[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 77.376613][ T30] audit: type=1800 audit(1563358189.421:25): pid=11850 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 77.412630][ T30] audit: type=1800 audit(1563358189.451:26): pid=11850 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 77.432965][ T30] audit: type=1800 audit(1563358189.451:27): pid=11850 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.25' (ECDSA) to the list of known hosts. syzkaller login: [ 89.056953][T12003] IPVS: ftp: loaded support on port[0] = 21 [ 89.133788][T12003] chnl_net:caif_netlink_parms(): no params data found [ 89.166299][T12003] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.173621][T12003] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.181534][T12003] device bridge_slave_0 entered promiscuous mode [ 89.190136][T12003] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.197618][T12003] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.206105][T12003] device bridge_slave_1 entered promiscuous mode [ 89.226612][T12003] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 89.237017][T12003] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 89.258067][T12003] team0: Port device team_slave_0 added [ 89.265645][T12003] team0: Port device team_slave_1 added [ 89.325481][T12003] device hsr_slave_0 entered promiscuous mode [ 89.383233][T12003] device hsr_slave_1 entered promiscuous mode [ 89.434100][T12003] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.441383][T12003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.449190][T12003] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.456519][T12003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.503893][T12003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.518193][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.529534][ T17] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.538325][ T17] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.547188][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 89.561943][T12003] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.575109][ T2972] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 89.583829][ T2972] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.605726][ T2972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.619577][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 89.628377][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.635594][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.658574][ T2972] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 89.669028][ T2972] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 89.681329][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 89.696331][ T2972] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready executing program [ 89.710409][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 89.722335][T12003] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 89.749922][T12003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.062746][ T37] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 90.312771][ T37] usb 1-1: Using ep0 maxpacket: 8 [ 90.432999][ T37] usb 1-1: config 0 has an invalid interface number: 150 but max is 0 [ 90.441404][ T37] usb 1-1: config 0 has no interface number 0 [ 90.447734][ T37] usb 1-1: New USB device found, idVendor=050d, idProduct=0122, bcdDevice=c1.69 [ 90.457003][ T37] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.466437][ T37] usb 1-1: config 0 descriptor?? [ 90.774067][ T37] ================================================================== [ 90.782355][ T37] BUG: KMSAN: uninit-value in read_eprom_word+0x947/0xdd0 [ 90.789449][ T37] CPU: 1 PID: 37 Comm: kworker/1:1 Not tainted 5.2.0+ #14 [ 90.796529][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 90.806692][ T37] Workqueue: usb_hub_wq hub_event [ 90.811692][ T37] Call Trace: [ 90.814968][ T37] dump_stack+0x191/0x1f0 [ 90.819282][ T37] kmsan_report+0x162/0x2d0 [ 90.823766][ T37] __msan_warning+0x75/0xe0 [ 90.828250][ T37] read_eprom_word+0x947/0xdd0 [ 90.832998][ T37] pegasus_probe+0xf2b/0x4be0 [ 90.837664][ T37] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 90.843537][ T37] ? usb_unlocked_disable_lpm+0x10a/0x180 [ 90.849230][ T37] ? kaweth_get_link+0x70/0x70 [ 90.854002][ T37] ? kaweth_get_link+0x70/0x70 [ 90.858767][ T37] usb_probe_interface+0xd19/0x1310 [ 90.863950][ T37] ? usb_register_driver+0x7d0/0x7d0 [ 90.869217][ T37] really_probe+0x1344/0x1d90 [ 90.873884][ T37] driver_probe_device+0x1ba/0x510 [ 90.879083][ T37] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 90.884957][ T37] __device_attach_driver+0x5b8/0x790 [ 90.890313][ T37] bus_for_each_drv+0x28e/0x3b0 [ 90.895141][ T37] ? deferred_probe_work_func+0x400/0x400 [ 90.900844][ T37] __device_attach+0x489/0x750 [ 90.905607][ T37] device_initial_probe+0x4a/0x60 [ 90.910609][ T37] bus_probe_device+0x131/0x390 [ 90.915622][ T37] device_add+0x25b5/0x2df0 [ 90.920118][ T37] usb_set_configuration+0x309f/0x3710 [ 90.925573][ T37] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 90.931626][ T37] generic_probe+0xe7/0x280 [ 90.936192][ T37] ? usb_choose_configuration+0xae0/0xae0 [ 90.941887][ T37] usb_probe_device+0x146/0x200 [ 90.946718][ T37] ? usb_register_device_driver+0x470/0x470 [ 90.952592][ T37] really_probe+0x1344/0x1d90 [ 90.957258][ T37] driver_probe_device+0x1ba/0x510 [ 90.962347][ T37] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 90.968220][ T37] __device_attach_driver+0x5b8/0x790 [ 90.973578][ T37] bus_for_each_drv+0x28e/0x3b0 [ 90.978404][ T37] ? deferred_probe_work_func+0x400/0x400 [ 90.984110][ T37] __device_attach+0x489/0x750 [ 90.988871][ T37] device_initial_probe+0x4a/0x60 [ 90.993875][ T37] bus_probe_device+0x131/0x390 [ 90.998709][ T37] device_add+0x25b5/0x2df0 [ 91.003202][ T37] usb_new_device+0x23e5/0x2fb0 [ 91.008072][ T37] hub_event+0x5853/0x7320 [ 91.012518][ T37] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 91.018497][ T37] ? led_work+0x720/0x720 [ 91.022812][ T37] ? led_work+0x720/0x720 [ 91.027124][ T37] process_one_work+0x1572/0x1f00 [ 91.032223][ T37] worker_thread+0x111b/0x2460 [ 91.037037][ T37] kthread+0x4b5/0x4f0 [ 91.041086][ T37] ? process_one_work+0x1f00/0x1f00 [ 91.046264][ T37] ? kthread_blkcg+0xf0/0xf0 [ 91.050852][ T37] ret_from_fork+0x35/0x40 [ 91.055271][ T37] [ 91.057583][ T37] Local variable description: ----data.addr.i13@read_eprom_word [ 91.065195][ T37] Variable was created at: [ 91.069597][ T37] read_eprom_word+0x498/0xdd0 [ 91.074351][ T37] pegasus_probe+0xf2b/0x4be0 [ 91.079007][ T37] ================================================================== [ 91.087051][ T37] Disabling lock debugging due to kernel taint [ 91.093178][ T37] Kernel panic - not syncing: panic_on_warn set ... [ 91.099762][ T37] CPU: 1 PID: 37 Comm: kworker/1:1 Tainted: G B 5.2.0+ #14 [ 91.108231][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 91.118291][ T37] Workqueue: usb_hub_wq hub_event [ 91.123294][ T37] Call Trace: [ 91.126589][ T37] dump_stack+0x191/0x1f0 [ 91.130904][ T37] panic+0x3c9/0xc1e [ 91.134795][ T37] kmsan_report+0x2ca/0x2d0 [ 91.139419][ T37] __msan_warning+0x75/0xe0 [ 91.143902][ T37] read_eprom_word+0x947/0xdd0 [ 91.148673][ T37] pegasus_probe+0xf2b/0x4be0 [ 91.153347][ T37] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 91.159215][ T37] ? usb_unlocked_disable_lpm+0x10a/0x180 [ 91.164910][ T37] ? kaweth_get_link+0x70/0x70 [ 91.169666][ T37] ? kaweth_get_link+0x70/0x70 [ 91.174409][ T37] usb_probe_interface+0xd19/0x1310 [ 91.179764][ T37] ? usb_register_driver+0x7d0/0x7d0 [ 91.185075][ T37] really_probe+0x1344/0x1d90 [ 91.189747][ T37] driver_probe_device+0x1ba/0x510 [ 91.194839][ T37] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 91.200714][ T37] __device_attach_driver+0x5b8/0x790 [ 91.206180][ T37] bus_for_each_drv+0x28e/0x3b0 [ 91.211008][ T37] ? deferred_probe_work_func+0x400/0x400 [ 91.216716][ T37] __device_attach+0x489/0x750 [ 91.221468][ T37] device_initial_probe+0x4a/0x60 [ 91.226470][ T37] bus_probe_device+0x131/0x390 [ 91.231403][ T37] device_add+0x25b5/0x2df0 [ 91.235897][ T37] usb_set_configuration+0x309f/0x3710 [ 91.241349][ T37] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 91.247603][ T37] generic_probe+0xe7/0x280 [ 91.252094][ T37] ? usb_choose_configuration+0xae0/0xae0 [ 91.257790][ T37] usb_probe_device+0x146/0x200 [ 91.262656][ T37] ? usb_register_device_driver+0x470/0x470 [ 91.268549][ T37] really_probe+0x1344/0x1d90 [ 91.273221][ T37] driver_probe_device+0x1ba/0x510 [ 91.278333][ T37] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 91.284212][ T37] __device_attach_driver+0x5b8/0x790 [ 91.289573][ T37] bus_for_each_drv+0x28e/0x3b0 [ 91.294408][ T37] ? deferred_probe_work_func+0x400/0x400 [ 91.300108][ T37] __device_attach+0x489/0x750 [ 91.304869][ T37] device_initial_probe+0x4a/0x60 [ 91.309873][ T37] bus_probe_device+0x131/0x390 [ 91.314708][ T37] device_add+0x25b5/0x2df0 [ 91.319201][ T37] usb_new_device+0x23e5/0x2fb0 [ 91.324043][ T37] hub_event+0x5853/0x7320 [ 91.328480][ T37] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 91.334442][ T37] ? led_work+0x720/0x720 [ 91.338749][ T37] ? led_work+0x720/0x720 [ 91.343080][ T37] process_one_work+0x1572/0x1f00 [ 91.348095][ T37] worker_thread+0x111b/0x2460 [ 91.352878][ T37] kthread+0x4b5/0x4f0 [ 91.356924][ T37] ? process_one_work+0x1f00/0x1f00 [ 91.362102][ T37] ? kthread_blkcg+0xf0/0xf0 [ 91.366679][ T37] ret_from_fork+0x35/0x40 [ 91.372703][ T37] Kernel Offset: disabled [ 91.377033][ T37] Rebooting in 86400 seconds..