Warning: Permanently added '10.128.1.212' (ED25519) to the list of known hosts. 2026/01/23 09:31:37 parsed 1 programs [ 49.945715][ T23] kauditd_printk_skb: 32 callbacks suppressed [ 49.945717][ T23] audit: type=1400 audit(1769160697.630:92): avc: denied { unlink } for pid=435 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 49.979460][ T435] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 50.235811][ T23] audit: type=1400 audit(1769160697.920:93): avc: denied { create } for pid=442 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.392001][ T468] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.399029][ T468] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.406060][ T468] device bridge_slave_0 entered promiscuous mode [ 50.412318][ T468] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.419157][ T468] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.426018][ T468] device bridge_slave_1 entered promiscuous mode [ 50.436449][ T468] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.443274][ T468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.450340][ T468] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.457171][ T468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.465788][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.472936][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.479846][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.487151][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.495085][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.501975][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.509443][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.517282][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.524079][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.531984][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.540001][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.548346][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.556885][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.564549][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.571655][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.578954][ T468] device veth0_vlan entered promiscuous mode [ 50.585213][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.593217][ T468] device veth1_macvtap entered promiscuous mode [ 50.600000][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.608160][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.626646][ T23] audit: type=1401 audit(1769160698.310:94): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" 2026/01/23 09:31:38 executed programs: 0 [ 50.782266][ T486] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.789139][ T486] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.796041][ T486] device bridge_slave_0 entered promiscuous mode [ 50.802252][ T486] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.809023][ T486] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.815921][ T486] device bridge_slave_1 entered promiscuous mode [ 50.827203][ T486] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.834036][ T486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.841069][ T486] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.847935][ T486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.856472][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.863567][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.870500][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.877901][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.885745][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.892537][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.900613][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.908495][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.915323][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.923147][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.930985][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.939656][ T486] device veth0_vlan entered promiscuous mode [ 50.945592][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.953510][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.961157][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.968342][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.976079][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.984214][ T486] device veth1_macvtap entered promiscuous mode [ 50.990738][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.999005][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.011666][ T492] erofs: (device loop2): mounted with root inode @ nid 36. [ 51.018901][ T23] audit: type=1400 audit(1769160698.700:95): avc: denied { mount } for pid=491 comm="syz.2.16" name="/" dev="loop2" ino=36 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 51.019073][ T492] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 51.049188][ T492] erofs: (device loop2): z_erofs_readahead: readahead error at page 8589934616 @ nid 36 [ 51.058697][ T492] erofs: (device loop2): z_erofs_readahead: readahead error at page 8589934615 @ nid 36 [ 51.068242][ T492] erofs: (device loop2): z_erofs_readahead: readahead error at page 8589934614 @ nid 36 [ 51.077785][ T492] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 51.086968][ T492] erofs: (device loop2): z_erofs_readahead: readahead error at page 8589934613 @ nid 36 [ 51.096701][ T492] erofs: (device loop2): z_erofs_readahead: readahead error at page 8589934612 @ nid 36 [ 51.106263][ T492] erofs: (device loop2): z_erofs_readahead: readahead error at page 8589934611 @ nid 36 [ 51.115786][ T492] erofs: (device loop2): z_erofs_readahead: readahead error at page 8589934610 @ nid 36 [ 51.125466][ T39] ------------[ cut here ]------------ [ 51.130732][ T39] WARNING: CPU: 0 PID: 39 at mm/page_alloc.c:3801 get_page_from_freelist+0x3e5/0xeb0 [ 51.140035][ T39] Modules linked in: [ 51.143731][ T39] CPU: 0 PID: 39 Comm: erofs_worker/0 Not tainted syzkaller #0 [ 51.151178][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 51.161160][ T39] RIP: 0010:get_page_from_freelist+0x3e5/0xeb0 [ 51.167491][ T39] Code: 00 80 00 00 8b 70 18 48 8b 40 10 89 75 8c 48 8b 00 48 89 85 38 ff ff ff 48 63 c6 48 89 85 50 ff ff ff 74 08 83 7d c4 01 76 02 <0f> 0b 48 8b b5 18 ff ff ff 4d 8d a7 40 05 00 00 48 8b 85 50 ff ff [ 51.187101][ T39] RSP: 0018:ffffc9000014b7d8 EFLAGS: 00010206 [ 51.193167][ T39] RAX: 0000000000000000 RBX: 000000000011eab4 RCX: 0000000000000008 [ 51.201088][ T39] RDX: ffffffff82db7a00 RSI: 0000000000000000 RDI: ffffffff82db76c0 [ 51.208988][ T39] RBP: ffffc9000014b8d8 R08: ffffffff82db7ad0 R09: ffffea00044b4008 [ 51.217071][ T39] R10: 00000000000070af R11: 0000000000000000 R12: 0000000000000001 [ 51.224876][ T39] R13: 0000000000000000 R14: 000000000005acc0 R15: ffffffff82db76c0 [ 51.232672][ T39] FS: 0000000000000000(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 [ 51.241475][ T39] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 51.247880][ T39] CR2: 00007faa854c6000 CR3: 00000001096d6000 CR4: 00000000003506b0 [ 51.255694][ T39] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 51.263490][ T39] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 51.271317][ T39] Call Trace: [ 51.274443][ T39] __alloc_pages_nodemask+0x15e/0x1370 [ 51.279718][ T39] kmalloc_order+0x2b/0xf0 [ 51.283996][ T39] kmalloc_order_trace+0x18/0x90 [ 51.288748][ T39] __kmalloc+0x47e/0x4f0 [ 51.292832][ T39] kvmalloc_node+0x5b/0xa0 [ 51.297095][ T39] z_erofs_decompress_pcluster.isra.0+0x94/0x9c0 [ 51.303253][ T39] ? kvm_sched_clock_read+0x18/0x40 [ 51.308410][ T39] ? sched_clock+0x13/0x20 [ 51.312722][ T39] ? sched_clock_local+0x18/0x90 [ 51.317491][ T39] ? sched_clock_cpu+0xc0/0xe0 [ 51.322084][ T39] ? record_times+0x16/0x90 [ 51.326446][ T39] ? plist_check_head+0x5a/0xb0 [ 51.331140][ T39] ? plist_del+0x94/0xe0 [ 51.335212][ T39] ? find_next_bit+0x14/0x20 [ 51.339613][ T39] ? _raw_spin_unlock_irq+0x20/0x36 [ 51.344789][ T39] ? finish_task_switch+0x7b/0x240 [ 51.349722][ T39] ? __switch_to+0x12e/0x440 [ 51.354199][ T39] ? z_erofs_decompressqueue_work+0x90/0x90 [ 51.359873][ T39] z_erofs_decompressqueue_kthread_work+0x56/0x90 [ 51.366197][ T39] kthread_worker_fn+0xc8/0x280 [ 51.371000][ T39] ? kthread_should_park+0x30/0x30 [ 51.375982][ T39] kthread+0x14c/0x170 [ 51.379857][ T39] ? kthread_create_worker_on_cpu+0x60/0x60 [ 51.385605][ T39] ret_from_fork+0x1f/0x30 [ 51.389843][ T39] ---[ end trace 08b667ce436268f7 ]--- [ 51.395254][ T39] BUG: unable to handle page fault for address: ffff8889127ffff8 [ 51.402680][ T39] #PF: supervisor read access in kernel mode [ 51.408497][ T39] #PF: error_code(0x0000) - not-present page [ 51.414324][ T39] PGD 3201067 P4D 3201067 PUD 0 [ 51.419088][ T39] Oops: 0000 [#1] PREEMPT SMP [ 51.423603][ T39] CPU: 0 PID: 39 Comm: erofs_worker/0 Tainted: G W syzkaller #0 [ 51.432375][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 51.442265][ T39] RIP: 0010:z_erofs_decompress_pcluster.isra.0+0x243/0x9c0 [ 51.449297][ T39] Code: 41 bb 00 02 00 00 e9 fa fe ff ff 48 8b b5 98 fc ff ff 83 ff 02 49 89 f1 74 10 49 8b 04 24 41 8b 44 24 28 c1 f8 02 4c 8d 0c c6 <49> 8b 01 48 85 c0 74 35 48 8b 70 08 48 8d 7e ff 83 e6 01 48 0f 45 [ 51.468843][ T39] RSP: 0018:ffffc9000014baa8 EFLAGS: 00010286 [ 51.474731][ T39] RAX: 00000000ffffffff RBX: ffff88810e691390 RCX: 0000000000000002 [ 51.482570][ T39] RDX: ffff88810e691348 RSI: ffff888112800000 RDI: 0000000000000000 [ 51.490448][ T39] RBP: ffffc9000014be70 R08: 0000000000000000 R09: ffff8889127ffff8 [ 51.498259][ T39] R10: 0000000080000014 R11: 0000000000000003 R12: ffffea00044b2e40 [ 51.506164][ T39] R13: ffffea00044b2e80 R14: 0000000000000001 R15: 0000000000000000 [ 51.513968][ T39] FS: 0000000000000000(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 [ 51.522735][ T39] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 51.529159][ T39] CR2: ffff8889127ffff8 CR3: 00000001096d6000 CR4: 00000000003506b0 [ 51.536971][ T39] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 51.544777][ T39] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 51.552592][ T39] Call Trace: [ 51.555726][ T39] ? kvm_sched_clock_read+0x18/0x40 [ 51.560751][ T39] ? sched_clock+0x13/0x20 [ 51.565006][ T39] ? sched_clock_local+0x18/0x90 [ 51.569778][ T39] ? sched_clock_cpu+0xc0/0xe0 [ 51.574380][ T39] ? record_times+0x16/0x90 [ 51.578726][ T39] ? plist_check_head+0x5a/0xb0 [ 51.583492][ T39] ? plist_del+0x94/0xe0 [ 51.587574][ T39] ? find_next_bit+0x14/0x20 [ 51.592003][ T39] ? _raw_spin_unlock_irq+0x20/0x36 [ 51.597055][ T39] ? finish_task_switch+0x7b/0x240 [ 51.601980][ T39] ? __switch_to+0x12e/0x440 [ 51.606411][ T39] ? z_erofs_decompressqueue_work+0x90/0x90 [ 51.612223][ T39] z_erofs_decompressqueue_kthread_work+0x56/0x90 [ 51.618648][ T39] kthread_worker_fn+0xc8/0x280 [ 51.623335][ T39] ? kthread_should_park+0x30/0x30 [ 51.628280][ T39] kthread+0x14c/0x170 [ 51.632192][ T39] ? kthread_create_worker_on_cpu+0x60/0x60 [ 51.637976][ T39] ret_from_fork+0x1f/0x30 [ 51.642171][ T39] Modules linked in: [ 51.645901][ T39] CR2: ffff8889127ffff8 [ 51.649894][ T39] ---[ end trace 08b667ce436268f8 ]--- [ 51.655201][ T39] RIP: 0010:z_erofs_decompress_pcluster.isra.0+0x243/0x9c0 [ 51.662224][ T39] Code: 41 bb 00 02 00 00 e9 fa fe ff ff 48 8b b5 98 fc ff ff 83 ff 02 49 89 f1 74 10 49 8b 04 24 41 8b 44 24 28 c1 f8 02 4c 8d 0c c6 <49> 8b 01 48 85 c0 74 35 48 8b 70 08 48 8d 7e ff 83 e6 01 48 0f 45 [ 51.681667][ T39] RSP: 0018:ffffc9000014baa8 EFLAGS: 00010286 [ 51.687569][ T39] RAX: 00000000ffffffff RBX: ffff88810e691390 RCX: 0000000000000002 [ 51.695466][ T39] RDX: ffff88810e691348 RSI: ffff888112800000 RDI: 0000000000000000 [ 51.703300][ T39] RBP: ffffc9000014be70 R08: 0000000000000000 R09: ffff8889127ffff8 [ 51.711114][ T39] R10: 0000000080000014 R11: 0000000000000003 R12: ffffea00044b2e40 [ 51.718900][ T39] R13: ffffea00044b2e80 R14: 0000000000000001 R15: 0000000000000000 [ 51.726711][ T39] FS: 0000000000000000(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 [ 51.735478][ T39] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 51.741908][ T39] CR2: ffff8889127ffff8 CR3: 00000001096d6000 CR4: 00000000003506b0 [ 51.749718][ T39] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 51.757539][ T39] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 51.765355][ T39] Kernel panic - not syncing: Fatal exception [ 51.771589][ T39] Kernel Offset: disabled [ 51.775710][ T39] Rebooting in 86400 seconds..