INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.100' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 29.758087][ T95] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 29.848442][ T95] usb 1-1: Using ep0 maxpacket: 16 [ 29.968664][ T95] usb 1-1: config index 0 descriptor too short (expected 7972, got 36) [ 29.977079][ T95] usb 1-1: config 0 has an invalid interface number: 128 but max is 0 [ 29.985362][ T95] usb 1-1: config 0 has no interface number 0 [ 29.991555][ T95] usb 1-1: config 0 interface 128 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 30.001532][ T95] usb 1-1: config 0 interface 128 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0 [ 30.011467][ T95] usb 1-1: config 0 interface 128 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 30.022553][ T95] usb 1-1: config 0 interface 128 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 30.032465][ T95] usb 1-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice= 5.92 [ 30.041568][ T95] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.051243][ T95] usb 1-1: config 0 descriptor?? [ 30.095727][ T95] general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] SMP KASAN [ 30.106800][ T95] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 30.115425][ T95] CPU: 1 PID: 95 Comm: kworker/1:2 Not tainted 5.6.0-rc3-syzkaller #0 [ 30.123565][ T95] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 30.133856][ T95] Workqueue: usb_hub_wq hub_event [ 30.138886][ T95] RIP: 0010:vmk80xx_write_packet+0x75/0x260 [ 30.144777][ T95] Code: 48 8d 7b 68 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 d3 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 6b 68 4c 89 ea 48 c1 ea 03 <0f> b6 04 02 4c 89 ea 83 e2 07 38 d0 7f 08 84 c0 0f 85 84 01 00 00 [ 30.164526][ T95] RSP: 0018:ffff8881d59271e0 EFLAGS: 00010202 [ 30.170588][ T95] RAX: dffffc0000000000 RBX: ffff8881d177dd00 RCX: 0000000000000000 [ 30.178664][ T95] RDX: 0000000000000002 RSI: ffffffff848b3b23 RDI: ffff8881d177dd68 [ 30.186635][ T95] RBP: ffff8881cdf5f400 R08: ffff8881d736c980 R09: 0000000000000010 [ 30.194588][ T95] R10: fffffbfff1266c95 R11: ffffffff893364af R12: ffff8881cfd8b000 [ 30.202581][ T95] R13: 0000000000000010 R14: 0000000000000000 R15: ffff8881d9753788 [ 30.210719][ T95] FS: 0000000000000000(0000) GS:ffff8881db300000(0000) knlGS:0000000000000000 [ 30.219669][ T95] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.226284][ T95] CR2: 00007f6359c8a000 CR3: 00000001d3550000 CR4: 00000000001406e0 [ 30.234241][ T95] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 30.242246][ T95] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 30.250239][ T95] Call Trace: [ 30.253517][ T95] vmk80xx_auto_attach+0x13b1/0x17c0 [ 30.258795][ T95] comedi_auto_config+0x16e/0x250 [ 30.263900][ T95] usb_probe_interface+0x310/0x800 [ 30.269005][ T95] ? usb_probe_device+0x230/0x230 [ 30.274006][ T95] really_probe+0x290/0xac0 [ 30.278491][ T95] driver_probe_device+0x223/0x350 [ 30.283597][ T95] __device_attach_driver+0x1d1/0x290 [ 30.288964][ T95] ? driver_allows_async_probing+0x160/0x160 [ 30.294953][ T95] bus_for_each_drv+0x162/0x1e0 [ 30.300046][ T95] ? bus_rescan_devices+0x20/0x20 [ 30.305080][ T95] ? _raw_spin_unlock_irqrestore+0x39/0x40 [ 30.310883][ T95] ? lockdep_hardirqs_on+0x382/0x580 [ 30.316344][ T95] __device_attach+0x217/0x390 [ 30.321363][ T95] ? device_bind_driver+0xd0/0xd0 [ 30.326383][ T95] bus_probe_device+0x1e4/0x290 [ 30.331250][ T95] device_add+0x1459/0x1bf0 [ 30.335856][ T95] ? wait_for_completion+0x3c0/0x3c0 [ 30.341193][ T95] ? device_link_remove+0x110/0x110 [ 30.346515][ T95] ? _raw_spin_unlock_irqrestore+0x39/0x40 [ 30.352316][ T95] usb_set_configuration+0xe47/0x17d0 [ 30.357821][ T95] usb_generic_driver_probe+0x9d/0xe0 [ 30.363245][ T95] usb_probe_device+0xd9/0x230 [ 30.367994][ T95] ? usb_suspend+0x5f0/0x5f0 [ 30.372643][ T95] really_probe+0x290/0xac0 [ 30.377156][ T95] driver_probe_device+0x223/0x350 [ 30.382263][ T95] __device_attach_driver+0x1d1/0x290 [ 30.387615][ T95] ? driver_allows_async_probing+0x160/0x160 [ 30.393581][ T95] bus_for_each_drv+0x162/0x1e0 [ 30.398569][ T95] ? bus_rescan_devices+0x20/0x20 [ 30.403576][ T95] ? _raw_spin_unlock_irqrestore+0x39/0x40 [ 30.409486][ T95] ? lockdep_hardirqs_on+0x382/0x580 [ 30.414858][ T95] __device_attach+0x217/0x390 [ 30.419622][ T95] ? device_bind_driver+0xd0/0xd0 [ 30.424632][ T95] bus_probe_device+0x1e4/0x290 [ 30.429469][ T95] device_add+0x1459/0x1bf0 [ 30.434019][ T95] ? device_link_remove+0x110/0x110 [ 30.439352][ T95] usb_new_device.cold+0x540/0xcd0 [ 30.444710][ T95] hub_event+0x21cb/0x4300 [ 30.450561][ T95] ? hub_port_debounce+0x350/0x350 [ 30.455829][ T95] ? find_held_lock+0x2d/0x110 [ 30.460600][ T95] ? mark_held_locks+0xe0/0xe0 [ 30.465359][ T95] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 30.470902][ T95] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 30.476226][ T95] process_one_work+0x94b/0x1620 [ 30.481156][ T95] ? pwq_dec_nr_in_flight+0x310/0x310 [ 30.486525][ T95] ? do_raw_spin_lock+0x129/0x290 [ 30.491562][ T95] worker_thread+0x96/0xe20 [ 30.496180][ T