Warning: Permanently added '10.128.1.8' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 29.640754][ T22] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 30.040685][ T22] usb 1-1: unable to get BOS descriptor or descriptor too short [ 30.120686][ T22] usb 1-1: config 6 has an invalid interface number: 206 but max is 0 [ 30.128980][ T22] usb 1-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 30.137840][ T22] usb 1-1: config 6 has no interface number 0 [ 30.143974][ T22] usb 1-1: config 6 interface 206 altsetting 4 has an invalid endpoint with address 0x19, skipping [ 30.154874][ T22] usb 1-1: config 6 interface 206 altsetting 4 endpoint 0x8 has an invalid bInterval 31, changing to 7 [ 30.165931][ T22] usb 1-1: config 6 interface 206 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 30.176642][ T22] usb 1-1: config 6 interface 206 altsetting 4 bulk endpoint 0x6 has invalid maxpacket 8 [ 30.186600][ T22] usb 1-1: config 6 interface 206 altsetting 4 has an invalid endpoint descriptor of length 2, skipping [ 30.197746][ T22] usb 1-1: config 6 interface 206 altsetting 4 has 8 endpoint descriptors, different from the interface descriptor's value: 7 [ 30.210842][ T22] usb 1-1: config 6 interface 206 has no altsetting 0 [ 30.371158][ T22] usb 1-1: New USB device found, idVendor=0711, idProduct=0903, bcdDevice=4f.7d [ 30.380497][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.388818][ T22] usb 1-1: Product: syz [ 30.393020][ T22] usb 1-1: Manufacturer: syz [ 30.397714][ T22] usb 1-1: SerialNumber: syz [ 30.420924][ T1723] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 30.427850][ T1723] raw-gadget gadget: fail, usb_ep_enable returned -22 executing program [ 30.721896][ T22] usb 1-1: USB2VGA dongle found at address 2 [ 30.730945][ T22] usb 1-1: Allocated 8 output buffers [ 30.736391][ T22] ------------[ cut here ]------------ [ 30.741905][ T22] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 30.747929][ T22] WARNING: CPU: 1 PID: 22 at drivers/usb/core/urb.c:478 usb_submit_urb+0x1188/0x13b0 [ 30.757374][ T22] Kernel panic - not syncing: panic_on_warn set ... [ 30.763999][ T22] CPU: 1 PID: 22 Comm: kworker/1:1 Not tainted 5.5.0-rc2-syzkaller #0 [ 30.772230][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 30.782399][ T22] Workqueue: usb_hub_wq hub_event [ 30.787537][ T22] Call Trace: [ 30.790820][ T22] dump_stack+0xef/0x16e [ 30.795092][ T22] ? usb_submit_urb+0x1140/0x13b0 [ 30.800115][ T22] panic+0x2aa/0x6e1 [ 30.804004][ T22] ? add_taint.cold+0x16/0x16 [ 30.808679][ T22] ? __probe_kernel_read+0x188/0x1d0 [ 30.813962][ T22] ? __warn.cold+0x14/0x30 [ 30.818385][ T22] ? __warn+0xd5/0x1c8 [ 30.822455][ T22] ? usb_submit_urb+0x1188/0x13b0 [ 30.827529][ T22] __warn.cold+0x2f/0x30 [ 30.831767][ T22] ? usb_submit_urb+0x1188/0x13b0 [ 30.836820][ T22] report_bug+0x27b/0x2f0 [ 30.841141][ T22] do_error_trap+0x12b/0x1e0 [ 30.845722][ T22] ? usb_submit_urb+0x1188/0x13b0 [ 30.850830][ T22] do_invalid_op+0x32/0x40 [ 30.855265][ T22] ? usb_submit_urb+0x1188/0x13b0 [ 30.860347][ T22] invalid_op+0x23/0x30 [ 30.864539][ T22] RIP: 0010:usb_submit_urb+0x1188/0x13b0 [ 30.870169][ T22] Code: 4d 85 ed 74 2c e8 78 90 e7 fd 4c 89 f7 e8 70 2c 1d ff 41 89 d8 44 89 e1 4c 89 ea 48 89 c6 48 c7 c7 80 59 15 86 e8 20 ad bc fd <0f> 0b e9 20 f4 ff ff e8 4c 90 e7 fd 4c 89 f2 48 b8 00 00 00 00 00 [ 30.889769][ T22] RSP: 0018:ffff8881d8c36d70 EFLAGS: 00010286 [ 30.895826][ T22] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 30.903798][ T22] RDX: 0000000000000000 RSI: ffffffff81295dad RDI: ffffed103b186da0 [ 30.911759][ T22] RBP: ffff8881cf88c140 R08: ffff8881da24e200 R09: ffffed103b666210 [ 30.920170][ T22] R10: ffffed103b66620f R11: ffff8881db33107f R12: 0000000000000003 [ 30.928140][ T22] R13: ffff8881d19ea360 R14: ffff8881cf8eb0a0 R15: ffff8881d4c0bd00 [ 30.936231][ T22] ? vprintk_func+0x7d/0x113 [ 30.940822][ T22] sisusb_send_bulk_msg.constprop.0+0x8b4/0x1070 [ 30.947153][ T22] ? sisusb_recv_bulk_msg.constprop.0+0x830/0x830 [ 30.953580][ T22] ? wake_up_klogd+0x41/0x50 [ 30.958337][ T22] ? vprintk_emit+0x18c/0x3d0 [ 30.963019][ T22] sisusb_send_bridge_packet.constprop.0+0x11c/0x240 [ 30.969723][ T22] ? sisusb_send_bulk_msg.constprop.0+0x1070/0x1070 [ 30.976340][ T22] sisusb_do_init_gfxdevice+0x8a/0x450 [ 30.981871][ T22] ? sisusb_read_memio_word+0x2f0/0x2f0 [ 30.987428][ T22] ? dev_printk_emit+0xba/0xf1 [ 30.992206][ T22] ? dev_vprintk_emit+0x541/0x541 [ 30.997226][ T22] ? really_probe+0x281/0x6d0 [ 31.001978][ T22] sisusb_init_gfxdevice+0xe1/0x18d0 [ 31.007285][ T22] ? hub_event+0x1e59/0x3860 [ 31.012039][ T22] ? worker_thread+0x96/0xe20 [ 31.016752][ T22] ? kthread+0x318/0x420 [ 31.021106][ T22] ? __dev_printk+0x1db/0x203 [ 31.025773][ T22] ? sisusb_set_default_mode+0xa50/0xa50 [ 31.031425][ T22] ? _dev_info+0xd7/0x109 [ 31.035744][ T22] ? _dev_notice+0x109/0x109 [ 31.040325][ T22] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 31.045714][ T22] ? lockdep_init_map+0x1b0/0x5e0 [ 31.051086][ T22] ? kobject_get+0xbc/0x150 [ 31.055641][ T22] sisusb_probe+0x902/0xaf4 [ 31.060143][ T22] usb_probe_interface+0x305/0x7a0 [ 31.065311][ T22] ? usb_probe_device+0x100/0x100 [ 31.070428][ T22] really_probe+0x281/0x6d0 [ 31.074956][ T22] driver_probe_device+0x104/0x210 [ 31.080097][ T22] __device_attach_driver+0x1c2/0x220 [ 31.085465][ T22] ? driver_allows_async_probing+0x160/0x160 [ 31.091601][ T22] bus_for_each_drv+0x162/0x1e0 [ 31.096452][ T22] ? bus_rescan_devices+0x20/0x20 [ 31.101602][ T22] ? _raw_spin_unlock_irqrestore+0x39/0x40 [ 31.107535][ T22] ? lockdep_hardirqs_on+0x382/0x580 [ 31.112813][ T22] __device_attach+0x217/0x360 [ 31.117716][ T22] ? device_bind_driver+0xd0/0xd0 [ 31.122745][ T22] bus_probe_device+0x1e4/0x290 [ 31.127715][ T22] device_add+0x1480/0x1c20 [ 31.132229][ T22] ? wait_for_completion+0x3c0/0x3c0 [ 31.137713][ T22] ? device_links_flush_sync_list+0x350/0x350 [ 31.143904][ T22] usb_set_configuration+0xe67/0x1740 [ 31.149272][ T22] generic_probe+0x9d/0xd5 [ 31.153689][ T22] usb_probe_device+0x99/0x100 [ 31.158573][ T22] ? usb_suspend+0x620/0x620 [ 31.163151][ T22] really_probe+0x281/0x6d0 [ 31.167646][ T22] driver_probe_device+0x104/0x210 [ 31.172786][ T22] __device_attach_driver+0x1c2/0x220 [ 31.178152][ T22] ? driver_allows_async_probing+0x160/0x160 [ 31.184127][ T22] bus_for_each_drv+0x162/0x1e0 [ 31.188961][ T22] ? bus_rescan_devices+0x20/0x20 [ 31.193970][ T22] ? _raw_spin_unlock_irqrestore+0x39/0x40 [ 31.199762][ T22] ? lockdep_hardirqs_on+0x382/0x580 [ 31.205032][ T22] __device_attach+0x217/0x360 [ 31.209781][ T22] ? device_bind_driver+0xd0/0xd0 [ 31.214791][ T22] bus_probe_device+0x1e4/0x290 [ 31.219675][ T22] device_add+0x1480/0x1c20 [ 31.224164][ T22] ? device_links_flush_sync_list+0x350/0x350 [ 31.230229][ T22] usb_new_device.cold+0x6a4/0xe79 [ 31.235332][ T22] hub_event+0x1e59/0x3860 [ 31.239794][ T22] ? hub_port_debounce+0x260/0x260 [ 31.245095][ T22] ? find_held_lock+0x2d/0x110 [ 31.249853][ T22] ? mark_held_locks+0xe0/0xe0 [ 31.254607][ T22] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 31.260140][ T22] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 31.265414][ T22] process_one_work+0x92b/0x1530 [ 31.270341][ T22] ? pwq_dec_nr_in_flight+0x310/0x310 [ 31.275925][ T22] ? do_raw_spin_lock+0x11a/0x280 [ 31.281012][ T22] worker_thread+0x96/0xe20 [ 31.285505][ T22] ? process_one_work+0x1530/0x1530 [ 31.290690][ T22] kthread+0x318/0x420 [ 31.294750][ T22] ? kthread_create_on_node+0xf0/0xf0 [ 31.300111][ T22] ret_from_fork+0x24/0x30 [ 31.305509][ T22] Kernel Offset: disabled [ 31.309908][ T22] Rebooting in 86400 seconds..