Warning: Permanently added '10.128.10.59' (ED25519) to the list of known hosts. 1970/01/01 00:01:30 ignoring optional flag "sandboxArg"="0" 1970/01/01 00:01:31 parsed 1 programs [ 95.287742][ T6955] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 106.935766][ T147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.935820][ T147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.947381][ T147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.947437][ T147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.162866][ T6088] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 107.163926][ T6088] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 107.164419][ T6088] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 107.165208][ T6088] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 107.165647][ T6088] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 107.395493][ T7028] chnl_net:caif_netlink_parms(): no params data found [ 107.578733][ T7028] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.578840][ T7028] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.578937][ T7028] bridge_slave_0: entered allmulticast mode [ 107.579765][ T7028] bridge_slave_0: entered promiscuous mode [ 107.581598][ T7028] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.581669][ T7028] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.581763][ T7028] bridge_slave_1: entered allmulticast mode [ 107.582582][ T7028] bridge_slave_1: entered promiscuous mode [ 107.601103][ T7028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.602596][ T7028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.682478][ T7028] team0: Port device team_slave_0 added [ 107.684107][ T7028] team0: Port device team_slave_1 added [ 107.698135][ T7028] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.698186][ T7028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.698466][ T7028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.699484][ T7028] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.699508][ T7028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.699537][ T7028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.899612][ T7028] hsr_slave_0: entered promiscuous mode [ 107.900079][ T7028] hsr_slave_1: entered promiscuous mode [ 108.711067][ T7028] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 108.713479][ T7028] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 108.717607][ T7028] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 108.724803][ T7028] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 108.768854][ T7028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.776953][ T7028] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.779750][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.779845][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.795786][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.795868][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.900786][ T7028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.920018][ T7028] veth0_vlan: entered promiscuous mode [ 108.928014][ T7028] veth1_vlan: entered promiscuous mode [ 108.944479][ T7028] veth0_macvtap: entered promiscuous mode [ 108.948373][ T7028] veth1_macvtap: entered promiscuous mode [ 108.962102][ T7028] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.968697][ T7028] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.974476][ T7028] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.976945][ T7028] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.979359][ T7028] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.982346][ T7028] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.305828][ T2243] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.383714][ T2243] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.457752][ T2243] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.533122][ T2243] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:01:49 executed programs: 0 [ 110.286389][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 110.289324][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 110.292742][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 110.295886][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 110.298353][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 110.408982][ T7201] chnl_net:caif_netlink_parms(): no params data found [ 110.461200][ T7201] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.461334][ T7201] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.461446][ T7201] bridge_slave_0: entered allmulticast mode [ 110.462269][ T7201] bridge_slave_0: entered promiscuous mode [ 110.463692][ T7201] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.463764][ T7201] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.463867][ T7201] bridge_slave_1: entered allmulticast mode [ 110.464716][ T7201] bridge_slave_1: entered promiscuous mode [ 110.492684][ T7201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.497180][ T7201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.516205][ T7201] team0: Port device team_slave_0 added [ 110.519263][ T7201] team0: Port device team_slave_1 added [ 110.537416][ T7201] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.539360][ T7201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.549657][ T7201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.563788][ T7201] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.563837][ T7201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.563886][ T7201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.603582][ T7201] hsr_slave_0: entered promiscuous mode [ 110.605878][ T7201] hsr_slave_1: entered promiscuous mode [ 110.608133][ T7201] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.612131][ T7201] Cannot create hsr debugfs directory [ 112.204298][ T2243] bridge_slave_1: left allmulticast mode [ 112.204371][ T2243] bridge_slave_1: left promiscuous mode [ 112.204503][ T2243] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.214240][ T2243] bridge_slave_0: left allmulticast mode [ 112.214325][ T2243] bridge_slave_0: left promiscuous mode [ 112.214441][ T2243] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.310662][ T52] Bluetooth: hci0: command tx timeout [ 113.774747][ T2243] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.833046][ T2243] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.882231][ T2243] bond0 (unregistering): Released all slaves [ 113.949601][ T2243] hsr_slave_0: left promiscuous mode [ 113.951346][ T2243] hsr_slave_1: left promiscuous mode [ 113.951773][ T2243] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.951832][ T2243] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.957827][ T2243] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.959858][ T2243] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.975442][ T2243] veth1_macvtap: left promiscuous mode [ 113.977075][ T2243] veth0_macvtap: left promiscuous mode [ 113.978718][ T2243] veth1_vlan: left promiscuous mode [ 113.980210][ T2243] veth0_vlan: left promiscuous mode [ 114.390522][ T52] Bluetooth: hci0: command tx timeout [ 115.862724][ T2243] team0 (unregistering): Port device team_slave_1 removed [ 116.041602][ T2243] team0 (unregistering): Port device team_slave_0 removed [ 116.470564][ T52] Bluetooth: hci0: command tx timeout [ 118.560603][ T52] Bluetooth: hci0: command tx timeout [ 118.840094][ T7201] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 118.845510][ T7201] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 118.849097][ T7201] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 118.893724][ T7201] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 118.961595][ T7201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.120473][ T7201] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.124947][ T147] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.125026][ T147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.138921][ T147] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.138996][ T147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.174560][ T7201] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 119.464410][ T7201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.483116][ T7201] veth0_vlan: entered promiscuous mode [ 119.486348][ T7201] veth1_vlan: entered promiscuous mode [ 119.496473][ T7201] veth0_macvtap: entered promiscuous mode [ 119.502804][ T7201] veth1_macvtap: entered promiscuous mode [ 119.513740][ T7201] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.517843][ T7201] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.524859][ T7201] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.527373][ T7201] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.532403][ T7201] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.534920][ T7201] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.583430][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.583487][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.597342][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.597395][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 1970/01/01 00:01:59 executed programs: 2 [ 119.915455][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 120.060531][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 120.063790][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 120.066294][ T9] usb 1-1: config 7 has an invalid interface number: 255 but max is 2 [ 120.066367][ T9] usb 1-1: config 7 has an invalid interface number: 150 but max is 2 [ 120.066392][ T9] usb 1-1: config 7 has an invalid interface number: 100 but max is 2 [ 120.066416][ T9] usb 1-1: config 7 has no interface number 0 [ 120.066438][ T9] usb 1-1: config 7 has no interface number 1 [ 120.066460][ T9] usb 1-1: config 7 has no interface number 2 [ 120.066619][ T9] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 120.066650][ T9] usb 1-1: config 7 interface 255 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 120.066676][ T9] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 120.066704][ T9] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0xE has invalid wMaxPacketSize 0 [ 120.066729][ T9] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0x1 has an invalid bInterval 128, changing to 11 [ 120.066758][ T9] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 120.066785][ T9] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0xD has invalid maxpacket 1072, setting to 64 [ 120.066823][ T9] usb 1-1: config 7 interface 255 altsetting 4 has a duplicate endpoint with address 0xB, skipping [ 120.066849][ T9] usb 1-1: config 7 interface 255 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 1024 [ 120.066875][ T9] usb 1-1: config 7 interface 255 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 120.066908][ T9] usb 1-1: config 7 interface 100 altsetting 2 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 120.066935][ T9] usb 1-1: config 7 interface 100 altsetting 2 has a duplicate endpoint with address 0x6, skipping [ 120.066961][ T9] usb 1-1: config 7 interface 255 has no altsetting 0 [ 120.066984][ T9] usb 1-1: config 7 interface 150 has no altsetting 0 [ 120.067006][ T9] usb 1-1: config 7 interface 100 has no altsetting 0 [ 120.069723][ T9] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=5d.a6 [ 120.069757][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.069780][ T9] usb 1-1: Product: syz [ 120.069801][ T9] usb 1-1: Manufacturer: syz [ 120.069822][ T9] usb 1-1: SerialNumber: syz [ 120.287038][ T ** replaying previous printk message ** [ 120.287038][ T9] ------------[ cut here ]------------ [ 120.287127][ T9] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 120.287642][ T9] WARNING: CPU: 0 PID: 9 at drivers/usb/core/urb.c:504 usb_submit_urb+0xa24/0x1470 [ 120.294172][ T9] Modules linked in: [ 120.295288][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted 6.16.0-rc1-syzkaller-g39dfc971e42d #0 PREEMPT [ 120.298236][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 120.300991][ T9] Workqueue: usb_hub_wq hub_event [ 120.302444][ T9] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 120.304572][ T9] pc : usb_submit_urb+0xa24/0x1470 [ 120.306001][ T9] lr : usb_submit_urb+0xa24/0x1470 [ 120.307451][ T9] sp : ffff800097a168c0 [ 120.308603][ T9] x29: ffff800097a16900 x28: 0000000000000000 x27: ffff80008c901148 [ 120.310849][ T9] x26: ffff0000c5e5f940 x25: ffff80008c901140 x24: 0000000000000001 [ 120.313052][ T9] x23: ffff80008c907ec0 x22: dfff800000000000 x21: 0000000000000002 [ 120.315263][ T9] x20: 0000000000000c00 x19: ffff0000c5a43300 x18: 00000000ffffffff [ 120.317459][ T9] x17: 0000000000000000 x16: ffff80008aec8e2c x15: 0000000000000001 [ 120.319654][ T9] x14: 1fffe000337dc8e2 x13: 0000000000000000 x12: 0000000000000000 [ 120.321838][ T9] x11: ffff6000337dc8e3 x10: 0000000000ff0100 x9 : 52bbb604760cf500 [ 120.324147][ T9] x8 : 52bbb604760cf500 x7 : 0000000000000001 x6 : 0000000000000001 [ 120.326466][ T9] x5 : ffff800097a16218 x4 : ffff80008f727060 x3 : ffff8000807c0518 [ 120.328794][ T9] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000 [ 120.330992][ T9] Call trace: [ 120.331915][ T9] usb_submit_urb+0xa24/0x1470 (P) [ 120.333357][ T9] usb_start_wait_urb+0xe8/0x3bc [ 120.334712][ T9] usb_bulk_msg+0x2e4/0x3e4 [ 120.336033][ T9] amradio_set_mute+0x1a4/0x3f4 [ 120.337353][ T9] usb_amradio_probe+0x3d4/0x700 [ 120.338706][ T9] usb_probe_interface+0x584/0xa44 [ 120.340123][ T9] really_probe+0x394/0x910 [ 120.341484][ T9] __driver_probe_device+0x180/0x2d4 [ 120.342992][ T9] driver_probe_device+0x78/0x330 [ 120.344410][ T9] __device_attach_driver+0x290/0x4e0 [ 120.345985][ T9] bus_for_each_drv+0x220/0x2b4 [ 120.347298][ T9] __device_attach+0x26c/0x388 [ 120.348641][ T9] device_initial_probe+0x24/0x34 [ 120.350059][ T9] bus_probe_device+0x178/0x240 [ 120.351396][ T9] device_add+0x71c/0xa60 [ 120.352570][ T9] usb_set_configuration+0x1640/0x1bac [ 120.354085][ T9] usb_generic_driver_probe+0x8c/0x144 [ 120.355550][ T9] usb_probe_device+0x1a4/0x348 [ 120.356921][ T9] really_probe+0x394/0x910 [ 120.358169][ T9] __driver_probe_device+0x180/0x2d4 [ 120.359661][ T9] driver_probe_device+0x78/0x330 [ 120.361035][ T9] __device_attach_driver+0x290/0x4e0 [ 120.362587][ T9] bus_for_each_drv+0x220/0x2b4 [ 120.363951][ T9] __device_attach+0x26c/0x388 [ 120.365267][ T9] device_initial_probe+0x24/0x34 [ 120.366740][ T9] bus_probe_device+0x178/0x240 [ 120.368088][ T9] device_add+0x71c/0xa60 [ 120.369321][ T9] usb_new_device+0x7f0/0x1220 [ 120.370635][ T9] hub_event+0x2148/0x3cf0 [ 120.371815][ T9] process_one_work+0x7e8/0x155c [ 120.373193][ T9] worker_thread+0x958/0xed8 [ 120.374476][ T9] kthread+0x5fc/0x75c [ 120.375667][ T9] ret_from_fork+0x10/0x20 [ 120.376873][ T9] irq event stamp: 113632 [ 120.378089][ T9] hardirqs last enabled at (113631): [] __console_unlock+0x70/0xc4 [ 120.380707][ T9] hardirqs last disabled at (113632): [] el1_dbg+0x24/0x80 [ 120.383088][ T9] softirqs last enabled at (112752): [] handle_softirqs+0xaf8/0xc88 [ 120.385772][ T9] softirqs last disabled at (112743): [] __do_softirq+0x14/0x20 [ 120.388323][ T9] ---[ end trace 0000000000000000 ]--- [ 120.390838][ T9] (null): radio-mr800 - initialization failed [ 120.390965][ T9] radio-mr800 1-1:7.255: probe with driver radio-mr800 failed with error -71 [ 120.391306][ T9] usbhid 1-1:7.255: couldn't find an input interrupt endpoint [ 120.408948][ T9] usb 1-1: USB disconnect, device number 2 [ 121.031575][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 121.181025][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 121.183477][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 121.184635][ T9] usb 1-1: config 7 has an invalid interface number: 255 but max is 2 [ 121.184667][ T9] usb 1-1: config 7 has an invalid interface number: 150 but max is 2 [ 121.184691][ T9] usb 1-1: config 7 has an invalid interface number: 100 but max is 2 [ 121.184715][ T9] usb 1-1: config 7 has no interface number 0 [ 121.184737][ T9] usb 1-1: config 7 has no interface number 1 [ 121.184758][ T9] usb 1-1: config 7 has no interface number 2 [ 121.184800][ T9] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 121.184828][ T9] usb 1-1: config 7 interface 255 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 121.184854][ T9] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 121.184881][ T9] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0xE has invalid wMaxPacketSize 0 [ 121.184907][ T9] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0x1 has an invalid bInterval 128, changing to 11 [ 121.184935][ T9] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 121.184962][ T9] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0xD has invalid maxpacket 1072, setting to 64 [ 121.184990][ T9] usb 1-1: config 7 interface 255 altsetting 4 has a duplicate endpoint with address 0xB, skipping [ 121.185015][ T9] usb 1-1: config 7 interface 255 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 1024 [ 121.185041][ T9] usb 1-1: config 7 interface 255 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 121.185068][ T9] usb 1-1: config 7 interface 100 altsetting 2 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 121.185096][ T9] usb 1-1: config 7 interface 100 altsetting 2 has a duplicate endpoint with address 0x6, skipping [ 121.185121][ T9] usb 1-1: config 7 interface 255 has no altsetting 0 [ 121.185143][ T9] usb 1-1: config 7 interface 150 has no altsetting 0 [ 121.185166][ T9] usb 1-1: config 7 interface 100 has no altsetting 0 [ 121.187901][ T9] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=5d.a6 [ 121.187936][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.187960][ T9] usb 1-1: Product: syz [ 121.187987][ T9] usb 1-1: Manufacturer: syz [ 121.188007][ T9] usb 1-1: SerialNumber: syz [ 121.397785][ T ** replaying previous printk message ** [ 121.397785][ T9] ------------[ cut here ]------------ [ 121.397857][ T9] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 121.398366][ T9] WARNING: CPU: 0 PID: 9 at drivers/usb/core/urb.c:504 usb_submit_urb+0xa24/0x1470 [ 121.404912][ T9] Modules linked in: [ 121.405977][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Tainted: G W 6.16.0-rc1-syzkaller-g39dfc971e42d #0 PREEMPT [ 121.409303][ T9] Tainted: [W]=WARN [ 121.410356][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 121.413115][ T9] Workqueue: usb_hub_wq hub_event [ 121.414500][ T9] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 121.416651][ T9] pc : usb_submit_urb+0xa24/0x1470 [ 121.418051][ T9] lr : usb_submit_urb+0xa24/0x1470 [ 121.419452][ T9] sp : ffff800097a168c0 [ 121.420640][ T9] x29: ffff800097a16900 x28: 0000000000000000 x27: ffff80008c901148 [ 121.422853][ T9] x26: ffff0000cbab0c80 x25: ffff80008c901140 x24: 0000000000000001 [ 121.425044][ T9] x23: ffff80008c907ec0 x22: dfff800000000000 x21: 0000000000000002 [ 121.427201][ T9] x20: 0000000000000c00 x19: ffff0000c9313d00 x18: 00000000ffffffff [ 121.429355][ T9] x17: 0000000000000000 x16: ffff80008aec8e2c x15: 0000000000000001 [ 121.431499][ T9] x14: 1fffe000337dc8e2 x13: 0000000000000000 x12: 0000000000000000 [ 121.433742][ T9] x11: ffff6000337dc8e3 x10: 0000000000ff0100 x9 : 52bbb604760cf500 [ 121.435917][ T9] x8 : 52bbb604760cf500 x7 : 0000000000000001 x6 : 0000000000000001 [ 121.438157][ T9] x5 : ffff800097a16218 x4 : ffff80008f727060 x3 : ffff8000807c0518 [ 121.440404][ T9] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000 [ 121.442658][ T9] Call trace: [ 121.443523][ T9] usb_submit_urb+0xa24/0x1470 (P) [ 121.444878][ T9] usb_start_wait_urb+0xe8/0x3bc [ 121.446196][ T9] usb_bulk_msg+0x2e4/0x3e4 [ 121.447368][ T9] amradio_set_mute+0x1a4/0x3f4 [ 121.448697][ T9] usb_amradio_probe+0x3d4/0x700 [ 121.450015][ T9] usb_probe_interface+0x584/0xa44 [ 121.451407][ T9] really_probe+0x394/0x910 [ 121.452668][ T9] __driver_probe_device+0x180/0x2d4 [ 121.454109][ T9] driver_probe_device+0x78/0x330 [ 121.455465][ T9] __device_attach_driver+0x290/0x4e0 [ 121.457005][ T9] bus_for_each_drv+0x220/0x2b4 [ 121.458365][ T9] __device_attach+0x26c/0x388 [ 121.459702][ T9] device_initial_probe+0x24/0x34 [ 121.461066][ T9] bus_probe_device+0x178/0x240 [ 121.462405][ T9] device_add+0x71c/0xa60 [ 121.463560][ T9] usb_set_configuration+0x1640/0x1bac [ 121.465049][ T9] usb_generic_driver_probe+0x8c/0x144 [ 121.466553][ T9] usb_probe_device+0x1a4/0x348 [ 121.467918][ T9] really_probe+0x394/0x910 [ 121.469142][ T9] __driver_probe_device+0x180/0x2d4 [ 121.470614][ T9] driver_probe_device+0x78/0x330 [ 121.472007][ T9] __device_attach_driver+0x290/0x4e0 [ 121.473545][ T9] bus_for_each_drv+0x220/0x2b4 [ 121.474853][ T9] __device_attach+0x26c/0x388 [ 121.476118][ T9] device_initial_probe+0x24/0x34 [ 121.477493][ T9] bus_probe_device+0x178/0x240 [ 121.478822][ T9] device_add+0x71c/0xa60 [ 121.479970][ T9] usb_new_device+0x7f0/0x1220 [ 121.481306][ T9] hub_event+0x2148/0x3cf0 [ 121.482516][ T9] process_one_work+0x7e8/0x155c [ 121.483850][ T9] worker_thread+0x958/0xed8 [ 121.485125][ T9] kthread+0x5fc/0x75c [ 121.486231][ T9] ret_from_fork+0x10/0x20 [ 121.487474][ T9] irq event stamp: 122234 [ 121.488621][ T9] hardirqs last enabled at (122233): [] __console_unlock+0x70/0xc4 [ 121.491215][ T9] hardirqs last disabled at (122234): [] el1_dbg+0x24/0x80 [ 121.493619][ T9] softirqs last enabled at (121262): [] handle_softirqs+0xaf8/0xc88 [ 121.496337][ T9] softirqs last disabled at (121253): [] __do_softirq+0x14/0x20 [ 121.498851][ T9] ---[ end trace 0000000000000000 ]--- [ 121.501104][ T9] (null): radio-mr800 - initialization failed [ 121.501227][ T9] radio-mr800 1-1:7.255: probe with driver radio-mr800 failed with error -71 [ 121.501520][ T9] usbhid 1-1:7.255: couldn't find an input interrupt endpoint [ 121.512361][ T9] usb 1-1: USB disconnect, device number 3 [ 122.140600][ T24] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 122.290486][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 122.292450][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 122.293560][ T24] usb 1-1: config 7 has an invalid interface number: 255 but max is 2 [ 122.293593][ T24] usb 1-1: config 7 has an invalid interface number: 150 but max is 2 [ 122.293618][ T24] usb 1-1: config 7 has an invalid interface number: 100 but max is 2 [ 122.293642][ T24] usb 1-1: config 7 has no interface number 0 [ 122.293664][ T24] usb 1-1: config 7 has no interface number 1 [ 122.293686][ T24] usb 1-1: config 7 has no interface number 2 [ 122.294747][ T24] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 122.294779][ T24] usb 1-1: config 7 interface 255 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 122.294805][ T24] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 122.294833][ T24] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0xE has invalid wMaxPacketSize 0 [ 122.294858][ T24] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0x1 has an invalid bInterval 128, changing to 11 [ 122.294886][ T24] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 122.294914][ T24] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0xD has invalid maxpacket 1072, setting to 64 [ 122.294941][ T24] usb 1-1: config 7 interface 255 altsetting 4 has a duplicate endpoint with address 0xB, skipping [ 122.294967][ T24] usb 1-1: config 7 interface 255 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 1024 [ 122.294993][ T24] usb 1-1: config 7 interface 255 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 122.295020][ T24] usb 1-1: config 7 interface 100 altsetting 2 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 122.295048][ T24] usb 1-1: config 7 interface 100 altsetting 2 has a duplicate endpoint with address 0x6, skipping [ 122.295073][ T24] usb 1-1: config 7 interface 255 has no altsetting 0 [ 122.295096][ T24] usb 1-1: config 7 interface 150 has no altsetting 0 [ 122.295119][ T24] usb 1-1: config 7 interface 100 has no altsetting 0 [ 122.296841][ T24] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=5d.a6 [ 122.296872][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.296896][ T24] usb 1-1: Product: syz [ 122.296917][ T24] usb 1-1: Manufacturer: syz [ 122.296937][ T24] usb 1-1: SerialNumber: syz [ 122.507949][ T24] ------------[ cut here ]------------ [ 12 ** replaying previous printk message ** [ 122.508003][ T24] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 122.509694][ T24] WARNING: CPU: 1 PID: 24 at drivers/usb/core/urb.c:504 usb_submit_urb+0xa24/0x1470 [ 122.514901][ T24] Modules linked in: [ 122.515968][ T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Tainted: G W 6.16.0-rc1-syzkaller-g39dfc971e42d #0 PREEMPT [ 122.519374][ T24] Tainted: [W]=WARN [ 122.520389][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 122.523106][ T24] Workqueue: usb_hub_wq hub_event [ 122.524501][ T24] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 122.526595][ T24] pc : usb_submit_urb+0xa24/0x1470 [ 122.527966][ T24] lr : usb_submit_urb+0xa24/0x1470 [ 122.529353][ T24] sp : ffff800097b168c0 [ 122.530461][ T24] x29: ffff800097b16900 x28: 0000000000000000 x27: ffff80008c901148 [ 122.532604][ T24] x26: ffff0000cd1c88c0 x25: ffff80008c901140 x24: 0000000000000001 [ 122.534782][ T24] x23: ffff80008c907ec0 x22: dfff800000000000 x21: 0000000000000002 [ 122.536968][ T24] x20: 0000000000000c00 x19: ffff0000cfb89700 x18: 1fffe000337e1476 [ 122.539122][ T24] x17: ffff80008f62e000 x16: ffff80008aec8e2c x15: 0000000000000001 [ 122.541336][ T24] x14: 1fffe000337e4220 x13: 0000000000000000 x12: 0000000000000000 [ 122.543548][ T24] x11: ffff80009311ec08 x10: 0000000000000003 x9 : 6a1c3ce180231500 [ 122.545774][ T24] x8 : 6a1c3ce180231500 x7 : ffff800080489294 x6 : 0000000000000000 [ 122.547989][ T24] x5 : 0000000000000001 x4 : 0000000000000001 x3 : 0000000000000010 [ 122.550191][ T24] x2 : 0000000000000006 x1 : ffff80008b507fe0 x0 : 0000000000000001 [ 122.552427][ T24] Call trace: [ 122.553354][ T24] usb_submit_urb+0xa24/0x1470 (P) [ 122.554805][ T24] usb_start_wait_urb+0xe8/0x3bc [ 122.556167][ T24] usb_bulk_msg+0x2e4/0x3e4 [ 122.557476][ T24] amradio_set_mute+0x1a4/0x3f4 [ 122.558791][ T24] usb_amradio_probe+0x3d4/0x700 [ 122.560213][ T24] usb_probe_interface+0x584/0xa44 [ 122.561669][ T24] really_probe+0x394/0x910 [ 122.562986][ T24] __driver_probe_device+0x180/0x2d4 [ 122.564412][ T24] driver_probe_device+0x78/0x330 [ 122.565807][ T24] __device_attach_driver+0x290/0x4e0 [ 122.567336][ T24] bus_for_each_drv+0x220/0x2b4 [ 122.568697][ T24] __device_attach+0x26c/0x388 [ 122.569954][ T24] device_initial_probe+0x24/0x34 [ 122.571370][ T24] bus_probe_device+0x178/0x240 [ 122.572736][ T24] device_add+0x71c/0xa60 [ 122.573946][ T24] usb_set_configuration+0x1640/0x1bac [ 122.575500][ T24] usb_generic_driver_probe+0x8c/0x144 [ 122.576995][ T24] usb_probe_device+0x1a4/0x348 [ 122.578354][ T24] really_probe+0x394/0x910 [ 122.579607][ T24] __driver_probe_device+0x180/0x2d4 [ 122.581018][ T24] driver_probe_device+0x78/0x330 [ 122.582418][ T24] __device_attach_driver+0x290/0x4e0 [ 122.583909][ T24] bus_for_each_drv+0x220/0x2b4 [ 122.585272][ T24] __device_attach+0x26c/0x388 [ 122.586568][ T24] device_initial_probe+0x24/0x34 [ 122.587996][ T24] bus_probe_device+0x178/0x240 [ 122.589365][ T24] device_add+0x71c/0xa60 [ 122.590634][ T24] usb_new_device+0x7f0/0x1220 [ 122.591954][ T24] hub_event+0x2148/0x3cf0 [ 122.593243][ T24] process_one_work+0x7e8/0x155c [ 122.594626][ T24] worker_thread+0x958/0xed8 [ 122.595934][ T24] kthread+0x5fc/0x75c [ 122.597111][ T24] ret_from_fork+0x10/0x20 [ 122.598408][ T24] irq event stamp: 91726 [ 122.599618][ T24] hardirqs last enabled at (91725): [] finish_lock_switch+0xb0/0x1c0 [ 122.602234][ T24] hardirqs last disabled at (91726): [] el1_dbg+0x24/0x80 [ 122.604697][ T24] softirqs last enabled at (87264): [] local_bh_enable+0x10/0x34 [ 122.607306][ T24] softirqs last disabled at (87262): [] local_bh_disable+0x10/0x34 [ 122.609843][ T24] ---[ end trace 0000000000000000 ]--- [ 122.614291][ T24] (null): radio-mr800 - initialization failed [ 122.614401][ T24] radio-mr800 1-1:7.255: probe with driver radio-mr800 failed with error -71 [ 122.614660][ T24] usbhid 1-1:7.255: couldn't find an input interrupt endpoint [ 122.630328][ T24] usb 1-1: USB disconnect, device number 4 [ 123.250545][ T6610] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 123.400561][ T6610] usb 1-1: Using ep0 maxpacket: 16 [ 123.403682][ T6610] usb 1-1: unable to get BOS descriptor or descriptor too short [ 123.407549][ T6610] usb 1-1: config 7 has an invalid interface number: 255 but max is 2 [ 123.407595][ T6610] usb 1-1: config 7 has an invalid interface number: 150 but max is 2 [ 123.407620][ T6610] usb 1-1: config 7 has an invalid interface number: 100 but max is 2 [ 123.407644][ T6610] usb 1-1: config 7 has no interface number 0 [ 123.407666][ T6610] usb 1-1: config 7 has no interface number 1 [ 123.407688][ T6610] usb 1-1: config 7 has no interface number 2 [ 123.407720][ T6610] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 123.407748][ T6610] usb 1-1: config 7 interface 255 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 123.407774][ T6610] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 123.407802][ T6610] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0xE has invalid wMaxPacketSize 0 [ 123.407828][ T6610] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0x1 has an invalid bInterval 128, changing to 11 [ 123.407855][ T6610] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 123.407883][ T6610] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0xD has invalid maxpacket 1072, setting to 64 [ 123.407911][ T6610] usb 1-1: config 7 interface 255 altsetting 4 has a duplicate endpoint with address 0xB, skipping [ 123.407936][ T6610] usb 1-1: config 7 interface 255 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 1024 [ 123.407962][ T6610] usb 1-1: config 7 interface 255 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 123.407990][ T6610] usb 1-1: config 7 interface 100 altsetting 2 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 123.408018][ T6610] usb 1-1: config 7 interface 100 altsetting 2 has a duplicate endpoint with address 0x6, skipping [ 123.408048][ T6610] usb 1-1: config 7 interface 255 has no altsetting 0 [ 123.408071][ T6610] usb 1-1: config 7 interface 150 has no altsetting 0 [ 123.408094][ T6610] usb 1-1: config 7 interface 100 has no altsetting 0 [ 123.409580][ T6610] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=5d.a6 [ 123.409611][ T6610] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.409636][ T6610] usb 1-1: Product: syz [ 123.409656][ T6610] usb 1-1: Manufacturer: syz [ 123.409677][ T6610] usb 1-1: SerialNumber: syz [ 123.618886][ T6610 ** replaying previous printk message ** [ 123.618886][ T6610] ------------[ cut here ]------------ [ 123.618950][ T6610] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 123.619463][ T6610] WARNING: CPU: 0 PID: 6610 at drivers/usb/core/urb.c:504 usb_submit_urb+0xa24/0x1470 [ 123.626110][ T6610] Modules linked in: [ 123.627173][ T6610] CPU: 0 UID: 0 PID: 6610 Comm: kworker/0:4 Tainted: G W 6.16.0-rc1-syzkaller-g39dfc971e42d #0 PREEMPT [ 123.630593][ T6610] Tainted: [W]=WARN [ 123.631661][ T6610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 123.634453][ T6610] Workqueue: usb_hub_wq hub_event [ 123.635878][ T6610] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 123.638045][ T6610] pc : usb_submit_urb+0xa24/0x1470 [ 123.639463][ T6610] lr : usb_submit_urb+0xa24/0x1470 [ 123.640866][ T6610] sp : ffff8000a0da68c0 [ 123.642011][ T6610] x29: ffff8000a0da6900 x28: 0000000000000000 x27: ffff80008c901148 [ 123.644231][ T6610] x26: ffff0000c1b8ac20 x25: ffff80008c901140 x24: 0000000000000001 [ 123.646545][ T6610] x23: ffff80008c907ec0 x22: dfff800000000000 x21: 0000000000000002 [ 123.648772][ T6610] x20: 0000000000000c00 x19: ffff0000c983d700 x18: 1fffe000337dc876 [ 123.650985][ T6610] x17: 0000000000000000 x16: ffff80008aec8e2c x15: 0000000000000001 [ 123.653272][ T6610] x14: 1fffe000337dc8e2 x13: 0000000000000000 x12: 0000000000000000 [ 123.655507][ T6610] x11: ffff6000337dc8e3 x10: 0000000000ff0100 x9 : a7aef29f66476b00 [ 123.657786][ T6610] x8 : a7aef29f66476b00 x7 : 0000000000000001 x6 : 0000000000000001 [ 123.660059][ T6610] x5 : ffff8000a0da6218 x4 : ffff80008f727060 x3 : ffff8000807c0518 [ 123.662305][ T6610] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000 [ 123.664634][ T6610] Call trace: [ 123.665556][ T6610] usb_submit_urb+0xa24/0x1470 (P) [ 123.667002][ T6610] usb_start_wait_urb+0xe8/0x3bc [ 123.668406][ T6610] usb_bulk_msg+0x2e4/0x3e4 [ 123.669674][ T6610] amradio_set_mute+0x1a4/0x3f4 [ 123.671036][ T6610] usb_amradio_probe+0x3d4/0x700 [ 123.672454][ T6610] usb_probe_interface+0x584/0xa44 [ 123.673895][ T6610] really_probe+0x394/0x910 [ 123.675200][ T6610] __driver_probe_device+0x180/0x2d4 [ 123.676702][ T6610] driver_probe_device+0x78/0x330 [ 123.678083][ T6610] __device_attach_driver+0x290/0x4e0 [ 123.679604][ T6610] bus_for_each_drv+0x220/0x2b4 [ 123.680981][ T6610] __device_attach+0x26c/0x388 [ 123.682337][ T6610] device_initial_probe+0x24/0x34 [ 123.683745][ T6610] bus_probe_device+0x178/0x240 [ 123.685136][ T6610] device_add+0x71c/0xa60 [ 123.686386][ T6610] usb_set_configuration+0x1640/0x1bac [ 123.687950][ T6610] usb_generic_driver_probe+0x8c/0x144 [ 123.689526][ T6610] usb_probe_device+0x1a4/0x348 [ 123.690968][ T6610] really_probe+0x394/0x910 [ 123.692270][ T6610] __driver_probe_device+0x180/0x2d4 [ 123.693817][ T6610] driver_probe_device+0x78/0x330 [ 123.695230][ T6610] __device_attach_driver+0x290/0x4e0 [ 123.696843][ T6610] bus_for_each_drv+0x220/0x2b4 [ 123.698186][ T6610] __device_attach+0x26c/0x388 [ 123.699504][ T6610] device_initial_probe+0x24/0x34 [ 123.700915][ T6610] bus_probe_device+0x178/0x240 [ 123.702359][ T6610] device_add+0x71c/0xa60 [ 123.703577][ T6610] usb_new_device+0x7f0/0x1220 [ 123.704939][ T6610] hub_event+0x2148/0x3cf0 [ 123.706170][ T6610] process_one_work+0x7e8/0x155c [ 123.707580][ T6610] worker_thread+0x958/0xed8 [ 123.708935][ T6610] kthread+0x5fc/0x75c [ 123.710068][ T6610] ret_from_fork+0x10/0x20 [ 123.711345][ T6610] irq event stamp: 32892 [ 123.712605][ T6610] hardirqs last enabled at (32891): [] __console_unlock+0x70/0xc4 [ 123.715363][ T6610] hardirqs last disabled at (32892): [] el1_dbg+0x24/0x80 [ 123.717875][ T6610] softirqs last enabled at (31032): [] handle_softirqs+0xaf8/0xc88 [ 123.720638][ T6610] softirqs last disabled at (31023): [] __do_softirq+0x14/0x20 [ 123.723226][ T6610] ---[ end trace 0000000000000000 ]--- [ 123.726962][ T6610] (null): radio-mr800 - initialization failed [ 123.727117][ T6610] radio-mr800 1-1:7.255: probe with driver radio-mr800 failed with error -71 [ 123.727433][ T6610] usbhid 1-1:7.255: couldn't find an input interrupt endpoint [ 123.742166][ T6610] usb 1-1: USB disconnect, device number 5 [ 124.381584][ T24] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 124.530566][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 124.534103][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 124.535205][ T24] usb 1-1: config 7 has an invalid interface number: 255 but max is 2 [ 124.535238][ T24] usb 1-1: config 7 has an invalid interface number: 150 but max is 2 [ 124.535274][ T24] usb 1-1: config 7 has an invalid interface number: 100 but max is 2 [ 124.535312][ T24] usb 1-1: config 7 has no interface number 0 [ 124.535334][ T24] usb 1-1: config 7 has no interface number 1 [ 124.535355][ T24] usb 1-1: config 7 has no interface number 2 [ 124.535391][ T24] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 124.535419][ T24] usb 1-1: config 7 interface 255 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 124.535445][ T24] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 124.535473][ T24] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0xE has invalid wMaxPacketSize 0 [ 124.535498][ T24] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0x1 has an invalid bInterval 128, changing to 11 [ 124.535526][ T24] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 124.535554][ T24] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0xD has invalid maxpacket 1072, setting to 64 [ 124.535581][ T24] usb 1-1: config 7 interface 255 altsetting 4 has a duplicate endpoint with address 0xB, skipping [ 124.535607][ T24] usb 1-1: config 7 interface 255 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 1024 [ 124.535633][ T24] usb 1-1: config 7 interface 255 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 124.535661][ T24] usb 1-1: config 7 interface 100 altsetting 2 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 124.535689][ T24] usb 1-1: config 7 interface 100 altsetting 2 has a duplicate endpoint with address 0x6, skipping [ 124.535714][ T24] usb 1-1: config 7 interface 255 has no altsetting 0 [ 124.535737][ T24] usb 1-1: config 7 interface 150 has no altsetting 0 [ 124.535760][ T24] usb 1-1: config 7 interface 100 has no altsetting 0 [ 124.537239][ T24] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=5d.a6 [ 124.537283][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.537307][ T24] usb 1-1: Product: syz [ 124.537328][ T24] usb 1-1: Manufacturer: syz [ 124.537349][ T24] usb 1-1: SerialNumber: syz [ 124.747703][ T24] ------------[ cut here ]------------ [ 124.747757][ T24] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 124.749313][ T24] WARNING: CPU: 1 PID: 24 at drivers/usb/core/urb.c:504 usb_submit_urb+0xa24/0x1470 [ 124.753421][ T24] Modules linked in: [ 124.754487][ T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Tainted: G W 6.16.0-rc1-syzkaller-g39dfc971e42d #0 PREEMPT [ 124.757844][ T24] Tainted: [W]=WARN [ 124.758873][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 124.761603][ T24] Workqueue: usb_hub_wq hub_event [ 124.762963][ T24] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 124.765079][ T24] pc : usb_submit_urb+0xa24/0x1470 [ 124.766451][ T24] lr : usb_submit_urb+0xa24/0x1470 [ 124.767817][ T24] sp : ffff800097b168c0 [ 124.768924][ T24] x29: ffff800097b16900 x28: 0000000000000000 x27: ffff80008c901148 [ 124.771088][ T24] x26: ffff0000cd5c3b60 x25: ffff80008c901140 x24: 0000000000000001 [ 124.773284][ T24] x23: ffff80008c907ec0 x22: dfff800000000000 x21: 0000000000000002 [ 124.775455][ T24] x20: 0000000000000c00 x19: ffff0000c50c2700 x18: 1fffe000337e1476 [ 124.777711][ T24] x17: ffff80008f62e000 x16: ffff80008aec8e2c x15: 0000000000000001 [ 124.779870][ T24] x14: 1fffe000337e4220 x13: 0000000000000000 x12: 0000000000000000 [ 124.782048][ T24] x11: ffff80009311ec08 x10: 0000000000000003 x9 : 6a1c3ce180231500 [ 124.784316][ T24] x8 : 6a1c3ce180231500 x7 : ffff800080489294 x6 : 0000000000000000 [ 124.786581][ T24] x5 : 0000000000000001 x4 : 0000000000000001 x3 : 0000000000000010 [ 124.788893][ T24] x2 : 0000000000000006 x1 : ffff80008b507fe0 x0 : 0000000000000001 [ 124.791142][ T24] Call trace: [ 124.792030][ T24] usb_submit_urb+0xa24/0x1470 (P) [ 124.793493][ T24] usb_start_wait_urb+0xe8/0x3bc [ 124.794954][ T24] usb_bulk_msg+0x2e4/0x3e4 [ 124.796222][ T24] amradio_set_mute+0x1a4/0x3f4 [ 124.797544][ T24] usb_amradio_probe+0x3d4/0x700 [ 124.798935][ T24] usb_probe_interface+0x584/0xa44 [ 124.800334][ T24] really_probe+0x394/0x910 [ 124.801671][ T24] __driver_probe_device+0x180/0x2d4 [ 124.803158][ T24] driver_probe_device+0x78/0x330 [ 124.804561][ T24] __device_attach_driver+0x290/0x4e0 [ 124.806087][ T24] bus_for_each_drv+0x220/0x2b4 [ 124.807462][ T24] __device_attach+0x26c/0x388 [ 124.808764][ T24] device_initial_probe+0x24/0x34 [ 124.810180][ T24] bus_probe_device+0x178/0x240 [ 124.811522][ T24] device_add+0x71c/0xa60 [ 124.812721][ T24] usb_set_configuration+0x1640/0x1bac [ 124.814242][ T24] usb_generic_driver_probe+0x8c/0x144 [ 124.815797][ T24] usb_probe_device+0x1a4/0x348 [ 124.817237][ T24] really_probe+0x394/0x910 [ 124.818515][ T24] __driver_probe_device+0x180/0x2d4 [ 124.819986][ T24] driver_probe_device+0x78/0x330 [ 124.821414][ T24] __device_attach_driver+0x290/0x4e0 [ 124.822877][ T24] bus_for_each_drv+0x220/0x2b4 [ 124.824267][ T24] __device_attach+0x26c/0x388 [ 124.825624][ T24] device_initial_probe+0x24/0x34 [ 124.827053][ T24] bus_probe_device+0x178/0x240 [ 124.828391][ T24] device_add+0x71c/0xa60 [ 124.829559][ T24] usb_new_device+0x7f0/0x1220 [ 124.830852][ T24] hub_event+0x2148/0x3cf0 [ 124.832058][ T24] process_one_work+0x7e8/0x155c [ 124.833458][ T24] worker_thread+0x958/0xed8 [ 124.834747][ T24] kthread+0x5fc/0x75c [ 124.835880][ T24] ret_from_fork+0x10/0x20 [ 124.837102][ T24] irq event stamp: 100396 [ 124.838259][ T24] hardirqs last enabled at (100395): [] finish_lock_switch+0xb0/0x1c0 [ 124.840935][ T24] hardirqs last disabled at (100396): [] el1_dbg+0x24/0x80 [ 124.843362][ T24] softirqs last enabled at (97306): [] wg_packet_decrypt_worker+0x90c/0x994 [ 124.846150][ T24] softirqs last disabled at (97304): [] wg_packet_decrypt_worker+0x5e8/0x994 [ 124.848997][ T24] ---[ end trace 0000000000000000 ]--- [ 124.851572][ T24] (null): radio-mr800 - initialization failed [ 124.851677][ T24] radio-mr800 1-1:7.255: probe with driver radio-mr800 failed with error -71 [ 124.851937][ T24] usbhid 1-1:7.255: couldn't find an input interrupt endpoint [ 124.868794][ T24] usb 1-1: USB disconnect, device number 6 1970/01/01 00:02:04 executed programs: 7 [ 125.490573][ T24] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 125.650526][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 125.654224][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 125.655322][ T24] usb 1-1: config 7 has an invalid interface number: 255 but max is 2 [ 125.655356][ T24] usb 1-1: config 7 has an invalid interface number: 150 but max is 2 [ 125.655381][ T24] usb 1-1: config 7 has an invalid interface number: 100 but max is 2 [ 125.655405][ T24] usb 1-1: config 7 has no interface number 0 [ 125.655427][ T24] usb 1-1: config 7 has no interface number 1 [ 125.655449][ T24] usb 1-1: config 7 has no interface number 2 [ 125.655481][ T24] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 125.655509][ T24] usb 1-1: config 7 interface 255 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 125.655535][ T24] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 125.655563][ T24] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0xE has invalid wMaxPacketSize 0 [ 125.655588][ T24] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0x1 has an invalid bInterval 128, changing to 11 [ 125.655616][ T24] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 125.655644][ T24] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0xD has invalid maxpacket 1072, setting to 64 [ 125.655672][ T24] usb 1-1: config 7 interface 255 altsetting 4 has a duplicate endpoint with address 0xB, skipping [ 125.655697][ T24] usb 1-1: config 7 interface 255 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 1024 [ 125.655723][ T24] usb 1-1: config 7 interface 255 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 125.655751][ T24] usb 1-1: config 7 interface 100 altsetting 2 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 125.655778][ T24] usb 1-1: config 7 interface 100 altsetting 2 has a duplicate endpoint with address 0x6, skipping [ 125.655804][ T24] usb 1-1: config 7 interface 255 has no altsetting 0 [ 125.655827][ T24] usb 1-1: config 7 interface 150 has no altsetting 0 [ 125.655849][ T24] usb 1-1: config 7 interface 100 has no altsetting 0 [ 125.657347][ T24] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=5d.a6 [ 125.657379][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.657403][ T24] usb 1-1: Product: syz [ 125.657423][ T24] usb 1-1: Manufacturer: syz [ 125.657444][ T24] usb 1-1: SerialNumber: syz [ 125.867163][ T24] ------------[ cut here ]------------ [ 125.867216][ T24] usb 1-1: BOGUS urb xfer, pipe 1 != ** replaying previous printk message ** [ 125.867216][ T24] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 125.870122][ T24] WARNING: CPU: 1 PID: 24 at drivers/usb/core/urb.c:504 usb_submit_urb+0xa24/0x1470 [ 125.875241][ T24] Modules linked in: [ 125.876292][ T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Tainted: G W 6.16.0-rc1-syzkaller-g39dfc971e42d #0 PREEMPT [ 125.879614][ T24] Tainted: [W]=WARN [ 125.880648][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 125.883371][ T24] Workqueue: usb_hub_wq hub_event [ 125.884750][ T24] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 125.886871][ T24] pc : usb_submit_urb+0xa24/0x1470 [ 125.888241][ T24] lr : usb_submit_urb+0xa24/0x1470 [ 125.889620][ T24] sp : ffff800097b168c0 [ 125.890723][ T24] x29: ffff800097b16900 x28: 0000000000000000 x27: ffff80008c901148 [ 125.892883][ T24] x26: ffff0000c229a900 x25: ffff80008c901140 x24: 0000000000000001 [ 125.895038][ T24] x23: ffff80008c907ec0 x22: dfff800000000000 x21: 0000000000000002 [ 125.897188][ T24] x20: 0000000000000c00 x19: ffff0000c97a2800 x18: 1fffe000337e1476 [ 125.899375][ T24] x17: ffff80008f62e000 x16: ffff80008aec8e2c x15: 0000000000000001 [ 125.901528][ T24] x14: 1fffe000337e4220 x13: 0000000000000000 x12: 0000000000000000 [ 125.903973][ T24] x11: ffff80009311ec08 x10: 0000000000000003 x9 : 6a1c3ce180231500 [ 125.906348][ T24] x8 : 6a1c3ce180231500 x7 : ffff800080489294 x6 : 0000000000000000 [ 125.908704][ T24] x5 : 0000000000000001 x4 : 0000000000000001 x3 : 0000000000000010 [ 125.910973][ T24] x2 : 0000000000000006 x1 : ffff80008b507fe0 x0 : 0000000000000001 [ 125.913107][ T24] Call trace: [ 125.913991][ T24] usb_submit_urb+0xa24/0x1470 (P) [ 125.915471][ T24] usb_start_wait_urb+0xe8/0x3bc [ 125.916878][ T24] usb_bulk_msg+0x2e4/0x3e4 [ 125.918145][ T24] amradio_set_mute+0x1a4/0x3f4 [ 125.919481][ T24] usb_amradio_probe+0x3d4/0x700 [ 125.920885][ T24] usb_probe_interface+0x584/0xa44 [ 125.922360][ T24] really_probe+0x394/0x910 [ 125.923620][ T24] __driver_probe_device+0x180/0x2d4 [ 125.925039][ T24] driver_probe_device+0x78/0x330 [ 125.926471][ T24] __device_attach_driver+0x290/0x4e0 [ 125.927983][ T24] bus_for_each_drv+0x220/0x2b4 [ 125.929267][ T24] __device_attach+0x26c/0x388 [ 125.930576][ T24] device_initial_probe+0x24/0x34 [ 125.931977][ T24] bus_probe_device+0x178/0x240 [ 125.933427][ T24] device_add+0x71c/0xa60 [ 125.934668][ T24] usb_set_configuration+0x1640/0x1bac [ 125.936175][ T24] usb_generic_driver_probe+0x8c/0x144 [ 125.937754][ T24] usb_probe_device+0x1a4/0x348 [ 125.939126][ T24] really_probe+0x394/0x910 [ 125.940403][ T24] __driver_probe_device+0x180/0x2d4 [ 125.941854][ T24] driver_probe_device+0x78/0x330 [ 125.943260][ T24] __device_attach_driver+0x290/0x4e0 [ 125.944854][ T24] bus_for_each_drv+0x220/0x2b4 [ 125.946225][ T24] __device_attach+0x26c/0x388 [ 125.947526][ T24] device_initial_probe+0x24/0x34 [ 125.948900][ T24] bus_probe_device+0x178/0x240 [ 125.950227][ T24] device_add+0x71c/0xa60 [ 125.951422][ T24] usb_new_device+0x7f0/0x1220 [ 125.952793][ T24] hub_event+0x2148/0x3cf0 [ 125.954059][ T24] process_one_work+0x7e8/0x155c [ 125.955453][ T24] worker_thread+0x958/0xed8 [ 125.956712][ T24] kthread+0x5fc/0x75c [ 125.957852][ T24] ret_from_fork+0x10/0x20 [ 125.959091][ T24] irq event stamp: 108500 [ 125.960352][ T24] hardirqs last enabled at (108499): [] finish_lock_switch+0xb0/0x1c0 [ 125.962988][ T24] hardirqs last disabled at (108500): [] el1_dbg+0x24/0x80 [ 125.965417][ T24] softirqs last enabled at (105514): [] handle_softirqs+0xaf8/0xc88 [ 125.968078][ T24] softirqs last disabled at (105499): [] __do_softirq+0x14/0x20 [ 125.970548][ T24] ---[ end trace 0000000000000000 ]--- [ 125.975526][ T24] (null): radio-mr800 - initialization failed [ 125.975638][ T24] radio-mr800 1-1:7.255: probe with driver radio-mr800 failed with error -71 [ 125.975892][ T24] usbhid 1-1:7.255: couldn't find an input interrupt endpoint [ 125.994031][ T24] usb 1-1: USB disconnect, device number 7 [ 126.311344][ T2411] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.311422][ T2411] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.620588][ T24] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 126.771431][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 126.773015][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 126.774131][ T24] usb 1-1: config 7 has an invalid interface number: 255 but max is 2 [ 126.774166][ T24] usb 1-1: config 7 has an invalid interface number: 150 but max is 2 [ 126.774190][ T24] usb 1-1: config 7 has an invalid interface number: 100 but max is 2 [ 126.774214][ T24] usb 1-1: config 7 has no interface number 0 [ 126.774236][ T24] usb 1-1: config 7 has no interface number 1 [ 126.774275][ T24] usb 1-1: config 7 has no interface number 2 [ 126.774308][ T24] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 126.774336][ T24] usb 1-1: config 7 interface 255 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 126.774362][ T24] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 126.774389][ T24] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0xE has invalid wMaxPacketSize 0 [ 126.774415][ T24] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0x1 has an invalid bInterval 128, changing to 11 [ 126.774443][ T24] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 126.774471][ T24] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0xD has invalid maxpacket 1072, setting to 64 [ 126.774498][ T24] usb 1-1: config 7 interface 255 altsetting 4 has a duplicate endpoint with address 0xB, skipping [ 126.774523][ T24] usb 1-1: config 7 interface 255 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 1024 [ 126.774549][ T24] usb 1-1: config 7 interface 255 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 126.774581][ T24] usb 1-1: config 7 interface 100 altsetting 2 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 126.774609][ T24] usb 1-1: config 7 interface 100 altsetting 2 has a duplicate endpoint with address 0x6, skipping [ 126.774634][ T24] usb 1-1: config 7 interface 255 has no altsetting 0 [ 126.774657][ T24] usb 1-1: config 7 interface 150 has no altsetting 0 [ 126.774679][ T24] usb 1-1: config 7 interface 100 has no altsetting 0 [ 126.776161][ T24] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=5d.a6 [ 126.776193][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.776217][ T24] usb 1-1: Product: syz [ 126.776238][ T24] usb 1-1: Manufacturer: syz [ 126.776271][ T24] usb 1-1: SerialNumber: syz [ 126.985338][ T24] ------------[ cut here ]------------ [ 126.98539 ** replaying previous printk message ** [ 126.985392][ T24] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 126.987265][ T24] WARNING: CPU: 1 PID: 24 at drivers/usb/core/urb.c:504 usb_submit_urb+0xa24/0x1470 [ 126.992352][ T24] Modules linked in: [ 126.993414][ T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Tainted: G W 6.16.0-rc1-syzkaller-g39dfc971e42d #0 PREEMPT [ 126.996829][ T24] Tainted: [W]=WARN [ 126.997847][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 127.000525][ T24] Workqueue: usb_hub_wq hub_event [ 127.001895][ T24] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 127.003998][ T24] pc : usb_submit_urb+0xa24/0x1470 [ 127.005382][ T24] lr : usb_submit_urb+0xa24/0x1470 [ 127.006712][ T24] sp : ffff800097b168c0 [ 127.007785][ T24] x29: ffff800097b16900 x28: 0000000000000000 x27: ffff80008c901148 [ 127.009917][ T24] x26: ffff0000cd99c2e0 x25: ffff80008c901140 x24: 0000000000000001 [ 127.012025][ T24] x23: ffff80008c907ec0 x22: dfff800000000000 x21: 0000000000000002 [ 127.014162][ T24] x20: 0000000000000c00 x19: ffff0000c29c1c00 x18: 1fffe000337e1476 [ 127.016275][ T24] x17: ffff80008f62e000 x16: ffff80008aec8e2c x15: 0000000000000001 [ 127.018394][ T24] x14: 1fffe000337e4220 x13: 0000000000000000 x12: 0000000000000000 [ 127.020550][ T24] x11: ffff80009311ec08 x10: 0000000000000003 x9 : 6a1c3ce180231500 [ 127.022816][ T24] x8 : 6a1c3ce180231500 x7 : ffff800080489294 x6 : 0000000000000000 [ 127.024990][ T24] x5 : 0000000000000001 x4 : 0000000000000001 x3 : 0000000000000010 [ 127.027107][ T24] x2 : 0000000000000006 x1 : ffff80008b507fe0 x0 : 0000000000000001 [ 127.029259][ T24] Call trace: [ 127.030129][ T24] usb_submit_urb+0xa24/0x1470 (P) [ 127.031544][ T24] usb_start_wait_urb+0xe8/0x3bc [ 127.032873][ T24] usb_bulk_msg+0x2e4/0x3e4 [ 127.034134][ T24] amradio_set_mute+0x1a4/0x3f4 [ 127.035430][ T24] usb_amradio_probe+0x3d4/0x700 [ 127.036796][ T24] usb_probe_interface+0x584/0xa44 [ 127.038210][ T24] really_probe+0x394/0x910 [ 127.039464][ T24] __driver_probe_device+0x180/0x2d4 [ 127.040892][ T24] driver_probe_device+0x78/0x330 [ 127.042253][ T24] __device_attach_driver+0x290/0x4e0 [ 127.043696][ T24] bus_for_each_drv+0x220/0x2b4 [ 127.045098][ T24] __device_attach+0x26c/0x388 [ 127.046449][ T24] device_initial_probe+0x24/0x34 [ 127.047856][ T24] bus_probe_device+0x178/0x240 [ 127.049166][ T24] device_add+0x71c/0xa60 [ 127.050471][ T24] usb_set_configuration+0x1640/0x1bac [ 127.051979][ T24] usb_generic_driver_probe+0x8c/0x144 [ 127.053540][ T24] usb_probe_device+0x1a4/0x348 [ 127.054877][ T24] really_probe+0x394/0x910 [ 127.056107][ T24] __driver_probe_device+0x180/0x2d4 [ 127.057578][ T24] driver_probe_device+0x78/0x330 [ 127.058949][ T24] __device_attach_driver+0x290/0x4e0 [ 127.060532][ T24] bus_for_each_drv+0x220/0x2b4 [ 127.061902][ T24] __device_attach+0x26c/0x388 [ 127.063170][ T24] device_initial_probe+0x24/0x34 [ 127.064631][ T24] bus_probe_device+0x178/0x240 [ 127.066041][ T24] device_add+0x71c/0xa60 [ 127.067285][ T24] usb_new_device+0x7f0/0x1220 [ 127.068647][ T24] hub_event+0x2148/0x3cf0 [ 127.069982][ T24] process_one_work+0x7e8/0x155c [ 127.071337][ T24] worker_thread+0x958/0xed8 [ 127.072589][ T24] kthread+0x5fc/0x75c [ 127.073741][ T24] ret_from_fork+0x10/0x20 [ 127.075002][ T24] irq event stamp: 117234 [ 127.076222][ T24] hardirqs last enabled at (117233): [] finish_lock_switch+0xb0/0x1c0 [ 127.079014][ T24] hardirqs last disabled at (117234): [] el1_dbg+0x24/0x80 [ 127.081409][ T24] softirqs last enabled at (112982): [] handle_softirqs+0xaf8/0xc88 [ 127.084100][ T24] softirqs last disabled at (112967): [] __do_softirq+0x14/0x20 [ 127.086572][ T24] ---[ end trace 0000000000000000 ]--- [ 127.091682][ T24] (null): radio-mr800 - initialization failed [ 127.091803][ T24] radio-mr800 1-1:7.255: probe with driver radio-mr800 failed with error -71 [ 127.092055][ T24] usbhid 1-1:7.255: couldn't find an input interrupt endpoint [ 127.103737][ T24] usb 1-1: USB disconnect, device number 8 [ 127.760546][ T24] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 127.910532][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 127.912110][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 127.912877][ T24] usb 1-1: config 7 has an invalid interface number: 255 but max is 2 [ 127.912906][ T24] usb 1-1: config 7 has an invalid interface number: 150 but max is 2 [ 127.912931][ T24] usb 1-1: config 7 has an invalid interface number: 100 but max is 2 [ 127.912955][ T24] usb 1-1: config 7 has no interface number 0 [ 127.912977][ T24] usb 1-1: config 7 has no interface number 1 [ 127.912998][ T24] usb 1-1: config 7 has no interface number 2 [ 127.913030][ T24] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 127.913058][ T24] usb 1-1: config 7 interface 255 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 127.913084][ T24] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 127.913112][ T24] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0xE has invalid wMaxPacketSize 0 [ 127.913145][ T24] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0x1 has an invalid bInterval 128, changing to 11 [ 127.913173][ T24] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 127.913201][ T24] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0xD has invalid maxpacket 1072, setting to 64 [ 127.913229][ T24] usb 1-1: config 7 interface 255 altsetting 4 has a duplicate endpoint with address 0xB, skipping [ 127.913265][ T24] usb 1-1: config 7 interface 255 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 1024 [ 127.913291][ T24] usb 1-1: config 7 interface 255 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 127.913319][ T24] usb 1-1: config 7 interface 100 altsetting 2 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 127.913347][ T24] usb 1-1: config 7 interface 100 altsetting 2 has a duplicate endpoint with address 0x6, skipping [ 127.913372][ T24] usb 1-1: config 7 interface 255 has no altsetting 0 [ 127.913395][ T24] usb 1-1: config 7 interface 150 has no altsetting 0 [ 127.913418][ T24] usb 1-1: config 7 interface 100 has no altsetting 0 [ 127.914902][ T24] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=5d.a6 [ 127.914933][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.914956][ T24] usb 1-1: Product: syz [ 127.914977][ T24] usb 1-1: Manufacturer: syz [ 127.914998][ T24] usb 1-1: SerialNumber: syz [ 128.126658][ T24] --- ** replaying previous printk message ** [ 128.126658][ T24] ------------[ cut here ]------------ [ 128.126711][ T24] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 128.127412][ T24] WARNING: CPU: 1 PID: 24 at drivers/usb/core/urb.c:504 usb_submit_urb+0xa24/0x1470 [ 128.133875][ T24] Modules linked in: [ 128.134981][ T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Tainted: G W 6.16.0-rc1-syzkaller-g39dfc971e42d #0 PREEMPT [ 128.138358][ T24] Tainted: [W]=WARN [ 128.139375][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 128.142074][ T24] Workqueue: usb_hub_wq hub_event [ 128.143444][ T24] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 128.145533][ T24] pc : usb_submit_urb+0xa24/0x1470 [ 128.146912][ T24] lr : usb_submit_urb+0xa24/0x1470 [ 128.148300][ T24] sp : ffff800097b168c0 [ 128.149395][ T24] x29: ffff800097b16900 x28: 0000000000000000 x27: ffff80008c901148 [ 128.151562][ T24] x26: ffff0000d6d76c40 x25: ffff80008c901140 x24: 0000000000000001 [ 128.153718][ T24] x23: ffff80008c907ec0 x22: dfff800000000000 x21: 0000000000000002 [ 128.155868][ T24] x20: 0000000000000c00 x19: ffff0000cacce500 x18: 1fffe000337e1476 [ 128.158022][ T24] x17: ffff80008f62e000 x16: ffff80008aec8e2c x15: 0000000000000001 [ 128.160157][ T24] x14: 1fffe000337e4220 x13: 0000000000000000 x12: 0000000000000000 [ 128.162540][ T24] x11: ffff80009311ec08 x10: 0000000000000003 x9 : 6a1c3ce180231500 [ 128.164914][ T24] x8 : 6a1c3ce180231500 x7 : ffff800080489294 x6 : 0000000000000000 [ 128.167182][ T24] x5 : 0000000000000001 x4 : 0000000000000001 x3 : 0000000000000010 [ 128.169518][ T24] x2 : 0000000000000006 x1 : ffff80008b507fe0 x0 : 0000000000000001 [ 128.171878][ T24] Call trace: [ 128.172755][ T24] usb_submit_urb+0xa24/0x1470 (P) [ 128.174190][ T24] usb_start_wait_urb+0xe8/0x3bc [ 128.175564][ T24] usb_bulk_msg+0x2e4/0x3e4 [ 128.176821][ T24] amradio_set_mute+0x1a4/0x3f4 [ 128.178340][ T24] usb_amradio_probe+0x3d4/0x700 [ 128.179676][ T24] usb_probe_interface+0x584/0xa44 [ 128.181104][ T24] really_probe+0x394/0x910 [ 128.182375][ T24] __driver_probe_device+0x180/0x2d4 [ 128.183832][ T24] driver_probe_device+0x78/0x330 [ 128.185274][ T24] __device_attach_driver+0x290/0x4e0 [ 128.186880][ T24] bus_for_each_drv+0x220/0x2b4 [ 128.188294][ T24] __device_attach+0x26c/0x388 [ 128.189676][ T24] device_initial_probe+0x24/0x34 [ 128.191069][ T24] bus_probe_device+0x178/0x240 [ 128.192428][ T24] device_add+0x71c/0xa60 [ 128.193653][ T24] usb_set_configuration+0x1640/0x1bac [ 128.195161][ T24] usb_generic_driver_probe+0x8c/0x144 [ 128.196741][ T24] usb_probe_device+0x1a4/0x348 [ 128.198091][ T24] really_probe+0x394/0x910 [ 128.199387][ T24] __driver_probe_device+0x180/0x2d4 [ 128.200828][ T24] driver_probe_device+0x78/0x330 [ 128.202311][ T24] __device_attach_driver+0x290/0x4e0 [ 128.203806][ T24] bus_for_each_drv+0x220/0x2b4 [ 128.205184][ T24] __device_attach+0x26c/0x388 [ 128.206532][ T24] device_initial_probe+0x24/0x34 [ 128.207935][ T24] bus_probe_device+0x178/0x240 [ 128.209276][ T24] device_add+0x71c/0xa60 [ 128.210522][ T24] usb_new_device+0x7f0/0x1220 [ 128.211966][ T24] hub_event+0x2148/0x3cf0 [ 128.213241][ T24] process_one_work+0x7e8/0x155c [ 128.214696][ T24] worker_thread+0x958/0xed8 [ 128.215991][ T24] kthread+0x5fc/0x75c [ 128.217168][ T24] ret_from_fork+0x10/0x20 [ 128.218431][ T24] irq event stamp: 126748 [ 128.219660][ T24] hardirqs last enabled at (126747): [] finish_lock_switch+0xb0/0x1c0 [ 128.222432][ T24] hardirqs last disabled at (126748): [] el1_dbg+0x24/0x80 [ 128.224880][ T24] softirqs last enabled at (117344): [] handle_softirqs+0xaf8/0xc88 [ 128.227501][ T24] softirqs last disabled at (117237): [] __do_softirq+0x14/0x20 [ 128.229986][ T24] ---[ end trace 0000000000000000 ]--- [ 128.234936][ T24] (null): radio-mr800 - initialization failed [ 128.235046][ T24] radio-mr800 1-1:7.255: probe with driver radio-mr800 failed with error -71 [ 128.236419][ T24] usbhid 1-1:7.255: couldn't find an input interrupt endpoint [ 128.247406][ T24] usb 1-1: USB disconnect, device number 9 [ 128.880557][ T6610] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 129.030521][ T6610] usb 1-1: Using ep0 maxpacket: 16 [ 129.032123][ T6610] usb 1-1: unable to get BOS descriptor or descriptor too short [ 129.033262][ T6610] usb 1-1: config 7 has an invalid interface number: 255 but max is 2 [ 129.033295][ T6610] usb 1-1: config 7 has an invalid interface number: 150 but max is 2 [ 129.033320][ T6610] usb 1-1: config 7 has an invalid interface number: 100 but max is 2 [ 129.033344][ T6610] usb 1-1: config 7 has no interface number 0 [ 129.033366][ T6610] usb 1-1: config 7 has no interface number 1 [ 129.033388][ T6610] usb 1-1: config 7 has no interface number 2 [ 129.033419][ T6610] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 129.033447][ T6610] usb 1-1: config 7 interface 255 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 129.033474][ T6610] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 129.033502][ T6610] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0xE has invalid wMaxPacketSize 0 [ 129.033527][ T6610] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0x1 has an invalid bInterval 128, changing to 11 [ 129.033555][ T6610] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 129.033583][ T6610] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0xD has invalid maxpacket 1072, setting to 64 [ 129.033611][ T6610] usb 1-1: config 7 interface 255 altsetting 4 has a duplicate endpoint with address 0xB, skipping [ 129.033636][ T6610] usb 1-1: config 7 interface 255 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 1024 [ 129.033662][ T6610] usb 1-1: config 7 interface 255 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 129.033690][ T6610] usb 1-1: config 7 interface 100 altsetting 2 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 129.033718][ T6610] usb 1-1: config 7 interface 100 altsetting 2 has a duplicate endpoint with address 0x6, skipping [ 129.033743][ T6610] usb 1-1: config 7 interface 255 has no altsetting 0 [ 129.033766][ T6610] usb 1-1: config 7 interface 150 has no altsetting 0 [ 129.033789][ T6610] usb 1-1: config 7 interface 100 has no altsetting 0 [ 129.035270][ T6610] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=5d.a6 [ 129.035300][ T6610] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.035324][ T6610] usb 1-1: Product: syz [ 129.035345][ T6610] usb 1-1: Manufacturer: syz [ 129.035366][ T6610] usb 1-1: SerialNumber: syz [ 129.248730][ T6610] ------------[ c ** replaying previous printk message ** [ 129.248730][ T6610] ------------[ cut here ]------------ [ 129.248795][ T6610] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 129.249770][ T6610] WARNING: CPU: 0 PID: 6610 at drivers/usb/core/urb.c:504 usb_submit_urb+0xa24/0x1470 [ 129.256709][ T6610] Modules linked in: [ 129.257806][ T6610] CPU: 0 UID: 0 PID: 6610 Comm: kworker/0:4 Tainted: G W 6.16.0-rc1-syzkaller-g39dfc971e42d #0 PREEMPT [ 129.261382][ T6610] Tainted: [W]=WARN [ 129.262449][ T6610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 129.265241][ T6610] Workqueue: usb_hub_wq hub_event [ 129.266676][ T6610] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 129.268852][ T6610] pc : usb_submit_urb+0xa24/0x1470 [ 129.270294][ T6610] lr : usb_submit_urb+0xa24/0x1470 [ 129.271750][ T6610] sp : ffff8000a0da68c0 [ 129.272900][ T6610] x29: ffff8000a0da6900 x28: 0000000000000000 x27: ffff80008c901148 [ 129.275136][ T6610] x26: ffff0000c21e9640 x25: ffff80008c901140 x24: 0000000000000001 [ 129.277367][ T6610] x23: ffff80008c907ec0 x22: dfff800000000000 x21: 0000000000000002 [ 129.279622][ T6610] x20: 0000000000000c00 x19: ffff0000cd1cde00 x18: 1fffe000337dc876 [ 129.281825][ T6610] x17: ffff80008f62e000 x16: ffff80008aec8e2c x15: 0000000000000001 [ 129.284145][ T6610] x14: 1fffe000337df620 x13: 0000000000000000 x12: 0000000000000000 [ 129.286473][ T6610] x11: ffff80009311ec08 x10: 0000000000000003 x9 : a7aef29f66476b00 [ 129.288778][ T6610] x8 : a7aef29f66476b00 x7 : ffff800080489294 x6 : 0000000000000000 [ 129.291025][ T6610] x5 : 0000000000000001 x4 : 0000000000000001 x3 : 0000000000000010 [ 129.293348][ T6610] x2 : 0000000000000006 x1 : ffff80008b507fe0 x0 : 0000000000000001 [ 129.295636][ T6610] Call trace: [ 129.296549][ T6610] usb_submit_urb+0xa24/0x1470 (P) [ 129.297950][ T6610] usb_start_wait_urb+0xe8/0x3bc [ 129.299368][ T6610] usb_bulk_msg+0x2e4/0x3e4 [ 129.300625][ T6610] amradio_set_mute+0x1a4/0x3f4 [ 129.301997][ T6610] usb_amradio_probe+0x3d4/0x700 [ 129.303441][ T6610] usb_probe_interface+0x584/0xa44 [ 129.304864][ T6610] really_probe+0x394/0x910 [ 129.306085][ T6610] __driver_probe_device+0x180/0x2d4 [ 129.307655][ T6610] driver_probe_device+0x78/0x330 [ 129.309092][ T6610] __device_attach_driver+0x290/0x4e0 [ 129.310622][ T6610] bus_for_each_drv+0x220/0x2b4 [ 129.312010][ T6610] __device_attach+0x26c/0x388 [ 129.313389][ T6610] device_initial_probe+0x24/0x34 [ 129.314868][ T6610] bus_probe_device+0x178/0x240 [ 129.316193][ T6610] device_add+0x71c/0xa60 [ 129.317468][ T6610] usb_set_configuration+0x1640/0x1bac [ 129.319070][ T6610] usb_generic_driver_probe+0x8c/0x144 [ 129.320636][ T6610] usb_probe_device+0x1a4/0x348 [ 129.322044][ T6610] really_probe+0x394/0x910 [ 129.323351][ T6610] __driver_probe_device+0x180/0x2d4 [ 129.324846][ T6610] driver_probe_device+0x78/0x330 [ 129.326267][ T6610] __device_attach_driver+0x290/0x4e0 [ 129.327815][ T6610] bus_for_each_drv+0x220/0x2b4 [ 129.329216][ T6610] __device_attach+0x26c/0x388 [ 129.330576][ T6610] device_initial_probe+0x24/0x34 [ 129.332013][ T6610] bus_probe_device+0x178/0x240 [ 129.333420][ T6610] device_add+0x71c/0xa60 [ 129.334631][ T6610] usb_new_device+0x7f0/0x1220 [ 129.336053][ T6610] hub_event+0x2148/0x3cf0 [ 129.337318][ T6610] process_one_work+0x7e8/0x155c [ 129.338740][ T6610] worker_thread+0x958/0xed8 [ 129.340038][ T6610] kthread+0x5fc/0x75c [ 129.341161][ T6610] ret_from_fork+0x10/0x20 [ 129.342402][ T6610] irq event stamp: 41594 [ 129.343598][ T6610] hardirqs last enabled at (41593): [] finish_lock_switch+0xb0/0x1c0 [ 129.346378][ T6610] hardirqs last disabled at (41594): [] el1_dbg+0x24/0x80 [ 129.348832][ T6610] softirqs last enabled at (38052): [] wg_packet_encrypt_worker+0x1154/0x11e0 [ 129.351893][ T6610] softirqs last disabled at (38050): [] wg_packet_encrypt_worker+0xf1c/0x11e0 [ 129.354840][ T6610] ---[ end trace 0000000000000000 ]--- [ 129.362295][ T6610] (null): radio-mr800 - initialization failed [ 129.362411][ T6610] radio-mr800 1-1:7.255: probe with driver radio-mr800 failed with error -71 [ 129.362678][ T6610] usbhid 1-1:7.255: couldn't find an input interrupt endpoint [ 129.372573][ T6610] usb 1-1: USB disconnect, device number 10 [ 130.010573][ T7437] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 130.170509][ T7437] usb 1-1: Using ep0 maxpacket: 16 [ 130.172536][ T7437] usb 1-1: unable to get BOS descriptor or descriptor too short [ 130.173724][ T7437] usb 1-1: config 7 has an invalid interface number: 255 but max is 2 [ 130.173756][ T7437] usb 1-1: config 7 has an invalid interface number: 150 but max is 2 [ 130.173780][ T7437] usb 1-1: config 7 has an invalid interface number: 100 but max is 2 [ 130.173805][ T7437] usb 1-1: config 7 has no interface number 0 [ 130.173827][ T7437] usb 1-1: config 7 has no interface number 1 [ 130.173848][ T7437] usb 1-1: config 7 has no interface number 2 [ 130.173883][ T7437] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 130.173911][ T7437] usb 1-1: config 7 interface 255 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 130.173937][ T7437] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 130.173965][ T7437] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0xE has invalid wMaxPacketSize 0 [ 130.173991][ T7437] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0x1 has an invalid bInterval 128, changing to 11 [ 130.174019][ T7437] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 130.174047][ T7437] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0xD has invalid maxpacket 1072, setting to 64 [ 130.174074][ T7437] usb 1-1: config 7 interface 255 altsetting 4 has a duplicate endpoint with address 0xB, skipping [ 130.174100][ T7437] usb 1-1: config 7 interface 255 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 1024 [ 130.174126][ T7437] usb 1-1: config 7 interface 255 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 130.174154][ T7437] usb 1-1: config 7 interface 100 altsetting 2 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 130.174182][ T7437] usb 1-1: config 7 interface 100 altsetting 2 has a duplicate endpoint with address 0x6, skipping [ 130.174207][ T7437] usb 1-1: config 7 interface 255 has no altsetting 0 [ 130.174230][ T7437] usb 1-1: config 7 interface 150 has no altsetting 0 [ 130.174265][ T7437] usb 1-1: config 7 interface 100 has no altsetting 0 [ 130.175953][ T7437] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=5d.a6 [ 130.175984][ T7437] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.176008][ T7437] usb 1-1: Product: syz [ 130.176029][ T7437] usb 1-1: Manufacturer: syz [ 130.176049][ T7437] usb 1-1: SerialNumber: syz