syzkaller syzkaller login: [ 27.673828][ T1294] can: request_module (can-proto-0) failed. [ 27.692058][ T1294] can: request_module (can-proto-2) failed. [ 27.709457][ T1294] can: request_module (can-proto-0) failed. [ 27.732835][ T1294] can: request_module (can-proto-7) failed. [ 27.755650][ T1294] can: request_module (can-proto-0) failed. [ 27.778489][ T1294] can: request_module (can-proto-1) failed. Warning: Permanently added '10.128.1.97' (ECDSA) to the list of known hosts. 2022/11/03 21:37:06 parsed 1 programs 2022/11/03 21:37:06 executed programs: 0 [ 54.891477][ T72] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 55.131483][ T72] usb 1-1: Using ep0 maxpacket: 8 [ 55.251556][ T72] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 55.261722][ T72] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 65280, setting to 1024 [ 55.273244][ T72] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 55.283264][ T72] usb 1-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=1f.31 [ 55.292349][ T72] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.308284][ T72] usb 1-1: config 0 descriptor?? [ 55.331951][ T1864] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 55.355578][ T72] smsusb:smsusb_probe: board id=2, interface number 0 [ 55.404218][ T72] smsusb:siano_media_device_register: media controller created [ 55.412901][ T72] smsmdtv:smscore_sendrequest_and_wait: sendrequest returned error -22 [ 55.421550][ T72] smsmdtv:smscore_set_device_mode: mode detect failed -22 [ 55.428667][ T72] smsmdtv:smscore_start_device: set device mode failed , rc -22 [ 55.436967][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 55.437290][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 55.437345][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 55.437395][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 55.437442][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 55.437477][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 55.437549][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 55.437576][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 55.437602][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 55.437629][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 55.510342][ T72] smsusb:smsusb_init_device: smscore_start_device(...) failed [ 55.518488][ T72] ------------[ cut here ]------------ [ 55.524003][ T72] ODEBUG: free active (active state 0) object type: work_struct hint: do_submit_urb+0x0/0x3e0 [ 55.534931][ T72] WARNING: CPU: 0 PID: 72 at lib/debugobjects.c:502 debug_print_object+0x16e/0x250 [ 55.544288][ T72] Modules linked in: [ 55.548181][ T72] CPU: 0 PID: 72 Comm: kworker/0:2 Not tainted 6.1.0-rc3-syzkaller-00026-ga8bc8cc193c6 #0 [ 55.558224][ T72] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 55.568470][ T72] Workqueue: usb_hub_wq hub_event [ 55.573557][ T72] RIP: 0010:debug_print_object+0x16e/0x250 [ 55.579486][ T72] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 af 00 00 00 48 8b 14 dd 60 f1 82 86 4c 89 ee 48 c7 c7 40 e5 82 86 e8 50 a1 b6 03 <0f> 0b 83 05 35 ca ea 06 01 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e c3 [ 55.599289][ T72] RSP: 0018:ffffc90001426d58 EFLAGS: 00010282 [ 55.605494][ T72] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 55.613727][ T72] RDX: ffff88810bf4b880 RSI: ffffffff812cfca8 RDI: fffff52000284d9d [ 55.621821][ T72] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 55.629815][ T72] R10: 0000000080000000 R11: 0000000000000000 R12: ffffffff8666e380 [ 55.637868][ T72] R13: ffffffff8682ea20 R14: ffffffff811b8690 R15: dffffc0000000000 [ 55.645878][ T72] FS: 0000000000000000(0000) GS:ffff8881f6600000(0000) knlGS:0000000000000000 [ 55.655056][ T72] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 55.661743][ T72] CR2: 00007ffdf5e0a968 CR3: 000000010faa2000 CR4: 00000000003506f0 [ 55.669729][ T72] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 55.678010][ T72] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 55.686033][ T72] Call Trace: [ 55.689378][ T72] [ 55.692439][ T72] ? lockdep_hardirqs_on+0x79/0x100 [ 55.697671][ T72] debug_check_no_obj_freed+0x301/0x420 [ 55.703273][ T72] ? smsusb_term_device+0x1b8/0x2e0 [ 55.708501][ T72] __kmem_cache_free+0xcf/0x400 [ 55.713700][ T72] ? __phys_addr+0xc4/0x140 [ 55.718328][ T72] smsusb_term_device+0x1b8/0x2e0 [ 55.723516][ T72] smsusb_init_device+0xa76/0xaf8 [ 55.728690][ T72] ? do_submit_urb.cold+0x24/0x24 [ 55.733774][ T72] ? smsusb_stop_streaming+0x170/0x170 [ 55.739277][ T72] ? rcu_read_lock_sched_held+0x3a/0x70 [ 55.744905][ T72] ? kfree+0x122/0x1a0 [ 55.749133][ T72] ? usb_clear_halt+0x9f/0x1b0 [ 55.753973][ T72] smsusb_probe+0xd2f/0xdcc [ 55.758504][ T72] ? smsusb_init_device+0xaf8/0xaf8 [ 55.763862][ T72] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 55.769691][ T72] ? lockdep_hardirqs_on+0x79/0x100 [ 55.774947][ T72] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 55.780767][ T72] ? __pm_runtime_set_status+0x4b8/0xc80 [ 55.786453][ T72] usb_probe_interface+0x30b/0x7f0 [ 55.791634][ T72] ? usb_match_dynamic_id+0x1a0/0x1a0 [ 55.797014][ T72] really_probe+0x249/0xb90 [ 55.801590][ T72] __driver_probe_device+0x1df/0x4d0 [ 55.806897][ T72] ? usb_match_id.part.0+0x15d/0x1b0 [ 55.812242][ T72] driver_probe_device+0x4c/0x1a0 [ 55.817281][ T72] __device_attach_driver+0x1d0/0x2e0 [ 55.822786][ T72] ? driver_allows_async_probing+0x170/0x170 [ 55.828874][ T72] bus_for_each_drv+0x15f/0x1e0 [ 55.834043][ T72] ? bus_for_each_dev+0x1d0/0x1d0 [ 55.839088][ T72] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 55.844939][ T72] ? lockdep_hardirqs_on+0x79/0x100 [ 55.850241][ T72] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 55.856092][ T72] __device_attach+0x1e4/0x530 [ 55.860877][ T72] ? device_driver_attach+0x210/0x210 [ 55.866330][ T72] ? kobject_uevent_env+0x2a7/0x1640 [ 55.871673][ T72] bus_probe_device+0x1e4/0x290 [ 55.876604][ T72] device_add+0xbd5/0x1e90 [ 55.881028][ T72] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 55.887341][ T72] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 55.893209][ T72] usb_set_configuration+0x1019/0x1900 [ 55.898877][ T72] usb_generic_driver_probe+0xba/0x100 [ 55.904404][ T72] usb_probe_device+0xd4/0x2c0 [ 55.909209][ T72] ? usb_driver_release_interface+0x180/0x180 [ 55.915621][ T72] really_probe+0x249/0xb90 [ 55.920150][ T72] __driver_probe_device+0x1df/0x4d0 [ 55.925491][ T72] driver_probe_device+0x4c/0x1a0 [ 55.930564][ T72] __device_attach_driver+0x1d0/0x2e0 [ 55.935983][ T72] ? driver_allows_async_probing+0x170/0x170 [ 55.942016][ T72] bus_for_each_drv+0x15f/0x1e0 [ 55.946876][ T72] ? bus_for_each_dev+0x1d0/0x1d0 [ 55.951986][ T72] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 55.957810][ T72] ? lockdep_hardirqs_on+0x79/0x100 [ 55.963115][ T72] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 55.968936][ T72] __device_attach+0x1e4/0x530 [ 55.973753][ T72] ? device_driver_attach+0x210/0x210 [ 55.979408][ T72] ? kobject_uevent_env+0x2a7/0x1640 [ 55.984766][ T72] bus_probe_device+0x1e4/0x290 [ 55.989651][ T72] device_add+0xbd5/0x1e90 [ 55.994206][ T72] ? usb_match_device+0xd4/0x550 [ 55.999188][ T72] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 56.005583][ T72] ? usb_detect_static_quirks+0x305/0x3b0 [ 56.011764][ T72] usb_new_device.cold+0x685/0x10ad [ 56.017062][ T72] ? hub_disconnect+0x510/0x510 [ 56.021961][ T72] ? rwlock_bug.part.0+0x90/0x90 [ 56.027017][ T72] ? _raw_spin_unlock_irq+0x1f/0x40 [ 56.032265][ T72] hub_event+0x26c7/0x45c0 [ 56.036707][ T72] ? hub_port_debounce+0x3b0/0x3b0 [ 56.041957][ T72] ? lock_release+0x810/0x810 [ 56.046656][ T72] ? lock_downgrade+0x6e0/0x6e0 [ 56.051660][ T72] ? do_raw_spin_lock+0x120/0x2a0 2022/11/03 21:37:16 executed programs: 1 [ 56.056808][ T72] process_one_work+0x9bf/0x1710 [ 56.061812][ T72] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 56.067390][ T72] ? rwlock_bug.part.0+0x90/0x90 [ 56.072546][ T72] ? _raw_spin_lock_irq+0x41/0x50 [ 56.077607][ T72] worker_thread+0x665/0x1080 [ 56.082442][ T72] ? __kthread_parkme+0x15f/0x220 [ 56.087512][ T72] ? process_one_work+0x1710/0x1710 [ 56.092816][ T72] kthread+0x2ea/0x3a0 [ 56.097020][ T72] ? kthread_complete_and_exit+0x40/0x40 [ 56.102731][ T72] ret_from_fork+0x1f/0x30 [ 56.107349][ T72] [ 56.110370][ T72] Kernel panic - not syncing: panic_on_warn set ... [ 56.116970][ T72] CPU: 0 PID: 72 Comm: kworker/0:2 Not tainted 6.1.0-rc3-syzkaller-00026-ga8bc8cc193c6 #0 [ 56.126861][ T72] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 56.136912][ T72] Workqueue: usb_hub_wq hub_event [ 56.141934][ T72] Call Trace: [ 56.145422][ T72] [ 56.148543][ T72] dump_stack_lvl+0xcd/0x134 [ 56.153223][ T72] panic+0x2c8/0x622 [ 56.157114][ T72] ? panic_print_sys_info.part.0+0x110/0x110 [ 56.163178][ T72] ? __warn.cold+0x24b/0x350 [ 56.167766][ T72] ? debug_print_object+0x16e/0x250 [ 56.172963][ T72] __warn.cold+0x25c/0x350 [ 56.177376][ T72] ? debug_print_object+0x16e/0x250 [ 56.182569][ T72] report_bug+0x1bc/0x210 [ 56.186899][ T72] handle_bug+0x3c/0x70 [ 56.191222][ T72] exc_invalid_op+0x14/0x40 [ 56.195979][ T72] asm_exc_invalid_op+0x16/0x20 [ 56.200851][ T72] RIP: 0010:debug_print_object+0x16e/0x250 [ 56.206832][ T72] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 af 00 00 00 48 8b 14 dd 60 f1 82 86 4c 89 ee 48 c7 c7 40 e5 82 86 e8 50 a1 b6 03 <0f> 0b 83 05 35 ca ea 06 01 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e c3 [ 56.226613][ T72] RSP: 0018:ffffc90001426d58 EFLAGS: 00010282 [ 56.233107][ T72] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 56.241160][ T72] RDX: ffff88810bf4b880 RSI: ffffffff812cfca8 RDI: fffff52000284d9d [ 56.249394][ T72] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 56.257628][ T72] R10: 0000000080000000 R11: 0000000000000000 R12: ffffffff8666e380 [ 56.265588][ T72] R13: ffffffff8682ea20 R14: ffffffff811b8690 R15: dffffc0000000000 [ 56.273825][ T72] ? __traceiter_workqueue_execute_end+0xa0/0xa0 [ 56.280174][ T72] ? vprintk+0x88/0x90 [ 56.284263][ T72] ? debug_print_object+0x16e/0x250 [ 56.289459][ T72] ? lockdep_hardirqs_on+0x79/0x100 [ 56.294808][ T72] debug_check_no_obj_freed+0x301/0x420 [ 56.300420][ T72] ? smsusb_term_device+0x1b8/0x2e0 [ 56.305834][ T72] __kmem_cache_free+0xcf/0x400 [ 56.310769][ T72] ? __phys_addr+0xc4/0x140 [ 56.315359][ T72] smsusb_term_device+0x1b8/0x2e0 [ 56.320419][ T72] smsusb_init_device+0xa76/0xaf8 [ 56.325912][ T72] ? do_submit_urb.cold+0x24/0x24 [ 56.331028][ T72] ? smsusb_stop_streaming+0x170/0x170 [ 56.336521][ T72] ? rcu_read_lock_sched_held+0x3a/0x70 [ 56.342412][ T72] ? kfree+0x122/0x1a0 [ 56.346476][ T72] ? usb_clear_halt+0x9f/0x1b0 [ 56.351334][ T72] smsusb_probe+0xd2f/0xdcc [ 56.355850][ T72] ? smsusb_init_device+0xaf8/0xaf8 [ 56.361144][ T72] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 56.366947][ T72] ? lockdep_hardirqs_on+0x79/0x100 [ 56.372139][ T72] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 56.377936][ T72] ? __pm_runtime_set_status+0x4b8/0xc80 [ 56.383569][ T72] usb_probe_interface+0x30b/0x7f0 [ 56.388807][ T72] ? usb_match_dynamic_id+0x1a0/0x1a0 [ 56.394279][ T72] really_probe+0x249/0xb90 [ 56.398789][ T72] __driver_probe_device+0x1df/0x4d0 [ 56.404079][ T72] ? usb_match_id.part.0+0x15d/0x1b0 [ 56.409459][ T72] driver_probe_device+0x4c/0x1a0 [ 56.414543][ T72] __device_attach_driver+0x1d0/0x2e0 [ 56.420044][ T72] ? driver_allows_async_probing+0x170/0x170 [ 56.426120][ T72] bus_for_each_drv+0x15f/0x1e0 [ 56.430976][ T72] ? bus_for_each_dev+0x1d0/0x1d0 [ 56.436321][ T72] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 56.442183][ T72] ? lockdep_hardirqs_on+0x79/0x100 [ 56.447431][ T72] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 56.453242][ T72] __device_attach+0x1e4/0x530 [ 56.458005][ T72] ? device_driver_attach+0x210/0x210 [ 56.463369][ T72] ? kobject_uevent_env+0x2a7/0x1640 [ 56.468651][ T72] bus_probe_device+0x1e4/0x290 [ 56.473505][ T72] device_add+0xbd5/0x1e90 [ 56.477921][ T72] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 56.484196][ T72] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 56.490196][ T72] usb_set_configuration+0x1019/0x1900 [ 56.495661][ T72] usb_generic_driver_probe+0xba/0x100 [ 56.501117][ T72] usb_probe_device+0xd4/0x2c0 [ 56.505882][ T72] ? usb_driver_release_interface+0x180/0x180 [ 56.511960][ T72] really_probe+0x249/0xb90 [ 56.516476][ T72] __driver_probe_device+0x1df/0x4d0 [ 56.521842][ T72] driver_probe_device+0x4c/0x1a0 [ 56.526872][ T72] __device_attach_driver+0x1d0/0x2e0 [ 56.532355][ T72] ? driver_allows_async_probing+0x170/0x170 [ 56.538418][ T72] bus_for_each_drv+0x15f/0x1e0 [ 56.543462][ T72] ? bus_for_each_dev+0x1d0/0x1d0 [ 56.548653][ T72] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 56.554976][ T72] ? lockdep_hardirqs_on+0x79/0x100 [ 56.560537][ T72] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 56.566986][ T72] __device_attach+0x1e4/0x530 [ 56.571776][ T72] ? device_driver_attach+0x210/0x210 [ 56.577237][ T72] ? kobject_uevent_env+0x2a7/0x1640 [ 56.582521][ T72] bus_probe_device+0x1e4/0x290 [ 56.587402][ T72] device_add+0xbd5/0x1e90 [ 56.591829][ T72] ? usb_match_device+0xd4/0x550 [ 56.596854][ T72] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 56.603096][ T72] ? usb_detect_static_quirks+0x305/0x3b0 [ 56.608814][ T72] usb_new_device.cold+0x685/0x10ad [ 56.614412][ T72] ? hub_disconnect+0x510/0x510 [ 56.619267][ T72] ? rwlock_bug.part.0+0x90/0x90 [ 56.624334][ T72] ? _raw_spin_unlock_irq+0x1f/0x40 [ 56.629535][ T72] hub_event+0x26c7/0x45c0 [ 56.634154][ T72] ? hub_port_debounce+0x3b0/0x3b0 [ 56.639270][ T72] ? lock_release+0x810/0x810 [ 56.643946][ T72] ? lock_downgrade+0x6e0/0x6e0 [ 56.648794][ T72] ? do_raw_spin_lock+0x120/0x2a0 [ 56.653825][ T72] process_one_work+0x9bf/0x1710 [ 56.658777][ T72] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 56.664155][ T72] ? rwlock_bug.part.0+0x90/0x90 [ 56.669098][ T72] ? _raw_spin_lock_irq+0x41/0x50 [ 56.674117][ T72] worker_thread+0x665/0x1080 [ 56.678804][ T72] ? __kthread_parkme+0x15f/0x220 [ 56.683828][ T72] ? process_one_work+0x1710/0x1710 [ 56.689019][ T72] kthread+0x2ea/0x3a0 [ 56.693082][ T72] ? kthread_complete_and_exit+0x40/0x40 [ 56.698717][ T72] ret_from_fork+0x1f/0x30 [ 56.703125][ T72] [ 56.706369][ T72] Kernel Offset: disabled [ 56.710748][ T72] Rebooting in 86400 seconds..