Warning: Permanently added '10.128.0.109' (ED25519) to the list of known hosts. 2026/09/13 18:44:26 parsed 1 programs 2026/09/13 18:44:26 serving rpc on tcp://41741 [ 40.600158][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 40.600173][ T28] audit: type=1400 audit(1789325068.085:106): avc: denied { unlink } for pid=408 comm="syz-executor" name="swap-file" dev="sda1" ino=2027 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 40.690450][ T408] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 41.497460][ T28] audit: type=1401 audit(1789325068.975:107): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 41.556323][ T424] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.564026][ T424] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.571910][ T424] device bridge_slave_0 entered promiscuous mode [ 41.581128][ T424] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.589309][ T424] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.597062][ T424] device bridge_slave_1 entered promiscuous mode [ 41.647462][ T424] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.655255][ T424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.662885][ T424] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.670177][ T424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.693762][ T321] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.701693][ T321] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.710602][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.718828][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.729475][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.737880][ T321] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.745092][ T321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.754352][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.763261][ T321] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.771508][ T321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.785958][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.796829][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.811480][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.824053][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.832802][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.841357][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.852103][ T424] device veth0_vlan entered promiscuous mode [ 41.863618][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.873393][ T424] device veth1_macvtap entered promiscuous mode [ 41.883325][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.896738][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.640965][ T42] device bridge_slave_1 left promiscuous mode [ 42.649644][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.661112][ T42] device bridge_slave_0 left promiscuous mode [ 42.668031][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.676671][ T42] device veth1_macvtap left promiscuous mode [ 42.683027][ T42] device veth0_vlan left promiscuous mode 2026/09/13 18:44:30 executed programs: 0 [ 42.943320][ T475] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.950905][ T475] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.958714][ T475] device bridge_slave_0 entered promiscuous mode [ 42.966162][ T475] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.973642][ T475] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.981646][ T475] device bridge_slave_1 entered promiscuous mode [ 43.034814][ T475] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.042195][ T475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.049883][ T475] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.057020][ T475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.078427][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.086708][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.094520][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.104032][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.112794][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.120445][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.129844][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.138168][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.145302][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.159085][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.170283][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.186349][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.200079][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.208360][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 43.216574][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 43.226077][ T475] device veth0_vlan entered promiscuous mode [ 43.238593][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.248570][ T475] device veth1_macvtap entered promiscuous mode [ 43.259247][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.271092][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.300667][ T28] audit: type=1400 audit(1789325070.785:108): avc: denied { mount } for pid=479 comm="syz.2.17" name="/" dev="configfs" ino=14661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 43.305456][ T480] ================================================================================ [ 43.333070][ T28] audit: type=1400 audit(1789325070.785:109): avc: denied { search } for pid=479 comm="syz.2.17" name="/" dev="configfs" ino=14661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 43.335299][ T480] UBSAN: array-index-out-of-bounds in drivers/usb/gadget/function/f_uac2.c:2082:1 [ 43.357546][ T28] audit: type=1400 audit(1789325070.785:110): avc: denied { write } for pid=479 comm="syz.2.17" name="usb_gadget" dev="configfs" ino=14662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 43.389007][ T28] audit: type=1400 audit(1789325070.785:111): avc: denied { add_name } for pid=479 comm="syz.2.17" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 43.389071][ T480] index 10 is out of range for type 'int[10]' [ 43.389083][ T480] CPU: 1 PID: 480 Comm: syz.2.17 Not tainted syzkaller #0 [ 43.423382][ T480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 43.433473][ T480] Call Trace: [ 43.436948][ T480] [ 43.439898][ T480] __dump_stack+0x21/0x24 [ 43.444278][ T480] dump_stack_lvl+0x110/0x170 [ 43.449098][ T480] ? __cfi_dump_stack_lvl+0x8/0x8 [ 43.454584][ T480] dump_stack+0x15/0x24 [ 43.458855][ T480] ubsan_epilogue+0xe/0x40 [ 43.463382][ T480] __ubsan_handle_out_of_bounds+0xdf/0xf0 [ 43.469818][ T480] f_uac2_opts_c_srate_store+0x1d7/0x2a0 [ 43.476181][ T480] ? __cfi_f_uac2_opts_c_srate_store+0x10/0x10 [ 43.482379][ T480] ? down_read+0xa6/0xf0 [ 43.486660][ T480] ? __cfi_down_read+0x10/0x10 [ 43.491532][ T480] ? avc_policy_seqno+0x1b/0x70 [ 43.496407][ T480] ? selinux_file_permission+0x2a5/0x510 [ 43.502674][ T480] configfs_write_iter+0x323/0x410 [ 43.508016][ T480] ? __cfi_f_uac2_opts_c_srate_store+0x10/0x10 [ 43.514264][ T480] vfs_write+0x5ef/0xd00 [ 43.518556][ T480] ? __cfi_vfs_write+0x10/0x10 [ 43.523438][ T480] ? __cfi_mutex_lock+0x10/0x10 [ 43.528337][ T480] ? __fdget_pos+0x2cd/0x380 [ 43.533044][ T480] ? ksys_write+0x70/0x260 [ 43.537930][ T480] ksys_write+0x14a/0x260 [ 43.542547][ T480] ? __cfi_ksys_write+0x10/0x10 [ 43.547900][ T480] ? fpregs_restore_userregs+0x128/0x260 [ 43.553887][ T480] __x64_sys_write+0x7b/0x90 [ 43.558804][ T480] x64_sys_call+0x27b/0x9a0 [ 43.563545][ T480] do_syscall_64+0x4c/0xa0 [ 43.568983][ T480] ? clear_bhb_loop+0x30/0x80 [ 43.573886][ T480] ? clear_bhb_loop+0x30/0x80 [ 43.578872][ T480] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 43.585061][ T480] RIP: 0033:0x7f77e379e0d9 [ 43.590266][ T480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.611384][ T480] RSP: 002b:00007f77e4748028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 43.620009][ T480] RAX: ffffffffffffffda RBX: 00007f77e3a25fa0 RCX: 00007f77e379e0d9 [ 43.630096][ T480] RDX: 0000000000000053 RSI: 0000200000000440 RDI: 0000000000000003 [ 43.639060][ T480] RBP: 00007f77e3835024 R08: 0000000000000000 R09: 0000000000000000 [ 43.647403][ T480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 43.656056][ T480] R13: 00007f77e3a26038 R14: 00007f77e3a25fa0 R15: 00007ffc3b50c8c8 [ 43.664909][ T480] [ 43.669600][ T480] ================================================================================ [ 43.680179][ T28] audit: type=1400 audit(1789325070.785:112): avc: denied { create } for pid=479 comm="syz.2.17" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 43.700292][ T28] audit: type=1400 audit(1789325070.785:113): avc: denied { write } for pid=479 comm="syz.2.17" name="c_srate" dev="configfs" ino=17392 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 43.724606][ T28] audit: type=1400 audit(1789325070.785:114): avc: denied { open } for pid=479 comm="syz.2.17" path="/0/my_config/usb_gadget/g1/functions/uac2.usb0/c_srate" dev="configfs" ino=17392 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 43.752486][ T28] audit: type=1400 audit(1789325071.165:115): avc: denied { unmount } for pid=475 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 2026/09/13 18:44:35 executed programs: 246 2026/09/13 18:44:40 executed programs: 546