executing program syzkaller login: [ 15.138822] usb usb1: BOGUS urb flags, 2 --> 0 [ 15.139498] ------------[ cut here ]------------ [ 15.139955] WARNING: CPU: 3 PID: 2986 at drivers/usb/core/urb.c:498 usb_submit_urb+0xeb9/0x10f0 [ 15.140714] Kernel panic - not syncing: panic_on_warn set ... [ 15.140714] [ 15.141373] CPU: 3 PID: 2986 Comm: syzkaller630695 Not tainted 4.14.0-rc5-next-20171018+ #8 [ 15.142234] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS Bochs 01/01/2011 [ 15.143088] Call Trace: [ 15.143368] dump_stack+0x194/0x257 [ 15.143644] ? arch_local_irq_restore+0x53/0x53 [ 15.143978] ? vsnprintf+0x1ed/0x1900 [ 15.144236] panic+0x1e4/0x41c [ 15.144572] ? refcount_error_report+0x214/0x214 [ 15.145000] ? show_regs_print_info+0x65/0x65 [ 15.145379] ? __warn+0x1a9/0x1e0 [ 15.145613] ? usb_submit_urb+0xeb9/0x10f0 [ 15.145905] __warn+0x1c4/0x1e0 [ 15.146141] ? usb_submit_urb+0xeb9/0x10f0 [ 15.146476] report_bug+0x211/0x2d0 [ 15.146733] fixup_bug+0x40/0x90 [ 15.146967] do_trap+0x260/0x390 [ 15.147292] do_error_trap+0x120/0x390 [ 15.147726] ? do_trap+0x390/0x390 [ 15.148094] ? usb_submit_urb+0xeb9/0x10f0 [ 15.148570] ? vprintk_emit+0x3ea/0x590 [ 15.148998] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 15.149533] do_invalid_op+0x1b/0x20 [ 15.149926] invalid_op+0x18/0x20 [ 15.150280] RIP: 0010:usb_submit_urb+0xeb9/0x10f0 [ 15.150809] RSP: 0018:ffff880039ddf3f0 EFLAGS: 00010286 [ 15.151368] RAX: 0000000000000022 RBX: ffff88006ab64f00 RCX: 0000000000000000 [ 15.152034] RDX: 0000000000000022 RSI: 1ffff100073bbe3e RDI: ffffed00073bbe72 [ 15.152736] RBP: ffff880039ddf448 R08: 0000000000000001 R09: 0000000000000000 [ 15.153372] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 15.154341] R13: 0000000000000002 R14: ffff88006b5d72c0 R15: 000000000000007f [ 15.155166] proc_do_submiturb+0x1f53/0x3860 [ 15.155579] ? find_held_lock+0x35/0x1d0 [ 15.155979] ? usbdev_vm_close+0x50/0x50 [ 15.156397] ? __might_sleep+0x95/0x190 [ 15.156838] ? kasan_check_write+0x14/0x20 [ 15.157278] ? _copy_from_user+0x99/0x110 [ 15.157670] proc_submiturb_compat+0x528/0x7e0 [ 15.158099] ? proc_do_submiturb+0x3860/0x3860 [ 15.158548] usbdev_do_ioctl+0x1632/0x3670 [ 15.158936] ? check_noncircular+0x20/0x20 [ 15.159333] ? processcompl_compat+0x4d0/0x4d0 [ 15.159716] ? __mem_cgroup_threshold+0x8f0/0x8f0 [ 15.160008] ? mark_held_locks+0xaf/0x100 [ 15.160365] ? check_noncircular+0x20/0x20 [ 15.160755] ? find_held_lock+0x35/0x1d0 [ 15.161137] ? __handle_mm_fault+0x247c/0x39c0 [ 15.161531] ? lock_downgrade+0x990/0x990 [ 15.161939] ? find_held_lock+0x35/0x1d0 [ 15.162318] ? avc_has_extended_perms+0x6e5/0x12c0 [ 15.162792] ? lock_downgrade+0x990/0x990 [ 15.163172] ? lock_release+0xa40/0xa40 [ 15.163548] ? check_noncircular+0x20/0x20 [ 15.163934] ? __pmd_alloc+0x4e0/0x4e0 [ 15.164307] ? avc_has_extended_perms+0x7fa/0x12c0 [ 15.164865] ? avc_ss_reset+0x110/0x110 [ 15.165282] ? __do_page_fault+0x64c/0xd60 [ 15.165704] ? lock_downgrade+0x990/0x990 [ 15.166088] ? handle_mm_fault+0x410/0x8d0 [ 15.166473] ? down_read_trylock+0xdb/0x170 [ 15.166896] ? __do_page_fault+0x31e/0xd60 [ 15.167293] ? trace_event_raw_event_sched_switch+0x8a0/0x8a0 [ 15.167842] ? __do_page_fault+0x3d6/0xd60 [ 15.168198] ? rcu_note_context_switch+0x710/0x710 [ 15.168734] ? usbdev_compat_ioctl+0x30/0x30 [ 15.169165] usbdev_ioctl+0x25/0x30 [ 15.169564] do_vfs_ioctl+0x1b1/0x1520 [ 15.169967] ? _cond_resched+0x14/0x30 [ 15.170331] ? ioctl_preallocate+0x2b0/0x2b0 [ 15.170750] ? selinux_capable+0x40/0x40 [ 15.171119] ? putname+0xf3/0x130 [ 15.171438] ? do_sys_open+0x320/0x6d0 [ 15.171822] ? security_file_ioctl+0x89/0xb0 [ 15.172233] SyS_ioctl+0x8f/0xc0 [ 15.172597] entry_SYSCALL_64_fastpath+0x1f/0xbe [ 15.173029] RIP: 0033:0x439089 [ 15.173368] RSP: 002b:00007ffd7d8a88b8 EFLAGS: 00000206 ORIG_RAX: 0000000000000010 [ 15.174116] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 0000000000439089 [ 15.174664] RDX: 0000000020274ffa RSI: 00000000802c550a RDI: 0000000000000003 [ 15.175514] RBP: 0000000000000082 R08: 00000000000000fb R09: 0000000000000000 [ 15.176036] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 15.176730] R13: 0000000000401ce0 R14: 0000000000401d70 R15: 0000000000000000 [ 15.177643] Dumping ftrace buffer: [ 15.178079] (ftrace buffer empty) [ 15.178500] Kernel Offset: disabled [ 15.178885] Rebooting in 86400 seconds..