INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.210' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 29.117755][ T95] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 29.207969][ T95] usb 1-1: Using ep0 maxpacket: 16 [ 29.367760][ T95] usb 1-1: unable to get BOS descriptor or descriptor too short [ 29.447856][ T95] usb 1-1: config 162 has an invalid interface number: 130 but max is 1 [ 29.456322][ T95] usb 1-1: config 162 has an invalid interface number: 78 but max is 1 [ 29.464886][ T95] usb 1-1: config 162 has no interface number 0 [ 29.471157][ T95] usb 1-1: config 162 has no interface number 1 [ 29.477409][ T95] usb 1-1: config 162 interface 130 altsetting 227 has an invalid endpoint with address 0x0, skipping [ 29.488422][ T95] usb 1-1: config 162 interface 130 altsetting 227 endpoint 0xD has an invalid bInterval 56, changing to 9 [ 29.499822][ T95] usb 1-1: config 162 interface 130 altsetting 227 bulk endpoint 0x7 has invalid maxpacket 1024 [ 29.510258][ T95] usb 1-1: config 162 interface 130 altsetting 227 has a duplicate endpoint with address 0x7, skipping [ 29.521323][ T95] usb 1-1: config 162 interface 78 altsetting 128 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 29.532458][ T95] usb 1-1: config 162 interface 78 altsetting 128 has a duplicate endpoint with address 0x9, skipping [ 29.543418][ T95] usb 1-1: config 162 interface 78 altsetting 128 has a duplicate endpoint with address 0x9, skipping [ 29.554441][ T95] usb 1-1: config 162 interface 78 altsetting 128 has an invalid endpoint with address 0x0, skipping [ 29.565327][ T95] usb 1-1: config 162 interface 78 altsetting 128 has an invalid endpoint with address 0x0, skipping [ 29.576441][ T95] usb 1-1: config 162 interface 78 altsetting 128 has a duplicate endpoint with address 0x7, skipping [ 29.587478][ T95] usb 1-1: config 162 interface 78 altsetting 128 has a duplicate endpoint with address 0x7, skipping [ 29.598443][ T95] usb 1-1: config 162 interface 130 has no altsetting 0 [ 29.605373][ T95] usb 1-1: config 162 interface 78 has no altsetting 0 [ 29.847812][ T95] usb 1-1: string descriptor 0 read error: -22 [ 29.854097][ T95] usb 1-1: New USB device found, idVendor=0711, idProduct=0901, bcdDevice=ec.8b [ 29.863214][ T95] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.909665][ T95] usb 1-1: USB2VGA dongle found at address 2 [ 29.919551][ T95] usb 1-1: Allocated 8 output buffers [ 29.924975][ T95] ------------[ cut here ]------------ [ 29.930621][ T95] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 29.936635][ T95] WARNING: CPU: 0 PID: 95 at drivers/usb/core/urb.c:478 usb_submit_urb+0x1188/0x1460 [ 29.946070][ T95] Kernel panic - not syncing: panic_on_warn set ... [ 29.952637][ T95] CPU: 0 PID: 95 Comm: kworker/0:2 Not tainted 5.5.0-rc6-syzkaller #0 [ 29.960772][ T95] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 29.970834][ T95] Workqueue: usb_hub_wq hub_event [ 29.975850][ T95] Call Trace: [ 29.979177][ T95] dump_stack+0xef/0x16e [ 29.983405][ T95] ? usb_submit_urb+0x1110/0x1460 [ 29.988425][ T95] panic+0x2aa/0x6e1 [ 29.992322][ T95] ? add_taint.cold+0x16/0x16 [ 29.996996][ T95] ? __probe_kernel_read+0x188/0x1d0 [ 30.002283][ T95] ? __warn.cold+0x14/0x30 [ 30.006681][ T95] ? __warn+0xd5/0x1c8 [ 30.010980][ T95] ? usb_submit_urb+0x1188/0x1460 [ 30.016068][ T95] __warn.cold+0x2f/0x30 [ 30.020322][ T95] ? usb_submit_urb+0x1188/0x1460 [ 30.025346][ T95] report_bug+0x27b/0x2f0 [ 30.029673][ T95] do_error_trap+0x12b/0x1e0 [ 30.034316][ T95] ? usb_submit_urb+0x1188/0x1460 [ 30.039336][ T95] do_invalid_op+0x32/0x40 [ 30.043761][ T95] ? usb_submit_urb+0x1188/0x1460 [ 30.048786][ T95] invalid_op+0x23/0x30 [ 30.052939][ T95] RIP: 0010:usb_submit_urb+0x1188/0x1460 [ 30.058563][ T95] Code: 4d 85 ed 74 46 e8 a8 1c e1 fd 4c 89 f7 e8 90 87 17 ff 41 89 d8 44 89 e1 4c 89 ea 48 89 c6 48 c7 c7 60 27 3b 86 e8 30 03 b6 fd <0f> 0b e9 20 f4 ff ff e8 7c 1c e1 fd 0f 1f 44 00 00 e8 72 1c e1 fd [ 30.078161][ T95] RSP: 0018:ffff8881d581ed70 EFLAGS: 00010286 [ 30.084220][ T95] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 30.092186][ T95] RDX: 0000000000000000 RSI: ffffffff8129598d RDI: ffffed103ab03da0 [ 30.100150][ T95] RBP: ffff8881cd8c4800 R08: ffff8881d79e6200 R09: ffffed103b646210 [ 30.108110][ T95] R10: ffffed103b64620f R11: ffff8881db23107f R12: 0000000000000003 [ 30.116084][ T95] R13: ffff8881d11a70c0 R14: ffff8881cd8240a0 R15: ffff8881d5364000 [ 30.124068][ T95] ? vprintk_func+0x7d/0x113 [ 30.128666][ T95] sisusb_send_bulk_msg.constprop.0+0x8b4/0x1070 [ 30.134979][ T95] ? sisusb_recv_bulk_msg.constprop.0+0x830/0x830 [ 30.141397][ T95] ? wake_up_klogd+0x41/0x50 [ 30.145967][ T95] ? vprintk_emit+0x18c/0x3d0 [ 30.150644][ T95] sisusb_send_bridge_packet.constprop.0+0x11c/0x240 [ 30.157307][ T95] ? sisusb_send_bulk_msg.constprop.0+0x1070/0x1070 [ 30.163902][ T95] sisusb_do_init_gfxdevice+0x8a/0x450 [ 30.169364][ T95] ? sisusb_read_memio_word+0x2f0/0x2f0 [ 30.174929][ T95] ? dev_printk_emit+0xba/0xf1 [ 30.179679][ T95] ? dev_vprintk_emit+0x541/0x541 [ 30.184702][ T95] ? really_probe+0x290/0xad0 [ 30.189370][ T95] sisusb_init_gfxdevice+0xe1/0x18d0 [ 30.194655][ T95] ? hub_event+0x21cb/0x4300 [ 30.199288][ T95] ? worker_thread+0x96/0xe20 [ 30.203948][ T95] ? kthread+0x318/0x420 [ 30.208183][ T95] ? __dev_printk+0x1db/0x203 [ 30.212847][ T95] ? sisusb_set_default_mode+0xa50/0xa50 [ 30.218472][ T95] ? _dev_info+0xd7/0x109 [ 30.222788][ T95] ? _dev_notice+0x109/0x109 [ 30.227374][ T95] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 30.232666][ T95] ? lockdep_init_map+0x1b0/0x5e0 [ 30.237682][ T95] ? kobject_get+0xbc/0x150 [ 30.242163][ T95] sisusb_probe+0x902/0xaf4 [ 30.246645][ T95] usb_probe_interface+0x310/0x800 [ 30.251735][ T95] ? usb_probe_device+0x140/0x140 [ 30.256735][ T95] really_probe+0x290/0xad0 [ 30.261216][ T95] driver_probe_device+0x223/0x350 [ 30.266301][ T95] __device_attach_driver+0x1d1/0x290 [ 30.271670][ T95] ? driver_allows_async_probing+0x160/0x160 [ 30.277635][ T95] bus_for_each_drv+0x162/0x1e0 [ 30.282474][ T95] ? bus_rescan_devices+0x20/0x20 [ 30.287478][ T95] ? _raw_spin_unlock_irqrestore+0x39/0x40 [ 30.293265][ T95] ? lockdep_hardirqs_on+0x382/0x580 [ 30.298564][ T95] __device_attach+0x217/0x390 [ 30.303308][ T95] ? device_bind_driver+0xd0/0xd0 [ 30.308307][ T95] bus_probe_device+0x1e4/0x290 [ 30.313136][ T95] device_add+0x1459/0x1bf0 [ 30.317626][ T95] ? wait_for_completion+0x3c0/0x3c0 [ 30.322894][ T95] ? device_link_remove+0x110/0x110 [ 30.328070][ T95] usb_set_configuration+0xe47/0x17d0 [ 30.333421][ T95] generic_probe+0x9d/0xd5 [ 30.337822][ T95] usb_probe_device+0xaf/0x140 [ 30.342650][ T95] ? usb_suspend+0x5f0/0x5f0 [ 30.347219][ T95] really_probe+0x290/0xad0 [ 30.351716][ T95] driver_probe_device+0x223/0x350 [ 30.356855][ T95] __device_attach_driver+0x1d1/0x290 [ 30.362206][ T95] ? driver_allows_async_probing+0x160/0x160 [ 30.368161][ T95] bus_for_each_drv+0x162/0x1e0 [ 30.372988][ T95] ? bus_rescan_devices+0x20/0x20 [ 30.377990][ T95] ? _raw_spin_unlock_irqrestore+0x39/0x40 [ 30.383772][ T95] ? lockdep_hardirqs_on+0x382/0x580 [ 30.389055][ T95] __device_attach+0x217/0x390 [ 30.393811][ T95] ? device_bind_driver+0xd0/0xd0 [ 30.398817][ T95] bus_probe_device+0x1e4/0x290 [ 30.403647][ T95] device_add+0x1459/0x1bf0 [ 30.408230][ T95] ? device_link_remove+0x110/0x110 [ 30.413402][ T95] usb_new_device.cold+0x540/0xcd0 [ 30.418531][ T95] hub_event+0x21cb/0x4300 [ 30.422926][ T95] ? hub_port_debounce+0x350/0x350 [ 30.428054][ T95] ? find_held_lock+0x2d/0x110 [ 30.432833][ T95] ? mark_held_locks+0xe0/0xe0 [ 30.437574][ T95] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 30.443100][ T95] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 30.448365][ T95] process_one_work+0x945/0x15c0 [ 30.453279][ T95] ? pwq_dec_nr_in_flight+0x310/0x310 [ 30.458629][ T95] ? do_raw_spin_lock+0x129/0x290 [ 30.463629][ T95] worker_thread+0x96/0xe20 [ 30.468153][ T95] ? process_one_work+0x15c0/0x15c0 [ 30.473324][ T95] kthread+0x318/0x420 [ 30.477369][ T95] ? kthread_create_on_node+0xf0/0xf0 [ 30.482718][ T95] ret_from_fork+0x24/0x30 [ 30.487804][ T95] Kernel Offset: disabled [ 30.492157][ T95] Rebooting in 86400 seconds..