Warning: Permanently added '10.128.0.21' (ED25519) to the list of known hosts.
executing program
[ 40.436015][ T29] audit: type=1400 audit(1738505098.775:80): avc: denied { execmem } for pid=2945 comm="syz-executor212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 40.458080][ T29] audit: type=1400 audit(1738505098.775:81): avc: denied { read write } for pid=2946 comm="syz-executor212" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 40.482391][ T29] audit: type=1400 audit(1738505098.775:82): avc: denied { open } for pid=2946 comm="syz-executor212" path="/dev/raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 40.506677][ T29] audit: type=1400 audit(1738505098.775:83): avc: denied { ioctl } for pid=2946 comm="syz-executor212" path="/dev/raw-gadget" dev="devtmpfs" ino=236 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 40.670673][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 40.830512][ T24] usb 1-1: Using ep0 maxpacket: 16
[ 40.838119][ T24] usb 1-1: config 64 has an invalid interface number: 69 but max is 3
[ 40.846619][ T24] usb 1-1: config 64 has an invalid interface number: 42 but max is 3
[ 40.855882][ T24] usb 1-1: config 64 has an invalid interface number: 66 but max is 3
[ 40.864307][ T24] usb 1-1: config 64 has an invalid interface number: 240 but max is 3
[ 40.872838][ T24] usb 1-1: config 64 has no interface number 0
[ 40.879127][ T24] usb 1-1: config 64 has no interface number 1
[ 40.885397][ T24] usb 1-1: config 64 has no interface number 2
[ 40.891636][ T24] usb 1-1: config 64 has no interface number 3
[ 40.897876][ T24] usb 1-1: config 64 interface 69 altsetting 239 endpoint 0x7 has invalid maxpacket 1024, setting to 64
[ 40.909251][ T24] usb 1-1: config 64 interface 69 altsetting 239 bulk endpoint 0xA has invalid maxpacket 1023
[ 40.919745][ T24] usb 1-1: config 64 interface 69 altsetting 239 has an endpoint descriptor with address 0x91, changing to 0x81
[ 40.931662][ T24] usb 1-1: config 64 interface 69 altsetting 239 bulk endpoint 0x81 has invalid maxpacket 64
[ 40.941933][ T24] usb 1-1: config 64 interface 42 altsetting 8 endpoint 0x8 has invalid maxpacket 1024, setting to 64
[ 40.952984][ T24] usb 1-1: config 64 interface 42 altsetting 8 has a duplicate endpoint with address 0x1, skipping
[ 40.963830][ T24] usb 1-1: config 64 interface 42 altsetting 8 endpoint 0x5 has invalid maxpacket 1024, setting to 64
[ 40.974999][ T24] usb 1-1: config 64 interface 42 altsetting 8 endpoint 0x3 has invalid maxpacket 96, setting to 64
[ 40.985886][ T24] usb 1-1: config 64 interface 42 altsetting 8 has a duplicate endpoint with address 0xE, skipping
[ 40.996851][ T24] usb 1-1: config 64 interface 42 altsetting 8 has a duplicate endpoint with address 0x1, skipping
[ 41.007728][ T24] usb 1-1: config 64 interface 42 altsetting 8 has a duplicate endpoint with address 0xD, skipping
[ 41.018626][ T24] usb 1-1: config 64 interface 42 altsetting 8 has a duplicate endpoint with address 0x4, skipping
[ 41.029762][ T24] usb 1-1: config 64 interface 42 altsetting 8 has an endpoint descriptor with address 0xA5, changing to 0x85
[ 41.041518][ T24] usb 1-1: config 64 interface 42 altsetting 8 has a duplicate endpoint with address 0x85, skipping
[ 41.052382][ T24] usb 1-1: config 64 interface 42 altsetting 8 has a duplicate endpoint with address 0x4, skipping
[ 41.063272][ T24] usb 1-1: config 64 interface 42 altsetting 8 has a duplicate endpoint with address 0x4, skipping
[ 41.074203][ T24] usb 1-1: config 64 interface 69 has no altsetting 0
[ 41.081064][ T24] usb 1-1: config 64 interface 42 has no altsetting 0
[ 41.087906][ T24] usb 1-1: config 64 interface 66 has no altsetting 0
[ 41.094797][ T24] usb 1-1: config 64 interface 240 has no altsetting 0
[ 41.104096][ T24] usb 1-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=1a.86
[ 41.113323][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 41.121561][ T24] usb 1-1: Product: syz
[ 41.125752][ T24] usb 1-1: Manufacturer: syz
[ 41.130471][ T24] usb 1-1: SerialNumber: syz
executing program
[ 41.354801][ T24] ------------[ cut here ]------------
[ 41.360698][ T24] usb 1-1: BOGUS urb xfer, pipe 3 != type 1
[ 41.367326][ T24] WARNING: CPU: 1 PID: 24 at drivers/usb/core/urb.c:503 usb_submit_urb+0xe4b/0x1730
[ 41.376932][ T24] Modules linked in:
[ 41.380972][ T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted 6.13.0-syzkaller-09485-g72deda0abee6 #0
[ 41.391345][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[ 41.401525][ T24] Workqueue: usb_hub_wq hub_event
[ 41.406599][ T24] RIP: 0010:usb_submit_urb+0xe4b/0x1730
[ 41.412269][ T24] Code: 84 3c 02 00 00 e8 35 b2 ee fc 4c 89 ef e8 9d db d4 fe 45 89 e0 89 e9 4c 89 f2 48 89 c6 48 c7 c7 c0 3e a2 87 e8 46 d4 b2 fc 90 <0f> 0b 90 90 e9 e9 f8 ff ff e8 07 b2 ee fc 49 81 c4 b8 05 00 00 e9
[ 41.432052][ T24] RSP: 0000:ffffc9000019ed10 EFLAGS: 00010286
[ 41.438196][ T24] RAX: 0000000000000000 RBX: ffff888111a7f700 RCX: ffffffff813f4aa9
[ 41.446274][ T24] RDX: ffff888101e90000 RSI: ffffffff813f4ab6 RDI: 0000000000000001
[ 41.454354][ T24] RBP: 0000000000000003 R08: 0000000000000001 R09: 0000000000000000
[ 41.462636][ T24] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001
[ 41.471020][ T24] R13: ffff888105ebb0a8 R14: ffff88810f3846e0 R15: ffff888111a7f77c
[ 41.479157][ T24] FS: 0000000000000000(0000) GS:ffff8881f5900000(0000) knlGS:0000000000000000
[ 41.488212][ T24] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 41.494928][ T24] CR2: 00007fff8cf7f920 CR3: 00000001170fc000 CR4: 00000000003506f0
[ 41.503015][ T24] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 41.511240][ T24] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 41.519382][ T24] Call Trace:
[ 41.522805][ T24]
[ 41.525790][ T24] ? __warn+0xea/0x3c0
[ 41.529920][ T24] ? usb_submit_urb+0xe4b/0x1730
[ 41.535009][ T24] ? report_bug+0x3c0/0x580
[ 41.539607][ T24] ? handle_bug+0x54/0xa0
[ 41.544077][ T24] ? exc_invalid_op+0x17/0x50
[ 41.548827][ T24] ? asm_exc_invalid_op+0x1a/0x20
[ 41.553971][ T24] ? __warn_printk+0x199/0x350
[ 41.558804][ T24] ? __warn_printk+0x1a6/0x350
[ 41.563697][ T24] ? usb_submit_urb+0xe4b/0x1730
[ 41.568709][ T24] ? __init_swait_queue_head+0xca/0x150
[ 41.574358][ T24] cxacru_cm+0x3d1/0xd20
[ 41.578686][ T24] ? __pfx_cxacru_cm+0x10/0x10
[ 41.583553][ T24] ? lockdep_init_map_type+0x16d/0x7d0
[ 41.589168][ T24] ? rcu_is_watching+0x12/0xc0
[ 41.594489][ T24] cxacru_card_status+0x21/0xd0
[ 41.599401][ T24] cxacru_bind+0xad1/0x13d0
[ 41.604021][ T24] ? __pfx_cxacru_bind+0x10/0x10
[ 41.609033][ T24] ? usb_string+0x3d7/0x670
[ 41.613639][ T24] ? usb_string+0x3dc/0x670
[ 41.618184][ T24] ? __pfx_cxacru_bind+0x10/0x10
[ 41.623493][ T24] usbatm_usb_probe+0x366/0x1c30
[ 41.629593][ T24] ? __pm_runtime_set_status+0x4e5/0x9a0
[ 41.638448][ T24] ? mark_held_locks+0x9f/0xe0
[ 41.644613][ T24] cxacru_usb_probe+0x102/0x220
[ 41.649705][ T24] ? __pfx_cxacru_usb_probe+0x10/0x10
[ 41.655772][ T24] ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 41.661795][ T24] ? __pm_runtime_set_status+0x13c/0x9a0
[ 41.667529][ T24] usb_probe_interface+0x300/0x9c0
[ 41.672799][ T24] ? __pfx_usb_probe_interface+0x10/0x10
[ 41.678541][ T24] really_probe+0x23e/0xa90
[ 41.683293][ T24] __driver_probe_device+0x1de/0x440
[ 41.688866][ T24] driver_probe_device+0x4c/0x1b0
[ 41.694360][ T24] __device_attach_driver+0x1df/0x310
[ 41.700016][ T24] ? __pfx___device_attach_driver+0x10/0x10
[ 41.706143][ T24] bus_for_each_drv+0x157/0x1e0
[ 41.711251][ T24] ? __pfx_bus_for_each_drv+0x10/0x10
[ 41.716693][ T24] ? lockdep_hardirqs_on+0x7c/0x110
[ 41.722022][ T24] ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 41.727996][ T24] __device_attach+0x1e8/0x4b0
[ 41.732940][ T24] ? __pfx___device_attach+0x10/0x10
[ 41.738321][ T24] ? do_raw_spin_unlock+0x172/0x230
[ 41.743810][ T24] bus_probe_device+0x17f/0x1c0
[ 41.748749][ T24] device_add+0x114b/0x1a70
[ 41.753386][ T24] ? __pfx_device_add+0x10/0x10
[ 41.758379][ T24] ? usb_cache_string+0xf2/0x150
[ 41.763518][ T24] usb_set_configuration+0x10cb/0x1c50
[ 41.769084][ T24] ? __pfx_usb_generic_driver_probe+0x10/0x10
[ 41.775255][ T24] usb_generic_driver_probe+0xb1/0x110
[ 41.781158][ T24] usb_probe_device+0xec/0x3e0
[ 41.786226][ T24] ? __pfx_usb_probe_device+0x10/0x10
[ 41.791797][ T24] really_probe+0x23e/0xa90
[ 41.796402][ T24] __driver_probe_device+0x1de/0x440
[ 41.801896][ T24] ? usb_driver_applicable+0x1c7/0x220
[ 41.807460][ T24] driver_probe_device+0x4c/0x1b0
[ 41.812623][ T24] __device_attach_driver+0x1df/0x310
[ 41.818395][ T24] ? __pfx___device_attach_driver+0x10/0x10
[ 41.824801][ T24] bus_for_each_drv+0x157/0x1e0
[ 41.829776][ T24] ? __pfx_bus_for_each_drv+0x10/0x10
[ 41.835255][ T24] ? lockdep_hardirqs_on+0x7c/0x110
[ 41.841083][ T24] ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 41.847036][ T24] __device_attach+0x1e8/0x4b0
[ 41.851952][ T24] ? __pfx___device_attach+0x10/0x10
[ 41.857503][ T24] ? do_raw_spin_unlock+0x172/0x230
[ 41.862845][ T24] bus_probe_device+0x17f/0x1c0
[ 41.867781][ T24] device_add+0x114b/0x1a70
[ 41.872470][ T24] ? __pfx_device_add+0x10/0x10
[ 41.877403][ T24] ? add_device_randomness+0xb8/0xf0
[ 41.882840][ T24] usb_new_device+0xd09/0x1a20
[ 41.887697][ T24] ? __pfx_usb_new_device+0x10/0x10
[ 41.893028][ T24] hub_event+0x2e58/0x4f40
[ 41.897533][ T24] ? __pfx_hub_event+0x10/0x10
[ 41.902395][ T24] ? __pfx_lock_acquire.part.0+0x10/0x10
[ 41.908082][ T24] ? rcu_is_watching+0x12/0xc0
[ 41.913072][ T24] ? trace_lock_acquire+0x14e/0x1f0
[ 41.918331][ T24] ? process_one_work+0x921/0x1ba0
[ 41.923572][ T24] ? lock_acquire+0x2f/0xb0
[ 41.928159][ T24] ? process_one_work+0x921/0x1ba0
[ 41.933413][ T24] process_one_work+0x9c5/0x1ba0
[ 41.938434][ T24] ? __pfx_hcd_resume_work+0x10/0x10
[ 41.944007][ T24] ? __pfx_process_one_work+0x10/0x10
[ 41.949471][ T24] ? assign_work+0x1a0/0x250
[ 41.954164][ T24] worker_thread+0x6c8/0xf00
[ 41.958922][ T24] ? __pfx_worker_thread+0x10/0x10
[ 41.964380][ T24] kthread+0x3af/0x750
[ 41.968563][ T24] ? __pfx_kthread+0x10/0x10
[ 41.973295][ T24] ? lock_acquire+0x2f/0xb0
[ 41.977853][ T24] ? __pfx_kthread+0x10/0x10
[ 41.982570][ T24] ret_from_fork+0x45/0x80
[ 41.987059][ T24] ? __pfx_kthread+0x10/0x10
[ 41.991808][ T24] ret_from_fork_asm+0x1a/0x30
[ 41.996739][ T24]
[ 41.999795][ T24] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 42.007193][ T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted 6.13.0-syzkaller-09485-g72deda0abee6 #0
[ 42.017583][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[ 42.027701][ T24] Workqueue: usb_hub_wq hub_event
[ 42.032772][ T24] Call Trace:
[ 42.036159][ T24]
[ 42.039140][ T24] dump_stack_lvl+0x3d/0x1f0
[ 42.043870][ T24] panic+0x71d/0x800
[ 42.047806][ T24] ? __pfx_panic+0x10/0x10
[ 42.052282][ T24] ? show_trace_log_lvl+0x29d/0x3d0
[ 42.057520][ T24] ? check_panic_on_warn+0x1f/0xb0
[ 42.062740][ T24] ? usb_submit_urb+0xe4b/0x1730
[ 42.067785][ T24] check_panic_on_warn+0xab/0xb0
[ 42.072782][ T24] __warn+0xf6/0x3c0
[ 42.076800][ T24] ? usb_submit_urb+0xe4b/0x1730
[ 42.081794][ T24] report_bug+0x3c0/0x580
[ 42.086200][ T24] handle_bug+0x54/0xa0
[ 42.090528][ T24] exc_invalid_op+0x17/0x50
[ 42.095144][ T24] asm_exc_invalid_op+0x1a/0x20
[ 42.100050][ T24] RIP: 0010:usb_submit_urb+0xe4b/0x1730
[ 42.105723][ T24] Code: 84 3c 02 00 00 e8 35 b2 ee fc 4c 89 ef e8 9d db d4 fe 45 89 e0 89 e9 4c 89 f2 48 89 c6 48 c7 c7 c0 3e a2 87 e8 46 d4 b2 fc 90 <0f> 0b 90 90 e9 e9 f8 ff ff e8 07 b2 ee fc 49 81 c4 b8 05 00 00 e9
[ 42.125846][ T24] RSP: 0000:ffffc9000019ed10 EFLAGS: 00010286
[ 42.131976][ T24] RAX: 0000000000000000 RBX: ffff888111a7f700 RCX: ffffffff813f4aa9
[ 42.140055][ T24] RDX: ffff888101e90000 RSI: ffffffff813f4ab6 RDI: 0000000000000001
[ 42.148275][ T24] RBP: 0000000000000003 R08: 0000000000000001 R09: 0000000000000000
[ 42.156297][ T24] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001
[ 42.164650][ T24] R13: ffff888105ebb0a8 R14: ffff88810f3846e0 R15: ffff888111a7f77c
[ 42.172690][ T24] ? __warn_printk+0x199/0x350
[ 42.177600][ T24] ? __warn_printk+0x1a6/0x350
[ 42.182557][ T24] ? __init_swait_queue_head+0xca/0x150
[ 42.188188][ T24] cxacru_cm+0x3d1/0xd20
[ 42.192584][ T24] ? __pfx_cxacru_cm+0x10/0x10
[ 42.197585][ T24] ? lockdep_init_map_type+0x16d/0x7d0
[ 42.203095][ T24] ? rcu_is_watching+0x12/0xc0
[ 42.207910][ T24] cxacru_card_status+0x21/0xd0
[ 42.212792][ T24] cxacru_bind+0xad1/0x13d0
[ 42.217325][ T24] ? __pfx_cxacru_bind+0x10/0x10
[ 42.222368][ T24] ? usb_string+0x3d7/0x670
[ 42.226922][ T24] ? usb_string+0x3dc/0x670
[ 42.231465][ T24] ? __pfx_cxacru_bind+0x10/0x10
[ 42.236462][ T24] usbatm_usb_probe+0x366/0x1c30
[ 42.241466][ T24] ? __pm_runtime_set_status+0x4e5/0x9a0
[ 42.247180][ T24] ? mark_held_locks+0x9f/0xe0
[ 42.252018][ T24] cxacru_usb_probe+0x102/0x220
[ 42.256973][ T24] ? __pfx_cxacru_usb_probe+0x10/0x10
[ 42.262409][ T24] ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 42.268248][ T24] ? __pm_runtime_set_status+0x13c/0x9a0
[ 42.273965][ T24] usb_probe_interface+0x300/0x9c0
[ 42.279146][ T24] ? __pfx_usb_probe_interface+0x10/0x10
[ 42.284834][ T24] really_probe+0x23e/0xa90
[ 42.289407][ T24] __driver_probe_device+0x1de/0x440
[ 42.294843][ T24] driver_probe_device+0x4c/0x1b0
[ 42.299943][ T24] __device_attach_driver+0x1df/0x310
[ 42.305396][ T24] ? __pfx___device_attach_driver+0x10/0x10
[ 42.311427][ T24] bus_for_each_drv+0x157/0x1e0
[ 42.316331][ T24] ? __pfx_bus_for_each_drv+0x10/0x10
[ 42.322293][ T24] ? lockdep_hardirqs_on+0x7c/0x110
[ 42.327569][ T24] ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 42.333601][ T24] __device_attach+0x1e8/0x4b0
[ 42.338444][ T24] ? __pfx___device_attach+0x10/0x10
[ 42.344050][ T24] ? do_raw_spin_unlock+0x172/0x230
[ 42.349325][ T24] bus_probe_device+0x17f/0x1c0
[ 42.354227][ T24] device_add+0x114b/0x1a70
[ 42.358759][ T24] ? __pfx_device_add+0x10/0x10
[ 42.363652][ T24] ? usb_cache_string+0xf2/0x150
[ 42.368613][ T24] usb_set_configuration+0x10cb/0x1c50
[ 42.374137][ T24] ? __pfx_usb_generic_driver_probe+0x10/0x10
[ 42.380246][ T24] usb_generic_driver_probe+0xb1/0x110
[ 42.385777][ T24] usb_probe_device+0xec/0x3e0
[ 42.390592][ T24] ? __pfx_usb_probe_device+0x10/0x10
[ 42.396026][ T24] really_probe+0x23e/0xa90
[ 42.400593][ T24] __driver_probe_device+0x1de/0x440
[ 42.405953][ T24] ? usb_driver_applicable+0x1c7/0x220
[ 42.411482][ T24] driver_probe_device+0x4c/0x1b0
[ 42.416563][ T24] __device_attach_driver+0x1df/0x310
[ 42.421975][ T24] ? __pfx___device_attach_driver+0x10/0x10
[ 42.427903][ T24] bus_for_each_drv+0x157/0x1e0
[ 42.432786][ T24] ? __pfx_bus_for_each_drv+0x10/0x10
[ 42.438183][ T24] ? lockdep_hardirqs_on+0x7c/0x110
[ 42.443442][ T24] ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 42.449301][ T24] __device_attach+0x1e8/0x4b0
[ 42.454290][ T24] ? __pfx___device_attach+0x10/0x10
[ 42.459816][ T24] ? do_raw_spin_unlock+0x172/0x230
[ 42.465227][ T24] bus_probe_device+0x17f/0x1c0
[ 42.470136][ T24] device_add+0x114b/0x1a70
[ 42.474680][ T24] ? __pfx_device_add+0x10/0x10
[ 42.479556][ T24] ? add_device_randomness+0xb8/0xf0
[ 42.484902][ T24] usb_new_device+0xd09/0x1a20
[ 42.489704][ T24] ? __pfx_usb_new_device+0x10/0x10
[ 42.494931][ T24] hub_event+0x2e58/0x4f40
[ 42.499428][ T24] ? __pfx_hub_event+0x10/0x10
[ 42.504232][ T24] ? __pfx_lock_acquire.part.0+0x10/0x10
[ 42.509894][ T24] ? rcu_is_watching+0x12/0xc0
[ 42.514691][ T24] ? trace_lock_acquire+0x14e/0x1f0
[ 42.520018][ T24] ? process_one_work+0x921/0x1ba0
[ 42.525408][ T24] ? lock_acquire+0x2f/0xb0
[ 42.529947][ T24] ? process_one_work+0x921/0x1ba0
[ 42.535110][ T24] process_one_work+0x9c5/0x1ba0
[ 42.540103][ T24] ? __pfx_hcd_resume_work+0x10/0x10
[ 42.545415][ T24] ? __pfx_process_one_work+0x10/0x10
[ 42.550882][ T24] ? assign_work+0x1a0/0x250
[ 42.555544][ T24] worker_thread+0x6c8/0xf00
[ 42.560279][ T24] ? __pfx_worker_thread+0x10/0x10
[ 42.565442][ T24] kthread+0x3af/0x750
[ 42.569547][ T24] ? __pfx_kthread+0x10/0x10
[ 42.574214][ T24] ? lock_acquire+0x2f/0xb0
[ 42.578741][ T24] ? __pfx_kthread+0x10/0x10
[ 42.583359][ T24] ret_from_fork+0x45/0x80
[ 42.587806][ T24] ? __pfx_kthread+0x10/0x10
[ 42.592433][ T24] ret_from_fork_asm+0x1a/0x30
[ 42.597360][ T24]
[ 42.600755][ T24] Kernel Offset: disabled
[ 42.605267][ T24] Rebooting in 86400 seconds..