[ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started System Logging Service. [ OK ] Started getty on tty2-tty6 if dbus and logind are not available. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.10.34' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 154.011939][ T4733] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 154.251879][ T4733] usb 1-1: Using ep0 maxpacket: 8 [ 154.392191][ T4733] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 247 [ 154.402545][ T4733] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 628 [ 154.412674][ T4733] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 154.582275][ T4733] usb 1-1: New USB device found, idVendor=0424, idProduct=7505, bcdDevice= 0.40 [ 154.591365][ T4733] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.599635][ T4733] usb 1-1: Product: syz [ 154.604033][ T4733] usb 1-1: Manufacturer: syz [ 154.608731][ T4733] usb 1-1: SerialNumber: syz [ 154.635690][ T8254] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 154.645996][ T8254] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 154.873260][ T8254] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 154.880265][ T8254] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 155.342297][ T4733] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 155.349365][ T4733] smsc75xx v1.0.0 [ 155.542453][ T8254] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 155.549397][ T8254] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 155.772098][ T4733] ===================================================== [ 155.779100][ T4733] BUG: KMSAN: uninit-value in smsc75xx_bind+0x576/0x13f0 [ 155.786129][ T4733] CPU: 1 PID: 4733 Comm: kworker/1:3 Not tainted 5.10.0-rc4-syzkaller #0 [ 155.794534][ T4733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 155.804616][ T4733] Workqueue: usb_hub_wq hub_event [ 155.809629][ T4733] Call Trace: [ 155.812920][ T4733] dump_stack+0x21c/0x280 [ 155.817257][ T4733] kmsan_report+0xf7/0x1e0 [ 155.821675][ T4733] __msan_warning+0x5f/0xa0 [ 155.826174][ T4733] smsc75xx_bind+0x576/0x13f0 [ 155.830858][ T4733] ? smsc75xx_write_wuff+0xa60/0xa60 [ 155.836159][ T4733] usbnet_probe+0x1169/0x3e90 [ 155.840858][ T4733] ? kmsan_internal_set_origin+0x85/0xc0 [ 155.846496][ T4733] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 155.852580][ T4733] ? usbnet_disconnect+0x670/0x670 [ 155.857700][ T4733] usb_probe_interface+0xfcc/0x1520 [ 155.862901][ T4733] ? usb_register_driver+0x900/0x900 [ 155.868187][ T4733] really_probe+0xebd/0x2420 [ 155.872779][ T4733] driver_probe_device+0x293/0x390 [ 155.877876][ T4733] __device_attach_driver+0x63f/0x830 [ 155.883242][ T4733] bus_for_each_drv+0x2ca/0x3f0 [ 155.888202][ T4733] ? state_synced_show+0x130/0x130 [ 155.893313][ T4733] __device_attach+0x538/0x860 [ 155.898065][ T4733] device_initial_probe+0x4a/0x60 [ 155.903088][ T4733] bus_probe_device+0x177/0x3d0 [ 155.907945][ T4733] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 155.913747][ T4733] device_add+0x399e/0x3f20 [ 155.918242][ T4733] usb_set_configuration+0x39cf/0x4010 [ 155.923685][ T4733] ? usb_set_configuration+0xb11/0x4010 [ 155.929270][ T4733] ? kmsan_report+0x1a0/0x1e0 [ 155.933954][ T4733] usb_generic_driver_probe+0x138/0x300 [ 155.939500][ T4733] ? usb_choose_configuration+0xf00/0xf00 [ 155.945202][ T4733] usb_probe_device+0x317/0x570 [ 155.950087][ T4733] ? usb_register_device_driver+0x590/0x590 [ 155.955963][ T4733] really_probe+0xebd/0x2420 [ 155.960541][ T4733] driver_probe_device+0x293/0x390 [ 155.965664][ T4733] __device_attach_driver+0x63f/0x830 [ 155.971071][ T4733] bus_for_each_drv+0x2ca/0x3f0 [ 155.976117][ T4733] ? state_synced_show+0x130/0x130 [ 155.981253][ T4733] __device_attach+0x538/0x860 [ 155.986022][ T4733] device_initial_probe+0x4a/0x60 [ 155.991047][ T4733] bus_probe_device+0x177/0x3d0 [ 155.995892][ T4733] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 156.001689][ T4733] device_add+0x399e/0x3f20 [ 156.006188][ T4733] usb_new_device+0x1bd6/0x2a30 [ 156.011033][ T4733] hub_event+0x5bc9/0x8890 [ 156.015451][ T4733] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 156.021509][ T4733] ? kmsan_get_metadata+0x116/0x180 [ 156.026697][ T4733] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 156.032496][ T4733] ? led_work+0x780/0x780 [ 156.036819][ T4733] process_one_work+0x121c/0x1fc0 [ 156.041842][ T4733] worker_thread+0x10cc/0x2740 [ 156.046609][ T4733] ? kmsan_get_metadata+0x116/0x180 [ 156.051800][ T4733] kthread+0x51c/0x560 [ 156.055877][ T4733] ? process_one_work+0x1fc0/0x1fc0 [ 156.061065][ T4733] ? kthread_blkcg+0x110/0x110 [ 156.065822][ T4733] ret_from_fork+0x1f/0x30 [ 156.070232][ T4733] [ 156.072548][ T4733] Local variable ----buf.i91@smsc75xx_bind created at: [ 156.079385][ T4733] smsc75xx_bind+0x435/0x13f0 [ 156.084068][ T4733] smsc75xx_bind+0x435/0x13f0 [ 156.088723][ T4733] ===================================================== [ 156.095639][ T4733] Disabling lock debugging due to kernel taint [ 156.101776][ T4733] Kernel panic - not syncing: panic_on_warn set ... [ 156.108368][ T4733] CPU: 1 PID: 4733 Comm: kworker/1:3 Tainted: G B 5.10.0-rc4-syzkaller #0 [ 156.118151][ T4733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 156.128207][ T4733] Workqueue: usb_hub_wq hub_event [ 156.133219][ T4733] Call Trace: [ 156.136591][ T4733] dump_stack+0x21c/0x280 [ 156.140912][ T4733] panic+0x4c8/0xea7 [ 156.144801][ T4733] ? add_taint+0x17c/0x210 [ 156.149226][ T4733] kmsan_report+0x1da/0x1e0 [ 156.153719][ T4733] __msan_warning+0x5f/0xa0 [ 156.158216][ T4733] smsc75xx_bind+0x576/0x13f0 [ 156.162890][ T4733] ? smsc75xx_write_wuff+0xa60/0xa60 [ 156.168164][ T4733] usbnet_probe+0x1169/0x3e90 [ 156.172835][ T4733] ? kmsan_internal_set_origin+0x85/0xc0 [ 156.178464][ T4733] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 156.184542][ T4733] ? usbnet_disconnect+0x670/0x670 [ 156.189647][ T4733] usb_probe_interface+0xfcc/0x1520 [ 156.194858][ T4733] ? usb_register_driver+0x900/0x900 [ 156.200148][ T4733] really_probe+0xebd/0x2420 [ 156.204736][ T4733] driver_probe_device+0x293/0x390 [ 156.209843][ T4733] __device_attach_driver+0x63f/0x830 [ 156.215213][ T4733] bus_for_each_drv+0x2ca/0x3f0 [ 156.220058][ T4733] ? state_synced_show+0x130/0x130 [ 156.225174][ T4733] __device_attach+0x538/0x860 [ 156.229935][ T4733] device_initial_probe+0x4a/0x60 [ 156.234953][ T4733] bus_probe_device+0x177/0x3d0 [ 156.239800][ T4733] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 156.245603][ T4733] device_add+0x399e/0x3f20 [ 156.250197][ T4733] usb_set_configuration+0x39cf/0x4010 [ 156.255654][ T4733] ? usb_set_configuration+0xb11/0x4010 [ 156.261191][ T4733] ? kmsan_report+0x1a0/0x1e0 [ 156.265883][ T4733] usb_generic_driver_probe+0x138/0x300 [ 156.271428][ T4733] ? usb_choose_configuration+0xf00/0xf00 [ 156.277140][ T4733] usb_probe_device+0x317/0x570 [ 156.281987][ T4733] ? usb_register_device_driver+0x590/0x590 [ 156.287888][ T4733] really_probe+0xebd/0x2420 [ 156.292476][ T4733] driver_probe_device+0x293/0x390 [ 156.297588][ T4733] __device_attach_driver+0x63f/0x830 [ 156.302966][ T4733] bus_for_each_drv+0x2ca/0x3f0 [ 156.307811][ T4733] ? state_synced_show+0x130/0x130 [ 156.312915][ T4733] __device_attach+0x538/0x860 [ 156.317680][ T4733] device_initial_probe+0x4a/0x60 [ 156.322698][ T4733] bus_probe_device+0x177/0x3d0 [ 156.327549][ T4733] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 156.333348][ T4733] device_add+0x399e/0x3f20 [ 156.337864][ T4733] usb_new_device+0x1bd6/0x2a30 [ 156.342750][ T4733] hub_event+0x5bc9/0x8890 [ 156.347538][ T4733] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 156.353633][ T4733] ? kmsan_get_metadata+0x116/0x180 [ 156.358835][ T4733] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 156.364635][ T4733] ? led_work+0x780/0x780 [ 156.368957][ T4733] process_one_work+0x121c/0x1fc0 [ 156.373981][ T4733] worker_thread+0x10cc/0x2740 [ 156.378778][ T4733] ? kmsan_get_metadata+0x116/0x180 [ 156.383989][ T4733] kthread+0x51c/0x560 [ 156.388055][ T4733] ? process_one_work+0x1fc0/0x1fc0 [ 156.393246][ T4733] ? kthread_blkcg+0x110/0x110 [ 156.398010][ T4733] ret_from_fork+0x1f/0x30 [ 156.402963][ T4733] Kernel Offset: disabled [ 156.407285][ T4733] Rebooting in 86400 seconds..