------------[ cut here ]------------ usb 1-1: BOGUS urb xfer, pipe 1 != type 3 WARNING: CPU: 1 PID: 5481 at drivers/usb/core/urb.c:505 usb_submit_urb+0xa44/0x1588 drivers/usb/core/urb.c:504 Modules linked in: CPU: 1 PID: 5481 Comm: kworker/1:5 Not tainted 6.4.0-rc2-syzkaller-gf1fcbaa18b28 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 Workqueue: usb_hub_wq hub_event pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : usb_submit_urb+0xa44/0x1588 drivers/usb/core/urb.c:504 lr : usb_submit_urb+0xa44/0x1588 drivers/usb/core/urb.c:504 sp : ffff80001d226720 x29: ffff80001d226760 x28: 0000000000000001 x27: ffff800012f15b68 x26: ffff0000c7df1100 x25: ffff0000c3a5b000 x24: 0000000000000040 x23: ffff800012f1c5e0 x22: dfff800000000000 x21: 0000000000000002 x20: 0000000000000820 x19: ffff0000c4bfb200 x18: ffff80001d225c20 x17: 0000000000000000 x16: ffff800011c25f2c x15: 0000000000000002 x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000001 x11: 0000000000000000 x10: 0000000000000000 x9 : f6277d09ddad0500 x8 : f6277d09ddad0500 x7 : 0000000000000001 x6 : 0000000000000001 x5 : ffff80001d226018 x4 : ffff80001503c340 x3 : ffff800008589f98 x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000 Call trace: usb_submit_urb+0xa44/0x1588 drivers/usb/core/urb.c:504 carl9170_usb_submit_cmd_urb+0x78/0x1ac drivers/net/wireless/ath/carl9170/usb.c:229 __carl9170_exec_cmd+0x2b0/0x40c drivers/net/wireless/ath/carl9170/usb.c:643 carl9170_reboot+0xa4/0xf0 drivers/net/wireless/ath/carl9170/cmd.c:141 carl9170_usb_disconnect+0x90/0x144 drivers/net/wireless/ath/carl9170/usb.c:1116 usb_unbind_interface+0x1a4/0x758 drivers/usb/core/driver.c:458 device_remove drivers/base/dd.c:569 [inline] __device_release_driver drivers/base/dd.c:1272 [inline] device_release_driver_internal+0x440/0x6a0 drivers/base/dd.c:1295 device_release_driver+0x28/0x38 drivers/base/dd.c:1318 usb_driver_release_interface drivers/usb/core/driver.c:627 [inline] usb_forced_unbind_intf+0x128/0x1f4 drivers/usb/core/driver.c:1118 usb_reset_device+0x38c/0x9a0 drivers/usb/core/hub.c:6185 carl9170_usb_probe+0x5c/0x9d0 drivers/net/wireless/ath/carl9170/usb.c:1044 usb_probe_interface+0x500/0x984 drivers/usb/core/driver.c:396 really_probe+0x394/0xa7c drivers/base/dd.c:658 __driver_probe_device+0x194/0x3b4 drivers/base/dd.c:800 driver_probe_device+0x78/0x330 drivers/base/dd.c:830 __device_attach_driver+0x2a8/0x4f4 drivers/base/dd.c:958 bus_for_each_drv+0x228/0x2bc drivers/base/bus.c:457 __device_attach+0x2b4/0x434 drivers/base/dd.c:1030 device_initial_probe+0x24/0x34 drivers/base/dd.c:1079 bus_probe_device+0x178/0x240 drivers/base/bus.c:532 device_add+0xa44/0xdf0 drivers/base/core.c:3625 usb_set_configuration+0x15cc/0x1b38 drivers/usb/core/message.c:2211 usb_generic_driver_probe+0x8c/0x148 drivers/usb/core/generic.c:238 usb_probe_device+0x120/0x25c drivers/usb/core/driver.c:293 really_probe+0x394/0xa7c drivers/base/dd.c:658 __driver_probe_device+0x194/0x3b4 drivers/base/dd.c:800 driver_probe_device+0x78/0x330 drivers/base/dd.c:830 __device_attach_driver+0x2a8/0x4f4 drivers/base/dd.c:958 bus_for_each_drv+0x228/0x2bc drivers/base/bus.c:457 __device_attach+0x2b4/0x434 drivers/base/dd.c:1030 device_initial_probe+0x24/0x34 drivers/base/dd.c:1079 bus_probe_device+0x178/0x240 drivers/base/bus.c:532 device_add+0xa44/0xdf0 drivers/base/core.c:3625 usb_new_device+0x904/0x142c drivers/usb/core/hub.c:2575 hub_port_connect drivers/usb/core/hub.c:5407 [inline] hub_port_connect_change drivers/usb/core/hub.c:5551 [inline] port_event drivers/usb/core/hub.c:5711 [inline] hub_event+0x25e4/0x474c drivers/usb/core/hub.c:5793 process_one_work+0x788/0x12d4 kernel/workqueue.c:2405 worker_thread+0x8e0/0xfe8 kernel/workqueue.c:2552 kthread+0x284/0x30c kernel/kthread.c:379 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:870 irq event stamp: 19238 hardirqs last enabled at (19237): [] __up_console_sem+0x60/0xb4 kernel/printk/printk.c:347 hardirqs last disabled at (19238): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405 softirqs last enabled at (17204): [] softirq_handle_end kernel/softirq.c:414 [inline] softirqs last enabled at (17204): [] __do_softirq+0xac0/0xd54 kernel/softirq.c:600 softirqs last disabled at (17189): [] ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:80 ---[ end trace 0000000000000000 ]--- usb usb1-port1: Cannot enable. Maybe the USB cable is bad? usb 1-1: reset full-speed USB device number 2 using dummy_hcd usb 1-1: reset full-speed USB device number 2 using dummy_hcd usb 1-1: device not accepting address 2, error -22 usb 1-1: reset full-speed USB device number 2 using dummy_hcd usb 1-1: device not accepting address 2, error -22 usb 1-1: USB disconnect, device number 2 usb 1-1: new full-speed USB device number 3 using dummy_hcd usb 1-1: config 0 has an invalid interface number: 24 but max is 0 usb 1-1: config 0 has an invalid interface number: 82 but max is 0 usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 1 usb 1-1: config 0 has no interface number 0 usb 1-1: config 0 has no interface number 1 usb 1-1: config 0 interface 24 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12 usb 1-1: too many endpoints for config 0 interface 82 altsetting 47: 137, using maximum allowed: 30 usb 1-1: config 0 interface 82 altsetting 47 has a duplicate endpoint with address 0x1, skipping usb 1-1: config 0 interface 82 altsetting 47 has a duplicate endpoint with address 0x7, skipping usb 1-1: config 0 interface 82 altsetting 47 has a duplicate endpoint with address 0x3, skipping usb 1-1: config 0 interface 82 altsetting 47 endpoint 0x4 has invalid maxpacket 1576, setting to 64 usb 1-1: config 0 interface 82 altsetting 47 has an invalid endpoint with address 0x0, skipping usb 1-1: config 0 interface 82 altsetting 47 has an invalid endpoint with address 0x80, skipping usb 1-1: config 0 interface 82 altsetting 47 endpoint 0x6 has invalid maxpacket 1024, setting to 64 usb 1-1: config 0 interface 82 altsetting 47 has 11 endpoint descriptors, different from the interface descriptor's value: 137 usb 1-1: config 0 interface 82 has no altsetting 0 usb 1-1: New USB device found, idVendor=0586, idProduct=3417, bcdDevice=e6.c2 usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 usb 1-1: config 0 descriptor?? usb 1-1: reset full-speed USB device number 3 using dummy_hcd usb 1-1: device descriptor read/64, error -71 usb 1-1: reset full-speed USB device number 3 using dummy_hcd usb 1-1: string descriptor 0 read error: -71