[[0;32m OK [0m] Reached target Graphical Interface.
Starting Update UTMP about System Runlevel Changes...
[[0;32m OK [0m] Started Update UTMP about System Runlevel Changes.
[ 13.309116][ C1] random: crng init done
[ 13.309141][ C1] random: 7 urandom warning(s) missed due to ratelimiting
Debian GNU/Linux 9 syzkaller ttyS0
Warning: Permanently added '10.128.0.229' (ECDSA) to the list of known hosts.
executing program
syzkaller login: [ 23.181739][ T5] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 23.421472][ T5] usb 1-1: Using ep0 maxpacket: 8
[ 23.541530][ T5] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 23.563101][ T5] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 23.574363][ T5] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[ 23.586796][ T5] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 23.597112][ T5] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[ 23.761376][ T5] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40
[ 23.772365][ T5] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 23.784594][ T5] usb 1-1: Product: syz
[ 23.788926][ T5] usb 1-1: Manufacturer: syz
[ 23.793586][ T5] usb 1-1: SerialNumber: syz
[ 23.832914][ T5] cdc_ether: probe of 1-1:1.0 failed with error -22
[ 24.061129][ C0] ==================================================================
[ 24.069402][ C0] BUG: KASAN: slab-out-of-bounds in snd_usb_mixer_notify_id+0x219/0x2a0
[ 24.077740][ C0] Write of size 4 at addr ffff8881cc5ef060 by task swapper/0/0
[ 24.085792][ C0]
[ 24.088102][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.8.0-rc1-syzkaller #0
[ 24.095982][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 24.106050][ C0] Call Trace:
[ 24.109313][ C0]
[ 24.112192][ C0] dump_stack+0xf6/0x16e
[ 24.116419][ C0] ? snd_usb_mixer_notify_id+0x219/0x2a0
[ 24.122058][ C0] ? snd_usb_mixer_notify_id+0x219/0x2a0
[ 24.127789][ C0] print_address_description.constprop.0.cold+0xd3/0x415
[ 24.135618][ C0] ? vprintk_func+0x93/0x133
[ 24.143511][ C0] ? snd_usb_mixer_notify_id+0x219/0x2a0
[ 24.149259][ C0] kasan_report.cold+0x37/0x7c
[ 24.154090][ C0] ? __usb_hcd_giveback_urb+0x1d1/0x550
[ 24.159614][ C0] ? snd_usb_mixer_notify_id+0x219/0x2a0
[ 24.165228][ C0] snd_usb_mixer_notify_id+0x219/0x2a0
[ 24.170706][ C0] snd_usb_mixer_interrupt+0x440/0xbc0
[ 24.176290][ C0] ? trace_hardirqs_off+0x27/0x1f0
[ 24.181390][ C0] __usb_hcd_giveback_urb+0x29a/0x550
[ 24.186758][ C0] usb_hcd_giveback_urb+0x368/0x420
[ 24.191934][ C0] dummy_timer+0x125e/0x32b4
[ 24.196518][ C0] ? dummy_udc_probe+0x980/0x980
[ 24.201431][ C0] ? rcu_read_lock_sched_held+0x9c/0xd0
[ 24.207240][ C0] ? rcu_read_lock_bh_held+0xb0/0xb0
[ 24.212506][ C0] call_timer_fn+0x1ac/0x6e0
[ 24.217080][ C0] ? dummy_udc_probe+0x980/0x980
[ 24.222125][ C0] ? msleep_interruptible+0x130/0x130
[ 24.227525][ C0] ? lock_downgrade+0x720/0x720
[ 24.232378][ C0] ? _raw_spin_unlock_irq+0x1f/0x30
[ 24.238569][ C0] ? lockdep_hardirqs_on_prepare+0x1bc/0x550
[ 24.245053][ C0] ? dummy_udc_probe+0x980/0x980
[ 24.250089][ C0] run_timer_softirq+0x5e5/0x14c0
[ 24.255088][ C0] ? add_timer+0x7b0/0x7b0
[ 24.259483][ C0] ? rcu_read_lock_sched_held+0x9c/0xd0
[ 24.265023][ C0] ? rcu_read_lock_bh_held+0xb0/0xb0
[ 24.270283][ C0] ? lockdep_hardirqs_on_prepare+0x1bc/0x550
[ 24.276260][ C0] __do_softirq+0x21e/0x996
[ 24.280776][ C0] asm_call_on_stack+0xf/0x20
[ 24.285425][ C0]
[ 24.288340][ C0] do_softirq_own_stack+0x109/0x140
[ 24.293603][ C0] irq_exit_rcu+0x16f/0x1a0
[ 24.298089][ C0] sysvec_apic_timer_interrupt+0xd3/0x1b0
[ 24.303800][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 24.309756][ C0] RIP: 0010:acpi_safe_halt+0x72/0x90
[ 24.315018][ C0] Code: 74 06 5b e9 d0 05 a6 fb e8 cb 05 a6 fb e8 d6 69 ab fb e9 0c 00 00 00 e8 bc 05 a6 fb 0f 00 2d 75 58 6b 00 e8 b0 05 a6 fb fb f4 e8 c8 67 ab fb 5b e9 a2 05 a6 fb 48 89 df e8 8a b4 cf fb eb ab
[ 24.334960][ C0] RSP: 0018:ffffffff87007c58 EFLAGS: 00000293
[ 24.341059][ C0] RAX: ffffffff8702f840 RBX: 0000000000000000 RCX: 1ffffffff0fd4d32
[ 24.349170][ C0] RDX: 0000000000000000 RSI: ffffffff85996970 RDI: ffffffff87030078
[ 24.357177][ C0] RBP: ffff8881d8cba864 R08: 0000000000000000 R09: 0000000000000001
[ 24.365179][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8881d8cba864
[ 24.373257][ C0] R13: 1ffffffff0e00f95 R14: ffff8881d8cba865 R15: 0000000000000001
[ 24.381263][ C0] ? acpi_safe_halt+0x70/0x90
[ 24.385957][ C0] ? acpi_safe_halt+0x70/0x90
[ 24.390609][ C0] acpi_idle_do_entry+0xa9/0xe0
[ 24.395438][ C0] acpi_idle_enter+0x42b/0xac0
[ 24.400178][ C0] ? acpi_idle_enter_s2idle+0x190/0x190
[ 24.405728][ C0] ? kvm_sched_clock_read+0x14/0x30
[ 24.410901][ C0] ? sched_clock+0x5/0x10
[ 24.415224][ C0] ? sched_clock_cpu+0x18/0x170
[ 24.420070][ C0] cpuidle_enter_state+0xdb/0xc20
[ 24.425070][ C0] ? tick_nohz_idle_stop_tick+0x54f/0xb50
[ 24.430783][ C0] cpuidle_enter+0x4a/0xa0
[ 24.435190][ C0] do_idle+0x3c2/0x500
[ 24.439237][ C0] ? arch_cpu_idle_exit+0x40/0x40
[ 24.444236][ C0] ? schedule+0xe1/0x2b0
[ 24.448472][ C0] cpu_startup_entry+0x14/0x20
[ 24.453233][ C0] start_kernel+0x9fc/0xa39
[ 24.457712][ C0] ? mem_encrypt_init+0x5/0x5
[ 24.462405][ C0] ? x86_family+0x3d/0x50
[ 24.466708][ C0] ? load_ucode_bsp+0x23d/0x27d
[ 24.471546][ C0] secondary_startup_64+0xb6/0xc0
[ 24.476554][ C0]
[ 24.478861][ C0] Allocated by task 5:
[ 24.482910][ C0] save_stack+0x1b/0x40
[ 24.487146][ C0] __kasan_kmalloc.constprop.0+0xbf/0xd0
[ 24.492775][ C0] add_single_ctl_with_resume+0x53/0x1d0
[ 24.498404][ C0] snd_usb_mixer_apply_create_quirk+0x17be/0x2010
[ 24.504813][ C0] snd_usb_create_mixer+0x7de/0x1950
[ 24.510199][ C0] create_standard_mixer_quirk+0x57/0x70
[ 24.516433][ C0] snd_usb_create_quirk+0x9f/0xd0
[ 24.521450][ C0] create_composite_quirk+0x1d5/0x420
[ 24.526842][ C0] snd_usb_create_quirk+0x9f/0xd0
[ 24.531859][ C0] usb_audio_probe+0x619/0x2290
[ 24.536700][ C0] usb_probe_interface+0x310/0x800
[ 24.541787][ C0] really_probe+0x290/0xac0
[ 24.546265][ C0] driver_probe_device+0x26b/0x3d0
[ 24.551353][ C0] __device_attach_driver+0x1d1/0x290
[ 24.556699][ C0] bus_for_each_drv+0x162/0x1e0
[ 24.562131][ C0] __device_attach+0x21a/0x390
[ 24.566958][ C0] bus_probe_device+0x1e4/0x290
[ 24.571799][ C0] device_add+0xb2b/0x1940
[ 24.576193][ C0] usb_set_configuration+0xed4/0x1850
[ 24.581571][ C0] usb_generic_driver_probe+0x9d/0xe0
[ 24.586927][ C0] usb_probe_device+0xd9/0x230
[ 24.591671][ C0] really_probe+0x290/0xac0
[ 24.596150][ C0] driver_probe_device+0x26b/0x3d0
[ 24.605081][ C0] __device_attach_driver+0x1d1/0x290
[ 24.610429][ C0] bus_for_each_drv+0x162/0x1e0
[ 24.615254][ C0] __device_attach+0x21a/0x390
[ 24.620010][ C0] bus_probe_device+0x1e4/0x290
[ 24.624850][ C0] device_add+0xb2b/0x1940
[ 24.629246][ C0] usb_new_device.cold+0x5a2/0xfd9
[ 24.637130][ C0] hub_event+0x226d/0x43c0
[ 24.641648][ C0] process_one_work+0x965/0x1620
[ 24.646975][ C0] worker_thread+0x96/0xe10
[ 24.651468][ C0] kthread+0x352/0x460
[ 24.655516][ C0] ret_from_fork+0x1f/0x30
[ 24.659903][ C0]
[ 24.662208][ C0] Freed by task 5:
[ 24.665996][ C0] save_stack+0x1b/0x40
[ 24.670129][ C0] __kasan_slab_free+0x117/0x160
[ 24.675093][ C0] kfree+0xd5/0x300
[ 24.678892][ C0] __vunmap+0x715/0xa00
[ 24.683038][ C0] __vfree+0x3c/0xd0
[ 24.686925][ C0] vfree+0x5a/0x90
[ 24.690708][ C0] bpf_prog_free_deferred+0x323/0x440
[ 24.696063][ C0] process_one_work+0x965/0x1620
[ 24.701589][ C0] worker_thread+0x96/0xe10
[ 24.706171][ C0] kthread+0x352/0x460
[ 24.710228][ C0] ret_from_fork+0x1f/0x30
[ 24.714614][ C0]
[ 24.716921][ C0] The buggy address belongs to the object at ffff8881cc5ef000
[ 24.716921][ C0] which belongs to the cache kmalloc-64 of size 64
[ 24.730773][ C0] The buggy address is located 32 bytes to the right of
[ 24.730773][ C0] 64-byte region [ffff8881cc5ef000, ffff8881cc5ef040)
[ 24.744382][ C0] The buggy address belongs to the page:
[ 24.750008][ C0] page:ffffea0007317bc0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0
[ 24.761891][ C0] flags: 0x200000000000200(slab)
[ 24.766937][ C0] raw: 0200000000000200 ffffea00072b5b40 0000000300000003 ffff8881da003180
[ 24.775499][ C0] raw: 0000000000000000 0000000000200020 00000001ffffffff 0000000000000000
[ 24.784056][ C0] page dumped because: kasan: bad access detected
[ 24.790449][ C0]
[ 24.792751][ C0] Memory state around the buggy address:
[ 24.798359][ C0] ffff8881cc5eef00: 00 00 00 00 00 00 fc fc fc fc fb fb fb fb fb fb
[ 24.806397][ C0] ffff8881cc5eef80: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[ 24.814456][ C0] >ffff8881cc5ef000: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc
[ 24.822507][ C0] ^
[ 24.829693][ C0] ffff8881cc5ef080: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc
[ 24.837733][ C0] ffff8881cc5ef100: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[ 24.845856][ C0] ==================================================================
[ 24.853906][ C0] Disabling lock debugging due to kernel taint
[ 24.860052][ C0] Kernel panic - not syncing: panic_on_warn set ...
[ 24.866616][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.8.0-rc1-syzkaller #0
[ 24.875989][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 24.886131][ C0] Call Trace:
[ 24.889408][ C0]
[ 24.892255][ C0] dump_stack+0xf6/0x16e
[ 24.896485][ C0] ? snd_usb_mixer_notify_id+0x140/0x2a0
[ 24.902087][ C0] panic+0x2aa/0x6e1
[ 24.905972][ C0] ? __warn_printk+0xf3/0xf3
[ 24.910644][ C0] ? _raw_spin_unlock_irqrestore+0x2a/0x40
[ 24.916536][ C0] ? trace_hardirqs_off+0x27/0x1f0
[ 24.921641][ C0] ? snd_usb_mixer_notify_id+0x219/0x2a0
[ 24.927357][ C0] ? snd_usb_mixer_notify_id+0x219/0x2a0
[ 24.932978][ C0] end_report+0x4d/0x53
[ 24.937108][ C0] kasan_report.cold+0x72/0x7c
[ 24.941849][ C0] ? __usb_hcd_giveback_urb+0x1d1/0x550
[ 24.947390][ C0] ? snd_usb_mixer_notify_id+0x219/0x2a0
[ 24.952995][ C0] snd_usb_mixer_notify_id+0x219/0x2a0
[ 24.958445][ C0] snd_usb_mixer_interrupt+0x440/0xbc0
[ 24.963895][ C0] ? trace_hardirqs_off+0x27/0x1f0
[ 24.971510][ C0] __usb_hcd_giveback_urb+0x29a/0x550
[ 24.976955][ C0] usb_hcd_giveback_urb+0x368/0x420
[ 24.983649][ C0] dummy_timer+0x125e/0x32b4
[ 24.988235][ C0] ? dummy_udc_probe+0x980/0x980
[ 24.993201][ C0] ? rcu_read_lock_sched_held+0x9c/0xd0
[ 24.998840][ C0] ? rcu_read_lock_bh_held+0xb0/0xb0
[ 25.004620][ C0] call_timer_fn+0x1ac/0x6e0
[ 25.009202][ C0] ? dummy_udc_probe+0x980/0x980
[ 25.014822][ C0] ? msleep_interruptible+0x130/0x130
[ 25.020601][ C0] ? lock_downgrade+0x720/0x720
[ 25.025425][ C0] ? _raw_spin_unlock_irq+0x1f/0x30
[ 25.030598][ C0] ? lockdep_hardirqs_on_prepare+0x1bc/0x550
[ 25.037358][ C0] ? dummy_udc_probe+0x980/0x980
[ 25.042294][ C0] run_timer_softirq+0x5e5/0x14c0
[ 25.047309][ C0] ? add_timer+0x7b0/0x7b0
[ 25.052423][ C0] ? rcu_read_lock_sched_held+0x9c/0xd0
[ 25.057942][ C0] ? rcu_read_lock_bh_held+0xb0/0xb0
[ 25.063218][ C0] ? lockdep_hardirqs_on_prepare+0x1bc/0x550
[ 25.069171][ C0] __do_softirq+0x21e/0x996
[ 25.073649][ C0] asm_call_on_stack+0xf/0x20
[ 25.078318][ C0]
[ 25.081331][ C0] do_softirq_own_stack+0x109/0x140
[ 25.086505][ C0] irq_exit_rcu+0x16f/0x1a0
[ 25.090999][ C0] sysvec_apic_timer_interrupt+0xd3/0x1b0
[ 25.096694][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 25.102738][ C0] RIP: 0010:acpi_safe_halt+0x72/0x90
[ 25.108952][ C0] Code: 74 06 5b e9 d0 05 a6 fb e8 cb 05 a6 fb e8 d6 69 ab fb e9 0c 00 00 00 e8 bc 05 a6 fb 0f 00 2d 75 58 6b 00 e8 b0 05 a6 fb fb f4 e8 c8 67 ab fb 5b e9 a2 05 a6 fb 48 89 df e8 8a b4 cf fb eb ab
[ 25.130008][ C0] RSP: 0018:ffffffff87007c58 EFLAGS: 00000293
[ 25.136121][ C0] RAX: ffffffff8702f840 RBX: 0000000000000000 RCX: 1ffffffff0fd4d32
[ 25.144347][ C0] RDX: 0000000000000000 RSI: ffffffff85996970 RDI: ffffffff87030078
[ 25.152367][ C0] RBP: ffff8881d8cba864 R08: 0000000000000000 R09: 0000000000000001
[ 25.160365][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8881d8cba864
[ 25.169198][ C0] R13: 1ffffffff0e00f95 R14: ffff8881d8cba865 R15: 0000000000000001
[ 25.177158][ C0] ? acpi_safe_halt+0x70/0x90
[ 25.181811][ C0] ? acpi_safe_halt+0x70/0x90
[ 25.186479][ C0] acpi_idle_do_entry+0xa9/0xe0
[ 25.192547][ C0] acpi_idle_enter+0x42b/0xac0
[ 25.197388][ C0] ? acpi_idle_enter_s2idle+0x190/0x190
[ 25.202924][ C0] ? kvm_sched_clock_read+0x14/0x30
[ 25.208110][ C0] ? sched_clock+0x5/0x10
[ 25.212414][ C0] ? sched_clock_cpu+0x18/0x170
[ 25.217235][ C0] cpuidle_enter_state+0xdb/0xc20
[ 25.222889][ C0] ? tick_nohz_idle_stop_tick+0x54f/0xb50
[ 25.228928][ C0] cpuidle_enter+0x4a/0xa0
[ 25.233338][ C0] do_idle+0x3c2/0x500
[ 25.237381][ C0] ? arch_cpu_idle_exit+0x40/0x40
[ 25.242396][ C0] ? schedule+0xe1/0x2b0
[ 25.246715][ C0] cpu_startup_entry+0x14/0x20
[ 25.259977][ C0] start_kernel+0x9fc/0xa39
[ 25.264453][ C0] ? mem_encrypt_init+0x5/0x5
[ 25.269101][ C0] ? x86_family+0x3d/0x50
[ 25.273424][ C0] ? load_ucode_bsp+0x23d/0x27d
[ 25.278245][ C0] secondary_startup_64+0xb6/0xc0
[ 25.283708][ C0] Kernel Offset: disabled
[ 25.288015][ C0] Rebooting in 86400 seconds..