Warning: Permanently added '10.128.0.80' (ED25519) to the list of known hosts.
2026/11/04 14:30:41 parsed 1 programs
[ 68.023559][ T31] kauditd_printk_skb: 1 callbacks suppressed
[ 68.023584][ T31] audit: type=1400 audit(1793802641.860:77): avc: denied { node_bind } for pid=2981 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
2026/11/04 14:30:41 serving rpc on tcp://40017
[ 68.025097][ T31] audit: type=1400 audit(1793802641.860:78): avc: denied { module_request } for pid=2981 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[ 71.639639][ T31] audit: type=1400 audit(1793802645.470:79): avc: denied { mounton } for pid=2991 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[ 71.641422][ T31] audit: type=1400 audit(1793802645.470:80): avc: denied { mount } for pid=2991 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 71.659112][ T2991] cgroup: Unknown subsys name 'net'
[ 71.668938][ T31] audit: type=1400 audit(1793802645.500:81): avc: denied { unmount } for pid=2991 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 71.875170][ T2991] cgroup: Unknown subsys name 'cpuset'
[ 71.885736][ T2991] cgroup: Unknown subsys name 'rlimit'
[ 72.031672][ T31] audit: type=1400 audit(1793802645.860:82): avc: denied { setattr } for pid=2991 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 72.039736][ T31] audit: type=1400 audit(1793802645.870:83): avc: denied { create } for pid=2991 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 72.041257][ T31] audit: type=1400 audit(1793802645.870:84): avc: denied { write } for pid=2991 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 72.043635][ T31] audit: type=1400 audit(1793802645.880:85): avc: denied { read } for pid=2991 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 72.147635][ T31] audit: type=1400 audit(1793802645.980:86): avc: denied { sys_module } for pid=2991 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[ 72.307876][ T2996] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped).
[ 72.349099][ T2991] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 74.116828][ T31] kauditd_printk_skb: 8 callbacks suppressed
[ 74.116878][ T31] audit: type=1400 audit(1793802647.950:95): avc: denied { execmem } for pid=2997 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 74.156690][ T31] audit: type=1400 audit(1793802647.990:96): avc: denied { read } for pid=2998 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 74.156956][ T31] audit: type=1400 audit(1793802647.990:97): avc: denied { open } for pid=2998 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 74.162484][ T31] audit: type=1400 audit(1793802647.990:98): avc: denied { mounton } for pid=2998 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[ 74.250005][ T31] audit: type=1400 audit(1793802648.080:99): avc: denied { mounton } for pid=2998 comm="syz-executor" path="/root/syzkaller.vQoxQf/syz-tmp" dev="sda1" ino=2031 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[ 74.250670][ T31] audit: type=1400 audit(1793802648.080:100): avc: denied { mount } for pid=2998 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[ 74.251630][ T31] audit: type=1400 audit(1793802648.080:101): avc: denied { mounton } for pid=2998 comm="syz-executor" path="/root/syzkaller.vQoxQf/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[ 74.258243][ T31] audit: type=1400 audit(1793802648.090:102): avc: denied { mount } for pid=2998 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[ 74.268658][ T31] audit: type=1400 audit(1793802648.090:103): avc: denied { mounton } for pid=2998 comm="syz-executor" path="/root/syzkaller.vQoxQf/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[ 74.274234][ T31] audit: type=1400 audit(1793802648.090:104): avc: denied { mounton } for pid=2998 comm="syz-executor" path="/root/syzkaller.vQoxQf/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=581 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[ 74.493227][ T2998] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 85.864596][ T3289] modprobe (3289) used greatest stack depth: 22600 bytes left
[ 93.801447][ T3063] syz-executor (3063) used greatest stack depth: 21928 bytes left
[ 94.132500][ T31] kauditd_printk_skb: 16 callbacks suppressed
[ 94.132527][ T31] audit: type=1401 audit(1793802667.970:121): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768"
[ 94.196286][ T31] audit: type=1400 audit(1793802668.030:122): avc: denied { create } for pid=3528 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
2026/11/04 14:31:08 executed programs: 0
[ 95.117432][ T31] audit: type=1400 audit(1793802668.950:123): avc: denied { create } for pid=3536 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
2026/11/04 14:31:25 executed programs: 2
[ 111.620576][ T31] audit: type=1400 audit(1793802685.450:124): avc: denied { read write } for pid=3987 comm="syz.3.17" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 111.620817][ T31] audit: type=1400 audit(1793802685.450:125): avc: denied { open } for pid=3987 comm="syz.3.17" path="/dev/raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 111.621274][ T31] audit: type=1400 audit(1793802685.450:126): avc: denied { ioctl } for pid=3987 comm="syz.3.17" path="/dev/raw-gadget" dev="devtmpfs" ino=236 ioctlcmd=0x41015500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 111.872440][ T29] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[ 112.023024][ T29] usb 4-1: New USB device found: idVendor=18d1, idProduct=1eaf, bcdDevice=0.00
[ 112.024957][ T29] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 30768, setting to 1024
[ 112.024992][ T29] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024
[ 112.027428][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 112.027456][ T29] usb 4-1: Product: syz
[ 112.027490][ T29] usb 4-1: Manufacturer: syz
[ 112.027505][ T29] usb 4-1: SerialNumber: syz
[ 112.048703][ T3987] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 113.261094][ T12] ==================================================================
[ 113.261116][ T12] BUG: KASAN: slab-out-of-bounds in gb_svc_request_handler+0x10de/0x1250
[ 113.261202][ T12] Read of size 1 at addr ffff888104ad2108 by task kworker/u8:0/12
[ 113.261241][ T12]
[ 113.261266][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(lazy)
[ 113.261310][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 113.261346][ T12] Workqueue: greybus1:0 gb_operation_work
[ 113.261411][ T12] Call Trace:
[ 113.261422][ T12]
[ 113.261435][ T12] dump_stack_lvl+0x100/0x190
[ 113.261484][ T12] print_report+0x13d/0x4b0
[ 113.261535][ T12] ? __virt_addr_valid+0x239/0x430
[ 113.261579][ T12] ? gb_svc_request_handler+0x10de/0x1250
[ 113.261608][ T12] kasan_report+0xdf/0x1c0
[ 113.261657][ T12] ? gb_svc_request_handler+0x10de/0x1250
[ 113.261702][ T12] gb_svc_request_handler+0x10de/0x1250
[ 113.261744][ T12] ? __lock_acquire+0xe8b/0x1f40
[ 113.261767][ T12] ? __pfx_gb_svc_request_handler+0x10/0x10
[ 113.261834][ T12] ? reacquire_held_locks+0xdd/0x1f0
[ 113.261865][ T12] ? lock_acquire+0x1d1/0x380
[ 113.261900][ T12] ? process_one_work+0xa2c/0x1b10
[ 113.261953][ T12] ? __pfx_gb_svc_request_handler+0x10/0x10
[ 113.261995][ T12] gb_operation_work+0xb7/0x990
[ 113.262046][ T12] process_one_work+0xac7/0x1b10
[ 113.262095][ T12] ? __pfx_process_one_work+0x10/0x10
[ 113.262151][ T12] ? lock_acquire+0x1d1/0x380
[ 113.262185][ T12] ? __pfx_gb_operation_work+0x10/0x10
[ 113.262238][ T12] worker_thread+0x5ef/0xe50
[ 113.262277][ T12] ? kthread+0x13a/0x450
[ 113.262334][ T12] ? __pfx_worker_thread+0x10/0x10
[ 113.262377][ T12] kthread+0x373/0x450
[ 113.262416][ T12] ? __pfx_kthread+0x10/0x10
[ 113.262458][ T12] ret_from_fork+0x69f/0xc90
[ 113.262500][ T12] ? __pfx_ret_from_fork+0x10/0x10
[ 113.262538][ T12] ? __switch_to+0x7f6/0x10d0
[ 113.262568][ T12] ? __switch_to_asm+0x39/0x70
[ 113.262598][ T12] ? __pfx_kthread+0x10/0x10
[ 113.262652][ T12] ret_from_fork_asm+0x1a/0x30
[ 113.262704][ T12]
[ 113.262720][ T12]
[ 113.262725][ T12] Allocated by task 0:
[ 113.262740][ T12] kasan_save_stack+0x30/0x50
[ 113.262797][ T12] kasan_save_track+0x14/0x30
[ 113.262843][ T12] __kasan_kmalloc+0x8f/0xa0
[ 113.262890][ T12] __kmalloc_noprof+0x315/0x7e0
[ 113.262914][ T12] gb_operation_message_alloc+0x9b/0x2c0
[ 113.262967][ T12] gb_operation_create_common+0x9f/0x710
[ 113.263011][ T12] gb_connection_recv+0x1dc/0x1050
[ 113.263056][ T12] greybus_data_rcvd+0x244/0x600
[ 113.263075][ T12] cport_in_callback+0x1fb/0x280
[ 113.263129][ T12] __usb_hcd_giveback_urb+0x38e/0x610
[ 113.263167][ T12] usb_hcd_giveback_urb+0x3ca/0x4a0
[ 113.263207][ T12] dummy_timer+0xdb5/0x3840
[ 113.263237][ T12] __hrtimer_run_queues+0x448/0x9a0
[ 113.263285][ T12] hrtimer_run_softirq+0x1ca/0x360
[ 113.263326][ T12] handle_softirqs+0x209/0xa00
[ 113.263376][ T12] __irq_exit_rcu+0x17a/0x220
[ 113.263409][ T12] irq_exit_rcu+0x9/0x30
[ 113.263462][ T12] sysvec_apic_timer_interrupt+0x8f/0xb0
[ 113.263495][ T12] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 113.263528][ T12]
[ 113.263539][ T12] The buggy address belongs to the object at ffff888104ad2100
[ 113.263539][ T12] which belongs to the cache kmalloc-8 of size 8
[ 113.263556][ T12] The buggy address is located 1 bytes to the right of
[ 113.263556][ T12] allocated 7-byte region [ffff888104ad2100, ffff888104ad2107)
[ 113.263578][ T12]
[ 113.263595][ T12] The buggy address belongs to the physical page:
[ 113.263609][ T12] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888104ad2600 pfn:0x104ad2
[ 113.263645][ T12] flags: 0x200000000000200(workingset|node=0|zone=2)
[ 113.263679][ T12] page_type: f5(slab)
[ 113.263708][ T12] raw: 0200000000000200 ffff888100041500 ffffea00040eb410 ffffea000403ef50
[ 113.263735][ T12] raw: ffff888104ad2600 000000000080007a 00000000f5000000 0000000000000000
[ 113.263762][ T12] page dumped because: kasan: bad access detected
[ 113.263778][ T12] page_owner tracks the page as allocated
[ 113.263794][ T12] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 5446373684
[ 113.263839][ T12] post_alloc_hook+0xfd/0x120
[ 113.263882][ T12] get_page_from_freelist+0xf4b/0x3440
[ 113.263936][ T12] __alloc_frozen_pages_noprof+0x299/0x2d50
[ 113.263986][ T12] new_slab+0xb1/0x6d0
[ 113.264010][ T12] refill_objects+0xe3/0x410
[ 113.264037][ T12] __pcs_replace_empty_main+0x35e/0x650
[ 113.264057][ T12] __kmalloc_noprof+0x617/0x7e0
[ 113.264101][ T12] acpi_ns_internalize_name+0x161/0x2e0
[ 113.264136][ T12] acpi_ns_get_node_unlocked+0x18c/0x500
[ 113.264168][ T12] acpi_ns_get_node+0x6c/0xf0
[ 113.264199][ T12] acpi_ns_evaluate+0xb01/0x1670
[ 113.264245][ T12] acpi_ut_evaluate_object+0xf7/0x610
[ 113.264291][ T12] acpi_ut_execute_power_methods+0x1f9/0x3c0
[ 113.264344][ T12] acpi_get_object_info+0xa43/0xbe0
[ 113.264370][ T12] acpi_init_device_object+0xc12/0x1a90
[ 113.264430][ T12] acpi_add_single_object+0xe8/0x1a10
[ 113.264472][ T12] page last free pid 1 tgid 1 ts 5222696283 stack trace:
[ 113.264493][ T12] __free_frozen_pages+0x714/0xfc0
[ 113.264531][ T12] qlist_free_all+0x47/0xf0
[ 113.264579][ T12] kasan_quarantine_remove_cache+0x168/0x190
[ 113.264626][ T12] kmem_cache_shrink+0xd/0x20
[ 113.264662][ T12] acpi_os_purge_cache+0x15/0x20
[ 113.264697][ T12] acpi_purge_cached_objects+0xa3/0x140
[ 113.264745][ T12] acpi_initialize_objects+0x8b/0x100
[ 113.264811][ T12] acpi_init+0x1b0/0x840
[ 113.264839][ T12] do_one_initcall+0x11c/0x6f0
[ 113.264868][ T12] kernel_init_freeable+0x6ea/0x7b0
[ 113.264927][ T12] kernel_init+0x21/0x1e0
[ 113.264966][ T12] ret_from_fork+0x69f/0xc90
[ 113.265003][ T12] ret_from_fork_asm+0x1a/0x30
[ 113.265033][ T12]
[ 113.265038][ T12] Memory state around the buggy address:
[ 113.265064][ T12] ffff888104ad2000: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc
[ 113.265086][ T12] ffff888104ad2080: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc
[ 113.265108][ T12] >ffff888104ad2100: 07 fc fc fc fa fc fc fc 06 fc fc fc 06 fc fc fc
[ 113.265124][ T12] ^
[ 113.265138][ T12] ffff888104ad2180: 06 fc fc fc 06 fc fc fc 06 fc fc fc 06 fc fc fc
[ 113.265164][ T12] ffff888104ad2200: 06 fc fc fc 06 fc fc fc fa fc fc fc fa fc fc fc
[ 113.265176][ T12] ==================================================================
[ 113.265320][ T12] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 114.028243][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(lazy)
[ 114.037810][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 114.049149][ T12] Workqueue: greybus1:0 gb_operation_work
[ 114.055050][ T12] Call Trace:
[ 114.058412][ T12]
[ 114.061386][ T12] dump_stack_lvl+0x100/0x190
[ 114.066123][ T12] vpanic+0x2dc/0x6f8
[ 114.070274][ T12] panic+0xd1/0xe0
[ 114.074685][ T12] ? __pfx_panic+0x10/0x10
[ 114.079347][ T12] check_panic_on_warn.cold+0x19/0x34
[ 114.084831][ T12] end_report.part.0+0x3a/0x90
[ 114.089898][ T12] kasan_report.cold+0xe/0x18
[ 114.094721][ T12] ? gb_svc_request_handler+0x10de/0x1250
[ 114.100914][ T12] gb_svc_request_handler+0x10de/0x1250
[ 114.106709][ T12] ? __lock_acquire+0xe8b/0x1f40
[ 114.111727][ T12] ? __pfx_gb_svc_request_handler+0x10/0x10
[ 114.117702][ T12] ? reacquire_held_locks+0xdd/0x1f0
[ 114.123152][ T12] ? lock_acquire+0x1d1/0x380
[ 114.128649][ T12] ? process_one_work+0xa2c/0x1b10
[ 114.133868][ T12] ? __pfx_gb_svc_request_handler+0x10/0x10
[ 114.140499][ T12] gb_operation_work+0xb7/0x990
[ 114.146374][ T12] process_one_work+0xac7/0x1b10
[ 114.151966][ T12] ? __pfx_process_one_work+0x10/0x10
[ 114.157887][ T12] ? lock_acquire+0x1d1/0x380
[ 114.163617][ T12] ? __pfx_gb_operation_work+0x10/0x10
[ 114.169434][ T12] worker_thread+0x5ef/0xe50
[ 114.174254][ T12] ? kthread+0x13a/0x450
[ 114.178678][ T12] ? __pfx_worker_thread+0x10/0x10
[ 114.184062][ T12] kthread+0x373/0x450
[ 114.188468][ T12] ? __pfx_kthread+0x10/0x10
[ 114.193606][ T12] ret_from_fork+0x69f/0xc90
[ 114.198519][ T12] ? __pfx_ret_from_fork+0x10/0x10
[ 114.204697][ T12] ? __switch_to+0x7f6/0x10d0
[ 114.209472][ T12] ? __switch_to_asm+0x39/0x70
[ 114.214458][ T12] ? __pfx_kthread+0x10/0x10
[ 114.219144][ T12] ret_from_fork_asm+0x1a/0x30
[ 114.223992][ T12]
[ 114.227651][ T12] Kernel Offset: disabled
[ 114.232047][ T12] Rebooting in 86400 seconds..