Warning: Permanently added '10.128.1.13' (ECDSA) to the list of known hosts. syzkaller login: [ 30.674873][ T101] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 31.034483][ T101] usb 1-1: config 0 has an invalid interface number: 228 but max is 0 [ 31.042725][ T101] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 31.052880][ T101] usb 1-1: config 0 has no interface number 0 [ 31.059073][ T101] usb 1-1: config 0 interface 228 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 31.069185][ T101] usb 1-1: New USB device found, idVendor=2001, idProduct=3702, bcdDevice=ba.16 [ 31.078228][ T101] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.087429][ T101] usb 1-1: config 0 descriptor?? [ 31.104586][ T1712] raw: raw_ioctl_ep_enable: fail, usb_ep_enable returned -22 [ 31.130019][ T101] prism2_usb 1-1:0.228 (unnamed net_device) (uninitialized): prism2_usb: Checking for firmware prism2_ru.fw [ 31.143516][ T101] usb 1-1: Direct firmware load for prism2_ru.fw failed with error -2 [ 31.151934][ T101] prism2_usb 1-1:0.228 (unnamed net_device) (uninitialized): prism2_usb: Firmware not available, but not essential [ 31.164038][ T101] prism2_usb 1-1:0.228 (unnamed net_device) (uninitialized): prism2_usb: can continue to use card anyway. [ 31.214422][ T101] ------------[ cut here ]------------ [ 31.219913][ T101] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 31.226000][ T101] WARNING: CPU: 0 PID: 101 at drivers/usb/core/urb.c:477 usb_submit_urb+0x1188/0x13b0 [ 31.235540][ T101] Kernel panic - not syncing: panic_on_warn set ... [ 31.242106][ T101] CPU: 0 PID: 101 Comm: kworker/0:2 Not tainted 5.4.0-rc6+ #0 [ 31.249567][ T101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 31.259641][ T101] Workqueue: usb_hub_wq hub_event [ 31.264643][ T101] Call Trace: [ 31.267956][ T101] dump_stack+0xca/0x13e [ 31.272175][ T101] ? usb_submit_urb+0x10c0/0x13b0 [ 31.277174][ T101] panic+0x2aa/0x6e1 [ 31.281043][ T101] ? add_taint.cold+0x16/0x16 [ 31.285692][ T101] ? __probe_kernel_read+0x188/0x1d0 [ 31.290956][ T101] ? __warn.cold+0x14/0x33 [ 31.295344][ T101] ? __warn+0xd5/0x1d0 [ 31.299385][ T101] ? usb_submit_urb+0x1188/0x13b0 [ 31.304380][ T101] __warn.cold+0x2f/0x33 [ 31.308606][ T101] ? usb_submit_urb+0x1188/0x13b0 [ 31.313603][ T101] report_bug+0x27b/0x2f0 [ 31.317918][ T101] do_error_trap+0x12b/0x1e0 [ 31.322479][ T101] ? usb_submit_urb+0x1188/0x13b0 [ 31.327476][ T101] do_invalid_op+0x32/0x40 [ 31.331865][ T101] ? usb_submit_urb+0x1188/0x13b0 [ 31.336859][ T101] invalid_op+0x23/0x30 [ 31.340985][ T101] RIP: 0010:usb_submit_urb+0x1188/0x13b0 [ 31.346592][ T101] Code: 4d 85 ed 74 2c e8 b8 21 ef fd 4c 89 f7 e8 40 34 1f ff 41 89 d8 44 89 e1 4c 89 ea 48 89 c6 48 c7 c7 40 77 14 86 e8 cd bc c4 fd <0f> 0b e9 20 f4 ff ff e8 8c 21 ef fd 4c 89 f2 48 b8 00 00 00 00 00 [ 31.366169][ T101] RSP: 0018:ffff8881d539f000 EFLAGS: 00010282 [ 31.372208][ T101] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 31.380163][ T101] RDX: 0000000000000000 RSI: ffffffff8128c9cd RDI: ffffed103aa73df2 [ 31.388119][ T101] RBP: ffff8881d21ca580 R08: ffff8881d73b3000 R09: fffffbfff11ab3ae [ 31.396083][ T101] R10: fffffbfff11ab3ad R11: ffffffff88d59d6f R12: 0000000000000003 [ 31.404116][ T101] R13: ffff8881d05e0d68 R14: ffff8881d051d0a0 R15: ffff8881cfc54008 [ 31.412066][ T101] ? vprintk_func+0x7d/0x113 [ 31.416633][ T101] submit_rx_urb+0x2f8/0x400 [ 31.421197][ T101] hfa384x_drvr_start+0x1cb/0x420 [ 31.426203][ T101] ? hfa384x_drvr_setconfig+0x40/0x40 [ 31.431549][ T101] ? __netdev_printk+0x1c6/0x27c [ 31.436467][ T101] prism2sta_ifstate+0x2ea/0x4a0 [ 31.441377][ T101] ? netdev_notice+0x109/0x109 [ 31.446147][ T101] ? assign_fw+0x4f0/0x4f0 [ 31.450545][ T101] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 31.456061][ T101] ? prism2mib_bytearea2pstr+0x1f0/0x1f0 [ 31.461669][ T101] prism2sta_probe_usb.cold+0x1c8/0x49e [ 31.467199][ T101] ? prism2sta_mlmerequest+0x7e0/0x7e0 [ 31.472629][ T101] ? __pm_runtime_resume+0x111/0x180 [ 31.477889][ T101] usb_probe_interface+0x305/0x7a0 [ 31.482971][ T101] ? usb_probe_device+0x100/0x100 [ 31.487977][ T101] really_probe+0x281/0x6d0 [ 31.492451][ T101] driver_probe_device+0x104/0x210 [ 31.497552][ T101] __device_attach_driver+0x1c2/0x220 [ 31.502895][ T101] ? driver_allows_async_probing+0x160/0x160 [ 31.508855][ T101] bus_for_each_drv+0x162/0x1e0 [ 31.513676][ T101] ? bus_rescan_devices+0x20/0x20 [ 31.518674][ T101] ? _raw_spin_unlock_irqrestore+0x3e/0x50 [ 31.524463][ T101] ? lockdep_hardirqs_on+0x382/0x580 [ 31.529721][ T101] __device_attach+0x217/0x360 [ 31.534456][ T101] ? device_bind_driver+0xd0/0xd0 [ 31.539453][ T101] ? kobject_uevent_env+0x29e/0x1160 [ 31.544711][ T101] ? kobject_uevent_env+0x2a8/0x1160 [ 31.549971][ T101] bus_probe_device+0x1e4/0x290 [ 31.554797][ T101] ? blocking_notifier_call_chain+0x54/0xa0 [ 31.560662][ T101] device_add+0xae6/0x16f0 [ 31.565051][ T101] ? uevent_store+0x50/0x50 [ 31.569538][ T101] ? _raw_spin_unlock_irqrestore+0x3e/0x50 [ 31.575316][ T101] usb_set_configuration+0xdf6/0x1670 [ 31.580662][ T101] generic_probe+0x9d/0xd5 [ 31.585065][ T101] usb_probe_device+0x99/0x100 [ 31.589800][ T101] ? usb_suspend+0x620/0x620 [ 31.594373][ T101] really_probe+0x281/0x6d0 [ 31.598867][ T101] driver_probe_device+0x104/0x210 [ 31.603955][ T101] __device_attach_driver+0x1c2/0x220 [ 31.609301][ T101] ? driver_allows_async_probing+0x160/0x160 [ 31.615252][ T101] bus_for_each_drv+0x162/0x1e0 [ 31.620075][ T101] ? bus_rescan_devices+0x20/0x20 [ 31.625083][ T101] ? _raw_spin_unlock_irqrestore+0x3e/0x50 [ 31.630871][ T101] ? lockdep_hardirqs_on+0x382/0x580 [ 31.636137][ T101] __device_attach+0x217/0x360 [ 31.640875][ T101] ? device_bind_driver+0xd0/0xd0 [ 31.645873][ T101] ? kobject_uevent_env+0x29e/0x1160 [ 31.651128][ T101] ? kobject_uevent_env+0x2a8/0x1160 [ 31.656388][ T101] bus_probe_device+0x1e4/0x290 [ 31.661222][ T101] ? blocking_notifier_call_chain+0x54/0xa0 [ 31.667085][ T101] device_add+0xae6/0x16f0 [ 31.671474][ T101] ? uevent_store+0x50/0x50 [ 31.675957][ T101] usb_new_device.cold+0x6a4/0xe79 [ 31.681050][ T101] hub_event+0x1df8/0x3800 [ 31.685440][ T101] ? hub_port_debounce+0x260/0x260 [ 31.690525][ T101] ? find_held_lock+0x2d/0x110 [ 31.695335][ T101] ? mark_held_locks+0xe0/0xe0 [ 31.700101][ T101] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 31.705625][ T101] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 31.711014][ T101] process_one_work+0x92b/0x1530 [ 31.715969][ T101] ? pwq_dec_nr_in_flight+0x310/0x310 [ 31.721324][ T101] ? do_raw_spin_lock+0x11a/0x280 [ 31.726339][ T101] worker_thread+0x96/0xe20 [ 31.730821][ T101] ? process_one_work+0x1530/0x1530 [ 31.736019][ T101] kthread+0x318/0x420 [ 31.740059][ T101] ? kthread_create_on_node+0xf0/0xf0 [ 31.745405][ T101] ret_from_fork+0x24/0x30 [ 31.750600][ T101] Kernel Offset: disabled [ 31.754954][ T101] Rebooting in 86400 seconds..