[ *** ] A start job is running for OpenBSD …Shell server (1min 22s / 2min 41s)[*** ] A start job is running for OpenBSD …Shell server (1min 23s / 2min 41s)[** ] A start job is running for OpenBSD …Shell server (1min 24s / 2min 53s)[ OK ] Started OpenBSD Secure Shell server. [ OK ] Listening on Load/Save RF Kill Switch Status /dev/rfkill Watch. [ OK ] Started Getty on tty6. [ OK ] Started Getty on tty5. [ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.30' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 134.457239][ T2066] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 135.017405][ T2066] usb 1-1: New USB device found, idVendor=13d3, idProduct=3311, bcdDevice= 0.d6 [ 135.026527][ T2066] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.034938][ T2066] usb 1-1: Product: syz [ 135.039327][ T2066] usb 1-1: Manufacturer: syz [ 135.044044][ T2066] usb 1-1: SerialNumber: syz [ 135.059110][ T2066] usb 1-1: config 0 descriptor?? [ 135.104793][ T2066] r8712u: register rtl8712_netdev_ops to netdev_ops [ 135.111630][ T2066] usb 1-1: r8712u: USB_SPEED_HIGH with 1 endpoints [ 135.219102][ T2066] ===================================================== [ 135.219114][ T2066] BUG: KMSAN: uninit-value in string+0x573/0x6d0 [ 135.219120][ T2066] CPU: 1 PID: 2066 Comm: kworker/1:2 Not tainted 5.11.0-rc7-syzkaller #0 [ 135.219127][ T2066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 135.219134][ T2066] Workqueue: usb_hub_wq hub_event [ 135.219145][ T2066] Call Trace: [ 135.219148][ T2066] dump_stack+0x21c/0x280 [ 135.219152][ T2066] kmsan_report+0xfb/0x1e0 [ 135.219156][ T2066] __msan_warning+0x5f/0xa0 [ 135.219160][ T2066] string+0x573/0x6d0 [ 135.219164][ T2066] vsnprintf+0x1acd/0x3600 [ 135.219168][ T2066] pointer+0x1b8a/0x1ca0 [ 135.219172][ T2066] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 135.219176][ T2066] vsnprintf+0x15f2/0x3600 [ 135.219180][ T2066] vprintk_store+0x2ab/0x1df0 [ 135.219184][ T2066] ? kmsan_internal_set_origin+0x85/0xc0 [ 135.219189][ T2066] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 135.219193][ T2066] vprintk_emit+0x29a/0x7f0 [ 135.219197][ T2066] dev_vprintk_emit+0x5f7/0x6d8 [ 135.219201][ T2066] dev_printk_emit+0x1ce/0x210 [ 135.219206][ T2066] ? r8712_usbctrl_vendorreq+0x4a8/0x4d0 [ 135.219210][ T2066] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 135.219215][ T2066] __dev_printk+0x3dc/0x458 [ 135.219218][ T2066] _dev_info+0x1e5/0x22a [ 135.219222][ T2066] ? usb_read8+0xe7/0x130 [ 135.219226][ T2066] ? r871xu_drv_init+0x1986/0x2fe0 [ 135.219231][ T2066] ? r8712_usb_set_intf_ops+0x240/0x240 [ 135.219235][ T2066] r871xu_drv_init+0x1a59/0x2fe0 [ 135.219239][ T2066] ? r871x_dev_unload+0x310/0x310 [ 135.219243][ T2066] usb_probe_interface+0xfcc/0x1520 [ 135.219248][ T2066] ? usb_register_driver+0x900/0x900 [ 135.219252][ T2066] really_probe+0xe15/0x24d0 [ 135.219256][ T2066] driver_probe_device+0x29d/0x3a0 [ 135.219260][ T2066] __device_attach_driver+0x63f/0x830 [ 135.219265][ T2066] bus_for_each_drv+0x2c8/0x3f0 [ 135.219269][ T2066] ? deferred_probe_work_func+0x400/0x400 [ 135.219274][ T2066] __device_attach+0x56a/0x890 [ 135.219278][ T2066] device_initial_probe+0x4a/0x60 [ 135.219282][ T2066] bus_probe_device+0x17e/0x3d0 [ 135.219287][ T2066] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 135.219291][ T2066] device_add+0x2c15/0x31d0 [ 135.219295][ T2066] usb_set_configuration+0x3872/0x3eb0 [ 135.219300][ T2066] ? usb_set_configuration+0xa61/0x3eb0 [ 135.219304][ T2066] usb_generic_driver_probe+0x138/0x300 [ 135.219309][ T2066] ? usb_choose_configuration+0xee0/0xee0 [ 135.219313][ T2066] usb_probe_device+0x317/0x570 [ 135.219318][ T2066] ? usb_register_device_driver+0x590/0x590 [ 135.219322][ T2066] really_probe+0xe15/0x24d0 [ 135.219327][ T2066] driver_probe_device+0x29d/0x3a0 [ 135.219331][ T2066] __device_attach_driver+0x63f/0x830 [ 135.219336][ T2066] bus_for_each_drv+0x2c8/0x3f0 [ 135.219340][ T2066] ? deferred_probe_work_func+0x400/0x400 [ 135.219344][ T2066] __device_attach+0x56a/0x890 [ 135.219349][ T2066] device_initial_probe+0x4a/0x60 [ 135.219353][ T2066] bus_probe_device+0x17e/0x3d0 [ 135.219357][ T2066] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 135.219361][ T2066] device_add+0x2c15/0x31d0 [ 135.219365][ T2066] usb_new_device+0x1bd4/0x2a30 [ 135.219369][ T2066] hub_event+0x5b99/0x8870 [ 135.219373][ T2066] ? kmsan_get_metadata+0x116/0x180 [ 135.219378][ T2066] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 135.219382][ T2066] ? led_work+0x780/0x780 [ 135.219386][ T2066] process_one_work+0x1219/0x1fe0 [ 135.219390][ T2066] worker_thread+0x10ec/0x2340 [ 135.219394][ T2066] kthread+0x521/0x560 [ 135.219398][ T2066] ? process_one_work+0x1fe0/0x1fe0 [ 135.219402][ T2066] ? kthread_blkcg+0x110/0x110 [ 135.219406][ T2066] ret_from_fork+0x1f/0x30 [ 135.219410][ T2066] [ 135.219413][ T2066] Local variable ----data@usb_read8 created at: [ 135.219418][ T2066] usb_read8+0x5d/0x130 [ 135.219422][ T2066] usb_read8+0x5d/0x130 [ 135.219427][ T2066] ===================================================== [ 135.219432][ T2066] Disabling lock debugging due to kernel taint [ 135.219437][ T2066] Kernel panic - not syncing: panic_on_warn set ... [ 135.219444][ T2066] CPU: 1 PID: 2066 Comm: kworker/1:2 Tainted: G B 5.11.0-rc7-syzkaller #0 [ 135.219451][ T2066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 135.219457][ T2066] Workqueue: usb_hub_wq hub_event [ 135.219464][ T2066] Call Trace: [ 135.219467][ T2066] dump_stack+0x21c/0x280 [ 135.219471][ T2066] panic+0x4c6/0xea7 [ 135.219474][ T2066] ? add_taint+0x17c/0x210 [ 135.219478][ T2066] ? vsnprintf+0x329/0x3600 [ 135.219482][ T2066] kmsan_report+0x1de/0x1e0 [ 135.219486][ T2066] __msan_warning+0x5f/0xa0 [ 135.219490][ T2066] string+0x573/0x6d0 [ 135.219493][ T2066] vsnprintf+0x1acd/0x3600 [ 135.219497][ T2066] pointer+0x1b8a/0x1ca0 [ 135.219501][ T2066] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 135.219506][ T2066] vsnprintf+0x15f2/0x3600 [ 135.219509][ T2066] vprintk_store+0x2ab/0x1df0 [ 135.219514][ T2066] ? kmsan_internal_set_origin+0x85/0xc0 [ 135.219518][ T2066] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 135.219523][ T2066] vprintk_emit+0x29a/0x7f0 [ 135.219527][ T2066] dev_vprintk_emit+0x5f7/0x6d8 [ 135.219531][ T2066] dev_printk_emit+0x1ce/0x210 [ 135.219535][ T2066] ? r8712_usbctrl_vendorreq+0x4a8/0x4d0 [ 135.219540][ T2066] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 135.219544][ T2066] __dev_printk+0x3dc/0x458 [ 135.219548][ T2066] _dev_info+0x1e5/0x22a [ 135.219552][ T2066] ? usb_read8+0xe7/0x130 [ 135.219556][ T2066] ? r871xu_drv_init+0x1986/0x2fe0 [ 135.219560][ T2066] ? r8712_usb_set_intf_ops+0x240/0x240 [ 135.219565][ T2066] r871xu_drv_init+0x1a59/0x2fe0 [ 135.219569][ T2066] ? r871x_dev_unload+0x310/0x310 [ 135.219573][ T2066] usb_probe_interface+0xfcc/0x1520 [ 135.219577][ T2066] ? usb_register_driver+0x900/0x900 [ 135.219582][ T2066] really_probe+0xe15/0x24d0 [ 135.219586][ T2066] driver_probe_device+0x29d/0x3a0 [ 135.219590][ T2066] __device_attach_driver+0x63f/0x830 [ 135.219596][ T2066] bus_for_each_drv+0x2c8/0x3f0 [ 135.219601][ T2066] ? deferred_probe_work_func+0x400/0x400 [ 135.219606][ T2066] __device_attach+0x56a/0x890 [ 135.219610][ T2066] device_initial_probe+0x4a/0x60 [ 135.219614][ T2066] bus_probe_device+0x17e/0x3d0 [ 135.219618][ T2066] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 135.219623][ T2066] device_add+0x2c15/0x31d0 [ 135.219627][ T2066] usb_set_configuration+0x3872/0x3eb0 [ 135.219631][ T2066] ? usb_set_configuration+0xa61/0x3eb0 [ 135.219636][ T2066] usb_generic_driver_probe+0x138/0x300 [ 135.219640][ T2066] ? usb_choose_configuration+0xee0/0xee0 [ 135.219645][ T2066] usb_probe_device+0x317/0x570 [ 135.219649][ T2066] ? usb_register_device_driver+0x590/0x590 [ 135.219654][ T2066] really_probe+0xe15/0x24d0 [ 135.219658][ T2066] driver_probe_device+0x29d/0x3a0 [ 135.219663][ T2066] __device_attach_driver+0x63f/0x830 [ 135.219667][ T2066] bus_for_each_drv+0x2c8/0x3f0 [ 135.219671][ T2066] ? deferred_probe_work_func+0x400/0x400 [ 135.219676][ T2066] __device_attach+0x56a/0x890 [ 135.219680][ T2066] device_initial_probe+0x4a/0x60 [ 135.219685][ T2066] bus_probe_device+0x17e/0x3d0 [ 135.219689][ T2066] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 135.219694][ T2066] device_add+0x2c15/0x31d0 [ 135.219698][ T2066] usb_new_device+0x1bd4/0x2a30 [ 135.219702][ T2066] hub_event+0x5b99/0x8870 [ 135.219706][ T2066] ? kmsan_get_metadata+0x116/0x180 [ 135.219710][ T2066] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 135.219715][ T2066] ? led_work+0x780/0x780 [ 135.219719][ T2066] process_one_work+0x1219/0x1fe0 [ 135.219723][ T2066] worker_thread+0x10ec/0x2340 [ 135.219727][ T2066] kthread+0x521/0x560 [ 135.219731][ T2066] ? process_one_work+0x1fe0/0x1fe0 [ 135.219735][ T2066] ? kthread_blkcg+0x110/0x110 [ 135.219739][ T2066] ret_from_fork+0x1f/0x30 [ 135.220194][ T2066] Kernel Offset: disabled