usb 1-1: Manufacturer: syz usb 1-1: SerialNumber: syz usb 1-1: config 0 descriptor?? ------------[ cut here ]------------ usb 1-1: BOGUS urb xfer, pipe 3 != type 1 WARNING: CPU: 1 PID: 1509 at drivers/usb/core/urb.c:505 usb_submit_urb+0xa44/0x1588 drivers/usb/core/urb.c:504 Modules linked in: CPU: 1 PID: 1509 Comm: kworker/1:2 Not tainted 6.1.64-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 Workqueue: usb_hub_wq hub_event pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : usb_submit_urb+0xa44/0x1588 drivers/usb/core/urb.c:504 lr : usb_submit_urb+0xa44/0x1588 drivers/usb/core/urb.c:504 sp : ffff800021cc6980 x29: ffff800021cc69c0 x28: 0000000000000003 x27: ffff80001355fbac x26: ffff0000db5ec700 x25: ffff0000c3c23000 x24: 00000000000000a5 x23: ffff800013566420 x22: dfff800000000000 x21: 0000000000000003 x20: 0000000000000a20 x19: ffff0000c0b80200 x18: 1fffe000368b0776 x17: ffff80001580d000 x16: ffff8000083049a8 x15: ffff0001b4583bbc x14: 1ffff00002b020b0 x13: dfff800000000000 x12: 0000000000000003 x11: 0000000000ff0100 x10: 0000000000000003 x9 : a6bf9ea916797100 x8 : a6bf9ea916797100 x7 : ffff80000827c470 x6 : 0000000000000000 x5 : 0000000000000080 x4 : 0000000000000001 x3 : 0000000000000000 x2 : 0000000000000006 x1 : ffff80001228c340 x0 : ffff80019ee22000 Call trace: usb_submit_urb+0xa44/0x1588 drivers/usb/core/urb.c:504 ar5523_submit_rx_cmd+0x170/0x28c drivers/net/wireless/ath/ar5523/ar5523.c:212 ar5523_probe+0x91c/0x1a9c drivers/net/wireless/ath/ar5523/ar5523.c:1652 usb_probe_interface+0x500/0x984 drivers/usb/core/driver.c:396 really_probe+0x394/0xacc drivers/base/dd.c:639 __driver_probe_device+0x194/0x3b4 drivers/base/dd.c:785 driver_probe_device+0x78/0x330 drivers/base/dd.c:815 __device_attach_driver+0x2a8/0x4f4 drivers/base/dd.c:943 bus_for_each_drv+0x158/0x1e0 drivers/base/bus.c:427 __device_attach+0x2f0/0x480 drivers/base/dd.c:1015 device_initial_probe+0x24/0x34 drivers/base/dd.c:1064 bus_probe_device+0xbc/0x1c8 drivers/base/bus.c:487 device_add+0xae0/0xef4 drivers/base/core.c:3664 usb_set_configuration+0x15c0/0x1b40 drivers/usb/core/message.c:2165 usb_generic_driver_probe+0x8c/0x148 drivers/usb/core/generic.c:238 usb_probe_device+0x120/0x25c drivers/usb/core/driver.c:293 really_probe+0x394/0xacc drivers/base/dd.c:639 __driver_probe_device+0x194/0x3b4 drivers/base/dd.c:785 driver_probe_device+0x78/0x330 drivers/base/dd.c:815 __device_attach_driver+0x2a8/0x4f4 drivers/base/dd.c:943 bus_for_each_drv+0x158/0x1e0 drivers/base/bus.c:427 __device_attach+0x2f0/0x480 drivers/base/dd.c:1015 device_initial_probe+0x24/0x34 drivers/base/dd.c:1064 bus_probe_device+0xbc/0x1c8 drivers/base/bus.c:487 device_add+0xae0/0xef4 drivers/base/core.c:3664 usb_new_device+0x904/0x142c drivers/usb/core/hub.c:2583 hub_port_connect drivers/usb/core/hub.c:5434 [inline] hub_port_connect_change drivers/usb/core/hub.c:5574 [inline] port_event drivers/usb/core/hub.c:5730 [inline] hub_event+0x23f4/0x4360 drivers/usb/core/hub.c:5812 process_one_work+0x7ac/0x1404 kernel/workqueue.c:2292 worker_thread+0x8e4/0xfec kernel/workqueue.c:2439 kthread+0x250/0x2d8 kernel/kthread.c:376 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:864 irq event stamp: 1976800 hardirqs last enabled at (1976799): [<ffff80000827c510>] raw_spin_rq_unlock_irq kernel/sched/sched.h:1366 [inline] hardirqs last enabled at (1976799): [<ffff80000827c510>] finish_lock_switch+0xbc/0x1e8 kernel/sched/core.c:5004 hardirqs last disabled at (1976800): [<ffff800012134fb4>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405 softirqs last enabled at (1976792): [<ffff800008020d7c>] softirq_handle_end kernel/softirq.c:414 [inline] softirqs last enabled at (1976792): [<ffff800008020d7c>] __do_softirq+0xc1c/0xe38 kernel/softirq.c:600 softirqs last disabled at (1976775): [<ffff80000802a99c>] ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:79 ---[ end trace 0000000000000000 ]--- usb 1-1: error -22 when submitting rx urb usb 1-1: Failed to submit rx cmd ar5523: probe of 1-1:0.0 failed with error -22 usb 1-1: USB disconnect, device number 26