[ 47.836519] audit: type=1800 audit(1555059236.064:27): pid=5436 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2469 res=0 [ 47.856246] audit: type=1800 audit(1555059236.064:28): pid=5436 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2450 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 48.643761] audit: type=1800 audit(1555059236.904:29): pid=5436 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0 [ 48.663206] audit: type=1800 audit(1555059236.914:30): pid=5436 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2456 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.60' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 58.103826] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 58.463866] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 58.471565] usb 1-1: config 0 has no interface number 0 [ 58.477106] usb 1-1: config 0 interface 251 has no altsetting 0 [ 58.483219] usb 1-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=db.86 [ 58.491609] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.500841] usb 1-1: config 0 descriptor?? [ 58.547746] flexcop_usb: running at HIGH speed. executing program [ 58.733842] flexcop_usb: error while writing dword from 34 (520). [ 58.764022] flexcop_usb: error while writing dword from 36 (528). [ 58.813880] flexcop_usb: error while reading dword from 161 (516). [ 58.833832] flexcop_usb: error while writing dword from 33 (516). [ 58.883837] flexcop_usb: error while writing dword from 33 (516). [ 58.903830] flexcop_usb: error while reading dword from 161 (516). [ 58.923891] flexcop_usb: error while reading dword from 247 (1820). [ 58.943839] flexcop_usb: error while writing dword from 119 (1820). [ 58.963828] flexcop_usb: error while reading dword from 176 (768). [ 58.983822] flexcop_usb: error while reading dword from 162 (520). [ 59.003840] flexcop_usb: error while writing dword from 48 (768). [ 59.023849] flexcop_usb: error while writing dword from 34 (520). [ 59.053844] flexcop_usb: error while reading dword from 176 (768). [ 59.073820] flexcop_usb: error while reading dword from 162 (520). [ 59.103829] flexcop_usb: error while writing dword from 48 (768). [ 59.123830] flexcop_usb: error while writing dword from 34 (520). [ 59.143864] flexcop_usb: error while reading dword from 177 (772). [ 59.163830] flexcop_usb: error while reading dword from 162 (520). [ 59.193832] flexcop_usb: error while writing dword from 49 (772). [ 59.213834] flexcop_usb: error while writing dword from 34 (520). [ 59.233852] flexcop_usb: error while reading dword from 177 (772). [ 59.263884] flexcop_usb: error while reading dword from 162 (520). [ 59.293823] flexcop_usb: error while writing dword from 49 (772). [ 59.313842] flexcop_usb: error while writing dword from 34 (520). [ 59.333834] flexcop_usb: error while reading dword from 178 (776). [ 59.353853] flexcop_usb: error while reading dword from 162 (520). [ 59.373863] flexcop_usb: error while writing dword from 50 (776). [ 59.393921] flexcop_usb: error while writing dword from 34 (520). [ 59.413845] flexcop_usb: error while reading dword from 178 (776). [ 59.433825] flexcop_usb: error while reading dword from 162 (520). [ 59.463876] flexcop_usb: error while writing dword from 50 (776). [ 59.483893] flexcop_usb: error while writing dword from 34 (520). [ 59.503826] flexcop_usb: error while writing dword from 51 (780). [ 59.523843] flexcop_usb: error while reading dword from 162 (520). [ 59.553847] flexcop_usb: error while writing dword from 34 (520). [ 59.573847] flexcop_usb: error while reading dword from 178 (776). [ 59.593851] flexcop_usb: error while writing dword from 50 (776). [ 59.623836] flexcop_usb: error while reading dword from 162 (520). [ 59.643856] flexcop_usb: error while writing dword from 34 (520). [ 59.663819] flexcop_usb: error while reading dword from 162 (520). [ 59.693845] flexcop_usb: error while writing dword from 34 (520). [ 59.694133] dvbdev: DVB: registering new adapter (FlexCop Digital TV device) [ 59.743836] b2c2-flexcop: reading of MAC address failed. [ 59.743836] [ 59.803864] CX24123: wrong demod revision: 0 [ 60.113854] nxt200x: Unknown/Unsupported NXT chip: 00 00 00 00 00 [ 60.133870] lgdt330x 0-0059: Demod loaded for LGDT3303 chip [ 60.140897] tuner-simple 0-0061: creating new instance [ 60.146619] tuner-simple 0-0061: type set to 64 (LG TDVS-H06xF) [ 60.152714] b2c2-flexcop: found 'LG Electronics LGDT3303 VSB/QAM Frontend' . [ 60.160357] usb 1-1: DVB: registering adapter 0 frontend 0 (LG Electronics LGDT3303 VSB/QAM Frontend)... [ 60.171864] b2c2-flexcop: initialization of 'Air2PC/AirStar 2 ATSC 3rd generation (HD5000)' at the 'USB' bus controlled by a 'FlexCopIII' complete [ 60.185489] kasan: CONFIG_KASAN_INLINE enabled [ 60.190217] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 60.197646] general protection fault: 0000 [#1] SMP KASAN PTI [ 60.203532] CPU: 1 PID: 21 Comm: kworker/1:1 Not tainted 5.1.0-rc4-319354-g9a33b36 #3 [ 60.211480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 60.221820] Workqueue: usb_hub_wq hub_event [ 60.226158] RIP: 0010:flexcop_usb_probe.cold+0x1cb/0x7bd [ 60.231594] Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 74 05 e8 dc d2 65 f7 48 8b 5b 18 b8 ff ff 37 00 48 c1 e0 2a 48 8d 7b 04 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 01 38 d0 7c 08 84 d2 0f 85 c1 [ 60.250484] RSP: 0018:ffff8880a862f2e0 EFLAGS: 00010247 [ 60.255831] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff8a430240 [ 60.263089] RDX: 0000000000000000 RSI: ffffffff8a430300 RDI: 0000000000000004 [ 60.270347] RBP: ffff88809d3b9108 R08: ffff8880a84d4980 R09: ffffed1015a24fc9 [ 60.277608] R10: ffffed1015a24fc8 R11: ffff8880ad127e47 R12: ffff88809d3b9148 [ 60.285019] R13: 0000000000000000 R14: ffff88809d3b9100 R15: ffff88809575c000 [ 60.292277] FS: 0000000000000000(0000) GS:ffff8880ad100000(0000) knlGS:0000000000000000 [ 60.300501] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 60.306366] CR2: 00007fd361552000 CR3: 0000000095f74000 CR4: 00000000001406e0 [ 60.313628] Call Trace: [ 60.316219] ? rpm_callback+0x240/0x240 [ 60.320187] ? lockdep_hardirqs_on+0x37e/0x580 [ 60.324762] ? __pm_runtime_resume+0x116/0x180 [ 60.329364] usb_probe_interface+0x31d/0x820 [ 60.333794] ? usb_probe_device+0x150/0x150 [ 60.338118] really_probe+0x2da/0xb10 [ 60.341916] driver_probe_device+0x21d/0x350 [ 60.346313] __device_attach_driver+0x1d8/0x290 [ 60.350970] ? driver_allows_async_probing+0x160/0x160 [ 60.356236] bus_for_each_drv+0x163/0x1e0 [ 60.360369] ? bus_rescan_devices+0x30/0x30 [ 60.364790] ? _raw_spin_unlock_irqrestore+0x4b/0x60 [ 60.369881] ? lockdep_hardirqs_on+0x37e/0x580 [ 60.374453] __device_attach+0x223/0x3a0 [ 60.378498] ? device_bind_driver+0xe0/0xe0 [ 60.382810] ? kobject_uevent_env+0x295/0x13d0 [ 60.387379] bus_probe_device+0x1f1/0x2a0 [ 60.391533] ? blocking_notifier_call_chain+0x59/0xb0 [ 60.396709] device_add+0xad2/0x16e0 [ 60.400609] ? get_device_parent.isra.0+0x560/0x560 [ 60.406544] ? _raw_spin_unlock_irqrestore+0x4b/0x60 [ 60.411641] usb_set_configuration+0xdf7/0x1740 [ 60.416307] generic_probe+0xa2/0xda [ 60.420005] usb_probe_device+0xc0/0x150 [ 60.424049] ? usb_suspend+0x5f0/0x5f0 [ 60.427920] really_probe+0x2da/0xb10 [ 60.431705] driver_probe_device+0x21d/0x350 [ 60.436095] __device_attach_driver+0x1d8/0x290 [ 60.440745] ? driver_allows_async_probing+0x160/0x160 [ 60.446007] bus_for_each_drv+0x163/0x1e0 [ 60.450162] ? bus_rescan_devices+0x30/0x30 [ 60.454486] ? _raw_spin_unlock_irqrestore+0x4b/0x60 [ 60.459582] ? lockdep_hardirqs_on+0x37e/0x580 [ 60.464162] __device_attach+0x223/0x3a0 [ 60.468209] ? device_bind_driver+0xe0/0xe0 [ 60.472523] ? kobject_uevent_env+0x295/0x13d0 [ 60.477101] bus_probe_device+0x1f1/0x2a0 [ 60.481335] ? blocking_notifier_call_chain+0x59/0xb0 [ 60.486514] device_add+0xad2/0x16e0 [ 60.490349] ? get_device_parent.isra.0+0x560/0x560 [ 60.495354] usb_new_device.cold+0x537/0xccf [ 60.499745] hub_event+0x138e/0x3b00 [ 60.503451] ? hub_port_debounce+0x350/0x350 [ 60.507849] ? _raw_spin_unlock_irq+0x29/0x40 [ 60.512331] process_one_work+0x90f/0x1580 [ 60.516553] ? wq_pool_ids_show+0x300/0x300 [ 60.520857] ? do_raw_spin_lock+0x11f/0x290 [ 60.525164] worker_thread+0x9b/0xe20 [ 60.528969] ? process_one_work+0x1580/0x1580 [ 60.533467] kthread+0x313/0x420 [ 60.536816] ? kthread_park+0x1a0/0x1a0 [ 60.540786] ret_from_fork+0x3a/0x50 [ 60.544488] Modules linked in: [ 60.547750] ---[ end trace 8800fc602d77e417 ]--- [ 60.552524] RIP: 0010:flexcop_usb_probe.cold+0x1cb/0x7bd [ 60.558025] Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 74 05 e8 dc d2 65 f7 48 8b 5b 18 b8 ff ff 37 00 48 c1 e0 2a 48 8d 7b 04 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 01 38 d0 7c 08 84 d2 0f 85 c1 [ 60.577233] RSP: 0018:ffff8880a862f2e0 EFLAGS: 00010247 [ 60.582588] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff8a430240 [ 60.589889] RDX: 0000000000000000 RSI: ffffffff8a430300 RDI: 0000000000000004 [ 60.597185] RBP: ffff88809d3b9108 R08: ffff8880a84d4980 R09: ffffed1015a24fc9 [ 60.604480] R10: ffffed1015a24fc8 R11: ffff8880ad127e47 R12: ffff88809d3b9148 [ 60.611776] R13: 0000000000000000 R14: ffff88809d3b9100 R15: ffff88809575c000 [ 60.619081] FS: 0000000000000000(0000) GS:ffff8880ad100000(0000) knlGS:0000000000000000 [ 60.627330] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 60.633198] CR2: 00007fd361552000 CR3: 0000000095f74000 CR4: 00000000001406e0 [ 60.640498] Kernel panic - not syncing: Fatal exception [ 60.646570] Kernel Offset: disabled [ 60.650191] Rebooting in 86400 seconds..