[ 15.178480][ T5601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 15.189579][ T5601] eql: remember to turn off Van-Jacobson compression on your slave devices [ 15.236387][ T1760] gvnic 0000:00:00.0 enp0s0: Device link is up. [ 15.238933][ T5512] IPv6: ADDRCONF(NETDEV_CHANGE): enp0s0: link becomes ready Starting sshd: OK syzkaller Warning: Permanently added '10.128.10.7' (ECDSA) to the list of known hosts. syzkaller login: [ 41.544125][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 41.546632][ T5927] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 41.548749][ T5927] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 41.551115][ T5927] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 41.553143][ T5927] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 41.555463][ T5927] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 executing program [ 41.854691][ T1557] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 42.094844][ T1557] usb 1-1: Using ep0 maxpacket: 32 [ 42.214703][ T1557] usb 1-1: config 64 has an invalid interface number: 245 but max is 2 [ 42.216678][ T1557] usb 1-1: config 64 has an invalid interface number: 155 but max is 2 [ 42.218606][ T1557] usb 1-1: config 64 contains an unexpected descriptor of type 0x2, skipping [ 42.220579][ T1557] usb 1-1: config 64 contains an unexpected descriptor of type 0x1, skipping [ 42.222531][ T1557] usb 1-1: config 64 has an invalid interface number: 243 but max is 2 [ 42.224438][ T1557] usb 1-1: config 64 has no interface number 0 [ 42.225930][ T1557] usb 1-1: config 64 has no interface number 1 [ 42.227311][ T1557] usb 1-1: config 64 has no interface number 2 [ 42.228650][ T1557] usb 1-1: config 64 interface 245 altsetting 7 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 42.231246][ T1557] usb 1-1: config 64 interface 245 altsetting 7 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 42.233856][ T1557] usb 1-1: config 64 interface 245 altsetting 7 has an invalid endpoint descriptor of length 2, skipping [ 42.236540][ T1557] usb 1-1: config 64 interface 245 altsetting 7 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 42.239537][ T1557] usb 1-1: config 64 interface 155 altsetting 1 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 42.241988][ T1557] usb 1-1: config 64 interface 155 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 42.244390][ T1557] usb 1-1: config 64 interface 155 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 42.246987][ T1557] usb 1-1: config 64 interface 155 altsetting 1 endpoint 0xA has invalid maxpacket 72, setting to 64 [ 42.249450][ T1557] usb 1-1: config 64 interface 155 altsetting 1 endpoint 0x81 has an invalid bInterval 139, changing to 11 [ 42.251969][ T1557] usb 1-1: config 64 interface 155 altsetting 1 endpoint 0x81 has invalid maxpacket 18251, setting to 1024 [ 42.254563][ T1557] usb 1-1: config 64 interface 155 altsetting 1 has a duplicate endpoint with address 0xA, skipping [ 42.257060][ T1557] usb 1-1: config 64 interface 155 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 42.259510][ T1557] usb 1-1: config 64 interface 155 altsetting 1 has 9 endpoint descriptors, different from the interface descriptor's value: 8 [ 42.262668][ T1557] usb 1-1: config 64 interface 243 altsetting 31 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 42.265234][ T1557] usb 1-1: config 64 interface 245 has no altsetting 0 [ 42.266841][ T1557] usb 1-1: config 64 interface 155 has no altsetting 0 [ 42.268414][ T1557] usb 1-1: config 64 interface 243 has no altsetting 0 [ 42.424707][ T1557] usb 1-1: New USB device found, idVendor=083a, idProduct=4506, bcdDevice=6d.7d [ 42.426919][ T1557] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.428774][ T1557] usb 1-1: Product: syz [ 42.429697][ T1557] usb 1-1: Manufacturer: syz [ 42.430769][ T1557] usb 1-1: SerialNumber: syz [ 42.757194][ T1557] ------------[ cut here ]------------ [ 42.758511][ T1557] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 42.760223][ T1557] WARNING: CPU: 0 PID: 1557 at drivers/usb/core/urb.c:505 usb_submit_urb+0xa44/0x1588 [ 42.762447][ T1557] Modules linked in: [ 42.763335][ T1557] CPU: 0 PID: 1557 Comm: kworker/0:2 Not tainted 6.3.0-rc7-syzkaller-g14f8db1c0f9a #0 [ 42.765476][ T1557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 42.767789][ T1557] Workqueue: usb_hub_wq hub_event [ 42.768960][ T1557] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 42.770719][ T1557] pc : usb_submit_urb+0xa44/0x1588 [ 42.771900][ T1557] lr : usb_submit_urb+0xa44/0x1588 [ 42.773092][ T1557] sp : ffff800022866900 [ 42.774033][ T1557] x29: ffff800022866940 x28: 0000000000000003 x27: ffff8000138dd38c [ 42.775875][ T1557] x26: ffff0000c71a3500 x25: ffff0000d65d4000 x24: 0000000000000400 [ 42.777762][ T1557] x23: ffff8000138e3c00 x22: dfff800000000000 x21: 0000000000000003 [ 42.779656][ T1557] x20: 0000000000000820 x19: ffff0000c2859e00 x18: ffff800022865e20 [ 42.781509][ T1557] x17: 0000000000000000 x16: ffff80001236e294 x15: 0000000000000002 [ 42.783349][ T1557] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000001 [ 42.785237][ T1557] x11: 0000000000000000 x10: 0000000000000000 x9 : a5867bfd5abeab00 [ 42.787090][ T1557] x8 : a5867bfd5abeab00 x7 : 0000000000000001 x6 : 0000000000000001 [ 42.788989][ T1557] x5 : ffff8000228661f8 x4 : ffff800015e4ccc0 x3 : ffff800008584230 [ 42.790780][ T1557] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000 [ 42.792601][ T1557] Call trace: [ 42.793325][ T1557] usb_submit_urb+0xa44/0x1588 [ 42.794403][ T1557] ar5523_submit_rx_cmd+0x170/0x28c [ 42.795598][ T1557] ar5523_probe+0x91c/0x1a9c [ 42.796752][ T1557] usb_probe_interface+0x500/0x984 [ 42.797931][ T1557] really_probe+0x394/0xa7c [ 42.798955][ T1557] __driver_probe_device+0x1bc/0x3f8 [ 42.800176][ T1557] driver_probe_device+0x78/0x330 [ 42.801348][ T1557] __device_attach_driver+0x2a8/0x4f4 [ 42.802618][ T1557] bus_for_each_drv+0x228/0x2bc [ 42.803706][ T1557] __device_attach+0x2b4/0x434 [ 42.804832][ T1557] device_initial_probe+0x24/0x34 [ 42.806043][ T1557] bus_probe_device+0x178/0x240 [ 42.807196][ T1557] device_add+0xabc/0xf58 [ 42.808183][ T1557] usb_set_configuration+0x15a4/0x1b1c [ 42.809476][ T1557] usb_generic_driver_probe+0x8c/0x148 [ 42.810793][ T1557] usb_probe_device+0x120/0x25c [ 42.811968][ T1557] really_probe+0x394/0xa7c [ 42.813062][ T1557] __driver_probe_device+0x1bc/0x3f8 [ 42.814355][ T1557] driver_probe_device+0x78/0x330 [ 42.815573][ T1557] __device_attach_driver+0x2a8/0x4f4 [ 42.816894][ T1557] bus_for_each_drv+0x228/0x2bc [ 42.818041][ T1557] __device_attach+0x2b4/0x434 [ 42.819197][ T1557] device_initial_probe+0x24/0x34 [ 42.820333][ T1557] bus_probe_device+0x178/0x240 [ 42.821417][ T1557] device_add+0xabc/0xf58 [ 42.822391][ T1557] usb_new_device+0x904/0x142c [ 42.823542][ T1557] hub_event+0x25e4/0x474c [ 42.824630][ T1557] process_one_work+0x788/0x12d4 [ 42.825737][ T1557] worker_thread+0x8e0/0xfe8 [ 42.826792][ T1557] kthread+0x250/0x2d8 [ 42.827711][ T1557] ret_from_fork+0x10/0x20 [ 42.828734][ T1557] irq event stamp: 10188 [ 42.829675][ T1557] hardirqs last enabled at (10187): [<ffff8000083416f0>] __up_console_sem+0x60/0xb4 [ 42.831877][ T1557] hardirqs last disabled at (10188): [<ffff800012369e90>] el1_dbg+0x24/0x80 [ 42.833859][ T1557] softirqs last enabled at (9258): [<ffff800008020c1c>] __do_softirq+0xac0/0xd54 [ 42.836042][ T1557] softirqs last disabled at (9247): [<ffff80000802a658>] ____do_softirq+0x14/0x20 [ 42.838253][ T1557] ---[ end trace 0000000000000000 ]--- [ 42.839808][ T1557] usb 1-1: error -22 when submitting rx urb [ 42.841290][ T1557] usb 1-1: Failed to submit rx cmd [ 42.843471][ T1557] ar5523: probe of 1-1:64.245 failed with error -22 [ 42.849956][ T1557] ------------[ cut here ]------------ [ 42.851223][ T1557] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 42.853023][ T1557] WARNING: CPU: 0 PID: 1557 at drivers/usb/core/urb.c:505 usb_submit_urb+0xa44/0x1588 [ 42.855208][ T1557] Modules linked in: [ 42.856109][ T1557] CPU: 0 PID: 1557 Comm: kworker/0:2 Tainted: G W 6.3.0-rc7-syzkaller-g14f8db1c0f9a #0 [ 42.858722][ T1557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 42.861075][ T1557] Workqueue: usb_hub_wq hub_event [ 42.862238][ T1557] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 42.864035][ T1557] pc : usb_submit_urb+0xa44/0x1588 [ 42.865191][ T1557] lr : usb_submit_urb+0xa44/0x1588 [ 42.866417][ T1557] sp : ffff800022866900 [ 42.867334][ T1557] x29: ffff800022866940 x28: 0000000000000003 x27: ffff8000138dd38c [ 42.869214][ T1557] x26: ffff0000c71a3500 x25: ffff0000d65d4000 x24: 0000000000000400 [ 42.871113][ T1557] x23: ffff8000138e3c00 x22: dfff800000000000 x21: 0000000000000003 [ 42.872928][ T1557] x20: 0000000000000820 x19: ffff0000c285ac00 x18: 1fffe0003684a5b6 [ 42.874702][ T1557] x17: 0000000000000000 x16: ffff80001236e294 x15: 0000000000000002 [ 42.876539][ T1557] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000001 [ 42.878414][ T1557] x11: 0000000000000000 x10: 0000000000000000 x9 : a5867bfd5abeab00 [ 42.880285][ T1557] x8 : a5867bfd5abeab00 x7 : 0000000000000001 x6 : 0000000000000001 [ 42.882263][ T1557] x5 : ffff8000228661f8 x4 : ffff800015e4ccc0 x3 : ffff800008584230 [ 42.884152][ T1557] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000 [ 42.886057][ T1557] Call trace: [ 42.886838][ T1557] usb_submit_urb+0xa44/0x1588 [ 42.887918][ T1557] ar5523_submit_rx_cmd+0x170/0x28c [ 42.889184][ T1557] ar5523_probe+0x91c/0x1a9c [ 42.890305][ T1557] usb_probe_interface+0x500/0x984 [ 42.891482][ T1557] really_probe+0x394/0xa7c [ 42.892570][ T1557] __driver_probe_device+0x1bc/0x3f8 [ 42.893862][ T1557] driver_probe_device+0x78/0x330 [ 42.895021][ T1557] __device_attach_driver+0x2a8/0x4f4 [ 42.896191][ T1557] bus_for_each_drv+0x228/0x2bc [ 42.897270][ T1557] __device_attach+0x2b4/0x434 [ 42.898368][ T1557] device_initial_probe+0x24/0x34 [ 42.899581][ T1557] bus_probe_device+0x178/0x240 [ 42.900678][ T1557] device_add+0xabc/0xf58 [ 42.901655][ T1557] usb_set_configuration+0x15a4/0x1b1c [ 42.902937][ T1557] usb_generic_driver_probe+0x8c/0x148 [ 42.904265][ T1557] usb_probe_device+0x120/0x25c [ 42.905385][ T1557] really_probe+0x394/0xa7c [ 42.906389][ T1557] __driver_probe_device+0x1bc/0x3f8 [ 42.907617][ T1557] driver_probe_device+0x78/0x330 [ 42.908813][ T1557] __device_attach_driver+0x2a8/0x4f4 [ 42.910010][ T1557] bus_for_each_drv+0x228/0x2bc [ 42.911175][ T1557] __device_attach+0x2b4/0x434 [ 42.912267][ T1557] device_initial_probe+0x24/0x34 [ 42.913404][ T1557] bus_probe_device+0x178/0x240 [ 42.914580][ T1557] device_add+0xabc/0xf58 [ 42.915591][ T1557] usb_new_device+0x904/0x142c [ 42.916695][ T1557] hub_event+0x25e4/0x474c [ 42.917718][ T1557] process_one_work+0x788/0x12d4 [ 42.918782][ T1557] worker_thread+0x8e0/0xfe8 [ 42.919886][ T1557] kthread+0x250/0x2d8 [ 42.920750][ T1557] ret_from_fork+0x10/0x20 [ 42.921768][ T1557] irq event stamp: 11896 [ 42.922706][ T1557] hardirqs last enabled at (11895): [<ffff8000083416f0>] __up_console_sem+0x60/0xb4 [ 42.924851][ T1557] hardirqs last disabled at (11896): [<ffff800012369e90>] el1_dbg+0x24/0x80 [ 42.926763][ T1557] softirqs last enabled at (10462): [<ffff800008020c1c>] __do_softirq+0xac0/0xd54 [ 42.928848][ T1557] softirqs last disabled at (10445): [<ffff80000802a658>] ____do_softirq+0x14/0x20 [ 42.931050][ T1557] ---[ end trace 0000000000000000 ]--- [ 42.933159][ T1557] usb 1-1: error -22 when submitting rx urb [ 42.934574][ T1557] usb 1-1: Failed to submit rx cmd [ 42.936476][ T1557] ar5523: probe of 1-1:64.155 failed with error -22 [ 42.976220][ T1557] ------------[ cut here ]------------ [ 42.977485][ T1557] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 42.979282][ T1557] WARNING: CPU: 0 PID: 1557 at drivers/usb/core/urb.c:505 usb_submit_urb+0xa44/0x1588 [ 42.981476][ T1557] Modules linked in: [ 42.982329][ T1557] CPU: 0 PID: 1557 Comm: kworker/0:2 Tainted: G W 6.3.0-rc7-syzkaller-g14f8db1c0f9a #0 [ 42.984891][ T1557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 42.987180][ T1557] Workqueue: usb_hub_wq hub_event [ 42.988365][ T1557] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 42.990186][ T1557] pc : usb_submit_urb+0xa44/0x1588 [ 42.991415][ T1557] lr : usb_submit_urb+0xa44/0x1588 [ 42.992652][ T1557] sp : ffff800022866900 [ 42.993613][ T1557] x29: ffff800022866940 x28: 0000000