[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. [ 12.768991][ C1] random: crng init done [ 12.773278][ C1] random: 7 urandom warning(s) missed due to ratelimiting Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.89' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 30.531884][ T17] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 30.901763][ T17] usb 1-1: config 0 has an invalid interface number: 169 but max is 1 [ 30.910118][ T17] usb 1-1: config 0 has an invalid interface number: 39 but max is 1 [ 30.918228][ T17] usb 1-1: config 0 has no interface number 0 [ 30.924351][ T17] usb 1-1: config 0 has no interface number 1 [ 30.930430][ T17] usb 1-1: config 0 interface 39 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 30.940216][ T17] usb 1-1: config 0 interface 39 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 30.951029][ T17] usb 1-1: config 0 interface 39 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 31.121683][ T17] usb 1-1: New USB device found, idVendor=0409, idProduct=0249, bcdDevice=f7.8e [ 31.130720][ T17] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.138748][ T17] usb 1-1: Product: syz [ 31.142966][ T17] usb 1-1: Manufacturer: syz [ 31.147535][ T17] usb 1-1: SerialNumber: syz [ 31.154363][ T17] usb 1-1: config 0 descriptor?? executing program [ 31.801309][ T17] usb 1-1: reset full-speed USB device number 2 using dummy_hcd [ 32.230298][ T83] usb 1-1: Direct firmware load for carl9170-1.fw failed with error -2 [ 32.238760][ T83] usb 1-1: firmware not found. executing program [ 32.441631][ T17] ------------[ cut here ]------------ [ 32.447390][ T17] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 32.453530][ T17] WARNING: CPU: 1 PID: 17 at drivers/usb/core/urb.c:478 usb_submit_urb+0x1188/0x1460 [ 32.462972][ T17] Kernel panic - not syncing: panic_on_warn set ... [ 32.469537][ T17] CPU: 1 PID: 17 Comm: kworker/1:0 Not tainted 5.7.0-rc1-syzkaller #0 [ 32.477657][ T17] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 32.487696][ T17] Workqueue: usb_hub_wq hub_event [ 32.492705][ T17] Call Trace: [ 32.495990][ T17] dump_stack+0xef/0x16e [ 32.500262][ T17] ? usb_submit_urb+0x10f0/0x1460 [ 32.505260][ T17] panic+0x2aa/0x6e1 [ 32.509132][ T17] ? add_taint.cold+0x16/0x16 [ 32.513785][ T17] ? __probe_kernel_read+0x188/0x1d0 [ 32.519042][ T17] ? __warn.cold+0x14/0x30 [ 32.523479][ T17] ? __warn+0xd5/0x1c8 [ 32.527556][ T17] ? usb_submit_urb+0x1188/0x1460 [ 32.532578][ T17] __warn.cold+0x2f/0x30 [ 32.536800][ T17] ? usb_submit_urb+0x1188/0x1460 [ 32.541797][ T17] report_bug+0x27b/0x2f0 [ 32.546119][ T17] do_error_trap+0x12b/0x1e0 [ 32.550684][ T17] ? usb_submit_urb+0x1188/0x1460 [ 32.555691][ T17] do_invalid_op+0x32/0x40 [ 32.560095][ T17] ? usb_submit_urb+0x1188/0x1460 [ 32.565094][ T17] invalid_op+0x23/0x30 [ 32.569242][ T17] RIP: 0010:usb_submit_urb+0x1188/0x1460 [ 32.575035][ T17] Code: 4d 85 ed 74 46 e8 38 c2 d2 fd 4c 89 f7 e8 70 ac 16 ff 41 89 d8 44 89 e1 4c 89 ea 48 89 c6 48 c7 c7 00 52 3d 86 e8 40 96 a6 fd <0f> 0b e9 20 f4 ff ff e8 0c c2 d2 fd 0f 1f 44 00 00 e8 02 c2 d2 fd [ 32.594629][ T17] RSP: 0018:ffff8881da25ef40 EFLAGS: 00010282 [ 32.600671][ T17] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 32.608618][ T17] RDX: 0000000000000000 RSI: ffffffff812a2d8d RDI: ffffed103b44bdda [ 32.616562][ T17] RBP: ffff8881d9846050 R08: ffff8881da243180 R09: ffffed103b666292 [ 32.624509][ T17] R10: ffff8881db33148f R11: ffffed103b666291 R12: 0000000000000001 [ 32.632459][ T17] R13: ffff8881d8c365e8 R14: ffff8881cd6940a0 R15: ffff8881cfb0a100 [ 32.640423][ T17] ? vprintk_func+0x7d/0x113 [ 32.644990][ T17] carl9170_usb_submit_cmd_urb+0xa5/0x120 [ 32.650681][ T17] __carl9170_exec_cmd+0x313/0x5c0 [ 32.655781][ T17] carl9170_reboot+0xaf/0xf0 [ 32.660358][ T17] carl9170_usb_disconnect+0xee/0x130 [ 32.665702][ T17] usb_unbind_interface+0x1bd/0x8a0 [ 32.670875][ T17] ? __pm_runtime_idle+0xd1/0x310 [ 32.675887][ T17] ? usb_autoresume_device+0x60/0x60 [ 32.681242][ T17] device_release_driver_internal+0x432/0x500 [ 32.687287][ T17] usb_driver_release_interface+0x102/0x180 [ 32.693153][ T17] usb_forced_unbind_intf+0x50/0xb0 [ 32.698337][ T17] usb_reset_device+0x39d/0x960 [ 32.703174][ T17] carl9170_usb_probe+0x48/0xd40 [ 32.708089][ T17] usb_probe_interface+0x310/0x800 [ 32.713178][ T17] ? usb_probe_device+0x230/0x230 [ 32.718176][ T17] really_probe+0x290/0xac0 [ 32.722655][ T17] driver_probe_device+0x223/0x350 [ 32.727738][ T17] __device_attach_driver+0x1d1/0x290 [ 32.733084][ T17] ? driver_allows_async_probing+0x160/0x160 [ 32.739035][ T17] bus_for_each_drv+0x162/0x1e0 [ 32.743861][ T17] ? bus_rescan_devices+0x20/0x20 [ 32.748860][ T17] ? _raw_spin_unlock_irqrestore+0x39/0x40 [ 32.754664][ T17] ? lockdep_hardirqs_on+0x3c7/0x5d0 [ 32.759921][ T17] __device_attach+0x21a/0x390 [ 32.764658][ T17] ? device_bind_driver+0xd0/0xd0 [ 32.769670][ T17] bus_probe_device+0x1e4/0x290 [ 32.774493][ T17] device_add+0x1367/0x1c20 [ 32.778987][ T17] ? wait_for_completion+0x280/0x280 [ 32.784243][ T17] ? device_link_remove+0x110/0x110 [ 32.789428][ T17] ? create_intf_ep_devs+0x1ba/0x230 [ 32.794685][ T17] usb_set_configuration+0xed4/0x1850 [ 32.800045][ T17] usb_generic_driver_probe+0x9d/0xe0 [ 32.805391][ T17] usb_probe_device+0xd9/0x230 [ 32.810149][ T17] ? usb_suspend+0x600/0x600 [ 32.814726][ T17] really_probe+0x290/0xac0 [ 32.819203][ T17] driver_probe_device+0x223/0x350 [ 32.824287][ T17] __device_attach_driver+0x1d1/0x290 [ 32.829633][ T17] ? driver_allows_async_probing+0x160/0x160 [ 32.835585][ T17] bus_for_each_drv+0x162/0x1e0 [ 32.840408][ T17] ? bus_rescan_devices+0x20/0x20 [ 32.845407][ T17] ? _raw_spin_unlock_irqrestore+0x39/0x40 [ 32.851183][ T17] ? lockdep_hardirqs_on+0x3c7/0x5d0 [ 32.856457][ T17] __device_attach+0x21a/0x390 [ 32.861223][ T17] ? device_bind_driver+0xd0/0xd0 [ 32.866221][ T17] bus_probe_device+0x1e4/0x290 [ 32.871059][ T17] device_add+0x1367/0x1c20 [ 32.875537][ T17] ? device_link_remove+0x110/0x110 [ 32.880725][ T17] usb_new_device.cold+0x552/0xf6e [ 32.885823][ T17] ? hub_disconnect+0x4a0/0x4a0 [ 32.890659][ T17] ? mark_held_locks+0x9f/0xe0 [ 32.895397][ T17] ? _raw_spin_unlock_irq+0x1f/0x30 [ 32.900573][ T17] hub_event+0x226d/0x43c0 [ 32.904966][ T17] ? hub_port_debounce+0x350/0x350 [ 32.910051][ T17] ? umh_clean_and_save_pid+0x1/0xd0 [ 32.915324][ T17] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 32.920841][ T17] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 32.926115][ T17] ? _raw_spin_unlock_irq+0x1f/0x30 [ 32.931284][ T17] process_one_work+0x965/0x1630 [ 32.936197][ T17] ? lock_release+0x720/0x720 [ 32.940851][ T17] ? pwq_dec_nr_in_flight+0x310/0x310 [ 32.946196][ T17] ? rwlock_bug.part.0+0x90/0x90 [ 32.951119][ T17] worker_thread+0x96/0xe20 [ 32.955599][ T17] ? process_one_work+0x1630/0x1630 [ 32.960770][ T17] kthread+0x326/0x430 [ 32.964814][ T17] ? kthread_create_on_node+0xf0/0xf0 [ 32.970161][ T17] ret_from_fork+0x24/0x30 [ 32.975184][ T17] Kernel Offset: disabled [ 32.979532][ T17] Rebooting in 86400 seconds..