Warning: Permanently added '[localhost]:15982' (ED25519) to the list of known hosts.
syzkaller login: [  292.531497][    T8] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  292.933837][    T8] usb 1-1: config 0 has an invalid interface number: 233 but max is 0
[  292.936140][    T8] usb 1-1: config 0 has no interface number 0
[  292.937858][    T8] usb 1-1: config 0 interface 233 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[  292.940245][    T8] usb 1-1: config 0 interface 233 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  293.144220][    T8] usb 1-1: New USB device found, idVendor=10cf, idProduct=5501, bcdDevice=a9.1f
[  293.146347][    T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  293.147962][    T8] usb 1-1: Product: syz
[  293.151695][    T8] usb 1-1: Manufacturer: syz
[  293.154722][    T8] usb 1-1: SerialNumber: syz
[  293.204570][    T8] usb 1-1: config 0 descriptor??
[  293.256357][ T2957] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  293.262177][ T2957] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  293.694736][    T8] ------------[ cut here ]------------
[  293.696456][    T8] usb 1-1: BOGUS urb xfer, pipe 1 != type 3
[  293.705152][    C0] WARNING: CPU: 0 PID: 8 at drivers/usb/core/urb.c:503 usb_submit_urb+0xa3c/0xeda
[  293.706351][    C0] Modules linked in:
[  293.706869][    C0] CPU: 0 PID: 8 Comm: kworker/0:0 Not tainted 6.6.0-rc1-syzkaller-00011-g3fec323339a4 #0
[  293.707339][    C0] Hardware name: riscv-virtio,qemu (DT)
[  293.707829][    C0] Workqueue: usb_hub_wq hub_event
[  293.708566][    C0] epc : usb_submit_urb+0xa3c/0xeda
[  293.709245][    C0]  ra : usb_submit_urb+0xa3c/0xeda
[  293.709991][    C0] epc : ffffffff81e19d22 ra : ffffffff81e19d22 sp : ff2000000004a9e0
[  293.710369][    C0]  gp : ffffffff861e0e60 tp : ff6000000b253300 t0 : 3a312d3120627375
[  293.710747][    C0]  t1 : 00000000000f0000 t2 : 203a312d31206273 s0 : ff2000000004aa90
[  293.711110][    C0]  s1 : ff60000011fab500 a0 : 0000000000000001 a1 : 00000000000f0000
[  293.711458][    C0]  a2 : ffffffff80077f88 a3 : 0000000000000002 a4 : 0000000000000000
[  293.711837][    C0]  a5 : 0000000000000000 a6 : 0000000000000003 a7 : 0000000000000000
[  293.712162][    C0]  s2 : ffffffff8438f468 s3 : 0000000000000001 s4 : ffffffff84397ae0
[  293.712522][    C0]  s5 : ff60000014b61000 s6 : ff600000112c0300 s7 : 0000000000000002
[  293.712890][    C0]  s8 : 00000000000003ff s9 : 00000000000003ff s10: ff60000013f90a50
[  293.713242][    C0]  s11: 0000000000000001 t3 : ffffffff80157b52 t4 : ffebffff0f9ab76a
[  293.713605][    C0]  t5 : ffebffff0f9ab76b t6 : ff2000000004a598
[  293.713972][    C0] status: 0000000200000120 badaddr: 0000000000000000 cause: 0000000000000003
[  293.714404][    C0] [<ffffffff81e19d22>] usb_submit_urb+0xa3c/0xeda
[  293.715237][    C0] [<ffffffff81e1a31e>] usb_start_wait_urb+0x104/0x310
[  293.715946][    C0] [<ffffffff81e1aeb8>] usb_bulk_msg+0x158/0x2ba
[  293.716602][    C0] [<ffffffff81e1b052>] usb_interrupt_msg+0x38/0x4c
[  293.717253][    C0] [<ffffffff82872a60>] vmk80xx_write_packet+0xf8/0x128
[  293.717761][    C0] [<ffffffff828746da>] vmk80xx_auto_attach+0xa02/0xa34
[  293.718254][    C0] [<ffffffff8285f2ee>] comedi_auto_config+0xf6/0x2ba
[  293.718869][    C0] [<ffffffff82852d60>] comedi_usb_auto_config+0x28/0x36
[  293.719408][    C0] [<ffffffff82872810>] vmk80xx_usb_probe+0x34/0x40
[  293.719920][    C0] [<ffffffff81e23ec4>] usb_probe_interface+0x208/0x552
[  293.720402][    C0] [<ffffffff81713a9e>] really_probe+0x1c8/0x7c6
[  293.721089][    C0] [<ffffffff817141da>] __driver_probe_device+0x13e/0x2ae
[  293.721815][    C0] [<ffffffff817143aa>] driver_probe_device+0x60/0x1a6
[  293.722470][    C0] [<ffffffff81714658>] __device_attach_driver+0x168/0x218
[  293.723170][    C0] [<ffffffff8170f9d8>] bus_for_each_drv+0x12c/0x1ae
[  293.723812][    C0] [<ffffffff81714ed4>] __device_attach+0x184/0x390
[  293.724476][    C0] [<ffffffff817153ea>] device_initial_probe+0x1c/0x26
[  293.725123][    C0] [<ffffffff81711a9c>] bus_probe_device+0x120/0x122
[  293.725741][    C0] [<ffffffff8170c5a0>] device_add+0xd84/0x10fa
[  293.726287][    C0] [<ffffffff81e1fef2>] usb_set_configuration+0xbe4/0x1056
[  293.726997][    C0] [<ffffffff81e3adb2>] usb_generic_driver_probe+0xb2/0x124
[  293.727734][    C0] [<ffffffff81e232d6>] usb_probe_device+0x9e/0x1fc
[  293.728180][    C0] [<ffffffff81713a9e>] really_probe+0x1c8/0x7c6
[  293.728883][    C0] [<ffffffff817141da>] __driver_probe_device+0x13e/0x2ae
[  293.729638][    C0] [<ffffffff817143aa>] driver_probe_device+0x60/0x1a6
[  293.730377][    C0] [<ffffffff81714658>] __device_attach_driver+0x168/0x218
[  293.731120][    C0] [<ffffffff8170f9d8>] bus_for_each_drv+0x12c/0x1ae
[  293.731819][    C0] [<ffffffff81714ed4>] __device_attach+0x184/0x390
[  293.732539][    C0] [<ffffffff817153ea>] device_initial_probe+0x1c/0x26
[  293.733304][    C0] [<ffffffff81711a9c>] bus_probe_device+0x120/0x122
[  293.734219][    C0] [<ffffffff8170c5a0>] device_add+0xd84/0x10fa
[  293.734890][    C0] [<ffffffff81e08782>] usb_new_device+0x5c8/0xd38
[  293.735514][    C0] [<ffffffff81e0d05c>] hub_event+0x2016/0x30aa
[  293.736067][    C0] [<ffffffff800c3d14>] process_one_work+0x54c/0xd66
[  293.736621][    C0] [<ffffffff800c4a34>] worker_thread+0x506/0x980
[  293.737156][    C0] [<ffffffff800daf3c>] kthread+0x1bc/0x22c
[  293.737610][    C0] [<ffffffff80005d76>] ret_from_fork+0xa/0x1c
[  293.738693][    C0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  293.739128][    C0] CPU: 0 PID: 8 Comm: kworker/0:0 Not tainted 6.6.0-rc1-syzkaller-00011-g3fec323339a4 #0
[  293.739702][    C0] Hardware name: riscv-virtio,qemu (DT)
[  293.739937][    C0] Workqueue: usb_hub_wq hub_event
[  293.740518][    C0] Call Trace:
[  293.740681][    C0] [<ffffffff8000b904>] dump_backtrace+0x2e/0x3c
[  293.741353][    C0] [<ffffffff836750b8>] show_stack+0x34/0x40
[  293.742133][    C0] [<ffffffff836b56c0>] dump_stack_lvl+0xe8/0x154
[  293.742713][    C0] [<ffffffff836b5748>] dump_stack+0x1c/0x24
[  293.743332][    C0] [<ffffffff83675b16>] panic+0x27c/0x646
[  293.744011][    C0] [<ffffffff800784ee>] check_panic_on_warn+0xc0/0xe4
[  293.744756][    C0] [<ffffffff80078950>] __warn+0x1e8/0x2a8
[  293.745354][    C0] [<ffffffff83618f0a>] report_bug+0x2c8/0x390
[  293.745807][    C0] [<ffffffff8000b1ae>] handle_break+0x13c/0x1ec
[  293.746387][    C0] [<ffffffff836b6a5c>] do_trap_break+0x48/0x5c
[  293.746859][    C0] [<ffffffff80005c30>] ret_from_exception+0x0/0x64
[  293.747392][    C0] [<ffffffff81e19d22>] usb_submit_urb+0xa3c/0xeda
[  293.748107][    C0] [<ffffffff81e1a31e>] usb_start_wait_urb+0x104/0x310
[  293.748845][    C0] [<ffffffff81e1aeb8>] usb_bulk_msg+0x158/0x2ba
[  293.749559][    C0] [<ffffffff81e1b052>] usb_interrupt_msg+0x38/0x4c
[  293.750215][    C0] [<ffffffff82872a60>] vmk80xx_write_packet+0xf8/0x128
[  293.750723][    C0] [<ffffffff828746da>] vmk80xx_auto_attach+0xa02/0xa34
[  293.751260][    C0] [<ffffffff8285f2ee>] comedi_auto_config+0xf6/0x2ba
[  293.751903][    C0] [<ffffffff82852d60>] comedi_usb_auto_config+0x28/0x36
[  293.752478][    C0] [<ffffffff82872810>] vmk80xx_usb_probe+0x34/0x40
[  293.752944][    C0] [<ffffffff81e23ec4>] usb_probe_interface+0x208/0x552
[  293.753417][    C0] [<ffffffff81713a9e>] really_probe+0x1c8/0x7c6
[  293.754325][    C0] [<ffffffff817141da>] __driver_probe_device+0x13e/0x2ae
[  293.755029][    C0] [<ffffffff817143aa>] driver_probe_device+0x60/0x1a6
[  293.755786][    C0] [<ffffffff81714658>] __device_attach_driver+0x168/0x218
[  293.756504][    C0] [<ffffffff8170f9d8>] bus_for_each_drv+0x12c/0x1ae
[  293.757122][    C0] [<ffffffff81714ed4>] __device_attach+0x184/0x390
[  293.757852][    C0] [<ffffffff817153ea>] device_initial_probe+0x1c/0x26
[  293.758553][    C0] [<ffffffff81711a9c>] bus_probe_device+0x120/0x122
[  293.759195][    C0] [<ffffffff8170c5a0>] device_add+0xd84/0x10fa
[  293.759814][    C0] [<ffffffff81e1fef2>] usb_set_configuration+0xbe4/0x1056
[  293.760581][    C0] [<ffffffff81e3adb2>] usb_generic_driver_probe+0xb2/0x124
[  293.761289][    C0] [<ffffffff81e232d6>] usb_probe_device+0x9e/0x1fc
[  293.761760][    C0] [<ffffffff81713a9e>] really_probe+0x1c8/0x7c6
[  293.762445][    C0] [<ffffffff817141da>] __driver_probe_device+0x13e/0x2ae
[  293.763183][    C0] [<ffffffff817143aa>] driver_probe_device+0x60/0x1a6
[  293.763952][    C0] [<ffffffff81714658>] __device_attach_driver+0x168/0x218
[  293.764705][    C0] [<ffffffff8170f9d8>] bus_for_each_drv+0x12c/0x1ae
[  293.765313][    C0] [<ffffffff81714ed4>] __device_attach+0x184/0x390
[  293.766010][    C0] [<ffffffff817153ea>] device_initial_probe+0x1c/0x26
[  293.766763][    C0] [<ffffffff81711a9c>] bus_probe_device+0x120/0x122
[  293.767400][    C0] [<ffffffff8170c5a0>] device_add+0xd84/0x10fa
[  293.768007][    C0] [<ffffffff81e08782>] usb_new_device+0x5c8/0xd38
[  293.768615][    C0] [<ffffffff81e0d05c>] hub_event+0x2016/0x30aa
[  293.769199][    C0] [<ffffffff800c3d14>] process_one_work+0x54c/0xd66
[  293.769799][    C0] [<ffffffff800c4a34>] worker_thread+0x506/0x980
[  293.770329][    C0] [<ffffffff800daf3c>] kthread+0x1bc/0x22c
[  293.770789][    C0] [<ffffffff80005d76>] ret_from_fork+0xa/0x1c
[  293.771684][    C0] SMP: stopping secondary CPUs

VM DIAGNOSIS:
12:21:31  Registers:
info registers vcpu 0

CPU#0
 V      =   0
 pc       ffffffff8000e766
 mhartid  0000000000000000
 mstatus  0000000a000001a0
 hstatus  0000000200000000
 vsstatus 0000000a00000000
 mip      0000000000000020
 mie      000000000000022a
 mideleg  0000000000001666
 hideleg  0000000000000000
 medeleg  0000000000f0b509
 hedeleg  0000000000000000
 mtvec    0000000080000408
 stvec    ffffffff80005b54
 vstvec   0000000000000000
 mepc     ffffffff836b7eb4
 sepc     ffffffff80122b66
 vsepc    0000000000000000
 mcause   8000000000000003
 scause   8000000000000001
 vscause  0000000000000000
 mtval    0000000000000000
 stval    0000000000000000
 htval    0000000000000000
 mtval2   0000000000000000
 mscratch 0000000080036000
 sscratch 0000000000000000
 satp     a01370000008ee70
 x0/zero  0000000000000000 x1/ra    ffffffff8000e762 x2/sp    ff2000000000be90 x3/gp    ffffffff861e0e60
 x4/tp    ff6000000ba74c80 x5/t0    0000000000046600 x6/t1    fffffffef0c41898 x7/t2    ffffffff83c05570
 x8/s0    ff2000000000beb0 x9/s1    ffffffff83c09388 x10/a0   0000000000000001 x11/a1   00000000000f0000
 x12/a2   ffffffff8000e762 x13/a3   0000000000000000 x14/a4   ff6000000ba74c80 x15/a5   0000000000000000
 x16/a6   fffffffef0c41899 x17/a7   0000000000000003 x18/s2   ffffffff83a48000 x19/s3   ff60000008e44500
 x20/s4   ff6000000ba74c80 x21/s5   ffffffff87f12ea8 x22/s6   0000000000000005 x23/s7   ffffffff83c41bc0
 x24/s8   ffffffff8000e644 x25/s9   0000000000000000 x26/s10  ff6000000ba74c80 x27/s11  0000000000000000
 x28/t3   ffffffff80157b52 x29/t4   fffffffef0c41898 x30/t5   fffffffef0c41899 x31/t6   0000000000040000
 f0/ft0   0000000000000000 f1/ft1   0000000000000000 f2/ft2   0000000000000000 f3/ft3   0000000000000000
 f4/ft4   0000000000000000 f5/ft5   0000000000000000 f6/ft6   0000000000000000 f7/ft7   0000000000000000
 f8/fs0   0000000000000000 f9/fs1   0000000000000000 f10/fa0  0000000000000000 f11/fa1  0000000000000000
 f12/fa2  0000000000000000 f13/fa3  0000000000000000 f14/fa4  0000000000000000 f15/fa5  0000000000000000
 f16/fa6  0000000000000000 f17/fa7  0000000000000000 f18/fs2  0000000000000000 f19/fs3  0000000000000000
 f20/fs4  0000000000000000 f21/fs5  0000000000000000 f22/fs6  0000000000000000 f23/fs7  0000000000000000
 f24/fs8  0000000000000000 f25/fs9  0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000
 f28/ft8  0000000000000000 f29/ft9  0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000
info registers vcpu 1

CPU#1
 V      =   0
 pc       ffffffff8057a32a
 mhartid  0000000000000001
 mstatus  0000000a000001a0
 hstatus  0000000200000000
 vsstatus 0000000a00000000
 mip      0000000000000022
 mie      000000000000022a
 mideleg  0000000000001666
 hideleg  0000000000000000
 medeleg  0000000000f0b509
 hedeleg  0000000000000000
 mtvec    0000000080000408
 stvec    ffffffff80005b54
 vstvec   0000000000000000
 mepc     ffffffff80011ae0
 sepc     ffffffff81e19d22
 vsepc    0000000000000000
 mcause   0000000000000009
 scause   0000000000000003
 vscause  0000000000000000
 mtval    0000000000000000
 stval    0000000000000000
 htval    0000000000000000
 mtval2   0000000000000000
 mscratch 0000000080034000
 sscratch 0000000000000000
 satp     a01370000008ee70
 x0/zero  0000000000000000 x1/ra    ffffffff81067860 x2/sp    ff2000000004a1d0 x3/gp    ffffffff861e0e60
 x4/tp    ff6000000b253300 x5/t0    4900000000000000 x6/t1    00000000000f0000 x7/t2    49502030203a5550
 x8/s0    ff2000000004a200 x9/s1    ffffffff880b9200 x10/a0   ff6000000b253320 x11/a1   0000000000000007
 x12/a2   1ffffffff1017249 x13/a3   ffffffff8106784a x14/a4   0000000000000000 x15/a5   ff20000000095000
 x16/a6   0000000000000000 x17/a7   0000000000010000 x18/s2   ff6000000b253300 x19/s3   0000000000000050
 x20/s4   ffffffff880b9200 x21/s5   ffffffff8106780a x22/s6   0000000000000000 x23/s7   ffffffff87ec49ee
 x24/s8   ffffffff880b9258 x25/s9   0000000000000010 x26/s10  0000000000000010 x27/s11  0000000000000001
 x28/t3   ffffffff80157b52 x29/t4   ffe3ffff0000942c x30/t5   ffe3ffff0000942d x31/t6   ffffffff87ec4997
 f0/ft0   0000000000000000 f1/ft1   0000000000000000 f2/ft2   0000000000000000 f3/ft3   0000000000000000
 f4/ft4   0000000000000000 f5/ft5   0000000000000000 f6/ft6   0000000000000000 f7/ft7   0000000000000000
 f8/fs0   0000000000000000 f9/fs1   0000000000000000 f10/fa0  0000000000000000 f11/fa1  0000000000000000
 f12/fa2  0000000000000000 f13/fa3  0000000000000000 f14/fa4  0000000000000000 f15/fa5  0000000000000000
 f16/fa6  0000000000000000 f17/fa7  0000000000000000 f18/fs2  0000000000000000 f19/fs3  0000000000000000
 f20/fs4  0000000000000000 f21/fs5  0000000000000000 f22/fs6  0000000000000000 f23/fs7  0000000000000000
 f24/fs8  0000000000000000 f25/fs9  0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000
 f28/ft8  0000000000000000 f29/ft9  0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000