Warning: Permanently added '10.128.0.72' (ED25519) to the list of known hosts. [+] Starting reproducer... [+] unshare successful. [+] uid_map configured. [+] setgroups configured. [+] gid_map configured. [+] mkdir successful. [+] mount base successful. [+] thread1 created. [+] thread2 created. [ 46.313778][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 46.313794][ T29] audit: type=1400 audit(1791870958.604:184): avc: denied { unmount } for pid=3639 comm="syz-executor409" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 46.474271][ T3640] ================================================================== [ 46.474309][ T3640] BUG: KCSAN: data-race in __lookup_mnt / umount_mnt [ 46.474344][ T3640] [ 46.474350][ T3640] write to 0xffff888104cc9518 of 8 bytes by task 3644 on cpu 1: [ 46.474366][ T3640] umount_mnt+0x65/0x2d0 [ 46.474389][ T3640] umount_tree+0x757/0x960 [ 46.474423][ T3640] path_umount+0x887/0x8f0 [ 46.474458][ T3640] __x64_sys_umount+0xb6/0xe0 [ 46.474490][ T3640] x64_sys_call+0x225e/0x2550 [ 46.474513][ T3640] do_syscall_64+0x112/0x360 [ 46.474536][ T3640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.474560][ T3640] [ 46.474567][ T3640] read to 0xffff888104cc9518 of 8 bytes by task 3640 on cpu 0: [ 46.474585][ T3640] __lookup_mnt+0xa2/0x1a0 [ 46.474615][ T3640] __follow_mount_rcu+0xbc/0x2a0 [ 46.474639][ T3640] step_into_slowpath+0x3ab/0x600 [ 46.474663][ T3640] link_path_walk+0x947/0xdd0 [ 46.474687][ T3640] __filename_parentat+0x1ad/0x460 [ 46.474717][ T3640] filename_unlinkat+0x9a/0x410 [ 46.474739][ T3640] __se_sys_unlink+0x2b/0xe0 [ 46.474761][ T3640] __x64_sys_unlink+0x1f/0x30 [ 46.474783][ T3640] x64_sys_call+0x18ee/0x2550 [ 46.474810][ T3640] do_syscall_64+0x112/0x360 [ 46.474839][ T3640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.474858][ T3640] [ 46.474861][ T3640] value changed: 0xffff88810779f780 -> 0xffff88811dcd8cc0 [ 46.474873][ T3640] [ 46.474876][ T3640] Reported by Kernel Concurrency Sanitizer on: [ 46.474900][ T3640] CPU: 0 UID: 0 PID: 3640 Comm: syz-executor409 Not tainted syzkaller #0 PREEMPT(lazy) [ 46.474927][ T3640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 46.474942][ T3640] ================================================================== [ 46.918089][ T3644] ================================================================== [ 46.918122][ T3644] BUG: KCSAN: data-race in __follow_mount_rcu / d_set_mounted [ 46.918159][ T3644] [ 46.918165][ T3644] read to 0xffff88810779f780 of 4 bytes by task 3641 on cpu 1: [ 46.918181][ T3644] __follow_mount_rcu+0x156/0x2a0 [ 46.918207][ T3644] step_into_slowpath+0x3ab/0x600 [ 46.918232][ T3644] link_path_walk+0x947/0xdd0 [ 46.918254][ T3644] __filename_parentat+0x1ad/0x460 [ 46.918285][ T3644] filename_unlinkat+0x9a/0x410 [ 46.918303][ T3644] __se_sys_unlink+0x2b/0xe0 [ 46.918321][ T3644] __x64_sys_unlink+0x1f/0x30 [ 46.918339][ T3644] x64_sys_call+0x18ee/0x2550 [ 46.918364][ T3644] do_syscall_64+0x112/0x360 [ 46.918386][ T3644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.918406][ T3644] [ 46.918411][ T3644] write to 0xffff88810779f780 of 4 bytes by task 3644 on cpu 0: [ 46.918427][ T3644] d_set_mounted+0x119/0x190 [ 46.918451][ T3644] get_mountpoint+0x197/0x380 [ 46.918476][ T3644] do_lock_mount+0x45a/0x8b0 [ 46.918495][ T3644] do_new_mount+0x375/0x730 [ 46.918512][ T3644] path_mount+0x4ad/0xb90 [ 46.918528][ T3644] __se_sys_mount+0x28c/0x2e0 [ 46.918548][ T3644] __x64_sys_mount+0x67/0x80 [ 46.918566][ T3644] x64_sys_call+0xc3b/0x2550 [ 46.918588][ T3644] do_syscall_64+0x112/0x360 [ 46.918609][ T3644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.918629][ T3644] [ 46.918632][ T3644] Reported by Kernel Concurrency Sanitizer on: [ 46.918643][ T3644] CPU: 0 UID: 0 PID: 3644 Comm: syz-executor409 Not tainted syzkaller #0 PREEMPT(lazy) [ 46.918667][ T3644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 46.918679][ T3644] ================================================================== [ 48.608586][ T3641] ================================================================== [ 48.608613][ T3641] BUG: KCSAN: data-race in __lookup_mnt / umount_mnt [ 48.608641][ T3641] [ 48.608645][ T3641] write to 0xffff888109d56490 of 8 bytes by task 3644 on cpu 0: [ 48.608655][ T3641] umount_mnt+0x4b/0x2d0 [ 48.608668][ T3641] umount_tree+0x757/0x960 [ 48.608686][ T3641] path_umount+0x887/0x8f0 [ 48.608704][ T3641] __x64_sys_umount+0xb6/0xe0 [ 48.608722][ T3641] x64_sys_call+0x225e/0x2550 [ 48.608737][ T3641] do_syscall_64+0x112/0x360 [ 48.608752][ T3641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.608765][ T3641] [ 48.608768][ T3641] read to 0xffff888109d56490 of 8 bytes by task 3641 on cpu 1: [ 48.608778][ T3641] __lookup_mnt+0x85/0x1a0 [ 48.608804][ T3641] __follow_mount_rcu+0xbc/0x2a0 [ 48.608833][ T3641] step_into_slowpath+0x3ab/0x600 [ 48.608862][ T3641] link_path_walk+0x947/0xdd0 [ 48.608876][ T3641] __filename_parentat+0x1ad/0x460 [ 48.608892][ T3641] filename_unlinkat+0x9a/0x410 [ 48.608903][ T3641] __se_sys_unlink+0x2b/0xe0 [ 48.608914][ T3641] __x64_sys_unlink+0x1f/0x30 [ 48.608925][ T3641] x64_sys_call+0x18ee/0x2550 [ 48.608939][ T3641] do_syscall_64+0x112/0x360 [ 48.608953][ T3641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.608965][ T3641] [ 48.608967][ T3641] value changed: 0xffff888104c10480 -> 0xffff888109d56480 [ 48.608975][ T3641] [ 48.608977][ T3641] Reported by Kernel Concurrency Sanitizer on: [ 48.608984][ T3641] CPU: 1 UID: 0 PID: 3641 Comm: syz-executor409 Not tainted syzkaller #0 PREEMPT(lazy) [ 48.608999][ T3641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 48.609007][ T3641] ================================================================== [ 49.250103][ T29] audit: type=1400 audit(1791870961.534:185): avc: denied { write } for pid=3647 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.268890][ T29] audit: type=1400 audit(1791870961.544:186): avc: denied { write } for pid=3658 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.641632][ T29] audit: type=1400 audit(1791870961.934:187): avc: denied { write } for pid=3661 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.660062][ T29] audit: type=1400 audit(1791870961.944:188): avc: denied { write } for pid=3672 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.958648][ T29] audit: type=1400 audit(1791870962.244:189): avc: denied { write } for pid=3675 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 50.003268][ T29] audit: type=1400 audit(1791870962.294:190): avc: denied { write } for pid=3686 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 50.235446][ T29] audit: type=1400 audit(1791870962.524:191): avc: denied { write } for pid=3689 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 50.289156][ T29] audit: type=1400 audit(1791870962.574:192): avc: denied { write } for pid=3700 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 50.663185][ T29] audit: type=1400 audit(1791870962.954:193): avc: denied { write } for pid=3703 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [+] Reproducer finished.