Warning: Permanently added '10.128.0.110' (ECDSA) to the list of known hosts.
executing program
[ 26.470581][ T25] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[ 26.883278][ T25] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 26.940733][ T25] usb 1-1: not running at top speed; connect to a high speed hub
[ 27.020539][ T25] usb 1-1: config 6 has an invalid interface number: 155 but max is 3
[ 27.020568][ T25] usb 1-1: config 6 has an invalid interface association descriptor of length 2, skipping
[ 27.020589][ T25] usb 1-1: config 6 has an invalid interface number: 73 but max is 3
[ 27.020613][ T25] usb 1-1: config 6 contains an unexpected descriptor of type 0x1, skipping
[ 27.020631][ T25] usb 1-1: config 6 has an invalid interface number: 66 but max is 3
[ 27.020651][ T25] usb 1-1: config 6 has an invalid interface association descriptor of length 2, skipping
[ 27.020667][ T25] usb 1-1: config 6 has an invalid interface number: 196 but max is 3
[ 27.020687][ T25] usb 1-1: config 6 has no interface number 0
[ 27.020703][ T25] usb 1-1: config 6 has no interface number 1
[ 27.020719][ T25] usb 1-1: config 6 has no interface number 2
[ 27.020743][ T25] usb 1-1: config 6 has no interface number 3
[ 27.020791][ T25] usb 1-1: config 6 interface 155 altsetting 3 endpoint 0x86 has invalid wMaxPacketSize 0
[ 27.020806][ T25] usb 1-1: config 6 interface 155 altsetting 3 endpoint 0x6 has invalid maxpacket 512, setting to 64
[ 27.020823][ T25] usb 1-1: config 6 interface 155 altsetting 3 endpoint 0xE has invalid maxpacket 512, setting to 64
[ 27.020840][ T25] usb 1-1: config 6 interface 155 altsetting 3 has a duplicate endpoint with address 0x6, skipping
[ 27.020853][ T25] usb 1-1: config 6 interface 155 altsetting 3 has a duplicate endpoint with address 0x6, skipping
[ 27.020867][ T25] usb 1-1: config 6 interface 155 altsetting 3 endpoint 0x9 has invalid maxpacket 23595, setting to 64
[ 27.020884][ T25] usb 1-1: config 6 interface 155 altsetting 3 has a duplicate endpoint with address 0xE, skipping
[ 27.020898][ T25] usb 1-1: config 6 interface 155 altsetting 3 endpoint 0x3 has invalid maxpacket 1023, setting to 64
[ 27.020919][ T25] usb 1-1: config 6 interface 73 altsetting 1 has an invalid endpoint with address 0x80, skipping
[ 27.020933][ T25] usb 1-1: config 6 interface 73 altsetting 1 endpoint 0xB has invalid maxpacket 1023, setting to 64
[ 27.020949][ T25] usb 1-1: config 6 interface 73 altsetting 1 has an invalid endpoint with address 0x0, skipping
[ 27.020963][ T25] usb 1-1: config 6 interface 73 altsetting 1 endpoint 0xC has invalid wMaxPacketSize 0
[ 27.020977][ T25] usb 1-1: config 6 interface 73 altsetting 1 endpoint 0xA has invalid maxpacket 1024, setting to 64
[ 27.020994][ T25] usb 1-1: config 6 interface 73 altsetting 1 has a duplicate endpoint with address 0x6, skipping
[ 27.021007][ T25] usb 1-1: config 6 interface 73 altsetting 1 has a duplicate endpoint with address 0xE, skipping
[ 27.021021][ T25] usb 1-1: config 6 interface 73 altsetting 1 has an invalid endpoint with address 0x80, skipping
[ 27.021035][ T25] usb 1-1: config 6 interface 73 altsetting 1 endpoint 0x4 has invalid maxpacket 1023, setting to 64
[ 27.021052][ T25] usb 1-1: config 6 interface 73 altsetting 1 has a duplicate endpoint with address 0x6, skipping
[ 27.021069][ T25] usb 1-1: config 6 interface 66 altsetting 32 has a duplicate endpoint with address 0xA, skipping
[ 27.021083][ T25] usb 1-1: config 6 interface 66 altsetting 32 has a duplicate endpoint with address 0xB, skipping
[ 27.021097][ T25] usb 1-1: config 6 interface 66 altsetting 32 endpoint 0x7 has invalid maxpacket 1024, setting to 64
[ 27.021097][ T25] usb 1-1: config 6 interface 66 altsetting 32 endpoint 0x7 has invalid maxpacket 1024, setting to 64
[ 27.021113][ T25] usb 1-1: config 6 interface 66 altsetting 32 has an invalid endpoint with address 0x0, skipping
[ 27.021128][ T25] usb 1-1: config 6 interface 66 altsetting 32 endpoint 0x5 has invalid maxpacket 512, setting to 64
[ 27.021145][ T25] usb 1-1: config 6 interface 66 altsetting 32 endpoint 0x8 has invalid maxpacket 512, setting to 64
[ 27.021165][ T25] usb 1-1: config 6 interface 196 altsetting 4 has a duplicate endpoint with address 0x7, skipping
[ 27.021179][ T25] usb 1-1: config 6 interface 196 altsetting 4 has a duplicate endpoint with address 0xE, skipping
[ 27.021193][ T25] usb 1-1: config 6 interface 196 altsetting 4 has a duplicate endpoint with address 0x7, skipping
[ 27.021206][ T25] usb 1-1: config 6 interface 196 altsetting 4 has a duplicate endpoint with address 0x2, skipping
[ 27.021220][ T25] usb 1-1: config 6 interface 196 altsetting 4 has a duplicate endpoint with address 0xA, skipping
[ 27.021234][ T25] usb 1-1: config 6 interface 196 altsetting 4 has a duplicate endpoint with address 0x5, skipping
[ 27.021248][ T25] usb 1-1: config 6 interface 155 has no altsetting 0
[ 27.021259][ T25] usb 1-1: config 6 interface 73 has no altsetting 0
[ 27.021270][ T25] usb 1-1: config 6 interface 66 has no altsetting 0
[ 27.021281][ T25] usb 1-1: config 6 interface 196 has no altsetting 0
[ 27.280533][ T25] usb 1-1: string descriptor 0 read error: -22
[ 27.280633][ T25] usb 1-1: New USB device found, idVendor=0cf3, idProduct=0003, bcdDevice=95.a4
[ 27.280659][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 27.334597][ T25] ------------[ cut here ]------------
[ 27.334606][ T25] usb 1-1: BOGUS urb xfer, pipe 3 != type 1
[ 27.334941][ T25] WARNING: CPU: 1 PID: 25 at drivers/usb/core/urb.c:502 usb_submit_urb+0xed2/0x18a0
[ 27.335046][ T25] Modules linked in:
[ 27.335066][ T25] CPU: 1 PID: 25 Comm: kworker/1:1 Not tainted 5.19.0-rc1-syzkaller-00040-g235a6d80f021 #0
[ 27.335098][ T25] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 27.335116][ T25] Workqueue: usb_hub_wq hub_event
[ 27.335152][ T25] RIP: 0010:usb_submit_urb+0xed2/0x18a0
[ 27.335183][ T25] Code: 7c 24 18 e8 b0 42 8f fd 48 8b 7c 24 18 e8 46 41 18 ff 41 89 d8 44 89 e1 4c 89 ea 48 89 c6 48 c7 c7 80 17 a9 86 e8 06 f1 09 02 <0f> 0b e9 58 f8 ff ff e8 82 42 8f fd 48 81 c5 b8 05 00 00 e9 84 f7
[ 27.335210][ T25] RSP: 0018:ffffc900001b6f48 EFLAGS: 00010286
[ 27.335238][ T25] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000
[ 27.335258][ T25] RDX: ffff8881008a9c80 RSI: ffffffff812c1fc8 RDI: fffff52000036ddb
[ 27.335280][ T25] RBP: ffff88811e0be800 R08: 0000000000000005 R09: 0000000000000000
[ 27.335301][ T25] R10: 0000000080000000 R11: 0000000000000001 R12: 0000000000000003
[ 27.335321][ T25] R13: ffff88810ce0ee88 R14: 0000000000000003 R15: ffff8881009e7900
[ 27.335343][ T25] FS: 0000000000000000(0000) GS:ffff8881f6900000(0000) knlGS:0000000000000000
[ 27.335373][ T25] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 27.335395][ T25] CR2: 0000564d07679a38 CR3: 000000010ffd1000 CR4: 00000000003506e0
[ 27.335416][ T25] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 27.335436][ T25] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 27.335456][ T25] Call Trace:
[ 27.335467][ T25]
[ 27.335481][ T25] ar5523_submit_rx_cmd+0x1f1/0x320
[ 27.335517][ T25] ar5523_probe+0xc06/0x1da0
[ 27.335552][ T25] ? ar5523_data_tx_cb+0x450/0x450
[ 27.335586][ T25] ? mark_held_locks+0x9f/0xe0
[ 27.335617][ T25] ? _raw_spin_unlock_irqrestore+0x50/0x70
[ 27.335654][ T25] ? _raw_spin_unlock_irqrestore+0x50/0x70
[ 27.335688][ T25] ? lockdep_hardirqs_on+0x79/0x100
[ 27.335720][ T25] ? _raw_spin_unlock_irqrestore+0x3d/0x70
[ 27.335754][ T25] ? __pm_runtime_set_status+0x4b8/0xd00
[ 27.335785][ T25] usb_probe_interface+0x315/0x7f0
[ 27.335815][ T25] ? usb_match_dynamic_id+0x1a0/0x1a0
[ 27.335844][ T25] really_probe+0x23e/0xb90
[ 27.335872][ T25] __driver_probe_device+0x338/0x4d0
[ 27.335900][ T25] ? usb_match_id.part.0+0x15d/0x1b0
[ 27.335930][ T25] driver_probe_device+0x4c/0x1a0
[ 27.335958][ T25] __device_attach_driver+0x20b/0x2f0
[ 27.335987][ T25] ? driver_allows_async_probing+0x170/0x170
[ 27.336017][ T25] bus_for_each_drv+0x15f/0x1e0
[ 27.336044][ T25] ? bus_for_each_dev+0x1d0/0x1d0
[ 27.336070][ T25] ? _raw_spin_unlock_irqrestore+0x50/0x70
[ 27.336103][ T25] ? lockdep_hardirqs_on+0x79/0x100
[ 27.336130][ T25] ? _raw_spin_unlock_irqrestore+0x3d/0x70
[ 27.336164][ T25] __device_attach+0x1e4/0x530
[ 27.336191][ T25] ? device_driver_attach+0x210/0x210
[ 27.336220][ T25] ? kobject_uevent_env+0x2ac/0x1660
[ 27.336248][ T25] bus_probe_device+0x1e4/0x290
[ 27.336276][ T25] device_add+0xbda/0x1ea0
[ 27.336302][ T25] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0
[ 27.336330][ T25] ? usb_cache_string+0x102/0x140
[ 27.336357][ T25] ? usb_string+0x3d4/0x530
[ 27.336383][ T25] usb_set_configuration+0x101e/0x1900
[ 27.336415][ T25] usb_generic_driver_probe+0xba/0x100
[ 27.336443][ T25] usb_probe_device+0xd9/0x2c0
[ 27.336471][ T25] ? usb_driver_release_interface+0x180/0x180
[ 27.336501][ T25] really_probe+0x23e/0xb90
[ 27.336529][ T25] __driver_probe_device+0x338/0x4d0
[ 27.336558][ T25] driver_probe_device+0x4c/0x1a0
[ 27.336586][ T25] __device_attach_driver+0x20b/0x2f0
[ 27.336615][ T25] ? driver_allows_async_probing+0x170/0x170
[ 27.336645][ T25] bus_for_each_drv+0x15f/0x1e0
[ 27.336671][ T25] ? bus_for_each_dev+0x1d0/0x1d0
[ 27.336696][ T25] ? _raw_spin_unlock_irqrestore+0x50/0x70
[ 27.336734][ T25] ? lockdep_hardirqs_on+0x79/0x100
[ 27.336761][ T25] ? _raw_spin_unlock_irqrestore+0x3d/0x70
[ 27.336795][ T25] __device_attach+0x1e4/0x530
[ 27.336823][ T25] ? device_driver_attach+0x210/0x210
[ 27.336852][ T25] ? kobject_uevent_env+0x2ac/0x1660
[ 27.336879][ T25] bus_probe_device+0x1e4/0x290
[ 27.336906][ T25] device_add+0xbda/0x1ea0
[ 27.336931][ T25] ? usb_match_device+0xd4/0x550
[ 27.336959][ T25] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0
[ 27.336987][ T25] ? usb_detect_static_quirks+0x305/0x3b0
[ 27.337017][ T25] usb_new_device.cold+0x641/0x1091
[ 27.337050][ T25] ? hub_disconnect+0x510/0x510
[ 27.337080][ T25] ? rwlock_bug.part.0+0x90/0x90
[ 27.337109][ T25] ? _raw_spin_unlock_irq+0x1f/0x40
[ 27.337141][ T25] ? _raw_spin_unlock_irq+0x1f/0x40
[ 27.337173][ T25] hub_event+0x25d5/0x4690
[ 27.337207][ T25] ? hub_port_debounce+0x3c0/0x3c0
[ 27.337239][ T25] ? lock_release+0x780/0x780
[ 27.337267][ T25] ? lock_downgrade+0x6e0/0x6e0
[ 27.337294][ T25] ? do_raw_spin_lock+0x120/0x2a0
[ 27.337326][ T25] process_one_work+0x996/0x1610
[ 27.337357][ T25] ? pwq_dec_nr_in_flight+0x2a0/0x2a0
[ 27.337387][ T25] ? rwlock_bug.part.0+0x90/0x90
[ 27.337416][ T25] ? _raw_spin_lock_irq+0x41/0x50
[ 27.337449][ T25] worker_thread+0x665/0x1080
[ 27.337478][ T25] ? __kthread_parkme+0x15f/0x220
[ 27.337503][ T25] ? process_one_work+0x1610/0x1610
[ 27.337533][ T25] kthread+0x2ef/0x3a0
[ 27.337557][ T25] ? kthread_complete_and_exit+0x40/0x40
[ 27.337586][ T25] ret_from_fork+0x1f/0x30
[ 27.337616][ T25]
[ 27.337628][ T25] Kernel panic - not syncing: panic_on_warn set ...
[ 27.337639][ T25] CPU: 1 PID: 25 Comm: kworker/1:1 Not tainted 5.19.0-rc1-syzkaller-00040-g235a6d80f021 #0
[ 27.337666][ T25] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 27.337681][ T25] Workqueue: usb_hub_wq hub_event
[ 27.337715][ T25] Call Trace:
[ 27.337724][ T25]
[ 27.337733][ T25] dump_stack_lvl+0xcd/0x134
[ 27.337757][ T25] panic+0x2d7/0x636
[ 27.337784][ T25] ? panic_print_sys_info.part.0+0x10b/0x10b
[ 27.337814][ T25] ? __warn.cold+0x1d9/0x2cd
[ 27.337840][ T25] ? usb_submit_urb+0xed2/0x18a0
[ 27.337862][ T25] __warn.cold+0x1ea/0x2cd
[ 27.337888][ T25] ? usb_submit_urb+0xed2/0x18a0
[ 27.337912][ T25] report_bug+0x1bc/0x210
[ 27.337939][ T25] handle_bug+0x3c/0x60
[ 27.337968][ T25] exc_invalid_op+0x14/0x40
[ 27.337995][ T25] asm_exc_invalid_op+0x1b/0x20
[ 27.338019][ T25] RIP: 0010:usb_submit_urb+0xed2/0x18a0
[ 27.338044][ T25] Code: 7c 24 18 e8 b0 42 8f fd 48 8b 7c 24 18 e8 46 41 18 ff 41 89 d8 44 89 e1 4c 89 ea 48 89 c6 48 c7 c7 80 17 a9 86 e8 06 f1 09 02 <0f> 0b e9 58 f8 ff ff e8 82 42 8f fd 48 81 c5 b8 05 00 00 e9 84 f7
[ 27.338067][ T25] RSP: 0018:ffffc900001b6f48 EFLAGS: 00010286
[ 27.338089][ T25] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000
[ 27.338105][ T25] RDX: ffff8881008a9c80 RSI: ffffffff812c1fc8 RDI: fffff52000036ddb
[ 27.338123][ T25] RBP: ffff88811e0be800 R08: 0000000000000005 R09: 0000000000000000
[ 27.338140][ T25] R10: 0000000080000000 R11: 0000000000000001 R12: 0000000000000003
[ 27.338156][ T25] R13: ffff88810ce0ee88 R14: 0000000000000003 R15: ffff8881009e7900
[ 27.338175][ T25] ? vprintk+0x88/0x90
[ 27.338202][ T25] ? usb_submit_urb+0xed2/0x18a0
[ 27.338227][ T25] ar5523_submit_rx_cmd+0x1f1/0x320
[ 27.338257][ T25] ar5523_probe+0xc06/0x1da0
[ 27.338288][ T25] ? ar5523_data_tx_cb+0x450/0x450
[ 27.338318][ T25] ? mark_held_locks+0x9f/0xe0
[ 27.338343][ T25] ? _raw_spin_unlock_irqrestore+0x50/0x70
[ 27.338375][ T25] ? _raw_spin_unlock_irqrestore+0x50/0x70
[ 27.338406][ T25] ? lockdep_hardirqs_on+0x79/0x100
[ 27.338430][ T25] ? _raw_spin_unlock_irqrestore+0x3d/0x70
[ 27.338461][ T25] ? __pm_runtime_set_status+0x4b8/0xd00
[ 27.338488][ T25] usb_probe_interface+0x315/0x7f0
[ 27.338514][ T25] ? usb_match_dynamic_id+0x1a0/0x1a0
[ 27.338541][ T25] really_probe+0x23e/0xb90
[ 27.338566][ T25] __driver_probe_device+0x338/0x4d0
[ 27.338592][ T25] ? usb_match_id.part.0+0x15d/0x1b0
[ 27.338619][ T25] driver_probe_device+0x4c/0x1a0
[ 27.338645][ T25] __device_attach_driver+0x20b/0x2f0
[ 27.338672][ T25] ? driver_allows_async_probing+0x170/0x170
[ 27.338704][ T25] bus_for_each_drv+0x15f/0x1e0
[ 27.338727][ T25] ? bus_for_each_dev+0x1d0/0x1d0
[ 27.338751][ T25] ? _raw_spin_unlock_irqrestore+0x50/0x70
[ 27.338782][ T25] ? lockdep_hardirqs_on+0x79/0x100
[ 27.338806][ T25] ? _raw_spin_unlock_irqrestore+0x3d/0x70
[ 27.338837][ T25] __device_attach+0x1e4/0x530
[ 27.338862][ T25] ? device_driver_attach+0x210/0x210
[ 27.338888][ T25] ? kobject_uevent_env+0x2ac/0x1660
[ 27.338914][ T25] bus_probe_device+0x1e4/0x290
[ 27.338939][ T25] device_add+0xbda/0x1ea0
[ 27.338962][ T25] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0
[ 27.338987][ T25] ? usb_cache_string+0x102/0x140
[ 27.339012][ T25] ? usb_string+0x3d4/0x530
[ 27.339036][ T25] usb_set_configuration+0x101e/0x1900
[ 27.339065][ T25] usb_generic_driver_probe+0xba/0x100
[ 27.339091][ T25] usb_probe_device+0xd9/0x2c0
[ 27.339116][ T25] ? usb_driver_release_interface+0x180/0x180
[ 27.339144][ T25] really_probe+0x23e/0xb90
[ 27.339169][ T25] __driver_probe_device+0x338/0x4d0
[ 27.339196][ T25] driver_probe_device+0x4c/0x1a0
[ 27.339221][ T25] __device_attach_driver+0x20b/0x2f0
[ 27.339247][ T25] ? driver_allows_async_probing+0x170/0x170
[ 27.339274][ T25] bus_for_each_drv+0x15f/0x1e0
[ 27.339298][ T25] ? bus_for_each_dev+0x1d0/0x1d0
[ 27.339321][ T25] ? _raw_spin_unlock_irqrestore+0x50/0x70
[ 27.339352][ T25] ? lockdep_hardirqs_on+0x79/0x100
[ 27.339376][ T25] ? _raw_spin_unlock_irqrestore+0x3d/0x70
[ 27.339407][ T25] __device_attach+0x1e4/0x530
[ 27.339432][ T25] ? device_driver_attach+0x210/0x210
[ 27.339458][ T25] ? kobject_uevent_env+0x2ac/0x1660
[ 27.339483][ T25] bus_probe_device+0x1e4/0x290
[ 27.339507][ T25] device_add+0xbda/0x1ea0
[ 27.339529][ T25] ? usb_match_device+0xd4/0x550
[ 27.339555][ T25] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0
[ 27.339580][ T25] ? usb_detect_static_quirks+0x305/0x3b0
[ 27.339607][ T25] usb_new_device.cold+0x641/0x1091
[ 27.339636][ T25] ? hub_disconnect+0x510/0x510
[ 27.339663][ T25] ? rwlock_bug.part.0+0x90/0x90
[ 27.339690][ T25] ? _raw_spin_unlock_irq+0x1f/0x40
[ 27.339724][ T25] ? _raw_spin_unlock_irq+0x1f/0x40
[ 27.339754][ T25] hub_event+0x25d5/0x4690
[ 27.339786][ T25] ? hub_port_debounce+0x3c0/0x3c0
[ 27.339815][ T25] ? lock_release+0x780/0x780
[ 27.339840][ T25] ? lock_downgrade+0x6e0/0x6e0
[ 27.339866][ T25] ? do_raw_spin_lock+0x120/0x2a0
[ 27.339895][ T25] process_one_work+0x996/0x1610
[ 27.339922][ T25] ? pwq_dec_nr_in_flight+0x2a0/0x2a0
[ 27.339950][ T25] ? rwlock_bug.part.0+0x90/0x90
[ 27.339976][ T25] ? _raw_spin_lock_irq+0x41/0x50
[ 27.340006][ T25] worker_thread+0x665/0x1080
[ 27.340033][ T25] ? __kthread_parkme+0x15f/0x220
[ 27.340056][ T25] ? process_one_work+0x1610/0x1610
[ 27.340083][ T25] kthread+0x2ef/0x3a0
[ 27.340105][ T25] ? kthread_complete_and_exit+0x40/0x40
[ 27.340131][ T25] ret_from_fork+0x1f/0x30
[ 27.340157][ T25]
[ 27.342305][ T25] Kernel Offset: disabled