T36] audit: type=1400 audit(1787981827.079:62): avc: denied { rlimitinh } for pid=233 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 13.485104][ T36] audit: type=1400 audit(1787981827.079:63): avc: denied { siginh } for pid=233 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
Warning: Permanently added '10.128.0.83' (ED25519) to the list of known hosts.
2026/08/29 05:37:15 parsed 1 programs
2026/08/29 05:37:15 serving rpc on tcp://43599
[ 22.189230][ T36] audit: type=1400 audit(1787981835.799:64): avc: denied { node_bind } for pid=303 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[ 23.145548][ T36] audit: type=1400 audit(1787981836.749:65): avc: denied { mounton } for pid=310 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[ 23.146584][ T310] cgroup: Unknown subsys name 'net'
[ 23.168201][ T36] audit: type=1400 audit(1787981836.749:66): avc: denied { mount } for pid=310 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 23.195431][ T36] audit: type=1400 audit(1787981836.779:67): avc: denied { unmount } for pid=310 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 23.195591][ T310] cgroup: Unknown subsys name 'devices'
[ 23.319388][ T310] cgroup: Unknown subsys name 'hugetlb'
[ 23.325007][ T310] cgroup: Unknown subsys name 'rlimit'
[ 23.442928][ T36] audit: type=1400 audit(1787981837.049:68): avc: denied { setattr } for pid=310 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 23.466083][ T36] audit: type=1400 audit(1787981837.049:69): avc: denied { create } for pid=310 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[ 23.486459][ T36] audit: type=1400 audit(1787981837.049:70): avc: denied { write } for pid=310 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 23.500219][ T315] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped).
[ 23.506722][ T36] audit: type=1400 audit(1787981837.049:71): avc: denied { read } for pid=310 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 23.535466][ T36] audit: type=1400 audit(1787981837.049:72): avc: denied { sys_module } for pid=310 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[ 23.536694][ T310] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 23.556517][ T36] audit: type=1400 audit(1787981837.049:73): avc: denied { mounton } for pid=310 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[ 24.479212][ T320] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 24.602637][ T322] bridge0: port 1(bridge_slave_0) entered blocking state
[ 24.609986][ T322] bridge0: port 1(bridge_slave_0) entered disabled state
[ 24.617060][ T322] bridge_slave_0: entered allmulticast mode
[ 24.629216][ T322] bridge_slave_0: entered promiscuous mode
[ 24.639554][ T322] bridge0: port 2(bridge_slave_1) entered blocking state
[ 24.646587][ T322] bridge0: port 2(bridge_slave_1) entered disabled state
[ 24.654070][ T322] bridge_slave_1: entered allmulticast mode
[ 24.660331][ T322] bridge_slave_1: entered promiscuous mode
[ 24.891126][ T322] bridge0: port 2(bridge_slave_1) entered blocking state
[ 24.898221][ T322] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 24.905515][ T322] bridge0: port 1(bridge_slave_0) entered blocking state
[ 24.912574][ T322] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 24.959219][ T349] bridge0: port 1(bridge_slave_0) entered disabled state
[ 24.966485][ T349] bridge0: port 2(bridge_slave_1) entered disabled state
[ 25.030369][ T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 25.037427][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 25.062523][ T349] bridge0: port 2(bridge_slave_1) entered blocking state
[ 25.069585][ T349] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 25.229401][ T322] veth0_vlan: entered promiscuous mode
[ 25.246110][ T322] veth1_macvtap: entered promiscuous mode
2026/08/29 05:37:18 executed programs: 0
[ 25.437028][ T13] bridge_slave_1: left allmulticast mode
[ 25.442791][ T13] bridge_slave_1: left promiscuous mode
[ 25.449594][ T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 25.457240][ T13] bridge_slave_0: left allmulticast mode
[ 25.462978][ T13] bridge_slave_0: left promiscuous mode
[ 25.469234][ T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 25.627967][ T13] veth1_macvtap: left promiscuous mode
[ 25.633496][ T13] veth0_vlan: left promiscuous mode
[ 25.663686][ T380] bridge0: port 1(bridge_slave_0) entered blocking state
[ 25.670785][ T380] bridge0: port 1(bridge_slave_0) entered disabled state
[ 25.677930][ T380] bridge_slave_0: entered allmulticast mode
[ 25.684060][ T380] bridge_slave_0: entered promiscuous mode
[ 25.699895][ T380] bridge0: port 2(bridge_slave_1) entered blocking state
[ 25.706932][ T380] bridge0: port 2(bridge_slave_1) entered disabled state
[ 25.714256][ T380] bridge_slave_1: entered allmulticast mode
[ 25.723006][ T380] bridge_slave_1: entered promiscuous mode
[ 25.742013][ T385] bridge0: port 1(bridge_slave_0) entered blocking state
[ 25.749070][ T385] bridge0: port 1(bridge_slave_0) entered disabled state
[ 25.756100][ T385] bridge_slave_0: entered allmulticast mode
[ 25.762549][ T385] bridge_slave_0: entered promiscuous mode
[ 25.769983][ T385] bridge0: port 2(bridge_slave_1) entered blocking state
[ 25.777007][ T385] bridge0: port 2(bridge_slave_1) entered disabled state
[ 25.784131][ T385] bridge_slave_1: entered allmulticast mode
[ 25.790254][ T385] bridge_slave_1: entered promiscuous mode
[ 25.798648][ T384] bridge0: port 1(bridge_slave_0) entered blocking state
[ 25.805677][ T384] bridge0: port 1(bridge_slave_0) entered disabled state
[ 25.812766][ T384] bridge_slave_0: entered allmulticast mode
[ 25.818922][ T384] bridge_slave_0: entered promiscuous mode
[ 25.825251][ T384] bridge0: port 2(bridge_slave_1) entered blocking state
[ 25.832384][ T384] bridge0: port 2(bridge_slave_1) entered disabled state
[ 25.839470][ T384] bridge_slave_1: entered allmulticast mode
[ 25.845800][ T384] bridge_slave_1: entered promiscuous mode
[ 25.883500][ T382] bridge0: port 1(bridge_slave_0) entered blocking state
[ 25.890669][ T382] bridge0: port 1(bridge_slave_0) entered disabled state
[ 25.897806][ T382] bridge_slave_0: entered allmulticast mode
[ 25.903932][ T382] bridge_slave_0: entered promiscuous mode
[ 25.910307][ T382] bridge0: port 2(bridge_slave_1) entered blocking state
[ 25.917333][ T382] bridge0: port 2(bridge_slave_1) entered disabled state
[ 25.924396][ T382] bridge_slave_1: entered allmulticast mode
[ 25.930672][ T382] bridge_slave_1: entered promiscuous mode
[ 26.048315][ T380] bridge0: port 2(bridge_slave_1) entered blocking state
[ 26.055363][ T380] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 26.062634][ T380] bridge0: port 1(bridge_slave_0) entered blocking state
[ 26.069660][ T380] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 26.087096][ T385] bridge0: port 2(bridge_slave_1) entered blocking state
[ 26.094166][ T385] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 26.101439][ T385] bridge0: port 1(bridge_slave_0) entered blocking state
[ 26.108469][ T385] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 26.117132][ T384] bridge0: port 2(bridge_slave_1) entered blocking state
[ 26.124171][ T384] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 26.131428][ T384] bridge0: port 1(bridge_slave_0) entered blocking state
[ 26.138458][ T384] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 26.178234][ T382] bridge0: port 2(bridge_slave_1) entered blocking state
[ 26.185306][ T382] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 26.192589][ T382] bridge0: port 1(bridge_slave_0) entered blocking state
[ 26.199613][ T382] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 26.214502][ T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 26.222087][ T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 26.229309][ T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 26.236475][ T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 26.244399][ T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 26.251693][ T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 26.258979][ T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 26.266115][ T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 26.279219][ T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 26.286247][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 26.294712][ T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 26.301759][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 26.322054][ T349] bridge0: port 1(bridge_slave_0) entered blocking state
[ 26.329129][ T349] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 26.336678][ T349] bridge0: port 2(bridge_slave_1) entered blocking state
[ 26.343710][ T349] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 26.361608][ T349] bridge0: port 1(bridge_slave_0) entered blocking state
[ 26.368659][ T349] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 26.380033][ T349] bridge0: port 2(bridge_slave_1) entered blocking state
[ 26.387063][ T349] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 26.397455][ T349] bridge0: port 1(bridge_slave_0) entered blocking state
[ 26.404493][ T349] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 26.416047][ T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 26.423077][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 26.465384][ T385] veth0_vlan: entered promiscuous mode
[ 26.476638][ T380] veth0_vlan: entered promiscuous mode
[ 26.490479][ T384] veth0_vlan: entered promiscuous mode
[ 26.499229][ T382] veth0_vlan: entered promiscuous mode
[ 26.513658][ T385] veth1_macvtap: entered promiscuous mode
[ 26.520559][ T380] veth1_macvtap: entered promiscuous mode
[ 26.540786][ T384] veth1_macvtap: entered promiscuous mode
[ 26.549588][ T382] veth1_macvtap: entered promiscuous mode
[ 26.807966][ T398] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 26.827762][ T63] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[ 26.847888][ T403] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[ 26.857849][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[ 26.968788][ T398] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 26.978803][ T63] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 26.979976][ T398] usb 1-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00
[ 26.990954][ T63] usb 4-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00
[ 26.999865][ T398] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 27.009586][ T63] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 27.026256][ T403] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 27.038523][ T403] usb 6-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00
[ 27.048172][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 27.059814][ T10] usb 3-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00
[ 27.069150][ T403] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 27.077476][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 27.430695][ T398] wacom 0003:056A:033B.0001: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.0-1/input0
[ 27.441823][ T398] input input5: Absolute device without dev->absinfo, refusing to register
[ 27.450726][ T398] wacom 0003:056A:033B.0001: probe with driver wacom failed with error -22
[ 27.453560][ T63] wacom 0003:056A:033B.0002: hidraw1: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.3-1/input0
[ 27.474443][ T63] input input8: Absolute device without dev->absinfo, refusing to register
[ 27.483273][ T63] wacom 0003:056A:033B.0002: probe with driver wacom failed with error -22
[ 27.500264][ T403] wacom 0003:056A:033B.0003: hidraw2: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.5-1/input0
[ 27.512342][ T10] wacom 0003:056A:033B.0004: hidraw3: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.2-1/input0
[ 27.533583][ T403] input input11: Absolute device without dev->absinfo, refusing to register
[ 27.542297][ T10] input input14: Absolute device without dev->absinfo, refusing to register
[ 27.551190][ T403] wacom 0003:056A:033B.0003: probe with driver wacom failed with error -22
[ 27.559933][ T10] wacom 0003:056A:033B.0004: probe with driver wacom failed with error -22
[ 27.628854][ T36] kauditd_printk_skb: 34 callbacks suppressed
[ 27.628869][ T36] audit: type=1400 audit(1787981841.239:108): avc: denied { write } for pid=399 comm="syz.0.17" name="hidraw2" dev="devtmpfs" ino=447 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[ 27.688166][ T10] usb 4-1: USB disconnect, device number 2
[ 27.694576][ T398] usb 1-1: USB disconnect, device number 2
[ 27.758889][ T66] usb 6-1: USB disconnect, device number 2
[ 27.763302][ T403] usb 3-1: USB disconnect, device number 2
[ 28.438058][ T403] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[ 28.467784][ T66] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[ 28.497775][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[ 28.517749][ T398] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[ 28.588991][ T403] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 28.600087][ T403] usb 1-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00
[ 28.609180][ T403] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 28.638760][ T66] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 28.648781][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 28.649790][ T66] usb 4-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00
[ 28.660584][ T10] usb 6-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00
[ 28.669883][ T66] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 28.678605][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 28.699584][ T398] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 28.710588][ T398] usb 3-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00
[ 28.719653][ T398] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 29.023390][ T403] wacom 0003:056A:033B.0005: hidraw4: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.0-1/input0
[ 29.034561][ T403] input input17: Absolute device without dev->absinfo, refusing to register
[ 29.043592][ T403] wacom 0003:056A:033B.0005: probe with driver wacom failed with error -22
[ 29.090947][ T66] wacom 0003:056A:033B.0006: hidraw5: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.3-1/input0
[ 29.102229][ T66] input input20: Absolute device without dev->absinfo, refusing to register
[ 29.106286][ T10] wacom 0003:056A:033B.0007: hidraw6: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.5-1/input0
[ 29.111353][ T66] wacom 0003:056A:033B.0006: probe with driver wacom failed with error -22
[ 29.135992][ T10] input input23: Absolute device without dev->absinfo, refusing to register
[ 29.146885][ T398] wacom 0003:056A:033B.0008: hidraw7: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.2-1/input0
[ 29.150396][ T10] wacom 0003:056A:033B.0007: probe with driver wacom failed with error -22
[ 29.168133][ T398] input input26: Absolute device without dev->absinfo, refusing to register
[ 29.177543][ T398] wacom 0003:056A:033B.0008: probe with driver wacom failed with error -22
[ 29.221187][ T420] ==================================================================
[ 29.229259][ T420] BUG: KASAN: slab-use-after-free in usbhid_power+0x7c/0xd0
[ 29.236536][ T420] Read of size 8 at addr ffff88812daf8008 by task syz.0.22/420
[ 29.244051][ T420]
[ 29.246364][ T420] CPU: 1 UID: 0 PID: 420 Comm: syz.0.22 Not tainted syzkaller #0 28bb5670a1b4a83370a1b0f1e6655e31af14d592
[ 29.246379][ T420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 29.246391][ T420] Call Trace:
[ 29.246396][ T420]
[ 29.246401][ T420] __dump_stack+0x21/0x30
[ 29.246419][ T420] dump_stack_lvl+0x140/0x1c0
[ 29.246433][ T420] ? __cfi_dump_stack_lvl+0x10/0x10
[ 29.246448][ T420] print_address_description+0x71/0x210
[ 29.246463][ T420] print_report+0x4a/0x70
[ 29.246476][ T420] kasan_report+0x162/0x1a0
[ 29.246490][ T420] ? usbhid_power+0x7c/0xd0
[ 29.246504][ T420] ? __kmalloc_cache_noprof+0x23c/0x470
[ 29.246515][ T420] ? usbhid_power+0x7c/0xd0
[ 29.246528][ T420] __asan_report_load8_noabort+0x18/0x20
[ 29.246539][ T420] usbhid_power+0x7c/0xd0
[ 29.246552][ T420] hidraw_open+0x254/0x960
[ 29.246565][ T420] chrdev_open+0x4e8/0x610
[ 29.246578][ T420] ? __cfi_chrdev_open+0x10/0x10
[ 29.246590][ T420] ? bpf_lsm_file_open+0xd/0x20
[ 29.246603][ T420] ? __cfi_chrdev_open+0x10/0x10
[ 29.246614][ T420] do_dentry_open+0x97f/0x1510
[ 29.246630][ T420] vfs_open+0x86/0x240
[ 29.246642][ T420] ? __cfi_vfs_open+0x10/0x10
[ 29.246656][ T420] ? may_open+0x352/0x430
[ 29.246669][ T420] path_openat+0x2c49/0x35a0
[ 29.246682][ T420] ? schedule+0xc5/0x240
[ 29.246693][ T420] ? kasan_save_alloc_info+0x3a/0x50
[ 29.246702][ T420] ? getname+0x1b/0x30
[ 29.246712][ T420] ? x64_sys_call+0xe69/0x2ee0
[ 29.246721][ T420] ? do_syscall_64+0x57/0xf0
[ 29.246736][ T420] ? do_filp_open+0x440/0x440
[ 29.246750][ T420] do_filp_open+0x1f2/0x440
[ 29.246763][ T420] ? __cfi_do_filp_open+0x10/0x10
[ 29.246778][ T420] ? alloc_fd+0x4c1/0x570
[ 29.246790][ T420] do_sys_openat2+0x134/0x1d0
[ 29.246804][ T420] ? common_nsleep+0x93/0xb0
[ 29.246821][ T420] ? do_sys_open+0x100/0x100
[ 29.246844][ T420] __x64_sys_openat+0x13a/0x170
[ 29.246866][ T420] x64_sys_call+0xe69/0x2ee0
[ 29.246882][ T420] do_syscall_64+0x57/0xf0
[ 29.246898][ T420] ? clear_bhb_loop+0x50/0xa0
[ 29.246910][ T420] entry_SYSCALL_64_after_hwframe+0x76/0x7e
[ 29.246921][ T420] RIP: 0033:0x7fa29ff5e98e
[ 29.246936][ T420] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 29.246945][ T420] RSP: 002b:00007fa2a0e1db28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 29.246960][ T420] RAX: ffffffffffffffda RBX: 00007fa2a0e1e6c0 RCX: 00007fa29ff5e98e
[ 29.246968][ T420] RDX: 0000000000008a00 RSI: 00007fa2a0e1dc00 RDI: ffffffffffffff9c
[ 29.246975][ T420] RBP: 00007fa2a0e1dc00 R08: 0000000000000000 R09: 0000000000000000
[ 29.246981][ T420] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[ 29.246988][ T420] R13: 00007fa2a0226038 R14: 00007fa2a0225fa0 R15: 00007ffdb94d6f38
[ 29.246997][ T420]
[ 29.247000][ T420]
[ 29.529446][ T420] Allocated by task 334:
[ 29.533661][ T420] kasan_save_track+0x3e/0x80
[ 29.538325][ T420] kasan_save_alloc_info+0x3a/0x50
[ 29.543412][ T420] __kasan_slab_alloc+0x73/0x90
[ 29.548244][ T420] kmem_cache_alloc_node_noprof+0x1ca/0x420
[ 29.554122][ T420] kmalloc_reserve+0xcf/0x4f0
[ 29.558794][ T420] __alloc_skb+0x13f/0x360
[ 29.563194][ T420] netlink_alloc_large_skb+0xf7/0x1b0
[ 29.568543][ T420] netlink_sendmsg+0x576/0xad0
[ 29.573289][ T420] ____sys_sendmsg+0x99e/0xa00
[ 29.578037][ T420] ___sys_sendmsg+0x2a6/0x370
[ 29.582707][ T420] __x64_sys_sendmsg+0x1be/0x2a0
[ 29.587626][ T420] x64_sys_call+0x2a4c/0x2ee0
[ 29.592283][ T420] do_syscall_64+0x57/0xf0
[ 29.596693][ T420] entry_SYSCALL_64_after_hwframe+0x76/0x7e
[ 29.602565][ T420]
[ 29.604868][ T420] Freed by task 334:
[ 29.608737][ T420] kasan_save_track+0x3e/0x80
[ 29.613411][ T420] kasan_save_free_info+0x44/0x50
[ 29.618412][ T420] __kasan_slab_free+0x5f/0x80
[ 29.623154][ T420] kfree+0x158/0x440
[ 29.627025][ T420] skb_free_head+0xf7/0x300
[ 29.631508][ T420] skb_release_data+0x6d0/0x860
[ 29.636340][ T420] __kfree_skb+0x62/0x210
[ 29.640650][ T420] consume_skb+0x65/0x1a0
[ 29.644958][ T420] netlink_unicast+0x8c7/0xa70
[ 29.649707][ T420] netlink_sendmsg+0x7d1/0xad0
[ 29.654454][ T420] ____sys_sendmsg+0x99e/0xa00
[ 29.659198][ T420] ___sys_sendmsg+0x2a6/0x370
[ 29.663858][ T420] __x64_sys_sendmsg+0x1be/0x2a0
[ 29.668780][ T420] x64_sys_call+0x2a4c/0x2ee0
[ 29.673432][ T420] do_syscall_64+0x57/0xf0
[ 29.677831][ T420] entry_SYSCALL_64_after_hwframe+0x76/0x7e
[ 29.683711][ T420]
[ 29.686011][ T420] The buggy address belongs to the object at ffff88812daf8000
[ 29.686011][ T420] which belongs to the cache skbuff_small_head of size 768
[ 29.700562][ T420] The buggy address is located 8 bytes inside of
[ 29.700562][ T420] freed 768-byte region [ffff88812daf8000, ffff88812daf8300)
[ 29.714193][ T420]
[ 29.716500][ T420] The buggy address belongs to the physical page:
[ 29.722908][ T420] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12daf8
[ 29.731730][ T420] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 29.740207][ T420] flags: 0x4000000000000040(head|zone=1)
[ 29.745817][ T420] page_type: f5(slab)
[ 29.749776][ T420] raw: 4000000000000040 ffff888106e48a00 dead000000000122 0000000000000000
[ 29.758349][ T420] raw: 0000000000000000 0000000000120012 00000001f5000000 0000000000000000
[ 29.766910][ T420] head: 4000000000000040 ffff888106e48a00 dead000000000122 0000000000000000
[ 29.775561][ T420] head: 0000000000000000 0000000000120012 00000001f5000000 0000000000000000
[ 29.784208][ T420] head: 4000000000000002 ffffea0004b6be01 ffffffffffffffff 0000000000000000
[ 29.792854][ T420] head: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000
[ 29.801499][ T420] page dumped because: kasan: bad access detected
[ 29.807896][ T420] page_owner tracks the page as allocated
[ 29.813592][ T420] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d2000(__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 66, tgid 66 (kworker/1:2), ts 27766407898, free_ts 27765623694
[ 29.834321][ T420] post_alloc_hook+0x37d/0x3b0
[ 29.839070][ T420] prep_new_page+0x2d/0x180
[ 29.843554][ T420] get_page_from_freelist+0x4aea/0x4ba0
[ 29.849080][ T420] __alloc_pages_noprof+0x35a/0x7e0
[ 29.854264][ T420] alloc_slab_page+0x6b/0x1e0
[ 29.858920][ T420] allocate_slab+0x69/0x430
[ 29.863404][ T420] ___slab_alloc+0x591/0x8c0
[ 29.867975][ T420] kmem_cache_alloc_node_noprof+0x29b/0x420
[ 29.873865][ T420] kmalloc_reserve+0xcf/0x4f0
[ 29.878520][ T420] __alloc_skb+0x13f/0x360
[ 29.882914][ T420] alloc_uevent_skb+0x85/0x240
[ 29.887670][ T420] kobject_uevent_net_broadcast+0x356/0x5e0
[ 29.893551][ T420] kobject_uevent_env+0x551/0x7e0
[ 29.898565][ T420] kobject_uevent+0x21/0x40
[ 29.903047][ T420] device_release_driver_internal+0x75b/0x830
[ 29.909099][ T420] device_release_driver+0x1d/0x30
[ 29.914196][ T420] page last free pid 66 tgid 66 stack trace:
[ 29.920147][ T420] free_unref_page+0xbb8/0xf70
[ 29.924895][ T420] __folio_put+0x272/0x2c0
[ 29.929293][ T420] free_large_kmalloc+0xb7/0x110
[ 29.934207][ T420] kfree+0x209/0x440
[ 29.938094][ T420] usbhid_disconnect+0xab/0xc0
[ 29.942853][ T420] usb_unbind_interface+0x2b0/0xa40
[ 29.948030][ T420] device_release_driver_internal+0x522/0x830
[ 29.954079][ T420] device_release_driver+0x1d/0x30
[ 29.959176][ T420] bus_remove_device+0x34f/0x370
[ 29.964094][ T420] device_del+0x583/0xcf0
[ 29.968435][ T420] usb_disable_device+0x3af/0x770
[ 29.973454][ T420] usb_disconnect+0x331/0x950
[ 29.978127][ T420] hub_event+0x1ad5/0x4360
[ 29.982534][ T420] process_scheduled_works+0x7f4/0x1060
[ 29.988059][ T420] worker_thread+0xc99/0x13f0
[ 29.992714][ T420] kthread+0x2c4/0x360
[ 29.996760][ T420]
[ 29.999063][ T420] Memory state around the buggy address:
[ 30.004668][ T420] ffff88812daf7f00: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[ 30.012718][ T420] ffff88812daf7f80: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[ 30.020755][ T420] >ffff88812daf8000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 30.028787][ T420] ^
[ 30.033090][ T420] ffff88812daf8080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 30.041145][ T420] ffff88812daf8100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 30.049182][ T420] ==================================================================
[ 30.058073][ T420] Disabling lock debugging due to kernel taint
[ 30.066584][ T420] Oops: general protection fault, probably for non-canonical address 0x1be014c0000037e: 0000 [#1] PREEMPT SMP KASAN PTI
[ 30.079101][ T420] CPU: 0 UID: 0 PID: 420 Comm: syz.0.22 Tainted: G B syzkaller #0 28bb5670a1b4a83370a1b0f1e6655e31af14d592
[ 30.079364][ T36] audit: type=1400 audit(1787981843.679:109): avc: denied { read } for pid=93 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[ 30.091854][ T420] Tainted: [B]=BAD_PAGE
[ 30.091861][ T420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 30.091871][ T420] RIP: 0010:__pm_runtime_resume+0x49/0xa0
[ 30.115433][ T36] audit: type=1400 audit(1787981843.679:110): avc: denied { search } for pid=93 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 30.117677][ T420] Code: ff e8 3b dc 3f fe 89 d8 83 e0 04 75 07 e8 ef d7 3f fe eb 1e e8 e8 d7 3f fe 49 8d be e0 01 00 00 be 04 00 00 00 e8 47 b5 98 fe 41 ff 86 e0 01 00 00 4d 8d be 14 01 00 00 4c 89 ff e8 20 65 5f
[ 30.117695][ T420] RSP: 0018:ffffc9000115f6a8 EFLAGS: 00010202
[ 30.127965][ T36] audit: type=1400 audit(1787981843.679:111): avc: denied { write } for pid=93 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 30.133422][ T420] RAX: 0000000000000001 RBX: 0000000000000004 RCX: ffffffff83479969
[ 30.133438][ T420] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 01be014c0000037e
[ 30.155065][ T36] audit: type=1400 audit(1787981843.679:112): avc: denied { add_name } for pid=93 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 30.174241][ T420] RBP: ffffc9000115f6c8 R08: 01be014c00000382 R09: 000000000000037c
[ 30.174257][ T420] R10: dffffc0000000000 R11: fffffbfff1177129 R12: 0000000000000002
[ 30.174269][ T420] R13: ffffffff8680cee0 R14: 01be014c0000019e R15: dffffc0000000000
[ 30.174284][ T420] FS: 00007fa2a0e1e6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 30.180614][ T36] audit: type=1400 audit(1787981843.679:113): avc: denied { create } for pid=93 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 30.201458][ T420] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 30.201474][ T420] CR2: 00007f4e2a79bff8 CR3: 0000000118e24000 CR4: 00000000003526b0
[ 30.201490][ T420] Call Trace:
[ 30.201498][ T420]
[ 30.210063][ T36] audit: type=1400 audit(1787981843.679:114): avc: denied { append open } for pid=93 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 30.217386][ T420] usb_autopm_get_interface+0x25/0xf0
[ 30.239656][ T36] audit: type=1400 audit(1787981843.679:115): avc: denied { getattr } for pid=93 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 30.245798][ T420] usbhid_power+0x84/0xd0
[ 30.245826][ T420] hidraw_open+0x254/0x960
[ 30.245851][ T420] chrdev_open+0x4e8/0x610
[ 30.245873][ T420] ? __cfi_chrdev_open+0x10/0x10
[ 30.245895][ T420] ? bpf_lsm_file_open+0xd/0x20
[ 30.245920][ T420] ? __cfi_chrdev_open+0x10/0x10
[ 30.245941][ T420] do_dentry_open+0x97f/0x1510
[ 30.245969][ T420] vfs_open+0x86/0x240
[ 30.245993][ T420] ? __cfi_vfs_open+0x10/0x10
[ 30.246018][ T420] ? may_open+0x352/0x430
[ 30.246043][ T420] path_openat+0x2c49/0x35a0
[ 30.246068][ T420] ? schedule+0xc5/0x240
[ 30.246087][ T420] ? kasan_save_alloc_info+0x3a/0x50
[ 30.246106][ T420] ? getname+0x1b/0x30
[ 30.246126][ T420] ? x64_sys_call+0xe69/0x2ee0
[ 30.246144][ T420] ? do_syscall_64+0x57/0xf0
[ 30.246172][ T420] ? do_filp_open+0x440/0x440
[ 30.246199][ T420] do_filp_open+0x1f2/0x440
[ 30.246224][ T420] ? __cfi_do_filp_open+0x10/0x10
[ 30.246251][ T420] ? alloc_fd+0x4c1/0x570
[ 30.246274][ T420] do_sys_openat2+0x134/0x1d0
[ 30.246300][ T420] ? common_nsleep+0x93/0xb0
[ 30.246324][ T420] ? do_sys_open+0x100/0x100
[ 30.246352][ T420] __x64_sys_openat+0x13a/0x170
[ 30.246379][ T420] x64_sys_call+0xe69/0x2ee0
[ 30.246396][ T420] do_syscall_64+0x57/0xf0
[ 30.246422][ T420] ? clear_bhb_loop+0x50/0xa0
[ 30.246444][ T420] entry_SYSCALL_64_after_hwframe+0x76/0x7e
[ 30.246465][ T420] RIP: 0033:0x7fa29ff5e98e
[ 30.246482][ T420] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 30.246499][ T420] RSP: 002b:00007fa2a0e1db28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 30.246519][ T420] RAX: ffffffffffffffda RBX: 00007fa2a0e1e6c0 RCX: 00007fa29ff5e98e
[ 30.246532][ T420] RDX: 0000000000008a00 RSI: 00007fa2a0e1dc00 RDI: ffffffffffffff9c
[ 30.540241][ T420] RBP: 00007fa2a0e1dc00 R08: 0000000000000000 R09: 0000000000000000
[ 30.548193][ T420] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[ 30.556174][ T420] R13: 00007fa2a0226038 R14: 00007fa2a0225fa0 R15: 00007ffdb94d6f38
[ 30.564130][ T420]
[ 30.567129][ T420] Modules linked in:
[ 30.571436][ T420] ---[ end trace 0000000000000000 ]---
[ 30.577064][ T420] RIP: 0010:__pm_runtime_resume+0x49/0xa0
[ 30.583121][ T420] Code: ff e8 3b dc 3f fe 89 d8 83 e0 04 75 07 e8 ef d7 3f fe eb 1e e8 e8 d7 3f fe 49 8d be e0 01 00 00 be 04 00 00 00 e8 47 b5 98 fe 41 ff 86 e0 01 00 00 4d 8d be 14 01 00 00 4c 89 ff e8 20 65 5f
[ 30.603245][ T420] RSP: 0018:ffffc9000115f6a8 EFLAGS: 00010202
[ 30.609511][ T420] RAX: 0000000000000001 RBX: 0000000000000004 RCX: ffffffff83479969
[ 30.617584][ T420] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 01be014c0000037e
[ 30.625699][ T420] RBP: ffffc9000115f6c8 R08: 01be014c00000382 R09: 000000000000037c
[ 30.633831][ T420] R10: dffffc0000000000 R11: fffffbfff1177129 R12: 0000000000000002
[ 30.641840][ T420] R13: ffffffff8680cee0 R14: 01be014c0000019e R15: dffffc0000000000
[ 30.649916][ T420] FS: 00007fa2a0e1e6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 30.658856][ T420] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 30.665473][ T420] CR2: 00007f4e2a79bff8 CR3: 0000000118e24000 CR4: 00000000003526b0
[ 30.673466][ T420] Kernel panic - not syncing: Fatal exception
[ 30.679753][ T420] Kernel Offset: disabled
[ 30.684062][ T420] Rebooting in 86400 seconds..