[ OK ] Listening on Load/Save RF Kill Switch Status /dev/rfkill Watch. Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 syzkaller login: [ 17.949624][ C1] random: crng init done [ 17.953958][ C1] random: 7 urandom warning(s) missed due to ratelimiting Warning: Permanently added '10.128.0.208' (ECDSA) to the list of known hosts. executing program [ 32.011428][ T83] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 32.111586][ T83] usb 1-1: Using ep0 maxpacket: 8 [ 32.231317][ T83] usb 1-1: config 0 has an invalid interface number: 164 but max is 0 [ 32.239602][ T83] usb 1-1: config 0 has no interface number 0 [ 32.245968][ T83] usb 1-1: config 0 interface 164 altsetting 129 bulk endpoint 0x5 has invalid maxpacket 16 [ 32.256334][ T83] usb 1-1: config 0 interface 164 has no altsetting 0 [ 32.263210][ T83] usb 1-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01 [ 32.273525][ T83] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.283542][ T83] usb 1-1: config 0 descriptor?? [ 32.301548][ T361] raw-gadget gadget: fail, usb_ep_enable returned -22 executing program [ 32.561317][ T83] usb 1-1: string descriptor 0 read error: -71 [ 32.581950][ T83] ------------[ cut here ]------------ [ 32.587535][ T83] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 32.593819][ T83] WARNING: CPU: 1 PID: 83 at drivers/usb/core/urb.c:478 usb_submit_urb+0x1188/0x1460 [ 32.603274][ T83] Kernel panic - not syncing: panic_on_warn set ... [ 32.609929][ T83] CPU: 1 PID: 83 Comm: kworker/1:2 Not tainted 5.7.0-rc1-syzkaller #0 [ 32.618054][ T83] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 32.628128][ T83] Workqueue: usb_hub_wq hub_event [ 32.633127][ T83] Call Trace: [ 32.636624][ T83] dump_stack+0xef/0x16e [ 32.640847][ T83] ? usb_submit_urb+0x10f0/0x1460 [ 32.645863][ T83] panic+0x2aa/0x6e1 [ 32.649751][ T83] ? add_taint.cold+0x16/0x16 [ 32.654420][ T83] ? __probe_kernel_read+0x188/0x1d0 [ 32.659693][ T83] ? __warn.cold+0x14/0x30 [ 32.664136][ T83] ? __warn+0xd5/0x1c8 [ 32.668200][ T83] ? usb_submit_urb+0x1188/0x1460 [ 32.673224][ T83] __warn.cold+0x2f/0x30 [ 32.677457][ T83] ? usb_submit_urb+0x1188/0x1460 [ 32.682460][ T83] report_bug+0x27b/0x2f0 [ 32.686784][ T83] do_error_trap+0x12b/0x1e0 [ 32.691378][ T83] ? usb_submit_urb+0x1188/0x1460 [ 32.696824][ T83] do_invalid_op+0x32/0x40 [ 32.701235][ T83] ? usb_submit_urb+0x1188/0x1460 [ 32.706258][ T83] invalid_op+0x23/0x30 [ 32.710489][ T83] RIP: 0010:usb_submit_urb+0x1188/0x1460 [ 32.716113][ T83] Code: 4d 85 ed 74 46 e8 38 c2 d2 fd 4c 89 f7 e8 70 ac 16 ff 41 89 d8 44 89 e1 4c 89 ea 48 89 c6 48 c7 c7 00 52 3d 86 e8 40 96 a6 fd <0f> 0b e9 20 f4 ff ff e8 0c c2 d2 fd 0f 1f 44 00 00 e8 02 c2 d2 fd [ 32.735701][ T83] RSP: 0018:ffff8881d8b26e98 EFLAGS: 00010286 [ 32.741758][ T83] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 32.749706][ T83] RDX: 0000000000000000 RSI: ffffffff812a2d8d RDI: ffffed103b164dc5 [ 32.757782][ T83] RBP: ffff8881d2fa0f00 R08: ffff8881d89fb180 R09: ffffed103b666292 [ 32.765823][ T83] R10: ffff8881db33148f R11: ffffed103b666291 R12: 0000000000000001 [ 32.773772][ T83] R13: ffff8881c70be180 R14: ffff8881cd04a0a0 R15: ffff8881d4f51800 [ 32.781732][ T83] ? vprintk_func+0x7d/0x113 [ 32.786315][ T83] ? usb_submit_urb+0x1188/0x1460 [ 32.791316][ T83] ? lockdep_init_map_waits+0x222/0x7c0 [ 32.796835][ T83] usb_start_wait_urb+0x101/0x4c0 [ 32.801836][ T83] ? sg_clean+0x230/0x230 [ 32.806155][ T83] ? kasan_unpoison_shadow+0x30/0x40 [ 32.811422][ T83] ? memset+0x20/0x40 [ 32.815469][ T83] usb_bulk_msg+0x228/0x550 [ 32.819956][ T83] shark_write_val+0x20b/0x310 [ 32.824715][ T83] ? shark_read_val+0x470/0x470 [ 32.829562][ T83] ? devm_led_classdev_unregister+0x50/0x50 [ 32.835445][ T83] ? shark_read_val+0x470/0x470 [ 32.840419][ T83] snd_tea575x_write+0x78/0x330 [ 32.845296][ T83] ? lockdep_init_map_waits+0x26a/0x7c0 [ 32.850833][ T83] snd_tea575x_hw_init+0x8d/0x170 [ 32.855840][ T83] snd_tea575x_init+0x1f/0x8ad [ 32.860594][ T83] usb_shark_probe+0x5e7/0x780 [ 32.865360][ T83] usb_probe_interface+0x310/0x800 [ 32.870893][ T83] ? usb_probe_device+0x230/0x230 [ 32.875916][ T83] really_probe+0x290/0xac0 [ 32.880417][ T83] driver_probe_device+0x223/0x350 [ 32.885606][ T83] __device_attach_driver+0x1d1/0x290 [ 32.891044][ T83] ? driver_allows_async_probing+0x160/0x160 [ 32.897026][ T83] bus_for_each_drv+0x162/0x1e0 [ 32.901854][ T83] ? bus_rescan_devices+0x20/0x20 [ 32.906854][ T83] ? _raw_spin_unlock_irqrestore+0x39/0x40 [ 32.912656][ T83] ? lockdep_hardirqs_on+0x3c7/0x5d0 [ 32.917931][ T83] __device_attach+0x21a/0x390 [ 32.922671][ T83] ? device_bind_driver+0xd0/0xd0 [ 32.927672][ T83] bus_probe_device+0x1e4/0x290 [ 32.932497][ T83] device_add+0x1367/0x1c20 [ 32.936977][ T83] ? wait_for_completion+0x280/0x280 [ 32.942247][ T83] ? device_link_remove+0x110/0x110 [ 32.947507][ T83] usb_set_configuration+0xed4/0x1850 [ 32.952858][ T83] usb_generic_driver_probe+0x9d/0xe0 [ 32.958208][ T83] usb_probe_device+0xd9/0x230 [ 32.962961][ T83] ? usb_suspend+0x600/0x600 [ 32.967549][ T83] really_probe+0x290/0xac0 [ 32.972042][ T83] driver_probe_device+0x223/0x350 [ 32.977129][ T83] __device_attach_driver+0x1d1/0x290 [ 32.982506][ T83] ? driver_allows_async_probing+0x160/0x160 [ 32.988482][ T83] bus_for_each_drv+0x162/0x1e0 [ 32.993494][ T83] ? bus_rescan_devices+0x20/0x20 [ 32.998496][ T83] ? _raw_spin_unlock_irqrestore+0x39/0x40 [ 33.004279][ T83] ? lockdep_hardirqs_on+0x3c7/0x5d0 [ 33.009545][ T83] __device_attach+0x21a/0x390 [ 33.014297][ T83] ? device_bind_driver+0xd0/0xd0 [ 33.019308][ T83] bus_probe_device+0x1e4/0x290 [ 33.024140][ T83] device_add+0x1367/0x1c20 [ 33.028629][ T83] ? device_link_remove+0x110/0x110 [ 33.033820][ T83] usb_new_device.cold+0x552/0xf6e [ 33.038927][ T83] ? hub_disconnect+0x4a0/0x4a0 [ 33.043764][ T83] ? mark_held_locks+0x9f/0xe0 [ 33.048506][ T83] ? _raw_spin_unlock_irq+0x1f/0x30 [ 33.053703][ T83] hub_event+0x226d/0x43c0 [ 33.058101][ T83] ? hub_port_debounce+0x350/0x350 [ 33.063191][ T83] ? umh_clean_and_save_pid+0x1/0xd0 [ 33.068454][ T83] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 33.073991][ T83] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 33.079516][ T83] ? _raw_spin_unlock_irq+0x1f/0x30 [ 33.084705][ T83] process_one_work+0x965/0x1630 [ 33.089623][ T83] ? lock_release+0x720/0x720 [ 33.094381][ T83] ? pwq_dec_nr_in_flight+0x310/0x310 [ 33.099730][ T83] ? rwlock_bug.part.0+0x90/0x90 [ 33.104761][ T83] worker_thread+0x96/0xe20 [ 33.109261][ T83] ? process_one_work+0x1630/0x1630 [ 33.114452][ T83] kthread+0x326/0x430 [ 33.118503][ T83] ? kthread_create_on_node+0xf0/0xf0 [ 33.123867][ T83] ret_from_fork+0x24/0x30 [ 33.129139][ T83] Kernel Offset: disabled [ 33.133498][ T83] Rebooting in 86400 seconds..