Warning: Permanently added '10.128.0.207' (ECDSA) to the list of known hosts.
executing program
syzkaller login: [ 25.709984][ T12] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 26.070067][ T12] usb 1-1: config 8 has an invalid interface number: 184 but max is 0
[ 26.078482][ T12] usb 1-1: config 8 has an invalid interface number: 100 but max is 0
[ 26.086702][ T12] usb 1-1: config 8 contains an unexpected descriptor of type 0x1, skipping
[ 26.095445][ T12] usb 1-1: config 8 has 2 interfaces, different from the descriptor's value: 1
[ 26.104474][ T12] usb 1-1: config 8 has no interface number 0
[ 26.110585][ T12] usb 1-1: config 8 has no interface number 1
[ 26.116702][ T12] usb 1-1: config 8 interface 184 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 16
[ 26.129824][ T12] usb 1-1: too many endpoints for config 8 interface 100 altsetting 231: 95, using maximum allowed: 30
[ 26.140951][ T12] usb 1-1: config 8 interface 100 altsetting 231 bulk endpoint 0x9 has invalid maxpacket 32
[ 26.151086][ T12] usb 1-1: config 8 interface 100 altsetting 231 has a duplicate endpoint with address 0x9, skipping
[ 26.161996][ T12] usb 1-1: config 8 interface 100 altsetting 231 has an invalid endpoint with address 0x0, skipping
[ 26.172803][ T12] usb 1-1: config 8 interface 100 altsetting 231 has a duplicate endpoint with address 0xE, skipping
[ 26.183764][ T12] usb 1-1: config 8 interface 100 altsetting 231 has an invalid endpoint with address 0x80, skipping
[ 26.194669][ T12] usb 1-1: config 8 interface 100 altsetting 231 has a duplicate endpoint with address 0x4, skipping
[ 26.205557][ T12] usb 1-1: config 8 interface 100 altsetting 231 has a duplicate endpoint with address 0xA, skipping
[ 26.216472][ T12] usb 1-1: config 8 interface 100 altsetting 231 endpoint 0x2 has invalid maxpacket 512, setting to 64
[ 26.227648][ T12] usb 1-1: config 8 interface 100 altsetting 231 has a duplicate endpoint with address 0xF, skipping
[ 26.238550][ T12] usb 1-1: config 8 interface 100 altsetting 231 has an invalid endpoint with address 0x80, skipping
[ 26.249440][ T12] usb 1-1: config 8 interface 100 altsetting 231 has an invalid endpoint with address 0x0, skipping
[ 26.260253][ T12] usb 1-1: config 8 interface 100 altsetting 231 has 15 endpoint descriptors, different from the interface descriptor's value: 95
[ 26.273673][ T12] usb 1-1: config 8 interface 100 has no altsetting 0
[ 26.280531][ T12] usb 1-1: New USB device found, idVendor=07d1, idProduct=3a09, bcdDevice= 1.b3
[ 26.289569][ T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
executing program
[ 26.580028][ T12] usb 1-1: string descriptor 0 read error: -71
[ 26.949999][ T12] usb 1-1: reset high-speed USB device number 2 using dummy_hcd
[ 27.520563][ T1286] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 27.594403][ T1285] usb 1-1: driver API: 1.9.9 2016-02-15 [1-1]
[ 27.600762][ T1285] usb 1-1: firmware API: 1.9.6 2012-07-07
[ 27.606978][ T12] ------------[ cut here ]------------
[ 27.612615][ T12] usb 1-1: BOGUS urb xfer, pipe 1 != type 3
[ 27.618724][ T12] WARNING: CPU: 0 PID: 12 at drivers/usb/core/urb.c:502 usb_submit_urb+0xed2/0x18a0
[ 27.628156][ T12] Modules linked in:
[ 27.632094][ T12] CPU: 0 PID: 12 Comm: kworker/0:1 Not tainted 5.19.0-rc4-syzkaller-00133-gf31a8702cd36 #0
[ 27.642232][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022
[ 27.652370][ T12] Workqueue: usb_hub_wq hub_event
[ 27.657402][ T12] RIP: 0010:usb_submit_urb+0xed2/0x18a0
[ 27.662990][ T12] Code: 7c 24 18 e8 a0 32 8f fd 48 8b 7c 24 18 e8 76 46 18 ff 41 89 d8 44 89 e1 4c 89 ea 48 89 c6 48 c7 c7 80 1c a9 86 e8 ee e0 09 02 <0f> 0b e9 58 f8 ff ff e8 72 32 8f fd 48 81 c5 b8 05 00 00 e9 84 f7
[ 27.682653][ T12] RSP: 0018:ffffc900000cee50 EFLAGS: 00010286
[ 27.688736][ T12] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000
[ 27.696753][ T12] RDX: ffff8881002c5580 RSI: ffffffff812c0fe8 RDI: fffff52000019dbc
[ 27.704779][ T12] RBP: ffff8881095520a0 R08: 0000000000000005 R09: 0000000000000000
[ 27.712799][ T12] R10: 0000000080000000 R11: 0000000000000001 R12: 0000000000000001
[ 27.720804][ T12] R13: ffff888109a47230 R14: 0000000000000002 R15: ffff888108ac0d00
[ 27.728772][ T12] FS: 0000000000000000(0000) GS:ffff8881f6800000(0000) knlGS:0000000000000000
[ 27.737836][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
executing program
[ 27.744488][ T12] CR2: 000055d716f399f8 CR3: 000000011a107000 CR4: 00000000003506f0
[ 27.752541][ T12] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 27.760606][ T12] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 27.768601][ T12] Call Trace:
[ 27.771924][ T12]
[ 27.774867][ T12] ? _raw_spin_unlock_irqrestore+0x42/0x70
[ 27.780733][ T12] carl9170_usb_submit_cmd_urb+0x7e/0x130
[ 27.786559][ T12] __carl9170_exec_cmd+0x30b/0x5b0
[ 27.791715][ T12] carl9170_reboot+0xab/0xf0
[ 27.796334][ T12] carl9170_usb_disconnect+0xee/0x130
[ 27.801844][ T12] usb_unbind_interface+0x1d8/0x8e0
[ 27.807070][ T12] ? usb_unbind_device+0x1a0/0x1a0
[ 27.812312][ T12] device_remove+0x11f/0x170
[ 27.816926][ T12] device_release_driver_internal+0x4a1/0x700
[ 27.823037][ T12] ? lockdep_hardirqs_on+0x79/0x100
[ 27.828254][ T12] usb_forced_unbind_intf+0x17d/0x220
[ 27.833672][ T12] usb_reset_device+0x39b/0x9a0
[ 27.838542][ T12] carl9170_usb_probe+0x48/0xd30
[ 27.843523][ T12] usb_probe_interface+0x315/0x7f0
[ 27.848697][ T12] ? usb_match_dynamic_id+0x1a0/0x1a0
[ 27.854130][ T12] really_probe+0x23e/0xb90
[ 27.858673][ T12] __driver_probe_device+0x338/0x4d0
[ 27.864002][ T12] ? usb_match_id.part.0+0x15d/0x1b0
[ 27.869318][ T12] driver_probe_device+0x4c/0x1a0
[ 27.874403][ T12] __device_attach_driver+0x20b/0x2f0
[ 27.879799][ T12] ? driver_allows_async_probing+0x170/0x170
[ 27.885838][ T12] bus_for_each_drv+0x15f/0x1e0
[ 27.890727][ T12] ? bus_for_each_dev+0x1d0/0x1d0
[ 27.895745][ T12] ? _raw_spin_unlock_irqrestore+0x50/0x70
[ 27.901604][ T12] ? lockdep_hardirqs_on+0x79/0x100
[ 27.906821][ T12] ? _raw_spin_unlock_irqrestore+0x3d/0x70
[ 27.912682][ T12] __device_attach+0x1e4/0x530
[ 27.917467][ T12] ? device_driver_attach+0x210/0x210
[ 27.922883][ T12] ? kobject_uevent_env+0x2ac/0x1660
[ 27.928201][ T12] bus_probe_device+0x1e4/0x290
[ 27.933096][ T12] device_add+0xbda/0x1ea0
[ 27.937522][ T12] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0
[ 27.943803][ T12] ? usb_create_ep_devs+0x1f3/0x2a0
[ 27.949021][ T12] ? create_intf_ep_devs.isra.0+0x18d/0x1f0
[ 27.955008][ T12] usb_set_configuration+0x101e/0x1900
[ 27.960591][ T12] usb_generic_driver_probe+0xba/0x100
[ 27.966045][ T12] usb_probe_device+0xd9/0x2c0
[ 27.970864][ T12] ? usb_driver_release_interface+0x180/0x180
[ 27.976960][ T12] really_probe+0x23e/0xb90
[ 27.981522][ T12] __driver_probe_device+0x338/0x4d0
[ 27.986843][ T12] driver_probe_device+0x4c/0x1a0
[ 27.991911][ T12] __device_attach_driver+0x20b/0x2f0
[ 27.997303][ T12] ? driver_allows_async_probing+0x170/0x170
[ 28.003326][ T12] bus_for_each_drv+0x15f/0x1e0
[ 28.008232][ T12] ? bus_for_each_dev+0x1d0/0x1d0
[ 28.013306][ T12] ? _raw_spin_unlock_irqrestore+0x50/0x70
[ 28.019154][ T12] ? lockdep_hardirqs_on+0x79/0x100
[ 28.024423][ T12] ? _raw_spin_unlock_irqrestore+0x3d/0x70
[ 28.030272][ T12] __device_attach+0x1e4/0x530
[ 28.035044][ T12] ? device_driver_attach+0x210/0x210
[ 28.040468][ T12] ? kobject_uevent_env+0x2ac/0x1660
[ 28.045775][ T12] bus_probe_device+0x1e4/0x290
[ 28.050677][ T12] device_add+0xbda/0x1ea0
[ 28.055148][ T12] ? usb_match_device+0xd4/0x550
[ 28.060255][ T12] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0
[ 28.066523][ T12] ? usb_detect_static_quirks+0x305/0x3b0
[ 28.072315][ T12] usb_new_device.cold+0x641/0x1091
[ 28.077535][ T12] ? hub_disconnect+0x510/0x510
[ 28.082430][ T12] ? rwlock_bug.part.0+0x90/0x90
[ 28.087384][ T12] ? _raw_spin_unlock_irq+0x1f/0x40
[ 28.092629][ T12] ? _raw_spin_unlock_irq+0x1f/0x40
[ 28.097851][ T12] hub_event+0x25d5/0x4690
[ 28.102418][ T12] ? hub_port_debounce+0x3c0/0x3c0
[ 28.107550][ T12] ? lock_release+0x780/0x780
[ 28.112278][ T12] ? lock_downgrade+0x6e0/0x6e0
[ 28.117146][ T12] ? do_raw_spin_lock+0x120/0x2a0
[ 28.122212][ T12] process_one_work+0x996/0x1610
[ 28.127175][ T12] ? pwq_dec_nr_in_flight+0x2a0/0x2a0
[ 28.132598][ T12] ? rwlock_bug.part.0+0x90/0x90
[ 28.137553][ T12] ? _raw_spin_lock_irq+0x41/0x50
[ 28.142623][ T12] worker_thread+0x665/0x1080
[ 28.147323][ T12] ? __kthread_parkme+0x15f/0x220
[ 28.152421][ T12] ? process_one_work+0x1610/0x1610
[ 28.157636][ T12] kthread+0x2ef/0x3a0
[ 28.161757][ T12] ? kthread_complete_and_exit+0x40/0x40
[ 28.167403][ T12] ret_from_fork+0x1f/0x30
[ 28.171860][ T12]
[ 28.174884][ T12] Kernel panic - not syncing: panic_on_warn set ...
[ 28.181627][ T12] CPU: 0 PID: 12 Comm: kworker/0:1 Not tainted 5.19.0-rc4-syzkaller-00133-gf31a8702cd36 #0
[ 28.191589][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022
[ 28.201634][ T12] Workqueue: usb_hub_wq hub_event
[ 28.206663][ T12] Call Trace:
[ 28.209941][ T12]
[ 28.212872][ T12] dump_stack_lvl+0xcd/0x134
[ 28.217471][ T12] panic+0x2d7/0x636
[ 28.221361][ T12] ? panic_print_sys_info.part.0+0x10b/0x10b
[ 28.227346][ T12] ? __warn.cold+0x1d1/0x2c5
[ 28.231943][ T12] ? usb_submit_urb+0xed2/0x18a0
[ 28.236870][ T12] __warn.cold+0x1e2/0x2c5
[ 28.241284][ T12] ? __wake_up_klogd.part.0+0x99/0xf0
[ 28.246648][ T12] ? usb_submit_urb+0xed2/0x18a0
[ 28.251581][ T12] report_bug+0x1bc/0x210
[ 28.255921][ T12] handle_bug+0x3c/0x60
[ 28.260072][ T12] exc_invalid_op+0x14/0x40
[ 28.264571][ T12] asm_exc_invalid_op+0x1b/0x20
[ 28.269413][ T12] RIP: 0010:usb_submit_urb+0xed2/0x18a0
[ 28.274962][ T12] Code: 7c 24 18 e8 a0 32 8f fd 48 8b 7c 24 18 e8 76 46 18 ff 41 89 d8 44 89 e1 4c 89 ea 48 89 c6 48 c7 c7 80 1c a9 86 e8 ee e0 09 02 <0f> 0b e9 58 f8 ff ff e8 72 32 8f fd 48 81 c5 b8 05 00 00 e9 84 f7
[ 28.294561][ T12] RSP: 0018:ffffc900000cee50 EFLAGS: 00010286
[ 28.300621][ T12] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000
[ 28.308579][ T12] RDX: ffff8881002c5580 RSI: ffffffff812c0fe8 RDI: fffff52000019dbc
[ 28.316539][ T12] RBP: ffff8881095520a0 R08: 0000000000000005 R09: 0000000000000000
[ 28.324502][ T12] R10: 0000000080000000 R11: 0000000000000001 R12: 0000000000000001
[ 28.332471][ T12] R13: ffff888109a47230 R14: 0000000000000002 R15: ffff888108ac0d00
[ 28.340436][ T12] ? vprintk+0x88/0x90
[ 28.344500][ T12] ? _raw_spin_unlock_irqrestore+0x42/0x70
[ 28.350300][ T12] carl9170_usb_submit_cmd_urb+0x7e/0x130
[ 28.356013][ T12] __carl9170_exec_cmd+0x30b/0x5b0
[ 28.361116][ T12] carl9170_reboot+0xab/0xf0
[ 28.365696][ T12] carl9170_usb_disconnect+0xee/0x130
[ 28.371062][ T12] usb_unbind_interface+0x1d8/0x8e0
[ 28.376261][ T12] ? usb_unbind_device+0x1a0/0x1a0
[ 28.381399][ T12] device_remove+0x11f/0x170
[ 28.386082][ T12] device_release_driver_internal+0x4a1/0x700
[ 28.392142][ T12] ? lockdep_hardirqs_on+0x79/0x100
[ 28.397416][ T12] usb_forced_unbind_intf+0x17d/0x220
[ 28.402798][ T12] usb_reset_device+0x39b/0x9a0
[ 28.407656][ T12] carl9170_usb_probe+0x48/0xd30
[ 28.412592][ T12] usb_probe_interface+0x315/0x7f0
[ 28.417698][ T12] ? usb_match_dynamic_id+0x1a0/0x1a0
[ 28.423075][ T12] really_probe+0x23e/0xb90
[ 28.427571][ T12] __driver_probe_device+0x338/0x4d0
[ 28.432861][ T12] ? usb_match_id.part.0+0x15d/0x1b0
[ 28.438140][ T12] driver_probe_device+0x4c/0x1a0
[ 28.443156][ T12] __device_attach_driver+0x20b/0x2f0
[ 28.448529][ T12] ? driver_allows_async_probing+0x170/0x170
[ 28.454499][ T12] bus_for_each_drv+0x15f/0x1e0
[ 28.459340][ T12] ? bus_for_each_dev+0x1d0/0x1d0
[ 28.464439][ T12] ? _raw_spin_unlock_irqrestore+0x50/0x70
[ 28.470261][ T12] ? lockdep_hardirqs_on+0x79/0x100
[ 28.475453][ T12] ? _raw_spin_unlock_irqrestore+0x3d/0x70
[ 28.481258][ T12] __device_attach+0x1e4/0x530
[ 28.486017][ T12] ? device_driver_attach+0x210/0x210
[ 28.491396][ T12] ? kobject_uevent_env+0x2ac/0x1660
[ 28.496686][ T12] bus_probe_device+0x1e4/0x290
[ 28.501561][ T12] device_add+0xbda/0x1ea0
[ 28.505969][ T12] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0
[ 28.512202][ T12] ? usb_create_ep_devs+0x1f3/0x2a0
[ 28.517399][ T12] ? create_intf_ep_devs.isra.0+0x18d/0x1f0
[ 28.523293][ T12] usb_set_configuration+0x101e/0x1900
[ 28.528746][ T12] usb_generic_driver_probe+0xba/0x100
[ 28.534205][ T12] usb_probe_device+0xd9/0x2c0
[ 28.539052][ T12] ? usb_driver_release_interface+0x180/0x180
[ 28.545125][ T12] really_probe+0x23e/0xb90
[ 28.549648][ T12] __driver_probe_device+0x338/0x4d0
[ 28.554926][ T12] driver_probe_device+0x4c/0x1a0
[ 28.559940][ T12] __device_attach_driver+0x20b/0x2f0
[ 28.565305][ T12] ? driver_allows_async_probing+0x170/0x170
[ 28.571278][ T12] bus_for_each_drv+0x15f/0x1e0
[ 28.576182][ T12] ? bus_for_each_dev+0x1d0/0x1d0
[ 28.581229][ T12] ? _raw_spin_unlock_irqrestore+0x50/0x70
[ 28.587049][ T12] ? lockdep_hardirqs_on+0x79/0x100
[ 28.592247][ T12] ? _raw_spin_unlock_irqrestore+0x3d/0x70
[ 28.598056][ T12] __device_attach+0x1e4/0x530
[ 28.602831][ T12] ? device_driver_attach+0x210/0x210
[ 28.608200][ T12] ? kobject_uevent_env+0x2ac/0x1660
[ 28.613507][ T12] bus_probe_device+0x1e4/0x290
[ 28.618355][ T12] device_add+0xbda/0x1ea0
[ 28.622774][ T12] ? usb_match_device+0xd4/0x550
[ 28.627775][ T12] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0
[ 28.634039][ T12] ? usb_detect_static_quirks+0x305/0x3b0
[ 28.639778][ T12] usb_new_device.cold+0x641/0x1091
[ 28.644977][ T12] ? hub_disconnect+0x510/0x510
[ 28.649841][ T12] ? rwlock_bug.part.0+0x90/0x90
[ 28.654797][ T12] ? _raw_spin_unlock_irq+0x1f/0x40
[ 28.659998][ T12] ? _raw_spin_unlock_irq+0x1f/0x40
[ 28.665232][ T12] hub_event+0x25d5/0x4690
[ 28.669782][ T12] ? hub_port_debounce+0x3c0/0x3c0
[ 28.674981][ T12] ? lock_release+0x780/0x780
[ 28.679695][ T12] ? lock_downgrade+0x6e0/0x6e0
[ 28.684572][ T12] ? do_raw_spin_lock+0x120/0x2a0
[ 28.689598][ T12] process_one_work+0x996/0x1610
[ 28.694620][ T12] ? pwq_dec_nr_in_flight+0x2a0/0x2a0
[ 28.699991][ T12] ? rwlock_bug.part.0+0x90/0x90
[ 28.704949][ T12] ? _raw_spin_lock_irq+0x41/0x50
[ 28.709992][ T12] worker_thread+0x665/0x1080
[ 28.714665][ T12] ? __kthread_parkme+0x15f/0x220
[ 28.719681][ T12] ? process_one_work+0x1610/0x1610
[ 28.724889][ T12] kthread+0x2ef/0x3a0
[ 28.728954][ T12] ? kthread_complete_and_exit+0x40/0x40
[ 28.734580][ T12] ret_from_fork+0x1f/0x30
[ 28.739006][ T12]
[ 28.742248][ T12] Kernel Offset: disabled
[ 28.746795][ T12] Rebooting in 86400 seconds..