last executing test programs: 816.299999ms ago: executing program 3 (id=102): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/irnet', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/irnet', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/irnet', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/irnet', 0x800, 0x0) 800.1031ms ago: executing program 3 (id=110): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/renderD128', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dri/renderD128', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dri/renderD128', 0x800, 0x0) 780.908829ms ago: executing program 3 (id=114): syz_open_dev$usbfs(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x1) syz_open_dev$usbfs(&(0x7f00000000c0), 0x0, 0x2) syz_open_dev$usbfs(&(0x7f0000000100), 0x0, 0x800) syz_open_dev$usbfs(&(0x7f0000000140), 0xa, 0x0) syz_open_dev$usbfs(&(0x7f0000000180), 0xa, 0x1) syz_open_dev$usbfs(&(0x7f00000001c0), 0xa, 0x2) syz_open_dev$usbfs(&(0x7f0000000200), 0xa, 0x800) syz_open_dev$usbfs(&(0x7f0000000240), 0x14, 0x0) syz_open_dev$usbfs(&(0x7f0000000280), 0x14, 0x1) syz_open_dev$usbfs(&(0x7f00000002c0), 0x14, 0x2) syz_open_dev$usbfs(&(0x7f0000000300), 0x14, 0x800) syz_open_dev$usbfs(&(0x7f0000000340), 0x1e, 0x0) syz_open_dev$usbfs(&(0x7f0000000380), 0x1e, 0x1) syz_open_dev$usbfs(&(0x7f00000003c0), 0x1e, 0x2) syz_open_dev$usbfs(&(0x7f0000000400), 0x1e, 0x800) syz_open_dev$usbfs(&(0x7f0000000440), 0x28, 0x0) syz_open_dev$usbfs(&(0x7f0000000480), 0x28, 0x1) syz_open_dev$usbfs(&(0x7f00000004c0), 0x28, 0x2) syz_open_dev$usbfs(&(0x7f0000000500), 0x28, 0x800) 779.48823ms ago: executing program 3 (id=119): syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000080), 0x0, 0x1) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2) syz_open_dev$mouse(&(0x7f0000000100), 0x0, 0x800) syz_open_dev$mouse(&(0x7f0000000140), 0x1, 0x0) syz_open_dev$mouse(&(0x7f0000000180), 0x1, 0x1) syz_open_dev$mouse(&(0x7f00000001c0), 0x1, 0x2) syz_open_dev$mouse(&(0x7f0000000200), 0x1, 0x800) syz_open_dev$mouse(&(0x7f0000000240), 0x2, 0x0) syz_open_dev$mouse(&(0x7f0000000280), 0x2, 0x1) syz_open_dev$mouse(&(0x7f00000002c0), 0x2, 0x2) syz_open_dev$mouse(&(0x7f0000000300), 0x2, 0x800) syz_open_dev$mouse(&(0x7f0000000340), 0x3, 0x0) syz_open_dev$mouse(&(0x7f0000000380), 0x3, 0x1) syz_open_dev$mouse(&(0x7f00000003c0), 0x3, 0x2) syz_open_dev$mouse(&(0x7f0000000400), 0x3, 0x800) syz_open_dev$mouse(&(0x7f0000000440), 0x4, 0x0) syz_open_dev$mouse(&(0x7f0000000480), 0x4, 0x1) syz_open_dev$mouse(&(0x7f00000004c0), 0x4, 0x2) syz_open_dev$mouse(&(0x7f0000000500), 0x4, 0x800) 762.88522ms ago: executing program 0 (id=124): setfsgid(0x0) 762.24578ms ago: executing program 3 (id=125): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/input/mice', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/mice', 0x800, 0x0) 761.89002ms ago: executing program 1 (id=126): msgrcv(0x0, &(0x7f0000000000), 0x0, 0x0, 0x0) 746.829181ms ago: executing program 2 (id=127): openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey', 0x800, 0x0) 746.514821ms ago: executing program 0 (id=128): syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000080), 0x0, 0x1) syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x2) syz_open_dev$I2C(&(0x7f0000000100), 0x0, 0x800) syz_open_dev$I2C(&(0x7f0000000140), 0x1, 0x0) syz_open_dev$I2C(&(0x7f0000000180), 0x1, 0x1) syz_open_dev$I2C(&(0x7f00000001c0), 0x1, 0x2) syz_open_dev$I2C(&(0x7f0000000200), 0x1, 0x800) syz_open_dev$I2C(&(0x7f0000000240), 0x2, 0x0) syz_open_dev$I2C(&(0x7f0000000280), 0x2, 0x1) syz_open_dev$I2C(&(0x7f00000002c0), 0x2, 0x2) syz_open_dev$I2C(&(0x7f0000000300), 0x2, 0x800) syz_open_dev$I2C(&(0x7f0000000340), 0x3, 0x0) syz_open_dev$I2C(&(0x7f0000000380), 0x3, 0x1) syz_open_dev$I2C(&(0x7f00000003c0), 0x3, 0x2) syz_open_dev$I2C(&(0x7f0000000400), 0x3, 0x800) syz_open_dev$I2C(&(0x7f0000000440), 0x4, 0x0) syz_open_dev$I2C(&(0x7f0000000480), 0x4, 0x1) syz_open_dev$I2C(&(0x7f00000004c0), 0x4, 0x2) syz_open_dev$I2C(&(0x7f0000000500), 0x4, 0x800) 746.214421ms ago: executing program 3 (id=130): pause() 745.918511ms ago: executing program 1 (id=131): syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x1) syz_open_dev$dvb_frontend(&(0x7f00000000c0), 0x0, 0x2) syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x0, 0x800) syz_open_dev$dvb_frontend(&(0x7f0000000140), 0xa, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000180), 0xa, 0x1) syz_open_dev$dvb_frontend(&(0x7f00000001c0), 0xa, 0x2) syz_open_dev$dvb_frontend(&(0x7f0000000200), 0xa, 0x800) syz_open_dev$dvb_frontend(&(0x7f0000000240), 0x14, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000280), 0x14, 0x1) syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x14, 0x2) syz_open_dev$dvb_frontend(&(0x7f0000000300), 0x14, 0x800) syz_open_dev$dvb_frontend(&(0x7f0000000340), 0x1e, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000380), 0x1e, 0x1) syz_open_dev$dvb_frontend(&(0x7f00000003c0), 0x1e, 0x2) syz_open_dev$dvb_frontend(&(0x7f0000000400), 0x1e, 0x800) syz_open_dev$dvb_frontend(&(0x7f0000000440), 0x28, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000480), 0x28, 0x1) syz_open_dev$dvb_frontend(&(0x7f00000004c0), 0x28, 0x2) syz_open_dev$dvb_frontend(&(0x7f0000000500), 0x28, 0x800) 745.781591ms ago: executing program 2 (id=132): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ndctl0', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ndctl0', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ndctl0', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ndctl0', 0x800, 0x0) 745.688031ms ago: executing program 0 (id=133): socket$inet_dccp(0x2, 0x6, 0x0) 723.961481ms ago: executing program 2 (id=135): openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self', 0x800, 0x0) 723.649231ms ago: executing program 1 (id=136): socket$tipc(0x1e, 0x2, 0x0) 723.552741ms ago: executing program 4 (id=137): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/capi20', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/capi20', 0x800, 0x0) 723.410771ms ago: executing program 2 (id=139): socket$nl_sock_diag(0x10, 0x3, 0x4) 668.778493ms ago: executing program 4 (id=140): fstatfs(0xffffffffffffffff, &(0x7f0000000000)) 445.799949ms ago: executing program 0 (id=143): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 445.444798ms ago: executing program 1 (id=138): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 428.961698ms ago: executing program 4 (id=142): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 126.056477ms ago: executing program 2 (id=144): socket$nl_rdma(0x10, 0x3, 0x14) 82.048388ms ago: executing program 2 (id=148): socket$nl_xfrm(0x10, 0x3, 0x6) 20.643389ms ago: executing program 1 (id=147): clock_gettime(0x0, &(0x7f0000000000)) 18.913699ms ago: executing program 0 (id=145): fremovexattr(0xffffffffffffffff, &(0x7f0000000000)) 14.537699ms ago: executing program 1 (id=150): io_destroy(0x0) 12.762369ms ago: executing program 4 (id=146): syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x1) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x2) syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x800) 5.52438ms ago: executing program 0 (id=151): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video2', 0x2, 0x0) 5.45461ms ago: executing program 4 (id=152): futimesat(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000000)) 0s ago: executing program 4 (id=153): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/acpi_thermal_rel', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/acpi_thermal_rel', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/acpi_thermal_rel', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/acpi_thermal_rel', 0x800, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.171' (ED25519) to the list of known hosts. [ 34.096329][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 34.096346][ T28] audit: type=1400 audit(1785955822.220:126): avc: denied { mounton } for pid=3284 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 34.126147][ T28] audit: type=1400 audit(1785955822.250:127): avc: denied { mount } for pid=3284 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.128518][ T3284] cgroup: Unknown subsys name 'net' [ 34.154252][ T28] audit: type=1400 audit(1785955822.280:128): avc: denied { unmount } for pid=3284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.270924][ T3284] cgroup: Unknown subsys name 'cpuset' [ 34.277553][ T3284] cgroup: Unknown subsys name 'rlimit' [ 34.391954][ T28] audit: type=1400 audit(1785955822.520:129): avc: denied { setattr } for pid=3284 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 34.430653][ T28] audit: type=1400 audit(1785955822.520:130): avc: denied { create } for pid=3284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.451611][ T28] audit: type=1400 audit(1785955822.520:131): avc: denied { write } for pid=3284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.455191][ T3287] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 34.472837][ T28] audit: type=1400 audit(1785955822.520:132): avc: denied { read } for pid=3284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.501374][ T28] audit: type=1400 audit(1785955822.530:133): avc: denied { mounton } for pid=3284 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 34.519851][ T3284] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 34.527000][ T28] audit: type=1400 audit(1785955822.530:134): avc: denied { mount } for pid=3284 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 34.559187][ T28] audit: type=1400 audit(1785955822.540:135): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 37.008013][ T3327] mmap: syz.0.22 (3327) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 37.324996][ T3299] syz-executor (3299) used greatest stack depth: 11352 bytes left [ 37.534522][ T3454] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.051924][ T2981] ================================================================== [ 38.060117][ T2981] BUG: KCSAN: data-race in d_make_discardable / step_into_slowpath [ 38.068066][ T2981] [ 38.070478][ T2981] write to 0xffff88810597ba80 of 4 bytes by task 3285 on cpu 1: [ 38.078138][ T2981] d_make_discardable+0x4f/0x90 [ 38.083058][ T2981] simple_unlink+0x68/0x80 [ 38.087600][ T2981] shmem_unlink+0x12d/0x140 [ 38.092250][ T2981] vfs_unlink+0x1c3/0x490 [ 38.096608][ T2981] filename_unlinkat+0x1dc/0x410 [ 38.101740][ T2981] __se_sys_unlink+0x2b/0xe0 [ 38.106492][ T2981] __x64_sys_unlink+0x1f/0x30 [ 38.111275][ T2981] x64_sys_call+0x2eb6/0x3020 [ 38.115993][ T2981] do_syscall_64+0x136/0x3c0 [ 38.120601][ T2981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.126527][ T2981] [ 38.128853][ T2981] read to 0xffff88810597ba80 of 4 bytes by task 2981 on cpu 0: [ 38.136401][ T2981] step_into_slowpath+0x139/0x4c0 [ 38.141562][ T2981] path_lookupat+0x2eb/0x4c0 [ 38.146265][ T2981] filename_lookup+0x18f/0x390 [ 38.151053][ T2981] do_readlinkat+0x74/0x2f0 [ 38.155601][ T2981] __x64_sys_readlink+0x47/0x60 [ 38.160642][ T2981] x64_sys_call+0x2b51/0x3020 [ 38.165373][ T2981] do_syscall_64+0x136/0x3c0 [ 38.170003][ T2981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.176161][ T2981] [ 38.178493][ T2981] value changed: 0x08300080 -> 0x00004080 [ 38.184228][ T2981] [ 38.186570][ T2981] Reported by Kernel Concurrency Sanitizer on: [ 38.192749][ T2981] CPU: 0 UID: 0 PID: 2981 Comm: udevd Not tainted syzkaller #0 PREEMPT(lazy) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 38.201616][ T2981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 38.211689][ T2981] ==================================================================