./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1252197863 <...> Warning: Permanently added '10.128.0.206' (ED25519) to the list of known hosts. execve("./syz-executor1252197863", ["./syz-executor1252197863"], 0x7ffd3ae6e400 /* 10 vars */) = 0 brk(NULL) = 0x55556c560000 brk(0x55556c560d00) = 0x55556c560d00 arch_prctl(ARCH_SET_FS, 0x55556c560380) = 0 set_tid_address(0x55556c560650) = 5014 set_robust_list(0x55556c560660, 24) = 0 rseq(0x55556c560ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1252197863", 4096) = 28 getrandom("\xa8\x41\xfb\x95\x80\x58\x42\x25", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55556c560d00 brk(0x55556c581d00) = 0x55556c581d00 brk(0x55556c582000) = 0x55556c582000 mprotect(0x7f23a1c5b000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556c560650) = 5015 ./strace-static-x86_64: Process 5015 attached [pid 5015] set_robust_list(0x55556c560660, 24) = 0 [pid 5015] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5015] setpgid(0, 0) = 0 [pid 5015] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5015] write(3, "1000", 4) = 4 [pid 5015] close(3) = 0 [pid 5015] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5015] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffe9ef51350) = 0 [pid 5015] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5015] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe9ef51350) = 0 [pid 5015] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe9ef51350) = 0 [pid 5015] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe9ef51350) = 0 [pid 5015] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe9ef51350) = 0 [pid 5015] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffe9ef50340) = 18 [pid 5015] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe9ef51350) = 0 [ 179.423678][ T4514] usb 1-1: new high-speed USB device number 2 using dummy_hcd [pid 5015] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe9ef51350) = 0 [pid 5015] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe9ef51350) = 0 [ 179.663631][ T4514] usb 1-1: Using ep0 maxpacket: 32 [pid 5015] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffe9ef50340) = 18 [pid 5015] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe9ef51350) = 0 [pid 5015] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffe9ef50340) = 9 [pid 5015] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe9ef51350) = 0 [pid 5015] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffe9ef50340) = 27 [ 179.785181][ T4514] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 179.793961][ T4514] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 179.802831][ T4514] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 179.812343][ T4514] usb 1-1: config 1 has no interface number 0 [ 179.818782][ T4514] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [pid 5015] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe9ef51350) = 0 [pid 5015] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5015] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5015] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f23a1c613ec) = 10 [ 179.830133][ T4514] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 179.843701][ T4514] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 179.853055][ T4514] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [pid 5015] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffe9ef50340) = 0 [ 179.935170][ T4514] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [pid 5015] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe9ef51380) = 0 [pid 5015] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xa) = 0 [pid 5015] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f23a1c613ec) = 10 [pid 5015] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffe9ef50370) = 0 [ 180.156695][ T4514] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [pid 5015] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 4 [pid 5015] ioctl(4, USB_RAW_IOCTL_INIT, 0x7ffe9ef51350) = 0 [pid 5015] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = -1 EBUSY (Device or resource busy) [ 180.360328][ T5015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.370281][ T5015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.573610][ C0] ===================================================== [ 180.580855][ C0] BUG: KMSAN: uninit-value in line6_pod_process_message+0x72f/0x7b0 [ 180.588995][ C0] line6_pod_process_message+0x72f/0x7b0 [ 180.594770][ C0] line6_data_received+0x5db/0x7e0 [ 180.600044][ C0] __usb_hcd_giveback_urb+0x508/0x770 [ 180.605603][ C0] usb_hcd_giveback_urb+0x157/0x720 [ 180.610963][ C0] dummy_timer+0xd93/0x6b10 [ 180.615620][ C0] call_timer_fn+0x49/0x580 [ 180.620252][ C0] __run_timer_base+0x84e/0xe90 [ 180.625267][ C0] run_timer_softirq+0x3a/0x70 [ 180.630139][ C0] __do_softirq+0x1c0/0x7d7 [ 180.634854][ C0] irq_exit_rcu+0x6a/0x130 [ 180.639420][ C0] sysvec_apic_timer_interrupt+0x83/0x90 [ 180.645317][ C0] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 180.651465][ C0] acpi_safe_halt+0x25/0x30 [ 180.656126][ C0] acpi_idle_do_entry+0x22/0x40 [ 180.661136][ C0] acpi_idle_enter+0xa1/0xc0 [ 180.665866][ C0] cpuidle_enter_state+0xcb/0x250 [ 180.671028][ C0] cpuidle_enter+0x7f/0xf0 [ 180.675566][ C0] do_idle+0x551/0x750 [ 180.679744][ C0] cpu_startup_entry+0x65/0x80 [ 180.684619][ C0] rest_init+0x1e8/0x260 [ 180.688995][ C0] start_kernel+0x927/0xa70 [ 180.693633][ C0] x86_64_start_reservations+0x2e/0x30 [ 180.699416][ C0] x86_64_start_kernel+0x98/0xa0 [ 180.704478][ C0] common_startup_64+0x12c/0x137 [ 180.709565][ C0] [ 180.711950][ C0] Uninit was created at: [ 180.716379][ C0] kmalloc_trace+0x578/0xba0 [ 180.721115][ C0] line6_init_cap_control+0x4f1/0x770 [ 180.726640][ C0] line6_probe+0xeae/0x1120 [ 180.731467][ C0] pod_probe+0x79/0x90 [ 180.735647][ C0] usb_probe_interface+0xd6f/0x1350 [ 180.740995][ C0] really_probe+0x4db/0xd90 [ 180.745643][ C0] __driver_probe_device+0x2ab/0x5d0 [ 180.751074][ C0] driver_probe_device+0x72/0x890 [ 180.756241][ C0] __device_attach_driver+0x568/0x9e0 [ 180.761760][ C0] bus_for_each_drv+0x403/0x620 [ 180.766744][ C0] __device_attach+0x3c1/0x650 [ 180.771638][ C0] device_initial_probe+0x32/0x40 [ 180.776802][ C0] bus_probe_device+0x3dc/0x5c0 [ 180.781766][ C0] device_add+0x1475/0x1c90 [ 180.786393][ C0] usb_set_configuration+0x31c9/0x38d0 [ 180.791993][ C0] usb_generic_driver_probe+0x109/0x2a0 [ 180.797676][ C0] usb_probe_device+0x3a7/0x690 [ 180.802670][ C0] really_probe+0x4db/0xd90 [ 180.807315][ C0] __driver_probe_device+0x2ab/0x5d0 [ 180.812740][ C0] driver_probe_device+0x72/0x890 [ 180.817991][ C0] __device_attach_driver+0x568/0x9e0 [ 180.823514][ C0] bus_for_each_drv+0x403/0x620 [ 180.828495][ C0] __device_attach+0x3c1/0x650 [ 180.833495][ C0] device_initial_probe+0x32/0x40 [ 180.838672][ C0] bus_probe_device+0x3dc/0x5c0 [ 180.843649][ C0] device_add+0x1475/0x1c90 [ 180.848280][ C0] usb_new_device+0x15ff/0x2470 [ 180.853270][ C0] hub_event+0x4ff8/0x72d0 [ 180.857830][ C0] process_scheduled_works+0xa81/0x1bd0 [ 180.863514][ C0] worker_thread+0xea5/0x1560 [ 180.868405][ C0] kthread+0x3e2/0x540 [ 180.872603][ C0] ret_from_fork+0x6d/0x90 [ 180.877136][ C0] ret_from_fork_asm+0x1a/0x30 [ 180.882055][ C0] [ 180.884450][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 6.9.0-rc1-syzkaller-00274-g486291a0e624 #0 [ 180.894196][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 180.904348][ C0] ===================================================== [ 180.911357][ C0] Disabling lock debugging due to kernel taint [ 180.917577][ C0] Kernel panic - not syncing: kmsan.panic set ... [ 180.924149][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 6.9.0-rc1-syzkaller-00274-g486291a0e624 #0 [ 180.935383][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 180.945547][ C0] Call Trace: [ 180.948923][ C0] [ 180.951848][ C0] dump_stack_lvl+0x216/0x2d0 [ 180.956694][ C0] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 180.962725][ C0] dump_stack+0x1e/0x30 [ 180.967014][ C0] panic+0x4e2/0xcd0 [ 180.971061][ C0] ? kmsan_get_metadata+0x91/0x1d0 [ 180.976305][ C0] kmsan_report+0x2d5/0x2e0 [ 180.980977][ C0] ? kmsan_get_metadata+0x146/0x1d0 [ 180.986308][ C0] ? __msan_warning+0x95/0x120 [ 180.991219][ C0] ? line6_pod_process_message+0x72f/0x7b0 [ 180.997155][ C0] ? line6_data_received+0x5db/0x7e0 [ 181.002706][ C0] ? __usb_hcd_giveback_urb+0x508/0x770 [ 181.008447][ C0] ? usb_hcd_giveback_urb+0x157/0x720 [ 181.013995][ C0] ? dummy_timer+0xd93/0x6b10 [ 181.018829][ C0] ? call_timer_fn+0x49/0x580 [ 181.023624][ C0] ? __run_timer_base+0x84e/0xe90 [ 181.028817][ C0] ? run_timer_softirq+0x3a/0x70 [ 181.033958][ C0] ? __do_softirq+0x1c0/0x7d7 [ 181.038759][ C0] ? irq_exit_rcu+0x6a/0x130 [ 181.043490][ C0] ? sysvec_apic_timer_interrupt+0x83/0x90 [ 181.049527][ C0] ? asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 181.055826][ C0] ? acpi_safe_halt+0x25/0x30 [ 181.060650][ C0] ? acpi_idle_do_entry+0x22/0x40 [ 181.065819][ C0] ? acpi_idle_enter+0xa1/0xc0 [ 181.070809][ C0] ? cpuidle_enter_state+0xcb/0x250 [ 181.076144][ C0] ? cpuidle_enter+0x7f/0xf0 [ 181.080870][ C0] ? do_idle+0x551/0x750 [ 181.085243][ C0] ? cpu_startup_entry+0x65/0x80 [ 181.090323][ C0] ? rest_init+0x1e8/0x260 [ 181.094923][ C0] ? start_kernel+0x927/0xa70 [ 181.099769][ C0] ? x86_64_start_reservations+0x2e/0x30 [ 181.105552][ C0] ? x86_64_start_kernel+0x98/0xa0 [ 181.110800][ C0] ? common_startup_64+0x12c/0x137 [ 181.116073][ C0] ? stack_depot_save_flags+0x2c/0x6e0 [ 181.121661][ C0] ? kmsan_get_metadata+0x146/0x1d0 [ 181.126982][ C0] ? kmsan_get_metadata+0x146/0x1d0 [ 181.132403][ C0] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 181.138811][ C0] ? kmsan_get_metadata+0x146/0x1d0 [ 181.144127][ C0] ? kmsan_get_metadata+0x146/0x1d0 [ 181.149536][ C0] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 181.155473][ C0] ? kmsan_get_metadata+0x146/0x1d0 [ 181.160793][ C0] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 181.166725][ C0] __msan_warning+0x95/0x120 [ 181.171483][ C0] line6_pod_process_message+0x72f/0x7b0 [ 181.177255][ C0] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 181.183199][ C0] ? __pfx_line6_pod_process_message+0x10/0x10 [ 181.189496][ C0] line6_data_received+0x5db/0x7e0 [ 181.194786][ C0] ? __pfx_line6_data_received+0x10/0x10 [ 181.200601][ C0] __usb_hcd_giveback_urb+0x508/0x770 [ 181.206189][ C0] ? kmsan_get_metadata+0x146/0x1d0 [ 181.211551][ C0] usb_hcd_giveback_urb+0x157/0x720 [ 181.216937][ C0] dummy_timer+0xd93/0x6b10 [ 181.221684][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 181.226782][ C0] call_timer_fn+0x49/0x580 [ 181.231416][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 181.236522][ C0] __run_timer_base+0x84e/0xe90 [ 181.241551][ C0] ? kmsan_get_metadata+0x146/0x1d0 [ 181.246870][ C0] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 181.252826][ C0] ? __pfx_run_timer_softirq+0x10/0x10 [ 181.258437][ C0] run_timer_softirq+0x3a/0x70 [ 181.263407][ C0] __do_softirq+0x1c0/0x7d7 [ 181.268065][ C0] irq_exit_rcu+0x6a/0x130 [ 181.272653][ C0] sysvec_apic_timer_interrupt+0x83/0x90 [ 181.278462][ C0] [ 181.281476][ C0] [ 181.284493][ C0] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 181.290649][ C0] RIP: 0010:acpi_safe_halt+0x25/0x30 [ 181.296092][ C0] Code: 90 90 90 90 90 55 48 89 e5 65 48 8b 04 25 00 5d 0a 00 48 f7 00 08 00 00 00 75 10 66 90 0f 00 2d cb 62 52 00 f3 0f 1e fa fb f4 5d c3 cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 [ 181.315837][ C0] RSP: 0018:ffffffff90c03ce8 EFLAGS: 00000246 [ 181.322017][ C0] RAX: ffffffff90c2be00 RBX: ffffffff9107e660 RCX: 0000000000000001 [ 181.330093][ C0] RDX: ffff88814088b464 RSI: ffffffff9107e660 RDI: ffff88814088b464 [ 181.338192][ C0] RBP: ffffffff90c03ce8 R08: ffffea000000000f R09: 00000000000000ff [ 181.346748][ C0] R10: ffff88823f181e02 R11: ffffffff8f6b2500 R12: ffff888106101800 [ 181.354926][ C0] R13: ffffffff9107e6e0 R14: 0000000000000001 R15: 0000000000000001 [ 181.363111][ C0] ? __pfx_acpi_idle_enter+0x10/0x10 [ 181.368585][ C0] acpi_idle_do_entry+0x22/0x40 [ 181.373594][ C0] acpi_idle_enter+0xa1/0xc0 [ 181.378328][ C0] cpuidle_enter_state+0xcb/0x250 [ 181.383494][ C0] cpuidle_enter+0x7f/0xf0 [ 181.388056][ C0] do_idle+0x551/0x750 [ 181.392245][ C0] cpu_startup_entry+0x65/0x80 [ 181.397133][ C0] rest_init+0x1e8/0x260 [ 181.401523][ C0] start_kernel+0x927/0xa70 [ 181.406187][ C0] x86_64_start_reservations+0x2e/0x30 [ 181.411778][ C0] x86_64_start_kernel+0x98/0xa0 [ 181.416837][ C0] common_startup_64+0x12c/0x137 [ 181.421938][ C0] [ 181.425280][ C0] Kernel Offset: disabled [ 181.429682][ C0] Rebooting in 86400 seconds..