Debian GNU/Linux 9 syzkaller ttyS0 syzkaller login: [ 18.603737][ C1] random: crng init done [ 18.608001][ C1] random: 7 urandom warning(s) missed due to ratelimiting [ 21.237339][ T356] can: request_module (can-proto-0) failed. [ 21.654725][ T356] can: request_module (can-proto-0) failed. [ 21.664112][ T356] can: request_module (can-proto-7) failed. [ 21.674365][ T356] can: request_module (can-proto-0) failed. Warning: Permanently added '10.128.0.124' (ECDSA) to the list of known hosts. 2020/03/25 17:26:52 parsed 1 programs 2020/03/25 17:26:52 executed programs: 0 [ 29.215148][ T524] cgroup: Unknown subsys name 'perf_event' [ 29.219566][ T529] cgroup: Unknown subsys name 'perf_event' [ 29.221917][ T525] cgroup: Unknown subsys name 'perf_event' [ 29.227914][ T529] cgroup: Unknown subsys name 'net_cls' [ 29.238169][ T527] cgroup: Unknown subsys name 'perf_event' [ 29.245920][ T531] cgroup: Unknown subsys name 'perf_event' [ 29.249932][ T525] cgroup: Unknown subsys name 'net_cls' [ 29.255617][ T531] cgroup: Unknown subsys name 'net_cls' [ 29.258466][ T524] cgroup: Unknown subsys name 'net_cls' [ 29.266755][ T527] cgroup: Unknown subsys name 'net_cls' [ 29.276496][ T534] cgroup: Unknown subsys name 'perf_event' [ 29.282608][ T534] cgroup: Unknown subsys name 'net_cls' [ 37.562871][ T95] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 37.592378][ T279] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 37.632846][ T12] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 37.640410][ T5] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 37.652760][ T95] usb 4-1: Using ep0 maxpacket: 8 [ 37.657899][ T3216] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 37.692506][ T279] usb 2-1: Using ep0 maxpacket: 8 [ 37.732575][ T3226] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 37.740497][ T12] usb 6-1: Using ep0 maxpacket: 8 [ 37.747028][ T5] usb 5-1: Using ep0 maxpacket: 8 [ 37.752977][ T3216] usb 3-1: Using ep0 maxpacket: 8 [ 37.782541][ T95] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 37.793419][ T95] usb 4-1: New USB device found, idVendor=0b3b, idProduct=1601, bcdDevice= 1.73 [ 37.802635][ T95] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.812654][ T95] usb 4-1: config 0 descriptor?? [ 37.816060][ T279] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 37.827992][ T279] usb 2-1: New USB device found, idVendor=0b3b, idProduct=1601, bcdDevice= 1.73 [ 37.832608][ T3226] usb 1-1: Using ep0 maxpacket: 8 [ 37.837225][ T279] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.854519][ T279] usb 2-1: config 0 descriptor?? [ 37.857340][ T95] prism2_usb 4-1:0.0 (unnamed net_device) (uninitialized): prism2_usb: Checking for firmware prism2_ru.fw [ 37.882638][ T5] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 37.893126][ T12] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 37.904590][ T3216] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 37.915593][ T95] usb 4-1: Direct firmware load for prism2_ru.fw failed with error -2 [ 37.918629][ T279] prism2_usb 2-1:0.0 (unnamed net_device) (uninitialized): prism2_usb: Checking for firmware prism2_ru.fw [ 37.926584][ T3216] usb 3-1: New USB device found, idVendor=0b3b, idProduct=1601, bcdDevice= 1.73 [ 37.944574][ T3216] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.954086][ T5] usb 5-1: New USB device found, idVendor=0b3b, idProduct=1601, bcdDevice= 1.73 [ 37.957186][ T279] usb 2-1: Direct firmware load for prism2_ru.fw failed with error -2 [ 37.963180][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.963238][ T12] usb 6-1: New USB device found, idVendor=0b3b, idProduct=1601, bcdDevice= 1.73 [ 37.973442][ T279] prism2_usb 2-1:0.0 (unnamed net_device) (uninitialized): prism2_usb: Firmware not available, but not essential [ 37.979602][ T12] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.988644][ T279] prism2_usb 2-1:0.0 (unnamed net_device) (uninitialized): prism2_usb: can continue to use card anyway. [ 38.006801][ T95] prism2_usb 4-1:0.0 (unnamed net_device) (uninitialized): prism2_usb: Firmware not available, but not essential [ 38.031625][ T95] prism2_usb 4-1:0.0 (unnamed net_device) (uninitialized): prism2_usb: can continue to use card anyway. [ 38.042849][ T3226] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 38.052396][ T279] [1] skb 0xffff8881d8d968c0. submit_rx_urb, 345 [ 38.053684][ T3226] usb 1-1: New USB device found, idVendor=0b3b, idProduct=1601, bcdDevice= 1.73 [ 38.059908][ T279] prism2_usb 2-1:0.0 (unnamed net_device) (uninitialized): Failed to submit CTLX[1]: error=-2 [ 38.068491][ T3226] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.078884][ T279] prism2_usb 2-1:0.0 (unnamed net_device) (uninitialized): CTLX[1] not in a terminating state(Request pending) [ 38.087497][ T5] usb 5-1: config 0 descriptor?? [ 38.105209][ T3216] usb 3-1: config 0 descriptor?? [ 38.111739][ T12] usb 6-1: config 0 descriptor?? [ 38.122255][ C1] [1] skb 0xffff8881d8d968c0. hfa384x_usbin_callback, 2939 [ 38.123881][ T3226] usb 1-1: config 0 descriptor?? [ 38.129663][ C1] [1] skb 0xffff8881d8d96a00. submit_rx_urb, 345 [ 38.141051][ C1] [1] skb 0xffff8881d8d968c0. hfa384x_usbin_callback, 3012 [ 38.145811][ T3216] prism2_usb 3-1:0.0 (unnamed net_device) (uninitialized): prism2_usb: Checking for firmware prism2_ru.fw [ 38.148246][ C1] overlen frm: len=19675 [ 38.160391][ C1] general protection fault, probably for non-canonical address 0xdffffc000000099a: 0000 [#1] SMP KASAN [ 38.160396][ C1] KASAN: probably user-memory-access in range [0x0000000000004cd0-0x0000000000004cd7] [ 38.160399][ C1] CPU: 1 PID: 149 Comm: systemd-journal Not tainted 5.6.0-rc5-syzkaller #0 [ 38.160403][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 38.160405][ C1] RIP: 0010:string_nocheck+0x16b/0x220 [ 38.160413][ C1] Code: 8d 34 07 29 ee e8 45 e1 b3 fb 48 3b 6c 24 10 74 3e e8 99 df b3 fb 48 89 df 48 83 c3 01 48 89 f8 48 89 fa 48 c1 e8 03 83 e2 07 <42> 0f b6 04 30 38 d0 7f 04 84 c0 75 71 44 0f b6 63 ff 31 ff 44 89 [ 38.160415][ C1] RSP: 0000:ffff8881db309648 EFLAGS: 00010002 [ 38.160420][ C1] RAX: 000000000000099a RBX: 0000000000004cd8 RCX: ffffffff858b75bf [ 38.160423][ C1] RDX: 0000000000000007 RSI: ffffffff858b7647 RDI: 0000000000004cd7 [ 38.160426][ C1] RBP: ffffffff89663be4 R08: ffff8881d1e18000 R09: fffffbfff12cc77d [ 38.160429][ C1] R10: fffffbfff12cc77c R11: ffffffff89663be3 R12: ffffffff89663f90 [ 38.160432][ C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 00000000ffffffff [ 38.160436][ C1] FS: 00007efcc57f08c0(0000) GS:ffff8881db300000(0000) knlGS:0000000000000000 [ 38.160438][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 38.160442][ C1] CR2: 00007f637d020d40 CR3: 00000001d27f7000 CR4: 00000000001406e0 [ 38.160463][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 38.160466][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 38.160468][ C1] Call Trace: [ 38.160469][ C1] [ 38.160471][ C1] ? widen_string+0x2a0/0x2a0 [ 38.160474][ C1] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 38.160475][ C1] string+0xe5/0xf0 [ 38.160477][ C1] ? hex_string+0x4c0/0x4c0 [ 38.160479][ C1] ? __lock_acquire+0x145e/0x3b60 [ 38.160481][ C1] vsnprintf+0x7d3/0x14f0 [ 38.160483][ C1] ? pointer+0x680/0x680 [ 38.160484][ C1] ? __alloc_skb+0xef/0x5a0 [ 38.160487][ C1] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 38.160488][ C1] vscnprintf+0x29/0x80 [ 38.160490][ C1] vprintk_store+0x40/0x4b0 [ 38.160492][ C1] vprintk_emit+0xc8/0x3d0 [ 38.160494][ C1] vprintk_func+0x75/0x113 [ 38.160496][ C1] printk+0xba/0xed [ 38.160498][ C1] ? kmsg_dump_rewind_nolock+0xd9/0xd9 [ 38.160500][ C1] ? __kmalloc_reserve.isra.0+0xe0/0xe0 [ 38.160502][ C1] hfa384x_usbin_callback+0x12e7/0x2120 [ 38.160504][ C1] __usb_hcd_giveback_urb+0x29a/0x550 [ 38.160507][ C1] usb_hcd_giveback_urb+0x368/0x420 [ 38.160508][ C1] dummy_timer+0x1258/0x32ae [ 38.160510][ C1] ? dummy_udc_probe+0x930/0x930 [ 38.160513][ C1] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 38.160515][ C1] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 38.160517][ C1] call_timer_fn+0x195/0x6f0 [ 38.160519][ C1] ? dummy_udc_probe+0x930/0x930 [ 38.160521][ C1] ? msleep_interruptible+0x130/0x130 [ 38.160523][ C1] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 38.160525][ C1] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 38.160527][ C1] ? _raw_spin_unlock_irq+0x1f/0x30 [ 38.160529][ C1] ? dummy_udc_probe+0x930/0x930 [ 38.160531][ C1] run_timer_softirq+0x5f9/0x1500 [ 38.160533][ C1] ? add_timer+0x7a0/0x7a0 [ 38.160535][ C1] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 38.160537][ C1] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 38.160539][ C1] __do_softirq+0x21e/0x950 [ 38.160541][ C1] irq_exit+0x178/0x1a0 [ 38.160543][ C1] smp_apic_timer_interrupt+0x141/0x540 [ 38.160545][ C1] apic_timer_interrupt+0xf/0x20 [ 38.160546][ C1] [ 38.160548][ C1] RIP: 0033:0x7efcc4afa470 [ 38.160556][ C1] Code: 40 0f b6 c6 48 89 fa f3 aa 48 89 d0 c3 0f 1f 00 66 2e 0f 1f 84 00 00 00 00 00 48 39 d1 0f 82 f7 e0 fc ff 0f 1f 80 00 00 00 00 f9 6e c6 48 89 f8 c4 e2 7d 78 c0 48 83 fa 20 0f 82 a4 00 00 00 [ 38.160558][ C1] RSP: 002b:00007fffbf7840c8 EFLAGS: 00000206 ORIG_RAX: ffffffffffffff13 [ 38.160563][ C1] RAX: 00007efcc55d5160 RBX: 0000555c32817258 RCX: 0000555c32817258 [ 38.160566][ C1] RDX: 0000000000000018 RSI: 0000000000000000 RDI: 0000555c32817258 [ 38.160569][ C1] RBP: 0000000000000001 R08: 0000000000000041 R09: 0000000000000018 [ 38.160572][ C1] R10: 0000000000000069 R11: 0000000000000246 R12: 0000000000000018 [ 38.160575][ C1] R13: 00000000fffffffe R14: 00007fffbf784400 R15: 0000555c32823de0 [ 38.160577][ C1] Modules linked in: [ 38.160581][ C1] ---[ end trace 7524412d0e9cfbaf ]--- [ 38.160583][ C1] RIP: 0010:string_nocheck+0x16b/0x220 [ 38.160590][ C1] Code: 8d 34 07 29 ee e8 45 e1 b3 fb 48 3b 6c 24 10 74 3e e8 99 df b3 fb 48 89 df 48 83 c3 01 48 89 f8 48 89 fa 48 c1 e8 03 83 e2 07 <42> 0f b6 04 30 38 d0 7f 04 84 c0 75 71 44 0f b6 63 ff 31 ff 44 89 [ 38.160592][ C1] RSP: 0000:ffff8881db309648 EFLAGS: 00010002 [ 38.160597][ C1] RAX: 000000000000099a RBX: 0000000000004cd8 RCX: ffffffff858b75bf [ 38.160600][ C1] RDX: 0000000000000007 RSI: ffffffff858b7647 RDI: 0000000000004cd7 [ 38.160603][ C1] RBP: ffffffff89663be4 R08: ffff8881d1e18000 R09: fffffbfff12cc77d [ 38.160606][ C1] R10: fffffbfff12cc77c R11: ffffffff89663be3 R12: ffffffff89663f90 [ 38.160609][ C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 00000000ffffffff [ 38.160613][ C1] FS: 00007efcc57f08c0(0000) GS:ffff8881db300000(0000) knlGS:0000000000000000 [ 38.160615][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 38.160618][ C1] CR2: 00007f637d020d40 CR3: 00000001d27f7000 CR4: 00000000001406e0 [ 38.160621][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 38.160625][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 38.160628][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 38.160635][ C1] Kernel Offset: disabled