Warning: Permanently added '10.128.1.27' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 33.500678][ T31] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 33.740673][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 33.860778][ T31] usb 1-1: config 0 has an invalid interface number: 164 but max is 0 [ 33.869063][ T31] usb 1-1: config 0 has no interface number 0 [ 33.875408][ T31] usb 1-1: config 0 interface 164 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 33.885324][ T31] usb 1-1: config 0 interface 164 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 34.050817][ T31] usb 1-1: New USB device found, idVendor=10cf, idProduct=5501, bcdDevice=14.b2 [ 34.059878][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.067901][ T31] usb 1-1: Product: syz [ 34.072096][ T31] usb 1-1: Manufacturer: syz [ 34.076679][ T31] usb 1-1: SerialNumber: syz [ 34.085142][ T31] usb 1-1: config 0 descriptor?? [ 34.101383][ T1285] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 34.108672][ T1285] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 34.124501][ T31] ------------[ cut here ]------------ [ 34.130104][ T31] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 34.136331][ T31] WARNING: CPU: 1 PID: 31 at drivers/usb/core/urb.c:502 usb_submit_urb+0xed2/0x1880 [ 34.145783][ T31] Modules linked in: [ 34.149674][ T31] CPU: 1 PID: 31 Comm: kworker/1:1 Not tainted 6.0.0-rc4-syzkaller-00066-g7eb2bf871454 #0 [ 34.159605][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 34.169705][ T31] Workqueue: usb_hub_wq hub_event [ 34.174805][ T31] RIP: 0010:usb_submit_urb+0xed2/0x1880 [ 34.180371][ T31] Code: 7c 24 18 e8 40 2f 8e fd 48 8b 7c 24 18 e8 a6 9d 18 ff 41 89 d8 44 89 e1 4c 89 ea 48 89 c6 48 c7 c7 c0 ba a9 86 e8 0e b2 0d 02 <0f> 0b e9 58 f8 ff ff e8 12 2f 8e fd 48 81 c5 b8 05 00 00 e9 84 f7 [ 34.200140][ T31] RSP: 0018:ffffc90000216e78 EFLAGS: 00010282 [ 34.206255][ T31] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 34.214357][ T31] RDX: ffff888109535580 RSI: ffffffff812c9b68 RDI: fffff52000042dc1 [ 34.222374][ T31] RBP: ffff888100830100 R08: 0000000000000005 R09: 0000000000000000 [ 34.230346][ T31] R10: 0000000080000000 R11: 0000000000000000 R12: 0000000000000001 [ 34.238360][ T31] R13: ffff888118ced708 R14: 0000000000000002 R15: ffff88810081fb00 [ 34.246406][ T31] FS: 0000000000000000(0000) GS:ffff8881f6900000(0000) knlGS:0000000000000000 [ 34.255396][ T31] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.262021][ T31] CR2: 00007ffe38ed9dd0 CR3: 0000000109169000 CR4: 00000000003506e0 [ 34.269998][ T31] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 34.278023][ T31] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 34.286041][ T31] Call Trace: [ 34.289321][ T31] [ 34.292287][ T31] ? __init_swait_queue_head+0xc6/0x150 executing program [ 34.297858][ T31] usb_start_wait_urb+0x101/0x4b0 [ 34.302926][ T31] ? usb_api_blocking_completion+0xa0/0xa0 [ 34.308761][ T31] ? trace_kmalloc+0x32/0x100 [ 34.313536][ T31] ? memset+0x20/0x40 [ 34.317532][ T31] usb_bulk_msg+0x226/0x550 [ 34.322094][ T31] vmk80xx_write_packet+0x1db/0x260 [ 34.327330][ T31] vmk80xx_auto_attach+0x1544/0x1990 [ 34.333101][ T31] comedi_auto_config+0x16e/0x250 [ 34.338171][ T31] usb_probe_interface+0x30b/0x7f0 [ 34.343359][ T31] ? usb_match_dynamic_id+0x1a0/0x1a0 [ 34.348750][ T31] really_probe+0x249/0xb90 [ 34.353307][ T31] __driver_probe_device+0x1df/0x4d0 [ 34.358618][ T31] ? usb_match_id.part.0+0x15d/0x1b0 [ 34.363949][ T31] driver_probe_device+0x4c/0x1a0 [ 34.368998][ T31] __device_attach_driver+0x1d0/0x2e0 [ 34.374422][ T31] ? driver_allows_async_probing+0x170/0x170 [ 34.380422][ T31] bus_for_each_drv+0x15f/0x1e0 [ 34.385349][ T31] ? bus_for_each_dev+0x1d0/0x1d0 [ 34.390388][ T31] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 34.396270][ T31] ? lockdep_hardirqs_on+0x79/0x100 [ 34.401517][ T31] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 34.407323][ T31] __device_attach+0x1e4/0x530 [ 34.412124][ T31] ? device_driver_attach+0x210/0x210 [ 34.417514][ T31] ? kobject_uevent_env+0x2a7/0x1640 [ 34.422838][ T31] bus_probe_device+0x1e4/0x290 [ 34.427703][ T31] device_add+0xbd5/0x1e90 [ 34.432165][ T31] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 34.438420][ T31] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 34.444281][ T31] usb_set_configuration+0x1019/0x1900 [ 34.449763][ T31] usb_generic_driver_probe+0xba/0x100 [ 34.455259][ T31] usb_probe_device+0xd4/0x2c0 [ 34.460063][ T31] ? usb_driver_release_interface+0x180/0x180 [ 34.466186][ T31] really_probe+0x249/0xb90 [ 34.470726][ T31] __driver_probe_device+0x1df/0x4d0 [ 34.476011][ T31] driver_probe_device+0x4c/0x1a0 [ 34.481072][ T31] __device_attach_driver+0x1d0/0x2e0 [ 34.486465][ T31] ? driver_allows_async_probing+0x170/0x170 [ 34.492494][ T31] bus_for_each_drv+0x15f/0x1e0 [ 34.497364][ T31] ? bus_for_each_dev+0x1d0/0x1d0 [ 34.502437][ T31] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 34.508260][ T31] ? lockdep_hardirqs_on+0x79/0x100 [ 34.513496][ T31] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 34.519318][ T31] __device_attach+0x1e4/0x530 [ 34.524144][ T31] ? device_driver_attach+0x210/0x210 [ 34.529540][ T31] ? kobject_uevent_env+0x2a7/0x1640 [ 34.534880][ T31] bus_probe_device+0x1e4/0x290 [ 34.539745][ T31] device_add+0xbd5/0x1e90 [ 34.544196][ T31] ? lockdep_hardirqs_on+0x79/0x100 [ 34.549409][ T31] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 34.555697][ T31] ? add_device_randomness+0xb4/0xe0 [ 34.561012][ T31] usb_new_device.cold+0x685/0x10ad [ 34.566224][ T31] ? hub_disconnect+0x510/0x510 [ 34.571117][ T31] ? rwlock_bug.part.0+0x90/0x90 [ 34.576076][ T31] ? _raw_spin_unlock_irq+0x1f/0x40 [ 34.581346][ T31] ? _raw_spin_unlock_irq+0x1f/0x40 [ 34.586557][ T31] hub_event+0x26c7/0x4610 [ 34.591034][ T31] ? hub_port_debounce+0x3b0/0x3b0 [ 34.596171][ T31] ? lock_release+0x780/0x780 [ 34.600908][ T31] ? lock_downgrade+0x6e0/0x6e0 [ 34.605772][ T31] ? do_raw_spin_lock+0x120/0x2a0 [ 34.610857][ T31] process_one_work+0x991/0x1610 [ 34.615809][ T31] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 34.621220][ T31] ? rwlock_bug.part.0+0x90/0x90 [ 34.626184][ T31] ? _raw_spin_lock_irq+0x41/0x50 [ 34.631262][ T31] worker_thread+0x665/0x1080 [ 34.635959][ T31] ? __kthread_parkme+0x15f/0x220 [ 34.641015][ T31] ? process_one_work+0x1610/0x1610 [ 34.646231][ T31] kthread+0x2ea/0x3a0 [ 34.650292][ T31] ? kthread_complete_and_exit+0x40/0x40 [ 34.655960][ T31] ret_from_fork+0x1f/0x30 [ 34.660391][ T31] [ 34.663445][ T31] Kernel panic - not syncing: panic_on_warn set ... [ 34.670031][ T31] CPU: 1 PID: 31 Comm: kworker/1:1 Not tainted 6.0.0-rc4-syzkaller-00066-g7eb2bf871454 #0 [ 34.679905][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 34.689948][ T31] Workqueue: usb_hub_wq hub_event [ 34.694975][ T31] Call Trace: [ 34.698282][ T31] [ 34.701216][ T31] dump_stack_lvl+0xcd/0x134 [ 34.705800][ T31] panic+0x2c8/0x627 [ 34.709684][ T31] ? panic_print_sys_info.part.0+0x10b/0x10b [ 34.715656][ T31] ? __warn.cold+0x248/0x2c4 [ 34.720234][ T31] ? usb_submit_urb+0xed2/0x1880 [ 34.725184][ T31] __warn.cold+0x259/0x2c4 [ 34.729592][ T31] ? usb_submit_urb+0xed2/0x1880 [ 34.734519][ T31] report_bug+0x1bc/0x210 [ 34.738841][ T31] handle_bug+0x3c/0x60 [ 34.743074][ T31] exc_invalid_op+0x14/0x40 [ 34.747570][ T31] asm_exc_invalid_op+0x16/0x20 [ 34.752413][ T31] RIP: 0010:usb_submit_urb+0xed2/0x1880 [ 34.757950][ T31] Code: 7c 24 18 e8 40 2f 8e fd 48 8b 7c 24 18 e8 a6 9d 18 ff 41 89 d8 44 89 e1 4c 89 ea 48 89 c6 48 c7 c7 c0 ba a9 86 e8 0e b2 0d 02 <0f> 0b e9 58 f8 ff ff e8 12 2f 8e fd 48 81 c5 b8 05 00 00 e9 84 f7 [ 34.777638][ T31] RSP: 0018:ffffc90000216e78 EFLAGS: 00010282 [ 34.783697][ T31] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 34.791661][ T31] RDX: ffff888109535580 RSI: ffffffff812c9b68 RDI: fffff52000042dc1 [ 34.799642][ T31] RBP: ffff888100830100 R08: 0000000000000005 R09: 0000000000000000 [ 34.807621][ T31] R10: 0000000080000000 R11: 0000000000000000 R12: 0000000000000001 [ 34.815581][ T31] R13: ffff888118ced708 R14: 0000000000000002 R15: ffff88810081fb00 [ 34.823543][ T31] ? vprintk+0x88/0x90 [ 34.827606][ T31] ? usb_submit_urb+0xed2/0x1880 [ 34.832538][ T31] ? __init_swait_queue_head+0xc6/0x150 [ 34.838092][ T31] usb_start_wait_urb+0x101/0x4b0 [ 34.843117][ T31] ? usb_api_blocking_completion+0xa0/0xa0 [ 34.848916][ T31] ? trace_kmalloc+0x32/0x100 [ 34.853587][ T31] ? memset+0x20/0x40 [ 34.857559][ T31] usb_bulk_msg+0x226/0x550 [ 34.862057][ T31] vmk80xx_write_packet+0x1db/0x260 [ 34.867264][ T31] vmk80xx_auto_attach+0x1544/0x1990 [ 34.872549][ T31] comedi_auto_config+0x16e/0x250 [ 34.877562][ T31] usb_probe_interface+0x30b/0x7f0 [ 34.882678][ T31] ? usb_match_dynamic_id+0x1a0/0x1a0 [ 34.888041][ T31] really_probe+0x249/0xb90 [ 34.892539][ T31] __driver_probe_device+0x1df/0x4d0 [ 34.897815][ T31] ? usb_match_id.part.0+0x15d/0x1b0 [ 34.903109][ T31] driver_probe_device+0x4c/0x1a0 [ 34.908129][ T31] __device_attach_driver+0x1d0/0x2e0 [ 34.913495][ T31] ? driver_allows_async_probing+0x170/0x170 [ 34.919492][ T31] bus_for_each_drv+0x15f/0x1e0 [ 34.924341][ T31] ? bus_for_each_dev+0x1d0/0x1d0 [ 34.929355][ T31] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 34.935152][ T31] ? lockdep_hardirqs_on+0x79/0x100 [ 34.940339][ T31] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 34.946134][ T31] __device_attach+0x1e4/0x530 [ 34.950894][ T31] ? device_driver_attach+0x210/0x210 [ 34.956267][ T31] ? kobject_uevent_env+0x2a7/0x1640 [ 34.961556][ T31] bus_probe_device+0x1e4/0x290 [ 34.966409][ T31] device_add+0xbd5/0x1e90 [ 34.970828][ T31] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 34.977064][ T31] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 34.982867][ T31] usb_set_configuration+0x1019/0x1900 [ 34.988323][ T31] usb_generic_driver_probe+0xba/0x100 [ 34.993780][ T31] usb_probe_device+0xd4/0x2c0 [ 34.998534][ T31] ? usb_driver_release_interface+0x180/0x180 [ 35.004589][ T31] really_probe+0x249/0xb90 [ 35.009085][ T31] __driver_probe_device+0x1df/0x4d0 [ 35.014370][ T31] driver_probe_device+0x4c/0x1a0 [ 35.019396][ T31] __device_attach_driver+0x1d0/0x2e0 [ 35.024782][ T31] ? driver_allows_async_probing+0x170/0x170 [ 35.030754][ T31] bus_for_each_drv+0x15f/0x1e0 [ 35.035597][ T31] ? bus_for_each_dev+0x1d0/0x1d0 [ 35.040619][ T31] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 35.046434][ T31] ? lockdep_hardirqs_on+0x79/0x100 [ 35.051623][ T31] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 35.057430][ T31] __device_attach+0x1e4/0x530 [ 35.062198][ T31] ? device_driver_attach+0x210/0x210 [ 35.067569][ T31] ? kobject_uevent_env+0x2a7/0x1640 [ 35.072851][ T31] bus_probe_device+0x1e4/0x290 [ 35.077700][ T31] device_add+0xbd5/0x1e90 [ 35.082135][ T31] ? lockdep_hardirqs_on+0x79/0x100 [ 35.087339][ T31] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 35.093589][ T31] ? add_device_randomness+0xb4/0xe0 [ 35.098877][ T31] usb_new_device.cold+0x685/0x10ad [ 35.104087][ T31] ? hub_disconnect+0x510/0x510 [ 35.108927][ T31] ? rwlock_bug.part.0+0x90/0x90 [ 35.113858][ T31] ? _raw_spin_unlock_irq+0x1f/0x40 [ 35.119062][ T31] ? _raw_spin_unlock_irq+0x1f/0x40 [ 35.124269][ T31] hub_event+0x26c7/0x4610 [ 35.128679][ T31] ? hub_port_debounce+0x3b0/0x3b0 [ 35.133780][ T31] ? lock_release+0x780/0x780 [ 35.138450][ T31] ? lock_downgrade+0x6e0/0x6e0 [ 35.143296][ T31] ? do_raw_spin_lock+0x120/0x2a0 [ 35.148322][ T31] process_one_work+0x991/0x1610 [ 35.153260][ T31] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 35.158667][ T31] ? rwlock_bug.part.0+0x90/0x90 [ 35.163625][ T31] ? _raw_spin_lock_irq+0x41/0x50 [ 35.168654][ T31] worker_thread+0x665/0x1080 [ 35.173337][ T31] ? __kthread_parkme+0x15f/0x220 [ 35.178354][ T31] ? process_one_work+0x1610/0x1610 [ 35.183557][ T31] kthread+0x2ea/0x3a0 [ 35.187621][ T31] ? kthread_complete_and_exit+0x40/0x40 [ 35.193246][ T31] ret_from_fork+0x1f/0x30 [ 35.197655][ T31] [ 35.200905][ T31] Kernel Offset: disabled [ 35.205280][ T31] Rebooting in 86400 seconds..