Warning: Permanently added '10.128.0.204' (ED25519) to the list of known hosts. 2026/01/05 06:37:10 parsed 1 programs [ 23.191189][ T28] audit: type=1400 audit(1767595030.703:64): avc: denied { node_bind } for pid=282 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 23.211907][ T28] audit: type=1400 audit(1767595030.703:65): avc: denied { module_request } for pid=282 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 24.198299][ T28] audit: type=1400 audit(1767595031.713:66): avc: denied { mounton } for pid=290 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.201280][ T290] cgroup: Unknown subsys name 'net' [ 24.221051][ T28] audit: type=1400 audit(1767595031.713:67): avc: denied { mount } for pid=290 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.248379][ T28] audit: type=1400 audit(1767595031.743:68): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.248843][ T290] cgroup: Unknown subsys name 'devices' [ 24.375966][ T290] cgroup: Unknown subsys name 'hugetlb' [ 24.381670][ T290] cgroup: Unknown subsys name 'rlimit' [ 24.492131][ T28] audit: type=1400 audit(1767595032.003:69): avc: denied { setattr } for pid=290 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.515423][ T28] audit: type=1400 audit(1767595032.003:70): avc: denied { create } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.535862][ T28] audit: type=1400 audit(1767595032.003:71): avc: denied { write } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.556153][ T28] audit: type=1400 audit(1767595032.013:72): avc: denied { read } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.563088][ T292] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 24.576927][ T28] audit: type=1400 audit(1767595032.013:73): avc: denied { mounton } for pid=290 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.638687][ T290] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.261670][ T297] request_module fs-gadgetfs succeeded, but still no fs? [ 25.372233][ T306] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.379469][ T306] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.387643][ T306] device bridge_slave_0 entered promiscuous mode [ 25.394644][ T306] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.401676][ T306] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.409189][ T306] device bridge_slave_1 entered promiscuous mode [ 25.456389][ T306] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.463521][ T306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.470847][ T306] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.477925][ T306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.497084][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.504720][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.511871][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.520925][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.529222][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.536281][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.545927][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.554176][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.561204][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.573421][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.582762][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.597707][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.609031][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.617401][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.625028][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.633503][ T306] device veth0_vlan entered promiscuous mode [ 25.645095][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.654780][ T306] device veth1_macvtap entered promiscuous mode [ 25.664341][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.674827][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.425089][ T43] device bridge_slave_1 left promiscuous mode [ 26.431274][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.439268][ T43] device bridge_slave_0 left promiscuous mode [ 26.445570][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.465039][ T43] device veth1_macvtap left promiscuous mode 2026/01/05 06:37:14 executed programs: 0 [ 26.471117][ T43] device veth0_vlan left promiscuous mode [ 26.625635][ T365] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.632701][ T365] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.640370][ T365] device bridge_slave_0 entered promiscuous mode [ 26.647796][ T365] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.654897][ T365] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.662265][ T365] device bridge_slave_1 entered promiscuous mode [ 26.707331][ T365] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.714410][ T365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.721647][ T365] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.728706][ T365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.748771][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.756306][ T318] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.763435][ T318] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.772599][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.780833][ T318] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.787901][ T318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.796931][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.805379][ T318] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.812438][ T318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.825535][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.840398][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.850732][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.861710][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.870045][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.877707][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.885923][ T365] device veth0_vlan entered promiscuous mode [ 26.896421][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.905973][ T365] device veth1_macvtap entered promiscuous mode [ 26.915563][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.925568][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.948630][ T376] loop2: detected capacity change from 0 to 512 [ 26.955507][ T376] ======================================================= [ 26.955507][ T376] WARNING: The mand mount option has been deprecated and [ 26.955507][ T376] and is ignored by this kernel. Remove the mand [ 26.955507][ T376] option from the mount to silence this warning. [ 26.955507][ T376] ======================================================= [ 26.991845][ T376] EXT4-fs (loop2): Test dummy encryption mode enabled [ 26.999135][ T376] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 27.009193][ T376] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e02c, mo2=0002] [ 27.017836][ T376] EXT4-fs (loop2): orphan cleanup on readonly fs [ 27.024415][ T376] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.17: bg 0: block 361: padding at end of block bitmap is not set [ 27.038776][ T376] EXT4-fs (loop2): Remounting filesystem read-only [ 27.045354][ T376] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 27.054334][ T376] EXT4-fs (loop2): Remounting filesystem read-only [ 27.060856][ T376] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.17: attempt to clear invalid blocks 33619980 len 1 [ 27.074350][ T376] EXT4-fs (loop2): Remounting filesystem read-only [ 27.081108][ T376] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.17: invalid indirect mapped block 1811939328 (level 0) [ 27.095289][ T376] EXT4-fs (loop2): Remounting filesystem read-only [ 27.101813][ T376] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.17: invalid indirect mapped block 2185560079 (level 1) [ 27.115893][ T376] EXT4-fs (loop2): Remounting filesystem read-only [ 27.122482][ T376] EXT4-fs (loop2): 1 truncate cleaned up [ 27.128218][ T376] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 27.142900][ T376] EXT4-fs: Ignoring removed mblk_io_submit option [ 27.149642][ T376] ================================================================================ [ 27.159005][ T376] UBSAN: shift-out-of-bounds in fs/ext4/super.c:2704:15 [ 27.166036][ T376] shift exponent 808464432 is too large for 32-bit type 'int' [ 27.173504][ T376] CPU: 1 PID: 376 Comm: syz.2.17 Not tainted syzkaller #0 [ 27.180601][ T376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 27.190655][ T376] Call Trace: [ 27.193934][ T376] [ 27.196862][ T376] __dump_stack+0x21/0x24 [ 27.201226][ T376] dump_stack_lvl+0xee/0x150 [ 27.205813][ T376] ? __cfi_dump_stack_lvl+0x8/0x8 [ 27.210834][ T376] dump_stack+0x15/0x24 [ 27.214982][ T376] ubsan_epilogue+0xe/0x40 [ 27.219393][ T376] __ubsan_handle_shift_out_of_bounds+0x37c/0x400 [ 27.225800][ T376] ext4_check_opt_consistency+0x138d/0x1720 [ 27.231688][ T376] ext4_reconfigure+0xc7/0x2800 [ 27.236529][ T376] ? __cfi_dentry_lru_isolate_shrink+0x10/0x10 [ 27.242676][ T376] ? __cfi_list_lru_walk_node+0x10/0x10 [ 27.248210][ T376] ? shrink_dentry_list+0x4e4/0x500 [ 27.253402][ T376] ? selinux_capable+0x29c/0x380 [ 27.258344][ T376] ? vfs_parse_fs_param+0x2d6/0x450 [ 27.263536][ T376] ? list_lru_count_node+0x1d/0x70 [ 27.268644][ T376] ? shrink_dcache_sb+0x10c/0x160 [ 27.273664][ T376] ? __cfi_shrink_dcache_sb+0x10/0x10 [ 27.279050][ T376] reconfigure_super+0x228/0x890 [ 27.284002][ T376] path_mount+0xdea/0x1010 [ 27.288446][ T376] ? user_path_at_empty+0x161/0x1c0 [ 27.293638][ T376] __se_sys_mount+0x318/0x380 [ 27.298328][ T376] ? do_mkdirat+0x459/0x4c0 [ 27.302829][ T376] ? __x64_sys_mount+0xd0/0xd0 [ 27.307593][ T376] __x64_sys_mount+0xbf/0xd0 [ 27.312187][ T376] x64_sys_call+0x65d/0x9a0 [ 27.316698][ T376] do_syscall_64+0x4c/0xa0 [ 27.321115][ T376] ? clear_bhb_loop+0x30/0x80 [ 27.325795][ T376] ? clear_bhb_loop+0x30/0x80 [ 27.330471][ T376] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 27.336377][ T376] RIP: 0033:0x7f331c190eea [ 27.340791][ T376] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 27.360387][ T376] RSP: 002b:00007fff35a42728 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 27.368812][ T376] RAX: ffffffffffffffda RBX: 00007fff35a427b0 RCX: 00007f331c190eea [ 27.376858][ T376] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 0000000000000000 [ 27.384829][ T376] RBP: 0000200000000180 R08: 00007fff35a427b0 R09: 0000000001b7a434 [ 27.392811][ T376] R10: 0000000001b7a434 R11: 0000000000000246 R12: 0000200000000000 [ 27.400775][ T376] R13: 00007fff35a42770 R14: 0000000000000000 R15: 00002000000003c0 [ 27.408769][ T376] [ 27.412815][ T376] ================================================================================ [ 27.426835][ T365] EXT4-fs (loop2): unmounting filesystem. [ 27.486690][ T365] syz-executor (365) used greatest stack depth: 21728 bytes left