last executing test programs: 1.456649146s ago: executing program 2 (id=368): setresuid(0x0, 0x0, 0x0) 1.434358297s ago: executing program 2 (id=374): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0', 0x800, 0x0) 1.433727927s ago: executing program 2 (id=378): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/acpi_thermal_rel', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/acpi_thermal_rel', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/acpi_thermal_rel', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/acpi_thermal_rel', 0x800, 0x0) 1.433470587s ago: executing program 2 (id=380): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp', 0x800, 0x0) 1.416437988s ago: executing program 2 (id=383): symlinkat(&(0x7f0000000000), 0xffffffffffffffff, &(0x7f0000000000)) 1.416248428s ago: executing program 2 (id=385): pause() 993.385173ms ago: executing program 0 (id=557): sched_setparam(0x0, &(0x7f0000000000)) 992.486193ms ago: executing program 0 (id=562): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp', 0x800, 0x0) 976.439564ms ago: executing program 0 (id=567): statfs(&(0x7f0000000000), &(0x7f0000000000)) 975.860514ms ago: executing program 0 (id=570): nanosleep(&(0x7f0000000000), 0x0) 955.330285ms ago: executing program 0 (id=575): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer', 0x800, 0x0) 954.833895ms ago: executing program 0 (id=579): rt_sigreturn() 889.346438ms ago: executing program 3 (id=597): openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/ipv6host', 0x2, 0x0) 862.193871ms ago: executing program 3 (id=604): lremovexattr(&(0x7f0000000000), &(0x7f0000000000)) 861.45012ms ago: executing program 3 (id=607): openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/run', 0x1, 0x0) 861.35318ms ago: executing program 3 (id=608): mount_setattr(0xffffffffffffffff, &(0x7f0000000000), 0x0, &(0x7f0000000000), 0x0) 828.765142ms ago: executing program 1 (id=610): syslog(0x0, 0x0, 0x0) 828.652542ms ago: executing program 4 (id=611): getuid() 828.542442ms ago: executing program 1 (id=612): pkey_free(0xffffffffffffffff) 828.457242ms ago: executing program 4 (id=613): openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/ambient', 0x2, 0x0) 828.304982ms ago: executing program 3 (id=614): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput', 0x800, 0x0) 828.229422ms ago: executing program 1 (id=615): openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/damon/monitor_on', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/damon/monitor_on', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/damon/monitor_on', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/damon/monitor_on', 0x800, 0x0) 781.208415ms ago: executing program 3 (id=616): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 637.864473ms ago: executing program 4 (id=617): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 465.823743ms ago: executing program 5 (id=619): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 417.222646ms ago: executing program 1 (id=618): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 311.749642ms ago: executing program 4 (id=620): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 135.062943ms ago: executing program 1 (id=622): timer_create(0x0, &(0x7f0000000000), &(0x7f0000000000)) 81.187726ms ago: executing program 1 (id=624): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sev', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sev', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sev', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sev', 0x800, 0x0) 9.51718ms ago: executing program 4 (id=623): socket$rxrpc(0x21, 0x2, 0x0) 0s ago: executing program 4 (id=626): socket$inet6_tcp(0xa, 0x1, 0x0) kernel console output (not intermixed with test programs): [ 18.989117][ T29] audit: type=1400 audit(1769908471.092:62): avc: denied { search } for pid=3194 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.011328][ T29] audit: type=1400 audit(1769908471.092:63): avc: denied { search } for pid=3194 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.034030][ T29] audit: type=1400 audit(1769908471.092:64): avc: denied { search } for pid=3194 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=481 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.057097][ T29] audit: type=1400 audit(1769908471.092:65): avc: denied { search } for pid=3194 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.080376][ T29] audit: type=1400 audit(1769908471.092:66): avc: denied { read open } for pid=3195 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.139' (ED25519) to the list of known hosts. [ 25.642273][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 25.642289][ T29] audit: type=1400 audit(1769908477.742:70): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.671759][ T29] audit: type=1400 audit(1769908477.772:71): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.672519][ T3300] cgroup: Unknown subsys name 'net' [ 25.700016][ T29] audit: type=1400 audit(1769908477.802:72): avc: denied { unmount } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.823592][ T3300] cgroup: Unknown subsys name 'cpuset' [ 25.829753][ T3300] cgroup: Unknown subsys name 'rlimit' [ 25.971697][ T29] audit: type=1400 audit(1769908478.072:73): avc: denied { setattr } for pid=3300 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.996184][ T29] audit: type=1400 audit(1769908478.072:74): avc: denied { create } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.017147][ T29] audit: type=1400 audit(1769908478.072:75): avc: denied { write } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.038003][ T29] audit: type=1400 audit(1769908478.072:76): avc: denied { read } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.050004][ T3303] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 26.058634][ T29] audit: type=1400 audit(1769908478.072:77): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.092339][ T29] audit: type=1400 audit(1769908478.072:78): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 26.115739][ T29] audit: type=1400 audit(1769908478.112:79): avc: denied { read } for pid=3040 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 26.158993][ T3300] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.312508][ T3466] mmap: syz.2.136 (3466) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 27.786166][ T3675] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 27.818324][ T3643] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 28.163978][ T3818] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 29.433466][ T3001] ================================================================== [ 29.441598][ T3001] BUG: KCSAN: data-race in d_make_discardable / step_into_slowpath [ 29.449675][ T3001] [ 29.452078][ T3001] write to 0xffff888107a65d80 of 4 bytes by task 3980 on cpu 0: [ 29.459875][ T3001] d_make_discardable+0x4f/0xa0 [ 29.464987][ T3001] simple_unlink+0x68/0x80 [ 29.469431][ T3001] shmem_unlink+0x12d/0x140 [ 29.474011][ T3001] vfs_unlink+0x28b/0x440 [ 29.478338][ T3001] do_unlinkat+0x1e2/0x4b0 [ 29.482856][ T3001] __x64_sys_unlink+0x2e/0x40 [ 29.487541][ T3001] x64_sys_call+0x2f48/0x3000 [ 29.492246][ T3001] do_syscall_64+0xc0/0x2a0 [ 29.496839][ T3001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 29.503102][ T3001] [ 29.505501][ T3001] read to 0xffff888107a65d80 of 4 bytes by task 3001 on cpu 1: [ 29.513043][ T3001] step_into_slowpath+0x139/0x4c0 [ 29.518159][ T3001] path_lookupat+0x330/0x500 [ 29.522745][ T3001] filename_lookup+0x190/0x390 [ 29.527595][ T3001] do_readlinkat+0x7d/0x340 [ 29.532107][ T3001] __x64_sys_readlink+0x47/0x60 [ 29.536953][ T3001] x64_sys_call+0x2af1/0x3000 [ 29.541622][ T3001] do_syscall_64+0xc0/0x2a0 [ 29.546205][ T3001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 29.552289][ T3001] [ 29.554651][ T3001] value changed: 0x08300080 -> 0x00004080 [ 29.560367][ T3001] [ 29.562867][ T3001] Reported by Kernel Concurrency Sanitizer on: [ 29.569129][ T3001] CPU: 1 UID: 0 PID: 3001 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 29.578417][ T3001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 29.588554][ T3001] ================================================================== [ 29.627674][ T3297] sshd-session (3297) used greatest stack depth: 10320 bytes left [ 29.824228][ T41] bond0 (unregistering): Released all slaves