./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2778234731 <...> Warning: Permanently added '10.128.1.49' (ED25519) to the list of known hosts. execve("./syz-executor2778234731", ["./syz-executor2778234731"], 0x7fff2ce8d5c0 /* 10 vars */) = 0 brk(NULL) = 0x55557cdde000 brk(0x55557cdded00) = 0x55557cdded00 arch_prctl(ARCH_SET_FS, 0x55557cdde380) = 0 set_tid_address(0x55557cdde650) = 5018 set_robust_list(0x55557cdde660, 24) = 0 rseq(0x55557cddeca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2778234731", 4096) = 28 getrandom("\x96\xd9\x85\xee\x4f\xd4\xb2\x98", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55557cdded00 brk(0x55557cdffd00) = 0x55557cdffd00 brk(0x55557ce00000) = 0x55557ce00000 mprotect(0x7f73105d4000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557cdde650) = 5019 ./strace-static-x86_64: Process 5019 attached [pid 5019] set_robust_list(0x55557cdde660, 24) = 0 [pid 5019] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5019] setpgid(0, 0) = 0 [pid 5019] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5019] write(3, "1000", 4) = 4 [pid 5019] close(3) = 0 [pid 5019] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5019] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffde1e24d50) = 0 [pid 5019] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5019] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffde1e24d50) = 0 [pid 5019] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffde1e24d50) = 0 [pid 5019] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffde1e24d50) = 0 [pid 5019] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffde1e24d50) = 0 [pid 5019] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffde1e23d40) = 18 [pid 5019] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffde1e24d50) = 0 [ 182.761862][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [pid 5019] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffde1e24d50) = 0 [pid 5019] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffde1e24d50) = 0 [pid 5019] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffde1e23d40) = 18 [pid 5019] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffde1e24d50) = 0 [pid 5019] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffde1e23d40) = 9 [pid 5019] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffde1e24d50) = 0 [pid 5019] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffde1e23d40) = 54 [pid 5019] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffde1e24d50) = 0 [ 183.122060][ T24] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 183.133058][ T24] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 183.143998][ T24] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 183.154928][ T24] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [pid 5019] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffde1e23d40) = 4 [pid 5019] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffde1e24d50) = 0 [pid 5019] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffde1e23d40) = 8 [pid 5019] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffde1e24d50) = 0 [pid 5019] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffde1e23d40) = 8 [pid 5019] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffde1e24d50) = 0 [pid 5019] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffde1e23d40) = 8 [pid 5019] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffde1e24d50) = 0 [pid 5019] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 5019] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5019] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f73105da3ec) = -1 EINVAL (Invalid argument) [pid 5019] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f73105da3fc) = -1 EINVAL (Invalid argument) [pid 5019] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f73105da40c) = -1 EINVAL (Invalid argument) [ 183.322312][ T24] usb 1-1: New USB device found, idVendor=10b8, idProduct=0bb9, bcdDevice=ed.7f [ 183.331923][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.340241][ T24] usb 1-1: Product: syz [ 183.344843][ T24] usb 1-1: Manufacturer: syz [ 183.349734][ T24] usb 1-1: SerialNumber: syz [ 183.360274][ T24] usb 1-1: config 0 descriptor?? [pid 5019] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f73105da41c) = -1 EINVAL (Invalid argument) [pid 5019] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffde1e23d40) = 0 [ 183.430069][ T24] dvb-usb: found a 'DiBcom USB1.1 DVB-T reference design (MOD3000)' in warm state. [ 183.440055][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 183.479543][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 183.503870][ T24] dvbdev: DVB: registering new adapter (DiBcom USB1.1 DVB-T reference design (MOD3000)) [ 183.514721][ T24] usb 1-1: media controller created [ 183.570623][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [pid 5019] exit_group(0) = ? [pid 5019] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5019, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 [ 183.632026][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 183.638206][ T24] ===================================================== [ 183.645782][ T24] BUG: KMSAN: uninit-value in dib3000mb_attach+0x2d8/0x3c0 [ 183.653407][ T24] dib3000mb_attach+0x2d8/0x3c0 [ 183.658499][ T24] dibusb_dib3000mb_frontend_attach+0x155/0x2f0 [ 183.665250][ T24] dvb_usb_adapter_frontend_init+0xed/0x9a0 [ 183.671382][ T24] dvb_usb_device_init+0x25a8/0x3760 [ 183.677127][ T24] dibusb_probe+0x46/0x250 [ 183.682217][ T24] usb_probe_interface+0xd6f/0x1350 [ 183.687701][ T24] really_probe+0x4db/0xd90 [ 183.692621][ T24] __driver_probe_device+0x2ab/0x5d0 [ 183.698186][ T24] driver_probe_device+0x72/0x890 [ 183.703601][ T24] __device_attach_driver+0x568/0x9e0 [ 183.709251][ T24] bus_for_each_drv+0x403/0x620 [ 183.714536][ T24] __device_attach+0x3c1/0x650 [ 183.719556][ T24] device_initial_probe+0x32/0x40 [ 183.724949][ T24] bus_probe_device+0x3dc/0x5c0 [ 183.730028][ T24] device_add+0x1475/0x1c90 [ 183.734926][ T24] usb_set_configuration+0x31c9/0x38d0 [ 183.740666][ T24] usb_generic_driver_probe+0x109/0x2a0 [ 183.746688][ T24] usb_probe_device+0x3a7/0x690 [ 183.751953][ T24] really_probe+0x4db/0xd90 [ 183.756723][ T24] __driver_probe_device+0x2ab/0x5d0 [ 183.762461][ T24] driver_probe_device+0x72/0x890 [ 183.767752][ T24] __device_attach_driver+0x568/0x9e0 [ 183.773722][ T24] bus_for_each_drv+0x403/0x620 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5022 attached [pid 5022] set_robust_list(0x55557cdde660, 24) = 0 [pid 5022] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5022] setpgid(0, 0 [pid 5018] <... clone resumed>, child_tidptr=0x55557cdde650) = 5022 [pid 5022] <... setpgid resumed>) = 0 [pid 5022] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5022] write(3, "1000", 4) = 4 [pid 5022] close(3) = 0 [pid 5022] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5022] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffde1e24d50) = 0 [pid 5022] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5022] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffde1e24d50) = 0 [ 183.778793][ T24] __device_attach+0x3c1/0x650 [ 183.783928][ T24] device_initial_probe+0x32/0x40 [ 183.789214][ T24] bus_probe_device+0x3dc/0x5c0 [ 183.794513][ T24] device_add+0x1475/0x1c90 [ 183.799261][ T24] usb_new_device+0x15ff/0x2470 [ 183.804543][ T24] hub_event+0x4ff8/0x72d0 [ 183.809219][ T24] process_scheduled_works+0xa81/0x1bd0 [ 183.815223][ T24] worker_thread+0xea5/0x1560 [ 183.820144][ T24] kthread+0x3e2/0x540 [ 183.824659][ T24] ret_from_fork+0x6d/0x90 [ 183.829304][ T24] ret_from_fork_asm+0x1a/0x30 [ 183.834700][ T24] [ 183.837155][ T24] Local variable rb created at: [ 183.842315][ T24] dib3000_read_reg+0x86/0x4e0 [ 183.847321][ T24] dib3000mb_attach+0x123/0x3c0 [ 183.852646][ T24] [ 183.855100][ T24] CPU: 1 PID: 24 Comm: kworker/1:0 Not tainted 6.9.0-rc5-syzkaller-00042-ge88c4cfcb7b8 #0 [ 183.865732][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 183.876156][ T24] Workqueue: usb_hub_wq hub_event [ 183.881626][ T24] ===================================================== [ 183.888705][ T24] Disabling lock debugging due to kernel taint [ 183.895205][ T24] Kernel panic - not syncing: kmsan.panic set ... [ 183.901782][ T24] CPU: 1 PID: 24 Comm: kworker/1:0 Tainted: G B 6.9.0-rc5-syzkaller-00042-ge88c4cfcb7b8 #0 [ 183.913369][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 183.923545][ T24] Workqueue: usb_hub_wq hub_event [ 183.928760][ T24] Call Trace: [ 183.932153][ T24] [ 183.935227][ T24] dump_stack_lvl+0x216/0x2d0 [ 183.940178][ T24] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 183.946235][ T24] dump_stack+0x1e/0x30 [ 183.950571][ T24] panic+0x4e2/0xcd0 [ 183.954700][ T24] ? kmsan_get_metadata+0x101/0x1d0 [ 183.960153][ T24] kmsan_report+0x2d5/0x2e0 [ 183.964881][ T24] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 183.971411][ T24] ? __msan_warning+0x95/0x120 [ 183.976391][ T24] ? dib3000mb_attach+0x2d8/0x3c0 [ 183.981575][ T24] ? dibusb_dib3000mb_frontend_attach+0x155/0x2f0 [ 183.988219][ T24] ? dvb_usb_adapter_frontend_init+0xed/0x9a0 [ 183.994510][ T24] ? dvb_usb_device_init+0x25a8/0x3760 [ 184.000186][ T24] ? dibusb_probe+0x46/0x250 [ 184.005065][ T24] ? usb_probe_interface+0xd6f/0x1350 [ 184.010738][ T24] ? really_probe+0x4db/0xd90 [ 184.015681][ T24] ? __driver_probe_device+0x2ab/0x5d0 [ 184.021411][ T24] ? driver_probe_device+0x72/0x890 [ 184.026817][ T24] ? __device_attach_driver+0x568/0x9e0 [ 184.032565][ T24] ? bus_for_each_drv+0x403/0x620 [ 184.037821][ T24] ? __device_attach+0x3c1/0x650 [ 184.043038][ T24] ? device_initial_probe+0x32/0x40 [ 184.048505][ T24] ? bus_probe_device+0x3dc/0x5c0 [ 184.053767][ T24] ? device_add+0x1475/0x1c90 [ 184.058695][ T24] ? usb_set_configuration+0x31c9/0x38d0 [ 184.064617][ T24] ? usb_generic_driver_probe+0x109/0x2a0 [ 184.070546][ T24] ? usb_probe_device+0x3a7/0x690 [ 184.075854][ T24] ? really_probe+0x4db/0xd90 [ 184.080802][ T24] ? __driver_probe_device+0x2ab/0x5d0 [ 184.086539][ T24] ? driver_probe_device+0x72/0x890 [ 184.092015][ T24] ? __device_attach_driver+0x568/0x9e0 [ 184.097868][ T24] ? bus_for_each_drv+0x403/0x620 [ 184.103109][ T24] ? __device_attach+0x3c1/0x650 [ 184.108319][ T24] ? device_initial_probe+0x32/0x40 [ 184.113867][ T24] ? bus_probe_device+0x3dc/0x5c0 [ 184.119077][ T24] ? device_add+0x1475/0x1c90 [ 184.123939][ T24] ? usb_new_device+0x15ff/0x2470 [ 184.129146][ T24] ? hub_event+0x4ff8/0x72d0 [ 184.133927][ T24] ? process_scheduled_works+0xa81/0x1bd0 [ 184.139870][ T24] ? worker_thread+0xea5/0x1560 [ 184.144964][ T24] ? kthread+0x3e2/0x540 [ 184.149434][ T24] ? ret_from_fork+0x6d/0x90 [ 184.154177][ T24] ? ret_from_fork_asm+0x1a/0x30 [ 184.159286][ T24] ? rt_mutex_unlock+0x2a/0x50 [ 184.164224][ T24] ? __pfx_i2c_adapter_unlock_bus+0x10/0x10 [ 184.170292][ T24] ? i2c_adapter_unlock_bus+0x22/0x30 [ 184.175904][ T24] ? kmsan_get_metadata+0x146/0x1d0 [ 184.181331][ T24] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 184.187358][ T24] ? dib3000_read_reg+0x32b/0x4e0 [ 184.192629][ T24] ? kmsan_get_metadata+0x146/0x1d0 [ 184.198066][ T24] __msan_warning+0x95/0x120 [ 184.202911][ T24] dib3000mb_attach+0x2d8/0x3c0 [ 184.207923][ T24] ? __pfx_dib3000mb_attach+0x10/0x10 [ 184.213490][ T24] dibusb_dib3000mb_frontend_attach+0x155/0x2f0 [ 184.220057][ T24] ? __pfx_dibusb_dib3000mb_frontend_attach+0x10/0x10 [ 184.227073][ T24] dvb_usb_adapter_frontend_init+0xed/0x9a0 [ 184.233223][ T24] dvb_usb_device_init+0x25a8/0x3760 [ 184.238789][ T24] ? __pfx_dibusb_probe+0x10/0x10 [ 184.244099][ T24] dibusb_probe+0x46/0x250 [ 184.248786][ T24] ? __pfx_dibusb_probe+0x10/0x10 [ 184.254104][ T24] usb_probe_interface+0xd6f/0x1350 [ 184.259637][ T24] ? __pfx_usb_probe_interface+0x10/0x10 [ 184.265568][ T24] really_probe+0x4db/0xd90 [ 184.270279][ T24] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 184.276308][ T24] __driver_probe_device+0x2ab/0x5d0 [ 184.281876][ T24] driver_probe_device+0x72/0x890 [ 184.287187][ T24] ? kmsan_get_metadata+0x146/0x1d0 [ 184.292618][ T24] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 184.298659][ T24] __device_attach_driver+0x568/0x9e0 [ 184.304229][ T24] bus_for_each_drv+0x403/0x620 [ 184.309670][ T24] ? __pfx___device_attach_driver+0x10/0x10 [ 184.315875][ T24] __device_attach+0x3c1/0x650 [ 184.320925][ T24] device_initial_probe+0x32/0x40 [ 184.326181][ T24] bus_probe_device+0x3dc/0x5c0 [ 184.331187][ T24] device_add+0x1475/0x1c90 [ 184.335889][ T24] usb_set_configuration+0x31c9/0x38d0 [ 184.341573][ T24] ? usb_set_configuration+0x921/0x38d0 [ 184.347374][ T24] usb_generic_driver_probe+0x109/0x2a0 [ 184.353189][ T24] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 184.359217][ T24] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 184.365511][ T24] usb_probe_device+0x3a7/0x690 [ 184.370660][ T24] ? __pfx_usb_probe_device+0x10/0x10 [ 184.376294][ T24] really_probe+0x4db/0xd90 [ 184.381006][ T24] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 184.387035][ T24] __driver_probe_device+0x2ab/0x5d0 [ 184.392613][ T24] driver_probe_device+0x72/0x890 [ 184.397912][ T24] ? kmsan_get_metadata+0x146/0x1d0 [ 184.403344][ T24] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 184.409374][ T24] __device_attach_driver+0x568/0x9e0 [ 184.414977][ T24] bus_for_each_drv+0x403/0x620 [ 184.420063][ T24] ? __pfx___device_attach_driver+0x10/0x10 [ 184.426260][ T24] __device_attach+0x3c1/0x650 [ 184.431224][ T24] device_initial_probe+0x32/0x40 [ 184.436414][ T24] bus_probe_device+0x3dc/0x5c0 [ 184.441438][ T24] device_add+0x1475/0x1c90 [ 184.446176][ T24] usb_new_device+0x15ff/0x2470 [ 184.451315][ T24] hub_event+0x4ff8/0x72d0 [ 184.456061][ T24] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 184.462098][ T24] ? __pfx_hub_event+0x10/0x10 [ 184.467085][ T24] process_scheduled_works+0xa81/0x1bd0 [ 184.472907][ T24] worker_thread+0xea5/0x1560 [ 184.477865][ T24] kthread+0x3e2/0x540 [ 184.482182][ T24] ? __pfx_worker_thread+0x10/0x10 [ 184.487558][ T24] ? __pfx_kthread+0x10/0x10 [ 184.492405][ T24] ret_from_fork+0x6d/0x90 [ 184.497044][ T24] ? __pfx_kthread+0x10/0x10 [ 184.501856][ T24] ret_from_fork_asm+0x1a/0x30 [ 184.506901][ T24] [ 184.510414][ T24] Kernel Offset: disabled [ 184.514830][ T24] Rebooting in 86400 seconds..