DUID 00:04:17:4d:40:87:6e:bf:2d:0e:65:92:c1:2a:fb:91:5f:79
forked to background, child pid 3173
[ 28.695011][ T3174] 8021q: adding VLAN 0 to HW filter on device bond0
[ 28.707959][ T3174] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.0.138' (ECDSA) to the list of known hosts.
executing program
syzkaller login: [ 53.447860][ T13] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[ 53.817947][ T13] usb 1-1: config 0 has an invalid interface number: 24 but max is 0
[ 53.826411][ T13] usb 1-1: config 0 has an invalid interface number: 82 but max is 0
[ 53.834662][ T13] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 1
[ 53.843691][ T13] usb 1-1: config 0 has no interface number 0
[ 53.849811][ T13] usb 1-1: config 0 has no interface number 1
[ 53.856018][ T13] usb 1-1: config 0 interface 24 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12
[ 53.869034][ T13] usb 1-1: too many endpoints for config 0 interface 82 altsetting 47: 137, using maximum allowed: 30
[ 53.880159][ T13] usb 1-1: config 0 interface 82 altsetting 47 has a duplicate endpoint with address 0x1, skipping
[ 53.891183][ T13] usb 1-1: config 0 interface 82 altsetting 47 has a duplicate endpoint with address 0x7, skipping
[ 53.902406][ T13] usb 1-1: config 0 interface 82 altsetting 47 has a duplicate endpoint with address 0x3, skipping
[ 53.913231][ T13] usb 1-1: config 0 interface 82 altsetting 47 endpoint 0x4 has invalid maxpacket 1576, setting to 64
[ 53.924229][ T13] usb 1-1: config 0 interface 82 altsetting 47 has an invalid endpoint with address 0x0, skipping
[ 53.934885][ T13] usb 1-1: config 0 interface 82 altsetting 47 has an invalid endpoint with address 0x80, skipping
[ 53.945643][ T13] usb 1-1: config 0 interface 82 altsetting 47 endpoint 0x6 has invalid maxpacket 1024, setting to 64
[ 53.956819][ T13] usb 1-1: config 0 interface 82 altsetting 47 has 11 endpoint descriptors, different from the interface descriptor's value: 137
[ 53.970155][ T13] usb 1-1: config 0 interface 82 has no altsetting 0
[ 53.976864][ T13] usb 1-1: New USB device found, idVendor=0586, idProduct=3417, bcdDevice=e6.c2
[ 53.985955][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 53.997838][ T13] usb 1-1: config 0 descriptor??
executing program
[ 54.187848][ T13] usb 1-1: reset full-speed USB device number 2 using dummy_hcd
[ 54.617810][ T13] usb 1-1: device descriptor read/64, error -71
[ 54.887825][ T13] usb 1-1: reset full-speed USB device number 2 using dummy_hcd
[ 55.489403][ T1067] usb 1-1: driver API: 1.9.9 2016-02-15 [1-1]
[ 55.495888][ T1067] usb 1-1: firmware API: 1.9.6 2012-07-07
executing program
[ 55.708192][ T13] usb 1-1: string descriptor 0 read error: -71
[ 55.715628][ T13] ------------[ cut here ]------------
[ 55.721959][ T13] usb 1-1: BOGUS urb xfer, pipe 1 != type 3
[ 55.728686][ T13] WARNING: CPU: 0 PID: 13 at drivers/usb/core/urb.c:503 usb_submit_urb+0xc8d/0x1990
[ 55.738452][ T13] Modules linked in:
[ 55.742383][ T13] CPU: 0 PID: 13 Comm: kworker/0:1 Not tainted 5.15.112-syzkaller #0
[ 55.750536][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023
[ 55.760662][ T13] Workqueue: usb_hub_wq hub_event
[ 55.765741][ T13] RIP: 0010:usb_submit_urb+0xc8d/0x1990
[ 55.771375][ T13] Code: 0f b6 04 18 84 c0 44 8b 64 24 1c 0f 85 2b 09 00 00 45 8b 07 48 c7 c7 e0 05 22 8b 48 8b 74 24 08 4c 89 f2 89 e9 e8 f3 2c 32 fb <0f> 0b 48 8b 5c 24 20 48 8b 6c 24 28 41 89 de 4c 89 f7 48 c7 c6 f0
[ 55.791495][ T13] RSP: 0018:ffffc90000d26b18 EFLAGS: 00010246
[ 55.797860][ T13] RAX: 99c80f046854ce00 RBX: dffffc0000000000 RCX: ffff88813fe20000
[ 55.806555][ T13] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[ 55.814687][ T13] RBP: 0000000000000001 R08: ffffffff8166391c R09: fffff520001a4ca5
[ 55.822822][ T13] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000
[ 55.830978][ T13] R13: ffff88802310ff00 R14: ffff888012dcd5f0 R15: ffffffff8b2203c8
[ 55.839023][ T13] FS: 0000000000000000(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000
[ 55.848100][ T13] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 55.854705][ T13] CR2: 00007f169684d01d CR3: 0000000022ce8000 CR4: 00000000003506f0
[ 55.862786][ T13] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 55.870820][ T13] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 55.879300][ T13] Call Trace:
[ 55.882787][ T13]
[ 55.885737][ T13] carl9170_usb_submit_cmd_urb+0x8d/0x100
[ 55.891722][ T13] carl9170_usb_disconnect+0x8c/0x160
[ 55.897148][ T13] usb_unbind_interface+0x1cd/0x840
[ 55.902545][ T13] ? usb_driver_release_interface+0x1c0/0x1c0
[ 55.908758][ T13] device_release_driver_internal+0x50e/0x7f0
[ 55.914853][ T13] usb_forced_unbind_intf+0x155/0x220
[ 55.920292][ T13] usb_reset_device+0x465/0xaf0
[ 55.925181][ T13] carl9170_usb_probe+0x4c/0xbe0
[ 55.930347][ T13] ? usb_disable_lpm+0x73/0x380
[ 55.935326][ T13] usb_probe_interface+0x5c0/0xaf0
[ 55.940562][ T13] ? usb_register_driver+0x3d0/0x3d0
[ 55.945885][ T13] really_probe+0x24e/0xb60
[ 55.950787][ T13] __driver_probe_device+0x1a2/0x3d0
[ 55.956105][ T13] driver_probe_device+0x50/0x420
[ 55.961207][ T13] __device_attach_driver+0x2b9/0x500
[ 55.966640][ T13] ? deferred_probe_work_func+0x230/0x230
[ 55.972419][ T13] bus_for_each_drv+0x183/0x200
[ 55.977397][ T13] ? subsys_find_device_by_id+0x310/0x310
[ 55.983198][ T13] ? lockdep_hardirqs_on+0x94/0x130
[ 55.988457][ T13] __device_attach+0x359/0x570
[ 55.993228][ T13] ? kobject_uevent_env+0x36a/0x8d0
[ 55.998672][ T13] ? device_attach+0x20/0x20
[ 56.003285][ T13] ? kobject_uevent_env+0x36a/0x8d0
[ 56.008673][ T13] bus_probe_device+0xba/0x1e0
[ 56.013472][ T13] ? device_add+0xab9/0xfd0
[ 56.018065][ T13] device_add+0xb48/0xfd0
[ 56.022981][ T13] usb_set_configuration+0x19dd/0x2020
[ 56.028547][ T13] usb_generic_driver_probe+0x84/0x140
[ 56.034062][ T13] usb_probe_device+0x130/0x260
[ 56.038987][ T13] ? usb_register_device_driver+0x240/0x240
[ 56.044933][ T13] really_probe+0x24e/0xb60
[ 56.049527][ T13] __driver_probe_device+0x1a2/0x3d0
[ 56.054839][ T13] driver_probe_device+0x50/0x420
[ 56.059995][ T13] __device_attach_driver+0x2b9/0x500
[ 56.065414][ T13] ? deferred_probe_work_func+0x230/0x230
[ 56.071227][ T13] bus_for_each_drv+0x183/0x200
[ 56.076113][ T13] ? subsys_find_device_by_id+0x310/0x310
[ 56.081938][ T13] ? lockdep_hardirqs_on+0x94/0x130
[ 56.087172][ T13] __device_attach+0x359/0x570
[ 56.092084][ T13] ? kobject_uevent_env+0x36a/0x8d0
[ 56.097393][ T13] ? device_attach+0x20/0x20
[ 56.102289][ T13] ? kobject_uevent_env+0x36a/0x8d0
[ 56.107542][ T13] bus_probe_device+0xba/0x1e0
[ 56.112509][ T13] ? device_add+0xab9/0xfd0
[ 56.117081][ T13] device_add+0xb48/0xfd0
[ 56.121566][ T13] usb_new_device+0xc17/0x18d0
[ 56.126386][ T13] ? usb_disconnect+0x8c0/0x8c0
[ 56.131647][ T13] ? do_raw_spin_unlock+0x137/0x8b0
[ 56.136974][ T13] ? _raw_spin_unlock_irq+0x1f/0x40
[ 56.142403][ T13] ? lockdep_hardirqs_on+0x94/0x130
[ 56.147788][ T13] hub_event+0x2dd8/0x56d0
[ 56.152231][ T13] ? _raw_spin_lock_irq+0xa9/0x110
[ 56.157411][ T13] ? led_work+0x700/0x700
[ 56.161808][ T13] ? read_lock_is_recursive+0x10/0x10
[ 56.167235][ T13] ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[ 56.173290][ T13] ? perf_trace_lock_acquire+0x100/0x4a0
[ 56.178991][ T13] ? _raw_spin_unlock_irqrestore+0xd9/0x130
[ 56.184910][ T13] ? do_raw_spin_unlock+0x137/0x8b0
[ 56.190222][ T13] process_one_work+0x8a1/0x10c0
[ 56.195232][ T13] ? worker_detach_from_pool+0x260/0x260
[ 56.200945][ T13] ? _raw_spin_lock_irqsave+0x120/0x120
[ 56.206613][ T13] ? kthread_data+0x4e/0xc0
[ 56.211277][ T13] ? wq_worker_running+0x97/0x170
[ 56.216329][ T13] worker_thread+0xaca/0x1280
[ 56.222741][ T13] ? _raw_spin_unlock_irqrestore+0xd9/0x130
[ 56.228707][ T13] kthread+0x3f6/0x4f0
[ 56.232784][ T13] ? rcu_lock_release+0x20/0x20
[ 56.237646][ T13] ? kthread_blkcg+0xd0/0xd0
[ 56.242394][ T13] ret_from_fork+0x1f/0x30
[ 56.246832][ T13]
[ 56.249919][ T13] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 56.257205][ T13] CPU: 0 PID: 13 Comm: kworker/0:1 Not tainted 5.15.112-syzkaller #0
[ 56.265314][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023
[ 56.275546][ T13] Workqueue: usb_hub_wq hub_event
[ 56.280581][ T13] Call Trace:
[ 56.283860][ T13]
[ 56.286786][ T13] dump_stack_lvl+0x1e3/0x2cb
[ 56.291496][ T13] ? io_uring_drop_tctx_refs+0x19d/0x19d
[ 56.297166][ T13] ? panic+0x84d/0x84d
[ 56.301520][ T13] ? usb_submit_urb+0xbc0/0x1990
[ 56.306478][ T13] ? usb_submit_urb+0xbc0/0x1990
[ 56.311459][ T13] panic+0x318/0x84d
[ 56.315394][ T13] ? __warn+0x16a/0x300
[ 56.319556][ T13] ? fb_is_primary_device+0xcc/0xcc
[ 56.324891][ T13] ? ret_from_fork+0x1f/0x30
[ 56.329525][ T13] ? usb_submit_urb+0xc8d/0x1990
[ 56.334477][ T13] __warn+0x2b2/0x300
[ 56.338479][ T13] ? usb_submit_urb+0xc8d/0x1990
[ 56.343440][ T13] report_bug+0x1b7/0x2e0
[ 56.347809][ T13] handle_bug+0x3d/0x70
[ 56.351987][ T13] exc_invalid_op+0x16/0x40
[ 56.356530][ T13] asm_exc_invalid_op+0x16/0x20
[ 56.361405][ T13] RIP: 0010:usb_submit_urb+0xc8d/0x1990
[ 56.366993][ T13] Code: 0f b6 04 18 84 c0 44 8b 64 24 1c 0f 85 2b 09 00 00 45 8b 07 48 c7 c7 e0 05 22 8b 48 8b 74 24 08 4c 89 f2 89 e9 e8 f3 2c 32 fb <0f> 0b 48 8b 5c 24 20 48 8b 6c 24 28 41 89 de 4c 89 f7 48 c7 c6 f0
[ 56.386616][ T13] RSP: 0018:ffffc90000d26b18 EFLAGS: 00010246
[ 56.392711][ T13] RAX: 99c80f046854ce00 RBX: dffffc0000000000 RCX: ffff88813fe20000
[ 56.400858][ T13] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[ 56.408831][ T13] RBP: 0000000000000001 R08: ffffffff8166391c R09: fffff520001a4ca5
[ 56.416799][ T13] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000
[ 56.424770][ T13] R13: ffff88802310ff00 R14: ffff888012dcd5f0 R15: ffffffff8b2203c8
[ 56.432852][ T13] ? __wake_up_klogd+0xcc/0x100
[ 56.437724][ T13] ? usb_submit_urb+0xc8d/0x1990
[ 56.442690][ T13] carl9170_usb_submit_cmd_urb+0x8d/0x100
[ 56.448510][ T13] carl9170_usb_disconnect+0x8c/0x160
[ 56.453989][ T13] usb_unbind_interface+0x1cd/0x840
[ 56.459224][ T13] ? usb_driver_release_interface+0x1c0/0x1c0
[ 56.465748][ T13] device_release_driver_internal+0x50e/0x7f0
[ 56.471840][ T13] usb_forced_unbind_intf+0x155/0x220
[ 56.477307][ T13] usb_reset_device+0x465/0xaf0
[ 56.482913][ T13] carl9170_usb_probe+0x4c/0xbe0
[ 56.487955][ T13] ? usb_disable_lpm+0x73/0x380
[ 56.492818][ T13] usb_probe_interface+0x5c0/0xaf0
[ 56.498025][ T13] ? usb_register_driver+0x3d0/0x3d0
[ 56.503318][ T13] really_probe+0x24e/0xb60
[ 56.507828][ T13] __driver_probe_device+0x1a2/0x3d0
[ 56.513124][ T13] driver_probe_device+0x50/0x420
[ 56.518157][ T13] __device_attach_driver+0x2b9/0x500
[ 56.523525][ T13] ? deferred_probe_work_func+0x230/0x230
[ 56.529245][ T13] bus_for_each_drv+0x183/0x200
[ 56.534103][ T13] ? subsys_find_device_by_id+0x310/0x310
[ 56.539840][ T13] ? lockdep_hardirqs_on+0x94/0x130
[ 56.545072][ T13] __device_attach+0x359/0x570
[ 56.549840][ T13] ? kobject_uevent_env+0x36a/0x8d0
[ 56.555049][ T13] ? device_attach+0x20/0x20
[ 56.559650][ T13] ? kobject_uevent_env+0x36a/0x8d0
[ 56.565025][ T13] bus_probe_device+0xba/0x1e0
[ 56.569814][ T13] ? device_add+0xab9/0xfd0
[ 56.574320][ T13] device_add+0xb48/0xfd0
[ 56.578661][ T13] usb_set_configuration+0x19dd/0x2020
[ 56.584246][ T13] usb_generic_driver_probe+0x84/0x140
[ 56.590738][ T13] usb_probe_device+0x130/0x260
[ 56.595918][ T13] ? usb_register_device_driver+0x240/0x240
[ 56.602184][ T13] really_probe+0x24e/0xb60
[ 56.607061][ T13] __driver_probe_device+0x1a2/0x3d0
[ 56.612453][ T13] driver_probe_device+0x50/0x420
[ 56.617600][ T13] __device_attach_driver+0x2b9/0x500
[ 56.623150][ T13] ? deferred_probe_work_func+0x230/0x230
[ 56.628921][ T13] bus_for_each_drv+0x183/0x200
[ 56.634266][ T13] ? subsys_find_device_by_id+0x310/0x310
[ 56.640074][ T13] ? lockdep_hardirqs_on+0x94/0x130
[ 56.645444][ T13] __device_attach+0x359/0x570
[ 56.651346][ T13] ? kobject_uevent_env+0x36a/0x8d0
[ 56.657547][ T13] ? device_attach+0x20/0x20
[ 56.662162][ T13] ? kobject_uevent_env+0x36a/0x8d0
[ 56.667397][ T13] bus_probe_device+0xba/0x1e0
[ 56.672179][ T13] ? device_add+0xab9/0xfd0
[ 56.677144][ T13] device_add+0xb48/0xfd0
[ 56.681496][ T13] usb_new_device+0xc17/0x18d0
[ 56.686292][ T13] ? usb_disconnect+0x8c0/0x8c0
[ 56.691239][ T13] ? do_raw_spin_unlock+0x137/0x8b0
[ 56.696449][ T13] ? _raw_spin_unlock_irq+0x1f/0x40
[ 56.701783][ T13] ? lockdep_hardirqs_on+0x94/0x130
[ 56.707023][ T13] hub_event+0x2dd8/0x56d0
[ 56.711536][ T13] ? _raw_spin_lock_irq+0xa9/0x110
[ 56.716836][ T13] ? led_work+0x700/0x700
[ 56.721198][ T13] ? read_lock_is_recursive+0x10/0x10
[ 56.726748][ T13] ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[ 56.732749][ T13] ? perf_trace_lock_acquire+0x100/0x4a0
[ 56.738620][ T13] ? _raw_spin_unlock_irqrestore+0xd9/0x130
[ 56.744595][ T13] ? do_raw_spin_unlock+0x137/0x8b0
[ 56.749810][ T13] process_one_work+0x8a1/0x10c0
[ 56.754794][ T13] ? worker_detach_from_pool+0x260/0x260
[ 56.760434][ T13] ? _raw_spin_lock_irqsave+0x120/0x120
[ 56.765997][ T13] ? kthread_data+0x4e/0xc0
[ 56.770506][ T13] ? wq_worker_running+0x97/0x170
[ 56.775535][ T13] worker_thread+0xaca/0x1280
[ 56.780247][ T13] ? _raw_spin_unlock_irqrestore+0xd9/0x130
[ 56.786175][ T13] kthread+0x3f6/0x4f0
[ 56.790257][ T13] ? rcu_lock_release+0x20/0x20
[ 56.795108][ T13] ? kthread_blkcg+0xd0/0xd0
[ 56.799742][ T13] ret_from_fork+0x1f/0x30
[ 56.804169][ T13]
[ 56.807423][ T13] Kernel Offset: disabled
[ 56.811854][ T13] Rebooting in 86400 seconds..