last executing test programs: 767.299615ms ago: executing program 2 (id=203): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/acpi_thermal_rel', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/acpi_thermal_rel', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/acpi_thermal_rel', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/acpi_thermal_rel', 0x800, 0x0) 766.852155ms ago: executing program 2 (id=207): setfsuid(0x0) 747.926346ms ago: executing program 2 (id=211): dup(0xffffffffffffffff) 747.284216ms ago: executing program 2 (id=215): stat(&(0x7f0000000000), &(0x7f0000000000)) 725.107847ms ago: executing program 2 (id=222): mincore(0x0, 0x0, &(0x7f0000000000)) 725.063938ms ago: executing program 2 (id=223): pause() 99.710704ms ago: executing program 4 (id=443): semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000000)) 99.493404ms ago: executing program 1 (id=444): ustat(0x0, &(0x7f0000000000)) 99.445054ms ago: executing program 1 (id=445): fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 99.334614ms ago: executing program 3 (id=446): mq_getsetattr(0xffffffffffffffff, &(0x7f0000000000), 0x0) 99.200374ms ago: executing program 3 (id=447): socket$inet6_icmp(0xa, 0x2, 0x3a) 99.100984ms ago: executing program 1 (id=448): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvme-fabrics', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvme-fabrics', 0x800, 0x0) 98.688974ms ago: executing program 4 (id=450): uname(&(0x7f0000000000)) 81.573145ms ago: executing program 0 (id=451): socket$qrtr(0x2a, 0x2, 0x0) 80.716215ms ago: executing program 1 (id=452): openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/sync/info', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/sync/info', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/sync/info', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/sync/info', 0x800, 0x0) 80.413325ms ago: executing program 4 (id=453): openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/run', 0x1, 0x0) 80.310835ms ago: executing program 4 (id=454): openat(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools', 0x1, 0x0) 80.006855ms ago: executing program 1 (id=455): openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem', 0x1, 0x0) 79.537745ms ago: executing program 3 (id=456): mq_notify(0xffffffffffffffff, &(0x7f0000000000)) 79.249545ms ago: executing program 0 (id=457): syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x1) syz_open_dev$swradio(&(0x7f00000000c0), 0x0, 0x2) syz_open_dev$swradio(&(0x7f0000000100), 0x0, 0x800) 78.806645ms ago: executing program 4 (id=458): getegid() 78.424445ms ago: executing program 1 (id=459): socket$nl_route(0x10, 0x3, 0x0) 49.532207ms ago: executing program 0 (id=460): mprotect(0x0, 0x0, 0x0) 49.259457ms ago: executing program 3 (id=462): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp', 0x800, 0x0) 49.094267ms ago: executing program 0 (id=463): lseek(0xffffffffffffffff, 0x0, 0x0) 48.988397ms ago: executing program 4 (id=464): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot', 0x800, 0x0) 48.926137ms ago: executing program 0 (id=465): gettid() 48.797037ms ago: executing program 0 (id=466): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video1', 0x2, 0x0) 48.663007ms ago: executing program 3 (id=467): openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/change-rule', 0x2, 0x0) 0s ago: executing program 3 (id=468): mremap(0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 22.506467][ T29] audit: type=1400 audit(1768901927.306:62): avc: denied { search } for pid=3199 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 22.528799][ T29] audit: type=1400 audit(1768901927.306:63): avc: denied { search } for pid=3199 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=478 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 22.551395][ T29] audit: type=1400 audit(1768901927.306:64): avc: denied { search } for pid=3199 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 22.574444][ T29] audit: type=1400 audit(1768901927.306:65): avc: denied { search } for pid=3199 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 22.597612][ T29] audit: type=1400 audit(1768901927.316:66): avc: denied { read open } for pid=3200 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.62' (ED25519) to the list of known hosts. [ 29.486587][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 29.486605][ T29] audit: type=1400 audit(1768901934.286:70): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 29.515726][ T29] audit: type=1400 audit(1768901934.316:71): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.518284][ T3305] cgroup: Unknown subsys name 'net' [ 29.543793][ T29] audit: type=1400 audit(1768901934.346:72): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.699003][ T3305] cgroup: Unknown subsys name 'cpuset' [ 29.705625][ T3305] cgroup: Unknown subsys name 'rlimit' [ 29.860831][ T29] audit: type=1400 audit(1768901934.666:73): avc: denied { setattr } for pid=3305 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.895462][ T29] audit: type=1400 audit(1768901934.666:74): avc: denied { create } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.916018][ T29] audit: type=1400 audit(1768901934.666:75): avc: denied { write } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.937148][ T29] audit: type=1400 audit(1768901934.666:76): avc: denied { read } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.953634][ T3309] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 29.957546][ T29] audit: type=1400 audit(1768901934.686:77): avc: denied { read } for pid=3046 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 29.986925][ T29] audit: type=1400 audit(1768901934.686:78): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 30.011874][ T29] audit: type=1400 audit(1768901934.686:79): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 30.040450][ T3305] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 32.137902][ T3336] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.100784][ T3712] mmap: syz.1.382 (3712) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 33.556250][ T3007] ================================================================== [ 33.564415][ T3007] BUG: KCSAN: data-race in d_make_discardable / path_lookupat [ 33.571925][ T3007] [ 33.574269][ T3007] write to 0xffff888107791c00 of 4 bytes by task 3308 on cpu 0: [ 33.581920][ T3007] d_make_discardable+0x4f/0xa0 [ 33.586814][ T3007] simple_unlink+0x68/0x80 [ 33.591267][ T3007] shmem_unlink+0x12d/0x140 [ 33.595990][ T3007] vfs_unlink+0x28b/0x440 [ 33.600346][ T3007] do_unlinkat+0x1e2/0x4b0 [ 33.605235][ T3007] __x64_sys_unlink+0x2e/0x40 [ 33.609961][ T3007] x64_sys_call+0x2f48/0x3000 [ 33.614684][ T3007] do_syscall_64+0xc0/0x2a0 [ 33.619218][ T3007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 33.625136][ T3007] [ 33.627478][ T3007] read to 0xffff888107791c00 of 4 bytes by task 3007 on cpu 1: [ 33.635033][ T3007] path_lookupat+0x1d8/0x500 [ 33.639669][ T3007] filename_lookup+0x190/0x390 [ 33.644481][ T3007] do_readlinkat+0x7d/0x340 [ 33.649046][ T3007] __x64_sys_readlink+0x47/0x60 [ 33.654109][ T3007] x64_sys_call+0x2af1/0x3000 [ 33.658823][ T3007] do_syscall_64+0xc0/0x2a0 [ 33.663439][ T3007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 33.669373][ T3007] [ 33.671723][ T3007] value changed: 0x08300080 -> 0x00000080 [ 33.677477][ T3007] [ 33.679814][ T3007] Reported by Kernel Concurrency Sanitizer on: [ 33.686007][ T3007] CPU: 1 UID: 0 PID: 3007 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 33.695339][ T3007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 33.705437][ T3007] ==================================================================