Warning: Permanently added '10.128.1.25' (ED25519) to the list of known hosts.
executing program
[ 67.514243][ T29] audit: type=1400 audit(1738506893.125:80): avc: denied { execmem } for pid=2944 comm="syz-executor759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 67.538847][ T29] audit: type=1400 audit(1738506893.125:81): avc: denied { read write } for pid=2945 comm="syz-executor759" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 67.569010][ T29] audit: type=1400 audit(1738506893.125:82): avc: denied { open } for pid=2945 comm="syz-executor759" path="/dev/raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 67.610872][ T29] audit: type=1400 audit(1738506893.125:83): avc: denied { ioctl } for pid=2945 comm="syz-executor759" path="/dev/raw-gadget" dev="devtmpfs" ino=236 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 67.779660][ T36] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 67.939390][ T36] usb 1-1: Using ep0 maxpacket: 16
[ 67.948262][ T36] usb 1-1: config 64 has an invalid interface number: 69 but max is 3
[ 67.958876][ T36] usb 1-1: config 64 has an invalid interface number: 42 but max is 3
[ 67.970600][ T36] usb 1-1: config 64 has an invalid interface number: 66 but max is 3
[ 67.980713][ T36] usb 1-1: config 64 has an invalid interface number: 240 but max is 3
[ 67.991209][ T36] usb 1-1: config 64 has no interface number 0
[ 67.998968][ T36] usb 1-1: config 64 has no interface number 1
[ 68.006518][ T36] usb 1-1: config 64 has no interface number 2
[ 68.015019][ T36] usb 1-1: config 64 has no interface number 3
[ 68.023007][ T36] usb 1-1: config 64 interface 69 altsetting 239 endpoint 0x7 has invalid maxpacket 1024, setting to 64
[ 68.035599][ T36] usb 1-1: config 64 interface 69 altsetting 239 bulk endpoint 0xA has invalid maxpacket 1023
[ 68.047871][ T36] usb 1-1: config 64 interface 69 altsetting 239 has an endpoint descriptor with address 0x91, changing to 0x81
[ 68.061903][ T36] usb 1-1: config 64 interface 69 altsetting 239 bulk endpoint 0x81 has invalid maxpacket 64
[ 68.073331][ T36] usb 1-1: config 64 interface 42 altsetting 8 endpoint 0x8 has invalid maxpacket 1024, setting to 64
[ 68.086418][ T36] usb 1-1: config 64 interface 42 altsetting 8 has a duplicate endpoint with address 0x1, skipping
[ 68.099162][ T36] usb 1-1: config 64 interface 42 altsetting 8 endpoint 0x5 has invalid maxpacket 1024, setting to 64
[ 68.112097][ T36] usb 1-1: config 64 interface 42 altsetting 8 endpoint 0x3 has invalid maxpacket 96, setting to 64
[ 68.127391][ T36] usb 1-1: config 64 interface 42 altsetting 8 has a duplicate endpoint with address 0xE, skipping
[ 68.140214][ T36] usb 1-1: config 64 interface 42 altsetting 8 has a duplicate endpoint with address 0x1, skipping
[ 68.154316][ T36] usb 1-1: config 64 interface 42 altsetting 8 has a duplicate endpoint with address 0xD, skipping
[ 68.167423][ T36] usb 1-1: config 64 interface 42 altsetting 8 has a duplicate endpoint with address 0x4, skipping
[ 68.179725][ T36] usb 1-1: config 64 interface 42 altsetting 8 has an endpoint descriptor with address 0xA5, changing to 0x85
[ 68.193464][ T36] usb 1-1: config 64 interface 42 altsetting 8 has a duplicate endpoint with address 0x85, skipping
[ 68.206180][ T36] usb 1-1: config 64 interface 42 altsetting 8 has a duplicate endpoint with address 0x4, skipping
[ 68.218588][ T36] usb 1-1: config 64 interface 42 altsetting 8 has a duplicate endpoint with address 0x4, skipping
[ 68.231348][ T36] usb 1-1: config 64 interface 69 has no altsetting 0
[ 68.239459][ T36] usb 1-1: config 64 interface 42 has no altsetting 0
[ 68.248231][ T36] usb 1-1: config 64 interface 66 has no altsetting 0
[ 68.256664][ T36] usb 1-1: config 64 interface 240 has no altsetting 0
[ 68.269763][ T36] usb 1-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=1a.86
[ 68.281979][ T36] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 68.291641][ T36] usb 1-1: Product: syz
[ 68.297940][ T36] usb 1-1: Manufacturer: syz
[ 68.306512][ T36] usb 1-1: SerialNumber: syz
executing program
[ 68.535144][ T36] ------------[ cut here ]------------
[ 68.541710][ T36] usb 1-1: BOGUS urb xfer, pipe 3 != type 1
[ 68.549547][ T36] WARNING: CPU: 1 PID: 36 at drivers/usb/core/urb.c:503 usb_submit_urb+0xe4b/0x1730
[ 68.560749][ T36] Modules linked in:
[ 68.565256][ T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/1:1 Not tainted 6.13.0-syzkaller-09485-g72deda0abee6 #0
[ 68.576644][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[ 68.589135][ T36] Workqueue: usb_hub_wq hub_event
[ 68.596292][ T36] RIP: 0010:usb_submit_urb+0xe4b/0x1730
[ 68.602561][ T36] Code: 84 3c 02 00 00 e8 35 b2 ee fc 4c 89 ef e8 9d db d4 fe 45 89 e0 89 e9 4c 89 f2 48 89 c6 48 c7 c7 c0 3e a2 87 e8 46 d4 b2 fc 90 <0f> 0b 90 90 e9 e9 f8 ff ff e8 07 b2 ee fc 49 81 c4 b8 05 00 00 e9
[ 68.625180][ T36] RSP: 0018:ffffc90000266d10 EFLAGS: 00010286
[ 68.632362][ T36] RAX: 0000000000000000 RBX: ffff888114803100 RCX: ffffffff813f4aa9
[ 68.643076][ T36] RDX: ffff888104a93a80 RSI: ffffffff813f4ab6 RDI: 0000000000000001
[ 68.652440][ T36] RBP: 0000000000000003 R08: 0000000000000001 R09: 0000000000000000
[ 68.661995][ T36] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000001
[ 68.671759][ T36] R13: ffff888101f790a8 R14: ffff888114641aa0 R15: ffff88811480317c
[ 68.681106][ T36] FS: 0000000000000000(0000) GS:ffff8881f5900000(0000) knlGS:0000000000000000
[ 68.691799][ T36] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 68.699083][ T36] CR2: 00007ffea10637e8 CR3: 0000000008ca2000 CR4: 00000000003506f0
[ 68.707548][ T36] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 68.716831][ T36] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 68.726736][ T36] Call Trace:
[ 68.730454][ T36]
[ 68.733711][ T36] ? __warn+0xea/0x3c0
[ 68.739070][ T36] ? usb_submit_urb+0xe4b/0x1730
[ 68.745928][ T36] ? report_bug+0x3c0/0x580
[ 68.751443][ T36] ? handle_bug+0x54/0xa0
[ 68.756641][ T36] ? exc_invalid_op+0x17/0x50
[ 68.763172][ T36] ? asm_exc_invalid_op+0x1a/0x20
[ 68.768399][ T36] ? __warn_printk+0x199/0x350
[ 68.773821][ T36] ? __warn_printk+0x1a6/0x350
[ 68.779662][ T36] ? usb_submit_urb+0xe4b/0x1730
[ 68.785575][ T36] ? __init_swait_queue_head+0xca/0x150
[ 68.791738][ T36] cxacru_cm+0x3d1/0xd20
[ 68.797078][ T36] ? __pfx_cxacru_cm+0x10/0x10
[ 68.802797][ T36] ? lockdep_init_map_type+0x16d/0x7d0
[ 68.808660][ T36] ? rcu_is_watching+0x12/0xc0
[ 68.814189][ T36] cxacru_card_status+0x21/0xd0
[ 68.820824][ T36] cxacru_bind+0xad1/0x13d0
[ 68.826339][ T36] ? __pfx_cxacru_bind+0x10/0x10
[ 68.832824][ T36] ? usb_string+0x3d7/0x670
[ 68.838478][ T36] ? usb_string+0x3dc/0x670
[ 68.844147][ T36] ? __pfx_cxacru_bind+0x10/0x10
[ 68.849836][ T36] usbatm_usb_probe+0x366/0x1c30
[ 68.856006][ T36] ? __pm_runtime_set_status+0x4e5/0x9a0
[ 68.863360][ T36] ? mark_held_locks+0x9f/0xe0
[ 68.868471][ T36] cxacru_usb_probe+0x102/0x220
[ 68.873972][ T36] ? __pfx_cxacru_usb_probe+0x10/0x10
[ 68.879754][ T36] ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 68.887255][ T36] ? __pm_runtime_set_status+0x13c/0x9a0
[ 68.893303][ T36] usb_probe_interface+0x300/0x9c0
[ 68.899450][ T36] ? __pfx_usb_probe_interface+0x10/0x10
[ 68.905366][ T36] really_probe+0x23e/0xa90
[ 68.911015][ T36] __driver_probe_device+0x1de/0x440
[ 68.917265][ T36] driver_probe_device+0x4c/0x1b0
[ 68.925159][ T36] __device_attach_driver+0x1df/0x310
[ 68.931440][ T36] ? __pfx___device_attach_driver+0x10/0x10
[ 68.938097][ T36] bus_for_each_drv+0x157/0x1e0
[ 68.944367][ T36] ? __pfx_bus_for_each_drv+0x10/0x10
[ 68.950999][ T36] ? lockdep_hardirqs_on+0x7c/0x110
[ 68.957506][ T36] ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 68.964526][ T36] __device_attach+0x1e8/0x4b0
[ 68.970953][ T36] ? __pfx___device_attach+0x10/0x10
[ 68.977476][ T36] ? do_raw_spin_unlock+0x172/0x230
[ 68.984477][ T36] bus_probe_device+0x17f/0x1c0
[ 68.991220][ T36] device_add+0x114b/0x1a70
[ 68.996542][ T36] ? __pfx_device_add+0x10/0x10
[ 69.003104][ T36] ? usb_cache_string+0xf2/0x150
[ 69.009349][ T36] usb_set_configuration+0x10cb/0x1c50
[ 69.015644][ T36] ? __pfx_usb_generic_driver_probe+0x10/0x10
[ 69.025249][ T36] usb_generic_driver_probe+0xb1/0x110
[ 69.032312][ T36] usb_probe_device+0xec/0x3e0
[ 69.038685][ T36] ? __pfx_usb_probe_device+0x10/0x10
[ 69.045086][ T36] really_probe+0x23e/0xa90
[ 69.050580][ T36] __driver_probe_device+0x1de/0x440
[ 69.056677][ T36] ? usb_driver_applicable+0x1c7/0x220
[ 69.062557][ T36] driver_probe_device+0x4c/0x1b0
[ 69.067898][ T36] __device_attach_driver+0x1df/0x310
[ 69.074543][ T36] ? __pfx___device_attach_driver+0x10/0x10
[ 69.082004][ T36] bus_for_each_drv+0x157/0x1e0
[ 69.087571][ T36] ? __pfx_bus_for_each_drv+0x10/0x10
[ 69.094383][ T36] ? lockdep_hardirqs_on+0x7c/0x110
[ 69.100641][ T36] ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 69.107657][ T36] __device_attach+0x1e8/0x4b0
[ 69.113013][ T36] ? __pfx___device_attach+0x10/0x10
[ 69.118498][ T36] ? do_raw_spin_unlock+0x172/0x230
[ 69.125007][ T36] bus_probe_device+0x17f/0x1c0
[ 69.130638][ T36] device_add+0x114b/0x1a70
[ 69.136722][ T36] ? __pfx_device_add+0x10/0x10
[ 69.142990][ T36] ? add_device_randomness+0xb8/0xf0
[ 69.149737][ T36] usb_new_device+0xd09/0x1a20
[ 69.155519][ T36] ? __pfx_usb_new_device+0x10/0x10
[ 69.161771][ T36] hub_event+0x2e58/0x4f40
[ 69.167532][ T36] ? __pfx_hub_event+0x10/0x10
[ 69.172870][ T36] ? __pfx_lock_acquire.part.0+0x10/0x10
[ 69.179565][ T36] ? rcu_is_watching+0x12/0xc0
[ 69.185757][ T36] ? trace_lock_acquire+0x14e/0x1f0
[ 69.191832][ T36] ? process_one_work+0x921/0x1ba0
[ 69.198399][ T36] ? lock_acquire+0x2f/0xb0
[ 69.204640][ T36] ? process_one_work+0x921/0x1ba0
[ 69.210806][ T36] process_one_work+0x9c5/0x1ba0
[ 69.216960][ T36] ? __pfx_hcd_resume_work+0x10/0x10
[ 69.224634][ T36] ? __pfx_process_one_work+0x10/0x10
[ 69.230691][ T36] ? assign_work+0x1a0/0x250
[ 69.237169][ T36] worker_thread+0x6c8/0xf00
[ 69.242990][ T36] ? __kthread_parkme+0x148/0x220
[ 69.248654][ T36] ? __pfx_worker_thread+0x10/0x10
[ 69.254072][ T36] kthread+0x3af/0x750
[ 69.258370][ T36] ? __pfx_kthread+0x10/0x10
[ 69.263965][ T36] ? lock_acquire+0x2f/0xb0
[ 69.269037][ T36] ? __pfx_kthread+0x10/0x10
[ 69.274612][ T36] ret_from_fork+0x45/0x80
[ 69.280660][ T36] ? __pfx_kthread+0x10/0x10
[ 69.287010][ T36] ret_from_fork_asm+0x1a/0x30
[ 69.292229][ T36]
[ 69.295973][ T36] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 69.305176][ T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/1:1 Not tainted 6.13.0-syzkaller-09485-g72deda0abee6 #0
[ 69.316486][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[ 69.328020][ T36] Workqueue: usb_hub_wq hub_event
[ 69.333625][ T36] Call Trace:
[ 69.338171][ T36]
[ 69.341766][ T36] dump_stack_lvl+0x3d/0x1f0
[ 69.347046][ T36] panic+0x71d/0x800
[ 69.351832][ T36] ? __pfx_panic+0x10/0x10
[ 69.357204][ T36] ? show_trace_log_lvl+0x29d/0x3d0
[ 69.363961][ T36] ? check_panic_on_warn+0x1f/0xb0
[ 69.370181][ T36] ? usb_submit_urb+0xe4b/0x1730
[ 69.376263][ T36] check_panic_on_warn+0xab/0xb0
[ 69.381934][ T36] __warn+0xf6/0x3c0
[ 69.386822][ T36] ? usb_submit_urb+0xe4b/0x1730
[ 69.392444][ T36] report_bug+0x3c0/0x580
[ 69.397764][ T36] handle_bug+0x54/0xa0
[ 69.402637][ T36] exc_invalid_op+0x17/0x50
[ 69.408318][ T36] asm_exc_invalid_op+0x1a/0x20
[ 69.415385][ T36] RIP: 0010:usb_submit_urb+0xe4b/0x1730
[ 69.421807][ T36] Code: 84 3c 02 00 00 e8 35 b2 ee fc 4c 89 ef e8 9d db d4 fe 45 89 e0 89 e9 4c 89 f2 48 89 c6 48 c7 c7 c0 3e a2 87 e8 46 d4 b2 fc 90 <0f> 0b 90 90 e9 e9 f8 ff ff e8 07 b2 ee fc 49 81 c4 b8 05 00 00 e9
[ 69.446367][ T36] RSP: 0018:ffffc90000266d10 EFLAGS: 00010286
[ 69.453169][ T36] RAX: 0000000000000000 RBX: ffff888114803100 RCX: ffffffff813f4aa9
[ 69.462697][ T36] RDX: ffff888104a93a80 RSI: ffffffff813f4ab6 RDI: 0000000000000001
[ 69.471487][ T36] RBP: 0000000000000003 R08: 0000000000000001 R09: 0000000000000000
[ 69.480235][ T36] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000001
[ 69.489009][ T36] R13: ffff888101f790a8 R14: ffff888114641aa0 R15: ffff88811480317c
[ 69.498440][ T36] ? __warn_printk+0x199/0x350
[ 69.504576][ T36] ? __warn_printk+0x1a6/0x350
[ 69.509946][ T36] ? __init_swait_queue_head+0xca/0x150
[ 69.516481][ T36] cxacru_cm+0x3d1/0xd20
[ 69.521198][ T36] ? __pfx_cxacru_cm+0x10/0x10
[ 69.527310][ T36] ? lockdep_init_map_type+0x16d/0x7d0
[ 69.533805][ T36] ? rcu_is_watching+0x12/0xc0
[ 69.539780][ T36] cxacru_card_status+0x21/0xd0
[ 69.545888][ T36] cxacru_bind+0xad1/0x13d0
[ 69.550710][ T36] ? __pfx_cxacru_bind+0x10/0x10
[ 69.556904][ T36] ? usb_string+0x3d7/0x670
[ 69.562415][ T36] ? usb_string+0x3dc/0x670
[ 69.567304][ T36] ? __pfx_cxacru_bind+0x10/0x10
[ 69.573147][ T36] usbatm_usb_probe+0x366/0x1c30
[ 69.578642][ T36] ? __pm_runtime_set_status+0x4e5/0x9a0
[ 69.588055][ T36] ? mark_held_locks+0x9f/0xe0
[ 69.593733][ T36] cxacru_usb_probe+0x102/0x220
[ 69.599279][ T36] ? __pfx_cxacru_usb_probe+0x10/0x10
[ 69.605459][ T36] ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 69.611705][ T36] ? __pm_runtime_set_status+0x13c/0x9a0
[ 69.618661][ T36] usb_probe_interface+0x300/0x9c0
[ 69.624653][ T36] ? __pfx_usb_probe_interface+0x10/0x10
[ 69.630665][ T36] really_probe+0x23e/0xa90
[ 69.636568][ T36] __driver_probe_device+0x1de/0x440
[ 69.643110][ T36] driver_probe_device+0x4c/0x1b0
[ 69.648854][ T36] __device_attach_driver+0x1df/0x310
[ 69.654598][ T36] ? __pfx___device_attach_driver+0x10/0x10
[ 69.662392][ T36] bus_for_each_drv+0x157/0x1e0
[ 69.667619][ T36] ? __pfx_bus_for_each_drv+0x10/0x10
[ 69.674625][ T36] ? lockdep_hardirqs_on+0x7c/0x110
[ 69.681154][ T36] ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 69.687869][ T36] __device_attach+0x1e8/0x4b0
[ 69.693332][ T36] ? __pfx___device_attach+0x10/0x10
[ 69.699899][ T36] ? do_raw_spin_unlock+0x172/0x230
[ 69.705618][ T36] bus_probe_device+0x17f/0x1c0
[ 69.710624][ T36] device_add+0x114b/0x1a70
[ 69.715827][ T36] ? __pfx_device_add+0x10/0x10
[ 69.721831][ T36] ? usb_cache_string+0xf2/0x150
[ 69.727646][ T36] usb_set_configuration+0x10cb/0x1c50
[ 69.733942][ T36] ? __pfx_usb_generic_driver_probe+0x10/0x10
[ 69.740259][ T36] usb_generic_driver_probe+0xb1/0x110
[ 69.747211][ T36] usb_probe_device+0xec/0x3e0
[ 69.753091][ T36] ? __pfx_usb_probe_device+0x10/0x10
[ 69.759349][ T36] really_probe+0x23e/0xa90
[ 69.764993][ T36] __driver_probe_device+0x1de/0x440
[ 69.770938][ T36] ? usb_driver_applicable+0x1c7/0x220
[ 69.777567][ T36] driver_probe_device+0x4c/0x1b0
[ 69.783190][ T36] __device_attach_driver+0x1df/0x310
[ 69.789458][ T36] ? __pfx___device_attach_driver+0x10/0x10
[ 69.796276][ T36] bus_for_each_drv+0x157/0x1e0
[ 69.802503][ T36] ? __pfx_bus_for_each_drv+0x10/0x10
[ 69.808722][ T36] ? lockdep_hardirqs_on+0x7c/0x110
[ 69.814250][ T36] ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 69.821835][ T36] __device_attach+0x1e8/0x4b0
[ 69.827174][ T36] ? __pfx___device_attach+0x10/0x10
[ 69.833145][ T36] ? do_raw_spin_unlock+0x172/0x230
[ 69.839395][ T36] bus_probe_device+0x17f/0x1c0
[ 69.847505][ T36] device_add+0x114b/0x1a70
[ 69.853527][ T36] ? __pfx_device_add+0x10/0x10
[ 69.860142][ T36] ? add_device_randomness+0xb8/0xf0
[ 69.867063][ T36] usb_new_device+0xd09/0x1a20
[ 69.872830][ T36] ? __pfx_usb_new_device+0x10/0x10
[ 69.879035][ T36] hub_event+0x2e58/0x4f40
[ 69.884462][ T36] ? __pfx_hub_event+0x10/0x10
[ 69.889639][ T36] ? __pfx_lock_acquire.part.0+0x10/0x10
[ 69.896224][ T36] ? rcu_is_watching+0x12/0xc0
[ 69.902544][ T36] ? trace_lock_acquire+0x14e/0x1f0
[ 69.913470][ T36] ? process_one_work+0x921/0x1ba0
[ 69.919639][ T36] ? lock_acquire+0x2f/0xb0
[ 69.924972][ T36] ? process_one_work+0x921/0x1ba0
[ 69.930626][ T36] process_one_work+0x9c5/0x1ba0
[ 69.937161][ T36] ? __pfx_hcd_resume_work+0x10/0x10
[ 69.944356][ T36] ? __pfx_process_one_work+0x10/0x10
[ 69.950272][ T36] ? assign_work+0x1a0/0x250
[ 69.956344][ T36] worker_thread+0x6c8/0xf00
[ 69.961909][ T36] ? __kthread_parkme+0x148/0x220
[ 69.967879][ T36] ? __pfx_worker_thread+0x10/0x10
[ 69.973896][ T36] kthread+0x3af/0x750
[ 69.979666][ T36] ? __pfx_kthread+0x10/0x10
[ 69.985548][ T36] ? lock_acquire+0x2f/0xb0
[ 69.990283][ T36] ? __pfx_kthread+0x10/0x10
[ 69.995096][ T36] ret_from_fork+0x45/0x80
[ 70.000984][ T36] ? __pfx_kthread+0x10/0x10
[ 70.006422][ T36] ret_from_fork_asm+0x1a/0x30
[ 70.011626][ T36]
[ 70.016689][ T36] Kernel Offset: disabled
[ 70.023051][ T36] Rebooting in 86400 seconds..