[ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.42' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 35.195764][ T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 35.555730][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.565771][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 35.575416][ T7] usb 1-1: New USB device found, idVendor=0bda, idProduct=317f, bcdDevice=9d.cc [ 35.584486][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.595201][ T7] usb 1-1: config 0 descriptor?? [ 35.855620][ T7] rtl8192cu: Chip version 0x0 executing program [ 36.485204][ T7] rtl_usb: reg 0xfe48, usbctrl_vendorreq TimeOut! status:0xffffffb9 value=0x0 [ 36.494098][ T7] rtl_usb: rx_max_size 15360, rx_urb_num 8, in_ep 1 [ 36.501440][ T7] [ 36.503769][ T7] ============================= [ 36.508677][ T7] WARNING: suspicious RCU usage [ 36.513645][ T7] 5.10.0-syzkaller #0 Not tainted [ 36.518723][ T7] ----------------------------- [ 36.523631][ T7] net/wireless/reg.c:144 suspicious rcu_dereference_check() usage! [ 36.531558][ T7] [ 36.531558][ T7] other info that might help us debug this: [ 36.531558][ T7] [ 36.541844][ T7] [ 36.541844][ T7] rcu_scheduler_active = 2, debug_locks = 1 [ 36.549961][ T7] 5 locks held by kworker/0:1/7: [ 36.554973][ T7] #0: ffff888104006138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x871/0x15c0 [ 36.565834][ T7] #1: ffffc9000007fda8 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x8a5/0x15c0 [ 36.577151][ T7] #2: ffff8881090f7218 (&dev->mutex){....}-{3:3}, at: hub_event+0x1c5/0x42d0 [ 36.586128][ T7] #3: ffff8881080aa218 (&dev->mutex){....}-{3:3}, at: __device_attach+0x7a/0x4c0 [ 36.595430][ T7] #4: ffff8881080a81a8 (&dev->mutex){....}-{3:3}, at: __device_attach+0x7a/0x4c0 [ 36.604698][ T7] [ 36.604698][ T7] stack backtrace: [ 36.610780][ T7] CPU: 0 PID: 7 Comm: kworker/0:1 Not tainted 5.10.0-syzkaller #0 [ 36.618595][ T7] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 36.628641][ T7] Workqueue: usb_hub_wq hub_event [ 36.633658][ T7] Call Trace: [ 36.636927][ T7] dump_stack+0x107/0x163 [ 36.641266][ T7] get_wiphy_regdom+0xe0/0xf0 [ 36.645948][ T7] wiphy_apply_custom_regulatory+0x234/0x360 [ 36.651926][ T7] rtl_regd_init+0x36d/0x760 [ 36.656519][ T7] ? rtl_regd_init+0x760/0x760 [ 36.661286][ T7] rtl_init_core+0x878/0x1a50 [ 36.665960][ T7] ? rtl_free_entries_from_ack_queue+0x320/0x320 [ 36.672281][ T7] ? lockdep_init_map_waits+0x26a/0x700 [ 36.677828][ T7] rtl_usb_probe.cold+0x79a/0xada [ 36.682894][ T7] usb_probe_interface+0x315/0x7f0 [ 36.688017][ T7] ? usb_match_dynamic_id+0x1a0/0x1a0 [ 36.693381][ T7] really_probe+0x2b1/0xe40 [ 36.697873][ T7] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 36.704100][ T7] driver_probe_device+0x285/0x3f0 [ 36.709204][ T7] __device_attach_driver+0x216/0x2d0 [ 36.714573][ T7] ? driver_allows_async_probing+0x170/0x170 [ 36.720555][ T7] bus_for_each_drv+0x15f/0x1e0 [ 36.725401][ T7] ? bus_for_each_dev+0x1d0/0x1d0 [ 36.730417][ T7] ? lockdep_hardirqs_on_prepare+0x286/0x3f0 [ 36.736394][ T7] ? trace_hardirqs_on+0x5b/0x1a0 [ 36.741418][ T7] __device_attach+0x228/0x4c0 [ 36.746185][ T7] ? __driver_attach_async_helper+0x380/0x380 [ 36.752249][ T7] ? kobject_uevent_env+0x2bb/0x1680 [ 36.757525][ T7] bus_probe_device+0x1e4/0x290 [ 36.762367][ T7] device_add+0xbc4/0x1d90 [ 36.766772][ T7] ? wait_for_completion_io+0x270/0x270 [ 36.772307][ T7] ? __fw_devlink_link_to_suppliers+0x5e0/0x5e0 [ 36.778584][ T7] ? lockdep_hardirqs_on_prepare+0x286/0x3f0 [ 36.784554][ T7] ? _raw_spin_unlock_irqrestore+0x34/0x40 [ 36.790398][ T7] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 36.796631][ T7] usb_set_configuration+0x113c/0x1910 [ 36.802124][ T7] usb_generic_driver_probe+0xba/0x100 [ 36.807573][ T7] usb_probe_device+0xd9/0x2c0 [ 36.812326][ T7] ? usb_driver_release_interface+0x180/0x180 [ 36.818379][ T7] really_probe+0x2b1/0xe40 [ 36.822871][ T7] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 36.829137][ T7] driver_probe_device+0x285/0x3f0 [ 36.834284][ T7] __device_attach_driver+0x216/0x2d0 [ 36.839652][ T7] ? driver_allows_async_probing+0x170/0x170 [ 36.845634][ T7] bus_for_each_drv+0x15f/0x1e0 [ 36.850476][ T7] ? bus_for_each_dev+0x1d0/0x1d0 [ 36.855505][ T7] ? lockdep_hardirqs_on_prepare+0x286/0x3f0 [ 36.861475][ T7] ? trace_hardirqs_on+0x5b/0x1a0 [ 36.866499][ T7] __device_attach+0x228/0x4c0 [ 36.871253][ T7] ? __driver_attach_async_helper+0x380/0x380 [ 36.877401][ T7] ? kobject_uevent_env+0x2bb/0x1680 [ 36.882676][ T7] bus_probe_device+0x1e4/0x290 [ 36.887515][ T7] device_add+0xbc4/0x1d90 [ 36.891918][ T7] ? __fw_devlink_link_to_suppliers+0x5e0/0x5e0 [ 36.898144][ T7] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 36.904390][ T7] usb_new_device.cold+0x725/0x1057 [ 36.909597][ T7] ? hub_disconnect+0x510/0x510 [ 36.914436][ T7] ? rwlock_bug.part.0+0x90/0x90 [ 36.919379][ T7] ? lockdep_hardirqs_on_prepare+0x286/0x3f0 [ 36.925355][ T7] hub_event+0x2348/0x42d0 [ 36.929767][ T7] ? hub_port_debounce+0x3b0/0x3b0 [ 36.934869][ T7] ? __lock_acquire+0x5d1/0x54a0 [ 36.939827][ T7] ? worker_detach_from_pool+0x20/0x310 [ 36.945362][ T7] ? lock_release+0x6e0/0x6e0 [ 36.950027][ T7] ? lock_downgrade+0x6d0/0x6d0 [ 36.954870][ T7] ? do_raw_spin_lock+0x120/0x2b0 [ 36.959898][ T7] process_one_work+0x98d/0x15c0 [ 36.964854][ T7] ? pwq_dec_nr_in_flight+0x320/0x320 [ 36.970250][ T7] ? rwlock_bug.part.0+0x90/0x90 [ 36.975197][ T7] worker_thread+0x64c/0x1120 [ 36.979871][ T7] ? __kthread_parkme+0x118/0x1d0 [ 36.984895][ T7] ? process_one_work+0x15c0/0x15c0 [ 36.990148][ T7] kthread+0x38c/0x460 [ 36.994208][ T7] ? _raw_spin_unlock_irq+0x1f/0x30 [ 36.999458][ T7] ? kthread_create_worker_on_cpu+0xf0/0xf0 [ 37.005342][ T7] ret_from_fork+0x1f/0x30 [ 37.010637][ T7] rtl8192cu: Loading firmware rtlwifi/rtl8192cufw_TMSC.bin [ 37.057923][ T7] usb 1-1: USB disconnect, device number 2 [ 37.101308][ T2607] usb 1-1: Direct firmware load for rtlwifi/rtl8192cufw_TMSC.bin failed with error -2 [ 37.126005][ T2607] usb 1-1: Direct firmware load for rtlwifi/rtl8192cufw.bin failed with error -2 [ 37.148806][ T2607] rtlwifi: Loading alternative firmware rtlwifi/rtl8192cufw.bin [ 37.156608][ T2607] rtlwifi: Selected firmware is not available [ 37.654715][ T7] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 38.014654][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.024427][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 38.034183][ T7] usb 1-1: New USB device found, idVendor=0bda, idProduct=317f, bcdDevice=9d.cc [ 38.043407][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.053009][ T7] usb 1-1: config 0 descriptor?? [ 38.324503][ T7] rtl8192cu: Chip version 0x0 executing program [ 38.944277][ T7] rtl_usb: reg 0xfe48, usbctrl_vendorreq TimeOut! status:0xffffffb9 value=0x0 [ 38.953150][ T7] rtl_usb: rx_max_size 15360, rx_urb_num 8, in_ep 1 [ 38.960710][ T7] rtl8192cu: Loading firmware rtlwifi/rtl8192cufw_TMSC.bin [ 39.005063][ T7] usb 1-1: USB disconnect, device number 3 [ 39.012138][ T4430] usb 1-1: Direct firmware load for rtlwifi/rtl8192cufw_TMSC.bin failed with error -2 [ 39.030194][ T4430] usb 1-1: Direct firmware load for rtlwifi/rtl8192cufw.bin failed with error -2 [ 39.039544][ T4430] rtlwifi: Loading alternative firmware rtlwifi/rtl8192cufw.bin [ 39.047508][ T4430] rtlwifi: Selected firmware is not available [ 39.464101][ T7] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 39.834103][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.843946][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 39.853602][ T7] usb 1-1: New USB device found, idVendor=0bda, idProduct=317f, bcdDevice=9d.cc [ 39.863195][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.875102][ T7] usb 1-1: config 0 descriptor?? [ 40.143954][ T7] rtl8192cu: Chip version 0x0 executing program [ 40.783767][ T7] rtl_usb: reg 0xfe48, usbctrl_vendorreq TimeOut! status:0xffffffb9 value=0x0 [ 40.792656][ T7] rtl_usb: rx_max_size 15360, rx_urb_num 8, in_ep 1 [ 40.799898][ T7] rtl8192cu: Loading firmware rtlwifi/rtl8192cufw_TMSC.bin [ 40.822489][ T7] usb 1-1: USB disconnect, device number 4 [ 40.845040][ T4430] usb 1-1: Direct firmware load for rtlwifi/rtl8192cufw_TMSC.bin failed with error -2 [ 40.855028][ T4430] usb 1-1: Direct firmware load for rtlwifi/rtl8192cufw.bin failed with error -2 [ 40.873817][ T4430] rtlwifi: Loading alternative firmware rtlwifi/rtl8192cufw.bin [ 40.881486][ T4430] rtlwifi: Selected firmware is not available [ 41.363626][ T7] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 41.743585][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.753508][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 41.763153][ T7] usb 1-1: New USB device found, idVendor=0bda, idProduct=317f, bcdDevice=9d.cc [ 41.772237][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.782024][ T7] usb 1-1: config 0 descriptor?? [ 42.053566][ T7] rtl8192cu: Chip version 0x0 executing program [ 42.693336][ T7] rtl_usb: reg 0xfe48, usbctrl_vendorreq TimeOut! status:0xffffffb9 value=0x0 [ 42.702213][ T7] rtl_usb: rx_max_size 15360, rx_urb_num 8, in_ep 1 [ 42.709556][ T7] rtl8192cu: Loading firmware rtlwifi/rtl8192cufw_TMSC.bin [ 42.739161][ T7] usb 1-1: USB disconnect, device number 5 [ 42.747698][ T4430] usb 1-1: Direct firmware load for rtlwifi/rtl8192cufw_TMSC.bin failed with error -2 [ 42.764336][ T4430] usb 1-1: Direct firmware load for rtlwifi/rtl8192cufw.bin failed with error -2 [ 42.773781][ T4430] rtlwifi: Loading alternative firmware rtlwifi/rtl8192cufw.bin [ 42.781425][ T4430] rtlwifi: Selected firmware is not available [ 43.223201][ T7] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 43.603257][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.613015][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 43.622766][ T7] usb 1-1: New USB device found, idVendor=0bda, idProduct=317f, bcdDevice=9d.cc [ 43.631854][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.641388][ T7] usb 1-1: config 0 descriptor?? [ 43.913170][ T7] rtl8192cu: Chip version 0x0 executing program [ 44.543030][ T7] rtl_usb: rx_max_size 15360, rx_urb_num 8, in_ep 1 [ 44.549887][ T7] rtl8192cu: Loading firmware rtlwifi/rtl8192cufw_TMSC.bin [ 44.584606][ T7] usb 1-1: USB disconnect, device number 6 [ 44.591660][ T4430] usb 1-1: Direct firmware load for rtlwifi/rtl8192cufw_TMSC.bin failed with error -2 [ 44.609267][ T4430] usb 1-1: Direct firmware load for rtlwifi/rtl8192cufw.bin failed with error -2 [ 44.618996][ T4430] rtlwifi: Loading alternative firmware rtlwifi/rtl8192cufw.bin [ 44.626920][ T4430] rtlwifi: Selected firmware is not available [ 45.072889][ T7] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 45.432985][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.442810][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 45.452465][ T7] usb 1-1: New USB device found, idVendor=0bda, idProduct=317f, bcdDevice=9d.cc [ 45.461550][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.471001][ T7] usb 1-1: config 0 descriptor?? [ 45.732874][ T7] rtl8192cu: Chip version 0x0 executing program [ 46.352793][ T7] rtl_usb: rx_max_size 15360, rx_urb_num 8, in_ep 1 [ 46.359741][ T7] rtl8192cu: Loading firmware rtlwifi/rtl8192cufw_TMSC.bin [ 46.394279][ T7] usb 1-1: USB disconnect, device number 7 [ 46.407090][ T4430] usb 1-1: Direct firmware load for rtlwifi/rtl8192cufw_TMSC.bin failed with error -2 [ 46.417298][ T4430] usb 1-1: Direct firmware load for rtlwifi/rtl8192cufw.bin failed with error -2 [ 46.433602][ T4430] rtlwifi: Loading alternative firmware rtlwifi/rtl8192cufw.bin [ 46.441266][ T4430] rtlwifi: Selected firmware is not available