Warning: Permanently added '10.128.1.142' (ED25519) to the list of known hosts.
executing program
[ 41.745889][ T29] audit: type=1400 audit(1738499922.015:80): avc: denied { execmem } for pid=2944 comm="syz-executor367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 41.769692][ T29] audit: type=1400 audit(1738499922.015:81): avc: denied { read write } for pid=2945 comm="syz-executor367" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 41.794121][ T29] audit: type=1400 audit(1738499922.015:82): avc: denied { open } for pid=2945 comm="syz-executor367" path="/dev/raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 41.818093][ T29] audit: type=1400 audit(1738499922.015:83): avc: denied { ioctl } for pid=2945 comm="syz-executor367" path="/dev/raw-gadget" dev="devtmpfs" ino=236 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 41.991500][ T36] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 42.151362][ T36] usb 1-1: Using ep0 maxpacket: 16
[ 42.158529][ T36] usb 1-1: config 64 has an invalid interface number: 69 but max is 3
[ 42.166880][ T36] usb 1-1: config 64 has an invalid interface number: 42 but max is 3
[ 42.175120][ T36] usb 1-1: config 64 has an invalid interface number: 66 but max is 3
[ 42.183429][ T36] usb 1-1: config 64 has an invalid interface number: 240 but max is 3
[ 42.191761][ T36] usb 1-1: config 64 has no interface number 0
[ 42.197949][ T36] usb 1-1: config 64 has no interface number 1
[ 42.204164][ T36] usb 1-1: config 64 has no interface number 2
[ 42.210351][ T36] usb 1-1: config 64 has no interface number 3
[ 42.216655][ T36] usb 1-1: config 64 interface 69 altsetting 239 endpoint 0x7 has invalid maxpacket 1024, setting to 64
[ 42.227863][ T36] usb 1-1: config 64 interface 69 altsetting 239 bulk endpoint 0xA has invalid maxpacket 1023
[ 42.238280][ T36] usb 1-1: config 64 interface 69 altsetting 239 has an endpoint descriptor with address 0x91, changing to 0x81
[ 42.250199][ T36] usb 1-1: config 64 interface 69 altsetting 239 bulk endpoint 0x81 has invalid maxpacket 64
[ 42.260555][ T36] usb 1-1: config 64 interface 42 altsetting 8 endpoint 0x8 has invalid maxpacket 1024, setting to 64
[ 42.271623][ T36] usb 1-1: config 64 interface 42 altsetting 8 has a duplicate endpoint with address 0x1, skipping
[ 42.282405][ T36] usb 1-1: config 64 interface 42 altsetting 8 endpoint 0x5 has invalid maxpacket 1024, setting to 64
[ 42.293412][ T36] usb 1-1: config 64 interface 42 altsetting 8 endpoint 0x3 has invalid maxpacket 96, setting to 64
[ 42.304335][ T36] usb 1-1: config 64 interface 42 altsetting 8 has a duplicate endpoint with address 0xE, skipping
[ 42.315144][ T36] usb 1-1: config 64 interface 42 altsetting 8 has a duplicate endpoint with address 0x1, skipping
[ 42.325909][ T36] usb 1-1: config 64 interface 42 altsetting 8 has a duplicate endpoint with address 0xD, skipping
[ 42.336665][ T36] usb 1-1: config 64 interface 42 altsetting 8 has a duplicate endpoint with address 0x4, skipping
[ 42.347425][ T36] usb 1-1: config 64 interface 42 altsetting 8 has an endpoint descriptor with address 0xA5, changing to 0x85
[ 42.359331][ T36] usb 1-1: config 64 interface 42 altsetting 8 has a duplicate endpoint with address 0x85, skipping
[ 42.370362][ T36] usb 1-1: config 64 interface 42 altsetting 8 has a duplicate endpoint with address 0x4, skipping
[ 42.381122][ T36] usb 1-1: config 64 interface 42 altsetting 8 has a duplicate endpoint with address 0x4, skipping
[ 42.391953][ T36] usb 1-1: config 64 interface 69 has no altsetting 0
[ 42.398740][ T36] usb 1-1: config 64 interface 42 has no altsetting 0
[ 42.405692][ T36] usb 1-1: config 64 interface 66 has no altsetting 0
[ 42.412676][ T36] usb 1-1: config 64 interface 240 has no altsetting 0
[ 42.421720][ T36] usb 1-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=1a.86
[ 42.430865][ T36] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 42.439226][ T36] usb 1-1: Product: syz
[ 42.443587][ T36] usb 1-1: Manufacturer: syz
[ 42.448202][ T36] usb 1-1: SerialNumber: syz
executing program
[ 42.668254][ T36] ------------[ cut here ]------------
[ 42.674136][ T36] usb 1-1: BOGUS urb xfer, pipe 3 != type 1
[ 42.680716][ T36] WARNING: CPU: 1 PID: 36 at drivers/usb/core/urb.c:503 usb_submit_urb+0xe4b/0x1730
[ 42.690499][ T36] Modules linked in:
[ 42.694866][ T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/1:1 Not tainted 6.13.0-syzkaller-09485-g72deda0abee6 #0
[ 42.705209][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[ 42.715347][ T36] Workqueue: usb_hub_wq hub_event
[ 42.720407][ T36] RIP: 0010:usb_submit_urb+0xe4b/0x1730
[ 42.726163][ T36] Code: 84 3c 02 00 00 e8 35 b2 ee fc 4c 89 ef e8 9d db d4 fe 45 89 e0 89 e9 4c 89 f2 48 89 c6 48 c7 c7 c0 3e a2 87 e8 46 d4 b2 fc 90 <0f> 0b 90 90 e9 e9 f8 ff ff e8 07 b2 ee fc 49 81 c4 b8 05 00 00 e9
[ 42.745889][ T36] RSP: 0018:ffffc90000266d10 EFLAGS: 00010286
[ 42.752125][ T36] RAX: 0000000000000000 RBX: ffff88811292c700 RCX: ffffffff813f4aa9
[ 42.760320][ T36] RDX: ffff888102ed57c0 RSI: ffffffff813f4ab6 RDI: 0000000000000001
[ 42.768379][ T36] RBP: 0000000000000003 R08: 0000000000000001 R09: 0000000000000000
[ 42.776452][ T36] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001
[ 42.784503][ T36] R13: ffff88811703a0a8 R14: ffff8881196f9bc0 R15: ffff88811292c77c
[ 42.792568][ T36] FS: 0000000000000000(0000) GS:ffff8881f5900000(0000) knlGS:0000000000000000
[ 42.801582][ T36] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 42.808211][ T36] CR2: 000055a451d5fe78 CR3: 0000000117714000 CR4: 00000000003506f0
[ 42.816254][ T36] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 42.824299][ T36] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 42.832364][ T36] Call Trace:
[ 42.835687][ T36]
[ 42.838644][ T36] ? __warn+0xea/0x3c0
[ 42.842848][ T36] ? usb_submit_urb+0xe4b/0x1730
[ 42.847877][ T36] ? report_bug+0x3c0/0x580
[ 42.852496][ T36] ? handle_bug+0x54/0xa0
[ 42.856905][ T36] ? exc_invalid_op+0x17/0x50
[ 42.861726][ T36] ? asm_exc_invalid_op+0x1a/0x20
[ 42.866824][ T36] ? __warn_printk+0x199/0x350
[ 42.871672][ T36] ? __warn_printk+0x1a6/0x350
[ 42.876499][ T36] ? usb_submit_urb+0xe4b/0x1730
[ 42.881542][ T36] ? __init_swait_queue_head+0xca/0x150
[ 42.887155][ T36] cxacru_cm+0x3d1/0xd20
[ 42.891497][ T36] ? __pfx_cxacru_cm+0x10/0x10
[ 42.896310][ T36] ? lockdep_init_map_type+0x16d/0x7d0
[ 42.901872][ T36] ? rcu_is_watching+0x12/0xc0
[ 42.906708][ T36] cxacru_card_status+0x21/0xd0
[ 42.911674][ T36] cxacru_bind+0xad1/0x13d0
[ 42.916245][ T36] ? __pfx_cxacru_bind+0x10/0x10
[ 42.921267][ T36] ? usb_string+0x3d7/0x670
[ 42.925842][ T36] ? usb_string+0x3dc/0x670
[ 42.930388][ T36] ? __pfx_cxacru_bind+0x10/0x10
[ 42.935428][ T36] usbatm_usb_probe+0x366/0x1c30
[ 42.940608][ T36] ? __pm_runtime_set_status+0x4e5/0x9a0
[ 42.946384][ T36] ? mark_held_locks+0x9f/0xe0
[ 42.951293][ T36] cxacru_usb_probe+0x102/0x220
[ 42.956185][ T36] ? __pfx_cxacru_usb_probe+0x10/0x10
[ 42.961640][ T36] ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 42.967505][ T36] ? __pm_runtime_set_status+0x13c/0x9a0
[ 42.973265][ T36] usb_probe_interface+0x300/0x9c0
[ 42.978443][ T36] ? __pfx_usb_probe_interface+0x10/0x10
[ 42.984255][ T36] really_probe+0x23e/0xa90
[ 42.988832][ T36] __driver_probe_device+0x1de/0x440
[ 42.994218][ T36] driver_probe_device+0x4c/0x1b0
[ 42.999308][ T36] __device_attach_driver+0x1df/0x310
[ 43.004889][ T36] ? __pfx___device_attach_driver+0x10/0x10
[ 43.010871][ T36] bus_for_each_drv+0x157/0x1e0
[ 43.015879][ T36] ? __pfx_bus_for_each_drv+0x10/0x10
[ 43.021357][ T36] ? lockdep_hardirqs_on+0x7c/0x110
[ 43.026597][ T36] ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 43.032577][ T36] __device_attach+0x1e8/0x4b0
[ 43.037650][ T36] ? __pfx___device_attach+0x10/0x10
[ 43.043047][ T36] ? do_raw_spin_unlock+0x172/0x230
[ 43.048321][ T36] bus_probe_device+0x17f/0x1c0
[ 43.053284][ T36] device_add+0x114b/0x1a70
[ 43.057845][ T36] ? __pfx_device_add+0x10/0x10
[ 43.062866][ T36] ? usb_cache_string+0xf2/0x150
[ 43.067886][ T36] usb_set_configuration+0x10cb/0x1c50
[ 43.073502][ T36] ? __pfx_usb_generic_driver_probe+0x10/0x10
[ 43.079666][ T36] usb_generic_driver_probe+0xb1/0x110
[ 43.085299][ T36] usb_probe_device+0xec/0x3e0
[ 43.090178][ T36] ? __pfx_usb_probe_device+0x10/0x10
[ 43.095684][ T36] really_probe+0x23e/0xa90
[ 43.100279][ T36] __driver_probe_device+0x1de/0x440
[ 43.105766][ T36] ? usb_driver_applicable+0x1c7/0x220
[ 43.111436][ T36] driver_probe_device+0x4c/0x1b0
[ 43.116555][ T36] __device_attach_driver+0x1df/0x310
[ 43.122065][ T36] ? __pfx___device_attach_driver+0x10/0x10
[ 43.128063][ T36] bus_for_each_drv+0x157/0x1e0
[ 43.133144][ T36] ? __pfx_bus_for_each_drv+0x10/0x10
[ 43.138777][ T36] ? lockdep_hardirqs_on+0x7c/0x110
[ 43.144082][ T36] ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 43.150057][ T36] __device_attach+0x1e8/0x4b0
[ 43.155135][ T36] ? __pfx___device_attach+0x10/0x10
[ 43.160510][ T36] ? do_raw_spin_unlock+0x172/0x230
[ 43.165946][ T36] bus_probe_device+0x17f/0x1c0
[ 43.171442][ T36] device_add+0x114b/0x1a70
[ 43.176077][ T36] ? __pfx_device_add+0x10/0x10
[ 43.181077][ T36] ? add_device_randomness+0xb8/0xf0
[ 43.186499][ T36] usb_new_device+0xd09/0x1a20
[ 43.191528][ T36] ? __pfx_usb_new_device+0x10/0x10
[ 43.196792][ T36] hub_event+0x2e58/0x4f40
[ 43.201370][ T36] ? __pfx_hub_event+0x10/0x10
[ 43.206330][ T36] ? __pfx_lock_acquire.part.0+0x10/0x10
[ 43.212222][ T36] ? rcu_is_watching+0x12/0xc0
[ 43.217071][ T36] ? trace_lock_acquire+0x14e/0x1f0
[ 43.223165][ T36] ? process_one_work+0x921/0x1ba0
[ 43.228346][ T36] ? lock_acquire+0x2f/0xb0
[ 43.232968][ T36] ? process_one_work+0x921/0x1ba0
[ 43.238167][ T36] process_one_work+0x9c5/0x1ba0
[ 43.243231][ T36] ? __pfx_hcd_resume_work+0x10/0x10
[ 43.248587][ T36] ? __pfx_process_one_work+0x10/0x10
[ 43.254105][ T36] ? assign_work+0x1a0/0x250
[ 43.258821][ T36] worker_thread+0x6c8/0xf00
[ 43.263548][ T36] ? __kthread_parkme+0x148/0x220
[ 43.268640][ T36] ? __pfx_worker_thread+0x10/0x10
[ 43.274011][ T36] kthread+0x3af/0x750
[ 43.278160][ T36] ? __pfx_kthread+0x10/0x10
[ 43.282935][ T36] ? lock_acquire+0x2f/0xb0
[ 43.287498][ T36] ? __pfx_kthread+0x10/0x10
[ 43.292292][ T36] ret_from_fork+0x45/0x80
[ 43.296811][ T36] ? __pfx_kthread+0x10/0x10
[ 43.301527][ T36] ret_from_fork_asm+0x1a/0x30
[ 43.306421][ T36]
[ 43.309550][ T36] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 43.317125][ T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/1:1 Not tainted 6.13.0-syzkaller-09485-g72deda0abee6 #0
[ 43.327486][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[ 43.337656][ T36] Workqueue: usb_hub_wq hub_event
[ 43.342786][ T36] Call Trace:
[ 43.346160][ T36]
[ 43.349123][ T36] dump_stack_lvl+0x3d/0x1f0
[ 43.353774][ T36] panic+0x71d/0x800
[ 43.357731][ T36] ? __pfx_panic+0x10/0x10
[ 43.362182][ T36] ? show_trace_log_lvl+0x29d/0x3d0
[ 43.367422][ T36] ? check_panic_on_warn+0x1f/0xb0
[ 43.372590][ T36] ? usb_submit_urb+0xe4b/0x1730
[ 43.377650][ T36] check_panic_on_warn+0xab/0xb0
[ 43.382623][ T36] __warn+0xf6/0x3c0
[ 43.386551][ T36] ? usb_submit_urb+0xe4b/0x1730
[ 43.391633][ T36] report_bug+0x3c0/0x580
[ 43.396001][ T36] handle_bug+0x54/0xa0
[ 43.400193][ T36] exc_invalid_op+0x17/0x50
[ 43.404727][ T36] asm_exc_invalid_op+0x1a/0x20
[ 43.409623][ T36] RIP: 0010:usb_submit_urb+0xe4b/0x1730
[ 43.415206][ T36] Code: 84 3c 02 00 00 e8 35 b2 ee fc 4c 89 ef e8 9d db d4 fe 45 89 e0 89 e9 4c 89 f2 48 89 c6 48 c7 c7 c0 3e a2 87 e8 46 d4 b2 fc 90 <0f> 0b 90 90 e9 e9 f8 ff ff e8 07 b2 ee fc 49 81 c4 b8 05 00 00 e9
[ 43.434925][ T36] RSP: 0018:ffffc90000266d10 EFLAGS: 00010286
[ 43.441017][ T36] RAX: 0000000000000000 RBX: ffff88811292c700 RCX: ffffffff813f4aa9
[ 43.449017][ T36] RDX: ffff888102ed57c0 RSI: ffffffff813f4ab6 RDI: 0000000000000001
[ 43.457203][ T36] RBP: 0000000000000003 R08: 0000000000000001 R09: 0000000000000000
[ 43.465201][ T36] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001
[ 43.473189][ T36] R13: ffff88811703a0a8 R14: ffff8881196f9bc0 R15: ffff88811292c77c
[ 43.481198][ T36] ? __warn_printk+0x199/0x350
[ 43.486020][ T36] ? __warn_printk+0x1a6/0x350
[ 43.490821][ T36] ? __init_swait_queue_head+0xca/0x150
[ 43.496420][ T36] cxacru_cm+0x3d1/0xd20
[ 43.500736][ T36] ? __pfx_cxacru_cm+0x10/0x10
[ 43.505616][ T36] ? lockdep_init_map_type+0x16d/0x7d0
[ 43.511113][ T36] ? rcu_is_watching+0x12/0xc0
[ 43.515920][ T36] cxacru_card_status+0x21/0xd0
[ 43.520891][ T36] cxacru_bind+0xad1/0x13d0
[ 43.525426][ T36] ? __pfx_cxacru_bind+0x10/0x10
[ 43.530387][ T36] ? usb_string+0x3d7/0x670
[ 43.534919][ T36] ? usb_string+0x3dc/0x670
[ 43.539449][ T36] ? __pfx_cxacru_bind+0x10/0x10
[ 43.544435][ T36] usbatm_usb_probe+0x366/0x1c30
[ 43.549438][ T36] ? __pm_runtime_set_status+0x4e5/0x9a0
[ 43.555134][ T36] ? mark_held_locks+0x9f/0xe0
[ 43.559943][ T36] cxacru_usb_probe+0x102/0x220
[ 43.564851][ T36] ? __pfx_cxacru_usb_probe+0x10/0x10
[ 43.570254][ T36] ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 43.576083][ T36] ? __pm_runtime_set_status+0x13c/0x9a0
[ 43.581852][ T36] usb_probe_interface+0x300/0x9c0
[ 43.586996][ T36] ? __pfx_usb_probe_interface+0x10/0x10
[ 43.592680][ T36] really_probe+0x23e/0xa90
[ 43.597230][ T36] __driver_probe_device+0x1de/0x440
[ 43.602549][ T36] driver_probe_device+0x4c/0x1b0
[ 43.607603][ T36] __device_attach_driver+0x1df/0x310
[ 43.613020][ T36] ? __pfx___device_attach_driver+0x10/0x10
[ 43.618947][ T36] bus_for_each_drv+0x157/0x1e0
[ 43.623839][ T36] ? __pfx_bus_for_each_drv+0x10/0x10
[ 43.629257][ T36] ? lockdep_hardirqs_on+0x7c/0x110
[ 43.634492][ T36] ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 43.640331][ T36] __device_attach+0x1e8/0x4b0
[ 43.645136][ T36] ? __pfx___device_attach+0x10/0x10
[ 43.650458][ T36] ? do_raw_spin_unlock+0x172/0x230
[ 43.655688][ T36] bus_probe_device+0x17f/0x1c0
[ 43.660583][ T36] device_add+0x114b/0x1a70
[ 43.665124][ T36] ? __pfx_device_add+0x10/0x10
[ 43.670002][ T36] ? usb_cache_string+0xf2/0x150
[ 43.674972][ T36] usb_set_configuration+0x10cb/0x1c50
[ 43.680473][ T36] ? __pfx_usb_generic_driver_probe+0x10/0x10
[ 43.686716][ T36] usb_generic_driver_probe+0xb1/0x110
[ 43.692222][ T36] usb_probe_device+0xec/0x3e0
[ 43.697011][ T36] ? __pfx_usb_probe_device+0x10/0x10
[ 43.702419][ T36] really_probe+0x23e/0xa90
[ 43.707067][ T36] __driver_probe_device+0x1de/0x440
[ 43.712415][ T36] ? usb_driver_applicable+0x1c7/0x220
[ 43.717912][ T36] driver_probe_device+0x4c/0x1b0
[ 43.722994][ T36] __device_attach_driver+0x1df/0x310
[ 43.728422][ T36] ? __pfx___device_attach_driver+0x10/0x10
[ 43.734359][ T36] bus_for_each_drv+0x157/0x1e0
[ 43.739253][ T36] ? __pfx_bus_for_each_drv+0x10/0x10
[ 43.744675][ T36] ? lockdep_hardirqs_on+0x7c/0x110
[ 43.750035][ T36] ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 43.755884][ T36] __device_attach+0x1e8/0x4b0
[ 43.760959][ T36] ? __pfx___device_attach+0x10/0x10
[ 43.766298][ T36] ? do_raw_spin_unlock+0x172/0x230
[ 43.771534][ T36] bus_probe_device+0x17f/0x1c0
[ 43.776429][ T36] device_add+0x114b/0x1a70
[ 43.781072][ T36] ? __pfx_device_add+0x10/0x10
[ 43.785974][ T36] ? add_device_randomness+0xb8/0xf0
[ 43.791379][ T36] usb_new_device+0xd09/0x1a20
[ 43.796183][ T36] ? __pfx_usb_new_device+0x10/0x10
[ 43.801510][ T36] hub_event+0x2e58/0x4f40
[ 43.805995][ T36] ? __pfx_hub_event+0x10/0x10
[ 43.810798][ T36] ? __pfx_lock_acquire.part.0+0x10/0x10
[ 43.816826][ T36] ? rcu_is_watching+0x12/0xc0
[ 43.821712][ T36] ? trace_lock_acquire+0x14e/0x1f0
[ 43.827127][ T36] ? process_one_work+0x921/0x1ba0
[ 43.832399][ T36] ? lock_acquire+0x2f/0xb0
[ 43.836925][ T36] ? process_one_work+0x921/0x1ba0
[ 43.842091][ T36] process_one_work+0x9c5/0x1ba0
[ 43.847450][ T36] ? __pfx_hcd_resume_work+0x10/0x10
[ 43.852768][ T36] ? __pfx_process_one_work+0x10/0x10
[ 43.858207][ T36] ? assign_work+0x1a0/0x250
[ 43.862928][ T36] worker_thread+0x6c8/0xf00
[ 43.867755][ T36] ? __kthread_parkme+0x148/0x220
[ 43.872842][ T36] ? __pfx_worker_thread+0x10/0x10
[ 43.877994][ T36] kthread+0x3af/0x750
[ 43.882293][ T36] ? __pfx_kthread+0x10/0x10
[ 43.886934][ T36] ? lock_acquire+0x2f/0xb0
[ 43.891483][ T36] ? __pfx_kthread+0x10/0x10
[ 43.896121][ T36] ret_from_fork+0x45/0x80
[ 43.900574][ T36] ? __pfx_kthread+0x10/0x10
[ 43.905209][ T36] ret_from_fork_asm+0x1a/0x30
[ 43.910029][ T36]
[ 43.913375][ T36] Kernel Offset: disabled
[ 43.917760][ T36] Rebooting in 86400 seconds..