last executing test programs: 678.162837ms ago: executing program 2 (id=578): socket$isdn(0x22, 0x3, 0x0) 677.972197ms ago: executing program 2 (id=580): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwbinder', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwbinder', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwbinder', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwbinder', 0x800, 0x0) 677.598787ms ago: executing program 2 (id=583): openat(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/access', 0x2, 0x0) 664.692348ms ago: executing program 3 (id=584): inotify_init() 663.198038ms ago: executing program 3 (id=586): lstat(&(0x7f0000000000), &(0x7f0000000000)) 661.987128ms ago: executing program 0 (id=590): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm', 0x2, 0x0) 661.894599ms ago: executing program 3 (id=591): munlock(0x0, 0x0) 639.434401ms ago: executing program 2 (id=592): openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/relabel-self', 0x2, 0x0) 639.32986ms ago: executing program 1 (id=593): openat(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/relabel', 0x2, 0x0) 639.253371ms ago: executing program 1 (id=594): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm', 0x800, 0x0) 639.082581ms ago: executing program 4 (id=595): socket$pppl2tp(0x18, 0x1, 0x1) 639.009251ms ago: executing program 0 (id=596): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter', 0x800, 0x0) 638.932081ms ago: executing program 2 (id=597): mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0) 638.881011ms ago: executing program 3 (id=598): shmdt(0x0) 638.737391ms ago: executing program 0 (id=599): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles', 0x800, 0x0) 588.711365ms ago: executing program 2 (id=601): pause() 588.606336ms ago: executing program 4 (id=602): openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/exec', 0x2, 0x0) 588.480126ms ago: executing program 0 (id=603): setregid(0x0, 0x0) 588.368146ms ago: executing program 4 (id=606): sched_getscheduler(0x0) 588.309166ms ago: executing program 4 (id=607): rename(&(0x7f0000000000), &(0x7f0000000000)) 550.618159ms ago: executing program 4 (id=608): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 478.659586ms ago: executing program 1 (id=600): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 429.20797ms ago: executing program 3 (id=604): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 213.30174ms ago: executing program 1 (id=610): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 212.7602ms ago: executing program 4 (id=609): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 204.169841ms ago: executing program 0 (id=605): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 81.524963ms ago: executing program 3 (id=611): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 24.198458ms ago: executing program 1 (id=612): openat(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs', 0x1, 0x0) 9.646789ms ago: executing program 1 (id=616): flock(0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=614): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.38' (ED25519) to the list of known hosts. [ 28.064231][ T29] audit: type=1400 audit(1728065549.267:81): avc: denied { mounton } for pid=3257 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.065230][ T3257] cgroup: Unknown subsys name 'net' [ 28.087064][ T29] audit: type=1400 audit(1728065549.277:82): avc: denied { mount } for pid=3257 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.114405][ T29] audit: type=1400 audit(1728065549.307:83): avc: denied { unmount } for pid=3257 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.134240][ T29] audit: type=1400 audit(1728065549.307:84): avc: denied { read } for pid=2949 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 28.255217][ T3257] cgroup: Unknown subsys name 'cpuset' [ 28.261208][ T3257] cgroup: Unknown subsys name 'rlimit' [ 28.348647][ T29] audit: type=1400 audit(1728065549.557:85): avc: denied { setattr } for pid=3257 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.372042][ T29] audit: type=1400 audit(1728065549.557:86): avc: denied { create } for pid=3257 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.392544][ T29] audit: type=1400 audit(1728065549.557:87): avc: denied { write } for pid=3257 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.413436][ T29] audit: type=1400 audit(1728065549.557:88): avc: denied { read } for pid=3257 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.426257][ T3260] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 28.434097][ T29] audit: type=1400 audit(1728065549.567:89): avc: denied { mounton } for pid=3257 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.467998][ T29] audit: type=1400 audit(1728065549.567:90): avc: denied { mount } for pid=3257 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 28.470814][ T3257] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.540623][ T3352] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 29.544416][ T3351] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 30.685819][ T3783] mmap: syz.2.499 (3783) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 31.068801][ T3891] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.651487][ T3933] ================================================================== [ 31.659632][ T3933] BUG: KCSAN: data-race in pcpu_alloc_noprof / pcpu_free_area [ 31.667225][ T3933] [ 31.669546][ T3933] read-write to 0xffffffff88bdd3ac of 4 bytes by task 50 on cpu 1: [ 31.677439][ T3933] pcpu_free_area+0x4dc/0x570 [ 31.682143][ T3933] free_percpu+0x1c6/0xb30 [ 31.686591][ T3933] xt_percpu_counter_free+0x63/0x80 [ 31.692240][ T3933] __arpt_unregister_table+0x107/0x1c0 [ 31.697793][ T3933] arpt_unregister_table+0x3a/0x50 [ 31.702917][ T3933] arptable_filter_net_exit+0x1c/0x30 [ 31.708299][ T3933] cleanup_net+0x475/0x810 [ 31.712729][ T3933] process_scheduled_works+0x483/0x9a0 [ 31.718296][ T3933] worker_thread+0x51d/0x6f0 [ 31.722993][ T3933] kthread+0x1d1/0x210 [ 31.727066][ T3933] ret_from_fork+0x4b/0x60 [ 31.731505][ T3933] ret_from_fork_asm+0x1a/0x30 [ 31.736291][ T3933] [ 31.738618][ T3933] read to 0xffffffff88bdd3ac of 4 bytes by task 3933 on cpu 0: [ 31.746164][ T3933] pcpu_alloc_noprof+0x9a7/0x10c0 [ 31.751215][ T3933] alloc_vfsmnt+0xfe/0x300 [ 31.755652][ T3933] clone_mnt+0x45/0x7a0 [ 31.759834][ T3933] copy_tree+0xba/0x7f0 [ 31.764010][ T3933] __do_loopback+0x111/0x210 [ 31.768613][ T3933] do_loopback+0x1dd/0x2d0 [ 31.773054][ T3933] path_mount+0x3d0/0xb30 [ 31.777459][ T3933] __se_sys_mount+0x27c/0x2d0 [ 31.782244][ T3933] __x64_sys_mount+0x67/0x80 [ 31.786850][ T3933] x64_sys_call+0x203e/0x2d60 [ 31.791632][ T3933] do_syscall_64+0xc9/0x1c0 [ 31.796147][ T3933] entry_SYSCALL_64_after_hwframe+0x77/0x7f SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 31.802064][ T3933] [ 31.804390][ T3933] value changed: 0x0000000b -> 0x0000000c [ 31.810104][ T3933] [ 31.812426][ T3933] Reported by Kernel Concurrency Sanitizer on: [ 31.818571][ T3933] CPU: 0 UID: 0 PID: 3933 Comm: syz-executor Not tainted 6.12.0-rc1-syzkaller-00165-g360c1f1f24c6 #0 [ 31.829418][ T3933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 31.839453][ T3933] ==================================================================