Warning: Permanently added '10.128.0.162' (ED25519) to the list of known hosts. 1970/01/01 00:01:26 ignoring optional flag "sandboxArg"="0" 1970/01/01 00:01:27 parsed 1 programs [ 90.326063][ T6937] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 100.363779][ T7073] chnl_net:caif_netlink_parms(): no params data found [ 100.515753][ T7073] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.515831][ T7073] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.515994][ T7073] bridge_slave_0: entered allmulticast mode [ 100.517343][ T7073] bridge_slave_0: entered promiscuous mode [ 100.518714][ T7073] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.518768][ T7073] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.518860][ T7073] bridge_slave_1: entered allmulticast mode [ 100.519674][ T7073] bridge_slave_1: entered promiscuous mode [ 100.544795][ T7073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.549434][ T7073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.567944][ T7073] team0: Port device team_slave_0 added [ 100.572710][ T7073] team0: Port device team_slave_1 added [ 100.587572][ T7073] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.589666][ T7073] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.596650][ T7073] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.597932][ T7073] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.597971][ T7073] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.598001][ T7073] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.651597][ T7073] hsr_slave_0: entered promiscuous mode [ 100.653910][ T7073] hsr_slave_1: entered promiscuous mode [ 101.503721][ T7073] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 101.512447][ T7073] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 101.516347][ T7073] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 101.520849][ T7073] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 101.583763][ T7073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.594604][ T7073] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.601454][ T181] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.601975][ T181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.612969][ T181] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.613059][ T181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.623554][ T7073] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 101.623630][ T7073] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 101.721758][ T7073] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.743649][ T7073] veth0_vlan: entered promiscuous mode [ 101.749930][ T7073] veth1_vlan: entered promiscuous mode [ 101.766090][ T7073] veth0_macvtap: entered promiscuous mode [ 101.775773][ T7073] veth1_macvtap: entered promiscuous mode [ 101.788214][ T7073] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.794353][ T7073] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.802381][ T7073] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.805067][ T7073] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.808753][ T7073] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.811415][ T7073] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.138578][ T732] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.218862][ T732] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.283754][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 102.287160][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 102.289961][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 102.293350][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 102.295822][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 102.303796][ T732] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.400427][ T732] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.963243][ T686] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.963308][ T686] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.982439][ T686] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.984806][ T686] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 1970/01/01 00:01:43 executed programs: 0 [ 103.496294][ T6096] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 103.498474][ T6096] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 103.498849][ T6096] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 103.499484][ T6096] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 103.499882][ T6096] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 103.617550][ T7283] chnl_net:caif_netlink_parms(): no params data found [ 103.664363][ T7283] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.664484][ T7283] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.664593][ T7283] bridge_slave_0: entered allmulticast mode [ 103.665492][ T7283] bridge_slave_0: entered promiscuous mode [ 103.670260][ T7283] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.670351][ T7283] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.670474][ T7283] bridge_slave_1: entered allmulticast mode [ 103.671335][ T7283] bridge_slave_1: entered promiscuous mode [ 103.702383][ T7283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.709436][ T7283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.729793][ T7283] team0: Port device team_slave_0 added [ 103.733652][ T7283] team0: Port device team_slave_1 added [ 103.751440][ T7283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.753562][ T7283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.761160][ T7283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.765537][ T7283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.767970][ T7283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.775397][ T7283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.805542][ T7283] hsr_slave_0: entered promiscuous mode [ 103.807966][ T7283] hsr_slave_1: entered promiscuous mode [ 103.810083][ T7283] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 103.812544][ T7283] Cannot create hsr debugfs directory [ 105.016026][ T732] bridge_slave_1: left allmulticast mode [ 105.016088][ T732] bridge_slave_1: left promiscuous mode [ 105.016275][ T732] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.025976][ T732] bridge_slave_0: left allmulticast mode [ 105.033018][ T732] bridge_slave_0: left promiscuous mode [ 105.033452][ T732] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.576580][ T52] Bluetooth: hci0: command tx timeout [ 106.578868][ T732] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.629118][ T732] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.698263][ T732] bond0 (unregistering): Released all slaves [ 106.773513][ T732] hsr_slave_0: left promiscuous mode [ 106.775723][ T732] hsr_slave_1: left promiscuous mode [ 106.776225][ T732] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.776284][ T732] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.782827][ T732] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.785119][ T732] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.797755][ T732] veth1_macvtap: left promiscuous mode [ 106.799525][ T732] veth0_macvtap: left promiscuous mode [ 106.801389][ T732] veth1_vlan: left promiscuous mode [ 106.803135][ T732] veth0_vlan: left promiscuous mode [ 107.656548][ T52] Bluetooth: hci0: command tx timeout [ 108.488878][ T732] team0 (unregistering): Port device team_slave_1 removed [ 108.649391][ T732] team0 (unregistering): Port device team_slave_0 removed [ 109.736960][ T52] Bluetooth: hci0: command tx timeout [ 111.096277][ T7283] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 111.101092][ T7283] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 111.111635][ T7283] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 111.115508][ T7283] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 111.158597][ T7283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.354716][ T7283] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.369194][ T587] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.369286][ T587] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.379483][ T664] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.379566][ T664] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.401511][ T7283] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 111.401587][ T7283] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 111.627270][ T7283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.646729][ T7283] veth0_vlan: entered promiscuous mode [ 111.649805][ T7283] veth1_vlan: entered promiscuous mode [ 111.662353][ T7283] veth0_macvtap: entered promiscuous mode [ 111.664171][ T7283] veth1_macvtap: entered promiscuous mode [ 111.671587][ T7283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.673439][ T7283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.674867][ T7283] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.674908][ T7283] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.674963][ T7283] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.674993][ T7283] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.820781][ T52] Bluetooth: hci0: command tx timeout [ 111.840823][ T686] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.840877][ T686] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.861859][ T686] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.861962][ T686] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 1970/01/01 00:01:51 executed programs: 2 [ 112.246651][ T6586] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 112.416690][ T6586] usb 1-1: Using ep0 maxpacket: 32 [ 112.421093][ T6586] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 112.421195][ T6586] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 112.421221][ T6586] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA9, changing to 0x89 [ 112.421247][ T6586] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 255, changing to 11 [ 112.421273][ T6586] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 112.421299][ T6586] usb 1-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 112.424102][ T6586] usb 1-1: New USB device found, idVendor=2040, idProduct=5500, bcdDevice=a9.c8 [ 112.424150][ T6586] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.424174][ T6586] usb 1-1: Product: syz [ 112.424195][ T6586] usb 1-1: Manufacturer: syz [ 112.424215][ T6586] usb 1-1: SerialNumber: syz [ 112.428172][ T6586] usb 1-1: config 0 descriptor?? [ 112.429267][ T7485] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 112.638733][ T6586] smsusb:smsusb_probe: board id=8, interface number 0 [ 112.645103][ T6586] smsusb:siano_media_device_register: media controller created [ 112.648241][ T6586] ** replaying previous printk message ** [ 112.648241][ T6586] ------------[ cut here ]------------ [ 112.648293][ T6586] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 112.648800][ T6586] WARNING: CPU: 1 PID: 6586 at drivers/usb/core/urb.c:504 usb_submit_urb+0xa24/0x1470 [ 112.655620][ T6586] Modules linked in: [ 112.656761][ T6586] CPU: 1 UID: 0 PID: 6586 Comm: kworker/1:4 Not tainted 6.16.0-rc7-syzkaller-00099-g82af5ea7c611 #0 PREEMPT [ 112.660161][ T6586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 112.662965][ T6586] Workqueue: usb_hub_wq hub_event [ 112.664401][ T6586] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 112.666598][ T6586] pc : usb_submit_urb+0xa24/0x1470 [ 112.668072][ T6586] lr : usb_submit_urb+0xa24/0x1470 [ 112.669469][ T6586] sp : ffff80009fe36900 [ 112.670639][ T6586] x29: ffff80009fe36940 x28: 0000000000000000 x27: ffff80008c9436ec [ 112.672849][ T6586] x26: ffff0000d35da220 x25: ffff80008c9436e0 x24: 0000000000000000 [ 112.675168][ T6586] x23: ffff80008c94a460 x22: dfff800000000000 x21: 0000000000000003 [ 112.677369][ T6586] x20: 0000000000000820 x19: ffff0000cdf98800 x18: 00000000ffffffff [ 112.679613][ T6586] x17: 0000000000000000 x16: ffff80008ae69508 x15: ffff700011ee0158 [ 112.681872][ T6586] x14: 1ffff00011ee0158 x13: 0000000000000004 x12: ffffffffffffffff [ 112.684133][ T6586] x11: ffff700011ee0158 x10: 0000000000ff0100 x9 : 6f82aca3931c2800 [ 112.686388][ T6586] x8 : 6f82aca3931c2800 x7 : 0000000000000001 x6 : 0000000000000001 [ 112.688644][ T6586] x5 : ffff80009fe36258 x4 : ffff80008f776bc0 x3 : ffff80008054bdfc [ 112.690891][ T6586] x2 : 0000000000000000 x1 : 0000000100000000 x0 : 0000000000000000 [ 112.693110][ T6586] Call trace: [ 112.694037][ T6586] usb_submit_urb+0xa24/0x1470 (P) [ 112.695568][ T6586] smsusb_submit_urb+0x20c/0x2f8 [ 112.697001][ T6586] smsusb_start_streaming+0x34/0x2e0 [ 112.698476][ T6586] smsusb_probe+0x139c/0x1a04 [ 112.699804][ T6586] usb_probe_interface+0x584/0xa44 [ 112.701331][ T6586] really_probe+0x394/0x910 [ 112.702636][ T6586] __driver_probe_device+0x180/0x2d4 [ 112.704143][ T6586] driver_probe_device+0x78/0x330 [ 112.705596][ T6586] __device_attach_driver+0x290/0x4e0 [ 112.707106][ T6586] bus_for_each_drv+0x220/0x2b4 [ 112.708520][ T6586] __device_attach+0x26c/0x388 [ 112.709860][ T6586] device_initial_probe+0x24/0x34 [ 112.711242][ T6586] bus_probe_device+0x178/0x240 [ 112.712666][ T6586] device_add+0x71c/0xa60 [ 112.713926][ T6586] usb_set_configuration+0x1640/0x1bac [ 112.715492][ T6586] usb_generic_driver_probe+0x8c/0x144 [ 112.717052][ T6586] usb_probe_device+0x1a4/0x348 [ 112.718455][ T6586] really_probe+0x394/0x910 [ 112.719708][ T6586] __driver_probe_device+0x180/0x2d4 [ 112.721209][ T6586] driver_probe_device+0x78/0x330 [ 112.722604][ T6586] __device_attach_driver+0x290/0x4e0 [ 112.724096][ T6586] bus_for_each_drv+0x220/0x2b4 [ 112.725469][ T6586] __device_attach+0x26c/0x388 [ 112.726804][ T6586] device_initial_probe+0x24/0x34 [ 112.728200][ T6586] bus_probe_device+0x178/0x240 [ 112.729570][ T6586] device_add+0x71c/0xa60 [ 112.730803][ T6586] usb_new_device+0x7f0/0x1220 [ 112.732116][ T6586] hub_event+0x211c/0x3c78 [ 112.733396][ T6586] process_one_work+0x7e8/0x155c [ 112.734733][ T6586] worker_thread+0x958/0xed8 [ 112.736059][ T6586] kthread+0x5fc/0x75c [ 112.737306][ T6586] ret_from_fork+0x10/0x20 [ 112.738641][ T6586] irq event stamp: 41000 [ 112.739836][ T6586] hardirqs last enabled at (40999): [] __console_unlock+0x70/0xc4 [ 112.742407][ T6586] hardirqs last disabled at (41000): [] el1_brk64+0x1c/0x48 [ 112.744840][ T6586] softirqs last enabled at (40978): [] handle_softirqs+0xaf8/0xc88 [ 112.747644][ T6586] softirqs last disabled at (40959): [] __do_softirq+0x14/0x20 [ 112.750361][ T6586] ---[ end trace 0000000000000000 ]--- [ 112.754883][ T6586] smsusb:smsusb_start_ ** replaying previous printk message ** [ 112.754883][ T6586] smsusb:smsusb_start_streaming: smsusb_submit_urb(...) failed [ 112.754976][ T6586] smsusb:smsusb_init_device: smsusb_start_streaming(...) failed [ 112.755930][ T6586] ------------[ cut here ]------------ [ 112.755947][ T6586] WARNING: CPU: 1 PID: 6586 at mm/slub.c:4753 free_large_kmalloc+0x138/0x1f4 [ 112.765811][ T6586] Modules linked in: [ 112.767068][ T6586] CPU: 1 UID: 0 PID: 6586 Comm: kworker/1:4 Tainted: G W 6.16.0-rc7-syzkaller-00099-g82af5ea7c611 #0 PREEMPT [ 112.771149][ T6586] Tainted: [W]=WARN [ 112.772261][ T6586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 112.775192][ T6586] Workqueue: usb_hub_wq hub_event [ 112.776620][ T6586] pstate: 20400005 (nzCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 112.778821][ T6586] pc : free_large_kmalloc+0x138/0x1f4 [ 112.780394][ T6586] lr : kfree+0x25c/0x474 [ 112.781579][ T6586] sp : ffff80009fe36930 [ 112.782777][ T6586] x29: ffff80009fe36930 x28: ffff80008cd06fd8 x27: ffff0000de4443f0 [ 112.785144][ T6586] x26: 1fffe0001bc88801 x25: ffff0000c6849e80 x24: 1fffe00019e4421e [ 112.787590][ T6586] x23: dfff800000000000 x22: ffff0000e6662000 x21: dfff800000000000 [ 112.789909][ T6586] x20: fffffdffc3999880 x19: fffffdffc3999880 x18: 00000000ffffffff [ 112.792263][ T6586] x17: ffff800093376000 x16: ffff80008af01c68 x15: 0000000000000001 [ 112.794551][ T6586] x14: 1fffe00019bf3100 x13: 0000000000000000 x12: 0000000000000000 [ 112.797024][ T6586] x11: ffff600019bf3101 x10: 0000000000ff0100 x9 : 00000000f8000000 [ 112.799362][ T6586] x8 : 00000000ff000000 x7 : ffff800086589ffc x6 : ffff80008657a554 [ 112.801778][ T6586] x5 : ffff0000d851dd58 x4 : ffff80009fe367b8 x3 : ffff80008659e38c [ 112.804203][ T6586] x2 : 0000000000000001 x1 : ffff80008ec75e8a x0 : fffffdffc3999880 [ 112.806671][ T6586] Call trace: [ 112.807584][ T6586] free_large_kmalloc+0x138/0x1f4 (P) [ 112.809163][ T6586] kfree+0x25c/0x474 [ 112.810259][ T6586] usb_free_urb+0xd0/0x140 [ 112.811604][ T6586] smsusb_term_device+0x19c/0x32c [ 112.813116][ T6586] smsusb_probe+0x1490/0x1a04 [ 112.814433][ T6586] usb_probe_interface+0x584/0xa44 [ 112.815945][ T6586] really_probe+0x394/0x910 [ 112.817258][ T6586] __driver_probe_device+0x180/0x2d4 [ 112.818700][ T6586] driver_probe_device+0x78/0x330 [ 112.820206][ T6586] __device_attach_driver+0x290/0x4e0 [ 112.821785][ T6586] bus_for_each_drv+0x220/0x2b4 [ 112.823195][ T6586] __device_attach+0x26c/0x388 [ 112.824541][ T6586] device_initial_probe+0x24/0x34 [ 112.825978][ T6586] bus_probe_device+0x178/0x240 [ 112.827418][ T6586] device_add+0x71c/0xa60 [ 112.828689][ T6586] usb_set_configuration+0x1640/0x1bac [ 112.830220][ T6586] usb_generic_driver_probe+0x8c/0x144 [ 112.831732][ T6586] usb_probe_device+0x1a4/0x348 [ 112.833160][ T6586] really_probe+0x394/0x910 [ 112.834469][ T6586] __driver_probe_device+0x180/0x2d4 [ 112.835978][ T6586] driver_probe_device+0x78/0x330 [ 112.837543][ T6586] __device_attach_driver+0x290/0x4e0 [ 112.839068][ T6586] bus_for_each_drv+0x220/0x2b4 [ 112.840472][ T6586] __device_attach+0x26c/0x388 [ 112.841804][ T6586] device_initial_probe+0x24/0x34 [ 112.843268][ T6586] bus_probe_device+0x178/0x240 [ 112.844729][ T6586] device_add+0x71c/0xa60 [ 112.846004][ T6586] usb_new_device+0x7f0/0x1220 [ 112.847474][ T6586] hub_event+0x211c/0x3c78 [ 112.848780][ T6586] process_one_work+0x7e8/0x155c [ 112.850212][ T6586] worker_thread+0x958/0xed8 [ 112.851564][ T6586] kthread+0x5fc/0x75c [ 112.852720][ T6586] ret_from_fork+0x10/0x20 [ 112.854039][ T6586] irq event stamp: 41710 [ 112.855252][ T6586] hardirqs last enabled at (41709): [] kasan_quarantine_put+0x1a0/0x1c8 [ 112.858136][ T6586] hardirqs last disabled at (41710): [] el1_brk64+0x1c/0x48 [ 112.860659][ T6586] softirqs last enabled at (41210): [] handle_softirqs+0xaf8/0xc88 [ 112.863372][ T6586] softirqs last disabled at (41003): [] __do_softirq+0x14/0x20 [ 112.865925][ T6586] ---[ end trace 0000000000000000 ]--- [ 112.874415][ T6586] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff86099 pfn:0x126662 [ 112.874534][ T6586] flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff) [ 112.874564][ T6586] raw: 05ffc00000000000 0000000000000000 dead000000000122 0000000000000000 [ 112.874586][ T6586] raw: 0000000ffff86099 0000000000000000 00000000ffffffff 0000000000000000 [ 112.874605][ T6586] page dumped because: Not a kmalloc allocation [ 112.877434][ T6586] smsusb:smsusb_probe: Device initialized with return code -22 [ 112.895394][ T6586] smsusb 1-1:0.0: probe with driver smsusb failed with error -22 [ 112.899767][ T6586] usb 1-1: USB disconnect, device number 2 [ 113.426566][ T2315] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 113.576668][ T2315] usb 1-1: Using ep0 maxpacket: 32 [ 113.579592][ T2315] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 113.579664][ T2315] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 113.579689][ T2315] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA9, changing to 0x89 [ 113.579715][ T2315] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 255, changing to 11 [ 113.579741][ T2315] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 113.579767][ T2315] usb 1-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 113.582403][ T2315] usb 1-1: New USB device found, idVendor=2040, idProduct=5500, bcdDevice=a9.c8 [ 113.582440][ T2315] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.582463][ T2315] usb 1-1: Product: syz [ 113.582483][ T2315] usb 1-1: Manufacturer: syz [ 113.582503][ T2315] usb 1-1: SerialNumber: syz [ 113.584742][ T2315] usb 1-1: config 0 descriptor?? [ 113.586165][ T7490] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 113.791910][ T2315] smsusb:smsusb_probe: board id=8, interface number 0 [ 113.793856][ T2315] smsusb:siano_med ** replaying previous printk message ** [ 113.793856][ T2315] smsusb:siano_media_device_register: media controller created [ 113.794365][ T2315] ------------[ cut here ]------------ [ 113.794386][ T2315] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 113.794881][ T2315] WARNING: CPU: 0 PID: 2315 at drivers/usb/core/urb.c:504 usb_submit_urb+0xa24/0x1470 [ 113.804090][ T2315] Modules linked in: [ 113.805197][ T2315] CPU: 0 UID: 0 PID: 2315 Comm: kworker/0:2 Tainted: G W 6.16.0-rc7-syzkaller-00099-g82af5ea7c611 #0 PREEMPT [ 113.808886][ T2315] Tainted: [W]=WARN [ 113.810017][ T2315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 113.812936][ T2315] Workqueue: usb_hub_wq hub_event [ 113.814402][ T2315] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 113.816682][ T2315] pc : usb_submit_urb+0xa24/0x1470 [ 113.818204][ T2315] lr : usb_submit_urb+0xa24/0x1470 [ 113.819668][ T2315] sp : ffff8000a1456900 [ 113.820810][ T2315] x29: ffff8000a1456940 x28: 0000000000000000 x27: ffff80008c9436ec [ 113.823086][ T2315] x26: ffff0000c229e700 x25: ffff80008c9436e0 x24: 0000000000000000 [ 113.825353][ T2315] x23: ffff80008c94a460 x22: dfff800000000000 x21: 0000000000000003 [ 113.827611][ T2315] x20: 0000000000000820 x19: ffff0000c8373900 x18: 1fffe000337d1c76 [ 113.829918][ T2315] x17: 0000000000000000 x16: ffff80008af01c68 x15: 0000000000000001 [ 113.832168][ T2315] x14: 1fffe000337d1ce2 x13: 0000000000000000 x12: 0000000000000000 [ 113.834467][ T2315] x11: ffff6000337d1ce3 x10: 0000000000ff0100 x9 : bc9c6c07ce55c400 [ 113.836785][ T2315] x8 : bc9c6c07ce55c400 x7 : 0000000000000001 x6 : 0000000000000001 [ 113.839116][ T2315] x5 : ffff8000a1456258 x4 : ffff80008f776bc0 x3 : ffff8000807bba4c [ 113.841385][ T2315] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000 [ 113.843710][ T2315] Call trace: [ 113.844633][ T2315] usb_submit_urb+0xa24/0x1470 (P) [ 113.846134][ T2315] smsusb_submit_urb+0x20c/0x2f8 [ 113.847557][ T2315] smsusb_start_streaming+0x34/0x2e0 [ 113.848992][ T2315] smsusb_probe+0x139c/0x1a04 [ 113.850293][ T2315] usb_probe_interface+0x584/0xa44 [ 113.851794][ T2315] really_probe+0x394/0x910 [ 113.853079][ T2315] __driver_probe_device+0x180/0x2d4 [ 113.854536][ T2315] driver_probe_device+0x78/0x330 [ 113.856006][ T2315] __device_attach_driver+0x290/0x4e0 [ 113.857480][ T2315] bus_for_each_drv+0x220/0x2b4 [ 113.858846][ T2315] __device_attach+0x26c/0x388 [ 113.860176][ T2315] device_initial_probe+0x24/0x34 [ 113.861610][ T2315] bus_probe_device+0x178/0x240 [ 113.862966][ T2315] device_add+0x71c/0xa60 [ 113.864187][ T2315] usb_set_configuration+0x1640/0x1bac [ 113.865711][ T2315] usb_generic_driver_probe+0x8c/0x144 [ 113.867294][ T2315] usb_probe_device+0x1a4/0x348 [ 113.868654][ T2315] really_probe+0x394/0x910 [ 113.870021][ T2315] __driver_probe_device+0x180/0x2d4 [ 113.871500][ T2315] driver_probe_device+0x78/0x330 [ 113.872907][ T2315] __device_attach_driver+0x290/0x4e0 [ 113.874403][ T2315] bus_for_each_drv+0x220/0x2b4 [ 113.875770][ T2315] __device_attach+0x26c/0x388 [ 113.877084][ T2315] device_initial_probe+0x24/0x34 [ 113.878483][ T2315] bus_probe_device+0x178/0x240 [ 113.879882][ T2315] device_add+0x71c/0xa60 [ 113.881140][ T2315] usb_new_device+0x7f0/0x1220 [ 113.882595][ T2315] hub_event+0x211c/0x3c78 [ 113.883805][ T2315] process_one_work+0x7e8/0x155c [ 113.885147][ T2315] worker_thread+0x958/0xed8 [ 113.886552][ T2315] kthread+0x5fc/0x75c [ 113.887667][ T2315] ret_from_fork+0x10/0x20 [ 113.888963][ T2315] irq event stamp: 32056 [ 113.890200][ T2315] hardirqs last enabled at (32055): [] __console_unlock+0x70/0xc4 [ 113.892894][ T2315] hardirqs last disabled at (32056): [] el1_brk64+0x1c/0x48 [ 113.895329][ T2315] softirqs last enabled at (28814): [] handle_softirqs+0xaf8/0xc88 [ 113.898128][ T2315] softirqs last disabled at (28805): [] __do_softirq+0x14/0x20 [ 113.900804][ T2315] ---[ end trace 0000000000000000 ]--- [ 113.908402][ T2315] smsusb:smsusb_start_streaming: smsusb_submit_urb(...) failed [ 113.908472][ T2315] smsusb:smsusb_init_device: smsusb_start_streaming(...) failed [ 113.909209][ T2315] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff86099 pfn:0x126662 [ 113.909238][ T2315] flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff) [ 113.909265][ T2315] raw: 05ffc00000000000 0000000000000000 dead000000000122 0000000000000000 [ 113.909288][ T2315] raw: 0000000ffff86099 0000000000000000 00000000ffffffff 0000000000000000 [ 113.909306][ T2315] page dumped because: Not a kmalloc allocation [ 113.910107][ T2315] smsusb:smsusb_probe: Device initialized with return code -22 [ 113.928209][ T2315] smsusb 1-1:0.0: probe with driver smsusb failed with error -22 [ 113.930724][ T2315] usb 1-1: USB disconnect, device number 3 [ 114.556567][ T2315] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 114.706567][ T2315] usb 1-1: Using ep0 maxpacket: 32 [ 114.710230][ T2315] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 114.710307][ T2315] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 114.710339][ T2315] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA9, changing to 0x89 [ 114.710366][ T2315] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 255, changing to 11 [ 114.710393][ T2315] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 114.710420][ T2315] usb 1-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 114.713389][ T2315] usb 1-1: New USB device found, idVendor=2040, idProduct=5500, bcdDevice=a9.c8 [ 114.713425][ T2315] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.713449][ T2315] usb 1-1: Product: syz [ 114.713469][ T2315] usb 1-1: Manufacturer: syz [ 114.713489][ T2315] usb 1-1: SerialNumber: syz [ 114.715622][ T2315] usb 1-1: config 0 descriptor?? [ 114.716722][ T7493] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 114.920192][ T2315] smsusb:smsusb_probe: board id=8, interface number 0 [ 114.92 ** replaying previous printk message ** [ 114.923670][ T2315] smsusb:siano_media_device_register: media controller created [ 114.924189][ T2315] ------------[ cut here ]------------ [ 114.924218][ T2315] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 114.924720][ T2315] WARNING: CPU: 0 PID: 2315 at drivers/usb/core/urb.c:504 usb_submit_urb+0xa24/0x1470 [ 114.934200][ T2315] Modules linked in: [ 114.935327][ T2315] CPU: 0 UID: 0 PID: 2315 Comm: kworker/0:2 Tainted: G W 6.16.0-rc7-syzkaller-00099-g82af5ea7c611 #0 PREEMPT [ 114.939057][ T2315] Tainted: [W]=WARN [ 114.940144][ T2315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 114.943120][ T2315] Workqueue: usb_hub_wq hub_event [ 114.944659][ T2315] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 114.946859][ T2315] pc : usb_submit_urb+0xa24/0x1470 [ 114.948276][ T2315] lr : usb_submit_urb+0xa24/0x1470 [ 114.949796][ T2315] sp : ffff8000a1456900 [ 114.951001][ T2315] x29: ffff8000a1456940 x28: 0000000000000000 x27: ffff80008c9436ec [ 114.953265][ T2315] x26: ffff0000ca327800 x25: ffff80008c9436e0 x24: 0000000000000000 [ 114.955583][ T2315] x23: ffff80008c94a460 x22: dfff800000000000 x21: 0000000000000003 [ 114.957863][ T2315] x20: 0000000000000820 x19: ffff0000c4638b00 x18: 1fffe000337d1c76 [ 114.960299][ T2315] x17: 0000000000000000 x16: ffff80008ae69508 x15: ffff700011ee0158 [ 114.962621][ T2315] x14: 1ffff00011ee0158 x13: 0000000000000004 x12: ffffffffffffffff [ 114.965000][ T2315] x11: ffff700011ee0158 x10: 0000000000ff0100 x9 : bc9c6c07ce55c400 [ 114.967398][ T2315] x8 : bc9c6c07ce55c400 x7 : 0000000000000001 x6 : 0000000000000001 [ 114.969703][ T2315] x5 : ffff8000a1456258 x4 : ffff80008f776bc0 x3 : ffff80008054bdfc [ 114.971991][ T2315] x2 : 0000000000000000 x1 : 0000000100000000 x0 : 0000000000000000 [ 114.974288][ T2315] Call trace: [ 114.975219][ T2315] usb_submit_urb+0xa24/0x1470 (P) [ 114.976698][ T2315] smsusb_submit_urb+0x20c/0x2f8 [ 114.978145][ T2315] smsusb_start_streaming+0x34/0x2e0 [ 114.979680][ T2315] smsusb_probe+0x139c/0x1a04 [ 114.981089][ T2315] usb_probe_interface+0x584/0xa44 [ 114.982560][ T2315] really_probe+0x394/0x910 [ 114.983808][ T2315] __driver_probe_device+0x180/0x2d4 [ 114.985307][ T2315] driver_probe_device+0x78/0x330 [ 114.986692][ T2315] __device_attach_driver+0x290/0x4e0 [ 114.988190][ T2315] bus_for_each_drv+0x220/0x2b4 [ 114.989549][ T2315] __device_attach+0x26c/0x388 [ 114.990975][ T2315] device_initial_probe+0x24/0x34 [ 114.992483][ T2315] bus_probe_device+0x178/0x240 [ 114.993928][ T2315] device_add+0x71c/0xa60 [ 114.995280][ T2315] usb_set_configuration+0x1640/0x1bac [ 114.996875][ T2315] usb_generic_driver_probe+0x8c/0x144 [ 114.998491][ T2315] usb_probe_device+0x1a4/0x348 [ 114.999931][ T2315] really_probe+0x394/0x910 [ 115.001199][ T2315] __driver_probe_device+0x180/0x2d4 [ 115.002674][ T2315] driver_probe_device+0x78/0x330 [ 115.004139][ T2315] __device_attach_driver+0x290/0x4e0 [ 115.005601][ T2315] bus_for_each_drv+0x220/0x2b4 [ 115.007052][ T2315] __device_attach+0x26c/0x388 [ 115.008375][ T2315] device_initial_probe+0x24/0x34 [ 115.009767][ T2315] bus_probe_device+0x178/0x240 [ 115.011200][ T2315] device_add+0x71c/0xa60 [ 115.012414][ T2315] usb_new_device+0x7f0/0x1220 [ 115.013856][ T2315] hub_event+0x211c/0x3c78 [ 115.015120][ T2315] process_one_work+0x7e8/0x155c [ 115.016511][ T2315] worker_thread+0x958/0xed8 [ 115.017806][ T2315] kthread+0x5fc/0x75c [ 115.018921][ T2315] ret_from_fork+0x10/0x20 [ 115.020206][ T2315] irq event stamp: 37964 [ 115.021415][ T2315] hardirqs last enabled at (37963): [] __console_unlock+0x70/0xc4 [ 115.024064][ T2315] hardirqs last disabled at (37964): [] el1_brk64+0x1c/0x48 [ 115.026517][ T2315] softirqs last enabled at (34986): [] local_bh_enable+0x10/0x34 [ 115.029189][ T2315] softirqs last disabled at (34970): [] local_bh_disable+0x10/0x34 [ 115.031861][ T2315] ---[ end trace 0000000000000000 ]--- [ 115.033924][ T2315] smsusb:smsusb_start_streaming: smsusb_submit_urb(...) failed [ 115.034007][ T2315] smsusb:smsusb_init_device: smsusb_start_streaming(...) failed [ 115.034738][ T2315] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff86099 pfn:0x126662 [ 115.034773][ T2315] flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff) [ 115.034806][ T2315] raw: 05ffc00000000000 0000000000000000 dead000000000122 0000000000000000 [ 115.034834][ T2315] raw: 0000000ffff86099 0000000000000000 00000000ffffffff 0000000000000000 [ 115.034858][ T2315] page dumped because: Not a kmalloc allocation [ 115.036060][ T2315] smsusb:smsusb_probe: Device initialized with return code -22 [ 115.062797][ T2315] smsusb 1-1:0.0: probe with driver smsusb failed with error -22 [ 115.070792][ T2315] usb 1-1: USB disconnect, device number 4 [ 115.666585][ T1818] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 115.816584][ T1818] usb 1-1: Using ep0 maxpacket: 32 [ 115.819123][ T1818] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 115.819191][ T1818] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 115.819299][ T1818] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA9, changing to 0x89 [ 115.819328][ T1818] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 255, changing to 11 [ 115.819355][ T1818] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 115.819383][ T1818] usb 1-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 115.821323][ T1818] usb 1-1: New USB device found, idVendor=2040, idProduct=5500, bcdDevice=a9.c8 [ 115.821357][ T1818] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.821380][ T1818] usb 1-1: Product: syz [ 115.821399][ T1818] usb 1-1: Manufacturer: syz [ 115.821419][ T1818] usb 1-1: SerialNumber: syz [ 115.823601][ T1818] usb 1-1: config 0 descriptor?? [ 115.826736][ T7496] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 116.030118][ T1818] smsusb:smsusb_probe: board id=8, interface number 0 [ 116.034463][ T1818] smsusb:siano_media_device_register: media controller created [ 116.037390][ T18 ** replaying previous printk message ** [ 116.037390][ T1818] ------------[ cut here ]------------ [ 116.037436][ T1818] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 116.037936][ T1818] WARNING: CPU: 1 PID: 1818 at drivers/usb/core/urb.c:504 usb_submit_urb+0xa24/0x1470 [ 116.045152][ T1818] Modules linked in: [ 116.046290][ T1818] CPU: 1 UID: 0 PID: 1818 Comm: kworker/1:2 Tainted: G W 6.16.0-rc7-syzkaller-00099-g82af5ea7c611 #0 PREEMPT [ 116.050078][ T1818] Tainted: [W]=WARN [ 116.051211][ T1818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 116.054074][ T1818] Workqueue: usb_hub_wq hub_event [ 116.055448][ T1818] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 116.057631][ T1818] pc : usb_submit_urb+0xa24/0x1470 [ 116.059206][ T1818] lr : usb_submit_urb+0xa24/0x1470 [ 116.060615][ T1818] sp : ffff80009ff76900 [ 116.061816][ T1818] x29: ffff80009ff76940 x28: 0000000000000000 x27: ffff80008c9436ec [ 116.064222][ T1818] x26: ffff0000c22e7580 x25: ffff80008c9436e0 x24: 0000000000000000 [ 116.066501][ T1818] x23: ffff80008c94a460 x22: dfff800000000000 x21: 0000000000000003 [ 116.068845][ T1818] x20: 0000000000000820 x19: ffff0000dbf61b00 x18: 1fffe000337d6476 [ 116.071168][ T1818] x17: 0000000000000000 x16: ffff80008ae69508 x15: ffff700011ee0158 [ 116.073515][ T1818] x14: 1ffff00011ee0158 x13: 0000000000000004 x12: ffffffffffffffff [ 116.075828][ T1818] x11: ffff700011ee0158 x10: 0000000000ff0100 x9 : 8e279ad8329a5600 [ 116.078073][ T1818] x8 : 8e279ad8329a5600 x7 : 0000000000000001 x6 : 0000000000000001 [ 116.080316][ T1818] x5 : ffff80009ff76258 x4 : ffff80008f776bc0 x3 : ffff80008054bdfc [ 116.082642][ T1818] x2 : 0000000000000000 x1 : 0000000100000000 x0 : 0000000000000000 [ 116.084999][ T1818] Call trace: [ 116.085870][ T1818] usb_submit_urb+0xa24/0x1470 (P) [ 116.087381][ T1818] smsusb_submit_urb+0x20c/0x2f8 [ 116.088723][ T1818] smsusb_start_streaming+0x34/0x2e0 [ 116.090297][ T1818] smsusb_probe+0x139c/0x1a04 [ 116.091634][ T1818] usb_probe_interface+0x584/0xa44 [ 116.093128][ T1818] really_probe+0x394/0x910 [ 116.094429][ T1818] __driver_probe_device+0x180/0x2d4 [ 116.095986][ T1818] driver_probe_device+0x78/0x330 [ 116.097378][ T1818] __device_attach_driver+0x290/0x4e0 [ 116.098900][ T1818] bus_for_each_drv+0x220/0x2b4 [ 116.100277][ T1818] __device_attach+0x26c/0x388 [ 116.101608][ T1818] device_initial_probe+0x24/0x34 [ 116.103002][ T1818] bus_probe_device+0x178/0x240 [ 116.104408][ T1818] device_add+0x71c/0xa60 [ 116.105684][ T1818] usb_set_configuration+0x1640/0x1bac [ 116.107240][ T1818] usb_generic_driver_probe+0x8c/0x144 [ 116.108841][ T1818] usb_probe_device+0x1a4/0x348 [ 116.110248][ T1818] really_probe+0x394/0x910 [ 116.111459][ T1818] __driver_probe_device+0x180/0x2d4 [ 116.112986][ T1818] driver_probe_device+0x78/0x330 [ 116.114480][ T1818] __device_attach_driver+0x290/0x4e0 [ 116.115977][ T1818] bus_for_each_drv+0x220/0x2b4 [ 116.117333][ T1818] __device_attach+0x26c/0x388 [ 116.118689][ T1818] device_initial_probe+0x24/0x34 [ 116.120129][ T1818] bus_probe_device+0x178/0x240 [ 116.121516][ T1818] device_add+0x71c/0xa60 [ 116.122743][ T1818] usb_new_device+0x7f0/0x1220 [ 116.124030][ T1818] hub_event+0x211c/0x3c78 [ 116.125287][ T1818] process_one_work+0x7e8/0x155c [ 116.126618][ T1818] worker_thread+0x958/0xed8 [ 116.127939][ T1818] kthread+0x5fc/0x75c [ 116.129107][ T1818] ret_from_fork+0x10/0x20 [ 116.130490][ T1818] irq event stamp: 105992 [ 116.131718][ T1818] hardirqs last enabled at (105991): [] __console_unlock+0x70/0xc4 [ 116.134543][ T1818] hardirqs last disabled at (105992): [] el1_brk64+0x1c/0x48 [ 116.137175][ T1818] softirqs last enabled at (102576): [] handle_softirqs+0xaf8/0xc88 [ 116.139910][ T1818] softirqs last disabled at (102561): [] __do_softirq+0x14/0x20 [ 116.142485][ T1818] ---[ end trace 0000000000000000 ]--- [ 116.144765][ T1818] smsusb:smsusb_start_streaming: smsusb_submit_urb(...) failed [ 116.144826][ T1818] smsusb:smsusb_init_device: smsusb_start_streaming(...) failed [ 116.145577][ T1818] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff86099 pfn:0x126662 [ 116.145605][ T1818] flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff) [ 116.145633][ T1818] raw: 05ffc00000000000 0000000000000000 dead000000000122 0000000000000000 [ 116.145655][ T1818] raw: 0000000ffff86099 0000000000000000 00000000ffffffff 0000000000000000 [ 116.145673][ T1818] page dumped because: Not a kmalloc allocation [ 116.146989][ T1818] smsusb:smsusb_probe: Device initialized with return code -22 [ 116.168086][ T1818] smsusb 1-1:0.0: probe with driver smsusb failed with error -22 [ 116.174160][ T1818] usb 1-1: USB disconnect, device number 5 [ 116.786542][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 116.937046][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 116.938371][ T9] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 116.938419][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 116.938444][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA9, changing to 0x89 [ 116.938470][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 255, changing to 11 [ 116.938496][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 116.938522][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 116.940078][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=5500, bcdDevice=a9.c8 [ 116.940111][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.940134][ T9] usb 1-1: Product: syz [ 116.940154][ T9] usb 1-1: Manufacturer: syz [ 116.940174][ T9] usb 1-1: SerialNumber: syz [ 116.942484][ T9] usb 1-1: config 0 descriptor?? [ 116.945409][ T7499] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 117.149392][ T9] smsusb:smsusb_probe: board id=8, interface number 0 [ 117.153127][ T9] smsusb:siano_media_device_register: media contro ** replaying previous printk message ** [ 117.153127][ T9] smsusb:siano_media_device_register: media controller created [ 117.154455][ T9] ------------[ cut here ]------------ [ 117.154479][ T9] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 117.154999][ T9] WARNING: CPU: 0 PID: 9 at drivers/usb/core/urb.c:504 usb_submit_urb+0xa24/0x1470 [ 117.163917][ T9] Modules linked in: [ 117.165017][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Tainted: G W 6.16.0-rc7-syzkaller-00099-g82af5ea7c611 #0 PREEMPT [ 117.168561][ T9] Tainted: [W]=WARN [ 117.169569][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 117.172441][ T9] Workqueue: usb_hub_wq hub_event [ 117.174015][ T9] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 117.176233][ T9] pc : usb_submit_urb+0xa24/0x1470 [ 117.177606][ T9] lr : usb_submit_urb+0xa24/0x1470 [ 117.179105][ T9] sp : ffff800097a66900 [ 117.180250][ T9] x29: ffff800097a66940 x28: 0000000000000000 x27: ffff80008c9436ec [ 117.182444][ T9] x26: ffff0000c22fdd40 x25: ffff80008c9436e0 x24: 0000000000000000 [ 117.184655][ T9] x23: ffff80008c94a460 x22: dfff800000000000 x21: 0000000000000003 [ 117.186924][ T9] x20: 0000000000000820 x19: ffff0000c64c3000 x18: 00000000ffffffff [ 117.189189][ T9] x17: 0000000000000000 x16: ffff80008ae69508 x15: ffff700011ee0158 [ 117.191398][ T9] x14: 1ffff00011ee0158 x13: 0000000000000004 x12: ffffffffffffffff [ 117.193661][ T9] x11: ffff700011ee0158 x10: 0000000000ff0100 x9 : 625c97877c998e00 [ 117.195901][ T9] x8 : 625c97877c998e00 x7 : 0000000000000001 x6 : 0000000000000001 [ 117.198066][ T9] x5 : ffff800097a66258 x4 : ffff80008f776bc0 x3 : ffff80008054bdfc [ 117.200251][ T9] x2 : 0000000000000000 x1 : 0000000100000000 x0 : 0000000000000000 [ 117.202494][ T9] Call trace: [ 117.203456][ T9] usb_submit_urb+0xa24/0x1470 (P) [ 117.204814][ T9] smsusb_submit_urb+0x20c/0x2f8 [ 117.206213][ T9] smsusb_start_streaming+0x34/0x2e0 [ 117.207668][ T9] smsusb_probe+0x139c/0x1a04 [ 117.208918][ T9] usb_probe_interface+0x584/0xa44 [ 117.210275][ T9] really_probe+0x394/0x910 [ 117.211547][ T9] __driver_probe_device+0x180/0x2d4 [ 117.212970][ T9] driver_probe_device+0x78/0x330 [ 117.214368][ T9] __device_attach_driver+0x290/0x4e0 [ 117.215868][ T9] bus_for_each_drv+0x220/0x2b4 [ 117.217172][ T9] __device_attach+0x26c/0x388 [ 117.218459][ T9] device_initial_probe+0x24/0x34 [ 117.219899][ T9] bus_probe_device+0x178/0x240 [ 117.221265][ T9] device_add+0x71c/0xa60 [ 117.222446][ T9] usb_set_configuration+0x1640/0x1bac [ 117.223945][ T9] usb_generic_driver_probe+0x8c/0x144 [ 117.225422][ T9] usb_probe_device+0x1a4/0x348 [ 117.226787][ T9] really_probe+0x394/0x910 [ 117.228176][ T9] __driver_probe_device+0x180/0x2d4 [ 117.229675][ T9] driver_probe_device+0x78/0x330 [ 117.231129][ T9] __device_attach_driver+0x290/0x4e0 [ 117.232636][ T9] bus_for_each_drv+0x220/0x2b4 [ 117.233980][ T9] __device_attach+0x26c/0x388 [ 117.235276][ T9] device_initial_probe+0x24/0x34 [ 117.236675][ T9] bus_probe_device+0x178/0x240 [ 117.237925][ T9] device_add+0x71c/0xa60 [ 117.239121][ T9] usb_new_device+0x7f0/0x1220 [ 117.240479][ T9] hub_event+0x211c/0x3c78 [ 117.241688][ T9] process_one_work+0x7e8/0x155c [ 117.243068][ T9] worker_thread+0x958/0xed8 [ 117.244370][ T9] kthread+0x5fc/0x75c [ 117.245577][ T9] ret_from_fork+0x10/0x20 [ 117.246844][ T9] irq event stamp: 175904 [ 117.248085][ T9] hardirqs last enabled at (175903): [] __console_unlock+0x70/0xc4 [ 117.250792][ T9] hardirqs last disabled at (175904): [] el1_brk64+0x1c/0x48 [ 117.253342][ T9] softirqs last enabled at (171860): [] handle_softirqs+0xaf8/0xc88 [ 117.256245][ T9] softirqs last disabled at (171851): [] __do_softirq+0x14/0x20 [ 117.258926][ T9] ---[ end trace 0000000000000000 ]--- [ 117.262845][ T9] smsusb:smsusb_start_streaming: smsusb_submit_urb(...) failed [ 117.262906][ T9] smsusb:smsusb_init_device: smsusb_start_streaming(...) failed [ 117.263644][ T9] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff86099 pfn:0x126662 [ 117.263672][ T9] flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff) [ 117.263699][ T9] raw: 05ffc00000000000 0000000000000000 dead000000000122 0000000000000000 [ 117.263721][ T9] raw: 0000000ffff86099 0000000000000000 00000000ffffffff 0000000000000000 [ 117.263739][ T9] page dumped because: Not a kmalloc allocation [ 117.273742][ T9] smsusb:smsusb_probe: Device initialized with return code -22 [ 117.295482][ T9] smsusb 1-1:0.0: probe with driver smsusb failed with error -22 [ 117.305156][ T9] usb 1-1: USB disconnect, device number 6 1970/01/01 00:01:57 executed programs: 7 [ 117.896922][ T6586] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 118.046548][ T6586] usb 1-1: Using ep0 maxpacket: 32 [ 118.049579][ T6586] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 118.049659][ T6586] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 118.049692][ T6586] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA9, changing to 0x89 [ 118.049718][ T6586] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 255, changing to 11 [ 118.049745][ T6586] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 118.049771][ T6586] usb 1-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 118.051926][ T6586] usb 1-1: New USB device found, idVendor=2040, idProduct=5500, bcdDevice=a9.c8 [ 118.051968][ T6586] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.052015][ T6586] usb 1-1: Product: syz [ 118.052035][ T6586] usb 1-1: Manufacturer: syz [ 118.052055][ T6586] usb 1-1: SerialNumber: syz [ 118.054234][ T6586] usb 1-1: config 0 descriptor?? [ 118.058322][ T7502] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 118.262459][ T6586] smsusb:smsusb_probe: board id=8, interface number 0 [ 118.2638 ** replaying previous printk message ** [ 118.263893][ T6586] smsusb:siano_media_device_register: media controller created [ 118.264395][ T6586] ------------[ cut here ]------------ [ 118.264416][ T6586] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 118.264910][ T6586] WARNING: CPU: 1 PID: 6586 at drivers/usb/core/urb.c:504 usb_submit_urb+0xa24/0x1470 [ 118.274457][ T6586] Modules linked in: [ 118.275624][ T6586] CPU: 1 UID: 0 PID: 6586 Comm: kworker/1:4 Tainted: G W 6.16.0-rc7-syzkaller-00099-g82af5ea7c611 #0 PREEMPT [ 118.279364][ T6586] Tainted: [W]=WARN [ 118.280514][ T6586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 118.283411][ T6586] Workqueue: usb_hub_wq hub_event [ 118.284978][ T6586] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 118.287263][ T6586] pc : usb_submit_urb+0xa24/0x1470 [ 118.288737][ T6586] lr : usb_submit_urb+0xa24/0x1470 [ 118.290236][ T6586] sp : ffff80009fe36900 [ 118.291408][ T6586] x29: ffff80009fe36940 x28: 0000000000000000 x27: ffff80008c9436ec [ 118.293703][ T6586] x26: ffff0000ccd3afe0 x25: ffff80008c9436e0 x24: 0000000000000000 [ 118.296036][ T6586] x23: ffff80008c94a460 x22: dfff800000000000 x21: 0000000000000003 [ 118.298416][ T6586] x20: 0000000000000820 x19: ffff0000d0246a00 x18: 1fffe000337d6476 [ 118.300685][ T6586] x17: 0000000000000000 x16: ffff80008af01c68 x15: 0000000000000001 [ 118.303081][ T6586] x14: 1fffe000337d64e2 x13: 0000000000000000 x12: 0000000000000000 [ 118.305409][ T6586] x11: ffff6000337d64e3 x10: 0000000000ff0100 x9 : 6f82aca3931c2800 [ 118.307726][ T6586] x8 : 6f82aca3931c2800 x7 : 0000000000000001 x6 : 0000000000000001 [ 118.310060][ T6586] x5 : ffff80009fe36258 x4 : ffff80008f776bc0 x3 : ffff8000807bba4c [ 118.312409][ T6586] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000 [ 118.314769][ T6586] Call trace: [ 118.315693][ T6586] usb_submit_urb+0xa24/0x1470 (P) [ 118.317141][ T6586] smsusb_submit_urb+0x20c/0x2f8 [ 118.318549][ T6586] smsusb_start_streaming+0x34/0x2e0 [ 118.320093][ T6586] smsusb_probe+0x139c/0x1a04 [ 118.321374][ T6586] usb_probe_interface+0x584/0xa44 [ 118.322780][ T6586] really_probe+0x394/0x910 [ 118.324130][ T6586] __driver_probe_device+0x180/0x2d4 [ 118.325684][ T6586] driver_probe_device+0x78/0x330 [ 118.327212][ T6586] __device_attach_driver+0x290/0x4e0 [ 118.328747][ T6586] bus_for_each_drv+0x220/0x2b4 [ 118.330209][ T6586] __device_attach+0x26c/0x388 [ 118.331579][ T6586] device_initial_probe+0x24/0x34 [ 118.333063][ T6586] bus_probe_device+0x178/0x240 [ 118.334504][ T6586] device_add+0x71c/0xa60 [ 118.335736][ T6586] usb_set_configuration+0x1640/0x1bac [ 118.337389][ T6586] usb_generic_driver_probe+0x8c/0x144 [ 118.339015][ T6586] usb_probe_device+0x1a4/0x348 [ 118.340500][ T6586] really_probe+0x394/0x910 [ 118.341818][ T6586] __driver_probe_device+0x180/0x2d4 [ 118.343332][ T6586] driver_probe_device+0x78/0x330 [ 118.344718][ T6586] __device_attach_driver+0x290/0x4e0 [ 118.346314][ T6586] bus_for_each_drv+0x220/0x2b4 [ 118.347689][ T6586] __device_attach+0x26c/0x388 [ 118.349061][ T6586] device_initial_probe+0x24/0x34 [ 118.350481][ T6586] bus_probe_device+0x178/0x240 [ 118.351935][ T6586] device_add+0x71c/0xa60 [ 118.353178][ T6586] usb_new_device+0x7f0/0x1220 [ 118.354524][ T6586] hub_event+0x211c/0x3c78 [ 118.355774][ T6586] process_one_work+0x7e8/0x155c [ 118.357249][ T6586] worker_thread+0x958/0xed8 [ 118.358482][ T6586] kthread+0x5fc/0x75c [ 118.359678][ T6586] ret_from_fork+0x10/0x20 [ 118.361015][ T6586] irq event stamp: 51558 [ 118.362235][ T6586] hardirqs last enabled at (51557): [] __console_unlock+0x70/0xc4 [ 118.365032][ T6586] hardirqs last disabled at (51558): [] el1_brk64+0x1c/0x48 [ 118.367590][ T6586] softirqs last enabled at (48062): [] handle_softirqs+0xaf8/0xc88 [ 118.370374][ T6586] softirqs last disabled at (48047): [] __do_softirq+0x14/0x20 [ 118.373105][ T6586] ---[ end trace 0000000000000000 ]--- [ 118.375531][ T6586] smsusb:smsusb_start_streaming: smsusb_submit_urb(...) failed [ 118.375652][ T6586] smsusb:smsusb_init_device: smsusb_start_streaming(...) failed [ 118.376535][ T6586] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff86099 pfn:0x126662 [ 118.376566][ T6586] flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff) [ 118.376594][ T6586] raw: 05ffc00000000000 0000000000000000 dead000000000122 0000000000000000 [ 118.376616][ T6586] raw: 0000000ffff86099 0000000000000000 00000000ffffffff 0000000000000000 [ 118.376635][ T6586] page dumped because: Not a kmalloc allocation [ 118.377538][ T6586] smsusb:smsusb_probe: Device initialized with return code -22 [ 118.402739][ T6586] smsusb 1-1:0.0: probe with driver smsusb failed with error -22 [ 118.405237][ T6586] usb 1-1: USB disconnect, device number 7 [ 119.016502][ T6586] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 119.166545][ T6586] usb 1-1: Using ep0 maxpacket: 32 [ 119.168975][ T6586] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 119.169048][ T6586] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 119.169078][ T6586] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA9, changing to 0x89 [ 119.169104][ T6586] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 255, changing to 11 [ 119.169131][ T6586] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 119.169157][ T6586] usb 1-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 119.171122][ T6586] usb 1-1: New USB device found, idVendor=2040, idProduct=5500, bcdDevice=a9.c8 [ 119.171157][ T6586] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.171180][ T6586] usb 1-1: Product: syz [ 119.171200][ T6586] usb 1-1: Manufacturer: syz [ 119.171220][ T6586] usb 1-1: SerialNumber: syz [ 119.173405][ T6586] usb 1-1: config 0 descriptor?? [ 119.174891][ T7505] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 119.378880][ T6586] smsusb:smsusb_probe: board id=8, interface number 0 [ 119.382544][ T6586] smsusb:siano_me ** replaying previous printk message ** [ 119.382544][ T6586] smsusb:siano_media_device_register: media controller created [ 119.383070][ T6586] ------------[ cut here ]------------ [ 119.383090][ T6586] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 119.383586][ T6586] WARNING: CPU: 1 PID: 6586 at drivers/usb/core/urb.c:504 usb_submit_urb+0xa24/0x1470 [ 119.392933][ T6586] Modules linked in: [ 119.394079][ T6586] CPU: 1 UID: 0 PID: 6586 Comm: kworker/1:4 Tainted: G W 6.16.0-rc7-syzkaller-00099-g82af5ea7c611 #0 PREEMPT [ 119.397849][ T6586] Tainted: [W]=WARN [ 119.398957][ T6586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 119.401794][ T6586] Workqueue: usb_hub_wq hub_event [ 119.403278][ T6586] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 119.405496][ T6586] pc : usb_submit_urb+0xa24/0x1470 [ 119.406996][ T6586] lr : usb_submit_urb+0xa24/0x1470 [ 119.408501][ T6586] sp : ffff80009fe36900 [ 119.409723][ T6586] x29: ffff80009fe36940 x28: 0000000000000000 x27: ffff80008c9436ec [ 119.412080][ T6586] x26: ffff0000cb7c15e0 x25: ffff80008c9436e0 x24: 0000000000000000 [ 119.414409][ T6586] x23: ffff80008c94a460 x22: dfff800000000000 x21: 0000000000000003 [ 119.416715][ T6586] x20: 0000000000000820 x19: ffff0000c22c8d00 x18: 1fffe000337d6476 [ 119.419008][ T6586] x17: 0000000000000000 x16: ffff80008ae69508 x15: ffff700011ee0158 [ 119.421388][ T6586] x14: 1ffff00011ee0158 x13: 0000000000000004 x12: ffffffffffffffff [ 119.423756][ T6586] x11: ffff700011ee0158 x10: 0000000000ff0100 x9 : 6f82aca3931c2800 [ 119.426116][ T6586] x8 : 6f82aca3931c2800 x7 : 0000000000000001 x6 : 0000000000000001 [ 119.428394][ T6586] x5 : ffff80009fe36258 x4 : ffff80008f776bc0 x3 : ffff80008054bdfc [ 119.430708][ T6586] x2 : 0000000000000000 x1 : 0000000100000000 x0 : 0000000000000000 [ 119.432998][ T6586] Call trace: [ 119.433943][ T6586] usb_submit_urb+0xa24/0x1470 (P) [ 119.435409][ T6586] smsusb_submit_urb+0x20c/0x2f8 [ 119.436753][ T6586] smsusb_start_streaming+0x34/0x2e0 [ 119.438301][ T6586] smsusb_probe+0x139c/0x1a04 [ 119.439592][ T6586] usb_probe_interface+0x584/0xa44 [ 119.441140][ T6586] really_probe+0x394/0x910 [ 119.442353][ T6586] __driver_probe_device+0x180/0x2d4 [ 119.443838][ T6586] driver_probe_device+0x78/0x330 [ 119.445272][ T6586] __device_attach_driver+0x290/0x4e0 [ 119.446731][ T6586] bus_for_each_drv+0x220/0x2b4 [ 119.448089][ T6586] __device_attach+0x26c/0x388 [ 119.449461][ T6586] device_initial_probe+0x24/0x34 [ 119.450914][ T6586] bus_probe_device+0x178/0x240 [ 119.452275][ T6586] device_add+0x71c/0xa60 [ 119.453497][ T6586] usb_set_configuration+0x1640/0x1bac [ 119.455043][ T6586] usb_generic_driver_probe+0x8c/0x144 [ 119.456618][ T6586] usb_probe_device+0x1a4/0x348 [ 119.458002][ T6586] really_probe+0x394/0x910 [ 119.459338][ T6586] __driver_probe_device+0x180/0x2d4 [ 119.460893][ T6586] driver_probe_device+0x78/0x330 [ 119.462313][ T6586] __device_attach_driver+0x290/0x4e0 [ 119.463921][ T6586] bus_for_each_drv+0x220/0x2b4 [ 119.465310][ T6586] __device_attach+0x26c/0x388 [ 119.466685][ T6586] device_initial_probe+0x24/0x34 [ 119.468159][ T6586] bus_probe_device+0x178/0x240 [ 119.469517][ T6586] device_add+0x71c/0xa60 [ 119.470765][ T6586] usb_new_device+0x7f0/0x1220 [ 119.472190][ T6586] hub_event+0x211c/0x3c78 [ 119.473464][ T6586] process_one_work+0x7e8/0x155c [ 119.474812][ T6586] worker_thread+0x958/0xed8 [ 119.476160][ T6586] kthread+0x5fc/0x75c [ 119.477310][ T6586] ret_from_fork+0x10/0x20 [ 119.478595][ T6586] irq event stamp: 58160 [ 119.479758][ T6586] hardirqs last enabled at (58159): [] __console_unlock+0x70/0xc4 [ 119.482425][ T6586] hardirqs last disabled at (58160): [] el1_brk64+0x1c/0x48 [ 119.485024][ T6586] softirqs last enabled at (52936): [] handle_softirqs+0xaf8/0xc88 [ 119.487847][ T6586] softirqs last disabled at (52919): [] __do_softirq+0x14/0x20 [ 119.490386][ T6586] ---[ end trace 0000000000000000 ]--- [ 119.492299][ T6586] smsusb:smsusb_start_streaming: smsusb_submit_urb(...) failed [ 119.492359][ T6586] smsusb:smsusb_init_device: smsusb_start_streaming(...) failed [ 119.493107][ T6586] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff86099 pfn:0x126662 [ 119.493136][ T6586] flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff) [ 119.493164][ T6586] raw: 05ffc00000000000 0000000000000000 dead000000000122 0000000000000000 [ 119.493186][ T6586] raw: 0000000ffff86099 0000000000000000 00000000ffffffff 0000000000000000 [ 119.493204][ T6586] page dumped because: Not a kmalloc allocation [ 119.494541][ T6586] smsusb:smsusb_probe: Device initialized with return code -22 [ 119.516754][ T6586] smsusb 1-1:0.0: probe with driver smsusb failed with error -22 [ 119.525578][ T6586] usb 1-1: USB disconnect, device number 8 [ 120.126529][ T2315] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 120.276516][ T2315] usb 1-1: Using ep0 maxpacket: 32 [ 120.279446][ T2315] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 120.279532][ T2315] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 120.279564][ T2315] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA9, changing to 0x89 [ 120.279597][ T2315] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 255, changing to 11 [ 120.279629][ T2315] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 120.279661][ T2315] usb 1-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 120.300521][ T2315] usb 1-1: New USB device found, idVendor=2040, idProduct=5500, bcdDevice=a9.c8 [ 120.300577][ T2315] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.300601][ T2315] usb 1-1: Product: syz [ 120.300622][ T2315] usb 1-1: Manufacturer: syz [ 120.300642][ T2315] usb 1-1: SerialNumber: syz [ 120.303675][ T2315] usb 1-1: config 0 descriptor?? [ 120.306527][ T7508] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 120.511087][ T2315] smsusb:smsusb_probe: board id=8, interface number 0 [ 120.5 ** replaying previous printk message ** [ 120.512566][ T2315] smsusb:siano_media_device_register: media controller created [ 120.513072][ T2315] ------------[ cut here ]------------ [ 120.513093][ T2315] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 120.513587][ T2315] WARNING: CPU: 0 PID: 2315 at drivers/usb/core/urb.c:504 usb_submit_urb+0xa24/0x1470 [ 120.522728][ T2315] Modules linked in: [ 120.523871][ T2315] CPU: 0 UID: 0 PID: 2315 Comm: kworker/0:2 Tainted: G W 6.16.0-rc7-syzkaller-00099-g82af5ea7c611 #0 PREEMPT [ 120.527610][ T2315] Tainted: [W]=WARN [ 120.528608][ T2315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 120.531433][ T2315] Workqueue: usb_hub_wq hub_event [ 120.532881][ T2315] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 120.535109][ T2315] pc : usb_submit_urb+0xa24/0x1470 [ 120.536576][ T2315] lr : usb_submit_urb+0xa24/0x1470 [ 120.538123][ T2315] sp : ffff8000a1456900 [ 120.539344][ T2315] x29: ffff8000a1456940 x28: 0000000000000000 x27: ffff80008c9436ec [ 120.541600][ T2315] x26: ffff0000c22d1dc0 x25: ffff80008c9436e0 x24: 0000000000000000 [ 120.543820][ T2315] x23: ffff80008c94a460 x22: dfff800000000000 x21: 0000000000000003 [ 120.546081][ T2315] x20: 0000000000000820 x19: ffff0000c2997300 x18: 1fffe000337d1c76 [ 120.548423][ T2315] x17: 0000000000000000 x16: ffff80008af01c68 x15: 0000000000000001 [ 120.550772][ T2315] x14: 1fffe000337d1ce2 x13: 0000000000000000 x12: 0000000000000000 [ 120.553078][ T2315] x11: ffff6000337d1ce3 x10: 0000000000ff0100 x9 : bc9c6c07ce55c400 [ 120.555246][ T2315] x8 : bc9c6c07ce55c400 x7 : 0000000000000001 x6 : 0000000000000001 [ 120.557590][ T2315] x5 : ffff8000a1456258 x4 : ffff80008f776bc0 x3 : ffff8000807bba4c [ 120.559885][ T2315] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000 [ 120.562168][ T2315] Call trace: [ 120.563108][ T2315] usb_submit_urb+0xa24/0x1470 (P) [ 120.564478][ T2315] smsusb_submit_urb+0x20c/0x2f8 [ 120.565850][ T2315] smsusb_start_streaming+0x34/0x2e0 [ 120.567300][ T2315] smsusb_probe+0x139c/0x1a04 [ 120.568676][ T2315] usb_probe_interface+0x584/0xa44 [ 120.570151][ T2315] really_probe+0x394/0x910 [ 120.571369][ T2315] __driver_probe_device+0x180/0x2d4 [ 120.572870][ T2315] driver_probe_device+0x78/0x330 [ 120.574250][ T2315] __device_attach_driver+0x290/0x4e0 [ 120.575711][ T2315] bus_for_each_drv+0x220/0x2b4 [ 120.577127][ T2315] __device_attach+0x26c/0x388 [ 120.578505][ T2315] device_initial_probe+0x24/0x34 [ 120.579907][ T2315] bus_probe_device+0x178/0x240 [ 120.581273][ T2315] device_add+0x71c/0xa60 [ 120.582522][ T2315] usb_set_configuration+0x1640/0x1bac [ 120.584074][ T2315] usb_generic_driver_probe+0x8c/0x144 [ 120.585580][ T2315] usb_probe_device+0x1a4/0x348 [ 120.586939][ T2315] really_probe+0x394/0x910 [ 120.588236][ T2315] __driver_probe_device+0x180/0x2d4 [ 120.589783][ T2315] driver_probe_device+0x78/0x330 [ 120.591235][ T2315] __device_attach_driver+0x290/0x4e0 [ 120.592759][ T2315] bus_for_each_drv+0x220/0x2b4 [ 120.594184][ T2315] __device_attach+0x26c/0x388 [ 120.595549][ T2315] device_initial_probe+0x24/0x34 [ 120.596998][ T2315] bus_probe_device+0x178/0x240 [ 120.598315][ T2315] device_add+0x71c/0xa60 [ 120.599528][ T2315] usb_new_device+0x7f0/0x1220 [ 120.600927][ T2315] hub_event+0x211c/0x3c78 [ 120.602171][ T2315] process_one_work+0x7e8/0x155c [ 120.603571][ T2315] worker_thread+0x958/0xed8 [ 120.604854][ T2315] kthread+0x5fc/0x75c [ 120.606048][ T2315] ret_from_fork+0x10/0x20 [ 120.607382][ T2315] irq event stamp: 47370 [ 120.608598][ T2315] hardirqs last enabled at (47369): [] __console_unlock+0x70/0xc4 [ 120.611181][ T2315] hardirqs last disabled at (47370): [] el1_brk64+0x1c/0x48 [ 120.613681][ T2315] softirqs last enabled at (43778): [] local_bh_enable+0xc/0x2c [ 120.616192][ T2315] softirqs last disabled at (43774): [] local_bh_disable+0xc/0x2c [ 120.618929][ T2315] ---[ end trace 0000000000000000 ]--- [ 120.622383][ T2315] smsusb:smsusb_start_streaming: smsusb_submit_urb(...) failed [ 120.622449][ T2315] smsusb:smsusb_init_device: smsusb_start_streaming(...) failed [ 120.623182][ T2315] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff85f99 pfn:0x126762 [ 120.623210][ T2315] flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff) [ 120.623238][ T2315] raw: 05ffc00000000000 0000000000000000 dead000000000122 0000000000000000 [ 120.623260][ T2315] raw: 0000000ffff85f99 0000000000000000 00000000ffffffff 0000000000000000 [ 120.623278][ T2315] page dumped because: Not a kmalloc allocation [ 120.624499][ T2315] smsusb:smsusb_probe: Device initialized with return code -22 [ 120.642217][ T2315] smsusb 1-1:0.0: probe with driver smsusb failed with error -22 [ 120.652902][ T2315] usb 1-1: USB disconnect, device number 9 [ 121.276514][ T6586] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 121.426560][ T6586] usb 1-1: Using ep0 maxpacket: 32 [ 121.429467][ T6586] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 121.429536][ T6586] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 121.429561][ T6586] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA9, changing to 0x89 [ 121.429587][ T6586] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 255, changing to 11 [ 121.429613][ T6586] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 121.429639][ T6586] usb 1-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 121.432083][ T6586] usb 1-1: New USB device found, idVendor=2040, idProduct=5500, bcdDevice=a9.c8 [ 121.432120][ T6586] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.432144][ T6586] usb 1-1: Product: syz [ 121.432163][ T6586] usb 1-1: Manufacturer: syz [ 121.432183][ T6586] usb 1-1: SerialNumber: syz [ 121.435214][ T6586] usb 1-1: config 0 descriptor?? [ 121.436255][ T7511] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 121.639063][ T6586] smsusb:smsusb_probe: board id=8, interface number 0 [ 121.641432][ T6586] smsusb:siano_media_d ** replaying previous printk message ** [ 121.641432][ T6586] smsusb:siano_media_device_register: media controller created [ 121.641963][ T6586] ------------[ cut here ]------------ [ 121.641983][ T6586] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 121.642492][ T6586] WARNING: CPU: 1 PID: 6586 at drivers/usb/core/urb.c:504 usb_submit_urb+0xa24/0x1470 [ 121.651784][ T6586] Modules linked in: [ 121.652878][ T6586] CPU: 1 UID: 0 PID: 6586 Comm: kworker/1:4 Tainted: G W 6.16.0-rc7-syzkaller-00099-g82af5ea7c611 #0 PREEMPT [ 121.656737][ T6586] Tainted: [W]=WARN [ 121.657811][ T6586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 121.660722][ T6586] Workqueue: usb_hub_wq hub_event [ 121.662265][ T6586] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 121.664513][ T6586] pc : usb_submit_urb+0xa24/0x1470 [ 121.666087][ T6586] lr : usb_submit_urb+0xa24/0x1470 [ 121.667618][ T6586] sp : ffff80009fe36900 [ 121.668777][ T6586] x29: ffff80009fe36940 x28: 0000000000000000 x27: ffff80008c9436ec [ 121.671051][ T6586] x26: ffff0000c2273b80 x25: ffff80008c9436e0 x24: 0000000000000000 [ 121.673304][ T6586] x23: ffff80008c94a460 x22: dfff800000000000 x21: 0000000000000003 [ 121.675534][ T6586] x20: 0000000000000820 x19: ffff0000c225c700 x18: 1fffe000337d6476 [ 121.677767][ T6586] x17: 0000000000000000 x16: ffff80008af01c68 x15: 0000000000000001 [ 121.679981][ T6586] x14: 1fffe000337d64e2 x13: 0000000000000000 x12: 0000000000000000 [ 121.682297][ T6586] x11: ffff6000337d64e3 x10: 0000000000ff0100 x9 : 6f82aca3931c2800 [ 121.684665][ T6586] x8 : 6f82aca3931c2800 x7 : 0000000000000001 x6 : 0000000000000001 [ 121.686993][ T6586] x5 : ffff80009fe36258 x4 : ffff80008f776bc0 x3 : ffff8000807bba4c [ 121.689211][ T6586] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000 [ 121.691639][ T6586] Call trace: [ 121.692549][ T6586] usb_submit_urb+0xa24/0x1470 (P) [ 121.694063][ T6586] smsusb_submit_urb+0x20c/0x2f8 [ 121.695516][ T6586] smsusb_start_streaming+0x34/0x2e0 [ 121.697091][ T6586] smsusb_probe+0x139c/0x1a04 [ 121.698435][ T6586] usb_probe_interface+0x584/0xa44 [ 121.699941][ T6586] really_probe+0x394/0x910 [ 121.701218][ T6586] __driver_probe_device+0x180/0x2d4 [ 121.702726][ T6586] driver_probe_device+0x78/0x330 [ 121.704189][ T6586] __device_attach_driver+0x290/0x4e0 [ 121.705767][ T6586] bus_for_each_drv+0x220/0x2b4 [ 121.707225][ T6586] __device_attach+0x26c/0x388 [ 121.708623][ T6586] device_initial_probe+0x24/0x34 [ 121.710027][ T6586] bus_probe_device+0x178/0x240 [ 121.711410][ T6586] device_add+0x71c/0xa60 [ 121.712639][ T6586] usb_set_configuration+0x1640/0x1bac [ 121.714246][ T6586] usb_generic_driver_probe+0x8c/0x144 [ 121.715899][ T6586] usb_probe_device+0x1a4/0x348 [ 121.717307][ T6586] really_probe+0x394/0x910 [ 121.718676][ T6586] __driver_probe_device+0x180/0x2d4 [ 121.720334][ T6586] driver_probe_device+0x78/0x330 [ 121.721712][ T6586] __device_attach_driver+0x290/0x4e0 [ 121.723170][ T6586] bus_for_each_drv+0x220/0x2b4 [ 121.724520][ T6586] __device_attach+0x26c/0x388 [ 121.725876][ T6586] device_initial_probe+0x24/0x34 [ 121.727331][ T6586] bus_probe_device+0x178/0x240 [ 121.728784][ T6586] device_add+0x71c/0xa60 [ 121.729977][ T6586] usb_new_device+0x7f0/0x1220 [ 121.731372][ T6586] hub_event+0x211c/0x3c78 [ 121.732639][ T6586] process_one_work+0x7e8/0x155c [ 121.734066][ T6586] worker_thread+0x958/0xed8 [ 121.735388][ T6586] kthread+0x5fc/0x75c [ 121.736587][ T6586] ret_from_fork+0x10/0x20 [ 121.737875][ T6586] irq event stamp: 65362 [ 121.739104][ T6586] hardirqs last enabled at (65361): [] __console_unlock+0x70/0xc4 [ 121.741668][ T6586] hardirqs last disabled at (65362): [] el1_brk64+0x1c/0x48 [ 121.744365][ T6586] softirqs last enabled at (61794): [] handle_softirqs+0xaf8/0xc88 [ 121.747186][ T6586] softirqs last disabled at (61787): [] __do_softirq+0x14/0x20 [ 121.749869][ T6586] ---[ end trace 0000000000000000 ]--- [ 121.753344][ T6586] smsusb:smsusb_start_streaming: smsusb_submit_urb(...) failed [ 121.753406][ T6586] smsusb:smsusb_init_device: smsusb_start_streaming(...) failed [ 121.754144][ T6586] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff85f99 pfn:0x126762 [ 121.754172][ T6586] flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff) [ 121.754200][ T6586] raw: 05ffc00000000000 0000000000000000 dead000000000122 0000000000000000 [ 121.754222][ T6586] raw: 0000000ffff85f99 0000000000000000 00000000ffffffff 0000000000000000 [ 121.754241][ T6586] page dumped because: Not a kmalloc allocation [ 121.755374][ T6586] smsusb:smsusb_probe: Device initialized with return code -22 [ 121.771097][ T6586] smsusb 1-1:0.0: probe with driver smsusb failed with error -22 [ 121.786707][ T6586] usb 1-1: USB disconnect, device number 10 [ 122.386548][ T2315] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 122.536533][ T2315] usb 1-1: Using ep0 maxpacket: 32 [ 122.539276][ T2315] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 122.539350][ T2315] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 122.539375][ T2315] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA9, changing to 0x89 [ 122.539401][ T2315] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 255, changing to 11 [ 122.539427][ T2315] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 122.539453][ T2315] usb 1-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 122.541617][ T2315] usb 1-1: New USB device found, idVendor=2040, idProduct=5500, bcdDevice=a9.c8 [ 122.541651][ T2315] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.541674][ T2315] usb 1-1: Product: syz [ 122.541694][ T2315] usb 1-1: Manufacturer: syz [ 122.541714][ T2315] usb 1-1: SerialNumber: syz [ 122.544922][ T2315] usb 1-1: config 0 descriptor?? [ 122.545535][ T7514] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22