last executing test programs: 756.783437ms ago: executing program 1 (id=40): io_uring_setup(0x0, &(0x7f0000000000)) 756.145337ms ago: executing program 1 (id=45): chown(&(0x7f0000000000), 0x0, 0x0) 734.765938ms ago: executing program 1 (id=50): openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/load', 0x2, 0x0) 734.515228ms ago: executing program 1 (id=52): lremovexattr(&(0x7f0000000000), &(0x7f0000000000)) 705.306869ms ago: executing program 1 (id=55): sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0) 705.115359ms ago: executing program 1 (id=58): rt_sigreturn() 525.162355ms ago: executing program 4 (id=116): lchown(&(0x7f0000000000), 0x0, 0x0) 509.137365ms ago: executing program 4 (id=119): futex(&(0x7f0000000000), 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0) 508.671025ms ago: executing program 4 (id=123): socket$caif_stream(0x25, 0x1, 0x0) 508.386655ms ago: executing program 3 (id=124): openat(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls', 0x0, 0x0) 475.336056ms ago: executing program 3 (id=126): tgkill(0x0, 0x0, 0x0) 475.058726ms ago: executing program 3 (id=129): socket$alg(0x26, 0x5, 0x0) 474.999736ms ago: executing program 0 (id=130): utime(&(0x7f0000000000), &(0x7f0000000000)) 474.925176ms ago: executing program 2 (id=131): setgroups(0x0, &(0x7f0000000000)) 474.865376ms ago: executing program 0 (id=132): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/lightnvm/control', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/lightnvm/control', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/lightnvm/control', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/lightnvm/control', 0x800, 0x0) 474.706326ms ago: executing program 2 (id=133): syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000080), 0x0, 0x1) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2) syz_open_dev$mouse(&(0x7f0000000100), 0x0, 0x800) syz_open_dev$mouse(&(0x7f0000000140), 0x1, 0x0) syz_open_dev$mouse(&(0x7f0000000180), 0x1, 0x1) syz_open_dev$mouse(&(0x7f00000001c0), 0x1, 0x2) syz_open_dev$mouse(&(0x7f0000000200), 0x1, 0x800) syz_open_dev$mouse(&(0x7f0000000240), 0x2, 0x0) syz_open_dev$mouse(&(0x7f0000000280), 0x2, 0x1) syz_open_dev$mouse(&(0x7f00000002c0), 0x2, 0x2) syz_open_dev$mouse(&(0x7f0000000300), 0x2, 0x800) syz_open_dev$mouse(&(0x7f0000000340), 0x3, 0x0) syz_open_dev$mouse(&(0x7f0000000380), 0x3, 0x1) syz_open_dev$mouse(&(0x7f00000003c0), 0x3, 0x2) syz_open_dev$mouse(&(0x7f0000000400), 0x3, 0x800) syz_open_dev$mouse(&(0x7f0000000440), 0x4, 0x0) syz_open_dev$mouse(&(0x7f0000000480), 0x4, 0x1) syz_open_dev$mouse(&(0x7f00000004c0), 0x4, 0x2) syz_open_dev$mouse(&(0x7f0000000500), 0x4, 0x800) 474.647916ms ago: executing program 4 (id=134): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor', 0x800, 0x0) 454.972816ms ago: executing program 0 (id=135): epoll_wait(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) 454.747746ms ago: executing program 4 (id=136): timer_gettime(0x0, &(0x7f0000000000)) 454.643776ms ago: executing program 2 (id=137): setreuid(0x0, 0x0) 454.583726ms ago: executing program 3 (id=138): lgetxattr(&(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000000), 0x0) 454.530586ms ago: executing program 2 (id=139): tkill(0x0, 0x0) 454.480386ms ago: executing program 3 (id=140): readlink(&(0x7f0000000000), &(0x7f0000000000), 0x0) 417.435788ms ago: executing program 0 (id=141): madvise(0x0, 0x0, 0x0) 417.274688ms ago: executing program 4 (id=142): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sev', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sev', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sev', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sev', 0x800, 0x0) 417.059968ms ago: executing program 0 (id=143): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/comedi0', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/comedi0', 0x800, 0x0) 416.955258ms ago: executing program 2 (id=144): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mISDNtimer', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mISDNtimer', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mISDNtimer', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mISDNtimer', 0x800, 0x0) 112.180836ms ago: executing program 2 (id=146): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 292.08µs ago: executing program 0 (id=148): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=145): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.241' (ED25519) to the list of known hosts. [ 34.859766][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 34.859784][ T28] audit: type=1400 audit(1779878228.948:117): avc: denied { mounton } for pid=3287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 34.889098][ T28] audit: type=1400 audit(1779878228.978:118): avc: denied { mount } for pid=3287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.891449][ T3287] cgroup: Unknown subsys name 'net' [ 34.917027][ T28] audit: type=1400 audit(1779878229.008:119): avc: denied { unmount } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 35.038740][ T3287] cgroup: Unknown subsys name 'cpuset' [ 35.045111][ T3287] cgroup: Unknown subsys name 'rlimit' [ 35.190511][ T28] audit: type=1400 audit(1779878229.278:120): avc: denied { setattr } for pid=3287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 35.224069][ T28] audit: type=1400 audit(1779878229.278:121): avc: denied { create } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.245191][ T28] audit: type=1400 audit(1779878229.278:122): avc: denied { write } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.264936][ T3291] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 35.265913][ T28] audit: type=1400 audit(1779878229.278:123): avc: denied { read } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.294830][ T28] audit: type=1400 audit(1779878229.278:124): avc: denied { mounton } for pid=3287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 35.320070][ T28] audit: type=1400 audit(1779878229.308:125): avc: denied { read } for pid=3022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 35.341431][ T28] audit: type=1400 audit(1779878229.308:126): avc: denied { mount } for pid=3287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 35.368375][ T3287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 37.042100][ T3465] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 37.350906][ T2982] ================================================================== [ 37.359075][ T2982] BUG: KCSAN: data-race in d_make_discardable / step_into_slowpath [ 37.367018][ T2982] [ 37.369370][ T2982] write to 0xffff88810695c180 of 4 bytes by task 3484 on cpu 0: [ 37.377031][ T2982] d_make_discardable+0x4f/0xa0 [ 37.382269][ T2982] simple_unlink+0x68/0x80 [ 37.386740][ T2982] shmem_unlink+0x12d/0x140 [ 37.391292][ T2982] vfs_unlink+0x1c7/0x490 [ 37.395690][ T2982] filename_unlinkat+0x1e2/0x410 [ 37.400678][ T2982] __se_sys_unlink+0x2b/0xe0 [ 37.405317][ T2982] __x64_sys_unlink+0x1f/0x30 [ 37.410134][ T2982] x64_sys_call+0x2eb6/0x3020 [ 37.414868][ T2982] do_syscall_64+0x12c/0x3b0 [ 37.419702][ T2982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.425717][ T2982] [ 37.431098][ T2982] read to 0xffff88810695c180 of 4 bytes by task 2982 on cpu 1: [ 37.438657][ T2982] step_into_slowpath+0x139/0x4c0 [ 37.443717][ T2982] path_lookupat+0x330/0x500 [ 37.448336][ T2982] filename_lookup+0x190/0x390 [ 37.453122][ T2982] do_readlinkat+0x74/0x2f0 [ 37.457650][ T2982] __x64_sys_readlink+0x47/0x60 [ 37.462533][ T2982] x64_sys_call+0x2b51/0x3020 [ 37.467249][ T2982] do_syscall_64+0x12c/0x3b0 [ 37.471872][ T2982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.477809][ T2982] [ 37.480162][ T2982] value changed: 0x08300080 -> 0x00004080 [ 37.485902][ T2982] [ 37.488268][ T2982] Reported by Kernel Concurrency Sanitizer on: [ 37.494466][ T2982] CPU: 1 UID: 0 PID: 2982 Comm: udevd Not tainted syzkaller #0 PREEMPT(lazy) [ 37.503345][ T2982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 37.513446][ T2982] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)