dhcpcd-9.4.0 starting dev: loaded udev DUID 00:04:3f:d1:c1:ab:3d:72:92:56:f6:c9:5e:82:ef:97:6d:13 forked to background, child pid 2384 Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.156' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 36.751595][ T12] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 37.111693][ T12] usb 1-1: config 0 has an invalid interface number: 24 but max is 0 [ 37.119881][ T12] usb 1-1: config 0 has an invalid interface number: 82 but max is 0 [ 37.128013][ T12] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 37.137011][ T12] usb 1-1: config 0 has no interface number 0 [ 37.143111][ T12] usb 1-1: config 0 has no interface number 1 [ 37.149210][ T12] usb 1-1: config 0 interface 24 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 37.162203][ T12] usb 1-1: too many endpoints for config 0 interface 82 altsetting 47: 137, using maximum allowed: 30 [ 37.173310][ T12] usb 1-1: config 0 interface 82 altsetting 47 has a duplicate endpoint with address 0x1, skipping [ 37.184026][ T12] usb 1-1: config 0 interface 82 altsetting 47 has a duplicate endpoint with address 0x7, skipping [ 37.194761][ T12] usb 1-1: config 0 interface 82 altsetting 47 has a duplicate endpoint with address 0x3, skipping [ 37.205477][ T12] usb 1-1: config 0 interface 82 altsetting 47 endpoint 0x4 has invalid maxpacket 1576, setting to 64 [ 37.216450][ T12] usb 1-1: config 0 interface 82 altsetting 47 has an invalid endpoint with address 0x0, skipping [ 37.227080][ T12] usb 1-1: config 0 interface 82 altsetting 47 has an invalid endpoint with address 0x80, skipping [ 37.237794][ T12] usb 1-1: config 0 interface 82 altsetting 47 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 37.248772][ T12] usb 1-1: config 0 interface 82 altsetting 47 has 11 endpoint descriptors, different from the interface descriptor's value: 137 [ 37.262107][ T12] usb 1-1: config 0 interface 82 has no altsetting 0 [ 37.268797][ T12] usb 1-1: New USB device found, idVendor=0586, idProduct=3417, bcdDevice=e6.c2 [ 37.277864][ T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.291937][ T12] usb 1-1: config 0 descriptor?? executing program [ 37.481560][ T12] usb 1-1: reset full-speed USB device number 2 using dummy_hcd [ 37.951555][ T12] usb 1-1: device descriptor read/64, error -71 [ 38.666109][ T2458] usb 1-1: driver API: 1.9.9 2016-02-15 [1-1] [ 38.672564][ T2458] usb 1-1: firmware API: 1.9.6 2012-07-07 executing program [ 38.891642][ T12] usb 1-1: string descriptor 0 read error: -71 [ 38.899253][ T12] ------------[ cut here ]------------ [ 38.905081][ T12] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 38.911178][ T12] WARNING: CPU: 0 PID: 12 at drivers/usb/core/urb.c:504 usb_submit_urb+0xed6/0x1880 [ 38.920615][ T12] Modules linked in: [ 38.924557][ T12] CPU: 0 PID: 12 Comm: kworker/0:1 Not tainted 6.3.0-rc4-syzkaller-gd629c0e221cd #0 [ 38.933953][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 38.944048][ T12] Workqueue: usb_hub_wq hub_event [ 38.949080][ T12] RIP: 0010:usb_submit_urb+0xed6/0x1880 [ 38.954676][ T12] Code: 7c 24 18 e8 cc 00 74 fd 48 8b 7c 24 18 e8 f2 0d 0d ff 41 89 d8 44 89 e1 4c 89 ea 48 89 c6 48 c7 c7 e0 ab a8 86 e8 0a 3b 40 fd <0f> 0b e9 58 f8 ff ff e8 9e 00 74 fd 48 81 c5 b8 05 00 00 e9 84 f7 [ 38.974338][ T12] RSP: 0018:ffffc900000cee80 EFLAGS: 00010286 [ 38.980416][ T12] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 38.988423][ T12] RDX: ffff88810831d400 RSI: ffffffff81160c67 RDI: 0000000000000001 [ 38.996428][ T12] RBP: ffff888112052140 R08: 0000000000000001 R09: 0000000000000000 [ 39.004528][ T12] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 39.012550][ T12] R13: ffff88811306bc58 R14: 0000000000000002 R15: ffff88810fc9f100 [ 39.020522][ T12] FS: 0000000000000000(0000) GS:ffff8881f6800000(0000) knlGS:0000000000000000 [ 39.029526][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 39.036137][ T12] CR2: 00007fdfdffe44a0 CR3: 000000010eb09000 CR4: 00000000003506f0 [ 39.044142][ T12] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 39.052151][ T12] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 39.060125][ T12] Call Trace: [ 39.063436][ T12] [ 39.066379][ T12] carl9170_usb_submit_cmd_urb+0x7e/0x130 [ 39.072139][ T12] __carl9170_exec_cmd+0x30f/0x5c0 [ 39.077274][ T12] carl9170_reboot+0xaf/0xf0 [ 39.081902][ T12] carl9170_usb_disconnect+0xf2/0x130 [ 39.087301][ T12] usb_unbind_interface+0x1dc/0x8e0 [ 39.092561][ T12] ? usb_unbind_device+0x1a0/0x1a0 [ 39.097715][ T12] device_remove+0x11f/0x170 [ 39.102400][ T12] device_release_driver_internal+0x443/0x610 [ 39.108504][ T12] ? lockdep_hardirqs_on+0x7d/0x100 [ 39.113744][ T12] usb_forced_unbind_intf+0x13a/0x210 [ 39.119143][ T12] usb_reset_device+0x43b/0xac0 [ 39.124071][ T12] carl9170_usb_probe+0x4c/0xd40 [ 39.129037][ T12] usb_probe_interface+0x30f/0x960 [ 39.134206][ T12] ? usb_match_dynamic_id+0x1a0/0x1a0 [ 39.139602][ T12] really_probe+0x240/0xca0 [ 39.144161][ T12] __driver_probe_device+0x1df/0x4d0 [ 39.149487][ T12] ? usb_match_id.part.0+0x15d/0x1b0 [ 39.154808][ T12] driver_probe_device+0x4c/0x1a0 [ 39.159947][ T12] __device_attach_driver+0x1d4/0x2e0 [ 39.165373][ T12] bus_for_each_drv+0x149/0x1d0 [ 39.170254][ T12] ? driver_probe_device+0x1a0/0x1a0 [ 39.175604][ T12] ? bus_for_each_dev+0x1c0/0x1c0 [ 39.180658][ T12] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 39.186505][ T12] ? lockdep_hardirqs_on+0x7d/0x100 [ 39.191754][ T12] ? _raw_spin_unlock_irqrestore+0x41/0x70 [ 39.197576][ T12] __device_attach+0x1e4/0x4b0 [ 39.202388][ T12] ? device_driver_attach+0x210/0x210 [ 39.207812][ T12] ? do_raw_spin_unlock+0x175/0x230 [ 39.213064][ T12] bus_probe_device+0x17c/0x1c0 [ 39.217942][ T12] device_add+0x11c4/0x1c50 [ 39.222490][ T12] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 39.229367][ T12] ? usb_create_ep_devs+0x1f7/0x2a0 [ 39.234631][ T12] ? create_intf_ep_devs.isra.0+0x18d/0x1f0 [ 39.240570][ T12] usb_set_configuration+0x10ee/0x1af0 [ 39.246071][ T12] usb_generic_driver_probe+0xcf/0x130 [ 39.251571][ T12] usb_probe_device+0xd8/0x2c0 [ 39.256332][ T12] ? usb_driver_release_interface+0x190/0x190 [ 39.262481][ T12] really_probe+0x240/0xca0 [ 39.267015][ T12] __driver_probe_device+0x1df/0x4d0 [ 39.272346][ T12] driver_probe_device+0x4c/0x1a0 [ 39.277398][ T12] __device_attach_driver+0x1d4/0x2e0 [ 39.282863][ T12] bus_for_each_drv+0x149/0x1d0 [ 39.287737][ T12] ? driver_probe_device+0x1a0/0x1a0 [ 39.293077][ T12] ? bus_for_each_dev+0x1c0/0x1c0 [ 39.298129][ T12] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 39.303976][ T12] ? lockdep_hardirqs_on+0x7d/0x100 [ 39.309199][ T12] ? _raw_spin_unlock_irqrestore+0x41/0x70 [ 39.315067][ T12] __device_attach+0x1e4/0x4b0 [ 39.319868][ T12] ? device_driver_attach+0x210/0x210 [ 39.325384][ T12] ? do_raw_spin_unlock+0x175/0x230 [ 39.330616][ T12] bus_probe_device+0x17c/0x1c0 [ 39.335516][ T12] device_add+0x11c4/0x1c50 [ 39.340048][ T12] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 39.346946][ T12] ? usb_detect_static_quirks+0x305/0x3b0 [ 39.352704][ T12] ? mark_held_locks+0x9f/0xe0 [ 39.357466][ T12] usb_new_device+0xcb2/0x19d0 [ 39.362277][ T12] ? hub_disconnect+0x510/0x510 [ 39.367158][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 39.372393][ T12] hub_event+0x2e3d/0x4ed0 [ 39.376842][ T12] ? hub_port_debounce+0x3b0/0x3b0 [ 39.381996][ T12] ? lock_release+0x670/0x670 [ 39.386694][ T12] ? lock_downgrade+0x690/0x690 [ 39.391616][ T12] ? do_raw_spin_lock+0x124/0x2b0 [ 39.396661][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 39.401896][ T12] process_one_work+0x991/0x15c0 [ 39.406865][ T12] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 39.412278][ T12] ? spin_bug+0x1c0/0x1c0 [ 39.416624][ T12] ? _raw_spin_lock_irq+0x45/0x50 [ 39.421686][ T12] worker_thread+0x669/0x1090 [ 39.426392][ T12] ? __kthread_parkme+0x163/0x220 [ 39.431413][ T12] ? process_one_work+0x15c0/0x15c0 [ 39.436650][ T12] kthread+0x2ee/0x3a0 [ 39.440739][ T12] ? kthread_complete_and_exit+0x40/0x40 [ 39.446409][ T12] ret_from_fork+0x1f/0x30 [ 39.450846][ T12] [ 39.453892][ T12] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 39.461180][ T12] CPU: 0 PID: 12 Comm: kworker/0:1 Not tainted 6.3.0-rc4-syzkaller-gd629c0e221cd #0 [ 39.470550][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 39.480594][ T12] Workqueue: usb_hub_wq hub_event [ 39.485619][ T12] Call Trace: [ 39.488885][ T12] [ 39.491802][ T12] dump_stack_lvl+0xd9/0x150 [ 39.496408][ T12] panic+0x688/0x730 [ 39.500300][ T12] ? panic_smp_self_stop+0x90/0x90 [ 39.505400][ T12] ? show_trace_log_lvl+0x285/0x390 [ 39.510604][ T12] ? usb_submit_urb+0xed6/0x1880 [ 39.515532][ T12] check_panic_on_warn+0xb1/0xc0 [ 39.520476][ T12] __warn+0xf2/0x390 [ 39.524361][ T12] ? usb_submit_urb+0xed6/0x1880 [ 39.529289][ T12] report_bug+0x2da/0x500 [ 39.533619][ T12] handle_bug+0x3c/0x70 [ 39.537779][ T12] exc_invalid_op+0x18/0x50 [ 39.542285][ T12] asm_exc_invalid_op+0x1a/0x20 [ 39.547128][ T12] RIP: 0010:usb_submit_urb+0xed6/0x1880 [ 39.552663][ T12] Code: 7c 24 18 e8 cc 00 74 fd 48 8b 7c 24 18 e8 f2 0d 0d ff 41 89 d8 44 89 e1 4c 89 ea 48 89 c6 48 c7 c7 e0 ab a8 86 e8 0a 3b 40 fd <0f> 0b e9 58 f8 ff ff e8 9e 00 74 fd 48 81 c5 b8 05 00 00 e9 84 f7 [ 39.572261][ T12] RSP: 0018:ffffc900000cee80 EFLAGS: 00010286 [ 39.578316][ T12] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 39.586289][ T12] RDX: ffff88810831d400 RSI: ffffffff81160c67 RDI: 0000000000000001 [ 39.594271][ T12] RBP: ffff888112052140 R08: 0000000000000001 R09: 0000000000000000 [ 39.602237][ T12] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 39.610195][ T12] R13: ffff88811306bc58 R14: 0000000000000002 R15: ffff88810fc9f100 [ 39.618157][ T12] ? __warn_printk+0x187/0x310 [ 39.622916][ T12] carl9170_usb_submit_cmd_urb+0x7e/0x130 [ 39.628631][ T12] __carl9170_exec_cmd+0x30f/0x5c0 [ 39.633735][ T12] carl9170_reboot+0xaf/0xf0 [ 39.638319][ T12] carl9170_usb_disconnect+0xf2/0x130 [ 39.643694][ T12] usb_unbind_interface+0x1dc/0x8e0 [ 39.648901][ T12] ? usb_unbind_device+0x1a0/0x1a0 [ 39.654006][ T12] device_remove+0x11f/0x170 [ 39.658606][ T12] device_release_driver_internal+0x443/0x610 [ 39.664775][ T12] ? lockdep_hardirqs_on+0x7d/0x100 [ 39.669965][ T12] usb_forced_unbind_intf+0x13a/0x210 [ 39.675332][ T12] usb_reset_device+0x43b/0xac0 [ 39.680178][ T12] carl9170_usb_probe+0x4c/0xd40 [ 39.685110][ T12] usb_probe_interface+0x30f/0x960 [ 39.690216][ T12] ? usb_match_dynamic_id+0x1a0/0x1a0 [ 39.695581][ T12] really_probe+0x240/0xca0 [ 39.700079][ T12] __driver_probe_device+0x1df/0x4d0 [ 39.705362][ T12] ? usb_match_id.part.0+0x15d/0x1b0 [ 39.710639][ T12] driver_probe_device+0x4c/0x1a0 [ 39.715676][ T12] __device_attach_driver+0x1d4/0x2e0 [ 39.721042][ T12] bus_for_each_drv+0x149/0x1d0 [ 39.725886][ T12] ? driver_probe_device+0x1a0/0x1a0 [ 39.731179][ T12] ? bus_for_each_dev+0x1c0/0x1c0 [ 39.736215][ T12] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 39.742016][ T12] ? lockdep_hardirqs_on+0x7d/0x100 [ 39.747205][ T12] ? _raw_spin_unlock_irqrestore+0x41/0x70 [ 39.753099][ T12] __device_attach+0x1e4/0x4b0 [ 39.757903][ T12] ? device_driver_attach+0x210/0x210 [ 39.763272][ T12] ? do_raw_spin_unlock+0x175/0x230 [ 39.768472][ T12] bus_probe_device+0x17c/0x1c0 [ 39.773350][ T12] device_add+0x11c4/0x1c50 [ 39.777849][ T12] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 39.784692][ T12] ? usb_create_ep_devs+0x1f7/0x2a0 [ 39.789886][ T12] ? create_intf_ep_devs.isra.0+0x18d/0x1f0 [ 39.795770][ T12] usb_set_configuration+0x10ee/0x1af0 [ 39.801219][ T12] usb_generic_driver_probe+0xcf/0x130 [ 39.806689][ T12] usb_probe_device+0xd8/0x2c0 [ 39.811452][ T12] ? usb_driver_release_interface+0x190/0x190 [ 39.817540][ T12] really_probe+0x240/0xca0 [ 39.822042][ T12] __driver_probe_device+0x1df/0x4d0 [ 39.827324][ T12] driver_probe_device+0x4c/0x1a0 [ 39.832342][ T12] __device_attach_driver+0x1d4/0x2e0 [ 39.837716][ T12] bus_for_each_drv+0x149/0x1d0 [ 39.842563][ T12] ? driver_probe_device+0x1a0/0x1a0 [ 39.847845][ T12] ? bus_for_each_dev+0x1c0/0x1c0 [ 39.852862][ T12] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 39.858767][ T12] ? lockdep_hardirqs_on+0x7d/0x100 [ 39.863969][ T12] ? _raw_spin_unlock_irqrestore+0x41/0x70 [ 39.869765][ T12] __device_attach+0x1e4/0x4b0 [ 39.874529][ T12] ? device_driver_attach+0x210/0x210 [ 39.879898][ T12] ? do_raw_spin_unlock+0x175/0x230 [ 39.885087][ T12] bus_probe_device+0x17c/0x1c0 [ 39.889944][ T12] device_add+0x11c4/0x1c50 [ 39.894453][ T12] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 39.901296][ T12] ? usb_detect_static_quirks+0x305/0x3b0 [ 39.907003][ T12] ? mark_held_locks+0x9f/0xe0 [ 39.911759][ T12] usb_new_device+0xcb2/0x19d0 [ 39.916531][ T12] ? hub_disconnect+0x510/0x510 [ 39.921406][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 39.926594][ T12] hub_event+0x2e3d/0x4ed0 [ 39.931010][ T12] ? hub_port_debounce+0x3b0/0x3b0 [ 39.936122][ T12] ? lock_release+0x670/0x670 [ 39.940800][ T12] ? lock_downgrade+0x690/0x690 [ 39.945658][ T12] ? do_raw_spin_lock+0x124/0x2b0 [ 39.950680][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 39.955882][ T12] process_one_work+0x991/0x15c0 [ 39.960830][ T12] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 39.966209][ T12] ? spin_bug+0x1c0/0x1c0 [ 39.970547][ T12] ? _raw_spin_lock_irq+0x45/0x50 [ 39.975568][ T12] worker_thread+0x669/0x1090 [ 39.980250][ T12] ? __kthread_parkme+0x163/0x220 [ 39.985277][ T12] ? process_one_work+0x15c0/0x15c0 [ 39.990490][ T12] kthread+0x2ee/0x3a0 [ 39.994560][ T12] ? kthread_complete_and_exit+0x40/0x40 [ 40.000200][ T12] ret_from_fork+0x1f/0x30 [ 40.004619][ T12] [ 40.007811][ T12] Kernel Offset: disabled [ 40.012193][ T12] Rebooting in 86400 seconds..