last executing test programs: 2.028819455s ago: executing program 0 (id=56): socket$inet6_mptcp(0xa, 0x1, 0x106) 2.013955046s ago: executing program 0 (id=60): socket(0x10, 0x3, 0x10) 1.998667226s ago: executing program 0 (id=65): getuid() 1.998064156s ago: executing program 0 (id=70): eventfd(0x0) 1.978512646s ago: executing program 0 (id=74): fsetxattr(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x0) 1.978158026s ago: executing program 0 (id=78): pause() 773.729253ms ago: executing program 1 (id=421): process_vm_writev(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000000), 0x0, 0x0) 773.330222ms ago: executing program 1 (id=424): memfd_secret(0x0) 772.647313ms ago: executing program 1 (id=428): timer_delete(0x0) 750.930494ms ago: executing program 1 (id=431): lremovexattr(&(0x7f0000000000), &(0x7f0000000000)) 750.644374ms ago: executing program 1 (id=434): mlockall(0x0) 749.357183ms ago: executing program 1 (id=437): msgrcv(0x0, &(0x7f0000000000), 0x0, 0x0, 0x0) 319.635352ms ago: executing program 3 (id=553): personality(0x0) 319.520012ms ago: executing program 3 (id=554): socket$inet6_udplite(0xa, 0x2, 0x88) 274.078524ms ago: executing program 2 (id=567): syz_init_net_socket$rose(0xb, 0x5, 0x0) 273.900814ms ago: executing program 3 (id=569): move_mount(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffffff, &(0x7f0000000000), 0x0) 273.871014ms ago: executing program 4 (id=570): syslog(0x0, 0x0, 0x0) 273.830624ms ago: executing program 4 (id=571): socket$pppl2tp(0x18, 0x1, 0x1) 273.649954ms ago: executing program 3 (id=572): fsopen(&(0x7f0000000000), 0x0) 248.749864ms ago: executing program 4 (id=573): lsm_set_self_attr(0x0, &(0x7f0000000000), 0x0, 0x0) 248.549674ms ago: executing program 2 (id=574): syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) 248.432324ms ago: executing program 4 (id=575): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userfaultfd', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userfaultfd', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/userfaultfd', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/userfaultfd', 0x800, 0x0) 248.364084ms ago: executing program 2 (id=576): timerfd_gettime(0xffffffffffffffff, &(0x7f0000000000)) 248.253214ms ago: executing program 4 (id=577): syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x1) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x2) syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x800) syz_open_dev$evdev(&(0x7f0000000140), 0x1, 0x0) syz_open_dev$evdev(&(0x7f0000000180), 0x1, 0x1) syz_open_dev$evdev(&(0x7f00000001c0), 0x1, 0x2) syz_open_dev$evdev(&(0x7f0000000200), 0x1, 0x800) syz_open_dev$evdev(&(0x7f0000000240), 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000280), 0x2, 0x1) syz_open_dev$evdev(&(0x7f00000002c0), 0x2, 0x2) syz_open_dev$evdev(&(0x7f0000000300), 0x2, 0x800) syz_open_dev$evdev(&(0x7f0000000340), 0x3, 0x0) syz_open_dev$evdev(&(0x7f0000000380), 0x3, 0x1) syz_open_dev$evdev(&(0x7f00000003c0), 0x3, 0x2) syz_open_dev$evdev(&(0x7f0000000400), 0x3, 0x800) syz_open_dev$evdev(&(0x7f0000000440), 0x4, 0x0) syz_open_dev$evdev(&(0x7f0000000480), 0x4, 0x1) syz_open_dev$evdev(&(0x7f00000004c0), 0x4, 0x2) syz_open_dev$evdev(&(0x7f0000000500), 0x4, 0x800) 248.217464ms ago: executing program 2 (id=578): shmat(0x0, 0x0, 0x0) 248.181044ms ago: executing program 3 (id=579): timer_getoverrun(0x0) 248.135784ms ago: executing program 2 (id=580): socket$inet_tcp(0x2, 0x1, 0x0) 125.861827ms ago: executing program 2 (id=582): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 63.634028ms ago: executing program 4 (id=583): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=581): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): [ 19.541946][ T29] audit: type=1400 audit(1787781742.335:103): avc: denied { search } for pid=3178 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.541998][ T29] audit: type=1400 audit(1787781742.335:104): avc: denied { search } for pid=3178 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.542031][ T29] audit: type=1400 audit(1787781742.335:105): avc: denied { search } for pid=3178 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.542053][ T29] audit: type=1400 audit(1787781742.335:106): avc: denied { search } for pid=3178 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.566268][ T29] audit: type=1400 audit(1787781742.365:107): avc: denied { read } for pid=3179 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.566299][ T29] audit: type=1400 audit(1787781742.365:108): avc: denied { read open } for pid=3179 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.566323][ T29] audit: type=1400 audit(1787781742.365:109): avc: denied { getattr } for pid=3179 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.621109][ T29] audit: type=1400 audit(1787781742.415:110): avc: denied { write } for pid=3178 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.621140][ T29] audit: type=1400 audit(1787781742.415:111): avc: denied { add_name } for pid=3178 comm="dhcpcd-run-hook" name="resolv.conf.lapb0.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.635491][ T29] audit: type=1400 audit(1787781742.435:112): avc: denied { write } for pid=3190 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.10.4' (ED25519) to the list of known hosts. [ 24.397237][ T3283] cgroup: Unknown subsys name 'net' [ 24.484045][ T3283] cgroup: Unknown subsys name 'cpuset' [ 24.489943][ T3283] cgroup: Unknown subsys name 'rlimit' [ 24.581302][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 24.581336][ T29] audit: type=1400 audit(1787781747.375:129): avc: denied { setattr } for pid=3283 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.587471][ T29] audit: type=1400 audit(1787781747.375:130): avc: denied { create } for pid=3283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 24.587496][ T29] audit: type=1400 audit(1787781747.375:131): avc: denied { write } for pid=3283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.587516][ T29] audit: type=1400 audit(1787781747.375:132): avc: denied { read } for pid=3283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.610960][ T29] audit: type=1400 audit(1787781747.385:133): avc: denied { mounton } for pid=3283 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.611066][ T29] audit: type=1400 audit(1787781747.385:134): avc: denied { mount } for pid=3283 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 24.627221][ T3287] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 24.631651][ T29] audit: type=1400 audit(1787781747.415:135): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 24.631677][ T29] audit: type=1400 audit(1787781747.425:136): avc: denied { relabelto } for pid=3287 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.631691][ T29] audit: type=1400 audit(1787781747.425:137): avc: denied { write } for pid=3287 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.699589][ T29] audit: type=1400 audit(1787781747.505:138): avc: denied { read } for pid=3283 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.699983][ T3283] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.907153][ T3439] syz.4.132 (3439) used greatest stack depth: 11216 bytes left [ 26.169502][ T3521] mmap: syz.2.212 (3521) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 27.199782][ T3452] syz.3.145 (3452) used greatest stack depth: 10968 bytes left [ 27.661561][ T3918] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 27.798848][ T2982] ================================================================== [ 27.798875][ T2982] BUG: KCSAN: data-race in d_make_discardable / step_into_slowpath [ 27.798900][ T2982] [ 27.798906][ T2982] write to 0xffff888107330300 of 4 bytes by task 3281 on cpu 1: [ 27.798923][ T2982] d_make_discardable+0x4f/0x90 [ 27.798942][ T2982] simple_unlink+0x68/0x80 [ 27.798969][ T2982] shmem_unlink+0x12d/0x140 [ 27.799001][ T2982] vfs_unlink+0x1c3/0x490 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 27.799025][ T2982] filename_unlinkat+0x1dc/0x410 [ 27.799051][ T2982] __se_sys_unlink+0x2b/0xe0 [ 27.799077][ T2982] __x64_sys_unlink+0x1f/0x30 [ 27.799102][ T2982] x64_sys_call+0x18ee/0x2550 [ 27.799129][ T2982] do_syscall_64+0x112/0x360 [ 27.799148][ T2982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 27.799167][ T2982] [ 27.799171][ T2982] read to 0xffff888107330300 of 4 bytes by task 2982 on cpu 0: [ 27.799190][ T2982] step_into_slowpath+0x139/0x4c0 [ 27.799208][ T2982] path_lookupat+0x2eb/0x4c0 [ 27.799227][ T2982] filename_lookup+0x18f/0x390 [ 27.799252][ T2982] do_readlinkat+0x74/0x2f0 [ 27.799270][ T2982] __x64_sys_readlink+0x47/0x60 [ 27.799289][ T2982] x64_sys_call+0x1d41/0x2550 [ 27.799310][ T2982] do_syscall_64+0x112/0x360 [ 27.799330][ T2982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 27.799348][ T2982] [ 27.799352][ T2982] value changed: 0x08300080 -> 0x00004080 [ 27.799362][ T2982] [ 27.799365][ T2982] Reported by Kernel Concurrency Sanitizer on: [ 27.799386][ T2982] CPU: 0 UID: 0 PID: 2982 Comm: udevd Not tainted syzkaller #0 PREEMPT(lazy) [ 27.799408][ T2982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 27.799419][ T2982] ==================================================================