forked to background, child pid 3172 no interfaces have a carrier [ 21.018062][ T3173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 21.028906][ T3173] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.10.37' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 35.402140][ T142] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 35.762143][ T142] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 35.932974][ T142] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 35.942679][ T142] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.950687][ T142] usb 1-1: Product: syz [ 35.955129][ T142] usb 1-1: Manufacturer: syz [ 35.959724][ T142] usb 1-1: SerialNumber: syz [ 36.003776][ T142] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 36.602167][ T142] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 36.611689][ T142] ------------[ cut here ]------------ [ 36.617243][ T142] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 36.623648][ T142] WARNING: CPU: 0 PID: 142 at drivers/usb/core/urb.c:502 usb_submit_urb+0xed2/0x18a0 [ 36.633128][ T142] Modules linked in: [ 36.637104][ T142] CPU: 0 PID: 142 Comm: kworker/0:2 Not tainted 5.18.0-rc3-syzkaller-00218-g13bc32bad705 #0 [ 36.647440][ T142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 36.657690][ T142] Workqueue: events request_firmware_work_func [ 36.663905][ T142] RIP: 0010:usb_submit_urb+0xed2/0x18a0 [ 36.669549][ T142] Code: 7c 24 18 e8 10 c3 f7 fb 48 8b 7c 24 18 e8 16 c4 05 ff 41 89 d8 44 89 e1 4c 89 ea 48 89 c6 48 c7 c7 00 4e 6c 8a e8 0d b2 a3 03 <0f> 0b e9 58 f8 ff ff e8 e2 c2 f7 fb 48 81 c5 48 06 00 00 e9 84 f7 [ 36.689363][ T142] RSP: 0018:ffffc900027afb38 EFLAGS: 00010286 [ 36.695447][ T142] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 36.703542][ T142] RDX: ffff888019485880 RSI: ffffffff81600c48 RDI: fffff520004f5f59 [ 36.711514][ T142] RBP: ffff888076f52c50 R08: 0000000000000000 R09: 0000000000000001 [ 36.719498][ T142] R10: ffffffff815fb61e R11: 0000000000000000 R12: 0000000000000003 [ 36.727502][ T142] R13: ffff88801d7509d8 R14: 0000000000000003 R15: ffff888015e5bb00 [ 36.735497][ T142] FS: 0000000000000000(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 36.744518][ T142] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.751100][ T142] CR2: 00007f16b3c70edb CR3: 0000000077723000 CR4: 0000000000350ef0 [ 36.759106][ T142] Call Trace: [ 36.762435][ T142] [ 36.765373][ T142] ath9k_hif_usb_alloc_urbs+0x7d8/0x1050 [ 36.771012][ T142] ath9k_hif_usb_firmware_cb+0x148/0x530 [ 36.776674][ T142] ? ath9k_hif_usb_alloc_urbs+0x1050/0x1050 [ 36.782663][ T142] request_firmware_work_func+0x12c/0x230 [ 36.788375][ T142] ? request_partial_firmware_into_buf+0xa0/0xa0 [ 36.794740][ T142] process_one_work+0x996/0x1610 [ 36.799692][ T142] ? pwq_dec_nr_in_