./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2093572476
<...>
Warning: Permanently added '10.128.1.133' (ED25519) to the list of known hosts.
execve("./syz-executor2093572476", ["./syz-executor2093572476"], 0x7ffce46580b0 /* 10 vars */) = 0
brk(NULL) = 0x55555dbcc000
brk(0x55555dbccd00) = 0x55555dbccd00
arch_prctl(ARCH_SET_FS, 0x55555dbcc380) = 0
set_tid_address(0x55555dbcc650) = 5850
set_robust_list(0x55555dbcc660, 24) = 0
rseq(0x55555dbccca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor2093572476", 4096) = 28
getrandom("\x24\xce\xaa\x03\xc9\x72\x8c\x29", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x55555dbccd00
brk(0x55555dbedd00) = 0x55555dbedd00
brk(0x55555dbee000) = 0x55555dbee000
mprotect(0x7f217eaad000, 16384, PROT_READ) = 0
mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000
mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000
mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000
write(1, "executing program\n", 18executing program
) = 18
openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3
ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffeab8efa90) = 0
ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffeab8efa90) = 0
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffeab8efa90) = 0
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffeab8efa90) = 0
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffeab8efa90) = 0
ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffeab8eea80) = 18
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffeab8efa90) = 0
[ 87.842321][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffeab8efa90) = 0
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffeab8efa90) = 0
ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffeab8eea80) = 18
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffeab8efa90) = 0
ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffeab8eea80) = 9
[ 88.002141][ T24] usb 1-1: Using ep0 maxpacket: 16
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffeab8efa90) = 0
ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffeab8eea80) = 36
[ 88.063215][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 88.074585][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 88.084461][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 88.097336][ T24] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffeab8efa90) = 0
ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0
ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0
ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f217eab33cc) = -1 EINVAL (Invalid argument)
ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffeab8eea80) = 0
[ 88.106467][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 88.117786][ T24] usb 1-1: config 0 descriptor??
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffeab8efac0) = 0
ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffeab8eeab0) = 0
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffeab8efac0) = 0
ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffeab8eeab0) = 34
[ 88.598233][ T24] microsoft 0003:045E:07DA.0001: ignoring exceeding usage max
[ 88.607903][ T24] microsoft 0003:045E:07DA.0001: unsupported Resolution Multiplier 0
[ 88.618280][ T24] ------------[ cut here ]------------
[ 88.623810][ T24] UBSAN: shift-out-of-bounds in drivers/hid/hid-core.c:69:16
[ 88.631187][ T24] shift exponent 4294967295 is too large for 32-bit type '__s32' (aka 'int')
[ 88.640006][ T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted 6.16.0-rc6-next-20250714-syzkaller #0 PREEMPT(full)
[ 88.640032][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 88.640047][ T24] Workqueue: usb_hub_wq hub_event
[ 88.640104][ T24] Call Trace:
[ 88.640111][ T24]
[ 88.640119][ T24] dump_stack_lvl+0x189/0x250
[ 88.640152][ T24] ? __pfx_dump_stack_lvl+0x10/0x10
[ 88.640179][ T24] ? __pfx__printk+0x10/0x10
[ 88.640202][ T24] ? driver_probe_device+0x4f/0x430
[ 88.640232][ T24] ? bus_probe_device+0x185/0x260
[ 88.640251][ T24] ? hid_add_device+0x398/0x540
[ 88.640271][ T24] ? usbhid_probe+0xe13/0x12a0
[ 88.640295][ T24] ? usb_probe_interface+0x637/0xbf0
[ 88.640323][ T24] ? __driver_probe_device+0x18c/0x2f0
[ 88.640358][ T24] ubsan_epilogue+0xa/0x40
[ 88.640379][ T24] __ubsan_handle_shift_out_of_bounds+0x386/0x410
[ 88.640411][ T24] ? __driver_probe_device+0x18c/0x2f0
[ 88.640444][ T24] ? usb_new_device+0xa39/0x16f0
[ 88.640473][ T24] ? ret_from_fork_asm+0x1a/0x30
[ 88.640502][ T24] s32ton+0xde/0x140
[ 88.640523][ T24] hid_output_report+0x419/0x790
[ 88.640547][ T24] ? rcu_is_watching+0x15/0xb0
[ 88.640585][ T24] __hid_request+0x14a/0x420
[ 88.640615][ T24] hidinput_connect+0x218a/0x3030
[ 88.640678][ T24] hid_connect+0x499/0x19a0
[ 88.640714][ T24] ? usbhid_start+0x1a92/0x24b0
[ 88.640746][ T24] ? __pfx_hid_connect+0x10/0x10
[ 88.640788][ T24] hid_hw_start+0xa8/0x120
[ 88.640814][ T24] ms_probe+0x180/0x430
[ 88.640847][ T24] hid_device_probe+0x3a0/0x710
[ 88.640877][ T24] ? driver_sysfs_add+0x1fe/0x210
[ 88.640908][ T24] ? __pfx_hid_device_probe+0x10/0x10
[ 88.640929][ T24] really_probe+0x26d/0x9e0
[ 88.640968][ T24] __driver_probe_device+0x18c/0x2f0
[ 88.641002][ T24] driver_probe_device+0x4f/0x430
[ 88.641037][ T24] __device_attach_driver+0x2ce/0x530
[ 88.641072][ T24] bus_for_each_drv+0x24e/0x2e0
[ 88.641097][ T24] ? __pfx___device_attach_driver+0x10/0x10
[ 88.641127][ T24] ? __pfx_bus_for_each_drv+0x10/0x10
[ 88.641148][ T24] ? __lock_acquire+0xab9/0xd20
[ 88.641184][ T24] __device_attach+0x2b8/0x400
[ 88.641216][ T24] ? __pfx___device_attach+0x10/0x10
[ 88.641249][ T24] ? do_raw_spin_unlock+0x122/0x240
[ 88.641274][ T24] bus_probe_device+0x185/0x260
[ 88.641302][ T24] device_add+0x7b6/0xb50
[ 88.641343][ T24] hid_add_device+0x398/0x540
[ 88.641372][ T24] usbhid_probe+0xe13/0x12a0
[ 88.641414][ T24] usb_probe_interface+0x637/0xbf0
[ 88.641449][ T24] ? __pfx_usb_probe_interface+0x10/0x10
[ 88.641468][ T24] really_probe+0x26d/0x9e0
[ 88.641506][ T24] __driver_probe_device+0x18c/0x2f0
[ 88.641540][ T24] driver_probe_device+0x4f/0x430
[ 88.641581][ T24] __device_attach_driver+0x2ce/0x530
[ 88.641617][ T24] bus_for_each_drv+0x24e/0x2e0
[ 88.641641][ T24] ? __pfx___device_attach_driver+0x10/0x10
[ 88.641672][ T24] ? __pfx_bus_for_each_drv+0x10/0x10
[ 88.641708][ T24] __device_attach+0x2b8/0x400
[ 88.641740][ T24] ? __pfx___device_attach+0x10/0x10
[ 88.641771][ T24] ? do_raw_spin_unlock+0x122/0x240
[ 88.641796][ T24] bus_probe_device+0x185/0x260
[ 88.641823][ T24] device_add+0x7b6/0xb50
[ 88.641855][ T24] usb_set_configuration+0x1a87/0x20e0
[ 88.641922][ T24] usb_generic_driver_probe+0x8d/0x150
[ 88.641960][ T24] usb_probe_device+0x1c1/0x390
[ 88.641985][ T24] ? __pfx_usb_probe_device+0x10/0x10
[ 88.642002][ T24] really_probe+0x26d/0x9e0
[ 88.642039][ T24] __driver_probe_device+0x18c/0x2f0
[ 88.642073][ T24] driver_probe_device+0x4f/0x430
[ 88.642105][ T24] __device_attach_driver+0x2ce/0x530
[ 88.642140][ T24] bus_for_each_drv+0x24e/0x2e0
[ 88.642164][ T24] ? __pfx___device_attach_driver+0x10/0x10
[ 88.642194][ T24] ? __pfx_bus_for_each_drv+0x10/0x10
[ 88.642230][ T24] __device_attach+0x2b8/0x400
[ 88.642262][ T24] ? __pfx___device_attach+0x10/0x10
[ 88.642297][ T24] ? do_raw_spin_unlock+0x122/0x240
[ 88.642331][ T24] bus_probe_device+0x185/0x260
[ 88.642358][ T24] device_add+0x7b6/0xb50
[ 88.642391][ T24] usb_new_device+0xa39/0x16f0
[ 88.642434][ T24] ? __pfx_usb_new_device+0x10/0x10
[ 88.642464][ T24] ? _raw_spin_unlock_irq+0x23/0x50
[ 88.642491][ T24] ? lockdep_hardirqs_on+0x9c/0x150
[ 88.642517][ T24] hub_event+0x2941/0x4a00
[ 88.642609][ T24] ? __pfx_hub_event+0x10/0x10
[ 88.642641][ T24] ? process_scheduled_works+0x9ef/0x17b0
[ 88.642675][ T24] ? _raw_spin_unlock_irq+0x23/0x50
[ 88.642693][ T24] ? process_scheduled_works+0x9ef/0x17b0
[ 88.642718][ T24] ? process_scheduled_works+0x9ef/0x17b0
[ 88.642746][ T24] process_scheduled_works+0xae1/0x17b0
[ 88.642807][ T24] ? __pfx_process_scheduled_works+0x10/0x10
[ 88.642855][ T24] worker_thread+0x8a0/0xda0
[ 88.642915][ T24] kthread+0x70e/0x8a0
[ 88.642939][ T24] ? __pfx_worker_thread+0x10/0x10
[ 88.642965][ T24] ? __pfx_kthread+0x10/0x10
[ 88.642987][ T24] ? _raw_spin_unlock_irq+0x23/0x50
[ 88.643006][ T24] ? lockdep_hardirqs_on+0x9c/0x150
[ 88.643024][ T24] ? __pfx_kthread+0x10/0x10
[ 88.643045][ T24] ret_from_fork+0x3f9/0x770
[ 88.643074][ T24] ? __pfx_ret_from_fork+0x10/0x10
[ 88.643107][ T24] ? __switch_to_asm+0x39/0x70
exit_group(0) = ?
[ 88.643124][ T24] ? __switch_to_asm+0x33/0x70
[ 88.643141][ T24] ? __pfx_kthread+0x10/0x10
[ 88.643161][ T24] ret_from_fork_asm+0x1a/0x30
[ 88.643200][ T24]
[ 89.165981][ T24] ---[ end trace ]---
[ 89.170022][ T24] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[ 89.177286][ T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted 6.16.0-rc6-next-20250714-syzkaller #0 PREEMPT(full)
[ 89.188673][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 89.198755][ T24] Workqueue: usb_hub_wq hub_event
[ 89.203817][ T24] Call Trace:
[ 89.207115][ T24]
[ 89.210058][ T24] dump_stack_lvl+0x99/0x250
[ 89.214672][ T24] ? __asan_memcpy+0x40/0x70
[ 89.219937][ T24] ? __pfx_dump_stack_lvl+0x10/0x10
[ 89.225251][ T24] ? __pfx__printk+0x10/0x10
[ 89.229891][ T24] vpanic+0x281/0x750
[ 89.233896][ T24] ? lockdep_hardirqs_on+0x9c/0x150
[ 89.239113][ T24] ? __pfx_vpanic+0x10/0x10
[ 89.243640][ T24] panic+0xb9/0xc0
[ 89.247375][ T24] ? __pfx_panic+0x10/0x10
[ 89.251808][ T24] ? __pfx__printk+0x10/0x10
[ 89.256410][ T24] ? driver_probe_device+0x4f/0x430
[ 89.261654][ T24] ? usbhid_probe+0xe13/0x12a0
[ 89.266439][ T24] ? usb_probe_interface+0x637/0xbf0
[ 89.271744][ T24] check_panic_on_warn+0x89/0xb0
[ 89.276704][ T24] __ubsan_handle_shift_out_of_bounds+0x386/0x410
[ 89.283133][ T24] ? __driver_probe_device+0x18c/0x2f0
[ 89.288611][ T24] ? usb_new_device+0xa39/0x16f0
[ 89.293569][ T24] ? ret_from_fork_asm+0x1a/0x30
[ 89.298524][ T24] s32ton+0xde/0x140
[ 89.302430][ T24] hid_output_report+0x419/0x790
[ 89.307380][ T24] ? rcu_is_watching+0x15/0xb0
[ 89.312171][ T24] __hid_request+0x14a/0x420
[ 89.316774][ T24] hidinput_connect+0x218a/0x3030
[ 89.321835][ T24] hid_connect+0x499/0x19a0
[ 89.326362][ T24] ? usbhid_start+0x1a92/0x24b0
[ 89.331232][ T24] ? __pfx_hid_connect+0x10/0x10
[ 89.336196][ T24] hid_hw_start+0xa8/0x120
[ 89.340626][ T24] ms_probe+0x180/0x430
[ 89.344796][ T24] hid_device_probe+0x3a0/0x710
[ 89.349686][ T24] ? driver_sysfs_add+0x1fe/0x210
[ 89.354729][ T24] ? __pfx_hid_device_probe+0x10/0x10
[ 89.360112][ T24] really_probe+0x26d/0x9e0
[ 89.364636][ T24] __driver_probe_device+0x18c/0x2f0
[ 89.369939][ T24] driver_probe_device+0x4f/0x430
[ 89.374983][ T24] __device_attach_driver+0x2ce/0x530
[ 89.380377][ T24] bus_for_each_drv+0x24e/0x2e0
[ 89.385242][ T24] ? __pfx___device_attach_driver+0x10/0x10
[ 89.391154][ T24] ? __pfx_bus_for_each_drv+0x10/0x10
[ 89.396533][ T24] ? __lock_acquire+0xab9/0xd20
[ 89.401407][ T24] __device_attach+0x2b8/0x400
[ 89.406186][ T24] ? __pfx___device_attach+0x10/0x10
[ 89.411509][ T24] ? do_raw_spin_unlock+0x122/0x240
[ 89.416716][ T24] bus_probe_device+0x185/0x260
[ 89.421584][ T24] device_add+0x7b6/0xb50
[ 89.425932][ T24] hid_add_device+0x398/0x540
[ 89.430628][ T24] usbhid_probe+0xe13/0x12a0
[ 89.435245][ T24] usb_probe_interface+0x637/0xbf0
[ 89.440375][ T24] ? __pfx_usb_probe_interface+0x10/0x10
[ 89.446013][ T24] really_probe+0x26d/0x9e0
[ 89.450539][ T24] __driver_probe_device+0x18c/0x2f0
[ 89.455847][ T24] driver_probe_device+0x4f/0x430
[ 89.460891][ T24] __device_attach_driver+0x2ce/0x530
[ 89.466288][ T24] bus_for_each_drv+0x24e/0x2e0
[ 89.471149][ T24] ? __pfx___device_attach_driver+0x10/0x10
[ 89.477060][ T24] ? __pfx_bus_for_each_drv+0x10/0x10
[ 89.482451][ T24] __device_attach+0x2b8/0x400
[ 89.487238][ T24] ? __pfx___device_attach+0x10/0x10
[ 89.492543][ T24] ? do_raw_spin_unlock+0x122/0x240
[ 89.497758][ T24] bus_probe_device+0x185/0x260
[ 89.502622][ T24] device_add+0x7b6/0xb50
[ 89.506968][ T24] usb_set_configuration+0x1a87/0x20e0
[ 89.512473][ T24] usb_generic_driver_probe+0x8d/0x150
[ 89.517960][ T24] usb_probe_device+0x1c1/0x390
[ 89.522828][ T24] ? __pfx_usb_probe_device+0x10/0x10
[ 89.528204][ T24] really_probe+0x26d/0x9e0
[ 89.532728][ T24] __driver_probe_device+0x18c/0x2f0
[ 89.538028][ T24] driver_probe_device+0x4f/0x430
[ 89.543072][ T24] __device_attach_driver+0x2ce/0x530
[ 89.548465][ T24] bus_for_each_drv+0x24e/0x2e0
[ 89.553341][ T24] ? __pfx___device_attach_driver+0x10/0x10
[ 89.559254][ T24] ? __pfx_bus_for_each_drv+0x10/0x10
[ 89.564645][ T24] __device_attach+0x2b8/0x400
[ 89.569493][ T24] ? __pfx___device_attach+0x10/0x10
[ 89.574800][ T24] ? do_raw_spin_unlock+0x122/0x240
[ 89.580015][ T24] bus_probe_device+0x185/0x260
[ 89.584884][ T24] device_add+0x7b6/0xb50
[ 89.589233][ T24] usb_new_device+0xa39/0x16f0
[ 89.594023][ T24] ? __pfx_usb_new_device+0x10/0x10
[ 89.599411][ T24] ? _raw_spin_unlock_irq+0x23/0x50
[ 89.604616][ T24] ? lockdep_hardirqs_on+0x9c/0x150
[ 89.609829][ T24] hub_event+0x2941/0x4a00
[ 89.614304][ T24] ? __pfx_hub_event+0x10/0x10
[ 89.619083][ T24] ? process_scheduled_works+0x9ef/0x17b0
[ 89.624819][ T24] ? _raw_spin_unlock_irq+0x23/0x50
[ 89.630022][ T24] ? process_scheduled_works+0x9ef/0x17b0
[ 89.635838][ T24] ? process_scheduled_works+0x9ef/0x17b0
[ 89.641586][ T24] process_scheduled_works+0xae1/0x17b0
[ 89.647173][ T24] ? __pfx_process_scheduled_works+0x10/0x10
[ 89.653182][ T24] worker_thread+0x8a0/0xda0
[ 89.657820][ T24] kthread+0x70e/0x8a0
[ 89.661900][ T24] ? __pfx_worker_thread+0x10/0x10
[ 89.667026][ T24] ? __pfx_kthread+0x10/0x10
[ 89.671634][ T24] ? _raw_spin_unlock_irq+0x23/0x50
[ 89.676839][ T24] ? lockdep_hardirqs_on+0x9c/0x150
[ 89.682042][ T24] ? __pfx_kthread+0x10/0x10
[ 89.686637][ T24] ret_from_fork+0x3f9/0x770
[ 89.691243][ T24] ? __pfx_ret_from_fork+0x10/0x10
[ 89.696372][ T24] ? __switch_to_asm+0x39/0x70
[ 89.701142][ T24] ? __switch_to_asm+0x33/0x70
[ 89.705913][ T24] ? __pfx_kthread+0x10/0x10
[ 89.710511][ T24] ret_from_fork_asm+0x1a/0x30
[ 89.715298][ T24]
[ 89.718640][ T24] Kernel Offset: disabled
[ 89.723014][ T24] Rebooting in 86400 seconds..