Warning: Permanently added '10.128.0.149' (ED25519) to the list of known hosts. 2026/01/24 18:28:37 parsed 1 programs [ 22.605069][ T30] audit: type=1400 audit(1769279317.389:64): avc: denied { node_bind } for pid=281 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 22.626337][ T30] audit: type=1400 audit(1769279317.399:65): avc: denied { module_request } for pid=281 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 23.591137][ T30] audit: type=1400 audit(1769279318.379:66): avc: denied { mounton } for pid=287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.594528][ T287] cgroup: Unknown subsys name 'net' [ 23.614223][ T30] audit: type=1400 audit(1769279318.379:67): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.641562][ T30] audit: type=1400 audit(1769279318.409:68): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.642026][ T287] cgroup: Unknown subsys name 'devices' [ 23.848665][ T287] cgroup: Unknown subsys name 'hugetlb' [ 23.854293][ T287] cgroup: Unknown subsys name 'rlimit' [ 24.001623][ T30] audit: type=1400 audit(1769279318.789:69): avc: denied { setattr } for pid=287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.024970][ T30] audit: type=1400 audit(1769279318.789:70): avc: denied { create } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 24.045662][ T30] audit: type=1400 audit(1769279318.789:71): avc: denied { write } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.058297][ T291] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 24.066744][ T30] audit: type=1400 audit(1769279318.789:72): avc: denied { read } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.091429][ T287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.095811][ T30] audit: type=1400 audit(1769279318.789:73): avc: denied { mounton } for pid=287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.606489][ T294] request_module fs-gadgetfs succeeded, but still no fs? [ 24.980707][ T323] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.988342][ T323] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.995730][ T323] device bridge_slave_0 entered promiscuous mode [ 25.003687][ T323] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.010913][ T323] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.018429][ T323] device bridge_slave_1 entered promiscuous mode [ 25.063106][ T323] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.070192][ T323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.077536][ T323] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.084734][ T323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.108967][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.122072][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.130944][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.142969][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.159403][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.168109][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.179481][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.187788][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.195214][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.203658][ T323] device veth0_vlan entered promiscuous mode [ 25.214671][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.223848][ T323] device veth1_macvtap entered promiscuous mode [ 25.233420][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.243357][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.283477][ T323] syz-executor (323) used greatest stack depth: 21376 bytes left 2026/01/24 18:28:40 executed programs: 0 [ 25.839787][ T364] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.847993][ T364] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.855443][ T364] device bridge_slave_0 entered promiscuous mode [ 25.862594][ T364] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.869678][ T364] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.877181][ T364] device bridge_slave_1 entered promiscuous mode [ 25.921827][ T364] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.928911][ T364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.936171][ T364] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.943222][ T364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.951385][ T308] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.958845][ T308] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.976520][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.984155][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.993610][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 26.002094][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.010517][ T308] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.017558][ T308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.026101][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 26.034747][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.042970][ T308] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.050036][ T308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.061200][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 26.069332][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.078244][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 26.086381][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.100078][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.108472][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.119380][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.127319][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.135340][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.142920][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.151633][ T364] device veth0_vlan entered promiscuous mode [ 26.161473][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.169805][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.185278][ T364] device veth1_macvtap entered promiscuous mode [ 26.194789][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.202637][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.211099][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.220603][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.228949][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.536367][ T333] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 26.733040][ T8] device bridge_slave_1 left promiscuous mode [ 26.739364][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.747097][ T8] device bridge_slave_0 left promiscuous mode [ 26.753217][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.761426][ T8] device veth1_macvtap left promiscuous mode [ 26.767493][ T8] device veth0_vlan left promiscuous mode [ 26.776459][ T333] usb 3-1: Using ep0 maxpacket: 16 [ 26.897004][ T333] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.908248][ T333] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.918147][ T333] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 26.931125][ T333] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 26.940244][ T333] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.949521][ T333] usb 3-1: config 0 descriptor?? [ 27.427336][ T333] microsoft 0003:045E:07DA.0001: ignoring exceeding usage max [ 27.437248][ T333] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 27.444663][ T333] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 27.452055][ T333] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 27.462877][ T333] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0001/input/input4 [ 27.537766][ T333] ================================================================================ [ 27.547199][ T333] UBSAN: shift-out-of-bounds in drivers/hid/hid-core.c:1346:16 [ 27.554751][ T333] shift exponent 4294967295 is too large for 32-bit type '__s32' (aka 'int') [ 27.563504][ T333] CPU: 1 PID: 333 Comm: kworker/1:2 Not tainted syzkaller #0 [ 27.570880][ T333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 27.580947][ T333] Workqueue: usb_hub_wq hub_event [ 27.586000][ T333] Call Trace: [ 27.589274][ T333] [ 27.592228][ T333] __dump_stack+0x21/0x30 [ 27.596557][ T333] dump_stack_lvl+0x110/0x170 [ 27.601253][ T333] ? show_regs_print_info+0x20/0x20 [ 27.606468][ T333] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 27.612280][ T333] dump_stack+0x15/0x20 [ 27.616436][ T333] ubsan_epilogue+0xe/0x40 [ 27.620870][ T333] __ubsan_handle_shift_out_of_bounds+0x37c/0x400 [ 27.627306][ T333] ? hid_dump_input+0x137/0x180 [ 27.632183][ T333] s32ton+0xe8/0x150 [ 27.636108][ T333] hid_set_field+0x162/0x440 [ 27.640726][ T333] hidinput_input_event+0x3c1/0x450 [ 27.646013][ T333] ? hidinput_get_battery_property+0x9f0/0x9f0 [ 27.652169][ T333] input_handle_event+0x909/0x1560 [ 27.657281][ T333] input_inject_event+0xf3/0x130 [ 27.662219][ T333] input_leds_brightness_set+0x7a/0xa0 [ 27.667673][ T333] ? input_leds_brightness_get+0x110/0x110 [ 27.673480][ T333] led_set_brightness+0x109/0x290 [ 27.678508][ T333] led_trigger_event+0x79/0xc0 [ 27.683296][ T333] kbd_led_trigger_activate+0xbd/0x100 [ 27.688749][ T333] led_trigger_set+0x501/0x910 [ 27.693517][ T333] ? led_trigger_remove+0x40/0x40 [ 27.698561][ T333] ? rwsem_write_trylock+0x136/0x300 [ 27.703878][ T333] ? clear_nonspinnable+0x60/0x60 [ 27.708952][ T333] led_trigger_set_default+0x1ad/0x1f0 [ 27.714417][ T333] led_classdev_register_ext+0x6e6/0x8b0 [ 27.720063][ T333] ? devm_led_release+0xe0/0xe0 [ 27.724916][ T333] input_leds_connect+0x539/0x770 [ 27.729941][ T333] input_register_device+0xde2/0x10d0 [ 27.735338][ T333] hidinput_connect+0x2426/0x2ce0 [ 27.740380][ T333] hid_connect+0x46a/0xe10 [ 27.744799][ T333] ? usbhid_start+0x1a31/0x2450 [ 27.749662][ T333] ? hid_match_id+0x340/0x340 [ 27.754358][ T333] hid_hw_start+0xaa/0x130 [ 27.758877][ T333] ms_probe+0x190/0x460 [ 27.763141][ T333] ? magicmouse_emit_touch+0x16e0/0x16e0 [ 27.768780][ T333] hid_device_probe+0x287/0x380 [ 27.773720][ T333] ? driver_sysfs_add+0x25e/0x270 [ 27.778832][ T333] ? hid_uevent+0x320/0x320 [ 27.783336][ T333] really_probe+0x285/0x970 [ 27.787846][ T333] ? pm_runtime_barrier+0x161/0x1e0 [ 27.793045][ T333] __driver_probe_device+0x198/0x280 [ 27.798323][ T333] driver_probe_device+0x54/0x3e0 [ 27.803346][ T333] ? __device_attach_driver+0x294/0x460 [ 27.808887][ T333] __device_attach_driver+0x2a6/0x460 [ 27.814253][ T333] ? bus_for_each_drv+0x172/0x210 [ 27.819467][ T333] ? deferred_probe_work_func+0x220/0x220 [ 27.825194][ T333] bus_for_each_drv+0x184/0x210 [ 27.830041][ T333] ? __kasan_check_write+0x14/0x20 [ 27.835153][ T333] ? deferred_probe_work_func+0x220/0x220 [ 27.840880][ T333] ? subsys_find_device_by_id+0x360/0x360 [ 27.846642][ T333] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 27.852468][ T333] __device_attach+0x2b0/0x420 [ 27.857238][ T333] ? device_attach+0x20/0x20 [ 27.861846][ T333] ? kobject_uevent_env+0x34d/0x700 [ 27.867166][ T333] device_initial_probe+0x1a/0x20 [ 27.872185][ T333] bus_probe_device+0xc0/0x1e0 [ 27.876954][ T333] device_add+0xb31/0xed0 [ 27.881292][ T333] hid_add_device+0x356/0x4b0 [ 27.885968][ T333] usbhid_probe+0xb2e/0xee0 [ 27.890555][ T333] usb_probe_interface+0x62e/0xb10 [ 27.895754][ T333] ? usb_register_driver+0x3f0/0x3f0 [ 27.901048][ T333] really_probe+0x285/0x970 [ 27.905551][ T333] ? pm_runtime_barrier+0x161/0x1e0 [ 27.910747][ T333] __driver_probe_device+0x198/0x280 [ 27.916026][ T333] driver_probe_device+0x54/0x3e0 [ 27.921046][ T333] ? __device_attach_driver+0x294/0x460 [ 27.926589][ T333] __device_attach_driver+0x2a6/0x460 [ 27.931955][ T333] ? bus_for_each_drv+0x172/0x210 [ 27.936979][ T333] ? deferred_probe_work_func+0x220/0x220 [ 27.942696][ T333] bus_for_each_drv+0x184/0x210 [ 27.947571][ T333] ? __kasan_check_write+0x14/0x20 [ 27.952685][ T333] ? deferred_probe_work_func+0x220/0x220 [ 27.958752][ T333] ? subsys_find_device_by_id+0x360/0x360 [ 27.964476][ T333] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 27.970301][ T333] __device_attach+0x2b0/0x420 [ 27.975081][ T333] ? kfree+0xc4/0x270 [ 27.979064][ T333] ? device_attach+0x20/0x20 [ 27.983655][ T333] ? kobject_uevent_env+0x34d/0x700 [ 27.988869][ T333] device_initial_probe+0x1a/0x20 [ 27.993891][ T333] bus_probe_device+0xc0/0x1e0 [ 27.998654][ T333] device_add+0xb31/0xed0 [ 28.002986][ T333] usb_set_configuration+0x19c2/0x1f10 [ 28.008448][ T333] usb_generic_driver_probe+0x91/0x150 [ 28.013911][ T333] usb_probe_device+0x148/0x260 [ 28.018759][ T333] ? usb_register_device_driver+0x240/0x240 [ 28.024652][ T333] really_probe+0x285/0x970 [ 28.029155][ T333] ? pm_runtime_barrier+0x161/0x1e0 [ 28.034355][ T333] __driver_probe_device+0x198/0x280 [ 28.039643][ T333] driver_probe_device+0x54/0x3e0 [ 28.044756][ T333] ? __device_attach_driver+0x294/0x460 [ 28.050302][ T333] __device_attach_driver+0x2a6/0x460 [ 28.055691][ T333] ? bus_for_each_drv+0x172/0x210 [ 28.060715][ T333] ? deferred_probe_work_func+0x220/0x220 [ 28.066525][ T333] bus_for_each_drv+0x184/0x210 [ 28.071378][ T333] ? __kasan_check_write+0x14/0x20 [ 28.076491][ T333] ? deferred_probe_work_func+0x220/0x220 [ 28.082212][ T333] ? subsys_find_device_by_id+0x360/0x360 [ 28.087957][ T333] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 28.093765][ T333] __device_attach+0x2b0/0x420 [ 28.098536][ T333] ? kobject_uevent_env+0x34d/0x700 [ 28.103786][ T333] ? device_attach+0x20/0x20 [ 28.108373][ T333] device_initial_probe+0x1a/0x20 [ 28.113424][ T333] bus_probe_device+0xc0/0x1e0 [ 28.118196][ T333] device_add+0xb31/0xed0 [ 28.122527][ T333] usb_new_device+0xd37/0x1650 [ 28.127292][ T333] ? usb_disconnect+0x850/0x850 [ 28.132152][ T333] ? mutex_unlock+0x8f/0x230 [ 28.136814][ T333] ? __mutex_lock_slowpath+0x10/0x10 [ 28.142129][ T333] hub_event+0x2ac8/0x4600 [ 28.146587][ T333] ? hub_post_resume+0x120/0x120 [ 28.151555][ T333] ? __kasan_check_write+0x14/0x20 [ 28.156792][ T333] ? pwq_activate_inactive_work+0x301/0x410 [ 28.162827][ T333] process_one_work+0x6be/0xba0 [ 28.167715][ T333] worker_thread+0xa59/0x1200 [ 28.172433][ T333] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 28.177938][ T333] ? __kthread_parkme+0xac/0x200 [ 28.182910][ T333] kthread+0x411/0x500 [ 28.187000][ T333] ? worker_clr_flags+0x190/0x190 [ 28.192037][ T333] ? kthread_blkcg+0xd0/0xd0 [ 28.196680][ T333] ret_from_fork+0x1f/0x30 [ 28.201119][ T333] [ 28.204146][ T333] ================================================================================ [ 28.213440][ T333] microsoft 0003:045E:07DA.0001: value 1 is out of range [ 28.233734][ T333] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 28.246862][ T333] usb 3-1: USB disconnect, device number 2