Warning: Permanently added '10.128.1.91' (ED25519) to the list of known hosts. 1970/01/01 00:01:01 ignoring optional flag "sandboxArg"="0" 1970/01/01 00:01:01 parsed 1 programs 1970/01/01 00:01:01 executed programs: 0 [ 61.747907][ T6604] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 61.784039][ T5820] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.786760][ T5820] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.789426][ T5820] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.792236][ T5820] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.794537][ T5820] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 61.796527][ T5820] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.861992][ T6611] chnl_net:caif_netlink_parms(): no params data found [ 61.888478][ T6611] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.890386][ T6611] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.892759][ T6611] bridge_slave_0: entered allmulticast mode [ 61.894773][ T6611] bridge_slave_0: entered promiscuous mode [ 61.897604][ T6611] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.899634][ T6611] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.902696][ T6611] bridge_slave_1: entered allmulticast mode [ 61.904684][ T6611] bridge_slave_1: entered promiscuous mode [ 61.916412][ T6611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.920231][ T6611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.931520][ T6611] team0: Port device team_slave_0 added [ 61.934190][ T6611] team0: Port device team_slave_1 added [ 61.945414][ T6611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.947226][ T6611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.954097][ T6611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.958036][ T6611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.959918][ T6611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.967389][ T6611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.023984][ T6611] hsr_slave_0: entered promiscuous mode [ 62.071684][ T6611] hsr_slave_1: entered promiscuous mode [ 62.685656][ T6611] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.688917][ T6611] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.695842][ T6611] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.699014][ T6611] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.710448][ T6611] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.712328][ T6611] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.714242][ T6611] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.716028][ T6611] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.739748][ T6611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.746337][ T24] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.749196][ T24] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.763715][ T6611] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.768226][ T3683] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.770120][ T3683] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.784381][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.786345][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.795003][ T6611] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.863350][ T6611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.892389][ T6611] veth0_vlan: entered promiscuous mode [ 62.897779][ T6611] veth1_vlan: entered promiscuous mode [ 62.913968][ T6611] veth0_macvtap: entered promiscuous mode [ 62.916973][ T6611] veth1_macvtap: entered promiscuous mode [ 62.926142][ T6611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.929492][ T6611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.936185][ T6611] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.938515][ T6611] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.940825][ T6611] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.945396][ T6611] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.990112][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.992706][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.003802][ T2083] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.005833][ T2083] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.321996][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 63.561780][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 63.681501][ T24] usb 1-1: config 0 has an invalid interface number: 219 but max is 0 [ 63.683861][ T24] usb 1-1: config 0 has no interface number 0 [ 63.685878][ T24] usb 1-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 63.688416][ T24] usb 1-1: config 0 interface 219 altsetting 0 has an invalid endpoint with address 0x12, skipping [ 63.691154][ T24] usb 1-1: config 0 interface 219 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 63.695829][ T24] usb 1-1: config 0 interface 219 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1023 [ 63.698705][ T24] usb 1-1: config 0 interface 219 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 63.702225][ T24] usb 1-1: config 0 interface 219 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1023 [ 63.704954][ T24] usb 1-1: config 0 interface 219 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 63.707936][ T24] usb 1-1: config 0 interface 219 altsetting 0 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 63.710973][ T24] usb 1-1: config 0 interface 219 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 63.852168][ T52] Bluetooth: hci0: command tx timeout [ 63.871680][ T24] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=36.57 [ 63.874152][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.876237][ T24] usb 1-1: Product: syz [ 63.877258][ T24] usb 1-1: Manufacturer: syz [ 63.878444][ T24] usb 1-1: SerialNumber: syz [ 63.891743][ T24] usb 1-1: config 0 descriptor?? [ 63.912091][ T6701] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 63.934880][ T24] ------------[ cut here ]------------ [ 63.936554][ T24] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 63.938659][ T24] WARNING: CPU: 1 PID: 24 at drivers/usb/core/urb.c:504 usb_submit_urb+0xa00/0x1434 [ 63.941127][ T24] Modules linked in: [ 63.942149][ T24] CPU: 1 PID: 24 Comm: kworker/1:0 Not tainted 6.9.0-rc7-syzkaller-00072-gc4d6737dc9da #0 [ 63.944740][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 63.947705][ T24] Workqueue: usb_hub_wq hub_event [ 63.949119][ T24] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 63.951307][ T24] pc : usb_submit_urb+0xa00/0x1434 [ 63.952782][ T24] lr : usb_submit_urb+0xa00/0x1434 [ 63.954131][ T24] sp : ffff800093d267a0 [ 63.955313][ T24] x29: ffff800093d267e0 x28: ffff0000e19d2000 x27: 0000000000000001 [ 63.957559][ T24] x26: ffff80008c6b2688 x25: ffff0000cb2c9940 x24: ffff0000ce339450 [ 63.959783][ T24] x23: ffff80008c6b91a0 x22: dfff800000000000 x21: 0000000000000002 [ 63.961928][ T24] x20: 0000000000000c00 x19: ffff0000ce339400 x18: 1fffe000367bd596 [ 63.963975][ T24] x17: ffff80008ee9d000 x16: ffff800080333944 x15: 0000000000000001 [ 63.966194][ T24] x14: 1fffe000367c0190 x13: 0000000000000000 x12: 0000000000000003 [ 63.968477][ T24] x11: 0000000000000001 x10: 0000000000000003 x9 : 3e3ebb5fd9f21600 [ 63.970767][ T24] x8 : 3e3ebb5fd9f21600 x7 : ffff8000802aa2c0 x6 : 0000000000000000 [ 63.972980][ T24] x5 : 0000000000000001 x4 : 0000000000000001 x3 : 0000000000000000 [ 63.975220][ T24] x2 : 0000000000000006 x1 : ffff80008afffb40 x0 : ffff800124ff9000 [ 63.977504][ T24] Call trace: [ 63.978415][ T24] usb_submit_urb+0xa00/0x1434 [ 63.979732][ T24] usb_start_wait_urb+0xec/0x414 [ 63.981053][ T24] usb_bulk_msg+0x2ec/0x3ec [ 63.982302][ T24] amradio_set_mute+0x1d4/0x428 [ 63.983671][ T24] usb_amradio_probe+0x388/0x6f8 [ 63.985067][ T24] usb_probe_interface+0x57c/0xa24 [ 63.986394][ T24] really_probe+0x394/0x904 [ 63.987569][ T24] __driver_probe_device+0x194/0x374 [ 63.989010][ T24] driver_probe_device+0x78/0x330 [ 63.990342][ T24] __device_attach_driver+0x2a8/0x4f4 [ 63.991843][ T24] bus_for_each_drv+0x228/0x2bc [ 63.993078][ T24] __device_attach+0x2b4/0x434 [ 63.994405][ T24] device_initial_probe+0x24/0x34 [ 63.995815][ T24] bus_probe_device+0x178/0x240 [ 63.997140][ T24] device_add+0x768/0xaac [ 63.998370][ T24] usb_set_configuration+0x15cc/0x1b38 [ 63.999791][ T24] usb_generic_driver_probe+0x8c/0x148 [ 64.001252][ T24] usb_probe_device+0x1a4/0x348 [ 64.002479][ T24] really_probe+0x394/0x904 [ 64.003670][ T24] __driver_probe_device+0x194/0x374 [ 64.005113][ T24] driver_probe_device+0x78/0x330 [ 64.006494][ T24] __device_attach_driver+0x2a8/0x4f4 [ 64.007876][ T24] bus_for_each_drv+0x228/0x2bc [ 64.009241][ T24] __device_attach+0x2b4/0x434 [ 64.010505][ T24] device_initial_probe+0x24/0x34 [ 64.011873][ T24] bus_probe_device+0x178/0x240 [ 64.013247][ T24] device_add+0x768/0xaac [ 64.014443][ T24] usb_new_device+0x908/0x149c [ 64.015784][ T24] hub_event+0x2454/0x4280 [ 64.016997][ T24] process_one_work+0x7b8/0x15d4 [ 64.018399][ T24] worker_thread+0x938/0xef4 [ 64.019668][ T24] kthread+0x288/0x310 [ 64.020727][ T24] ret_from_fork+0x10/0x20 [ 64.021891][ T24] irq event stamp: 168448 [ 64.023050][ T24] hardirqs last enabled at (168447): [] finish_lock_switch+0xbc/0x1e4 [ 64.025681][ T24] hardirqs last disabled at (168448): [] el1_dbg+0x24/0x80 [ 64.028113][ T24] softirqs last enabled at (167490): [] handle_softirqs+0xa60/0xc34 [ 64.030687][ T24] softirqs last disabled at (167337): [] __do_softirq+0x14/0x20 [ 64.033079][ T24] ---[ end trace 0000000000000000 ]--- [ 64.051449][ T24] (null): radio-mr800 - initialization failed [ 64.053113][ T24] radio-mr800 1-1:0.219: probe with driver radio-mr800 failed with error -71 [ 64.055536][ T24] usbhid 1-1:0.219: couldn't find an input interrupt endpoint [ 64.135455][ T24] usb 1-1: USB disconnect, device number 2 [ 64.493468][ T2285] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.495280][ T2285] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.931480][ T6257] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 65.201398][ T6257] usb 1-1: Using ep0 maxpacket: 16 [ 65.352327][ T6257] usb 1-1: config 0 has an invalid interface number: 219 but max is 0 [ 65.354542][ T6257] usb 1-1: config 0 has no interface number 0 [ 65.356123][ T6257] usb 1-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 65.358690][ T6257] usb 1-1: config 0 interface 219 altsetting 0 has an invalid endpoint with address 0x12, skipping [ 65.362769][ T6257] usb 1-1: config 0 interface 219 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 65.365625][ T6257] usb 1-1: config 0 interface 219 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1023 [ 65.368330][ T6257] usb 1-1: config 0 interface 219 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 65.371137][ T6257] usb 1-1: config 0 interface 219 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1023 [ 65.374992][ T6257] usb 1-1: config 0 interface 219 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 65.377934][ T6257] usb 1-1: config 0 interface 219 altsetting 0 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 65.380760][ T6257] usb 1-1: config 0 interface 219 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 65.571517][ T6257] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=36.57 [ 65.575193][ T6257] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.577358][ T6257] usb 1-1: Product: syz [ 65.578466][ T6257] usb 1-1: Manufacturer: syz [ 65.579712][ T6257] usb 1-1: SerialNumber: syz [ 65.585143][ T6257] usb 1-1: config 0 descriptor?? [ 65.612487][ T6841] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 65.643988][ T6257] ------------[ cut here ]------------ [ 65.645466][ T6257] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 65.647518][ T6257] WARNING: CPU: 0 PID: 6257 at drivers/usb/core/urb.c:504 usb_submit_urb+0xa00/0x1434 [ 65.650002][ T6257] Modules linked in: [ 65.651035][ T6257] CPU: 0 PID: 6257 Comm: kworker/0:3 Tainted: G W 6.9.0-rc7-syzkaller-00072-gc4d6737dc9da #0 [ 65.654173][ T6257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 65.656817][ T6257] Workqueue: usb_hub_wq hub_event [ 65.658178][ T6257] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 65.660270][ T6257] pc : usb_submit_urb+0xa00/0x1434 [ 65.661650][ T6257] lr : usb_submit_urb+0xa00/0x1434 [ 65.662977][ T6257] sp : ffff80009a1b67a0 [ 65.664080][ T6257] x29: ffff80009a1b67e0 x28: ffff0000d61bd000 x27: 0000000000000001 [ 65.666302][ T6257] x26: ffff80008c6b2688 x25: ffff0000cbfcb1a0 x24: ffff0000d00ad850 [ 65.668469][ T6257] x23: ffff80008c6b91a0 x22: dfff800000000000 x21: 0000000000000002 [ 65.670758][ T6257] x20: 0000000000000c00 x19: ffff0000d00ad800 x18: 0000000000000008 [ 65.672920][ T6257] x17: 0000000000000000 x16: ffff800080333944 x15: 0000000000000001 [ 65.675085][ T6257] x14: 1fffe000367bb990 x13: 0000000000000000 x12: 0000000000000003 [ 65.677324][ T6257] x11: 0000000000000001 x10: 0000000000000003 x9 : 8d0edbdbb716e800 [ 65.679481][ T6257] x8 : 8d0edbdbb716e800 x7 : ffff80008af6775c x6 : 0000000000000000 [ 65.681676][ T6257] x5 : 0000000000000001 x4 : 0000000000000001 x3 : 0000000000000000 [ 65.683840][ T6257] x2 : 0000000000000006 x1 : ffff80008afffb40 x0 : ffff800124fd5000 [ 65.685944][ T6257] Call trace: [ 65.686802][ T6257] usb_submit_urb+0xa00/0x1434 [ 65.688050][ T6257] usb_start_wait_urb+0xec/0x414 [ 65.689360][ T6257] usb_bulk_msg+0x2ec/0x3ec [ 65.690573][ T6257] amradio_set_mute+0x1d4/0x428 [ 65.691875][ T6257] usb_amradio_probe+0x388/0x6f8 [ 65.693289][ T6257] usb_probe_interface+0x57c/0xa24 [ 65.694681][ T6257] really_probe+0x394/0x904 [ 65.695937][ T6257] __driver_probe_device+0x194/0x374 [ 65.697348][ T6257] driver_probe_device+0x78/0x330 [ 65.698707][ T6257] __device_attach_driver+0x2a8/0x4f4 [ 65.700278][ T6257] bus_for_each_drv+0x228/0x2bc [ 65.701527][ T6257] __device_attach+0x2b4/0x434 [ 65.702761][ T6257] device_initial_probe+0x24/0x34 [ 65.704090][ T6257] bus_probe_device+0x178/0x240 [ 65.705337][ T6257] device_add+0x768/0xaac [ 65.706530][ T6257] usb_set_configuration+0x15cc/0x1b38 [ 65.707942][ T6257] usb_generic_driver_probe+0x8c/0x148 [ 65.709393][ T6257] usb_probe_device+0x1a4/0x348 [ 65.710658][ T6257] really_probe+0x394/0x904 [ 65.711848][ T6257] __driver_probe_device+0x194/0x374 [ 65.713249][ T6257] driver_probe_device+0x78/0x330 [ 65.714587][ T6257] __device_attach_driver+0x2a8/0x4f4 [ 65.715962][ T6257] bus_for_each_drv+0x228/0x2bc [ 65.717242][ T6257] __device_attach+0x2b4/0x434 [ 65.718504][ T6257] device_initial_probe+0x24/0x34 [ 65.719886][ T6257] bus_probe_device+0x178/0x240 [ 65.721214][ T6257] device_add+0x768/0xaac [ 65.722376][ T6257] usb_new_device+0x908/0x149c [ 65.723595][ T6257] hub_event+0x2454/0x4280 [ 65.724851][ T6257] process_one_work+0x7b8/0x15d4 [ 65.726231][ T6257] worker_thread+0x938/0xef4 [ 65.727466][ T6257] kthread+0x288/0x310 [ 65.728554][ T6257] ret_from_fork+0x10/0x20 [ 65.729712][ T6257] irq event stamp: 34002 [ 65.730857][ T6257] hardirqs last enabled at (34001): [] raw_spin_rq_unlock_irq+0x14/0x24 [ 65.733683][ T6257] hardirqs last disabled at (34002): [] el1_dbg+0x24/0x80 [ 65.736017][ T6257] softirqs last enabled at (32372): [] handle_softirqs+0xa60/0xc34 [ 65.738657][ T6257] softirqs last disabled at (32253): [] __do_softirq+0x14/0x20 [ 65.741047][ T6257] ---[ end trace 0000000000000000 ]--- [ 65.771725][ T6257] (null): radio-mr800 - initialization failed [ 65.773501][ T6257] radio-mr800 1-1:0.219: probe with driver radio-mr800 failed with error -71 [ 65.775852][ T6257] usbhid 1-1:0.219: couldn't find an input interrupt endpoint [ 65.846425][ T6257] usb 1-1: USB disconnect, device number 3 [ 65.921652][ T52] Bluetooth: hci0: command tx timeout [ 66.631437][ T24] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 66.871386][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 66.991477][ T24] usb 1-1: config 0 has an invalid interface number: 219 but max is 0 [ 66.993686][ T24] usb 1-1: config 0 has no interface number 0 [ 66.995222][ T24] usb 1-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 66.997743][ T24] usb 1-1: config 0 interface 219 altsetting 0 has an invalid endpoint with address 0x12, skipping [ 67.000466][ T24] usb 1-1: config 0 interface 219 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 67.003454][ T24] usb 1-1: config 0 interface 219 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1023 [ 67.006117][ T24] usb 1-1: config 0 interface 219 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 67.008897][ T24] usb 1-1: config 0 interface 219 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1023 [ 67.011531][ T24] usb 1-1: config 0 interface 219 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 67.014359][ T24] usb 1-1: config 0 interface 219 altsetting 0 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 67.017199][ T24] usb 1-1: config 0 interface 219 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 67.171863][ T24] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=36.57 [ 67.174202][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.176210][ T24] usb 1-1: Product: syz [ 67.177281][ T24] usb 1-1: Manufacturer: syz [ 67.178434][ T24] usb 1-1: SerialNumber: syz [ 67.181068][ T24] usb 1-1: config 0 descriptor?? [ 67.201672][ T6971] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 67.223748][ T24] ------------[ cut here ]------------ [ 67.225182][ T24] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 67.227175][ T24] WARNING: CPU: 1 PID: 24 at drivers/usb/core/urb.c:504 usb_submit_urb+0xa00/0x1434 [ 67.229584][ T24] Modules linked in: [ 67.230576][ T24] CPU: 1 PID: 24 Comm: kworker/1:0 Tainted: G W 6.9.0-rc7-syzkaller-00072-gc4d6737dc9da #0 [ 67.233553][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 67.236324][ T24] Workqueue: usb_hub_wq hub_event [ 67.237679][ T24] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 67.239806][ T24] pc : usb_submit_urb+0xa00/0x1434 [ 67.241200][ T24] lr : usb_submit_urb+0xa00/0x1434 [ 67.242568][ T24] sp : ffff800093d267a0 [ 67.243683][ T24] x29: ffff800093d267e0 x28: ffff0000d1237000 x27: 0000000000000001 [ 67.245904][ T24] x26: ffff80008c6b2688 x25: ffff0000cb14e2e0 x24: ffff0000d3911850 [ 67.248094][ T24] x23: ffff80008c6b91a0 x22: dfff800000000000 x21: 0000000000000002 [ 67.250330][ T24] x20: 0000000000000c00 x19: ffff0000d3911800 x18: 0000000000000008 [ 67.252542][ T24] x17: 0000000000000000 x16: ffff80008ae89e3c x15: 0000000000000001 [ 67.254618][ T24] x14: 1fffe000367bd602 x13: 0000000000000000 x12: 0000000000000000 [ 67.256634][ T24] x11: 0000000000000002 x10: 0000000000ff0100 x9 : 3e3ebb5fd9f21600 [ 67.258795][ T24] x8 : 3e3ebb5fd9f21600 x7 : 0000000000000001 x6 : 0000000000000001 [ 67.260967][ T24] x5 : ffff800093d25f18 x4 : ffff80008ef85080 x3 : ffff8000805e61b0 [ 67.263179][ T24] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000 [ 67.265229][ T24] Call trace: [ 67.266109][ T24] usb_submit_urb+0xa00/0x1434 [ 67.267324][ T24] usb_start_wait_urb+0xec/0x414 [ 67.268641][ T24] usb_bulk_msg+0x2ec/0x3ec [ 67.269923][ T24] amradio_set_mute+0x1d4/0x428 [ 67.271237][ T24] usb_amradio_probe+0x388/0x6f8 [ 67.272588][ T24] usb_probe_interface+0x57c/0xa24 [ 67.273979][ T24] really_probe+0x394/0x904 [ 67.275197][ T24] __driver_probe_device+0x194/0x374 [ 67.276607][ T24] driver_probe_device+0x78/0x330 [ 67.277913][ T24] __device_attach_driver+0x2a8/0x4f4 [ 67.279300][ T24] bus_for_each_drv+0x228/0x2bc [ 67.280558][ T24] __device_attach+0x2b4/0x434 [ 67.281869][ T24] device_initial_probe+0x24/0x34 [ 67.283231][ T24] bus_probe_device+0x178/0x240 [ 67.284507][ T24] device_add+0x768/0xaac [ 67.285674][ T24] usb_set_configuration+0x15cc/0x1b38 [ 67.287168][ T24] usb_generic_driver_probe+0x8c/0x148 [ 67.288595][ T24] usb_probe_device+0x1a4/0x348 [ 67.289875][ T24] really_probe+0x394/0x904 [ 67.291160][ T24] __driver_probe_device+0x194/0x374 [ 67.292596][ T24] driver_probe_device+0x78/0x330 [ 67.293916][ T24] __device_attach_driver+0x2a8/0x4f4 [ 67.295331][ T24] bus_for_each_drv+0x228/0x2bc [ 67.296659][ T24] __device_attach+0x2b4/0x434 [ 67.297916][ T24] device_initial_probe+0x24/0x34 [ 67.299295][ T24] bus_probe_device+0x178/0x240 [ 67.300627][ T24] device_add+0x768/0xaac [ 67.301766][ T24] usb_new_device+0x908/0x149c [ 67.303050][ T24] hub_event+0x2454/0x4280 [ 67.304276][ T24] process_one_work+0x7b8/0x15d4 [ 67.305579][ T24] worker_thread+0x938/0xef4 [ 67.306808][ T24] kthread+0x288/0x310 [ 67.307882][ T24] ret_from_fork+0x10/0x20 [ 67.309050][ T24] irq event stamp: 183028 [ 67.310158][ T24] hardirqs last enabled at (183027): [] console_unlock+0x17c/0x3d4 [ 67.312696][ T24] hardirqs last disabled at (183028): [] el1_dbg+0x24/0x80 [ 67.315070][ T24] softirqs last enabled at (182202): [] handle_softirqs+0xa60/0xc34 [ 67.317767][ T24] softirqs last disabled at (182181): [] __do_softirq+0x14/0x20 [ 67.320181][ T24] ---[ end trace 0000000000000000 ]--- [ 67.341527][ T24] (null): radio-mr800 - initialization failed [ 67.343342][ T24] radio-mr800 1-1:0.219: probe with driver radio-mr800 failed with error -71 [ 67.345712][ T24] usbhid 1-1:0.219: couldn't find an input interrupt endpoint [ 67.422045][ T24] usb 1-1: USB disconnect, device number 4 1970/01/01 00:01:07 executed programs: 3 [ 68.002456][ T52] Bluetooth: hci0: command tx timeout [ 68.211433][ T8] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 68.452334][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 68.591450][ T8] usb 1-1: config 0 has an invalid interface number: 219 but max is 0 [ 68.593603][ T8] usb 1-1: config 0 has no interface number 0 [ 68.595124][ T8] usb 1-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 68.597634][ T8] usb 1-1: config 0 interface 219 altsetting 0 has an invalid endpoint with address 0x12, skipping [ 68.600353][ T8] usb 1-1: config 0 interface 219 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 68.603299][ T8] usb 1-1: config 0 interface 219 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1023 [ 68.606028][ T8] usb 1-1: config 0 interface 219 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 68.608826][ T8] usb 1-1: config 0 interface 219 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1023 [ 68.611559][ T8] usb 1-1: config 0 interface 219 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 68.614403][ T8] usb 1-1: config 0 interface 219 altsetting 0 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 68.617236][ T8] usb 1-1: config 0 interface 219 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 68.782464][ T8] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=36.57 [ 68.784849][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.786879][ T8] usb 1-1: Product: syz [ 68.787951][ T8] usb 1-1: Manufacturer: syz [ 68.789085][ T8] usb 1-1: SerialNumber: syz [ 68.791657][ T8] usb 1-1: config 0 descriptor?? [ 68.811551][ T6973] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 68.832831][ T8] ------------[ cut here ]------------ [ 68.834382][ T8] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 68.836376][ T8] WARNING: CPU: 0 PID: 8 at drivers/usb/core/urb.c:504 usb_submit_urb+0xa00/0x1434 [ 68.838727][ T8] Modules linked in: [ 68.839702][ T8] CPU: 0 PID: 8 Comm: kworker/0:1 Tainted: G W 6.9.0-rc7-syzkaller-00072-gc4d6737dc9da #0 [ 68.842666][ T8] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 68.845285][ T8] Workqueue: usb_hub_wq hub_event [ 68.846619][ T8] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 68.848649][ T8] pc : usb_submit_urb+0xa00/0x1434 [ 68.849969][ T8] lr : usb_submit_urb+0xa00/0x1434 [ 68.851374][ T8] sp : ffff800093c167a0 [ 68.852459][ T8] x29: ffff800093c167e0 x28: ffff0000d5058000 x27: 0000000000000001 [ 68.854598][ T8] x26: ffff80008c6b2688 x25: ffff0000cb14ea60 x24: ffff0000cfc6af50 [ 68.856684][ T8] x23: ffff80008c6b91a0 x22: dfff800000000000 x21: 0000000000000002 [ 68.858798][ T8] x20: 0000000000000c00 x19: ffff0000cfc6af00 x18: 0000000000000008 [ 68.860976][ T8] x17: 0000000000000000 x16: ffff80008ae89e3c x15: 0000000000000001 [ 68.863083][ T8] x14: 1fffe000367b8e02 x13: 0000000000000000 x12: 0000000000000000 [ 68.865266][ T8] x11: 0000000000000002 x10: 0000000000ff0100 x9 : c677b9ebf2076600 [ 68.867433][ T8] x8 : c677b9ebf2076600 x7 : 0000000000000001 x6 : 0000000000000001 [ 68.869599][ T8] x5 : ffff800093c15f18 x4 : ffff80008ef85080 x3 : ffff8000805e61b0 [ 68.871774][ T8] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000 [ 68.873906][ T8] Call trace: [ 68.874794][ T8] usb_submit_urb+0xa00/0x1434 [ 68.876025][ T8] usb_start_wait_urb+0xec/0x414 [ 68.877372][ T8] usb_bulk_msg+0x2ec/0x3ec [ 68.878584][ T8] amradio_set_mute+0x1d4/0x428 [ 68.879878][ T8] usb_amradio_probe+0x388/0x6f8 [ 68.881189][ T8] usb_probe_interface+0x57c/0xa24 [ 68.882530][ T8] really_probe+0x394/0x904 [ 68.883688][ T8] __driver_probe_device+0x194/0x374 [ 68.885099][ T8] driver_probe_device+0x78/0x330 [ 68.886383][ T8] __device_attach_driver+0x2a8/0x4f4 [ 68.887796][ T8] bus_for_each_drv+0x228/0x2bc [ 68.889075][ T8] __device_attach+0x2b4/0x434 [ 68.890352][ T8] device_initial_probe+0x24/0x34 [ 68.891748][ T8] bus_probe_device+0x178/0x240 [ 68.892974][ T8] device_add+0x768/0xaac [ 68.894124][ T8] usb_set_configuration+0x15cc/0x1b38 [ 68.895518][ T8] usb_generic_driver_probe+0x8c/0x148 [ 68.896999][ T8] usb_probe_device+0x1a4/0x348 [ 68.898277][ T8] really_probe+0x394/0x904 [ 68.899436][ T8] __driver_probe_device+0x194/0x374 [ 68.900815][ T8] driver_probe_device+0x78/0x330 [ 68.902148][ T8] __device_attach_driver+0x2a8/0x4f4 [ 68.903542][ T8] bus_for_each_drv+0x228/0x2bc [ 68.904771][ T8] __device_attach+0x2b4/0x434 [ 68.906034][ T8] device_initial_probe+0x24/0x34 [ 68.907415][ T8] bus_probe_device+0x178/0x240 [ 68.908738][ T8] device_add+0x768/0xaac [ 68.910001][ T8] usb_new_device+0x908/0x149c [ 68.911293][ T8] hub_event+0x2454/0x4280 [ 68.912391][ T8] process_one_work+0x7b8/0x15d4 [ 68.913673][ T8] worker_thread+0x938/0xef4 [ 68.914923][ T8] kthread+0x288/0x310 [ 68.916001][ T8] ret_from_fork+0x10/0x20 [ 68.917215][ T8] irq event stamp: 30554 [ 68.918386][ T8] hardirqs last enabled at (30553): [] console_unlock+0x17c/0x3d4 [ 68.920779][ T8] hardirqs last disabled at (30554): [] el1_dbg+0x24/0x80 [ 68.923098][ T8] softirqs last enabled at (29388): [] handle_softirqs+0xa60/0xc34 [ 68.925705][ T8] softirqs last disabled at (29383): [] __do_softirq+0x14/0x20 [ 68.928086][ T8] ---[ end trace 0000000000000000 ]--- [ 68.941451][ T8] (null): radio-mr800 - initialization failed [ 68.943111][ T8] radio-mr800 1-1:0.219: probe with driver radio-mr800 failed with error -71 [ 68.945486][ T8] usbhid 1-1:0.219: couldn't find an input interrupt endpoint [ 69.034629][ T26] usb 1-1: USB disconnect, device number 5 [ 69.622215][ T7] cfg80211: failed to load regulatory.db [ 69.811383][ T8] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 70.081452][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 70.081653][ T52] Bluetooth: hci0: command tx timeout [ 70.241448][ T8] usb 1-1: config 0 has an invalid interface number: 219 but max is 0 [ 70.243734][ T8] usb 1-1: config 0 has no interface number 0 [ 70.245364][ T8] usb 1-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 70.247963][ T8] usb 1-1: config 0 interface 219 altsetting 0 has an invalid endpoint with address 0x12, skipping [ 70.250631][ T8] usb 1-1: config 0 interface 219 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 70.253603][ T8] usb 1-1: config 0 interface 219 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1023 [ 70.256347][ T8] usb 1-1: config 0 interface 219 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 70.259527][ T8] usb 1-1: config 0 interface 219 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1023 [ 70.262293][ T8] usb 1-1: config 0 interface 219 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 70.265007][ T8] usb 1-1: config 0 interface 219 altsetting 0 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 70.267978][ T8] usb 1-1: config 0 interface 219 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 70.421469][ T8] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=36.57 [ 70.423757][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.425740][ T8] usb 1-1: Product: syz [ 70.426773][ T8] usb 1-1: Manufacturer: syz [ 70.427938][ T8] usb 1-1: SerialNumber: syz [ 70.430541][ T8] usb 1-1: config 0 descriptor?? [ 70.451826][ T6975] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 70.483456][ T8] ------------[ cut here ]------------ [ 70.484913][ T8] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 70.486908][ T8] WARNING: CPU: 0 PID: 8 at drivers/usb/core/urb.c:504 usb_submit_urb+0xa00/0x1434 [ 70.489269][ T8] Modules linked in: [ 70.490289][ T8] CPU: 0 PID: 8 Comm: kworker/0:1 Tainted: G W 6.9.0-rc7-syzkaller-00072-gc4d6737dc9da #0 [ 70.493280][ T8] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 70.495976][ T8] Workqueue: usb_hub_wq hub_event [ 70.497342][ T8] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 70.499465][ T8] pc : usb_submit_urb+0xa00/0x1434 [ 70.500787][ T8] lr : usb_submit_urb+0xa00/0x1434 [ 70.502126][ T8] sp : ffff800093c167a0 [ 70.503254][ T8] x29: ffff800093c167e0 x28: ffff0000d4d6f000 x27: 0000000000000001 [ 70.505432][ T8] x26: ffff80008c6b2688 x25: ffff0000c2653600 x24: ffff0000d396d150 [ 70.507513][ T8] x23: ffff80008c6b91a0 x22: dfff800000000000 x21: 0000000000000002 [ 70.509702][ T8] x20: 0000000000000c00 x19: ffff0000d396d100 x18: 0000000000000008 [ 70.511907][ T8] x17: 0000000000000000 x16: ffff80008ae89e3c x15: 0000000000000001 [ 70.514034][ T8] x14: 1fffe000367b8e02 x13: 0000000000000000 x12: 0000000000000000 [ 70.516134][ T8] x11: 0000000000000002 x10: 0000000000ff0100 x9 : c677b9ebf2076600 [ 70.518285][ T8] x8 : c677b9ebf2076600 x7 : 0000000000000001 x6 : 0000000000000001 [ 70.520408][ T8] x5 : ffff800093c15f18 x4 : ffff80008ef85080 x3 : ffff8000805e61b0 [ 70.522565][ T8] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000 [ 70.524674][ T8] Call trace: [ 70.525526][ T8] usb_submit_urb+0xa00/0x1434 [ 70.526760][ T8] usb_start_wait_urb+0xec/0x414 [ 70.528084][ T8] usb_bulk_msg+0x2ec/0x3ec [ 70.529351][ T8] amradio_set_mute+0x1d4/0x428 [ 70.530659][ T8] usb_amradio_probe+0x388/0x6f8 [ 70.532020][ T8] usb_probe_interface+0x57c/0xa24 [ 70.533395][ T8] really_probe+0x394/0x904 [ 70.534543][ T8] __driver_probe_device+0x194/0x374 [ 70.535907][ T8] driver_probe_device+0x78/0x330 [ 70.537265][ T8] __device_attach_driver+0x2a8/0x4f4 [ 70.538707][ T8] bus_for_each_drv+0x228/0x2bc [ 70.539994][ T8] __device_attach+0x2b4/0x434 [ 70.541271][ T8] device_initial_probe+0x24/0x34 [ 70.542611][ T8] bus_probe_device+0x178/0x240 [ 70.543906][ T8] device_add+0x768/0xaac [ 70.545098][ T8] usb_set_configuration+0x15cc/0x1b38 [ 70.546613][ T8] usb_generic_driver_probe+0x8c/0x148 [ 70.548049][ T8] usb_probe_device+0x1a4/0x348 [ 70.549355][ T8] really_probe+0x394/0x904 [ 70.550534][ T8] __driver_probe_device+0x194/0x374 [ 70.551917][ T8] driver_probe_device+0x78/0x330 [ 70.553273][ T8] __device_attach_driver+0x2a8/0x4f4 [ 70.554928][ T8] bus_for_each_drv+0x228/0x2bc [ 70.556255][ T8] __device_attach+0x2b4/0x434 [ 70.557507][ T8] device_initial_probe+0x24/0x34 [ 70.558793][ T8] bus_probe_device+0x178/0x240 [ 70.560089][ T8] device_add+0x768/0xaac [ 70.561226][ T8] usb_new_device+0x908/0x149c [ 70.562477][ T8] hub_event+0x2454/0x4280 [ 70.563665][ T8] process_one_work+0x7b8/0x15d4 [ 70.564958][ T8] worker_thread+0x938/0xef4 [ 70.566163][ T8] kthread+0x288/0x310 [ 70.567249][ T8] ret_from_fork+0x10/0x20 [ 70.568416][ T8] irq event stamp: 34894 [ 70.569553][ T8] hardirqs last enabled at (34893): [] console_unlock+0x17c/0x3d4 [ 70.572109][ T8] hardirqs last disabled at (34894): [] el1_dbg+0x24/0x80 [ 70.574363][ T8] softirqs last enabled at (34068): [] handle_softirqs+0xa60/0xc34 [ 70.576894][ T8] softirqs last disabled at (34055): [] __do_softirq+0x14/0x20 [ 70.579394][ T8] ---[ end trace 0000000000000000 ]--- [ 70.601408][ T8] (null): radio-mr800 - initialization failed [ 70.603109][ T8] radio-mr800 1-1:0.219: probe with driver radio-mr800 failed with error -71 [ 70.605463][ T8] usbhid 1-1:0.219: couldn't find an input interrupt endpoint [ 70.682159][ T8] usb 1-1: USB disconnect, device number 6 [ 71.461467][ T24] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 71.701425][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 71.821433][ T24] usb 1-1: config 0 has an invalid interface number: 219 but max is 0 [ 71.823654][ T24] usb 1-1: config 0 has no interface number 0 [ 71.825294][ T24] usb 1-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 71.827824][ T24] usb 1-1: config 0 interface 219 altsetting 0 has an invalid endpoint with address 0x12, skipping [ 71.830482][ T24] usb 1-1: config 0 interface 219 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 71.833404][ T24] usb 1-1: config 0 interface 219 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1023 [ 71.836039][ T24] usb 1-1: config 0 interface 219 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 71.838672][ T24] usb 1-1: config 0 interface 219 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1023 [ 71.841242][ T24] usb 1-1: config 0 interface 219 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 71.844182][ T24] usb 1-1: config 0 interface 219 altsetting 0 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 71.847003][ T24] usb 1-1: config 0 interface 219 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 72.001559][ T24] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=36.57 [ 72.004126][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.006170][ T24] usb 1-1: Product: syz [ 72.007240][ T24] usb 1-1: Manufacturer: syz [ 72.008423][ T24] usb 1-1: SerialNumber: syz [ 72.010940][ T24] usb 1-1: config 0 descriptor?? [ 72.031592][ T6977] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 72.053366][ T24] ------------[ cut here ]------------ [ 72.054850][ T24] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 72.056885][ T24] WARNING: CPU: 1 PID: 24 at drivers/usb/core/urb.c:504 usb_submit_urb+0xa00/0x1434 [ 72.059310][ T24] Modules linked in: [ 72.060288][ T24] CPU: 1 PID: 24 Comm: kworker/1:0 Tainted: G W 6.9.0-rc7-syzkaller-00072-gc4d6737dc9da #0 [ 72.063264][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 72.065994][ T24] Workqueue: usb_hub_wq hub_event [ 72.067422][ T24] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 72.069521][ T24] pc : usb_submit_urb+0xa00/0x1434 [ 72.070858][ T24] lr : usb_submit_urb+0xa00/0x1434 [ 72.072289][ T24] sp : ffff800093d267a0 [ 72.073360][ T24] x29: ffff800093d267e0 x28: ffff0000d69b4000 x27: 0000000000000001 [ 72.075559][ T24] x26: ffff80008c6b2688 x25: ffff0000c264a880 x24: ffff0000d387fc50 [ 72.077759][ T24] x23: ffff80008c6b91a0 x22: dfff800000000000 x21: 0000000000000002 [ 72.079974][ T24] x20: 0000000000000c00 x19: ffff0000d387fc00 x18: 0000000000000008 [ 72.082127][ T24] x17: 0000000000000000 x16: ffff80008ae89e3c x15: 0000000000000001 [ 72.084271][ T24] x14: 1fffe000367bd602 x13: 0000000000000000 x12: 0000000000000000 [ 72.086459][ T24] x11: 0000000000000002 x10: 0000000000ff0100 x9 : 3e3ebb5fd9f21600 [ 72.088572][ T24] x8 : 3e3ebb5fd9f21600 x7 : 0000000000000001 x6 : 0000000000000001 [ 72.090738][ T24] x5 : ffff800093d25f18 x4 : ffff80008ef85080 x3 : ffff8000805e61b0 [ 72.092922][ T24] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000 [ 72.095052][ T24] Call trace: [ 72.095944][ T24] usb_submit_urb+0xa00/0x1434 [ 72.097230][ T24] usb_start_wait_urb+0xec/0x414 [ 72.098608][ T24] usb_bulk_msg+0x2ec/0x3ec [ 72.099791][ T24] amradio_set_mute+0x1d4/0x428 [ 72.101120][ T24] usb_amradio_probe+0x388/0x6f8 [ 72.102438][ T24] usb_probe_interface+0x57c/0xa24 [ 72.103747][ T24] really_probe+0x394/0x904 [ 72.104922][ T24] __driver_probe_device+0x194/0x374 [ 72.106321][ T24] driver_probe_device+0x78/0x330 [ 72.107699][ T24] __device_attach_driver+0x2a8/0x4f4 [ 72.109091][ T24] bus_for_each_drv+0x228/0x2bc [ 72.110575][ T24] __device_attach+0x2b4/0x434 [ 72.111848][ T24] device_initial_probe+0x24/0x34 [ 72.113230][ T24] bus_probe_device+0x178/0x240 [ 72.114524][ T24] device_add+0x768/0xaac [ 72.115711][ T24] usb_set_configuration+0x15cc/0x1b38 [ 72.117240][ T24] usb_generic_driver_probe+0x8c/0x148 [ 72.118724][ T24] usb_probe_device+0x1a4/0x348 [ 72.119979][ T24] really_probe+0x394/0x904 [ 72.121214][ T24] __driver_probe_device+0x194/0x374 [ 72.122634][ T24] driver_probe_device+0x78/0x330 [ 72.123933][ T24] __device_attach_driver+0x2a8/0x4f4 [ 72.125435][ T24] bus_for_each_drv+0x228/0x2bc [ 72.126729][ T24] __device_attach+0x2b4/0x434 [ 72.127991][ T24] device_initial_probe+0x24/0x34 [ 72.129327][ T24] bus_probe_device+0x178/0x240 [ 72.130603][ T24] device_add+0x768/0xaac [ 72.131737][ T24] usb_new_device+0x908/0x149c [ 72.133054][ T24] hub_event+0x2454/0x4280 [ 72.134234][ T24] process_one_work+0x7b8/0x15d4 [ 72.135592][ T24] worker_thread+0x938/0xef4 [ 72.136832][ T24] kthread+0x288/0x310 [ 72.137904][ T24] ret_from_fork+0x10/0x20 [ 72.139091][ T24] irq event stamp: 195144 [ 72.140204][ T24] hardirqs last enabled at (195143): [] console_unlock+0x17c/0x3d4 [ 72.142794][ T24] hardirqs last disabled at (195144): [] el1_dbg+0x24/0x80 [ 72.145268][ T24] softirqs last enabled at (194302): [] handle_softirqs+0xa60/0xc34 [ 72.147880][ T24] softirqs last disabled at (194291): [] __do_softirq+0x14/0x20 [ 72.150362][ T24] ---[ end trace 0000000000000000 ]--- [ 72.172404][ T24] (null): radio-mr800 - initialization failed [ 72.174104][ T24] radio-mr800 1-1:0.219: probe with driver radio-mr800 failed with error -71 [ 72.176570][ T24] usbhid 1-1:0.219: couldn't find an input interrupt endpoint [ 72.254901][ T8] usb 1-1: USB disconnect, device number 7 [ 73.031766][ T24] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 73.271396][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 73.402316][ T24] usb 1-1: config 0 has an invalid interface number: 219 but max is 0 [ 73.404470][ T24] usb 1-1: config 0 has no interface number 0 [ 73.406011][ T24] usb 1-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 73.408611][ T24] usb 1-1: config 0 interface 219 altsetting 0 has an invalid endpoint with address 0x12, skipping [ 73.411435][ T24] usb 1-1: config 0 interface 219 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 73.414260][ T24] usb 1-1: config 0 interface 219 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1023 [ 73.416933][ T24] usb 1-1: config 0 interface 219 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 73.419767][ T24] usb 1-1: config 0 interface 219 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1023 [ 73.422539][ T24] usb 1-1: config 0 interface 219 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 73.425392][ T24] usb 1-1: config 0 interface 219 altsetting 0 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 73.428391][ T24] usb 1-1: config 0 interface 219 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 73.581874][ T24] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=36.57 [ 73.584216][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.586242][ T24] usb 1-1: Product: syz [ 73.587272][ T24] usb 1-1: Manufacturer: syz [ 73.588401][ T24] usb 1-1: SerialNumber: syz [ 73.590964][ T24] usb 1-1: config 0 descriptor?? [ 73.611606][ T6980] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 73.632989][ T24] ------------[ cut here ]------------ [ 73.634397][ T24] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 73.636379][ T24] WARNING: CPU: 1 PID: 24 at drivers/usb/core/urb.c:504 usb_submit_urb+0xa00/0x1434 [ 73.638770][ T24] Modules linked in: [ 73.639732][ T24] CPU: 1 PID: 24 Comm: kworker/1:0 Tainted: G W 6.9.0-rc7-syzkaller-00072-gc4d6737dc9da #0 [ 73.642691][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 73.645338][ T24] Workqueue: usb_hub_wq hub_event [ 73.646728][ T24] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 73.648825][ T24] pc : usb_submit_urb+0xa00/0x1434 [ 73.650197][ T24] lr : usb_submit_urb+0xa00/0x1434 [ 73.651601][ T24] sp : ffff800093d267a0 [ 73.652711][ T24] x29: ffff800093d267e0 x28: ffff0000e2d2d000 x27: 0000000000000001 [ 73.654877][ T24] x26: ffff80008c6b2688 x25: ffff0000c7fd1d00 x24: ffff0000d3890950 [ 73.657040][ T24] x23: ffff80008c6b91a0 x22: dfff800000000000 x21: 0000000000000002 [ 73.659197][ T24] x20: 0000000000000c00 x19: ffff0000d3890900 x18: 0000000000000008 [ 73.661260][ T24] x17: 0000000000000000 x16: ffff80008ae89e3c x15: 0000000000000001 [ 73.663364][ T24] x14: 1fffe000367bd602 x13: 0000000000000000 x12: 0000000000000000 [ 73.665584][ T24] x11: 0000000000000002 x10: 0000000000ff0100 x9 : 3e3ebb5fd9f21600 [ 73.667780][ T24] x8 : 3e3ebb5fd9f21600 x7 : 0000000000000001 x6 : 0000000000000001 [ 73.670002][ T24] x5 : ffff800093d25f18 x4 : ffff80008ef85080 x3 : ffff8000805e61b0 [ 73.672152][ T24] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000 [ 73.674289][ T24] Call trace: [ 73.675146][ T24] usb_submit_urb+0xa00/0x1434 [ 73.676389][ T24] usb_start_wait_urb+0xec/0x414 [ 73.677748][ T24] usb_bulk_msg+0x2ec/0x3ec [ 73.678997][ T24] amradio_set_mute+0x1d4/0x428 [ 73.680235][ T24] usb_amradio_probe+0x388/0x6f8 [ 73.681595][ T24] usb_probe_interface+0x57c/0xa24 [ 73.682962][ T24] really_probe+0x394/0x904 [ 73.684175][ T24] __driver_probe_device+0x194/0x374 [ 73.685545][ T24] driver_probe_device+0x78/0x330 [ 73.686886][ T24] __device_attach_driver+0x2a8/0x4f4 [ 73.688402][ T24] bus_for_each_drv+0x228/0x2bc [ 73.689762][ T24] __device_attach+0x2b4/0x434 [ 73.691017][ T24] device_initial_probe+0x24/0x34 [ 73.692372][ T24] bus_probe_device+0x178/0x240 [ 73.693662][ T24] device_add+0x768/0xaac [ 73.694795][ T24] usb_set_configuration+0x15cc/0x1b38 [ 73.696252][ T24] usb_generic_driver_probe+0x8c/0x148 [ 73.697696][ T24] usb_probe_device+0x1a4/0x348 [ 73.698984][ T24] really_probe+0x394/0x904 [ 73.700216][ T24] __driver_probe_device+0x194/0x374 [ 73.701696][ T24] driver_probe_device+0x78/0x330 [ 73.703002][ T24] __device_attach_driver+0x2a8/0x4f4 [ 73.704452][ T24] bus_for_each_drv+0x228/0x2bc [ 73.705777][ T24] __device_attach+0x2b4/0x434 [ 73.706998][ T24] device_initial_probe+0x24/0x34 [ 73.708348][ T24] bus_probe_device+0x178/0x240 [ 73.709663][ T24] device_add+0x768/0xaac [ 73.710802][ T24] usb_new_device+0x908/0x149c [ 73.712045][ T24] hub_event+0x2454/0x4280 [ 73.713226][ T24] process_one_work+0x7b8/0x15d4 [ 73.714490][ T24] worker_thread+0x938/0xef4 [ 73.715655][ T24] kthread+0x288/0x310 [ 73.716764][ T24] ret_from_fork+0x10/0x20 [ 73.717984][ T24] irq event stamp: 198866 [ 73.719161][ T24] hardirqs last enabled at (198865): [] console_unlock+0x17c/0x3d4 [ 73.721747][ T24] hardirqs last disabled at (198866): [] el1_dbg+0x24/0x80 [ 73.724103][ T24] softirqs last enabled at (198046): [] handle_softirqs+0xa60/0xc34 [ 73.726644][ T24] softirqs last disabled at (198033): [] __do_softirq+0x14/0x20 [ 73.729073][ T24] ---[ end trace 0000000000000000 ]--- [ 73.741514][ T24] (null): radio-mr800 - initialization failed [ 73.743167][ T24] radio-mr800 1-1:0.219: probe with driver radio-mr800 failed with error -71 [ 73.745559][ T24] usbhid 1-1:0.219: couldn't find an input interrupt endpoint [ 73.832602][ T6257] usb 1-1: USB disconnect, device number 8