Warning: Permanently added '10.128.0.117' (ED25519) to the list of known hosts. 1970/01/01 00:01:25 ignoring optional flag "sandboxArg"="0" 1970/01/01 00:01:25 ignoring optional flag "type"="gce" 1970/01/01 00:01:25 parsed 1 programs 1970/01/01 00:01:25 executed programs: 0 [ 86.070479][ T4335] chnl_net:caif_netlink_parms(): no params data found [ 86.107044][ T4335] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.109001][ T4335] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.111559][ T4335] device bridge_slave_0 entered promiscuous mode [ 86.115244][ T4335] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.117146][ T4335] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.119628][ T4335] device bridge_slave_1 entered promiscuous mode [ 86.135152][ T4335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.139473][ T4335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.157631][ T4335] team0: Port device team_slave_0 added [ 86.161439][ T4335] team0: Port device team_slave_1 added [ 86.175497][ T4335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.177401][ T4335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.184590][ T4335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.188780][ T4335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.190680][ T4335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.197885][ T4335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.243597][ T4335] device hsr_slave_0 entered promiscuous mode [ 86.282484][ T4335] device hsr_slave_1 entered promiscuous mode [ 87.042668][ T4335] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.098337][ T4335] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.144206][ T4335] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.184124][ T4335] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.284637][ T4335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.296964][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 87.299558][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.306075][ T4335] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.310756][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 87.316350][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 87.318887][ T424] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.320765][ T424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.333211][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 87.335764][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 87.338830][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 87.341392][ T424] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.343398][ T424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.347980][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 87.351218][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 87.354631][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 87.357868][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 87.369181][ T4335] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 87.373722][ T4335] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.378719][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 87.381201][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 87.389651][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 87.392897][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 87.396252][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 87.399376][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 87.402556][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 87.409698][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 87.491299][ T4335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.495593][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 87.497737][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 87.513376][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 87.516198][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.529668][ T4335] device veth0_vlan entered promiscuous mode [ 87.533536][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.537509][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.540321][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.543597][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.548537][ T4335] device veth1_vlan entered promiscuous mode [ 87.569377][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 87.574212][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 87.576950][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.579619][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.585320][ T4335] device veth0_macvtap entered promiscuous mode [ 87.590297][ T4335] device veth1_macvtap entered promiscuous mode [ 87.605332][ T4335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.607433][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 87.610026][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 87.614026][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.617135][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.624318][ T4335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.628254][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.630935][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.636111][ T4335] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.638403][ T4335] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.640725][ T4335] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.645643][ T4335] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.691705][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.693991][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.696811][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.716400][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.718592][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.721425][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.021756][ T4066] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 88.042996][ T3614] Bluetooth: hci0: command 0x0409 tx timeout [ 88.293134][ T4066] usb 1-1: Using ep0 maxpacket: 32 [ 88.492030][ T4066] usb 1-1: unable to get BOS descriptor or descriptor too short [ 88.593093][ T4066] usb 1-1: config 6 has an invalid interface number: 199 but max is 2 [ 88.595541][ T4066] usb 1-1: config 6 has an invalid interface number: 48 but max is 2 [ 88.597704][ T4066] usb 1-1: config 6 has an invalid interface number: 105 but max is 2 [ 88.599873][ T4066] usb 1-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 88.602713][ T4066] usb 1-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 88.604999][ T4066] usb 1-1: config 6 has an invalid interface descriptor of length 2, skipping [ 88.607345][ T4066] usb 1-1: config 6 has no interface number 0 [ 88.608921][ T4066] usb 1-1: config 6 has no interface number 1 [ 88.610534][ T4066] usb 1-1: config 6 has no interface number 2 [ 88.614029][ T4066] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 88.616930][ T4066] usb 1-1: config 6 interface 199 altsetting 128 has an invalid endpoint with address 0x0, skipping [ 88.620275][ T4066] usb 1-1: config 6 interface 199 altsetting 128 has a duplicate endpoint with address 0x8, skipping [ 88.623742][ T4066] usb 1-1: config 6 interface 199 altsetting 128 bulk endpoint 0x2 has invalid maxpacket 8 [ 88.626364][ T4066] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 88.629286][ T4066] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 88.634043][ T4066] usb 1-1: config 6 interface 199 altsetting 128 has a duplicate endpoint with address 0x1, skipping [ 88.636908][ T4066] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 88.639842][ T4066] usb 1-1: config 6 interface 199 altsetting 128 has a duplicate endpoint with address 0x4, skipping [ 88.643203][ T4066] usb 1-1: config 6 interface 48 altsetting 8 has a duplicate endpoint with address 0xA, skipping [ 88.646304][ T4066] usb 1-1: config 6 interface 105 altsetting 129 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 88.649716][ T4066] usb 1-1: config 6 interface 199 has no altsetting 0 [ 88.651467][ T4066] usb 1-1: config 6 interface 48 has no altsetting 0 [ 88.655116][ T4066] usb 1-1: config 6 interface 105 has no altsetting 0 [ 88.933355][ T4066] usb 1-1: string descriptor 0 read error: -22 [ 88.935274][ T4066] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=b9.c5 [ 88.937629][ T4066] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.985874][ T4066] ------------[ cut here ]------------ [ 88.987447][ T4066] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 88.989367][ T4066] WARNING: CPU: 1 PID: 4066 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1580 [ 88.991897][ T4066] Modules linked in: [ 88.992935][ T4066] CPU: 1 PID: 4066 Comm: kworker/1:3 Not tainted 5.15.188-syzkaller #0 [ 88.995225][ T4066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 88.997997][ T4066] Workqueue: usb_hub_wq hub_event [ 88.999379][ T4066] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 89.001512][ T4066] pc : usb_submit_urb+0xa44/0x1580 [ 89.002910][ T4066] lr : usb_submit_urb+0xa44/0x1580 [ 89.004351][ T4066] sp : ffff80001fa96980 [ 89.005469][ T4066] x29: ffff80001fa969c0 x28: 1fffe000182d9203 x27: ffff8000123ad008 [ 89.007656][ T4066] x26: ffff0000c2c44200 x25: ffff0000c1c33a50 x24: 0000000000000008 [ 89.009857][ T4066] x23: ffff8000123b3660 x22: dfff800000000000 x21: 0000000000000002 [ 89.012037][ T4066] x20: 0000000000000c00 x19: ffff0000c1c33a00 x18: 0000000000000001 [ 89.014241][ T4066] x17: 0000000000000000 x16: ffff8000111d162c x15: 00000000ffffffff [ 89.016463][ T4066] x14: 0000000000ff0100 x13: 0000000000000001 x12: 0000000000ff0100 [ 89.018624][ T4066] x11: 0000000000000000 x10: 0000000000000000 x9 : 142d453d54454500 [ 89.020821][ T4066] x8 : 142d453d54454500 x7 : 0000000000000001 x6 : 0000000000000001 [ 89.023039][ T4066] x5 : ffff80001fa96278 x4 : ffff80001425f400 x3 : ffff8000085051a4 [ 89.025296][ T4066] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000029 [ 89.027485][ T4066] Call trace: [ 89.028369][ T4066] usb_submit_urb+0xa44/0x1580 [ 89.029683][ T4066] usb_start_wait_urb+0xe8/0x3bc [ 89.031018][ T4066] usb_bulk_msg+0x2e4/0x3e4 [ 89.032280][ T4066] amradio_set_mute+0x1a4/0x3f4 [ 89.033611][ T4066] usb_amradio_probe+0x36c/0x688 [ 89.034953][ T4066] usb_probe_interface+0x4fc/0x994 [ 89.036359][ T4066] really_probe+0x26c/0xaec [ 89.037619][ T4066] __driver_probe_device+0x180/0x314 [ 89.039144][ T4066] driver_probe_device+0x78/0x34c [ 89.040507][ T4066] __device_attach_driver+0x274/0x4c4 [ 89.041986][ T4066] bus_for_each_drv+0x150/0x1d8 [ 89.043356][ T4066] __device_attach+0x2a8/0x3d4 [ 89.044627][ T4066] device_initial_probe+0x24/0x34 [ 89.045987][ T4066] bus_probe_device+0xbc/0x1c4 [ 89.047319][ T4066] device_add+0xb04/0xf94 [ 89.048599][ T4066] usb_set_configuration+0x15b8/0x1b2c [ 89.050134][ T4066] usb_generic_driver_probe+0x8c/0x144 [ 89.051612][ T4066] usb_probe_device+0x120/0x25c [ 89.052936][ T4066] really_probe+0x26c/0xaec [ 89.054171][ T4066] __driver_probe_device+0x180/0x314 [ 89.055621][ T4066] driver_probe_device+0x78/0x34c [ 89.056994][ T4066] __device_attach_driver+0x274/0x4c4 [ 89.058475][ T4066] bus_for_each_drv+0x150/0x1d8 [ 89.059784][ T4066] __device_attach+0x2a8/0x3d4 [ 89.061104][ T4066] device_initial_probe+0x24/0x34 [ 89.062447][ T4066] bus_probe_device+0xbc/0x1c4 [ 89.063729][ T4066] device_add+0xb04/0xf94 [ 89.064900][ T4066] usb_new_device+0x7ec/0x1164 [ 89.066261][ T4066] hub_event+0x20cc/0x4188 [ 89.067494][ T4066] process_one_work+0x79c/0x1140 [ 89.068832][ T4066] worker_thread+0x8f4/0x101c [ 89.070127][ T4066] kthread+0x374/0x454 [ 89.071231][ T4066] ret_from_fork+0x10/0x20 [ 89.072436][ T4066] irq event stamp: 7146 [ 89.073611][ T4066] hardirqs last enabled at (7145): [] __up_console_sem+0xb4/0x100 [ 89.076259][ T4066] hardirqs last disabled at (7146): [] el1_dbg+0x24/0x80 [ 89.078670][ T4066] softirqs last enabled at (4750): [] handle_softirqs+0xa4c/0xbf0 [ 89.081294][ T4066] softirqs last disabled at (4725): [] __irq_exit_rcu+0x240/0x440 [ 89.083909][ T4066] ---[ end trace 87225c2a42c75568 ]--- [ 89.121782][ T4066] (null): radio-mr800 - initialization failed [ 89.123783][ T4066] radio-mr800: probe of 1-1:6.199 failed with error -71 [ 89.125910][ T4066] usbhid 1-1:6.199: couldn't find an input interrupt endpoint [ 89.191489][ T4066] usb 1-1: USB disconnect, device number 2 [ 89.991809][ T1534] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 90.112112][ T4065] Bluetooth: hci0: command 0x041b tx timeout [ 90.231847][ T1534] usb 1-1: Using ep0 maxpacket: 32 [ 90.391885][ T1534] usb 1-1: unable to get BOS descriptor or descriptor too short [ 90.471913][ T1534] usb 1-1: config 6 has an invalid interface number: 199 but max is 2 [ 90.474266][ T1534] usb 1-1: config 6 has an invalid interface number: 48 but max is 2 [ 90.476392][ T1534] usb 1-1: config 6 has an invalid interface number: 105 but max is 2 [ 90.478539][ T1534] usb 1-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 90.480825][ T1534] usb 1-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 90.484207][ T1534] usb 1-1: config 6 has an invalid interface descriptor of length 2, skipping [ 90.486549][ T1534] usb 1-1: config 6 has no interface number 0 [ 90.488137][ T1534] usb 1-1: config 6 has no interface number 1 [ 90.489772][ T1534] usb 1-1: config 6 has no interface number 2 [ 90.491461][ T1534] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 90.495246][ T1534] usb 1-1: config 6 interface 199 altsetting 128 has an invalid endpoint with address 0x0, skipping [ 90.498106][ T1534] usb 1-1: config 6 interface 199 altsetting 128 has a duplicate endpoint with address 0x8, skipping [ 90.500953][ T1534] usb 1-1: config 6 interface 199 altsetting 128 bulk endpoint 0x2 has invalid maxpacket 8 [ 90.504200][ T1534] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 90.507096][ T1534] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 90.510053][ T1534] usb 1-1: config 6 interface 199 altsetting 128 has a duplicate endpoint with address 0x1, skipping [ 90.513712][ T1534] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 90.516664][ T1534] usb 1-1: config 6 interface 199 altsetting 128 has a duplicate endpoint with address 0x4, skipping [ 90.519479][ T1534] usb 1-1: config 6 interface 48 altsetting 8 has a duplicate endpoint with address 0xA, skipping [ 90.522797][ T1534] usb 1-1: config 6 interface 105 altsetting 129 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 90.526247][ T1534] usb 1-1: config 6 interface 199 has no altsetting 0 [ 90.528081][ T1534] usb 1-1: config 6 interface 48 has no altsetting 0 [ 90.529803][ T1534] usb 1-1: config 6 interface 105 has no altsetting 0 [ 90.761830][ T1534] usb 1-1: string descriptor 0 read error: -22 [ 90.763699][ T1534] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=b9.c5 [ 90.766153][ T1534] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.814421][ T1534] ------------[ cut here ]------------ [ 90.815931][ T1534] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 90.817826][ T1534] WARNING: CPU: 0 PID: 1534 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1580 [ 90.820354][ T1534] Modules linked in: [ 90.821349][ T1534] CPU: 0 PID: 1534 Comm: kworker/0:2 Tainted: G W 5.15.188-syzkaller #0 [ 90.823907][ T1534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 90.826596][ T1534] Workqueue: usb_hub_wq hub_event [ 90.827926][ T1534] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 90.830029][ T1534] pc : usb_submit_urb+0xa44/0x1580 [ 90.831419][ T1534] lr : usb_submit_urb+0xa44/0x1580 [ 90.832778][ T1534] sp : ffff800023416980 [ 90.833873][ T1534] x29: ffff8000234169c0 x28: 1fffe0001842a003 x27: ffff8000123ad008 [ 90.836069][ T1534] x26: ffff0000cf2e6900 x25: ffff0000ce060e50 x24: 0000000000000008 [ 90.838274][ T1534] x23: ffff8000123b3660 x22: dfff800000000000 x21: 0000000000000002 [ 90.840442][ T1534] x20: 0000000000000c00 x19: ffff0000ce060e00 x18: 0000000000000001 [ 90.842620][ T1534] x17: 0000000000000000 x16: ffff8000111d162c x15: 00000000ffffffff [ 90.844775][ T1534] x14: 0000000000ff0100 x13: 0000000000000001 x12: 0000000000ff0100 [ 90.846982][ T1534] x11: 0000000000000000 x10: 0000000000000000 x9 : eb0ca3bd864b9400 [ 90.849145][ T1534] x8 : eb0ca3bd864b9400 x7 : 0000000000000001 x6 : 0000000000000001 [ 90.851284][ T1534] x5 : ffff800023416278 x4 : ffff80001425f400 x3 : ffff8000085051a4 [ 90.853511][ T1534] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000029 [ 90.855680][ T1534] Call trace: [ 90.856610][ T1534] usb_submit_urb+0xa44/0x1580 [ 90.857888][ T1534] usb_start_wait_urb+0xe8/0x3bc [ 90.859261][ T1534] usb_bulk_msg+0x2e4/0x3e4 [ 90.860475][ T1534] amradio_set_mute+0x1a4/0x3f4 [ 90.861775][ T1534] usb_amradio_probe+0x36c/0x688 [ 90.863110][ T1534] usb_probe_interface+0x4fc/0x994 [ 90.864484][ T1534] really_probe+0x26c/0xaec [ 90.865687][ T1534] __driver_probe_device+0x180/0x314 [ 90.867096][ T1534] driver_probe_device+0x78/0x34c [ 90.868468][ T1534] __device_attach_driver+0x274/0x4c4 [ 90.869922][ T1534] bus_for_each_drv+0x150/0x1d8 [ 90.871232][ T1534] __device_attach+0x2a8/0x3d4 [ 90.872519][ T1534] device_initial_probe+0x24/0x34 [ 90.873899][ T1534] bus_probe_device+0xbc/0x1c4 [ 90.875202][ T1534] device_add+0xb04/0xf94 [ 90.876360][ T1534] usb_set_configuration+0x15b8/0x1b2c [ 90.877829][ T1534] usb_generic_driver_probe+0x8c/0x144 [ 90.879306][ T1534] usb_probe_device+0x120/0x25c [ 90.880627][ T1534] really_probe+0x26c/0xaec [ 90.881876][ T1534] __driver_probe_device+0x180/0x314 [ 90.883363][ T1534] driver_probe_device+0x78/0x34c [ 90.884737][ T1534] __device_attach_driver+0x274/0x4c4 [ 90.886206][ T1534] bus_for_each_drv+0x150/0x1d8 [ 90.887512][ T1534] __device_attach+0x2a8/0x3d4 [ 90.888792][ T1534] device_initial_probe+0x24/0x34 [ 90.890171][ T1534] bus_probe_device+0xbc/0x1c4 [ 90.891508][ T1534] device_add+0xb04/0xf94 [ 90.892698][ T1534] usb_new_device+0x7ec/0x1164 [ 90.894024][ T1534] hub_event+0x20cc/0x4188 [ 90.895228][ T1534] process_one_work+0x79c/0x1140 [ 90.896562][ T1534] worker_thread+0x8f4/0x101c [ 90.897824][ T1534] kthread+0x374/0x454 [ 90.898957][ T1534] ret_from_fork+0x10/0x20 [ 90.900154][ T1534] irq event stamp: 58790 [ 90.901315][ T1534] hardirqs last enabled at (58789): [] __up_console_sem+0xb4/0x100 [ 90.903901][ T1534] hardirqs last disabled at (58790): [] el1_dbg+0x24/0x80 [ 90.906273][ T1534] softirqs last enabled at (56724): [] handle_softirqs+0xa4c/0xbf0 [ 90.908839][ T1534] softirqs last disabled at (56715): [] __irq_exit_rcu+0x240/0x440 [ 90.911357][ T1534] ---[ end trace 87225c2a42c75569 ]--- [ 90.931864][ T1534] (null): radio-mr800 - initialization failed [ 90.933673][ T1534] radio-mr800: probe of 1-1:6.199 failed with error -71 [ 90.935731][ T1534] usbhid 1-1:6.199: couldn't find an input interrupt endpoint [ 91.013343][ T4066] usb 1-1: USB disconnect, device number 3 1970/01/01 00:01:31 executed programs: 2 [ 91.813070][ T4066] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 92.051871][ T4066] usb 1-1: Using ep0 maxpacket: 32 [ 92.192448][ T13] Bluetooth: hci0: command 0x040f tx timeout [ 92.241901][ T4066] usb 1-1: unable to get BOS descriptor or descriptor too short [ 92.341825][ T4066] usb 1-1: config 6 has an invalid interface number: 199 but max is 2 [ 92.344269][ T4066] usb 1-1: config 6 has an invalid interface number: 48 but max is 2 [ 92.346422][ T4066] usb 1-1: config 6 has an invalid interface number: 105 but max is 2 [ 92.348554][ T4066] usb 1-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 92.350822][ T4066] usb 1-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 92.353751][ T4066] usb 1-1: config 6 has an invalid interface descriptor of length 2, skipping [ 92.356076][ T4066] usb 1-1: config 6 has no interface number 0 [ 92.357637][ T4066] usb 1-1: config 6 has no interface number 1 [ 92.359211][ T4066] usb 1-1: config 6 has no interface number 2 [ 92.360853][ T4066] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 92.363963][ T4066] usb 1-1: config 6 interface 199 altsetting 128 has an invalid endpoint with address 0x0, skipping [ 92.366940][ T4066] usb 1-1: config 6 interface 199 altsetting 128 has a duplicate endpoint with address 0x8, skipping [ 92.369746][ T4066] usb 1-1: config 6 interface 199 altsetting 128 bulk endpoint 0x2 has invalid maxpacket 8 [ 92.372426][ T4066] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 92.375265][ T4066] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 92.378139][ T4066] usb 1-1: config 6 interface 199 altsetting 128 has a duplicate endpoint with address 0x1, skipping [ 92.380962][ T4066] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 92.384134][ T4066] usb 1-1: config 6 interface 199 altsetting 128 has a duplicate endpoint with address 0x4, skipping [ 92.386975][ T4066] usb 1-1: config 6 interface 48 altsetting 8 has a duplicate endpoint with address 0xA, skipping [ 92.389719][ T4066] usb 1-1: config 6 interface 105 altsetting 129 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 92.393280][ T4066] usb 1-1: config 6 interface 199 has no altsetting 0 [ 92.395018][ T4066] usb 1-1: config 6 interface 48 has no altsetting 0 [ 92.396787][ T4066] usb 1-1: config 6 interface 105 has no altsetting 0 [ 92.661820][ T4066] usb 1-1: string descriptor 0 read error: -22 [ 92.663599][ T4066] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=b9.c5 [ 92.665936][ T4066] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.714625][ T4066] ------------[ cut here ]------------ [ 92.716154][ T4066] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 92.718044][ T4066] WARNING: CPU: 1 PID: 4066 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1580 [ 92.720583][ T4066] Modules linked in: [ 92.721587][ T4066] CPU: 1 PID: 4066 Comm: kworker/1:3 Tainted: G W 5.15.188-syzkaller #0 [ 92.724184][ T4066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 92.726925][ T4066] Workqueue: usb_hub_wq hub_event [ 92.728301][ T4066] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 92.730409][ T4066] pc : usb_submit_urb+0xa44/0x1580 [ 92.731779][ T4066] lr : usb_submit_urb+0xa44/0x1580 [ 92.733217][ T4066] sp : ffff80001fa96980 [ 92.734331][ T4066] x29: ffff80001fa969c0 x28: 1fffe0001bbd4403 x27: ffff8000123ad008 [ 92.736493][ T4066] x26: ffff0000cd208c00 x25: ffff0000c2a43650 x24: 0000000000000008 [ 92.738659][ T4066] x23: ffff8000123b3660 x22: dfff800000000000 x21: 0000000000000002 [ 92.740836][ T4066] x20: 0000000000000c00 x19: ffff0000c2a43600 x18: 0000000000000001 [ 92.742998][ T4066] x17: 0000000000000000 x16: ffff8000111d162c x15: 00000000ffffffff [ 92.745143][ T4066] x14: 0000000000ff0100 x13: 0000000000000001 x12: 0000000000ff0100 [ 92.747298][ T4066] x11: 0000000000000000 x10: 0000000000000000 x9 : 142d453d54454500 [ 92.749433][ T4066] x8 : 142d453d54454500 x7 : 0000000000000001 x6 : 0000000000000001 [ 92.751642][ T4066] x5 : ffff80001fa96278 x4 : ffff80001425f400 x3 : ffff8000085051a4 [ 92.753807][ T4066] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000029 [ 92.756012][ T4066] Call trace: [ 92.756881][ T4066] usb_submit_urb+0xa44/0x1580 [ 92.758174][ T4066] usb_start_wait_urb+0xe8/0x3bc [ 92.759488][ T4066] usb_bulk_msg+0x2e4/0x3e4 [ 92.760696][ T4066] amradio_set_mute+0x1a4/0x3f4 [ 92.762001][ T4066] usb_amradio_probe+0x36c/0x688 [ 92.763321][ T4066] usb_probe_interface+0x4fc/0x994 [ 92.764680][ T4066] really_probe+0x26c/0xaec [ 92.765899][ T4066] __driver_probe_device+0x180/0x314 [ 92.767333][ T4066] driver_probe_device+0x78/0x34c [ 92.768727][ T4066] __device_attach_driver+0x274/0x4c4 [ 92.770192][ T4066] bus_for_each_drv+0x150/0x1d8 [ 92.771567][ T4066] __device_attach+0x2a8/0x3d4 [ 92.772896][ T4066] device_initial_probe+0x24/0x34 [ 92.774345][ T4066] bus_probe_device+0xbc/0x1c4 [ 92.775647][ T4066] device_add+0xb04/0xf94 [ 92.776803][ T4066] usb_set_configuration+0x15b8/0x1b2c [ 92.778289][ T4066] usb_generic_driver_probe+0x8c/0x144 [ 92.779749][ T4066] usb_probe_device+0x120/0x25c [ 92.781068][ T4066] really_probe+0x26c/0xaec [ 92.782318][ T4066] __driver_probe_device+0x180/0x314 [ 92.783740][ T4066] driver_probe_device+0x78/0x34c [ 92.785172][ T4066] __device_attach_driver+0x274/0x4c4 [ 92.786623][ T4066] bus_for_each_drv+0x150/0x1d8 [ 92.787977][ T4066] __device_attach+0x2a8/0x3d4 [ 92.789349][ T4066] device_initial_probe+0x24/0x34 [ 92.790780][ T4066] bus_probe_device+0xbc/0x1c4 [ 92.792073][ T4066] device_add+0xb04/0xf94 [ 92.793234][ T4066] usb_new_device+0x7ec/0x1164 [ 92.794515][ T4066] hub_event+0x20cc/0x4188 [ 92.795695][ T4066] process_one_work+0x79c/0x1140 [ 92.797024][ T4066] worker_thread+0x8f4/0x101c [ 92.798284][ T4066] kthread+0x374/0x454 [ 92.799362][ T4066] ret_from_fork+0x10/0x20 [ 92.800579][ T4066] irq event stamp: 21532 [ 92.801759][ T4066] hardirqs last enabled at (21531): [] __up_console_sem+0xb4/0x100 [ 92.804339][ T4066] hardirqs last disabled at (21532): [] el1_dbg+0x24/0x80 [ 92.806758][ T4066] softirqs last enabled at (21318): [] handle_softirqs+0xa4c/0xbf0 [ 92.809382][ T4066] softirqs last disabled at (21213): [] __irq_exit_rcu+0x240/0x440 [ 92.811983][ T4066] ---[ end trace 87225c2a42c7556a ]--- [ 92.833640][ T4066] (null): radio-mr800 - initialization failed [ 92.835430][ T4066] radio-mr800: probe of 1-1:6.199 failed with error -71 [ 92.837498][ T4066] usbhid 1-1:6.199: couldn't find an input interrupt endpoint [ 92.913586][ T1959] usb 1-1: USB disconnect, device number 4 [ 93.721790][ T4066] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 93.971773][ T4066] usb 1-1: Using ep0 maxpacket: 32 [ 94.151821][ T4066] usb 1-1: unable to get BOS descriptor or descriptor too short [ 94.231829][ T4066] usb 1-1: config 6 has an invalid interface number: 199 but max is 2 [ 94.234173][ T4066] usb 1-1: config 6 has an invalid interface number: 48 but max is 2 [ 94.236348][ T4066] usb 1-1: config 6 has an invalid interface number: 105 but max is 2 [ 94.238469][ T4066] usb 1-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 94.240683][ T4066] usb 1-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 94.243136][ T4066] usb 1-1: config 6 has an invalid interface descriptor of length 2, skipping [ 94.245593][ T4066] usb 1-1: config 6 has no interface number 0 [ 94.247275][ T4066] usb 1-1: config 6 has no interface number 1 [ 94.248848][ T4066] usb 1-1: config 6 has no interface number 2 [ 94.250835][ T4066] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 94.253952][ T4066] usb 1-1: config 6 interface 199 altsetting 128 has an invalid endpoint with address 0x0, skipping [ 94.256875][ T4066] usb 1-1: config 6 interface 199 altsetting 128 has a duplicate endpoint with address 0x8, skipping [ 94.259712][ T4066] usb 1-1: config 6 interface 199 altsetting 128 bulk endpoint 0x2 has invalid maxpacket 8 [ 94.262448][ T4066] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 94.265365][ T4066] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 94.268309][ T4066] usb 1-1: config 6 interface 199 altsetting 128 has a duplicate endpoint with address 0x1, skipping [ 94.271161][ T4066] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 94.274233][ T4066] usb 1-1: config 6 interface 199 altsetting 128 has a duplicate endpoint with address 0x4, skipping [ 94.277123][ T4066] usb 1-1: config 6 interface 48 altsetting 8 has a duplicate endpoint with address 0xA, skipping [ 94.279868][ T4066] usb 1-1: config 6 interface 105 altsetting 129 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 94.283452][ T4066] usb 1-1: config 6 interface 199 has no altsetting 0 [ 94.285305][ T4066] usb 1-1: config 6 interface 48 has no altsetting 0 [ 94.287053][ T4066] usb 1-1: config 6 interface 105 has no altsetting 0 [ 94.288938][ T3614] Bluetooth: hci0: command 0x0419 tx timeout [ 94.551793][ T4066] usb 1-1: string descriptor 0 read error: -22 [ 94.553619][ T4066] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=b9.c5 [ 94.556010][ T4066] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.595411][ T4066] ------------[ cut here ]------------ [ 94.597076][ T4066] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 94.598948][ T4066] WARNING: CPU: 1 PID: 4066 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1580 [ 94.601458][ T4066] Modules linked in: [ 94.602495][ T4066] CPU: 1 PID: 4066 Comm: kworker/1:3 Tainted: G W 5.15.188-syzkaller #0 [ 94.605095][ T4066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 94.607783][ T4066] Workqueue: usb_hub_wq hub_event [ 94.609148][ T4066] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 94.611222][ T4066] pc : usb_submit_urb+0xa44/0x1580 [ 94.612611][ T4066] lr : usb_submit_urb+0xa44/0x1580 [ 94.613968][ T4066] sp : ffff80001fa96980 [ 94.615075][ T4066] x29: ffff80001fa969c0 x28: 1fffe0001b3ba003 x27: ffff8000123ad008 [ 94.617321][ T4066] x26: ffff0000c1499300 x25: ffff0000c0ff0250 x24: 0000000000000008 [ 94.619509][ T4066] x23: ffff8000123b3660 x22: dfff800000000000 x21: 0000000000000002 [ 94.621630][ T4066] x20: 0000000000000c00 x19: ffff0000c0ff0200 x18: 0000000000000001 [ 94.623771][ T4066] x17: 0000000000000000 x16: ffff8000111d162c x15: 00000000ffffffff [ 94.626081][ T4066] x14: 0000000000ff0100 x13: 0000000000000001 x12: 0000000000ff0100 [ 94.628227][ T4066] x11: 0000000000000000 x10: 0000000000000000 x9 : 142d453d54454500 [ 94.630495][ T4066] x8 : 142d453d54454500 x7 : 0000000000000001 x6 : 0000000000000001 [ 94.632606][ T4066] x5 : ffff80001fa96278 x4 : ffff80001425f400 x3 : ffff8000085051a4 [ 94.634963][ T4066] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000029 [ 94.637215][ T4066] Call trace: [ 94.638108][ T4066] usb_submit_urb+0xa44/0x1580 [ 94.639420][ T4066] usb_start_wait_urb+0xe8/0x3bc [ 94.640794][ T4066] usb_bulk_msg+0x2e4/0x3e4 [ 94.642095][ T4066] amradio_set_mute+0x1a4/0x3f4 [ 94.643454][ T4066] usb_amradio_probe+0x36c/0x688 [ 94.644821][ T4066] usb_probe_interface+0x4fc/0x994 [ 94.646271][ T4066] really_probe+0x26c/0xaec [ 94.647531][ T4066] __driver_probe_device+0x180/0x314 [ 94.649024][ T4066] driver_probe_device+0x78/0x34c [ 94.650473][ T4066] __device_attach_driver+0x274/0x4c4 [ 94.652119][ T4066] bus_for_each_drv+0x150/0x1d8 [ 94.653501][ T4066] __device_attach+0x2a8/0x3d4 [ 94.654807][ T4066] device_initial_probe+0x24/0x34 [ 94.656166][ T4066] bus_probe_device+0xbc/0x1c4 [ 94.657433][ T4066] device_add+0xb04/0xf94 [ 94.658587][ T4066] usb_set_configuration+0x15b8/0x1b2c [ 94.660124][ T4066] usb_generic_driver_probe+0x8c/0x144 [ 94.661628][ T4066] usb_probe_device+0x120/0x25c [ 94.662933][ T4066] really_probe+0x26c/0xaec [ 94.664142][ T4066] __driver_probe_device+0x180/0x314 [ 94.665541][ T4066] driver_probe_device+0x78/0x34c [ 94.666909][ T4066] __device_attach_driver+0x274/0x4c4 [ 94.668334][ T4066] bus_for_each_drv+0x150/0x1d8 [ 94.669689][ T4066] __device_attach+0x2a8/0x3d4 [ 94.670997][ T4066] device_initial_probe+0x24/0x34 [ 94.672352][ T4066] bus_probe_device+0xbc/0x1c4 [ 94.673651][ T4066] device_add+0xb04/0xf94 [ 94.674801][ T4066] usb_new_device+0x7ec/0x1164 [ 94.676105][ T4066] hub_event+0x20cc/0x4188 [ 94.677310][ T4066] process_one_work+0x79c/0x1140 [ 94.678662][ T4066] worker_thread+0x8f4/0x101c [ 94.679934][ T4066] kthread+0x374/0x454 [ 94.681045][ T4066] ret_from_fork+0x10/0x20 [ 94.682248][ T4066] irq event stamp: 27468 [ 94.683381][ T4066] hardirqs last enabled at (27467): [] __up_console_sem+0xb4/0x100 [ 94.686018][ T4066] hardirqs last disabled at (27468): [] el1_dbg+0x24/0x80 [ 94.688395][ T4066] softirqs last enabled at (25670): [] handle_softirqs+0xa4c/0xbf0 [ 94.690994][ T4066] softirqs last disabled at (25565): [] __irq_exit_rcu+0x240/0x440 [ 94.693562][ T4066] ---[ end trace 87225c2a42c7556b ]--- [ 94.711754][ T4066] (null): radio-mr800 - initialization failed [ 94.713585][ T4066] radio-mr800: probe of 1-1:6.199 failed with error -71 [ 94.715685][ T4066] usbhid 1-1:6.199: couldn't find an input interrupt endpoint [ 94.793320][ T13] usb 1-1: USB disconnect, device number 5 [ 95.581747][ T13] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 95.821806][ T13] usb 1-1: Using ep0 maxpacket: 32 [ 95.981830][ T13] usb 1-1: unable to get BOS descriptor or descriptor too short [ 96.061906][ T13] usb 1-1: config 6 has an invalid interface number: 199 but max is 2 [ 96.064138][ T13] usb 1-1: config 6 has an invalid interface number: 48 but max is 2 [ 96.066262][ T13] usb 1-1: config 6 has an invalid interface number: 105 but max is 2 [ 96.068408][ T13] usb 1-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 96.070643][ T13] usb 1-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 96.074251][ T13] usb 1-1: config 6 has an invalid interface descriptor of length 2, skipping [ 96.076551][ T13] usb 1-1: config 6 has no interface number 0 [ 96.078179][ T13] usb 1-1: config 6 has no interface number 1 [ 96.079830][ T13] usb 1-1: config 6 has no interface number 2 [ 96.081455][ T13] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 96.084467][ T13] usb 1-1: config 6 interface 199 altsetting 128 has an invalid endpoint with address 0x0, skipping [ 96.087316][ T13] usb 1-1: config 6 interface 199 altsetting 128 has a duplicate endpoint with address 0x8, skipping [ 96.090123][ T13] usb 1-1: config 6 interface 199 altsetting 128 bulk endpoint 0x2 has invalid maxpacket 8 [ 96.094155][ T13] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 96.097065][ T13] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 96.099994][ T13] usb 1-1: config 6 interface 199 altsetting 128 has a duplicate endpoint with address 0x1, skipping [ 96.103045][ T13] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 96.105914][ T13] usb 1-1: config 6 interface 199 altsetting 128 has a duplicate endpoint with address 0x4, skipping [ 96.108744][ T13] usb 1-1: config 6 interface 48 altsetting 8 has a duplicate endpoint with address 0xA, skipping [ 96.111495][ T13] usb 1-1: config 6 interface 105 altsetting 129 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 96.116453][ T13] usb 1-1: config 6 interface 199 has no altsetting 0 [ 96.118189][ T13] usb 1-1: config 6 interface 48 has no altsetting 0 [ 96.119997][ T13] usb 1-1: config 6 interface 105 has no altsetting 0 [ 96.371836][ T13] usb 1-1: string descriptor 0 read error: -22 [ 96.373658][ T13] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=b9.c5 [ 96.376007][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.435364][ T13] ------------[ cut here ]------------ [ 96.436920][ T13] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 96.438821][ T13] WARNING: CPU: 0 PID: 13 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1580 [ 96.441277][ T13] Modules linked in: [ 96.442303][ T13] CPU: 0 PID: 13 Comm: kworker/0:1 Tainted: G W 5.15.188-syzkaller #0 [ 96.444858][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 96.447624][ T13] Workqueue: usb_hub_wq hub_event [ 96.448957][ T13] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 96.451033][ T13] pc : usb_submit_urb+0xa44/0x1580 [ 96.452414][ T13] lr : usb_submit_urb+0xa44/0x1580 [ 96.453785][ T13] sp : ffff80001b336980 [ 96.454877][ T13] x29: ffff80001b3369c0 x28: 1fffe00018252e03 x27: ffff8000123ad008 [ 96.457076][ T13] x26: ffff0000d0ad7600 x25: ffff0000ce05b450 x24: 0000000000000008 [ 96.459239][ T13] x23: ffff8000123b3660 x22: dfff800000000000 x21: 0000000000000002 [ 96.461423][ T13] x20: 0000000000000c00 x19: ffff0000ce05b400 x18: 0000000000000001 [ 96.463626][ T13] x17: 0000000000000000 x16: ffff8000111d162c x15: 00000000ffffffff [ 96.465871][ T13] x14: 0000000000ff0100 x13: 0000000000000001 x12: 0000000000ff0100 [ 96.468033][ T13] x11: 0000000000000000 x10: 0000000000000000 x9 : 26a6c76ea014ad00 [ 96.470195][ T13] x8 : 26a6c76ea014ad00 x7 : 0000000000000001 x6 : 0000000000000001 [ 96.472385][ T13] x5 : ffff80001b336278 x4 : ffff80001425f400 x3 : ffff8000085051a4 [ 96.474636][ T13] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000029 [ 96.476831][ T13] Call trace: [ 96.477717][ T13] usb_submit_urb+0xa44/0x1580 [ 96.479027][ T13] usb_start_wait_urb+0xe8/0x3bc [ 96.480374][ T13] usb_bulk_msg+0x2e4/0x3e4 [ 96.481582][ T13] amradio_set_mute+0x1a4/0x3f4 [ 96.482899][ T13] usb_amradio_probe+0x36c/0x688 [ 96.484222][ T13] usb_probe_interface+0x4fc/0x994 [ 96.485576][ T13] really_probe+0x26c/0xaec [ 96.486790][ T13] __driver_probe_device+0x180/0x314 [ 96.488152][ T13] driver_probe_device+0x78/0x34c [ 96.489477][ T13] __device_attach_driver+0x274/0x4c4 [ 96.490997][ T13] bus_for_each_drv+0x150/0x1d8 [ 96.492346][ T13] __device_attach+0x2a8/0x3d4 [ 96.493665][ T13] device_initial_probe+0x24/0x34 [ 96.495019][ T13] bus_probe_device+0xbc/0x1c4 [ 96.496322][ T13] device_add+0xb04/0xf94 [ 96.497510][ T13] usb_set_configuration+0x15b8/0x1b2c [ 96.498989][ T13] usb_generic_driver_probe+0x8c/0x144 [ 96.500482][ T13] usb_probe_device+0x120/0x25c [ 96.501775][ T13] really_probe+0x26c/0xaec [ 96.502975][ T13] __driver_probe_device+0x180/0x314 [ 96.504403][ T13] driver_probe_device+0x78/0x34c [ 96.505791][ T13] __device_attach_driver+0x274/0x4c4 [ 96.507235][ T13] bus_for_each_drv+0x150/0x1d8 [ 96.508555][ T13] __device_attach+0x2a8/0x3d4 [ 96.509836][ T13] device_initial_probe+0x24/0x34 [ 96.511196][ T13] bus_probe_device+0xbc/0x1c4 [ 96.512469][ T13] device_add+0xb04/0xf94 [ 96.513603][ T13] usb_new_device+0x7ec/0x1164 [ 96.514867][ T13] hub_event+0x20cc/0x4188 [ 96.516028][ T13] process_one_work+0x79c/0x1140 [ 96.517380][ T13] worker_thread+0x8f4/0x101c [ 96.518628][ T13] kthread+0x374/0x454 [ 96.519699][ T13] ret_from_fork+0x10/0x20 [ 96.520939][ T13] irq event stamp: 92052 [ 96.522089][ T13] hardirqs last enabled at (92051): [] __up_console_sem+0xb4/0x100 [ 96.524693][ T13] hardirqs last disabled at (92052): [] el1_dbg+0x24/0x80 [ 96.527018][ T13] softirqs last enabled at (91152): [] handle_softirqs+0xa4c/0xbf0 [ 96.529601][ T13] softirqs last disabled at (91139): [] __irq_exit_rcu+0x240/0x440 [ 96.532135][ T13] ---[ end trace 87225c2a42c7556c ]--- [ 96.551849][ T13] (null): radio-mr800 - initialization failed [ 96.553557][ T13] radio-mr800: probe of 1-1:6.199 failed with error -71 [ 96.555643][ T13] usbhid 1-1:6.199: couldn't find an input interrupt endpoint [ 96.633485][ T13] usb 1-1: USB disconnect, device number 6 1970/01/01 00:01:37 executed programs: 5 [ 97.421766][ T13] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 97.671736][ T13] usb 1-1: Using ep0 maxpacket: 32 [ 97.841830][ T13] usb 1-1: unable to get BOS descriptor or descriptor too short [ 97.921827][ T13] usb 1-1: config 6 has an invalid interface number: 199 but max is 2 [ 97.924076][ T13] usb 1-1: config 6 has an invalid interface number: 48 but max is 2 [ 97.926181][ T13] usb 1-1: config 6 has an invalid interface number: 105 but max is 2 [ 97.928283][ T13] usb 1-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 97.930585][ T13] usb 1-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 97.934323][ T13] usb 1-1: config 6 has an invalid interface descriptor of length 2, skipping [ 97.936691][ T13] usb 1-1: config 6 has no interface number 0 [ 97.938265][ T13] usb 1-1: config 6 has no interface number 1 [ 97.939913][ T13] usb 1-1: config 6 has no interface number 2 [ 97.941702][ T13] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 97.944715][ T13] usb 1-1: config 6 interface 199 altsetting 128 has an invalid endpoint with address 0x0, skipping [ 97.947509][ T13] usb 1-1: config 6 interface 199 altsetting 128 has a duplicate endpoint with address 0x8, skipping [ 97.950326][ T13] usb 1-1: config 6 interface 199 altsetting 128 bulk endpoint 0x2 has invalid maxpacket 8 [ 97.953024][ T13] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 97.956000][ T13] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 97.958966][ T13] usb 1-1: config 6 interface 199 altsetting 128 has a duplicate endpoint with address 0x1, skipping [ 97.962040][ T13] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 97.964917][ T13] usb 1-1: config 6 interface 199 altsetting 128 has a duplicate endpoint with address 0x4, skipping [ 97.967757][ T13] usb 1-1: config 6 interface 48 altsetting 8 has a duplicate endpoint with address 0xA, skipping [ 97.970545][ T13] usb 1-1: config 6 interface 105 altsetting 129 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 97.974149][ T13] usb 1-1: config 6 interface 199 has no altsetting 0 [ 97.975980][ T13] usb 1-1: config 6 interface 48 has no altsetting 0 [ 97.977750][ T13] usb 1-1: config 6 interface 105 has no altsetting 0 [ 98.211983][ T13] usb 1-1: string descriptor 0 read error: -22 [ 98.213873][ T13] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=b9.c5 [ 98.216303][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.254415][ T13] ------------[ cut here ]------------ [ 98.256013][ T13] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 98.257966][ T13] WARNING: CPU: 0 PID: 13 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa44/0x1580 [ 98.260463][ T13] Modules linked in: [ 98.261471][ T13] CPU: 0 PID: 13 Comm: kworker/0:1 Tainted: G W 5.15.188-syzkaller #0 [ 98.264029][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 98.266748][ T13] Workqueue: usb_hub_wq hub_event [ 98.268102][ T13] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 98.270231][ T13] pc : usb_submit_urb+0xa44/0x1580 [ 98.271585][ T13] lr : usb_submit_urb+0xa44/0x1580 [ 98.272989][ T13] sp : ffff80001b336980 [ 98.274194][ T13] x29: ffff80001b3369c0 x28: 1fffe00018276c03 x27: ffff8000123ad008 [ 98.276507][ T13] x26: ffff0000c14acc00 x25: ffff0000ce6cae50 x24: 0000000000000008 [ 98.278668][ T13] x23: ffff8000123b3660 x22: dfff800000000000 x21: 0000000000000002 [ 98.280801][ T13] x20: 0000000000000c00 x19: ffff0000ce6cae00 x18: 0000000000000001 [ 98.282945][ T13] x17: 0000000000000000 x16: ffff8000111d162c x15: 00000000ffffffff [ 98.285108][ T13] x14: 0000000000ff0100 x13: 0000000000000001 x12: 0000000000ff0100 [ 98.287260][ T13] x11: 0000000000000000 x10: 0000000000000000 x9 : 26a6c76ea014ad00 [ 98.289410][ T13] x8 : 26a6c76ea014ad00 x7 : 0000000000000001 x6 : 0000000000000001 [ 98.291691][ T13] x5 : ffff80001b336278 x4 : ffff80001425f400 x3 : ffff8000085051a4 [ 98.293982][ T13] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000029 [ 98.296139][ T13] Call trace: [ 98.296982][ T13] usb_submit_urb+0xa44/0x1580 [ 98.298266][ T13] usb_start_wait_urb+0xe8/0x3bc [ 98.299574][ T13] usb_bulk_msg+0x2e4/0x3e4 [ 98.300841][ T13] amradio_set_mute+0x1a4/0x3f4 [ 98.302150][ T13] usb_amradio_probe+0x36c/0x688 [ 98.303446][ T13] usb_probe_interface+0x4fc/0x994 [ 98.304817][ T13] really_probe+0x26c/0xaec [ 98.306004][ T13] __driver_probe_device+0x180/0x314 [ 98.307435][ T13] driver_probe_device+0x78/0x34c [ 98.308922][ T13] __device_attach_driver+0x274/0x4c4 [ 98.310460][ T13] bus_for_each_drv+0x150/0x1d8 [ 98.311812][ T13] __device_attach+0x2a8/0x3d4 [ 98.313084][ T13] device_initial_probe+0x24/0x34 [ 98.314429][ T13] bus_probe_device+0xbc/0x1c4 [ 98.315667][ T13] device_add+0xb04/0xf94 [ 98.316813][ T13] usb_set_configuration+0x15b8/0x1b2c [ 98.318305][ T13] usb_generic_driver_probe+0x8c/0x144 [ 98.319793][ T13] usb_probe_device+0x120/0x25c [ 98.321110][ T13] really_probe+0x26c/0xaec [ 98.322324][ T13] __driver_probe_device+0x180/0x314 [ 98.323720][ T13] driver_probe_device+0x78/0x34c [ 98.325155][ T13] __device_attach_driver+0x274/0x4c4 [ 98.326603][ T13] bus_for_each_drv+0x150/0x1d8 [ 98.327986][ T13] __device_attach+0x2a8/0x3d4 [ 98.329347][ T13] device_initial_probe+0x24/0x34 [ 98.330692][ T13] bus_probe_device+0xbc/0x1c4 [ 98.331961][ T13] device_add+0xb04/0xf94 [ 98.333137][ T13] usb_new_device+0x7ec/0x1164 [ 98.334414][ T13] hub_event+0x20cc/0x4188 [ 98.335610][ T13] process_one_work+0x79c/0x1140 [ 98.336948][ T13] worker_thread+0x8f4/0x101c [ 98.338201][ T13] kthread+0x374/0x454 [ 98.339291][ T13] ret_from_fork+0x10/0x20 [ 98.340457][ T13] irq event stamp: 101920 [ 98.341656][ T13] hardirqs last enabled at (101919): [] __up_console_sem+0xb4/0x100 [ 98.344306][ T13] hardirqs last disabled at (101920): [] el1_dbg+0x24/0x80 [ 98.346724][ T13] softirqs last enabled at (99840): [] handle_softirqs+0xa4c/0xbf0 [ 98.349311][ T13] softirqs last disabled at (99829): [] __irq_exit_rcu+0x240/0x440 [ 98.351893][ T13] ---[ end trace 87225c2a42c7556d ]--- [ 98.371776][ T13] (null): radio-mr800 - initialization failed [ 98.373790][ T13] radio-mr800: probe of 1-1:6.199 failed with error -71 [ 98.375884][ T13] usbhid 1-1:6.199: couldn't find an input interrupt endpoint [ 98.452945][ T3614] usb 1-1: USB disconnect, device number 7