[ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.226' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 32.198923][ T2623] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 32.568760][ T2623] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 32.738736][ T2623] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 32.747887][ T2623] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.755955][ T2623] usb 1-1: Product: syz [ 32.760192][ T2623] usb 1-1: Manufacturer: syz [ 32.764782][ T2623] usb 1-1: SerialNumber: syz [ 32.820267][ T2623] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 33.478340][ T2623] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 33.487550][ T2623] ------------[ cut here ]------------ [ 33.493117][ T2623] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 33.499299][ T2623] WARNING: CPU: 1 PID: 2623 at drivers/usb/core/urb.c:493 usb_submit_urb+0xcde/0x14e0 [ 33.508891][ T2623] Modules linked in: [ 33.512816][ T2623] CPU: 1 PID: 2623 Comm: kworker/1:3 Not tainted 5.10.0-rc7-syzkaller #0 [ 33.521391][ T2623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 33.531510][ T2623] Workqueue: events request_firmware_work_func [ 33.537680][ T2623] RIP: 0010:usb_submit_urb+0xcde/0x14e0 [ 33.543279][ T2623] Code: 84 d4 02 00 00 e8 82 31 bd fd 4c 89 ef e8 ea 02 1b ff 41 89 d8 44 89 e1 4c 89 f2 48 89 c6 48 c7 c7 60 64 41 86 e8 ad 12 f3 01 <0f> 0b e9 ca f8 ff ff e8 56 31 bd fd 48 81 c5 40 06 00 00 e9 f6 f7 [ 33.562964][ T2623] RSP: 0018:ffffc90006af7b50 EFLAGS: 00010286 [ 33.569099][ T2623] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 33.577081][ T2623] RDX: ffff88810b9f6500 RSI: ffffffff8128f483 RDI: fffff52000d5ef5c [ 33.585127][ T2623] RBP: ffff888101a58850 R08: 0000000000000001 R09: ffff8881f6b2f5cf [ 33.593272][ T2623] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000003 [ 33.601422][ T2623] R13: ffff8881015610a0 R14: ffff888103461cd0 R15: ffff888106668d00 [ 33.610777][ T2623] FS: 0000000000000000(0000) GS:ffff8881f6b00000(0000) knlGS:0000000000000000 [ 33.619760][ T2623] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 executing program [ 33.626354][ T2623] CR2: 0000558fa14b5160 CR3: 00000001030a8000 CR4: 00000000001506e0 [ 33.634376][ T2623] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 33.642405][ T2623] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 33.650428][ T2623] Call Trace: [ 33.653730][ T2623] ? _raw_spin_unlock_irqrestore+0x34/0x40 [ 33.660032][ T2623] ? trace_hardirqs_on+0x5b/0x1a0 [ 33.665076][ T2623] ath9k_hif_usb_alloc_urbs+0x7b6/0x1010 [ 33.670748][ T2623] ath9k_hif_usb_firmware_cb+0x148/0x530 [ 33.676386][ T2623] ? ath9k_hif_usb_alloc_urbs+0x1010/0x1010 [ 33.682338][ T2623] request_firmware_work_func+0x12c/0x230 [ 33.688128][ T2623] ? request_partial_firmware_into_buf+0xa0/0xa0 [ 33.693193][ T2177] usb 1-1: USB disconnect, device number 2 [ 33.694475][ T2623] process_one_work+0x933/0x1520 [ 33.705247][ T2623] ? lock_release+0x6d0/0x6d0 [ 33.709998][ T2623] ? pwq_dec_nr_in_flight+0x320/0x320 [ 33.715382][ T2623] ? rwlock_bug.part.0+0x90/0x90 [ 33.720411][ T2623] worker_thread+0x64c/0x1120 [ 33.725204][ T2623] ? __kthread_parkme+0x118/0x1d0 [ 33.730310][ T2623] ? process_one_work+0x1520/0x1520 [ 33.735677][ T2623] kthread+0x38c/0x460 [ 33.739822][ T2623] ? _raw_spin_unlock_irq+0x1f/0x30 [ 33.745129][ T2623] ? kthread_create_worker_on_cpu+0xf0/0xf0 [ 33.751105][ T2623] ret_from_fork+0x1f/0x30 [ 33.755549][ T2623] Kernel panic - not syncing: panic_on_warn set ... [ 33.762148][ T2623] CPU: 1 PID: 2623 Comm: kworker/1:3 Not tainted 5.10.0-rc7-syzkaller #0 [ 33.770533][ T2623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 33.780575][ T2623] Workqueue: events request_firmware_work_func [ 33.786712][ T2623] Call Trace: [ 33.790013][ T2623] dump_stack+0x107/0x163 [ 33.794347][ T2623] panic+0x306/0x73d [ 33.798222][ T2623] ? __warn_printk+0xf3/0xf3 [ 33.802911][ T2623] ? __warn.cold+0x1a/0x44 [ 33.807320][ T2623] ? __warn+0xf1/0x210 [ 33.811385][ T2623] ? usb_submit_urb+0xcde/0x14e0 [ 33.816300][ T2623] __warn.cold+0x35/0x44 [ 33.820547][ T2623] ? irq_work_queue+0x44/0x50 [ 33.825209][ T2623] ? usb_submit_urb+0xcde/0x14e0 [ 33.830128][ T2623] report_bug+0x1bd/0x210 [ 33.834439][ T2623] handle_bug+0x3c/0x60 [ 33.838593][ T2623] exc_invalid_op+0x14/0x40 [ 33.843338][ T2623] asm_exc_invalid_op+0x12/0x20 [ 33.848194][ T2623] RIP: 0010:usb_submit_urb+0xcde/0x14e0 [ 33.853719][ T2623] Code: 84 d4 02 00 00 e8 82 31 bd fd 4c 89 ef e8 ea 02 1b ff 41 89 d8 44 89 e1 4c 89 f2 48 89 c6 48 c7 c7 60 64 41 86 e8 ad 12 f3 01 <0f> 0b e9 ca f8 ff ff e8 56 31 bd fd 48 81 c5 40 06 00 00 e9 f6 f7 [ 33.873432][ T2623] RSP: 0018:ffffc90006af7b50 EFLAGS: 00010286 [ 33.879514][ T2623] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 33.887480][ T2623] RDX: ffff88810b9f6500 RSI: ffffffff8128f483 RDI: fffff52000d5ef5c [ 33.895437][ T2623] RBP: ffff888101a58850 R08: 0000000000000001 R09: ffff8881f6b2f5cf [ 33.903411][ T2623] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000003 [ 33.911385][ T2623] R13: ffff8881015610a0 R14: ffff888103461cd0 R15: ffff888106668d00 [ 33.919368][ T2623] ? vprintk_func+0x93/0x140 [ 33.923962][ T2623] ? _raw_spin_unlock_irqrestore+0x34/0x40 [ 33.929751][ T2623] ? trace_hardirqs_on+0x5b/0x1a0 [ 33.934782][ T2623] ath9k_hif_usb_alloc_urbs+0x7b6/0x1010 [ 33.940415][ T2623] ath9k_hif_usb_firmware_cb+0x148/0x530 [ 33.946047][ T2623] ? ath9k_hif_usb_alloc_urbs+0x1010/0x1010 [ 33.951933][ T2623] request_firmware_work_func+0x12c/0x230 [ 33.957637][ T2623] ? request_partial_firmware_into_buf+0xa0/0xa0 [ 33.963949][ T2623] process_one_work+0x933/0x1520 [ 33.968869][ T2623] ? lock_release+0x6d0/0x6d0 [ 33.973576][ T2623] ? pwq_dec_nr_in_flight+0x320/0x320 [ 33.978937][ T2623] ? rwlock_bug.part.0+0x90/0x90 [ 33.983873][ T2623] worker_thread+0x64c/0x1120 [ 33.988593][ T2623] ? __kthread_parkme+0x118/0x1d0 [ 33.993720][ T2623] ? process_one_work+0x1520/0x1520 [ 33.998921][ T2623] kthread+0x38c/0x460 [ 34.003007][ T2623] ? _raw_spin_unlock_irq+0x1f/0x30 [ 34.008213][ T2623] ? kthread_create_worker_on_cpu+0xf0/0xf0 [ 34.014116][ T2623] ret_from_fork+0x1f/0x30 [ 34.019180][ T2623] Kernel Offset: disabled [ 34.023582][ T2623] Rebooting in 86400 seconds..