last executing test programs: 0s ago: executing program 1 (id=2): write(0xffffffffffffffff, &(0x7f0000000000), 0x0) kernel console output (not intermixed with test programs): [ 19.175341][ T28] audit: type=1400 audit(1779099471.684:103): avc: denied { search } for pid=3178 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.197425][ T28] audit: type=1400 audit(1779099471.684:104): avc: denied { search } for pid=3178 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.220314][ T28] audit: type=1400 audit(1779099471.684:105): avc: denied { search } for pid=3178 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.243388][ T28] audit: type=1400 audit(1779099471.684:106): avc: denied { search } for pid=3178 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.266497][ T28] audit: type=1400 audit(1779099471.684:107): avc: denied { read } for pid=3179 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.289400][ T28] audit: type=1400 audit(1779099471.684:108): avc: denied { read open } for pid=3179 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.314710][ T28] audit: type=1400 audit(1779099471.684:109): avc: denied { getattr } for pid=3179 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.339879][ T28] audit: type=1400 audit(1779099471.724:110): avc: denied { write } for pid=3178 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.362848][ T28] audit: type=1400 audit(1779099471.724:111): avc: denied { add_name } for pid=3178 comm="dhcpcd-run-hook" name="resolv.conf.lapb3.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.385444][ T28] audit: type=1400 audit(1779099471.734:112): avc: denied { write } for pid=3189 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.1.171' (ED25519) to the list of known hosts. [ 26.245218][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 26.245237][ T28] audit: type=1400 audit(1779099478.754:126): avc: denied { mounton } for pid=3284 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.274362][ T28] audit: type=1400 audit(1779099478.784:127): avc: denied { mount } for pid=3284 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.275026][ T3284] cgroup: Unknown subsys name 'net' [ 26.302201][ T28] audit: type=1400 audit(1779099478.804:128): avc: denied { unmount } for pid=3284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.414159][ T3284] cgroup: Unknown subsys name 'cpuset' [ 26.420374][ T3284] cgroup: Unknown subsys name 'rlimit' [ 26.532945][ T28] audit: type=1400 audit(1779099479.034:129): avc: denied { setattr } for pid=3284 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.556473][ T28] audit: type=1400 audit(1779099479.044:130): avc: denied { create } for pid=3284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.577198][ T28] audit: type=1400 audit(1779099479.044:131): avc: denied { write } for pid=3284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.589609][ T3287] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 26.597893][ T28] audit: type=1400 audit(1779099479.044:132): avc: denied { read } for pid=3284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.626620][ T28] audit: type=1400 audit(1779099479.044:133): avc: denied { mounton } for pid=3284 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.651875][ T28] audit: type=1400 audit(1779099479.044:134): avc: denied { mount } for pid=3284 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 26.675248][ T28] audit: type=1400 audit(1779099479.064:135): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 26.704007][ T3284] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.579205][ T3298] ================================================================== [ 27.587318][ T3298] BUG: KCSAN: data-race in __follow_mount_rcu / d_set_mounted [ 27.594782][ T3298] [ 27.597109][ T3298] read to 0xffff888100442480 of 4 bytes by task 2980 on cpu 0: [ 27.604643][ T3298] __follow_mount_rcu+0x15f/0x2b0 [ 27.609678][ T3298] step_into_slowpath+0x30c/0x4c0 [ 27.614734][ T3298] link_path_walk+0x974/0xe30 [ 27.619431][ T3298] path_openat+0x1c6/0x2050 [ 27.623962][ T3298] do_file_open+0x16c/0x290 [ 27.628494][ T3298] do_sys_openat2+0x94/0x130 [ 27.633083][ T3298] __x64_sys_openat+0xf2/0x120 [ 27.637856][ T3298] x64_sys_call+0x1e39/0x3020 [ 27.642528][ T3298] do_syscall_64+0x12c/0x3b0 [ 27.647122][ T3298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 27.653021][ T3298] [ 27.655344][ T3298] write to 0xffff888100442480 of 4 bytes by task 3298 on cpu 1: [ 27.662978][ T3298] d_set_mounted+0xff/0x160 [ 27.667476][ T3298] get_mountpoint+0x197/0x370 [ 27.672148][ T3298] attach_recursive_mnt+0x115/0x1630 [ 27.677426][ T3298] graft_tree+0xf0/0x100 [ 27.681661][ T3298] do_loopback+0x247/0x480 [ 27.686117][ T3298] path_mount+0x401/0xbc0 [ 27.690458][ T3298] __se_sys_mount+0x28c/0x2e0 [ 27.695159][ T3298] __x64_sys_mount+0x67/0x80 [ 27.699767][ T3298] x64_sys_call+0x2d61/0x3020 [ 27.704441][ T3298] do_syscall_64+0x12c/0x3b0 [ 27.709060][ T3298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 27.714960][ T3298] [ 27.717285][ T3298] Reported by Kernel Concurrency Sanitizer on: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 27.723428][ T3298] CPU: 1 UID: 0 PID: 3298 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 27.732876][ T3298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 27.742938][ T3298] ==================================================================