Extracting prog: 3m22.925511146s Minimizing prog: 19m22.478958796s Simplifying prog options: 0s Extracting C: 1m10.185519893s Simplifying C: 7m31.2189376s extracting reproducer from 1 programs testing a last program of every proc single: executing 1 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect detailed listing: executing program 0: syz_usb_connect(0x5, 0x200, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x50, 0x8f, 0xa5, 0x8, 0x2ef5, 0xa, 0x21c2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1ee, 0x3, 0x1, 0x9, 0xd0, 0x3f, [{{0x9, 0x4, 0xa7, 0xe4, 0xb, 0x99, 0x4f, 0x11, 0x3, [@uac_control={{0xa, 0x24, 0x1, 0x6, 0x6}, [@input_terminal={0xc, 0x24, 0x2, 0x4, 0x306, 0x4, 0x7, 0x1, 0xff, 0x18}, @selector_unit={0x5, 0x24, 0x5, 0x4, 0x10}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x708, 0x5, 0xf3, 0xfffd, 0x4, 0x3}, @selector_unit={0x5, 0x24, 0x5, 0x1, 0x1}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x203, 0x2, 0x2, 0x1, 0x64, 0x6}, @extension_unit={0x7, 0x24, 0x8, 0x5, 0x4}]}], [{{0x9, 0x5, 0x7, 0x0, 0x40, 0x0, 0x7f, 0xf7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x80, 0x6}]}}, {{0x9, 0x5, 0xe, 0x10, 0x208, 0x7, 0x6, 0x8, [@generic={0x2, 0xb}]}}, {{0x9, 0x5, 0x3, 0x0, 0x20, 0x6, 0x80, 0xa, [@generic={0x2, 0x31}]}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x0, 0x8, 0x1}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x4, 0xd, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7f, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x4}]}}, {{0x9, 0x5, 0x6, 0x0, 0x400, 0x5, 0x81, 0x2, [@generic={0x2, 0x31}, @generic={0x2, 0x10}]}}, {{0x9, 0x5, 0xe, 0xc, 0x3ff, 0x6, 0x6, 0x7, [@generic={0x2, 0xa}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x15, 0xfffd}]}}, {{0x9, 0x5, 0x9, 0x3, 0x8, 0xca, 0x80, 0x7, [@generic={0x2, 0x4}]}}, {{0x9, 0x5, 0x8e, 0x10, 0x8, 0x6, 0x5, 0x1, [@generic={0x2, 0x3}]}}, {{0x9, 0x5, 0xe, 0x10, 0x40, 0x9, 0x0, 0xe0}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x80, 0xf4, 0x4, [@generic={0x2, 0xe}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x3}]}}]}}, {{0x9, 0x4, 0xd5, 0xfd, 0x9, 0x76, 0xa0, 0xbb, 0x8, [@generic={0x2, 0xd}], [{{0x9, 0x5, 0x7, 0x10, 0x200, 0x7, 0x1, 0xa1, [@generic={0x2, 0x23}]}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0xfe, 0x2, 0x7f, [@generic={0x2, 0x31}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0xffff}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x4, 0x9, 0x9}}, {{0x9, 0x5, 0x9, 0x10, 0x7f7, 0x3, 0x7}}, {{0x9, 0x5, 0xd, 0x10, 0x200, 0x9, 0x9, 0x2}}, {{0x9, 0x5, 0x80, 0x10, 0x8, 0x90, 0xe, 0x81}}, {{0x9, 0x5, 0x5, 0x4, 0x200, 0x10, 0xf7, 0x3c, [@generic={0x2, 0x23}, @generic={0x2, 0xa}]}}, {{0x9, 0x5, 0xf, 0x2, 0x20, 0x8, 0x4, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x91, 0x3}]}}, {{0x9, 0x5, 0x8, 0xc, 0x20, 0x2, 0xfd, 0x9}}]}}, {{0x9, 0x4, 0xfb, 0x9, 0xb, 0xb5, 0x5b, 0x85, 0xf, [], [{{0x9, 0x5, 0x0, 0x2, 0x40, 0x8, 0x2, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0xc000}]}}, {{0x9, 0x5, 0xa, 0x1, 0x200, 0x92, 0x8, 0x2f, [@generic={0x2, 0x31}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x40, 0x3}]}}, {{0x9, 0x5, 0xf, 0x4, 0x10, 0x83, 0x7, 0x4, [@generic={0x2, 0x23}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x1, 0x7f, 0x1, [@generic={0x2, 0x21}]}}, {{0x9, 0x5, 0x3, 0x1, 0x3ff, 0x36, 0x2, 0x4, [@generic={0x2, 0x31}]}}, {{0x9, 0x5, 0x6, 0x0, 0x400, 0x3, 0x80, 0x7}}, {{0x9, 0x5, 0x2, 0x1, 0x8, 0xc, 0xe, 0x7f, [@generic={0x2, 0x21}, @generic={0x2, 0xd}]}}, {{0x9, 0x5, 0xf, 0xc, 0x8, 0xe2, 0x40, 0x0, [@generic={0x2, 0xa}]}}, {{0x9, 0x5, 0xc, 0x2, 0x0, 0x7, 0x2, 0x81}}, {{0x9, 0x5, 0xd, 0x8, 0x8, 0x5, 0x6, 0x5}}, {{0x9, 0x5, 0xf, 0x0, 0x20, 0x1, 0xe, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x186, 0x8, 0x3}]}}]}}]}}]}}, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x7, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) program did not crash single: failed to extract reproducer single: executing 1 programs separately with timeout 6m0s testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect detailed listing: executing program 0: syz_usb_connect(0x5, 0x200, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x50, 0x8f, 0xa5, 0x8, 0x2ef5, 0xa, 0x21c2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1ee, 0x3, 0x1, 0x9, 0xd0, 0x3f, [{{0x9, 0x4, 0xa7, 0xe4, 0xb, 0x99, 0x4f, 0x11, 0x3, [@uac_control={{0xa, 0x24, 0x1, 0x6, 0x6}, [@input_terminal={0xc, 0x24, 0x2, 0x4, 0x306, 0x4, 0x7, 0x1, 0xff, 0x18}, @selector_unit={0x5, 0x24, 0x5, 0x4, 0x10}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x708, 0x5, 0xf3, 0xfffd, 0x4, 0x3}, @selector_unit={0x5, 0x24, 0x5, 0x1, 0x1}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x203, 0x2, 0x2, 0x1, 0x64, 0x6}, @extension_unit={0x7, 0x24, 0x8, 0x5, 0x4}]}], [{{0x9, 0x5, 0x7, 0x0, 0x40, 0x0, 0x7f, 0xf7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x80, 0x6}]}}, {{0x9, 0x5, 0xe, 0x10, 0x208, 0x7, 0x6, 0x8, [@generic={0x2, 0xb}]}}, {{0x9, 0x5, 0x3, 0x0, 0x20, 0x6, 0x80, 0xa, [@generic={0x2, 0x31}]}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x0, 0x8, 0x1}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x4, 0xd, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7f, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x4}]}}, {{0x9, 0x5, 0x6, 0x0, 0x400, 0x5, 0x81, 0x2, [@generic={0x2, 0x31}, @generic={0x2, 0x10}]}}, {{0x9, 0x5, 0xe, 0xc, 0x3ff, 0x6, 0x6, 0x7, [@generic={0x2, 0xa}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x15, 0xfffd}]}}, {{0x9, 0x5, 0x9, 0x3, 0x8, 0xca, 0x80, 0x7, [@generic={0x2, 0x4}]}}, {{0x9, 0x5, 0x8e, 0x10, 0x8, 0x6, 0x5, 0x1, [@generic={0x2, 0x3}]}}, {{0x9, 0x5, 0xe, 0x10, 0x40, 0x9, 0x0, 0xe0}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x80, 0xf4, 0x4, [@generic={0x2, 0xe}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x3}]}}]}}, {{0x9, 0x4, 0xd5, 0xfd, 0x9, 0x76, 0xa0, 0xbb, 0x8, [@generic={0x2, 0xd}], [{{0x9, 0x5, 0x7, 0x10, 0x200, 0x7, 0x1, 0xa1, [@generic={0x2, 0x23}]}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0xfe, 0x2, 0x7f, [@generic={0x2, 0x31}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0xffff}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x4, 0x9, 0x9}}, {{0x9, 0x5, 0x9, 0x10, 0x7f7, 0x3, 0x7}}, {{0x9, 0x5, 0xd, 0x10, 0x200, 0x9, 0x9, 0x2}}, {{0x9, 0x5, 0x80, 0x10, 0x8, 0x90, 0xe, 0x81}}, {{0x9, 0x5, 0x5, 0x4, 0x200, 0x10, 0xf7, 0x3c, [@generic={0x2, 0x23}, @generic={0x2, 0xa}]}}, {{0x9, 0x5, 0xf, 0x2, 0x20, 0x8, 0x4, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x91, 0x3}]}}, {{0x9, 0x5, 0x8, 0xc, 0x20, 0x2, 0xfd, 0x9}}]}}, {{0x9, 0x4, 0xfb, 0x9, 0xb, 0xb5, 0x5b, 0x85, 0xf, [], [{{0x9, 0x5, 0x0, 0x2, 0x40, 0x8, 0x2, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0xc000}]}}, {{0x9, 0x5, 0xa, 0x1, 0x200, 0x92, 0x8, 0x2f, [@generic={0x2, 0x31}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x40, 0x3}]}}, {{0x9, 0x5, 0xf, 0x4, 0x10, 0x83, 0x7, 0x4, [@generic={0x2, 0x23}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x1, 0x7f, 0x1, [@generic={0x2, 0x21}]}}, {{0x9, 0x5, 0x3, 0x1, 0x3ff, 0x36, 0x2, 0x4, [@generic={0x2, 0x31}]}}, {{0x9, 0x5, 0x6, 0x0, 0x400, 0x3, 0x80, 0x7}}, {{0x9, 0x5, 0x2, 0x1, 0x8, 0xc, 0xe, 0x7f, [@generic={0x2, 0x21}, @generic={0x2, 0xd}]}}, {{0x9, 0x5, 0xf, 0xc, 0x8, 0xe2, 0x40, 0x0, [@generic={0x2, 0xa}]}}, {{0x9, 0x5, 0xc, 0x2, 0x0, 0x7, 0x2, 0x81}}, {{0x9, 0x5, 0xd, 0x8, 0x8, 0x5, 0x6, 0x5}}, {{0x9, 0x5, 0xf, 0x0, 0x20, 0x1, 0xe, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x186, 0x8, 0x3}]}}]}}]}}]}}, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x7, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) program crashed: WARNING in plfxlc_mac_release single: successfully extracted reproducer found reproducer with 1 syscalls minimizing guilty program testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect detailed listing: executing program 0: syz_usb_connect(0x5, 0x0, 0x0, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x7, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect detailed listing: executing program 0: syz_usb_connect(0x5, 0x173, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x50, 0x8f, 0xa5, 0x8, 0x2ef5, 0xa, 0x21c2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x161, 0x3, 0x1, 0x9, 0xd0, 0x3f, [{{0x9, 0x4, 0xa7, 0xe4, 0xb, 0x99, 0x4f, 0x11, 0x3, [@uac_control={{0xa, 0x24, 0x1, 0x6, 0x6}, [@input_terminal={0xc, 0x24, 0x2, 0x4, 0x306, 0x4, 0x7, 0x1, 0xff, 0x18}, @selector_unit={0x5, 0x24, 0x5, 0x4, 0x10}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x708, 0x5, 0xf3, 0xfffd, 0x4, 0x3}, @selector_unit={0x5, 0x24, 0x5, 0x1, 0x1}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x203, 0x2, 0x2, 0x1, 0x64, 0x6}, @extension_unit={0x7, 0x24, 0x8, 0x5, 0x4}]}], [{{0x9, 0x5, 0x7, 0x0, 0x40, 0x0, 0x7f, 0xf7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x80, 0x6}]}}, {{0x9, 0x5, 0xe, 0x10, 0x208, 0x7, 0x6, 0x8, [@generic={0x2, 0xb}]}}, {{0x9, 0x5, 0x3, 0x0, 0x20, 0x6, 0x80, 0xa, [@generic={0x2, 0x31}]}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x0, 0x8, 0x1}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x4, 0xd, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7f, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x4}]}}, {{0x9, 0x5, 0x6, 0x0, 0x400, 0x5, 0x81, 0x2, [@generic={0x2, 0x31}, @generic={0x2, 0x10}]}}, {{0x9, 0x5, 0xe, 0xc, 0x3ff, 0x6, 0x6, 0x7, [@generic={0x2, 0xa}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x15, 0xfffd}]}}, {{0x9, 0x5, 0x9, 0x3, 0x8, 0xca, 0x80, 0x7, [@generic={0x2, 0x4}]}}, {{0x9, 0x5, 0x8e, 0x10, 0x8, 0x6, 0x5, 0x1, [@generic={0x2, 0x3}]}}, {{0x9, 0x5, 0xe, 0x10, 0x40, 0x9, 0x0, 0xe0}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x80, 0xf4, 0x4, [@generic={0x2, 0xe}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x3}]}}]}}, {{0x9, 0x4, 0xd5, 0xfd, 0x9, 0x76, 0xa0, 0xbb, 0x8, [@generic={0x2, 0xd}], [{{0x9, 0x5, 0x7, 0x10, 0x200, 0x7, 0x1, 0xa1, [@generic={0x2, 0x23}]}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0xfe, 0x2, 0x7f, [@generic={0x2, 0x31}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0xffff}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x4, 0x9, 0x9}}, {{0x9, 0x5, 0x9, 0x10, 0x7f7, 0x3, 0x7}}, {{0x9, 0x5, 0xd, 0x10, 0x200, 0x9, 0x9, 0x2}}, {{0x9, 0x5, 0x80, 0x10, 0x8, 0x90, 0xe, 0x81}}, {{0x9, 0x5, 0x5, 0x4, 0x200, 0x10, 0xf7, 0x3c, [@generic={0x2, 0x23}, @generic={0x2, 0xa}]}}, {{0x9, 0x5, 0xf, 0x2, 0x20, 0x8, 0x4, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x91, 0x3}]}}, {{0x9, 0x5, 0x8, 0xc, 0x20, 0x2, 0xfd, 0x9}}]}}, {{0x9, 0x4, 0xfb, 0x9, 0x0, 0xb5, 0x5b, 0x85, 0xf}}]}}]}}, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x7, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) program crashed: WARNING in plfxlc_mac_release testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect detailed listing: executing program 0: syz_usb_connect(0x5, 0x10c, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x50, 0x8f, 0xa5, 0x8, 0x2ef5, 0xa, 0x21c2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfa, 0x3, 0x1, 0x9, 0xd0, 0x3f, [{{0x9, 0x4, 0xa7, 0xe4, 0xb, 0x99, 0x4f, 0x11, 0x3, [@uac_control={{0xa, 0x24, 0x1, 0x6, 0x6}, [@input_terminal={0xc, 0x24, 0x2, 0x4, 0x306, 0x4, 0x7, 0x1, 0xff, 0x18}, @selector_unit={0x5, 0x24, 0x5, 0x4, 0x10}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x708, 0x5, 0xf3, 0xfffd, 0x4, 0x3}, @selector_unit={0x5, 0x24, 0x5, 0x1, 0x1}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x203, 0x2, 0x2, 0x1, 0x64, 0x6}, @extension_unit={0x7, 0x24, 0x8, 0x5, 0x4}]}], [{{0x9, 0x5, 0x7, 0x0, 0x40, 0x0, 0x7f, 0xf7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x80, 0x6}]}}, {{0x9, 0x5, 0xe, 0x10, 0x208, 0x7, 0x6, 0x8, [@generic={0x2, 0xb}]}}, {{0x9, 0x5, 0x3, 0x0, 0x20, 0x6, 0x80, 0xa, [@generic={0x2, 0x31}]}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x0, 0x8, 0x1}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x4, 0xd, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7f, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x4}]}}, {{0x9, 0x5, 0x6, 0x0, 0x400, 0x5, 0x81, 0x2, [@generic={0x2, 0x31}, @generic={0x2, 0x10}]}}, {{0x9, 0x5, 0xe, 0xc, 0x3ff, 0x6, 0x6, 0x7, [@generic={0x2, 0xa}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x15, 0xfffd}]}}, {{0x9, 0x5, 0x9, 0x3, 0x8, 0xca, 0x80, 0x7, [@generic={0x2, 0x4}]}}, {{0x9, 0x5, 0x8e, 0x10, 0x8, 0x6, 0x5, 0x1, [@generic={0x2, 0x3}]}}, {{0x9, 0x5, 0xe, 0x10, 0x40, 0x9, 0x0, 0xe0}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x80, 0xf4, 0x4, [@generic={0x2, 0xe}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x3}]}}]}}, {{0x9, 0x4, 0xd5, 0xfd, 0x0, 0x76, 0xa0, 0xbb, 0x8, [@generic={0x2, 0xd}]}}, {{0x9, 0x4, 0xfb, 0x9, 0x0, 0xb5, 0x5b, 0x85, 0xf}}]}}]}}, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x7, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) program crashed: WARNING in plfxlc_mac_release testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect detailed listing: executing program 0: syz_usb_connect(0x5, 0xd7, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x50, 0x8f, 0xa5, 0x8, 0x2ef5, 0xa, 0x21c2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc5, 0x3, 0x1, 0x9, 0xd0, 0x3f, [{{0x9, 0x4, 0xa7, 0xe4, 0xb, 0x99, 0x4f, 0x11, 0x3, [@uac_control={{0xa, 0x24, 0x1, 0x6, 0x6}}], [{{0x9, 0x5, 0x7, 0x0, 0x40, 0x0, 0x7f, 0xf7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x80, 0x6}]}}, {{0x9, 0x5, 0xe, 0x10, 0x208, 0x7, 0x6, 0x8, [@generic={0x2, 0xb}]}}, {{0x9, 0x5, 0x3, 0x0, 0x20, 0x6, 0x80, 0xa, [@generic={0x2, 0x31}]}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x0, 0x8, 0x1}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x4, 0xd, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7f, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x4}]}}, {{0x9, 0x5, 0x6, 0x0, 0x400, 0x5, 0x81, 0x2, [@generic={0x2, 0x31}, @generic={0x2, 0x10}]}}, {{0x9, 0x5, 0xe, 0xc, 0x3ff, 0x6, 0x6, 0x7, [@generic={0x2, 0xa}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x15, 0xfffd}]}}, {{0x9, 0x5, 0x9, 0x3, 0x8, 0xca, 0x80, 0x7, [@generic={0x2, 0x4}]}}, {{0x9, 0x5, 0x8e, 0x10, 0x8, 0x6, 0x5, 0x1, [@generic={0x2, 0x3}]}}, {{0x9, 0x5, 0xe, 0x10, 0x40, 0x9, 0x0, 0xe0}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x80, 0xf4, 0x4, [@generic={0x2, 0xe}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x3}]}}]}}, {{0x9, 0x4, 0xd5, 0xfd, 0x0, 0x76, 0xa0, 0xbb, 0x8, [@generic={0x2, 0xd}]}}, {{0x9, 0x4, 0xfb, 0x9, 0x0, 0xb5, 0x5b, 0x85, 0xf}}]}}]}}, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x7, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) program crashed: WARNING in plfxlc_mac_release testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect detailed listing: executing program 0: syz_usb_connect(0x5, 0x41, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x50, 0x8f, 0xa5, 0x8, 0x2ef5, 0xa, 0x21c2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2f, 0x3, 0x1, 0x9, 0xd0, 0x3f, [{{0x9, 0x4, 0xa7, 0xe4, 0x0, 0x99, 0x4f, 0x11, 0x3, [@uac_control={{0xa, 0x24, 0x1, 0x6, 0x6}}]}}, {{0x9, 0x4, 0xd5, 0xfd, 0x0, 0x76, 0xa0, 0xbb, 0x8, [@generic={0x2, 0xd}]}}, {{0x9, 0x4, 0xfb, 0x9, 0x0, 0xb5, 0x5b, 0x85, 0xf}}]}}]}}, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x7, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) program crashed: WARNING in plfxlc_mac_release testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect detailed listing: executing program 0: syz_usb_connect(0x5, 0x41, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x50, 0x8f, 0xa5, 0x8, 0x2ef5, 0xa, 0x21c2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2f, 0x3, 0x1, 0x9, 0xd0, 0x3f, [{{0x9, 0x4, 0xa7, 0xe4, 0x0, 0x99, 0x4f, 0x11, 0x3, [@uac_control={{0xa, 0x24, 0x1, 0x6, 0x6}}]}}, {{0x9, 0x4, 0xd5, 0xfd, 0x0, 0x76, 0xa0, 0xbb, 0x8, [@generic={0x2, 0xd}]}}, {{0x9, 0x4, 0xfb, 0x9, 0x0, 0xb5, 0x5b, 0x85, 0xf}}]}}]}}, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect detailed listing: executing program 0: syz_usb_connect(0x5, 0x41, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x50, 0x8f, 0xa5, 0x8, 0x2ef5, 0xa, 0x21c2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2f, 0x3, 0x1, 0x9, 0xd0, 0x3f, [{{0x9, 0x4, 0xa7, 0xe4, 0x0, 0x99, 0x4f, 0x11, 0x3, [@uac_control={{0xa, 0x24, 0x1, 0x6, 0x6}}]}}, {{0x9, 0x4, 0xd5, 0xfd, 0x0, 0x76, 0xa0, 0xbb, 0x8, [@generic={0x2, 0xd}]}}, {{0x9, 0x4, 0xfb, 0x9, 0x0, 0xb5, 0x5b, 0x85, 0xf}}]}}]}}, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0}) program crashed: WARNING in plfxlc_mac_release extracting C reproducer testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect program crashed: WARNING in plfxlc_mac_release simplifying C reproducer testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect program crashed: WARNING in plfxlc_mac_release testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect program crashed: WARNING in plfxlc_mac_release testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect program crashed: WARNING in plfxlc_mac_release testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect program crashed: WARNING in plfxlc_mac_release testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect program crashed: WARNING in plfxlc_mac_release testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect program crashed: WARNING in plfxlc_mac_release testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect program crashed: WARNING in plfxlc_mac_release reproducing took 31m26.808948147s repro crashed as (corrupted=false): plfxlc 1-1:1.167: Unit type is station plfxlc 1-1:1.167: vendor command failed (-71) plfxlc 1-1:1.167: FPGA download failed (-22) ------------[ cut here ]------------ WARNING: CPU: 1 PID: 2279 at drivers/net/wireless/purelifi/plfxlc/mac.c:105 plfxlc_mac_release+0x98/0xc8 drivers/net/wireless/purelifi/plfxlc/mac.c:105 Modules linked in: CPU: 1 UID: 0 PID: 2279 Comm: kworker/1:2 Not tainted 6.14.0-rc7-syzkaller-ga2392f333575 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 Workqueue: usb_hub_wq hub_event pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : plfxlc_mac_release+0x98/0xc8 drivers/net/wireless/purelifi/plfxlc/mac.c:105 lr : plfxlc_mac_release+0x98/0xc8 drivers/net/wireless/purelifi/plfxlc/mac.c:105 sp : ffff8000a16968c0 x29: ffff8000a16968c0 x28: dfff800000000000 x27: ffff7000142d2d24 x26: 00000000ffffffea x25: ffff0000db95e2a0 x24: ffff0000db95b0a0 x23: ffff8000a1696a80 x22: ffff0000db958e90 x21: ffff0000d7cc4000 x20: 0000000000000001 x19: 0000000000000000 x18: ffff8000a1696480 x17: 000000000000e514 x16: ffff800080467a7c x15: 0000000000000001 x14: 1fffe0001b72bc5e x13: 0000000000000000 x12: 0000000000000000 x11: ffff60001b72bc5f x10: 0000000000ff0100 x9 : 0000000000000000 x8 : ffff0000cd1a1e80 x7 : 0000000000000000 x6 : 0000000000000000 x5 : ffff80009381f4b0 x4 : 0000000000000008 x3 : ffff80008045ebc8 x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 Call trace: plfxlc_mac_release+0x98/0xc8 drivers/net/wireless/purelifi/plfxlc/mac.c:105 (P) probe+0x264/0xdd8 drivers/net/wireless/purelifi/plfxlc/usb.c:694 usb_probe_interface+0x598/0xa40 drivers/usb/core/driver.c:396 really_probe+0x38c/0x8fc drivers/base/dd.c:658 __driver_probe_device+0x194/0x374 drivers/base/dd.c:800 driver_probe_device+0x78/0x330 drivers/base/dd.c:830 __device_attach_driver+0x2a8/0x4f4 drivers/base/dd.c:958 bus_for_each_drv+0x228/0x2bc drivers/base/bus.c:462 __device_attach+0x2b4/0x434 drivers/base/dd.c:1030 device_initial_probe+0x24/0x34 drivers/base/dd.c:1079 bus_probe_device+0x178/0x240 drivers/base/bus.c:537 device_add+0x728/0xa6c drivers/base/core.c:3666 usb_set_configuration+0x15cc/0x1b38 drivers/usb/core/message.c:2210 usb_generic_driver_probe+0x8c/0x148 drivers/usb/core/generic.c:250 usb_probe_device+0x1a4/0x348 drivers/usb/core/driver.c:291 really_probe+0x38c/0x8fc drivers/base/dd.c:658 __driver_probe_device+0x194/0x374 drivers/base/dd.c:800 driver_probe_device+0x78/0x330 drivers/base/dd.c:830 __device_attach_driver+0x2a8/0x4f4 drivers/base/dd.c:958 bus_for_each_drv+0x228/0x2bc drivers/base/bus.c:462 __device_attach+0x2b4/0x434 drivers/base/dd.c:1030 device_initial_probe+0x24/0x34 drivers/base/dd.c:1079 bus_probe_device+0x178/0x240 drivers/base/bus.c:537 device_add+0x728/0xa6c drivers/base/core.c:3666 usb_new_device+0x908/0x14ac drivers/usb/core/hub.c:2663 hub_port_connect drivers/usb/core/hub.c:5533 [inline] hub_port_connect_change drivers/usb/core/hub.c:5673 [inline] port_event drivers/usb/core/hub.c:5833 [inline] hub_event+0x2454/0x4280 drivers/usb/core/hub.c:5915 process_one_work+0x810/0x1638 kernel/workqueue.c:3238 process_scheduled_works kernel/workqueue.c:3319 [inline] worker_thread+0x97c/0xeec kernel/workqueue.c:3400 kthread+0x65c/0x7b0 kernel/kthread.c:464 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:862 irq event stamp: 42582 hardirqs last enabled at (42581): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline] hardirqs last enabled at (42581): [] _raw_spin_unlock_irqrestore+0x38/0x98 kernel/locking/spinlock.c:194 hardirqs last disabled at (42582): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:488 softirqs last enabled at (42506): [] softirq_handle_end kernel/softirq.c:407 [inline] softirqs last enabled at (42506): [] handle_softirqs+0xb44/0xd34 kernel/softirq.c:589 softirqs last disabled at (42497): [] __do_softirq+0x14/0x20 kernel/softirq.c:595 ---[ end trace 0000000000000000 ]--- plfxlc 1-1:1.167: pureLifi:Device error plfxlc 1-1:1.167: probe with driver plfxlc failed with error -22 usb 1-1: USB disconnect, device number 2 usb 1-1: new high-speed USB device number 3 using dummy_hcd usb 1-1: Using ep0 maxpacket: 8 usb 1-1: unable to get BOS descriptor or descriptor too short usb 1-1: config 1 has an invalid interface number: 167 but max is 2 usb 1-1: config 1 has an invalid descriptor of length 118, skipping remainder of the config usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 usb 1-1: config 1 has no interface number 0 usb 1-1: config 1 interface 167 has no altsetting 0 usb 1-1: New USB device found, idVendor=2ef5, idProduct=000a, bcdDevice=21.c2 usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 usb 1-1: Product: syz usb 1-1: Manufacturer: syz usb 1-1: SerialNumber: syz plfxlc 1-1:1.167: Firmware Version: 0 plfxlc 1-1:1.167: Unit type is station plfxlc 1-1:1.167: vendor command failed (-71) plfxlc 1-1:1.167: FPGA download failed (-22) ------------[ cut here ]------------ WARNING: CPU: 1 PID: 2279 at drivers/net/wireless/purelifi/plfxlc/mac.c:105 plfxlc_mac_release+0x98/0xc8 drivers/net/wireless/purelifi/plfxlc/mac.c:105 Modules linked in: CPU: 1 UID: 0 PID: 2279 Comm: kworker/1:2 Tainted: G W 6.14.0-rc7-syzkaller-ga2392f333575 #0 Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 Workqueue: usb_hub_wq hub_event pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : plfxlc_mac_release+0x98/0xc8 drivers/net/wireless/purelifi/plfxlc/mac.c:105 lr : plfxlc_mac_release+0x98/0xc8 drivers/net/wireless/purelifi/plfxlc/mac.c:105 sp : ffff8000a16968c0 x29: ffff8000a16968c0 x28: dfff800000000000 x27: ffff7000142d2d24 x26: 00000000ffffffea x25: ffff0000c6d8e2a0 x24: ffff0000c6d8b0a0 x23: ffff8000a1696a80 x22: ffff0000c6d88e90 x21: ffff0000c71da000 x20: 0000000000000001 x19: 0000000000000000 x18: 0000000000000008 x17: 0000000000000000 x16: ffff800080467a7c x15: 0000000000000001 x14: 1fffe00018db1c5e x13: 0000000000000000 x12: 0000000000000000 x11: ffff600018db1c5f x10: 0000000000ff0100 x9 : 0000000000000000 x8 : ffff0000cd1a1e80 x7 : ffff800086786224 x6 : 0000000000000000 x5 : 0000000000000001 x4 : 0000000000000001 x3 : ffff80008045ebc8 x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 Call trace: plfxlc_mac_release+0x98/0xc8 drivers/net/wireless/purelifi/plfxlc/mac.c:105 (P) probe+0x264/0xdd8 drivers/net/wireless/purelifi/plfxlc/usb.c:694 usb_probe_interface+0x598/0xa40 drivers/usb/core/driver.c:396 really_probe+0x38c/0x8fc drivers/base/dd.c:658 __driver_probe_device+0x194/0x374 drivers/base/dd.c:800 driver_probe_device+0x78/0x330 drivers/base/dd.c:830 __device_attach_driver+0x2a8/0x4f4 drivers/base/dd.c:958 bus_for_each_drv+0x228/0x2bc drivers/base/bus.c:462 __device_attach+0x2b4/0x434 drivers/base/dd.c:1030 device_initial_probe+0x24/0x34 drivers/base/dd.c:1079 bus_probe_device+0x178/0x240 drivers/base/bus.c:537 device_add+0x728/0xa6c drivers/base/core.c:3666 usb_set_configuration+0x15cc/0x1b38 drivers/usb/core/message.c:2210 usb_generic_driver_probe+0x8c/0x148 drivers/usb/core/generic.c:250 usb_probe_device+0x1a4/0x348 drivers/usb/core/driver.c:291 really_probe+0x38c/0x8fc drivers/base/dd.c:658 __driver_probe_device+0x194/0x374 drivers/base/dd.c:800 driver_probe_device+0x78/0x330 drivers/base/dd.c:830 __device_attach_driver+0x2a8/0x4f4 drivers/base/dd.c:958 bus_for_each_drv+0x228/0x2bc drivers/base/bus.c:462 __device_attach+0x2b4/0x434 drivers/base/dd.c:1030 device_initial_probe+0x24/0x34 drivers/base/dd.c:1079 bus_probe_device+0x178/0x240 drivers/base/bus.c:537 device_add+0x728/0xa6c drivers/base/core.c:3666 usb_new_device+0x908/0x14ac drivers/usb/core/hub.c:2663 hub_port_connect drivers/usb/core/hub.c:5533 [inline] hub_port_connect_change drivers/usb/core/hub.c:5673 [inline] port_event drivers/usb/core/hub.c:5833 [inline] hub_event+0x2454/0x4280 drivers/usb/core/hub.c:5915 process_one_work+0x810/0x1638 kernel/workqueue.c:3238 process_scheduled_works kernel/workqueue.c:3319 [inline] worker_thread+0x9b4/0xeec kernel/workqueue.c:3400 kthread+0x65c/0x7b0 kernel/kthread.c:464 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:862 irq event stamp: 54462 hardirqs last enabled at (54461): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline] hardirqs last enabled at (54461): [] _raw_spin_unlock_irqrestore+0x38/0x98 kernel/locking/spinlock.c:194 hardirqs last disabled at (54462): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:488 softirqs last enabled at (54342): [] spin_unlock_bh include/linux/spinlock.h:396 [inline] softirqs last enabled at (54342): [] ieee80211_get_txq_stats+0x2e4/0x4c4 net/mac80211/cfg.c:4662 softirqs last disabled at (54340): [] spin_lock_bh include/linux/spinlock.h:356 [inline] softirqs last disabled at (54340): [] ieee80211_get_txq_stats+0x38/0x4c4 net/mac80211/cfg.c:4634 ---[ end trace 0000000000000000 ]--- plfxlc 1-1:1.167: pureLifi:Device error plfxlc 1-1:1.167: probe with driver plfxlc failed with error -22 usb 1-1: USB disconnect, device number 3 usb 1-1: new high-speed USB device number 4 using dummy_hcd usb 1-1: Using ep0 maxpacket: 8 usb 1-1: unable to get BOS descriptor or descriptor too short usb 1-1: config 1 has an invalid interface number: 167 but max is 2 usb 1-1: config 1 has an invalid descriptor of length 118, skipping remainder of the config usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 usb 1-1: config 1 has no interface number 0 usb 1-1: config 1 interface 167 has no altsetting 0 usb 1-1: New USB device found, idVendor=2ef5, idProduct=000a, bcdDevice=21.c2 usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 usb 1-1: Product: syz usb 1-1: Manufacturer: syz usb 1-1: SerialNumber: syz plfxlc 1-1:1.167: Firmware Version: 0 plfxlc 1-1:1.167: Unit type is station plfxlc 1-1:1.167: vendor command failed (-71) plfxlc 1-1:1.167: FPGA download failed (-22) ------------[ cut here ]------------ WARNING: CPU: 1 PID: 2279 at drivers/net/wireless/purelifi/plfxlc/mac.c:105 plfxlc_mac_release+0x98/0xc8 drivers/net/wireless/purelifi/plfxlc/mac.c:105 Modules linked in: CPU: 1 UID: 0 PID: 2279 Comm: kworker/1:2 Tainted: G W 6.14.0-rc7-syzkaller-ga2392f333575 #0 Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 Workqueue: usb_hub_wq hub_event pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : plfxlc_mac_release+0x98/0xc8 drivers/net/wireless/purelifi/plfxlc/mac.c:105 lr : plfxlc_mac_release+0x98/0xc8 drivers/net/wireless/purelifi/plfxlc/mac.c:105 sp : ffff8000a16968c0 x29: ffff8000a16968c0 x28: dfff800000000000 x27: ffff7000142d2d24 x26: 00000000ffffffea x25: ffff0000c6c862a0 x24: ffff0000c6c830a0 x23: ffff8000a1696a80 x22: ffff0000c6c80e90 x21: ffff0000c78a8000 x20: 0000000000000001 x19: 0000000000000000 x18: 0000000000000008 x17: 0000000000000000 x16: ffff800080467a7c x15: 0000000000000001 x14: 1fffe00018d90c5e x13: 0000000000000000 x12: 0000000000000000 x11: ffff600018d90c5f x10: 0000000000ff0100 x9 : 0000000000000000 x8 : ffff0000cd1a1e80 x7 : ffff800086786224 x6 : 0000000000000000 x5 : 0000000000000001 x4 : 0000000000000001 x3 : ffff80008045ebc8 x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 Call trace: plfxlc_mac_release+0x98/0xc8 drivers/net/wireless/purelifi/plfxlc/mac.c:105 (P) probe+0x264/0xdd8 drivers/net/wireless/purelifi/plfxlc/usb.c:694 usb_probe_interface+0x598/0xa40 drivers/usb/core/driver.c:396 really_probe+0x38c/0x8fc drivers/base/dd.c:658 __driver_probe_device+0x194/0x374 drivers/base/dd.c:800 driver_probe_device+0x78/0x330 drivers/base/dd.c:830 __device_attach_driver+0x2a8/0x4f4 drivers/base/dd.c:958 bus_for_each_drv+0x228/0x2bc drivers/base/bus.c:462 __device_attach+0x2b4/0x434 drivers/base/dd.c:1030 device_initial_probe+0x24/0x34 drivers/base/dd.c:1079 bus_probe_device+0x178/0x240 drivers/base/bus.c:537 device_add+0x728/0xa6c drivers/base/core.c:3666 usb_set_configuration+0x15cc/0x1b38 drivers/usb/core/message.c:2210 usb_generic_driver_probe+0x8c/0x148 drivers/usb/core/generic.c:250 usb_probe_device+0x1a4/0x348 drivers/usb/core/driver.c:291 really_probe+0x38c/0x8fc drivers/base/dd.c:658 __driver_probe_device+0x194/0x374 drivers/base/dd.c:800 driver_probe_device+0x78/0x330 drivers/base/dd.c:830 __device_attach_driver+0x2a8/0x4f4 drivers/base/dd.c:958 bus_for_each_drv+0x228/0x2bc drivers/base/bus.c:462 __device_attach+0x2b4/0x434 drivers/base/dd.c:1030 device_initial_probe+0x24/0x34 drivers/base/dd.c:1079 bus_probe_device+0x178/0x240 drivers/base/bus.c:537 device_add+0x728/0xa6c drivers/base/core.c:3666 usb_new_device+0x908/0x14ac drivers/usb/core/hub.c:2663 hub_port_connect drivers/usb/core/hub.c:5533 [inline] hub_port_connect_change drivers/usb/core/hub.c:5673 [inline] port_event drivers/usb/core/hub.c:5833 [inline] hub_event+0x2454/0x4280 drivers/usb/core/hub.c:5915 process_one_work+0x810/0x1638 kernel/workqueue.c:3238 process_scheduled_works kernel/workqueue.c:3319 [inline] worker_thread+0x9b4/0xeec kernel/workqueue.c:3400 kthread+0x65c/0x7b0 kernel/kthread.c:464 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:862 irq event stamp: 65008 hardirqs last enabled at (65007): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline] hardirqs last enabled at (65007): [] _raw_spin_unlock_irqrestore+0x38/0x98 kernel/locking/spinlock.c:194 hardirqs last disabled at (65008): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:488 softirqs last enabled at (64908): [] spin_unlock_bh include/linux/spinlock.h:396 [inline] softirqs last enabled at (64908): [] ieee80211_get_txq_stats+0x2e4/0x4c4 net/mac80211/cfg.c:4662 softirqs last disabled at (64906): [] spin_lock_bh include/linux/spinlock.h:356 [inline] softirqs last disabled at (64906): [] ieee80211_get_txq_stats+0x38/0x4c4 net/mac80211/cfg.c:4634 ---[ end trace 0000000000000000 ]--- plfxlc 1-1:1.167: pureLifi:Device error plfxlc 1-1:1.167: probe with driver plfxlc failed with error -22 usb 1-1: USB disconnect, device number 4 usb 1-1: new high-speed USB device number 5 using dummy_hcd usb 1-1: Using ep0 maxpacket: 8 usb 1-1: unable to get BOS descriptor or descriptor too short usb 1-1: config 1 has an invalid interface number: 167 but max is 2 usb 1-1: config 1 has an invalid descriptor of length 118, skipping remainder of the config usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 usb 1-1: config 1 has no interface number 0 usb 1-1: config 1 interface 167 has no altsetting 0 usb 1-1: New USB device found, idVendor=2ef5, idProduct=000a, bcdDevice=21.c2 usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 usb 1-1: Product: syz usb 1-1: Manufacturer: syz usb 1-1: SerialNumber: syz plfxlc 1-1:1.167: Firmware Version: 0 plfxlc 1-1:1.167: Unit type is station plfxlc 1-1:1.167: vendor command failed (-71) plfxlc 1-1:1.167: FPGA download failed (-22) ------------[ cut here ]------------ WARNING: CPU: 1 PID: 2279 at drivers/net/wireless/purelifi/plfxlc/mac.c:105 plfxlc_mac_release+0x98/0xc8 drivers/net/wireless/purelifi/plfxlc/mac.c:105 Modules linked in: CPU: 1 UID: 0 PID: 2279 Comm: kworker/1:2 Tainted: G W 6.14.0-rc7-syzkaller-ga2392f333575 #0 Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 Workqueue: usb_hub_wq hub_event pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : plfxlc_mac_release+0x98/0xc8 drivers/net/wireless/purelifi/plfxlc/mac.c:105 lr : plfxlc_mac_release+0x98/0xc8 drivers/net/wireless/purelifi/plfxlc/mac.c:105 sp : ffff8000a16968c0 x29: ffff8000a16968c0 x28: dfff800000000000 x27: ffff7000142d2d24 x26: 00000000ffffffea x25: ffff0000d9cb62a0 x24: ffff0000d9cb30a0 x23: ffff8000a1696a80 x22: ffff0000d9cb0e90 x21: ffff0000c78ae000 x20: 0000000000000001 x19: 0000000000000000 x18: 0000000000000008 x17: 0000000000000000 x16: ffff800080467a7c x15: 0000000000000001 x14: 1fffe0001b396c5e x13: 0000000000000000 x12: 0000000000000000 x11: ffff60001b396c5f x10: 0000000000ff0100 x9 : 0000000000000000 x8 : ffff0000cd1a1e80 x7 : ffff800086786224 x6 : 0000000000000000 x5 : 0000000000000001 x4 : 0000000000000001 x3 : ffff80008045ebc8 x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 Call trace: plfxlc_mac_release+0x98/0xc8 drivers/net/wireless/purelifi/plfxlc/mac.c:105 (P) probe+0x264/0xdd8 drivers/net/wireless/purelifi/plfxlc/usb.c:694 usb_probe_interface+0x598/0xa40 drivers/usb/core/driver.c:396 really_probe+0x38c/0x8fc drivers/base/dd.c:658 __driver_probe_device+0x194/0x374 drivers/base/dd.c:800 driver_probe_device+0x78/0x330 drivers/base/dd.c:830 __device_attach_driver+0x2a8/0x4f4 drivers/base/dd.c:958 bus_for_each_drv+0x228/0x2bc drivers/base/bus.c:462 __device_attach+0x2b4/0x434 drivers/base/dd.c:1030 device_initial_probe+0x24/0x34 drivers/base/dd.c:1079 bus_probe_device+0x178/0x240 drivers/base/bus.c:537 device_add+0x728/0xa6c drivers/base/core.c:3666 usb_set_configuration+0x15cc/0x1b38 drivers/usb/core/message.c:2210 usb_generic_driver_probe+0x8c/0x148 drivers/usb/core/generic.c:250 usb_probe_device+0x1a4/0x348 drivers/usb/core/driver.c:291 really_probe+0x38c/0x8fc drivers/base/dd.c:658 __driver_probe_device+0x194/0x374 drivers/base/dd.c:800 driver_probe_device+0x78/0x330 drivers/base/dd.c:830 __device_attach_driver+0x2a8/0x4f4 drivers/base/dd.c:958 bus_for_each_drv+0x228/0x2bc drivers/base/bus.c:462 __device_attach+0x2b4/0x434 drivers/base/dd.c:1030 device_initial_probe+0x24/0x34 drivers/base/dd.c:1079 bus_probe_device+0x178/0x240 drivers/base/bus.c:537 device_add+0x728/0xa6c drivers/base/core.c:3666 usb_new_device+0x908/0x14ac drivers/usb/core/hub.c:2663 hub_port_connect drivers/usb/core/hub.c:5533 [inline] hub_port_connect_change drivers/usb/core/hub.c:5673 [inline] port_event drivers/usb/core/hub.c:5833 [inline] hub_event+0x2454/0x4280 drivers/usb/core/hub.c:5915 process_one_work+0x810/0x1638 kernel/workqueue.c:3238 process_scheduled_works kernel/workqueue.c:3319 [inline] worker_thread+0x9b4/0xeec kernel/workqueue.c:3400 kthread+0x65c/0x7b0 kernel/kthread.c:464 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:862 irq event stamp: 75568 hardirqs last enabled at (75567): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline] hardirqs last enabled at (75567): [] _raw_spin_unlock_irqrestore+0x38/0x98 kernel/locking/spinlock.c:194 hardirqs last disabled at (75568): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:488 softirqs last enabled at (75468): [] spin_unlock_bh include/linux/spinlock.h:396 [inline] softirqs last enabled at (75468): [] ieee80211_get_txq_stats+0x2e4/0x4c4 net/mac80211/cfg.c:4662 softirqs last disabled at (75466): [] spin_lock_bh include/linux/spinlock.h:356 [inline] softirqs last disabled at (75466): [] ieee80211_get_txq_stats+0x38/0x4c4 net/mac80211/cfg.c:4634 ---[ end trace 0000000000000000 ]--- plfxlc 1-1:1.167: pureLifi:Device error plfxlc 1-1:1.167: probe with driver plfxlc failed with error -22 usb 1-1: USB disconnect, device number 5 usb 1-1: new high-speed USB device number 6 using dummy_hcd usb 1-1: Using ep0 maxpacket: 8 usb 1-1: unable to get BOS descriptor or descriptor too short usb 1-1: config 1 has an invalid interface number: 167 but max is 2 usb 1-1: config 1 has an invalid descriptor of length 118, skipping remainder of the config usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 usb 1-1: config 1 has no interface number 0 usb 1-1: config 1 interface 167 has no altsetting 0 usb 1-1: New USB device found, idVendor=2ef5, idProduct=000a, bcdDevice=21.c2 usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 usb 1-1: Product: syz usb 1-1: Manufacturer: syz usb 1-1: SerialNumber: syz plfxlc 1-1:1.167: Firmware Version: 0 plfxlc 1-1:1.167: Unit type is station plfxlc 1-1:1.167: vendor command failed (-71) plfxlc 1-1:1.167: FPGA download failed (-22) ------------[ cut here ]------------ WARNING: CPU: 1 PID: 2279 at drivers/net/wireless/purelifi/plfxlc/mac.c:105 plfxlc_mac_release+0x98/0xc8 drivers/net/wireless/purelifi/plfxlc/mac.c:105 Modules linked in: CPU: 1 UID: 0 PID: 2279 Comm: kworker/1:2 Tainted: G W 6.14.0-rc7-syzkaller-ga2392f333575 #0 Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 Workqueue: usb_hub_wq hub_event pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : plfxlc_mac_release+0x98/0xc8 drivers/net/wireless/purelifi/plfxlc/mac.c:105 lr : plfxlc_mac_release+0x98/0xc8 drivers/net/wireless/purelifi/plfxlc/mac.c:105 sp : ffff8000a16968c0 x29: ffff8000a16968c0 x28: dfff800000000000 x27: ffff7000142d2d24 x26: 00000000ffffffea x25: ffff0000d7fde2a0 x24: ffff0000d7fdb0a0 x23: ffff8000a1696a80 x22: ffff0000d7fd8e90 x21: ffff0000c6c74000 x20: 0000000000000001 x19: 0000000000000000 x18: 0000000000000008 x17: 0000000000000000 x16: ffff800080467a7c x15: 0000000000000001 x14: 1fffe0001affbc5e x13: 0000000000000000 x12: 0000000000000000 x11: ffff60001affbc5f x10: 0000000000ff0100 x9 : 0000000000000000 x8 : ffff0000cd1a1e80 x7 : ffff800086786224 x6 : 0000000000000000 x5 : 0000000000000001 x4 : 0000000000000001 x3 : ffff80008045ebc8 x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 Call trace: plfxlc_mac_release+0x98/0xc8 drivers/net/wireless/purelifi/plfxlc/mac.c:105 (P) probe+0x264/0xdd8 drivers/net/wireless/purelifi/plfxlc/usb.c:694 usb_probe_interface+0x598/0xa40 drivers/usb/core/driver.c:396 really_probe+0x38c/0x8fc drivers/base/dd.c:658 __driver_probe_device+0x194/0x374 drivers/base/dd.c:800 driver_probe_device+0x78/0x330 drivers/base/dd.c:830 __device_attach_driver+0x2a8/0x4f4 drivers/base/dd.c:958 bus_for_each_drv+0x228/0x2bc drivers/base/bus.c:462 __device_attach+0x2b4/0x434 drivers/base/dd.c:1030 device_initial_probe+0x24/0x34 drivers/base/dd.c:1079 bus_probe_device+0x178/0x240 drivers/base/bus.c:537 device_add+0x728/0xa6c drivers/base/core.c:3666 usb_set_configuration+0x15cc/0x1b38 drivers/usb/core/message.c:2210 usb_generic_driver_probe+0x8c/0x148 drivers/usb/core/generic.c:250 usb_probe_device+0x1a4/0x348 drivers/usb/core/driver.c:291 really_probe+0x38c/0x8fc drivers/base/dd.c:658 __driver_probe_device+0x194/0x374 drivers/base/dd.c:800 driver_probe_device+0x78/0x330 drivers/base/dd.c:830 __device_attach_driver+0x2a8/0x4f4 drivers/base/dd.c:958 bus_for_each_drv+0x228/0x2bc drivers/base/bus.c:462 __device_attach+0x2b4/0x434 drivers/base/dd.c:1030 device_initial_probe+0x24/0x34 drivers/base/dd.c:1079 bus_probe_device+0x178/0x240 drivers/base/bus.c:537 device_add+0x728/0xa6c drivers/base/core.c:3666 usb_new_device+0x908/0x14ac drivers/usb/core/hub.c:2663 hub_port_connect drivers/usb/core/hub.c:5533 [inline] hub_port_connect_change drivers/usb/core/hub.c:5673 [inline] port_event drivers/usb/core/hub.c:5833 [inline] hub_event+0x2454/0x4280 drivers/usb/core/hub.c:5915 process_one_work+0x810/0x1638 kernel/workqueue.c:3238 process_scheduled_works kernel/workqueue.c:3319 [inline] worker_thread+0x9b4/0xeec kernel/workqueue.c:3400 kthread+0x65c/0x7b0 kernel/kthread.c:464 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:862 irq event stamp: 86314 hardirqs last enabled at (86313): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline] hardirqs last enabled at (86313): [] _raw_spin_unlock_irqrestore+0x38/0x98 kernel/locking/spinlock.c:194 hardirqs last disabled at (86314): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:488 softirqs last enabled at (86208): [] spin_unlock_bh include/linux/spinlock.h:396 [inline] softirqs last enabled at (86208): [] ieee80211_get_txq_stats+0x2e4/0x4c4 net/mac80211/cfg.c:4662 softirqs last disabled at (86206): [] spin_lock_bh include/linux/spinlock.h:356 [inline] softirqs last disabled at (86206): [] ieee80211_get_txq_stats+0x38/0x4c4 net/mac80211/cfg.c:4634 ---[ end trace 0000000000000000 ]--- plfxlc 1-1:1.167: pureLifi:Device error plfxlc 1-1:1.167: probe with driver plfxlc failed with error -22 usb 1-1: USB disconnect, device number 6 usb 1-1: new high-speed USB device number 7 using dummy_hcd usb 1-1: Using ep0 maxpacket: 8 usb 1-1: unable to get BOS descriptor or descriptor too short usb 1-1: config 1 has an invalid interface number: 167 but max is 2 usb 1-1: config 1 has an invalid descriptor of length 118, skipping remainder of the config usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 usb 1-1: config 1 has no interface number 0 usb 1-1: config 1 interface 167 has no altsetting 0 usb 1-1: New USB device found, idVendor=2ef5, idProduct=000a, bcdDevice=21.c2 usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 usb 1-1: Product: syz usb 1-1: Manufacturer: syz usb 1-1: SerialNumber: syz plfxlc 1-1:1.167: Firmware Version: 0 plfxlc 1-1:1.167: Unit type is station plfxlc 1-1:1.167: vendor command failed (-71) plfxlc 1-1:1.167: FPGA download failed (-22) ------------[ cut here ]------------ WARNING: CPU: 1 PID: 2279 at drivers/net/wireless/purelifi/plfxlc/mac.c:105 plfxlc_mac_release+0x98/0xc8 drivers/net/wireless/purelifi/plfxlc/mac.c:105 Modules linked in: CPU: 1 UID: 0 PID: 2279 Comm: kworker/1:2 Tainted: G W 6.14.0-rc7-syzkaller-ga2392f333575 #0 Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 Workqueue: usb_hub_wq hub_event pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : plfxlc_mac_release+0x98/0xc8 drivers/net/wireless/purelifi/plfxlc/mac.c:105 lr : plfxlc_mac_release+0x98/0xc8 drivers/net/wireless/purelifi/plfxlc/mac.c:105 sp : ffff8000a16968c0 x29: ffff8000a16968c0 x28: dfff800000000000 x27: ffff7000142d2d24 x26: 00000000ffffffea x25: ffff0000c88a62a0 x24: ffff0000c88a30a0 x23: ffff8000a1696a80 x22: ffff0000c88a0e90 x21: ffff0000d7fdb000 x20: 0000000000000001 x19: 0000000000000000 x18: 0000000000000008 x17: 0000000000000000 x16: ffff800080467a7c x15: 0000000000000001 x14: 1fffe00019114c5e x13: 0000000000000000 x12: 0000000000000000 x11: ffff600019114c5f x10: 0000000000ff0100 x9 : 0000000000000000 x8 : ffff0000cd1a1e80 x7 : ffff800086786224 x6 : 0000000000000000 x5 : 0000000000000001 x4 : 0000000000000001 x3 : ffff80008045ebc8 x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 Call trace: plfxlc_mac_release+0x98/0xc8 drivers/net/wireless/purelifi/plfxlc/mac.c:105 (P) probe+0x264/0xdd8 drivers/net/wireless/purelifi/plfxlc/usb.c:694 usb_probe_interface+0x598/0xa40 drivers/usb/core/driver.c:396 really_probe+0x38c/0x8fc drivers/base/dd.c:658 __driver_probe_device+0x194/0x374 drivers/base/dd.c:800 driver_probe_device+0x78/0x330 drivers/base/dd.c:830 __device_attach_driver+0x2a8/0x4f4 drivers/base/dd.c:958 bus_for_each_drv+0x228/0x2bc drivers/base/bus.c:462 __device_attach+0x2b4/0x434 drivers/base/dd.c:1030 device_initial_probe+0x24/0x34 drivers/base/dd.c:1079 bus_probe_device+0x178/0x240 drivers/base/bus.c:537 device_add+0x728/0xa6c drivers/base/core.c:3666 usb_set_configuration+0x15cc/0x1b38 drivers/usb/core/message.c:2210 usb_generic_driver_probe+0x8c/0x148 drivers/usb/core/generic.c:250 usb_probe_device+0x1a4/0x348 drivers/usb/core/driver.c:291 really_probe+0x38c/0x8fc drivers/base/dd.c:658 __driver_probe_device+0x194/0x374 drivers/base/dd.c:800 driver_probe_device+0x78/0x330 drivers/base/dd.c:830 __device_attach_driver+0x2a8/0x4f4 drivers/base/dd.c:958 bus_for_each_drv+0x228/0x2bc drivers/base/bus.c:462 __device_attach+0x2b4/0x434 drivers/base/dd.c:1030 device_initial_probe+0x24/0x34 drivers/base/dd.c:1079 bus_probe_device+0x178/0x240 drivers/base/bus.c:537 device_add+0x728/0xa6c drivers/base/core.c:3666 usb_new_device+0x908/0x14ac drivers/usb/core/hub.c:2663 hub_port_connect drivers/usb/core/hub.c:5533 [inline] hub_port_connect_change drivers/usb/core/hub.c:5673 [inline] port_event drivers/usb/core/hub.c:5833 [inline] hub_event+0x2454/0x4280 drivers/usb/core/hub.c:5915 process_one_work+0x810/0x1638 kernel/workqueue.c:3238 process_scheduled_works kernel/workqueue.c:3319 [inline] worker_thread+0x9b4/0xeec kernel/workqueue.c:3400 kthread+0x65c/0x7b0 kernel/kthread.c:464 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:862 irq event stamp: 97094 hardirqs last enabled at (97093): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline] hardirqs last enabled at (97093): [] _raw_spin_unlock_irqrestore+0x38/0x98 kernel/locking/spinlock.c:194 hardirqs last disabled at (97094): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:488 softirqs last enabled at (96992): [] spin_unlock_bh include/linux/spinlock.h:396 [inline] softirqs last enabled at (96992): [] ieee80211_get_txq_stats+0x2e4/0x4c4 net/mac80211/cfg.c:4662 softirqs last disabled at (96990): [] spin_lock_bh include/linux/spinlock.h:356 [inline] softirqs last disabled at (96990): [] ieee80211_get_txq_stats+0x38/0x4c4 net/mac80211/cfg.c:4634 ---[ end trace 0000000000000000 ]--- plfxlc 1-1:1.167: pureLifi:Device error plfxlc 1-1:1.167: probe with driver plfxlc failed with error -22 usb 1-1: USB disconnect, device number 7 usb 1-1: new high-speed USB device number 8 using dummy_hcd usb 1-1: Using ep0 maxpacket: 8 usb 1-1: unable to get BOS descriptor or descriptor too short usb 1-1: config 1 has an invalid interface number: 167 but max is 2 usb 1-1: config 1 has an invalid descriptor of length 118, skipping remainder of the config usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 usb 1-1: config 1 has no interface number 0 usb 1-1: config 1 interface 167 has no altsetting 0 usb 1-1: New USB device found, idVendor=2ef5, idProduct=000a, bcdDevice=21.c2 usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 usb 1-1: Product: syz usb 1-1: Manufacturer: syz usb 1-1: SerialNumber: syz plfxlc 1-1:1.167: Firmware Version: 0 plfxlc 1-1:1.167: Unit type is station plfxlc 1-1:1.167: vendor command failed (-71) plfxlc 1-1:1.167: FPGA download failed (-22) ------------[ cut here ]------------ WARNING: CPU: 1 PID: 2279 at drivers/net/wireless/purelifi/plfxlc/mac.c:105 plfxlc_mac_release+0x98/0xc8 drivers/net/wireless/purelifi/plfxlc/mac.c:105 Modules linked in: CPU: 1 UID: 0 PID: 2279 Comm: kworker/1:2 Tainted: G W 6.14.0-rc7-syzkaller-ga2392f333575 #0 Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 Workqueue: usb_hub_wq hub_event pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : plfxlc_mac_release+0x98/0xc8 drivers/net/wireless/purelifi/plfxlc/mac.c:105 lr : plfxlc_mac_release+0x98/0xc8 drivers/net/wireless/purelifi/plfxlc/mac.c:105 sp : ffff8000a16968c0 x29: ffff8000a16968c0 x28: dfff800000000000 x27: ffff7000142d2d24 x26: 00000000ffffffea x25: ffff0000c84e62a0 x24: ffff0000c84e30a0 x23: ffff8000a1696a80 x22: ffff0000c84e0e90 x21: ffff0000c88a4000 x20: 0000000000000001 x19: 0000000000000000 x18: 0000000000000008 x17: 0000000000000000 x16: ffff800080467a7c x15: 0000000000000001 x14: 1fffe0001909cc5e x13: 0000000000000000 x12: 0000000000000000 x11: ffff60001909cc5f x10: 0000000000ff0100 x9 : 0000000000000000 x8 : ffff0000cd1a1e80 x7 : ffff800086786224 x6 : 0000000000000000 x5 : 0000000000000001 x4 : 0000000000000001 x3 : ffff80008045ebc8 x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 Call trace: plfxlc_mac_release+0x98/0xc8 drivers/net/wireless/purelifi/plfxlc/mac.c:105 (P) probe+0x264/0xdd8 drivers/net/wireless/purelifi/plfxlc/usb.c:694 usb_probe_interface+0x598/0xa40 drivers/usb/core/driver.c:396 really_probe+0x38c/0x8fc drivers/base/dd.c:658 __driver_probe_device+0x194/0x374 drivers/base/dd.c:800 driver_probe_device+0x78/0x330 drivers/base/dd.c:830 __device_attach_driver+0x2a8/0x4f4 drivers/base/dd.c:958 bus_for_each_drv+0x228/0x2bc drivers/base/bus.c:462 __device_attach+0x2b4/0x434 drivers/base/dd.c:1030 device_initial_probe+0x24/0x34 drivers/base/dd.c:1079 bus_probe_device+0x178/0x240 drivers/base/bus.c:537 device_add+0x728/0xa6c drivers/base/core.c:3666 usb_set_configuration+0x15cc/0x1b38 drivers/usb/core/message.c:2210 usb_generic_driver_probe+0x8c/0x148 drivers/usb/core/generic.c:250 usb_probe_device+0x1a4/0x348 drivers/usb/core/driver.c:291 really_probe+0x38c/0x8fc drivers/base/dd.c:658 __driver_probe_device+0x194/0x374 drivers/base/dd.c:800 driver_probe_device+0x78/0x330 drivers/base/dd.c:830 __device_attach_driver+0x2a8/0x4f4 drivers/base/dd.c:958 bus_for_each_drv+0x228/0x2bc drivers/base/bus.c:462 __device_attach+0x2b4/0x434 drivers/base/dd.c:1030 device_initial_probe+0x24/0x34 drivers/base/dd.c:1079 bus_probe_device+0x178/0x240 drivers/base/bus.c:537 device_add+0x728/0xa6c drivers/base/core.c:3666 usb_new_device+0x908/0x14ac drivers/usb/core/hub.c:2663 hub_port_connect drivers/usb/core/hub.c:5533 [inline] hub_port_connect_change drivers/usb/core/hub.c:5673 [inline] port_event drivers/usb/core/hub.c:5833 [inline] hub_event+0x2454/0x4280 drivers/usb/core/hub.c:5915 process_one_work+0x810/0x1638 kernel/workqueue.c:3238 process_scheduled_works kernel/workqueue.c:3319 [inline] worker_thread+0x9b4/0xeec kernel/workqueue.c:3400 kthread+0x65c/0x7b0 kernel/kthread.c:464 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:862 irq event stamp: 107354 hardirqs last enabled at (107353): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline] hardirqs last enabled at (107353): [] _raw_spin_unlock_irqrestore+0x38/0x98 kernel/locking/spinlock.c:194 hardirqs last disabled at (107354): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:488 softirqs last enabled at (107248): [] spin_unlock_bh include/linux/spinlock.h:396 [inline] softirqs last enabled at (107248): [] ieee80211_get_txq_stats+0x2e4/0x4c4 net/mac80211/cfg.c:4662 softirqs last disabled at (107246): [] spin_lock_bh include/linux/spinlock.h:356 [inline] softirqs last disabled at (107246): [] ieee80211_get_txq_stats+0x38/0x4c4 net/mac80211/cfg.c:4634 ---[ end trace 0000000000000000 ]--- plfxlc 1-1:1.167: pureLifi:Device error plfxlc 1-1:1.167: probe with driver plfxlc failed with error -22 usb 1-1: USB disconnect, device number 8 usb 1-1: new high-speed USB device number 9 using dummy_hcd usb 1-1: Using ep0 maxpacket: 8 usb 1-1: unable to get BOS descriptor or descriptor too short usb 1-1: config 1 has an invalid interface number: 167 but max is 2 usb 1-1: config 1 has an invalid descriptor of length 118, skipping remainder of the config usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 usb 1-1: config 1 has no interface number 0 usb 1-1: config 1 interface 167 has no altsetting 0 usb 1-1: New USB device found, idVendor=2ef5, idProduct=000a, bcdDevice=21.c2 usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 usb 1-1: Product: syz usb 1-1: Manufacturer: syz usb 1-1: SerialNumber: syz plfxlc 1-1:1.167: Firmware Version: 0 plfxlc 1-1:1.167: Unit type is station plfxlc 1-1:1.167: vendor command failed (-71) plfxlc 1-1:1.167: FPGA download failed (-22) ------------[ cut here ]------------ WARNING: CPU: 1 PID: 2279 at drivers/net/wireless/purelifi/plfxlc/mac.c:105 plfxlc_mac_release+0x98/0xc8 drivers/net/wireless/purelifi/plfxlc/mac.c:105 Modules linked in: CPU: 1 UID: 0 PID: 2279 Comm: kworker/1:2 Tainted: G W 6.14.0-rc7-syzkaller-ga2392f333575 #0 Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 Workqueue: usb_hub_wq hub_event pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : plfxlc_mac_release+0x98/0xc8 drivers/net/wireless/purelifi/plfxlc/mac.c:105 lr : plfxlc_mac_release+0x98/0xc8 drivers/net/wireless/purelifi/plfxlc/mac.c:105 sp : ffff8000a16968c0 x29: ffff8000a16968c0 x28: dfff800000000000 x27: ffff7000142d2d24 x26: 00000000ffffffea x25: ffff0000db9d62a0 x24: ffff0000db9d30a0 x23: ffff8000a1696a80 x22: ffff0000db9d0e90 x21: ffff0000c85ff000 x20: 0000000000000001 x19: 0000000000000000 x18: 0000000000000008 x17: 0000000000000000 x16: ffff800080467a7c x15: 0000000000000001 x14: 1fffe0001b73ac5e x13: 0000000000000000 x12: 0000000000000000 x11: ffff60001b73ac5f x10: 0000000000ff0100 x9 : 0000000000000000 x8 : ffff0000cd1a1e80 x7 : ffff800086786224 x6 : 0000000000000000 x5 : 0000000000000001 x4 : 0000000000000001 x3 : ffff80008045ebc8 x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 Call trace: plfxlc_mac_release+0x98/0xc8 drivers/net/wireless/purelifi/plfxlc/mac.c:105 (P) probe+0x264/0xdd8 drivers/net/wireless/purelifi/plfxlc/usb.c:694 usb_probe_interface+0x598/0xa40 drivers/usb/core/driver.c:396 really_probe+0x38c/0x8fc drivers/base/dd.c:658 __driver_probe_device+0x194/0x374 drivers/base/dd.c:800 driver_probe_device+0x78/0x330 drivers/base/dd.c:830 __device_attach_driver+0x2a8/0x4f4 drivers/base/dd.c:958 bus_for_each_drv+0x228/0x2bc drivers/base/bus.c:462 __device_attach+0x2b4/0x434 drivers/base/dd.c:1030 device_initial_probe+0x24/0x34 drivers/base/dd.c:1079 bus_probe_device+0x178/0x240 drivers/base/bus.c:537 device_add+0x728/0xa6c drivers/base/core.c:3666 usb_set_configuration+0x15cc/0x1b38 drivers/usb/core/message.c:2210 usb_generic_driver_probe+0x8c/0x148 drivers/usb/core/generic.c:250 usb_probe_device+0x1a4/0x348 drivers/usb/core/driver.c:291 really_probe+0x38c/0x8fc drivers/base/dd.c:658 __driver_probe_device+0x194/0x374 drivers/base/dd.c:800 driver_probe_device+0x78/0x330 drivers/base/dd.c:830 __device_attach_driver+0x2a8/0x4f4 drivers/base/dd.c:958 bus_for_each_drv+0x228/0x2bc drivers/base/bus.c:462 __device_attach+0x2b4/0x434 drivers/base/dd.c:1030 device_initial_probe+0x24/0x34 drivers/base/dd.c:1079 bus_probe_device+0x178/0x240 drivers/base/bus.c:537 device_add+0x728/0xa6c drivers/base/core.c:3666 usb_new_device+0x908/0x14ac drivers/usb/core/hub.c:2663 hub_port_connect drivers/usb/core/hub.c:5533 [inline] hub_port_connect_change drivers/usb/core/hub.c:5673 [inline] port_event drivers/usb/core/hub.c:5833 [inline] hub_event+0x2454/0x4280 drivers/usb/core/hub.c:5915 process_one_work+0x810/0x1638 kernel/workqueue.c:3238 process_scheduled_works kernel/workqueue.c:3319 [inline] worker_thread+0x9b4/0xeec kernel/workqueue.c:3400 kthread+0x65c/0x7b0 kernel/kthread.c:464 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:862 irq event stamp: 117874 hardirqs last enabled at (117873): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline] hardirqs last enabled at (117873): [] _raw_spin_unlock_irqrestore+0x38/0x98 kernel/locking/spinlock.c:194 hardirqs last disabled at (117874): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:488 softirqs last enabled at (117792): [] softirq_handle_end kernel/softirq.c:407 [inline] softirqs last enabled at (117792): [] handle_softirqs+0xb44/0xd34 kernel/softirq.c:589 softirqs last disabled at (117783): [] __do_softirq+0x14/0x20 kernel/softirq.c:595 ---[ end trace 0000000000000000 ]--- plfxlc 1-1:1.167: pureLifi:Device error plfxlc 1-1:1.167: probe with driver plfxlc failed with error -22 usb 1-1: USB disconnect, device number 9 usb 1-1: new high-speed USB device number 10 using dummy_hcd usb 1-1: Using ep0 maxpacket: 8 usb 1-1: unable to get BOS descriptor or descriptor too short usb 1-1: config 1 has an invalid interface number: 167 but max is 2 usb 1-1: config 1 has an invalid descriptor of length 118, skipping remainder of the config usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 usb 1-1: config 1 has no interface number 0 usb 1-1: config 1 interface 167 has no altsetting 0 usb 1-1: New USB device found, idVendor=2ef5, idProduct=000a, bcdDevice=21.c2 usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 usb 1-1: Product: syz usb 1-1: Manufacturer: syz usb 1-1: SerialNumber: syz plfxlc 1-1:1.167: Firmware Version: 0 plfxlc 1-1:1.167: Unit type is station plfxlc 1-1:1.167: vendor command failed (-71) plfxlc 1-1:1.167: FPGA download failed (-22) ------------[ cut here ]------------ WARNING: CPU: 1 PID: 2279 at drivers/net/wireless/purelifi/plfxlc/mac.c:105 plfxlc_mac_release+0x98/0xc8 drivers/net/wireless/purelifi/plfxlc/mac.c:105 Modules linked in: CPU: 1 UID: 0 PID: 2279 Comm: kworker/1:2 Tainted: G W 6.14.0-rc7-syzkaller-ga2392f333575 #0 Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 Workqueue: usb_hub_wq hub_event pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : plfxlc_mac_release+0x98/0xc8 drivers/net/wireless/purelifi/plfxlc/mac.c:105 lr : plfxlc_mac_release+0x98/0xc8 drivers/net/wireless/purelifi/plfxlc/mac.c:105 sp : ffff8000a16968c0 x29: ffff8000a16968c0 x28: dfff800000000000 x27: ffff7000142d2d24 x26: 00000000ffffffea x25: ffff0000d80262a0 x24: ffff0000d80230a0 x23: ffff8000a1696a80 x22: ffff0000d8020e90 x21: ffff0000c8841000 x20: 0000000000000001 x19: 0000000000000000 x18: 0000000000000008 x17: 0000000000000000 x16: ffff800080467a7c x15: 0000000000000001 x14: 1fffe0001b004c5e x13: 0000000000000000 x12: 0000000000000000 x11: ffff60001b004c5f x10: 0000000000ff0100 x9 : 0000000000000000 x8 : ffff0000cd1a1e80 x7 : ffff800086786224 x6 : 0000000000000000 x5 : 0000000000000001 x4 : 0000000000000001 x3 : ffff80008045ebc8 x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 Call trace: plfxlc_mac_release+0x98/0xc8 drivers/net/wireless/purelifi/plfxlc/mac.c:105 (P) probe+0x264/0xdd8 drivers/net/wireless/purelifi/plfxlc/usb.c:694 usb_probe_interface+0x598/0xa40 drivers/usb/core/driver.c:396 really_probe+0x38c/0x8fc drivers/base/dd.c:658 __driver_probe_device+0x194/0x374 drivers/base/dd.c:800 driver_probe_device+0x78/0x330 drivers/base/dd.c:830 __device_attach_driver+0x2a8/0x4f4 drivers/base/dd.c:958 bus_for_each_drv+0x228/0x2bc drivers/base/bus.c:462 __device_attach+0x2b4/0x434 drivers/base/dd.c:1030 device_initial_probe+0x24/0x34 drivers/base/dd.c:1079 bus_probe_device+0x178/0x240 drivers/base/bus.c:537 device_add+0x728/0xa6c drivers/base/core.c:3666 usb_set_configuration+0x15cc/0x1b38 drivers/usb/core/message.c:2210 usb_generic_driver_probe+0x8c/0x148 drivers/usb/core/generic.c:250 usb_probe_device+0x1a4/0x348 drivers/usb/core/driver.c:291 really_probe+0x38c/0x8fc drivers/base/dd.c:658 __driver_probe_device+0x194/0x374 drivers/base/dd.c:800 driver_probe_device+0x78/0x330 drivers/base/dd.c:830 __device_attach_driver+0x2a8/0x4f4 drivers/base/dd.c:958 bus_for_each_drv+0x228/0x2bc drivers/base/bus.c:462 __device_attach+0x2b4/0x434 drivers/base/dd.c:1030 device_initial_probe+0x24/0x34 drivers/base/dd.c:1079 bus_probe_device+0x178/0x240 drivers/base/bus.c:537 device_add+0x728/0xa6c drivers/base/core.c:3666 usb_new_device+0x908/0x14ac drivers/usb/core/hub.c:2663 hub_port_connect drivers/usb/core/hub.c:5533 [inline] hub_port_connect_change drivers/usb/core/hub.c:5673 [inline] port_event drivers/usb/core/hub.c:5833 [inline] hub_event+0x2454/0x4280 drivers/usb/core/hub.c:5915 process_one_work+0x810/0x1638 kernel/workqueue.c:3238 process_scheduled_works kernel/workqueue.c:3319 [inline] worker_thread+0x9b4/0xeec kernel/workqueue.c:3400 kthread+0x65c/0x7b0 kernel/kthread.c:464 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:862 irq event stamp: 129270 hardirqs last enabled at (129269): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline] hardirqs last enabled at (129269): [] _raw_spin_unlock_irqrestore+0x38/0x98 kernel/locking/spinlock.c:194 hardirqs last disabled at (129270): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:488 softirqs last enabled at (129168): [] spin_unlock_bh include/linux/spinlock.h:396 [inline] softirqs last enabled at (129168): [] ieee80211_get_txq_stats+0x2e4/0x4c4 net/mac80211/cfg.c:4662 softirqs last disabled at (129166): [] spin_lock_bh include/linux/spinlock.h:356 [inline] softirqs last disabled at (129166): [] ieee80211_get_txq_stats+0x38/0x4c4 net/mac80211/cfg.c:4634 ---[ end trace 0000000000000000 ]--- plfxlc 1-1:1.167: pureLifi:Device error plfxlc 1-1:1.167: probe with driver plfxlc failed with error -22 usb 1-1: USB disconnect, device number 10 usb 1-1: new high-speed USB device number 11 using dummy_hcd usb 1-1: Using ep0 maxpacket: 8 usb 1-1: unable to get BOS descriptor or descriptor too short usb 1-1: config 1 has an invalid interface number: 167 but max is 2 usb 1-1: config 1 has an invalid descriptor of length 118, skipping remainder of the config usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 usb 1-1: config 1 has no interface number 0 usb 1-1: config 1 interface 167 has no altsetting 0 usb 1-1: New USB device found, idVendor=2ef5, idProduct=000a, bcdDevice=21.c2 usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 usb 1-1: Product: syz usb 1-1: Manufacturer: syz usb 1-1: SerialNumber: syz plfxlc 1-1:1.167: Firmware Version: 0 plfxlc 1-1:1.167: Unit type is station final repro crashed as (corrupted=false): plfxlc 1-1:1.167: Unit type is station plfxlc 1-1:1.167: vendor command failed (-71) plfxlc 1-1:1.167: FPGA download failed (-22) ------------[ cut here ]------------ WARNING: CPU: 1 PID: 2279 at drivers/net/wireless/purelifi/plfxlc/mac.c:105 plfxlc_mac_release+0x98/0xc8 drivers/net/wireless/purelifi/plfxlc/mac.c:105 Modules linked in: CPU: 1 UID: 0 PID: 2279 Comm: kworker/1:2 Not tainted 6.14.0-rc7-syzkaller-ga2392f333575 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 Workqueue: usb_hub_wq hub_event pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : plfxlc_mac_release+0x98/0xc8 drivers/net/wireless/purelifi/plfxlc/mac.c:105 lr : plfxlc_mac_release+0x98/0xc8 drivers/net/wireless/purelifi/plfxlc/mac.c:105 sp : ffff8000a16968c0 x29: ffff8000a16968c0 x28: dfff800000000000 x27: ffff7000142d2d24 x26: 00000000ffffffea x25: ffff0000db95e2a0 x24: ffff0000db95b0a0 x23: ffff8000a1696a80 x22: ffff0000db958e90 x21: ffff0000d7cc4000 x20: 0000000000000001 x19: 0000000000000000 x18: ffff8000a1696480 x17: 000000000000e514 x16: ffff800080467a7c x15: 0000000000000001 x14: 1fffe0001b72bc5e x13: 0000000000000000 x12: 0000000000000000 x11: ffff60001b72bc5f x10: 0000000000ff0100 x9 : 0000000000000000 x8 : ffff0000cd1a1e80 x7 : 0000000000000000 x6 : 0000000000000000 x5 : ffff80009381f4b0 x4 : 0000000000000008 x3 : ffff80008045ebc8 x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 Call trace: plfxlc_mac_release+0x98/0xc8 drivers/net/wireless/purelifi/plfxlc/mac.c:105 (P) probe+0x264/0xdd8 drivers/net/wireless/purelifi/plfxlc/usb.c:694 usb_probe_interface+0x598/0xa40 drivers/usb/core/driver.c:396 really_probe+0x38c/0x8fc drivers/base/dd.c:658 __driver_probe_device+0x194/0x374 drivers/base/dd.c:800 driver_probe_device+0x78/0x330 drivers/base/dd.c:830 __device_attach_driver+0x2a8/0x4f4 drivers/base/dd.c:958 bus_for_each_drv+0x228/0x2bc drivers/base/bus.c:462 __device_attach+0x2b4/0x434 drivers/base/dd.c:1030 device_initial_probe+0x24/0x34 drivers/base/dd.c:1079 bus_probe_device+0x178/0x240 drivers/base/bus.c:537 device_add+0x728/0xa6c drivers/base/core.c:3666 usb_set_configuration+0x15cc/0x1b38 drivers/usb/core/message.c:2210 usb_generic_driver_probe+0x8c/0x148 drivers/usb/core/generic.c:250 usb_probe_device+0x1a4/0x348 drivers/usb/core/driver.c:291 really_probe+0x38c/0x8fc drivers/base/dd.c:658 __driver_probe_device+0x194/0x374 drivers/base/dd.c:800 driver_probe_device+0x78/0x330 drivers/base/dd.c:830 __device_attach_driver+0x2a8/0x4f4 drivers/base/dd.c:958 bus_for_each_drv+0x228/0x2bc drivers/base/bus.c:462 __device_attach+0x2b4/0x434 drivers/base/dd.c:1030 device_initial_probe+0x24/0x34 drivers/base/dd.c:1079 bus_probe_device+0x178/0x240 drivers/base/bus.c:537 device_add+0x728/0xa6c drivers/base/core.c:3666 usb_new_device+0x908/0x14ac drivers/usb/core/hub.c:2663 hub_port_connect drivers/usb/core/hub.c:5533 [inline] hub_port_connect_change drivers/usb/core/hub.c:5673 [inline] port_event drivers/usb/core/hub.c:5833 [inline] hub_event+0x2454/0x4280 drivers/usb/core/hub.c:5915 process_one_work+0x810/0x1638 kernel/workqueue.c:3238 process_scheduled_works kernel/workqueue.c:3319 [inline] worker_thread+0x97c/0xeec kernel/workqueue.c:3400 kthread+0x65c/0x7b0 kernel/kthread.c:464 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:862 irq event stamp: 42582 hardirqs last enabled at (42581): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline] hardirqs last enabled at (42581): [] _raw_spin_unlock_irqrestore+0x38/0x98 kernel/locking/spinlock.c:194 hardirqs last disabled at (42582): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:488 softirqs last enabled at (42506): [] softirq_handle_end kernel/softirq.c:407 [inline] softirqs last enabled at (42506): [] handle_softirqs+0xb44/0xd34 kernel/softirq.c:589 softirqs last disabled at (42497): [] __do_softirq+0x14/0x20 kernel/softirq.c:595 ---[ end trace 0000000000000000 ]--- plfxlc 1-1:1.167: pureLifi:Device error plfxlc 1-1:1.167: probe with driver plfxlc failed with error -22 usb 1-1: USB disconnect, device number 2 usb 1-1: new high-speed USB device number 3 using dummy_hcd usb 1-1: Using ep0 maxpacket: 8 usb 1-1: unable to get BOS descriptor or descriptor too short usb 1-1: config 1 has an invalid interface number: 167 but max is 2 usb 1-1: config 1 has an invalid descriptor of length 118, skipping remainder of the config usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 usb 1-1: config 1 has no interface number 0 usb 1-1: config 1 interface 167 has no altsetting 0 usb 1-1: New USB device found, idVendor=2ef5, idProduct=000a, bcdDevice=21.c2 usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 usb 1-1: Product: syz usb 1-1: Manufacturer: syz usb 1-1: SerialNumber: syz plfxlc 1-1:1.167: Firmware Version: 0 plfxlc 1-1:1.167: Unit type is station plfxlc 1-1:1.167: vendor command failed (-71) plfxlc 1-1:1.167: FPGA download failed (-22) ------------[ cut here ]------------ WARNING: CPU: 1 PID: 2279 at drivers/net/wireless/purelifi/plfxlc/mac.c:105 plfxlc_mac_release+0x98/0xc8 drivers/net/wireless/purelifi/plfxlc/mac.c:105 Modules linked in: CPU: 1 UID: 0 PID: 2279 Comm: kworker/1:2 Tainted: G W 6.14.0-rc7-syzkaller-ga2392f333575 #0 Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 Workqueue: usb_hub_wq hub_event pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : plfxlc_mac_release+0x98/0xc8 drivers/net/wireless/purelifi/plfxlc/mac.c:105 lr : plfxlc_mac_release+0x98/0xc8 drivers/net/wireless/purelifi/plfxlc/mac.c:105 sp : ffff8000a16968c0 x29: ffff8000a16968c0 x28: dfff800000000000 x27: ffff7000142d2d24 x26: 00000000ffffffea x25: ffff0000c6d8e2a0 x24: ffff0000c6d8b0a0 x23: ffff8000a1696a80 x22: ffff0000c6d88e90 x21: ffff0000c71da000 x20: 0000000000000001 x19: 0000000000000000 x18: 0000000000000008 x17: 0000000000000000 x16: ffff800080467a7c x15: 0000000000000001 x14: 1fffe00018db1c5e x13: 0000000000000000 x12: 0000000000000000 x11: ffff600018db1c5f x10: 0000000000ff0100 x9 : 0000000000000000 x8 : ffff0000cd1a1e80 x7 : ffff800086786224 x6 : 0000000000000000 x5 : 0000000000000001 x4 : 0000000000000001 x3 : ffff80008045ebc8 x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 Call trace: plfxlc_mac_release+0x98/0xc8 drivers/net/wireless/purelifi/plfxlc/mac.c:105 (P) probe+0x264/0xdd8 drivers/net/wireless/purelifi/plfxlc/usb.c:694 usb_probe_interface+0x598/0xa40 drivers/usb/core/driver.c:396 really_probe+0x38c/0x8fc drivers/base/dd.c:658 __driver_probe_device+0x194/0x374 drivers/base/dd.c:800 driver_probe_device+0x78/0x330 drivers/base/dd.c:830 __device_attach_driver+0x2a8/0x4f4 drivers/base/dd.c:958 bus_for_each_drv+0x228/0x2bc drivers/base/bus.c:462 __device_attach+0x2b4/0x434 drivers/base/dd.c:1030 device_initial_probe+0x24/0x34 drivers/base/dd.c:1079 bus_probe_device+0x178/0x240 drivers/base/bus.c:537 device_add+0x728/0xa6c drivers/base/core.c:3666 usb_set_configuration+0x15cc/0x1b38 drivers/usb/core/message.c:2210 usb_generic_driver_probe+0x8c/0x148 drivers/usb/core/generic.c:250 usb_probe_device+0x1a4/0x348 drivers/usb/core/driver.c:291 really_probe+0x38c/0x8fc drivers/base/dd.c:658 __driver_probe_device+0x194/0x374 drivers/base/dd.c:800 driver_probe_device+0x78/0x330 drivers/base/dd.c:830 __device_attach_driver+0x2a8/0x4f4 drivers/base/dd.c:958 bus_for_each_drv+0x228/0x2bc drivers/base/bus.c:462 __device_attach+0x2b4/0x434 drivers/base/dd.c:1030 device_initial_probe+0x24/0x34 drivers/base/dd.c:1079 bus_probe_device+0x178/0x240 drivers/base/bus.c:537 device_add+0x728/0xa6c drivers/base/core.c:3666 usb_new_device+0x908/0x14ac drivers/usb/core/hub.c:2663 hub_port_connect drivers/usb/core/hub.c:5533 [inline] hub_port_connect_change drivers/usb/core/hub.c:5673 [inline] port_event drivers/usb/core/hub.c:5833 [inline] hub_event+0x2454/0x4280 drivers/usb/core/hub.c:5915 process_one_work+0x810/0x1638 kernel/workqueue.c:3238 process_scheduled_works kernel/workqueue.c:3319 [inline] worker_thread+0x9b4/0xeec kernel/workqueue.c:3400 kthread+0x65c/0x7b0 kernel/kthread.c:464 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:862 irq event stamp: 54462 hardirqs last enabled at (54461): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline] hardirqs last enabled at (54461): [] _raw_spin_unlock_irqrestore+0x38/0x98 kernel/locking/spinlock.c:194 hardirqs last disabled at (54462): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:488 softirqs last enabled at (54342): [] spin_unlock_bh include/linux/spinlock.h:396 [inline] softirqs last enabled at (54342): [] ieee80211_get_txq_stats+0x2e4/0x4c4 net/mac80211/cfg.c:4662 softirqs last disabled at (54340): [] spin_lock_bh include/linux/spinlock.h:356 [inline] softirqs last disabled at (54340): [] ieee80211_get_txq_stats+0x38/0x4c4 net/mac80211/cfg.c:4634 ---[ end trace 0000000000000000 ]--- plfxlc 1-1:1.167: pureLifi:Device error plfxlc 1-1:1.167: probe with driver plfxlc failed with error -22 usb 1-1: USB disconnect, device number 3 usb 1-1: new high-speed USB device number 4 using dummy_hcd usb 1-1: Using ep0 maxpacket: 8 usb 1-1: unable to get BOS descriptor or descriptor too short usb 1-1: config 1 has an invalid interface number: 167 but max is 2 usb 1-1: config 1 has an invalid descriptor of length 118, skipping remainder of the config usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 usb 1-1: config 1 has no interface number 0 usb 1-1: config 1 interface 167 has no altsetting 0 usb 1-1: New USB device found, idVendor=2ef5, idProduct=000a, bcdDevice=21.c2 usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 usb 1-1: Product: syz usb 1-1: Manufacturer: syz usb 1-1: SerialNumber: syz plfxlc 1-1:1.167: Firmware Version: 0 plfxlc 1-1:1.167: Unit type is station plfxlc 1-1:1.167: vendor command failed (-71) plfxlc 1-1:1.167: FPGA download failed (-22) ------------[ cut here ]------------ WARNING: CPU: 1 PID: 2279 at drivers/net/wireless/purelifi/plfxlc/mac.c:105 plfxlc_mac_release+0x98/0xc8 drivers/net/wireless/purelifi/plfxlc/mac.c:105 Modules linked in: CPU: 1 UID: 0 PID: 2279 Comm: kworker/1:2 Tainted: G W 6.14.0-rc7-syzkaller-ga2392f333575 #0 Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 Workqueue: usb_hub_wq hub_event pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : plfxlc_mac_release+0x98/0xc8 drivers/net/wireless/purelifi/plfxlc/mac.c:105 lr : plfxlc_mac_release+0x98/0xc8 drivers/net/wireless/purelifi/plfxlc/mac.c:105 sp : ffff8000a16968c0 x29: ffff8000a16968c0 x28: dfff800000000000 x27: ffff7000142d2d24 x26: 00000000ffffffea x25: ffff0000c6c862a0 x24: ffff0000c6c830a0 x23: ffff8000a1696a80 x22: ffff0000c6c80e90 x21: ffff0000c78a8000 x20: 0000000000000001 x19: 0000000000000000 x18: 0000000000000008 x17: 0000000000000000 x16: ffff800080467a7c x15: 0000000000000001 x14: 1fffe00018d90c5e x13: 0000000000000000 x12: 0000000000000000 x11: ffff600018d90c5f x10: 0000000000ff0100 x9 : 0000000000000000 x8 : ffff0000cd1a1e80 x7 : ffff800086786224 x6 : 0000000000000000 x5 : 0000000000000001 x4 : 0000000000000001 x3 : ffff80008045ebc8 x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 Call trace: plfxlc_mac_release+0x98/0xc8 drivers/net/wireless/purelifi/plfxlc/mac.c:105 (P) probe+0x264/0xdd8 drivers/net/wireless/purelifi/plfxlc/usb.c:694 usb_probe_interface+0x598/0xa40 drivers/usb/core/driver.c:396 really_probe+0x38c/0x8fc drivers/base/dd.c:658 __driver_probe_device+0x194/0x374 drivers/base/dd.c:800 driver_probe_device+0x78/0x330 drivers/base/dd.c:830 __device_attach_driver+0x2a8/0x4f4 drivers/base/dd.c:958 bus_for_each_drv+0x228/0x2bc drivers/base/bus.c:462 __device_attach+0x2b4/0x434 drivers/base/dd.c:1030 device_initial_probe+0x24/0x34 drivers/base/dd.c:1079 bus_probe_device+0x178/0x240 drivers/base/bus.c:537 device_add+0x728/0xa6c drivers/base/core.c:3666 usb_set_configuration+0x15cc/0x1b38 drivers/usb/core/message.c:2210 usb_generic_driver_probe+0x8c/0x148 drivers/usb/core/generic.c:250 usb_probe_device+0x1a4/0x348 drivers/usb/core/driver.c:291 really_probe+0x38c/0x8fc drivers/base/dd.c:658 __driver_probe_device+0x194/0x374 drivers/base/dd.c:800 driver_probe_device+0x78/0x330 drivers/base/dd.c:830 __device_attach_driver+0x2a8/0x4f4 drivers/base/dd.c:958 bus_for_each_drv+0x228/0x2bc drivers/base/bus.c:462 __device_attach+0x2b4/0x434 drivers/base/dd.c:1030 device_initial_probe+0x24/0x34 drivers/base/dd.c:1079 bus_probe_device+0x178/0x240 drivers/base/bus.c:537 device_add+0x728/0xa6c drivers/base/core.c:3666 usb_new_device+0x908/0x14ac drivers/usb/core/hub.c:2663 hub_port_connect drivers/usb/core/hub.c:5533 [inline] hub_port_connect_change drivers/usb/core/hub.c:5673 [inline] port_event drivers/usb/core/hub.c:5833 [inline] hub_event+0x2454/0x4280 drivers/usb/core/hub.c:5915 process_one_work+0x810/0x1638 kernel/workqueue.c:3238 process_scheduled_works kernel/workqueue.c:3319 [inline] worker_thread+0x9b4/0xeec kernel/workqueue.c:3400 kthread+0x65c/0x7b0 kernel/kthread.c:464 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:862 irq event stamp: 65008 hardirqs last enabled at (65007): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline] hardirqs last enabled at (65007): [] _raw_spin_unlock_irqrestore+0x38/0x98 kernel/locking/spinlock.c:194 hardirqs last disabled at (65008): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:488 softirqs last enabled at (64908): [] spin_unlock_bh include/linux/spinlock.h:396 [inline] softirqs last enabled at (64908): [] ieee80211_get_txq_stats+0x2e4/0x4c4 net/mac80211/cfg.c:4662 softirqs last disabled at (64906): [] spin_lock_bh include/linux/spinlock.h:356 [inline] softirqs last disabled at (64906): [] ieee80211_get_txq_stats+0x38/0x4c4 net/mac80211/cfg.c:4634 ---[ end trace 0000000000000000 ]--- plfxlc 1-1:1.167: pureLifi:Device error plfxlc 1-1:1.167: probe with driver plfxlc failed with error -22 usb 1-1: USB disconnect, device number 4 usb 1-1: new high-speed USB device number 5 using dummy_hcd usb 1-1: Using ep0 maxpacket: 8 usb 1-1: unable to get BOS descriptor or descriptor too short usb 1-1: config 1 has an invalid interface number: 167 but max is 2 usb 1-1: config 1 has an invalid descriptor of length 118, skipping remainder of the config usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 usb 1-1: config 1 has no interface number 0 usb 1-1: config 1 interface 167 has no altsetting 0 usb 1-1: New USB device found, idVendor=2ef5, idProduct=000a, bcdDevice=21.c2 usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 usb 1-1: Product: syz usb 1-1: Manufacturer: syz usb 1-1: SerialNumber: syz plfxlc 1-1:1.167: Firmware Version: 0 plfxlc 1-1:1.167: Unit type is station plfxlc 1-1:1.167: vendor command failed (-71) plfxlc 1-1:1.167: FPGA download failed (-22) ------------[ cut here ]------------ WARNING: CPU: 1 PID: 2279 at drivers/net/wireless/purelifi/plfxlc/mac.c:105 plfxlc_mac_release+0x98/0xc8 drivers/net/wireless/purelifi/plfxlc/mac.c:105 Modules linked in: CPU: 1 UID: 0 PID: 2279 Comm: kworker/1:2 Tainted: G W 6.14.0-rc7-syzkaller-ga2392f333575 #0 Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 Workqueue: usb_hub_wq hub_event pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : plfxlc_mac_release+0x98/0xc8 drivers/net/wireless/purelifi/plfxlc/mac.c:105 lr : plfxlc_mac_release+0x98/0xc8 drivers/net/wireless/purelifi/plfxlc/mac.c:105 sp : ffff8000a16968c0 x29: ffff8000a16968c0 x28: dfff800000000000 x27: ffff7000142d2d24 x26: 00000000ffffffea x25: ffff0000d9cb62a0 x24: ffff0000d9cb30a0 x23: ffff8000a1696a80 x22: ffff0000d9cb0e90 x21: ffff0000c78ae000 x20: 0000000000000001 x19: 0000000000000000 x18: 0000000000000008 x17: 0000000000000000 x16: ffff800080467a7c x15: 0000000000000001 x14: 1fffe0001b396c5e x13: 0000000000000000 x12: 0000000000000000 x11: ffff60001b396c5f x10: 0000000000ff0100 x9 : 0000000000000000 x8 : ffff0000cd1a1e80 x7 : ffff800086786224 x6 : 0000000000000000 x5 : 0000000000000001 x4 : 0000000000000001 x3 : ffff80008045ebc8 x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 Call trace: plfxlc_mac_release+0x98/0xc8 drivers/net/wireless/purelifi/plfxlc/mac.c:105 (P) probe+0x264/0xdd8 drivers/net/wireless/purelifi/plfxlc/usb.c:694 usb_probe_interface+0x598/0xa40 drivers/usb/core/driver.c:396 really_probe+0x38c/0x8fc drivers/base/dd.c:658 __driver_probe_device+0x194/0x374 drivers/base/dd.c:800 driver_probe_device+0x78/0x330 drivers/base/dd.c:830 __device_attach_driver+0x2a8/0x4f4 drivers/base/dd.c:958 bus_for_each_drv+0x228/0x2bc drivers/base/bus.c:462 __device_attach+0x2b4/0x434 drivers/base/dd.c:1030 device_initial_probe+0x24/0x34 drivers/base/dd.c:1079 bus_probe_device+0x178/0x240 drivers/base/bus.c:537 device_add+0x728/0xa6c drivers/base/core.c:3666 usb_set_configuration+0x15cc/0x1b38 drivers/usb/core/message.c:2210 usb_generic_driver_probe+0x8c/0x148 drivers/usb/core/generic.c:250 usb_probe_device+0x1a4/0x348 drivers/usb/core/driver.c:291 really_probe+0x38c/0x8fc drivers/base/dd.c:658 __driver_probe_device+0x194/0x374 drivers/base/dd.c:800 driver_probe_device+0x78/0x330 drivers/base/dd.c:830 __device_attach_driver+0x2a8/0x4f4 drivers/base/dd.c:958 bus_for_each_drv+0x228/0x2bc drivers/base/bus.c:462 __device_attach+0x2b4/0x434 drivers/base/dd.c:1030 device_initial_probe+0x24/0x34 drivers/base/dd.c:1079 bus_probe_device+0x178/0x240 drivers/base/bus.c:537 device_add+0x728/0xa6c drivers/base/core.c:3666 usb_new_device+0x908/0x14ac drivers/usb/core/hub.c:2663 hub_port_connect drivers/usb/core/hub.c:5533 [inline] hub_port_connect_change drivers/usb/core/hub.c:5673 [inline] port_event drivers/usb/core/hub.c:5833 [inline] hub_event+0x2454/0x4280 drivers/usb/core/hub.c:5915 process_one_work+0x810/0x1638 kernel/workqueue.c:3238 process_scheduled_works kernel/workqueue.c:3319 [inline] worker_thread+0x9b4/0xeec kernel/workqueue.c:3400 kthread+0x65c/0x7b0 kernel/kthread.c:464 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:862 irq event stamp: 75568 hardirqs last enabled at (75567): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline] hardirqs last enabled at (75567): [] _raw_spin_unlock_irqrestore+0x38/0x98 kernel/locking/spinlock.c:194 hardirqs last disabled at (75568): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:488 softirqs last enabled at (75468): [] spin_unlock_bh include/linux/spinlock.h:396 [inline] softirqs last enabled at (75468): [] ieee80211_get_txq_stats+0x2e4/0x4c4 net/mac80211/cfg.c:4662 softirqs last disabled at (75466): [] spin_lock_bh include/linux/spinlock.h:356 [inline] softirqs last disabled at (75466): [] ieee80211_get_txq_stats+0x38/0x4c4 net/mac80211/cfg.c:4634 ---[ end trace 0000000000000000 ]--- plfxlc 1-1:1.167: pureLifi:Device error plfxlc 1-1:1.167: probe with driver plfxlc failed with error -22 usb 1-1: USB disconnect, device number 5 usb 1-1: new high-speed USB device number 6 using dummy_hcd usb 1-1: Using ep0 maxpacket: 8 usb 1-1: unable to get BOS descriptor or descriptor too short usb 1-1: config 1 has an invalid interface number: 167 but max is 2 usb 1-1: config 1 has an invalid descriptor of length 118, skipping remainder of the config usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 usb 1-1: config 1 has no interface number 0 usb 1-1: config 1 interface 167 has no altsetting 0 usb 1-1: New USB device found, idVendor=2ef5, idProduct=000a, bcdDevice=21.c2 usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 usb 1-1: Product: syz usb 1-1: Manufacturer: syz usb 1-1: SerialNumber: syz plfxlc 1-1:1.167: Firmware Version: 0 plfxlc 1-1:1.167: Unit type is station plfxlc 1-1:1.167: vendor command failed (-71) plfxlc 1-1:1.167: FPGA download failed (-22) ------------[ cut here ]------------ WARNING: CPU: 1 PID: 2279 at drivers/net/wireless/purelifi/plfxlc/mac.c:105 plfxlc_mac_release+0x98/0xc8 drivers/net/wireless/purelifi/plfxlc/mac.c:105 Modules linked in: CPU: 1 UID: 0 PID: 2279 Comm: kworker/1:2 Tainted: G W 6.14.0-rc7-syzkaller-ga2392f333575 #0 Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 Workqueue: usb_hub_wq hub_event pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : plfxlc_mac_release+0x98/0xc8 drivers/net/wireless/purelifi/plfxlc/mac.c:105 lr : plfxlc_mac_release+0x98/0xc8 drivers/net/wireless/purelifi/plfxlc/mac.c:105 sp : ffff8000a16968c0 x29: ffff8000a16968c0 x28: dfff800000000000 x27: ffff7000142d2d24 x26: 00000000ffffffea x25: ffff0000d7fde2a0 x24: ffff0000d7fdb0a0 x23: ffff8000a1696a80 x22: ffff0000d7fd8e90 x21: ffff0000c6c74000 x20: 0000000000000001 x19: 0000000000000000 x18: 0000000000000008 x17: 0000000000000000 x16: ffff800080467a7c x15: 0000000000000001 x14: 1fffe0001affbc5e x13: 0000000000000000 x12: 0000000000000000 x11: ffff60001affbc5f x10: 0000000000ff0100 x9 : 0000000000000000 x8 : ffff0000cd1a1e80 x7 : ffff800086786224 x6 : 0000000000000000 x5 : 0000000000000001 x4 : 0000000000000001 x3 : ffff80008045ebc8 x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 Call trace: plfxlc_mac_release+0x98/0xc8 drivers/net/wireless/purelifi/plfxlc/mac.c:105 (P) probe+0x264/0xdd8 drivers/net/wireless/purelifi/plfxlc/usb.c:694 usb_probe_interface+0x598/0xa40 drivers/usb/core/driver.c:396 really_probe+0x38c/0x8fc drivers/base/dd.c:658 __driver_probe_device+0x194/0x374 drivers/base/dd.c:800 driver_probe_device+0x78/0x330 drivers/base/dd.c:830 __device_attach_driver+0x2a8/0x4f4 drivers/base/dd.c:958 bus_for_each_drv+0x228/0x2bc drivers/base/bus.c:462 __device_attach+0x2b4/0x434 drivers/base/dd.c:1030 device_initial_probe+0x24/0x34 drivers/base/dd.c:1079 bus_probe_device+0x178/0x240 drivers/base/bus.c:537 device_add+0x728/0xa6c drivers/base/core.c:3666 usb_set_configuration+0x15cc/0x1b38 drivers/usb/core/message.c:2210 usb_generic_driver_probe+0x8c/0x148 drivers/usb/core/generic.c:250 usb_probe_device+0x1a4/0x348 drivers/usb/core/driver.c:291 really_probe+0x38c/0x8fc drivers/base/dd.c:658 __driver_probe_device+0x194/0x374 drivers/base/dd.c:800 driver_probe_device+0x78/0x330 drivers/base/dd.c:830 __device_attach_driver+0x2a8/0x4f4 drivers/base/dd.c:958 bus_for_each_drv+0x228/0x2bc drivers/base/bus.c:462 __device_attach+0x2b4/0x434 drivers/base/dd.c:1030 device_initial_probe+0x24/0x34 drivers/base/dd.c:1079 bus_probe_device+0x178/0x240 drivers/base/bus.c:537 device_add+0x728/0xa6c drivers/base/core.c:3666 usb_new_device+0x908/0x14ac drivers/usb/core/hub.c:2663 hub_port_connect drivers/usb/core/hub.c:5533 [inline] hub_port_connect_change drivers/usb/core/hub.c:5673 [inline] port_event drivers/usb/core/hub.c:5833 [inline] hub_event+0x2454/0x4280 drivers/usb/core/hub.c:5915 process_one_work+0x810/0x1638 kernel/workqueue.c:3238 process_scheduled_works kernel/workqueue.c:3319 [inline] worker_thread+0x9b4/0xeec kernel/workqueue.c:3400 kthread+0x65c/0x7b0 kernel/kthread.c:464 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:862 irq event stamp: 86314 hardirqs last enabled at (86313): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline] hardirqs last enabled at (86313): [] _raw_spin_unlock_irqrestore+0x38/0x98 kernel/locking/spinlock.c:194 hardirqs last disabled at (86314): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:488 softirqs last enabled at (86208): [] spin_unlock_bh include/linux/spinlock.h:396 [inline] softirqs last enabled at (86208): [] ieee80211_get_txq_stats+0x2e4/0x4c4 net/mac80211/cfg.c:4662 softirqs last disabled at (86206): [] spin_lock_bh include/linux/spinlock.h:356 [inline] softirqs last disabled at (86206): [] ieee80211_get_txq_stats+0x38/0x4c4 net/mac80211/cfg.c:4634 ---[ end trace 0000000000000000 ]--- plfxlc 1-1:1.167: pureLifi:Device error plfxlc 1-1:1.167: probe with driver plfxlc failed with error -22 usb 1-1: USB disconnect, device number 6 usb 1-1: new high-speed USB device number 7 using dummy_hcd usb 1-1: Using ep0 maxpacket: 8 usb 1-1: unable to get BOS descriptor or descriptor too short usb 1-1: config 1 has an invalid interface number: 167 but max is 2 usb 1-1: config 1 has an invalid descriptor of length 118, skipping remainder of the config usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 usb 1-1: config 1 has no interface number 0 usb 1-1: config 1 interface 167 has no altsetting 0 usb 1-1: New USB device found, idVendor=2ef5, idProduct=000a, bcdDevice=21.c2 usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 usb 1-1: Product: syz usb 1-1: Manufacturer: syz usb 1-1: SerialNumber: syz plfxlc 1-1:1.167: Firmware Version: 0 plfxlc 1-1:1.167: Unit type is station plfxlc 1-1:1.167: vendor command failed (-71) plfxlc 1-1:1.167: FPGA download failed (-22) ------------[ cut here ]------------ WARNING: CPU: 1 PID: 2279 at drivers/net/wireless/purelifi/plfxlc/mac.c:105 plfxlc_mac_release+0x98/0xc8 drivers/net/wireless/purelifi/plfxlc/mac.c:105 Modules linked in: CPU: 1 UID: 0 PID: 2279 Comm: kworker/1:2 Tainted: G W 6.14.0-rc7-syzkaller-ga2392f333575 #0 Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 Workqueue: usb_hub_wq hub_event pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : plfxlc_mac_release+0x98/0xc8 drivers/net/wireless/purelifi/plfxlc/mac.c:105 lr : plfxlc_mac_release+0x98/0xc8 drivers/net/wireless/purelifi/plfxlc/mac.c:105 sp : ffff8000a16968c0 x29: ffff8000a16968c0 x28: dfff800000000000 x27: ffff7000142d2d24 x26: 00000000ffffffea x25: ffff0000c88a62a0 x24: ffff0000c88a30a0 x23: ffff8000a1696a80 x22: ffff0000c88a0e90 x21: ffff0000d7fdb000 x20: 0000000000000001 x19: 0000000000000000 x18: 0000000000000008 x17: 0000000000000000 x16: ffff800080467a7c x15: 0000000000000001 x14: 1fffe00019114c5e x13: 0000000000000000 x12: 0000000000000000 x11: ffff600019114c5f x10: 0000000000ff0100 x9 : 0000000000000000 x8 : ffff0000cd1a1e80 x7 : ffff800086786224 x6 : 0000000000000000 x5 : 0000000000000001 x4 : 0000000000000001 x3 : ffff80008045ebc8 x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 Call trace: plfxlc_mac_release+0x98/0xc8 drivers/net/wireless/purelifi/plfxlc/mac.c:105 (P) probe+0x264/0xdd8 drivers/net/wireless/purelifi/plfxlc/usb.c:694 usb_probe_interface+0x598/0xa40 drivers/usb/core/driver.c:396 really_probe+0x38c/0x8fc drivers/base/dd.c:658 __driver_probe_device+0x194/0x374 drivers/base/dd.c:800 driver_probe_device+0x78/0x330 drivers/base/dd.c:830 __device_attach_driver+0x2a8/0x4f4 drivers/base/dd.c:958 bus_for_each_drv+0x228/0x2bc drivers/base/bus.c:462 __device_attach+0x2b4/0x434 drivers/base/dd.c:1030 device_initial_probe+0x24/0x34 drivers/base/dd.c:1079 bus_probe_device+0x178/0x240 drivers/base/bus.c:537 device_add+0x728/0xa6c drivers/base/core.c:3666 usb_set_configuration+0x15cc/0x1b38 drivers/usb/core/message.c:2210 usb_generic_driver_probe+0x8c/0x148 drivers/usb/core/generic.c:250 usb_probe_device+0x1a4/0x348 drivers/usb/core/driver.c:291 really_probe+0x38c/0x8fc drivers/base/dd.c:658 __driver_probe_device+0x194/0x374 drivers/base/dd.c:800 driver_probe_device+0x78/0x330 drivers/base/dd.c:830 __device_attach_driver+0x2a8/0x4f4 drivers/base/dd.c:958 bus_for_each_drv+0x228/0x2bc drivers/base/bus.c:462 __device_attach+0x2b4/0x434 drivers/base/dd.c:1030 device_initial_probe+0x24/0x34 drivers/base/dd.c:1079 bus_probe_device+0x178/0x240 drivers/base/bus.c:537 device_add+0x728/0xa6c drivers/base/core.c:3666 usb_new_device+0x908/0x14ac drivers/usb/core/hub.c:2663 hub_port_connect drivers/usb/core/hub.c:5533 [inline] hub_port_connect_change drivers/usb/core/hub.c:5673 [inline] port_event drivers/usb/core/hub.c:5833 [inline] hub_event+0x2454/0x4280 drivers/usb/core/hub.c:5915 process_one_work+0x810/0x1638 kernel/workqueue.c:3238 process_scheduled_works kernel/workqueue.c:3319 [inline] worker_thread+0x9b4/0xeec kernel/workqueue.c:3400 kthread+0x65c/0x7b0 kernel/kthread.c:464 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:862 irq event stamp: 97094 hardirqs last enabled at (97093): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline] hardirqs last enabled at (97093): [] _raw_spin_unlock_irqrestore+0x38/0x98 kernel/locking/spinlock.c:194 hardirqs last disabled at (97094): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:488 softirqs last enabled at (96992): [] spin_unlock_bh include/linux/spinlock.h:396 [inline] softirqs last enabled at (96992): [] ieee80211_get_txq_stats+0x2e4/0x4c4 net/mac80211/cfg.c:4662 softirqs last disabled at (96990): [] spin_lock_bh include/linux/spinlock.h:356 [inline] softirqs last disabled at (96990): [] ieee80211_get_txq_stats+0x38/0x4c4 net/mac80211/cfg.c:4634 ---[ end trace 0000000000000000 ]--- plfxlc 1-1:1.167: pureLifi:Device error plfxlc 1-1:1.167: probe with driver plfxlc failed with error -22 usb 1-1: USB disconnect, device number 7 usb 1-1: new high-speed USB device number 8 using dummy_hcd usb 1-1: Using ep0 maxpacket: 8 usb 1-1: unable to get BOS descriptor or descriptor too short usb 1-1: config 1 has an invalid interface number: 167 but max is 2 usb 1-1: config 1 has an invalid descriptor of length 118, skipping remainder of the config usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 usb 1-1: config 1 has no interface number 0 usb 1-1: config 1 interface 167 has no altsetting 0 usb 1-1: New USB device found, idVendor=2ef5, idProduct=000a, bcdDevice=21.c2 usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 usb 1-1: Product: syz usb 1-1: Manufacturer: syz usb 1-1: SerialNumber: syz plfxlc 1-1:1.167: Firmware Version: 0 plfxlc 1-1:1.167: Unit type is station plfxlc 1-1:1.167: vendor command failed (-71) plfxlc 1-1:1.167: FPGA download failed (-22) ------------[ cut here ]------------ WARNING: CPU: 1 PID: 2279 at drivers/net/wireless/purelifi/plfxlc/mac.c:105 plfxlc_mac_release+0x98/0xc8 drivers/net/wireless/purelifi/plfxlc/mac.c:105 Modules linked in: CPU: 1 UID: 0 PID: 2279 Comm: kworker/1:2 Tainted: G W 6.14.0-rc7-syzkaller-ga2392f333575 #0 Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 Workqueue: usb_hub_wq hub_event pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : plfxlc_mac_release+0x98/0xc8 drivers/net/wireless/purelifi/plfxlc/mac.c:105 lr : plfxlc_mac_release+0x98/0xc8 drivers/net/wireless/purelifi/plfxlc/mac.c:105 sp : ffff8000a16968c0 x29: ffff8000a16968c0 x28: dfff800000000000 x27: ffff7000142d2d24 x26: 00000000ffffffea x25: ffff0000c84e62a0 x24: ffff0000c84e30a0 x23: ffff8000a1696a80 x22: ffff0000c84e0e90 x21: ffff0000c88a4000 x20: 0000000000000001 x19: 0000000000000000 x18: 0000000000000008 x17: 0000000000000000 x16: ffff800080467a7c x15: 0000000000000001 x14: 1fffe0001909cc5e x13: 0000000000000000 x12: 0000000000000000 x11: ffff60001909cc5f x10: 0000000000ff0100 x9 : 0000000000000000 x8 : ffff0000cd1a1e80 x7 : ffff800086786224 x6 : 0000000000000000 x5 : 0000000000000001 x4 : 0000000000000001 x3 : ffff80008045ebc8 x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 Call trace: plfxlc_mac_release+0x98/0xc8 drivers/net/wireless/purelifi/plfxlc/mac.c:105 (P) probe+0x264/0xdd8 drivers/net/wireless/purelifi/plfxlc/usb.c:694 usb_probe_interface+0x598/0xa40 drivers/usb/core/driver.c:396 really_probe+0x38c/0x8fc drivers/base/dd.c:658 __driver_probe_device+0x194/0x374 drivers/base/dd.c:800 driver_probe_device+0x78/0x330 drivers/base/dd.c:830 __device_attach_driver+0x2a8/0x4f4 drivers/base/dd.c:958 bus_for_each_drv+0x228/0x2bc drivers/base/bus.c:462 __device_attach+0x2b4/0x434 drivers/base/dd.c:1030 device_initial_probe+0x24/0x34 drivers/base/dd.c:1079 bus_probe_device+0x178/0x240 drivers/base/bus.c:537 device_add+0x728/0xa6c drivers/base/core.c:3666 usb_set_configuration+0x15cc/0x1b38 drivers/usb/core/message.c:2210 usb_generic_driver_probe+0x8c/0x148 drivers/usb/core/generic.c:250 usb_probe_device+0x1a4/0x348 drivers/usb/core/driver.c:291 really_probe+0x38c/0x8fc drivers/base/dd.c:658 __driver_probe_device+0x194/0x374 drivers/base/dd.c:800 driver_probe_device+0x78/0x330 drivers/base/dd.c:830 __device_attach_driver+0x2a8/0x4f4 drivers/base/dd.c:958 bus_for_each_drv+0x228/0x2bc drivers/base/bus.c:462 __device_attach+0x2b4/0x434 drivers/base/dd.c:1030 device_initial_probe+0x24/0x34 drivers/base/dd.c:1079 bus_probe_device+0x178/0x240 drivers/base/bus.c:537 device_add+0x728/0xa6c drivers/base/core.c:3666 usb_new_device+0x908/0x14ac drivers/usb/core/hub.c:2663 hub_port_connect drivers/usb/core/hub.c:5533 [inline] hub_port_connect_change drivers/usb/core/hub.c:5673 [inline] port_event drivers/usb/core/hub.c:5833 [inline] hub_event+0x2454/0x4280 drivers/usb/core/hub.c:5915 process_one_work+0x810/0x1638 kernel/workqueue.c:3238 process_scheduled_works kernel/workqueue.c:3319 [inline] worker_thread+0x9b4/0xeec kernel/workqueue.c:3400 kthread+0x65c/0x7b0 kernel/kthread.c:464 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:862 irq event stamp: 107354 hardirqs last enabled at (107353): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline] hardirqs last enabled at (107353): [] _raw_spin_unlock_irqrestore+0x38/0x98 kernel/locking/spinlock.c:194 hardirqs last disabled at (107354): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:488 softirqs last enabled at (107248): [] spin_unlock_bh include/linux/spinlock.h:396 [inline] softirqs last enabled at (107248): [] ieee80211_get_txq_stats+0x2e4/0x4c4 net/mac80211/cfg.c:4662 softirqs last disabled at (107246): [] spin_lock_bh include/linux/spinlock.h:356 [inline] softirqs last disabled at (107246): [] ieee80211_get_txq_stats+0x38/0x4c4 net/mac80211/cfg.c:4634 ---[ end trace 0000000000000000 ]--- plfxlc 1-1:1.167: pureLifi:Device error plfxlc 1-1:1.167: probe with driver plfxlc failed with error -22 usb 1-1: USB disconnect, device number 8 usb 1-1: new high-speed USB device number 9 using dummy_hcd usb 1-1: Using ep0 maxpacket: 8 usb 1-1: unable to get BOS descriptor or descriptor too short usb 1-1: config 1 has an invalid interface number: 167 but max is 2 usb 1-1: config 1 has an invalid descriptor of length 118, skipping remainder of the config usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 usb 1-1: config 1 has no interface number 0 usb 1-1: config 1 interface 167 has no altsetting 0 usb 1-1: New USB device found, idVendor=2ef5, idProduct=000a, bcdDevice=21.c2 usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 usb 1-1: Product: syz usb 1-1: Manufacturer: syz usb 1-1: SerialNumber: syz plfxlc 1-1:1.167: Firmware Version: 0 plfxlc 1-1:1.167: Unit type is station plfxlc 1-1:1.167: vendor command failed (-71) plfxlc 1-1:1.167: FPGA download failed (-22) ------------[ cut here ]------------ WARNING: CPU: 1 PID: 2279 at drivers/net/wireless/purelifi/plfxlc/mac.c:105 plfxlc_mac_release+0x98/0xc8 drivers/net/wireless/purelifi/plfxlc/mac.c:105 Modules linked in: CPU: 1 UID: 0 PID: 2279 Comm: kworker/1:2 Tainted: G W 6.14.0-rc7-syzkaller-ga2392f333575 #0 Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 Workqueue: usb_hub_wq hub_event pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : plfxlc_mac_release+0x98/0xc8 drivers/net/wireless/purelifi/plfxlc/mac.c:105 lr : plfxlc_mac_release+0x98/0xc8 drivers/net/wireless/purelifi/plfxlc/mac.c:105 sp : ffff8000a16968c0 x29: ffff8000a16968c0 x28: dfff800000000000 x27: ffff7000142d2d24 x26: 00000000ffffffea x25: ffff0000db9d62a0 x24: ffff0000db9d30a0 x23: ffff8000a1696a80 x22: ffff0000db9d0e90 x21: ffff0000c85ff000 x20: 0000000000000001 x19: 0000000000000000 x18: 0000000000000008 x17: 0000000000000000 x16: ffff800080467a7c x15: 0000000000000001 x14: 1fffe0001b73ac5e x13: 0000000000000000 x12: 0000000000000000 x11: ffff60001b73ac5f x10: 0000000000ff0100 x9 : 0000000000000000 x8 : ffff0000cd1a1e80 x7 : ffff800086786224 x6 : 0000000000000000 x5 : 0000000000000001 x4 : 0000000000000001 x3 : ffff80008045ebc8 x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 Call trace: plfxlc_mac_release+0x98/0xc8 drivers/net/wireless/purelifi/plfxlc/mac.c:105 (P) probe+0x264/0xdd8 drivers/net/wireless/purelifi/plfxlc/usb.c:694 usb_probe_interface+0x598/0xa40 drivers/usb/core/driver.c:396 really_probe+0x38c/0x8fc drivers/base/dd.c:658 __driver_probe_device+0x194/0x374 drivers/base/dd.c:800 driver_probe_device+0x78/0x330 drivers/base/dd.c:830 __device_attach_driver+0x2a8/0x4f4 drivers/base/dd.c:958 bus_for_each_drv+0x228/0x2bc drivers/base/bus.c:462 __device_attach+0x2b4/0x434 drivers/base/dd.c:1030 device_initial_probe+0x24/0x34 drivers/base/dd.c:1079 bus_probe_device+0x178/0x240 drivers/base/bus.c:537 device_add+0x728/0xa6c drivers/base/core.c:3666 usb_set_configuration+0x15cc/0x1b38 drivers/usb/core/message.c:2210 usb_generic_driver_probe+0x8c/0x148 drivers/usb/core/generic.c:250 usb_probe_device+0x1a4/0x348 drivers/usb/core/driver.c:291 really_probe+0x38c/0x8fc drivers/base/dd.c:658 __driver_probe_device+0x194/0x374 drivers/base/dd.c:800 driver_probe_device+0x78/0x330 drivers/base/dd.c:830 __device_attach_driver+0x2a8/0x4f4 drivers/base/dd.c:958 bus_for_each_drv+0x228/0x2bc drivers/base/bus.c:462 __device_attach+0x2b4/0x434 drivers/base/dd.c:1030 device_initial_probe+0x24/0x34 drivers/base/dd.c:1079 bus_probe_device+0x178/0x240 drivers/base/bus.c:537 device_add+0x728/0xa6c drivers/base/core.c:3666 usb_new_device+0x908/0x14ac drivers/usb/core/hub.c:2663 hub_port_connect drivers/usb/core/hub.c:5533 [inline] hub_port_connect_change drivers/usb/core/hub.c:5673 [inline] port_event drivers/usb/core/hub.c:5833 [inline] hub_event+0x2454/0x4280 drivers/usb/core/hub.c:5915 process_one_work+0x810/0x1638 kernel/workqueue.c:3238 process_scheduled_works kernel/workqueue.c:3319 [inline] worker_thread+0x9b4/0xeec kernel/workqueue.c:3400 kthread+0x65c/0x7b0 kernel/kthread.c:464 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:862 irq event stamp: 117874 hardirqs last enabled at (117873): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline] hardirqs last enabled at (117873): [] _raw_spin_unlock_irqrestore+0x38/0x98 kernel/locking/spinlock.c:194 hardirqs last disabled at (117874): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:488 softirqs last enabled at (117792): [] softirq_handle_end kernel/softirq.c:407 [inline] softirqs last enabled at (117792): [] handle_softirqs+0xb44/0xd34 kernel/softirq.c:589 softirqs last disabled at (117783): [] __do_softirq+0x14/0x20 kernel/softirq.c:595 ---[ end trace 0000000000000000 ]--- plfxlc 1-1:1.167: pureLifi:Device error plfxlc 1-1:1.167: probe with driver plfxlc failed with error -22 usb 1-1: USB disconnect, device number 9 usb 1-1: new high-speed USB device number 10 using dummy_hcd usb 1-1: Using ep0 maxpacket: 8 usb 1-1: unable to get BOS descriptor or descriptor too short usb 1-1: config 1 has an invalid interface number: 167 but max is 2 usb 1-1: config 1 has an invalid descriptor of length 118, skipping remainder of the config usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 usb 1-1: config 1 has no interface number 0 usb 1-1: config 1 interface 167 has no altsetting 0 usb 1-1: New USB device found, idVendor=2ef5, idProduct=000a, bcdDevice=21.c2 usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 usb 1-1: Product: syz usb 1-1: Manufacturer: syz usb 1-1: SerialNumber: syz plfxlc 1-1:1.167: Firmware Version: 0 plfxlc 1-1:1.167: Unit type is station plfxlc 1-1:1.167: vendor command failed (-71) plfxlc 1-1:1.167: FPGA download failed (-22) ------------[ cut here ]------------ WARNING: CPU: 1 PID: 2279 at drivers/net/wireless/purelifi/plfxlc/mac.c:105 plfxlc_mac_release+0x98/0xc8 drivers/net/wireless/purelifi/plfxlc/mac.c:105 Modules linked in: CPU: 1 UID: 0 PID: 2279 Comm: kworker/1:2 Tainted: G W 6.14.0-rc7-syzkaller-ga2392f333575 #0 Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 Workqueue: usb_hub_wq hub_event pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : plfxlc_mac_release+0x98/0xc8 drivers/net/wireless/purelifi/plfxlc/mac.c:105 lr : plfxlc_mac_release+0x98/0xc8 drivers/net/wireless/purelifi/plfxlc/mac.c:105 sp : ffff8000a16968c0 x29: ffff8000a16968c0 x28: dfff800000000000 x27: ffff7000142d2d24 x26: 00000000ffffffea x25: ffff0000d80262a0 x24: ffff0000d80230a0 x23: ffff8000a1696a80 x22: ffff0000d8020e90 x21: ffff0000c8841000 x20: 0000000000000001 x19: 0000000000000000 x18: 0000000000000008 x17: 0000000000000000 x16: ffff800080467a7c x15: 0000000000000001 x14: 1fffe0001b004c5e x13: 0000000000000000 x12: 0000000000000000 x11: ffff60001b004c5f x10: 0000000000ff0100 x9 : 0000000000000000 x8 : ffff0000cd1a1e80 x7 : ffff800086786224 x6 : 0000000000000000 x5 : 0000000000000001 x4 : 0000000000000001 x3 : ffff80008045ebc8 x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 Call trace: plfxlc_mac_release+0x98/0xc8 drivers/net/wireless/purelifi/plfxlc/mac.c:105 (P) probe+0x264/0xdd8 drivers/net/wireless/purelifi/plfxlc/usb.c:694 usb_probe_interface+0x598/0xa40 drivers/usb/core/driver.c:396 really_probe+0x38c/0x8fc drivers/base/dd.c:658 __driver_probe_device+0x194/0x374 drivers/base/dd.c:800 driver_probe_device+0x78/0x330 drivers/base/dd.c:830 __device_attach_driver+0x2a8/0x4f4 drivers/base/dd.c:958 bus_for_each_drv+0x228/0x2bc drivers/base/bus.c:462 __device_attach+0x2b4/0x434 drivers/base/dd.c:1030 device_initial_probe+0x24/0x34 drivers/base/dd.c:1079 bus_probe_device+0x178/0x240 drivers/base/bus.c:537 device_add+0x728/0xa6c drivers/base/core.c:3666 usb_set_configuration+0x15cc/0x1b38 drivers/usb/core/message.c:2210 usb_generic_driver_probe+0x8c/0x148 drivers/usb/core/generic.c:250 usb_probe_device+0x1a4/0x348 drivers/usb/core/driver.c:291 really_probe+0x38c/0x8fc drivers/base/dd.c:658 __driver_probe_device+0x194/0x374 drivers/base/dd.c:800 driver_probe_device+0x78/0x330 drivers/base/dd.c:830 __device_attach_driver+0x2a8/0x4f4 drivers/base/dd.c:958 bus_for_each_drv+0x228/0x2bc drivers/base/bus.c:462 __device_attach+0x2b4/0x434 drivers/base/dd.c:1030 device_initial_probe+0x24/0x34 drivers/base/dd.c:1079 bus_probe_device+0x178/0x240 drivers/base/bus.c:537 device_add+0x728/0xa6c drivers/base/core.c:3666 usb_new_device+0x908/0x14ac drivers/usb/core/hub.c:2663 hub_port_connect drivers/usb/core/hub.c:5533 [inline] hub_port_connect_change drivers/usb/core/hub.c:5673 [inline] port_event drivers/usb/core/hub.c:5833 [inline] hub_event+0x2454/0x4280 drivers/usb/core/hub.c:5915 process_one_work+0x810/0x1638 kernel/workqueue.c:3238 process_scheduled_works kernel/workqueue.c:3319 [inline] worker_thread+0x9b4/0xeec kernel/workqueue.c:3400 kthread+0x65c/0x7b0 kernel/kthread.c:464 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:862 irq event stamp: 129270 hardirqs last enabled at (129269): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline] hardirqs last enabled at (129269): [] _raw_spin_unlock_irqrestore+0x38/0x98 kernel/locking/spinlock.c:194 hardirqs last disabled at (129270): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:488 softirqs last enabled at (129168): [] spin_unlock_bh include/linux/spinlock.h:396 [inline] softirqs last enabled at (129168): [] ieee80211_get_txq_stats+0x2e4/0x4c4 net/mac80211/cfg.c:4662 softirqs last disabled at (129166): [] spin_lock_bh include/linux/spinlock.h:356 [inline] softirqs last disabled at (129166): [] ieee80211_get_txq_stats+0x38/0x4c4 net/mac80211/cfg.c:4634 ---[ end trace 0000000000000000 ]--- plfxlc 1-1:1.167: pureLifi:Device error plfxlc 1-1:1.167: probe with driver plfxlc failed with error -22 usb 1-1: USB disconnect, device number 10 usb 1-1: new high-speed USB device number 11 using dummy_hcd usb 1-1: Using ep0 maxpacket: 8 usb 1-1: unable to get BOS descriptor or descriptor too short usb 1-1: config 1 has an invalid interface number: 167 but max is 2 usb 1-1: config 1 has an invalid descriptor of length 118, skipping remainder of the config usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 usb 1-1: config 1 has no interface number 0 usb 1-1: config 1 interface 167 has no altsetting 0 usb 1-1: New USB device found, idVendor=2ef5, idProduct=000a, bcdDevice=21.c2 usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 usb 1-1: Product: syz usb 1-1: Manufacturer: syz usb 1-1: SerialNumber: syz plfxlc 1-1:1.167: Firmware Version: 0 plfxlc 1-1:1.167: Unit type is station