[info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c[ 14.680377][ C0] random: crng init done . [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.18' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 25.368314][ T83] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 25.617769][ T83] usb 1-1: Using ep0 maxpacket: 32 [ 25.737878][ T83] usb 1-1: config 0 has an invalid interface number: 202 but max is 0 [ 25.746108][ T83] usb 1-1: config 0 has no interface number 0 [ 25.752411][ T83] usb 1-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=3b.0c [ 25.762023][ T83] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.771719][ T83] usb 1-1: config 0 descriptor?? executing program [ 26.047925][ T83] usb 1-1: string descriptor 0 read error: -71 [ 26.055863][ T83] flexcop_usb: running at HIGH speed. [ 26.077858][ T83] flexcop_usb: error while writing dword from 34 (520). [ 26.097903][ T83] flexcop_usb: error while writing dword from 36 (528). [ 26.147866][ T83] flexcop_usb: error while reading dword from 161 (516). [ 26.168272][ T83] flexcop_usb: error while writing dword from 33 (516). [ 26.217850][ T83] flexcop_usb: error while writing dword from 33 (516). [ 26.237818][ T83] flexcop_usb: error while reading dword from 161 (516). [ 26.257828][ T83] flexcop_usb: error while reading dword from 247 (1820). [ 26.277822][ T83] flexcop_usb: error while writing dword from 119 (1820). [ 26.298298][ T83] flexcop_usb: error while reading dword from 176 (768). [ 26.317826][ T83] flexcop_usb: error while reading dword from 162 (520). [ 26.337828][ T83] flexcop_usb: error while writing dword from 48 (768). [ 26.357908][ T83] flexcop_usb: error while writing dword from 34 (520). [ 26.377797][ T83] flexcop_usb: error while reading dword from 176 (768). [ 26.397824][ T83] flexcop_usb: error while reading dword from 162 (520). [ 26.417811][ T83] flexcop_usb: error while writing dword from 48 (768). [ 26.437824][ T83] flexcop_usb: error while writing dword from 34 (520). [ 26.457814][ T83] flexcop_usb: error while reading dword from 177 (772). [ 26.477815][ T83] flexcop_usb: error while reading dword from 162 (520). [ 26.497813][ T83] flexcop_usb: error while writing dword from 49 (772). [ 26.517811][ T83] flexcop_usb: error while writing dword from 34 (520). [ 26.537810][ T83] flexcop_usb: error while reading dword from 177 (772). [ 26.558256][ T83] flexcop_usb: error while reading dword from 162 (520). [ 26.577824][ T83] flexcop_usb: error while writing dword from 49 (772). [ 26.597833][ T83] flexcop_usb: error while writing dword from 34 (520). [ 26.617813][ T83] flexcop_usb: error while reading dword from 178 (776). [ 26.637811][ T83] flexcop_usb: error while reading dword from 162 (520). [ 26.657839][ T83] flexcop_usb: error while writing dword from 50 (776). [ 26.677831][ T83] flexcop_usb: error while writing dword from 34 (520). [ 26.697818][ T83] flexcop_usb: error while reading dword from 178 (776). [ 26.717824][ T83] flexcop_usb: error while reading dword from 162 (520). [ 26.737805][ T83] flexcop_usb: error while writing dword from 50 (776). [ 26.757795][ T83] flexcop_usb: error while writing dword from 34 (520). [ 26.777826][ T83] flexcop_usb: error while writing dword from 51 (780). [ 26.797829][ T83] flexcop_usb: error while reading dword from 162 (520). [ 26.818220][ T83] flexcop_usb: error while writing dword from 34 (520). [ 26.837811][ T83] flexcop_usb: error while reading dword from 178 (776). [ 26.857813][ T83] flexcop_usb: error while writing dword from 50 (776). [ 26.877819][ T83] flexcop_usb: error while reading dword from 162 (520). [ 26.897820][ T83] flexcop_usb: error while writing dword from 34 (520). [ 26.917829][ T83] flexcop_usb: error while reading dword from 162 (520). [ 26.937867][ T83] flexcop_usb: error while writing dword from 34 (520). [ 26.944926][ T83] dvbdev: DVB: registering new adapter (FlexCop Digital TV device) [ 26.977892][ T83] b2c2-flexcop: reading of MAC address failed. [ 26.977892][ T83] [ 27.037845][ T83] CX24123: wrong demod revision: 0 [ 27.337850][ T83] nxt200x: Unknown/Unsupported NXT chip: 00 00 00 00 00 [ 27.357834][ T83] lgdt330x 0-0059: Demod loaded for LGDT3303 chip [ 27.364953][ T83] tuner-simple 0-0061: creating new instance [ 27.371147][ T83] tuner-simple 0-0061: type set to 64 (LG TDVS-H06xF) [ 27.377995][ T83] b2c2-flexcop: found 'LG Electronics LGDT3303 VSB/QAM Frontend' . [ 27.386034][ T83] usb 1-1: DVB: registering adapter 0 frontend 0 (LG Electronics LGDT3303 VSB/QAM Frontend)... [ 27.397620][ T83] b2c2-flexcop: initialization of 'Air2PC/AirStar 2 ATSC 3rd generation (HD5000)' at the 'USB' bus controlled by a 'FlexCopIII' complete [ 27.411720][ T83] kasan: CONFIG_KASAN_INLINE enabled [ 27.417074][ T83] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 27.425277][ T83] general protection fault: 0000 [#1] SMP KASAN [ 27.431509][ T83] CPU: 1 PID: 83 Comm: kworker/1:2 Not tainted 5.4.0-rc6+ #0 [ 27.438850][ T83] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 27.448953][ T83] Workqueue: usb_hub_wq hub_event [ 27.453954][ T83] RIP: 0010:flexcop_usb_probe.cold+0x1cb/0x7bd [ 27.460079][ T83] Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 74 05 e8 51 14 62 fd 48 8b 5b 18 b8 ff ff 37 00 48 c1 e0 2a 48 8d 7b 04 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 01 38 d0 7c 08 84 d2 0f 85 c1 [ 27.479657][ T83] RSP: 0018:ffff8881d89f7298 EFLAGS: 00010247 [ 27.485695][ T83] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff840356ab [ 27.493639][ T83] RDX: 0000000000000000 RSI: ffffffff8403576b RDI: 0000000000000004 [ 27.501583][ T83] RBP: ffff8881cfd2c008 R08: ffff8881d8c7c800 R09: fffffbfff11ab3ae [ 27.509526][ T83] R10: fffffbfff11ab3ad R11: ffffffff88d59d6f R12: ffff8881cfd2c048 [ 27.517489][ T83] R13: 0000000000000000 R14: ffff8881cfd2c000 R15: ffff8881cfdd0000 [ 27.525436][ T83] FS: 0000000000000000(0000) GS:ffff8881db300000(0000) knlGS:0000000000000000 [ 27.534338][ T83] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 27.540895][ T83] CR2: 00000000009ab4a0 CR3: 00000001c65ae000 CR4: 00000000001406e0 [ 27.548842][ T83] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 27.556834][ T83] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 27.564779][ T83] Call Trace: [ 27.568047][ T83] ? rpm_callback+0x230/0x230 [ 27.572702][ T83] ? lockdep_hardirqs_on+0x382/0x580 [ 27.577963][ T83] ? __pm_runtime_resume+0x111/0x180 [ 27.583225][ T83] usb_probe_interface+0x305/0x7a0 [ 27.588358][ T83] ? usb_probe_device+0x100/0x100 [ 27.593363][ T83] really_probe+0x281/0x6d0 [ 27.597844][ T83] driver_probe_device+0x104/0x210 [ 27.602929][ T83] __device_attach_driver+0x1c2/0x220 [ 27.608274][ T83] ? driver_allows_async_probing+0x160/0x160 [ 27.614226][ T83] bus_for_each_drv+0x162/0x1e0 [ 27.619060][ T83] ? bus_rescan_devices+0x20/0x20 [ 27.624060][ T83] ? _raw_spin_unlock_irqrestore+0x3e/0x50 [ 27.629837][ T83] ? lockdep_hardirqs_on+0x382/0x580 [ 27.635096][ T83] __device_attach+0x217/0x360 [ 27.639841][ T83] ? device_bind_driver+0xd0/0xd0 [ 27.644842][ T83] ? kobject_uevent_env+0x29e/0x1160 [ 27.650112][ T83] ? kobject_uevent_env+0x2a8/0x1160 [ 27.655376][ T83] bus_probe_device+0x1e4/0x290 [ 27.660209][ T83] ? blocking_notifier_call_chain+0x54/0xa0 [ 27.666088][ T83] device_add+0xae6/0x16f0 [ 27.670487][ T83] ? uevent_store+0x50/0x50 [ 27.674972][ T83] ? _raw_spin_unlock_irqrestore+0x3e/0x50 [ 27.680755][ T83] usb_set_configuration+0xdf6/0x1670 [ 27.686298][ T83] generic_probe+0x9d/0xd5 [ 27.690690][ T83] usb_probe_device+0x99/0x100 [ 27.695428][ T83] ? usb_suspend+0x620/0x620 [ 27.699993][ T83] really_probe+0x281/0x6d0 [ 27.704535][ T83] driver_probe_device+0x104/0x210 [ 27.709619][ T83] __device_attach_driver+0x1c2/0x220 [ 27.714977][ T83] ? driver_allows_async_probing+0x160/0x160 [ 27.720939][ T83] bus_for_each_drv+0x162/0x1e0 [ 27.725765][ T83] ? bus_rescan_devices+0x20/0x20 [ 27.730764][ T83] ? _raw_spin_unlock_irqrestore+0x3e/0x50 [ 27.736544][ T83] ? lockdep_hardirqs_on+0x382/0x580 [ 27.741811][ T83] __device_attach+0x217/0x360 [ 27.746556][ T83] ? device_bind_driver+0xd0/0xd0 [ 27.751561][ T83] ? kobject_uevent_env+0x29e/0x1160 [ 27.756875][ T83] ? kobject_uevent_env+0x2a8/0x1160 [ 27.762133][ T83] bus_probe_device+0x1e4/0x290 [ 27.766961][ T83] ? blocking_notifier_call_chain+0x54/0xa0 [ 27.772827][ T83] device_add+0xae6/0x16f0 [ 27.777219][ T83] ? uevent_store+0x50/0x50 [ 27.781698][ T83] usb_new_device.cold+0x6a4/0xe79 [ 27.786784][ T83] hub_event+0x1df8/0x3800 [ 27.791186][ T83] ? hub_port_debounce+0x260/0x260 [ 27.796271][ T83] ? find_held_lock+0x2d/0x110 [ 27.801061][ T83] ? mark_held_locks+0xe0/0xe0 [ 27.805857][ T83] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 27.811381][ T83] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 27.816655][ T83] process_one_work+0x92b/0x1530 [ 27.821622][ T83] ? pwq_dec_nr_in_flight+0x310/0x310 [ 27.826970][ T83] ? do_raw_spin_lock+0x11a/0x280 [ 27.831972][ T83] worker_thread+0x96/0xe20 [ 27.836454][ T83] ? process_one_work+0x1530/0x1530 [ 27.841628][ T83] kthread+0x318/0x420 [ 27.845674][ T83] ? kthread_create_on_node+0xf0/0xf0 [ 27.851104][ T83] ret_from_fork+0x24/0x30 [ 27.855488][ T83] Modules linked in: [ 27.859458][ T83] ---[ end trace 7929236c170be68d ]--- [ 27.865264][ T83] RIP: 0010:flexcop_usb_probe.cold+0x1cb/0x7bd [ 27.871430][ T83] Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 74 05 e8 51 14 62 fd 48 8b 5b 18 b8 ff ff 37 00 48 c1 e0 2a 48 8d 7b 04 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 01 38 d0 7c 08 84 d2 0f 85 c1 [ 27.891041][ T83] RSP: 0018:ffff8881d89f7298 EFLAGS: 00010247 [ 27.897122][ T83] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff840356ab [ 27.905098][ T83] RDX: 0000000000000000 RSI: ffffffff8403576b RDI: 0000000000000004 [ 27.913197][ T83] RBP: ffff8881cfd2c008 R08: ffff8881d8c7c800 R09: fffffbfff11ab3ae [ 27.921185][ T83] R10: fffffbfff11ab3ad R11: ffffffff88d59d6f R12: ffff8881cfd2c048 [ 27.929160][ T83] R13: 0000000000000000 R14: ffff8881cfd2c000 R15: ffff8881cfdd0000 [ 27.937117][ T83] FS: 0000000000000000(0000) GS:ffff8881db300000(0000) knlGS:0000000000000000 [ 27.946049][ T83] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 27.952630][ T83] CR2: 00000000009ab4a0 CR3: 00000001c65ae000 CR4: 00000000001406e0 [ 27.960607][ T83] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 27.968741][ T83] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 27.976737][ T83] Kernel panic - not syncing: Fatal exception [ 27.983371][ T83] Kernel Offset: disabled [ 27.987679][ T83] Rebooting in 86400 seconds..