smsusb:smsusb_probe: board id=8, interface number 0
smsusb:siano_media_device_register: media controller created
------------[ cut here ]------------
usb 1-1: BOGUS urb xfer, pipe 3 != type 1
WARNING: CPU: 0 PID: 6181 at drivers/usb/core/urb.c:504 usb_submit_urb+0xa00/0x1434 drivers/usb/core/urb.c:503
Modules linked in:
CPU: 0 PID: 6181 Comm: kworker/0:3 Not tainted 6.8.0-rc7-syzkaller-00135-g707081b61156 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
Workqueue: usb_hub_wq hub_event
pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : usb_submit_urb+0xa00/0x1434 drivers/usb/core/urb.c:503
lr : usb_submit_urb+0xa00/0x1434 drivers/usb/core/urb.c:503
sp : ffff8000979c6860
x29: ffff8000979c68a0 x28: ffff0000c626d000 x27: 0000000000000003
x26: ffff80008c54666c x25: ffff0000c5dbdf40 x24: ffff0000cdd2e080
x23: ffff80008c54d020 x22: dfff800000000000 x21: 0000000000000003
x20: 0000000000000820 x19: ffff0000cdd2e030 x18: ffff8000979c6380
x17: 0000000000000000 x16: ffff80008ad6b09c x15: 0000000000000001
x14: 1fffe00036800002 x13: 0000000000000000 x12: 0000000000000000
x11: 0000000000000002 x10: 0000000000ff0100 x9 : 8785d79daea98d00
x8 : 8785d79daea98d00 x7 : 0000000000000001 x6 : 0000000000000001
x5 : ffff8000979c6158 x4 : ffff80008ed822c0 x3 : ffff8000805ba130
x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000
Call trace:
 usb_submit_urb+0xa00/0x1434 drivers/usb/core/urb.c:503
 smsusb_submit_urb drivers/media/usb/siano/smsusb.c:173 [inline]
 smsusb_start_streaming+0x244/0x450 drivers/media/usb/siano/smsusb.c:197
 smsusb_init_device drivers/media/usb/siano/smsusb.c:470 [inline]
 smsusb_probe+0x130c/0x19ec drivers/media/usb/siano/smsusb.c:567
 usb_probe_interface+0x500/0x984 drivers/usb/core/driver.c:399
 really_probe+0x394/0xa7c drivers/base/dd.c:658
 __driver_probe_device+0x194/0x3b4 drivers/base/dd.c:800
 driver_probe_device+0x78/0x330 drivers/base/dd.c:830
 __device_attach_driver+0x2a8/0x4f4 drivers/base/dd.c:958
 bus_for_each_drv+0x228/0x2bc drivers/base/bus.c:457
 __device_attach+0x2b4/0x434 drivers/base/dd.c:1030
 device_initial_probe+0x24/0x34 drivers/base/dd.c:1079
 bus_probe_device+0x178/0x240 drivers/base/bus.c:532
 device_add+0x768/0xaac drivers/base/core.c:3639
 usb_set_configuration+0x15cc/0x1b38 drivers/usb/core/message.c:2207
 usb_generic_driver_probe+0x8c/0x148 drivers/usb/core/generic.c:254
 usb_probe_device+0x128/0x2a8 drivers/usb/core/driver.c:294
 really_probe+0x394/0xa7c drivers/base/dd.c:658
 __driver_probe_device+0x194/0x3b4 drivers/base/dd.c:800
 driver_probe_device+0x78/0x330 drivers/base/dd.c:830
 __device_attach_driver+0x2a8/0x4f4 drivers/base/dd.c:958
 bus_for_each_drv+0x228/0x2bc drivers/base/bus.c:457
 __device_attach+0x2b4/0x434 drivers/base/dd.c:1030
 device_initial_probe+0x24/0x34 drivers/base/dd.c:1079
 bus_probe_device+0x178/0x240 drivers/base/bus.c:532
 device_add+0x768/0xaac drivers/base/core.c:3639
 usb_new_device+0x908/0x149c drivers/usb/core/hub.c:2614
 hub_port_connect drivers/usb/core/hub.c:5483 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5623 [inline]
 port_event drivers/usb/core/hub.c:5783 [inline]
 hub_event+0x2430/0x435c drivers/usb/core/hub.c:5865
 process_one_work+0x694/0x1204 kernel/workqueue.c:2633
 process_scheduled_works kernel/workqueue.c:2706 [inline]
 worker_thread+0x938/0xef4 kernel/workqueue.c:2787
 kthread+0x288/0x310 kernel/kthread.c:388
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:860
irq event stamp: 145882
hardirqs last  enabled at (145881): [<ffff80008036027c>] __up_console_sem kernel/printk/printk.c:341 [inline]
hardirqs last  enabled at (145881): [<ffff80008036027c>] __console_unlock kernel/printk/printk.c:2706 [inline]
hardirqs last  enabled at (145881): [<ffff80008036027c>] console_unlock+0x17c/0x3d4 kernel/printk/printk.c:3038
hardirqs last disabled at (145882): [<ffff80008ad66988>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:470
softirqs last  enabled at (145090): [<ffff80008002189c>] softirq_handle_end kernel/softirq.c:399 [inline]
softirqs last  enabled at (145090): [<ffff80008002189c>] __do_softirq+0xac8/0xce4 kernel/softirq.c:582
softirqs last disabled at (144929): [<ffff80008002ab48>] ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:81
---[ end trace 0000000000000000 ]---
smsusb:smsusb_start_streaming: smsusb_submit_urb(...) failed
smsusb:smsusb_init_device: smsusb_start_streaming(...) failed
smsusb:smsusb_probe: Device initialized with return code -22
smsusb: probe of 1-1:0.0 failed with error -22
usb 1-1: USB disconnect, device number 2
usb 1-1: new high-speed USB device number 3 using dummy_hcd
usb 1-1: Using ep0 maxpacket: 32
usb 1-1: config 0 has an invalid interface number: 3 but max is 0
usb 1-1: config 0 has an invalid interface number: 7 but max is 0
usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping
usb 1-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config
usb 1-1: config 0 has 3 interfaces, different from the descriptor's value: 1
usb 1-1: config 0 has no interface number 1
usb 1-1: config 0 has no interface number 2
usb 1-1: config 0 interface 3 altsetting 32 has 0 endpoint descriptors, different from the interface descriptor's value: 16
usb 1-1: config 0 interface 7 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 5
usb 1-1: config 0 interface 3 has no altsetting 0
usb 1-1: config 0 interface 7 has no altsetting 0
usb 1-1: New USB device found, idVendor=2040, idProduct=b980, bcdDevice=37.b3
usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
usb 1-1: Product: syz
usb 1-1: Manufacturer: syz
usb 1-1: SerialNumber: syz
usb 1-1: config 0 descriptor??
smsusb:smsusb_probe: board id=8, interface number 3
smsusb:smsusb_probe: board id=8, interface number 7
smsusb:smsusb_probe: board id=8, interface number 0
smsusb:siano_media_device_register: media controller created
------------[ cut here ]------------
usb 1-1: BOGUS urb xfer, pipe 3 != type 1
WARNING: CPU: 0 PID: 6181 at drivers/usb/core/urb.c:504 usb_submit_urb+0xa00/0x1434 drivers/usb/core/urb.c:503
Modules linked in:
CPU: 0 PID: 6181 Comm: kworker/0:3 Tainted: G        W          6.8.0-rc7-syzkaller-00135-g707081b61156 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
Workqueue: usb_hub_wq hub_event
pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : usb_submit_urb+0xa00/0x1434 drivers/usb/core/urb.c:503
lr : usb_submit_urb+0xa00/0x1434 drivers/usb/core/urb.c:503
sp : ffff8000979c6860
x29: ffff8000979c68a0 x28: ffff0000c805a000 x27: 0000000000000003
x26: ffff80008c54666c x25: ffff0000cbb285e0 x24: ffff0000d4966080
x23: ffff80008c54d020 x22: dfff800000000000 x21: 0000000000000003
x20: 0000000000000820 x19: ffff0000d4966030 x18: 1fffe000367fff96
x17: 0000000000000000 x16: ffff80008ad6b09c x15: 0000000000000001
x14: 1fffe00036800002 x13: 0000000000000000 x12: 0000000000000000
x11: 0000000000000002 x10: 0000000000ff0100 x9 : 8785d79daea98d00
x8 : 8785d79daea98d00 x7 : 0000000000000001 x6 : 0000000000000001
x5 : ffff8000979c6158 x4 : ffff80008ed822c0 x3 : ffff8000805ba130
x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000
Call trace:
 usb_submit_urb+0xa00/0x1434 drivers/usb/core/urb.c:503
 smsusb_submit_urb drivers/media/usb/siano/smsusb.c:173 [inline]
 smsusb_start_streaming+0x244/0x450 drivers/media/usb/siano/smsusb.c:197
 smsusb_init_device drivers/media/usb/siano/smsusb.c:470 [inline]
 smsusb_probe+0x130c/0x19ec drivers/media/usb/siano/smsusb.c:567
 usb_probe_interface+0x500/0x984 drivers/usb/core/driver.c:399
 really_probe+0x394/0xa7c drivers/base/dd.c:658
 __driver_probe_device+0x194/0x3b4 drivers/base/dd.c:800
 driver_probe_device+0x78/0x330 drivers/base/dd.c:830
 __device_attach_driver+0x2a8/0x4f4 drivers/base/dd.c:958
 bus_for_each_drv+0x228/0x2bc drivers/base/bus.c:457
 __device_attach+0x2b4/0x434 drivers/base/dd.c:1030
 device_initial_probe+0x24/0x34 drivers/base/dd.c:1079
 bus_probe_device+0x178/0x240 drivers/base/bus.c:532
 device_add+0x768/0xaac drivers/base/core.c:3639
 usb_set_configuration+0x15cc/0x1b38 drivers/usb/core/message.c:2207
 usb_generic_driver_probe+0x8c/0x148 drivers/usb/core/generic.c:254
 usb_probe_device+0x128/0x2a8 drivers/usb/core/driver.c:294
 really_probe+0x394/0xa7c drivers/base/dd.c:658
 __driver_probe_device+0x194/0x3b4 drivers/base/dd.c:800
 driver_probe_device+0x78/0x330 drivers/base/dd.c:830
 __device_attach_driver+0x2a8/0x4f4 drivers/base/dd.c:958
 bus_for_each_drv+0x228/0x2bc drivers/base/bus.c:457
 __device_attach+0x2b4/0x434 drivers/base/dd.c:1030
 device_initial_probe+0x24/0x34 drivers/base/dd.c:1079
 bus_probe_device+0x178/0x240 drivers/base/bus.c:532
 device_add+0x768/0xaac drivers/base/core.c:3639
 usb_new_device+0x908/0x149c drivers/usb/core/hub.c:2614
 hub_port_connect drivers/usb/core/hub.c:5483 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5623 [inline]
 port_event drivers/usb/core/hub.c:5783 [inline]
 hub_event+0x2430/0x435c drivers/usb/core/hub.c:5865
 process_one_work+0x694/0x1204 kernel/workqueue.c:2633
 process_scheduled_works kernel/workqueue.c:2706 [inline]
 worker_thread+0x970/0xef4 kernel/workqueue.c:2787
 kthread+0x288/0x310 kernel/kthread.c:388
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:860
irq event stamp: 155276
hardirqs last  enabled at (155275): [<ffff80008036027c>] __up_console_sem kernel/printk/printk.c:341 [inline]
hardirqs last  enabled at (155275): [<ffff80008036027c>] __console_unlock kernel/printk/printk.c:2706 [inline]
hardirqs last  enabled at (155275): [<ffff80008036027c>] console_unlock+0x17c/0x3d4 kernel/printk/printk.c:3038
hardirqs last disabled at (155276): [<ffff80008ad66988>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:470
softirqs last  enabled at (151048): [<ffff80008002189c>] softirq_handle_end kernel/softirq.c:399 [inline]
softirqs last  enabled at (151048): [<ffff80008002189c>] __do_softirq+0xac8/0xce4 kernel/softirq.c:582
softirqs last disabled at (151039): [<ffff80008002ab48>] ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:81
---[ end trace 0000000000000000 ]---
smsusb:smsusb_start_streaming: smsusb_submit_urb(...) failed
smsusb:smsusb_init_device: smsusb_start_streaming(...) failed
smsusb:smsusb_probe: Device initialized with return code -22
smsusb: probe of 1-1:0.0 failed with error -22
usb 1-1: USB disconnect, device number 3
usb 1-1: new high-speed USB device number 4 using dummy_hcd
usb 1-1: Using ep0 maxpacket: 32
usb 1-1: config 0 has an invalid interface number: 3 but max is 0
usb 1-1: config 0 has an invalid interface number: 7 but max is 0
usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping
usb 1-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config
usb 1-1: config 0 has 3 interfaces, different from the descriptor's value: 1
usb 1-1: config 0 has no interface number 1
usb 1-1: config 0 has no interface number 2
usb 1-1: config 0 interface 3 altsetting 32 has 0 endpoint descriptors, different from the interface descriptor's value: 16
usb 1-1: config 0 interface 7 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 5
usb 1-1: config 0 interface 3 has no altsetting 0
usb 1-1: config 0 interface 7 has no altsetting 0
usb 1-1: New USB device found, idVendor=2040, idProduct=b980, bcdDevice=37.b3
usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
usb 1-1: Product: syz
usb 1-1: Manufacturer: syz
usb 1-1: SerialNumber: syz
usb 1-1: config 0 descriptor??
smsusb:smsusb_probe: board id=8, interface number 3
smsusb:smsusb_probe: board id=8, interface number 7
smsusb:smsusb_probe: board id=8, interface number 0
smsusb:siano_media_device_register: media controller created
------------[ cut here ]------------
usb 1-1: BOGUS urb xfer, pipe 3 != type 1
WARNING: CPU: 0 PID: 6181 at drivers/usb/core/urb.c:504 usb_submit_urb+0xa00/0x1434 drivers/usb/core/urb.c:503
Modules linked in:
CPU: 0 PID: 6181 Comm: kworker/0:3 Tainted: G        W          6.8.0-rc7-syzkaller-00135-g707081b61156 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
Workqueue: usb_hub_wq hub_event
pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : usb_submit_urb+0xa00/0x1434 drivers/usb/core/urb.c:503
lr : usb_submit_urb+0xa00/0x1434 drivers/usb/core/urb.c:503
sp : ffff8000979c6860
x29: ffff8000979c68a0 x28: ffff0000da229000 x27: 0000000000000003
x26: ffff80008c54666c x25: ffff0000c5fd92c0 x24: ffff0000da67e080
x23: ffff80008c54d020 x22: dfff800000000000 x21: 0000000000000003
x20: 0000000000000820 x19: ffff0000da67e030 x18: 1fffe000367fff96
x17: 0000000000000000 x16: ffff80008ad6b09c x15: 0000000000000001
x14: 1fffe00036800002 x13: 0000000000000000 x12: 0000000000000000
x11: 0000000000000002 x10: 0000000000ff0100 x9 : 8785d79daea98d00
x8 : 8785d79daea98d00 x7 : 0000000000000001 x6 : 0000000000000001
x5 : ffff8000979c6158 x4 : ffff80008ed822c0 x3 : ffff8000805ba130
x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000
Call trace:
 usb_submit_urb+0xa00/0x1434 drivers/usb/core/urb.c:503
 smsusb_submit_urb drivers/media/usb/siano/smsusb.c:173 [inline]
 smsusb_start_streaming+0x244/0x450 drivers/media/usb/siano/smsusb.c:197
 smsusb_init_device drivers/media/usb/siano/smsusb.c:470 [inline]
 smsusb_probe+0x130c/0x19ec drivers/media/usb/siano/smsusb.c:567
 usb_probe_interface+0x500/0x984 drivers/usb/core/driver.c:399
 really_probe+0x394/0xa7c drivers/base/dd.c:658
 __driver_probe_device+0x194/0x3b4 drivers/base/dd.c:800
 driver_probe_device+0x78/0x330 drivers/base/dd.c:830
 __device_attach_driver+0x2a8/0x4f4 drivers/base/dd.c:958
 bus_for_each_drv+0x228/0x2bc drivers/base/bus.c:457
 __device_attach+0x2b4/0x434 drivers/base/dd.c:1030
 device_initial_probe+0x24/0x34 drivers/base/dd.c:1079
 bus_probe_device+0x178/0x240 drivers/base/bus.c:532
 device_add+0x768/0xaac drivers/base/core.c:3639
 usb_set_configuration+0x15cc/0x1b38 drivers/usb/core/message.c:2207
 usb_generic_driver_probe+0x8c/0x148 drivers/usb/core/generic.c:254
 usb_probe_device+0x128/0x2a8 drivers/usb/core/driver.c:294
 really_probe+0x394/0xa7c drivers/base/dd.c:658
 __driver_probe_device+0x194/0x3b4 drivers/base/dd.c:800
 driver_probe_device+0x78/0x330 drivers/base/dd.c:830
 __device_attach_driver+0x2a8/0x4f4 drivers/base/dd.c:958
 bus_for_each_drv+0x228/0x2bc drivers/base/bus.c:457
 __device_attach+0x2b4/0x434 drivers/base/dd.c:1030
 device_initial_probe+0x24/0x34 drivers/base/dd.c:1079
 bus_probe_device+0x178/0x240 drivers/base/bus.c:532
 device_add+0x768/0xaac drivers/base/core.c:3639
 usb_new_device+0x908/0x149c drivers/usb/core/hub.c:2614
 hub_port_connect drivers/usb/core/hub.c:5483 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5623 [inline]
 port_event drivers/usb/core/hub.c:5783 [inline]
 hub_event+0x2430/0x435c drivers/usb/core/hub.c:5865
 process_one_work+0x694/0x1204 kernel/workqueue.c:2633
 process_scheduled_works kernel/workqueue.c:2706 [inline]
 worker_thread+0x970/0xef4 kernel/workqueue.c:2787
 kthread+0x288/0x310 kernel/kthread.c:388
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:860
irq event stamp: 164790
hardirqs last  enabled at (164789): [<ffff80008036027c>] __up_console_sem kernel/printk/printk.c:341 [inline]
hardirqs last  enabled at (164789): [<ffff80008036027c>] __console_unlock kernel/printk/printk.c:2706 [inline]
hardirqs last  enabled at (164789): [<ffff80008036027c>] console_unlock+0x17c/0x3d4 kernel/printk/printk.c:3038
hardirqs last disabled at (164790): [<ffff80008ad66988>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:470
softirqs last  enabled at (159882): [<ffff80008002189c>] softirq_handle_end kernel/softirq.c:399 [inline]
softirqs last  enabled at (159882): [<ffff80008002189c>] __do_softirq+0xac8/0xce4 kernel/softirq.c:582
softirqs last disabled at (159871): [<ffff80008002ab48>] ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:81
---[ end trace 0000000000000000 ]---
smsusb:smsusb_start_streaming: smsusb_submit_urb(...) failed
smsusb:smsusb_init_device: smsusb_start_streaming(...) failed
smsusb:smsusb_probe: Device initialized with return code -22
smsusb: probe of 1-1:0.0 failed with error -22
usb 1-1: USB disconnect, device number 4
usb 1-1: new high-speed USB device number 5 using dummy_hcd
usb 1-1: too many configurations: 241, using maximum allowed: 8
usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
usb 1-1: Product: syz
usb 1-1: Manufacturer: syz
usb 1-1: SerialNumber: syz
usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
usb 1-1: Direct firmware load for ath9k_htc/htc_9271-1.4.0.fw failed with error -2
usb 1-1: Falling back to sysfs fallback for: ath9k_htc/htc_9271-1.4.0.fw