Warning: Permanently added '10.128.0.10' (ED25519) to the list of known hosts.
2025/08/27 14:58:01 parsed 1 programs
[ 50.572022][ T36] audit: type=1400 audit(1756306683.420:106): avc: denied { unlink } for pid=406 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 50.644345][ T406] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 51.513825][ T36] audit: type=1401 audit(1756306684.360:107): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768"
[ 51.695561][ T36] audit: type=1400 audit(1756306684.540:108): avc: denied { create } for pid=421 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 52.170060][ T447] bridge0: port 1(bridge_slave_0) entered blocking state
[ 52.177314][ T447] bridge0: port 1(bridge_slave_0) entered disabled state
[ 52.184616][ T447] bridge_slave_0: entered allmulticast mode
[ 52.190898][ T447] bridge_slave_0: entered promiscuous mode
[ 52.197333][ T447] bridge0: port 2(bridge_slave_1) entered blocking state
[ 52.204597][ T447] bridge0: port 2(bridge_slave_1) entered disabled state
[ 52.211725][ T447] bridge_slave_1: entered allmulticast mode
[ 52.218040][ T447] bridge_slave_1: entered promiscuous mode
[ 52.276391][ T447] bridge0: port 2(bridge_slave_1) entered blocking state
[ 52.283666][ T447] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 52.291103][ T447] bridge0: port 1(bridge_slave_0) entered blocking state
[ 52.298250][ T447] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 52.320605][ T45] bridge0: port 1(bridge_slave_0) entered disabled state
[ 52.328679][ T45] bridge0: port 2(bridge_slave_1) entered disabled state
[ 52.338518][ T308] bridge0: port 1(bridge_slave_0) entered blocking state
[ 52.345656][ T308] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 52.354780][ T308] bridge0: port 2(bridge_slave_1) entered blocking state
[ 52.362079][ T308] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 52.388228][ T447] veth0_vlan: entered promiscuous mode
[ 52.399791][ T447] veth1_macvtap: entered promiscuous mode
[ 52.454972][ T308] bridge_slave_1: left allmulticast mode
[ 52.460665][ T308] bridge_slave_1: left promiscuous mode
[ 52.466346][ T308] bridge0: port 2(bridge_slave_1) entered disabled state
[ 52.474785][ T308] bridge_slave_0: left allmulticast mode
[ 52.480564][ T308] bridge_slave_0: left promiscuous mode
[ 52.486401][ T308] bridge0: port 1(bridge_slave_0) entered disabled state
[ 52.565358][ T308] veth1_macvtap: left promiscuous mode
[ 52.570966][ T308] veth0_vlan: left promiscuous mode
2025/08/27 14:58:05 executed programs: 0
[ 52.905400][ T475] bridge0: port 1(bridge_slave_0) entered blocking state
[ 52.912605][ T475] bridge0: port 1(bridge_slave_0) entered disabled state
[ 52.920105][ T475] bridge_slave_0: entered allmulticast mode
[ 52.926579][ T475] bridge_slave_0: entered promiscuous mode
[ 52.933139][ T475] bridge0: port 2(bridge_slave_1) entered blocking state
[ 52.941819][ T475] bridge0: port 2(bridge_slave_1) entered disabled state
[ 52.949003][ T475] bridge_slave_1: entered allmulticast mode
[ 52.955476][ T475] bridge_slave_1: entered promiscuous mode
[ 53.026993][ T475] bridge0: port 2(bridge_slave_1) entered blocking state
[ 53.034110][ T475] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 53.041646][ T475] bridge0: port 1(bridge_slave_0) entered blocking state
[ 53.048708][ T475] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 53.073860][ T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 53.081510][ T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 53.090652][ T45] bridge0: port 1(bridge_slave_0) entered blocking state
[ 53.097934][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 53.107294][ T45] bridge0: port 2(bridge_slave_1) entered blocking state
[ 53.114402][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 53.143521][ T475] veth0_vlan: entered promiscuous mode
[ 53.155047][ T475] veth1_macvtap: entered promiscuous mode
[ 53.188919][ T36] audit: type=1400 audit(1756306686.030:109): avc: denied { read write } for pid=485 comm="syz.2.17" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 53.213622][ T36] audit: type=1400 audit(1756306686.030:110): avc: denied { open } for pid=485 comm="syz.2.17" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 53.237192][ T36] audit: type=1400 audit(1756306686.030:111): avc: denied { ioctl } for pid=485 comm="syz.2.17" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 53.461260][ T65] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[ 53.611187][ T65] usb 3-1: Using ep0 maxpacket: 8
[ 53.618338][ T65] usb 3-1: config 0 has an invalid interface number: 200 but max is 0
[ 53.626740][ T65] usb 3-1: config 0 has no interface number 0
[ 53.633177][ T65] usb 3-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xED, changing to 0x8D
[ 53.645007][ T65] usb 3-1: config 0 interface 200 altsetting 2 bulk endpoint 0x8D has invalid maxpacket 16
[ 53.655500][ T65] usb 3-1: config 0 interface 200 has no altsetting 0
[ 53.663835][ T65] usb 3-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39
[ 53.672983][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 53.681166][ T65] usb 3-1: Product: syz
[ 53.685438][ T65] usb 3-1: Manufacturer: syz
[ 53.690035][ T65] usb 3-1: SerialNumber: syz
[ 53.696220][ T65] usb 3-1: config 0 descriptor??
[ 53.701659][ T486] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 53.913403][ T65] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.200/input/input4
[ 53.925346][ T95] ------------[ cut here ]------------
[ 53.930934][ T95] usb 3-1: BOGUS urb xfer, pipe 1 != type 3
[ 53.937929][ T65] usb 3-1: USB disconnect, device number 2
[ 53.939812][ T95] WARNING: CPU: 0 PID: 95 at drivers/usb/core/urb.c:504 usb_submit_urb+0xca8/0x1800
[ 53.953449][ T95] Modules linked in:
[ 53.957411][ T95] CPU: 0 UID: 0 PID: 95 Comm: acpid Not tainted syzkaller #0 b2a579c784e48b752010fd0fc74ab2c2cbe35779
[ 53.968454][ T95] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 53.978582][ T95] RIP: 0010:usb_submit_urb+0xca8/0x1800
[ 53.984208][ T95] Code: 4c 89 e8 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 d5 08 00 00 45 8b 45 00 48 c7 c7 c0 4f 47 86 4c 89 fe 4c 89 e2 e8 d8 cc 7b fd <0f> 0b 44 8b 6d ac 44 0f b6 75 98 4c 89 f7 48 c7 c6 40 40 7d 87 e8
[ 54.004167][ T95] RSP: 0018:ffffc900007ef638 EFLAGS: 00010246
[ 54.010297][ T95] RAX: 973f76d8b636bf00 RBX: ffff88811aee5400 RCX: ffff88810b795f00
[ 54.018514][ T95] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[ 54.026539][ T95] RBP: ffffc900007ef6b8 R08: 0000000000000003 R09: 0000000000000004
[ 54.034559][ T95] R10: dffffc0000000000 R11: fffffbfff0e5ef10 R12: ffff8881181e8220
[ 54.042603][ T95] R13: ffffffff86474ee8 R14: dffffc0000000000 R15: ffffffff8647ac00
[ 54.050686][ T95] FS: 00007fac05995740(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 54.059660][ T95] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 54.066498][ T95] CR2: 00007f2e0aa651b0 CR3: 000000010bb92000 CR4: 00000000003526b0
[ 54.074627][ T95] Call Trace:
[ 54.078051][ T95]
[ 54.081120][ T95] hanwang_open+0xa3/0xd0
[ 54.085506][ T95] input_open_device+0x183/0x310
[ 54.090465][ T95] evdev_open+0x492/0x650
[ 54.095145][ T95] chrdev_open+0x4db/0x5f0
[ 54.099677][ T95] ? __cfi_chrdev_open+0x10/0x10
[ 54.104670][ T95] ? bpf_lsm_file_open+0xd/0x20
[ 54.109553][ T95] ? __cfi_chrdev_open+0x10/0x10
[ 54.114621][ T95] do_dentry_open+0x97b/0x1510
[ 54.119429][ T95] vfs_open+0x86/0x230
[ 54.123640][ T95] ? __cfi_vfs_open+0x10/0x10
[ 54.128435][ T95] ? may_open+0x352/0x430
[ 54.132852][ T95] path_openat+0x2b6c/0x34b0
[ 54.137490][ T95] ? kasan_save_alloc_info+0x40/0x50
[ 54.142845][ T95] ? getname_flags+0xc6/0x710
[ 54.147598][ T95] ? do_sys_openat2+0xcb/0x1c0
[ 54.152455][ T95] ? __x64_sys_openat+0x13a/0x170
[ 54.157507][ T95] ? do_filp_open+0x3e0/0x3e0
[ 54.162246][ T95] do_filp_open+0x1c6/0x3e0
[ 54.166798][ T95] ? __cfi_do_filp_open+0x10/0x10
[ 54.171880][ T95] ? alloc_fd+0x4e7/0x5a0
[ 54.176310][ T95] do_sys_openat2+0x12c/0x1c0
[ 54.181128][ T95] ? do_sys_open+0x100/0x100
[ 54.185764][ T95] ? ksys_read+0x1de/0x250
[ 54.190189][ T95] ? __cfi_ksys_read+0x10/0x10
[ 54.195059][ T95] __x64_sys_openat+0x13a/0x170
[ 54.199956][ T95] x64_sys_call+0xe69/0x2ee0
[ 54.204798][ T95] do_syscall_64+0x58/0xf0
[ 54.209250][ T95] ? clear_bhb_loop+0x50/0xa0
[ 54.214006][ T95] entry_SYSCALL_64_after_hwframe+0x76/0x7e
[ 54.220088][ T95] RIP: 0033:0x7fac05a1f407
[ 54.224591][ T95] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 54.245875][ T95] RSP: 002b:00007fff00768db0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[ 54.254627][ T95] RAX: ffffffffffffffda RBX: 00007fac05995740 RCX: 00007fac05a1f407
[ 54.262686][ T95] RDX: 0000000000080800 RSI: 00007fff00768fc0 RDI: ffffffffffffff9c
[ 54.270697][ T95] RBP: 00007fff00768fc0 R08: 0000000000000000 R09: 0000000000000000
[ 54.279065][ T95] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000040
[ 54.287316][ T95] R13: 00007fff007690c0 R14: 00005611c64bf7fe R15: 00007fff007690c0
[ 54.295362][ T95]
[ 54.298414][ T95] ---[ end trace 0000000000000000 ]---
[ 54.711287][ T65] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[ 54.861159][ T65] usb 3-1: Using ep0 maxpacket: 8
[ 54.867503][ T65] usb 3-1: config 0 has an invalid interface number: 200 but max is 0
[ 54.876008][ T65] usb 3-1: config 0 has no interface number 0
[ 54.882419][ T65] usb 3-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xED, changing to 0x8D
[ 54.894373][ T65] usb 3-1: config 0 interface 200 altsetting 2 bulk endpoint 0x8D has invalid maxpacket 16
[ 54.904438][ T65] usb 3-1: config 0 interface 200 has no altsetting 0
[ 54.913051][ T65] usb 3-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39
[ 54.922532][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 54.930810][ T65] usb 3-1: Product: syz
[ 54.935043][ T65] usb 3-1: Manufacturer: syz
[ 54.939653][ T65] usb 3-1: SerialNumber: syz
[ 54.945016][ T65] usb 3-1: config 0 descriptor??
[ 54.950381][ T491] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 55.160700][ T65] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.200/input/input5
[ 55.172293][ T95] ------------[ cut here ]------------
[ 55.178029][ T95] usb 3-1: BOGUS urb xfer, pipe 1 != type 3
[ 55.184527][ T95] WARNING: CPU: 0 PID: 95 at drivers/usb/core/urb.c:504 usb_submit_urb+0xca8/0x1800
[ 55.186571][ T65] usb 3-1: USB disconnect, device number 3
[ 55.194015][ T95] Modules linked in:
[ 55.203890][ T95] CPU: 0 UID: 0 PID: 95 Comm: acpid Tainted: G W syzkaller #0 b2a579c784e48b752010fd0fc74ab2c2cbe35779
[ 55.216447][ T95] Tainted: [W]=WARN
[ 55.220296][ T95] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 55.230432][ T95] RIP: 0010:usb_submit_urb+0xca8/0x1800
[ 55.236346][ T95] Code: 4c 89 e8 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 d5 08 00 00 45 8b 45 00 48 c7 c7 c0 4f 47 86 4c 89 fe 4c 89 e2 e8 d8 cc 7b fd <0f> 0b 44 8b 6d ac 44 0f b6 75 98 4c 89 f7 48 c7 c6 40 40 7d 87 e8
[ 55.256126][ T95] RSP: 0018:ffffc900007ef638 EFLAGS: 00010246
[ 55.262281][ T95] RAX: 973f76d8b636bf00 RBX: ffff88811d030c00 RCX: ffff88810b795f00
[ 55.270374][ T95] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[ 55.278404][ T95] RBP: ffffc900007ef6b8 R08: 0000000000000003 R09: 0000000000000004
[ 55.286516][ T95] R10: dffffc0000000000 R11: fffffbfff0e5ef10 R12: ffff888118ccf360
[ 55.294639][ T95] R13: ffffffff86474ee8 R14: dffffc0000000000 R15: ffffffff8647ac00
[ 55.302702][ T95] FS: 00007fac05995740(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 55.312195][ T95] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 55.319114][ T95] CR2: 0000557f2e045070 CR3: 000000010bb92000 CR4: 00000000003526b0
[ 55.327246][ T95] Call Trace:
[ 55.330548][ T95]
[ 55.333530][ T95] hanwang_open+0xa3/0xd0
[ 55.337975][ T95] input_open_device+0x183/0x310
[ 55.343067][ T95] evdev_open+0x492/0x650
[ 55.347529][ T95] chrdev_open+0x4db/0x5f0
[ 55.352037][ T95] ? __cfi_chrdev_open+0x10/0x10
[ 55.357198][ T95] ? bpf_lsm_file_open+0xd/0x20
[ 55.362247][ T95] ? __cfi_chrdev_open+0x10/0x10
[ 55.367320][ T95] do_dentry_open+0x97b/0x1510
[ 55.372379][ T95] vfs_open+0x86/0x230
[ 55.376491][ T95] ? __cfi_vfs_open+0x10/0x10
[ 55.381255][ T95] ? may_open+0x352/0x430
[ 55.385731][ T95] path_openat+0x2b6c/0x34b0
[ 55.390349][ T95] ? kasan_save_alloc_info+0x40/0x50
[ 55.395853][ T95] ? getname_flags+0xc6/0x710
[ 55.400562][ T95] ? do_sys_openat2+0xcb/0x1c0
[ 55.405485][ T95] ? __x64_sys_openat+0x13a/0x170
[ 55.410550][ T95] ? do_filp_open+0x3e0/0x3e0
[ 55.415382][ T95] do_filp_open+0x1c6/0x3e0
[ 55.419913][ T95] ? __cfi_do_filp_open+0x10/0x10
[ 55.425031][ T95] ? alloc_fd+0x4e7/0x5a0
[ 55.429399][ T95] do_sys_openat2+0x12c/0x1c0
[ 55.434264][ T95] ? do_sys_open+0x100/0x100
[ 55.438893][ T95] ? ksys_read+0x1de/0x250
[ 55.443396][ T95] ? __cfi_ksys_read+0x10/0x10
[ 55.448192][ T95] __x64_sys_openat+0x13a/0x170
[ 55.453543][ T95] x64_sys_call+0xe69/0x2ee0
[ 55.458202][ T95] do_syscall_64+0x58/0xf0
[ 55.462673][ T95] ? clear_bhb_loop+0x50/0xa0
[ 55.467389][ T95] entry_SYSCALL_64_after_hwframe+0x76/0x7e
[ 55.473344][ T95] RIP: 0033:0x7fac05a1f407
[ 55.477789][ T95] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 55.497455][ T95] RSP: 002b:00007fff00768db0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[ 55.506119][ T95] RAX: ffffffffffffffda RBX: 00007fac05995740 RCX: 00007fac05a1f407
[ 55.514364][ T95] RDX: 0000000000080800 RSI: 00007fff00768fc0 RDI: ffffffffffffff9c
[ 55.522479][ T95] RBP: 00007fff00768fc0 R08: 0000000000000000 R09: 0000000000000000
[ 55.530473][ T95] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000040
[ 55.538514][ T95] R13: 00007fff007690c0 R14: 00005611c64bf7fe R15: 00007fff007690c0
[ 55.546579][ T95]
[ 55.549684][ T95] ---[ end trace 0000000000000000 ]---
[ 55.971155][ T65] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[ 56.121142][ T65] usb 3-1: Using ep0 maxpacket: 8
[ 56.127462][ T65] usb 3-1: config 0 has an invalid interface number: 200 but max is 0
[ 56.135730][ T65] usb 3-1: config 0 has no interface number 0
[ 56.141885][ T65] usb 3-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xED, changing to 0x8D
[ 56.153677][ T65] usb 3-1: config 0 interface 200 altsetting 2 bulk endpoint 0x8D has invalid maxpacket 16
[ 56.163746][ T65] usb 3-1: config 0 interface 200 has no altsetting 0
[ 56.172151][ T65] usb 3-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39
[ 56.181393][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 56.189383][ T65] usb 3-1: Product: syz
[ 56.193682][ T65] usb 3-1: Manufacturer: syz
[ 56.198294][ T65] usb 3-1: SerialNumber: syz
[ 56.203695][ T65] usb 3-1: config 0 descriptor??
[ 56.209154][ T495] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 56.420088][ T65] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.200/input/input6
[ 56.431995][ T95] ------------[ cut here ]------------
[ 56.437599][ T95] usb 3-1: BOGUS urb xfer, pipe 1 != type 3
[ 56.444490][ T95] WARNING: CPU: 0 PID: 95 at drivers/usb/core/urb.c:504 usb_submit_urb+0xca8/0x1800
[ 56.444826][ T65] usb 3-1: USB disconnect, device number 4
[ 56.454076][ T95] Modules linked in:
[ 56.464134][ T95] CPU: 0 UID: 0 PID: 95 Comm: acpid Tainted: G W syzkaller #0 b2a579c784e48b752010fd0fc74ab2c2cbe35779
[ 56.476702][ T95] Tainted: [W]=WARN
[ 56.480618][ T95] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 56.491073][ T95] RIP: 0010:usb_submit_urb+0xca8/0x1800
[ 56.496756][ T95] Code: 4c 89 e8 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 d5 08 00 00 45 8b 45 00 48 c7 c7 c0 4f 47 86 4c 89 fe 4c 89 e2 e8 d8 cc 7b fd <0f> 0b 44 8b 6d ac 44 0f b6 75 98 4c 89 f7 48 c7 c6 40 40 7d 87 e8
[ 56.516718][ T95] RSP: 0018:ffffc900007ef638 EFLAGS: 00010246
[ 56.523066][ T95] RAX: 973f76d8b636bf00 RBX: ffff88811e1e2600 RCX: ffff88810b795f00
[ 56.531113][ T95] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[ 56.539117][ T95] RBP: ffffc900007ef6b8 R08: 0000000000000003 R09: 0000000000000004
[ 56.547176][ T95] R10: dffffc0000000000 R11: fffffbfff0e5ef10 R12: ffff88811d591ac0
[ 56.555593][ T95] R13: ffffffff86474ee8 R14: dffffc0000000000 R15: ffffffff8647ac00
[ 56.563627][ T95] FS: 00007fac05995740(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 56.572805][ T95] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 56.579519][ T95] CR2: 0000001b32663fff CR3: 000000010bb92000 CR4: 00000000003526b0
[ 56.587839][ T95] Call Trace:
[ 56.591212][ T95]
[ 56.594183][ T95] hanwang_open+0xa3/0xd0
[ 56.598529][ T95] input_open_device+0x183/0x310
[ 56.603596][ T95] evdev_open+0x492/0x650
[ 56.608074][ T95] chrdev_open+0x4db/0x5f0
[ 56.613087][ T95] ? __cfi_chrdev_open+0x10/0x10
[ 56.618075][ T95] ? bpf_lsm_file_open+0xd/0x20
[ 56.623191][ T95] ? __cfi_chrdev_open+0x10/0x10
[ 56.628221][ T95] do_dentry_open+0x97b/0x1510
[ 56.633430][ T95] vfs_open+0x86/0x230
[ 56.637562][ T95] ? __cfi_vfs_open+0x10/0x10
[ 56.642306][ T95] ? may_open+0x352/0x430
[ 56.646881][ T95] path_openat+0x2b6c/0x34b0
[ 56.651660][ T95] ? kasan_save_alloc_info+0x40/0x50
[ 56.657014][ T95] ? getname_flags+0xc6/0x710
[ 56.661772][ T95] ? do_sys_openat2+0xcb/0x1c0
[ 56.666624][ T95] ? __x64_sys_openat+0x13a/0x170
[ 56.671720][ T95] ? do_filp_open+0x3e0/0x3e0
[ 56.676515][ T95] do_filp_open+0x1c6/0x3e0
[ 56.681114][ T95] ? __cfi_do_filp_open+0x10/0x10
[ 56.686350][ T95] ? alloc_fd+0x4e7/0x5a0
[ 56.690700][ T95] do_sys_openat2+0x12c/0x1c0
[ 56.695450][ T95] ? do_sys_open+0x100/0x100
[ 56.700175][ T95] ? ksys_read+0x1de/0x250
[ 56.704892][ T95] ? __cfi_ksys_read+0x10/0x10
[ 56.709979][ T95] __x64_sys_openat+0x13a/0x170
[ 56.715117][ T95] x64_sys_call+0xe69/0x2ee0
[ 56.719755][ T95] do_syscall_64+0x58/0xf0
[ 56.724294][ T95] ? clear_bhb_loop+0x50/0xa0
[ 56.729093][ T95] entry_SYSCALL_64_after_hwframe+0x76/0x7e
[ 56.735174][ T95] RIP: 0033:0x7fac05a1f407
[ 56.739725][ T95] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 56.759479][ T95] RSP: 002b:00007fff00768db0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[ 56.768045][ T95] RAX: ffffffffffffffda RBX: 00007fac05995740 RCX: 00007fac05a1f407
[ 56.776159][ T95] RDX: 0000000000080800 RSI: 00007fff00768fc0 RDI: ffffffffffffff9c
[ 56.784199][ T95] RBP: 00007fff00768fc0 R08: 0000000000000000 R09: 0000000000000000
[ 56.792374][ T95] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000040
[ 56.800546][ T95] R13: 00007fff007690c0 R14: 00005611c64bf7fe R15: 00007fff007690c0
[ 56.808565][ T95]
[ 56.811649][ T95] ---[ end trace 0000000000000000 ]---
[ 57.221127][ T65] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[ 57.371162][ T65] usb 3-1: Using ep0 maxpacket: 8
[ 57.377377][ T65] usb 3-1: config 0 has an invalid interface number: 200 but max is 0
[ 57.386105][ T65] usb 3-1: config 0 has no interface number 0
[ 57.392275][ T65] usb 3-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xED, changing to 0x8D
[ 57.404148][ T65] usb 3-1: config 0 interface 200 altsetting 2 bulk endpoint 0x8D has invalid maxpacket 16
[ 57.414443][ T65] usb 3-1: config 0 interface 200 has no altsetting 0
[ 57.422807][ T65] usb 3-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39
[ 57.432110][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 57.440221][ T65] usb 3-1: Product: syz
[ 57.445314][ T65] usb 3-1: Manufacturer: syz
[ 57.450375][ T65] usb 3-1: SerialNumber: syz
[ 57.456019][ T65] usb 3-1: config 0 descriptor??
[ 57.461394][ T497] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 57.671539][ T65] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.200/input/input7
[ 57.683033][ T95] ------------[ cut here ]------------
[ 57.688504][ T95] usb 3-1: BOGUS urb xfer, pipe 1 != type 3
[ 57.695250][ T95] WARNING: CPU: 0 PID: 95 at drivers/usb/core/urb.c:504 usb_submit_urb+0xca8/0x1800
[ 57.695428][ T65] usb 3-1: USB disconnect, device number 5
[ 57.704718][ T95] Modules linked in:
[ 57.714512][ T95] CPU: 0 UID: 0 PID: 95 Comm: acpid Tainted: G W syzkaller #0 b2a579c784e48b752010fd0fc74ab2c2cbe35779
[ 57.727423][ T95] Tainted: [W]=WARN
[ 57.731274][ T95] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 57.741497][ T95] RIP: 0010:usb_submit_urb+0xca8/0x1800
[ 57.747082][ T95] Code: 4c 89 e8 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 d5 08 00 00 45 8b 45 00 48 c7 c7 c0 4f 47 86 4c 89 fe 4c 89 e2 e8 d8 cc 7b fd <0f> 0b 44 8b 6d ac 44 0f b6 75 98 4c 89 f7 48 c7 c6 40 40 7d 87 e8
[ 57.766913][ T95] RSP: 0018:ffffc900007ef638 EFLAGS: 00010246
[ 57.773032][ T95] RAX: 973f76d8b636bf00 RBX: ffff888118ed5a00 RCX: ffff88810b795f00
[ 57.781142][ T95] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[ 57.789159][ T95] RBP: ffffc900007ef6b8 R08: 0000000000000003 R09: 0000000000000004
[ 57.797351][ T95] R10: dffffc0000000000 R11: fffffbfff0e5ef10 R12: ffff88811d591920
[ 57.805601][ T95] R13: ffffffff86474ee8 R14: dffffc0000000000 R15: ffffffff8647ac00
[ 57.813670][ T95] FS: 00007fac05995740(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 57.822704][ T95] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 57.829400][ T95] CR2: 0000001b32663fff CR3: 000000010bb92000 CR4: 00000000003526b0
[ 57.837956][ T95] Call Trace:
[ 57.841291][ T95]
[ 57.844231][ T95] hanwang_open+0xa3/0xd0
[ 57.848594][ T95] input_open_device+0x183/0x310
[ 57.853682][ T95] evdev_open+0x492/0x650
[ 57.858166][ T95] chrdev_open+0x4db/0x5f0
[ 57.862638][ T95] ? __cfi_chrdev_open+0x10/0x10
[ 57.867706][ T95] ? bpf_lsm_file_open+0xd/0x20
[ 57.872650][ T95] ? __cfi_chrdev_open+0x10/0x10
[ 57.878489][ T95] do_dentry_open+0x97b/0x1510
[ 57.883495][ T95] vfs_open+0x86/0x230
[ 57.887611][ T95] ? __cfi_vfs_open+0x10/0x10
[ 57.892352][ T95] ? may_open+0x352/0x430
[ 57.896739][ T95] path_openat+0x2b6c/0x34b0
[ 57.901375][ T95] ? kasan_save_alloc_info+0x40/0x50
[ 57.906694][ T95] ? getname_flags+0xc6/0x710
[ 57.911422][ T95] ? do_sys_openat2+0xcb/0x1c0
[ 57.916212][ T95] ? __x64_sys_openat+0x13a/0x170
[ 57.921291][ T95] ? do_filp_open+0x3e0/0x3e0
[ 57.925997][ T95] do_filp_open+0x1c6/0x3e0
[ 57.930512][ T95] ? __cfi_do_filp_open+0x10/0x10
[ 57.935580][ T95] ? alloc_fd+0x4e7/0x5a0
[ 57.939933][ T95] do_sys_openat2+0x12c/0x1c0
[ 57.944668][ T95] ? do_sys_open+0x100/0x100
[ 57.949841][ T95] ? ksys_read+0x1de/0x250
[ 57.954352][ T95] ? __cfi_ksys_read+0x10/0x10
[ 57.959146][ T95] __x64_sys_openat+0x13a/0x170
[ 57.964141][ T95] x64_sys_call+0xe69/0x2ee0
[ 57.968783][ T95] do_syscall_64+0x58/0xf0
[ 57.973260][ T95] ? clear_bhb_loop+0x50/0xa0
[ 57.977963][ T95] entry_SYSCALL_64_after_hwframe+0x76/0x7e
[ 57.983916][ T95] RIP: 0033:0x7fac05a1f407
[ 57.988441][ T95] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 58.008360][ T95] RSP: 002b:00007fff00768db0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[ 58.016974][ T95] RAX: ffffffffffffffda RBX: 00007fac05995740 RCX: 00007fac05a1f407
[ 58.025132][ T95] RDX: 0000000000080800 RSI: 00007fff00768fc0 RDI: ffffffffffffff9c
[ 58.033394][ T95] RBP: 00007fff00768fc0 R08: 0000000000000000 R09: 0000000000000000
[ 58.041651][ T95] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000040
[ 58.049781][ T95] R13: 00007fff007690c0 R14: 00005611c64bf7fe R15: 00007fff007690c0
[ 58.057829][ T95]
[ 58.060876][ T95] ---[ end trace 0000000000000000 ]---
2025/08/27 14:58:11 executed programs: 6
[ 58.471551][ T65] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[ 58.621142][ T65] usb 3-1: Using ep0 maxpacket: 8
[ 58.627698][ T65] usb 3-1: config 0 has an invalid interface number: 200 but max is 0
[ 58.636251][ T65] usb 3-1: config 0 has no interface number 0
[ 58.642450][ T65] usb 3-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xED, changing to 0x8D
[ 58.654691][ T65] usb 3-1: config 0 interface 200 altsetting 2 bulk endpoint 0x8D has invalid maxpacket 16
[ 58.664778][ T65] usb 3-1: config 0 interface 200 has no altsetting 0
[ 58.673773][ T65] usb 3-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39
[ 58.682926][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 58.691095][ T65] usb 3-1: Product: syz
[ 58.695441][ T65] usb 3-1: Manufacturer: syz
[ 58.700150][ T65] usb 3-1: SerialNumber: syz
[ 58.705695][ T65] usb 3-1: config 0 descriptor??
[ 58.711182][ T499] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 58.922383][ T65] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.200/input/input8
[ 58.933983][ T95] ------------[ cut here ]------------
[ 58.939480][ T95] usb 3-1: BOGUS urb xfer, pipe 1 != type 3
[ 58.946137][ T95] WARNING: CPU: 0 PID: 95 at drivers/usb/core/urb.c:504 usb_submit_urb+0xca8/0x1800
[ 58.946433][ T65] usb 3-1: USB disconnect, device number 6
[ 58.956209][ T95] Modules linked in:
[ 58.966067][ T95] CPU: 0 UID: 0 PID: 95 Comm: acpid Tainted: G W syzkaller #0 b2a579c784e48b752010fd0fc74ab2c2cbe35779
[ 58.978528][ T95] Tainted: [W]=WARN
[ 58.982541][ T95] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 58.992664][ T95] RIP: 0010:usb_submit_urb+0xca8/0x1800
[ 58.998335][ T95] Code: 4c 89 e8 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 d5 08 00 00 45 8b 45 00 48 c7 c7 c0 4f 47 86 4c 89 fe 4c 89 e2 e8 d8 cc 7b fd <0f> 0b 44 8b 6d ac 44 0f b6 75 98 4c 89 f7 48 c7 c6 40 40 7d 87 e8
[ 59.018157][ T95] RSP: 0018:ffffc900007ef638 EFLAGS: 00010246
[ 59.024272][ T95] RAX: 973f76d8b636bf00 RBX: ffff88811e82de00 RCX: ffff88810b795f00
[ 59.032269][ T95] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[ 59.040252][ T95] RBP: ffffc900007ef6b8 R08: 0000000000000003 R09: 0000000000000004
[ 59.048254][ T95] R10: dffffc0000000000 R11: fffffbfff0e5ef10 R12: ffff88811e11cbe0
[ 59.056260][ T95] R13: ffffffff86474ee8 R14: dffffc0000000000 R15: ffffffff8647ac00
[ 59.064367][ T95] FS: 00007fac05995740(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 59.073861][ T95] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 59.080483][ T95] CR2: 0000001b32663fff CR3: 000000010bb92000 CR4: 00000000003526b0
[ 59.088523][ T95] Call Trace:
[ 59.091940][ T95]
[ 59.095025][ T95] hanwang_open+0xa3/0xd0
[ 59.099642][ T95] input_open_device+0x183/0x310
[ 59.104741][ T95] evdev_open+0x492/0x650
[ 59.109121][ T95] chrdev_open+0x4db/0x5f0
[ 59.113708][ T95] ? __cfi_chrdev_open+0x10/0x10
[ 59.118830][ T95] ? bpf_lsm_file_open+0xd/0x20
[ 59.123839][ T95] ? __cfi_chrdev_open+0x10/0x10
[ 59.128992][ T95] do_dentry_open+0x97b/0x1510
[ 59.134099][ T95] vfs_open+0x86/0x230
[ 59.138225][ T95] ? __cfi_vfs_open+0x10/0x10
[ 59.142998][ T95] ? may_open+0x352/0x430
[ 59.147463][ T95] path_openat+0x2b6c/0x34b0
[ 59.152117][ T95] ? kasan_save_alloc_info+0x40/0x50
[ 59.157541][ T95] ? getname_flags+0xc6/0x710
[ 59.162359][ T95] ? do_sys_openat2+0xcb/0x1c0
[ 59.167177][ T95] ? __x64_sys_openat+0x13a/0x170
[ 59.172525][ T95] ? do_filp_open+0x3e0/0x3e0
[ 59.177336][ T95] do_filp_open+0x1c6/0x3e0
[ 59.182096][ T95] ? __cfi_do_filp_open+0x10/0x10
[ 59.187278][ T95] ? alloc_fd+0x4e7/0x5a0
[ 59.191691][ T95] do_sys_openat2+0x12c/0x1c0
[ 59.196434][ T95] ? do_sys_open+0x100/0x100
[ 59.201091][ T95] ? ksys_read+0x1de/0x250
[ 59.205528][ T95] ? __cfi_ksys_read+0x10/0x10
[ 59.210302][ T95] __x64_sys_openat+0x13a/0x170
[ 59.215202][ T95] x64_sys_call+0xe69/0x2ee0
[ 59.220107][ T95] do_syscall_64+0x58/0xf0
[ 59.224680][ T95] ? clear_bhb_loop+0x50/0xa0
[ 59.229468][ T95] entry_SYSCALL_64_after_hwframe+0x76/0x7e
[ 59.235411][ T95] RIP: 0033:0x7fac05a1f407
[ 59.239864][ T95] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 59.260162][ T95] RSP: 002b:00007fff00768db0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[ 59.268732][ T95] RAX: ffffffffffffffda RBX: 00007fac05995740 RCX: 00007fac05a1f407
[ 59.276788][ T95] RDX: 0000000000080800 RSI: 00007fff00768fc0 RDI: ffffffffffffff9c
[ 59.284933][ T95] RBP: 00007fff00768fc0 R08: 0000000000000000 R09: 0000000000000000
[ 59.292962][ T95] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000040
[ 59.301137][ T95] R13: 00007fff007690c0 R14: 00005611c64bf7fe R15: 00007fff007690c0
[ 59.309233][ T95]
[ 59.312329][ T95] ---[ end trace 0000000000000000 ]---
[ 59.771305][ T65] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[ 59.921124][ T65] usb 3-1: Using ep0 maxpacket: 8
[ 59.927922][ T65] usb 3-1: config 0 has an invalid interface number: 200 but max is 0
[ 59.936272][ T65] usb 3-1: config 0 has no interface number 0
[ 59.942421][ T65] usb 3-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xED, changing to 0x8D
[ 59.954202][ T65] usb 3-1: config 0 interface 200 altsetting 2 bulk endpoint 0x8D has invalid maxpacket 16
[ 59.964235][ T65] usb 3-1: config 0 interface 200 has no altsetting 0
[ 59.972775][ T65] usb 3-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39
[ 59.981914][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 59.990014][ T65] usb 3-1: Product: syz
[ 59.994244][ T65] usb 3-1: Manufacturer: syz
[ 59.998871][ T65] usb 3-1: SerialNumber: syz
[ 60.004465][ T65] usb 3-1: config 0 descriptor??
[ 60.009886][ T501] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 60.220310][ T65] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.200/input/input9
[ 60.232193][ T95] ------------[ cut here ]------------
[ 60.237848][ T95] usb 3-1: BOGUS urb xfer, pipe 1 != type 3
[ 60.244568][ T95] WARNING: CPU: 0 PID: 95 at drivers/usb/core/urb.c:504 usb_submit_urb+0xca8/0x1800
[ 60.244825][ T65] usb 3-1: USB disconnect, device number 7
[ 60.254040][ T95] Modules linked in:
[ 60.264403][ T95] CPU: 0 UID: 0 PID: 95 Comm: acpid Tainted: G W syzkaller #0 b2a579c784e48b752010fd0fc74ab2c2cbe35779
[ 60.277001][ T95] Tainted: [W]=WARN
[ 60.280845][ T95] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 60.291672][ T95] RIP: 0010:usb_submit_urb+0xca8/0x1800
[ 60.297358][ T95] Code: 4c 89 e8 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 d5 08 00 00 45 8b 45 00 48 c7 c7 c0 4f 47 86 4c 89 fe 4c 89 e2 e8 d8 cc 7b fd <0f> 0b 44 8b 6d ac 44 0f b6 75 98 4c 89 f7 48 c7 c6 40 40 7d 87 e8
[ 60.317363][ T95] RSP: 0018:ffffc900007ef638 EFLAGS: 00010246
[ 60.323504][ T95] RAX: 973f76d8b636bf00 RBX: ffff88811ecdaa00 RCX: ffff88810b795f00
[ 60.331845][ T95] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[ 60.339953][ T95] RBP: ffffc900007ef6b8 R08: 0000000000000003 R09: 0000000000000004
[ 60.348024][ T95] R10: dffffc0000000000 R11: fffffbfff0e5ef10 R12: ffff88811e11ce80
[ 60.356347][ T95] R13: ffffffff86474ee8 R14: dffffc0000000000 R15: ffffffff8647ac00
[ 60.364402][ T95] FS: 00007fac05995740(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 60.373767][ T95] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 60.380478][ T95] CR2: 000000c005c91000 CR3: 000000010bb92000 CR4: 00000000003526b0
[ 60.388835][ T95] Call Trace:
[ 60.392201][ T95]
[ 60.395170][ T95] hanwang_open+0xa3/0xd0
[ 60.399596][ T95] input_open_device+0x183/0x310
[ 60.404682][ T95] evdev_open+0x492/0x650
[ 60.409057][ T95] chrdev_open+0x4db/0x5f0
[ 60.413536][ T95] ? __cfi_chrdev_open+0x10/0x10
[ 60.418543][ T95] ? bpf_lsm_file_open+0xd/0x20
[ 60.423466][ T95] ? __cfi_chrdev_open+0x10/0x10
[ 60.428527][ T95] do_dentry_open+0x97b/0x1510
[ 60.433525][ T95] vfs_open+0x86/0x230
[ 60.437638][ T95] ? __cfi_vfs_open+0x10/0x10
[ 60.442404][ T95] ? may_open+0x352/0x430
[ 60.447053][ T95] path_openat+0x2b6c/0x34b0
[ 60.451881][ T95] ? kasan_save_alloc_info+0x40/0x50
[ 60.457210][ T95] ? getname_flags+0xc6/0x710
[ 60.462085][ T95] ? do_sys_openat2+0xcb/0x1c0
[ 60.466906][ T95] ? __x64_sys_openat+0x13a/0x170
[ 60.472054][ T95] ? do_filp_open+0x3e0/0x3e0
[ 60.476795][ T95] do_filp_open+0x1c6/0x3e0
[ 60.481389][ T95] ? __cfi_do_filp_open+0x10/0x10
[ 60.486550][ T95] ? alloc_fd+0x4e7/0x5a0
[ 60.490905][ T95] do_sys_openat2+0x12c/0x1c0
[ 60.495723][ T95] ? do_sys_open+0x100/0x100
[ 60.500341][ T95] ? ksys_read+0x1de/0x250
[ 60.504915][ T95] ? __cfi_ksys_read+0x10/0x10
[ 60.509723][ T95] __x64_sys_openat+0x13a/0x170
[ 60.514726][ T95] x64_sys_call+0xe69/0x2ee0
[ 60.519365][ T95] do_syscall_64+0x58/0xf0
[ 60.523869][ T95] ? clear_bhb_loop+0x50/0xa0
[ 60.528589][ T95] entry_SYSCALL_64_after_hwframe+0x76/0x7e
[ 60.534611][ T95] RIP: 0033:0x7fac05a1f407
[ 60.539057][ T95] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 60.558753][ T95] RSP: 002b:00007fff00768db0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[ 60.567226][ T95] RAX: ffffffffffffffda RBX: 00007fac05995740 RCX: 00007fac05a1f407
[ 60.575252][ T95] RDX: 0000000000080800 RSI: 00007fff00768fc0 RDI: ffffffffffffff9c
[ 60.583325][ T95] RBP: 00007fff00768fc0 R08: 0000000000000000 R09: 0000000000000000
[ 60.591606][ T95] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000040
[ 60.600141][ T95] R13: 00007fff007690c0 R14: 00005611c64bf7fe R15: 00007fff007690c0
[ 60.608346][ T95]
[ 60.611508][ T95] ---[ end trace 0000000000000000 ]---
[ 61.021128][ T65] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[ 61.171174][ T65] usb 3-1: Using ep0 maxpacket: 8
[ 61.177794][ T65] usb 3-1: config 0 has an invalid interface number: 200 but max is 0
[ 61.186605][ T65] usb 3-1: config 0 has no interface number 0
[ 61.193051][ T65] usb 3-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xED, changing to 0x8D
[ 61.205016][ T65] usb 3-1: config 0 interface 200 altsetting 2 bulk endpoint 0x8D has invalid maxpacket 16
[ 61.215162][ T65] usb 3-1: config 0 interface 200 has no altsetting 0
[ 61.223866][ T65] usb 3-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39
[ 61.233234][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 61.241276][ T65] usb 3-1: Product: syz
[ 61.245493][ T65] usb 3-1: Manufacturer: syz
[ 61.250172][ T65] usb 3-1: SerialNumber: syz
[ 61.255614][ T65] usb 3-1: config 0 descriptor??
[ 61.260978][ T503] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 61.471681][ T65] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.200/input/input10
[ 61.483378][ T95] ------------[ cut here ]------------
[ 61.488877][ T95] usb 3-1: BOGUS urb xfer, pipe 1 != type 3
[ 61.495813][ T95] WARNING: CPU: 0 PID: 95 at drivers/usb/core/urb.c:504 usb_submit_urb+0xca8/0x1800
[ 61.496123][ T65] usb 3-1: USB disconnect, device number 8
[ 61.505406][ T95] Modules linked in:
[ 61.515496][ T95] CPU: 0 UID: 0 PID: 95 Comm: acpid Tainted: G W syzkaller #0 b2a579c784e48b752010fd0fc74ab2c2cbe35779
[ 61.528050][ T95] Tainted: [W]=WARN
[ 61.531876][ T95] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 61.542437][ T95] RIP: 0010:usb_submit_urb+0xca8/0x1800
[ 61.548011][ T95] Code: 4c 89 e8 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 d5 08 00 00 45 8b 45 00 48 c7 c7 c0 4f 47 86 4c 89 fe 4c 89 e2 e8 d8 cc 7b fd <0f> 0b 44 8b 6d ac 44 0f b6 75 98 4c 89 f7 48 c7 c6 40 40 7d 87 e8
[ 61.567753][ T95] RSP: 0018:ffffc900007ef638 EFLAGS: 00010246
[ 61.573873][ T95] RAX: 973f76d8b636bf00 RBX: ffff88811ef87400 RCX: ffff88810b795f00
[ 61.582074][ T95] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[ 61.590075][ T95] RBP: ffffc900007ef6b8 R08: 0000000000000003 R09: 0000000000000004
[ 61.598498][ T95] R10: dffffc0000000000 R11: fffffbfff0e5ef10 R12: ffff88811e9706e0
[ 61.606639][ T95] R13: ffffffff86474ee8 R14: dffffc0000000000 R15: ffffffff8647ac00
[ 61.614880][ T95] FS: 00007fac05995740(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 61.623878][ T95] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 61.630748][ T95] CR2: 00007fb00a5b7dac CR3: 000000010bb92000 CR4: 00000000003526b0
[ 61.638881][ T95] Call Trace:
[ 61.642428][ T95]
[ 61.645487][ T95] hanwang_open+0xa3/0xd0
[ 61.649895][ T95] input_open_device+0x183/0x310
[ 61.654888][ T95] evdev_open+0x492/0x650
[ 61.659340][ T95] chrdev_open+0x4db/0x5f0
[ 61.663830][ T95] ? __cfi_chrdev_open+0x10/0x10
[ 61.668887][ T95] ? bpf_lsm_file_open+0xd/0x20
[ 61.673800][ T95] ? __cfi_chrdev_open+0x10/0x10
[ 61.678863][ T95] do_dentry_open+0x97b/0x1510
[ 61.683745][ T95] vfs_open+0x86/0x230
[ 61.687956][ T95] ? __cfi_vfs_open+0x10/0x10
[ 61.692695][ T95] ? may_open+0x352/0x430
[ 61.697053][ T95] path_openat+0x2b6c/0x34b0
[ 61.701706][ T95] ? kasan_save_alloc_info+0x40/0x50
[ 61.707028][ T95] ? getname_flags+0xc6/0x710
[ 61.711764][ T95] ? do_sys_openat2+0xcb/0x1c0
[ 61.716712][ T95] ? __x64_sys_openat+0x13a/0x170
[ 61.722005][ T95] ? do_filp_open+0x3e0/0x3e0
[ 61.726732][ T95] do_filp_open+0x1c6/0x3e0
[ 61.731417][ T95] ? __cfi_do_filp_open+0x10/0x10
[ 61.736540][ T95] ? alloc_fd+0x4e7/0x5a0
[ 61.740893][ T95] do_sys_openat2+0x12c/0x1c0
[ 61.745779][ T95] ? do_sys_open+0x100/0x100
[ 61.750403][ T95] ? ksys_read+0x1de/0x250
[ 61.754899][ T95] ? __cfi_ksys_read+0x10/0x10
[ 61.759723][ T95] __x64_sys_openat+0x13a/0x170
[ 61.764760][ T95] x64_sys_call+0xe69/0x2ee0
[ 61.769415][ T95] do_syscall_64+0x58/0xf0
[ 61.773983][ T95] ? clear_bhb_loop+0x50/0xa0
[ 61.778736][ T95] entry_SYSCALL_64_after_hwframe+0x76/0x7e
[ 61.784790][ T95] RIP: 0033:0x7fac05a1f407
[ 61.789231][ T95] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 61.809160][ T95] RSP: 002b:00007fff00768db0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[ 61.817900][ T95] RAX: ffffffffffffffda RBX: 00007fac05995740 RCX: 00007fac05a1f407
[ 61.825961][ T95] RDX: 0000000000080800 RSI: 00007fff00768fc0 RDI: ffffffffffffff9c
[ 61.834089][ T95] RBP: 00007fff00768fc0 R08: 0000000000000000 R09: 0000000000000000
[ 61.842129][ T95] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000040
[ 61.850156][ T95] R13: 00007fff007690c0 R14: 00005611c64bf7fe R15: 00007fff007690c0
[ 61.858533][ T95]
[ 61.861636][ T95] ---[ end trace 0000000000000000 ]---
[ 62.281191][ T65] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[ 62.431129][ T65] usb 3-1: Using ep0 maxpacket: 8
[ 62.437226][ T65] usb 3-1: config 0 has an invalid interface number: 200 but max is 0
[ 62.445544][ T65] usb 3-1: config 0 has no interface number 0
[ 62.451890][ T65] usb 3-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xED, changing to 0x8D
[ 62.463798][ T65] usb 3-1: config 0 interface 200 altsetting 2 bulk endpoint 0x8D has invalid maxpacket 16
[ 62.473846][ T65] usb 3-1: config 0 interface 200 has no altsetting 0
[ 62.482177][ T65] usb 3-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39
[ 62.491376][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 62.499378][ T65] usb 3-1: Product: syz
[ 62.503677][ T65] usb 3-1: Manufacturer: syz
[ 62.508314][ T65] usb 3-1: SerialNumber: syz
[ 62.513675][ T65] usb 3-1: config 0 descriptor??
[ 62.518965][ T505] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 62.730514][ T65] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.200/input/input11
[ 62.742178][ T95] ------------[ cut here ]------------
[ 62.747743][ T95] usb 3-1: BOGUS urb xfer, pipe 1 != type 3
[ 62.754769][ T65] usb 3-1: USB disconnect, device number 9
[ 62.761208][ T95] WARNING: CPU: 0 PID: 95 at drivers/usb/core/urb.c:504 usb_submit_urb+0xca8/0x1800
[ 62.770748][ T95] Modules linked in:
[ 62.774883][ T95] CPU: 0 UID: 0 PID: 95 Comm: acpid Tainted: G W syzkaller #0 b2a579c784e48b752010fd0fc74ab2c2cbe35779
[ 62.787647][ T95] Tainted: [W]=WARN
[ 62.791502][ T95] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 62.801852][ T95] RIP: 0010:usb_submit_urb+0xca8/0x1800
[ 62.807455][ T95] Code: 4c 89 e8 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 d5 08 00 00 45 8b 45 00 48 c7 c7 c0 4f 47 86 4c 89 fe 4c 89 e2 e8 d8 cc 7b fd <0f> 0b 44 8b 6d ac 44 0f b6 75 98 4c 89 f7 48 c7 c6 40 40 7d 87 e8
[ 62.827252][ T95] RSP: 0018:ffffc900007ef638 EFLAGS: 00010246
[ 62.833569][ T95] RAX: 973f76d8b636bf00 RBX: ffff888119052600 RCX: ffff88810b795f00
[ 62.841651][ T95] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[ 62.849677][ T95] RBP: ffffc900007ef6b8 R08: 0000000000000003 R09: 0000000000000004
[ 62.857705][ T95] R10: dffffc0000000000 R11: fffffbfff0e5ef10 R12: ffff88811e970e00
[ 62.865861][ T95] R13: ffffffff86474ee8 R14: dffffc0000000000 R15: ffffffff8647ac00
[ 62.874009][ T95] FS: 00007fac05995740(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 62.883089][ T95] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 62.889683][ T95] CR2: 0000001b32663fff CR3: 000000010bb92000 CR4: 00000000003526b0
[ 62.897699][ T95] Call Trace:
[ 62.901026][ T95]
[ 62.903970][ T95] hanwang_open+0xa3/0xd0
[ 62.908419][ T95] input_open_device+0x183/0x310
[ 62.913447][ T95] evdev_open+0x492/0x650
[ 62.917819][ T95] chrdev_open+0x4db/0x5f0
[ 62.922411][ T95] ? __cfi_chrdev_open+0x10/0x10
[ 62.927490][ T95] ? bpf_lsm_file_open+0xd/0x20
[ 62.932459][ T95] ? __cfi_chrdev_open+0x10/0x10
[ 62.937439][ T95] do_dentry_open+0x97b/0x1510
[ 62.942287][ T95] vfs_open+0x86/0x230
[ 62.946448][ T95] ? __cfi_vfs_open+0x10/0x10
[ 62.951230][ T95] ? may_open+0x352/0x430
[ 62.955632][ T95] path_openat+0x2b6c/0x34b0
[ 62.960233][ T95] ? kasan_save_alloc_info+0x40/0x50
[ 62.965835][ T95] ? getname_flags+0xc6/0x710
[ 62.970636][ T95] ? do_sys_openat2+0xcb/0x1c0
[ 62.975457][ T95] ? __x64_sys_openat+0x13a/0x170
[ 62.980513][ T95] ? do_filp_open+0x3e0/0x3e0
[ 62.985297][ T95] do_filp_open+0x1c6/0x3e0
[ 62.990060][ T95] ? __cfi_do_filp_open+0x10/0x10
[ 62.995203][ T95] ? alloc_fd+0x4e7/0x5a0
[ 62.999846][ T95] do_sys_openat2+0x12c/0x1c0
[ 63.004650][ T95] ? do_sys_open+0x100/0x100
[ 63.009301][ T95] ? ksys_read+0x1de/0x250
[ 63.013801][ T95] ? __cfi_ksys_read+0x10/0x10
[ 63.018613][ T95] __x64_sys_openat+0x13a/0x170
[ 63.023795][ T95] x64_sys_call+0xe69/0x2ee0
[ 63.028427][ T95] do_syscall_64+0x58/0xf0
[ 63.032918][ T95] ? clear_bhb_loop+0x50/0xa0
[ 63.037719][ T95] entry_SYSCALL_64_after_hwframe+0x76/0x7e
[ 63.043682][ T95] RIP: 0033:0x7fac05a1f407
[ 63.048123][ T95] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 63.067867][ T95] RSP: 002b:00007fff00768db0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[ 63.076347][ T95] RAX: ffffffffffffffda RBX: 00007fac05995740 RCX: 00007fac05a1f407
[ 63.084375][ T95] RDX: 0000000000080800 RSI: 00007fff00768fc0 RDI: ffffffffffffff9c
[ 63.092594][ T95] RBP: 00007fff00768fc0 R08: 0000000000000000 R09: 0000000000000000
[ 63.100594][ T95] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000040
[ 63.108610][ T95] R13: 00007fff007690c0 R14: 00005611c64bf7fe R15: 00007fff007690c0
[ 63.116638][ T95]
[ 63.119680][ T95] ---[ end trace 0000000000000000 ]---
2025/08/27 14:58:16 executed programs: 10
[ 63.531202][ T65] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[ 63.681138][ T65] usb 3-1: Using ep0 maxpacket: 8
[ 63.687430][ T65] usb 3-1: config 0 has an invalid interface number: 200 but max is 0
[ 63.695889][ T65] usb 3-1: config 0 has no interface number 0
[ 63.702211][ T65] usb 3-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xED, changing to 0x8D
[ 63.713912][ T65] usb 3-1: config 0 interface 200 altsetting 2 bulk endpoint 0x8D has invalid maxpacket 16
[ 63.723943][ T65] usb 3-1: config 0 interface 200 has no altsetting 0
[ 63.732151][ T65] usb 3-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39
[ 63.741352][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 63.749352][ T65] usb 3-1: Product: syz
[ 63.754253][ T65] usb 3-1: Manufacturer: syz
[ 63.758853][ T65] usb 3-1: SerialNumber: syz
[ 63.764718][ T65] usb 3-1: config 0 descriptor??
[ 63.770068][ T508] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22