Warning: Permanently added '10.128.0.123' (ECDSA) to the list of known hosts. syzkaller login: [ 23.138821][ T22] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 23.378813][ T22] usb 1-1: Using ep0 maxpacket: 16 [ 23.498858][ T22] usb 1-1: config 0 has an invalid interface number: 7 but max is 0 [ 23.506940][ T22] usb 1-1: config 0 has no interface number 0 [ 23.513066][ T22] usb 1-1: config 0 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 23.524108][ T22] usb 1-1: config 0 interface 7 altsetting 0 bulk endpoint 0xF has invalid maxpacket 197 [ 23.608882][ T22] usb 1-1: New USB device found, idVendor=0bc7, idProduct=0003, bcdDevice=2f.f7 [ 23.618081][ T22] usb 1-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 23.626369][ T22] usb 1-1: Product: syz [ 23.631752][ T22] usb 1-1: config 0 descriptor?? [ 23.648959][ T1723] raw: raw_ioctl_ep_enable: fail, usb_ep_enable returned -22 [ 23.670244][ T22] ------------[ cut here ]------------ [ 23.675754][ T22] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 23.681811][ T22] WARNING: CPU: 1 PID: 22 at drivers/usb/core/urb.c:477 usb_submit_urb+0x1188/0x13b0 [ 23.691380][ T22] Kernel panic - not syncing: panic_on_warn set ... [ 23.697947][ T22] CPU: 1 PID: 22 Comm: kworker/1:1 Not tainted 5.4.0-syzkaller #0 [ 23.705729][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 23.715768][ T22] Workqueue: usb_hub_wq hub_event [ 23.720763][ T22] Call Trace: [ 23.724031][ T22] dump_stack+0xef/0x16e [ 23.728249][ T22] ? usb_submit_urb+0x1110/0x13b0 [ 23.733250][ T22] panic+0x2aa/0x6e1 [ 23.737123][ T22] ? add_taint.cold+0x16/0x16 [ 23.741778][ T22] ? __probe_kernel_read+0x188/0x1d0 [ 23.747057][ T22] ? __warn.cold+0x14/0x30 [ 23.751447][ T22] ? __warn+0xd5/0x1c8 [ 23.755488][ T22] ? usb_submit_urb+0x1188/0x13b0 [ 23.760493][ T22] __warn.cold+0x2f/0x30 [ 23.764710][ T22] ? usb_submit_urb+0x1188/0x13b0 [ 23.769716][ T22] report_bug+0x27b/0x2f0 [ 23.774024][ T22] do_error_trap+0x12b/0x1e0 [ 23.778589][ T22] ? usb_submit_urb+0x1188/0x13b0 [ 23.783597][ T22] do_invalid_op+0x32/0x40 [ 23.788000][ T22] ? usb_submit_urb+0x1188/0x13b0 [ 23.792997][ T22] invalid_op+0x23/0x30 [ 23.797130][ T22] RIP: 0010:usb_submit_urb+0x1188/0x13b0 [ 23.802911][ T22] Code: 4d 85 ed 74 2c e8 a8 84 e9 fd 4c 89 f7 e8 20 74 1d ff 41 89 d8 44 89 e1 4c 89 ea 48 89 c6 48 c7 c7 00 29 15 86 e8 10 b3 be fd <0f> 0b e9 20 f4 ff ff e8 7c 84 e9 fd 4c 89 f2 48 b8 00 00 00 00 00 [ 23.822490][ T22] RSP: 0018:ffff8881d902f0d8 EFLAGS: 00010286 [ 23.828615][ T22] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 23.836564][ T22] RDX: 0000000000000000 RSI: ffffffff8128ebcd RDI: ffffed103b205e0d [ 23.844538][ T22] RBP: ffff8881d5ecf050 R08: ffff8881da64e200 R09: fffffbfff11aeca6 [ 23.852491][ T22] R10: fffffbfff11aeca5 R11: ffffffff88d7652f R12: 0000000000000001 [ 23.860434][ T22] R13: ffff8881d660ab58 R14: ffff8881c650f0a0 R15: ffff8881d574f900 [ 23.868402][ T22] ? vprintk_func+0x7d/0x113 [ 23.872975][ T22] ? usb_submit_urb+0x1188/0x13b0 [ 23.877979][ T22] ati_remote_sendpacket+0x1ee/0x540 [ 23.883243][ T22] ? snprintf+0xbb/0xf0 [ 23.887379][ T22] ? ati_remote_irq_out+0xe0/0xe0 [ 23.892382][ T22] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 23.898215][ T22] ? lockdep_init_map+0x1b0/0x5e0 [ 23.903215][ T22] ? lockdep_init_map+0x1b0/0x5e0 [ 23.908215][ T22] ati_remote_probe+0x1254/0x1ffd [ 23.913217][ T22] usb_probe_interface+0x305/0x7a0 [ 23.918315][ T22] ? usb_probe_device+0x100/0x100 [ 23.923405][ T22] really_probe+0x281/0x6d0 [ 23.927886][ T22] driver_probe_device+0x104/0x210 [ 23.932975][ T22] __device_attach_driver+0x1c2/0x220 [ 23.938333][ T22] ? driver_allows_async_probing+0x160/0x160 [ 23.944291][ T22] bus_for_each_drv+0x162/0x1e0 [ 23.949119][ T22] ? bus_rescan_devices+0x20/0x20 [ 23.954125][ T22] ? _raw_spin_unlock_irqrestore+0x39/0x40 [ 23.959906][ T22] ? lockdep_hardirqs_on+0x382/0x580 [ 23.965256][ T22] __device_attach+0x217/0x360 [ 23.971040][ T22] ? device_bind_driver+0xd0/0xd0 [ 23.976049][ T22] bus_probe_device+0x1e4/0x290 [ 23.980879][ T22] device_add+0x1480/0x1c20 [ 23.985370][ T22] ? wait_for_completion+0x3c0/0x3c0 [ 23.990636][ T22] ? device_links_flush_sync_list+0x350/0x350 [ 23.996689][ T22] ? _raw_spin_unlock_irqrestore+0x39/0x40 [ 24.002496][ T22] usb_set_configuration+0xe67/0x1740 [ 24.007952][ T22] generic_probe+0x9d/0xd5 [ 24.012354][ T22] usb_probe_device+0x99/0x100 [ 24.017119][ T22] ? usb_suspend+0x620/0x620 [ 24.021694][ T22] really_probe+0x281/0x6d0 [ 24.026180][ T22] driver_probe_device+0x104/0x210 [ 24.031276][ T22] __device_attach_driver+0x1c2/0x220 [ 24.036661][ T22] ? driver_allows_async_probing+0x160/0x160 [ 24.042622][ T22] bus_for_each_drv+0x162/0x1e0 [ 24.047453][ T22] ? bus_rescan_devices+0x20/0x20 [ 24.053502][ T22] ? _raw_spin_unlock_irqrestore+0x39/0x40 [ 24.059303][ T22] ? lockdep_hardirqs_on+0x382/0x580 [ 24.064590][ T22] __device_attach+0x217/0x360 [ 24.069344][ T22] ? device_bind_driver+0xd0/0xd0 [ 24.074367][ T22] bus_probe_device+0x1e4/0x290 [ 24.079202][ T22] device_add+0x1480/0x1c20 [ 24.083688][ T22] ? device_links_flush_sync_list+0x350/0x350 [ 24.089745][ T22] usb_new_device.cold+0x6a4/0xe79 [ 24.094840][ T22] hub_event+0x1e59/0x3860 [ 24.099236][ T22] ? hub_port_debounce+0x260/0x260 [ 24.104332][ T22] ? find_held_lock+0x2d/0x110 [ 24.109089][ T22] ? mark_held_locks+0xe0/0xe0 [ 24.113832][ T22] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 24.119353][ T22] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 24.124619][ T22] process_one_work+0x92b/0x1530 [ 24.129540][ T22] ? pwq_dec_nr_in_flight+0x310/0x310 [ 24.134892][ T22] ? do_raw_spin_lock+0x11a/0x280 [ 24.139898][ T22] worker_thread+0x96/0xe20 [ 24.144395][ T22] ? process_one_work+0x1530/0x1530 [ 24.149613][ T22] kthread+0x318/0x420 [ 24.153892][ T22] ? kthread_create_on_node+0xf0/0xf0 [ 24.159452][ T22] ret_from_fork+0x24/0x30 [ 24.164763][ T22] Kernel Offset: disabled [ 24.169120][ T22] Rebooting in 86400 seconds..