Warning: Permanently added '10.128.0.171' (ED25519) to the list of known hosts.
executing program
[ 48.232637][ T29] audit: type=1400 audit(1723914450.771:80): avc: denied { execmem } for pid=2648 comm="syz-executor154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 48.254495][ T29] audit: type=1400 audit(1723914450.771:81): avc: denied { read write } for pid=2649 comm="syz-executor154" name="raw-gadget" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 48.284256][ T29] audit: type=1400 audit(1723914450.771:82): avc: denied { open } for pid=2649 comm="syz-executor154" path="/dev/raw-gadget" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 48.313696][ T29] audit: type=1400 audit(1723914450.771:83): avc: denied { ioctl } for pid=2649 comm="syz-executor154" path="/dev/raw-gadget" dev="devtmpfs" ino=140 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 48.497801][ T41] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 48.687599][ T41] usb 1-1: Using ep0 maxpacket: 16
[ 48.697163][ T41] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 48.708707][ T41] usb 1-1: config 7 has an invalid interface number: 255 but max is 2
[ 48.719257][ T41] usb 1-1: config 7 has an invalid interface number: 150 but max is 2
[ 48.730317][ T41] usb 1-1: config 7 has an invalid interface number: 100 but max is 2
[ 48.741360][ T41] usb 1-1: config 7 has no interface number 0
[ 48.749413][ T41] usb 1-1: config 7 has no interface number 1
[ 48.757481][ T41] usb 1-1: config 7 has no interface number 2
[ 48.764592][ T41] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0xB has invalid maxpacket 512, setting to 64
[ 48.776304][ T41] usb 1-1: config 7 interface 255 altsetting 4 has a duplicate endpoint with address 0x6, skipping
[ 48.791777][ T41] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0x5 has invalid maxpacket 1024, setting to 64
[ 48.808761][ T41] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0xE has invalid wMaxPacketSize 0
[ 48.820033][ T41] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0x1 has an invalid bInterval 128, changing to 11
[ 48.832987][ T41] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0x9 has invalid maxpacket 1024, setting to 64
[ 48.845764][ T41] usb 1-1: config 7 interface 255 altsetting 4 endpoint 0xD has invalid maxpacket 1072, setting to 64
[ 48.858556][ T41] usb 1-1: config 7 interface 255 altsetting 4 has a duplicate endpoint with address 0xB, skipping
[ 48.872892][ T41] usb 1-1: config 7 interface 255 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 1024
[ 48.885238][ T41] usb 1-1: config 7 interface 255 altsetting 4 has a duplicate endpoint with address 0x6, skipping
[ 48.898761][ T41] usb 1-1: config 7 interface 100 altsetting 2 endpoint 0x7 has invalid maxpacket 512, setting to 64
[ 48.913501][ T41] usb 1-1: config 7 interface 100 altsetting 2 has a duplicate endpoint with address 0x6, skipping
[ 48.927188][ T41] usb 1-1: config 7 interface 255 has no altsetting 0
[ 48.936282][ T41] usb 1-1: config 7 interface 150 has no altsetting 0
[ 48.944197][ T41] usb 1-1: config 7 interface 100 has no altsetting 0
[ 48.955385][ T41] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=5d.a6
[ 48.965849][ T41] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 48.974734][ T41] usb 1-1: Product: syz
[ 48.979167][ T41] usb 1-1: Manufacturer: syz
[ 48.983916][ T41] usb 1-1: SerialNumber: syz
executing program
[ 49.224631][ T41] ------------[ cut here ]------------
[ 49.230589][ T41] usb 1-1: BOGUS urb xfer, pipe 1 != type 3
[ 49.237506][ T41] WARNING: CPU: 1 PID: 41 at drivers/usb/core/urb.c:503 usb_submit_urb+0xe4b/0x1730
[ 49.247683][ T41] Modules linked in:
[ 49.251913][ T41] CPU: 1 UID: 0 PID: 41 Comm: kworker/1:1 Not tainted 6.11.0-rc3-syzkaller-00046-g82313624b2ae #0
[ 49.263496][ T41] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[ 49.274220][ T41] Workqueue: usb_hub_wq hub_event
[ 49.280597][ T41] RIP: 0010:usb_submit_urb+0xe4b/0x1730
[ 49.286548][ T41] Code: 84 3c 02 00 00 e8 95 d8 fe fc 4c 89 ef e8 dd 20 d7 fe 45 89 e0 89 e9 4c 89 f2 48 89 c6 48 c7 c7 40 07 a0 87 e8 46 d3 c4 fc 90 <0f> 0b 90 90 e9 e9 f8 ff ff e8 67 d8 fe fc 49 81 c4 c0 05 00 00 e9
[ 49.310797][ T41] RSP: 0018:ffffc900002b6e68 EFLAGS: 00010286
[ 49.318448][ T41] RAX: 0000000000000000 RBX: ffff8881122e0500 RCX: ffffffff81194d49
[ 49.327562][ T41] RDX: ffff8881026b5700 RSI: ffffffff81194d56 RDI: 0000000000000001
[ 49.337150][ T41] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000
[ 49.346155][ T41] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000003
[ 49.355013][ T41] R13: ffff8881066d60a8 R14: ffff888103e9d9c0 R15: ffff8881122e057c
[ 49.365456][ T41] FS: 0000000000000000(0000) GS:ffff8881f6300000(0000) knlGS:0000000000000000
[ 49.375225][ T41] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 49.382155][ T41] CR2: 00005569dbcd2410 CR3: 0000000008aa0000 CR4: 00000000003506f0
[ 49.391603][ T41] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 49.399905][ T41] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 49.408995][ T41] Call Trace:
[ 49.412331][ T41] <TASK>
[ 49.415759][ T41] ? show_regs+0x8c/0xa0
[ 49.420486][ T41] ? __warn+0xe5/0x3c0
[ 49.425135][ T41] ? usb_submit_urb+0xe4b/0x1730
[ 49.431100][ T41] ? report_bug+0x3c0/0x580
[ 49.436721][ T41] ? handle_bug+0x3d/0x70
[ 49.443019][ T41] ? exc_invalid_op+0x17/0x50
[ 49.448407][ T41] ? asm_exc_invalid_op+0x1a/0x20
[ 49.454285][ T41] ? __warn_printk+0x199/0x350
[ 49.460001][ T41] ? __warn_printk+0x1a6/0x350
[ 49.465093][ T41] ? usb_submit_urb+0xe4b/0x1730
[ 49.470787][ T41] ? usb_submit_urb+0xe4a/0x1730
[ 49.476683][ T41] ? __init_swait_queue_head+0xca/0x150
[ 49.482917][ T41] usb_start_wait_urb+0x103/0x4c0
[ 49.488483][ T41] ? __pfx_usb_start_wait_urb+0x10/0x10
[ 49.494936][ T41] ? __asan_memset+0x23/0x50
[ 49.500026][ T41] usb_bulk_msg+0x22c/0x550
[ 49.505221][ T41] amradio_send_cmd+0x2e2/0x940
[ 49.510918][ T41] ? __pfx_amradio_send_cmd+0x10/0x10
[ 49.516626][ T41] ? read_word_at_a_time+0xe/0x20
[ 49.522789][ T41] ? sized_strscpy+0xae/0x290
[ 49.528391][ T41] usb_amradio_probe+0x4a3/0x8a0
[ 49.534021][ T41] usb_probe_interface+0x309/0x9d0
[ 49.540568][ T41] ? __pfx_usb_probe_interface+0x10/0x10
[ 49.546782][ T41] really_probe+0x23e/0xa90
[ 49.551940][ T41] __driver_probe_device+0x1de/0x440
[ 49.558277][ T41] driver_probe_device+0x4c/0x1b0
[ 49.563853][ T41] __device_attach_driver+0x1df/0x310
[ 49.569727][ T41] ? __pfx___device_attach_driver+0x10/0x10
[ 49.576357][ T41] bus_for_each_drv+0x157/0x1e0
[ 49.581912][ T41] ? __pfx_bus_for_each_drv+0x10/0x10
[ 49.588236][ T41] ? lockdep_hardirqs_on+0x7c/0x110
[ 49.594066][ T41] ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 49.601161][ T41] __device_attach+0x1e8/0x4b0
[ 49.606638][ T41] ? __pfx___device_attach+0x10/0x10
[ 49.612398][ T41] ? do_raw_spin_unlock+0x172/0x230
[ 49.618671][ T41] bus_probe_device+0x17f/0x1c0
[ 49.623738][ T41] device_add+0x114b/0x1a70
[ 49.629394][ T41] ? __pfx_device_add+0x10/0x10
[ 49.635278][ T41] ? kfree+0x10b/0x380
[ 49.640030][ T41] usb_set_configuration+0x10cb/0x1c50
[ 49.645719][ T41] ? __pfx_usb_generic_driver_probe+0x10/0x10
[ 49.652161][ T41] usb_generic_driver_probe+0xb1/0x110
[ 49.657990][ T41] usb_probe_device+0xec/0x3e0
[ 49.663330][ T41] ? __pfx_usb_probe_device+0x10/0x10
[ 49.671789][ T41] really_probe+0x23e/0xa90
[ 49.676793][ T41] __driver_probe_device+0x1de/0x440
[ 49.687445][ T41] ? usb_driver_applicable+0x1c7/0x220
[ 49.696459][ T41] driver_probe_device+0x4c/0x1b0
[ 49.705394][ T41] __device_attach_driver+0x1df/0x310
[ 49.712462][ T41] ? __pfx___device_attach_driver+0x10/0x10
[ 49.724219][ T41] bus_for_each_drv+0x157/0x1e0
[ 49.731124][ T41] ? __pfx_bus_for_each_drv+0x10/0x10
[ 49.740689][ T41] ? lockdep_hardirqs_on+0x7c/0x110
[ 49.748367][ T41] ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 49.755801][ T41] __device_attach+0x1e8/0x4b0
[ 49.763609][ T41] ? __pfx___device_attach+0x10/0x10
[ 49.769907][ T41] ? do_raw_spin_unlock+0x172/0x230
[ 49.777677][ T41] bus_probe_device+0x17f/0x1c0
[ 49.786391][ T41] device_add+0x114b/0x1a70
[ 49.798844][ T41] ? __pfx_device_add+0x10/0x10
[ 49.805319][ T41] ? add_device_randomness+0xb8/0xf0
[ 49.814180][ T41] usb_new_device+0xd90/0x1a10
[ 49.822713][ T41] ? __pfx_usb_new_device+0x10/0x10
[ 49.830132][ T41] hub_event+0x2e66/0x4f50
[ 49.837457][ T41] ? __pfx_hub_event+0x10/0x10
[ 49.845394][ T41] ? __pfx_lock_acquire+0x10/0x10
[ 49.852456][ T41] ? __pfx_lock_release+0x10/0x10
[ 49.860782][ T41] process_one_work+0x9c5/0x1b40
[ 49.867119][ T41] ? __pfx_hcd_resume_work+0x10/0x10
[ 49.877476][ T41] ? __pfx_process_one_work+0x10/0x10
[ 49.887128][ T41] ? assign_work+0x1a0/0x250
[ 49.900663][ T41] worker_thread+0x6c8/0xf20
[ 49.907662][ T41] ? __kthread_parkme+0x148/0x220
[ 49.920983][ T41] ? __pfx_worker_thread+0x10/0x10
[ 49.926867][ T41] kthread+0x2c1/0x3a0
[ 49.932291][ T41] ? _raw_spin_unlock_irq+0x23/0x50
[ 49.941561][ T41] ? __pfx_kthread+0x10/0x10
[ 49.949061][ T41] ret_from_fork+0x45/0x80
[ 49.955988][ T41] ? __pfx_kthread+0x10/0x10
[ 49.963728][ T41] ret_from_fork_asm+0x1a/0x30
[ 49.968944][ T41] </TASK>
[ 49.977683][ T41] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 49.986011][ T41] CPU: 1 UID: 0 PID: 41 Comm: kworker/1:1 Not tainted 6.11.0-rc3-syzkaller-00046-g82313624b2ae #0
[ 50.003764][ T41] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[ 50.020807][ T41] Workqueue: usb_hub_wq hub_event
[ 50.028656][ T41] Call Trace:
[ 50.040798][ T41] <TASK>
[ 50.043986][ T41] dump_stack_lvl+0x3d/0x1f0
[ 50.050649][ T41] panic+0x6f5/0x7a0
[ 50.061783][ T41] ? __pfx_panic+0x10/0x10
[ 50.066515][ T41] ? show_trace_log_lvl+0x363/0x500
[ 50.074288][ T41] ? check_panic_on_warn+0x1f/0xb0
[ 50.084078][ T41] ? usb_submit_urb+0xe4b/0x1730
[ 50.091211][ T41] check_panic_on_warn+0xab/0xb0
[ 50.097293][ T41] __warn+0xf1/0x3c0
[ 50.101954][ T41] ? usb_submit_urb+0xe4b/0x1730
[ 50.108498][ T41] report_bug+0x3c0/0x580
[ 50.113960][ T41] handle_bug+0x3d/0x70
[ 50.120711][ T41] exc_invalid_op+0x17/0x50
[ 50.126839][ T41] asm_exc_invalid_op+0x1a/0x20
[ 50.133387][ T41] RIP: 0010:usb_submit_urb+0xe4b/0x1730
[ 50.142266][ T41] Code: 84 3c 02 00 00 e8 95 d8 fe fc 4c 89 ef e8 dd 20 d7 fe 45 89 e0 89 e9 4c 89 f2 48 89 c6 48 c7 c7 40 07 a0 87 e8 46 d3 c4 fc 90 <0f> 0b 90 90 e9 e9 f8 ff ff e8 67 d8 fe fc 49 81 c4 c0 05 00 00 e9
[ 50.169312][ T41] RSP: 0018:ffffc900002b6e68 EFLAGS: 00010286
[ 50.177196][ T41] RAX: 0000000000000000 RBX: ffff8881122e0500 RCX: ffffffff81194d49
[ 50.186416][ T41] RDX: ffff8881026b5700 RSI: ffffffff81194d56 RDI: 0000000000000001
[ 50.197831][ T41] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000
[ 50.208918][ T41] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000003
[ 50.219213][ T41] R13: ffff8881066d60a8 R14: ffff888103e9d9c0 R15: ffff8881122e057c
[ 50.229121][ T41] ? __warn_printk+0x199/0x350
[ 50.236371][ T41] ? __warn_printk+0x1a6/0x350
[ 50.242073][ T41] ? usb_submit_urb+0xe4a/0x1730
[ 50.247667][ T41] ? __init_swait_queue_head+0xca/0x150
[ 50.254675][ T41] usb_start_wait_urb+0x103/0x4c0
[ 50.261314][ T41] ? __pfx_usb_start_wait_urb+0x10/0x10
[ 50.268112][ T41] ? __asan_memset+0x23/0x50
[ 50.275153][ T41] usb_bulk_msg+0x22c/0x550
[ 50.281130][ T41] amradio_send_cmd+0x2e2/0x940
[ 50.287943][ T41] ? __pfx_amradio_send_cmd+0x10/0x10
[ 50.295576][ T41] ? read_word_at_a_time+0xe/0x20
[ 50.302199][ T41] ? sized_strscpy+0xae/0x290
[ 50.309798][ T41] usb_amradio_probe+0x4a3/0x8a0
[ 50.318528][ T41] usb_probe_interface+0x309/0x9d0
[ 50.326876][ T41] ? __pfx_usb_probe_interface+0x10/0x10
[ 50.335273][ T41] really_probe+0x23e/0xa90
[ 50.341643][ T41] __driver_probe_device+0x1de/0x440
[ 50.349128][ T41] driver_probe_device+0x4c/0x1b0
[ 50.357089][ T41] __device_attach_driver+0x1df/0x310
[ 50.363976][ T41] ? __pfx___device_attach_driver+0x10/0x10
[ 50.373371][ T41] bus_for_each_drv+0x157/0x1e0
[ 50.379714][ T41] ? __pfx_bus_for_each_drv+0x10/0x10
[ 50.387759][ T41] ? lockdep_hardirqs_on+0x7c/0x110
[ 50.395886][ T41] ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 50.406378][ T41] __device_attach+0x1e8/0x4b0
[ 50.411964][ T41] ? __pfx___device_attach+0x10/0x10
[ 50.420361][ T41] ? do_raw_spin_unlock+0x172/0x230
[ 50.427559][ T41] bus_probe_device+0x17f/0x1c0
[ 50.433672][ T41] device_add+0x114b/0x1a70
[ 50.441303][ T41] ? __pfx_device_add+0x10/0x10
[ 50.448295][ T41] ? kfree+0x10b/0x380
[ 50.455423][ T41] usb_set_configuration+0x10cb/0x1c50
[ 50.462823][ T41] ? __pfx_usb_generic_driver_probe+0x10/0x10
[ 50.469895][ T41] usb_generic_driver_probe+0xb1/0x110
[ 50.480524][ T41] usb_probe_device+0xec/0x3e0
[ 50.487121][ T41] ? __pfx_usb_probe_device+0x10/0x10
[ 50.495542][ T41] really_probe+0x23e/0xa90
[ 50.501925][ T41] __driver_probe_device+0x1de/0x440
[ 50.508492][ T41] ? usb_driver_applicable+0x1c7/0x220
[ 50.517441][ T41] driver_probe_device+0x4c/0x1b0
[ 50.525693][ T41] __device_attach_driver+0x1df/0x310
[ 50.532915][ T41] ? __pfx___device_attach_driver+0x10/0x10
[ 50.544707][ T41] bus_for_each_drv+0x157/0x1e0
[ 50.550441][ T41] ? __pfx_bus_for_each_drv+0x10/0x10
[ 50.559232][ T41] ? lockdep_hardirqs_on+0x7c/0x110
[ 50.565261][ T41] ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 50.575679][ T41] __device_attach+0x1e8/0x4b0
[ 50.584135][ T41] ? __pfx___device_attach+0x10/0x10
[ 50.593933][ T41] ? do_raw_spin_unlock+0x172/0x230
[ 50.602989][ T41] bus_probe_device+0x17f/0x1c0
[ 50.611384][ T41] device_add+0x114b/0x1a70
[ 50.620611][ T41] ? __pfx_device_add+0x10/0x10
[ 50.626337][ T41] ? add_device_randomness+0xb8/0xf0
[ 50.635031][ T41] usb_new_device+0xd90/0x1a10
[ 50.642880][ T41] ? __pfx_usb_new_device+0x10/0x10
[ 50.651243][ T41] hub_event+0x2e66/0x4f50
[ 50.660642][ T41] ? __pfx_hub_event+0x10/0x10
[ 50.668464][ T41] ? __pfx_lock_acquire+0x10/0x10
[ 50.677095][ T41] ? __pfx_lock_release+0x10/0x10
[ 50.685331][ T41] process_one_work+0x9c5/0x1b40
[ 50.692510][ T41] ? __pfx_hcd_resume_work+0x10/0x10
[ 50.702017][ T41] ? __pfx_process_one_work+0x10/0x10
[ 50.708014][ T41] ? assign_work+0x1a0/0x250
[ 50.717014][ T41] worker_thread+0x6c8/0xf20
[ 50.723694][ T41] ? __kthread_parkme+0x148/0x220
[ 50.730551][ T41] ? __pfx_worker_thread+0x10/0x10
[ 50.737358][ T41] kthread+0x2c1/0x3a0
[ 50.742309][ T41] ? _raw_spin_unlock_irq+0x23/0x50
[ 50.748699][ T41] ? __pfx_kthread+0x10/0x10
[ 50.754475][ T41] ret_from_fork+0x45/0x80
[ 50.761345][ T41] ? __pfx_kthread+0x10/0x10
[ 50.768370][ T41] ret_from_fork_asm+0x1a/0x30
[ 50.775840][ T41] </TASK>
[ 50.781845][ T41] Kernel Offset: disabled
[ 50.787145][ T41] Rebooting in 86400 seconds..