[ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started System Logging Service. [ OK ] Started getty on tty2-tty6 if dbus and logind are not available. Debian GNU/Linux 9 syzkaller ttyS0 syzkaller login: [ 118.736017][ T7953] sshd (7953) used greatest stack depth: 4128 bytes left Warning: Permanently added '10.128.10.47' (ECDSA) to the list of known hosts. executing program [ 144.721843][ T55] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 144.971817][ T55] usb 1-1: Using ep0 maxpacket: 8 [ 145.092015][ T55] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 247 [ 145.102116][ T55] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 628 [ 145.112208][ T55] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 145.292012][ T55] usb 1-1: New USB device found, idVendor=0424, idProduct=7505, bcdDevice= 0.40 [ 145.301135][ T55] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.309431][ T55] usb 1-1: Product: syz [ 145.313833][ T55] usb 1-1: Manufacturer: syz [ 145.318508][ T55] usb 1-1: SerialNumber: syz [ 145.345367][ T8265] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 145.354966][ T8265] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 145.583253][ T8265] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 145.590168][ T8265] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 146.042033][ T55] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 146.048878][ T55] smsc75xx v1.0.0 [ 146.243011][ T8265] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 146.249907][ T8265] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 146.491898][ T55] ===================================================== [ 146.498872][ T55] BUG: KMSAN: uninit-value in smsc75xx_bind+0x576/0x13f0 [ 146.505871][ T55] CPU: 1 PID: 55 Comm: kworker/1:1 Not tainted 5.10.0-rc4-syzkaller #0 [ 146.514076][ T55] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 146.524116][ T55] Workqueue: usb_hub_wq hub_event [ 146.529116][ T55] Call Trace: [ 146.532391][ T55] dump_stack+0x21c/0x280 [ 146.536712][ T55] kmsan_report+0xf7/0x1e0 [ 146.541112][ T55] __msan_warning+0x5f/0xa0 [ 146.545605][ T55] smsc75xx_bind+0x576/0x13f0 [ 146.550260][ T55] ? smsc75xx_write_wuff+0xa60/0xa60 [ 146.555518][ T55] usbnet_probe+0x1169/0x3e90 [ 146.560173][ T55] ? kmsan_internal_set_origin+0x85/0xc0 [ 146.565783][ T55] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 146.571825][ T55] ? usbnet_disconnect+0x670/0x670 [ 146.576917][ T55] usb_probe_interface+0xfcc/0x1520 [ 146.582094][ T55] ? usb_register_driver+0x900/0x900 [ 146.587357][ T55] really_probe+0xebd/0x2420 [ 146.591925][ T55] driver_probe_device+0x293/0x390 [ 146.597011][ T55] __device_attach_driver+0x63f/0x830 [ 146.602363][ T55] bus_for_each_drv+0x2ca/0x3f0 [ 146.607187][ T55] ? state_synced_show+0x130/0x130 [ 146.612292][ T55] __device_attach+0x538/0x860 [ 146.617043][ T55] device_initial_probe+0x4a/0x60 [ 146.622045][ T55] bus_probe_device+0x177/0x3d0 [ 146.626882][ T55] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.634228][ T55] device_add+0x399e/0x3f20 [ 146.638712][ T55] usb_set_configuration+0x39cf/0x4010 [ 146.644150][ T55] ? usb_set_configuration+0xa61/0x4010 [ 146.649680][ T55] ? kmsan_get_shadow_origin_ptr+0x50/0xb0 [ 146.655471][ T55] usb_generic_driver_probe+0x138/0x300 [ 146.660992][ T55] ? usb_choose_configuration+0xf00/0xf00 [ 146.666687][ T55] usb_probe_device+0x317/0x570 [ 146.671526][ T55] ? usb_register_device_driver+0x590/0x590 [ 146.677393][ T55] really_probe+0xebd/0x2420 [ 146.681963][ T55] driver_probe_device+0x293/0x390 [ 146.687048][ T55] __device_attach_driver+0x63f/0x830 [ 146.692417][ T55] bus_for_each_drv+0x2ca/0x3f0 [ 146.697271][ T55] ? state_synced_show+0x130/0x130 [ 146.702388][ T55] __device_attach+0x538/0x860 [ 146.707160][ T55] device_initial_probe+0x4a/0x60 [ 146.712196][ T55] bus_probe_device+0x177/0x3d0 [ 146.717050][ T55] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.722857][ T55] device_add+0x399e/0x3f20 [ 146.727368][ T55] usb_new_device+0x1bd6/0x2a30 [ 146.732228][ T55] hub_event+0x5bc9/0x8890 [ 146.736693][ T55] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 146.742768][ T55] ? kmsan_get_metadata+0x116/0x180 [ 146.747958][ T55] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.753740][ T55] ? led_work+0x780/0x780 [ 146.758044][ T55] process_one_work+0x121c/0x1fc0 [ 146.763046][ T55] worker_thread+0x10cc/0x2740 [ 146.767783][ T55] ? kmsan_get_metadata+0x116/0x180 [ 146.772957][ T55] ? kmsan_get_metadata+0x116/0x180 [ 146.778129][ T55] kthread+0x51c/0x560 [ 146.782181][ T55] ? process_one_work+0x1fc0/0x1fc0 [ 146.787357][ T55] ? kthread_blkcg+0x110/0x110 [ 146.792095][ T55] ret_from_fork+0x1f/0x30 [ 146.796502][ T55] [ 146.798804][ T55] Local variable ----buf.i91@smsc75xx_bind created at: [ 146.805639][ T55] smsc75xx_bind+0x435/0x13f0 [ 146.810288][ T55] smsc75xx_bind+0x435/0x13f0 [ 146.814944][ T55] ===================================================== [ 146.821860][ T55] Disabling lock debugging due to kernel taint [ 146.827984][ T55] Kernel panic - not syncing: panic_on_warn set ... [ 146.834547][ T55] CPU: 1 PID: 55 Comm: kworker/1:1 Tainted: G B 5.10.0-rc4-syzkaller #0 [ 146.844142][ T55] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 146.854177][ T55] Workqueue: usb_hub_wq hub_event [ 146.859173][ T55] Call Trace: [ 146.862439][ T55] dump_stack+0x21c/0x280 [ 146.866743][ T55] panic+0x4c8/0xea7 [ 146.870626][ T55] ? add_taint+0x17c/0x210 [ 146.875018][ T55] kmsan_report+0x1da/0x1e0 [ 146.879497][ T55] __msan_warning+0x5f/0xa0 [ 146.883977][ T55] smsc75xx_bind+0x576/0x13f0 [ 146.888643][ T55] ? smsc75xx_write_wuff+0xa60/0xa60 [ 146.893990][ T55] usbnet_probe+0x1169/0x3e90 [ 146.898646][ T55] ? kmsan_internal_set_origin+0x85/0xc0 [ 146.904255][ T55] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 146.910313][ T55] ? usbnet_disconnect+0x670/0x670 [ 146.915400][ T55] usb_probe_interface+0xfcc/0x1520 [ 146.920575][ T55] ? usb_register_driver+0x900/0x900 [ 146.925842][ T55] really_probe+0xebd/0x2420 [ 146.930408][ T55] driver_probe_device+0x293/0x390 [ 146.935508][ T55] __device_attach_driver+0x63f/0x830 [ 146.940856][ T55] bus_for_each_drv+0x2ca/0x3f0 [ 146.945690][ T55] ? state_synced_show+0x130/0x130 [ 146.950776][ T55] __device_attach+0x538/0x860 [ 146.955515][ T55] device_initial_probe+0x4a/0x60 [ 146.960515][ T55] bus_probe_device+0x177/0x3d0 [ 146.965355][ T55] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 146.971137][ T55] device_add+0x399e/0x3f20 [ 146.975621][ T55] usb_set_configuration+0x39cf/0x4010 [ 146.981056][ T55] ? usb_set_configuration+0xa61/0x4010 [ 146.986586][ T55] ? kmsan_get_shadow_origin_ptr+0x50/0xb0 [ 146.992372][ T55] usb_generic_driver_probe+0x138/0x300 [ 146.997893][ T55] ? usb_choose_configuration+0xf00/0xf00 [ 147.003586][ T55] usb_probe_device+0x317/0x570 [ 147.008415][ T55] ? usb_register_device_driver+0x590/0x590 [ 147.014281][ T55] really_probe+0xebd/0x2420 [ 147.018847][ T55] driver_probe_device+0x293/0x390 [ 147.023946][ T55] __device_attach_driver+0x63f/0x830 [ 147.029307][ T55] bus_for_each_drv+0x2ca/0x3f0 [ 147.034135][ T55] ? state_synced_show+0x130/0x130 [ 147.039265][ T55] __device_attach+0x538/0x860 [ 147.044007][ T55] device_initial_probe+0x4a/0x60 [ 147.049041][ T55] bus_probe_device+0x177/0x3d0 [ 147.053906][ T55] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 147.059687][ T55] device_add+0x399e/0x3f20 [ 147.064168][ T55] usb_new_device+0x1bd6/0x2a30 [ 147.068996][ T55] hub_event+0x5bc9/0x8890 [ 147.073416][ T55] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 147.079457][ T55] ? kmsan_get_metadata+0x116/0x180 [ 147.084630][ T55] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 147.090408][ T55] ? led_work+0x780/0x780 [ 147.094714][ T55] process_one_work+0x121c/0x1fc0 [ 147.099716][ T55] worker_thread+0x10cc/0x2740 [ 147.104468][ T55] ? kmsan_get_metadata+0x116/0x180 [ 147.109655][ T55] ? kmsan_get_metadata+0x116/0x180 [ 147.114842][ T55] kthread+0x51c/0x560 [ 147.118886][ T55] ? process_one_work+0x1fc0/0x1fc0 [ 147.124062][ T55] ? kthread_blkcg+0x110/0x110 [ 147.128802][ T55] ret_from_fork+0x1f/0x30 [ 147.134045][ T55] Kernel Offset: disabled [ 147.138355][ T55] Rebooting in 86400 seconds..