[ 26.368736][ T45] device bridge_slave_0 left promiscuous mode [ 26.375664][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.385273][ T45] device veth1_macvtap left promiscuous mode [ 26.391757][ T45] device veth0_vlan left promiscuous mode [ 27.244029][ T45] device bridge_slave_1 left promiscuous mode [ 27.250236][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.258328][ T45] device bridge_slave_0 left promiscuous mode [ 27.264624][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.273086][ T45] device veth1_macvtap left promiscuous mode [ 27.279163][ T45] device veth0_vlan left promiscuous mode Warning: Permanently added '10.128.1.147' (ED25519) to the list of known hosts. 2026/11/08 02:59:24 parsed 1 programs 2026/11/08 02:59:24 serving rpc on tcp://39277 Setting up swapspace version 1, size = 127995904 bytes [ 36.162664][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 36.162680][ T30] audit: type=1400 audit(1794106765.072:105): avc: denied { unlink } for pid=410 comm="syz-executor" name="swap-file" dev="sda1" ino=2027 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 36.227770][ T410] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 36.724614][ T30] audit: type=1401 audit(1794106765.632:106): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 36.808470][ T429] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.815678][ T429] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.823319][ T429] device bridge_slave_0 entered promiscuous mode [ 36.830120][ T429] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.837233][ T429] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.844794][ T429] device bridge_slave_1 entered promiscuous mode [ 36.888014][ T429] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.895127][ T429] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.902470][ T429] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.909528][ T429] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.928077][ T351] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.935380][ T351] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.943649][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 36.951106][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 36.961554][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.969781][ T351] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.976895][ T351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.993032][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.001374][ T351] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.008659][ T351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.016683][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 37.024791][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 37.036821][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 37.048457][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 37.056839][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 37.064458][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 37.073895][ T429] device veth0_vlan entered promiscuous mode [ 37.084848][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 37.094188][ T429] device veth1_macvtap entered promiscuous mode [ 37.104100][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 37.115147][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 37.523517][ T30] audit: type=1400 audit(1794106766.432:107): avc: denied { create } for pid=458 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.723675][ T45] device bridge_slave_1 left promiscuous mode [ 37.729862][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.741959][ T45] device bridge_slave_0 left promiscuous mode [ 37.748280][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.756967][ T45] device veth1_macvtap left promiscuous mode [ 37.763592][ T45] device veth0_vlan left promiscuous mode 2026/11/08 02:59:26 executed programs: 0 [ 38.000268][ T475] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.007643][ T475] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.015368][ T475] device bridge_slave_0 entered promiscuous mode [ 38.022900][ T475] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.030195][ T475] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.037688][ T475] device bridge_slave_1 entered promiscuous mode [ 38.085238][ T475] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.092353][ T475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.099708][ T475] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.106796][ T475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.125419][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 38.133289][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.140624][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.152404][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 38.160709][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.167835][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.175333][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 38.183914][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.190970][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.204104][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 38.212132][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 38.226220][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 38.237442][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 38.245743][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 38.253445][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 38.261930][ T475] device veth0_vlan entered promiscuous mode [ 38.272212][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 38.281318][ T475] device veth1_macvtap entered promiscuous mode [ 38.290763][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 38.300857][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 38.326563][ T480] loop2: detected capacity change from 0 to 16 [ 38.362927][ T30] audit: type=1400 audit(1794106767.272:108): avc: denied { mounton } for pid=479 comm="syz.2.17" path="/syzcgroup/unified/file0" dev="cgroup2" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 38.373762][ T480] erofs: (device loop2): mounted with root inode @ nid 36. [ 38.394298][ T30] audit: type=1400 audit(1794106767.302:109): avc: denied { mount } for pid=479 comm="syz.2.17" name="/" dev="loop2" ino=36 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 38.415351][ T480] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 38.425364][ T480] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 38.433221][ T480] #PF: supervisor instruction fetch in kernel mode [ 38.439920][ T480] #PF: error_code(0x0010) - not-present page [ 38.445905][ T480] PGD 12d4c4067 P4D 12d4c4067 PUD 0 [ 38.451243][ T480] Oops: 0010 [#1] PREEMPT SMP KASAN [ 38.456475][ T480] CPU: 1 PID: 480 Comm: syz.2.17 Not tainted syzkaller #0 [ 38.463595][ T480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 38.473660][ T480] RIP: 0010:0x0 [ 38.477244][ T480] Code: Unable to access opcode bytes at RIP 0xffffffffffffffd6. [ 38.485052][ T480] RSP: 0018:ffffc90002bc6d88 EFLAGS: 00010246 [ 38.491155][ T480] RAX: 1ffffffff0ac1782 RBX: ffffc90002bc76e0 RCX: ffff888118e22800 [ 38.499157][ T480] RDX: 0000000000000000 RSI: ffffc90002bc76e0 RDI: ffffc90002bc7240 [ 38.507138][ T480] RBP: ffffc90002bc6db0 R08: ffffc90002bc726f R09: ffffc90002bc726a [ 38.515240][ T480] R10: dffffc0000000000 R11: fffff52000578e4e R12: dffffc0000000000 [ 38.523254][ T480] R13: 000000000000073b R14: ffffc90002bc7240 R15: ffffffff8560bc10 [ 38.531331][ T480] FS: 00007fbfd2d116c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 38.540281][ T480] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 38.546898][ T480] CR2: ffffffffffffffd6 CR3: 0000000117beb000 CR4: 00000000003506a0 [ 38.554888][ T480] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 38.562867][ T480] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 38.570984][ T480] Call Trace: [ 38.574343][ T480] [ 38.577292][ T480] z_erofs_decompress+0x79/0xb0 [ 38.582221][ T480] z_erofs_decompress_queue+0x1100/0x19e0 [ 38.587960][ T480] ? z_erofs_pagevec_ctor_init+0x670/0x670 [ 38.593813][ T480] ? _raw_spin_unlock_irq+0x4e/0x70 [ 38.599021][ T480] ? wait_for_common_io+0x23b/0x2e0 [ 38.604234][ T480] ? wait_for_completion_io+0x20/0x20 [ 38.609620][ T480] ? submit_bio+0x367/0x620 [ 38.614135][ T480] ? submit_bio_noacct+0x800/0x800 [ 38.619365][ T480] z_erofs_runqueue+0x116d/0x11f0 [ 38.624401][ T480] ? __kasan_check_write+0x14/0x20 [ 38.629546][ T480] ? z_erofs_do_read_page+0x2193/0x2250 [ 38.635194][ T480] ? z_erofs_do_read_page+0x2250/0x2250 [ 38.640761][ T480] ? z_erofs_pcluster_readmore+0x525/0x550 [ 38.646586][ T480] z_erofs_readpage+0x25d/0x4d0 [ 38.651576][ T480] ? z_erofs_rcu_callback+0x170/0x170 [ 38.656981][ T480] ? _raw_spin_lock+0x94/0xf0 [ 38.661683][ T480] ? z_erofs_rcu_callback+0x170/0x170 [ 38.667082][ T480] do_read_cache_page+0x58e/0xb10 [ 38.672137][ T480] read_cache_page+0x50/0x70 [ 38.676754][ T480] erofs_namei+0x12a/0xf80 [ 38.681194][ T480] ? __kasan_check_write+0x14/0x20 [ 38.686342][ T480] erofs_lookup+0xa5/0x260 [ 38.690947][ T480] __lookup_slow+0x2b8/0x410 [ 38.695554][ T480] ? lookup_one_len+0x2d0/0x2d0 [ 38.700461][ T480] ? down_read+0xab/0x100 [ 38.704805][ T480] ? handle_dots+0xe10/0xe10 [ 38.709668][ T480] lookup_slow+0x57/0x70 [ 38.713920][ T480] walk_component+0x326/0x460 [ 38.718720][ T480] link_path_walk+0x688/0xde0 [ 38.723410][ T480] ? arch_stack_walk+0xee/0x140 [ 38.728279][ T480] ? handle_lookup_down+0x130/0x130 [ 38.733684][ T480] __filename_parentat+0x254/0x690 [ 38.738809][ T480] ? __kasan_slab_alloc+0xb7/0xe0 [ 38.743850][ T480] ? slab_post_alloc_hook+0x4f/0x2b0 [ 38.749152][ T480] ? kmem_cache_alloc+0xf7/0x260 [ 38.754201][ T480] ? vfs_path_parent_lookup+0x60/0x60 [ 38.759589][ T480] filename_create+0xd5/0x440 [ 38.764285][ T480] ? kern_path_create+0x1b0/0x1b0 [ 38.769359][ T480] do_mkdirat+0x5c/0x4d0 [ 38.773626][ T480] ? getname_flags+0x205/0x510 [ 38.778495][ T480] __x64_sys_mkdir+0x6e/0x80 [ 38.783101][ T480] x64_sys_call+0x124/0x9a0 [ 38.787614][ T480] do_syscall_64+0x4c/0xa0 [ 38.792233][ T480] ? clear_bhb_loop+0x50/0xa0 [ 38.796934][ T480] ? clear_bhb_loop+0x50/0xa0 [ 38.801645][ T480] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 38.807554][ T480] RIP: 0033:0x7fbfd2eafe59 [ 38.811981][ T480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 38.831740][ T480] RSP: 002b:00007fbfd2d11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 38.840268][ T480] RAX: ffffffffffffffda RBX: 00007fbfd3137fa0 RCX: 00007fbfd2eafe59 [ 38.848275][ T480] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 38.856265][ T480] RBP: 00007fbfd2f45e6f R08: 0000000000000000 R09: 0000000000000000 [ 38.864363][ T480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 38.872443][ T480] R13: 00007fbfd3138038 R14: 00007fbfd3137fa0 R15: 00007ffef3d557d8 [ 38.880434][ T480] [ 38.883491][ T480] Modules linked in: [ 38.887416][ T480] CR2: 0000000000000000 [ 38.891614][ T480] ---[ end trace 059537540f23fad3 ]--- [ 38.897077][ T480] RIP: 0010:0x0 [ 38.900556][ T480] Code: Unable to access opcode bytes at RIP 0xffffffffffffffd6. [ 38.908280][ T480] RSP: 0018:ffffc90002bc6d88 EFLAGS: 00010246 [ 38.914360][ T480] RAX: 1ffffffff0ac1782 RBX: ffffc90002bc76e0 RCX: ffff888118e22800 [ 38.922351][ T480] RDX: 0000000000000000 RSI: ffffc90002bc76e0 RDI: ffffc90002bc7240 [ 38.930337][ T480] RBP: ffffc90002bc6db0 R08: ffffc90002bc726f R09: ffffc90002bc726a [ 38.938446][ T480] R10: dffffc0000000000 R11: fffff52000578e4e R12: dffffc0000000000 [ 38.946428][ T480] R13: 000000000000073b R14: ffffc90002bc7240 R15: ffffffff8560bc10 [ 38.954669][ T480] FS: 00007fbfd2d116c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 38.963792][ T480] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 38.970386][ T480] CR2: ffffffffffffffd6 CR3: 0000000117beb000 CR4: 00000000003506a0 [ 38.978461][ T480] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 38.986626][ T480] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 38.994621][ T480] Kernel panic - not syncing: Fatal exception [ 39.000975][ T480] Kernel Offset: disabled [ 39.005310][ T480] Rebooting in 86400 seconds..