] __device_attach_driver+0x274/0x4c4 [ 110.526436][ T25] bus_for_each_drv+0x150/0x1d8 [ 110.527767][ T25] __device_attach+0x2a8/0x3d4 [ 110.529017][ T25] device_initial_probe+0x24/0x34 [ 110.530411][ T25] bus_probe_device+0xbc/0x1c4 [ 110.531729][ T25] device_add+0xb04/0xf94 [ 110.532983][ T25] usb_new_device+0x7ec/0x1164 [ 110.534235][ T25] hub_event+0x20cc/0x4188 [ 110.535472][ T25] process_one_work+0x79c/0x1140 [ 110.536760][ T25] worker_thread+0x8f4/0x101c [ 110.538027][ T25] kthread+0x374/0x454 [ 110.539097][ T25] ret_from_fork+0x10/0x20 [ 110.540278][ T25] irq event stamp: 196484 [ 110.541411][ T25] hardirqs last enabled at (196483): [] __up_console_sem+0xb4/0x100 [ 110.543972][ T25] hardirqs last disabled at (196484): [] el1_dbg+0x24/0x80 [ 110.546350][ T25] softirqs last enabled at (194566): [] handle_softirqs+0xa4c/0xbf0 [ 110.548982][ T25] softirqs last disabled at (194559): [] __irq_exit_rcu+0x240/0x440 [ 110.551624][ T25] ---[ end trace b02678f3a87836e5 ]--- [ 110.572525][ T25] (null): radio-mr800 - initialization failed [ 110.574382][ T25] radio-mr800: probe of 1-1:6.97 failed with error -71 [ 110.579132][ T25] usbhid 1-1:6.97: couldn't find an input interrupt endpoint [ 110.633471][ T25] usb 1-1: USB disconnect, device number 5 1970/01/01 00:01:50 executed programs: 6 [ 111.152524][ T1534] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 111.552615][ T1534] usb 1-1: unable to get BOS descriptor or descriptor too short [ 111.632621][ T1534] usb 1-1: config 6 has an invalid interface number: 97 but max is 1 [ 111.634836][ T1534] usb 1-1: config 6 has an invalid interface number: 114 but max is 1 [ 111.636964][ T1534] usb 1-1: config 6 has no interface number 0 [ 111.638533][ T1534] usb 1-1: config 6 has no interface number 1 [ 111.640171][ T1534] usb 1-1: config 6 interface 97 altsetting 1 endpoint 0x6 has an invalid bInterval 17, changing to 8 [ 111.643488][ T1534] usb 1-1: config 6 interface 97 altsetting 1 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 111.646377][ T1534] usb 1-1: config 6 interface 97 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 8 [ 111.649007][ T1534] usb 1-1: config 6 interface 97 altsetting 1 endpoint 0xA has invalid maxpacket 1527, setting to 64 [ 111.651927][ T1534] usb 1-1: config 6 interface 97 has no altsetting 0 [ 111.653818][ T1534] usb 1-1: config 6 interface 114 has no altsetting 0 [ 111.812603][ T1534] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=10.4c [ 111.815214][ T1534] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.817300][ T1534] usb 1-1: Product: syz [ 111.818385][ T1534] usb 1-1: Manufacturer: syz [ 111.819568][ T1534] usb 1-1: SerialNumber: syz [ 111.843347][ T4874] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 112.175551][ T1534] ------------[ cut here ]------------ [ 112.177098][ T1534] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 112.178994][ T1534] WARNING: CPU: 0 PID: 1534 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1580 [ 112.181493][ T1534] Modules linked in: [ 112.182482][ T1534] CPU: 0 PID: 1534 Comm: kworker/0:2 Tainted: G W 5.15.184-syzkaller #0 [ 112.185124][ T1534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 112.187839][ T1534] Workqueue: usb_hub_wq hub_event [ 112.189226][ T1534] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 112.191298][ T1534] pc : usb_submit_urb+0xa44/0x1580 [ 112.192657][ T1534] lr : usb_submit_urb+0xa44/0x1580 [ 112.194033][ T1534] sp : ffff800023136980 [ 112.195130][ T1534] x29: ffff8000231369c0 x28: 1fffe0001b5b9a03 x27: ffff80001237bee8 [ 112.197257][ T1534] x26: ffff0000c2578b00 x25: ffff0000cad2fe50 x24: 0000000000000008 [ 112.199403][ T1534] x23: ffff800012382540 x22: dfff800000000000 x21: 0000000000000002 [ 112.201563][ T1534] x20: 0000000000000c00 x19: ffff0000cad2fe00 x18: 0000000000000001 [ 112.203723][ T1534] x17: 0000000000000000 x16: ffff8000111a5644 x15: 00000000ffffffff [ 112.205922][ T1534] x14: 0000000000ff0100 x13: 0000000000000001 x12: 0000000000ff0100 [ 112.208143][ T1534] x11: 0000000000000000 x10: 0000000000000000 x9 : 9dbbb92d54b34800 [ 112.210313][ T1534] x8 : 9dbbb92d54b34800 x7 : 0000000000000001 x6 : 0000000000000001 [ 112.212501][ T1534] x5 : ffff800023136278 x4 : ffff80001422f280 x3 : ffff80000850383c [ 112.214719][ T1534] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000029 [ 112.216918][ T1534] Call trace: [ 112.217802][ T1534] usb_submit_urb+0xa44/0x1580 [ 112.219152][ T1534] usb_start_wait_urb+0xe8/0x3bc [ 112.220436][ T1534] usb_bulk_msg+0x2e4/0x3e4 [ 112.221720][ T1534] amradio_set_mute+0x1a4/0x3f4 [ 112.223159][ T1534] usb_amradio_probe+0x36c/0x688 [ 112.224503][ T1534] usb_probe_interface+0x4fc/0x994 [ 112.225943][ T1534] really_probe+0x26c/0xaec [ 112.227175][ T1534] __driver_probe_device+0x180/0x314 [ 112.228555][ T1534] driver_probe_device+0x78/0x34c [ 112.229964][ T1534] __device_attach_driver+0x274/0x4c4 [ 112.231496][ T1534] bus_for_each_drv+0x150/0x1d8 [ 112.232851][ T1534] __device_attach+0x2a8/0x3d4 [ 112.234167][ T1534] device_initial_probe+0x24/0x34 [ 112.235583][ T1534] bus_probe_device+0xbc/0x1c4 [ 112.236855][ T1534] device_add+0xb04/0xf94 [ 112.238049][ T1534] usb_set_configuration+0x15b8/0x1b2c [ 112.239564][ T1534] usb_generic_driver_probe+0x8c/0x144 [ 112.241015][ T1534] usb_probe_device+0x120/0x25c [ 112.242388][ T1534] really_probe+0x26c/0xaec [ 112.243611][ T1534] __driver_probe_device+0x180/0x314 [ 112.245061][ T1534] driver_probe_device+0x78/0x34c [ 112.246362][ T1534] __device_attach_driver+0x274/0x4c4 [ 112.247897][ T1534] bus_for_each_drv+0x150/0x1d8 [ 112.249195][ T1534] __device_attach+0x2a8/0x3d4 [ 112.250474][ T1534] device_initial_probe+0x24/0x34 [ 112.251872][ T1534] bus_probe_device+0xbc/0x1c4 [ 112.253122][ T1534] device_add+0xb04/0xf94 [ 112.254267][ T1534] usb_new_device+0x7ec/0x1164 [ 112.255582][ T1534] hub_event+0x20cc/0x4188 [ 112.256815][ T1534] process_one_work+0x79c/0x1140 [ 112.258168][ T1534] worker_thread+0x8f4/0x101c [ 112.259443][ T1534] kthread+0x374/0x454 [ 112.260537][ T1534] ret_from_fork+0x10/0x20 [ 112.261767][ T1534] irq event stamp: 110630 [ 112.262915][ T1534] hardirqs last enabled at (110629): [] __up_console_sem+0xb4/0x100 [ 112.265544][ T1534] hardirqs last disabled at (110630): [] el1_dbg+0x24/0x80 [ 112.267852][ T1534] softirqs last enabled at (108138): [] handle_softirqs+0xa4c/0xbf0 [ 112.270525][ T1534] softirqs last disabled at (108125): [] __irq_exit_rcu+0x240/0x440 [ 112.273256][ T1534] ---[ end trace b02678f3a87836e6 ]--- [ 112.293570][ T1534] (null): radio-mr800 - initialization failed [ 112.295331][ T1534] radio-mr800: probe of 1-1:6.97 failed with error -71 [ 112.297382][ T1534] usbhid 1-1:6.97: couldn't find an input interrupt endpoint [ 112.336208][ T1534] usb 1-1: USB disconnect, device number 6 [ 112.862570][ T25] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 113.262594][ T25] usb 1-1: unable to get BOS descriptor or descriptor too short [ 113.353699][ T25] usb 1-1: config 6 has an invalid interface number: 97 but max is 1 [ 113.355919][ T25] usb 1-1: config 6 has an invalid interface number: 114 but max is 1 [ 113.358057][ T25] usb 1-1: config 6 has no interface number 0 [ 113.359633][ T25] usb 1-1: config 6 has no interface number 1 [ 113.361242][ T25] usb 1-1: config 6 interface 97 altsetting 1 endpoint 0x6 has an invalid bInterval 17, changing to 8 [ 113.364232][ T25] usb 1-1: config 6 interface 97 altsetting 1 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 113.367086][ T25] usb 1-1: config 6 interface 97 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 8 [ 113.369582][ T25] usb 1-1: config 6 interface 97 altsetting 1 endpoint 0xA has invalid maxpacket 1527, setting to 64 [ 113.372430][ T25] usb 1-1: config 6 interface 97 has no altsetting 0 [ 113.374162][ T25] usb 1-1: config 6 interface 114 has no altsetting 0 [ 113.532659][ T25] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=10.4c [ 113.535154][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.537341][ T25] usb 1-1: Product: syz [ 113.538462][ T25] usb 1-1: Manufacturer: syz [ 113.539684][ T25] usb 1-1: SerialNumber: syz [ 113.562868][ T4876] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 113.854677][ T25] ------------[ cut here ]------------ [ 113.856172][ T25] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 113.858050][ T25] WARNING: CPU: 1 PID: 25 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1580 [ 113.860514][ T25] Modules linked in: [ 113.861528][ T25] CPU: 1 PID: 25 Comm: kworker/1:1 Tainted: G W 5.15.184-syzkaller #0 [ 113.864071][ T25] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 113.866794][ T25] Workqueue: usb_hub_wq hub_event [ 113.868147][ T25] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 113.870270][ T25] pc : usb_submit_urb+0xa44/0x1580 [ 113.871690][ T25] lr : usb_submit_urb+0xa44/0x1580 [ 113.873083][ T25] sp : ffff80001b3d6980 [ 113.874185][ T25] x29: ffff80001b3d69c0 x28: 1fffe00019392803 x27: ffff80001237bee8 [ 113.876315][ T25] x26: ffff0000d2c06400 x25: ffff0000c1599450 x24: 0000000000000008 [ 113.878471][ T25] x23: ffff800012382540 x22: dfff800000000000 x21: 0000000000000002 [ 113.880611][ T25] x20: 0000000000000c00 x19: ffff0000c1599400 x18: 0000000000000001 [ 113.882743][ T25] x17: 0000000000000000 x16: ffff8000111a5644 x15: 00000000ffffffff [ 113.884952][ T25] x14: 0000000000ff0100 x13: 0000000000000001 x12: 0000000000ff0100 [ 113.887218][ T25] x11: 0000000000000000 x10: 0000000000000000 x9 : bbc5ad81656db900 [ 113.889424][ T25] x8 : bbc5ad81656db900 x7 : 0000000000000001 x6 : 0000000000000001 [ 113.891635][ T25] x5 : ffff80001b3d6278 x4 : ffff80001422f280 x3 : ffff80000850383c [ 113.893864][ T25] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000029 [ 113.896045][ T25] Call trace: [ 113.896938][ T25] usb_submit_urb+0xa44/0x1580 [ 113.898255][ T25] usb_start_wait_urb+0xe8/0x3bc [ 113.899598][ T25] usb_bulk_msg+0x2e4/0x3e4 [ 113.900797][ T25] amradio_set_mute+0x1a4/0x3f4 [ 113.902191][ T25] usb_amradio_probe+0x36c/0x688 [ 113.903560][ T25] usb_probe_interface+0x4fc/0x994 [ 113.904961][ T25] really_probe+0x26c/0xaec [ 113.906197][ T25] __driver_probe_device+0x180/0x314 [ 113.907655][ T25] driver_probe_device+0x78/0x34c [ 113.909014][ T25] __device_attach_driver+0x274/0x4c4 [ 113.910545][ T25] bus_for_each_drv+0x150/0x1d8 [ 113.911927][ T25] __device_attach+0x2a8/0x3d4 [ 113.913198][ T25] device_initial_probe+0x24/0x34 [ 113.914568][ T25] bus_probe_device+0xbc/0x1c4 [ 113.915872][ T25] device_add+0xb04/0xf94 [ 113.917067][ T25] usb_set_configuration+0x15b8/0x1b2c [ 113.918553][ T25] usb_generic_driver_probe+0x8c/0x144 [ 113.920032][ T25] usb_probe_device+0x120/0x25c [ 113.921308][ T25] really_probe+0x26c/0xaec [ 113.922490][ T25] __driver_probe_device+0x180/0x314 [ 113.923903][ T25] driver_probe_device+0x78/0x34c [ 113.925304][ T25] __device_attach_driver+0x274/0x4c4 [ 113.926764][ T25] bus_for_each_drv+0x150/0x1d8 [ 113.928141][ T25] __device_attach+0x2a8/0x3d4 [ 113.929478][ T25] device_initial_probe+0x24/0x34 [ 113.930836][ T25] bus_probe_device+0xbc/0x1c4 [ 113.932193][ T25] device_add+0xb04/0xf94 [ 113.933398][ T25] usb_new_device+0x7ec/0x1164 [ 113.934647][ T25] hub_event+0x20cc/0x4188 [ 113.935870][ T25] process_one_work+0x79c/0x1140 [ 113.937200][ T25] worker_thread+0x8f4/0x101c [ 113.938556][ T25] kthread+0x374/0x454 [ 113.939670][ T25] ret_from_fork+0x10/0x20 [ 113.940904][ T25] irq event stamp: 205620 [ 113.942062][ T25] hardirqs last enabled at (205619): [] __up_console_sem+0xb4/0x100 [ 113.944751][ T25] hardirqs last disabled at (205620): [] el1_dbg+0x24/0x80 [ 113.947166][ T25] softirqs last enabled at (203354): [] handle_softirqs+0xa4c/0xbf0 [ 113.949886][ T25] softirqs last disabled at (203347): [] __irq_exit_rcu+0x240/0x440 [ 113.952533][ T25] ---[ end trace b02678f3a87836e7 ]--- [ 113.982613][ T25] (null): radio-mr800 - initialization failed [ 113.984391][ T25] radio-mr800: probe of 1-1:6.97 failed with error -71 [ 113.986478][ T25] usbhid 1-1:6.97: couldn't find an input interrupt endpoint [ 114.025148][ T25] usb 1-1: USB disconnect, device number 7 [ 114.632522][ T4111] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 115.032576][ T4111] usb 1-1: unable to get BOS descriptor or descriptor too short [ 115.112686][ T4111] usb 1-1: config 6 has an invalid interface number: 97 but max is 1 [ 115.114985][ T4111] usb 1-1: config 6 has an invalid interface number: 114 but max is 1 [ 115.117162][ T4111] usb 1-1: config 6 has no interface number 0 [ 115.118767][ T4111] usb 1-1: config 6 has no interface number 1 [ 115.120401][ T4111] usb 1-1: config 6 interface 97 altsetting 1 endpoint 0x6 has an invalid bInterval 17, changing to 8 [ 115.123420][ T4111] usb 1-1: config 6 interface 97 altsetting 1 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 115.126392][ T4111] usb 1-1: config 6 interface 97 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 8 [ 115.128979][ T4111] usb 1-1: config 6 interface 97 altsetting 1 endpoint 0xA has invalid maxpacket 1527, setting to 64 [ 115.131854][ T4111] usb 1-1: config 6 interface 97 has no altsetting 0 [ 115.133687][ T4111] usb 1-1: config 6 interface 114 has no altsetting 0