Warning: Permanently added '10.128.0.252' (ED25519) to the list of known hosts. 2026/01/05 06:07:55 parsed 1 programs [ 27.187751][ T28] audit: type=1400 audit(1767593275.499:64): avc: denied { node_bind } for pid=282 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 27.208515][ T28] audit: type=1400 audit(1767593275.499:65): avc: denied { module_request } for pid=282 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 28.289281][ T28] audit: type=1400 audit(1767593276.599:66): avc: denied { mounton } for pid=290 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.292525][ T290] cgroup: Unknown subsys name 'net' [ 28.312187][ T28] audit: type=1400 audit(1767593276.599:67): avc: denied { mount } for pid=290 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.339396][ T28] audit: type=1400 audit(1767593276.629:68): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.339776][ T290] cgroup: Unknown subsys name 'devices' [ 28.479060][ T290] cgroup: Unknown subsys name 'hugetlb' [ 28.484690][ T290] cgroup: Unknown subsys name 'rlimit' [ 28.596637][ T28] audit: type=1400 audit(1767593276.899:69): avc: denied { setattr } for pid=290 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.619854][ T28] audit: type=1400 audit(1767593276.899:70): avc: denied { create } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.640297][ T28] audit: type=1400 audit(1767593276.899:71): avc: denied { write } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.660592][ T28] audit: type=1400 audit(1767593276.899:72): avc: denied { read } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 28.680844][ T28] audit: type=1400 audit(1767593276.899:73): avc: denied { mounton } for pid=290 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.705834][ T293] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 28.768705][ T290] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.400043][ T295] request_module fs-gadgetfs succeeded, but still no fs? [ 29.756730][ T316] syz-executor (316) used greatest stack depth: 21568 bytes left [ 29.893388][ T328] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.900823][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.908381][ T328] device bridge_slave_0 entered promiscuous mode [ 29.916020][ T328] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.923106][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.930534][ T328] device bridge_slave_1 entered promiscuous mode [ 29.976462][ T328] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.983556][ T328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.990874][ T328] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.997930][ T328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.019584][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 30.027619][ T309] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.034876][ T309] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.043750][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 30.052113][ T309] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.059192][ T309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.069763][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 30.078149][ T309] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.085212][ T309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.096893][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 30.106097][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 30.120516][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.132015][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 30.140147][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 30.147761][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 30.155893][ T328] device veth0_vlan entered promiscuous mode [ 30.167569][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.176665][ T328] device veth1_macvtap entered promiscuous mode [ 30.185906][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 30.195705][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2026/01/05 06:07:58 executed programs: 0 [ 30.684778][ T364] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.692104][ T364] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.699654][ T364] device bridge_slave_0 entered promiscuous mode [ 30.709881][ T364] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.716937][ T364] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.724273][ T364] device bridge_slave_1 entered promiscuous mode [ 30.788576][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 30.796078][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 30.804828][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 30.813496][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 30.821960][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.829043][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.836850][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 30.849559][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 30.857959][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 30.866069][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.873124][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.885093][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 30.894400][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 30.912920][ T364] device veth0_vlan entered promiscuous mode [ 30.920987][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.929547][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 30.938526][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 30.945897][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 30.960116][ T364] device veth1_macvtap entered promiscuous mode [ 30.968779][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.980306][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 30.990365][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 31.015281][ T375] loop2: detected capacity change from 0 to 512 [ 31.022101][ T375] ======================================================= [ 31.022101][ T375] WARNING: The mand mount option has been deprecated and [ 31.022101][ T375] and is ignored by this kernel. Remove the mand [ 31.022101][ T375] option from the mount to silence this warning. [ 31.022101][ T375] ======================================================= [ 31.059973][ T375] EXT4-fs (loop2): Test dummy encryption mode enabled [ 31.067741][ T375] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 31.077863][ T375] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e02c, mo2=0002] [ 31.086617][ T375] EXT4-fs (loop2): orphan cleanup on readonly fs [ 31.093854][ T375] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.17: bg 0: block 361: padding at end of block bitmap is not set [ 31.108595][ T375] EXT4-fs (loop2): Remounting filesystem read-only [ 31.115157][ T375] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 31.124258][ T375] EXT4-fs (loop2): Remounting filesystem read-only [ 31.130942][ T375] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.17: attempt to clear invalid blocks 33619980 len 1 [ 31.144527][ T375] EXT4-fs (loop2): Remounting filesystem read-only [ 31.151416][ T375] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.17: invalid indirect mapped block 1811939328 (level 0) [ 31.165366][ T375] EXT4-fs (loop2): Remounting filesystem read-only [ 31.171968][ T375] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.17: invalid indirect mapped block 2185560079 (level 1) [ 31.186381][ T375] EXT4-fs (loop2): Remounting filesystem read-only [ 31.193177][ T375] EXT4-fs (loop2): 1 truncate cleaned up [ 31.199015][ T375] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 31.213973][ T375] EXT4-fs: Ignoring removed mblk_io_submit option [ 31.220670][ T375] ================================================================================ [ 31.230080][ T375] UBSAN: shift-out-of-bounds in fs/ext4/super.c:2704:15 [ 31.237139][ T375] shift exponent 808464432 is too large for 32-bit type 'int' [ 31.244642][ T375] CPU: 1 PID: 375 Comm: syz.2.17 Not tainted syzkaller #0 [ 31.251771][ T375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 31.261841][ T375] Call Trace: [ 31.265124][ T375] [ 31.268061][ T375] __dump_stack+0x21/0x24 [ 31.272435][ T375] dump_stack_lvl+0xee/0x150 [ 31.277040][ T375] ? __cfi_dump_stack_lvl+0x8/0x8 [ 31.282077][ T375] dump_stack+0x15/0x24 [ 31.286262][ T375] ubsan_epilogue+0xe/0x40 [ 31.290688][ T375] __ubsan_handle_shift_out_of_bounds+0x37c/0x400 [ 31.297140][ T375] ext4_check_opt_consistency+0x138d/0x1720 [ 31.303049][ T375] ext4_reconfigure+0xc7/0x2800 [ 31.307950][ T375] ? __cfi_dentry_lru_isolate_shrink+0x10/0x10 [ 31.314128][ T375] ? __cfi_list_lru_walk_node+0x10/0x10 [ 31.319690][ T375] ? shrink_dentry_list+0x4e4/0x500 [ 31.324908][ T375] ? selinux_capable+0x29c/0x380 [ 31.329857][ T375] ? vfs_parse_fs_param+0x2d6/0x450 [ 31.335068][ T375] ? list_lru_count_node+0x1d/0x70 [ 31.340199][ T375] ? shrink_dcache_sb+0x10c/0x160 [ 31.345264][ T375] ? __cfi_shrink_dcache_sb+0x10/0x10 [ 31.350664][ T375] reconfigure_super+0x228/0x890 [ 31.355622][ T375] path_mount+0xdea/0x1010 [ 31.360055][ T375] ? user_path_at_empty+0x161/0x1c0 [ 31.365269][ T375] __se_sys_mount+0x318/0x380 [ 31.369981][ T375] ? do_mkdirat+0x459/0x4c0 [ 31.374526][ T375] ? __x64_sys_mount+0xd0/0xd0 [ 31.379319][ T375] __x64_sys_mount+0xbf/0xd0 [ 31.383930][ T375] x64_sys_call+0x65d/0x9a0 [ 31.388447][ T375] do_syscall_64+0x4c/0xa0 [ 31.392906][ T375] ? clear_bhb_loop+0x30/0x80 [ 31.397604][ T375] ? clear_bhb_loop+0x30/0x80 [ 31.402303][ T375] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 31.408207][ T375] RIP: 0033:0x7f6575990eea [ 31.412648][ T375] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 31.432265][ T375] RSP: 002b:00007ffe22127d88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 31.440699][ T375] RAX: ffffffffffffffda RBX: 00007ffe22127e10 RCX: 00007f6575990eea [ 31.448684][ T375] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 0000000000000000 [ 31.456658][ T375] RBP: 0000200000000180 R08: 00007ffe22127e10 R09: 0000000001b7a434 [ 31.464637][ T375] R10: 0000000001b7a434 R11: 0000000000000246 R12: 0000200000000000 [ 31.472704][ T375] R13: 00007ffe22127dd0 R14: 0000000000000000 R15: 00002000000003c0 [ 31.480691][ T375] [ 31.487910][ T375] ================================================================================ [ 31.509848][ T364] EXT4-fs (loop2): unmounting filesystem.