Warning: Permanently added '10.128.0.239' (ECDSA) to the list of known hosts. executing program [ 71.483919][ T5] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 71.723829][ T5] usb 1-1: Using ep0 maxpacket: 32 [ 71.844175][ T5] usb 1-1: config 8 has an invalid interface number: 40 but max is 2 [ 71.852466][ T5] usb 1-1: config 8 has an invalid interface number: 150 but max is 2 [ 71.861110][ T5] usb 1-1: config 8 contains an unexpected descriptor of type 0x2, skipping [ 71.869972][ T5] usb 1-1: config 8 has an invalid interface number: 21 but max is 2 [ 71.878189][ T5] usb 1-1: config 8 contains an unexpected descriptor of type 0x2, skipping [ 71.887045][ T5] usb 1-1: config 8 has no interface number 0 [ 71.893166][ T5] usb 1-1: config 8 has no interface number 1 [ 71.899404][ T5] usb 1-1: config 8 has no interface number 2 [ 71.905638][ T5] usb 1-1: config 8 interface 40 altsetting 0 endpoint 0x8D has invalid maxpacket 512, setting to 64 [ 71.916658][ T5] usb 1-1: config 8 interface 150 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 71.927480][ T5] usb 1-1: config 8 interface 150 altsetting 5 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 71.938598][ T5] usb 1-1: config 8 interface 150 altsetting 5 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 71.949611][ T5] usb 1-1: config 8 interface 150 altsetting 5 bulk endpoint 0xB has invalid maxpacket 1024 [ 71.959760][ T5] usb 1-1: config 8 interface 150 altsetting 5 has a duplicate endpoint with address 0xB, skipping [ 71.970522][ T5] usb 1-1: config 8 interface 150 altsetting 5 has a duplicate endpoint with address 0x6, skipping [ 71.981268][ T5] usb 1-1: config 8 interface 150 altsetting 5 endpoint 0x7 has an invalid bInterval 128, changing to 7 [ 71.992479][ T5] usb 1-1: config 8 interface 150 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 72.003240][ T5] usb 1-1: config 8 interface 150 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 72.013980][ T5] usb 1-1: config 8 interface 150 altsetting 5 has a duplicate endpoint with address 0x5, skipping [ 72.024900][ T5] usb 1-1: config 8 interface 150 altsetting 5 has an invalid endpoint with address 0x80, skipping [ 72.035632][ T5] usb 1-1: config 8 interface 150 altsetting 5 has a duplicate endpoint with address 0xC, skipping [ 72.046378][ T5] usb 1-1: config 8 interface 21 altsetting 128 bulk endpoint 0x4 has invalid maxpacket 32 [ 72.056416][ T5] usb 1-1: config 8 interface 21 altsetting 128 has an invalid endpoint with address 0x80, skipping [ 72.067243][ T5] usb 1-1: config 8 interface 21 altsetting 128 has a duplicate endpoint with address 0xC, skipping [ 72.078080][ T5] usb 1-1: config 8 interface 21 altsetting 128 has a duplicate endpoint with address 0x6, skipping [ 72.088920][ T5] usb 1-1: config 8 interface 21 altsetting 128 has a duplicate endpoint with address 0xD, skipping [ 72.099748][ T5] usb 1-1: config 8 interface 21 altsetting 128 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 72.110849][ T5] usb 1-1: config 8 interface 21 altsetting 128 has a duplicate endpoint with address 0x8, skipping [ 72.121687][ T5] usb 1-1: config 8 interface 21 altsetting 128 has a duplicate endpoint with address 0xA, skipping [ 72.132536][ T5] usb 1-1: config 8 interface 21 altsetting 128 has a duplicate endpoint with address 0x8, skipping [ 72.143383][ T5] usb 1-1: config 8 interface 21 altsetting 128 has a duplicate endpoint with address 0xD, skipping [ 72.154251][ T5] usb 1-1: config 8 interface 150 has no altsetting 0 [ 72.161019][ T5] usb 1-1: config 8 interface 21 has no altsetting 0 [ 72.323836][ T5] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9170, bcdDevice=be.33 [ 72.332919][ T5] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.342040][ T5] usb 1-1: Product: syz [ 72.346808][ T5] usb 1-1: Manufacturer: syz [ 72.351395][ T5] usb 1-1: SerialNumber: syz executing program [ 73.095890][ T5] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 73.343651][ T5] usb 1-1: Using ep0 maxpacket: 32 [ 74.015425][ T2993] usb 1-1: driver API: 1.9.9 2016-02-15 [1-1] [ 74.021703][ T2993] usb 1-1: firmware API: 1.9.6 2012-07-07 [ 74.032972][ T5] ------------[ cut here ]------------ [ 74.039281][ T5] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 74.046409][ T5] WARNING: CPU: 0 PID: 5 at drivers/usb/core/urb.c:502 usb_submit_urb+0xed2/0x18a0 [ 74.055892][ T5] Modules linked in: [ 74.059812][ T5] CPU: 0 PID: 5 Comm: kworker/0:0 Not tainted 5.14.0-rc4-next-20210806-syzkaller #0 [ 74.069599][ T5] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 74.079819][ T5] Workqueue: usb_hub_wq hub_event [ 74.084933][ T5] RIP: 0010:usb_submit_urb+0xed2/0x18a0 [ 74.090496][ T5] Code: 7c 24 18 e8 00 1a 20 fc 48 8b 7c 24 18 e8 76 9c 0b ff 41 89 d8 44 89 e1 4c 89 ea 48 89 c6 48 c7 c7 60 4d 28 8a e8 40 11 96 03 <0f> 0b e9 58 f8 ff ff e8 d2 19 20 fc 48 81 c5 48 06 00 00 e9 84 f7 executing program [ 74.110214][ T5] RSP: 0018:ffffc90000ca6e88 EFLAGS: 00010282 [ 74.116348][ T5] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 74.124374][ T5] RDX: ffff888011ad8000 RSI: ffffffff815d9a18 RDI: fffff52000194dc3 [ 74.132380][ T5] RBP: ffff888077943800 R08: 0000000000000000 R09: 0000000000000000 [ 74.140410][ T5] R10: ffffffff815d37be R11: 0000000000000000 R12: 0000000000000001 [ 74.148463][ T5] R13: ffff888011cf9140 R14: 0000000000000002 R15: ffff88801cbf8b00 [ 74.163559][ T5] FS: 0000000000000000(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 74.172529][ T5] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 74.180095][ T5] CR2: 00007fe360dcf6f3 CR3: 000000001e729000 CR4: 00000000001506f0 [ 74.188691][ T5] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 74.197301][ T5] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 74.205914][ T5] Call Trace: [ 74.209199][ T5] carl9170_usb_submit_cmd_urb+0x7e/0x130 [ 74.215704][ T5] __carl9170_exec_cmd+0x30b/0x5b0 [ 74.220857][ T5] carl9170_reboot+0xaf/0xf0 [ 74.226188][ T5] carl9170_usb_disconnect+0x141/0x190 [ 74.231648][ T5] usb_unbind_interface+0x1d8/0x8d0 [ 74.237640][ T5] ? up_write+0x148/0x470 [ 74.242073][ T5] ? kernfs_remove_by_name_ns+0x60/0xa0 [ 74.248458][ T5] ? usb_unbind_device+0x1a0/0x1a0 [ 74.254199][ T5] __device_release_driver+0x5d7/0x700 [ 74.259670][ T5] device_release_driver+0x26/0x40 [ 74.265850][ T5] usb_forced_unbind_intf+0x17d/0x220 [ 74.271222][ T5] usb_reset_device+0x39b/0x9a0 [ 74.276916][ T5] carl9170_usb_probe+0x48/0xd30 [ 74.281861][ T5] usb_probe_interface+0x315/0x7f0 [ 74.287935][ T5] ? usb_match_dynamic_id+0x1a0/0x1a0 [ 74.293310][ T5] really_probe+0x245/0xcc0 [ 74.298602][ T5] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 74.305399][ T5] __driver_probe_device+0x338/0x4d0 [ 74.310686][ T5] driver_probe_device+0x4c/0x1a0 [ 74.316559][ T5] __device_attach_driver+0x20b/0x2f0 [ 74.321955][ T5] ? driver_allows_async_probing+0x150/0x150 [ 74.328748][ T5] bus_for_each_drv+0x15f/0x1e0 [ 74.334111][ T5] ? bus_for_each_dev+0x1d0/0x1d0 [ 74.339133][ T5] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 74.345865][ T5] ? lockdep_hardirqs_on+0x79/0x100 [ 74.351072][ T5] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 74.357687][ T5] __device_attach+0x228/0x4a0 [ 74.362470][ T5] ? device_driver_attach+0x210/0x210 [ 74.368649][ T5] ? kobject_uevent_env+0x2bb/0x1650 [ 74.374708][ T5] bus_probe_device+0x1e4/0x290 [ 74.379563][ T5] device_add+0xc35/0x21b0 [ 74.384855][ T5] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 74.391096][ T5] ? __fw_devlink_link_to_suppliers+0x5e0/0x5e0 [ 74.398499][ T5] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 74.404854][ T5] ? create_intf_ep_devs.isra.0+0x18d/0x1f0 [ 74.410757][ T5] usb_set_configuration+0x113f/0x1910 [ 74.417015][ T5] usb_generic_driver_probe+0xba/0x100 [ 74.422486][ T5] usb_probe_device+0xd9/0x2c0 [ 74.428010][ T5] ? usb_driver_release_interface+0x180/0x180 [ 74.434568][ T5] really_probe+0x245/0xcc0 [ 74.439068][ T5] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 74.446154][ T5] __driver_probe_device+0x338/0x4d0 [ 74.451453][ T5] driver_probe_device+0x4c/0x1a0 [ 74.457257][ T5] __device_attach_driver+0x20b/0x2f0 [ 74.462630][ T5] ? driver_allows_async_probing+0x150/0x150 [ 74.469503][ T5] bus_for_each_drv+0x15f/0x1e0 [ 74.474872][ T5] ? bus_for_each_dev+0x1d0/0x1d0 [ 74.479892][ T5] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 74.486703][ T5] ? lockdep_hardirqs_on+0x79/0x100 [ 74.491902][ T5] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 74.498609][ T5] __device_attach+0x228/0x4a0 [ 74.503391][ T5] ? device_driver_attach+0x210/0x210 [ 74.509622][ T5] ? kobject_uevent_env+0x2bb/0x1650 [ 74.515459][ T5] bus_probe_device+0x1e4/0x290 [ 74.520312][ T5] device_add+0xc35/0x21b0 [ 74.525638][ T5] ? __fw_devlink_link_to_suppliers+0x5e0/0x5e0 [ 74.531880][ T5] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 74.538945][ T5] usb_new_device.cold+0x63f/0x108e [ 74.544756][ T5] ? hub_disconnect+0x510/0x510 [ 74.549607][ T5] ? rwlock_bug.part.0+0x90/0x90 [ 74.555427][ T5] ? _raw_spin_unlock_irq+0x1f/0x40 [ 74.560630][ T5] hub_event+0x2357/0x4330 [ 74.565943][ T5] ? hub_port_debounce+0x3c0/0x3c0 [ 74.571056][ T5] ? lock_release+0x720/0x720 [ 74.576505][ T5] ? lock_downgrade+0x6e0/0x6e0 [ 74.581363][ T5] ? do_raw_spin_lock+0x120/0x2b0 [ 74.587259][ T5] process_one_work+0x98d/0x1630 [ 74.592208][ T5] ? pwq_dec_nr_in_flight+0x320/0x320 [ 74.598617][ T5] ? rwlock_bug.part.0+0x90/0x90 [ 74.604172][ T5] ? _raw_spin_lock_irq+0x41/0x50 [ 74.609201][ T5] worker_thread+0x658/0x11f0 [ 74.615075][ T5] ? process_one_work+0x1630/0x1630 [ 74.620277][ T5] kthread+0x3e5/0x4d0 [ 74.625156][ T5] ? set_kthread_struct+0x130/0x130 [ 74.630354][ T5] ret_from_fork+0x1f/0x30 [ 74.635624][ T5] Kernel panic - not syncing: panic_on_warn set ... [ 74.642208][ T5] CPU: 0 PID: 5 Comm: kworker/0:0 Not tainted 5.14.0-rc4-next-20210806-syzkaller #0 [ 74.651603][ T5] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 74.661652][ T5] Workqueue: usb_hub_wq hub_event [ 74.666678][ T5] Call Trace: [ 74.670004][ T5] dump_stack_lvl+0xcd/0x134 [ 74.674617][ T5] panic+0x2b0/0x6dd [ 74.678505][ T5] ? __warn_printk+0xf3/0xf3 [ 74.683091][ T5] ? __warn.cold+0x1a/0x44 [ 74.687498][ T5] ? usb_submit_urb+0xed2/0x18a0 [ 74.692427][ T5] __warn.cold+0x35/0x44 [ 74.696660][ T5] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 74.702934][ T5] ? usb_submit_urb+0xed2/0x18a0 [ 74.707863][ T5] report_bug+0x1bd/0x210 [ 74.712202][ T5] handle_bug+0x3c/0x60 [ 74.716360][ T5] exc_invalid_op+0x14/0x40 [ 74.720862][ T5] asm_exc_invalid_op+0x12/0x20 [ 74.725708][ T5] RIP: 0010:usb_submit_urb+0xed2/0x18a0 [ 74.731280][ T5] Code: 7c 24 18 e8 00 1a 20 fc 48 8b 7c 24 18 e8 76 9c 0b ff 41 89 d8 44 89 e1 4c 89 ea 48 89 c6 48 c7 c7 60 4d 28 8a e8 40 11 96 03 <0f> 0b e9 58 f8 ff ff e8 d2 19 20 fc 48 81 c5 48 06 00 00 e9 84 f7 [ 74.750882][ T5] RSP: 0018:ffffc90000ca6e88 EFLAGS: 00010282 [ 74.756942][ T5] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 74.764906][ T5] RDX: ffff888011ad8000 RSI: ffffffff815d9a18 RDI: fffff52000194dc3 [ 74.772873][ T5] RBP: ffff888077943800 R08: 0000000000000000 R09: 0000000000000000 [ 74.780838][ T5] R10: ffffffff815d37be R11: 0000000000000000 R12: 0000000000000001 [ 74.788800][ T5] R13: ffff888011cf9140 R14: 0000000000000002 R15: ffff88801cbf8b00 [ 74.796768][ T5] ? wake_up_klogd.part.0+0x8e/0xd0 [ 74.801967][ T5] ? vprintk+0x88/0x90 [ 74.806033][ T5] ? usb_submit_urb+0xed2/0x18a0 [ 74.810986][ T5] carl9170_usb_submit_cmd_urb+0x7e/0x130 [ 74.816724][ T5] __carl9170_exec_cmd+0x30b/0x5b0 [ 74.821838][ T5] carl9170_reboot+0xaf/0xf0 [ 74.826517][ T5] carl9170_usb_disconnect+0x141/0x190 [ 74.831977][ T5] usb_unbind_interface+0x1d8/0x8d0 [ 74.837170][ T5] ? up_write+0x148/0x470 [ 74.841516][ T5] ? kernfs_remove_by_name_ns+0x60/0xa0 [ 74.847064][ T5] ? usb_unbind_device+0x1a0/0x1a0 [ 74.852173][ T5] __device_release_driver+0x5d7/0x700 [ 74.857640][ T5] device_release_driver+0x26/0x40 [ 74.862749][ T5] usb_forced_unbind_intf+0x17d/0x220 [ 74.868122][ T5] usb_reset_device+0x39b/0x9a0 [ 74.872979][ T5] carl9170_usb_probe+0x48/0xd30 [ 74.877924][ T5] usb_probe_interface+0x315/0x7f0 [ 74.883051][ T5] ? usb_match_dynamic_id+0x1a0/0x1a0 [ 74.888426][ T5] really_probe+0x245/0xcc0 [ 74.892924][ T5] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 74.899180][ T5] __driver_probe_device+0x338/0x4d0 [ 74.904471][ T5] driver_probe_device+0x4c/0x1a0 [ 74.909496][ T5] __device_attach_driver+0x20b/0x2f0 [ 74.914871][ T5] ? driver_allows_async_probing+0x150/0x150 [ 74.920852][ T5] bus_for_each_drv+0x15f/0x1e0 [ 74.925701][ T5] ? bus_for_each_dev+0x1d0/0x1d0 [ 74.930722][ T5] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 74.936529][ T5] ? lockdep_hardirqs_on+0x79/0x100 [ 74.941740][ T5] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 74.947552][ T5] __device_attach+0x228/0x4a0 [ 74.952316][ T5] ? device_driver_attach+0x210/0x210 [ 74.957702][ T5] ? kobject_uevent_env+0x2bb/0x1650 [ 74.962992][ T5] bus_probe_device+0x1e4/0x290 [ 74.967846][ T5] device_add+0xc35/0x21b0 [ 74.972264][ T5] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 74.978505][ T5] ? __fw_devlink_link_to_suppliers+0x5e0/0x5e0 [ 74.984743][ T5] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 74.990458][ T5] ? create_intf_ep_devs.isra.0+0x18d/0x1f0 [ 74.996363][ T5] usb_set_configuration+0x113f/0x1910 [ 75.001841][ T5] usb_generic_driver_probe+0xba/0x100 [ 75.007304][ T5] usb_probe_device+0xd9/0x2c0 [ 75.012074][ T5] ? usb_driver_release_interface+0x180/0x180 [ 75.018148][ T5] really_probe+0x245/0xcc0 [ 75.022648][ T5] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 75.028892][ T5] __driver_probe_device+0x338/0x4d0 [ 75.034183][ T5] driver_probe_device+0x4c/0x1a0 [ 75.039207][ T5] __device_attach_driver+0x20b/0x2f0 [ 75.044578][ T5] ? driver_allows_async_probing+0x150/0x150 [ 75.050560][ T5] bus_for_each_drv+0x15f/0x1e0 [ 75.055412][ T5] ? bus_for_each_dev+0x1d0/0x1d0 [ 75.060432][ T5] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 75.066240][ T5] ? lockdep_hardirqs_on+0x79/0x100 [ 75.071437][ T5] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 75.077248][ T5] __device_attach+0x228/0x4a0 [ 75.082009][ T5] ? device_driver_attach+0x210/0x210 [ 75.087389][ T5] ? kobject_uevent_env+0x2bb/0x1650 [ 75.092677][ T5] bus_probe_device+0x1e4/0x290 [ 75.097529][ T5] device_add+0xc35/0x21b0 [ 75.101948][ T5] ? __fw_devlink_link_to_suppliers+0x5e0/0x5e0 [ 75.108189][ T5] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 75.114447][ T5] usb_new_device.cold+0x63f/0x108e [ 75.119654][ T5] ? hub_disconnect+0x510/0x510 [ 75.124502][ T5] ? rwlock_bug.part.0+0x90/0x90 [ 75.129438][ T5] ? _raw_spin_unlock_irq+0x1f/0x40 [ 75.134641][ T5] hub_event+0x2357/0x4330 [ 75.139082][ T5] ? hub_port_debounce+0x3c0/0x3c0 [ 75.144199][ T5] ? lock_release+0x720/0x720 [ 75.148870][ T5] ? lock_downgrade+0x6e0/0x6e0 [ 75.153812][ T5] ? do_raw_spin_lock+0x120/0x2b0 [ 75.158849][ T5] process_one_work+0x98d/0x1630 [ 75.163798][ T5] ? pwq_dec_nr_in_flight+0x320/0x320 [ 75.169176][ T5] ? rwlock_bug.part.0+0x90/0x90 [ 75.174107][ T5] ? _raw_spin_lock_irq+0x41/0x50 [ 75.179140][ T5] worker_thread+0x658/0x11f0 [ 75.183828][ T5] ? process_one_work+0x1630/0x1630 [ 75.189030][ T5] kthread+0x3e5/0x4d0 [ 75.193100][ T5] ? set_kthread_struct+0x130/0x130 [ 75.198301][ T5] ret_from_fork+0x1f/0x30 [ 75.204002][ T5] Kernel Offset: disabled [ 75.208411][ T5] Rebooting in 86400 seconds..