[ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. Debian GNU/Linux 9 syzkaller ttyS0 syzkaller login: [ 125.699578][ T7951] sshd (7951) used greatest stack depth: 4128 bytes left Warning: Permanently added '10.128.0.226' (ECDSA) to the list of known hosts. executing program [ 150.332495][ T3483] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 150.572444][ T3483] usb 1-1: Using ep0 maxpacket: 32 [ 150.692732][ T3483] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 247 [ 150.702767][ T3483] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 16 [ 150.712962][ T3483] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 150.882602][ T3483] usb 1-1: New USB device found, idVendor=0424, idProduct=7505, bcdDevice= 0.40 [ 150.891702][ T3483] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.899992][ T3483] usb 1-1: Product: syz [ 150.904391][ T3483] usb 1-1: Manufacturer: syz [ 150.909081][ T3483] usb 1-1: SerialNumber: syz [ 150.946014][ T8263] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 150.956149][ T8263] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 151.183996][ T8263] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 151.191016][ T8263] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 151.642668][ T3483] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 151.649536][ T3483] smsc75xx v1.0.0 [ 151.842861][ T8263] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 151.849984][ T8263] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 152.092584][ T3483] ===================================================== [ 152.099595][ T3483] BUG: KMSAN: uninit-value in smsc75xx_bind+0x576/0x13f0 [ 152.106650][ T3483] CPU: 1 PID: 3483 Comm: kworker/1:2 Not tainted 5.10.0-rc4-syzkaller #0 [ 152.115056][ T3483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 152.125128][ T3483] Workqueue: usb_hub_wq hub_event [ 152.130146][ T3483] Call Trace: [ 152.133459][ T3483] dump_stack+0x21c/0x280 [ 152.137789][ T3483] kmsan_report+0xf7/0x1e0 [ 152.142201][ T3483] __msan_warning+0x5f/0xa0 [ 152.146716][ T3483] smsc75xx_bind+0x576/0x13f0 [ 152.151415][ T3483] ? smsc75xx_write_wuff+0xa60/0xa60 [ 152.156718][ T3483] usbnet_probe+0x1169/0x3e90 [ 152.161389][ T3483] ? kmsan_internal_set_origin+0x85/0xc0 [ 152.167024][ T3483] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 152.173075][ T3483] ? usbnet_disconnect+0x670/0x670 [ 152.178182][ T3483] usb_probe_interface+0xfcc/0x1520 [ 152.183375][ T3483] ? usb_register_driver+0x900/0x900 [ 152.188660][ T3483] really_probe+0xebd/0x2420 [ 152.193235][ T3483] driver_probe_device+0x293/0x390 [ 152.198328][ T3483] __device_attach_driver+0x63f/0x830 [ 152.203688][ T3483] bus_for_each_drv+0x2ca/0x3f0 [ 152.208535][ T3483] ? state_synced_show+0x130/0x130 [ 152.213627][ T3483] __device_attach+0x538/0x860 [ 152.218414][ T3483] device_initial_probe+0x4a/0x60 [ 152.223452][ T3483] bus_probe_device+0x177/0x3d0 [ 152.228301][ T3483] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 152.234090][ T3483] device_add+0x399e/0x3f20 [ 152.238599][ T3483] usb_set_configuration+0x39cf/0x4010 [ 152.244094][ T3483] ? usb_set_configuration+0xa61/0x4010 [ 152.249640][ T3483] ? kmsan_get_shadow_origin_ptr+0x50/0xb0 [ 152.255436][ T3483] usb_generic_driver_probe+0x138/0x300 [ 152.260988][ T3483] ? usb_choose_configuration+0xf00/0xf00 [ 152.266712][ T3483] usb_probe_device+0x317/0x570 [ 152.271568][ T3483] ? usb_register_device_driver+0x590/0x590 [ 152.277446][ T3483] really_probe+0xebd/0x2420 [ 152.282025][ T3483] driver_probe_device+0x293/0x390 [ 152.287126][ T3483] __device_attach_driver+0x63f/0x830 [ 152.292530][ T3483] bus_for_each_drv+0x2ca/0x3f0 [ 152.297392][ T3483] ? state_synced_show+0x130/0x130 [ 152.302529][ T3483] __device_attach+0x538/0x860 [ 152.307333][ T3483] device_initial_probe+0x4a/0x60 [ 152.312372][ T3483] bus_probe_device+0x177/0x3d0 [ 152.317257][ T3483] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 152.323068][ T3483] device_add+0x399e/0x3f20 [ 152.327588][ T3483] usb_new_device+0x1bd6/0x2a30 [ 152.332460][ T3483] hub_event+0x5bc9/0x8890 [ 152.336893][ T3483] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 152.342966][ T3483] ? kmsan_get_metadata+0x116/0x180 [ 152.348170][ T3483] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 152.353981][ T3483] ? led_work+0x780/0x780 [ 152.358316][ T3483] process_one_work+0x121c/0x1fc0 [ 152.363354][ T3483] worker_thread+0x10cc/0x2740 [ 152.368123][ T3483] ? kmsan_get_metadata+0x116/0x180 [ 152.373336][ T3483] kthread+0x51c/0x560 [ 152.377416][ T3483] ? process_one_work+0x1fc0/0x1fc0 [ 152.382648][ T3483] ? kthread_blkcg+0x110/0x110 [ 152.387438][ T3483] ret_from_fork+0x1f/0x30 [ 152.391850][ T3483] [ 152.394191][ T3483] Local variable ----buf.i91@smsc75xx_bind created at: [ 152.401044][ T3483] smsc75xx_bind+0x435/0x13f0 [ 152.405732][ T3483] smsc75xx_bind+0x435/0x13f0 [ 152.410398][ T3483] ===================================================== [ 152.417350][ T3483] Disabling lock debugging due to kernel taint [ 152.423518][ T3483] Kernel panic - not syncing: panic_on_warn set ... [ 152.430120][ T3483] CPU: 1 PID: 3483 Comm: kworker/1:2 Tainted: G B 5.10.0-rc4-syzkaller #0 [ 152.439917][ T3483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 152.450008][ T3483] Workqueue: usb_hub_wq hub_event [ 152.455036][ T3483] Call Trace: [ 152.458340][ T3483] dump_stack+0x21c/0x280 [ 152.462681][ T3483] panic+0x4c8/0xea7 [ 152.466590][ T3483] ? add_taint+0x17c/0x210 [ 152.471009][ T3483] kmsan_report+0x1da/0x1e0 [ 152.475527][ T3483] __msan_warning+0x5f/0xa0 [ 152.480065][ T3483] smsc75xx_bind+0x576/0x13f0 [ 152.484756][ T3483] ? smsc75xx_write_wuff+0xa60/0xa60 [ 152.490053][ T3483] usbnet_probe+0x1169/0x3e90 [ 152.494775][ T3483] ? kmsan_internal_set_origin+0x85/0xc0 [ 152.500445][ T3483] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 152.506535][ T3483] ? usbnet_disconnect+0x670/0x670 [ 152.511671][ T3483] usb_probe_interface+0xfcc/0x1520 [ 152.516923][ T3483] ? usb_register_driver+0x900/0x900 [ 152.522235][ T3483] really_probe+0xebd/0x2420 [ 152.526860][ T3483] driver_probe_device+0x293/0x390 [ 152.532004][ T3483] __device_attach_driver+0x63f/0x830 [ 152.537413][ T3483] bus_for_each_drv+0x2ca/0x3f0 [ 152.542295][ T3483] ? state_synced_show+0x130/0x130 [ 152.547417][ T3483] __device_attach+0x538/0x860 [ 152.552215][ T3483] device_initial_probe+0x4a/0x60 [ 152.557265][ T3483] bus_probe_device+0x177/0x3d0 [ 152.562121][ T3483] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 152.567936][ T3483] device_add+0x399e/0x3f20 [ 152.572479][ T3483] usb_set_configuration+0x39cf/0x4010 [ 152.577956][ T3483] ? usb_set_configuration+0xa61/0x4010 [ 152.583516][ T3483] ? kmsan_get_shadow_origin_ptr+0x50/0xb0 [ 152.589336][ T3483] usb_generic_driver_probe+0x138/0x300 [ 152.594897][ T3483] ? usb_choose_configuration+0xf00/0xf00 [ 152.600628][ T3483] usb_probe_device+0x317/0x570 [ 152.605489][ T3483] ? usb_register_device_driver+0x590/0x590 [ 152.611385][ T3483] really_probe+0xebd/0x2420 [ 152.615983][ T3483] driver_probe_device+0x293/0x390 [ 152.621099][ T3483] __device_attach_driver+0x63f/0x830 [ 152.626480][ T3483] bus_for_each_drv+0x2ca/0x3f0 [ 152.631330][ T3483] ? state_synced_show+0x130/0x130 [ 152.636455][ T3483] __device_attach+0x538/0x860 [ 152.641229][ T3483] device_initial_probe+0x4a/0x60 [ 152.646263][ T3483] bus_probe_device+0x177/0x3d0 [ 152.651118][ T3483] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 152.656942][ T3483] device_add+0x399e/0x3f20 [ 152.661466][ T3483] usb_new_device+0x1bd6/0x2a30 [ 152.666326][ T3483] hub_event+0x5bc9/0x8890 [ 152.670760][ T3483] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 152.676844][ T3483] ? kmsan_get_metadata+0x116/0x180 [ 152.682042][ T3483] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 152.687849][ T3483] ? led_work+0x780/0x780 [ 152.692179][ T3483] process_one_work+0x121c/0x1fc0 [ 152.697220][ T3483] worker_thread+0x10cc/0x2740 [ 152.702002][ T3483] ? kmsan_get_metadata+0x116/0x180 [ 152.707207][ T3483] kthread+0x51c/0x560 [ 152.711280][ T3483] ? process_one_work+0x1fc0/0x1fc0 [ 152.716479][ T3483] ? kthread_blkcg+0x110/0x110 [ 152.721245][ T3483] ret_from_fork+0x1f/0x30 [ 152.726041][ T3483] Kernel Offset: disabled [ 152.730361][ T3483] Rebooting in 86400 seconds..