dhcpcd-9.4.0 starting dev: loaded udev DUID 00:04:74:29:7a:73:ca:44:53:1f:52:6b:2a:6d:f3:f7:e8:e5 forked to background, child pid 2385 Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.136' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 34.937609][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 35.177605][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 35.297691][ T24] usb 1-1: config 58 has an invalid interface number: 217 but max is 2 [ 35.306045][ T24] usb 1-1: config 58 has an invalid interface number: 192 but max is 2 [ 35.314332][ T24] usb 1-1: config 58 has an invalid interface number: 61 but max is 2 [ 35.322534][ T24] usb 1-1: config 58 contains an unexpected descriptor of type 0x2, skipping [ 35.331339][ T24] usb 1-1: config 58 has no interface number 0 [ 35.337543][ T24] usb 1-1: config 58 has no interface number 1 [ 35.343695][ T24] usb 1-1: config 58 has no interface number 2 [ 35.349922][ T24] usb 1-1: config 58 interface 217 altsetting 128 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 35.361158][ T24] usb 1-1: config 58 interface 217 altsetting 128 has an invalid endpoint descriptor of length 2, skipping [ 35.372560][ T24] usb 1-1: config 58 interface 217 altsetting 128 has an invalid endpoint with address 0x0, skipping [ 35.383437][ T24] usb 1-1: config 58 interface 217 altsetting 128 has an invalid endpoint descriptor of length 2, skipping [ 35.394861][ T24] usb 1-1: config 58 interface 217 altsetting 128 has 6 endpoint descriptors, different from the interface descriptor's value: 4 [ 35.408188][ T24] usb 1-1: config 58 interface 192 altsetting 8 has a duplicate endpoint with address 0x4, skipping [ 35.418989][ T24] usb 1-1: config 58 interface 192 altsetting 8 endpoint 0x7 has an invalid bInterval 206, changing to 11 [ 35.430301][ T24] usb 1-1: config 58 interface 192 altsetting 8 endpoint 0x9 has an invalid bInterval 71, changing to 10 [ 35.441531][ T24] usb 1-1: config 58 interface 192 altsetting 8 endpoint 0xF has invalid maxpacket 544, setting to 64 [ 35.452504][ T24] usb 1-1: config 58 interface 61 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 35.463235][ T24] usb 1-1: config 58 interface 61 altsetting 6 has a duplicate endpoint with address 0x4, skipping [ 35.474122][ T24] usb 1-1: config 58 interface 61 altsetting 6 has an invalid endpoint with address 0x0, skipping [ 35.484885][ T24] usb 1-1: config 58 interface 61 altsetting 6 has a duplicate endpoint with address 0x4, skipping [ 35.495595][ T24] usb 1-1: config 58 interface 61 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 35.506343][ T24] usb 1-1: config 58 interface 61 altsetting 6 has a duplicate endpoint with address 0xE, skipping [ 35.517070][ T24] usb 1-1: config 58 interface 61 altsetting 6 has an invalid endpoint with address 0x80, skipping [ 35.527789][ T24] usb 1-1: config 58 interface 61 altsetting 6 has an invalid endpoint with address 0x0, skipping [ 35.538444][ T24] usb 1-1: config 58 interface 61 altsetting 6 has a duplicate endpoint with address 0x7, skipping [ 35.549164][ T24] usb 1-1: config 58 interface 61 altsetting 6 has an invalid endpoint with address 0x80, skipping [ 35.559872][ T24] usb 1-1: config 58 interface 61 altsetting 6 endpoint 0x85 has invalid maxpacket 1023, setting to 64 [ 35.570925][ T24] usb 1-1: config 58 interface 217 has no altsetting 0 [ 35.577803][ T24] usb 1-1: config 58 interface 192 has no altsetting 0 [ 35.584656][ T24] usb 1-1: config 58 interface 61 has no altsetting 0 [ 35.757746][ T24] usb 1-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice=89.c9 [ 35.766799][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.774835][ T24] usb 1-1: Product: syz [ 35.779025][ T24] usb 1-1: Manufacturer: syz [ 35.783607][ T24] usb 1-1: SerialNumber: syz executing program [ 36.128954][ T24] usb 1-1: USB2VGA dongle found at address 2 [ 36.138067][ T24] usb 1-1: Allocated 8 output buffers [ 36.143524][ T24] ------------[ cut here ]------------ [ 36.149037][ T24] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 36.155113][ T24] WARNING: CPU: 1 PID: 24 at drivers/usb/core/urb.c:504 usb_submit_urb+0xed2/0x1880 [ 36.164546][ T24] Modules linked in: [ 36.168467][ T24] CPU: 1 PID: 24 Comm: kworker/1:1 Not tainted 6.2.0-rc5-syzkaller-00917-gc52c9acc415e #0 [ 36.178387][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 36.188473][ T24] Workqueue: usb_hub_wq hub_event [ 36.193592][ T24] RIP: 0010:usb_submit_urb+0xed2/0x1880 [ 36.199203][ T24] Code: 7c 24 18 e8 f0 76 8b fd 48 8b 7c 24 18 e8 66 2a 19 ff 41 89 d8 44 89 e1 4c 89 ea 48 89 c6 48 c7 c7 e0 f2 aa 86 e8 0c 3d 16 02 <0f> 0b e9 58 f8 ff ff e8 c2 76 8b fd 48 81 c5 b8 05 00 00 e9 84 f7 [ 36.218860][ T24] RSP: 0018:ffffc900001a6d18 EFLAGS: 00010282 [ 36.224941][ T24] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 36.232958][ T24] RDX: ffff8881008a9c00 RSI: ffffffff812d3ed8 RDI: fffff52000034d95 [ 36.240965][ T24] RBP: ffff888111acd000 R08: 0000000000000005 R09: 0000000000000000 [ 36.248973][ T24] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000003 [ 36.256952][ T24] R13: ffff888108d84730 R14: 0000000000000003 R15: ffff88810912dd00 [ 36.264964][ T24] FS: 0000000000000000(0000) GS:ffff8881f6900000(0000) knlGS:0000000000000000 [ 36.273939][ T24] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.280568][ T24] CR2: 00007fff34458c50 CR3: 000000010c103000 CR4: 00000000003506e0 [ 36.288599][ T24] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 36.296562][ T24] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 36.304588][ T24] Call Trace: [ 36.307910][ T24] [ 36.310833][ T24] sisusb_send_bulk_msg.constprop.0+0x904/0x1230 [ 36.317253][ T24] ? sisusb_recv_bulk_msg.constprop.0+0x850/0x850 [ 36.323712][ T24] ? __driver_probe_device+0x1df/0x4d0 [ 36.329213][ T24] ? driver_probe_device+0x4c/0x1a0 [ 36.334420][ T24] ? __device_attach_driver+0x1d0/0x2e0 [ 36.340015][ T24] ? bus_for_each_drv+0x15f/0x1e0 [ 36.345062][ T24] ? dev_printk_emit+0xba/0xf1 [ 36.349874][ T24] sisusb_init_gfxdevice+0x87b/0x4000 [ 36.355269][ T24] ? __dev_printk+0xcf/0xf5 [ 36.359806][ T24] ? sisusb_compat_ioctl+0x80/0x80 [ 36.364943][ T24] ? _dev_info+0xd7/0x109 [ 36.369316][ T24] ? _dev_notice+0x109/0x109 [ 36.373916][ T24] ? lockdep_init_map_type+0x21a/0x7f0 [ 36.379434][ T24] ? lockdep_init_map_type+0x21a/0x7f0 [ 36.384916][ T24] ? kobject_get+0xbc/0x150 [ 36.389460][ T24] sisusb_probe+0x9c9/0xbde [ 36.393978][ T24] usb_probe_interface+0x30b/0x7f0 [ 36.399141][ T24] ? usb_match_dynamic_id+0x1a0/0x1a0 [ 36.404534][ T24] really_probe+0x249/0xb90 [ 36.409073][ T24] __driver_probe_device+0x1df/0x4d0 [ 36.414372][ T24] ? usb_match_id.part.0+0x15d/0x1b0 [ 36.419736][ T24] driver_probe_device+0x4c/0x1a0 [ 36.424778][ T24] __device_attach_driver+0x1d0/0x2e0 [ 36.430217][ T24] ? driver_probe_device+0x1a0/0x1a0 [ 36.435540][ T24] bus_for_each_drv+0x15f/0x1e0 [ 36.440455][ T24] ? bus_for_each_dev+0x1d0/0x1d0 [ 36.445496][ T24] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 36.451366][ T24] ? lockdep_hardirqs_on+0x79/0x100 [ 36.456582][ T24] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 36.462440][ T24] __device_attach+0x1e4/0x530 [ 36.467231][ T24] ? device_driver_attach+0x210/0x210 [ 36.472726][ T24] ? kobject_uevent_env+0x2a4/0x1620 [ 36.478065][ T24] bus_probe_device+0x1e4/0x290 [ 36.482920][ T24] device_add+0xbd5/0x1e90 [ 36.487375][ T24] ? lockdep_hardirqs_on+0x79/0x100 [ 36.492650][ T24] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 36.498947][ T24] ? usb_cache_string+0x102/0x140 [ 36.503971][ T24] ? __kmem_cache_free+0x95/0x400 [ 36.509044][ T24] ? __phys_addr+0xc4/0x140 [ 36.513571][ T24] usb_set_configuration+0x1019/0x1900 [ 36.519088][ T24] usb_generic_driver_probe+0xba/0x100 [ 36.524563][ T24] usb_probe_device+0xd4/0x2c0 [ 36.529410][ T24] ? usb_driver_release_interface+0x180/0x180 [ 36.535491][ T24] really_probe+0x249/0xb90 [ 36.540039][ T24] __driver_probe_device+0x1df/0x4d0 [ 36.545346][ T24] driver_probe_device+0x4c/0x1a0 [ 36.550409][ T24] __device_attach_driver+0x1d0/0x2e0 [ 36.555794][ T24] ? driver_probe_device+0x1a0/0x1a0 [ 36.561119][ T24] bus_for_each_drv+0x15f/0x1e0 [ 36.565980][ T24] ? bus_for_each_dev+0x1d0/0x1d0 [ 36.571044][ T24] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 36.576866][ T24] ? lockdep_hardirqs_on+0x79/0x100 [ 36.582113][ T24] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 36.587965][ T24] __device_attach+0x1e4/0x530 [ 36.592724][ T24] ? device_driver_attach+0x210/0x210 [ 36.598130][ T24] ? kobject_uevent_env+0x2a4/0x1620 [ 36.603433][ T24] bus_probe_device+0x1e4/0x290 [ 36.608322][ T24] device_add+0xbd5/0x1e90 [ 36.612748][ T24] ? lockdep_hardirqs_on+0x79/0x100 [ 36.617985][ T24] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 36.624238][ T24] ? add_device_randomness+0xb4/0xe0 [ 36.629562][ T24] ? __phys_addr+0xc4/0x140 [ 36.634100][ T24] usb_new_device.cold+0x685/0x10ad [ 36.639361][ T24] ? hub_disconnect+0x510/0x510 [ 36.644235][ T24] ? rwlock_bug.part.0+0x90/0x90 [ 36.649232][ T24] ? _raw_spin_unlock_irq+0x1f/0x40 [ 36.654444][ T24] hub_event+0x2d58/0x4810 [ 36.658906][ T24] ? hub_port_debounce+0x3b0/0x3b0 [ 36.664038][ T24] ? lock_release+0x810/0x810 [ 36.668758][ T24] ? lock_downgrade+0x6e0/0x6e0 [ 36.673629][ T24] ? do_raw_spin_lock+0x120/0x2a0 [ 36.678687][ T24] process_one_work+0x9bf/0x1710 [ 36.683645][ T24] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 36.689061][ T24] ? rwlock_bug.part.0+0x90/0x90 [ 36.694005][ T24] ? _raw_spin_lock_irq+0x41/0x50 [ 36.699074][ T24] worker_thread+0x665/0x1080 [ 36.703783][ T24] ? __kthread_parkme+0x15f/0x220 [ 36.708860][ T24] ? process_one_work+0x1710/0x1710 [ 36.714078][ T24] kthread+0x2ea/0x3a0 [ 36.718184][ T24] ? kthread_complete_and_exit+0x40/0x40 [ 36.723841][ T24] ret_from_fork+0x1f/0x30 [ 36.728297][ T24] [ 36.731322][ T24] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 36.738586][ T24] CPU: 1 PID: 24 Comm: kworker/1:1 Not tainted 6.2.0-rc5-syzkaller-00917-gc52c9acc415e #0 [ 36.748461][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 36.758503][ T24] Workqueue: usb_hub_wq hub_event [ 36.763524][ T24] Call Trace: [ 36.766790][ T24] [ 36.769718][ T24] dump_stack_lvl+0xcd/0x134 [ 36.774316][ T24] panic+0x2c8/0x622 [ 36.778212][ T24] ? panic_print_sys_info.part.0+0x110/0x110 [ 36.784189][ T24] ? usb_submit_urb+0xed2/0x1880 [ 36.789145][ T24] check_panic_on_warn.cold+0x19/0x35 [ 36.794510][ T24] __warn+0xee/0x1a0 [ 36.798392][ T24] ? usb_submit_urb+0xed2/0x1880 [ 36.803320][ T24] report_bug+0x1bc/0x210 [ 36.807639][ T24] handle_bug+0x3c/0x70 [ 36.811786][ T24] exc_invalid_op+0x14/0x40 [ 36.816279][ T24] asm_exc_invalid_op+0x16/0x20 [ 36.821121][ T24] RIP: 0010:usb_submit_urb+0xed2/0x1880 [ 36.826657][ T24] Code: 7c 24 18 e8 f0 76 8b fd 48 8b 7c 24 18 e8 66 2a 19 ff 41 89 d8 44 89 e1 4c 89 ea 48 89 c6 48 c7 c7 e0 f2 aa 86 e8 0c 3d 16 02 <0f> 0b e9 58 f8 ff ff e8 c2 76 8b fd 48 81 c5 b8 05 00 00 e9 84 f7 [ 36.846272][ T24] RSP: 0018:ffffc900001a6d18 EFLAGS: 00010282 [ 36.852336][ T24] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 36.860293][ T24] RDX: ffff8881008a9c00 RSI: ffffffff812d3ed8 RDI: fffff52000034d95 [ 36.868252][ T24] RBP: ffff888111acd000 R08: 0000000000000005 R09: 0000000000000000 [ 36.876210][ T24] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000003 [ 36.884169][ T24] R13: ffff888108d84730 R14: 0000000000000003 R15: ffff88810912dd00 [ 36.892150][ T24] ? vprintk+0x88/0x90 [ 36.896220][ T24] ? usb_submit_urb+0xed2/0x1880 [ 36.901164][ T24] sisusb_send_bulk_msg.constprop.0+0x904/0x1230 [ 36.907497][ T24] ? sisusb_recv_bulk_msg.constprop.0+0x850/0x850 [ 36.913915][ T24] ? __driver_probe_device+0x1df/0x4d0 [ 36.919370][ T24] ? driver_probe_device+0x4c/0x1a0 [ 36.924572][ T24] ? __device_attach_driver+0x1d0/0x2e0 [ 36.930131][ T24] ? bus_for_each_drv+0x15f/0x1e0 [ 36.935150][ T24] ? dev_printk_emit+0xba/0xf1 [ 36.939907][ T24] sisusb_init_gfxdevice+0x87b/0x4000 [ 36.945276][ T24] ? __dev_printk+0xcf/0xf5 [ 36.949768][ T24] ? sisusb_compat_ioctl+0x80/0x80 [ 36.954873][ T24] ? _dev_info+0xd7/0x109 [ 36.959196][ T24] ? _dev_notice+0x109/0x109 [ 36.963773][ T24] ? lockdep_init_map_type+0x21a/0x7f0 [ 36.969227][ T24] ? lockdep_init_map_type+0x21a/0x7f0 [ 36.974679][ T24] ? kobject_get+0xbc/0x150 [ 36.979181][ T24] sisusb_probe+0x9c9/0xbde [ 36.983676][ T24] usb_probe_interface+0x30b/0x7f0 [ 36.988799][ T24] ? usb_match_dynamic_id+0x1a0/0x1a0 [ 36.994172][ T24] really_probe+0x249/0xb90 [ 36.998733][ T24] __driver_probe_device+0x1df/0x4d0 [ 37.004014][ T24] ? usb_match_id.part.0+0x15d/0x1b0 [ 37.009298][ T24] driver_probe_device+0x4c/0x1a0 [ 37.014323][ T24] __device_attach_driver+0x1d0/0x2e0 [ 37.019692][ T24] ? driver_probe_device+0x1a0/0x1a0 [ 37.024973][ T24] bus_for_each_drv+0x15f/0x1e0 [ 37.029827][ T24] ? bus_for_each_dev+0x1d0/0x1d0 [ 37.034843][ T24] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 37.040647][ T24] ? lockdep_hardirqs_on+0x79/0x100 [ 37.045849][ T24] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 37.051655][ T24] __device_attach+0x1e4/0x530 [ 37.056411][ T24] ? device_driver_attach+0x210/0x210 [ 37.061789][ T24] ? kobject_uevent_env+0x2a4/0x1620 [ 37.067079][ T24] bus_probe_device+0x1e4/0x290 [ 37.071922][ T24] device_add+0xbd5/0x1e90 [ 37.076326][ T24] ? lockdep_hardirqs_on+0x79/0x100 [ 37.081524][ T24] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 37.087772][ T24] ? usb_cache_string+0x102/0x140 [ 37.092824][ T24] ? __kmem_cache_free+0x95/0x400 [ 37.097859][ T24] ? __phys_addr+0xc4/0x140 [ 37.102372][ T24] usb_set_configuration+0x1019/0x1900 [ 37.107845][ T24] usb_generic_driver_probe+0xba/0x100 [ 37.113310][ T24] usb_probe_device+0xd4/0x2c0 [ 37.118173][ T24] ? usb_driver_release_interface+0x180/0x180 [ 37.124232][ T24] really_probe+0x249/0xb90 [ 37.128744][ T24] __driver_probe_device+0x1df/0x4d0 [ 37.134037][ T24] driver_probe_device+0x4c/0x1a0 [ 37.139063][ T24] __device_attach_driver+0x1d0/0x2e0 [ 37.144427][ T24] ? driver_probe_device+0x1a0/0x1a0 [ 37.149713][ T24] bus_for_each_drv+0x15f/0x1e0 [ 37.154574][ T24] ? bus_for_each_dev+0x1d0/0x1d0 [ 37.159597][ T24] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 37.165420][ T24] ? lockdep_hardirqs_on+0x79/0x100 [ 37.170620][ T24] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 37.176432][ T24] __device_attach+0x1e4/0x530 [ 37.181203][ T24] ? device_driver_attach+0x210/0x210 [ 37.186581][ T24] ? kobject_uevent_env+0x2a4/0x1620 [ 37.191863][ T24] bus_probe_device+0x1e4/0x290 [ 37.196713][ T24] device_add+0xbd5/0x1e90 [ 37.201121][ T24] ? lockdep_hardirqs_on+0x79/0x100 [ 37.206312][ T24] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 37.212548][ T24] ? add_device_randomness+0xb4/0xe0 [ 37.217831][ T24] ? __phys_addr+0xc4/0x140 [ 37.222343][ T24] usb_new_device.cold+0x685/0x10ad [ 37.227540][ T24] ? hub_disconnect+0x510/0x510 [ 37.232384][ T24] ? rwlock_bug.part.0+0x90/0x90 [ 37.237308][ T24] ? _raw_spin_unlock_irq+0x1f/0x40 [ 37.242496][ T24] hub_event+0x2d58/0x4810 [ 37.246909][ T24] ? hub_port_debounce+0x3b0/0x3b0 [ 37.252024][ T24] ? lock_release+0x810/0x810 [ 37.256706][ T24] ? lock_downgrade+0x6e0/0x6e0 [ 37.261555][ T24] ? do_raw_spin_lock+0x120/0x2a0 [ 37.267695][ T24] process_one_work+0x9bf/0x1710 [ 37.272637][ T24] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 37.278007][ T24] ? rwlock_bug.part.0+0x90/0x90 [ 37.282946][ T24] ? _raw_spin_lock_irq+0x41/0x50 [ 37.287987][ T24] worker_thread+0x665/0x1080 [ 37.292662][ T24] ? __kthread_parkme+0x15f/0x220 [ 37.297681][ T24] ? process_one_work+0x1710/0x1710 [ 37.302877][ T24] kthread+0x2ea/0x3a0 [ 37.306943][ T24] ? kthread_complete_and_exit+0x40/0x40 [ 37.312566][ T24] ret_from_fork+0x1f/0x30 [ 37.316974][ T24] [ 37.320165][ T24] Kernel Offset: disabled [ 37.324545][ T24] Rebooting in 86400 seconds..