Warning: Permanently added '10.128.10.17' (ED25519) to the list of known hosts. 2023/10/17 19:41:26 ignoring optional flag "sandboxArg"="0" 2023/10/17 19:41:26 parsed 1 programs 2023/10/17 19:41:26 executed programs: 0 [ 39.215497][ T45] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 39.217267][ T45] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 39.218985][ T45] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 39.220926][ T3752] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 39.222829][ T3752] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 39.224628][ T3752] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 39.278651][ T3946] chnl_net:caif_netlink_parms(): no params data found [ 39.286959][ T3946] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.288720][ T3946] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.290584][ T3946] device bridge_slave_0 entered promiscuous mode [ 39.293201][ T3946] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.294969][ T3946] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.296876][ T3946] device bridge_slave_1 entered promiscuous mode [ 39.301065][ T3946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.303865][ T3946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.326250][ T3946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.327892][ T3946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.334412][ T3946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.337521][ T3946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.339196][ T3946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.345826][ T3946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.378196][ T3946] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.379946][ T3946] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.381699][ T3946] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.383499][ T3946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.506256][ T3946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.508754][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.510644][ T23] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.512983][ T23] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.515110][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 39.536518][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.538572][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.540281][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.542472][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.544553][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.546267][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.548292][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.550239][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.609425][ T3946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.611266][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 39.613200][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 39.638483][ T3946] device veth0_vlan entered promiscuous mode [ 39.640672][ T3946] device veth1_vlan entered promiscuous mode [ 39.642769][ T99] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.644893][ T99] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.646879][ T99] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 39.648745][ T99] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 39.650580][ T99] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 39.655031][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 39.656990][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.659387][ T3946] device veth0_macvtap entered promiscuous mode [ 39.686439][ T3946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.688810][ T3946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.690658][ T99] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.692817][ T99] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 39.694912][ T99] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 40.022066][ T99] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 40.262206][ T99] usb 1-1: Using ep0 maxpacket: 32 [ 40.382311][ T99] usb 1-1: config 64 has an invalid interface number: 245 but max is 2 [ 40.384344][ T99] usb 1-1: config 64 has an invalid interface number: 155 but max is 2 [ 40.386356][ T99] usb 1-1: config 64 contains an unexpected descriptor of type 0x2, skipping [ 40.388439][ T99] usb 1-1: config 64 contains an unexpected descriptor of type 0x1, skipping [ 40.390478][ T99] usb 1-1: config 64 has an invalid interface number: 243 but max is 2 [ 40.392542][ T99] usb 1-1: config 64 has no interface number 0 [ 40.394042][ T99] usb 1-1: config 64 has no interface number 1 [ 40.395583][ T99] usb 1-1: config 64 has no interface number 2 [ 40.397095][ T99] usb 1-1: config 64 interface 245 altsetting 7 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 40.399796][ T99] usb 1-1: config 64 interface 245 altsetting 7 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 40.402777][ T99] usb 1-1: config 64 interface 245 altsetting 7 has an invalid endpoint descriptor of length 2, skipping [ 40.405392][ T99] usb 1-1: config 64 interface 245 altsetting 7 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 40.408636][ T99] usb 1-1: config 64 interface 155 altsetting 1 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 40.411280][ T99] usb 1-1: config 64 interface 155 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 40.413975][ T99] usb 1-1: config 64 interface 155 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 40.416506][ T99] usb 1-1: config 64 interface 155 altsetting 1 endpoint 0xA has invalid maxpacket 72, setting to 64 [ 40.419193][ T99] usb 1-1: config 64 interface 155 altsetting 1 endpoint 0x81 has an invalid bInterval 139, changing to 11 [ 40.421816][ T99] usb 1-1: config 64 interface 155 altsetting 1 endpoint 0x81 has invalid maxpacket 18251, setting to 1024 [ 40.424966][ T99] usb 1-1: config 64 interface 155 altsetting 1 has a duplicate endpoint with address 0xA, skipping [ 40.427733][ T99] usb 1-1: config 64 interface 155 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 40.430308][ T99] usb 1-1: config 64 interface 155 altsetting 1 has 9 endpoint descriptors, different from the interface descriptor's value: 8 [ 40.433614][ T99] usb 1-1: config 64 interface 243 altsetting 31 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 40.436236][ T99] usb 1-1: config 64 interface 245 has no altsetting 0 [ 40.437868][ T99] usb 1-1: config 64 interface 155 has no altsetting 0 [ 40.439538][ T99] usb 1-1: config 64 interface 243 has no altsetting 0 [ 40.602117][ T99] usb 1-1: New USB device found, idVendor=083a, idProduct=4506, bcdDevice=6d.7d [ 40.604331][ T99] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.606296][ T99] usb 1-1: Product: syz [ 40.607312][ T99] usb 1-1: Manufacturer: syz [ 40.608416][ T99] usb 1-1: SerialNumber: syz [ 40.922281][ T99] ------------[ cut here ]------------ [ 40.923657][ T99] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 40.925338][ T99] WARNING: CPU: 0 PID: 99 at drivers/usb/core/urb.c:505 usb_submit_urb+0x594/0x9b4 [ 40.927543][ T99] Modules linked in: [ 40.928484][ T99] CPU: 0 PID: 99 Comm: kworker/0:2 Not tainted 6.1.58-syzkaller #0 [ 40.930402][ T99] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 40.932940][ T99] Workqueue: usb_hub_wq hub_event [ 40.934184][ T99] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 40.936160][ T99] pc : usb_submit_urb+0x594/0x9b4 [ 40.937420][ T99] lr : usb_submit_urb+0x594/0x9b4 [ 40.938626][ T99] sp : ffff8000127a3430 [ 40.939665][ T99] x29: ffff8000127a3440 x28: ffff0000c79df000 x27: ffff0000d180bc5c [ 40.941663][ T99] x26: ffff80000d24b9f0 x25: ffff0000c79df0a8 x24: ffff0000ca219b00 [ 40.943674][ T99] x23: ffff80000d2767c8 x22: 0000000000000400 x21: 0000000000000003 [ 40.945656][ T99] x20: 0000000000000a20 x19: ffff0000d180bc00 x18: 0000000000000000 [ 40.947668][ T99] x17: 0000000000000000 x16: 0000000000000002 x15: 0000000000000000 [ 40.949670][ T99] x14: 0000000000000000 x13: 205d393954202020 x12: ffff80000eaf1000 [ 40.951686][ T99] x11: ff808000080e0e64 x10: 0000000000000000 x9 : c02f36c67736b800 [ 40.953666][ T99] x8 : c02f36c67736b800 x7 : 0000000000000000 x6 : ffff80000bff223c [ 40.955546][ T99] x5 : 0000000000000000 x4 : 0000000000000080 x3 : 0000000000000000 [ 40.957559][ T99] x2 : 0000000000000000 x1 : 0000000100000000 x0 : 0000000000000000 [ 40.959564][ T99] Call trace: [ 40.960337][ T99] usb_submit_urb+0x594/0x9b4 [ 40.961474][ T99] ar5523_submit_rx_cmd+0x74/0xf4 [ 40.962673][ T99] ar5523_probe+0x41c/0xbb8 [ 40.963740][ T99] usb_probe_interface+0x2fc/0x4ac [ 40.965036][ T99] really_probe+0x218/0x61c [ 40.966146][ T99] __driver_probe_device+0xe8/0x1fc [ 40.967387][ T99] driver_probe_device+0x54/0x2f4 [ 40.968611][ T99] __device_attach_driver+0x19c/0x2e4 [ 40.969926][ T99] bus_for_each_drv+0xb4/0x124 [ 40.971091][ T99] __device_attach+0x148/0x270 [ 40.972287][ T99] device_initial_probe+0x24/0x34 [ 40.973516][ T99] bus_probe_device+0x5c/0xf0 [ 40.974631][ T99] device_add+0x754/0x968 [ 40.975666][ T99] usb_set_configuration+0xb0c/0xd18 [ 40.976938][ T99] usb_generic_driver_probe+0x5c/0xe8 [ 40.978202][ T99] usb_probe_device+0xd0/0x180 [ 40.979439][ T99] really_probe+0x218/0x61c [ 40.980561][ T99] __driver_probe_device+0xe8/0x1fc [ 40.981908][ T99] driver_probe_device+0x54/0x2f4 [ 40.983126][ T99] __device_attach_driver+0x19c/0x2e4 [ 40.984417][ T99] bus_for_each_drv+0xb4/0x124 [ 40.985634][ T99] __device_attach+0x148/0x270 [ 40.986811][ T99] device_initial_probe+0x24/0x34 [ 40.988035][ T99] bus_probe_device+0x5c/0xf0 [ 40.989272][ T99] device_add+0x754/0x968 [ 40.990324][ T99] usb_new_device+0x428/0x8a8 [ 40.991519][ T99] hub_event+0x1728/0x2580 [ 40.992625][ T99] process_one_work+0x2d4/0x4e0 [ 40.993812][ T99] worker_thread+0x340/0x5f8 [ 40.994903][ T99] kthread+0x120/0x14c [ 40.995934][ T99] ret_from_fork+0x10/0x20 [ 40.997065][ T99] ---[ end trace 0000000000000000 ]--- [ 40.998543][ T99] usb 1-1: error -22 when submitting rx urb [ 41.000054][ T99] usb 1-1: Failed to submit rx cmd [ 41.001881][ T99] ar5523: probe of 1-1:64.245 failed with error -22 [ 41.004697][ T99] ------------[ cut here ]------------ [ 41.006004][ T99] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 41.007627][ T99] WARNING: CPU: 0 PID: 99 at drivers/usb/core/urb.c:505 usb_submit_urb+0x594/0x9b4 [ 41.009768][ T99] Modules linked in: [ 41.010636][ T99] CPU: 0 PID: 99 Comm: kworker/0:2 Tainted: G W 6.1.58-syzkaller #0 [ 41.012845][ T99] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 41.015242][ T99] Workqueue: usb_hub_wq hub_event [ 41.016465][ T99] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 41.018422][ T99] pc : usb_submit_urb+0x594/0x9b4 [ 41.019650][ T99] lr : usb_submit_urb+0x594/0x9b4 [ 41.020859][ T99] sp : ffff8000127a3430 [ 41.021824][ T99] x29: ffff8000127a3440 x28: ffff0000c79df000 x27: ffff0000c5532e5c [ 41.023813][ T99] x26: ffff80000d24b9f0 x25: ffff0000c79df0a8 x24: ffff0000ca219b00 [ 41.025808][ T99] x23: ffff80000d2767c8 x22: 0000000000000400 x21: 0000000000000003 [ 41.027837][ T99] x20: 0000000000000a20 x19: ffff0000c5532e00 x18: ffff80000c02d2c4 [ 41.029744][ T99] x17: 0000000000000000 x16: 0000000000000002 x15: 0000000000000000 [ 41.031715][ T99] x14: 0000000000000000 x13: 205d393954202020 x12: ffff80000eaf1000 [ 41.033642][ T99] x11: ff808000080e0e64 x10: 0000000000000000 x9 : c02f36c67736b800 [ 41.035598][ T99] x8 : c02f36c67736b800 x7 : 0000000000000000 x6 : ffff80000bff223c [ 41.037532][ T99] x5 : 0000000000000000 x4 : 0000000000000080 x3 : 0000000000000000 [ 41.039535][ T99] x2 : 0000000000000000 x1 : 0000000100000000 x0 : 0000000000000000 [ 41.041536][ T99] Call trace: [ 41.042290][ T99] usb_submit_urb+0x594/0x9b4 [ 41.043451][ T99] ar5523_submit_rx_cmd+0x74/0xf4 [ 41.044689][ T99] ar5523_probe+0x41c/0xbb8 [ 41.045853][ T99] usb_probe_interface+0x2fc/0x4ac [ 41.047189][ T99] really_probe+0x218/0x61c [ 41.048301][ T99] __driver_probe_device+0xe8/0x1fc [ 41.049608][ T99] driver_probe_device+0x54/0x2f4 [ 41.050873][ T99] __device_attach_driver+0x19c/0x2e4 [ 41.052250][ T99] bus_for_each_drv+0xb4/0x124 [ 41.053411][ T99] __device_attach+0x148/0x270 [ 41.054590][ T99] device_initial_probe+0x24/0x34 [ 41.055863][ T99] bus_probe_device+0x5c/0xf0 [ 41.057014][ T99] device_add+0x754/0x968 [ 41.058066][ T99] usb_set_configuration+0xb0c/0xd18 [ 41.059454][ T99] usb_generic_driver_probe+0x5c/0xe8 [ 41.060765][ T99] usb_probe_device+0xd0/0x180 [ 41.061944][ T99] really_probe+0x218/0x61c [ 41.062972][ T99] __driver_probe_device+0xe8/0x1fc [ 41.064232][ T99] driver_probe_device+0x54/0x2f4 [ 41.065525][ T99] __device_attach_driver+0x19c/0x2e4 [ 41.066856][ T99] bus_for_each_drv+0xb4/0x124 [ 41.068040][ T99] __device_attach+0x148/0x270 [ 41.069177][ T99] device_initial_probe+0x24/0x34 [ 41.070423][ T99] bus_probe_device+0x5c/0xf0 [ 41.071653][ T99] device_add+0x754/0x968 [ 41.072739][ T99] usb_new_device+0x428/0x8a8 [ 41.073929][ T99] hub_event+0x1728/0x2580 [ 41.075077][ T99] process_one_work+0x2d4/0x4e0 [ 41.076393][ T99] worker_thread+0x340/0x5f8 [ 41.077489][ T99] kthread+0x120/0x14c [ 41.078493][ T99] ret_from_fork+0x10/0x20 [ 41.079537][ T99] ---[ end trace 0000000000000000 ]--- [ 41.080897][ T99] usb 1-1: error -22 when submitting rx urb [ 41.082330][ T99] usb 1-1: Failed to submit rx cmd [ 41.083839][ T99] ar5523: probe of 1-1:64.155 failed with error -22 [ 41.132173][ T99] ------------[ cut here ]------------ [ 41.133629][ T99] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 41.135271][ T99] WARNING: CPU: 0 PID: 99 at drivers/usb/core/urb.c:505 usb_submit_urb+0x594/0x9b4 [ 41.137441][ T99] Modules linked in: [ 41.138318][ T99] CPU: 0 PID: 99 Comm: kworker/0:2 Tainted: G W 6.1.58-syzkaller #0 [ 41.140596][ T99] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 41.143095][ T99] Workqueue: usb_hub_wq hub_event [ 41.144323][ T99] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 41.146255][ T99] pc : usb_submit_urb+0x594/0x9b4 [ 41.147511][ T99] lr : usb_submit_urb+0x594/0x9b4 [ 41.148777][ T99] sp : ffff8000127a3430 [ 41.149766][ T99] x29: ffff8000127a3440 x28: ffff0000c79df000 x27: ffff0000d180b55c [ 41.151620][ T99] x26: ffff80000d24b9f0 x25: ffff0000c79df0a8 x24: ffff0000ca219b00 [ 41.153571][ T99] x23: ffff80000d2767c8 x22: 0000000000000400 x21: 0000000000000003 [ 41.155628][ T99] x20: 0000000000000a20 x19: ffff0000d180b500 x18: 0000000000000000 [ 41.157678][ T99] x17: 0000000000000000 x16: 0000000000000002 x15: 0000000000000000 [ 41.159620][ T99] x14: 0000000000000000 x13: 205d393954202020 x12: ffff80000eaf1000 [ 41.161566][ T99] x11: ff808000080e0e64 x10: 0000000000000000 x9 : c02f36c67736b800 [ 41.163610][ T99] x8 : c02f36c67736b800 x7 : 0000000000000000 x6 : ffff80000bff223c [ 41.165593][ T99] x5 : 0000000000000000 x4 : 0000000000000080 x3 : 0000000000000000 [ 41.167599][ T99] x2 : 0000000000000000 x1 : 0000000100000000 x0 : 0000000000000000 [ 41.169605][ T99] Call trace: [ 41.170444][ T99] usb_submit_urb+0x594/0x9b4 [ 41.171664][ T99] ar5523_submit_rx_cmd+0x74/0xf4 [ 41.172877][ T99] ar5523_probe+0x41c/0xbb8 [ 41.173956][ T99] usb_probe_interface+0x2fc/0x4ac [ 41.175255][ T99] really_probe+0x218/0x61c [ 41.176341][ T99] __driver_probe_device+0xe8/0x1fc [ 41.177654][ T99] driver_probe_device+0x54/0x2f4 [ 41.178867][ T99] __device_attach_driver+0x19c/0x2e4 [ 41.180194][ T99] bus_for_each_drv+0xb4/0x124 [ 41.181342][ T99] __device_attach+0x148/0x270 [ 41.182491][ T99] device_initial_probe+0x24/0x34 [ 41.183789][ T99] bus_probe_device+0x5c/0xf0 [ 41.184992][ T99] device_add+0x754/0x968 [ 41.186068][ T99] usb_set_configuration+0xb0c/0xd18 [ 41.187387][ T99] usb_generic_driver_probe+0x5c/0xe8 [ 41.188727][ T99] usb_probe_device+0xd0/0x180 [ 41.189893][ T99] really_probe+0x218/0x61c [ 41.190980][ T99] __driver_probe_device+0xe8/0x1fc [ 41.192205][ T99] driver_probe_device+0x54/0x2f4 [ 41.193392][ T99] __device_attach_driver+0x19c/0x2e4 [ 41.194668][ T99] bus_for_each_drv+0xb4/0x124 [ 41.195846][ T99] __device_attach+0x148/0x270 [ 41.197008][ T99] device_initial_probe+0x24/0x34 [ 41.198323][ T99] bus_probe_device+0x5c/0xf0 [ 41.199455][ T99] device_add+0x754/0x968 [ 41.200551][ T99] usb_new_device+0x428/0x8a8 [ 41.201717][ T99] hub_event+0x1728/0x2580 [ 41.202821][ T99] process_one_work+0x2d4/0x4e0 [ 41.203951][ T99] worker_thread+0x340/0x5f8 [ 41.205124][ T99] kthread+0x120/0x14c [ 41.206130][ T99] ret_from_fork+0x10/0x20 [ 41.207254][ T99] ---[ end trace 0000000000000000 ]--- [ 41.208705][ T99] usb 1-1: error -22 when submitting rx urb [ 41.210097][ T99] usb 1-1: Failed to submit rx cmd [ 41.212036][ T99] ar5523: probe of 1-1:64.243 failed with error -22 [ 41.214408][ T99] usb 1-1: USB disconnect, device number 2 [ 41.231961][ T3752] Bluetooth: hci0: command 0x0409 tx timeout [ 41.771938][ T99] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 42.021919][ T99] usb 1-1: Using ep0 maxpacket: 32 [ 42.151950][ T99] usb 1-1: config 64 has an invalid interface number: 245 but max is 2 [ 42.154123][ T99] usb 1-1: config 64 has an invalid interface number: 155 but max is 2 [ 42.156187][ T99] usb 1-1: config 64 contains an unexpected descriptor of type 0x2, skipping [ 42.158317][ T99] usb 1-1: config 64 contains an unexpected descriptor of type 0x1, skipping [ 42.160429][ T99] usb 1-1: config 64 has an invalid interface number: 243 but max is 2 [ 42.162440][ T99] usb 1-1: config 64 has no interface number 0 [ 42.163972][ T99] usb 1-1: config 64 has no interface number 1 [ 42.165477][ T99] usb 1-1: config 64 has no interface number 2 [ 42.167023][ T99] usb 1-1: config 64 interface 245 altsetting 7 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 42.169609][ T99] usb 1-1: config 64 interface 245 altsetting 7 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 42.172327][ T99] usb 1-1: config 64 interface 245 altsetting 7 has an invalid endpoint descriptor of length 2, skipping [ 42.175060][ T99] usb 1-1: config 64 interface 245 altsetting 7 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 42.178317][ T99] usb 1-1: config 64 interface 155 altsetting 1 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 42.180945][ T99] usb 1-1: config 64 interface 155 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 42.183698][ T99] usb 1-1: config 64 interface 155 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 42.186214][ T99] usb 1-1: config 64 interface 155 altsetting 1 endpoint 0xA has invalid maxpacket 72, setting to 64 [ 42.188903][ T99] usb 1-1: config 64 interface 155 altsetting 1 endpoint 0x81 has an invalid bInterval 139, changing to 11 [ 42.191644][ T99] usb 1-1: config 64 interface 155 altsetting 1 endpoint 0x81 has invalid maxpacket 18251, setting to 1024 [ 42.194464][ T99] usb 1-1: config 64 interface 155 altsetting 1 has a duplicate endpoint with address 0xA, skipping [ 42.197077][ T99] usb 1-1: config 64 interface 155 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 42.199726][ T99] usb 1-1: config 64 interface 155 altsetting 1 has 9 endpoint descriptors, different from the interface descriptor's value: 8 [ 42.202896][ T99] usb 1-1: config 64 interface 243 altsetting 31 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 42.205550][ T99] usb 1-1: config 64 interface 245 has no altsetting 0 [ 42.207277][ T99] usb 1-1: config 64 interface 155 has no altsetting 0 [ 42.208825][ T99] usb 1-1: config 64 interface 243 has no altsetting 0 [ 42.361937][ T99] usb 1-1: New USB device found, idVendor=083a, idProduct=4506, bcdDevice=6d.7d [ 42.364302][ T99] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.366297][ T99] usb 1-1: Product: syz [ 42.367208][ T99] usb 1-1: Manufacturer: syz [ 42.368344][ T99] usb 1-1: SerialNumber: syz [ 42.682400][ T99] ------------[ cut here ]------------ [ 42.683593][ T99] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 42.685225][ T99] WARNING: CPU: 0 PID: 99 at drivers/usb/core/urb.c:505 usb_submit_urb+0x594/0x9b4 [ 42.687528][ T99] Modules linked in: [ 42.688453][ T99] CPU: 0 PID: 99 Comm: kworker/0:2 Tainted: G W 6.1.58-syzkaller #0 [ 42.690778][ T99] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 42.693276][ T99] Workqueue: usb_hub_wq hub_event [ 42.694533][ T99] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 42.696534][ T99] pc : usb_submit_urb+0x594/0x9b4 [ 42.697745][ T99] lr : usb_submit_urb+0x594/0x9b4 [ 42.699014][ T99] sp : ffff8000127a3430 [ 42.700026][ T99] x29: ffff8000127a3440 x28: ffff0000d1909800 x27: ffff0000c5532c5c [ 42.701968][ T99] x26: ffff80000d24b9f0 x25: ffff0000d19098a8 x24: ffff0000c9bc9f00 [ 42.703996][ T99] x23: ffff80000d2767c8 x22: 0000000000000400 x21: 0000000000000003 [ 42.706063][ T99] x20: 0000000000000a20 x19: ffff0000c5532c00 x18: 0000000000000000 [ 42.708102][ T99] x17: 000000000002a2e2 x16: 0000000000000002 x15: 0000000000000000 [ 42.710110][ T99] x14: 0000000000000000 x13: 205d393954202020 x12: ffff80000eaf1000 [ 42.712042][ T99] x11: ff808000080e0e64 x10: 0000000000000000 x9 : c02f36c67736b800 [ 42.714010][ T99] x8 : c02f36c67736b800 x7 : 0000000000000000 x6 : ffff80000bff223c [ 42.715986][ T99] x5 : 0000000000000000 x4 : 0000000000000080 x3 : 0000000000000000 [ 42.717957][ T99] x2 : 0000000000000000 x1 : 0000000100000000 x0 : 0000000000000000 [ 42.719907][ T99] Call trace: [ 42.720683][ T99] usb_submit_urb+0x594/0x9b4 [ 42.721863][ T99] ar5523_submit_rx_cmd+0x74/0xf4 [ 42.723077][ T99] ar5523_probe+0x41c/0xbb8 [ 42.724221][ T99] usb_probe_interface+0x2fc/0x4ac [ 42.725497][ T99] really_probe+0x218/0x61c [ 42.726636][ T99] __driver_probe_device+0xe8/0x1fc [ 42.727917][ T99] driver_probe_device+0x54/0x2f4 [ 42.729152][ T99] __device_attach_driver+0x19c/0x2e4 [ 42.730433][ T99] bus_for_each_drv+0xb4/0x124 [ 42.731554][ T99] __device_attach+0x148/0x270 [ 42.732710][ T99] device_initial_probe+0x24/0x34 [ 42.733913][ T99] bus_probe_device+0x5c/0xf0 [ 42.735040][ T99] device_add+0x754/0x968 [ 42.736093][ T99] usb_set_configuration+0xb0c/0xd18 [ 42.737399][ T99] usb_generic_driver_probe+0x5c/0xe8 [ 42.738675][ T99] usb_probe_device+0xd0/0x180 [ 42.739869][ T99] really_probe+0x218/0x61c [ 42.740956][ T99] __driver_probe_device+0xe8/0x1fc [ 42.742276][ T99] driver_probe_device+0x54/0x2f4 [ 42.743508][ T99] __device_attach_driver+0x19c/0x2e4 [ 42.744912][ T99] bus_for_each_drv+0xb4/0x124 [ 42.746076][ T99] __device_attach+0x148/0x270 [ 42.747245][ T99] device_initial_probe+0x24/0x34 [ 42.748465][ T99] bus_probe_device+0x5c/0xf0 [ 42.749599][ T99] device_add+0x754/0x968 [ 42.750650][ T99] usb_new_device+0x428/0x8a8 [ 42.751931][ T99] hub_event+0x1728/0x2580 [ 42.753050][ T99] process_one_work+0x2d4/0x4e0 [ 42.754265][ T99] worker_thread+0x42c/0x5f8 [ 42.755394][ T99] kthread+0x120/0x14c [ 42.756413][ T99] ret_from_fork+0x10/0x20 [ 42.757555][ T99] ---[ end trace 0000000000000000 ]--- [ 42.758968][ T99] usb 1-1: error -22 when submitting rx urb [ 42.760333][ T99] usb 1-1: Failed to submit rx cmd [ 42.761701][ T99] ar5523: probe of 1-1:64.245 failed with error -22 [ 42.764702][ T99] ------------[ cut here ]------------ [ 42.766127][ T99] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 42.767762][ T99] WARNING: CPU: 0 PID: 99 at drivers/usb/core/urb.c:505 usb_submit_urb+0x594/0x9b4 [ 42.770056][ T99] Modules linked in: [ 42.770968][ T99] CPU: 0 PID: 99 Comm: kworker/0:2 Tainted: G W 6.1.58-syzkaller #0 [ 42.773236][ T99] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 42.775724][ T99] Workqueue: usb_hub_wq hub_event [ 42.776957][ T99] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 42.778922][ T99] pc : usb_submit_urb+0x594/0x9b4 [ 42.780186][ T99] lr : usb_submit_urb+0x594/0x9b4 [ 42.781499][ T99] sp : ffff8000127a3430 [ 42.782522][ T99] x29: ffff8000127a3440 x28: ffff0000d1909800 x27: ffff0000d180be5c [ 42.784586][ T99] x26: ffff80000d24b9f0 x25: ffff0000d19098a8 x24: ffff0000c9bc9f00 [ 42.786598][ T99] x23: ffff80000d2767c8 x22: 0000000000000400 x21: 0000000000000003 [ 42.788589][ T99] x20: 0000000000000a20 x19: ffff0000d180be00 x18: 0000000000000000 [ 42.790615][ T99] x17: ffff8001f13ef000 x16: 0000000000000002 x15: 0000000000000000 [ 42.792579][ T99] x14: 0000000000000000 x13: 205d393954202020 x12: ffff80000eaf1000 [ 42.794659][ T99] x11: ff808000080e0e64 x10: 0000000000000000 x9 : c02f36c67736b800 [ 42.796566][ T99] x8 : c02f36c67736b800 x7 : 0000000000000000 x6 : ffff80000bff223c [ 42.798567][ T99] x5 : 0000000000000000 x4 : 0000000000000080 x3 : 0000000000000000 [ 42.800574][ T99] x2 : 0000000000000000 x1 : 0000000100000000 x0 : 0000000000000000 [ 42.802578][ T99] Call trace: [ 42.803353][ T99] usb_submit_urb+0x594/0x9b4 [ 42.804486][ T99] ar5523_submit_rx_cmd+0x74/0xf4 [ 42.805760][ T99] ar5523_probe+0x41c/0xbb8 [ 42.806899][ T99] usb_probe_interface+0x2fc/0x4ac [ 42.808206][ T99] really_probe+0x218/0x61c [ 42.809308][ T99] __driver_probe_device+0xe8/0x1fc [ 42.810623][ T99] driver_probe_device+0x54/0x2f4 [ 42.811827][ T99] __device_attach_driver+0x19c/0x2e4 [ 42.813169][ T99] bus_for_each_drv+0xb4/0x124 [ 42.814319][ T99] __device_attach+0x148/0x270 [ 42.815492][ T99] device_initial_probe+0x24/0x34 [ 42.816740][ T99] bus_probe_device+0x5c/0xf0 [ 42.817914][ T99] device_add+0x754/0x968 [ 42.818990][ T99] usb_set_configuration+0xb0c/0xd18 [ 42.820260][ T99] usb_generic_driver_probe+0x5c/0xe8 [ 42.821660][ T99] usb_probe_device+0xd0/0x180 [ 42.822828][ T99] really_probe+0x218/0x61c [ 42.823937][ T99] __driver_probe_device+0xe8/0x1fc [ 42.825297][ T99] driver_probe_device+0x54/0x2f4 [ 42.826570][ T99] __device_attach_driver+0x19c/0x2e4 [ 42.827947][ T99] bus_for_each_drv+0xb4/0x124 [ 42.829157][ T99] __device_attach+0x148/0x270 [ 42.830330][ T99] device_initial_probe+0x24/0x34 [ 42.831567][ T99] bus_probe_device+0x5c/0xf0 [ 42.832695][ T99] device_add+0x754/0x968 [ 42.833747][ T99] usb_new_device+0x428/0x8a8 [ 42.834961][ T99] hub_event+0x1728/0x2580 [ 42.836031][ T99] process_one_work+0x2d4/0x4e0 [ 42.837237][ T99] worker_thread+0x42c/0x5f8 [ 42.838355][ T99] kthread+0x120/0x14c [ 42.839361][ T99] ret_from_fork+0x10/0x20 [ 42.840467][ T99] ---[ end trace 0000000000000000 ]--- [ 42.841840][ T99] usb 1-1: error -22 when submitting rx urb [ 42.843313][ T99] usb 1-1: Failed to submit rx cmd [ 42.844678][ T99] ar5523: probe of 1-1:64.155 failed with error -22 [ 42.882409][ T99] ------------[ cut here ]------------ [ 42.883798][ T99] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 42.885282][ T99] WARNING: CPU: 0 PID: 99 at drivers/usb/core/urb.c:505 usb_submit_urb+0x594/0x9b4 [ 42.887524][ T99] Modules linked in: [ 42.888472][ T99] CPU: 0 PID: 99 Comm: kworker/0:2 Tainted: G W 6.1.58-syzkaller #0 [ 42.890672][ T99] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 42.893175][ T99] Workqueue: usb_hub_wq hub_event [ 42.894415][ T99] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 42.896484][ T99] pc : usb_submit_urb+0x594/0x9b4 [ 42.897806][ T99] lr : usb_submit_urb+0x594/0x9b4 [ 42.899039][ T99] sp : ffff8000127a3430 [ 42.900055][ T99] x29: ffff8000127a3440 x28: ffff0000d1909800 x27: ffff0000c5532d5c [ 42.902038][ T99] x26: ffff80000d24b9f0 x25: ffff0000d19098a8 x24: ffff0000c9bc9f00 [ 42.904000][ T99] x23: ffff80000d2767c8 x22: 0000000000000400 x21: 0000000000000003 [ 42.905963][ T99] x20: 0000000000000a20 x19: ffff0000c5532d00 x18: 0000000000000000 [ 42.907969][ T99] x17: 0000000000000000 x16: 0000000000000002 x15: 0000000000000000 [ 42.909915][ T99] x14: 0000000000000000 x13: 205d393954202020 x12: ffff80000eaf1000 [ 42.911857][ T99] x11: ff808000080e0e64 x10: 0000000000000000 x9 : c02f36c67736b800 [ 42.913877][ T99] x8 : c02f36c67736b800 x7 : 0000000000000000 x6 : ffff80000bff223c [ 42.915925][ T99] x5 : 0000000000000000 x4 : 0000000000000080 x3 : 0000000000000000 [ 42.917962][ T99] x2 : 0000000000000000 x1 : 0000000100000000 x0 : 0000000000000000 [ 42.920012][ T99] Call trace: [ 42.920822][ T99] usb_submit_urb+0x594/0x9b4 [ 42.922031][ T99] ar5523_submit_rx_cmd+0x74/0xf4 [ 42.923272][ T99] ar5523_probe+0x41c/0xbb8 [ 42.924402][ T99] usb_probe_interface+0x2fc/0x4ac [ 42.925644][ T99] really_probe+0x218/0x61c [ 42.926801][ T99] __driver_probe_device+0xe8/0x1fc [ 42.928065][ T99] driver_probe_device+0x54/0x2f4 [ 42.929290][ T99] __device_attach_driver+0x19c/0x2e4 [ 42.930585][ T99] bus_for_each_drv+0xb4/0x124 [ 42.931735][ T99] __device_attach+0x148/0x270 [ 42.932888][ T99] device_initial_probe+0x24/0x34 [ 42.934123][ T99] bus_probe_device+0x5c/0xf0 [ 42.935248][ T99] device_add+0x754/0x968 [ 42.936342][ T99] usb_set_configuration+0xb0c/0xd18 [ 42.937625][ T99] usb_generic_driver_probe+0x5c/0xe8 [ 42.938942][ T99] usb_probe_device+0xd0/0x180 [ 42.940135][ T99] really_probe+0x218/0x61c [ 42.941197][ T99] __driver_probe_device+0xe8/0x1fc [ 42.942485][ T99] driver_probe_device+0x54/0x2f4 [ 42.943667][ T99] __device_attach_driver+0x19c/0x2e4 [ 42.945016][ T99] bus_for_each_drv+0xb4/0x124 [ 42.946167][ T99] __device_attach+0x148/0x270 [ 42.947320][ T99] device_initial_probe+0x24/0x34 [ 42.948598][ T99] bus_probe_device+0x5c/0xf0 [ 42.949738][ T99] device_add+0x754/0x968 [ 42.950902][ T99] usb_new_device+0x428/0x8a8 [ 42.952093][ T99] hub_event+0x1728/0x2580 [ 42.953230][ T99] process_one_work+0x2d4/0x4e0 [ 42.954450][ T99] worker_thread+0x42c/0x5f8 [ 42.955605][ T99] kthread+0x120/0x14c [ 42.956618][ T99] ret_from_fork+0x10/0x20 [ 42.957724][ T99] ---[ end trace 0000000000000000 ]--- [ 42.959142][ T99] usb 1-1: error -22 when submitting rx urb [ 42.960626][ T99] usb 1-1: Failed to submit rx cmd [ 42.962061][ T99] ar5523: probe of 1-1:64.243 failed with error -22 [ 42.964487][ T99] usb 1-1: USB disconnect, device number 3 [ 43.311916][ T3754] Bluetooth: hci0: command 0x041b tx timeout [ 43.461931][ T99] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 43.711909][ T99] usb 1-1: Using ep0 maxpacket: 32 [ 43.842004][ T99] usb 1-1: config 64 has an invalid interface number: 245 but max is 2 [ 43.844194][ T99] usb 1-1: config 64 has an invalid interface number: 155 but max is 2 [ 43.846332][ T99] usb 1-1: config 64 contains an unexpected descriptor of type 0x2, skipping [ 43.848437][ T99] usb 1-1: config 64 contains an unexpected descriptor of type 0x1, skipping [ 43.850599][ T99] usb 1-1: config 64 has an invalid interface number: 243 but max is 2 [ 43.852659][ T99] usb 1-1: config 64 has no interface number 0 [ 43.854089][ T99] usb 1-1: config 64 has no interface number 1 [ 43.855547][ T99] usb 1-1: config 64 has no interface number 2 [ 43.856985][ T99] usb 1-1: config 64 interface 245 altsetting 7 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 43.859484][ T99] usb 1-1: config 64 interface 245 altsetting 7 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 43.862169][ T99] usb 1-1: config 64 interface 245 altsetting 7 has an invalid endpoint descriptor of length 2, skipping [ 43.864968][ T99] usb 1-1: config 64 interface 245 altsetting 7 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 43.868410][ T99] usb 1-1: config 64 interface 155 altsetting 1 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 43.871167][ T99] usb 1-1: config 64 interface 155 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 43.873876][ T99] usb 1-1: config 64 interface 155 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 43.876384][ T99] usb 1-1: config 64 interface 155 altsetting 1 endpoint 0xA has invalid maxpacket 72, setting to 64 [ 43.879053][ T99] usb 1-1: config 64 interface 155 altsetting 1 endpoint 0x81 has an invalid bInterval 139, changing to 11 [ 43.881824][ T99] usb 1-1: config 64 interface 155 altsetting 1 endpoint 0x81 has invalid maxpacket 18251, setting to 1024 [ 43.884614][ T99] usb 1-1: config 64 interface 155 altsetting 1 has a duplicate endpoint with address 0xA, skipping [ 43.887227][ T99] usb 1-1: config 64 interface 155 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 43.889815][ T99] usb 1-1: config 64 interface 155 altsetting 1 has 9 endpoint descriptors, different from the interface descriptor's value: 8 [ 43.892986][ T99] usb 1-1: config 64 interface 243 altsetting 31 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 43.895746][ T99] usb 1-1: config 64 interface 245 has no altsetting 0 [ 43.897371][ T99] usb 1-1: config 64 interface 155 has no altsetting 0 [ 43.899011][ T99] usb 1-1: config 64 interface 243 has no altsetting 0 [ 44.071936][ T99] usb 1-1: New USB device found, idVendor=083a, idProduct=4506, bcdDevice=6d.7d [ 44.074405][ T99] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.076374][ T99] usb 1-1: Product: syz [ 44.077414][ T99] usb 1-1: Manufacturer: syz [ 44.078628][ T99] usb 1-1: SerialNumber: syz [ 44.402333][ T99] ------------[ cut here ]------------ [ 44.403813][ T99] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 44.405522][ T99] WARNING: CPU: 0 PID: 99 at drivers/usb/core/urb.c:505 usb_submit_urb+0x594/0x9b4 [ 44.407776][ T99] Modules linked in: [ 44.408735][ T99] CPU: 0 PID: 99 Comm: kworker/0:2 Tainted: G W 6.1.58-syzkaller #0 [ 44.411066][ T99] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 44.413634][ T99] Workqueue: usb_hub_wq hub_event [ 44.414892][ T99] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 44.416994][ T99] pc : usb_submit_urb+0x594/0x9b4 [ 44.418235][ T99] lr : usb_submit_urb+0x594/0x9b4 [ 44.419544][ T99] sp : ffff8000127a3430 [ 44.420523][ T99] x29: ffff8000127a3440 x28: ffff0000d1909800 x27: ffff0000c771285c [ 44.422592][ T99] x26: ffff80000d24b9f0 x25: ffff0000d19098a8 x24: ffff0000c9bc9f00 [ 44.424606][ T99] x23: ffff80000d2767c8 x22: 0000000000000400 x21: 0000000000000003 [ 44.426622][ T99] x20: 0000000000000a20 x19: ffff0000c7712800 x18: 0000000000000000 [ 44.428627][ T99] x17: 0000000000000000 x16: 0000000000000002 x15: 0000000000000000 [ 44.430698][ T99] x14: 0000000000000000 x13: 205d393954202020 x12: ffff80000eaf1000 [ 44.432735][ T99] x11: ff808000080e0e64 x10: 0000000000000000 x9 : c02f36c67736b800 [ 44.434768][ T99] x8 : c02f36c67736b800 x7 : 0000000000000000 x6 : ffff80000bff223c [ 44.436747][ T99] x5 : 0000000000000000 x4 : 0000000000000080 x3 : 0000000000000000 [ 44.438790][ T99] x2 : 0000000000000000 x1 : 0000000100000000 x0 : 0000000000000000 [ 44.440743][ T99] Call trace: [ 44.441573][ T99] usb_submit_urb+0x594/0x9b4 [ 44.442755][ T99] ar5523_submit_rx_cmd+0x74/0xf4 [ 44.444021][ T99] ar5523_probe+0x41c/0xbb8 [ 44.445172][ T99] usb_probe_interface+0x2fc/0x4ac [ 44.446484][ T99] really_probe+0x218/0x61c [ 44.447593][ T99] __driver_probe_device+0xe8/0x1fc [ 44.448900][ T99] driver_probe_device+0x54/0x2f4 [ 44.450182][ T99] __device_attach_driver+0x19c/0x2e4 [ 44.451545][ T99] bus_for_each_drv+0xb4/0x124 [ 44.452759][ T99] __device_attach+0x148/0x270 [ 44.453973][ T99] device_initial_probe+0x24/0x34 [ 44.455237][ T99] bus_probe_device+0x5c/0xf0 [ 44.456469][ T99] device_add+0x754/0x968 [ 44.457571][ T99] usb_set_configuration+0xb0c/0xd18 [ 44.458927][ T99] usb_generic_driver_probe+0x5c/0xe8 [ 44.460303][ T99] usb_probe_device+0xd0/0x180 [ 44.461553][ T99] really_probe+0x218/0x61c [ 44.462757][ T99] __driver_probe_device+0xe8/0x1fc [ 44.464220][ T99] driver_probe_device+0x54/0x2f4 [ 44.465543][ T99] __device_attach_driver+0x19c/0x2e4 [ 44.466953][ T99] bus_for_each_drv+0xb4/0x124 [ 44.468181][ T99] __device_attach+0x148/0x270 [ 44.469390][ T99] device_initial_probe+0x24/0x34 [ 44.470673][ T99] bus_probe_device+0x5c/0xf0 [ 44.471856][ T99] device_add+0x754/0x968 [ 44.472941][ T99] usb_new_device+0x428/0x8a8 [ 44.474134][ T99] hub_event+0x1728/0x2580 [ 44.475300][ T99] process_one_work+0x2d4/0x4e0 [ 44.476564][ T99] worker_thread+0x42c/0x5f8 [ 44.477705][ T99] kthread+0x120/0x14c [ 44.478776][ T99] ret_from_fork+0x10/0x20 [ 44.479886][ T99] ---[ end trace 0000000000000000 ]--- [ 44.481464][ T99] usb 1-1: error -22 when submitting rx urb [ 44.483036][ T99] usb 1-1: Failed to submit rx cmd [ 44.484391][ T99] ar5523: probe of 1-1:64.245 failed with error -22 [ 44.487215][ T99] ------------[ cut here ]------------ [ 44.488534][ T99] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 44.490112][ T99] WARNING: CPU: 0 PID: 99 at drivers/usb/core/urb.c:505 usb_submit_urb+0x594/0x9b4 [ 44.492484][ T99] Modules linked in: [ 44.493469][ T99] CPU: 0 PID: 99 Comm: kworker/0:2 Tainted: G W 6.1.58-syzkaller #0 [ 44.495873][ T99] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 44.498475][ T99] Workqueue: usb_hub_wq hub_event [ 44.499829][ T99] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 44.501764][ T99] pc : usb_submit_urb+0x594/0x9b4 [ 44.503045][ T99] lr : usb_submit_urb+0x594/0x9b4 [ 44.504280][ T99] sp : ffff8000127a3430 [ 44.505293][ T99] x29: ffff8000127a3440 x28: ffff0000d1909800 x27: ffff0000c553255c [ 44.507273][ T99] x26: ffff80000d24b9f0 x25: ffff0000d19098a8 x24: ffff0000c9bc9f00 [ 44.509292][ T99] x23: ffff80000d2767c8 x22: 0000000000000400 x21: 0000000000000003 [ 44.511296][ T99] x20: 0000000000000a20 x19: ffff0000c5532500 x18: ffff80000c02d2c4 [ 44.513293][ T99] x17: 0000000000000000 x16: 0000000000000002 x15: 0000000000000000 [ 44.515306][ T99] x14: 0000000000000000 x13: 205d393954202020 x12: ffff80000eaf1000 [ 44.517379][ T99] x11: ff808000080e0e64 x10: 0000000000000000 x9 : c02f36c67736b800 [ 44.519430][ T99] x8 : c02f36c67736b800 x7 : 0000000000000000 x6 : ffff80000bff223c [ 44.521440][ T99] x5 : 0000000000000000 x4 : 0000000000000080 x3 : 0000000000000000 [ 44.523465][ T99] x2 : 0000000000000000 x1 : 0000000100000000 x0 : 0000000000000000 [ 44.525551][ T99] Call trace: [ 44.526340][ T99] usb_submit_urb+0x594/0x9b4 [ 44.527535][ T99] ar5523_submit_rx_cmd+0x74/0xf4 [ 44.528750][ T99] ar5523_probe+0x41c/0xbb8 [ 44.529873][ T99] usb_probe_interface+0x2fc/0x4ac [ 44.531231][ T99] really_probe+0x218/0x61c [ 44.532367][ T99] __driver_probe_device+0xe8/0x1fc [ 44.533657][ T99] driver_probe_device+0x54/0x2f4 [ 44.534945][ T99] __device_attach_driver+0x19c/0x2e4 [ 44.536289][ T99] bus_for_each_drv+0xb4/0x124 [ 44.537513][ T99] __device_attach+0x148/0x270 [ 44.538677][ T99] device_initial_probe+0x24/0x34 [ 44.539955][ T99] bus_probe_device+0x5c/0xf0 [ 44.541138][ T99] device_add+0x754/0x968 [ 44.542262][ T99] usb_set_configuration+0xb0c/0xd18 [ 44.543605][ T99] usb_generic_driver_probe+0x5c/0xe8 [ 44.544942][ T99] usb_probe_device+0xd0/0x180 [ 44.546141][ T99] really_probe+0x218/0x61c [ 44.547302][ T99] __driver_probe_device+0xe8/0x1fc [ 44.548573][ T99] driver_probe_device+0x54/0x2f4 [ 44.549863][ T99] __device_attach_driver+0x19c/0x2e4 [ 44.551229][ T99] bus_for_each_drv+0xb4/0x124 [ 44.552446][ T99] __device_attach+0x148/0x270 [ 44.553658][ T99] device_initial_probe+0x24/0x34 [ 44.554885][ T99] bus_probe_device+0x5c/0xf0 [ 44.556023][ T99] device_add+0x754/0x968 [ 44.557104][ T99] usb_new_device+0x428/0x8a8 [ 44.558284][ T99] hub_event+0x1728/0x2580 [ 44.559447][ T99] process_one_work+0x2d4/0x4e0 [ 44.560655][ T99] worker_thread+0x42c/0x5f8 [ 44.561859][ T99] kthread+0x120/0x14c [ 44.562894][ T99] ret_from_fork+0x10/0x20 [ 44.564004][ T99] ---[ end trace 0000000000000000 ]--- [ 44.565464][ T99] usb 1-1: error -22 when submitting rx urb [ 44.566872][ T99] usb 1-1: Failed to submit rx cmd [ 44.568372][ T99] ar5523: probe of 1-1:64.155 failed with error -22 [ 44.602321][ T99] ------------[ cut here ]------------ [ 44.603614][ T99] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 44.605278][ T99] WARNING: CPU: 0 PID: 99 at drivers/usb/core/urb.c:505 usb_submit_urb+0x594/0x9b4 [ 44.607569][ T99] Modules linked in: [ 44.608467][ T99] CPU: 0 PID: 99 Comm: kworker/0:2 Tainted: G W 6.1.58-syzkaller #0 [ 44.610701][ T99] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 44.613251][ T99] Workqueue: usb_hub_wq hub_event [ 44.614465][ T99] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 44.616458][ T99] pc : usb_submit_urb+0x594/0x9b4 [ 44.617688][ T99] lr : usb_submit_urb+0x594/0x9b4 [ 44.618970][ T99] sp : ffff8000127a3430 [ 44.619978][ T99] x29: ffff8000127a3440 x28: ffff0000d1909800 x27: ffff0000c771225c [ 44.621963][ T99] x26: ffff80000d24b9f0 x25: ffff0000d19098a8 x24: ffff0000c9bc9f00 [ 44.623962][ T99] x23: ffff80000d2767c8 x22: 0000000000000400 x21: 0000000000000003 [ 44.625981][ T99] x20: 0000000000000a20 x19: ffff0000c7712200 x18: ffff80000c02d2c4 [ 44.627985][ T99] x17: 0000000000000000 x16: 0000000000000002 x15: 0000000000000000 [ 44.630028][ T99] x14: 0000000000000000 x13: 205d393954202020 x12: ffff80000eaf1000 [ 44.631986][ T99] x11: ff808000080e0e64 x10: 0000000000000000 x9 : c02f36c67736b800 [ 44.633963][ T99] x8 : c02f36c67736b800 x7 : 0000000000000000 x6 : ffff80000bff223c [ 44.635911][ T99] x5 : 0000000000000000 x4 : 0000000000000080 x3 : 0000000000000000 [ 44.637898][ T99] x2 : 0000000000000000 x1 : 0000000100000000 x0 : 0000000000000000 [ 44.639897][ T99] Call trace: [ 44.640693][ T99] usb_submit_urb+0x594/0x9b4 [ 44.641902][ T99] ar5523_submit_rx_cmd+0x74/0xf4 [ 44.643187][ T99] ar5523_probe+0x41c/0xbb8 [ 44.644350][ T99] usb_probe_interface+0x2fc/0x4ac [ 44.645566][ T99] really_probe+0x218/0x61c [ 44.646680][ T99] __driver_probe_device+0xe8/0x1fc [ 44.647975][ T99] driver_probe_device+0x54/0x2f4 [ 44.649261][ T99] __device_attach_driver+0x19c/0x2e4 [ 44.650555][ T99] bus_for_each_drv+0xb4/0x124 [ 44.651688][ T99] __device_attach+0x148/0x270 [ 44.652863][ T99] device_initial_probe+0x24/0x34 [ 44.654058][ T99] bus_probe_device+0x5c/0xf0 [ 44.655307][ T99] device_add+0x754/0x968 [ 44.656409][ T99] usb_set_configuration+0xb0c/0xd18 [ 44.657748][ T99] usb_generic_driver_probe+0x5c/0xe8 [ 44.659101][ T99] usb_probe_device+0xd0/0x180 [ 44.660241][ T99] really_probe+0x218/0x61c [ 44.661359][ T99] __driver_probe_device+0xe8/0x1fc [ 44.662663][ T99] driver_probe_device+0x54/0x2f4 [ 44.664006][ T99] __device_attach_driver+0x19c/0x2e4 [ 44.665311][ T99] bus_for_each_drv+0xb4/0x124 [ 44.666544][ T99] __device_attach+0x148/0x270 [ 44.667756][ T99] device_initial_probe+0x24/0x34 [ 44.669076][ T99] bus_probe_device+0x5c/0xf0 [ 44.670277][ T99] device_add+0x754/0x968 [ 44.671347][ T99] usb_new_device+0x428/0x8a8 [ 44.672534][ T99] hub_event+0x1728/0x2580 [ 44.673594][ T99] process_one_work+0x2d4/0x4e0 [ 44.674845][ T99] worker_thread+0x42c/0x5f8 [ 44.675980][ T99] kthread+0x120/0x14c [ 44.677009][ T99] ret_from_fork+0x10/0x20 [ 44.678075][ T99] ---[ end trace 0000000000000000 ]--- [ 44.679739][ T99] usb 1-1: error -22 when submitting rx urb [ 44.681187][ T99] usb 1-1: Failed to submit rx cmd [ 44.682668][ T99] ar5523: probe of 1-1:64.243 failed with error -22 [ 44.685120][ T99] usb 1-1: USB disconnect, device number 4 2023/10/17 19:41:32 executed programs: 3 [ 45.152355][ T99] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 45.391934][ T3752] Bluetooth: hci0: command 0x040f tx timeout [ 45.401940][ T99] usb 1-1: Using ep0 maxpacket: 32 [ 45.522009][ T99] usb 1-1: config 64 has an invalid interface number: 245 but max is 2 [ 45.524048][ T99] usb 1-1: config 64 has an invalid interface number: 155 but max is 2 [ 45.525987][ T99] usb 1-1: config 64 contains an unexpected descriptor of type 0x2, skipping [ 45.528061][ T99] usb 1-1: config 64 contains an unexpected descriptor of type 0x1, skipping [ 45.530113][ T99] usb 1-1: config 64 has an invalid interface number: 243 but max is 2 [ 45.532174][ T99] usb 1-1: config 64 has no interface number 0 [ 45.533666][ T99] usb 1-1: config 64 has no interface number 1 [ 45.535149][ T99] usb 1-1: config 64 has no interface number 2 [ 45.536600][ T99] usb 1-1: config 64 interface 245 altsetting 7 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 45.539286][ T99] usb 1-1: config 64 interface 245 altsetting 7 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 45.541842][ T99] usb 1-1: config 64 interface 245 altsetting 7 has an invalid endpoint descriptor of length 2, skipping [ 45.544597][ T99] usb 1-1: config 64 interface 245 altsetting 7 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 45.547799][ T99] usb 1-1: config 64 interface 155 altsetting 1 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 45.550453][ T99] usb 1-1: config 64 interface 155 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 45.553202][ T99] usb 1-1: config 64 interface 155 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 45.555794][ T99] usb 1-1: config 64 interface 155 altsetting 1 endpoint 0xA has invalid maxpacket 72, setting to 64 [ 45.558385][ T99] usb 1-1: config 64 interface 155 altsetting 1 endpoint 0x81 has an invalid bInterval 139, changing to 11 [ 45.561244][ T99] usb 1-1: config 64 interface 155 altsetting 1 endpoint 0x81 has invalid maxpacket 18251, setting to 1024 [ 45.564104][ T99] usb 1-1: config 64 interface 155 altsetting 1 has a duplicate endpoint with address 0xA, skipping [ 45.566887][ T99] usb 1-1: config 64 interface 155 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 45.569411][ T99] usb 1-1: config 64 interface 155 altsetting 1 has 9 endpoint descriptors, different from the interface descriptor's value: 8 [ 45.572506][ T99] usb 1-1: config 64 interface 243 altsetting 31 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 45.575150][ T99] usb 1-1: config 64 interface 245 has no altsetting 0 [ 45.576816][ T99] usb 1-1: config 64 interface 155 has no altsetting 0 [ 45.578464][ T99] usb 1-1: config 64 interface 243 has no altsetting 0 [ 45.731951][ T99] usb 1-1: New USB device found, idVendor=083a, idProduct=4506, bcdDevice=6d.7d [ 45.734248][ T99] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.736255][ T99] usb 1-1: Product: syz [ 45.737272][ T99] usb 1-1: Manufacturer: syz [ 45.738370][ T99] usb 1-1: SerialNumber: syz [ 46.052319][ T99] ------------[ cut here ]------------ [ 46.053623][ T99] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 46.055293][ T99] WARNING: CPU: 0 PID: 99 at drivers/usb/core/urb.c:505 usb_submit_urb+0x594/0x9b4 [ 46.057522][ T99] Modules linked in: [ 46.058492][ T99] CPU: 0 PID: 99 Comm: kworker/0:2 Tainted: G W 6.1.58-syzkaller #0 [ 46.060726][ T99] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 46.063244][ T99] Workqueue: usb_hub_wq hub_event [ 46.064528][ T99] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 46.066596][ T99] pc : usb_submit_urb+0x594/0x9b4 [ 46.067887][ T99] lr : usb_submit_urb+0x594/0x9b4 [ 46.069128][ T99] sp : ffff8000127a3430 [ 46.070222][ T99] x29: ffff8000127a3440 x28: ffff0000d1909800 x27: ffff0000c5532c5c [ 46.072260][ T99] x26: ffff80000d24b9f0 x25: ffff0000d19098a8 x24: ffff0000ca219100 [ 46.074261][ T99] x23: ffff80000d2767c8 x22: 0000000000000400 x21: 0000000000000003 [ 46.076300][ T99] x20: 0000000000000a20 x19: ffff0000c5532c00 x18: 0000000000000000 [ 46.078295][ T99] x17: 0000000000000001 x16: 0000000000000002 x15: 0000000000000000 [ 46.080392][ T99] x14: 0000000000000000 x13: 205d393954202020 x12: ffff80000eaf1000 [ 46.082460][ T99] x11: ff808000080e0e64 x10: 0000000000000000 x9 : c02f36c67736b800 [ 46.084460][ T99] x8 : c02f36c67736b800 x7 : 0000000000000000 x6 : ffff80000bff223c [ 46.086463][ T99] x5 : 0000000000000000 x4 : 0000000000000080 x3 : 0000000000000000 [ 46.088499][ T99] x2 : 0000000000000000 x1 : 0000000100000000 x0 : 0000000000000000 [ 46.090597][ T99] Call trace: [ 46.091398][ T99] usb_submit_urb+0x594/0x9b4 [ 46.092492][ T99] ar5523_submit_rx_cmd+0x74/0xf4 [ 46.093787][ T99] ar5523_probe+0x41c/0xbb8 [ 46.094953][ T99] usb_probe_interface+0x2fc/0x4ac [ 46.096313][ T99] really_probe+0x218/0x61c [ 46.097472][ T99] __driver_probe_device+0xe8/0x1fc [ 46.098743][ T99] driver_probe_device+0x54/0x2f4 [ 46.100049][ T99] __device_attach_driver+0x19c/0x2e4 [ 46.101409][ T99] bus_for_each_drv+0xb4/0x124 [ 46.102638][ T99] __device_attach+0x148/0x270 [ 46.103882][ T99] device_initial_probe+0x24/0x34 [ 46.105167][ T99] bus_probe_device+0x5c/0xf0 [ 46.106408][ T99] device_add+0x754/0x968 [ 46.107512][ T99] usb_set_configuration+0xb0c/0xd18 [ 46.108870][ T99] usb_generic_driver_probe+0x5c/0xe8 [ 46.110246][ T99] usb_probe_device+0xd0/0x180 [ 46.111438][ T99] really_probe+0x218/0x61c [ 46.112630][ T99] __driver_probe_device+0xe8/0x1fc [ 46.113966][ T99] driver_probe_device+0x54/0x2f4 [ 46.115204][ T99] __device_attach_driver+0x19c/0x2e4 [ 46.116548][ T99] bus_for_each_drv+0xb4/0x124 [ 46.117749][ T99] __device_attach+0x148/0x270 [ 46.119013][ T99] device_initial_probe+0x24/0x34 [ 46.120305][ T99] bus_probe_device+0x5c/0xf0 [ 46.121487][ T99] device_add+0x754/0x968 [ 46.122583][ T99] usb_new_device+0x428/0x8a8 [ 46.123753][ T99] hub_event+0x1728/0x2580 [ 46.124882][ T99] process_one_work+0x2d4/0x4e0 [ 46.126119][ T99] worker_thread+0x340/0x5f8 [ 46.127334][ T99] kthread+0x120/0x14c [ 46.128392][ T99] ret_from_fork+0x10/0x20 [ 46.129510][ T99] ---[ end trace 0000000000000000 ]--- [ 46.130999][ T99] usb 1-1: error -22 when submitting rx urb [ 46.132445][ T99] usb 1-1: Failed to submit rx cmd [ 46.133822][ T99] ar5523: probe of 1-1:64.245 failed with error -22 [ 46.136527][ T99] ------------[ cut here ]------------ [ 46.137864][ T99] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 46.139575][ T99] WARNING: CPU: 0 PID: 99 at drivers/usb/core/urb.c:505 usb_submit_urb+0x594/0x9b4 [ 46.141868][ T99] Modules linked in: [ 46.142854][ T99] CPU: 0 PID: 99 Comm: kworker/0:2 Tainted: G W 6.1.58-syzkaller #0 [ 46.145239][ T99] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 46.147744][ T99] Workqueue: usb_hub_wq hub_event [ 46.149052][ T99] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 46.151089][ T99] pc : usb_submit_urb+0x594/0x9b4 [ 46.152414][ T99] lr : usb_submit_urb+0x594/0x9b4 [ 46.153699][ T99] sp : ffff8000127a3430 [ 46.154759][ T99] x29: ffff8000127a3440 x28: ffff0000d1909800 x27: ffff0000c771245c [ 46.156801][ T99] x26: ffff80000d24b9f0 x25: ffff0000d19098a8 x24: ffff0000ca219100 [ 46.158813][ T99] x23: ffff80000d2767c8 x22: 0000000000000400 x21: 0000000000000003 [ 46.160834][ T99] x20: 0000000000000a20 x19: ffff0000c7712400 x18: ffff80000c02d2c4 [ 46.162939][ T99] x17: 0000000000000000 x16: 0000000000000002 x15: 0000000000000000 [ 46.165056][ T99] x14: 0000000000000000 x13: 205d393954202020 x12: ffff80000eaf1000 [ 46.167131][ T99] x11: ff808000080e0e64 x10: 0000000000000000 x9 : c02f36c67736b800 [ 46.169214][ T99] x8 : c02f36c67736b800 x7 : 0000000000000000 x6 : ffff80000bff223c [ 46.171315][ T99] x5 : 0000000000000000 x4 : 0000000000000080 x3 : 0000000000000000 [ 46.173367][ T99] x2 : 0000000000000000 x1 : 0000000100000000 x0 : 0000000000000000 [ 46.175448][ T99] Call trace: [ 46.176264][ T99] usb_submit_urb+0x594/0x9b4 [ 46.177462][ T99] ar5523_submit_rx_cmd+0x74/0xf4 [ 46.178749][ T99] ar5523_probe+0x41c/0xbb8 [ 46.179879][ T99] usb_probe_interface+0x2fc/0x4ac [ 46.181189][ T99] really_probe+0x218/0x61c [ 46.182345][ T99] __driver_probe_device+0xe8/0x1fc [ 46.183644][ T99] driver_probe_device+0x54/0x2f4 [ 46.184897][ T99] __device_attach_driver+0x19c/0x2e4 [ 46.186232][ T99] bus_for_each_drv+0xb4/0x124 [ 46.187436][ T99] __device_attach+0x148/0x270 [ 46.188706][ T99] device_initial_probe+0x24/0x34 [ 46.189968][ T99] bus_probe_device+0x5c/0xf0 [ 46.191219][ T99] device_add+0x754/0x968 [ 46.192346][ T99] usb_set_configuration+0xb0c/0xd18 [ 46.193691][ T99] usb_generic_driver_probe+0x5c/0xe8 [ 46.195062][ T99] usb_probe_device+0xd0/0x180 [ 46.196292][ T99] really_probe+0x218/0x61c [ 46.197448][ T99] __driver_probe_device+0xe8/0x1fc [ 46.198876][ T99] driver_probe_device+0x54/0x2f4 [ 46.200126][ T99] __device_attach_driver+0x19c/0x2e4 [ 46.201534][ T99] bus_for_each_drv+0xb4/0x124 [ 46.202760][ T99] __device_attach+0x148/0x270 [ 46.204005][ T99] device_initial_probe+0x24/0x34 [ 46.205266][ T99] bus_probe_device+0x5c/0xf0 [ 46.206482][ T99] device_add+0x754/0x968 [ 46.207586][ T99] usb_new_device+0x428/0x8a8 [ 46.208833][ T99] hub_event+0x1728/0x2580 [ 46.209947][ T99] process_one_work+0x2d4/0x4e0 [ 46.211214][ T99] worker_thread+0x340/0x5f8 [ 46.212384][ T99] kthread+0x120/0x14c [ 46.213407][ T99] ret_from_fork+0x10/0x20 [ 46.214504][ T99] ---[ end trace 0000000000000000 ]--- [ 46.216009][ T99] usb 1-1: error -22 when submitting rx urb [ 46.217403][ T99] usb 1-1: Failed to submit rx cmd [ 46.218820][ T99] ar5523: probe of 1-1:64.155 failed with error -22 [ 46.252297][ T99] ------------[ cut here ]------------ [ 46.253654][ T99] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 46.255245][ T99] WARNING: CPU: 0 PID: 99 at drivers/usb/core/urb.c:505 usb_submit_urb+0x594/0x9b4 [ 46.257370][ T99] Modules linked in: [ 46.258302][ T99] CPU: 0 PID: 99 Comm: kworker/0:2 Tainted: G W 6.1.58-syzkaller #0 [ 46.260494][ T99] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 46.262983][ T99] Workqueue: usb_hub_wq hub_event [ 46.264237][ T99] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 46.266190][ T99] pc : usb_submit_urb+0x594/0x9b4 [ 46.267432][ T99] lr : usb_submit_urb+0x594/0x9b4 [ 46.268668][ T99] sp : ffff8000127a3430 [ 46.269740][ T99] x29: ffff8000127a3440 x28: ffff0000d1909800 x27: ffff0000c5532c5c [ 46.271756][ T99] x26: ffff80000d24b9f0 x25: ffff0000d19098a8 x24: ffff0000ca219100 [ 46.273751][ T99] x23: ffff80000d2767c8 x22: 0000000000000400 x21: 0000000000000003 [ 46.275772][ T99] x20: 0000000000000a20 x19: ffff0000c5532c00 x18: 0000000000000000 [ 46.277765][ T99] x17: 0000000000000000 x16: 0000000000000002 x15: 0000000000000000 [ 46.279738][ T99] x14: 0000000000000000 x13: 205d393954202020 x12: ffff80000eaf1000 [ 46.281776][ T99] x11: ff808000080e0e64 x10: 0000000000000000 x9 : c02f36c67736b800 [ 46.283837][ T99] x8 : c02f36c67736b800 x7 : 0000000000000000 x6 : ffff80000bff223c [ 46.285968][ T99] x5 : 0000000000000000 x4 : 0000000000000080 x3 : 0000000000000000 [ 46.288063][ T99] x2 : 0000000000000000 x1 : 0000000100000000 x0 : 0000000000000000 [ 46.290086][ T99] Call trace: [ 46.290864][ T99] usb_submit_urb+0x594/0x9b4 [ 46.292050][ T99] ar5523_submit_rx_cmd+0x74/0xf4 [ 46.293305][ T99] ar5523_probe+0x41c/0xbb8 [ 46.294378][ T99] usb_probe_interface+0x2fc/0x4ac [ 46.295618][ T99] really_probe+0x218/0x61c [ 46.296709][ T99] __driver_probe_device+0xe8/0x1fc [ 46.298012][ T99] driver_probe_device+0x54/0x2f4 [ 46.299187][ T99] __device_attach_driver+0x19c/0x2e4 [ 46.300555][ T99] bus_for_each_drv+0xb4/0x124 [ 46.301711][ T99] __device_attach+0x148/0x270 [ 46.302874][ T99] device_initial_probe+0x24/0x34 [ 46.304116][ T99] bus_probe_device+0x5c/0xf0 [ 46.305240][ T99] device_add+0x754/0x968 [ 46.306316][ T99] usb_set_configuration+0xb0c/0xd18 [ 46.307625][ T99] usb_generic_driver_probe+0x5c/0xe8 [ 46.308923][ T99] usb_probe_device+0xd0/0x180 [ 46.310114][ T99] really_probe+0x218/0x61c [ 46.311241][ T99] __driver_probe_device+0xe8/0x1fc [ 46.312510][ T99] driver_probe_device+0x54/0x2f4 [ 46.313772][ T99] __device_attach_driver+0x19c/0x2e4 [ 46.315080][ T99] bus_for_each_drv+0xb4/0x124 [ 46.316251][ T99] __device_attach+0x148/0x270 [ 46.317412][ T99] device_initial_probe+0x24/0x34 [ 46.318680][ T99] bus_probe_device+0x5c/0xf0 [ 46.319891][ T99] device_add+0x754/0x968 [ 46.320952][ T99] usb_new_device+0x428/0x8a8 [ 46.322134][ T99] hub_event+0x1728/0x2580 [ 46.323208][ T99] process_one_work+0x2d4/0x4e0 [ 46.324425][ T99] worker_thread+0x340/0x5f8 [ 46.325548][ T99] kthread+0x120/0x14c [ 46.326517][ T99] ret_from_fork+0x10/0x20 [ 46.327633][ T99] ---[ end trace 0000000000000000 ]--- [ 46.329023][ T99] usb 1-1: error -22 when submitting rx urb [ 46.330523][ T99] usb 1-1: Failed to submit rx cmd [ 46.331989][ T99] ar5523: probe of 1-1:64.243 failed with error -22 [ 46.335010][ T99] usb 1-1: USB disconnect, device number 5 [ 46.821950][ T99] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 47.061934][ T99] usb 1-1: Using ep0 maxpacket: 32 [ 47.182015][ T99] usb 1-1: config 64 has an invalid interface number: 245 but max is 2 [ 47.184099][ T99] usb 1-1: config 64 has an invalid interface number: 155 but max is 2 [ 47.186105][ T99] usb 1-1: config 64 contains an unexpected descriptor of type 0x2, skipping [ 47.188174][ T99] usb 1-1: config 64 contains an unexpected descriptor of type 0x1, skipping [ 47.190326][ T99] usb 1-1: config 64 has an invalid interface number: 243 but max is 2 [ 47.192372][ T99] usb 1-1: config 64 has no interface number 0 [ 47.193840][ T99] usb 1-1: config 64 has no interface number 1 [ 47.195373][ T99] usb 1-1: config 64 has no interface number 2 [ 47.197016][ T99] usb 1-1: config 64 interface 245 altsetting 7 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 47.199607][ T99] usb 1-1: config 64 interface 245 altsetting 7 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 47.202348][ T99] usb 1-1: config 64 interface 245 altsetting 7 has an invalid endpoint descriptor of length 2, skipping [ 47.205117][ T99] usb 1-1: config 64 interface 245 altsetting 7 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 47.208217][ T99] usb 1-1: config 64 interface 155 altsetting 1 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 47.210813][ T99] usb 1-1: config 64 interface 155 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 47.213444][ T99] usb 1-1: config 64 interface 155 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 47.215951][ T99] usb 1-1: config 64 interface 155 altsetting 1 endpoint 0xA has invalid maxpacket 72, setting to 64 [ 47.218471][ T99] usb 1-1: config 64 interface 155 altsetting 1 endpoint 0x81 has an invalid bInterval 139, changing to 11 [ 47.221153][ T99] usb 1-1: config 64 interface 155 altsetting 1 endpoint 0x81 has invalid maxpacket 18251, setting to 1024 [ 47.224023][ T99] usb 1-1: config 64 interface 155 altsetting 1 has a duplicate endpoint with address 0xA, skipping [ 47.226538][ T99] usb 1-1: config 64 interface 155 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 47.229156][ T99] usb 1-1: config 64 interface 155 altsetting 1 has 9 endpoint descriptors, different from the interface descriptor's value: 8 [ 47.232391][ T99] usb 1-1: config 64 interface 243 altsetting 31 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 47.235008][ T99] usb 1-1: config 64 interface 245 has no altsetting 0 [ 47.236561][ T99] usb 1-1: config 64 interface 155 has no altsetting 0 [ 47.238293][ T99] usb 1-1: config 64 interface 243 has no altsetting 0 [ 47.401936][ T99] usb 1-1: New USB device found, idVendor=083a, idProduct=4506, bcdDevice=6d.7d [ 47.404276][ T99] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.406153][ T99] usb 1-1: Product: syz [ 47.407050][ T99] usb 1-1: Manufacturer: syz [ 47.408138][ T99] usb 1-1: SerialNumber: syz [ 47.471946][ T3752] Bluetooth: hci0: command 0x0419 tx timeout [ 47.722298][ T99] ------------[ cut here ]------------ [ 47.723809][ T99] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 47.725388][ T99] WARNING: CPU: 0 PID: 99 at drivers/usb/core/urb.c:505 usb_submit_urb+0x594/0x9b4 [ 47.727628][ T99] Modules linked in: [ 47.728590][ T99] CPU: 0 PID: 99 Comm: kworker/0:2 Tainted: G W 6.1.58-syzkaller #0 [ 47.730752][ T99] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 47.733258][ T99] Workqueue: usb_hub_wq hub_event [ 47.734520][ T99] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 47.736500][ T99] pc : usb_submit_urb+0x594/0x9b4 [ 47.737736][ T99] lr : usb_submit_urb+0x594/0x9b4 [ 47.738986][ T99] sp : ffff8000127a3430 [ 47.739989][ T99] x29: ffff8000127a3440 x28: ffff0000d1909800 x27: ffff0000c7712d5c [ 47.741924][ T99] x26: ffff80000d24b9f0 x25: ffff0000d19098a8 x24: ffff0000c7d1cc80 [ 47.743950][ T99] x23: ffff80000d2767c8 x22: 0000000000000400 x21: 0000000000000003 [ 47.746005][ T99] x20: 0000000000000a20 x19: ffff0000c7712d00 x18: 0000000000000000 [ 47.748006][ T99] x17: 0000000000000000 x16: 0000000000000002 x15: 0000000000000000 [ 47.750062][ T99] x14: 0000000000000000 x13: 205d393954202020 x12: ffff80000eaf1000 [ 47.752066][ T99] x11: ff808000080e0e64 x10: 0000000000000000 x9 : c02f36c67736b800 [ 47.754112][ T99] x8 : c02f36c67736b800 x7 : 0000000000000000 x6 : ffff80000bff223c [ 47.756153][ T99] x5 : 0000000000000000 x4 : 0000000000000080 x3 : 0000000000000000 [ 47.758152][ T99] x2 : 0000000000000000 x1 : 0000000100000000 x0 : 0000000000000000 [ 47.760167][ T99] Call trace: [ 47.760974][ T99] usb_submit_urb+0x594/0x9b4 [ 47.762170][ T99] ar5523_submit_rx_cmd+0x74/0xf4 [ 47.763403][ T99] ar5523_probe+0x41c/0xbb8 [ 47.764520][ T99] usb_probe_interface+0x2fc/0x4ac [ 47.765725][ T99] really_probe+0x218/0x61c [ 47.766947][ T99] __driver_probe_device+0xe8/0x1fc [ 47.768224][ T99] driver_probe_device+0x54/0x2f4 [ 47.769523][ T99] __device_attach_driver+0x19c/0x2e4 [ 47.770871][ T99] bus_for_each_drv+0xb4/0x124 [ 47.772054][ T99] __device_attach+0x148/0x270 [ 47.773225][ T99] device_initial_probe+0x24/0x34 [ 47.774441][ T99] bus_probe_device+0x5c/0xf0 [ 47.775629][ T99] device_add+0x754/0x968 [ 47.776715][ T99] usb_set_configuration+0xb0c/0xd18 [ 47.778068][ T99] usb_generic_driver_probe+0x5c/0xe8 [ 47.779409][ T99] usb_probe_device+0xd0/0x180 [ 47.780533][ T99] really_probe+0x218/0x61c [ 47.781700][ T99] __driver_probe_device+0xe8/0x1fc [ 47.782947][ T99] driver_probe_device+0x54/0x2f4 [ 47.784230][ T99] __device_attach_driver+0x19c/0x2e4 [ 47.785597][ T99] bus_for_each_drv+0xb4/0x124 [ 47.786770][ T99] __device_attach+0x148/0x270 [ 47.788000][ T99] device_initial_probe+0x24/0x34 [ 47.789217][ T99] bus_probe_device+0x5c/0xf0 [ 47.790441][ T99] device_add+0x754/0x968 [ 47.791583][ T99] usb_new_device+0x428/0x8a8 [ 47.792756][ T99] hub_event+0x1728/0x2580 [ 47.793827][ T99] process_one_work+0x2d4/0x4e0 [ 47.795038][ T99] worker_thread+0x340/0x5f8 [ 47.796162][ T99] kthread+0x120/0x14c [ 47.797163][ T99] ret_from_fork+0x10/0x20 [ 47.798236][ T99] ---[ end trace 0000000000000000 ]--- [ 47.799617][ T99] usb 1-1: error -22 when submitting rx urb [ 47.800984][ T99] usb 1-1: Failed to submit rx cmd [ 47.802391][ T99] ar5523: probe of 1-1:64.245 failed with error -22 [ 47.805211][ T99] ------------[ cut here ]------------ [ 47.806538][ T99] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 47.808132][ T99] WARNING: CPU: 0 PID: 99 at drivers/usb/core/urb.c:505 usb_submit_urb+0x594/0x9b4 [ 47.810417][ T99] Modules linked in: [ 47.811282][ T99] CPU: 0 PID: 99 Comm: kworker/0:2 Tainted: G W 6.1.58-syzkaller #0 [ 47.813638][ T99] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 47.816147][ T99] Workqueue: usb_hub_wq hub_event [ 47.817405][ T99] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 47.819416][ T99] pc : usb_submit_urb+0x594/0x9b4 [ 47.820706][ T99] lr : usb_submit_urb+0x594/0x9b4 [ 47.821924][ T99] sp : ffff8000127a3430 [ 47.822923][ T99] x29: ffff8000127a3440 x28: ffff0000d1909800 x27: ffff0000c5532c5c [ 47.824935][ T99] x26: ffff80000d24b9f0 x25: ffff0000d19098a8 x24: ffff0000c7d1cc80 [ 47.826913][ T99] x23: ffff80000d2767c8 x22: 0000000000000400 x21: 0000000000000003 [ 47.828937][ T99] x20: 0000000000000a20 x19: ffff0000c5532c00 x18: ffff80000c02d2c4 [ 47.830934][ T99] x17: 0000000000028000 x16: 0000000000000002 x15: 0000000000000000 [ 47.832996][ T99] x14: 0000000000000000 x13: 205d393954202020 x12: ffff80000eaf1000 [ 47.835041][ T99] x11: ff808000080e0e64 x10: 0000000000000000 x9 : c02f36c67736b800 [ 47.837023][ T99] x8 : c02f36c67736b800 x7 : 0000000000000000 x6 : ffff80000bff223c [ 47.839034][ T99] x5 : 0000000000000000 x4 : 0000000000000080 x3 : 0000000000000000 [ 47.841019][ T99] x2 : 0000000000000000 x1 : 0000000100000000 x0 : 0000000000000000 [ 47.843000][ T99] Call trace: [ 47.843827][ T99] usb_submit_urb+0x594/0x9b4 [ 47.844978][ T99] ar5523_submit_rx_cmd+0x74/0xf4 [ 47.846205][ T99] ar5523_probe+0x41c/0xbb8 [ 47.847281][ T99] usb_probe_interface+0x2fc/0x4ac [ 47.848548][ T99] really_probe+0x218/0x61c [ 47.849648][ T99] __driver_probe_device+0xe8/0x1fc [ 47.850951][ T99] driver_probe_device+0x54/0x2f4 [ 47.852145][ T99] __device_attach_driver+0x19c/0x2e4 [ 47.853499][ T99] bus_for_each_drv+0xb4/0x124 [ 47.854655][ T99] __device_attach+0x148/0x270 [ 47.855859][ T99] device_initial_probe+0x24/0x34 [ 47.857077][ T99] bus_probe_device+0x5c/0xf0 [ 47.858203][ T99] device_add+0x754/0x968 [ 47.859294][ T99] usb_set_configuration+0xb0c/0xd18 [ 47.860572][ T99] usb_generic_driver_probe+0x5c/0xe8 [ 47.861899][ T99] usb_probe_device+0xd0/0x180 [ 47.863149][ T99] really_probe+0x218/0x61c [ 47.864301][ T99] __driver_probe_device+0xe8/0x1fc [ 47.865598][ T99] driver_probe_device+0x54/0x2f4 [ 47.866825][ T99] __device_attach_driver+0x19c/0x2e4 [ 47.868161][ T99] bus_for_each_drv+0xb4/0x124 [ 47.869349][ T99] __device_attach+0x148/0x270 [ 47.870560][ T99] device_initial_probe+0x24/0x34 [ 47.871798][ T99] bus_probe_device+0x5c/0xf0 [ 47.872980][ T99] device_add+0x754/0x968 [ 47.874026][ T99] usb_new_device+0x428/0x8a8 [ 47.875243][ T99] hub_event+0x1728/0x2580 [ 47.876307][ T99] process_one_work+0x2d4/0x4e0 [ 47.877559][ T99] worker_thread+0x340/0x5f8 [ 47.878675][ T99] kthread+0x120/0x14c [ 47.879719][ T99] ret_from_fork+0x10/0x20 [ 47.880882][ T99] ---[ end trace 0000000000000000 ]--- [ 47.882296][ T99] usb 1-1: error -22 when submitting rx urb [ 47.883697][ T99] usb 1-1: Failed to submit rx cmd [ 47.885075][ T99] ar5523: probe of 1-1:64.155 failed with error -22 [ 47.922446][ T99] ------------[ cut here ]------------ [ 47.923804][ T99] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 47.925387][ T99] WARNING: CPU: 0 PID: 99 at drivers/usb/core/urb.c:505 usb_submit_urb+0x594/0x9b4 [ 47.927631][ T99] Modules linked in: [ 47.928506][ T99] CPU: 0 PID: 99 Comm: kworker/0:2 Tainted: G W 6.1.58-syzkaller #0 [ 47.930743][ T99] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 47.933183][ T99] Workqueue: usb_hub_wq hub_event [ 47.934397][ T99] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 47.936324][ T99] pc : usb_submit_urb+0x594/0x9b4 [ 47.937565][ T99] lr : usb_submit_urb+0x594/0x9b4 [ 47.938821][ T99] sp : ffff8000127a3430 [ 47.939880][ T99] x29: ffff8000127a3440 x28: ffff0000d1909800 x27: ffff0000c771255c [ 47.941922][ T99] x26: ffff80000d24b9f0 x25: ffff0000d19098a8 x24: ffff0000c7d1cc80 [ 47.943950][ T99] x23: ffff80000d2767c8 x22: 0000000000000400 x21: 0000000000000003 [ 47.945918][ T99] x20: 0000000000000a20 x19: ffff0000c7712500 x18: ffff80000c02d2c4 [ 47.947921][ T99] x17: 0000000000000000 x16: 0000000000000002 x15: 0000000000000000 [ 47.949860][ T99] x14: 0000000000000000 x13: 205d393954202020 x12: ffff80000eaf1000 [ 47.951838][ T99] x11: ff808000080e0e64 x10: 0000000000000000 x9 : c02f36c67736b800 [ 47.953910][ T99] x8 : c02f36c67736b800 x7 : 0000000000000000 x6 : ffff80000bff223c [ 47.955903][ T99] x5 : 0000000000000000 x4 : 0000000000000080 x3 : 0000000000000000 [ 47.957872][ T99] x2 : 0000000000000000 x1 : 0000000100000000 x0 : 0000000000000000 [ 47.959866][ T99] Call trace: [ 47.960708][ T99] usb_submit_urb+0x594/0x9b4 [ 47.961875][ T99] ar5523_submit_rx_cmd+0x74/0xf4 [ 47.963136][ T99] ar5523_probe+0x41c/0xbb8 [ 47.964230][ T99] usb_probe_interface+0x2fc/0x4ac [ 47.965474][ T99] really_probe+0x218/0x61c [ 47.966557][ T99] __driver_probe_device+0xe8/0x1fc [ 47.967893][ T99] driver_probe_device+0x54/0x2f4 [ 47.969143][ T99] __device_attach_driver+0x19c/0x2e4 [ 47.970449][ T99] bus_for_each_drv+0xb4/0x124 [ 47.971627][ T99] __device_attach+0x148/0x270 [ 47.972792][ T99] device_initial_probe+0x24/0x34 [ 47.974023][ T99] bus_probe_device+0x5c/0xf0 [ 47.975215][ T99] device_add+0x754/0x968 [ 47.976289][ T99] usb_set_configuration+0xb0c/0xd18 [ 47.977661][ T99] usb_generic_driver_probe+0x5c/0xe8 [ 47.978995][ T99] usb_probe_device+0xd0/0x180 [ 47.980183][ T99] really_probe+0x218/0x61c [ 47.981362][ T99] __driver_probe_device+0xe8/0x1fc [ 47.982644][ T99] driver_probe_device+0x54/0x2f4 [ 47.983985][ T99] __device_attach_driver+0x19c/0x2e4 [ 47.985267][ T99] bus_for_each_drv+0xb4/0x124 [ 47.986428][ T99] __device_attach+0x148/0x270 [ 47.987549][ T99] device_initial_probe+0x24/0x34 [ 47.988820][ T99] bus_probe_device+0x5c/0xf0 [ 47.989931][ T99] device_add+0x754/0x968 [ 47.991008][ T99] usb_new_device+0x428/0x8a8 [ 47.992163][ T99] hub_event+0x1728/0x2580 [ 47.993204][ T99] process_one_work+0x2d4/0x4e0 [ 47.994396][ T99] worker_thread+0x340/0x5f8 [ 47.995584][ T99] kthread+0x120/0x14c [ 47.996571][ T99] ret_from_fork+0x10/0x20 [ 47.997637][ T99] ---[ end trace 0000000000000000 ]--- [ 47.999065][ T99] usb 1-1: error -22 when submitting rx urb [ 48.000571][ T99] usb 1-1: Failed to submit rx cmd [ 48.002025][ T99] ar5523: probe of 1-1:64.243 failed with error -22 [ 48.004516][ T99] usb 1-1: USB disconnect, device number 6 [ 48.581915][ T99] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 48.821940][ T99] usb 1-1: Using ep0 maxpacket: 32 [ 48.942363][ T99] usb 1-1: config 64 has an invalid interface number: 245 but max is 2 [ 48.944318][ T99] usb 1-1: config 64 has an invalid interface number: 155 but max is 2 [ 48.946291][ T99] usb 1-1: config 64 contains an unexpected descriptor of type 0x2, skipping [ 48.948440][ T99] usb 1-1: config 64 contains an unexpected descriptor of type 0x1, skipping [ 48.950606][ T99] usb 1-1: config 64 has an invalid interface number: 243 but max is 2 [ 48.952699][ T99] usb 1-1: config 64 has no interface number 0 [ 48.954209][ T99] usb 1-1: config 64 has no interface number 1 [ 48.955777][ T99] usb 1-1: config 64 has no interface number 2 [ 48.957291][ T99] usb 1-1: config 64 interface 245 altsetting 7 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 48.959953][ T99] usb 1-1: config 64 interface 245 altsetting 7 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 48.962936][ T99] usb 1-1: config 64 interface 245 altsetting 7 has an invalid endpoint descriptor of length 2, skipping [ 48.965680][ T99] usb 1-1: config 64 interface 245 altsetting 7 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 48.968808][ T99] usb 1-1: config 64 interface 155 altsetting 1 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 48.971435][ T99] usb 1-1: config 64 interface 155 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 48.974122][ T99] usb 1-1: config 64 interface 155 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 48.976621][ T99] usb 1-1: config 64 interface 155 altsetting 1 endpoint 0xA has invalid maxpacket 72, setting to 64 [ 48.979234][ T99] usb 1-1: config 64 interface 155 altsetting 1 endpoint 0x81 has an invalid bInterval 139, changing to 11 [ 48.982414][ T99] usb 1-1: config 64 interface 155 altsetting 1 endpoint 0x81 has invalid maxpacket 18251, setting to 1024 [ 48.985114][ T99] usb 1-1: config 64 interface 155 altsetting 1 has a duplicate endpoint with address 0xA, skipping [ 48.987805][ T99] usb 1-1: config 64 interface 155 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 48.990442][ T99] usb 1-1: config 64 interface 155 altsetting 1 has 9 endpoint descriptors, different from the interface descriptor's value: 8 [ 48.993625][ T99] usb 1-1: config 64 interface 243 altsetting 31 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 48.996299][ T99] usb 1-1: config 64 interface 245 has no altsetting 0 [ 48.997990][ T99] usb 1-1: config 64 interface 155 has no altsetting 0 [ 48.999557][ T99] usb 1-1: config 64 interface 243 has no altsetting 0 [ 49.151989][ T99] usb 1-1: New USB device found, idVendor=083a, idProduct=4506, bcdDevice=6d.7d [ 49.154159][ T99] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.156157][ T99] usb 1-1: Product: syz [ 49.157097][ T99] usb 1-1: Manufacturer: syz [ 49.158202][ T99] usb 1-1: SerialNumber: syz [ 49.462202][ T99] ------------[ cut here ]------------ [ 49.463601][ T99] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 49.465168][ T99] WARNING: CPU: 0 PID: 99 at drivers/usb/core/urb.c:505 usb_submit_urb+0x594/0x9b4 [ 49.467450][ T99] Modules linked in: [ 49.468336][ T99] CPU: 0 PID: 99 Comm: kworker/0:2 Tainted: G W 6.1.58-syzkaller #0 [ 49.470569][ T99] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 49.472981][ T99] Workqueue: usb_hub_wq hub_event [ 49.474239][ T99] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 49.476188][ T99] pc : usb_submit_urb+0x594/0x9b4 [ 49.477444][ T99] lr : usb_submit_urb+0x594/0x9b4 [ 49.478688][ T99] sp : ffff8000127a3430 [ 49.479798][ T99] x29: ffff8000127a3440 x28: ffff0000d1909800 x27: ffff0000c5532b5c [ 49.481848][ T99] x26: ffff80000d24b9f0 x25: ffff0000d19098a8 x24: ffff0000c7cf2380 [ 49.483795][ T99] x23: ffff80000d2767c8 x22: 0000000000000400 x21: 0000000000000003 [ 49.485738][ T99] x20: 0000000000000a20 x19: ffff0000c5532b00 x18: 0000000090a5b44d [ 49.487829][ T99] x17: 00000000b6b3f8e8 x16: 0000000000000002 x15: 0000000000000000 [ 49.489877][ T99] x14: 0000000000000000 x13: 205d393954202020 x12: ffff80000eaf1000 [ 49.491903][ T99] x11: ff808000080e0e64 x10: 0000000000000000 x9 : c02f36c67736b800 [ 49.493887][ T99] x8 : c02f36c67736b800 x7 : 0000000000000000 x6 : ffff80000bff223c [ 49.495834][ T99] x5 : 0000000000000000 x4 : 0000000000000080 x3 : 0000000000000000 [ 49.497770][ T99] x2 : 0000000000000000 x1 : 0000000100000000 x0 : 0000000000000000 [ 49.499778][ T99] Call trace: [ 49.500542][ T99] usb_submit_urb+0x594/0x9b4 [ 49.501719][ T99] ar5523_submit_rx_cmd+0x74/0xf4 [ 49.503002][ T99] ar5523_probe+0x41c/0xbb8 [ 49.504102][ T99] usb_probe_interface+0x2fc/0x4ac [ 49.505379][ T99] really_probe+0x218/0x61c [ 49.506506][ T99] __driver_probe_device+0xe8/0x1fc [ 49.507769][ T99] driver_probe_device+0x54/0x2f4 [ 49.509014][ T99] __device_attach_driver+0x19c/0x2e4 [ 49.510309][ T99] bus_for_each_drv+0xb4/0x124 [ 49.511548][ T99] __device_attach+0x148/0x270 [ 49.512661][ T99] device_initial_probe+0x24/0x34 [ 49.513855][ T99] bus_probe_device+0x5c/0xf0 [ 49.515018][ T99] device_add+0x754/0x968 [ 49.516104][ T99] usb_set_configuration+0xb0c/0xd18 [ 49.517427][ T99] usb_generic_driver_probe+0x5c/0xe8 [ 49.518726][ T99] usb_probe_device+0xd0/0x180 [ 49.519935][ T99] really_probe+0x218/0x61c [ 49.521054][ T99] __driver_probe_device+0xe8/0x1fc [ 49.522351][ T99] driver_probe_device+0x54/0x2f4 [ 49.523610][ T99] __device_attach_driver+0x19c/0x2e4 [ 49.524983][ T99] bus_for_each_drv+0xb4/0x124 [ 49.526143][ T99] __device_attach+0x148/0x270 [ 49.527332][ T99] device_initial_probe+0x24/0x34 [ 49.528566][ T99] bus_probe_device+0x5c/0xf0 [ 49.529790][ T99] device_add+0x754/0x968 [ 49.530879][ T99] usb_new_device+0x428/0x8a8 [ 49.532082][ T99] hub_event+0x1728/0x2580 [ 49.533139][ T99] process_one_work+0x2d4/0x4e0 [ 49.534335][ T99] worker_thread+0x42c/0x5f8 [ 49.535431][ T99] kthread+0x120/0x14c [ 49.536402][ T99] ret_from_fork+0x10/0x20 [ 49.537463][ T99] ---[ end trace 0000000000000000 ]--- [ 49.538959][ T99] usb 1-1: error -22 when submitting rx urb [ 49.540347][ T99] usb 1-1: Failed to submit rx cmd [ 49.541765][ T99] ar5523: probe of 1-1:64.245 failed with error -22 [ 49.544569][ T99] ------------[ cut here ]------------ [ 49.545905][ T99] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 49.547577][ T99] WARNING: CPU: 0 PID: 99 at drivers/usb/core/urb.c:505 usb_submit_urb+0x594/0x9b4 [ 49.549746][ T99] Modules linked in: [ 49.550683][ T99] CPU: 0 PID: 99 Comm: kworker/0:2 Tainted: G W 6.1.58-syzkaller #0 [ 49.553032][ T99] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 49.555532][ T99] Workqueue: usb_hub_wq hub_event [ 49.556771][ T99] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 49.558763][ T99] pc : usb_submit_urb+0x594/0x9b4 [ 49.559996][ T99] lr : usb_submit_urb+0x594/0x9b4 [ 49.561230][ T99] sp : ffff8000127a3430 [ 49.562211][ T99] x29: ffff8000127a3440 x28: ffff0000d1909800 x27: ffff0000c7712d5c [ 49.564265][ T99] x26: ffff80000d24b9f0 x25: ffff0000d19098a8 x24: ffff0000c7cf2380 [ 49.566213][ T99] x23: ffff80000d2767c8 x22: 0000000000000400 x21: 0000000000000003 [ 49.568271][ T99] x20: 0000000000000a20 x19: ffff0000c7712d00 x18: ffff80000c02d2c4 [ 49.570333][ T99] x17: 0000000000000000 x16: 0000000000000002 x15: 0000000000000000 [ 49.572327][ T99] x14: 0000000000000000 x13: 205d393954202020 x12: ffff80000eaf1000 [ 49.574285][ T99] x11: ff808000080e0e64 x10: 0000000000000000 x9 : c02f36c67736b800 [ 49.576214][ T99] x8 : c02f36c67736b800 x7 : 0000000000000000 x6 : ffff80000bff223c [ 49.578203][ T99] x5 : 0000000000000000 x4 : 0000000000000080 x3 : 0000000000000000 [ 49.580195][ T99] x2 : 0000000000000000 x1 : 0000000100000000 x0 : 0000000000000000 [ 49.582164][ T99] Call trace: [ 49.582923][ T99] usb_submit_urb+0x594/0x9b4 [ 49.584091][ T99] ar5523_submit_rx_cmd+0x74/0xf4 [ 49.585373][ T99] ar5523_probe+0x41c/0xbb8 [ 49.586503][ T99] usb_probe_interface+0x2fc/0x4ac [ 49.587774][ T99] really_probe+0x218/0x61c [ 49.588934][ T99] __driver_probe_device+0xe8/0x1fc [ 49.590206][ T99] driver_probe_device+0x54/0x2f4 [ 49.591453][ T99] __device_attach_driver+0x19c/0x2e4 [ 49.592738][ T99] bus_for_each_drv+0xb4/0x124 [ 49.593925][ T99] __device_attach+0x148/0x270 [ 49.595075][ T99] device_initial_probe+0x24/0x34 [ 49.596301][ T99] bus_probe_device+0x5c/0xf0 [ 49.597402][ T99] device_add+0x754/0x968 [ 49.598525][ T99] usb_set_configuration+0xb0c/0xd18 [ 49.599833][ T99] usb_generic_driver_probe+0x5c/0xe8 [ 49.601207][ T99] usb_probe_device+0xd0/0x180 [ 49.602413][ T99] really_probe+0x218/0x61c [ 49.603520][ T99] __driver_probe_device+0xe8/0x1fc [ 49.604775][ T99] driver_probe_device+0x54/0x2f4 [ 49.606033][ T99] __device_attach_driver+0x19c/0x2e4 [ 49.607306][ T99] bus_for_each_drv+0xb4/0x124 [ 49.608484][ T99] __device_attach+0x148/0x270 [ 49.609685][ T99] device_initial_probe+0x24/0x34 [ 49.610889][ T99] bus_probe_device+0x5c/0xf0 [ 49.612067][ T99] device_add+0x754/0x968 [ 49.613158][ T99] usb_new_device+0x428/0x8a8 [ 49.614300][ T99] hub_event+0x1728/0x2580 [ 49.615372][ T99] process_one_work+0x2d4/0x4e0 [ 49.616604][ T99] worker_thread+0x42c/0x5f8 [ 49.617767][ T99] kthread+0x120/0x14c [ 49.618697][ T99] ret_from_fork+0x10/0x20 [ 49.619827][ T99] ---[ end trace 0000000000000000 ]--- [ 49.621180][ T99] usb 1-1: error -22 when submitting rx urb [ 49.622641][ T99] usb 1-1: Failed to submit rx cmd [ 49.624009][ T99] ar5523: probe of 1-1:64.155 failed with error -22 [ 49.662305][ T99] ------------[ cut here ]------------ [ 49.663680][ T99] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 49.665317][ T99] WARNING: CPU: 0 PID: 99 at drivers/usb/core/urb.c:505 usb_submit_urb+0x594/0x9b4 [ 49.667429][ T99] Modules linked in: [ 49.668320][ T99] CPU: 0 PID: 99 Comm: kworker/0:2 Tainted: G W 6.1.58-syzkaller #0 [ 49.670561][ T99] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 49.673089][ T99] Workqueue: usb_hub_wq hub_event [ 49.674349][ T99] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 49.676294][ T99] pc : usb_submit_urb+0x594/0x9b4 [ 49.677517][ T99] lr : usb_submit_urb+0x594/0x9b4 [ 49.678751][ T99] sp : ffff8000127a3430 [ 49.679757][ T99] x29: ffff8000127a3440 x28: ffff0000d1909800 x27: ffff0000c5532b5c [ 49.681703][ T99] x26: ffff80000d24b9f0 x25: ffff0000d19098a8 x24: ffff0000c7cf2380 [ 49.683664][ T99] x23: ffff80000d2767c8 x22: 0000000000000400 x21: 0000000000000003 [ 49.685711][ T99] x20: 0000000000000a20 x19: ffff0000c5532b00 x18: 0000000000000000 [ 49.687681][ T99] x17: 0000000000000000 x16: 0000000000000002 x15: 0000000000000000 [ 49.689737][ T99] x14: 0000000000000000 x13: 205d393954202020 x12: ffff80000eaf1000 [ 49.691766][ T99] x11: ff808000080e0e64 x10: 0000000000000000 x9 : c02f36c67736b800 [ 49.693716][ T99] x8 : c02f36c67736b800 x7 : 0000000000000000 x6 : ffff80000bff223c [ 49.695697][ T99] x5 : 0000000000000000 x4 : 0000000000000080 x3 : 0000000000000000 [ 49.697637][ T99] x2 : 0000000000000000 x1 : 0000000100000000 x0 : 0000000000000000 [ 49.699680][ T99] Call trace: [ 49.700469][ T99] usb_submit_urb+0x594/0x9b4 [ 49.701604][ T99] ar5523_submit_rx_cmd+0x74/0xf4 [ 49.702894][ T99] ar5523_probe+0x41c/0xbb8 [ 49.703988][ T99] usb_probe_interface+0x2fc/0x4ac [ 49.705299][ T99] really_probe+0x218/0x61c [ 49.706452][ T99] __driver_probe_device+0xe8/0x1fc [ 49.707721][ T99] driver_probe_device+0x54/0x2f4 [ 49.708921][ T99] __device_attach_driver+0x19c/0x2e4 [ 49.710281][ T99] bus_for_each_drv+0xb4/0x124 [ 49.711436][ T99] __device_attach+0x148/0x270 [ 49.712587][ T99] device_initial_probe+0x24/0x34 [ 49.713831][ T99] bus_probe_device+0x5c/0xf0 [ 49.715078][ T99] device_add+0x754/0x968 [ 49.716157][ T99] usb_set_configuration+0xb0c/0xd18 [ 49.717470][ T99] usb_generic_driver_probe+0x5c/0xe8 [ 49.718859][ T99] usb_probe_device+0xd0/0x180 [ 49.720058][ T99] really_probe+0x218/0x61c [ 49.721208][ T99] __driver_probe_device+0xe8/0x1fc [ 49.722524][ T99] driver_probe_device+0x54/0x2f4 [ 49.723792][ T99] __device_attach_driver+0x19c/0x2e4 [ 49.725068][ T99] bus_for_each_drv+0xb4/0x124 [ 49.726224][ T99] __device_attach+0x148/0x270 [ 49.727430][ T99] device_initial_probe+0x24/0x34 [ 49.728651][ T99] bus_probe_device+0x5c/0xf0 [ 49.729756][ T99] device_add+0x754/0x968 [ 49.730830][ T99] usb_new_device+0x428/0x8a8 [ 49.731946][ T99] hub_event+0x1728/0x2580 [ 49.732961][ T99] process_one_work+0x2d4/0x4e0 [ 49.734181][ T99] worker_thread+0x42c/0x5f8 [ 49.735344][ T99] kthread+0x120/0x14c [ 49.736304][ T99] ret_from_fork+0x10/0x20 [ 49.737350][ T99] ---[ end trace 0000000000000000 ]--- [ 49.738735][ T99] usb 1-1: error -22 when submitting rx urb [ 49.740288][ T99] usb 1-1: Failed to submit rx cmd [ 49.741540][ T99] ar5523: probe of 1-1:64.243 failed with error -22 [ 49.746240][ T99] usb 1-1: USB disconnect, device number 7 2023/10/17 19:41:37 executed programs: 6 [ 50.211932][ T99] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 50.451911][ T99] usb 1-1: Using ep0 maxpacket: 32 [ 50.571992][ T99] usb 1-1: config 64 has an invalid interface number: 245 but max is 2 [ 50.574087][ T99] usb 1-1: config 64 has an invalid interface number: 155 but max is 2 [ 50.576162][ T99] usb 1-1: config 64 contains an unexpected descriptor of type 0x2, skipping [ 50.578431][ T99] usb 1-1: config 64 contains an unexpected descriptor of type 0x1, skipping [ 50.580574][ T99] usb 1-1: config 64 has an invalid interface number: 243 but max is 2 [ 50.582649][ T99] usb 1-1: config 64 has no interface number 0 [ 50.584228][ T99] usb 1-1: config 64 has no interface number 1 [ 50.585611][ T99] usb 1-1: config 64 has no interface number 2 [ 50.587064][ T99] usb 1-1: config 64 interface 245 altsetting 7 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 50.589586][ T99] usb 1-1: config 64 interface 245 altsetting 7 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 50.592502][ T99] usb 1-1: config 64 interface 245 altsetting 7 has an invalid endpoint descriptor of length 2, skipping [ 50.595161][ T99] usb 1-1: config 64 interface 245 altsetting 7 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 50.598471][ T99] usb 1-1: config 64 interface 155 altsetting 1 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 50.601216][ T99] usb 1-1: config 64 interface 155 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 50.604100][ T99] usb 1-1: config 64 interface 155 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 50.606745][ T99] usb 1-1: config 64 interface 155 altsetting 1 endpoint 0xA has invalid maxpacket 72, setting to 64 [ 50.609497][ T99] usb 1-1: config 64 interface 155 altsetting 1 endpoint 0x81 has an invalid bInterval 139, changing to 11 [ 50.612209][ T99] usb 1-1: config 64 interface 155 altsetting 1 endpoint 0x81 has invalid maxpacket 18251, setting to 1024 [ 50.614973][ T99] usb 1-1: config 64 interface 155 altsetting 1 has a duplicate endpoint with address 0xA, skipping [ 50.617621][ T99] usb 1-1: config 64 interface 155 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 50.620182][ T99] usb 1-1: config 64 interface 155 altsetting 1 has 9 endpoint descriptors, different from the interface descriptor's value: 8 [ 50.623743][ T99] usb 1-1: config 64 interface 243 altsetting 31 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 50.626471][ T99] usb 1-1: config 64 interface 245 has no altsetting 0 [ 50.628291][ T99] usb 1-1: config 64 interface 155 has no altsetting 0 [ 50.629904][ T99] usb 1-1: config 64 interface 243 has no altsetting 0 [ 50.781960][ T99] usb 1-1: New USB device found, idVendor=083a, idProduct=4506, bcdDevice=6d.7d [ 50.784251][ T99] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.786115][ T99] usb 1-1: Product: syz [ 50.787120][ T99] usb 1-1: Manufacturer: syz [ 50.788237][ T99] usb 1-1: SerialNumber: syz