INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.35' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 27.340278][ T101] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 27.699919][ T101] usb 1-1: config 0 has an invalid interface number: 175 but max is 0 [ 27.708229][ T101] usb 1-1: config 0 has no interface number 0 [ 27.714403][ T101] usb 1-1: config 0 interface 175 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 27.725035][ T101] usb 1-1: config 0 interface 175 altsetting 0 endpoint 0x81 has an invalid bInterval 169, changing to 11 [ 27.736376][ T101] usb 1-1: config 0 interface 175 altsetting 0 endpoint 0x81 has invalid maxpacket 1646, setting to 1024 [ 27.747662][ T101] usb 1-1: config 0 interface 175 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 27.760797][ T101] usb 1-1: New USB device found, idVendor=0846, idProduct=4300, bcdDevice=4b.31 [ 27.770007][ T101] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.779461][ T101] usb 1-1: config 0 descriptor?? [ 27.799976][ T1711] raw: raw_ioctl_ep_enable: fail, usb_ep_enable returned -22 [ 27.822018][ T101] ------------[ cut here ]------------ [ 27.827585][ T101] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 27.833748][ T101] WARNING: CPU: 0 PID: 101 at drivers/usb/core/urb.c:477 usb_submit_urb+0x1188/0x13b0 [ 27.843298][ T101] Kernel panic - not syncing: panic_on_warn set ... [ 27.849876][ T101] CPU: 0 PID: 101 Comm: kworker/0:2 Not tainted 5.4.0-syzkaller #0 [ 27.857738][ T101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 27.867795][ T101] Workqueue: usb_hub_wq hub_event [ 27.872894][ T101] Call Trace: [ 27.876203][ T101] dump_stack+0xef/0x16e [ 27.880434][ T101] ? usb_submit_urb+0x1110/0x13b0 [ 27.885452][ T101] panic+0x2aa/0x6e1 [ 27.889438][ T101] ? add_taint.cold+0x16/0x16 [ 27.894124][ T101] ? __probe_kernel_read+0x188/0x1d0 [ 27.899392][ T101] ? __warn.cold+0x14/0x30 [ 27.903854][ T101] ? __warn+0xd5/0x1c8 [ 27.907908][ T101] ? usb_submit_urb+0x1188/0x13b0 [ 27.912914][ T101] __warn.cold+0x2f/0x30 [ 27.917254][ T101] ? usb_submit_urb+0x1188/0x13b0 [ 27.922321][ T101] report_bug+0x27b/0x2f0 [ 27.926645][ T101] do_error_trap+0x12b/0x1e0 [ 27.931249][ T101] ? usb_submit_urb+0x1188/0x13b0 [ 27.936287][ T101] do_invalid_op+0x32/0x40 [ 27.940711][ T101] ? usb_submit_urb+0x1188/0x13b0 [ 27.945749][ T101] invalid_op+0x23/0x30 [ 27.949913][ T101] RIP: 0010:usb_submit_urb+0x1188/0x13b0 [ 27.955618][ T101] Code: 4d 85 ed 74 2c e8 a8 84 e9 fd 4c 89 f7 e8 20 74 1d ff 41 89 d8 44 89 e1 4c 89 ea 48 89 c6 48 c7 c7 00 29 15 86 e8 10 b3 be fd <0f> 0b e9 20 f4 ff ff e8 7c 84 e9 fd 4c 89 f2 48 b8 00 00 00 00 00 [ 27.976394][ T101] RSP: 0018:ffff8881d5017110 EFLAGS: 00010286 [ 27.982558][ T101] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 27.991710][ T101] RDX: 0000000000000000 RSI: ffffffff8128ebcd RDI: ffffed103aa02e14 [ 27.999708][ T101] RBP: ffff8881d36bdf80 R08: ffff8881d70b3100 R09: fffffbfff11aeca6 [ 28.007675][ T101] R10: fffffbfff11aeca5 R11: ffffffff88d7652f R12: 0000000000000003 [ 28.016423][ T101] R13: ffff8881ce976978 R14: ffff8881cf8c00a0 R15: ffff8881d5079000 [ 28.024505][ T101] ? vprintk_func+0x7d/0x113 [ 28.029085][ T101] ar5523_submit_rx_cmd+0x1fa/0x320 [ 28.034286][ T101] ar5523_probe+0xbb1/0x1a40 [ 28.038871][ T101] ? ar5523_data_rx_cb+0xce0/0xce0 [ 28.044492][ T101] ? __pm_runtime_set_status+0x5d5/0xa10 [ 28.050121][ T101] ? rpm_callback+0x230/0x230 [ 28.055580][ T101] ? lockdep_hardirqs_on+0x382/0x580 [ 28.060875][ T101] ? __pm_runtime_resume+0x111/0x180 [ 28.066170][ T101] usb_probe_interface+0x305/0x7a0 [ 28.071273][ T101] ? usb_probe_device+0x100/0x100 [ 28.076312][ T101] really_probe+0x281/0x6d0 [ 28.080833][ T101] driver_probe_device+0x104/0x210 [ 28.085931][ T101] __device_attach_driver+0x1c2/0x220 [ 28.091634][ T101] ? driver_allows_async_probing+0x160/0x160 [ 28.097593][ T101] bus_for_each_drv+0x162/0x1e0 [ 28.102464][ T101] ? bus_rescan_devices+0x20/0x20 [ 28.107497][ T101] ? _raw_spin_unlock_irqrestore+0x39/0x40 [ 28.113291][ T101] ? lockdep_hardirqs_on+0x382/0x580 [ 28.118571][ T101] __device_attach+0x217/0x360 [ 28.123329][ T101] ? device_bind_driver+0xd0/0xd0 [ 28.128396][ T101] bus_probe_device+0x1e4/0x290 [ 28.133239][ T101] device_add+0x1480/0x1c20 [ 28.137729][ T101] ? wait_for_completion+0x3c0/0x3c0 [ 28.143012][ T101] ? device_links_flush_sync_list+0x350/0x350 [ 28.149069][ T101] ? _raw_spin_unlock_irqrestore+0x39/0x40 [ 28.154975][ T101] usb_set_configuration+0xe67/0x1740 [ 28.160409][ T101] generic_probe+0x9d/0xd5 [ 28.164819][ T101] usb_probe_device+0x99/0x100 [ 28.170118][ T101] ? usb_suspend+0x620/0x620 [ 28.174714][ T101] really_probe+0x281/0x6d0 [ 28.179205][ T101] driver_probe_device+0x104/0x210 [ 28.184683][ T101] __device_attach_driver+0x1c2/0x220 [ 28.190052][ T101] ? driver_allows_async_probing+0x160/0x160 [ 28.196033][ T101] bus_for_each_drv+0x162/0x1e0 [ 28.200893][ T101] ? bus_rescan_devices+0x20/0x20 [ 28.206085][ T101] ? _raw_spin_unlock_irqrestore+0x39/0x40 [ 28.211882][ T101] ? lockdep_hardirqs_on+0x382/0x580 [ 28.217155][ T101] __device_attach+0x217/0x360 [ 28.221969][ T101] ? device_bind_driver+0xd0/0xd0 [ 28.226998][ T101] bus_probe_device+0x1e4/0x290 [ 28.231837][ T101] device_add+0x1480/0x1c20 [ 28.236325][ T101] ? device_links_flush_sync_list+0x350/0x350 [ 28.242376][ T101] usb_new_device.cold+0x6a4/0xe79 [ 28.247579][ T101] hub_event+0x1e59/0x3860 [ 28.251995][ T101] ? hub_port_debounce+0x260/0x260 [ 28.257106][ T101] ? find_held_lock+0x2d/0x110 [ 28.261882][ T101] ? mark_held_locks+0xe0/0xe0 [ 28.266644][ T101] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 28.272473][ T101] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 28.277746][ T101] process_one_work+0x92b/0x1530 [ 28.282684][ T101] ? pwq_dec_nr_in_flight+0x310/0x310 [ 28.288047][ T101] ? do_raw_spin_lock+0x11a/0x280 [ 28.293075][ T101] worker_thread+0x96/0xe20 [ 28.297559][ T101] ? process_one_work+0x1530/0x1530 [ 28.302779][ T101] kthread+0x318/0x420 [ 28.306840][ T101] ? kthread_create_on_node+0xf0/0xf0 [ 28.312214][ T101] ret_from_fork+0x24/0x30 [ 28.317381][ T101] Kernel Offset: disabled [ 28.321745][ T101] Rebooting in 86400 seconds..