[ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.12' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 37.013986][ T2179] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 37.263773][ T2179] usb 1-1: Using ep0 maxpacket: 16 [ 37.403815][ T2179] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 37.414154][ T2179] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 37.425398][ T2179] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 37.435108][ T2179] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 37.444830][ T2179] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 37.543715][ T2179] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 37.552791][ T2179] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 37.560841][ T2179] usb 1-1: Manufacturer: syz [ 37.568188][ T2179] usb 1-1: config 0 descriptor?? [ 37.943392][ T2179] rc_core: IR keymap rc-hauppauge not found [ 37.949473][ T2179] Registered IR keymap rc-empty [ 37.955170][ T2179] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 37.983467][ T2179] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 38.024637][ T2179] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 38.038634][ T2179] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input5 [ 38.062357][ T2179] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 38.073348][ C0] ================================================================================ [ 38.082811][ C0] UBSAN: shift-out-of-bounds in drivers/media/rc/mceusb.c:1173:29 [ 38.090625][ C0] shift exponent 119 is too large for 32-bit type 'int' [ 38.097561][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.10.0-syzkaller #0 [ 38.105168][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 38.115218][ C0] Call Trace: [ 38.118495][ C0] [ 38.121332][ C0] dump_stack+0x107/0x163 [ 38.125642][ C0] ubsan_epilogue+0xb/0x5a [ 38.130056][ C0] __ubsan_handle_shift_out_of_bounds.cold+0xb1/0x181 [ 38.136800][ C0] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 38.143033][ C0] ? mceusb_dev_printdata+0x25a/0x1000 [ 38.148475][ C0] ? kcov_remote_start+0x91/0x400 [ 38.153485][ C0] mceusb_dev_recv.cold+0x188/0x220 [ 38.158673][ C0] ? mceusb_tx_ir+0x760/0x760 [ 38.163333][ C0] __usb_hcd_giveback_urb+0x2b0/0x5c0 [ 38.168723][ C0] usb_hcd_giveback_urb+0x38c/0x430 [ 38.173933][ C0] dummy_timer+0x11f4/0x32a0 [ 38.178507][ C0] ? dummy_dequeue+0x4c0/0x4c0 [ 38.183262][ C0] ? dummy_dequeue+0x4c0/0x4c0 [ 38.188041][ C0] call_timer_fn+0x1a5/0x690 [ 38.192621][ C0] ? timer_fixup_init+0x60/0x60 [ 38.197459][ C0] ? lock_downgrade+0x6d0/0x6d0 [ 38.202309][ C0] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 38.208539][ C0] ? lockdep_hardirqs_on_prepare+0x129/0x3f0 [ 38.214508][ C0] ? dummy_dequeue+0x4c0/0x4c0 [ 38.219287][ C0] __run_timers.part.0+0x692/0xa50 [ 38.224395][ C0] ? call_timer_fn+0x690/0x690 [ 38.229167][ C0] ? lapic_next_event+0x4d/0x80 [ 38.234015][ C0] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 38.240296][ C0] ? clockevents_program_event+0x12b/0x3b0 [ 38.246112][ C0] ? tick_program_event+0xa8/0x130 [ 38.251235][ C0] run_timer_softirq+0x80/0x120 [ 38.256091][ C0] __do_softirq+0x1b7/0x9c5 [ 38.260619][ C0] asm_call_irq_on_stack+0xf/0x20 [ 38.265655][ C0] [ 38.268620][ C0] do_softirq_own_stack+0x80/0xa0 [ 38.273671][ C0] __irq_exit_rcu+0x119/0x1b0 [ 38.278374][ C0] irq_exit_rcu+0x5/0x10 [ 38.282643][ C0] sysvec_apic_timer_interrupt+0x43/0xa0 [ 38.288300][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 38.294423][ C0] RIP: 0010:acpi_idle_do_entry+0x1c9/0x250 [ 38.300320][ C0] Code: 8d 61 7f fb 84 db 75 ac e8 04 5b 7f fb e8 4f 0f 85 fb e9 0c 00 00 00 e8 f5 5a 7f fb 0f 00 2d ce 86 87 00 e8 e9 5a 7f fb fb f4 <9c> 5b 81 e3 00 02 00 00 fa 31 ff 48 89 de e8 c4 62 7f fb 48 85 db [ 38.319937][ C0] RSP: 0018:ffffffff87407d60 EFLAGS: 00000293 [ 38.326004][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 38.333990][ C0] RDX: ffffffff87431940 RSI: ffffffff85c0eb77 RDI: ffffffff85c0eb61 [ 38.341962][ C0] RBP: ffff888102eb7064 R08: 0000000000000001 R09: 0000000000000001 [ 38.349933][ C0] R10: ffffffff8145fae8 R11: 0000000000000000 R12: 0000000000000001 [ 38.358019][ C0] R13: ffff888102eb7000 R14: ffff888102eb7064 R15: ffff888105c87004 [ 38.365996][ C0] ? trace_hardirqs_on+0x38/0x1a0 [ 38.371029][ C0] ? acpi_idle_do_entry+0x1c7/0x250 [ 38.376222][ C0] ? acpi_idle_do_entry+0x1b1/0x250 [ 38.381449][ C0] acpi_idle_enter+0x355/0x4f0 [ 38.386242][ C0] cpuidle_enter_state+0x1b1/0xc80 [ 38.391344][ C0] cpuidle_enter+0x4a/0xa0 [ 38.395752][ C0] do_idle+0x3df/0x580 [ 38.399816][ C0] ? arch_cpu_idle_exit+0x30/0x30 [ 38.404873][ C0] ? schedule+0xdf/0x270 [ 38.409104][ C0] ? trace_init_perf_perm_irq_work_exit+0xe/0xe [ 38.415362][ C0] cpu_startup_entry+0x14/0x20 [ 38.420112][ C0] start_kernel+0x498/0x4b9 [ 38.424598][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 38.430471][ C0] ================================================================================ [ 38.439731][ C0] Kernel panic - not syncing: panic_on_warn set ... [ 38.446300][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.10.0-syzkaller #0 [ 38.453908][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 38.463943][ C0] Call Trace: [ 38.467207][ C0] [ 38.470055][ C0] dump_stack+0x107/0x163 [ 38.474367][ C0] panic+0x343/0x77f [ 38.478244][ C0] ? __warn_printk+0xf3/0xf3 [ 38.482835][ C0] ? secondary_startup_64_no_verify+0xb0/0xbb [ 38.488900][ C0] ? ubsan_epilogue+0x3e/0x5a [ 38.493557][ C0] ubsan_epilogue+0x54/0x5a [ 38.498059][ C0] __ubsan_handle_shift_out_of_bounds.cold+0xb1/0x181 [ 38.504827][ C0] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 38.511050][ C0] ? mceusb_dev_printdata+0x25a/0x1000 [ 38.516510][ C0] ? kcov_remote_start+0x91/0x400 [ 38.521533][ C0] mceusb_dev_recv.cold+0x188/0x220 [ 38.526715][ C0] ? mceusb_tx_ir+0x760/0x760 [ 38.531374][ C0] __usb_hcd_giveback_urb+0x2b0/0x5c0 [ 38.536743][ C0] usb_hcd_giveback_urb+0x38c/0x430 [ 38.542025][ C0] dummy_timer+0x11f4/0x32a0 [ 38.546597][ C0] ? dummy_dequeue+0x4c0/0x4c0 [ 38.551339][ C0] ? dummy_dequeue+0x4c0/0x4c0 [ 38.556099][ C0] call_timer_fn+0x1a5/0x690 [ 38.560681][ C0] ? timer_fixup_init+0x60/0x60 [ 38.565601][ C0] ? lock_downgrade+0x6d0/0x6d0 [ 38.570432][ C0] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 38.576655][ C0] ? lockdep_hardirqs_on_prepare+0x129/0x3f0 [ 38.582625][ C0] ? dummy_dequeue+0x4c0/0x4c0 [ 38.587371][ C0] __run_timers.part.0+0x692/0xa50 [ 38.592470][ C0] ? call_timer_fn+0x690/0x690 [ 38.597217][ C0] ? lapic_next_event+0x4d/0x80 [ 38.602047][ C0] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 38.608282][ C0] ? clockevents_program_event+0x12b/0x3b0 [ 38.614083][ C0] ? tick_program_event+0xa8/0x130 [ 38.619190][ C0] run_timer_softirq+0x80/0x120 [ 38.624039][ C0] __do_softirq+0x1b7/0x9c5 [ 38.628539][ C0] asm_call_irq_on_stack+0xf/0x20 [ 38.633537][ C0] [ 38.636475][ C0] do_softirq_own_stack+0x80/0xa0 [ 38.641534][ C0] __irq_exit_rcu+0x119/0x1b0 [ 38.646215][ C0] irq_exit_rcu+0x5/0x10 [ 38.650440][ C0] sysvec_apic_timer_interrupt+0x43/0xa0 [ 38.656057][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 38.662019][ C0] RIP: 0010:acpi_idle_do_entry+0x1c9/0x250 [ 38.667826][ C0] Code: 8d 61 7f fb 84 db 75 ac e8 04 5b 7f fb e8 4f 0f 85 fb e9 0c 00 00 00 e8 f5 5a 7f fb 0f 00 2d ce 86 87 00 e8 e9 5a 7f fb fb f4 <9c> 5b 81 e3 00 02 00 00 fa 31 ff 48 89 de e8 c4 62 7f fb 48 85 db [ 38.687421][ C0] RSP: 0018:ffffffff87407d60 EFLAGS: 00000293 [ 38.693490][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 38.701442][ C0] RDX: ffffffff87431940 RSI: ffffffff85c0eb77 RDI: ffffffff85c0eb61 [ 38.709419][ C0] RBP: ffff888102eb7064 R08: 0000000000000001 R09: 0000000000000001 [ 38.717374][ C0] R10: ffffffff8145fae8 R11: 0000000000000000 R12: 0000000000000001 [ 38.725329][ C0] R13: ffff888102eb7000 R14: ffff888102eb7064 R15: ffff888105c87004 [ 38.733297][ C0] ? trace_hardirqs_on+0x38/0x1a0 [ 38.738327][ C0] ? acpi_idle_do_entry+0x1c7/0x250 [ 38.743522][ C0] ? acpi_idle_do_entry+0x1b1/0x250 [ 38.748722][ C0] acpi_idle_enter+0x355/0x4f0 [ 38.753469][ C0] cpuidle_enter_state+0x1b1/0xc80 [ 38.758576][ C0] cpuidle_enter+0x4a/0xa0 [ 38.762976][ C0] do_idle+0x3df/0x580 [ 38.767041][ C0] ? arch_cpu_idle_exit+0x30/0x30 [ 38.772042][ C0] ? schedule+0xdf/0x270 [ 38.776281][ C0] ? trace_init_perf_perm_irq_work_exit+0xe/0xe [ 38.782507][ C0] cpu_startup_entry+0x14/0x20 [ 38.787252][ C0] start_kernel+0x498/0x4b9 [ 38.791750][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 38.798200][ C0] Kernel Offset: disabled [ 38.802588][ C0] Rebooting in 86400 seconds..