usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 usb 1-1: Product: syz usb 1-1: Manufacturer: syz usb 1-1: SerialNumber: syz usb 1-1: config 0 descriptor?? ------------[ cut here ]------------ usb 1-1: BOGUS urb xfer, pipe 1 != type 3 WARNING: CPU: 1 PID: 83 at drivers/usb/core/urb.c:478 usb_submit_urb+0x1188/0x1460 drivers/usb/core/urb.c:478 Kernel panic - not syncing: panic_on_warn set ... CPU: 1 PID: 83 Comm: kworker/1:2 Not tainted 5.7.0-rc1-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: usb_hub_wq hub_event Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0xef/0x16e lib/dump_stack.c:118 usb_submit_urb+0x10f0/0x1460 drivers/usb/core/urb.c:478 panic+0x2aa/0x6e1 kernel/panic.c:221 add_taint.cold+0x16/0x16 kernel/panic.c:434 set_bit include/asm-generic/bitops/instrumented-atomic.h:28 [inline] set_ti_thread_flag include/linux/thread_info.h:55 [inline] set_fs arch/x86/include/asm/uaccess.h:33 [inline] __probe_kernel_read+0x188/0x1d0 mm/maccess.c:67 __warn.cold+0x14/0x30 kernel/panic.c:581 __warn+0xd5/0x1c8 kernel/panic.c:574 usb_submit_urb+0x1188/0x1460 drivers/usb/core/urb.c:478 __warn.cold+0x2f/0x30 kernel/panic.c:582 usb_submit_urb+0x1188/0x1460 drivers/usb/core/urb.c:478 report_bug+0x27b/0x2f0 lib/bug.c:195 fixup_bug arch/x86/kernel/traps.c:175 [inline] fixup_bug arch/x86/kernel/traps.c:170 [inline] do_error_trap+0x12b/0x1e0 arch/x86/kernel/traps.c:267 usb_submit_urb+0x1188/0x1460 drivers/usb/core/urb.c:478 do_invalid_op+0x32/0x40 arch/x86/kernel/traps.c:286 usb_submit_urb+0x1188/0x1460 drivers/usb/core/urb.c:478 invalid_op+0x23/0x30 arch/x86/entry/entry_64.S:1027 RIP: 0010:usb_submit_urb+0x1188/0x1460 drivers/usb/core/urb.c:478 Code: 4d 85 ed 74 46 e8 38 c2 d2 fd 4c 89 f7 e8 70 ac 16 ff 41 89 d8 44 89 e1 4c 89 ea 48 89 c6 48 c7 c7 00 52 3d 86 e8 40 96 a6 fd <0f> 0b e9 20 f4 ff ff e8 0c c2 d2 fd 0f 1f 44 00 00 e8 02 c2 d2 fd RSP: 0018:ffff8881d8b1f000 EFLAGS: 00010282 RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 RDX: 0000000000000000 RSI: ffffffff812a2d8d RDI: ffffed103b163df2 RBP: ffff8881d4bd8850 R08: ffff8881d