[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 77.490036][ T31] audit: type=1800 audit(1566672195.548:25): pid=11348 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 77.514061][ T31] audit: type=1800 audit(1566672195.578:26): pid=11348 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 77.553071][ T31] audit: type=1800 audit(1566672195.598:27): pid=11348 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.176' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 88.910157][T11499] IPVS: ftp: loaded support on port[0] = 21 [ 89.222205][ T2885] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 89.462311][ T2885] usb 1-1: Using ep0 maxpacket: 16 [ 89.582283][ T2885] usb 1-1: config 0 has an invalid interface number: 128 but max is 0 [ 89.590917][ T2885] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.601286][ T2885] usb 1-1: config 0 has no interface number 0 [ 89.607482][ T2885] usb 1-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 89.619015][ T2885] usb 1-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08 [ 89.628356][ T2885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.637919][ T2885] usb 1-1: config 0 descriptor?? [ 89.902415][ T2885] radio-si470x 1-1:0.128: DeviceID=0x5001 ChipID=0xaf80 [ 90.122284][ T2885] radio-si470x 1-1:0.128: software version 80, hardware version 1 [ 90.342225][ T2885] radio-si470x 1-1:0.128: si470x_set_report: usb_control_msg returned -71 [ 90.362139][ C0] radio-si470x 1-1:0.128: non-zero urb status (-71) [ 90.369191][ T2885] radio-si470x 1-1:0.128: si470x_set_report: usb_control_msg returned -71 [ 90.378560][ T2885] radio-si470x: probe of 1-1:0.128 failed with error -22 [ 90.385870][ C0] usb 1-1:0.128: non-zero urb status (-71) [ 90.394592][ T2885] usb 1-1: USB disconnect, device number 2 [ 90.401416][ T2885] ================================================================== [ 90.409741][ T2885] BUG: KMSAN: uninit-value in usb_hcd_flush_endpoint+0x320/0x570 [ 90.417452][ T2885] CPU: 0 PID: 2885 Comm: kworker/0:2 Not tainted 5.3.0-rc3+ #17 [ 90.425384][ T2885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 90.435473][ T2885] Workqueue: usb_hub_wq hub_event [ 90.440493][ T2885] Call Trace: [ 90.443779][ T2885] dump_stack+0x191/0x1f0 [ 90.451722][ T2885] kmsan_report+0x162/0x2d0 [ 90.457427][ T2885] __msan_warning+0x75/0xe0 [ 90.462387][ T2885] usb_hcd_flush_endpoint+0x320/0x570 [ 90.467874][ T2885] ? usb_disable_device+0xf8d/0x1150 [ 90.473238][ T2885] usb_disable_device+0xfee/0x1150 [ 90.478348][ T2885] usb_disconnect+0x51e/0xd60 [ 90.483042][ T2885] hub_event+0x3fd0/0x72f0 [ 90.487490][ T2885] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 90.493465][ T2885] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 90.499627][ T2885] ? led_work+0x720/0x720 [ 90.504025][ T2885] ? led_work+0x720/0x720 [ 90.508341][ T2885] process_one_work+0x1572/0x1ef0 [ 90.513372][ T2885] worker_thread+0x189c/0x2460 [ 90.518456][ T2885] kthread+0x4b5/0x4f0 [ 90.522528][ T2885] ? process_one_work+0x1ef0/0x1ef0 [ 90.527747][ T2885] ? kthread_blkcg+0xf0/0xf0 [ 90.532325][ T2885] ret_from_fork+0x35/0x40 [ 90.536731][ T2885] [ 90.539055][ T2885] Uninit was stored to memory at: [ 90.544064][ T2885] kmsan_internal_chain_origin+0xcc/0x150 [ 90.549769][ T2885] __msan_chain_origin+0x6b/0xe0 [ 90.554775][ T2885] usb_hcd_link_urb_to_ep+0x47d/0x520 [ 90.560145][ T2885] dummy_urb_enqueue+0x581/0xe10 [ 90.565073][ T2885] usb_hcd_submit_urb+0x672/0x38d0 [ 90.570188][ T2885] usb_submit_urb+0x1ef3/0x1f50 [ 90.575030][ T2885] si470x_int_in_callback+0x3f7/0x1010 [ 90.580557][ T2885] __usb_hcd_giveback_urb+0x4a7/0x630 [ 90.585907][ T2885] usb_hcd_giveback_urb+0x189/0x670 [ 90.591086][ T2885] dummy_timer+0xab0/0x6770 [ 90.595571][ T2885] call_timer_fn+0x232/0x530 [ 90.600141][ T2885] __run_timers+0xcdc/0x11a0 [ 90.604772][ T2885] run_timer_softirq+0x2d/0x50 [ 90.609518][ T2885] __do_softirq+0x4a1/0x83a [ 90.614003][ T2885] irq_exit+0x230/0x280 [ 90.618373][ T2885] exiting_irq+0xe/0x10 [ 90.622518][ T2885] smp_apic_timer_interrupt+0x48/0x70 [ 90.627957][ T2885] apic_timer_interrupt+0x2e/0x40 [ 90.632957][ T2885] console_unlock+0x191b/0x1cb0 [ 90.637830][ T2885] vprintk_emit+0x47a/0x8a0 [ 90.642318][ T2885] vprintk_default+0x90/0xa0 [ 90.646897][ T2885] vprintk_func+0x635/0x810 [ 90.651511][ T2885] printk+0x180/0x1c3 [ 90.655486][ T2885] really_probe+0x1b57/0x1dc0 [ 90.660180][ T2885] driver_probe_device+0x1ba/0x510 [ 90.665375][ T2885] __device_attach_driver+0x5b8/0x790 [ 90.670990][ T2885] bus_for_each_drv+0x28e/0x3b0 [ 90.675943][ T2885] __device_attach+0x489/0x750 [ 90.680751][ T2885] device_initial_probe+0x4a/0x60 [ 90.685760][ T2885] bus_probe_device+0x131/0x390 [ 90.690610][ T2885] device_add+0x25b5/0x2df0 [ 90.695104][ T2885] usb_set_configuration+0x309f/0x3710 [ 90.700546][ T2885] generic_probe+0xe7/0x280 [ 90.705112][ T2885] usb_probe_device+0x146/0x200 [ 90.709944][ T2885] really_probe+0x1373/0x1dc0 [ 90.714601][ T2885] driver_probe_device+0x1ba/0x510 [ 90.719692][ T2885] __device_attach_driver+0x5b8/0x790 [ 90.725082][ T2885] bus_for_each_drv+0x28e/0x3b0 [ 90.729911][ T2885] __device_attach+0x489/0x750 [ 90.734654][ T2885] device_initial_probe+0x4a/0x60 [ 90.739682][ T2885] bus_probe_device+0x131/0x390 [ 90.744735][ T2885] device_add+0x25b5/0x2df0 [ 90.749223][ T2885] usb_new_device+0x23e5/0x2fb0 [ 90.754053][ T2885] hub_event+0x581d/0x72f0 [ 90.758484][ T2885] process_one_work+0x1572/0x1ef0 [ 90.763506][ T2885] worker_thread+0x111b/0x2460 [ 90.768254][ T2885] kthread+0x4b5/0x4f0 [ 90.772336][ T2885] ret_from_fork+0x35/0x40 [ 90.776742][ T2885] [ 90.779048][ T2885] Uninit was created at: [ 90.783277][ T2885] kmsan_internal_poison_shadow+0x53/0xa0 [ 90.788975][ T2885] kmsan_slab_free+0x8d/0x100 [ 90.795975][ T2885] kfree+0x4c1/0x2db0 [ 90.799953][ T2885] si470x_usb_driver_probe+0xa6f/0x3200 [ 90.805489][ T2885] usb_probe_interface+0xd19/0x1310 [ 90.810861][ T2885] really_probe+0x1373/0x1dc0 [ 90.815556][ T2885] driver_probe_device+0x1ba/0x510 [ 90.820670][ T2885] __device_attach_driver+0x5b8/0x790 [ 90.826081][ T2885] bus_for_each_drv+0x28e/0x3b0 [ 90.830912][ T2885] __device_attach+0x489/0x750 [ 90.835658][ T2885] device_initial_probe+0x4a/0x60 [ 90.840680][ T2885] bus_probe_device+0x131/0x390 [ 90.845566][ T2885] device_add+0x25b5/0x2df0 [ 90.850053][ T2885] usb_set_configuration+0x309f/0x3710 [ 90.855543][ T2885] generic_probe+0xe7/0x280 [ 90.860162][ T2885] usb_probe_device+0x146/0x200 [ 90.865021][ T2885] really_probe+0x1373/0x1dc0 [ 90.869745][ T2885] driver_probe_device+0x1ba/0x510 [ 90.874928][ T2885] __device_attach_driver+0x5b8/0x790 [ 90.880286][ T2885] bus_for_each_drv+0x28e/0x3b0 [ 90.885235][ T2885] __device_attach+0x489/0x750 [ 90.890454][ T2885] device_initial_probe+0x4a/0x60 [ 90.895481][ T2885] bus_probe_device+0x131/0x390 [ 90.900333][ T2885] device_add+0x25b5/0x2df0 [ 90.905118][ T2885] usb_new_device+0x23e5/0x2fb0 [ 90.909969][ T2885] hub_event+0x581d/0x72f0 [ 90.914399][ T2885] process_one_work+0x1572/0x1ef0 [ 90.919417][ T2885] worker_thread+0x111b/0x2460 [ 90.924162][ T2885] kthread+0x4b5/0x4f0 [ 90.928210][ T2885] ret_from_fork+0x35/0x40 [ 90.932783][ T2885] ================================================================== [ 90.940840][ T2885] Disabling lock debugging due to kernel taint [ 90.948021][ T2885] Kernel panic - not syncing: panic_on_warn set ... [ 90.954629][ T2885] CPU: 0 PID: 2885 Comm: kworker/0:2 Tainted: G B 5.3.0-rc3+ #17 [ 90.963990][ T2885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 90.974242][ T2885] Workqueue: usb_hub_wq hub_event [ 90.979254][ T2885] Call Trace: [ 90.982643][ T2885] dump_stack+0x191/0x1f0 [ 90.986990][ T2885] panic+0x3c9/0xc1e [ 90.990893][ T2885] kmsan_report+0x2ca/0x2d0 [ 90.995495][ T2885] __msan_warning+0x75/0xe0 [ 91.000072][ T2885] usb_hcd_flush_endpoint+0x320/0x570 [ 91.005454][ T2885] ? usb_disable_device+0xf8d/0x1150 [ 91.010820][ T2885] usb_disable_device+0xfee/0x1150 [ 91.015924][ T2885] usb_disconnect+0x51e/0xd60 [ 91.020601][ T2885] hub_event+0x3fd0/0x72f0 [ 91.025021][ T2885] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 91.031164][ T2885] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 91.037311][ T2885] ? led_work+0x720/0x720 [ 91.041632][ T2885] ? led_work+0x720/0x720 [ 91.046151][ T2885] process_one_work+0x1572/0x1ef0 [ 91.051173][ T2885] worker_thread+0x189c/0x2460 [ 91.055943][ T2885] kthread+0x4b5/0x4f0 [ 91.060119][ T2885] ? process_one_work+0x1ef0/0x1ef0 [ 91.065408][ T2885] ? kthread_blkcg+0xf0/0xf0 [ 91.069987][ T2885] ret_from_fork+0x35/0x40 [ 91.076511][ T2885] Kernel Offset: disabled [ 91.080847][ T2885] Rebooting in 86400 seconds..