syzkaller syzkaller login: [ 11.702301][ T24] kauditd_printk_skb: 48 callbacks suppressed [ 11.702310][ T24] audit: type=1400 audit(1769543361.509:59): avc: denied { transition } for pid=215 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 11.709420][ T24] audit: type=1400 audit(1769543361.509:60): avc: denied { noatsecure } for pid=215 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 11.712886][ T24] audit: type=1400 audit(1769543361.509:61): avc: denied { write } for pid=215 comm="sh" path="pipe:[13829]" dev="pipefs" ino=13829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 11.716913][ T24] audit: type=1400 audit(1769543361.509:62): avc: denied { rlimitinh } for pid=215 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 11.719847][ T24] audit: type=1400 audit(1769543361.509:63): avc: denied { siginh } for pid=215 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.204' (ED25519) to the list of known hosts. 2026/01/27 19:49:38 parsed 1 programs [ 28.797497][ T24] audit: type=1400 audit(1769543378.599:64): avc: denied { node_bind } for pid=275 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 28.802253][ T24] audit: type=1400 audit(1769543378.599:65): avc: denied { create } for pid=275 comm="syz-execprog" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 28.806255][ T24] audit: type=1400 audit(1769543378.599:66): avc: denied { module_request } for pid=275 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 29.379206][ T24] audit: type=1400 audit(1769543379.179:67): avc: denied { mounton } for pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 29.380244][ T281] cgroup: Unknown subsys name 'net' [ 29.401916][ T24] audit: type=1400 audit(1769543379.179:68): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.429310][ T24] audit: type=1400 audit(1769543379.219:69): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.429508][ T281] cgroup: Unknown subsys name 'devices' [ 29.664773][ T281] cgroup: Unknown subsys name 'hugetlb' [ 29.670410][ T281] cgroup: Unknown subsys name 'rlimit' [ 29.844166][ T24] audit: type=1400 audit(1769543379.649:70): avc: denied { setattr } for pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.867425][ T24] audit: type=1400 audit(1769543379.649:71): avc: denied { create } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 29.872720][ T285] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 29.888025][ T24] audit: type=1400 audit(1769543379.649:72): avc: denied { write } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.918178][ T24] audit: type=1400 audit(1769543379.649:73): avc: denied { read } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.951889][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 30.351885][ T287] request_module fs-gadgetfs succeeded, but still no fs? [ 30.362601][ T287] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 30.463833][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.470872][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.479082][ T297] device bridge_slave_0 entered promiscuous mode [ 30.486416][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.493736][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.501277][ T297] device bridge_slave_1 entered promiscuous mode [ 30.546072][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.553308][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.560708][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.567894][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.584581][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.591931][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.599606][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 30.608607][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 30.618157][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 30.626413][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.633459][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.641998][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 30.650542][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.657612][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.670973][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 30.680133][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 30.692367][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.706289][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 30.714460][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 30.722178][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 30.730603][ T297] device veth0_vlan entered promiscuous mode [ 30.740763][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.750583][ T297] device veth1_macvtap entered promiscuous mode [ 30.759989][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 30.769623][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2026/01/27 19:49:41 executed programs: 0 [ 31.414954][ T352] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.422181][ T352] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.429940][ T352] device bridge_slave_0 entered promiscuous mode [ 31.436929][ T352] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.444109][ T352] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.451381][ T352] device bridge_slave_1 entered promiscuous mode [ 31.488905][ T352] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.496022][ T352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.503302][ T352] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.510331][ T352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.524995][ T301] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.532138][ T301] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.546608][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 31.554201][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.562859][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 31.571345][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.579562][ T301] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.586594][ T301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.598102][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 31.606452][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.614718][ T301] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.621715][ T301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.631932][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 31.640038][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.658966][ T352] device veth0_vlan entered promiscuous mode [ 31.665443][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 31.673799][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.681709][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 31.690137][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 31.698600][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 31.706611][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 31.714634][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 31.722045][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 31.731137][ T7] device bridge_slave_1 left promiscuous mode [ 31.737336][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.744945][ T7] device bridge_slave_0 left promiscuous mode [ 31.751030][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.759048][ T7] device veth1_macvtap left promiscuous mode [ 31.765126][ T7] device veth0_vlan left promiscuous mode [ 31.887044][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 31.895411][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 31.904782][ T352] device veth1_macvtap entered promiscuous mode [ 31.913039][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 31.920757][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 31.929360][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 31.939809][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 31.948346][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 31.969439][ T356] erofs: (device loop2): mounted with root inode @ nid 36. [ 31.977321][ T356] note: syz.2.17[356] exited with preempt_count 1 [ 32.117625][ T358] erofs: (device loop2): mounted with root inode @ nid 36. [ 32.126711][ T358] note: syz.2.18[358] exited with preempt_count 1 [ 32.194486][ T383] erofs: (device loop2): mounted with root inode @ nid 36. [ 32.202133][ T383] note: syz.2.19[383] exited with preempt_count 1 [ 32.304888][ T385] erofs: (device loop2): mounted with root inode @ nid 36. [ 32.312523][ T385] note: syz.2.20[385] exited with preempt_count 1 [ 32.367955][ T387] erofs: (device loop2): mounted with root inode @ nid 36. [ 32.375671][ T387] note: syz.2.21[387] exited with preempt_count 1 [ 32.451790][ T389] erofs: (device loop2): mounted with root inode @ nid 36. [ 32.467084][ T389] note: syz.2.22[389] exited with preempt_count 1 [ 32.521092][ T391] erofs: (device loop2): mounted with root inode @ nid 36. [ 32.529622][ T391] note: syz.2.23[391] exited with preempt_count 1 [ 32.633948][ T393] erofs: (device loop2): mounted with root inode @ nid 36. [ 32.641628][ T393] note: syz.2.24[393] exited with preempt_count 1 [ 32.701668][ T395] erofs: (device loop2): mounted with root inode @ nid 36. [ 32.709498][ T395] note: syz.2.25[395] exited with preempt_count 1 [ 32.807495][ T397] erofs: (device loop2): mounted with root inode @ nid 36. [ 32.815129][ T397] note: syz.2.26[397] exited with preempt_count 1 [ 32.871182][ T399] erofs: (device loop2): mounted with root inode @ nid 36. [ 32.878854][ T399] note: syz.2.27[399] exited with preempt_count 1 [ 32.944255][ T415] erofs: (device loop2): mounted with root inode @ nid 36. [ 32.951795][ T415] note: syz.2.28[415] exited with preempt_count 1 [ 33.053934][ T417] erofs: (device loop2): mounted with root inode @ nid 36. [ 33.061571][ T417] note: syz.2.29[417] exited with preempt_count 1 [ 33.157784][ T419] erofs: (device loop2): mounted with root inode @ nid 36. [ 33.165531][ T419] note: syz.2.30[419] exited with preempt_count 1 [ 33.284857][ T421] erofs: (device loop2): mounted with root inode @ nid 36. [ 33.292433][ T421] note: syz.2.31[421] exited with preempt_count 1 [ 33.407920][ T423] erofs: (device loop2): mounted with root inode @ nid 36. [ 33.415879][ T423] note: syz.2.32[423] exited with preempt_count 1 [ 33.525324][ T425] erofs: (device loop2): mounted with root inode @ nid 36. [ 33.532920][ T425] note: syz.2.33[425] exited with preempt_count 1 [ 33.685821][ T427] erofs: (device loop2): mounted with root inode @ nid 36. [ 33.693545][ T427] note: syz.2.34[427] exited with preempt_count 1 [ 33.819884][ T429] erofs: (device loop2): mounted with root inode @ nid 36. [ 33.827558][ T429] note: syz.2.35[429] exited with preempt_count 1 [ 33.924895][ T431] erofs: (device loop2): mounted with root inode @ nid 36. [ 33.932499][ T431] note: syz.2.36[431] exited with preempt_count 1 [ 34.028507][ T433] erofs: (device loop2): mounted with root inode @ nid 36. [ 34.036478][ T433] note: syz.2.37[433] exited with preempt_count 1 [ 34.129373][ T435] erofs: (device loop2): mounted with root inode @ nid 36. [ 34.137144][ T435] note: syz.2.38[435] exited with preempt_count 1 [ 34.289027][ T437] erofs: (device loop2): mounted with root inode @ nid 36. [ 34.296944][ T437] note: syz.2.39[437] exited with preempt_count 1 [ 34.405501][ T439] erofs: (device loop2): mounted with root inode @ nid 36. [ 34.413216][ T439] BUG: scheduling while atomic: syz.2.40/439/0x00000002 [ 34.420148][ T439] Modules linked in: [ 34.424069][ T439] Preemption disabled at: [ 34.424103][ T439] [] z_erofs_reload_indexes+0x318/0x450 [ 34.435596][ T439] CPU: 0 PID: 439 Comm: syz.2.40 Not tainted syzkaller #0 [ 34.442674][ T439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 34.452809][ T439] Call Trace: [ 34.456079][ T439] __dump_stack+0x21/0x24 [ 34.460558][ T439] dump_stack_lvl+0x1a7/0x208 [ 34.465212][ T439] ? z_erofs_reload_indexes+0x318/0x450 [ 34.470909][ T439] ? show_regs_print_info+0x18/0x18 [ 34.476078][ T439] ? z_erofs_reload_indexes+0x318/0x450 [ 34.481599][ T439] dump_stack+0x15/0x1c [ 34.485737][ T439] __schedule_bug+0x183/0x240 [ 34.490384][ T439] ? __migrate_task+0x190/0x190 [ 34.495206][ T439] __schedule+0xc45/0x1320 [ 34.499595][ T439] ? __sched_text_start+0x8/0x8 [ 34.504421][ T439] ? unlock_page_memcg+0x110/0x110 [ 34.509525][ T439] ? ____fput+0x15/0x20 [ 34.513797][ T439] schedule+0x13c/0x1d0 [ 34.517957][ T439] exit_to_user_mode_loop+0x4b/0xe0 [ 34.523161][ T439] exit_to_user_mode_prepare+0x76/0xa0 [ 34.528837][ T439] syscall_exit_to_user_mode+0x1d/0x40 [ 34.534289][ T439] do_syscall_64+0x3d/0x40 [ 34.538700][ T439] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 34.544600][ T439] RIP: 0033:0x7fdca7d2eeb9 [ 34.549009][ T439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.568859][ T439] RSP: 002b:00007fff1239df28 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 34.577264][ T439] RAX: 0000000000000000 RBX: 00007fff1239e010 RCX: 00007fdca7d2eeb9 [ 34.585214][ T439] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 34.593284][ T439] RBP: 0000000000008627 R08: 0000000000000001 R09: 0000000000000000 [ 34.601266][ T439] R10: 0000001b31f20000 R11: 0000000000000246 R12: 0000000000000000 [ 34.609332][ T439] R13: 00007fdca7fa9fac R14: 00007fdca7fa9fa8 R15: 00007fdca7fa9fa0 [ 34.668306][ T441] erofs: (device loop2): mounted with root inode @ nid 36. [ 34.675898][ T441] note: syz.2.41[441] exited with preempt_count 1 [ 34.765658][ T443] erofs: (device loop2): mounted with root inode @ nid 36. [ 34.773451][ T443] note: syz.2.42[443] exited with preempt_count 1 [ 34.898418][ T445] erofs: (device loop2): mounted with root inode @ nid 36. [ 34.906340][ T445] note: syz.2.43[445] exited with preempt_count 1 [ 35.038103][ T447] erofs: (device loop2): mounted with root inode @ nid 36. [ 35.045962][ T447] note: syz.2.44[447] exited with preempt_count 1 [ 35.165634][ T449] erofs: (device loop2): mounted with root inode @ nid 36. [ 35.173489][ T449] note: syz.2.45[449] exited with preempt_count 1 [ 35.255797][ T451] erofs: (device loop2): mounted with root inode @ nid 36. [ 35.264982][ T451] note: syz.2.46[451] exited with preempt_count 1 [ 35.368973][ T453] erofs: (device loop2): mounted with root inode @ nid 36. [ 35.376582][ T453] note: syz.2.47[453] exited with preempt_count 1 [ 35.478964][ T455] erofs: (device loop2): mounted with root inode @ nid 36. [ 35.486622][ T455] note: syz.2.48[455] exited with preempt_count 1 [ 35.579614][ T457] erofs: (device loop2): mounted with root inode @ nid 36. [ 35.587302][ T457] BUG: scheduling while atomic: syz.2.49/457/0x00000002 [ 35.594455][ T457] Modules linked in: [ 35.598447][ T457] Preemption disabled at: [ 35.598462][ T457] [] z_erofs_reload_indexes+0x318/0x450 [ 35.609927][ T457] CPU: 1 PID: 457 Comm: syz.2.49 Tainted: G W syzkaller #0 [ 35.618407][ T457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 35.628438][ T457] Call Trace: [ 35.631714][ T457] __dump_stack+0x21/0x24 [ 35.636542][ T457] dump_stack_lvl+0x1a7/0x208 [ 35.641194][ T457] ? z_erofs_reload_indexes+0x318/0x450 [ 35.646805][ T457] ? show_regs_print_info+0x18/0x18 [ 35.652096][ T457] ? z_erofs_reload_indexes+0x318/0x450 [ 35.657805][ T457] dump_stack+0x15/0x1c [ 35.661947][ T457] __schedule_bug+0x183/0x240 [ 35.666620][ T457] ? __migrate_task+0x190/0x190 [ 35.671446][ T457] __schedule+0xc45/0x1320 [ 35.675846][ T457] ? __sched_text_start+0x8/0x8 [ 35.680731][ T457] ? unlock_page_memcg+0x110/0x110 [ 35.685827][ T457] ? ____fput+0x15/0x20 [ 35.689957][ T457] schedule+0x13c/0x1d0 [ 35.694097][ T457] exit_to_user_mode_loop+0x4b/0xe0 [ 35.699263][ T457] exit_to_user_mode_prepare+0x76/0xa0 [ 35.704694][ T457] syscall_exit_to_user_mode+0x1d/0x40 [ 35.710121][ T457] do_syscall_64+0x3d/0x40 [ 35.714510][ T457] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 35.720374][ T457] RIP: 0033:0x7fdca7d2eeb9 [ 35.724764][ T457] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 35.744354][ T457] RSP: 002b:00007fff1239df28 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 35.752754][ T457] RAX: 0000000000000000 RBX: 00007fff1239e010 RCX: 00007fdca7d2eeb9 [ 35.760698][ T457] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 35.768654][ T457] RBP: 0000000000008ab9 R08: 0000000000000001 R09: 0000000000000000 [ 35.776597][ T457] R10: 0000001b31f20000 R11: 0000000000000246 R12: 0000000000000000 [ 35.784555][ T457] R13: 00007fdca7fa9fac R14: 00007fdca7fa9fa8 R15: 00007fdca7fa9fa0 [ 35.940630][ T459] erofs: (device loop2): mounted with root inode @ nid 36. [ 35.948390][ T459] note: syz.2.50[459] exited with preempt_count 1 [ 36.085712][ T461] erofs: (device loop2): mounted with root inode @ nid 36. [ 36.093533][ T461] note: syz.2.51[461] exited with preempt_count 1 [ 36.189832][ T463] erofs: (device loop2): mounted with root inode @ nid 36. [ 36.197827][ T463] note: syz.2.52[463] exited with preempt_count 1 2026/01/27 19:49:46 executed programs: 39 [ 36.445880][ T465] erofs: (device loop2): mounted with root inode @ nid 36. [ 36.453684][ T465] note: syz.2.53[465] exited with preempt_count 1 [ 36.559898][ T467] erofs: (device loop2): mounted with root inode @ nid 36. [ 36.567634][ T467] note: syz.2.54[467] exited with preempt_count 1 [ 36.728997][ T469] erofs: (device loop2): mounted with root inode @ nid 36. [ 36.736636][ T469] note: syz.2.55[469] exited with preempt_count 1 [ 36.797587][ T471] erofs: (device loop2): mounted with root inode @ nid 36. [ 36.805873][ T471] note: syz.2.56[471] exited with preempt_count 1 [ 36.959494][ T473] erofs: (device loop2): mounted with root inode @ nid 36. [ 36.967406][ T473] note: syz.2.57[473] exited with preempt_count 1 [ 37.069748][ T475] erofs: (device loop2): mounted with root inode @ nid 36. [ 37.077704][ T475] note: syz.2.58[475] exited with preempt_count 1 [ 37.169628][ T477] erofs: (device loop2): mounted with root inode @ nid 36. [ 37.177465][ T477] note: syz.2.59[477] exited with preempt_count 1 [ 37.238023][ T479] erofs: (device loop2): mounted with root inode @ nid 36. [ 37.245629][ T479] note: syz.2.60[479] exited with preempt_count 1 [ 37.349457][ T481] erofs: (device loop2): mounted with root inode @ nid 36. [ 37.357155][ T481] note: syz.2.61[481] exited with preempt_count 1 [ 37.524752][ T483] erofs: (device loop2): mounted with root inode @ nid 36. [ 37.532311][ T483] note: syz.2.62[483] exited with preempt_count 1 [ 37.635052][ T485] erofs: (device loop2): mounted with root inode @ nid 36. [ 37.642709][ T485] note: syz.2.63[485] exited with preempt_count 1 [ 37.764240][ T487] erofs: (device loop2): mounted with root inode @ nid 36. [ 37.771957][ T487] note: syz.2.64[487] exited with preempt_count 1 [ 37.924609][ T489] erofs: (device loop2): mounted with root inode @ nid 36. [ 37.932247][ T489] note: syz.2.65[489] exited with preempt_count 1 [ 38.035760][ T491] erofs: (device loop2): mounted with root inode @ nid 36. [ 38.043544][ T491] note: syz.2.66[491] exited with preempt_count 1 [ 38.169775][ T493] erofs: (device loop2): mounted with root inode @ nid 36. [ 38.177394][ T493] note: syz.2.67[493] exited with preempt_count 1 [ 38.278934][ T495] erofs: (device loop2): mounted with root inode @ nid 36. [ 38.287399][ T495] note: syz.2.68[495] exited with preempt_count 1 [ 38.418400][ T497] erofs: (device loop2): mounted with root inode @ nid 36. [ 38.426008][ T497] note: syz.2.69[497] exited with preempt_count 1 [ 38.519238][ T499] erofs: (device loop2): mounted with root inode @ nid 36. [ 38.527132][ T499] note: syz.2.70[499] exited with preempt_count 1 [ 38.587378][ T501] erofs: (device loop2): mounted with root inode @ nid 36. [ 38.595096][ T501] note: syz.2.71[501] exited with preempt_count 1 [ 38.679225][ T503] erofs: (device loop2): mounted with root inode @ nid 36. [ 38.686977][ T503] BUG: scheduling while atomic: syz.2.72/503/0x00000002 [ 38.693989][ T503] Modules linked in: [ 38.697957][ T503] Preemption disabled at: [ 38.697974][ T503] [] z_erofs_reload_indexes+0x318/0x450 [ 38.709565][ T503] CPU: 1 PID: 503 Comm: syz.2.72 Tainted: G W syzkaller #0 [ 38.718193][ T503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 38.728331][ T503] Call Trace: [ 38.731889][ T503] __dump_stack+0x21/0x24 [ 38.736207][ T503] dump_stack_lvl+0x1a7/0x208 [ 38.740906][ T503] ? z_erofs_reload_indexes+0x318/0x450 [ 38.746433][ T503] ? show_regs_print_info+0x18/0x18 [ 38.751619][ T503] ? z_erofs_reload_indexes+0x318/0x450 [ 38.757142][ T503] dump_stack+0x15/0x1c [ 38.761278][ T503] __schedule_bug+0x183/0x240 [ 38.766013][ T503] ? __migrate_task+0x190/0x190 [ 38.770844][ T503] ? task_work_add+0x11e/0x1e0 [ 38.775671][ T503] __schedule+0xc45/0x1320 [ 38.780081][ T503] ? __sched_text_start+0x8/0x8 [ 38.784913][ T503] ? pick_file+0x2b0/0x2b0 [ 38.789308][ T503] ? security_file_ioctl+0x84/0xa0 [ 38.794392][ T503] schedule+0x13c/0x1d0 [ 38.798523][ T503] exit_to_user_mode_loop+0x4b/0xe0 [ 38.803694][ T503] exit_to_user_mode_prepare+0x76/0xa0 [ 38.809212][ T503] syscall_exit_to_user_mode+0x1d/0x40 [ 38.814655][ T503] do_syscall_64+0x3d/0x40 [ 38.819047][ T503] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 38.824911][ T503] RIP: 0033:0x7fdca7d2eeb9 [ 38.829830][ T503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 38.849432][ T503] RSP: 002b:00007fff1239df28 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 38.857822][ T503] RAX: 0000000000000000 RBX: 00007fff1239e010 RCX: 00007fdca7d2eeb9 [ 38.865768][ T503] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 38.873714][ T503] RBP: 00000000000096e9 R08: 0000000000000001 R09: 0000000000000000 [ 38.881663][ T503] R10: 0000001b31f20000 R11: 0000000000000246 R12: 0000000000000000 [ 38.889605][ T503] R13: 00007fdca7fa9fac R14: 00007fdca7fa9fa8 R15: 00007fdca7fa9fa0 [ 38.979059][ T505] erofs: (device loop2): mounted with root inode @ nid 36. [ 38.986876][ T505] note: syz.2.73[505] exited with preempt_count 1 [ 39.078622][ T507] erofs: (device loop2): mounted with root inode @ nid 36. [ 39.086247][ T507] note: syz.2.74[507] exited with preempt_count 1 [ 39.204525][ T509] erofs: (device loop2): mounted with root inode @ nid 36. [ 39.212234][ T509] note: syz.2.75[509] exited with preempt_count 1 [ 39.318728][ T511] erofs: (device loop2): mounted with root inode @ nid 36. [ 39.326361][ T511] note: syz.2.76[511] exited with preempt_count 1 [ 39.387512][ T513] erofs: (device loop2): mounted with root inode @ nid 36. [ 39.395349][ T513] note: syz.2.77[513] exited with preempt_count 1 [ 39.519003][ T515] erofs: (device loop2): mounted with root inode @ nid 36. [ 39.526628][ T515] note: syz.2.78[515] exited with preempt_count 1 [ 39.640533][ T517] erofs: (device loop2): mounted with root inode @ nid 36. [ 39.648287][ T517] note: syz.2.79[517] exited with preempt_count 1 [ 39.809218][ T519] erofs: (device loop2): mounted with root inode @ nid 36. [ 39.817049][ T519] note: syz.2.80[519] exited with preempt_count 1 [ 39.907598][ T521] erofs: (device loop2): mounted with root inode @ nid 36. [ 39.915548][ T521] note: syz.2.81[521] exited with preempt_count 1 [ 39.938092][ T523] erofs: (device loop2): mounted with root inode @ nid 36. [ 39.945753][ T523] note: syz.2.82[523] exited with preempt_count 1 [ 40.049120][ T525] erofs: (device loop2): mounted with root inode @ nid 36. [ 40.056721][ T525] note: syz.2.83[525] exited with preempt_count 1 [ 40.178601][ T527] erofs: (device loop2): mounted with root inode @ nid 36. [ 40.186184][ T527] note: syz.2.84[527] exited with preempt_count 1 [ 40.319384][ T529] erofs: (device loop2): mounted with root inode @ nid 36. [ 40.327190][ T529] note: syz.2.85[529] exited with preempt_count 1 [ 40.458482][ T531] erofs: (device loop2): mounted with root inode @ nid 36. [ 40.466129][ T531] note: syz.2.86[531] exited with preempt_count 1 [ 40.518812][ T533] erofs: (device loop2): mounted with root inode @ nid 36. [ 40.526782][ T533] note: syz.2.87[533] exited with preempt_count 1 [ 40.634759][ T535] erofs: (device loop2): mounted with root inode @ nid 36. [ 40.642332][ T535] note: syz.2.88[535] exited with preempt_count 1 [ 40.725665][ T537] erofs: (device loop2): mounted with root inode @ nid 36. [ 40.733872][ T537] note: syz.2.89[537] exited with preempt_count 1 [ 40.805006][ T539] erofs: (device loop2): mounted with root inode @ nid 36. [ 40.812905][ T539] note: syz.2.90[539] exited with preempt_count 1 [ 40.909296][ T541] erofs: (device loop2): mounted with root inode @ nid 36. [ 40.917267][ T541] note: syz.2.91[541] exited with preempt_count 1 [ 41.008474][ T543] erofs: (device loop2): mounted with root inode @ nid 36. [ 41.016201][ T543] note: syz.2.92[543] exited with preempt_count 1 [ 41.124912][ T545] erofs: (device loop2): mounted with root inode @ nid 36. [ 41.132576][ T545] note: syz.2.93[545] exited with preempt_count 1 [ 41.235760][ T547] erofs: (device loop2): mounted with root inode @ nid 36. [ 41.243513][ T547] note: syz.2.94[547] exited with preempt_count 1 [ 41.344881][ T549] erofs: (device loop2): mounted with root inode @ nid 36. [ 41.352464][ T549] note: syz.2.95[549] exited with preempt_count 1 2026/01/27 19:49:51 executed programs: 82 [ 41.454871][ T551] erofs: (device loop2): mounted with root inode @ nid 36. [ 41.462507][ T551] note: syz.2.96[551] exited with preempt_count 1 [ 41.606071][ T553] erofs: (device loop2): mounted with root inode @ nid 36. [ 41.613762][ T553] note: syz.2.97[553] exited with preempt_count 1 [ 41.715709][ T555] erofs: (device loop2): mounted with root inode @ nid 36. [ 41.723441][ T555] note: syz.2.98[555] exited with preempt_count 1 [ 41.815927][ T557] erofs: (device loop2): mounted with root inode @ nid 36. [ 41.823569][ T557] note: syz.2.99[557] exited with preempt_count 1 [ 41.924776][ T559] erofs: (device loop2): mounted with root inode @ nid 36. [ 41.932403][ T559] note: syz.2.100[559] exited with preempt_count 1 [ 42.059124][ T561] erofs: (device loop2): mounted with root inode @ nid 36. [ 42.066939][ T561] BUG: scheduling while atomic: syz.2.101/561/0x00000002 [ 42.074013][ T561] Modules linked in: [ 42.077927][ T561] Preemption disabled at: [ 42.077948][ T561] [] z_erofs_reload_indexes+0x318/0x450 [ 42.089398][ T561] CPU: 1 PID: 561 Comm: syz.2.101 Tainted: G W syzkaller #0 [ 42.098082][ T561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 42.108119][ T561] Call Trace: [ 42.111412][ T561] __dump_stack+0x21/0x24 [ 42.115720][ T561] dump_stack_lvl+0x1a7/0x208 [ 42.120371][ T561] ? z_erofs_reload_indexes+0x318/0x450 [ 42.125940][ T561] ? show_regs_print_info+0x18/0x18 [ 42.131288][ T561] ? z_erofs_reload_indexes+0x318/0x450 [ 42.137011][ T561] dump_stack+0x15/0x1c [ 42.141154][ T561] __schedule_bug+0x183/0x240 [ 42.145867][ T561] ? __migrate_task+0x190/0x190 [ 42.150970][ T561] __schedule+0xc45/0x1320 [ 42.155455][ T561] ? __sched_text_start+0x8/0x8 [ 42.160385][ T561] ? unlock_page_memcg+0x110/0x110 [ 42.165468][ T561] ? ____fput+0x15/0x20 [ 42.169593][ T561] schedule+0x13c/0x1d0 [ 42.173718][ T561] exit_to_user_mode_loop+0x4b/0xe0 [ 42.179079][ T561] exit_to_user_mode_prepare+0x76/0xa0 [ 42.184522][ T561] syscall_exit_to_user_mode+0x1d/0x40 [ 42.190045][ T561] do_syscall_64+0x3d/0x40 [ 42.194438][ T561] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 42.200302][ T561] RIP: 0033:0x7fdca7d2eeb9 [ 42.204691][ T561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.224644][ T561] RSP: 002b:00007fff1239df28 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 42.233314][ T561] RAX: 0000000000000000 RBX: 00007fff1239e010 RCX: 00007fdca7d2eeb9 [ 42.241386][ T561] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 42.249353][ T561] RBP: 000000000000a409 R08: 0000000000000001 R09: 0000000000000000 [ 42.257308][ T561] R10: 0000001b31f20000 R11: 0000000000000246 R12: 0000000000000000 [ 42.265254][ T561] R13: 00007fdca7fa9fac R14: 00007fdca7fa9fa8 R15: 00007fdca7fa9fa0 [ 42.379495][ T563] erofs: (device loop2): mounted with root inode @ nid 36. [ 42.387128][ T563] note: syz.2.102[563] exited with preempt_count 1 [ 42.489146][ T565] erofs: (device loop2): mounted with root inode @ nid 36. [ 42.496959][ T565] note: syz.2.103[565] exited with preempt_count 1 [ 42.628552][ T567] erofs: (device loop2): mounted with root inode @ nid 36. [ 42.636190][ T567] note: syz.2.104[567] exited with preempt_count 1 [ 42.717370][ T569] erofs: (device loop2): mounted with root inode @ nid 36. [ 42.725033][ T569] note: syz.2.105[569] exited with preempt_count 1 [ 42.809025][ T571] erofs: (device loop2): mounted with root inode @ nid 36. [ 42.816823][ T571] note: syz.2.106[571] exited with preempt_count 1 [ 42.924449][ T573] erofs: (device loop2): mounted with root inode @ nid 36. [ 42.932155][ T573] note: syz.2.107[573] exited with preempt_count 1 [ 43.118041][ T575] erofs: (device loop2): mounted with root inode @ nid 36. [ 43.125879][ T575] note: syz.2.108[575] exited with preempt_count 1 [ 43.239556][ T577] erofs: (device loop2): mounted with root inode @ nid 36. [ 43.247165][ T577] note: syz.2.109[577] exited with preempt_count 1 [ 43.354666][ T579] erofs: (device loop2): mounted with root inode @ nid 36. [ 43.362264][ T579] note: syz.2.110[579] exited with preempt_count 1 [ 43.465596][ T581] erofs: (device loop2): mounted with root inode @ nid 36. [ 43.473642][ T581] note: syz.2.111[581] exited with preempt_count 1 [ 43.549226][ T583] erofs: (device loop2): mounted with root inode @ nid 36. [ 43.557235][ T583] note: syz.2.112[583] exited with preempt_count 1 [ 43.645639][ T585] erofs: (device loop2): mounted with root inode @ nid 36. [ 43.654243][ T585] note: syz.2.113[585] exited with preempt_count 1 [ 43.779434][ T587] erofs: (device loop2): mounted with root inode @ nid 36. [ 43.787398][ T587] note: syz.2.114[587] exited with preempt_count 1 [ 43.847368][ T589] erofs: (device loop2): mounted with root inode @ nid 36. [ 43.855088][ T589] note: syz.2.115[589] exited with preempt_count 1 [ 43.938991][ T591] erofs: (device loop2): mounted with root inode @ nid 36. [ 43.946597][ T591] note: syz.2.116[591] exited with preempt_count 1 [ 44.055685][ T593] erofs: (device loop2): mounted with root inode @ nid 36. [ 44.063430][ T593] note: syz.2.117[593] exited with preempt_count 1 [ 44.148588][ T595] erofs: (device loop2): mounted with root inode @ nid 36. [ 44.156326][ T595] note: syz.2.118[595] exited with preempt_count 1 [ 44.235865][ T597] erofs: (device loop2): mounted with root inode @ nid 36. [ 44.243796][ T597] note: syz.2.119[597] exited with preempt_count 1 [ 44.346030][ T599] erofs: (device loop2): mounted with root inode @ nid 36. [ 44.353702][ T599] note: syz.2.120[599] exited with preempt_count 1