[ 48.670838][ T136] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.796542][ T136] device veth1_macvtap left promiscuous mode [ 48.798325][ T136] device veth0_macvtap left promiscuous mode [ 48.799934][ T136] device veth1_vlan left promiscuous mode [ 48.801494][ T136] device veth0_vlan left promiscuous mode [ 48.991533][ T136] team0 (unregistering): Port device team_slave_1 removed [ 49.001030][ T136] team0 (unregistering): Port device team_slave_0 removed [ 49.010713][ T136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 49.042223][ T136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 49.202290][ T136] bond0 (unregistering): Released all slaves Warning: Permanently added '10.128.0.200' (ED25519) to the list of known hosts. 1970/01/01 00:01:00 ignoring optional flag "sandboxArg"="0" 1970/01/01 00:01:00 ignoring optional flag "type"="gce" 1970/01/01 00:01:00 parsed 1 programs 1970/01/01 00:01:00 executed programs: 0 [ 60.857449][ T4279] chnl_net:caif_netlink_parms(): no params data found [ 60.893980][ T4279] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.897423][ T4279] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.900091][ T4279] device bridge_slave_0 entered promiscuous mode [ 60.903732][ T4279] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.905665][ T4279] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.908859][ T4279] device bridge_slave_1 entered promiscuous mode [ 60.923698][ T4279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.929460][ T4279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.945372][ T4279] team0: Port device team_slave_0 added [ 60.950146][ T4279] team0: Port device team_slave_1 added [ 60.963584][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.965498][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.973960][ T4279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.978615][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.980600][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.988826][ T4279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.057985][ T4279] device hsr_slave_0 entered promiscuous mode [ 61.096552][ T4279] device hsr_slave_1 entered promiscuous mode [ 61.948294][ T4279] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.990060][ T4279] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.037775][ T4279] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.079080][ T4279] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.183648][ T4279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.192689][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.195384][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.201477][ T4279] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.208540][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.211180][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.213657][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.215541][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.227792][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.230414][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.233331][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.239942][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.242019][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.244358][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.257924][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.260919][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.264502][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.267851][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.270761][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.273461][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.280061][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.286436][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.295393][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.299342][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.303550][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.394119][ T4279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.397194][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.399354][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.412109][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.414910][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.428802][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.431431][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.435123][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.439019][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.442361][ T4279] device veth0_vlan entered promiscuous mode [ 62.449783][ T4279] device veth1_vlan entered promiscuous mode [ 62.468734][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.471674][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.474220][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.478060][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.482925][ T4279] device veth0_macvtap entered promiscuous mode [ 62.487614][ T4279] device veth1_macvtap entered promiscuous mode [ 62.500961][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.503061][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.505636][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.509981][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.513120][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.518371][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.521983][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.525108][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.528987][ T4279] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.531330][ T4279] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.533674][ T4279] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.536463][ T4279] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.588894][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.591264][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.594444][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.621202][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.623582][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.627661][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.856562][ T4040] Bluetooth: hci0: command 0x0409 tx timeout [ 62.926442][ T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 63.196216][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 63.396436][ T7] usb 1-1: unable to get BOS descriptor or descriptor too short [ 63.507494][ T7] usb 1-1: config 6 has an invalid interface number: 199 but max is 2 [ 63.509914][ T7] usb 1-1: config 6 has an invalid interface number: 48 but max is 2 [ 63.512134][ T7] usb 1-1: config 6 has an invalid interface number: 105 but max is 2 [ 63.514397][ T7] usb 1-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 63.517643][ T7] usb 1-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 63.520098][ T7] usb 1-1: config 6 has an invalid interface descriptor of length 2, skipping [ 63.522544][ T7] usb 1-1: config 6 has no interface number 0 [ 63.524324][ T7] usb 1-1: config 6 has no interface number 1 [ 63.528024][ T7] usb 1-1: config 6 has no interface number 2 [ 63.529931][ T7] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 63.532922][ T7] usb 1-1: config 6 interface 199 altsetting 128 has an invalid endpoint with address 0x0, skipping [ 63.535948][ T7] usb 1-1: config 6 interface 199 altsetting 128 has a duplicate endpoint with address 0x8, skipping [ 63.539511][ T7] usb 1-1: config 6 interface 199 altsetting 128 bulk endpoint 0x2 has invalid maxpacket 8 [ 63.542324][ T7] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 63.545951][ T7] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 63.549430][ T7] usb 1-1: config 6 interface 199 altsetting 128 has a duplicate endpoint with address 0x1, skipping [ 63.552433][ T7] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 63.555642][ T7] usb 1-1: config 6 interface 199 altsetting 128 has a duplicate endpoint with address 0x4, skipping [ 63.558915][ T7] usb 1-1: config 6 interface 48 altsetting 8 has a duplicate endpoint with address 0xA, skipping [ 63.561848][ T7] usb 1-1: config 6 interface 105 altsetting 129 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 63.565473][ T7] usb 1-1: config 6 interface 199 has no altsetting 0 [ 63.567698][ T7] usb 1-1: config 6 interface 48 has no altsetting 0 [ 63.569572][ T7] usb 1-1: config 6 interface 105 has no altsetting 0 [ 63.867472][ T7] usb 1-1: string descriptor 0 read error: -22 [ 63.869340][ T7] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=b9.c5 [ 63.871866][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.930118][ T7] ------------[ cut here ]------------ [ 63.931818][ T7] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 63.933737][ T7] WARNING: CPU: 0 PID: 7 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1580 [ 63.936295][ T7] Modules linked in: [ 63.937383][ T7] CPU: 0 PID: 7 Comm: kworker/0:0 Not tainted 5.15.181-syzkaller #0 [ 63.939646][ T7] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 63.942493][ T7] Workqueue: usb_hub_wq hub_event [ 63.944009][ T7] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 63.946209][ T7] pc : usb_submit_urb+0xa44/0x1580 [ 63.947648][ T7] lr : usb_submit_urb+0xa44/0x1580 [ 63.949115][ T7] sp : ffff80001b296980 [ 63.950238][ T7] x29: ffff80001b2969c0 x28: 1fffe0001b60d603 x27: ffff80001237bb88 [ 63.952531][ T7] x26: ffff0000cee10f00 x25: ffff0000c11d2450 x24: 0000000000000008 [ 63.954711][ T7] x23: ffff8000123821e0 x22: dfff800000000000 x21: 0000000000000002 [ 63.956953][ T7] x20: 0000000000000c00 x19: ffff0000c11d2400 x18: 0000000000000001 [ 63.959254][ T7] x17: 0000000000000000 x16: ffff8000111a3970 x15: 00000000ffffffff [ 63.961458][ T7] x14: 0000000000ff0100 x13: 0000000000000001 x12: 0000000000ff0100 [ 63.963733][ T7] x11: 0000000000000000 x10: 0000000000000000 x9 : c28839803eb30600 [ 63.965970][ T7] x8 : c28839803eb30600 x7 : 0000000000000001 x6 : 0000000000000001 [ 63.968195][ T7] x5 : ffff80001b296278 x4 : ffff80001422f280 x3 : ffff800008503848 [ 63.970464][ T7] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000029 [ 63.972742][ T7] Call trace: [ 63.973652][ T7] usb_submit_urb+0xa44/0x1580 [ 63.975024][ T7] usb_start_wait_urb+0xe8/0x3bc [ 63.976379][ T7] usb_bulk_msg+0x2e4/0x3e4 [ 63.977674][ T7] amradio_set_mute+0x1a4/0x3f4 [ 63.979105][ T7] usb_amradio_probe+0x36c/0x688 [ 63.980485][ T7] usb_probe_interface+0x4fc/0x994 [ 63.981920][ T7] really_probe+0x26c/0xaec [ 63.983174][ T7] __driver_probe_device+0x180/0x314 [ 63.984678][ T7] driver_probe_device+0x78/0x34c [ 63.986027][ T7] __device_attach_driver+0x274/0x4c4 [ 63.987528][ T7] bus_for_each_drv+0x150/0x1d8 [ 63.988862][ T7] __device_attach+0x2a8/0x3d4 [ 63.990196][ T7] device_initial_probe+0x24/0x34 [ 63.991580][ T7] bus_probe_device+0xbc/0x1c4 [ 63.992923][ T7] device_add+0xb04/0xf94 [ 63.994147][ T7] usb_set_configuration+0x15b8/0x1b2c [ 63.995696][ T7] usb_generic_driver_probe+0x8c/0x144 [ 63.997186][ T7] usb_probe_device+0x120/0x25c [ 63.998595][ T7] really_probe+0x26c/0xaec [ 63.999840][ T7] __driver_probe_device+0x180/0x314 [ 64.001292][ T7] driver_probe_device+0x78/0x34c [ 64.002679][ T7] __device_attach_driver+0x274/0x4c4 [ 64.004196][ T7] bus_for_each_drv+0x150/0x1d8 [ 64.005510][ T7] __device_attach+0x2a8/0x3d4 [ 64.006821][ T7] device_initial_probe+0x24/0x34 [ 64.008222][ T7] bus_probe_device+0xbc/0x1c4 [ 64.009524][ T7] device_add+0xb04/0xf94 [ 64.010736][ T7] usb_new_device+0x7ec/0x1164 [ 64.012052][ T7] hub_event+0x20cc/0x4188 [ 64.013282][ T7] process_one_work+0x79c/0x1140 [ 64.014610][ T7] worker_thread+0x8f4/0x101c [ 64.015926][ T7] kthread+0x374/0x454 [ 64.017040][ T7] ret_from_fork+0x10/0x20 [ 64.018263][ T7] irq event stamp: 182058 [ 64.019510][ T7] hardirqs last enabled at (182057): [] __up_console_sem+0xb4/0x100 [ 64.022128][ T7] hardirqs last disabled at (182058): [] el1_dbg+0x24/0x80 [ 64.024559][ T7] softirqs last enabled at (179646): [] handle_softirqs+0xa4c/0xbf0 [ 64.027225][ T7] softirqs last disabled at (179619): [] __irq_exit_rcu+0x240/0x440 [ 64.029970][ T7] ---[ end trace 16d89ea29fdaf70a ]--- [ 64.047790][ T7] (null): radio-mr800 - initialization failed [ 64.049806][ T7] radio-mr800: probe of 1-1:6.199 failed with error -71 [ 64.052176][ T7] usbhid 1-1:6.199: couldn't find an input interrupt endpoint [ 64.143984][ T25] usb 1-1: USB disconnect, device number 2 [ 64.926185][ T1534] Bluetooth: hci0: command 0x041b tx timeout [ 64.966102][ T7] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 65.217494][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 65.407435][ T7] usb 1-1: unable to get BOS descriptor or descriptor too short [ 65.487325][ T7] usb 1-1: config 6 has an invalid interface number: 199 but max is 2 [ 65.490138][ T7] usb 1-1: config 6 has an invalid interface number: 48 but max is 2 [ 65.492343][ T7] usb 1-1: config 6 has an invalid interface number: 105 but max is 2 [ 65.494584][ T7] usb 1-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 65.497945][ T7] usb 1-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 65.500377][ T7] usb 1-1: config 6 has an invalid interface descriptor of length 2, skipping [ 65.502762][ T7] usb 1-1: config 6 has no interface number 0 [ 65.504408][ T7] usb 1-1: config 6 has no interface number 1 [ 65.507963][ T7] usb 1-1: config 6 has no interface number 2 [ 65.509748][ T7] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 65.512756][ T7] usb 1-1: config 6 interface 199 altsetting 128 has an invalid endpoint with address 0x0, skipping [ 65.515965][ T7] usb 1-1: config 6 interface 199 altsetting 128 has a duplicate endpoint with address 0x8, skipping [ 65.519999][ T7] usb 1-1: config 6 interface 199 altsetting 128 bulk endpoint 0x2 has invalid maxpacket 8 [ 65.523017][ T7] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 65.527748][ T7] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 65.531024][ T7] usb 1-1: config 6 interface 199 altsetting 128 has a duplicate endpoint with address 0x1, skipping [ 65.534065][ T7] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 65.537755][ T7] usb 1-1: config 6 interface 199 altsetting 128 has a duplicate endpoint with address 0x4, skipping [ 65.540904][ T7] usb 1-1: config 6 interface 48 altsetting 8 has a duplicate endpoint with address 0xA, skipping [ 65.543979][ T7] usb 1-1: config 6 interface 105 altsetting 129 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 65.549720][ T7] usb 1-1: config 6 interface 199 has no altsetting 0 [ 65.551632][ T7] usb 1-1: config 6 interface 48 has no altsetting 0 [ 65.553510][ T7] usb 1-1: config 6 interface 105 has no altsetting 0 [ 65.816168][ T7] usb 1-1: string descriptor 0 read error: -22 [ 65.817988][ T7] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=b9.c5 [ 65.820420][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.870028][ T7] ------------[ cut here ]------------ [ 65.871557][ T7] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 65.873549][ T7] WARNING: CPU: 0 PID: 7 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1580 [ 65.876111][ T7] Modules linked in: [ 65.877217][ T7] CPU: 0 PID: 7 Comm: kworker/0:0 Tainted: G W 5.15.181-syzkaller #0 [ 65.879889][ T7] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 65.882677][ T7] Workqueue: usb_hub_wq hub_event [ 65.884089][ T7] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 65.886239][ T7] pc : usb_submit_urb+0xa44/0x1580 [ 65.887666][ T7] lr : usb_submit_urb+0xa44/0x1580 [ 65.889105][ T7] sp : ffff80001b296980 [ 65.890220][ T7] x29: ffff80001b2969c0 x28: 1fffe00019634803 x27: ffff80001237bb88 [ 65.892495][ T7] x26: ffff0000d5dbf200 x25: ffff0000c0b77050 x24: 0000000000000008 [ 65.894723][ T7] x23: ffff8000123821e0 x22: dfff800000000000 x21: 0000000000000002 [ 65.896950][ T7] x20: 0000000000000c00 x19: ffff0000c0b77000 x18: 0000000000000001 [ 65.899201][ T7] x17: 0000000000000000 x16: ffff8000111a3970 x15: 00000000ffffffff [ 65.901400][ T7] x14: 0000000000ff0100 x13: 0000000000000001 x12: 0000000000ff0100 [ 65.903596][ T7] x11: 0000000000000000 x10: 0000000000000000 x9 : c28839803eb30600 [ 65.905782][ T7] x8 : c28839803eb30600 x7 : 0000000000000001 x6 : 0000000000000001 [ 65.908061][ T7] x5 : ffff80001b296278 x4 : ffff80001422f280 x3 : ffff800008503848 [ 65.910311][ T7] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000029 [ 65.912543][ T7] Call trace: [ 65.913508][ T7] usb_submit_urb+0xa44/0x1580 [ 65.914839][ T7] usb_start_wait_urb+0xe8/0x3bc [ 65.916233][ T7] usb_bulk_msg+0x2e4/0x3e4 [ 65.917450][ T7] amradio_set_mute+0x1a4/0x3f4 [ 65.918851][ T7] usb_amradio_probe+0x36c/0x688 [ 65.920219][ T7] usb_probe_interface+0x4fc/0x994 [ 65.921640][ T7] really_probe+0x26c/0xaec [ 65.922880][ T7] __driver_probe_device+0x180/0x314 [ 65.924334][ T7] driver_probe_device+0x78/0x34c [ 65.925743][ T7] __device_attach_driver+0x274/0x4c4 [ 65.927154][ T7] bus_for_each_drv+0x150/0x1d8 [ 65.928483][ T7] __device_attach+0x2a8/0x3d4 [ 65.929806][ T7] device_initial_probe+0x24/0x34 [ 65.931303][ T7] bus_probe_device+0xbc/0x1c4 [ 65.932651][ T7] device_add+0xb04/0xf94 [ 65.933816][ T7] usb_set_configuration+0x15b8/0x1b2c [ 65.935299][ T7] usb_generic_driver_probe+0x8c/0x144 [ 65.936842][ T7] usb_probe_device+0x120/0x25c [ 65.938141][ T7] really_probe+0x26c/0xaec [ 65.939378][ T7] __driver_probe_device+0x180/0x314 [ 65.940890][ T7] driver_probe_device+0x78/0x34c [ 65.942290][ T7] __device_attach_driver+0x274/0x4c4 [ 65.943811][ T7] bus_for_each_drv+0x150/0x1d8 [ 65.945114][ T7] __device_attach+0x2a8/0x3d4 [ 65.946392][ T7] device_initial_probe+0x24/0x34 [ 65.947823][ T7] bus_probe_device+0xbc/0x1c4 [ 65.949165][ T7] device_add+0xb04/0xf94 [ 65.950352][ T7] usb_new_device+0x7ec/0x1164 [ 65.951726][ T7] hub_event+0x20cc/0x4188 [ 65.952972][ T7] process_one_work+0x79c/0x1140 [ 65.954390][ T7] worker_thread+0x8f4/0x101c [ 65.955659][ T7] kthread+0x374/0x454 [ 65.956787][ T7] ret_from_fork+0x10/0x20 [ 65.958009][ T7] irq event stamp: 193120 [ 65.959205][ T7] hardirqs last enabled at (193119): [] __up_console_sem+0xb4/0x100 [ 65.961897][ T7] hardirqs last disabled at (193120): [] el1_dbg+0x24/0x80 [ 65.964348][ T7] softirqs last enabled at (190322): [] handle_softirqs+0xa4c/0xbf0 [ 65.967085][ T7] softirqs last disabled at (190223): [] __irq_exit_rcu+0x240/0x440 [ 65.969783][ T7] ---[ end trace 16d89ea29fdaf70b ]--- [ 65.986177][ T7] (null): radio-mr800 - initialization failed [ 65.987985][ T7] radio-mr800: probe of 1-1:6.199 failed with error -71 [ 65.990156][ T7] usbhid 1-1:6.199: couldn't find an input interrupt endpoint [ 66.067708][ T7] usb 1-1: USB disconnect, device number 3 1970/01/01 00:01:06 executed programs: 2 [ 66.856173][ T1534] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 67.006130][ T7] Bluetooth: hci0: command 0x040f tx timeout [ 67.126121][ T1534] usb 1-1: Using ep0 maxpacket: 32 [ 67.286167][ T1534] usb 1-1: unable to get BOS descriptor or descriptor too short [ 67.366264][ T1534] usb 1-1: config 6 has an invalid interface number: 199 but max is 2 [ 67.368719][ T1534] usb 1-1: config 6 has an invalid interface number: 48 but max is 2 [ 67.370880][ T1534] usb 1-1: config 6 has an invalid interface number: 105 but max is 2 [ 67.373051][ T1534] usb 1-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 67.375278][ T1534] usb 1-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 67.377834][ T1534] usb 1-1: config 6 has an invalid interface descriptor of length 2, skipping [ 67.380334][ T1534] usb 1-1: config 6 has no interface number 0 [ 67.381924][ T1534] usb 1-1: config 6 has no interface number 1 [ 67.383539][ T1534] usb 1-1: config 6 has no interface number 2 [ 67.385167][ T1534] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 67.388132][ T1534] usb 1-1: config 6 interface 199 altsetting 128 has an invalid endpoint with address 0x0, skipping [ 67.390927][ T1534] usb 1-1: config 6 interface 199 altsetting 128 has a duplicate endpoint with address 0x8, skipping [ 67.393847][ T1534] usb 1-1: config 6 interface 199 altsetting 128 bulk endpoint 0x2 has invalid maxpacket 8 [ 67.396588][ T1534] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 67.399393][ T1534] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 67.402274][ T1534] usb 1-1: config 6 interface 199 altsetting 128 has a duplicate endpoint with address 0x1, skipping [ 67.405108][ T1534] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 67.408098][ T1534] usb 1-1: config 6 interface 199 altsetting 128 has a duplicate endpoint with address 0x4, skipping [ 67.410941][ T1534] usb 1-1: config 6 interface 48 altsetting 8 has a duplicate endpoint with address 0xA, skipping [ 67.413719][ T1534] usb 1-1: config 6 interface 105 altsetting 129 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 67.417110][ T1534] usb 1-1: config 6 interface 199 has no altsetting 0 [ 67.418817][ T1534] usb 1-1: config 6 interface 48 has no altsetting 0 [ 67.420542][ T1534] usb 1-1: config 6 interface 105 has no altsetting 0 [ 67.706205][ T1534] usb 1-1: string descriptor 0 read error: -22 [ 67.708148][ T1534] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=b9.c5 [ 67.710589][ T1534] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.749754][ T1534] ------------[ cut here ]------------ [ 67.751310][ T1534] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 67.753221][ T1534] WARNING: CPU: 0 PID: 1534 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1580 [ 67.755898][ T1534] Modules linked in: [ 67.756983][ T1534] CPU: 0 PID: 1534 Comm: kworker/0:2 Tainted: G W 5.15.181-syzkaller #0 [ 67.759502][ T1534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 67.762222][ T1534] Workqueue: usb_hub_wq hub_event [ 67.763562][ T1534] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 67.765702][ T1534] pc : usb_submit_urb+0xa44/0x1580 [ 67.767074][ T1534] lr : usb_submit_urb+0xa44/0x1580 [ 67.768513][ T1534] sp : ffff800023536980 [ 67.769677][ T1534] x29: ffff8000235369c0 x28: 1fffe00019c92403 x27: ffff80001237bb88 [ 67.771863][ T1534] x26: ffff0000cd588200 x25: ffff0000cbb01c50 x24: 0000000000000008 [ 67.774193][ T1534] x23: ffff8000123821e0 x22: dfff800000000000 x21: 0000000000000002 [ 67.776384][ T1534] x20: 0000000000000c00 x19: ffff0000cbb01c00 x18: 0000000000000001 [ 67.778689][ T1534] x17: 0000000000000000 x16: ffff8000111a3970 x15: 00000000ffffffff [ 67.780950][ T1534] x14: 0000000000ff0100 x13: 0000000000000001 x12: 0000000000ff0100 [ 67.783210][ T1534] x11: 0000000000000000 x10: 0000000000000000 x9 : 90fd68c2674ce400 [ 67.785415][ T1534] x8 : 90fd68c2674ce400 x7 : 0000000000000001 x6 : 0000000000000001 [ 67.787714][ T1534] x5 : ffff800023536278 x4 : ffff80001422f280 x3 : ffff800008503848 [ 67.789933][ T1534] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000029 [ 67.792144][ T1534] Call trace: [ 67.793046][ T1534] usb_submit_urb+0xa44/0x1580 [ 67.794349][ T1534] usb_start_wait_urb+0xe8/0x3bc [ 67.795674][ T1534] usb_bulk_msg+0x2e4/0x3e4 [ 67.796966][ T1534] amradio_set_mute+0x1a4/0x3f4 [ 67.798277][ T1534] usb_amradio_probe+0x36c/0x688 [ 67.799669][ T1534] usb_probe_interface+0x4fc/0x994 [ 67.801109][ T1534] really_probe+0x26c/0xaec [ 67.802375][ T1534] __driver_probe_device+0x180/0x314 [ 67.803906][ T1534] driver_probe_device+0x78/0x34c [ 67.805301][ T1534] __device_attach_driver+0x274/0x4c4 [ 67.806825][ T1534] bus_for_each_drv+0x150/0x1d8 [ 67.808148][ T1534] __device_attach+0x2a8/0x3d4 [ 67.809454][ T1534] device_initial_probe+0x24/0x34 [ 67.810911][ T1534] bus_probe_device+0xbc/0x1c4 [ 67.812244][ T1534] device_add+0xb04/0xf94 [ 67.813460][ T1534] usb_set_configuration+0x15b8/0x1b2c [ 67.814983][ T1534] usb_generic_driver_probe+0x8c/0x144 [ 67.816435][ T1534] usb_probe_device+0x120/0x25c [ 67.817813][ T1534] really_probe+0x26c/0xaec [ 67.819068][ T1534] __driver_probe_device+0x180/0x314 [ 67.820531][ T1534] driver_probe_device+0x78/0x34c [ 67.821995][ T1534] __device_attach_driver+0x274/0x4c4 [ 67.823473][ T1534] bus_for_each_drv+0x150/0x1d8 [ 67.824807][ T1534] __device_attach+0x2a8/0x3d4 [ 67.826149][ T1534] device_initial_probe+0x24/0x34 [ 67.827554][ T1534] bus_probe_device+0xbc/0x1c4 [ 67.828831][ T1534] device_add+0xb04/0xf94 [ 67.830055][ T1534] usb_new_device+0x7ec/0x1164 [ 67.831342][ T1534] hub_event+0x20cc/0x4188 [ 67.832566][ T1534] process_one_work+0x79c/0x1140 [ 67.833918][ T1534] worker_thread+0x8f4/0x101c [ 67.835187][ T1534] kthread+0x374/0x454 [ 67.836289][ T1534] ret_from_fork+0x10/0x20 [ 67.837501][ T1534] irq event stamp: 43828 [ 67.838674][ T1534] hardirqs last enabled at (43827): [] __up_console_sem+0xb4/0x100 [ 67.841352][ T1534] hardirqs last disabled at (43828): [] el1_dbg+0x24/0x80 [ 67.843742][ T1534] softirqs last enabled at (41680): [] handle_softirqs+0xa4c/0xbf0 [ 67.846359][ T1534] softirqs last disabled at (41671): [] __irq_exit_rcu+0x240/0x440 [ 67.848979][ T1534] ---[ end trace 16d89ea29fdaf70c ]--- [ 67.876220][ T1534] (null): radio-mr800 - initialization failed [ 67.878179][ T1534] radio-mr800: probe of 1-1:6.199 failed with error -71 [ 67.880349][ T1534] usbhid 1-1:6.199: couldn't find an input interrupt endpoint [ 67.948548][ T1534] usb 1-1: USB disconnect, device number 4 [ 68.746139][ T1534] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 68.996148][ T1534] usb 1-1: Using ep0 maxpacket: 32 [ 69.086240][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 69.176450][ T1534] usb 1-1: unable to get BOS descriptor or descriptor too short [ 69.256166][ T1534] usb 1-1: config 6 has an invalid interface number: 199 but max is 2 [ 69.258631][ T1534] usb 1-1: config 6 has an invalid interface number: 48 but max is 2 [ 69.260881][ T1534] usb 1-1: config 6 has an invalid interface number: 105 but max is 2 [ 69.263001][ T1534] usb 1-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 69.265400][ T1534] usb 1-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 69.267919][ T1534] usb 1-1: config 6 has an invalid interface descriptor of length 2, skipping [ 69.270353][ T1534] usb 1-1: config 6 has no interface number 0 [ 69.272036][ T1534] usb 1-1: config 6 has no interface number 1 [ 69.273749][ T1534] usb 1-1: config 6 has no interface number 2 [ 69.275473][ T1534] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 69.278920][ T1534] usb 1-1: config 6 interface 199 altsetting 128 has an invalid endpoint with address 0x0, skipping [ 69.281892][ T1534] usb 1-1: config 6 interface 199 altsetting 128 has a duplicate endpoint with address 0x8, skipping [ 69.284926][ T1534] usb 1-1: config 6 interface 199 altsetting 128 bulk endpoint 0x2 has invalid maxpacket 8 [ 69.287698][ T1534] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 69.290772][ T1534] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 69.293842][ T1534] usb 1-1: config 6 interface 199 altsetting 128 has a duplicate endpoint with address 0x1, skipping [ 69.296922][ T1534] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 69.299986][ T1534] usb 1-1: config 6 interface 199 altsetting 128 has a duplicate endpoint with address 0x4, skipping [ 69.302913][ T1534] usb 1-1: config 6 interface 48 altsetting 8 has a duplicate endpoint with address 0xA, skipping [ 69.305794][ T1534] usb 1-1: config 6 interface 105 altsetting 129 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 69.309381][ T1534] usb 1-1: config 6 interface 199 has no altsetting 0 [ 69.311157][ T1534] usb 1-1: config 6 interface 48 has no altsetting 0 [ 69.313013][ T1534] usb 1-1: config 6 interface 105 has no altsetting 0 [ 69.546108][ T1534] usb 1-1: string descriptor 0 read error: -22 [ 69.548056][ T1534] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=b9.c5 [ 69.550519][ T1534] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.590379][ T1534] ------------[ cut here ]------------ [ 69.591927][ T1534] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 69.593858][ T1534] WARNING: CPU: 0 PID: 1534 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1580 [ 69.596501][ T1534] Modules linked in: [ 69.597566][ T1534] CPU: 0 PID: 1534 Comm: kworker/0:2 Tainted: G W 5.15.181-syzkaller #0 [ 69.600222][ T1534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 69.602960][ T1534] Workqueue: usb_hub_wq hub_event [ 69.604299][ T1534] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 69.606444][ T1534] pc : usb_submit_urb+0xa44/0x1580 [ 69.607913][ T1534] lr : usb_submit_urb+0xa44/0x1580 [ 69.609263][ T1534] sp : ffff800023536980 [ 69.610354][ T1534] x29: ffff8000235369c0 x28: 1fffe00019ab6403 x27: ffff80001237bb88 [ 69.612660][ T1534] x26: ffff0000d20dc800 x25: ffff0000ccc5a250 x24: 0000000000000008 [ 69.614873][ T1534] x23: ffff8000123821e0 x22: dfff800000000000 x21: 0000000000000002 [ 69.617187][ T1534] x20: 0000000000000c00 x19: ffff0000ccc5a200 x18: 0000000000000001 [ 69.619340][ T1534] x17: 0000000000000000 x16: ffff8000111a3970 x15: 00000000ffffffff [ 69.621550][ T1534] x14: 0000000000ff0100 x13: 0000000000000001 x12: 0000000000ff0100 [ 69.623792][ T1534] x11: 0000000000000000 x10: 0000000000000000 x9 : 90fd68c2674ce400 [ 69.626042][ T1534] x8 : 90fd68c2674ce400 x7 : 0000000000000001 x6 : 0000000000000001 [ 69.628239][ T1534] x5 : ffff800023536278 x4 : ffff80001422f280 x3 : ffff800008503848 [ 69.630430][ T1534] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000029 [ 69.632597][ T1534] Call trace: [ 69.633506][ T1534] usb_submit_urb+0xa44/0x1580 [ 69.634835][ T1534] usb_start_wait_urb+0xe8/0x3bc [ 69.636216][ T1534] usb_bulk_msg+0x2e4/0x3e4 [ 69.637466][ T1534] amradio_set_mute+0x1a4/0x3f4 [ 69.638778][ T1534] usb_amradio_probe+0x36c/0x688 [ 69.640180][ T1534] usb_probe_interface+0x4fc/0x994 [ 69.641587][ T1534] really_probe+0x26c/0xaec [ 69.642836][ T1534] __driver_probe_device+0x180/0x314 [ 69.644274][ T1534] driver_probe_device+0x78/0x34c [ 69.645595][ T1534] __device_attach_driver+0x274/0x4c4 [ 69.647093][ T1534] bus_for_each_drv+0x150/0x1d8 [ 69.648386][ T1534] __device_attach+0x2a8/0x3d4 [ 69.649682][ T1534] device_initial_probe+0x24/0x34 [ 69.651050][ T1534] bus_probe_device+0xbc/0x1c4 [ 69.652362][ T1534] device_add+0xb04/0xf94 [ 69.653562][ T1534] usb_set_configuration+0x15b8/0x1b2c [ 69.655042][ T1534] usb_generic_driver_probe+0x8c/0x144 [ 69.656512][ T1534] usb_probe_device+0x120/0x25c [ 69.657876][ T1534] really_probe+0x26c/0xaec [ 69.659128][ T1534] __driver_probe_device+0x180/0x314 [ 69.660586][ T1534] driver_probe_device+0x78/0x34c [ 69.661966][ T1534] __device_attach_driver+0x274/0x4c4 [ 69.663553][ T1534] bus_for_each_drv+0x150/0x1d8 [ 69.664886][ T1534] __device_attach+0x2a8/0x3d4 [ 69.666267][ T1534] device_initial_probe+0x24/0x34 [ 69.667669][ T1534] bus_probe_device+0xbc/0x1c4 [ 69.668974][ T1534] device_add+0xb04/0xf94 [ 69.670132][ T1534] usb_new_device+0x7ec/0x1164 [ 69.671403][ T1534] hub_event+0x20cc/0x4188 [ 69.672638][ T1534] process_one_work+0x79c/0x1140 [ 69.674022][ T1534] worker_thread+0x8f4/0x101c [ 69.675319][ T1534] kthread+0x374/0x454 [ 69.676434][ T1534] ret_from_fork+0x10/0x20 [ 69.677638][ T1534] irq event stamp: 53068 [ 69.678797][ T1534] hardirqs last enabled at (53067): [] __up_console_sem+0xb4/0x100 [ 69.681364][ T1534] hardirqs last disabled at (53068): [] el1_dbg+0x24/0x80 [ 69.683811][ T1534] softirqs last enabled at (50924): [] handle_softirqs+0xa4c/0xbf0 [ 69.686377][ T1534] softirqs last disabled at (50915): [] __irq_exit_rcu+0x240/0x440 [ 69.688888][ T1534] ---[ end trace 16d89ea29fdaf70d ]--- [ 69.692593][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.695581][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.707304][ T1534] (null): radio-mr800 - initialization failed [ 69.709178][ T1534] radio-mr800: probe of 1-1:6.199 failed with error -71 [ 69.711310][ T1534] usbhid 1-1:6.199: couldn't find an input interrupt endpoint [ 69.786932][ T25] usb 1-1: USB disconnect, device number 5 [ 70.566091][ T13] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 70.806086][ T13] usb 1-1: Using ep0 maxpacket: 32 [ 70.966133][ T13] usb 1-1: unable to get BOS descriptor or descriptor too short [ 71.046154][ T13] usb 1-1: config 6 has an invalid interface number: 199 but max is 2 [ 71.048599][ T13] usb 1-1: config 6 has an invalid interface number: 48 but max is 2 [ 71.050793][ T13] usb 1-1: config 6 has an invalid interface number: 105 but max is 2 [ 71.053036][ T13] usb 1-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 71.055402][ T13] usb 1-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 71.057918][ T13] usb 1-1: config 6 has an invalid interface descriptor of length 2, skipping [ 71.060384][ T13] usb 1-1: config 6 has no interface number 0 [ 71.062050][ T13] usb 1-1: config 6 has no interface number 1 [ 71.063638][ T13] usb 1-1: config 6 has no interface number 2 [ 71.065291][ T13] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 71.068448][ T13] usb 1-1: config 6 interface 199 altsetting 128 has an invalid endpoint with address 0x0, skipping [ 71.071355][ T13] usb 1-1: config 6 interface 199 altsetting 128 has a duplicate endpoint with address 0x8, skipping [ 71.074298][ T13] usb 1-1: config 6 interface 199 altsetting 128 bulk endpoint 0x2 has invalid maxpacket 8 [ 71.077163][ T13] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 71.080262][ T13] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 71.083347][ T13] usb 1-1: config 6 interface 199 altsetting 128 has a duplicate endpoint with address 0x1, skipping [ 71.086414][ T13] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 71.089483][ T13] usb 1-1: config 6 interface 199 altsetting 128 has a duplicate endpoint with address 0x4, skipping [ 71.092490][ T13] usb 1-1: config 6 interface 48 altsetting 8 has a duplicate endpoint with address 0xA, skipping [ 71.095355][ T13] usb 1-1: config 6 interface 105 altsetting 129 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 71.099168][ T13] usb 1-1: config 6 interface 199 has no altsetting 0 [ 71.101044][ T13] usb 1-1: config 6 interface 48 has no altsetting 0 [ 71.102907][ T13] usb 1-1: config 6 interface 105 has no altsetting 0 [ 71.356175][ T13] usb 1-1: string descriptor 0 read error: -22 [ 71.357960][ T13] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=b9.c5 [ 71.360386][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.409922][ T13] ------------[ cut here ]------------ [ 71.411572][ T13] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 71.413580][ T13] WARNING: CPU: 0 PID: 13 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1580 [ 71.416099][ T13] Modules linked in: [ 71.417218][ T13] CPU: 0 PID: 13 Comm: kworker/0:1 Tainted: G W 5.15.181-syzkaller #0 [ 71.419939][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 71.422814][ T13] Workqueue: usb_hub_wq hub_event [ 71.424173][ T13] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 71.426376][ T13] pc : usb_submit_urb+0xa44/0x1580 [ 71.427780][ T13] lr : usb_submit_urb+0xa44/0x1580 [ 71.429181][ T13] sp : ffff80001b2f6980 [ 71.430282][ T13] x29: ffff80001b2f69c0 x28: 1fffe0001b5cc403 x27: ffff80001237bb88 [ 71.432435][ T13] x26: ffff0000ca69bd00 x25: ffff0000ccc34a50 x24: 0000000000000008 [ 71.434699][ T13] x23: ffff8000123821e0 x22: dfff800000000000 x21: 0000000000000002 [ 71.436900][ T13] x20: 0000000000000c00 x19: ffff0000ccc34a00 x18: 0000000000000001 [ 71.439068][ T13] x17: 0000000000000000 x16: ffff8000111a3970 x15: 00000000ffffffff [ 71.441327][ T13] x14: 0000000000ff0100 x13: 0000000000000001 x12: 0000000000ff0100 [ 71.443662][ T13] x11: 0000000000000000 x10: 0000000000000000 x9 : d142a8674fa49100 [ 71.445865][ T13] x8 : d142a8674fa49100 x7 : 0000000000000001 x6 : 0000000000000001 [ 71.448036][ T13] x5 : ffff80001b2f6278 x4 : ffff80001422f280 x3 : ffff800008503848 [ 71.450226][ T13] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000029 [ 71.452376][ T13] Call trace: [ 71.453311][ T13] usb_submit_urb+0xa44/0x1580 [ 71.454614][ T13] usb_start_wait_urb+0xe8/0x3bc [ 71.456002][ T13] usb_bulk_msg+0x2e4/0x3e4 [ 71.457210][ T13] amradio_set_mute+0x1a4/0x3f4 [ 71.458544][ T13] usb_amradio_probe+0x36c/0x688 [ 71.459912][ T13] usb_probe_interface+0x4fc/0x994 [ 71.461345][ T13] really_probe+0x26c/0xaec [ 71.462633][ T13] __driver_probe_device+0x180/0x314 [ 71.464168][ T13] driver_probe_device+0x78/0x34c [ 71.465555][ T13] __device_attach_driver+0x274/0x4c4 [ 71.467074][ T13] bus_for_each_drv+0x150/0x1d8 [ 71.468433][ T13] __device_attach+0x2a8/0x3d4 [ 71.469702][ T13] device_initial_probe+0x24/0x34 [ 71.471122][ T13] bus_probe_device+0xbc/0x1c4 [ 71.472391][ T13] device_add+0xb04/0xf94 [ 71.473538][ T13] usb_set_configuration+0x15b8/0x1b2c [ 71.475029][ T13] usb_generic_driver_probe+0x8c/0x144 [ 71.476500][ T13] usb_probe_device+0x120/0x25c [ 71.477818][ T13] really_probe+0x26c/0xaec [ 71.479000][ T13] __driver_probe_device+0x180/0x314 [ 71.480415][ T13] driver_probe_device+0x78/0x34c [ 71.481772][ T13] __device_attach_driver+0x274/0x4c4 [ 71.483213][ T13] bus_for_each_drv+0x150/0x1d8 [ 71.484569][ T13] __device_attach+0x2a8/0x3d4 [ 71.485888][ T13] device_initial_probe+0x24/0x34 [ 71.487288][ T13] bus_probe_device+0xbc/0x1c4 [ 71.488606][ T13] device_add+0xb04/0xf94 [ 71.489836][ T13] usb_new_device+0x7ec/0x1164 [ 71.491143][ T13] hub_event+0x20cc/0x4188 [ 71.492335][ T13] process_one_work+0x79c/0x1140 [ 71.493602][ T13] worker_thread+0x8f4/0x101c [ 71.494887][ T13] kthread+0x374/0x454 [ 71.496002][ T13] ret_from_fork+0x10/0x20 [ 71.497195][ T13] irq event stamp: 65676 [ 71.498421][ T13] hardirqs last enabled at (65675): [] __up_console_sem+0xb4/0x100 [ 71.501106][ T13] hardirqs last disabled at (65676): [] el1_dbg+0x24/0x80 [ 71.503516][ T13] softirqs last enabled at (63594): [] handle_softirqs+0xa4c/0xbf0 [ 71.506198][ T13] softirqs last disabled at (63589): [] __irq_exit_rcu+0x240/0x440 [ 71.508929][ T13] ---[ end trace 16d89ea29fdaf70e ]--- [ 71.526152][ T13] (null): radio-mr800 - initialization failed [ 71.528005][ T13] radio-mr800: probe of 1-1:6.199 failed with error -71 [ 71.530101][ T13] usbhid 1-1:6.199: couldn't find an input interrupt endpoint [ 71.607365][ T13] usb 1-1: USB disconnect, device number 6 1970/01/01 00:01:12 executed programs: 5 [ 72.386110][ T4041] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 72.656074][ T4041] usb 1-1: Using ep0 maxpacket: 32 [ 72.816128][ T4041] usb 1-1: unable to get BOS descriptor or descriptor too short [ 72.896182][ T4041] usb 1-1: config 6 has an invalid interface number: 199 but max is 2 [ 72.898818][ T4041] usb 1-1: config 6 has an invalid interface number: 48 but max is 2 [ 72.900983][ T4041] usb 1-1: config 6 has an invalid interface number: 105 but max is 2 [ 72.903235][ T4041] usb 1-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 72.905593][ T4041] usb 1-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 72.908189][ T4041] usb 1-1: config 6 has an invalid interface descriptor of length 2, skipping [ 72.910606][ T4041] usb 1-1: config 6 has no interface number 0 [ 72.912286][ T4041] usb 1-1: config 6 has no interface number 1 [ 72.913923][ T4041] usb 1-1: config 6 has no interface number 2 [ 72.915570][ T4041] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 72.918669][ T4041] usb 1-1: config 6 interface 199 altsetting 128 has an invalid endpoint with address 0x0, skipping [ 72.921648][ T4041] usb 1-1: config 6 interface 199 altsetting 128 has a duplicate endpoint with address 0x8, skipping [ 72.924523][ T4041] usb 1-1: config 6 interface 199 altsetting 128 bulk endpoint 0x2 has invalid maxpacket 8 [ 72.927387][ T4041] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 72.930324][ T4041] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 72.933405][ T4041] usb 1-1: config 6 interface 199 altsetting 128 has a duplicate endpoint with address 0x1, skipping [ 72.936433][ T4041] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 72.939343][ T4041] usb 1-1: config 6 interface 199 altsetting 128 has a duplicate endpoint with address 0x4, skipping [ 72.942277][ T4041] usb 1-1: config 6 interface 48 altsetting 8 has a duplicate endpoint with address 0xA, skipping [ 72.945145][ T4041] usb 1-1: config 6 interface 105 altsetting 129 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 72.948786][ T4041] usb 1-1: config 6 interface 199 has no altsetting 0 [ 72.950686][ T4041] usb 1-1: config 6 interface 48 has no altsetting 0 [ 72.952544][ T4041] usb 1-1: config 6 interface 105 has no altsetting 0 [ 73.186127][ T4041] usb 1-1: string descriptor 0 read error: -22 [ 73.187995][ T4041] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=b9.c5 [ 73.190379][ T4041] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.230427][ T4041] ------------[ cut here ]------------ [ 73.231946][ T4041] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 73.233946][ T4041] WARNING: CPU: 1 PID: 4041 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1580 [ 73.236617][ T4041] Modules linked in: [ 73.237639][ T4041] CPU: 1 PID: 4041 Comm: kworker/1:5 Tainted: G W 5.15.181-syzkaller #0 [ 73.240293][ T4041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 73.243132][ T4041] Workqueue: usb_hub_wq hub_event [ 73.244505][ T4041] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 73.246663][ T4041] pc : usb_submit_urb+0xa44/0x1580 [ 73.248091][ T4041] lr : usb_submit_urb+0xa44/0x1580 [ 73.249511][ T4041] sp : ffff80001f706980 [ 73.250619][ T4041] x29: ffff80001f7069c0 x28: 1fffe00019a06403 x27: ffff80001237bb88 [ 73.252878][ T4041] x26: ffff0000d1d38e00 x25: ffff0000c1599a50 x24: 0000000000000008 [ 73.255112][ T4041] x23: ffff8000123821e0 x22: dfff800000000000 x21: 0000000000000002 [ 73.257340][ T4041] x20: 0000000000000c00 x19: ffff0000c1599a00 x18: 0000000000000001 [ 73.259518][ T4041] x17: 0000000000000000 x16: ffff8000111a3970 x15: 00000000ffffffff [ 73.261764][ T4041] x14: 0000000000ff0100 x13: 0000000000000001 x12: 0000000000ff0100 [ 73.263950][ T4041] x11: 0000000000000000 x10: 0000000000000000 x9 : fb9d98c76e4ef000 [ 73.266183][ T4041] x8 : fb9d98c76e4ef000 x7 : 0000000000000001 x6 : 0000000000000001 [ 73.268319][ T4041] x5 : ffff80001f706278 x4 : ffff80001422f280 x3 : ffff800008503848 [ 73.270495][ T4041] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000029 [ 73.272687][ T4041] Call trace: [ 73.273575][ T4041] usb_submit_urb+0xa44/0x1580 [ 73.274900][ T4041] usb_start_wait_urb+0xe8/0x3bc [ 73.276220][ T4041] usb_bulk_msg+0x2e4/0x3e4 [ 73.277456][ T4041] amradio_set_mute+0x1a4/0x3f4 [ 73.278811][ T4041] usb_amradio_probe+0x36c/0x688 [ 73.280254][ T4041] usb_probe_interface+0x4fc/0x994 [ 73.281693][ T4041] really_probe+0x26c/0xaec [ 73.282936][ T4041] __driver_probe_device+0x180/0x314 [ 73.284424][ T4041] driver_probe_device+0x78/0x34c [ 73.285828][ T4041] __device_attach_driver+0x274/0x4c4 [ 73.287312][ T4041] bus_for_each_drv+0x150/0x1d8 [ 73.288593][ T4041] __device_attach+0x2a8/0x3d4 [ 73.289997][ T4041] device_initial_probe+0x24/0x34 [ 73.291313][ T4041] bus_probe_device+0xbc/0x1c4 [ 73.292638][ T4041] device_add+0xb04/0xf94 [ 73.293868][ T4041] usb_set_configuration+0x15b8/0x1b2c [ 73.295477][ T4041] usb_generic_driver_probe+0x8c/0x144 [ 73.296944][ T4041] usb_probe_device+0x120/0x25c [ 73.298267][ T4041] really_probe+0x26c/0xaec [ 73.299530][ T4041] __driver_probe_device+0x180/0x314 [ 73.300981][ T4041] driver_probe_device+0x78/0x34c [ 73.302414][ T4041] __device_attach_driver+0x274/0x4c4 [ 73.303985][ T4041] bus_for_each_drv+0x150/0x1d8 [ 73.305307][ T4041] __device_attach+0x2a8/0x3d4 [ 73.306680][ T4041] device_initial_probe+0x24/0x34 [ 73.308055][ T4041] bus_probe_device+0xbc/0x1c4 [ 73.309389][ T4041] device_add+0xb04/0xf94 [ 73.310640][ T4041] usb_new_device+0x7ec/0x1164 [ 73.312035][ T4041] hub_event+0x20cc/0x4188 [ 73.313278][ T4041] process_one_work+0x79c/0x1140 [ 73.314608][ T4041] worker_thread+0x8f4/0x101c [ 73.315889][ T4041] kthread+0x374/0x454 [ 73.317023][ T4041] ret_from_fork+0x10/0x20 [ 73.318259][ T4041] irq event stamp: 11762 [ 73.319399][ T4041] hardirqs last enabled at (11761): [] __up_console_sem+0xb4/0x100 [ 73.322043][ T4041] hardirqs last disabled at (11762): [] el1_dbg+0x24/0x80 [ 73.324447][ T4041] softirqs last enabled at (8996): [] handle_softirqs+0xa4c/0xbf0 [ 73.327045][ T4041] softirqs last disabled at (8987): [] __irq_exit_rcu+0x240/0x440 [ 73.329658][ T4041] ---[ end trace 16d89ea29fdaf70f ]--- [ 73.346189][ T4041] (null): radio-mr800 - initialization failed [ 73.348016][ T4041] radio-mr800: probe of 1-1:6.199 failed with error -71 [ 73.350157][ T4041] usbhid 1-1:6.199: couldn't find an input interrupt endpoint [ 73.427218][ T1534] usb 1-1: USB disconnect, device number 7