Warning: Permanently added '10.128.0.190' (ED25519) to the list of known hosts. 2026/04/23 14:55:35 parsed 1 programs [ 44.001927][ T23] kauditd_printk_skb: 30 callbacks suppressed [ 44.001929][ T23] audit: type=1400 audit(1776956135.750:90): avc: denied { create } for pid=437 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 44.027995][ T23] audit: type=1400 audit(1776956135.750:91): avc: denied { write } for pid=437 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 44.048151][ T23] audit: type=1400 audit(1776956135.750:92): avc: denied { read } for pid=437 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 44.068741][ T23] audit: type=1400 audit(1776956135.780:93): avc: denied { unlink } for pid=437 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 44.096579][ T437] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 44.339000][ T453] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.345934][ T453] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.353208][ T453] device bridge_slave_0 entered promiscuous mode [ 44.359573][ T453] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.368713][ T453] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.375664][ T453] device bridge_slave_1 entered promiscuous mode [ 44.404778][ T453] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.411725][ T453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.418943][ T453] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.425761][ T453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.437945][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.445846][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.453937][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.461705][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.469483][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.476656][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.484729][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.493276][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.501147][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.508307][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.515632][ T453] device veth0_vlan entered promiscuous mode [ 44.522423][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.530393][ T453] device veth1_macvtap entered promiscuous mode [ 44.537070][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.545533][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.606403][ T23] audit: type=1401 audit(1776956136.350:94): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 44.701685][ T23] audit: type=1400 audit(1776956136.450:95): avc: denied { create } for pid=483 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 2026/04/23 14:55:36 executed programs: 0 [ 44.846700][ T491] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.853638][ T491] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.860741][ T491] device bridge_slave_0 entered promiscuous mode [ 44.867012][ T491] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.873872][ T491] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.880769][ T491] device bridge_slave_1 entered promiscuous mode [ 44.891076][ T491] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.897982][ T491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.905149][ T491] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.911993][ T491] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.922140][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.929283][ T458] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.936252][ T458] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.943572][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.951805][ T458] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.958722][ T458] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.966315][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.974485][ T458] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.981320][ T458] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.989435][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.997189][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.005759][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.014190][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.021742][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.028952][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.036078][ T491] device veth0_vlan entered promiscuous mode [ 45.042382][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.050800][ T491] device veth1_macvtap entered promiscuous mode [ 45.057251][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.065586][ T458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.077889][ T496] erofs: (device loop2): mounted with root inode @ nid 36. [ 45.085083][ T23] audit: type=1400 audit(1776956136.840:96): avc: denied { mount } for pid=495 comm="syz.2.16" name="/" dev="loop2" ino=36 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 45.085298][ T496] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 45.115878][ T496] erofs: (device loop2): z_erofs_readahead: readahead error at page 8589934616 @ nid 36 [ 45.125580][ T496] erofs: (device loop2): z_erofs_readahead: readahead error at page 8589934615 @ nid 36 [ 45.135369][ T496] erofs: (device loop2): z_erofs_readahead: readahead error at page 8589934614 @ nid 36 [ 45.145097][ T496] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 45.154219][ T496] erofs: (device loop2): z_erofs_readahead: readahead error at page 8589934613 @ nid 36 [ 45.163923][ T496] erofs: (device loop2): z_erofs_readahead: readahead error at page 8589934612 @ nid 36 [ 45.173753][ T496] erofs: (device loop2): z_erofs_readahead: readahead error at page 8589934611 @ nid 36 [ 45.183436][ T496] erofs: (device loop2): z_erofs_readahead: readahead error at page 8589934610 @ nid 36 [ 45.193244][ T38] ------------[ cut here ]------------ [ 45.198610][ T38] WARNING: CPU: 0 PID: 38 at mm/page_alloc.c:3801 get_page_from_freelist+0x3e5/0xeb0 [ 45.207959][ T38] Modules linked in: [ 45.211752][ T38] CPU: 0 PID: 38 Comm: erofs_worker/0 Not tainted syzkaller #0 [ 45.219218][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 45.229072][ T38] RIP: 0010:get_page_from_freelist+0x3e5/0xeb0 [ 45.235126][ T38] Code: 00 80 00 00 8b 70 18 48 8b 40 10 89 75 8c 48 8b 00 48 89 85 38 ff ff ff 48 63 c6 48 89 85 50 ff ff ff 74 08 83 7d c4 01 76 02 <0f> 0b 48 8b b5 18 ff ff ff 4d 8d a7 40 05 00 00 48 8b 85 50 ff ff [ 45.254609][ T38] RSP: 0018:ffffc900001437d8 EFLAGS: 00010206 [ 45.260488][ T38] RAX: 0000000000000000 RBX: 000000000011e5b0 RCX: 0000000000000007 [ 45.268279][ T38] RDX: ffffffff82db7bd8 RSI: 0000000000000000 RDI: ffffffff82db7900 [ 45.276229][ T38] RBP: ffffc900001438d8 R08: ffffffff82db7c98 R09: ffffea0004632008 [ 45.284019][ T38] R10: 00000000000070af R11: 0000000000000000 R12: 0000000000000001 [ 45.291838][ T38] R13: 0000000000000000 R14: 000000000005acc0 R15: ffffffff82db7900 [ 45.299855][ T38] FS: 0000000000000000(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 [ 45.308695][ T38] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 45.315174][ T38] CR2: 00007fec8971eb00 CR3: 0000000002c0b000 CR4: 00000000003506b0 [ 45.323151][ T38] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 45.330894][ T38] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 45.338801][ T38] Call Trace: [ 45.341994][ T38] ? debug_smp_processor_id+0x17/0x20 [ 45.347324][ T38] ? asm_sysvec_call_function_single+0x12/0x20 [ 45.353403][ T38] __alloc_pages_nodemask+0x15e/0x1390 [ 45.358683][ T38] kmalloc_order+0x2b/0xf0 [ 45.362921][ T38] kmalloc_order_trace+0x18/0x90 [ 45.367739][ T38] __kmalloc+0x47e/0x4f0 [ 45.371883][ T38] kvmalloc_node+0x5b/0xa0 [ 45.376135][ T38] z_erofs_decompress_pcluster.isra.0+0x94/0x9c0 [ 45.382389][ T38] ? kvm_sched_clock_read+0x18/0x40 [ 45.387387][ T38] ? sched_clock+0x13/0x20 [ 45.391665][ T38] ? sched_clock_local+0x18/0x90 [ 45.396414][ T38] ? sched_clock_cpu+0xc0/0xe0 [ 45.401046][ T38] ? record_times+0x16/0x90 [ 45.405356][ T38] ? psi_group_change+0x3d/0x210 [ 45.410259][ T38] ? _raw_spin_unlock_irq+0x20/0x36 [ 45.415284][ T38] ? finish_task_switch+0x7b/0x240 [ 45.420250][ T38] ? __switch_to+0x12e/0x440 [ 45.424806][ T38] ? z_erofs_decompressqueue_work+0x90/0x90 [ 45.430575][ T38] z_erofs_decompressqueue_kthread_work+0x56/0x90 [ 45.436809][ T38] kthread_worker_fn+0xc8/0x280 [ 45.441520][ T38] ? kthread_should_park+0x30/0x30 [ 45.446618][ T38] kthread+0x14c/0x170 [ 45.450544][ T38] ? kthread_create_worker_on_cpu+0x60/0x60 [ 45.456252][ T38] ret_from_fork+0x1f/0x30 [ 45.460546][ T38] ---[ end trace 28549aedfe022f59 ]--- [ 45.465930][ T38] BUG: unable to handle page fault for address: ffff888918c7fff8 [ 45.473431][ T38] #PF: supervisor read access in kernel mode [ 45.479331][ T38] #PF: error_code(0x0000) - not-present page [ 45.485148][ T38] PGD 3201067 P4D 3201067 PUD 0 [ 45.490016][ T38] Oops: 0000 [#1] PREEMPT SMP [ 45.494524][ T38] CPU: 0 PID: 38 Comm: erofs_worker/0 Tainted: G W syzkaller #0 [ 45.503393][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 45.513282][ T38] RIP: 0010:z_erofs_decompress_pcluster.isra.0+0x243/0x9c0 [ 45.520441][ T38] Code: 41 bb 00 02 00 00 e9 fa fe ff ff 48 8b b5 98 fc ff ff 83 ff 02 49 89 f1 74 10 49 8b 04 24 41 8b 44 24 28 c1 f8 02 4c 8d 0c c6 <49> 8b 01 48 85 c0 74 35 48 8b 70 08 48 8d 7e ff 83 e6 01 48 0f 45 [ 45.540043][ T38] RSP: 0018:ffffc90000143aa8 EFLAGS: 00010286 [ 45.545940][ T38] RAX: 00000000ffffffff RBX: ffff88810ce47fc0 RCX: 0000000000000002 [ 45.553764][ T38] RDX: ffff88810ce47f78 RSI: ffff888118c80000 RDI: 0000000000000000 [ 45.561649][ T38] RBP: ffffc90000143e70 R08: 0000000000000000 R09: ffff888918c7fff8 [ 45.569471][ T38] R10: 0000000080000014 R11: 0000000000000003 R12: ffffea000455d180 [ 45.577284][ T38] R13: ffffea000455d1c0 R14: 0000000000000001 R15: 0000000000000000 [ 45.585632][ T38] FS: 0000000000000000(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 [ 45.594487][ T38] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 45.600903][ T38] CR2: ffff888918c7fff8 CR3: 0000000002c0b000 CR4: 00000000003506b0 [ 45.608715][ T38] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 45.616701][ T38] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 45.624591][ T38] Call Trace: [ 45.627805][ T38] ? kvm_sched_clock_read+0x18/0x40 [ 45.632912][ T38] ? sched_clock+0x13/0x20 [ 45.637180][ T38] ? sched_clock_local+0x18/0x90 [ 45.641947][ T38] ? sched_clock_cpu+0xc0/0xe0 [ 45.646544][ T38] ? record_times+0x16/0x90 [ 45.650885][ T38] ? psi_group_change+0x3d/0x210 [ 45.655675][ T38] ? _raw_spin_unlock_irq+0x20/0x36 [ 45.660695][ T38] ? finish_task_switch+0x7b/0x240 [ 45.665666][ T38] ? __switch_to+0x12e/0x440 [ 45.670211][ T38] ? z_erofs_decompressqueue_work+0x90/0x90 [ 45.675934][ T38] z_erofs_decompressqueue_kthread_work+0x56/0x90 [ 45.682191][ T38] kthread_worker_fn+0xc8/0x280 [ 45.687142][ T38] ? kthread_should_park+0x30/0x30 [ 45.692164][ T38] kthread+0x14c/0x170 [ 45.696061][ T38] ? kthread_create_worker_on_cpu+0x60/0x60 [ 45.701885][ T38] ret_from_fork+0x1f/0x30 [ 45.706219][ T38] Modules linked in: [ 45.709958][ T38] CR2: ffff888918c7fff8 [ 45.713941][ T38] ---[ end trace 28549aedfe022f5a ]--- [ 45.719238][ T38] RIP: 0010:z_erofs_decompress_pcluster.isra.0+0x243/0x9c0 [ 45.726268][ T38] Code: 41 bb 00 02 00 00 e9 fa fe ff ff 48 8b b5 98 fc ff ff 83 ff 02 49 89 f1 74 10 49 8b 04 24 41 8b 44 24 28 c1 f8 02 4c 8d 0c c6 <49> 8b 01 48 85 c0 74 35 48 8b 70 08 48 8d 7e ff 83 e6 01 48 0f 45 [ 45.745831][ T38] RSP: 0018:ffffc90000143aa8 EFLAGS: 00010286 [ 45.751825][ T38] RAX: 00000000ffffffff RBX: ffff88810ce47fc0 RCX: 0000000000000002 [ 45.759721][ T38] RDX: ffff88810ce47f78 RSI: ffff888118c80000 RDI: 0000000000000000 [ 45.767537][ T38] RBP: ffffc90000143e70 R08: 0000000000000000 R09: ffff888918c7fff8 [ 45.775468][ T38] R10: 0000000080000014 R11: 0000000000000003 R12: ffffea000455d180 [ 45.783272][ T38] R13: ffffea000455d1c0 R14: 0000000000000001 R15: 0000000000000000 [ 45.791093][ T38] FS: 0000000000000000(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 [ 45.800479][ T38] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 45.806899][ T38] CR2: ffff888918c7fff8 CR3: 0000000002c0b000 CR4: 00000000003506b0 [ 45.814831][ T38] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 45.822631][ T38] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 45.830889][ T38] Kernel panic - not syncing: Fatal exception [ 45.837277][ T38] Kernel Offset: disabled [ 45.841392][ T38] Rebooting in 86400 seconds..