[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 110.359003][ T30] audit: type=1800 audit(1564768161.404:25): pid=13336 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 110.383185][ T30] audit: type=1800 audit(1564768161.434:26): pid=13336 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 110.432968][ T30] audit: type=1800 audit(1564768161.454:27): pid=13336 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.44' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 121.112319][ T3922] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 121.352311][ T3922] usb 1-1: Using ep0 maxpacket: 16 [ 121.472477][ T3922] usb 1-1: config 0 has an invalid interface number: 235 but max is 0 [ 121.480726][ T3922] usb 1-1: config 0 has no interface number 0 [ 121.487137][ T3922] usb 1-1: config 0 interface 235 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 121.497160][ T3922] usb 1-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=46.6b [ 121.506339][ T3922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.515785][ T3922] usb 1-1: config 0 descriptor?? [ 121.554616][ T3922] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 15 is not bulk. [ 121.564690][ T3922] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 10 is not bulk. [ 121.574812][ T3922] microtek usb (rev 0.4.3): will this work? Command EP is not usually 5 [ 121.583817][ T3922] ================================================================== [ 121.591919][ T3922] BUG: KMSAN: uninit-value in mts_usb_probe+0xd1d/0xfb0 [ 121.598859][ T3922] CPU: 1 PID: 3922 Comm: kworker/1:2 Not tainted 5.2.0+ #15 [ 121.606238][ T3922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 121.616300][ T3922] Workqueue: usb_hub_wq hub_event [ 121.621407][ T3922] Call Trace: [ 121.624799][ T3922] dump_stack+0x191/0x1f0 [ 121.629138][ T3922] kmsan_report+0x162/0x2d0 [ 121.633655][ T3922] __msan_warning+0x75/0xe0 [ 121.638164][ T3922] mts_usb_probe+0xd1d/0xfb0 [ 121.642766][ T3922] ? mdc800_usb_waitForIRQ+0x790/0x790 [ 121.648223][ T3922] ? mdc800_usb_waitForIRQ+0x790/0x790 [ 121.653679][ T3922] usb_probe_interface+0xd19/0x1310 [ 121.658888][ T3922] ? usb_register_driver+0x7d0/0x7d0 [ 121.664174][ T3922] really_probe+0x1344/0x1d90 [ 121.668868][ T3922] driver_probe_device+0x1ba/0x510 [ 121.674000][ T3922] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 121.679901][ T3922] __device_attach_driver+0x5b8/0x790 [ 121.685313][ T3922] bus_for_each_drv+0x28e/0x3b0 [ 121.690167][ T3922] ? deferred_probe_work_func+0x400/0x400 [ 121.695899][ T3922] __device_attach+0x489/0x750 [ 121.700698][ T3922] device_initial_probe+0x4a/0x60 [ 121.705744][ T3922] bus_probe_device+0x131/0x390 [ 121.710622][ T3922] device_add+0x25b5/0x2df0 [ 121.715154][ T3922] usb_set_configuration+0x309f/0x3710 [ 121.720686][ T3922] generic_probe+0xe7/0x280 [ 121.725214][ T3922] ? usb_choose_configuration+0xae0/0xae0 [ 121.730937][ T3922] usb_probe_device+0x146/0x200 [ 121.735792][ T3922] ? usb_register_device_driver+0x470/0x470 [ 121.741689][ T3922] really_probe+0x1344/0x1d90 [ 121.746376][ T3922] driver_probe_device+0x1ba/0x510 [ 121.751486][ T3922] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 121.757404][ T3922] __device_attach_driver+0x5b8/0x790 [ 121.762794][ T3922] bus_for_each_drv+0x28e/0x3b0 [ 121.767644][ T3922] ? deferred_probe_work_func+0x400/0x400 [ 121.773382][ T3922] __device_attach+0x489/0x750 [ 121.778192][ T3922] device_initial_probe+0x4a/0x60 [ 121.783222][ T3922] bus_probe_device+0x131/0x390 [ 121.788281][ T3922] device_add+0x25b5/0x2df0 [ 121.792809][ T3922] usb_new_device+0x23e5/0x2fb0 [ 121.797681][ T3922] hub_event+0x5853/0x7320 [ 121.806229][ T3922] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 121.812147][ T3922] ? led_work+0x720/0x720 [ 121.816475][ T3922] ? led_work+0x720/0x720 [ 121.820814][ T3922] process_one_work+0x1572/0x1f00 [ 121.825868][ T3922] worker_thread+0x111b/0x2460 [ 121.830661][ T3922] kthread+0x4b5/0x4f0 [ 121.834729][ T3922] ? process_one_work+0x1f00/0x1f00 [ 121.840114][ T3922] ? kthread_blkcg+0xf0/0xf0 [ 121.844722][ T3922] ret_from_fork+0x35/0x40 [ 121.849161][ T3922] [ 121.851473][ T3922] Uninit was stored to memory at: [ 121.856493][ T3922] kmsan_internal_chain_origin+0xcc/0x150 [ 121.862235][ T3922] __msan_chain_origin+0x6b/0xe0 [ 121.867186][ T3922] mts_usb_probe+0xcf7/0xfb0 [ 121.871778][ T3922] usb_probe_interface+0xd19/0x1310 [ 121.876988][ T3922] really_probe+0x1344/0x1d90 [ 121.881662][ T3922] driver_probe_device+0x1ba/0x510 [ 121.886785][ T3922] __device_attach_driver+0x5b8/0x790 [ 121.892162][ T3922] bus_for_each_drv+0x28e/0x3b0 [ 121.897008][ T3922] __device_attach+0x489/0x750 [ 121.901769][ T3922] device_initial_probe+0x4a/0x60 [ 121.906805][ T3922] bus_probe_device+0x131/0x390 [ 121.911831][ T3922] device_add+0x25b5/0x2df0 [ 121.916333][ T3922] usb_set_configuration+0x309f/0x3710 [ 121.922038][ T3922] generic_probe+0xe7/0x280 [ 121.926591][ T3922] usb_probe_device+0x146/0x200 [ 121.931551][ T3922] really_probe+0x1344/0x1d90 [ 121.936316][ T3922] driver_probe_device+0x1ba/0x510 [ 121.941421][ T3922] __device_attach_driver+0x5b8/0x790 [ 121.946786][ T3922] bus_for_each_drv+0x28e/0x3b0 [ 121.951649][ T3922] __device_attach+0x489/0x750 [ 121.956414][ T3922] device_initial_probe+0x4a/0x60 [ 121.961458][ T3922] bus_probe_device+0x131/0x390 [ 121.966333][ T3922] device_add+0x25b5/0x2df0 [ 121.970829][ T3922] usb_new_device+0x23e5/0x2fb0 [ 121.975677][ T3922] hub_event+0x5853/0x7320 [ 121.980110][ T3922] process_one_work+0x1572/0x1f00 [ 121.985133][ T3922] worker_thread+0x111b/0x2460 [ 121.989895][ T3922] kthread+0x4b5/0x4f0 [ 121.993957][ T3922] ret_from_fork+0x35/0x40 [ 121.998355][ T3922] [ 122.000666][ T3922] Local variable description: ----ep_in_set@mts_usb_probe [ 122.007752][ T3922] Variable was created at: [ 122.012171][ T3922] mts_usb_probe+0x53/0xfb0 [ 122.016681][ T3922] usb_probe_interface+0xd19/0x1310 [ 122.021879][ T3922] ================================================================== [ 122.029931][ T3922] Disabling lock debugging due to kernel taint [ 122.036076][ T3922] Kernel panic - not syncing: panic_on_warn set ... [ 122.042691][ T3922] CPU: 1 PID: 3922 Comm: kworker/1:2 Tainted: G B 5.2.0+ #15 [ 122.051378][ T3922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 122.061442][ T3922] Workqueue: usb_hub_wq hub_event [ 122.066465][ T3922] Call Trace: [ 122.069762][ T3922] dump_stack+0x191/0x1f0 [ 122.074123][ T3922] panic+0x3c9/0xc1e [ 122.078251][ T3922] kmsan_report+0x2ca/0x2d0 [ 122.082762][ T3922] __msan_warning+0x75/0xe0 [ 122.087359][ T3922] mts_usb_probe+0xd1d/0xfb0 [ 122.091985][ T3922] ? mdc800_usb_waitForIRQ+0x790/0x790 [ 122.097454][ T3922] ? mdc800_usb_waitForIRQ+0x790/0x790 [ 122.102931][ T3922] usb_probe_interface+0xd19/0x1310 [ 122.108247][ T3922] ? usb_register_driver+0x7d0/0x7d0 [ 122.113536][ T3922] really_probe+0x1344/0x1d90 [ 122.118232][ T3922] driver_probe_device+0x1ba/0x510 [ 122.123355][ T3922] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 122.129250][ T3922] __device_attach_driver+0x5b8/0x790 [ 122.134637][ T3922] bus_for_each_drv+0x28e/0x3b0 [ 122.139496][ T3922] ? deferred_probe_work_func+0x400/0x400 [ 122.145228][ T3922] __device_attach+0x489/0x750 [ 122.150008][ T3922] device_initial_probe+0x4a/0x60 [ 122.155034][ T3922] bus_probe_device+0x131/0x390 [ 122.159897][ T3922] device_add+0x25b5/0x2df0 [ 122.164455][ T3922] usb_set_configuration+0x309f/0x3710 [ 122.169965][ T3922] generic_probe+0xe7/0x280 [ 122.174468][ T3922] ? usb_choose_configuration+0xae0/0xae0 [ 122.180204][ T3922] usb_probe_device+0x146/0x200 [ 122.185063][ T3922] ? usb_register_device_driver+0x470/0x470 [ 122.191146][ T3922] really_probe+0x1344/0x1d90 [ 122.195837][ T3922] driver_probe_device+0x1ba/0x510 [ 122.200952][ T3922] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 122.206873][ T3922] __device_attach_driver+0x5b8/0x790 [ 122.212261][ T3922] bus_for_each_drv+0x28e/0x3b0 [ 122.217127][ T3922] ? deferred_probe_work_func+0x400/0x400 [ 122.222881][ T3922] __device_attach+0x489/0x750 [ 122.227659][ T3922] device_initial_probe+0x4a/0x60 [ 122.232688][ T3922] bus_probe_device+0x131/0x390 [ 122.237560][ T3922] device_add+0x25b5/0x2df0 [ 122.242114][ T3922] usb_new_device+0x23e5/0x2fb0 [ 122.247095][ T3922] hub_event+0x5853/0x7320 [ 122.251563][ T3922] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 122.257455][ T3922] ? led_work+0x720/0x720 [ 122.261778][ T3922] ? led_work+0x720/0x720 [ 122.266110][ T3922] process_one_work+0x1572/0x1f00 [ 122.271157][ T3922] worker_thread+0x111b/0x2460 [ 122.275961][ T3922] kthread+0x4b5/0x4f0 [ 122.280023][ T3922] ? process_one_work+0x1f00/0x1f00 [ 122.285222][ T3922] ? kthread_blkcg+0xf0/0xf0 [ 122.289804][ T3922] ret_from_fork+0x35/0x40 [ 122.295264][ T3922] Kernel Offset: disabled [ 122.299609][ T3922] Rebooting in 86400 seconds..