[ OK ] Started OpenBSD Secure Shell server. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 syzkaller login: [ 29.433325][ T4358] bash (4358) used greatest stack depth: 22992 bytes left Warning: Permanently added '10.128.0.168' (ECDSA) to the list of known hosts. executing program [ 37.256839][ T17] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 37.616690][ T17] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.626613][ T17] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 37.636280][ T17] usb 1-1: New USB device found, idVendor=0bda, idProduct=317f, bcdDevice=9d.cc [ 37.645357][ T17] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.658410][ T17] usb 1-1: config 0 descriptor?? [ 37.906541][ T17] rtl8192cu: Chip version 0x0 executing program [ 38.546161][ T17] rtl_usb: reg 0xfe48, usbctrl_vendorreq TimeOut! status:0xffffffb9 value=0x0 [ 38.555141][ T17] rtl_usb: rx_max_size 15360, rx_urb_num 8, in_ep 1 [ 38.562214][ T17] [ 38.564557][ T17] ============================= [ 38.569442][ T17] WARNING: suspicious RCU usage [ 38.574310][ T17] 5.10.0-syzkaller #0 Not tainted [ 38.579406][ T17] ----------------------------- [ 38.584373][ T17] net/wireless/reg.c:144 suspicious rcu_dereference_check() usage! [ 38.592304][ T17] [ 38.592304][ T17] other info that might help us debug this: [ 38.592304][ T17] [ 38.602596][ T17] [ 38.602596][ T17] rcu_scheduler_active = 2, debug_locks = 1 [ 38.610712][ T17] 5 locks held by kworker/1:0/17: [ 38.615758][ T17] #0: ffff88810400dd38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x871/0x15c0 [ 38.626513][ T17] #1: ffffc9000012fda8 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x8a5/0x15c0 [ 38.637837][ T17] #2: ffff8881090fd218 (&dev->mutex){....}-{3:3}, at: hub_event+0x1c5/0x42d0 [ 38.646778][ T17] #3: ffff88810138c218 (&dev->mutex){....}-{3:3}, at: __device_attach+0x7a/0x4c0 [ 38.656097][ T17] #4: ffff88810138e1a8 (&dev->mutex){....}-{3:3}, at: __device_attach+0x7a/0x4c0 [ 38.665355][ T17] [ 38.665355][ T17] stack backtrace: [ 38.671295][ T17] CPU: 1 PID: 17 Comm: kworker/1:0 Not tainted 5.10.0-syzkaller #0 [ 38.679216][ T17] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 38.689271][ T17] Workqueue: usb_hub_wq hub_event [ 38.694332][ T17] Call Trace: [ 38.697621][ T17] dump_stack+0x107/0x163 [ 38.701970][ T17] get_wiphy_regdom+0xe0/0xf0 [ 38.706665][ T17] wiphy_apply_custom_regulatory+0x234/0x360 [ 38.712644][ T17] rtl_regd_init+0x36d/0x760 [ 38.717228][ T17] ? rtl_regd_init+0x760/0x760 [ 38.721980][ T17] rtl_init_core+0x878/0x1a50 [ 38.726651][ T17] ? rtl_free_entries_from_ack_queue+0x320/0x320 [ 38.732992][ T17] ? lockdep_init_map_waits+0x26a/0x700 [ 38.738526][ T17] rtl_usb_probe.cold+0x79a/0xada [ 38.743540][ T17] usb_probe_interface+0x315/0x7f0 [ 38.748640][ T17] ? usb_match_dynamic_id+0x1a0/0x1a0 [ 38.754003][ T17] really_probe+0x2b1/0xe40 [ 38.758690][ T17] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 38.765036][ T17] driver_probe_device+0x285/0x3f0 [ 38.770174][ T17] __device_attach_driver+0x216/0x2d0 [ 38.775554][ T17] ? driver_allows_async_probing+0x170/0x170 [ 38.781561][ T17] bus_for_each_drv+0x15f/0x1e0 [ 38.786434][ T17] ? bus_for_each_dev+0x1d0/0x1d0 [ 38.791462][ T17] ? lockdep_hardirqs_on_prepare+0x286/0x3f0 [ 38.797618][ T17] ? trace_hardirqs_on+0x5b/0x1a0 [ 38.802802][ T17] __device_attach+0x228/0x4c0 [ 38.807569][ T17] ? __driver_attach_async_helper+0x380/0x380 [ 38.813656][ T17] ? kobject_uevent_env+0x2bb/0x1680 [ 38.818934][ T17] bus_probe_device+0x1e4/0x290 [ 38.823777][ T17] device_add+0xbc4/0x1d90 [ 38.828184][ T17] ? wait_for_completion_io+0x270/0x270 [ 38.833746][ T17] ? __fw_devlink_link_to_suppliers+0x5e0/0x5e0 [ 38.839986][ T17] ? lockdep_hardirqs_on_prepare+0x286/0x3f0 [ 38.845968][ T17] ? _raw_spin_unlock_irqrestore+0x34/0x40 [ 38.851774][ T17] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 38.858008][ T17] usb_set_configuration+0x113c/0x1910 [ 38.863460][ T17] usb_generic_driver_probe+0xba/0x100 [ 38.868912][ T17] usb_probe_device+0xd9/0x2c0 [ 38.873682][ T17] ? usb_driver_release_interface+0x180/0x180 [ 38.879754][ T17] really_probe+0x2b1/0xe40 [ 38.884249][ T17] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 38.890479][ T17] driver_probe_device+0x285/0x3f0 [ 38.895581][ T17] __device_attach_driver+0x216/0x2d0 [ 38.900946][ T17] ? driver_allows_async_probing+0x170/0x170 [ 38.906917][ T17] bus_for_each_drv+0x15f/0x1e0 [ 38.912400][ T17] ? bus_for_each_dev+0x1d0/0x1d0 [ 38.917428][ T17] ? lockdep_hardirqs_on_prepare+0x286/0x3f0 [ 38.923413][ T17] ? trace_hardirqs_on+0x5b/0x1a0 [ 38.928475][ T17] __device_attach+0x228/0x4c0 [ 38.933239][ T17] ? __driver_attach_async_helper+0x380/0x380 [ 38.939326][ T17] ? kobject_uevent_env+0x2bb/0x1680 [ 38.944605][ T17] bus_probe_device+0x1e4/0x290 [ 38.949450][ T17] device_add+0xbc4/0x1d90 [ 38.953877][ T17] ? __fw_devlink_link_to_suppliers+0x5e0/0x5e0 [ 38.960110][ T17] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 38.967319][ T17] usb_new_device.cold+0x725/0x1057 [ 38.972515][ T17] ? hub_disconnect+0x510/0x510 [ 38.977361][ T17] ? rwlock_bug.part.0+0x90/0x90 [ 38.982313][ T17] ? lockdep_hardirqs_on_prepare+0x286/0x3f0 [ 38.988292][ T17] hub_event+0x2348/0x42d0 [ 38.992709][ T17] ? hub_port_debounce+0x3b0/0x3b0 [ 38.997807][ T17] ? __lock_acquire+0x5d1/0x54a0 [ 39.002754][ T17] ? worker_detach_from_pool+0x20/0x310 [ 39.008320][ T17] ? lock_release+0x6e0/0x6e0 [ 39.013005][ T17] ? lock_downgrade+0x6d0/0x6d0 [ 39.017858][ T17] ? do_raw_spin_lock+0x120/0x2b0 [ 39.022885][ T17] process_one_work+0x98d/0x15c0 [ 39.027815][ T17] ? pwq_dec_nr_in_flight+0x320/0x320 [ 39.033177][ T17] ? rwlock_bug.part.0+0x90/0x90 [ 39.038105][ T17] worker_thread+0x64c/0x1120 [ 39.042772][ T17] ? process_one_work+0x15c0/0x15c0 [ 39.047957][ T17] kthread+0x38c/0x460 [ 39.052015][ T17] ? _raw_spin_unlock_irq+0x1f/0x30 [ 39.057216][ T17] ? kthread_create_worker_on_cpu+0xf0/0xf0 [ 39.063098][ T17] ret_from_fork+0x1f/0x30 [ 39.068339][ T17] rtl8192cu: Loading firmware rtlwifi/rtl8192cufw_TMSC.bin [ 39.115381][ T17] usb 1-1: USB disconnect, device number 2 [ 39.161108][ T2133] usb 1-1: Direct firmware load for rtlwifi/rtl8192cufw_TMSC.bin failed with error -2 [ 39.188766][ T2133] usb 1-1: Direct firmware load for rtlwifi/rtl8192cufw.bin failed with error -2 [ 39.208636][ T2133] rtlwifi: Loading alternative firmware rtlwifi/rtl8192cufw.bin [ 39.216381][ T2133] rtlwifi: Selected firmware is not available [ 39.665574][ T17] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 40.025542][ T17] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.035478][ T17] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 40.045139][ T17] usb 1-1: New USB device found, idVendor=0bda, idProduct=317f, bcdDevice=9d.cc [ 40.054215][ T17] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.066552][ T17] usb 1-1: config 0 descriptor?? [ 40.325378][ T17] rtl8192cu: Chip version 0x0 executing program [ 40.935131][ T17] rtl_usb: reg 0xfe48, usbctrl_vendorreq TimeOut! status:0xffffffb9 value=0x0 [ 40.944070][ T17] rtl_usb: rx_max_size 15360, rx_urb_num 8, in_ep 1 [ 40.951129][ T17] rtl8192cu: Loading firmware rtlwifi/rtl8192cufw_TMSC.bin [ 40.990246][ T17] usb 1-1: USB disconnect, device number 3 [ 40.998111][ T2133] usb 1-1: Direct firmware load for rtlwifi/rtl8192cufw_TMSC.bin failed with error -2 [ 41.008227][ T2133] usb 1-1: Direct firmware load for rtlwifi/rtl8192cufw.bin failed with error -2 [ 41.017825][ T2133] rtlwifi: Loading alternative firmware rtlwifi/rtl8192cufw.bin [ 41.025540][ T2133] rtlwifi: Selected firmware is not available [ 41.494827][ T17] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 41.854812][ T17] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.864681][ T17] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 41.874670][ T17] usb 1-1: New USB device found, idVendor=0bda, idProduct=317f, bcdDevice=9d.cc [ 41.883742][ T17] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.893766][ T17] usb 1-1: config 0 descriptor?? [ 42.154641][ T17] rtl8192cu: Chip version 0x0 executing program [ 42.804445][ T17] rtl_usb: reg 0xfe48, usbctrl_vendorreq TimeOut! status:0xffffffb9 value=0x0 [ 42.813454][ T17] rtl_usb: rx_max_size 15360, rx_urb_num 8, in_ep 1 [ 42.821052][ T17] rtl8192cu: Loading firmware rtlwifi/rtl8192cufw_TMSC.bin [ 42.856194][ T17] usb 1-1: USB disconnect, device number 4 [ 42.863345][ T2133] usb 1-1: Direct firmware load for rtlwifi/rtl8192cufw_TMSC.bin failed with error -2 [ 42.894636][ T2133] usb 1-1: Direct firmware load for rtlwifi/rtl8192cufw.bin failed with error -2 [ 42.903816][ T2133] rtlwifi: Loading alternative firmware rtlwifi/rtl8192cufw.bin [ 42.911646][ T2133] rtlwifi: Selected firmware is not available [ 43.324152][ T17] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 43.704134][ T17] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.713905][ T17] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 43.723671][ T17] usb 1-1: New USB device found, idVendor=0bda, idProduct=317f, bcdDevice=9d.cc [ 43.732757][ T17] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.742131][ T17] usb 1-1: config 0 descriptor?? [ 44.013987][ T17] rtl8192cu: Chip version 0x0 executing program [ 44.663742][ T17] rtl_usb: reg 0xfe48, usbctrl_vendorreq TimeOut! status:0xffffffb9 value=0x0 [ 44.672633][ T17] rtl_usb: rx_max_size 15360, rx_urb_num 8, in_ep 1 [ 44.679617][ T17] rtl8192cu: Loading firmware rtlwifi/rtl8192cufw_TMSC.bin [ 44.697258][ T17] usb 1-1: USB disconnect, device number 5 [ 44.704764][ T4517] usb 1-1: Direct firmware load for rtlwifi/rtl8192cufw_TMSC.bin failed with error -2 [ 44.720645][ T4517] usb 1-1: Direct firmware load for rtlwifi/rtl8192cufw.bin failed with error -2 [ 44.740894][ T4517] rtlwifi: Loading alternative firmware rtlwifi/rtl8192cufw.bin [ 44.748617][ T4517] rtlwifi: Selected firmware is not available [ 45.193520][ T17] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 45.553555][ T17] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.563309][ T17] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 45.573067][ T17] usb 1-1: New USB device found, idVendor=0bda, idProduct=317f, bcdDevice=9d.cc [ 45.582164][ T17] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.591707][ T17] usb 1-1: config 0 descriptor?? [ 45.863428][ T17] rtl8192cu: Chip version 0x0 executing program [ 46.493243][ T17] rtl_usb: rx_max_size 15360, rx_urb_num 8, in_ep 1 [ 46.500080][ T17] rtl8192cu: Loading firmware rtlwifi/rtl8192cufw_TMSC.bin [ 46.536438][ T17] usb 1-1: USB disconnect, device number 6 [ 46.547473][ T4517] usb 1-1: Direct firmware load for rtlwifi/rtl8192cufw_TMSC.bin failed with error -2 [ 46.566854][ T4517] usb 1-1: Direct firmware load for rtlwifi/rtl8192cufw.bin failed with error -2 [ 46.581337][ T4517] rtlwifi: Loading alternative firmware rtlwifi/rtl8192cufw.bin [ 46.589127][ T4517] rtlwifi: Selected firmware is not available [ 47.053014][ T17] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 47.412985][ T17] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 47.422763][ T17] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 47.432501][ T17] usb 1-1: New USB device found, idVendor=0bda, idProduct=317f, bcdDevice=9d.cc [ 47.441614][ T17] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.451518][ T17] usb 1-1: config 0 descriptor?? [ 47.722880][ T17] rtl8192cu: Chip version 0x0 executing program [ 48.342711][ T17] rtl_usb: rx_max_size 15360, rx_urb_num 8, in_ep 1 [ 48.349710][ T17] rtl8192cu: Loading firmware rtlwifi/rtl8192cufw_TMSC.bin [ 48.384662][ T17] usb 1-1: USB disconnect, device number 7 [ 48.391736][ T4517] usb 1-1: Direct firmware load for rtlwifi/rtl8192cufw_TMSC.bin failed with error -2 [ 48.409394][ T4517] usb 1-1: Direct firmware load for rtlwifi/rtl8192cufw.bin failed with error -2 [ 48.418761][ T4517] rtlwifi: Loading alternative firmware rtlwifi/rtl8192cufw.bin [ 48.426510][ T4517] rtlwifi: Selected firmware is not available