Warning: Permanently added '10.128.0.142' (ED25519) to the list of known hosts.
executing program
[ 44.224797][ T29] audit: type=1400 audit(1744428994.204:80): avc: denied { execmem } for pid=2939 comm="syz-executor762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 44.246803][ T29] audit: type=1400 audit(1744428994.214:81): avc: denied { read write } for pid=2940 comm="syz-executor762" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 44.270685][ T29] audit: type=1400 audit(1744428994.214:82): avc: denied { open } for pid=2940 comm="syz-executor762" path="/dev/raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 44.294516][ T29] audit: type=1400 audit(1744428994.214:83): avc: denied { ioctl } for pid=2940 comm="syz-executor762" path="/dev/raw-gadget" dev="devtmpfs" ino=236 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 44.466895][ T38] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 44.619581][ T38] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 44.628960][ T38] usb 1-1: config 251 has an invalid interface number: 122 but max is 2
[ 44.637503][ T38] usb 1-1: config 251 has an invalid interface number: 159 but max is 2
[ 44.645959][ T38] usb 1-1: config 251 has an invalid interface number: 220 but max is 2
[ 44.654368][ T38] usb 1-1: config 251 has no interface number 0
[ 44.660672][ T38] usb 1-1: config 251 has no interface number 1
[ 44.666981][ T38] usb 1-1: config 251 has no interface number 2
[ 44.673303][ T38] usb 1-1: config 251 interface 220 altsetting 108 bulk endpoint 0xB has invalid maxpacket 16
[ 44.683649][ T38] usb 1-1: config 251 interface 220 altsetting 108 has an endpoint descriptor with address 0xE3, changing to 0x83
[ 44.695697][ T38] usb 1-1: config 251 interface 220 altsetting 108 endpoint 0x83 has an invalid bInterval 206, changing to 11
[ 44.707833][ T38] usb 1-1: config 251 interface 220 altsetting 108 endpoint 0x83 has invalid maxpacket 33811, setting to 1024
[ 44.719549][ T38] usb 1-1: config 251 interface 220 altsetting 108 has a duplicate endpoint with address 0xB, skipping
[ 44.730851][ T38] usb 1-1: config 251 interface 220 altsetting 108 has a duplicate endpoint with address 0xB, skipping
[ 44.742018][ T38] usb 1-1: config 251 interface 220 altsetting 108 has an invalid descriptor for endpoint zero, skipping
[ 44.753294][ T38] usb 1-1: config 251 interface 220 altsetting 108 has 5 endpoint descriptors, different from the interface descriptor's value: 4
[ 44.766801][ T38] usb 1-1: config 251 interface 122 has no altsetting 0
[ 44.773789][ T38] usb 1-1: config 251 interface 159 has no altsetting 0
[ 44.780851][ T38] usb 1-1: config 251 interface 220 has no altsetting 0
[ 44.790647][ T38] usb 1-1: string descriptor 0 read error: -22
[ 44.797164][ T38] usb 1-1: New USB device found, idVendor=2019, idProduct=1201, bcdDevice=e7.26
[ 44.806230][ T38] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
executing program
[ 45.029649][ T38] usb 1-1: reg 0xf0, usbctrl_vendorreq TimeOut! status:0xffffffb9 value=0x0 reqtype=0xc0
[ 45.039684][ T38] rtl8192cu: Chip version 0x10
[ 45.058946][ T38] usb 1-1: reg 0xa, usbctrl_vendorreq TimeOut! status:0xffffffb9 value=0x0 reqtype=0xc0
[ 45.069174][ T38] rtl_usb: No output end points found
[ 45.081584][ T38] usb 1-1: reg 0xf0, usbctrl_vendorreq TimeOut! status:0xffffffb9 value=0x0 reqtype=0xc0
[ 45.091506][ T38] rtl8192cu: Chip version 0x10
[ 45.099248][ T38] usb 1-1: reg 0xa, usbctrl_vendorreq TimeOut! status:0xffffffb9 value=0x0 reqtype=0xc0
[ 45.109231][ T38] rtl_usb: No output end points found
[ 45.121254][ T38] rtl8192cu: Chip version 0x10
[ 45.137020][ T38] ------------[ cut here ]------------
[ 45.142514][ T38] UBSAN: array-index-out-of-bounds in drivers/hid/usbhid/hid-core.c:1026:18
[ 45.151463][ T38] index 1 is out of range for type 'hid_class_descriptor [1]'
[ 45.158994][ T38] CPU: 1 UID: 0 PID: 38 Comm: kworker/1:1 Not tainted 6.15.0-rc1-syzkaller-00068-g169263214645 #0 PREEMPT(voluntary)
[ 45.159025][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 45.159041][ T38] Workqueue: usb_hub_wq hub_event
[ 45.159088][ T38] Call Trace:
[ 45.159097][ T38]
[ 45.159106][ T38] dump_stack_lvl+0x16c/0x1f0
[ 45.159143][ T38] __ubsan_handle_out_of_bounds+0x11c/0x160
[ 45.159178][ T38] usbhid_parse+0x98a/0xa60
[ 45.159211][ T38] ? __pfx_usbhid_parse+0x10/0x10
[ 45.159236][ T38] ? hid_match_id+0x258/0x2e0
[ 45.159277][ T38] hid_add_device+0x18a/0xa60
[ 45.159310][ T38] ? __pfx_hid_add_device+0x10/0x10
[ 45.159338][ T38] ? lockdep_init_map_type+0x5c/0x280
[ 45.159370][ T38] ? lockdep_init_map_type+0x5c/0x280
[ 45.159401][ T38] usbhid_probe+0xd38/0x13f0
[ 45.159433][ T38] usb_probe_interface+0x300/0x9c0
[ 45.159466][ T38] ? __pfx_usb_probe_interface+0x10/0x10
[ 45.159495][ T38] really_probe+0x23e/0xa90
[ 45.159531][ T38] __driver_probe_device+0x1de/0x440
[ 45.159566][ T38] driver_probe_device+0x4c/0x1b0
[ 45.159598][ T38] __device_attach_driver+0x1df/0x310
[ 45.159636][ T38] ? __pfx___device_attach_driver+0x10/0x10
[ 45.159667][ T38] bus_for_each_drv+0x156/0x1e0
[ 45.159693][ T38] ? __pfx_bus_for_each_drv+0x10/0x10
[ 45.159719][ T38] ? lockdep_hardirqs_on+0x7c/0x110
[ 45.159746][ T38] ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 45.159775][ T38] __device_attach+0x1e4/0x4b0
[ 45.159806][ T38] ? __pfx___device_attach+0x10/0x10
[ 45.159839][ T38] ? do_raw_spin_unlock+0x172/0x230
[ 45.159876][ T38] bus_probe_device+0x17f/0x1c0
[ 45.159906][ T38] device_add+0x1148/0x1a70
[ 45.159947][ T38] ? __pfx_device_add+0x10/0x10
[ 45.159983][ T38] ? usb_cache_string+0xf2/0x150
[ 45.160018][ T38] ? create_intf_ep_devs.isra.0+0x195/0x200
[ 45.160062][ T38] usb_set_configuration+0x1187/0x1e20
[ 45.160105][ T38] ? __pfx_usb_generic_driver_probe+0x10/0x10
[ 45.160141][ T38] usb_generic_driver_probe+0xb1/0x110
[ 45.160176][ T38] usb_probe_device+0xec/0x3e0
[ 45.160199][ T38] ? __pfx_usb_probe_device+0x10/0x10
[ 45.160224][ T38] really_probe+0x23e/0xa90
[ 45.160258][ T38] __driver_probe_device+0x1de/0x440
[ 45.160287][ T38] ? usb_driver_applicable+0x1c7/0x220
[ 45.160317][ T38] driver_probe_device+0x4c/0x1b0
[ 45.160350][ T38] __device_attach_driver+0x1df/0x310
[ 45.160383][ T38] ? __pfx___device_attach_driver+0x10/0x10
[ 45.160413][ T38] bus_for_each_drv+0x156/0x1e0
[ 45.160439][ T38] ? __pfx_bus_for_each_drv+0x10/0x10
[ 45.160464][ T38] ? lockdep_hardirqs_on+0x7c/0x110
[ 45.160490][ T38] ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 45.160518][ T38] __device_attach+0x1e4/0x4b0
[ 45.160549][ T38] ? __pfx___device_attach+0x10/0x10
[ 45.160582][ T38] ? do_raw_spin_unlock+0x172/0x230
[ 45.160623][ T38] bus_probe_device+0x17f/0x1c0
[ 45.160654][ T38] device_add+0x1148/0x1a70
[ 45.160692][ T38] ? __pfx_device_add+0x10/0x10
[ 45.160726][ T38] ? usb_detect_static_quirks+0x335/0x3e0
[ 45.160765][ T38] ? __usb_get_extra_descriptor+0x158/0x1c0
[ 45.160798][ T38] usb_new_device+0xd07/0x1a20
[ 45.160826][ T38] ? do_raw_spin_lock+0x12c/0x2b0
[ 45.160856][ T38] ? __pfx_usb_new_device+0x10/0x10
[ 45.160880][ T38] ? mark_held_locks+0x49/0x80
[ 45.160910][ T38] hub_event+0x2f85/0x5030
[ 45.160961][ T38] ? __pfx_hub_event+0x10/0x10
[ 45.160982][ T38] ? debug_object_deactivate+0x1ec/0x3a0
[ 45.161023][ T38] ? rcu_is_watching+0x12/0xc0
[ 45.161062][ T38] process_one_work+0x9cc/0x1b70
[ 45.161105][ T38] ? __pfx_hcd_resume_work+0x10/0x10
[ 45.161132][ T38] ? __pfx_process_one_work+0x10/0x10
[ 45.161173][ T38] ? assign_work+0x1a0/0x250
[ 45.161206][ T38] worker_thread+0x6c8/0xf10
[ 45.161248][ T38] ? __kthread_parkme+0x19e/0x250
[ 45.161275][ T38] ? __pfx_worker_thread+0x10/0x10
[ 45.161307][ T38] kthread+0x3c2/0x780
[ 45.161338][ T38] ? __pfx_kthread+0x10/0x10
[ 45.161365][ T38] ? __pfx_kthread+0x10/0x10
[ 45.161393][ T38] ? __pfx_kthread+0x10/0x10
[ 45.161420][ T38] ? __pfx_kthread+0x10/0x10
[ 45.161448][ T38] ? rcu_is_watching+0x12/0xc0
[ 45.161481][ T38] ? __pfx_kthread+0x10/0x10
[ 45.161511][ T38] ret_from_fork+0x45/0x80
[ 45.161540][ T38] ? __pfx_kthread+0x10/0x10
[ 45.161569][ T38] ret_from_fork_asm+0x1a/0x30
[ 45.161609][ T38]
[ 45.161620][ T38] ---[ end trace ]---
[ 45.592397][ T38] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[ 45.599635][ T38] CPU: 1 UID: 0 PID: 38 Comm: kworker/1:1 Not tainted 6.15.0-rc1-syzkaller-00068-g169263214645 #0 PREEMPT(voluntary)
[ 45.611981][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 45.622146][ T38] Workqueue: usb_hub_wq hub_event
[ 45.627198][ T38] Call Trace:
[ 45.630488][ T38]
[ 45.633426][ T38] dump_stack_lvl+0x3d/0x1f0
[ 45.638048][ T38] panic+0x71c/0x800
[ 45.641990][ T38] ? __pfx_panic+0x10/0x10
[ 45.646432][ T38] ? __pfx__printk+0x10/0x10
[ 45.651067][ T38] ? check_panic_on_warn+0x1f/0xb0
[ 45.656199][ T38] check_panic_on_warn+0xab/0xb0
[ 45.661161][ T38] __ubsan_handle_out_of_bounds+0x143/0x160
[ 45.667082][ T38] usbhid_parse+0x98a/0xa60
[ 45.671616][ T38] ? __pfx_usbhid_parse+0x10/0x10
[ 45.676681][ T38] ? hid_match_id+0x258/0x2e0
[ 45.681412][ T38] hid_add_device+0x18a/0xa60
[ 45.686108][ T38] ? __pfx_hid_add_device+0x10/0x10
[ 45.691343][ T38] ? lockdep_init_map_type+0x5c/0x280
[ 45.696761][ T38] ? lockdep_init_map_type+0x5c/0x280
[ 45.702181][ T38] usbhid_probe+0xd38/0x13f0
[ 45.706807][ T38] usb_probe_interface+0x300/0x9c0
[ 45.711979][ T38] ? __pfx_usb_probe_interface+0x10/0x10
[ 45.717772][ T38] really_probe+0x23e/0xa90
[ 45.722392][ T38] __driver_probe_device+0x1de/0x440
[ 45.727712][ T38] driver_probe_device+0x4c/0x1b0
[ 45.732780][ T38] __device_attach_driver+0x1df/0x310
[ 45.738186][ T38] ? __pfx___device_attach_driver+0x10/0x10
[ 45.744104][ T38] bus_for_each_drv+0x156/0x1e0
[ 45.748974][ T38] ? __pfx_bus_for_each_drv+0x10/0x10
[ 45.754365][ T38] ? lockdep_hardirqs_on+0x7c/0x110
[ 45.759624][ T38] ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 45.765448][ T38] __device_attach+0x1e4/0x4b0
[ 45.770247][ T38] ? __pfx___device_attach+0x10/0x10
[ 45.775557][ T38] ? do_raw_spin_unlock+0x172/0x230
[ 45.780806][ T38] bus_probe_device+0x17f/0x1c0
[ 45.785681][ T38] device_add+0x1148/0x1a70
[ 45.790214][ T38] ? __pfx_device_add+0x10/0x10
[ 45.795091][ T38] ? usb_cache_string+0xf2/0x150
[ 45.800054][ T38] ? create_intf_ep_devs.isra.0+0x195/0x200
[ 45.805980][ T38] usb_set_configuration+0x1187/0x1e20
[ 45.811471][ T38] ? __pfx_usb_generic_driver_probe+0x10/0x10
[ 45.817563][ T38] usb_generic_driver_probe+0xb1/0x110
[ 45.823053][ T38] usb_probe_device+0xec/0x3e0
[ 45.827834][ T38] ? __pfx_usb_probe_device+0x10/0x10
[ 45.833224][ T38] really_probe+0x23e/0xa90
[ 45.837756][ T38] __driver_probe_device+0x1de/0x440
[ 45.843061][ T38] ? usb_driver_applicable+0x1c7/0x220
[ 45.848540][ T38] driver_probe_device+0x4c/0x1b0
[ 45.853596][ T38] __device_attach_driver+0x1df/0x310
[ 45.859025][ T38] ? __pfx___device_attach_driver+0x10/0x10
[ 45.864941][ T38] bus_for_each_drv+0x156/0x1e0
[ 45.869809][ T38] ? __pfx_bus_for_each_drv+0x10/0x10
[ 45.875207][ T38] ? lockdep_hardirqs_on+0x7c/0x110
[ 45.880457][ T38] ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 45.886305][ T38] __device_attach+0x1e4/0x4b0
[ 45.891116][ T38] ? __pfx___device_attach+0x10/0x10
[ 45.896434][ T38] ? do_raw_spin_unlock+0x172/0x230
[ 45.901661][ T38] bus_probe_device+0x17f/0x1c0
[ 45.906536][ T38] device_add+0x1148/0x1a70
[ 45.911077][ T38] ? __pfx_device_add+0x10/0x10
[ 45.915955][ T38] ? usb_detect_static_quirks+0x335/0x3e0
[ 45.921742][ T38] ? __usb_get_extra_descriptor+0x158/0x1c0
[ 45.927693][ T38] usb_new_device+0xd07/0x1a20
[ 45.932477][ T38] ? do_raw_spin_lock+0x12c/0x2b0
[ 45.937617][ T38] ? __pfx_usb_new_device+0x10/0x10
[ 45.942831][ T38] ? mark_held_locks+0x49/0x80
[ 45.947663][ T38] hub_event+0x2f85/0x5030
[ 45.952202][ T38] ? __pfx_hub_event+0x10/0x10
[ 45.957516][ T38] ? debug_object_deactivate+0x1ec/0x3a0
[ 45.963210][ T38] ? rcu_is_watching+0x12/0xc0
[ 45.968046][ T38] process_one_work+0x9cc/0x1b70
[ 45.973034][ T38] ? __pfx_hcd_resume_work+0x10/0x10
[ 45.978343][ T38] ? __pfx_process_one_work+0x10/0x10
[ 45.983762][ T38] ? assign_work+0x1a0/0x250
[ 45.988382][ T38] worker_thread+0x6c8/0xf10
[ 45.993009][ T38] ? __kthread_parkme+0x19e/0x250
[ 45.998089][ T38] ? __pfx_worker_thread+0x10/0x10
[ 46.003245][ T38] kthread+0x3c2/0x780
[ 46.007340][ T38] ? __pfx_kthread+0x10/0x10
[ 46.011947][ T38] ? __pfx_kthread+0x10/0x10
[ 46.016587][ T38] ? __pfx_kthread+0x10/0x10
[ 46.021206][ T38] ? __pfx_kthread+0x10/0x10
[ 46.025824][ T38] ? rcu_is_watching+0x12/0xc0
[ 46.030790][ T38] ? __pfx_kthread+0x10/0x10
[ 46.035398][ T38] ret_from_fork+0x45/0x80
[ 46.039833][ T38] ? __pfx_kthread+0x10/0x10
[ 46.044443][ T38] ret_from_fork_asm+0x1a/0x30
[ 46.049233][ T38]
[ 46.052620][ T38] Kernel Offset: disabled
[ 46.056987][ T38] Rebooting in 86400 seconds..