Warning: Permanently added '10.128.10.9' (ED25519) to the list of known hosts. 1970/01/01 00:01:32 ignoring optional flag "sandboxArg"="0" 1970/01/01 00:01:33 parsed 1 programs [ 96.888131][ T6996] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 110.105936][ T6096] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 110.108706][ T6096] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 110.111698][ T6096] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 110.115826][ T6096] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 110.120294][ T6096] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 110.389077][ T2116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.391361][ T2116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.405638][ T573] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.405689][ T573] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.054677][ T7079] chnl_net:caif_netlink_parms(): no params data found [ 112.094870][ T7079] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.094979][ T7079] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.095070][ T7079] bridge_slave_0: entered allmulticast mode [ 112.095895][ T7079] bridge_slave_0: entered promiscuous mode [ 112.097259][ T7079] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.097328][ T7079] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.097416][ T7079] bridge_slave_1: entered allmulticast mode [ 112.098380][ T7079] bridge_slave_1: entered promiscuous mode [ 112.117345][ T7079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.118829][ T7079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.140979][ T7079] team0: Port device team_slave_0 added [ 112.143245][ T7079] team0: Port device team_slave_1 added [ 112.156700][ T7079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.156760][ T7079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.156790][ T7079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.158170][ T7079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.158196][ T7079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.158225][ T7079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.190852][ T7079] hsr_slave_0: entered promiscuous mode [ 112.191402][ T7079] hsr_slave_1: entered promiscuous mode [ 113.283523][ T7079] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 113.287263][ T7079] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 113.290685][ T7079] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 113.295836][ T7079] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 113.360162][ T7079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.378968][ T7079] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.392409][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.392489][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.393290][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.393347][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.565684][ T7079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.605676][ T7079] veth0_vlan: entered promiscuous mode [ 113.608687][ T7079] veth1_vlan: entered promiscuous mode [ 113.632109][ T7079] veth0_macvtap: entered promiscuous mode [ 113.635628][ T7079] veth1_macvtap: entered promiscuous mode [ 113.643895][ T7079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.649490][ T7079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.653954][ T7079] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.656581][ T7079] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.659183][ T7079] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.664047][ T7079] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.944178][ T41] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.038387][ T41] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.135921][ T41] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.243894][ T41] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:01:54 executed programs: 0 [ 114.555253][ T6559] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 114.557854][ T6559] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 114.560086][ T6559] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 114.566746][ T6559] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 114.567584][ T6559] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 114.660941][ T7242] chnl_net:caif_netlink_parms(): no params data found [ 114.710395][ T7242] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.714624][ T7242] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.714853][ T7242] bridge_slave_0: entered allmulticast mode [ 114.715713][ T7242] bridge_slave_0: entered promiscuous mode [ 114.722710][ T7242] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.722798][ T7242] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.722905][ T7242] bridge_slave_1: entered allmulticast mode [ 114.723790][ T7242] bridge_slave_1: entered promiscuous mode [ 114.756716][ T7242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.763607][ T7242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.782475][ T7242] team0: Port device team_slave_0 added [ 114.785733][ T7242] team0: Port device team_slave_1 added [ 114.802717][ T7242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.804925][ T7242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.812730][ T7242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.816999][ T7242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.819071][ T7242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.826901][ T7242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.853291][ T7242] hsr_slave_0: entered promiscuous mode [ 114.855474][ T7242] hsr_slave_1: entered promiscuous mode [ 114.857652][ T7242] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 114.860010][ T7242] Cannot create hsr debugfs directory [ 116.592059][ T6559] Bluetooth: hci0: command tx timeout [ 117.041578][ T41] bridge_slave_1: left allmulticast mode [ 117.041736][ T41] bridge_slave_1: left promiscuous mode [ 117.041867][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.049800][ T41] bridge_slave_0: left allmulticast mode [ 117.049860][ T41] bridge_slave_0: left promiscuous mode [ 117.050009][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.671853][ T6559] Bluetooth: hci0: command tx timeout [ 118.844094][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.884050][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.943346][ T41] bond0 (unregistering): Released all slaves [ 119.019489][ T41] hsr_slave_0: left promiscuous mode [ 119.023413][ T41] hsr_slave_1: left promiscuous mode [ 119.024398][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.024442][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.027521][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.027557][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.045946][ T41] veth1_macvtap: left promiscuous mode [ 119.046047][ T41] veth0_macvtap: left promiscuous mode [ 119.046434][ T41] veth1_vlan: left promiscuous mode [ 119.046522][ T41] veth0_vlan: left promiscuous mode [ 120.744978][ T41] team0 (unregistering): Port device team_slave_1 removed [ 120.751785][ T6559] Bluetooth: hci0: command tx timeout [ 120.973406][ T41] team0 (unregistering): Port device team_slave_0 removed [ 122.831768][ T6559] Bluetooth: hci0: command tx timeout [ 123.784767][ T7242] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 123.794130][ T7242] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 123.798010][ T7242] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 123.802164][ T7242] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 123.935791][ T7242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.947682][ T7242] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.950425][ T573] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.950508][ T573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.969983][ T2116] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.970069][ T2116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.136072][ T7242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.163093][ T7242] veth0_vlan: entered promiscuous mode [ 124.166154][ T7242] veth1_vlan: entered promiscuous mode [ 124.180798][ T7242] veth0_macvtap: entered promiscuous mode [ 124.186083][ T7242] veth1_macvtap: entered promiscuous mode [ 124.196262][ T7242] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.198366][ T7242] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.202860][ T7242] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.202934][ T7242] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.203399][ T7242] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.203582][ T7242] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.248922][ T2064] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.251178][ T2064] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.265374][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.265430][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 1970/01/01 00:02:04 executed programs: 2 [ 124.552576][ T6557] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 124.731865][ T6557] usb 1-1: Using ep0 maxpacket: 16 [ 124.735348][ T6557] usb 1-1: config 0 has an invalid interface number: 6 but max is 0 [ 124.735438][ T6557] usb 1-1: config 0 has no interface number 0 [ 124.735472][ T6557] usb 1-1: config 0 interface 6 altsetting 0 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 124.735500][ T6557] usb 1-1: config 0 interface 6 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 120 [ 124.735531][ T6557] usb 1-1: config 0 interface 6 altsetting 0 endpoint 0x8A has an invalid bInterval 127, changing to 10 [ 124.735558][ T6557] usb 1-1: config 0 interface 6 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 124.735582][ T6557] usb 1-1: config 0 interface 6 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 124.738438][ T6557] usb 1-1: New USB device found, idVendor=19d2, idProduct=0078, bcdDevice=74.c0 [ 124.738473][ T6557] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.738496][ T6557] usb 1-1: Product: syz [ 124.738516][ T6557] usb 1-1: Manufacturer: syz [ 124.738536][ T6557] usb 1-1: SerialNumber: syz [ 124.742880][ T6557] ** replaying previous printk message ** [ 124.742880][ T6557] usb 1-1: config 0 descriptor?? [ 124.749373][ T6557] smsusb:smsusb_probe: board id=15, interface number 6 [ 124.758807][ T6557] smsusb:siano_media_device_register: media controller created [ 124.762487][ T6557] ------------[ cut here ]------------ [ 124.762513][ T6557] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 124.763017][ T6557] WARNING: CPU: 1 PID: 6557 at drivers/usb/core/urb.c:504 usb_submit_urb+0xa24/0x1470 [ 124.775455][ T6557] Modules linked in: [ 124.776589][ T6557] CPU: 1 UID: 0 PID: 6557 Comm: kworker/1:4 Not tainted 6.16.0-rc7-syzkaller-00099-g82af5ea7c611 #0 PREEMPT [ 124.779780][ T6557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 124.782571][ T6557] Workqueue: usb_hub_wq hub_event [ 124.784027][ T6557] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 124.786201][ T6557] pc : usb_submit_urb+0xa24/0x1470 [ 124.787646][ T6557] lr : usb_submit_urb+0xa24/0x1470 [ 124.789066][ T6557] sp : ffff8000a3ba6900 [ 124.790160][ T6557] x29: ffff8000a3ba6940 x28: 0000000000000000 x27: ffff80008c9436ec [ 124.792324][ T6557] x26: ffff0000ce2696a0 x25: ffff80008c9436e0 x24: 0000000000000000 [ 124.794512][ T6557] x23: ffff80008c94a460 x22: dfff800000000000 x21: 0000000000000003 [ 124.796691][ T6557] x20: 0000000000000820 x19: ffff0000c7441700 x18: 00000000ffffffff [ 124.798865][ T6557] x17: 0000000000000000 x16: ffff80008af01c68 x15: 0000000000000001 [ 124.801066][ T6557] x14: 1fffe000337d64e2 x13: 0000000000000000 x12: 0000000000000000 [ 124.803333][ T6557] x11: ffff6000337d64e3 x10: 0000000000ff0100 x9 : b6d93f2688073400 [ 124.805604][ T6557] x8 : b6d93f2688073400 x7 : 0000000000000001 x6 : 0000000000000001 [ 124.807935][ T6557] x5 : ffff8000a3ba6258 x4 : ffff80008f776bc0 x3 : ffff8000807bba4c [ 124.810232][ T6557] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000 [ 124.812467][ T6557] Call trace: [ 124.813357][ T6557] usb_submit_urb+0xa24/0x1470 (P) [ 124.814944][ T6557] smsusb_submit_urb+0x20c/0x2f8 [ 124.816275][ T6557] smsusb_start_streaming+0x34/0x2e0 [ 124.817829][ T6557] smsusb_probe+0x139c/0x1a04 [ 124.819120][ T6557] usb_probe_interface+0x584/0xa44 [ 124.820519][ T6557] really_probe+0x394/0x910 [ 124.821743][ T6557] __driver_probe_device+0x180/0x2d4 [ 124.823201][ T6557] driver_probe_device+0x78/0x330 [ 124.824592][ T6557] __device_attach_driver+0x290/0x4e0 [ 124.826069][ T6557] bus_for_each_drv+0x220/0x2b4 [ 124.827469][ T6557] __device_attach+0x26c/0x388 [ 124.828790][ T6557] device_initial_probe+0x24/0x34 [ 124.830245][ T6557] bus_probe_device+0x178/0x240 [ 124.831715][ T6557] device_add+0x71c/0xa60 [ 124.832976][ T6557] usb_set_configuration+0x1640/0x1bac [ 124.834498][ T6557] usb_generic_driver_probe+0x8c/0x144 [ 124.835848][ T6557] usb_probe_device+0x1a4/0x348 [ 124.837191][ T6557] really_probe+0x394/0x910 [ 124.838486][ T6557] __driver_probe_device+0x180/0x2d4 [ 124.840030][ T6557] driver_probe_device+0x78/0x330 [ 124.841492][ T6557] __device_attach_driver+0x290/0x4e0 [ 124.843072][ T6557] bus_for_each_drv+0x220/0x2b4 [ 124.844519][ T6557] __device_attach+0x26c/0x388 [ 124.845879][ T6557] device_initial_probe+0x24/0x34 [ 124.847412][ T6557] bus_probe_device+0x178/0x240 [ 124.848785][ T6557] device_add+0x71c/0xa60 [ 124.849998][ T6557] usb_new_device+0x7f0/0x1220 [ 124.851347][ T6557] hub_event+0x211c/0x3c78 [ 124.852631][ T6557] process_one_work+0x7e8/0x155c [ 124.854018][ T6557] worker_thread+0x958/0xed8 [ 124.855394][ T6557] kthread+0x5fc/0x75c [ 124.856549][ T6557] ret_from_fork+0x10/0x20 [ 124.857781][ T6557] irq event stamp: 50326 [ 124.858918][ T6557] hardirqs last enabled at (50325): [] __console_unlock+0x70/0xc4 [ 124.861538][ T6557] hardirqs last disabled at (50326): [] el1_brk64+0x1c/0x48 [ 124.864252][ T6557] softirqs last enabled at (49768): [] handle_softirqs+0xaf8/0xc88 [ 124.866897][ T6557] softirqs last disabled at (49701): [] __do_softirq+0x14/0x20 [ 124.869619][ T6557] ---[ end trace 0000000000000000 ]--- [ 124.874561][ T6557] smsusb:smsusb_s ** replaying previous printk message ** [ 124.874561][ T6557] smsusb:smsusb_start_streaming: smsusb_submit_urb(...) failed [ 124.874641][ T6557] smsusb:smsusb_init_device: smsusb_start_streaming(...) failed [ 124.875582][ T6557] ------------[ cut here ]------------ [ 124.875603][ T6557] WARNING: CPU: 1 PID: 6557 at mm/slub.c:4753 free_large_kmalloc+0x138/0x1f4 [ 124.884751][ T6557] Modules linked in: [ 124.885914][ T6557] CPU: 1 UID: 0 PID: 6557 Comm: kworker/1:4 Tainted: G W 6.16.0-rc7-syzkaller-00099-g82af5ea7c611 #0 PREEMPT [ 124.889651][ T6557] Tainted: [W]=WARN [ 124.890808][ T6557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 124.893738][ T6557] Workqueue: usb_hub_wq hub_event [ 124.895187][ T6557] pstate: 20400005 (nzCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 124.897430][ T6557] pc : free_large_kmalloc+0x138/0x1f4 [ 124.898913][ T6557] lr : kfree+0x25c/0x474 [ 124.900064][ T6557] sp : ffff8000a3ba6930 [ 124.901221][ T6557] x29: ffff8000a3ba6930 x28: ffff80008cd072f8 x27: ffff0000cbe773f0 [ 124.903523][ T6557] x26: 1fffe000197cee01 x25: ffff0000cae50000 x24: 1fffe000197ce81e [ 124.905713][ T6557] x23: dfff800000000000 x22: ffff0000d6ee2000 x21: dfff800000000000 [ 124.908022][ T6557] x20: fffffdffc35bb880 x19: fffffdffc35bb880 x18: 00000000ffffffff [ 124.910241][ T6557] x17: ffff800093376000 x16: ffff80008af01c68 x15: 0000000000000001 [ 124.912598][ T6557] x14: 1fffe00018e882e0 x13: 0000000000000000 x12: 0000000000000000 [ 124.914933][ T6557] x11: ffff600018e882e1 x10: 0000000000ff0100 x9 : 00000000f8000000 [ 124.917136][ T6557] x8 : 00000000ff000000 x7 : ffff800086589ffc x6 : ffff80008657a554 [ 124.919388][ T6557] x5 : ffff0000dada8e78 x4 : ffff8000a3ba67b8 x3 : ffff80008659e38c [ 124.921632][ T6557] x2 : 0000000000000001 x1 : ffff80008ec75e8a x0 : fffffdffc35bb880 [ 124.923811][ T6557] Call trace: [ 124.924722][ T6557] free_large_kmalloc+0x138/0x1f4 (P) [ 124.926161][ T6557] kfree+0x25c/0x474 [ 124.927331][ T6557] usb_free_urb+0xd0/0x140 [ 124.928604][ T6557] smsusb_term_device+0x19c/0x32c [ 124.929978][ T6557] smsusb_probe+0x1490/0x1a04 [ 124.931311][ T6557] usb_probe_interface+0x584/0xa44 [ 124.932779][ T6557] really_probe+0x394/0x910 [ 124.934060][ T6557] __driver_probe_device+0x180/0x2d4 [ 124.935554][ T6557] driver_probe_device+0x78/0x330 [ 124.937021][ T6557] __device_attach_driver+0x290/0x4e0 [ 124.938495][ T6557] bus_for_each_drv+0x220/0x2b4 [ 124.939813][ T6557] __device_attach+0x26c/0x388 [ 124.941301][ T6557] device_initial_probe+0x24/0x34 [ 124.942763][ T6557] bus_probe_device+0x178/0x240 [ 124.944103][ T6557] device_add+0x71c/0xa60 [ 124.945405][ T6557] usb_set_configuration+0x1640/0x1bac [ 124.946891][ T6557] usb_generic_driver_probe+0x8c/0x144 [ 124.948439][ T6557] usb_probe_device+0x1a4/0x348 [ 124.949812][ T6557] really_probe+0x394/0x910 [ 124.951042][ T6557] __driver_probe_device+0x180/0x2d4 [ 124.952572][ T6557] driver_probe_device+0x78/0x330 [ 124.953986][ T6557] __device_attach_driver+0x290/0x4e0 [ 124.955426][ T6557] bus_for_each_drv+0x220/0x2b4 [ 124.956791][ T6557] __device_attach+0x26c/0x388 [ 124.958126][ T6557] device_initial_probe+0x24/0x34 [ 124.959496][ T6557] bus_probe_device+0x178/0x240 [ 124.960782][ T6557] device_add+0x71c/0xa60 [ 124.962048][ T6557] usb_new_device+0x7f0/0x1220 [ 124.963332][ T6557] hub_event+0x211c/0x3c78 [ 124.964570][ T6557] process_one_work+0x7e8/0x155c [ 124.966026][ T6557] worker_thread+0x958/0xed8 [ 124.967353][ T6557] kthread+0x5fc/0x75c [ 124.968468][ T6557] ret_from_fork+0x10/0x20 [ 124.969722][ T6557] irq event stamp: 50984 [ 124.970851][ T6557] hardirqs last enabled at (50983): [] kasan_quarantine_put+0x1a0/0x1c8 [ 124.973729][ T6557] hardirqs last disabled at (50984): [] el1_brk64+0x1c/0x48 [ 124.976243][ T6557] softirqs last enabled at (50484): [] handle_softirqs+0xaf8/0xc88 [ 124.978874][ T6557] softirqs last disabled at (50331): [] __do_softirq+0x14/0x20 [ 124.981340][ T6557] ---[ end trace 0000000000000000 ]--- [ 124.984560][ T6557] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x116ee2 [ 124.984878][ T6557] flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff) [ 124.984906][ T6557] raw: 05ffc00000000000 0000000000000000 dead000000000122 0000000000000000 [ 124.984929][ T6557] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 124.984947][ T6557] page dumped because: Not a kmalloc allocation [ 124.987797][ T6557] smsusb:smsusb_probe: Device initialized with return code -22 [ 125.009075][ T6557] smsusb 1-1:0.6: probe with driver smsusb failed with error -22 [ 125.013734][ T6557] usb 1-1: USB disconnect, device number 2 [ 125.751762][ T6557] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 125.901759][ T6557] usb 1-1: Using ep0 maxpacket: 16 [ 125.904381][ T6557] usb 1-1: config 0 has an invalid interface number: 6 but max is 0 [ 125.904439][ T6557] usb 1-1: config 0 has no interface number 0 [ 125.904479][ T6557] usb 1-1: config 0 interface 6 altsetting 0 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 125.904507][ T6557] usb 1-1: config 0 interface 6 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 120 [ 125.904532][ T6557] usb 1-1: config 0 interface 6 altsetting 0 endpoint 0x8A has an invalid bInterval 127, changing to 10 [ 125.904559][ T6557] usb ** replaying previous printk message ** [ 125.904559][ T6557] usb 1-1: config 0 interface 6 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 125.904583][ T6557] usb 1-1: config 0 interface 6 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 125.906578][ T6557] usb 1-1: New USB device found, idVendor=19d2, idProduct=0078, bcdDevice=74.c0 [ 125.906611][ T6557] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.906634][ T6557] usb 1-1: Product: syz [ 125.906654][ T6557] usb 1-1: Manufacturer: syz [ 125.906674][ T6557] usb 1-1: SerialNumber: syz [ 125.909439][ T6557] usb 1-1: config 0 descriptor?? [ 125.915018][ T6557] smsusb:smsusb_probe: board id=15, interface number 6 [ 125.917246][ T6557] smsusb:siano_media_device_register: media controller created [ 125.917720][ T6557] ------------[ cut here ]------------ [ 125.917739][ T6557] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 125.918258][ T6557] WARNING: CPU: 1 PID: 6557 at drivers/usb/core/urb.c:504 usb_submit_urb+0xa24/0x1470 [ 125.944663][ T6557] Modules linked in: [ 125.945747][ T6557] CPU: 1 UID: 0 PID: 6557 Comm: kworker/1:4 Tainted: G W 6.16.0-rc7-syzkaller-00099-g82af5ea7c611 #0 PREEMPT [ 125.949355][ T6557] Tainted: [W]=WARN [ 125.950381][ T6557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 125.953125][ T6557] Workqueue: usb_hub_wq hub_event [ 125.954557][ T6557] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 125.956758][ T6557] pc : usb_submit_urb+0xa24/0x1470 [ 125.958199][ T6557] lr : usb_submit_urb+0xa24/0x1470 [ 125.959591][ T6557] sp : ffff8000a3ba6900 [ 125.960766][ T6557] x29: ffff8000a3ba6940 x28: 0000000000000000 x27: ffff80008c9436ec [ 125.962907][ T6557] x26: ffff0000cd2a5c60 x25: ffff80008c9436e0 x24: 0000000000000000 [ 125.965160][ T6557] x23: ffff80008c94a460 x22: dfff800000000000 x21: 0000000000000003 [ 125.967244][ T6557] x20: 0000000000000820 x19: ffff0000c5e16700 x18: 1fffe000337d6476 [ 125.969673][ T6557] x17: 0000000000000000 x16: ffff80008af01c68 x15: 0000000000000001 [ 125.972006][ T6557] x14: 1fffe000337d64e2 x13: 0000000000000000 x12: 0000000000000000 [ 125.974257][ T6557] x11: ffff6000337d64e3 x10: 0000000000ff0100 x9 : b6d93f2688073400 [ 125.976532][ T6557] x8 : b6d93f2688073400 x7 : 0000000000000001 x6 : 0000000000000001 [ 125.978758][ T6557] x5 : ffff8000a3ba6258 x4 : ffff80008f776bc0 x3 : ffff8000807bba4c [ 125.980955][ T6557] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000 [ 125.983117][ T6557] Call trace: [ 125.984027][ T6557] usb_submit_urb+0xa24/0x1470 (P) [ 125.985553][ T6557] smsusb_submit_urb+0x20c/0x2f8 [ 125.986908][ T6557] smsusb_start_streaming+0x34/0x2e0 [ 125.988285][ T6557] smsusb_probe+0x139c/0x1a04 [ 125.989568][ T6557] usb_probe_interface+0x584/0xa44 [ 125.991037][ T6557] really_probe+0x394/0x910 [ 125.992319][ T6557] __driver_probe_device+0x180/0x2d4 [ 125.993760][ T6557] driver_probe_device+0x78/0x330 [ 125.995159][ T6557] __device_attach_driver+0x290/0x4e0 [ 125.996701][ T6557] bus_for_each_drv+0x220/0x2b4 [ 125.998115][ T6557] __device_attach+0x26c/0x388 [ 125.999435][ T6557] device_initial_probe+0x24/0x34 [ 126.000870][ T6557] bus_probe_device+0x178/0x240 [ 126.002260][ T6557] device_add+0x71c/0xa60 [ 126.003467][ T6557] usb_set_configuration+0x1640/0x1bac [ 126.004953][ T6557] usb_generic_driver_probe+0x8c/0x144 [ 126.006421][ T6557] usb_probe_device+0x1a4/0x348 [ 126.007800][ T6557] really_probe+0x394/0x910 [ 126.009019][ T6557] __driver_probe_device+0x180/0x2d4 [ 126.010526][ T6557] driver_probe_device+0x78/0x330 [ 126.011976][ T6557] __device_attach_driver+0x290/0x4e0 [ 126.013590][ T6557] bus_for_each_drv+0x220/0x2b4 [ 126.014932][ T6557] __device_attach+0x26c/0x388 [ 126.016187][ T6557] device_initial_probe+0x24/0x34 [ 126.017545][ T6557] bus_probe_device+0x178/0x240 [ 126.018911][ T6557] device_add+0x71c/0xa60 [ 126.020212][ T6557] usb_new_device+0x7f0/0x1220 [ 126.021503][ T6557] hub_event+0x211c/0x3c78 [ 126.022759][ T6557] process_one_work+0x7e8/0x155c [ 126.024114][ T6557] worker_thread+0x958/0xed8 [ 126.025404][ T6557] kthread+0x5fc/0x75c [ 126.026532][ T6557] ret_from_fork+0x10/0x20 [ 126.027799][ T6557] irq event stamp: 57782 [ 126.028871][ T6557] hardirqs last enabled at (57781): [] __console_unlock+0x70/0xc4 [ 126.031455][ T6557] hardirqs last disabled at (57782): [] el1_brk64+0x1c/0x48 [ 126.033980][ T6557] softirqs last enabled at (57456): [] handle_softirqs+0xaf8/0xc88 [ 126.036717][ T6557] softirqs last disabled at (57395): [] __do_softirq+0x14/0x20 [ 126.039273][ T6557] ---[ end trace 0000000000000000 ]--- [ 126.042642][ T6557] smsusb:smsusb_start_streaming: smsusb_submit_urb(...) failed [ 126.042705][ T6557] smsusb:smsusb_init_device: smsusb_start_streaming(...) failed [ 126.043395][ T6557] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x116ee2 [ 126.043421][ T6557] flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff) [ 126.043449][ T6557] raw: 05ffc00000000000 0000000000000000 dead000000000122 0000000000000000 [ 126.043471][ T6557] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 126.043489][ T6557] page dumped because: Not a kmalloc allocation [ 126.044345][ T6557] smsusb:smsusb_probe: Device initialized with return code -22 [ 126.071320][ T6557] smsusb 1-1:0.6: probe with driver smsusb failed with error -22 [ 126.114762][ T7500] usb 1-1: USB disconnect, device number 3 [ 126.202874][ T2408] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.204181][ T2408] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.871871][ T6557] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 127.021751][ T6557] usb 1-1: Using ep0 maxpacket: 16 [ 127.024599][ T6557] usb 1-1: config 0 has an invalid interface number: 6 but max is 0 [ 127.024653][ T6557] usb 1-1: config 0 has no interface number 0 [ 127.024682][ T6557] usb 1-1: config 0 interface 6 altsetting 0 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 127.024709][ T6557] usb 1-1: config 0 interface 6 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 120 [ 127.024735][ T6557] usb 1-1: config 0 interface 6 altsetting 0 endpoint 0x8A has an invalid bInterval 127, changin ** replaying previous printk message ** [ 127.024735][ T6557] usb 1-1: config 0 interface 6 altsetting 0 endpoint 0x8A has an invalid bInterval 127, changing to 10 [ 127.024761][ T6557] usb 1-1: config 0 interface 6 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 127.024785][ T6557] usb 1-1: config 0 interface 6 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 127.026865][ T6557] usb 1-1: New USB device found, idVendor=19d2, idProduct=0078, bcdDevice=74.c0 [ 127.026897][ T6557] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.026920][ T6557] usb 1-1: Product: syz [ 127.026940][ T6557] usb 1-1: Manufacturer: syz [ 127.026960][ T6557] usb 1-1: SerialNumber: syz [ 127.029083][ T6557] usb 1-1: config 0 descriptor?? [ 127.034079][ T6557] smsusb:smsusb_probe: board id=15, interface number 6 [ 127.036589][ T6557] smsusb:siano_media_device_register: media controller created [ 127.037057][ T6557] ------------[ cut here ]------------ [ 127.037076][ T6557] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 127.037600][ T6557] WARNING: CPU: 1 PID: 6557 at drivers/usb/core/urb.c:504 usb_submit_urb+0xa24/0x1470 [ 127.067019][ T6557] Modules linked in: [ 127.068057][ T6557] CPU: 1 UID: 0 PID: 6557 Comm: kworker/1:4 Tainted: G W 6.16.0-rc7-syzkaller-00099-g82af5ea7c611 #0 PREEMPT [ 127.071704][ T6557] Tainted: [W]=WARN [ 127.072778][ T6557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 127.075649][ T6557] Workqueue: usb_hub_wq hub_event [ 127.077119][ T6557] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 127.079267][ T6557] pc : usb_submit_urb+0xa24/0x1470 [ 127.080675][ T6557] lr : usb_submit_urb+0xa24/0x1470 [ 127.082121][ T6557] sp : ffff8000a3ba6900 [ 127.083313][ T6557] x29: ffff8000a3ba6940 x28: 0000000000000000 x27: ffff80008c9436ec [ 127.085537][ T6557] x26: ffff0000c270d260 x25: ffff80008c9436e0 x24: 0000000000000000 [ 127.087850][ T6557] x23: ffff80008c94a460 x22: dfff800000000000 x21: 0000000000000003 [ 127.090185][ T6557] x20: 0000000000000820 x19: ffff0000ecf4af00 x18: 1fffe000337d6476 [ 127.092382][ T6557] x17: 0000000000000000 x16: ffff80008af01c68 x15: 0000000000000001 [ 127.094580][ T6557] x14: 1fffe000337d64e2 x13: 0000000000000000 x12: 0000000000000000 [ 127.096804][ T6557] x11: ffff6000337d64e3 x10: 0000000000ff0100 x9 : b6d93f2688073400 [ 127.099060][ T6557] x8 : b6d93f2688073400 x7 : 0000000000000001 x6 : 0000000000000001 [ 127.101336][ T6557] x5 : ffff8000a3ba6258 x4 : ffff80008f776bc0 x3 : ffff8000807bba4c [ 127.103560][ T6557] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000 [ 127.105770][ T6557] Call trace: [ 127.106680][ T6557] usb_submit_urb+0xa24/0x1470 (P) [ 127.108089][ T6557] smsusb_submit_urb+0x20c/0x2f8 [ 127.109499][ T6557] smsusb_start_streaming+0x34/0x2e0 [ 127.110998][ T6557] smsusb_probe+0x139c/0x1a04 [ 127.112374][ T6557] usb_probe_interface+0x584/0xa44 [ 127.113847][ T6557] really_probe+0x394/0x910 [ 127.115168][ T6557] __driver_probe_device+0x180/0x2d4 [ 127.116692][ T6557] driver_probe_device+0x78/0x330 [ 127.118205][ T6557] __device_attach_driver+0x290/0x4e0 [ 127.119789][ T6557] bus_for_each_drv+0x220/0x2b4 [ 127.121148][ T6557] __device_attach+0x26c/0x388 [ 127.122591][ T6557] device_initial_probe+0x24/0x34 [ 127.124003][ T6557] bus_probe_device+0x178/0x240 [ 127.125468][ T6557] device_add+0x71c/0xa60 [ 127.126673][ T6557] usb_set_configuration+0x1640/0x1bac [ 127.128204][ T6557] usb_generic_driver_probe+0x8c/0x144 [ 127.129687][ T6557] usb_probe_device+0x1a4/0x348 [ 127.131012][ T6557] really_probe+0x394/0x910 [ 127.132308][ T6557] __driver_probe_device+0x180/0x2d4 [ 127.133813][ T6557] driver_probe_device+0x78/0x330 [ 127.135281][ T6557] __device_attach_driver+0x290/0x4e0 [ 127.136865][ T6557] bus_for_each_drv+0x220/0x2b4 [ 127.138308][ T6557] __device_attach+0x26c/0x388 [ 127.139678][ T6557] device_initial_probe+0x24/0x34 [ 127.141143][ T6557] bus_probe_device+0x178/0x240 [ 127.142589][ T6557] device_add+0x71c/0xa60 [ 127.143873][ T6557] usb_new_device+0x7f0/0x1220 [ 127.145271][ T6557] hub_event+0x211c/0x3c78 [ 127.146477][ T6557] process_one_work+0x7e8/0x155c [ 127.147854][ T6557] worker_thread+0x958/0xed8 [ 127.149228][ T6557] kthread+0x5fc/0x75c [ 127.150463][ T6557] ret_from_fork+0x10/0x20 [ 127.151752][ T6557] irq event stamp: 63170 [ 127.152998][ T6557] hardirqs last enabled at (63169): [] __console_unlock+0x70/0xc4 [ 127.155705][ T6557] hardirqs last disabled at (63170): [] el1_brk64+0x1c/0x48 [ 127.158274][ T6557] softirqs last enabled at (60176): [] handle_softirqs+0xaf8/0xc88 [ 127.161044][ T6557] softirqs last disabled at (60129): [] __do_softirq+0x14/0x20 [ 127.163700][ T6557] ---[ end trace 0000000000000000 ]--- [ 127.167183][ T6557] smsusb:smsusb_start_streaming: smsusb_submit_urb(...) failed [ 127.167249][ T6557] smsusb:smsusb_init_device: smsusb_start_streaming(...) failed [ 127.167945][ T6557] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x116ee2 [ 127.167970][ T6557] flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff) [ 127.167998][ T6557] raw: 05ffc00000000000 0000000000000000 dead000000000122 0000000000000000 [ 127.168021][ T6557] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 127.168039][ T6557] page dumped because: Not a kmalloc allocation [ 127.169471][ T6557] smsusb:smsusb_probe: Device initialized with return code -22 [ 127.197441][ T6557] smsusb 1-1:0.6: probe with driver smsusb failed with error -22 [ 127.232867][ T7500] usb 1-1: USB disconnect, device number 4 [ 127.991754][ T7500] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 128.141791][ T7500] usb 1-1: Using ep0 maxpacket: 16 [ 128.144452][ T7500] usb 1-1: config 0 has an invalid interface number: 6 but max is 0 [ 128.146918][ T7500] usb 1-1: config 0 has no interface number 0 [ 128.148820][ T7500] usb 1-1: config 0 interface 6 altsetting 0 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 128.148880][ T7500] usb 1-1: config 0 interface 6 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 120 [ 128.148912][ T7500] usb 1-1: config 0 interface 6 altsetting 0 endpoint 0x8A has an invalid bInterval 127, changing to 10 [ 128.148950][ T7500] usb 1-1: config 0 interface 6 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 128.148976][ T7500] usb 1-1: config 0 interface 6 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 128.150946][ T7500] usb 1-1: New USB device found, idVendor=19d2, idProduct=0078, bcdDevice=74.c0 [ 128.150979][ T7500] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.151002][ T7500] usb 1-1: Product: syz [ 128.151022][ T7500] usb 1-1: Manufacturer: syz [ 128.151042][ T7500] usb 1-1: SerialNumber: syz [ 128.153437][ T7500] usb 1-1: config 0 descriptor?? [ 128.15893 ** replaying previous printk message ** [ 128.158939][ T7500] smsusb:smsusb_probe: board id=15, interface number 6 [ 128.173539][ T7500] smsusb:siano_media_device_register: media controller created [ 128.174012][ T7500] ------------[ cut here ]------------ [ 128.174030][ T7500] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 128.174547][ T7500] WARNING: CPU: 0 PID: 7500 at drivers/usb/core/urb.c:504 usb_submit_urb+0xa24/0x1470 [ 128.185477][ T7500] Modules linked in: [ 128.186600][ T7500] CPU: 0 UID: 0 PID: 7500 Comm: kworker/0:4 Tainted: G W 6.16.0-rc7-syzkaller-00099-g82af5ea7c611 #0 PREEMPT [ 128.190280][ T7500] Tainted: [W]=WARN [ 128.191349][ T7500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 128.194128][ T7500] Workqueue: usb_hub_wq hub_event [ 128.195571][ T7500] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 128.197767][ T7500] pc : usb_submit_urb+0xa24/0x1470 [ 128.199177][ T7500] lr : usb_submit_urb+0xa24/0x1470 [ 128.200683][ T7500] sp : ffff80009cc56900 [ 128.201873][ T7500] x29: ffff80009cc56940 x28: 0000000000000000 x27: ffff80008c9436ec [ 128.204194][ T7500] x26: ffff0000cc931020 x25: ffff80008c9436e0 x24: 0000000000000000 [ 128.206487][ T7500] x23: ffff80008c94a460 x22: dfff800000000000 x21: 0000000000000003 [ 128.208605][ T7500] x20: 0000000000000820 x19: ffff0000cd36cf00 x18: 00000000ffffffff [ 128.210816][ T7500] x17: 0000000000000000 x16: ffff80008af01c68 x15: 0000000000000001 [ 128.213030][ T7500] x14: 1fffe000337d1ce2 x13: 0000000000000000 x12: 0000000000000000 [ 128.215355][ T7500] x11: ffff6000337d1ce3 x10: 0000000000ff0100 x9 : b6c5cfc8f0673500 [ 128.217623][ T7500] x8 : b6c5cfc8f0673500 x7 : 0000000000000001 x6 : 0000000000000001 [ 128.219901][ T7500] x5 : ffff80009cc56258 x4 : ffff80008f776bc0 x3 : ffff8000807bba4c [ 128.222123][ T7500] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000 [ 128.224517][ T7500] Call trace: [ 128.225428][ T7500] usb_submit_urb+0xa24/0x1470 (P) [ 128.226905][ T7500] smsusb_submit_urb+0x20c/0x2f8 [ 128.228284][ T7500] smsusb_start_streaming+0x34/0x2e0 [ 128.229803][ T7500] smsusb_probe+0x139c/0x1a04 [ 128.231179][ T7500] usb_probe_interface+0x584/0xa44 [ 128.232640][ T7500] really_probe+0x394/0x910 [ 128.233832][ T7500] __driver_probe_device+0x180/0x2d4 [ 128.235340][ T7500] driver_probe_device+0x78/0x330 [ 128.236756][ T7500] __device_attach_driver+0x290/0x4e0 [ 128.238334][ T7500] bus_for_each_drv+0x220/0x2b4 [ 128.239679][ T7500] __device_attach+0x26c/0x388 [ 128.240989][ T7500] device_initial_probe+0x24/0x34 [ 128.242460][ T7500] bus_probe_device+0x178/0x240 [ 128.243816][ T7500] device_add+0x71c/0xa60 [ 128.245058][ T7500] usb_set_configuration+0x1640/0x1bac [ 128.246553][ T7500] usb_generic_driver_probe+0x8c/0x144 [ 128.248042][ T7500] usb_probe_device+0x1a4/0x348 [ 128.249405][ T7500] really_probe+0x394/0x910 [ 128.250664][ T7500] __driver_probe_device+0x180/0x2d4 [ 128.252124][ T7500] driver_probe_device+0x78/0x330 [ 128.253501][ T7500] __device_attach_driver+0x290/0x4e0 [ 128.254933][ T7500] bus_for_each_drv+0x220/0x2b4 [ 128.256289][ T7500] __device_attach+0x26c/0x388 [ 128.257577][ T7500] device_initial_probe+0x24/0x34 [ 128.258986][ T7500] bus_probe_device+0x178/0x240 [ 128.260373][ T7500] device_add+0x71c/0xa60 [ 128.261625][ T7500] usb_new_device+0x7f0/0x1220 [ 128.263053][ T7500] hub_event+0x211c/0x3c78 [ 128.264312][ T7500] process_one_work+0x7e8/0x155c [ 128.265720][ T7500] worker_thread+0x958/0xed8 [ 128.267050][ T7500] kthread+0x5fc/0x75c [ 128.268212][ T7500] ret_from_fork+0x10/0x20 [ 128.269408][ T7500] irq event stamp: 12768 [ 128.270603][ T7500] hardirqs last enabled at (12767): [] __console_unlock+0x70/0xc4 [ 128.273230][ T7500] hardirqs last disabled at (12768): [] el1_brk64+0x1c/0x48 [ 128.275711][ T7500] softirqs last enabled at (10782): [] handle_softirqs+0xaf8/0xc88 [ 128.278387][ T7500] softirqs last disabled at (10765): [] __do_softirq+0x14/0x20 [ 128.280941][ T7500] ---[ end trace 0000000000000000 ]--- [ 128.284229][ T7500] smsusb:smsusb_start_streaming: smsusb_submit_urb(...) failed [ 128.284292][ T7500] smsusb:smsusb_init_device: smsusb_start_streaming(...) failed [ 128.285334][ T7500] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x116ee2 [ 128.285373][ T7500] flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff) [ 128.285401][ T7500] raw: 05ffc00000000000 0000000000000000 dead000000000122 0000000000000000 [ 128.285423][ T7500] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 128.285441][ T7500] page dumped because: Not a kmalloc allocation [ 128.293080][ T7500] smsusb:smsusb_probe: Device initialized with return code -22 [ 128.309617][ T7500] smsusb 1-1:0.6: probe with driver smsusb failed with error -22 [ 128.355814][ T2316] usb 1-1: USB disconnect, device number 5 [ 129.111801][ T2316] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 129.261748][ T2316] usb 1-1: Using ep0 maxpacket: 16 [ 129.263390][ T2316] usb 1-1: config 0 has an invalid interface number: 6 but max is 0 [ 129.263454][ T2316] usb 1-1: config 0 has no interface number 0 [ 129.263483][ T2316] usb 1-1: config 0 interface 6 altsetting 0 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 129.263510][ T2316] usb 1-1: config 0 interface 6 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 120 [ 129.263535][ T2316] usb 1-1: config 0 interface 6 altsetting 0 endpoint 0x8A has an invalid bInterval 127, changing to 10 [ 129.263561][ T2316] usb 1-1: config 0 interface 6 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 129.263585][ T2316] usb 1-1: config 0 interface 6 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 129.265901][ T2316] usb 1-1: New USB device found, idVendor=19d2, idProduct=0078, bcdDevice=74.c0 [ 129.265935][ T2316] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.265958][ T2316] usb 1-1: Product: syz [ 129.265978][ T2316] usb 1-1: Manufacturer: syz [ 129.265998][ T2316] usb 1-1: SerialNumber: syz [ 129.274929][ T2316] usb 1-1: config 0 descriptor?? [ 129.279818][ T2316] smsusb:smsusb_probe: board id=1 ** replaying previous printk message ** [ 129.279818][ T2316] smsusb:smsusb_probe: board id=15, interface number 6 [ 129.291804][ T2316] smsusb:siano_media_device_register: media controller created [ 129.292284][ T2316] ------------[ cut here ]------------ [ 129.292303][ T2316] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 129.292806][ T2316] WARNING: CPU: 1 PID: 2316 at drivers/usb/core/urb.c:504 usb_submit_urb+0xa24/0x1470 [ 129.303508][ T2316] Modules linked in: [ 129.304635][ T2316] CPU: 1 UID: 0 PID: 2316 Comm: kworker/1:2 Tainted: G W 6.16.0-rc7-syzkaller-00099-g82af5ea7c611 #0 PREEMPT [ 129.308440][ T2316] Tainted: [W]=WARN [ 129.309510][ T2316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 129.312491][ T2316] Workqueue: usb_hub_wq hub_event [ 129.313940][ T2316] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 129.316181][ T2316] pc : usb_submit_urb+0xa24/0x1470 [ 129.317611][ T2316] lr : usb_submit_urb+0xa24/0x1470 [ 129.319136][ T2316] sp : ffff8000a0946900 [ 129.320313][ T2316] x29: ffff8000a0946940 x28: 0000000000000000 x27: ffff80008c9436ec [ 129.322883][ T2316] x26: ffff0000c81c52e0 x25: ffff80008c9436e0 x24: 0000000000000000 [ 129.325090][ T2316] x23: ffff80008c94a460 x22: dfff800000000000 x21: 0000000000000003 [ 129.327322][ T2316] x20: 0000000000000820 x19: ffff0000c22b5900 x18: 1fffe000337d6476 [ 129.329616][ T2316] x17: 0000000000000000 x16: ffff80008af01c68 x15: 0000000000000001 [ 129.331883][ T2316] x14: 1fffe000337d64e2 x13: 0000000000000000 x12: 0000000000000000 [ 129.334187][ T2316] x11: ffff6000337d64e3 x10: 0000000000ff0100 x9 : 24adf10762cd0b00 [ 129.336454][ T2316] x8 : 24adf10762cd0b00 x7 : 0000000000000001 x6 : 0000000000000001 [ 129.338679][ T2316] x5 : ffff8000a0946258 x4 : ffff80008f776bc0 x3 : ffff8000807bba4c [ 129.340881][ T2316] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000 [ 129.343051][ T2316] Call trace: [ 129.343971][ T2316] usb_submit_urb+0xa24/0x1470 (P) [ 129.345446][ T2316] smsusb_submit_urb+0x20c/0x2f8 [ 129.346848][ T2316] smsusb_start_streaming+0x34/0x2e0 [ 129.348404][ T2316] smsusb_probe+0x139c/0x1a04 [ 129.349707][ T2316] usb_probe_interface+0x584/0xa44 [ 129.351115][ T2316] really_probe+0x394/0x910 [ 129.352442][ T2316] __driver_probe_device+0x180/0x2d4 [ 129.353882][ T2316] driver_probe_device+0x78/0x330 [ 129.355286][ T2316] __device_attach_driver+0x290/0x4e0 [ 129.356764][ T2316] bus_for_each_drv+0x220/0x2b4 [ 129.358103][ T2316] __device_attach+0x26c/0x388 [ 129.359445][ T2316] device_initial_probe+0x24/0x34 [ 129.360790][ T2316] bus_probe_device+0x178/0x240 [ 129.362219][ T2316] device_add+0x71c/0xa60 [ 129.363439][ T2316] usb_set_configuration+0x1640/0x1bac [ 129.365039][ T2316] usb_generic_driver_probe+0x8c/0x144 [ 129.366643][ T2316] usb_probe_device+0x1a4/0x348 [ 129.368120][ T2316] really_probe+0x394/0x910 [ 129.369508][ T2316] __driver_probe_device+0x180/0x2d4 [ 129.371030][ T2316] driver_probe_device+0x78/0x330 [ 129.372441][ T2316] __device_attach_driver+0x290/0x4e0 [ 129.373980][ T2316] bus_for_each_drv+0x220/0x2b4 [ 129.375310][ T2316] __device_attach+0x26c/0x388 [ 129.376622][ T2316] device_initial_probe+0x24/0x34 [ 129.378048][ T2316] bus_probe_device+0x178/0x240 [ 129.379391][ T2316] device_add+0x71c/0xa60 [ 129.380627][ T2316] usb_new_device+0x7f0/0x1220 [ 129.381938][ T2316] hub_event+0x211c/0x3c78 [ 129.383128][ T2316] process_one_work+0x7e8/0x155c [ 129.384521][ T2316] worker_thread+0x958/0xed8 [ 129.385840][ T2316] kthread+0x5fc/0x75c [ 129.386959][ T2316] ret_from_fork+0x10/0x20 [ 129.388229][ T2316] irq event stamp: 108970 [ 129.389450][ T2316] hardirqs last enabled at (108969): [] __console_unlock+0x70/0xc4 [ 129.392115][ T2316] hardirqs last disabled at (108970): [] el1_brk64+0x1c/0x48 [ 129.394547][ T2316] softirqs last enabled at (108684): [] handle_softirqs+0xaf8/0xc88 [ 129.397234][ T2316] softirqs last disabled at (108667): [] __do_softirq+0x14/0x20 [ 129.399869][ T2316] ---[ end trace 0000000000000000 ]--- [ 129.405573][ T2316] smsusb:smsusb_start_streaming: smsusb_submit_urb(...) failed [ 129.405635][ T2316] smsusb:smsusb_init_device: smsusb_start_streaming(...) failed [ 129.406327][ T2316] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x116ee2 [ 129.406355][ T2316] flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff) [ 129.406383][ T2316] raw: 05ffc00000000000 0000000000000000 dead000000000122 0000000000000000 [ 129.406405][ T2316] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 129.406424][ T2316] page dumped because: Not a kmalloc allocation [ 129.409505][ T2316] smsusb:smsusb_probe: Device initialized with return code -22 [ 129.426660][ T2316] smsusb 1-1:0.6: probe with driver smsusb failed with error -22 [ 129.480176][ T7500] usb 1-1: USB disconnect, device number 6 1970/01/01 00:02:09 executed programs: 7 [ 130.231848][ T2316] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 130.381712][ T2316] usb 1-1: Using ep0 maxpacket: 16 [ 130.383190][ T2316] usb 1-1: config 0 has an invalid interface number: 6 but max is 0 [ 130.383225][ T2316] usb 1-1: config 0 has no interface number 0 [ 130.383253][ T2316] usb 1-1: config 0 interface 6 altsetting 0 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 130.383281][ T2316] usb 1-1: config 0 interface 6 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 120 [ 130.383306][ T2316] usb 1-1: config 0 interface 6 altsetting 0 endpoint 0x8A has an invalid ** replaying previous printk message ** [ 130.383306][ T2316] usb 1-1: config 0 interface 6 altsetting 0 endpoint 0x8A has an invalid bInterval 127, changing to 10 [ 130.383332][ T2316] usb 1-1: config 0 interface 6 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 130.383357][ T2316] usb 1-1: config 0 interface 6 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 130.385176][ T2316] usb 1-1: New USB device found, idVendor=19d2, idProduct=0078, bcdDevice=74.c0 [ 130.385216][ T2316] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.385239][ T2316] usb 1-1: Product: syz [ 130.385259][ T2316] usb 1-1: Manufacturer: syz [ 130.385278][ T2316] usb 1-1: SerialNumber: syz [ 130.387352][ T2316] usb 1-1: config 0 descriptor?? [ 130.392489][ T2316] smsusb:smsusb_probe: board id=15, interface number 6 [ 130.395120][ T2316] smsusb:siano_media_device_register: media controller created [ 130.395590][ T2316] ------------[ cut here ]------------ [ 130.395610][ T2316] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 130.396112][ T2316] WARNING: CPU: 1 PID: 2316 at drivers/usb/core/urb.c:504 usb_submit_urb+0xa24/0x1470 [ 130.425588][ T2316] Modules linked in: [ 130.426784][ T2316] CPU: 1 UID: 0 PID: 2316 Comm: kworker/1:2 Tainted: G W 6.16.0-rc7-syzkaller-00099-g82af5ea7c611 #0 PREEMPT [ 130.430723][ T2316] Tainted: [W]=WARN [ 130.431827][ T2316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 130.434673][ T2316] Workqueue: usb_hub_wq hub_event [ 130.436121][ T2316] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 130.438324][ T2316] pc : usb_submit_urb+0xa24/0x1470 [ 130.439762][ T2316] lr : usb_submit_urb+0xa24/0x1470 [ 130.441167][ T2316] sp : ffff8000a0946900 [ 130.442387][ T2316] x29: ffff8000a0946940 x28: 0000000000000000 x27: ffff80008c9436ec [ 130.444661][ T2316] x26: ffff0000ca7acea0 x25: ffff80008c9436e0 x24: 0000000000000000 [ 130.446842][ T2316] x23: ffff80008c94a460 x22: dfff800000000000 x21: 0000000000000003 [ 130.449186][ T2316] x20: 0000000000000820 x19: ffff0000cbe32300 x18: 00000000ffffffff [ 130.451331][ T2316] x17: 0000000000000000 x16: ffff80008af01c68 x15: 0000000000000001 [ 130.453657][ T2316] x14: 1fffe000337d64e2 x13: 0000000000000000 x12: 0000000000000000 [ 130.455981][ T2316] x11: ffff6000337d64e3 x10: 0000000000ff0100 x9 : 24adf10762cd0b00 [ 130.458274][ T2316] x8 : 24adf10762cd0b00 x7 : 0000000000000001 x6 : 0000000000000001 [ 130.460540][ T2316] x5 : ffff8000a0946258 x4 : ffff80008f776bc0 x3 : ffff8000807bba4c [ 130.462790][ T2316] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000 [ 130.465049][ T2316] Call trace: [ 130.465954][ T2316] usb_submit_urb+0xa24/0x1470 (P) [ 130.467406][ T2316] smsusb_submit_urb+0x20c/0x2f8 [ 130.468816][ T2316] smsusb_start_streaming+0x34/0x2e0 [ 130.470329][ T2316] smsusb_probe+0x139c/0x1a04 [ 130.471642][ T2316] usb_probe_interface+0x584/0xa44 [ 130.473037][ T2316] really_probe+0x394/0x910 [ 130.474332][ T2316] __driver_probe_device+0x180/0x2d4 [ 130.475858][ T2316] driver_probe_device+0x78/0x330 [ 130.477258][ T2316] __device_attach_driver+0x290/0x4e0 [ 130.478791][ T2316] bus_for_each_drv+0x220/0x2b4 [ 130.480141][ T2316] __device_attach+0x26c/0x388 [ 130.481492][ T2316] device_initial_probe+0x24/0x34 [ 130.482926][ T2316] bus_probe_device+0x178/0x240 [ 130.484457][ T2316] device_add+0x71c/0xa60 [ 130.485636][ T2316] usb_set_configuration+0x1640/0x1bac [ 130.487180][ T2316] usb_generic_driver_probe+0x8c/0x144 [ 130.488676][ T2316] usb_probe_device+0x1a4/0x348 [ 130.490068][ T2316] really_probe+0x394/0x910 [ 130.491359][ T2316] __driver_probe_device+0x180/0x2d4 [ 130.492784][ T2316] driver_probe_device+0x78/0x330 [ 130.494180][ T2316] __device_attach_driver+0x290/0x4e0 [ 130.495728][ T2316] bus_for_each_drv+0x220/0x2b4 [ 130.497044][ T2316] __device_attach+0x26c/0x388 [ 130.498386][ T2316] device_initial_probe+0x24/0x34 [ 130.499790][ T2316] bus_probe_device+0x178/0x240 [ 130.501190][ T2316] device_add+0x71c/0xa60 [ 130.502434][ T2316] usb_new_device+0x7f0/0x1220 [ 130.503774][ T2316] hub_event+0x211c/0x3c78 [ 130.504983][ T2316] process_one_work+0x7e8/0x155c [ 130.506341][ T2316] worker_thread+0x958/0xed8 [ 130.507636][ T2316] kthread+0x5fc/0x75c [ 130.508800][ T2316] ret_from_fork+0x10/0x20 [ 130.510022][ T2316] irq event stamp: 114336 [ 130.511209][ T2316] hardirqs last enabled at (114335): [] __console_unlock+0x70/0xc4 [ 130.513857][ T2316] hardirqs last disabled at (114336): [] el1_brk64+0x1c/0x48 [ 130.516401][ T2316] softirqs last enabled at (113468): [] handle_softirqs+0xaf8/0xc88 [ 130.519138][ T2316] softirqs last disabled at (113453): [] __do_softirq+0x14/0x20 [ 130.521834][ T2316] ---[ end trace 0000000000000000 ]--- [ 130.524045][ T2316] smsusb:smsusb_start_streaming: smsusb_submit_urb(...) failed [ 130.524117][ T2316] smsusb:smsusb_init_device: smsusb_start_streaming(...) failed [ 130.525029][ T2316] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x116ee2 [ 130.525058][ T2316] flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff) [ 130.525086][ T2316] raw: 05ffc00000000000 0000000000000000 dead000000000122 0000000000000000 [ 130.525120][ T2316] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 130.525138][ T2316] page dumped because: Not a kmalloc allocation [ 130.526273][ T2316] smsusb:smsusb_probe: Device initialized with return code -22 [ 130.549168][ T2316] smsusb 1-1:0.6: probe with driver smsusb failed with error -22 [ 130.592456][ T10] usb 1-1: USB disconnect, device number 7 [ 131.351683][ T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 131.501677][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 131.502853][ T10] usb 1-1: config 0 has an invalid interface number: 6 but max is 0 [ 131.502885][ T10] usb 1-1: config 0 has no interface number 0 [ 131.502913][ T10] usb 1-1: config 0 interface 6 altsetting 0 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 131.502941][ T10] usb 1-1: config 0 interface 6 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 120 [ 131.502966][ T10] usb 1-1: config 0 interface 6 altsetting 0 endpoint 0x8A has an invalid bInterval 127, changing to 10 [ 131.502992][ T10] usb 1-1: config 0 interface 6 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 131.503017][ T10] usb 1-1: config 0 interface 6 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 131.504846][ T10] usb 1-1: New USB device found, idVendor=19d2, idProduct=0078, bcdDevice=74.c0 [ 131.504880][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.504903][ T10] usb 1-1: Product: syz [ 131.504923][ T10] usb 1-1: Manufacturer: syz [ 131.504943][ T10] usb 1-1: SerialNumber: syz [ 131.532928][ T10] usb 1-1: config 0 descriptor?? [ 131.538010][ T10] smsusb:smsusb_probe: board id=15, interface number 6 [ 131.542498][ T10] smsusb:siano_me ** replaying previous printk message ** [ 131.542498][ T10] smsusb:siano_media_device_register: media controller created [ 131.543010][ T10] ------------[ cut here ]------------ [ 131.543030][ T10] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 131.543543][ T10] WARNING: CPU: 0 PID: 10 at drivers/usb/core/urb.c:504 usb_submit_urb+0xa24/0x1470 [ 131.552861][ T10] Modules linked in: [ 131.553939][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Tainted: G W 6.16.0-rc7-syzkaller-00099-g82af5ea7c611 #0 PREEMPT [ 131.557730][ T10] Tainted: [W]=WARN [ 131.558812][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 131.561664][ T10] Workqueue: usb_hub_wq hub_event [ 131.563112][ T10] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 131.565415][ T10] pc : usb_submit_urb+0xa24/0x1470 [ 131.566808][ T10] lr : usb_submit_urb+0xa24/0x1470 [ 131.568273][ T10] sp : ffff800097a76900 [ 131.569467][ T10] x29: ffff800097a76940 x28: 0000000000000000 x27: ffff80008c9436ec [ 131.571742][ T10] x26: ffff0000c7b6cda0 x25: ffff80008c9436e0 x24: 0000000000000000 [ 131.573964][ T10] x23: ffff80008c94a460 x22: dfff800000000000 x21: 0000000000000003 [ 131.576288][ T10] x20: 0000000000000820 x19: ffff0000c5d87300 x18: 1fffe000337d1c76 [ 131.578577][ T10] x17: 0000000000000000 x16: ffff80008af01c68 x15: 0000000000000001 [ 131.580831][ T10] x14: 1fffe000337d1ce2 x13: 0000000000000000 x12: 0000000000000000 [ 131.583105][ T10] x11: ffff6000337d1ce3 x10: 0000000000ff0100 x9 : d77c736137622e00 [ 131.585381][ T10] x8 : d77c736137622e00 x7 : 0000000000000001 x6 : 0000000000000001 [ 131.587699][ T10] x5 : ffff800097a76258 x4 : ffff80008f776bc0 x3 : ffff8000807bba4c [ 131.589936][ T10] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000 [ 131.592139][ T10] Call trace: [ 131.593032][ T10] usb_submit_urb+0xa24/0x1470 (P) [ 131.594457][ T10] smsusb_submit_urb+0x20c/0x2f8 [ 131.595869][ T10] smsusb_start_streaming+0x34/0x2e0 [ 131.597362][ T10] smsusb_probe+0x139c/0x1a04 [ 131.598716][ T10] usb_probe_interface+0x584/0xa44 [ 131.600138][ T10] really_probe+0x394/0x910 [ 131.601423][ T10] __driver_probe_device+0x180/0x2d4 [ 131.602852][ T10] driver_probe_device+0x78/0x330 [ 131.604313][ T10] __device_attach_driver+0x290/0x4e0 [ 131.605957][ T10] bus_for_each_drv+0x220/0x2b4 [ 131.607410][ T10] __device_attach+0x26c/0x388 [ 131.608783][ T10] device_initial_probe+0x24/0x34 [ 131.610273][ T10] bus_probe_device+0x178/0x240 [ 131.611624][ T10] device_add+0x71c/0xa60 [ 131.612977][ T10] usb_set_configuration+0x1640/0x1bac [ 131.614555][ T10] usb_generic_driver_probe+0x8c/0x144 [ 131.616078][ T10] usb_probe_device+0x1a4/0x348 [ 131.617510][ T10] really_probe+0x394/0x910 [ 131.618912][ T10] __driver_probe_device+0x180/0x2d4 [ 131.620402][ T10] driver_probe_device+0x78/0x330 [ 131.621782][ T10] __device_attach_driver+0x290/0x4e0 [ 131.623314][ T10] bus_for_each_drv+0x220/0x2b4 [ 131.624690][ T10] __device_attach+0x26c/0x388 [ 131.625958][ T10] device_initial_probe+0x24/0x34 [ 131.627417][ T10] bus_probe_device+0x178/0x240 [ 131.628779][ T10] device_add+0x71c/0xa60 [ 131.629951][ T10] usb_new_device+0x7f0/0x1220 [ 131.631336][ T10] hub_event+0x211c/0x3c78 [ 131.632666][ T10] process_one_work+0x7e8/0x155c [ 131.634051][ T10] worker_thread+0x958/0xed8 [ 131.635400][ T10] kthread+0x5fc/0x75c [ 131.636543][ T10] ret_from_fork+0x10/0x20 [ 131.637794][ T10] irq event stamp: 232944 [ 131.639039][ T10] hardirqs last enabled at (232943): [] __console_unlock+0x70/0xc4 [ 131.641833][ T10] hardirqs last disabled at (232944): [] el1_brk64+0x1c/0x48 [ 131.644318][ T10] softirqs last enabled at (232618): [] handle_softirqs+0xaf8/0xc88 [ 131.647126][ T10] softirqs last disabled at (232597): [] __do_softirq+0x14/0x20 [ 131.649717][ T10] ---[ end trace 0000000000000000 ]--- [ 131.656179][ T10] smsusb:smsusb_start_streaming: smsusb_submit_urb(...) failed [ 131.656250][ T10] smsusb:smsusb_init_device: smsusb_start_streaming(...) failed [ 131.657139][ T10] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x116ee2 [ 131.657346][ T10] flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff) [ 131.657524][ T10] raw: 05ffc00000000000 0000000000000000 dead000000000122 0000000000000000 [ 131.657689][ T10] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 131.657860][ T10] page dumped because: Not a kmalloc allocation [ 131.659199][ T10] smsusb:smsusb_probe: Device initialized with return code -22 [ 131.675463][ T10] smsusb 1-1:0.6: probe with driver smsusb failed with error -22 [ 131.739978][ T10] usb 1-1: USB disconnect, device number 8 [ 132.491747][ T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 132.641790][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 132.643408][ T10] usb 1-1: config 0 has an invalid interface number: 6 but max is 0 [ 132.643446][ T10] usb 1-1: config 0 has no interface number 0 [ 132.643474][ T10] usb 1-1: config 0 interface 6 altsetting 0 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 132.643502][ T10] usb 1-1: config 0 interface 6 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 120 [ 132.643527][ T10] usb 1-1: config 0 interface 6 altsetting 0 endpoint 0x8A has an invalid bInterval 127, changing to 10 [ 132.643553][ T10] usb 1-1: config 0 interface 6 altsetting 0 has a duplicate endpoint with address 0x7, skipping ** replaying previous printk message ** [ 132.643553][ T10] usb 1-1: config 0 interface 6 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 132.643577][ T10] usb 1-1: config 0 interface 6 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 132.645376][ T10] usb 1-1: New USB device found, idVendor=19d2, idProduct=0078, bcdDevice=74.c0 [ 132.645411][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.645434][ T10] usb 1-1: Product: syz [ 132.645454][ T10] usb 1-1: Manufacturer: syz [ 132.645473][ T10] usb 1-1: SerialNumber: syz [ 132.647611][ T10] usb 1-1: config 0 descriptor?? [ 132.655729][ T10] smsusb:smsusb_probe: board id=15, interface number 6 [ 132.658692][ T10] smsusb:siano_media_device_register: media controller created [ 132.659241][ T10] ------------[ cut here ]------------ [ 132.659264][ T10] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 132.659777][ T10] WARNING: CPU: 0 PID: 10 at drivers/usb/core/urb.c:504 usb_submit_urb+0xa24/0x1470 [ 132.686805][ T10] Modules linked in: [ 132.687951][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Tainted: G W 6.16.0-rc7-syzkaller-00099-g82af5ea7c611 #0 PREEMPT [ 132.691834][ T10] Tainted: [W]=WARN [ 132.692899][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 132.695810][ T10] Workqueue: usb_hub_wq hub_event [ 132.697224][ T10] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 132.699475][ T10] pc : usb_submit_urb+0xa24/0x1470 [ 132.700940][ T10] lr : usb_submit_urb+0xa24/0x1470 [ 132.702337][ T10] sp : ffff800097a76900 [ 132.703579][ T10] x29: ffff800097a76940 x28: 0000000000000000 x27: ffff80008c9436ec [ 132.705867][ T10] x26: ffff0000c76690e0 x25: ffff80008c9436e0 x24: 0000000000000000 [ 132.708148][ T10] x23: ffff80008c94a460 x22: dfff800000000000 x21: 0000000000000003 [ 132.710411][ T10] x20: 0000000000000820 x19: ffff0000c1dbc200 x18: 1fffe000337d1c76 [ 132.712630][ T10] x17: 0000000000000000 x16: ffff80008af01c68 x15: 0000000000000001 [ 132.714995][ T10] x14: 1fffe000337d1ce2 x13: 0000000000000000 x12: 0000000000000000 [ 132.717375][ T10] x11: ffff6000337d1ce3 x10: 0000000000ff0100 x9 : d77c736137622e00 [ 132.719604][ T10] x8 : d77c736137622e00 x7 : 0000000000000001 x6 : 0000000000000001 [ 132.721829][ T10] x5 : ffff800097a76258 x4 : ffff80008f776bc0 x3 : ffff8000807bba4c [ 132.724088][ T10] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000 [ 132.726310][ T10] Call trace: [ 132.727240][ T10] usb_submit_urb+0xa24/0x1470 (P) [ 132.728751][ T10] smsusb_submit_urb+0x20c/0x2f8 [ 132.730116][ T10] smsusb_start_streaming+0x34/0x2e0 [ 132.731658][ T10] smsusb_probe+0x139c/0x1a04 [ 132.732928][ T10] usb_probe_interface+0x584/0xa44 [ 132.734470][ T10] really_probe+0x394/0x910 [ 132.735758][ T10] __driver_probe_device+0x180/0x2d4 [ 132.737367][ T10] driver_probe_device+0x78/0x330 [ 132.738834][ T10] __device_attach_driver+0x290/0x4e0 [ 132.740426][ T10] bus_for_each_drv+0x220/0x2b4 [ 132.741881][ T10] __device_attach+0x26c/0x388 [ 132.743287][ T10] device_initial_probe+0x24/0x34 [ 132.744704][ T10] bus_probe_device+0x178/0x240 [ 132.746092][ T10] device_add+0x71c/0xa60 [ 132.747390][ T10] usb_set_configuration+0x1640/0x1bac [ 132.748979][ T10] usb_generic_driver_probe+0x8c/0x144 [ 132.750530][ T10] usb_probe_device+0x1a4/0x348 [ 132.751996][ T10] really_probe+0x394/0x910 [ 132.753350][ T10] __driver_probe_device+0x180/0x2d4 [ 132.754878][ T10] driver_probe_device+0x78/0x330 [ 132.756339][ T10] __device_attach_driver+0x290/0x4e0 [ 132.758023][ T10] bus_for_each_drv+0x220/0x2b4 [ 132.759500][ T10] __device_attach+0x26c/0x388 [ 132.760909][ T10] device_initial_probe+0x24/0x34 [ 132.762388][ T10] bus_probe_device+0x178/0x240 [ 132.763850][ T10] device_add+0x71c/0xa60 [ 132.765118][ T10] usb_new_device+0x7f0/0x1220 [ 132.766484][ T10] hub_event+0x211c/0x3c78 [ 132.767688][ T10] process_one_work+0x7e8/0x155c [ 132.769159][ T10] worker_thread+0x958/0xed8 [ 132.770488][ T10] kthread+0x5fc/0x75c [ 132.771694][ T10] ret_from_fork+0x10/0x20 [ 132.772945][ T10] irq event stamp: 239368 [ 132.774169][ T10] hardirqs last enabled at (239367): [] __console_unlock+0x70/0xc4 [ 132.776876][ T10] hardirqs last disabled at (239368): [] el1_brk64+0x1c/0x48 [ 132.779464][ T10] softirqs last enabled at (238858): [] handle_softirqs+0xaf8/0xc88 [ 132.782195][ T10] softirqs last disabled at (238849): [] __do_softirq+0x14/0x20 [ 132.784773][ T10] ---[ end trace 0000000000000000 ]--- [ 132.787863][ T10] smsusb:smsusb_start_streaming: smsusb_submit_urb(...) failed [ 132.787929][ T10] smsusb:smsusb_init_device: smsusb_start_streaming(...) failed [ 132.788641][ T10] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x116ee2 [ 132.788669][ T10] flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff) [ 132.788697][ T10] raw: 05ffc00000000000 0000000000000000 dead000000000122 0000000000000000 [ 132.788719][ T10] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 132.788738][ T10] page dumped because: Not a kmalloc allocation [ 132.789970][ T10] smsusb:smsusb_probe: Device initialized with return code -22 [ 132.816308][ T10] smsusb 1-1:0.6: probe with driver smsusb failed with error -22 [ 132.857577][ T2316] usb 1-1: USB disconnect, device number 9 [ 133.621773][ T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 133.771800][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 133.773206][ T10] usb 1-1: config 0 has an invalid interface number: 6 but max is 0 [ 133.773241][ T10] usb 1-1: config 0 has no interface number 0 [ 133.773278][ T10] usb 1-1: config 0 interface 6 altsetting 0 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 133.773305][ T10] usb 1-1: config 0 interface 6 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 120 [ 133.773330][ T10] usb 1-1: config 0 interface 6 altsetting 0 endpoint 0x8A has an invalid bInterval 127, changing to 10 [ 133.773356] ** replaying previous printk message ** [ 133.773356][ T10] usb 1-1: config 0 interface 6 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 133.773381][ T10] usb 1-1: config 0 interface 6 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 133.774920][ T10] usb 1-1: New USB device found, idVendor=19d2, idProduct=0078, bcdDevice=74.c0 [ 133.774955][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.774978][ T10] usb 1-1: Product: syz [ 133.774998][ T10] usb 1-1: Manufacturer: syz [ 133.775018][ T10] usb 1-1: SerialNumber: syz [ 133.777263][ T10] usb 1-1: config 0 descriptor?? [ 133.782427][ T10] smsusb:smsusb_probe: board id=15, interface number 6 [ 133.786455][ T10] smsusb:siano_media_device_register: media controller created [ 133.786931][ T10] ------------[ cut here ]------------ [ 133.786949][ T10] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 133.787478][ T10] WARNING: CPU: 0 PID: 10 at drivers/usb/core/urb.c:504 usb_submit_urb+0xa24/0x1470 [ 133.814190][ T10] Modules linked in: [ 133.815306][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Tainted: G W 6.16.0-rc7-syzkaller-00099-g82af5ea7c611 #0 PREEMPT [ 133.819060][ T10] Tainted: [W]=WARN [ 133.820115][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 133.822931][ T10] Workqueue: usb_hub_wq hub_event [ 133.824451][ T10] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 133.826710][ T10] pc : usb_submit_urb+0xa24/0x1470 [ 133.828226][ T10] lr : usb_submit_urb+0xa24/0x1470 [ 133.829737][ T10] sp : ffff800097a76900 [ 133.830910][ T10] x29: ffff800097a76940 x28: 0000000000000000 x27: ffff80008c9436ec [ 133.833223][ T10] x26: ffff0000cdc5f900 x25: ffff80008c9436e0 x24: 0000000000000000 [ 133.835540][ T10] x23: ffff80008c94a460 x22: dfff800000000000 x21: 0000000000000003 [ 133.837742][ T10] x20: 0000000000000820 x19: ffff0000c4638700 x18: 1fffe000337d1c76 [ 133.840133][ T10] x17: 0000000000000000 x16: ffff80008af01c68 x15: 0000000000000001 [ 133.842433][ T10] x14: 1fffe000337d1ce2 x13: 0000000000000000 x12: 0000000000000000 [ 133.844744][ T10] x11: ffff6000337d1ce3 x10: 0000000000ff0100 x9 : d77c736137622e00 [ 133.847073][ T10] x8 : d77c736137622e00 x7 : 0000000000000001 x6 : 0000000000000001 [ 133.849354][ T10] x5 : ffff800097a76258 x4 : ffff80008f776bc0 x3 : ffff8000807bba4c [ 133.851620][ T10] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000 [ 133.853929][ T10] Call trace: [ 133.854938][ T10] usb_submit_urb+0xa24/0x1470 (P) [ 133.856412][ T10] smsusb_submit_urb+0x20c/0x2f8 [ 133.857798][ T10] smsusb_start_streaming+0x34/0x2e0 [ 133.859363][ T10] smsusb_probe+0x139c/0x1a04 [ 133.860734][ T10] usb_probe_interface+0x584/0xa44 [ 133.862307][ T10] really_probe+0x394/0x910 [ 133.863585][ T10] __driver_probe_device+0x180/0x2d4 [ 133.865079][ T10] driver_probe_device+0x78/0x330 [ 133.866620][ T10] __device_attach_driver+0x290/0x4e0 [ 133.868123][ T10] bus_for_each_drv+0x220/0x2b4 [ 133.869530][ T10] __device_attach+0x26c/0x388 [ 133.870948][ T10] device_initial_probe+0x24/0x34 [ 133.872376][ T10] bus_probe_device+0x178/0x240 [ 133.873755][ T10] device_add+0x71c/0xa60 [ 133.874986][ T10] usb_set_configuration+0x1640/0x1bac [ 133.876585][ T10] usb_generic_driver_probe+0x8c/0x144 [ 133.878157][ T10] usb_probe_device+0x1a4/0x348 [ 133.879567][ T10] really_probe+0x394/0x910 [ 133.880906][ T10] __driver_probe_device+0x180/0x2d4 [ 133.882539][ T10] driver_probe_device+0x78/0x330 [ 133.883938][ T10] __device_attach_driver+0x290/0x4e0 [ 133.885490][ T10] bus_for_each_drv+0x220/0x2b4 [ 133.886892][ T10] __device_attach+0x26c/0x388 [ 133.888330][ T10] device_initial_probe+0x24/0x34 [ 133.889792][ T10] bus_probe_device+0x178/0x240 [ 133.891225][ T10] device_add+0x71c/0xa60 [ 133.892450][ T10] usb_new_device+0x7f0/0x1220 [ 133.893857][ T10] hub_event+0x211c/0x3c78 [ 133.895158][ T10] process_one_work+0x7e8/0x155c [ 133.896677][ T10] worker_thread+0x958/0xed8 [ 133.898002][ T10] kthread+0x5fc/0x75c [ 133.899243][ T10] ret_from_fork+0x10/0x20 [ 133.900611][ T10] irq event stamp: 243720 [ 133.901799][ T10] hardirqs last enabled at (243719): [] __console_unlock+0x70/0xc4 [ 133.904654][ T10] hardirqs last disabled at (243720): [] el1_brk64+0x1c/0x48 [ 133.907250][ T10] softirqs last enabled at (242920): [] handle_softirqs+0xaf8/0xc88 [ 133.910014][ T10] softirqs last disabled at (242899): [] __do_softirq+0x14/0x20 [ 133.912693][ T10] ---[ end trace 0000000000000000 ]--- [ 133.915219][ T10] smsusb:smsusb_start_streaming: smsusb_submit_urb(...) failed [ 133.915287][ T10] smsusb:smsusb_init_device: smsusb_start_streaming(...) failed [ 133.915965][ T10] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x116ee2 [ 133.915991][ T10] flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff) [ 133.916019][ T10] raw: 05ffc00000000000 0000000000000000 dead000000000122 0000000000000000 [ 133.916041][ T10] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 133.916059][ T10] page dumped because: Not a kmalloc allocation [ 133.917268][ T10] smsusb:smsusb_probe: Device initialized with return code -22 [ 133.935377][ T10] smsusb 1-1:0.6: probe with driver smsusb failed with error -22 [ 133.981549][ T6555] usb 1-1: USB disconnect, device number 10 [ 134.731803][ T6555] usb 1-1: new high-speed USB device number 11 using dummy_hcd