Warning: Permanently added '10.128.1.76' (ED25519) to the list of known hosts. 2023/11/18 16:22:27 ignoring optional flag "sandboxArg"="0" 2023/11/18 16:22:28 parsed 1 programs 2023/11/18 16:22:28 executed programs: 0 [ 44.012878][ T45] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 44.014744][ T45] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 44.016656][ T45] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 44.018604][ T45] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 44.020480][ T45] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 44.022336][ T45] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 44.078229][ T3947] chnl_net:caif_netlink_parms(): no params data found [ 44.086717][ T3947] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.088507][ T3947] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.090403][ T3947] device bridge_slave_0 entered promiscuous mode [ 44.092392][ T3947] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.094190][ T3947] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.096155][ T3947] device bridge_slave_1 entered promiscuous mode [ 44.100798][ T3947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.103514][ T3947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.126695][ T3947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.128411][ T3947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.134989][ T3947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.138190][ T3947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.140024][ T3947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.146709][ T3947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.180551][ T3947] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.182483][ T3947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.184266][ T3947] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.186038][ T3947] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.310815][ T3947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.313545][ T99] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.315580][ T99] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.317848][ T99] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.320007][ T99] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 44.342120][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.344314][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.346121][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.348343][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.350373][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.352121][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.354176][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.356177][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.416333][ T3947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.418392][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 44.420263][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 44.446124][ T3947] device veth0_vlan entered promiscuous mode [ 44.448378][ T3751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.450585][ T3751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.452787][ T3751] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.454689][ T3751] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.457595][ T3947] device veth1_vlan entered promiscuous mode [ 44.461137][ T99] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 44.463147][ T99] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 44.465258][ T99] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.467885][ T3947] device veth0_macvtap entered promiscuous mode [ 44.494592][ T3947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.497025][ T3947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.498971][ T3751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.501267][ T3751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.503506][ T3751] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 44.866580][ T3748] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 45.116446][ T3748] usb 1-1: Using ep0 maxpacket: 32 [ 45.256469][ T3748] usb 1-1: config 64 has an invalid interface number: 245 but max is 2 [ 45.258542][ T3748] usb 1-1: config 64 has an invalid interface number: 155 but max is 2 [ 45.260554][ T3748] usb 1-1: config 64 contains an unexpected descriptor of type 0x2, skipping [ 45.262697][ T3748] usb 1-1: config 64 contains an unexpected descriptor of type 0x1, skipping [ 45.264893][ T3748] usb 1-1: config 64 has an invalid interface number: 243 but max is 2 [ 45.266971][ T3748] usb 1-1: config 64 has no interface number 0 [ 45.268489][ T3748] usb 1-1: config 64 has no interface number 1 [ 45.270041][ T3748] usb 1-1: config 64 has no interface number 2 [ 45.271579][ T3748] usb 1-1: config 64 interface 245 altsetting 7 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 45.274303][ T3748] usb 1-1: config 64 interface 245 altsetting 7 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 45.277098][ T3748] usb 1-1: config 64 interface 245 altsetting 7 has an invalid endpoint descriptor of length 2, skipping [ 45.279936][ T3748] usb 1-1: config 64 interface 245 altsetting 7 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 45.283155][ T3748] usb 1-1: config 64 interface 155 altsetting 1 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 45.285882][ T3748] usb 1-1: config 64 interface 155 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 45.288631][ T3748] usb 1-1: config 64 interface 155 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 45.291311][ T3748] usb 1-1: config 64 interface 155 altsetting 1 endpoint 0xA has invalid maxpacket 72, setting to 64 [ 45.294005][ T3748] usb 1-1: config 64 interface 155 altsetting 1 endpoint 0x81 has an invalid bInterval 139, changing to 11 [ 45.296939][ T3748] usb 1-1: config 64 interface 155 altsetting 1 endpoint 0x81 has invalid maxpacket 18251, setting to 1024 [ 45.299745][ T3748] usb 1-1: config 64 interface 155 altsetting 1 has a duplicate endpoint with address 0xA, skipping [ 45.302400][ T3748] usb 1-1: config 64 interface 155 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 45.305000][ T3748] usb 1-1: config 64 interface 155 altsetting 1 has 9 endpoint descriptors, different from the interface descriptor's value: 8 [ 45.308233][ T3748] usb 1-1: config 64 interface 243 altsetting 31 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 45.311133][ T3748] usb 1-1: config 64 interface 245 has no altsetting 0 [ 45.312824][ T3748] usb 1-1: config 64 interface 155 has no altsetting 0 [ 45.314568][ T3748] usb 1-1: config 64 interface 243 has no altsetting 0 [ 45.476487][ T3748] usb 1-1: New USB device found, idVendor=083a, idProduct=4506, bcdDevice=6d.7d [ 45.478796][ T3748] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.480787][ T3748] usb 1-1: Product: syz [ 45.481821][ T3748] usb 1-1: Manufacturer: syz [ 45.482958][ T3748] usb 1-1: SerialNumber: syz [ 45.796752][ T3748] ------------[ cut here ]------------ [ 45.798141][ T3748] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 45.799824][ T3748] WARNING: CPU: 1 PID: 3748 at drivers/usb/core/urb.c:505 usb_submit_urb+0x594/0x9b4 [ 45.802313][ T3748] Modules linked in: [ 45.803248][ T3748] CPU: 1 PID: 3748 Comm: kworker/1:3 Not tainted 6.1.62-syzkaller #0 [ 45.805297][ T3748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 45.807813][ T3748] Workqueue: usb_hub_wq hub_event [ 45.809105][ T3748] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 45.811097][ T3748] pc : usb_submit_urb+0x594/0x9b4 [ 45.812455][ T3748] lr : usb_submit_urb+0x594/0x9b4 [ 45.813735][ T3748] sp : ffff8000129d3430 [ 45.814753][ T3748] x29: ffff8000129d3440 x28: ffff0000cf839000 x27: ffff0000c52da35c [ 45.816775][ T3748] x26: ffff80000d20ad34 x25: ffff0000cf8390a8 x24: ffff0000c68a6200 [ 45.818797][ T3748] x23: ffff80000d235b0c x22: 0000000000000400 x21: 0000000000000003 [ 45.820887][ T3748] x20: 0000000000000a20 x19: ffff0000c52da300 x18: 0000000000000000 [ 45.822939][ T3748] x17: 0000000000000000 x16: 0000000000000002 x15: 0000000000000000 [ 45.824946][ T3748] x14: 0000000000000000 x13: 205d383437335420 x12: ffff80000eab2000 [ 45.826992][ T3748] x11: ff808000080e0e64 x10: 0000000000000000 x9 : dca9c63ff8a09800 [ 45.829127][ T3748] x8 : dca9c63ff8a09800 x7 : 0000000000000000 x6 : ffff80000bffb55c [ 45.831214][ T3748] x5 : 0000000000000000 x4 : 0000000000000080 x3 : 0000000000000000 [ 45.833357][ T3748] x2 : 0000000000000000 x1 : 0000000100000000 x0 : 0000000000000000 [ 45.835438][ T3748] Call trace: [ 45.836264][ T3748] usb_submit_urb+0x594/0x9b4 [ 45.837448][ T3748] ar5523_submit_rx_cmd+0x74/0xf4 [ 45.838772][ T3748] ar5523_probe+0x41c/0xbb8 [ 45.839949][ T3748] usb_probe_interface+0x2fc/0x4ac [ 45.841228][ T3748] really_probe+0x218/0x61c [ 45.842415][ T3748] __driver_probe_device+0xe8/0x1fc [ 45.843750][ T3748] driver_probe_device+0x54/0x2f4 [ 45.845031][ T3748] __device_attach_driver+0x19c/0x2e4 [ 45.846435][ T3748] bus_for_each_drv+0xb4/0x124 [ 45.847687][ T3748] __device_attach+0x148/0x270 [ 45.848900][ T3748] device_initial_probe+0x24/0x34 [ 45.850165][ T3748] bus_probe_device+0x5c/0xf0 [ 45.851400][ T3748] device_add+0x754/0x968 [ 45.852492][ T3748] usb_set_configuration+0xb0c/0xd18 [ 45.853822][ T3748] usb_generic_driver_probe+0x5c/0xe8 [ 45.855229][ T3748] usb_probe_device+0xd0/0x180 [ 45.856461][ T3748] really_probe+0x218/0x61c [ 45.857560][ T3748] __driver_probe_device+0xe8/0x1fc [ 45.858909][ T3748] driver_probe_device+0x54/0x2f4 [ 45.860182][ T3748] __device_attach_driver+0x19c/0x2e4 [ 45.861569][ T3748] bus_for_each_drv+0xb4/0x124 [ 45.862805][ T3748] __device_attach+0x148/0x270 [ 45.864034][ T3748] device_initial_probe+0x24/0x34 [ 45.865335][ T3748] bus_probe_device+0x5c/0xf0 [ 45.866496][ T3748] device_add+0x754/0x968 [ 45.867617][ T3748] usb_new_device+0x428/0x8a8 [ 45.868800][ T3748] hub_event+0x1728/0x258c [ 45.869928][ T3748] process_one_work+0x2d4/0x4e0 [ 45.871252][ T3748] worker_thread+0x340/0x5f8 [ 45.872416][ T3748] kthread+0x120/0x14c [ 45.873466][ T3748] ret_from_fork+0x10/0x20 [ 45.874611][ T3748] ---[ end trace 0000000000000000 ]--- [ 45.876157][ T3748] usb 1-1: error -22 when submitting rx urb [ 45.877674][ T3748] usb 1-1: Failed to submit rx cmd [ 45.879214][ T3748] ar5523: probe of 1-1:64.245 failed with error -22 [ 45.882032][ T3748] ------------[ cut here ]------------ [ 45.883413][ T3748] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 45.885130][ T3748] WARNING: CPU: 1 PID: 3748 at drivers/usb/core/urb.c:505 usb_submit_urb+0x594/0x9b4 [ 45.887423][ T3748] Modules linked in: [ 45.888435][ T3748] CPU: 1 PID: 3748 Comm: kworker/1:3 Tainted: G W 6.1.62-syzkaller #0 [ 45.890831][ T3748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 45.893496][ T3748] Workqueue: usb_hub_wq hub_event [ 45.894738][ T3748] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 45.896771][ T3748] pc : usb_submit_urb+0x594/0x9b4 [ 45.898122][ T3748] lr : usb_submit_urb+0x594/0x9b4 [ 45.899456][ T3748] sp : ffff8000129d3430 [ 45.900573][ T3748] x29: ffff8000129d3440 x28: ffff0000cf839000 x27: ffff0000cc23835c [ 45.902560][ T3748] x26: ffff80000d20ad34 x25: ffff0000cf8390a8 x24: ffff0000c68a6200 [ 45.904654][ T3748] x23: ffff80000d235b0c x22: 0000000000000400 x21: 0000000000000003 [ 45.906667][ T3748] x20: 0000000000000a20 x19: ffff0000cc238300 x18: ffff80000c03d2c4 [ 45.908716][ T3748] x17: 0000000000000000 x16: 0000000000000002 x15: 0000000000000000 [ 45.910776][ T3748] x14: 0000000000000000 x13: 205d383437335420 x12: ffff80000eab2000 [ 45.912800][ T3748] x11: ff808000080e0e64 x10: 0000000000000000 x9 : dca9c63ff8a09800 [ 45.914830][ T3748] x8 : dca9c63ff8a09800 x7 : 0000000000000000 x6 : ffff80000bffb55c [ 45.916836][ T3748] x5 : 0000000000000000 x4 : 0000000000000080 x3 : 0000000000000000 [ 45.918830][ T3748] x2 : 0000000000000000 x1 : 0000000100000000 x0 : 0000000000000000 [ 45.920795][ T3748] Call trace: [ 45.921620][ T3748] usb_submit_urb+0x594/0x9b4 [ 45.922871][ T3748] ar5523_submit_rx_cmd+0x74/0xf4 [ 45.924243][ T3748] ar5523_probe+0x41c/0xbb8 [ 45.925377][ T3748] usb_probe_interface+0x2fc/0x4ac [ 45.926728][ T3748] really_probe+0x218/0x61c [ 45.927893][ T3748] __driver_probe_device+0xe8/0x1fc [ 45.929206][ T3748] driver_probe_device+0x54/0x2f4 [ 45.930504][ T3748] __device_attach_driver+0x19c/0x2e4 [ 45.931883][ T3748] bus_for_each_drv+0xb4/0x124 [ 45.933101][ T3748] __device_attach+0x148/0x270 [ 45.934316][ T3748] device_initial_probe+0x24/0x34 [ 45.935596][ T3748] bus_probe_device+0x5c/0xf0 [ 45.936779][ T3748] device_add+0x754/0x968 [ 45.937868][ T3748] usb_set_configuration+0xb0c/0xd18 [ 45.939237][ T3748] usb_generic_driver_probe+0x5c/0xe8 [ 45.940649][ T3748] usb_probe_device+0xd0/0x180 [ 45.941842][ T3748] really_probe+0x218/0x61c [ 45.942987][ T3748] __driver_probe_device+0xe8/0x1fc [ 45.944329][ T3748] driver_probe_device+0x54/0x2f4 [ 45.945617][ T3748] __device_attach_driver+0x19c/0x2e4 [ 45.946983][ T3748] bus_for_each_drv+0xb4/0x124 [ 45.948200][ T3748] __device_attach+0x148/0x270 [ 45.949373][ T3748] device_initial_probe+0x24/0x34 [ 45.950679][ T3748] bus_probe_device+0x5c/0xf0 [ 45.951870][ T3748] device_add+0x754/0x968 [ 45.952988][ T3748] usb_new_device+0x428/0x8a8 [ 45.954204][ T3748] hub_event+0x1728/0x258c [ 45.955323][ T3748] process_one_work+0x2d4/0x4e0 [ 45.956559][ T3748] worker_thread+0x340/0x5f8 [ 45.957738][ T3748] kthread+0x120/0x14c [ 45.958749][ T3748] ret_from_fork+0x10/0x20 [ 45.959884][ T3748] ---[ end trace 0000000000000000 ]--- [ 45.961415][ T3748] usb 1-1: error -22 when submitting rx urb [ 45.962897][ T3748] usb 1-1: Failed to submit rx cmd [ 45.964809][ T3748] ar5523: probe of 1-1:64.155 failed with error -22 [ 46.006768][ T3748] ------------[ cut here ]------------ [ 46.008138][ T3748] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 46.009913][ T3748] WARNING: CPU: 1 PID: 3748 at drivers/usb/core/urb.c:505 usb_submit_urb+0x594/0x9b4 [ 46.012406][ T3748] Modules linked in: [ 46.013372][ T3748] CPU: 1 PID: 3748 Comm: kworker/1:3 Tainted: G W 6.1.62-syzkaller #0 [ 46.015717][ T3748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 46.018290][ T3748] Workqueue: usb_hub_wq hub_event [ 46.019550][ T3748] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 46.021606][ T3748] pc : usb_submit_urb+0x594/0x9b4 [ 46.022890][ T3748] lr : usb_submit_urb+0x594/0x9b4 [ 46.024167][ T3748] sp : ffff8000129d3430 [ 46.025188][ T3748] x29: ffff8000129d3440 x28: ffff0000cf839000 x27: ffff0000c52da05c [ 46.027280][ T3748] x26: ffff80000d20ad34 x25: ffff0000cf8390a8 x24: ffff0000c68a6200 [ 46.029353][ T3748] x23: ffff80000d235b0c x22: 0000000000000400 x21: 0000000000000003 [ 46.031407][ T3748] x20: 0000000000000a20 x19: ffff0000c52da000 x18: 0000000000000000 [ 46.033449][ T3748] x17: 0000000000000000 x16: 0000000000000002 x15: 0000000000000000 [ 46.035472][ T3748] x14: 0000000000000000 x13: 205d383437335420 x12: ffff80000eab2000 [ 46.037557][ T3748] x11: ff808000080e0e64 x10: 0000000000000000 x9 : dca9c63ff8a09800 [ 46.039636][ T3748] x8 : dca9c63ff8a09800 x7 : 0000000000000000 x6 : ffff80000bffb55c [ 46.041742][ T3748] x5 : 0000000000000000 x4 : 0000000000000080 x3 : 0000000000000000 [ 46.043813][ T3748] x2 : 0000000000000000 x1 : 0000000100000000 x0 : 0000000000000000 [ 46.045840][ T3748] Call trace: [ 46.046607][ T3748] usb_submit_urb+0x594/0x9b4 [ 46.047850][ T3748] ar5523_submit_rx_cmd+0x74/0xf4 [ 46.049111][ T3748] ar5523_probe+0x41c/0xbb8 [ 46.050258][ T3748] usb_probe_interface+0x2fc/0x4ac [ 46.051557][ T3748] really_probe+0x218/0x61c [ 46.052709][ T3748] __driver_probe_device+0xe8/0x1fc [ 46.054065][ T3748] driver_probe_device+0x54/0x2f4 [ 46.055315][ T3748] __device_attach_driver+0x19c/0x2e4 [ 46.056701][ T3748] bus_for_each_drv+0xb4/0x124 [ 46.057904][ T3748] __device_attach+0x148/0x270 [ 46.059134][ T3748] device_initial_probe+0x24/0x34 [ 46.060530][ T3748] bus_probe_device+0x5c/0xf0 [ 46.061679][ T3748] device_add+0x754/0x968 [ 46.062769][ T3748] usb_set_configuration+0xb0c/0xd18 [ 46.064095][ T3748] usb_generic_driver_probe+0x5c/0xe8 [ 46.065448][ T3748] usb_probe_device+0xd0/0x180 [ 46.066709][ T3748] really_probe+0x218/0x61c [ 46.067810][ T3748] __driver_probe_device+0xe8/0x1fc [ 46.069172][ T3748] driver_probe_device+0x54/0x2f4 [ 46.070466][ T3748] __device_attach_driver+0x19c/0x2e4 [ 46.071786][ T3748] bus_for_each_drv+0xb4/0x124 [ 46.073077][ T3748] __device_attach+0x148/0x270 [ 46.074324][ T3748] device_initial_probe+0x24/0x34 [ 46.075678][ T3748] bus_probe_device+0x5c/0xf0 [ 46.076903][ T3748] device_add+0x754/0x968 [ 46.078052][ T3748] usb_new_device+0x428/0x8a8 [ 46.079286][ T3748] hub_event+0x1728/0x258c [ 46.080427][ T3748] process_one_work+0x2d4/0x4e0 [ 46.081638][ T3748] worker_thread+0x340/0x5f8 [ 46.082875][ T3748] kthread+0x120/0x14c [ 46.083868][ T3748] ret_from_fork+0x10/0x20 [ 46.085037][ T3748] ---[ end trace 0000000000000000 ]--- [ 46.086436][ T3748] usb 1-1: error -22 when submitting rx urb [ 46.087900][ T3748] usb 1-1: Failed to submit rx cmd [ 46.089354][ T3748] ar5523: probe of 1-1:64.243 failed with error -22 [ 46.092516][ T3748] usb 1-1: USB disconnect, device number 2 [ 46.096500][ T45] Bluetooth: hci0: command 0x0409 tx timeout [ 46.616446][ T3748] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 46.856478][ T3748] usb 1-1: Using ep0 maxpacket: 32 [ 47.006482][ T3748] usb 1-1: config 64 has an invalid interface number: 245 but max is 2 [ 47.008637][ T3748] usb 1-1: config 64 has an invalid interface number: 155 but max is 2 [ 47.010759][ T3748] usb 1-1: config 64 contains an unexpected descriptor of type 0x2, skipping [ 47.012952][ T3748] usb 1-1: config 64 contains an unexpected descriptor of type 0x1, skipping [ 47.015146][ T3748] usb 1-1: config 64 has an invalid interface number: 243 but max is 2 [ 47.017216][ T3748] usb 1-1: config 64 has no interface number 0 [ 47.018768][ T3748] usb 1-1: config 64 has no interface number 1 [ 47.020309][ T3748] usb 1-1: config 64 has no interface number 2 [ 47.021889][ T3748] usb 1-1: config 64 interface 245 altsetting 7 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 47.024712][ T3748] usb 1-1: config 64 interface 245 altsetting 7 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 47.027627][ T3748] usb 1-1: config 64 interface 245 altsetting 7 has an invalid endpoint descriptor of length 2, skipping [ 47.030402][ T3748] usb 1-1: config 64 interface 245 altsetting 7 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 47.033833][ T3748] usb 1-1: config 64 interface 155 altsetting 1 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 47.036547][ T3748] usb 1-1: config 64 interface 155 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 47.039230][ T3748] usb 1-1: config 64 interface 155 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 47.041853][ T3748] usb 1-1: config 64 interface 155 altsetting 1 endpoint 0xA has invalid maxpacket 72, setting to 64 [ 47.044604][ T3748] usb 1-1: config 64 interface 155 altsetting 1 endpoint 0x81 has an invalid bInterval 139, changing to 11 [ 47.047513][ T3748] usb 1-1: config 64 interface 155 altsetting 1 endpoint 0x81 has invalid maxpacket 18251, setting to 1024 [ 47.050461][ T3748] usb 1-1: config 64 interface 155 altsetting 1 has a duplicate endpoint with address 0xA, skipping [ 47.053230][ T3748] usb 1-1: config 64 interface 155 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 47.055863][ T3748] usb 1-1: config 64 interface 155 altsetting 1 has 9 endpoint descriptors, different from the interface descriptor's value: 8 [ 47.059213][ T3748] usb 1-1: config 64 interface 243 altsetting 31 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 47.061972][ T3748] usb 1-1: config 64 interface 245 has no altsetting 0 [ 47.063737][ T3748] usb 1-1: config 64 interface 155 has no altsetting 0 [ 47.065379][ T3748] usb 1-1: config 64 interface 243 has no altsetting 0 [ 47.226562][ T3748] usb 1-1: New USB device found, idVendor=083a, idProduct=4506, bcdDevice=6d.7d [ 47.229085][ T3748] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.231157][ T3748] usb 1-1: Product: syz [ 47.232198][ T3748] usb 1-1: Manufacturer: syz [ 47.233371][ T3748] usb 1-1: SerialNumber: syz [ 47.556774][ T3748] ------------[ cut here ]------------ [ 47.558154][ T3748] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 47.559794][ T3748] WARNING: CPU: 1 PID: 3748 at drivers/usb/core/urb.c:505 usb_submit_urb+0x594/0x9b4 [ 47.562262][ T3748] Modules linked in: [ 47.563203][ T3748] CPU: 1 PID: 3748 Comm: kworker/1:3 Tainted: G W 6.1.62-syzkaller #0 [ 47.565603][ T3748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 47.568180][ T3748] Workqueue: usb_hub_wq hub_event [ 47.569483][ T3748] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 47.571467][ T3748] pc : usb_submit_urb+0x594/0x9b4 [ 47.572775][ T3748] lr : usb_submit_urb+0x594/0x9b4 [ 47.574067][ T3748] sp : ffff8000129d3430 [ 47.575142][ T3748] x29: ffff8000129d3440 x28: ffff0000ca11a800 x27: ffff0000cc23805c [ 47.577276][ T3748] x26: ffff80000d20ad34 x25: ffff0000ca11a8a8 x24: ffff0000cac95c80 [ 47.579302][ T3748] x23: ffff80000d235b0c x22: 0000000000000400 x21: 0000000000000003 [ 47.581361][ T3748] x20: 0000000000000a20 x19: ffff0000cc238000 x18: 0000000000000000 [ 47.583504][ T3748] x17: 0000000000000000 x16: 0000000000000002 x15: 0000000000000000 [ 47.585572][ T3748] x14: 0000000000000000 x13: 205d383437335420 x12: ffff80000eab2000 [ 47.587601][ T3748] x11: ff808000080e0e64 x10: 0000000000000000 x9 : dca9c63ff8a09800 [ 47.589638][ T3748] x8 : dca9c63ff8a09800 x7 : 0000000000000000 x6 : ffff80000bffb55c [ 47.591679][ T3748] x5 : 0000000000000000 x4 : 0000000000000080 x3 : 0000000000000000 [ 47.593754][ T3748] x2 : 0000000000000000 x1 : 0000000100000000 x0 : 0000000000000000 [ 47.595814][ T3748] Call trace: [ 47.596645][ T3748] usb_submit_urb+0x594/0x9b4 [ 47.597805][ T3748] ar5523_submit_rx_cmd+0x74/0xf4 [ 47.599045][ T3748] ar5523_probe+0x41c/0xbb8 [ 47.600209][ T3748] usb_probe_interface+0x2fc/0x4ac [ 47.601493][ T3748] really_probe+0x218/0x61c [ 47.602643][ T3748] __driver_probe_device+0xe8/0x1fc [ 47.603952][ T3748] driver_probe_device+0x54/0x2f4 [ 47.605191][ T3748] __device_attach_driver+0x19c/0x2e4 [ 47.606562][ T3748] bus_for_each_drv+0xb4/0x124 [ 47.607802][ T3748] __device_attach+0x148/0x270 [ 47.609010][ T3748] device_initial_probe+0x24/0x34 [ 47.610245][ T3748] bus_probe_device+0x5c/0xf0 [ 47.611447][ T3748] device_add+0x754/0x968 [ 47.612552][ T3748] usb_set_configuration+0xb0c/0xd18 [ 47.613903][ T3748] usb_generic_driver_probe+0x5c/0xe8 [ 47.615325][ T3748] usb_probe_device+0xd0/0x180 [ 47.616563][ T3748] really_probe+0x218/0x61c [ 47.617725][ T3748] __driver_probe_device+0xe8/0x1fc [ 47.619077][ T3748] driver_probe_device+0x54/0x2f4 [ 47.620353][ T3748] __device_attach_driver+0x19c/0x2e4 [ 47.621757][ T3748] bus_for_each_drv+0xb4/0x124 [ 47.623063][ T3748] __device_attach+0x148/0x270 [ 47.624305][ T3748] device_initial_probe+0x24/0x34 [ 47.625575][ T3748] bus_probe_device+0x5c/0xf0 [ 47.626787][ T3748] device_add+0x754/0x968 [ 47.627876][ T3748] usb_new_device+0x428/0x8a8 [ 47.629093][ T3748] hub_event+0x1728/0x258c [ 47.630245][ T3748] process_one_work+0x2d4/0x4e0 [ 47.631443][ T3748] worker_thread+0x42c/0x5f8 [ 47.632656][ T3748] kthread+0x120/0x14c [ 47.633691][ T3748] ret_from_fork+0x10/0x20 [ 47.634823][ T3748] ---[ end trace 0000000000000000 ]--- [ 47.636624][ T3748] usb 1-1: error -22 when submitting rx urb [ 47.638089][ T3748] usb 1-1: Failed to submit rx cmd [ 47.639545][ T3748] ar5523: probe of 1-1:64.245 failed with error -22 [ 47.642408][ T3748] ------------[ cut here ]------------ [ 47.643758][ T3748] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 47.645457][ T3748] WARNING: CPU: 1 PID: 3748 at drivers/usb/core/urb.c:505 usb_submit_urb+0x594/0x9b4 [ 47.647868][ T3748] Modules linked in: [ 47.648886][ T3748] CPU: 1 PID: 3748 Comm: kworker/1:3 Tainted: G W 6.1.62-syzkaller #0 [ 47.651322][ T3748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 47.653891][ T3748] Workqueue: usb_hub_wq hub_event [ 47.655160][ T3748] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 47.657166][ T3748] pc : usb_submit_urb+0x594/0x9b4 [ 47.658398][ T3748] lr : usb_submit_urb+0x594/0x9b4 [ 47.659731][ T3748] sp : ffff8000129d3430 [ 47.660787][ T3748] x29: ffff8000129d3440 x28: ffff0000ca11a800 x27: ffff0000c52da15c [ 47.662813][ T3748] x26: ffff80000d20ad34 x25: ffff0000ca11a8a8 x24: ffff0000cac95c80 [ 47.664864][ T3748] x23: ffff80000d235b0c x22: 0000000000000400 x21: 0000000000000003 [ 47.666940][ T3748] x20: 0000000000000a20 x19: ffff0000c52da100 x18: ffff80000c03d2c4 [ 47.668947][ T3748] x17: 0000000000058000 x16: 0000000000000002 x15: 0000000000000000 [ 47.670977][ T3748] x14: 0000000000000000 x13: 205d383437335420 x12: ffff80000eab2000 [ 47.672994][ T3748] x11: ff808000080e0e64 x10: 0000000000000000 x9 : dca9c63ff8a09800 [ 47.675047][ T3748] x8 : dca9c63ff8a09800 x7 : 0000000000000000 x6 : ffff80000bffb55c [ 47.677078][ T3748] x5 : 0000000000000000 x4 : 0000000000000080 x3 : 0000000000000000 [ 47.679093][ T3748] x2 : 0000000000000000 x1 : 0000000100000000 x0 : 0000000000000000 [ 47.681147][ T3748] Call trace: [ 47.681964][ T3748] usb_submit_urb+0x594/0x9b4 [ 47.683145][ T3748] ar5523_submit_rx_cmd+0x74/0xf4 [ 47.684390][ T3748] ar5523_probe+0x41c/0xbb8 [ 47.685541][ T3748] usb_probe_interface+0x2fc/0x4ac [ 47.686820][ T3748] really_probe+0x218/0x61c [ 47.687983][ T3748] __driver_probe_device+0xe8/0x1fc [ 47.689315][ T3748] driver_probe_device+0x54/0x2f4 [ 47.690649][ T3748] __device_attach_driver+0x19c/0x2e4 [ 47.692040][ T3748] bus_for_each_drv+0xb4/0x124 [ 47.693261][ T3748] __device_attach+0x148/0x270 [ 47.694491][ T3748] device_initial_probe+0x24/0x34 [ 47.695734][ T3748] bus_probe_device+0x5c/0xf0 [ 47.696924][ T3748] device_add+0x754/0x968 [ 47.698032][ T3748] usb_set_configuration+0xb0c/0xd18 [ 47.699392][ T3748] usb_generic_driver_probe+0x5c/0xe8 [ 47.700741][ T3748] usb_probe_device+0xd0/0x180 [ 47.701964][ T3748] really_probe+0x218/0x61c [ 47.703165][ T3748] __driver_probe_device+0xe8/0x1fc [ 47.704575][ T3748] driver_probe_device+0x54/0x2f4 [ 47.705878][ T3748] __device_attach_driver+0x19c/0x2e4 [ 47.707259][ T3748] bus_for_each_drv+0xb4/0x124 [ 47.708462][ T3748] __device_attach+0x148/0x270 [ 47.709674][ T3748] device_initial_probe+0x24/0x34 [ 47.710943][ T3748] bus_probe_device+0x5c/0xf0 [ 47.712222][ T3748] device_add+0x754/0x968 [ 47.713327][ T3748] usb_new_device+0x428/0x8a8 [ 47.714531][ T3748] hub_event+0x1728/0x258c [ 47.715650][ T3748] process_one_work+0x2d4/0x4e0 [ 47.716887][ T3748] worker_thread+0x42c/0x5f8 [ 47.718018][ T3748] kthread+0x120/0x14c [ 47.719027][ T3748] ret_from_fork+0x10/0x20 [ 47.720146][ T3748] ---[ end trace 0000000000000000 ]--- [ 47.721673][ T3748] usb 1-1: error -22 when submitting rx urb [ 47.723154][ T3748] usb 1-1: Failed to submit rx cmd [ 47.724681][ T3748] ar5523: probe of 1-1:64.155 failed with error -22 [ 47.766877][ T3748] ------------[ cut here ]------------ [ 47.768311][ T3748] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 47.769974][ T3748] WARNING: CPU: 1 PID: 3748 at drivers/usb/core/urb.c:505 usb_submit_urb+0x594/0x9b4 [ 47.772317][ T3748] Modules linked in: [ 47.773316][ T3748] CPU: 1 PID: 3748 Comm: kworker/1:3 Tainted: G W 6.1.62-syzkaller #0 [ 47.775687][ T3748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 47.778320][ T3748] Workqueue: usb_hub_wq hub_event [ 47.779598][ T3748] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 47.781627][ T3748] pc : usb_submit_urb+0x594/0x9b4 [ 47.782962][ T3748] lr : usb_submit_urb+0x594/0x9b4 [ 47.784211][ T3748] sp : ffff8000129d3430 [ 47.785285][ T3748] x29: ffff8000129d3440 x28: ffff0000ca11a800 x27: ffff0000cc23815c [ 47.787313][ T3748] x26: ffff80000d20ad34 x25: ffff0000ca11a8a8 x24: ffff0000cac95c80 [ 47.789367][ T3748] x23: ffff80000d235b0c x22: 0000000000000400 x21: 0000000000000003 [ 47.791391][ T3748] x20: 0000000000000a20 x19: ffff0000cc238100 x18: 0000000000000000 [ 47.793474][ T3748] x17: 0000000000020a96 x16: 0000000000000002 x15: 0000000000000000 [ 47.795568][ T3748] x14: 0000000000000000 x13: 205d383437335420 x12: ffff80000eab2000 [ 47.797700][ T3748] x11: ff808000080e0e64 x10: 0000000000000000 x9 : dca9c63ff8a09800 [ 47.799794][ T3748] x8 : dca9c63ff8a09800 x7 : 0000000000000000 x6 : ffff80000bffb55c [ 47.801912][ T3748] x5 : 0000000000000000 x4 : 0000000000000080 x3 : 0000000000000000 [ 47.803963][ T3748] x2 : 0000000000000000 x1 : 0000000100000000 x0 : 0000000000000000 [ 47.806074][ T3748] Call trace: [ 47.806928][ T3748] usb_submit_urb+0x594/0x9b4 [ 47.808125][ T3748] ar5523_submit_rx_cmd+0x74/0xf4 [ 47.809414][ T3748] ar5523_probe+0x41c/0xbb8 [ 47.810564][ T3748] usb_probe_interface+0x2fc/0x4ac [ 47.811909][ T3748] really_probe+0x218/0x61c [ 47.813040][ T3748] __driver_probe_device+0xe8/0x1fc [ 47.814437][ T3748] driver_probe_device+0x54/0x2f4 [ 47.815731][ T3748] __device_attach_driver+0x19c/0x2e4 [ 47.817171][ T3748] bus_for_each_drv+0xb4/0x124 [ 47.818400][ T3748] __device_attach+0x148/0x270 [ 47.819591][ T3748] device_initial_probe+0x24/0x34 [ 47.820910][ T3748] bus_probe_device+0x5c/0xf0 [ 47.822149][ T3748] device_add+0x754/0x968 [ 47.823265][ T3748] usb_set_configuration+0xb0c/0xd18 [ 47.824635][ T3748] usb_generic_driver_probe+0x5c/0xe8 [ 47.826027][ T3748] usb_probe_device+0xd0/0x180 [ 47.827309][ T3748] really_probe+0x218/0x61c [ 47.828492][ T3748] __driver_probe_device+0xe8/0x1fc [ 47.829748][ T3748] driver_probe_device+0x54/0x2f4 [ 47.831074][ T3748] __device_attach_driver+0x19c/0x2e4 [ 47.832471][ T3748] bus_for_each_drv+0xb4/0x124 [ 47.833667][ T3748] __device_attach+0x148/0x270 [ 47.834911][ T3748] device_initial_probe+0x24/0x34 [ 47.836169][ T3748] bus_probe_device+0x5c/0xf0 [ 47.837426][ T3748] device_add+0x754/0x968 [ 47.838530][ T3748] usb_new_device+0x428/0x8a8 [ 47.839760][ T3748] hub_event+0x1728/0x258c [ 47.840918][ T3748] process_one_work+0x2d4/0x4e0 [ 47.842190][ T3748] worker_thread+0x42c/0x5f8 [ 47.843375][ T3748] kthread+0x120/0x14c [ 47.844399][ T3748] ret_from_fork+0x10/0x20 [ 47.845488][ T3748] ---[ end trace 0000000000000000 ]--- [ 47.846973][ T3748] usb 1-1: error -22 when submitting rx urb [ 47.848430][ T3748] usb 1-1: Failed to submit rx cmd [ 47.849853][ T3748] ar5523: probe of 1-1:64.243 failed with error -22 [ 47.853029][ T3748] usb 1-1: USB disconnect, device number 3 [ 48.186436][ T45] Bluetooth: hci0: command 0x041b tx timeout [ 48.426431][ T3748] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 48.706483][ T3748] usb 1-1: Using ep0 maxpacket: 32 [ 48.836496][ T3748] usb 1-1: config 64 has an invalid interface number: 245 but max is 2 [ 48.838779][ T3748] usb 1-1: config 64 has an invalid interface number: 155 but max is 2 [ 48.841066][ T3748] usb 1-1: config 64 contains an unexpected descriptor of type 0x2, skipping [ 48.843232][ T3748] usb 1-1: config 64 contains an unexpected descriptor of type 0x1, skipping [ 48.845450][ T3748] usb 1-1: config 64 has an invalid interface number: 243 but max is 2 [ 48.847549][ T3748] usb 1-1: config 64 has no interface number 0 [ 48.849175][ T3748] usb 1-1: config 64 has no interface number 1 [ 48.850702][ T3748] usb 1-1: config 64 has no interface number 2 [ 48.852338][ T3748] usb 1-1: config 64 interface 245 altsetting 7 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 48.855056][ T3748] usb 1-1: config 64 interface 245 altsetting 7 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 48.857912][ T3748] usb 1-1: config 64 interface 245 altsetting 7 has an invalid endpoint descriptor of length 2, skipping [ 48.860647][ T3748] usb 1-1: config 64 interface 245 altsetting 7 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 48.863944][ T3748] usb 1-1: config 64 interface 155 altsetting 1 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 48.866754][ T3748] usb 1-1: config 64 interface 155 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 48.869486][ T3748] usb 1-1: config 64 interface 155 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 48.872243][ T3748] usb 1-1: config 64 interface 155 altsetting 1 endpoint 0xA has invalid maxpacket 72, setting to 64 [ 48.875092][ T3748] usb 1-1: config 64 interface 155 altsetting 1 endpoint 0x81 has an invalid bInterval 139, changing to 11 [ 48.878040][ T3748] usb 1-1: config 64 interface 155 altsetting 1 endpoint 0x81 has invalid maxpacket 18251, setting to 1024 [ 48.880890][ T3748] usb 1-1: config 64 interface 155 altsetting 1 has a duplicate endpoint with address 0xA, skipping [ 48.883553][ T3748] usb 1-1: config 64 interface 155 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 48.886275][ T3748] usb 1-1: config 64 interface 155 altsetting 1 has 9 endpoint descriptors, different from the interface descriptor's value: 8 [ 48.889665][ T3748] usb 1-1: config 64 interface 243 altsetting 31 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 48.892410][ T3748] usb 1-1: config 64 interface 245 has no altsetting 0 [ 48.894248][ T3748] usb 1-1: config 64 interface 155 has no altsetting 0 [ 48.895958][ T3748] usb 1-1: config 64 interface 243 has no altsetting 0 [ 49.066451][ T3748] usb 1-1: New USB device found, idVendor=083a, idProduct=4506, bcdDevice=6d.7d [ 49.068930][ T3748] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.071002][ T3748] usb 1-1: Product: syz [ 49.071994][ T3748] usb 1-1: Manufacturer: syz [ 49.073201][ T3748] usb 1-1: SerialNumber: syz [ 49.396933][ T3748] ------------[ cut here ]------------ [ 49.398393][ T3748] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 49.400105][ T3748] WARNING: CPU: 1 PID: 3748 at drivers/usb/core/urb.c:505 usb_submit_urb+0x594/0x9b4 [ 49.402646][ T3748] Modules linked in: [ 49.403599][ T3748] CPU: 1 PID: 3748 Comm: kworker/1:3 Tainted: G W 6.1.62-syzkaller #0 [ 49.406027][ T3748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 49.408550][ T3748] Workqueue: usb_hub_wq hub_event [ 49.409912][ T3748] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 49.412005][ T3748] pc : usb_submit_urb+0x594/0x9b4 [ 49.413294][ T3748] lr : usb_submit_urb+0x594/0x9b4 [ 49.414568][ T3748] sp : ffff8000129d3430 [ 49.415621][ T3748] x29: ffff8000129d3440 x28: ffff0000ca11a800 x27: ffff0000c52da35c [ 49.417706][ T3748] x26: ffff80000d20ad34 x25: ffff0000ca11a8a8 x24: ffff0000c9bbe700 [ 49.419719][ T3748] x23: ffff80000d235b0c x22: 0000000000000400 x21: 0000000000000003 [ 49.421819][ T3748] x20: 0000000000000a20 x19: ffff0000c52da300 x18: 0000000000000000 [ 49.423865][ T3748] x17: 000000000000000a x16: 0000000000000002 x15: 0000000000000000 [ 49.425945][ T3748] x14: 0000000000000000 x13: 205d383437335420 x12: ffff80000eab2000 [ 49.427949][ T3748] x11: ff808000080e0e64 x10: 0000000000000000 x9 : dca9c63ff8a09800 [ 49.429982][ T3748] x8 : dca9c63ff8a09800 x7 : 0000000000000000 x6 : ffff80000bffb55c [ 49.431955][ T3748] x5 : 0000000000000000 x4 : 0000000000000080 x3 : 0000000000000000 [ 49.433924][ T3748] x2 : 0000000000000000 x1 : 0000000100000000 x0 : 0000000000000000 [ 49.435940][ T3748] Call trace: [ 49.436755][ T3748] usb_submit_urb+0x594/0x9b4 [ 49.437929][ T3748] ar5523_submit_rx_cmd+0x74/0xf4 [ 49.439313][ T3748] ar5523_probe+0x41c/0xbb8 [ 49.440451][ T3748] usb_probe_interface+0x2fc/0x4ac [ 49.441698][ T3748] really_probe+0x218/0x61c [ 49.442803][ T3748] __driver_probe_device+0xe8/0x1fc [ 49.444108][ T3748] driver_probe_device+0x54/0x2f4 [ 49.445405][ T3748] __device_attach_driver+0x19c/0x2e4 [ 49.446751][ T3748] bus_for_each_drv+0xb4/0x124 [ 49.447982][ T3748] __device_attach+0x148/0x270 [ 49.449185][ T3748] device_initial_probe+0x24/0x34 [ 49.450466][ T3748] bus_probe_device+0x5c/0xf0 [ 49.451660][ T3748] device_add+0x754/0x968 [ 49.452678][ T3748] usb_set_configuration+0xb0c/0xd18 [ 49.454020][ T3748] usb_generic_driver_probe+0x5c/0xe8 [ 49.455388][ T3748] usb_probe_device+0xd0/0x180 [ 49.456615][ T3748] really_probe+0x218/0x61c [ 49.457740][ T3748] __driver_probe_device+0xe8/0x1fc [ 49.459110][ T3748] driver_probe_device+0x54/0x2f4 [ 49.460363][ T3748] __device_attach_driver+0x19c/0x2e4 [ 49.461786][ T3748] bus_for_each_drv+0xb4/0x124 [ 49.462965][ T3748] __device_attach+0x148/0x270 [ 49.464157][ T3748] device_initial_probe+0x24/0x34 [ 49.465411][ T3748] bus_probe_device+0x5c/0xf0 [ 49.466575][ T3748] device_add+0x754/0x968 [ 49.467664][ T3748] usb_new_device+0x428/0x8a8 [ 49.468893][ T3748] hub_event+0x1728/0x258c [ 49.469985][ T3748] process_one_work+0x2d4/0x4e0 [ 49.471236][ T3748] worker_thread+0x42c/0x5f8 [ 49.472397][ T3748] kthread+0x120/0x14c [ 49.473454][ T3748] ret_from_fork+0x10/0x20 [ 49.474597][ T3748] ---[ end trace 0000000000000000 ]--- [ 49.476024][ T3748] usb 1-1: error -22 when submitting rx urb [ 49.477456][ T3748] usb 1-1: Failed to submit rx cmd [ 49.478894][ T3748] ar5523: probe of 1-1:64.245 failed with error -22 [ 49.481756][ T3748] ------------[ cut here ]------------ [ 49.483119][ T3748] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 49.484808][ T3748] WARNING: CPU: 1 PID: 3748 at drivers/usb/core/urb.c:505 usb_submit_urb+0x594/0x9b4 [ 49.487180][ T3748] Modules linked in: [ 49.488195][ T3748] CPU: 1 PID: 3748 Comm: kworker/1:3 Tainted: G W 6.1.62-syzkaller #0 [ 49.490659][ T3748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 49.493252][ T3748] Workqueue: usb_hub_wq hub_event [ 49.494572][ T3748] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 49.496568][ T3748] pc : usb_submit_urb+0x594/0x9b4 [ 49.497912][ T3748] lr : usb_submit_urb+0x594/0x9b4 [ 49.499210][ T3748] sp : ffff8000129d3430 [ 49.500320][ T3748] x29: ffff8000129d3440 x28: ffff0000ca11a800 x27: ffff0000cc23835c [ 49.502399][ T3748] x26: ffff80000d20ad34 x25: ffff0000ca11a8a8 x24: ffff0000c9bbe700 [ 49.504500][ T3748] x23: ffff80000d235b0c x22: 0000000000000400 x21: 0000000000000003 [ 49.506591][ T3748] x20: 0000000000000a20 x19: ffff0000cc238300 x18: ffff80000c03d2c4 [ 49.508616][ T3748] x17: 0000000000050000 x16: 0000000000000002 x15: 0000000000000000 [ 49.510621][ T3748] x14: 0000000000000000 x13: 205d383437335420 x12: ffff80000eab2000 [ 49.512686][ T3748] x11: ff808000080e0e64 x10: 0000000000000000 x9 : dca9c63ff8a09800 [ 49.514710][ T3748] x8 : dca9c63ff8a09800 x7 : 0000000000000000 x6 : ffff80000bffb55c [ 49.516738][ T3748] x5 : 0000000000000000 x4 : 0000000000000080 x3 : 0000000000000000 [ 49.518726][ T3748] x2 : 0000000000000000 x1 : 0000000100000000 x0 : 0000000000000000 [ 49.520761][ T3748] Call trace: [ 49.521647][ T3748] usb_submit_urb+0x594/0x9b4 [ 49.522847][ T3748] ar5523_submit_rx_cmd+0x74/0xf4 [ 49.524110][ T3748] ar5523_probe+0x41c/0xbb8 [ 49.525276][ T3748] usb_probe_interface+0x2fc/0x4ac [ 49.526643][ T3748] really_probe+0x218/0x61c [ 49.527799][ T3748] __driver_probe_device+0xe8/0x1fc [ 49.529100][ T3748] driver_probe_device+0x54/0x2f4 [ 49.530377][ T3748] __device_attach_driver+0x19c/0x2e4 [ 49.531757][ T3748] bus_for_each_drv+0xb4/0x124 [ 49.532988][ T3748] __device_attach+0x148/0x270 [ 49.534208][ T3748] device_initial_probe+0x24/0x34 [ 49.535497][ T3748] bus_probe_device+0x5c/0xf0 [ 49.536719][ T3748] device_add+0x754/0x968 [ 49.537817][ T3748] usb_set_configuration+0xb0c/0xd18 [ 49.539184][ T3748] usb_generic_driver_probe+0x5c/0xe8 [ 49.540574][ T3748] usb_probe_device+0xd0/0x180 [ 49.541764][ T3748] really_probe+0x218/0x61c [ 49.542916][ T3748] __driver_probe_device+0xe8/0x1fc [ 49.544233][ T3748] driver_probe_device+0x54/0x2f4 [ 49.545531][ T3748] __device_attach_driver+0x19c/0x2e4 [ 49.546900][ T3748] bus_for_each_drv+0xb4/0x124 [ 49.548111][ T3748] __device_attach+0x148/0x270 [ 49.549365][ T3748] device_initial_probe+0x24/0x34 [ 49.550673][ T3748] bus_probe_device+0x5c/0xf0 [ 49.551830][ T3748] device_add+0x754/0x968 [ 49.552949][ T3748] usb_new_device+0x428/0x8a8 [ 49.554202][ T3748] hub_event+0x1728/0x258c [ 49.555338][ T3748] process_one_work+0x2d4/0x4e0 [ 49.556598][ T3748] worker_thread+0x42c/0x5f8 [ 49.557740][ T3748] kthread+0x120/0x14c [ 49.558828][ T3748] ret_from_fork+0x10/0x20 [ 49.560007][ T3748] ---[ end trace 0000000000000000 ]--- [ 49.561405][ T3748] usb 1-1: error -22 when submitting rx urb [ 49.562841][ T3748] usb 1-1: Failed to submit rx cmd [ 49.564306][ T3748] ar5523: probe of 1-1:64.155 failed with error -22 [ 49.606942][ T3748] ------------[ cut here ]------------ [ 49.608334][ T3748] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 49.610069][ T3748] WARNING: CPU: 1 PID: 3748 at drivers/usb/core/urb.c:505 usb_submit_urb+0x594/0x9b4 [ 49.612545][ T3748] Modules linked in: [ 49.613554][ T3748] CPU: 1 PID: 3748 Comm: kworker/1:3 Tainted: G W 6.1.62-syzkaller #0 [ 49.615947][ T3748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 49.618488][ T3748] Workqueue: usb_hub_wq hub_event [ 49.619746][ T3748] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 49.621812][ T3748] pc : usb_submit_urb+0x594/0x9b4 [ 49.623146][ T3748] lr : usb_submit_urb+0x594/0x9b4 [ 49.624465][ T3748] sp : ffff8000129d3430 [ 49.625492][ T3748] x29: ffff8000129d3440 x28: ffff0000ca11a800 x27: ffff0000c52da05c [ 49.627526][ T3748] x26: ffff80000d20ad34 x25: ffff0000ca11a8a8 x24: ffff0000c9bbe700 [ 49.629530][ T3748] x23: ffff80000d235b0c x22: 0000000000000400 x21: 0000000000000003 [ 49.631544][ T3748] x20: 0000000000000a20 x19: ffff0000c52da000 x18: 0000000000000000 [ 49.633598][ T3748] x17: 0000000000000000 x16: 0000000000000002 x15: 0000000000000000 [ 49.635674][ T3748] x14: 0000000000000000 x13: 205d383437335420 x12: ffff80000eab2000 [ 49.637754][ T3748] x11: ff808000080e0e64 x10: 0000000000000000 x9 : dca9c63ff8a09800 [ 49.639849][ T3748] x8 : dca9c63ff8a09800 x7 : 0000000000000000 x6 : ffff80000bffb55c [ 49.641878][ T3748] x5 : 0000000000000000 x4 : 0000000000000080 x3 : 0000000000000000 [ 49.643936][ T3748] x2 : 0000000000000000 x1 : 0000000100000000 x0 : 0000000000000000 [ 49.645947][ T3748] Call trace: [ 49.646795][ T3748] usb_submit_urb+0x594/0x9b4 [ 49.648011][ T3748] ar5523_submit_rx_cmd+0x74/0xf4 [ 49.649277][ T3748] ar5523_probe+0x41c/0xbb8 [ 49.650414][ T3748] usb_probe_interface+0x2fc/0x4ac [ 49.651773][ T3748] really_probe+0x218/0x61c [ 49.652940][ T3748] __driver_probe_device+0xe8/0x1fc [ 49.654257][ T3748] driver_probe_device+0x54/0x2f4 [ 49.655546][ T3748] __device_attach_driver+0x19c/0x2e4 [ 49.656944][ T3748] bus_for_each_drv+0xb4/0x124 [ 49.658210][ T3748] __device_attach+0x148/0x270 [ 49.659440][ T3748] device_initial_probe+0x24/0x34 [ 49.660762][ T3748] bus_probe_device+0x5c/0xf0 [ 49.661995][ T3748] device_add+0x754/0x968 [ 49.663102][ T3748] usb_set_configuration+0xb0c/0xd18 [ 49.664420][ T3748] usb_generic_driver_probe+0x5c/0xe8 [ 49.665767][ T3748] usb_probe_device+0xd0/0x180 [ 49.667013][ T3748] really_probe+0x218/0x61c [ 49.668222][ T3748] __driver_probe_device+0xe8/0x1fc [ 49.669563][ T3748] driver_probe_device+0x54/0x2f4 [ 49.670808][ T3748] __device_attach_driver+0x19c/0x2e4 [ 49.672174][ T3748] bus_for_each_drv+0xb4/0x124 [ 49.673407][ T3748] __device_attach+0x148/0x270 [ 49.674635][ T3748] device_initial_probe+0x24/0x34 [ 49.675936][ T3748] bus_probe_device+0x5c/0xf0 [ 49.677195][ T3748] device_add+0x754/0x968 [ 49.678288][ T3748] usb_new_device+0x428/0x8a8 [ 49.679474][ T3748] hub_event+0x1728/0x258c [ 49.680644][ T3748] process_one_work+0x2d4/0x4e0 [ 49.681943][ T3748] worker_thread+0x42c/0x5f8 [ 49.683178][ T3748] kthread+0x120/0x14c [ 49.684185][ T3748] ret_from_fork+0x10/0x20 [ 49.685328][ T3748] ---[ end trace 0000000000000000 ]--- [ 49.686899][ T3748] usb 1-1: error -22 when submitting rx urb [ 49.688355][ T3748] usb 1-1: Failed to submit rx cmd [ 49.689836][ T3748] ar5523: probe of 1-1:64.243 failed with error -22 [ 49.692418][ T3748] usb 1-1: USB disconnect, device number 4 2023/11/18 16:22:33 executed programs: 3 [ 50.196435][ T3748] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 50.256563][ T45] Bluetooth: hci0: command 0x040f tx timeout [ 50.446426][ T3748] usb 1-1: Using ep0 maxpacket: 32 [ 50.566455][ T3748] usb 1-1: config 64 has an invalid interface number: 245 but max is 2 [ 50.568504][ T3748] usb 1-1: config 64 has an invalid interface number: 155 but max is 2 [ 50.570573][ T3748] usb 1-1: config 64 contains an unexpected descriptor of type 0x2, skipping [ 50.572929][ T3748] usb 1-1: config 64 contains an unexpected descriptor of type 0x1, skipping [ 50.575099][ T3748] usb 1-1: config 64 has an invalid interface number: 243 but max is 2 [ 50.577244][ T3748] usb 1-1: config 64 has no interface number 0 [ 50.578835][ T3748] usb 1-1: config 64 has no interface number 1 [ 50.580367][ T3748] usb 1-1: config 64 has no interface number 2 [ 50.581863][ T3748] usb 1-1: config 64 interface 245 altsetting 7 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 50.584634][ T3748] usb 1-1: config 64 interface 245 altsetting 7 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 50.587520][ T3748] usb 1-1: config 64 interface 245 altsetting 7 has an invalid endpoint descriptor of length 2, skipping [ 50.590262][ T3748] usb 1-1: config 64 interface 245 altsetting 7 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 50.593702][ T3748] usb 1-1: config 64 interface 155 altsetting 1 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 50.596591][ T3748] usb 1-1: config 64 interface 155 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 50.599287][ T3748] usb 1-1: config 64 interface 155 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 50.601950][ T3748] usb 1-1: config 64 interface 155 altsetting 1 endpoint 0xA has invalid maxpacket 72, setting to 64 [ 50.604663][ T3748] usb 1-1: config 64 interface 155 altsetting 1 endpoint 0x81 has an invalid bInterval 139, changing to 11 [ 50.607573][ T3748] usb 1-1: config 64 interface 155 altsetting 1 endpoint 0x81 has invalid maxpacket 18251, setting to 1024 [ 50.610453][ T3748] usb 1-1: config 64 interface 155 altsetting 1 has a duplicate endpoint with address 0xA, skipping [ 50.613146][ T3748] usb 1-1: config 64 interface 155 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 50.615936][ T3748] usb 1-1: config 64 interface 155 altsetting 1 has 9 endpoint descriptors, different from the interface descriptor's value: 8 [ 50.619317][ T3748] usb 1-1: config 64 interface 243 altsetting 31 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 50.622020][ T3748] usb 1-1: config 64 interface 245 has no altsetting 0 [ 50.623790][ T3748] usb 1-1: config 64 interface 155 has no altsetting 0 [ 50.625427][ T3748] usb 1-1: config 64 interface 243 has no altsetting 0 [ 50.786500][ T3748] usb 1-1: New USB device found, idVendor=083a, idProduct=4506, bcdDevice=6d.7d [ 50.788840][ T3748] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.790834][ T3748] usb 1-1: Product: syz [ 50.791866][ T3748] usb 1-1: Manufacturer: syz [ 50.793046][ T3748] usb 1-1: SerialNumber: syz [ 51.106845][ T3748] ------------[ cut here ]------------ [ 51.108306][ T3748] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 51.110022][ T3748] WARNING: CPU: 1 PID: 3748 at drivers/usb/core/urb.c:505 usb_submit_urb+0x594/0x9b4 [ 51.112371][ T3748] Modules linked in: [ 51.113333][ T3748] CPU: 1 PID: 3748 Comm: kworker/1:3 Tainted: G W 6.1.62-syzkaller #0 [ 51.115711][ T3748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 51.118274][ T3748] Workqueue: usb_hub_wq hub_event [ 51.119560][ T3748] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 51.121530][ T3748] pc : usb_submit_urb+0x594/0x9b4 [ 51.122841][ T3748] lr : usb_submit_urb+0x594/0x9b4 [ 51.124250][ T3748] sp : ffff8000129d3430 [ 51.125264][ T3748] x29: ffff8000129d3440 x28: ffff0000ca11a800 x27: ffff0000cc23815c [ 51.127316][ T3748] x26: ffff80000d20ad34 x25: ffff0000ca11a8a8 x24: ffff0000ca3e8080 [ 51.129414][ T3748] x23: ffff80000d235b0c x22: 0000000000000400 x21: 0000000000000003 [ 51.131431][ T3748] x20: 0000000000000a20 x19: ffff0000cc238100 x18: 0000000000000000 [ 51.133516][ T3748] x17: 0000000000000000 x16: 0000000000000002 x15: 0000000000000000 [ 51.135559][ T3748] x14: 0000000000000000 x13: 205d383437335420 x12: ffff80000eab2000 [ 51.137643][ T3748] x11: ff808000080e0e64 x10: 0000000000000000 x9 : dca9c63ff8a09800 [ 51.139696][ T3748] x8 : dca9c63ff8a09800 x7 : 0000000000000000 x6 : ffff80000bffb55c [ 51.141712][ T3748] x5 : 0000000000000000 x4 : 0000000000000080 x3 : 0000000000000000 [ 51.143743][ T3748] x2 : 0000000000000000 x1 : 0000000100000000 x0 : 0000000000000000 [ 51.145812][ T3748] Call trace: [ 51.146669][ T3748] usb_submit_urb+0x594/0x9b4 [ 51.147906][ T3748] ar5523_submit_rx_cmd+0x74/0xf4 [ 51.149191][ T3748] ar5523_probe+0x41c/0xbb8 [ 51.150333][ T3748] usb_probe_interface+0x2fc/0x4ac [ 51.151686][ T3748] really_probe+0x218/0x61c [ 51.152811][ T3748] __driver_probe_device+0xe8/0x1fc [ 51.154200][ T3748] driver_probe_device+0x54/0x2f4 [ 51.155436][ T3748] __device_attach_driver+0x19c/0x2e4 [ 51.156842][ T3748] bus_for_each_drv+0xb4/0x124 [ 51.158054][ T3748] __device_attach+0x148/0x270 [ 51.159250][ T3748] device_initial_probe+0x24/0x34 [ 51.160491][ T3748] bus_probe_device+0x5c/0xf0 [ 51.161648][ T3748] device_add+0x754/0x968 [ 51.162753][ T3748] usb_set_configuration+0xb0c/0xd18 [ 51.164060][ T3748] usb_generic_driver_probe+0x5c/0xe8 [ 51.165401][ T3748] usb_probe_device+0xd0/0x180 [ 51.166615][ T3748] really_probe+0x218/0x61c [ 51.167764][ T3748] __driver_probe_device+0xe8/0x1fc [ 51.169118][ T3748] driver_probe_device+0x54/0x2f4 [ 51.170401][ T3748] __device_attach_driver+0x19c/0x2e4 [ 51.171773][ T3748] bus_for_each_drv+0xb4/0x124 [ 51.172981][ T3748] __device_attach+0x148/0x270 [ 51.174192][ T3748] device_initial_probe+0x24/0x34 [ 51.175489][ T3748] bus_probe_device+0x5c/0xf0 [ 51.176640][ T3748] device_add+0x754/0x968 [ 51.177692][ T3748] usb_new_device+0x428/0x8a8 [ 51.178962][ T3748] hub_event+0x1728/0x258c [ 51.180124][ T3748] process_one_work+0x2d4/0x4e0 [ 51.181397][ T3748] worker_thread+0x42c/0x5f8 [ 51.182578][ T3748] kthread+0x120/0x14c [ 51.183641][ T3748] ret_from_fork+0x10/0x20 [ 51.184743][ T3748] ---[ end trace 0000000000000000 ]--- [ 51.186164][ T3748] usb 1-1: error -22 when submitting rx urb [ 51.187750][ T3748] usb 1-1: Failed to submit rx cmd [ 51.189176][ T3748] ar5523: probe of 1-1:64.245 failed with error -22 [ 51.192001][ T3748] ------------[ cut here ]------------ [ 51.193395][ T3748] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 51.195151][ T3748] WARNING: CPU: 1 PID: 3748 at drivers/usb/core/urb.c:505 usb_submit_urb+0x594/0x9b4 [ 51.197548][ T3748] Modules linked in: [ 51.198567][ T3748] CPU: 1 PID: 3748 Comm: kworker/1:3 Tainted: G W 6.1.62-syzkaller #0 [ 51.200923][ T3748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 51.203461][ T3748] Workqueue: usb_hub_wq hub_event [ 51.204758][ T3748] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 51.206765][ T3748] pc : usb_submit_urb+0x594/0x9b4 [ 51.208084][ T3748] lr : usb_submit_urb+0x594/0x9b4 [ 51.209348][ T3748] sp : ffff8000129d3430 [ 51.210344][ T3748] x29: ffff8000129d3440 x28: ffff0000ca11a800 x27: ffff0000c52da05c [ 51.212402][ T3748] x26: ffff80000d20ad34 x25: ffff0000ca11a8a8 x24: ffff0000ca3e8080 [ 51.214471][ T3748] x23: ffff80000d235b0c x22: 0000000000000400 x21: 0000000000000003 [ 51.216519][ T3748] x20: 0000000000000a20 x19: ffff0000c52da000 x18: ffff80000c03d2c4 [ 51.218552][ T3748] x17: 0000000000000000 x16: 0000000000000002 x15: 0000000000000000 [ 51.220679][ T3748] x14: 0000000000000000 x13: 205d383437335420 x12: ffff80000eab2000 [ 51.222719][ T3748] x11: ff808000080e0e64 x10: 0000000000000000 x9 : dca9c63ff8a09800 [ 51.224732][ T3748] x8 : dca9c63ff8a09800 x7 : 0000000000000000 x6 : ffff80000bffb55c [ 51.226789][ T3748] x5 : 0000000000000000 x4 : 0000000000000080 x3 : 0000000000000000 [ 51.228866][ T3748] x2 : 0000000000000000 x1 : 0000000100000000 x0 : 0000000000000000 [ 51.230909][ T3748] Call trace: [ 51.231735][ T3748] usb_submit_urb+0x594/0x9b4 [ 51.232883][ T3748] ar5523_submit_rx_cmd+0x74/0xf4 [ 51.234161][ T3748] ar5523_probe+0x41c/0xbb8 [ 51.235269][ T3748] usb_probe_interface+0x2fc/0x4ac [ 51.236588][ T3748] really_probe+0x218/0x61c [ 51.237728][ T3748] __driver_probe_device+0xe8/0x1fc [ 51.239041][ T3748] driver_probe_device+0x54/0x2f4 [ 51.240312][ T3748] __device_attach_driver+0x19c/0x2e4 [ 51.241639][ T3748] bus_for_each_drv+0xb4/0x124 [ 51.242847][ T3748] __device_attach+0x148/0x270 [ 51.244079][ T3748] device_initial_probe+0x24/0x34 [ 51.245417][ T3748] bus_probe_device+0x5c/0xf0 [ 51.246652][ T3748] device_add+0x754/0x968 [ 51.247792][ T3748] usb_set_configuration+0xb0c/0xd18 [ 51.249141][ T3748] usb_generic_driver_probe+0x5c/0xe8 [ 51.250628][ T3748] usb_probe_device+0xd0/0x180 [ 51.251898][ T3748] really_probe+0x218/0x61c [ 51.253053][ T3748] __driver_probe_device+0xe8/0x1fc [ 51.254390][ T3748] driver_probe_device+0x54/0x2f4 [ 51.255675][ T3748] __device_attach_driver+0x19c/0x2e4 [ 51.257033][ T3748] bus_for_each_drv+0xb4/0x124 [ 51.258233][ T3748] __device_attach+0x148/0x270 [ 51.259408][ T3748] device_initial_probe+0x24/0x34 [ 51.260696][ T3748] bus_probe_device+0x5c/0xf0 [ 51.261987][ T3748] device_add+0x754/0x968 [ 51.263127][ T3748] usb_new_device+0x428/0x8a8 [ 51.264309][ T3748] hub_event+0x1728/0x258c [ 51.265424][ T3748] process_one_work+0x2d4/0x4e0 [ 51.266651][ T3748] worker_thread+0x42c/0x5f8 [ 51.267791][ T3748] kthread+0x120/0x14c [ 51.268918][ T3748] ret_from_fork+0x10/0x20 [ 51.270050][ T3748] ---[ end trace 0000000000000000 ]--- [ 51.271457][ T3748] usb 1-1: error -22 when submitting rx urb [ 51.272919][ T3748] usb 1-1: Failed to submit rx cmd [ 51.274378][ T3748] ar5523: probe of 1-1:64.155 failed with error -22 [ 51.316984][ T3748] ------------[ cut here ]------------ [ 51.318395][ T3748] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 51.320109][ T3748] WARNING: CPU: 1 PID: 3748 at drivers/usb/core/urb.c:505 usb_submit_urb+0x594/0x9b4 [ 51.322467][ T3748] Modules linked in: [ 51.323409][ T3748] CPU: 1 PID: 3748 Comm: kworker/1:3 Tainted: G W 6.1.62-syzkaller #0 [ 51.325852][ T3748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 51.328400][ T3748] Workqueue: usb_hub_wq hub_event [ 51.329654][ T3748] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 51.331683][ T3748] pc : usb_submit_urb+0x594/0x9b4 [ 51.332970][ T3748] lr : usb_submit_urb+0x594/0x9b4 [ 51.334238][ T3748] sp : ffff8000129d3430 [ 51.335268][ T3748] x29: ffff8000129d3440 x28: ffff0000ca11a800 x27: ffff0000cc238f5c [ 51.337296][ T3748] x26: ffff80000d20ad34 x25: ffff0000ca11a8a8 x24: ffff0000ca3e8080 [ 51.339302][ T3748] x23: ffff80000d235b0c x22: 0000000000000400 x21: 0000000000000003 [ 51.341361][ T3748] x20: 0000000000000a20 x19: ffff0000cc238f00 x18: 0000000000000000 [ 51.343411][ T3748] x17: 0000000000000001 x16: 0000000000000002 x15: 0000000000000000 [ 51.345502][ T3748] x14: 0000000000000000 x13: 205d383437335420 x12: ffff80000eab2000 [ 51.347605][ T3748] x11: ff808000080e0e64 x10: 0000000000000000 x9 : dca9c63ff8a09800 [ 51.349722][ T3748] x8 : dca9c63ff8a09800 x7 : 0000000000000000 x6 : ffff80000bffb55c [ 51.351795][ T3748] x5 : 0000000000000000 x4 : 0000000000000080 x3 : 0000000000000000 [ 51.353849][ T3748] x2 : 0000000000000000 x1 : 0000000100000000 x0 : 0000000000000000 [ 51.355908][ T3748] Call trace: [ 51.356725][ T3748] usb_submit_urb+0x594/0x9b4 [ 51.357925][ T3748] ar5523_submit_rx_cmd+0x74/0xf4 [ 51.359229][ T3748] ar5523_probe+0x41c/0xbb8 [ 51.360422][ T3748] usb_probe_interface+0x2fc/0x4ac [ 51.361706][ T3748] really_probe+0x218/0x61c [ 51.362830][ T3748] __driver_probe_device+0xe8/0x1fc [ 51.364216][ T3748] driver_probe_device+0x54/0x2f4 [ 51.365477][ T3748] __device_attach_driver+0x19c/0x2e4 [ 51.366803][ T3748] bus_for_each_drv+0xb4/0x124 [ 51.368009][ T3748] __device_attach+0x148/0x270 [ 51.369273][ T3748] device_initial_probe+0x24/0x34 [ 51.370574][ T3748] bus_probe_device+0x5c/0xf0 [ 51.371843][ T3748] device_add+0x754/0x968 [ 51.373011][ T3748] usb_set_configuration+0xb0c/0xd18 [ 51.374321][ T3748] usb_generic_driver_probe+0x5c/0xe8 [ 51.375698][ T3748] usb_probe_device+0xd0/0x180 [ 51.376904][ T3748] really_probe+0x218/0x61c [ 51.378082][ T3748] __driver_probe_device+0xe8/0x1fc [ 51.379411][ T3748] driver_probe_device+0x54/0x2f4 [ 51.380670][ T3748] __device_attach_driver+0x19c/0x2e4 [ 51.382011][ T3748] bus_for_each_drv+0xb4/0x124 [ 51.383241][ T3748] __device_attach+0x148/0x270 [ 51.384500][ T3748] device_initial_probe+0x24/0x34 [ 51.385754][ T3748] bus_probe_device+0x5c/0xf0 [ 51.386991][ T3748] device_add+0x754/0x968 [ 51.388089][ T3748] usb_new_device+0x428/0x8a8 [ 51.389322][ T3748] hub_event+0x1728/0x258c [ 51.390422][ T3748] process_one_work+0x2d4/0x4e0 [ 51.391772][ T3748] worker_thread+0x42c/0x5f8 [ 51.392985][ T3748] kthread+0x120/0x14c [ 51.394041][ T3748] ret_from_fork+0x10/0x20 [ 51.395194][ T3748] ---[ end trace 0000000000000000 ]--- [ 51.396696][ T3748] usb 1-1: error -22 when submitting rx urb [ 51.398166][ T3748] usb 1-1: Failed to submit rx cmd [ 51.399628][ T3748] ar5523: probe of 1-1:64.243 failed with error -22 [ 51.402929][ T3748] usb 1-1: USB disconnect, device number 5 [ 51.906478][ T3748] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 52.156437][ T3748] usb 1-1: Using ep0 maxpacket: 32 [ 52.296465][ T3748] usb 1-1: config 64 has an invalid interface number: 245 but max is 2 [ 52.298613][ T3748] usb 1-1: config 64 has an invalid interface number: 155 but max is 2 [ 52.300667][ T3748] usb 1-1: config 64 contains an unexpected descriptor of type 0x2, skipping [ 52.302834][ T3748] usb 1-1: config 64 contains an unexpected descriptor of type 0x1, skipping [ 52.305089][ T3748] usb 1-1: config 64 has an invalid interface number: 243 but max is 2 [ 52.307196][ T3748] usb 1-1: config 64 has no interface number 0 [ 52.308744][ T3748] usb 1-1: config 64 has no interface number 1 [ 52.310315][ T3748] usb 1-1: config 64 has no interface number 2 [ 52.311846][ T3748] usb 1-1: config 64 interface 245 altsetting 7 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 52.314615][ T3748] usb 1-1: config 64 interface 245 altsetting 7 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 52.317431][ T3748] usb 1-1: config 64 interface 245 altsetting 7 has an invalid endpoint descriptor of length 2, skipping [ 52.320243][ T3748] usb 1-1: config 64 interface 245 altsetting 7 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 52.323431][ T3748] usb 1-1: config 64 interface 155 altsetting 1 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 52.326217][ T3748] usb 1-1: config 64 interface 155 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 52.328954][ T3748] usb 1-1: config 64 interface 155 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 52.331639][ T3748] usb 1-1: config 64 interface 155 altsetting 1 endpoint 0xA has invalid maxpacket 72, setting to 64 [ 52.334315][ T3748] usb 1-1: config 64 interface 155 altsetting 1 endpoint 0x81 has an invalid bInterval 139, changing to 11 [ 52.337117][ T45] Bluetooth: hci0: command 0x0419 tx timeout [ 52.338608][ T3748] usb 1-1: config 64 interface 155 altsetting 1 endpoint 0x81 has invalid maxpacket 18251, setting to 1024 [ 52.341469][ T3748] usb 1-1: config 64 interface 155 altsetting 1 has a duplicate endpoint with address 0xA, skipping [ 52.344120][ T3748] usb 1-1: config 64 interface 155 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 52.346785][ T3748] usb 1-1: config 64 interface 155 altsetting 1 has 9 endpoint descriptors, different from the interface descriptor's value: 8 [ 52.350073][ T3748] usb 1-1: config 64 interface 243 altsetting 31 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 52.352781][ T3748] usb 1-1: config 64 interface 245 has no altsetting 0 [ 52.354515][ T3748] usb 1-1: config 64 interface 155 has no altsetting 0 [ 52.356183][ T3748] usb 1-1: config 64 interface 243 has no altsetting 0 [ 52.516479][ T3748] usb 1-1: New USB device found, idVendor=083a, idProduct=4506, bcdDevice=6d.7d [ 52.518829][ T3748] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.520769][ T3748] usb 1-1: Product: syz [ 52.521820][ T3748] usb 1-1: Manufacturer: syz [ 52.522972][ T3748] usb 1-1: SerialNumber: syz [ 52.836960][ T3748] ------------[ cut here ]------------ [ 52.838298][ T3748] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 52.839920][ T3748] WARNING: CPU: 1 PID: 3748 at drivers/usb/core/urb.c:505 usb_submit_urb+0x594/0x9b4 [ 52.842381][ T3748] Modules linked in: [ 52.843339][ T3748] CPU: 1 PID: 3748 Comm: kworker/1:3 Tainted: G W 6.1.62-syzkaller #0 [ 52.845744][ T3748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 52.848367][ T3748] Workqueue: usb_hub_wq hub_event [ 52.849689][ T3748] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 52.851654][ T3748] pc : usb_submit_urb+0x594/0x9b4 [ 52.852938][ T3748] lr : usb_submit_urb+0x594/0x9b4 [ 52.854250][ T3748] sp : ffff8000129d3430 [ 52.855283][ T3748] x29: ffff8000129d3440 x28: ffff0000ca11a800 x27: ffff0000c52da45c [ 52.857338][ T3748] x26: ffff80000d20ad34 x25: ffff0000ca11a8a8 x24: ffff0000ca3e8680 [ 52.859443][ T3748] x23: ffff80000d235b0c x22: 0000000000000400 x21: 0000000000000003 [ 52.861547][ T3748] x20: 0000000000000a20 x19: ffff0000c52da400 x18: ffff80000c03d2c4 [ 52.863565][ T3748] x17: 0000000000000000 x16: 0000000000000002 x15: 0000000000000000 [ 52.865583][ T3748] x14: 0000000000000000 x13: 205d383437335420 x12: ffff80000eab2000 [ 52.867601][ T3748] x11: ff808000080e0e64 x10: 0000000000000000 x9 : dca9c63ff8a09800 [ 52.869610][ T3748] x8 : dca9c63ff8a09800 x7 : 0000000000000000 x6 : ffff80000bffb55c [ 52.871527][ T3748] x5 : 0000000000000000 x4 : 0000000000000080 x3 : 0000000000000000 [ 52.873583][ T3748] x2 : 0000000000000000 x1 : 0000000100000000 x0 : 0000000000000000 [ 52.875635][ T3748] Call trace: [ 52.876441][ T3748] usb_submit_urb+0x594/0x9b4 [ 52.877687][ T3748] ar5523_submit_rx_cmd+0x74/0xf4 [ 52.878972][ T3748] ar5523_probe+0x41c/0xbb8 [ 52.880134][ T3748] usb_probe_interface+0x2fc/0x4ac [ 52.881409][ T3748] really_probe+0x218/0x61c [ 52.882601][ T3748] __driver_probe_device+0xe8/0x1fc [ 52.883919][ T3748] driver_probe_device+0x54/0x2f4 [ 52.885203][ T3748] __device_attach_driver+0x19c/0x2e4 [ 52.886556][ T3748] bus_for_each_drv+0xb4/0x124 [ 52.887730][ T3748] __device_attach+0x148/0x270 [ 52.888970][ T3748] device_initial_probe+0x24/0x34 [ 52.890209][ T3748] bus_probe_device+0x5c/0xf0 [ 52.891431][ T3748] device_add+0x754/0x968 [ 52.892524][ T3748] usb_set_configuration+0xb0c/0xd18 [ 52.893924][ T3748] usb_generic_driver_probe+0x5c/0xe8 [ 52.895326][ T3748] usb_probe_device+0xd0/0x180 [ 52.896517][ T3748] really_probe+0x218/0x61c [ 52.897683][ T3748] __driver_probe_device+0xe8/0x1fc [ 52.898999][ T3748] driver_probe_device+0x54/0x2f4 [ 52.900318][ T3748] __device_attach_driver+0x19c/0x2e4 [ 52.901718][ T3748] bus_for_each_drv+0xb4/0x124 [ 52.902954][ T3748] __device_attach+0x148/0x270 [ 52.904230][ T3748] device_initial_probe+0x24/0x34 [ 52.905550][ T3748] bus_probe_device+0x5c/0xf0 [ 52.906772][ T3748] device_add+0x754/0x968 [ 52.907928][ T3748] usb_new_device+0x428/0x8a8 [ 52.909169][ T3748] hub_event+0x1728/0x258c [ 52.910307][ T3748] process_one_work+0x2d4/0x4e0 [ 52.911529][ T3748] worker_thread+0x42c/0x5f8 [ 52.912730][ T3748] kthread+0x120/0x14c [ 52.913782][ T3748] ret_from_fork+0x10/0x20 [ 52.914929][ T3748] ---[ end trace 0000000000000000 ]--- [ 52.916369][ T3748] usb 1-1: error -22 when submitting rx urb [ 52.917904][ T3748] usb 1-1: Failed to submit rx cmd [ 52.919355][ T3748] ar5523: probe of 1-1:64.245 failed with error -22 [ 52.922297][ T3748] ------------[ cut here ]------------ [ 52.923718][ T3748] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 52.925429][ T3748] WARNING: CPU: 1 PID: 3748 at drivers/usb/core/urb.c:505 usb_submit_urb+0x594/0x9b4 [ 52.927973][ T3748] Modules linked in: [ 52.928999][ T3748] CPU: 1 PID: 3748 Comm: kworker/1:3 Tainted: G W 6.1.62-syzkaller #0 [ 52.931439][ T3748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 52.934054][ T3748] Workqueue: usb_hub_wq hub_event [ 52.935335][ T3748] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 52.937332][ T3748] pc : usb_submit_urb+0x594/0x9b4 [ 52.938603][ T3748] lr : usb_submit_urb+0x594/0x9b4 [ 52.939837][ T3748] sp : ffff8000129d3430 [ 52.940899][ T3748] x29: ffff8000129d3440 x28: ffff0000ca11a800 x27: ffff0000cc23805c [ 52.942999][ T3748] x26: ffff80000d20ad34 x25: ffff0000ca11a8a8 x24: ffff0000ca3e8680 [ 52.945081][ T3748] x23: ffff80000d235b0c x22: 0000000000000400 x21: 0000000000000003 [ 52.947175][ T3748] x20: 0000000000000a20 x19: ffff0000cc238000 x18: ffff80000c03d2c4 [ 52.949238][ T3748] x17: 0000000000000000 x16: 0000000000000002 x15: 0000000000000000 [ 52.951298][ T3748] x14: 0000000000000000 x13: 205d383437335420 x12: ffff80000eab2000 [ 52.953411][ T3748] x11: ff808000080e0e64 x10: 0000000000000000 x9 : dca9c63ff8a09800 [ 52.955451][ T3748] x8 : dca9c63ff8a09800 x7 : 0000000000000000 x6 : ffff80000bffb55c [ 52.957487][ T3748] x5 : 0000000000000000 x4 : 0000000000000080 x3 : 0000000000000000 [ 52.959564][ T3748] x2 : 0000000000000000 x1 : 0000000100000000 x0 : 0000000000000000 [ 52.961637][ T3748] Call trace: [ 52.962505][ T3748] usb_submit_urb+0x594/0x9b4 [ 52.963696][ T3748] ar5523_submit_rx_cmd+0x74/0xf4 [ 52.964998][ T3748] ar5523_probe+0x41c/0xbb8 [ 52.966177][ T3748] usb_probe_interface+0x2fc/0x4ac [ 52.967512][ T3748] really_probe+0x218/0x61c [ 52.968664][ T3748] __driver_probe_device+0xe8/0x1fc [ 52.969992][ T3748] driver_probe_device+0x54/0x2f4 [ 52.971288][ T3748] __device_attach_driver+0x19c/0x2e4 [ 52.972660][ T3748] bus_for_each_drv+0xb4/0x124 [ 52.973851][ T3748] __device_attach+0x148/0x270 [ 52.975096][ T3748] device_initial_probe+0x24/0x34 [ 52.976403][ T3748] bus_probe_device+0x5c/0xf0 [ 52.977611][ T3748] device_add+0x754/0x968 [ 52.978712][ T3748] usb_set_configuration+0xb0c/0xd18 [ 52.980075][ T3748] usb_generic_driver_probe+0x5c/0xe8 [ 52.981407][ T3748] usb_probe_device+0xd0/0x180 [ 52.982646][ T3748] really_probe+0x218/0x61c [ 52.983819][ T3748] __driver_probe_device+0xe8/0x1fc [ 52.985182][ T3748] driver_probe_device+0x54/0x2f4 [ 52.986476][ T3748] __device_attach_driver+0x19c/0x2e4 [ 52.987887][ T3748] bus_for_each_drv+0xb4/0x124 [ 52.989112][ T3748] __device_attach+0x148/0x270 [ 52.990308][ T3748] device_initial_probe+0x24/0x34 [ 52.991681][ T3748] bus_probe_device+0x5c/0xf0 [ 52.992876][ T3748] device_add+0x754/0x968 [ 52.994030][ T3748] usb_new_device+0x428/0x8a8 [ 52.995188][ T3748] hub_event+0x1728/0x258c [ 52.996327][ T3748] process_one_work+0x2d4/0x4e0 [ 52.997565][ T3748] worker_thread+0x42c/0x5f8 [ 52.998748][ T3748] kthread+0x120/0x14c [ 52.999772][ T3748] ret_from_fork+0x10/0x20 [ 53.000883][ T3748] ---[ end trace 0000000000000000 ]--- [ 53.002420][ T3748] usb 1-1: error -22 when submitting rx urb [ 53.003876][ T3748] usb 1-1: Failed to submit rx cmd [ 53.005306][ T3748] ar5523: probe of 1-1:64.155 failed with error -22 [ 53.047009][ T3748] ------------[ cut here ]------------ [ 53.048370][ T3748] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 53.050019][ T3748] WARNING: CPU: 1 PID: 3748 at drivers/usb/core/urb.c:505 usb_submit_urb+0x594/0x9b4 [ 53.052383][ T3748] Modules linked in: [ 53.053341][ T3748] CPU: 1 PID: 3748 Comm: kworker/1:3 Tainted: G W 6.1.62-syzkaller #0 [ 53.055813][ T3748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 53.058443][ T3748] Workqueue: usb_hub_wq hub_event [ 53.059712][ T3748] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 53.061585][ T3748] pc : usb_submit_urb+0x594/0x9b4 [ 53.062910][ T3748] lr : usb_submit_urb+0x594/0x9b4 [ 53.064231][ T3748] sp : ffff8000129d3430 [ 53.065273][ T3748] x29: ffff8000129d3440 x28: ffff0000ca11a800 x27: ffff0000c52da15c [ 53.067371][ T3748] x26: ffff80000d20ad34 x25: ffff0000ca11a8a8 x24: ffff0000ca3e8680 [ 53.069377][ T3748] x23: ffff80000d235b0c x22: 0000000000000400 x21: 0000000000000003 [ 53.071556][ T3748] x20: 0000000000000a20 x19: ffff0000c52da100 x18: 0000000000000000 [ 53.073641][ T3748] x17: 0000000000000001 x16: 0000000000000002 x15: 0000000000000000 [ 53.075718][ T3748] x14: 0000000000000000 x13: 205d383437335420 x12: ffff80000eab2000 [ 53.077735][ T3748] x11: ff808000080e0e64 x10: 0000000000000000 x9 : dca9c63ff8a09800 [ 53.079840][ T3748] x8 : dca9c63ff8a09800 x7 : 0000000000000000 x6 : ffff80000bffb55c [ 53.081870][ T3748] x5 : 0000000000000000 x4 : 0000000000000080 x3 : 0000000000000000 [ 53.083986][ T3748] x2 : 0000000000000000 x1 : 0000000100000000 x0 : 0000000000000000 [ 53.086032][ T3748] Call trace: [ 53.086825][ T3748] usb_submit_urb+0x594/0x9b4 [ 53.087953][ T3748] ar5523_submit_rx_cmd+0x74/0xf4 [ 53.089282][ T3748] ar5523_probe+0x41c/0xbb8 [ 53.090395][ T3748] usb_probe_interface+0x2fc/0x4ac [ 53.091689][ T3748] really_probe+0x218/0x61c [ 53.092883][ T3748] __driver_probe_device+0xe8/0x1fc [ 53.094188][ T3748] driver_probe_device+0x54/0x2f4 [ 53.095479][ T3748] __device_attach_driver+0x19c/0x2e4 [ 53.096800][ T3748] bus_for_each_drv+0xb4/0x124 [ 53.098106][ T3748] __device_attach+0x148/0x270 [ 53.099285][ T3748] device_initial_probe+0x24/0x34 [ 53.100561][ T3748] bus_probe_device+0x5c/0xf0 [ 53.101763][ T3748] device_add+0x754/0x968 [ 53.102878][ T3748] usb_set_configuration+0xb0c/0xd18 [ 53.104202][ T3748] usb_generic_driver_probe+0x5c/0xe8 [ 53.105555][ T3748] usb_probe_device+0xd0/0x180 [ 53.106781][ T3748] really_probe+0x218/0x61c [ 53.107923][ T3748] __driver_probe_device+0xe8/0x1fc [ 53.109237][ T3748] driver_probe_device+0x54/0x2f4 [ 53.110513][ T3748] __device_attach_driver+0x19c/0x2e4 [ 53.111921][ T3748] bus_for_each_drv+0xb4/0x124 [ 53.113130][ T3748] __device_attach+0x148/0x270 [ 53.114313][ T3748] device_initial_probe+0x24/0x34 [ 53.115566][ T3748] bus_probe_device+0x5c/0xf0 [ 53.116775][ T3748] device_add+0x754/0x968 [ 53.117852][ T3748] usb_new_device+0x428/0x8a8 [ 53.119092][ T3748] hub_event+0x1728/0x258c [ 53.120193][ T3748] process_one_work+0x2d4/0x4e0 [ 53.121358][ T3748] worker_thread+0x42c/0x5f8 [ 53.122477][ T3748] kthread+0x120/0x14c [ 53.123564][ T3748] ret_from_fork+0x10/0x20 [ 53.124720][ T3748] ---[ end trace 0000000000000000 ]--- [ 53.126230][ T3748] usb 1-1: error -22 when submitting rx urb [ 53.127767][ T3748] usb 1-1: Failed to submit rx cmd [ 53.129221][ T3748] ar5523: probe of 1-1:64.243 failed with error -22 [ 53.131792][ T3748] usb 1-1: USB disconnect, device number 6 [ 53.636442][ T3748] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 53.876460][ T3748] usb 1-1: Using ep0 maxpacket: 32 [ 53.996470][ T3748] usb 1-1: config 64 has an invalid interface number: 245 but max is 2 [ 53.998580][ T3748] usb 1-1: config 64 has an invalid interface number: 155 but max is 2 [ 54.000679][ T3748] usb 1-1: config 64 contains an unexpected descriptor of type 0x2, skipping [ 54.002870][ T3748] usb 1-1: config 64 contains an unexpected descriptor of type 0x1, skipping [ 54.005067][ T3748] usb 1-1: config 64 has an invalid interface number: 243 but max is 2 [ 54.007202][ T3748] usb 1-1: config 64 has no interface number 0 [ 54.008886][ T3748] usb 1-1: config 64 has no interface number 1 [ 54.010499][ T3748] usb 1-1: config 64 has no interface number 2 [ 54.012062][ T3748] usb 1-1: config 64 interface 245 altsetting 7 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 54.014797][ T3748] usb 1-1: config 64 interface 245 altsetting 7 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 54.017638][ T3748] usb 1-1: config 64 interface 245 altsetting 7 has an invalid endpoint descriptor of length 2, skipping [ 54.020401][ T3748] usb 1-1: config 64 interface 245 altsetting 7 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 54.023698][ T3748] usb 1-1: config 64 interface 155 altsetting 1 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 54.026531][ T3748] usb 1-1: config 64 interface 155 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 54.029174][ T3748] usb 1-1: config 64 interface 155 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 54.031803][ T3748] usb 1-1: config 64 interface 155 altsetting 1 endpoint 0xA has invalid maxpacket 72, setting to 64 [ 54.034540][ T3748] usb 1-1: config 64 interface 155 altsetting 1 endpoint 0x81 has an invalid bInterval 139, changing to 11 [ 54.037540][ T3748] usb 1-1: config 64 interface 155 altsetting 1 endpoint 0x81 has invalid maxpacket 18251, setting to 1024 [ 54.040422][ T3748] usb 1-1: config 64 interface 155 altsetting 1 has a duplicate endpoint with address 0xA, skipping [ 54.043044][ T3748] usb 1-1: config 64 interface 155 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 54.045679][ T3748] usb 1-1: config 64 interface 155 altsetting 1 has 9 endpoint descriptors, different from the interface descriptor's value: 8 [ 54.049212][ T3748] usb 1-1: config 64 interface 243 altsetting 31 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 54.052107][ T3748] usb 1-1: config 64 interface 245 has no altsetting 0 [ 54.053731][ T3748] usb 1-1: config 64 interface 155 has no altsetting 0 [ 54.055443][ T3748] usb 1-1: config 64 interface 243 has no altsetting 0 [ 54.226466][ T3748] usb 1-1: New USB device found, idVendor=083a, idProduct=4506, bcdDevice=6d.7d [ 54.228893][ T3748] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.230950][ T3748] usb 1-1: Product: syz [ 54.231974][ T3748] usb 1-1: Manufacturer: syz [ 54.233152][ T3748] usb 1-1: SerialNumber: syz [ 54.546851][ T3748] ------------[ cut here ]------------ [ 54.548280][ T3748] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 54.549950][ T3748] WARNING: CPU: 1 PID: 3748 at drivers/usb/core/urb.c:505 usb_submit_urb+0x594/0x9b4 [ 54.552379][ T3748] Modules linked in: [ 54.553348][ T3748] CPU: 1 PID: 3748 Comm: kworker/1:3 Tainted: G W 6.1.62-syzkaller #0 [ 54.555704][ T3748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 54.558312][ T3748] Workqueue: usb_hub_wq hub_event [ 54.559567][ T3748] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 54.561488][ T3748] pc : usb_submit_urb+0x594/0x9b4 [ 54.562770][ T3748] lr : usb_submit_urb+0x594/0x9b4 [ 54.564050][ T3748] sp : ffff8000129d3430 [ 54.565123][ T3748] x29: ffff8000129d3440 x28: ffff0000ca118800 x27: ffff0000cc23835c [ 54.567129][ T3748] x26: ffff80000d20ad34 x25: ffff0000ca1188a8 x24: ffff0000c68a4000 [ 54.569189][ T3748] x23: ffff80000d235b0c x22: 0000000000000400 x21: 0000000000000003 [ 54.571213][ T3748] x20: 0000000000000a20 x19: ffff0000cc238300 x18: 000000001e77384d [ 54.573230][ T3748] x17: 000000000efca970 x16: 0000000000000002 x15: 0000000000000000 [ 54.575279][ T3748] x14: 0000000000000000 x13: 205d383437335420 x12: ffff80000eab2000 [ 54.577284][ T3748] x11: ff808000080e0e64 x10: 0000000000000000 x9 : dca9c63ff8a09800 [ 54.579359][ T3748] x8 : dca9c63ff8a09800 x7 : 0000000000000000 x6 : ffff80000bffb55c [ 54.581440][ T3748] x5 : 0000000000000000 x4 : 0000000000000080 x3 : 0000000000000000 [ 54.583497][ T3748] x2 : 0000000000000000 x1 : 0000000100000000 x0 : 0000000000000000 [ 54.585559][ T3748] Call trace: [ 54.586363][ T3748] usb_submit_urb+0x594/0x9b4 [ 54.587589][ T3748] ar5523_submit_rx_cmd+0x74/0xf4 [ 54.588892][ T3748] ar5523_probe+0x41c/0xbb8 [ 54.589998][ T3748] usb_probe_interface+0x2fc/0x4ac [ 54.591302][ T3748] really_probe+0x218/0x61c [ 54.592481][ T3748] __driver_probe_device+0xe8/0x1fc [ 54.593812][ T3748] driver_probe_device+0x54/0x2f4 [ 54.595134][ T3748] __device_attach_driver+0x19c/0x2e4 [ 54.596513][ T3748] bus_for_each_drv+0xb4/0x124 [ 54.597677][ T3748] __device_attach+0x148/0x270 [ 54.598866][ T3748] device_initial_probe+0x24/0x34 [ 54.600085][ T3748] bus_probe_device+0x5c/0xf0 [ 54.601241][ T3748] device_add+0x754/0x968 [ 54.602366][ T3748] usb_set_configuration+0xb0c/0xd18 [ 54.603656][ T3748] usb_generic_driver_probe+0x5c/0xe8 [ 54.605051][ T3748] usb_probe_device+0xd0/0x180 [ 54.606259][ T3748] really_probe+0x218/0x61c [ 54.607420][ T3748] __driver_probe_device+0xe8/0x1fc [ 54.608750][ T3748] driver_probe_device+0x54/0x2f4 [ 54.610058][ T3748] __device_attach_driver+0x19c/0x2e4 [ 54.611472][ T3748] bus_for_each_drv+0xb4/0x124 [ 54.612698][ T3748] __device_attach+0x148/0x270 [ 54.613841][ T3748] device_initial_probe+0x24/0x34 [ 54.615161][ T3748] bus_probe_device+0x5c/0xf0 [ 54.616355][ T3748] device_add+0x754/0x968 [ 54.617534][ T3748] usb_new_device+0x428/0x8a8 [ 54.618775][ T3748] hub_event+0x1728/0x258c [ 54.619934][ T3748] process_one_work+0x2d4/0x4e0 [ 54.621242][ T3748] worker_thread+0x42c/0x5f8 [ 54.622436][ T3748] kthread+0x120/0x14c [ 54.623448][ T3748] ret_from_fork+0x10/0x20 [ 54.624577][ T3748] ---[ end trace 0000000000000000 ]--- [ 54.626038][ T3748] usb 1-1: error -22 when submitting rx urb [ 54.627554][ T3748] usb 1-1: Failed to submit rx cmd [ 54.629034][ T3748] ar5523: probe of 1-1:64.245 failed with error -22 [ 54.631964][ T3748] ------------[ cut here ]------------ [ 54.633276][ T3748] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 54.634935][ T3748] WARNING: CPU: 1 PID: 3748 at drivers/usb/core/urb.c:505 usb_submit_urb+0x594/0x9b4 [ 54.637282][ T3748] Modules linked in: [ 54.638283][ T3748] CPU: 1 PID: 3748 Comm: kworker/1:3 Tainted: G W 6.1.62-syzkaller #0 [ 54.640767][ T3748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 54.643309][ T3748] Workqueue: usb_hub_wq hub_event [ 54.644611][ T3748] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 54.646559][ T3748] pc : usb_submit_urb+0x594/0x9b4 [ 54.647832][ T3748] lr : usb_submit_urb+0x594/0x9b4 [ 54.649153][ T3748] sp : ffff8000129d3430 [ 54.650163][ T3748] x29: ffff8000129d3440 x28: ffff0000ca118800 x27: ffff0000c52da45c [ 54.652196][ T3748] x26: ffff80000d20ad34 x25: ffff0000ca1188a8 x24: ffff0000c68a4000 [ 54.654269][ T3748] x23: ffff80000d235b0c x22: 0000000000000400 x21: 0000000000000003 [ 54.656307][ T3748] x20: 0000000000000a20 x19: ffff0000c52da400 x18: ffff80000c03d2c4 [ 54.658358][ T3748] x17: 0000000000038000 x16: 0000000000000002 x15: 0000000000000000 [ 54.660432][ T3748] x14: 0000000000000000 x13: 205d383437335420 x12: ffff80000eab2000 [ 54.662488][ T3748] x11: ff808000080e0e64 x10: 0000000000000000 x9 : dca9c63ff8a09800 [ 54.664544][ T3748] x8 : dca9c63ff8a09800 x7 : 0000000000000000 x6 : ffff80000bffb55c [ 54.666625][ T3748] x5 : 0000000000000000 x4 : 0000000000000080 x3 : 0000000000000000 [ 54.668645][ T3748] x2 : 0000000000000000 x1 : 0000000100000000 x0 : 0000000000000000 [ 54.670718][ T3748] Call trace: [ 54.671528][ T3748] usb_submit_urb+0x594/0x9b4 [ 54.672716][ T3748] ar5523_submit_rx_cmd+0x74/0xf4 [ 54.674041][ T3748] ar5523_probe+0x41c/0xbb8 [ 54.675174][ T3748] usb_probe_interface+0x2fc/0x4ac [ 54.676466][ T3748] really_probe+0x218/0x61c [ 54.677614][ T3748] __driver_probe_device+0xe8/0x1fc [ 54.678979][ T3748] driver_probe_device+0x54/0x2f4 [ 54.680219][ T3748] __device_attach_driver+0x19c/0x2e4 [ 54.681579][ T3748] bus_for_each_drv+0xb4/0x124 [ 54.682799][ T3748] __device_attach+0x148/0x270 [ 54.684021][ T3748] device_initial_probe+0x24/0x34 [ 54.685273][ T3748] bus_probe_device+0x5c/0xf0 [ 54.686437][ T3748] device_add+0x754/0x968 [ 54.687613][ T3748] usb_set_configuration+0xb0c/0xd18 [ 54.688955][ T3748] usb_generic_driver_probe+0x5c/0xe8 [ 54.690319][ T3748] usb_probe_device+0xd0/0x180 [ 54.691581][ T3748] really_probe+0x218/0x61c [ 54.692691][ T3748] __driver_probe_device+0xe8/0x1fc [ 54.693970][ T3748] driver_probe_device+0x54/0x2f4 [ 54.695321][ T3748] __device_attach_driver+0x19c/0x2e4 [ 54.696703][ T3748] bus_for_each_drv+0xb4/0x124 [ 54.697920][ T3748] __device_attach+0x148/0x270 [ 54.699097][ T3748] device_initial_probe+0x24/0x34 [ 54.700349][ T3748] bus_probe_device+0x5c/0xf0 [ 54.701502][ T3748] device_add+0x754/0x968 [ 54.702653][ T3748] usb_new_device+0x428/0x8a8 [ 54.703844][ T3748] hub_event+0x1728/0x258c [ 54.705029][ T3748] process_one_work+0x2d4/0x4e0 [ 54.706271][ T3748] worker_thread+0x42c/0x5f8 [ 54.707482][ T3748] kthread+0x120/0x14c [ 54.708548][ T3748] ret_from_fork+0x10/0x20 [ 54.709651][ T3748] ---[ end trace 0000000000000000 ]--- [ 54.711084][ T3748] usb 1-1: error -22 when submitting rx urb [ 54.712548][ T3748] usb 1-1: Failed to submit rx cmd [ 54.713998][ T3748] ar5523: probe of 1-1:64.155 failed with error -22 [ 54.756902][ T3748] ------------[ cut here ]------------ [ 54.758345][ T3748] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 54.760014][ T3748] WARNING: CPU: 1 PID: 3748 at drivers/usb/core/urb.c:505 usb_submit_urb+0x594/0x9b4 [ 54.762335][ T3748] Modules linked in: [ 54.763250][ T3748] CPU: 1 PID: 3748 Comm: kworker/1:3 Tainted: G W 6.1.62-syzkaller #0 [ 54.765615][ T3748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 54.768170][ T3748] Workqueue: usb_hub_wq hub_event [ 54.769463][ T3748] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 54.771628][ T3748] pc : usb_submit_urb+0x594/0x9b4 [ 54.772998][ T3748] lr : usb_submit_urb+0x594/0x9b4 [ 54.774309][ T3748] sp : ffff8000129d3430 [ 54.775296][ T3748] x29: ffff8000129d3440 x28: ffff0000ca118800 x27: ffff0000cc238e5c [ 54.777373][ T3748] x26: ffff80000d20ad34 x25: ffff0000ca1188a8 x24: ffff0000c68a4000 [ 54.779455][ T3748] x23: ffff80000d235b0c x22: 0000000000000400 x21: 0000000000000003 [ 54.781427][ T3748] x20: 0000000000000a20 x19: ffff0000cc238e00 x18: 0000000000000000 [ 54.783514][ T3748] x17: 000000000002332b x16: 0000000000000002 x15: 0000000000000000 [ 54.785596][ T3748] x14: 0000000000000000 x13: 205d383437335420 x12: ffff80000eab2000 [ 54.787693][ T3748] x11: ff808000080e0e64 x10: 0000000000000000 x9 : dca9c63ff8a09800 [ 54.789717][ T3748] x8 : dca9c63ff8a09800 x7 : 0000000000000000 x6 : ffff80000bffb55c [ 54.791749][ T3748] x5 : 0000000000000000 x4 : 0000000000000080 x3 : 0000000000000000 [ 54.793953][ T3748] x2 : 0000000000000000 x1 : 0000000100000000 x0 : 0000000000000000 [ 54.795973][ T3748] Call trace: [ 54.796793][ T3748] usb_submit_urb+0x594/0x9b4 [ 54.798050][ T3748] ar5523_submit_rx_cmd+0x74/0xf4 [ 54.799402][ T3748] ar5523_probe+0x41c/0xbb8 [ 54.800546][ T3748] usb_probe_interface+0x2fc/0x4ac [ 54.801829][ T3748] really_probe+0x218/0x61c [ 54.802994][ T3748] __driver_probe_device+0xe8/0x1fc [ 54.804331][ T3748] driver_probe_device+0x54/0x2f4 [ 54.805612][ T3748] __device_attach_driver+0x19c/0x2e4 [ 54.807015][ T3748] bus_for_each_drv+0xb4/0x124 [ 54.808292][ T3748] __device_attach+0x148/0x270 [ 54.809492][ T3748] device_initial_probe+0x24/0x34 [ 54.810801][ T3748] bus_probe_device+0x5c/0xf0 [ 54.812018][ T3748] device_add+0x754/0x968 [ 54.813149][ T3748] usb_set_configuration+0xb0c/0xd18 [ 54.814539][ T3748] usb_generic_driver_probe+0x5c/0xe8 [ 54.815950][ T3748] usb_probe_device+0xd0/0x180 [ 54.817132][ T3748] really_probe+0x218/0x61c [ 54.818274][ T3748] __driver_probe_device+0xe8/0x1fc [ 54.819644][ T3748] driver_probe_device+0x54/0x2f4 [ 54.820984][ T3748] __device_attach_driver+0x19c/0x2e4 [ 54.822340][ T3748] bus_for_each_drv+0xb4/0x124 [ 54.823560][ T3748] __device_attach+0x148/0x270 [ 54.824829][ T3748] device_initial_probe+0x24/0x34 [ 54.826115][ T3748] bus_probe_device+0x5c/0xf0 [ 54.827286][ T3748] device_add+0x754/0x968 [ 54.828351][ T3748] usb_new_device+0x428/0x8a8 [ 54.829521][ T3748] hub_event+0x1728/0x258c [ 54.830618][ T3748] process_one_work+0x2d4/0x4e0 [ 54.831925][ T3748] worker_thread+0x42c/0x5f8 [ 54.833074][ T3748] kthread+0x120/0x14c [ 54.834115][ T3748] ret_from_fork+0x10/0x20 [ 54.835275][ T3748] ---[ end trace 0000000000000000 ]--- [ 54.836869][ T3748] usb 1-1: error -22 when submitting rx urb [ 54.838421][ T3748] usb 1-1: Failed to submit rx cmd [ 54.839903][ T3748] ar5523: probe of 1-1:64.243 failed with error -22 [ 54.842723][ T3748] usb 1-1: USB disconnect, device number 7 2023/11/18 16:22:39 executed programs: 6 [ 55.426451][ T3748] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 55.676439][ T3748] usb 1-1: Using ep0 maxpacket: 32 [ 55.796554][ T3748] usb 1-1: config 64 has an invalid interface number: 245 but max is 2 [ 55.798671][ T3748] usb 1-1: config 64 has an invalid interface number: 155 but max is 2 [ 55.800876][ T3748] usb 1-1: config 64 contains an unexpected descriptor of type 0x2, skipping