[ 97.609547][ T30] audit: type=1800 audit(1564128557.653:25): pid=11740 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 97.642110][ T30] audit: type=1800 audit(1564128557.683:26): pid=11740 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 97.662466][ T30] audit: type=1800 audit(1564128557.693:27): pid=11740 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [ 99.050987][T11811] sshd (11811) used greatest stack depth: 54368 bytes left [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.247' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 108.060406][T11891] IPVS: ftp: loaded support on port[0] = 21 [ 108.391922][ T12] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 108.752229][ T12] usb 1-1: config 0 has an invalid interface number: 225 but max is 0 [ 108.760465][ T12] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.770850][ T12] usb 1-1: config 0 has no interface number 0 [ 108.777399][ T12] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice= 9.8d [ 108.795479][ T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.806795][ T12] usb 1-1: config 0 descriptor?? [ 108.862731][ T12] mcba_usb 1-1:0.225 can0: failed tx_urb -2 [ 108.868958][ T12] mcba_usb 1-1:0.225 can0: Failed to send cmd (169) [ 108.880105][ T12] mcba_usb 1-1:0.225 can0: failed tx_urb -2 [ 108.886377][ T12] mcba_usb 1-1:0.225 can0: Failed to send cmd (169) [ 108.893110][ T12] mcba_usb 1-1:0.225: Microchip CAN BUS Analyzer connected [ 109.062424][ T2869] usb 1-1: USB disconnect, device number 2 [ 109.069035][ T2869] mcba_usb 1-1:0.225 can0: device disconnected [ 109.138094][ T2869] ================================================================== [ 109.146226][ T2869] BUG: KMSAN: uninit-value in usb_kill_anchored_urbs+0x358/0x3b0 [ 109.153984][ T2869] CPU: 0 PID: 2869 Comm: kworker/0:2 Not tainted 5.2.0+ #15 [ 109.161280][ T2869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 109.171381][ T2869] Workqueue: usb_hub_wq hub_event [ 109.176465][ T2869] Call Trace: [ 109.179785][ T2869] dump_stack+0x191/0x1f0 [ 109.184223][ T2869] kmsan_report+0x162/0x2d0 [ 109.188762][ T2869] __msan_warning+0x75/0xe0 [ 109.193301][ T2869] usb_kill_anchored_urbs+0x358/0x3b0 [ 109.198719][ T2869] mcba_usb_disconnect+0x135/0x1a0 [ 109.204039][ T2869] ? mcba_usb_probe+0x22b0/0x22b0 [ 109.209093][ T2869] usb_unbind_interface+0x3a2/0xdd0 [ 109.214345][ T2869] ? usb_driver_release_interface+0x2a0/0x2a0 [ 109.220447][ T2869] device_release_driver_internal+0x911/0xd20 [ 109.226566][ T2869] device_release_driver+0x4b/0x60 [ 109.231710][ T2869] bus_remove_device+0x4bf/0x670 [ 109.236695][ T2869] device_del+0xc75/0x1c50 [ 109.241162][ T2869] ? usb_remove_ep_devs+0x8d/0xe0 [ 109.246231][ T2869] usb_disable_device+0x567/0x1150 [ 109.251427][ T2869] usb_disconnect+0x51e/0xd60 [ 109.256187][ T2869] hub_event+0x4003/0x7320 [ 109.260923][ T2869] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 109.266853][ T2869] ? led_work+0x720/0x720 [ 109.271204][ T2869] ? led_work+0x720/0x720 [ 109.275562][ T2869] process_one_work+0x1572/0x1f00 [ 109.280651][ T2869] worker_thread+0x111b/0x2460 [ 109.285490][ T2869] kthread+0x4b5/0x4f0 [ 109.289585][ T2869] ? process_one_work+0x1f00/0x1f00 [ 109.294818][ T2869] ? kthread_blkcg+0xf0/0xf0 [ 109.299437][ T2869] ret_from_fork+0x35/0x40 [ 109.303889][ T2869] [ 109.306224][ T2869] Uninit was created at: [ 109.310928][ T2869] kmsan_internal_poison_shadow+0x53/0xa0 [ 109.316717][ T2869] kmsan_slab_free+0x8d/0x100 [ 109.321473][ T2869] kfree+0x4b2/0x2960 [ 109.325485][ T2869] kvfree+0xe4/0x100 [ 109.329847][ T2869] netdev_freemem+0x6b/0x90 [ 109.334549][ T2869] netdev_release+0xab/0xf0 [ 109.339190][ T2869] device_release+0xe2/0x380 [ 109.343817][ T2869] kobject_put+0x38d/0x480 [ 109.350447][ T2869] put_device+0x51/0x70 [ 109.355884][ T2869] free_netdev+0x50e/0x540 [ 109.360387][ T2869] free_candev+0x37/0x40 [ 109.364665][ T2869] mcba_usb_disconnect+0x11b/0x1a0 [ 109.370648][ T2869] usb_unbind_interface+0x3a2/0xdd0 [ 109.376167][ T2869] device_release_driver_internal+0x911/0xd20 [ 109.382358][ T2869] device_release_driver+0x4b/0x60 [ 109.387934][ T2869] bus_remove_device+0x4bf/0x670 [ 109.392907][ T2869] device_del+0xc75/0x1c50 [ 109.397368][ T2869] usb_disable_device+0x567/0x1150 [ 109.402510][ T2869] usb_disconnect+0x51e/0xd60 [ 109.407249][ T2869] hub_event+0x4003/0x7320 [ 109.411711][ T2869] process_one_work+0x1572/0x1f00 [ 109.416933][ T2869] worker_thread+0x111b/0x2460 [ 109.421749][ T2869] kthread+0x4b5/0x4f0 [ 109.425878][ T2869] ret_from_fork+0x35/0x40 [ 109.430649][ T2869] ================================================================== [ 109.438745][ T2869] Disabling lock debugging due to kernel taint [ 109.444912][ T2869] Kernel panic - not syncing: panic_on_warn set ... [ 109.451581][ T2869] CPU: 0 PID: 2869 Comm: kworker/0:2 Tainted: G B 5.2.0+ #15 [ 109.460289][ T2869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 109.470640][ T2869] Workqueue: usb_hub_wq hub_event [ 109.475691][ T2869] Call Trace: [ 109.479016][ T2869] dump_stack+0x191/0x1f0 [ 109.483391][ T2869] panic+0x3c9/0xc1e [ 109.487359][ T2869] kmsan_report+0x2ca/0x2d0 [ 109.492010][ T2869] __msan_warning+0x75/0xe0 [ 109.496549][ T2869] usb_kill_anchored_urbs+0x358/0x3b0 [ 109.501967][ T2869] mcba_usb_disconnect+0x135/0x1a0 [ 109.507121][ T2869] ? mcba_usb_probe+0x22b0/0x22b0 [ 109.512179][ T2869] usb_unbind_interface+0x3a2/0xdd0 [ 109.517450][ T2869] ? usb_driver_release_interface+0x2a0/0x2a0 [ 109.523583][ T2869] device_release_driver_internal+0x911/0xd20 [ 109.529722][ T2869] device_release_driver+0x4b/0x60 [ 109.534875][ T2869] bus_remove_device+0x4bf/0x670 [ 109.539865][ T2869] device_del+0xc75/0x1c50 [ 109.544334][ T2869] ? usb_remove_ep_devs+0x8d/0xe0 [ 109.549408][ T2869] usb_disable_device+0x567/0x1150 [ 109.554563][ T2869] usb_disconnect+0x51e/0xd60 [ 109.559297][ T2869] hub_event+0x4003/0x7320 [ 109.563888][ T2869] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 109.569813][ T2869] ? led_work+0x720/0x720 [ 109.574164][ T2869] ? led_work+0x720/0x720 [ 109.578643][ T2869] process_one_work+0x1572/0x1f00 [ 109.583728][ T2869] worker_thread+0x111b/0x2460 [ 109.588571][ T2869] kthread+0x4b5/0x4f0 [ 109.592683][ T2869] ? process_one_work+0x1f00/0x1f00 [ 109.597925][ T2869] ? kthread_blkcg+0xf0/0xf0 [ 109.602549][ T2869] ret_from_fork+0x35/0x40 [ 109.607738][ T2869] Kernel Offset: disabled [ 109.612094][ T2869] Rebooting in 86400 seconds..