Warning: Permanently added '10.128.0.208' (ECDSA) to the list of known hosts. syzkaller login: [ 28.456228][ T12] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 28.695770][ T12] usb 1-1: Using ep0 maxpacket: 32 [ 28.815897][ T12] usb 1-1: config 0 has an invalid interface number: 116 but max is 0 [ 28.824316][ T12] usb 1-1: config 0 has no interface number 0 [ 28.830645][ T12] usb 1-1: config 0 interface 116 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 817 [ 28.840690][ T12] usb 1-1: config 0 interface 116 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 28.851323][ T12] usb 1-1: config 0 interface 116 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 777 [ 28.861427][ T12] usb 1-1: config 0 interface 116 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 29.025877][ T12] usb 1-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=7e.3f [ 29.035072][ T12] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.043142][ T12] usb 1-1: Product: syz [ 29.047338][ T12] usb 1-1: Manufacturer: syz [ 29.051922][ T12] usb 1-1: SerialNumber: syz [ 29.058275][ T12] usb 1-1: config 0 descriptor?? [ 29.075979][ T1718] raw: raw_ioctl_ep_enable: fail, usb_ep_enable returned -22 [ 29.083460][ T1718] raw: raw_ioctl_ep_enable: fail, usb_ep_enable returned -22 [ 29.098877][ T12] ------------[ cut here ]------------ [ 29.104555][ T12] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 29.110765][ T12] WARNING: CPU: 0 PID: 12 at drivers/usb/core/urb.c:477 usb_submit_urb+0x1188/0x13b0 [ 29.120218][ T12] Kernel panic - not syncing: panic_on_warn set ... [ 29.126789][ T12] CPU: 0 PID: 12 Comm: kworker/0:1 Not tainted 5.5.0-rc1-syzkaller #0 [ 29.134931][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 29.144990][ T12] Workqueue: usb_hub_wq hub_event [ 29.149991][ T12] Call Trace: [ 29.153288][ T12] dump_stack+0xef/0x16e [ 29.157508][ T12] ? usb_submit_urb+0x1170/0x13b0 [ 29.162526][ T12] panic+0x2aa/0x6e1 [ 29.166419][ T12] ? add_taint.cold+0x16/0x16 [ 29.171087][ T12] ? __probe_kernel_read+0x188/0x1d0 [ 29.176455][ T12] ? __warn.cold+0x14/0x30 [ 29.180871][ T12] ? __warn+0xd5/0x1c8 [ 29.185070][ T12] ? usb_submit_urb+0x1188/0x13b0 [ 29.190088][ T12] __warn.cold+0x2f/0x30 [ 29.194480][ T12] ? usb_submit_urb+0x1188/0x13b0 [ 29.199512][ T12] report_bug+0x27b/0x2f0 [ 29.203857][ T12] do_error_trap+0x12b/0x1e0 [ 29.208462][ T12] ? usb_submit_urb+0x1188/0x13b0 [ 29.213469][ T12] do_invalid_op+0x32/0x40 [ 29.217863][ T12] ? usb_submit_urb+0x1188/0x13b0 [ 29.222947][ T12] invalid_op+0x23/0x30 [ 29.227107][ T12] RIP: 0010:usb_submit_urb+0x1188/0x13b0 [ 29.232727][ T12] Code: 4d 85 ed 74 2c e8 d8 8f e7 fd 4c 89 f7 e8 e0 2c 1d ff 41 89 d8 44 89 e1 4c 89 ea 48 89 c6 48 c7 c7 40 5a 15 86 e8 50 ac bc fd <0f> 0b e9 20 f4 ff ff e8 ac 8f e7 fd 4c 89 f2 48 b8 00 00 00 00 00 [ 29.252310][ T12] RSP: 0018:ffff8881da227048 EFLAGS: 00010286 [ 29.258392][ T12] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 29.266343][ T12] RDX: 0000000000000000 RSI: ffffffff81295dad RDI: ffffed103b444dfb [ 29.274303][ T12] RBP: ffff8881d4920b00 R08: ffff8881da211880 R09: fffffbfff11f1ebd [ 29.282251][ T12] R10: fffffbfff11f1ebc R11: ffffffff88f8f5e7 R12: 0000000000000001 [ 29.290212][ T12] R13: ffff8881d4ead6f0 R14: ffff8881cf5600a0 R15: ffff8881d4920500 [ 29.298272][ T12] ? vprintk_func+0x7d/0x113 [ 29.302868][ T12] ? usb_submit_urb+0x1188/0x13b0 [ 29.307874][ T12] usb_start_wait_urb+0x108/0x2b0 [ 29.312890][ T12] ? sg_clean+0x230/0x230 [ 29.317203][ T12] ? kasan_unpoison_shadow+0x30/0x40 [ 29.322471][ T12] ? memset+0x20/0x40 [ 29.326437][ T12] usb_bulk_msg+0x228/0x550 [ 29.330937][ T12] vmk80xx_write_packet+0x1df/0x260 [ 29.336118][ T12] vmk80xx_auto_attach+0x13b1/0x17c0 [ 29.341400][ T12] comedi_auto_config+0x16e/0x250 [ 29.346422][ T12] usb_probe_interface+0x305/0x7a0 [ 29.351516][ T12] ? usb_probe_device+0x100/0x100 [ 29.356536][ T12] really_probe+0x281/0x6d0 [ 29.361022][ T12] driver_probe_device+0x104/0x210 [ 29.366118][ T12] __device_attach_driver+0x1c2/0x220 [ 29.371586][ T12] ? driver_allows_async_probing+0x160/0x160 [ 29.377573][ T12] bus_for_each_drv+0x162/0x1e0 [ 29.382430][ T12] ? bus_rescan_devices+0x20/0x20 [ 29.387480][ T12] ? _raw_spin_unlock_irqrestore+0x39/0x40 [ 29.393279][ T12] ? lockdep_hardirqs_on+0x382/0x580 [ 29.398680][ T12] __device_attach+0x217/0x360 [ 29.403444][ T12] ? device_bind_driver+0xd0/0xd0 [ 29.408475][ T12] bus_probe_device+0x1e4/0x290 [ 29.413307][ T12] device_add+0x1480/0x1c20 [ 29.417810][ T12] ? wait_for_completion+0x3c0/0x3c0 [ 29.423075][ T12] ? device_links_flush_sync_list+0x350/0x350 [ 29.429213][ T12] ? _raw_spin_unlock_irqrestore+0x39/0x40 [ 29.435034][ T12] usb_set_configuration+0xe67/0x1740 [ 29.440418][ T12] generic_probe+0x9d/0xd5 [ 29.444840][ T12] usb_probe_device+0x99/0x100 [ 29.449611][ T12] ? usb_suspend+0x620/0x620 [ 29.454197][ T12] really_probe+0x281/0x6d0 [ 29.458719][ T12] driver_probe_device+0x104/0x210 [ 29.463859][ T12] __device_attach_driver+0x1c2/0x220 [ 29.469486][ T12] ? driver_allows_async_probing+0x160/0x160 [ 29.475467][ T12] bus_for_each_drv+0x162/0x1e0 [ 29.480302][ T12] ? bus_rescan_devices+0x20/0x20 [ 29.485319][ T12] ? _raw_spin_unlock_irqrestore+0x39/0x40 [ 29.491108][ T12] ? lockdep_hardirqs_on+0x382/0x580 [ 29.496373][ T12] __device_attach+0x217/0x360 [ 29.501129][ T12] ? device_bind_driver+0xd0/0xd0 [ 29.506135][ T12] bus_probe_device+0x1e4/0x290 [ 29.510978][ T12] device_add+0x1480/0x1c20 [ 29.515472][ T12] ? device_links_flush_sync_list+0x350/0x350 [ 29.521530][ T12] usb_new_device.cold+0x6a4/0xe79 [ 29.526662][ T12] hub_event+0x1e59/0x3860 [ 29.531085][ T12] ? hub_port_debounce+0x260/0x260 [ 29.536201][ T12] ? find_held_lock+0x2d/0x110 [ 29.540969][ T12] ? mark_held_locks+0xe0/0xe0 [ 29.545730][ T12] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 29.551269][ T12] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 29.556635][ T12] process_one_work+0x92b/0x1530 [ 29.561564][ T12] ? pwq_dec_nr_in_flight+0x310/0x310 [ 29.566934][ T12] ? do_raw_spin_lock+0x11a/0x280 [ 29.571984][ T12] worker_thread+0x96/0xe20 [ 29.576482][ T12] ? process_one_work+0x1530/0x1530 [ 29.581720][ T12] kthread+0x318/0x420 [ 29.585796][ T12] ? kthread_create_on_node+0xf0/0xf0 [ 29.591155][ T12] ret_from_fork+0x24/0x30 [ 29.596162][ T12] Kernel Offset: disabled [ 29.600520][ T12] Rebooting in 86400 seconds..