Warning: Permanently added '10.128.0.113' (ED25519) to the list of known hosts. 2026/10/22 10:07:09 parsed 1 programs 2026/10/22 10:07:09 serving rpc on tcp://38583 [ 36.686417][ T36] kauditd_printk_skb: 32 callbacks suppressed [ 36.686432][ T36] audit: type=1400 audit(1792663630.390:106): avc: denied { unlink } for pid=421 comm="syz-executor" name="swap-file" dev="sda1" ino=2027 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 36.753276][ T421] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 37.607897][ T36] audit: type=1401 audit(1792663631.310:107): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 37.857871][ T440] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.865487][ T440] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.872908][ T440] bridge_slave_0: entered allmulticast mode [ 37.880008][ T440] bridge_slave_0: entered promiscuous mode [ 37.887705][ T440] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.894790][ T440] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.902124][ T440] bridge_slave_1: entered allmulticast mode [ 37.908608][ T440] bridge_slave_1: entered promiscuous mode [ 38.080912][ T440] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.088124][ T440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.095458][ T440] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.102491][ T440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.245307][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.256641][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.310951][ T330] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.318116][ T330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.330634][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.337713][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.393469][ T440] veth0_vlan: entered promiscuous mode [ 38.414393][ T440] veth1_macvtap: entered promiscuous mode 2026/10/22 10:07:12 executed programs: 0 [ 38.665336][ T46] bridge_slave_1: left allmulticast mode [ 38.671092][ T46] bridge_slave_1: left promiscuous mode [ 38.678459][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.686279][ T46] bridge_slave_0: left allmulticast mode [ 38.691932][ T46] bridge_slave_0: left promiscuous mode [ 38.700204][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.810242][ T491] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.817653][ T491] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.825183][ T491] bridge_slave_0: entered allmulticast mode [ 38.831357][ T491] bridge_slave_0: entered promiscuous mode [ 38.839199][ T491] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.846454][ T491] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.853532][ T491] bridge_slave_1: entered allmulticast mode [ 38.860011][ T491] bridge_slave_1: entered promiscuous mode [ 38.920754][ T46] veth1_macvtap: left promiscuous mode [ 38.926631][ T46] veth0_vlan: left promiscuous mode [ 38.960960][ T490] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.968078][ T490] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.975457][ T490] bridge_slave_0: entered allmulticast mode [ 38.981691][ T490] bridge_slave_0: entered promiscuous mode [ 38.989611][ T490] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.996925][ T490] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.004073][ T490] bridge_slave_1: entered allmulticast mode [ 39.010561][ T490] bridge_slave_1: entered promiscuous mode [ 39.051991][ T493] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.059295][ T493] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.066548][ T493] bridge_slave_0: entered allmulticast mode [ 39.072772][ T493] bridge_slave_0: entered promiscuous mode [ 39.079426][ T493] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.086755][ T493] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.094008][ T493] bridge_slave_1: entered allmulticast mode [ 39.100375][ T493] bridge_slave_1: entered promiscuous mode [ 39.166889][ T494] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.174052][ T494] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.181378][ T494] bridge_slave_0: entered allmulticast mode [ 39.187764][ T494] bridge_slave_0: entered promiscuous mode [ 39.194303][ T494] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.201397][ T494] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.208516][ T494] bridge_slave_1: entered allmulticast mode [ 39.214762][ T494] bridge_slave_1: entered promiscuous mode [ 39.246780][ T491] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.253941][ T491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.290159][ T490] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.297254][ T490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.304522][ T490] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.311568][ T490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.339692][ T493] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.346946][ T493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.354215][ T493] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.361269][ T493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.376099][ T494] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.383236][ T494] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.390620][ T494] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.397658][ T494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.437765][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.446027][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.453558][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.461322][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.469029][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.476650][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.483968][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.508918][ T330] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.516642][ T330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.524308][ T330] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.531385][ T330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.541279][ T330] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.548383][ T330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.560492][ T329] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.567581][ T329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.577976][ T329] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.585248][ T329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.597208][ T330] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.604985][ T330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.619640][ T330] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.626794][ T330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.637395][ T494] veth0_vlan: entered promiscuous mode [ 39.646470][ T329] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.653522][ T329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.684306][ T494] veth1_macvtap: entered promiscuous mode [ 39.701087][ T490] veth0_vlan: entered promiscuous mode [ 39.713017][ T493] veth0_vlan: entered promiscuous mode [ 39.729502][ T491] veth0_vlan: entered promiscuous mode [ 39.745760][ T490] veth1_macvtap: entered promiscuous mode [ 39.754121][ T493] veth1_macvtap: entered promiscuous mode [ 39.779388][ T36] audit: type=1400 audit(1792663633.480:108): avc: denied { read write } for pid=507 comm="syz.5.20" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 39.804013][ T36] audit: type=1400 audit(1792663633.480:109): avc: denied { open } for pid=507 comm="syz.5.20" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 39.808149][ T491] veth1_macvtap: entered promiscuous mode [ 39.833468][ T36] audit: type=1400 audit(1792663633.480:110): avc: denied { ioctl } for pid=507 comm="syz.5.20" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 40.024967][ T382] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 40.124918][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 40.134921][ T64] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 40.144944][ T516] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 40.176051][ T382] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.187182][ T382] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.197005][ T382] usb 6-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 40.206289][ T382] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.276367][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.287542][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.298064][ T10] usb 2-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 40.307718][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.316510][ T516] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.327654][ T64] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.339100][ T516] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.349201][ T64] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.359261][ T516] usb 1-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 40.368442][ T64] usb 3-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 40.378741][ T516] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.387100][ T64] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.621872][ T382] wacom 0003:056A:033B.0001: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.5-1/input0 [ 40.633257][ T382] input input5: Absolute device without dev->absinfo, refusing to register [ 40.642066][ T382] wacom 0003:056A:033B.0001: probe with driver wacom failed with error -22 [ 40.771770][ T10] wacom 0003:056A:033B.0002: hidraw1: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.1-1/input0 [ 40.783166][ T10] input input8: Absolute device without dev->absinfo, refusing to register [ 40.792220][ T10] wacom 0003:056A:033B.0002: probe with driver wacom failed with error -22 [ 40.803869][ T64] wacom 0003:056A:033B.0003: hidraw2: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.2-1/input0 [ 40.818332][ T516] wacom 0003:056A:033B.0004: hidraw3: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.0-1/input0 [ 40.834882][ T64] input input11: Absolute device without dev->absinfo, refusing to register [ 40.843958][ T516] input input14: Absolute device without dev->absinfo, refusing to register [ 40.853256][ T64] wacom 0003:056A:033B.0003: probe with driver wacom failed with error -22 [ 40.862054][ T516] wacom 0003:056A:033B.0004: probe with driver wacom failed with error -22 [ 40.896043][ T516] usb 6-1: USB disconnect, device number 2 [ 40.969635][ T510] ================================================================== [ 40.977810][ T510] BUG: KASAN: use-after-free in usbhid_power+0x7c/0xd0 [ 40.984650][ T510] Read of size 8 at addr ffff8881217b4008 by task syz.1.18/510 [ 40.992260][ T510] [ 40.994599][ T510] CPU: 1 UID: 0 PID: 510 Comm: syz.1.18 Not tainted syzkaller #0 305c498144b544402427cfa5c5662675229c10c6 [ 40.994615][ T510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 40.994629][ T510] Call Trace: [ 40.994633][ T510] [ 40.994639][ T510] __dump_stack+0x21/0x30 [ 40.994658][ T510] dump_stack_lvl+0x140/0x1c0 [ 40.994672][ T510] ? __cfi_dump_stack_lvl+0x10/0x10 [ 40.994687][ T510] print_address_description+0x71/0x210 [ 40.994703][ T510] print_report+0x4a/0x70 [ 40.994716][ T510] kasan_report+0x162/0x1a0 [ 40.994728][ T510] ? usbhid_power+0x7c/0xd0 [ 40.994740][ T510] ? __kmalloc_cache_noprof+0x23c/0x470 [ 40.994754][ T510] ? usbhid_power+0x7c/0xd0 [ 40.994765][ T510] __asan_report_load8_noabort+0x18/0x20 [ 40.994778][ T510] usbhid_power+0x7c/0xd0 [ 40.994789][ T510] hidraw_open+0x254/0x960 [ 40.994801][ T510] chrdev_open+0x4eb/0x610 [ 40.994822][ T510] ? __cfi_chrdev_open+0x10/0x10 [ 40.994842][ T510] ? bpf_lsm_file_open+0xd/0x20 [ 40.994857][ T510] ? __cfi_chrdev_open+0x10/0x10 [ 40.994877][ T510] do_dentry_open+0x97f/0x1510 [ 40.994895][ T510] vfs_open+0x86/0x240 [ 40.994910][ T510] ? __cfi_vfs_open+0x10/0x10 [ 40.994924][ T510] ? may_open+0x352/0x430 [ 40.994939][ T510] path_openat+0x2c49/0x35a0 [ 40.994955][ T510] ? schedule+0xc5/0x240 [ 40.994973][ T510] ? kasan_save_alloc_info+0x3a/0x50 [ 40.994991][ T510] ? getname+0x1b/0x30 [ 40.995012][ T510] ? x64_sys_call+0xe69/0x2ee0 [ 40.995027][ T510] ? do_syscall_64+0x57/0xf0 [ 40.995042][ T510] ? do_filp_open+0x440/0x440 [ 40.995057][ T510] do_filp_open+0x1f2/0x440 [ 40.995074][ T510] ? __cfi_do_filp_open+0x10/0x10 [ 40.995093][ T510] ? alloc_fd+0x4c1/0x570 [ 40.995116][ T510] do_sys_openat2+0x134/0x1d0 [ 40.995129][ T510] ? common_nsleep+0x93/0xb0 [ 40.995139][ T510] ? do_sys_open+0x100/0x100 [ 40.995151][ T510] __x64_sys_openat+0x13a/0x170 [ 40.995162][ T510] x64_sys_call+0xe69/0x2ee0 [ 40.995172][ T510] do_syscall_64+0x57/0xf0 [ 40.995181][ T510] ? clear_bhb_loop+0x50/0xa0 [ 40.995195][ T510] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 40.995207][ T510] RIP: 0033:0x7fb0be95e98e [ 40.995225][ T510] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 40.995234][ T510] RSP: 002b:00007fb0bf79fb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 40.995250][ T510] RAX: ffffffffffffffda RBX: 00007fb0bf7a06c0 RCX: 00007fb0be95e98e [ 40.995258][ T510] RDX: 0000000000000000 RSI: 00007fb0bf79fc00 RDI: ffffffffffffff9c [ 40.995265][ T510] RBP: 00007fb0bf79fc00 R08: 0000000000000000 R09: 0000000000000000 [ 40.995271][ T510] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 40.995278][ T510] R13: 00007fb0bec26038 R14: 00007fb0bec25fa0 R15: 00007fff538c7998 [ 40.995286][ T510] [ 40.995290][ T510] [ 41.282646][ T510] The buggy address belongs to the physical page: [ 41.289064][ T510] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8881217b4600 pfn:0x1217b4 [ 41.299643][ T510] flags: 0x4000000000000000(zone=1) [ 41.304864][ T510] page_type: f0(buddy) [ 41.308938][ T510] raw: 4000000000000000 ffffea0004b0ef08 ffffea0004422e08 0000000000000000 [ 41.317522][ T510] raw: ffff8881217b4600 0000000000000002 00000000f0000000 0000000000000000 [ 41.326199][ T510] page dumped because: kasan: bad access detected [ 41.332606][ T510] page_owner tracks the page as freed [ 41.337965][ T510] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x192c00(GFP_NOIO|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 516, tgid 516 (kworker/0:3), ts 40902539136, free_ts 40902556055 [ 41.359179][ T510] post_alloc_hook+0x37d/0x3b0 [ 41.363946][ T510] prep_new_page+0x2d/0x180 [ 41.368437][ T510] get_page_from_freelist+0x4aea/0x4ba0 [ 41.374060][ T510] __alloc_pages_noprof+0x35a/0x7e0 [ 41.379287][ T510] stack_depot_save_flags+0x672/0x800 [ 41.384715][ T510] kasan_save_track+0x4f/0x80 [ 41.389404][ T510] kasan_save_alloc_info+0x3a/0x50 [ 41.394689][ T510] __kasan_slab_alloc+0x73/0x90 [ 41.400069][ T510] kmem_cache_alloc_node_noprof+0x1ca/0x420 [ 41.406504][ T510] kmalloc_reserve+0xcf/0x4f0 [ 41.411288][ T510] __alloc_skb+0x13f/0x360 [ 41.415722][ T510] alloc_uevent_skb+0x85/0x240 [ 41.420767][ T510] kobject_uevent_net_broadcast+0x356/0x5e0 [ 41.426771][ T510] kobject_uevent_env+0x551/0x7e0 [ 41.431793][ T510] kobject_uevent+0x21/0x40 [ 41.436457][ T510] device_del+0xb7f/0xcf0 [ 41.440790][ T510] page last free pid 516 tgid 516 stack trace: [ 41.446941][ T510] free_unref_page+0xb99/0xf50 [ 41.451698][ T510] __free_pages+0x6b/0x3b0 [ 41.456285][ T510] free_pages+0x86/0x90 [ 41.460519][ T510] stack_depot_save_flags+0x3ab/0x800 [ 41.466084][ T510] kasan_save_track+0x4f/0x80 [ 41.470854][ T510] kasan_save_alloc_info+0x3a/0x50 [ 41.475980][ T510] __kasan_slab_alloc+0x73/0x90 [ 41.480921][ T510] kmem_cache_alloc_node_noprof+0x1ca/0x420 [ 41.486823][ T510] kmalloc_reserve+0xcf/0x4f0 [ 41.491519][ T510] __alloc_skb+0x13f/0x360 [ 41.495984][ T510] alloc_uevent_skb+0x85/0x240 [ 41.500772][ T510] kobject_uevent_net_broadcast+0x356/0x5e0 [ 41.506660][ T510] kobject_uevent_env+0x551/0x7e0 [ 41.511695][ T510] kobject_uevent+0x21/0x40 [ 41.516635][ T510] device_del+0xb7f/0xcf0 [ 41.521168][ T510] usb_disable_device+0x3af/0x770 [ 41.526194][ T510] [ 41.528506][ T510] Memory state around the buggy address: [ 41.534289][ T510] ffff8881217b3f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 41.542430][ T510] ffff8881217b3f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 41.550522][ T510] >ffff8881217b4000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 41.558595][ T510] ^ [ 41.563260][ T510] ffff8881217b4080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 41.571585][ T510] ffff8881217b4100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 41.579727][ T510] ================================================================== [ 41.592200][ T36] audit: type=1400 audit(1792663635.290:111): avc: denied { read } for pid=92 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 41.603621][ T510] Disabling lock debugging due to kernel taint [ 41.614496][ T36] audit: type=1400 audit(1792663635.290:112): avc: denied { search } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.620752][ T510] BUG: kernel NULL pointer dereference, address: 0000000000000230 [ 41.642004][ T36] audit: type=1400 audit(1792663635.290:113): avc: denied { write } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.649384][ T510] #PF: supervisor write access in kernel mode [ 41.649413][ T510] #PF: error_code(0x0002) - not-present page [ 41.649425][ T510] PGD 80000001118e3067 P4D 80000001118e3067 PUD 0 [ 41.670883][ T36] audit: type=1400 audit(1792663635.290:114): avc: denied { add_name } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.676759][ T510] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 41.676787][ T510] CPU: 0 UID: 0 PID: 510 Comm: syz.1.18 Tainted: G B syzkaller #0 305c498144b544402427cfa5c5662675229c10c6 [ 41.676812][ T510] Tainted: [B]=BAD_PAGE [ 41.676819][ T510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 41.676829][ T510] RIP: 0010:__pm_runtime_resume+0x49/0xa0 [ 41.682952][ T36] audit: type=1400 audit(1792663635.290:115): avc: denied { create } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 41.689361][ T510] Code: ff e8 2b 10 3f fe 89 d8 83 e0 04 75 07 e8 df 0b 3f fe eb 1e e8 d8 0b 3f fe 49 8d be e0 01 00 00 be 04 00 00 00 e8 d7 8a 98 fe 41 ff 86 e0 01 00 00 4d 8d be 14 01 00 00 4c 89 ff e8 b0 4e 60 [ 41.689380][ T510] RSP: 0018:ffffc9000127f6a8 EFLAGS: 00010202 [ 41.689396][ T510] RAX: 0000000000000001 RBX: 0000000000000004 RCX: ffffffff834a4339 [ 41.689408][ T510] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 0000000000000230 [ 41.714193][ T36] audit: type=1400 audit(1792663635.290:116): avc: denied { append open } for pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 41.716025][ T510] RBP: ffffc9000127f6c8 R08: 0000000000000234 R09: 0000000000000000 [ 41.716039][ T510] R10: dffffc0000000000 R11: fffffbfff1279b29 R12: 0000000000000000 [ 41.716051][ T510] R13: ffffffff86811c20 R14: 0000000000000050 R15: dffffc0000000000 [ 41.716063][ T510] FS: 00007fb0bf7a06c0(0000) GS:ffff8881f6c00000(0000) knlGS:0000000000000000 [ 41.716079][ T510] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 41.729498][ T36] audit: type=1400 audit(1792663635.290:117): avc: denied { getattr } for pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 41.733136][ T510] CR2: 0000000000000230 CR3: 0000000121408000 CR4: 00000000003526b0 [ 41.733155][ T510] Call Trace: [ 41.733162][ T510] [ 41.911724][ T510] usb_autopm_get_interface+0x25/0xf0 [ 41.917276][ T510] usbhid_power+0x84/0xd0 [ 41.921791][ T510] hidraw_open+0x254/0x960 [ 41.926288][ T510] chrdev_open+0x4eb/0x610 [ 41.930726][ T510] ? __cfi_chrdev_open+0x10/0x10 [ 41.935933][ T510] ? bpf_lsm_file_open+0xd/0x20 [ 41.941052][ T510] ? __cfi_chrdev_open+0x10/0x10 [ 41.946175][ T510] do_dentry_open+0x97f/0x1510 [ 41.951293][ T510] vfs_open+0x86/0x240 [ 41.955471][ T510] ? __cfi_vfs_open+0x10/0x10 [ 41.960246][ T510] ? may_open+0x352/0x430 [ 41.964741][ T510] path_openat+0x2c49/0x35a0 [ 41.969550][ T510] ? schedule+0xc5/0x240 [ 41.973801][ T510] ? kasan_save_alloc_info+0x3a/0x50 [ 41.979188][ T510] ? getname+0x1b/0x30 [ 41.983260][ T510] ? x64_sys_call+0xe69/0x2ee0 [ 41.988193][ T510] ? do_syscall_64+0x57/0xf0 [ 41.992798][ T510] ? do_filp_open+0x440/0x440 [ 41.997470][ T510] do_filp_open+0x1f2/0x440 [ 42.002062][ T510] ? __cfi_do_filp_open+0x10/0x10 [ 42.007247][ T510] ? alloc_fd+0x4c1/0x570 [ 42.011834][ T510] do_sys_openat2+0x134/0x1d0 [ 42.016590][ T510] ? common_nsleep+0x93/0xb0 [ 42.021275][ T510] ? do_sys_open+0x100/0x100 [ 42.025949][ T510] __x64_sys_openat+0x13a/0x170 [ 42.031160][ T510] x64_sys_call+0xe69/0x2ee0 [ 42.035932][ T510] do_syscall_64+0x57/0xf0 [ 42.040527][ T510] ? clear_bhb_loop+0x50/0xa0 [ 42.045210][ T510] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 42.051365][ T510] RIP: 0033:0x7fb0be95e98e [ 42.055787][ T510] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 42.075852][ T510] RSP: 002b:00007fb0bf79fb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 42.084528][ T510] RAX: ffffffffffffffda RBX: 00007fb0bf7a06c0 RCX: 00007fb0be95e98e [ 42.092580][ T510] RDX: 0000000000000000 RSI: 00007fb0bf79fc00 RDI: ffffffffffffff9c [ 42.100633][ T510] RBP: 00007fb0bf79fc00 R08: 0000000000000000 R09: 0000000000000000 [ 42.108669][ T510] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 42.116636][ T510] R13: 00007fb0bec26038 R14: 00007fb0bec25fa0 R15: 00007fff538c7998 [ 42.124614][ T510] [ 42.127621][ T510] Modules linked in: [ 42.131589][ T510] CR2: 0000000000000230 [ 42.135737][ T510] ---[ end trace 0000000000000000 ]--- [ 42.141272][ T510] RIP: 0010:__pm_runtime_resume+0x49/0xa0 [ 42.146984][ T510] Code: ff e8 2b 10 3f fe 89 d8 83 e0 04 75 07 e8 df 0b 3f fe eb 1e e8 d8 0b 3f fe 49 8d be e0 01 00 00 be 04 00 00 00 e8 d7 8a 98 fe 41 ff 86 e0 01 00 00 4d 8d be 14 01 00 00 4c 89 ff e8 b0 4e 60 [ 42.166853][ T510] RSP: 0018:ffffc9000127f6a8 EFLAGS: 00010202 [ 42.172905][ T510] RAX: 0000000000000001 RBX: 0000000000000004 RCX: ffffffff834a4339 [ 42.180956][ T510] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 0000000000000230 [ 42.189085][ T510] RBP: ffffc9000127f6c8 R08: 0000000000000234 R09: 0000000000000000 [ 42.197055][ T510] R10: dffffc0000000000 R11: fffffbfff1279b29 R12: 0000000000000000 [ 42.205064][ T510] R13: ffffffff86811c20 R14: 0000000000000050 R15: dffffc0000000000 [ 42.213035][ T510] FS: 00007fb0bf7a06c0(0000) GS:ffff8881f6c00000(0000) knlGS:0000000000000000 [ 42.221950][ T510] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 42.228531][ T510] CR2: 0000000000000230 CR3: 0000000121408000 CR4: 00000000003526b0 [ 42.236540][ T510] Kernel panic - not syncing: Fatal exception [ 42.242719][ T510] Kernel Offset: disabled [ 42.247032][ T510] Rebooting in 86400 seconds..