Warning: Permanently added '10.128.1.103' (ED25519) to the list of known hosts. 2025/12/23 21:05:32 parsed 1 programs Setting up swapspace version 1, size = 127995904 bytes [ 45.696429][ T30] audit: type=1400 audit(1766523933.285:105): avc: denied { unlink } for pid=399 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 45.737550][ T399] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.533663][ T438] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.541080][ T438] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.548638][ T438] device bridge_slave_0 entered promiscuous mode [ 46.555907][ T438] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.563186][ T438] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.570594][ T438] device bridge_slave_1 entered promiscuous mode [ 46.608924][ T438] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.616441][ T438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.624085][ T438] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.631752][ T438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.648555][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.656273][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.663783][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.672590][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.681073][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.688270][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.697320][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.705912][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.713071][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.726291][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.735554][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.748428][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.760062][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.768662][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.776415][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.784887][ T438] device veth0_vlan entered promiscuous mode [ 46.794516][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.804023][ T438] device veth1_macvtap entered promiscuous mode [ 46.813031][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.822851][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.933652][ T30] audit: type=1401 audit(1766523934.515:106): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" 2025/12/23 21:05:34 executed programs: 0 [ 47.169960][ T469] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.177136][ T469] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.184993][ T469] device bridge_slave_0 entered promiscuous mode [ 47.192331][ T469] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.199781][ T469] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.207317][ T469] device bridge_slave_1 entered promiscuous mode [ 47.248978][ T469] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.256466][ T469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.263780][ T469] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.271468][ T469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.292578][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.300458][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.308107][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.321960][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.330302][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.337391][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.346501][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.355231][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.362457][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.379411][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.389345][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.402229][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.414504][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.423393][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.432172][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.441424][ T469] device veth0_vlan entered promiscuous mode [ 47.453079][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.463616][ T469] device veth1_macvtap entered promiscuous mode [ 47.473532][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.482845][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.492908][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.501629][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.526318][ T30] audit: type=1400 audit(1766523935.115:107): avc: denied { read write } for pid=479 comm="syz.2.17" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 47.553726][ T30] audit: type=1400 audit(1766523935.115:108): avc: denied { open } for pid=479 comm="syz.2.17" path="/dev/raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 47.577063][ T30] audit: type=1400 audit(1766523935.115:109): avc: denied { ioctl } for pid=479 comm="syz.2.17" path="/dev/raw-gadget" dev="devtmpfs" ino=254 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 47.795769][ T328] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 48.155908][ T328] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.167367][ T328] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.177875][ T328] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 48.192091][ T328] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 48.201424][ T328] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.213252][ T328] usb 3-1: config 0 descriptor?? [ 48.527006][ T318] device bridge_slave_1 left promiscuous mode [ 48.533235][ T318] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.541280][ T318] device bridge_slave_0 left promiscuous mode [ 48.547947][ T318] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.556463][ T318] device veth1_macvtap left promiscuous mode [ 48.562587][ T318] device veth0_vlan left promiscuous mode [ 48.696798][ T328] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 48.706978][ T328] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 48.966054][ T480] ================================================================================ [ 48.976395][ T480] UBSAN: shift-out-of-bounds in drivers/hid/hid-core.c:1346:16 [ 48.984397][ T480] shift exponent 4294967295 is too large for 32-bit type '__s32' (aka 'int') [ 48.994397][ T480] CPU: 1 PID: 480 Comm: syz.2.17 Not tainted syzkaller #0 [ 49.002089][ T480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 49.012799][ T480] Call Trace: [ 49.016348][ T480] [ 49.019372][ T480] __dump_stack+0x21/0x30 [ 49.023795][ T480] dump_stack_lvl+0xee/0x150 [ 49.028384][ T480] ? show_regs_print_info+0x20/0x20 [ 49.033656][ T480] ? do_syscall_64+0x4c/0xa0 [ 49.038296][ T480] dump_stack+0x15/0x20 [ 49.042625][ T480] ubsan_epilogue+0xe/0x40 [ 49.047032][ T480] __ubsan_handle_shift_out_of_bounds+0x37c/0x400 [ 49.053447][ T480] s32ton+0xe8/0x150 [ 49.057427][ T480] hid_output_report+0x423/0x780 [ 49.062468][ T480] usbhid_submit_report+0x45b/0xa80 [ 49.067658][ T480] usbhid_request+0x50/0x60 [ 49.072366][ T480] ? usbhid_parse+0xc70/0xc70 [ 49.077324][ T480] hiddev_ioctl+0xfd5/0x1630 [ 49.081917][ T480] ? selinux_file_ioctl+0x377/0x480 [ 49.087194][ T480] ? hiddev_poll+0x1d0/0x1d0 [ 49.091884][ T480] ? selinux_file_alloc_security+0x120/0x120 [ 49.098346][ T480] ? __fget_files+0x2c4/0x320 [ 49.103219][ T480] ? security_file_ioctl+0x84/0xa0 [ 49.108723][ T480] ? hiddev_poll+0x1d0/0x1d0 [ 49.113501][ T480] __se_sys_ioctl+0x121/0x1a0 [ 49.118174][ T480] __x64_sys_ioctl+0x7b/0x90 [ 49.122867][ T480] x64_sys_call+0x2f/0x9a0 [ 49.127742][ T480] do_syscall_64+0x4c/0xa0 [ 49.132267][ T480] ? clear_bhb_loop+0x50/0xa0 [ 49.137035][ T480] ? clear_bhb_loop+0x50/0xa0 [ 49.142111][ T480] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 49.148441][ T480] RIP: 0033:0x7f001df8f749 [ 49.152963][ T480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.174122][ T480] RSP: 002b:00007f001ddff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 49.183588][ T480] RAX: ffffffffffffffda RBX: 00007f001e1e5fa0 RCX: 00007f001df8f749 [ 49.192878][ T480] RDX: 0000200000000240 RSI: 00000000400c4808 RDI: 0000000000000004 [ 49.201057][ T480] RBP: 00007f001e013f91 R08: 0000000000000000 R09: 0000000000000000 [ 49.210331][ T480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 49.219430][ T480] R13: 00007f001e1e6038 R14: 00007f001e1e5fa0 R15: 00007ffdf7c9d618 [ 49.228698][ T480] [ 49.231734][ T480] ================================================================================ [ 50.865710][ T374] usb 3-1: reset high-speed USB device number 2 using dummy_hcd 2025/12/23 21:05:44 executed programs: 4 [ 56.905703][ T374] usb 3-1: reset high-speed USB device number 2 using dummy_hcd