Warning: Permanently added '10.128.15.199' (ED25519) to the list of known hosts. 1970/01/01 00:00:58 ignoring optional flag "sandboxArg"="0" 1970/01/01 00:00:58 parsed 1 programs 1970/01/01 00:00:58 executed programs: 0 [ 58.447691][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 58.449909][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 58.451837][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 58.453979][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 58.456395][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 58.458165][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 58.531821][ T6329] chnl_net:caif_netlink_parms(): no params data found [ 58.558917][ T6329] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.560513][ T6329] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.562161][ T6329] bridge_slave_0: entered allmulticast mode [ 58.563938][ T6329] bridge_slave_0: entered promiscuous mode [ 58.566801][ T6329] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.568304][ T6329] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.569824][ T6329] bridge_slave_1: entered allmulticast mode [ 58.571432][ T6329] bridge_slave_1: entered promiscuous mode [ 58.583018][ T6329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.586884][ T6329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.599270][ T6329] team0: Port device team_slave_0 added [ 58.601765][ T6329] team0: Port device team_slave_1 added [ 58.611609][ T6329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.613014][ T6329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.618297][ T6329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.621924][ T6329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.623439][ T6329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.629459][ T6329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.706036][ T6329] hsr_slave_0: entered promiscuous mode [ 58.744839][ T6329] hsr_slave_1: entered promiscuous mode [ 59.495119][ T6329] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.526997][ T6329] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.565833][ T6329] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.600902][ T6329] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.665539][ T6329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.671313][ T5994] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.673198][ T5994] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.680157][ T6329] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.683762][ T5994] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.685908][ T5994] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.687731][ T5994] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.689248][ T5994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.691248][ T5994] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.701402][ T5994] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.703500][ T5994] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.705704][ T5994] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.707167][ T5994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.719459][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.721697][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.724120][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.726501][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.728571][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.730694][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.732770][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.736025][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.740629][ T6329] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.743134][ T6329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.747212][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.749594][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.751669][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.834849][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.836456][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.843223][ T6329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.854062][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.856318][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.866943][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.868989][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.871023][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.872801][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.879106][ T6329] veth0_vlan: entered promiscuous mode [ 59.884153][ T6329] veth1_vlan: entered promiscuous mode [ 59.897382][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.899862][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.901781][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.903811][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.907851][ T6329] veth0_macvtap: entered promiscuous mode [ 59.913019][ T6329] veth1_macvtap: entered promiscuous mode [ 59.922813][ T6329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.924330][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.927177][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.929061][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.931054][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.937478][ T6329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.942100][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.944051][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.947357][ T6329] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.949098][ T6329] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.950975][ T6329] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.952814][ T6329] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.001157][ T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.002830][ T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.006373][ T5994] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.026681][ T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.028287][ T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.030774][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.424576][ T5557] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 60.495006][ T5550] Bluetooth: hci0: command 0x0409 tx timeout [ 60.685546][ T5557] usb 1-1: Using ep0 maxpacket: 32 [ 60.874671][ T5557] usb 1-1: unable to get BOS descriptor or descriptor too short [ 60.964651][ T5557] usb 1-1: config 6 has an invalid interface number: 199 but max is 2 [ 60.966469][ T5557] usb 1-1: config 6 has an invalid interface number: 48 but max is 2 [ 60.968024][ T5557] usb 1-1: config 6 has an invalid interface number: 105 but max is 2 [ 60.969601][ T5557] usb 1-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 60.971235][ T5557] usb 1-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 60.972883][ T5557] usb 1-1: config 6 has an invalid interface descriptor of length 2, skipping [ 60.974864][ T5557] usb 1-1: config 6 has no interface number 0 [ 60.976036][ T5557] usb 1-1: config 6 has no interface number 1 [ 60.977300][ T5557] usb 1-1: config 6 has no interface number 2 [ 60.978927][ T5557] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 60.981321][ T5557] usb 1-1: config 6 interface 199 altsetting 128 has an invalid endpoint with address 0x0, skipping [ 60.983581][ T5557] usb 1-1: config 6 interface 199 altsetting 128 has a duplicate endpoint with address 0x8, skipping [ 60.986736][ T5557] usb 1-1: config 6 interface 199 altsetting 128 bulk endpoint 0x2 has invalid maxpacket 8 [ 60.988787][ T5557] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 60.991119][ T5557] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 60.993451][ T5557] usb 1-1: config 6 interface 199 altsetting 128 has a duplicate endpoint with address 0x1, skipping [ 60.995831][ T5557] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 60.998290][ T5557] usb 1-1: config 6 interface 199 altsetting 128 has a duplicate endpoint with address 0x4, skipping [ 61.000458][ T5557] usb 1-1: config 6 interface 48 altsetting 8 has a duplicate endpoint with address 0xA, skipping [ 61.002634][ T5557] usb 1-1: config 6 interface 105 altsetting 129 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 61.006367][ T5557] usb 1-1: config 6 interface 199 has no altsetting 0 [ 61.007716][ T5557] usb 1-1: config 6 interface 48 has no altsetting 0 [ 61.009080][ T5557] usb 1-1: config 6 interface 105 has no altsetting 0 [ 61.274584][ T5557] usb 1-1: string descriptor 0 read error: -22 [ 61.276693][ T5557] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=b9.c5 [ 61.278585][ T5557] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.338084][ T5557] ------------[ cut here ]------------ [ 61.339317][ T5557] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 61.340971][ T5557] WARNING: CPU: 0 PID: 5557 at drivers/usb/core/urb.c:505 usb_submit_urb+0xa44/0x1588 [ 61.343014][ T5557] Modules linked in: [ 61.343919][ T5557] CPU: 0 PID: 5557 Comm: kworker/0:3 Not tainted 6.4.0-rc7-syzkaller-00127-ge40939bbfc68 #0 [ 61.346070][ T5557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 61.348200][ T5557] Workqueue: usb_hub_wq hub_event [ 61.349283][ T5557] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 61.351049][ T5557] pc : usb_submit_urb+0xa44/0x1588 [ 61.352162][ T5557] lr : usb_submit_urb+0xa44/0x1588 [ 61.353256][ T5557] sp : ffff800098176740 [ 61.354160][ T5557] x29: ffff800098176780 x28: 0000000000000001 x27: ffff80008ba185a8 [ 61.355899][ T5557] x26: ffff0000c6f83500 x25: ffff0000d189d000 x24: 0000000000000008 [ 61.357688][ T5557] x23: ffff80008ba1f020 x22: dfff800000000000 x21: 0000000000000002 [ 61.359386][ T5557] x20: 0000000000000c00 x19: ffff0000d0751400 x18: ffff800098175c20 [ 61.361057][ T5557] x17: 0000000000000000 x16: ffff80008a4483a0 x15: 0000000000000002 [ 61.362793][ T5557] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000001 [ 61.364563][ T5557] x11: 0000000000000000 x10: 0000000000000000 x9 : 743261f9e77b9400 [ 61.366227][ T5557] x8 : 743261f9e77b9400 x7 : 0000000000000001 x6 : 0000000000000001 [ 61.368013][ T5557] x5 : ffff800098176038 x4 : ffff80008dfcee80 x3 : ffff800080597614 [ 61.369783][ T5557] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000 [ 61.371591][ T5557] Call trace: [ 61.372325][ T5557] usb_submit_urb+0xa44/0x1588 [ 61.373370][ T5557] usb_start_wait_urb+0xec/0x414 [ 61.374337][ T5557] usb_bulk_msg+0x2ec/0x3ec [ 61.375362][ T5557] amradio_set_mute+0x1d4/0x428 [ 61.376470][ T5557] usb_amradio_probe+0x388/0x6f8 [ 61.377561][ T5557] usb_probe_interface+0x500/0x984 [ 61.378662][ T5557] really_probe+0x394/0xa7c [ 61.379585][ T5557] __driver_probe_device+0x194/0x3b4 [ 61.380716][ T5557] driver_probe_device+0x78/0x330 [ 61.381770][ T5557] __device_attach_driver+0x2a8/0x4f4 [ 61.382889][ T5557] bus_for_each_drv+0x228/0x2bc [ 61.383937][ T5557] __device_attach+0x2b4/0x434 [ 61.385023][ T5557] device_initial_probe+0x24/0x34 [ 61.386207][ T5557] bus_probe_device+0x178/0x240 [ 61.387307][ T5557] device_add+0xa44/0xdf0 [ 61.388260][ T5557] usb_set_configuration+0x15cc/0x1b38 [ 61.389500][ T5557] usb_generic_driver_probe+0x8c/0x148 [ 61.390713][ T5557] usb_probe_device+0x120/0x25c [ 61.391733][ T5557] really_probe+0x394/0xa7c [ 61.392670][ T5557] __driver_probe_device+0x194/0x3b4 [ 61.393807][ T5557] driver_probe_device+0x78/0x330 [ 61.394921][ T5557] __device_attach_driver+0x2a8/0x4f4 [ 61.396069][ T5557] bus_for_each_drv+0x228/0x2bc [ 61.397163][ T5557] __device_attach+0x2b4/0x434 [ 61.398233][ T5557] device_initial_probe+0x24/0x34 [ 61.399330][ T5557] bus_probe_device+0x178/0x240 [ 61.400389][ T5557] device_add+0xa44/0xdf0 [ 61.401310][ T5557] usb_new_device+0x904/0x142c [ 61.402301][ T5557] hub_event+0x25e4/0x474c [ 61.403280][ T5557] process_one_work+0x788/0x12d4 [ 61.404397][ T5557] worker_thread+0x8e0/0xfe8 [ 61.405400][ T5557] kthread+0x288/0x310 [ 61.406315][ T5557] ret_from_fork+0x10/0x20 [ 61.407353][ T5557] irq event stamp: 20696 [ 61.408297][ T5557] hardirqs last enabled at (20695): [] __up_console_sem+0x60/0xb4 [ 61.410441][ T5557] hardirqs last disabled at (20696): [] el1_dbg+0x24/0x80 [ 61.412278][ T5557] softirqs last enabled at (17776): [] __do_softirq+0xac0/0xd54 [ 61.414294][ T5557] softirqs last disabled at (17641): [] ____do_softirq+0x14/0x20 [ 61.416236][ T5557] ---[ end trace 0000000000000000 ]--- [ 61.445041][ T5557] (null): radio-mr800 - initialization failed [ 61.446544][ T5557] radio-mr800: probe of 1-1:6.199 failed with error -71 [ 61.448367][ T5557] usbhid 1-1:6.199: couldn't find an input interrupt endpoint [ 61.537251][ T5557] usb 1-1: USB disconnect, device number 2 [ 62.334596][ T5994] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 62.575605][ T5994] usb 1-1: Using ep0 maxpacket: 32 [ 62.576727][ T5550] Bluetooth: hci0: command 0x041b tx timeout [ 62.736123][ T5994] usb 1-1: unable to get BOS descriptor or descriptor too short [ 62.814776][ T5994] usb 1-1: config 6 has an invalid interface number: 199 but max is 2 [ 62.816458][ T5994] usb 1-1: config 6 has an invalid interface number: 48 but max is 2 [ 62.818232][ T5994] usb 1-1: config 6 has an invalid interface number: 105 but max is 2 [ 62.819861][ T5994] usb 1-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 62.821700][ T5994] usb 1-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 62.823641][ T5994] usb 1-1: config 6 has an invalid interface descriptor of length 2, skipping [ 62.826095][ T5994] usb 1-1: config 6 has no interface number 0 [ 62.827273][ T5994] usb 1-1: config 6 has no interface number 1 [ 62.828550][ T5994] usb 1-1: config 6 has no interface number 2 [ 62.829801][ T5994] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 62.832196][ T5994] usb 1-1: config 6 interface 199 altsetting 128 has an invalid endpoint with address 0x0, skipping [ 62.834263][ T5994] usb 1-1: config 6 interface 199 altsetting 128 has a duplicate endpoint with address 0x8, skipping [ 62.837206][ T5994] usb 1-1: config 6 interface 199 altsetting 128 bulk endpoint 0x2 has invalid maxpacket 8 [ 62.839162][ T5994] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 62.841452][ T5994] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 62.843900][ T5994] usb 1-1: config 6 interface 199 altsetting 128 has a duplicate endpoint with address 0x1, skipping [ 62.846402][ T5994] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 62.848661][ T5994] usb 1-1: config 6 interface 199 altsetting 128 has a duplicate endpoint with address 0x4, skipping [ 62.850866][ T5994] usb 1-1: config 6 interface 48 altsetting 8 has a duplicate endpoint with address 0xA, skipping [ 62.853125][ T5994] usb 1-1: config 6 interface 105 altsetting 129 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 62.855833][ T5994] usb 1-1: config 6 interface 199 has no altsetting 0 [ 62.857210][ T5994] usb 1-1: config 6 interface 48 has no altsetting 0 [ 62.858702][ T5994] usb 1-1: config 6 interface 105 has no altsetting 0 [ 63.095166][ T5994] usb 1-1: string descriptor 0 read error: -22 [ 63.096498][ T5994] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=b9.c5 [ 63.098266][ T5994] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.146484][ T5994] ------------[ cut here ]------------ [ 63.147630][ T5994] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 63.149250][ T5994] WARNING: CPU: 1 PID: 5994 at drivers/usb/core/urb.c:505 usb_submit_urb+0xa44/0x1588 [ 63.151236][ T5994] Modules linked in: [ 63.151986][ T5994] CPU: 1 PID: 5994 Comm: kworker/1:4 Tainted: G W 6.4.0-rc7-syzkaller-00127-ge40939bbfc68 #0 [ 63.154445][ T5994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 63.156712][ T5994] Workqueue: usb_hub_wq hub_event [ 63.157863][ T5994] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 63.159522][ T5994] pc : usb_submit_urb+0xa44/0x1588 [ 63.160565][ T5994] lr : usb_submit_urb+0xa44/0x1588 [ 63.161713][ T5994] sp : ffff8000970b6740 [ 63.162525][ T5994] x29: ffff8000970b6780 x28: 0000000000000001 x27: ffff80008ba185a8 [ 63.164306][ T5994] x26: ffff0000d026ec00 x25: ffff0000d7481000 x24: 0000000000000008 [ 63.165932][ T5994] x23: ffff80008ba1f020 x22: dfff800000000000 x21: 0000000000000002 [ 63.167627][ T5994] x20: 0000000000000c00 x19: ffff0000c2d1a600 x18: ffff8000970b6a60 [ 63.169316][ T5994] x17: 0000000000000000 x16: ffff80008a4483a0 x15: 0000000000000002 [ 63.171084][ T5994] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000001 [ 63.172797][ T5994] x11: 0000000000000000 x10: 0000000000000000 x9 : c17940cda44a0300 [ 63.174511][ T5994] x8 : c17940cda44a0300 x7 : 0000000000000001 x6 : 0000000000000001 [ 63.176176][ T5994] x5 : ffff8000970b6038 x4 : ffff80008dfcee80 x3 : ffff800080597614 [ 63.177916][ T5994] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000 [ 63.179551][ T5994] Call trace: [ 63.180196][ T5994] usb_submit_urb+0xa44/0x1588 [ 63.181239][ T5994] usb_start_wait_urb+0xec/0x414 [ 63.182239][ T5994] usb_bulk_msg+0x2ec/0x3ec [ 63.183332][ T5994] amradio_set_mute+0x1d4/0x428 [ 63.184366][ T5994] usb_amradio_probe+0x388/0x6f8 [ 63.185365][ T5994] usb_probe_interface+0x500/0x984 [ 63.186465][ T5994] really_probe+0x394/0xa7c [ 63.187429][ T5994] __driver_probe_device+0x194/0x3b4 [ 63.188529][ T5994] driver_probe_device+0x78/0x330 [ 63.189592][ T5994] __device_attach_driver+0x2a8/0x4f4 [ 63.190742][ T5994] bus_for_each_drv+0x228/0x2bc [ 63.191828][ T5994] __device_attach+0x2b4/0x434 [ 63.192859][ T5994] device_initial_probe+0x24/0x34 [ 63.193888][ T5994] bus_probe_device+0x178/0x240 [ 63.194898][ T5994] device_add+0xa44/0xdf0 [ 63.195852][ T5994] usb_set_configuration+0x15cc/0x1b38 [ 63.197035][ T5994] usb_generic_driver_probe+0x8c/0x148 [ 63.198173][ T5994] usb_probe_device+0x120/0x25c [ 63.199202][ T5994] really_probe+0x394/0xa7c [ 63.200137][ T5994] __driver_probe_device+0x194/0x3b4 [ 63.201219][ T5994] driver_probe_device+0x78/0x330 [ 63.202265][ T5994] __device_attach_driver+0x2a8/0x4f4 [ 63.203435][ T5994] bus_for_each_drv+0x228/0x2bc [ 63.204454][ T5994] __device_attach+0x2b4/0x434 [ 63.205436][ T5994] device_initial_probe+0x24/0x34 [ 63.206428][ T5994] bus_probe_device+0x178/0x240 [ 63.207525][ T5994] device_add+0xa44/0xdf0 [ 63.208476][ T5994] usb_new_device+0x904/0x142c [ 63.209441][ T5994] hub_event+0x25e4/0x474c [ 63.210387][ T5994] process_one_work+0x788/0x12d4 [ 63.211411][ T5994] worker_thread+0x8e0/0xfe8 [ 63.212404][ T5994] kthread+0x288/0x310 [ 63.213273][ T5994] ret_from_fork+0x10/0x20 [ 63.214166][ T5994] irq event stamp: 379708 [ 63.215140][ T5994] hardirqs last enabled at (379707): [] __up_console_sem+0x60/0xb4 [ 63.217174][ T5994] hardirqs last disabled at (379708): [] el1_dbg+0x24/0x80 [ 63.219047][ T5994] softirqs last enabled at (377656): [] __do_softirq+0xac0/0xd54 [ 63.221014][ T5994] softirqs last disabled at (377527): [] ____do_softirq+0x14/0x20 [ 63.222993][ T5994] ---[ end trace 0000000000000000 ]--- [ 63.244553][ T5994] (null): radio-mr800 - initialization failed [ 63.245895][ T5994] radio-mr800: probe of 1-1:6.199 failed with error -71 [ 63.247529][ T5994] usbhid 1-1:6.199: couldn't find an input interrupt endpoint [ 63.361685][ T9] usb 1-1: USB disconnect, device number 3 1970/01/01 00:01:03 executed programs: 2 [ 64.154565][ T5994] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 64.394479][ T5994] usb 1-1: Using ep0 maxpacket: 32 [ 64.496012][ T2150] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.497412][ T2150] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.554530][ T5994] usb 1-1: unable to get BOS descriptor or descriptor too short [ 64.634636][ T5994] usb 1-1: config 6 has an invalid interface number: 199 but max is 2 [ 64.636346][ T5994] usb 1-1: config 6 has an invalid interface number: 48 but max is 2 [ 64.637988][ T5994] usb 1-1: config 6 has an invalid interface number: 105 but max is 2 [ 64.639638][ T5994] usb 1-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 64.641412][ T5994] usb 1-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 64.643214][ T5994] usb 1-1: config 6 has an invalid interface descriptor of length 2, skipping [ 64.645272][ T5994] usb 1-1: config 6 has no interface number 0 [ 64.646592][ T5994] usb 1-1: config 6 has no interface number 1 [ 64.647853][ T5994] usb 1-1: config 6 has no interface number 2 [ 64.649064][ T5994] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 64.651524][ T5994] usb 1-1: config 6 interface 199 altsetting 128 has an invalid endpoint with address 0x0, skipping [ 64.653835][ T5994] usb 1-1: config 6 interface 199 altsetting 128 has a duplicate endpoint with address 0x8, skipping [ 64.656068][ T5994] usb 1-1: config 6 interface 199 altsetting 128 bulk endpoint 0x2 has invalid maxpacket 8 [ 64.656286][ T48] Bluetooth: hci0: command 0x040f tx timeout [ 64.658218][ T5994] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 64.661750][ T5994] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 64.664134][ T5994] usb 1-1: config 6 interface 199 altsetting 128 has a duplicate endpoint with address 0x1, skipping [ 64.666524][ T5994] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 64.668789][ T5994] usb 1-1: config 6 interface 199 altsetting 128 has a duplicate endpoint with address 0x4, skipping [ 64.671082][ T5994] usb 1-1: config 6 interface 48 altsetting 8 has a duplicate endpoint with address 0xA, skipping [ 64.673148][ T5994] usb 1-1: config 6 interface 105 altsetting 129 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 64.675881][ T5994] usb 1-1: config 6 interface 199 has no altsetting 0 [ 64.677305][ T5994] usb 1-1: config 6 interface 48 has no altsetting 0 [ 64.678666][ T5994] usb 1-1: config 6 interface 105 has no altsetting 0 [ 64.914623][ T5994] usb 1-1: string descriptor 0 read error: -22 [ 64.916072][ T5994] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=b9.c5 [ 64.917947][ T5994] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.956359][ T5994] ------------[ cut here ]------------ [ 64.957578][ T5994] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 64.959268][ T5994] WARNING: CPU: 1 PID: 5994 at drivers/usb/core/urb.c:505 usb_submit_urb+0xa44/0x1588 [ 64.961247][ T5994] Modules linked in: [ 64.962057][ T5994] CPU: 1 PID: 5994 Comm: kworker/1:4 Tainted: G W 6.4.0-rc7-syzkaller-00127-ge40939bbfc68 #0 [ 64.964533][ T5994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 64.966764][ T5994] Workqueue: usb_hub_wq hub_event [ 64.967806][ T5994] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 64.969514][ T5994] pc : usb_submit_urb+0xa44/0x1588 [ 64.970601][ T5994] lr : usb_submit_urb+0xa44/0x1588 [ 64.971677][ T5994] sp : ffff8000970b6740 [ 64.972505][ T5994] x29: ffff8000970b6780 x28: 0000000000000001 x27: ffff80008ba185a8 [ 64.974142][ T5994] x26: ffff0000c2472a00 x25: ffff0000dc0ac000 x24: 0000000000000008 [ 64.975799][ T5994] x23: ffff80008ba1f020 x22: dfff800000000000 x21: 0000000000000002 [ 64.977476][ T5994] x20: 0000000000000c00 x19: ffff0000d372be00 x18: 1fffe00036846fc6 [ 64.979151][ T5994] x17: ffff80008deed000 x16: ffff8000803123e0 x15: 0000000000000002 [ 64.980833][ T5994] x14: 1ffff00011bde0ac x13: dfff800000000000 x12: 0000000000000003 [ 64.982557][ T5994] x11: 0000000000000001 x10: 0000000000000003 x9 : c17940cda44a0300 [ 64.984344][ T5994] x8 : c17940cda44a0300 x7 : ffff80008028cc04 x6 : 0000000000000000 [ 64.986014][ T5994] x5 : 0000000000000001 x4 : 0000000000000001 x3 : 0000000000000000 [ 64.987678][ T5994] x2 : 0000000000000006 x1 : ffff80008a5ade40 x0 : ffff8001263fc000 [ 64.989335][ T5994] Call trace: [ 64.990010][ T5994] usb_submit_urb+0xa44/0x1588 [ 64.991019][ T5994] usb_start_wait_urb+0xec/0x414 [ 64.992097][ T5994] usb_bulk_msg+0x2ec/0x3ec [ 64.993035][ T5994] amradio_set_mute+0x1d4/0x428 [ 64.994051][ T5994] usb_amradio_probe+0x388/0x6f8 [ 64.995144][ T5994] usb_probe_interface+0x500/0x984 [ 64.996231][ T5994] really_probe+0x394/0xa7c [ 64.997173][ T5994] __driver_probe_device+0x194/0x3b4 [ 64.998284][ T5994] driver_probe_device+0x78/0x330 [ 64.999324][ T5994] __device_attach_driver+0x2a8/0x4f4 [ 65.000395][ T5994] bus_for_each_drv+0x228/0x2bc [ 65.001458][ T5994] __device_attach+0x2b4/0x434 [ 65.002589][ T5994] device_initial_probe+0x24/0x34 [ 65.003661][ T5994] bus_probe_device+0x178/0x240 [ 65.004665][ T5994] device_add+0xa44/0xdf0 [ 65.005559][ T5994] usb_set_configuration+0x15cc/0x1b38 [ 65.006650][ T5994] usb_generic_driver_probe+0x8c/0x148 [ 65.007821][ T5994] usb_probe_device+0x120/0x25c [ 65.008934][ T5994] really_probe+0x394/0xa7c [ 65.009899][ T5994] __driver_probe_device+0x194/0x3b4 [ 65.011066][ T5994] driver_probe_device+0x78/0x330 [ 65.012152][ T5994] __device_attach_driver+0x2a8/0x4f4 [ 65.013278][ T5994] bus_for_each_drv+0x228/0x2bc [ 65.014409][ T5994] __device_attach+0x2b4/0x434 [ 65.015452][ T5994] device_initial_probe+0x24/0x34 [ 65.016545][ T5994] bus_probe_device+0x178/0x240 [ 65.017548][ T5994] device_add+0xa44/0xdf0 [ 65.018451][ T5994] usb_new_device+0x904/0x142c [ 65.019521][ T5994] hub_event+0x25e4/0x474c [ 65.020490][ T5994] process_one_work+0x788/0x12d4 [ 65.021501][ T5994] worker_thread+0x8e0/0xfe8 [ 65.022450][ T5994] kthread+0x288/0x310 [ 65.023329][ T5994] ret_from_fork+0x10/0x20 [ 65.024225][ T5994] irq event stamp: 385836 [ 65.025138][ T5994] hardirqs last enabled at (385835): [] finish_lock_switch+0xbc/0x1e4 [ 65.027193][ T5994] hardirqs last disabled at (385836): [] el1_dbg+0x24/0x80 [ 65.029104][ T5994] softirqs last enabled at (383708): [] __do_softirq+0xac0/0xd54 [ 65.030999][ T5994] softirqs last disabled at (383703): [] ____do_softirq+0x14/0x20 [ 65.033032][ T5994] ---[ end trace 0000000000000000 ]--- [ 65.055261][ T5994] (null): radio-mr800 - initialization failed [ 65.056652][ T5994] radio-mr800: probe of 1-1:6.199 failed with error -71 [ 65.058282][ T5994] usbhid 1-1:6.199: couldn't find an input interrupt endpoint [ 65.155623][ T5557] usb 1-1: USB disconnect, device number 4 [ 65.934569][ T24] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 66.174589][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 66.334522][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 66.414679][ T24] usb 1-1: config 6 has an invalid interface number: 199 but max is 2 [ 66.416389][ T24] usb 1-1: config 6 has an invalid interface number: 48 but max is 2 [ 66.418018][ T24] usb 1-1: config 6 has an invalid interface number: 105 but max is 2 [ 66.419680][ T24] usb 1-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 66.421548][ T24] usb 1-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 66.423334][ T24] usb 1-1: config 6 has an invalid interface descriptor of length 2, skipping [ 66.425509][ T24] usb 1-1: config 6 has no interface number 0 [ 66.426785][ T24] usb 1-1: config 6 has no interface number 1 [ 66.428144][ T24] usb 1-1: config 6 has no interface number 2 [ 66.429369][ T24] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 66.431688][ T24] usb 1-1: config 6 interface 199 altsetting 128 has an invalid endpoint with address 0x0, skipping [ 66.433820][ T24] usb 1-1: config 6 interface 199 altsetting 128 has a duplicate endpoint with address 0x8, skipping [ 66.436288][ T24] usb 1-1: config 6 interface 199 altsetting 128 bulk endpoint 0x2 has invalid maxpacket 8 [ 66.438396][ T24] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 66.440594][ T24] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 66.442828][ T24] usb 1-1: config 6 interface 199 altsetting 128 has a duplicate endpoint with address 0x1, skipping [ 66.445229][ T24] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 66.447427][ T24] usb 1-1: config 6 interface 199 altsetting 128 has a duplicate endpoint with address 0x4, skipping [ 66.449691][ T24] usb 1-1: config 6 interface 48 altsetting 8 has a duplicate endpoint with address 0xA, skipping [ 66.451948][ T24] usb 1-1: config 6 interface 105 altsetting 129 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 66.454724][ T24] usb 1-1: config 6 interface 199 has no altsetting 0 [ 66.456254][ T24] usb 1-1: config 6 interface 48 has no altsetting 0 [ 66.457545][ T24] usb 1-1: config 6 interface 105 has no altsetting 0 [ 66.694761][ T24] usb 1-1: string descriptor 0 read error: -22 [ 66.696132][ T24] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=b9.c5 [ 66.698043][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.734715][ T5550] Bluetooth: hci0: command 0x0419 tx timeout [ 66.737700][ T24] ------------[ cut here ]------------ [ 66.738819][ T24] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 66.740698][ T24] WARNING: CPU: 1 PID: 24 at drivers/usb/core/urb.c:505 usb_submit_urb+0xa44/0x1588 [ 66.742772][ T24] Modules linked in: [ 66.743572][ T24] CPU: 1 PID: 24 Comm: kworker/1:1 Tainted: G W 6.4.0-rc7-syzkaller-00127-ge40939bbfc68 #0 [ 66.746051][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 66.748212][ T24] Workqueue: usb_hub_wq hub_event [ 66.749268][ T24] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 66.750901][ T24] pc : usb_submit_urb+0xa44/0x1588 [ 66.752108][ T24] lr : usb_submit_urb+0xa44/0x1588 [ 66.753249][ T24] sp : ffff800092946740 [ 66.754073][ T24] x29: ffff800092946780 x28: 0000000000000001 x27: ffff80008ba185a8 [ 66.755845][ T24] x26: ffff0000cbef1200 x25: ffff0000ca7da000 x24: 0000000000000008 [ 66.757555][ T24] x23: ffff80008ba1f020 x22: dfff800000000000 x21: 0000000000000002 [ 66.759182][ T24] x20: 0000000000000c00 x19: ffff0000c187ec00 x18: 1fffe00036846fc6 [ 66.760967][ T24] x17: ffff80008deed000 x16: ffff8000803123e0 x15: 0000000000000002 [ 66.762707][ T24] x14: 1ffff00011bde0ac x13: dfff800000000000 x12: 0000000000000003 [ 66.764494][ T24] x11: 0000000000000001 x10: 0000000000000003 x9 : 923f060c50d6dd00 [ 66.766274][ T24] x8 : 923f060c50d6dd00 x7 : ffff80008028cc04 x6 : 0000000000000000 [ 66.768073][ T24] x5 : 0000000000000001 x4 : 0000000000000001 x3 : 0000000000000000 [ 66.769798][ T24] x2 : 0000000000000006 x1 : ffff80008a5ade40 x0 : ffff8001263fc000 [ 66.771478][ T24] Call trace: [ 66.772198][ T24] usb_submit_urb+0xa44/0x1588 [ 66.773222][ T24] usb_start_wait_urb+0xec/0x414 [ 66.774237][ T24] usb_bulk_msg+0x2ec/0x3ec [ 66.775226][ T24] amradio_set_mute+0x1d4/0x428 [ 66.776276][ T24] usb_amradio_probe+0x388/0x6f8 [ 66.777318][ T24] usb_probe_interface+0x500/0x984 [ 66.778465][ T24] really_probe+0x394/0xa7c [ 66.779435][ T24] __driver_probe_device+0x194/0x3b4 [ 66.780574][ T24] driver_probe_device+0x78/0x330 [ 66.781647][ T24] __device_attach_driver+0x2a8/0x4f4 [ 66.782766][ T24] bus_for_each_drv+0x228/0x2bc [ 66.783832][ T24] __device_attach+0x2b4/0x434 [ 66.784851][ T24] device_initial_probe+0x24/0x34 [ 66.785985][ T24] bus_probe_device+0x178/0x240 [ 66.787101][ T24] device_add+0xa44/0xdf0 [ 66.787988][ T24] usb_set_configuration+0x15cc/0x1b38 [ 66.789119][ T24] usb_generic_driver_probe+0x8c/0x148 [ 66.790224][ T24] usb_probe_device+0x120/0x25c [ 66.791265][ T24] really_probe+0x394/0xa7c [ 66.792284][ T24] __driver_probe_device+0x194/0x3b4 [ 66.793374][ T24] driver_probe_device+0x78/0x330 [ 66.794504][ T24] __device_attach_driver+0x2a8/0x4f4 [ 66.795582][ T24] bus_for_each_drv+0x228/0x2bc [ 66.796618][ T24] __device_attach+0x2b4/0x434 [ 66.797630][ T24] device_initial_probe+0x24/0x34 [ 66.798668][ T24] bus_probe_device+0x178/0x240 [ 66.799721][ T24] device_add+0xa44/0xdf0 [ 66.800688][ T24] usb_new_device+0x904/0x142c [ 66.801687][ T24] hub_event+0x25e4/0x474c [ 66.802662][ T24] process_one_work+0x788/0x12d4 [ 66.803644][ T24] worker_thread+0x8e0/0xfe8 [ 66.804644][ T24] kthread+0x288/0x310 [ 66.805511][ T24] ret_from_fork+0x10/0x20 [ 66.806479][ T24] irq event stamp: 1415238 [ 66.807401][ T24] hardirqs last enabled at (1415237): [] finish_lock_switch+0xbc/0x1e4 [ 66.809494][ T24] hardirqs last disabled at (1415238): [] el1_dbg+0x24/0x80 [ 66.811347][ T24] softirqs last enabled at (1413002): [] __do_softirq+0xac0/0xd54 [ 66.813437][ T24] softirqs last disabled at (1412993): [] ____do_softirq+0x14/0x20 [ 66.815383][ T24] ---[ end trace 0000000000000000 ]--- [ 66.834636][ T24] (null): radio-mr800 - initialization failed [ 66.836012][ T24] radio-mr800: probe of 1-1:6.199 failed with error -71 [ 66.837661][ T24] usbhid 1-1:6.199: couldn't find an input interrupt endpoint [ 66.935499][ T24] usb 1-1: USB disconnect, device number 5 [ 67.724564][ T5557] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 67.974492][ T5557] usb 1-1: Using ep0 maxpacket: 32 [ 68.144565][ T5557] usb 1-1: unable to get BOS descriptor or descriptor too short [ 68.224665][ T5557] usb 1-1: config 6 has an invalid interface number: 199 but max is 2 [ 68.226376][ T5557] usb 1-1: config 6 has an invalid interface number: 48 but max is 2 [ 68.228105][ T5557] usb 1-1: config 6 has an invalid interface number: 105 but max is 2 [ 68.229817][ T5557] usb 1-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 68.231601][ T5557] usb 1-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 68.233344][ T5557] usb 1-1: config 6 has an invalid interface descriptor of length 2, skipping [ 68.236278][ T5557] usb 1-1: config 6 has no interface number 0 [ 68.237484][ T5557] usb 1-1: config 6 has no interface number 1 [ 68.238687][ T5557] usb 1-1: config 6 has no interface number 2 [ 68.240013][ T5557] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 68.242216][ T5557] usb 1-1: config 6 interface 199 altsetting 128 has an invalid endpoint with address 0x0, skipping [ 68.244545][ T5557] usb 1-1: config 6 interface 199 altsetting 128 has a duplicate endpoint with address 0x8, skipping [ 68.246799][ T5557] usb 1-1: config 6 interface 199 altsetting 128 bulk endpoint 0x2 has invalid maxpacket 8 [ 68.248991][ T5557] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 68.251207][ T5557] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 68.253526][ T5557] usb 1-1: config 6 interface 199 altsetting 128 has a duplicate endpoint with address 0x1, skipping [ 68.255894][ T5557] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 68.258163][ T5557] usb 1-1: config 6 interface 199 altsetting 128 has a duplicate endpoint with address 0x4, skipping [ 68.260351][ T5557] usb 1-1: config 6 interface 48 altsetting 8 has a duplicate endpoint with address 0xA, skipping [ 68.262572][ T5557] usb 1-1: config 6 interface 105 altsetting 129 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 68.265460][ T5557] usb 1-1: config 6 interface 199 has no altsetting 0 [ 68.266927][ T5557] usb 1-1: config 6 interface 48 has no altsetting 0 [ 68.268335][ T5557] usb 1-1: config 6 interface 105 has no altsetting 0 [ 68.524723][ T5557] usb 1-1: string descriptor 0 read error: -22 [ 68.526139][ T5557] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=b9.c5 [ 68.527882][ T5557] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.566520][ T5557] ------------[ cut here ]------------ [ 68.567647][ T5557] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 68.569334][ T5557] WARNING: CPU: 0 PID: 5557 at drivers/usb/core/urb.c:505 usb_submit_urb+0xa44/0x1588 [ 68.571310][ T5557] Modules linked in: [ 68.572136][ T5557] CPU: 0 PID: 5557 Comm: kworker/0:3 Tainted: G W 6.4.0-rc7-syzkaller-00127-ge40939bbfc68 #0 [ 68.574514][ T5557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 68.576709][ T5557] Workqueue: usb_hub_wq hub_event [ 68.577770][ T5557] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 68.579443][ T5557] pc : usb_submit_urb+0xa44/0x1588 [ 68.580542][ T5557] lr : usb_submit_urb+0xa44/0x1588 [ 68.581638][ T5557] sp : ffff800098176740 [ 68.582542][ T5557] x29: ffff800098176780 x28: 0000000000000001 x27: ffff80008ba185a8 [ 68.584211][ T5557] x26: ffff0000d2a4c900 x25: ffff0000ddc87000 x24: 0000000000000008 [ 68.585938][ T5557] x23: ffff80008ba1f020 x22: dfff800000000000 x21: 0000000000000002 [ 68.587639][ T5557] x20: 0000000000000c00 x19: ffff0000c8a12200 x18: 1fffe00036842bc6 [ 68.589210][ T5557] x17: 0000000000000000 x16: ffff80008a4483a0 x15: 0000000000000002 [ 68.590865][ T5557] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000001 [ 68.592553][ T5557] x11: 0000000000000000 x10: 0000000000000000 x9 : 743261f9e77b9400 [ 68.594267][ T5557] x8 : 743261f9e77b9400 x7 : 0000000000000001 x6 : 0000000000000001 [ 68.596051][ T5557] x5 : ffff800098176038 x4 : ffff80008dfcee80 x3 : ffff800080597614 [ 68.597696][ T5557] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000 [ 68.599308][ T5557] Call trace: [ 68.600035][ T5557] usb_submit_urb+0xa44/0x1588 [ 68.601076][ T5557] usb_start_wait_urb+0xec/0x414 [ 68.602049][ T5557] usb_bulk_msg+0x2ec/0x3ec [ 68.602980][ T5557] amradio_set_mute+0x1d4/0x428 [ 68.603982][ T5557] usb_amradio_probe+0x388/0x6f8 [ 68.605016][ T5557] usb_probe_interface+0x500/0x984 [ 68.606167][ T5557] really_probe+0x394/0xa7c [ 68.607045][ T5557] __driver_probe_device+0x194/0x3b4 [ 68.608181][ T5557] driver_probe_device+0x78/0x330 [ 68.609303][ T5557] __device_attach_driver+0x2a8/0x4f4 [ 68.610415][ T5557] bus_for_each_drv+0x228/0x2bc [ 68.611488][ T5557] __device_attach+0x2b4/0x434 [ 68.612532][ T5557] device_initial_probe+0x24/0x34 [ 68.613638][ T5557] bus_probe_device+0x178/0x240 [ 68.614633][ T5557] device_add+0xa44/0xdf0 [ 68.615572][ T5557] usb_set_configuration+0x15cc/0x1b38 [ 68.616699][ T5557] usb_generic_driver_probe+0x8c/0x148 [ 68.617856][ T5557] usb_probe_device+0x120/0x25c [ 68.618881][ T5557] really_probe+0x394/0xa7c [ 68.619939][ T5557] __driver_probe_device+0x194/0x3b4 [ 68.621033][ T5557] driver_probe_device+0x78/0x330 [ 68.622051][ T5557] __device_attach_driver+0x2a8/0x4f4 [ 68.623203][ T5557] bus_for_each_drv+0x228/0x2bc [ 68.624235][ T5557] __device_attach+0x2b4/0x434 [ 68.625209][ T5557] device_initial_probe+0x24/0x34 [ 68.626302][ T5557] bus_probe_device+0x178/0x240 [ 68.627282][ T5557] device_add+0xa44/0xdf0 [ 68.628209][ T5557] usb_new_device+0x904/0x142c [ 68.629228][ T5557] hub_event+0x25e4/0x474c [ 68.630163][ T5557] process_one_work+0x788/0x12d4 [ 68.631122][ T5557] worker_thread+0x8e0/0xfe8 [ 68.632056][ T5557] kthread+0x288/0x310 [ 68.632933][ T5557] ret_from_fork+0x10/0x20 [ 68.633894][ T5557] irq event stamp: 54434 [ 68.634853][ T5557] hardirqs last enabled at (54433): [] __up_console_sem+0x60/0xb4 [ 68.636865][ T5557] hardirqs last disabled at (54434): [] el1_dbg+0x24/0x80 [ 68.638818][ T5557] softirqs last enabled at (52180): [] __do_softirq+0xac0/0xd54 [ 68.640831][ T5557] softirqs last disabled at (52175): [] ____do_softirq+0x14/0x20 [ 68.642786][ T5557] ---[ end trace 0000000000000000 ]--- [ 68.655386][ T5557] (null): radio-mr800 - initialization failed [ 68.656836][ T5557] radio-mr800: probe of 1-1:6.199 failed with error -71 [ 68.658536][ T5557] usbhid 1-1:6.199: couldn't find an input interrupt endpoint [ 68.765596][ T5557] usb 1-1: USB disconnect, device number 6 1970/01/01 00:01:09 executed programs: 5 [ 69.544500][ T5557] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 69.625662][ T3490] cfg80211: failed to load regulatory.db [ 69.794469][ T5557] usb 1-1: Using ep0 maxpacket: 32 [ 69.974505][ T5557] usb 1-1: unable to get BOS descriptor or descriptor too short [ 70.054531][ T5557] usb 1-1: config 6 has an invalid interface number: 199 but max is 2 [ 70.056290][ T5557] usb 1-1: config 6 has an invalid interface number: 48 but max is 2 [ 70.058010][ T5557] usb 1-1: config 6 has an invalid interface number: 105 but max is 2 [ 70.059666][ T5557] usb 1-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 70.061386][ T5557] usb 1-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 70.063238][ T5557] usb 1-1: config 6 has an invalid interface descriptor of length 2, skipping [ 70.066236][ T5557] usb 1-1: config 6 has no interface number 0 [ 70.067591][ T5557] usb 1-1: config 6 has no interface number 1 [ 70.068844][ T5557] usb 1-1: config 6 has no interface number 2 [ 70.070145][ T5557] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 70.072536][ T5557] usb 1-1: config 6 interface 199 altsetting 128 has an invalid endpoint with address 0x0, skipping [ 70.084467][ T5557] usb 1-1: config 6 interface 199 altsetting 128 has a duplicate endpoint with address 0x8, skipping [ 70.086670][ T5557] usb 1-1: config 6 interface 199 altsetting 128 bulk endpoint 0x2 has invalid maxpacket 8 [ 70.088757][ T5557] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 70.090950][ T5557] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 70.093082][ T5557] usb 1-1: config 6 interface 199 altsetting 128 has a duplicate endpoint with address 0x1, skipping [ 70.095902][ T5557] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 70.098213][ T5557] usb 1-1: config 6 interface 199 altsetting 128 has a duplicate endpoint with address 0x4, skipping [ 70.100444][ T5557] usb 1-1: config 6 interface 48 altsetting 8 has a duplicate endpoint with address 0xA, skipping [ 70.102663][ T5557] usb 1-1: config 6 interface 105 altsetting 129 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 70.105716][ T5557] usb 1-1: config 6 interface 199 has no altsetting 0 [ 70.107106][ T5557] usb 1-1: config 6 interface 48 has no altsetting 0 [ 70.108514][ T5557] usb 1-1: config 6 interface 105 has no altsetting 0 [ 70.374596][ T5557] usb 1-1: string descriptor 0 read error: -22 [ 70.375920][ T5557] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=b9.c5 [ 70.377761][ T5557] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.417198][ T5557] ------------[ cut here ]------------ [ 70.418304][ T5557] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 70.419940][ T5557] WARNING: CPU: 0 PID: 5557 at drivers/usb/core/urb.c:505 usb_submit_urb+0xa44/0x1588 [ 70.421819][ T5557] Modules linked in: [ 70.422583][ T5557] CPU: 0 PID: 5557 Comm: kworker/0:3 Tainted: G W 6.4.0-rc7-syzkaller-00127-ge40939bbfc68 #0 [ 70.425006][ T5557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 70.427194][ T5557] Workqueue: usb_hub_wq hub_event [ 70.428291][ T5557] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 70.429961][ T5557] pc : usb_submit_urb+0xa44/0x1588 [ 70.431049][ T5557] lr : usb_submit_urb+0xa44/0x1588 [ 70.432089][ T5557] sp : ffff800098176740 [ 70.432943][ T5557] x29: ffff800098176780 x28: 0000000000000001 x27: ffff80008ba185a8 [ 70.434625][ T5557] x26: ffff0000ceab0600 x25: ffff0000df2f0000 x24: 0000000000000008 [ 70.436292][ T5557] x23: ffff80008ba1f020 x22: dfff800000000000 x21: 0000000000000002 [ 70.438029][ T5557] x20: 0000000000000c00 x19: ffff0000d4d44c00 x18: 1fffe00036842bc6 [ 70.439724][ T5557] x17: 0000000000000000 x16: ffff8000803123e0 x15: 0000000000000002 [ 70.441516][ T5557] x14: 1ffff00011bde0ac x13: dfff800000000000 x12: 0000000000000003 [ 70.443172][ T5557] x11: 0000000000000001 x10: 0000000000000003 x9 : 743261f9e77b9400 [ 70.444784][ T5557] x8 : 743261f9e77b9400 x7 : ffff80008a519210 x6 : 0000000000000000 [ 70.446479][ T5557] x5 : 0000000000000001 x4 : 0000000000000001 x3 : 0000000000000000 [ 70.448256][ T5557] x2 : 0000000000000006 x1 : ffff80008a5ade40 x0 : ffff8001263da000 [ 70.449937][ T5557] Call trace: [ 70.450642][ T5557] usb_submit_urb+0xa44/0x1588 [ 70.451643][ T5557] usb_start_wait_urb+0xec/0x414 [ 70.452675][ T5557] usb_bulk_msg+0x2ec/0x3ec [ 70.453586][ T5557] amradio_set_mute+0x1d4/0x428 [ 70.454571][ T5557] usb_amradio_probe+0x388/0x6f8 [ 70.455623][ T5557] usb_probe_interface+0x500/0x984 [ 70.456763][ T5557] really_probe+0x394/0xa7c [ 70.457752][ T5557] __driver_probe_device+0x194/0x3b4 [ 70.458891][ T5557] driver_probe_device+0x78/0x330 [ 70.459953][ T5557] __device_attach_driver+0x2a8/0x4f4 [ 70.461012][ T5557] bus_for_each_drv+0x228/0x2bc [ 70.461999][ T5557] __device_attach+0x2b4/0x434 [ 70.463036][ T5557] device_initial_probe+0x24/0x34 [ 70.464065][ T5557] bus_probe_device+0x178/0x240 [ 70.465132][ T5557] device_add+0xa44/0xdf0 [ 70.466033][ T5557] usb_set_configuration+0x15cc/0x1b38 [ 70.467233][ T5557] usb_generic_driver_probe+0x8c/0x148 [ 70.468374][ T5557] usb_probe_device+0x120/0x25c [ 70.469401][ T5557] really_probe+0x394/0xa7c [ 70.470355][ T5557] __driver_probe_device+0x194/0x3b4 [ 70.471455][ T5557] driver_probe_device+0x78/0x330 [ 70.472526][ T5557] __device_attach_driver+0x2a8/0x4f4 [ 70.473636][ T5557] bus_for_each_drv+0x228/0x2bc [ 70.474740][ T5557] __device_attach+0x2b4/0x434 [ 70.475769][ T5557] device_initial_probe+0x24/0x34 [ 70.476835][ T5557] bus_probe_device+0x178/0x240 [ 70.477882][ T5557] device_add+0xa44/0xdf0 [ 70.478789][ T5557] usb_new_device+0x904/0x142c [ 70.479805][ T5557] hub_event+0x25e4/0x474c [ 70.480721][ T5557] process_one_work+0x788/0x12d4 [ 70.481813][ T5557] worker_thread+0x8e0/0xfe8 [ 70.482805][ T5557] kthread+0x288/0x310 [ 70.483691][ T5557] ret_from_fork+0x10/0x20 [ 70.484581][ T5557] irq event stamp: 64942 [ 70.485451][ T5557] hardirqs last enabled at (64941): [] raw_spin_rq_unlock_irq+0x14/0x24 [ 70.487661][ T5557] hardirqs last disabled at (64942): [] el1_dbg+0x24/0x80 [ 70.489507][ T5557] softirqs last enabled at (62000): [] __do_softirq+0xac0/0xd54 [ 70.491466][ T5557] softirqs last disabled at (61979): [] ____do_softirq+0x14/0x20 [ 70.493530][ T5557] ---[ end trace 0000000000000000 ]--- [ 70.524536][ T5557] (null): radio-mr800 - initialization failed [ 70.525898][ T5557] radio-mr800: probe of 1-1:6.199 failed with error -71 [ 70.527591][ T5557] usbhid 1-1:6.199: couldn't find an input interrupt endpoint [ 70.618009][ T5557] usb 1-1: USB disconnect, device number 7