[[36minfo[39;49m] Using makefile-style concurrent boot in runlevel 2.
[ 14.571168][ C1] random: crng init done
[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c.
[....] Starting periodic command scheduler: cron[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c.
Debian GNU/Linux 7 syzkaller ttyS0
Warning: Permanently added '10.128.1.56' (ECDSA) to the list of known hosts.
executing program
syzkaller login: [ 27.967397][ T95] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 28.067629][ T95] usb 1-1: Using ep0 maxpacket: 8
[ 28.187418][ T95] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 28.198855][ T95] usb 1-1: New USB device found, idVendor=0b3b, idProduct=1601, bcdDevice= 1.73
[ 28.208224][ T95] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 28.218086][ T95] usb 1-1: config 0 descriptor??
[ 28.262192][ T95] prism2_usb 1-1:0.0 (unnamed net_device) (uninitialized): prism2_usb: Checking for firmware prism2_ru.fw
[ 28.284404][ T95] usb 1-1: Direct firmware load for prism2_ru.fw failed with error -2
[ 28.292911][ T95] prism2_usb 1-1:0.0 (unnamed net_device) (uninitialized): prism2_usb: Firmware not available, but not essential
[ 28.305053][ T95] prism2_usb 1-1:0.0 (unnamed net_device) (uninitialized): prism2_usb: can continue to use card anyway.
[ 28.347527][ T95] prism2_usb 1-1:0.0 (unnamed net_device) (uninitialized): Failed to submit CTLX[1]: error=-2
[ 28.358148][ T95] prism2_usb 1-1:0.0 (unnamed net_device) (uninitialized): CTLX[1] not in a terminating state(Request pending)
[ 28.370181][ T95] prism2_usb 1-1:0.0 (unnamed net_device) (uninitialized): CTLX[1] error: state(Request pending)
[ 28.467486][ C0] ==================================================================
[ 28.475895][ C0] BUG: KASAN: slab-out-of-bounds in hfa384x_usbin_callback+0x1993/0x2360
[ 28.484299][ C0] Read of size 19671 at addr ffff8881d226413c by task swapper/0/0
[ 28.492080][ C0]
[ 28.494393][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.6.0-rc5-syzkaller #0
[ 28.502267][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 28.512508][ C0] Call Trace:
[ 28.515776][ C0]
[ 28.518608][ C0] dump_stack+0xef/0x16e
[ 28.522831][ C0] ? hfa384x_usbin_callback+0x1993/0x2360
[ 28.528709][ C0] ? hfa384x_usbin_callback+0x1993/0x2360
[ 28.534408][ C0] print_address_description.constprop.0.cold+0xd3/0x314
[ 28.541440][ C0] ? hfa384x_usbin_callback+0x1993/0x2360
[ 28.547406][ C0] ? hfa384x_usbin_callback+0x1993/0x2360
[ 28.553124][ C0] __kasan_report.cold+0x37/0x77
[ 28.558068][ C0] ? hfa384x_usbin_callback+0x1993/0x2360
[ 28.564053][ C0] kasan_report+0xe/0x20
[ 28.568298][ C0] check_memory_region+0x152/0x1c0
[ 28.573678][ C0] memcpy+0x20/0x50
[ 28.577469][ C0] hfa384x_usbin_callback+0x1993/0x2360
[ 28.583010][ C0] __usb_hcd_giveback_urb+0x29a/0x550
[ 28.588390][ C0] usb_hcd_giveback_urb+0x368/0x420
[ 28.593658][ C0] dummy_timer+0x1258/0x32ae
[ 28.598243][ C0] ? dummy_udc_probe+0x930/0x930
[ 28.603180][ C0] ? rcu_read_lock_sched_held+0x9c/0xd0
[ 28.608730][ C0] ? rcu_read_lock_bh_held+0xb0/0xb0
[ 28.614115][ C0] call_timer_fn+0x195/0x6f0
[ 28.618973][ C0] ? dummy_udc_probe+0x930/0x930
[ 28.624042][ C0] ? msleep_interruptible+0x130/0x130
[ 28.629833][ C0] ? rcu_read_lock_sched_held+0x9c/0xd0
[ 28.635486][ C0] ? rcu_read_lock_bh_held+0xb0/0xb0
[ 28.640915][ C0] ? _raw_spin_unlock_irq+0x1f/0x30
[ 28.646114][ C0] ? dummy_udc_probe+0x930/0x930
[ 28.651045][ C0] run_timer_softirq+0x5f9/0x1500
[ 28.656069][ C0] ? add_timer+0x7a0/0x7a0
[ 28.660476][ C0] ? rcu_read_lock_sched_held+0x9c/0xd0
[ 28.666003][ C0] ? rcu_read_lock_bh_held+0xb0/0xb0
[ 28.671826][ C0] __do_softirq+0x21e/0x950
[ 28.676330][ C0] irq_exit+0x178/0x1a0
[ 28.680583][ C0] smp_apic_timer_interrupt+0x141/0x540
[ 28.686219][ C0] apic_timer_interrupt+0xf/0x20
[ 28.691155][ C0]
[ 28.694103][ C0] RIP: 0010:default_idle+0x28/0x300
[ 28.699411][ C0] Code: cc cc 41 56 41 55 65 44 8b 2d 44 77 72 7a 41 54 55 53 0f 1f 44 00 00 e8 b6 62 b5 fb e9 07 00 00 00 0f 00 2d ea 0c 53 00 fb f4 <65> 44 8b 2d 20 77 72 7a 0f 1f 44 00 00 5b 5d 41 5c 41 5d 41 5e c3
[ 28.719004][ C0] RSP: 0018:ffffffff87007d80 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13
[ 28.727422][ C0] RAX: 0000000000000007 RBX: ffffffff8702cc40 RCX: 0000000000000000
[ 28.736133][ C0] RDX: 0000000000000000 RSI: 0000000000000006 RDI: ffffffff8702d48c
[ 28.744094][ C0] RBP: fffffbfff0e05988 R08: ffffffff8702cc40 R09: 0000000000000000
[ 28.752255][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[ 28.760322][ C0] R13: 0000000000000000 R14: ffffffff87e607c0 R15: 0000000000000000
[ 28.768317][ C0] do_idle+0x3e0/0x500
[ 28.772370][ C0] ? arch_cpu_idle_exit+0x40/0x40
[ 28.777385][ C0] ? schedule+0xe1/0x2b0
[ 28.782477][ C0] cpu_startup_entry+0x14/0x20
[ 28.787388][ C0] start_kernel+0xe16/0xe5a
[ 28.791969][ C0] ? mem_encrypt_init+0x5/0x5
[ 28.796969][ C0] ? x86_family+0x3d/0x50
[ 28.801298][ C0] ? load_ucode_bsp+0x23d/0x27d
[ 28.806136][ C0] secondary_startup_64+0xb6/0xc0
[ 28.811288][ C0]
[ 28.813660][ C0] The buggy address belongs to the page:
[ 28.819407][ C0] page:ffffea0007489800 refcount:32744 mapcount:0 mapping:0000000000000000 index:0x0 compound_mapcount: 0
[ 28.830844][ C0] flags: 0x200000000010000(head)
[ 28.835771][ C0] raw: 0200000000010000 dead000000000100 dead000000000122 0000000000000000
[ 28.844456][ C0] raw: 0000000000000000 0000000000000000 00007fe8ffffffff 0000000000000000
[ 28.853290][ C0] page dumped because: kasan: bad access detected
[ 28.859772][ C0]
[ 28.862076][ C0] Memory state around the buggy address:
[ 28.867697][ C0] ffff8881d2268000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 28.875736][ C0] ffff8881d2268080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 28.883783][ C0] >ffff8881d2268100: fc fc fc fc fc fc fc fc 00 00 00 00 00 00 00 00
[ 28.891815][ C0] ^
[ 28.895868][ C0] ffff8881d2268180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 28.903931][ C0] ffff8881d2268200: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc
[ 28.912160][ C0] ==================================================================
[ 28.920437][ C0] Disabling lock debugging due to kernel taint
[ 28.926672][ C0] Kernel panic - not syncing: panic_on_warn set ...
[ 28.933259][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.6.0-rc5-syzkaller #0
[ 28.942519][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 28.952547][ C0] Call Trace:
[ 28.956013][ C0]
[ 28.958877][ C0] dump_stack+0xef/0x16e
[ 28.963127][ C0] panic+0x2aa/0x6e1
[ 28.967013][ C0] ? add_taint.cold+0x16/0x16
[ 28.971676][ C0] ? print_shadow_for_address+0xb8/0x114
[ 28.977288][ C0] ? trace_hardirqs_off+0x50/0x200
[ 28.982421][ C0] ? hfa384x_usbin_callback+0x1993/0x2360
[ 28.988251][ C0] end_report+0x43/0x49
[ 28.992502][ C0] ? hfa384x_usbin_callback+0x1993/0x2360
[ 28.998229][ C0] __kasan_report.cold+0x55/0x77
[ 29.003236][ C0] ? hfa384x_usbin_callback+0x1993/0x2360
[ 29.008949][ C0] kasan_report+0xe/0x20
[ 29.013223][ C0] check_memory_region+0x152/0x1c0
[ 29.018346][ C0] memcpy+0x20/0x50
[ 29.022239][ C0] hfa384x_usbin_callback+0x1993/0x2360
[ 29.027772][ C0] __usb_hcd_giveback_urb+0x29a/0x550
[ 29.033130][ C0] usb_hcd_giveback_urb+0x368/0x420
[ 29.038400][ C0] dummy_timer+0x1258/0x32ae
[ 29.042969][ C0] ? dummy_udc_probe+0x930/0x930
[ 29.047915][ C0] ? rcu_read_lock_sched_held+0x9c/0xd0
[ 29.053569][ C0] ? rcu_read_lock_bh_held+0xb0/0xb0
[ 29.058856][ C0] call_timer_fn+0x195/0x6f0
[ 29.063432][ C0] ? dummy_udc_probe+0x930/0x930
[ 29.068360][ C0] ? msleep_interruptible+0x130/0x130
[ 29.073719][ C0] ? rcu_read_lock_sched_held+0x9c/0xd0
[ 29.079245][ C0] ? rcu_read_lock_bh_held+0xb0/0xb0
[ 29.084505][ C0] ? _raw_spin_unlock_irq+0x1f/0x30
[ 29.089698][ C0] ? dummy_udc_probe+0x930/0x930
[ 29.094616][ C0] run_timer_softirq+0x5f9/0x1500
[ 29.099629][ C0] ? add_timer+0x7a0/0x7a0
[ 29.104159][ C0] ? rcu_read_lock_sched_held+0x9c/0xd0
[ 29.109686][ C0] ? rcu_read_lock_bh_held+0xb0/0xb0
[ 29.115067][ C0] __do_softirq+0x21e/0x950
[ 29.119552][ C0] irq_exit+0x178/0x1a0
[ 29.123744][ C0] smp_apic_timer_interrupt+0x141/0x540
[ 29.129336][ C0] apic_timer_interrupt+0xf/0x20
[ 29.134356][ C0]
[ 29.137284][ C0] RIP: 0010:default_idle+0x28/0x300
[ 29.142459][ C0] Code: cc cc 41 56 41 55 65 44 8b 2d 44 77 72 7a 41 54 55 53 0f 1f 44 00 00 e8 b6 62 b5 fb e9 07 00 00 00 0f 00 2d ea 0c 53 00 fb f4 <65> 44 8b 2d 20 77 72 7a 0f 1f 44 00 00 5b 5d 41 5c 41 5d 41 5e c3
[ 29.162203][ C0] RSP: 0018:ffffffff87007d80 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13
[ 29.170605][ C0] RAX: 0000000000000007 RBX: ffffffff8702cc40 RCX: 0000000000000000
[ 29.179372][ C0] RDX: 0000000000000000 RSI: 0000000000000006 RDI: ffffffff8702d48c
[ 29.187525][ C0] RBP: fffffbfff0e05988 R08: ffffffff8702cc40 R09: 0000000000000000
[ 29.195836][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[ 29.203782][ C0] R13: 0000000000000000 R14: ffffffff87e607c0 R15: 0000000000000000
[ 29.211763][ C0] do_idle+0x3e0/0x500
[ 29.215809][ C0] ? arch_cpu_idle_exit+0x40/0x40
[ 29.220821][ C0] ? schedule+0xe1/0x2b0
[ 29.225219][ C0] cpu_startup_entry+0x14/0x20
[ 29.229973][ C0] start_kernel+0xe16/0xe5a
[ 29.234454][ C0] ? mem_encrypt_init+0x5/0x5
[ 29.239180][ C0] ? x86_family+0x3d/0x50
[ 29.243842][ C0] ? load_ucode_bsp+0x23d/0x27d
[ 29.248684][ C0] secondary_startup_64+0xb6/0xc0
[ 29.254779][ C0] Kernel Offset: disabled
[ 29.259111][ C0] Rebooting in 86400 seconds..