last executing test programs: 1.62658763s ago: executing program 1 (id=271): r0 = socket$inet(0x2, 0x801, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r0, 0x1) 1.581799991s ago: executing program 1 (id=273): munlock(&(0x7f0000008000/0x3000)=nil, 0x3000) 1.581599781s ago: executing program 1 (id=275): mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x8, 0xfffffff5) mount(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='9p\x00', 0x0, &(0x7f0000000080)='trans=tcp,') 1.562588762s ago: executing program 1 (id=277): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000300)={0x19980330}, &(0x7f0000000440)) get_robust_list(r0, 0x0, 0x0) 1.465587864s ago: executing program 1 (id=281): r0 = memfd_create(&(0x7f0000000b00)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\x00\x0f\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10\x00\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xfa9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00', 0x6) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000100)={0x0, 0x2, 0x200000, 0x84}) 1.397821186s ago: executing program 1 (id=283): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r0, &(0x7f0000003040)=[{{0x0, 0x0, 0x0}, 0xfffffff8}], 0x4000051, 0x40002022, 0x0) 1.397595586s ago: executing program 3 (id=284): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 1.333439777s ago: executing program 3 (id=286): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000080)) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) mkdir(&(0x7f0000000080)='./file0\x00', 0x1ba) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0xa1}) mount$9p_tcp(&(0x7f0000000200), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x4000, &(0x7f0000000340)={'trans=tcp,', {'port', 0x3d, 0x4e24}}) 618.230314ms ago: executing program 0 (id=291): r0 = socket(0x15, 0x5, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt(r0, 0x200000000114, 0x2718, 0x0, &(0x7f0000000000)) 618.015985ms ago: executing program 0 (id=292): close(0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r0, &(0x7f0000000180)='r:s/p ./file0:0', 0xf) 595.210515ms ago: executing program 0 (id=293): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000840)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000940)={r1, 0x101}, 0x0, &(0x7f0000000080)="cb44032c2a3a518de9000000c11a536275a1d846d65e2988ef1a4992f9a2675b2853d82c107d0f9794bffcc824f2ff380028861c764fd00990b531004a27f0395fdb7d3b545b60ff5be75bcb1d85878c1cbdb120730ded7b4d10b0612763631dd3db62ddf7f799a4257d4bf67e86244beee88b1e3e415a5bac3ad4dea44fc08db9f71123d869a2e8fb3dbc3b2081647102254e6e9e7a9c19da1095090000000000000039b2c121f0adffeafb477423d888ac47c5853fdaca77fe2027fce5c0cdbb97e52a162d005de200420f14b17e9e2c91cdf1fc117894222831b09169eda2760a242296f20ef608c89420f90daf14c9d9c90a11545657b32608b2d24fab7286", 0x0) 564.749686ms ago: executing program 0 (id=294): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000012c0), r0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000001300)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) 454.120938ms ago: executing program 3 (id=295): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000100)={0x0, {{0xa, 0x0, 0x4000001, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000b00)={0x2, {{0xa, 0x4620, 0x403, @mcast2, 0x7f}}}, 0x90) 453.697878ms ago: executing program 0 (id=297): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x38, 0x7, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xc1ca}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xc}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x40090}, 0x20004000) 453.536698ms ago: executing program 0 (id=298): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) fcntl$lock(r0, 0x6, &(0x7f00000000c0)={0x0, 0x2, 0x4, 0x73e9}) 453.230238ms ago: executing program 3 (id=300): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x7fff}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x6, 0x6, @remote}, 0x14) sendmmsg$sock(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x1000000}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@txtime={{0x18, 0x1, 0x3d, 0x4c}}], 0x6}}], 0x4000114, 0x40500f0) 434.917819ms ago: executing program 3 (id=301): r0 = syz_clone(0x6a00211, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r0, &(0x7f0000000100), 0x61000004, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) 231.876554ms ago: executing program 3 (id=307): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x19}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='veth0_macvtap\x00', 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NFT_BATCH(r1, &(0x7f00000006c0)={0x0, 0x34, &(0x7f0000000640)={&(0x7f0000000400)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x240088c8}, 0x4000000) syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r1) 127.639666ms ago: executing program 2 (id=314): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNAPSHOT_S2RAM(r0, 0x330b) 33.922619ms ago: executing program 2 (id=315): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000580), &(0x7f00000005c0)={'fscrypt:', @desc3}, &(0x7f0000000600)={0x0, "af90151a5dd598c6a6f07a701cc150dd4f2639568ea6baa1edc5b8c720c51d5c438f08f1377c60f83d32830646581c116f58f00751fea1d8862e29ad015b0985", 0x28}, 0x48, r0) add_key$keyring(&(0x7f0000000a00), &(0x7f0000000a40)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3e}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x32, 0x30, 0x62, 0x67, 0x30, 0x30, 0x0, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x34, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3c}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x38, 0x38, 0x30, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x20040}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x39, 0x64, 0x30, 0x30, 0x30, 0x30, 0x39, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f00000006c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000680), &(0x7f0000000740)={'fscrypt:', @auto=[0x61, 0x64, 0x64, 0x30, 0x31, 0x63, 0x65, 0x37, 0x64, 0x64, 0x30, 0x62, 0x37, 0x37, 0x38, 0x62]}, &(0x7f0000000780)={0x0, "9eb80bc420a49f0c0f923e8fefde056d5d95188f4327ec141f5aaf96397ffcc9c2e53ef8af76421bc267a6c0796d017a9081d53c9fcb0d7340a101f50c448c73", 0x2b}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00112233445566778899aa08000000000000005566778899aabbccddffff0011223344556677886a84bd6d0000dd5aff00bd000000848800", 0x42}, 0x48, r0) add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='c', 0x1, r0) 33.695119ms ago: executing program 2 (id=316): r0 = gettid() r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r0, r1, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) 33.576199ms ago: executing program 2 (id=317): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000001400)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x8, 0xe2, 0x0, 0x0, 0x6d, 0x7, 0xb, 0xb, 0x5, 0x0}) 16.899269ms ago: executing program 2 (id=318): r0 = socket(0x15, 0x80005, 0x0) getsockopt(r0, 0x200000000114, 0x271d, 0xffffffffffffffff, &(0x7f0000000500)) 0s ago: executing program 2 (id=319): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000000)={r1}, &(0x7f0000000040)={'enc=', 'pkcs1', ' hash=', {'sha512\x00'}}, 0x0, &(0x7f0000000440)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.69' (ED25519) to the list of known hosts. [ 28.328199][ T36] audit: type=1400 audit(1786911683.330:64): avc: denied { mounton } for pid=287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.331772][ T287] cgroup: Unknown subsys name 'net' [ 28.350889][ T36] audit: type=1400 audit(1786911683.330:65): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.378388][ T36] audit: type=1400 audit(1786911683.370:66): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.378936][ T287] cgroup: Unknown subsys name 'devices' [ 28.502750][ T287] cgroup: Unknown subsys name 'hugetlb' [ 28.508395][ T287] cgroup: Unknown subsys name 'rlimit' [ 28.643333][ T36] audit: type=1400 audit(1786911683.650:67): avc: denied { setattr } for pid=287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.666556][ T36] audit: type=1400 audit(1786911683.650:68): avc: denied { mounton } for pid=287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.691338][ T36] audit: type=1400 audit(1786911683.650:69): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 28.735121][ T289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 28.744039][ T36] audit: type=1400 audit(1786911683.750:70): avc: denied { relabelto } for pid=289 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.769554][ T36] audit: type=1400 audit(1786911683.750:71): avc: denied { write } for pid=289 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.781204][ T287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.795210][ T36] audit: type=1400 audit(1786911683.780:72): avc: denied { read } for pid=287 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.829433][ T36] audit: type=1400 audit(1786911683.780:73): avc: denied { open } for pid=287 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.284472][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.291734][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.298883][ T297] bridge_slave_0: entered allmulticast mode [ 30.305440][ T297] bridge_slave_0: entered promiscuous mode [ 30.316509][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.323834][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.331052][ T297] bridge_slave_1: entered allmulticast mode [ 30.337333][ T297] bridge_slave_1: entered promiscuous mode [ 30.384394][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.391512][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.398597][ T295] bridge_slave_0: entered allmulticast mode [ 30.404999][ T295] bridge_slave_0: entered promiscuous mode [ 30.414301][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.421410][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.428507][ T295] bridge_slave_1: entered allmulticast mode [ 30.434893][ T295] bridge_slave_1: entered promiscuous mode [ 30.446939][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.454381][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.461687][ T294] bridge_slave_0: entered allmulticast mode [ 30.467938][ T294] bridge_slave_0: entered promiscuous mode [ 30.477232][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.484325][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.491599][ T294] bridge_slave_1: entered allmulticast mode [ 30.497852][ T294] bridge_slave_1: entered promiscuous mode [ 30.506934][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.514085][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.521263][ T296] bridge_slave_0: entered allmulticast mode [ 30.527557][ T296] bridge_slave_0: entered promiscuous mode [ 30.567224][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.574335][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.581482][ T296] bridge_slave_1: entered allmulticast mode [ 30.587761][ T296] bridge_slave_1: entered promiscuous mode [ 30.715138][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.722252][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.729592][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.736639][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.745160][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.752239][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.759598][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.766648][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.786183][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.793288][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.800722][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.807778][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.818042][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.825175][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.832584][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.839664][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.873697][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.881618][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.889129][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.896713][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.904126][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.911812][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.919095][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.926463][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.943464][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.950584][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.961229][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.968326][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.991907][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.999156][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.006897][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.013983][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.031458][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.038696][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.046374][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.053458][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.071136][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.078235][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.103504][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.110619][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.145326][ T297] veth0_vlan: entered promiscuous mode [ 31.165438][ T296] veth0_vlan: entered promiscuous mode [ 31.176181][ T295] veth0_vlan: entered promiscuous mode [ 31.191673][ T297] veth1_macvtap: entered promiscuous mode [ 31.203434][ T296] veth1_macvtap: entered promiscuous mode [ 31.215010][ T295] veth1_macvtap: entered promiscuous mode [ 31.232977][ T294] veth0_vlan: entered promiscuous mode [ 31.267848][ T294] veth1_macvtap: entered promiscuous mode [ 31.277983][ T297] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.562399][ T341] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 31.939478][ T31] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 32.049462][ T313] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 32.066114][ T360] process 'syz.3.12' launched '/dev/fd/12' with NULL argv: empty string added [ 32.090175][ T31] usb 2-1: not running at top speed; connect to a high speed hub [ 32.099013][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 32.109606][ T31] usb 2-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 32.119212][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.130694][ T31] usb 2-1: Found UVC 1.00 device (046d:0825) [ 32.189512][ T362] fuseblk: Bad value for 'source' [ 32.222025][ T313] usb 1-1: config 24 has an invalid descriptor of length 0, skipping remainder of the config [ 32.233570][ T313] usb 1-1: config 24 has 0 interfaces, different from the descriptor's value: 1 [ 32.253477][ T313] usb 1-1: string descriptor 0 read error: -22 [ 32.262072][ T313] usb 1-1: New USB device found, idVendor=10c4, idProduct=818b, bcdDevice= 8.17 [ 32.283967][ T313] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.308650][ T374] syz.2.18 uses obsolete (PF_INET,SOCK_PACKET) [ 32.337458][ T376] tipc: Started in network mode [ 32.342473][ T376] tipc: Node identity 1279444e8f5d, cluster identity 4711 [ 32.350291][ T376] tipc: Enabled bearer , priority 0 [ 32.366283][ T376] kvm: kvm [375]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010006) = 0x1001 [ 32.379756][ T376] tipc: Disabling bearer [ 32.513735][ T313] usb 1-1: USB disconnect, device number 2 [ 32.519807][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 32.531116][ T31] usb 2-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 32.541209][ T31] uvcvideo 2-1:1.1: No frame descriptor found for the default format. [ 32.549481][ T31] uvcvideo 2-1:1.1: Failed to initialize the device (-22). [ 32.669452][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 32.675898][ T9] usb 4-1: config 0 interface 0 altsetting 88 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 32.689288][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 32.696040][ T9] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 32.705894][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.714735][ T9] usb 4-1: config 0 descriptor?? [ 32.729527][ T63] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 32.742882][ T31] usb 2-1: USB disconnect, device number 2 [ 32.881002][ T63] usb 3-1: unable to get BOS descriptor or descriptor too short [ 32.889776][ T63] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 32.900791][ T63] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 119, changing to 7 [ 32.913680][ T63] usb 3-1: New USB device found, idVendor=1235, idProduct=800c, bcdDevice= 0.40 [ 32.922899][ T63] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.931189][ T63] usb 3-1: Product: syz [ 32.935411][ T63] usb 3-1: Manufacturer: syz [ 32.940437][ T63] usb 3-1: SerialNumber: syz [ 33.167863][ T63] usb 3-1: Can't get UAC3 power state for id 10 [ 33.175588][ T63] usb 3-1: 2:0: failed to get current value for ch 0 (-71) [ 33.185897][ T63] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 33.232621][ T63] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 33.244006][ T63] usb 3-1: USB disconnect, device number 2 [ 33.289397][ T313] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 33.300752][ T364] udevd[364]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 33.469489][ T313] usb 1-1: device descriptor read/64, error -71 [ 33.510078][ T36] kauditd_printk_skb: 82 callbacks suppressed [ 33.510114][ T36] audit: type=1400 audit(1786911688.520:156): avc: denied { node_bind } for pid=390 comm="syz.1.24" saddr=::ffff:224.0.0.1 src=52770 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 33.574216][ T36] audit: type=1400 audit(1786911688.580:157): avc: denied { name_bind } for pid=390 comm="syz.1.24" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 33.595752][ T36] audit: type=1400 audit(1786911688.580:158): avc: denied { write } for pid=390 comm="syz.1.24" name="tcp6" dev="proc" ino=4026532353 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 33.715450][ T36] audit: type=1400 audit(1786911688.720:159): avc: denied { create } for pid=393 comm="syz.2.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 33.741715][ T313] usb 1-1: device descriptor read/64, error -71 [ 33.751777][ T36] audit: type=1400 audit(1786911688.760:160): avc: denied { read } for pid=397 comm="syz.2.26" dev="nsfs" ino=4026532467 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 33.773548][ T36] audit: type=1400 audit(1786911688.760:161): avc: denied { open } for pid=397 comm="syz.2.26" path="net:[4026532467]" dev="nsfs" ino=4026532467 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 33.796583][ T36] audit: type=1400 audit(1786911688.760:162): avc: denied { bind } for pid=397 comm="syz.2.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 33.816360][ T36] audit: type=1400 audit(1786911688.760:163): avc: denied { write } for pid=397 comm="syz.2.26" path="socket:[3847]" dev="sockfs" ino=3847 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 33.840197][ T36] audit: type=1400 audit(1786911688.760:164): avc: denied { write } for pid=397 comm="syz.2.26" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 33.863559][ T36] audit: type=1400 audit(1786911688.760:165): avc: denied { map } for pid=397 comm="syz.2.26" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 33.989409][ T313] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 34.119398][ T313] usb 1-1: device descriptor read/64, error -71 [ 34.359744][ T313] usb 1-1: device descriptor read/64, error -71 [ 34.519640][ T313] usb usb1-port1: attempt power cycle [ 34.859382][ T313] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 34.880655][ T313] usb 1-1: device descriptor read/8, error -71 [ 35.010786][ T313] usb 1-1: device descriptor read/8, error -71 [ 35.259423][ T313] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 35.280610][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 35.296954][ T313] usb 1-1: device descriptor read/8, error -71 [ 35.303438][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 35.312651][ T9] usb 4-1: USB disconnect, device number 2 [ 35.471775][ T313] usb 1-1: device descriptor read/8, error -71 [ 35.580631][ T313] usb usb1-port1: unable to enumerate USB device [ 35.615973][ T450] ======================================================= [ 35.615973][ T450] WARNING: The mand mount option has been deprecated and [ 35.615973][ T450] and is ignored by this kernel. Remove the mand [ 35.615973][ T450] option from the mount to silence this warning. [ 35.615973][ T450] ======================================================= [ 35.656768][ T450] cgroup: Unknown subsys name 'hugetlb' [ 35.979378][ T313] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 36.148056][ T500] capability: warning: `syz.1.71' uses deprecated v2 capabilities in a way that may be insecure [ 36.180486][ T502] netlink: 8 bytes leftover after parsing attributes in process `syz.1.72'. [ 36.339052][ T515] tipc: Started in network mode [ 36.349886][ T515] tipc: Node identity fef4f693b2ac, cluster identity 4711 [ 36.357149][ T515] tipc: Enabled bearer , priority 10 [ 36.373017][ T514] tipc: Resetting bearer [ 36.382232][ T514] tipc: Disabling bearer [ 36.395014][ T523] raw_sendmsg: syz.1.82 forgot to set AF_INET. Fix it! [ 36.693237][ T559] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=559 comm=syz.2.98 [ 36.906884][ T578] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=546 sclass=netlink_route_socket pid=578 comm=syz.1.107 [ 38.003147][ T667] 9pnet: Could not find request transport: vÓÆñtcp [ 38.622467][ T36] kauditd_printk_skb: 65 callbacks suppressed [ 38.622489][ T36] audit: type=1400 audit(1786911693.630:231): avc: denied { write } for pid=697 comm="syz.2.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 38.864796][ T36] audit: type=1400 audit(1786911693.870:232): avc: denied { mount } for pid=714 comm="syz.1.172" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 38.893044][ T36] audit: type=1400 audit(1786911693.890:233): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 38.998638][ T36] audit: type=1400 audit(1786911694.000:234): avc: denied { accept } for pid=730 comm="syz.2.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 39.073479][ T36] audit: type=1400 audit(1786911694.080:235): avc: denied { bind } for pid=738 comm="syz.0.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 39.114879][ T36] audit: type=1400 audit(1786911694.120:236): avc: denied { read write } for pid=740 comm="syz.2.184" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 39.156693][ T36] audit: type=1400 audit(1786911694.120:237): avc: denied { open } for pid=740 comm="syz.2.184" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 39.192983][ T36] audit: type=1400 audit(1786911694.190:238): avc: denied { read } for pid=746 comm="syz.2.187" name="event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 39.278266][ T756] SELinux: Context system_u:object_r:framebuf_device_t:s0 is not valid (left unmapped). [ 39.302939][ T36] audit: type=1400 audit(1786911694.250:239): avc: denied { ioctl } for pid=750 comm="syz.2.190" path="mnt:[4026532441]" dev="nsfs" ino=4026532441 ioctlcmd=0xb705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 39.327923][ T36] audit: type=1400 audit(1786911694.280:240): avc: denied { relabelfrom } for pid=755 comm="syz.1.191" name="UNIX" dev="sockfs" ino=5434 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 39.515676][ T783] tipc: Failed to remove unknown binding: 66,0,0/0:1826583238/1826583239 [ 39.524550][ T783] tipc: Failed to remove unknown binding: 66,0,0/0:1826583238/1826583239 [ 39.530040][ T781] netlink: 200 bytes leftover after parsing attributes in process `syz.1.201'. [ 39.734873][ T801] netlink: 20 bytes leftover after parsing attributes in process `syz.1.210'. [ 40.955294][ T857] netlink: 12 bytes leftover after parsing attributes in process `syz.1.234'. [ 41.656461][ T933] 9pnet: Could not find request transport: vÓÆñtcp [ 42.026425][ T953] loop7: detected capacity change from 0 to 7 [ 42.035040][ T952] capability: warning: `syz.1.277' uses 32-bit capabilities (legacy support in use) [ 42.054578][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 42.068917][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 42.078145][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 42.086278][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 42.095485][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 42.104583][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 42.113810][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 42.122034][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 42.131234][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 42.139503][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 42.148708][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 42.864815][ T977] 9pnet_fd: p9_fd_create_tcp (977): problem connecting socket to 127.0.0.1 [ 43.589885][ T1043] ------------[ cut here ]------------ [ 43.595498][ T1043] WARNING: CPU: 1 PID: 1043 at crypto/rsa-pkcs1pad.c:560 pkcs1pad_verify+0x4e4/0x700 [ 43.605085][ T1043] Modules linked in: [ 43.609051][ T1043] CPU: 1 UID: 0 PID: 1043 Comm: syz.2.319 Not tainted syzkaller #0 119f1c0cd44458c2ddc7f806e6d4d2dd11ae7dae [ 43.620610][ T1043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 43.630756][ T1043] RIP: 0010:pkcs1pad_verify+0x4e4/0x700 [ 43.636396][ T1043] Code: 11 00 00 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 4a 6b 06 ff 0f 0b b8 ea ff ff ff eb de e8 3c 6b 06 ff <0f> 0b b8 ea ff ff ff eb d0 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 5d [ 43.656094][ T1043] RSP: 0018:ffffc9000f2e7728 EFLAGS: 00010283 [ 43.662250][ T1043] RAX: ffffffff82810684 RBX: ffff88810ef82c00 RCX: 0000000000080000 [ 43.670295][ T1043] RDX: ffffc90002274000 RSI: 0000000000000bee RDI: 0000000000000bef [ 43.678359][ T1043] RBP: ffffc9000f2e7770 R08: ffffc9000f2e782f R09: 0000000000000000 [ 43.686432][ T1043] R10: 0000000000000000 R11: ffffffff828101a0 R12: ffff88810d787708 [ 43.694497][ T1043] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff88810ef82c38 [ 43.702545][ T1043] FS: 00007ff1692456c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 43.711636][ T1043] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 43.718362][ T1043] CR2: 0000001b2f423ffc CR3: 00000001303d0000 CR4: 00000000003526b0 [ 43.726451][ T1043] Call Trace: [ 43.729791][ T1043] [ 43.732762][ T1043] ? __asan_memcpy+0x5a/0x80 [ 43.737396][ T1043] crypto_sig_verify+0x1cd/0x260 [ 43.742426][ T1043] ? __cfi_crypto_sig_verify+0x10/0x10 [ 43.747957][ T1043] ? crypto_sig_set_pubkey+0x9a/0xb0 [ 43.753322][ T1043] public_key_verify_signature+0x654/0xa40 [ 43.759192][ T1043] ? __cfi_public_key_verify_signature+0x10/0x10 [ 43.765606][ T1043] ? keyctl_pkey_params_get+0x3b8/0x4c0 [ 43.771235][ T1043] ? __cfi_public_key_verify_signature_2+0x10/0x10 [ 43.777803][ T1043] public_key_verify_signature_2+0x47/0x60 [ 43.783709][ T1043] verify_signature+0xf0/0x120 [ 43.788534][ T1043] asymmetric_key_verify_signature+0x160/0x200 [ 43.795837][ T1043] ? __cfi_asymmetric_key_verify_signature+0x10/0x10 [ 43.802780][ T1043] ? should_fail+0xf/0x20 [ 43.807175][ T1043] ? __kasan_check_write+0x18/0x20 [ 43.812366][ T1043] ? _copy_from_user+0x87/0xa0 [ 43.817194][ T1043] ? memdup_user+0xb1/0x170 [ 43.821769][ T1043] keyctl_pkey_verify+0x203/0x290 [ 43.826856][ T1043] ? __cfi_keyctl_pkey_verify+0x10/0x10 [ 43.832512][ T1043] __se_sys_keyctl+0x743/0xe40 [ 43.837374][ T1043] ? __x64_sys_keyctl+0xf0/0xf0 [ 43.842307][ T1043] ? __cfi_do_futex+0x10/0x10 [ 43.847044][ T1043] ? kvfree_sensitive+0x51/0x70 [ 43.851987][ T1043] ? __se_sys_futex+0x13c/0x320 [ 43.857342][ T1043] ? xfd_validate_state+0x68/0x140 [ 43.862582][ T1043] ? __kasan_check_write+0x18/0x20 [ 43.867747][ T1043] ? fpregs_restore_userregs+0x11c/0x260 [ 43.873583][ T1043] __x64_sys_keyctl+0xc3/0xf0 [ 43.878332][ T1043] x64_sys_call+0x996/0x2ee0 [ 43.883022][ T1043] do_syscall_64+0x57/0xf0 [ 43.887504][ T1043] ? clear_bhb_loop+0x50/0xa0 [ 43.892323][ T1043] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 43.898274][ T1043] RIP: 0033:0x7ff16839e0d9 [ 43.902761][ T1043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.922427][ T1043] RSP: 002b:00007ff169245028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 43.930954][ T1043] RAX: ffffffffffffffda RBX: 00007ff168625fa0 RCX: 00007ff16839e0d9 [ 43.938959][ T1043] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 000000000000001c [ 43.947124][ T1043] RBP: 00007ff168435024 R08: 0000200000000440 R09: 0000000000000000 [ 43.955191][ T1043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 43.963252][ T1043] R13: 00007ff168626038 R14: 00007ff168625fa0 R15: 00007ffcb84d4e78 [ 43.971308][ T1043] [ 43.974368][ T1043] ---[ end trace 0000000000000000 ]---