Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 syzkaller login: [ 15.686346][ C1] random: crng init done [ 15.690607][ C1] random: 7 urandom warning(s) missed due to ratelimiting Warning: Permanently added '10.128.0.33' (ECDSA) to the list of known hosts. executing program [ 26.241507][ T83] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 26.331604][ T83] usb 1-1: Using ep0 maxpacket: 32 [ 26.491313][ T83] usb 1-1: unable to get BOS descriptor or descriptor too short [ 26.731187][ T83] usb 1-1: New USB device found, idVendor=06e1, idProduct=0709, bcdDevice= 2.04 [ 26.740272][ T83] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.748309][ T83] usb 1-1: Product: syz [ 26.752539][ T83] usb 1-1: Manufacturer: syz [ 26.757111][ T83] usb 1-1: SerialNumber: syz [ 26.763937][ T83] usb 1-1: config 0 descriptor?? [ 26.802973][ T83] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN [ 26.814034][ T83] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 26.822420][ T83] CPU: 1 PID: 83 Comm: kworker/1:2 Not tainted 5.7.0-rc1-syzkaller #0 [ 26.830551][ T83] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 26.840591][ T83] Workqueue: usb_hub_wq hub_event [ 26.845604][ T83] RIP: 0010:go7007_usb_probe+0x4ba/0x1d49 [ 26.851299][ T83] Code: c1 ee 03 80 3c 0e 00 0f 85 59 16 00 00 4c 8b a2 e8 05 00 00 48 b9 00 00 00 00 00 fc ff df 49 8d 7c 24 03 48 89 fe 48 c1 ee 03 <0f> b6 0c 0e 48 89 fe 83 e6 07 40 38 f1 7f 08 84 c9 0f 85 11 16 00 [ 26.870881][ T83] RSP: 0018:ffff8881d8b17110 EFLAGS: 00010246 [ 26.876915][ T83] RAX: ffff8881d5259000 RBX: ffff8881cd01a000 RCX: dffffc0000000000 [ 26.884869][ T83] RDX: ffff8881cd019000 RSI: 0000000000000000 RDI: 0000000000000003 [ 26.892821][ T83] RBP: ffff8881cd914000 R08: 0000000000000001 R09: fffffbfff126c8d6 [ 26.900813][ T83] R10: ffffffff893646af R11: fffffbfff126c8d5 R12: 0000000000000000 [ 26.908799][ T83] R13: ffff8881cd0190a0 R14: ffff8881cfeac700 R15: ffffffff86788100 [ 26.916750][ T83] FS: 0000000000000000(0000) GS:ffff8881db300000(0000) knlGS:0000000000000000 [ 26.925666][ T83] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 26.932222][ T83] CR2: 000055bb2db48160 CR3: 00000001c5b6d000 CR4: 00000000001406e0 [ 26.940168][ T83] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 26.948110][ T83] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 26.956049][ T83] Call Trace: [ 26.959313][ T83] ? lockdep_hardirqs_on+0x3c7/0x5d0 [ 26.964567][ T83] ? go7007_usb_interface_reset+0x550/0x550 [ 26.970430][ T83] ? rpm_callback+0x230/0x230 [ 26.975090][ T83] ? lockdep_hardirqs_on+0x3c7/0x5d0 [ 26.980341][ T83] ? __pm_runtime_resume+0x111/0x180 [ 26.985608][ T83] usb_probe_interface+0x310/0x800 [ 26.990700][ T83] ? usb_probe_device+0x230/0x230 [ 26.995704][ T83] really_probe+0x290/0xac0 [ 27.000186][ T83] driver_probe_device+0x223/0x350 [ 27.005267][ T83] __device_attach_driver+0x1d1/0x290 [ 27.010606][ T83] ? driver_allows_async_probing+0x160/0x160 [ 27.016566][ T83] bus_for_each_drv+0x162/0x1e0 [ 27.021387][ T83] ? bus_rescan_devices+0x20/0x20 [ 27.026384][ T83] ? _raw_spin_unlock_irqrestore+0x39/0x40 [ 27.032158][ T83] ? lockdep_hardirqs_on+0x3c7/0x5d0 [ 27.037424][ T83] __device_attach+0x21a/0x390 [ 27.042158][ T83] ? device_bind_driver+0xd0/0xd0 [ 27.047158][ T83] bus_probe_device+0x1e4/0x290 [ 27.051991][ T83] device_add+0x1367/0x1c20 [ 27.056527][ T83] ? wait_for_completion+0x280/0x280 [ 27.061790][ T83] ? device_link_remove+0x110/0x110 [ 27.066997][ T83] ? _raw_spin_unlock_irqrestore+0x39/0x40 [ 27.072784][ T83] usb_set_configuration+0xed4/0x1850 [ 27.078127][ T83] usb_generic_driver_probe+0x9d/0xe0 [ 27.083470][ T83] usb_probe_device+0xd9/0x230 [ 27.088201][ T83] ? usb_suspend+0x600/0x600 [ 27.092824][ T83] really_probe+0x290/0xac0 [ 27.097298][ T83] driver_probe_device+0x223/0x350 [ 27.102379][ T83] __device_attach_driver+0x1d1/0x290 [ 27.107720][ T83] ? driver_allows_async_probing+0x160/0x160 [ 27.113681][ T83] bus_for_each_drv+0x162/0x1e0 [ 27.118500][ T83] ? bus_rescan_devices+0x20/0x20 [ 27.123494][ T83] ? _raw_spin_unlock_irqrestore+0x39/0x40 [ 27.129269][ T83] ? lockdep_hardirqs_on+0x3c7/0x5d0 [ 27.134523][ T83] __device_attach+0x21a/0x390 [ 27.139254][ T83] ? device_bind_driver+0xd0/0xd0 [ 27.144258][ T83] bus_probe_device+0x1e4/0x290 [ 27.149075][ T83] device_add+0x1367/0x1c20 [ 27.153562][ T83] ? device_link_remove+0x110/0x110 [ 27.158740][ T83] usb_new_device.cold+0x552/0xf6e [ 27.163831][ T83] ? hub_disconnect+0x4a0/0x4a0 [ 27.168658][ T83] ? mark_held_locks+0x9f/0xe0 [ 27.173392][ T83] ? _raw_spin_unlock_irq+0x1f/0x30 [ 27.178558][ T83] hub_event+0x226d/0x43c0 [ 27.182945][ T83] ? hub_port_debounce+0x350/0x350 [ 27.188026][ T83] ? umh_clean_and_save_pid+0x1/0xd0 [ 27.193281][ T83] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 27.198794][ T83] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 27.204046][ T83] ? _raw_spin_unlock_irq+0x1f/0x30 [ 27.209218][ T83] process_one_work+0x965/0x1630 [ 27.214126][ T83] ? lock_release+0x720/0x720 [ 27.218773][ T83] ? pwq_dec_nr_in_flight+0x310/0x310 [ 27.224123][ T83] ? rwlock_bug.part.0+0x90/0x90 [ 27.229029][ T83] worker_thread+0x96/0xe20 [ 27.233501][ T83] ? process_one_work+0x1630/0x1630 [ 27.238667][ T83] kthread+0x326/0x430 [ 27.242704][ T83] ? kthread_create_on_node+0xf0/0xf0 [ 27.248043][ T83] ret_from_fork+0x24/0x30 [ 27.252424][ T83] Modules