Warning: Permanently added '10.128.0.23' (ED25519) to the list of known hosts. 2026/07/28 07:10:13 parsed 1 programs 2026/07/28 07:10:13 serving rpc on tcp://33515 [ 31.580377][ T28] audit: type=1400 audit(1785222613.041:64): avc: denied { node_bind } for pid=294 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 31.601198][ T28] audit: type=1400 audit(1785222613.051:65): avc: denied { module_request } for pid=294 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 32.810992][ T28] audit: type=1400 audit(1785222614.271:66): avc: denied { mounton } for pid=301 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 32.814969][ T301] cgroup: Unknown subsys name 'net' [ 32.834137][ T28] audit: type=1400 audit(1785222614.281:67): avc: denied { mount } for pid=301 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 32.861375][ T28] audit: type=1400 audit(1785222614.301:68): avc: denied { unmount } for pid=301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 32.862269][ T301] cgroup: Unknown subsys name 'devices' [ 33.003932][ T301] cgroup: Unknown subsys name 'hugetlb' [ 33.009794][ T301] cgroup: Unknown subsys name 'rlimit' [ 33.123010][ T28] audit: type=1400 audit(1785222614.591:69): avc: denied { setattr } for pid=301 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.146385][ T28] audit: type=1400 audit(1785222614.591:70): avc: denied { create } for pid=301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.167152][ T28] audit: type=1400 audit(1785222614.591:71): avc: denied { write } for pid=301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.187571][ T28] audit: type=1400 audit(1785222614.591:72): avc: denied { read } for pid=301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 33.207877][ T28] audit: type=1400 audit(1785222614.591:73): avc: denied { mounton } for pid=301 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 33.241914][ T304] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 33.266758][ T301] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 34.047940][ T309] request_module fs-gadgetfs succeeded, but still no fs? [ 34.424691][ T334] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.431912][ T334] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.439442][ T334] device bridge_slave_0 entered promiscuous mode [ 34.446828][ T334] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.453925][ T334] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.461357][ T334] device bridge_slave_1 entered promiscuous mode [ 34.509614][ T334] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.516812][ T334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.524392][ T334] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.531715][ T334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.555416][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.563148][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.570422][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.579785][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.588237][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.595449][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.612267][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.620475][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.627705][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.635525][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.645106][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.659646][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.672046][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.680229][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.688075][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.697398][ T334] device veth0_vlan entered promiscuous mode [ 34.711076][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.720811][ T334] device veth1_macvtap entered promiscuous mode [ 34.731096][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.743216][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2026/07/28 07:10:16 executed programs: 0 [ 35.444417][ T371] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.451576][ T371] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.459424][ T371] device bridge_slave_0 entered promiscuous mode [ 35.467045][ T371] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.474375][ T371] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.482202][ T371] device bridge_slave_1 entered promiscuous mode [ 35.532694][ T371] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.539777][ T371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.547148][ T371] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.554224][ T371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.575891][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.583670][ T340] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.591039][ T340] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.600446][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.608889][ T340] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.616308][ T340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.625747][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.634053][ T340] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.641177][ T340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.654413][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.664154][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.679081][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.691213][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.699676][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.707556][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.716703][ T371] device veth0_vlan entered promiscuous mode [ 35.728364][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.737967][ T371] device veth1_macvtap entered promiscuous mode [ 35.748800][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.759124][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.051806][ T24] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 36.233041][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.244088][ T24] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 36.253236][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.261716][ T43] device bridge_slave_1 left promiscuous mode [ 36.265230][ T24] usb 3-1: config 0 descriptor?? [ 36.272853][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.280589][ T43] device bridge_slave_0 left promiscuous mode [ 36.286925][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.295275][ T43] device veth1_macvtap left promiscuous mode [ 36.301425][ T43] device veth0_vlan left promiscuous mode [ 36.484789][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 36.490820][ T24] usbhid: probe of 3-1:0.0 failed with error -71 [ 36.497983][ T24] usb 3-1: USB disconnect, device number 2 [ 37.051773][ T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 37.233185][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.244511][ T24] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 37.253725][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.262403][ T24] usb 3-1: config 0 descriptor?? [ 38.082221][ T24] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 38.089794][ T24] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input4 [ 38.475151][ C1] ================================================================================ [ 38.484468][ C1] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:741:31 [ 38.493103][ C1] index 38062 is out of range for type 'const int[34]' [ 38.499991][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 38.507030][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 38.517209][ C1] Call Trace: [ 38.520504][ C1] [ 38.523427][ C1] __dump_stack+0x21/0x24 [ 38.527843][ C1] dump_stack_lvl+0x110/0x170 [ 38.532535][ C1] ? __cfi_dump_stack_lvl+0x8/0x8 [ 38.538219][ C1] dump_stack+0x15/0x24 [ 38.542403][ C1] ubsan_epilogue+0xe/0x40 [ 38.546845][ C1] __ubsan_handle_out_of_bounds+0xdf/0xf0 [ 38.552615][ C1] aiptek_irq+0x2045/0x29b0 [ 38.557221][ C1] ? kcov_remote_start+0xef/0x370 [ 38.562275][ C1] ? usb_unanchor_urb+0xa1/0xc0 [ 38.567149][ C1] __usb_hcd_giveback_urb+0x360/0x520 [ 38.572556][ C1] usb_hcd_giveback_urb+0x11f/0x3e0 [ 38.578089][ C1] dummy_timer+0xa25/0x3270 [ 38.582699][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 38.587680][ C1] ? timerqueue_del+0xd3/0x120 [ 38.592468][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 38.597454][ C1] __hrtimer_run_queues+0x398/0x890 [ 38.602693][ C1] ? hrtimer_interrupt+0x8c0/0x8c0 [ 38.608147][ C1] hrtimer_run_softirq+0x19b/0x260 [ 38.613281][ C1] handle_softirqs+0x1d7/0x600 [ 38.618089][ C1] __irq_exit_rcu+0x52/0xf0 [ 38.622602][ C1] irq_exit_rcu+0x9/0x10 [ 38.626853][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 38.632517][ C1] [ 38.635459][ C1] [ 38.638412][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 38.644454][ C1] RIP: 0010:default_idle+0xf/0x20 [ 38.649498][ C1] Code: cc 00 00 cc cc 00 00 cc cc 00 00 90 90 90 90 90 90 90 90 90 90 90 b8 0c 67 40 a5 55 48 89 e5 66 90 0f 00 2d 53 5b 65 00 fb f4 <5d> c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 90 90 90 90 90 [ 38.669314][ C1] RSP: 0018:ffffc90000147dd8 EFLAGS: 00000257 [ 38.675403][ C1] RAX: ffff8881f6f00000 RBX: ffff888100332880 RCX: ccaa5d67bcf8f900 [ 38.683404][ C1] RDX: 0000000000000001 RSI: ffffffff85ca6940 RDI: ffffffff85ca6900 [ 38.691400][ C1] RBP: ffffc90000147dd8 R08: ffff8881f6f348b3 R09: 1ffff1103ede6916 [ 38.699385][ C1] R10: 0000000000000000 R11: ffffffff8500d380 R12: dffffc0000000000 [ 38.707371][ C1] R13: 0000000000000001 R14: ffff888100332880 R15: dffffc0000000000 [ 38.715359][ C1] ? __cfi_default_idle+0x10/0x10 [ 38.720422][ C1] arch_cpu_idle+0x1c/0x20 [ 38.724937][ C1] default_idle_call+0x71/0x1d0 [ 38.729806][ C1] do_idle+0x354/0x640 [ 38.733887][ C1] ? ct_irq_exit+0x9/0x10 [ 38.738254][ C1] ? irqentry_exit+0x30/0x40 [ 38.742853][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 38.748065][ C1] cpu_startup_entry+0x43/0x60 [ 38.752835][ C1] start_secondary+0x119/0x120 [ 38.757604][ C1] secondary_startup_64_no_verify+0xce/0xdb [ 38.763551][ C1] [ 38.766579][ C1] ================================================================================ [ 38.776042][ C1] ================================================================================ [ 38.785335][ C1] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:763:30 [ 38.793930][ C1] index 38063 is out of range for type 'const int[34]' [ 38.800792][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 38.808365][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 38.818442][ C1] Call Trace: [ 38.821735][ C1] [ 38.824594][ C1] __dump_stack+0x21/0x24 [ 38.828936][ C1] dump_stack_lvl+0x110/0x170 [ 38.833620][ C1] ? __cfi_dump_stack_lvl+0x8/0x8 [ 38.839008][ C1] dump_stack+0x15/0x24 [ 38.843191][ C1] ubsan_epilogue+0xe/0x40 [ 38.847663][ C1] __ubsan_handle_out_of_bounds+0xdf/0xf0 [ 38.853408][ C1] aiptek_irq+0x1f14/0x29b0 [ 38.858042][ C1] ? kcov_remote_start+0xef/0x370 [ 38.863282][ C1] __usb_hcd_giveback_urb+0x360/0x520 [ 38.868679][ C1] usb_hcd_giveback_urb+0x11f/0x3e0 [ 38.873942][ C1] dummy_timer+0xa25/0x3270 [ 38.878482][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 38.883539][ C1] ? timerqueue_del+0xd3/0x120 [ 38.888456][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 38.893426][ C1] __hrtimer_run_queues+0x398/0x890 [ 38.898688][ C1] ? hrtimer_interrupt+0x8c0/0x8c0 [ 38.903929][ C1] hrtimer_run_softirq+0x19b/0x260 [ 38.909065][ C1] handle_softirqs+0x1d7/0x600 [ 38.913851][ C1] __irq_exit_rcu+0x52/0xf0 [ 38.918377][ C1] irq_exit_rcu+0x9/0x10 [ 38.922635][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 38.928287][ C1] [ 38.931223][ C1] [ 38.934181][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 38.940295][ C1] RIP: 0010:default_idle+0xf/0x20 [ 38.945336][ C1] Code: cc 00 00 cc cc 00 00 cc cc 00 00 90 90 90 90 90 90 90 90 90 90 90 b8 0c 67 40 a5 55 48 89 e5 66 90 0f 00 2d 53 5b 65 00 fb f4 <5d> c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 90 90 90 90 90 [ 38.965050][ C1] RSP: 0018:ffffc90000147dd8 EFLAGS: 00000257 [ 38.971133][ C1] RAX: ffff8881f6f00000 RBX: ffff888100332880 RCX: ccaa5d67bcf8f900 [ 38.979233][ C1] RDX: 0000000000000001 RSI: ffffffff85ca6940 RDI: ffffffff85ca6900 [ 38.987215][ C1] RBP: ffffc90000147dd8 R08: ffff8881f6f348b3 R09: 1ffff1103ede6916 [ 38.995227][ C1] R10: 0000000000000000 R11: ffffffff8500d380 R12: dffffc0000000000 [ 39.003245][ C1] R13: 0000000000000001 R14: ffff888100332880 R15: dffffc0000000000 [ 39.011314][ C1] ? __cfi_default_idle+0x10/0x10 [ 39.016358][ C1] arch_cpu_idle+0x1c/0x20 [ 39.020785][ C1] default_idle_call+0x71/0x1d0 [ 39.025646][ C1] do_idle+0x354/0x640 [ 39.029746][ C1] ? ct_irq_exit+0x9/0x10 [ 39.034093][ C1] ? irqentry_exit+0x30/0x40 [ 39.038699][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 39.043949][ C1] cpu_startup_entry+0x43/0x60 [ 39.048726][ C1] start_secondary+0x119/0x120 [ 39.053497][ C1] secondary_startup_64_no_verify+0xce/0xdb [ 39.059423][ C1] [ 39.062446][ C1] ================================================================================ [ 39.093872][ T19] usb 3-1: USB disconnect, device number 3 [ 39.093918][ C1] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19