Warning: Permanently added '10.128.0.226' (ECDSA) to the list of known hosts. executing program [ 22.743058][ T57] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 23.102542][ T57] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 23.272329][ T57] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 23.281359][ T57] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 23.289404][ T57] usb 1-1: Product: syz [ 23.293659][ T57] usb 1-1: Manufacturer: syz [ 23.298242][ T57] usb 1-1: SerialNumber: syz [ 23.343037][ T57] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 23.941653][ T57] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 23.950812][ T57] ------------[ cut here ]------------ [ 23.956326][ T57] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 23.962731][ C1] WARNING: CPU: 1 PID: 57 at drivers/usb/core/urb.c:478 usb_submit_urb+0x1188/0x1460 [ 23.962734][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 23.962737][ C1] CPU: 1 PID: 57 Comm: kworker/1:2 Not tainted 5.8.0-rc1-syzkaller #0 [ 23.962740][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 23.962742][ C1] Workqueue: events request_firmware_work_func [ 23.962745][ C1] Call Trace: [ 23.962746][ C1] dump_stack+0xf6/0x16e [ 23.962748][ C1] ? usb_submit_urb+0x1090/0x1460 [ 23.962750][ C1] panic+0x2aa/0x6e1 [ 23.962751][ C1] ? __warn_printk+0xf3/0xf3 [ 23.962753][ C1] ? probe_kernel_read_allowed+0x92/0xd0 [ 23.962755][ C1] ? usb_submit_urb+0x1188/0x1460 [ 23.962756][ C1] ? __warn.cold+0x14/0x35 [ 23.962758][ C1] ? __warn+0xd6/0x1b2 [ 23.962760][ C1] ? usb_submit_urb+0x1188/0x1460 [ 23.962761][ C1] __warn.cold+0x2f/0x35 [ 23.962763][ C1] ? usb_submit_urb+0x1188/0x1460 [ 23.962765][ C1] report_bug+0x271/0x2f0 [ 23.962766][ C1] exc_invalid_op+0x1e4/0x370 [ 23.962768][ C1] asm_exc_invalid_op+0x12/0x20 [ 23.962770][ C1] RIP: 0010:usb_submit_urb+0x1188/0x1460 [ 23.962776][ C1] Code: 4d 85 ed 74 46 e8 48 96 d0 fd 4c 89 f7 e8 a0 02 16 ff 41 89 d8 44 89 e1 4c 89 ea 48 89 c6 48 c7 c7 80 b3 3d 86 e8 3a ac a4 fd <0f> 0b e9 20 f4 ff ff e8 1c 96 d0 fd 0f 1f 44 00 00 e8 12 96 d0 fd [ 23.962778][ C1] RSP: 0018:ffff8881d8ab7b50 EFLAGS: 00010286 [ 23.962782][ C1] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 23.962785][ C1] RDX: 0000000000000000 RSI: ffffffff81298423 RDI: ffffed103b156f5c [ 23.962788][ C1] RBP: ffff8881c8c7e450 R08: ffff8881d8aa1900 R09: ffffed103b665ea2 [ 23.962790][ C1] R10: ffff8881db32f50f R11: ffffed103b665ea1 R12: 0000000000000003 [ 23.962793][ C1] R13: ffff8881c700adc8 R14: ffff8881d8e250a0 R15: ffff8881d54c7700 [ 23.962795][ C1] ? vprintk_func+0x93/0x133 [ 23.962797][ C1] ? lockdep_hardirqs_on_prepare+0x293/0x550 [ 23.962798][ C1] ath9k_hif_usb_alloc_urbs+0x7be/0x1050 [ 23.962800][ C1] ath9k_hif_usb_firmware_cb+0x148/0x510 [ 23.962802][ C1] ? ath9k_hif_usb_disconnect+0x420/0x420 [ 23.962804][ C1] request_firmware_work_func+0x126/0x242 [ 23.962806][ C1] ? request_firmware_into_buf+0x90/0x90 [ 23.962808][ C1] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 23.962810][ C1] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 23.962812][ C1] process_one_work+0x965/0x1620 [ 23.962814][ C1] ? lock_release+0x710/0x710 [ 23.962816][ C1] ? pwq_dec_nr_in_flight+0x310/0x310 [ 23.962817][ C1] ? rwlock_bug.part.0+0x90/0x90 [ 23.962819][ C1] worker_thread+0x96/0xe10 [ 23.962821][ C1] ? process_one_work+0x1620/0x1620 [ 23.962822][ C1] kthread+0x352/0x460 [ 23.962824][ C1] ? kthread_create_on_node+0xf0/0xf0 [ 23.962826][ C1] ? kthread_create_on_node+0xf0/0xf0 [ 23.962828][ C1] ret_from_fork+0x1f/0x30 [ 23.963624][ C1] Kernel Offset: disabled