Warning: Permanently added '10.128.0.165' (ED25519) to the list of known hosts. 2026/04/04 09:01:50 parsed 1 programs [ 24.753004][ T28] audit: type=1400 audit(1775293310.605:64): avc: denied { node_bind } for pid=282 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 24.774435][ T28] audit: type=1400 audit(1775293310.605:65): avc: denied { module_request } for pid=282 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 25.571990][ T28] audit: type=1400 audit(1775293311.425:66): avc: denied { mounton } for pid=290 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.572952][ T290] cgroup: Unknown subsys name 'net' [ 25.595354][ T28] audit: type=1400 audit(1775293311.425:67): avc: denied { mount } for pid=290 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.623137][ T28] audit: type=1400 audit(1775293311.455:68): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.623674][ T290] cgroup: Unknown subsys name 'devices' [ 25.741356][ T290] cgroup: Unknown subsys name 'hugetlb' [ 25.747586][ T290] cgroup: Unknown subsys name 'rlimit' [ 25.854742][ T28] audit: type=1400 audit(1775293311.705:69): avc: denied { setattr } for pid=290 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.878551][ T28] audit: type=1400 audit(1775293311.705:70): avc: denied { create } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.887354][ T292] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.899833][ T28] audit: type=1400 audit(1775293311.705:71): avc: denied { write } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.928798][ T28] audit: type=1400 audit(1775293311.705:72): avc: denied { read } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 25.949223][ T28] audit: type=1400 audit(1775293311.705:73): avc: denied { mounton } for pid=290 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.980338][ T290] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.748554][ T295] request_module fs-gadgetfs succeeded, but still no fs? [ 26.882436][ T300] syz-executor (300) used greatest stack depth: 22016 bytes left [ 27.236735][ T333] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.243844][ T333] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.251373][ T333] device bridge_slave_0 entered promiscuous mode [ 27.258390][ T333] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.265481][ T333] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.273142][ T333] device bridge_slave_1 entered promiscuous mode [ 27.312158][ T333] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.319336][ T333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.326772][ T333] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.333989][ T333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.354008][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.361648][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.368962][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.379051][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.387554][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.394884][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.403806][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.413564][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.420694][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.434379][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.443459][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.457350][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.468530][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.477014][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.485126][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.494079][ T333] device veth0_vlan entered promiscuous mode [ 27.504179][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.513169][ T333] device veth1_macvtap entered promiscuous mode [ 27.522492][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.532899][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2026/04/04 09:01:53 executed programs: 0 [ 27.898864][ T359] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.906443][ T359] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.914222][ T359] device bridge_slave_0 entered promiscuous mode [ 27.927257][ T359] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.934330][ T359] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.941882][ T359] device bridge_slave_1 entered promiscuous mode [ 27.988573][ T359] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.995658][ T359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.003061][ T359] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.010190][ T359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.035705][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.043833][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.051194][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.060207][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.068415][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.075470][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.084698][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.093400][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.100478][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.116546][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.126131][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.139066][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.157481][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.165857][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.173464][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.182123][ T359] device veth0_vlan entered promiscuous mode [ 28.192015][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.204976][ T359] device veth1_macvtap entered promiscuous mode [ 28.215291][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.225787][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.261877][ T363] loop2: detected capacity change from 0 to 2048 [ 28.282845][ T363] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 28.328904][ T363] ================================================================================ [ 28.338656][ T363] UBSAN: shift-out-of-bounds in fs/ext4/super.c:2706:15 [ 28.346394][ T363] shift exponent 1953789044 is too large for 32-bit type 'int' [ 28.354382][ T363] CPU: 0 PID: 363 Comm: syz.2.17 Not tainted syzkaller #0 [ 28.361683][ T363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 28.371824][ T363] Call Trace: [ 28.375094][ T363] [ 28.378030][ T363] __dump_stack+0x21/0x24 [ 28.382358][ T363] dump_stack_lvl+0x110/0x170 [ 28.387120][ T363] ? __cfi_dump_stack_lvl+0x8/0x8 [ 28.392135][ T363] ? do_syscall_64+0x4c/0xa0 [ 28.396832][ T363] dump_stack+0x15/0x24 [ 28.401316][ T363] ubsan_epilogue+0xe/0x40 [ 28.405818][ T363] __ubsan_handle_shift_out_of_bounds+0x37c/0x400 [ 28.412250][ T363] ? __list_lru_walk_one+0x5db/0x600 [ 28.417689][ T363] ext4_check_opt_consistency+0x138d/0x1720 [ 28.423620][ T363] ext4_reconfigure+0xca/0x2830 [ 28.428483][ T363] ? list_lru_walk_node+0x25f/0x2f0 [ 28.433690][ T363] ? __cfi_dentry_lru_isolate_shrink+0x10/0x10 [ 28.439964][ T363] ? __cfi_list_lru_walk_node+0x10/0x10 [ 28.445524][ T363] ? shrink_dentry_list+0x4e4/0x500 [ 28.450746][ T363] ? selinux_capable+0x2b6/0x3b0 [ 28.455688][ T363] ? vfs_parse_fs_param+0x2d6/0x450 [ 28.460974][ T363] ? list_lru_count_node+0x1d/0x70 [ 28.466076][ T363] ? shrink_dcache_sb+0x12a/0x170 [ 28.471187][ T363] ? __cfi_shrink_dcache_sb+0x10/0x10 [ 28.477185][ T363] reconfigure_super+0x228/0x8a0 [ 28.482307][ T363] path_mount+0xdb5/0xfc0 [ 28.486678][ T363] ? user_path_at_empty+0x161/0x1c0 [ 28.492166][ T363] __se_sys_mount+0x320/0x390 [ 28.497179][ T363] ? __x64_sys_mount+0xd0/0xd0 [ 28.501966][ T363] ? fput+0x15b/0x1a0 [ 28.505954][ T363] __x64_sys_mount+0xbf/0xd0 [ 28.510738][ T363] x64_sys_call+0x65d/0x9a0 [ 28.515330][ T363] do_syscall_64+0x4c/0xa0 [ 28.519850][ T363] ? clear_bhb_loop+0x30/0x80 [ 28.524657][ T363] ? clear_bhb_loop+0x30/0x80 [ 28.531250][ T363] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 28.537169][ T363] RIP: 0033:0x7f8a12b9c819 [ 28.541863][ T363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 28.561689][ T363] RSP: 002b:00007fff8a8feb38 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 28.570192][ T363] RAX: ffffffffffffffda RBX: 00007f8a12e15fa0 RCX: 00007f8a12b9c819 [ 28.578246][ T363] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000000 [ 28.586209][ T363] RBP: 00007f8a12c32c91 R08: 0000200000000000 R09: 0000000000000000 [ 28.594179][ T363] R10: 0000000002200020 R11: 0000000000000246 R12: 0000000000000000 [ 28.602135][ T363] R13: 00007f8a12e15fac R14: 00007f8a12e15fa0 R15: 00007f8a12e15fa0 [ 28.610191][ T363] [ 28.617271][ T363] ================================================================================ [ 28.626847][ T363] EXT4-fs: test_dummy_encryption requires encrypt feature [ 28.636171][ T359] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #2: block 16: comm syz-executor: lblock 0 mapped to illegal pblock 16 (length 1) [ 28.651503][ T359] EXT4-fs warning (device loop2): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -117 reading directory block