Warning: Permanently added '10.128.0.73' (ECDSA) to the list of known hosts.
executing program
[ 26.971729][ T71] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 27.331824][ T71] usb 1-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0x4, skipping
[ 27.531895][ T71] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 27.541361][ T71] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 27.549630][ T71] usb 1-1: Product: syz
[ 27.553990][ T71] usb 1-1: Manufacturer: syz
[ 27.558588][ T71] usb 1-1: SerialNumber: syz
[ 27.603262][ T71] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 28.181714][ T71] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 28.401997][ T71] ------------[ cut here ]------------
[ 28.407507][ T71] usb 1-1: BOGUS urb xfer, pipe 1 != type 3
[ 28.413798][ T71] WARNING: CPU: 1 PID: 71 at drivers/usb/core/urb.c:502 usb_submit_urb+0xed2/0x18a0
[ 28.423287][ T71] Modules linked in:
[ 28.427171][ T71] CPU: 1 PID: 71 Comm: kworker/1:2 Not tainted 5.18.0-rc5-syzkaller-00120-gb7a4f9b5d0e4 #0
[ 28.437431][ T71] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 28.447748][ T71] Workqueue: events request_firmware_work_func
[ 28.454725][ T71] RIP: 0010:usb_submit_urb+0xed2/0x18a0
[ 28.460467][ T71] Code: 7c 24 18 e8 00 3d 93 fd 48 8b 7c 24 18 e8 26 b4 18 ff 41 89 d8 44 89 e1 4c 89 ea 48 89 c6 48 c7 c7 e0 88 a7 86 e8 8c c8 08 02 <0f> 0b e9 58 f8 ff ff e8 d2 3c 93 fd 48 81 c5 40 06 00 00 e9 84 f7
[ 28.480420][ T71] RSP: 0018:ffffc9000101f808 EFLAGS: 00010286
[ 28.486523][ T71] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000
[ 28.494703][ T71] RDX: ffff88810c8a0000 RSI: ffffffff812bdce8 RDI: fffff52000203ef3
[ 28.503058][ T71] RBP: ffff88811d165000 R08: 0000000000000000 R09: 0000000000000001
[ 28.511047][ T71] R10: ffffffff812b86be R11: 0000000000000000 R12: 0000000000000001
[ 28.519510][ T71] R13: ffff88810ca2e9b0 R14: 0000000000000002 R15: ffff888108adc900
[ 28.527818][ T71] FS: 0000000000000000(0000) GS:ffff8881f6900000(0000) knlGS:0000000000000000
[ 28.537186][ T71] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 28.543815][ T71] CR2: 00007fb9497e5130 CR3: 000000010e51b000 CR4: 00000000003506e0
[ 28.551913][ T71] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 28.559897][ T71] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 28.568035][ T71] Call Trace:
[ 28.571322][ T71]
[ 28.575245][ T71] hif_usb_send+0x4c1/0xcf0
[ 28.579776][ T71] ? htc_issue_send.constprop.0+0x105/0x250
[ 28.585841][ T71] ? __sanitizer_cov_trace_cmp4+0x1c/0x70
[ 28.590969][ T1168] usb 1-1: USB disconnect, device number 2
[ 28.596219][ T71] htc_connect_service+0x612/0x8c0
executing program
[ 28.602947][ T71] ath9k_wmi_connect+0xc9/0x190
[ 28.607829][ T71] ? ath9k_fatal_work+0x20/0x20
[ 28.612765][ T71] ? ath9k_hif_usb_exit+0x20/0x20
[ 28.617996][ T71] ? ath9k_wmi_event_tasklet+0x450/0x450
[ 28.623724][ T71] ? kmem_cache_alloc_trace+0x48/0x3b0
[ 28.629207][ T71] ath9k_init_htc_services.constprop.0+0xb3/0x640
[ 28.635678][ T71] ? ath9k_regwrite_flush+0x350/0x350
[ 28.641047][ T71] ? lockdep_init_map_type+0x21a/0x7f0
[ 28.646638][ T71] ? ath9k_wmi_ctrl_tx+0x20/0x20
[ 28.651871][ T71] ath9k_htc_probe_device+0x262/0x1f00
[ 28.657333][ T71] ? ath9k_init_htc_services.constprop.0+0x640/0x640
[ 28.664396][ T71] ? usb_submit_urb+0x875/0x18a0
[ 28.669348][ T71] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 28.675693][ T71] ? usb_free_urb+0x5c/0x110
[ 28.680313][ T71] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 28.686610][ T71] ? ath9k_hif_usb_alloc_urbs+0xc08/0x1050
[ 28.692649][ T71] ath9k_htc_hw_init+0x31/0x60
[ 28.697513][ T71] ath9k_hif_usb_firmware_cb+0x274/0x530
[ 28.703191][ T71] ? ath9k_hif_usb_alloc_urbs+0x1050/0x1050
[ 28.709100][ T71] request_firmware_work_func+0x12c/0x230
[ 28.714882][ T71] ? request_partial_firmware_into_buf+0xa0/0xa0
[ 28.721232][ T71] process_one_work+0x996/0x1610
[ 28.726334][ T71] ? pwq_dec_nr_in_flight+0x2a0/0x2a0
[ 28.731844][ T71] ? rwlock_bug.part.0+0x90/0x90
[ 28.736778][ T71] ? _raw_spin_lock_irq+0x41/0x50
[ 28.741958][ T71] worker_thread+0x665/0x1080
[ 28.746651][ T71] ? __kthread_parkme+0x15f/0x220
[ 28.751891][ T71] ? process_one_work+0x1610/0x1610
[ 28.757101][ T71] kthread+0x2ef/0x3a0
[ 28.761163][ T71] ? kthread_complete_and_exit+0x40/0x40
[ 28.766877][ T71] ret_from_fork+0x1f/0x30
[ 28.771318][ T71]
[ 28.774386][ T71] Kernel panic - not syncing: panic_on_warn set ...
[ 28.780966][ T71] CPU: 1 PID: 71 Comm: kworker/1:2 Not tainted 5.18.0-rc5-syzkaller-00120-gb7a4f9b5d0e4 #0
[ 28.790940][ T71] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 28.801128][ T71] Workqueue: events request_firmware_work_func
[ 28.807282][ T71] Call Trace:
[ 28.810650][ T71]
[ 28.813576][ T71] dump_stack_lvl+0xcd/0x134
[ 28.818153][ T71] panic+0x2d7/0x636
[ 28.822122][ T71] ? panic_print_sys_info.part.0+0x10b/0x10b
[ 28.828088][ T71] ? __warn.cold+0x1d1/0x2c5
[ 28.832669][ T71] ? usb_submit_urb+0xed2/0x18a0
[ 28.837607][ T71] __warn.cold+0x1e2/0x2c5
[ 28.842038][ T71] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 28.848267][ T71] ? usb_submit_urb+0xed2/0x18a0
[ 28.853192][ T71] report_bug+0x1bd/0x210
[ 28.857510][ T71] handle_bug+0x3c/0x60
[ 28.861658][ T71] exc_invalid_op+0x14/0x40
[ 28.866154][ T71] asm_exc_invalid_op+0x12/0x20
[ 28.870990][ T71] RIP: 0010:usb_submit_urb+0xed2/0x18a0
[ 28.879231][ T71] Code: 7c 24 18 e8 00 3d 93 fd 48 8b 7c 24 18 e8 26 b4 18 ff 41 89 d8 44 89 e1 4c 89 ea 48 89 c6 48 c7 c7 e0 88 a7 86 e8 8c c8 08 02 <0f> 0b e9 58 f8 ff ff e8 d2 3c 93 fd 48 81 c5 40 06 00 00 e9 84 f7
[ 28.898887][ T71] RSP: 0018:ffffc9000101f808 EFLAGS: 00010286
[ 28.905298][ T71] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000
[ 28.913445][ T71] RDX: ffff88810c8a0000 RSI: ffffffff812bdce8 RDI: fffff52000203ef3
[ 28.921548][ T71] RBP: ffff88811d165000 R08: 0000000000000000 R09: 0000000000000001
[ 28.929534][ T71] R10: ffffffff812b86be R11: 0000000000000000 R12: 0000000000000001
[ 28.937496][ T71] R13: ffff88810ca2e9b0 R14: 0000000000000002 R15: ffff888108adc900
[ 28.945459][ T71] ? wake_up_klogd.part.0+0x8e/0xd0
[ 28.950650][ T71] ? vprintk+0x88/0x90
[ 28.954723][ T71] ? usb_submit_urb+0xed2/0x18a0
[ 28.959668][ T71] hif_usb_send+0x4c1/0xcf0
[ 28.964162][ T71] ? htc_issue_send.constprop.0+0x105/0x250
[ 28.970056][ T71] ? __sanitizer_cov_trace_cmp4+0x1c/0x70
[ 28.975788][ T71] htc_connect_service+0x612/0x8c0
[ 28.980914][ T71] ath9k_wmi_connect+0xc9/0x190
[ 28.985759][ T71] ? ath9k_fatal_work+0x20/0x20
[ 28.990707][ T71] ? ath9k_hif_usb_exit+0x20/0x20
[ 28.995735][ T71] ? ath9k_wmi_event_tasklet+0x450/0x450
[ 29.001363][ T71] ? kmem_cache_alloc_trace+0x48/0x3b0
[ 29.006815][ T71] ath9k_init_htc_services.constprop.0+0xb3/0x640
[ 29.013322][ T71] ? ath9k_regwrite_flush+0x350/0x350
[ 29.018805][ T71] ? lockdep_init_map_type+0x21a/0x7f0
[ 29.024252][ T71] ? ath9k_wmi_ctrl_tx+0x20/0x20
[ 29.029177][ T71] ath9k_htc_probe_device+0x262/0x1f00
[ 29.034624][ T71] ? ath9k_init_htc_services.constprop.0+0x640/0x640
[ 29.041292][ T71] ? usb_submit_urb+0x875/0x18a0
[ 29.046231][ T71] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 29.052466][ T71] ? usb_free_urb+0x5c/0x110
[ 29.057133][ T71] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 29.063363][ T71] ? ath9k_hif_usb_alloc_urbs+0xc08/0x1050
[ 29.069423][ T71] ath9k_htc_hw_init+0x31/0x60
[ 29.074200][ T71] ath9k_hif_usb_firmware_cb+0x274/0x530
[ 29.079835][ T71] ? ath9k_hif_usb_alloc_urbs+0x1050/0x1050
[ 29.085746][ T71] request_firmware_work_func+0x12c/0x230
[ 29.092075][ T71] ? request_partial_firmware_into_buf+0xa0/0xa0
[ 29.098965][ T71] process_one_work+0x996/0x1610
[ 29.104040][ T71] ? pwq_dec_nr_in_flight+0x2a0/0x2a0
[ 29.109431][ T71] ? rwlock_bug.part.0+0x90/0x90
[ 29.114466][ T71] ? _raw_spin_lock_irq+0x41/0x50
[ 29.119516][ T71] worker_thread+0x665/0x1080
[ 29.124194][ T71] ? __kthread_parkme+0x15f/0x220
[ 29.129303][ T71] ? process_one_work+0x1610/0x1610
[ 29.134509][ T71] kthread+0x2ef/0x3a0
[ 29.138582][ T71] ? kthread_complete_and_exit+0x40/0x40
[ 29.144293][ T71] ret_from_fork+0x1f/0x30
[ 29.148718][ T71]
[ 29.152244][ T71] Kernel Offset: disabled
[ 29.156610][ T71] Rebooting in 86400 seconds..