dhcpcd-9.4.0 starting dev: loaded udev DUID 00:04:da:02:67:e5:e5:53:d2:9f:6e:c8:e3:c7:0e:cc:92:0b forked to background, child pid 1218 Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.51' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 26.307412][ T71] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 26.547367][ T71] usb 1-1: Using ep0 maxpacket: 16 [ 26.707423][ T71] usb 1-1: unable to get BOS descriptor or descriptor too short [ 26.787614][ T71] usb 1-1: config 7 has an invalid interface number: 112 but max is 2 [ 26.795870][ T71] usb 1-1: config 7 has an invalid interface number: 208 but max is 2 [ 26.804091][ T71] usb 1-1: config 7 has an invalid interface number: 86 but max is 2 [ 26.812572][ T71] usb 1-1: config 7 has no interface number 0 [ 26.818710][ T71] usb 1-1: config 7 has no interface number 1 [ 26.824787][ T71] usb 1-1: config 7 has no interface number 2 [ 26.830928][ T71] usb 1-1: config 7 interface 208 altsetting 163 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 26.842133][ T71] usb 1-1: config 7 interface 208 altsetting 163 endpoint 0xA has an invalid bInterval 63, changing to 9 [ 26.853405][ T71] usb 1-1: config 7 interface 208 altsetting 163 has a duplicate endpoint with address 0x7, skipping [ 26.864306][ T71] usb 1-1: config 7 interface 208 altsetting 163 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 26.875493][ T71] usb 1-1: config 7 interface 208 altsetting 163 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 26.886651][ T71] usb 1-1: config 7 interface 208 altsetting 163 bulk endpoint 0x5 has invalid maxpacket 64 [ 26.896791][ T71] usb 1-1: config 7 interface 208 altsetting 163 has a duplicate endpoint with address 0x2, skipping [ 26.907703][ T71] usb 1-1: config 7 interface 208 altsetting 163 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 26.918857][ T71] usb 1-1: config 7 interface 208 altsetting 163 has a duplicate endpoint with address 0x9, skipping [ 26.929763][ T71] usb 1-1: config 7 interface 208 altsetting 163 has a duplicate endpoint with address 0xA, skipping [ 26.940644][ T71] usb 1-1: config 7 interface 208 altsetting 163 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 26.951808][ T71] usb 1-1: config 7 interface 86 altsetting 169 has an invalid endpoint with address 0x80, skipping [ 26.962608][ T71] usb 1-1: config 7 interface 112 has no altsetting 0 [ 26.969405][ T71] usb 1-1: config 7 interface 208 has no altsetting 0 [ 26.976153][ T71] usb 1-1: config 7 interface 86 has no altsetting 0 [ 27.217508][ T71] usb 1-1: string descriptor 0 read error: -22 [ 27.223740][ T71] usb 1-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 27.232824][ T71] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.291332][ T71] ------------[ cut here ]------------ [ 27.296865][ T71] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 27.303100][ T71] WARNING: CPU: 0 PID: 71 at drivers/usb/core/urb.c:502 usb_submit_urb+0xed2/0x18a0 [ 27.312532][ T71] Modules linked in: [ 27.316421][ T71] CPU: 0 PID: 71 Comm: kworker/0:2 Not tainted 5.19.0-rc4-syzkaller-00099-g90557fa89d3e #0 [ 27.326433][ T71] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 27.336536][ T71] Workqueue: usb_hub_wq hub_event [ 27.341615][ T71] RIP: 0010:usb_submit_urb+0xed2/0x18a0 [ 27.347175][ T71] Code: 7c 24 18 e8 a0 32 8f fd 48 8b 7c 24 18 e8 76 46 18 ff 41 89 d8 44 89 e1 4c 89 ea 48 89 c6 48 c7 c7 80 1c a9 86 e8 ee d0 09 02 <0f> 0b e9 58 f8 ff ff e8 72 32 8f fd 48 81 c5 b8 05 00 00 e9 84 f7 [ 27.366838][ T71] RSP: 0018:ffffc90001076de0 EFLAGS: 00010286 [ 27.372941][ T71] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 27.380948][ T71] RDX: ffff88810c8d8000 RSI: ffffffff812c0fe8 RDI: fffff5200020edae [ 27.388957][ T71] RBP: ffff888109b661e0 R08: 0000000000000005 R09: 0000000000000000 [ 27.396939][ T71] R10: 0000000080000000 R11: 0000000000000001 R12: 0000000000000001 [ 27.404950][ T71] R13: ffff888109a47910 R14: 0000000000000002 R15: ffff888110635900 [ 27.413057][ T71] FS: 0000000000000000(0000) GS:ffff8881f6800000(0000) knlGS:0000000000000000 [ 27.422040][ T71] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 27.428663][ T71] CR2: 00007ffcaba75318 CR3: 000000010b179000 CR4: 00000000003506f0 [ 27.436648][ T71] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 27.444669][ T71] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 27.452679][ T71] Call Trace: [ 27.455950][ T71] [ 27.458947][ T71] ? lockdep_init_map_type+0x1b2/0x7f0 [ 27.464429][ T71] usb_start_wait_urb+0x101/0x4c0 [ 27.469500][ T71] ? usb_api_blocking_completion+0xa0/0xa0 [ 27.475330][ T71] ? trace_kmalloc+0x32/0xf0 [ 27.479990][ T71] ? memset+0x20/0x40 [ 27.483986][ T71] usb_bulk_msg+0x226/0x550 executing program [ 27.488543][ T71] shark_write_reg+0x1ff/0x2e0 [ 27.493335][ T71] ? devm_of_led_get+0x110/0x110 [ 27.498357][ T71] ? shark_read_reg+0x460/0x460 [ 27.503443][ T71] ? snprintf+0xbb/0xf0 [ 27.507695][ T71] ? vsprintf+0x30/0x30 [ 27.511877][ T71] radio_tea5777_set_freq+0x208/0x4c0 [ 27.517243][ T71] radio_tea5777_init+0xbd/0x6a0 [ 27.522224][ T71] usb_shark_probe+0x5bc/0x7a0 [ 27.527020][ T71] usb_probe_interface+0x315/0x7f0 [ 27.532178][ T71] ? usb_match_dynamic_id+0x1a0/0x1a0 [ 27.537593][ T71] really_probe+0x23e/0xb90 [ 27.542093][ T71] __driver_probe_device+0x338/0x4d0 [ 27.547419][ T71] ? usb_match_id.part.0+0x15d/0x1b0 [ 27.552731][ T71] driver_probe_device+0x4c/0x1a0 [ 27.557799][ T71] __device_attach_driver+0x20b/0x2f0 [ 27.563187][ T71] ? driver_allows_async_probing+0x170/0x170 [ 27.569213][ T71] bus_for_each_drv+0x15f/0x1e0 [ 27.574076][ T71] ? bus_for_each_dev+0x1d0/0x1d0 [ 27.579145][ T71] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 27.584973][ T71] ? lockdep_hardirqs_on+0x79/0x100 [ 27.590210][ T71] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 27.596034][ T71] __device_attach+0x1e4/0x530 [ 27.600847][ T71] ? device_driver_attach+0x210/0x210 [ 27.606236][ T71] ? kobject_uevent_env+0x2ac/0x1660 [ 27.611580][ T71] bus_probe_device+0x1e4/0x290 [ 27.616450][ T71] device_add+0xbda/0x1ea0 [ 27.620911][ T71] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 27.627175][ T71] ? usb_cache_string+0x102/0x140 [ 27.632256][ T71] ? usb_string+0x3d4/0x530 [ 27.636777][ T71] usb_set_configuration+0x101e/0x1900 [ 27.642296][ T71] usb_generic_driver_probe+0xba/0x100 [ 27.647795][ T71] usb_probe_device+0xd9/0x2c0 [ 27.652554][ T71] ? usb_driver_release_interface+0x180/0x180 [ 27.658704][ T71] really_probe+0x23e/0xb90 [ 27.663284][ T71] __driver_probe_device+0x338/0x4d0 [ 27.668639][ T71] driver_probe_device+0x4c/0x1a0 [ 27.673694][ T71] __device_attach_driver+0x20b/0x2f0 [ 27.679133][ T71] ? driver_allows_async_probing+0x170/0x170 [ 27.685134][ T71] bus_for_each_drv+0x15f/0x1e0 [ 27.690030][ T71] ? bus_for_each_dev+0x1d0/0x1d0 [ 27.695068][ T71] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 27.700918][ T71] ? lockdep_hardirqs_on+0x79/0x100 [ 27.706128][ T71] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 27.711980][ T71] __device_attach+0x1e4/0x530 [ 27.716763][ T71] ? device_driver_attach+0x210/0x210 [ 27.722187][ T71] ? kobject_uevent_env+0x2ac/0x1660 [ 27.727506][ T71] bus_probe_device+0x1e4/0x290 [ 27.732353][ T71] device_add+0xbda/0x1ea0 [ 27.736777][ T71] ? usb_match_device+0xd4/0x550 [ 27.741785][ T71] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 27.748082][ T71] ? usb_detect_static_quirks+0x305/0x3b0 [ 27.753803][ T71] usb_new_device.cold+0x641/0x1091 [ 27.759049][ T71] ? hub_disconnect+0x510/0x510 [ 27.763927][ T71] ? rwlock_bug.part.0+0x90/0x90 [ 27.768935][ T71] ? _raw_spin_unlock_irq+0x1f/0x40 [ 27.774159][ T71] ? _raw_spin_unlock_irq+0x1f/0x40 [ 27.779410][ T71] hub_event+0x25d5/0x4690 [ 27.783848][ T71] ? hub_port_debounce+0x3c0/0x3c0 [ 27.789004][ T71] ? lock_release+0x780/0x780 [ 27.793694][ T71] ? lock_downgrade+0x6e0/0x6e0 [ 27.798657][ T71] ? do_raw_spin_lock+0x120/0x2a0 [ 27.803708][ T71] process_one_work+0x996/0x1610 [ 27.808702][ T71] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 27.814096][ T71] ? rwlock_bug.part.0+0x90/0x90 [ 27.819097][ T71] ? _raw_spin_lock_irq+0x41/0x50 [ 27.824156][ T71] worker_thread+0x665/0x1080 [ 27.828908][ T71] ? __kthread_parkme+0x15f/0x220 [ 27.833948][ T71] ? process_one_work+0x1610/0x1610 [ 27.839212][ T71] kthread+0x2ef/0x3a0 [ 27.843304][ T71] ? kthread_complete_and_exit+0x40/0x40 [ 27.848979][ T71] ret_from_fork+0x1f/0x30 [ 27.853410][ T71] [ 27.856476][ T71] Kernel panic - not syncing: panic_on_warn set ... [ 27.863071][ T71] CPU: 0 PID: 71 Comm: kworker/0:2 Not tainted 5.19.0-rc4-syzkaller-00099-g90557fa89d3e #0 [ 27.873043][ T71] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 27.883106][ T71] Workqueue: usb_hub_wq hub_event [ 27.888135][ T71] Call Trace: [ 27.891407][ T71] [ 27.894326][ T71] dump_stack_lvl+0xcd/0x134 [ 27.898918][ T71] panic+0x2d7/0x636 [ 27.902808][ T71] ? panic_print_sys_info.part.0+0x10b/0x10b [ 27.908787][ T71] ? __warn.cold+0x1d1/0x2c5 [ 27.913371][ T71] ? usb_submit_urb+0xed2/0x18a0 [ 27.918308][ T71] __warn.cold+0x1e2/0x2c5 [ 27.922742][ T71] ? __wake_up_klogd.part.0+0x99/0xf0 [ 27.928118][ T71] ? usb_submit_urb+0xed2/0x18a0 [ 27.933043][ T71] report_bug+0x1bc/0x210 [ 27.937367][ T71] handle_bug+0x3c/0x60 [ 27.941524][ T71] exc_invalid_op+0x14/0x40 [ 27.946017][ T71] asm_exc_invalid_op+0x1b/0x20 [ 27.950863][ T71] RIP: 0010:usb_submit_urb+0xed2/0x18a0 [ 27.956407][ T71] Code: 7c 24 18 e8 a0 32 8f fd 48 8b 7c 24 18 e8 76 46 18 ff 41 89 d8 44 89 e1 4c 89 ea 48 89 c6 48 c7 c7 80 1c a9 86 e8 ee d0 09 02 <0f> 0b e9 58 f8 ff ff e8 72 32 8f fd 48 81 c5 b8 05 00 00 e9 84 f7 [ 27.976007][ T71] RSP: 0018:ffffc90001076de0 EFLAGS: 00010286 [ 27.982062][ T71] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 27.990031][ T71] RDX: ffff88810c8d8000 RSI: ffffffff812c0fe8 RDI: fffff5200020edae [ 27.998000][ T71] RBP: ffff888109b661e0 R08: 0000000000000005 R09: 0000000000000000 [ 28.005977][ T71] R10: 0000000080000000 R11: 0000000000000001 R12: 0000000000000001 [ 28.013941][ T71] R13: ffff888109a47910 R14: 0000000000000002 R15: ffff888110635900 [ 28.021906][ T71] ? vprintk+0x88/0x90 [ 28.025976][ T71] ? lockdep_init_map_type+0x1b2/0x7f0 [ 28.031426][ T71] usb_start_wait_urb+0x101/0x4c0 [ 28.036442][ T71] ? usb_api_blocking_completion+0xa0/0xa0 [ 28.042237][ T71] ? trace_kmalloc+0x32/0xf0 [ 28.046815][ T71] ? memset+0x20/0x40 [ 28.050782][ T71] usb_bulk_msg+0x226/0x550 [ 28.055270][ T71] shark_write_reg+0x1ff/0x2e0 [ 28.060023][ T71] ? devm_of_led_get+0x110/0x110 [ 28.064952][ T71] ? shark_read_reg+0x460/0x460 [ 28.069810][ T71] ? snprintf+0xbb/0xf0 [ 28.073953][ T71] ? vsprintf+0x30/0x30 [ 28.078097][ T71] radio_tea5777_set_freq+0x208/0x4c0 [ 28.083457][ T71] radio_tea5777_init+0xbd/0x6a0 [ 28.088382][ T71] usb_shark_probe+0x5bc/0x7a0 [ 28.093135][ T71] usb_probe_interface+0x315/0x7f0 [ 28.098236][ T71] ? usb_match_dynamic_id+0x1a0/0x1a0 [ 28.103604][ T71] really_probe+0x23e/0xb90 [ 28.108104][ T71] __driver_probe_device+0x338/0x4d0 [ 28.113377][ T71] ? usb_match_id.part.0+0x15d/0x1b0 [ 28.118649][ T71] driver_probe_device+0x4c/0x1a0 [ 28.123661][ T71] __device_attach_driver+0x20b/0x2f0 [ 28.129028][ T71] ? driver_allows_async_probing+0x170/0x170 [ 28.134996][ T71] bus_for_each_drv+0x15f/0x1e0 [ 28.139835][ T71] ? bus_for_each_dev+0x1d0/0x1d0 [ 28.144848][ T71] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 28.150664][ T71] ? lockdep_hardirqs_on+0x79/0x100 [ 28.155850][ T71] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 28.161657][ T71] __device_attach+0x1e4/0x530 [ 28.166441][ T71] ? device_driver_attach+0x210/0x210 [ 28.171808][ T71] ? kobject_uevent_env+0x2ac/0x1660 [ 28.177098][ T71] bus_probe_device+0x1e4/0x290 [ 28.181947][ T71] device_add+0xbda/0x1ea0 [ 28.186361][ T71] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 28.192694][ T71] ? usb_cache_string+0x102/0x140 [ 28.197713][ T71] ? usb_string+0x3d4/0x530 [ 28.202205][ T71] usb_set_configuration+0x101e/0x1900 [ 28.207658][ T71] usb_generic_driver_probe+0xba/0x100 [ 28.213105][ T71] usb_probe_device+0xd9/0x2c0 [ 28.217865][ T71] ? usb_driver_release_interface+0x180/0x180 [ 28.223935][ T71] really_probe+0x23e/0xb90 [ 28.228443][ T71] __driver_probe_device+0x338/0x4d0 [ 28.233724][ T71] driver_probe_device+0x4c/0x1a0 [ 28.238753][ T71] __device_attach_driver+0x20b/0x2f0 [ 28.244113][ T71] ? driver_allows_async_probing+0x170/0x170 [ 28.250081][ T71] bus_for_each_drv+0x15f/0x1e0 [ 28.254921][ T71] ? bus_for_each_dev+0x1d0/0x1d0 [ 28.259936][ T71] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 28.265732][ T71] ? lockdep_hardirqs_on+0x79/0x100 [ 28.270919][ T71] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 28.276718][ T71] __device_attach+0x1e4/0x530 [ 28.281484][ T71] ? device_driver_attach+0x210/0x210 [ 28.286863][ T71] ? kobject_uevent_env+0x2ac/0x1660 [ 28.292136][ T71] bus_probe_device+0x1e4/0x290 [ 28.296982][ T71] device_add+0xbda/0x1ea0 [ 28.301389][ T71] ? usb_match_device+0xd4/0x550 [ 28.306320][ T71] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 28.312547][ T71] ? usb_detect_static_quirks+0x305/0x3b0 [ 28.318263][ T71] usb_new_device.cold+0x641/0x1091 [ 28.323458][ T71] ? hub_disconnect+0x510/0x510 [ 28.328299][ T71] ? rwlock_bug.part.0+0x90/0x90 [ 28.333230][ T71] ? _raw_spin_unlock_irq+0x1f/0x40 [ 28.338424][ T71] ? _raw_spin_unlock_irq+0x1f/0x40 [ 28.343619][ T71] hub_event+0x25d5/0x4690 [ 28.348029][ T71] ? hub_port_debounce+0x3c0/0x3c0 [ 28.353129][ T71] ? lock_release+0x780/0x780 [ 28.357798][ T71] ? lock_downgrade+0x6e0/0x6e0 [ 28.362643][ T71] ? do_raw_spin_lock+0x120/0x2a0 [ 28.367658][ T71] process_one_work+0x996/0x1610 [ 28.372600][ T71] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 28.377962][ T71] ? rwlock_bug.part.0+0x90/0x90 [ 28.382887][ T71] ? _raw_spin_lock_irq+0x41/0x50 [ 28.387903][ T71] worker_thread+0x665/0x1080 [ 28.392570][ T71] ? __kthread_parkme+0x15f/0x220 [ 28.397583][ T71] ? process_one_work+0x1610/0x1610 [ 28.402770][ T71] kthread+0x2ef/0x3a0 [ 28.406829][ T71] ? kthread_complete_and_exit+0x40/0x40 [ 28.412448][ T71] ret_from_fork+0x1f/0x30 [ 28.416864][ T71] [ 28.420108][ T71] Kernel Offset: disabled [ 28.424481][ T71] Rebooting in 86400 seconds..