Warning: Permanently added '10.128.0.251' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 42.485820][ T21] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 42.845828][ T21] usb 1-1: config 9 has an invalid interface number: 143 but max is 0 [ 42.854114][ T21] usb 1-1: config 9 has an invalid interface association descriptor of length 2, skipping [ 42.864073][ T21] usb 1-1: config 9 has no interface number 0 [ 42.870187][ T21] usb 1-1: config 9 interface 143 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 42.881095][ T21] usb 1-1: config 9 interface 143 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 43.125784][ T21] usb 1-1: string descriptor 0 read error: -22 [ 43.132255][ T21] usb 1-1: New USB device found, idVendor=0424, idProduct=c001, bcdDevice=d1.e4 [ 43.141341][ T21] usb 1-1: New USB device strings: Mfr=1, Product=247, SerialNumber=1 [ 43.187625][ T21] usb 1-1: claimed gadget: Vendor=0424 ProdID=c001 Bus=01 Device=02 [ 43.195744][ T21] usb 1-1: device path: /sys/bus/usb/devices/1-1:9.143 [ 43.203937][ T21] most_core: registered new device mdev0 (1-1:9.143) [ 43.367721][ T21] usb 1-1: USB disconnect, device number 2 [ 43.374914][ T21] kasan: CONFIG_KASAN_INLINE enabled [ 43.380392][ T21] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 43.388485][ T21] general protection fault: 0000 [#1] SMP KASAN [ 43.394712][ T21] CPU: 1 PID: 21 Comm: kworker/1:1 Not tainted 5.2.0-rc6+ #13 [ 43.402135][ T21] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 43.412174][ T21] Workqueue: usb_hub_wq hub_event [ 43.417251][ T21] RIP: 0010:device_del+0x7a/0xb80 [ 43.422258][ T21] Code: c7 40 04 00 07 f3 f3 65 48 8b 04 25 28 00 00 00 48 89 84 24 80 00 00 00 31 c0 e8 d1 9d d5 fe 48 8d 7b 40 48 89 f8 48 c1 e8 03 <80> 3c 28 00 0f 85 79 0a 00 00 48 8b 43 40 4c 8d a3 80 00 00 00 31 [ 43.441963][ T21] RSP: 0018:ffff8881d9eff7d0 EFLAGS: 00010202 [ 43.448115][ T21] RAX: 0000000000000008 RBX: 0000000000000000 RCX: 0000000000000000 [ 43.456186][ T21] RDX: 0000000000000000 RSI: ffffffff82673ddf RDI: 0000000000000040 [ 43.464136][ T21] RBP: dffffc0000000000 R08: ffff8881d9e36000 R09: ffffed1039fa22e6 [ 43.472091][ T21] R10: ffffed1039fa22e5 R11: ffff8881cfd1172f R12: ffff8881cf6b00a8 [ 43.480147][ T21] R13: ffff8881cfd11660 R14: ffff8881cf6b0030 R15: 0000000000000000 [ 43.488171][ T21] FS: 0000000000000000(0000) GS:ffff8881db300000(0000) knlGS:0000000000000000 [ 43.497086][ T21] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 43.503646][ T21] CR2: 00000000006cc0a0 CR3: 0000000006e21000 CR4: 00000000001406e0 [ 43.511594][ T21] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 43.519547][ T21] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 43.527496][ T21] Call Trace: [ 43.530782][ T21] ? try_to_del_timer_sync+0xbf/0x110 [ 43.536136][ T21] ? __device_links_no_driver+0x240/0x240 [ 43.541875][ T21] ? mark_held_locks+0x9f/0xe0 [ 43.546691][ T21] ? del_timer_sync+0x121/0x130 [ 43.551522][ T21] device_unregister+0x11/0x30 [ 43.556260][ T21] hdm_disconnect+0xdf/0x200 [ 43.560898][ T21] usb_unbind_interface+0x1bd/0x8a0 [ 43.566085][ T21] ? usb_autoresume_device+0x60/0x60 [ 43.571348][ T21] device_release_driver_internal+0x404/0x4c0 [ 43.577396][ T21] bus_remove_device+0x2dc/0x4a0 [ 43.582359][ T21] device_del+0x460/0xb80 [ 43.586763][ T21] ? __device_links_no_driver+0x240/0x240 [ 43.592464][ T21] ? usb_remove_ep_devs+0x3e/0x80 [ 43.597470][ T21] ? remove_intf_ep_devs+0x13f/0x1d0 [ 43.602737][ T21] usb_disable_device+0x211/0x690 [ 43.607753][ T21] usb_disconnect+0x284/0x830 [ 43.612410][ T21] hub_event+0x1409/0x3590 [ 43.616805][ T21] ? hub_port_debounce+0x260/0x260 [ 43.622007][ T21] process_one_work+0x905/0x1570 [ 43.626930][ T21] ? pwq_dec_nr_in_flight+0x310/0x310 [ 43.632335][ T21] ? do_raw_spin_lock+0x11a/0x280 [ 43.637343][ T21] worker_thread+0x96/0xe20 [ 43.641838][ T21] ? process_one_work+0x1570/0x1570 [ 43.647018][ T21] kthread+0x30b/0x410 [ 43.651070][ T21] ? kthread_park+0x1a0/0x1a0 [ 43.655723][ T21] ret_from_fork+0x24/0x30 [ 43.660151][ T21] Modules linked in: [ 43.664117][ T21] ---[ end trace 0850138b139ed022 ]--- [ 43.669570][ T21] RIP: 0010:device_del+0x7a/0xb80 [ 43.674614][ T21] Code: c7 40 04 00 07 f3 f3 65 48 8b 04 25 28 00 00 00 48 89 84 24 80 00 00 00 31 c0 e8 d1 9d d5 fe 48 8d 7b 40 48 89 f8 48 c1 e8 03 <80> 3c 28 00 0f 85 79 0a 00 00 48 8b 43 40 4c 8d a3 80 00 00 00 31 [ 43.694310][ T21] RSP: 0018:ffff8881d9eff7d0 EFLAGS: 00010202 [ 43.700373][ T21] RAX: 0000000000000008 RBX: 0000000000000000 RCX: 0000000000000000 [ 43.708459][ T21] RDX: 0000000000000000 RSI: ffffffff82673ddf RDI: 0000000000000040 [ 43.716437][ T21] RBP: dffffc0000000000 R08: ffff8881d9e36000 R09: ffffed1039fa22e6 [ 43.724437][ T21] R10: ffffed1039fa22e5 R11: ffff8881cfd1172f R12: ffff8881cf6b00a8 [ 43.732540][ T21] R13: ffff8881cfd11660 R14: ffff8881cf6b0030 R15: 0000000000000000 [ 43.740501][ T21] FS: 0000000000000000(0000) GS:ffff8881db300000(0000) knlGS:0000000000000000 [ 43.749576][ T21] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 43.756182][ T21] CR2: 00000000006cc0a0 CR3: 0000000006e21000 CR4: 00000000001406e0 [ 43.764392][ T21] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 43.772447][ T21] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 43.780563][ T21] Kernel panic - not syncing: Fatal exception [ 43.786925][ T21] Kernel Offset: disabled [ 43.791233][ T21] Rebooting in 86400 seconds..