Warning: Permanently added '[localhost]:32350' (ED25519) to the list of known hosts.
2025/04/26 04:04:50 ignoring optional flag "sandboxArg"="0"
2025/04/26 04:04:51 parsed 1 programs
[ 81.349970][ T40] kauditd_printk_skb: 28 callbacks suppressed
[ 81.349985][ T40] audit: type=1400 audit(1745640293.138:143): avc: denied { unlink } for pid=6196 comm="syz-executor" name="swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 81.458453][ T834] cfg80211: failed to load regulatory.db
[ 82.389110][ T6196] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 84.542628][ T1190] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 84.545072][ T1190] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 84.559058][ T1190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 84.562018][ T1190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 84.714511][ T5289] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 84.728901][ T5289] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 84.731806][ T5289] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 84.734413][ T5289] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 84.736869][ T5289] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 85.029312][ T40] audit: type=1401 audit(1745640296.808:144): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768"
[ 85.616936][ T6308] chnl_net:caif_netlink_parms(): no params data found
[ 85.728943][ T6308] bridge0: port 1(bridge_slave_0) entered blocking state
[ 85.731798][ T6308] bridge0: port 1(bridge_slave_0) entered disabled state
[ 85.734680][ T6308] bridge_slave_0: entered allmulticast mode
[ 85.740504][ T6308] bridge_slave_0: entered promiscuous mode
[ 85.744944][ T6308] bridge0: port 2(bridge_slave_1) entered blocking state
[ 85.748344][ T6308] bridge0: port 2(bridge_slave_1) entered disabled state
[ 85.751407][ T6308] bridge_slave_1: entered allmulticast mode
[ 85.754116][ T6308] bridge_slave_1: entered promiscuous mode
[ 85.792630][ T6308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 85.799347][ T6308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 85.829604][ T6308] team0: Port device team_slave_0 added
[ 85.832934][ T6308] team0: Port device team_slave_1 added
[ 85.862142][ T6308] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 85.864392][ T6308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 85.872694][ T6308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 85.877250][ T6308] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 85.879550][ T6308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 85.887447][ T6308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 85.964753][ T6308] hsr_slave_0: entered promiscuous mode
[ 85.968100][ T6308] hsr_slave_1: entered promiscuous mode
[ 86.592653][ T6308] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 86.599055][ T6308] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 86.605394][ T6308] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 86.610413][ T6308] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 86.655240][ T6308] 8021q: adding VLAN 0 to HW filter on device bond0
[ 86.666257][ T6308] 8021q: adding VLAN 0 to HW filter on device team0
[ 86.673143][ T1041] bridge0: port 1(bridge_slave_0) entered blocking state
[ 86.675423][ T1041] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 86.684107][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state
[ 86.687176][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 86.779433][ T6308] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 86.800096][ T6308] veth0_vlan: entered promiscuous mode
[ 86.805524][ T6308] veth1_vlan: entered promiscuous mode
[ 86.820336][ T6308] veth0_macvtap: entered promiscuous mode
[ 86.824017][ T6308] veth1_macvtap: entered promiscuous mode
[ 86.833043][ T6308] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 86.842555][ T6308] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 86.848878][ T6308] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 86.851689][ T6308] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 86.854368][ T6308] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 86.857046][ T6308] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 86.955238][ T1041] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 87.020021][ T1041] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 87.109759][ T1041] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 87.179456][ T1041] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2025/04/26 04:04:59 executed programs: 0
[ 87.601052][ T5289] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 87.604917][ T5289] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 87.608300][ T5289] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 87.611500][ T5289] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 87.614682][ T5289] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 87.741577][ T6405] chnl_net:caif_netlink_parms(): no params data found
[ 87.839969][ T6405] bridge0: port 1(bridge_slave_0) entered blocking state
[ 87.842450][ T6405] bridge0: port 1(bridge_slave_0) entered disabled state
[ 87.844715][ T6405] bridge_slave_0: entered allmulticast mode
[ 87.847516][ T6405] bridge_slave_0: entered promiscuous mode
[ 87.852061][ T6405] bridge0: port 2(bridge_slave_1) entered blocking state
[ 87.854339][ T6405] bridge0: port 2(bridge_slave_1) entered disabled state
[ 87.856817][ T6405] bridge_slave_1: entered allmulticast mode
[ 87.861213][ T6405] bridge_slave_1: entered promiscuous mode
[ 87.911096][ T6405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 87.917717][ T6405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 87.979340][ T6405] team0: Port device team_slave_0 added
[ 87.984767][ T6405] team0: Port device team_slave_1 added
[ 88.036066][ T6405] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 88.039007][ T6405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 88.047949][ T6405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 88.052471][ T6405] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 88.054735][ T6405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 88.063290][ T6405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 88.123043][ T6405] hsr_slave_0: entered promiscuous mode
[ 88.125263][ T6405] hsr_slave_1: entered promiscuous mode
[ 88.127601][ T6405] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 88.129917][ T6405] Cannot create hsr debugfs directory
[ 89.697521][ T5289] Bluetooth: hci0: command tx timeout
[ 90.569337][ T1041] bridge_slave_1: left allmulticast mode
[ 90.571171][ T1041] bridge_slave_1: left promiscuous mode
[ 90.573064][ T1041] bridge0: port 2(bridge_slave_1) entered disabled state
[ 90.576474][ T1041] bridge_slave_0: left allmulticast mode
[ 90.578550][ T1041] bridge_slave_0: left promiscuous mode
[ 90.580463][ T1041] bridge0: port 1(bridge_slave_0) entered disabled state
[ 90.778541][ T1041] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 90.784050][ T1041] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 90.788680][ T1041] bond0 (unregistering): Released all slaves
[ 90.930791][ T1041] hsr_slave_0: left promiscuous mode
[ 90.932873][ T1041] hsr_slave_1: left promiscuous mode
[ 90.934815][ T1041] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 90.937142][ T1041] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 90.940282][ T1041] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 90.943336][ T1041] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 90.964643][ T1041] veth1_macvtap: left promiscuous mode
[ 90.966484][ T1041] veth0_macvtap: left promiscuous mode
[ 90.968386][ T1041] veth1_vlan: left promiscuous mode
[ 90.970077][ T1041] veth0_vlan: left promiscuous mode
[ 91.316929][ T1041] team0 (unregistering): Port device team_slave_1 removed
[ 91.358025][ T1041] team0 (unregistering): Port device team_slave_0 removed
[ 91.778339][ T5289] Bluetooth: hci0: command tx timeout
[ 91.947093][ T6405] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 91.952627][ T6405] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 91.957063][ T6405] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 91.961861][ T6405] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 92.019413][ T6405] 8021q: adding VLAN 0 to HW filter on device bond0
[ 92.034084][ T6405] 8021q: adding VLAN 0 to HW filter on device team0
[ 92.039165][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state
[ 92.041604][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 92.048856][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state
[ 92.051333][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 92.185677][ T6405] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 92.211945][ T6405] veth0_vlan: entered promiscuous mode
[ 92.217090][ T6405] veth1_vlan: entered promiscuous mode
[ 92.244170][ T6405] veth0_macvtap: entered promiscuous mode
[ 92.248289][ T6405] veth1_macvtap: entered promiscuous mode
[ 92.256190][ T6405] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 92.262984][ T6405] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 92.267323][ T6405] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 92.270178][ T6405] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 92.272959][ T6405] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 92.275648][ T6405] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 92.328189][ T1041] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 92.330635][ T1041] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 92.349784][ T1190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 92.353071][ T1190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 92.394283][ T40] audit: type=1400 audit(1745640304.178:145): avc: denied { read write } for pid=6509 comm="syz.0.16" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 92.404692][ T40] audit: type=1400 audit(1745640304.178:146): avc: denied { open } for pid=6509 comm="syz.0.16" path="/dev/raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 92.413514][ T40] audit: type=1400 audit(1745640304.178:147): avc: denied { ioctl } for pid=6509 comm="syz.0.16" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 92.647766][ T1334] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[ 92.829970][ T1334] usb 5-1: not running at top speed; connect to a high speed hub
[ 92.834074][ T1334] usb 5-1: config 2 contains an unexpected descriptor of type 0x1, skipping
[ 92.837960][ T1334] usb 5-1: config 2 has an invalid interface number: 129 but max is 1
[ 92.840486][ T1334] usb 5-1: config 2 has an invalid interface number: 17 but max is 1
[ 92.842985][ T1334] usb 5-1: config 2 has an invalid interface association descriptor of length 2, skipping
[ 92.846017][ T1334] usb 5-1: config 2 has an invalid interface association descriptor of length 2, skipping
[ 92.849144][ T1334] usb 5-1: config 2 has 3 interfaces, different from the descriptor's value: 2
[ 92.851947][ T1334] usb 5-1: config 2 has no interface number 1
[ 92.853854][ T1334] usb 5-1: config 2 has no interface number 2
[ 92.855960][ T1334] usb 5-1: config 2 interface 0 altsetting 2 endpoint 0x6 has invalid maxpacket 1024, setting to 64
[ 92.859829][ T1334] usb 5-1: config 2 interface 0 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[ 92.864223][ T1334] usb 5-1: config 2 interface 0 altsetting 2 has a duplicate endpoint with address 0x6, skipping
[ 92.868672][ T1334] usb 5-1: config 2 interface 0 altsetting 2 endpoint 0x5 has an invalid bInterval 31, changing to 4
[ 92.872914][ T1334] usb 5-1: config 2 interface 0 altsetting 2 has 6 endpoint descriptors, different from the interface descriptor's value: 13
[ 92.878085][ T1334] usb 5-1: too many endpoints for config 2 interface 129 altsetting 50: 247, using maximum allowed: 30
[ 92.882391][ T1334] usb 5-1: config 2 interface 129 altsetting 50 endpoint 0xF has invalid maxpacket 1007, setting to 64
[ 92.885966][ T1334] usb 5-1: config 2 interface 129 altsetting 50 endpoint 0x9 has invalid maxpacket 1023, setting to 64
[ 92.889414][ T1334] usb 5-1: config 2 interface 129 altsetting 50 has a duplicate endpoint with address 0x4, skipping
[ 92.892739][ T1334] usb 5-1: config 2 interface 129 altsetting 50 has a duplicate endpoint with address 0x4, skipping
[ 92.896016][ T1334] usb 5-1: config 2 interface 129 altsetting 50 endpoint 0x8 has invalid maxpacket 512, setting to 64
[ 92.899786][ T1334] usb 5-1: config 2 interface 129 altsetting 50 has 7 endpoint descriptors, different from the interface descriptor's value: 247
[ 92.903981][ T1334] usb 5-1: config 2 interface 17 altsetting 7 has an invalid endpoint descriptor of length 5, skipping
[ 92.907518][ T1334] usb 5-1: config 2 interface 17 altsetting 7 has a duplicate endpoint with address 0x5, skipping
[ 92.910676][ T1334] usb 5-1: config 2 interface 17 altsetting 7 has a duplicate endpoint with address 0x8, skipping
[ 92.913853][ T1334] usb 5-1: config 2 interface 17 altsetting 7 has a duplicate endpoint with address 0x8, skipping
[ 92.917177][ T1334] usb 5-1: config 2 interface 17 altsetting 7 endpoint 0xE has invalid maxpacket 1023, setting to 64
[ 92.920625][ T1334] usb 5-1: config 2 interface 17 altsetting 7 has an endpoint descriptor with address 0xF1, changing to 0x81
[ 92.924099][ T1334] usb 5-1: config 2 interface 17 altsetting 7 endpoint 0x81 has invalid maxpacket 21938, setting to 64
[ 92.927436][ T1334] usb 5-1: config 2 interface 17 altsetting 7 endpoint 0xC has invalid maxpacket 512, setting to 64
[ 92.930717][ T1334] usb 5-1: config 2 interface 17 altsetting 7 has a duplicate endpoint with address 0xF, skipping
[ 92.933941][ T1334] usb 5-1: config 2 interface 17 altsetting 7 has a duplicate endpoint with address 0x6, skipping
[ 92.937167][ T1334] usb 5-1: config 2 interface 17 altsetting 7 has a duplicate endpoint with address 0xF, skipping
[ 92.940516][ T1334] usb 5-1: config 2 interface 17 altsetting 7 has a duplicate endpoint with address 0xE, skipping
[ 92.943690][ T1334] usb 5-1: config 2 interface 17 altsetting 7 has a duplicate endpoint with address 0x3, skipping
[ 92.946965][ T1334] usb 5-1: config 2 interface 17 altsetting 7 has a duplicate endpoint with address 0x7, skipping
[ 92.950266][ T1334] usb 5-1: config 2 interface 17 altsetting 7 has 14 endpoint descriptors, different from the interface descriptor's value: 13
[ 92.954287][ T1334] usb 5-1: config 2 interface 0 has no altsetting 0
[ 92.956367][ T1334] usb 5-1: config 2 interface 129 has no altsetting 0
[ 92.958597][ T1334] usb 5-1: config 2 interface 17 has no altsetting 0
[ 92.963754][ T1334] usb 5-1: string descriptor 0 read error: -22
[ 92.965709][ T1334] usb 5-1: Dual-Role OTG device on HNP port
[ 92.968038][ T1334] usb 5-1: New USB device found, idVendor=05c6, idProduct=920b, bcdDevice=8e.8a
[ 92.970831][ T1334] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 92.993603][ T1334] ------------[ cut here ]------------
[ 92.995428][ T1334] UBSAN: array-index-out-of-bounds in drivers/hid/usbhid/hid-core.c:1026:18
[ 92.998396][ T1334] index 1 is out of range for type 'hid_class_descriptor [1]'
[ 93.000866][ T1334] CPU: 2 UID: 0 PID: 1334 Comm: kworker/2:2 Not tainted 6.15.0-rc3-syzkaller-gf1a3944c860b #0 PREEMPT(full)
[ 93.000886][ T1334] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 93.000896][ T1334] Workqueue: usb_hub_wq hub_event
[ 93.000917][ T1334] Call Trace:
[ 93.000924][ T1334]
[ 93.000929][ T1334] dump_stack_lvl+0x16c/0x1f0
[ 93.000943][ T1334] __ubsan_handle_out_of_bounds+0x11c/0x160
[ 93.000970][ T1334] usbhid_parse+0x98a/0xa60
[ 93.000993][ T1334] ? __pfx_usbhid_parse+0x10/0x10
[ 93.001010][ T1334] ? hid_match_id+0x258/0x2e0
[ 93.001039][ T1334] hid_add_device+0x18a/0xa60
[ 93.001063][ T1334] ? __pfx_hid_add_device+0x10/0x10
[ 93.001083][ T1334] ? lockdep_init_map_type+0x5c/0x280
[ 93.001109][ T1334] ? lockdep_init_map_type+0x5c/0x280
[ 93.001136][ T1334] usbhid_probe+0xd38/0x13f0
[ 93.001157][ T1334] usb_probe_interface+0x300/0x9c0
[ 93.001178][ T1334] ? __pfx_usb_probe_interface+0x10/0x10
[ 93.001196][ T1334] really_probe+0x23e/0xa90
[ 93.001213][ T1334] __driver_probe_device+0x1de/0x440
[ 93.001228][ T1334] driver_probe_device+0x4c/0x1b0
[ 93.001243][ T1334] __device_attach_driver+0x1df/0x310
[ 93.001258][ T1334] ? __pfx___device_attach_driver+0x10/0x10
[ 93.001271][ T1334] bus_for_each_drv+0x156/0x1e0
[ 93.001292][ T1334] ? __pfx_bus_for_each_drv+0x10/0x10
[ 93.001314][ T1334] ? lockdep_hardirqs_on+0x7c/0x110
[ 93.001330][ T1334] ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 93.001349][ T1334] __device_attach+0x1e4/0x4b0
[ 93.001364][ T1334] ? __pfx___device_attach+0x10/0x10
[ 93.001380][ T1334] ? do_raw_spin_unlock+0x172/0x230
[ 93.001401][ T1334] bus_probe_device+0x17f/0x1c0
[ 93.001419][ T1334] device_add+0x1148/0x1a70
[ 93.001433][ T1334] ? __pfx_device_add+0x10/0x10
[ 93.001445][ T1334] ? usb_create_ep_devs+0x1f7/0x2b0
[ 93.001460][ T1334] ? create_intf_ep_devs.isra.0+0x195/0x200
[ 93.001476][ T1334] usb_set_configuration+0x1187/0x1e20
[ 93.001509][ T1334] ? __pfx_usb_generic_driver_probe+0x10/0x10
[ 93.001532][ T1334] usb_generic_driver_probe+0xb1/0x110
[ 93.001562][ T1334] usb_probe_device+0xec/0x3e0
[ 93.001579][ T1334] ? __pfx_usb_probe_device+0x10/0x10
[ 93.001598][ T1334] really_probe+0x23e/0xa90
[ 93.001617][ T1334] __driver_probe_device+0x1de/0x440
[ 93.001631][ T1334] ? usb_driver_applicable+0x1c7/0x220
[ 93.001653][ T1334] driver_probe_device+0x4c/0x1b0
[ 93.001670][ T1334] __device_attach_driver+0x1df/0x310
[ 93.001686][ T1334] ? __pfx___device_attach_driver+0x10/0x10
[ 93.001701][ T1334] bus_for_each_drv+0x156/0x1e0
[ 93.001723][ T1334] ? __pfx_bus_for_each_drv+0x10/0x10
[ 93.001744][ T1334] ? lockdep_hardirqs_on+0x7c/0x110
[ 93.001760][ T1334] ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 93.001779][ T1334] __device_attach+0x1e4/0x4b0
[ 93.001794][ T1334] ? __pfx___device_attach+0x10/0x10
[ 93.001810][ T1334] ? do_raw_spin_unlock+0x172/0x230
[ 93.001830][ T1334] bus_probe_device+0x17f/0x1c0
[ 93.001853][ T1334] device_add+0x1148/0x1a70
[ 93.001873][ T1334] ? __pfx_device_add+0x10/0x10
[ 93.001889][ T1334] ? usb_detect_static_quirks+0x335/0x3e0
[ 93.001904][ T1334] ? usb_cache_string+0xf2/0x150
[ 93.001924][ T1334] usb_new_device+0xd07/0x1a20
[ 93.001948][ T1334] ? __pfx_usb_new_device+0x10/0x10
[ 93.001965][ T1334] ? mark_held_locks+0x49/0x80
[ 93.001990][ T1334] hub_event+0x2eb7/0x4fa0
[ 93.002028][ T1334] ? __pfx_hub_event+0x10/0x10
[ 93.002045][ T1334] ? debug_object_deactivate+0x1ec/0x3a0
[ 93.002078][ T1334] ? rcu_is_watching+0x12/0xc0
[ 93.002099][ T1334] process_one_work+0x9cc/0x1b70
[ 93.002118][ T1334] ? __pfx_hcd_resume_work+0x10/0x10
[ 93.002131][ T1334] ? __pfx_process_one_work+0x10/0x10
[ 93.002146][ T1334] ? assign_work+0x1a0/0x250
[ 93.002163][ T1334] worker_thread+0x6c8/0xf10
[ 93.002188][ T1334] ? __kthread_parkme+0x19e/0x250
[ 93.002211][ T1334] ? __pfx_worker_thread+0x10/0x10
[ 93.002227][ T1334] kthread+0x3c2/0x780
[ 93.002242][ T1334] ? __pfx_kthread+0x10/0x10
[ 93.002254][ T1334] ? __pfx_kthread+0x10/0x10
[ 93.002266][ T1334] ? __pfx_kthread+0x10/0x10
[ 93.002279][ T1334] ? __pfx_kthread+0x10/0x10
[ 93.002292][ T1334] ? rcu_is_watching+0x12/0xc0
[ 93.002309][ T1334] ? __pfx_kthread+0x10/0x10
[ 93.002324][ T1334] ret_from_fork+0x45/0x80
[ 93.002338][ T1334] ? __pfx_kthread+0x10/0x10
[ 93.002352][ T1334] ret_from_fork_asm+0x1a/0x30
[ 93.002389][ T1334]
[ 93.002395][ T1334] ---[ end trace ]---
[ 93.159220][ T1334] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[ 93.161544][ T1334] CPU: 2 UID: 0 PID: 1334 Comm: kworker/2:2 Not tainted 6.15.0-rc3-syzkaller-gf1a3944c860b #0 PREEMPT(full)
[ 93.165096][ T1334] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 93.168425][ T1334] Workqueue: usb_hub_wq hub_event
[ 93.170018][ T1334] Call Trace:
[ 93.171075][ T1334]
[ 93.172067][ T1334] dump_stack_lvl+0x3d/0x1f0
[ 93.173549][ T1334] panic+0x71c/0x800
[ 93.174776][ T1334] ? __pfx_panic+0x10/0x10
[ 93.176217][ T1334] ? __pfx__printk+0x10/0x10
[ 93.177662][ T1334] ? check_panic_on_warn+0x1f/0xb0
[ 93.179397][ T1334] check_panic_on_warn+0xab/0xb0
[ 93.180961][ T1334] __ubsan_handle_out_of_bounds+0x143/0x160
[ 93.182844][ T1334] usbhid_parse+0x98a/0xa60
[ 93.184329][ T1334] ? __pfx_usbhid_parse+0x10/0x10
[ 93.185903][ T1334] ? hid_match_id+0x258/0x2e0
[ 93.187439][ T1334] hid_add_device+0x18a/0xa60
[ 93.188923][ T1334] ? __pfx_hid_add_device+0x10/0x10
[ 93.190548][ T1334] ? lockdep_init_map_type+0x5c/0x280
[ 93.192271][ T1334] ? lockdep_init_map_type+0x5c/0x280
[ 93.194062][ T1334] usbhid_probe+0xd38/0x13f0
[ 93.195536][ T1334] usb_probe_interface+0x300/0x9c0
[ 93.197198][ T1334] ? __pfx_usb_probe_interface+0x10/0x10
[ 93.198942][ T1334] really_probe+0x23e/0xa90
[ 93.200382][ T1334] __driver_probe_device+0x1de/0x440
[ 93.202060][ T1334] driver_probe_device+0x4c/0x1b0
[ 93.203678][ T1334] __device_attach_driver+0x1df/0x310
[ 93.205345][ T1334] ? __pfx___device_attach_driver+0x10/0x10
[ 93.207239][ T1334] bus_for_each_drv+0x156/0x1e0
[ 93.208785][ T1334] ? __pfx_bus_for_each_drv+0x10/0x10
[ 93.210509][ T1334] ? lockdep_hardirqs_on+0x7c/0x110
[ 93.212204][ T1334] ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 93.214052][ T1334] __device_attach+0x1e4/0x4b0
[ 93.215682][ T1334] ? __pfx___device_attach+0x10/0x10
[ 93.217417][ T1334] ? do_raw_spin_unlock+0x172/0x230
[ 93.219094][ T1334] bus_probe_device+0x17f/0x1c0
[ 93.220661][ T1334] device_add+0x1148/0x1a70
[ 93.222131][ T1334] ? __pfx_device_add+0x10/0x10
[ 93.223662][ T1334] ? usb_create_ep_devs+0x1f7/0x2b0
[ 93.225302][ T1334] ? create_intf_ep_devs.isra.0+0x195/0x200
[ 93.227197][ T1334] usb_set_configuration+0x1187/0x1e20
[ 93.228910][ T1334] ? __pfx_usb_generic_driver_probe+0x10/0x10
[ 93.230784][ T1334] usb_generic_driver_probe+0xb1/0x110
[ 93.232573][ T1334] usb_probe_device+0xec/0x3e0
[ 93.234107][ T1334] ? __pfx_usb_probe_device+0x10/0x10
[ 93.235791][ T1334] really_probe+0x23e/0xa90
[ 93.237256][ T1334] __driver_probe_device+0x1de/0x440
[ 93.238911][ T1334] ? usb_driver_applicable+0x1c7/0x220
[ 93.240633][ T1334] driver_probe_device+0x4c/0x1b0
[ 93.242247][ T1334] __device_attach_driver+0x1df/0x310
[ 93.243944][ T1334] ? __pfx___device_attach_driver+0x10/0x10
[ 93.245828][ T1334] bus_for_each_drv+0x156/0x1e0
[ 93.247386][ T1334] ? __pfx_bus_for_each_drv+0x10/0x10
[ 93.249067][ T1334] ? lockdep_hardirqs_on+0x7c/0x110
[ 93.250648][ T1334] ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 93.252490][ T1334] __device_attach+0x1e4/0x4b0
[ 93.254034][ T1334] ? __pfx___device_attach+0x10/0x10
[ 93.255679][ T1334] ? do_raw_spin_unlock+0x172/0x230
[ 93.257348][ T1334] bus_probe_device+0x17f/0x1c0
[ 93.258886][ T1334] device_add+0x1148/0x1a70
[ 93.260323][ T1334] ? __pfx_device_add+0x10/0x10
[ 93.261865][ T1334] ? usb_detect_static_quirks+0x335/0x3e0
[ 93.263666][ T1334] ? usb_cache_string+0xf2/0x150
[ 93.265200][ T1334] usb_new_device+0xd07/0x1a20
[ 93.266729][ T1334] ? __pfx_usb_new_device+0x10/0x10
[ 93.268428][ T1334] ? mark_held_locks+0x49/0x80
[ 93.269928][ T1334] hub_event+0x2eb7/0x4fa0
[ 93.271372][ T1334] ? __pfx_hub_event+0x10/0x10
[ 93.272973][ T1334] ? debug_object_deactivate+0x1ec/0x3a0
[ 93.274731][ T1334] ? rcu_is_watching+0x12/0xc0
[ 93.276277][ T1334] process_one_work+0x9cc/0x1b70
[ 93.277826][ T1334] ? __pfx_hcd_resume_work+0x10/0x10
[ 93.279492][ T1334] ? __pfx_process_one_work+0x10/0x10
[ 93.281158][ T1334] ? assign_work+0x1a0/0x250
[ 93.282674][ T1334] worker_thread+0x6c8/0xf10
[ 93.284147][ T1334] ? __kthread_parkme+0x19e/0x250
[ 93.285714][ T1334] ? __pfx_worker_thread+0x10/0x10
[ 93.287317][ T1334] kthread+0x3c2/0x780
[ 93.288590][ T1334] ? __pfx_kthread+0x10/0x10
[ 93.290029][ T1334] ? __pfx_kthread+0x10/0x10
[ 93.291517][ T1334] ? __pfx_kthread+0x10/0x10
[ 93.293085][ T1334] ? __pfx_kthread+0x10/0x10
[ 93.294495][ T1334] ? rcu_is_watching+0x12/0xc0
[ 93.296007][ T1334] ? __pfx_kthread+0x10/0x10
[ 93.297474][ T1334] ret_from_fork+0x45/0x80
[ 93.298859][ T1334] ? __pfx_kthread+0x10/0x10
[ 93.300315][ T1334] ret_from_fork_asm+0x1a/0x30
[ 93.301871][ T1334]
[ 93.303605][ T1334] Kernel Offset: disabled
[ 93.304983][ T1334] Rebooting in 86400 seconds..