INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.15' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 35.029372][ T93] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 35.119540][ T93] usb 1-1: Using ep0 maxpacket: 32 [ 35.239923][ T93] usb 1-1: config 4 has an invalid interface number: 84 but max is 3 [ 35.248080][ T93] usb 1-1: config 4 has an invalid interface number: 109 but max is 3 [ 35.256654][ T93] usb 1-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 35.265366][ T93] usb 1-1: config 4 has an invalid interface number: 201 but max is 3 [ 35.273585][ T93] usb 1-1: config 4 has an invalid interface number: 116 but max is 3 [ 35.281788][ T93] usb 1-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 35.290492][ T93] usb 1-1: config 4 has an invalid descriptor of length 127, skipping remainder of the config [ 35.301446][ T93] usb 1-1: config 4 has no interface number 0 [ 35.307535][ T93] usb 1-1: config 4 has no interface number 1 [ 35.313634][ T93] usb 1-1: config 4 has no interface number 2 [ 35.319728][ T93] usb 1-1: config 4 has no interface number 3 [ 35.325902][ T93] usb 1-1: config 4 interface 84 altsetting 216 has an invalid endpoint with address 0x80, skipping [ 35.336809][ T93] usb 1-1: config 4 interface 84 altsetting 216 has an invalid endpoint with address 0x0, skipping [ 35.347548][ T93] usb 1-1: config 4 interface 84 altsetting 216 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 35.359190][ T93] usb 1-1: config 4 interface 84 altsetting 216 endpoint 0xF has invalid maxpacket 1040, setting to 64 [ 35.370280][ T93] usb 1-1: config 4 interface 84 altsetting 216 has a duplicate endpoint with address 0xA, skipping [ 35.381088][ T93] usb 1-1: config 4 interface 84 altsetting 216 has an invalid endpoint descriptor of length 2, skipping [ 35.392976][ T93] usb 1-1: config 4 interface 84 altsetting 216 bulk endpoint 0x5 has invalid maxpacket 64 [ 35.414471][ T93] usb 1-1: config 4 interface 84 altsetting 216 has a duplicate endpoint with address 0xF, skipping [ 35.425325][ T93] usb 1-1: config 4 interface 84 altsetting 216 has 12 endpoint descriptors, different from the interface descriptor's value: 11 [ 35.438746][ T93] usb 1-1: config 4 interface 109 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 35.449499][ T93] usb 1-1: config 4 interface 109 altsetting 3 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 35.460920][ T93] usb 1-1: config 4 interface 109 altsetting 3 has a duplicate endpoint with address 0x4, skipping [ 35.471650][ T93] usb 1-1: config 4 interface 201 altsetting 2 has an invalid endpoint with address 0x0, skipping [ 35.482279][ T93] usb 1-1: config 4 interface 201 altsetting 2 has a duplicate endpoint with address 0xA, skipping [ 35.492980][ T93] usb 1-1: config 4 interface 201 altsetting 2 has an invalid endpoint with address 0x80, skipping [ 35.503691][ T93] usb 1-1: config 4 interface 201 altsetting 2 has a duplicate endpoint with address 0x3, skipping [ 35.514418][ T93] usb 1-1: config 4 interface 201 altsetting 2 has a duplicate endpoint with address 0x8, skipping [ 35.525138][ T93] usb 1-1: config 4 interface 201 altsetting 2 has a duplicate endpoint with address 0xC, skipping [ 35.535874][ T93] usb 1-1: config 4 interface 116 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 35.549068][ T93] usb 1-1: config 4 interface 84 has no altsetting 0 [ 35.555781][ T93] usb 1-1: config 4 interface 109 has no altsetting 0 [ 35.562570][ T93] usb 1-1: config 4 interface 201 has no altsetting 0 [ 35.569370][ T93] usb 1-1: config 4 interface 116 has no altsetting 0 [ 35.729571][ T93] usb 1-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01 [ 35.738648][ T93] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.746668][ T93] usb 1-1: Product: syz [ 35.751594][ T93] usb 1-1: Manufacturer: syz [ 35.756182][ T93] usb 1-1: SerialNumber: syz executing program [ 36.042092][ T93] ------------[ cut here ]------------ [ 36.047643][ T93] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 36.054231][ T93] WARNING: CPU: 1 PID: 93 at drivers/usb/core/urb.c:478 usb_submit_urb+0x1188/0x1460 [ 36.063854][ T93] Kernel panic - not syncing: panic_on_warn set ... [ 36.070446][ T93] CPU: 1 PID: 93 Comm: kworker/1:2 Not tainted 5.6.0-rc3-syzkaller #0 [ 36.078587][ T93] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 36.088669][ T93] Workqueue: usb_hub_wq hub_event [ 36.093673][ T93] Call Trace: [ 36.096949][ T93] dump_stack+0xef/0x16e [ 36.101177][ T93] ? usb_submit_urb+0x1090/0x1460 [ 36.106268][ T93] panic+0x2aa/0x6e1 [ 36.110148][ T93] ? add_taint.cold+0x16/0x16 [ 36.114808][ T93] ? __probe_kernel_read+0x188/0x1d0 [ 36.120085][ T93] ? __warn.cold+0x14/0x30 [ 36.124481][ T93] ? __warn+0xd5/0x1c8 [ 36.128577][ T93] ? usb_submit_urb+0x1188/0x1460 [ 36.133587][ T93] __warn.cold+0x2f/0x30 [ 36.137814][ T93] ? usb_submit_urb+0x1188/0x1460 [ 36.142822][ T93] report_bug+0x27b/0x2f0 [ 36.147146][ T93] do_error_trap+0x12b/0x1e0 [ 36.151720][ T93] ? usb_submit_urb+0x1188/0x1460 [ 36.156752][ T93] do_invalid_op+0x32/0x40 [ 36.161152][ T93] ? usb_submit_urb+0x1188/0x1460 [ 36.166163][ T93] invalid_op+0x23/0x30 [ 36.170347][ T93] RIP: 0010:usb_submit_urb+0x1188/0x1460 [ 36.176003][ T93] Code: 4d 85 ed 74 46 e8 18 ce dd fd 4c 89 f7 e8 d0 5c 17 ff 41 89 d8 44 89 e1 4c 89 ea 48 89 c6 48 c7 c7 e0 e7 3b 86 e8 a0 5f b2 fd <0f> 0b e9 20 f4 ff ff e8 ec cd dd fd 0f 1f 44 00 00 e8 e2 cd dd fd [ 36.195707][ T93] RSP: 0018:ffff8881d5d06f50 EFLAGS: 00010286 [ 36.201790][ T93] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 36.209867][ T93] RDX: 0000000000000000 RSI: ffffffff812977dd RDI: ffffed103aba0ddc [ 36.217823][ T93] RBP: ffff8881ce36e990 R08: ffff8881d5cf8000 R09: fffffbfff1266c8e [ 36.225780][ T93] R10: fffffbfff1266c8d R11: ffffffff8933646f R12: 0000000000000001 [ 36.233793][ T93] R13: ffff8881d0464378 R14: ffff8881cd9690a0 R15: ffff8881d4efd200 [ 36.241794][ T93] ? vprintk_func+0x7d/0x113 [ 36.246385][ T93] usb_start_wait_urb+0x108/0x4c0 [ 36.251662][ T93] ? sg_clean+0x230/0x230 [ 36.255999][ T93] ? kasan_unpoison_shadow+0x30/0x40 [ 36.261277][ T93] ? memset+0x20/0x40 [ 36.265239][ T93] usb_bulk_msg+0x228/0x550 [ 36.269730][ T93] shark_write_val+0x20b/0x310 [ 36.274479][ T93] ? led_classdev_register_ext+0x53c/0x740 [ 36.280270][ T93] ? shark_read_val+0x470/0x470 [ 36.285100][ T93] ? devm_led_classdev_unregister+0x50/0x50 [ 36.290969][ T93] ? shark_read_val+0x470/0x470 [ 36.295801][ T93] snd_tea575x_write+0x78/0x330 [ 36.300633][ T93] snd_tea575x_hw_init+0x8d/0x170 [ 36.305675][ T93] snd_tea575x_init+0x1f/0x8ad [ 36.310543][ T93] usb_shark_probe+0x5e1/0x770 [ 36.315348][ T93] usb_probe_interface+0x310/0x800 [ 36.320461][ T93] ? usb_probe_device+0x230/0x230 [ 36.325483][ T93] really_probe+0x290/0xac0 [ 36.329973][ T93] driver_probe_device+0x223/0x350 [ 36.335071][ T93] __device_attach_driver+0x1d1/0x290 [ 36.340434][ T93] ? driver_allows_async_probing+0x160/0x160 [ 36.346412][ T93] bus_for_each_drv+0x162/0x1e0 [ 36.351249][ T93] ? bus_rescan_devices+0x20/0x20 [ 36.356258][ T93] ? _raw_spin_unlock_irqrestore+0x39/0x40 [ 36.362047][ T93] ? lockdep_hardirqs_on+0x382/0x580 [ 36.367420][ T93] __device_attach+0x217/0x390 [ 36.372166][ T93] ? device_bind_driver+0xd0/0xd0 [ 36.377203][ T93] bus_probe_device+0x1e4/0x290 [ 36.382033][ T93] device_add+0x1459/0x1bf0 [ 36.386516][ T93] ? wait_for_completion+0x3c0/0x3c0 [ 36.391781][ T93] ? device_link_remove+0x110/0x110 [ 36.396971][ T93] ? _raw_spin_unlock_irqrestore+0x39/0x40 [ 36.402784][ T93] usb_set_configuration+0xe47/0x17d0 [ 36.408152][ T93] usb_generic_driver_probe+0x9d/0xe0 [ 36.413504][ T93] usb_probe_device+0xd9/0x230 [ 36.418253][ T93] ? usb_suspend+0x5f0/0x5f0 [ 36.422824][ T93] really_probe+0x290/0xac0 [ 36.427306][ T93] driver_probe_device+0x223/0x350 [ 36.432401][ T93] __device_attach_driver+0x1d1/0x290 [ 36.437779][ T93] ? driver_allows_async_probing+0x160/0x160 [ 36.443743][ T93] bus_for_each_drv+0x162/0x1e0 [ 36.448613][ T93] ? bus_rescan_devices+0x20/0x20 [ 36.453622][ T93] ? _raw_spin_unlock_irqrestore+0x39/0x40 [ 36.459450][ T93] ? lockdep_hardirqs_on+0x382/0x580 [ 36.464761][ T93] __device_attach+0x217/0x390 [ 36.469510][ T93] ? device_bind_driver+0xd0/0xd0 [ 36.474522][ T93] bus_probe_device+0x1e4/0x290 [ 36.479410][ T93] device_add+0x1459/0x1bf0 [ 36.483905][ T93] ? device_link_remove+0x110/0x110 [ 36.489107][ T93] usb_new_device.cold+0x540/0xcd0 [ 36.494223][ T93] hub_event+0x21cb/0x4300 [ 36.498622][ T93] ? hub_port_debounce+0x350/0x350 [ 36.503712][ T93] ? find_held_lock+0x2d/0x110 [ 36.508456][ T93] ? mark_held_locks+0xe0/0xe0 [ 36.513202][ T93] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 36.518725][ T93] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 36.524008][ T93] process_one_work+0x94b/0x1620 [ 36.528936][ T93] ? pwq_dec_nr_in_flight+0x310/0x310 [ 36.534289][ T93] ? do_raw_spin_lock+0x129/0x290 [ 36.539302][ T93] worker_thread+0x96/0xe20 [ 36.544346][ T93] ? process_one_work+0x1620/0x1620 [ 36.549529][ T93] kthread+0x318/0x420 [ 36.553580][ T93] ? kthread_create_on_node+0xf0/0xf0 [ 36.558934][ T93] ret_from_fork+0x24/0x30 [ 36.563778][ T93] Kernel Offset: disabled [ 36.568134][ T93] Rebooting in 86400 seconds..