[[36minfo[39;49m] Using makefile-style concurrent boot in runlevel 2. [ 14.693868][ C1] random: crng init done [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.139' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 46.897478][ T21] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 47.257481][ T21] usb 1-1: config 0 has an invalid interface number: 36 but max is 0 [ 47.265669][ T21] usb 1-1: config 0 has no interface number 0 [ 47.271817][ T21] usb 1-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=44.47 [ 47.280868][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.290223][ T21] usb 1-1: config 0 descriptor?? [ 47.329299][ T21] flexcop_usb: running at FULL speed. executing program [ 47.517646][ T21] flexcop_usb: error while reading dword from 161 (516). [ 47.537474][ T21] flexcop_usb: error while writing dword from 33 (516). [ 47.587456][ T21] flexcop_usb: error while writing dword from 33 (516). [ 47.607460][ T21] flexcop_usb: error while reading dword from 161 (516). [ 47.627463][ T21] flexcop_usb: error while reading dword from 247 (1820). [ 47.647464][ T21] flexcop_usb: error while writing dword from 119 (1820). [ 47.667449][ T21] flexcop_usb: error while reading dword from 176 (768). [ 47.687461][ T21] flexcop_usb: error while reading dword from 162 (520). [ 47.707453][ T21] flexcop_usb: error while writing dword from 48 (768). [ 47.727445][ T21] flexcop_usb: error while writing dword from 34 (520). [ 47.747425][ T21] flexcop_usb: error while reading dword from 176 (768). [ 47.767441][ T21] flexcop_usb: error while reading dword from 162 (520). [ 47.787430][ T21] flexcop_usb: error while writing dword from 48 (768). [ 47.807466][ T21] flexcop_usb: error while writing dword from 34 (520). [ 47.827438][ T21] flexcop_usb: error while reading dword from 177 (772). [ 47.847465][ T21] flexcop_usb: error while reading dword from 162 (520). [ 47.867445][ T21] flexcop_usb: error while writing dword from 49 (772). [ 47.887486][ T21] flexcop_usb: error while writing dword from 34 (520). [ 47.907486][ T21] flexcop_usb: error while reading dword from 177 (772). [ 47.927440][ T21] flexcop_usb: error while reading dword from 162 (520). [ 47.947429][ T21] flexcop_usb: error while writing dword from 49 (772). [ 47.967437][ T21] flexcop_usb: error while writing dword from 34 (520). [ 47.987486][ T21] flexcop_usb: error while reading dword from 178 (776). [ 48.007441][ T21] flexcop_usb: error while reading dword from 162 (520). [ 48.027458][ T21] flexcop_usb: error while writing dword from 50 (776). [ 48.047453][ T21] flexcop_usb: error while writing dword from 34 (520). [ 48.067487][ T21] flexcop_usb: error while reading dword from 178 (776). [ 48.087447][ T21] flexcop_usb: error while reading dword from 162 (520). [ 48.107500][ T21] flexcop_usb: error while writing dword from 50 (776). [ 48.127451][ T21] flexcop_usb: error while writing dword from 34 (520). [ 48.147480][ T21] flexcop_usb: error while writing dword from 51 (780). [ 48.167442][ T21] flexcop_usb: error while reading dword from 162 (520). [ 48.187445][ T21] flexcop_usb: error while writing dword from 34 (520). [ 48.207457][ T21] flexcop_usb: error while reading dword from 178 (776). [ 48.227495][ T21] flexcop_usb: error while writing dword from 50 (776). [ 48.247478][ T21] flexcop_usb: error while reading dword from 162 (520). [ 48.267471][ T21] flexcop_usb: error while writing dword from 34 (520). [ 48.287505][ T21] flexcop_usb: error while reading dword from 162 (520). [ 48.307449][ T21] flexcop_usb: error while writing dword from 34 (520). [ 48.315281][ T21] dvbdev: DVB: registering new adapter (FlexCop Digital TV device) [ 48.347514][ T21] b2c2-flexcop: reading of MAC address failed. [ 48.347514][ T21] [ 48.407498][ T21] CX24123: wrong demod revision: 0 [ 48.707629][ T21] nxt200x: Unknown/Unsupported NXT chip: 00 00 00 00 00 [ 48.727491][ T21] lgdt330x 0-0059: Demod loaded for LGDT3303 chip [ 48.734500][ T21] tuner-simple 0-0061: creating new instance [ 48.740695][ T21] tuner-simple 0-0061: type set to 64 (LG TDVS-H06xF) [ 48.747674][ T21] b2c2-flexcop: found 'LG Electronics LGDT3303 VSB/QAM Frontend' . [ 48.755731][ T21] usb 1-1: DVB: registering adapter 0 frontend 0 (LG Electronics LGDT3303 VSB/QAM Frontend)... [ 48.767716][ T21] b2c2-flexcop: initialization of 'Air2PC/AirStar 2 ATSC 3rd generation (HD5000)' at the 'USB' bus controlled by a 'FlexCopIII' complete [ 48.781784][ T21] kasan: CONFIG_KASAN_INLINE enabled [ 48.787098][ T21] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 48.795196][ T21] general protection fault: 0000 [#1] SMP KASAN [ 48.801428][ T21] CPU: 1 PID: 21 Comm: kworker/1:1 Not tainted 5.2.0-rc6+ #13 [ 48.808858][ T21] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 48.818905][ T21] Workqueue: usb_hub_wq hub_event [ 48.824020][ T21] RIP: 0010:flexcop_usb_probe.cold+0x1cb/0x8e5 [ 48.830268][ T21] Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 74 05 e8 31 69 52 fd 48 8b 5b 18 b8 ff ff 37 00 48 c1 e0 2a 48 8d 7b 04 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 01 38 d0 7c 08 84 d2 0f 85 97 [ 48.849856][ T21] RSP: 0018:ffff8881d9eff230 EFLAGS: 00010247 [ 48.855939][ T21] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff8410621b [ 48.863897][ T21] RDX: 0000000000000000 RSI: ffffffff841062db RDI: 0000000000000004 [ 48.871851][ T21] RBP: ffff8881d0515508 R08: ffff8881d9e36000 R09: ffffed103b665d30 [ 48.879803][ T21] R10: ffffed103b665d2f R11: ffff8881db32e97f R12: ffff8881d0515548 [ 48.887949][ T21] R13: 0000000000000000 R14: ffff8881d0515500 R15: ffff8881cfffc000 [ 48.895914][ T21] FS: 0000000000000000(0000) GS:ffff8881db300000(0000) knlGS:0000000000000000 [ 48.904963][ T21] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 48.911531][ T21] CR2: 0000000002583e00 CR3: 00000001d5aa8000 CR4: 00000000001406e0 [ 48.919482][ T21] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 48.927479][ T21] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 48.935458][ T21] Call Trace: [ 48.938745][ T21] ? rpm_callback+0x230/0x230 [ 48.944033][ T21] ? lockdep_hardirqs_on+0x379/0x580 [ 48.949298][ T21] ? __pm_runtime_resume+0x111/0x180 [ 48.954600][ T21] usb_probe_interface+0x305/0x7a0 [ 48.959700][ T21] ? usb_probe_device+0x100/0x100 [ 48.964705][ T21] really_probe+0x281/0x660 [ 48.969187][ T21] driver_probe_device+0x104/0x210 [ 48.974279][ T21] __device_attach_driver+0x1c2/0x220 [ 48.979647][ T21] ? driver_allows_async_probing+0x160/0x160 [ 48.985814][ T21] bus_for_each_drv+0x15c/0x1e0 [ 48.990655][ T21] ? bus_rescan_devices+0x20/0x20 [ 48.995666][ T21] ? _raw_spin_unlock_irqrestore+0x3e/0x50 [ 49.001453][ T21] ? lockdep_hardirqs_on+0x379/0x580 [ 49.006785][ T21] __device_attach+0x217/0x360 [ 49.011537][ T21] ? device_bind_driver+0xd0/0xd0 [ 49.016544][ T21] ? kobject_uevent_env+0x29e/0x1150 [ 49.021859][ T21] ? kobject_uevent_env+0x2a8/0x1150 [ 49.027133][ T21] bus_probe_device+0x1e4/0x290 [ 49.031962][ T21] ? blocking_notifier_call_chain+0x54/0xa0 [ 49.037951][ T21] device_add+0xae6/0x16f0 [ 49.042391][ T21] ? uevent_store+0x50/0x50 [ 49.046924][ T21] ? _raw_spin_unlock_irqrestore+0x3e/0x50 [ 49.052756][ T21] usb_set_configuration+0xdf6/0x1670 [ 49.058115][ T21] generic_probe+0x9d/0xd5 [ 49.062513][ T21] usb_probe_device+0x99/0x100 [ 49.067255][ T21] ? usb_suspend+0x620/0x620 [ 49.071820][ T21] really_probe+0x281/0x660 [ 49.076300][ T21] driver_probe_device+0x104/0x210 [ 49.081434][ T21] __device_attach_driver+0x1c2/0x220 [ 49.086792][ T21] ? driver_allows_async_probing+0x160/0x160 [ 49.092753][ T21] bus_for_each_drv+0x15c/0x1e0 [ 49.097585][ T21] ? bus_rescan_devices+0x20/0x20 [ 49.102586][ T21] ? _raw_spin_unlock_irqrestore+0x3e/0x50 [ 49.108368][ T21] ? lockdep_hardirqs_on+0x379/0x580 [ 49.113663][ T21] __device_attach+0x217/0x360 [ 49.118624][ T21] ? device_bind_driver+0xd0/0xd0 [ 49.123626][ T21] ? kobject_uevent_env+0x29e/0x1150 [ 49.129325][ T21] ? kobject_uevent_env+0x2a8/0x1150 [ 49.134802][ T21] bus_probe_device+0x1e4/0x290 [ 49.139638][ T21] ? blocking_notifier_call_chain+0x54/0xa0 [ 49.145555][ T21] device_add+0xae6/0x16f0 [ 49.149958][ T21] ? uevent_store+0x50/0x50 [ 49.154444][ T21] usb_new_device.cold+0x8c1/0x1016 [ 49.159642][ T21] ? usb_port_suspend+0xa40/0xa40 [ 49.164718][ T21] ? mark_held_locks+0x9f/0xe0 [ 49.169508][ T21] ? _raw_spin_unlock_irq+0x24/0x30 [ 49.174689][ T21] hub_event+0x1ada/0x3590 [ 49.179347][ T21] ? hub_port_debounce+0x260/0x260 [ 49.184441][ T21] process_one_work+0x905/0x1570 [ 49.194499][ T21] ? pwq_dec_nr_in_flight+0x310/0x310 [ 49.204500][ T21] ? do_raw_spin_lock+0x11a/0x280 [ 49.209506][ T21] worker_thread+0x96/0xe20 [ 49.214056][ T21] ? process_one_work+0x1570/0x1570 [ 49.219299][ T21] kthread+0x30b/0x410 [ 49.223371][ T21] ? kthread_park+0x1a0/0x1a0 [ 49.228030][ T21] ret_from_fork+0x24/0x30 [ 49.232458][ T21] Modules linked in: [ 49.236413][ T21] ---[ end trace 2a82e573d42f02c7 ]--- [ 49.241904][ T21] RIP: 0010:flexcop_usb_probe.cold+0x1cb/0x8e5 [ 49.248074][ T21] Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 74 05 e8 31 69 52 fd 48 8b 5b 18 b8 ff ff 37 00 48 c1 e0 2a 48 8d 7b 04 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 01 38 d0 7c 08 84 d2 0f 85 97 [ 49.267739][ T21] RSP: 0018:ffff8881d9eff230 EFLAGS: 00010247 [ 49.273793][ T21] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff8410621b [ 49.281835][ T21] RDX: 0000000000000000 RSI: ffffffff841062db RDI: 0000000000000004 [ 49.289820][ T21] RBP: ffff8881d0515508 R08: ffff8881d9e36000 R09: ffffed103b665d30 [ 49.297816][ T21] R10: ffffed103b665d2f R11: ffff8881db32e97f R12: ffff8881d0515548 [ 49.305786][ T21] R13: 0000000000000000 R14: ffff8881d0515500 R15: ffff8881cfffc000 [ 49.313778][ T21] FS: 0000000000000000(0000) GS:ffff8881db300000(0000) knlGS:0000000000000000 [ 49.322916][ T21] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 49.329594][ T21] CR2: 0000000002583e00 CR3: 00000001d5aa8000 CR4: 00000000001406e0 [ 49.337736][ T21] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 49.345694][ T21] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 49.353681][ T21] Kernel panic - not syncing: Fatal exception [ 49.360237][ T21] Kernel Offset: disabled [ 49.364572][ T21] Rebooting in 86400 seconds..