[ 33.993816][ T46] device bridge_slave_0 left promiscuous mode [ 33.999822][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.006935][ T46] device veth1_macvtap left promiscuous mode [ 34.012742][ T46] device veth0_vlan left promiscuous mode [ 35.410697][ T46] device bridge_slave_1 left promiscuous mode [ 35.416664][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.423683][ T46] device bridge_slave_0 left promiscuous mode [ 35.429591][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.436864][ T46] device veth1_macvtap left promiscuous mode [ 35.442805][ T46] device veth0_vlan left promiscuous mode Warning: Permanently added '10.128.0.2' (ED25519) to the list of known hosts. 2026/02/22 10:13:01 parsed 1 programs [ 50.299159][ T23] kauditd_printk_skb: 32 callbacks suppressed [ 50.299162][ T23] audit: type=1400 audit(1771755181.070:92): avc: denied { unlink } for pid=438 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 50.341773][ T438] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 50.609528][ T445] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.616710][ T445] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.624479][ T445] device bridge_slave_0 entered promiscuous mode [ 50.630841][ T445] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.638168][ T445] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.645750][ T445] device bridge_slave_1 entered promiscuous mode [ 50.668111][ T445] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.675086][ T445] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.682572][ T445] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.689398][ T445] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.711524][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.718472][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.725733][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.733192][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.740981][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.749071][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.755973][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.763243][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.771056][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.777956][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.785911][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.793908][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.802771][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.811866][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.819641][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.826799][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.834287][ T445] device veth0_vlan entered promiscuous mode [ 50.840874][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.848851][ T445] device veth1_macvtap entered promiscuous mode [ 50.855296][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.863532][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.927351][ T23] audit: type=1400 audit(1771755181.700:93): avc: denied { create } for pid=461 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.977764][ T23] audit: type=1401 audit(1771755181.750:94): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" 2026/02/22 10:13:01 executed programs: 0 [ 51.189277][ T491] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.196307][ T491] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.203873][ T491] device bridge_slave_0 entered promiscuous mode [ 51.210937][ T491] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.218103][ T491] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.225068][ T491] device bridge_slave_1 entered promiscuous mode [ 51.235248][ T491] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.242101][ T491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.249124][ T491] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.256013][ T491] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.265009][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.272431][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.279602][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.287513][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.295350][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.302442][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.309829][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.318064][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.324916][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.333241][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.341482][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.350227][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.358800][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.366386][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.373670][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.381510][ T491] device veth0_vlan entered promiscuous mode [ 51.387833][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.395831][ T491] device veth1_macvtap entered promiscuous mode [ 51.402616][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.410887][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.421235][ T7] device bridge_slave_1 left promiscuous mode [ 51.427229][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.430961][ T496] erofs: (device loop2): mounted with root inode @ nid 36. [ 51.441167][ T7] device bridge_slave_0 left promiscuous mode [ 51.441410][ T496] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 51.447985][ T23] audit: type=1400 audit(1771755182.220:95): avc: denied { mount } for pid=495 comm="syz.2.16" name="/" dev="loop2" ino=36 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 51.456772][ T496] erofs: (device loop2): z_erofs_readahead: readahead error at page 8589934616 @ nid 36 [ 51.477948][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.487619][ T496] erofs: (device loop2): z_erofs_readahead: readahead error at page 8589934615 @ nid 36 [ 51.504702][ T496] erofs: (device loop2): z_erofs_readahead: readahead error at page 8589934614 @ nid 36 [ 51.514321][ T496] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 51.514384][ T7] device veth1_macvtap left promiscuous mode [ 51.523562][ T496] erofs: (device loop2): z_erofs_readahead: readahead error at page 8589934613 @ nid 36 [ 51.523565][ T496] erofs: (device loop2): z_erofs_readahead: readahead error at page 8589934612 @ nid 36 [ 51.529404][ T7] device veth0_vlan left promiscuous mode [ 51.539020][ T496] erofs: (device loop2): z_erofs_readahead: readahead error at page 8589934611 @ nid 36 [ 51.564458][ T496] erofs: (device loop2): z_erofs_readahead: readahead error at page 8589934610 @ nid 36 [ 51.574190][ T39] ------------[ cut here ]------------ [ 51.579445][ T39] WARNING: CPU: 0 PID: 39 at mm/page_alloc.c:3801 get_page_from_freelist+0x3e5/0xeb0 [ 51.588837][ T39] Modules linked in: [ 51.592587][ T39] CPU: 0 PID: 39 Comm: erofs_worker/0 Not tainted syzkaller #0 [ 51.600461][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 51.610217][ T39] RIP: 0010:get_page_from_freelist+0x3e5/0xeb0 [ 51.616200][ T39] Code: 00 80 00 00 8b 70 18 48 8b 40 10 89 75 8c 48 8b 00 48 89 85 38 ff ff ff 48 63 c6 48 89 85 50 ff ff ff 74 08 83 7d c4 01 76 02 <0f> 0b 48 8b b5 18 ff ff ff 4d 8d a7 40 05 00 00 48 8b 85 50 ff ff [ 51.636225][ T39] RSP: 0018:ffffc9000014b7d8 EFLAGS: 00010206 [ 51.643075][ T39] RAX: 0000000000000000 RBX: 000000000011e942 RCX: 0000000000000007 [ 51.651680][ T39] RDX: ffffffff82db7bd8 RSI: 0000000000000000 RDI: ffffffff82db7900 [ 51.659666][ T39] RBP: ffffc9000014b8d8 R08: ffffffff82db7c98 R09: ffffea0004622008 [ 51.667512][ T39] R10: 00000000000070af R11: 0000000000000000 R12: 0000000000000001 [ 51.675392][ T39] R13: 0000000000000000 R14: 000000000005acc0 R15: ffffffff82db7900 [ 51.683203][ T39] FS: 0000000000000000(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 [ 51.691971][ T39] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 51.698385][ T39] CR2: 0000001b3265ffff CR3: 0000000002c0b000 CR4: 00000000003506b0 [ 51.706333][ T39] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 51.714128][ T39] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 51.722215][ T39] Call Trace: [ 51.725611][ T39] __alloc_pages_nodemask+0x15e/0x1370 [ 51.731136][ T39] kmalloc_order+0x2b/0xf0 [ 51.735422][ T39] kmalloc_order_trace+0x18/0x90 [ 51.740195][ T39] __kmalloc+0x47e/0x4f0 [ 51.744431][ T39] kvmalloc_node+0x5b/0xa0 [ 51.748717][ T39] z_erofs_decompress_pcluster.isra.0+0x94/0x9c0 [ 51.754953][ T39] ? kvm_sched_clock_read+0x18/0x40 [ 51.759913][ T39] ? sched_clock+0x13/0x20 [ 51.764198][ T39] ? sched_clock_local+0x18/0x90 [ 51.768938][ T39] ? sched_clock_cpu+0xc0/0xe0 [ 51.773555][ T39] ? record_times+0x16/0x90 [ 51.777878][ T39] ? plist_check_head+0x5a/0xb0 [ 51.782751][ T39] ? plist_del+0x94/0xe0 [ 51.786810][ T39] ? find_next_bit+0x14/0x20 [ 51.791259][ T39] ? _raw_spin_unlock_irq+0x20/0x36 [ 51.796281][ T39] ? finish_task_switch+0x7b/0x240 [ 51.801286][ T39] ? __switch_to+0x12e/0x440 [ 51.805848][ T39] ? z_erofs_decompressqueue_work+0x90/0x90 [ 51.811652][ T39] z_erofs_decompressqueue_kthread_work+0x56/0x90 [ 51.817921][ T39] kthread_worker_fn+0xc8/0x280 [ 51.822625][ T39] ? kthread_should_park+0x30/0x30 [ 51.827635][ T39] kthread+0x14c/0x170 [ 51.831652][ T39] ? kthread_create_worker_on_cpu+0x60/0x60 [ 51.837441][ T39] ret_from_fork+0x1f/0x30 [ 51.841715][ T39] ---[ end trace bed3a9c2bb051235 ]--- [ 51.847555][ T39] BUG: unable to handle page fault for address: ffff88891887fff8 [ 51.854968][ T39] #PF: supervisor read access in kernel mode [ 51.860871][ T39] #PF: error_code(0x0000) - not-present page [ 51.866701][ T39] PGD 3201067 P4D 3201067 PUD 0 [ 51.871813][ T39] Oops: 0000 [#1] PREEMPT SMP [ 51.876323][ T39] CPU: 0 PID: 39 Comm: erofs_worker/0 Tainted: G W syzkaller #0 [ 51.885264][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 51.896690][ T39] RIP: 0010:z_erofs_decompress_pcluster.isra.0+0x243/0x9c0 [ 51.904360][ T39] Code: 41 bb 00 02 00 00 e9 fa fe ff ff 48 8b b5 98 fc ff ff 83 ff 02 49 89 f1 74 10 49 8b 04 24 41 8b 44 24 28 c1 f8 02 4c 8d 0c c6 <49> 8b 01 48 85 c0 74 35 48 8b 70 08 48 8d 7e ff 83 e6 01 48 0f 45 [ 51.924903][ T39] RSP: 0018:ffffc9000014baa8 EFLAGS: 00010286 [ 51.931007][ T39] RAX: 00000000ffffffff RBX: ffff88810e2a4048 RCX: 0000000000000002 [ 51.938902][ T39] RDX: ffff88810e2a4000 RSI: ffff888118880000 RDI: 0000000000000000 [ 51.947663][ T39] RBP: ffffc9000014be70 R08: 0000000000000000 R09: ffff88891887fff8 [ 51.955692][ T39] R10: 0000000080000014 R11: 0000000000000003 R12: ffffea00044fb940 [ 51.963525][ T39] R13: ffffea00044fb980 R14: 0000000000000001 R15: 0000000000000000 [ 51.971420][ T39] FS: 0000000000000000(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 [ 51.980349][ T39] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 51.986787][ T39] CR2: ffff88891887fff8 CR3: 0000000002c0b000 CR4: 00000000003506b0 [ 51.994682][ T39] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 52.002716][ T39] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 52.010816][ T39] Call Trace: [ 52.014010][ T39] ? kvm_sched_clock_read+0x18/0x40 [ 52.019142][ T39] ? sched_clock+0x13/0x20 [ 52.023382][ T39] ? sched_clock_local+0x18/0x90 [ 52.028151][ T39] ? sched_clock_cpu+0xc0/0xe0 [ 52.032858][ T39] ? record_times+0x16/0x90 [ 52.037277][ T39] ? plist_check_head+0x5a/0xb0 [ 52.041991][ T39] ? plist_del+0x94/0xe0 [ 52.046255][ T39] ? find_next_bit+0x14/0x20 [ 52.050956][ T39] ? _raw_spin_unlock_irq+0x20/0x36 [ 52.056266][ T39] ? finish_task_switch+0x7b/0x240 [ 52.061489][ T39] ? __switch_to+0x12e/0x440 [ 52.065935][ T39] ? z_erofs_decompressqueue_work+0x90/0x90 [ 52.071930][ T39] z_erofs_decompressqueue_kthread_work+0x56/0x90 [ 52.078924][ T39] kthread_worker_fn+0xc8/0x280 [ 52.083661][ T39] ? kthread_should_park+0x30/0x30 [ 52.088938][ T39] kthread+0x14c/0x170 [ 52.092815][ T39] ? kthread_create_worker_on_cpu+0x60/0x60 [ 52.098551][ T39] ret_from_fork+0x1f/0x30 [ 52.102882][ T39] Modules linked in: [ 52.106619][ T39] CR2: ffff88891887fff8 [ 52.110607][ T39] ---[ end trace bed3a9c2bb051236 ]--- [ 52.116004][ T39] RIP: 0010:z_erofs_decompress_pcluster.isra.0+0x243/0x9c0 [ 52.123368][ T39] Code: 41 bb 00 02 00 00 e9 fa fe ff ff 48 8b b5 98 fc ff ff 83 ff 02 49 89 f1 74 10 49 8b 04 24 41 8b 44 24 28 c1 f8 02 4c 8d 0c c6 <49> 8b 01 48 85 c0 74 35 48 8b 70 08 48 8d 7e ff 83 e6 01 48 0f 45 [ 52.143449][ T39] RSP: 0018:ffffc9000014baa8 EFLAGS: 00010286 [ 52.149446][ T39] RAX: 00000000ffffffff RBX: ffff88810e2a4048 RCX: 0000000000000002 [ 52.157959][ T39] RDX: ffff88810e2a4000 RSI: ffff888118880000 RDI: 0000000000000000 [ 52.165975][ T39] RBP: ffffc9000014be70 R08: 0000000000000000 R09: ffff88891887fff8 [ 52.173921][ T39] R10: 0000000080000014 R11: 0000000000000003 R12: ffffea00044fb940 [ 52.181958][ T39] R13: ffffea00044fb980 R14: 0000000000000001 R15: 0000000000000000 [ 52.189874][ T39] FS: 0000000000000000(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 [ 52.198769][ T39] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 52.205612][ T39] CR2: ffff88891887fff8 CR3: 0000000002c0b000 CR4: 00000000003506b0 [ 52.213382][ T39] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 52.221375][ T39] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 52.229304][ T39] Kernel panic - not syncing: Fatal exception [ 52.235357][ T39] Kernel Offset: disabled [ 52.239544][ T39] Rebooting in 86400 seconds..