[ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started System Logging Service. [ OK ] Started getty on tty2-tty6 if dbus and logind are not available. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.120' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 170.682548][ T3486] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 170.942553][ T3486] usb 1-1: Using ep0 maxpacket: 32 [ 171.072750][ T3486] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 247 [ 171.082859][ T3486] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 16 [ 171.092994][ T3486] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 171.262822][ T3486] usb 1-1: New USB device found, idVendor=0424, idProduct=7505, bcdDevice= 0.40 [ 171.272002][ T3486] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.280368][ T3486] usb 1-1: Product: syz [ 171.284793][ T3486] usb 1-1: Manufacturer: syz [ 171.289514][ T3486] usb 1-1: SerialNumber: syz [ 171.317147][ T8245] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 171.327045][ T8245] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 171.563914][ T8245] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 171.570881][ T8245] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 172.012966][ T3486] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 172.019930][ T3486] smsc75xx v1.0.0 [ 172.213130][ T8245] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 172.220245][ T8245] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 172.452927][ T3486] ===================================================== [ 172.459898][ T3486] BUG: KMSAN: uninit-value in smsc75xx_bind+0x576/0x13f0 [ 172.466959][ T3486] CPU: 1 PID: 3486 Comm: kworker/1:2 Not tainted 5.10.0-rc4-syzkaller #0 [ 172.475375][ T3486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 172.485436][ T3486] Workqueue: usb_hub_wq hub_event [ 172.490465][ T3486] Call Trace: [ 172.493755][ T3486] dump_stack+0x21c/0x280 [ 172.498101][ T3486] kmsan_report+0xf7/0x1e0 [ 172.502511][ T3486] __msan_warning+0x5f/0xa0 [ 172.507006][ T3486] smsc75xx_bind+0x576/0x13f0 [ 172.511700][ T3486] ? smsc75xx_write_wuff+0xa60/0xa60 [ 172.516991][ T3486] usbnet_probe+0x1169/0x3e90 [ 172.521668][ T3486] ? kmsan_internal_set_origin+0x85/0xc0 [ 172.527395][ T3486] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 172.533460][ T3486] ? usbnet_disconnect+0x670/0x670 [ 172.538601][ T3486] usb_probe_interface+0xfcc/0x1520 [ 172.543796][ T3486] ? usb_register_driver+0x900/0x900 [ 172.549089][ T3486] really_probe+0xebd/0x2420 [ 172.553673][ T3486] driver_probe_device+0x293/0x390 [ 172.558776][ T3486] __device_attach_driver+0x63f/0x830 [ 172.564142][ T3486] bus_for_each_drv+0x2ca/0x3f0 [ 172.568983][ T3486] ? state_synced_show+0x130/0x130 [ 172.574090][ T3486] __device_attach+0x538/0x860 [ 172.578844][ T3486] device_initial_probe+0x4a/0x60 [ 172.583874][ T3486] bus_probe_device+0x177/0x3d0 [ 172.588715][ T3486] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 172.594526][ T3486] device_add+0x399e/0x3f20 [ 172.599032][ T3486] usb_set_configuration+0x39cf/0x4010 [ 172.604479][ T3486] ? usb_set_configuration+0xb11/0x4010 [ 172.610026][ T3486] ? kmsan_report+0x1a0/0x1e0 [ 172.614697][ T3486] usb_generic_driver_probe+0x138/0x300 [ 172.620234][ T3486] ? usb_choose_configuration+0xf00/0xf00 [ 172.625954][ T3486] usb_probe_device+0x317/0x570 [ 172.630813][ T3486] ? usb_register_device_driver+0x590/0x590 [ 172.636716][ T3486] really_probe+0xebd/0x2420 [ 172.641316][ T3486] driver_probe_device+0x293/0x390 [ 172.646430][ T3486] __device_attach_driver+0x63f/0x830 [ 172.651792][ T3486] bus_for_each_drv+0x2ca/0x3f0 [ 172.656734][ T3486] ? state_synced_show+0x130/0x130 [ 172.661866][ T3486] __device_attach+0x538/0x860 [ 172.666648][ T3486] device_initial_probe+0x4a/0x60 [ 172.671686][ T3486] bus_probe_device+0x177/0x3d0 [ 172.676555][ T3486] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 172.682396][ T3486] device_add+0x399e/0x3f20 [ 172.686922][ T3486] usb_new_device+0x1bd6/0x2a30 [ 172.691798][ T3486] hub_event+0x5bc9/0x8890 [ 172.696257][ T3486] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 172.702359][ T3486] ? kmsan_get_metadata+0x116/0x180 [ 172.707570][ T3486] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 172.713423][ T3486] ? led_work+0x780/0x780 [ 172.717785][ T3486] process_one_work+0x121c/0x1fc0 [ 172.722850][ T3486] worker_thread+0x10cc/0x2740 [ 172.727614][ T3486] ? kmsan_get_metadata+0x116/0x180 [ 172.732816][ T3486] kthread+0x51c/0x560 [ 172.736867][ T3486] ? process_one_work+0x1fc0/0x1fc0 [ 172.742064][ T3486] ? kthread_blkcg+0x110/0x110 [ 172.746828][ T3486] ret_from_fork+0x1f/0x30 [ 172.751225][ T3486] [ 172.753535][ T3486] Local variable ----buf.i91@smsc75xx_bind created at: [ 172.760378][ T3486] smsc75xx_bind+0x435/0x13f0 [ 172.765038][ T3486] smsc75xx_bind+0x435/0x13f0 [ 172.769688][ T3486] ===================================================== [ 172.776608][ T3486] Disabling lock debugging due to kernel taint [ 172.782762][ T3486] Kernel panic - not syncing: panic_on_warn set ... [ 172.789353][ T3486] CPU: 1 PID: 3486 Comm: kworker/1:2 Tainted: G B 5.10.0-rc4-syzkaller #0 [ 172.799147][ T3486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 172.809226][ T3486] Workqueue: usb_hub_wq hub_event [ 172.814238][ T3486] Call Trace: [ 172.817533][ T3486] dump_stack+0x21c/0x280 [ 172.821859][ T3486] panic+0x4c8/0xea7 [ 172.825744][ T3486] ? add_taint+0x17c/0x210 [ 172.830144][ T3486] kmsan_report+0x1da/0x1e0 [ 172.834631][ T3486] __msan_warning+0x5f/0xa0 [ 172.839121][ T3486] smsc75xx_bind+0x576/0x13f0 [ 172.843786][ T3486] ? smsc75xx_write_wuff+0xa60/0xa60 [ 172.849056][ T3486] usbnet_probe+0x1169/0x3e90 [ 172.853731][ T3486] ? kmsan_internal_set_origin+0x85/0xc0 [ 172.859357][ T3486] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 172.865410][ T3486] ? usbnet_disconnect+0x670/0x670 [ 172.870531][ T3486] usb_probe_interface+0xfcc/0x1520 [ 172.875726][ T3486] ? usb_register_driver+0x900/0x900 [ 172.881011][ T3486] really_probe+0xebd/0x2420 [ 172.885588][ T3486] driver_probe_device+0x293/0x390 [ 172.890690][ T3486] __device_attach_driver+0x63f/0x830 [ 172.896052][ T3486] bus_for_each_drv+0x2ca/0x3f0 [ 172.900886][ T3486] ? state_synced_show+0x130/0x130 [ 172.906071][ T3486] __device_attach+0x538/0x860 [ 172.910820][ T3486] device_initial_probe+0x4a/0x60 [ 172.915837][ T3486] bus_probe_device+0x177/0x3d0 [ 172.920675][ T3486] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 172.926482][ T3486] device_add+0x399e/0x3f20 [ 172.930979][ T3486] usb_set_configuration+0x39cf/0x4010 [ 172.936440][ T3486] ? usb_set_configuration+0xb11/0x4010 [ 172.941969][ T3486] ? kmsan_report+0x1a0/0x1e0 [ 172.946638][ T3486] usb_generic_driver_probe+0x138/0x300 [ 172.952171][ T3486] ? usb_choose_configuration+0xf00/0xf00 [ 172.958073][ T3486] usb_probe_device+0x317/0x570 [ 172.962934][ T3486] ? usb_register_device_driver+0x590/0x590 [ 172.968825][ T3486] really_probe+0xebd/0x2420 [ 172.973416][ T3486] driver_probe_device+0x293/0x390 [ 172.978526][ T3486] __device_attach_driver+0x63f/0x830 [ 172.983992][ T3486] bus_for_each_drv+0x2ca/0x3f0 [ 172.988844][ T3486] ? state_synced_show+0x130/0x130 [ 172.993958][ T3486] __device_attach+0x538/0x860 [ 172.998720][ T3486] device_initial_probe+0x4a/0x60 [ 173.003729][ T3486] bus_probe_device+0x177/0x3d0 [ 173.008848][ T3486] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 173.014637][ T3486] device_add+0x399e/0x3f20 [ 173.019145][ T3486] usb_new_device+0x1bd6/0x2a30 [ 173.023999][ T3486] hub_event+0x5bc9/0x8890 [ 173.028422][ T3486] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 173.034471][ T3486] ? kmsan_get_metadata+0x116/0x180 [ 173.039663][ T3486] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 173.045455][ T3486] ? led_work+0x780/0x780 [ 173.049780][ T3486] process_one_work+0x121c/0x1fc0 [ 173.054834][ T3486] worker_thread+0x10cc/0x2740 [ 173.059584][ T3486] ? kmsan_get_metadata+0x116/0x180 [ 173.064771][ T3486] kthread+0x51c/0x560 [ 173.068827][ T3486] ? process_one_work+0x1fc0/0x1fc0 [ 173.074010][ T3486] ? kthread_blkcg+0x110/0x110 [ 173.078772][ T3486] ret_from_fork+0x1f/0x30 [ 173.083833][ T3486] Kernel Offset: disabled [ 173.088157][ T3486] Rebooting in 86400 seconds..