dhcpcd-9.4.0 starting dev: loaded udev DUID 00:04:b1:a6:a3:c1:c1:e8:df:1a:e3:df:34:8c:c9:ba:be:c3 forked to background, child pid 2385 Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.97' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 30.162538][ T12] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 30.402500][ T12] usb 1-1: Using ep0 maxpacket: 16 [ 30.522626][ T12] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 24 [ 30.702643][ T12] usb 1-1: New USB device found, idVendor=1286, idProduct=2001, bcdDevice=6e.0e [ 30.711736][ T12] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.719818][ T12] usb 1-1: Product: syz [ 30.724044][ T12] usb 1-1: Manufacturer: syz [ 30.728656][ T12] usb 1-1: SerialNumber: syz [ 30.736232][ T12] usb 1-1: config 0 descriptor?? [ 30.753226][ T2454] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 32.042510][ T12] ------------[ cut here ]------------ [ 32.048010][ T12] URB ffff888112baaf00 submitted while active [ 32.054598][ T12] WARNING: CPU: 0 PID: 12 at drivers/usb/core/urb.c:379 usb_submit_urb+0x14ec/0x1880 [ 32.064262][ T12] Modules linked in: [ 32.068161][ T12] CPU: 0 PID: 12 Comm: kworker/0:1 Not tainted 6.2.0-rc7-syzkaller-00232-gf87b564686ee #0 [ 32.078285][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023 [ 32.088598][ T12] Workqueue: events request_firmware_work_func [ 32.094872][ T12] RIP: 0010:usb_submit_urb+0x14ec/0x1880 [ 32.100548][ T12] Code: 89 de e8 87 86 88 fd 84 db 0f 85 a3 f3 ff ff e8 0a 8a 88 fd 4c 89 fe 48 c7 c7 00 2d a8 86 c6 05 14 8a 14 05 01 e8 18 06 19 02 <0f> 0b e9 81 f3 ff ff 48 89 7c 24 40 e8 e3 89 88 fd 48 8b 7c 24 40 [ 32.120367][ T12] RSP: 0018:ffffc900000cfa00 EFLAGS: 00010282 [ 32.126482][ T12] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 32.134652][ T12] RDX: ffff8881002dd400 RSI: ffffffff812db84c RDI: fffff52000019f32 [ 32.142663][ T12] RBP: ffff888112baaf00 R08: 0000000000000005 R09: 0000000000000000 [ 32.151111][ T12] R10: 0000000080000000 R11: 0000000000000000 R12: 00000000c0028200 [ 32.159512][ T12] R13: 0000000000000010 R14: 00000000fffffff0 R15: ffff888112baaf00 [ 32.167713][ T12] FS: 0000000000000000(0000) GS:ffff8881f6800000(0000) knlGS:0000000000000000 [ 32.176809][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.183576][ T12] CR2: 00007f165ac57130 CR3: 000000011215a000 CR4: 00000000003506f0 [ 32.191605][ T12] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 32.199666][ T12] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 32.207682][ T12] Call Trace: [ 32.210964][ T12] [ 32.213977][ T12] usb_tx_block+0x241/0x2e0 [ 32.218517][ T12] if_usb_prog_firmware+0x531/0xe30 [ 32.223894][ T12] ? if_usb_send_fw_pkt.isra.0+0x550/0x550 [ 32.229832][ T12] ? assign_fw+0x640/0x640 [ 32.234336][ T12] helper_firmware_cb+0x1e9/0x2c0 [ 32.239392][ T12] ? main_firmware_cb+0x1b0/0x1b0 [ 32.244480][ T12] request_firmware_work_func+0x130/0x240 [ 32.250225][ T12] ? request_partial_firmware_into_buf+0xa0/0xa0 [ 32.256732][ T12] process_one_work+0x9bf/0x1710 [ 32.262050][ T12] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 32.267491][ T12] ? rwlock_bug.part.0+0x90/0x90 [ 32.272500][ T12] ? _raw_spin_lock_irq+0x45/0x50 [ 32.277546][ T12] worker_thread+0x669/0x1090 [ 32.282246][ T12] ? __kthread_parkme+0x163/0x220 [ 32.287630][ T12] ? process_one_work+0x1710/0x1710 [ 32.293039][ T12] kthread+0x2ee/0x3a0 [ 32.297115][ T12] ? kthread_complete_and_exit+0x40/0x40 [ 32.302818][ T12] ret_from_fork+0x1f/0x30 [ 32.307277][ T12] [ 32.310297][ T12] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 32.317591][ T12] CPU: 0 PID: 12 Comm: kworker/0:1 Not tainted 6.2.0-rc7-syzkaller-00232-gf87b564686ee #0 [ 32.327768][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023 [ 32.338389][ T12] Workqueue: events request_firmware_work_func [ 32.344699][ T12] Call Trace: [ 32.348069][ T12] [ 32.351094][ T12] dump_stack_lvl+0xd1/0x138 [ 32.355805][ T12] panic+0x2cc/0x626 [ 32.359912][ T12] ? panic_print_sys_info.part.0+0x110/0x110 [ 32.366001][ T12] ? usb_submit_urb+0x14ec/0x1880 [ 32.371034][ T12] check_panic_on_warn.cold+0x19/0x35 [ 32.376564][ T12] __warn+0xf2/0x1a0 [ 32.380476][ T12] ? __wake_up_klogd.part.0+0x99/0xf0 [ 32.385868][ T12] ? usb_submit_urb+0x14ec/0x1880 [ 32.390990][ T12] report_bug+0x1c0/0x210 [ 32.395544][ T12] handle_bug+0x3c/0x70 [ 32.399707][ T12] exc_invalid_op+0x18/0x50 [ 32.404222][ T12] asm_exc_invalid_op+0x1a/0x20 [ 32.409077][ T12] RIP: 0010:usb_submit_urb+0x14ec/0x1880 [ 32.414722][ T12] Code: 89 de e8 87 86 88 fd 84 db 0f 85 a3 f3 ff ff e8 0a 8a 88 fd 4c 89 fe 48 c7 c7 00 2d a8 86 c6 05 14 8a 14 05 01 e8 18 06 19 02 <0f> 0b e9 81 f3 ff ff 48 89 7c 24 40 e8 e3 89 88 fd 48 8b 7c 24 40 [ 32.434556][ T12] RSP: 0018:ffffc900000cfa00 EFLAGS: 00010282 [ 32.440690][ T12] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 32.448750][ T12] RDX: ffff8881002dd400 RSI: ffffffff812db84c RDI: fffff52000019f32 [ 32.456898][ T12] RBP: ffff888112baaf00 R08: 0000000000000005 R09: 0000000000000000 [ 32.464871][ T12] R10: 0000000080000000 R11: 0000000000000000 R12: 00000000c0028200 [ 32.472963][ T12] R13: 0000000000000010 R14: 00000000fffffff0 R15: ffff888112baaf00 [ 32.481005][ T12] ? vprintk+0x8c/0xa0 [ 32.485102][ T12] usb_tx_block+0x241/0x2e0 [ 32.489669][ T12] if_usb_prog_firmware+0x531/0xe30 [ 32.494901][ T12] ? if_usb_send_fw_pkt.isra.0+0x550/0x550 [ 32.500724][ T12] ? assign_fw+0x640/0x640 [ 32.505166][ T12] helper_firmware_cb+0x1e9/0x2c0 [ 32.510205][ T12] ? main_firmware_cb+0x1b0/0x1b0 [ 32.515319][ T12] request_firmware_work_func+0x130/0x240 [ 32.521040][ T12] ? request_partial_firmware_into_buf+0xa0/0xa0 [ 32.527402][ T12] process_one_work+0x9bf/0x1710 [ 32.532371][ T12] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 32.537783][ T12] ? rwlock_bug.part.0+0x90/0x90 [ 32.542722][ T12] ? _raw_spin_lock_irq+0x45/0x50 [ 32.547843][ T12] worker_thread+0x669/0x1090 [ 32.552541][ T12] ? __kthread_parkme+0x163/0x220 [ 32.557590][ T12] ? process_one_work+0x1710/0x1710 [ 32.562800][ T12] kthread+0x2ee/0x3a0 [ 32.566990][ T12] ? kthread_complete_and_exit+0x40/0x40 [ 32.572656][ T12] ret_from_fork+0x1f/0x30 [ 32.578652][ T12] [ 32.581836][ T12] Kernel Offset: disabled [ 32.586239][ T12] Rebooting in 86400 seconds..