[ 81.095927][ T32] audit: type=1800 audit(1569765462.147:25): pid=12148 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 81.131910][ T32] audit: type=1800 audit(1569765462.167:26): pid=12148 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 81.152143][ T32] audit: type=1800 audit(1569765462.177:27): pid=12148 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [ 82.257058][T12216] sshd (12216) used greatest stack depth: 52080 bytes left [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.147' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 92.161912][ T31] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 92.562045][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 92.652065][ T31] usb 1-1: config 127 has an invalid interface number: 209 but max is 0 [ 92.660661][ T31] usb 1-1: config 127 has no interface number 0 [ 92.667313][ T31] usb 1-1: config 127 interface 209 altsetting 159 endpoint 0x4 has invalid maxpacket 408, setting to 64 [ 92.678683][ T31] usb 1-1: config 127 interface 209 altsetting 159 endpoint 0x2 has invalid maxpacket 271, setting to 64 [ 92.690717][ T31] usb 1-1: config 127 interface 209 altsetting 159 endpoint 0x7 has invalid maxpacket 390, setting to 64 [ 92.702091][ T31] usb 1-1: config 127 interface 209 altsetting 159 endpoint 0x8 has invalid maxpacket 441, setting to 64 [ 92.713711][ T31] usb 1-1: config 127 interface 209 altsetting 159 endpoint 0xE has invalid maxpacket 685, setting to 64 [ 92.725594][ T31] usb 1-1: config 127 interface 209 altsetting 159 endpoint 0xB has an invalid bInterval 48, changing to 7 [ 92.737879][ T31] usb 1-1: config 127 interface 209 has no altsetting 0 [ 92.982087][ T31] usb 1-1: string descriptor 0 read error: -22 [ 92.988592][ T31] usb 1-1: New USB device found, idVendor=9022, idProduct=d421, bcdDevice=b1.79 [ 92.997807][ T31] usb 1-1: New USB device strings: Mfr=200, Product=31, SerialNumber=255 [ 93.046060][ T31] dw2102: su3000_identify_state [ 93.051017][ T31] dvb-usb: found a 'TeVii S421 PCI' in warm state. [ 93.058014][ T31] dw2102: su3000_power_ctrl: 1, initialized 0 [ 93.064347][ T31] dvb-usb: bulk message failed: -22 (2/-30591) [ 93.074214][ T31] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 93.102359][ T31] dvbdev: DVB: registering new adapter (TeVii S421 PCI) [ 93.109442][ T31] usb 1-1: media controller created [ 93.114799][ T31] dvb-usb: bulk message failed: -22 (6/0) [ 93.120825][ T31] dw2102: i2c transfer failed. [ 93.125792][ T31] dvb-usb: bulk message failed: -22 (6/0) [ 93.131589][ T31] dw2102: i2c transfer failed. [ 93.136512][ T31] dvb-usb: bulk message failed: -22 (6/0) [ 93.142331][ T31] dw2102: i2c transfer failed. [ 93.147811][ T31] dvb-usb: bulk message failed: -22 (6/0) [ 93.153909][ T31] dw2102: i2c transfer failed. [ 93.158721][ T31] dvb-usb: bulk message failed: -22 (6/0) [ 93.164590][ T31] dw2102: i2c transfer failed. [ 93.170037][ T31] dvb-usb: bulk message failed: -22 (6/0) [ 93.175869][ T31] dw2102: i2c transfer failed. [ 93.180676][ T31] dvb-usb: MAC address: 02:02:02:02:02:02 [ 93.207258][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 93.232712][ T31] dvb-usb: bulk message failed: -22 (1/0) [ 93.238600][ T31] dw2102: command 0x51 transfer failed. [ 93.247982][ T31] dvb-usb: bulk message failed: -22 (5/0) executing program [ 93.253906][ T31] dw2102: i2c transfer failed. [ 93.258743][ T31] dvb-usb: bulk message failed: -22 (5/0) [ 93.264618][ T31] dw2102: i2c transfer failed. [ 93.269442][ T31] dvb-usb: bulk message failed: -22 (5/0) [ 93.276524][ T31] dw2102: i2c transfer failed. [ 93.281857][ T31] dvb-usb: bulk message failed: -22 (5/0) [ 93.287635][ T31] dw2102: i2c transfer failed. [ 93.292623][ T31] dvb-usb: bulk message failed: -22 (5/0) [ 93.298669][ T31] dw2102: i2c transfer failed. [ 93.303847][ T31] dvb-usb: bulk message failed: -22 (5/0) [ 93.309598][ T31] dw2102: i2c transfer failed. [ 93.361909][ T31] dvb-usb: bulk message failed: -22 (5/0) [ 93.367703][ T31] dw2102: i2c transfer failed. [ 93.372612][ T31] dvb-usb: bulk message failed: -22 (5/0) [ 93.378369][ T31] dw2102: i2c transfer failed. [ 93.383960][ T31] dvb-usb: bulk message failed: -22 (5/0) [ 93.389745][ T31] dw2102: i2c transfer failed. [ 93.394763][ T31] dvb-usb: bulk message failed: -22 (5/0) [ 93.400548][ T31] dw2102: i2c transfer failed. [ 93.405468][ T31] dvb-usb: bulk message failed: -22 (5/0) [ 93.411333][ T31] dw2102: i2c transfer failed. [ 93.416432][ T31] dvb-usb: bulk message failed: -22 (5/0) [ 93.422322][ T31] dw2102: i2c transfer failed. [ 93.427125][ T31] ts2020 0-0060: Montage Technology TS2020 successfully identified [ 93.435987][ T31] dw2102: Attached RS2000/TS2020! [ 93.441137][ T31] usb 1-1: DVB: registering adapter 0 frontend 0 (M88RS2000 DVB-S)... [ 93.449481][ T31] dvbdev: dvb_create_media_entity: media entity 'M88RS2000 DVB-S' registered. [ 93.502146][ T31] Registered IR keymap rc-su3000 [ 93.507742][ T31] rc rc0: TeVii S421 PCI as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 93.517596][ T31] input: TeVii S421 PCI as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input5 [ 93.528992][ T31] dvb-usb: schedule remote query interval to 150 msecs. [ 93.536200][ T31] dw2102: su3000_power_ctrl: 0, initialized 1 [ 93.542371][ T31] dvb-usb: TeVii S421 PCI successfully initialized and connected. [ 93.555612][ T31] usb 1-1: USB disconnect, device number 2 [ 93.564097][ T31] ===================================================== [ 93.571060][ T31] BUG: KMSAN: uninit-value in dvb_usb_device_exit+0x1c8/0x270 [ 93.578521][ T31] CPU: 1 PID: 31 Comm: kworker/1:1 Not tainted 5.3.0-rc7+ #0 [ 93.585877][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 93.596149][ T31] Workqueue: usb_hub_wq hub_event [ 93.601150][ T31] Call Trace: [ 93.604423][ T31] dump_stack+0x191/0x1f0 [ 93.608734][ T31] kmsan_report+0x13a/0x2b0 [ 93.613219][ T31] __msan_warning+0x73/0xe0 [ 93.617703][ T31] strscpy+0x33f/0x4c0 [ 93.621762][ T31] ? __msan_poison_alloca+0x156/0x1b0 [ 93.627121][ T31] dvb_usb_device_exit+0x1c8/0x270 [ 93.634387][ T31] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 93.640262][ T31] dw2102_disconnect+0x256/0x2a0 [ 93.645190][ T31] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 93.651079][ T31] ? dw2102_probe+0xce0/0xce0 [ 93.655790][ T31] usb_unbind_interface+0x3a2/0xdd0 [ 93.660989][ T31] ? usb_driver_release_interface+0x2a0/0x2a0 [ 93.667048][ T31] device_release_driver_internal+0x911/0xd20 [ 93.673106][ T31] device_release_driver+0x4b/0x60 [ 93.678202][ T31] bus_remove_device+0x4bf/0x670 [ 93.683570][ T31] device_del+0xcd5/0x1d10 [ 93.687986][ T31] usb_disable_device+0x567/0x1150 [ 93.693084][ T31] usb_disconnect+0x51e/0xd60 [ 93.697756][ T31] hub_event+0x3fd0/0x72f0 [ 93.702191][ T31] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 93.708072][ T31] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 93.714030][ T31] ? led_work+0x720/0x720 [ 93.718339][ T31] ? led_work+0x720/0x720 [ 93.722660][ T31] process_one_work+0x1572/0x1ef0 [ 93.727684][ T31] worker_thread+0x189c/0x2460 [ 93.732449][ T31] kthread+0x4b5/0x4f0 [ 93.736500][ T31] ? process_one_work+0x1ef0/0x1ef0 [ 93.741691][ T31] ? kthread_blkcg+0xf0/0xf0 [ 93.746289][ T31] ret_from_fork+0x35/0x40 [ 93.750684][ T31] [ 93.752987][ T31] Uninit was created at: [ 93.757207][ T31] kmsan_internal_poison_shadow+0x53/0x100 [ 93.763101][ T31] kmsan_slab_free+0x8d/0x100 [ 93.767766][ T31] kfree+0x4c1/0x2db0 [ 93.771742][ T31] dw2102_probe+0xbd1/0xce0 [ 93.776238][ T31] usb_probe_interface+0xd19/0x1310 [ 93.781414][ T31] really_probe+0x1373/0x1dc0 [ 93.786072][ T31] driver_probe_device+0x1ba/0x510 [ 93.791159][ T31] __device_attach_driver+0x5b8/0x790 [ 93.796518][ T31] bus_for_each_drv+0x28e/0x3b0 [ 93.801357][ T31] __device_attach+0x489/0x750 [ 93.806098][ T31] device_initial_probe+0x4a/0x60 [ 93.811107][ T31] bus_probe_device+0x131/0x390 [ 93.815933][ T31] device_add+0x25b5/0x2df0 [ 93.820423][ T31] usb_set_configuration+0x309f/0x3710 [ 93.825858][ T31] generic_probe+0xe7/0x280 [ 93.830580][ T31] usb_probe_device+0x146/0x200 [ 93.835413][ T31] really_probe+0x1373/0x1dc0 [ 93.840109][ T31] driver_probe_device+0x1ba/0x510 [ 93.845205][ T31] __device_attach_driver+0x5b8/0x790 [ 93.850623][ T31] bus_for_each_drv+0x28e/0x3b0 [ 93.855451][ T31] __device_attach+0x489/0x750 [ 93.860190][ T31] device_initial_probe+0x4a/0x60 [ 93.865191][ T31] bus_probe_device+0x131/0x390 [ 93.870019][ T31] device_add+0x25b5/0x2df0 [ 93.874501][ T31] usb_new_device+0x23e5/0x2fb0 [ 93.879327][ T31] hub_event+0x581d/0x72f0 [ 93.883723][ T31] process_one_work+0x1572/0x1ef0 [ 93.888779][ T31] worker_thread+0x111b/0x2460 [ 93.893518][ T31] kthread+0x4b5/0x4f0 [ 93.897565][ T31] ret_from_fork+0x35/0x40 [ 93.901988][ T31] ===================================================== [ 93.908908][ T31] Disabling lock debugging due to kernel taint [ 93.915035][ T31] Kernel panic - not syncing: panic_on_warn set ... [ 93.921783][ T31] CPU: 1 PID: 31 Comm: kworker/1:1 Tainted: G B 5.3.0-rc7+ #0 [ 93.930663][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 93.940713][ T31] Workqueue: usb_hub_wq hub_event [ 93.945815][ T31] Call Trace: [ 93.949092][ T31] dump_stack+0x191/0x1f0 [ 93.953421][ T31] panic+0x3c9/0xc1e [ 93.957310][ T31] kmsan_report+0x2a2/0x2b0 [ 93.961797][ T31] __msan_warning+0x73/0xe0 [ 93.966279][ T31] strscpy+0x33f/0x4c0 [ 93.970326][ T31] ? __msan_poison_alloca+0x156/0x1b0 [ 93.975696][ T31] dvb_usb_device_exit+0x1c8/0x270 [ 93.980792][ T31] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 93.986668][ T31] dw2102_disconnect+0x256/0x2a0 [ 93.991584][ T31] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 93.997454][ T31] ? dw2102_probe+0xce0/0xce0 [ 94.002109][ T31] usb_unbind_interface+0x3a2/0xdd0 [ 94.007297][ T31] ? usb_driver_release_interface+0x2a0/0x2a0 [ 94.013347][ T31] device_release_driver_internal+0x911/0xd20 [ 94.020891][ T31] device_release_driver+0x4b/0x60 [ 94.026000][ T31] bus_remove_device+0x4bf/0x670 [ 94.030929][ T31] device_del+0xcd5/0x1d10 [ 94.035333][ T31] usb_disable_device+0x567/0x1150 [ 94.040428][ T31] usb_disconnect+0x51e/0xd60 [ 94.045092][ T31] hub_event+0x3fd0/0x72f0 [ 94.049505][ T31] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 94.055404][ T31] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 94.061272][ T31] ? led_work+0x720/0x720 [ 94.065576][ T31] ? led_work+0x720/0x720 [ 94.069895][ T31] process_one_work+0x1572/0x1ef0 [ 94.074907][ T31] worker_thread+0x189c/0x2460 [ 94.080017][ T31] kthread+0x4b5/0x4f0 [ 94.084072][ T31] ? process_one_work+0x1ef0/0x1ef0 [ 94.089250][ T31] ? kthread_blkcg+0xf0/0xf0 [ 94.093821][ T31] ret_from_fork+0x35/0x40 [ 94.099652][ T31] Kernel Offset: disabled [ 94.103980][ T31] Rebooting in 86400 seconds..