INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.136' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 57.181496][ T21] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 57.541166][ T21] usb 1-1: config 0 has an invalid interface number: 5 but max is 0 [ 57.549217][ T21] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 57.559345][ T21] usb 1-1: config 0 has no interface number 0 [ 57.565468][ T21] usb 1-1: config 0 interface 5 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.576400][ T21] usb 1-1: New USB device found, idVendor=0846, idProduct=5f00, bcdDevice=c4.d1 [ 57.585446][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.594955][ T21] usb 1-1: config 0 descriptor?? [ 57.634502][ T21] ------------[ cut here ]------------ [ 57.640025][ T21] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 57.646195][ T21] WARNING: CPU: 1 PID: 21 at drivers/usb/core/urb.c:477 usb_submit_urb+0x1188/0x13b0 [ 57.655663][ T21] Kernel panic - not syncing: panic_on_warn set ... [ 57.662229][ T21] CPU: 1 PID: 21 Comm: kworker/1:1 Not tainted 5.2.0-rc1+ #10 [ 57.669656][ T21] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 57.679738][ T21] Workqueue: usb_hub_wq hub_event [ 57.684737][ T21] Call Trace: [ 57.688103][ T21] dump_stack+0xca/0x13e [ 57.692326][ T21] ? usb_submit_urb+0x1130/0x13b0 [ 57.697340][ T21] panic+0x292/0x6c9 [ 57.701211][ T21] ? __warn_printk+0xf3/0xf3 [ 57.705794][ T21] ? usb_submit_urb+0x1188/0x13b0 [ 57.710817][ T21] ? __probe_kernel_read+0x16c/0x1b0 [ 57.716081][ T21] ? __warn.cold+0x5/0x4b [ 57.720410][ T21] ? __warn+0xe4/0x1c0 [ 57.724476][ T21] ? usb_submit_urb+0x1188/0x13b0 [ 57.729477][ T21] __warn.cold+0x20/0x4b [ 57.733719][ T21] ? usb_submit_urb+0x1188/0x13b0 [ 57.738722][ T21] report_bug+0x262/0x2a0 [ 57.743027][ T21] do_error_trap+0x12b/0x1e0 [ 57.747593][ T21] ? usb_submit_urb+0x1188/0x13b0 [ 57.753290][ T21] do_invalid_op+0x32/0x40 [ 57.757682][ T21] ? usb_submit_urb+0x1188/0x13b0 [ 57.762683][ T21] invalid_op+0x14/0x20 [ 57.766831][ T21] RIP: 0010:usb_submit_urb+0x1188/0x13b0 [ 57.772452][ T21] Code: 4d 85 ed 74 2c e8 b8 06 e9 fd 4c 89 f7 e8 c0 44 13 ff 41 89 d8 44 89 e1 4c 89 ea 48 89 c6 48 c7 c7 20 1c 1a 86 e8 03 db be fd <0f> 0b e9 20 f4 ff ff e8 8c 06 e9 fd 4c 89 f2 48 b8 00 00 00 00 00 [ 57.792052][ T21] RSP: 0000:ffff8881d9eff0c0 EFLAGS: 00010286 [ 57.798108][ T21] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 57.806063][ T21] RDX: 0000000000000000 RSI: ffffffff8127e98d RDI: ffffed103b3dfe0a [ 57.814016][ T21] RBP: ffff8881d0cb2080 R08: ffff8881d9e36000 R09: 0000000000000000 [ 57.821964][ T21] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000003 [ 57.830005][ T21] R13: ffff8881cfdceeb8 R14: ffff8881d097ef20 R15: ffff8881d426e100 [ 57.837974][ T21] ? vprintk_func+0x7d/0x113 [ 57.842550][ T21] ? hcd_buffer_alloc+0x163/0x2c0 [ 57.847714][ T21] ar5523_submit_rx_cmd+0x1fa/0x310 [ 57.852923][ T21] ar5523_probe+0xbae/0x1980 [ 57.857494][ T21] ? ar5523_stop+0xd0/0xd0 [ 57.861888][ T21] ? __pm_runtime_set_status+0x5d5/0xa10 [ 57.867515][ T21] ? rpm_callback+0x230/0x230 [ 57.872172][ T21] ? lockdep_hardirqs_on+0x379/0x580 [ 57.877490][ T21] ? __pm_runtime_resume+0x111/0x180 [ 57.882774][ T21] usb_probe_interface+0x305/0x7a0 [ 57.887862][ T21] ? usb_probe_device+0x100/0x100 [ 57.892861][ T21] really_probe+0x281/0x660 [ 57.897338][ T21] driver_probe_device+0x104/0x210 [ 57.902424][ T21] __device_attach_driver+0x1c2/0x220 [ 57.907771][ T21] ? driver_allows_async_probing+0x160/0x160 [ 57.913724][ T21] bus_for_each_drv+0x15c/0x1e0 [ 57.918562][ T21] ? bus_rescan_devices+0x20/0x20 [ 57.923564][ T21] ? _raw_spin_unlock_irqrestore+0x3e/0x50 [ 57.929362][ T21] ? lockdep_hardirqs_on+0x379/0x580 [ 57.934625][ T21] __device_attach+0x217/0x360 [ 57.939379][ T21] ? device_bind_driver+0xd0/0xd0 [ 57.944383][ T21] ? kobject_uevent_env+0x29e/0x1150 [ 57.949644][ T21] ? kobject_uevent_env+0x2a8/0x1150 [ 57.954906][ T21] bus_probe_device+0x1e4/0x290 [ 57.959743][ T21] ? blocking_notifier_call_chain+0x54/0xa0 [ 57.965619][ T21] device_add+0xae6/0x16f0 [ 57.970017][ T21] ? uevent_store+0x50/0x50 [ 57.974497][ T21] usb_set_configuration+0xdf6/0x1670 [ 57.979841][ T21] generic_probe+0x9d/0xd5 [ 57.984232][ T21] usb_probe_device+0x99/0x100 [ 57.988984][ T21] ? usb_suspend+0x620/0x620 [ 57.993549][ T21] really_probe+0x281/0x660 [ 57.998029][ T21] driver_probe_device+0x104/0x210 [ 58.003114][ T21] __device_attach_driver+0x1c2/0x220 [ 58.008460][ T21] ? driver_allows_async_probing+0x160/0x160 [ 58.014412][ T21] bus_for_each_drv+0x15c/0x1e0 [ 58.019239][ T21] ? bus_rescan_devices+0x20/0x20 [ 58.024237][ T21] ? _raw_spin_unlock_irqrestore+0x3e/0x50 [ 58.030016][ T21] ? lockdep_hardirqs_on+0x379/0x580 [ 58.035273][ T21] __device_attach+0x217/0x360 [ 58.040010][ T21] ? device_bind_driver+0xd0/0xd0 [ 58.045011][ T21] ? kobject_uevent_env+0x29e/0x1150 [ 58.050272][ T21] ? kobject_uevent_env+0x2a8/0x1150 [ 58.055530][ T21] bus_probe_device+0x1e4/0x290 [ 58.060374][ T21] ? blocking_notifier_call_chain+0x54/0xa0 [ 58.066262][ T21] device_add+0xae6/0x16f0 [ 58.070671][ T21] ? uevent_store+0x50/0x50 [ 58.075171][ T21] usb_new_device.cold+0x8c1/0x1016 [ 58.080346][ T21] ? usb_port_suspend+0xa40/0xa40 [ 58.085347][ T21] ? mark_held_locks+0x9f/0xe0 [ 58.090089][ T21] ? _raw_spin_unlock_irq+0x24/0x30 [ 58.095264][ T21] hub_event+0x1ada/0x3590 [ 58.099662][ T21] ? hub_port_debounce+0x260/0x260 [ 58.104750][ T21] process_one_work+0x905/0x1570 [ 58.109663][ T21] ? pwq_dec_nr_in_flight+0x310/0x310 [ 58.115009][ T21] ? do_raw_spin_lock+0x11a/0x280 [ 58.120007][ T21] worker_thread+0x96/0xe20 [ 58.124485][ T21] ? process_one_work+0x1570/0x1570 [ 58.129684][ T21] kthread+0x30b/0x410 [ 58.133749][ T21] ? kthread_park+0x1a0/0x1a0 [ 58.138398][ T21] ret_from_fork+0x24/0x30 [ 58.143227][ T21] Kernel Offset: disabled [ 58.147590][ T21] Rebooting in 86400 seconds..