dhcpcd-9.4.0 starting dev: loaded udev DUID 00:04:38:86:54:de:e3:84:6f:42:f0:0e:4e:a9:8b:37:24:d9 forked to background, child pid 1214 Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.180' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 27.259804][ T70] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 27.619870][ T70] usb 1-1: config 0 has an invalid interface number: 72 but max is 0 [ 27.628028][ T70] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 27.636729][ T70] usb 1-1: config 0 has an invalid interface association descriptor of length 2, skipping [ 27.646630][ T70] usb 1-1: config 0 has an invalid interface association descriptor of length 2, skipping [ 27.656545][ T70] usb 1-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 27.665239][ T70] usb 1-1: config 0 has no interface number 0 [ 27.671362][ T70] usb 1-1: config 0 interface 72 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 27.682005][ T70] usb 1-1: config 0 interface 72 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 27.692899][ T70] usb 1-1: config 0 interface 72 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 27.703688][ T70] usb 1-1: config 0 interface 72 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 27.714342][ T70] usb 1-1: config 0 interface 72 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 8 [ 27.724174][ T70] usb 1-1: config 0 interface 72 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 27.734804][ T70] usb 1-1: config 0 interface 72 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 27.745422][ T70] usb 1-1: config 0 interface 72 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 27.756031][ T70] usb 1-1: config 0 interface 72 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 27.765773][ T70] usb 1-1: config 0 interface 72 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 27.776644][ T70] usb 1-1: config 0 interface 72 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 27.787280][ T70] usb 1-1: New USB device found, idVendor=0846, idProduct=9010, bcdDevice=a0.e4 [ 27.796354][ T70] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.811064][ T70] usb 1-1: config 0 descriptor?? executing program [ 28.009792][ T70] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 28.479847][ T70] usb 1-1: device descriptor read/64, error -71 [ 29.013649][ T70] usb 1-1: driver API: 1.9.9 2016-02-15 [1-1] [ 29.019985][ T70] usb 1-1: firmware API: 1.9.6 2012-07-07 [ 29.025810][ T70] ------------[ cut here ]------------ [ 29.031310][ T70] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 29.037436][ T70] WARNING: CPU: 0 PID: 70 at drivers/usb/core/urb.c:502 usb_submit_urb+0xed2/0x1880 [ 29.046858][ T70] Modules linked in: [ 29.050783][ T70] CPU: 0 PID: 70 Comm: kworker/0:2 Not tainted 6.0.0-rc4-syzkaller-00066-g7eb2bf871454 #0 [ 29.060699][ T70] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 29.070802][ T70] Workqueue: events request_firmware_work_func [ 29.076955][ T70] RIP: 0010:usb_submit_urb+0xed2/0x1880 [ 29.082533][ T70] Code: 7c 24 18 e8 40 2f 8e fd 48 8b 7c 24 18 e8 a6 9d 18 ff 41 89 d8 44 89 e1 4c 89 ea 48 89 c6 48 c7 c7 c0 ba a9 86 e8 0e b2 0d 02 <0f> 0b e9 58 f8 ff ff e8 12 2f 8e fd 48 81 c5 b8 05 00 00 e9 84 f7 [ 29.102189][ T70] RSP: 0018:ffffc90001067ba0 EFLAGS: 00010282 [ 29.108265][ T70] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 29.116266][ T70] RDX: ffff88810c8b1c80 RSI: ffffffff812c9b68 RDI: fffff5200020cf66 [ 29.124267][ T70] RBP: ffff888109b64140 R08: 0000000000000005 R09: 0000000000000000 [ 29.132278][ T70] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001 [ 29.140279][ T70] R13: ffff88810ea784d8 R14: 0000000000000002 R15: ffff8881105c9700 [ 29.148241][ T70] FS: 0000000000000000(0000) GS:ffff8881f6800000(0000) knlGS:0000000000000000 [ 29.157208][ T70] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 executing program [ 29.163863][ T70] CR2: 00005638d4d40e58 CR3: 0000000118439000 CR4: 00000000003506f0 [ 29.169837][ T1139] usb 1-1: USB disconnect, device number 2 [ 29.171863][ T70] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 29.185637][ T70] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 29.193723][ T70] Call Trace: [ 29.197009][ T70] [ 29.199967][ T70] ? _raw_spin_unlock_irqrestore+0x2/0x70 [ 29.205703][ T70] carl9170_usb_send_rx_irq_urb+0x273/0x340 [ 29.211635][ T70] carl9170_usb_firmware_step2+0x171/0x240 [ 29.217459][ T70] ? carl9170_usb_resume+0x170/0x170 [ 29.222775][ T70] request_firmware_work_func+0x12c/0x230 [ 29.228509][ T70] ? request_partial_firmware_into_buf+0xa0/0xa0 [ 29.234867][ T70] process_one_work+0x991/0x1610 [ 29.239849][ T70] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 29.245214][ T70] ? rwlock_bug.part.0+0x90/0x90 [ 29.250194][ T70] ? _raw_spin_lock_irq+0x41/0x50 [ 29.255237][ T70] worker_thread+0x665/0x1080 [ 29.259950][ T70] ? __kthread_parkme+0x15f/0x220 [ 29.264985][ T70] ? process_one_work+0x1610/0x1610 [ 29.270224][ T70] kthread+0x2ea/0x3a0 [ 29.274310][ T70] ? kthread_complete_and_exit+0x40/0x40 [ 29.279973][ T70] ret_from_fork+0x1f/0x30 [ 29.284403][ T70] [ 29.287410][ T70] Kernel panic - not syncing: panic_on_warn set ... [ 29.293990][ T70] CPU: 0 PID: 70 Comm: kworker/0:2 Not tainted 6.0.0-rc4-syzkaller-00066-g7eb2bf871454 #0 [ 29.303862][ T70] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 29.313902][ T70] Workqueue: events request_firmware_work_func [ 29.320056][ T70] Call Trace: [ 29.323344][ T70] [ 29.326277][ T70] dump_stack_lvl+0xcd/0x134 [ 29.330859][ T70] panic+0x2c8/0x627 [ 29.334741][ T70] ? panic_print_sys_info.part.0+0x10b/0x10b [ 29.340712][ T70] ? __warn.cold+0x248/0x2c4 [ 29.345291][ T70] ? usb_submit_urb+0xed2/0x1880 [ 29.350220][ T70] __warn.cold+0x259/0x2c4 [ 29.354630][ T70] ? __wake_up_klogd.part.0+0xc6/0xf0 [ 29.359988][ T70] ? usb_submit_urb+0xed2/0x1880 [ 29.364914][ T70] report_bug+0x1bc/0x210 [ 29.369232][ T70] handle_bug+0x3c/0x60 [ 29.373380][ T70] exc_invalid_op+0x14/0x40 [ 29.377872][ T70] asm_exc_invalid_op+0x16/0x20 [ 29.382719][ T70] RIP: 0010:usb_submit_urb+0xed2/0x1880 [ 29.388260][ T70] Code: 7c 24 18 e8 40 2f 8e fd 48 8b 7c 24 18 e8 a6 9d 18 ff 41 89 d8 44 89 e1 4c 89 ea 48 89 c6 48 c7 c7 c0 ba a9 86 e8 0e b2 0d 02 <0f> 0b e9 58 f8 ff ff e8 12 2f 8e fd 48 81 c5 b8 05 00 00 e9 84 f7 [ 29.407855][ T70] RSP: 0018:ffffc90001067ba0 EFLAGS: 00010282 [ 29.413906][ T70] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 29.421863][ T70] RDX: ffff88810c8b1c80 RSI: ffffffff812c9b68 RDI: fffff5200020cf66 [ 29.429822][ T70] RBP: ffff888109b64140 R08: 0000000000000005 R09: 0000000000000000 [ 29.437777][ T70] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001 [ 29.445738][ T70] R13: ffff88810ea784d8 R14: 0000000000000002 R15: ffff8881105c9700 [ 29.453696][ T70] ? vprintk+0x88/0x90 [ 29.457768][ T70] ? _raw_spin_unlock_irqrestore+0x2/0x70 [ 29.463479][ T70] carl9170_usb_send_rx_irq_urb+0x273/0x340 [ 29.469366][ T70] carl9170_usb_firmware_step2+0x171/0x240 [ 29.475172][ T70] ? carl9170_usb_resume+0x170/0x170 [ 29.480461][ T70] request_firmware_work_func+0x12c/0x230 [ 29.486178][ T70] ? request_partial_firmware_into_buf+0xa0/0xa0 [ 29.492498][ T70] process_one_work+0x991/0x1610 [ 29.497428][ T70] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 29.502786][ T70] ? rwlock_bug.part.0+0x90/0x90 [ 29.507715][ T70] ? _raw_spin_lock_irq+0x41/0x50 [ 29.512734][ T70] worker_thread+0x665/0x1080 [ 29.517405][ T70] ? __kthread_parkme+0x15f/0x220 [ 29.522419][ T70] ? process_one_work+0x1610/0x1610 [ 29.527605][ T70] kthread+0x2ea/0x3a0 [ 29.531666][ T70] ? kthread_complete_and_exit+0x40/0x40 [ 29.537294][ T70] ret_from_fork+0x1f/0x30 [ 29.541704][ T70] [ 29.544918][ T70] Kernel Offset: disabled [ 29.549277][ T70] Rebooting in 86400 seconds..