Warning: Permanently added '10.128.0.168' (ECDSA) to the list of known hosts. syzkaller login: [ 26.578083][ T95] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 26.998132][ T95] usb 1-1: config 0 has an invalid interface number: 206 but max is 0 [ 27.007280][ T95] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 27.017581][ T95] usb 1-1: config 0 has no interface number 0 [ 27.024684][ T95] usb 1-1: config 0 interface 206 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 27.035233][ T95] usb 1-1: New USB device found, idVendor=0411, idProduct=0027, bcdDevice=e7.51 [ 27.044622][ T95] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.056276][ T95] usb 1-1: config 0 descriptor?? [ 27.078325][ T1790] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 27.103273][ T95] prism2_usb 1-1:0.206 (unnamed net_device) (uninitialized): prism2_usb: Checking for firmware prism2_ru.fw [ 27.117784][ T95] usb 1-1: Direct firmware load for prism2_ru.fw failed with error -2 [ 27.126476][ T95] prism2_usb 1-1:0.206 (unnamed net_device) (uninitialized): prism2_usb: Firmware not available, but not essential [ 27.139070][ T95] prism2_usb 1-1:0.206 (unnamed net_device) (uninitialized): prism2_usb: can continue to use card anyway. [ 27.188124][ T95] ------------[ cut here ]------------ [ 27.193852][ T95] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 27.202482][ T95] WARNING: CPU: 1 PID: 95 at drivers/usb/core/urb.c:478 usb_submit_urb+0x1188/0x1460 [ 27.213250][ T95] Kernel panic - not syncing: panic_on_warn set ... [ 27.220119][ T95] CPU: 1 PID: 95 Comm: kworker/1:2 Not tainted 5.6.0-rc3-syzkaller #0 [ 27.228278][ T95] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 27.243387][ T95] Workqueue: usb_hub_wq hub_event [ 27.248401][ T95] Call Trace: [ 27.251794][ T95] dump_stack+0xef/0x16e [ 27.256917][ T95] ? usb_submit_urb+0x1090/0x1460 [ 27.262416][ T95] panic+0x2aa/0x6e1 [ 27.266324][ T95] ? add_taint.cold+0x16/0x16 [ 27.271156][ T95] ? __probe_kernel_read+0x188/0x1d0 [ 27.276801][ T95] ? __warn.cold+0x14/0x30 [ 27.281361][ T95] ? __warn+0xd5/0x1c8 [ 27.285502][ T95] ? usb_submit_urb+0x1188/0x1460 [ 27.290639][ T95] __warn.cold+0x2f/0x30 [ 27.294879][ T95] ? usb_submit_urb+0x1188/0x1460 [ 27.299906][ T95] report_bug+0x27b/0x2f0 [ 27.304496][ T95] do_error_trap+0x12b/0x1e0 [ 27.309080][ T95] ? usb_submit_urb+0x1188/0x1460 [ 27.314593][ T95] do_invalid_op+0x32/0x40 [ 27.319140][ T95] ? usb_submit_urb+0x1188/0x1460 [ 27.324295][ T95] invalid_op+0x23/0x30 [ 27.328607][ T95] RIP: 0010:usb_submit_urb+0x1188/0x1460 [ 27.334391][ T95] Code: 4d 85 ed 74 46 e8 18 ce dd fd 4c 89 f7 e8 d0 5c 17 ff 41 89 d8 44 89 e1 4c 89 ea 48 89 c6 48 c7 c7 e0 e7 3b 86 e8 a0 5f b2 fd <0f> 0b e9 20 f4 ff ff e8 ec cd dd fd 0f 1f 44 00 00 e8 e2 cd dd fd [ 27.354753][ T95] RSP: 0018:ffff8881d5f2efc8 EFLAGS: 00010282 [ 27.361187][ T95] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 27.369275][ T95] RDX: 0000000000000000 RSI: ffffffff812977dd RDI: ffffed103abe5deb [ 27.377606][ T95] RBP: ffff8881cea7fc00 R08: ffff8881d7363100 R09: fffffbfff1266c8f [ 27.386136][ T95] R10: fffffbfff1266c8e R11: ffffffff89336477 R12: 0000000000000003 [ 27.394828][ T95] R13: ffff8881c848f8e8 R14: ffff8881ceb3f0a0 R15: ffff8881c73a8008 [ 27.403084][ T95] ? vprintk_func+0x7d/0x113 [ 27.407992][ T95] ? usb_submit_urb+0x1188/0x1460 [ 27.413026][ T95] submit_rx_urb+0x2f8/0x400 [ 27.417807][ T95] hfa384x_drvr_start+0x1cf/0x480 [ 27.424812][ T95] ? hfa384x_drvr_setconfig+0x40/0x40 [ 27.430395][ T95] ? __netdev_printk+0x1c6/0x27c [ 27.435506][ T95] prism2sta_ifstate+0x24e/0x510 [ 27.440804][ T95] ? netdev_notice+0x109/0x109 [ 27.445750][ T95] ? assign_fw+0x480/0x480 [ 27.450311][ T95] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 27.456087][ T95] ? prism2mib_bytearea2pstr+0x1f0/0x1f0 [ 27.461744][ T95] prism2sta_probe_usb.cold+0x1c8/0x49e [ 27.467295][ T95] ? prism2sta_mlmerequest+0xa90/0xa90 [ 27.472750][ T95] ? __pm_runtime_resume+0x111/0x180 [ 27.478177][ T95] usb_probe_interface+0x310/0x800 [ 27.483836][ T95] ? usb_probe_device+0x230/0x230 [ 27.488858][ T95] really_probe+0x290/0xac0 [ 27.493434][ T95] driver_probe_device+0x223/0x350 [ 27.498763][ T95] __device_attach_driver+0x1d1/0x290 [ 27.504331][ T95] ? driver_allows_async_probing+0x160/0x160 [ 27.510500][ T95] bus_for_each_drv+0x162/0x1e0 [ 27.515367][ T95] ? bus_rescan_devices+0x20/0x20 [ 27.520495][ T95] ? _raw_spin_unlock_irqrestore+0x39/0x40 [ 27.526411][ T95] ? lockdep_hardirqs_on+0x382/0x580 [ 27.531705][ T95] __device_attach+0x217/0x390 [ 27.536470][ T95] ? device_bind_driver+0xd0/0xd0 [ 27.541877][ T95] bus_probe_device+0x1e4/0x290 [ 27.547028][ T95] device_add+0x1459/0x1bf0 [ 27.551831][ T95] ? wait_for_completion+0x3c0/0x3c0 [ 27.557289][ T95] ? device_link_remove+0x110/0x110 [ 27.563241][ T95] ? _raw_spin_unlock_irqrestore+0x39/0x40 [ 27.569219][ T95] usb_set_configuration+0xe47/0x17d0 [ 27.574597][ T95] usb_generic_driver_probe+0x9d/0xe0 [ 27.580449][ T95] usb_probe_device+0xd9/0x230 [ 27.585459][ T95] ? usb_suspend+0x5f0/0x5f0 [ 27.590131][ T95] really_probe+0x290/0xac0 [ 27.594674][ T95] driver_probe_device+0x223/0x350 [ 27.599877][ T95] __device_attach_driver+0x1d1/0x290 [ 27.605251][ T95] ? driver_allows_async_probing+0x160/0x160 [ 27.611441][ T95] bus_for_each_drv+0x162/0x1e0 [ 27.616301][ T95] ? bus_rescan_devices+0x20/0x20 [ 27.621447][ T95] ? _raw_spin_unlock_irqrestore+0x39/0x40 [ 27.627473][ T95] ? lockdep_hardirqs_on+0x382/0x580 [ 27.632946][ T95] __device_attach+0x217/0x390 [ 27.638811][ T95] ? device_bind_driver+0xd0/0xd0 [ 27.644227][ T95] bus_probe_device+0x1e4/0x290 [ 27.650056][ T95] device_add+0x1459/0x1bf0 [ 27.654876][ T95] ? device_link_remove+0x110/0x110 [ 27.660080][ T95] usb_new_device.cold+0x540/0xcd0 [ 27.665381][ T95] hub_event+0x21cb/0x4300 [ 27.670217][ T95] ? hub_port_debounce+0x350/0x350 [ 27.675610][ T95] ? find_held_lock+0x2d/0x110 [ 27.680659][ T95] ? mark_held_locks+0xe0/0xe0 [ 27.685554][ T95] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 27.691222][ T95] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 27.696519][ T95] process_one_work+0x94b/0x1620 [ 27.702013][ T95] ? pwq_dec_nr_in_flight+0x310/0x310 [ 27.707655][ T95] ? do_raw_spin_lock+0x129/0x290 [ 27.713103][ T95] worker_thread+0x96/0xe20 [ 27.717876][ T95] ? process_one_work+0x1620/0x1620 [ 27.723411][ T95] kthread+0x318/0x420 [ 27.727678][ T95] ? kthread_create_on_node+0xf0/0xf0 [ 27.733372][ T95] ret_from_fork+0x24/0x30 [ 27.739259][ T95] Kernel Offset: disabled [ 27.744436][ T95] Rebooting in 86400 seconds..