Warning: Permanently added '10.128.1.235' (ED25519) to the list of known hosts. 2025/11/26 16:44:23 parsed 1 programs [ 21.395692][ T30] audit: type=1400 audit(1764175463.287:64): avc: denied { node_bind } for pid=281 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 21.403481][ T30] audit: type=1400 audit(1764175463.287:65): avc: denied { module_request } for pid=281 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 22.335457][ T30] audit: type=1400 audit(1764175464.227:66): avc: denied { mounton } for pid=289 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.336905][ T289] cgroup: Unknown subsys name 'net' [ 22.358256][ T30] audit: type=1400 audit(1764175464.227:67): avc: denied { mount } for pid=289 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.385535][ T30] audit: type=1400 audit(1764175464.257:68): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.385736][ T289] cgroup: Unknown subsys name 'devices' [ 22.555533][ T289] cgroup: Unknown subsys name 'hugetlb' [ 22.561150][ T289] cgroup: Unknown subsys name 'rlimit' [ 22.827958][ T30] audit: type=1400 audit(1764175464.717:69): avc: denied { setattr } for pid=289 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.851289][ T30] audit: type=1400 audit(1764175464.717:70): avc: denied { create } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 22.864598][ T292] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.871990][ T30] audit: type=1400 audit(1764175464.717:71): avc: denied { write } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.900513][ T30] audit: type=1400 audit(1764175464.717:72): avc: denied { read } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.904811][ T289] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.921294][ T30] audit: type=1400 audit(1764175464.717:73): avc: denied { mounton } for pid=289 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.448953][ T294] request_module fs-gadgetfs succeeded, but still no fs? [ 23.612964][ T308] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.620518][ T308] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.628117][ T308] device bridge_slave_0 entered promiscuous mode [ 23.635916][ T308] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.642946][ T308] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.650427][ T308] device bridge_slave_1 entered promiscuous mode [ 23.686100][ T304] syz-executor (304) used greatest stack depth: 21704 bytes left [ 23.702399][ T308] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.709496][ T308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.716796][ T308] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.723844][ T308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.742474][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.750379][ T303] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.757894][ T303] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.768403][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.776680][ T303] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.783747][ T303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.792393][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.800795][ T303] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.807998][ T303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.821436][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.830686][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.844523][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.856862][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.864981][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.872428][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.880866][ T308] device veth0_vlan entered promiscuous mode [ 23.890743][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.900708][ T308] device veth1_macvtap entered promiscuous mode [ 23.909856][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.920497][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.952029][ T308] syz-executor (308) used greatest stack depth: 21376 bytes left [ 24.574671][ T45] device bridge_slave_1 left promiscuous mode [ 24.591043][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.601268][ T45] device bridge_slave_0 left promiscuous mode [ 24.611257][ T45] bridge0: port 1(bridge_slave_0) entered disabled state 2025/11/26 16:44:26 executed programs: 0 [ 24.632435][ T45] device veth1_macvtap left promiscuous mode [ 24.641564][ T45] device veth0_vlan left promiscuous mode [ 24.805454][ T362] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.812718][ T362] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.820350][ T362] device bridge_slave_0 entered promiscuous mode [ 24.827570][ T362] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.834683][ T362] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.842229][ T362] device bridge_slave_1 entered promiscuous mode [ 24.889319][ T362] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.896376][ T362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.903695][ T362] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.910726][ T362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.930268][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.938294][ T303] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.945617][ T303] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.955254][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.963511][ T303] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.970529][ T303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.979273][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.987537][ T303] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.994603][ T303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.012821][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.020916][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.031919][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.044489][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.052759][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.060487][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.068976][ T362] device veth0_vlan entered promiscuous mode [ 25.080346][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.089526][ T362] device veth1_macvtap entered promiscuous mode [ 25.098764][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.108816][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.226709][ T373] loop2: detected capacity change from 0 to 40427 [ 25.286738][ T373] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 25.293822][ T373] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 25.302171][ T373] ================================================================================ [ 25.311827][ T373] UBSAN: shift-out-of-bounds in fs/f2fs/super.c:934:5 [ 25.318627][ T373] shift exponent 150 is too large for 32-bit type 'int' [ 25.325626][ T373] CPU: 1 PID: 373 Comm: syz.2.17 Not tainted syzkaller #0 [ 25.332744][ T373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 25.342813][ T373] Call Trace: [ 25.346088][ T373] [ 25.349020][ T373] __dump_stack+0x21/0x30 [ 25.353352][ T373] dump_stack_lvl+0xee/0x150 [ 25.357945][ T373] ? show_regs_print_info+0x20/0x20 [ 25.363140][ T373] ? slab_free_freelist_hook+0xc2/0x190 [ 25.368694][ T373] dump_stack+0x15/0x20 [ 25.372842][ T373] ubsan_epilogue+0xe/0x40 [ 25.377251][ T373] __ubsan_handle_shift_out_of_bounds+0x37c/0x400 [ 25.383660][ T373] ? match_int+0x13c/0x190 [ 25.388094][ T373] parse_options+0x47f1/0x4820 [ 25.392867][ T373] ? default_options+0xc30/0xc30 [ 25.397797][ T373] ? __kmalloc_track_caller+0x13c/0x2c0 [ 25.403341][ T373] ? memcpy+0x56/0x70 [ 25.407335][ T373] f2fs_fill_super+0x1f9d/0x6d10 [ 25.412272][ T373] ? kill_f2fs_super+0x390/0x390 [ 25.417200][ T373] ? vscnprintf+0x80/0x80 [ 25.421522][ T373] ? mutex_unlock+0x89/0x220 [ 25.426110][ T373] ? set_blocksize+0x1fc/0x380 [ 25.430885][ T373] ? sb_set_blocksize+0xaa/0xf0 [ 25.435726][ T373] ? kill_f2fs_super+0x390/0x390 [ 25.440730][ T373] mount_bdev+0x2ae/0x3e0 [ 25.445052][ T373] ? kill_f2fs_super+0x390/0x390 [ 25.449984][ T373] f2fs_mount+0x34/0x40 [ 25.454137][ T373] legacy_get_tree+0xed/0x190 [ 25.458807][ T373] ? trace_raw_output_f2fs__rw_end+0x110/0x110 [ 25.464961][ T373] vfs_get_tree+0x89/0x260 [ 25.469387][ T373] do_new_mount+0x25a/0xa20 [ 25.473882][ T373] path_mount+0x675/0x1020 [ 25.478289][ T373] ? user_path_at_empty+0x161/0x1c0 [ 25.483549][ T373] __se_sys_mount+0x318/0x380 [ 25.488239][ T373] ? __x64_sys_mount+0xd0/0xd0 [ 25.493013][ T373] __x64_sys_mount+0xbf/0xd0 [ 25.497619][ T373] x64_sys_call+0x6bf/0x9a0 [ 25.502124][ T373] do_syscall_64+0x4c/0xa0 [ 25.506540][ T373] ? clear_bhb_loop+0x50/0xa0 [ 25.511311][ T373] ? clear_bhb_loop+0x50/0xa0 [ 25.515983][ T373] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 25.521872][ T373] RIP: 0033:0x7f107abf2eea [ 25.526282][ T373] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 25.545969][ T373] RSP: 002b:00007ffe6e6357a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 25.554463][ T373] RAX: ffffffffffffffda RBX: 00007ffe6e635830 RCX: 00007f107abf2eea [ 25.562438][ T373] RDX: 0000200000000040 RSI: 00002000000000c0 RDI: 00007ffe6e6357f0 [ 25.570535][ T373] RBP: 0000200000000040 R08: 00007ffe6e635830 R09: 0000000000000000 [ 25.578529][ T373] R10: 0000000000000000 R11: 0000000000000246 R12: 00002000000000c0 [ 25.586598][ T373] R13: 00007ffe6e6357f0 R14: 000000000000553a R15: 0000200000005a80 [ 25.594593][ T373] [ 25.599486][ T373] ================================================================================ [ 25.609117][ T373] F2FS-fs (loop2): Not support 4194304, larger than 256