[info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [ 15.071556][ C1] random: crng init done [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.156' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 32.489197][ T83] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 32.729176][ T83] usb 1-1: Using ep0 maxpacket: 8 [ 32.849262][ T83] usb 1-1: config 0 has an invalid interface number: 159 but max is 1 [ 32.857522][ T83] usb 1-1: config 0 has an invalid interface number: 80 but max is 1 [ 32.865656][ T83] usb 1-1: config 0 has an invalid descriptor of length 13, skipping remainder of the config [ 32.875915][ T83] usb 1-1: config 0 has no interface number 0 [ 32.882102][ T83] usb 1-1: config 0 has no interface number 1 [ 32.888200][ T83] usb 1-1: config 0 interface 80 altsetting 0 endpoint 0x8F has invalid maxpacket 1245, setting to 1024 [ 32.899359][ T83] usb 1-1: config 0 interface 80 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 1024 [ 32.909473][ T83] usb 1-1: config 0 interface 80 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 32.922373][ T83] usb 1-1: New USB device found, idVendor=08ca, idProduct=0021, bcdDevice=ab.a1 [ 32.931465][ T83] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.941200][ T83] usb 1-1: config 0 descriptor?? [ 32.981047][ T83] aiptek 1-1:0.159: interface has 0 endpoints, but must have minimum 1 [ 32.989616][ T83] aiptek: probe of 1-1:0.159 failed with error -22 tun: can't open /dev/net/tun: please enable CONFIG_TUN=y otherwise fuzzing or reproducing might not work as intended [ 33.189238][ T83] aiptek 1-1:0.80: Aiptek using 400 ms programming speed [ 33.197592][ T83] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.80/input/input6 [ 33.207329][ T83] ------------[ cut here ]------------ [ 33.212988][ T83] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 33.218988][ T83] WARNING: CPU: 1 PID: 83 at drivers/usb/core/urb.c:477 usb_submit_urb+0x1188/0x13b0 [ 33.228451][ T83] Kernel panic - not syncing: panic_on_warn set ... [ 33.235121][ T83] CPU: 1 PID: 83 Comm: kworker/1:2 Not tainted 5.3.0+ #0 [ 33.242128][ T83] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 33.252185][ T83] Workqueue: usb_hub_wq hub_event [ 33.257184][ T83] Call Trace: [ 33.260460][ T83] dump_stack+0xca/0x13e [ 33.264684][ T83] ? usb_submit_urb+0x1100/0x13b0 [ 33.270321][ T83] panic+0x2a3/0x6da [ 33.274192][ T83] ? add_taint.cold+0x16/0x16 [ 33.278846][ T83] ? __probe_kernel_read+0x188/0x1d0 [ 33.284208][ T83] ? __warn.cold+0x5/0x4a [ 33.288515][ T83] ? __warn+0xe3/0x1e0 [ 33.292559][ T83] ? usb_submit_urb+0x1188/0x13b0 [ 33.297561][ T83] __warn.cold+0x20/0x4a [ 33.301786][ T83] ? usb_submit_urb+0x1188/0x13b0 [ 33.306795][ T83] report_bug+0x262/0x2a0 [ 33.311637][ T83] do_error_trap+0x12b/0x1e0 [ 33.316566][ T83] ? usb_submit_urb+0x1188/0x13b0 [ 33.321577][ T83] do_invalid_op+0x32/0x40 [ 33.325996][ T83] ? usb_submit_urb+0x1188/0x13b0 [ 33.331006][ T83] invalid_op+0x23/0x30 [ 33.335149][ T83] RIP: 0010:usb_submit_urb+0x1188/0x13b0 [ 33.340764][ T83] Code: 4d 85 ed 74 2c e8 98 59 ee fd 4c 89 f7 e8 10 4b 1c ff 41 89 d8 44 89 e1 4c 89 ea 48 89 c6 48 c7 c7 80 c2 18 86 e8 2d e5 c3 fd <0f> 0b e9 20 f4 ff ff e8 6c 59 ee fd 4c 89 f2 48 b8 00 00 00 00 00 [ 33.360451][ T83] RSP: 0018:ffff8881d801f0d8 EFLAGS: 00010286 [ 33.366499][ T83] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 33.374463][ T83] RDX: 0000000000000000 RSI: ffffffff8128d9ad RDI: ffffed103b003e0d [ 33.382415][ T83] RBP: ffff8881d9ab7100 R08: ffff8881d8009800 R09: ffffed103b663ee7 [ 33.390367][ T83] R10: ffffed103b663ee6 R11: ffff8881db31f737 R12: 0000000000000001 [ 33.398350][ T83] R13: ffff8881d5d18828 R14: ffff8881c66644a0 R15: ffff8881d9aaf900 [ 33.406318][ T83] ? vprintk_func+0x7d/0x113 [ 33.410988][ T83] ? usb_submit_urb+0x1188/0x13b0 [ 33.415999][ T83] aiptek_open+0xd5/0x130 [ 33.420308][ T83] input_open_device+0x170/0x280 [ 33.425222][ T83] ? store_tabletXtilt+0x230/0x230 [ 33.430321][ T83] kbd_connect+0xfe/0x160 [ 33.434635][ T83] input_attach_handler+0x194/0x200 [ 33.439816][ T83] input_register_device.cold+0xf5/0x246 [ 33.445438][ T83] aiptek_probe.cold+0x28f/0x30d [ 33.450354][ T83] ? store_tabletExecute+0x80/0x80 [ 33.455443][ T83] ? lockdep_hardirqs_on+0x379/0x580 [ 33.460863][ T83] ? __pm_runtime_resume+0x111/0x180 [ 33.466138][ T83] usb_probe_interface+0x305/0x7a0 [ 33.471248][ T83] ? usb_probe_device+0x100/0x100 [ 33.476259][ T83] really_probe+0x281/0x6d0 [ 33.480758][ T83] driver_probe_device+0x101/0x1b0 [ 33.485862][ T83] __device_attach_driver+0x1c2/0x220 [ 33.491215][ T83] ? driver_allows_async_probing+0x160/0x160 [ 33.497169][ T83] bus_for_each_drv+0x162/0x1e0 [ 33.501999][ T83] ? bus_rescan_devices+0x20/0x20 [ 33.507004][ T83] ? _raw_spin_unlock_irqrestore+0x3e/0x50 [ 33.512792][ T83] ? lockdep_hardirqs_on+0x379/0x580 [ 33.518143][ T83] __device_attach+0x217/0x360 [ 33.522889][ T83] ? device_bind_driver+0xd0/0xd0 [ 33.527910][ T83] ? kobject_uevent_env+0x29e/0x1150 [ 33.533171][ T83] ? kobject_uevent_env+0x2a8/0x1150 [ 33.543046][ T83] bus_probe_device+0x1e4/0x290 [ 33.547890][ T83] ? blocking_notifier_call_chain+0x54/0xa0 [ 33.553766][ T83] device_add+0xae6/0x16f0 [ 33.558364][ T83] ? uevent_store+0x50/0x50 [ 33.562940][ T83] ? _raw_spin_unlock_irqrestore+0x3e/0x50 [ 33.568734][ T83] ? create_intf_ep_devs+0x1ba/0x230 [ 33.574087][ T83] usb_set_configuration+0xdf6/0x1670 [ 33.579536][ T83] generic_probe+0x9d/0xd5 [ 33.583938][ T83] usb_probe_device+0x99/0x100 [ 33.589074][ T83] ? usb_suspend+0x620/0x620 [ 33.593734][ T83] really_probe+0x281/0x6d0 [ 33.598323][ T83] driver_probe_device+0x101/0x1b0 [ 33.603426][ T83] __device_attach_driver+0x1c2/0x220 [ 33.608876][ T83] ? driver_allows_async_probing+0x160/0x160 [ 33.614841][ T83] bus_for_each_drv+0x162/0x1e0 [ 33.619697][ T83] ? bus_rescan_devices+0x20/0x20 [ 33.624702][ T83] ? _raw_spin_unlock_irqrestore+0x3e/0x50 [ 33.630588][ T83] ? lockdep_hardirqs_on+0x379/0x580 [ 33.635964][ T83] __device_attach+0x217/0x360 [ 33.640710][ T83] ? device_bind_driver+0xd0/0xd0 [ 33.645733][ T83] ? kobject_uevent_env+0x29e/0x1150 [ 33.651026][ T83] ? kobject_uevent_env+0x2a8/0x1150 [ 33.656292][ T83] bus_probe_device+0x1e4/0x290 [ 33.661213][ T83] ? blocking_notifier_call_chain+0x54/0xa0 [ 33.667176][ T83] device_add+0xae6/0x16f0 [ 33.671580][ T83] ? uevent_store+0x50/0x50 [ 33.676061][ T83] usb_new_device.cold+0x6a4/0xe79 [ 33.681153][ T83] hub_event+0x1b5c/0x3640 [ 33.685569][ T83] ? hub_port_debounce+0x260/0x260 [ 33.690682][ T83] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 33.696206][ T83] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 33.701473][ T83] process_one_work+0x92b/0x1530 [ 33.706407][ T83] ? pwq_dec_nr_in_flight+0x310/0x310 [ 33.711765][ T83] ? do_raw_spin_lock+0x11a/0x280 [ 33.716897][ T83] worker_thread+0x96/0xe20 [ 33.721382][ T83] ? process_one_work+0x1530/0x1530 [ 33.726573][ T83] kthread+0x318/0x420 [ 33.730629][ T83] ? kthread_create_on_node+0xf0/0xf0 [ 33.735982][ T83] ret_from_fork+0x24/0x30 [ 33.741750][ T83] Kernel Offset: disabled [ 33.746135][ T83] Rebooting in 86400 seconds..