Warning: Permanently added '10.128.0.110' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 27.997166][ T95] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 28.086822][ T95] usb 1-1: Using ep0 maxpacket: 16 [ 28.246718][ T95] usb 1-1: unable to get BOS descriptor or descriptor too short [ 28.326745][ T95] usb 1-1: config 127 has an invalid interface number: 132 but max is 1 [ 28.335173][ T95] usb 1-1: config 127 has an invalid interface number: 200 but max is 1 [ 28.343709][ T95] usb 1-1: config 127 has an invalid interface association descriptor of length 2, skipping [ 28.354082][ T95] usb 1-1: config 127 has no interface number 0 [ 28.360401][ T95] usb 1-1: config 127 has no interface number 1 [ 28.366744][ T95] usb 1-1: config 127 interface 200 altsetting 6 has a duplicate endpoint with address 0xC, skipping [ 28.377771][ T95] usb 1-1: config 127 interface 200 altsetting 6 endpoint 0x8 has invalid wMaxPacketSize 0 [ 28.387815][ T95] usb 1-1: config 127 interface 200 altsetting 6 bulk endpoint 0x8 has invalid maxpacket 0 [ 28.398155][ T95] usb 1-1: config 127 interface 200 altsetting 6 endpoint 0x2 has an invalid bInterval 127, changing to 10 [ 28.409588][ T95] usb 1-1: config 127 interface 200 altsetting 6 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 28.420832][ T95] usb 1-1: config 127 interface 200 altsetting 6 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 28.432142][ T95] usb 1-1: config 127 interface 200 altsetting 6 has an invalid endpoint with address 0x0, skipping [ 28.443217][ T95] usb 1-1: config 127 interface 200 altsetting 6 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 28.454785][ T95] usb 1-1: config 127 interface 200 altsetting 6 has a duplicate endpoint with address 0x2, skipping [ 28.465717][ T95] usb 1-1: config 127 interface 200 altsetting 6 has 9 endpoint descriptors, different from the interface descriptor's value: 8 [ 28.478961][ T95] usb 1-1: config 127 interface 132 has no altsetting 0 [ 28.486002][ T95] usb 1-1: config 127 interface 200 has no altsetting 0 [ 28.726707][ T95] usb 1-1: string descriptor 0 read error: -22 [ 28.732966][ T95] usb 1-1: New USB device found, idVendor=066b, idProduct=2212, bcdDevice=bb.6d [ 28.742438][ T95] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.791780][ T95] prism2_usb 1-1:127.132 (unnamed net_device) (uninitialized): prism2_usb: Checking for firmware prism2_ru.fw [ 28.805295][ T95] usb 1-1: Direct firmware load for prism2_ru.fw failed with error -2 [ 28.813690][ T95] prism2_usb 1-1:127.132 (unnamed net_device) (uninitialized): prism2_usb: Firmware not available, but not essential [ 28.826119][ T95] prism2_usb 1-1:127.132 (unnamed net_device) (uninitialized): prism2_usb: can continue to use card anyway. [ 28.876716][ T95] ------------[ cut here ]------------ [ 28.882372][ T95] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 28.888650][ T95] WARNING: CPU: 1 PID: 95 at drivers/usb/core/urb.c:478 usb_submit_urb+0x1188/0x1460 [ 28.898105][ T95] Kernel panic - not syncing: panic_on_warn set ... [ 28.904797][ T95] CPU: 1 PID: 95 Comm: kworker/1:2 Not tainted 5.6.0-rc3-syzkaller #0 [ 28.913023][ T95] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 28.923589][ T95] Workqueue: usb_hub_wq hub_event [ 28.928605][ T95] Call Trace: [ 28.931885][ T95] dump_stack+0xef/0x16e [ 28.936178][ T95] ? usb_submit_urb+0x1090/0x1460 [ 28.941192][ T95] panic+0x2aa/0x6e1 [ 28.945073][ T95] ? add_taint.cold+0x16/0x16 [ 28.949741][ T95] ? __probe_kernel_read+0x188/0x1d0 [ 28.955008][ T95] ? __warn.cold+0x14/0x30 [ 28.959616][ T95] ? __warn+0xd5/0x1c8 [ 28.963734][ T95] ? usb_submit_urb+0x1188/0x1460 [ 28.968747][ T95] __warn.cold+0x2f/0x30 [ 28.972986][ T95] ? usb_submit_urb+0x1188/0x1460 [ 28.978051][ T95] report_bug+0x27b/0x2f0 [ 28.982378][ T95] do_error_trap+0x12b/0x1e0 [ 28.986958][ T95] ? usb_submit_urb+0x1188/0x1460 [ 28.992082][ T95] do_invalid_op+0x32/0x40 [ 28.996610][ T95] ? usb_submit_urb+0x1188/0x1460 [ 29.001627][ T95] invalid_op+0x23/0x30 [ 29.005771][ T95] RIP: 0010:usb_submit_urb+0x1188/0x1460 [ 29.011393][ T95] Code: 4d 85 ed 74 46 e8 18 ce dd fd 4c 89 f7 e8 d0 5c 17 ff 41 89 d8 44 89 e1 4c 89 ea 48 89 c6 48 c7 c7 e0 e7 3b 86 e8 a0 5f b2 fd <0f> 0b e9 20 f4 ff ff e8 ec cd dd fd 0f 1f 44 00 00 e8 e2 cd dd fd [ 29.030990][ T95] RSP: 0018:ffff8881d5a8efc8 EFLAGS: 00010282 [ 29.037048][ T95] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 29.045018][ T95] RDX: 0000000000000000 RSI: ffffffff812977dd RDI: ffffed103ab51deb [ 29.053090][ T95] RBP: ffff8881ce778190 R08: ffff8881d7316200 R09: fffffbfff1266c8f [ 29.061046][ T95] R10: fffffbfff1266c8e R11: ffffffff89336477 R12: 0000000000000003 [ 29.069062][ T95] R13: ffff8881d637c600 R14: ffff8881ce0730a0 R15: ffff8881c64b4008 [ 29.077039][ T95] ? vprintk_func+0x7d/0x113 [ 29.081613][ T95] ? usb_submit_urb+0x1188/0x1460 [ 29.086632][ T95] submit_rx_urb+0x2f8/0x400 [ 29.091224][ T95] hfa384x_drvr_start+0x1cf/0x480 [ 29.096233][ T95] ? hfa384x_drvr_setconfig+0x40/0x40 [ 29.101602][ T95] ? __netdev_printk+0x1c6/0x27c [ 29.106546][ T95] prism2sta_ifstate+0x24e/0x510 [ 29.111480][ T95] ? netdev_notice+0x109/0x109 [ 29.116348][ T95] ? assign_fw+0x480/0x480 [ 29.120782][ T95] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 29.126322][ T95] ? prism2mib_bytearea2pstr+0x1f0/0x1f0 [ 29.131944][ T95] prism2sta_probe_usb.cold+0x1c8/0x49e [ 29.137487][ T95] ? prism2sta_mlmerequest+0xa90/0xa90 [ 29.142990][ T95] ? __pm_runtime_resume+0x111/0x180 [ 29.148357][ T95] usb_probe_interface+0x310/0x800 [ 29.153529][ T95] ? usb_probe_device+0x230/0x230 [ 29.158724][ T95] really_probe+0x290/0xac0 [ 29.163222][ T95] driver_probe_device+0x223/0x350 [ 29.168341][ T95] __device_attach_driver+0x1d1/0x290 [ 29.173707][ T95] ? driver_allows_async_probing+0x160/0x160 [ 29.179676][ T95] bus_for_each_drv+0x162/0x1e0 [ 29.184519][ T95] ? bus_rescan_devices+0x20/0x20 [ 29.189539][ T95] ? _raw_spin_unlock_irqrestore+0x39/0x40 [ 29.195336][ T95] ? lockdep_hardirqs_on+0x382/0x580 [ 29.200669][ T95] __device_attach+0x217/0x390 [ 29.205474][ T95] ? device_bind_driver+0xd0/0xd0 [ 29.210665][ T95] bus_probe_device+0x1e4/0x290 [ 29.215556][ T95] device_add+0x1459/0x1bf0 [ 29.220223][ T95] ? wait_for_completion+0x3c0/0x3c0 [ 29.225551][ T95] ? device_link_remove+0x110/0x110 [ 29.230746][ T95] usb_set_configuration+0xe47/0x17d0 [ 29.236237][ T95] usb_generic_driver_probe+0x9d/0xe0 [ 29.241605][ T95] usb_probe_device+0xd9/0x230 [ 29.246409][ T95] ? usb_suspend+0x5f0/0x5f0 [ 29.251008][ T95] really_probe+0x290/0xac0 [ 29.255503][ T95] driver_probe_device+0x223/0x350 [ 29.260612][ T95] __device_attach_driver+0x1d1/0x290 [ 29.265995][ T95] ? driver_allows_async_probing+0x160/0x160 [ 29.271972][ T95] bus_for_each_drv+0x162/0x1e0 [ 29.276818][ T95] ? bus_rescan_devices+0x20/0x20 [ 29.281835][ T95] ? _raw_spin_unlock_irqrestore+0x39/0x40 [ 29.287633][ T95] ? lockdep_hardirqs_on+0x382/0x580 [ 29.293271][ T95] __device_attach+0x217/0x390 [ 29.298198][ T95] ? device_bind_driver+0xd0/0xd0 [ 29.303206][ T95] bus_probe_device+0x1e4/0x290 [ 29.308067][ T95] device_add+0x1459/0x1bf0 [ 29.312745][ T95] ? device_link_remove+0x110/0x110 [ 29.317928][ T95] usb_new_device.cold+0x540/0xcd0 [ 29.323037][ T95] hub_event+0x21cb/0x4300 [ 29.327442][ T95] ? hub_port_debounce+0x350/0x350 [ 29.332566][ T95] ? find_held_lock+0x2d/0x110 [ 29.337359][ T95] ? mark_held_locks+0xe0/0xe0 [ 29.342200][ T95] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 29.347799][ T95] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 29.353346][ T95] process_one_work+0x94b/0x1620 [ 29.358285][ T95] ? pwq_dec_nr_in_flight+0x310/0x310 [ 29.363686][ T95] ? do_raw_spin_lock+0x129/0x290 [ 29.368709][ T95] worker_thread+0x96/0xe20 [ 29.373311][ T95] ? process_one_work+0x1620/0x1620 [ 29.378506][ T95] kthread+0x318/0x420 [ 29.382602][ T95] ? kthread_create_on_node+0xf0/0xf0 [ 29.387966][ T95] ret_from_fork+0x24/0x30 [ 29.393313][ T95] Kernel Offset: disabled [ 29.397689][ T95] Rebooting in 86400 seconds..