[ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.202' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 70.032747][ T3000] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 70.272771][ T3000] usb 1-1: Using ep0 maxpacket: 16 [ 70.392896][ T3000] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 70.403234][ T3000] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 70.415475][ T3000] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 70.425872][ T3000] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 70.436236][ T3000] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 70.522865][ T3000] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 70.531965][ T3000] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 70.540876][ T3000] usb 1-1: Manufacturer: syz [ 70.549417][ T3000] usb 1-1: config 0 descriptor?? [ 70.872676][ T3000] rc_core: IR keymap rc-hauppauge not found [ 70.878706][ T3000] Registered IR keymap rc-empty [ 70.884433][ T3000] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 70.912705][ T3000] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 70.944028][ T3000] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 70.957987][ T3000] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input5 [ 70.985855][ T3000] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 71.022641][ T3000] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 71.042588][ C1] ================================================================================ [ 71.052059][ C1] UBSAN: shift-out-of-bounds in drivers/media/rc/mceusb.c:1173:29 [ 71.059848][ C1] shift exponent 119 is too large for 32-bit type 'int' [ 71.066763][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.11.0-rc5-syzkaller #0 [ 71.074723][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 71.084760][ C1] Call Trace: [ 71.088021][ C1] [ 71.090850][ C1] dump_stack+0x107/0x163 [ 71.095182][ C1] ubsan_epilogue+0xb/0x5a [ 71.099630][ C1] __ubsan_handle_shift_out_of_bounds.cold+0xb1/0x181 [ 71.106380][ C1] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 71.112612][ C1] ? mceusb_dev_printdata+0x25a/0x1000 [ 71.118063][ C1] mceusb_dev_recv.cold+0x177/0x1d6 [ 71.123263][ C1] ? mce_write_callback+0x50/0x50 [ 71.128280][ C1] __usb_hcd_giveback_urb+0x2b0/0x5c0 [ 71.133640][ C1] usb_hcd_giveback_urb+0x367/0x410 [ 71.138833][ C1] dummy_timer+0x11f4/0x32a0 [ 71.143433][ C1] ? dummy_dequeue+0x4c0/0x4c0 [ 71.148201][ C1] ? dummy_dequeue+0x4c0/0x4c0 [ 71.152948][ C1] call_timer_fn+0x1a5/0x6b0 [ 71.157523][ C1] ? add_timer_on+0x4a0/0x4a0 [ 71.162184][ C1] ? lock_downgrade+0x6d0/0x6d0 [ 71.167020][ C1] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 71.173268][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 71.178453][ C1] ? dummy_dequeue+0x4c0/0x4c0 [ 71.183207][ C1] __run_timers.part.0+0x67c/0xa50 [ 71.188319][ C1] ? call_timer_fn+0x6b0/0x6b0 [ 71.193070][ C1] ? kvm_sched_clock_read+0x14/0x40 [ 71.198252][ C1] ? sched_clock+0x2a/0x40 [ 71.202649][ C1] ? sched_clock_cpu+0x18/0x1f0 [ 71.207525][ C1] run_timer_softirq+0xb3/0x1d0 [ 71.212807][ C1] __do_softirq+0x2bc/0xa29 [ 71.217304][ C1] asm_call_irq_on_stack+0xf/0x20 [ 71.222327][ C1] [ 71.225261][ C1] do_softirq_own_stack+0xaa/0xd0 [ 71.230271][ C1] irq_exit_rcu+0x134/0x200 [ 71.234771][ C1] sysvec_apic_timer_interrupt+0x4d/0x100 [ 71.240482][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 71.246448][ C1] RIP: 0010:acpi_idle_do_entry+0x1c9/0x250 [ 71.252244][ C1] Code: cd aa 76 f8 84 db 75 ac e8 44 a4 76 f8 e8 bf 76 7c f8 e9 0c 00 00 00 e8 35 a4 76 f8 0f 00 2d 5e c2 ad 00 e8 29 a4 76 f8 fb f4 <9c> 5b 81 e3 00 02 00 00 fa 31 ff 48 89 de e8 04 ac 76 f8 48 85 db [ 71.271841][ C1] RSP: 0018:ffffc90000d47d18 EFLAGS: 00000293 [ 71.277893][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 71.285855][ C1] RDX: ffff888010dab780 RSI: ffffffff88fc1d27 RDI: 0000000000000000 [ 71.293815][ C1] RBP: ffff888140fc3064 R08: 0000000000000001 R09: 0000000000000001 [ 71.301776][ C1] R10: ffffffff81789408 R11: 0000000000000000 R12: 0000000000000001 [ 71.309782][ C1] R13: ffff888140fc3000 R14: ffff888140fc3064 R15: ffff88814366c004 [ 71.317783][ C1] ? trace_hardirqs_on+0x38/0x1c0 [ 71.322810][ C1] ? acpi_idle_do_entry+0x1c7/0x250 [ 71.328008][ C1] ? acpi_idle_do_entry+0x1c7/0x250 [ 71.333192][ C1] acpi_idle_enter+0x361/0x500 [ 71.337947][ C1] cpuidle_enter_state+0x1b1/0xc80 [ 71.343066][ C1] cpuidle_enter+0x4a/0xa0 [ 71.347470][ C1] do_idle+0x3e1/0x590 [ 71.351528][ C1] ? arch_cpu_idle_exit+0x30/0x30 [ 71.356590][ C1] ? _raw_spin_trylock_bh+0x70/0x70 [ 71.361779][ C1] ? lockdep_hardirqs_on+0x79/0x100 [ 71.366969][ C1] cpu_startup_entry+0x14/0x20 [ 71.371733][ C1] start_secondary+0x274/0x350 [ 71.376487][ C1] ? set_cpu_sibling_map+0x2460/0x2460 [ 71.381937][ C1] secondary_startup_64_no_verify+0xb0/0xbb [ 71.387828][ C1] ================================================================================ [ 71.397142][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 71.403746][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.11.0-rc5-syzkaller #0 [ 71.411712][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 71.421753][ C1] Call Trace: [ 71.425023][ C1] [ 71.427854][ C1] dump_stack+0x107/0x163 [ 71.432177][ C1] panic+0x306/0x73d [ 71.436080][ C1] ? __warn_printk+0xf3/0xf3 [ 71.440664][ C1] ? secondary_startup_64_no_verify+0xb0/0xbb [ 71.446726][ C1] ? ubsan_epilogue+0x3e/0x5a [ 71.451402][ C1] ubsan_epilogue+0x54/0x5a [ 71.455892][ C1] __ubsan_handle_shift_out_of_bounds.cold+0xb1/0x181 [ 71.462693][ C1] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 71.468930][ C1] ? mceusb_dev_printdata+0x25a/0x1000 [ 71.474381][ C1] mceusb_dev_recv.cold+0x177/0x1d6 [ 71.479591][ C1] ? mce_write_callback+0x50/0x50 [ 71.484624][ C1] __usb_hcd_giveback_urb+0x2b0/0x5c0 [ 71.489995][ C1] usb_hcd_giveback_urb+0x367/0x410 [ 71.495186][ C1] dummy_timer+0x11f4/0x32a0 [ 71.499837][ C1] ? dummy_dequeue+0x4c0/0x4c0 [ 71.504629][ C1] ? dummy_dequeue+0x4c0/0x4c0 [ 71.509386][ C1] call_timer_fn+0x1a5/0x6b0 [ 71.513970][ C1] ? add_timer_on+0x4a0/0x4a0 [ 71.518634][ C1] ? lock_downgrade+0x6d0/0x6d0 [ 71.523499][ C1] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 71.529740][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 71.534927][ C1] ? dummy_dequeue+0x4c0/0x4c0 [ 71.539680][ C1] __run_timers.part.0+0x67c/0xa50 [ 71.544785][ C1] ? call_timer_fn+0x6b0/0x6b0 [ 71.549536][ C1] ? kvm_sched_clock_read+0x14/0x40 [ 71.555500][ C1] ? sched_clock+0x2a/0x40 [ 71.559900][ C1] ? sched_clock_cpu+0x18/0x1f0 [ 71.564743][ C1] run_timer_softirq+0xb3/0x1d0 [ 71.569580][ C1] __do_softirq+0x2bc/0xa29 [ 71.574077][ C1] asm_call_irq_on_stack+0xf/0x20 [ 71.579090][ C1] [ 71.582020][ C1] do_softirq_own_stack+0xaa/0xd0 [ 71.587060][ C1] irq_exit_rcu+0x134/0x200 [ 71.591562][ C1] sysvec_apic_timer_interrupt+0x4d/0x100 [ 71.597272][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 71.603248][ C1] RIP: 0010:acpi_idle_do_entry+0x1c9/0x250 [ 71.609043][ C1] Code: cd aa 76 f8 84 db 75 ac e8 44 a4 76 f8 e8 bf 76 7c f8 e9 0c 00 00 00 e8 35 a4 76 f8 0f 00 2d 5e c2 ad 00 e8 29 a4 76 f8 fb f4 <9c> 5b 81 e3 00 02 00 00 fa 31 ff 48 89 de e8 04 ac 76 f8 48 85 db [ 71.628637][ C1] RSP: 0018:ffffc90000d47d18 EFLAGS: 00000293 [ 71.634698][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 71.642660][ C1] RDX: ffff888010dab780 RSI: ffffffff88fc1d27 RDI: 0000000000000000 [ 71.650616][ C1] RBP: ffff888140fc3064 R08: 0000000000000001 R09: 0000000000000001 [ 71.658570][ C1] R10: ffffffff81789408 R11: 0000000000000000 R12: 0000000000000001 [ 71.666525][ C1] R13: ffff888140fc3000 R14: ffff888140fc3064 R15: ffff88814366c004 [ 71.674486][ C1] ? trace_hardirqs_on+0x38/0x1c0 [ 71.679507][ C1] ? acpi_idle_do_entry+0x1c7/0x250 [ 71.684693][ C1] ? acpi_idle_do_entry+0x1c7/0x250 [ 71.689875][ C1] acpi_idle_enter+0x361/0x500 [ 71.694642][ C1] cpuidle_enter_state+0x1b1/0xc80 [ 71.699746][ C1] cpuidle_enter+0x4a/0xa0 [ 71.704148][ C1] do_idle+0x3e1/0x590 [ 71.708204][ C1] ? arch_cpu_idle_exit+0x30/0x30 [ 71.713214][ C1] ? _raw_spin_trylock_bh+0x70/0x70 [ 71.718407][ C1] ? lockdep_hardirqs_on+0x79/0x100 [ 71.723594][ C1] cpu_startup_entry+0x14/0x20 [ 71.728358][ C1] start_secondary+0x274/0x350 [ 71.733109][ C1] ? set_cpu_sibling_map+0x2460/0x2460 [ 71.738557][ C1] secondary_startup_64_no_verify+0xb0/0xbb [ 71.745065][ C1] Kernel Offset: disabled [ 71.749480][ C1] Rebooting in 86400 seconds..