[ 15.608030][ T3892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 15.611494][ T3892] eql: remember to turn off Van-Jacobson compression on your slave devices [ 15.653080][ T11] gvnic 0000:00:00.0 enp0s0: Device link is up. [ 15.656046][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): enp0s0: link becomes ready Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.178' (ECDSA) to the list of known hosts. syzkaller login: [ 35.954103][ T4220] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 35.956454][ T4220] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 35.958386][ T4220] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 35.960697][ T4220] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 35.962699][ T4220] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 35.964975][ T4220] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 executing program [ 36.273712][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 36.513645][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 36.633735][ T24] usb 1-1: config 64 has an invalid interface number: 245 but max is 2 [ 36.635724][ T24] usb 1-1: config 64 has an invalid interface number: 155 but max is 2 [ 36.637664][ T24] usb 1-1: config 64 contains an unexpected descriptor of type 0x2, skipping [ 36.639560][ T24] usb 1-1: config 64 contains an unexpected descriptor of type 0x1, skipping [ 36.641577][ T24] usb 1-1: config 64 has an invalid interface number: 243 but max is 2 [ 36.643458][ T24] usb 1-1: config 64 has no interface number 0 [ 36.645167][ T24] usb 1-1: config 64 has no interface number 1 [ 36.646530][ T24] usb 1-1: config 64 has no interface number 2 [ 36.647880][ T24] usb 1-1: config 64 interface 245 altsetting 7 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 36.650449][ T24] usb 1-1: config 64 interface 245 altsetting 7 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 36.653000][ T24] usb 1-1: config 64 interface 245 altsetting 7 has an invalid endpoint descriptor of length 2, skipping [ 36.655662][ T24] usb 1-1: config 64 interface 245 altsetting 7 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 36.658726][ T24] usb 1-1: config 64 interface 155 altsetting 1 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 36.661437][ T24] usb 1-1: config 64 interface 155 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 36.663913][ T24] usb 1-1: config 64 interface 155 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 36.666417][ T24] usb 1-1: config 64 interface 155 altsetting 1 endpoint 0xA has invalid maxpacket 72, setting to 64 [ 36.668802][ T24] usb 1-1: config 64 interface 155 altsetting 1 endpoint 0x81 has an invalid bInterval 139, changing to 11 [ 36.671532][ T24] usb 1-1: config 64 interface 155 altsetting 1 endpoint 0x81 has invalid maxpacket 18251, setting to 1024 [ 36.674219][ T24] usb 1-1: config 64 interface 155 altsetting 1 has a duplicate endpoint with address 0xA, skipping [ 36.676602][ T24] usb 1-1: config 64 interface 155 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 36.679105][ T24] usb 1-1: config 64 interface 155 altsetting 1 has 9 endpoint descriptors, different from the interface descriptor's value: 8 [ 36.682139][ T24] usb 1-1: config 64 interface 243 altsetting 31 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 36.684831][ T24] usb 1-1: config 64 interface 245 has no altsetting 0 [ 36.686472][ T24] usb 1-1: config 64 interface 155 has no altsetting 0 [ 36.688126][ T24] usb 1-1: config 64 interface 243 has no altsetting 0 [ 36.843836][ T24] usb 1-1: New USB device found, idVendor=083a, idProduct=4506, bcdDevice=6d.7d [ 36.845979][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.847752][ T24] usb 1-1: Product: syz [ 36.848719][ T24] usb 1-1: Manufacturer: syz [ 36.849737][ T24] usb 1-1: SerialNumber: syz [ 37.185547][ T24] ------------[ cut here ]------------ [ 37.186861][ T24] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 37.188618][ T24] WARNING: CPU: 1 PID: 24 at drivers/usb/core/urb.c:505 usb_submit_urb+0xa44/0x1588 [ 37.190706][ T24] Modules linked in: [ 37.191590][ T24] CPU: 1 PID: 24 Comm: kworker/1:1 Not tainted 6.1.26-syzkaller #0 [ 37.193415][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 37.195761][ T24] Workqueue: usb_hub_wq hub_event [ 37.196881][ T24] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 37.198662][ T24] pc : usb_submit_urb+0xa44/0x1588 [ 37.199764][ T24] lr : usb_submit_urb+0xa44/0x1588 [ 37.200970][ T24] sp : ffff800019c56920 [ 37.201933][ T24] x29: ffff800019c56960 x28: 0000000000000003 x27: ffff8000135098ec [ 37.203745][ T24] x26: ffff0000c3dbe800 x25: ffff0000d621d000 x24: 0000000000000400 [ 37.205581][ T24] x23: ffff800013510160 x22: dfff800000000000 x21: 0000000000000003 [ 37.207493][ T24] x20: 0000000000000a20 x19: ffff0000c31e0200 x18: ffff800019c55d20 [ 37.209335][ T24] x17: 0000000000000000 x16: ffff8000120e0c54 x15: 0000000000000000 [ 37.211111][ T24] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000001 [ 37.212966][ T24] x11: ff808000081ae818 x10: 0000000000000000 x9 : 8273a46d16bd0500 [ 37.214853][ T24] x8 : 8273a46d16bd0500 x7 : 0000000000000001 x6 : 0000000000000001 [ 37.216700][ T24] x5 : ffff800019c56218 x4 : ffff800015672960 x3 : ffff800008585158 [ 37.218519][ T24] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000 [ 37.220311][ T24] Call trace: [ 37.221021][ T24] usb_submit_urb+0xa44/0x1588 [ 37.222062][ T24] ar5523_submit_rx_cmd+0x170/0x28c [ 37.223234][ T24] ar5523_probe+0x91c/0x1a9c [ 37.224211][ T24] usb_probe_interface+0x500/0x984 [ 37.225368][ T24] really_probe+0x394/0xacc [ 37.226408][ T24] __driver_probe_device+0x1bc/0x3f8 [ 37.227619][ T24] driver_probe_device+0x78/0x330 [ 37.228810][ T24] __device_attach_driver+0x2a8/0x4f4 [ 37.230076][ T24] bus_for_each_drv+0x158/0x1e0 [ 37.231196][ T24] __device_attach+0x2f0/0x480 [ 37.232284][ T24] device_initial_probe+0x24/0x34 [ 37.233483][ T24] bus_probe_device+0xbc/0x1c8 [ 37.234579][ T24] device_add+0xae0/0xef4 [ 37.235581][ T24] usb_set_configuration+0x15c0/0x1b40 [ 37.236787][ T24] usb_generic_driver_probe+0x8c/0x148 [ 37.238016][ T24] usb_probe_device+0x120/0x25c [ 37.239071][ T24] really_probe+0x394/0xacc [ 37.240054][ T24] __driver_probe_device+0x1bc/0x3f8 [ 37.241215][ T24] driver_probe_device+0x78/0x330 [ 37.242413][ T24] __device_attach_driver+0x2a8/0x4f4 [ 37.243586][ T24] bus_for_each_drv+0x158/0x1e0 [ 37.244730][ T24] __device_attach+0x2f0/0x480 [ 37.245900][ T24] device_initial_probe+0x24/0x34 [ 37.246999][ T24] bus_probe_device+0xbc/0x1c8 [ 37.248076][ T24] device_add+0xae0/0xef4 [ 37.249129][ T24] usb_new_device+0x904/0x142c [ 37.250184][ T24] hub_event+0x23dc/0x44a0 [ 37.251145][ T24] process_one_work+0x7ac/0x1404 [ 37.252249][ T24] worker_thread+0x8e4/0xfec [ 37.253323][ T24] kthread+0x250/0x2d8 [ 37.254265][ T24] ret_from_fork+0x10/0x20 [ 37.255283][ T24] irq event stamp: 104574 [ 37.256191][ T24] hardirqs last enabled at (104573): [<ffff80000834278c>] __up_console_sem+0xb4/0x100 [ 37.258426][ T24] hardirqs last disabled at (104574): [<ffff8000120dc90c>] el1_dbg+0x24/0x80 [ 37.260421][ T24] softirqs last enabled at (103788): [<ffff800008020d74>] __do_softirq+0xc14/0xea0 [ 37.262479][ T24] softirqs last disabled at (103783): [<ffff80000802a948>] ____do_softirq+0x14/0x20 [ 37.264541][ T24] ---[ end trace 0000000000000000 ]--- [ 37.265935][ T24] usb 1-1: error -22 when submitting rx urb [ 37.267255][ T24] usb 1-1: Failed to submit rx cmd [ 37.269623][ T24] ar5523: probe of 1-1:64.245 failed with error -22 [ 37.276047][ T24] ------------[ cut here ]------------ [ 37.277253][ T24] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 37.279121][ T24] WARNING: CPU: 1 PID: 24 at drivers/usb/core/urb.c:505 usb_submit_urb+0xa44/0x1588 [ 37.281302][ T24] Modules linked in: [ 37.282149][ T24] CPU: 1 PID: 24 Comm: kworker/1:1 Tainted: G W 6.1.26-syzkaller #0 [ 37.284285][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 37.286663][ T24] Workqueue: usb_hub_wq hub_event [ 37.287760][ T24] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 37.289567][ T24] pc : usb_submit_urb+0xa44/0x1588 [ 37.290758][ T24] lr : usb_submit_urb+0xa44/0x1588 [ 37.291928][ T24] sp : ffff800019c56920 [ 37.292874][ T24] x29: ffff800019c56960 x28: 0000000000000003 x27: ffff8000135098ec [ 37.294709][ T24] x26: ffff0000c3dbe800 x25: ffff0000d621d000 x24: 0000000000000400 [ 37.296574][ T24] x23: ffff800013510160 x22: dfff800000000000 x21: 0000000000000003 [ 37.298443][ T24] x20: 0000000000000a20 x19: ffff0000c31f4800 x18: 0000000000000278 [ 37.300278][ T24] x17: 0000000000000000 x16: ffff8000120e0c54 x15: 0000000000000000 [ 37.302084][ T24] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000001 [ 37.303889][ T24] x11: ff808000081ae818 x10: 0000000000000000 x9 : 8273a46d16bd0500 [ 37.305749][ T24] x8 : 8273a46d16bd0500 x7 : 0000000000000001 x6 : 0000000000000001 [ 37.307538][ T24] x5 : ffff800019c56218 x4 : ffff800015672960 x3 : ffff800008585158 [ 37.309338][ T24] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000 [ 37.311145][ T24] Call trace: [ 37.311839][ T24] usb_submit_urb+0xa44/0x1588 [ 37.312964][ T24] ar5523_submit_rx_cmd+0x170/0x28c [ 37.314137][ T24] ar5523_probe+0x91c/0x1a9c [ 37.315193][ T24] usb_probe_interface+0x500/0x984 [ 37.316364][ T24] really_probe+0x394/0xacc [ 37.317363][ T24] __driver_probe_device+0x1bc/0x3f8 [ 37.318624][ T24] driver_probe_device+0x78/0x330 [ 37.319731][ T24] __device_attach_driver+0x2a8/0x4f4 [ 37.320884][ T24] bus_for_each_drv+0x158/0x1e0 [ 37.321959][ T24] __device_attach+0x2f0/0x480 [ 37.323136][ T24] device_initial_probe+0x24/0x34 [ 37.324323][ T24] bus_probe_device+0xbc/0x1c8 [ 37.325400][ T24] device_add+0xae0/0xef4 [ 37.326395][ T24] usb_set_configuration+0x15c0/0x1b40 [ 37.327602][ T24] usb_generic_driver_probe+0x8c/0x148 [ 37.328900][ T24] usb_probe_device+0x120/0x25c [ 37.330042][ T24] really_probe+0x394/0xacc [ 37.331125][ T24] __driver_probe_device+0x1bc/0x3f8 [ 37.332305][ T24] driver_probe_device+0x78/0x330 [ 37.333545][ T24] __device_attach_driver+0x2a8/0x4f4 [ 37.334749][ T24] bus_for_each_drv+0x158/0x1e0 [ 37.335897][ T24] __device_attach+0x2f0/0x480 [ 37.337099][ T24] device_initial_probe+0x24/0x34 [ 37.338279][ T24] bus_probe_device+0xbc/0x1c8 [ 37.339391][ T24] device_add+0xae0/0xef4 [ 37.340469][ T24] usb_new_device+0x904/0x142c [ 37.341570][ T24] hub_event+0x23dc/0x44a0 [ 37.342650][ T24] process_one_work+0x7ac/0x1404 [ 37.343848][ T24] worker_thread+0x8e4/0xfec [ 37.344858][ T24] kthread+0x250/0x2d8 [ 37.345787][ T24] ret_from_fork+0x10/0x20 [ 37.346873][ T24] irq event stamp: 105998 [ 37.347831][ T24] hardirqs last enabled at (105997): [<ffff80000834278c>] __up_console_sem+0xb4/0x100 [ 37.350090][ T24] hardirqs last disabled at (105998): [<ffff8000120dc90c>] el1_dbg+0x24/0x80 [ 37.352170][ T24] softirqs last enabled at (105728): [<ffff800008020d74>] __do_softirq+0xc14/0xea0 [ 37.354319][ T24] softirqs last disabled at (105717): [<ffff80000802a948>] ____do_softirq+0x14/0x20 [ 37.356574][ T24] ---[ end trace 0000000000000000 ]--- [ 37.358609][ T24] usb 1-1: error -22 when submitting rx urb [ 37.360083][ T24] usb 1-1: Failed to submit rx cmd [ 37.361696][ T24] ar5523: probe of 1-1:64.155 failed with error -22