last executing test programs: 2.396196783s ago: executing program 0 (id=270): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4b, 0x0, 0x0) writev(r0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) close(0x4) 2.254962897s ago: executing program 0 (id=271): socket(0x1e, 0x4, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000a0)) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r0, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) 2.238793657s ago: executing program 0 (id=272): r0 = syz_usb_connect$uac3(0x2, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x17cc, 0x1011, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x7f, 0xc0, 0x8, {0x8, 0xb, 0x0, 0x1, 0x1, 0x1, 0x30, 0x23}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x60, 0x25, 0x3, 0x2, {0xa, 0x25, 0x25, 0x405, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x74, 0x6, 0xc0, {0xa, 0x25, 0x25, 0x7ffffffc, 0x2, 0xbe1}}}}}}}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = memfd_secret(0x0) ftruncate(r1, 0x6800000000000000) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000480)={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 819.35009ms ago: executing program 0 (id=310): r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) landlock_create_ruleset(&(0x7f0000000080)={0x8000, 0x300}, 0x18, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000001500)={@my=0x1}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001"], 0x64}}, 0x40110) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092}) r2 = eventfd(0xf7b2) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000040)={0x0, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 766.289272ms ago: executing program 0 (id=313): r0 = syz_create_resource$binfmt(&(0x7f00000003c0)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f0000000340)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="290000000400000000000000000000000100000000000008080000000000000001"], 0x29) 729.159033ms ago: executing program 0 (id=316): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x80}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 517.407698ms ago: executing program 3 (id=326): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000380)={0x2, 0x25000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x58000, 0x12000, 0x1}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000180)={0xeeef0000, 0x10000, 0x1}) 433.120419ms ago: executing program 3 (id=329): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x35, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x20}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x6f, 0x30, 0x30, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x63, 0x30, 0x30, 0x30, 0x31, 0x30, 0x63, 0x66, 0x30, 0x30, 0x61, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x65, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) 413.55103ms ago: executing program 3 (id=330): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x70}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0x7) setuid(r6) syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 372.866381ms ago: executing program 1 (id=333): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x6, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x35, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x20}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x34, 0x34, 0x30, 0x30, 0x32, 0x30, 0x30, 0x30, 0x65, 0x0, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x33, 0x39, 0x61, 0x62, 0x30, 0x30, 0x30, 0x61, 0x30, 0x30, 0x30, 0x30, 0x37, 0x62]}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x5a, 0x30, 0x64, 0x39, 0x30, 0x30, 0x30, 0x30, 0x38, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x33, 0x30, 0x30, 0x65, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccdceeff0011223344556613be755f104f6abfff", 0x3d}, 0x48, r0) request_key(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, r0) 359.424281ms ago: executing program 1 (id=334): pipe(&(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x58}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r7, r8, &(0x7f0000000140)={0x0, 0xba1d, 0x4000, 0x2, 0x3, 0x0, r2}, &(0x7f0000000540)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcc50, 0x800, 0x1, 0xe8, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x267e, 0x200, 0x1, 0x15c, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7f69, 0x4, 0x1, 0x3d4, 0x0, r6}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe8e3, 0x8000, 0x0, 0x148, 0x0, r4}}], 0x4, 0x0, 0x0) syz_ublk_setup_queues(r10, r8, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x81}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x3000002, 0x91, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdc67, 0x2000, 0x4003bfff, 0x802b9, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d, 0x0, r10}}], 0x1, 0x0, 0x0) 324.478422ms ago: executing program 3 (id=335): socket(0x1e, 0x4, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000a0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r0, 0x0, 0x0) 297.141473ms ago: executing program 3 (id=336): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4b, 0x0, 0x0) writev(r0, &(0x7f0000001400), 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) close(0x4) 296.608363ms ago: executing program 1 (id=337): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x8}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e65, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) write(r0, &(0x7f0000000200)="89", 0xffe3) 273.407783ms ago: executing program 1 (id=338): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) signalfd4(r0, 0x0, 0x0, 0x800) close_range(r1, 0xffffffffffffffff, 0x0) 251.729114ms ago: executing program 1 (id=339): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x62, 0x66, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x64, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x20}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000005c0)={'fscrypt:', @auto=[0x37, 0x36, 0x31, 0x37, 0x66, 0x36, 0x30, 0x61, 0x122e50c9cecbd0b3, 0x37, 0x39, 0x32, 0x66, 0x30, 0x65, 0x36]}, &(0x7f0000000780)={0x0, "1b699af42db82c6710f15d09fa0ede2b461f72d024151675e76fedfc6ce85406fac0c4833efb1d72293c4e60c0cadb646c435e077ecbb2e7968117a70a9a1090", 0x2d}, 0x48, r0) add_key$fscrypt_v1(0x0, &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x0, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x31, 0x35, 0x30, 0x30, 0x34, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x33, 0x39, 0x61, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x62, 0x66, 0x30, 0x30, 0x30, 0x63, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x41}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x32, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x65, 0x64, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) keyctl$unlink(0x9, r1, r0) 237.907784ms ago: executing program 1 (id=340): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) landlock_create_ruleset(&(0x7f0000000080)={0x8000, 0x300}, 0x18, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000001500)={@my=0x1}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001"], 0x64}}, 0x40110) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092}) r2 = eventfd(0xf7b2) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000040)={0x0, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 174.217896ms ago: executing program 2 (id=343): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000000)={'vlan0\x00', @multicast}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) 154.563256ms ago: executing program 2 (id=344): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x70}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0x7) setuid(r6) syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 105.109038ms ago: executing program 2 (id=345): socket(0x1e, 0x4, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000a0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r0, 0x0, 0x0) 62.528568ms ago: executing program 2 (id=346): pipe(&(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x58}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r6, r7, &(0x7f0000000140)={0x0, 0xba1d, 0x4000, 0x2, 0x3, 0x0, r2}, &(0x7f0000000540)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcc50, 0x800, 0x1, 0xe8, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x267e, 0x200, 0x1, 0x15c, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7f69, 0x4, 0x1, 0x3d4}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe8e3, 0x8000, 0x0, 0x148, 0x0, r4}}], 0x4, 0x0, 0x0) syz_ublk_setup_queues(r9, r7, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x81}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x3000002, 0x91, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdc67, 0x2000, 0x4003bfff, 0x802b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d, 0x0, r9}}], 0x1, 0x0, 0x0) 62.059699ms ago: executing program 2 (id=347): creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) mkdir(&(0x7f00000000c0)='./bus\x00', 0x13e) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) 47.953919ms ago: executing program 2 (id=348): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x62, 0x66, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x64, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x20}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000005c0)={'fscrypt:', @auto=[0x37, 0x36, 0x31, 0x37, 0x66, 0x36, 0x30, 0x61, 0x122e50c9cecbd0b3, 0x37, 0x39, 0x32, 0x66, 0x30, 0x65, 0x36]}, &(0x7f0000000780)={0x0, "1b699af42db82c6710f15d09fa0ede2b461f72d024151675e76fedfc6ce85406fac0c4833efb1d72293c4e60c0cadb646c435e077ecbb2e7968117a70a9a1090", 0x2d}, 0x48, r0) add_key$fscrypt_v1(0x0, &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x0, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x31, 0x35, 0x30, 0x30, 0x34, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x33, 0x39, 0x61, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x62, 0x66, 0x30, 0x30, 0x30, 0x63, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x41}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x32, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x65, 0x64, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) keyctl$unlink(0x9, r1, r0) 0s ago: executing program 3 (id=349): fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') lseek(r0, 0xffffffffffffffff, 0x1) write$FUSE_ATTR(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.134' (ED25519) to the list of known hosts. [ 27.308893][ T36] audit: type=1400 audit(1786393611.999:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.310038][ T286] cgroup: Unknown subsys name 'net' [ 27.333717][ T36] audit: type=1400 audit(1786393611.999:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.362288][ T36] audit: type=1400 audit(1786393612.029:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.362531][ T286] cgroup: Unknown subsys name 'devices' [ 27.489472][ T286] cgroup: Unknown subsys name 'hugetlb' [ 27.495312][ T286] cgroup: Unknown subsys name 'rlimit' [ 27.608333][ T36] audit: type=1400 audit(1786393612.299:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.633295][ T36] audit: type=1400 audit(1786393612.299:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.660217][ T36] audit: type=1400 audit(1786393612.299:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 27.669127][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 27.693633][ T36] audit: type=1400 audit(1786393612.379:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.720173][ T36] audit: type=1400 audit(1786393612.379:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.759745][ T36] audit: type=1400 audit(1786393612.449:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.786396][ T36] audit: type=1400 audit(1786393612.449:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.786678][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.014619][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.022990][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.031346][ T294] bridge_slave_0: entered allmulticast mode [ 29.038419][ T294] bridge_slave_0: entered promiscuous mode [ 29.046337][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.054079][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.061501][ T294] bridge_slave_1: entered allmulticast mode [ 29.068136][ T294] bridge_slave_1: entered promiscuous mode [ 29.125170][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.132665][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.140502][ T293] bridge_slave_0: entered allmulticast mode [ 29.146939][ T293] bridge_slave_0: entered promiscuous mode [ 29.157838][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.165541][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.173393][ T293] bridge_slave_1: entered allmulticast mode [ 29.180795][ T293] bridge_slave_1: entered promiscuous mode [ 29.219898][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.227406][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.235018][ T295] bridge_slave_0: entered allmulticast mode [ 29.241701][ T295] bridge_slave_0: entered promiscuous mode [ 29.258117][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.265581][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.274442][ T295] bridge_slave_1: entered allmulticast mode [ 29.280994][ T295] bridge_slave_1: entered promiscuous mode [ 29.306807][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.314557][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.323306][ T296] bridge_slave_0: entered allmulticast mode [ 29.330721][ T296] bridge_slave_0: entered promiscuous mode [ 29.347671][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.355019][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.362709][ T296] bridge_slave_1: entered allmulticast mode [ 29.369284][ T296] bridge_slave_1: entered promiscuous mode [ 29.466935][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.474312][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.513864][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.521832][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.532066][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.542454][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.562885][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.570326][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.578205][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.585801][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.606027][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.613312][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.621303][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.629234][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.647163][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.655544][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.663379][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.672151][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.680661][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.688353][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.696060][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.706234][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.713410][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.730184][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.737437][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.771659][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.778941][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.786638][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.793823][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.802448][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.809876][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.817958][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.825169][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.856166][ T293] veth0_vlan: entered promiscuous mode [ 29.873631][ T295] veth0_vlan: entered promiscuous mode [ 29.896333][ T294] veth0_vlan: entered promiscuous mode [ 29.904775][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.911967][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.927398][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.935394][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.946329][ T293] veth1_macvtap: entered promiscuous mode [ 29.954823][ T295] veth1_macvtap: entered promiscuous mode [ 29.990536][ T294] veth1_macvtap: entered promiscuous mode [ 30.017418][ T293] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.024118][ T296] veth0_vlan: entered promiscuous mode [ 30.068599][ T296] veth1_macvtap: entered promiscuous mode [ 30.387817][ T45] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 30.416939][ T344] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 30.545474][ T310] Bluetooth: hci0: Frame reassembly failed (-84) [ 30.554105][ T348] Bluetooth: hci0: Frame reassembly failed (-84) [ 30.559010][ T45] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.578260][ T45] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.588993][ T45] usb 2-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 30.598902][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.078360][ T45] input: HID 04d8:c002 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/0003:04D8:C002.0001/input/input4 [ 31.091280][ T45] hid-picolcd 0003:04D8:C002.0001: No report with id 0x94 found [ 31.103473][ T45] hid-picolcd 0003:04D8:C002.0001: failed to configure display [ 32.233241][ T10] usb 2-1: USB disconnect, device number 2 [ 32.617622][ T349] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 33.916479][ T36] kauditd_printk_skb: 50 callbacks suppressed [ 33.916497][ T36] audit: type=1400 audit(1786393618.599:124): avc: denied { mount } for pid=513 comm="syz.0.74" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 33.957608][ T36] audit: type=1400 audit(1786393618.639:125): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 34.233818][ T36] audit: type=1400 audit(1786393618.919:126): avc: denied { mount } for pid=539 comm="syz.3.82" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 34.266701][ T36] audit: type=1400 audit(1786393618.949:127): avc: denied { search } for pid=539 comm="syz.3.82" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 34.289333][ T36] audit: type=1400 audit(1786393618.949:128): avc: denied { write } for pid=539 comm="syz.3.82" name="trace_marker" dev="tracefs" ino=1064 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 34.312847][ T36] audit: type=1400 audit(1786393618.949:129): avc: denied { open } for pid=539 comm="syz.3.82" path="/29/dir0/trace_marker" dev="tracefs" ino=1064 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 34.337826][ T36] audit: type=1400 audit(1786393618.949:130): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 35.798001][ T36] audit: type=1400 audit(1786393620.489:131): avc: denied { read write } for pid=665 comm="syz.3.124" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 35.828534][ T36] audit: type=1400 audit(1786393620.489:132): avc: denied { open } for pid=665 comm="syz.3.124" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 35.853234][ T36] audit: type=1400 audit(1786393620.489:133): avc: denied { map } for pid=665 comm="syz.3.124" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 35.887540][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 36.037544][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 36.046856][ T9] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 36.060757][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.069943][ T9] usb 2-1: Product: syz [ 36.074339][ T9] usb 2-1: Manufacturer: syz [ 36.079090][ T9] usb 2-1: SerialNumber: syz [ 36.904406][ T9] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 36.921981][ T9] usb 2-1: USB disconnect, device number 3 [ 37.497555][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 37.667426][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 37.673762][ T9] usb 3-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.685350][ T9] usb 3-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 37.702287][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 37.711789][ T9] usb 3-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 37.721674][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.731095][ T9] usb 3-1: config 0 descriptor?? [ 38.010420][ T801] input: syz1 as /devices/virtual/input/input5 [ 38.145144][ T9] kye 0003:0458:5015.0002: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 38.167821][ T9] kye 0003:0458:5015.0002: unknown main item tag 0x0 [ 38.175283][ T9] kye 0003:0458:5015.0002: unknown main item tag 0x0 [ 38.187415][ T9] kye 0003:0458:5015.0002: unknown main item tag 0x0 [ 38.197547][ T9] kye 0003:0458:5015.0002: unknown main item tag 0x0 [ 38.204841][ T9] kye 0003:0458:5015.0002: unknown main item tag 0x0 [ 38.211983][ T9] kye 0003:0458:5015.0002: unknown main item tag 0x0 [ 38.219169][ T9] kye 0003:0458:5015.0002: unknown main item tag 0x0 [ 38.226176][ T9] kye 0003:0458:5015.0002: unknown main item tag 0x0 [ 38.233628][ T9] kye 0003:0458:5015.0002: unknown main item tag 0x0 [ 38.256441][ T9] kye 0003:0458:5015.0002: unknown main item tag 0x0 [ 38.277571][ T9] kye 0003:0458:5015.0002: unknown main item tag 0x0 [ 38.284402][ T9] kye 0003:0458:5015.0002: unknown main item tag 0x0 [ 38.297530][ T9] kye 0003:0458:5015.0002: unknown main item tag 0x0 [ 38.304372][ T9] kye 0003:0458:5015.0002: unknown main item tag 0x0 [ 38.311254][ T9] kye 0003:0458:5015.0002: unknown main item tag 0x0 [ 38.318071][ T9] kye 0003:0458:5015.0002: unknown main item tag 0x0 [ 38.325043][ T9] kye 0003:0458:5015.0002: unknown main item tag 0x0 [ 38.331944][ T9] kye 0003:0458:5015.0002: unknown main item tag 0x0 [ 38.338871][ T9] kye 0003:0458:5015.0002: unknown main item tag 0x0 [ 38.346053][ T9] kye 0003:0458:5015.0002: unknown main item tag 0x0 [ 38.353309][ T9] kye 0003:0458:5015.0002: unknown main item tag 0x0 [ 38.360255][ T9] kye 0003:0458:5015.0002: unknown main item tag 0x0 [ 38.367533][ T9] kye 0003:0458:5015.0002: unknown main item tag 0x0 [ 38.374346][ T9] kye 0003:0458:5015.0002: unknown main item tag 0x0 [ 38.383268][ T9] kye 0003:0458:5015.0002: unknown main item tag 0x0 [ 38.390070][ T9] kye 0003:0458:5015.0002: unknown main item tag 0x0 [ 38.396851][ T9] kye 0003:0458:5015.0002: unknown main item tag 0x0 [ 38.403926][ T9] kye 0003:0458:5015.0002: unknown main item tag 0x0 [ 38.410752][ T9] kye 0003:0458:5015.0002: unknown main item tag 0x0 [ 38.417931][ T9] kye 0003:0458:5015.0002: unknown main item tag 0x0 [ 38.425508][ T9] kye 0003:0458:5015.0002: unknown main item tag 0x0 [ 38.432252][ T9] kye 0003:0458:5015.0002: unknown main item tag 0x0 [ 38.439212][ T9] kye 0003:0458:5015.0002: unknown main item tag 0x0 [ 38.446103][ T9] kye 0003:0458:5015.0002: unknown main item tag 0x0 [ 38.453373][ T9] kye 0003:0458:5015.0002: unknown main item tag 0x0 [ 38.460239][ T9] kye 0003:0458:5015.0002: unknown main item tag 0x0 [ 38.472181][ T9] kye 0003:0458:5015.0002: hidraw0: USB HID v0.81 Device [HID 0458:5015] on usb-dummy_hcd.2-1/input0 [ 38.484912][ T9] kye 0003:0458:5015.0002: tablet-enabling feature report not found [ 38.493748][ T9] kye 0003:0458:5015.0002: tablet enabling failed [ 38.502636][ T9] usb 3-1: USB disconnect, device number 2 [ 38.519220][ T829] fido_id[829]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 38.717587][ T45] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 38.867572][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 38.874383][ T45] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 38.898001][ T45] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.914680][ T45] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.926110][ T45] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 38.939882][ T45] usb 2-1: config 0 interface 0 has no altsetting 0 [ 38.946779][ T45] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 38.956669][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.966649][ T45] usb 2-1: config 0 descriptor?? [ 39.376271][ T45] hid-thrustmaster 0003:044F:B65D.0003: unknown main item tag 0x0 [ 39.388027][ T45] hid-thrustmaster 0003:044F:B65D.0003: unknown main item tag 0x0 [ 39.396140][ T45] hid-thrustmaster 0003:044F:B65D.0003: unknown main item tag 0x0 [ 39.404609][ T45] hid-thrustmaster 0003:044F:B65D.0003: unknown main item tag 0x0 [ 39.413261][ T45] hid-thrustmaster 0003:044F:B65D.0003: unknown main item tag 0x0 [ 39.423621][ T45] hid-thrustmaster 0003:044F:B65D.0003: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.1-1/input0 [ 39.440001][ T45] hid-thrustmaster 0003:044F:B65D.0003: Wrong number of endpoints? [ 39.604071][ C1] hid-thrustmaster 0003:044F:B65D.0003: Unknown packet type 0x0, unable to proceed further with wheel init [ 39.817190][ T10] usb 2-1: USB disconnect, device number 4 [ 39.911159][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 39.911174][ T36] audit: type=1400 audit(1786393624.599:145): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 40.283430][ T36] audit: type=1400 audit(1786393624.969:146): avc: denied { write } for pid=940 comm="syz.2.216" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 40.311477][ T942] input: syz0 as /devices/virtual/input/input6 [ 40.360910][ T36] audit: type=1400 audit(1786393625.049:147): avc: denied { mount } for pid=947 comm="syz.1.218" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 40.393644][ T36] audit: type=1400 audit(1786393625.069:148): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 40.570141][ T36] audit: type=1400 audit(1786393625.259:149): avc: denied { write } for pid=972 comm="syz.3.228" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 40.848000][ T36] audit: type=1400 audit(1786393625.539:150): avc: denied { connect } for pid=992 comm="syz.0.237" lport=3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 40.872928][ T36] audit: type=1400 audit(1786393625.559:151): avc: denied { write } for pid=992 comm="syz.0.237" laddr=::1 lport=3 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 40.895920][ T36] audit: type=1400 audit(1786393625.579:152): avc: denied { append } for pid=995 comm="syz.3.238" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 41.240919][ T36] audit: type=1400 audit(1786393625.929:153): avc: denied { mount } for pid=1032 comm="syz.0.252" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 41.264361][ T36] audit: type=1400 audit(1786393625.929:154): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 41.647528][ T704] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 41.818855][ T704] usb 3-1: config index 0 descriptor too short (expected 112, got 45) [ 41.828918][ T704] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 41.838396][ T704] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.846587][ T704] usb 3-1: Product: syz [ 41.850928][ T704] usb 3-1: Manufacturer: syz [ 41.855630][ T704] usb 3-1: SerialNumber: syz [ 42.091322][ T704] rtl8150 3-1:1.0: couldn't reset the device [ 42.097683][ T704] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 42.107444][ T704] usb 3-1: USB disconnect, device number 3 [ 42.394272][ T312] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 42.549462][ T312] usb 1-1: unable to get BOS descriptor or descriptor too short [ 42.558672][ T312] usb 1-1: not running at top speed; connect to a high speed hub [ 42.568185][ T312] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 4 [ 42.582817][ T312] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 4 [ 42.597181][ T312] usb 1-1: string descriptor 0 read error: -22 [ 42.604657][ T312] usb 1-1: New USB device found, idVendor=17cc, idProduct=1011, bcdDevice= 0.40 [ 42.615351][ T312] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.042215][ T312] usb 1-1: unable to issue vendor read request (ret = -71) [ 43.050310][ T312] usb 1-1: unable to issue vendor read request (ret = -71) [ 43.065867][ T312] usb 1-1: unable to issue vendor read request (ret = -71) [ 43.082598][ T312] usb 1-1: USB disconnect, device number 2 [ 43.856476][ T1246] Zero length message leads to an empty skb [ 43.865972][ T1248] rust_binder: Failure in copy_transaction_data: EFAULT [ 43.866029][ T1248] rust_binder: 1247:1248 transaction call to 1247:0 failed EFAULT, code 0 size 63-24 [ 43.885043][ T9] rust_binder: 1247: undelivered TRANSACTION_ERROR: 29201 [ 44.221275][ T1294] »»»»»»: renamed from vlan0 (while UP) [ 44.340737][ T294] ------------[ cut here ]------------ [ 44.346519][ T294] WARNING: CPU: 1 PID: 294 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 44.355045][ T294] Modules linked in: [ 44.359001][ T294] CPU: 1 UID: 0 PID: 294 Comm: syz-executor Not tainted syzkaller #0 c3f4dbd045f6512adf9f342f5895bf9281952f81 [ 44.370687][ T294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 44.381098][ T294] RIP: 0010:drop_nlink+0xce/0x110 [ 44.386335][ T294] Code: 04 00 00 be 08 00 00 00 e8 5f 13 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 d2 4b 95 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 44.406683][ T294] RSP: 0018:ffffc9000120fc88 EFLAGS: 00010293 [ 44.413341][ T294] RAX: ffffffff81f225ee RBX: ffff88811b382958 RCX: ffff888101ff5f00 [ 44.421697][ T294] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 44.430025][ T294] RBP: ffffc9000120fcb0 R08: 0000000000000003 R09: 0000000000000004 [ 44.438124][ T294] R10: dffffc0000000000 R11: fffff52000241f80 R12: dffffc0000000000 [ 44.446303][ T294] R13: 1ffff11023670534 R14: ffff88811b3829a0 R15: 0000000000000000 [ 44.454685][ T294] FS: 000055558cb86500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 44.464438][ T294] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 44.471404][ T294] CR2: 000055558cba9958 CR3: 00000001072e4000 CR4: 00000000003526b0 [ 44.479430][ T294] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 44.487733][ T294] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 44.496076][ T294] Call Trace: [ 44.499662][ T294] [ 44.502630][ T294] shmem_rmdir+0x5f/0x90 [ 44.507796][ T294] vfs_rmdir+0x3de/0x560 [ 44.512387][ T294] incfs_kill_sb+0x102/0x220 [ 44.517258][ T294] deactivate_locked_super+0xd5/0x270 [ 44.523231][ T294] deactivate_super+0xb8/0xe0 [ 44.528072][ T294] cleanup_mnt+0x438/0x4d0 [ 44.532675][ T294] __cleanup_mnt+0x1d/0x40 [ 44.537277][ T294] task_work_run+0x1e8/0x260 [ 44.542313][ T294] ? __cfi_task_work_run+0x10/0x10 [ 44.548364][ T294] ? __x64_sys_umount+0x12e/0x180 [ 44.554155][ T294] ? __cfi___x64_sys_umount+0x10/0x10 [ 44.559801][ T294] ? __kasan_check_read+0x15/0x20 [ 44.565316][ T294] resume_user_mode_work+0x35/0x50 [ 44.571457][ T294] syscall_exit_to_user_mode+0x63/0xb0 [ 44.577041][ T294] do_syscall_64+0x63/0xf0 [ 44.582573][ T294] ? clear_bhb_loop+0x50/0xa0 [ 44.591401][ T294] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 44.598008][ T294] RIP: 0033:0x7f560a39f317 [ 44.603694][ T294] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 44.625607][ T294] RSP: 002b:00007ffd4ac28c58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 44.634354][ T294] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f560a39f317 [ 44.642537][ T294] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd4ac28d10 [ 44.650896][ T294] RBP: 00007ffd4ac28d10 R08: 00007ffd4ac29d10 R09: 00000000ffffffff [ 44.659342][ T294] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd4ac29da0 [ 44.667548][ T294] R13: 00007f560a434474 R14: 000000000000ad04 R15: 00007ffd4ac29de0 [ 44.675808][ T294] [ 44.679207][ T294] ---[ end trace 0000000000000000 ]--- [ 44.685102][ T294] ================================================================== [ 44.693383][ T294] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 [ 44.699654][ T294] Write of size 4 at addr 0000000000000168 by task syz-executor/294 [ 44.707817][ T294] [ 44.710136][ T294] CPU: 0 UID: 0 PID: 294 Comm: syz-executor Tainted: G W syzkaller #0 c3f4dbd045f6512adf9f342f5895bf9281952f81 [ 44.710154][ T294] Tainted: [W]=WARN [ 44.710158][ T294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 44.710164][ T294] Call Trace: [ 44.710169][ T294] [ 44.710175][ T294] __dump_stack+0x21/0x30 [ 44.710193][ T294] dump_stack_lvl+0x140/0x1c0 [ 44.710207][ T294] ? __cfi_dump_stack_lvl+0x10/0x10 [ 44.710222][ T294] print_report+0x3d/0x70 [ 44.710235][ T294] kasan_report+0x162/0x1a0 [ 44.710248][ T294] ? ihold+0x24/0x70 [ 44.710260][ T294] ? ihold+0x24/0x70 [ 44.710271][ T294] kasan_check_range+0x25a/0x2b0 [ 44.710284][ T294] __kasan_check_write+0x18/0x20 [ 44.710294][ T294] ihold+0x24/0x70 [ 44.710305][ T294] vfs_rmdir+0x25c/0x560 [ 44.710319][ T294] incfs_kill_sb+0x102/0x220 [ 44.710330][ T294] deactivate_locked_super+0xd5/0x270 [ 44.710345][ T294] deactivate_super+0xb8/0xe0 [ 44.710358][ T294] cleanup_mnt+0x438/0x4d0 [ 44.710370][ T294] __cleanup_mnt+0x1d/0x40 [ 44.710382][ T294] task_work_run+0x1e8/0x260 [ 44.710395][ T294] ? __cfi_task_work_run+0x10/0x10 [ 44.710407][ T294] ? __x64_sys_umount+0x12e/0x180 [ 44.710416][ T294] ? __cfi___x64_sys_umount+0x10/0x10 [ 44.710436][ T294] ? __kasan_check_read+0x15/0x20 [ 44.710446][ T294] resume_user_mode_work+0x35/0x50 [ 44.710455][ T294] syscall_exit_to_user_mode+0x63/0xb0 [ 44.710465][ T294] do_syscall_64+0x63/0xf0 [ 44.710477][ T294] ? clear_bhb_loop+0x50/0xa0 [ 44.710490][ T294] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 44.710503][ T294] RIP: 0033:0x7f560a39f317 [ 44.710514][ T294] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 44.710522][ T294] RSP: 002b:00007ffd4ac28c58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 44.710534][ T294] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f560a39f317 [ 44.710541][ T294] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd4ac28d10 [ 44.710548][ T294] RBP: 00007ffd4ac28d10 R08: 00007ffd4ac29d10 R09: 00000000ffffffff [ 44.710555][ T294] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd4ac29da0 [ 44.710562][ T294] R13: 00007f560a434474 R14: 000000000000ad04 R15: 00007ffd4ac29de0 [ 44.710570][ T294] [ 44.710574][ T294] ================================================================== [ 44.963250][ T294] Disabling lock debugging due to kernel taint [ 44.969676][ T294] BUG: kernel NULL pointer dereference, address: 0000000000000168 [ 44.977568][ T294] #PF: supervisor write access in kernel mode [ 44.984080][ T294] #PF: error_code(0x0002) - not-present page [ 44.990268][ T294] PGD 800000010ef2d067 P4D 800000010ef2d067 PUD 0 [ 44.996958][ T294] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 45.003306][ T294] CPU: 0 UID: 0 PID: 294 Comm: syz-executor Tainted: G B W syzkaller #0 c3f4dbd045f6512adf9f342f5895bf9281952f81 [ 45.017293][ T294] Tainted: [B]=BAD_PAGE, [W]=WARN [ 45.022601][ T294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 45.033394][ T294] RIP: 0010:ihold+0x2a/0x70 [ 45.038315][ T294] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 bd 42 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 1c 0a ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 cd [ 45.059190][ T294] RSP: 0018:ffffc9000120fcc8 EFLAGS: 00010246 [ 45.065354][ T294] RAX: ffff888101ff5f00 RBX: 0000000000000000 RCX: ffff888101ff5f00 [ 45.073516][ T294] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 45.081710][ T294] RBP: ffffc9000120fcd8 R08: ffffffff88bb6947 R09: 1ffffffff1176d28 [ 45.090159][ T294] R10: dffffc0000000000 R11: fffffbfff1176d29 R12: 0000000000000000 [ 45.098309][ T294] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 45.106501][ T294] FS: 000055558cb86500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 45.115811][ T294] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 45.122576][ T294] CR2: 0000000000000168 CR3: 00000001072e4000 CR4: 00000000003526b0 [ 45.131094][ T294] Call Trace: [ 45.134478][ T294] [ 45.137615][ T294] vfs_rmdir+0x25c/0x560 [ 45.141890][ T294] incfs_kill_sb+0x102/0x220 [ 45.146491][ T294] deactivate_locked_super+0xd5/0x270 [ 45.152069][ T294] deactivate_super+0xb8/0xe0 [ 45.157051][ T294] cleanup_mnt+0x438/0x4d0 [ 45.161490][ T294] __cleanup_mnt+0x1d/0x40 [ 45.165901][ T294] task_work_run+0x1e8/0x260 [ 45.170591][ T294] ? __cfi_task_work_run+0x10/0x10 [ 45.175828][ T294] ? __x64_sys_umount+0x12e/0x180 [ 45.181188][ T294] ? __cfi___x64_sys_umount+0x10/0x10 [ 45.186910][ T294] ? __kasan_check_read+0x15/0x20 [ 45.192047][ T294] resume_user_mode_work+0x35/0x50 [ 45.197157][ T294] syscall_exit_to_user_mode+0x63/0xb0 [ 45.202721][ T294] do_syscall_64+0x63/0xf0 [ 45.207502][ T294] ? clear_bhb_loop+0x50/0xa0 [ 45.212362][ T294] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 45.218622][ T294] RIP: 0033:0x7f560a39f317 [ 45.223303][ T294] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 45.244090][ T294] RSP: 002b:00007ffd4ac28c58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 45.254085][ T294] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f560a39f317 [ 45.262303][ T294] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd4ac28d10 [ 45.270625][ T294] RBP: 00007ffd4ac28d10 R08: 00007ffd4ac29d10 R09: 00000000ffffffff [ 45.278710][ T294] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd4ac29da0 [ 45.287025][ T294] R13: 00007f560a434474 R14: 000000000000ad04 R15: 00007ffd4ac29de0 [ 45.295186][ T294] [ 45.298368][ T294] Modules linked in: [ 45.302625][ T294] CR2: 0000000000000168 [ 45.306977][ T294] ---[ end trace 0000000000000000 ]--- [ 45.312701][ T294] RIP: 0010:ihold+0x2a/0x70 [ 45.317559][ T294] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 bd 42 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 1c 0a ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 cd [ 45.338631][ T294] RSP: 0018:ffffc9000120fcc8 EFLAGS: 00010246 [ 45.345220][ T294] RAX: ffff888101ff5f00 RBX: 0000000000000000 RCX: ffff888101ff5f00 [ 45.353541][ T294] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 45.361595][ T294] RBP: ffffc9000120fcd8 R08: ffffffff88bb6947 R09: 1ffffffff1176d28 [ 45.369931][ T294] R10: dffffc0000000000 R11: fffffbfff1176d29 R12: 0000000000000000 [ 45.377992][ T294] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 45.386136][ T294] FS: 000055558cb86500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 45.395514][ T294] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 45.402469][ T294] CR2: 0000000000000168 CR3: 00000001072e4000 CR4: 00000000003526b0 [ 45.410460][ T294] Kernel panic - not syncing: Fatal exception [ 45.417049][ T294] Kernel Offset: disabled [ 45.421614][ T294] Rebooting in 86400 seconds..