dhcpcd-9.4.0 starting dev: loaded udev DUID 00:04:ad:e7:79:3b:b7:f5:62:73:6c:f2:e2:29:12:8f:ec:36 forked to background, child pid 1221 Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.49' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 26.573059][ T1146] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 26.983359][ T1146] usb 1-1: unable to get BOS descriptor or descriptor too short [ 27.063114][ T1146] usb 1-1: config 0 has an invalid interface number: 39 but max is 2 [ 27.063132][ T1146] usb 1-1: config 0 has an invalid interface number: 182 but max is 2 [ 27.063144][ T1146] usb 1-1: config 0 has an invalid interface number: 182 but max is 2 [ 27.063156][ T1146] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 27.063169][ T1146] usb 1-1: config 0 has no interface number 0 [ 27.063179][ T1146] usb 1-1: config 0 has no interface number 1 [ 27.063202][ T1146] usb 1-1: config 0 interface 39 altsetting 9 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 27.063219][ T1146] usb 1-1: config 0 interface 39 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 27.063233][ T1146] usb 1-1: Duplicate descriptor for config 0 interface 182 altsetting 0, skipping [ 27.063246][ T1146] usb 1-1: config 0 interface 39 has no altsetting 0 [ 27.303109][ T1146] usb 1-1: string descriptor 0 read error: -22 [ 27.303165][ T1146] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=9c.90 [ 27.303180][ T1146] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.305733][ T1146] usb 1-1: config 0 descriptor?? [ 27.345989][ T1146] ------------[ cut here ]------------ [ 27.345997][ T1146] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 27.346189][ T1146] WARNING: CPU: 0 PID: 1146 at drivers/usb/core/urb.c:502 usb_submit_urb+0xed2/0x18a0 [ 27.367456][ T1146] Modules linked in: [ 27.371351][ T1146] CPU: 0 PID: 1146 Comm: kworker/0:2 Not tainted 5.19.0-rc1-syzkaller-00040-g235a6d80f021 #0 [ 27.381698][ T1146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 27.391808][ T1146] Workqueue: usb_hub_wq hub_event [ 27.396981][ T1146] RIP: 0010:usb_submit_urb+0xed2/0x18a0 [ 27.402561][ T1146] Code: 7c 24 18 e8 b0 42 8f fd 48 8b 7c 24 18 e8 46 41 18 ff 41 89 d8 44 89 e1 4c 89 ea 48 89 c6 48 c7 c7 80 17 a9 86 e8 06 f1 09 02 <0f> 0b e9 58 f8 ff ff e8 82 42 8f fd 48 81 c5 b8 05 00 00 e9 84 f7 [ 27.422271][ T1146] RSP: 0018:ffffc900042bee78 EFLAGS: 00010282 [ 27.428400][ T1146] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 27.436479][ T1146] RDX: ffff888111360000 RSI: ffffffff812c1fc8 RDI: fffff52000857dc1 [ 27.444537][ T1146] RBP: ffff88810f62c000 R08: 0000000000000005 R09: 0000000000000000 [ 27.452524][ T1146] R10: 0000000080000000 R11: 0000000000000001 R12: 0000000000000001 [ 27.460579][ T1146] R13: ffff88810fc77d48 R14: 0000000000000002 R15: ffff888110b95300 [ 27.468658][ T1146] FS: 0000000000000000(0000) GS:ffff8881f6800000(0000) knlGS:0000000000000000 [ 27.477763][ T1146] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 27.484452][ T1146] CR2: 000055a4c4137ad8 CR3: 0000000110891000 CR4: 00000000003506f0 [ 27.492456][ T1146] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 27.500513][ T1146] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 27.508597][ T1146] Call Trace: [ 27.511886][ T1146] [ 27.514883][ T1146] ? lockdep_init_map_type+0x1b2/0x7f0 [ 27.520372][ T1146] usb_start_wait_urb+0x101/0x4c0 [ 27.525488][ T1146] ? usb_api_blocking_completion+0xa0/0xa0 [ 27.531328][ T1146] ? trace_kmalloc+0x32/0xf0 [ 27.536057][ T1146] ? memset+0x20/0x40 [ 27.540054][ T1146] usb_bulk_msg+0x226/0x550 [ 27.544634][ T1146] amradio_send_cmd+0x2d6/0x8b0 [ 27.549520][ T1146] ? lockdep_init_map_type+0x21a/0x7f0 [ 27.555063][ T1146] ? vidioc_querycap+0x130/0x130 executing program [ 27.560129][ T1146] ? read_word_at_a_time+0xe/0x20 [ 27.565305][ T1146] ? strscpy+0xa1/0x2a0 [ 27.569686][ T1146] usb_amradio_probe+0x498/0x770 [ 27.574739][ T1146] usb_probe_interface+0x315/0x7f0 [ 27.579912][ T1146] ? usb_match_dynamic_id+0x1a0/0x1a0 [ 27.585399][ T1146] really_probe+0x23e/0xb90 [ 27.589942][ T1146] __driver_probe_device+0x338/0x4d0 [ 27.595365][ T1146] ? usb_match_id.part.0+0x15d/0x1b0 [ 27.600676][ T1146] driver_probe_device+0x4c/0x1a0 [ 27.605882][ T1146] __device_attach_driver+0x20b/0x2f0 [ 27.611294][ T1146] ? driver_allows_async_probing+0x170/0x170 [ 27.617361][ T1146] bus_for_each_drv+0x15f/0x1e0 [ 27.622273][ T1146] ? bus_for_each_dev+0x1d0/0x1d0 [ 27.627371][ T1146] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 27.633268][ T1146] ? lockdep_hardirqs_on+0x79/0x100 [ 27.638551][ T1146] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 27.644517][ T1146] __device_attach+0x1e4/0x530 [ 27.649309][ T1146] ? device_driver_attach+0x210/0x210 [ 27.654782][ T1146] ? kobject_uevent_env+0x2ac/0x1660 [ 27.660095][ T1146] bus_probe_device+0x1e4/0x290 [ 27.665050][ T1146] device_add+0xbda/0x1ea0 [ 27.669481][ T1146] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 27.675808][ T1146] ? wakeup_sysfs_add+0x4e/0x60 [ 27.680683][ T1146] usb_set_configuration+0x101e/0x1900 [ 27.686252][ T1146] usb_generic_driver_probe+0xba/0x100 [ 27.691729][ T1146] usb_probe_device+0xd9/0x2c0 [ 27.696598][ T1146] ? usb_driver_release_interface+0x180/0x180 [ 27.702706][ T1146] really_probe+0x23e/0xb90 [ 27.707317][ T1146] __driver_probe_device+0x338/0x4d0 [ 27.712626][ T1146] driver_probe_device+0x4c/0x1a0 [ 27.717762][ T1146] __device_attach_driver+0x20b/0x2f0 [ 27.723213][ T1146] ? driver_allows_async_probing+0x170/0x170 [ 27.729198][ T1146] bus_for_each_drv+0x15f/0x1e0 [ 27.734109][ T1146] ? bus_for_each_dev+0x1d0/0x1d0 [ 27.739167][ T1146] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 27.745049][ T1146] ? lockdep_hardirqs_on+0x79/0x100 [ 27.750260][ T1146] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 27.756169][ T1146] __device_attach+0x1e4/0x530 [ 27.760946][ T1146] ? device_driver_attach+0x210/0x210 [ 27.766396][ T1146] ? kobject_uevent_env+0x2ac/0x1660 [ 27.771709][ T1146] bus_probe_device+0x1e4/0x290 [ 27.776640][ T1146] device_add+0xbda/0x1ea0 [ 27.781087][ T1146] ? usb_match_device+0xd4/0x550 [ 27.786110][ T1146] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 27.792369][ T1146] ? usb_detect_static_quirks+0x305/0x3b0 [ 27.798248][ T1146] usb_new_device.cold+0x641/0x1091 [ 27.803584][ T1146] ? hub_disconnect+0x510/0x510 [ 27.808440][ T1146] ? rwlock_bug.part.0+0x90/0x90 [ 27.813554][ T1146] ? _raw_spin_unlock_irq+0x1f/0x40 [ 27.818778][ T1146] ? _raw_spin_unlock_irq+0x1f/0x40 [ 27.824053][ T1146] hub_event+0x25d5/0x4690 [ 27.828489][ T1146] ? hub_port_debounce+0x3c0/0x3c0 [ 27.833684][ T1146] ? lock_release+0x780/0x780 [ 27.838730][ T1146] ? lock_downgrade+0x6e0/0x6e0 [ 27.843830][ T1146] ? do_raw_spin_lock+0x120/0x2a0 [ 27.848961][ T1146] process_one_work+0x996/0x1610 [ 27.854008][ T1146] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 27.859450][ T1146] ? rwlock_bug.part.0+0x90/0x90 [ 27.864488][ T1146] ? _raw_spin_lock_irq+0x41/0x50 [ 27.869536][ T1146] worker_thread+0x665/0x1080 [ 27.874286][ T1146] ? __kthread_parkme+0x15f/0x220 [ 27.879326][ T1146] ? process_one_work+0x1610/0x1610 [ 27.884595][ T1146] kthread+0x2ef/0x3a0 [ 27.888676][ T1146] ? kthread_complete_and_exit+0x40/0x40 [ 27.894388][ T1146] ret_from_fork+0x1f/0x30 [ 27.898821][ T1146] [ 27.901843][ T1146] Kernel panic - not syncing: panic_on_warn set ... [ 27.908416][ T1146] CPU: 0 PID: 1146 Comm: kworker/0:2 Not tainted 5.19.0-rc1-syzkaller-00040-g235a6d80f021 #0 [ 27.918559][ T1146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 27.928609][ T1146] Workqueue: usb_hub_wq hub_event [ 27.933659][ T1146] Call Trace: [ 27.936942][ T1146] [ 27.939884][ T1146] dump_stack_lvl+0xcd/0x134 [ 27.944470][ T1146] panic+0x2d7/0x636 [ 27.948375][ T1146] ? panic_print_sys_info.part.0+0x10b/0x10b [ 27.954351][ T1146] ? __warn.cold+0x1d9/0x2cd [ 27.958948][ T1146] ? usb_submit_urb+0xed2/0x18a0 [ 27.963881][ T1146] __warn.cold+0x1ea/0x2cd [ 27.968289][ T1146] ? usb_submit_urb+0xed2/0x18a0 [ 27.973241][ T1146] report_bug+0x1bc/0x210 [ 27.977563][ T1146] handle_bug+0x3c/0x60 [ 27.981725][ T1146] exc_invalid_op+0x14/0x40 [ 27.986222][ T1146] asm_exc_invalid_op+0x1b/0x20 [ 27.991065][ T1146] RIP: 0010:usb_submit_urb+0xed2/0x18a0 [ 27.996617][ T1146] Code: 7c 24 18 e8 b0 42 8f fd 48 8b 7c 24 18 e8 46 41 18 ff 41 89 d8 44 89 e1 4c 89 ea 48 89 c6 48 c7 c7 80 17 a9 86 e8 06 f1 09 02 <0f> 0b e9 58 f8 ff ff e8 82 42 8f fd 48 81 c5 b8 05 00 00 e9 84 f7 [ 28.016572][ T1146] RSP: 0018:ffffc900042bee78 EFLAGS: 00010282 [ 28.022657][ T1146] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 28.030628][ T1146] RDX: ffff888111360000 RSI: ffffffff812c1fc8 RDI: fffff52000857dc1 [ 28.038610][ T1146] RBP: ffff88810f62c000 R08: 0000000000000005 R09: 0000000000000000 [ 28.046587][ T1146] R10: 0000000080000000 R11: 0000000000000001 R12: 0000000000000001 [ 28.054552][ T1146] R13: ffff88810fc77d48 R14: 0000000000000002 R15: ffff888110b95300 [ 28.062518][ T1146] ? vprintk+0x88/0x90 [ 28.066593][ T1146] ? usb_submit_urb+0xed2/0x18a0 [ 28.071536][ T1146] ? lockdep_init_map_type+0x1b2/0x7f0 [ 28.076991][ T1146] usb_start_wait_urb+0x101/0x4c0 [ 28.082017][ T1146] ? usb_api_blocking_completion+0xa0/0xa0 [ 28.087965][ T1146] ? trace_kmalloc+0x32/0xf0 [ 28.092640][ T1146] ? memset+0x20/0x40 [ 28.096614][ T1146] usb_bulk_msg+0x226/0x550 [ 28.101110][ T1146] amradio_send_cmd+0x2d6/0x8b0 [ 28.106061][ T1146] ? lockdep_init_map_type+0x21a/0x7f0 [ 28.111516][ T1146] ? vidioc_querycap+0x130/0x130 [ 28.116454][ T1146] ? read_word_at_a_time+0xe/0x20 [ 28.121472][ T1146] ? strscpy+0xa1/0x2a0 [ 28.125620][ T1146] usb_amradio_probe+0x498/0x770 [ 28.130552][ T1146] usb_probe_interface+0x315/0x7f0 [ 28.135671][ T1146] ? usb_match_dynamic_id+0x1a0/0x1a0 [ 28.141034][ T1146] really_probe+0x23e/0xb90 [ 28.145530][ T1146] __driver_probe_device+0x338/0x4d0 [ 28.150807][ T1146] ? usb_match_id.part.0+0x15d/0x1b0 [ 28.156095][ T1146] driver_probe_device+0x4c/0x1a0 [ 28.161126][ T1146] __device_attach_driver+0x20b/0x2f0 [ 28.166501][ T1146] ? driver_allows_async_probing+0x170/0x170 [ 28.172477][ T1146] bus_for_each_drv+0x15f/0x1e0 [ 28.177327][ T1146] ? bus_for_each_dev+0x1d0/0x1d0 [ 28.182341][ T1146] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 28.188149][ T1146] ? lockdep_hardirqs_on+0x79/0x100 [ 28.193340][ T1146] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 28.199151][ T1146] __device_attach+0x1e4/0x530 [ 28.203930][ T1146] ? device_driver_attach+0x210/0x210 [ 28.209294][ T1146] ? kobject_uevent_env+0x2ac/0x1660 [ 28.214574][ T1146] bus_probe_device+0x1e4/0x290 [ 28.219419][ T1146] device_add+0xbda/0x1ea0 [ 28.223918][ T1146] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 28.230158][ T1146] ? wakeup_sysfs_add+0x4e/0x60 [ 28.235003][ T1146] usb_set_configuration+0x101e/0x1900 [ 28.240479][ T1146] usb_generic_driver_probe+0xba/0x100 [ 28.245931][ T1146] usb_probe_device+0xd9/0x2c0 [ 28.250712][ T1146] ? usb_driver_release_interface+0x180/0x180 [ 28.256770][ T1146] really_probe+0x23e/0xb90 [ 28.261267][ T1146] __driver_probe_device+0x338/0x4d0 [ 28.266551][ T1146] driver_probe_device+0x4c/0x1a0 [ 28.271593][ T1146] __device_attach_driver+0x20b/0x2f0 [ 28.276957][ T1146] ? driver_allows_async_probing+0x170/0x170 [ 28.282935][ T1146] bus_for_each_drv+0x15f/0x1e0 [ 28.287801][ T1146] ? bus_for_each_dev+0x1d0/0x1d0 [ 28.292825][ T1146] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 28.298638][ T1146] ? lockdep_hardirqs_on+0x79/0x100 [ 28.303828][ T1146] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 28.309633][ T1146] __device_attach+0x1e4/0x530 [ 28.314411][ T1146] ? device_driver_attach+0x210/0x210 [ 28.319775][ T1146] ? kobject_uevent_env+0x2ac/0x1660 [ 28.325072][ T1146] bus_probe_device+0x1e4/0x290 [ 28.329935][ T1146] device_add+0xbda/0x1ea0 [ 28.334357][ T1146] ? usb_match_device+0xd4/0x550 [ 28.339283][ T1146] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 28.345513][ T1146] ? usb_detect_static_quirks+0x305/0x3b0 [ 28.351226][ T1146] usb_new_device.cold+0x641/0x1091 [ 28.356423][ T1146] ? hub_disconnect+0x510/0x510 [ 28.361278][ T1146] ? rwlock_bug.part.0+0x90/0x90 [ 28.366209][ T1146] ? _raw_spin_unlock_irq+0x1f/0x40 [ 28.371399][ T1146] ? _raw_spin_unlock_irq+0x1f/0x40 [ 28.376592][ T1146] hub_event+0x25d5/0x4690 [ 28.381002][ T1146] ? hub_port_debounce+0x3c0/0x3c0 [ 28.386108][ T1146] ? lock_release+0x780/0x780 [ 28.390777][ T1146] ? lock_downgrade+0x6e0/0x6e0 [ 28.395617][ T1146] ? do_raw_spin_lock+0x120/0x2a0 [ 28.400634][ T1146] process_one_work+0x996/0x1610 [ 28.405565][ T1146] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 28.410929][ T1146] ? rwlock_bug.part.0+0x90/0x90 [ 28.415873][ T1146] ? _raw_spin_lock_irq+0x41/0x50 [ 28.420902][ T1146] worker_thread+0x665/0x1080 [ 28.425595][ T1146] ? __kthread_parkme+0x15f/0x220 [ 28.430716][ T1146] ? process_one_work+0x1610/0x1610 [ 28.435918][ T1146] kthread+0x2ef/0x3a0 [ 28.440002][ T1146] ? kthread_complete_and_exit+0x40/0x40 [ 28.445650][ T1146] ret_from_fork+0x1f/0x30 [ 28.450074][ T1146] [ 28.453350][ T1146] Kernel Offset: disabled [ 28.457705][ T1146] Rebooting in 86400 seconds..