Warning: Permanently added '10.128.0.167' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 143.768913][ T83] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 144.008051][ T83] usb 1-1: Using ep0 maxpacket: 8 [ 144.128170][ T83] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has wMaxPacketSize 0, skipping [ 144.138263][ T83] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 144.228148][ T83] usb 1-1: New USB device found, idVendor=2040, idProduct=200a, bcdDevice=8a.69 [ 144.238188][ T83] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=2 [ 144.246294][ T83] usb 1-1: SerialNumber: syz [ 144.252327][ T83] usb 1-1: config 0 descriptor?? [ 144.289898][ T83] smsusb:smsusb_probe: board id=9, interface number 0 [ 144.329456][ T83] smsusb:siano_media_device_register: media controller created [ 144.337856][ T83] ------------[ cut here ]------------ [ 144.343481][ T83] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 144.349809][ T83] WARNING: CPU: 1 PID: 83 at drivers/usb/core/urb.c:477 usb_submit_urb+0x1188/0x13b0 [ 144.359395][ T83] Kernel panic - not syncing: panic_on_warn set ... [ 144.366086][ T83] CPU: 1 PID: 83 Comm: kworker/1:2 Not tainted 5.5.0-rc1-syzkaller #0 [ 144.374307][ T83] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 144.384351][ T83] Workqueue: usb_hub_wq hub_event [ 144.389367][ T83] Call Trace: [ 144.392641][ T83] dump_stack+0xef/0x16e [ 144.396874][ T83] ? usb_submit_urb+0x1170/0x13b0 [ 144.401875][ T83] panic+0x2aa/0x6e1 [ 144.405744][ T83] ? add_taint.cold+0x16/0x16 [ 144.410400][ T83] ? __probe_kernel_read+0x188/0x1d0 [ 144.415661][ T83] ? __warn.cold+0x14/0x30 [ 144.420064][ T83] ? __warn+0xd5/0x1c8 [ 144.424110][ T83] ? usb_submit_urb+0x1188/0x13b0 [ 144.429138][ T83] __warn.cold+0x2f/0x30 [ 144.433370][ T83] ? usb_submit_urb+0x1188/0x13b0 [ 144.438379][ T83] report_bug+0x27b/0x2f0 [ 144.442710][ T83] do_error_trap+0x12b/0x1e0 [ 144.447299][ T83] ? usb_submit_urb+0x1188/0x13b0 [ 144.452446][ T83] do_invalid_op+0x32/0x40 [ 144.456856][ T83] ? usb_submit_urb+0x1188/0x13b0 [ 144.461882][ T83] invalid_op+0x23/0x30 [ 144.466193][ T83] RIP: 0010:usb_submit_urb+0x1188/0x13b0 [ 144.471802][ T83] Code: 4d 85 ed 74 2c e8 d8 8f e7 fd 4c 89 f7 e8 e0 2c 1d ff 41 89 d8 44 89 e1 4c 89 ea 48 89 c6 48 c7 c7 40 5a 15 86 e8 50 ac bc fd <0f> 0b e9 20 f4 ff ff e8 ac 8f e7 fd 4c 89 f2 48 b8 00 00 00 00 00 [ 144.492319][ T83] RSP: 0018:ffff8881d8aeefb0 EFLAGS: 00010286 [ 144.498388][ T83] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 144.506363][ T83] RDX: 0000000000000000 RSI: ffffffff81295dad RDI: ffffed103b15dde8 [ 144.514335][ T83] RBP: ffff8881d483cd50 R08: ffff8881d8953100 R09: ffffed103b666218 [ 144.522537][ T83] R10: ffffed103b666217 R11: ffff8881db3310bf R12: 0000000000000003 [ 144.530494][ T83] R13: ffff8881cec2ba68 R14: ffff8881cf9060a0 R15: ffff8881d0f40030 [ 144.538561][ T83] ? vprintk_func+0x7d/0x113 [ 144.543136][ T83] smsusb_submit_urb+0x26d/0x390 [ 144.548175][ T83] smsusb_start_streaming+0x1f/0x87 [ 144.553370][ T83] smsusb_init_device+0x8aa/0x9d5 [ 144.558382][ T83] ? smsusb1_detectmode.cold+0x24/0x24 [ 144.563823][ T83] ? smsusb_disconnect+0x20/0x20 [ 144.568764][ T83] ? usb_hcd_reset_endpoint+0x196/0x250 [ 144.574730][ T83] smsusb_probe+0x986/0xa24 [ 144.579222][ T83] ? smsusb_init_device+0x9d5/0x9d5 [ 144.584399][ T83] ? __pm_runtime_set_status+0x5d5/0xa10 [ 144.590354][ T83] ? rpm_callback+0x230/0x230 [ 144.595007][ T83] ? lockdep_hardirqs_on+0x382/0x580 [ 144.600266][ T83] ? __pm_runtime_resume+0x111/0x180 [ 144.605530][ T83] usb_probe_interface+0x305/0x7a0 [ 144.610619][ T83] ? usb_probe_device+0x100/0x100 [ 144.615700][ T83] really_probe+0x281/0x6d0 [ 144.620243][ T83] driver_probe_device+0x104/0x210 [ 144.625335][ T83] __device_attach_driver+0x1c2/0x220 [ 144.630868][ T83] ? driver_allows_async_probing+0x160/0x160 [ 144.636846][ T83] bus_for_each_drv+0x162/0x1e0 [ 144.641683][ T83] ? bus_rescan_devices+0x20/0x20 [ 144.646713][ T83] ? _raw_spin_unlock_irqrestore+0x39/0x40 [ 144.652521][ T83] ? lockdep_hardirqs_on+0x382/0x580 [ 144.657867][ T83] __device_attach+0x217/0x360 [ 144.662616][ T83] ? device_bind_driver+0xd0/0xd0 [ 144.667628][ T83] bus_probe_device+0x1e4/0x290 [ 144.672822][ T83] device_add+0x1480/0x1c20 [ 144.677434][ T83] ? wait_for_completion+0x3c0/0x3c0 [ 144.682718][ T83] ? device_links_flush_sync_list+0x350/0x350 [ 144.688784][ T83] ? _raw_spin_unlock_irqrestore+0x39/0x40 [ 144.694592][ T83] usb_set_configuration+0xe67/0x1740 [ 144.699952][ T83] generic_probe+0x9d/0xd5 [ 144.704369][ T83] usb_probe_device+0x99/0x100 [ 144.709122][ T83] ? usb_suspend+0x620/0x620 [ 144.713690][ T83] really_probe+0x281/0x6d0 [ 144.718171][ T83] driver_probe_device+0x104/0x210 [ 144.723967][ T83] __device_attach_driver+0x1c2/0x220 [ 144.729320][ T83] ? driver_allows_async_probing+0x160/0x160 [ 144.735370][ T83] bus_for_each_drv+0x162/0x1e0 [ 144.740208][ T83] ? bus_rescan_devices+0x20/0x20 [ 144.745209][ T83] ? _raw_spin_unlock_irqrestore+0x39/0x40 [ 144.750995][ T83] ? lockdep_hardirqs_on+0x382/0x580 [ 144.756276][ T83] __device_attach+0x217/0x360 [ 144.761019][ T83] ? device_bind_driver+0xd0/0xd0 [ 144.766021][ T83] bus_probe_device+0x1e4/0x290 [ 144.770850][ T83] device_add+0x1480/0x1c20 [ 144.775331][ T83] ? device_links_flush_sync_list+0x350/0x350 [ 144.781385][ T83] usb_new_device.cold+0x6a4/0xe79 [ 144.786489][ T83] hub_event+0x1e59/0x3860 [ 144.790888][ T83] ? hub_port_debounce+0x260/0x260 [ 144.795987][ T83] ? find_held_lock+0x2d/0x110 [ 144.800729][ T83] ? mark_held_locks+0xe0/0xe0 [ 144.805470][ T83] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 144.810991][ T83] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 144.816271][ T83] process_one_work+0x92b/0x1530 [ 144.821200][ T83] ? pwq_dec_nr_in_flight+0x310/0x310 [ 144.826659][ T83] ? do_raw_spin_lock+0x11a/0x280 [ 144.831664][ T83] worker_thread+0x96/0xe20 [ 144.836148][ T83] ? process_one_work+0x1530/0x1530 [ 144.841324][ T83] kthread+0x318/0x420 [ 144.845368][ T83] ? kthread_create_on_node+0xf0/0xf0 [ 144.850725][ T83] ret_from_fork+0x24/0x30 [ 144.855917][ T83] Kernel Offset: disabled [ 144.860328][ T83] Rebooting in 86400 seconds..