last executing test programs: 834.427367ms ago: executing program 3 (id=189): setfsuid(0x0) 833.928087ms ago: executing program 3 (id=193): lsm_set_self_attr(0x0, &(0x7f0000000000), 0x0, 0x0) 818.997838ms ago: executing program 4 (id=196): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qrtr-tun', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qrtr-tun', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qrtr-tun', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qrtr-tun', 0x800, 0x0) 818.765858ms ago: executing program 0 (id=198): io_destroy(0x0) 818.704518ms ago: executing program 3 (id=199): getresgid(&(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000000)) 818.643767ms ago: executing program 4 (id=200): ftruncate(0xffffffffffffffff, 0x0) 802.494698ms ago: executing program 0 (id=201): openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0', 0x2, 0x0) 801.967918ms ago: executing program 3 (id=204): fsmount(0xffffffffffffffff, 0x0, 0x0) 801.913508ms ago: executing program 0 (id=205): futimesat(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000000)) 782.678518ms ago: executing program 0 (id=208): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill', 0x800, 0x0) 782.345588ms ago: executing program 4 (id=210): timerfd_create(0x0, 0x0) 782.115448ms ago: executing program 3 (id=212): syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1) syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x2) syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x800) syz_open_dev$sg(&(0x7f0000000140), 0x1, 0x0) syz_open_dev$sg(&(0x7f0000000180), 0x1, 0x1) syz_open_dev$sg(&(0x7f00000001c0), 0x1, 0x2) syz_open_dev$sg(&(0x7f0000000200), 0x1, 0x800) syz_open_dev$sg(&(0x7f0000000240), 0x2, 0x0) syz_open_dev$sg(&(0x7f0000000280), 0x2, 0x1) syz_open_dev$sg(&(0x7f00000002c0), 0x2, 0x2) syz_open_dev$sg(&(0x7f0000000300), 0x2, 0x800) syz_open_dev$sg(&(0x7f0000000340), 0x3, 0x0) syz_open_dev$sg(&(0x7f0000000380), 0x3, 0x1) syz_open_dev$sg(&(0x7f00000003c0), 0x3, 0x2) syz_open_dev$sg(&(0x7f0000000400), 0x3, 0x800) syz_open_dev$sg(&(0x7f0000000440), 0x4, 0x0) syz_open_dev$sg(&(0x7f0000000480), 0x4, 0x1) syz_open_dev$sg(&(0x7f00000004c0), 0x4, 0x2) syz_open_dev$sg(&(0x7f0000000500), 0x4, 0x800) 740.263449ms ago: executing program 4 (id=216): setpgid(0x0, 0x0) 740.079959ms ago: executing program 2 (id=218): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer', 0x800, 0x0) 739.993929ms ago: executing program 4 (id=219): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/xen/evtchn', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/xen/evtchn', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/xen/evtchn', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/xen/evtchn', 0x800, 0x0) 718.222349ms ago: executing program 1 (id=224): syz_init_net_socket$rose(0xb, 0x5, 0x0) 648.2531ms ago: executing program 1 (id=225): lgetxattr(&(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000000), 0x0) 648.05437ms ago: executing program 1 (id=226): getgid() 647.92912ms ago: executing program 1 (id=227): rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000000000)) 647.76777ms ago: executing program 1 (id=228): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ocfs2_control', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ocfs2_control', 0x800, 0x0) 427.970473ms ago: executing program 2 (id=220): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 345.814215ms ago: executing program 3 (id=221): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 304.302295ms ago: executing program 0 (id=217): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 284.029536ms ago: executing program 4 (id=222): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 265.598096ms ago: executing program 0 (id=232): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 200.921457ms ago: executing program 1 (id=229): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 79.220318ms ago: executing program 2 (id=230): syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x0, 0x1) syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x0, 0x2) syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x800) syz_open_dev$sndpcmp(&(0x7f0000000140), 0xa, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000180), 0xa, 0x1) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0xa, 0x2) syz_open_dev$sndpcmp(&(0x7f0000000200), 0xa, 0x800) syz_open_dev$sndpcmp(&(0x7f0000000240), 0x14, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000280), 0x14, 0x1) syz_open_dev$sndpcmp(&(0x7f00000002c0), 0x14, 0x2) syz_open_dev$sndpcmp(&(0x7f0000000300), 0x14, 0x800) syz_open_dev$sndpcmp(&(0x7f0000000340), 0x1e, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000380), 0x1e, 0x1) syz_open_dev$sndpcmp(&(0x7f00000003c0), 0x1e, 0x2) syz_open_dev$sndpcmp(&(0x7f0000000400), 0x1e, 0x800) syz_open_dev$sndpcmp(&(0x7f0000000440), 0x28, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000480), 0x28, 0x1) syz_open_dev$sndpcmp(&(0x7f00000004c0), 0x28, 0x2) syz_open_dev$sndpcmp(&(0x7f0000000500), 0x28, 0x800) 72.477488ms ago: executing program 6 (id=233): move_pages(0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000000), 0x0) 49.918609ms ago: executing program 6 (id=237): eventfd2(0x0, 0x0) 49.627019ms ago: executing program 2 (id=238): setuid(0x0) 49.421479ms ago: executing program 5 (id=239): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp1', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp1', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp1', 0x800, 0x0) 49.337479ms ago: executing program 6 (id=240): ustat(0x0, &(0x7f0000000000)) 49.258749ms ago: executing program 2 (id=241): unlink(&(0x7f0000000000)) 49.049579ms ago: executing program 2 (id=242): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ndctl0', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ndctl0', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ndctl0', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ndctl0', 0x800, 0x0) 4.117259ms ago: executing program 6 (id=244): setfsgid(0x0) 3.728709ms ago: executing program 5 (id=245): futex_waitv(&(0x7f0000000000), 0x0, 0x0, &(0x7f0000000000), 0x0) 3.509379ms ago: executing program 5 (id=246): syncfs(0xffffffffffffffff) 3.362879ms ago: executing program 6 (id=247): socket$inet6_udplite(0xa, 0x2, 0x88) 3.228769ms ago: executing program 5 (id=248): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom', 0x800, 0x0) 3.060599ms ago: executing program 5 (id=249): getdents64(0xffffffffffffffff, &(0x7f0000000000), 0x0) 0s ago: executing program 5 (id=250): socket$nl_audit(0x10, 0x3, 0x9) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.154' (ED25519) to the list of known hosts. [ 28.368921][ T29] audit: type=1400 audit(1748789021.040:62): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.370064][ T3305] cgroup: Unknown subsys name 'net' [ 28.391655][ T29] audit: type=1400 audit(1748789021.040:63): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.419155][ T29] audit: type=1400 audit(1748789021.070:64): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.571454][ T3305] cgroup: Unknown subsys name 'cpuset' [ 28.577800][ T3305] cgroup: Unknown subsys name 'rlimit' [ 28.729209][ T29] audit: type=1400 audit(1748789021.400:65): avc: denied { setattr } for pid=3305 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.752500][ T29] audit: type=1400 audit(1748789021.400:66): avc: denied { create } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.773010][ T29] audit: type=1400 audit(1748789021.400:67): avc: denied { write } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.793400][ T29] audit: type=1400 audit(1748789021.410:68): avc: denied { read } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.802324][ T3308] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 28.813901][ T29] audit: type=1400 audit(1748789021.410:69): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.847257][ T29] audit: type=1400 audit(1748789021.410:70): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 28.870518][ T29] audit: type=1400 audit(1748789021.500:71): avc: denied { relabelto } for pid=3308 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 28.952686][ T3305] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 30.603048][ T3557] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.131791][ T3614] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 31.169805][ T3007] ================================================================== [ 31.177924][ T3007] BUG: KCSAN: data-race in dont_mount / step_into [ 31.184364][ T3007] [ 31.186727][ T3007] read-write to 0xffff888106a7d780 of 4 bytes by task 3304 on cpu 1: [ 31.194794][ T3007] dont_mount+0x2a/0x40 [ 31.198958][ T3007] vfs_unlink+0x28f/0x420 [ 31.203294][ T3007] do_unlinkat+0x28e/0x4c0 [ 31.207718][ T3007] __x64_sys_unlink+0x2e/0x40 [ 31.212406][ T3007] x64_sys_call+0x22a6/0x2fb0 [ 31.217095][ T3007] do_syscall_64+0xd2/0x200 [ 31.221618][ T3007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 31.227516][ T3007] [ 31.229838][ T3007] read to 0xffff888106a7d780 of 4 bytes by task 3007 on cpu 0: [ 31.237381][ T3007] step_into+0xe3/0x820 [ 31.241552][ T3007] walk_component+0x162/0x220 [ 31.246245][ T3007] path_lookupat+0xfe/0x2a0 [ 31.250764][ T3007] filename_lookup+0x147/0x340 [ 31.255541][ T3007] do_readlinkat+0x7d/0x320 [ 31.260070][ T3007] __x64_sys_readlink+0x47/0x60 [ 31.264939][ T3007] x64_sys_call+0x2cf3/0x2fb0 [ 31.269624][ T3007] do_syscall_64+0xd2/0x200 [ 31.274144][ T3007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 31.280050][ T3007] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 31.282373][ T3007] value changed: 0x00300008 -> 0x00004008 [ 31.288101][ T3007] [ 31.290497][ T3007] Reported by Kernel Concurrency Sanitizer on: [ 31.296666][ T3007] CPU: 0 UID: 0 PID: 3007 Comm: udevd Not tainted 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(voluntary) [ 31.308316][ T3007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 31.318378][ T3007] ==================================================================