[ 36.219306][ T148] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.367772][ T148] device veth1_macvtap left promiscuous mode [ 36.368845][ T148] device veth0_macvtap left promiscuous mode [ 36.369846][ T148] device veth1_vlan left promiscuous mode [ 36.370841][ T148] device veth0_vlan left promiscuous mode [ 36.469877][ T148] team0 (unregistering): Port device team_slave_1 removed [ 36.474403][ T148] team0 (unregistering): Port device team_slave_0 removed [ 36.478320][ T148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 36.515145][ T148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 36.612823][ T148] bond0 (unregistering): Released all slaves Warning: Permanently added '10.128.10.43' (ECDSA) to the list of known hosts. 1970/01/01 00:00:50 ignoring optional flag "sandboxArg"="0" 1970/01/01 00:00:50 parsed 1 programs 1970/01/01 00:00:50 executed programs: 0 [ 50.236367][ T4225] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 50.239066][ T4225] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 50.241093][ T4225] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 50.243420][ T4225] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 50.245687][ T4225] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 50.248391][ T4225] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 50.300602][ T4576] chnl_net:caif_netlink_parms(): no params data found [ 50.320296][ T4576] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.322058][ T4576] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.324138][ T4576] device bridge_slave_0 entered promiscuous mode [ 50.326748][ T4576] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.328976][ T4576] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.331019][ T4576] device bridge_slave_1 entered promiscuous mode [ 50.339972][ T4576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.343933][ T4576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.353230][ T4576] team0: Port device team_slave_0 added [ 50.355530][ T4576] team0: Port device team_slave_1 added [ 50.365268][ T4576] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.366947][ T4576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.373499][ T4576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.376901][ T4576] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.378708][ T4576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.385005][ T4576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.418639][ T4576] device hsr_slave_0 entered promiscuous mode [ 50.467605][ T4576] device hsr_slave_1 entered promiscuous mode [ 51.178483][ T4576] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 51.219033][ T4576] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 51.259108][ T4576] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 51.289427][ T4576] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 51.355862][ T4576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.360529][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.362431][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.366045][ T4576] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.371137][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.374186][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.376220][ T4238] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.377900][ T4238] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.385466][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.387465][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.389511][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.391458][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.393292][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.400180][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.402313][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.410185][ T4576] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 51.412513][ T4576] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 51.417648][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.426759][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.429797][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.431901][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.434188][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.436467][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.439471][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.441619][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.443642][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.445661][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.477699][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 51.479443][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 51.486543][ T4576] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.495340][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.498412][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.505166][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.507277][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.509693][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.511672][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.515086][ T4576] device veth0_vlan entered promiscuous mode [ 51.520523][ T4576] device veth1_vlan entered promiscuous mode [ 51.529852][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 51.531946][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 51.533930][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.535964][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.540813][ T4576] device veth0_macvtap entered promiscuous mode [ 51.543705][ T4576] device veth1_macvtap entered promiscuous mode [ 51.550738][ T4576] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.552555][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 51.554633][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 51.556684][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.559988][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.564167][ T4576] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.566894][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.569531][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.572117][ T4576] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.574131][ T4576] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.576144][ T4576] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.579055][ T4576] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.613014][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.614807][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.617208][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 51.629249][ T1695] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.631143][ T1695] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.633647][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 52.008072][ T4237] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 52.267780][ T4237] usb 1-1: Using ep0 maxpacket: 32 [ 52.269046][ T47] Bluetooth: hci0: command 0x0409 tx timeout [ 52.467515][ T4237] usb 1-1: unable to get BOS descriptor or descriptor too short [ 52.548204][ T4237] usb 1-1: config 6 has an invalid interface number: 199 but max is 2 [ 52.550100][ T4237] usb 1-1: config 6 has an invalid interface number: 48 but max is 2 [ 52.552002][ T4237] usb 1-1: config 6 has an invalid interface number: 105 but max is 2 [ 52.553860][ T4237] usb 1-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 52.555876][ T4237] usb 1-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 52.559033][ T4237] usb 1-1: config 6 has an invalid interface descriptor of length 2, skipping [ 52.560953][ T4237] usb 1-1: config 6 has no interface number 0 [ 52.562324][ T4237] usb 1-1: config 6 has no interface number 1 [ 52.563737][ T4237] usb 1-1: config 6 has no interface number 2 [ 52.565366][ T4237] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 52.568916][ T4237] usb 1-1: config 6 interface 199 altsetting 128 has an invalid endpoint with address 0x0, skipping [ 52.571390][ T4237] usb 1-1: config 6 interface 199 altsetting 128 has a duplicate endpoint with address 0x8, skipping [ 52.573856][ T4237] usb 1-1: config 6 interface 199 altsetting 128 bulk endpoint 0x2 has invalid maxpacket 8 [ 52.576010][ T4237] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 52.579056][ T4237] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 52.581703][ T4237] usb 1-1: config 6 interface 199 altsetting 128 has a duplicate endpoint with address 0x1, skipping [ 52.584120][ T4237] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 52.586712][ T4237] usb 1-1: config 6 interface 199 altsetting 128 has a duplicate endpoint with address 0x4, skipping [ 52.590185][ T4237] usb 1-1: config 6 interface 48 altsetting 8 has a duplicate endpoint with address 0xA, skipping [ 52.592703][ T4237] usb 1-1: config 6 interface 105 altsetting 129 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 52.595738][ T4237] usb 1-1: config 6 interface 199 has no altsetting 0 [ 52.597277][ T4237] usb 1-1: config 6 interface 48 has no altsetting 0 [ 52.599250][ T4237] usb 1-1: config 6 interface 105 has no altsetting 0 [ 52.857499][ T4237] usb 1-1: string descriptor 0 read error: -22 [ 52.859139][ T4237] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=b9.c5 [ 52.861250][ T4237] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.915309][ T4237] ------------[ cut here ]------------ [ 52.916696][ T4237] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 52.918843][ T4237] WARNING: CPU: 0 PID: 4237 at drivers/usb/core/urb.c:505 usb_submit_urb+0x868/0x1394 [ 52.921283][ T4237] Modules linked in: [ 52.922232][ T4237] CPU: 0 PID: 4237 Comm: kworker/0:6 Not tainted 6.1.32-syzkaller #0 [ 52.924141][ T4237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 52.926590][ T4237] Workqueue: usb_hub_wq hub_event [ 52.927797][ T4237] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 52.929712][ T4237] pc : usb_submit_urb+0x868/0x1394 [ 52.930985][ T4237] lr : usb_submit_urb+0x868/0x1394 [ 52.932228][ T4237] sp : ffff80001c2a6780 [ 52.933136][ T4237] x29: ffff80001c2a67c0 x28: 0000000000000000 x27: ffff0000c4d12000 [ 52.935017][ T4237] x26: dfff800000000000 x25: ffff80001226c128 x24: ffff0000ce2ac500 [ 52.937018][ T4237] x23: ffff0000d199845c x22: ffff800012272940 x21: 0000000000000001 [ 52.938949][ T4237] x20: 0000000000000c00 x19: ffff0000d1998400 x18: 1fffe00036908d76 [ 52.940889][ T4237] x17: ffff80001424d000 x16: ffff8000082aa084 x15: ffff0001b4846bbc [ 52.942823][ T4237] x14: 1ffff0000284a0b0 x13: dfff800000000000 x12: 0000000000000003 [ 52.944835][ T4237] x11: 0000000000000001 x10: 0000000000000003 x9 : d0288ef95cba4500 [ 52.946710][ T4237] x8 : d0288ef95cba4500 x7 : ffff800008221ddc x6 : 0000000000000000 [ 52.948667][ T4237] x5 : 0000000000000080 x4 : 0000000000000001 x3 : 0000000000000000 [ 52.950552][ T4237] x2 : 0000000000000006 x1 : ffff800010fab040 x0 : ffff8001a06a6000 [ 52.952503][ T4237] Call trace: [ 52.953228][ T4237] usb_submit_urb+0x868/0x1394 [ 52.954313][ T4237] usb_start_wait_urb+0xe8/0x3a8 [ 52.955550][ T4237] usb_bulk_msg+0x284/0x398 [ 52.956603][ T4237] amradio_set_mute+0x1d0/0x3dc [ 52.957826][ T4237] usb_amradio_probe+0x368/0x678 [ 52.959038][ T4237] usb_probe_interface+0x3e4/0x810 [ 52.960257][ T4237] really_probe+0x30c/0x8cc [ 52.961323][ T4237] __driver_probe_device+0x15c/0x33c [ 52.962595][ T4237] driver_probe_device+0x70/0x2a4 [ 52.963832][ T4237] __device_attach_driver+0x2a4/0x3fc [ 52.965127][ T4237] bus_for_each_drv+0x138/0x19c [ 52.966273][ T4237] __device_attach+0x228/0x3c8 [ 52.967423][ T4237] device_initial_probe+0x14/0x20 [ 52.968681][ T4237] bus_probe_device+0x184/0x190 [ 52.969853][ T4237] device_add+0x68c/0xb94 [ 52.970873][ T4237] usb_set_configuration+0x1274/0x1730 [ 52.972211][ T4237] usb_generic_driver_probe+0x7c/0x114 [ 52.973565][ T4237] usb_probe_device+0xbc/0x1e0 [ 52.974692][ T4237] really_probe+0x30c/0x8cc [ 52.975801][ T4237] __driver_probe_device+0x15c/0x33c [ 52.977173][ T4237] driver_probe_device+0x70/0x2a4 [ 52.978400][ T4237] __device_attach_driver+0x2a4/0x3fc [ 52.979695][ T4237] bus_for_each_drv+0x138/0x19c [ 52.980805][ T4237] __device_attach+0x228/0x3c8 [ 52.981992][ T4237] device_initial_probe+0x14/0x20 [ 52.983232][ T4237] bus_probe_device+0x184/0x190 [ 52.984514][ T4237] device_add+0x68c/0xb94 [ 52.985552][ T4237] usb_new_device+0x874/0x1188 [ 52.986649][ T4237] hub_event+0x1c7c/0x37b8 [ 52.987754][ T4237] process_one_work+0x6c4/0x117c [ 52.988901][ T4237] worker_thread+0x7dc/0xe2c [ 52.990044][ T4237] kthread+0x210/0x28c [ 52.991015][ T4237] ret_from_fork+0x10/0x20 [ 52.992094][ T4237] irq event stamp: 2046642 [ 52.993270][ T4237] hardirqs last enabled at (2046641): [] finish_lock_switch+0xbc/0x1e8 [ 52.995614][ T4237] hardirqs last disabled at (2046642): [] el1_dbg+0x24/0x80 [ 52.997761][ T4237] softirqs last enabled at (2046634): [] __do_softirq+0xc14/0xea0 [ 53.000151][ T4237] softirqs last disabled at (2046539): [] ____do_softirq+0x10/0x1c [ 53.002472][ T4237] ---[ end trace 0000000000000000 ]--- [ 53.018209][ T4237] (null): radio-mr800 - initialization failed [ 53.019780][ T4237] radio-mr800: probe of 1-1:6.199 failed with error -71 [ 53.021661][ T4237] usbhid 1-1:6.199: couldn't find an input interrupt endpoint [ 53.113287][ T4237] usb 1-1: USB disconnect, device number 2 [ 53.907394][ T4237] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 54.157382][ T4237] usb 1-1: Using ep0 maxpacket: 32 [ 54.348607][ T4237] usb 1-1: unable to get BOS descriptor or descriptor too short [ 54.357615][ T47] Bluetooth: hci0: command 0x041b tx timeout [ 54.427446][ T4237] usb 1-1: config 6 has an invalid interface number: 199 but max is 2 [ 54.429413][ T4237] usb 1-1: config 6 has an invalid interface number: 48 but max is 2 [ 54.431339][ T4237] usb 1-1: config 6 has an invalid interface number: 105 but max is 2 [ 54.433253][ T4237] usb 1-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 54.435314][ T4237] usb 1-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 54.437325][ T4237] usb 1-1: config 6 has an invalid interface descriptor of length 2, skipping [ 54.439481][ T4237] usb 1-1: config 6 has no interface number 0 [ 54.440859][ T4237] usb 1-1: config 6 has no interface number 1 [ 54.442220][ T4237] usb 1-1: config 6 has no interface number 2 [ 54.443633][ T4237] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 54.446101][ T4237] usb 1-1: config 6 interface 199 altsetting 128 has an invalid endpoint with address 0x0, skipping [ 54.448679][ T4237] usb 1-1: config 6 interface 199 altsetting 128 has a duplicate endpoint with address 0x8, skipping [ 54.451225][ T4237] usb 1-1: config 6 interface 199 altsetting 128 bulk endpoint 0x2 has invalid maxpacket 8 [ 54.453544][ T4237] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 54.456140][ T4237] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 54.458965][ T4237] usb 1-1: config 6 interface 199 altsetting 128 has a duplicate endpoint with address 0x1, skipping [ 54.461448][ T4237] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 54.463895][ T4237] usb 1-1: config 6 interface 199 altsetting 128 has a duplicate endpoint with address 0x4, skipping [ 54.466397][ T4237] usb 1-1: config 6 interface 48 altsetting 8 has a duplicate endpoint with address 0xA, skipping [ 54.468774][ T4237] usb 1-1: config 6 interface 105 altsetting 129 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 54.471946][ T4237] usb 1-1: config 6 interface 199 has no altsetting 0 [ 54.473494][ T4237] usb 1-1: config 6 interface 48 has no altsetting 0 [ 54.474983][ T4237] usb 1-1: config 6 interface 105 has no altsetting 0 [ 54.717450][ T4237] usb 1-1: string descriptor 0 read error: -22 [ 54.718843][ T4237] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=b9.c5 [ 54.720859][ T4237] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.779222][ T4237] ------------[ cut here ]------------ [ 54.780548][ T4237] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 54.782025][ T4237] WARNING: CPU: 0 PID: 4237 at drivers/usb/core/urb.c:505 usb_submit_urb+0x868/0x1394 [ 54.784215][ T4237] Modules linked in: [ 54.785141][ T4237] CPU: 0 PID: 4237 Comm: kworker/0:6 Tainted: G W 6.1.32-syzkaller #0 [ 54.787305][ T4237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 54.789707][ T4237] Workqueue: usb_hub_wq hub_event [ 54.790841][ T4237] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 54.792667][ T4237] pc : usb_submit_urb+0x868/0x1394 [ 54.793931][ T4237] lr : usb_submit_urb+0x868/0x1394 [ 54.795088][ T4237] sp : ffff80001c2a6780 [ 54.796054][ T4237] x29: ffff80001c2a67c0 x28: 0000000000000000 x27: ffff0000d4055000 [ 54.797941][ T4237] x26: dfff800000000000 x25: ffff80001226c128 x24: ffff0000c3bcec00 [ 54.799828][ T4237] x23: ffff0000d19bfc5c x22: ffff800012272940 x21: 0000000000000001 [ 54.801757][ T4237] x20: 0000000000000c00 x19: ffff0000d19bfc00 x18: ffffffffffffffff [ 54.803619][ T4237] x17: ffffffffffffffff x16: ffff8000082aa084 x15: 0000000000000001 [ 54.805642][ T4237] x14: 1ffff0000284a0b0 x13: dfff800000000000 x12: 0000000000000003 [ 54.807645][ T4237] x11: 0000000000000001 x10: 0000000000000003 x9 : d0288ef95cba4500 [ 54.809493][ T4237] x8 : d0288ef95cba4500 x7 : ffff800010f190bc x6 : 0000000000000000 [ 54.811421][ T4237] x5 : 0000000000000080 x4 : 0000000000000001 x3 : 0000000000000000 [ 54.813340][ T4237] x2 : 0000000000000006 x1 : ffff800010fab040 x0 : ffff8001a06a6000 [ 54.815181][ T4237] Call trace: [ 54.815889][ T4237] usb_submit_urb+0x868/0x1394 [ 54.816984][ T4237] usb_start_wait_urb+0xe8/0x3a8 [ 54.818085][ T4237] usb_bulk_msg+0x284/0x398 [ 54.819196][ T4237] amradio_set_mute+0x1d0/0x3dc [ 54.820364][ T4237] usb_amradio_probe+0x368/0x678 [ 54.821504][ T4237] usb_probe_interface+0x3e4/0x810 [ 54.822758][ T4237] really_probe+0x30c/0x8cc [ 54.823828][ T4237] __driver_probe_device+0x15c/0x33c [ 54.825012][ T4237] driver_probe_device+0x70/0x2a4 [ 54.826211][ T4237] __device_attach_driver+0x2a4/0x3fc [ 54.827481][ T4237] bus_for_each_drv+0x138/0x19c [ 54.828571][ T4237] __device_attach+0x228/0x3c8 [ 54.829685][ T4237] device_initial_probe+0x14/0x20 [ 54.830915][ T4237] bus_probe_device+0x184/0x190 [ 54.832086][ T4237] device_add+0x68c/0xb94 [ 54.833010][ T4237] usb_set_configuration+0x1274/0x1730 [ 54.834279][ T4237] usb_generic_driver_probe+0x7c/0x114 [ 54.835620][ T4237] usb_probe_device+0xbc/0x1e0 [ 54.836695][ T4237] really_probe+0x30c/0x8cc [ 54.837734][ T4237] __driver_probe_device+0x15c/0x33c [ 54.839009][ T4237] driver_probe_device+0x70/0x2a4 [ 54.840159][ T4237] __device_attach_driver+0x2a4/0x3fc [ 54.841515][ T4237] bus_for_each_drv+0x138/0x19c [ 54.842673][ T4237] __device_attach+0x228/0x3c8 [ 54.843730][ T4237] device_initial_probe+0x14/0x20 [ 54.844929][ T4237] bus_probe_device+0x184/0x190 [ 54.846072][ T4237] device_add+0x68c/0xb94 [ 54.847094][ T4237] usb_new_device+0x874/0x1188 [ 54.848249][ T4237] hub_event+0x1c7c/0x37b8 [ 54.849346][ T4237] process_one_work+0x6c4/0x117c [ 54.850519][ T4237] worker_thread+0x7dc/0xe2c [ 54.851647][ T4237] kthread+0x210/0x28c [ 54.852602][ T4237] ret_from_fork+0x10/0x20 [ 54.853676][ T4237] irq event stamp: 2058826 [ 54.854717][ T4237] hardirqs last enabled at (2058825): [] __schedule+0xfd8/0x1c5c [ 54.857014][ T4237] hardirqs last disabled at (2058826): [] el1_dbg+0x24/0x80 [ 54.859107][ T4237] softirqs last enabled at (2056712): [] __do_softirq+0xc14/0xea0 [ 54.861248][ T4237] softirqs last disabled at (2056703): [] ____do_softirq+0x10/0x1c [ 54.863599][ T4237] ---[ end trace 0000000000000000 ]--- [ 54.877447][ T4237] (null): radio-mr800 - initialization failed [ 54.878990][ T4237] radio-mr800: probe of 1-1:6.199 failed with error -71 [ 54.880730][ T4237] usbhid 1-1:6.199: couldn't find an input interrupt endpoint [ 54.980379][ T4237] usb 1-1: USB disconnect, device number 3 1970/01/01 00:00:55 executed programs: 2 [ 55.757400][ T4237] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 56.027462][ T4237] usb 1-1: Using ep0 maxpacket: 32 [ 56.197448][ T4237] usb 1-1: unable to get BOS descriptor or descriptor too short [ 56.277511][ T4237] usb 1-1: config 6 has an invalid interface number: 199 but max is 2 [ 56.279556][ T4237] usb 1-1: config 6 has an invalid interface number: 48 but max is 2 [ 56.281380][ T4237] usb 1-1: config 6 has an invalid interface number: 105 but max is 2 [ 56.283216][ T4237] usb 1-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 56.285157][ T4237] usb 1-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 56.287225][ T4237] usb 1-1: config 6 has an invalid interface descriptor of length 2, skipping [ 56.289543][ T4237] usb 1-1: config 6 has no interface number 0 [ 56.290910][ T4237] usb 1-1: config 6 has no interface number 1 [ 56.292285][ T4237] usb 1-1: config 6 has no interface number 2 [ 56.293682][ T4237] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 56.296216][ T4237] usb 1-1: config 6 interface 199 altsetting 128 has an invalid endpoint with address 0x0, skipping [ 56.298753][ T4237] usb 1-1: config 6 interface 199 altsetting 128 has a duplicate endpoint with address 0x8, skipping [ 56.301356][ T4237] usb 1-1: config 6 interface 199 altsetting 128 bulk endpoint 0x2 has invalid maxpacket 8 [ 56.303646][ T4237] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 56.306223][ T4237] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 56.308899][ T4237] usb 1-1: config 6 interface 199 altsetting 128 has a duplicate endpoint with address 0x1, skipping [ 56.311448][ T4237] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 56.314034][ T4237] usb 1-1: config 6 interface 199 altsetting 128 has a duplicate endpoint with address 0x4, skipping [ 56.316652][ T4237] usb 1-1: config 6 interface 48 altsetting 8 has a duplicate endpoint with address 0xA, skipping [ 56.319347][ T4237] usb 1-1: config 6 interface 105 altsetting 129 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 56.322438][ T4237] usb 1-1: config 6 interface 199 has no altsetting 0 [ 56.324106][ T4237] usb 1-1: config 6 interface 48 has no altsetting 0 [ 56.325659][ T4237] usb 1-1: config 6 interface 105 has no altsetting 0 [ 56.427460][ T47] Bluetooth: hci0: command 0x040f tx timeout [ 56.567413][ T4237] usb 1-1: string descriptor 0 read error: -22 [ 56.568969][ T4237] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=b9.c5 [ 56.570996][ T4237] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.609687][ T4237] ------------[ cut here ]------------ [ 56.610964][ T4237] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 56.612377][ T4237] WARNING: CPU: 0 PID: 4237 at drivers/usb/core/urb.c:505 usb_submit_urb+0x868/0x1394 [ 56.614643][ T4237] Modules linked in: [ 56.615481][ T4237] CPU: 0 PID: 4237 Comm: kworker/0:6 Tainted: G W 6.1.32-syzkaller #0 [ 56.617601][ T4237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 56.619943][ T4237] Workqueue: usb_hub_wq hub_event [ 56.621170][ T4237] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 56.622818][ T4237] pc : usb_submit_urb+0x868/0x1394 [ 56.624162][ T4237] lr : usb_submit_urb+0x868/0x1394 [ 56.625345][ T4237] sp : ffff80001c2a6780 [ 56.626276][ T4237] x29: ffff80001c2a67c0 x28: 0000000000000000 x27: ffff0000d2f9e000 [ 56.628218][ T4237] x26: dfff800000000000 x25: ffff80001226c128 x24: ffff0000d050c100 [ 56.630085][ T4237] x23: ffff0000d1e9105c x22: ffff800012272940 x21: 0000000000000001 [ 56.631934][ T4237] x20: 0000000000000c00 x19: ffff0000d1e91000 x18: ffffffffffffffff [ 56.633838][ T4237] x17: ffffffffffffffff x16: ffff800010e50284 x15: 0000000000000001 [ 56.635737][ T4237] x14: 1ffff0000284a0b0 x13: 0000000000000001 x12: 0000000000000001 [ 56.637637][ T4237] x11: 0000000000000002 x10: 0000000000000000 x9 : d0288ef95cba4500 [ 56.639658][ T4237] x8 : d0288ef95cba4500 x7 : 0000000000000001 x6 : 0000000000000001 [ 56.641581][ T4237] x5 : ffff80001c2a6058 x4 : ffff80001432a5a0 x3 : ffff8000084d12f0 [ 56.643436][ T4237] x2 : 0000000000000001 x1 : 0000000000000004 x0 : 0000000000000029 [ 56.645283][ T4237] Call trace: [ 56.646054][ T4237] usb_submit_urb+0x868/0x1394 [ 56.647168][ T4237] usb_start_wait_urb+0xe8/0x3a8 [ 56.648390][ T4237] usb_bulk_msg+0x284/0x398 [ 56.649492][ T4237] amradio_set_mute+0x1d0/0x3dc [ 56.650614][ T4237] usb_amradio_probe+0x368/0x678 [ 56.651701][ T4237] usb_probe_interface+0x3e4/0x810 [ 56.652924][ T4237] really_probe+0x30c/0x8cc [ 56.653985][ T4237] __driver_probe_device+0x15c/0x33c [ 56.655309][ T4237] driver_probe_device+0x70/0x2a4 [ 56.656440][ T4237] __device_attach_driver+0x2a4/0x3fc [ 56.657717][ T4237] bus_for_each_drv+0x138/0x19c [ 56.658829][ T4237] __device_attach+0x228/0x3c8 [ 56.660027][ T4237] device_initial_probe+0x14/0x20 [ 56.661216][ T4237] bus_probe_device+0x184/0x190 [ 56.662376][ T4237] device_add+0x68c/0xb94 [ 56.663432][ T4237] usb_set_configuration+0x1274/0x1730 [ 56.664749][ T4237] usb_generic_driver_probe+0x7c/0x114 [ 56.666042][ T4237] usb_probe_device+0xbc/0x1e0 [ 56.667241][ T4237] really_probe+0x30c/0x8cc [ 56.668341][ T4237] __driver_probe_device+0x15c/0x33c [ 56.669627][ T4237] driver_probe_device+0x70/0x2a4 [ 56.670874][ T4237] __device_attach_driver+0x2a4/0x3fc [ 56.672159][ T4237] bus_for_each_drv+0x138/0x19c [ 56.673290][ T4237] __device_attach+0x228/0x3c8 [ 56.674452][ T4237] device_initial_probe+0x14/0x20 [ 56.675650][ T4237] bus_probe_device+0x184/0x190 [ 56.676744][ T4237] device_add+0x68c/0xb94 [ 56.677733][ T4237] usb_new_device+0x874/0x1188 [ 56.678881][ T4237] hub_event+0x1c7c/0x37b8 [ 56.679927][ T4237] process_one_work+0x6c4/0x117c [ 56.681094][ T4237] worker_thread+0x7dc/0xe2c [ 56.682128][ T4237] kthread+0x210/0x28c [ 56.683111][ T4237] ret_from_fork+0x10/0x20 [ 56.684117][ T4237] irq event stamp: 2069246 [ 56.685144][ T4237] hardirqs last enabled at (2069245): [] __up_console_sem+0x54/0xa4 [ 56.687490][ T4237] hardirqs last disabled at (2069246): [] el1_dbg+0x24/0x80 [ 56.689748][ T4237] softirqs last enabled at (2067212): [] __do_softirq+0xc14/0xea0 [ 56.692050][ T4237] softirqs last disabled at (2067207): [] ____do_softirq+0x10/0x1c [ 56.694357][ T4237] ---[ end trace 0000000000000000 ]--- [ 56.707464][ T4237] (null): radio-mr800 - initialization failed [ 56.709030][ T4237] radio-mr800: probe of 1-1:6.199 failed with error -71 [ 56.710740][ T4237] usbhid 1-1:6.199: couldn't find an input interrupt endpoint [ 56.808634][ T4237] usb 1-1: USB disconnect, device number 4 [ 57.597390][ T4237] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 57.857391][ T4237] usb 1-1: Using ep0 maxpacket: 32 [ 58.047436][ T4237] usb 1-1: unable to get BOS descriptor or descriptor too short [ 58.127467][ T4237] usb 1-1: config 6 has an invalid interface number: 199 but max is 2 [ 58.129503][ T4237] usb 1-1: config 6 has an invalid interface number: 48 but max is 2 [ 58.131355][ T4237] usb 1-1: config 6 has an invalid interface number: 105 but max is 2 [ 58.133340][ T4237] usb 1-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 58.135334][ T4237] usb 1-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 58.138121][ T4237] usb 1-1: config 6 has an invalid interface descriptor of length 2, skipping [ 58.140190][ T4237] usb 1-1: config 6 has no interface number 0 [ 58.141599][ T4237] usb 1-1: config 6 has no interface number 1 [ 58.143112][ T4237] usb 1-1: config 6 has no interface number 2 [ 58.144724][ T4237] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 58.147512][ T4237] usb 1-1: config 6 interface 199 altsetting 128 has an invalid endpoint with address 0x0, skipping [ 58.150015][ T4237] usb 1-1: config 6 interface 199 altsetting 128 has a duplicate endpoint with address 0x8, skipping [ 58.152556][ T4237] usb 1-1: config 6 interface 199 altsetting 128 bulk endpoint 0x2 has invalid maxpacket 8 [ 58.154828][ T4237] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 58.157446][ T4237] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 58.160120][ T4237] usb 1-1: config 6 interface 199 altsetting 128 has a duplicate endpoint with address 0x1, skipping [ 58.162623][ T4237] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 58.165323][ T4237] usb 1-1: config 6 interface 199 altsetting 128 has a duplicate endpoint with address 0x4, skipping [ 58.167994][ T4237] usb 1-1: config 6 interface 48 altsetting 8 has a duplicate endpoint with address 0xA, skipping [ 58.170477][ T4237] usb 1-1: config 6 interface 105 altsetting 129 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 58.173643][ T4237] usb 1-1: config 6 interface 199 has no altsetting 0 [ 58.175238][ T4237] usb 1-1: config 6 interface 48 has no altsetting 0 [ 58.176761][ T4237] usb 1-1: config 6 interface 105 has no altsetting 0 [ 58.427550][ T4237] usb 1-1: string descriptor 0 read error: -22 [ 58.429113][ T4237] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=b9.c5 [ 58.431203][ T4237] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.469769][ T4237] ------------[ cut here ]------------ [ 58.471082][ T4237] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 58.472623][ T4237] WARNING: CPU: 0 PID: 4237 at drivers/usb/core/urb.c:505 usb_submit_urb+0x868/0x1394 [ 58.474776][ T4237] Modules linked in: [ 58.475750][ T4237] CPU: 0 PID: 4237 Comm: kworker/0:6 Tainted: G W 6.1.32-syzkaller #0 [ 58.478032][ T4237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 58.480424][ T4237] Workqueue: usb_hub_wq hub_event [ 58.481635][ T4237] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 58.483537][ T4237] pc : usb_submit_urb+0x868/0x1394 [ 58.484789][ T4237] lr : usb_submit_urb+0x868/0x1394 [ 58.486080][ T4237] sp : ffff80001c2a6780 [ 58.487079][ T4237] x29: ffff80001c2a67c0 x28: 0000000000000000 x27: ffff0000cfedd000 [ 58.488951][ T4237] x26: dfff800000000000 x25: ffff80001226c128 x24: ffff0000de2c8300 [ 58.490893][ T4237] x23: ffff0000d1e9645c x22: ffff800012272940 x21: 0000000000000001 [ 58.492920][ T4237] x20: 0000000000000c00 x19: ffff0000d1e96400 x18: ffffffffffffffff [ 58.494850][ T4237] x17: ffffffffffffffff x16: ffff800010e50284 x15: 0000000000000001 [ 58.496797][ T4237] x14: 1ffff0000284a0b0 x13: 0000000000000001 x12: 0000000000000001 [ 58.498830][ T4237] x11: 0000000000000002 x10: 0000000000000000 x9 : d0288ef95cba4500 [ 58.500823][ T4237] x8 : d0288ef95cba4500 x7 : 0000000000000001 x6 : 0000000000000001 [ 58.502772][ T4237] x5 : ffff80001c2a6058 x4 : ffff80001432a5a0 x3 : ffff8000084d12f0 [ 58.504721][ T4237] x2 : 0000000000000001 x1 : 0000000000000004 x0 : 0000000000000029 [ 58.506722][ T4237] Call trace: [ 58.507554][ T4237] usb_submit_urb+0x868/0x1394 [ 58.508748][ T4237] usb_start_wait_urb+0xe8/0x3a8 [ 58.510064][ T4237] usb_bulk_msg+0x284/0x398 [ 58.511200][ T4237] amradio_set_mute+0x1d0/0x3dc [ 58.512417][ T4237] usb_amradio_probe+0x368/0x678 [ 58.513687][ T4237] usb_probe_interface+0x3e4/0x810 [ 58.514987][ T4237] really_probe+0x30c/0x8cc [ 58.516072][ T4237] __driver_probe_device+0x15c/0x33c [ 58.517354][ T4237] driver_probe_device+0x70/0x2a4 [ 58.518551][ T4237] __device_attach_driver+0x2a4/0x3fc [ 58.519913][ T4237] bus_for_each_drv+0x138/0x19c [ 58.521146][ T4237] __device_attach+0x228/0x3c8 [ 58.522388][ T4237] device_initial_probe+0x14/0x20 [ 58.523637][ T4237] bus_probe_device+0x184/0x190 [ 58.524877][ T4237] device_add+0x68c/0xb94 [ 58.525987][ T4237] usb_set_configuration+0x1274/0x1730 [ 58.527349][ T4237] usb_generic_driver_probe+0x7c/0x114 [ 58.528662][ T4237] usb_probe_device+0xbc/0x1e0 [ 58.529850][ T4237] really_probe+0x30c/0x8cc [ 58.530940][ T4237] __driver_probe_device+0x15c/0x33c [ 58.532237][ T4237] driver_probe_device+0x70/0x2a4 [ 58.533487][ T4237] __device_attach_driver+0x2a4/0x3fc [ 58.534812][ T4237] bus_for_each_drv+0x138/0x19c [ 58.536073][ T4237] __device_attach+0x228/0x3c8 [ 58.537263][ T4237] device_initial_probe+0x14/0x20 [ 58.538467][ T4237] bus_probe_device+0x184/0x190 [ 58.539694][ T4237] device_add+0x68c/0xb94 [ 58.540788][ T4237] usb_new_device+0x874/0x1188 [ 58.541977][ T4237] hub_event+0x1c7c/0x37b8 [ 58.543021][ T4237] process_one_work+0x6c4/0x117c [ 58.544288][ T4237] worker_thread+0x7dc/0xe2c [ 58.545359][ T4237] kthread+0x210/0x28c [ 58.546367][ T4237] ret_from_fork+0x10/0x20 [ 58.547431][ T4237] irq event stamp: 2078816 [ 58.548559][ T4237] hardirqs last enabled at (2078815): [] __up_console_sem+0x54/0xa4 [ 58.551026][ T4237] hardirqs last disabled at (2078816): [] el1_dbg+0x24/0x80 [ 58.553195][ T4237] softirqs last enabled at (2076656): [] __do_softirq+0xc14/0xea0 [ 58.555431][ T4237] softirqs last disabled at (2076651): [] ____do_softirq+0x10/0x1c [ 58.557772][ T4237] ---[ end trace 0000000000000000 ]--- [ 58.559448][ T47] Bluetooth: hci0: command 0x0419 tx timeout [ 58.577405][ T4237] (null): radio-mr800 - initialization failed [ 58.578928][ T4237] radio-mr800: probe of 1-1:6.199 failed with error -71 [ 58.580634][ T4237] usbhid 1-1:6.199: couldn't find an input interrupt endpoint [ 58.668460][ T24] usb 1-1: USB disconnect, device number 5 [ 59.457394][ T4237] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 59.707403][ T4237] usb 1-1: Using ep0 maxpacket: 32 [ 59.867444][ T4237] usb 1-1: unable to get BOS descriptor or descriptor too short [ 59.967422][ T4237] usb 1-1: config 6 has an invalid interface number: 199 but max is 2 [ 59.969480][ T4237] usb 1-1: config 6 has an invalid interface number: 48 but max is 2 [ 59.971443][ T4237] usb 1-1: config 6 has an invalid interface number: 105 but max is 2 [ 59.973348][ T4237] usb 1-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 59.975512][ T4237] usb 1-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 59.977745][ T4237] usb 1-1: config 6 has an invalid interface descriptor of length 2, skipping [ 59.980010][ T4237] usb 1-1: config 6 has no interface number 0 [ 59.981473][ T4237] usb 1-1: config 6 has no interface number 1 [ 59.982973][ T4237] usb 1-1: config 6 has no interface number 2 [ 59.984445][ T4237] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 59.987029][ T4237] usb 1-1: config 6 interface 199 altsetting 128 has an invalid endpoint with address 0x0, skipping [ 59.989708][ T4237] usb 1-1: config 6 interface 199 altsetting 128 has a duplicate endpoint with address 0x8, skipping [ 59.992339][ T4237] usb 1-1: config 6 interface 199 altsetting 128 bulk endpoint 0x2 has invalid maxpacket 8 [ 59.994924][ T4237] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 59.997665][ T4237] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 60.000453][ T4237] usb 1-1: config 6 interface 199 altsetting 128 has a duplicate endpoint with address 0x1, skipping [ 60.003157][ T4237] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 60.005773][ T4237] usb 1-1: config 6 interface 199 altsetting 128 has a duplicate endpoint with address 0x4, skipping [ 60.008428][ T4237] usb 1-1: config 6 interface 48 altsetting 8 has a duplicate endpoint with address 0xA, skipping [ 60.011039][ T4237] usb 1-1: config 6 interface 105 altsetting 129 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 60.014222][ T4237] usb 1-1: config 6 interface 199 has no altsetting 0 [ 60.015838][ T4237] usb 1-1: config 6 interface 48 has no altsetting 0 [ 60.017489][ T4237] usb 1-1: config 6 interface 105 has no altsetting 0 [ 60.277425][ T4237] usb 1-1: string descriptor 0 read error: -22 [ 60.278918][ T4237] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=b9.c5 [ 60.280963][ T4237] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.339147][ T4237] ------------[ cut here ]------------ [ 60.340537][ T4237] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 60.342063][ T4237] WARNING: CPU: 0 PID: 4237 at drivers/usb/core/urb.c:505 usb_submit_urb+0x868/0x1394 [ 60.344383][ T4237] Modules linked in: [ 60.345286][ T4237] CPU: 0 PID: 4237 Comm: kworker/0:6 Tainted: G W 6.1.32-syzkaller #0 [ 60.347495][ T4237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 60.349918][ T4237] Workqueue: usb_hub_wq hub_event [ 60.351061][ T4237] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 60.352900][ T4237] pc : usb_submit_urb+0x868/0x1394 [ 60.354086][ T4237] lr : usb_submit_urb+0x868/0x1394 [ 60.355310][ T4237] sp : ffff80001c2a6780 [ 60.356296][ T4237] x29: ffff80001c2a67c0 x28: 0000000000000000 x27: ffff0000cd406000 [ 60.358252][ T4237] x26: dfff800000000000 x25: ffff80001226c128 x24: ffff0000c45c8100 [ 60.360126][ T4237] x23: ffff0000d1eb365c x22: ffff800012272940 x21: 0000000000000001 [ 60.362085][ T4237] x20: 0000000000000c00 x19: ffff0000d1eb3600 x18: 1fffe00036908d76 [ 60.363957][ T4237] x17: ffff80001424d000 x16: ffff8000082aa084 x15: ffff0001b4846bbc [ 60.365795][ T4237] x14: 1ffff0000284a0b0 x13: dfff800000000000 x12: 0000000000000003 [ 60.367703][ T4237] x11: 0000000000000001 x10: 0000000000000003 x9 : d0288ef95cba4500 [ 60.369600][ T4237] x8 : d0288ef95cba4500 x7 : ffff800008221ddc x6 : 0000000000000000 [ 60.371532][ T4237] x5 : 0000000000000080 x4 : 0000000000000001 x3 : 0000000000000000 [ 60.373511][ T4237] x2 : 0000000000000006 x1 : ffff800010fab040 x0 : ffff8001a06a6000 [ 60.375410][ T4237] Call trace: [ 60.376179][ T4237] usb_submit_urb+0x868/0x1394 [ 60.377303][ T4237] usb_start_wait_urb+0xe8/0x3a8 [ 60.378487][ T4237] usb_bulk_msg+0x284/0x398 [ 60.379535][ T4237] amradio_set_mute+0x1d0/0x3dc [ 60.380666][ T4237] usb_amradio_probe+0x368/0x678 [ 60.381839][ T4237] usb_probe_interface+0x3e4/0x810 [ 60.383094][ T4237] really_probe+0x30c/0x8cc [ 60.384162][ T4237] __driver_probe_device+0x15c/0x33c [ 60.385414][ T4237] driver_probe_device+0x70/0x2a4 [ 60.386580][ T4237] __device_attach_driver+0x2a4/0x3fc [ 60.387799][ T4237] bus_for_each_drv+0x138/0x19c [ 60.388926][ T4237] __device_attach+0x228/0x3c8 [ 60.390040][ T4237] device_initial_probe+0x14/0x20 [ 60.391256][ T4237] bus_probe_device+0x184/0x190 [ 60.392466][ T4237] device_add+0x68c/0xb94 [ 60.393517][ T4237] usb_set_configuration+0x1274/0x1730 [ 60.394838][ T4237] usb_generic_driver_probe+0x7c/0x114 [ 60.396178][ T4237] usb_probe_device+0xbc/0x1e0 [ 60.397307][ T4237] really_probe+0x30c/0x8cc [ 60.398326][ T4237] __driver_probe_device+0x15c/0x33c [ 60.399529][ T4237] driver_probe_device+0x70/0x2a4 [ 60.400752][ T4237] __device_attach_driver+0x2a4/0x3fc [ 60.402034][ T4237] bus_for_each_drv+0x138/0x19c [ 60.403193][ T4237] __device_attach+0x228/0x3c8 [ 60.404356][ T4237] device_initial_probe+0x14/0x20 [ 60.405493][ T4237] bus_probe_device+0x184/0x190 [ 60.406669][ T4237] device_add+0x68c/0xb94 [ 60.407677][ T4237] usb_new_device+0x874/0x1188 [ 60.408759][ T4237] hub_event+0x1c7c/0x37b8 [ 60.409849][ T4237] process_one_work+0x6c4/0x117c [ 60.411032][ T4237] worker_thread+0x7dc/0xe2c [ 60.412074][ T4237] kthread+0x210/0x28c [ 60.413001][ T4237] ret_from_fork+0x10/0x20 [ 60.414096][ T4237] irq event stamp: 2086970 [ 60.415146][ T4237] hardirqs last enabled at (2086969): [] finish_lock_switch+0xbc/0x1e8 [ 60.417521][ T4237] hardirqs last disabled at (2086970): [] el1_dbg+0x24/0x80 [ 60.419693][ T4237] softirqs last enabled at (2086962): [] __do_softirq+0xc14/0xea0 [ 60.421967][ T4237] softirqs last disabled at (2086893): [] ____do_softirq+0x10/0x1c [ 60.424200][ T4237] ---[ end trace 0000000000000000 ]--- [ 60.447413][ T4237] (null): radio-mr800 - initialization failed [ 60.448951][ T4237] radio-mr800: probe of 1-1:6.199 failed with error -71 [ 60.450883][ T4237] usbhid 1-1:6.199: couldn't find an input interrupt endpoint [ 60.538533][ T24] usb 1-1: USB disconnect, device number 6 1970/01/01 00:01:01 executed programs: 5 [ 61.317424][ T4661] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 61.557471][ T4661] usb 1-1: Using ep0 maxpacket: 32 [ 61.717426][ T4661] usb 1-1: unable to get BOS descriptor or descriptor too short [ 61.797419][ T4661] usb 1-1: config 6 has an invalid interface number: 199 but max is 2 [ 61.799395][ T4661] usb 1-1: config 6 has an invalid interface number: 48 but max is 2 [ 61.801225][ T4661] usb 1-1: config 6 has an invalid interface number: 105 but max is 2 [ 61.803115][ T4661] usb 1-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 61.805059][ T4661] usb 1-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 61.806993][ T4661] usb 1-1: config 6 has an invalid interface descriptor of length 2, skipping [ 61.809204][ T4661] usb 1-1: config 6 has no interface number 0 [ 61.810613][ T4661] usb 1-1: config 6 has no interface number 1 [ 61.812026][ T4661] usb 1-1: config 6 has no interface number 2 [ 61.813377][ T4661] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 61.815941][ T4661] usb 1-1: config 6 interface 199 altsetting 128 has an invalid endpoint with address 0x0, skipping [ 61.818430][ T4661] usb 1-1: config 6 interface 199 altsetting 128 has a duplicate endpoint with address 0x8, skipping [ 61.820969][ T4661] usb 1-1: config 6 interface 199 altsetting 128 bulk endpoint 0x2 has invalid maxpacket 8 [ 61.823365][ T4661] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 61.825861][ T4661] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 61.828454][ T4661] usb 1-1: config 6 interface 199 altsetting 128 has a duplicate endpoint with address 0x1, skipping [ 61.830959][ T4661] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 61.833529][ T4661] usb 1-1: config 6 interface 199 altsetting 128 has a duplicate endpoint with address 0x4, skipping [ 61.836076][ T4661] usb 1-1: config 6 interface 48 altsetting 8 has a duplicate endpoint with address 0xA, skipping [ 61.838723][ T4661] usb 1-1: config 6 interface 105 altsetting 129 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 61.841751][ T4661] usb 1-1: config 6 interface 199 has no altsetting 0 [ 61.843312][ T4661] usb 1-1: config 6 interface 48 has no altsetting 0 [ 61.844842][ T4661] usb 1-1: config 6 interface 105 has no altsetting 0 [ 62.077480][ T4661] usb 1-1: string descriptor 0 read error: -22 [ 62.078929][ T4661] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=b9.c5 [ 62.080938][ T4661] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.119108][ T4661] ------------[ cut here ]------------ [ 62.120489][ T4661] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 62.121930][ T4661] WARNING: CPU: 1 PID: 4661 at drivers/usb/core/urb.c:505 usb_submit_urb+0x868/0x1394 [ 62.124084][ T4661] Modules linked in: [ 62.124901][ T4661] CPU: 1 PID: 4661 Comm: kworker/1:4 Tainted: G W 6.1.32-syzkaller #0 [ 62.127022][ T4661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 62.129414][ T4661] Workqueue: usb_hub_wq hub_event [ 62.130614][ T4661] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 62.132394][ T4661] pc : usb_submit_urb+0x868/0x1394 [ 62.133574][ T4661] lr : usb_submit_urb+0x868/0x1394 [ 62.134796][ T4661] sp : ffff80001c276780 [ 62.135828][ T4661] x29: ffff80001c2767c0 x28: 0000000000000000 x27: ffff0000d8323000 [ 62.137568][ T4661] x26: dfff800000000000 x25: ffff80001226c128 x24: ffff0000c48e8200 [ 62.139376][ T4661] x23: ffff0000d23cb25c x22: ffff800012272940 x21: 0000000000000001 [ 62.141334][ T4661] x20: 0000000000000c00 x19: ffff0000d23cb200 x18: ffffffffffffffff [ 62.143239][ T4661] x17: ffffffffffffffff x16: ffff8000082aa084 x15: 0000000000000001 [ 62.145130][ T4661] x14: 1ffff0000284a0b0 x13: dfff800000000000 x12: 0000000000000003 [ 62.147043][ T4661] x11: 0000000000000001 x10: 0000000000000003 x9 : 7613d9c7efee4100 [ 62.149005][ T4661] x8 : 7613d9c7efee4100 x7 : ffff800010f190bc x6 : 0000000000000000 [ 62.150809][ T4661] x5 : 0000000000000080 x4 : 0000000000000001 x3 : 0000000000000000 [ 62.152931][ T4661] x2 : 0000000000000006 x1 : ffff800010fab040 x0 : ffff8001a06c6000 [ 62.154786][ T4661] Call trace: [ 62.155534][ T4661] usb_submit_urb+0x868/0x1394 [ 62.156681][ T4661] usb_start_wait_urb+0xe8/0x3a8 [ 62.157811][ T4661] usb_bulk_msg+0x284/0x398 [ 62.158839][ T4661] amradio_set_mute+0x1d0/0x3dc [ 62.159919][ T4661] usb_amradio_probe+0x368/0x678 [ 62.161047][ T4661] usb_probe_interface+0x3e4/0x810 [ 62.162241][ T4661] really_probe+0x30c/0x8cc [ 62.163281][ T4661] __driver_probe_device+0x15c/0x33c [ 62.164514][ T4661] driver_probe_device+0x70/0x2a4 [ 62.165654][ T4661] __device_attach_driver+0x2a4/0x3fc [ 62.166962][ T4661] bus_for_each_drv+0x138/0x19c [ 62.168080][ T4661] __device_attach+0x228/0x3c8 [ 62.169235][ T4661] device_initial_probe+0x14/0x20 [ 62.170361][ T4661] bus_probe_device+0x184/0x190 [ 62.171476][ T4661] device_add+0x68c/0xb94 [ 62.172581][ T4661] usb_set_configuration+0x1274/0x1730 [ 62.173845][ T4661] usb_generic_driver_probe+0x7c/0x114 [ 62.175119][ T4661] usb_probe_device+0xbc/0x1e0 [ 62.176143][ T4661] really_probe+0x30c/0x8cc [ 62.177205][ T4661] __driver_probe_device+0x15c/0x33c [ 62.178407][ T4661] driver_probe_device+0x70/0x2a4 [ 62.179566][ T4661] __device_attach_driver+0x2a4/0x3fc [ 62.180805][ T4661] bus_for_each_drv+0x138/0x19c [ 62.181920][ T4661] __device_attach+0x228/0x3c8 [ 62.183083][ T4661] device_initial_probe+0x14/0x20 [ 62.184285][ T4661] bus_probe_device+0x184/0x190 [ 62.185420][ T4661] device_add+0x68c/0xb94 [ 62.186379][ T4661] usb_new_device+0x874/0x1188 [ 62.187432][ T4661] hub_event+0x1c7c/0x37b8 [ 62.188508][ T4661] process_one_work+0x6c4/0x117c [ 62.189670][ T4661] worker_thread+0x7dc/0xe2c [ 62.190670][ T4661] kthread+0x210/0x28c [ 62.191646][ T4661] ret_from_fork+0x10/0x20 [ 62.192666][ T4661] irq event stamp: 4142 [ 62.193641][ T4661] hardirqs last enabled at (4141): [] __schedule+0xfd8/0x1c5c [ 62.195731][ T4661] hardirqs last disabled at (4142): [] el1_dbg+0x24/0x80 [ 62.197615][ T4661] softirqs last enabled at (1954): [] __do_softirq+0xc14/0xea0 [ 62.199614][ T4661] softirqs last disabled at (1945): [] ____do_softirq+0x10/0x1c [ 62.201714][ T4661] ---[ end trace 0000000000000000 ]--- [ 62.218184][ T4661] (null): radio-mr800 - initialization failed [ 62.219700][ T4661] radio-mr800: probe of 1-1:6.199 failed with error -71 [ 62.221486][ T4661] usbhid 1-1:6.199: couldn't find an input interrupt endpoint [ 62.319751][ T4661] usb 1-1: USB disconnect, device number 7