Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 syzkaller login: [ 16.109157][ C1] random: crng init done [ 16.113518][ C1] random: 7 urandom warning(s) missed due to ratelimiting Warning: Permanently added '10.128.0.92' (ECDSA) to the list of known hosts. executing program [ 36.265179][ T12] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 36.505029][ T12] usb 1-1: Using ep0 maxpacket: 16 [ 36.625109][ T12] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 36.636808][ T12] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1057, setting to 1024 [ 36.648125][ T12] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 36.659640][ T12] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 36.672552][ T12] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 36.681655][ T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.693681][ T12] usb 1-1: config 0 descriptor?? [ 36.715137][ T358] raw-gadget gadget: fail, usb_ep_enable returned -22 executing program [ 36.954943][ T12] aiptek 1-1:0.0: Aiptek using 400 ms programming speed [ 36.963153][ T12] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input5 [ 36.975158][ T12] ------------[ cut here ]------------ [ 36.980821][ T12] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 36.987240][ T12] WARNING: CPU: 0 PID: 12 at drivers/usb/core/urb.c:478 usb_submit_urb+0x1188/0x1460 [ 36.996784][ T12] Kernel panic - not syncing: panic_on_warn set ... [ 37.003377][ T12] CPU: 0 PID: 12 Comm: kworker/0:1 Not tainted 5.7.0-rc6-syzkaller #0 [ 37.012096][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 37.022158][ T12] Workqueue: usb_hub_wq hub_event [ 37.027161][ T12] Call Trace: [ 37.030635][ T12] dump_stack+0xef/0x16e [ 37.034884][ T12] ? usb_submit_urb+0x10e0/0x1460 [ 37.039911][ T12] panic+0x2aa/0x6e1 [ 37.044310][ T12] ? add_taint.cold+0x16/0x16 [ 37.048980][ T12] ? __probe_kernel_read+0x188/0x1d0 [ 37.054240][ T12] ? __warn.cold+0x14/0x30 [ 37.058739][ T12] ? __warn+0xd5/0x1c8 [ 37.062790][ T12] ? usb_submit_urb+0x1188/0x1460 [ 37.067805][ T12] __warn.cold+0x2f/0x30 [ 37.072041][ T12] ? usb_submit_urb+0x1188/0x1460 [ 37.077051][ T12] report_bug+0x27b/0x2f0 [ 37.081383][ T12] do_error_trap+0x12b/0x1e0 [ 37.086016][ T12] ? usb_submit_urb+0x1188/0x1460 [ 37.091164][ T12] do_invalid_op+0x32/0x40 [ 37.095568][ T12] ? usb_submit_urb+0x1188/0x1460 [ 37.100576][ T12] invalid_op+0x23/0x30 [ 37.104732][ T12] RIP: 0010:usb_submit_urb+0x1188/0x1460 [ 37.110344][ T12] Code: 4d 85 ed 74 46 e8 88 b1 d2 fd 4c 89 f7 e8 b0 a4 16 ff 41 89 d8 44 89 e1 4c 89 ea 48 89 c6 48 c7 c7 c0 56 3d 86 e8 70 87 a6 fd <0f> 0b e9 20 f4 ff ff e8 5c b1 d2 fd 0f 1f 44 00 00 e8 52 b1 d2 fd [ 37.130066][ T12] RSP: 0018:ffff8881da21ef98 EFLAGS: 00010286 [ 37.136122][ T12] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 37.144160][ T12] RDX: 0000000000000000 RSI: ffffffff812a339d RDI: ffffed103b443de5 [ 37.152256][ T12] RBP: ffff8881cd070000 R08: ffff8881da2098c0 R09: ffffed103b646292 [ 37.160325][ T12] R10: ffff8881db23148f R11: ffffed103b646291 R12: 0000000000000001 [ 37.168457][ T12] R13: ffff8881da082a08 R14: ffff8881cd54f0a0 R15: ffff8881d9567300 [ 37.176436][ T12] ? vprintk_func+0x7d/0x113 [ 37.181025][ T12] ? usb_submit_urb+0x1188/0x1460 [ 37.186089][ T12] aiptek_open+0xd5/0x130 [ 37.190416][ T12] input_open_device+0x16c/0x2c0 [ 37.195527][ T12] ? store_tabletXtilt+0x230/0x230 [ 37.200734][ T12] kbd_connect+0xfe/0x160 [ 37.205290][ T12] input_attach_handler+0x194/0x200 [ 37.210482][ T12] input_register_device.cold+0xfd/0x316 [ 37.216114][ T12] aiptek_probe.cold+0x28e/0x30d [ 37.221160][ T12] ? store_tabletExecute+0x80/0x80 [ 37.226284][ T12] ? lockdep_hardirqs_on+0x3c7/0x5d0 [ 37.231548][ T12] ? __pm_runtime_resume+0x111/0x180 [ 37.237108][ T12] usb_probe_interface+0x310/0x800 [ 37.242391][ T12] ? usb_probe_device+0x230/0x230 [ 37.247537][ T12] really_probe+0x290/0xac0 [ 37.252030][ T12] driver_probe_device+0x223/0x350 [ 37.257132][ T12] __device_attach_driver+0x1d1/0x290 [ 37.262572][ T12] ? driver_allows_async_probing+0x160/0x160 [ 37.268583][ T12] bus_for_each_drv+0x162/0x1e0 [ 37.273449][ T12] ? bus_rescan_devices+0x20/0x20 [ 37.278503][ T12] ? _raw_spin_unlock_irqrestore+0x39/0x40 [ 37.284423][ T12] ? lockdep_hardirqs_on+0x3c7/0x5d0 [ 37.289693][ T12] __device_attach+0x21a/0x390 [ 37.294473][ T12] ? device_bind_driver+0xd0/0xd0 [ 37.299521][ T12] bus_probe_device+0x1e4/0x290 [ 37.304362][ T12] device_add+0x1367/0x1c40 [ 37.308941][ T12] ? wait_for_completion+0x280/0x280 [ 37.314241][ T12] ? device_link_remove+0x110/0x110 [ 37.319430][ T12] ? _raw_spin_unlock_irqrestore+0x39/0x40 [ 37.325258][ T12] usb_set_configuration+0xed4/0x1850 [ 37.330625][ T12] usb_generic_driver_probe+0x9d/0xe0 [ 37.335987][ T12] usb_probe_device+0xd9/0x230 [ 37.340731][ T12] ? usb_suspend+0x600/0x600 [ 37.345316][ T12] really_probe+0x290/0xac0 [ 37.350132][ T12] driver_probe_device+0x223/0x350 [ 37.355222][ T12] __device_attach_driver+0x1d1/0x290 [ 37.360588][ T12] ? driver_allows_async_probing+0x160/0x160 [ 37.366637][ T12] bus_for_each_drv+0x162/0x1e0 [ 37.371474][ T12] ? bus_rescan_devices+0x20/0x20 [ 37.376496][ T12] ? _raw_spin_unlock_irqrestore+0x39/0x40 [ 37.382385][ T12] ? lockdep_hardirqs_on+0x3c7/0x5d0 [ 37.387653][ T12] __device_attach+0x21a/0x390 [ 37.392409][ T12] ? device_bind_driver+0xd0/0xd0 [ 37.397422][ T12] bus_probe_device+0x1e4/0x290 [ 37.402356][ T12] device_add+0x1367/0x1c40 [ 37.407759][ T12] ? device_link_remove+0x110/0x110 [ 37.413255][ T12] usb_new_device.cold+0x552/0xf6e [ 37.418353][ T12] ? hub_disconnect+0x4a0/0x4a0 [ 37.423204][ T12] ? mark_held_locks+0x9f/0xe0 [ 37.427963][ T12] ? _raw_spin_unlock_irq+0x1f/0x30 [ 37.433151][ T12] hub_event+0x226d/0x43c0 [ 37.437550][ T12] ? hub_port_debounce+0x350/0x350 [ 37.442674][ T12] ? __x64_sys_sysinfo+0x31/0x40 [ 37.447592][ T12] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 37.453117][ T12] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 37.458383][ T12] ? _raw_spin_unlock_irq+0x1f/0x30 [ 37.464269][ T12] process_one_work+0x965/0x1630 [ 37.469214][ T12] ? lock_release+0x720/0x720 [ 37.473866][ T12] ? pwq_dec_nr_in_flight+0x310/0x310 [ 37.479226][ T12] ? rwlock_bug.part.0+0x90/0x90 [ 37.484161][ T12] worker_thread+0x96/0xe20 [ 37.488660][ T12] ? process_one_work+0x1630/0x1630 [ 37.493854][ T12] kthread+0x326/0x430 [ 37.497906][ T12] ? kthread_create_on_node+0xf0/0xf0 [ 37.503262][ T12] ret_from_fork+0x24/0x30 [ 37.508302][ T12] Kernel Offset: disabled [ 37.512736][ T12] Rebooting in 86400 seconds..