Fender Bronco 40 support?

[StillVoidingWarranties]

Hello offa,

I have a Fender Bronco 40 amp which from what I understand is very similar to the Mustang series, just with different modeling presets for bass. (Fender Bronco 40 Manual)
It used to be controllable with the Fuse Silverlight-app from Fender.

I managed to build Plug v1.4.3 and the connection fails with the error message
ERROR: Invalid amp id: 239

This error changes depending on the position of the amp selection knob. It has 8 positions and for my setup it produces the ids 171, 0, 0, 244, 239, 219, 219, 219.

Here is the output from dmesg:

[56819.047021] usb 1-7: new full-speed USB device number 26 using xhci_hcd
[56819.204199] usb 1-7: New USB device found, idVendor=1ed8, idProduct=000a, bcdDevice= 1.00
[56819.204216] usb 1-7: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[56819.204224] usb 1-7: Product: Bronco Amplifier 
[56819.204230] usb 1-7: Manufacturer: FMIC
[56819.204236] usb 1-7: SerialNumber: F62BFF373537553057156631
[56819.210811] hid-generic 0003:1ED8:000A.0011: hiddev2,hidraw4: USB HID v1.10 Device [FMIC Bronco Amplifier ] on usb-0000:00:14.0-7/input0

lsusb:
Bus 001 Device 026: ID 1ed8:000a FMIC Bronco Amplifier

lsusb -v:

Bus 001 Device 026: ID 1ed8:000a FMIC Bronco Amplifier 
Couldn't open device, some information will be missing
Device Descriptor:
  bLength                18
  bDescriptorType         1
  bcdUSB               1.10
  bDeviceClass            0 
  bDeviceSubClass         0 
  bDeviceProtocol         0 
  bMaxPacketSize0        64
  idVendor           0x1ed8 
  idProduct          0x000a 
  bcdDevice            1.00
  iManufacturer           1 FMIC
  iProduct                2 Bronco Amplifier 
  iSerial                 3 F62BFF373537553057156631
  bNumConfigurations      1
  Configuration Descriptor:
    bLength                 9
    bDescriptorType         2
    wTotalLength       0x0084
    bNumInterfaces          3
    bConfigurationValue     1
    iConfiguration          0 
    bmAttributes         0xc0
      Self Powered
    MaxPower              100mA
    Interface Descriptor:
      bLength                 9
      bDescriptorType         4
      bInterfaceNumber        0
      bAlternateSetting       0
      bNumEndpoints           2
      bInterfaceClass         3 Human Interface Device
      bInterfaceSubClass      0 
      bInterfaceProtocol      0 
      iInterface              0 
        HID Device Descriptor:
          bLength                 9
          bDescriptorType        33
          bcdHID               1.10
          bCountryCode            0 Not supported
          bNumDescriptors         1
          bDescriptorType        34 Report
          wDescriptorLength      32
         Report Descriptors: 
           ** UNAVAILABLE **
      Endpoint Descriptor:
        bLength                 7
        bDescriptorType         5
        bEndpointAddress     0x81  EP 1 IN
        bmAttributes            3
          Transfer Type            Interrupt
          Synch Type               None
          Usage Type               Data
        wMaxPacketSize     0x0040  1x 64 bytes
        bInterval               1
      Endpoint Descriptor:
        bLength                 7
        bDescriptorType         5
        bEndpointAddress     0x01  EP 1 OUT
        bmAttributes            3
          Transfer Type            Interrupt
          Synch Type               None
          Usage Type               Data
        wMaxPacketSize     0x0040  1x 64 bytes
        bInterval               1
    Interface Descriptor:
      bLength                 9
      bDescriptorType         4
      bInterfaceNumber        2
      bAlternateSetting       0
      bNumEndpoints           0
      bInterfaceClass         1 Audio
      bInterfaceSubClass      1 Control Device
      bInterfaceProtocol      0 
      iInterface              0 
      AudioControl Interface Descriptor:
        bLength                 9
        bDescriptorType        36
        bDescriptorSubtype      1 (HEADER)
        bcdADC               1.00
        wTotalLength       0x001e
        bInCollection           1
        baInterfaceNr(0)        1
      AudioControl Interface Descriptor:
        bLength                12
        bDescriptorType        36
        bDescriptorSubtype      2 (INPUT_TERMINAL)
        bTerminalID             1
        wTerminalType      0x0200 Input Undefined
        bAssocTerminal          0
        bNrChannels             2
        wChannelConfig     0x0003
          Left Front (L)
          Right Front (R)
        iChannelNames           0 
        iTerminal               0 
      AudioControl Interface Descriptor:
        bLength                 9
        bDescriptorType        36
        bDescriptorSubtype      3 (OUTPUT_TERMINAL)
        bTerminalID             2
        wTerminalType      0x0101 USB Streaming
        bAssocTerminal          0
        bSourceID               1
        iTerminal               0 
    Interface Descriptor:
      bLength                 9
      bDescriptorType         4
      bInterfaceNumber        1
      bAlternateSetting       0
      bNumEndpoints           0
      bInterfaceClass         1 Audio
      bInterfaceSubClass      2 Streaming
      bInterfaceProtocol      0 
      iInterface              0 
    Interface Descriptor:
      bLength                 9
      bDescriptorType         4
      bInterfaceNumber        1
      bAlternateSetting       1
      bNumEndpoints           1
      bInterfaceClass         1 Audio
      bInterfaceSubClass      2 Streaming
      bInterfaceProtocol      0 
      iInterface              0 
      AudioStreaming Interface Descriptor:
        bLength                 7
        bDescriptorType        36
        bDescriptorSubtype      1 (AS_GENERAL)
        bTerminalLink           2
        bDelay                  1 frames
        wFormatTag         0x0001 PCM
      AudioStreaming Interface Descriptor:
        bLength                11
        bDescriptorType        36
        bDescriptorSubtype      2 (FORMAT_TYPE)
        bFormatType             1 (FORMAT_TYPE_I)
        bNrChannels             2
        bSubframeSize           2
        bBitResolution         16
        bSamFreqType            1 Discrete
        tSamFreq[ 0]        44100
      Endpoint Descriptor:
        bLength                 9
        bDescriptorType         5
        bEndpointAddress     0x82  EP 2 IN
        bmAttributes            5
          Transfer Type            Isochronous
          Synch Type               Asynchronous
          Usage Type               Data
        wMaxPacketSize     0x00c0  1x 192 bytes
        bInterval               1
        bRefresh                0
        bSynchAddress           0
        AudioStreaming Endpoint Descriptor:
          bLength                 7
          bDescriptorType        37
          bDescriptorSubtype      1 (EP_GENERAL)
          bmAttributes         0x00
          bLockDelayUnits         0 Undefined
          wLockDelay         0x0000

Sadly, I lack the C++ skills to look into this but if the Bronco is as similar to the Mustang as I suspect then making Plug compatible with the Bronco should be doable. If someone is interested I will try to help as good as I can.

[StillVoidingWarranties]

I just tried to connect with usb debugging enabled.

On plugging in the amp there is

[ 4.647294] [00009504] libusb: debug [linux_get_device_address] getting address for device: 1-7 detached: 0
[ 4.651728] [00009504] libusb: debug [linux_get_device_address] scan 1-7
[ 4.651766] [00009504] libusb: debug [linux_get_device_address] bus=1 dev=28
[ 4.651772] [00009504] libusb: debug [udev_hotplug_event] udev hotplug event. action: add.
[ 4.651775] [00009504] libusb: debug [linux_enumerate_device] busnum 1 devaddr 28 session_id 284
[ 4.651780] [00009504] libusb: debug [linux_enumerate_device] allocating new device for 1/28 (session 284)
[ 4.651812] [00009504] libusb: debug [linux_get_parent_info] dev 0x7faeb4001f60 (1-7) has parent 0x55d1273ed6b0 (usb1) port 7
[ 4.689494] [00009504] libusb: debug [linux_get_device_address] getting address for device: 1-7 detached: 0
[ 4.689511] [00009504] libusb: debug [linux_get_device_address] scan 1-7
[ 4.689544] [00009504] libusb: debug [linux_get_device_address] bus=1 dev=28
[ 4.689551] [00009504] libusb: debug [udev_hotplug_event] udev hotplug event. action: bind.

Then, when trying to connect I get

[10.536388] [00009502] libusb: debug [libusb_get_device_descriptor]  
[10.536393] [00009502] libusb: debug [libusb_open] open 1.28
[10.536422] [00009502] libusb: debug [usbi_add_event_source] add fd 20 events 4
[10.536433] [00009502] libusb: debug [libusb_claim_interface] interface 0
[10.536595] [00009502] libusb: debug [libusb_submit_transfer] transfer 0x55d12770b1b0
[10.536602] [00009502] libusb: debug [add_to_flying_list] arm timer for timeout in 1000ms (first in line)
[10.536618] [00009502] libusb: debug [libusb_handle_events_timeout_completed] doing our own event handling
[10.536622] [00009502] libusb: debug [handle_events] event sources modified, reallocating event data
[10.536627] [00009502] libusb: debug [usbi_wait_for_events] poll() 3 fds with timeout in 60000ms
[10.536632] [00009502] libusb: debug [usbi_wait_for_events] poll() returned 1
[10.536636] [00009502] libusb: debug [handle_event_trigger] event triggered
[10.536639] [00009502] libusb: debug [handle_event_trigger] hotplug message received
[10.536645] [00009502] libusb: debug [libusb_handle_events_timeout_completed] doing our own event handling
[10.536648] [00009502] libusb: debug [usbi_wait_for_events] poll() 3 fds with timeout in 60000ms
[10.536691] [00009502] libusb: debug [usbi_wait_for_events] poll() returned 1
[10.536707] [00009502] libusb: debug [reap_for_handle] urb type=2 status=0 transferred=4
[10.536712] [00009502] libusb: debug [handle_control_completion] handling completion status 0
[10.536716] [00009502] libusb: debug [arm_timer_for_next_timeout] no timeouts, disarming timer
[10.536721] [00009502] libusb: debug [usbi_handle_transfer_completion] transfer 0x55d12770b1b0 has callback 0x7faee25fd100
[10.536725] [00009502] libusb: debug [sync_transfer_cb] actual_length=4
[10.536732] [00009502] libusb: debug [libusb_free_transfer] transfer 0x55d12770b1b0
[10.536738] [00009502] libusb: debug [libusb_submit_transfer] transfer 0x55d12770b1b0
[10.536741] [00009502] libusb: debug [add_to_flying_list] arm timer for timeout in 1000ms (first in line)
[10.536752] [00009502] libusb: debug [libusb_handle_events_timeout_completed] doing our own event handling
[10.536755] [00009502] libusb: debug [usbi_wait_for_events] poll() 3 fds with timeout in 60000ms
[10.536983] [00009502] libusb: debug [usbi_wait_for_events] poll() returned 1
[10.536996] [00009502] libusb: debug [reap_for_handle] urb type=2 status=0 transferred=36
[10.537000] [00009502] libusb: debug [handle_control_completion] handling completion status 0
[10.537003] [00009502] libusb: debug [arm_timer_for_next_timeout] no timeouts, disarming timer
[10.537008] [00009502] libusb: debug [usbi_handle_transfer_completion] transfer 0x55d12770b1b0 has callback 0x7faee25fd100
[10.537011] [00009502] libusb: debug [sync_transfer_cb] actual_length=36
[10.537017] [00009502] libusb: debug [libusb_free_transfer] transfer 0x55d12770b1b0

[...]

[12.069805] [00009502] libusb: debug [libusb_submit_transfer] transfer 0x55d12770b1b0
[12.069809] [00009502] libusb: debug [add_to_flying_list] arm timer for timeout in 500ms (first in line)
[12.069815] [00009502] libusb: debug [submit_bulk_transfer] need 1 urbs for new transfer with length 64
[12.069825] [00009502] libusb: debug [libusb_handle_events_timeout_completed] doing our own event handling
[12.069829] [00009502] libusb: debug [usbi_wait_for_events] poll() 3 fds with timeout in 60000ms
[12.569863] [00009502] libusb: debug [usbi_wait_for_events] poll() returned 1
[12.569894] [00009502] libusb: debug [libusb_cancel_transfer] transfer 0x55d12770b1b0
[12.569986] [00009502] libusb: debug [arm_timer_for_next_timeout] no timeouts, disarming timer
[12.573257] [00009502] libusb: debug [libusb_handle_events_timeout_completed] doing our own event handling
[12.573267] [00009502] libusb: debug [usbi_wait_for_events] poll() 3 fds with timeout in 60000ms
[12.573275] [00009502] libusb: debug [usbi_wait_for_events] poll() returned 1
[12.573297] [00009502] libusb: debug [reap_for_handle] urb type=1 status=-2 transferred=0
[12.573301] [00009502] libusb: debug [handle_bulk_completion] handling completion status -2 of bulk urb 1/1
[12.573304] [00009502] libusb: debug [handle_bulk_completion] abnormal reap: urb status -2
[12.573307] [00009502] libusb: debug [handle_bulk_completion] abnormal reap: last URB handled, reporting
[12.573311] [00009502] libusb: debug [usbi_handle_transfer_cancellation] detected timeout cancellation
[12.573314] [00009502] libusb: debug [arm_timer_for_next_timeout] no timeouts, disarming timer
[12.573318] [00009502] libusb: debug [usbi_handle_transfer_completion] transfer 0x55d12770b1b0 has callback 0x7faee25fd100
[12.573321] [00009502] libusb: debug [sync_transfer_cb] actual_length=0
[12.573325] [00009502] libusb: debug [libusb_free_transfer] transfer 0x55d12770b1b0
ERROR:  Invalid amp id: 0

[offa]

ERROR: Invalid amp id: 0

The amp IDs listed above aren't known to plug yet, but 0 usually indicates some kind of communication issues (eg. a different protocol or package format used).

Can you dump the initial packets between PC and device? If not, I can provide you a test version which does it.

[StillVoidingWarranties]

I am sorry but I don't know how to log USB traffic except for what I have posted above. If you could provide me with a test version I will happily make some logs. I may also be able to reactivate an old Windows 7 installation with FUSE installed but I don't know how to create any logs on Windows.

[offa]

The 20-bronco branch contains a very basic dumper – it'll write all received bytes to stdout (hex).

Amp packets are those with a 0x05 on the 3rd position (aka array index 2).

[StillVoidingWarranties]

Ok, thank you very much. I will look into this in a bit.

[StillVoidingWarranties]

Ok, here is what I found. First try:
1c 01 05 00 13 00 01 00 00 00 00 00 00 00 00 00 9b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ba aa ff aa 8f 60 86 80 80 00 80 80 07 07 07 01 02 04 00 01 7f 01 07 64 19 8c b3 80 80 89 00 00

Second try, different virtual amp selection:
1c 01 05 00 07 00 01 00 00 00 00 00 00 00 00 00 96 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 00 80 ff 8e 63 80 80 80 ff 80 80 01 01 01 02 03 00 00 01 7f 01 00 0d 80 4c ff ff 55 aa 00 00

Third try, different USB port, different virtual amp selection
1c 01 05 00 12 00 01 00 00 00 00 00 00 00 00 00 9a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f3 59 80 ff 9c 47 aa 80 80 00 80 80 06 06 06 01 02 06 06 01 7f 01 06 60 19 80 b3 80 80 80 00 00

[StillVoidingWarranties]

I have tried each of the 24 presets because they result in different bytes being sent. These are organized in 3 banks:
1 - 8: Factory presets (amber bank)
9 - 16: User presets A (green bank)
17 - 24: User presets B (red bank)

These are the 24 lines of data I received:

1c 01 05 00 07 00 01 00 00 00 00 00 00 00 00 00 96 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 00 80 ff 8e 63 80 80 80 ff 80 80 01 01 01 02 03 00 00 01 7f 01 00 0d 80 4c ff ff 55 aa 00 00 
1c 01 05 00 06 00 01 00 00 00 00 00 00 00 00 00 64 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bf 81 00 80 63 a7 a4 91 80 ff 80 80 02 02 02 00 00 0d 02 01 7f 01 01 03 99 40 ff ff 80 80 00 00 
1c 01 05 00 05 00 01 00 00 00 00 00 00 00 00 00 97 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ed aa 80 63 55 55 9c 80 80 ff 80 80 03 03 03 00 00 0a 00 01 7f 01 01 03 99 40 ff ff ff 80 00 00 
1c 01 05 00 04 00 01 00 00 00 00 00 00 00 00 00 98 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b8 88 80 80 78 55 a0 80 80 00 80 80 04 04 04 01 02 05 04 01 7f 01 01 03 99 40 ff ff 57 50 00 00 
1c 01 05 00 03 00 01 00 00 00 00 00 00 00 00 00 9b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 aa ff aa 80 80 9c 80 80 ff 80 80 07 07 07 02 03 00 00 01 7f 01 00 03 99 40 ff ff 80 80 00 00 
1c 01 05 00 02 00 01 00 00 00 00 00 00 00 00 00 9a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d5 80 80 ff 9c 47 9c 80 80 00 80 80 06 06 06 01 02 06 06 01 7a 01 01 03 99 40 ff ff 80 80 00 00 
1c 01 05 00 01 00 01 00 00 00 00 00 00 00 00 00 99 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 7d 9e 80 ff 80 80 b6 80 a3 00 80 80 05 05 05 01 02 02 00 01 7d 01 06 60 19 80 b3 80 80 80 00 00 
1c 01 05 00 00 00 01 00 00 00 00 00 00 00 00 00 bd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b9 50 80 e3 55 47 aa 80 80 00 80 80 08 08 08 01 02 09 08 01 7f 01 01 03 99 40 ff ff ff e3 00 00 
1c 01 05 00 0f 00 01 00 00 00 00 00 00 00 00 00 96 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 88 80 ff 64 c9 b4 80 80 00 80 80 01 01 01 05 02 0a 00 01 7b 01 00 27 66 59 e6 c0 00 7e 00 00 
1c 01 05 00 0e 00 01 00 00 00 00 00 00 00 00 00 64 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 cd 69 00 80 ad 8f 84 9e 80 00 80 80 02 02 02 00 02 08 02 02 7f 01 00 60 19 80 b3 80 80 80 00 00 
1c 01 05 00 0d 00 01 00 00 00 00 00 00 00 00 00 97 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a2 aa 80 63 40 55 b9 80 80 ff 80 80 03 03 03 00 00 0c 00 01 7b 01 03 27 66 59 e6 c0 ff 80 00 00 
1c 01 05 00 0c 00 01 00 00 00 00 00 00 00 00 00 98 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 dd 22 80 80 7c 7c c2 80 80 00 80 80 04 04 04 01 02 05 04 01 7d 01 01 03 99 40 ff ff 34 49 00 00 
1c 01 05 00 0b 00 01 00 00 00 00 00 00 00 00 00 9b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 7c aa ff aa 8c 4e 7d 80 80 00 80 80 07 07 07 01 02 04 00 01 7a 01 0a 7d 19 c0 80 40 80 9b 00 00 
1c 01 05 00 0a 00 01 00 00 00 00 00 00 00 00 00 9a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c2 54 80 ff 69 47 9c 80 80 00 80 80 06 06 06 01 02 06 06 01 7a 01 01 03 99 40 ff ff 80 80 00 00 
1c 01 05 00 09 00 01 00 00 00 00 00 00 00 00 00 99 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 7d 9e 80 ff 80 80 b6 80 a3 00 80 80 05 05 05 01 02 03 00 01 7d 01 06 60 19 80 b3 80 80 80 00 00 
1c 01 05 00 08 00 01 00 00 00 00 00 00 00 00 00 bd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c9 51 80 e3 55 47 aa 80 80 00 80 80 08 08 08 01 02 05 08 01 7f 01 01 03 99 40 ff ff ff e3 00 00 
1c 01 05 00 17 00 01 00 00 00 00 00 00 00 00 00 96 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 88 80 ff 1b a8 c7 80 80 00 80 80 01 01 01 05 02 0a 00 01 7f 01 00 27 66 59 e6 c0 00 41 00 00 
1c 01 05 00 16 00 01 00 00 00 00 00 00 00 00 00 64 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 cd 69 00 80 ff 8f 63 e2 80 00 80 80 02 02 02 00 02 08 02 02 7f 01 00 60 19 80 b3 80 80 80 00 00 
1c 01 05 00 15 00 01 00 00 00 00 00 00 00 00 00 97 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ba 80 63 55 55 67 80 80 ff 80 80 03 03 03 00 00 0a 00 01 ff 01 01 03 99 40 ff ff ff 80 00 00 
1c 01 05 00 14 00 01 00 00 00 00 00 00 00 00 00 98 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e2 00 80 80 7c 7c c2 80 80 00 80 80 04 04 04 01 02 03 04 01 7d 01 06 60 19 80 b3 80 34 3b 00 00 
1c 01 05 00 13 00 01 00 00 00 00 00 00 00 00 00 9b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ba aa ff aa 8f 60 86 80 80 00 80 80 07 07 07 01 02 04 00 01 7f 01 07 64 19 8c b3 80 80 89 00 00 
1c 01 05 00 12 00 01 00 00 00 00 00 00 00 00 00 9a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f3 59 80 ff 9c 47 aa 80 80 00 80 80 06 06 06 01 02 06 06 01 7f 01 06 60 19 80 b3 80 80 80 00 00 
1c 01 05 00 11 00 01 00 00 00 00 00 00 00 00 00 99 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 7d 9c 80 ff 80 4b b6 80 a3 00 80 80 05 05 05 01 02 03 00 01 7d 01 09 6e 19 a6 80 40 80 5c 00 00 
1c 01 05 00 10 00 01 00 00 00 00 00 00 00 00 00 bd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a4 ff 80 e3 55 47 aa 80 80 00 80 80 08 08 08 01 02 05 08 01 7f 01 01 03 99 40 ff ff ff e3 00 00

[offa]

The packets seem similar to the mustang ones. I've taken your first example and decoded it using it's format (some values only):

• Header:
  • stage: ready
  • type: operation
  • dsp: amp
  • slot: 0x13 (19 dez.)
• Payload:
  • model: 0x9b
  • volume: 0xba (186 of 255)

Could these match your settings?

[StillVoidingWarranties]

Yes, this looks plausible, I think for the first try I used the 3rd model in the 3rd bank which would be #19.

BTW: The amps of the Bronco 40 are called:

• Rumble
• '59 Bassman
• Bassman TV
• Bassman 300
• Redhead
• Rockin' Peg
• KGB800
• Monster

[offa]

The 59 Bassman is included with id 0x64. Could you select that one, start Plug and see if you get past the invalid amp id error?

We have to figure out the id's of each amp model. Selecting on of those prior to starting Plug should yield a Invalid amp id <ID of selected amp> error.

[StillVoidingWarranties]

Sadly, the Bronco's 59 Bassman preset does not seem to work.

Strangely, I get different IDs without changing the preset. The first one (Rumble) was reported as 0, 71, 171, 238, 244, 245, 251, 252 and 255 on different attempts. Now, after a few tries I cannot get anything other than 0. I tried different cables and different USB ports and power cycling the amp. I will try rebooting the computer.

[StillVoidingWarranties]

Error ids vary wildly even after reboot or closing and reopening Plug.

[StillVoidingWarranties]

I read your documentation and the Bronco's amp name packets (0x1c 0x01 0x04) seem to differ from that as the Bronco sends the slot number as the 5th byte, not the 4th which is always 0. It does however send the amp names in bytes 16 - 32. I could decode them from a connection log, e.g. the factory presets were sent as

• Monster
• Redhead
• Rockin' Peg
• KGB800
• Bassman 300
• Bassman TV
• '59 Bassman 4x10
• Rumble Clean

Also, after the mysterious device with address 0x0a there is another packet for a device 0x0d containing only zeroes. After that the following packets seem to be the same as with Mustangs with the confirmation and effects settings.

bronco.txt

[offa]

Error ids vary wildly even after reboot or closing and reopening Plug.

Did your test with the log attached fail with a 0 too? The amp packet seems to use model 0x9a there.

Bronco sends the slot number as the 5th byte, not the 4th which is always 0.

Could it be that the slot is not one, but two bytes?

[StillVoidingWarranties]

Did your test with the log attached fail with a 0 too? The amp packet seems to use model 0x9a there.

I didn't remember so I redid the test. I selected the "Bassman '59" factory preset (device id 0x01) and the log is about the same (except for the selected amp), see attached log.
bronco_bassman59.log

Could it be that the slot is not one, but two bytes?

Yes. I guess Fender wanted to accomodate more than 256 devices and extended the device id to a little endian Word.