[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 75.319085][ T31] audit: type=1800 audit(1569089730.375:25): pid=11491 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 75.342651][ T31] audit: type=1800 audit(1569089730.405:26): pid=11491 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 75.392004][ T31] audit: type=1800 audit(1569089730.425:27): pid=11491 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.207' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 85.961884][ T5] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 86.201953][ T5] usb 1-1: Using ep0 maxpacket: 8 [ 86.322111][ T5] usb 1-1: config 24 has an invalid interface number: 226 but max is 1 [ 86.330587][ T5] usb 1-1: config 24 has an invalid interface number: 123 but max is 1 [ 86.339276][ T5] usb 1-1: config 24 has no interface number 0 [ 86.345542][ T5] usb 1-1: config 24 has no interface number 1 [ 86.352420][ T5] usb 1-1: config 24 interface 226 altsetting 6 endpoint 0xF has invalid maxpacket 655, setting to 64 [ 86.363497][ T5] usb 1-1: config 24 interface 123 altsetting 79 endpoint 0xE has an invalid bInterval 64, changing to 7 [ 86.374804][ T5] usb 1-1: config 24 interface 123 altsetting 79 has an invalid endpoint with address 0x80, skipping [ 86.388883][ T5] usb 1-1: config 24 interface 226 has no altsetting 0 [ 86.395833][ T5] usb 1-1: config 24 interface 123 has no altsetting 0 [ 86.562048][ T5] usb 1-1: New USB device found, idVendor=0fe9, idProduct=db98, bcdDevice=82.a3 [ 86.571149][ T5] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.579333][ T5] usb 1-1: Product: syz [ 86.583635][ T5] usb 1-1: Manufacturer: syz [ 86.588253][ T5] usb 1-1: SerialNumber: syz executing program [ 86.914176][ T5] dvb-usb: found a 'DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2)' in warm state. [ 86.924109][ T5] dvb-usb: bulk message failed: -22 (2/-1) [ 86.932483][ T5] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 86.962298][ T5] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2)) [ 86.972265][ T5] usb 1-1: media controller created [ 86.997325][ T5] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 87.017631][ T5] cxusb: set interface failed [ 87.022449][ T5] dvb-usb: bulk message failed: -22 (1/-30592) [ 87.028641][ T5] dvb-usb: bulk message failed: -22 (3/-1) [ 87.061903][ T5] dvb-usb: bulk message failed: -22 (3/-1) [ 87.067998][ T5] dvb-usb: bulk message failed: -22 (7/-1) [ 87.074016][ T5] dvb-usb: bulk message failed: -22 (6/-1) [ 87.079979][ T5] dvb-usb: bulk message failed: -22 (7/-1) [ 87.085995][ T5] dvb-usb: bulk message failed: -22 (6/-1) [ 87.091986][ T5] Unable to enumerate dib7000p [ 87.096793][ T5] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2)' [ 87.142294][ T5] Registered IR keymap rc-dvico-mce [ 87.148393][ T5] rc rc0: DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 87.160910][ T5] input: DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input5 [ 87.173937][ T5] dvb-usb: schedule remote query interval to 100 msecs. [ 87.180986][ T5] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2) successfully initialized and connected. [ 87.234359][ T5] dvb-usb: found a 'DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2)' in warm state. [ 87.243760][ T5] dvb-usb: bulk message failed: -22 (2/-1) [ 87.252185][ T5] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 87.272286][ T5] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2)) [ 87.282153][ T5] usb 1-1: media controller created [ 87.307898][ T5] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 87.316750][ T761] dvb-usb: bulk message failed: -22 (1/-30591) [ 87.322999][ T761] ================================================================== [ 87.331063][ T761] BUG: KMSAN: uninit-value in cxusb_rc_query+0x2f7/0x360 [ 87.338066][ T761] CPU: 0 PID: 761 Comm: kworker/0:2 Not tainted 5.3.0-rc7+ #0 [ 87.345496][ T761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 87.355541][ T761] Workqueue: events dvb_usb_read_remote_control [ 87.361767][ T761] Call Trace: [ 87.365055][ T761] dump_stack+0x191/0x1f0 [ 87.369375][ T761] kmsan_report+0x162/0x2d0 [ 87.373860][ T761] __msan_warning+0x75/0xe0 [ 87.378345][ T761] cxusb_rc_query+0x2f7/0x360 [ 87.383012][ T761] ? cxusb_bluebird_power_ctrl+0x240/0x240 [ 87.388808][ T761] ? cxusb_bluebird_power_ctrl+0x240/0x240 [ 87.394596][ T761] dvb_usb_read_remote_control+0xf9/0x290 [ 87.401426][ T761] ? legacy_dvb_usb_read_remote_control+0x790/0x790 [ 87.408000][ T761] ? legacy_dvb_usb_read_remote_control+0x790/0x790 [ 87.414578][ T761] process_one_work+0x1572/0x1ef0 [ 87.419606][ T761] worker_thread+0x111b/0x2460 [ 87.424393][ T761] kthread+0x4b5/0x4f0 [ 87.428456][ T761] ? process_one_work+0x1ef0/0x1ef0 [ 87.433636][ T761] ? kthread_blkcg+0xf0/0xf0 [ 87.438311][ T761] ret_from_fork+0x35/0x40 [ 87.442711][ T761] [ 87.445019][ T761] Local variable description: ----ircode@cxusb_rc_query [ 87.451940][ T761] Variable was created at: [ 87.456365][ T761] cxusb_rc_query+0x4d/0x360 [ 87.460933][ T761] dvb_usb_read_remote_control+0xf9/0x290 [ 87.466626][ T761] ================================================================== [ 87.474669][ T761] Disabling lock debugging due to kernel taint [ 87.480837][ T761] Kernel panic - not syncing: panic_on_warn set ... [ 87.487535][ T761] CPU: 0 PID: 761 Comm: kworker/0:2 Tainted: G B 5.3.0-rc7+ #0 [ 87.496355][ T761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 87.506452][ T761] Workqueue: events dvb_usb_read_remote_control [ 87.512677][ T761] Call Trace: [ 87.516008][ T761] dump_stack+0x191/0x1f0 [ 87.520355][ T761] panic+0x3c9/0xc1e [ 87.524247][ T761] kmsan_report+0x2ca/0x2d0 [ 87.528747][ T761] __msan_warning+0x75/0xe0 [ 87.533326][ T761] cxusb_rc_query+0x2f7/0x360 [ 87.537989][ T761] ? cxusb_bluebird_power_ctrl+0x240/0x240 [ 87.543792][ T761] ? cxusb_bluebird_power_ctrl+0x240/0x240 [ 87.549603][ T761] dvb_usb_read_remote_control+0xf9/0x290 [ 87.555309][ T761] ? legacy_dvb_usb_read_remote_control+0x790/0x790 [ 87.561875][ T761] ? legacy_dvb_usb_read_remote_control+0x790/0x790 [ 87.568459][ T761] process_one_work+0x1572/0x1ef0 [ 87.573485][ T761] worker_thread+0x111b/0x2460 [ 87.578243][ T761] kthread+0x4b5/0x4f0 [ 87.582304][ T761] ? process_one_work+0x1ef0/0x1ef0 [ 87.587496][ T761] ? kthread_blkcg+0xf0/0xf0 [ 87.592072][ T761] ret_from_fork+0x35/0x40 [ 87.597713][ T761] Kernel Offset: disabled [ 87.602046][ T761] Rebooting in 86400 seconds..