last executing test programs: kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.167' (ED25519) to the list of known hosts. [ 41.263090][ T29] audit: type=1400 audit(1776781410.401:62): avc: denied { mounton } for pid=2961 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 41.287118][ T29] audit: type=1400 audit(1776781410.431:63): avc: denied { mount } for pid=2961 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 41.290494][ T2961] cgroup: Unknown subsys name 'net' [ 41.316580][ T29] audit: type=1400 audit(1776781410.461:64): avc: denied { unmount } for pid=2961 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 41.466763][ T2961] cgroup: Unknown subsys name 'cpuset' [ 41.475206][ T2961] cgroup: Unknown subsys name 'rlimit' [ 41.540071][ T2957] [ 41.542466][ T2957] ===================================== [ 41.548058][ T2957] WARNING: bad unlock balance detected! [ 41.553639][ T2957] syzkaller #0 Not tainted [ 41.558061][ T2957] ------------------------------------- [ 41.563624][ T2957] udevd/2957 is trying to release lock (rcu_read_lock) at: [ 41.571046][ T2957] [] __zap_vma_range+0x1f78/0x41f0 [ 41.577772][ T2957] but there are no more locks to release! [ 41.583514][ T2957] [ 41.583514][ T2957] other info that might help us debug this: [ 41.591590][ T2957] 1 lock held by udevd/2957: [ 41.596197][ T2957] #0: ffff888122da8f38 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x124/0xa10 [ 41.605333][ T2957] [ 41.605333][ T2957] stack backtrace: [ 41.611240][ T2957] CPU: 0 UID: 0 PID: 2957 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 41.611267][ T2957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 41.611280][ T2957] Call Trace: [ 41.611289][ T2957] [ 41.611298][ T2957] dump_stack_lvl+0x100/0x190 [ 41.611331][ T2957] ? __zap_vma_range+0x1f78/0x41f0 [ 41.611360][ T2957] print_unlock_imbalance_bug.part.0+0xfb/0x106 [ 41.611385][ T2957] ? __zap_vma_range+0x1f78/0x41f0 [ 41.611411][ T2957] lock_release+0x28d/0x310 [ 41.611436][ T2957] __zap_vma_range+0x1f7d/0x41f0 [ 41.611473][ T2957] ? __pfx___zap_vma_range+0x10/0x10 [ 41.611503][ T2957] ? find_held_lock+0x2b/0x80 [ 41.611536][ T2957] unmap_vmas+0x299/0x5f0 [ 41.611566][ T2957] ? __pfx_unmap_vmas+0x10/0x10 [ 41.611594][ T2957] ? mas_next_slot+0x10a3/0x1960 [ 41.611623][ T2957] exit_mmap+0x1ef/0xa10 [ 41.611653][ T2957] ? __pfx_exit_mmap+0x10/0x10 [ 41.611680][ T2957] ? rcu_is_watching+0x12/0xc0 [ 41.611711][ T2957] ? uprobe_clear_state+0x5f/0x260 [ 41.611743][ T2957] ? uprobe_clear_state+0x5f/0x260 [ 41.611782][ T2957] ? arch_uprobe_clear_state+0x107/0x150 [ 41.611809][ T2957] mmput+0xe0/0x430 [ 41.611840][ T2957] do_exit+0x833/0x2a60 [ 41.611864][ T2957] ? do_raw_spin_lock+0x128/0x260 [ 41.611891][ T2957] ? __pfx_do_exit+0x10/0x10 [ 41.611913][ T2957] ? do_group_exit+0x1bd/0x2a0 [ 41.611936][ T2957] ? rcu_is_watching+0x12/0xc0 [ 41.611972][ T2957] do_group_exit+0xd5/0x2a0 [ 41.611997][ T2957] __x64_sys_exit_group+0x3e/0x50 [ 41.612021][ T2957] x64_sys_call+0x102c/0x1530 [ 41.612041][ T2957] do_syscall_64+0x10b/0x7f0 [ 41.612061][ T2957] ? irqentry_exit+0xe5/0x6c0 [ 41.612092][ T2957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.612115][ T2957] RIP: 0033:0x7fcc77a3d6c5 [ 41.612131][ T2957] Code: Unable to access opcode bytes at 0x7fcc77a3d69b. [ 41.612140][ T2957] RSP: 002b:00007ffce27e66d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 41.612162][ T2957] RAX: ffffffffffffffda RBX: 000055d32d6c23c0 RCX: 00007fcc77a3d6c5 [ 41.612176][ T2957] RDX: 00000000000000e7 RSI: fffffffffffffe68 RDI: 0000000000000000 [ 41.612189][ T2957] RBP: 000055d32d4562c0 R08: 0000000000000000 R09: 0000000000000000 [ 41.612201][ T2957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 41.612214][ T2957] R13: 00007ffce27e6720 R14: 0000000000000000 R15: 0000000000000000 [ 41.612233][ T2957] [ 41.846898][ T2957] ------------[ cut here ]------------ [ 41.852412][ T2957] rrln < 0 || rrln > RCU_NEST_PMAX [ 41.852429][ T2957] WARNING: kernel/rcu/tree_plugin.h:443 at __rcu_read_unlock+0x235/0x5e0, CPU#0: udevd/2957 [ 41.868177][ T2957] Modules linked in: [ 41.872190][ T2957] CPU: 0 UID: 0 PID: 2957 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 41.881164][ T2957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 41.891368][ T2957] RIP: 0010:__rcu_read_unlock+0x235/0x5e0 [ 41.897520][ T2957] Code: 74 11 c7 45 58 01 00 00 00 bf 09 00 00 00 e8 02 93 de ff e8 cd 25 22 00 9c 58 f6 c4 02 0f 85 dd 02 00 00 fb e9 57 fe ff ff 90 <0f> 0b 90 5b 5d 41 5c 41 5d 41 5e 41 5f e9 09 50 da 05 e8 94 91 7f [ 41.909432][ T29] audit: type=1400 audit(1776781411.051:65): avc: denied { setattr } for pid=2961 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 41.917348][ T2957] RSP: 0018:ffffc90000517790 EFLAGS: 00010286 [ 41.943370][ T29] audit: type=1400 audit(1776781411.091:66): avc: denied { mounton } for pid=2961 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 41.946748][ T2957] RAX: 00000000ffffffff RBX: ffff888122ead940 RCX: ffffffff8192b4de [ 41.972008][ T29] audit: type=1400 audit(1776781411.091:67): avc: denied { mount } for pid=2961 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 41.979647][ T2957] RDX: 0000000000000000 RSI: ffffffff890b0609 RDI: ffff888122eaddbc [ 42.027616][ T2957] RBP: 0000000000000004 R08: 0000000000000005 R09: 0000000000000000 [ 42.035803][ T2957] R10: 0000000080000000 R11: 0000000000000001 R12: ffff888122da94b8 [ 42.043809][ T2957] R13: fffffbfff15e3410 R14: 0000000000000000 R15: ffff888122da8c00 [ 42.052219][ T2957] FS: 0000000000000000(0000) GS:ffff88826868b000(0000) knlGS:0000000000000000 [ 42.061425][ T2957] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 42.065080][ T2964] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 42.068156][ T2957] CR2: 000055d32d694398 CR3: 0000000116314000 CR4: 00000000003506f0 [ 42.078145][ T29] audit: type=1400 audit(1776781411.221:68): avc: denied { relabelto } for pid=2964 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 42.084811][ T2957] Call Trace: [ 42.110778][ T29] audit: type=1400 audit(1776781411.221:69): avc: denied { write } for pid=2964 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 42.113932][ T2957] [ 42.143204][ T2957] __zap_vma_range+0x1f82/0x41f0 [ 42.150977][ T29] audit: type=1400 audit(1776781411.291:70): avc: denied { read } for pid=2961 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 42.151461][ T2961] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 42.154798][ T2957] ? __pfx___zap_vma_range+0x10/0x10 Setting up swapspace version 1, size = 127995904 bytes [ 42.177198][ T29] audit: type=1400 audit(1776781411.291:71): avc: denied { open } for pid=2961 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 42.219547][ T2957] ? find_held_lock+0x2b/0x80 [ 42.227672][ T2957] unmap_vmas+0x299/0x5f0 [ 42.234077][ T2957] ? __pfx_unmap_vmas+0x10/0x10 [ 42.240253][ T2957] ? mas_next_slot+0x10a3/0x1960 [ 42.250993][ T2957] exit_mmap+0x1ef/0xa10 [ 42.256880][ T2957] ? __pfx_exit_mmap+0x10/0x10 [ 42.262047][ T2957] ? rcu_is_watching+0x12/0xc0 [ 42.268902][ T2957] ? uprobe_clear_state+0x5f/0x260 [ 42.274615][ T2957] ? uprobe_clear_state+0x5f/0x260 [ 42.391347][ T2957] ? arch_uprobe_clear_state+0x107/0x150 [ 42.457606][ T2957] mmput+0xe0/0x430 [ 42.688780][ T2957] do_exit+0x833/0x2a60 [ 42.725051][ T2957] ? do_raw_spin_lock+0x128/0x260 [ 42.735085][ T2957] ? __pfx_do_exit+0x10/0x10 [ 42.739800][ T2957] ? do_group_exit+0x1bd/0x2a0 [ 42.770415][ T2957] ? rcu_is_watching+0x12/0xc0 [ 42.891241][ T2957] do_group_exit+0xd5/0x2a0 [ 42.934988][ T2957] __x64_sys_exit_group+0x3e/0x50 [ 42.945771][ T2957] x64_sys_call+0x102c/0x1530 [ 42.955530][ T2957] do_syscall_64+0x10b/0x7f0 [ 42.964865][ T2957] ? irqentry_exit+0xe5/0x6c0 [ 42.995902][ T2957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.002017][ T2957] RIP: 0033:0x7fcc77a3d6c5 [ 43.015956][ T2957] Code: Unable to access opcode bytes at 0x7fcc77a3d69b. [ 43.028261][ T2957] RSP: 002b:00007ffce27e66d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 43.041535][ T2957] RAX: ffffffffffffffda RBX: 000055d32d6c23c0 RCX: 00007fcc77a3d6c5 [ 43.054243][ T2957] RDX: 00000000000000e7 RSI: fffffffffffffe68 RDI: 0000000000000000 [ 43.067082][ T2957] RBP: 000055d32d4562c0 R08: 0000000000000000 R09: 0000000000000000 [ 43.075443][ T2957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 43.083441][ T2957] R13: 00007ffce27e6720 R14: 0000000000000000 R15: 0000000000000000 [ 43.254592][ T2957] [ 43.262053][ T2957] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 43.269355][ T2957] CPU: 0 UID: 0 PID: 2957 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 43.278203][ T2957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 43.288348][ T2957] Call Trace: [ 43.291731][ T2957] [ 43.294759][ T2957] dump_stack_lvl+0x100/0x190 [ 43.300129][ T2957] vpanic+0x552/0x970 [ 43.304449][ T2957] ? __pfx_vpanic+0x10/0x10 [ 43.311039][ T2957] panic+0xd1/0xe0 [ 43.315091][ T2957] ? __pfx_panic+0x10/0x10 [ 43.321057][ T2957] ? check_panic_on_warn+0x1f/0x90 [ 43.326722][ T2957] check_panic_on_warn.cold+0x19/0x34 [ 43.332676][ T2957] ? __rcu_read_unlock+0x235/0x5e0 [ 43.337890][ T2957] __warn.cold+0x191/0x328 [ 43.343101][ T2957] __report_bug+0x296/0x3d0 [ 43.347755][ T2957] ? __rcu_read_unlock+0x235/0x5e0 [ 43.353441][ T2957] ? __pfx___report_bug+0x10/0x10 [ 43.359853][ T2957] ? __pfx___schedule+0x10/0x10 [ 43.365300][ T2957] ? preempt_schedule_irq+0x7b/0x90 [ 43.370978][ T2957] ? __rcu_read_unlock+0x235/0x5e0 [ 43.376563][ T2957] report_bug+0xb2/0x220 [ 43.381161][ T2957] ? __rcu_read_unlock+0x235/0x5e0 [ 43.386556][ T2957] handle_bug+0x16a/0x2a0 [ 43.391301][ T2957] exc_invalid_op+0x17/0x50 [ 43.396126][ T2957] asm_exc_invalid_op+0x1a/0x20 [ 43.401201][ T2957] RIP: 0010:__rcu_read_unlock+0x235/0x5e0 [ 43.407017][ T2957] Code: 74 11 c7 45 58 01 00 00 00 bf 09 00 00 00 e8 02 93 de ff e8 cd 25 22 00 9c 58 f6 c4 02 0f 85 dd 02 00 00 fb e9 57 fe ff ff 90 <0f> 0b 90 5b 5d 41 5c 41 5d 41 5e 41 5f e9 09 50 da 05 e8 94 91 7f [ 43.426634][ T2957] RSP: 0018:ffffc90000517790 EFLAGS: 00010286 [ 43.432732][ T2957] RAX: 00000000ffffffff RBX: ffff888122ead940 RCX: ffffffff8192b4de [ 43.440719][ T2957] RDX: 0000000000000000 RSI: ffffffff890b0609 RDI: ffff888122eaddbc [ 43.448702][ T2957] RBP: 0000000000000004 R08: 0000000000000005 R09: 0000000000000000 [ 43.456776][ T2957] R10: 0000000080000000 R11: 0000000000000001 R12: ffff888122da94b8 [ 43.464760][ T2957] R13: fffffbfff15e3410 R14: 0000000000000000 R15: ffff888122da8c00 [ 43.473801][ T2957] ? nbcon_cpu_emergency_exit+0x11e/0x1e0 [ 43.480953][ T2957] __zap_vma_range+0x1f82/0x41f0 [ 43.489900][ T2957] ? __pfx___zap_vma_range+0x10/0x10 [ 43.496493][ T2957] ? find_held_lock+0x2b/0x80 [ 43.502543][ T2957] unmap_vmas+0x299/0x5f0 [ 43.508051][ T2957] ? __pfx_unmap_vmas+0x10/0x10 [ 43.513575][ T2957] ? mas_next_slot+0x10a3/0x1960 [ 43.521167][ T2957] exit_mmap+0x1ef/0xa10 [ 43.526201][ T2957] ? __pfx_exit_mmap+0x10/0x10 [ 43.531084][ T2957] ? rcu_is_watching+0x12/0xc0 [ 43.536949][ T2957] ? uprobe_clear_state+0x5f/0x260 [ 43.542281][ T2957] ? uprobe_clear_state+0x5f/0x260 [ 43.550921][ T2957] ? arch_uprobe_clear_state+0x107/0x150 [ 43.557708][ T2957] mmput+0xe0/0x430 [ 43.562426][ T2957] do_exit+0x833/0x2a60 [ 43.567387][ T2957] ? do_raw_spin_lock+0x128/0x260 [ 43.572726][ T2957] ? __pfx_do_exit+0x10/0x10 [ 43.577430][ T2957] ? do_group_exit+0x1bd/0x2a0 [ 43.582593][ T2957] ? rcu_is_watching+0x12/0xc0 [ 43.588423][ T2957] do_group_exit+0xd5/0x2a0 [ 43.593675][ T2957] __x64_sys_exit_group+0x3e/0x50 [ 43.598998][ T2957] x64_sys_call+0x102c/0x1530 [ 43.603935][ T2957] do_syscall_64+0x10b/0x7f0 [ 43.608695][ T2957] ? irqentry_exit+0xe5/0x6c0 [ 43.614064][ T2957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.620106][ T2957] RIP: 0033:0x7fcc77a3d6c5 [ 43.624622][ T2957] Code: Unable to access opcode bytes at 0x7fcc77a3d69b. [ 43.631730][ T2957] RSP: 002b:00007ffce27e66d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 43.640337][ T2957] RAX: ffffffffffffffda RBX: 000055d32d6c23c0 RCX: 00007fcc77a3d6c5 [ 43.648324][ T2957] RDX: 00000000000000e7 RSI: fffffffffffffe68 RDI: 0000000000000000 [ 43.656306][ T2957] RBP: 000055d32d4562c0 R08: 0000000000000000 R09: 0000000000000000 [ 43.664300][ T2957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 43.672370][ T2957] R13: 00007ffce27e6720 R14: 0000000000000000 R15: 0000000000000000 [ 43.682298][ T2957] [ 43.685788][ T2957] Kernel Offset: disabled [ 43.690212][ T2957] Rebooting in 86400 seconds..