Warning: Permanently added '10.128.1.47' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 35.203742][ T2215] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 35.562807][ T2215] usb 1-1: config 128 has an invalid interface number: 35 but max is 3 [ 35.571242][ T2215] usb 1-1: config 128 has an invalid interface association descriptor of length 2, skipping [ 35.581470][ T2215] usb 1-1: config 128 has an invalid interface number: 157 but max is 3 [ 35.589870][ T2215] usb 1-1: config 128 has an invalid descriptor of length 1, skipping remainder of the config [ 35.600178][ T2215] usb 1-1: config 128 has 2 interfaces, different from the descriptor's value: 4 [ 35.609387][ T2215] usb 1-1: config 128 has no interface number 0 [ 35.615699][ T2215] usb 1-1: config 128 has no interface number 1 [ 35.621997][ T2215] usb 1-1: config 128 interface 35 altsetting 3 endpoint 0xA has invalid maxpacket 1212, setting to 1024 [ 35.633319][ T2215] usb 1-1: config 128 interface 35 altsetting 3 bulk endpoint 0xA has invalid maxpacket 1024 [ 35.643573][ T2215] usb 1-1: config 128 interface 35 altsetting 3 has an invalid endpoint with address 0x0, skipping [ 35.654346][ T2215] usb 1-1: config 128 interface 35 altsetting 3 endpoint 0xD has invalid maxpacket 2031, setting to 64 [ 35.665451][ T2215] usb 1-1: config 128 interface 35 altsetting 3 endpoint 0xE has invalid maxpacket 1967, setting to 1024 [ 35.676705][ T2215] usb 1-1: config 128 interface 35 altsetting 3 has 8 endpoint descriptors, different from the interface descriptor's value: 7 [ 35.689935][ T2215] usb 1-1: config 128 interface 157 altsetting 39 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 35.703407][ T2215] usb 1-1: config 128 interface 35 has no altsetting 0 [ 35.710279][ T2215] usb 1-1: config 128 interface 157 has no altsetting 0 [ 35.872594][ T2215] usb 1-1: New USB device found, idVendor=08e3, idProduct=0102, bcdDevice=e3.37 [ 35.881681][ T2215] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.889766][ T2215] usb 1-1: Product: syz [ 35.894014][ T2215] usb 1-1: Manufacturer: syz [ 35.898611][ T2215] usb 1-1: SerialNumber: syz [ 35.923485][ T4383] raw-gadget gadget: fail, usb_ep_enable returned -22 executing program [ 36.272607][ T2215] ------------[ cut here ]------------ [ 36.278320][ T2215] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 36.284812][ T2215] WARNING: CPU: 1 PID: 2215 at drivers/usb/core/urb.c:493 usb_submit_urb+0xd27/0x1560 [ 36.294445][ T2215] Modules linked in: [ 36.298349][ T2215] CPU: 1 PID: 2215 Comm: kworker/1:2 Not tainted 5.10.0-syzkaller #0 [ 36.306503][ T2215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 36.316628][ T2215] Workqueue: usb_hub_wq hub_event [ 36.321701][ T2215] RIP: 0010:usb_submit_urb+0xd27/0x1560 [ 36.327296][ T2215] Code: 84 d4 02 00 00 e8 b9 12 b5 fd 4c 89 ef e8 f1 6d 19 ff 41 89 d8 44 89 e1 4c 89 f2 48 89 c6 48 c7 c7 00 3d 82 86 e8 a4 de fd 01 <0f> 0b e9 81 f8 ff ff e8 8d 12 b5 fd 48 81 c5 30 06 00 00 e9 ad f7 [ 36.347022][ T2215] RSP: 0018:ffffc90005e16ed0 EFLAGS: 00010282 [ 36.353158][ T2215] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 36.361142][ T2215] RDX: ffff8881097b4d40 RSI: ffffffff8129ffe3 RDI: fffff52000bc2dcc [ 36.369163][ T2215] RBP: ffff88810928c1e0 R08: 0000000000000001 R09: 0000000000000000 [ 36.377201][ T2215] R10: ffffffff814a7b5b R11: 0000000000000000 R12: 0000000000000001 [ 36.385236][ T2215] R13: ffff888113a0e0a0 R14: ffff8881019e2a28 R15: ffff888101c39400 [ 36.393299][ T2215] FS: 0000000000000000(0000) GS:ffff8881f6900000(0000) knlGS:0000000000000000 [ 36.402313][ T2215] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.408920][ T2215] CR2: 000056297f109738 CR3: 00000001118f3000 CR4: 00000000001506e0 [ 36.417202][ T2215] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 36.425251][ T2215] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 36.433287][ T2215] Call Trace: [ 36.436585][ T2215] ? lockdep_init_map_waits+0x232/0x700 [ 36.442187][ T2215] cxacru_cm+0x3c0/0x8e0 [ 36.446447][ T2215] ? cxacru_timeout_kill+0x40/0x40 [ 36.451566][ T2215] ? queue_work_node+0x270/0x270 [ 36.456555][ T2215] cxacru_card_status+0x22/0xe0 [ 36.461427][ T2215] cxacru_bind+0x7a9/0x11a0 [ 36.465994][ T2215] ? cxacru_fw.constprop.0+0x460/0x460 [ 36.471490][ T2215] usbatm_usb_probe+0x321/0x1ae0 [ 36.476490][ T2215] ? __pm_runtime_set_status+0x68a/0xd20 [ 36.482197][ T2215] ? mark_held_locks+0x9f/0xe0 [ 36.486976][ T2215] cxacru_usb_probe+0xdf/0x1e0 [ 36.491776][ T2215] ? cxacru_card_status+0xe0/0xe0 [ 36.496879][ T2215] ? __pm_runtime_set_status+0x48a/0xd20 [ 36.502651][ T2215] usb_probe_interface+0x315/0x7f0 [ 36.507774][ T2215] ? usb_match_dynamic_id+0x1a0/0x1a0 [ 36.513194][ T2215] really_probe+0x2b1/0xe40 [ 36.517717][ T2215] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 36.524041][ T2215] driver_probe_device+0x285/0x3f0 [ 36.529190][ T2215] __device_attach_driver+0x216/0x2d0 [ 36.534611][ T2215] ? driver_allows_async_probing+0x170/0x170 [ 36.540621][ T2215] bus_for_each_drv+0x15f/0x1e0 [ 36.545552][ T2215] ? bus_for_each_dev+0x1d0/0x1d0 [ 36.550640][ T2215] ? lockdep_hardirqs_on_prepare+0x286/0x3f0 [ 36.556692][ T2215] ? trace_hardirqs_on+0x5b/0x1a0 [ 36.561732][ T2215] __device_attach+0x228/0x4c0 [ 36.566544][ T2215] ? __driver_attach_async_helper+0x380/0x380 [ 36.573187][ T2215] ? kobject_uevent_env+0x2bb/0x1680 [ 36.578481][ T2215] bus_probe_device+0x1e4/0x290 [ 36.583418][ T2215] device_add+0xbc4/0x1d90 [ 36.587867][ T2215] ? wait_for_completion_io+0x270/0x270 [ 36.593560][ T2215] ? __fw_devlink_link_to_suppliers+0x5e0/0x5e0 [ 36.599845][ T2215] ? kfree+0xdb/0x3a0 [ 36.603946][ T2215] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 36.610231][ T2215] usb_set_configuration+0x113c/0x1910 [ 36.615770][ T2215] usb_generic_driver_probe+0xba/0x100 [ 36.621280][ T2215] usb_probe_device+0xd9/0x2c0 [ 36.626208][ T2215] ? usb_driver_release_interface+0x180/0x180 [ 36.632396][ T2215] really_probe+0x2b1/0xe40 [ 36.636960][ T2215] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 36.643264][ T2215] driver_probe_device+0x285/0x3f0 [ 36.648405][ T2215] __device_attach_driver+0x216/0x2d0 [ 36.653928][ T2215] ? driver_allows_async_probing+0x170/0x170 [ 36.659982][ T2215] bus_for_each_drv+0x15f/0x1e0 [ 36.664960][ T2215] ? bus_for_each_dev+0x1d0/0x1d0 [ 36.670088][ T2215] ? lockdep_hardirqs_on_prepare+0x286/0x3f0 [ 36.676158][ T2215] ? trace_hardirqs_on+0x5b/0x1a0 [ 36.681243][ T2215] __device_attach+0x228/0x4c0 [ 36.686071][ T2215] ? __driver_attach_async_helper+0x380/0x380 [ 36.692229][ T2215] ? kobject_uevent_env+0x2bb/0x1680 [ 36.697532][ T2215] bus_probe_device+0x1e4/0x290 [ 36.702487][ T2215] device_add+0xbc4/0x1d90 [ 36.706927][ T2215] ? __fw_devlink_link_to_suppliers+0x5e0/0x5e0 [ 36.713221][ T2215] ? kfree+0xdb/0x3a0 [ 36.717224][ T2215] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 36.723518][ T2215] usb_new_device.cold+0x725/0x1057 [ 36.728754][ T2215] ? hub_disconnect+0x510/0x510 [ 36.733660][ T2215] ? rwlock_bug.part.0+0x90/0x90 [ 36.738620][ T2215] ? lockdep_hardirqs_on_prepare+0x286/0x3f0 [ 36.744667][ T2215] hub_event+0x2348/0x42d0 [ 36.749146][ T2215] ? hub_port_debounce+0x3b0/0x3b0 [ 36.754314][ T2215] ? __lock_acquire+0x5d1/0x54a0 [ 36.759276][ T2215] ? worker_detach_from_pool+0x20/0x310 [ 36.764916][ T2215] ? lock_release+0x6e0/0x6e0 [ 36.769622][ T2215] ? lock_downgrade+0x6d0/0x6d0 [ 36.774534][ T2215] ? do_raw_spin_lock+0x120/0x2b0 [ 36.779578][ T2215] process_one_work+0x98d/0x15c0 [ 36.784570][ T2215] ? pwq_dec_nr_in_flight+0x320/0x320 [ 36.789962][ T2215] ? rwlock_bug.part.0+0x90/0x90 [ 36.794954][ T2215] worker_thread+0x64c/0x1120 [ 36.799658][ T2215] ? __kthread_parkme+0x118/0x1d0 [ 36.804732][ T2215] ? process_one_work+0x15c0/0x15c0 [ 36.809949][ T2215] kthread+0x38c/0x460 [ 36.814069][ T2215] ? _raw_spin_unlock_irq+0x1f/0x30 [ 36.819282][ T2215] ? kthread_create_worker_on_cpu+0xf0/0xf0 [ 36.825248][ T2215] ret_from_fork+0x1f/0x30 [ 36.829684][ T2215] Kernel panic - not syncing: panic_on_warn set ... [ 36.836269][ T2215] CPU: 1 PID: 2215 Comm: kworker/1:2 Not tainted 5.10.0-syzkaller #0 [ 36.844334][ T2215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 36.854376][ T2215] Workqueue: usb_hub_wq hub_event [ 36.859392][ T2215] Call Trace: [ 36.862659][ T2215] dump_stack+0x107/0x163 [ 36.866995][ T2215] panic+0x343/0x77f [ 36.870902][ T2215] ? __warn_printk+0xf3/0xf3 [ 36.875484][ T2215] ? __warn.cold+0x1a/0x44 [ 36.879886][ T2215] ? usb_submit_urb+0xd27/0x1560 [ 36.884811][ T2215] __warn.cold+0x35/0x44 [ 36.889046][ T2215] ? usb_submit_urb+0xd27/0x1560 [ 36.893974][ T2215] report_bug+0x1bd/0x210 [ 36.898294][ T2215] handle_bug+0x3c/0x60 [ 36.902440][ T2215] exc_invalid_op+0x14/0x40 [ 36.906949][ T2215] asm_exc_invalid_op+0x12/0x20 [ 36.911808][ T2215] RIP: 0010:usb_submit_urb+0xd27/0x1560 [ 36.917361][ T2215] Code: 84 d4 02 00 00 e8 b9 12 b5 fd 4c 89 ef e8 f1 6d 19 ff 41 89 d8 44 89 e1 4c 89 f2 48 89 c6 48 c7 c7 00 3d 82 86 e8 a4 de fd 01 <0f> 0b e9 81 f8 ff ff e8 8d 12 b5 fd 48 81 c5 30 06 00 00 e9 ad f7 [ 36.937044][ T2215] RSP: 0018:ffffc90005e16ed0 EFLAGS: 00010282 [ 36.943101][ T2215] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 36.951060][ T2215] RDX: ffff8881097b4d40 RSI: ffffffff8129ffe3 RDI: fffff52000bc2dcc [ 36.959021][ T2215] RBP: ffff88810928c1e0 R08: 0000000000000001 R09: 0000000000000000 [ 36.966988][ T2215] R10: ffffffff814a7b5b R11: 0000000000000000 R12: 0000000000000001 [ 36.974945][ T2215] R13: ffff888113a0e0a0 R14: ffff8881019e2a28 R15: ffff888101c39400 [ 36.982927][ T2215] ? __irq_work_queue_local+0xbb/0xf0 [ 36.988297][ T2215] ? vprintk_func+0x93/0x140 [ 36.992881][ T2215] ? lockdep_init_map_waits+0x232/0x700 [ 36.998440][ T2215] cxacru_cm+0x3c0/0x8e0 [ 37.002673][ T2215] ? cxacru_timeout_kill+0x40/0x40 [ 37.007773][ T2215] ? queue_work_node+0x270/0x270 [ 37.012721][ T2215] cxacru_card_status+0x22/0xe0 [ 37.017577][ T2215] cxacru_bind+0x7a9/0x11a0 [ 37.022069][ T2215] ? cxacru_fw.constprop.0+0x460/0x460 [ 37.027520][ T2215] usbatm_usb_probe+0x321/0x1ae0 [ 37.032453][ T2215] ? __pm_runtime_set_status+0x68a/0xd20 [ 37.038097][ T2215] ? mark_held_locks+0x9f/0xe0 [ 37.042868][ T2215] cxacru_usb_probe+0xdf/0x1e0 [ 37.047621][ T2215] ? cxacru_card_status+0xe0/0xe0 [ 37.052633][ T2215] ? __pm_runtime_set_status+0x48a/0xd20 [ 37.058258][ T2215] usb_probe_interface+0x315/0x7f0 [ 37.063361][ T2215] ? usb_match_dynamic_id+0x1a0/0x1a0 [ 37.068826][ T2215] really_probe+0x2b1/0xe40 [ 37.073320][ T2215] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 37.079550][ T2215] driver_probe_device+0x285/0x3f0 [ 37.084663][ T2215] __device_attach_driver+0x216/0x2d0 [ 37.090031][ T2215] ? driver_allows_async_probing+0x170/0x170 [ 37.096011][ T2215] bus_for_each_drv+0x15f/0x1e0 [ 37.100880][ T2215] ? bus_for_each_dev+0x1d0/0x1d0 [ 37.105897][ T2215] ? lockdep_hardirqs_on_prepare+0x286/0x3f0 [ 37.111905][ T2215] ? trace_hardirqs_on+0x5b/0x1a0 [ 37.116916][ T2215] __device_attach+0x228/0x4c0 [ 37.121669][ T2215] ? __driver_attach_async_helper+0x380/0x380 [ 37.127725][ T2215] ? kobject_uevent_env+0x2bb/0x1680 [ 37.132999][ T2215] bus_probe_device+0x1e4/0x290 [ 37.137839][ T2215] device_add+0xbc4/0x1d90 [ 37.142243][ T2215] ? wait_for_completion_io+0x270/0x270 [ 37.147781][ T2215] ? __fw_devlink_link_to_suppliers+0x5e0/0x5e0 [ 37.154010][ T2215] ? kfree+0xdb/0x3a0 [ 37.157981][ T2215] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 37.164229][ T2215] usb_set_configuration+0x113c/0x1910 [ 37.169681][ T2215] usb_generic_driver_probe+0xba/0x100 [ 37.175129][ T2215] usb_probe_device+0xd9/0x2c0 [ 37.179884][ T2215] ? usb_driver_release_interface+0x180/0x180 [ 37.185939][ T2215] really_probe+0x2b1/0xe40 [ 37.190436][ T2215] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 37.196679][ T2215] driver_probe_device+0x285/0x3f0 [ 37.201780][ T2215] __device_attach_driver+0x216/0x2d0 [ 37.207160][ T2215] ? driver_allows_async_probing+0x170/0x170 [ 37.213129][ T2215] bus_for_each_drv+0x15f/0x1e0 [ 37.217969][ T2215] ? bus_for_each_dev+0x1d0/0x1d0 [ 37.222997][ T2215] ? lockdep_hardirqs_on_prepare+0x286/0x3f0 [ 37.228981][ T2215] ? trace_hardirqs_on+0x5b/0x1a0 [ 37.234010][ T2215] __device_attach+0x228/0x4c0 [ 37.238774][ T2215] ? __driver_attach_async_helper+0x380/0x380 [ 37.244862][ T2215] ? kobject_uevent_env+0x2bb/0x1680 [ 37.250137][ T2215] bus_probe_device+0x1e4/0x290 [ 37.254978][ T2215] device_add+0xbc4/0x1d90 [ 37.259382][ T2215] ? __fw_devlink_link_to_suppliers+0x5e0/0x5e0 [ 37.265624][ T2215] ? kfree+0xdb/0x3a0 [ 37.269595][ T2215] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 37.275830][ T2215] usb_new_device.cold+0x725/0x1057 [ 37.281034][ T2215] ? hub_disconnect+0x510/0x510 [ 37.285874][ T2215] ? rwlock_bug.part.0+0x90/0x90 [ 37.290816][ T2215] ? lockdep_hardirqs_on_prepare+0x286/0x3f0 [ 37.296785][ T2215] hub_event+0x2348/0x42d0 [ 37.301189][ T2215] ? hub_port_debounce+0x3b0/0x3b0 [ 37.306301][ T2215] ? __lock_acquire+0x5d1/0x54a0 [ 37.311245][ T2215] ? worker_detach_from_pool+0x20/0x310 [ 37.316803][ T2215] ? lock_release+0x6e0/0x6e0 [ 37.321478][ T2215] ? lock_downgrade+0x6d0/0x6d0 [ 37.326317][ T2215] ? do_raw_spin_lock+0x120/0x2b0 [ 37.331336][ T2215] process_one_work+0x98d/0x15c0 [ 37.336268][ T2215] ? pwq_dec_nr_in_flight+0x320/0x320 [ 37.341630][ T2215] ? rwlock_bug.part.0+0x90/0x90 [ 37.346557][ T2215] worker_thread+0x64c/0x1120 [ 37.351251][ T2215] ? __kthread_parkme+0x118/0x1d0 [ 37.356288][ T2215] ? process_one_work+0x15c0/0x15c0 [ 37.361479][ T2215] kthread+0x38c/0x460 [ 37.365554][ T2215] ? _raw_spin_unlock_irq+0x1f/0x30 [ 37.370746][ T2215] ? kthread_create_worker_on_cpu+0xf0/0xf0 [ 37.376644][ T2215] ret_from_fork+0x1f/0x30 [ 37.381619][ T2215] Kernel Offset: disabled [ 37.386000][ T2215] Rebooting in 86400 seconds..