last executing test programs: 486.295889ms ago: executing program 0 (id=158): openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/class/mac80211_hwsim/', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/mac80211_hwsim/', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/mac80211_hwsim/', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/mac80211_hwsim/', 0x800, 0x0) 470.13313ms ago: executing program 2 (id=162): kexec_load(0x0, 0x0, &(0x7f0000000000), 0x0) 469.83482ms ago: executing program 2 (id=164): clock_getres(0x0, &(0x7f0000000000)) 469.14109ms ago: executing program 0 (id=168): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ndctl0', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ndctl0', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ndctl0', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ndctl0', 0x800, 0x0) 449.275592ms ago: executing program 2 (id=170): syz_open_dev$vcsa(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000080), 0x0, 0x1) syz_open_dev$vcsa(&(0x7f00000000c0), 0x0, 0x2) syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x800) syz_open_dev$vcsa(&(0x7f0000000140), 0x1, 0x0) syz_open_dev$vcsa(&(0x7f0000000180), 0x1, 0x1) syz_open_dev$vcsa(&(0x7f00000001c0), 0x1, 0x2) syz_open_dev$vcsa(&(0x7f0000000200), 0x1, 0x800) syz_open_dev$vcsa(&(0x7f0000000240), 0x2, 0x0) syz_open_dev$vcsa(&(0x7f0000000280), 0x2, 0x1) syz_open_dev$vcsa(&(0x7f00000002c0), 0x2, 0x2) syz_open_dev$vcsa(&(0x7f0000000300), 0x2, 0x800) syz_open_dev$vcsa(&(0x7f0000000340), 0x3, 0x0) syz_open_dev$vcsa(&(0x7f0000000380), 0x3, 0x1) syz_open_dev$vcsa(&(0x7f00000003c0), 0x3, 0x2) syz_open_dev$vcsa(&(0x7f0000000400), 0x3, 0x800) syz_open_dev$vcsa(&(0x7f0000000440), 0x4, 0x0) syz_open_dev$vcsa(&(0x7f0000000480), 0x4, 0x1) syz_open_dev$vcsa(&(0x7f00000004c0), 0x4, 0x2) syz_open_dev$vcsa(&(0x7f0000000500), 0x4, 0x800) 447.860212ms ago: executing program 0 (id=173): openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/6lowpan_control', 0x2, 0x0) 447.741642ms ago: executing program 0 (id=174): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/lightnvm/control', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/lightnvm/control', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/lightnvm/control', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/lightnvm/control', 0x800, 0x0) 447.099732ms ago: executing program 0 (id=177): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sev', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sev', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sev', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sev', 0x800, 0x0) 446.945952ms ago: executing program 2 (id=178): delete_module(&(0x7f0000000000), 0x0) 446.827622ms ago: executing program 3 (id=179): openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/change-rule', 0x2, 0x0) 435.540024ms ago: executing program 2 (id=181): open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000), 0x0) 434.878633ms ago: executing program 3 (id=184): membarrier(0x0, 0x0) 434.612684ms ago: executing program 2 (id=186): rt_sigpending(&(0x7f0000000000), 0x0) 434.501844ms ago: executing program 4 (id=187): eventfd2(0x0, 0x0) 434.381644ms ago: executing program 0 (id=188): pause() 417.203474ms ago: executing program 4 (id=189): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video1', 0x2, 0x0) 416.651525ms ago: executing program 3 (id=192): acct(0x0) 416.349145ms ago: executing program 4 (id=194): gettid() 367.053919ms ago: executing program 3 (id=196): nanosleep(&(0x7f0000000000), 0x0) 366.854079ms ago: executing program 1 (id=197): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse', 0x2, 0x0) 366.751889ms ago: executing program 3 (id=198): openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/onlycap', 0x2, 0x0) 366.650529ms ago: executing program 1 (id=200): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsu', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsu', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu', 0x800, 0x0) 366.539529ms ago: executing program 1 (id=201): semop(0x0, &(0x7f0000000000), 0x0) 366.469629ms ago: executing program 1 (id=202): getrusage(0x0, &(0x7f0000000000)) 315.994763ms ago: executing program 1 (id=203): socket$xdp(0x2c, 0x3, 0x0) 222.452221ms ago: executing program 4 (id=195): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 113.19852ms ago: executing program 3 (id=199): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 104.493831ms ago: executing program 1 (id=204): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 3.114369ms ago: executing program 4 (id=205): openat(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs', 0x1, 0x0) 0s ago: executing program 4 (id=208): sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.153' (ED25519) to the list of known hosts. [ 28.797252][ T29] audit: type=1400 audit(1765600909.777:62): avc: denied { mounton } for pid=3310 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.820169][ T29] audit: type=1400 audit(1765600909.807:63): avc: denied { mount } for pid=3310 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.820865][ T3310] cgroup: Unknown subsys name 'net' [ 28.847731][ T29] audit: type=1400 audit(1765600909.827:64): avc: denied { unmount } for pid=3310 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.959646][ T3310] cgroup: Unknown subsys name 'cpuset' [ 28.965632][ T3310] cgroup: Unknown subsys name 'rlimit' [ 29.137692][ T29] audit: type=1400 audit(1765600910.117:65): avc: denied { setattr } for pid=3310 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.161031][ T29] audit: type=1400 audit(1765600910.117:66): avc: denied { create } for pid=3310 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.181485][ T29] audit: type=1400 audit(1765600910.117:67): avc: denied { write } for pid=3310 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.201810][ T29] audit: type=1400 audit(1765600910.127:68): avc: denied { read } for pid=3310 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.222107][ T29] audit: type=1400 audit(1765600910.127:69): avc: denied { read } for pid=3049 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 29.228542][ T3314] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 29.243019][ T29] audit: type=1400 audit(1765600910.137:70): avc: denied { mounton } for pid=3310 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 29.276340][ T29] audit: type=1400 audit(1765600910.137:71): avc: denied { mount } for pid=3310 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 29.310565][ T3310] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 30.991032][ T3425] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 31.361769][ T3538] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.795725][ T3010] ================================================================== [ 31.803821][ T3010] BUG: KCSAN: data-race in d_make_discardable / step_into_slowpath [ 31.811710][ T3010] [ 31.814016][ T3010] write to 0xffff888107e04c00 of 4 bytes by task 3313 on cpu 0: [ 31.821623][ T3010] d_make_discardable+0x4f/0xa0 [ 31.826460][ T3010] simple_unlink+0x68/0x80 [ 31.830897][ T3010] shmem_unlink+0x12d/0x140 [ 31.835426][ T3010] vfs_unlink+0x28b/0x440 [ 31.839741][ T3010] do_unlinkat+0x1cd/0x4b0 [ 31.844137][ T3010] __x64_sys_unlink+0x2e/0x40 [ 31.848796][ T3010] x64_sys_call+0x2f48/0x3000 [ 31.853459][ T3010] do_syscall_64+0xd8/0x2a0 [ 31.857959][ T3010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 31.863837][ T3010] [ 31.866141][ T3010] read to 0xffff888107e04c00 of 4 bytes by task 3010 on cpu 1: [ 31.873661][ T3010] step_into_slowpath+0x120/0x480 [ 31.878673][ T3010] path_lookupat+0x330/0x500 [ 31.883248][ T3010] filename_lookup+0x147/0x340 [ 31.887997][ T3010] do_readlinkat+0x7d/0x320 [ 31.892493][ T3010] __x64_sys_readlink+0x47/0x60 [ 31.897330][ T3010] x64_sys_call+0x2af1/0x3000 [ 31.901990][ T3010] do_syscall_64+0xd8/0x2a0 [ 31.906488][ T3010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 31.912367][ T3010] [ 31.914670][ T3010] value changed: 0x08300080 -> 0x00004080 [ 31.920363][ T3010] [ 31.922664][ T3010] Reported by Kernel Concurrency Sanitizer on: [ 31.928807][ T3010] CPU: 1 UID: 0 PID: 3010 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 31.938076][ T3010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 31.948112][ T3010] ================================================================== [ 32.180546][ T1647] bond0 (unregistering): Released all slaves