last executing test programs: 1.978095322s ago: executing program 1 (id=246): getrusage(0x0, &(0x7f0000000000)) 1.976769482s ago: executing program 1 (id=251): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/seq', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq', 0x800, 0x0) 1.963193982s ago: executing program 1 (id=253): prlimit64(0x0, 0x0, 0x0, 0x0) 1.946010633s ago: executing program 1 (id=259): rt_sigreturn() 1.640115364s ago: executing program 0 (id=366): openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/logging', 0x2, 0x0) 1.639692934s ago: executing program 0 (id=370): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsu', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsu', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu', 0x800, 0x0) 1.619270155s ago: executing program 0 (id=372): fremovexattr(0xffffffffffffffff, &(0x7f0000000000)) 1.618930604s ago: executing program 0 (id=375): perf_event_open(&(0x7f0000000000), 0x0, 0x0, 0xffffffffffffffff, 0x0) 1.601203435s ago: executing program 0 (id=381): semop(0x0, &(0x7f0000000000), 0x0) 1.584437865s ago: executing program 0 (id=383): pause() 1.189708319s ago: executing program 4 (id=511): openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/damon/kdamond_pid', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/damon/kdamond_pid', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/damon/kdamond_pid', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/damon/kdamond_pid', 0x800, 0x0) 1.15393657s ago: executing program 4 (id=514): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128', 0x2, 0x0) 888.532359ms ago: executing program 4 (id=517): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 858.09594ms ago: executing program 1 (id=571): socket$l2tp(0x2, 0x2, 0x73) 683.286326ms ago: executing program 3 (id=604): get_thread_area(&(0x7f0000000000)) 683.031306ms ago: executing program 2 (id=606): io_setup(0x0, &(0x7f0000000000)) 682.964706ms ago: executing program 3 (id=607): map_shadow_stack(0x0, 0x0, 0x0) 682.924306ms ago: executing program 2 (id=608): sched_setaffinity(0x0, 0x0, &(0x7f0000000000)) 682.871146ms ago: executing program 2 (id=609): clock_nanosleep(0x0, 0x0, &(0x7f0000000000), 0x0) 682.791936ms ago: executing program 3 (id=610): syz_open_dev$dvb_dvr(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$dvb_dvr(&(0x7f0000000080), 0x0, 0x1) syz_open_dev$dvb_dvr(&(0x7f00000000c0), 0x0, 0x2) syz_open_dev$dvb_dvr(&(0x7f0000000100), 0x0, 0x800) syz_open_dev$dvb_dvr(&(0x7f0000000140), 0xa, 0x0) syz_open_dev$dvb_dvr(&(0x7f0000000180), 0xa, 0x1) syz_open_dev$dvb_dvr(&(0x7f00000001c0), 0xa, 0x2) syz_open_dev$dvb_dvr(&(0x7f0000000200), 0xa, 0x800) syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x14, 0x0) syz_open_dev$dvb_dvr(&(0x7f0000000280), 0x14, 0x1) syz_open_dev$dvb_dvr(&(0x7f00000002c0), 0x14, 0x2) syz_open_dev$dvb_dvr(&(0x7f0000000300), 0x14, 0x800) syz_open_dev$dvb_dvr(&(0x7f0000000340), 0x1e, 0x0) syz_open_dev$dvb_dvr(&(0x7f0000000380), 0x1e, 0x1) syz_open_dev$dvb_dvr(&(0x7f00000003c0), 0x1e, 0x2) syz_open_dev$dvb_dvr(&(0x7f0000000400), 0x1e, 0x800) syz_open_dev$dvb_dvr(&(0x7f0000000440), 0x28, 0x0) syz_open_dev$dvb_dvr(&(0x7f0000000480), 0x28, 0x1) syz_open_dev$dvb_dvr(&(0x7f00000004c0), 0x28, 0x2) syz_open_dev$dvb_dvr(&(0x7f0000000500), 0x28, 0x800) 682.687386ms ago: executing program 2 (id=611): syz_open_dev$vcsu(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x0, 0x1) syz_open_dev$vcsu(&(0x7f00000000c0), 0x0, 0x2) syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x800) syz_open_dev$vcsu(&(0x7f0000000140), 0x1, 0x0) syz_open_dev$vcsu(&(0x7f0000000180), 0x1, 0x1) syz_open_dev$vcsu(&(0x7f00000001c0), 0x1, 0x2) syz_open_dev$vcsu(&(0x7f0000000200), 0x1, 0x800) syz_open_dev$vcsu(&(0x7f0000000240), 0x2, 0x0) syz_open_dev$vcsu(&(0x7f0000000280), 0x2, 0x1) syz_open_dev$vcsu(&(0x7f00000002c0), 0x2, 0x2) syz_open_dev$vcsu(&(0x7f0000000300), 0x2, 0x800) syz_open_dev$vcsu(&(0x7f0000000340), 0x3, 0x0) syz_open_dev$vcsu(&(0x7f0000000380), 0x3, 0x1) syz_open_dev$vcsu(&(0x7f00000003c0), 0x3, 0x2) syz_open_dev$vcsu(&(0x7f0000000400), 0x3, 0x800) syz_open_dev$vcsu(&(0x7f0000000440), 0x4, 0x0) syz_open_dev$vcsu(&(0x7f0000000480), 0x4, 0x1) syz_open_dev$vcsu(&(0x7f00000004c0), 0x4, 0x2) syz_open_dev$vcsu(&(0x7f0000000500), 0x4, 0x800) 682.609656ms ago: executing program 3 (id=612): mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0) 639.255588ms ago: executing program 4 (id=579): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/acpi_thermal_rel', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/acpi_thermal_rel', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/acpi_thermal_rel', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/acpi_thermal_rel', 0x800, 0x0) 484.372663ms ago: executing program 3 (id=613): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 482.651153ms ago: executing program 2 (id=614): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 415.970085ms ago: executing program 4 (id=615): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 413.372045ms ago: executing program 2 (id=617): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 364.883817ms ago: executing program 1 (id=616): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 122.136236ms ago: executing program 3 (id=618): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 108.217216ms ago: executing program 5 (id=620): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=619): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): [ 18.439527][ T28] audit: type=1400 audit(1774706334.409:62): avc: denied { search } for pid=3191 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.461888][ T28] audit: type=1400 audit(1774706334.409:63): avc: denied { search } for pid=3191 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.484434][ T28] audit: type=1400 audit(1774706334.409:64): avc: denied { search } for pid=3191 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.507472][ T28] audit: type=1400 audit(1774706334.409:65): avc: denied { search } for pid=3191 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.530494][ T28] audit: type=1400 audit(1774706334.409:66): avc: denied { read open } for pid=3192 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.202' (ED25519) to the list of known hosts. [ 24.531837][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 24.531851][ T28] audit: type=1400 audit(1774706340.499:70): avc: denied { mounton } for pid=3297 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.560795][ T28] audit: type=1400 audit(1774706340.529:71): avc: denied { mount } for pid=3297 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.561519][ T3297] cgroup: Unknown subsys name 'net' [ 24.588434][ T28] audit: type=1400 audit(1774706340.559:72): avc: denied { unmount } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.723491][ T3297] cgroup: Unknown subsys name 'cpuset' [ 24.729533][ T3297] cgroup: Unknown subsys name 'rlimit' [ 24.882416][ T28] audit: type=1400 audit(1774706340.849:73): avc: denied { setattr } for pid=3297 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.905954][ T28] audit: type=1400 audit(1774706340.849:74): avc: denied { create } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.928634][ T28] audit: type=1400 audit(1774706340.849:75): avc: denied { write } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.949272][ T28] audit: type=1400 audit(1774706340.849:76): avc: denied { read } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 24.969690][ T28] audit: type=1400 audit(1774706340.879:77): avc: denied { mounton } for pid=3297 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.976794][ T3302] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 24.994967][ T28] audit: type=1400 audit(1774706340.879:78): avc: denied { mount } for pid=3297 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 25.027062][ T28] audit: type=1400 audit(1774706340.879:79): avc: denied { read } for pid=3037 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 25.058742][ T3297] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.567847][ T3621] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 26.644403][ T3640] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 27.341976][ T3867] mmap: syz.2.534 (3867) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 27.492149][ T3871] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 28.558828][ T2998] ================================================================== [ 28.567113][ T2998] BUG: KCSAN: data-race in d_delete / lookup_fast [ 28.573544][ T2998] [ 28.575870][ T2998] read-write to 0xffff888100696000 of 4 bytes by task 3987 on cpu 1: [ 28.583931][ T2998] d_delete+0xbe/0xe0 [ 28.587922][ T2998] d_delete_notify+0x32/0x100 [ 28.592600][ T2998] vfs_unlink+0x289/0x490 [ 28.596934][ T2998] filename_unlinkat+0x1e2/0x410 [ 28.601872][ T2998] __se_sys_unlink+0x2b/0xe0 [ 28.606449][ T2998] __x64_sys_unlink+0x1f/0x30 [ 28.611105][ T2998] x64_sys_call+0x2eb6/0x3020 [ 28.615766][ T2998] do_syscall_64+0x12c/0x370 [ 28.620358][ T2998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 28.626257][ T2998] [ 28.628658][ T2998] read to 0xffff888100696000 of 4 bytes by task 2998 on cpu 0: [ 28.636199][ T2998] lookup_fast+0xf0/0x320 [ 28.640559][ T2998] path_lookupat+0x15c/0x500 [ 28.645460][ T2998] filename_lookup+0x190/0x390 [ 28.650247][ T2998] do_readlinkat+0x74/0x2f0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 28.654761][ T2998] __x64_sys_readlink+0x47/0x60 [ 28.659695][ T2998] x64_sys_call+0x2b51/0x3020 [ 28.664365][ T2998] do_syscall_64+0x12c/0x370 [ 28.669136][ T2998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 28.675102][ T2998] [ 28.677534][ T2998] value changed: 0x00300180 -> 0x00004080 [ 28.683247][ T2998] [ 28.685552][ T2998] Reported by Kernel Concurrency Sanitizer on: [ 28.691700][ T2998] CPU: 0 UID: 0 PID: 2998 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 28.700621][ T2998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 28.710751][ T2998] ==================================================================