[ 46.127478] audit: type=1800 audit(1555124847.200:27): pid=5430 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2469 res=0 [ 46.146982] audit: type=1800 audit(1555124847.200:28): pid=5430 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2450 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 46.907327] audit: type=1800 audit(1555124848.010:29): pid=5430 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0 [ 46.926659] audit: type=1800 audit(1555124848.010:30): pid=5430 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2456 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.43' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 56.221604] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 56.461597] usb 1-1: Using ep0 maxpacket: 8 [ 56.581654] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 56.589163] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 56.597218] usb 1-1: config 0 descriptor has 1 excess byte, ignoring [ 56.603747] usb 1-1: config 0 has no interface number 0 [ 56.609128] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x1 has an invalid bInterval 255, changing to 11 [ 56.619593] usb 1-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 56.631806] usb 1-1: New USB device found, idVendor=050d, idProduct=705c, bcdDevice=dc.5d [ 56.640124] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.649307] usb 1-1: config 0 descriptor?? executing program [ 56.911767] usb 1-1: string descriptor 0 read error: -71 [ 57.281601] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 57.521715] usb 1-1: Using ep0 maxpacket: 8 executing program [ 57.841645] usb 1-1: read over firmware interface failed: -71 [ 58.221662] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 58.481601] usb 1-1: Using ep0 maxpacket: 8 [ 58.612149] WARNING: CPU: 1 PID: 21 at drivers/net/wireless/zydas/zd1211rw/zd_mac.c:238 zd_mac_clear+0xb0/0xe0 [ 58.622433] Kernel panic - not syncing: panic_on_warn set ... [ 58.628330] CPU: 1 PID: 21 Comm: kworker/1:1 Not tainted 5.1.0-rc4-319354-g9a33b36 #3 [ 58.636421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 58.645794] Workqueue: usb_hub_wq hub_event [ 58.650157] Call Trace: [ 58.652796] dump_stack+0xe8/0x16e [ 58.656387] ? zd_mac_clear+0xa0/0xe0 [ 58.660184] panic+0x29d/0x5f2 [ 58.663653] ? __warn_printk+0xf8/0xf8 [ 58.668078] ? zd_mac_clear+0xb0/0xe0 [ 58.672056] ? __probe_kernel_read+0x171/0x1b0 [ 58.676642] ? __warn.cold+0x5/0x48 [ 58.680473] ? __warn+0xe9/0x1d0 [ 58.683839] ? zd_mac_clear+0xb0/0xe0 [ 58.687632] __warn.cold+0x20/0x48 [ 58.691180] ? zd_mac_clear+0xb0/0xe0 [ 58.695252] report_bug+0x262/0x2a0 [ 58.698893] do_error_trap+0x130/0x1f0 [ 58.702791] ? zd_mac_clear+0xb0/0xe0 [ 58.706601] do_invalid_op+0x37/0x40 [ 58.710308] ? zd_mac_clear+0xb0/0xe0 [ 58.714101] invalid_op+0x14/0x20 [ 58.717547] RIP: 0010:zd_mac_clear+0xb0/0xe0 [ 58.721951] Code: e8 85 d0 60 f8 48 8d bb f8 2b 00 00 be ff ff ff ff e8 54 5a 46 f8 31 ff 89 c3 89 c6 e8 d9 d1 60 f8 85 db 75 d4 e8 60 d0 60 f8 <0f> 0b 5b 5d e9 57 d0 60 f8 48 c7 c7 58 05 cb 93 e8 fb e0 97 f8 eb [ 58.741206] RSP: 0018:ffff8880a85cf310 EFLAGS: 00010293 [ 58.746623] RAX: ffff8880a84dc980 RBX: 0000000000000000 RCX: ffffffff8910f507 [ 58.754269] RDX: 0000000000000000 RSI: ffffffff8910f510 RDI: 0000000000000005 [ 58.761855] RBP: 0000000000000001 R08: ffff8880a84dc980 R09: ffffed1013c81a0b [ 58.769276] R10: ffffed1013c81a0a R11: ffff88809e40d057 R12: 00000000ffffffb9 [ 58.776690] R13: ffff88809e408b20 R14: ffff8880a0d34cb0 R15: ffffffff8f979238 [ 58.785255] ? zd_mac_clear+0xa7/0xe0 [ 58.789182] ? zd_mac_clear+0xb0/0xe0 [ 58.793368] probe+0x259/0x590 [ 58.796790] usb_probe_interface+0x31d/0x820 [ 58.802998] ? usb_probe_device+0x150/0x150 [ 58.807484] really_probe+0x2da/0xb10 [ 58.811293] driver_probe_device+0x21d/0x350 [ 58.815710] __device_attach_driver+0x1d8/0x290 [ 58.820560] ? driver_allows_async_probing+0x160/0x160 [ 58.825841] bus_for_each_drv+0x163/0x1e0 [ 58.830018] ? bus_rescan_devices+0x30/0x30 [ 58.834345] ? _raw_spin_unlock_irqrestore+0x4b/0x60 [ 58.839942] ? lockdep_hardirqs_on+0x37e/0x580 [ 58.844529] __device_attach+0x223/0x3a0 [ 58.848586] ? device_bind_driver+0xe0/0xe0 [ 58.853100] ? kobject_uevent_env+0x295/0x13d0 [ 58.857826] bus_probe_device+0x1f1/0x2a0 [ 58.861976] ? blocking_notifier_call_chain+0x59/0xb0 [ 58.867200] device_add+0xad2/0x16e0 [ 58.871007] ? get_device_parent.isra.0+0x560/0x560 [ 58.876187] ? _raw_spin_unlock_irqrestore+0x4b/0x60 [ 58.881397] usb_set_configuration+0xdf7/0x1740 [ 58.886094] generic_probe+0xa2/0xda [ 58.889806] usb_probe_device+0xc0/0x150 [ 58.893913] ? usb_suspend+0x5f0/0x5f0 [ 58.897928] really_probe+0x2da/0xb10 [ 58.901742] driver_probe_device+0x21d/0x350 [ 58.906185] __device_attach_driver+0x1d8/0x290 [ 58.910901] ? driver_allows_async_probing+0x160/0x160 [ 58.916475] bus_for_each_drv+0x163/0x1e0 [ 58.920636] ? bus_rescan_devices+0x30/0x30 [ 58.924977] ? _raw_spin_unlock_irqrestore+0x4b/0x60 [ 58.930147] ? lockdep_hardirqs_on+0x37e/0x580 [ 58.934884] __device_attach+0x223/0x3a0 [ 58.938950] ? device_bind_driver+0xe0/0xe0 [ 58.943269] ? kobject_uevent_env+0x295/0x13d0 [ 58.947950] bus_probe_device+0x1f1/0x2a0 [ 58.952231] ? blocking_notifier_call_chain+0x59/0xb0 [ 58.957657] device_add+0xad2/0x16e0 [ 58.961425] ? get_device_parent.isra.0+0x560/0x560 [ 58.966464] usb_new_device.cold+0x537/0xccf [ 58.970881] hub_event+0x138e/0x3b00 [ 58.974606] ? hub_port_debounce+0x350/0x350 [ 58.979064] ? _raw_spin_unlock_irq+0x29/0x40 [ 58.983572] process_one_work+0x90f/0x1580 [ 58.987815] ? wq_pool_ids_show+0x300/0x300 [ 58.992574] ? do_raw_spin_lock+0x11f/0x290 [ 58.997020] worker_thread+0x9b/0xe20 [ 59.000823] ? process_one_work+0x1580/0x1580 [ 59.005352] kthread+0x313/0x420 [ 59.008752] ? kthread_park+0x1a0/0x1a0 [ 59.012741] ret_from_fork+0x3a/0x50 [ 59.018406] Kernel Offset: disabled [ 59.022651] Rebooting in 86400 seconds..