Warning: Permanently added '10.128.0.73' (ED25519) to the list of known hosts. 2025/12/09 00:44:34 parsed 1 programs [ 22.637094][ T30] audit: type=1400 audit(1765241074.231:64): avc: denied { node_bind } for pid=281 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 22.657807][ T30] audit: type=1400 audit(1765241074.231:65): avc: denied { module_request } for pid=281 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 23.271550][ T30] audit: type=1400 audit(1765241074.861:66): avc: denied { mounton } for pid=289 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.272670][ T289] cgroup: Unknown subsys name 'net' [ 23.299400][ T30] audit: type=1400 audit(1765241074.871:67): avc: denied { mount } for pid=289 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.321684][ T289] cgroup: Unknown subsys name 'devices' [ 23.321760][ T30] audit: type=1400 audit(1765241074.891:68): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.493063][ T289] cgroup: Unknown subsys name 'hugetlb' [ 23.498664][ T289] cgroup: Unknown subsys name 'rlimit' [ 23.700454][ T30] audit: type=1400 audit(1765241075.291:69): avc: denied { setattr } for pid=289 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.723699][ T30] audit: type=1400 audit(1765241075.291:70): avc: denied { create } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.744146][ T30] audit: type=1400 audit(1765241075.291:71): avc: denied { write } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.748697][ T292] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 23.764487][ T30] audit: type=1400 audit(1765241075.291:72): avc: denied { read } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 23.793190][ T30] audit: type=1400 audit(1765241075.301:73): avc: denied { mounton } for pid=289 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.822650][ T289] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.269990][ T294] request_module fs-gadgetfs succeeded, but still no fs? [ 24.471473][ T313] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.478515][ T313] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.485905][ T313] device bridge_slave_0 entered promiscuous mode [ 24.492695][ T313] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.499701][ T313] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.507068][ T313] device bridge_slave_1 entered promiscuous mode [ 24.543641][ T313] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.550677][ T313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.558094][ T313] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.565127][ T313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.582046][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.589491][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.596941][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.604375][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.613843][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.621989][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.629034][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.637490][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.645686][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.652726][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.664733][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.673567][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.686852][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.697533][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.705697][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.713273][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.722260][ T313] device veth0_vlan entered promiscuous mode [ 24.731050][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.739983][ T313] device veth1_macvtap entered promiscuous mode [ 24.749599][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.759552][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.799586][ T313] syz-executor (313) used greatest stack depth: 21792 bytes left 2025/12/09 00:44:36 executed programs: 0 [ 25.278828][ T362] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.285941][ T362] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.294180][ T362] device bridge_slave_0 entered promiscuous mode [ 25.301224][ T362] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.308295][ T362] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.315584][ T362] device bridge_slave_1 entered promiscuous mode [ 25.360626][ T362] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.367949][ T362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.375216][ T362] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.382247][ T362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.398357][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.406230][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.413531][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.423013][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.431118][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.438159][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.458247][ T362] device veth0_vlan entered promiscuous mode [ 25.466130][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.474747][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.483005][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.490417][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.498029][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.506194][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.513226][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.520529][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.528565][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.542502][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.550660][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.559597][ T362] device veth1_macvtap entered promiscuous mode [ 25.568164][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.575752][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.584229][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.593862][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.602198][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.611707][ T8] device bridge_slave_1 left promiscuous mode [ 25.617802][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.625667][ T8] device bridge_slave_0 left promiscuous mode [ 25.631897][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.639587][ T8] device veth1_macvtap left promiscuous mode [ 25.645622][ T8] device veth0_vlan left promiscuous mode [ 25.991532][ T372] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 26.351587][ T372] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.362490][ T372] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.372232][ T372] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 26.385095][ T372] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 26.394117][ T372] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.403282][ T372] usb 3-1: config 0 descriptor?? [ 26.882500][ T372] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 26.891411][ T372] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 27.151589][ T373] ================================================================================ [ 27.160969][ T373] UBSAN: shift-out-of-bounds in drivers/hid/hid-core.c:1346:16 [ 27.168503][ T373] shift exponent 4294967295 is too large for 32-bit type '__s32' (aka 'int') [ 27.177242][ T373] CPU: 1 PID: 373 Comm: syz.2.17 Not tainted syzkaller #0 [ 27.184327][ T373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 27.194361][ T373] Call Trace: [ 27.197617][ T373] [ 27.200530][ T373] __dump_stack+0x21/0x30 [ 27.204844][ T373] dump_stack_lvl+0xee/0x150 [ 27.209412][ T373] ? show_regs_print_info+0x20/0x20 [ 27.214672][ T373] ? do_syscall_64+0x4c/0xa0 [ 27.219244][ T373] dump_stack+0x15/0x20 [ 27.223385][ T373] ubsan_epilogue+0xe/0x40 [ 27.227796][ T373] __ubsan_handle_shift_out_of_bounds+0x37c/0x400 [ 27.234197][ T373] s32ton+0xe8/0x150 [ 27.238070][ T373] hid_output_report+0x423/0x780 [ 27.242980][ T373] usbhid_submit_report+0x45b/0xa80 [ 27.248148][ T373] usbhid_request+0x50/0x60 [ 27.252635][ T373] ? usbhid_parse+0xc70/0xc70 [ 27.257302][ T373] hiddev_ioctl+0xfd5/0x1630 [ 27.261869][ T373] ? selinux_file_ioctl+0x377/0x480 [ 27.267066][ T373] ? hiddev_poll+0x1d0/0x1d0 [ 27.271636][ T373] ? selinux_file_alloc_security+0x120/0x120 [ 27.277686][ T373] ? __x64_sys_futex+0x100/0x100 [ 27.282605][ T373] ? security_file_ioctl+0x84/0xa0 [ 27.287695][ T373] ? hiddev_poll+0x1d0/0x1d0 [ 27.292260][ T373] __se_sys_ioctl+0x121/0x1a0 [ 27.296919][ T373] __x64_sys_ioctl+0x7b/0x90 [ 27.301479][ T373] x64_sys_call+0x2f/0x9a0 [ 27.305903][ T373] do_syscall_64+0x4c/0xa0 [ 27.310295][ T373] ? clear_bhb_loop+0x50/0xa0 [ 27.314944][ T373] ? clear_bhb_loop+0x50/0xa0 [ 27.319591][ T373] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 27.325463][ T373] RIP: 0033:0x7fcd7fea3749 [ 27.329850][ T373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 27.349437][ T373] RSP: 002b:00007ffd83066138 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 27.357826][ T373] RAX: ffffffffffffffda RBX: 00007fcd800f9fa0 RCX: 00007fcd7fea3749 [ 27.365811][ T373] RDX: 0000200000000240 RSI: 00000000400c4808 RDI: 0000000000000004 [ 27.373769][ T373] RBP: 00007fcd7ff27f91 R08: 0000000000000000 R09: 0000000000000000 [ 27.381818][ T373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 27.389772][ T373] R13: 00007fcd800f9fa0 R14: 00007fcd800f9fa0 R15: 0000000000000003 [ 27.397728][ T373] [ 27.400721][ T373] ================================================================================