[ 115.018655][ T31] audit: type=1800 audit(1564963436.068:25): pid=12978 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 115.046613][ T31] audit: type=1800 audit(1564963436.098:26): pid=12978 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 115.098081][ T31] audit: type=1800 audit(1564963436.118:27): pid=12978 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [ 116.309263][T13044] sshd (13044) used greatest stack depth: 54352 bytes left [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.12' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 128.392936][ T12] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 128.632908][ T12] usb 1-1: Using ep0 maxpacket: 8 [ 128.753355][ T12] usb 1-1: config 0 has an invalid interface number: 26 but max is 0 [ 128.762252][ T12] usb 1-1: config 0 has no interface number 0 [ 128.769231][ T12] usb 1-1: config 0 interface 26 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0 [ 128.779382][ T12] usb 1-1: New USB device found, idVendor=2040, idProduct=4902, bcdDevice=ff.51 [ 128.788640][ T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.798698][ T12] usb 1-1: config 0 descriptor?? [ 129.063167][ T12] hdpvr 1-1:0.26: firmware version 0x6 dated ¶ÐÅÊÙz&Ö¡>–ﶀ?û¿èŽe §GdÄ[ËÀw‹ÐÆÖ$½´ 6 [ 129.073301][ T12] hdpvr 1-1:0.26: untested firmware, the driver might not work. [ 129.082879][T13016] ================================================================== [ 129.090978][T13016] BUG: KMSAN: kernel-infoleak in _copy_to_user+0x16b/0x1f0 [ 129.098199][T13016] CPU: 1 PID: 13016 Comm: rsyslogd Not tainted 5.2.0+ #15 [ 129.105296][T13016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 129.115345][T13016] Call Trace: [ 129.118637][T13016] dump_stack+0x191/0x1f0 [ 129.122970][T13016] kmsan_report+0x162/0x2d0 [ 129.127488][T13016] kmsan_internal_check_memory+0x544/0xa80 [ 129.133323][T13016] ? msg_print_text+0x9c5/0xa70 [ 129.138181][T13016] kmsan_copy_to_user+0xa9/0xb0 [ 129.143629][T13016] _copy_to_user+0x16b/0x1f0 [ 129.148236][T13016] do_syslog+0x2e62/0x3160 [ 129.152661][T13016] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 129.158754][T13016] ? init_wait_entry+0x190/0x190 [ 129.163711][T13016] kmsg_read+0x142/0x1a0 [ 129.167984][T13016] ? mmap_vmcore_fault+0x30/0x30 [ 129.172931][T13016] proc_reg_read+0x25f/0x360 [ 129.177532][T13016] ? proc_reg_llseek+0x2f0/0x2f0 [ 129.182487][T13016] __vfs_read+0x1a9/0xc90 [ 129.186843][T13016] ? rw_verify_area+0x3a5/0x5e0 [ 129.191702][T13016] vfs_read+0x359/0x6f0 [ 129.195883][T13016] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 129.201956][T13016] ksys_read+0x265/0x430 [ 129.206215][T13016] __se_sys_read+0x92/0xb0 [ 129.210634][T13016] __x64_sys_read+0x4a/0x70 [ 129.215129][T13016] do_syscall_64+0xbc/0xf0 [ 129.219562][T13016] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 129.225547][T13016] RIP: 0033:0x7ff9432a81fd [ 129.230140][T13016] Code: d1 20 00 00 75 10 b8 00 00 00 00 0f 05 48 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 5e fa ff ff 48 89 04 24 b8 00 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 a7 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 129.250527][T13016] RSP: 002b:00007ff940847e30 EFLAGS: 00000293 ORIG_RAX: 0000000000000000 [ 129.259128][T13016] RAX: ffffffffffffffda RBX: 0000000001c124b0 RCX: 00007ff9432a81fd [ 129.267119][T13016] RDX: 0000000000000fff RSI: 00007ff94207c5a0 RDI: 0000000000000004 [ 129.275105][T13016] RBP: 0000000000000000 R08: 0000000001bfd260 R09: 0000000004000001 [ 129.275151][T13016] R10: 0000000000000001 R11: 0000000000000293 R12: 000000000065e420 [ 129.291224][T13016] R13: 00007ff9408489c0 R14: 00007ff9438ed040 R15: 0000000000000003 [ 129.291284][T13016] kmsan_internal_poison_shadow+0x53/0xa0 [ 129.305011][T13016] kmsan_slab_alloc+0xaa/0x120 [ 129.306197][ T12] hdpvr 1-1:0.26: device init f