Warning: Permanently added '10.128.0.167' (ED25519) to the list of known hosts.
2026/06/10 16:45:39 parsed 1 programs
[ 25.648382][ T28] audit: type=1400 audit(1781109939.223:64): avc: denied { node_bind } for pid=295 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[ 25.669158][ T28] audit: type=1400 audit(1781109939.223:65): avc: denied { module_request } for pid=295 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[ 26.781437][ T28] audit: type=1400 audit(1781109940.353:66): avc: denied { mounton } for pid=303 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[ 26.784699][ T303] cgroup: Unknown subsys name 'net'
[ 26.804199][ T28] audit: type=1400 audit(1781109940.353:67): avc: denied { mount } for pid=303 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 26.831473][ T28] audit: type=1400 audit(1781109940.383:68): avc: denied { unmount } for pid=303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 26.831908][ T303] cgroup: Unknown subsys name 'devices'
[ 26.945811][ T303] cgroup: Unknown subsys name 'hugetlb'
[ 26.951434][ T303] cgroup: Unknown subsys name 'rlimit'
[ 27.094264][ T28] audit: type=1400 audit(1781109940.673:69): avc: denied { setattr } for pid=303 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 27.117563][ T28] audit: type=1400 audit(1781109940.673:70): avc: denied { create } for pid=303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 27.138285][ T28] audit: type=1400 audit(1781109940.673:71): avc: denied { write } for pid=303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 27.156076][ T306] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped).
[ 27.159299][ T28] audit: type=1400 audit(1781109940.673:72): avc: denied { read } for pid=303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[ 27.187368][ T28] audit: type=1400 audit(1781109940.673:73): avc: denied { mounton } for pid=303 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[ 27.214476][ T303] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 27.877906][ T308] request_module fs-gadgetfs succeeded, but still no fs?
[ 28.008970][ T317] bridge0: port 1(bridge_slave_0) entered blocking state
[ 28.016077][ T317] bridge0: port 1(bridge_slave_0) entered disabled state
[ 28.023589][ T317] device bridge_slave_0 entered promiscuous mode
[ 28.030588][ T317] bridge0: port 2(bridge_slave_1) entered blocking state
[ 28.037742][ T317] bridge0: port 2(bridge_slave_1) entered disabled state
[ 28.045225][ T317] device bridge_slave_1 entered promiscuous mode
[ 28.091987][ T317] bridge0: port 2(bridge_slave_1) entered blocking state
[ 28.099093][ T317] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 28.106455][ T317] bridge0: port 1(bridge_slave_0) entered blocking state
[ 28.113491][ T317] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 28.135399][ T8] bridge0: port 1(bridge_slave_0) entered disabled state
[ 28.142673][ T8] bridge0: port 2(bridge_slave_1) entered disabled state
[ 28.150281][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 28.157963][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 28.167090][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 28.175928][ T8] bridge0: port 1(bridge_slave_0) entered blocking state
[ 28.182978][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 28.193050][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 28.201286][ T8] bridge0: port 2(bridge_slave_1) entered blocking state
[ 28.208352][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 28.221222][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 28.231002][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 28.246729][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 28.258239][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 28.266545][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 28.274093][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 28.282273][ T317] device veth0_vlan entered promiscuous mode
[ 28.294128][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 28.303335][ T317] device veth1_macvtap entered promiscuous mode
[ 28.313874][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 28.324211][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 28.360798][ T317] syz-executor (317) used greatest stack depth: 22240 bytes left
[ 29.105473][ T43] device bridge_slave_1 left promiscuous mode
[ 29.111872][ T43] bridge0: port 2(bridge_slave_1) entered disabled state
[ 29.119728][ T43] device bridge_slave_0 left promiscuous mode
[ 29.143636][ T43] bridge0: port 1(bridge_slave_0) entered disabled state
[ 29.155128][ T43] device veth1_macvtap left promiscuous mode
[ 29.161198][ T43] device veth0_vlan left promiscuous mode
2026/06/10 16:45:42 executed programs: 0
[ 29.313166][ T370] bridge0: port 1(bridge_slave_0) entered blocking state
[ 29.320283][ T370] bridge0: port 1(bridge_slave_0) entered disabled state
[ 29.328483][ T370] device bridge_slave_0 entered promiscuous mode
[ 29.335842][ T370] bridge0: port 2(bridge_slave_1) entered blocking state
[ 29.342886][ T370] bridge0: port 2(bridge_slave_1) entered disabled state
[ 29.350607][ T370] device bridge_slave_1 entered promiscuous mode
[ 29.397133][ T370] bridge0: port 2(bridge_slave_1) entered blocking state
[ 29.404214][ T370] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 29.411478][ T370] bridge0: port 1(bridge_slave_0) entered blocking state
[ 29.418568][ T370] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 29.439183][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 29.446873][ T318] bridge0: port 1(bridge_slave_0) entered disabled state
[ 29.454610][ T318] bridge0: port 2(bridge_slave_1) entered disabled state
[ 29.464354][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 29.472548][ T318] bridge0: port 1(bridge_slave_0) entered blocking state
[ 29.479639][ T318] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 29.494834][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 29.502975][ T318] bridge0: port 2(bridge_slave_1) entered blocking state
[ 29.510041][ T318] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 29.517528][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 29.532426][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 29.546695][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 29.558483][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 29.566771][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 29.574362][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 29.582535][ T370] device veth0_vlan entered promiscuous mode
[ 29.593419][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 29.603275][ T370] device veth1_macvtap entered promiscuous mode
[ 29.614132][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 29.624497][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 29.913695][ T221] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[ 30.094754][ T221] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 30.105704][ T221] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 30.114776][ T221] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 30.123913][ T221] usb 3-1: config 0 descriptor??
[ 30.331502][ T221] usbhid 3-1:0.0: can't add hid device: -71
[ 30.337580][ T221] usbhid: probe of 3-1:0.0 failed with error -71
[ 30.345135][ T221] usb 3-1: USB disconnect, device number 2
[ 30.893622][ T221] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[ 31.074712][ T221] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 31.085647][ T221] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40
[ 31.094746][ T221] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 31.103319][ T221] usb 3-1: config 0 descriptor??
[ 31.924012][ T221] aiptek 3-1:0.0: Aiptek using 400 ms programming speed
[ 31.931491][ T221] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input4
[ 31.992026][ C1] ================================================================================
[ 32.001410][ C1] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:741:31
[ 32.010005][ C1] index 4775 is out of range for type 'const int[34]'
[ 32.016785][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0
[ 32.023805][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 32.033868][ C1] Call Trace:
[ 32.037168][ C1]
[ 32.040010][ C1] __dump_stack+0x21/0x24
[ 32.044347][ C1] dump_stack_lvl+0x110/0x170
[ 32.049021][ C1] ? __cfi_dump_stack_lvl+0x8/0x8
[ 32.054061][ C1] dump_stack+0x15/0x24
[ 32.058216][ C1] ubsan_epilogue+0xe/0x40
[ 32.062640][ C1] __ubsan_handle_out_of_bounds+0xdf/0xf0
[ 32.068364][ C1] ? __kasan_check_write+0x14/0x20
[ 32.073484][ C1] aiptek_irq+0x208d/0x29b0
[ 32.078047][ C1] ? kcov_remote_start+0xe8/0x370
[ 32.083076][ C1] ? usb_unanchor_urb+0xa1/0xc0
[ 32.087931][ C1] __usb_hcd_giveback_urb+0x364/0x520
[ 32.093322][ C1] usb_hcd_giveback_urb+0x11c/0x410
[ 32.098528][ C1] dummy_timer+0x88c/0x3070
[ 32.103046][ C1] ? __kasan_check_write+0x14/0x20
[ 32.108161][ C1] ? __cfi_dummy_timer+0x10/0x10
[ 32.113099][ C1] ? timerqueue_del+0xd3/0x120
[ 32.117863][ C1] ? __cfi_dummy_timer+0x10/0x10
[ 32.122796][ C1] __hrtimer_run_queues+0x3bb/0x8e0
[ 32.127998][ C1] ? hrtimer_interrupt+0x8c0/0x8c0
[ 32.133111][ C1] hrtimer_run_softirq+0x19b/0x260
[ 32.138218][ C1] handle_softirqs+0x1d7/0x600
[ 32.142983][ C1] ? irqtime_account_irq+0xc4/0x240
[ 32.148188][ C1] __irq_exit_rcu+0x52/0xf0
[ 32.152699][ C1] irq_exit_rcu+0x9/0x10
[ 32.156948][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0
[ 32.162592][ C1]
[ 32.165531][ C1]
[ 32.168471][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20
[ 32.174455][ C1] RIP: 0010:default_idle+0xf/0x20
[ 32.179481][ C1] Code: 37 e3 b4 fc e9 3d ff ff ff 00 00 90 90 90 90 90 90 90 90 90 90 90 b8 0c 67 40 a5 55 48 89 e5 66 90 0f 00 2d 23 f3 63 00 fb f4 <5d> c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 90 90 90 90 90
[ 32.199085][ C1] RSP: 0018:ffffc90000147dd8 EFLAGS: 00000257
[ 32.205166][ C1] RAX: ffff8881f6f00000 RBX: ffff888100332880 RCX: f0ec5b307d700c00
[ 32.213153][ C1] RDX: 0000000000000001 RSI: ffffffff85ca8e00 RDI: ffffffff85ca8dc0
[ 32.221123][ C1] RBP: ffffc90000147dd8 R08: ffff8881f6f348b3 R09: 1ffff1103ede6916
[ 32.229091][ C1] R10: 0000000000000000 R11: ffffffff85023e50 R12: dffffc0000000000
[ 32.237058][ C1] R13: 0000000000000001 R14: ffff888100332880 R15: dffffc0000000000
[ 32.245031][ C1] ? __cfi_default_idle+0x10/0x10
[ 32.250061][ C1] arch_cpu_idle+0x1c/0x20
[ 32.254472][ C1] default_idle_call+0x71/0x1d0
[ 32.259325][ C1] do_idle+0x354/0x640
[ 32.263393][ C1] ? ct_irq_exit+0x9/0x10
[ 32.267720][ C1] ? sysvec_call_function_single+0x61/0xc0
[ 32.273557][ C1] ? idle_inject_timer_fn+0x60/0x60
[ 32.278788][ C1] cpu_startup_entry+0x43/0x60
[ 32.283554][ C1] start_secondary+0x119/0x120
[ 32.288333][ C1] secondary_startup_64_no_verify+0xce/0xdb
[ 32.294233][ C1]
[ 32.297282][ C1] ================================================================================
[ 32.306562][ C1] ==================================================================
[ 32.314614][ C1] BUG: KASAN: global-out-of-bounds in aiptek_irq+0x20ab/0x29b0
[ 32.322159][ C1] Read of size 4 at addr ffffffff85e6f19c by task swapper/1/0
[ 32.329627][ C1]
[ 32.331955][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0
[ 32.338968][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 32.349638][ C1] Call Trace:
[ 32.352911][ C1]
[ 32.355752][ C1] __dump_stack+0x21/0x24
[ 32.360088][ C1] dump_stack_lvl+0x110/0x170
[ 32.365028][ C1] ? __cfi_dump_stack_lvl+0x8/0x8
[ 32.370056][ C1] ? _printk+0xda/0x128
[ 32.374209][ C1] ? aiptek_irq+0x20ab/0x29b0
[ 32.378887][ C1] print_address_description+0x71/0x200
[ 32.384451][ C1] print_report+0x4a/0x60
[ 32.388779][ C1] kasan_report+0x122/0x150
[ 32.393305][ C1] ? aiptek_irq+0x20ab/0x29b0
[ 32.397986][ C1] __asan_report_load4_noabort+0x14/0x20
[ 32.403629][ C1] aiptek_irq+0x20ab/0x29b0
[ 32.408164][ C1] ? kcov_remote_start+0xe8/0x370
[ 32.413202][ C1] ? usb_unanchor_urb+0xa1/0xc0
[ 32.418065][ C1] __usb_hcd_giveback_urb+0x364/0x520
[ 32.423446][ C1] usb_hcd_giveback_urb+0x11c/0x410
[ 32.428668][ C1] dummy_timer+0x88c/0x3070
[ 32.433180][ C1] ? __kasan_check_write+0x14/0x20
[ 32.438383][ C1] ? __cfi_dummy_timer+0x10/0x10
[ 32.443322][ C1] ? timerqueue_del+0xd3/0x120
[ 32.448085][ C1] ? __cfi_dummy_timer+0x10/0x10
[ 32.453024][ C1] __hrtimer_run_queues+0x3bb/0x8e0
[ 32.458229][ C1] ? hrtimer_interrupt+0x8c0/0x8c0
[ 32.463348][ C1] hrtimer_run_softirq+0x19b/0x260
[ 32.468454][ C1] handle_softirqs+0x1d7/0x600
[ 32.473216][ C1] ? irqtime_account_irq+0xc4/0x240
[ 32.478425][ C1] __irq_exit_rcu+0x52/0xf0
[ 32.482924][ C1] irq_exit_rcu+0x9/0x10
[ 32.487167][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0
[ 32.492806][ C1]
[ 32.495732][ C1]
[ 32.498656][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20
[ 32.504643][ C1] RIP: 0010:default_idle+0xf/0x20
[ 32.509669][ C1] Code: 37 e3 b4 fc e9 3d ff ff ff 00 00 90 90 90 90 90 90 90 90 90 90 90 b8 0c 67 40 a5 55 48 89 e5 66 90 0f 00 2d 23 f3 63 00 fb f4 <5d> c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 90 90 90 90 90
[ 32.529269][ C1] RSP: 0018:ffffc90000147dd8 EFLAGS: 00000257
[ 32.535330][ C1] RAX: ffff8881f6f00000 RBX: ffff888100332880 RCX: f0ec5b307d700c00
[ 32.543318][ C1] RDX: 0000000000000001 RSI: ffffffff85ca8e00 RDI: ffffffff85ca8dc0
[ 32.551376][ C1] RBP: ffffc90000147dd8 R08: ffff8881f6f348b3 R09: 1ffff1103ede6916
[ 32.559345][ C1] R10: 0000000000000000 R11: ffffffff85023e50 R12: dffffc0000000000
[ 32.567313][ C1] R13: 0000000000000001 R14: ffff888100332880 R15: dffffc0000000000
[ 32.575300][ C1] ? __cfi_default_idle+0x10/0x10
[ 32.580333][ C1] arch_cpu_idle+0x1c/0x20
[ 32.584743][ C1] default_idle_call+0x71/0x1d0
[ 32.589587][ C1] do_idle+0x354/0x640
[ 32.593650][ C1] ? ct_irq_exit+0x9/0x10
[ 32.597974][ C1] ? sysvec_call_function_single+0x61/0xc0
[ 32.603805][ C1] ? idle_inject_timer_fn+0x60/0x60
[ 32.609003][ C1] cpu_startup_entry+0x43/0x60
[ 32.613768][ C1] start_secondary+0x119/0x120
[ 32.618534][ C1] secondary_startup_64_no_verify+0xce/0xdb
[ 32.624440][ C1]
[ 32.627729][ C1]
[ 32.630044][ C1] The buggy address belongs to the variable:
[ 32.636006][ C1] .str.3+0x3c/0x60
[ 32.639833][ C1]
[ 32.642147][ C1] The buggy address belongs to the physical page:
[ 32.648983][ C1] page:ffffea0000179bc0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5e6f
[ 32.659060][ C1] flags: 0x1000(reserved|zone=0)
[ 32.664025][ C1] raw: 0000000000001000 ffffea0000179bc8 ffffea0000179bc8 0000000000000000
[ 32.672602][ C1] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[ 32.681177][ C1] page dumped because: kasan: bad access detected
[ 32.687588][ C1] page_owner info is not present (never set?)
[ 32.693642][ C1]
[ 32.695962][ C1] Memory state around the buggy address:
[ 32.701584][ C1] ffffffff85e6f080: 00 00 00 00 00 00 00 00 00 01 f9 f9 04 f9 f9 f9
[ 32.709642][ C1] ffffffff85e6f100: 00 00 00 00 00 02 f9 f9 f9 f9 f9 f9 00 00 00 00
[ 32.717703][ C1] >ffffffff85e6f180: 00 00 00 04 f9 f9 f9 f9 00 00 00 00 00 00 02 f9
[ 32.725759][ C1] ^
[ 32.730604][ C1] ffffffff85e6f200: f9 f9 f9 f9 00 00 00 00 00 00 04 f9 f9 f9 f9 f9
[ 32.738660][ C1] ffffffff85e6f280: 00 00 00 00 00 00 01 f9 f9 f9 f9 f9 00 00 00 02
[ 32.746732][ C1] ==================================================================
[ 32.754782][ C1] Disabling lock debugging due to kernel taint
[ 32.760934][ C1] ================================================================================
[ 32.770306][ C1] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:763:30
[ 32.778886][ C1] index 4776 is out of range for type 'const int[34]'
[ 32.785640][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G B syzkaller #0
[ 32.794132][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 32.804187][ C1] Call Trace:
[ 32.807463][ C1]
[ 32.810307][ C1] __dump_stack+0x21/0x24
[ 32.814642][ C1] dump_stack_lvl+0x110/0x170
[ 32.819317][ C1] ? __cfi_dump_stack_lvl+0x8/0x8
[ 32.824348][ C1] dump_stack+0x15/0x24
[ 32.828502][ C1] ubsan_epilogue+0xe/0x40
[ 32.832921][ C1] __ubsan_handle_out_of_bounds+0xdf/0xf0
[ 32.838648][ C1] aiptek_irq+0x1f6d/0x29b0
[ 32.843150][ C1] __usb_hcd_giveback_urb+0x364/0x520
[ 32.848527][ C1] usb_hcd_giveback_urb+0x11c/0x410
[ 32.853734][ C1] dummy_timer+0x88c/0x3070
[ 32.858267][ C1] ? __kasan_check_write+0x14/0x20
[ 32.863381][ C1] ? __cfi_dummy_timer+0x10/0x10
[ 32.868325][ C1] ? timerqueue_del+0xd3/0x120
[ 32.873091][ C1] ? __cfi_dummy_timer+0x10/0x10
[ 32.878044][ C1] __hrtimer_run_queues+0x3bb/0x8e0
[ 32.883255][ C1] ? hrtimer_interrupt+0x8c0/0x8c0
[ 32.888390][ C1] hrtimer_run_softirq+0x19b/0x260
[ 32.893535][ C1] handle_softirqs+0x1d7/0x600
[ 32.898342][ C1] ? irqtime_account_irq+0xc4/0x240
[ 32.903588][ C1] __irq_exit_rcu+0x52/0xf0
[ 32.908146][ C1] irq_exit_rcu+0x9/0x10
[ 32.912404][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0
[ 32.918045][ C1]
[ 32.920972][ C1]
[ 32.923909][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20
[ 32.929991][ C1] RIP: 0010:default_idle+0xf/0x20
[ 32.935039][ C1] Code: 37 e3 b4 fc e9 3d ff ff ff 00 00 90 90 90 90 90 90 90 90 90 90 90 b8 0c 67 40 a5 55 48 89 e5 66 90 0f 00 2d 23 f3 63 00 fb f4 <5d> c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 90 90 90 90 90
[ 32.954731][ C1] RSP: 0018:ffffc90000147dd8 EFLAGS: 00000257
[ 32.960974][ C1] RAX: ffff8881f6f00000 RBX: ffff888100332880 RCX: f0ec5b307d700c00
[ 32.968954][ C1] RDX: 0000000000000001 RSI: ffffffff85ca8e00 RDI: ffffffff85ca8dc0
[ 32.976924][ C1] RBP: ffffc90000147dd8 R08: ffff8881f6f348b3 R09: 1ffff1103ede6916
[ 32.984899][ C1] R10: 0000000000000000 R11: ffffffff85023e50 R12: dffffc0000000000
[ 32.992897][ C1] R13: 0000000000000001 R14: ffff888100332880 R15: dffffc0000000000
[ 33.000872][ C1] ? __cfi_default_idle+0x10/0x10
[ 33.005906][ C1] arch_cpu_idle+0x1c/0x20
[ 33.010333][ C1] default_idle_call+0x71/0x1d0
[ 33.015188][ C1] do_idle+0x354/0x640
[ 33.019266][ C1] ? ct_irq_exit+0x9/0x10
[ 33.023600][ C1] ? sysvec_call_function_single+0x61/0xc0
[ 33.029466][ C1] ? idle_inject_timer_fn+0x60/0x60
[ 33.034761][ C1] cpu_startup_entry+0x43/0x60
[ 33.039534][ C1] start_secondary+0x119/0x120
[ 33.044321][ C1] secondary_startup_64_no_verify+0xce/0xdb
[ 33.050226][ C1]
[ 33.053243][ C1] ================================================================================
[ 33.068470][ T28] kauditd_printk_skb: 34 callbacks suppressed
[ 33.068484][ T28] audit: type=1400 audit(1781109946.643:108): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[ 33.101076][ T28] audit: type=1400 audit(1781109946.683:109): avc: denied { search } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 33.122920][ T28] audit: type=1400 audit(1781109946.683:110): avc: denied { write } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 33.142207][ T379] usb 3-1: USB disconnect, device number 3
[ 33.144241][ C1] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19
[ 33.163971][ T28] audit: type=1400 audit(1781109946.683:111): avc: denied { add_name } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 33.188545][ T28] audit: type=1400 audit(1781109946.683:112): avc: denied { create } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 33.209234][ T28] audit: type=1400 audit(1781109946.683:113): avc: denied { append open } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 33.232330][ T28] audit: type=1400 audit(1781109946.683:114): avc: denied { getattr } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 33.259088][ T370] syz-executor (370) used greatest stack depth: 21984 bytes left