[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 75.855140][ T31] audit: type=1800 audit(1570304792.919:25): pid=10927 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 75.878316][ T31] audit: type=1800 audit(1570304792.939:26): pid=10927 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 75.914127][ T31] audit: type=1800 audit(1570304792.969:27): pid=10927 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.253' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 86.271923][ T49] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 86.632056][ T49] usb 1-1: config 0 has an invalid interface number: 175 but max is 0 [ 86.640337][ T49] usb 1-1: config 0 has an invalid descriptor of length 135, skipping remainder of the config [ 86.650789][ T49] usb 1-1: config 0 has no interface number 0 [ 86.656978][ T49] usb 1-1: config 0 interface 175 altsetting 0 endpoint 0x84 has invalid maxpacket 1191, setting to 1024 [ 86.668290][ T49] usb 1-1: config 0 interface 175 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 86.678545][ T49] usb 1-1: config 0 interface 175 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 86.691596][ T49] usb 1-1: New USB device found, idVendor=1618, idProduct=9113, bcdDevice=df.61 [ 86.700685][ T49] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.710271][ T49] usb 1-1: config 0 descriptor?? [ 86.759334][ T49] rsi_91x: rsi_probe: Initialized os intf ops executing program [ 87.182006][ T49] rsi_91x: rsi_usb_reg_read: Reg read failed with error code :-71 [ 87.189933][ T49] rsi_91x: rsi_hal_prepare_fwload: REGOUT read failed [ 87.196886][ T49] rsi_91x: rsi_probe: Failed in device init [ 87.204073][ T49] rsi_91x: rsi_probe: Failed in probe...Exiting [ 87.210403][ T49] RSI-USB WLAN: probe of 1-1:0.175 failed with error -71 [ 87.221275][ T49] usb 1-1: USB disconnect, device number 2 [ 87.571939][ T49] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 87.932078][ T49] usb 1-1: config 0 has an invalid interface number: 175 but max is 0 [ 87.940383][ T49] usb 1-1: config 0 has an invalid descriptor of length 135, skipping remainder of the config [ 87.950809][ T49] usb 1-1: config 0 has no interface number 0 [ 87.957081][ T49] usb 1-1: config 0 interface 175 altsetting 0 endpoint 0x84 has invalid maxpacket 1191, setting to 1024 [ 87.968424][ T49] usb 1-1: config 0 interface 175 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 87.978708][ T49] usb 1-1: config 0 interface 175 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 87.991786][ T49] usb 1-1: New USB device found, idVendor=1618, idProduct=9113, bcdDevice=df.61 [ 88.000905][ T49] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.010278][ T49] usb 1-1: config 0 descriptor?? [ 88.055435][ T49] rsi_91x: rsi_probe: Initialized os intf ops executing program [ 88.482053][ T49] rsi_91x: rsi_usb_reg_read: Reg read failed with error code :-71 [ 88.489998][ T49] rsi_91x: rsi_hal_prepare_fwload: REGOUT read failed [ 88.497191][ T49] rsi_91x: rsi_probe: Failed in device init [ 88.504447][ T49] rsi_91x: rsi_probe: Failed in probe...Exiting [ 88.510759][ T49] RSI-USB WLAN: probe of 1-1:0.175 failed with error -71 [ 88.521485][ T49] usb 1-1: USB disconnect, device number 3 [ 88.871953][ T49] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 89.041865][ C1] ===================================================== [ 89.048866][ C1] BUG: KMSAN: uninit-value in run_timer_softirq+0x2d/0x50 [ 89.055971][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.3.0-rc7+ #0 [ 89.063053][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 89.073135][ C1] Call Trace: [ 89.076400][ C1] [ 89.079240][ C1] dump_stack+0x191/0x1f0 [ 89.083552][ C1] kmsan_report+0x13a/0x2b0 [ 89.088042][ C1] __msan_warning+0x73/0xe0 [ 89.092533][ C1] __run_timers+0xb99/0x11a0 [ 89.097102][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 89.103154][ C1] ? timers_dead_cpu+0x9d0/0x9d0 [ 89.108147][ C1] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 89.114023][ C1] run_timer_softirq+0x2d/0x50 [ 89.118766][ C1] ? timers_dead_cpu+0x9d0/0x9d0 [ 89.123683][ C1] __do_softirq+0x4a1/0x83a [ 89.128187][ C1] irq_exit+0x230/0x280 [ 89.132336][ C1] exiting_irq+0xe/0x10 [ 89.136477][ C1] smp_apic_timer_interrupt+0x48/0x70 [ 89.141844][ C1] apic_timer_interrupt+0x2e/0x40 [ 89.146854][ C1] [ 89.149777][ C1] RIP: 0010:default_idle+0x53/0x90 [ 89.154867][ C1] Code: 13 ee eb f2 44 8b 35 94 79 d2 01 48 c7 c7 78 d5 25 90 e8 c0 9b b1 f3 83 38 00 75 31 45 85 f6 7e 07 0f 00 2d 8f f3 4d 00 fb f4 <65> 8b 35 2e 57 af 71 c7 03 00 00 00 00 c7 43 08 00 00 00 00 bf ff [ 89.174455][ C1] RSP: 0018:ffff8881280cfe10 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 89.182846][ C1] RAX: ffff888217c47578 RBX: ffff8881280a89a0 RCX: ccccccccccccd000 [ 89.190796][ C1] RDX: ffff888207e40578 RSI: ffffea000a76d630 RDI: 000000001025d578 [ 89.198749][ C1] RBP: ffff8881280cfe20 R08: ffff88812fd30fc0 R09: ffff8881280b0002 [ 89.206701][ C1] R10: 00000014bf5eb180 R11: ffffffff8e535bb0 R12: 0000000000000001 [ 89.214648][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8881280a89a0 [ 89.222609][ C1] ? __cpuidle_text_start+0x8/0x8 [ 89.227616][ C1] ? __cpuidle_text_start+0x8/0x8 [ 89.232621][ C1] arch_cpu_idle+0x25/0x30 [ 89.237056][ C1] do_idle+0x1d7/0x790 [ 89.241113][ C1] cpu_startup_entry+0x45/0x50 [ 89.245864][ C1] ? setup_APIC_timer+0x210/0x210 [ 89.250864][ C1] start_secondary+0x370/0x470 [ 89.255673][ C1] secondary_startup_64+0xa4/0xb0 [ 89.260677][ C1] [ 89.262984][ C1] Uninit was created at: [ 89.267228][ C1] kmsan_internal_poison_shadow+0x53/0x100 [ 89.273010][ C1] kmsan_slab_free+0x8d/0x100 [ 89.277662][ C1] kfree+0x4c1/0x2db0 [ 89.281621][ C1] skb_release_data+0x7de/0x9d0 [ 89.286446][ C1] __kfree_skb+0x8a/0x210 [ 89.290749][ C1] consume_skb+0x2b0/0x2e0 [ 89.295142][ C1] skb_free_datagram+0x52/0x180 [ 89.299971][ C1] netlink_recvmsg+0xd2d/0x18e0 [ 89.304835][ C1] sock_recvmsg+0x3b3/0x3c0 [ 89.309315][ C1] ___sys_recvmsg+0x461/0x11e0 [ 89.314067][ C1] __se_sys_recvmsg+0x2fa/0x450 [ 89.318909][ C1] __x64_sys_recvmsg+0x4a/0x70 [ 89.323651][ C1] do_syscall_64+0xbc/0xf0 [ 89.328044][ C1] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 89.333909][ C1] ===================================================== [ 89.340812][ C1] Disabling lock debugging due to kernel taint [ 89.346939][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 89.353509][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G B 5.3.0-rc7+ #0 [ 89.361978][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 89.372009][ C1] Call Trace: [ 89.375273][ C1] [ 89.378114][ C1] dump_stack+0x191/0x1f0 [ 89.382429][ C1] panic+0x3c9/0xc1e [ 89.386318][ C1] kmsan_report+0x2a2/0x2b0 [ 89.390802][ C1] __msan_warning+0x73/0xe0 [ 89.395287][ C1] __run_timers+0xb99/0x11a0 [ 89.399858][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 89.405910][ C1] ? timers_dead_cpu+0x9d0/0x9d0 [ 89.410840][ C1] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 89.416720][ C1] run_timer_softirq+0x2d/0x50 [ 89.421461][ C1] ? timers_dead_cpu+0x9d0/0x9d0 [ 89.426385][ C1] __do_softirq+0x4a1/0x83a [ 89.430881][ C1] irq_exit+0x230/0x280 [ 89.435016][ C1] exiting_irq+0xe/0x10 [ 89.439147][ C1] smp_apic_timer_interrupt+0x48/0x70 [ 89.444505][ C1] apic_timer_interrupt+0x2e/0x40 [ 89.449498][ C1] [ 89.452413][ C1] RIP: 0010:default_idle+0x53/0x90 [ 89.457500][ C1] Code: 13 ee eb f2 44 8b 35 94 79 d2 01 48 c7 c7 78 d5 25 90 e8 c0 9b b1 f3 83 38 00 75 31 45 85 f6 7e 07 0f 00 2d 8f f3 4d 00 fb f4 <65> 8b 35 2e 57 af 71 c7 03 00 00 00 00 c7 43 08 00 00 00 00 bf ff [ 89.477079][ C1] RSP: 0018:ffff8881280cfe10 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 89.485468][ C1] RAX: ffff888217c47578 RBX: ffff8881280a89a0 RCX: ccccccccccccd000 [ 89.493417][ C1] RDX: ffff888207e40578 RSI: ffffea000a76d630 RDI: 000000001025d578 [ 89.501365][ C1] RBP: ffff8881280cfe20 R08: ffff88812fd30fc0 R09: ffff8881280b0002 [ 89.509326][ C1] R10: 00000014bf5eb180 R11: ffffffff8e535bb0 R12: 0000000000000001 [ 89.517292][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8881280a89a0 [ 89.525258][ C1] ? __cpuidle_text_start+0x8/0x8 [ 89.530275][ C1] ? __cpuidle_text_start+0x8/0x8 [ 89.535286][ C1] arch_cpu_idle+0x25/0x30 [ 89.539685][ C1] do_idle+0x1d7/0x790 [ 89.543745][ C1] cpu_startup_entry+0x45/0x50 [ 89.548492][ C1] ? setup_APIC_timer+0x210/0x210 [ 89.553500][ C1] start_secondary+0x370/0x470 [ 89.558261][ C1] secondary_startup_64+0xa4/0xb0 [ 90.881672][ C1] Shutting down cpus with NMI [ 90.901083][ C1] Kernel Offset: disabled [ 90.905426][ C1] Rebooting in 86400 seconds..