Warning: Permanently added '10.128.1.85' (ED25519) to the list of known hosts. 2025/08/08 17:47:46 ignoring optional flag "sandboxArg"="0" 2025/08/08 17:47:46 parsed 1 programs [ 58.171112][ T23] kauditd_printk_skb: 32 callbacks suppressed [ 58.171115][ T23] audit: type=1400 audit(1754675266.490:92): avc: denied { unlink } for pid=440 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 58.231178][ T440] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 58.497787][ T23] audit: type=1400 audit(1754675266.820:93): avc: denied { create } for pid=448 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 58.629819][ T23] audit: type=1401 audit(1754675266.950:94): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 58.675187][ T476] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.682039][ T476] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.689141][ T476] device bridge_slave_0 entered promiscuous mode [ 58.695488][ T476] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.702333][ T476] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.709252][ T476] device bridge_slave_1 entered promiscuous mode [ 58.719607][ T476] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.726520][ T476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.733588][ T476] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.740415][ T476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.748912][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.756062][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.762930][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.770273][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.778262][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.785067][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.792950][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.800779][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.807592][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.815249][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.823368][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.832113][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.840504][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.848147][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.855067][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.862359][ T476] device veth0_vlan entered promiscuous mode [ 58.868970][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.877141][ T476] device veth1_macvtap entered promiscuous mode [ 58.883688][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.892103][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2025/08/08 17:47:47 executed programs: 0 [ 59.065338][ T492] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.072191][ T492] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.079137][ T492] device bridge_slave_0 entered promiscuous mode [ 59.085652][ T492] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.092513][ T492] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.099411][ T492] device bridge_slave_1 entered promiscuous mode [ 59.110913][ T492] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.117746][ T492] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.124860][ T492] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.131730][ T492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.140346][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.147471][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.154227][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.161494][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.169320][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.176116][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.184156][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.192015][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.198804][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.206810][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.214631][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.223146][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.231590][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.239143][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.246118][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.253430][ T492] device veth0_vlan entered promiscuous mode [ 59.260060][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.268009][ T492] device veth1_macvtap entered promiscuous mode [ 59.274634][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.283046][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.296266][ T497] erofs: (device loop2): mounted with root inode @ nid 36. [ 59.303411][ T23] audit: type=1400 audit(1754675267.620:95): avc: denied { mount } for pid=496 comm="syz.2.16" name="/" dev="loop2" ino=36 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 59.303582][ T497] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 59.333954][ T497] erofs: (device loop2): z_erofs_readahead: readahead error at page 8589934616 @ nid 36 [ 59.343574][ T497] erofs: (device loop2): z_erofs_readahead: readahead error at page 8589934615 @ nid 36 [ 59.353092][ T497] erofs: (device loop2): z_erofs_readahead: readahead error at page 8589934614 @ nid 36 [ 59.362702][ T497] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 59.372294][ T497] erofs: (device loop2): z_erofs_readahead: readahead error at page 8589934613 @ nid 36 [ 59.382137][ T497] erofs: (device loop2): z_erofs_readahead: readahead error at page 8589934612 @ nid 36 [ 59.391866][ T497] erofs: (device loop2): z_erofs_readahead: readahead error at page 8589934611 @ nid 36 [ 59.401585][ T497] erofs: (device loop2): z_erofs_readahead: readahead error at page 8589934610 @ nid 36 [ 59.411495][ T39] ------------[ cut here ]------------ [ 59.417240][ T39] WARNING: CPU: 0 PID: 39 at mm/page_alloc.c:3801 get_page_from_freelist+0x3e5/0xeb0 [ 59.426519][ T39] Modules linked in: [ 59.430324][ T39] CPU: 0 PID: 39 Comm: erofs_worker/0 Not tainted 5.10.240-syzkaller #0 [ 59.438559][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 59.448802][ T39] RIP: 0010:get_page_from_freelist+0x3e5/0xeb0 [ 59.454751][ T39] Code: 00 80 00 00 8b 70 18 48 8b 40 10 89 75 8c 48 8b 00 48 89 85 38 ff ff ff 48 63 c6 48 89 85 50 ff ff ff 74 08 83 7d c4 01 76 02 <0f> 0b 48 8b b5 18 ff ff ff 4d 8d a7 40 05 00 00 48 8b 85 50 ff ff [ 59.474546][ T39] RSP: 0018:ffffc9000014b7d8 EFLAGS: 00010206 [ 59.480565][ T39] RAX: 0000000000000000 RBX: 000000000011ea8a RCX: 0000000000000008 [ 59.488372][ T39] RDX: ffffffff82db7400 RSI: 0000000000000000 RDI: ffffffff82db70c0 [ 59.496168][ T39] RBP: ffffc9000014b8d8 R08: ffffffff82db74d0 R09: ffffea000461c008 [ 59.504011][ T39] R10: 00000000000070af R11: 0000000000000000 R12: 0000000000000001 [ 59.511806][ T39] R13: 0000000000000000 R14: 000000000005acc0 R15: ffffffff82db70c0 [ 59.519613][ T39] FS: 0000000000000000(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 [ 59.528382][ T39] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 59.534793][ T39] CR2: 0000001b3275ffff CR3: 00000001090ca000 CR4: 00000000003506b0 [ 59.542626][ T39] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 59.550425][ T39] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 59.558261][ T39] Call Trace: [ 59.561356][ T39] __alloc_pages_nodemask+0x15e/0x1330 [ 59.566651][ T39] kmalloc_order+0x2b/0xf0 [ 59.570900][ T39] kmalloc_order_trace+0x18/0x90 [ 59.575675][ T39] __kmalloc+0x47e/0x4f0 [ 59.579804][ T39] kvmalloc_node+0x5b/0xa0 [ 59.584020][ T39] z_erofs_decompress_pcluster.isra.0+0x94/0x9c0 [ 59.590207][ T39] ? kvm_sched_clock_read+0x18/0x40 [ 59.595240][ T39] ? sched_clock+0x13/0x20 [ 59.599484][ T39] ? sched_clock_local+0x18/0x90 [ 59.604340][ T39] ? sched_clock_cpu+0xc0/0xe0 [ 59.608942][ T39] ? record_times+0x16/0x90 [ 59.613285][ T39] ? psi_group_change+0x3d/0x210 [ 59.618063][ T39] ? _raw_spin_unlock_irq+0x20/0x36 [ 59.623074][ T39] ? finish_task_switch+0x7b/0x240 [ 59.628042][ T39] ? __switch_to+0x12e/0x440 [ 59.632445][ T39] ? z_erofs_decompressqueue_work+0x90/0x90 [ 59.638212][ T39] z_erofs_decompressqueue_kthread_work+0x56/0x90 [ 59.644420][ T39] kthread_worker_fn+0xc8/0x280 [ 59.649127][ T39] ? kthread_should_park+0x30/0x30 [ 59.654055][ T39] kthread+0x14c/0x170 [ 59.658002][ T39] ? kthread_create_worker_on_cpu+0x60/0x60 [ 59.663688][ T39] ret_from_fork+0x1f/0x30 [ 59.667957][ T39] ---[ end trace 93e025bf648d3220 ]--- [ 59.673701][ T39] BUG: unable to handle page fault for address: ffff8889187ffff8 [ 59.681205][ T39] #PF: supervisor read access in kernel mode [ 59.687018][ T39] #PF: error_code(0x0000) - not-present page [ 59.692838][ T39] PGD 3201067 P4D 3201067 PUD 0 [ 59.697610][ T39] Oops: 0000 [#1] PREEMPT SMP [ 59.702124][ T39] CPU: 0 PID: 39 Comm: erofs_worker/0 Tainted: G W 5.10.240-syzkaller #0 [ 59.711672][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 59.721571][ T39] RIP: 0010:z_erofs_decompress_pcluster.isra.0+0x243/0x9c0 [ 59.728598][ T39] Code: 41 bb 00 02 00 00 e9 fa fe ff ff 48 8b b5 98 fc ff ff 83 ff 02 49 89 f1 74 10 49 8b 04 24 41 8b 44 24 28 c1 f8 02 4c 8d 0c c6 <49> 8b 01 48 85 c0 74 35 48 8b 70 08 48 8d 7e ff 83 e6 01 48 0f 45 [ 59.748041][ T39] RSP: 0018:ffffc9000014baa8 EFLAGS: 00010286 [ 59.753942][ T39] RAX: 00000000ffffffff RBX: ffff88810ea7ba98 RCX: 0000000000000002 [ 59.761756][ T39] RDX: ffff88810ea7ba50 RSI: ffff888118800000 RDI: 0000000000000000 [ 59.769567][ T39] RBP: ffffc9000014be70 R08: 0000000000000000 R09: ffff8889187ffff8 [ 59.777377][ T39] R10: 0000000080000014 R11: 0000000000000003 R12: ffffea000461b700 [ 59.785194][ T39] R13: ffffea000461b740 R14: 0000000000000001 R15: 0000000000000000 [ 59.793008][ T39] FS: 0000000000000000(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 [ 59.802017][ T39] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 59.808536][ T39] CR2: ffff8889187ffff8 CR3: 00000001090ca000 CR4: 00000000003506b0 [ 59.816730][ T39] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 59.824531][ T39] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 59.832607][ T39] Call Trace: [ 59.835978][ T39] ? kvm_sched_clock_read+0x18/0x40 [ 59.841132][ T39] ? sched_clock+0x13/0x20 [ 59.845659][ T39] ? sched_clock_local+0x18/0x90 [ 59.850722][ T39] ? sched_clock_cpu+0xc0/0xe0 [ 59.855539][ T39] ? record_times+0x16/0x90 [ 59.859933][ T39] ? psi_group_change+0x3d/0x210 [ 59.864852][ T39] ? _raw_spin_unlock_irq+0x20/0x36 [ 59.870074][ T39] ? finish_task_switch+0x7b/0x240 [ 59.875745][ T39] ? __switch_to+0x12e/0x440 [ 59.880293][ T39] ? z_erofs_decompressqueue_work+0x90/0x90 [ 59.886136][ T39] z_erofs_decompressqueue_kthread_work+0x56/0x90 [ 59.892528][ T39] kthread_worker_fn+0xc8/0x280 [ 59.897365][ T39] ? kthread_should_park+0x30/0x30 [ 59.902589][ T39] kthread+0x14c/0x170 [ 59.906587][ T39] ? kthread_create_worker_on_cpu+0x60/0x60 [ 59.912442][ T39] ret_from_fork+0x1f/0x30 [ 59.916690][ T39] Modules linked in: [ 59.920439][ T39] CR2: ffff8889187ffff8 [ 59.924621][ T39] ---[ end trace 93e025bf648d3221 ]--- [ 59.930080][ T39] RIP: 0010:z_erofs_decompress_pcluster.isra.0+0x243/0x9c0 [ 59.937193][ T39] Code: 41 bb 00 02 00 00 e9 fa fe ff ff 48 8b b5 98 fc ff ff 83 ff 02 49 89 f1 74 10 49 8b 04 24 41 8b 44 24 28 c1 f8 02 4c 8d 0c c6 <49> 8b 01 48 85 c0 74 35 48 8b 70 08 48 8d 7e ff 83 e6 01 48 0f 45 [ 59.957662][ T39] RSP: 0018:ffffc9000014baa8 EFLAGS: 00010286 [ 59.963789][ T39] RAX: 00000000ffffffff RBX: ffff88810ea7ba98 RCX: 0000000000000002 [ 59.971777][ T39] RDX: ffff88810ea7ba50 RSI: ffff888118800000 RDI: 0000000000000000 [ 59.979824][ T39] RBP: ffffc9000014be70 R08: 0000000000000000 R09: ffff8889187ffff8 [ 59.987735][ T39] R10: 0000000080000014 R11: 0000000000000003 R12: ffffea000461b700 [ 59.995980][ T39] R13: ffffea000461b740 R14: 0000000000000001 R15: 0000000000000000 [ 60.004356][ T39] FS: 0000000000000000(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 [ 60.013294][ T39] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 60.020190][ T39] CR2: ffff8889187ffff8 CR3: 00000001090ca000 CR4: 00000000003506b0 [ 60.028258][ T39] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 60.036112][ T39] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 60.043930][ T39] Kernel panic - not syncing: Fatal exception [ 60.050207][ T39] Kernel Offset: disabled [ 60.054367][ T39] Rebooting in 86400 seconds..