microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 microsoft 0003:045E:07DA.0003: unsupported Resolution Multiplier 0 ===================================================== BUG: KMSAN: kernel-usb-infoleak-after-free in usb_submit_urb+0x5a1/0x2630 drivers/usb/core/urb.c:430 usb_submit_urb+0x5a1/0x2630 drivers/usb/core/urb.c:430 usb_start_wait_urb+0xc2/0x320 drivers/usb/core/message.c:59 usb_internal_control_msg drivers/usb/core/message.c:103 [inline] usb_control_msg+0x27c/0x5b0 drivers/usb/core/message.c:154 usbhid_raw_request+0x4ab/0x690 drivers/hid/usbhid/hid-core.c:-1 __hid_request+0x2c0/0x500 drivers/hid/hid-core.c:1989 hidinput_change_resolution_multipliers drivers/hid/hid-input.c:1950 [inline] hidinput_connect+0x3bf5/0x5cc0 drivers/hid/hid-input.c:2327 hid_connect+0x6b4/0x3440 drivers/hid/hid-core.c:2239 hid_hw_start+0xfc/0x1e0 drivers/hid/hid-core.c:2354 ms_probe+0x2e5/0x890 drivers/hid/hid-microsoft.c:391 __hid_device_probe drivers/hid/hid-core.c:2724 [inline] hid_device_probe+0x536/0xab0 drivers/hid/hid-core.c:2761 call_driver_probe drivers/base/dd.c:-1 [inline] really_probe+0x4d1/0xd90 drivers/base/dd.c:657 __driver_probe_device+0x268/0x380 drivers/base/dd.c:799 driver_probe_device+0x70/0x8b0 drivers/base/dd.c:829 __device_attach_driver+0x4ee/0x950 drivers/base/dd.c:957 bus_for_each_drv+0x3e3/0x680 drivers/base/bus.c:462 __device_attach+0x3c8/0x5c0 drivers/base/dd.c:1029 device_initial_probe+0x33/0x40 drivers/base/dd.c:1078 bus_probe_device+0x3ba/0x5e0 drivers/base/bus.c:537 device_add+0x12a9/0x1c10 drivers/base/core.c:3692 hid_add_device+0x5ed/0x7b0 drivers/hid/hid-core.c:2907 usbhid_probe+0x1fec/0x2660 drivers/hid/usbhid/hid-core.c:1435 usb_probe_interface+0xd04/0x1310 drivers/usb/core/driver.c:396 call_driver_probe drivers/base/dd.c:-1 [inline] really_probe+0x4d1/0xd90 drivers/base/dd.c:657 __driver_probe_device+0x268/0x380 drivers/base/dd.c:799 driver_probe_device+0x70/0x8b0 drivers/base/dd.c:829 __device_attach_driver+0x4ee/0x950 drivers/base/dd.c:957 bus_for_each_drv+0x3e3/0x680 drivers/base/bus.c:462 __device_attach+0x3c8/0x5c0 drivers/base/dd.c:1029 device_initial_probe+0x33/0x40 drivers/base/dd.c:1078 bus_probe_device+0x3ba/0x5e0 drivers/base/bus.c:537 device_add+0x12a9/0x1c10 drivers/base/core.c:3692 usb_set_configuration+0x3493/0x3b70 drivers/usb/core/message.c:2210 usb_generic_driver_probe+0xfc/0x290 drivers/usb/core/generic.c:250 usb_probe_device+0x38a/0x690 drivers/usb/core/driver.c:291 call_driver_probe drivers/base/dd.c:-1 [inline] really_probe+0x4d1/0xd90 drivers/base/dd.c:657 __driver_probe_device+0x268/0x380 drivers/base/dd.c:799 driver_probe_device+0x70/0x8b0 drivers/base/dd.c:829 __device_attach_driver+0x4ee/0x950 drivers/base/dd.c:957 bus_for_each_drv+0x3e3/0x680 drivers/base/bus.c:462 __device_attach+0x3c8/0x5c0 drivers/base/dd.c:1029 device_initial_probe+0x33/0x40 drivers/base/dd.c:1078 bus_probe_device+0x3ba/0x5e0 drivers/base/bus.c:537 device_add+0x12a9/0x1c10 drivers/base/core.c:3692 usb_new_device+0x104b/0x20c0 drivers/usb/core/hub.c:2694 hub_port_connect drivers/usb/core/hub.c:5566 [inline] hub_port_connect_change drivers/usb/core/hub.c:5706 [inline] port_event drivers/usb/core/hub.c:5866 [inline] hub_event+0x5588/0x7580 drivers/usb/core/hub.c:5948 process_one_work kernel/workqueue.c:3238 [inline] process_scheduled_works+0xb91/0x1d80 kernel/workqueue.c:3321 worker_thread+0xedf/0x1590 kernel/workqueue.c:3402 kthread+0xd59/0xf00 kernel/kthread.c:464 ret_from_fork+0x1e0/0x310 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Uninit was created at: free_pages_prepare mm/page_alloc.c:1173 [inline] __free_frozen_pages+0x179/0x1560 mm/page_alloc.c:2706 ___free_pages+0xa5/0x1b0 mm/page_alloc.c:5061 __free_pages+0x21/0x30 mm/page_alloc.c:5071 pagetable_free include/linux/mm.h:2879 [inline] pagetable_dtor_free include/linux/mm.h:2977 [inline] __tlb_remove_table include/asm-generic/tlb.h:220 [inline] __tlb_remove_table_free mm/mmu_gather.c:227 [inline] tlb_remove_table_rcu+0x35d/0x4c0 mm/mmu_gather.c:290 rcu_do_batch kernel/rcu/tree.c:2576 [inline] rcu_core+0xa5d/0x21f0 kernel/rcu/tree.c:2832 rcu_core_si+0x12/0x20 kernel/rcu/tree.c:2849 handle_softirqs+0x166/0x6e0 kernel/softirq.c:579 __do_softirq kernel/softirq.c:613 [inline] invoke_softirq kernel/softirq.c:453 [inline] __irq_exit_rcu+0x66/0x180 kernel/softirq.c:680 irq_exit_rcu+0x12/0x20 kernel/softirq.c:696 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1050 [inline] sysvec_apic_timer_interrupt+0x84/0x90 arch/x86/kernel/apic/apic.c:1050 asm_sysvec_apic_timer_interrupt+0x1f/0x30 arch/x86/include/asm/idtentry.h:702 Bytes 2039-6134 of 65535 are uninitialized Memory access of size 65535 starts at ffff88805ce88809 CPU: 0 UID: 0 PID: 5869 Comm: kworker/0:5 Not tainted 6.16.0-rc5-syzkaller-00038-g733923397fd9 #0 PREEMPT(none) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 Workqueue: usb_hub_wq hub_event =====================================================