[ OK ] Started Getty on tty5. [ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.53' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 32.803864] usb usb9: usbfs: interface 0 claimed by hub while 'syz-executor675' sets config #0 [ 32.813082] usb usb9: usbfs: interface 0 claimed by hub while 'syz-executor675' sets config #1 [ 32.826775] FAULT_INJECTION: forcing a failure. [ 32.826775] name failslab, interval 1, probability 0, space 0, times 1 [ 32.838464] CPU: 1 PID: 8094 Comm: syz-executor675 Not tainted 4.19.208-syzkaller #0 [ 32.846356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 32.855694] Call Trace: [ 32.858285] dump_stack+0x1fc/0x2ef [ 32.861896] should_fail.cold+0xa/0xf [ 32.865873] ? setup_fault_attr+0x200/0x200 [ 32.870284] ? lock_acquire+0x170/0x3c0 [ 32.874249] __should_failslab+0x115/0x180 [ 32.878475] should_failslab+0x5/0x10 [ 32.882266] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 32.887363] __kmalloc_node_track_caller+0x38/0x70 [ 32.892281] __alloc_skb+0xae/0x560 [ 32.895895] alloc_uevent_skb+0x7b/0x210 [ 32.899941] kobject_uevent_env+0xa90/0x1480 [ 32.904335] ? blocking_notifier_call_chain+0x54/0xa0 [ 32.909508] __device_release_driver+0x55d/0x6d0 [ 32.914979] device_release_driver+0x23/0x30 [ 32.919372] usb_driver_release_interface+0x102/0x180 [ 32.924547] proc_disconnect_claim+0x217/0x380 [ 32.929122] ? proc_ioctl+0x630/0x630 [ 32.932919] ? wait_for_completion_io+0x10/0x10 [ 32.937572] ? proc_ioctl+0x17e/0x630 [ 32.941357] usbdev_do_ioctl+0x278d/0x3030 [ 32.945591] ? __save_stack_trace+0xaf/0x190 [ 32.949981] ? proc_bulk+0x860/0x860 [ 32.953687] ? trace_hardirqs_off+0x64/0x200 [ 32.958076] ? __kasan_slab_free+0x186/0x1f0 [ 32.962463] ? kmem_cache_free+0x7f/0x260 [ 32.966591] ? putname+0xe1/0x120 [ 32.970027] ? do_sys_open+0x2ba/0x520 [ 32.973903] ? do_syscall_64+0xf9/0x620 [ 32.977859] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 32.983208] ? mark_held_locks+0xf0/0xf0 [ 32.987275] ? mark_held_locks+0xf0/0xf0 [ 32.991335] ? debug_check_no_obj_freed+0x201/0x490 [ 32.996336] ? lock_downgrade+0x720/0x720 [ 33.000481] ? lock_acquire+0x170/0x3c0 [ 33.004443] ? usbdev_compat_ioctl+0x30/0x30 [ 33.008834] usbdev_ioctl+0x21/0x30 [ 33.012469] do_vfs_ioctl+0xcdb/0x12e0 [ 33.016370] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 33.021529] ? debug_check_no_obj_freed+0x201/0x490 [ 33.026544] ? ioctl_preallocate+0x200/0x200 [ 33.030940] ? putname+0xe1/0x120 [ 33.034391] ? putname+0xe1/0x120 [ 33.037830] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 33.042844] ? kmem_cache_free+0x226/0x260 [ 33.047070] ? putname+0xe1/0x120 [ 33.050533] ? do_sys_open+0x2bf/0x520 [ 33.054558] ? filp_open+0x70/0x70 [ 33.058098] ksys_ioctl+0x9b/0xc0 [ 33.061552] __x64_sys_ioctl+0x6f/0xb0 [ 33.065452] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 33.070027] do_syscall_64+0xf9/0x620 [ 33.073841] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 33.079117] RIP: 0033:0x7fef60bf0799 [ 33.082838] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 executing program [ 33.101739] RSP: 002b:00007ffdc00be688 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 33.109445] RAX: ffffffffffffffda RBX: 00007fef60c34194 RCX: 00007fef60bf0799 [ 33.116703] RDX: 0000000020000380 RSI: 000000008108551b RDI: 0000000000000006 [ 33.123962] RBP: 00007ffdc00be6a0 R08: 0000000000000001 R09: 0000000000000001 [ 33.131236] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 33.138508] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000 [ 33.155012] FAULT_INJECTION: forcing a failure. [ 33.155012] name failslab, interval 1, probability 0, space 0, times 0 [ 33.168759] CPU: 1 PID: 8097 Comm: syz-executor675 Not tainted 4.19.208-syzkaller #0 [ 33.176663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 33.186025] Call Trace: [ 33.188644] dump_stack+0x1fc/0x2ef [ 33.192273] should_fail.cold+0xa/0xf [ 33.196074] ? setup_fault_attr+0x200/0x200 [ 33.200396] ? lock_acquire+0x170/0x3c0 [ 33.204361] __should_failslab+0x115/0x180 [ 33.208594] should_failslab+0x5/0x10 [ 33.212394] __kmalloc_track_caller+0x2a6/0x3c0 [ 33.217066] ? kstrdup_const+0x53/0x80 [ 33.220960] kstrdup+0x36/0x70 [ 33.224150] kstrdup_const+0x53/0x80 [ 33.227854] __kernfs_new_node+0x9b/0x680 [ 33.231987] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 33.236726] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 33.241289] ? mark_held_locks+0xf0/0xf0 [ 33.245332] ? depot_save_stack+0x258/0x410 [ 33.249644] ? kasan_kmalloc+0x139/0x160 [ 33.253687] ? kmem_cache_alloc_trace+0x12f/0x380 [ 33.258510] kernfs_create_dir_ns+0x9e/0x230 [ 33.262902] sysfs_create_dir_ns+0x127/0x280 [ 33.267308] ? sysfs_create_mount_point+0xb0/0xb0 [ 33.272143] ? lock_acquire+0x170/0x3c0 [ 33.276102] ? kobject_add_internal+0x134/0x9c0 [ 33.280754] ? do_raw_spin_unlock+0x171/0x230 [ 33.285245] kobject_add_internal+0x2a5/0x9c0 [ 33.289736] ? lock_acquire+0x151/0x3c0 [ 33.293709] kobject_add+0x150/0x1c0 [ 33.297407] ? kset_create_and_add+0x1a0/0x1a0 [ 33.301990] ? device_add+0xe5a/0x16d0 [ 33.305863] ? __lockdep_init_map+0x100/0x5a0 [ 33.310355] ? root_device_release+0x20/0x20 [ 33.314744] ? device_add+0x35c/0x16d0 [ 33.318614] device_add+0x37b/0x16d0 [ 33.322311] ? wait_for_completion_io+0x10/0x10 [ 33.326961] ? device_check_offline+0x280/0x280 [ 33.331618] usb_set_configuration+0x1016/0x18c0 [ 33.336363] usbdev_do_ioctl+0x27a8/0x3030 [ 33.340582] ? proc_bulk+0x860/0x860 [ 33.344277] ? check_preemption_disabled+0x41/0x280 [ 33.349275] ? lock_downgrade+0x720/0x720 [ 33.353539] ? check_preemption_disabled+0x41/0x280 [ 33.358859] ? get_pid_task+0xf4/0x190 [ 33.362747] ? proc_fail_nth_write+0x95/0x1d0 [ 33.367254] ? proc_tgid_io_accounting+0x7f0/0x7f0 [ 33.372173] ? mark_held_locks+0xf0/0xf0 [ 33.376222] ? __vfs_write+0xff/0x770 [ 33.380098] ? proc_tgid_io_accounting+0x7f0/0x7f0 [ 33.385012] ? usbdev_compat_ioctl+0x30/0x30 [ 33.389402] usbdev_ioctl+0x21/0x30 [ 33.393027] do_vfs_ioctl+0xcdb/0x12e0 [ 33.396898] ? vfs_write+0x3d7/0x540 [ 33.400597] ? ioctl_preallocate+0x200/0x200 [ 33.405093] ? lock_downgrade+0x720/0x720 [ 33.409225] ? check_preemption_disabled+0x41/0x280 [ 33.414226] ? vfs_write+0x393/0x540 [ 33.417923] ? ksys_write+0x1c8/0x2a0 [ 33.421705] ksys_ioctl+0x9b/0xc0 [ 33.425144] __x64_sys_ioctl+0x6f/0xb0 [ 33.429033] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 33.433614] do_syscall_64+0xf9/0x620 [ 33.437421] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 33.442597] RIP: 0033:0x7fef60bf0799 [ 33.446381] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 33.465381] RSP: 002b:00007ffdc00be688 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 33.473102] RAX: ffffffffffffffda RBX: 00007fef60c34194 RCX: 00007fef60bf0799 [ 33.480359] RDX: 0000000020000000 RSI: 0000000080045505 RDI: 0000000000000004 [ 33.487609] RBP: 00007ffdc00be6a0 R08: 0000000000000001 R09: 0000000000000001 [ 33.494900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 33.502150] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000 [ 33.509637] kobject_add_internal failed for 9-0:1.0 (error: -12 parent: usb9) [ 33.517310] usb usb9: device_add(9-0:1.0) --> -12 [ 33.522475] kasan: CONFIG_KASAN_INLINE enabled [ 33.527266] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 33.535098] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 33.541347] CPU: 1 PID: 8097 Comm: syz-executor675 Not tainted 4.19.208-syzkaller #0 [ 33.549216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 33.558560] RIP: 0010:__device_attach+0xaa/0x470 [ 33.563295] Code: e8 03 42 80 3c 20 00 0f 85 77 03 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 65 08 49 8d bc 24 d0 00 00 00 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 06 0f 8e 42 03 00 00 45 0f b6 b4 24 d0 00 00 [ 33.582261] RSP: 0018:ffff888098567a40 EFLAGS: 00010202 [ 33.587690] RAX: dffffc0000000000 RBX: 1ffff110130acf49 RCX: 0000000000000000 [ 33.594939] RDX: 000000000000001a RSI: 0000000000000008 RDI: 00000000000000d0 [ 33.602186] RBP: ffff8880b312e270 R08: 0000000000000000 R09: ffffed1016625c5a [ 33.609432] R10: ffff8880b312e2d7 R11: 0000000000000000 R12: 0000000000000000 [ 33.616678] R13: ffff888098567c0c R14: 00000000fffffff0 R15: ffff8880b312e2d0 [ 33.623928] FS: 0000555556eb3300(0000) GS:ffff8880ba100000(0000) knlGS:0000000000000000 [ 33.632142] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.638002] CR2: 000055faaa0208c0 CR3: 00000000ab2e3000 CR4: 00000000003406e0 [ 33.645252] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 33.652511] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 33.659770] Call Trace: [ 33.662341] ? really_probe+0xbd0/0xbd0 [ 33.666295] ? usb_ifnum_to_if+0x12b/0x180 [ 33.670604] proc_ioctl+0x526/0x630 [ 33.674316] usbdev_do_ioctl+0x2773/0x3030 [ 33.678533] ? __save_stack_trace+0xaf/0x190 [ 33.682923] ? proc_bulk+0x860/0x860 [ 33.686615] ? trace_hardirqs_off+0x64/0x200 [ 33.691001] ? __kasan_slab_free+0x186/0x1f0 [ 33.695389] ? kmem_cache_free+0x7f/0x260 [ 33.699517] ? putname+0xe1/0x120 [ 33.702946] ? do_sys_open+0x2ba/0x520 [ 33.706818] ? do_syscall_64+0xf9/0x620 [ 33.710770] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 33.716123] ? mark_held_locks+0xf0/0xf0 [ 33.720165] ? debug_check_no_obj_freed+0x201/0x490 [ 33.725162] ? lock_downgrade+0x720/0x720 [ 33.729286] ? lock_acquire+0x170/0x3c0 [ 33.733244] ? usbdev_compat_ioctl+0x30/0x30 [ 33.737631] usbdev_ioctl+0x21/0x30 [ 33.741334] do_vfs_ioctl+0xcdb/0x12e0 [ 33.745270] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 33.750381] ? debug_check_no_obj_freed+0x201/0x490 [ 33.755439] ? ioctl_preallocate+0x200/0x200 [ 33.759847] ? putname+0xe1/0x120 [ 33.763286] ? putname+0xe1/0x120 [ 33.766747] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 33.771844] ? kmem_cache_free+0x226/0x260 [ 33.776066] ? putname+0xe1/0x120 [ 33.779507] ? do_sys_open+0x2bf/0x520 [ 33.783397] ? filp_open+0x70/0x70 [ 33.786923] ksys_ioctl+0x9b/0xc0 [ 33.790364] __x64_sys_ioctl+0x6f/0xb0 [ 33.794256] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 33.798841] do_syscall_64+0xf9/0x620 [ 33.802642] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 33.807912] RIP: 0033:0x7fef60bf0799 [ 33.811930] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 33.836289] RSP: 002b:00007ffdc00be688 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 33.843994] RAX: ffffffffffffffda RBX: 00007fef60c34194 RCX: 00007fef60bf0799 [ 33.851341] RDX: 0000000020000040 RSI: 00000000c0105512 RDI: 0000000000000006 [ 33.858604] RBP: 00007ffdc00be6a0 R08: 0000000000000001 R09: 0000000000000001 [ 33.865872] R10: 000000000000ffff R11: 0000000000000246 R12: 0000000000000001 [ 33.873229] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000 [ 33.880637] Modules linked in: [ 33.884339] ---[ end trace fc8b7b44dfe5f940 ]--- [ 33.889171] RIP: 0010:__device_attach+0xaa/0x470 [ 33.894017] Code: e8 03 42 80 3c 20 00 0f 85 77 03 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 65 08 49 8d bc 24 d0 00 00 00 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 06 0f 8e 42 03 00 00 45 0f b6 b4 24 d0 00 00 [ 33.913893] RSP: 0018:ffff888098567a40 EFLAGS: 00010202 [ 33.919247] RAX: dffffc0000000000 RBX: 1ffff110130acf49 RCX: 0000000000000000 [ 33.926552] RDX: 000000000000001a RSI: 0000000000000008 RDI: 00000000000000d0 [ 33.933878] RBP: ffff8880b312e270 R08: 0000000000000000 R09: ffffed1016625c5a [ 33.941475] R10: ffff8880b312e2d7 R11: 0000000000000000 R12: 0000000000000000 [ 33.948834] R13: ffff888098567c0c R14: 00000000fffffff0 R15: ffff8880b312e2d0 [ 33.956157] FS: 0000555556eb3300(0000) GS:ffff8880ba100000(0000) knlGS:0000000000000000 [ 33.964446] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.970572] CR2: 000055faaa0208c0 CR3: 00000000ab2e3000 CR4: 00000000003406e0 [ 33.977841] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 33.985162] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 33.992492] Kernel panic - not syncing: Fatal exception [ 33.998077] Kernel Offset: disabled [ 34.001693] Rebooting in 86400 seconds..