Warning: Permanently added '10.128.1.43' (ECDSA) to the list of known hosts.
executing program
syzkaller login: [   57.497369][ T2951] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   57.737295][ T2951] usb 1-1: Using ep0 maxpacket: 16
[   57.917347][ T2951] usb 1-1: unable to get BOS descriptor or descriptor too short
[   58.017919][ T2951] usb 1-1: config 8 has an invalid interface number: 140 but max is 0
[   58.027073][ T2951] usb 1-1: config 8 has no interface number 0
[   58.035011][ T2951] usb 1-1: config 8 interface 140 altsetting 6 bulk endpoint 0xA has invalid maxpacket 64
[   58.046192][ T2951] usb 1-1: config 8 interface 140 altsetting 6 has an invalid endpoint with address 0x0, skipping
[   58.057558][ T2951] usb 1-1: config 8 interface 140 altsetting 6 endpoint 0x8E has invalid maxpacket 512, setting to 64
[   58.069318][ T2951] usb 1-1: config 8 interface 140 altsetting 6 has a duplicate endpoint with address 0xE, skipping
[   58.080765][ T2951] usb 1-1: config 8 interface 140 altsetting 6 bulk endpoint 0x2 has invalid maxpacket 8
[   58.091499][ T2951] usb 1-1: config 8 interface 140 altsetting 6 bulk endpoint 0xB has invalid maxpacket 1024
[   58.102384][ T2951] usb 1-1: config 8 interface 140 altsetting 6 has a duplicate endpoint with address 0x3, skipping
[   58.113816][ T2951] usb 1-1: config 8 interface 140 altsetting 6 has a duplicate endpoint with address 0x4, skipping
[   58.125290][ T2951] usb 1-1: config 8 interface 140 altsetting 6 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[   58.136906][ T2951] usb 1-1: config 8 interface 140 altsetting 6 has an invalid endpoint descriptor of length 2, skipping
[   58.149004][ T2951] usb 1-1: config 8 interface 140 altsetting 6 has 13 endpoint descriptors, different from the interface descriptor's value: 12
[   58.162984][ T2951] usb 1-1: config 8 interface 140 has no altsetting 0
[   58.407282][ T2951] usb 1-1: string descriptor 0 read error: -22
[   58.414667][ T2951] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=a0.ff
[   58.424849][ T2951] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   58.448291][ T8412] raw-gadget gadget: fail, usb_ep_enable returned -22
[   58.470670][ T2951] ------------[ cut here ]------------
[   58.476365][ T2951] usb 1-1: BOGUS urb xfer, pipe 1 != type 3
[   58.484387][ T2951] WARNING: CPU: 1 PID: 2951 at drivers/usb/core/urb.c:493 usb_submit_urb+0xd27/0x1540
[   58.495291][ T2951] Modules linked in:
[   58.499893][ T2951] CPU: 1 PID: 2951 Comm: kworker/1:2 Not tainted 5.13.0-rc3-syzkaller #0
[   58.509620][ T2951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   58.520117][ T2951] Workqueue: usb_hub_wq hub_event
[   58.525337][ T2951] RIP: 0010:usb_submit_urb+0xd27/0x1540
[   58.530969][ T2951] Code: 84 d4 02 00 00 e8 69 36 29 fc 4c 89 ef e8 b1 4d 0e ff 41 89 d8 44 89 e1 4c 89 f2 48 89 c6 48 c7 c7 20 95 06 8a e8 8c 59 89 03 <0f> 0b e9 81 f8 ff ff e8 3d 36 29 fc 48 81 c5 40 06 00 00 e9 ad f7
[   58.553302][ T2951] RSP: 0018:ffffc900020f6f00 EFLAGS: 00010282
[   58.559414][ T2951] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000
[   58.567739][ T2951] RDX: ffff88801f160000 RSI: ffffffff815ce355 RDI: fffff5200041edd2
[   58.575799][ T2951] RBP: ffff88801d9d38f0 R08: 0000000000000000 R09: 0000000000000000
[   58.584070][ T2951] R10: ffffffff815c81be R11: 0000000000000000 R12: 0000000000000001
[   58.592137][ T2951] R13: ffff8880280f70a8 R14: ffff8880193cae60 R15: ffff888021d6e200
[   58.600174][ T2951] FS:  0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000
[   58.609195][ T2951] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   58.615787][ T2951] CR2: 00007ff2d5c6c000 CR3: 000000002d0a8000 CR4: 0000000000350ee0
[   58.624079][ T2951] Call Trace:
[   58.627440][ T2951]  usb_start_wait_urb+0x101/0x4c0
[   58.632468][ T2951]  ? usb_api_blocking_completion+0xa0/0xa0
[   58.638833][ T2951]  ? memset+0x20/0x40
[   58.643035][ T2951]  usb_bulk_msg+0x226/0x550
[   58.647979][ T2951]  amradio_send_cmd+0x2d6/0x8b0
[   58.653077][ T2951]  ? lockdep_init_map_type+0x2c3/0x7b0
[   58.659582][ T2951]  ? vidioc_querycap+0x200/0x200
[   58.664532][ T2951]  ? read_word_at_a_time+0xe/0x20
[   58.669687][ T2951]