[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 83.115853][ T32] audit: type=1800 audit(1570311329.171:25): pid=12205 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 83.139218][ T32] audit: type=1800 audit(1570311329.191:26): pid=12205 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 83.182276][ T32] audit: type=1800 audit(1570311329.221:27): pid=12205 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.62' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 94.292134][ T3825] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 94.652289][ T3825] usb 1-1: config 0 has an invalid interface number: 175 but max is 0 [ 94.660573][ T3825] usb 1-1: config 0 has an invalid descriptor of length 135, skipping remainder of the config [ 94.670971][ T3825] usb 1-1: config 0 has no interface number 0 [ 94.677208][ T3825] usb 1-1: config 0 interface 175 altsetting 0 endpoint 0x84 has invalid maxpacket 1191, setting to 1024 [ 94.688564][ T3825] usb 1-1: config 0 interface 175 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 94.698871][ T3825] usb 1-1: config 0 interface 175 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 94.711995][ T3825] usb 1-1: New USB device found, idVendor=1618, idProduct=9113, bcdDevice=df.61 [ 94.721242][ T3825] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.730593][ T3825] usb 1-1: config 0 descriptor?? [ 94.776689][ T3825] rsi_91x: rsi_probe: Initialized os intf ops executing program [ 95.202158][ T3825] rsi_91x: rsi_usb_reg_read: Reg read failed with error code :-71 [ 95.210127][ T3825] rsi_91x: rsi_hal_prepare_fwload: REGOUT read failed [ 95.217460][ T3825] rsi_91x: rsi_probe: Failed in device init [ 95.224810][ T3825] rsi_91x: rsi_probe: Failed in probe...Exiting [ 95.231159][ T3825] RSI-USB WLAN: probe of 1-1:0.175 failed with error -71 [ 95.242215][ T3825] usb 1-1: USB disconnect, device number 2 [ 95.592109][ T3825] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 95.952212][ T3825] usb 1-1: config 0 has an invalid interface number: 175 but max is 0 [ 95.960557][ T3825] usb 1-1: config 0 has an invalid descriptor of length 135, skipping remainder of the config [ 95.970979][ T3825] usb 1-1: config 0 has no interface number 0 [ 95.977229][ T3825] usb 1-1: config 0 interface 175 altsetting 0 endpoint 0x84 has invalid maxpacket 1191, setting to 1024 [ 95.988616][ T3825] usb 1-1: config 0 interface 175 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 95.998857][ T3825] usb 1-1: config 0 interface 175 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 96.012014][ T3825] usb 1-1: New USB device found, idVendor=1618, idProduct=9113, bcdDevice=df.61 [ 96.021081][ T3825] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.030550][ T3825] usb 1-1: config 0 descriptor?? [ 96.075759][ T3825] rsi_91x: rsi_probe: Initialized os intf ops executing program [ 96.502172][ T3825] rsi_91x: rsi_usb_reg_read: Reg read failed with error code :-71 [ 96.510083][ T3825] rsi_91x: rsi_hal_prepare_fwload: REGOUT read failed [ 96.517014][ T3825] rsi_91x: rsi_probe: Failed in device init [ 96.524220][ T3825] rsi_91x: rsi_probe: Failed in probe...Exiting [ 96.530592][ T3825] RSI-USB WLAN: probe of 1-1:0.175 failed with error -71 [ 96.541539][ T3825] usb 1-1: USB disconnect, device number 3 [ 96.892106][ T3825] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 97.042043][ C1] ===================================================== [ 97.049099][ C1] BUG: KMSAN: uninit-value in run_timer_softirq+0x2d/0x50 [ 97.056202][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.3.0-rc7+ #0 [ 97.063308][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 97.073410][ C1] Call Trace: [ 97.076680][ C1] [ 97.079528][ C1] dump_stack+0x191/0x1f0 [ 97.083843][ C1] kmsan_report+0x13a/0x2b0 [ 97.088330][ C1] __msan_warning+0x73/0xe0 [ 97.092826][ C1] __run_timers+0xb99/0x11a0 [ 97.097408][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 97.103461][ C1] ? timers_dead_cpu+0x9d0/0x9d0 [ 97.108386][ C1] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 97.114263][ C1] run_timer_softirq+0x2d/0x50 [ 97.119016][ C1] ? timers_dead_cpu+0x9d0/0x9d0 [ 97.123968][ C1] __do_softirq+0x4a1/0x83a [ 97.128470][ C1] irq_exit+0x230/0x280 [ 97.132608][ C1] exiting_irq+0xe/0x10 [ 97.136745][ C1] smp_apic_timer_interrupt+0x48/0x70 [ 97.142101][ C1] apic_timer_interrupt+0x2e/0x40 [ 97.147119][ C1] [ 97.150076][ C1] RIP: 0010:default_idle+0x53/0x90 [ 97.155179][ C1] Code: 13 ee eb f2 44 8b 35 94 79 d2 01 48 c7 c7 78 d5 25 90 e8 c0 9b b1 f3 83 38 00 75 31 45 85 f6 7e 07 0f 00 2d 8f f3 4d 00 fb f4 <65> 8b 35 2e 57 af 71 c7 03 00 00 00 00 c7 43 08 00 00 00 00 bf ff [ 97.174786][ C1] RSP: 0018:ffff8881280cfe10 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 97.183184][ C1] RAX: ffff888217c47578 RBX: ffff8881280a89a0 RCX: ccccccccccccd000 [ 97.191139][ C1] RDX: ffff888207e40578 RSI: ffffea000a76d630 RDI: 000000001025d578 [ 97.199103][ C1] RBP: ffff8881280cfe20 R08: ffff88812fd30fc0 R09: ffff8881280b0002 [ 97.207066][ C1] R10: 000000169c350180 R11: ffffffff8e535bb0 R12: 0000000000000001 [ 97.215043][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8881280a89a0 [ 97.223025][ C1] ? __cpuidle_text_start+0x8/0x8 [ 97.228036][ C1] ? __cpuidle_text_start+0x8/0x8 [ 97.233065][ C1] arch_cpu_idle+0x25/0x30 [ 97.237492][ C1] do_idle+0x1d7/0x790 [ 97.241556][ C1] cpu_startup_entry+0x45/0x50 [ 97.246299][ C1] ? setup_APIC_timer+0x210/0x210 [ 97.251306][ C1] start_secondary+0x370/0x470 [ 97.256066][ C1] secondary_startup_64+0xa4/0xb0 [ 97.261073][ C1] [ 97.263396][ C1] Uninit was created at: [ 97.267630][ C1] kmsan_internal_poison_shadow+0x53/0x100 [ 97.273413][ C1] kmsan_slab_free+0x8d/0x100 [ 97.278079][ C1] kfree+0x4c1/0x2db0 [ 97.282042][ C1] skb_release_data+0x7de/0x9d0 [ 97.286878][ C1] __kfree_skb+0x8a/0x210 [ 97.291194][ C1] consume_skb+0x2b0/0x2e0 [ 97.295594][ C1] skb_free_datagram+0x52/0x180 [ 97.300424][ C1] netlink_recvmsg+0xd2d/0x18e0 [ 97.305253][ C1] sock_recvmsg+0x3b3/0x3c0 [ 97.309869][ C1] ___sys_recvmsg+0x461/0x11e0 [ 97.314609][ C1] __se_sys_recvmsg+0x2fa/0x450 [ 97.319433][ C1] __x64_sys_recvmsg+0x4a/0x70 [ 97.324175][ C1] do_syscall_64+0xbc/0xf0 [ 97.328580][ C1] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 97.334452][ C1] ===================================================== [ 97.341368][ C1] Disabling lock debugging due to kernel taint [ 97.347492][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 97.354065][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G B 5.3.0-rc7+ #0 [ 97.362545][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 97.372587][ C1] Call Trace: [ 97.375856][ C1] [ 97.378695][ C1] dump_stack+0x191/0x1f0 [ 97.383012][ C1] panic+0x3c9/0xc1e [ 97.386905][ C1] kmsan_report+0x2a2/0x2b0 [ 97.391391][ C1] __msan_warning+0x73/0xe0 [ 97.395877][ C1] __run_timers+0xb99/0x11a0 [ 97.400448][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 97.406516][ C1] ? timers_dead_cpu+0x9d0/0x9d0 [ 97.411446][ C1] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 97.417315][ C1] run_timer_softirq+0x2d/0x50 [ 97.422055][ C1] ? timers_dead_cpu+0x9d0/0x9d0 [ 97.426990][ C1] __do_softirq+0x4a1/0x83a [ 97.431477][ C1] irq_exit+0x230/0x280 [ 97.435614][ C1] exiting_irq+0xe/0x10 [ 97.439757][ C1] smp_apic_timer_interrupt+0x48/0x70 [ 97.445110][ C1] apic_timer_interrupt+0x2e/0x40 [ 97.450109][ C1] [ 97.453040][ C1] RIP: 0010:default_idle+0x53/0x90 [ 97.458134][ C1] Code: 13 ee eb f2 44 8b 35 94 79 d2 01 48 c7 c7 78 d5 25 90 e8 c0 9b b1 f3 83 38 00 75 31 45 85 f6 7e 07 0f 00 2d 8f f3 4d 00 fb f4 <65> 8b 35 2e 57 af 71 c7 03 00 00 00 00 c7 43 08 00 00 00 00 bf ff [ 97.477718][ C1] RSP: 0018:ffff8881280cfe10 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 97.486107][ C1] RAX: ffff888217c47578 RBX: ffff8881280a89a0 RCX: ccccccccccccd000 [ 97.494056][ C1] RDX: ffff888207e40578 RSI: ffffea000a76d630 RDI: 000000001025d578 [ 97.502031][ C1] RBP: ffff8881280cfe20 R08: ffff88812fd30fc0 R09: ffff8881280b0002 [ 97.509989][ C1] R10: 000000169c350180 R11: ffffffff8e535bb0 R12: 0000000000000001 [ 97.517948][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8881280a89a0 [ 97.525926][ C1] ? __cpuidle_text_start+0x8/0x8 [ 97.530947][ C1] ? __cpuidle_text_start+0x8/0x8 [ 97.535960][ C1] arch_cpu_idle+0x25/0x30 [ 97.540373][ C1] do_idle+0x1d7/0x790 [ 97.544439][ C1] cpu_startup_entry+0x45/0x50 [ 97.549189][ C1] ? setup_APIC_timer+0x210/0x210 [ 97.554216][ C1] start_secondary+0x370/0x470 [ 97.558972][ C1] secondary_startup_64+0xa4/0xb0 [ 98.872508][ C1] Shutting down cpus with NMI [ 98.891915][ C1] Kernel Offset: disabled [ 98.896273][ C1] Rebooting in 86400 seconds..