INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.110' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 32.344974][ T22] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 32.584914][ T22] usb 1-1: Using ep0 maxpacket: 8 [ 32.705039][ T22] usb 1-1: config 0 has an invalid interface number: 138 but max is 0 [ 32.715601][ T22] usb 1-1: config 0 has no interface number 0 [ 32.722278][ T22] usb 1-1: config 0 interface 138 altsetting 0 endpoint 0x5 has wMaxPacketSize 0, skipping [ 32.734450][ T22] usb 1-1: config 0 interface 138 altsetting 0 endpoint 0x8F has wMaxPacketSize 0, skipping [ 32.745435][ T22] usb 1-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=cd.64 [ 32.755087][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.764894][ T22] usb 1-1: config 0 descriptor?? [ 32.809223][ T22] kasan: CONFIG_KASAN_INLINE enabled [ 32.815891][ T22] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 32.824492][ T22] general protection fault: 0000 [#1] SMP KASAN [ 32.830908][ T22] CPU: 1 PID: 22 Comm: kworker/1:1 Not tainted 5.5.0-rc1-syzkaller #0 [ 32.839668][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 32.851116][ T22] Workqueue: usb_hub_wq hub_event [ 32.856951][ T22] RIP: 0010:vmk80xx_write_packet+0x75/0x260 [ 32.862853][ T22] Code: 48 8d 7b 68 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 d3 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 6b 68 4c 89 ea 48 c1 ea 03 <0f> b6 04 02 4c 89 ea 83 e2 07 38 d0 7f 08 84 c0 0f 85 84 01 00 00 [ 32.885180][ T22] RSP: 0018:ffff8881d8c37200 EFLAGS: 00010202 [ 32.892417][ T22] RAX: dffffc0000000000 RBX: ffff8881cf83f500 RCX: 0000000000000000 [ 32.901418][ T22] RDX: 0000000000000002 RSI: ffffffff84786283 RDI: ffff8881cf83f568 [ 32.910629][ T22] RBP: ffff8881d17f8400 R08: ffff8881da24e200 R09: 0000000000000010 [ 32.920200][ T22] R10: fffffbfff11f1eb4 R11: ffffffff88f8f5a7 R12: ffff8881cfe2e000 [ 32.929956][ T22] R13: 0000000000000010 R14: 0000000000000000 R15: ffff8881d1194f88 [ 32.940503][ T22] FS: 0000000000000000(0000) GS:ffff8881db300000(0000) knlGS:0000000000000000 [ 32.952688][ T22] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.961462][ T22] CR2: 00007f6e071d0000 CR3: 00000001d44f0000 CR4: 00000000001406e0 [ 32.969667][ T22] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 32.980152][ T22] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 32.989849][ T22] Call Trace: [ 32.993707][ T22] vmk80xx_auto_attach+0x13b1/0x17c0 [ 33.000332][ T22] comedi_auto_config+0x16e/0x250 [ 33.005719][ T22] usb_probe_interface+0x305/0x7a0 [ 33.011185][ T22] ? usb_probe_device+0x100/0x100 [ 33.016547][ T22] really_probe+0x281/0x6d0 [ 33.022149][ T22] driver_probe_device+0x104/0x210 [ 33.027763][ T22] __device_attach_driver+0x1c2/0x220 [ 33.033345][ T22] ? driver_allows_async_probing+0x160/0x160 [ 33.040088][ T22] bus_for_each_drv+0x162/0x1e0 [ 33.045814][ T22] ? bus_rescan_devices+0x20/0x20 [ 33.052156][ T22] ? _raw_spin_unlock_irqrestore+0x39/0x40 [ 33.059301][ T22] ? lockdep_hardirqs_on+0x382/0x580 [ 33.065589][ T22] __device_attach+0x217/0x360 [ 33.070964][ T22] ? device_bind_driver+0xd0/0xd0 [ 33.077601][ T22] bus_probe_device+0x1e4/0x290 [ 33.083103][ T22] device_add+0x1480/0x1c20 [ 33.088317][ T22] ? wait_for_completion+0x3c0/0x3c0 [ 33.094077][ T22] ? device_links_flush_sync_list+0x350/0x350 [ 33.101687][ T22] ? _raw_spin_unlock_irqrestore+0x39/0x40 [ 33.109322][ T22] usb_set_configuration+0xe67/0x1740 [ 33.115756][ T22] generic_probe+0x9d/0xd5 [ 33.120520][ T22] usb_probe_device+0x99/0x100 [ 33.126370][ T22] ? usb_suspend+0x620/0x620 [ 33.132349][ T22] really_probe+0x281/0x6d0 [ 33.137463][ T22] driver_probe_device+0x104/0x210 [ 33.143355][ T22] __device_attach_driver+0x1c2/0x220 [ 33.149848][ T22] ? driver_allows_async_probing+0x160/0x160 [ 33.156513][ T22] bus_for_each_drv+0x162/0x1e0 [ 33.162099][ T22] ? bus_rescan_devices+0x20/0x20 [ 33.167545][ T22] ? _raw_spin_unlock_irqrestore+0x39/0x40 [ 33.173588][ T22] ? lockdep_hardirqs_on+0x382/0x580 [ 33.179575][ T22] __device_attach+0x217/0x360 [ 33.184512][ T22] ? device_bind_driver+0xd0/0xd0 [ 33.189614][ T22] bus_probe_device+0x1e4/0x290 [ 33.195169][ T22] device_add+0x1480/0x1c20 [ 33.200191][ T22] ? device_links_flush_sync_list+0x350/0x350 [ 33.208890][ T22] usb_new_device.cold+0x6a4/0xe79 [ 33.214584][ T22] hub_event+0x1e59/0x3860 [ 33.220398][ T22] ? hub_port_debounce+0x260/0x260 [ 33.227256][ T22] ? find_held_lock+0x2d/0x110 [ 33.233071][ T22] ? mark_held_locks+0xe0/0xe0 [ 33.238959][ T22] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 33.246221][ T22] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 33.253680][ T22] process_one_work+0x92b/0x1530 [ 33.260293][ T22] ? pwq_dec_nr_in_flight+0x310/0x310 [ 33.267531][ T22] ? do_raw_spin_lock+0x11a/0x280 [ 33.273260][ T22] worker_thread+0x96/0xe20 [ 33.279920][ T22] ? process_one_work+0x1530/0x1530 [ 33.285453][ T22] kthread+0x318/0x420 [ 33.289913][ T22] ? kthread_create_on_node+0xf0/0xf0 [ 33.296238][ T22] ret_from_fork+0x24/0x30 [ 33.301705][ T22] Modules linked in: [ 33.306389][ T22] ---[ end trace 5ddc006416380071 ]--