./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1078314890

<...>
Warning: Permanently added '10.128.0.56' (ED25519) to the list of known hosts.
execve("./syz-executor1078314890", ["./syz-executor1078314890"], 0x7fffb191b010 /* 10 vars */) = 0
brk(NULL)                               = 0x555588887000
brk(0x555588887e00)                     = 0x555588887e00
arch_prctl(ARCH_SET_FS, 0x555588887480) = 0
set_tid_address(0x555588887750)         = 5814
set_robust_list(0x555588887760, 24)     = 0
rseq(0x555588887da0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor1078314890", 4096) = 28
getrandom("\x4b\x24\x2e\x02\x7c\xa7\xb0\x26", 8, GRND_NONBLOCK) = 8
brk(NULL)                               = 0x555588887e00
brk(0x5555888a8e00)                     = 0x5555888a8e00
brk(0x5555888a9000)                     = 0x5555888a9000
mprotect(0x7f16ecf63000, 16384, PROT_READ) = 0
mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000
mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000
mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000
rt_sigaction(SIGRTMIN, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0
rt_sigaction(SIGRT_1, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0
rt_sigaction(SIGSEGV, {sa_handler=0x7f16eceb9ef0, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7f16ecec2b20}, NULL, 8) = 0
rt_sigaction(SIGBUS, {sa_handler=0x7f16eceb9ef0, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7f16ecec2b20}, NULL, 8) = 0
unshare(CLONE_NEWPID)                   = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555588887750) = 5815
./strace-static-x86_64: Process 5815 attached
[pid  5815] set_robust_list(0x555588887760, 24) = 0
[pid  5815] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5815] getppid()                   = 0
[pid  5815] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0
[pid  5815] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0
[pid  5815] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0
[pid  5815] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0
[pid  5815] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0
[pid  5815] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0
[pid  5815] unshare(CLONE_NEWNS)        = 0
[pid  5815] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0
[pid  5815] unshare(CLONE_NEWIPC)       = 0
[pid  5815] unshare(CLONE_NEWCGROUP)    = 0
[pid  5815] unshare(CLONE_NEWUTS)       = 0
[pid  5815] unshare(CLONE_SYSVSEM)      = 0
[pid  5815] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3
[pid  5815] write(3, "16777216", 8)     = 8
[pid  5815] close(3)                    = 0
[pid  5815] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3
[pid  5815] write(3, "536870912", 9)    = 9
[pid  5815] close(3)                    = 0
[pid  5815] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3
[pid  5815] write(3, "1024", 4)         = 4
[pid  5815] close(3)                    = 0
[pid  5815] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3
[pid  5815] write(3, "8192", 4)         = 4
[pid  5815] close(3)                    = 0
[pid  5815] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3
[pid  5815] write(3, "1024", 4)         = 4
[pid  5815] close(3)                    = 0
[pid  5815] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3
[pid  5815] write(3, "1024", 4)         = 4
[pid  5815] close(3)                    = 0
[pid  5815] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3
[pid  5815] write(3, "1024 1048576 500 1024", 21) = 21
[pid  5815] close(3)                    = 0
[pid  5815] getpid()                    = 1
[pid  5815] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PTRACE|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_NICE|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, permitted=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PTRACE|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_NICE|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, inheritable=0}) = 0
[pid  5815] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, permitted=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, inheritable=0}) = 0
[pid  5815] unshare(CLONE_NEWNET)       = 0
[pid  5815] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC) = 3
[pid  5815] write(3, "0 65535", 7)      = 7
[pid  5815] close(3)                    = 0
[pid  5815] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC) = 3
[pid  5815] write(3, "100000", 6)       = 6
[pid  5815] close(3)                    = 0
[pid  5815] mkdir("./syz-tmp", 0777)    = 0
[pid  5815] mount("", "./syz-tmp", "tmpfs", 0, NULL) = 0
[pid  5815] mkdir("./syz-tmp/newroot", 0777) = 0
[pid  5815] mkdir("./syz-tmp/newroot/dev", 0700) = 0
[pid  5815] mount("/dev", "./syz-tmp/newroot/dev", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0
[pid  5815] mkdir("./syz-tmp/newroot/proc", 0700) = 0
[pid  5815] mount("syz-proc", "./syz-tmp/newroot/proc", "proc", 0, NULL) = 0
[pid  5815] mkdir("./syz-tmp/newroot/selinux", 0700) = 0
[pid  5815] mount("/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = -1 ENOENT (No such file or directory)
[pid  5815] mount("/sys/fs/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = -1 ENOENT (No such file or directory)
[pid  5815] mkdir("./syz-tmp/newroot/sys", 0700) = 0
[pid  5815] mount("/sys", "./syz-tmp/newroot/sys", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0
[pid  5815] mount("/sys/kernel/debug", "./syz-tmp/newroot/sys/kernel/debug", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0
[pid  5815] mount("/sys/fs/smackfs", "./syz-tmp/newroot/sys/fs/smackfs", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = -1 ENOENT (No such file or directory)
[pid  5815] mount("/proc/sys/fs/binfmt_misc", "./syz-tmp/newroot/proc/sys/fs/binfmt_misc", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0
[pid  5815] mkdir("./syz-tmp/newroot/syz-inputs", 0700) = 0
[pid  5815] mount("/syz-inputs", "./syz-tmp/newroot/syz-inputs", NULL, MS_RDONLY|MS_BIND|MS_REC|MS_PRIVATE, NULL) = -1 ENOENT (No such file or directory)
[pid  5815] mkdir("./syz-tmp/pivot", 0777) = 0
[pid  5815] pivot_root("./syz-tmp", "./syz-tmp/pivot") = 0
[pid  5815] chdir("/")                  = 0
[pid  5815] umount2("./pivot", MNT_DETACHexecuting program
) = 0
[pid  5815] chroot("./newroot")         = 0
[pid  5815] chdir("/")                  = 0
[pid  5815] mkdir("/dev/gadgetfs", 0777) = 0
[pid  5815] mount("gadgetfs", "/dev/gadgetfs", "gadgetfs", 0, NULL) = 0
[pid  5815] mkdir("/dev/binderfs", 0777) = 0
[pid  5815] mount("binder", "/dev/binderfs", "binder", 0, NULL) = 0
[pid  5815] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5815] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy)
[pid  5815] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5818 attached
, child_tidptr=0x555588887750) = 2
[pid  5818] set_robust_list(0x555588887760, 24) = 0
[pid  5818] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5818] setpgid(0, 0)               = 0
[pid  5818] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5818] write(3, "1000", 4)         = 4
[pid  5818] close(3)                    = 0
[pid  5818] write(1, "executing program\n", 18) = 18
[pid  5818] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3
[pid  5818] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffc4adf6f80) = 0
[pid  5818] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0
[pid  5818] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffc4adf6f80) = 0
[pid  5818] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffc4adf6f80) = 0
[pid  5818] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffc4adf6f80) = 0
[pid  5818] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffc4adf6f80) = 0
[pid  5818] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffc4adf5f70) = 18
[pid  5818] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffc4adf6f80) = 0
[  181.500526][   T11] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[pid  5818] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffc4adf6f80) = 0
[pid  5818] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffc4adf6f80) = 0
[pid  5818] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffc4adf5f70) = 18
[pid  5818] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffc4adf6f80) = 0
[pid  5818] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffc4adf5f70) = 9
[pid  5818] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffc4adf6f80) = 0
[pid  5818] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffc4adf5f70) = 36
[  181.660369][   T11] usb 1-1: Using ep0 maxpacket: 16
[  181.682285][   T11] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  181.693996][   T11] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  181.706806][   T11] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  181.719954][   T11] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[pid  5818] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffc4adf6f80) = 0
[pid  5818] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0
[pid  5818] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0
[pid  5818] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f16ecf693ec) = -1 EINVAL (Invalid argument)
[pid  5818] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffc4adf5f70) = 0
[  181.729417][   T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.742732][   T11] usb 1-1: config 0 descriptor??
[pid  5818] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffc4adf6fa0) = 0
[pid  5818] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffc4adf5f90) = 0
[pid  5818] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffc4adf6fa0) = 0
[pid  5818] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffc4adf5f90) = 34
[  182.201587][   T11] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[  182.209156][   T11] microsoft 0003:045E:07DA.0001: ignoring exceeding usage max
[  182.248829][   T11] =====================================================
[  182.256358][   T11] BUG: KMSAN: kernel-usb-infoleak-after-free in usb_submit_urb+0x5a1/0x2630
[  182.265461][   T11]  usb_submit_urb+0x5a1/0x2630
[  182.270607][   T11]  usb_start_wait_urb+0xc2/0x320
[  182.275678][   T11]  usb_control_msg+0x27c/0x5b0
[  182.280684][   T11]  usbhid_raw_request+0x4ab/0x690
[  182.285910][   T11]  __hid_request+0x2bd/0x500
[  182.290818][   T11]  hidinput_connect+0x3bf5/0x5cc0
[  182.296209][   T11]  hid_connect+0x6b4/0x3440
[  182.300998][   T11]  hid_hw_start+0xfc/0x1e0
[  182.305586][   T11]  ms_probe+0x2e5/0x890
[  182.309820][   T11]  hid_device_probe+0x536/0xab0
[  182.314990][   T11]  really_probe+0x4d1/0xd90
[  182.319696][   T11]  __driver_probe_device+0x268/0x380
[  182.325258][   T11]  driver_probe_device+0x70/0x8b0
[  182.330641][   T11]  __device_attach_driver+0x4ee/0x950
[  182.336202][   T11]  bus_for_each_drv+0x3e3/0x680
[  182.341393][   T11]  __device_attach+0x3c8/0x5c0
[  182.346374][   T11]  device_initial_probe+0x33/0x40
[  182.351745][   T11]  bus_probe_device+0x3ba/0x5e0
[  182.356761][   T11]  device_add+0x12a9/0x1c10
[  182.361518][   T11]  hid_add_device+0x5ed/0x7b0
[  182.366370][   T11]  usbhid_probe+0x1fec/0x2660
[  182.371408][   T11]  usb_probe_interface+0xd04/0x1310
[  182.376768][   T11]  really_probe+0x4d1/0xd90
[  182.381566][   T11]  __driver_probe_device+0x268/0x380
[  182.387076][   T11]  driver_probe_device+0x70/0x8b0
[  182.392607][   T11]  __device_attach_driver+0x4ee/0x950
[pid  5818] close(3)                    = 0
[pid  5818] close(4)                    = -1 EBADF (Bad file descriptor)
[pid  5818] close(5)                    = -1 EBADF (Bad file descriptor)
[pid  5818] close(6)                    = -1 EBADF (Bad file descriptor)
[pid  5818] close(7)                    = -1 EBADF (Bad file descriptor)
[pid  5818] close(8)                    = -1 EBADF (Bad file descriptor)
[pid  5818] close(9)                    = -1 EBADF (Bad file descriptor)
[pid  5818] close(10)                   = -1 EBADF (Bad file descriptor)
[pid  5818] close(11)                   = -1 EBADF (Bad file descriptor)
[pid  5818] close(12)                   = -1 EBADF (Bad file descriptor)
[  182.398283][   T11]  bus_for_each_drv+0x3e3/0x680
[  182.404583][   T11]  __device_attach+0x3c8/0x5c0
[  182.409571][   T11]  device_initial_probe+0x33/0x40
[  182.415002][   T11]  bus_probe_device+0x3ba/0x5e0
[  182.420272][   T11]  device_add+0x12a9/0x1c10
[  182.426083][   T11]  usb_set_configuration+0x3493/0x3b70
[  182.431966][   T11]  usb_generic_driver_probe+0xfc/0x290
[  182.438034][   T11]  usb_probe_device+0x38a/0x690
[pid  5818] close(13)                   = -1 EBADF (Bad file descriptor)
[pid  5818] close(14)                   = -1 EBADF (Bad file descriptor)
[pid  5818] close(15)                   = -1 EBADF (Bad file descriptor)
[pid  5818] close(16)                   = -1 EBADF (Bad file descriptor)
[pid  5818] close(17)                   = -1 EBADF (Bad file descriptor)
[pid  5818] close(18)                   = -1 EBADF (Bad file descriptor)
[pid  5818] close(19)                   = -1 EBADF (Bad file descriptor)
[pid  5818] close(20)                   = -1 EBADF (Bad file descriptor)
[pid  5818] close(21)                   = -1 EBADF (Bad file descriptor)
[pid  5818] close(22)                   = -1 EBADF (Bad file descriptor)
[pid  5818] close(23)                   = -1 EBADF (Bad file descriptor)
[pid  5818] close(24)                   = -1 EBADF (Bad file descriptor)
[pid  5818] close(25)                   = -1 EBADF (Bad file descriptor)
[pid  5818] close(26)                   = -1 EBADF (Bad file descriptor)
[pid  5818] close(27)                   = -1 EBADF (Bad file descriptor)
[pid  5818] close(28)                   = -1 EBADF (Bad file descriptor)
[pid  5818] close(29)                   = -1 EBADF (Bad file descriptor)
[pid  5818] exit_group(0)               = ?
[pid  5818] +++ exited with 0 +++
[  182.446368][   T11]  really_probe+0x4d1/0xd90
[  182.451551][   T11]  __driver_probe_device+0x268/0x380
[  182.459233][   T11]  driver_probe_device+0x70/0x8b0
[  182.465815][   T11]  __device_attach_driver+0x4ee/0x950
[  182.471628][   T11]  bus_for_each_drv+0x3e3/0x680
[  182.478669][   T11]  __device_attach+0x3c8/0x5c0
[  182.485805][   T11]  device_initial_probe+0x33/0x40
[  182.491282][   T11]  bus_probe_device+0x3ba/0x5e0
[pid  5815] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} ---
[pid  5815] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5820 attached
, child_tidptr=0x555588887750) = 3
[pid  5820] set_robust_list(0x555588887760, 24) = 0
[pid  5820] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5820] setpgid(0, 0)               = 0
[pid  5820] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5820] write(3, "1000", 4)         = 4
[pid  5820] close(3)                    = 0
executing program
[pid  5820] write(1, "executing program\n", 18) = 18
[pid  5820] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3
[  182.496324][   T11]  device_add+0x12a9/0x1c10
[  182.504299][   T11]  usb_new_device+0x104b/0x20c0
[  182.510550][   T11]  hub_event+0x5588/0x7580
[  182.515293][   T11]  process_scheduled_works+0xb8e/0x1d80
[  182.522277][   T11]  worker_thread+0xedf/0x1590
[  182.527563][   T11]  kthread+0xd5c/0xf00
[  182.532054][   T11]  ret_from_fork+0x1e0/0x310
[  182.541934][   T11]  ret_from_fork_asm+0x1a/0x30
[pid  5820] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffc4adf6f80) = 0
[pid  5820] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0
[pid  5820] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffc4adf6f80) = 0
[  182.548962][   T11] 
[  182.551605][   T11] Uninit was created at:
[  182.556086][   T11]  __free_frozen_pages+0x179/0x1560
[  182.561678][   T11]  free_frozen_pages+0x21/0x30
[  182.567703][   T11]  __folio_put+0x435/0x460
[  182.572588][   T11]  anon_pipe_put_page+0x32e/0x620
[  182.578851][   T11]  anon_pipe_buf_release+0x39/0x50
[  182.586524][   T11]  anon_pipe_read+0xaef/0x1e80
[  182.591643][   T11]  vfs_read+0x857/0xf00
[  182.596048][   T11]  __x64_sys_read+0x1fb/0x4d0
[  182.601103][   T11]  x64_sys_call+0x39db/0x3db0
[  182.606010][   T11]  do_syscall_64+0xd9/0x210
[  182.610813][   T11]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.616831][   T11] 
[  182.619246][   T11] Bytes 2727-6822 of 65535 are uninitialized
[  182.625423][   T11] Memory access of size 65535 starts at ffff88811b772559
[  182.632704][   T11] 
[  182.635104][   T11] CPU: 0 UID: 0 PID: 11 Comm: kworker/0:1 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(undef) 
[  182.647386][   T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  182.657786][   T11] Workqueue: usb_hub_wq hub_event
[  182.663193][   T11] =====================================================
[  182.670395][   T11] Disabling lock debugging due to kernel taint
[  182.676648][   T11] Kernel panic - not syncing: kmsan.panic set ...
[  182.683196][   T11] CPU: 0 UID: 0 PID: 11 Comm: kworker/0:1 Tainted: G    B               6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(undef) 
[  182.696880][   T11] Tainted: [B]=BAD_PAGE
[  182.701130][   T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  182.711334][   T11] Workqueue: usb_hub_wq hub_event
[  182.716547][   T11] Call Trace:
[  182.719883][   T11]  <TASK>
[  182.722902][   T11]  __dump_stack+0x26/0x30
[  182.727349][   T11]  dump_stack_lvl+0x53/0x270
[  182.732045][   T11]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  182.737997][   T11]  dump_stack+0x1e/0x25
[  182.742261][   T11]  panic+0x4bd/0xd50
[  182.746341][   T11]  kmsan_report+0x31c/0x320
[  182.750969][   T11]  ? kmsan_internal_check_memory+0x16c/0x230
[  182.757105][   T11]  ? kmsan_handle_urb+0x2c/0x40
[  182.762136][   T11]  ? usb_submit_urb+0x5a1/0x2630
[  182.767176][   T11]  ? usb_start_wait_urb+0xc2/0x320
[  182.772485][   T11]  ? usb_control_msg+0x27c/0x5b0
[  182.777544][   T11]  ? usbhid_raw_request+0x4ab/0x690
[  182.782887][   T11]  ? __hid_request+0x2bd/0x500
[  182.787755][   T11]  ? hidinput_connect+0x3bf5/0x5cc0
[  182.793165][   T11]  ? hid_connect+0x6b4/0x3440
[  182.797947][   T11]  ? hid_hw_start+0xfc/0x1e0
[  182.802660][   T11]  ? ms_probe+0x2e5/0x890
[  182.807123][   T11]  ? hid_device_probe+0x536/0xab0
[  182.812251][   T11]  ? really_probe+0x4d1/0xd90
[  182.817056][   T11]  ? __driver_probe_device+0x268/0x380
[  182.822663][   T11]  ? driver_probe_device+0x70/0x8b0
[  182.827983][   T11]  ? __device_attach_driver+0x4ee/0x950
[  182.833655][   T11]  ? bus_for_each_drv+0x3e3/0x680
[  182.838788][   T11]  ? __device_attach+0x3c8/0x5c0
[  182.843842][   T11]  ? device_initial_probe+0x33/0x40
[  182.849162][   T11]  ? bus_probe_device+0x3ba/0x5e0
[  182.854297][   T11]  ? device_add+0x12a9/0x1c10
[  182.859100][   T11]  ? hid_add_device+0x5ed/0x7b0
[  182.864122][   T11]  ? usbhid_probe+0x1fec/0x2660
[  182.869089][   T11]  ? usb_probe_interface+0xd04/0x1310
[  182.874561][   T11]  ? really_probe+0x4d1/0xd90
[  182.879364][   T11]  ? __driver_probe_device+0x268/0x380
[  182.885034][   T11]  ? driver_probe_device+0x70/0x8b0
[  182.890360][   T11]  ? __device_attach_driver+0x4ee/0x950
[  182.896029][   T11]  ? bus_for_each_drv+0x3e3/0x680
[  182.901160][   T11]  ? __device_attach+0x3c8/0x5c0
[  182.906245][   T11]  ? device_initial_probe+0x33/0x40
[  182.911618][   T11]  ? bus_probe_device+0x3ba/0x5e0
[  182.916768][   T11]  ? device_add+0x12a9/0x1c10
[  182.921625][   T11]  ? usb_set_configuration+0x3493/0x3b70
[  182.927409][   T11]  ? usb_generic_driver_probe+0xfc/0x290
[  182.933193][   T11]  ? usb_probe_device+0x38a/0x690
[  182.938341][   T11]  ? really_probe+0x4d1/0xd90
[  182.943144][   T11]  ? __driver_probe_device+0x268/0x380
[  182.948729][   T11]  ? driver_probe_device+0x70/0x8b0
[  182.954052][   T11]  ? __device_attach_driver+0x4ee/0x950
[  182.959725][   T11]  ? bus_for_each_drv+0x3e3/0x680
[  182.964854][   T11]  ? __device_attach+0x3c8/0x5c0
[  182.969909][   T11]  ? device_initial_probe+0x33/0x40
[  182.975233][   T11]  ? bus_probe_device+0x3ba/0x5e0
[  182.980389][   T11]  ? device_add+0x12a9/0x1c10
[  182.985218][   T11]  ? usb_new_device+0x104b/0x20c0
[  182.990465][   T11]  ? hub_event+0x5588/0x7580
[  182.995172][   T11]  ? process_scheduled_works+0xb8e/0x1d80
[  183.001025][   T11]  ? worker_thread+0xedf/0x1590
[  183.005991][   T11]  ? kthread+0xd5c/0xf00
[  183.010329][   T11]  ? ret_from_fork+0x1e0/0x310
[  183.015182][   T11]  ? ret_from_fork_asm+0x1a/0x30
[  183.020284][   T11]  ? bus_for_each_drv+0x3e3/0x680
[  183.025563][   T11]  ? __device_attach+0x3c8/0x5c0
[  183.030642][   T11]  ? device_initial_probe+0x33/0x40
[  183.035975][   T11]  ? kmsan_get_metadata+0xfb/0x160
[  183.041237][   T11]  ? kmsan_metadata_is_contiguous+0xdf/0x1e0
[  183.047348][   T11]  kmsan_internal_check_memory+0x16c/0x230
[  183.053296][   T11]  kmsan_handle_urb+0x2c/0x40
[  183.058089][   T11]  usb_submit_urb+0x5a1/0x2630
[  183.062971][   T11]  ? stack_depot_save_flags+0x60f/0x7b0
[  183.068629][   T11]  ? kmsan_get_metadata+0xfb/0x160
[  183.073876][   T11]  ? kmsan_get_metadata+0x30/0x160
[  183.079125][   T11]  usb_start_wait_urb+0xc2/0x320
[  183.084207][   T11]  usb_control_msg+0x27c/0x5b0
[  183.089176][   T11]  usbhid_raw_request+0x4ab/0x690
[  183.094431][   T11]  __hid_request+0x2bd/0x500
[  183.099145][   T11]  ? __pfx_usbhid_raw_request+0x10/0x10
[  183.104849][   T11]  hidinput_connect+0x3bf5/0x5cc0
[  183.109997][   T11]  ? driver_probe_device+0x70/0x8b0
[  183.115356][   T11]  ? __device_attach_driver+0x4ee/0x950
[  183.121034][   T11]  ? bus_for_each_drv+0x3e3/0x680
[  183.126162][   T11]  ? __device_attach+0x3c8/0x5c0
[  183.131235][   T11]  ? bus_probe_device+0x3ba/0x5e0
[  183.136367][   T11]  ? device_add+0x12a9/0x1c10
[  183.141152][   T11]  ? usb_new_device+0x104b/0x20c0
[  183.146319][   T11]  ? hub_event+0x5588/0x7580
[  183.151099][   T11]  ? process_scheduled_works+0xb8e/0x1d80
[  183.156987][   T11]  ? worker_thread+0xedf/0x1590
[  183.162055][   T11]  ? kthread+0xd5c/0xf00
[  183.166393][   T11]  ? ret_from_fork+0x1e0/0x310
[  183.171265][   T11]  ? ret_from_fork_asm+0x1a/0x30
[  183.176346][   T11]  ? _raw_spin_unlock_irqrestore+0x3f/0x60
[  183.182312][   T11]  hid_connect+0x6b4/0x3440
[  183.186974][   T11]  hid_hw_start+0xfc/0x1e0
[  183.191506][   T11]  ms_probe+0x2e5/0x890
[  183.195791][   T11]  ? kmsan_get_metadata+0xfb/0x160
[  183.201034][   T11]  ? __pfx_ms_probe+0x10/0x10
[  183.205801][   T11]  hid_device_probe+0x536/0xab0
[  183.210790][   T11]  ? __pfx_hid_device_probe+0x10/0x10
[  183.216293][   T11]  really_probe+0x4d1/0xd90
[  183.220932][   T11]  __driver_probe_device+0x268/0x380
[  183.226374][   T11]  driver_probe_device+0x70/0x8b0
[  183.231608][   T11]  ? kmsan_get_metadata+0xfb/0x160
[  183.236847][   T11]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  183.242791][   T11]  __device_attach_driver+0x4ee/0x950
[  183.248308][   T11]  bus_for_each_drv+0x3e3/0x680
[  183.253265][   T11]  ? __pfx___device_attach_driver+0x10/0x10
[  183.259326][   T11]  __device_attach+0x3c8/0x5c0
[  183.264252][   T11]  device_initial_probe+0x33/0x40
[  183.269397][   T11]  bus_probe_device+0x3ba/0x5e0
[  183.274367][   T11]  device_add+0x12a9/0x1c10
[  183.279001][   T11]  hid_add_device+0x5ed/0x7b0
[  183.283845][   T11]  usbhid_probe+0x1fec/0x2660
[  183.288721][   T11]  ? kmsan_internal_unpoison_memory+0x14/0x20
[  183.294968][   T11]  ? __pfx_usbhid_probe+0x10/0x10
[  183.300202][   T11]  usb_probe_interface+0xd04/0x1310
[  183.305526][   T11]  ? __pfx_usb_probe_interface+0x10/0x10
[  183.311266][   T11]  really_probe+0x4d1/0xd90
[  183.315910][   T11]  __driver_probe_device+0x268/0x380
[  183.321328][   T11]  driver_probe_device+0x70/0x8b0
[  183.326513][   T11]  ? kmsan_get_metadata+0xfb/0x160
[  183.331752][   T11]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  183.337698][   T11]  __device_attach_driver+0x4ee/0x950
[  183.343221][   T11]  bus_for_each_drv+0x3e3/0x680
[  183.348177][   T11]  ? __pfx___device_attach_driver+0x10/0x10
[  183.354223][   T11]  __device_attach+0x3c8/0x5c0
[  183.359116][   T11]  device_initial_probe+0x33/0x40
[  183.364302][   T11]  bus_probe_device+0x3ba/0x5e0
[  183.369335][   T11]  device_add+0x12a9/0x1c10
[  183.373968][   T11]  usb_set_configuration+0x3493/0x3b70
[  183.379620][   T11]  usb_generic_driver_probe+0xfc/0x290
[  183.385227][   T11]  ? __pfx_usb_generic_driver_probe+0x10/0x10
[  183.391439][   T11]  usb_probe_device+0x38a/0x690
[  183.396397][   T11]  ? __pfx_usb_probe_device+0x10/0x10
[  183.401866][   T11]  really_probe+0x4d1/0xd90
[  183.406596][   T11]  __driver_probe_device+0x268/0x380
[  183.412037][   T11]  driver_probe_device+0x70/0x8b0
[  183.417259][   T11]  ? kmsan_get_metadata+0xfb/0x160
[  183.422520][   T11]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  183.428488][   T11]  __device_attach_driver+0x4ee/0x950
[  183.434024][   T11]  bus_for_each_drv+0x3e3/0x680
[  183.438993][   T11]  ? __pfx___device_attach_driver+0x10/0x10
[  183.445089][   T11]  __device_attach+0x3c8/0x5c0
[  183.450076][   T11]  device_initial_probe+0x33/0x40
[  183.455276][   T11]  bus_probe_device+0x3ba/0x5e0
[  183.460299][   T11]  device_add+0x12a9/0x1c10
[  183.464930][   T11]  usb_new_device+0x104b/0x20c0
[  183.469935][   T11]  hub_event+0x5588/0x7580
[  183.474560][   T11]  ? pwq_dec_nr_in_flight+0x1678/0x1d80
[  183.480300][   T11]  ? __pfx_hub_event+0x10/0x10
[  183.485240][   T11]  process_scheduled_works+0xb8e/0x1d80
[  183.491025][   T11]  worker_thread+0xedf/0x1590
[  183.495934][   T11]  kthread+0xd5c/0xf00
[  183.500109][   T11]  ? __pfx_worker_thread+0x10/0x10
[  183.505376][   T11]  ? __pfx_kthread+0x10/0x10
[  183.510110][   T11]  ret_from_fork+0x1e0/0x310
[  183.514880][   T11]  ? __pfx_kthread+0x10/0x10
[  183.519568][   T11]  ret_from_fork_asm+0x1a/0x30
[  183.524504][   T11]  </TASK>
[  183.527951][   T11] Kernel Offset: disabled
[  183.532353][   T11] Rebooting in 86400 seconds..