Warning: Permanently added '10.128.1.89' (ED25519) to the list of known hosts. 2025/12/23 20:50:05 parsed 1 programs Setting up swapspace version 1, size = 127995904 bytes [ 44.953720][ T30] audit: type=1400 audit(1766523006.222:105): avc: denied { unlink } for pid=398 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 44.995755][ T398] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 45.780172][ T437] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.787303][ T437] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.795030][ T437] device bridge_slave_0 entered promiscuous mode [ 45.802368][ T437] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.809562][ T437] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.817119][ T437] device bridge_slave_1 entered promiscuous mode [ 45.852129][ T437] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.859178][ T437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.866443][ T437] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.873547][ T437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.889776][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.897429][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.904753][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.914059][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.922243][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.929294][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.939983][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.948236][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.955281][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.969014][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.976946][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.988612][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.998933][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.006954][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.014670][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.022930][ T437] device veth0_vlan entered promiscuous mode [ 46.033355][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.042311][ T437] device veth1_macvtap entered promiscuous mode [ 46.050855][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.060363][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.102357][ T30] audit: type=1401 audit(1766523007.362:106): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 46.147025][ T30] audit: type=1400 audit(1766523007.412:107): avc: denied { create } for pid=456 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 2025/12/23 20:50:07 executed programs: 0 [ 46.324016][ T467] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.331060][ T467] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.338445][ T467] device bridge_slave_0 entered promiscuous mode [ 46.345616][ T467] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.352664][ T467] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.360151][ T467] device bridge_slave_1 entered promiscuous mode [ 46.406035][ T467] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.413100][ T467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.420376][ T467] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.427478][ T467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.442952][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.450575][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.457856][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.471049][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.479326][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.486418][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.494687][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.502832][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.509893][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.520696][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.530141][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.547768][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.558784][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.566938][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.574525][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.587153][ T467] device veth0_vlan entered promiscuous mode [ 46.596615][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.609819][ T467] device veth1_macvtap entered promiscuous mode [ 46.618405][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.628083][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.651539][ T30] audit: type=1400 audit(1766523007.912:108): avc: denied { read write } for pid=477 comm="syz.2.17" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 46.674765][ T30] audit: type=1400 audit(1766523007.912:109): avc: denied { open } for pid=477 comm="syz.2.17" path="/dev/raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 46.698260][ T30] audit: type=1400 audit(1766523007.912:110): avc: denied { ioctl } for pid=477 comm="syz.2.17" path="/dev/raw-gadget" dev="devtmpfs" ino=254 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 46.953213][ T20] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 47.323188][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.334115][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 47.343931][ T20] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 47.357038][ T20] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 47.366139][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.378255][ T20] usb 3-1: config 0 descriptor?? [ 47.864068][ T20] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 47.873154][ T20] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 47.886790][ T8] device bridge_slave_1 left promiscuous mode [ 47.892910][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.900449][ T8] device bridge_slave_0 left promiscuous mode [ 47.906816][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.914866][ T8] device veth1_macvtap left promiscuous mode [ 47.920945][ T8] device veth0_vlan left promiscuous mode [ 48.133415][ T478] ================================================================================ [ 48.142998][ T478] UBSAN: shift-out-of-bounds in drivers/hid/hid-core.c:1346:16 [ 48.150661][ T478] shift exponent 4294967295 is too large for 32-bit type '__s32' (aka 'int') [ 48.159513][ T478] CPU: 0 PID: 478 Comm: syz.2.17 Not tainted syzkaller #0 [ 48.166617][ T478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 48.176679][ T478] Call Trace: [ 48.180135][ T478] [ 48.183071][ T478] __dump_stack+0x21/0x30 [ 48.187440][ T478] dump_stack_lvl+0xee/0x150 [ 48.192033][ T478] ? show_regs_print_info+0x20/0x20 [ 48.197319][ T478] ? do_syscall_64+0x4c/0xa0 [ 48.201919][ T478] dump_stack+0x15/0x20 [ 48.206172][ T478] ubsan_epilogue+0xe/0x40 [ 48.210741][ T478] __ubsan_handle_shift_out_of_bounds+0x37c/0x400 [ 48.217141][ T478] s32ton+0xe8/0x150 [ 48.221014][ T478] hid_output_report+0x423/0x780 [ 48.225933][ T478] usbhid_submit_report+0x45b/0xa80 [ 48.231105][ T478] usbhid_request+0x50/0x60 [ 48.235583][ T478] ? usbhid_parse+0xc70/0xc70 [ 48.240319][ T478] hiddev_ioctl+0xfd5/0x1630 [ 48.244891][ T478] ? selinux_file_ioctl+0x377/0x480 [ 48.250060][ T478] ? hiddev_poll+0x1d0/0x1d0 [ 48.254626][ T478] ? selinux_file_alloc_security+0x120/0x120 [ 48.260578][ T478] ? __fget_files+0x2c4/0x320 [ 48.265229][ T478] ? security_file_ioctl+0x84/0xa0 [ 48.270421][ T478] ? hiddev_poll+0x1d0/0x1d0 [ 48.274981][ T478] __se_sys_ioctl+0x121/0x1a0 [ 48.279628][ T478] __x64_sys_ioctl+0x7b/0x90 [ 48.284329][ T478] x64_sys_call+0x2f/0x9a0 [ 48.288725][ T478] do_syscall_64+0x4c/0xa0 [ 48.293112][ T478] ? clear_bhb_loop+0x50/0xa0 [ 48.297777][ T478] ? clear_bhb_loop+0x50/0xa0 [ 48.302430][ T478] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 48.308296][ T478] RIP: 0033:0x7fb2b8418749 [ 48.312685][ T478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.332352][ T478] RSP: 002b:00007fb2b8288038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 48.340855][ T478] RAX: ffffffffffffffda RBX: 00007fb2b866efa0 RCX: 00007fb2b8418749 [ 48.348822][ T478] RDX: 0000200000000240 RSI: 00000000400c4808 RDI: 0000000000000004 [ 48.356794][ T478] RBP: 00007fb2b849cf91 R08: 0000000000000000 R09: 0000000000000000 [ 48.364757][ T478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 48.372719][ T478] R13: 00007fb2b866f038 R14: 00007fb2b866efa0 R15: 00007fff69bca128 [ 48.380768][ T478] [ 48.383851][ T478] ================================================================================ [ 50.013142][ T447] usb 3-1: reset high-speed USB device number 2 using dummy_hcd 2025/12/23 20:50:17 executed programs: 4 [ 56.053147][ T447] usb 3-1: reset high-speed USB device number 2 using dummy_hcd