dhcpcd-9.4.0 starting dev: loaded udev DUID 00:04:08:8d:7f:22:61:cc:c3:77:b4:57:97:dd:f7:b3:90:2d forked to background, child pid 1217 Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.49' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 33.777922][ T71] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 34.148001][ T71] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50183, setting to 1024 [ 34.159270][ T71] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 34.169311][ T71] usb 1-1: New USB device found, idVendor=05ac, idProduct=0253, bcdDevice= 0.40 [ 34.178363][ T71] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.189083][ T71] usb 1-1: config 0 descriptor?? [ 34.208503][ T1288] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 34.231266][ T71] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input5 [ 34.657908][ T1166] ------------[ cut here ]------------ [ 34.663476][ T1166] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 34.669736][ T1166] WARNING: CPU: 1 PID: 1166 at drivers/usb/core/urb.c:502 usb_submit_urb+0xed2/0x18a0 [ 34.679396][ T1166] Modules linked in: [ 34.683288][ T1166] CPU: 1 PID: 1166 Comm: acpid Not tainted 5.19.0-rc4-syzkaller-00140-gc76d09da77d6 #0 [ 34.692967][ T1166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 34.703063][ T1166] RIP: 0010:usb_submit_urb+0xed2/0x18a0 [ 34.708847][ T1166] Code: 7c 24 18 e8 a0 32 8f fd 48 8b 7c 24 18 e8 76 46 18 ff 41 89 d8 44 89 e1 4c 89 ea 48 89 c6 48 c7 c7 80 1c a9 86 e8 ee e0 09 02 <0f> 0b e9 58 f8 ff ff e8 72 32 8f fd 48 81 c5 b8 05 00 00 e9 84 f7 [ 34.728757][ T1166] RSP: 0018:ffffc90000567848 EFLAGS: 00010286 [ 34.734817][ T1166] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 34.742855][ T1166] RDX: ffff888112751c80 RSI: ffffffff812c0fe8 RDI: fffff520000acefb [ 34.750858][ T1166] RBP: ffff888117d88d80 R08: 0000000000000005 R09: 0000000000000000 [ 34.758863][ T1166] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000001 [ 34.766848][ T1166] R13: ffff888109939488 R14: 0000000000000002 R15: ffff8881103fe300 [ 34.774890][ T1166] FS: 00007f0dfe6fe740(0000) GS:ffff8881f6900000(0000) knlGS:0000000000000000 [ 34.783852][ T1166] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.790513][ T1166] CR2: 00007f030538e130 CR3: 000000010fb79000 CR4: 00000000003506e0 [ 34.798518][ T1166] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 34.806487][ T1166] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 34.814501][ T1166] Call Trace: [ 34.817825][ T1166] [ 34.820750][ T1166] bcm5974_start_traffic+0xbd/0x170 [ 34.825948][ T1166] bcm5974_open+0x9f/0x160 [ 34.830404][ T1166] input_open_device+0x1bb/0x320 [ 34.835375][ T1166] ? bcm5974_resume+0xc0/0xc0 [ 34.840118][ T1166] evdev_open+0x538/0x6a0 [ 34.844463][ T1166] ? evdev_event+0xc0/0xc0 [ 34.848941][ T1166] chrdev_open+0x266/0x770 [ 34.853374][ T1166] ? cdev_device_add+0x220/0x220 executing program [ 34.858361][ T1166] ? fsnotify_perm.part.0+0x221/0x610 [ 34.863766][ T1166] do_dentry_open+0x49c/0x10b0 [ 34.868613][ T1166] ? cdev_device_add+0x220/0x220 [ 34.870246][ T71] usb 1-1: USB disconnect, device number 2 [ 34.873560][ T1166] ? may_open+0x1f6/0x420 [ 34.883754][ T1166] path_openat+0x1c71/0x2910 [ 34.888429][ T1166] ? path_lookupat+0x860/0x860 [ 34.893221][ T1166] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 34.899291][ T1166] do_filp_open+0x1aa/0x400 [ 34.903829][ T1166] ? may_open_dev+0xf0/0xf0 [ 34.908408][ T1166] ? rwlock_bug.part.0+0x90/0x90 [ 34.913370][ T1166] ? _find_next_bit+0x1e3/0x260 [ 34.918268][ T1166] ? _raw_spin_unlock+0x24/0x40 [ 34.923159][ T1166] ? alloc_fd+0x2f0/0x670 [ 34.927492][ T1166] do_sys_openat2+0x16d/0x4c0 [ 34.932318][ T1166] ? build_open_flags+0x6f0/0x6f0 [ 34.937375][ T1166] ? __context_tracking_exit+0xb8/0xe0 [ 34.942890][ T1166] ? lock_downgrade+0x6e0/0x6e0 [ 34.947806][ T1166] __x64_sys_openat+0x13f/0x1f0 [ 34.952691][ T1166] ? __ia32_sys_open+0x1c0/0x1c0 [ 34.957661][ T1166] ? syscall_enter_from_user_mode+0x21/0x70 [ 34.963638][ T1166] ? syscall_enter_from_user_mode+0x21/0x70 [ 34.969586][ T1166] do_syscall_64+0x35/0xb0 [ 34.974032][ T1166] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 34.979975][ T1166] RIP: 0033:0x7f0dfe7e6697 [ 34.984406][ T1166] Code: 25 00 00 41 00 3d 00 00 41 00 74 37 64 8b 04 25 18 00 00 00 85 c0 75 5b 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 85 00 00 00 48 83 c4 68 5d 41 5c c3 0f 1f [ 35.004077][ T1166] RSP: 002b:00007ffd7ff36600 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 35.012541][ T1166] RAX: ffffffffffffffda RBX: 00007ffd7ff368e8 RCX: 00007f0dfe7e6697 [ 35.020568][ T1166] RDX: 0000000000080800 RSI: 00007ffd7ff367e8 RDI: 00000000ffffff9c [ 35.029883][ T1166] RBP: 00007ffd7ff367e8 R08: 00007ffd7ff368fc R09: 00007ffd7ff367e8 [ 35.037895][ T1166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000080800 [ 35.045876][ T1166] R13: 00007ffd7ff368e8 R14: 0000000000000020 R15: 0000000000000000 [ 35.053910][ T1166] [ 35.056938][ T1166] Kernel panic - not syncing: panic_on_warn set ... [ 35.063521][ T1166] CPU: 1 PID: 1166 Comm: acpid Not tainted 5.19.0-rc4-syzkaller-00140-gc76d09da77d6 #0 [ 35.073485][ T1166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 35.083531][ T1166] Call Trace: [ 35.086812][ T1166] [ 35.089764][ T1166] dump_stack_lvl+0xcd/0x134 [ 35.094351][ T1166] panic+0x2d7/0x636 [ 35.098237][ T1166] ? panic_print_sys_info.part.0+0x10b/0x10b [ 35.104207][ T1166] ? __warn.cold+0x1d1/0x2c5 [ 35.108788][ T1166] ? usb_submit_urb+0xed2/0x18a0 [ 35.113754][ T1166] __warn.cold+0x1e2/0x2c5 [ 35.118160][ T1166] ? usb_submit_urb+0xed2/0x18a0 [ 35.123087][ T1166] report_bug+0x1bc/0x210 [ 35.127406][ T1166] handle_bug+0x3c/0x60 [ 35.131552][ T1166] exc_invalid_op+0x14/0x40 [ 35.136655][ T1166] asm_exc_invalid_op+0x1b/0x20 [ 35.141494][ T1166] RIP: 0010:usb_submit_urb+0xed2/0x18a0 [ 35.147028][ T1166] Code: 7c 24 18 e8 a0 32 8f fd 48 8b 7c 24 18 e8 76 46 18 ff 41 89 d8 44 89 e1 4c 89 ea 48 89 c6 48 c7 c7 80 1c a9 86 e8 ee e0 09 02 <0f> 0b e9 58 f8 ff ff e8 72 32 8f fd 48 81 c5 b8 05 00 00 e9 84 f7 [ 35.166630][ T1166] RSP: 0018:ffffc90000567848 EFLAGS: 00010286 [ 35.172687][ T1166] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 35.180688][ T1166] RDX: ffff888112751c80 RSI: ffffffff812c0fe8 RDI: fffff520000acefb [ 35.188646][ T1166] RBP: ffff888117d88d80 R08: 0000000000000005 R09: 0000000000000000 [ 35.196606][ T1166] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000001 [ 35.204567][ T1166] R13: ffff888109939488 R14: 0000000000000002 R15: ffff8881103fe300 [ 35.212535][ T1166] ? vprintk+0x88/0x90 [ 35.216614][ T1166] ? usb_submit_urb+0xed2/0x18a0 [ 35.221552][ T1166] bcm5974_start_traffic+0xbd/0x170 [ 35.226742][ T1166] bcm5974_open+0x9f/0x160 [ 35.231146][ T1166] input_open_device+0x1bb/0x320 [ 35.236071][ T1166] ? bcm5974_resume+0xc0/0xc0 [ 35.240751][ T1166] evdev_open+0x538/0x6a0 [ 35.245084][ T1166] ? evdev_event+0xc0/0xc0 [ 35.249500][ T1166] chrdev_open+0x266/0x770 [ 35.253928][ T1166] ? cdev_device_add+0x220/0x220 [ 35.258860][ T1166] ? fsnotify_perm.part.0+0x221/0x610 [ 35.264225][ T1166] do_dentry_open+0x49c/0x10b0 [ 35.268993][ T1166] ? cdev_device_add+0x220/0x220 [ 35.273920][ T1166] ? may_open+0x1f6/0x420 [ 35.278240][ T1166] path_openat+0x1c71/0x2910 [ 35.282834][ T1166] ? path_lookupat+0x860/0x860 [ 35.287603][ T1166] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 35.293574][ T1166] do_filp_open+0x1aa/0x400 [ 35.298079][ T1166] ? may_open_dev+0xf0/0xf0 [ 35.302640][ T1166] ? rwlock_bug.part.0+0x90/0x90 [ 35.307665][ T1166] ? _find_next_bit+0x1e3/0x260 [ 35.312514][ T1166] ? _raw_spin_unlock+0x24/0x40 [ 35.317357][ T1166] ? alloc_fd+0x2f0/0x670 [ 35.321679][ T1166] do_sys_openat2+0x16d/0x4c0 [ 35.326365][ T1166] ? build_open_flags+0x6f0/0x6f0 [ 35.331398][ T1166] ? __context_tracking_exit+0xb8/0xe0 [ 35.336846][ T1166] ? lock_downgrade+0x6e0/0x6e0 [ 35.341685][ T1166] __x64_sys_openat+0x13f/0x1f0 [ 35.346529][ T1166] ? __ia32_sys_open+0x1c0/0x1c0 [ 35.351457][ T1166] ? syscall_enter_from_user_mode+0x21/0x70 [ 35.357409][ T1166] ? syscall_enter_from_user_mode+0x21/0x70 [ 35.363291][ T1166] do_syscall_64+0x35/0xb0 [ 35.367710][ T1166] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 35.373862][ T1166] RIP: 0033:0x7f0dfe7e6697 [ 35.378286][ T1166] Code: 25 00 00 41 00 3d 00 00 41 00 74 37 64 8b 04 25 18 00 00 00 85 c0 75 5b 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 85 00 00 00 48 83 c4 68 5d 41 5c c3 0f 1f [ 35.397890][ T1166] RSP: 002b:00007ffd7ff36600 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 35.406291][ T1166] RAX: ffffffffffffffda RBX: 00007ffd7ff368e8 RCX: 00007f0dfe7e6697 [ 35.414250][ T1166] RDX: 0000000000080800 RSI: 00007ffd7ff367e8 RDI: 00000000ffffff9c [ 35.422228][ T1166] RBP: 00007ffd7ff367e8 R08: 00007ffd7ff368fc R09: 00007ffd7ff367e8 [ 35.430189][ T1166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000080800 [ 35.438147][ T1166] R13: 00007ffd7ff368e8 R14: 0000000000000020 R15: 0000000000000000 [ 35.446109][ T1166] [ 35.449352][ T1166] Kernel Offset: disabled [ 35.453730][ T1166] Rebooting in 86400 seconds..