syzkaller syzkaller login: [ 16.840637][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 16.840652][ T30] audit: type=1400 audit(1779317765.775:59): avc: denied { transition } for pid=223 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 16.851658][ T30] audit: type=1400 audit(1779317765.775:60): avc: denied { noatsecure } for pid=223 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 16.858918][ T30] audit: type=1400 audit(1779317765.785:61): avc: denied { write } for pid=223 comm="sh" path="pipe:[14542]" dev="pipefs" ino=14542 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 16.878546][ T30] audit: type=1400 audit(1779317765.785:62): avc: denied { rlimitinh } for pid=223 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 16.903053][ T30] audit: type=1400 audit(1779317765.785:63): avc: denied { siginh } for pid=223 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 18.902240][ T230] sshd-session (230) used greatest stack depth: 22560 bytes left Warning: Permanently added '10.128.0.88' (ED25519) to the list of known hosts. 2026/05/20 22:56:15 parsed 1 programs [ 26.737153][ T30] audit: type=1400 audit(1779317775.675:64): avc: denied { node_bind } for pid=293 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 26.758515][ T30] audit: type=1400 audit(1779317775.675:65): avc: denied { module_request } for pid=293 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 27.704401][ T30] audit: type=1400 audit(1779317776.635:66): avc: denied { mounton } for pid=299 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.708209][ T299] cgroup: Unknown subsys name 'net' [ 27.727195][ T30] audit: type=1400 audit(1779317776.635:67): avc: denied { mount } for pid=299 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.754632][ T30] audit: type=1400 audit(1779317776.665:68): avc: denied { unmount } for pid=299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.755040][ T299] cgroup: Unknown subsys name 'devices' [ 27.897957][ T299] cgroup: Unknown subsys name 'hugetlb' [ 27.903591][ T299] cgroup: Unknown subsys name 'rlimit' [ 28.110703][ T30] audit: type=1400 audit(1779317777.045:69): avc: denied { setattr } for pid=299 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.134286][ T30] audit: type=1400 audit(1779317777.045:70): avc: denied { create } for pid=299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.154705][ T30] audit: type=1400 audit(1779317777.045:71): avc: denied { write } for pid=299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.175070][ T30] audit: type=1400 audit(1779317777.045:72): avc: denied { read } for pid=299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.195287][ T30] audit: type=1400 audit(1779317777.045:73): avc: denied { mounton } for pid=299 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.226260][ T304] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 28.277606][ T299] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.728641][ T306] request_module fs-gadgetfs succeeded, but still no fs? [ 29.261873][ T341] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.269062][ T341] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.276577][ T341] device bridge_slave_0 entered promiscuous mode [ 29.283646][ T341] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.290757][ T341] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.298250][ T341] device bridge_slave_1 entered promiscuous mode [ 29.343727][ T341] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.350895][ T341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.358248][ T341] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.365292][ T341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.385246][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.392587][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.400229][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 29.408710][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 29.418004][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 29.426240][ T330] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.433271][ T330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.442157][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 29.450500][ T330] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.457577][ T330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.474796][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.484660][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.499232][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.516202][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.524378][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.531910][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.540643][ T341] device veth0_vlan entered promiscuous mode [ 29.556235][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.565509][ T341] device veth1_macvtap entered promiscuous mode [ 29.574830][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.589791][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.622057][ T341] syz-executor (341) used greatest stack depth: 21120 bytes left 2026/05/20 22:56:19 executed programs: 0 [ 30.122933][ T368] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.130228][ T368] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.137790][ T368] device bridge_slave_0 entered promiscuous mode [ 30.148872][ T368] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.156262][ T368] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.163734][ T368] device bridge_slave_1 entered promiscuous mode [ 30.209692][ T368] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.216897][ T368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.224425][ T368] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.231506][ T368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.252496][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 30.260448][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.268424][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.277847][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 30.286268][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 30.294499][ T330] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.301571][ T330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.316524][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 30.324912][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 30.333182][ T330] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.340232][ T330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.351195][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 30.359579][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 30.372895][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 30.381077][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 30.394495][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 30.403066][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.419905][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 30.427863][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 30.436725][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 30.444234][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 30.452742][ T368] device veth0_vlan entered promiscuous mode [ 30.467042][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 30.475264][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.484494][ T368] device veth1_macvtap entered promiscuous mode [ 30.493466][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 30.501313][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 30.509781][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 30.520843][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 30.529146][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 30.554774][ T373] loop2: detected capacity change from 0 to 16 [ 30.667579][ T373] erofs: (device loop2): mounted with root inode @ nid 36. [ 30.676179][ T373] BUG: scheduling while atomic: syz.2.17/373/0x00000002 [ 30.683338][ T373] Modules linked in: [ 30.687328][ T373] Preemption disabled at: [ 30.687337][ T373] [] z_erofs_reload_indexes+0x310/0x410 [ 30.698902][ T373] CPU: 1 PID: 373 Comm: syz.2.17 Not tainted syzkaller #0 [ 30.706309][ T373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 30.716728][ T373] Call Trace: [ 30.720015][ T373] [ 30.722949][ T373] __dump_stack+0x21/0x30 [ 30.727288][ T373] dump_stack_lvl+0x110/0x170 [ 30.731982][ T373] ? show_regs_print_info+0x20/0x20 [ 30.737230][ T373] ? z_erofs_reload_indexes+0x310/0x410 [ 30.742785][ T373] dump_stack+0x15/0x20 [ 30.746989][ T373] __schedule_bug+0x180/0x230 [ 30.751673][ T373] ? ttwu_queue_wakelist+0x4a0/0x4a0 [ 30.756968][ T373] __schedule+0xc30/0x14c0 [ 30.761399][ T373] ? psi_task_change+0x213/0x370 [ 30.766346][ T373] ? release_firmware_map_entry+0x190/0x190 [ 30.772236][ T373] ? plist_add+0x3e8/0x470 [ 30.776675][ T373] schedule+0x11e/0x1e0 [ 30.780861][ T373] futex_wait_queue_me+0x29c/0x660 [ 30.785979][ T373] ? futex_wait_setup+0x510/0x510 [ 30.791024][ T373] futex_wait+0x258/0x8f0 [ 30.795390][ T373] ? do_futex+0x2800/0x2800 [ 30.799898][ T373] ? avc_has_extended_perms+0x9d7/0xed0 [ 30.805441][ T373] ? __stack_depot_save+0x34/0x480 [ 30.810560][ T373] do_futex+0xdc6/0x2800 [ 30.814810][ T373] ? __kasan_check_read+0x11/0x20 [ 30.819842][ T373] ? _copy_to_user+0x78/0x90 [ 30.824438][ T373] ? __asan_set_shadow_00+0xe/0x10 [ 30.829561][ T373] ? do_vfs_ioctl+0x1c19/0x1d80 [ 30.834421][ T373] ? __ia32_compat_sys_ioctl+0x900/0x900 [ 30.840236][ T373] ? futex_exit_release+0x1d0/0x1d0 [ 30.845475][ T373] ? ioctl_has_perm+0x1b8/0x4f0 [ 30.850338][ T373] ? ioctl_has_perm+0x3ab/0x4f0 [ 30.855192][ T373] ? has_cap_mac_admin+0x370/0x370 [ 30.860399][ T373] ? __kasan_slab_free+0x11/0x20 [ 30.865369][ T373] ? slab_free_freelist_hook+0xc2/0x190 [ 30.870920][ T373] ? putname+0x111/0x160 [ 30.875331][ T373] ? kmem_cache_free+0x100/0x320 [ 30.880279][ T373] ? selinux_file_ioctl+0x3a0/0x4d0 [ 30.885483][ T373] __se_sys_futex+0x135/0x330 [ 30.890163][ T373] ? __fget_files+0x2c4/0x320 [ 30.894865][ T373] ? __x64_sys_futex+0x100/0x100 [ 30.899802][ T373] ? __kasan_check_write+0x14/0x20 [ 30.904911][ T373] __x64_sys_futex+0xe5/0x100 [ 30.909588][ T373] x64_sys_call+0x251/0x9a0 [ 30.914096][ T373] do_syscall_64+0x4c/0xa0 [ 30.918521][ T373] ? clear_bhb_loop+0x50/0xa0 [ 30.923194][ T373] ? clear_bhb_loop+0x50/0xa0 [ 30.927900][ T373] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 30.933814][ T373] RIP: 0033:0x7f7ebc2b8e59 [ 30.938227][ T373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 30.958411][ T373] RSP: 002b:00007f7ebc11b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 30.966830][ T373] RAX: ffffffffffffffda RBX: 00007f7ebc531fa8 RCX: 00007f7ebc2b8e59 [ 30.974986][ T373] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7ebc531fa8 [ 30.982959][ T373] RBP: 00007f7ebc531fa0 R08: 0000000000000000 R09: 0000000000000000 [ 30.990932][ T373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 30.998908][ T373] R13: 00007f7ebc532038 R14: 00007fff9978aa40 R15: 00007fff9978ab28 [ 31.006892][ T373]