[info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 14.538672][ C1] random: crng init done [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.15.194' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 25.516719][ T83] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 25.756680][ T83] usb 1-1: Using ep0 maxpacket: 32 [ 25.916756][ T83] usb 1-1: unable to get BOS descriptor or descriptor too short [ 25.996757][ T83] usb 1-1: config 1 has an invalid interface number: 44 but max is 0 [ 26.004922][ T83] usb 1-1: config 1 has an invalid interface association descriptor of length 2, skipping [ 26.014985][ T83] usb 1-1: config 1 has an invalid interface descriptor of length 2, skipping [ 26.023908][ T83] usb 1-1: config 1 has no interface number 0 [ 26.030062][ T83] usb 1-1: config 1 interface 44 altsetting 177 endpoint 0x89 has invalid maxpacket 707, setting to 64 [ 26.041114][ T83] usb 1-1: config 1 interface 44 altsetting 177 endpoint 0x3 has invalid maxpacket 547, setting to 64 [ 26.052071][ T83] usb 1-1: config 1 interface 44 altsetting 177 has an invalid endpoint with address 0x7E, skipping [ 26.062854][ T83] usb 1-1: config 1 interface 44 altsetting 177 endpoint 0xD has an invalid bInterval 73, changing to 10 [ 26.074132][ T83] usb 1-1: config 1 interface 44 altsetting 177 has an invalid endpoint with address 0x80, skipping [ 26.084940][ T83] usb 1-1: config 1 interface 44 altsetting 177 endpoint 0xB has invalid maxpacket 191, setting to 64 [ 26.095906][ T83] usb 1-1: config 1 interface 44 altsetting 177 bulk endpoint 0x2 has invalid maxpacket 562 [ 26.106015][ T83] usb 1-1: config 1 interface 44 altsetting 177 endpoint 0xF has invalid maxpacket 301, setting to 64 [ 26.117152][ T83] usb 1-1: config 1 interface 44 altsetting 177 has a duplicate endpoint with address 0xD, skipping [ 26.127968][ T83] usb 1-1: config 1 interface 44 altsetting 177 has 9 endpoint descriptors, different from the interface descriptor's value: 12 [ 26.141369][ T83] usb 1-1: config 1 interface 44 has no altsetting 0 [ 26.386741][ T83] usb 1-1: string descriptor 0 read error: -22 [ 26.392980][ T83] usb 1-1: New USB device found, idVendor=0711, idProduct=0903, bcdDevice=a4.52 [ 26.402066][ T83] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.448463][ T83] usb 1-1: USB2VGA dongle found at address 2 [ 26.457717][ T83] usb 1-1: Allocated 8 output buffers [ 26.463139][ T83] ------------[ cut here ]------------ [ 26.468674][ T83] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 26.474788][ T83] WARNING: CPU: 1 PID: 83 at drivers/usb/core/urb.c:477 usb_submit_urb+0x1188/0x13b0 [ 26.484218][ T83] Kernel panic - not syncing: panic_on_warn set ... [ 26.490802][ T83] CPU: 1 PID: 83 Comm: kworker/1:2 Not tainted 5.4.0-syzkaller #0 [ 26.498705][ T83] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 26.509016][ T83] Workqueue: usb_hub_wq hub_event [ 26.514094][ T83] Call Trace: [ 26.517387][ T83] dump_stack+0xef/0x16e [ 26.521618][ T83] ? usb_submit_urb+0x1110/0x13b0 [ 26.526626][ T83] panic+0x2aa/0x6e1 [ 26.530501][ T83] ? add_taint.cold+0x16/0x16 [ 26.535157][ T83] ? __probe_kernel_read+0x188/0x1d0 [ 26.540432][ T83] ? __warn.cold+0x14/0x30 [ 26.544825][ T83] ? __warn+0xd5/0x1c8 [ 26.548871][ T83] ? usb_submit_urb+0x1188/0x13b0 [ 26.553872][ T83] __warn.cold+0x2f/0x30 [ 26.558093][ T83] ? usb_submit_urb+0x1188/0x13b0 [ 26.563094][ T83] report_bug+0x27b/0x2f0 [ 26.567404][ T83] do_error_trap+0x12b/0x1e0 [ 26.571970][ T83] ? usb_submit_urb+0x1188/0x13b0 [ 26.576982][ T83] do_invalid_op+0x32/0x40 [ 26.581376][ T83] ? usb_submit_urb+0x1188/0x13b0 [ 26.586400][ T83] invalid_op+0x23/0x30 [ 26.590622][ T83] RIP: 0010:usb_submit_urb+0x1188/0x13b0 [ 26.596247][ T83] Code: 4d 85 ed 74 2c e8 a8 84 e9 fd 4c 89 f7 e8 20 74 1d ff 41 89 d8 44 89 e1 4c 89 ea 48 89 c6 48 c7 c7 00 29 15 86 e8 10 b3 be fd <0f> 0b e9 20 f4 ff ff e8 7c 84 e9 fd 4c 89 f2 48 b8 00 00 00 00 00 [ 26.615924][ T83] RSP: 0018:ffff8881d8ef6d70 EFLAGS: 00010286 [ 26.622061][ T83] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 26.630023][ T83] RDX: 0000000000000000 RSI: ffffffff8128ebcd RDI: ffffed103b1deda0 [ 26.638047][ T83] RBP: ffff8881d31718a0 R08: ffff8881d915e200 R09: ffffed103b6a6210 [ 26.646038][ T83] R10: ffffed103b6a620f R11: ffff8881db53107f R12: 0000000000000003 [ 26.654008][ T83] R13: ffff8881d1cf78e8 R14: ffff8881cfe1b0a0 R15: ffff8881d9b81f00 [ 26.662232][ T83] ? vprintk_func+0x7d/0x113 [ 26.666922][ T83] sisusb_send_bulk_msg.constprop.0+0x88a/0x1030 [ 26.673306][ T83] ? preempt_schedule_common+0x44/0x60 [ 26.678815][ T83] ? sisusb_recv_bulk_msg.constprop.0+0x830/0x830 [ 26.685319][ T83] ? wake_up_klogd+0x41/0x50 [ 26.689999][ T83] ? vprintk_emit+0x18c/0x3d0 [ 26.694708][ T83] sisusb_send_bridge_packet.constprop.0+0x11c/0x240 [ 26.701369][ T83] ? sisusb_send_bulk_msg.constprop.0+0x1030/0x1030 [ 26.707953][ T83] sisusb_do_init_gfxdevice+0x8a/0x450 [ 26.713535][ T83] ? sisusb_read_memio_word+0x2f0/0x2f0 [ 26.719066][ T83] ? dev_printk_emit+0xba/0xf1 [ 26.723810][ T83] ? dev_vprintk_emit+0x541/0x541 [ 26.729028][ T83] ? really_probe+0x281/0x6d0 [ 26.733829][ T83] sisusb_init_gfxdevice+0xe1/0x18d0 [ 26.739128][ T83] ? hub_event+0x1e59/0x3860 [ 26.743702][ T83] ? worker_thread+0x96/0xe20 [ 26.748366][ T83] ? kthread+0x318/0x420 [ 26.752587][ T83] ? __dev_printk+0x1db/0x203 [ 26.757679][ T83] ? sisusb_set_default_mode+0xa50/0xa50 [ 26.763304][ T83] ? _dev_info+0xd7/0x109 [ 26.767611][ T83] ? _dev_notice+0x109/0x109 [ 26.772179][ T83] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 26.777447][ T83] ? lockdep_init_map+0x1b0/0x5e0 [ 26.782474][ T83] ? kobject_get+0xbc/0x150 [ 26.786955][ T83] sisusb_probe+0x902/0xaf4 [ 26.791437][ T83] usb_probe_interface+0x305/0x7a0 [ 26.796538][ T83] ? usb_probe_device+0x100/0x100 [ 26.801545][ T83] really_probe+0x281/0x6d0 [ 26.806134][ T83] driver_probe_device+0x104/0x210 [ 26.811222][ T83] __device_attach_driver+0x1c2/0x220 [ 26.816662][ T83] ? driver_allows_async_probing+0x160/0x160 [ 26.822632][ T83] bus_for_each_drv+0x162/0x1e0 [ 26.827469][ T83] ? bus_rescan_devices+0x20/0x20 [ 26.832469][ T83] ? _raw_spin_unlock_irqrestore+0x39/0x40 [ 26.838253][ T83] ? lockdep_hardirqs_on+0x382/0x580 [ 26.843513][ T83] __device_attach+0x217/0x360 [ 26.848253][ T83] ? device_bind_driver+0xd0/0xd0 [ 26.853268][ T83] bus_probe_device+0x1e4/0x290 [ 26.858107][ T83] device_add+0x1480/0x1c20 [ 26.862587][ T83] ? wait_for_completion+0x3c0/0x3c0 [ 26.867847][ T83] ? device_links_flush_sync_list+0x350/0x350 [ 26.873904][ T83] usb_set_configuration+0xe67/0x1740 [ 26.879303][ T83] generic_probe+0x9d/0xd5 [ 26.883727][ T83] usb_probe_device+0x99/0x100 [ 26.888474][ T83] ? usb_suspend+0x620/0x620 [ 26.893049][ T83] really_probe+0x281/0x6d0 [ 26.897533][ T83] driver_probe_device+0x104/0x210 [ 26.902622][ T83] __device_attach_driver+0x1c2/0x220 [ 26.907974][ T83] ? driver_allows_async_probing+0x160/0x160 [ 26.914040][ T83] bus_for_each_drv+0x162/0x1e0 [ 26.918997][ T83] ? bus_rescan_devices+0x20/0x20 [ 26.924457][ T83] ? _raw_spin_unlock_irqrestore+0x39/0x40 [ 26.930367][ T83] ? lockdep_hardirqs_on+0x382/0x580 [ 26.935661][ T83] __device_attach+0x217/0x360 [ 26.940413][ T83] ? device_bind_driver+0xd0/0xd0 [ 26.945428][ T83] bus_probe_device+0x1e4/0x290 [ 26.950323][ T83] device_add+0x1480/0x1c20 [ 26.954834][ T83] ? device_links_flush_sync_list+0x350/0x350 [ 26.961092][ T83] usb_new_device.cold+0x6a4/0xe79 [ 26.966203][ T83] hub_event+0x1e59/0x3860 [ 26.970615][ T83] ? hub_port_debounce+0x260/0x260 [ 26.975818][ T83] ? find_held_lock+0x2d/0x110 [ 26.980565][ T83] ? mark_held_locks+0xe0/0xe0 [ 26.985308][ T83] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 26.990839][ T83] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 26.996101][ T83] process_one_work+0x92b/0x1530 [ 27.001030][ T83] ? pwq_dec_nr_in_flight+0x310/0x310 [ 27.006400][ T83] ? do_raw_spin_lock+0x11a/0x280 [ 27.011406][ T83] worker_thread+0x96/0xe20 [ 27.015886][ T83] ? process_one_work+0x1530/0x1530 [ 27.021134][ T83] kthread+0x318/0x420 [ 27.025216][ T83] ? kthread_create_on_node+0xf0/0xf0 [ 27.030592][ T83] ret_from_fork+0x24/0x30 [ 27.035736][ T83] Kernel Offset: disabled [ 27.040103][ T83] Rebooting in 86400 seconds..