Warning: Permanently added '10.128.0.97' (ECDSA) to the list of known hosts. executing program [ 35.220129][ T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 35.590030][ T7] usb 1-1: config 0 has an invalid interface number: 249 but max is 0 [ 35.599472][ T7] usb 1-1: config 0 has no interface number 0 [ 35.606327][ T7] usb 1-1: config 0 interface 249 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 35.769996][ T7] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=52.08 [ 35.779871][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.788729][ T7] usb 1-1: Product: syz [ 35.793169][ T7] usb 1-1: Manufacturer: syz [ 35.797949][ T7] usb 1-1: SerialNumber: syz [ 35.805740][ T7] usb 1-1: config 0 descriptor?? [ 35.830563][ T4376] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 35.852663][ T7] ------------[ cut here ]------------ [ 35.858602][ T7] usb 1-1: BOGUS control dir, pipe 80000280 doesn't match bRequestType 40 [ 35.868584][ T7] WARNING: CPU: 0 PID: 7 at drivers/usb/core/urb.c:410 usb_submit_urb+0x14aa/0x1830 [ 35.878920][ T7] Modules linked in: [ 35.883511][ T7] CPU: 0 PID: 7 Comm: kworker/0:1 Not tainted 5.13.0-rc2-syzkaller #0 [ 35.892964][ T7] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 35.904424][ T7] Workqueue: usb_hub_wq hub_event [ 35.909845][ T7] RIP: 0010:usb_submit_urb+0x14aa/0x1830 [ 35.916204][ T7] Code: 84 4c 01 00 00 e8 a6 14 b3 fd 4c 89 f7 e8 4e a7 1b ff 45 89 e8 44 89 e1 48 89 ea 48 89 c6 48 c7 c7 c0 09 63 86 e8 18 f1 fb 01 <0f> 0b 49 8d 4f 5c 48 b8 00 00 00 00 00 fc ff df 48 89 ca 48 89 4c [ 35.937225][ T7] RSP: 0018:ffffc9000007ef48 EFLAGS: 00010286 [ 35.943607][ T7] RAX: 0000000000000000 RBX: ffff888118a67058 RCX: 0000000000000000 [ 35.952042][ T7] RDX: ffff888100283680 RSI: ffffffff812a6013 RDI: fffff5200000fddb [ 35.960539][ T7] RBP: ffff88810f661118 R08: 0000000000000001 R09: 0000000000000000 [ 35.968750][ T7] R10: ffffffff814b996b R11: 0000000000000000 R12: 0000000080000280 [ 35.976884][ T7] R13: 0000000000000040 R14: ffff888118a670a8 R15: ffff888108f99d00 [ 35.986360][ T7] FS: 0000000000000000(0000) GS:ffff8881f6800000(0000) knlGS:0000000000000000 [ 35.996200][ T7] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.003347][ T7] CR2: 00007f1967249008 CR3: 00000001104a3000 CR4: 00000000001506f0 [ 36.012030][ T7] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 36.020518][ T7] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 executing program [ 36.029196][ T7] Call Trace: [ 36.032813][ T7] usb_start_wait_urb+0x101/0x4c0 [ 36.038252][ T7] ? lock_downgrade+0x6e0/0x6e0 [ 36.043920][ T7] ? fs_reclaim_acquire+0xb2/0x160 [ 36.049899][ T7] ? usb_api_blocking_completion+0xa0/0xa0 [ 36.056459][ T7] ? memset+0x20/0x40 [ 36.060727][ T7] usb_control_msg+0x31c/0x4a0 [ 36.065861][ T7] ? usb_start_wait_urb+0x4c0/0x4c0 [ 36.071331][ T7] ? mark_held_locks+0x9f/0xe0 [ 36.076742][ T7] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 36.083373][ T7] dtv5100_probe+0x184/0x2b0 [ 36.088172][ T7] usb_probe_interface+0x315/0x7f0 [ 36.094047][ T7] ? usb_match_dynamic_id+0x1a0/0x1a0 [ 36.099862][ T7] really_probe+0x291/0xf60 [ 36.104678][ T7] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 36.111422][ T7] driver_probe_device+0x298/0x410 [ 36.117000][ T7] __device_attach_driver+0x203/0x2c0 [ 36.122430][ T7] ? driver_allows_async_probing+0x150/0x150 [ 36.129031][ T7] bus_for_each_drv+0x15f/0x1e0 [ 36.133940][ T7] ? bus_for_each_dev+0x1d0/0x1d0 [ 36.139758][ T7] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 36.146045][ T7] ? trace_hardirqs_on+0x5b/0x1a0 [ 36.151435][ T7] __device_attach+0x228/0x4b0 [ 36.156342][ T7] ? __driver_attach_async_helper+0x330/0x330 [ 36.162643][ T7] ? kobject_uevent_env+0x2bb/0x1650 [ 36.168167][ T7] bus_probe_device+0x1e4/0x290 [ 36.173200][ T7] device_add+0xbe0/0x2100 [ 36.178499][ T7] ? wait_for_completion_io+0x270/0x270 [ 36.184300][ T7] ? __fw_devlink_link_to_suppliers+0x5e0/0x5e0 [ 36.191434][ T7] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 36.197942][ T7] ? _raw_spin_unlock_irqrestore+0x42/0x50 [ 36.204678][ T7] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 36.211087][ T7] usb_set_configuration+0x113f/0x1910 [ 36.216654][ T7] usb_generic_driver_probe+0xba/0x100 [ 36.222296][ T7] usb_probe_device+0xd9/0x2c0 [ 36.227213][ T7] ? usb_driver_release_interface+0x180/0x180 [ 36.233350][ T7] really_probe+0x291/0xf60 [ 36.238368][ T7] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 36.244791][ T7] driver_probe_device+0x298/0x410 [ 36.250174][ T7] __device_attach_driver+0x203/0x2c0 [ 36.255733][ T7] ? driver_allows_async_probing+0x150/0x150 [ 36.261861][ T7] bus_for_each_drv+0x15f/0x1e0 [ 36.267042][ T7] ? bus_for_each_dev+0x1d0/0x1d0 [ 36.272838][ T7] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 36.279022][ T7] ? trace_hardirqs_on+0x5b/0x1a0 [ 36.284245][ T7] __device_attach+0x228/0x4b0 [ 36.289372][ T7] ? __driver_attach_async_helper+0x330/0x330 [ 36.295847][ T7] ? kobject_uevent_env+0x2bb/0x1650 [ 36.302002][ T7] bus_probe_device+0x1e4/0x290 [ 36.307238][ T7] device_add+0xbe0/0x2100 [ 36.312146][ T7] ? __fw_devlink_link_to_suppliers+0x5e0/0x5e0 [ 36.318748][ T7] ? kfree+0xdb/0x3b0 [ 36.322887][ T7] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 36.329728][ T7] usb_new_device.cold+0x721/0x1058 [ 36.335634][ T7] ? hub_disconnect+0x510/0x510 [ 36.340765][ T7] ? rwlock_bug.part.0+0x90/0x90 [ 36.346358][ T7] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 36.353178][ T7] hub_event+0x2357/0x4330 [ 36.358308][ T7] ? hub_port_debounce+0x3c0/0x3c0 [ 36.363567][ T7] ? lock_downgrade+0x3f1/0x6e0 [ 36.368937][ T7] ? __do_sys_prctl+0xbb0/0xfd0 [ 36.374138][ T7] ? lock_release+0x6f0/0x6f0 [ 36.379406][ T7] ? lock_downgrade+0x6e0/0x6e0 [ 36.384741][ T7] ? do_raw_spin_lock+0x120/0x2b0 [ 36.389929][ T7] process_one_work+0x98d/0x1580 [ 36.395264][ T7] ? pwq_dec_nr_in_flight+0x320/0x320 [ 36.401325][ T7] ? rwlock_bug.part.0+0x90/0x90 [ 36.406639][ T7] worker_thread+0x64c/0x1120 [ 36.411675][ T7] ? __kthread_parkme+0x118/0x1d0 [ 36.416855][ T7] ? process_one_work+0x1580/0x1580 [ 36.422308][ T7] kthread+0x38c/0x460 [ 36.427069][ T7] ? _raw_spin_unlock_irq+0x1f/0x30 [ 36.432816][ T7] ? __kthread_bind_mask+0xc0/0xc0 [ 36.438612][ T7] ret_from_fork+0x1f/0x30 [ 36.443379][ T7] Kernel panic - not syncing: panic_on_warn set ... [ 36.450804][ T7] CPU: 0 PID: 7 Comm: kworker/0:1 Not tainted 5.13.0-rc2-syzkaller #0 [ 36.459805][ T7] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 36.470607][ T7] Workqueue: usb_hub_wq hub_event [ 36.475834][ T7] Call Trace: [ 36.479112][ T7] dump_stack+0x143/0x1db [ 36.483849][ T7] panic+0x306/0x73d [ 36.487922][ T7] ? __warn_printk+0xf3/0xf3 [ 36.493078][ T7] ? __warn.cold+0x1a/0x44 [ 36.498009][ T7] ? usb_submit_urb+0x14aa/0x1830 [ 36.503416][ T7] __warn.cold+0x35/0x44 [ 36.508032][ T7] ? usb_submit_urb+0x14aa/0x1830 [ 36.513433][ T7] report_bug+0x1bd/0x210 [ 36.517898][ T7] handle_bug+0x3c/0x60 [ 36.522051][ T7] exc_invalid_op+0x14/0x40 [ 36.526627][ T7] asm_exc_invalid_op+0x12/0x20 [ 36.531950][ T7] RIP: 0010:usb_submit_urb+0x14aa/0x1830 [ 36.537674][ T7] Code: 84 4c 01 00 00 e8 a6 14 b3 fd 4c 89 f7 e8 4e a7 1b ff 45 89 e8 44 89 e1 48 89 ea 48 89 c6 48 c7 c7 c0 09 63 86 e8 18 f1 fb 01 <0f> 0b 49 8d 4f 5c 48 b8 00 00 00 00 00 fc ff df 48 89 ca 48 89 4c [ 36.558646][ T7] RSP: 0018:ffffc9000007ef48 EFLAGS: 00010286 [ 36.564970][ T7] RAX: 0000000000000000 RBX: ffff888118a67058 RCX: 0000000000000000 [ 36.573407][ T7] RDX: ffff888100283680 RSI: ffffffff812a6013 RDI: fffff5200000fddb [ 36.581932][ T7] RBP: ffff88810f661118 R08: 0000000000000001 R09: 0000000000000000 [ 36.590834][ T7] R10: ffffffff814b996b R11: 0000000000000000 R12: 0000000080000280 [ 36.598895][ T7] R13: 0000000000000040 R14: ffff888118a670a8 R15: ffff888108f99d00 [ 36.607683][ T7] ? __irq_work_queue_local+0xbb/0xf0 [ 36.613234][ T7] ? vprintk+0x93/0x1c0 [ 36.617386][ T7] ? usb_submit_urb+0x14aa/0x1830 [ 36.622892][ T7] usb_start_wait_urb+0x101/0x4c0 [ 36.628113][ T7] ? lock_downgrade+0x6e0/0x6e0 [ 36.633098][ T7] ? fs_reclaim_acquire+0xb2/0x160 [ 36.638658][ T7] ? usb_api_blocking_completion+0xa0/0xa0 [ 36.644629][ T7] ? memset+0x20/0x40 [ 36.648926][ T7] usb_control_msg+0x31c/0x4a0 [ 36.653950][ T7] ? usb_start_wait_urb+0x4c0/0x4c0 [ 36.659739][ T7] ? mark_held_locks+0x9f/0xe0 [ 36.665180][ T7] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 36.671877][ T7] dtv5100_probe+0x184/0x2b0 [ 36.676625][ T7] usb_probe_interface+0x315/0x7f0 [ 36.682298][ T7] ? usb_match_dynamic_id+0x1a0/0x1a0 [ 36.688151][ T7] really_probe+0x291/0xf60 [ 36.693189][ T7] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 36.699606][ T7] driver_probe_device+0x298/0x410 [ 36.705091][ T7] __device_attach_driver+0x203/0x2c0 [ 36.711032][ T7] ? driver_allows_async_probing+0x150/0x150 [ 36.717953][ T7] bus_for_each_drv+0x15f/0x1e0 [ 36.723708][ T7] ? bus_for_each_dev+0x1d0/0x1d0 [ 36.729408][ T7] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 36.735682][ T7] ? trace_hardirqs_on+0x5b/0x1a0 [ 36.741074][ T7] __device_attach+0x228/0x4b0 [ 36.746479][ T7] ? __driver_attach_async_helper+0x330/0x330 [ 36.753003][ T7] ? kobject_uevent_env+0x2bb/0x1650 [ 36.758487][ T7] bus_probe_device+0x1e4/0x290 [ 36.763610][ T7] device_add+0xbe0/0x2100 [ 36.768026][ T7] ? wait_for_completion_io+0x270/0x270 [ 36.774583][ T7] ? __fw_devlink_link_to_suppliers+0x5e0/0x5e0 [ 36.782631][ T7] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 36.790629][ T7] ? _raw_spin_unlock_irqrestore+0x42/0x50 [ 36.797491][ T7] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 36.804708][ T7] usb_set_configuration+0x113f/0x1910 [ 36.810269][ T7] usb_generic_driver_probe+0xba/0x100 [ 36.817122][ T7] usb_probe_device+0xd9/0x2c0 [ 36.822523][ T7] ? usb_driver_release_interface+0x180/0x180 [ 36.829294][ T7] really_probe+0x291/0xf60 [ 36.834218][ T7] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 36.841244][ T7] driver_probe_device+0x298/0x410 [ 36.847126][ T7] __device_attach_driver+0x203/0x2c0 [ 36.852789][ T7] ? driver_allows_async_probing+0x150/0x150 [ 36.859315][ T7] bus_for_each_drv+0x15f/0x1e0 [ 36.864573][ T7] ? bus_for_each_dev+0x1d0/0x1d0 [ 36.869784][ T7] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 36.876286][ T7] ? trace_hardirqs_on+0x5b/0x1a0 [ 36.881804][ T7] __device_attach+0x228/0x4b0 [ 36.886988][ T7] ? __driver_attach_async_helper+0x330/0x330 [ 36.893808][ T7] ? kobject_uevent_env+0x2bb/0x1650 [ 36.899241][ T7] bus_probe_device+0x1e4/0x290 [ 36.904774][ T7] device_add+0xbe0/0x2100 [ 36.909707][ T7] ? __fw_devlink_link_to_suppliers+0x5e0/0x5e0 [ 36.916842][ T7] ? kfree+0xdb/0x3b0 [ 36.921103][ T7] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 36.927845][ T7] usb_new_device.cold+0x721/0x1058 [ 36.933372][ T7] ? hub_disconnect+0x510/0x510 [ 36.938566][ T7] ? rwlock_bug.part.0+0x90/0x90 [ 36.944663][ T7] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 36.952022][ T7] hub_event+0x2357/0x4330 [ 36.957170][ T7] ? hub_port_debounce+0x3c0/0x3c0 [ 36.963185][ T7] ? lock_downgrade+0x3f1/0x6e0 [ 36.968173][ T7] ? __do_sys_prctl+0xbb0/0xfd0 [ 36.973518][ T7] ? lock_release+0x6f0/0x6f0 [ 36.978653][ T7] ? lock_downgrade+0x6e0/0x6e0 [ 36.983972][ T7] ? do_raw_spin_lock+0x120/0x2b0 [ 36.989925][ T7] process_one_work+0x98d/0x1580 [ 36.995436][ T7] ? pwq_dec_nr_in_flight+0x320/0x320 [ 37.001461][ T7] ? rwlock_bug.part.0+0x90/0x90 [ 37.007155][ T7] worker_thread+0x64c/0x1120 [ 37.012021][ T7] ? __kthread_parkme+0x118/0x1d0 [ 37.017982][ T7] ? process_one_work+0x1580/0x1580 [ 37.023690][ T7] kthread+0x38c/0x460 [ 37.027869][ T7] ? _raw_spin_unlock_irq+0x1f/0x30 [ 37.033664][ T7] ? __kthread_bind_mask+0xc0/0xc0 [ 37.038804][ T7] ret_from_fork+0x1f/0x30 [ 37.045445][ T7] Kernel Offset: disabled [ 37.050183][ T7] Rebooting in 86400 seconds..