[ OK ] Listening on Load/Save RF Kill Switch Status /dev/rfkill Watch. [ OK ] Started Getty on tty6. [ OK ] Started Getty on tty5. [ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty1. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.108' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 133.666421][ T2092] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 133.916423][ T2092] usb 1-1: Using ep0 maxpacket: 32 [ 134.046682][ T2092] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1023 [ 134.056937][ T2092] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 134.067018][ T2092] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 134.236552][ T2092] usb 1-1: New USB device found, idVendor=0424, idProduct=7505, bcdDevice= 0.40 [ 134.245994][ T2092] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.254495][ T2092] usb 1-1: Product: syz [ 134.258902][ T2092] usb 1-1: Manufacturer: syz [ 134.263617][ T2092] usb 1-1: SerialNumber: syz [ 134.299505][ T8218] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 134.308242][ T8218] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 134.537531][ T8218] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 134.544919][ T8218] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 135.026624][ T2092] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 135.033662][ T2092] smsc75xx v1.0.0 [ 135.226683][ T8218] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 135.233743][ T8218] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 135.476366][ T2092] ===================================================== [ 135.484468][ T2092] BUG: KMSAN: uninit-value in smsc75xx_bind+0x57c/0x13c0 [ 135.491546][ T2092] CPU: 1 PID: 2092 Comm: kworker/1:2 Not tainted 5.11.0-rc7-syzkaller #0 [ 135.499977][ T2092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 135.513298][ T2092] Workqueue: usb_hub_wq hub_event [ 135.518480][ T2092] Call Trace: [ 135.521762][ T2092] dump_stack+0x21c/0x280 [ 135.526182][ T2092] kmsan_report+0xfb/0x1e0 [ 135.530733][ T2092] __msan_warning+0x5f/0xa0 [ 135.535244][ T2092] smsc75xx_bind+0x57c/0x13c0 [ 135.540003][ T2092] ? smsc75xx_write_wuff+0xa70/0xa70 [ 135.545743][ T2092] usbnet_probe+0x115e/0x3e80 [ 135.550526][ T2092] ? kmsan_get_metadata+0x116/0x180 [ 135.556004][ T2092] ? usbnet_disconnect+0x6b0/0x6b0 [ 135.561164][ T2092] usb_probe_interface+0xfcc/0x1520 [ 135.566387][ T2092] ? usb_register_driver+0x900/0x900 [ 135.571730][ T2092] really_probe+0xe15/0x24d0 [ 135.576509][ T2092] driver_probe_device+0x29d/0x3a0 [ 135.581648][ T2092] __device_attach_driver+0x63f/0x830 [ 135.587057][ T2092] bus_for_each_drv+0x2c8/0x3f0 [ 135.592050][ T2092] ? deferred_probe_work_func+0x400/0x400 [ 135.597916][ T2092] __device_attach+0x56a/0x890 [ 135.602730][ T2092] device_initial_probe+0x4a/0x60 [ 135.608201][ T2092] bus_probe_device+0x17e/0x3d0 [ 135.613211][ T2092] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 135.619148][ T2092] device_add+0x2c15/0x31d0 [ 135.623687][ T2092] usb_set_configuration+0x3872/0x3eb0 [ 135.629220][ T2092] ? usb_set_configuration+0xac1/0x3eb0 [ 135.635123][ T2092] usb_generic_driver_probe+0x138/0x300 [ 135.640673][ T2092] ? usb_choose_configuration+0xee0/0xee0 [ 135.646393][ T2092] usb_probe_device+0x317/0x570 [ 135.651342][ T2092] ? usb_register_device_driver+0x590/0x590 [ 135.657246][ T2092] really_probe+0xe15/0x24d0 [ 135.661839][ T2092] driver_probe_device+0x29d/0x3a0 [ 135.666971][ T2092] __device_attach_driver+0x63f/0x830 [ 135.672457][ T2092] bus_for_each_drv+0x2c8/0x3f0 [ 135.677311][ T2092] ? deferred_probe_work_func+0x400/0x400 [ 135.683062][ T2092] __device_attach+0x56a/0x890 [ 135.687862][ T2092] device_initial_probe+0x4a/0x60 [ 135.692914][ T2092] bus_probe_device+0x17e/0x3d0 [ 135.697786][ T2092] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 135.703623][ T2092] device_add+0x2c15/0x31d0 [ 135.708192][ T2092] usb_new_device+0x1bd4/0x2a30 [ 135.713073][ T2092] hub_event+0x5b99/0x8870 [ 135.718655][ T2092] ? kmsan_get_metadata+0x116/0x180 [ 135.723919][ T2092] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 135.729764][ T2092] ? led_work+0x780/0x780 [ 135.734113][ T2092] process_one_work+0x1219/0x1fe0 [ 135.739172][ T2092] worker_thread+0x10ec/0x2340 [ 135.743971][ T2092] kthread+0x521/0x560 [ 135.748087][ T2092] ? process_one_work+0x1fe0/0x1fe0 [ 135.753319][ T2092] ? kthread_blkcg+0x110/0x110 [ 135.758540][ T2092] ret_from_fork+0x1f/0x30 [ 135.763185][ T2092] [ 135.765511][ T2092] Local variable ----buf.i91@smsc75xx_bind created at: [ 135.772355][ T2092] smsc75xx_bind+0x435/0x13c0 [ 135.777055][ T2092] smsc75xx_bind+0x435/0x13c0 [ 135.781750][ T2092] ===================================================== [ 135.788767][ T2092] Disabling lock debugging due to kernel taint [ 135.795053][ T2092] Kernel panic - not syncing: panic_on_warn set ... [ 135.801652][ T2092] CPU: 1 PID: 2092 Comm: kworker/1:2 Tainted: G B 5.11.0-rc7-syzkaller #0 [ 135.811747][ T2092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 135.821933][ T2092] Workqueue: usb_hub_wq hub_event [ 135.826997][ T2092] Call Trace: [ 135.830622][ T2092] dump_stack+0x21c/0x280 [ 135.835153][ T2092] panic+0x4c6/0xea7 [ 135.839084][ T2092] ? add_taint+0x17c/0x210 [ 135.843554][ T2092] kmsan_report+0x1de/0x1e0 [ 135.848100][ T2092] __msan_warning+0x5f/0xa0 [ 135.852811][ T2092] smsc75xx_bind+0x57c/0x13c0 [ 135.857529][ T2092] ? smsc75xx_write_wuff+0xa70/0xa70 [ 135.862930][ T2092] usbnet_probe+0x115e/0x3e80 [ 135.867851][ T2092] ? kmsan_get_metadata+0x116/0x180 [ 135.873089][ T2092] ? usbnet_disconnect+0x6b0/0x6b0 [ 135.878238][ T2092] usb_probe_interface+0xfcc/0x1520 [ 135.883561][ T2092] ? usb_register_driver+0x900/0x900 [ 135.889000][ T2092] really_probe+0xe15/0x24d0 [ 135.893640][ T2092] driver_probe_device+0x29d/0x3a0 [ 135.898948][ T2092] __device_attach_driver+0x63f/0x830 [ 135.904364][ T2092] bus_for_each_drv+0x2c8/0x3f0 [ 135.909429][ T2092] ? deferred_probe_work_func+0x400/0x400 [ 135.915906][ T2092] __device_attach+0x56a/0x890 [ 135.920712][ T2092] device_initial_probe+0x4a/0x60 [ 135.925921][ T2092] bus_probe_device+0x17e/0x3d0 [ 135.930791][ T2092] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 135.936815][ T2092] device_add+0x2c15/0x31d0 [ 135.941351][ T2092] usb_set_configuration+0x3872/0x3eb0 [ 135.947014][ T2092] ? usb_set_configuration+0xac1/0x3eb0 [ 135.952765][ T2092] usb_generic_driver_probe+0x138/0x300 [ 135.958344][ T2092] ? usb_choose_configuration+0xee0/0xee0 [ 135.964086][ T2092] usb_probe_device+0x317/0x570 [ 135.968979][ T2092] ? usb_register_device_driver+0x590/0x590 [ 135.974900][ T2092] really_probe+0xe15/0x24d0 [ 135.979532][ T2092] driver_probe_device+0x29d/0x3a0 [ 135.984670][ T2092] __device_attach_driver+0x63f/0x830 [ 135.990089][ T2092] bus_for_each_drv+0x2c8/0x3f0 [ 135.994959][ T2092] ? deferred_probe_work_func+0x400/0x400 [ 136.000710][ T2092] __device_attach+0x56a/0x890 [ 136.005500][ T2092] device_initial_probe+0x4a/0x60 [ 136.010556][ T2092] bus_probe_device+0x17e/0x3d0 [ 136.015439][ T2092] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 136.021276][ T2092] device_add+0x2c15/0x31d0 [ 136.025831][ T2092] usb_new_device+0x1bd4/0x2a30 [ 136.030712][ T2092] hub_event+0x5b99/0x8870 [ 136.035158][ T2092] ? kmsan_get_metadata+0x116/0x180 [ 136.040386][ T2092] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 136.046656][ T2092] ? led_work+0x780/0x780 [ 136.051004][ T2092] process_one_work+0x1219/0x1fe0 [ 136.056063][ T2092] worker_thread+0x10ec/0x2340 [ 136.060856][ T2092] kthread+0x521/0x560 [ 136.064939][ T2092] ? process_one_work+0x1fe0/0x1fe0 [ 136.070160][ T2092] ? kthread_blkcg+0x110/0x110 [ 136.074949][ T2092] ret_from_fork+0x1f/0x30 [ 136.080097][ T2092] Kernel Offset: disabled [ 136.084557][ T2092] Rebooting in 86400 seconds..