Warning: Permanently added '10.128.1.176' (ED25519) to the list of known hosts. 2025/12/05 01:54:47 parsed 1 programs [ 27.262428][ T28] audit: type=1400 audit(1764899687.054:64): avc: denied { node_bind } for pid=283 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 27.283200][ T28] audit: type=1400 audit(1764899687.064:65): avc: denied { module_request } for pid=283 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 28.399092][ T28] audit: type=1400 audit(1764899688.194:66): avc: denied { mounton } for pid=291 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.400450][ T291] cgroup: Unknown subsys name 'net' [ 28.421967][ T28] audit: type=1400 audit(1764899688.194:67): avc: denied { mount } for pid=291 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.449383][ T28] audit: type=1400 audit(1764899688.234:68): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.449596][ T291] cgroup: Unknown subsys name 'devices' [ 28.594831][ T291] cgroup: Unknown subsys name 'hugetlb' [ 28.600461][ T291] cgroup: Unknown subsys name 'rlimit' [ 28.714105][ T28] audit: type=1400 audit(1764899688.514:69): avc: denied { setattr } for pid=291 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.737386][ T28] audit: type=1400 audit(1764899688.514:70): avc: denied { create } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.757995][ T28] audit: type=1400 audit(1764899688.514:71): avc: denied { write } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.758582][ T294] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 28.778630][ T28] audit: type=1400 audit(1764899688.514:72): avc: denied { read } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 28.807122][ T28] audit: type=1400 audit(1764899688.514:73): avc: denied { mounton } for pid=291 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.839245][ T291] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.513431][ T296] request_module fs-gadgetfs succeeded, but still no fs? [ 29.929832][ T322] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.937246][ T322] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.944891][ T322] device bridge_slave_0 entered promiscuous mode [ 29.952698][ T322] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.959801][ T322] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.967271][ T322] device bridge_slave_1 entered promiscuous mode [ 30.020827][ T322] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.027915][ T322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.035250][ T322] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.042295][ T322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.063170][ T321] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.070492][ T321] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.078023][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 30.085707][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 30.095355][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 30.103612][ T321] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.110666][ T321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.124609][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 30.133109][ T321] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.140161][ T321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.153295][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 30.161424][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 30.173478][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.185756][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 30.193990][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 30.201519][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 30.209984][ T322] device veth0_vlan entered promiscuous mode [ 30.220444][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.229919][ T322] device veth1_macvtap entered promiscuous mode [ 30.239668][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 30.249643][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 30.279361][ T322] syz-executor (322) used greatest stack depth: 21440 bytes left 2025/12/05 01:54:50 executed programs: 0 [ 30.881798][ T364] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.888912][ T364] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.896735][ T364] device bridge_slave_0 entered promiscuous mode [ 30.903997][ T364] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.911127][ T364] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.918725][ T364] device bridge_slave_1 entered promiscuous mode [ 30.969580][ T364] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.976758][ T364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.984052][ T364] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.991089][ T364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.000467][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.007838][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.027603][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 31.035469][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.044369][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 31.053028][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.061284][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.068342][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.077080][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 31.085504][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.093706][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.100741][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.118595][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 31.126861][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.136108][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 31.144365][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.165724][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 31.174120][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 31.185780][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 31.193747][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 31.201763][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 31.209569][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 31.217895][ T364] device veth0_vlan entered promiscuous mode [ 31.234678][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 31.243018][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 31.252504][ T364] device veth1_macvtap entered promiscuous mode [ 31.261677][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 31.270005][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 31.278456][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 31.288221][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 31.296791][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 31.429307][ T374] loop2: detected capacity change from 0 to 40427 [ 31.444621][ T374] F2FS-fs (loop2): heap/no_heap options were deprecated [ 31.451748][ T374] F2FS-fs (loop2): heap/no_heap options were deprecated [ 31.458852][ T374] ================================================================================ [ 31.468368][ T374] UBSAN: shift-out-of-bounds in fs/f2fs/super.c:942:5 [ 31.475914][ T374] shift exponent 149 is too large for 64-bit type 'unsigned long' [ 31.483930][ T374] CPU: 0 PID: 374 Comm: syz.2.17 Not tainted syzkaller #0 [ 31.491070][ T374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 31.501148][ T374] Call Trace: [ 31.504437][ T374] [ 31.507366][ T374] __dump_stack+0x21/0x24 [ 31.511717][ T374] dump_stack_lvl+0xee/0x150 [ 31.516311][ T374] ? __cfi_dump_stack_lvl+0x8/0x8 [ 31.521367][ T374] ? __kasan_slab_free+0x11/0x20 [ 31.526328][ T374] dump_stack+0x15/0x24 [ 31.530521][ T374] ubsan_epilogue+0xe/0x40 [ 31.534939][ T374] __ubsan_handle_shift_out_of_bounds+0x37c/0x400 [ 31.541352][ T374] ? match_int+0x13c/0x190 [ 31.545776][ T374] parse_options+0x4a10/0x4a20 [ 31.550558][ T374] ? default_options+0xcb0/0xcb0 [ 31.555505][ T374] ? f2fs_fill_super+0x2245/0x6c70 [ 31.560620][ T374] ? memcpy+0x56/0x70 [ 31.564597][ T374] f2fs_fill_super+0x2281/0x6c70 [ 31.569542][ T374] ? __cfi_f2fs_fill_super+0x10/0x10 [ 31.574832][ T374] ? mutex_unlock+0x89/0x220 [ 31.579443][ T374] ? set_blocksize+0x1df/0x360 [ 31.584234][ T374] ? sb_set_blocksize+0xaa/0xf0 [ 31.589091][ T374] ? __cfi_f2fs_fill_super+0x10/0x10 [ 31.594383][ T374] mount_bdev+0x2bc/0x3f0 [ 31.598717][ T374] ? __cfi_f2fs_fill_super+0x10/0x10 [ 31.604004][ T374] f2fs_mount+0x34/0x40 [ 31.608168][ T374] legacy_get_tree+0xfe/0x1a0 [ 31.612905][ T374] ? __cfi_f2fs_mount+0x10/0x10 [ 31.617908][ T374] vfs_get_tree+0x9a/0x270 [ 31.622545][ T374] do_new_mount+0x25a/0xa20 [ 31.627087][ T374] path_mount+0x675/0x1010 [ 31.631513][ T374] ? user_path_at_empty+0x161/0x1c0 [ 31.636713][ T374] __se_sys_mount+0x318/0x380 [ 31.641393][ T374] ? do_mkdirat+0x459/0x4c0 [ 31.645899][ T374] ? __x64_sys_mount+0xd0/0xd0 [ 31.650668][ T374] ? do_user_addr_fault+0x9ac/0x1050 [ 31.655956][ T374] __x64_sys_mount+0xbf/0xd0 [ 31.660548][ T374] x64_sys_call+0x65d/0x9a0 [ 31.665077][ T374] do_syscall_64+0x4c/0xa0 [ 31.669499][ T374] ? clear_bhb_loop+0x30/0x80 [ 31.674181][ T374] ? clear_bhb_loop+0x30/0x80 [ 31.678861][ T374] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 31.684844][ T374] RIP: 0033:0x7fab67590eea [ 31.689273][ T374] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 31.708876][ T374] RSP: 002b:00007ffc9b04a228 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 31.717324][ T374] RAX: ffffffffffffffda RBX: 00007ffc9b04a2b0 RCX: 00007fab67590eea [ 31.725311][ T374] RDX: 0000200000000140 RSI: 0000200000000200 RDI: 00007ffc9b04a270 [ 31.733283][ T374] RBP: 0000200000000140 R08: 00007ffc9b04a2b0 R09: 0000000000000000 [ 31.741271][ T374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000200 [ 31.749239][ T374] R13: 00007ffc9b04a270 R14: 0000000000005505 R15: 0000200000000040 [ 31.757218][ T374] [ 31.762029][ T374] ================================================================================ [ 31.771417][ T374] F2FS-fs (loop2): Not support 2097152, larger than 256