Warning: Permanently added '10.128.0.156' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 56.535768][ T12] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 56.775734][ T12] usb 1-1: Using ep0 maxpacket: 8 [ 56.895823][ T12] usb 1-1: config 30 has an invalid interface number: 119 but max is 0 [ 56.904140][ T12] usb 1-1: config 30 has an invalid descriptor of length 200, skipping remainder of the config [ 56.914916][ T12] usb 1-1: config 30 has no interface number 0 [ 56.921286][ T12] usb 1-1: too many endpoints for config 30 interface 119 altsetting 0: 230, using maximum allowed: 30 [ 56.932600][ T12] usb 1-1: config 30 interface 119 altsetting 0 endpoint 0x81 has invalid maxpacket 1622, setting to 1024 [ 56.944108][ T12] usb 1-1: config 30 interface 119 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 56.954565][ T12] usb 1-1: config 30 interface 119 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 230 [ 56.971683][ T12] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=59.9f [ 56.980827][ T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.029124][ T12] input: KB Gear Tablet as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:30.119/input/input5 [ 57.226148][ T1732] ------------[ cut here ]------------ [ 57.231795][ T1732] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 57.237963][ T1732] WARNING: CPU: 0 PID: 1732 at drivers/usb/core/urb.c:477 usb_submit_urb+0x1188/0x13b0 [ 57.247773][ T1732] Kernel panic - not syncing: panic_on_warn set ... [ 57.254544][ T1732] CPU: 0 PID: 1732 Comm: syz-executor835 Not tainted 5.2.0-rc6+ #15 [ 57.262647][ T1732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 57.272996][ T1732] Call Trace: [ 57.276342][ T1732] dump_stack+0xca/0x13e [ 57.280587][ T1732] ? usb_submit_urb+0x10b0/0x13b0 [ 57.285608][ T1732] panic+0x292/0x6c9 [ 57.289495][ T1732] ? __warn_printk+0xf3/0xf3 [ 57.294083][ T1732] ? usb_submit_urb+0x1188/0x13b0 [ 57.299243][ T1732] ? __probe_kernel_read+0x16c/0x1b0 [ 57.304636][ T1732] ? __warn.cold+0x5/0x4b [ 57.308952][ T1732] ? __warn+0xe4/0x1c0 [ 57.313216][ T1732] ? usb_submit_urb+0x1188/0x13b0 [ 57.318265][ T1732] __warn.cold+0x20/0x4b [ 57.322499][ T1732] ? usb_submit_urb+0x1188/0x13b0 [ 57.327769][ T1732] report_bug+0x262/0x2a0 [ 57.332174][ T1732] do_error_trap+0x12b/0x1e0 [ 57.337164][ T1732] ? usb_submit_urb+0x1188/0x13b0 [ 57.342407][ T1732] do_invalid_op+0x32/0x40 [ 57.346948][ T1732] ? usb_submit_urb+0x1188/0x13b0 [ 57.352350][ T1732] invalid_op+0x14/0x20 [ 57.356776][ T1732] RIP: 0010:usb_submit_urb+0x1188/0x13b0 [ 57.362556][ T1732] Code: 4d 85 ed 74 2c e8 f8 d3 f4 fd 4c 89 f7 e8 a0 51 1c ff 41 89 d8 44 89 e1 4c 89 ea 48 89 c6 48 c7 c7 00 0e f7 85 e8 83 98 ca fd <0f> 0b e9 20 f4 ff ff e8 cc d3 f4 fd 4c 89 f2 48 b8 00 00 00 00 00 [ 57.383066][ T1732] RSP: 0018:ffff8881d06bf878 EFLAGS: 00010282 [ 57.389127][ T1732] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 57.397090][ T1732] RDX: 0000000000000000 RSI: ffffffff8127ef3d RDI: ffffed103a0d7f01 [ 57.405235][ T1732] RBP: ffff8881d0bf5500 R08: ffff8881d2678000 R09: 0000000000000000 [ 57.413194][ T1732] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001 [ 57.421277][ T1732] R13: ffff8881d40b58a0 R14: ffff8881d0904d20 R15: ffff8881d3cd9900 [ 57.429340][ T1732] ? vprintk_func+0x7d/0x113 [ 57.434470][ T1732] ? usb_submit_urb+0x1188/0x13b0 [ 57.439525][ T1732] kbtab_open+0xd5/0x130 [ 57.444069][ T1732] input_open_device+0x170/0x280 [ 57.448992][ T1732] ? kbtab_disconnect+0x160/0x160 [ 57.454009][ T1732] evdev_open+0x3fe/0x510 [ 57.458316][ T1732] ? evdev_event+0xc0/0xc0 [ 57.462722][ T1732] chrdev_open+0x219/0x5c0 [ 57.467286][ T1732] ? cdev_put.part.0+0x50/0x50 [ 57.472081][ T1732] do_dentry_open+0x497/0x1040 [ 57.476868][ T1732] ? cdev_put.part.0+0x50/0x50 [ 57.481807][ T1732] ? chmod_common+0x3c0/0x3c0 [ 57.486474][ T1732] ? inode_permission+0xbe/0x3a0 [ 57.491395][ T1732] path_openat+0x1430/0x3ff0 [ 57.495971][ T1732] ? do_sys_open+0x294/0x580 [ 57.500673][ T1732] ? do_syscall_64+0xb7/0x560 [ 57.505510][ T1732] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 57.511914][ T1732] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 57.517275][ T1732] do_filp_open+0x1a1/0x280 [ 57.522002][ T1732] ? may_open_dev+0xf0/0xf0 [ 57.526491][ T1732] ? find_held_lock+0x2d/0x110 [ 57.531239][ T1732] ? lock_downgrade+0x630/0x630 [ 57.536076][ T1732] ? do_raw_spin_unlock+0x50/0x220 [ 57.541230][ T1732] ? _raw_spin_unlock+0x1f/0x30 [ 57.546070][ T1732] ? __alloc_fd+0x43c/0x550 [ 57.550882][ T1732] do_sys_open+0x3c0/0x580 [ 57.555417][ T1732] ? filp_open+0x70/0x70 [ 57.559731][ T1732] ? up_read+0xbd/0x200 [ 57.563871][ T1732] ? trace_hardirqs_off_caller+0x55/0x1c0 [ 57.569611][ T1732] do_syscall_64+0xb7/0x560 [ 57.574100][ T1732] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 57.580028][ T1732] RIP: 0033:0x4010c0 [ 57.584707][ T1732] Code: 01 f0 ff ff 0f 83 00 0b 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 83 3d cd 4c 2d 00 00 75 14 b8 02 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 d4 0a 00 00 c3 48 83 ec 08 e8 3a 00 00 00 [ 57.605214][ T1732] RSP: 002b:00007ffd69a61888 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 57.613834][ T1732] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000004010c0 [ 57.621990][ T1732] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007ffd69a61890 [ 57.630160][ T1732] RBP: 6666666666666667 R08: 000000000000000f R09: 000000000000000b [ 57.638172][ T1732] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000402020 [ 57.646306][ T1732] R13: 00000000004020b0 R14: 0000000000000000 R15: 0000000000000000 [ 57.654812][ T1732] Kernel Offset: disabled [ 57.659647][ T1732] Rebooting in 86400 seconds..