11917] ? irqentry_exit+0xee/0x650 [ 544.211941] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 544.211971] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 544.212018] do_syscall_64+0xbf/0x420 [ 544.212049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.212076] RIP: 0033:0x7f9c07363b19 [ 544.212096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 544.212119] RSP: 002b:00007f9c048d9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 544.212144] RAX: ffffffffffffffda RBX: 00007f9c07476f60 RCX: 00007f9c07363b19 [ 544.212160] RDX: 0000000000000000 RSI: 0000000020000940 RDI: 00000000200002c0 [ 544.212175] RBP: 00007f9c048d91d0 R08: 0000000000000000 R09: 0000000000000000 [ 544.212190] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000001 [ 544.212205] R13: 00007ffd468bdb6f R14: 00007f9c048d9300 R15: 0000000000022000 [ 544.212246] 08:11:25 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendfile(r0, r1, 0x0, 0xffd0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x3, 0x6000, @fd_index=0x1, 0xc700, 0x0, 0x0, 0x6, 0x1, {0x0, r3}}, 0x7fff) sendfile(r0, r2, 0x0, 0x1) 08:11:25 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) (fail_nth: 13) 08:11:25 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0x7d8346c4) [ 544.292561] audit: type=1326 audit(1768810285.603:206): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6417 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f26a9e17b19 code=0x0 08:11:25 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) (fail_nth: 2) 08:11:25 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) (fail_nth: 9) 08:11:25 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="5399593869b613a532b989d472a0e52a11", 0x11}]) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b71, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pidfd_open(0x0, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x422600, 0x0) pread64(r1, &(0x7f00000000c0)=""/100, 0x64, 0x20) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) dup3(r0, r2, 0x0) [ 544.407115] audit: type=1326 audit(1768810285.718:207): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6421 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc3fb339b19 code=0x0 08:11:25 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) r2 = dup(r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x2, 0x3f, 0x3f, 0x0, 0x8, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0xf7, 0x3}, 0x100, 0x8, 0x9, 0x0, 0x2, 0x10000, 0x6, 0x0, 0x3, 0x0, 0x7}, r0, 0xf, r2, 0x1) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x0, 0x0) statfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)=""/51) 08:11:25 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0x97ffffff) [ 544.448222] FAULT_INJECTION: forcing a failure. [ 544.448222] name failslab, interval 1, probability 0, space 0, times 0 [ 544.458541] CPU: 1 UID: 0 PID: 6444 Comm: syz-executor.1 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 544.458573] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 544.458587] Call Trace: [ 544.458594] [ 544.458603] dump_stack_lvl+0xfa/0x120 [ 544.458638] should_fail_ex+0x4d7/0x5e0 [ 544.458680] should_failslab+0xc2/0x120 [ 544.458707] __kmalloc_noprof+0xd6/0x830 [ 544.458738] ? key_set_index_key+0x328/0x5a0 [ 544.458775] ? security_key_alloc+0x158/0x1d0 [ 544.458830] ? security_key_alloc+0x158/0x1d0 [ 544.458862] security_key_alloc+0x158/0x1d0 [ 544.458899] key_alloc+0x88d/0x1280 [ 544.458942] ? __kmalloc_noprof+0x4b0/0x830 [ 544.458971] ? __pfx_key_alloc+0x10/0x10 [ 544.459001] ? security_prepare_creds+0x101/0x160 [ 544.459038] keyring_alloc+0x46/0xc0 [ 544.459076] lookup_user_key+0xa36/0x12a0 [ 544.459114] ? __pfx_lookup_user_key+0x10/0x10 [ 544.459141] ? __might_fault+0xe0/0x190 [ 544.459164] ? find_held_lock+0x2b/0x80 [ 544.459200] ? __might_fault+0x138/0x190 [ 544.459227] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 544.459262] ? _copy_from_user+0x5b/0xd0 [ 544.459299] ? memdup_user+0x95/0xe0 [ 544.459336] __do_sys_request_key+0x1a3/0x3b0 [ 544.459366] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 544.459398] ? __pfx___do_sys_request_key+0x10/0x10 [ 544.459419] ? ksys_write+0x1a3/0x240 [ 544.459442] ? __pfx_ksys_write+0x10/0x10 [ 544.459462] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 544.459489] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 544.459528] do_syscall_64+0xbf/0x420 [ 544.459556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.459580] RIP: 0033:0x7fba7619eb19 [ 544.459597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 544.459618] RSP: 002b:00007fba73714188 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 544.459639] RAX: ffffffffffffffda RBX: 00007fba762b1f60 RCX: 00007fba7619eb19 [ 544.459653] RDX: 0000000000000000 RSI: 0000000020000940 RDI: 00000000200002c0 [ 544.459667] RBP: 00007fba737141d0 R08: 0000000000000000 R09: 0000000000000000 [ 544.459679] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000002 [ 544.459692] R13: 00007ffe1c7cb77f R14: 00007fba73714300 R15: 0000000000022000 [ 544.459727] [ 544.497481] 9p: Bad value for 'rfdno' [ 544.500647] FAULT_INJECTION: forcing a failure. [ 544.500647] name failslab, interval 1, probability 0, space 0, times 0 [ 544.502292] CPU: 1 UID: 0 PID: 6447 Comm: syz-executor.3 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 544.502319] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 544.502330] Call Trace: [ 544.502343] [ 544.502351] dump_stack_lvl+0xfa/0x120 [ 544.502378] should_fail_ex+0x4d7/0x5e0 [ 544.502415] ? key_alloc+0x3e1/0x1280 [ 544.502443] should_failslab+0xc2/0x120 [ 544.502467] kmem_cache_alloc_noprof+0x80/0x760 [ 544.502510] ? key_alloc+0x3e1/0x1280 [ 544.502537] key_alloc+0x3e1/0x1280 [ 544.502580] ? __kmalloc_noprof+0x4b0/0x830 [ 544.502608] ? __pfx_key_alloc+0x10/0x10 [ 544.502638] ? security_prepare_creds+0x101/0x160 [ 544.502675] keyring_alloc+0x46/0xc0 [ 544.502713] lookup_user_key+0xa36/0x12a0 [ 544.502751] ? __pfx_lookup_user_key+0x10/0x10 [ 544.502778] ? __might_fault+0xe0/0x190 [ 544.502800] ? find_held_lock+0x2b/0x80 [ 544.502834] ? __might_fault+0x138/0x190 [ 544.502860] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 544.502895] ? _copy_from_user+0x5b/0xd0 [ 544.502931] ? memdup_user+0x95/0xe0 [ 544.502966] __do_sys_request_key+0x1a3/0x3b0 [ 544.502988] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 544.503018] ? __pfx___do_sys_request_key+0x10/0x10 [ 544.503039] ? ksys_write+0x1a3/0x240 [ 544.503059] ? __pfx_ksys_write+0x10/0x10 [ 544.503080] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 544.503107] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 544.503145] do_syscall_64+0xbf/0x420 [ 544.503172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.503194] RIP: 0033:0x7ff077a56b19 [ 544.503211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 544.503231] RSP: 002b:00007ff074fcc188 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 544.503251] RAX: ffffffffffffffda RBX: 00007ff077b69f60 RCX: 00007ff077a56b19 [ 544.503265] RDX: 0000000000000000 RSI: 0000000020000940 RDI: 00000000200002c0 [ 544.503278] RBP: 00007ff074fcc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 544.503291] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000001 [ 544.503304] R13: 00007fff1f9a3bbf R14: 00007ff074fcc300 R15: 0000000000022000 [ 544.503340] [ 544.538844] audit: type=1326 audit(1768810285.805:208): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6448 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f107edc9b19 code=0x0 08:11:25 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) (fail_nth: 3) [ 545.022574] audit: type=1326 audit(1768810286.333:209): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6417 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f26a9e17b19 code=0x0 [ 545.026477] audit: type=1326 audit(1768810286.333:210): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6417 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f26a9e17b19 code=0x0 [ 545.326121] audit: type=1326 audit(1768810286.637:211): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6448 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f107edc9b19 code=0x0 08:11:37 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) (fail_nth: 14) 08:11:37 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) (fail_nth: 10) 08:11:37 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0xc446837d) 08:11:37 executing program 4: write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bca329e"], 0x51) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'wg2\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f00000000c0)) 08:11:37 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x100, 0xc002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x2, 0x2}, 0xc00, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x0, 0x40, 0x20, 0x6, 0x0, 0x4, 0x801, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x0, 0x400}, 0x14000, 0x100000001, 0x4, 0x3, 0x9, 0x101, 0x20, 0x0, 0x0, 0x0, 0xc5}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x2) r1 = gettid() rt_sigqueueinfo(r1, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xf7, 0x1f, 0x1, 0xf7, 0x0, 0x4, 0x8, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1f, 0x1, @perf_bp={&(0x7f0000000080), 0xa}, 0x2101, 0x4, 0xe7, 0x1, 0xd7, 0x8, 0x3, 0x0, 0xfffffffd, 0x0, 0x9}, r1, 0xa, r0, 0xb) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 08:11:37 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) (fail_nth: 4) 08:11:37 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0xd003, 0x0) symlinkat(&(0x7f0000000100)='./file0\x00', r0, &(0x7f0000000140)='./file1\x00') perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x80000009e9) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r2 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[]) symlinkat(&(0x7f0000003780)='./file0\x00', r2, &(0x7f0000003740)='./file0\x00') linkat(r2, &(0x7f0000000080)='./file0\x00', r2, &(0x7f00000000c0)='./file1\x00', 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) r4 = dup(r3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r7, @ANYBLOB="14002c8008000000000800002d"], 0x30}}, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r4, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x48, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x4c}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3c}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x800}]}, 0x48}, 0x1, 0x0, 0x0, 0x4080}, 0x20040000) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x0, 0x2, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 08:11:37 executing program 2: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000080)='trans=fd,', &(0x7f00000000c0)='./file0\x00', r0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) r2 = dup(r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) [ 555.810835] tmpfs: Unknown parameter './file0' [ 555.823615] audit: type=1326 audit(1768810297.133:212): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6467 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fabe58dab19 code=0x0 [ 555.840774] FAULT_INJECTION: forcing a failure. [ 555.840774] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 555.857135] audit: type=1326 audit(1768810297.166:213): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6475 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc3fb339b19 code=0x0 [ 555.860256] CPU: 0 UID: 0 PID: 6479 Comm: syz-executor.0 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 555.860287] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 555.860299] Call Trace: [ 555.860306] [ 555.860315] dump_stack_lvl+0xfa/0x120 [ 555.860355] should_fail_ex+0x4d7/0x5e0 [ 555.860395] _copy_from_user+0x30/0xd0 [ 555.860432] memdup_user+0x7e/0xe0 [ 555.860464] strndup_user+0x78/0xe0 [ 555.860496] __do_sys_request_key+0x106/0x3b0 [ 555.860519] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 555.860550] ? __pfx___do_sys_request_key+0x10/0x10 [ 555.860572] ? ksys_write+0x1a3/0x240 [ 555.860593] ? __pfx_ksys_write+0x10/0x10 [ 555.860613] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 555.860640] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 555.860678] do_syscall_64+0xbf/0x420 [ 555.860706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.860729] RIP: 0033:0x7f9c07363b19 [ 555.860747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 555.860767] RSP: 002b:00007f9c048d9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 555.860788] RAX: ffffffffffffffda RBX: 00007f9c07476f60 RCX: 00007f9c07363b19 [ 555.860803] RDX: 0000000000000000 RSI: 0000000020000940 RDI: 00000000200002c0 [ 555.860816] RBP: 00007f9c048d91d0 R08: 0000000000000000 R09: 0000000000000000 [ 555.860828] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000001 [ 555.860841] R13: 00007ffd468bdb6f R14: 00007f9c048d9300 R15: 0000000000022000 [ 555.860873] 08:11:37 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) (fail_nth: 15) 08:11:37 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) (fail_nth: 11) [ 555.936837] 9p: Bad value for 'rfdno' [ 555.954606] FAULT_INJECTION: forcing a failure. [ 555.954606] name failslab, interval 1, probability 0, space 0, times 0 [ 555.959056] 9p: Bad value for 'rfdno' [ 555.965456] CPU: 1 UID: 0 PID: 6487 Comm: syz-executor.3 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 555.965487] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 555.965499] Call Trace: [ 555.965506] [ 555.965515] dump_stack_lvl+0xfa/0x120 [ 555.965547] should_fail_ex+0x4d7/0x5e0 [ 555.965586] should_failslab+0xc2/0x120 [ 555.965611] __kmalloc_node_track_caller_noprof+0xd7/0x840 [ 555.965651] ? key_alloc+0x43f/0x1280 [ 555.965680] ? kmem_cache_alloc_noprof+0x499/0x760 [ 555.965716] ? kmemdup_noprof+0x2b/0x60 [ 555.965745] kmemdup_noprof+0x2b/0x60 [ 555.965775] key_alloc+0x43f/0x1280 [ 555.965815] ? __kmalloc_noprof+0x4b0/0x830 [ 555.965843] ? __pfx_key_alloc+0x10/0x10 [ 555.965872] ? security_prepare_creds+0x101/0x160 08:11:37 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0xfdffffff) [ 555.965908] keyring_alloc+0x46/0xc0 [ 555.965945] lookup_user_key+0xa36/0x12a0 [ 555.965981] ? __pfx_lookup_user_key+0x10/0x10 [ 555.966008] ? __might_fault+0xe0/0x190 [ 555.966029] ? find_held_lock+0x2b/0x80 [ 555.966064] ? __might_fault+0x138/0x190 [ 555.966090] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 555.966123] ? _copy_from_user+0x5b/0xd0 [ 555.966159] ? memdup_user+0x95/0xe0 [ 555.966193] __do_sys_request_key+0x1a3/0x3b0 [ 555.966215] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 555.966246] ? __pfx___do_sys_request_key+0x10/0x10 [ 555.966267] ? ksys_write+0x1a3/0x240 [ 555.966289] ? __pfx_ksys_write+0x10/0x10 [ 555.966309] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 555.966336] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 555.966380] do_syscall_64+0xbf/0x420 [ 555.966407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.966430] RIP: 0033:0x7ff077a56b19 [ 555.966448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 555.966468] RSP: 002b:00007ff074fcc188 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 555.966490] RAX: ffffffffffffffda RBX: 00007ff077b69f60 RCX: 00007ff077a56b19 [ 555.966504] RDX: 0000000000000000 RSI: 0000000020000940 RDI: 00000000200002c0 [ 555.966517] RBP: 00007ff074fcc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 555.966530] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000002 [ 555.966543] R13: 00007fff1f9a3bbf R14: 00007ff074fcc300 R15: 0000000000022000 [ 555.966575] [ 555.998786] FAULT_INJECTION: forcing a failure. [ 555.998786] name failslab, interval 1, probability 0, space 0, times 0 [ 556.000676] CPU: 1 UID: 0 PID: 6490 Comm: syz-executor.1 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 556.000704] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 556.000716] Call Trace: [ 556.000724] [ 556.000732] dump_stack_lvl+0xfa/0x120 [ 556.000761] should_fail_ex+0x4d7/0x5e0 [ 556.000799] ? assoc_array_insert+0xe1/0x2b10 [ 556.000827] should_failslab+0xc2/0x120 [ 556.000852] __kmalloc_cache_noprof+0x80/0x730 [ 556.000884] ? __pfx_perf_trace_contention_end+0x10/0x10 [ 556.000923] ? assoc_array_insert+0xe1/0x2b10 [ 556.000952] assoc_array_insert+0xe1/0x2b10 [ 556.000992] ? key_link+0x2b3/0x350 [ 556.001013] ? lock_acquire+0x15e/0x2d0 [ 556.001041] ? __pfx___mutex_lock+0x10/0x10 [ 556.001064] ? __pfx_assoc_array_insert+0x10/0x10 [ 556.001102] ? down_write+0x119/0x1f0 [ 556.001126] ? __pfx_down_write+0x10/0x10 [ 556.001155] __key_link_begin+0xf0/0x260 [ 556.001178] key_link+0x106/0x350 [ 556.001198] ? selinux_key_permission+0x12e/0x1e0 [ 556.001227] ? __pfx_key_link+0x10/0x10 [ 556.001251] ? key_task_permission+0x2ba/0x410 [ 556.001283] request_key_and_link+0x2a7/0x12e0 [ 556.001314] ? key_type_lookup+0x1e/0x100 [ 556.001354] ? __pfx_request_key_and_link+0x10/0x10 [ 556.001392] ? __pfx_key_default_cmp+0x10/0x10 [ 556.001427] ? __pfx_keyring_search_iterator+0x10/0x10 [ 556.001465] ? _copy_from_user+0x5b/0xd0 [ 556.001507] __do_sys_request_key+0x21e/0x3b0 [ 556.001532] ? __pfx___do_sys_request_key+0x10/0x10 [ 556.001554] ? ksys_write+0x1a3/0x240 [ 556.001575] ? __pfx_ksys_write+0x10/0x10 [ 556.001595] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 556.001623] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 556.001660] do_syscall_64+0xbf/0x420 [ 556.001686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.001709] RIP: 0033:0x7fba7619eb19 [ 556.001726] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 556.001746] RSP: 002b:00007fba73714188 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 556.001766] RAX: ffffffffffffffda RBX: 00007fba762b1f60 RCX: 00007fba7619eb19 [ 556.001780] RDX: 0000000000000000 RSI: 0000000020000940 RDI: 00000000200002c0 [ 556.001793] RBP: 00007fba737141d0 R08: 0000000000000000 R09: 0000000000000000 [ 556.001806] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000002 [ 556.001819] R13: 00007ffe1c7cb77f R14: 00007fba73714300 R15: 0000000000022000 [ 556.001852] 08:11:37 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) (fail_nth: 5) [ 556.106618] FAULT_INJECTION: forcing a failure. [ 556.106618] name failslab, interval 1, probability 0, space 0, times 0 [ 556.108322] CPU: 1 UID: 0 PID: 6499 Comm: syz-executor.0 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 556.108356] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 556.108369] Call Trace: [ 556.108376] [ 556.108385] dump_stack_lvl+0xfa/0x120 [ 556.108415] should_fail_ex+0x4d7/0x5e0 [ 556.108454] ? prepare_creds+0x2c/0x840 [ 556.108483] should_failslab+0xc2/0x120 [ 556.108508] kmem_cache_alloc_noprof+0x80/0x760 [ 556.108549] ? prepare_creds+0x2c/0x840 [ 556.108576] prepare_creds+0x2c/0x840 [ 556.108608] lookup_user_key+0x985/0x12a0 [ 556.108643] ? __pfx_lookup_user_key+0x10/0x10 [ 556.108670] ? __might_fault+0xe0/0x190 [ 556.108692] ? find_held_lock+0x2b/0x80 [ 556.108727] ? __might_fault+0x138/0x190 [ 556.108753] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 556.108786] ? _copy_from_user+0x5b/0xd0 [ 556.108822] ? memdup_user+0x95/0xe0 [ 556.108857] __do_sys_request_key+0x1a3/0x3b0 08:11:37 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) (fail_nth: 12) [ 556.108878] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 556.108909] ? __pfx___do_sys_request_key+0x10/0x10 [ 556.108930] ? ksys_write+0x1a3/0x240 [ 556.108952] ? __pfx_ksys_write+0x10/0x10 [ 556.108972] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 556.108999] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 556.109035] do_syscall_64+0xbf/0x420 [ 556.109062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.109085] RIP: 0033:0x7f9c07363b19 [ 556.109103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 556.109123] RSP: 002b:00007f9c048d9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 556.109144] RAX: ffffffffffffffda RBX: 00007f9c07476f60 RCX: 00007f9c07363b19 [ 556.109159] RDX: 0000000000000000 RSI: 0000000020000940 RDI: 00000000200002c0 [ 556.109172] RBP: 00007f9c048d91d0 R08: 0000000000000000 R09: 0000000000000000 [ 556.109185] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000001 [ 556.109198] R13: 00007ffd468bdb6f R14: 00007f9c048d9300 R15: 0000000000022000 [ 556.109229] 08:11:37 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0xffffff97) 08:11:37 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) (fail_nth: 16) [ 556.635008] tmpfs: Unknown parameter './file0' [ 556.639190] audit: type=1326 audit(1768810297.949:214): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6467 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fabe58dab19 code=0x0 08:11:47 executing program 7: inotify_init1(0x81000) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) r2 = dup(r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) getsockopt$inet_int(r0, 0x0, 0x14, 0x0, &(0x7f0000000040)) 08:11:47 executing program 5: io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="5399593869b613a522b989d472a0e52a11", 0x11}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x304) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) close(r0) 08:11:47 executing program 2: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000080)='trans=fd,', &(0x7f00000000c0)='./file0\x00', r0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) r2 = dup(r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 08:11:47 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) (fail_nth: 6) 08:11:47 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x7, 0x646c, 0x82, 0x0, 0xd}) poll(&(0x7f0000000140)=[{r0}, {}, {}, {0xffffffffffffffff, 0x1020}], 0x4, 0x2) 08:11:47 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0xfffffffd) 08:11:47 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) (fail_nth: 17) 08:11:47 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) (fail_nth: 13) [ 566.521584] audit: type=1326 audit(1768810307.832:215): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6516 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f26a9e17b19 code=0x0 08:11:47 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0x40000000000) [ 566.555764] audit: type=1326 audit(1768810307.865:216): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6514 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc3fb339b19 code=0x0 [ 566.567294] FAULT_INJECTION: forcing a failure. [ 566.567294] name failslab, interval 1, probability 0, space 0, times 0 [ 566.569006] CPU: 1 UID: 0 PID: 6526 Comm: syz-executor.3 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 566.569034] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 566.569046] Call Trace: [ 566.569054] [ 566.569062] dump_stack_lvl+0xfa/0x120 [ 566.569094] should_fail_ex+0x4d7/0x5e0 [ 566.569133] should_failslab+0xc2/0x120 [ 566.569159] __kmalloc_noprof+0xd6/0x830 [ 566.569188] ? key_set_index_key+0x328/0x5a0 [ 566.569223] ? security_key_alloc+0x158/0x1d0 [ 566.569262] ? security_key_alloc+0x158/0x1d0 [ 566.569294] security_key_alloc+0x158/0x1d0 [ 566.569330] key_alloc+0x88d/0x1280 [ 566.569377] ? __kmalloc_noprof+0x4b0/0x830 [ 566.569405] ? __pfx_key_alloc+0x10/0x10 [ 566.569434] ? security_prepare_creds+0x101/0x160 [ 566.569469] keyring_alloc+0x46/0xc0 [ 566.569506] lookup_user_key+0xa36/0x12a0 [ 566.569541] ? __pfx_lookup_user_key+0x10/0x10 [ 566.569568] ? __might_fault+0xe0/0x190 [ 566.569590] ? find_held_lock+0x2b/0x80 [ 566.569625] ? __might_fault+0x138/0x190 [ 566.569650] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 566.569684] ? _copy_from_user+0x5b/0xd0 [ 566.569719] ? memdup_user+0x95/0xe0 [ 566.569755] __do_sys_request_key+0x1a3/0x3b0 [ 566.569776] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 566.569807] ? __pfx___do_sys_request_key+0x10/0x10 [ 566.569828] ? ksys_write+0x1a3/0x240 [ 566.569849] ? __pfx_ksys_write+0x10/0x10 [ 566.569869] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 566.569896] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 566.569932] do_syscall_64+0xbf/0x420 [ 566.569959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.569982] RIP: 0033:0x7ff077a56b19 [ 566.569999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 566.570019] RSP: 002b:00007ff074fcc188 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 566.570040] RAX: ffffffffffffffda RBX: 00007ff077b69f60 RCX: 00007ff077a56b19 [ 566.570055] RDX: 0000000000000000 RSI: 0000000020000940 RDI: 00000000200002c0 [ 566.570068] RBP: 00007ff074fcc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 566.570080] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000002 [ 566.570093] R13: 00007fff1f9a3bbf R14: 00007ff074fcc300 R15: 0000000000022000 [ 566.570125] [ 566.571200] FAULT_INJECTION: forcing a failure. [ 566.571200] name failslab, interval 1, probability 0, space 0, times 0 [ 566.602401] CPU: 0 UID: 0 PID: 6528 Comm: syz-executor.1 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 566.602419] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 566.602427] Call Trace: [ 566.602432] [ 566.602437] dump_stack_lvl+0xfa/0x120 [ 566.602459] should_fail_ex+0x4d7/0x5e0 [ 566.602483] ? assoc_array_insert+0x3c9/0x2b10 [ 566.602500] should_failslab+0xc2/0x120 [ 566.602516] __kmalloc_cache_noprof+0x80/0x730 [ 566.602534] ? assoc_array_walk.isra.0+0x1d0/0x5c0 [ 566.602548] ? __pfx_perf_trace_contention_end+0x10/0x10 [ 566.602576] ? assoc_array_insert+0x3c9/0x2b10 [ 566.602592] assoc_array_insert+0x3c9/0x2b10 [ 566.602614] ? key_link+0x2b3/0x350 [ 566.602627] ? lock_acquire+0x15e/0x2d0 [ 566.602643] ? __pfx___mutex_lock+0x10/0x10 [ 566.602656] ? __pfx_assoc_array_insert+0x10/0x10 [ 566.602677] ? down_write+0x119/0x1f0 [ 566.602691] ? __pfx_down_write+0x10/0x10 [ 566.602706] __key_link_begin+0xf0/0x260 [ 566.602719] key_link+0x106/0x350 [ 566.602730] ? selinux_key_permission+0x12e/0x1e0 [ 566.602747] ? __pfx_key_link+0x10/0x10 [ 566.602760] ? key_task_permission+0x2ba/0x410 [ 566.602778] request_key_and_link+0x2a7/0x12e0 [ 566.602795] ? key_type_lookup+0x1e/0x100 [ 566.602814] ? __pfx_request_key_and_link+0x10/0x10 [ 566.602834] ? __pfx_key_default_cmp+0x10/0x10 [ 566.602853] ? __pfx_keyring_search_iterator+0x10/0x10 [ 566.602874] ? _copy_from_user+0x5b/0xd0 [ 566.602898] __do_sys_request_key+0x21e/0x3b0 [ 566.602912] ? __pfx___do_sys_request_key+0x10/0x10 [ 566.602924] ? ksys_write+0x1a3/0x240 [ 566.602937] ? __pfx_ksys_write+0x10/0x10 [ 566.602948] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 566.602965] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 566.602985] do_syscall_64+0xbf/0x420 [ 566.603000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.603013] RIP: 0033:0x7fba7619eb19 [ 566.603023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 566.603034] RSP: 002b:00007fba73714188 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 566.603046] RAX: ffffffffffffffda RBX: 00007fba762b1f60 RCX: 00007fba7619eb19 [ 566.603054] RDX: 0000000000000000 RSI: 0000000020000940 RDI: 00000000200002c0 [ 566.603061] RBP: 00007fba737141d0 R08: 0000000000000000 R09: 0000000000000000 [ 566.603068] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000002 [ 566.603075] R13: 00007ffe1c7cb77f R14: 00007fba73714300 R15: 0000000000022000 [ 566.603093] [ 566.652318] 9p: Bad value for 'rfdno' 08:11:47 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) (fail_nth: 14) 08:11:47 executing program 4: ppoll(0x0, 0x36, 0x0, 0x0, 0x36) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000040)=0x77, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x49, &(0x7f0000000080)=0x68bbd9b0592ebacf, 0x4) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000000)) 08:11:47 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) (fail_nth: 18) 08:11:48 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0x80000000000) 08:11:48 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) (fail_nth: 7) 08:11:48 executing program 5: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x400002, 0x97) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0xf90, 0x0, 0x0, 0x0, 0x4000000}) mount(&(0x7f0000000080)=@md0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='openpromfs\x00', 0x100000, &(0x7f0000000180)='\x00') 08:11:48 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f00000006c0)=ANY=[@ANYBLOB='os2.n0x\x001\x00'/26]) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresgid(&(0x7f0000000200), &(0x7f0000000400), &(0x7f0000000440)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2, 0x10000000}, 0xc, &(0x7f0000000240)={0x0}}, 0x0) getsockname$unix(r2, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)={0x14, r4, 0x5, 0x0, 0x25dfdbfd, {{0x7e}, {@void, @void}}}, 0x14}}, 0x20000000) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00021200c70009015c010004dfa166ca4f0ec51d00006bf5e37cf36ae118da000000000000009b07970a3ccbd6b8d078e72933d7941e172d"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) io_cancel(0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x6, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="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", 0xfb, 0x4000000, 0x0, 0x2, r2}, &(0x7f0000000680)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r5, 0xf502, 0x0) [ 566.814917] random: crng reseeded on system resumption [ 566.836524] FAULT_INJECTION: forcing a failure. [ 566.836524] name failslab, interval 1, probability 0, space 0, times 0 [ 566.838486] CPU: 1 UID: 0 PID: 6548 Comm: syz-executor.0 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 566.838518] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 566.838533] Call Trace: [ 566.838542] [ 566.838551] dump_stack_lvl+0xfa/0x120 [ 566.838587] should_fail_ex+0x4d7/0x5e0 [ 566.838633] should_failslab+0xc2/0x120 [ 566.838663] __kmalloc_noprof+0xd6/0x830 [ 566.838695] ? __create_object+0x59/0x80 [ 566.838729] ? security_prepare_creds+0x101/0x160 [ 566.838768] ? security_prepare_creds+0x101/0x160 [ 566.838796] security_prepare_creds+0x101/0x160 [ 566.838829] prepare_creds+0x562/0x840 [ 566.838869] lookup_user_key+0x985/0x12a0 [ 566.838909] ? __pfx_lookup_user_key+0x10/0x10 [ 566.838940] ? __might_fault+0xe0/0x190 [ 566.838966] ? find_held_lock+0x2b/0x80 [ 566.839006] ? __might_fault+0x138/0x190 [ 566.839036] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 566.839075] ? _copy_from_user+0x5b/0xd0 [ 566.839116] ? memdup_user+0x95/0xe0 [ 566.839157] __do_sys_request_key+0x1a3/0x3b0 [ 566.839181] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 566.839217] ? __pfx___do_sys_request_key+0x10/0x10 [ 566.839242] ? ksys_write+0x1a3/0x240 [ 566.839267] ? __pfx_ksys_write+0x10/0x10 [ 566.839290] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 566.839321] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 566.839372] do_syscall_64+0xbf/0x420 [ 566.839403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.839429] RIP: 0033:0x7f9c07363b19 [ 566.839449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 566.839472] RSP: 002b:00007f9c048d9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 566.839497] RAX: ffffffffffffffda RBX: 00007f9c07476f60 RCX: 00007f9c07363b19 [ 566.839513] RDX: 0000000000000000 RSI: 0000000020000940 RDI: 00000000200002c0 [ 566.839528] RBP: 00007f9c048d91d0 R08: 0000000000000000 R09: 0000000000000000 [ 566.839543] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000001 [ 566.839558] R13: 00007ffd468bdb6f R14: 00007f9c048d9300 R15: 0000000000022000 [ 566.839595] [ 566.850193] random: crng reseeded on system resumption [ 567.354465] audit: type=1326 audit(1768810308.665:217): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6516 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f26a9e17b19 code=0x0 08:11:59 executing program 4: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x6c575d3c81d7f2ea, 0x70bd28, 0x25dfdbfe, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x5c}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008800}, 0x48801) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_matches\x00') write(r3, 0x0, 0x0) 08:11:59 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0x4000000000000) 08:11:59 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r0, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200) r1 = io_uring_setup(0x5053, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r1, 0x19, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) mount$9p_fd(0x0, &(0x7f00000005c0)='./file1\x00', &(0x7f0000000d40), 0x4010, &(0x7f0000000f00)=ANY=[@ANYBLOB="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", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r2, 0x0, 0xfdef) mkdirat$cgroup(r0, &(0x7f0000000140)='syz1\x00', 0x1ff) accept4$inet6(r0, 0x0, &(0x7f0000000280), 0x800) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x19, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f00000000c0)=ANY=[@ANYRES32=r0, @ANYBLOB="53fde31c270d443f1db9d400a5e978072b8af9c814d58b3f78bc685e6c4e6a0e1f571c5e7eba2ce1bbff4f"]) r3 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r3, &(0x7f0000000200)='N', 0x1, 0x0) 08:11:59 executing program 2: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000080)='trans=fd,', &(0x7f00000000c0)='./file0\x00', r0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) r2 = dup(r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 08:11:59 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) (fail_nth: 19) 08:11:59 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) (fail_nth: 8) 08:11:59 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x160, &(0x7f0000000080)={@multicast, @link_local, @void, {@ipv4={0x800, @igmp={{0x35, 0x4, 0x2, 0x4, 0x152, 0x65, 0x0, 0x0, 0x2, 0x0, @rand_addr=0x64010101, @multicast2, {[@timestamp_prespec={0x44, 0x34, 0x8d, 0x3, 0x0, [{@remote}, {@loopback, 0x4}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x200}, {@private=0xa010102, 0xe2}, {@local, 0x400}, {@loopback, 0xfffffff8}]}, @timestamp_prespec={0x44, 0x34, 0xa3, 0x3, 0xf, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfff}, {@multicast1, 0x100}, {@loopback, 0x9}, {@rand_addr=0x64010101, 0x7}, {@dev={0xac, 0x14, 0x14, 0x13}}, {@empty, 0x4}]}, @end, @ssrr={0x89, 0xf, 0x85, [@multicast2, @local, @loopback]}, @ra={0x94, 0x4, 0x1}, @noop, @timestamp_addr={0x44, 0x3c, 0xe8, 0x1, 0x1, [{@dev={0xac, 0x14, 0x14, 0x14}, 0x3}, {@multicast1, 0x3}, {@multicast2, 0x7fe7acca}, {@local, 0x7}, {@local}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@empty, 0x6}]}, @ra={0x94, 0x4}]}}, {0x22, 0x1f, 0x0, @local, "b887027933e59f3d091f9bd1a15017ce4ae41de786743e7a9854d41fb108737e2da098a64eb3424ef03c357d55e38d95287c8926b937403a77eeb1c092b7552506dae4d452f4981ff0f6388d946522fd3f1eb901fefbbaed6b5d76b24c9f9710039256b5d57ba565b9f03b5d542ec3ddc186ef5ea1ae"}}}}}, 0x0) 08:11:59 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) (fail_nth: 15) [ 578.489041] FAULT_INJECTION: forcing a failure. [ 578.489041] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 578.490318] CPU: 0 UID: 0 PID: 6562 Comm: syz-executor.1 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 578.490340] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 578.490349] Call Trace: [ 578.490355] [ 578.490361] dump_stack_lvl+0xfa/0x120 [ 578.490383] should_fail_ex+0x4d7/0x5e0 [ 578.490407] _copy_to_user+0x32/0xd0 [ 578.490428] simple_read_from_buffer+0xe0/0x180 [ 578.490451] proc_fail_nth_read+0x18a/0x240 [ 578.490468] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 578.490484] ? security_file_permission+0x22/0x90 [ 578.490500] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 578.490515] vfs_read+0x1eb/0xc70 [ 578.490536] ? __pfx___mutex_lock+0x10/0x10 [ 578.490549] ? __fget_files+0x34/0x3b0 [ 578.490562] ? __pfx_vfs_read+0x10/0x10 [ 578.490583] ? lock_release+0xc8/0x270 [ 578.490603] ? __fget_files+0x20d/0x3b0 [ 578.490622] ksys_read+0x121/0x240 [ 578.490632] ? __pfx_ksys_read+0x10/0x10 [ 578.490643] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 578.490660] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 578.490680] do_syscall_64+0xbf/0x420 [ 578.490695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.490708] RIP: 0033:0x7fba7615169c [ 578.490718] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 578.490730] RSP: 002b:00007fba73714170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 578.490742] RAX: ffffffffffffffda RBX: 000000001e9d5bf2 RCX: 00007fba7615169c [ 578.490750] RDX: 000000000000000f RSI: 00007fba737141e0 RDI: 0000000000000003 [ 578.490757] RBP: 00007fba737141d0 R08: 0000000000000000 R09: 0000000000000000 [ 578.490764] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000002 [ 578.490771] R13: 00007ffe1c7cb77f R14: 00007fba73714300 R15: 0000000000022000 [ 578.490789] [ 578.522094] FAULT_INJECTION: forcing a failure. [ 578.522094] name failslab, interval 1, probability 0, space 0, times 0 [ 578.528398] CPU: 0 UID: 0 PID: 6568 Comm: syz-executor.3 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 578.528416] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 578.528423] Call Trace: [ 578.528427] [ 578.528432] dump_stack_lvl+0xfa/0x120 [ 578.528453] should_fail_ex+0x4d7/0x5e0 [ 578.528476] ? assoc_array_insert+0xe1/0x2b10 [ 578.528492] should_failslab+0xc2/0x120 [ 578.528507] __kmalloc_cache_noprof+0x80/0x730 [ 578.528525] ? __pfx_perf_trace_contention_end+0x10/0x10 [ 578.528548] ? assoc_array_insert+0xe1/0x2b10 [ 578.528564] assoc_array_insert+0xe1/0x2b10 [ 578.528586] ? key_link+0x2b3/0x350 [ 578.528599] ? lock_acquire+0x15e/0x2d0 [ 578.528615] ? __pfx___mutex_lock+0x10/0x10 [ 578.528629] ? __pfx_assoc_array_insert+0x10/0x10 [ 578.528650] ? down_write+0x119/0x1f0 [ 578.528663] ? __pfx_down_write+0x10/0x10 [ 578.528679] __key_link_begin+0xf0/0x260 [ 578.528692] key_link+0x106/0x350 [ 578.528703] ? selinux_key_permission+0x12e/0x1e0 [ 578.528720] ? __pfx_key_link+0x10/0x10 [ 578.528733] ? key_task_permission+0x2ba/0x410 [ 578.528751] request_key_and_link+0x2a7/0x12e0 [ 578.528768] ? key_type_lookup+0x1e/0x100 [ 578.528787] ? __pfx_request_key_and_link+0x10/0x10 [ 578.528807] ? __pfx_key_default_cmp+0x10/0x10 [ 578.528827] ? __pfx_keyring_search_iterator+0x10/0x10 [ 578.528847] ? _copy_from_user+0x5b/0xd0 [ 578.528870] __do_sys_request_key+0x21e/0x3b0 [ 578.528884] ? __pfx___do_sys_request_key+0x10/0x10 [ 578.528896] ? ksys_write+0x1a3/0x240 [ 578.528908] ? __pfx_ksys_write+0x10/0x10 [ 578.528919] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 578.528935] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 578.528955] do_syscall_64+0xbf/0x420 [ 578.528971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.528984] RIP: 0033:0x7ff077a56b19 [ 578.528994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 578.529005] RSP: 002b:00007ff074fcc188 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 578.529017] RAX: ffffffffffffffda RBX: 00007ff077b69f60 RCX: 00007ff077a56b19 [ 578.529024] RDX: 0000000000000000 RSI: 0000000020000940 RDI: 00000000200002c0 [ 578.529032] RBP: 00007ff074fcc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 578.529039] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000002 [ 578.529047] R13: 00007fff1f9a3bbf R14: 00007ff074fcc300 R15: 0000000000022000 [ 578.529065] [ 578.577533] audit: type=1326 audit(1768810319.880:218): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6569 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f107edc9b19 code=0x0 08:11:59 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0x8000000000000) 08:11:59 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) [ 578.594699] audit: type=1326 audit(1768810319.893:219): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6563 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc3fb339b19 code=0x0 08:11:59 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) (fail_nth: 16) 08:11:59 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x61, 0x1, 0x20, 0x2, 0x0, 0x1, 0x400, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x10000, 0x4, 0x3ff, 0x2, 0x4a0b, 0xe0d0, 0x6, 0x0, 0x4, 0x0, 0x2400000}, 0x0, 0xa, r0, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r1, &(0x7f0000000100)=[{{&(0x7f0000000440)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c, 0x0}}], 0x1, 0x20000040) shutdown(r1, 0x0) 08:11:59 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) (fail_nth: 9) [ 578.686950] 9p: Bad value for 'rfdno' 08:12:00 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) [ 578.731812] FAULT_INJECTION: forcing a failure. [ 578.731812] name failslab, interval 1, probability 0, space 0, times 0 [ 578.732782] CPU: 0 UID: 0 PID: 6588 Comm: syz-executor.0 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 578.732798] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 578.732806] Call Trace: [ 578.732811] [ 578.732817] dump_stack_lvl+0xfa/0x120 [ 578.732840] should_fail_ex+0x4d7/0x5e0 [ 578.732864] ? key_alloc+0x3e1/0x1280 [ 578.732881] should_failslab+0xc2/0x120 [ 578.732897] kmem_cache_alloc_noprof+0x80/0x760 [ 578.732921] ? key_alloc+0x3e1/0x1280 [ 578.732940] key_alloc+0x3e1/0x1280 [ 578.732962] ? __kmalloc_noprof+0x4b0/0x830 [ 578.732983] ? __pfx_key_alloc+0x10/0x10 [ 578.732999] ? security_prepare_creds+0x101/0x160 [ 578.733020] keyring_alloc+0x46/0xc0 [ 578.733041] lookup_user_key+0xa36/0x12a0 [ 578.733060] ? __pfx_lookup_user_key+0x10/0x10 [ 578.733076] ? __might_fault+0xe0/0x190 [ 578.733090] ? find_held_lock+0x2b/0x80 [ 578.733110] ? __might_fault+0x138/0x190 [ 578.733124] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 578.733142] ? _copy_from_user+0x5b/0xd0 [ 578.733162] ? memdup_user+0x95/0xe0 [ 578.733182] __do_sys_request_key+0x1a3/0x3b0 [ 578.733196] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 578.733213] ? __pfx___do_sys_request_key+0x10/0x10 [ 578.733225] ? ksys_write+0x1a3/0x240 [ 578.733238] ? __pfx_ksys_write+0x10/0x10 [ 578.733249] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 578.733263] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 578.733283] do_syscall_64+0xbf/0x420 [ 578.733298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.733312] RIP: 0033:0x7f9c07363b19 [ 578.733322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 578.733337] RSP: 002b:00007f9c048d9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 578.733350] RAX: ffffffffffffffda RBX: 00007f9c07476f60 RCX: 00007f9c07363b19 [ 578.733357] RDX: 0000000000000000 RSI: 0000000020000940 RDI: 00000000200002c0 [ 578.733365] RBP: 00007f9c048d91d0 R08: 0000000000000000 R09: 0000000000000000 [ 578.733372] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000001 [ 578.733379] R13: 00007ffd468bdb6f R14: 00007f9c048d9300 R15: 0000000000022000 [ 578.733397] 08:12:00 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) (fail_nth: 17) [ 578.797764] FAULT_INJECTION: forcing a failure. [ 578.797764] name failslab, interval 1, probability 0, space 0, times 0 08:12:00 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2, 0x2}, 0x0, 0xfffffffffffffffe) [ 578.806803] CPU: 0 UID: 0 PID: 6597 Comm: syz-executor.3 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 578.806820] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 578.806827] Call Trace: [ 578.806831] [ 578.806836] dump_stack_lvl+0xfa/0x120 [ 578.806855] should_fail_ex+0x4d7/0x5e0 [ 578.806876] ? assoc_array_insert+0x3c9/0x2b10 [ 578.806892] should_failslab+0xc2/0x120 [ 578.806906] __kmalloc_cache_noprof+0x80/0x730 [ 578.806923] ? assoc_array_walk.isra.0+0x1d0/0x5c0 [ 578.806937] ? __pfx_perf_trace_contention_end+0x10/0x10 [ 578.806959] ? assoc_array_insert+0x3c9/0x2b10 [ 578.806975] assoc_array_insert+0x3c9/0x2b10 [ 578.807000] ? key_link+0x2b3/0x350 [ 578.807013] ? lock_acquire+0x15e/0x2d0 [ 578.807028] ? __pfx___mutex_lock+0x10/0x10 [ 578.807041] ? __pfx_assoc_array_insert+0x10/0x10 [ 578.807062] ? down_write+0x119/0x1f0 [ 578.807075] ? __pfx_down_write+0x10/0x10 [ 578.807091] __key_link_begin+0xf0/0x260 [ 578.807103] key_link+0x106/0x350 [ 578.807114] ? selinux_key_permission+0x12e/0x1e0 [ 578.807131] ? __pfx_key_link+0x10/0x10 [ 578.807144] ? key_task_permission+0x2ba/0x410 [ 578.807161] request_key_and_link+0x2a7/0x12e0 [ 578.807178] ? key_type_lookup+0x1e/0x100 [ 578.807196] ? __pfx_request_key_and_link+0x10/0x10 [ 578.807216] ? __pfx_key_default_cmp+0x10/0x10 [ 578.807235] ? __pfx_keyring_search_iterator+0x10/0x10 [ 578.807255] ? _copy_from_user+0x5b/0xd0 [ 578.807278] __do_sys_request_key+0x21e/0x3b0 [ 578.807292] ? __pfx___do_sys_request_key+0x10/0x10 [ 578.807304] ? ksys_write+0x1a3/0x240 [ 578.807315] ? __pfx_ksys_write+0x10/0x10 [ 578.807326] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 578.807346] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 578.807366] do_syscall_64+0xbf/0x420 [ 578.807381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.807399] RIP: 0033:0x7ff077a56b19 [ 578.807409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 578.807420] RSP: 002b:00007ff074fcc188 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 578.807432] RAX: ffffffffffffffda RBX: 00007ff077b69f60 RCX: 00007ff077a56b19 [ 578.807439] RDX: 0000000000000000 RSI: 0000000020000940 RDI: 00000000200002c0 [ 578.807446] RBP: 00007ff074fcc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 578.807453] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000002 [ 578.807460] R13: 00007fff1f9a3bbf R14: 00007ff074fcc300 R15: 0000000000022000 [ 578.807478] [ 579.398334] audit: type=1326 audit(1768810320.709:220): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6569 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f107edc9b19 code=0x0 08:12:10 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) (fail_nth: 10) 08:12:10 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0x20000000000000) 08:12:10 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$lock(r1, 0x26, &(0x7f0000000180)) syz_open_dev$vcsa(&(0x7f0000000000), 0x80000001, 0x50002) fcntl$lock(r1, 0x25, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x3}) dup2(r0, r1) 08:12:10 executing program 4: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2, 0x2}, 0x0, 0xfffffffffffffffe) 08:12:10 executing program 2: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000080)='trans=fd,', &(0x7f00000000c0)='./file0\x00', r0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = dup(0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 08:12:10 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2, 0x3}, 0x0, 0xfffffffffffffffe) 08:12:10 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) (fail_nth: 18) 08:12:10 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r0, &(0x7f0000000900)="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", 0x200) r1 = io_uring_setup(0x5053, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r1, 0x19, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) mount$9p_fd(0x0, &(0x7f00000005c0)='./file1\x00', &(0x7f0000000d40), 0x4010, &(0x7f0000000f00)=ANY=[@ANYBLOB="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", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r2, 0x0, 0xfdef) mkdirat$cgroup(r0, &(0x7f0000000140)='syz1\x00', 0x1ff) accept4$inet6(r0, 0x0, &(0x7f0000000280), 0x800) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x19, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f00000000c0)=ANY=[@ANYRES32=r0, @ANYBLOB="53fde31c270d443f1db9d400a5e978072b8af9c814d58b3f78bc685e6c4e6a0e1f571c5e7eba2ce1bbff4f"]) r3 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r3, &(0x7f0000000200)='N', 0x1, 0x0) [ 589.374476] 9p: Bad value for 'rfdno' 08:12:10 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2, 0x5}, 0x0, 0xfffffffffffffffe) 08:12:10 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x1}) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2fee, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0xfffffffffffffffc, 0xb9, 0x5, 0x2000000000000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$lock(r1, 0x25, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0x4}) close(r0) 08:12:10 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) (fail_nth: 19) 08:12:10 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0x40000000000000) [ 589.459956] FAULT_INJECTION: forcing a failure. [ 589.459956] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 589.461069] CPU: 0 UID: 0 PID: 6631 Comm: syz-executor.3 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 589.461085] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 589.461093] Call Trace: [ 589.461098] [ 589.461103] dump_stack_lvl+0xfa/0x120 [ 589.461127] should_fail_ex+0x4d7/0x5e0 [ 589.461160] _copy_to_user+0x32/0xd0 [ 589.461183] simple_read_from_buffer+0xe0/0x180 [ 589.461206] proc_fail_nth_read+0x18a/0x240 [ 589.461224] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 589.461240] ? security_file_permission+0x22/0x90 [ 589.461256] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 589.461271] vfs_read+0x1eb/0xc70 [ 589.461293] ? __pfx___mutex_lock+0x10/0x10 [ 589.461305] ? __fget_files+0x34/0x3b0 [ 589.461318] ? __pfx_vfs_read+0x10/0x10 [ 589.461342] ? lock_release+0xc8/0x270 [ 589.461362] ? __fget_files+0x20d/0x3b0 [ 589.461381] ksys_read+0x121/0x240 [ 589.461392] ? __pfx_ksys_read+0x10/0x10 [ 589.461403] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 589.461419] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 589.461439] do_syscall_64+0xbf/0x420 [ 589.461455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.461468] RIP: 0033:0x7ff077a0969c [ 589.461479] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 589.461490] RSP: 002b:00007ff074fcc170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 589.461502] RAX: ffffffffffffffda RBX: 0000000002db229e RCX: 00007ff077a0969c [ 589.461510] RDX: 000000000000000f RSI: 00007ff074fcc1e0 RDI: 0000000000000003 [ 589.461517] RBP: 00007ff074fcc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 589.461524] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000002 [ 589.461532] R13: 00007fff1f9a3bbf R14: 00007ff074fcc300 R15: 0000000000022000 [ 589.461549] 08:12:10 executing program 5: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = accept4(r0, &(0x7f0000000200)=@phonet, &(0x7f0000000280)=0x80, 0x80000) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f00000002c0), 0x4) getsockname(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, &(0x7f0000000080)=0x80) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {0x5}}, './file0\x00'}) getsockopt$WPAN_WANTACK(r3, 0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) getsockopt$WPAN_WANTACK(r2, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 08:12:10 executing program 2: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000080)='trans=fd,', &(0x7f00000000c0)='./file0\x00', r0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = dup(0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 08:12:10 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) (fail_nth: 11) 08:12:10 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2, 0xf}, 0x0, 0xfffffffffffffffe) [ 589.535882] 9p: Bad value for 'rfdno' 08:12:10 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:12:10 executing program 2: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000080)='trans=fd,', &(0x7f00000000c0)='./file0\x00', r0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = dup(0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) [ 589.590486] FAULT_INJECTION: forcing a failure. [ 589.590486] name failslab, interval 1, probability 0, space 0, times 0 08:12:10 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$fscrypt_provisioning(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, &(0x7f00000001c0)={0x1, 0x0, @a}, 0x48, r1) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r3, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) keyctl$reject(0x13, r2, 0x7, 0xffff, r4) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) [ 589.615276] CPU: 1 UID: 0 PID: 6642 Comm: syz-executor.0 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 589.615310] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 589.615324] Call Trace: [ 589.615331] [ 589.615347] dump_stack_lvl+0xfa/0x120 [ 589.615386] should_fail_ex+0x4d7/0x5e0 [ 589.615430] should_failslab+0xc2/0x120 [ 589.615457] __kmalloc_node_track_caller_noprof+0xd7/0x840 [ 589.615500] ? key_alloc+0x43f/0x1280 [ 589.615532] ? kmem_cache_alloc_noprof+0x499/0x760 [ 589.615571] ? kmemdup_noprof+0x2b/0x60 [ 589.615602] kmemdup_noprof+0x2b/0x60 [ 589.615634] key_alloc+0x43f/0x1280 [ 589.615677] ? __kmalloc_noprof+0x4b0/0x830 [ 589.615707] ? __pfx_key_alloc+0x10/0x10 [ 589.615739] ? security_prepare_creds+0x101/0x160 [ 589.615777] keyring_alloc+0x46/0xc0 [ 589.615817] lookup_user_key+0xa36/0x12a0 [ 589.615855] ? __pfx_lookup_user_key+0x10/0x10 [ 589.615884] ? __might_fault+0xe0/0x190 [ 589.615907] ? find_held_lock+0x2b/0x80 [ 589.615946] ? __might_fault+0x138/0x190 [ 589.615973] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 589.616009] ? _copy_from_user+0x5b/0xd0 [ 589.616047] ? memdup_user+0x95/0xe0 [ 589.616084] __do_sys_request_key+0x1a3/0x3b0 [ 589.616107] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 589.616140] ? __pfx___do_sys_request_key+0x10/0x10 [ 589.616163] ? ksys_write+0x1a3/0x240 [ 589.616186] ? __pfx_ksys_write+0x10/0x10 [ 589.616208] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 589.616236] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 589.616291] do_syscall_64+0xbf/0x420 [ 589.616320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.616344] RIP: 0033:0x7f9c07363b19 [ 589.616363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 589.616385] RSP: 002b:00007f9c048d9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 589.616408] RAX: ffffffffffffffda RBX: 00007f9c07476f60 RCX: 00007f9c07363b19 [ 589.616424] RDX: 0000000000000000 RSI: 0000000020000940 RDI: 00000000200002c0 [ 589.616438] RBP: 00007f9c048d91d0 R08: 0000000000000000 R09: 0000000000000000 [ 589.616452] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000002 [ 589.616466] R13: 00007ffd468bdb6f R14: 00007f9c048d9300 R15: 0000000000022000 [ 589.616499] [ 589.636774] 9p: Bad value for 'rfdno' 08:12:10 executing program 4: r0 = io_uring_setup(0x5fff, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r0, 0x1b, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r1 = io_uring_setup(0x5fff, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r1, 0x1b, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0300ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002000028020000028401001b2d", 0x66, 0x400}], 0x0, &(0x7f00000000c0)=ANY=[@ANYRES64=r1, @ANYRES16=r0, @ANYRES16, @ANYRES32]) open(&(0x7f0000000040)='./file0\x00', 0x400400, 0x31) 08:12:11 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:12:11 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) (fail_nth: 12) 08:12:20 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x175) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000080)={0x44, 0x3ff, 0xbe0c, "e79e44257bf2fc053f922938a9144e5703a37eebaf877d74362b03ddf4e774605831909bbd76f210ed5737e34f03529e5bc7e6e4844a930be3fc9d3c23ce28bc4f733506"}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000000)={0x0, 0x6, 0x5215}) 08:12:20 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 08:12:20 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$unlink(0x9, r0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f0000000100)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:12:20 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2, 0x2}, 0x0, 0xfffffffffffffffe) 08:12:20 executing program 4: r0 = io_uring_setup(0x5fff, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r0, 0x1b, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r1 = io_uring_setup(0x5fff, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r1, 0x1b, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0300ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002000028020000028401001b2d", 0x66, 0x400}], 0x0, &(0x7f00000000c0)=ANY=[@ANYRES64=r1, @ANYRES16=r0, @ANYRES16, @ANYRES32]) open(&(0x7f0000000040)='./file0\x00', 0x400400, 0x31) 08:12:20 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) (fail_nth: 13) 08:12:20 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() rt_sigqueueinfo(r3, 0x0, &(0x7f00000000c0)) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x2, 0x80, 0x0, 0x86, 0x40, 0x1, 0x0, 0xffffffffffffffff, 0x1000, 0xa, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000100), 0x1}, 0xc10, 0x0, 0x0, 0x1, 0x5255, 0x2, 0x0, 0x0, 0x100, 0x0, 0x5}, 0xffffffffffffffff, 0x7, r0, 0xa) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x2, 0x3, 0x1, 0x1, 0x0, 0x6669, 0x20001, 0xa, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7d0ea7c8, 0x1, @perf_config_ext={0xfffffffffffff79e}, 0x88198, 0x1, 0x6, 0x8, 0x7, 0x3, 0x101, 0x0, 0xff, 0x0, 0xfffffffffffffffa}, r3, 0xb, r4, 0xb) r5 = dup3(r2, r1, 0x0) bind$unix(r1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r0}}) recvmmsg$unix(r2, &(0x7f00000035c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 08:12:20 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0x100000000000000) [ 599.010028] audit: type=1326 audit(1768810340.321:221): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6666 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc3fb339b19 code=0x0 08:12:20 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) [ 599.056778] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 599.058031] FAULT_INJECTION: forcing a failure. 08:12:20 executing program 4: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x7f, @any, 0x0, 0x2}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000180)={0x1f, 0x0, @none, 0x4, 0x1}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, &(0x7f0000000080)) [ 599.058031] name failslab, interval 1, probability 0, space 0, times 0 [ 599.059285] CPU: 0 UID: 0 PID: 6679 Comm: syz-executor.0 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 599.059302] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 599.059310] Call Trace: [ 599.059315] [ 599.059319] dump_stack_lvl+0xfa/0x120 [ 599.059345] should_fail_ex+0x4d7/0x5e0 [ 599.059369] should_failslab+0xc2/0x120 [ 599.059384] __kmalloc_noprof+0xd6/0x830 [ 599.059401] ? key_set_index_key+0x328/0x5a0 [ 599.059422] ? security_key_alloc+0x158/0x1d0 [ 599.059445] ? security_key_alloc+0x158/0x1d0 [ 599.059462] security_key_alloc+0x158/0x1d0 [ 599.059482] key_alloc+0x88d/0x1280 [ 599.059504] ? __kmalloc_noprof+0x4b0/0x830 [ 599.059519] ? __pfx_key_alloc+0x10/0x10 [ 599.059535] ? security_prepare_creds+0x101/0x160 [ 599.059555] keyring_alloc+0x46/0xc0 [ 599.059575] lookup_user_key+0xa36/0x12a0 [ 599.059594] ? __pfx_lookup_user_key+0x10/0x10 [ 599.059608] ? __might_fault+0xe0/0x190 [ 599.059621] ? find_held_lock+0x2b/0x80 [ 599.059642] ? __might_fault+0x138/0x190 [ 599.059655] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 599.059673] ? _copy_from_user+0x5b/0xd0 [ 599.059693] ? memdup_user+0x95/0xe0 [ 599.059714] __do_sys_request_key+0x1a3/0x3b0 [ 599.059726] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 599.059743] ? __pfx___do_sys_request_key+0x10/0x10 [ 599.059755] ? ksys_write+0x1a3/0x240 [ 599.059768] ? __pfx_ksys_write+0x10/0x10 [ 599.059779] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 599.059793] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 599.059813] do_syscall_64+0xbf/0x420 [ 599.059829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.059842] RIP: 0033:0x7f9c07363b19 [ 599.059852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 599.059864] RSP: 002b:00007f9c048d9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 599.059876] RAX: ffffffffffffffda RBX: 00007f9c07476f60 RCX: 00007f9c07363b19 [ 599.059884] RDX: 0000000000000000 RSI: 0000000020000940 RDI: 00000000200002c0 [ 599.059891] RBP: 00007f9c048d91d0 R08: 0000000000000000 R09: 0000000000000000 [ 599.059898] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000002 [ 599.059906] R13: 00007ffd468bdb6f R14: 00007f9c048d9300 R15: 0000000000022000 [ 599.059923] [ 599.070426] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO 08:12:20 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2, 0x3}, 0x0, 0xfffffffffffffffe) [ 599.125043] audit: type=1326 audit(1768810340.436:222): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6687 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f107edc9b19 code=0x0 08:12:20 executing program 1: r0 = socket(0xa, 0x6, 0x0) sendmmsg$unix(r0, &(0x7f00000007c0)=[{{&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000700)=[{&(0x7f00000001c0)="1aa2b1c837e1dc6b82c4544a1b9300623bbb0b562518b064f8bf8fe4264b0bedb920bb2f88d7ba9621b66072d64684c9c0351361ef6546e9d2d40334bf686ed35e122b2508d9db01811789fd593bb025a361cf983d6513f1ab281c4022d754d38dd5d1daa01f9c906c2f31ebe0c24c6718437f4d26225b2e8f4f8247625c992a555037a39d98f18ac2155073652bad998ee793c87a3d8cd5218f7cee99567c6d22e5", 0xa2}, {&(0x7f0000000300)="a194e1ed4f70576976e9b44d54e98846c9c8fcdd9ad10d67625715cc03dd6c6f869c602fe07eef7994b83cdba497f5e1108345f2994359ad3e798fac4d3510570e49bff7090261b879873022b20ba01c8814f34868b5f2a47795b82079210a4b20df2081302c8021d639598a72a38048b133d904a483d292366c5684276d4f30a7294d0ee14173cccdc7b14fe46a956daf90f37923de214ac743cba441fda2dc0bbae304269b87438bf117b0f3f73caf110ab2d35103fe4f4ebb5ced1dda0bf9f86535220bae0f608e5768f592bd19758b90bd3efd984b845fe845c0", 0xdc}, {&(0x7f0000000140)=')M', 0x2}, {&(0x7f0000000400)="ee7c0699e5c41ae6e34aef39eb2916e092a47cfc9a10f3cd5b007aa03fb88e9210427366d1f945474226af643f0038d6a9791844e04dc5acc3e23cb27f6a0b5258b5695224e666e6769d2b998ebd89f302ef2dd16688f36115b003dcb4e09b6e12c0199c46753a87ccde2b0f93f350bafaeebb6fb5aa71062c478f8d9b19ce410dc18cebdb8e7ff536934a5f7bfbd91295574bdaf3c4204c762f657e6dd8c91bfda6928bfdd39edf", 0xa8}, {&(0x7f00000004c0)="42c90b00bb66bc667da524b2c40ac701054990500bca5f046df86591567513ca1122b76ab151caa8c72a2d0cba61bb2e1e8b7d8d76279b1f9150b1f718f974ff24a95d5ef5b1efd45b6b7b1088b0c146f03022b2749f6f6e920928a87bd3f18c677036dd77ac233b6e08b9232d110852c915ecab2e6990feb8acbfb3549df33d", 0x80}, {&(0x7f0000000280)="64b7af51654bbaa4861b191dc6ce00cf6d68079459da904865082c11085f0daefa5ad4a018c5ec4e3bb71e1a3bc48b18", 0x30}, {&(0x7f0000000540)="7554597eff16dbf4dd2a416889012bea00597018b49720de94bacca475e19f2b5157325869f7c5f0b58d595597f769131b29ee43f05a83d2a202d0fcdb2aba9085d0df93", 0x44}, {&(0x7f00000005c0)="e36b107501b3ca635f5654d1058d7feb14dcb08f8c890309bdc874df04d64664cfaae38a193dd8b9c1bc037c02b0850b787f5febf142389bded1eb7e0084b87e5de204e052658232fafa2e55fda6351e8648a5a74df76c403625bca1221dcaf5f3462ff580239bd552c0ba36d5d4cce97876ce9822533a03123366c760206916254eb764d3c8c0fd3167df4d7409add12ea9ed3646e9527065bfb1f4a2229918d93292525fbe0e6b005319b8c2d508f6a62e3b5669b056e8d6da3afe8a06351e010d5326ee", 0xc5}, {&(0x7f00000006c0)="43c071ef6971cc72db6f7d6afaf71c126d5e", 0x12}], 0x9, 0x0, 0x0, 0x40081}}], 0x1, 0x4041) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r1) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) [ 599.951784] audit: type=1326 audit(1768810341.262:223): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6687 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f107edc9b19 code=0x0 08:12:31 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 08:12:31 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) (fail_nth: 14) 08:12:31 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x1000000000, 0x3f}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2ff, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) process_mrelease(0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000080), &(0x7f00000000c0)=0x0, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r1, 0xee01}}, './file0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/8250_pci', 0x100, 0x18c) 08:12:31 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 08:12:31 executing program 5: ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000240)=""/137) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0\x00'}) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000040)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x0, 0x0) r1 = inotify_init1(0x0) r2 = inotify_add_watch(r1, &(0x7f0000000080)='./file0\x00', 0x100003c) inotify_rm_watch(r1, r2) umount2(&(0x7f0000000180)='./file0\x00', 0x0) 08:12:31 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2, 0x5}, 0x0, 0xfffffffffffffffe) 08:12:31 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)="463f144cca40ec4483dd43fdf87937298976dc73ab5f387fa3e77ee67a4ea8df0a82a5bb9ec2dfdae6cb55cef229abde4221d02eaec26072b81b817fd88d862c299c850178078b6eb24db2d2fc9ca262c6d4e1d5bcf54b7886d12f6635572eb29b662b42fd4387f04f8d058ccdbafa91f46cdacbd2546c43e2613ee89951f930ff6b22a7452ecd9793a4de045f3a1a1d6fb3ab4ada1f22c27411", 0x9a, 0xfffffffffffffff8) add_key(&(0x7f00000000c0)='cifs.idmap\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) 08:12:31 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) r2 = dup(r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000000)={0x2, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x18, 0x0, &(0x7f0000000080)) 08:12:31 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2, 0xf}, 0x0, 0xfffffffffffffffe) 08:12:31 executing program 4: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x23, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e32383337383038363200"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000e883faa764e6453ab2efc3f3d55b247d010000000c00000000000000dff4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="0100000000000500080000000000000000000000040000006e00000000000000", 0x20, 0x560}, {&(0x7f0000010300)="030000000400"/32, 0x20, 0x640}, {&(0x7f0000010400)="02000000120000002200000029000f0003000400"/32, 0x20, 0x1000}, {&(0x7f0000010500)="ff3f0c00fc010000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c653300000011000000940f090166696c652e636f6c64000000", 0x1080, 0x2000}, {&(0x7f0000011600)="0b0000000c0001022e00000002000000f40f02022e2e00"/32, 0x20, 0x4000}, {&(0x7f0000011700)="00000000001000"/32, 0x20, 0x5000}, {&(0x7f0000011800)="00000000001000"/32, 0x20, 0x6000}, {&(0x7f0000011900)="00000000001000"/32, 0x20, 0x7000}, {&(0x7f0000011a00)="504d4d00504d4dffe0f4655f00000000647679756b6f762d676c6170746f70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7032390075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/128, 0x80, 0x8000}, {&(0x7f0000011b00)="111fc0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x9000}, {&(0x7f0000011c00)="0200"/32, 0x20, 0x9400}, {&(0x7f0000011d00)="0300"/32, 0x20, 0x9800}, {&(0x7f0000011e00)="0400"/32, 0x20, 0x9c00}, {&(0x7f0000011f00)="0500"/32, 0x20, 0xa000}, {&(0x7f0000012000)="0000000000000000010000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000d000"/96, 0x60, 0xa400}, {&(0x7f0000012100)="2719c0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0xb000}, {&(0x7f0000012200)="0200"/32, 0x20, 0xb400}, {&(0x7f0000012300)="0300"/32, 0x20, 0xb800}, {&(0x7f0000012400)="0400"/32, 0x20, 0xbc00}, {&(0x7f0000012500)="0500"/32, 0x20, 0xc000}, {&(0x7f0000012600)="0000000000000000010000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000d000"/96, 0x60, 0xc400}, {&(0x7f0000012700)="0c0000000c0001022e000000020000000c0002022e2e00000d0000001000050166696c65300000000e000000d80f050766696c653100"/64, 0x40, 0xd000}, {&(0x7f0000012800)="ffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff000002ea0100000001000000270f240c000000000000000000000000000000000601f80f0000000006000000779b539778617474723100000601f00f00000000060000007498539778617474723200"/4192, 0x1060, 0x12000}, {&(0x7f0000013900)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00xattr2\x00\x00xattr1\x00\x00', 0x20, 0x13fe0}, {&(0x7f0000013a00)="0000000000000000dff4655fdff4655fdff4655f00"/32, 0x20, 0x22000}, {&(0x7f0000013b00)="ed41000000100000dff4655fe0f4655fe0f4655f00000000000004000800000000000800050000000af301000400000000000000000000000100000003000000", 0x40, 0x22080}, {&(0x7f0000013c00)="8081000000180000dff4655fdff4655fdff4655f00000000000001001000000010000800000000000af301000400000000000000000000000200000009000000", 0x40, 0x22100}, {&(0x7f0000013d00)="8081000000180000dff4655fdff4655fdff4655f00000000000001001000000010000800000000000af30100040000000000000000000000020000000b000000", 0x40, 0x22180}, {&(0x7f0000013e00)="c041000000400000dff4655fdff4655fdff4655f00000000000002002000000000000800000000000af301000400000000000000000000000400000004000000", 0x40, 0x22500}, {&(0x7f0000013f00)="ed41000000100000e0f4655fe0f4655fe0f4655f00000000000002000800000000000800030000000af30100040000000000000000000000010000000d0000000000000000000000000000000000000000000000000000000000000000000000000000003934797f000000000000000000000000000000000000000000000000ed8100001a040000e0f4655fe0f4655fe0f4655f00000000000001000800000000000800010000000af301000400000000000000000000000100000023000000000000000000000000000000000000000000000000000000000000000000000000000000c24b17ab000000000000000000000000000000000000000000000000ffa1000026000000e0f4655fe0f4655fe0f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3238333738303836322f66696c65302f66696c653000000000000000000000000000000000000000000000da215ae9000000000000000000000000000000000000000000000000ed8100000a000000e0f4655fe0f4655fe0f4655f00000000000001001000000000000800010000000af301000400000000000000000000000100000024000000000000000000000000000000000000000000000000000000000000000000000000000000375fe294130000000000000000000000000000000000000000000000ed81000028230000e0f4655fe0f4655fe0f4655f00000000000002001800000000000800010000000af301000400000000000000000000000300000025000000020000000100000027000000020000000180000027000000000000000000000000000000baf0fe92000000000000000000000000000000000000000000000000ed81000064000000e0f4655fe0f4655fe0f4655f00000000000001000800000000000800010000000af301000400000000000000000000000100000028000000000000000000000000000000000000000000000000000000000000000000000000000000585592da00"/768, 0x300, 0x22580}, {&(0x7f0000014200)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x23000}, {&(0x7f0000014700)='syzkallers\x00'/32, 0x20, 0x24000}, {&(0x7f0000014800)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x28000}], 0x0, &(0x7f0000014900)) [ 610.408079] audit: type=1326 audit(1768810351.713:224): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6720 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc3fb339b19 code=0x0 [ 610.416677] audit: type=1326 audit(1768810351.721:225): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6715 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f26a9e17b19 code=0x0 [ 610.430177] audit: type=1400 audit(1768810351.741:226): avc: denied { watch_reads } for pid=6722 comm="syz-executor.5" path="/syzkaller-testdir925261749/syzkaller.828DCV/68/file0" dev="hugetlbfs" ino=13307 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:hugetlbfs_t:s0 tclass=dir permissive=1 [ 610.469438] audit: type=1326 audit(1768810351.780:227): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6735 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f107edc9b19 code=0x0 08:12:31 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) (fail_nth: 15) 08:12:31 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r0) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r3, 0xa}) r5 = add_key$fscrypt_provisioning(&(0x7f0000000280), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000340)={0x1, 0x0, @a}, 0x48, r3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f00000003c0)=@chain={'key_or_keyring:', r5}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) add_key$user(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x3}, &(0x7f00000001c0)="aecc63d3a920d0f07915f70d5cf9c93b45521f721e2680e52642cdb18c75bbbebabdf03841599c1061f5ea5bc2c7a90e2513a1fe17d5367e628592a028b14e56c80bdd7de90b4edd5ff3e0850c90b9647c6e4e4fab9093813ccd2839b88d16", 0x5f, r2) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, r0, r0, 0x1) 08:12:31 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, r0) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r1, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r3, 0xa}) r5 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r5) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r5, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) add_key$keyring(&(0x7f0000000000), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r6) r7 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fcntl$setlease(r7, 0x400, 0x1) fcntl$getownex(r7, 0x40f, &(0x7f0000000080)) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:12:31 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') 08:12:31 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0x300000000000000) 08:12:31 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r1, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) request_key(&(0x7f0000000100)='rxrpc_s\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f00000001c0)='id_legacy\x00', r2) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000000c0)='id_legacy\x00', &(0x7f0000000940)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r3, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, r4) 08:12:31 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$clear(0x7, r1) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) [ 610.566875] FAULT_INJECTION: forcing a failure. [ 610.566875] name failslab, interval 1, probability 0, space 0, times 0 [ 610.568522] CPU: 0 UID: 0 PID: 6749 Comm: syz-executor.0 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 610.568542] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 610.568550] Call Trace: [ 610.568554] [ 610.568559] dump_stack_lvl+0xfa/0x120 [ 610.568581] should_fail_ex+0x4d7/0x5e0 [ 610.568606] ? assoc_array_insert+0xe1/0x2b10 [ 610.568624] should_failslab+0xc2/0x120 [ 610.568639] __kmalloc_cache_noprof+0x80/0x730 [ 610.568658] ? __pfx_perf_trace_contention_end+0x10/0x10 [ 610.568683] ? assoc_array_insert+0xe1/0x2b10 [ 610.568699] assoc_array_insert+0xe1/0x2b10 [ 610.568721] ? key_link+0x2b3/0x350 [ 610.568734] ? lock_acquire+0x15e/0x2d0 [ 610.568751] ? __pfx___mutex_lock+0x10/0x10 [ 610.568764] ? __pfx_assoc_array_insert+0x10/0x10 [ 610.568786] ? down_write+0x119/0x1f0 [ 610.568800] ? __pfx_down_write+0x10/0x10 [ 610.568816] __key_link_begin+0xf0/0x260 [ 610.568829] key_link+0x106/0x350 [ 610.568840] ? selinux_key_permission+0x12e/0x1e0 [ 610.568856] ? __pfx_key_link+0x10/0x10 [ 610.568870] ? key_task_permission+0x2ba/0x410 [ 610.568888] request_key_and_link+0x2a7/0x12e0 [ 610.568906] ? key_type_lookup+0x1e/0x100 [ 610.568925] ? __pfx_request_key_and_link+0x10/0x10 [ 610.568946] ? __pfx_key_default_cmp+0x10/0x10 [ 610.568966] ? __pfx_keyring_search_iterator+0x10/0x10 [ 610.568987] ? _copy_from_user+0x5b/0xd0 [ 610.569012] __do_sys_request_key+0x21e/0x3b0 [ 610.569026] ? __pfx___do_sys_request_key+0x10/0x10 [ 610.569038] ? ksys_write+0x1a3/0x240 [ 610.569050] ? __pfx_ksys_write+0x10/0x10 [ 610.569061] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 610.569077] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 610.569098] do_syscall_64+0xbf/0x420 [ 610.569114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.569127] RIP: 0033:0x7f9c07363b19 [ 610.569137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 610.569148] RSP: 002b:00007f9c048d9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 610.569160] RAX: ffffffffffffffda RBX: 00007f9c07476f60 RCX: 00007f9c07363b19 [ 610.569168] RDX: 0000000000000000 RSI: 0000000020000940 RDI: 00000000200002c0 [ 610.569175] RBP: 00007f9c048d91d0 R08: 0000000000000000 R09: 0000000000000000 [ 610.569182] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000002 [ 610.569189] R13: 00007ffd468bdb6f R14: 00007f9c048d9300 R15: 0000000000022000 [ 610.569207] [ 611.223251] audit: type=1326 audit(1768810352.534:228): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6715 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f26a9e17b19 code=0x0 [ 611.304951] audit: type=1326 audit(1768810352.615:229): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6735 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f107edc9b19 code=0x0 08:12:41 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0x400000000000000) 08:12:41 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000001780)=[{{&(0x7f00000001c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f00000016c0)=ANY=[@ANYBLOB="18000000000000002900000004ff000000000018000000001800000000edffff28000000040000000000000000fa0000"], 0x30}}], 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000180)={@empty, @private1, @empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00006, r4}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@private1, 0x3a, r4}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1f, 0x8, 0x4, 0x3, 0x0, 0x3, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x49c, 0x5, @perf_bp={&(0x7f0000000000), 0x7}, 0x80, 0x5, 0x1, 0xe, 0x5, 0x0, 0x3fc, 0x0, 0x9, 0x0, 0x1}, 0x0, 0x2, r0, 0xe82279891d17a3ce) r5 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) signalfd(r5, &(0x7f00000003c0)={[0xffffffffffff8000]}, 0x8) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x4, 0x3f, 0x8, 0x6, 0x0, 0xfffffffffffffffc, 0x21002, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xea84, 0x4, @perf_bp={&(0x7f0000000140), 0x3}, 0x10, 0xbb, 0x6, 0x2, 0xf1, 0x2, 0x3ff, 0x0, 0x7, 0x0, 0x101}, 0xffffffffffffffff, 0xb, r5, 0xe) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001580)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r6, &(0x7f00000000c0)=""/33, 0x21, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) r8 = dup(r7) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r8, 0x89fa, &(0x7f00000002c0)={'ip6tnl0\x00', 0xfffffffffffffffc}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000400)={'ip6gre0\x00', r4, 0x2f, 0x9, 0x8, 0xe2, 0x24, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x8, 0x8000, 0x2, 0x2}}) 08:12:41 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) (fail_nth: 16) 08:12:41 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:12:41 executing program 3: ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="67da0000000000002e2f66866c653000"]) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000980)={{}, "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"}) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) fchdir(0xffffffffffffffff) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r1) r2 = request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r2) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r3, 0xa}) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r3) request_key(&(0x7f0000000240)='pkcs7_test\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000300)='keyring\x00', 0xfffffffffffffff8) 08:12:41 executing program 7: prlimit64(0x0, 0x8, &(0x7f0000000040)={0x0, 0x40000000}, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x0, &(0x7f00000000c0)) r1 = perf_event_open$cgroup(&(0x7f0000000100)={0x4, 0x80, 0x0, 0x3, 0x9, 0x0, 0x0, 0x8, 0x1000, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000000), 0x5}, 0x1, 0x5, 0x3ff, 0x5, 0x20, 0x9, 0x9857, 0x0, 0x7, 0x0, 0x1}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x3) r2 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0xdc, 0x7f, 0x3f, 0x4, 0x0, 0x2, 0x80880, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x1, 0x2}, 0x10, 0x5e, 0xe28, 0x4, 0x401, 0xfffffc00, 0x0, 0x0, 0xc7a, 0x0, 0x6}, r0, 0xd, r1, 0x9) mprotect(&(0x7f0000871000/0x1000)=nil, 0x1000, 0xa) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) perf_event_open$cgroup(&(0x7f00000001c0)={0x5, 0x80, 0x8, 0x0, 0x8, 0x1f, 0x0, 0x5, 0x4000, 0xa, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd95, 0x4, @perf_bp={&(0x7f0000000180), 0xe}, 0x0, 0x6, 0x7fffffff, 0x6, 0x8bac, 0x4, 0x1, 0x0, 0xfffffbff, 0x0, 0x7}, 0xffffffffffffffff, 0x9, r3, 0x3) madvise(&(0x7f0000871000/0x1000)=nil, 0x1000, 0xc) 08:12:41 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 08:12:41 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000880)=[{{&(0x7f0000000140)={0xa, 0x4e23, 0x0, @dev}, 0x1c, 0x0}}], 0x7, 0x400c880) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x8}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) r2 = dup(r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x6, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000740)={0xa, 0x4e24, 0x0, @private1}, 0x1c, 0x0, 0x0, &(0x7f0000000900)=[@hoplimit={{0x14, 0x29, 0x34, 0x7fff}}], 0x18}}], 0x2, 0x0) [ 619.786803] audit: type=1326 audit(1768810361.097:230): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6772 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc3fb339b19 code=0x0 08:12:41 executing program 1: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r2) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r1) r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x3}, 0x0, 0x0, r3) add_key(&(0x7f0000000280)='asymmetric\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000340)="08b11fc7e8b57a46eb20255296ec7142f1bbb39d808477cf06b372b8f28cf53a2175d0a777698e58eab555b56992d4659e62619245d87ff6489d07e3fdde0462cbc01926263b76a280578ed9639ae4c5fa9b5455b815bf718923c884108e30d8d7a7e33983cdd6", 0x67, r4) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:12:41 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0x500000000000000) [ 619.848164] audit: type=1326 audit(1768810361.159:231): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6778 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fabe58dab19 code=0x0 08:12:41 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet(r0, &(0x7f000000be00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)="06055ce8", 0x4}], 0x1}}, {{&(0x7f0000000e80)={0x2, 0x0, @multicast2}, 0x18, 0x0}}], 0x2, 0x0) 08:12:41 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) (fail_nth: 17) 08:12:41 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) r1 = request_key(&(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)='keyring\x00', 0xffffffffffffffff) request_key(&(0x7f00000000c0)='pkcs7_test\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='\\&(\x00', r1) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r2, 0xa}) request_key(&(0x7f0000000280)='asymmetric\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000340)='\x00', r2) [ 619.899886] audit: type=1326 audit(1768810361.210:232): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6775 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f107edc9b19 code=0x0 [ 619.921308] FAULT_INJECTION: forcing a failure. [ 619.921308] name failslab, interval 1, probability 0, space 0, times 0 [ 619.922254] CPU: 0 UID: 0 PID: 6796 Comm: syz-executor.0 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 619.922269] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 619.922277] Call Trace: [ 619.922281] [ 619.922287] dump_stack_lvl+0xfa/0x120 [ 619.922308] should_fail_ex+0x4d7/0x5e0 [ 619.922336] ? assoc_array_insert+0x3c9/0x2b10 [ 619.922354] should_failslab+0xc2/0x120 [ 619.922372] __kmalloc_cache_noprof+0x80/0x730 [ 619.922391] ? assoc_array_walk.isra.0+0x1d0/0x5c0 [ 619.922407] ? __pfx_perf_trace_contention_end+0x10/0x10 [ 619.922431] ? assoc_array_insert+0x3c9/0x2b10 [ 619.922447] assoc_array_insert+0x3c9/0x2b10 [ 619.922470] ? key_link+0x2b3/0x350 [ 619.922483] ? lock_acquire+0x15e/0x2d0 [ 619.922500] ? __pfx___mutex_lock+0x10/0x10 [ 619.922513] ? __pfx_assoc_array_insert+0x10/0x10 [ 619.922535] ? down_write+0x119/0x1f0 [ 619.922549] ? __pfx_down_write+0x10/0x10 [ 619.922566] __key_link_begin+0xf0/0x260 [ 619.922579] key_link+0x106/0x350 [ 619.922590] ? selinux_key_permission+0x12e/0x1e0 [ 619.922607] ? __pfx_key_link+0x10/0x10 [ 619.922621] ? key_task_permission+0x2ba/0x410 [ 619.922639] request_key_and_link+0x2a7/0x12e0 [ 619.922657] ? key_type_lookup+0x1e/0x100 [ 619.922677] ? __pfx_request_key_and_link+0x10/0x10 [ 619.922698] ? __pfx_key_default_cmp+0x10/0x10 [ 619.922718] ? __pfx_keyring_search_iterator+0x10/0x10 [ 619.922739] ? _copy_from_user+0x5b/0xd0 [ 619.922764] __do_sys_request_key+0x21e/0x3b0 [ 619.922779] ? __pfx___do_sys_request_key+0x10/0x10 [ 619.922790] ? ksys_write+0x1a3/0x240 [ 619.922803] ? __pfx_ksys_write+0x10/0x10 [ 619.922814] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 619.922831] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 619.922851] do_syscall_64+0xbf/0x420 [ 619.922867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.922880] RIP: 0033:0x7f9c07363b19 [ 619.922890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 619.922901] RSP: 002b:00007f9c048d9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 619.922913] RAX: ffffffffffffffda RBX: 00007f9c07476f60 RCX: 00007f9c07363b19 [ 619.922921] RDX: 0000000000000000 RSI: 0000000020000940 RDI: 00000000200002c0 [ 619.922928] RBP: 00007f9c048d91d0 R08: 0000000000000000 R09: 0000000000000000 [ 619.922935] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000002 [ 619.922942] R13: 00007ffd468bdb6f R14: 00007f9c048d9300 R15: 0000000000022000 [ 619.922961] [ 620.661706] audit: type=1326 audit(1768810361.972:233): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6778 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fabe58dab19 code=0x0 [ 620.673248] audit: type=1326 audit(1768810361.984:234): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6775 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f107edc9b19 code=0x0 08:12:50 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r0, 0xa}) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$unlink(0x9, r2, r2) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r2) request_key(&(0x7f0000000140)='cifs.idmap\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0xfffffffffffffffe) 08:12:50 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0x600000000000000) 08:12:50 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) (fail_nth: 18) 08:12:50 executing program 4: socket$nl_route(0x10, 0x3, 0x0) 08:12:50 executing program 5: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 08:12:50 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet(r0, &(0x7f000000be00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)="06055ce8", 0x4}], 0x1}}, {{&(0x7f0000000e80)={0x2, 0x0, @multicast2}, 0x18, 0x0}}], 0x2, 0x0) 08:12:50 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 08:12:50 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r2) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r4) r6 = add_key$fscrypt_v1(&(0x7f00000004c0), &(0x7f0000000500)={'fscrypt:', @desc4}, &(0x7f0000000540)={0x0, "b2510f51ef14c6d0a062d446033852aaeb44ce0a9e223d1082822ecbafc598a49d95696f497ef13faa88d0f8a37f32a5cb8183db47de6bbd063058766decca85", 0x19}, 0x48, r0) add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0, r6) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r4, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000280)={r5, 0x56, 0x13}, &(0x7f0000000300)={'enc=', 'oaep', ' hash=', {'wp512-generic\x00'}}, &(0x7f0000000380)="36d2ded27ae93f23b5e5b36cdfbc74e8ff4eb89fb8060fdbca6f636cf9cb8ce497c18ab4c080a7b782a48b78fc6cf6cd1f4a53216da76ca766a20cbdec6d03e61d30a55e91d4ff4eec02081524f333e76ef3506757de", &(0x7f0000000400)=""/19) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r2, 0xa}) keyctl$KEYCTL_MOVE(0x1e, r1, r2, r0, 0x1) r7 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, r1) add_key(&(0x7f00000000c0)='.request_key_auth\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f00000001c0)="61e5882c0cae5aeb9f0a274e355cbcd75c9c5aaecc671e142472184ae82d906258cfe24112c592dfcbf6bad7d952168df97eb51a61aead251137a620bd6415d55d3788cc88e95cb4624a0601c91e0f29a74a5d650393b88699acee", 0x5b, r7) [ 629.570481] audit: type=1326 audit(1768810370.880:235): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6826 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fabe58dab19 code=0x0 [ 629.594461] audit: type=1326 audit(1768810370.905:236): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6825 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc3fb339b19 code=0x0 08:12:50 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0xc8a82, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') r2 = gettid() rt_sigqueueinfo(r2, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000240)={0x4, 0x80, 0x4, 0x1, 0x0, 0x0, 0x0, 0x5, 0x20, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_bp={&(0x7f0000000200), 0x8}, 0x41026, 0x2, 0x7ff, 0x3, 0x80000000, 0x4, 0x0, 0x0, 0x1, 0x0, 0x7fff}, r2, 0x7, r0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGDEV(r3, 0x80045432, &(0x7f0000000040)) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGDEV(r4, 0x80045432, &(0x7f0000000040)) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) writev(r5, &(0x7f00000001c0)=[{&(0x7f0000000100)="a260e71500e54d951c03328db5a0bb7dae2b78e1e3ea28c2d602033d359b7cf58be43e85d7de9a1c1826d1faab32f759a08e728f44c34412dbb34c02eff2420abb6a784ba3b730d894ad51cb4f49460afedd4d1a75f44a6a94619c9213f42e659751a6372d1bf82a5aa6803780169580c281b509a2e47b51f0acf96b2509fb6cc2962a07807b538fd2e0c1c71462dec1ff035862", 0x94}], 0x1) r6 = memfd_create(0xffffffffffffffff, 0x0) write(r6, &(0x7f0000000480)="cab296f1f5a642dce1289ebc430c78e5a458f15b1b393ed2ab0a09771d950c4ee5968f2f377cc72f1cfde5305d92dcc2c88f20012fb416fd7493e6bad4f55779bc91506b884b90ebbbf8a864eec070b35ca75be174926fb5bb6161a1f3a4db61bd830c0d915697282370b78c037b58c164f0c9a8f86555aaf42aa9c897540a1d3a1ab929bec5bba4b52be2e9264f94aee9268b811db776d8f0e3ebac1a16f0d3fc601ed2a7e8816a1796bb4a57b05b3ab8ab77a8cd4f5149def21391cb0c3313ca9f23ad91ac3cc0046950483d55ded679319a79dbc03d55f5c3c4bbcefa607b6c73d1f7c9741d0ff0cf21f77417b2547f6f56ef2913d455c855960f20f49eb37b59e2975387da233c0bc2d4647c7865e2a755838ce60dc3831c62773eea48b1d0066483a6641f19af5dc8a81cd1e3cd1556d3e903d221f3c38dd3d4377b900dbc7481ad2ff5e08e364a98584fd32c9c6aa1c843a117d6b83f06c9a64e903c56b9c9eb0f371593c9e9fc65f925b9a0baf3fdb89a5b46af5bfa9525fe3ef3f053fb75013e43716e8a2ed1be5c430f493df01d2de250d8f542842a9113403ed6d688e7a88557ce67d622b5d29a994e5978c528b31364e7d3a608cb3bdcada8c39c4552d87a05ce1f5eb3ac6a684c05c10dfabc579fab7314d83b10796577782fad1e6d9fcc4405ddc7b9e034589504b58207338f1361aae749f1b0a1e90295d1a37347aaec15a171d2ed2a9c8ad9214f7ba3db263427d9339cad5dc6207343a50114c7632c0152000a0ab0b277a3b221e7acef8c762c99be9b0ee01b7d89b6516d167ce5e9a9fb600cca369ffdcd6887727bfb622e882ac6aa1ced8d903d4ed8f74e0192bde9e3f3b7e0ddc30db3c775e0aeab24074975e83fd3f373828f32078651822df0162375cb59dfc683901ab6b8e21b7631f35a6ee21e158c92519a8805ce4189b62ee0c4b13a2d8e7fd4b1f2327ee4c91c18c78423388356c53f74b016fcd136446afb0ff616bf573f57056a278d0ffbd1e05a7913895c7402bc5723fb28b3e516656717ca031ef9a0b40b2719d3aaeebd84bbddcdaba48d4e6e85d8b2e3260637fce315ffdfadfbf89a5ecf894eebf0783c66eb50c400bc68960c35191bc789b8e1639a3806fda50475521a1e33af403eed3fa8f6cece6b8171032d8e5b7de755ea4aa9ae6a30d88f953c0bd0dd6c6b0ffd7d5028616046bff26c1b03cc5d92b6b5634e02b5dfc1f10db5b4ba9ea4841ea3f7a777d3435401f7fc7845e6132ecb6b688e979c9c9b905473ff1ddc256c30c2381639582db3fdff2028732d64c8a626d3e8a52cb66ddb667e37f2a696852ace049803b804d4dd101007abfb69f40032ac906d1f9d7d7c7fdf2fa314b56c928b1957098c3cbe96334759659d8e4e3f434fe4a7e547b9b71106941419559635ee5ba99cf495323adf8ae2b0017c30468beb9200827d3f269dc8fe9ddb973a6a1ecf891ecb1b89a8a15dfb15dc2766f5465cc59efc2f68086e581a2fd57267342bf53cd54980621c7da500398bd27b8543ca0762d702260086278534c2eb914900d2939b5f0c1adb2466df7f18875980b06f503d53feeb20e141e7bfdff292ba90e9fffb5f7cff3534b2b6c88101d18671a401b12786baf7b319e3253472895b6529049d78b81a2546a5e11599c20e162b2344e070f82a81658693a36e909251d1ec7d0592b947aa293e7586f439546e0dc2bc79e17b1187a585f1b55620703d761aeb646193200cae8766802642a583b501e5b1e852bf4eb0e9ff3c8113c04199b13102bd71da0a519a0c6355a20cc416b20ce4c9831506ebd1bd6094ca98480e0f0eca84d9437e9a4edffb6f12dba4662dc6a0de225ae0ae0b848925d7f9464fbf6f4efb70312460915442e3ba89cc9c43c03ff443201728a4bed4e37a90ff402197b307645195865eda695bc8228d2c16d173485b05b43af4f02d6a08ff96e79bbf143d0f66822c165a038668ab741d2a2206f8058175884fd1e977c240bec61a9acf7f92082cfbe1a73fa21bc873a50ed86fce5047af615276be8205d10c937b4ca641b7b81cee81895f01014647b41fef33e453ab555fddf8142a7858f866b43990bd357d09841ecbd8c885ecdba605b18800fc237480ada443a5927268bbcb3b3ddf9c4fbe6ed95d2da04abae61582575eb92b4c4088898db3fadacddbc9afb6c5e89d612516f37db9c988cacaf49e7d2e680255c35ec9f1f4b0dba467bebe3752dc9cb98d280771211873163c9534675496b428432bf5a56d9879f0772746dfb5d5267e00a10a54bf5014c01bead2221a30468aef5e84fcb6009533405db6349c8fd103a6123509cc55d0fd46f2ad3abc44a618d5da46463075ee9dd66a5a006b865b22fe1a88885cbcf2488388cd7c71d2a6938e5380156a2a3464c94539a9377ce82c6c1540d18e46dc85817be4b99fa42dd7995ed640685294bbd731b41a4eb0e489e00816a67a16fcffca9c67666017772d31226743004a52e15105aba329401a216a1a61c33d05b4a89d8b00acab36091eb545027dcbbd329b8bd39387e91800d5767efe0f81ec4f49db9d85289741fa2506ab08a8d4d939c641e4e003dec1890f034ac54a1736555e5968a36f20a59cea6a772843f335d8b4b0eec73725c670bf7ade3758fb10a53e062a342aa838eb2c69d25e6ae889e85ccf2bf99da6f374c5253d3d7f6bc8dc399a6e235612bfe9b2b2b296be2ea34e164d0662fb362d75ca78662e8929ebffba39192a99f4aea7724aa2d85c6bd74cf288a5208083d6233c19ed2dea70324cc191df17acf192819d6661056e3b9646726d1d3bf8f7af0baf04b0b8d9c7d1fe09d90153ba13543259112fd9001d3d56bac5e43637e5f31fa32812caa7e51b13c6875fdd1a717a88c983bc901f4642d6c13c19d7a6ee63ee260d36cf627ecd037a50abc3c76b3dc356355477123afa4547b08fd616e5cdbe04a92476e0715ac5156c46966803dae5fe8fb1ee08f0aaa8be1a25a4e14ebdf55b5943d455e33df0bfca324526f05012b048036bea53d6dd8008b5e1f913469910435d4f17347154b3516da82706a9483724ef2e322f476c43f758a57633ae7877dab924b8d6a2ba8bac826db792eb55b9f66d0c9c22a3db76e27ff8df6f1b2ca71455f797ad809868dd5bc73ab1c961129a9ee9e3ea05668d1f4813b43bc39627af9b6bd1c30b948c651a58f73c9dc7e0894bf6e94fb56ed4733301be406e7630739ab736bd1085da439360a80a8c87aef7a92734d11a80dc0bc009159759a6f4dfc38e1f6522c8583d20d3774a1c3a8784e37638b41388daab04c5117850c7a45e4cfaf12836f90fe318f6372d5dfbef261167762bc43b171a17e9c0a81efc4f18f0752c0da55346491ad2501758dcaaa05bc0a01215d97b925db92f3ef125882f4713ecd7a220b81d8ede793b0d6ba0bc4b0524f16d379597317187e98fb84c82e93a466885a6c6ac9ac7c61bcf99e2ee02fd17eeae576a7974b9927d02aad0972dc608acc7e1e2a116aaa1185a47967973c0df2195dc6793d6f96e2d268f8650d81d55acc73f00fb429e2673257649da465a9a751222e292c7168e24b2684047b8d420d44e70a8ee9ecdf66de7e1c1d34cf7230d0a030d7f6314e37e2dc8a19b259398671ddb12bb236dfba818f60d55e532c9b6ab9536767819ca2656cb3e383dbc3e09b21c62dcffbed866aaa9d8d3374c182e7ff0bff41a4fdc2b4c012301f1b84d923e8ac376f8325b3b30e87f0ca90fbb6fe4668f5f21c1c1b3057fe9e070bd3f6d168f29275525256c02475bdca6594de61cead048f3a4c446f91114c5322c777eb783a4dc2e9a7462ce8d47fd71f22af01143c0ec517c1683102af326c357e055de6d219dbf9aaae28fb3f3d303171ade8a47e9978310bde7b26b8bf3c98bf45175482ed53cfeff17755db3767e0a4d9d180b3758a1b9d2d5ec9c5002fefe313c309dcf64007fa8797a6c5ead5454f6c3afc55328e77d3c119a8ff516cae4a4a3a672e069479dc5addf40633f85097e9ecdabfb5acfd7a9be3f40a5a8c1b7f6d54a37fa50ce705668ee3655892e260cf478879095debefe47dcda1c738b6d0928b359345354c25968b2fbf9cd29268967131b95837f0ec9b4e225c7439ac875de383ca3b032980cddee8d03cc57a87253f6f13b2dec679d7534a6a5a7d7988283e02ccde83f2bd12241e938252ca9573bbace9dbbc6ef43935e1ea637739dffcf44578ddbbea1936e5fbacb4fe66469f62e5a007f56eed99c0818e23ae7efeebdff43657876fc4ccb525227d7f9ee7c61880be06046c3e78ed0c2e09db0c473d343deb8d22068d4a16fcf8b53ff16ede0939b17431e92fcaa244a038b735c01bea491666ad289969659300868d6aa053a800d06b663b6cbeb3d66903b5ddbb545decda73df9f54bcf34881aeb035b2d08f82dcac2665d9508d02e7e0d5e4efa5a6520762e62d52be6289eae696aae7b142cc1d997673841873053961e60c28da74326d7b9f17bb7e2aaef7bad76647e20736eb21ccafdbf62a82dc5418996b2256f58cd3aecc5ce471f0d7addf3efc70274a020e8381b561e2365eb2add7a3c96c57d4596ee212a747bde2a4f472e0de436d3b7ae9c805498ed499b3c0d25d27f86588156a47c5bdbe463f5899434d60ba7cf8c591c3b4246dd67175a03716d34e42ce80ffabb25b61c17c0518fdab5851704ca094e36ebe5cc62f54faae06bcb4eb538d6dec9758c5e171e07a38e3b8c058e29ea7b90704902e524d2f3cbfb7b83aee242b562ce4049f0dc0f46ab78ce50152548f7cbcb376b858b18ea34975da6c891ca410fd610742fdcd2625512a91fb8485dac9fe7c5751db4784d0f5221860c2b21352ce621c893931c28df615b523e80a6909a39f62250983c646c3ac9586ebe808d2065ae99feb7f467958a2aad00eeacf8ea0caa223c80054bfd187b5ba9f375ab918309191d32155067e150b15b01c5a5b7d60c994322c518bc0c4520d984e947a85d4326f116f3e58078c871c2856ebe41f28f828a0bcc2216b8b73774b8cb84ed5d842f168c44035aac270382e8aefe3e4e84d4c34f33ef8faaf9dca5e089aae1a54b9f98b1dbb314d69a264f348fc5b7657ea5415105f6914b3ad06b06a0e6c75bc39b29bc1ec0702d8486640f29069cf19e03298e8dd4ba7fbcad09e745b1cb6d3a06f7d88b2fd7142bf9bd0cb05d3eb9fb5a78bb502e6413b73b86221be6433640f67e868b22524ad32f8dc38ed70018238859cff1f7de253f28fa7c7a9cdb696e7f3c3c9b97917532f6233025dd222835dd170b154361f0ef4b232e518124d13448d0a5ebb4c711443d35405aaeec19b45cb03c93d8de0f25768815f2405c9a81fc15f0992996dd80b3d2f64ee6070b0670eb32a08997a5e8213efc71338c89119cfd67ffbce9192d57585cf0e6db0b81e91b406abf40f172a54819d6d028b2c963ff139661fc73e0cd93547c09ff7a93953bd4be0185945df2a7a5d90b20934ae19acae63acd9cf2095cc423db280d392ab383c08f2da411b16f7309e42b520eb6c37a1e678a3f97c17712357c9db03a9cfc46836b9aa363e03294ea79d2cb1813797f5ede6af0194565709dab578c38251a507a561ecdcd8112cf78f1a54162146469159c70ac76544e4373466713d5f40a5526d02fef1cfa88ed7234b4329d65b9ea6e6b550b0fa89481dbf068e94652fd48f2fb07e8985068567687940ee148f0cc647239396264f72ea58d7a52bcd194525405636035", 0x1000) r7 = dup(0xffffffffffffffff) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e732628137f7266646e6f3d", @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB=',\x00']) ioctl$TIOCMGET(r7, 0x5415, &(0x7f00000002c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) pread64(r1, &(0x7f0000000040)=""/156, 0x9c, 0x0) 08:12:50 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:12:50 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet(r0, &(0x7f000000be00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)="06055ce8", 0x4}], 0x1}}, {{&(0x7f0000000e80)={0x2, 0x0, @multicast2}, 0x18, 0x0}}], 0x2, 0x0) 08:12:50 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) (fail_nth: 19) 08:12:51 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) 08:12:51 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='cifs.spnego\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r1, 0xa}) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r1) 08:12:51 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0x700000000000000) 08:12:51 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f00000000c0)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f00000001c0)="6c2be5f4c9552f38f8d79292944367be4ebd03a057ef6cc0e8a857493371f60eb6fc1558027fa23ba2bc54d9d2d56fca5fa8301038747c5fc3b063cc1066140c92f56db110b36d6d18760da94a76f47b1f438bf1c643cc25283d8a6d4419efe6f79d12b9997b164cd6df554d70fb3f7b294c3ce665cce6056f3592dcea6cb56052caa27214ceab7baadd82cc0b0412f9182e8c5c64dcc1efa1ab3ea33522ed0b14a797b4a493b2e69718efb858dbad33cd993f1c6726871366100ea47e32c030465764c45a89435782ca504d49", 0xcd, r0) add_key$keyring(&(0x7f0000000140), &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, r0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000380), &(0x7f00000003c0)={'fscrypt:', @desc4}, &(0x7f0000000400)={0x0, "56517f21f10f3d450c34597f7bc20768a30359e3e0e5102ac704126f2687f47e633d1edbf9992a5b3dc912120b4233b545ed19679ab4015615146205486d05b6", 0x25}, 0x48, 0xfffffffffffffffb) keyctl$instantiate(0xc, r1, 0x0, 0x0, r2) request_key(&(0x7f0000000040)='keyring\x00', &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:12:51 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet(r0, &(0x7f000000be00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)="06055ce8", 0x4}], 0x1}}, {{&(0x7f0000000e80)={0x2, 0x0, @multicast2}, 0x18, 0x0}}], 0x2, 0x0) 08:13:01 executing program 4: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='cifs.spnego\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r1, 0xa}) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r1) 08:13:01 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 08:13:01 executing program 5: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r2) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r4) r6 = add_key$fscrypt_v1(&(0x7f00000004c0), &(0x7f0000000500)={'fscrypt:', @desc4}, &(0x7f0000000540)={0x0, "b2510f51ef14c6d0a062d446033852aaeb44ce0a9e223d1082822ecbafc598a49d95696f497ef13faa88d0f8a37f32a5cb8183db47de6bbd063058766decca85", 0x19}, 0x48, r0) add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0, r6) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r4, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000280)={r5, 0x56, 0x13}, &(0x7f0000000300)={'enc=', 'oaep', ' hash=', {'wp512-generic\x00'}}, &(0x7f0000000380)="36d2ded27ae93f23b5e5b36cdfbc74e8ff4eb89fb8060fdbca6f636cf9cb8ce497c18ab4c080a7b782a48b78fc6cf6cd1f4a53216da76ca766a20cbdec6d03e61d30a55e91d4ff4eec02081524f333e76ef3506757de", &(0x7f0000000400)=""/19) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r2, 0xa}) keyctl$KEYCTL_MOVE(0x1e, r1, r2, r0, 0x1) r7 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, r1) add_key(&(0x7f00000000c0)='.request_key_auth\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f00000001c0)="61e5882c0cae5aeb9f0a274e355cbcd75c9c5aaecc671e142472184ae82d906258cfe24112c592dfcbf6bad7d952168df97eb51a61aead251137a620bd6415d55d3788cc88e95cb4624a0601c91e0f29a74a5d650393b88699acee", 0x5b, r7) 08:13:01 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0x2000000000000000) 08:13:01 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) sendmmsg$inet(r0, &(0x7f000000be00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)="06055ce8", 0x4}], 0x1}}, {{&(0x7f0000000e80)={0x2, 0x0, @multicast2}, 0x18, 0x0}}], 0x2, 0x0) 08:13:01 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @desc2}, &(0x7f00000001c0)={0x0, "09cc2c9c22fba214457129130b862fc0cdc1563ae055f43f2ac84940130ecec6ab042eec14f56843c6e5f2bfecbf408ade264f8b07076ef2f9b523df472e102b", 0x37}, 0x48, r0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:13:01 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) (fail_nth: 20) 08:13:01 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) r1 = request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$clear(0x7, r1) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r2) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r4) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r4, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000200)=@chain={'key_or_keyring:', r4}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) add_key(&(0x7f0000000140)='big_key\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000300)="bddee9f76fa6d1a4cbab7ee2a6582a5c8dcf017ea91b546a5cb1e5c7f9c9cc824841ca00c7e5ef18b509419396e426b6a12ab64cfb275cc97a1bf36699341141ec3365d8f412b50a91e01fa85c41e07598acf813c04f2634f40bc7685340c393cc396a1a7dee6b3ae0f6ed446563f0912641e4eb272d4a9bb1f8e985c481ef327b23573df91724f13b653bf52dd63314cf90253b3fc8ec6b808a4b7a19dbe3fc51b54ac508856043d85e3fc4085b83eec4e95fbc9a585aaa1bc14e3484a99e21b660f10c15d70835b05590e2b11e71db4db37c22d2a380a02c25b93e959c8529ee00a8a076ab54d8a7ed63bf63", 0xed, r3) [ 639.855218] FAULT_INJECTION: forcing a failure. [ 639.855218] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 639.859215] CPU: 0 UID: 0 PID: 6884 Comm: syz-executor.0 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 639.859233] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 639.859240] Call Trace: [ 639.859245] [ 639.859250] dump_stack_lvl+0xfa/0x120 [ 639.859273] should_fail_ex+0x4d7/0x5e0 [ 639.859301] _copy_from_user+0x30/0xd0 [ 639.859323] kstrtouint_from_user+0xbd/0x180 [ 639.859338] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 639.859354] ? __lock_acquire+0x451/0x2250 [ 639.859374] ? fdget_pos+0x2a8/0x380 [ 639.859392] proc_fail_nth_write+0x7b/0x220 [ 639.859409] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 639.859425] ? lock_is_held_type+0x9e/0x120 [ 639.859440] vfs_write+0x2b7/0x1150 [ 639.859451] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 639.859467] ? __pfx___mutex_lock+0x10/0x10 [ 639.859480] ? __fget_files+0x34/0x3b0 [ 639.859491] ? __pfx_vfs_write+0x10/0x10 [ 639.859503] ? lock_release+0xc8/0x270 [ 639.859521] ? __fget_files+0x20d/0x3b0 [ 639.859539] ksys_write+0x121/0x240 [ 639.859550] ? __pfx_ksys_write+0x10/0x10 [ 639.859568] do_syscall_64+0xbf/0x420 [ 639.859583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.859596] RIP: 0033:0x7f9c073165ff [ 639.859606] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 639.859618] RSP: 002b:00007f9c048d9170 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 639.859630] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9c073165ff [ 639.859637] RDX: 0000000000000001 RSI: 00007f9c048d91e0 RDI: 0000000000000003 [ 639.859645] RBP: 00007f9c048d91d0 R08: 0000000000000000 R09: 0000000000000000 [ 639.859652] R10: fffffffffffffffe R11: 0000000000000293 R12: 0000000000000002 [ 639.859659] R13: 00007ffd468bdb6f R14: 00007f9c048d9300 R15: 0000000000022000 [ 639.859677] [ 639.885421] audit: type=1326 audit(1768810381.196:237): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6879 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc3fb339b19 code=0x0 08:13:01 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xd861) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000000)={0x4, 0x1, 0xb12, 0x2, 0x4, "f08afa152a0660e7"}) ioctl$TCSETS(r0, 0x4bfa, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5bb26db1972e773057b3ea66b0ae4f43493b5e"}) 08:13:01 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r2, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000200)='trusted\x00', &(0x7f0000000040)) add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r3) add_key$user(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000980)="d90d85ab3414328e80e6ab91d14a81e6e3b7570d7f710d8f194f71abd4bbdafcc586a7decfba141d157e55c06e9a944bc6d35e186700639fdbf96074a607df5abebbc932161b55cd5212d89483ec02b4a47ad27a344b659902396418050c71b966d8e688ec6cb295b8eba4c1a691babd3e1eaa20636b204bae487e31571339f27fa4be21e6d9507834e60fd8c37ee54f8cdbeaca183a2d186489dd484f445f3ce17c98703f7029abc1ebf8d28f15ea83fd6f07e85bd195cb775e08a70733c51924c794f050a70b4ba6bb68bcb6e1a3d6b0f123c84b6450a84ea2eaf07db80c568b552164587297ee5f086f82455a272cc4d2211b9f4712192931cc2093e95b89a31fb7fee0d0de8b2c90ee288c45a9531d6812bafadd50f88265f0953f0f109b8e14d1cea7c3d58bac8affeabd78a7051a0c3ffcbf1bdfa1c75601f8bc34b13f166190304e2e968c23e3414918a04c0b6335d5b15965323d542f8cb21cc562e05461923c2bba3dd07543fa0fa195999e539cf2eb66eaaffce32503007133e268af41c3e8f453383317aed28add43d67757cb8e39c2126f9235e3ef3decd3607933bb4a623cb71b8e23175c5de07f6fd3b826915cb96c7c5f2ca02c48455fee883698f360053d4a8c798369dd1fc0f663761c7cf1fc0a76df8319f1ce61231df9a18e3b4c8fd4320b89b0b7db59477fa7139b3ad8fe6f87d05aab988ca3c656c58df9ee2092b224ac0d1d2135202a439e3422dcbb525805fbe9a90eb37e6dbf7a1e4e09731e54be1447fafb7a9190571668c4da2cdb79e205498f7dcb62f7cd267d4e65b7b36bcdfb545207aa707af1bdaeb3f5dd11e5c8a8dd7b761e19c3232519e9e009c68cf4b323ffc05dfc9dab4698ac6f11ae39495720e6efceca7c925e24fb7ac1a57a08c47b39e6719b067fa93c0d592be858f3142d78237991bc9e953321fda45518e0c2a40d777329ee8805f306357fada2501dc88730616a5239d5ab9faf7ec96c01344bd162d3da001d2ca7e1b857cb2588f8d5f8b5c1f058b37507353d62cb4c82aac693f1b44d4673a9d58c595487bced969567f90620b8836023ab0b7949271a48bb527e27a28e4a533594e24af2287d9b0a15c52969e5436865c8122d625da3acb65266c5952144706c421654d76efc0cb731eb78339ee7e36b8929339f7368420eb912c2258a2492f89e6904ffc684f62c21739a93cc0395dd65b1d5aef071f539cba40263c317408e2ba4dbe6168476181495006d0c39395a6a7a16d583c4f6e11fd1ad477282ac6a64f73add851ccf1a7c32a2a64c45950acd3da85a7ee416f76ec23b1addc802ca08d3570a885535f231bf93388ccfdc6686436139eb72c661c297d1f703f08c719d8a15687868e55a4ed1d307bc69cc6e6ac9adab0459a0a7a8829205c7d00a40956e00753adeb88eb5d0dd88aec0a66520ee950ba24b10aef1c4d9868f8b3c87b508c5e5c68747e9e89bc387901681eb29f5e7873cb5f71e74f3e4e95f48b984e1b90e38d83d27c5a720c8e9b21be5ffa78ea6290a7a86bd6e0d44c0b245fa7ea66227a22643c2eda645b5887c50b18be7bffcb6237291134e5793c4d66a37b7ba21032eb3eb5a9f477f2370233e368f979fc230a52bcc71148f2790c523a1fe35965690b8890e865eea34a41499fffacf1caba5aa8071222226a21d970af34800aa4f8d2227c2926e8cdcfe3d03e1ebab1199e3ff3b7935b28fbc31e3d26889d598f19a834293ad5091614e89611588ec5f3090713ce41f40c06cd98665a5d9c895b2059e188719ca21144fa35c032c3e3ac41856fd83c50528facc10b3b4ad9a9f9c375bc01398de532e2cbf6537db3633d132e7fad2184bbb75c4a5bdbd62a481c10c10348aefd335e43c9cd450eec244855abb8303bab65c6e0f5c5cf07258fc156217a10fedb6752efd441369a68a1fac4fbd6fff146ccee743d3cf86466d32b12534be7da7d977c079083fcf00cae78361d25fa1ac060d1444b493aa78a6ec77312db2e2fe5c8dc2c678a88f2b276836c9f9fa97c7982110bec9a6919e64d41c7129a0ac9295bdb96f212de759fad65940fe17618d3771f09f167e910d9086f8b06876548dcab2fcc96a1d2dd204ec6d755f7924b27efed8d4d036cc7a80263db5ac40576051e266b91e1b70731770ef31eab510f5db053cf117a5260bff95444c6d8befb4859961869ced1a3af0fcd887aa2221d62fb04a311c4cd7d5664b9c499acc5421e91fc3312e712c272c512cc566b1db3371663aac0da715e55dc2babf397311b98b94e41ccf03c11060ee07b8ae285000b290fbbd89819a1eae4f0572d70458e7af3056785a54bbaf3c54baedda2bddf19bbd6020c2c1c3b1bad91f5c9ff92449cccef6c7609a9351074c1681abb36f500ca14d750c7226358e4f0b5d0dbbe83e0d4eaa8c0f7a32795d608b3fe4bbb4fae9288290d959e5a27afe040c2b59b6a90d5ae113dd4c0d29ac53b79ddb34e7681cf243c1ec0c1b62695a7d25ff6dff829db2a3ed6dcf319c962bcce7351d627a87f4fffec31264701e67fe1258ac477f82b70479f5f991d21d99784387e7c0a14342ca44580476f0d2e2975cca3dcf726791fed49332d5c33596db0d867feb94e156f84997d44bf4bddf57cadeedcaa65585b5de0810d3531f21db11bcbc3917e28560f5cf83b05caffd256379c1c02f53e0bcbb22c05cd1527f81ed6daa1ca4a325f4fb3617b75f30fd61ca22651ab12780fafdf412b086f63f33dbe0a3b4daa53bdd5223510ceb4d1dae2d23baa026c63a9e91887519b1543a9fc8cd0cd0540cf5927d5b95c1a0ab0f85bffe62628d72aaa18acfa959af89fd60d66bcd05bdb6219e95a787c5b3162384e44fbd3344f5dfb8bc697b3742cb9f247620963498a4ad716c94ff6d9570b39df687e1b0f8374063202bab6b5f4777a7fd29b93a7ef072571bf8870722581549e0b9dc758b54400b346286d77bdc4058f6d6eef04d714065ce0b60ac55ea724b884ededf3d77480f176508476365ac10417fefe3a5ac9177cd832f1cd3e9646d489cac70bfb0430bfde2eabea1598884d0859b98f0df9e12d908f995c31cefc91cb9c1cb06c36657226c623fe3b15cc3c87bfe988b17622c07a40af80d48b0fe6d4ef25c3f6e8a57ad55e4626dd955d65d5573ba52b6c1f827122394c7005aac76cc26f48084626eecd11644fdf465fd60ebdc54fe4ad2ca644b935a1388a95affd09016d28bace8ff303ad9cc002ca53097bf0e3fe54354c52e90b0c692d7fd323208d541e64e3a80e7c678cbf6fcf281b13cdc9920b9d13c7a104de65e4c83d357e06247d8d186356706b1b3750fb22415a144917d9801f7417de840d55a665763d6718d00142dd39e3cfc4381b65980a5b15867317746d32ac97965ca64bf69edc76e655cb00b6cc71501396c62a8f4305d4db4017a88640159da9184f0e54e0e550eff81de73a60bddbdcb59f8fd509ba556ad5cbcafeef6b857fcc30827a2b645a4ed10cd403518785e182e23c1bb2987093fc4cf7f27310641126affb94f1e16a20e33737d1be86ff4e64782471a21e9ca97a5785ea404897675fb563020c5058d7b7e45d0bf76fc195052bc843aa2846abc0d69ff0b503c2627eaaf5ac8ea38e5d47983d5dc3a48420500319fca3f025ce23679cb9615a86723db7cbbf1e414c94e44c244a0e6d3c0d7e4be22efa05c9e196877672dbd2cbac7d7faf402e248e53a7136546b7379c0b4e0fad186ee986e153b7181c2d20bd26df61eade16255a990a79598727e9529c0dc7261e92227465ed7b4cb03f4ce375a4eb54362d1a5e8a2f40cafebead8d4b7d1dde7bb3cfea37f40e7ad7e06b833a83da5804b2e7be3cef56bd315f73d1bbca9d349a69199eb507e889ac365344c487d9b6c5e679a46ba82d0cc6211efa89a9aefd03eeab70682ac464d85157e3311d5109f01dcecef8efefc9bcb07436c27d1be1fab1f5d91a5deaa4c74ca6f096101512ad32cffc4d946651654f0b2aaff7dc00caf3ba58b9c9672abe800ce0f4260ada86cf03382e044a5659dac5aa65b89d9dca7cd381214210e26903340e649803ebef37fb62f29c55077976896f9baf47c2a8bc2f188cb7dc5fb83fc233f538bdd2c038fc4da556375f268894ad7c869e9a05e1e3fefca4978d21283cc7c870c6045b9c9856e1f305de93309a582ac6a01d958041537653bf503f068d319aa1138354b92ae8ca3946dba4bba02fbb55f972626fd86e215453c3efddf70a3e621683c376d00ff480189f462d9676db8aa25909cbbb54e47340b34cebceb812c8b803ede94f8b688601fec5863d3498d0ad2603ba7329a4c4aaeeb92835f40302ff960d5f1c34ba2721ee065ed28873885c30d535a363e88a8c68c475b32c414ff360f2ac6deb4be10138d9358f4b557c5a7c8c956bbcb2759a3496a2623cfa1b2b9f9a1ad5bb49059f1ce9d8c4c91390605796078ea733d92c45cc7d48ebee3694e4415c4a8c6014e52a235cb3e2940842ba86b05eba611ce2f0b0811f06eb24425db8572e78e348d8d19b8e543a360452f4fe515689ed796988ba660c46d59a75e04bca1e94fa89c9061766a2987f9a4e2be24e300c3c81515308c578d6ff2d30c79887ca6168aaaddaebd9308317f5882515f5fb35fd6fccd8de93010c2bc6eed886141a3584254e4f61fa690a25309723c7bdd3778f76f0d9ef210967b86328b1e8fb68a0190b71ec3e2d09f1be903799ff26fdd14c92a0de24599397004d3f22174eea1f0c15975299d3703cc5f04cf75fae2cc6061055d99a2118b068a6864a9a4b64649ca24f56e51ad934aa160d16518ff3e01923ba666980c95ae938a30d8a6603cc4b9a2a9194d7a7e8e3ca375fe80bb4f455c74f93aa204db8189ee2d97999f87ccebb634cdb862b74bf78b21cca9bd85fcaf43b41d4df9cc8d249f0323cf9c459164280e30f33d597e61d5d2eac6ad29b4cd6d97135e9aa97c12d7d1e64de8be56273e077eb9d72e55d9db746b97c76c7160037cf0318a0f8f3ddf9e3b1be5ced29034e501978eb3bd2dbd48468c777909933857d55ff2c03bb48b3fbece296adb0c642a5959f50c4bdb1e58b11c16999f46ccf61ca25373853d5240b10df36e2516531f6fbbad07f21b2a648edd2a3ce925cc8e43e588b83058df42ae09f39954c080f1b6fc755a18105dc99f50d6519294780f88f1b0eec37a9ac1a657dc4ae173b01b0b54c193cd3457978433dc9ec46d802ff1747f3e938e72b3a0c45e6f0e5570018c9297b9324631b6f7ee546baf268e009ef4dc3259feb185c27904711555a11151a9998a05932a18649bba0f83242885d50482fc3de7af1ae7af6e732b032010cddf9cc4e9013e7f3deb398ecf24574a0f8fa945e19afeb6fade7e55a1feee1c34d5752e70d56d2f84518383a56928c08c615bfb0c658cc104e776c721a5239ace3f887ab9e0974a63a1cfec32f02295b7b0e665fe1fe797e12ec22c234a247bb4b0ab84f3debfa49f10c0524522e4e008a0cc6fc36008b2c6d081827f3d0ac3adea762b0b3aca1cbd8b416b90c4ce1fe4c792f1e14b9b7c5856dbd7e149b33cf25890ccd8c7f33ab31634f1140b819261a58d3298a126790c72d5cd601ee2a9cc28784c9e975de8ae8290bed013b309a49e1e9d449aabda5aad349e35d31cfc514c8726d3b9cf179dc2b8050451fc08aa5e3f481e8fc302bec5d77ec926ce42d24f831138e15dae9aa3feb3d09ffd5ab3d2ba1e4dd72fd518dc730679865924037247f53d", 0x1000, r1) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:13:01 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet(r0, &(0x7f000000be00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)="06055ce8", 0x4}], 0x1}}, {{&(0x7f0000000e80)={0x2, 0x0, @multicast2}, 0x18, 0x0}}], 0x2, 0x0) 08:13:01 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:13:01 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$clear(0x7, r0) add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$reject(0x13, r0, 0x0, 0x2, r1) 08:13:01 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r1 = io_uring_setup(0x5fff, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r1, 0x1b, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) sendfile(r1, r0, &(0x7f0000001000)=0x8000, 0x3ff) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000013c0)='numa_maps\x00') preadv(r2, &(0x7f0000001400)=[{&(0x7f0000000000)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 08:13:01 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xaf, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x3}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xaf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x6}, {0x0, 0x5, 0x1, 0x9}]}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x81, 0x3f, 0x55, 0x1, 0x0, 0x44, 0x10c68, 0xe, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000080), 0xa}, 0x4000, 0x9, 0x8, 0x7, 0x2b, 0xffff, 0x8001, 0x0, 0x1000, 0x0, 0x800}, 0xffffffffffffffff, 0x6, r1, 0x2) read(0xffffffffffffffff, 0x0, 0x0) r2 = eventfd(0x0) dup2(r2, r0) 08:13:01 executing program 1: ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) [ 640.135112] audit: type=1400 audit(1768810381.446:238): avc: denied { read } for pid=6912 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 08:13:10 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:13:10 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 08:13:10 executing program 4: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) [ 649.099453] audit: type=1326 audit(1768810390.410:239): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6923 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc3fb339b19 code=0x0 sendmsg(r1, &(0x7f00000013c0)={&(0x7f00000000c0)=@nl=@kern={0x10, 0x0, 0x0, 0x1000}, 0x80, &(0x7f0000001380)=[{&(0x7f0000000240)="e49446bb9d87730f4026ba354e4b23f2c3d5cf25e84d43e0f93e5a872dba2eb685ae0226f94a25bb32bf8ed5237d1557ee5eb96d8ee195845e6620d108ea4a30f5d9e45211142f4a2d67eaaeec72a88c069ca8dc7afe991b37cb0129949240cdf5bb9e7ddfee66266cb06895463e351c773f53e9a109d34fba85d591d2942c7be6480f53d1c741c9af", 0x89}, {&(0x7f0000000300)="2abca1a13ced476e0b70be00b35b8aa3305c5785c15552d9d96cf30443b570c88829d8eb315bdd3d8988e505365634b75c4e754da8f25369bcf6b6fd103ada80508af093bdeace45d791fb2b", 0x4c}, {&(0x7f00000001c0)="c985ff2bef653f6d440bb5cd7d5a72c718e28f84a961ef91f1068b247f864fe26e914151febb", 0x26}, {&(0x7f0000000380)="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", 0x1000}], 0x4, &(0x7f0000001880)=[{0x1010, 0x116, 0x6, "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"}], 0x1010}, 0x4041) creat(&(0x7f0000001840)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x105002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r4 = io_uring_setup(0x5fff, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r4, 0x1b, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000000)=0x20000000) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000200)=0x10) 08:13:10 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0x3f00000000000000) 08:13:10 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r2) add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, r3) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r2) 08:13:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f00000001c0), &(0x7f0000000200)=0xc) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000180)=0x1c) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000002800)={0x2124, 0x25, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @nested={0x20be, 0x0, 0x0, 0x1, [@generic="79420a9d1098e0288407ddbf574440df422c4c893716c9d5c67883ed988e50a6817ba52382bef028140e6134743843d3de2db153500ff68c5f5fd51fa77b5f6513", @typed={0x8, 0x20, 0x0, 0x0, @fd=r1}, @typed={0x14, 0x6b, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @generic="1b80c6ef29b7f7063b5a567f43334282dbb9f7db616e257bdc106059755e913dd5ea0481bc01f338d65980fb4f4d5bf811c81f9477191871a9af9a98a7fd03b15b103ed188e3eda71ae07a8dd884461fd65c6fb5ca2a1ba753be7e670ee3fd2b42c6ba6a09d9064d4c6baff2956b32bb9955834c36a85b54e7aa72d4ce09dd20a3134d2562fe2a2d22b59d06b0c3f06a9a0c64ed3a2cf07fc6cc31264213d858c496b8c88ad55908efb399bad7c0062acd60314aff0b63fd687f43bfbdec30eac1d1a3381d2efa86313bac3e58e747dd60b5d7733e2d469389664cbd87cca209bee3d101627c40500ba44350af22d5dbda1fdf65259750b014006296685e827b8595eccbc9a71f581ed8fe2a1ad689a9bfa8d1cbfa062e5eb50c2734550c5e54d3fe45294277a977866d83d0dfec8f30fc76351bd450f3679d3f1e2663640bf4cfc00a97d6efc470549955c50f89ccb4236eec9671032ebe0284f9a76f72e042785d103b94173eef1de9879760ab955afb489daced08ea55c2598f74725c92afca52fd8e60632ab6d0c290852e179c96563ec3a0633db0eaf1cfbfb19d9a2c0c0a7d226ec94d75d4784d8d7233ad51ffd323383d9db7b7159bb74deef3278158a4f7f5050787125fbe88aeb4078c791b1b109c515ca6b1472a5fbc8cb7cd2f4959e873f66a50050abd0019c1ff000eada6cf7bb229e6831d1062e9832ff24e22651236a83beb0fd39ead8eb33cead9279f0854dcf3ddb6818c931042fef9033bfc10b7c8585965047e5c8886996846d58988d9450db1524c3d9a82c661ae2a5f916baeb0fcfe6d61f4aec79beeb577b039fbb039e134c4dfc4a3ac7d1a5c71e734e95d154d68096a1959033cdbb2f5bbfc703972a9b9931aff7e42fcf5f2e86a4400c959aee041c0af4355dfc2ce54a377e9e675a879d4d3666a5a388231c8f7a795104b8451e4cacb6b5c9735e4b902687a32ed99e5f5c992f7b59c5530d894c58d8d4117a30404804aa9e35a25e21aae28432bad63dbfa09305d7dbee5ac1d2f6935ff5086d4d3fcc8666c50a738c956bdd5ae225acfcbd6ee275bd5d759d2435f97068882ef73d1a91cc044351c1c82975c36b49ee97753e16c4ca06cd49af84241720bee63e7bc39d2692a45d663f0d483f5f69eedef6acb1a0f523b7204b95b8a3bc14d015df181ea31e8378a047f70d1d3484caf826156442ffa7031fc4626c67ae1008ce3b8c3cec753a306319006b5581b7cc7bf76408d58493a06c9ba429a7be953311988824e22e98422e4e07a1c9ea9a247de00cd69b943cdc223638280bc656de9296dbc306ac24fe5eb66932c814eb30fe74fc513cc0a1526326079b5c705d7d412b21a8e1647ea8ad4dc62397a4a01f9c75e10bf1c3fedd5ad6cacb6a48ed819abbc99b68b945a7c035bf20a993c0071c5a3bc7904077cb44247782c9efc972f481964605a0927d72cf67c9d35bd3f978a2a1f9810e7c58ec014789c63bdc6fda700019674d81988f0ab95949d18bc358e4779c58937598f2f4b64cbee45fca9aaef848c1a1061e918d4350db322456b12c0da051923375aef16b6190cbf58204e2ff0098119d498d0049a03ba5797821976c906ccc057de034247ce0eb28180451cfec627c18f0f90529387a82c3b9f6eb30a49afd013e4b4508f2a199d16033c8dc769586ebb7efb1f14bc62f0294caecc1a3a4ac6343719d5c4a879ea581d28405201ef7effd123a399eb5f8098f2d491f51784082f55ced5a6bbe85b8bc2a90ab3f081ea93904c9652215e1d63ac801617d238bd5d5123996c3e8fea20cb3c31ff53afe8c07f1dbd7966c583f261c23fce00b68be1bb9cb983bdb4d9c24418d5d402f336cadf3ce957a34ac699c006d75e7f545a8536b85ae195e523ed903156ade616306f23e5ed2112ed4914c8809916e062f169342c786c3c953511b83cbbdc9a494f4054dd8672eccdaba8d073309b3da9eeee6e9113460c0ea8bb7e3e524832301197bacfd7c53cc5ad9f70eb10360d19633393c9ebdcce49f52e9990f09d3b31e75a176324216372664c996593d2f663c99fb7c421e68e9d637d0d05719ae18eeecc65c71f8a1cc4f6b1179368cdaa4a2985c98b653e14d5b2b2b27a56df1700082b143648f245658aa26ac277746d334facb7f4cf170e86cb068d193d47819488a249b8b6c5ee8d42fa071a0245cc5ec40ff3df9672416b9c580413dccde547a116b698fef3fe07b6d38aa22894f041e00b774be89ffb3222e0457da08dea14afd68992aa647ad1e695b333edcfb2ed93e5b26a5e19c00f85785ce1e4f971e989c8952aa815a1fad5cd9be35c54ec810edd00685523d6aa93a84fd175c61015c376df1927a7e325cade49c6b718d26a89a0c60633a2b382c1564960709d501d7b4c4c68fef98ff08f6140596af5b75f69414a2e1a3e2e23ca869bc8559d531037616fbc5e24a0e634e59783ce7867a2e5cdcfa70fee98cf4677f733912ff46bd939151b1eede64110512066849f8fe813eddf64c6730be27c8edff789e1cddbeecda8d6088b7affb018b45a33779147c8c0bb1e7c5f3fd8e55f22486d03354a5e9632977982d1c2038e2c9508f351ed77f6e58c3ebadc5a93787d94561816dad570580e9d09fe1896cf605c9472c6a77101f923fee9f465f2b2d1e533417e9aae12026fe4c4df4401e63a9bb0e4b0fccb44654fae66c97bbc1ae671b85e47234cee19e9c0f86d9c4454af272ff41b6a9bf92e39fbbc8c07135a0fa0749d2f02d9ad86b3274590fc9689d6e27650ff4287af79c4d43a8fc501489efc36053e069fbd1ed0a1060bd9cb9af9cb64924641ffa6f382026b3249a2b324e9cc01a87939a09ca76d4bb3456eb763076a9f49579f6d0301f7ed36dc6faae21004c0d176432b50048629e5712f15f372c98045967aa691cabc9729dd7dbd1e26f5150580142e88dba99824368afdf28b15174d5fd0272197d58d578474b608837520f45a198b2c2e7e831f67fdfe3bf509c44c65878c652725ac8fc91f23e89da316074f49bbb9b0e9ec76365ffacdd42aff9f43aaa1f298e2252f7b9c06f91769952c511281dc6443ad6e804f46bc0e05a8a0272ec3390289bc2b907d89d150b41a09cb40258bd99e758e729cc68dfd6f268bc2e88c17e4cde7551575f36bbadce839890b1dd921d9753464939d2bfa5023874de4a02673f477b19f821b6b6f9274a80ab7dec01b2ae691fd27eb79dc029e6b321900a6cf4a21cd759bb817d3a5babdc4a4ebd501fa87ddc63db0044d06bb1f3ab78d5a6b42b54cb0f8cadd490f1d917df8ea63f0ee5d7d5ec31440ec9e5cb7eb4de4d697c941686bad813084ba0a832798e5424085bccf68d5951c8d2304090847f8f0f2a189669bf5dcf5c4d6d69f3b322f636db39fab40e2d47d1c15345ed00f05d9351028c55b9581423ad75f4afdd9dc386b1bb4e7330ac89c020bbb83a347f80d1b1e1f0702f9ccdb13271b83759886d1d70b87d5c25fdee566c37bc17bcc3a488ac292db81246eabc13feec139d4eafcfca9ac2b56fbaf8f1c9e8de404ce706c8888a3f1f17e790ee4599746d33bfe8ae66c6114f5f331429b63adde4403e617bbd8b7eda457378bee7931a145dfa0b3cd15da1e64fe719b8e24a4fd45731db0a93c894cdf0edbac3a5245c2bff8d65efb724e8e184bf29642dc565e9023eb6d655c21a71f11e7fe0dee46d5f18bea8b44e37d87d72210899b24046223949be6392dbc983e12b8a6214df47a4c3498fd771c87fb95b1e94fbf451b6c1ae2c4f92005dd7d29fd00fa72321bb572ff97e183ce355e4f59880d585225bf1a25fb740ef972385cea134b1123ff169c2f74268b9f3e86040034c1e5d774810a02fdaef7839b51f4e5487c897dcaca0b3685eb317739c83a7cf142d6c0df326bdac782df22d928c85cf5c7f9b2cbdef786abd4af35f62340383b88148df9bf7596750013a398f2927fc581f7b56d781f6a8fc0b5316629896be535fb1405f389d1f78581b56af093586a2c78765e2e09624d3f891f71eee07d3ad6fc5ed993a65f1e49537323ed1033b76128b68560166ee407984cee1ece0b8bc300ab5979eff131bad565b0f2228f39e42e55e2c8060e699de1c00b82d6ef1605acdc6d2f32da8e033f2c6938f3608e335edcd698640545b5e87d833b403d3eed99cfe9060356d52eabc436a00cd0890dc862d54c5700673bf9cac8da0ef107a16e152c085e952067c71505d97ce1f5f898bb77afb33a656b62972fdc33c8636591bddb9bd91110bafb5a3c955ebcbe2c19360bdd0b4813329d93090d3391f8f8d2b4366e26ef94c6f3ce3df81c0d134faf2f106f57fb684c0c9b785a5270652c457277e8455ab21983470de84ef816a674ead53ec873cef42e2ee1c1ec43e787cb055b63fc79ced5c72d10626d598c1e2f94a5adcea5ea05b6b48819e1427552c5d695ca64fd85a0df4f3993760697793d314c9e598fa5ffcfb08315f1942bc708d353273c23be13d96a0deb91b19b5158f29f2c2708398a758dbb8183e6f6d010b53b66bc5072ab120924a24d273b4bdbe0a4db91ede21a11284b0dc21c592432ccc5f9e0f3e7a169b56307edc69728ee6390793cf79298834f119b8a6630b53eb3289191783385713f1458d934c3d697ac734e9a71f2938830b98ceee7c9177e3ef5260207bd222c10cc66f747dc0a1bd2cbd29e9a161f66315541f851cef92723b01b7155aa60d0a8ec6c409aeceeaa0f3c831eca45e490bc104764403aed67541c411990f6ad160856a91de10ae03996e452e9a74e7e0bbe50519aa9e1a1ac29531a4444a5fea84ea71a99a7c46d08324fb534f3bd3bd24679c3fe5b3b938e4225d670501526b43aa0166d5cc0a33d66015c89896248324a59ed69cc8898b03285468c46528cfe997bcbb53a471e87951551d5a1570af70028f3aed9ea3bf7355994ccc3a8b87fc21b6e9cfb01887a1494cb074a91c862753839f604cc44055b93c353cbfbd2c5ed8705fb19998e92144c8d97d62e1c03f47b559617225ca581b276a570a09e58bfd0c55c78f5917a548b4d266942b7edf5eadb57fee84b2048da2968bf02dd356b0bd123ee4a66b49ed36455d7c10cf800842035a4007dac85aa15942f85413fcd516f04226c54237231278a2cc3944120158a3a16dadc956f050a427d6e414d48b76d5eaef891d1bc98ab15ac91b29920a9f98bffd309df7f1a940fe70c4183df2ec8bb1501b07d6480ee493f44445596fb8c5954e38ba998c9fdd6585f2a7543adc647f6ebb82d55df53eb764b084187b35c0d2b8d0cf51d5f7a4f5a42375a30939ef94653286d44d4b22372c3786802d70c03c8c3095bce3bd1efc65d6b336f61c9eb92562436a487bacc8c567160806e0bebf2eaa944cd7b09de098240252897c97dd163fd3c4a5c4463888ab2c6a3cc93e2b69d275e3f4d6c400e0bac6d50fcd8a1ef27d6afb1c11720fb57862d4607963753a4881add3065dd895d324c0c595d54f87a972a1fd4458687c20e71f8594057ce3aeb921998332e474fefa40e860dd11721f6af6042a3a5589dd473a28ab0be2da71fb582d80a01c00d625a868de99477ee7d181b02395f54cc9dfd93279208f502690499a5997e40ec5b4cac3f196e64351d228debb3a524d66be8c694486f289797e1817023989175f357e8a24c03d198953e44d2946d0d95147dd3f492fa35d9e26a931a4503399978b209194568c46c01705c2ac45a510e8fb68c5dcb96732a0657bbeb14011e19550a", @generic="453211723f5a1f50aa361479414e1b45a3670d5a3395de29080c400974e112698ee33e18", @typed={0x8, 0x35, 0x0, 0x0, @fd=r1}, @generic="e21bce1d73b44b03afd1e2369d666bc73c0ca56026", @typed={0x14, 0x37, 0x0, 0x0, @ipv6=@loopback}, @generic="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", @typed={0x8, 0x53, 0x0, 0x0, @u32=0xffff0001}]}, @nested={0x46, 0x0, 0x0, 0x1, [@generic="553fbe463b1ecc4aa815bffd43ab309d1ada803fc7a2ac71d52c2e0bbbd6ffd8ec8e142020365ca8d4c753b42f31e20a05e574f5bc926d554df42c63781cadb8f100"]}]}, 0x2124}], 0x1}, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0x83, 0x40) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f0000000080)=""/116, &(0x7f0000000100)=0x74) 08:13:10 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet(r0, &(0x7f000000be00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)="06055ce8", 0x4}], 0x1}}, {{&(0x7f0000000e80)={0x2, 0x0, @multicast2}, 0x18, 0x0}}], 0x2, 0x0) 08:13:10 executing program 1: creat(&(0x7f00000000c0)='./file0\x00', 0x8c) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) add_key(&(0x7f0000000100)='cifs.spnego\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)="7a61ed973dd31e8aa0806a55e80b62cef918b488b992f42e174e2792b97f32b4", 0x20, r0) request_key(&(0x7f0000000140)='cifs.idmap\x00', &(0x7f0000000940)={'syz', 0x0}, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r1, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, r2) [ 649.135883] netlink: 8448 bytes leftover after parsing attributes in process `syz-executor.5'. [ 649.140300] netlink: 8448 bytes leftover after parsing attributes in process `syz-executor.5'. [ 649.146466] audit: type=1326 audit(1768810390.457:240): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6928 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f107edc9b19 code=0x0 08:13:10 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "9a8714cf76711dde9065dce75915bdd3f5ef6840a6d6356a214b9617f678d946a923c953437444d65b232e456ee00099544c3a97bddf9af1acaec4ca9e517db9", 0x3a}, 0x48, 0xfffffffffffffff8) keyctl$invalidate(0x15, r0) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r4 = add_key(&(0x7f0000000440)='id_legacy\x00', &(0x7f0000000480)={'syz', 0x1}, &(0x7f00000004c0)="1ed64325ca394b8cf2c20162af1b1c454d6ba677398a007bc3c806daf5653751e3a90a57cb7388ce5e90db0810be040ba542afd96784ca198915aa0a6494c6289eaaf0815d39ce1b411689c6101b890fec47caee183f8a8b0d85e68eb9f760e76dcdc9a15e06a4042d72bcd302f1d63fb073b0e001ab1bf4b56786fa31531a60d0a89f6a95897a4fa0f23cd71736c024113547d63d880663807f8479653959077dd43b0fb9c3db063300b5aea100205f9ed3fc0015278ab34bf12b638b94e23cc62c48c40b9fdc4503c1200556fd448bbc6ccb9a7b74ac677717acd129e913dc3ccf6a1420950d2eb75e6a", 0xeb, r1) r5 = add_key$keyring(&(0x7f00000005c0), &(0x7f0000000600)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$KEYCTL_MOVE(0x1e, r4, r2, r5, 0x0) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r3) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f0000000380)={'fscrypt:', @desc4}, &(0x7f00000003c0)={0x0, "ba3c29b4c4ff869de5062b4d1b5cc0d86dadae837707ce3f14062370ee46aa6ec635c81cecab4cc1f8b41001edfad3eff781d842e64f5363062d35817f3d1f8f", 0x2d}, 0x48, r2) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:13:10 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000006c0)={&(0x7f0000000040)={0xa, 0x4e22, 0x0, @mcast2={0xff, 0x5}, 0x4}, 0x1c, 0x0}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000500)={{{@in6=@private2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@local}}, &(0x7f0000000600)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001240)={{{@in6=@initdev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@initdev}}, &(0x7f0000000ec0)=0xe8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r4, 0x1, 0x0, 0x0, {0x10}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x20}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001d80)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x10000, @private0, 0x1}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="ef3ee0a0915a1478c86ba44e0fcff544478496ed2865d51b17db6c1c4233b5c0671efb7c62445c3c2d6fa56a52b958e2dd049e6924d5331de5fc03939f03ae826b4b8a95862887b4322871f8feb72cb89bf074b603d4309da62a14ab893498bf8e097f2bfd13e72347d2ad8b499c5990cd485e75746e4d0702c93146d8560fe2c9c77a64e2b9f176e6679c9cc81f0716e3e8e76a4f3651b0e4725aa9183e4da4e5bc2eca2887b8c0ee4ec4913599433b9801d298d9", 0xb5}, {&(0x7f0000000140)="8a3b584c8d51f0651d8a5b5a35373b30f758b1a4eeb501b57ea72777eda466d9bfc8654dfa57ec481a9bd9942bb50e46832f3c928df6c8cc60d0078abd5e97c3de023bc7", 0x44}], 0x2}}, {{&(0x7f0000000200)={0xa, 0x4e20, 0x2b6e, @private0, 0x7c0000}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000240)="224cdde0e65f98b15353132910614b6531c2c9b332cfa6c64ae2ef0dec21f7c4d6e7b8c442c9cae0f478ba1ff91f32dc20bf486e9721a6f61d325c7374105d6697b4e4571f6801705d7bb311387a", 0x4e}, {&(0x7f00000002c0)="876329ccca68789adf5bc1823ccf5ddc445e463f4766b1c4aa3807243551cc0d427c42ddc55d6a0fb7a6cac89c92bf4e379a38ff230404a124fb5e36c05dd4d60c00deb47dee4190de1465f48f3351184ad0fd21033764db9afcd9e8a1cd85e0b0aa8b008e6a363b980edbc281948fb9012a89cf531f814d89e8477c9cd12369f50613768451d173b6fb43df9d06fda5352ded2826664b", 0x97}, {&(0x7f0000000380)="f033f7fa8a0abf6437a8ad1ed333a787de11ef733567cbb210af8c2a40a84c69ace752c750235b1b253a20ef1bd32f90c1496888d768147a4c0908766834bd7ace31c1c434a112ab6db481a96b724f8c32e765c481eb", 0x56}, {&(0x7f0000000400)="b51bb7931e8208788b507c7aa9cb6aa4be3e647ed2a1d7ef3fa81f1c3651df4606d169d29d701278a67f3f63fcdff3e1b28ad1fb37ed32ed394ca749cbc56f35ddce39146ee4e84370f2b13e4983d05ac708a23002b50c1fa5086de81d736691abfcdb64b5ff2b1b67bdc079296e59b2c6e87e9c46958c72c04f3e6a4effb7c16ee975d48572e9bfbf34dc3d", 0x8c}], 0x4, &(0x7f0000000700)=[@dstopts_2292={{0x28, 0x29, 0x4, {0xb5, 0x1, '\x00', [@pad1, @ra={0x5, 0x2, 0x3}, @enc_lim={0x4, 0x1, 0x3}]}}}, @hopopts={{0xb8, 0x29, 0x36, {0x3a, 0x13, '\x00', [@padn={0x1, 0x1, [0x0]}, @pad1, @generic={0x1f, 0x78, "bfc11ab550d496c1d80e619dd954c12fbfb7fb2a4a66be6b5d5baf30168f5add1a24e8850a287ad832c7539f4ca3501f99460293fc79297683c639618fe1b0dbec86e3b2239f03130253350308ad9fabf185821a153378cf51ff7e6fc09e9fc686ab500457efb7d1e6cae8518b0e50deff051215ac97b3b4"}, @jumbo={0xc2, 0x4, 0x7}, @ra={0x5, 0x2, 0x5}, @calipso={0x7, 0x10, {0x2, 0x2, 0x1f, 0x14, [0xe6ee]}}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x1}}, @pktinfo={{0x24, 0x29, 0x32, {@local, r1}}}, @rthdr={{0x38, 0x29, 0x39, {0x11, 0x4, 0x2, 0x2, 0x0, [@local, @remote]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x6}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x2c, 0x0, '\x00', [@ra={0x5, 0x2, 0x6}]}}}, @rthdrdstopts={{0x30, 0x29, 0x37, {0x0, 0x2, '\x00', [@enc_lim, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x8}, @enc_lim={0x4, 0x1, 0xff}]}}}, @tclass={{0x14, 0x29, 0x43, 0x8}}], 0x1d8}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000640)="165d5b7cc2f028b511894f234bc1a81f86102fcfb3d1e331690ec25a49864f4acbb44754a5d74b0139f850e42d9b6dd6db9b31d375a6f1a54948854d876e28f948", 0x41}, {&(0x7f0000000900)="73f9305c1aeb7040232f90d1f6d3ab9be06524763d156a5d02340e4455dbc438fee6d13711c2fbe1abe571f472c3e762a71450da637765594c0f1a8b14cc712f5aafc05ed2e429f62358b653e8dd160023f491d0ee14b8be9fe9220e17e3d84e43e2acd14802145ed1992e26474ca082a507edb87321574fc6a204c4e612e6568a672d979b187cb2696623cc28d12f786cd6fc505ae6111b002064bfe1c268746fada40d913dae449df75795a391d91ac4d981d67bbdaad5eb8cea9bff6ee6f3db87918f7b957cf60fbb2f14", 0xcc}, {&(0x7f0000000a00)="e8ef823f66205f8807e4baab1df40c83198e7305c06f11051229b812d13375898afddaa2ac6493fb8926d912c4c086560f1443c1e7f8d440abe09121aabac812fe535c86d9fb93ab315ad97f6567b8abb9fd7e3e79376dd422582d7f7503c13920e82efc6091eedd20ca31f0996e4bf5aeb54660f42a8210ac5bdf0c93b58b4f3768bc3ea20faed1afdad57c5657fbe06a3527fc3e6f99063d40b9fe5586e635d7cdb2a34b700e89c0afd6f01dde19326b6bf692fb0952215c62dc4e9b789b9e6456240570aee6ce21e714e38f939cc23ba47942251864fa452257a42816288dc0d1c47cfe56846a893460c1d1944f47a15f", 0xf2}, {&(0x7f0000000b00)="dceb3e470847a05f114380a7a133bfac2d391d318f09e8c95624dd8e9897935bb2cc2aca9d6a87ffa28138c0cbeac5faebe45436611c2ba1f5421bbd03656d42e4d3eedd77e574cbac884575e3e3442df6963034f276d338071645d4ee7b1297624bb6f7f302f9067697875e", 0x6c}, {&(0x7f0000000b80)="a887fac81da8a7774a294a15def7342f3659e2d30abb3708cc349f1f6a55a6ecaa3db0cf971a84d954beab57c3319919588e7feef5df6ba672290296c1cf599d3953daf608724ffe54314b1f34be9eeab40d6cf035a620ca63e1c57bd97fbbd0f6726eab6d6b7c686368eacaf9131783d855d8dcf1799e67cb6da99de62f3549313ad022992e4465bb0cef77d0a37d95c4016be23c236387081d35d2eca94d16a58e333a05e90d0c8771f8990a0ecfcb", 0xb0}, {&(0x7f0000000c40)="eb8798b3d6109a869d496595e8ee42c3e82beb012a68c20bf5a86e70f856379929f22db8b1cf33cf5ce097843ce8ff8fa9da696181733a937c21fd7473bfc3728c3fef218ab196fafe34572ee232f7eb529ab19e1fed13fab016d190a11fb98d0cf2d6ba78abc0b2d512b99ae193c9556bf9e4cefcc8528aaf33ae178ee57f7d5caf293c2e931cd0a9ab1fb77214eb3ab148ce5ed10e2ad5bc933f0dd2d5a728fc4f35f1c401156b6b08", 0xaa}], 0x6, &(0x7f0000000d80)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}], 0x18}}, {{&(0x7f0000000dc0)={0xa, 0x4e23, 0x2, @mcast1, 0xff800000}, 0x1c, &(0x7f00000011c0)=[{&(0x7f0000000e00)="92862688b7c7f5f4bec74d13d20d2c74b9ca410e63532d99eca241c7448346c805d28a2b9112148065214fa03de33c491ff8af909ce138a985220f5df02f133f7a4093cbd39b7c4269ad5dc241c2a8bb00523c090a828f2941904fcbc66cea6e4fdba1235d52ef89461e7a71bc3dc9f018d43dd6b2210ac193b6ba3a1d55bc21a0f9e0a41c49d8eae1d6738997ccea8a94ff22b5ef05389ec16e4cbb7b01978a8c030ec36d0e015c6eeddc70d87827dcc567b832e2df5899a8", 0xb9}, {&(0x7f0000000ec0)}, {&(0x7f0000000f00)="45847bb0b24e26fc7436aa62a59827324fd560a231a44bc76548a5b2344674efb65acf6f46a5f6ad3ced4c2b4a633c92f0585d77f548f16e63eed7ce41c9d70d8aeeac481b358b25cccec9467a54ccceab4811741b67226d681ec15e0ee22cab66c893c14a80b35281cb37c17585e36dfbd672c3bfd2b2dc77612a9c2920f9b332bb8ea31cfc194a9b1170ec087107b2eb94521d8445710348b0134b44f2770cd9f6d174d6374ee84a3630071f6e4402ae6fbabedd46c0daf7a67bf1661a09546e7f4c0e43c0c02d91328b50c449ec2017e64ae5673dcf1fe8856873bdee2cb4d8cc58e74da1f130a161cd64f429ecf9eec126", 0xf3}, {&(0x7f0000001000)="26c0d18f3e4abc075cb410db5511929c4461ccd33ccdb9fd078ab208f708f0a26fb1ae0a30a897fdc7096447c0b23ce3436ab5784256c906d7160f6fe7dc611c606f58fda0213d03fd1e26baaec971da16ed36b6798701efe165f20a6b08f74571bab9e99f72f19a0c3ee39782c2bde9c6f37c93f47df24ef0ff800df08f107f7277539736a3c9d83fe2e99fc1fe7d25696c1426389fcd4a00a9afaa3fa9aa697429688ac9921fbec3c14472bbdad54b3b66c20ffd261d521eecc5a337dfd82a65e8d4ec77f74ca2b50d0881fae650ef5a413f19f61c2e49565274662edcab25f869b3b442e940f35c2c9b587a15b803b9", 0xf1}, {&(0x7f0000001100)="e22ab58096e8b52b0961f2d0301b7132b0982b61135a48c9634a8a53e0b007f00aaf06fad04dcde4192bc3b3a605f4838d76eb0eba282aace89b243a7a5a93847db93f64e7519d636976a2421be22c24c5fdd2ca9d62a2137daa4a701ebcde45d910fab62adae48e72e0ac5133b096884e7a1a18e226e96dba1d561d41e6f0634b450b18cc5b144439b46708b12b3b224628c4663da6", 0x96}], 0x5, &(0x7f0000001380)=[@pktinfo={{0x24, 0x29, 0x32, {@remote, r2}}}, @rthdr={{0x88, 0x29, 0x39, {0x29, 0xe, 0x3, 0x80, 0x0, [@private2, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00', @remote, @private2, @private2, @local]}}}, @dstopts={{0x98, 0x29, 0x37, {0x8, 0xf, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x81, 0x75, "ff5b2a0602c29ce1261c2d8c6fde86a0df9940b87b51a13ad0076f63c2ca038741904b2dd85782e171c90f4e3fcc19f35cec83e1383880d352bfd72fd10f759150d9f45963dffbf83aa86c19c01ef64bb6179372bd43f988ba26bec38b24c93f7e9b7030ef4c1c8f9518566b3bb5399f047df1b2ff"}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xf1}}, @hopopts_2292={{0x30, 0x29, 0x36, {0x34, 0x3, '\x00', [@pad1, @padn={0x1, 0x1, [0x0]}, @hao={0xc9, 0x10, @local}]}}}, @hopopts={{0x30, 0x29, 0x36, {0x29, 0x2, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00'}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x5273f1a0}}, @dstopts_2292={{0xc8, 0x29, 0x4, {0x3a, 0x15, '\x00', [@pad1, @padn={0x1, 0x1, [0x0]}, @generic={0x8, 0x82, "d573f6694a0a49950363eaa050f0492996a4c1def22a71068c18a4c108eb36387901605afa497e92a4e77501d303cf7ee9ae77c5bb11f94fa679c2e0216ee0f9dc09846a3cd1ad334eabb5b54ceed81e43b5c0091e09eabb7dc84a4a9691c812c0c2ff783a19511316667809fe298c67c8998673bc7d6c44c4e9d831eb8c6df14d9f"}, @enc_lim={0x4, 0x1, 0x7f}, @hao={0xc9, 0x10, @loopback}, @pad1, @jumbo={0xc2, 0x4, 0x9}, @pad1]}}}], 0x2a0}}, {{&(0x7f0000001640)={0xa, 0x4e21, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3ff}, 0x1c, &(0x7f0000001b00)=[{&(0x7f0000001680)="190c558713cad17b2137e056cc958fe9a4381fcf6563b824f7a683114940173249cc41177d9ae53a2062746dda4c472924bf940c4b99b8b28da0", 0x3a}, {&(0x7f00000016c0)="4bdacbfe206093ea764f715155cb8517bbb6afde08205ccabdd8c50df353d14f8d0e4c70f4b75021ba08e236e1ac75dbb0daab4e3eb53f4080ad723327587ea1c5c798a1a3ce0fdb1c7c2e81696f4069b57d30eb4d40665dc03174edcacdee567229c1c8690826a98aec448de609ee879cab968d1240a2540a4204", 0x7b}, {&(0x7f0000001740)="80cdcc4a75bfcdaa7898c70485e5dc9815b615b5836d61e6897fa1dafdbd30d8a86ddb37b8a870c5b146ce64f17868b78dc5c45cec65c6b99f88e5745a95c97fdce842da47ae33558c06f1", 0x4b}, {&(0x7f00000017c0)="008529c399247ffde30fddc8a415ff5378bac1c795a5dd287052122c51e7995c2f275764091847045841d368568e3f9dff5d6ca882b860ea43b6e0c3622d2b70d09a1423a20a9d5722e9a01286e77f609d715a1a2f1221ea9441bf6147ae8ac591c6a8d9c7afb1e19fd52dfbe180d7d22602b9581d83fbdcf113acb6d72b20d9d8a5d18ecf6144e5b7e3faee2eb1f3b42d703140edb9a1c2d53651edef1e8e3f709f40e4bfbd330b5d6c6c104adbdc8db77daeb0668fd608949e594615132e3a7290", 0xc2}, {&(0x7f00000018c0)="c694f4517292ed9a9a085563c6468d7bd1c77cbc075f4b5fc349ddb60ce22cd8180865dbbe7066fb", 0x28}, {&(0x7f0000001900)="96ab6d4ecfe365d7204382ead37c0522a78a42dc607df398c14abb0410f0a7cb2ac81faf3755a1eb41a8f8b5fa8fa26d45c65ad182b507a0cf6b48b1ae35d42e49aa906baa261c122ee1cc1dbce9952297c1831a63c10d2ed66a0d1d4aaadc0f5fc42cc83fdd23aaada9fc6ae30108b740f43df0a919b65a0963a723196ca53148a310e8f1faf87d23b752c8e01ba0394794dc059f47a8bb71fd5e466f8ab8c16442211d689b5f64464bce713d9f02487fb287ecf69d97aae332010fc6b52b819241eecef30b2e28c2", 0xc9}, {&(0x7f0000001a00)="182c11bd3a2c595e8a12dd14bdd4dedaf387465593f13112a7c06737c2604dae69c91c71c5a42f", 0x27}, {&(0x7f0000001a40)="bd14bd2265207cd3b113aba462545699e0726e0167fb5340a938d3853309fa66717818c2978d2dd7b61c6e27570e26d63cc14339e2830996d68463407e3465bac303d2ca279a90f74cd345ee3336083b5e776580b217159fae3ce6d77055c7978ce3ccce69b291167f5ea173a9c5f5aa6f41836271ff9c896ddc958888c6edbfda06b98b72a180e355807202bcd396874226ac1b90f80ab3c8d5589f07190038ff50bff61fa95620b9a097b4", 0xac}], 0x8, &(0x7f0000001b80)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7}}], 0x18}}, {{&(0x7f0000001bc0)={0xa, 0x4e22, 0xbf7, @remote, 0x2}, 0x1c, &(0x7f0000001c40)=[{&(0x7f0000001c00)="872beca29349bd507abd483b1bb67da4edcdfef0a96fa7", 0x17}], 0x1, &(0x7f0000001c80)=[@flowinfo={{0x14, 0x29, 0xb, 0x400}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x87, 0x3, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x2}, @jumbo={0xc2, 0x4, 0x81}, @jumbo={0xc2, 0x4, 0xc6}, @jumbo={0xc2, 0x4, 0x4}]}}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x0, 0x1, '\x00', [@ra={0x5, 0x2, 0x5}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, r6}}}, @dstopts={{0x30, 0x29, 0x37, {0x6, 0x2, '\x00', [@calipso={0x7, 0x10, {0x3, 0x2, 0x7f, 0x4000, [0x752d]}}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x8}}, @hoplimit={{0x14, 0x29, 0x34, 0x1f}}], 0xf0}}], 0x6, 0x40408d4) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f00), r3) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000001f80)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001f40)={&(0x7f0000002080)={0xc4, r7, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0xa3, 0x2a, [@random_vendor={0xdd, 0x62, "ae8f701455d9dbda22c362a277972d060ee29f432ff8e00273c7de23356476098fe5f3fd2cb619617faca2005afbf6611cdede9ad2b31c9d3bc45821b01824719e935add82d94de4c25949ae2d59e0cb2278b328bacba4390adae3103288cde90ff9"}, @rann={0x7e, 0x15, {{0x0, 0x8}, 0x40, 0x3, @broadcast, 0xffffccd8, 0xffffc4df}}, @perr={0x84, 0x22, {0x46, 0x2, [@not_ext={{}, @device_b, 0x3, "", 0x30}, @ext={{}, @device_b, 0x401, @device_b, 0x23}]}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20048805}, 0x400c814) 08:13:10 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r1, 0xa}) add_key$keyring(&(0x7f0000000680), &(0x7f00000006c0)={'syz', 0x3}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r3) add_key(&(0x7f0000000700)='id_legacy\x00', &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, r3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000640)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r3, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) add_key(&(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000240)="c610cd02901df7536318caaea8c032af35ce9880644a4bf2b7d79f19ecba14c30f39e387a02cf7d461666c25", 0x2c, r4) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) r5 = add_key$fscrypt_v1(&(0x7f00000004c0), &(0x7f0000000500)={'fscrypt:', @desc2}, &(0x7f0000000540)={0x0, "d4ee9d7d4f8c22325384d779a57482ce13b25b432a00e03d579f0dcd6ed9c62391af52555f3429a2a9bbb8622a671a1defc72559e09f35d2b85aaa95e19cff1e", 0x15}, 0x48, 0xfffffffffffffff8) add_key(&(0x7f0000000380)='rxrpc_s\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000400)="21885cd8c33644d222ccefe806b31de1a2466689c76c81e9a9d407b0c3ded450ae4c5d87d3954aff1243db590cd21450866f7618c27d6c1691cc01a05dc14d26ba0212c65fa510376138aae0893ed7e2fa8c4084bf9ff24086580624a51b21832e26c139be580c153185c436cbc64e42b69368918e8f2746295fb3bdec7af5740c4d1ba0cf3c31e175d2a649aa7c48cfa61a492946e01d3f11c34b2f1c1b3e416b1cdb26e702314f8258f58583678883ce001d369d8b0009093fdb7f7d8fea", 0xbf, r5) r6 = request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) r7 = add_key(&(0x7f0000000200)='syzkaller\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f0000000300)="e5a2f64ab62b949b8c7c4956efa4bc01efbf56037e51218c95723fd11b3e5766ae831834493e9f5e006c3661a3667495242c23f99d0fb005639dc1f645bf1de64c5f5f5f647a08c9835db900dfbb1fc361d36fc06bee21467a266c83038259f92950c11f", 0x64, r6) keyctl$link(0x8, r3, r7) 08:13:10 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2, 0x2}, 0x0, 0xfffffffffffffffe) 08:13:10 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000000c0)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='rxrpc_s\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) 08:13:10 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet(r0, &(0x7f000000be00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)="06055ce8", 0x4}], 0x1}}, {{&(0x7f0000000e80)={0x2, 0x0, @multicast2}, 0x18, 0x0}}], 0x2, 0x0) 08:13:10 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0x4000000000000000) 08:13:10 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000140)={0x9, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)=' ', 0x1, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r2, 0x100000000000000}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@private2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@private0}}, &(0x7f0000000100)=0xe8) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) r5 = dup(r4) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg$unix(r5, &(0x7f0000000a00)={&(0x7f0000000740)=@abs, 0x6e, &(0x7f00000008c0), 0x0, &(0x7f0000000940)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}], 0xb8}, 0x2101) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2000000, &(0x7f0000000d00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',version=9p2000.u,nodevmap,loose,dfltuid=', @ANYRESHEX=0xee01, @ANYBLOB="2c667363616368652c6e6f657874656e642c63616368653d6d6d61702c756e616d653daaaaaaaaaa2c63616368657461673daaaaaaaaaa2c64666c746769643d", @ANYRESHEX, @ANYBLOB=',euid=', @ANYRESDEC=r3, @ANYBLOB="2c646f6e745f686173682c6f626a5f757365723d5e282c646f6e745f6d6561737572652c7065726d69745f646972656374696f2c736d61636b6673726f6f743daaaaaaaaaa2c657569643c", @ANYRESDEC=r6, @ANYBLOB="03044ea076b17e91ce3e91964b2c762e7f"]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) pipe2(&(0x7f0000000040), 0x82000) connect$bt_l2cap(r7, &(0x7f0000001b00)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) write(r7, 0x0, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000bc0)={0x1, 0x2000}, 0x4) openat$dir(0xffffffffffffff9c, &(0x7f0000000c00)='./file0\x00', 0x100, 0x91) close_range(r7, 0xffffffffffffffff, 0x0) 08:13:10 executing program 1: r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) r1 = request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r1) r3 = request_key(&(0x7f0000000200)='ceph\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)='--!/m\x00', r2) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, r3) [ 649.412029] audit: type=1326 audit(1768810390.722:241): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6967 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fabe58dab19 code=0x0 08:13:10 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0x7d8346c400000000) [ 649.517107] 9p: Bad value for 'dfltgid' [ 649.517839] 9p: Bad value for 'dfltgid' [ 649.964484] audit: type=1326 audit(1768810391.275:242): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6928 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f107edc9b19 code=0x0 08:13:20 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='cifs.spnego\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='@-\x00', 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:13:20 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2, 0x3}, 0x0, 0xfffffffffffffffe) 08:13:20 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 08:13:20 executing program 4: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:13:20 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xaf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40803, 0x0, 0x0, 0x9}, 0x0, 0x8000, 0xffffffffffffffff, 0x0) r1 = getegid() r2 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r2, 0x1, &(0x7f0000001400)={{0x3, 0x0, 0x0, 0x0, 0x0, 0xa2}, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) msgsnd(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="2a5a092b010086b9c232162bf1eac759ff6a343a5df7dce792290b7a92ac955bd0461f00b551c9d89269d940ab328fcd5883260b0a8c243ca7625789891cae7859933c026aacfa6232d4b23e2d58e5f2aa72f16185bb3bf514b524502ff5ccc2924bf81f3994927e5a6948b46addc07cf57fd4af037b4e4aa16ac95bdb69d456a659630f33f0b2f29c58f06a84aea1f72a6ffd26fb62292ddcf6bd1bc71d30af429f4f14eee70d797c6b93c71f960b649c42151194b14452e6e2037c5ce97b0e407d6c15e682cca29c3e11f1358764d91dff7917e9b430f97d4a01c4e538ffed925219aa64cb9c11cf4717a130e96c85ff6db5d92573ec6c"], 0x1008, 0x0) msgsnd(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="849e55b524310716c7a36421c671f789817c3910bf01d80db275405e2537f3134929c54acac3b802048b9585523408eb53eb00db2cf7691dee899b595e37c8ab2fc0c1610b316b69913831dda9cef41e7c51658caf1ce65299a7b06566273edf4118f3264e5b4914759208937c49f8f485dad5c99d5f315d34922a95743d61a8379289a0e60b1760dc98c14a82056cbab8442024bef0513111422cf89452"], 0x8, 0x0) msgctl$IPC_RMID(r2, 0x0) r3 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r3, 0x1, &(0x7f0000001400)={{0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) msgsnd(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="02"], 0x1008, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) msgctl$IPC_SET(r3, 0x1, &(0x7f0000000440)={{0x2, 0xee01, r1, 0x0, r4, 0x101, 0xee}, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffbc8, 0xa000, 0x4, 0xa8, 0xf779, 0x5}) msgctl$IPC_SET(r3, 0x1, &(0x7f0000000c80)={{0x1, 0x0, r1, 0x0, 0x0, 0xd8b3ebd5d5578b36, 0x4}, 0x0, 0x0, 0x2, 0x4, 0x5, 0x9, 0xffff, 0x3ff, 0x5, 0x7fff}) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) poll(&(0x7f0000000100)=[{r0, 0x2104}, {r0, 0x5}], 0x2, 0xe4) r5 = signalfd4(r0, &(0x7f0000000140)={[0x1ff]}, 0x8, 0x80000) sendmsg$TIPC_CMD_GET_NODES(r5, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44040}, 0x4001) r6 = fork() ptrace(0x10, r6) wait4(r6, 0x0, 0x80000000, &(0x7f0000000240)) 08:13:20 executing program 7: connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) sendmmsg$inet(0xffffffffffffffff, &(0x7f000000be00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)="06055ce8", 0x4}], 0x1}}, {{&(0x7f0000000e80)={0x2, 0x0, @multicast2}, 0x18, 0x0}}], 0x2, 0x0) 08:13:20 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0x97ffffff00000000) 08:13:20 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r1, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@private0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@empty}}, &(0x7f00000000c0)=0xe8) keyctl$chown(0x4, r2, r3, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) [ 659.631949] audit: type=1326 audit(1768810400.942:243): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7000 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc3fb339b19 code=0x0 08:13:20 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r1, 0xa}) add_key$fscrypt_v1(0xfffffffffffffffd, &(0x7f0000000200)={'fscrypt:', @desc2}, &(0x7f0000000240)={0x0, "d6889c923a40b9fce80ec39cc9449abd2859f38916f3eed232c104b8f20222803053bd20cf960c7bc6589f701c5e5710b8bf3f7540d2feb6cdae6b4a7c48a7c6", 0x2e}, 0x48, r1) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:13:21 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0xbfffffffffffffff) 08:13:21 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) add_key(&(0x7f00000000c0)='.request_key_auth\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f00000001c0)="9f9bcd8c926e3f96a6a77c5892b9ed5f57999565492365496225ce09207a5c3680b66368142d7e1cc8a67d7a10a8043d0646aba174d3ede3bb962ae43c6e7a1316f0", 0x42, 0x0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:13:21 executing program 7: connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) sendmmsg$inet(0xffffffffffffffff, &(0x7f000000be00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)="06055ce8", 0x4}], 0x1}}, {{&(0x7f0000000e80)={0x2, 0x0, @multicast2}, 0x18, 0x0}}], 0x2, 0x0) 08:13:21 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2, 0x5}, 0x0, 0xfffffffffffffffe) 08:13:21 executing program 4: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@fat=@debug}]}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0xf2a0}}, './file0\x00'}) recvmmsg$unix(r1, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/232, 0xe8}, {&(0x7f00000017c0)=""/67, 0x43}], 0x3, &(0x7f0000001880)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{&(0x7f00000018c0)=@abs, 0x6e, &(0x7f0000001a80)=[{&(0x7f0000001940)=""/28, 0x1c}, {&(0x7f0000001980)=""/221, 0xdd}], 0x2, &(0x7f0000001ac0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f0000001b00), 0x6e, &(0x7f0000001f80)=[{&(0x7f0000001b80)=""/247, 0xf7}, {&(0x7f0000001c80)=""/253, 0xfd}, {&(0x7f0000001d80)=""/37, 0x25}, {&(0x7f0000001dc0)=""/51, 0x33}, {&(0x7f0000001e00)=""/132, 0x84}, {&(0x7f0000001ec0)=""/184, 0xb8}], 0x6, &(0x7f0000002000)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{0x0, 0x0, &(0x7f0000003240)=[{&(0x7f0000002080)=""/149, 0x95}, {&(0x7f0000002140)=""/89, 0x59}, {&(0x7f00000021c0)=""/4096, 0x1000}, {&(0x7f00000031c0)=""/101, 0x65}], 0x4, &(0x7f0000003280)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc8}}, {{&(0x7f0000003380)=@abs, 0x6e, &(0x7f0000003740)=[{&(0x7f0000003400)=""/127, 0x7f}, {&(0x7f0000003480)=""/87, 0x57}, {&(0x7f0000003500)=""/94, 0x5e}, {&(0x7f0000003580)=""/64, 0x40}, {&(0x7f00000035c0)=""/144, 0x90}, {&(0x7f0000003680)=""/154, 0x9a}], 0x6, &(0x7f00000037c0)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}], 0x5, 0x42, &(0x7f0000003a40)={0x0, 0x3938700}) syz_mount_image$tmpfs(&(0x7f0000000140), &(0x7f00000002c0)='./file1\x00', 0x40, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000540)="94e616e72d45adf57584beb74b7cbf589d4fbc2d9429165d0186c51f0fd8da2ef7ac1aee0199e8fd287b4904fbe09fd28435c564aac85f96ab299b4a5842ed6f946c5e2106f6bb2bcab96bfc6dfa3d0b3ee2dad190a194d2691fe8ea2778560472150a42da7e5deb305d1d43ee3c66269177fd0112bb69b2564b25c838", 0x7d, 0xffffffffffff71bb}], 0xa0048, &(0x7f0000003a80)={[{@size={'size', 0x3d, [0x33, 0x33]}}, {@huge_never}, {@nr_blocks={'nr_blocks', 0x3d, [0x6b, 0x74]}}, {@huge_advise}, {@mode={'mode', 0x3d, 0x3}}, {@huge_always}, {@mode={'mode', 0x3d, 0x3}}, {@size={'size', 0x3d, [0x6b]}}, {@gid={'gid', 0x3d, 0xee01}}], [{@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_lt={'euid<', r2}}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@hash}]}) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETSEL(r3, 0x5609, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000280)='./file1\x00', 0x0, 0x100084a, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@loose}, {@msize}], [{@measure}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'msdos\x00'}}, {@euid_gt}, {@context={'context', 0x3d, 'user_u'}}, {@dont_hash}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@smackfshat={'smackfshat', 0x3d, 'msdos\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, '!*,,'}}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0x0, 0x66, 0x65, 0x32, 0x31, 0x65, 0x62], 0x2d, [0x65, 0x36, 0x37, 0x37], 0x2d, [0x39, 0x39, 0x31, 0x9921d49e7b31284], 0x2d, [0x30, 0x33, 0x39, 0x35], 0x2d, [0x37, 0x0, 0x38, 0x62, 0x31, 0x63, 0x1b, 0x61]}}}]}}) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000100)) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000500)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000600)={0x0, 0xfb, 0x8e, 0x5, 0xff, "e2e96f3ffde7488d331da52bc64a069a", "a4b40c18dc492ff99d9d3ed699b4a19803dee920ae8298519ef07e4927763342c7d06c27f59b9439ef7fa5162a4727d57fce17fd9a461d6e73e4c4b7aa6bbe9e9a902d9fd9e164340a24aaee1e20887470dea9f41c6dbc073e5300000084eff4eb17ccb798f4eb59fdebb58400f42d0be43f027767646be232"}, 0x8e, 0x1) lsetxattr(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)=@known='com.apple.FinderInfo\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', 0x16, 0x1) [ 659.839932] No source specified [ 659.875667] No source specified 08:13:32 executing program 7: connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) sendmmsg$inet(0xffffffffffffffff, &(0x7f000000be00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)="06055ce8", 0x4}], 0x1}}, {{&(0x7f0000000e80)={0x2, 0x0, @multicast2}, 0x18, 0x0}}], 0x2, 0x0) 08:13:32 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r2) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r4) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r4, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', 0x0, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000480)='id_resolver\x00', &(0x7f0000000440)=@secondary) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000340)='user\x00', &(0x7f0000000380)=@secondary) add_key$keyring(&(0x7f0000000280), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, r5) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r2, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r1, 0xa}) add_key(&(0x7f0000000140)='.request_key_auth\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)="bd0fabf08f75c8eb22f77fe749a223945835bedae04245b7e8e0ed7fcc18c04df590bd0bc72fcaa95e8731cfb881a6e48b741926fabfb7c47be3ab613541ca34800f2a11b4c1bc347d2f45eeb4941cbb99535292c29964fd03", 0x59, r1) 08:13:32 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2, 0xf}, 0x0, 0xfffffffffffffffe) 08:13:32 executing program 3: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, &(0x7f0000000280)) r2 = add_key(&(0x7f0000000440)='big_key\x00', &(0x7f0000000480)={'syz', 0x0}, &(0x7f00000004c0)="ecb271ebbfab9febfb6152871431e2bab29b28beb93d230e0c03a5d86cf6e5027adc13da1c4b433bffb5bea7c1acec3c85b5fc173828a08871c1aaebf5a65b72fdc99e450dd57442a8ae368b782cd1fa52b049a6ad5a4f6df0ce951e70cef5613bd8bd654a12e765f9547f11728f5508fdf0c59992942e88973cb91384167e55c4a4fba62275ab068b06da", 0x8b, r1) r3 = add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000240)=@keyring={'key_or_keyring:', r1}) r4 = add_key$keyring(&(0x7f00000006c0), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r1) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) r5 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) keyctl$search(0xa, r4, &(0x7f0000000640)='big_key\x00', &(0x7f0000000680)={'syz', 0x0}, 0x0) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r5) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r5, 0xa}) r7 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000700)={'syz', 0x3}, 0x0, 0x0, r2) r8 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r7) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r8, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r7, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r8, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) request_key(&(0x7f0000000580)='big_key\x00', &(0x7f00000005c0)={'syz', 0x3}, &(0x7f0000000600)='!\xa3%{)]\\%-\x00', r8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) add_key(&(0x7f0000000300)='blacklist\x00', &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000380)="4eaa2125e3789956b2ed8c99c1c8e5987304482014c9e542222dadb35b699379964ad3c484bc374d320f11f1cf120eebc7cc6802e52e4069b0185068506521fa7dbab5625f670b92953eb26ea382f2b49398c07d3aef6521d00ef873be1bf5a862fc9985233df13b440d9b0de048404dd55a726437ef15fdd9910d8e5613e527d8243efd14eed0fa1f", 0x89, r6) 08:13:32 executing program 4: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r0 = clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x60, 0x0, 0x0}, 0x58) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000012c0)=0xc) clone3(&(0x7f0000001340)={0x4200, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x1}, &(0x7f00000002c0)=""/4096, 0x1000, &(0x7f0000000100)=""/92, &(0x7f0000001300)=[r1, r0], 0x2}, 0x58) 08:13:32 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 08:13:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) r3 = dup(r2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_SET_BSS(r6, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r7, 0x10, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_BSS_CTS_PROT={0x5}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x2}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0xcc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x4000000) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b5d893686ab2b20ff7fa4c8560f792377988e2593855b2a3000000000fd2", @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r5, @ANYBLOB="08000500040000000500530001000000"], 0x2c}}, 0x0) 08:13:32 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0xfdffffff00000000) [ 670.845176] audit: type=1326 audit(1768810412.156:244): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7040 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fabe58dab19 code=0x0 [ 670.870528] audit: type=1326 audit(1768810412.181:245): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7046 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc3fb339b19 code=0x0 08:13:32 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) add_key(&(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) request_key(&(0x7f00000002c0)='big_key\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r1, 0xa}) r3 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r4) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r4, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) request_key(&(0x7f0000000280)='rxrpc\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000340)='^\x00', r5) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r3, 0x0) 08:13:32 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r1, &(0x7f0000000140)='big_key\x00', &(0x7f00000001c0)={'syz', 0x3}, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, 0xee01, r0) 08:13:32 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) sendmmsg$inet(r0, &(0x7f000000be00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)="06055ce8", 0x4}], 0x1}}, {{&(0x7f0000000e80)={0x2, 0x0, @multicast2}, 0x18, 0x0}}], 0x2, 0x0) 08:13:32 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) r2 = getuid() newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) keyctl$chown(0x4, r1, r2, r3) lsetxattr$security_ima(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), &(0x7f0000000240)=ANY=[@ANYBLOB="040ebbab331282e8"], 0x16, 0x1) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:13:32 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:13:32 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0xffffffff00000000) [ 671.660589] audit: type=1326 audit(1768810412.971:246): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7040 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fabe58dab19 code=0x0 08:13:44 executing program 4: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r0 = clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x60, 0x0, 0x0}, 0x58) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000012c0)=0xc) clone3(&(0x7f0000001340)={0x4200, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x1}, &(0x7f00000002c0)=""/4096, 0x1000, &(0x7f0000000100)=""/92, &(0x7f0000001300)=[r1, r0], 0x2}, 0x58) 08:13:44 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) sendmmsg$inet(r0, &(0x7f000000be00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)="06055ce8", 0x4}], 0x1}}, {{&(0x7f0000000e80)={0x2, 0x0, @multicast2}, 0x18, 0x0}}], 0x2, 0x0) 08:13:44 executing program 3: add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@secondary) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r2, 0xa}) r4 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000200)={'fscrypt:', @desc3}, &(0x7f0000000240)={0x0, "84ce9e359503c7d0bfb006e2099d93d504c1f297cfb0b6751f3dd4f845b9cb302269c87974666789db9b4cc5ee01c49675a86aeb92b77d6b16d6bba345969edc", 0x19}, 0x48, r2) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r4) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) r6 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r7 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r6) r8 = add_key$fscrypt_provisioning(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x1}, &(0x7f00000004c0)=ANY=[@ANYBLOB="020000000080b8387a7f014dd523000061626386fc2f07020000006768697a6bc68287fbddd8f3153dbce76455bafbf9eb1719205501040000e713856571cc9889d3fcd82b6817ebcd904f7597ac7d463d03ec4dde9bb700"], 0x18, r6) keyctl$read(0xb, r8, &(0x7f00000003c0)=""/88, 0x58) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r6, 0xa}) r9 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r10 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r9) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r10, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r9, 0xa}) add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r6, r5, r9, 0x1) 08:13:44 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:13:44 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0xffffffffffffffbf) 08:13:44 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 08:13:44 executing program 5: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0xffffffff00000000) 08:13:44 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000000c0)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='keyring\x00', 0xfffffffffffffffd) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) [ 683.469675] audit: type=1326 audit(1768810424.778:247): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7090 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc3fb339b19 code=0x0 08:13:44 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:13:44 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) sendmmsg$inet(r0, &(0x7f000000be00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)="06055ce8", 0x4}], 0x1}}, {{&(0x7f0000000e80)={0x2, 0x0, @multicast2}, 0x18, 0x0}}], 0x2, 0x0) 08:13:44 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f0000000100)='keyring\x00', &(0x7f0000000940)={'syz', 0x3}, 0x0, 0xfffffffffffffffe) 08:13:44 executing program 5: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0xffffffff00000000) 08:13:44 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:13:44 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0xffffffffffffffff) 08:13:45 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:13:45 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f000000be00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)="06055ce8", 0x4}], 0x1}}, {{&(0x7f0000000e80)={0x2, 0x0, @multicast2}, 0x18, 0x0}}], 0x2, 0x0) 08:13:45 executing program 4: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0xfdffffff00000000) 08:13:45 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, r1) r3 = add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @auto=[0x63, 0x65, 0x36, 0x39, 0x39, 0x65, 0x38, 0x39, 0x38, 0x66, 0x34, 0x32, 0x66, 0x34, 0x36, 0x87389c2ce2984ecb]}, &(0x7f0000000580)={0x0, "8fca4d6855689f3a20f3df6ee53beff8a0e784710fb32f3a6114427c328d36c36f33686f7fd627761ee827c073ff9171c6707280504f672407003ae4cbd6b01e", 0x25}, 0x48, r2) add_key(&(0x7f0000000440)='id_resolver\x00', &(0x7f0000000480)={'syz', 0x2}, &(0x7f00000004c0)="84ff60081d7fb65e8dfa8545717749ec2118288297dec7b6b815d308e1af3a0089847b28603e25f2346d", 0x2a, r3) add_key(&(0x7f0000000140)='trusted\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000300)="4f776d6f50f08c4d2b45a480d608bd6643789aee3ae16ed528f85aa81686a06ee1efc890dfcc217f0c46ed55d73672dc0fcb454f0b057e0b2b793055a6be40a44ba0", 0x42, r2) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r4) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r4, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r5) r6 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140), 0x0, r6) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:13:45 executing program 5: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0xffffffff00000000) 08:13:45 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)={0x1, 0x0, @a}, 0x48, 0xfffffffffffffff9) 08:13:55 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:13:55 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 08:13:55 executing program 4: r0 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x8, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) r2 = dup(r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) r5 = gettid() rt_sigqueueinfo(r5, 0x0, &(0x7f00000000c0)) write$cgroup_pid(r4, &(0x7f00000000c0)=r5, 0x12) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) r7 = dup(r6) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r8, @ANYBLOB=',\x00']) fsmount(r7, 0x0, 0x8d) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) close_range(r0, r4, 0x0) fsmount(r2, 0x0, 0x3) 08:13:55 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, r2) add_key$keyring(&(0x7f0000000280), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r3) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:13:55 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:13:55 executing program 5: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) epoll_create1(0x0) io_uring_setup(0x5fff, &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0xffffffff00000000) 08:13:55 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f000000be00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)="06055ce8", 0x4}], 0x1}}, {{&(0x7f0000000e80)={0x2, 0x0, @multicast2}, 0x18, 0x0}}], 0x2, 0x0) 08:13:55 executing program 6: ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x400) r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000000000)={0x7000200a}) close_range(r0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x3, 0x2000) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000280)) r4 = io_uring_setup(0x5fff, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r4, 0x1b, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r5 = io_uring_setup(0x5fff, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r5, 0x1b, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000240)=[r2, r3, r4, r5], 0x4) 08:13:55 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) r2 = request_key(&(0x7f0000000300)='keyring\x00', &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000380)='\x00', r1) r3 = request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, r2) add_key$user(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, &(0x7f00000001c0)="c19419ab40b197846a91e0828c662e224069aae921c264f930bbddcdfa31df20943173a94251b5cc1b6da96ab665d31b607eb22c05f033617d673f51de7864f0537883b680bf17e4d60423ecd3d584dd915770313437a198b4771c199e8affdc5836d635f392c22da17712747c5f0dac993acf33942a130a72035b3def77a813fcca10c156ced69adfcb6adec3e5e4f9b9bb18ee58ffce48c03bfb700a01", 0x9e, r0) keyctl$search(0xa, r0, &(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000280)={'syz', 0x1}, r3) 08:13:55 executing program 5: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) epoll_create1(0x0) io_uring_setup(0x5fff, &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0xffffffff00000000) [ 693.962031] audit: type=1326 audit(1768810435.270:248): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7151 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f107edc9b19 code=0x0 [ 693.984953] audit: type=1326 audit(1768810435.289:249): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7158 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc3fb339b19 code=0x0 08:13:55 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r0, 0xa}) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r2) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:13:55 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) syz_io_uring_setup(0xdc4, &(0x7f0000000300)={0x0, 0x16ce, 0x8, 0x3, 0x15a}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) close_range(r0, 0xffffffffffffffff, 0x0) r3 = io_uring_setup(0x5fff, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r3, 0x1b, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r4 = io_uring_setup(0x5fff, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r4, 0x1b, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000000)=[r0, r2, 0xffffffffffffffff, r2, r1, r0, r3, r4], 0x8) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) r6 = dup(r5) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x240800, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@posixacl}]}}) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000040)='$.\x00', &(0x7f00000000c0)='./file0\x00', r6) 08:13:55 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f000000be00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)="06055ce8", 0x4}], 0x1}}, {{&(0x7f0000000e80)={0x2, 0x0, @multicast2}, 0x18, 0x0}}], 0x2, 0x0) [ 694.065235] audit: type=1326 audit(1768810435.375:250): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7151 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f107edc9b19 code=0x0 [ 694.085931] audit: type=1326 audit(1768810435.388:251): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7175 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe995e05b19 code=0x0 [ 694.779310] audit: type=1326 audit(1768810436.090:252): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7151 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f107edc9b19 code=0x0 [ 694.891365] audit: type=1326 audit(1768810436.195:253): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7151 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f107edc9b19 code=0x0 08:14:12 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$search(0xa, r0, &(0x7f00000000c0)='blacklist\x00', &(0x7f0000000100)={'syz', 0x1}, r1) r2 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @auto=[0x65, 0x65, 0x65, 0x38, 0x61, 0x64, 0x35, 0x65, 0x64, 0x0, 0x34, 0x65, 0x31, 0x39, 0x61, 0x31]}, &(0x7f0000000300)={0x0, "fbc589dff08184701c2eb5380fbe0c8347a8eeed883228d1ee3b0f2409652b43a56947f8a34a0c0ed9b538f44095fdb1f2e48744cdf13e891640ed5d69f08150", 0x35}, 0x48, r0) keyctl$search(0xa, 0x0, &(0x7f0000000140)='user\x00', &(0x7f00000001c0)={'syz', 0x3}, r2) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:14:12 executing program 5: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) epoll_create1(0x0) io_uring_setup(0x5fff, &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0xffffffff00000000) 08:14:12 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 08:14:12 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2}, 0x1c) sendmmsg$inet(r0, &(0x7f000000be00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)="06055ce8", 0x4}], 0x1}}, {{&(0x7f0000000e80)={0x2, 0x0, @multicast2}, 0x18, 0x0}}], 0x2, 0x0) 08:14:12 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000480), &(0x7f0000000540)={'syz', 0x3}, 0x0, 0x0, r1) r3 = request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x3}, 0x0, r2) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, r4) r6 = add_key$user(&(0x7f0000000280), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000340)="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", 0xfc, 0xfffffffffffffffb) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000440)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r4, 0xa}) r7 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r8 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r8, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r7, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r8, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) keyctl$KEYCTL_MOVE(0x1e, r2, r8, r1, 0x1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f00000004c0)='asymmetric\x00', &(0x7f0000000040)) r9 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', 0x0, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, 0x0, &(0x7f0000000500)=@secondary) r10 = add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$search(0xa, r5, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x0}, r10) 08:14:12 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x20) 08:14:12 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$search(0xa, r0, &(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000280)={'syz', 0x1}, r1) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0x0) r3 = add_key(&(0x7f0000000480)='id_legacy\x00', &(0x7f00000004c0)={'syz', 0x3}, &(0x7f0000000500)="54bc15b558ce818005ebba2e136df9a900057f26d648a7c4dee62140dce35e5500a96224414fd4fd0b1d902c205ffec3f97dc67722e4276050547f6f3a2b92ec12168aeb0a2750d44b12044f0a8d95a1f55e32ec087b4558c98f9be5689bdca87e2a0aab1addfc9915f37f565fd397eb9304b18ba3cf831e3bb268df1e6fad9057e2412905135bd65f9aede956191916e452e137468acd20b0daf30915b9ef3269e8afbc1924272c4f6541633d0fa7baae5e4538f7aac4b0456937de06a31bc1b1c3c00fe5f5d7eb2df2b6b59958", 0xce, r2) add_key(&(0x7f0000000140)='id_resolver\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)="55e992d50d2fd479f8cc2153a92a079c5a9c9544615ab7eac0eccf448ff7b515918429a63b49cf385e05c26ac8", 0x2d, r3) add_key(&(0x7f0000000380)='blacklist\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400), 0x0, 0xfffffffffffffffa) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:14:12 executing program 4: r0 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x8, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) r2 = dup(r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) r5 = gettid() rt_sigqueueinfo(r5, 0x0, &(0x7f00000000c0)) write$cgroup_pid(r4, &(0x7f00000000c0)=r5, 0x12) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) r7 = dup(r6) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r8, @ANYBLOB=',\x00']) fsmount(r7, 0x0, 0x8d) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) close_range(r0, r4, 0x0) fsmount(r2, 0x0, 0x3) [ 711.678004] audit: type=1326 audit(1768810452.989:254): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7200 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f107edc9b19 code=0x0 [ 711.691134] 9p: Bad value for 'rfdno' 08:14:13 executing program 0: r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000004c0)=0x14) fcntl$getownex(r0, 0x10, &(0x7f0000000500)) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r1) r3 = add_key(&(0x7f0000000280)='id_resolver\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000340)="f500d929475fa3aba56818117096b34abe25a0067d7f3e3be25571a36b836747aaa17134435aed4acce843795b022f3128efb2b8838d777b69c639", 0x3b, r2) keyctl$search(0xa, r3, &(0x7f0000000380)='asymmetric\x00', &(0x7f00000003c0)={'syz', 0x3}, r1) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) r4 = add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f00000001c0)={'fscrypt:', @auto=[0x64, 0x62, 0x32, 0x30, 0x62, 0x36, 0x34, 0x65, 0x38, 0x66, 0x64, 0x35, 0x31, 0x34, 0xe, 0x61]}, &(0x7f0000000200)={0x0, "3531d7db06a3bb2bdba762ccc07f4c84c0069cd8afdacd480f1b3fad1b46bb38ef0e159a7751c1e44524f342cd5559635bb840b0a02cf3f9d2a190df351fa218", 0x1c}, 0x48, r1) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r4) 08:14:13 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2}, 0x1c) sendmmsg$inet(r0, &(0x7f000000be00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)="06055ce8", 0x4}], 0x1}}, {{&(0x7f0000000e80)={0x2, 0x0, @multicast2}, 0x18, 0x0}}], 0x2, 0x0) [ 711.786913] audit: type=1326 audit(1768810453.098:255): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7200 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f107edc9b19 code=0x0 08:14:13 executing program 6: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x34, 0x0, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c000}, 0x80) r1 = syz_io_uring_setup(0x4e67, &(0x7f00000001c0)={0x0, 0xfffffffe, 0x20, 0x4}, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r2 = epoll_create1(0x0) r3 = io_uring_setup(0x5fff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x20000}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080)={0x2000200a}) close_range(r1, 0xffffffffffffffff, 0x0) 08:14:13 executing program 5: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0xffffffff00000000) 08:14:13 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 08:14:13 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r1, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) keyctl$search(0xa, r0, &(0x7f0000000140)='logon\x00', &(0x7f00000001c0)={'syz', 0x2}, r2) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) r3 = request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) r4 = add_key(&(0x7f00000000c0)='.request_key_auth\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) r5 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc4}, &(0x7f0000000300)={0x0, "31838ee5071670e344e8eea3bc196443fe03f1b5807076413dc5a9364b828247a092c59c98560bf57ce9f5093f03af6adda72d1c4cfc3e5aef162c08c5cfc2c1", 0x16}, 0x48, r4) r6 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r7 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r6) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r6, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) keyctl$KEYCTL_MOVE(0x1e, r3, r5, r7, 0x1) 08:14:13 executing program 5: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0xffffffff00000000) 08:14:13 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) pread64(r2, &(0x7f0000000240)=""/134, 0x86, 0x24e34bfc) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0x0) 08:14:13 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) r2 = request_key(&(0x7f0000000200)='.request_key_auth\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)='syz', r0) r3 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000340)={'fscrypt:', @desc4}, &(0x7f0000000380)={0x0, "eda1f8f4736cd531c878e7cffb48b3132703c8eeedee2ea368ebe682b5b79c5edb9921e432f31cbaece3fd65539e88454be4217e7b47894a8b6f02f5b1eb0196", 0x12}, 0x48, r0) keyctl$KEYCTL_MOVE(0x1e, r2, r1, r3, 0x0) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r4) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r4, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r5) 08:14:13 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) r1 = request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, r1) keyctl$KEYCTL_MOVE(0x1e, r1, 0xffffffffffffffff, r3, 0x0) keyctl$link(0x8, r2, r1) [ 711.931539] 9p: Bad value for 'rfdno' 08:14:25 executing program 4: r0 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x8, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) r2 = dup(r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) r5 = gettid() rt_sigqueueinfo(r5, 0x0, &(0x7f00000000c0)) write$cgroup_pid(r4, &(0x7f00000000c0)=r5, 0x12) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) r7 = dup(r6) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r8, @ANYBLOB=',\x00']) fsmount(r7, 0x0, 0x8d) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) close_range(r0, r4, 0x0) fsmount(r2, 0x0, 0x3) 08:14:25 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000500)='big_key\x00', &(0x7f0000000540)={'syz', 0x0}, &(0x7f0000000580)="57bf409257881d0cc4021335d28459aa6235b8ab7901e522cca051ab8c047bd0ec3abbbc6b48c4d14077d1eddb7050ae83cd72e489abd5965f3e0b011b7519777dc3e64549ccc2bb", 0x48, r0) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000600)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r1, 0xa}) r3 = add_key(&(0x7f0000000640)='rxrpc_s\x00', &(0x7f0000000680)={'syz', 0x2}, &(0x7f00000006c0)="fd1e1c48d6ff6ff0d3e7d5ffe903daf8c1e91b8b43c7c69ba87c1a00eaef6bf6bfd44728f5dae9802d5f2e28b6a7", 0x2e, 0x0) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r4) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r4, 0xa}) request_key(&(0x7f00000002c0)='big_key\x00', &(0x7f0000000480)={'syz', 0x1}, 0x0, r4) keyctl$restrict_keyring(0x1d, 0x0, &(0x7f0000000340)='.request_key_auth\x00', &(0x7f00000009c0)='#=\x00\'b\xca\xf1C\xe2\x7f?\xa3\xa3\n\xbfN\xd8\t\\\x94\xc4\x8d-\x00\xcc5\x8a\xb95\x9c6{x\xfe\xabx\x8a\x7f\x1c\x0f\xf0\xb7\n9(\xbb`\xb0O\x8b\xcdnJ\"\xc6qU\xe9\xe6\xeb\x18\xe6\xb5=\x89\xc1BK\xd5\xfe\xc1g\x8b\x0e\a\x11<\x99\xd1U\x92\x9a\xceT\xcd\xb0\xce\xeb\xa3\xff\xd0\xf7\xbfD\x1f5\xac\x9a\xf4^\xab\xd5`{\x0e\xffI\t\xdaW\x17\togM}\xa3\x99\x93\xca\xc5\x0f\xcd\x14\xc9\xd9[0\xcd\xf3\xc5\x9b#\v[\xd0\x99\x0eKe\x19B\xfb\xfc\xb0O\xcf\x98\xbc\xbc\xaf\xdd\x1e\x88{l\x89\x8b\f\x05s\xd2\xefW\\\xe2\x89\x818\x0f\xbc\xe0\xf5\xa05\xfd\x95\x85+\x04b<\xf8Vy\x12s|\x00\x00\x00\x00\x00\x00\x00\x00\x00') r6 = add_key(&(0x7f00000007c0)='pkcs7_test\x00', &(0x7f0000000800)={'syz', 0x0}, 0x0, 0x0, r4) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000840)='big_key\x00', &(0x7f0000000880)=@keyring={'key_or_keyring:', r2}) request_key(&(0x7f0000000700)='keyring\x00', &(0x7f0000000740)={'syz', 0x0}, &(0x7f0000000780)='/:[\x00', r6) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x3}, 0x0, 0x0, 0x0) r7 = request_key(&(0x7f00000001c0)='cifs.spnego\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)='syz', 0x0) request_key(&(0x7f00000000c0)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='#*\x00', r7) add_key$keyring(&(0x7f0000000380), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$search(0xa, r7, &(0x7f0000000280)='blacklist\x00', &(0x7f0000000300)={'syz', 0x1}, 0x0) add_key(&(0x7f0000000980)='encrypted\x00', &(0x7f0000000900)={'syz', 0x3}, &(0x7f0000000940)="796e3f3cf05cd321a2678f0a5a0a13081600f2bdc278bad8513ea83ea17ef4", 0x1f, r1) 08:14:25 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2}, 0x1c) sendmmsg$inet(r0, &(0x7f000000be00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)="06055ce8", 0x4}], 0x1}}, {{&(0x7f0000000e80)={0x2, 0x0, @multicast2}, 0x18, 0x0}}], 0x2, 0x0) 08:14:25 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0x0) r3 = io_uring_setup(0x5fff, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r3, 0x1b, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r4 = io_uring_setup(0x5fff, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r4, 0x1b, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) close_range(r3, r4, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x6, 0x2) pread64(r5, &(0x7f0000000240)=""/215, 0xd7, 0x1) 08:14:25 executing program 5: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0xffffffff00000000) 08:14:25 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:14:25 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000980)="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", 0x1000, r1) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:14:25 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) [ 724.123466] Option 'œ)7ÿ{ÉHÚ[)ɹOð±fx' to dns_resolver key: bad/missing value 08:14:25 executing program 0: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r1) request_key(&(0x7f00000002c0)='rxrpc_s\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) 08:14:25 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) r1 = request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r1) [ 724.171275] audit: type=1326 audit(1768810465.481:256): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7261 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f107edc9b19 code=0x0 [ 724.185812] 9p: Bad value for 'rfdno' 08:14:25 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) sendmmsg$inet(0xffffffffffffffff, &(0x7f000000be00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)="06055ce8", 0x4}], 0x1}}, {{&(0x7f0000000e80)={0x2, 0x0, @multicast2}, 0x18, 0x0}}], 0x2, 0x0) 08:14:25 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 08:14:25 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r0) r3 = add_key$fscrypt_provisioning(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x48, r1) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r4) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r4, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000280)='ceph\x00', &(0x7f0000000380)=@chain={'key_or_keyring:', r4}) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r2) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) r6 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r7 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r8 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r7) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r8, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r7, 0xa}) add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x2}, 0x0, 0x0, r7) r9 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r6) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r6, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) request_key(&(0x7f00000003c0)='trusted\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000440)=':chain\x00', r1) 08:14:25 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) 08:14:25 executing program 5: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0xffffffff00000000) [ 724.274552] audit: type=1326 audit(1768810465.584:257): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7261 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f107edc9b19 code=0x0 08:14:25 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r1, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) add_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f00000001c0)="813231080708731091c49001e50593363f231a947503de84f075bdb1f71309cd177052ad277ec686ec794ca6db1115a583a91a20383f1b7c1419c0581aa32d989c782cb933bd13d10869c77bb5c411614d799c42704ee8fbe2117b192e0f565de6363098a2c3cc2a10de04627ffd64d45211", 0x72, r2) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000240), 0xfffffffffffffffc, &(0x7f0000000300)={0x0, "89bb78dd02dce035d799c16951c0a0c7275835b8b9718582f67f41dd72aa94ac858f298cea37f7f851f79dd771ccdb7b6ccb24544fb39619e50cfa9d6a955d12", 0x21}, 0x48, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000280)='cifs.idmap\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f00000003c0)="5f43a498060655a7be8a85cb1dfa70b329e726d44adc44a263165b8df148afeaf7071c06ad5134400852be39de975f27efe3d5bb86c7371571eaa589a6bf72f6df290511ad64f7365b965b51898cbdd1f9848050a5d3fbb69dabfa03c5fe4a33486df2a93c21198b814a0ac2846687518f96c1631e70def4b200aca601427417ec1a61ff7205af699ca7d0b8a28b7e1bb9c5a90dfe6976054eca1609", 0x9c, r0) [ 724.389729] 9p: Bad value for 'rfdno' 08:14:36 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0) r3 = io_uring_setup(0x5fff, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r3, 0x1b, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r3, 0xf502, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[r3, r1, r0, r1, r0, r1, r1, r0, r4]}, 0x9) r5 = io_uring_setup(0x5dff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x4}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r5, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0x0) getpeername(r4, &(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @broadcast}}}}, &(0x7f0000000300)=0x80) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r6) 08:14:36 executing program 3: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9, 0x3}}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000300)) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f00000001c0)="77178c8033cccc8f6274966cb561128fe1b3bb4134b756bb20f9d524fac8c4bbc85729f832d01c4b4bc8a7d97635daa0fc9462351ea69ac919ef0aab75e0cde6e64fb4104709c04d75afe69061067381e2cb32b8758098f476980192f8c36ac1919cc5de7f7ee9a26543c2bdbf7eb5bae4b925db0e1d101ab384bcb350d35d5e52f8f95d6404ead447fa8ea8a18d01bbf6", 0x91, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r1) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000280), &(0x7f0000000500)={'syz', 0x2}, 0x0, 0x0, r2) 08:14:36 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) sendmmsg$inet(0xffffffffffffffff, &(0x7f000000be00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)="06055ce8", 0x4}], 0x1}}, {{&(0x7f0000000e80)={0x2, 0x0, @multicast2}, 0x18, 0x0}}], 0x2, 0x0) 08:14:36 executing program 1: prctl$PR_PAC_RESET_KEYS(0x36, 0x2) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:14:36 executing program 0: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) r1 = add_key(&(0x7f0000000140)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)="69ac564f30eb67488b6259f9deeec8a897dca7ad6ba2a67d8c2467820da9686ce5b2f6f510835d14c1a893568cf5409fa7d044735936b843405f7b7dada44dfd9d709c44ce2ff47be8724e831d5ef1e2a09315d7872c3b3fb8bb9d68fc8d88dc602a5209301ad5e3091296958d6603eca6b59bc14bfe25b7e1e8cf", 0x7b, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r1) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r2) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:14:36 executing program 5: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0xffffffff00000000) 08:14:36 executing program 4: r0 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x8, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) r2 = dup(r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) r5 = gettid() rt_sigqueueinfo(r5, 0x0, &(0x7f00000000c0)) write$cgroup_pid(r4, &(0x7f00000000c0)=r5, 0x12) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) r7 = dup(r6) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r8, @ANYBLOB=',\x00']) fsmount(r7, 0x0, 0x8d) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) close_range(r0, r4, 0x0) fsmount(r2, 0x0, 0x3) 08:14:36 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 08:14:36 executing program 5: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0xffffffff00000000) [ 735.096131] 9p: Bad value for 'rfdno' [ 735.098440] audit: type=1326 audit(1768810476.409:258): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7310 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f107edc9b19 code=0x0 08:14:36 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r1, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) r3 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, r2) add_key(&(0x7f0000000240)='cifs.spnego\x00', &(0x7f0000000280)={'syz', 0x2}, &(0x7f0000000300)="489188ec704b172cd894efc008de34304b976ab85caf", 0x16, r3) add_key(&(0x7f00000000c0)='.request_key_auth\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f00000001c0)="d910218e9a7008a11bf976dd5e96cdedbf1d9df95c20b7fc3af4d1e4752d2a8ca4fb1a697f6e6cdd0442fe6d5a8859603d09ae9ff3d9e5c75acf3f15bd2b63fb3947c559f21d", 0x46, r2) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:14:36 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) sendmmsg$inet(0xffffffffffffffff, &(0x7f000000be00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)="06055ce8", 0x4}], 0x1}}, {{&(0x7f0000000e80)={0x2, 0x0, @multicast2}, 0x18, 0x0}}], 0x2, 0x0) 08:14:36 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0xfff]}, 0x8) io_uring_register$IORING_REGISTER_PROBE(r1, 0x8, &(0x7f0000000240)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x19) r2 = epoll_create1(0x0) r3 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0x0) [ 735.205466] audit: type=1326 audit(1768810476.516:259): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7310 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f107edc9b19 code=0x0 08:14:36 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r1, 0xa}) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$link(0x8, r1, r0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000100)=@secondary) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r3, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000280), &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, r4) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:14:36 executing program 0: add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)) 08:14:36 executing program 5: r0 = epoll_create1(0x0) r1 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x2000200a}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0xffffffff00000000) 08:14:36 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 08:14:36 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0x0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000180)='cifs.idmap\x00', &(0x7f00000001c0)=@keyring={'key_or_keyring:', r0}) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) 08:14:36 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) request_key(&(0x7f00000000c0)='pkcs7_test\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='.[%\\\x00', r0) [ 735.314108] 9p: Bad value for 'rfdno' 08:14:47 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) sendmmsg$inet(r0, 0x0, 0x0, 0x0) 08:14:47 executing program 5: r0 = epoll_create1(0x0) r1 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x2000200a}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0xffffffff00000000) 08:14:47 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:14:47 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) request_key(&(0x7f00000003c0)='.request_key_auth\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000400)='keyring\x00', r0) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r1, 0xa}) request_key(&(0x7f0000000300)='.request_key_auth\x00', &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000380)='\x00', 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) keyctl$setperm(0x5, 0x0, 0xc001030) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r3, 0xa}) keyctl$unlink(0x9, r3, 0xfffffffffffffffe) r5 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r5) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r5, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000240)='trusted\x00', &(0x7f0000000280)=@secondary) add_key$keyring(&(0x7f0000000200), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0x0) 08:14:47 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) r3 = io_uring_setup(0x5fff, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r3, 0x1b, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) ioctl$BTRFS_IOC_INO_PATHS(r3, 0xc0389423, &(0x7f00000000c0)={0x0, 0x50, [0x0, 0x3, 0x1, 0x101], &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0x0) 08:14:47 executing program 4: r0 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x8, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) r2 = dup(r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) r5 = gettid() rt_sigqueueinfo(r5, 0x0, &(0x7f00000000c0)) write$cgroup_pid(r4, &(0x7f00000000c0)=r5, 0x12) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) r7 = dup(r6) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r8, @ANYBLOB=',\x00']) fsmount(r7, 0x0, 0x8d) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) close_range(r0, r4, 0x0) 08:14:47 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:14:47 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) [ 745.899883] 9p: Bad value for 'rfdno' 08:14:47 executing program 5: r0 = epoll_create1(0x0) r1 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x2000200a}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0xffffffff00000000) 08:14:47 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) [ 745.969026] audit: type=1326 audit(1768810487.280:260): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7360 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f107edc9b19 code=0x0 [ 746.003242] 9p: Bad value for 'rfdno' 08:14:47 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) sendmmsg$inet(r0, 0x0, 0x0, 0x0) [ 746.080443] audit: type=1326 audit(1768810487.391:261): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7360 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f107edc9b19 code=0x0 08:14:58 executing program 5: r0 = syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0xffffffff00000000) 08:14:58 executing program 3: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @auto=[0x62, 0x39, 0x2f, 0x31, 0x63, 0x39, 0xc8f61da5d4c0d291, 0x35, 0x37, 0x37, 0x36, 0x30, 0x65, 0x64, 0x35, 0x62]}, &(0x7f0000000300)={0x0, "d423e1537ef85297768061a0775d2fc0b4878a2814d199308cb047cf9c918dc255fbf338190e48b6125dc3a00969cfc72f610477adf32ba49f0e0ca31c9c4d09", 0x1b}, 0x48, r0) keyctl$search(0xa, r0, &(0x7f0000000140)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x3}, r1) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r2, 0xa}) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x0}, 0x0, r2) keyctl$clear(0x7, 0xfffffffffffffffc) 08:14:58 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 08:14:58 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000280)={'syz', 0x2}, &(0x7f0000000300)='\x00', r0) r2 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, r1) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(0x0, r3, 0x0) r4 = add_key(&(0x7f00000000c0)='rxrpc_s\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)="f56091313fc57d2f32359d091aec853de2a36abb2702df7be53316bc10f8e57905ca7ecb009b3473baab49ac3c", 0x41, r2) keyctl$get_persistent(0x16, r3, r4) r5 = request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) r6 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, r1) r7 = add_key(&(0x7f0000000440)='syzkaller\x00', &(0x7f0000000480)={'syz', 0x3}, &(0x7f00000004c0)="e21b705a58f4c915cd8611f0010364fcbe9a47171f584e41a8a3ecce2d3265d5f61596353c5107483b54a7235a9c47db5f1bdde69b3227cd96ee5d4b7b2ae6d8be69c980322e71e70fe3cdca12412c410d7f0ae0f7f89bbbf4a3198364ef535b425c567866ede2df005992800b0e56d11b485d8f328231da7de789ec0559514ad25fc15afcdb3f5c4a67d4fe344911fb4211513ca55c8641ed948578b07ecdd3f2ca8c", 0xa3, r5) clock_gettime(0x0, &(0x7f0000002a00)) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) r9 = dup(r8) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r10}}) recvmmsg$unix(r9, &(0x7f0000000900)=[{{&(0x7f0000000580)=@abs, 0x6e, &(0x7f0000000880), 0x0, &(0x7f0000002980)}}], 0x1, 0x20, &(0x7f0000002a40)={0x0, 0x3938700}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) syz_mount_image$tmpfs(0x0, &(0x7f0000000600)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='mpol=interleave=relative:,gid=', @ANYRESHEX=r11, @ANYBLOB="bb97c518e1eebead4f4a462bfb0d276a1e78ab218336ccef612579205c1c722fe3330ee556608433ed0605186a569b449cab46f21b661ece9af6584b15443707035cddd622125944919bd9e842b4cf7a3f"]) keyctl$chown(0x4, r7, 0x0, r11) add_key$keyring(&(0x7f0000000240), &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, r6) 08:14:58 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r2, 0xa}) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r2) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:14:59 executing program 6: r0 = io_uring_setup(0x5fff, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r0, 0x1b, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r1 = syz_io_uring_setup(0x4e49, &(0x7f0000000000)={0x0, 0xd717, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r2 = epoll_create1(0x0) r3 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080)={0x2000200a}) close_range(r1, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x800) [ 757.736513] audit: type=1326 audit(1768810499.047:262): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7391 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f107edc9b19 code=0x0 [ 757.755012] audit: type=1326 audit(1768810499.052:263): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7392 comm="syz-executor.1" exe="/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fba7619eb19 code=0x0 ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, &(0x7f0000000240)={0xeb5, 0x6, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) 08:14:59 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) sendmmsg$inet(r0, 0x0, 0x0, 0x0) 08:14:59 executing program 4: r0 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x8, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) dup(r1) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) r3 = gettid() rt_sigqueueinfo(r3, 0x0, &(0x7f00000000c0)) write$cgroup_pid(r2, &(0x7f00000000c0)=r3, 0x12) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) r5 = dup(r4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r6, @ANYBLOB=',\x00']) fsmount(r5, 0x0, 0x8d) close_range(r0, r2, 0x0) [ 757.786258] 9p: Bad value for 'rfdno' 08:14:59 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) r1 = request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) r2 = add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f00000001c0)={'fscrypt:', @desc2}, &(0x7f0000000200)={0x0, "bbb8164a708efce5243427b4e7e3c0efaf5c2882ee6c2f5c47cb14338107a7837b84103600e297155fe21b25753806bc656ad3ff0ceb03423fc37cec73558fec", 0x3a}, 0x48, r1) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, r2) 08:14:59 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) sendmmsg$inet(r0, &(0x7f000000be00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)="06055ce8", 0x4}], 0x1}}], 0x1, 0x0) [ 757.853032] audit: type=1326 audit(1768810499.157:264): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7391 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f107edc9b19 code=0x0 08:14:59 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000100)={r1, 0x0, 0x1000}, &(0x7f00000001c0)={'enc=', 'pkcs1', ' hash=', {'md4\x00'}}, &(0x7f0000000140), &(0x7f0000000300)=""/4096) 08:14:59 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 08:14:59 executing program 5: r0 = syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0xffffffff00000000) [ 757.997617] 9p: Bad value for 'rfdno' 08:14:59 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) sendmmsg$inet(r0, &(0x7f000000be00), 0x0, 0x0) 08:14:59 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 08:14:59 executing program 0: add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r2, 0xa}) keyctl$link(0x8, 0x0, r2) [ 758.138757] 9p: Bad value for 'rfdno' [ 758.570825] audit: type=1326 audit(1768810499.881:265): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7392 comm="syz-executor.1" exe="/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fba7619eb19 code=0x0 08:15:09 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, r0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000000) request_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='blacklist\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000300)="032c68e6979696828827ee3fc50deb5cc1293def56c005e46fbacd4df549126500dc82d14fec67d5e79277d677e19637b9297cb8f22e3953b1e4ad82fb529820ee965b82425dc21daefc27e36d9ae3de4f0125b0c168bb1b151d4d20c7d3202b336fca98327be1e4c19c6d33b844f603ab805c0ceca2067cc502642e804ab505186b7a0e528a82820df609f9946754db4af4925a010011febc4e31b0eb22432a32a21dcf711d6ddf8aed5b02c3ef305d8d4f8418a10f74011521319e1bae60a288d64902f60d57cd10da358f7c92107966c440561643d362fdbf088f835097756332744596f9f24721f29168b5a7ffeb00000000000000", 0xf7, r0) 08:15:09 executing program 4: r0 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x8, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) dup(r1) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) r3 = gettid() rt_sigqueueinfo(r3, 0x0, &(0x7f00000000c0)) write$cgroup_pid(r2, &(0x7f00000000c0)=r3, 0x12) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) r5 = dup(r4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r6, @ANYBLOB=',\x00']) close_range(r0, r2, 0x0) 08:15:09 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 08:15:09 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r1, 0xa}) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r3, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f00000002c0)=@keyring={'key_or_keyring:', r4}) request_key(&(0x7f00000000c0)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000200)='keyring\x00', r2) r5 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0x0) r6 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$unlink(0x9, 0x0, r6) r7 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r5) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r5, 0xa}) keyctl$link(0x8, r5, r0) request_key(&(0x7f0000000240)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:15:09 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)=0x0) r2 = epoll_create1(0x0) r3 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080)={0x2000200a}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x871, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, 0x0, 0xfffffffffffffffe, 0x0) r5 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, r6) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000240)={0x1, 0x1, 0x1000, 0x15, &(0x7f0000000040)="f3a8b3f18d929ae74ba2ef8d363d1647fc6a00c8ed", 0xd, 0x0, &(0x7f00000000c0)="8c3354f73939d8d2d536a3e083"}) syz_io_uring_submit(r4, r1, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd=r2, 0x0, 0x0, 0x3, 0x2, 0x0, {0x0, r6, r3}}, 0x9) 08:15:09 executing program 0: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(0x0, r1, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0xfff}]}) r3 = dup(r2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) ioctl$TUNSETOWNER(r3, 0x400454cc, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000401000000180042b283d422eba97a3e0205a132c8e547e977dabd3ae9145a1a0246fd287f3cb329275099e32bbc81103f98ed459a5316e066b696f54e", @ANYRES32, @ANYRES32=r1, @ANYRES32=0xee01, @ANYBLOB='\x00\x00\x00\x00\x00\t\x00\x00']) r5 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r5) r6 = request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) r7 = accept4(r4, &(0x7f0000000300)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000280)=0x80, 0x800) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r7, 0x8010671f, &(0x7f0000000380)={&(0x7f0000000400)=""/90, 0x5a}) r8 = add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r6) r9 = dup(0xffffffffffffffff) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r10}}) openat(r9, &(0x7f0000000100)='./file0\x00', 0x200800, 0x9) keyctl$search(0xa, r8, &(0x7f0000000200)='cifs.idmap\x00', &(0x7f0000000240)={'syz', 0x1}, r5) 08:15:09 executing program 5: r0 = syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0xffffffff00000000) 08:15:09 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) sendmmsg$inet(r0, &(0x7f000000be00), 0x0, 0x0) 08:15:09 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) sendmmsg$inet(r0, &(0x7f000000be00), 0x0, 0x0) [ 768.581264] audit: type=1326 audit(1768810509.891:266): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7453 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f107edc9b19 code=0x0 [ 768.588692] 9p: Bad value for 'rfdno' 08:15:09 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r1, 0xa}) keyctl$search(0xa, r0, &(0x7f0000000200)='cifs.spnego\x00', &(0x7f0000000240)={'syz', 0x3}, r1) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) r3 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000340)={'fscrypt:', @desc2}, &(0x7f0000000380)={0x0, "ac5efc04385f6bd7276224d5ed9537c64c32a817263bb73fd5f43a5440e8a3b0b75e47c6240307c3c713952311c35a7018031eaea11a97914c45337ee8bd277d", 0x3f}, 0x48, r2) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r4) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r4, 0xa}) request_key(&(0x7f00000002c0)='.dead\x00', &(0x7f0000000940)={'syz', 0x1}, 0x0, r4) r6 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f00000004c0)='user\x00', &(0x7f0000000500)={'syz', 0x1}, &(0x7f0000000600)='\'\'[\x00H\xcf\xd5h\x01\x00\xdd{\xadb4IUl\x12&\xaa\x03P\x86\xd2\x16\x94\xf3\xf1\xeeoD_\xacL\xd3\x1c\xf3 \x9a\x02\xab\xe4\x99C\x82g9k\xf1|69\x00\xcaaUh\x1b|C\x8eZ\x80\x13+w\xf0\xad\x14\xa1h\xee\x1d\xc7\xabe\xb1\x11\x00\x00\xbc\xeb\xbf\x9b\x99\x92\x92l\xb7\x05\x14\x9f\xbf\x03\x00'/106, r3) r7 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r6) r8 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r9 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r8, 0xa}) request_key(&(0x7f0000000400)='rxrpc\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)='\x00', r8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000280)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r6, 0xa}) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, r6) 08:15:09 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:15:09 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) close_range(r0, r1, 0x0) r2 = epoll_create1(0x0) r3 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0x0) 08:15:09 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) sendmmsg$inet(r0, &(0x7f000000be00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 768.682414] audit: type=1326 audit(1768810509.993:267): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7453 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f107edc9b19 code=0x0 08:15:10 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, r0) add_key(&(0x7f0000000140)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)="a9de96708ea957a157921bee9e4009850f218293cba7c1c4698687de66e05fb54af9763d546011dd8e9db3d2837a65986e54a96d060437dd98b02c402b6d140043f9", 0x42, r1) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000040)={0xb3}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80402, 0x0) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:15:10 executing program 5: r0 = syz_io_uring_setup(0x4e69, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0xffffffff00000000) 08:15:10 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r1, 0xa}) request_key(&(0x7f00000002c0)='trusted\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, r1) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0x0) [ 768.773154] audit: type=1326 audit(1768810510.084:268): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7484 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc3fb339b19 code=0x0 08:15:10 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r1, &(0x7f00000000c0)=""/103, 0x67) add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) [ 768.875879] 9p: Bad value for 'rfdno' 08:15:19 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:15:19 executing program 4: r0 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x8, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) dup(r1) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) r3 = gettid() rt_sigqueueinfo(r3, 0x0, &(0x7f00000000c0)) write$cgroup_pid(r2, &(0x7f00000000c0)=r3, 0x12) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) dup(r4) socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r0, r2, 0x0) 08:15:19 executing program 5: r0 = syz_io_uring_setup(0x4e69, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0xffffffff00000000) 08:15:19 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xfffffffd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x52a410611f9be64, 0x0, 0x0, 0x1, {0x0, r3}}, 0x8) r4 = epoll_create1(0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r5, &(0x7f0000000140)=' ', 0x1, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r5, 0x0) r7 = syz_io_uring_setup(0x0, &(0x7f0000000140), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r6, r8, &(0x7f0000000240)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) r10 = dup(r9) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r11}}) syz_io_uring_submit(r1, r8, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r11, 0x80, &(0x7f0000000240)=@pptp={0x18, 0x2, {0x0, @rand_addr=0x64010100}}, 0x0, 0x0, 0x1, {0x0, r3}}, 0x115) r12 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r12, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0x0) r13 = openat$cgroup_ro(r5, &(0x7f00000000c0)='freezer.state\x00', 0x0, 0x0) r14 = signalfd(r7, &(0x7f00000002c0)={[0x1]}, 0x8) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r13, 0x40182103, &(0x7f0000000300)={0x0, 0x2, r14, 0x80, 0x80000}) 08:15:19 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000980)="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", 0x1000, 0x0) 08:15:19 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$describe(0x6, r0, &(0x7f00000000c0)=""/49, 0x31) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getxattr(0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:15:19 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) sendmmsg$inet(r0, &(0x7f000000be00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 08:15:19 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r2, 0xa}) add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0, r3) request_key(&(0x7f0000000240)='ceph\x00', &(0x7f0000000280)={'syz', 0x2}, &(0x7f0000000300)='syz', r2) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000140)='id_legacy\x00', &(0x7f0000000200)=@secondary) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r4) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r4, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r5) add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) [ 778.717748] audit: type=1326 audit(1768810520.029:269): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7503 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f107edc9b19 code=0x0 [ 778.746038] audit: type=1326 audit(1768810520.057:270): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7511 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc3fb339b19 code=0x0 08:15:20 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r2, 0xa}) request_key(&(0x7f0000000280)='trusted\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000340)='^\\~^)!]\x00', 0xfffffffffffffffd) r4 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @auto=[0x31, 0x62, 0x30, 0x66, 0x31, 0x66, 0x62, 0x30, 0x39, 0x39, 0x66, 0x64, 0x32, 0x61, 0x61, 0x62]}, &(0x7f00000001c0)={0x0, "8be90fb757886262c7d96da65a9ced371a1375d22a9978af3a0e430f71037b9acf880e781cbd5db25f3536b84dc993bcc48cea3800fe0d4eb622cb5eef8a2fa8", 0x1f}, 0x48, r1) r5 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r5) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r5, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, r6) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f00000000c0)='ceph\x00', &(0x7f0000000240)=@keyring={'key_or_keyring:', r4}) [ 778.793432] audit: type=1326 audit(1768810520.102:271): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7512 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe995e05b19 code=0x0 [ 778.820814] audit: type=1326 audit(1768810520.132:272): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7503 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f107edc9b19 code=0x0 [ 778.848173] 9p: Bad value for 'rfdno' [ 778.877597] audit: type=1326 audit(1768810520.188:273): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7531 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff077a56b19 code=0x0 08:15:20 executing program 3: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) socket$inet6(0xa, 0xa, 0x741d) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) r4 = dup(r3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) getpeername(r5, &(0x7f00000000c0)=@ax25={{0x3, @bcast}, [@bcast, @default, @netrom, @rose, @netrom, @netrom, @null, @bcast]}, &(0x7f0000000140)=0x80) r6 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r6) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:15:20 executing program 5: r0 = syz_io_uring_setup(0x4e69, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0xffffffff00000000) 08:15:20 executing program 1: add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r0, 0xa}) request_key(&(0x7f00000000c0)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)='keyring\x00', r0) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r3, 0xa}) keyctl$link(0x8, r3, r2) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) r5 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r5) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r5, 0xa}) add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, r5) 08:15:20 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) sendmmsg$inet(r0, &(0x7f000000be00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 08:15:20 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000200)='logon\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000300)="13b5d0f14b31b8fdd97f77e3b41d505dc48047c8fb87a64432f8a8965dcd7ec9e32a5a09bad514c281337547a2144d0c71bb9d69fa9a1c503250ba3c4d4311821c7d83375030", 0x46, r1) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r1, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) request_key(&(0x7f00000000c0)='blacklist\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)='syz', r2) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:15:20 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r2) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r4) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r4, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) r6 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc3}, &(0x7f0000000300)={0x0, "127a83513c90f8263a8ef43473c23d2af361bc4dddac4157b6e718de14199a00d1d834e177dfb59860dac6b3abc7b7f8bd8c85316e808f68f2127eb8bb655b82", 0x1e}, 0x48, r3) keyctl$unlink(0x9, r5, r6) [ 778.990819] audit: type=1326 audit(1768810520.301:274): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7531 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff077a56b19 code=0x0 [ 779.711461] audit: type=1326 audit(1768810521.022:275): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7531 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff077a56b19 code=0x0 [ 779.721300] audit: type=1326 audit(1768810521.032:276): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7531 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff077a56b19 code=0x0 08:15:29 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) r1 = request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000000c0)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f00000001c0)="1f02b9b7404a935bd3a6dd1359ef814cc71234f42d2ce9b8c57f06dcf6b40e84f3d4ea40885a308ddd25898dfd3c0064b7fa7e0218f598eb664ae300a387d50fd1ffc3a1a4767b2e0be70bea5bd9e40bc17dea45eff2aae1307b1823c1b5361393eb9058c4acf7bd71d3d84b", 0x6c, r1) 08:15:29 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) sendmmsg$inet(r0, &(0x7f000000be00)=[{{0x0, 0x0, &(0x7f00000000c0)}}], 0x1, 0x0) 08:15:29 executing program 3: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r1, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) r3 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc1}, &(0x7f0000000200)={0x0, "61a59e4e620e6d520b698d9b17c0341564a428953b6e09dc6471d73d088fcd2208553248916346afaa27b7e87bf9f42b16131d75059af759bf4f5d8b05ccc81b", 0x24}, 0x48, r0) keyctl$search(0xa, r2, &(0x7f0000000100)='logon\x00', &(0x7f0000000140)={'syz', 0x1}, r3) r4 = add_key(&(0x7f0000000280)='trusted\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000340)="67c69833d74d62e869c5877f674d1db66ea43bc27c1311938262014aad69a91165c307e67bf9130e299cf18f6348b791b89793a1973cb4a7befbfa4d9f85132b0a80c663309d3eaf2ac1b973030972d9ce60d531cbbb5c8ac6ee282ffdfd2353ec16b9e91c3b775cdd45e2d86fd045fe15c0924ad70b5778e6357fc34b74fd427242113438521d913b60ad0b5f17968f8ba37721fc7f611ca84196b83138a1158465f3e27dc78dc4b2eed72d97b63451fac5786c76b29750bccad90687", 0xbd, r3) keyctl$KEYCTL_MOVE(0x1e, r4, r1, r1, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) 08:15:29 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) syz_io_uring_setup(0x3d27, &(0x7f0000000000)={0x0, 0x561c, 0x4, 0x0, 0x23d, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000240)) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) r3 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000380)={{r3}, 0x0, 0x10, @inherit={0x88, &(0x7f00000002c0)={0x1, 0x8, 0x6, 0x3, {0x11, 0x0, 0x1f, 0x2, 0xffffffff}, [0x4, 0x3, 0xfcd, 0x6, 0x5, 0x0, 0x7, 0x1ff]}}, @name="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"}) close_range(r0, 0xffffffffffffffff, 0x0) 08:15:29 executing program 5: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0xffffffff00000000) 08:15:29 executing program 4: r0 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x8, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) dup(r1) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) r3 = gettid() rt_sigqueueinfo(r3, 0x0, &(0x7f00000000c0)) write$cgroup_pid(r2, &(0x7f00000000c0)=r3, 0x12) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) dup(r4) close_range(r0, r2, 0x0) 08:15:29 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:15:29 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r0, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r2, 0xa}) keyctl$KEYCTL_MOVE(0x1e, r1, r2, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r4) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:15:29 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) 08:15:29 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$join(0x1, &(0x7f00000000c0)={'syz', 0x0}) keyctl$join(0x1, &(0x7f00000001c0)={'syz', 0x1}) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) [ 788.467826] audit: type=1326 audit(1768810529.775:277): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7564 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f107edc9b19 code=0x0 [ 788.521556] audit: type=1326 audit(1768810529.829:278): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7569 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc3fb339b19 code=0x0 08:15:29 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x80000000}}, './file0\x00'}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000040), 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 08:15:29 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r1, 0xa}) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r3, 0xa}) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r3) 08:15:29 executing program 1: setxattr$trusted_overlay_nlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)={'L+', 0x8}, 0x16, 0x3) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:15:29 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r3, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) keyctl$clear(0x7, r4) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r1, 0xa}) keyctl$KEYCTL_PKEY_QUERY(0x18, r2, 0x0, &(0x7f00000000c0)='k\xe5yring\x00', &(0x7f0000000100)) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) r5 = socket$inet(0x2, 0x3, 0x26) setsockopt$inet_int(r5, 0x0, 0x33, &(0x7f0000000000)=0xa4ffffff, 0x4) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) [ 788.572520] audit: type=1326 audit(1768810529.883:279): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7564 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f107edc9b19 code=0x0 08:15:29 executing program 5: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0xffffffff00000000) 08:15:29 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) sendmmsg$inet(r0, &(0x7f000000be00)=[{{0x0, 0x0, &(0x7f00000000c0)}}], 0x1, 0x0) [ 788.615614] 9p: Bad value for 'rfdno' 08:15:29 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r0, 0xa}) add_key$keyring(&(0x7f0000000200), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r0) r3 = request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) r4 = add_key(&(0x7f0000000340)='blacklist\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)="3e90636870342e001daafd1c81ad86a81c64d09bd1fe38fbbde2903480634758c2b7ae461290a1cb27734eaeaf67b9", 0x2f, r3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000280)='syzkaller\x00', &(0x7f0000000300)=@secondary) r5 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(&(0x7f0000000480), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r5, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r6) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000400)='trusted\x00', &(0x7f0000000440)=@chain) 08:15:29 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000280), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1) add_key(&(0x7f0000000140)='user\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)="33a4f17e8c6b8c42da747d0e6dd8f9a6129df1a5608900fde3ee4d11e67f27eac839c5a874d3db1885068f9188a53197dbe3b521419193f6755beabea03ecc4ea1", 0x41, r1) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:15:29 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000000)=0x3f, r0, &(0x7f0000000040)=0x4, 0xfffffffffffffffe, 0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0x0) 08:15:30 executing program 5: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0xffffffff00000000) 08:15:30 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x2000200a}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000000000)={0x90000002}) close_range(r0, 0xffffffffffffffff, 0x0) 08:15:40 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) sendmmsg$inet(r0, &(0x7f000000be00)=[{{0x0, 0x0, &(0x7f00000000c0)}}], 0x1, 0x0) 08:15:40 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) r1 = request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) keyctl$clear(0x7, r1) 08:15:40 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 08:15:40 executing program 4: r0 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x8, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) dup(r1) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) r3 = gettid() rt_sigqueueinfo(r3, 0x0, &(0x7f00000000c0)) write$cgroup_pid(r2, &(0x7f00000000c0)=r3, 0x12) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) close_range(r0, r2, 0x0) 08:15:40 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x40000}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0x0) 08:15:40 executing program 5: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), 0x0) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0xffffffff00000000) 08:15:40 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r1, 0xa}) keyctl$KEYCTL_MOVE(0x1e, r1, r0, r0, 0x1) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:15:40 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r1, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r2) [ 799.489290] audit: type=1326 audit(1768810540.800:280): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7625 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc3fb339b19 code=0x0 [ 799.532936] audit: type=1326 audit(1768810540.844:281): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7632 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f107edc9b19 code=0x0 08:15:40 executing program 5: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), 0x0) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0xffffffff00000000) 08:15:40 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) r1 = request_key(&(0x7f0000000200)='blacklist\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)='-\']\x00', r0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, r1) r2 = request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r3, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000080), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r2) r5 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r5) add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r5, 0xa}) r7 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r8 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r7) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r8, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r7, 0xa}) add_key(&(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)={'syz', 0x3}, &(0x7f0000000500)="009b181d333a9172ec8089dd3880bfb8ccd7fe26d521108ceea07fcdf015d4375fb18a1c916a3f6a075fd2d990689c0d09a8f881424cd6bc1b42c49281edca7005c80ba0b23e5ebe655468b0b5454c2f722209f4bf9f7de6d8af77b6e9131f2035441f3dfa60cdc6fa658548271ff14f200358bdd95bb99184d72765bbb22b4bd587ae771676c78c2766ac1c40bf0ac800532878f950ae3323d58b6ccc97d8d69298e194e3dab485022bb8a45f76270dba6df383177511edb0e20b015ffd5157be06", 0xc2, r7) add_key$keyring(&(0x7f0000000040), &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, r5) [ 799.639862] audit: type=1326 audit(1768810540.951:282): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7632 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f107edc9b19 code=0x0 08:15:51 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='user\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:15:51 executing program 5: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), 0x0) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0xffffffff00000000) 08:15:51 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) sendmmsg$inet(r0, &(0x7f000000be00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}}], 0x1, 0x0) 08:15:51 executing program 4: r0 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x8, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) dup(r1) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) r3 = gettid() rt_sigqueueinfo(r3, 0x0, &(0x7f00000000c0)) write$cgroup_pid(r2, &(0x7f00000000c0)=r3, 0x12) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) close_range(r0, r2, 0x0) 08:15:51 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 08:15:51 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200)={'fscrypt:', @desc2}, &(0x7f0000000240)={0x0, "eef27fd36220371a7f17e67040271aad282d758956f03f1b4d23f6ce08fea6b21da2676eaf3b097a9039eac53d72de8202e6df0ebb0051c7cd42c01bf4cc9bc1", 0x15}, 0x48, r1) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) r2 = add_key(&(0x7f00000004c0)='syzkaller\x00', &(0x7f0000000500)={'syz', 0x1}, &(0x7f0000000540)="46f7ac90e4ee19447467ada2efdf543b0dbbed420038d1d77d5f79c8fcb51fd0fdd30682de519956eb38986079dde9901d295e3c1b3b11e7961257d31d2f3582fd8d3ed3e0d81070bee0abeb546bed6519e2d1b2f2c9a41e2aa49b037030d1b0f7aa3468a2666990a67a8f62be718f9a2bcad7ab2e99f0e017d8a17f828ce95b4c20607f617166e99df3907dcd1f6f0c317e388f8ff200fed2259ff9cd2af6e89d96c3a7afced6a01be194fa7ba3f635d600d73d40771bb5b0983f590ef62e6f79a7c73387d110c2d6611a054be0ca3f2fd1f73c6e07b49b1af5de8d183f7bd5ae24ef9cdc5471c80c96f4e16cbd280422036fe6e552d4aef15b8ec35a62", 0xfe, r1) keyctl$instantiate(0xc, r2, &(0x7f0000000640)=ANY=[@ANYBLOB='load default user 00000000000000000002 9639\x00\x00\x00'], 0x2e, 0xfffffffffffffffe) request_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)='/&sq\'%\\.\x00', r0) add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r0) r3 = request_key(&(0x7f0000000400)='asymmetric\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000480)='\x00', 0x0) add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, r3) 08:15:51 executing program 1: add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) r0 = request_key(&(0x7f0000000100)='id_resolver\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f00000001c0)='\xf1\x00', 0xfffffffffffffffa) request_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000000c0)='syz', r0) 08:15:51 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r2, 0x1b, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r3 = io_uring_setup(0x6002, &(0x7f0000000140)={0x0, 0x0, 0x1, 0xfffffffd, 0x17d}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0x0) [ 810.153565] audit: type=1326 audit(1768810551.464:283): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7657 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc3fb339b19 code=0x0 08:15:51 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='rxrpc\x00', &(0x7f0000000940)={'syz', 0x0}, 0x0, 0xfffffffffffffffe) 08:15:51 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:15:51 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) sendmmsg$inet(r0, &(0x7f000000be00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}}], 0x1, 0x0) 08:15:51 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r1) [ 810.246936] audit: type=1326 audit(1768810551.557:284): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7676 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f107edc9b19 code=0x0 08:15:51 executing program 5: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0xffffffff00000000) 08:15:51 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:15:51 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) sendmmsg$inet(r0, &(0x7f000000be00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}}], 0x1, 0x0) [ 810.350580] audit: type=1326 audit(1768810551.661:285): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7676 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f107edc9b19 code=0x0 08:15:51 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, r1) 08:15:51 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0x0) r1 = request_key(&(0x7f0000000140)='id_resolver\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)='syz', 0x0) add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r1) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) syz_mount_image$tmpfs(0x0, &(0x7f0000000600)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative'}}}, {@gid={'gid', 0x3d, r4}}]}) keyctl$chown(0x4, r2, r3, r4) add_key(&(0x7f0000000240)='syzkaller\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f0000000300)="43bf7573440dea6383a26b27ad4b7d294f4e540d5204215e8513ffe9639de1cfc30114a4e45a2a42f957761ffb7323faf9db98574bfc09444dc1d40ab0a3fa837455ddab94481af9e490758c1ec0fffa99722f6e0e9d694123b07727c5ef26ffea35788666ffb9fdea9d67c22ceede6a8abf94f859452049301c09d6e05a79793514", 0x82, r0) 08:16:00 executing program 4: r0 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x8, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) dup(r1) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) r3 = gettid() rt_sigqueueinfo(r3, 0x0, &(0x7f00000000c0)) write$cgroup_pid(r2, &(0x7f00000000c0)=r3, 0x12) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) close_range(r0, r2, 0x0) 08:16:00 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 08:16:00 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) sendmmsg$inet(r0, &(0x7f000000be00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)}], 0x1}}], 0x1, 0x0) 08:16:00 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x1}, 0x0, 0xfffffffffffffff8) 08:16:00 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) r1 = request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f00000001c0)=@keyring={'key_or_keyring:', r1}) add_key$user(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000300)="e46afb82221622e3f19338149b6f2716bc75e30c23ef34849f33a1519d69b46cb314d2c5a4c16d5e99a3394e9c444cc692a00f06a98f4e2f263456ae9ede666904056b8e4b0db2d06ddeef518b926cf54fea1c864ba21dfd7af0f67d3e6ea44cfa16e851b2c77985f6c86db853ae42622efb3a7c5586ebb619cbaaae5f9d27927eaae33c8eda109a599e2d14710a69e7eda9529227db4daa1a15ee50590ee8ce", 0xa0, r0) 08:16:00 executing program 6: syz_io_uring_setup(0x491, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r0 = epoll_create1(0x0) r1 = io_uring_setup(0x5fff, &(0x7f0000000140)) r2 = syz_open_dev$mouse(&(0x7f0000000000), 0x9, 0xc840) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x2000200a}) r3 = io_uring_setup(0x5fff, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r3, 0x1b, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000040)={0x6}) r4 = io_uring_setup(0x5fff, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r4, 0x1b, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {0xcb}}, './file0\x00'}) socket$nl_sock_diag(0x10, 0x3, 0x4) r6 = io_uring_setup(0x5fff, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r6, 0x1b, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) close_range(r5, r6, 0x0) 08:16:00 executing program 5: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0xffffffff00000000) 08:16:00 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r1, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) syz_mount_image$tmpfs(0x0, &(0x7f0000000600)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative'}}}, {@gid={'gid', 0x3d, r3}}]}) keyctl$chown(0x4, r2, 0xffffffffffffffff, r3) request_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000100)='keyring\x00', r0) request_key(&(0x7f0000000280)='encrypted\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, r0) r4 = request_key(&(0x7f00000000c0)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='cifs.spnego\x00', r0) keyctl$restrict_keyring(0x1d, r4, 0x0, 0x0) [ 819.535293] audit: type=1326 audit(1768810560.846:286): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7712 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc3fb339b19 code=0x0 [ 819.563458] audit: type=1326 audit(1768810560.874:287): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7711 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f107edc9b19 code=0x0 08:16:00 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r1, 0xa}) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, r1) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:16:00 executing program 5: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0xffffffff00000000) 08:16:00 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) sendmmsg$inet(r0, &(0x7f000000be00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)}], 0x1}}], 0x1, 0x0) 08:16:00 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r1, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r2) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000000c0)={r0, 0xe9, 0x73}, &(0x7f0000000100)={'enc=', 'raw', ' hash=', {'crc32c\x00'}}, &(0x7f00000001c0)="4114cbdc5b61f2827faf604755bed73f1f30ae52a4f121c3dbe15819a4bca6635f9b16840313e2e124937f01966ee000cdd48f23be45a714a981c31dae8d5be9a4fa3ee11a359f18aa05f87fbffbbe395321c086745ae3c81919d4a0ba114a1cac52bda61f83de918a3c4dd9260e9b889554ad7510866b347634037795a48ef01d580f2a681eaace5bed436cd8505bbd2a2be48b258fc6d72d9c2ce80c43ee8dd395aa9c0945571c7ce174b078237bf285a9cfa69e11d31cec5a2fd51c045096cbaf5d317da8be653f212054df62506985ae654e05f40784e4dc08ee06ab769d49c6ccc575bc14b1af", &(0x7f0000000300)="0d42d2b300ec6dde0b72c657cdc06ec4f560042b0729cae5462eefcd36bd8071b74e6fd63775ebb37e592e8ed11daf35b38146629c98bb435a94ef486759609e07437f9552375eebef8dc7b87e4447d336f306a688dc54c5626a6cb8defc894836fc7b044bc7b78552c1494e73176067f10b25") request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) [ 819.670524] audit: type=1326 audit(1768810560.979:288): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7711 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f107edc9b19 code=0x0 08:16:01 executing program 5: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0xffffffff00000000) 08:16:01 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) sendmmsg$inet(r0, &(0x7f000000be00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)}], 0x1}}], 0x1, 0x0) 08:16:01 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r1, 0xa}) add_key(&(0x7f00000000c0)='syzkaller\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f00000001c0)="a9680866f3228916ea4b9c4db1cac8ef16b5e318867311b3a2a87e857293343455263aca028e0267e5a6273d3c6789674a508b5e73ad7260fce2a7d8ff0f91962c011c9ed31a3c6224621c", 0x4b, r1) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r3, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) r5 = request_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000300)='asymmetric\x00', r1) keyctl$KEYCTL_MOVE(0x1e, r4, r0, r5, 0x0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:16:01 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) r3 = io_uring_setup(0x5fff, &(0x7f0000000140)={0x0, 0x1, 0x20, 0x0, 0x334, 0x0, r2}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0x0) 08:16:12 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) add_key(&(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f00000001c0)="63ab7ad448af624d1c5ffde71fa411f42ff4de5bddbbd40bb4cf216baf27ac59c7ea750ea4de3b6b5f5c767f8a48c3936afc544b566b05dfa5a84d38b05a7ef3e698b2a96a88b99212059fabf89b9bd9a42ed97be24de91baab0cdc063e795185775dedd66485ca8704cf876cf6951e7acc3e5907d1e7d086cb1d544785cb1494a19988529eaf791bdc7e3e9", 0x8c, r1) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:16:12 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r1, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r3, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) keyctl$unlink(0x9, r2, r4) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, r5) 08:16:12 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000000)) close_range(r0, 0xffffffffffffffff, 0x0) 08:16:12 executing program 5: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0xffffffff00000000) 08:16:12 executing program 1: ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0xd1d2) add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r0, 0xa}) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:16:12 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 08:16:12 executing program 4: r0 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x8, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) dup(r1) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) r3 = gettid() rt_sigqueueinfo(r3, 0x0, &(0x7f00000000c0)) write$cgroup_pid(r2, &(0x7f00000000c0)=r3, 0x12) dup(0xffffffffffffffff) close_range(r0, r2, 0x0) 08:16:12 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) sendmmsg$inet(r0, &(0x7f000000be00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)="0605", 0x2}], 0x1}}], 0x1, 0x0) [ 830.963635] audit: type=1326 audit(1768810572.274:289): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7760 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f107edc9b19 code=0x0 08:16:12 executing program 1: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$clear(0x7, r1) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) r3 = add_key$fscrypt_provisioning(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000300)={0x0, 0x0, @a}, 0x48, r0) keyctl$KEYCTL_MOVE(0x1e, r3, r1, 0xfffffffffffffff8, 0x0) r4 = request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)='\x00', r2) request_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f0000000940)={'syz', 0x3}, 0x0, r4) 08:16:12 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r0, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r2) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) [ 831.002021] audit: type=1326 audit(1768810572.312:290): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7759 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc3fb339b19 code=0x0 08:16:12 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) sendmmsg$inet(r0, &(0x7f000000be00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)="0605", 0x2}], 0x1}}], 0x1, 0x0) 08:16:12 executing program 5: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0xffffffff00000000) 08:16:12 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:16:12 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r0, &(0x7f00000000c0)='.request_key_auth\x00', &(0x7f0000000100)={'syz', 0x1}, r0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:16:12 executing program 6: syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r0 = epoll_create1(0x0) r1 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x2000200a}) 08:16:24 executing program 5: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) epoll_create1(0x0) r1 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0xffffffff00000000) 08:16:24 executing program 3: r0 = request_key(&(0x7f0000000100)='blacklist\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='\x00', 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000240), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r0) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r1, 0xa}) add_key$keyring(&(0x7f0000000280), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r1) r3 = request_key(&(0x7f0000000340)='rxrpc\x00', &(0x7f0000000380)={'syz', 0x2}, &(0x7f00000003c0)='asymmetric\x00', r1) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r3) request_key(&(0x7f0000000180)='encrypted\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:16:24 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r1, 0xa}) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r3, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r4) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r1) r5 = request_key(&(0x7f0000000280)='cifs.idmap\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000340)='key_or_keyring:', r2) keyctl$revoke(0x3, r5) 08:16:24 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) sendmmsg$inet(r0, &(0x7f000000be00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)="0605", 0x2}], 0x1}}], 0x1, 0x0) 08:16:24 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0x10}) 08:16:24 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 08:16:24 executing program 4: r0 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x8, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) dup(r1) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) r3 = gettid() rt_sigqueueinfo(r3, 0x0, &(0x7f00000000c0)) dup(0xffffffffffffffff) close_range(r0, r2, 0x0) 08:16:24 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) r2 = add_key(&(0x7f00000000c0)='big_key\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f00000001c0)="9707a431b1747209edd26ad463de77b395bc9e8ff26e357e4d32e66fc3f7fdd43598e6facfda7f3a611ef8742fc85051d4ae1932196a7afde2d148bc338b2c476036b04dda0ddbe189975459d3eba8", 0x4f, r1) r3 = add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f0000000300)={'fscrypt:', @desc1}, &(0x7f0000000340)={0x0, "9f733b90a03908835ab6dfeca515e19dbc741c79edf9b260c5cf25af4127b2ffb2b7aac153b6dff1a480fd00db1a4c97d7a9e4019141d88f9099b004f41e6d84", 0x3e}, 0x48, r1) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r4) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r4, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, r5) keyctl$search(0xa, r2, &(0x7f0000000140)='user\x00', &(0x7f0000000240)={'syz', 0x1}, r3) add_key(&(0x7f00000003c0)='pkcs7_test\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) [ 842.967773] audit: type=1326 audit(1768810584.278:291): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7805 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f107edc9b19 code=0x0 [ 842.995164] audit: type=1326 audit(1768810584.306:292): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7816 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc3fb339b19 code=0x0 08:16:24 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r1) r2 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000140)='asymmetric\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)="87d8c7cd6a126311f3d6701d3f7075cb706559e39a32b4f97fb356b3333f7613e3877fced03d22c213ec7497c5ca6ba9d3af799d6d1a258d2dddfa77542d6f17d97758b1f8ac6ddaf83876def187cacda3d176dc0fedff70dc4eb59c51f4df0eab74bdf0fbcbaf6e1ed24484942b4d96958dcb", 0x73, r2) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:16:24 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, r0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='ceph\x00', &(0x7f0000000940)={'syz', 0x0}, 0x0, r1) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r2, 0xa}) add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, r2) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r4) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r4, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000200)='logon\x00', 0x0) 08:16:24 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) sendmmsg$inet(r0, &(0x7f000000be00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)="06055c", 0x3}], 0x1}}], 0x1, 0x0) 08:16:24 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) epoll_pwait(r1, &(0x7f0000000000)=[{}, {}, {}], 0x3, 0x1000, &(0x7f0000000040)={[0x6]}, 0x8) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0x0) 08:16:24 executing program 0: timerfd_gettime(0xffffffffffffffff, &(0x7f00000001c0)) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000200)) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) r1 = request_key(&(0x7f00000002c0)='.dead\x00', &(0x7f0000000240)={'syz', 0x2}, 0x0, r0) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='\x00', r1) 08:16:24 executing program 5: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) epoll_create1(0x0) r1 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0xffffffff00000000) 08:16:24 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) sendmmsg$inet(r0, &(0x7f000000be00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)="06055c", 0x3}], 0x1}}], 0x1, 0x0) 08:16:24 executing program 5: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) epoll_create1(0x0) r1 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0xffffffff00000000) 08:16:36 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 08:16:36 executing program 4: r0 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x8, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) dup(r1) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) gettid() dup(0xffffffffffffffff) close_range(r0, r2, 0x0) 08:16:36 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r1, 0xa}) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r1) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:16:36 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) sendmmsg$inet(r0, &(0x7f000000be00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)="06055c", 0x3}], 0x1}}], 0x1, 0x0) 08:16:36 executing program 6: r0 = epoll_create1(0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0xfffffffffffffffa, 0x201) fchmod(r1, 0x10) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000080)={0x2000200a}) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000040)=0x3) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) r5 = dup(r4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_MESH(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r7, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x8041) ioctl$sock_bt_hci(r3, 0x800448d2, &(0x7f0000000040)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 08:16:36 executing program 5: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0xffffffff00000000) 08:16:36 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) add_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$read(0xb, r0, &(0x7f00000001c0)=""/193, 0xc1) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:16:36 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, r0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003680), 0x0, 0x12141, &(0x7f0000003780)={0x77359400}) r2 = getegid() r3 = io_uring_setup(0x5fff, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r3, 0x1b, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000001e80)='./file0\x00', 0x0) r5 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000001ec0)='io.pressure\x00', 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001f00)='cpuset.effective_cpus\x00', 0x0, 0x0) r7 = io_uring_setup(0x5fff, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r7, 0x1b, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001f40)=0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(0x0, r9, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) syz_mount_image$tmpfs(0x0, &(0x7f0000000600)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative'}}}, {@gid={'gid', 0x3d, r10}}]}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000001c0)="b39c6cb2010091c8a92b852b6cee0338895f9a84f96169d17c252076efb6ae54e4f9f20a57a2f338951b599114332bbee6f5c7a40a7e036ead8f6e458e35dbf127615c6813b8e8147887171c9451a6c9d5efdcce97a052c45d2c7ab932634d53ab29a1b4ab3ca9dee726bc76dad903a6d29221ea8fec505daf5bed3215cc8c7c374dcc9f8ee70a18073fdbac151e39", 0x8f}, {&(0x7f0000000000)="233ec950c19a839b83f529d3a0", 0xd}, {&(0x7f0000000300)="76f7f7bae6bf39c030ef23057307022528dea013b1850d55943f2e1970172f17e84a9cb6c91a8fcb76af33815da248543032efa50b31080f66aa89ae2a6a1bb4168bee8aac4862e6f7591a7f05928829242b2f1903f1639946b3aaa4e270cc596884549c736f22aafe0151404256547e081686b17a2e36c45012584ae97b8db6ceb15d71b91ac92892fb6f272c8c456cc3bfae2818d047821bca6e62e9c70fdad5d6507e3bf36a793edc6361795f8653aef3fea0837a5c002867a809466a206de96fd8997aed2e02270bff3821a4877fb3ca072927058a1ae67a272f812c15a345", 0xe1}, {&(0x7f0000000280)="931ed6e195d30d738ecb6b76e6952657dd06c3706c419ee2a749a59334af5f8e750e6bd7d1036b83a2453c65", 0x2c}, {&(0x7f0000000980)="c1b950f24e554b961d541c957d2f1ee12993382d382602754b0271724566c276016192eef9aac23d2191f77e7ce42abf8a713913ffb25873987b03ff51794a7a2b4940d439d6b556f08803846aefcf6a25ba446e4283c6cec765e2827cf5b6bf7056f589063b4098ceeedc888df1a4d4d5fa2711d27180e61c5220a9a51d8095d9698dae12503a91e570e53ba62a7669bbf17f6201ad0c562afb03b8804beacaf1d0a8cfa9b892aa22f02dfcf206b0f48f692ca5e12b9455ac42cfcabaf1e3d0426bf7124f7916c2ad8c069d7a890b6dfb62bd21e3acfbad53ee6721dd484fdd319b41ad45262309e964b62dc8dffa4e0e6c568ddb8c019345ac7d398261cb50b152d33ae5910367b9d64d6fdd1a7c6fa69fa077aec5302499c327aeb767bf0a318642931b6b3cce02c739be3fe4f4aa811969d1caa5c0e177b0cb04a1bbae7b8124f4d497f5dc2b14e056e57549700561eb83010429fabacaf78a28ad488fe21babc8990281b1df3fdf94f96bc7916d898be6c0ffb56fc1f6703630b9bfe14ae0060236777dfb2e10876ed4c0300b0b4121cb73a66b6ab99677f80e60d25a8f6dad5518a9b457b0389bc75c2004a0863e61f353ceab09d3ed7844ac04088d616ebe9ff0f6f483de3e27d086996c4f548a5d3520a54be93def3ad2726139373485cca93f3dad1a5e961afd42f6b398ce192505bbec2189848248eb09dcbbdd9ad188c856b542340bdaafccea23f13a65cb9f81d662f1913b885d5ecd23a822a597ab29ba5d28ec5fa5c5d8caf41694ec9d505d2328ef79af5dcd33b0a5d40a4c8887ddd93e0b44a288c1555e39511a3cf19090cca59b615fce5a1cbcb6a84532beb2ddd1564fbf170fe78d0858cb2ab87653d901c005f6fde2b051d95f2e3e93ce1b7ae06ac2f29053edefb314e47e6cbb191a02e9cff194a91386c04e0bab365482f6054a5bc25b4199fc62fd2f3d7f4ab11b979c6f831f161b1d4452d7c411dd33ebf98e0e43d8c2c901d29ea9dc625b95cf726276daa0315fd075a31a0228be170b4770dfdcceaed476789dd8a2f326052eabed4904455999d37e8ee07e899ec2f4ae737fccab74b044dd108caf6c03fe2daa814a97e04daa7a87db06c27cd0c2b2d14f78b43fc88efbd8562e151d0754cd0d6759d63f4d0de7b51243f4c687dffda2494cf8621413fafb8f9f2218b9de14b8653f9f894f06fad8bf04a1cc8fc4cb755ea9021a361ccafad63217ebd25f298b96877459db3696446f17d55b3fb8e7f56cfcd3f9c41b6f90be54d8bfad37ec44852ba36a401ef1916fc35f0091b0eeb1f7c5fb067400f9fc09be100c22d783fa2f44168c52ccc2a9ab8c12582b134b1e194d4fc3feaa14890ce3454d9cc3f3ebaefed03949f8fabb917ff3bd695ecc46f05da5ea27a03491a6af25434a898bb2b2db997245a6e3d64bf7680fa07b1dd76045fa3ce021f6f4832e67bceb9215c3597c53b924b95c49e69dee1e2aa3ef239f0529d6071e3113f42b5b4cd905e2571c38b6a3799a005c128d629beab1930bbb81b76c5a4b4fde69aa110eeb8c9aeac4d3d07baaff1dd7b76c39f4a18234cafb9a4a7a391cf01dcaf96a6c6b119a2d67f0e58a7895e9eda3f8d8ae97fb1986b383e61a1fb3018a5b040373ab9cdc0fe4e6ab31c6f7cb1465c8a161478a102b50c9ce2c2b967d2be289ff5090217d934d5925c96091bdafa54ff0cfbeffa9da4aee5c2573dfd41a75d54488ac04150b23104a31734f8474b74b77136917a45eada18e232638ac0f9f10ebafd68361b516e1f24efeae61829c51e579c6408fd50d7436db0c4209e0068876b2c1bb13ba47e3641058fe6648cc473f44efd78ba4d29d551582268bfaf3c2ff4ab3f915529a7aa55b35d893d42df6541964e54c5337f9066477f0139d35b48188a0185c8155bfc611062dcadebee834b0d0e03a0d69907e452befdc2d6367d83df3ce2db615927a9824b4a4cc248c763a2e1de2eaa51b2fad19746e3f1bb916df02650980df89c33428066913cd4fca8a53a93f255cdc48c045c1f35ab388e15a3f5c43766af0531d32256f3d2f83558f155b97dc3c4f745be52a8b94e1bd3ac22ee78a4061bf48375c092444314a30844193fa8107f7090f4ce2e042c9900b244b565b2989500bcf4218ca1bd2fe107c60c435597a12e7664ff7aa6a41ad5d0751493bbe1a240189a7cfecb46d18e1a2c60cda2c0796a662bb6c87732c1195dc08e3c23aa2a2d79f0e7de11d7ae67f68a87f4005af3f65ccfb6a6a3983523a9ea3f097ff2ed16c4c0b5bc65f959dc42103bef0bdc64ffca732fc214e0c25a42042e5a3948abd49a3ff8839c2ca518503e0e2f2ccbb3e6982b655c798f780d9503f1175ff235cbfa9481ad180cd7e5400919670c40296f61d8078e4d3bedf5db516ed9403f92c58f3bf6298abc7ed7c82dd74263e10b56a8d392243393699f0c1a1af88fecc22daecf1cf182e8dba6bd2be486e3ec347d967eb5d937f4835bedc201da3de67b328d00718f7450b6af252ae5c81acf3577d3666bf43aca5d24ea19ede5882b29fdb48f70ca750ba327c1c07fb2486ad764a74687cea628ab2a18da7db17fd3d52c81ab240e13fbea325fef3ac4270db31c6fdd8ba8c802d669656ec0a3457e7a18e647a5ded068b69cc00df33c5a57464ac798f143bcce70b5085dd167838a12a6054a59945ed964b6a94f7ce897531e0d2ccc98b822c85ca9c39fdf6348c47609a9f5b4a2af58e4b9a3e358c64adf92ac037995bb806354e06f519ee17c584c9a8fc4a4a56a3bbf38f2e9551fbfe93787283e29c90fc12a02b6f510a2a3cd18b4d8f41ddef68c6add41fde849a2e1afbcff3615f0e34e8a39a6e37c8c94ec8877c016e547161ce12bf11855f43ffbbb0736e92fa73aaceedc531aef2d3eb9c4775af5cd5fc7330fa6163fc35ba95d126fbc17283a1890df4f5aa04913b8545f5ada67e8cc01cacba36e321a15d1ef4466215fd9383aad0c9c770544fd6ccc1e7010916a2d65e7e3de3f61b2263af69ce08dd5c25c72eb4e9711e4a1af1dfc975ee54487cc9a8e5c8ae1691b74380ce488d1bc12d0c71fe2b287278ba082c18087fe04aaba8fd12053344b83dfce4cbad2d9609c584ae47c9ea3e2ecd8b927e6577cb925fba4da3f9700ab40aabdd158070dbf96c9962c96013d21439e685bbdd1b720b1b5f5a4e98a30c5243d7e57a3a0d04e50976e6e89ffd13305483bd8adaa5170d32dfdcb23da42b05a78dcbe5bea4fc7a532830402cc8d6ff19633c2c13a332d02ba53a984b70a2a6d530e3a007d5aed1a00e330d20bb0313853386b7ac13ec908bb22e4379c6b4f272d0ffcd1e5c9804110b08516b975601c47fc5d21d17692df4d98f14c21b76cdd5fbca233e1d67c95a4e7b30cdde81d473a5154f4516ffea03758261300578196ea09e5513ea56d032de535a865655f2a9b480d39662405ba26ccb15232a1b1fbb2ae35ddf06579bd62bd563a95b1f4eed95e3865911a8f3f6cc0f1814cac971f37200f72bde07dfcd2ca259f47f4d212d424c0875d515743f592fae33f50ba09dae18668daae5fd8e47e424ead2a00287cf1e4615d9694e10fe043282de329f95017de74b113e73c638152bb932be191d6d11948dbbef47d0f6e423cf5a5e28fa17f7b49f9785cf6028b8dac3bbc1acd011026eee96168cc108d5e1e23f9a87adb44e82869f744c9fbf9ad2dde8fe7cbbc098864920caed7572da1b107d1cb644c43b75458ba963a19fa77cd9f4ca69a0c1981199ed7a3dc6ce7e769231dbb68f08773c4b0689838b8c827756db0a0a54f4e59303ba68e3904f8b0d906a77f64fc7a9c735ac60d3df4c3d94dd947e6bf587ebcb5ee81df97135aa13469f7642b29dfeb28e376dcdbb2580f8893214e362d33c75e67f2783a876116b070b100564ae11949691964381b0585ad6a66ec5a8cac721e56df491a68c5aea572f8bdeff6b9bcb74abe32ed2be46ce1cc00c002b2880e25f16a39e2e13dc0e9bc3e7c8c5fb83920468b55ce032c04437a26f970e80d2d4d011a3a12ebb76517ecf0d0583b68c3c7cf27b2002a7f074def570ef0b6b3f28279eada62c7c72d77709eda60a87a5562b469a1d15a5b207e3e77c361981f04e18785bd409db37f2ec7c9aa09a84629fe647bf1a4cfadc9f32954561ea16c0234f38971435bad0fc3d0acd7cda54c104f09bbe7aef99a0f7a5e76b3c76149ac6de9ed954ad6e60ffb053625467c0aa29e9c6b17848ec6578f2c774eae8c7ed43c98e2170433d86b1fe024c8383012950603c4f5a62fcd198c15dfdb9bae581a8f7d6ed38b04cc67c85f2c629f08c27a6273c08cbbc7bef0346777e7973e2f2f4dd1c9ed9fbe1d65a98e53100732b20abc166f671cad06dd18de9e4140a1103f8671addf4b510e0f43a43420d4626e6607fb60f32e813e061231fd295d5a2fda116e6418b1e07da7353119505f188538a3a661174df41a72b0a35220a131b1b33121b8e6b14f9c98262410f774e10368fe69e47bcfdc2b6fbadae286ab29cf35036fdd4802321dbbedfcd1df315389847c3c38437d4cf8dade43c87893d72da0b25ba8834eccab4b174c19db001b18adf5188027af454ea3af37bbd021500d1441763037746c763f8aace7e03f35f04394a5211adfdc6b4dc8c080ca07869952c0ac820e0a9ed0a620239544d8163acb75457aacc84ede1a311035dbcb0db57858e45367a00678f36a2bcba30177194812b4ae959ff7cda608dadc994d4afa1062ae8e99fe8dc3c75dc9eee49c21ba69989fe5d5ea50e6bb79ba808ebd70d47cbcd7447b5be42fd3891affdd101706e714dfa15134a64d5f6335f11c12e716bb2a1dd044087bc4f42eef1fde70596ae209bc7776e9dd43e0024d1d81df721e507a1893f7678731334cabbb3ac213ed96f43b11dd6281396b9b44fbc285e5561c0e5706ab0b346a604b6d1e29110e3c90551c0d89ed99fd19898f0f8b731f100a358ad5d0b562b47d7b68e1b5786789fb88bd77e4f722366958eef2f6819b3825371e1674668cec2f2e75a85e6f4396e85c8c942107a49e4af496d76ca611c2a8a552dab573ae5ed91f77357c57c5b05404b40bd7e6666e082fe17a7a2f804b55e104dbb2c96852dd862d9304c96fd0001437a424b9bb975fdd2da58a92e44c39d7077360dab6b8bf0a961d1f978feb36f08d63f0431ad4543af0f2871b4f3644b8debd310f521bf6edc656085ec4e1d2c18984fcf10f58ddd2cd30608f9098f163b78bc2d7f7ec8784467de1e44de8165bdb0bb288958d537539d50884f1ee0f055843d3cde0287e9cb4a55aeb1b1e09b26f7e44af15a71b039d9dcf6ad2c16db20e02bec97a32233daa76747c86881e641a06a5ace0d27f485dff9cdf379c9d5b65f57a1714de14562abe345a1b2fa4617f5193c16f57ba62e6ee3c259cf45934051fd2fda2ffa5971e71e777cecfb7c1258a8a0ac2520e10db4766dc54d9f1da44fb80445ca5e8a507c1b9a01fc3dffb121fab9f24a61bae16e7aa9b62b2a0ac9635beb39a51b77372627da0ddafb17f41a43bbfb8c0e9cf3061d82d4d08441b53e50406cc0e4e8006a3f3fe2497490967744d28cd0814c1ba5fa34348d544815023837ac4c6a6a7c1b1cc8239fa3191498d7613bea3563214d52b52c8caa4fd90565796a869066e6516e51f8be902dea6a9888a0b3f9bb49dd0b83201c6481792b376c06419d60a236c1e28c5b4cb1a3974ec9c1d6a44704b3c55f68ad7023708116e3cde242f1b0398c", 0x1000}, {&(0x7f0000000400)="e90c87d33680b5070696951fd4419a0272e0b681a5cc82bdf932771000f4a622d5975419efd6ceacc89349699e50697d8f542a7064ffcbf3fcd66f280bfde564062bf4239f2a27ac5fec7a7fe5354d844faee119686387b43c491466556fe224b1f2d30c74d6351e5564e5adf189f637655145a0727ea0e81e05104bcc9addda10d08173bdb7a64c42e200a70c384398a785dd51a3da58baa9e3264cf29032358f97c3574ed4f0214a3d44d5c44a0ce73d13904aa682ccc7dadec5f346cab3dffcb22619099627b0c940750fc2", 0xcd}, {&(0x7f0000000500)="091d19be7b8da96021d520a962f8d23d487c1ac8fb4862941fca33a83ebbeb1c71872a5fc5ce488a4ee8aee2d2093dea122ed32ba99f3ca31a968f00c1dc39edbd3f91c50f14823cf1d2e0ebcd85f37b9e99d79bcc9627f46d320c5406", 0x5d}], 0x7, &(0x7f0000000740)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r2}}}], 0x68}}, {{&(0x7f00000007c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f00000019c0)=[{&(0x7f0000000840)="45e69c25d8efde7e281e6c5444c0914ac9adf064f4da9dd0a1fd198d663742e59dca8fbf9218c18d0101733ff89be0c99ff082f9799be7a27f768424d3c6d9014062650cd8d6f109344c5146482ba20ed9b2d626d4c415a0d59fc03f008b0f82ae84eb31b7c1fa9d97225ab66ac54e58d615621658cbfdbeebc147f5740d08c937a241b6c58ab55a64d75a51f1865d626a22c37ffd79cfd71114ae5417e57a1593e7a08dfa21abde4fa13d917d3634c0cd36224b8b9341a2e6151de0816d5c0c9cb39a40a5e6e873", 0xc8}, {&(0x7f0000001980)="a068506ad48765a735eab08338159577e427d0d48ed15d2604960de32ebd9688ccf008d1385271a2", 0x28}], 0x2, 0x0, 0x0, 0x4008890}}, {{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000001a00)="5ace07a87eb60c2e620717851758626f141947d981e20b0cb2335f69648b2b7d14aca09a45981484f18a05423b6447b3426afd404b9a648d8f5c67a446d8bbf7509b21690a9fd0d904a05d480b3c0f9fc29e0f48", 0x54}, {&(0x7f0000001a80)="8c271427a0da2eefc0a961cf13da5bc8244061bfc789e3bc6acf6e485a47c5eeaad03a47bf4b68e4c62d45677fc646ba441fd1ef220eee25a76ab16f554c17055cc4426d7887b88d19ecc8aa22050cd5ea47c2a25a5b854ba5c6a9d522e7a9af31a0ab251117eb736ae73a3223599be7f39bfcd1c67240e3f28229541cb12ec631bb5f4404ae9c2cb2c1a66962cd38c1424210ceb2cb397d50c14353e33d303fb62b40096b4a887a5ea2fa417b435f391240afc30711df0f", 0xb8}], 0x2, &(0x7f0000001f80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee01}}}, @rights={{0x30, 0x1, 0x1, [r3, 0xffffffffffffffff, r4, r5, 0xffffffffffffffff, r6, r7, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r8, r9, r10}}}], 0x90, 0x2000000}}], 0x3, 0x1) keyctl$chown(0x4, r1, 0x0, r2) add_key$keyring(&(0x7f0000000140), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) [ 855.111671] audit: type=1326 audit(1768810596.422:293): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7855 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f107edc9b19 code=0x0 [ 855.131448] audit: type=1326 audit(1768810596.442:294): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7858 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc3fb339b19 code=0x0 [ 855.144461] audit: type=1326 audit(1768810596.450:295): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7859 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe995e05b19 code=0x0 08:16:36 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000340)="b6a266eebb5b4aec896e169fd1dc772b21e6061090d99341785d3569286d0463544f78d9fa463cbe74857c5b7e70635c27d158b473ff8d57b8f1e46b5623cd899a77a15e29", 0x45, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='trusted\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000000c0)='big_key\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f00000001c0)="3ec18817a5e8342fa133c971c31a31caaf27b7cb57bf00d2e22a8de5cc1dece5e774971f220d5113354f8c983b8bd459039dda7b1cfd54269e7e7d114f784812dcada2c8df6ca66bfd17773f71c93cbf27f775b4f8fabc667f03e28619e325b69ccefddba7afd9ce109b86129d14ba2875f7486382989330cbcd99313693b91c3e24a5f2a51c0f7926fece9827b5de40e4b1dda18ce16aec0c9407d06972352d9308b963f1a08dd78f8af264e51c8c13a95950c9c1e5c5e9ec09e0e88889479fbe07bcd7bdf576a59637c39427f7a0afbecc0f0a84", 0xd5, r0) 08:16:36 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f00000000c0)='cifs.idmap\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140), r1) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:16:36 executing program 5: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0xffffffff00000000) 08:16:36 executing program 7: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) epoll_pwait(r1, &(0x7f0000000000)=[{}, {}, {}], 0x3, 0x1000, &(0x7f0000000040)={[0x6]}, 0x8) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0x0) 08:16:36 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) r1 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, &(0x7f00000001c0)="2ce45589690af92ea2d568527a31766d0975f727191e051320ad28d06c89ea45ac68fb6c558fce16e4ea3a81984be015b2676a3f8616807f1e1426773e6b40e1f2fa4895276e62f31a0fc016930f7efcd7ffe8cf3dc32895317baaedd2282267b7190e5daf4b1ceadb732026d7b47997b3fb764926a6f4383ce6823e366cbe103a7ac904d3c37f8eb976357322099190fae3ac1d859e91a32b2e84335946fb1768fcb67f5ab8f766ec12bb2fb3d35eb763583c9ccad7b545532cb3bc08649243eff1de60105ba0ed50823912e4d8a5e3de5439e04fb91aebe4b2622ebb8682c21d5a66ec59a7f4e2bab34502c86890e7", 0xf0, 0xfffffffffffffff9) keyctl$search(0xa, r1, &(0x7f00000002c0)='cifs.idmap\x00', &(0x7f0000000300)={'syz', 0x3}, r0) request_key(&(0x7f00000000c0)='id_resolver\x00', &(0x7f0000000940)={'syz', 0x1}, 0x0, r0) 08:16:36 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) r1 = add_key(&(0x7f0000000140)='id_legacy\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f0000000300)="85b2a89eb8a4509ea17f1352b14cc3a990a8766fd1486fc43658eb52e239682b7dfb74379dd204cc27af7a60f2bd421a6945e55a92f0f7f68bd19bdee4e161dd3b9369530cc89b2b7867ec93869cc4881e4dd8ac8652672105b572a91b37d1f3199f6ef869926171c97d276fe2c7f4dfaaf4bfdc8c4a86da2e4f1d229b2230c9a7e8070a710580f83bf6c5547931bb80fc009dd9f8b393fecaccaf736fe7bf7b0817a52dae9c0ea7f8a9793143ccea70a742e0c5d4d644c44c69da17508cd5ec9dbdb80f733be4c7eafba416d82c68819f5fc5502c44f26bf3252c360958b4323d3e8e43", 0xe4, r0) add_key(&(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f00000001c0)="a9bad64790de095fcd3e7a7a04088156843d2db96ba9a571be279dff9d67faddd6d3f7a4d5efbb0b42cc0f65d3a4316b5d33b16e67a67c1ef8712ddab33d6fac8754c71c06f136eb60090871cf483c964e686d86a598f300afbdcbc3c907ea8e5ebb0f370747e9a4ba00483ff04eda00a8fde7fe449b64676210e50d5fce5068cb0b33ee204d794d091dbce259e69a1688b003c5605505f9d49ef9c55d2f9f5b2806326031886310a80d36ca037f7246f2b5", 0xb2, r1) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, r1) 08:16:36 executing program 5: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0xffffffff00000000) 08:16:36 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) r1 = add_key(&(0x7f00000003c0)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000480)="4dd5a991dd997ca446bc196a14d21d20092d6aff874e1789ffd7fcebe9e11b09ab8ea7d37006c3b936a4e8dbeabdea835ab5ed24f6e90d4301f1f523911849c5e7ab14bab0bb29258aa52ed96f47bfa2ed70178d8cc6650ee06ab782b19c9f65fc", 0x61, r0) request_key(&(0x7f0000000500)='id_resolver\x00', &(0x7f0000000540)={'syz', 0x3}, &(0x7f0000000580)='./+\x00', r1) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000600), &(0x7f0000000400)={'syz', 0x3}, 0x0, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r2) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r4) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r4, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) add_key$user(&(0x7f0000000280), &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000340)="c6e932e793024ec072ec7de0363da0c06595fba0967093d115a3e4d5b137747dde2b49b571724e50c0d9c62d1751204a1e554a09a1c4b4501c8c5bde3c7887d77ad1bb9b1f36ebe00a81975f7c", 0x4d, r3) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', 0x0, 0xa}) r7 = add_key$user(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000200)="58974d89dd7f40023eb793b39fcc902d39546029033971d0", 0x18, r6) keyctl$unlink(0x9, r7, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000140)='pkcs7_test\x00', &(0x7f0000000240)=@keyring={'key_or_keyring:', r0}) keyctl$clear(0x7, r6) [ 855.975985] audit: type=1326 audit(1768810597.284:296): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7859 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe995e05b19 code=0x0 08:16:47 executing program 3: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r1) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:16:47 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)={0x0, 0x63df}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) r4 = dup(r3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) write$P9_RREADDIR(r4, &(0x7f0000000240)={0x141, 0x29, 0x1, {0x8, [{{0x2, 0x1}, 0x7f800000000, 0x6, 0x7, './file0'}, {{0x2, 0x2, 0x6}, 0xca, 0x80, 0x7, './file0'}, {{0x4, 0x2, 0x5}, 0x7, 0xd, 0x7, './file0'}, {{0x40, 0x0, 0x5}, 0xad15, 0x6, 0x7, './file0'}, {{0x4, 0x3, 0x2}, 0x6, 0x7, 0x7, './file0'}, {{0x4, 0x3, 0x8}, 0xfffffffffffffff8, 0x0, 0x7, './file0'}, {{0x80, 0x4, 0x8}, 0x7a2, 0x6, 0x7, './file0'}, {{0x40, 0x1, 0x1}, 0x0, 0x5, 0x7, './file0'}, {{0x40, 0x1, 0x5}, 0x3, 0x7f, 0x7, './file0'}, {{0x0, 0x2, 0x5}, 0x800, 0x2, 0x7, './file0'}]}}, 0x141) 08:16:47 executing program 5: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, 0x0) close_range(r0, 0xffffffffffffffff, 0xffffffff00000000) 08:16:47 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) 08:16:47 executing program 7: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) epoll_pwait(r1, &(0x7f0000000000)=[{}, {}, {}], 0x3, 0x1000, &(0x7f0000000040)={[0x6]}, 0x8) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0x0) 08:16:47 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x3}, 0x0, 0xfffffffffffffffe) 08:16:47 executing program 4: r0 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x8, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) dup(r1) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) dup(0xffffffffffffffff) close_range(r0, r2, 0x0) 08:16:47 executing program 1: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r1) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) [ 866.347646] audit: type=1326 audit(1768810607.657:297): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7907 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc3fb339b19 code=0x0 [ 866.362678] audit: type=1326 audit(1768810607.672:298): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7915 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f107edc9b19 code=0x0 [ 866.370303] audit: type=1326 audit(1768810607.681:299): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7909 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe995e05b19 code=0x0 08:16:47 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000000c0)='trusted\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='\x00', r1) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:16:47 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r0, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) r2 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r2) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) 08:16:47 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r1) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, r1) 08:16:47 executing program 1: sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xb606}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000840}, 0x800) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:16:47 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x65) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x36c00000}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r1) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r4, 0x1, 0x0, 0x0, {0x10}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x20}}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r2, @ANYBLOB="000829bd7000fbdbdf25020000000800020001000000080002000700000008000200040000002c0001800800060004000000080006000300000008000300e000000208000700", @ANYRES32=0x0, @ANYBLOB="f8ff48a46d0600ffdcb0b1dd426b5f0cc4ac7808550670fcbb7719fa2cc83568e1bb1dd8338de18e3985b2916ed13dd294a5a7f851a82fc10323290a21477fc8164ff1664a474d8c31dbdb5c4db48e11aaa4d4f1a0b7713c4bb467e900", @ANYRES32=r6, @ANYBLOB="08000200010000000800020000000000080003000400000008000200018000004c00018005000200010000001400040000000000000000000000ffffe0000001060005004e2200000800060005000000050002008100000014000400ff0100000000000000000000000000013cdfb94a5a6bed"], 0xc4}, 0x1, 0x0, 0x0, 0x20040045}, 0x4000000) 08:16:47 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) r4 = dup(r3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f00000000c0)=0x1, r4, &(0x7f0000000280)=0xc1e, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xe000201a}) 08:16:47 executing program 5: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, 0x0) close_range(r0, 0xffffffffffffffff, 0xffffffff00000000) 08:16:47 executing program 7: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) epoll_pwait(r1, &(0x7f0000000000)=[{}, {}, {}], 0x3, 0x1000, &(0x7f0000000040)={[0x6]}, 0x8) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0x0) [ 866.630289] audit: type=1326 audit(1768810607.940:300): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7944 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe995e05b19 code=0x0 08:16:47 executing program 1: fchdir(0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) r1 = request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) r2 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @auto=[0x65, 0x35, 0x63, 0x30, 0x34, 0x31, 0x31, 0x35, 0x64, 0x38, 0x39, 0x32, 0x61, 0x9, 0x31, 0x30]}, &(0x7f00000001c0)={0x0, "3db0ae5f899f556fe5f3ece4c8c9086fcb5e43a0d688f7f75b190d52bbd4bede722cc15c8e6e182f6cd0d48d87e5602270b9b7be92c37433edb565f0a85a59f6", 0x18}, 0x48, r1) add_key$keyring(&(0x7f0000000140), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, r1) fstat(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) syz_mount_image$tmpfs(0x0, &(0x7f0000000600)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative'}}}, {@gid={'gid', 0x3d, r4}}]}) keyctl$chown(0x4, r2, r3, r4) 08:16:48 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = request_key(&(0x7f00000000c0)='cifs.spnego\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)='.!\x00', r0) r2 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000200)={'fscrypt:', @desc2}, &(0x7f0000000240)={0x0, "334dd0a14f232b0b395f1f63f2773756377b74c0bc4d0d43691bdb7603653f9108ebb215b948ad28e5a88d7717150e734bbaae43424ea7a17a37aafede4cc511", 0x33}, 0x48, r1) add_key$keyring(&(0x7f0000000300), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, r2) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:16:59 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x151980) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) r2 = epoll_create1(0x0) r3 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080)={0x2000200a}) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x2400, 0x0) io_uring_enter(r4, 0x54dd, 0x51c5, 0x2, &(0x7f00000000c0)={[0x5]}, 0x8) r5 = io_uring_setup(0x5fff, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r5, 0x1b, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r6 = io_uring_setup(0x5fff, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r6, 0x1b, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r7 = io_uring_setup(0x5fff, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r7, 0x1b, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000240)=[r6, r7, 0xffffffffffffffff], 0x3) close_range(r0, 0xffffffffffffffff, 0x0) 08:16:59 executing program 5: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, 0x0) close_range(r0, 0xffffffffffffffff, 0xffffffff00000000) 08:16:59 executing program 4: r0 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x8, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) dup(r1) socket$inet6_tcp(0xa, 0x1, 0x0) dup(0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) 08:16:59 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000140)='pkcs7_test\x00', &(0x7f00000001c0)='!\x00') add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:16:59 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, r1) r3 = add_key$user(&(0x7f0000000240), &(0x7f00000004c0)={'syz', 0x3}, &(0x7f0000000300)="e875474fbd296855431687a56f432bce7b42b3186ba73edac6a592c0f7942286aec3a728ba2bbe2e0971ae5576ffdaa32a5e607d68629f62b4073ff8b4d318625f7f0867422419dbd80f964222b91789b2f8cc9af021eed5732fd694586c471fba39c0693ae1958cc6d9b2ce034656f908777b1b6f00f30854e83aaaef0a51b7b6c6a8cb78df81f7ff27b1c1e6c6faa29e81bf08dd6ffad440d3cdfceb29f862d942367d3d6cc44d9d9ff7b59c911c71", 0xb0, 0xfffffffffffffffa) keyctl$KEYCTL_MOVE(0x1e, r3, r2, r1, 0x1) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r2, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000200)='cifs.spnego\x00', &(0x7f0000000500)=@keyring={'key_or_keyring:', r1}) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r4) r5 = add_key$user(&(0x7f0000000100), &(0x7f00000003c0)={'syz', 0x0}, &(0x7f0000000400)="5f480ed4b8f137132006c42f50e799fea7caca1df68dc21cd483876543dc4e74e91a198e15b020ae50be7356dd72132db7e2", 0x32, r1) r6 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r7 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r6) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r6, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) r8 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r8, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', 0x0, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r8, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) keyctl$setperm(0x5, r8, 0x400030b) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000440)='id_legacy\x00', &(0x7f0000000480)=@keyring={'key_or_keyring:', r7}) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:16:59 executing program 7: syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}, {}, {}], 0x3, 0x1000, &(0x7f0000000040)={[0x6]}, 0x8) r1 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x2000200a}) 08:16:59 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) r3 = add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc1}, &(0x7f0000000300)={0x0, "9a54e7e940c05864d270c8f22c42103ebb2bc7a9c26d5f17c5b807423a05e5f334981fd2eb2c78a2c1cb158e6634bb4ac79369243a8c67179af4352a2da52538", 0x18}, 0x48, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r1, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) add_key(&(0x7f0000000100)='pkcs7_test\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f00000001c0)="f855744d1c87469e71ff5b45e80939997e5b4853ac23049b013a4a26e173d3ee999b234226fba9d8ff2e787ba313d6b73b9361d3946164745f6ddc64792c420047423aa1cf58652e8e9c4b03749e5afc379d95a73c1d235a2040fb9c0309a2d6d854fc0071876460be9d69686fb5855580cdeb616ab15bf7cc10bd7958f90b520cfad000a5a5501137db28e59b02c8bfd4e189cff08b4ba3bbe5041df8", 0x9d, r0) keyctl$link(0x8, r2, r2) request_key(&(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000400)='logon\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000980)="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", 0x1a1, r3) add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$keyring(&(0x7f0000000580), &(0x7f0000000540)={'syz', 0x0}, 0x0, 0x0, r4) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r4, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000440)='id_legacy\x00', &(0x7f00000005c0)) r6 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r7 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r6) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r6, 0xa}) keyctl$KEYCTL_MOVE(0x1e, r1, 0xfffffffffffffffc, r7, 0x0) 08:16:59 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) [ 878.407004] audit: type=1326 audit(1768810619.718:301): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7965 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f107edc9b19 code=0x0 [ 878.447742] audit: type=1326 audit(1768810619.758:302): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7969 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc3fb339b19 code=0x0 08:16:59 executing program 5: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)) close_range(r0, 0xffffffffffffffff, 0xffffffff00000000) 08:16:59 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @auto=[0x37, 0x39, 0x31, 0x63, 0x63, 0x66, 0x63, 0x62, 0x33, 0x37, 0x31, 0x35, 0x61, 0x61, 0x61, 0x61]}, &(0x7f00000001c0)={0x0, "b0f0c4b5d70fbafbfbc8fe94e56715f767558ef648a441d4bdb486e6cbc795ec42c95e337b486975064380b2e10659c9211282d1054882e923c7b4112c0d6b3e", 0x2d}, 0x48, r0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$search(0xa, r0, &(0x7f0000000280)='.request_key_auth\x00', &(0x7f0000000300)={'syz', 0x2}, r0) r2 = request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) r3 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, r2) r4 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, r1) r5 = add_key$fscrypt_v1(&(0x7f00000003c0), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000440)={0x0, "4369d1ef7a1cf6b2a263c99e6ac0602fd9efcd2a760124d9bd809b80faaa7bafda4e775202f0ac37eb78eb9ad13c0959b801850a60a46976afab9fd1e575147f", 0x1d}, 0x48, r0) r6 = add_key$keyring(&(0x7f00000006c0), &(0x7f0000000700)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x3}, &(0x7f00000005c0)="5534cd4777c8bd7ebca738ee76051cd561bc44895804184f26c18fd43f7d2e553fe17b7e9e311554f1b930bf7dedb2e3214c5d6720e9f1cce55ceb7a0b0309782481249e2a165e7534ef5876fadc03b6c9c3cda645e769897cc9dede25ac9891b7b3f2ca4b9d843a296f616f8f4ae78debb591c16c9e83b29729031f7f67fd4069c8cebc2e2e85319be7f7ebc83e94e8edcb9ed2cc71732b3a1ae1a80bc2a0bd274f43395c038095adc4058e359f351f995a3a5a200db0c2719042f7853054ccaeada4ed6ca8f52e42246cf2ac09f445d955bc351fefaa853a425b197410fdca083fd5636181c6945b9b30bb1f29f2", 0xef, r6) r7 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$KEYCTL_MOVE(0x1e, r4, r5, r7, 0x1) 08:16:59 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r1, 0xa}) request_key(&(0x7f00000000c0)='logon\x00', &(0x7f0000000940)={'syz', 0x0}, 0x0, 0xfffffffffffffff9) keyctl$link(0x8, r1, r0) 08:16:59 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r0) 08:16:59 executing program 5: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)) close_range(r0, 0xffffffffffffffff, 0xffffffff00000000) 08:16:59 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)=0x0) r2 = epoll_create1(0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='fdinfo\x00') sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x44, 0x1, 0x4, 0x301, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x3}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x2}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x6}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0xc0c1) r4 = io_uring_setup(0x5fff, &(0x7f0000000140)) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x871, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, 0x0, 0xfffffffffffffffe, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) r7 = dup(r6) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}}) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r1, &(0x7f0000000280)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x2, 0x0, r7, 0x0, r4, 0x2, 0x0, 0x1, {0x0, r9}}, 0xffff) io_uring_register$IORING_REGISTER_FILES(r4, 0x1b, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) syz_io_uring_setup(0x5b29, &(0x7f0000000000)={0x0, 0xf3, 0x0, 0x1, 0x335, 0x0, r4}, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ff4000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000240)=0x0) r11 = io_uring_setup(0x485d, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r11, &(0x7f0000000080)={0x2000200a}) syz_io_uring_submit(0x0, r10, &(0x7f0000000580), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 878.601918] audit: type=1326 audit(1768810619.912:303): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7998 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe995e05b19 code=0x0 08:17:10 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$link(0x8, r1, r1) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:17:10 executing program 5: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)) close_range(r0, 0xffffffffffffffff, 0xffffffff00000000) 08:17:10 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) 08:17:10 executing program 7: syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}, {}, {}], 0x3, 0x1000, &(0x7f0000000040)={[0x6]}, 0x8) r1 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x2000200a}) 08:17:10 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) r1 = request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) r2 = request_key(&(0x7f0000000280)='encrypted\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000340)='\\)--]&[(*\x00', r1) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, r2) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r3, 0xa}) keyctl$search(0xa, r1, &(0x7f00000000c0)='cifs.spnego\x00', &(0x7f0000000100)={'syz', 0x3}, r3) 08:17:10 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = dup3(0xffffffffffffffff, r1, 0x0) epoll_pwait(r2, &(0x7f0000000280)=[{}], 0x1, 0x2, &(0x7f00000002c0)={[0x8000]}, 0x8) r3 = io_uring_setup(0x5ffe, &(0x7f0000000140)={0x0, 0x5715}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000080)={0x2000200a}) r4 = io_uring_setup(0x5fff, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r4, 0x1b, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x400000, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r5, 0x80049367, &(0x7f0000000340)=0x5) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f00000003c0)={0x80000001, 0x1, 0x1, 0x200, 0x1, [{0x0, 0x4, 0x0, '\x00', 0x1000}]}) fcntl$getown(r1, 0x9) close_range(r0, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.stat\x00', 0x0, 0x0) r7 = io_uring_setup(0x5fff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x353}) io_uring_register$IORING_REGISTER_FILES(r7, 0x1b, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_enter(r9, 0x3ac1, 0x8e75, 0x2, &(0x7f0000000380)={[0x8]}, 0x8) r10 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x80342, 0x0) io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000000240)=[r7, r8, r10, r3, r1, r1, 0xffffffffffffffff], 0x7) 08:17:10 executing program 4: r0 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x8, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) dup(r1) dup(0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) 08:17:10 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)="2c1ba58e07388ff3788a221e5ff768b8e7a78dfa5673d1b28e3074917af02e645a64d4a5f5dbdc02f49a57d3ece6c931f4e4e9739c935c25eaf92201be9a5ed54335b991baeb", 0x46, r0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) r1 = request_key(&(0x7f00000002c0)='blacklist\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r1) [ 888.957564] audit: type=1326 audit(1768810630.267:304): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8012 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc3fb339b19 code=0x0 [ 888.996454] audit: type=1326 audit(1768810630.304:305): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8013 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f107edc9b19 code=0x0 08:17:10 executing program 5: syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r0 = epoll_create1(0x0) r1 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x2000200a}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0xffffffff00000000) 08:17:10 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r1, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r2) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:17:10 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r1) r2 = add_key$fscrypt_provisioning(&(0x7f0000000280), &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000340)={0x1, 0x0, @c}, 0x29, 0xfffffffffffffff8) add_key$keyring(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x2}, 0x0, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r3, 0xa}) add_key$keyring(&(0x7f00000005c0), &(0x7f0000000600)={'syz', 0x2}, 0x0, 0x0, r3) add_key$fscrypt_provisioning(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x1}, &(0x7f0000000500)={0x2, 0x0, @c}, 0x29, 0xfffffffffffffffe) r5 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x1}, 0x0, 0x0, r1) keyctl$search(0xa, r2, &(0x7f0000000380)='rxrpc_s\x00', &(0x7f00000003c0)={'syz', 0x1}, r5) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) r6 = add_key(&(0x7f0000000200)='rxrpc\x00', &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000140)='trusted\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, r6) 08:17:10 executing program 1: add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000140), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa) r0 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "6bfbd63f92a11ef144dd974df492f027bd0032b866b3a70632536ba9fd57137dce2c0235efeba5817ca1ded3b2e009174f792fb9717726954d7c5727a6cff55b", 0x4022}, 0x48, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r1, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r3, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) keyctl$KEYCTL_MOVE(0x1e, r0, r2, r4, 0x0) request_key(&(0x7f0000000340)='keyring\x00', &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0) 08:17:10 executing program 5: syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r0 = epoll_create1(0x0) r1 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x2000200a}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0xffffffff00000000) 08:17:10 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r1, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) keyctl$search(0xa, 0x0, &(0x7f00000000c0)='encrypted\x00', &(0x7f0000000100)={'syz', 0x1}, r2) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:17:10 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r1) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:17:10 executing program 3: r0 = open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x901) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) r2 = dup(r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="74723b2e6d2cb96a08cfe587616e733dd2632c72663d", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',\x00']) renameat(r0, &(0x7f0000000280)='./file0\x00', r2, &(0x7f00000007c0)='./file0\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x72, 0x0, &(0x7f0000000300)="80418d08c6097477965356af5bd021d78bca6091368e32b546668dd43c5179c4fe7a96c88a590e7b600fd51552efa53028ced1ec267ca96ed11c3c98321bc493c1735a75bf62887a1b693a9b75376acd8d4dd2051886acc1295db97fb18f24c078f18b4440d4a39603235ec95f3fe6b43ce7"}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0x4, 0x3, 0x3ff, 0x5, 0x8, "d02649a933d931c268fddacc717626bb071189"}) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r4) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:17:10 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc4}, &(0x7f0000000300)={0x0, "2d5d88682f79aa89a2df928ab07526f79fabb78de0afb5afa47c3e96b5de28e04dbd7459152fbd3f3347ef97f882eb8b7a107f20a1265e1e043b4e496fabb5f1", 0x10}, 0x48, r0) keyctl$search(0xa, r0, &(0x7f0000000140)='id_resolver\x00', &(0x7f00000001c0)={'syz', 0x2}, r1) add_key(&(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140), 0x0, 0xfffffffffffffffa) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) [ 889.243125] audit: type=1326 audit(1768810630.550:306): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8053 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff077a56b19 code=0x0 08:17:10 executing program 6: syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r0 = epoll_create1(0x0) r1 = io_uring_setup(0x5fff, &(0x7f0000000140)) r2 = syz_open_dev$hiddev(&(0x7f0000000040), 0x7fffffff, 0x18000) fcntl$dupfd(r2, 0x406, r0) io_uring_register$IORING_REGISTER_FILES(r1, 0x1b, &(0x7f00000000c0)=[r2], 0x1) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=""/4096, 0x1000}], 0x1) r3 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000080)={0x2000200a}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001240)='/proc/key-users\x00', 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000001280), 0x301000, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000001300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYRES32=r4, @ANYBLOB="66696c65ce008d3cf1d385a2dd2cf82f0179fbffffffffffffff25d1988794c6a3f6b801818d8a"]) close_range(r5, r0, 0x0) [ 890.071983] audit: type=1326 audit(1768810631.383:307): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8053 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff077a56b19 code=0x0 08:17:20 executing program 5: syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r0 = epoll_create1(0x0) r1 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x2000200a}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0xffffffff00000000) 08:17:20 executing program 6: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3d44cf3bba85e08cc8ae430e2aa2b18325ac2fc450dad63a4aafcaec8d424ca0dac276519e4c4930abf54f211b7331001089fe2405eff95ee3e97f77b150d9e6813a80e1a7858c84210701c6d7a8fd646c3fb54f4e0691a0745a798b2552b551a74a2aad623eabda8f97adeda89f95cc5cfb522d2db1c7e7ff023182376241bda6776628954291f7c3d39d1c52622a412128bdd97abe498ef93535d9fd90efe5fa71adedc913065eb493fa59387ac4d37149b8108bd2c4dcca0cf1add7b9aeaaad80b8c0", @ANYRESHEX=r1, @ANYBLOB, @ANYRESHEX=r2, @ANYBLOB='(\x00']) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) r3 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r4 = epoll_create1(0x0) r5 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000080)={0x2000200a}) close_range(r3, 0xffffffffffffffff, 0x0) 08:17:20 executing program 4: r0 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x8, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) dup(0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) 08:17:20 executing program 1: r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r1, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) add_key(&(0x7f0000000180)='.request_key_auth\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)="28717816ad4439e628b24f3ca98dd2b1cf4bf3c1baea0a2774afc275e231e2191d7a31999cf3cfdfd002a92281ef63d53db0e9a499071dbd9a7f19f9ba487322950325f2b86eef60533ac5", 0x4b, r2) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:17:20 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) dup(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}}) 08:17:20 executing program 7: syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}, {}, {}], 0x3, 0x1000, &(0x7f0000000040)={[0x6]}, 0x8) r1 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x2000200a}) 08:17:20 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r1, 0xa}) r3 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$KEYCTL_MOVE(0x1e, r0, r3, r2, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, r2) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:17:20 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) r2 = request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r2) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r3, 0xa}) r5 = add_key(&(0x7f0000000200)='trusted\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000300)="f3fdeeec52bc4685d138f2d17386afdfaf197940f0904bf89ecc341a4b9278875b2db99cdc001b8c7157122be7b05421e6f6d7f51cd023dbccaaa00ae4a76a2ab1ee05dbb2ec803194815dfe228d8af25fb8ddd460a292b1c0a69d9aeb78161837dbfc4906ff29fe2fbb43d4614e77aaed8d1b50f6920ac9ca0ff48ff1de4dc44122fb5885990306c05899e33297e476fea83e992671833656c55949510646bee908c26ca9d5cbfdd9ed37ad355d313b3bd858ad37562d0ef2a6f57cf4df9db3da3e7364ad63a5fcb7829663afc9a5ad30f6", 0xd2, r3) r6 = add_key(&(0x7f0000000280)='cifs.idmap\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x1e, r5, r1, r6, 0x1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, r4) r7 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r8 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r7) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r8, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r7, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r8, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r8, &(0x7f0000000440)='.dead\x00', &(0x7f0000000480)) [ 899.252413] audit: type=1326 audit(1768810640.563:308): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8072 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe995e05b19 code=0x0 08:17:20 executing program 5: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0x0) [ 899.310826] audit: type=1326 audit(1768810640.622:309): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8073 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc3fb339b19 code=0x0 08:17:20 executing program 3: sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48800}, 0x14000000) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) [ 899.331906] audit: type=1326 audit(1768810640.643:310): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8087 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f107edc9b19 code=0x0 08:17:20 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000300)={0x0, "f9d65adbb9e9258bdfad3103a1a658ab629fe8d101b1bc01a86d7b250f286786c2407c876baffcab03e15fb760dd9b87547eb059e9e787cf5960d261c43f31d4", 0x21}, 0x48, 0xfffffffffffffffd) r1 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f0000000380)={'fscrypt:', @desc4}, &(0x7f00000003c0)={0x0, "35ea67c889aadc4feb881a85a27830321bd0a3900ea24dbee238ea4a2a621b69c91812f190aab804e10ff2de032242e84af6322414a4b8c9eee1ed668592f833", 0x31}, 0x48, 0xfffffffffffffff8) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r2) add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r4 = add_key(&(0x7f00000005c0)='.dead\x00', &(0x7f0000000600)={'syz', 0x1}, &(0x7f0000000640)="acad41f3453e6408210238d02d84b13b197332363db7376d05aafa30", 0x1c, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000140)='user\x00', &(0x7f0000000580)=@keyring={'key_or_keyring:', r4}) r5 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f00000001c0)="570c136d6d2e9f8753c8276ed8adb6b59c3a80e06c6e7585ed588b584dcbde6fd957d84c41d0f118c77b6b492e642492e3d6d006a9b4d1b7db0c4921388ce8296b32edf3bafaf71397c80c9816f97788331343ddf163522e5625a49a2bf1739c21e706fa76861238ec7dfec7d8de293ea2cd1616e64c422ebe35c796d04765b3b54386dca9d8c89f7c786da4e1f6126a9f6a281286b346f18c42ee3cce952df8fa7fa54ed9f8bab27e767eb1804b0b803c54428e056c48e69e723228df79b6ea555379410770a0f7cb24aff19c717c79dfc9025f460789dc6bfee7f9b5b0bbc391c3b1053a1bddb8e1004a4a2b", 0xed, 0xffffffffffffffff) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x2}, &(0x7f00000004c0)="b1d0675e8bbc3e63a350a9c30fccc3a4", 0x10, 0xfffffffffffffffa) keyctl$KEYCTL_MOVE(0x1e, r1, r5, r5, 0x0) keyctl$unlink(0x9, r6, r3) 08:17:20 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000300)='rxrpc_s\x00', &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000380)="996024823f71153618e82b280caa6637cd425318a0005634d479c24d661ba491788ad1192fff9a04cae2226dc80897d833720e565330ffe4db24f2161e958a267f87bbfabcba57c23a85a69b7960", 0x4e, r0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r1, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='ceph\x00', &(0x7f0000000040)) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r2) request_key(&(0x7f0000000200)='cifs.idmap\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)='keyring\x00', r1) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:17:20 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r3, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f00000001c0)={'fscrypt:', @desc3}, &(0x7f0000000200)={0x0, "2be0c8700af86126c3461b6b37c20c6c961a9c095bc9075a7a4679deafee06fb02cb9d9764ddd1bb05a8dfed84ab179fc306a3ec5509e3473d1603f15d0883d2", 0x2c}, 0x48, r2) keyctl$KEYCTL_MOVE(0x1e, r0, r4, r4, 0x0) [ 899.414678] 9p: Bad value for 'rfdno' [ 900.085553] audit: type=1326 audit(1768810641.396:311): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8072 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe995e05b19 code=0x0 08:17:31 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$reject(0x13, r0, 0x20, 0x8, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:17:31 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, r0) 08:17:31 executing program 4: r0 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x8, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) 08:17:31 executing program 7: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) epoll_pwait(r1, &(0x7f0000000000)=[{}, {}, {}], 0x3, 0x1000, &(0x7f0000000040)={[0x6]}, 0x8) io_uring_setup(0x5fff, &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) 08:17:31 executing program 5: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc4}, &(0x7f0000000300)={0x0, "2d5d88682f79aa89a2df928ab07526f79fabb78de0afb5afa47c3e96b5de28e04dbd7459152fbd3f3347ef97f882eb8b7a107f20a1265e1e043b4e496fabb5f1", 0x10}, 0x48, r0) keyctl$search(0xa, r0, &(0x7f0000000140)='id_resolver\x00', &(0x7f00000001c0)={'syz', 0x2}, r1) add_key(&(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140), 0x0, 0xfffffffffffffffa) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:17:31 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) dup(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}}) 08:17:31 executing program 6: r0 = syz_io_uring_setup(0x4e6a, &(0x7f00000001c0)={0x0, 0x800000, 0x2, 0x3, 0x34b}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/ata_device', 0x280080, 0x40) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000040)=[0xffffffffffffffff, r2], 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 08:17:31 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r0, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r3, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) keyctl$unlink(0x9, r4, r1) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r2) add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', 0x0, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) r7 = add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000280)={'fscrypt:', @desc3}, &(0x7f0000000300)={0x0, "543e42ffff0d7d93461df6803401547b570afdcb3a6097056be03ed76e5234a58f19c5e70a287e20a18376f30a09dfc24d1f6fc75bad378d85e7c0197570592b", 0x12}, 0x48, 0xfffffffffffffff9) r8 = add_key(&(0x7f0000000380)='asymmetric\x00', &(0x7f00000003c0)={'syz', 0x1}, &(0x7f0000000400)="b7c6e4bd3e83697ca49e4aa34a8acfa8c5fd07c16444000d9a2648e5614b4be662e09fe6def6eaca73910b3a86d09ce4af7ec55f2b2f12eeb57a1bb45ad639123de86775e0cb79210dfb733165b2e61a1dbe5d4c2a46", 0x56, r5) keyctl$KEYCTL_MOVE(0x1e, r6, r7, r8, 0x0) add_key(&(0x7f0000000200)='encrypted\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000980)="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", 0x1000, 0xfffffffffffffffa) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) [ 910.163021] audit: type=1326 audit(1768810651.471:312): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8124 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc3fb339b19 code=0x0 08:17:31 executing program 4: r0 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x8, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) 08:17:31 executing program 3: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xa0, r3, 0x80b, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7fffffff, 0x49}}}}, [@NL80211_ATTR_IE={0x24, 0x2a, [@ibss={0x6, 0x2, 0x40}, @ht={0x2d, 0x1a, {0x10, 0x1, 0x1, 0x0, {0x0, 0x1ff9, 0x0, 0xff, 0x0, 0x1, 0x0, 0x3}, 0x51986788b8ccad21, 0xd4c9}}]}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac}, @NL80211_ATTR_IE={0xa, 0x2a, [@erp={0x2a, 0x1, {0x1}}, @erp={0x2a, 0x1, {0x1}}]}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_FILS_KEK={0x15, 0xf2, "f930d6f7a324a35f018361444debb1727b"}, @NL80211_ATTR_SSID={0x1d, 0x34, @random="9cd5815a1fd38001b5a9b54b689f6ca9f783d25d72f38383b3"}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000010}, 0x8084) r5 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r5) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r5, 0x3) 08:17:31 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)=0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x2000000, 0x8010, r0, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) syz_io_uring_submit(r2, r1, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, &(0x7f00000000c0)={r3, r4+60000000}, 0x1, 0x0, 0x1}, 0x0) r5 = epoll_create1(0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) r6 = io_uring_setup(0x5fff, &(0x7f0000000140)) signalfd(r6, &(0x7f0000000000)={[0x3f]}, 0x8) dup2(r6, r6) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0x0) 08:17:31 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f00000000c0)='user\x00', 0xfffffffffffffffc, &(0x7f0000000100), 0x0, r0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) r1 = add_key(&(0x7f0000000440)='syzkaller\x00', &(0x7f0000000480)={'syz', 0x2}, &(0x7f00000004c0), 0x0, r0) add_key(&(0x7f0000000280)='asymmetric\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000340)="8a65f8a0903a432c9b265e2de68c2118525fe0a6210837ec15ab7346e843a0ed7f7dedd9446c88428e54c0a32245f5531fcb878a1b238c4fe054b454e616941426cfb22ac951441cd91ffa8b543d6de83b87d4cacec24f52261b5172311934a157eeab379d92a3460297290576869580167f0b009312439f74c42a1509d82ff727aac863373295a7a4187b1e9fe4d73055416a3399ed6220f45da83663451da86bece50aa4f3b2a1d8bb83250badac4dbf80b0f1198d42eab5392c6a1473c3ace1b4e904c5039e539f67ef30654efa1b97853cb26a271efd1333cb59efc276e24fe12d0d7ed21c29fc0661c4", 0xec, r1) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) add_key(&(0x7f0000000100)='trusted\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f00000001c0)="f446113bae86e7b093747bf840a3b1c1cddcee00b3757ce1c688b1561ba87bc8", 0x20, r2) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) [ 910.262744] audit: type=1326 audit(1768810651.572:313): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8143 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff077a56b19 code=0x0 [ 910.265040] 9p: Bad value for 'rfdno' 08:17:31 executing program 4: r0 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x8, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) 08:17:31 executing program 5: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = dup3(0xffffffffffffffff, r1, 0x0) epoll_pwait(r2, &(0x7f0000000280)=[{}], 0x1, 0x2, &(0x7f00000002c0)={[0x8000]}, 0x8) r3 = io_uring_setup(0x5ffe, &(0x7f0000000140)={0x0, 0x5715}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000080)={0x2000200a}) r4 = io_uring_setup(0x5fff, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r4, 0x1b, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x400000, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r5, 0x80049367, &(0x7f0000000340)=0x5) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f00000003c0)={0x80000001, 0x1, 0x1, 0x200, 0x1, [{0x0, 0x4, 0x0, '\x00', 0x1000}]}) fcntl$getown(r1, 0x9) close_range(r0, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.stat\x00', 0x0, 0x0) r7 = io_uring_setup(0x5fff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x353}) io_uring_register$IORING_REGISTER_FILES(r7, 0x1b, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_enter(r9, 0x3ac1, 0x8e75, 0x2, &(0x7f0000000380)={[0x8]}, 0x8) r10 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x80342, 0x0) io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000000240)=[r7, r8, r10, r3, r1, r1, 0xffffffffffffffff], 0x7) 08:17:31 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0x0) r1 = request_key(&(0x7f0000000100)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r1) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r2) add_key(&(0x7f0000000240)='.dead\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f00000002c0)="42cf3919d839a29285adba2503a72d3c61ba64fc7858f76b40faca77e8d039436d00a9a5d30c84f40079bcc11ead016333827c2dd6701b4b733ed2fd202e3e66c058cfb41e5be3684eeba483773327138e1f26fa6e2f135f83780e523c74b6826f74c555d0530a84f2f6b0374e75bfd56c5a0532a01ab40b9c67ef108f4e87543d37d75b90ce39ce51", 0x89, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r2, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) r4 = request_key(&(0x7f0000000140)='rxrpc_s\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)='syz', r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, &(0x7f0000000200)=@keyring={'key_or_keyring:', r4}) 08:17:31 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r1, 0xa}) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r3, 0xa}) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00', r2) request_key(&(0x7f0000000280)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000340)='^\x00', r2) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:17:31 executing program 7: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) epoll_pwait(r1, &(0x7f0000000000)=[{}, {}, {}], 0x3, 0x1000, &(0x7f0000000040)={[0x6]}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 08:17:31 executing program 4: r0 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) dup(0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) [ 910.399415] audit: type=1326 audit(1768810651.710:314): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8163 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f107edc9b19 code=0x0 [ 911.089135] audit: type=1326 audit(1768810652.400:315): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8143 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff077a56b19 code=0x0 08:17:42 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) dup(0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 08:17:42 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r0) request_key(&(0x7f0000000280)='id_resolver\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f00000003c0)='{\\}^}+-!\x00', 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) r1 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc1}, &(0x7f0000000300)={0x0, "ff404c1b1b7cbb961e14b61a21ce527c70e8c658fd73f64cee6b644225e76ff62b23b32cdcefd299a9e2ae8e3cb60b3b632cff6caa5fecbc72ef714f130f79a9", 0x31}, 0x48, r0) add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r1) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:17:42 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:17:42 executing program 7: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}], 0x3, 0x1000, &(0x7f0000000040)={[0x6]}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 08:17:42 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r1, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f00000000c0)='asymmetric\x00', &(0x7f00000001c0)=@chain={'key_or_keyring:', r3}) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:17:42 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) dup2(r0, r1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0x0) 08:17:42 executing program 5: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r1, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) keyctl$search(0xa, 0x0, &(0x7f00000000c0)='encrypted\x00', &(0x7f0000000100)={'syz', 0x1}, r2) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:17:42 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) dup(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}}) [ 921.559650] audit: type=1326 audit(1768810662.870:316): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8177 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f107edc9b19 code=0x0 [ 921.623550] audit: type=1326 audit(1768810662.932:317): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8185 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc3fb339b19 code=0x0 08:17:42 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r1) r3 = request_key(&(0x7f0000000100)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='\\.%\x00', 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f00000002c0)='id_resolver\x00', &(0x7f0000000300)=@chain={'key_or_keyring:', r3}) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r0, 0x1) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000940)={'syz', 0x1}, 0x0, 0xfffffffffffffffc) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r4) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r4, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) keyctl$unlink(0x9, r1, r5) 08:17:42 executing program 3: fcntl$notify(0xffffffffffffffff, 0x402, 0xc) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) syz_emit_ethernet(0x86, &(0x7f0000000040)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}, {0x0, 0x0, 0x4c, 0x0, @wg=@response={0x2, 0x0, 0x0, "20937c4ce6bf53324e3fd3ca2707a8092a2ff5d42eb31a661cc3cd6ea6d0133c", "c538df2eabede21c2be8aa0d3df877a7", {"fc0a2e74062eace7149ae53eb80191d1", "97a696bb38fed5ea32b2238a3fe9ac2f"}}}}}}}, 0x0) add_key(&(0x7f0000000100)='pkcs7_test\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:17:42 executing program 0: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) socket$packet(0x11, 0x0, 0x300) pipe2(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(0x0, 0x0, 0x0, 0x0) poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x80}, {r0}], 0x2, 0x1) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r1) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:17:42 executing program 7: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}], 0x3, 0x1000, &(0x7f0000000040)={[0x6]}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 08:17:43 executing program 5: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r1, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) keyctl$search(0xa, 0x0, &(0x7f00000000c0)='encrypted\x00', &(0x7f0000000100)={'syz', 0x1}, r2) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) [ 921.724316] 9p: Bad value for 'rfdno' 08:17:43 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0x0) 08:17:43 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz', 0x2}, &(0x7f00000003c0), 0x0, r0) add_key(&(0x7f0000000140)='cifs.idmap\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000300)="3e123b0fe2c323d25b43", 0xa, r1) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, &(0x7f00000001c0)="10c98ac0ebd5e17317fc79194f7ca8aca5a73a4d987fa18fd01ef628aeb62a3a05474156ef0dd3b2768cc4faf5ee4ecbaf4512d1b1435f097eff4e48a6551548fe014f43b59e46599486d8978bdcfa0d24073e5d8e78aff77b2948a0a48826b86ff0c1b9ed29111697b33e166aaad5550515e73822fcb7d46ea40719d8890114132f52123bf92be8303b6c92483ce2ce9a0d63a2", 0x94, 0xfffffffffffffffc) 08:17:43 executing program 7: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}], 0x3, 0x1000, &(0x7f0000000040)={[0x6]}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 08:17:53 executing program 0: ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f00000000c0)) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:17:53 executing program 1: fspick(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x1) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key(&(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r1) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:17:53 executing program 5: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r1, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) keyctl$search(0xa, 0x0, &(0x7f00000000c0)='encrypted\x00', &(0x7f0000000100)={'syz', 0x1}, r2) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:17:53 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}}) 08:17:53 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) dup(0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 08:17:53 executing program 7: r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}, {}, {}], 0x3, 0x1000, &(0x7f0000000040)={[0x6]}, 0x8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 08:17:53 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r1, 0xa}) add_key(&(0x7f00000000c0)='pkcs7_test\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f00000001c0)="87a47f57963bef329b8cb2849cd672f06348641f7e0f943febb92d4bb2e5881d7a0ef978a8cda18df0b341e12471801a8abc73d680ca764b0feef28edbd24f27500a048cfd25728a91a0127f52a050c94a9a4f1ce0e6ddbbcf68a3e71d055e430df9fc8ce2550c965f", 0x69, r1) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r3, 0xa}) add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, r3) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) [ 932.685432] audit: type=1326 audit(1768810673.996:318): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8229 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc3fb339b19 code=0x0 08:17:54 executing program 0: r0 = add_key(&(0x7f0000000080)='cifs.spnego\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000980)="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", 0x1000, 0xfffffffffffffff8) r1 = add_key(&(0x7f0000000180)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)="b61d7a3cf8f46fa33496949b17ba9eaae210a6d5db851f171f3ca1df89f61ad9ae0700cc92f9c2f64bd3735c065998f2287d991df8bede6a22", 0x39, 0xfffffffffffffff8) add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r1) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, r1) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:17:54 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, r1) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) [ 932.740180] audit: type=1326 audit(1768810674.051:319): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8237 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f107edc9b19 code=0x0 08:17:54 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000180)) r2 = epoll_create1(0x0) r3 = io_uring_setup(0x5fff, &(0x7f0000000140)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f0000000140)=' ', 0x1, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r4, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000140), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000240)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x3, 0x0, 0x0, 0x0, 0x1}, 0x3) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0x0) 08:17:54 executing program 5: add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r0, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) keyctl$search(0xa, 0x0, &(0x7f00000000c0)='encrypted\x00', &(0x7f0000000100)={'syz', 0x1}, r1) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) [ 932.787175] 9p: Bad value for 'wfdno' 08:17:54 executing program 5: add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r0, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:17:54 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r1, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) keyctl$search(0xa, r2, &(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:17:54 executing program 5: add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r0, 0xa}) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:17:54 executing program 0: pselect6(0x40, &(0x7f0000000140)={0x2, 0x8, 0x8f, 0x5, 0x8, 0xd3, 0x1, 0x3}, &(0x7f00000001c0)={0x0, 0xe64, 0x26e, 0x4, 0x9f1, 0x5, 0x2, 0xfffffffffffffa1b}, &(0x7f0000000200)={0x20000, 0xe3, 0xbf44, 0xdc5, 0x6, 0x4, 0x480000000, 0x4}, &(0x7f0000000240), &(0x7f0000000300)={&(0x7f0000000280)={[0x7d00000]}, 0x8}) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$clear(0x7, r1) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:17:54 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0x0) 08:18:06 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) dup(0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 08:18:06 executing program 5: add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:18:06 executing program 7: r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}, {}, {}], 0x3, 0x1000, &(0x7f0000000040)={[0x6]}, 0x8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 08:18:06 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0x0) 08:18:06 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @desc4}, &(0x7f00000001c0)={0x0, "f43feed30a907ba2291a218810efea12c337ff2a8f261e7cd4ae8541138dd9268feebe7d9925d54df71d046ad6ff2e14c2133a66cd75ccf39264ee46900b7cd7", 0x19}, 0x48, r1) 08:18:06 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$reject(0x13, r0, 0x10000, 0x1ff, r0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000000c0)='cifs.spnego\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffff9) 08:18:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) r2 = dup(r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, 0x0, 0x2, 0x70bd27, 0x25dfdbfd, {}, ["", ""]}, 0x1c}}, 0x48080) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r5, @ANYBLOB="14002c8008000000000808002d"], 0x30}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r8, @ANYBLOB="14002c8008000000000800002d"], 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00042cbd7000fddbdf252000080003000000", @ANYRES32=r8, @ANYBLOB="0c0099000101000030000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x91) r9 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r9) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:18:06 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}}) [ 945.754477] audit: type=1326 audit(1768810687.065:320): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8276 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff077a56b19 code=0x0 [ 945.761052] audit: type=1326 audit(1768810687.071:321): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8277 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc3fb339b19 code=0x0 [ 945.788828] audit: type=1326 audit(1768810687.100:322): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8285 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f107edc9b19 code=0x0 08:18:07 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r0, 0xa}) r2 = add_key$keyring(&(0x7f0000000440), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r1) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r2) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) r3 = request_key(&(0x7f0000000300)='big_key\x00', &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)='\x00\x00\xff\x7f\x00', 0xfffffffffffffffc) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, r3) add_key$keyring(&(0x7f0000000140), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, r3) add_key(&(0x7f00000000c0)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f00000001c0)="fd621f51ba4bb904732c08f399967298b5d9846e0fcfce9e95900055463fccde9be0140603b0893ca825a48dec45666dd776eebdc5eb3c2548990640d89121465b19bf6319025c075cf91308c655efc72d7f2832bbccee01e4e15e5f5b36f62a0228d4bdf7aa4b655d85d0fc3c05d6374dd92faac0718a3af377ba9229c4199d52147c97067d8447f87185e2726990a5757ae961473dd2b47b417abcada82b50d3694d901e79836d8e6875de0df4fbe87c50c3e03379022675", 0xb9, 0x0) 08:18:07 executing program 5: add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) [ 945.853986] 9p: Bad value for 'wfdno' 08:18:07 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) request_key(&(0x7f00000000c0)='cifs.spnego\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)='}\x00', r0) 08:18:07 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000240)={0x0, 0x0, 0x20}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) r3 = syz_open_dev$mouse(&(0x7f0000000000), 0x8, 0xc0) epoll_wait(r3, &(0x7f0000000040)=[{}], 0x1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)=""/175, 0xaf}, {&(0x7f0000000380)=""/243, 0xf3}], 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 08:18:07 executing program 1: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) vmsplice(r0, &(0x7f0000000340)=[{&(0x7f00000001c0)="cc5a89cf910620bd6a10b6e1a3e938e78f7b05291a916cd95e3989f1825ddee1040eff52d1c0481df3df997bb1b26aebd485493eecd38fce49c183cb404ed6b40eb67ff9c1184fb051d624170f0579586758ea4d4acc7fa8d786bedf3d8d1999bcbbce7728ba350cde14fd6601dceb37cd3fe4da40135b75b4574de8d83c5409557aafd8720bc750ab491ca3e7d17c7fc1dda7cf73abeba7795b96540e3ed2b7307b2bb2066a67e774336550a7a45333fcb973fa18f2e3fbe07f7e410e6b69e8477deabd2d0bcf628549b6fdbe", 0xcd}, {&(0x7f0000000980)="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", 0x1000}, {&(0x7f00000000c0)="5e6b8ff8cb1b817554ad862adc558e14bf542c5ae5405146a2ffaedc26135944467dbf4074da8d75f221f70b5c2a868a144725d61106ed739820abf058631745b49be2ea8c645141ab4e9389ccb04a01446c228f88220b370f55ca8cd9c988be2fb5d907ebd60e650156b25f11feabaedb523243f283cf0167f035fc11ecd046d95e32d04b77d88761fb5ebbaa55bfdc1ea7e2a50cfb80115567532154039f151740b03e5670d6ed6087c25aba158cdbbf58af", 0xb3}, {&(0x7f0000001980)="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", 0x1000}, {&(0x7f0000000300)="510cd2940cde", 0x6}], 0x5, 0x4) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0x0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:18:07 executing program 5: add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:18:07 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$KEYCTL_MOVE(0x1e, r0, r2, r1, 0x1) 08:18:07 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "346dd6a956afd6105a9ed5aa4e20e7e5cccabb0806c84cf4c4432b25fd1e13826b9a448d22a25a232a067e40d82784dda0a97e05bf477c5454ffa9b12d4b3d3f", 0x1c}, 0x48, r0) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r1) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r2, 0xa}) keyctl$link(0x8, r2, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) [ 946.568674] audit: type=1326 audit(1768810687.879:323): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8276 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff077a56b19 code=0x0 08:18:19 executing program 7: r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}, {}, {}], 0x3, 0x1000, &(0x7f0000000040)={[0x6]}, 0x8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 08:18:19 executing program 5: request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:18:19 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = request_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)='keyring\x00', 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r2, 0xa}) keyctl$KEYCTL_MOVE(0x1e, r2, r1, 0xfffffffffffffffe, 0x0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) request_key(&(0x7f00000001c0)='encrypted\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)='#&\'-@{*@\x00', r1) 08:18:19 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}}) 08:18:19 executing program 4: r0 = fsopen(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) dup(0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) 08:18:19 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) r1 = epoll_create(0x9) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000140)) r4 = dup(r3) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0xe0, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_MESH_SETUP={0x9c, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_IE={0x6, 0x3, '7d'}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x6}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_IE={0x71, 0x3, "3a663a2934a9e97579483bdd8cc786414ad23a2ca08c64f9c638d4630b83cea9da01a538ec2017185d0fd8b71a86587dd2f95f96313332e9842b4c65d32196127ac9aa536288e32d20cdbc69e90ed8a315b810d5e99d985a7dedb16dd31c5b09203e127ca40e0138a32bb8cbf8"}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}]}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x40}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x200}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}]]}, 0xe0}, 0x1, 0x0, 0x0, 0x2000c000}, 0x24000044) write$P9_RLOPEN(r4, &(0x7f0000000280)={0x18}, 0xfffffdef) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:18:19 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0)={0x0, 0x56d1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)=0x0) r2 = epoll_create1(0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x871, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, 0x0, 0xfffffffffffffffe, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r1, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0x2, 0x1, &(0x7f0000000340)="d897a3f35f1f5f5a624026c501b0eaec6682677183c3e75d270456", 0x0, 0x0, 0x0, {0x1, r4}}, 0x6e) r5 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000000080)={0x2000200a}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) r7 = dup(r6) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}}) r9 = io_uring_setup(0x5fff, &(0x7f0000000140)) syz_io_uring_setup(0x53f9, &(0x7f0000000280)={0x0, 0x549d, 0x0, 0x3, 0x1a7, 0x0, r9}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_FILES(r9, 0x1b, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r9, &(0x7f0000000000)={0x9}) close_range(r0, 0xffffffffffffffff, 0x0) 08:18:19 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x68cc82, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x30, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x40000080) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x24, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4020}, 0x858) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r1, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x800}]}, 0x24}, 0x1, 0x0, 0x0, 0x40840}, 0x20000001) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r2) add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, r3) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000980)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080025bd7000fddbdf2501000000080002000100000008000100ffffffff14000480050003000000000005000300050000001400048005000300060000000500030001000000a38ed79e90171206c6d79a9546ea03ee314f9c561445f82efec86844a82f3ece7518cf2abc3ac078383df56b0808401b604152d4f25693f3c80afa784eb113f54f46e9e0dc3c8292454732ddfc49bd9e6a03940b045969db9577cb112b8b84292afb0f8065426c28ae0d75c9e0fab53258aa4eef5fceb9ec6df9"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x22008080) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r4, 0xa}) r7 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x2}, 0x0, 0x0, r3) r8 = add_key$user(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x3}, &(0x7f0000000600)="83f0bafd7a8c2192ba53b41eababf378e03db57d00449ed1c5544f20b0134ab8afcf9ce1001f399ddb1f14ac54208916a0a4e12241b16c0f46ba78fba9dfea0ff581dd523ce8d2e3de5cf6c54ea811a548364f6c11747fa8f35f5101953b1637a6e3c12daba92305c456f8a506c37f09f267ad53123928cf16764c7d93f363a6bb2fdb5e50cb13ef10bef5c90b8feb957194bd05a54b324ec6974a9e3038ef8af771f50ac920628954d8e61b2086673cd4b8e4a103ef5c1294ba559cc45666e7a1966582dcc21cb0a33f10cd", 0xcc, r7) r9 = request_key(&(0x7f0000000700)='trusted\x00', &(0x7f0000000740)={'syz', 0x1}, &(0x7f0000000780)='/dev/nvram\x00', r5) keyctl$unlink(0x9, r8, r9) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) keyctl$search(0xa, 0x0, &(0x7f00000004c0)='logon\x00', &(0x7f0000000500)={'syz', 0x3}, r5) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) [ 958.427451] audit: type=1326 audit(1768810699.738:324): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8330 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc3fb339b19 code=0x0 [ 958.451533] audit: type=1326 audit(1768810699.762:325): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8334 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f107edc9b19 code=0x0 08:18:19 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r2, 0xa}) add_key(&(0x7f0000000300)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000380)="bed3898ed170bc10c68342b0967518b6078da389b1a1f28a9e9b189d2df6fa70fe5671370b34d7338261a27bdead6a80fab15dea273b527603ac69fe98002c981b5956002f8128adb2a5af5e0b2c4c29244d5d4a871a346ef4923d1bbb5cfb0ea3d4e27123ad0a7eb4f5e57105b63927cc6e93ca9b613bac475080d57ea1302f25d0eaf8afe50d26b2", 0x89, r2) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r1, 0xa}) add_key$user(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)="223ebef686d0cfebf9fd848dcc3c93ec3ca13b1764a7131adb221d4e6ef0b33e788826375a9ad33b633a3534dfa59f35f3a157a1774a4fa6005dadc65f0b6c8e4be59ca4086f09f985e7f154cbcafddeb4010b496af40523402b282c598c175bccf69ad0e8b5e7", 0x67, r4) keyctl$restrict_keyring(0x1d, r1, &(0x7f00000000c0)='.dead\x00', 0x0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:18:19 executing program 5: request_key(0x0, &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) [ 958.520649] audit: type=1326 audit(1768810699.829:326): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8339 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe995e05b19 code=0x0 [ 958.528744] 9p: Bad value for 'wfdno' 08:18:19 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:18:19 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0x0) r2 = add_key(&(0x7f00000001c0)='id_resolver\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000980)="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", 0x1000, r1) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r3, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) keyctl$KEYCTL_MOVE(0x1e, r2, r4, r1, 0x1) r5 = add_key$fscrypt_provisioning(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000000000000102030405060708090a0b0c0d0e0f101012131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d3e3f4000000000"], 0x48, r0) keyctl$KEYCTL_MOVE(0x1e, r5, r0, r1, 0x1) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:18:19 executing program 5: request_key(0x0, &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:18:19 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) 08:18:20 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x37, 0x0, 0x33, 0x32, 0x62, 0x64, 0x34, 0x33, 0x62, 0x31, 0x32, 0x32, 0x34, 0x1c85d4724ef58415, 0x34]}, &(0x7f0000000300)={0x0, "0ca011188aa3c507c99f778575fe91b5c2f51d9926dffb0ffb6deb5028fa527a4867240b3d8801cb9278c612d8035f7ef06c64ef379aba797a8d32d9e2de3c36", 0x38}, 0x48, r0) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r1, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) keyctl$KEYCTL_PKEY_QUERY(0x18, r2, 0x0, &(0x7f00000000c0)='[]\x00', &(0x7f0000000400)) request_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, r3) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r4) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r4, 0xa}) request_key(&(0x7f0000000440)='rxrpc\x00', &(0x7f0000000480)={'syz', 0x1}, &(0x7f00000004c0)='{\x00', r3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r5) keyctl$instantiate(0xc, r0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e657720656372797000667320757365723a3030303030303030303030303035323032320009a9df73ce07c677d5d95b6d0b01b49ca447881a38d22e7540a938fc7dac13d99f92721ee9b76598a1fece6491b1892fad40b2e7224c29272ee144de2a32bebadae5a9849ec1eaa5dbfbcbb24b49d45ad1ff"], 0x2a, r5) 08:18:28 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, &(0x7f00000000c0)='rxrpc_s\x00', 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:18:28 executing program 5: request_key(0x0, &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:18:28 executing program 2: add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:18:28 executing program 7: r0 = syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) epoll_pwait(r1, &(0x7f0000000000)=[{}, {}, {}], 0x3, 0x1000, &(0x7f0000000040)={[0x6]}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 08:18:28 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r2, 0xa}) keyctl$search(0xa, r1, &(0x7f0000000200)='cifs.idmap\x00', &(0x7f0000000240)={'syz', 0x3}, r2) request_key(&(0x7f00000001c0)='blacklist\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, r2) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) 08:18:28 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) r1 = request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) r2 = add_key$fscrypt_v1(&(0x7f0000000340), &(0x7f0000000380)={'fscrypt:', @desc4}, &(0x7f00000003c0)={0x0, "b1ac0bf7bd21372847b9d9887cace18b7fc40bc31912c762e547c0e187e05c2fc9a49d1e635c39a928ff2f0091aeac62c8c6256ab2758ff4226ae409ea3da4bf", 0x26}, 0x48, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000280), &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, r2) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r3, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, r4) r5 = add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f00000001c0)={'fscrypt:', @auto=[0x32, 0x37, 0x65, 0x63, 0x66, 0x65, 0x62, 0x33, 0x66, 0x33, 0x37, 0x64, 0x39, 0x34, 0x31, 0x31]}, &(0x7f0000000200)={0x0, "84f7a3ed6710530bbc793c588c13433f2e99168371c9ea9cf44f198a294afcf76cfb420d091683f685c5c634c68ace7a6de138db565a04d20c676225a1958699", 0x36}, 0x48, r1) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r5) 08:18:28 executing program 4: r0 = fsopen(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) dup(0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) 08:18:28 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)={0x0, 0x200000}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r2) r3 = io_uring_setup(0x5fff, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r3, 0x1b, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x902, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f00000000c0)={0xc0000018}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) r6 = dup(r5) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r0, &(0x7f00000003c0)={0x80000010}) r7 = io_uring_setup(0x5fff, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r7, 0x1b, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) ioctl$BTRFS_IOC_RESIZE(r3, 0x50009403, &(0x7f0000000240)=ANY=[@ANYRES32=r7, @ANYBLOB="003030c830303030336b00000000000000000000170000000042ec5bef4128b6573f7ccc29c859c445a93594758de6782f3b0c67e8e060ab920bbe44d7dfd4cf068c585287e7bba0db41ea1d1faf7538803ef72925a5417caab6e3c54b4a1a15cb21c7573d362002d148dc8475dd469d712b01a28588f25b2b77073c5ff99e09a310482cbb99615d41b75dcba8fa3b4711ecfb49e67adc97af2f895dd8acf5a8e1b2f8e7fec5d38c3904ddc98d04878da8b252b7167b0f6a48ecb285d1776598d8d3e35623165704bd0905b2c4ba26989bfc22f9b6ac44068572cac3bb3862dad7d6a43246fda5c8d2c9cfe649d06edaeeb17adf55ec8f4cc65be50617aaebec6f13d07e0807fe9a5d3c96d8237c431e95f0623dfffa2ff4e775588a6edac26416a5a85da92ac601078f4cc8978e60986f1a50a6c7fbe4e3fe1f47bd9d3b042cd74159e93d809abd97e1d12b54d170ea9d80f80e82813c9d0f406c278541d25aba91494815e8"]) [ 967.401791] audit: type=1326 audit(1768810708.713:327): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8382 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f107edc9b19 code=0x0 [ 967.437271] audit: type=1326 audit(1768810708.748:328): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8379 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe995e05b19 code=0x0 08:18:28 executing program 5: request_key(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0xfffffffffffffffe) 08:18:28 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r1, 0xa}) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r3, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r4, 0x1) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) r5 = request_key(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x1}, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000100)='syzkaller\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)='/\'*]&@{%:({/\\\x00', r5) 08:18:28 executing program 2: add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:18:28 executing program 5: request_key(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0xfffffffffffffffe) 08:18:28 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000000c0)='pkcs7_test\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000300)="21e2c0745f2b92c27d195cb42a0de1ce41e4a7fa24a5932804f89f668504c3f8a8124ab5aa28cab6cf3666118a1a64c55eb6fbcd056b5e4cf0d1e8dca386c308aa9932867d0eb9d4b87984b861710d49756c3c5ef9c13c3b970f5cac63316637378714e92db92d4566421d58c41a59d9990e145a9f637aa42d442bef73f35725ef5c554130a658e85593c878dfac5f59a15329a653b77dfcff9a14f977207a033896c3c0bee91d976ec9420c4d25090002583befc27fa693796112f0667d9a81edd909a882d8cbb01aa6877ca1db60c7dccb22d63600"/228, 0xe4, r0) 08:18:28 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000000c0)='blacklist\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f00000001c0)="4b9a8b17bdb4fd18a82100f5d666c560c5b8bcb79cab429db4ccdf2a6376cdd16e57b65599cbb71aa2b716ae36902bea34d5bba5a6c28330ff2d947582eaa82c21d4dd6b5c495104944a02916d333f4e25a4f9e03e1fb05e948ba9db86cfaa701cbd2c58e784ccf04ce3d70ef5f81023e8a69284eb399473b6aa03ffb7a8c3055cdaa9df0f867316fcb001cff0fc4ee6e734de8e966ed974a65cc768fc187b62a5e34ddb6d759d0434fd60277b96e025dea8a73d545194", 0xb7, 0xfffffffffffffff9) 08:18:28 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0)={0x0, 0x0, 0x8, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000000)={0x0, 0x0, 0x10, 0x2}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0x0) 08:18:28 executing program 2: add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:18:28 executing program 5: request_key(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0xfffffffffffffffe) 08:18:28 executing program 2: request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:18:28 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:18:38 executing program 4: r0 = fsopen(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) dup(0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) 08:18:38 executing program 7: r0 = syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) epoll_pwait(r1, &(0x7f0000000000)=[{}, {}, {}], 0x3, 0x1000, &(0x7f0000000040)={[0x6]}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 08:18:38 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000940)={'syz', 0x3}, 0x0, r1) 08:18:38 executing program 2: request_key(0x0, &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:18:38 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000000c0)='keyring\x00', &(0x7f0000000140)=@secondary) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:18:38 executing program 5: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r1, 0xa}) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r3, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r4, 0x1) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) r5 = request_key(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x1}, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000100)='syzkaller\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)='/\'*]&@{%:({/\\\x00', r5) 08:18:38 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000240), &(0x7f0000000440)={'syz', 0x0}, &(0x7f00000002c0)="f52238d78463c94bf8dc2787e4621619ca03051f9a81a546c944ff1c5fa327c5921d314e4c69f2e0380214e296490fa1afbd7e68e563686446ca5169d56c3acfe64b1e593a8d13a052134146808e8e29f546f5721a817616e90ff5a79064ee63949cd12caf7334f04699b9fcc4c59f85c23db21cfdda836931ac69b27cff43643d407e039f1bd7b353d950387109c9dc8fb72534040626a10f479315e477e37c90258b4f6c1ea6319ec3d74d5a", 0xad, r0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r2, 0xa}) r4 = request_key(&(0x7f0000000380)='cifs.spnego\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000400)='keyring\x00', r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) r5 = request_key(&(0x7f00000000c0)='rxrpc_s\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='keyring\x00', r3) r6 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r7 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r6) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r6, 0xa}) keyctl$search(0xa, r6, &(0x7f0000000280)='syzkaller\x00', &(0x7f0000000480)={'syz', 0x0}, r4) r8 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r9 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r8, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) keyctl$KEYCTL_MOVE(0x1e, r5, r9, r1, 0x1) request_key(&(0x7f0000000200)='rxrpc_s\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, r5) 08:18:38 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f0000000000)={0x0, 0x1000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000380)={0x0, 0x0, 0x43e978f6eaa3cc79}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) r3 = io_uring_setup(0x5fff, &(0x7f0000000140)) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) r5 = dup(r4) io_uring_setup(0x6fce, &(0x7f0000000280)={0x0, 0x128, 0x4, 0x1, 0x97, 0x0, r3}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB="002055b5287272025a30774e2e935e91689f803e69aba037716a2c578d6f0696924dcadfa837e247dbfcd5ea33f9ca11245fb20d72d020ee9d408686e49fd791ae44fc9cdc9be18d5823c85007b3e6ae3c8215e5e60480293c95565a2716e21e54146f577de4c9b10201449fcd27f46e7a23c0180a5fa611"]) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f00000001c0)={0xa000001b}) r7 = io_uring_setup(0x5fff, &(0x7f0000000140)={0x0, 0x359, 0x1}) io_uring_register$IORING_REGISTER_FILES(r7, 0x1b, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r8 = io_uring_setup(0x5fff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x3}) io_uring_register$IORING_REGISTER_FILES(r8, 0x1b, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r9 = socket$inet_udp(0x2, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000200)=[r7, r8, r1, r9, r4], 0x5) io_uring_register$IORING_REGISTER_FILES(r3, 0x1b, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000000c0)=[r2, r1, r1, r3], 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 08:18:38 executing program 2: request_key(0x0, &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:18:38 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r2, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r4) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r4, 0xa}) request_key(&(0x7f0000000280)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, r5) r6 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r7 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r6) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r6, 0xa}) keyctl$setperm(0x5, r6, 0xa010114) add_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)="e7e5edcdf8e4e9d28e", 0x9, r1) [ 977.367746] audit: type=1326 audit(1768810718.678:329): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8446 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f107edc9b19 code=0x0 08:18:38 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000140)='pkcs7_test\x00', &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r1) [ 977.385431] audit: type=1326 audit(1768810718.696:330): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8447 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe995e05b19 code=0x0 08:18:38 executing program 2: request_key(0x0, &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:18:38 executing program 3: add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0x0) request_key(&(0x7f00000000c0)='id_legacy\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:18:38 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$link(0x8, 0x0, r0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, r1, 0x0, 0x0) 08:18:38 executing program 5: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r2, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r4) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r4, 0xa}) request_key(&(0x7f0000000280)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, r5) r6 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r7 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r6) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r6, 0xa}) keyctl$setperm(0x5, r6, 0xa010114) add_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)="e7e5edcdf8e4e9d28e", 0x9, r1) 08:18:38 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) 08:18:48 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r1, 0xa}) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r1) 08:18:48 executing program 2: request_key(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0xfffffffffffffffe) 08:18:48 executing program 5: request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:18:48 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r1, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) add_key(&(0x7f00000000c0)='syzkaller\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f00000001c0)="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", 0xfc, r2) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:18:48 executing program 7: r0 = syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) epoll_pwait(r1, &(0x7f0000000000)=[{}, {}, {}], 0x3, 0x1000, &(0x7f0000000040)={[0x6]}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 08:18:48 executing program 4: r0 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) dup(0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) 08:18:48 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x80}) syz_io_uring_setup(0x50e9, &(0x7f0000000000)={0x0, 0xfc4a, 0x4, 0x2, 0x34a, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000240)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) syz_io_uring_setup(0x4306, &(0x7f0000000280)={0x0, 0x9011, 0x0, 0x3, 0x33, 0x0, r2}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000300), &(0x7f0000000340)) close_range(r0, 0xffffffffffffffff, 0x0) 08:18:48 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r1, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r2) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) [ 987.561568] audit: type=1326 audit(1768810728.872:331): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8482 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f107edc9b19 code=0x0 08:18:48 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, r1) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:18:48 executing program 5: request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:18:48 executing program 1: ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000300)={0x0, 0x2f53, 0x0, [0x7, 0x2, 0x20000000000, 0x7ff, 0x1], [0x7, 0x100000000, 0x334, 0x0, 0xfffffffffffffff7, 0x80000000000000, 0x1b, 0x7ff, 0x92, 0x8, 0x6, 0xf30, 0x3, 0x1, 0x5, 0x4, 0xffff, 0x1ff, 0x8, 0x3, 0x6, 0x6, 0x64a, 0x6, 0xffffffffffffffc0, 0x7, 0x8e, 0xfffffffffffffff7, 0x2, 0x7, 0x2, 0x3, 0x1, 0xffffffff, 0x7, 0x3, 0x5, 0x100, 0x80000001, 0xfff, 0x8, 0x10, 0x4b3, 0x1ff, 0x7ff, 0x1000, 0x9, 0x5, 0xffffffffffffff01, 0xfffffffffffff001, 0x3ff, 0x40, 0x5, 0xff, 0xff, 0x10000, 0x3, 0x6, 0x9022, 0x5, 0x5, 0x9, 0x2, 0x9, 0x2, 0x0, 0x96, 0xffffffffffff7c27, 0x81, 0x8, 0x0, 0x7ff, 0x7, 0x9, 0x3a6, 0x3, 0x648c, 0x8, 0xffff, 0x1000, 0x3, 0x800, 0x80000000, 0x3, 0x7, 0x4, 0x6, 0x3, 0x1, 0x8, 0x70000000000000, 0x1ff, 0x3f, 0x8, 0xce4, 0x10001, 0xfff, 0x8, 0x1, 0x9, 0xffffffff7fffffff, 0xfffffffffffffffe, 0x9, 0x2, 0x81, 0x2, 0x2, 0x9, 0x20, 0xb00, 0xffff, 0xe5, 0x6, 0x5, 0x20, 0x100, 0x10001, 0x3, 0x5, 0x9, 0x8]}) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000980)={r0, "a019c47716a07fff452e8b5d54c0a413"}) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r1) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r1, r1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) fcntl$getown(r2, 0x9) 08:18:48 executing program 3: ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000980)={0x0, 0xfffffffffffffff7, @start={0x0, 0x0, "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", "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"}, [0x78f170b6, 0x2, 0x3, 0xebe, 0xa2, 0x0, 0x233d, 0x2, 0x8, 0x8, 0xffefffffffffffff, 0x95, 0x5, 0x2, 0x802, 0xfffffffffffffff7, 0x1ff, 0x100000000, 0x101, 0x7, 0x1, 0x0, 0x3, 0xfffffffffffff50f, 0x1, 0x3, 0x9, 0x7, 0x2311ed45, 0x4, 0x3f, 0x7fffffff, 0x8001, 0x6, 0x2, 0x313, 0xa4e6, 0x7, 0x20, 0x7, 0x0, 0x780, 0x4, 0x2, 0x404000000000000, 0x7fffffff, 0xc54f, 0x8be9, 0x7cca, 0x3f, 0x1f, 0x8ce, 0x4, 0x4, 0x9, 0x3ff, 0xffff, 0x10001, 0xfffffffffffffff9, 0xe8, 0x7, 0xc93b, 0x5, 0xa91]}) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r1, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) r3 = request_key(&(0x7f0000000380)='blacklist\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000340)='\x00', r2) add_key(&(0x7f0000000140)='ceph\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)="bedfa74185ee55bf775e5ea282641624da73987c438e67519075f696d8d8109d9328d8050c4302b18e2a5c64b603d25bb761fd9eebf4a7096578821612098c8946f12321db843e4bb423e6178b478d0c", 0x50, r3) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:18:49 executing program 2: request_key(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0xfffffffffffffffe) 08:18:49 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, {@in6=@private2}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r2) add_key$keyring(&(0x7f0000000300), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:18:49 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) io_uring_setup(0x1731, &(0x7f0000000000)={0x0, 0x724d, 0x20, 0x2, 0x2d7}) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/stat\x00', 0x0, 0x0) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0x0) r3 = io_uring_setup(0x5fff, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r3, 0x1b, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f0000000240)={{r3}, "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"}) 08:18:59 executing program 7: r0 = syz_io_uring_setup(0x4e69, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) epoll_pwait(r1, &(0x7f0000000000)=[{}, {}, {}], 0x3, 0x1000, &(0x7f0000000040)={[0x6]}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 08:18:59 executing program 4: r0 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) dup(0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) 08:18:59 executing program 2: request_key(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0xfffffffffffffffe) 08:18:59 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r1, 0xa}) keyctl$search(0xa, r1, &(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x3}, 0xfffffffffffffffa) 08:18:59 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r2, 0xa}) add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f00000000c0)='big_key\x00', 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) keyctl$link(0x8, r1, r3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz0\x00', 0x1ff) 08:18:59 executing program 5: request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:18:59 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x400480, 0x0) fcntl$setstatus(r3, 0x4, 0x64400) close_range(r0, 0xffffffffffffffff, 0x0) 08:18:59 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) r3 = request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, r2) keyctl$search(0xa, r1, &(0x7f0000000140)='asymmetric\x00', &(0x7f00000001c0)={'syz', 0x3}, r3) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', 0x0, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) add_key$fscrypt_provisioning(&(0x7f0000000280), &(0x7f0000000400)={'syz', 0x2}, &(0x7f0000000440)={0x1, 0x0, @c}, 0x29, 0x0) r5 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r5) r7 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r8 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r7) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r8, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r7, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r8, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) keyctl$reject(0x13, r8, 0x1, 0x401, r3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r5, 0xa}) keyctl$KEYCTL_MOVE(0x1e, r2, r0, r5, 0x0) add_key(&(0x7f0000000200)='id_resolver\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000300)="68a69fd233bedb5ab4c872248360cdd20a28833379bff23cf1c4fe7972ab0c8028bd26eb368b2aa141664dbedd73ea364fe5be27dacc798c3696a3d067f160d4eec05d85058c28baadf654c9a3f1cadc94ddfc5fd1291612797759aca08335129037b96604d3e5ce386681085f5cf3d42d5378fc038f80974fed0ffdc6d1d422893adf3c09dbbd936f254b556deddec73324658059cefad5e593c12fe0cb73d10f95c237fb0968db8763d87685e8c0e5132626564c095c44160439bd28ff74f1da44dd8c064756e8a6bfbd8a", 0xcc, r4) 08:18:59 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000280)='rxrpc\x00', &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) r1 = request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) r2 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc1}, &(0x7f0000000300)={0x0, "e93b885073671f29507c546186b1bc1aa3cd74f00e438b00d22b26e38fb1c0ed60c9b6cdfd7d02094f76b1ebca08d46b34b5d5abe0ca95466885b8230c9db304", 0x2a}, 0x48, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, r2) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r1) [ 998.239179] audit: type=1326 audit(1768810739.550:332): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8528 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f107edc9b19 code=0x0 08:18:59 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$reject(0x13, r0, 0x7fffffff, 0xfffffffffffffff2, r1) add_key$user(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)="b336b7064631aa0cffb63ca414cda316cd496ad7728a2978623ea723e48f63b16ca9b09462f4deca4a7e422a5d2252938c6ca3cedeb67ba3461d868bccb628a749360be3b7fd5b6aff3480d43f0158c957e48979", 0x54, r1) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, r0) r3 = add_key$fscrypt_v1(&(0x7f0000000580), &(0x7f00000005c0)={'fscrypt:', @desc1}, &(0x7f0000000600)={0x0, "ba0b4db14006eeef07c6f456727a8df05d14cd77a677bf6d15e2f3b63460cc566706c6057a49e048cac1663773e66a729fd055434904fac9c5da21350c7708f1", 0x21}, 0x48, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, r3) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r2) add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) r5 = request_key(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000280)='keyring\x00', r4) add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, r5) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:18:59 executing program 5: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r1, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f00000000c0)='asymmetric\x00', &(0x7f00000001c0)=@chain={'key_or_keyring:', r3}) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:18:59 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000300)='syzkaller\x00', &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000380)='\x00', 0xfffffffffffffff8) r2 = request_key(&(0x7f0000000140)='id_legacy\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='keyring\x00', r1) add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, r1) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r2) 08:18:59 executing program 3: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$clear(0x7, r0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:18:59 executing program 2: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r1, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r2) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:18:59 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) 08:18:59 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000240)=""/179, 0xb3}, {&(0x7f0000000300)=""/132, 0x84}, {&(0x7f0000000000)=""/92, 0x5c}, {&(0x7f00000003c0)=""/178, 0xb2}, {&(0x7f0000000480)=""/107, 0x6b}, {&(0x7f0000000500)=""/187, 0xbb}, {&(0x7f00000005c0)=""/81, 0x51}, {&(0x7f0000000640)=""/153, 0x99}, {&(0x7f00000000c0)=""/21, 0x15}, {&(0x7f0000000700)=""/166, 0xa6}], 0xa) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0x0) 08:19:11 executing program 7: r0 = syz_io_uring_setup(0x4e69, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) epoll_pwait(r1, &(0x7f0000000000)=[{}, {}, {}], 0x3, 0x1000, &(0x7f0000000040)={[0x6]}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 08:19:11 executing program 4: r0 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) dup(0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) 08:19:11 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) r1 = request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r1, &(0x7f00000000c0)='.dead\x00', &(0x7f0000000100)={'syz', 0x0}, r1) 08:19:11 executing program 2: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, r0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003680), 0x0, 0x12141, &(0x7f0000003780)={0x77359400}) r2 = getegid() r3 = io_uring_setup(0x5fff, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r3, 0x1b, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000001e80)='./file0\x00', 0x0) r5 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000001ec0)='io.pressure\x00', 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001f00)='cpuset.effective_cpus\x00', 0x0, 0x0) r7 = io_uring_setup(0x5fff, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r7, 0x1b, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001f40)=0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(0x0, r9, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) syz_mount_image$tmpfs(0x0, &(0x7f0000000600)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative'}}}, {@gid={'gid', 0x3d, r10}}]}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000001c0)="b39c6cb2010091c8a92b852b6cee0338895f9a84f96169d17c252076efb6ae54e4f9f20a57a2f338951b599114332bbee6f5c7a40a7e036ead8f6e458e35dbf127615c6813b8e8147887171c9451a6c9d5efdcce97a052c45d2c7ab932634d53ab29a1b4ab3ca9dee726bc76dad903a6d29221ea8fec505daf5bed3215cc8c7c374dcc9f8ee70a18073fdbac151e39", 0x8f}, {&(0x7f0000000000)="233ec950c19a839b83f529d3a0", 0xd}, {&(0x7f0000000300)="76f7f7bae6bf39c030ef23057307022528dea013b1850d55943f2e1970172f17e84a9cb6c91a8fcb76af33815da248543032efa50b31080f66aa89ae2a6a1bb4168bee8aac4862e6f7591a7f05928829242b2f1903f1639946b3aaa4e270cc596884549c736f22aafe0151404256547e081686b17a2e36c45012584ae97b8db6ceb15d71b91ac92892fb6f272c8c456cc3bfae2818d047821bca6e62e9c70fdad5d6507e3bf36a793edc6361795f8653aef3fea0837a5c002867a809466a206de96fd8997aed2e02270bff3821a4877fb3ca072927058a1ae67a272f812c15a345", 0xe1}, {&(0x7f0000000280)="931ed6e195d30d738ecb6b76e6952657dd06c3706c419ee2a749a59334af5f8e750e6bd7d1036b83a2453c65", 0x2c}, {&(0x7f0000000980)="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", 0x1000}, {&(0x7f0000000400)="e90c87d33680b5070696951fd4419a0272e0b681a5cc82bdf932771000f4a622d5975419efd6ceacc89349699e50697d8f542a7064ffcbf3fcd66f280bfde564062bf4239f2a27ac5fec7a7fe5354d844faee119686387b43c491466556fe224b1f2d30c74d6351e5564e5adf189f637655145a0727ea0e81e05104bcc9addda10d08173bdb7a64c42e200a70c384398a785dd51a3da58baa9e3264cf29032358f97c3574ed4f0214a3d44d5c44a0ce73d13904aa682ccc7dadec5f346cab3dffcb22619099627b0c940750fc2", 0xcd}, {&(0x7f0000000500)="091d19be7b8da96021d520a962f8d23d487c1ac8fb4862941fca33a83ebbeb1c71872a5fc5ce488a4ee8aee2d2093dea122ed32ba99f3ca31a968f00c1dc39edbd3f91c50f14823cf1d2e0ebcd85f37b9e99d79bcc9627f46d320c5406", 0x5d}], 0x7, &(0x7f0000000740)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r2}}}], 0x68}}, {{&(0x7f00000007c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f00000019c0)=[{&(0x7f0000000840)="45e69c25d8efde7e281e6c5444c0914ac9adf064f4da9dd0a1fd198d663742e59dca8fbf9218c18d0101733ff89be0c99ff082f9799be7a27f768424d3c6d9014062650cd8d6f109344c5146482ba20ed9b2d626d4c415a0d59fc03f008b0f82ae84eb31b7c1fa9d97225ab66ac54e58d615621658cbfdbeebc147f5740d08c937a241b6c58ab55a64d75a51f1865d626a22c37ffd79cfd71114ae5417e57a1593e7a08dfa21abde4fa13d917d3634c0cd36224b8b9341a2e6151de0816d5c0c9cb39a40a5e6e873", 0xc8}, {&(0x7f0000001980)="a068506ad48765a735eab08338159577e427d0d48ed15d2604960de32ebd9688ccf008d1385271a2", 0x28}], 0x2, 0x0, 0x0, 0x4008890}}, {{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000001a00)="5ace07a87eb60c2e620717851758626f141947d981e20b0cb2335f69648b2b7d14aca09a45981484f18a05423b6447b3426afd404b9a648d8f5c67a446d8bbf7509b21690a9fd0d904a05d480b3c0f9fc29e0f48", 0x54}, {&(0x7f0000001a80)="8c271427a0da2eefc0a961cf13da5bc8244061bfc789e3bc6acf6e485a47c5eeaad03a47bf4b68e4c62d45677fc646ba441fd1ef220eee25a76ab16f554c17055cc4426d7887b88d19ecc8aa22050cd5ea47c2a25a5b854ba5c6a9d522e7a9af31a0ab251117eb736ae73a3223599be7f39bfcd1c67240e3f28229541cb12ec631bb5f4404ae9c2cb2c1a66962cd38c1424210ceb2cb397d50c14353e33d303fb62b40096b4a887a5ea2fa417b435f391240afc30711df0f", 0xb8}], 0x2, &(0x7f0000001f80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee01}}}, @rights={{0x30, 0x1, 0x1, [r3, 0xffffffffffffffff, r4, r5, 0xffffffffffffffff, r6, r7, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r8, r9, r10}}}], 0x90, 0x2000000}}], 0x3, 0x1) keyctl$chown(0x4, r1, 0x0, r2) add_key$keyring(&(0x7f0000000140), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:19:11 executing program 0: r0 = add_key$keyring(&(0x7f0000001340), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000280)={r1, 0x42, 0x1000}, 0x0, &(0x7f00000002c0)="124b318223e1763557303b7b0966b6cf33e8271a34329b231f03affaaf805b35bce0c782d6554dd51f76660e8ec6fd7b0122f9f971f3c48cf4aeb799942de31d6f91", &(0x7f0000000340)=""/4096) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r1) request_key(&(0x7f0000000240)='trusted\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, r1) 08:19:11 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0xc0286687, &(0x7f0000000040)={0x2, 0x9, 0x1000, &(0x7f0000000240)=""/4096}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 08:19:11 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000280), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) r1 = request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) r2 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "eeaf63f1f450f6d0677502f0a94731b2a0dacc0c403bbd20fe070c1e4f73897e9b0fe38218fc94c606e67390c54e52cb21685148d7d3302cd1667a3b6fd89f5c", 0x27}, 0x48, r0) r3 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, r2) add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0, r3) add_key(&(0x7f0000000140)='syzkaller\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000980)="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", 0x1000, r1) 08:19:11 executing program 5: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, r0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='ceph\x00', &(0x7f0000000940)={'syz', 0x0}, 0x0, r1) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r2, 0xa}) add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, r2) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r4) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r4, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000200)='logon\x00', 0x0) [ 1010.420520] audit: type=1326 audit(1768810751.731:333): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8576 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f107edc9b19 code=0x0 08:19:11 executing program 5: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, r0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='ceph\x00', &(0x7f0000000940)={'syz', 0x0}, 0x0, r1) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r2, 0xa}) add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, r2) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r4) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r4, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000200)='logon\x00', 0x0) 08:19:11 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r2, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) keyctl$link(0x8, r3, r1) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) r4 = request_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)='/:^\x00', r1) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r4) 08:19:11 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) r3 = io_uring_setup(0x5fff, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r3, 0x1b, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000001500)=[{&(0x7f0000000000)=""/101, 0x65}, {&(0x7f0000000240)=""/202, 0xca}, {&(0x7f00000000c0)=""/57, 0x39}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/88, 0x58}, {&(0x7f00000013c0)=""/4, 0x4}, {&(0x7f0000001400)=""/194, 0xc2}], 0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0x0) 08:19:11 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x14, r1, 0x1}, 0x14}}, 0x0) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0291b9e9931446af41d1ac0970003c000100010000000c00040000000000a3ce2f5c"], 0x20}, 0x1, 0x0, 0x0, 0x10040000}, 0x20000010) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r1, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0xd6deb331dd54c9f3}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048084}, 0x4044000) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r3) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r2) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000100), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, r4, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40c4}, 0x54) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000001c0), r5) sendmsg$NLBL_CALIPSO_C_ADD(r5, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x4c, r1, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x4800) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, r3) 08:19:11 executing program 2: r0 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x8, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) dup(r1) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) r3 = gettid() rt_sigqueueinfo(r3, 0x0, &(0x7f00000000c0)) write$cgroup_pid(r2, &(0x7f00000000c0)=r3, 0x12) dup(0xffffffffffffffff) close_range(r0, r2, 0x0) 08:19:11 executing program 5: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, r0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='ceph\x00', &(0x7f0000000940)={'syz', 0x0}, 0x0, r1) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r2, 0xa}) add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, r2) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r4) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r4, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000200)='logon\x00', 0x0) 08:19:11 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r2) r4 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @auto=[0x64, 0x66, 0x66, 0x61, 0x39, 0x34, 0x39, 0x30, 0x64, 0x62, 0x51, 0x37, 0x36, 0x61, 0x30, 0x63]}, &(0x7f0000000200)={0x0, "956a603931ef4e7a905db610912ebcfe68a3bced864025e9c10179a5bdfb117086c8442bdb50a71bbf29e6c1eba400e67937eac00766abdd0af1f3c018af4263", 0x11}, 0x48, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r2, 0xa}) keyctl$KEYCTL_MOVE(0x1e, r0, r2, r1, 0x0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) r5 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r6 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, r4) r7 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r6) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r6, 0xa}) keyctl$KEYCTL_MOVE(0x1e, r2, r5, r6, 0x1) 08:19:11 executing program 5: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000000)) close_range(r0, 0xffffffffffffffff, 0x0) [ 1010.649578] audit: type=1326 audit(1768810751.959:334): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8612 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc3fb339b19 code=0x0 08:19:12 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) r3 = open(&(0x7f0000000280)='./file0\x00', 0x501100, 0x80) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f00000002c0)='.pending_reads\x00', 0x280400, 0x40) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000300)={0x8}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) r5 = io_uring_setup(0x5fff, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r5, 0x1b, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r5, &(0x7f0000000340)={0x3}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cpuset\x00') pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x80000) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f00000000c0)) close_range(r0, 0xffffffffffffffff, 0x0) 08:19:12 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f0000000140)='blacklist\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) 08:19:12 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, 0x0, r1, r0, 0x15b2e31414b6ad5a) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:19:12 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r1) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:19:12 executing program 5: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x80000000}}, './file0\x00'}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000040), 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 08:19:12 executing program 4: r0 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) dup(0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) 08:19:12 executing program 7: r0 = syz_io_uring_setup(0x4e69, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) epoll_pwait(r1, &(0x7f0000000000)=[{}, {}, {}], 0x3, 0x1000, &(0x7f0000000040)={[0x6]}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 08:19:12 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r0, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r2) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:19:12 executing program 4: r0 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) dup(0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) 08:19:12 executing program 5: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r1) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:19:12 executing program 1: add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r0, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) add_key$keyring(&(0x7f0000000100), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:19:12 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r1, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) keyctl$describe(0x6, r2, &(0x7f00000000c0)=""/91, 0x5b) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:19:24 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r2, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r4) r5 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r4) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r1, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) keyctl$read(0xb, r5, &(0x7f00000001c0)=""/199, 0xc7) r6 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r7 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r6) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r6, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000300)='pkcs7_test\x00', &(0x7f0000000340)=@secondary) request_key(&(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)='syz', 0xfffffffffffffffc) 08:19:24 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x7ffffd}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x7, 0x40010, r0, 0x8000000) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x3, 0x2007, @fd=r0, 0xd3a, 0x1, 0x2, 0x1, 0x1, {0x1, r3}}, 0xfffff2eb) r4 = epoll_create1(0x0) r5 = io_uring_setup(0x5fff, &(0x7f0000000140)={0x0, 0x0, 0x4}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000080)={0x2000200a}) 08:19:24 executing program 7: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f0000000180)) r1 = epoll_create1(0x0) epoll_pwait(r1, &(0x7f0000000000)=[{}, {}, {}], 0x3, 0x1000, &(0x7f0000000040)={[0x6]}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 08:19:24 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) add_key(&(0x7f0000000140)='trusted\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)="e2594f306d62d8ae85196f8dee7ca6e5d4c73796dff890fdff265871eaf98f5b87dc4b571cc2fc5c5bd52d590e08f82a0a95c16d9db8e441adf17012cd138759afcd00b0eab3fc5bd7c8cd2f4235dd3a6826b6f1d049ddd84e06cfabd422e4bd162532dc74b2", 0x66, 0xfffffffffffffffb) request_key(&(0x7f0000000280)='encrypted\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000300)='*}#%\'-)]\x9a\x00', 0xfffffffffffffff9) request_key(&(0x7f0000000100)='syzkaller\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000340)='cifs.spnego\x00', &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, r0) 08:19:24 executing program 4: r0 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) dup(0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) 08:19:24 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0x0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000180)='cifs.idmap\x00', &(0x7f00000001c0)=@keyring={'key_or_keyring:', r0}) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) 08:19:24 executing program 2: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0xffffffff00000000) 08:19:24 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) r1 = request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f00000000c0)='big_key\x00', &(0x7f0000000240)=@chain) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r4) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r4, 0xa}) keyctl$KEYCTL_MOVE(0x1e, r2, r4, r1, 0x1) 08:19:24 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='logon\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, r0) 08:19:24 executing program 2: r0 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x8, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) r2 = dup(r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) r5 = gettid() rt_sigqueueinfo(r5, 0x0, &(0x7f00000000c0)) write$cgroup_pid(r4, &(0x7f00000000c0)=r5, 0x12) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) r7 = dup(r6) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r8, @ANYBLOB=',\x00']) fsmount(r7, 0x0, 0x8d) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) close_range(r0, r4, 0x0) fsmount(r2, 0x0, 0x3) 08:19:24 executing program 1: request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='{\x00', 0xffffffffffffffff) add_key(&(0x7f0000000700)='user\x00', &(0x7f0000000740)={'syz', 0x1}, &(0x7f0000000780)="d8", 0x1, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:19:24 executing program 4: r0 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x0, 0x0}) dup(0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) 08:19:24 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000140), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) add_key$user(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000300)="13d8c21300183c9c01e3ac744d22e66b06e0bd332384b43b4434dd76f013a80630c1b8706307efa8a242d3eb28f6df57c3833831e69841ee7eb6db8086257196a3b5add7b88fe8e0d7e5218ee884202e134e6efc236af61d9f42df0467ff0cf1e029bed974a20b8627c97170841dcbdd34f5bbac287e90aba084a30507c573e50116ad927f1ab19e2146c6e8e0b2129b98439875e0a54b0fdeab165d131469cbd91670a6b3b692840a61e1cb29c45637de662a671e2be713f053c7a61281f83383a9d7050796cbbc7431701c", 0xcc, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r1, 0xa}) keyctl$search(0xa, 0x0, &(0x7f0000000000)='blacklist\x00', &(0x7f00000001c0)={'syz', 0x1}, r1) [ 1023.241522] audit: type=1326 audit(1768810764.552:335): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8680 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc3fb339b19 code=0x0 08:19:24 executing program 5: ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x400) r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000000000)={0x7000200a}) close_range(r0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x3, 0x2000) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000280)) r4 = io_uring_setup(0x5fff, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r4, 0x1b, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r5 = io_uring_setup(0x5fff, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r5, 0x1b, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000240)=[r2, r3, r4, r5], 0x4) 08:19:24 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f00000001c0)="04dc253520c536f885b248aec68feecd48337d06296815f51d66b6450bd88010b930e23938a2d0196f6ce8e7e009121be46a643a7c4a9bfc433019e486a8034e3590dda3f6ae829883d168cd548a81a5a79f1a4c824120e6bb56daf98268e35a6e7d68a4b429355711211609707f5d405fa97a05b5f8ae84d75ebd33fad119ac433f25b18ce2e9e39fa63db91ad151c355fc60d2d98a9c69e06dbfa37fd89e09b5a5c88920b348c7ada274bd2d1ed0096d641dda98684360db6eb81ffcffdb126b0a27fefb01d293104ee2171cc461ec5a", 0xd1, r0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r1) add_key(&(0x7f0000000140)='syzkaller\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000300)="23a86cca96bac5fc74efe0d960ff15a368ce54128778f103df970034494cb9fd9e", 0x21, 0xfffffffffffffff8) [ 1023.335654] audit: type=1326 audit(1768810764.647:336): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8680 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc3fb339b19 code=0x0 08:19:34 executing program 2: request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) (fail_nth: 1) 08:19:34 executing program 7: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f0000000180)) r1 = epoll_create1(0x0) epoll_pwait(r1, &(0x7f0000000000)=[{}, {}, {}], 0x3, 0x1000, &(0x7f0000000040)={[0x6]}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 08:19:34 executing program 1: add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0x0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:19:34 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000340)={'fscrypt:', @desc4}, &(0x7f0000000380)={0x0, "1122e2aeec356c6bfe9c94c5d79e36f73980b23c86d7e80cdcf7f510e4b4a40551892b7d268416855a8fae6ae796ca13d5ece3c2b3844350950913b01d320d84", 0x29}, 0x48, r0) add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, r1) add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, r1) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r0) add_key(&(0x7f00000000c0)='trusted\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)="68692b1fd71f18e65309135ed702f58f63b1c2fbc8f179f0ba30ffe36c", 0x1d, r2) 08:19:34 executing program 3: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',\x00']) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000100)) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r3) request_key(&(0x7f00000000c0)='pkcs7_test\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:19:34 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0x0) 08:19:34 executing program 4: r0 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x0, 0x0}) dup(0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) 08:19:34 executing program 5: request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) (fail_nth: 1) [ 1033.194088] audit: type=1326 audit(1768810774.503:337): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8706 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff077a56b19 code=0x0 [ 1033.210775] FAULT_INJECTION: forcing a failure. [ 1033.210775] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1033.211807] CPU: 0 UID: 0 PID: 8717 Comm: syz-executor.5 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 1033.211822] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1033.211829] Call Trace: [ 1033.211833] [ 1033.211838] dump_stack_lvl+0xfa/0x120 [ 1033.211859] should_fail_ex+0x4d7/0x5e0 [ 1033.211882] strncpy_from_user+0x3b/0x2f0 [ 1033.211900] __do_sys_request_key+0x84/0x3b0 [ 1033.211914] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1033.211932] ? __pfx___do_sys_request_key+0x10/0x10 [ 1033.211944] ? ksys_write+0x1a3/0x240 [ 1033.211957] ? __pfx_ksys_write+0x10/0x10 [ 1033.211967] ? irqentry_exit+0xee/0x650 [ 1033.211978] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1033.211992] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1033.212014] do_syscall_64+0xbf/0x420 [ 1033.212029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1033.212043] RIP: 0033:0x7fabe58dab19 [ 1033.212053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1033.212064] RSP: 002b:00007fabe2e50188 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 1033.212076] RAX: ffffffffffffffda RBX: 00007fabe59edf60 RCX: 00007fabe58dab19 [ 1033.212084] RDX: 0000000000000000 RSI: 0000000020000940 RDI: 00000000200002c0 [ 1033.212091] RBP: 00007fabe2e501d0 R08: 0000000000000000 R09: 0000000000000000 [ 1033.212099] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000001 [ 1033.212106] R13: 00007ffd5785a6bf R14: 00007fabe2e50300 R15: 0000000000022000 [ 1033.212124] [ 1033.238877] FAULT_INJECTION: forcing a failure. [ 1033.238877] name fail_usercopy, interval 1, probability 0, space 0, times 0 08:19:34 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r1, 0xa}) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r1, r3, r0, 0x1) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) [ 1033.249273] CPU: 0 UID: 0 PID: 8718 Comm: syz-executor.2 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 1033.249290] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1033.249297] Call Trace: [ 1033.249301] [ 1033.249317] dump_stack_lvl+0xfa/0x120 [ 1033.249339] should_fail_ex+0x4d7/0x5e0 [ 1033.249365] strncpy_from_user+0x3b/0x2f0 [ 1033.249384] __do_sys_request_key+0x84/0x3b0 [ 1033.249397] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1033.249416] ? __pfx___do_sys_request_key+0x10/0x10 [ 1033.249428] ? ksys_write+0x1a3/0x240 [ 1033.249441] ? __pfx_ksys_write+0x10/0x10 [ 1033.249450] ? irqentry_exit+0xee/0x650 [ 1033.249462] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1033.249476] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1033.249498] do_syscall_64+0xbf/0x420 [ 1033.249513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1033.249526] RIP: 0033:0x7fc3fb339b19 [ 1033.249535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1033.249547] RSP: 002b:00007fc3f88af188 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 1033.249559] RAX: ffffffffffffffda RBX: 00007fc3fb44cf60 RCX: 00007fc3fb339b19 [ 1033.249567] RDX: 0000000000000000 RSI: 0000000020000940 RDI: 00000000200002c0 [ 1033.249574] RBP: 00007fc3f88af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1033.249581] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000001 [ 1033.249588] R13: 00007ffd72260d1f R14: 00007fc3f88af300 R15: 0000000000022000 [ 1033.249606] 08:19:34 executing program 4: r0 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x0, 0x0}) dup(0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) 08:19:34 executing program 5: request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) (fail_nth: 2) 08:19:34 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 1) 08:19:34 executing program 2: request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) (fail_nth: 2) [ 1033.332767] audit: type=1326 audit(1768810774.643:338): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8725 comm="syz-executor.1" exe="/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fba7619eb19 code=0x0 08:19:34 executing program 5: request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) (fail_nth: 3) 08:19:34 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f0000000000)={0x10000000}) r4 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000080)={0x2000200a}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/213, 0xd5}], 0x1, &(0x7f00000003c0)=""/180, 0xb4}, 0x0, 0x2100, 0x0, {0x2}}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 08:19:34 executing program 2: request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) (fail_nth: 3) 08:19:34 executing program 5: request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) (fail_nth: 4) [ 1033.433025] FAULT_INJECTION: forcing a failure. [ 1033.433025] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1033.443668] CPU: 0 UID: 0 PID: 8741 Comm: syz-executor.5 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 1033.443688] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1033.443696] Call Trace: [ 1033.443700] [ 1033.443705] dump_stack_lvl+0xfa/0x120 [ 1033.443724] should_fail_ex+0x4d7/0x5e0 [ 1033.443747] _copy_from_user+0x30/0xd0 [ 1033.443768] memdup_user+0x7e/0xe0 [ 1033.443787] strndup_user+0x78/0xe0 [ 1033.443804] __do_sys_request_key+0x106/0x3b0 [ 1033.443818] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1033.443835] ? __pfx___do_sys_request_key+0x10/0x10 [ 1033.443847] ? ksys_write+0x1a3/0x240 [ 1033.443859] ? __pfx_ksys_write+0x10/0x10 [ 1033.443870] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1033.443885] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1033.443906] do_syscall_64+0xbf/0x420 [ 1033.443921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1033.443934] RIP: 0033:0x7fabe58dab19 [ 1033.443944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1033.443955] RSP: 002b:00007fabe2e50188 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 1033.443967] RAX: ffffffffffffffda RBX: 00007fabe59edf60 RCX: 00007fabe58dab19 [ 1033.443975] RDX: 0000000000000000 RSI: 0000000020000940 RDI: 00000000200002c0 [ 1033.443982] RBP: 00007fabe2e501d0 R08: 0000000000000000 R09: 0000000000000000 [ 1033.443989] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000001 [ 1033.443996] R13: 00007ffd5785a6bf R14: 00007fabe2e50300 R15: 0000000000022000 [ 1033.444013] [ 1034.026704] audit: type=1326 audit(1768810775.337:339): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8706 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff077a56b19 code=0x0 08:19:46 executing program 4: r0 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)) dup(0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) 08:19:46 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) 08:19:46 executing program 5: request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) (fail_nth: 5) 08:19:46 executing program 6: r0 = syz_io_uring_setup(0x4e68, &(0x7f0000000240)={0x0, 0x20000, 0x1, 0x0, 0x249}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000040)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) r3 = io_uring_setup(0x5fff, &(0x7f0000000140)={0x0, 0xe894, 0x0, 0xfffffffe}) io_uring_register$IORING_REGISTER_FILES(r3, 0x1b, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000000)={0x40000000}) close_range(r0, 0xffffffffffffffff, 0x0) 08:19:46 executing program 7: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f0000000180)) r1 = epoll_create1(0x0) epoll_pwait(r1, &(0x7f0000000000)=[{}, {}, {}], 0x3, 0x1000, &(0x7f0000000040)={[0x6]}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 08:19:46 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, &(0x7f00000001c0)="1e20db69e67bf164b844ff42e406366e7ef903d89c89e5b980e440225805b254b8658482f0a32c7ae8bcb55e8adffefaa19ed93f916ddf94c4382099b191c658351e823af5397ada4ec98a09cf92b92e204d666c22c6f49e78d488cc3e89661977777e89b9c5bb90ef8f63d4cadd4e7e34f6c21066af0a5760c2ecad06dc0d71b2d9b5cbe48ad1cf50a48ae7fc95104f95163b9ff88bd2df26a9ae68be2ad1afdfa61f5c01a73cacdb57dbf51d77dc49e0ab526fa3390cb426b1afda7b277bafaa15095d3898b1e75941ebc4abd98391669ad5f47d99", 0xd6, r0) keyctl$KEYCTL_MOVE(0x1e, r1, r0, r0, 0x0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r2, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) r4 = request_key(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='\x00', r0) keyctl$KEYCTL_MOVE(0x1e, r1, r3, r4, 0x1) request_key(&(0x7f0000000140)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000340)='syz', r0) r5 = request_key(&(0x7f00000004c0)='logon\x00', &(0x7f0000000500)={'syz', 0x3}, &(0x7f0000000540)='\x00', r3) add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, r5) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:19:46 executing program 2: request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) (fail_nth: 4) 08:19:46 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 2) [ 1045.307199] audit: type=1326 audit(1768810786.618:340): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8752 comm="syz-executor.1" exe="/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fba7619eb19 code=0x0 [ 1045.323609] FAULT_INJECTION: forcing a failure. [ 1045.323609] name failslab, interval 1, probability 0, space 0, times 0 [ 1045.325614] CPU: 1 UID: 0 PID: 8759 Comm: syz-executor.5 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 1045.325647] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1045.325662] Call Trace: [ 1045.325671] [ 1045.325681] dump_stack_lvl+0xfa/0x120 [ 1045.325717] should_fail_ex+0x4d7/0x5e0 [ 1045.325764] ? prepare_creds+0x2c/0x840 [ 1045.325798] should_failslab+0xc2/0x120 [ 1045.325828] kmem_cache_alloc_noprof+0x80/0x760 [ 1045.325884] ? prepare_creds+0x2c/0x840 [ 1045.325916] prepare_creds+0x2c/0x840 [ 1045.325955] lookup_user_key+0x985/0x12a0 [ 1045.325997] ? __pfx_lookup_user_key+0x10/0x10 [ 1045.326029] ? __might_fault+0xe0/0x190 [ 1045.326055] ? find_held_lock+0x2b/0x80 [ 1045.326096] ? __might_fault+0x138/0x190 [ 1045.326126] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 1045.326166] ? _copy_from_user+0x5b/0xd0 [ 1045.326209] ? memdup_user+0x95/0xe0 [ 1045.326251] __do_sys_request_key+0x1a3/0x3b0 [ 1045.326276] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1045.326320] ? __pfx___do_sys_request_key+0x10/0x10 [ 1045.326346] ? ksys_write+0x1a3/0x240 [ 1045.326372] ? __pfx_ksys_write+0x10/0x10 [ 1045.326396] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1045.326428] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1045.326471] do_syscall_64+0xbf/0x420 [ 1045.326503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1045.326531] RIP: 0033:0x7fabe58dab19 [ 1045.326551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1045.326575] RSP: 002b:00007fabe2e50188 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 1045.326600] RAX: ffffffffffffffda RBX: 00007fabe59edf60 RCX: 00007fabe58dab19 [ 1045.326617] RDX: 0000000000000000 RSI: 0000000020000940 RDI: 00000000200002c0 [ 1045.326632] RBP: 00007fabe2e501d0 R08: 0000000000000000 R09: 0000000000000000 [ 1045.326648] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000001 [ 1045.326663] R13: 00007ffd5785a6bf R14: 00007fabe2e50300 R15: 0000000000022000 [ 1045.326701] [ 1045.363229] FAULT_INJECTION: forcing a failure. [ 1045.363229] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1045.367381] CPU: 0 UID: 0 PID: 8766 Comm: syz-executor.2 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 1045.367400] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1045.367407] Call Trace: [ 1045.367411] [ 1045.367416] dump_stack_lvl+0xfa/0x120 [ 1045.367438] should_fail_ex+0x4d7/0x5e0 [ 1045.367462] _copy_from_user+0x30/0xd0 [ 1045.367485] memdup_user+0x7e/0xe0 [ 1045.367503] strndup_user+0x78/0xe0 [ 1045.367521] __do_sys_request_key+0x106/0x3b0 [ 1045.367535] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1045.367553] ? __pfx___do_sys_request_key+0x10/0x10 [ 1045.367565] ? ksys_write+0x1a3/0x240 [ 1045.367578] ? __pfx_ksys_write+0x10/0x10 [ 1045.367589] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1045.367603] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1045.367628] do_syscall_64+0xbf/0x420 [ 1045.367644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1045.367657] RIP: 0033:0x7fc3fb339b19 [ 1045.367667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1045.367678] RSP: 002b:00007fc3f88af188 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 1045.367690] RAX: ffffffffffffffda RBX: 00007fc3fb44cf60 RCX: 00007fc3fb339b19 [ 1045.367699] RDX: 0000000000000000 RSI: 0000000020000940 RDI: 00000000200002c0 [ 1045.367706] RBP: 00007fc3f88af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1045.367713] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000001 [ 1045.367720] R13: 00007ffd72260d1f R14: 00007fc3f88af300 R15: 0000000000022000 [ 1045.367737] 08:19:46 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r4 = io_uring_setup(0x4c89, &(0x7f0000000140)={0x0, 0x7560, 0x10, 0x4000000, 0xfa, 0x0, r3}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0x0) 08:19:46 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, r0, r0, r1, 0xc8e75dfb40ce7fbd) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:19:57 executing program 3: add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r0, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r2, 0xa}) add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r2) add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r1) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:19:57 executing program 4: r0 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)) dup(0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) 08:19:57 executing program 7: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), 0x0) r1 = epoll_create1(0x0) epoll_pwait(r1, &(0x7f0000000000)=[{}, {}, {}], 0x3, 0x1000, &(0x7f0000000040)={[0x6]}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 08:19:57 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 3) 08:19:57 executing program 5: request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) (fail_nth: 6) 08:19:57 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0x0) 08:19:57 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) add_key$keyring(&(0x7f0000000280), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r2) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, r1) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000140)='logon\x00', &(0x7f0000000400)=@secondary) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r3) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:19:57 executing program 2: request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) (fail_nth: 5) [ 1056.467105] FAULT_INJECTION: forcing a failure. [ 1056.467105] name failslab, interval 1, probability 0, space 0, times 0 [ 1056.469353] CPU: 0 UID: 0 PID: 8784 Comm: syz-executor.2 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 1056.469370] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1056.469377] Call Trace: [ 1056.469382] [ 1056.469386] dump_stack_lvl+0xfa/0x120 [ 1056.469406] should_fail_ex+0x4d7/0x5e0 [ 1056.469429] ? prepare_creds+0x2c/0x840 [ 1056.469445] should_failslab+0xc2/0x120 [ 1056.469460] kmem_cache_alloc_noprof+0x80/0x760 [ 1056.469483] ? prepare_creds+0x2c/0x840 [ 1056.469497] prepare_creds+0x2c/0x840 [ 1056.469514] lookup_user_key+0x985/0x12a0 [ 1056.469534] ? __pfx_lookup_user_key+0x10/0x10 [ 1056.469549] ? __might_fault+0xe0/0x190 [ 1056.469561] ? find_held_lock+0x2b/0x80 [ 1056.469588] ? __might_fault+0x138/0x190 [ 1056.469605] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 1056.469624] ? _copy_from_user+0x5b/0xd0 [ 1056.469643] ? memdup_user+0x95/0xe0 [ 1056.469663] __do_sys_request_key+0x1a3/0x3b0 [ 1056.469675] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1056.469692] ? __pfx___do_sys_request_key+0x10/0x10 [ 1056.469704] ? ksys_write+0x1a3/0x240 [ 1056.469716] ? __pfx_ksys_write+0x10/0x10 [ 1056.469727] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1056.469742] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1056.469761] do_syscall_64+0xbf/0x420 [ 1056.469776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1056.469789] RIP: 0033:0x7fc3fb339b19 [ 1056.469798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1056.469810] RSP: 002b:00007fc3f88af188 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 1056.469821] RAX: ffffffffffffffda RBX: 00007fc3fb44cf60 RCX: 00007fc3fb339b19 [ 1056.469829] RDX: 0000000000000000 RSI: 0000000020000940 RDI: 00000000200002c0 [ 1056.469836] RBP: 00007fc3f88af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1056.469843] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000001 [ 1056.469850] R13: 00007ffd72260d1f R14: 00007fc3f88af300 R15: 0000000000022000 [ 1056.469867] 08:19:57 executing program 2: request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) (fail_nth: 6) [ 1056.529854] audit: type=1326 audit(1768810797.841:341): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8789 comm="syz-executor.1" exe="/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fba7619eb19 code=0x0 08:19:57 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) [ 1056.632744] FAULT_INJECTION: forcing a failure. [ 1056.632744] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1056.634028] CPU: 0 UID: 0 PID: 8805 Comm: syz-executor.1 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 1056.634045] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1056.634052] Call Trace: [ 1056.634057] [ 1056.634062] dump_stack_lvl+0xfa/0x120 [ 1056.634082] should_fail_ex+0x4d7/0x5e0 [ 1056.634106] _copy_from_user+0x30/0xd0 [ 1056.634127] memdup_user+0x7e/0xe0 [ 1056.634145] strndup_user+0x78/0xe0 [ 1056.634162] __x64_sys_mount+0x136/0x310 [ 1056.634180] ? __pfx___x64_sys_mount+0x10/0x10 [ 1056.634193] ? irqentry_exit+0xee/0x650 [ 1056.634204] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1056.634221] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1056.634243] do_syscall_64+0xbf/0x420 [ 1056.634257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1056.634270] RIP: 0033:0x7fba7619eb19 [ 1056.634280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1056.634291] RSP: 002b:00007fba736f3188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1056.634303] RAX: ffffffffffffffda RBX: 00007fba762b2020 RCX: 00007fba7619eb19 [ 1056.634316] RDX: 0000000020000240 RSI: 0000000020000140 RDI: 0000000000000000 [ 1056.634324] RBP: 00007fba736f31d0 R08: 00000000200003c0 R09: 0000000000000000 [ 1056.634331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1056.634338] R13: 00007ffe1c7cb77f R14: 00007fba736f3300 R15: 0000000000022000 [ 1056.634356] 08:20:08 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f0000000100)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:20:08 executing program 7: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), 0x0) r1 = epoll_create1(0x0) epoll_pwait(r1, &(0x7f0000000000)=[{}, {}, {}], 0x3, 0x1000, &(0x7f0000000040)={[0x6]}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 08:20:08 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 4) 08:20:08 executing program 2: request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) (fail_nth: 7) 08:20:08 executing program 4: r0 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)) dup(0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) 08:20:08 executing program 5: request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) (fail_nth: 7) 08:20:08 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x3599, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0x0) 08:20:08 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x24, 0x11, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x3}, @typed={0x8, 0x0, 0x0, 0x0, @pid}]}, 0x24}], 0x1}, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) [ 1067.421296] FAULT_INJECTION: forcing a failure. [ 1067.421296] name failslab, interval 1, probability 0, space 0, times 0 [ 1067.423757] CPU: 0 UID: 0 PID: 8821 Comm: syz-executor.5 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 1067.423786] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1067.423799] Call Trace: [ 1067.423805] [ 1067.423813] dump_stack_lvl+0xfa/0x120 [ 1067.423845] should_fail_ex+0x4d7/0x5e0 [ 1067.423884] should_failslab+0xc2/0x120 [ 1067.423909] __kmalloc_noprof+0xd6/0x830 [ 1067.423937] ? __create_object+0x59/0x80 [ 1067.423966] ? security_prepare_creds+0x101/0x160 [ 1067.423999] ? security_prepare_creds+0x101/0x160 [ 1067.424023] security_prepare_creds+0x101/0x160 [ 1067.424051] prepare_creds+0x562/0x840 [ 1067.424085] lookup_user_key+0x985/0x12a0 [ 1067.424119] ? __pfx_lookup_user_key+0x10/0x10 [ 1067.424146] ? __might_fault+0xe0/0x190 [ 1067.424168] ? find_held_lock+0x2b/0x80 [ 1067.424202] ? __might_fault+0x138/0x190 [ 1067.424228] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 1067.424261] ? _copy_from_user+0x5b/0xd0 [ 1067.424296] ? memdup_user+0x95/0xe0 [ 1067.424339] __do_sys_request_key+0x1a3/0x3b0 [ 1067.424360] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1067.424391] ? __pfx___do_sys_request_key+0x10/0x10 [ 1067.424413] ? ksys_write+0x1a3/0x240 [ 1067.424434] ? __pfx_ksys_write+0x10/0x10 [ 1067.424454] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1067.424480] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1067.424517] do_syscall_64+0xbf/0x420 [ 1067.424543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1067.424565] RIP: 0033:0x7fabe58dab19 [ 1067.424583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1067.424602] RSP: 002b:00007fabe2e50188 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 1067.424623] RAX: ffffffffffffffda RBX: 00007fabe59edf60 RCX: 00007fabe58dab19 [ 1067.424637] RDX: 0000000000000000 RSI: 0000000020000940 RDI: 00000000200002c0 [ 1067.424650] RBP: 00007fabe2e501d0 R08: 0000000000000000 R09: 0000000000000000 [ 1067.424663] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000001 [ 1067.424676] R13: 00007ffd5785a6bf R14: 00007fabe2e50300 R15: 0000000000022000 [ 1067.424708] [ 1067.437496] FAULT_INJECTION: forcing a failure. [ 1067.437496] name failslab, interval 1, probability 0, space 0, times 0 [ 1067.446064] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1067.461886] audit: type=1326 audit(1768810808.773:342): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8810 comm="syz-executor.1" exe="/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fba7619eb19 code=0x0 [ 1067.478542] CPU: 1 UID: 0 PID: 8823 Comm: syz-executor.2 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 1067.478577] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1067.478590] Call Trace: [ 1067.478597] [ 1067.478606] dump_stack_lvl+0xfa/0x120 [ 1067.478640] should_fail_ex+0x4d7/0x5e0 [ 1067.478682] should_failslab+0xc2/0x120 [ 1067.478708] __kmalloc_noprof+0xd6/0x830 [ 1067.478736] ? __create_object+0x59/0x80 [ 1067.478767] ? security_prepare_creds+0x101/0x160 [ 1067.478802] ? security_prepare_creds+0x101/0x160 [ 1067.478826] security_prepare_creds+0x101/0x160 [ 1067.478854] prepare_creds+0x562/0x840 [ 1067.478890] lookup_user_key+0x985/0x12a0 [ 1067.478925] ? __pfx_lookup_user_key+0x10/0x10 [ 1067.478952] ? __might_fault+0xe0/0x190 [ 1067.478975] ? find_held_lock+0x2b/0x80 [ 1067.479011] ? __might_fault+0x138/0x190 [ 1067.479036] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 1067.479070] ? _copy_from_user+0x5b/0xd0 [ 1067.479107] ? memdup_user+0x95/0xe0 [ 1067.479144] __do_sys_request_key+0x1a3/0x3b0 [ 1067.479166] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1067.479198] ? __pfx___do_sys_request_key+0x10/0x10 [ 1067.479219] ? ksys_write+0x1a3/0x240 [ 1067.479242] ? __pfx_ksys_write+0x10/0x10 [ 1067.479262] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1067.479289] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1067.479334] do_syscall_64+0xbf/0x420 [ 1067.479361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1067.479384] RIP: 0033:0x7fc3fb339b19 [ 1067.479403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1067.479424] RSP: 002b:00007fc3f88af188 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 1067.479446] RAX: ffffffffffffffda RBX: 00007fc3fb44cf60 RCX: 00007fc3fb339b19 [ 1067.479461] RDX: 0000000000000000 RSI: 0000000020000940 RDI: 00000000200002c0 [ 1067.479474] RBP: 00007fc3f88af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1067.479487] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000001 [ 1067.479501] R13: 00007ffd72260d1f R14: 00007fc3f88af300 R15: 0000000000022000 [ 1067.479533] 08:20:08 executing program 5: request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) (fail_nth: 8) 08:20:08 executing program 4: r0 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) dup(0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) 08:20:08 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) r1 = request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000000c0)='big_key\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$revoke(0x3, 0x0) [ 1067.582149] FAULT_INJECTION: forcing a failure. [ 1067.582149] name failslab, interval 1, probability 0, space 0, times 0 [ 1067.584047] CPU: 1 UID: 0 PID: 8830 Comm: syz-executor.1 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 1067.584077] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1067.584090] Call Trace: [ 1067.584098] [ 1067.584107] dump_stack_lvl+0xfa/0x120 [ 1067.584141] should_fail_ex+0x4d7/0x5e0 [ 1067.584181] ? copy_mount_options+0x55/0x180 [ 1067.584212] should_failslab+0xc2/0x120 [ 1067.584238] __kmalloc_cache_noprof+0x80/0x730 [ 1067.584267] ? __might_fault+0xe0/0x190 [ 1067.584310] ? copy_mount_options+0x55/0x180 [ 1067.584353] ? memdup_user+0x95/0xe0 [ 1067.584397] copy_mount_options+0x55/0x180 [ 1067.584445] __x64_sys_mount+0x1ab/0x310 [ 1067.584487] ? __pfx___x64_sys_mount+0x10/0x10 [ 1067.584523] ? irqentry_exit+0xee/0x650 [ 1067.584553] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1067.584595] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1067.584651] do_syscall_64+0xbf/0x420 [ 1067.584691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1067.584725] RIP: 0033:0x7fba7619eb19 [ 1067.584749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1067.584779] RSP: 002b:00007fba736f3188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1067.584809] RAX: ffffffffffffffda RBX: 00007fba762b2020 RCX: 00007fba7619eb19 [ 1067.584829] RDX: 0000000020000240 RSI: 0000000020000140 RDI: 0000000000000000 [ 1067.584849] RBP: 00007fba736f31d0 R08: 00000000200003c0 R09: 0000000000000000 [ 1067.584868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1067.584886] R13: 00007ffe1c7cb77f R14: 00007fba736f3300 R15: 0000000000022000 [ 1067.584935] 08:20:08 executing program 2: request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) (fail_nth: 8) 08:20:09 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) r2 = request_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)='/*&\x00', r0) r3 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000340)={'fscrypt:', @auto=[0x33, 0x36, 0x63, 0x31, 0x63, 0x34, 0x63, 0x37, 0x30, 0x64, 0x30, 0x68, 0x0, 0x66, 0x39, 0x33]}, &(0x7f0000000380)={0x0, "7206d09c06c0845bdec509972cab1402cbf8c6f15b404d91078314a5678303a384c43d820ffb465eeb9733270eb2dc87a29fc7f470aab114aaeac339cc2f0014", 0x13}, 0x48, r2) r4 = request_key(&(0x7f0000000540)='.request_key_auth\x00', &(0x7f0000000580)={'syz', 0x0}, &(0x7f00000005c0)='}\x00', r0) keyctl$KEYCTL_PKEY_QUERY(0x18, r4, 0x0, &(0x7f0000000600)='-^^\x00', &(0x7f0000000640)) add_key(&(0x7f00000001c0)='cifs.idmap\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)="781fdcb7f7799c3977a5db8a9e34fa5dbe309d540919280d844675dfdf5716483b611d1a18790c66b157081ab10dd017cd70ee871a0071564f4be9fc5645898cb3edc0935e5d5c5ffcaa99254e81f176f95fc3e4ce6ac880ad2b56788607d9b4079d90", 0x63, r3) r5 = request_key(&(0x7f0000000480)='.dead\x00', &(0x7f00000004c0)={'syz', 0x1}, &(0x7f0000000500)='/*&\x00', 0xfffffffffffffff9) add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, r5) keyctl$KEYCTL_MOVE(0x1e, 0x0, r1, r2, 0x1) 08:20:09 executing program 5: request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) (fail_nth: 9) 08:20:09 executing program 4: r0 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) dup(0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) 08:20:09 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2000002, 0x8010, r0, 0x10000000) 08:20:09 executing program 0: add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0x0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) [ 1067.778613] FAULT_INJECTION: forcing a failure. [ 1067.778613] name failslab, interval 1, probability 0, space 0, times 0 [ 1067.782461] CPU: 0 UID: 0 PID: 8847 Comm: syz-executor.5 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 1067.782491] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1067.782504] Call Trace: [ 1067.782511] [ 1067.782520] dump_stack_lvl+0xfa/0x120 [ 1067.782552] should_fail_ex+0x4d7/0x5e0 [ 1067.782592] ? key_alloc+0x3e1/0x1280 [ 1067.782621] should_failslab+0xc2/0x120 [ 1067.782646] kmem_cache_alloc_noprof+0x80/0x760 [ 1067.782688] ? key_alloc+0x3e1/0x1280 [ 1067.782716] key_alloc+0x3e1/0x1280 [ 1067.782756] ? __kmalloc_noprof+0x4b0/0x830 [ 1067.782784] ? __pfx_key_alloc+0x10/0x10 [ 1067.782814] ? security_prepare_creds+0x101/0x160 [ 1067.782850] keyring_alloc+0x46/0xc0 [ 1067.782888] lookup_user_key+0xa36/0x12a0 [ 1067.782923] ? __pfx_lookup_user_key+0x10/0x10 [ 1067.782950] ? __might_fault+0xe0/0x190 [ 1067.782972] ? find_held_lock+0x2b/0x80 [ 1067.783008] ? __might_fault+0x138/0x190 [ 1067.783033] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 1067.783067] ? _copy_from_user+0x5b/0xd0 [ 1067.783102] ? memdup_user+0x95/0xe0 [ 1067.783138] __do_sys_request_key+0x1a3/0x3b0 [ 1067.783160] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1067.783191] ? __pfx___do_sys_request_key+0x10/0x10 [ 1067.783212] ? ksys_write+0x1a3/0x240 [ 1067.783234] ? __pfx_ksys_write+0x10/0x10 [ 1067.783254] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1067.783281] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1067.783325] do_syscall_64+0xbf/0x420 [ 1067.783352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1067.783375] RIP: 0033:0x7fabe58dab19 [ 1067.783392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1067.783412] RSP: 002b:00007fabe2e50188 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 1067.783434] RAX: ffffffffffffffda RBX: 00007fabe59edf60 RCX: 00007fabe58dab19 [ 1067.783448] RDX: 0000000000000000 RSI: 0000000020000940 RDI: 00000000200002c0 [ 1067.783461] RBP: 00007fabe2e501d0 R08: 0000000000000000 R09: 0000000000000000 [ 1067.783474] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000001 [ 1067.783487] R13: 00007ffd5785a6bf R14: 00007fabe2e50300 R15: 0000000000022000 [ 1067.783519] 08:20:19 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 5) 08:20:19 executing program 7: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), 0x0) r1 = epoll_create1(0x0) epoll_pwait(r1, &(0x7f0000000000)=[{}, {}, {}], 0x3, 0x1000, &(0x7f0000000040)={[0x6]}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 08:20:19 executing program 5: request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) (fail_nth: 10) 08:20:19 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) io_uring_setup(0xc87, &(0x7f0000000240)={0x0, 0xab6e, 0x0, 0x3, 0x53}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$FIONCLEX(r2, 0x5450) epoll_create1(0x0) 08:20:19 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000380), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) r1 = request_key(&(0x7f0000000140)='big_key\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000340)='keyring\x00', 0xfffffffffffffffe) add_key(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f00000001c0)="d7cc118fa058a42bc7f41bfb0bcf14ff84b1c3e65c0dc5fc073a26ec364daf9b9e1d2037c6e1c8afe3a56660fbbd5d09da3fb6580d468adef6d10943e6ecbcce9ea00e060b3525dd77ebe651fb85921ca835ac53df434a2de6b7592624e0501a58dd0b93072b32bfd24ac9a92eb966e68e7da24461cd4ee5975664b489068af48eb7e416dc03840487da72930a1027224043a88b890ad346c01f449405fdf628bc4cdb6c6b7f13be7768a862867aa93120a71ee0ddc52de36176ded122b6bdcb9a728c19962920451244484228aaec87361d9b845a77630919931897dfc04eb50fa19da9dc8d6c7bcf2c566583f8d369c3ed", 0xf2, r1) 08:20:19 executing program 2: request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) (fail_nth: 9) 08:20:19 executing program 4: r0 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) dup(0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) 08:20:19 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x10e00, 0x0) fcntl$setstatus(r0, 0x4, 0x42c00) ioctl$SNAPSHOT_S2RAM(r0, 0x330b) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000140)={'fscrypt:', @desc3}, &(0x7f00000001c0)={0x0, "c68e92ae04f88b1d1a5d49f8175011b8d358fe526583aa2458f6d5cba3386fb0388828cd521ea546c454958482c167e666865e783e3f33dd46a31ea74aa51bd3", 0x33}, 0x48, r2) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) [ 1078.057195] audit: type=1326 audit(1768810819.368:343): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8859 comm="syz-executor.1" exe="/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fba7619eb19 code=0x0 [ 1078.080305] FAULT_INJECTION: forcing a failure. [ 1078.080305] name failslab, interval 1, probability 0, space 0, times 0 [ 1078.081264] CPU: 0 UID: 0 PID: 8866 Comm: syz-executor.2 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 1078.081279] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1078.081286] Call Trace: [ 1078.081291] [ 1078.081296] dump_stack_lvl+0xfa/0x120 [ 1078.081319] should_fail_ex+0x4d7/0x5e0 [ 1078.081343] ? key_alloc+0x3e1/0x1280 [ 1078.081360] should_failslab+0xc2/0x120 [ 1078.081376] kmem_cache_alloc_noprof+0x80/0x760 [ 1078.081399] ? key_alloc+0x3e1/0x1280 [ 1078.081414] key_alloc+0x3e1/0x1280 [ 1078.081436] ? __kmalloc_noprof+0x4b0/0x830 [ 1078.081451] ? __pfx_key_alloc+0x10/0x10 [ 1078.081467] ? security_prepare_creds+0x101/0x160 [ 1078.081487] keyring_alloc+0x46/0xc0 [ 1078.081508] lookup_user_key+0xa36/0x12a0 [ 1078.081528] ? __pfx_lookup_user_key+0x10/0x10 [ 1078.081542] ? __might_fault+0xe0/0x190 [ 1078.081555] ? find_held_lock+0x2b/0x80 [ 1078.081575] ? __might_fault+0x138/0x190 [ 1078.081588] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 1078.081607] ? _copy_from_user+0x5b/0xd0 [ 1078.081626] ? memdup_user+0x95/0xe0 [ 1078.081646] __do_sys_request_key+0x1a3/0x3b0 [ 1078.081658] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1078.081675] ? __pfx___do_sys_request_key+0x10/0x10 [ 1078.081687] ? ksys_write+0x1a3/0x240 [ 1078.081699] ? __pfx_ksys_write+0x10/0x10 [ 1078.081710] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1078.081724] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1078.081744] do_syscall_64+0xbf/0x420 [ 1078.081759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1078.081772] RIP: 0033:0x7fc3fb339b19 [ 1078.081781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1078.081792] RSP: 002b:00007fc3f88af188 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 1078.081804] RAX: ffffffffffffffda RBX: 00007fc3fb44cf60 RCX: 00007fc3fb339b19 [ 1078.081812] RDX: 0000000000000000 RSI: 0000000020000940 RDI: 00000000200002c0 [ 1078.081829] RBP: 00007fc3f88af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1078.081838] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000001 [ 1078.081847] R13: 00007ffd72260d1f R14: 00007fc3f88af300 R15: 0000000000022000 [ 1078.081870] 08:20:19 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x2, 0xb47a}}, './file0\x00'}) r4 = io_uring_setup(0x398d, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x0, 0x20f}) io_uring_register$IORING_REGISTER_FILES(r4, 0x1b, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x288000, 0x0) r6 = io_uring_setup(0x5fff, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r6, 0x1b, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r7 = io_uring_setup(0x5fff, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r7, 0x1b, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f00000000c0)=[r4, r0, r5, r2, r3, 0xffffffffffffffff, r1, r6, r7, r3], 0xa) io_uring_setup(0x24a5, &(0x7f0000000240)={0x0, 0x4429, 0x25, 0x2, 0x15d, 0x0, r3}) 08:20:19 executing program 4: fsopen(&(0x7f0000000040)='devpts\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) dup(0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 08:20:19 executing program 2: request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) (fail_nth: 10) 08:20:19 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/67, 0x43}, {&(0x7f0000000240)=""/117, 0x75}], 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000002c0)={0x14}) close_range(r0, 0xffffffffffffffff, 0x0) 08:20:19 executing program 5: request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) (fail_nth: 11) 08:20:19 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, r0) 08:20:19 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000000c0)='cifs.spnego\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='syz', 0xfffffffffffffffd) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) r2 = add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000280)={'fscrypt:', @desc3}, &(0x7f0000000400)={0x0, "f147f2392fd29e07aa350a4aba4d7f1ba757d07f726c2a408285f098f886c996db04083584e829349a384af3879e5c54939cf93fc223bfedbe9b76833e4ca908", 0x3b}, 0x48, r1) add_key(&(0x7f00000001c0)='blacklist\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000300)="10fc0bac117293db380332cfa868f558bfd4253153f48b9a24ef676a38361b0ef3af32e871bf76df10b674a3fa345fc9db31818fda6d3b0933f2d9c36efd3502f2fed32d621d70a3257c9462b176df76ef46fff8c54c354c665e05633a147a313332626200091d5b4c2d10daafeefe82847f15db2415be0c4dd0a56217a8e8133d131d4e55a56e7ff98b0a43276b47d7de042d1ba1561778ce87e3651f8bd5a618f21b9b0d4b2132891579e3740561e4a9bba15ac196992fb60144f97e6df0888ba60487cdd6ed7dc9fd626481557eb4692ff0a59f6890f8bbe0e9f6b0d0e224ce305b590c393c666fa58a3ff89eed0a12a9e84665", 0xf5, r2) [ 1078.267450] audit: type=1326 audit(1768810819.578:344): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8889 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f107edc9b19 code=0x0 [ 1078.316461] FAULT_INJECTION: forcing a failure. [ 1078.316461] name failslab, interval 1, probability 0, space 0, times 0 [ 1078.322397] CPU: 0 UID: 0 PID: 8898 Comm: syz-executor.5 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 1078.322419] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1078.322427] Call Trace: [ 1078.322432] [ 1078.322437] dump_stack_lvl+0xfa/0x120 [ 1078.322461] should_fail_ex+0x4d7/0x5e0 [ 1078.322485] should_failslab+0xc2/0x120 [ 1078.322501] __kmalloc_node_track_caller_noprof+0xd7/0x840 [ 1078.322525] ? key_alloc+0x43f/0x1280 [ 1078.322542] ? kmem_cache_alloc_noprof+0x499/0x760 [ 1078.322564] ? kmemdup_noprof+0x2b/0x60 [ 1078.322581] kmemdup_noprof+0x2b/0x60 [ 1078.322598] key_alloc+0x43f/0x1280 [ 1078.322621] ? __kmalloc_noprof+0x4b0/0x830 [ 1078.322637] ? __pfx_key_alloc+0x10/0x10 [ 1078.322654] ? security_prepare_creds+0x101/0x160 [ 1078.322675] keyring_alloc+0x46/0xc0 [ 1078.322697] lookup_user_key+0xa36/0x12a0 [ 1078.322717] ? __pfx_lookup_user_key+0x10/0x10 [ 1078.322733] ? __might_fault+0xe0/0x190 [ 1078.322745] ? find_held_lock+0x2b/0x80 [ 1078.322767] ? __might_fault+0x138/0x190 [ 1078.322786] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 1078.322806] ? _copy_from_user+0x5b/0xd0 [ 1078.322827] ? memdup_user+0x95/0xe0 [ 1078.322846] __do_sys_request_key+0x1a3/0x3b0 [ 1078.322860] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1078.322878] ? __pfx___do_sys_request_key+0x10/0x10 [ 1078.322890] ? ksys_write+0x1a3/0x240 [ 1078.322906] ? __pfx_ksys_write+0x10/0x10 [ 1078.322918] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1078.322933] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1078.322954] do_syscall_64+0xbf/0x420 [ 1078.322970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1078.322983] RIP: 0033:0x7fabe58dab19 [ 1078.322994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1078.323007] RSP: 002b:00007fabe2e50188 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 1078.323020] RAX: ffffffffffffffda RBX: 00007fabe59edf60 RCX: 00007fabe58dab19 [ 1078.323028] RDX: 0000000000000000 RSI: 0000000020000940 RDI: 00000000200002c0 [ 1078.323037] RBP: 00007fabe2e501d0 R08: 0000000000000000 R09: 0000000000000000 [ 1078.323044] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000002 [ 1078.323052] R13: 00007ffd5785a6bf R14: 00007fabe2e50300 R15: 0000000000022000 [ 1078.323070] 08:20:31 executing program 4: fsopen(&(0x7f0000000040)='devpts\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) dup(0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 08:20:31 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0)={0x0, 0x4, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0x0) 08:20:31 executing program 7: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) epoll_create1(0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}], 0x3, 0x1000, &(0x7f0000000040)={[0x6]}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 08:20:31 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:20:31 executing program 2: request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) (fail_nth: 11) 08:20:31 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='user\x00', &(0x7f0000000940)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) 08:20:31 executing program 5: request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) (fail_nth: 12) 08:20:31 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 6) [ 1090.059070] audit: type=1326 audit(1768810831.370:345): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8905 comm="syz-executor.1" exe="/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fba7619eb19 code=0x0 [ 1090.062287] FAULT_INJECTION: forcing a failure. [ 1090.062287] name failslab, interval 1, probability 0, space 0, times 0 [ 1090.066019] CPU: 1 UID: 0 PID: 8916 Comm: syz-executor.2 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 1090.066050] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1090.066063] Call Trace: [ 1090.066070] [ 1090.066079] dump_stack_lvl+0xfa/0x120 [ 1090.066112] should_fail_ex+0x4d7/0x5e0 [ 1090.066152] should_failslab+0xc2/0x120 [ 1090.066178] __kmalloc_node_track_caller_noprof+0xd7/0x840 [ 1090.066218] ? key_alloc+0x43f/0x1280 [ 1090.066247] ? kmem_cache_alloc_noprof+0x499/0x760 [ 1090.066284] ? kmemdup_noprof+0x2b/0x60 [ 1090.066321] kmemdup_noprof+0x2b/0x60 [ 1090.066351] key_alloc+0x43f/0x1280 [ 1090.066391] ? __kmalloc_noprof+0x4b0/0x830 [ 1090.066420] ? __pfx_key_alloc+0x10/0x10 [ 1090.066449] ? security_prepare_creds+0x101/0x160 [ 1090.066485] keyring_alloc+0x46/0xc0 [ 1090.066522] lookup_user_key+0xa36/0x12a0 [ 1090.066558] ? __pfx_lookup_user_key+0x10/0x10 [ 1090.066585] ? __might_fault+0xe0/0x190 [ 1090.066607] ? find_held_lock+0x2b/0x80 [ 1090.066644] ? __might_fault+0x138/0x190 [ 1090.066669] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 1090.066702] ? _copy_from_user+0x5b/0xd0 [ 1090.066739] ? memdup_user+0x95/0xe0 [ 1090.066773] __do_sys_request_key+0x1a3/0x3b0 [ 1090.066794] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1090.066825] ? __pfx___do_sys_request_key+0x10/0x10 [ 1090.066846] ? ksys_write+0x1a3/0x240 [ 1090.066868] ? __pfx_ksys_write+0x10/0x10 [ 1090.066888] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1090.066914] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1090.066951] do_syscall_64+0xbf/0x420 [ 1090.066978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1090.067001] RIP: 0033:0x7fc3fb339b19 [ 1090.067019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1090.067039] RSP: 002b:00007fc3f88af188 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 1090.067061] RAX: ffffffffffffffda RBX: 00007fc3fb44cf60 RCX: 00007fc3fb339b19 [ 1090.067075] RDX: 0000000000000000 RSI: 0000000020000940 RDI: 00000000200002c0 [ 1090.067088] RBP: 00007fc3f88af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1090.067101] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000002 [ 1090.067114] R13: 00007ffd72260d1f R14: 00007fc3f88af300 R15: 0000000000022000 [ 1090.067145] 08:20:31 executing program 5: request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) (fail_nth: 13) 08:20:31 executing program 7: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) epoll_create1(0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}], 0x3, 0x1000, &(0x7f0000000040)={[0x6]}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) [ 1090.160555] FAULT_INJECTION: forcing a failure. [ 1090.160555] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1090.165386] audit: type=1326 audit(1768810831.468:346): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8909 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f107edc9b19 code=0x0 [ 1090.171390] CPU: 0 UID: 0 PID: 8923 Comm: syz-executor.1 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 1090.171424] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1090.171437] Call Trace: [ 1090.171446] [ 1090.171455] dump_stack_lvl+0xfa/0x120 [ 1090.171489] should_fail_ex+0x4d7/0x5e0 [ 1090.171531] _copy_from_user+0x30/0xd0 [ 1090.171571] copy_mount_options+0x76/0x180 [ 1090.171608] __x64_sys_mount+0x1ab/0x310 [ 1090.171638] ? __pfx___x64_sys_mount+0x10/0x10 [ 1090.171665] ? irqentry_exit+0xee/0x650 [ 1090.171686] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1090.171716] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1090.171756] do_syscall_64+0xbf/0x420 [ 1090.171785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1090.171809] RIP: 0033:0x7fba7619eb19 [ 1090.171828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1090.171850] RSP: 002b:00007fba736f3188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1090.171873] RAX: ffffffffffffffda RBX: 00007fba762b2020 RCX: 00007fba7619eb19 [ 1090.171888] RDX: 0000000020000240 RSI: 0000000020000140 RDI: 0000000000000000 [ 1090.171902] RBP: 00007fba736f31d0 R08: 00000000200003c0 R09: 0000000000000000 [ 1090.171916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1090.171930] R13: 00007ffe1c7cb77f R14: 00007fba736f3300 R15: 0000000000022000 [ 1090.171964] 08:20:31 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000140), 0x9, 0x800) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x7f, 0x6f8e, 0x34, @mcast2, @mcast1, 0x8000, 0x8, 0x7, 0x3}}) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r1) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) [ 1090.240608] FAULT_INJECTION: forcing a failure. [ 1090.240608] name failslab, interval 1, probability 0, space 0, times 0 [ 1090.258422] CPU: 0 UID: 0 PID: 8927 Comm: syz-executor.5 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 1090.258457] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1090.258471] Call Trace: [ 1090.258479] [ 1090.258489] dump_stack_lvl+0xfa/0x120 [ 1090.258522] should_fail_ex+0x4d7/0x5e0 [ 1090.258565] should_failslab+0xc2/0x120 [ 1090.258592] __kmalloc_noprof+0xd6/0x830 [ 1090.258623] ? key_set_index_key+0x328/0x5a0 [ 1090.258661] ? security_key_alloc+0x158/0x1d0 [ 1090.258703] ? security_key_alloc+0x158/0x1d0 [ 1090.258745] security_key_alloc+0x158/0x1d0 [ 1090.258784] key_alloc+0x88d/0x1280 [ 1090.258827] ? __kmalloc_noprof+0x4b0/0x830 [ 1090.258857] ? __pfx_key_alloc+0x10/0x10 [ 1090.258889] ? security_prepare_creds+0x101/0x160 [ 1090.258926] keyring_alloc+0x46/0xc0 [ 1090.258969] lookup_user_key+0xa36/0x12a0 [ 1090.259008] ? __pfx_lookup_user_key+0x10/0x10 [ 1090.259036] ? __might_fault+0xe0/0x190 [ 1090.259060] ? find_held_lock+0x2b/0x80 [ 1090.259097] ? __might_fault+0x138/0x190 [ 1090.259125] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 1090.259160] ? _copy_from_user+0x5b/0xd0 [ 1090.259198] ? memdup_user+0x95/0xe0 [ 1090.259236] __do_sys_request_key+0x1a3/0x3b0 [ 1090.259259] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1090.259292] ? __pfx___do_sys_request_key+0x10/0x10 [ 1090.259315] ? ksys_write+0x1a3/0x240 [ 1090.259337] ? __pfx_ksys_write+0x10/0x10 [ 1090.259359] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1090.259387] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1090.259426] do_syscall_64+0xbf/0x420 [ 1090.259455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1090.259479] RIP: 0033:0x7fabe58dab19 [ 1090.259498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1090.259520] RSP: 002b:00007fabe2e50188 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 1090.259543] RAX: ffffffffffffffda RBX: 00007fabe59edf60 RCX: 00007fabe58dab19 [ 1090.259558] RDX: 0000000000000000 RSI: 0000000020000940 RDI: 00000000200002c0 [ 1090.259572] RBP: 00007fabe2e501d0 R08: 0000000000000000 R09: 0000000000000000 [ 1090.259586] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000002 [ 1090.259600] R13: 00007ffd5785a6bf R14: 00007fabe2e50300 R15: 0000000000022000 [ 1090.259634] 08:20:31 executing program 6: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000700)={[0xdb0]}, 0x8, 0x800) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000740)=0x3, 0x4) r1 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r2 = epoll_create1(0x0) r3 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080)={0x2000200a}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) r5 = dup(r4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB="2c7766a5bd2863bcf1aa273ada7c29646e6f3d", @ANYRESHEX=r6, @ANYBLOB=',\x00']) ioctl$sock_SIOCGIFBR(r5, 0x8940, &(0x7f00000000c0)=@generic={0x0, 0x4, 0x100000001}) r7 = io_uring_setup(0x5fff, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r7, 0x1b, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r7, &(0x7f0000000000)={0x1}) close_range(r1, 0xffffffffffffffff, 0x0) 08:20:31 executing program 2: request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) (fail_nth: 12) 08:20:31 executing program 7: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) epoll_create1(0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}], 0x3, 0x1000, &(0x7f0000000040)={[0x6]}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 08:20:31 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', 0x0, 0xa}) request_key(&(0x7f0000000640)='logon\x00', &(0x7f0000000680)={'syz', 0x0}, &(0x7f00000006c0)='keyring\x00', 0x0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000300)="5815a93398923ebd2bd25298c7986c4c6bfb92b53e6f9cb8873c6f8815604727f9b719cd5ee238ee1a361adec1305cb9c10e7e3c9fb380643036f2b9857413c618f3d5716ca1202924c32106d002d2acc7b267b08f57d98f73b41f33ac1dcbecba186ba4764b775da338027ae618d23b125bbe074067dbf6458a598ef42ef22514477192f56114d52ed7058d1d19ac95424c1be2228fd3f46687115e7678315bd449aa094dbb721758c06ca8ab9e8a800813ae22e036bc1d3efbf66eefa616dc77767dfa9cbe97b3ee5d9cb105432c2073", 0xd1, r2) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r4) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r4, 0xa}) add_key$user(&(0x7f0000000280), &(0x7f0000000400)={'syz', 0x1}, &(0x7f0000000440)="fd0300f82a0519a15ebc3ecb7cc99ea26273c55c15553217fc09ccbd585bf9d4b38731888b7d8c19071b0e437e06213d9b6ad4aff4a2b49c7736ed13a96ef7f45641be0ca00c8548f212db332a8b72897deb86fbc03eeda209", 0x59, r4) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r3, 0xa}) add_key$keyring(&(0x7f00000005c0), &(0x7f0000000600)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, r6) r7 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x3}, 0x0, 0x0, r4) add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, r7) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) 08:20:31 executing program 5: request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) (fail_nth: 14) [ 1090.428138] audit: type=1326 audit(1768810831.738:347): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8930 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe995e05b19 code=0x0 08:20:41 executing program 2: request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) (fail_nth: 13) 08:20:41 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:20:41 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000000)={0x0, 0x0, 0x4, 0x0, 0x8c}) r3 = io_uring_setup(0x5fff, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r3, 0x1b, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(r3, r4, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x10080, 0x0) r7 = fsopen(&(0x7f0000000140)='debugfs\x00', 0x0) io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000000240)=[r1, r7, r1, r0], 0x4) close_range(r0, 0xffffffffffffffff, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r8, 0x1, &(0x7f0000000140)=[0x0]) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) r10 = dup(r9) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r11}}) io_submit(r8, 0x3, &(0x7f0000000500)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x7, 0x5, 0xffffffffffffffff, &(0x7f00000002c0)="023c85108ab207c6429ceb7d70b8c74f5a9c58092b32a0c53bda8c24161153f275c0d67911", 0x25, 0x7ca, 0x0, 0x1, r5}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x3, 0x81, 0xffffffffffffffff, &(0x7f0000000340)="ab5ebde4ffcbcf11ffa20188e7e52e18b99dc6719e2e4ca813e34f4fa861cf4de4af9957c8e0c817d23da261e1e2cb61fdcb603f6ae5223e727d6ae65bce8b22491b87e0913cec4bc7254aebc356335eb514a12dd4fddc8bccaf954b076782eaf23660075f9e671ce3dbe99936944cb3e099c970152dd59d82825d3092bb50d9945787ad534a0645b6768c805ce22a6e1e34d067428fef78028f292b8dae7537b140027674f8cffe6cb2d37e5683725b0fca87bcbbd2117024ca43cd3b532090e9c97ad43cf78a9a5a87899373b0adccacd0f7d40d8e555566633fe8f740a166b61a147d765e6132242c8442e5cc2da1546d", 0xf2, 0x2, 0x0, 0x1, r6}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x8, 0xb6, 0xffffffffffffffff, &(0x7f0000000480)="7f726782e4512d6d9f3618e322658aea11e4839c0588e31fb3aed67e507dc479ec2e0c5ae15e49fedc", 0x29, 0x100000001, 0x0, 0x0, r10}]) 08:20:41 executing program 5: request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) (fail_nth: 15) 08:20:41 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r1, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, 0x0, r2, r3, 0xe305fec475600922) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:20:41 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 7) 08:20:41 executing program 4: fsopen(&(0x7f0000000040)='devpts\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) dup(0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 08:20:41 executing program 7: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) epoll_pwait(r1, 0x0, 0x0, 0x1000, &(0x7f0000000040)={[0x6]}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) [ 1100.572649] FAULT_INJECTION: forcing a failure. [ 1100.572649] name failslab, interval 1, probability 0, space 0, times 0 [ 1100.579833] CPU: 0 UID: 0 PID: 8952 Comm: syz-executor.5 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 1100.579865] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1100.579878] Call Trace: [ 1100.579886] [ 1100.579894] dump_stack_lvl+0xfa/0x120 [ 1100.579926] should_fail_ex+0x4d7/0x5e0 [ 1100.579966] ? assoc_array_insert+0xe1/0x2b10 [ 1100.579995] should_failslab+0xc2/0x120 [ 1100.580020] __kmalloc_cache_noprof+0x80/0x730 [ 1100.580052] ? __pfx_perf_trace_contention_end+0x10/0x10 [ 1100.580092] ? assoc_array_insert+0xe1/0x2b10 [ 1100.580120] assoc_array_insert+0xe1/0x2b10 [ 1100.580160] ? key_link+0x2b3/0x350 [ 1100.580182] ? lock_acquire+0x15e/0x2d0 [ 1100.580211] ? __pfx___mutex_lock+0x10/0x10 [ 1100.580233] ? __pfx_assoc_array_insert+0x10/0x10 [ 1100.580272] ? down_write+0x119/0x1f0 [ 1100.580295] ? __pfx_down_write+0x10/0x10 [ 1100.580334] __key_link_begin+0xf0/0x260 [ 1100.580357] key_link+0x106/0x350 [ 1100.580377] ? selinux_key_permission+0x12e/0x1e0 [ 1100.580406] ? __pfx_key_link+0x10/0x10 [ 1100.580430] ? key_task_permission+0x2ba/0x410 [ 1100.580462] request_key_and_link+0x2a7/0x12e0 [ 1100.580493] ? key_type_lookup+0x1e/0x100 [ 1100.580525] ? __pfx_request_key_and_link+0x10/0x10 [ 1100.580563] ? __pfx_key_default_cmp+0x10/0x10 [ 1100.580598] ? __pfx_keyring_search_iterator+0x10/0x10 [ 1100.580635] ? _copy_from_user+0x5b/0xd0 [ 1100.580677] __do_sys_request_key+0x21e/0x3b0 [ 1100.580703] ? __pfx___do_sys_request_key+0x10/0x10 [ 1100.580724] ? ksys_write+0x1a3/0x240 [ 1100.580746] ? __pfx_ksys_write+0x10/0x10 [ 1100.580766] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1100.580794] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1100.580830] do_syscall_64+0xbf/0x420 [ 1100.580858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1100.580880] RIP: 0033:0x7fabe58dab19 [ 1100.580898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1100.580918] RSP: 002b:00007fabe2e50188 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 1100.580939] RAX: ffffffffffffffda RBX: 00007fabe59edf60 RCX: 00007fabe58dab19 [ 1100.580953] RDX: 0000000000000000 RSI: 0000000020000940 RDI: 00000000200002c0 [ 1100.580966] RBP: 00007fabe2e501d0 R08: 0000000000000000 R09: 0000000000000000 [ 1100.580979] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000002 [ 1100.580992] R13: 00007ffd5785a6bf R14: 00007fabe2e50300 R15: 0000000000022000 [ 1100.581025] [ 1100.629947] FAULT_INJECTION: forcing a failure. [ 1100.629947] name failslab, interval 1, probability 0, space 0, times 0 [ 1100.631756] CPU: 1 UID: 0 PID: 8964 Comm: syz-executor.2 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 1100.631786] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1100.631799] Call Trace: [ 1100.631807] [ 1100.631816] dump_stack_lvl+0xfa/0x120 [ 1100.631850] should_fail_ex+0x4d7/0x5e0 [ 1100.631891] should_failslab+0xc2/0x120 [ 1100.631917] __kmalloc_noprof+0xd6/0x830 [ 1100.631947] ? key_set_index_key+0x328/0x5a0 [ 1100.631984] ? security_key_alloc+0x158/0x1d0 [ 1100.632023] ? security_key_alloc+0x158/0x1d0 [ 1100.632055] security_key_alloc+0x158/0x1d0 [ 1100.632091] key_alloc+0x88d/0x1280 [ 1100.632132] ? __kmalloc_noprof+0x4b0/0x830 [ 1100.632160] ? __pfx_key_alloc+0x10/0x10 [ 1100.632189] ? security_prepare_creds+0x101/0x160 [ 1100.632224] keyring_alloc+0x46/0xc0 [ 1100.632261] lookup_user_key+0xa36/0x12a0 [ 1100.632297] ? __pfx_lookup_user_key+0x10/0x10 [ 1100.632333] ? __might_fault+0xe0/0x190 [ 1100.632356] ? find_held_lock+0x2b/0x80 [ 1100.632391] ? __might_fault+0x138/0x190 [ 1100.632417] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 1100.632452] ? _copy_from_user+0x5b/0xd0 [ 1100.632491] ? memdup_user+0x95/0xe0 [ 1100.632527] __do_sys_request_key+0x1a3/0x3b0 [ 1100.632555] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1100.632601] ? __pfx___do_sys_request_key+0x10/0x10 [ 1100.632623] ? ksys_write+0x1a3/0x240 [ 1100.632645] ? __pfx_ksys_write+0x10/0x10 [ 1100.632665] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1100.632692] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1100.632728] do_syscall_64+0xbf/0x420 [ 1100.632755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1100.632779] RIP: 0033:0x7fc3fb339b19 [ 1100.632797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1100.632817] RSP: 002b:00007fc3f88af188 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 1100.632838] RAX: ffffffffffffffda RBX: 00007fc3fb44cf60 RCX: 00007fc3fb339b19 [ 1100.632853] RDX: 0000000000000000 RSI: 0000000020000940 RDI: 00000000200002c0 [ 1100.632866] RBP: 00007fc3f88af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1100.632878] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000002 [ 1100.632891] R13: 00007ffd72260d1f R14: 00007fc3f88af300 R15: 0000000000022000 [ 1100.632923] [ 1100.634431] audit: type=1326 audit(1768810841.936:348): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8949 comm="syz-executor.1" exe="/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fba7619eb19 code=0x0 [ 1100.680788] audit: type=1326 audit(1768810841.939:349): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8954 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f107edc9b19 code=0x0 [ 1100.684225] audit: type=1326 audit(1768810841.991:350): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8956 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe995e05b19 code=0x0 [ 1100.727682] FAULT_INJECTION: forcing a failure. [ 1100.727682] name failslab, interval 1, probability 0, space 0, times 0 [ 1100.731403] CPU: 0 UID: 0 PID: 8968 Comm: syz-executor.1 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 1100.731433] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1100.731446] Call Trace: [ 1100.731453] [ 1100.731461] dump_stack_lvl+0xfa/0x120 [ 1100.731494] should_fail_ex+0x4d7/0x5e0 [ 1100.731534] ? do_getname+0x2b/0x3d0 [ 1100.731561] should_failslab+0xc2/0x120 [ 1100.731586] kmem_cache_alloc_noprof+0x80/0x760 [ 1100.731627] ? do_getname+0x2b/0x3d0 [ 1100.731652] ? _copy_from_user+0x5b/0xd0 [ 1100.731683] do_getname+0x2b/0x3d0 [ 1100.731714] user_path_at+0x29/0x90 [ 1100.731736] __x64_sys_mount+0x1fb/0x310 [ 1100.731764] ? __pfx___x64_sys_mount+0x10/0x10 [ 1100.731789] ? irqentry_exit+0xee/0x650 [ 1100.731810] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1100.731848] do_syscall_64+0xbf/0x420 [ 1100.731874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1100.731897] RIP: 0033:0x7fba7619eb19 [ 1100.731915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1100.731935] RSP: 002b:00007fba736f3188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1100.731956] RAX: ffffffffffffffda RBX: 00007fba762b2020 RCX: 00007fba7619eb19 [ 1100.731970] RDX: 0000000020000240 RSI: 0000000020000140 RDI: 0000000000000000 [ 1100.731983] RBP: 00007fba736f31d0 R08: 00000000200003c0 R09: 0000000000000000 [ 1100.731996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1100.732009] R13: 00007ffe1c7cb77f R14: 00007fba736f3300 R15: 0000000000022000 [ 1100.732041] 08:20:42 executing program 5: request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) (fail_nth: 16) 08:20:42 executing program 2: request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) (fail_nth: 14) 08:20:42 executing program 3: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, r0) add_key$user(&(0x7f0000000180), &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)="edebcc000023ad240535d06e40cb3c52f09c47639e424f9dc6", 0x41, r1) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000300)="8cc0e789f1b63d1ccb7d4144b896fea0d35e1d3325995e3048a06addbf9a11df7697f39d2fb8ccb1a0b40579209610b250b3ce5f2acf96b3cb85af791b1a599c77d870b03244243ec7430874ab86f5cff3d1a011b33b187397fea369155dde2f35ff909224b787eb2c45c339fb337e7f4fe2f188b1aa19a63a57d32e940655357c557db252a5a9d65ace426bb6ec3e08636929e2558ff6120ec98c8cda179febc75b11665677b25a1b63defb706b52129ea4c4ea7eced4f5f777797d4ad804b96a1bf0a6a92ae920bacf23160953f4f4383c0201912d2564b91b7a4024ed71a61c1ed437cdf94ef175a660d96a6c061ec5e7", 0xf2, r1) 08:20:42 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r0, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r2) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:20:42 executing program 7: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) epoll_pwait(r1, 0x0, 0x0, 0x1000, &(0x7f0000000040)={[0x6]}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 08:20:42 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) epoll_create1(0x0) io_uring_setup(0x5fff, &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) 08:20:42 executing program 2: request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) (fail_nth: 15) 08:20:42 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x0}, 0x0, 0xfffffffffffffffe) 08:20:42 executing program 5: request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) (fail_nth: 17) 08:20:42 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, r0) r2 = request_key(&(0x7f00000003c0)='rxrpc\x00', &(0x7f0000000400)={'syz', 0x2}, &(0x7f0000000440)='\x00', r0) add_key$user(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000300)="8baaf3680c2b0d57ef4289ea2c972b235689c35ecfa126b4b62bee50e92c73647ef7bcae266ab3b16bc63a21e20baa6381c92e04b0fd75c64ee1f59ac0da8732ced656f5e8fb521a6ef30c24569224cd04ea96493b148d959c48df4dede7883375e7f60466ded852cd0f", 0x6a, r1) syz_mount_image$tmpfs(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setgroups(0x0, 0x0) chown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000500)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r3) r5 = getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) syz_mount_image$tmpfs(0x0, &(0x7f0000000600)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative'}}}, {@gid={'gid', 0x3d, r6}}]}) getgroups(0x4, &(0x7f0000000540)=[0xee01, r5, 0xee01, r6]) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r3, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000480)='blacklist\x00', &(0x7f00000004c0)=@chain={'key_or_keyring:', r2}) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) r7 = request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, r7) [ 1100.998308] FAULT_INJECTION: forcing a failure. [ 1100.998308] name failslab, interval 1, probability 0, space 0, times 0 [ 1101.007837] CPU: 0 UID: 0 PID: 8987 Comm: syz-executor.2 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 1101.007868] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1101.007881] Call Trace: [ 1101.007888] [ 1101.007897] dump_stack_lvl+0xfa/0x120 [ 1101.007928] should_fail_ex+0x4d7/0x5e0 [ 1101.007967] ? assoc_array_insert+0xe1/0x2b10 [ 1101.007995] should_failslab+0xc2/0x120 [ 1101.008021] __kmalloc_cache_noprof+0x80/0x730 [ 1101.008053] ? __pfx_perf_trace_contention_end+0x10/0x10 [ 1101.008093] ? assoc_array_insert+0xe1/0x2b10 [ 1101.008121] assoc_array_insert+0xe1/0x2b10 [ 1101.008163] ? key_link+0x2b3/0x350 [ 1101.008188] ? lock_acquire+0x15e/0x2d0 [ 1101.008217] ? __pfx___mutex_lock+0x10/0x10 [ 1101.008239] ? __pfx_assoc_array_insert+0x10/0x10 [ 1101.008277] ? down_write+0x119/0x1f0 [ 1101.008301] ? __pfx_down_write+0x10/0x10 [ 1101.008339] __key_link_begin+0xf0/0x260 [ 1101.008362] key_link+0x106/0x350 [ 1101.008383] ? selinux_key_permission+0x12e/0x1e0 [ 1101.008411] ? __pfx_key_link+0x10/0x10 [ 1101.008436] ? key_task_permission+0x2ba/0x410 [ 1101.008468] request_key_and_link+0x2a7/0x12e0 [ 1101.008499] ? key_type_lookup+0x1e/0x100 [ 1101.008532] ? __pfx_request_key_and_link+0x10/0x10 [ 1101.008569] ? __pfx_key_default_cmp+0x10/0x10 [ 1101.008604] ? __pfx_keyring_search_iterator+0x10/0x10 [ 1101.008642] ? _copy_from_user+0x5b/0xd0 [ 1101.008684] __do_sys_request_key+0x21e/0x3b0 [ 1101.008710] ? __pfx___do_sys_request_key+0x10/0x10 [ 1101.008731] ? ksys_write+0x1a3/0x240 [ 1101.008753] ? __pfx_ksys_write+0x10/0x10 [ 1101.008773] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1101.008801] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1101.008838] do_syscall_64+0xbf/0x420 [ 1101.008865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1101.008888] RIP: 0033:0x7fc3fb339b19 [ 1101.008905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1101.008925] RSP: 002b:00007fc3f88af188 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 1101.008946] RAX: ffffffffffffffda RBX: 00007fc3fb44cf60 RCX: 00007fc3fb339b19 [ 1101.008961] RDX: 0000000000000000 RSI: 0000000020000940 RDI: 00000000200002c0 [ 1101.008974] RBP: 00007fc3f88af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1101.008987] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000002 [ 1101.009000] R13: 00007ffd72260d1f R14: 00007fc3f88af300 R15: 0000000000022000 [ 1101.009034] [ 1101.071136] FAULT_INJECTION: forcing a failure. [ 1101.071136] name failslab, interval 1, probability 0, space 0, times 0 [ 1101.073070] CPU: 1 UID: 0 PID: 8993 Comm: syz-executor.5 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 1101.073104] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1101.073121] Call Trace: [ 1101.073130] [ 1101.073141] dump_stack_lvl+0xfa/0x120 [ 1101.073179] should_fail_ex+0x4d7/0x5e0 [ 1101.073226] ? assoc_array_insert+0x3c9/0x2b10 [ 1101.073260] should_failslab+0xc2/0x120 [ 1101.073289] __kmalloc_cache_noprof+0x80/0x730 [ 1101.073334] ? assoc_array_walk.isra.0+0x1d0/0x5c0 [ 1101.073365] ? __pfx_perf_trace_contention_end+0x10/0x10 [ 1101.073411] ? assoc_array_insert+0x3c9/0x2b10 [ 1101.073444] assoc_array_insert+0x3c9/0x2b10 [ 1101.073492] ? key_link+0x2b3/0x350 [ 1101.073517] ? lock_acquire+0x15e/0x2d0 [ 1101.073551] ? __pfx___mutex_lock+0x10/0x10 [ 1101.073577] ? __pfx_assoc_array_insert+0x10/0x10 [ 1101.073621] ? down_write+0x119/0x1f0 [ 1101.073648] ? __pfx_down_write+0x10/0x10 [ 1101.073682] __key_link_begin+0xf0/0x260 [ 1101.073707] key_link+0x106/0x350 [ 1101.073729] ? selinux_key_permission+0x12e/0x1e0 [ 1101.073763] ? __pfx_key_link+0x10/0x10 [ 1101.073793] ? key_task_permission+0x2ba/0x410 [ 1101.073834] request_key_and_link+0x2a7/0x12e0 [ 1101.073870] ? key_type_lookup+0x1e/0x100 [ 1101.073908] ? __pfx_request_key_and_link+0x10/0x10 [ 1101.073951] ? __pfx_key_default_cmp+0x10/0x10 [ 1101.073991] ? __pfx_keyring_search_iterator+0x10/0x10 [ 1101.074038] ? _copy_from_user+0x5b/0xd0 [ 1101.074103] __do_sys_request_key+0x21e/0x3b0 [ 1101.074133] ? __pfx___do_sys_request_key+0x10/0x10 [ 1101.074157] ? ksys_write+0x1a3/0x240 [ 1101.074181] ? __pfx_ksys_write+0x10/0x10 [ 1101.074203] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1101.074236] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1101.074280] do_syscall_64+0xbf/0x420 [ 1101.074315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1101.074341] RIP: 0033:0x7fabe58dab19 [ 1101.074360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1101.074384] RSP: 002b:00007fabe2e50188 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 1101.074409] RAX: ffffffffffffffda RBX: 00007fabe59edf60 RCX: 00007fabe58dab19 [ 1101.074425] RDX: 0000000000000000 RSI: 0000000020000940 RDI: 00000000200002c0 [ 1101.074440] RBP: 00007fabe2e501d0 R08: 0000000000000000 R09: 0000000000000000 [ 1101.074455] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000002 [ 1101.074470] R13: 00007ffd5785a6bf R14: 00007fabe2e50300 R15: 0000000000022000 [ 1101.074508] 08:20:51 executing program 2: request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) (fail_nth: 16) 08:20:51 executing program 7: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) epoll_pwait(r1, 0x0, 0x0, 0x1000, &(0x7f0000000040)={[0x6]}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 08:20:51 executing program 3: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000000)={0x0, 0x0, 0x4, 0x0, 0x8c}) r3 = io_uring_setup(0x5fff, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r3, 0x1b, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(r3, r4, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x10080, 0x0) r7 = fsopen(&(0x7f0000000140)='debugfs\x00', 0x0) io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000000240)=[r1, r7, r1, r0], 0x4) close_range(r0, 0xffffffffffffffff, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r8, 0x1, &(0x7f0000000140)=[0x0]) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) r10 = dup(r9) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r11}}) io_submit(r8, 0x3, &(0x7f0000000500)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x7, 0x5, 0xffffffffffffffff, &(0x7f00000002c0)="023c85108ab207c6429ceb7d70b8c74f5a9c58092b32a0c53bda8c24161153f275c0d67911", 0x25, 0x7ca, 0x0, 0x1, r5}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x3, 0x81, 0xffffffffffffffff, &(0x7f0000000340)="ab5ebde4ffcbcf11ffa20188e7e52e18b99dc6719e2e4ca813e34f4fa861cf4de4af9957c8e0c817d23da261e1e2cb61fdcb603f6ae5223e727d6ae65bce8b22491b87e0913cec4bc7254aebc356335eb514a12dd4fddc8bccaf954b076782eaf23660075f9e671ce3dbe99936944cb3e099c970152dd59d82825d3092bb50d9945787ad534a0645b6768c805ce22a6e1e34d067428fef78028f292b8dae7537b140027674f8cffe6cb2d37e5683725b0fca87bcbbd2117024ca43cd3b532090e9c97ad43cf78a9a5a87899373b0adccacd0f7d40d8e555566633fe8f740a166b61a147d765e6132242c8442e5cc2da1546d", 0xf2, 0x2, 0x0, 0x1, r6}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x8, 0xb6, 0xffffffffffffffff, &(0x7f0000000480)="7f726782e4512d6d9f3618e322658aea11e4839c0588e31fb3aed67e507dc479ec2e0c5ae15e49fedc", 0x29, 0x100000001, 0x0, 0x0, r10}]) 08:20:51 executing program 5: request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) (fail_nth: 18) 08:20:51 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:20:51 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) r3 = io_uring_setup(0x5fff, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r3, 0x1b, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r4 = io_uring_setup(0x5fff, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r4, 0x1b, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r5 = io_uring_setup(0x5fff, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r5, 0x1b, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) ioctl$BTRFS_IOC_WAIT_SYNC(r5, 0x40089416, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000000)=[r4], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 08:20:51 executing program 4: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r1, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, 0x0, r2, r3, 0xe305fec475600922) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:20:51 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 8) [ 1110.646862] audit: type=1326 audit(1768810851.957:351): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9000 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff077a56b19 code=0x0 08:20:51 executing program 0: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) io_uring_setup(0xc87, &(0x7f0000000240)={0x0, 0xab6e, 0x0, 0x3, 0x53}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$FIONCLEX(r2, 0x5450) epoll_create1(0x0) [ 1110.684431] audit: type=1326 audit(1768810851.995:352): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9010 comm="syz-executor.1" exe="/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fba7619eb19 code=0x0 08:20:52 executing program 7: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) epoll_pwait(r1, &(0x7f0000000000)=[{}, {}], 0x2, 0x1000, &(0x7f0000000040)={[0x6]}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 08:20:52 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) r3 = perf_event_open$cgroup(&(0x7f0000000240)={0x1, 0x80, 0x81, 0x0, 0x3, 0x3, 0x0, 0x200, 0x1, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000000), 0x7}, 0x122, 0x7, 0x0, 0x9, 0xff, 0xffffff00, 0x8001, 0x0, 0x7, 0x0, 0x7}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x1) ioctl$AUTOFS_IOC_PROTOVER(r3, 0x80049363, &(0x7f0000000040)) r4 = io_uring_setup(0x5fff, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r4, 0x1b, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) signalfd4(r3, &(0x7f00000005c0)={[0x9]}, 0x8, 0x800) r5 = io_uring_setup(0x5fff, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r5, 0x1b, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000540)=[{0xfffffffffffffffd}, {&(0x7f00000002c0)=""/157, 0x9d}, {&(0x7f0000000380)=""/132, 0x84}, {&(0x7f0000000440)=""/64, 0x40}, {&(0x7f0000000480)=""/174, 0xae}], 0x5) copy_file_range(r0, &(0x7f00000000c0)=0x100000000, r4, 0x0, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r6 = io_uring_setup(0x5fff, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r6, 0x1b, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40086607, &(0x7f0000000600)=0x2) 08:20:52 executing program 2: request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) (fail_nth: 17) 08:20:52 executing program 3: r0 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) dup(0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) (fail_nth: 1) 08:20:52 executing program 5: request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) (fail_nth: 19) 08:20:52 executing program 0: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0x0) (fail_nth: 1) 08:20:52 executing program 4: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r1, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, 0x0, r2, r3, 0xe305fec475600922) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) [ 1110.814632] FAULT_INJECTION: forcing a failure. [ 1110.814632] name failslab, interval 1, probability 0, space 0, times 0 [ 1110.822488] CPU: 0 UID: 0 PID: 9028 Comm: syz-executor.2 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 1110.822506] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1110.822514] Call Trace: [ 1110.822519] [ 1110.822524] dump_stack_lvl+0xfa/0x120 [ 1110.822545] should_fail_ex+0x4d7/0x5e0 [ 1110.822568] ? assoc_array_insert+0x3c9/0x2b10 [ 1110.822585] should_failslab+0xc2/0x120 [ 1110.822600] __kmalloc_cache_noprof+0x80/0x730 [ 1110.822618] ? assoc_array_walk.isra.0+0x1d0/0x5c0 [ 1110.822633] ? __pfx_perf_trace_contention_end+0x10/0x10 [ 1110.822660] ? assoc_array_insert+0x3c9/0x2b10 [ 1110.822677] assoc_array_insert+0x3c9/0x2b10 [ 1110.822699] ? key_link+0x2b3/0x350 [ 1110.822712] ? lock_acquire+0x15e/0x2d0 [ 1110.822728] ? __pfx___mutex_lock+0x10/0x10 [ 1110.822742] ? __pfx_assoc_array_insert+0x10/0x10 [ 1110.822762] ? down_write+0x119/0x1f0 [ 1110.822776] ? __pfx_down_write+0x10/0x10 [ 1110.822792] __key_link_begin+0xf0/0x260 [ 1110.822805] key_link+0x106/0x350 [ 1110.822816] ? selinux_key_permission+0x12e/0x1e0 [ 1110.822832] ? __pfx_key_link+0x10/0x10 [ 1110.822846] ? key_task_permission+0x2ba/0x410 [ 1110.822864] request_key_and_link+0x2a7/0x12e0 [ 1110.822881] ? key_type_lookup+0x1e/0x100 [ 1110.822900] ? __pfx_request_key_and_link+0x10/0x10 [ 1110.822921] ? __pfx_key_default_cmp+0x10/0x10 [ 1110.822940] ? __pfx_keyring_search_iterator+0x10/0x10 [ 1110.822960] ? _copy_from_user+0x5b/0xd0 [ 1110.822984] __do_sys_request_key+0x21e/0x3b0 [ 1110.822998] ? __pfx___do_sys_request_key+0x10/0x10 [ 1110.823010] ? ksys_write+0x1a3/0x240 [ 1110.823022] ? __pfx_ksys_write+0x10/0x10 [ 1110.823034] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1110.823050] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1110.823070] do_syscall_64+0xbf/0x420 [ 1110.823085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1110.823098] RIP: 0033:0x7fc3fb339b19 [ 1110.823108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1110.823120] RSP: 002b:00007fc3f88af188 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 1110.823132] RAX: ffffffffffffffda RBX: 00007fc3fb44cf60 RCX: 00007fc3fb339b19 [ 1110.823140] RDX: 0000000000000000 RSI: 0000000020000940 RDI: 00000000200002c0 [ 1110.823148] RBP: 00007fc3f88af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1110.823155] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000002 [ 1110.823163] R13: 00007ffd72260d1f R14: 00007fc3f88af300 R15: 0000000000022000 [ 1110.823181] [ 1110.860503] audit: type=1326 audit(1768810852.165:353): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9029 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff077a56b19 code=0x0 [ 1110.878907] FAULT_INJECTION: forcing a failure. [ 1110.878907] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1110.880773] CPU: 1 UID: 0 PID: 9037 Comm: syz-executor.5 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 1110.880803] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1110.880817] Call Trace: [ 1110.880825] [ 1110.880834] dump_stack_lvl+0xfa/0x120 [ 1110.880867] should_fail_ex+0x4d7/0x5e0 [ 1110.880910] _copy_to_user+0x32/0xd0 [ 1110.880951] simple_read_from_buffer+0xe0/0x180 [ 1110.880993] proc_fail_nth_read+0x18a/0x240 [ 1110.881026] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1110.881058] ? security_file_permission+0x22/0x90 [ 1110.881087] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1110.881118] vfs_read+0x1eb/0xc70 [ 1110.881158] ? __pfx___mutex_lock+0x10/0x10 [ 1110.881181] ? __fget_files+0x34/0x3b0 [ 1110.881205] ? __pfx_vfs_read+0x10/0x10 [ 1110.881244] ? lock_release+0xc8/0x270 [ 1110.881280] ? __fget_files+0x20d/0x3b0 [ 1110.881324] ksys_read+0x121/0x240 [ 1110.881346] ? __pfx_ksys_read+0x10/0x10 [ 1110.881379] do_syscall_64+0xbf/0x420 [ 1110.881409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1110.881434] RIP: 0033:0x7fabe588d69c [ 1110.881452] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1110.881474] RSP: 002b:00007fabe2e50170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1110.881498] RAX: ffffffffffffffda RBX: 000000000c9d2bb5 RCX: 00007fabe588d69c [ 1110.881513] RDX: 000000000000000f RSI: 00007fabe2e501e0 RDI: 0000000000000003 [ 1110.881528] RBP: 00007fabe2e501d0 R08: 0000000000000000 R09: 0000000000000000 [ 1110.881542] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000002 [ 1110.881556] R13: 00007ffd5785a6bf R14: 00007fabe2e50300 R15: 0000000000022000 [ 1110.881591] 08:21:03 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 9) 08:21:03 executing program 3: r0 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) dup(0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) 08:21:03 executing program 7: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0x1000, &(0x7f0000000040)={[0x6]}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 08:21:03 executing program 2: request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) (fail_nth: 18) 08:21:03 executing program 4: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r1, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, 0x0, r2, r3, 0xe305fec475600922) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:21:03 executing program 0: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0x0) 08:21:03 executing program 5: request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) [ 1122.514435] audit: type=1326 audit(1768810863.825:354): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9043 comm="syz-executor.1" exe="/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fba7619eb19 code=0x0 08:21:03 executing program 2: request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) (fail_nth: 19) [ 1122.557428] audit: type=1326 audit(1768810863.867:355): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9044 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff077a56b19 code=0x0 [ 1122.578059] FAULT_INJECTION: forcing a failure. [ 1122.578059] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1122.579060] CPU: 0 UID: 0 PID: 9056 Comm: syz-executor.2 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 1122.579076] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1122.579083] Call Trace: [ 1122.579087] [ 1122.579092] dump_stack_lvl+0xfa/0x120 [ 1122.579112] should_fail_ex+0x4d7/0x5e0 [ 1122.579136] _copy_to_user+0x32/0xd0 [ 1122.579157] simple_read_from_buffer+0xe0/0x180 [ 1122.579180] proc_fail_nth_read+0x18a/0x240 [ 1122.579197] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1122.579213] ? security_file_permission+0x22/0x90 [ 1122.579229] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1122.579244] vfs_read+0x1eb/0xc70 [ 1122.579265] ? __pfx___mutex_lock+0x10/0x10 [ 1122.579278] ? __fget_files+0x34/0x3b0 [ 1122.579291] ? __pfx_vfs_read+0x10/0x10 [ 1122.579314] ? lock_release+0xc8/0x270 [ 1122.579334] ? __fget_files+0x20d/0x3b0 [ 1122.579352] ksys_read+0x121/0x240 [ 1122.579363] ? __pfx_ksys_read+0x10/0x10 [ 1122.579374] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1122.579390] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1122.579410] do_syscall_64+0xbf/0x420 [ 1122.579425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1122.579438] RIP: 0033:0x7fc3fb2ec69c [ 1122.579448] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1122.579459] RSP: 002b:00007fc3f88af170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1122.579472] RAX: ffffffffffffffda RBX: 000000001fa001a1 RCX: 00007fc3fb2ec69c [ 1122.579479] RDX: 000000000000000f RSI: 00007fc3f88af1e0 RDI: 0000000000000003 [ 1122.579487] RBP: 00007fc3f88af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1122.579494] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000002 [ 1122.579502] R13: 00007ffd72260d1f R14: 00007fc3f88af300 R15: 0000000000022000 [ 1122.579520] 08:21:03 executing program 4: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r1, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, 0x0, r2, r3, 0xe305fec475600922) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) [ 1122.615391] FAULT_INJECTION: forcing a failure. [ 1122.615391] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1122.616390] CPU: 0 UID: 0 PID: 9059 Comm: syz-executor.1 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 1122.616406] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1122.616414] Call Trace: [ 1122.616418] [ 1122.616422] dump_stack_lvl+0xfa/0x120 [ 1122.616442] should_fail_ex+0x4d7/0x5e0 [ 1122.616464] strncpy_from_user+0x3b/0x2f0 [ 1122.616483] do_getname+0x70/0x3d0 [ 1122.616501] user_path_at+0x29/0x90 [ 1122.616514] __x64_sys_mount+0x1fb/0x310 [ 1122.616530] ? __pfx___x64_sys_mount+0x10/0x10 [ 1122.616544] ? irqentry_exit+0xee/0x650 [ 1122.616556] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1122.616577] do_syscall_64+0xbf/0x420 [ 1122.616592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1122.616605] RIP: 0033:0x7fba7619eb19 [ 1122.616615] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1122.616627] RSP: 002b:00007fba736f3188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1122.616639] RAX: ffffffffffffffda RBX: 00007fba762b2020 RCX: 00007fba7619eb19 [ 1122.616648] RDX: 0000000020000240 RSI: 0000000020000140 RDI: 0000000000000000 [ 1122.616655] RBP: 00007fba736f31d0 R08: 00000000200003c0 R09: 0000000000000000 [ 1122.616663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1122.616670] R13: 00007ffe1c7cb77f R14: 00007fba736f3300 R15: 0000000000022000 [ 1122.616687] 08:21:03 executing program 5: request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:21:03 executing program 2: request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:21:03 executing program 0: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0x2) 08:21:03 executing program 7: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) epoll_pwait(r1, &(0x7f0000000000), 0x0, 0x1000, &(0x7f0000000040)={[0x6]}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 08:21:13 executing program 4: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r1, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, 0x0, r2, r3, 0xe305fec475600922) 08:21:13 executing program 2: request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:21:13 executing program 3: r0 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) dup(0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x4) 08:21:13 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 10) 08:21:13 executing program 0: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0x3) 08:21:13 executing program 5: request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2, 0x2}, 0x0, 0xfffffffffffffffe) 08:21:13 executing program 7: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) epoll_pwait(r1, &(0x7f0000000000), 0x0, 0x1000, &(0x7f0000000040)={[0x6]}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 08:21:13 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000180)) r2 = epoll_create1(0x0) r3 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f0000000140)=' ', 0x1, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r4, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000140), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000240)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x871, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r8, 0x0, 0xfffffffffffffffe, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x6, 0x50, r4, 0x0) syz_io_uring_submit(0x0, 0x0, 0xfffffffffffffffe, 0x0) r9 = io_uring_setup(0x5fff, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r9, 0x1b, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) syz_io_uring_submit(0x0, r6, &(0x7f0000000340)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r4, 0x4, {0x0, r9}, 0x0, 0x1, 0x0, {0x0, 0x0, r3}}, 0x7) syz_memcpy_off$IO_URING_METADATA_FLAGS(r8, 0x114, &(0x7f00000000c0), 0x0, 0x4) syz_io_uring_submit(r1, r6, &(0x7f0000000040)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x409, 0x0, 0x0, {0x0, r7}}, 0x7739) [ 1132.670967] audit: type=1326 audit(1768810873.978:356): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9074 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff077a56b19 code=0x0 [ 1132.686534] audit: type=1326 audit(1768810873.994:357): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9076 comm="syz-executor.1" exe="/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fba7619eb19 code=0x0 08:21:14 executing program 5: request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2, 0x3}, 0x0, 0xfffffffffffffffe) 08:21:14 executing program 4: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r1, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r0) 08:21:14 executing program 2: request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2, 0x2}, 0x0, 0xfffffffffffffffe) 08:21:14 executing program 7: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) epoll_pwait(r1, &(0x7f0000000000), 0x0, 0x1000, &(0x7f0000000040)={[0x6]}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) [ 1132.785555] FAULT_INJECTION: forcing a failure. [ 1132.785555] name failslab, interval 1, probability 0, space 0, times 0 [ 1132.787224] CPU: 1 UID: 0 PID: 9094 Comm: syz-executor.1 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 1132.787252] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1132.787265] Call Trace: [ 1132.787272] [ 1132.787280] dump_stack_lvl+0xfa/0x120 [ 1132.787317] should_fail_ex+0x4d7/0x5e0 [ 1132.787356] ? alloc_fs_context+0x57/0xb10 [ 1132.787379] should_failslab+0xc2/0x120 [ 1132.787404] __kmalloc_cache_noprof+0x80/0x730 [ 1132.787435] ? __get_fs_type+0xe6/0x160 [ 1132.787470] ? alloc_fs_context+0x57/0xb10 [ 1132.787491] alloc_fs_context+0x57/0xb10 [ 1132.787521] path_mount+0xce2/0x2150 [ 1132.787548] ? kasan_quarantine_put+0x84/0x1e0 [ 1132.787574] ? __pfx_path_mount+0x10/0x10 [ 1132.787600] ? kmem_cache_free+0x2cd/0x670 [ 1132.787632] ? putname.part.0+0x85/0xe0 [ 1132.787657] ? strncpy_from_user+0x120/0x2f0 [ 1132.787691] ? putname.part.0+0x85/0xe0 [ 1132.787715] ? putname.part.0+0x85/0xe0 [ 1132.787746] __x64_sys_mount+0x293/0x310 [ 1132.787773] ? __pfx___x64_sys_mount+0x10/0x10 [ 1132.787798] ? irqentry_exit+0xee/0x650 [ 1132.787819] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1132.787857] do_syscall_64+0xbf/0x420 [ 1132.787884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1132.787907] RIP: 0033:0x7fba7619eb19 [ 1132.787924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1132.787945] RSP: 002b:00007fba736f3188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1132.787966] RAX: ffffffffffffffda RBX: 00007fba762b2020 RCX: 00007fba7619eb19 [ 1132.787981] RDX: 0000000020000240 RSI: 0000000020000140 RDI: 0000000000000000 [ 1132.787995] RBP: 00007fba736f31d0 R08: 00000000200003c0 R09: 0000000000000000 [ 1132.788008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1132.788021] R13: 00007ffe1c7cb77f R14: 00007fba736f3300 R15: 0000000000022000 [ 1132.788054] 08:21:14 executing program 0: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0x4) 08:21:14 executing program 5: request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2, 0x5}, 0x0, 0xfffffffffffffffe) 08:21:14 executing program 4: add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r0, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) 08:21:14 executing program 2: request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2, 0x3}, 0x0, 0xfffffffffffffffe) 08:21:14 executing program 7: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0, &(0x7f0000000040)={[0x6]}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 08:21:14 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) r3 = getpgid(0xffffffffffffffff) r4 = io_uring_setup(0x5fff, &(0x7f0000000140)) r5 = syz_io_uring_setup(0x2d0f, &(0x7f0000000240)={0x0, 0xe4ed, 0x2, 0x3, 0x1af, 0x0, r4}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) r6 = gettid() rt_sigqueueinfo(r6, 0x0, &(0x7f00000000c0)) r7 = gettid() rt_sigqueueinfo(r7, 0x0, &(0x7f00000000c0)) kcmp(r6, r7, 0x0, 0xffffffffffffffff, r5) io_uring_register$IORING_REGISTER_FILES(r4, 0x1b, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r8 = io_uring_setup(0x5192, &(0x7f0000000140)={0x0, 0x0, 0x8}) io_uring_register$IORING_REGISTER_FILES(r8, 0x1b, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r4, &(0x7f0000000040)={r1, r8}) signalfd4(r4, &(0x7f00000000c0), 0x8, 0x0) r9 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r9, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0x0) 08:21:23 executing program 3: r0 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) dup(0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x8) 08:21:23 executing program 5: request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2, 0xf}, 0x0, 0xfffffffffffffffe) 08:21:23 executing program 2: request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2, 0x5}, 0x0, 0xfffffffffffffffe) 08:21:23 executing program 7: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0, &(0x7f0000000040)={[0x6]}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 08:21:23 executing program 4: add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) 08:21:23 executing program 0: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0x5) 08:21:23 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0)={0x0, 0x4, 0x20, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000000), 0x6e, &(0x7f0000000680)=[{&(0x7f0000000240)=""/195, 0xc3}, {&(0x7f00000000c0)=""/16, 0x10}, {&(0x7f0000000340)=""/103, 0x67}, {&(0x7f00000003c0)=""/153, 0x99}, {&(0x7f0000000480)=""/144, 0x90}, {&(0x7f0000000540)=""/224, 0xe0}, {&(0x7f0000000640)=""/43, 0x2b}], 0x7, &(0x7f0000000700)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}, 0x100) syz_io_uring_setup(0x5b2d, &(0x7f0000000780)={0x0, 0xaabc, 0x2, 0x3, 0xd5, 0x0, r3}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000800), &(0x7f0000000840)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0x0) 08:21:23 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 11) [ 1142.308495] audit: type=1326 audit(1768810883.616:358): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9125 comm="syz-executor.1" exe="/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fba7619eb19 code=0x0 [ 1142.325241] audit: type=1326 audit(1768810883.626:359): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9132 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff077a56b19 code=0x0 08:21:23 executing program 2: request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2, 0xf}, 0x0, 0xfffffffffffffffe) 08:21:23 executing program 4: add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) 08:21:23 executing program 5: request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2, 0x65}, 0x0, 0xfffffffffffffffe) 08:21:23 executing program 7: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0, &(0x7f0000000040)={[0x6]}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 08:21:23 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0x0) 08:21:23 executing program 4: add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) 08:21:23 executing program 0: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0x6) 08:21:23 executing program 2: request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2, 0x65}, 0x0, 0xfffffffffffffffe) 08:21:33 executing program 3: r0 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) dup(0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x91a) 08:21:33 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 12) 08:21:33 executing program 2: r0 = request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r1, 0xa}) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r4 = request_key(&(0x7f0000000280)='ceph\x00', &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000340)='syz', r3) r5 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r5) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r5, 0xa}) keyctl$KEYCTL_MOVE(0x1e, r4, r2, r5, 0x0) r7 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r3, 0xa}) keyctl$KEYCTL_MOVE(0x1e, r3, r1, 0xfffffffffffffffd, 0x1) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r0, 0x0) 08:21:33 executing program 7: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0x1000, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 08:21:33 executing program 4: add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r0, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) 08:21:33 executing program 5: request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r0, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r1) 08:21:33 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) r4 = dup(r3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) r6 = io_uring_setup(0x5fff, &(0x7f0000000140)) r7 = eventfd(0x3) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000340)=r7, 0x1) io_uring_register$IORING_REGISTER_FILES(r6, 0x1b, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000380)=ANY=[@ANYBLOB="890c44f88ce646f0406f5efebc01cee71133ee535a8208000000000000000000", @ANYRES32=r6, @ANYBLOB="01000000000000002e2f66696c653100"]) r9 = io_uring_setup(0x5fff, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r9, 0x1b, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000240)=[r2, r8, r0, r1, r9], 0x5) io_uring_setup(0x51d2, &(0x7f0000000000)={0x0, 0xdf05, 0x4, 0x3, 0x27e}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0x0) r10 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x404000, 0x0) io_uring_register$IORING_REGISTER_FILES(r10, 0x2, &(0x7f00000002c0)=[r1], 0x1) 08:21:33 executing program 0: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0x7) [ 1152.045430] audit: type=1326 audit(1768810893.356:360): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9168 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff077a56b19 code=0x0 [ 1152.048868] audit: type=1326 audit(1768810893.360:361): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9170 comm="syz-executor.1" exe="/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fba7619eb19 code=0x0 08:21:33 executing program 2: request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) [ 1152.093017] audit: type=1326 audit(1768810893.402:362): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9169 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe995e05b19 code=0x0 08:21:33 executing program 5: r0 = request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @auto=[0x0, 0x38, 0x66, 0x61, 0x66, 0x39, 0x30, 0x30, 0x37, 0x32, 0x66, 0x63, 0x36, 0x33, 0x62, 0x38]}, &(0x7f0000000080)={0x0, "ebe5e169d37ff43012bf8316f43e0a2b416acfb2ae4b851ee175783b4440e818f0645b5873f7cb520f752527598757813a0d7264fd553467911557dcb0dcf6c4", 0x26}, 0x48, r0) keyctl$search(0xa, r1, &(0x7f0000000100)='cifs.idmap\x00', &(0x7f0000000140)={'syz', 0x0}, r0) add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000300)="fc7aec70cab7798e3e87881d5bffaf227b31d3e9887619e71baac1fddaae97829c23d09eb7b096ff2e9b5e49fc76b6e5f6be803620bca240dde0d7b9daaed01a253800c2c49fc73b685025dd15680904741b6e4543db146b74c496dc4fcb42d3bc7e7642e944a96d0f29ece4d088a8ea39e49cb3b75597b5230b19c88dcbb6d72fb1ea676ba6a8b0b7b9275ce3940fc6759bc7055fb1330b0233cc62afc037dfccefa54c007ac622f18b6688aa846f6e16b4280d17ae5dbdf1619783d4fda0a2e5c88f6d7ea1ba351cf3e55a695f73f5a8b9702aeee186038273940424227e798d97b5596f93", 0xe6, r1) 08:21:33 executing program 4: add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r0, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) [ 1152.150477] FAULT_INJECTION: forcing a failure. [ 1152.150477] name failslab, interval 1, probability 0, space 0, times 0 [ 1152.151477] CPU: 0 UID: 0 PID: 9192 Comm: syz-executor.1 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 1152.151492] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1152.151500] Call Trace: [ 1152.151504] [ 1152.151509] dump_stack_lvl+0xfa/0x120 [ 1152.151529] should_fail_ex+0x4d7/0x5e0 [ 1152.151552] ? v9fs_init_fs_context+0x49/0x5b0 [ 1152.151568] should_failslab+0xc2/0x120 [ 1152.151582] __kmalloc_cache_noprof+0x80/0x730 [ 1152.151603] ? lockdep_init_map_type+0x4b/0x220 [ 1152.151622] ? v9fs_init_fs_context+0x49/0x5b0 [ 1152.151637] v9fs_init_fs_context+0x49/0x5b0 [ 1152.151654] alloc_fs_context+0x56d/0xb10 [ 1152.151671] path_mount+0xce2/0x2150 [ 1152.151687] ? kasan_quarantine_put+0x84/0x1e0 [ 1152.151701] ? __pfx_path_mount+0x10/0x10 [ 1152.151715] ? kmem_cache_free+0x2cd/0x670 [ 1152.151732] ? putname.part.0+0x85/0xe0 [ 1152.151747] ? strncpy_from_user+0x120/0x2f0 [ 1152.151765] ? putname.part.0+0x85/0xe0 [ 1152.151778] ? putname.part.0+0x85/0xe0 [ 1152.151795] __x64_sys_mount+0x293/0x310 [ 1152.151809] ? __pfx___x64_sys_mount+0x10/0x10 [ 1152.151822] ? irqentry_exit+0xee/0x650 [ 1152.151834] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1152.151854] do_syscall_64+0xbf/0x420 [ 1152.151869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1152.151882] RIP: 0033:0x7fba7619eb19 [ 1152.151892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1152.151904] RSP: 002b:00007fba736f3188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1152.151916] RAX: ffffffffffffffda RBX: 00007fba762b2020 RCX: 00007fba7619eb19 [ 1152.151924] RDX: 0000000020000240 RSI: 0000000020000140 RDI: 0000000000000000 [ 1152.151931] RBP: 00007fba736f31d0 R08: 00000000200003c0 R09: 0000000000000000 [ 1152.151938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1152.151945] R13: 00007ffe1c7cb77f R14: 00007fba736f3300 R15: 0000000000022000 [ 1152.151962] 08:21:33 executing program 2: r0 = syz_open_pts(0xffffffffffffffff, 0x8000) r1 = io_uring_setup(0x5fff, &(0x7f0000000140)) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r2, 0x1b, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r3 = io_uring_setup(0x5fff, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r3, 0x1b, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000040)=[r0, r1, r2, r3], 0x4) io_uring_register$IORING_REGISTER_FILES(r1, 0x1b, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) close_range(r0, r1, 0x0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:21:33 executing program 7: syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x1000, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 08:21:33 executing program 0: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0x8) 08:21:45 executing program 2: r0 = request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) 08:21:45 executing program 7: syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x1000, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 08:21:45 executing program 6: r0 = io_uring_setup(0x5fff, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r0, 0x1b, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r1 = io_uring_setup(0x5fff, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r1, 0x1b, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r2, 0x1b, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000002c0)=[r0, r0, r2, 0xffffffffffffffff, r0, r0], 0x6) r3 = io_uring_setup(0x5fff, &(0x7f0000000140)) r4 = io_uring_setup(0x5fff, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r4, 0x1b, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f00000000c0)=[r3, r0], 0x2) io_uring_register$IORING_REGISTER_FILES(r3, 0x1b, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r5 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0)={0x0, 0x9e8, 0x8, 0x2, 0x0, 0x0, r3}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000040)) io_uring_setup(0x604, &(0x7f0000000240)={0x0, 0x5fe0, 0x2, 0x1, 0x111}) r6 = epoll_create1(0x0) r7 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000080)={0x2000200a}) close_range(r5, 0xffffffffffffffff, 0x0) 08:21:45 executing program 0: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0x300) 08:21:45 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 13) 08:21:45 executing program 3: r0 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) dup(0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x1a09) 08:21:45 executing program 5: request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r0, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) add_key(&(0x7f0000000000)='.dead\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="8c64f59cc55cc29a12927b6824129f2a7eae60afc9c50a0078888efac05af146a3c4263ee1dd3e60b5dc56b47d0aa0c5628fa34400f78744229a74dcb2be6f223be6973343998f010323af7b45e1373047b411dc3cebe65c82371ba98a09ce82076a388c0ca155e8392c94667baf241c3b5fbc9eb47d6fdd2cef05ad8a6f75f7dc3563d8c90f42a2b1007c27bd79c30e7e7dc9414e5d91413aa1c52aeb", 0x9d, r1) 08:21:45 executing program 4: add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r0, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) 08:21:45 executing program 4: add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', 0x0, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) [ 1164.168589] audit: type=1326 audit(1768810905.479:363): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9221 comm="syz-executor.1" exe="/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fba7619eb19 code=0x0 [ 1164.184640] audit: type=1326 audit(1768810905.495:364): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9223 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff077a56b19 code=0x0 08:21:45 executing program 0: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0x500) 08:21:45 executing program 5: r0 = request_key(&(0x7f0000000080)='blacklist\x00', &(0x7f0000000940)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r0) 08:21:45 executing program 2: r0 = request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000080)={0x0, "fe6c0e1fb8574655ea2d9abeb51805df8787da004faccd3c0974a531339ef9e658e0d9bd544236e517cfb9b9fccd5fef994e4cde2418d1b9692189b76c4e8848", 0x11}, 0x48, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r2, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) keyctl$search(0xa, r1, &(0x7f0000000100)='pkcs7_test\x00', &(0x7f0000000140)={'syz', 0x3}, r3) 08:21:45 executing program 4: add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', 0x0, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) 08:21:45 executing program 2: ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000000)={0x3, 0x20, 0x1}) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:21:45 executing program 4: add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', 0x0, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) 08:21:45 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000280), 0x4, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r4 = accept(0xffffffffffffffff, &(0x7f0000000000)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x80) r5 = io_uring_setup(0x5fff, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r5, 0x1b, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) ioctl$FICLONERANGE(r4, 0x4020940d, &(0x7f0000000240)={{r5}, 0x1, 0x3, 0x6}) 08:21:45 executing program 5: prctl$PR_GET_FP_MODE(0x2e) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:21:56 executing program 3: r0 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) dup(0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x2000) 08:21:56 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 14) 08:21:56 executing program 0: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0x600) 08:21:56 executing program 5: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r0, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) r2 = request_key(&(0x7f00000002c0)='rxrpc_s\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, r2) r4 = add_key(&(0x7f0000000240)='id_legacy\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f0000000300)="1bdca7324dec9039ef8858de751b9ca47f10d38e32f77b77b008cdd13cd05303e37f3f22b6d275dadff3c1f8470283c724025e3923af21652f48157c3f4cdbb659202a4eb1622f24113d330823b52eedd09dc6a835ef9b44f98b706cb1519628b805c482c389fec40ad938261b0d1c995190f43e474a7612b0e7c89b0f2bd368223a4153ed742288722b83ebbd567483cd382584148c049bf3b1126f54a5a702c81abfd30842e41555ddcc4839287464597ff24d32e82c41c3b5eaf8e0b240483853d4e4bece632c39d9353df238780cff8a03f40dd235bcd49b6f3309b222b48b976d511267993111", 0xe9, r0) add_key(&(0x7f0000000400)='rxrpc\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)="420114f9f3a6c2a788f220f9e622a1571cbf1c7839e5c7c66c51289a4c68d4230173157587511ca68a3ec1340db08cff5579c65f6af6211aca4a6ce01c5e88f21ec91c6c1ab5091c12e15f54894e29b0dc490aacb58a5381590c67640b0c7323e56d39f58fcdbba55ee2b2d67808716d5b8393f4b3434e66577dbb46c3aa8e", 0x7f, 0xfffffffffffffff9) keyctl$KEYCTL_MOVE(0x1e, r3, r4, r0, 0x0) 08:21:56 executing program 4: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r0, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) 08:21:56 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)=0x0) r2 = epoll_create1(0x0) r3 = io_uring_setup(0x5fff, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x871, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, 0x0, 0xfffffffffffffffe, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2101, 0x0) syz_io_uring_submit(r4, r1, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0xa, 0x4, {0x0, r5}, 0x1, 0x2, 0x0, {0x0, r6, r7}}, 0x1f) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0x0) 08:21:56 executing program 7: syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x1000, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 08:21:56 executing program 2: request_key(&(0x7f0000000040)='encrypted\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)='.dead\x00', 0xfffffffffffffff8) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r0, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000100)='syzkaller\x00', &(0x7f0000000040)) request_key(&(0x7f0000000000)='ceph\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, r1) [ 1174.787271] audit: type=1326 audit(1768810916.095:365): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9274 comm="syz-executor.1" exe="/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fba7619eb19 code=0x0 08:21:56 executing program 2: r0 = request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r0) [ 1174.803053] audit: type=1326 audit(1768810916.113:366): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9277 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff077a56b19 code=0x0 08:21:56 executing program 6: r0 = io_uring_setup(0x5fff, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r0, 0x1b, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r1 = syz_io_uring_setup(0x697a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r2 = epoll_create1(0x0) r3 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080)={0x2000200a}) close_range(r1, 0xffffffffffffffff, 0x0) 08:21:56 executing program 4: r0 = add_key$keyring(0x0, &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r0, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) 08:21:56 executing program 5: lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{0xe2, 0x100}, {0x2, 0x80000000}]}, 0x14, 0x3) [ 1174.888018] FAULT_INJECTION: forcing a failure. [ 1174.888018] name failslab, interval 1, probability 0, space 0, times 0 [ 1174.888984] CPU: 1 UID: 0 PID: 9294 Comm: syz-executor.1 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 1174.889000] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1174.889008] Call Trace: [ 1174.889013] [ 1174.889018] dump_stack_lvl+0xfa/0x120 [ 1174.889042] should_fail_ex+0x4d7/0x5e0 [ 1174.889066] should_failslab+0xc2/0x120 [ 1174.889081] __kmalloc_node_track_caller_noprof+0xd7/0x840 [ 1174.889103] ? __kmalloc_cache_noprof+0x4ae/0x730 [ 1174.889119] ? v9fs_init_fs_context+0xf3/0x5b0 [ 1174.889141] ? kstrdup+0x3e/0xc0 [ 1174.889157] kstrdup+0x3e/0xc0 [ 1174.889173] v9fs_init_fs_context+0xf3/0x5b0 [ 1174.889189] alloc_fs_context+0x56d/0xb10 [ 1174.889207] path_mount+0xce2/0x2150 [ 1174.889224] ? kasan_quarantine_put+0x84/0x1e0 [ 1174.889237] ? __pfx_path_mount+0x10/0x10 [ 1174.889252] ? kmem_cache_free+0x2cd/0x670 [ 1174.889269] ? putname.part.0+0x85/0xe0 [ 1174.889283] ? strncpy_from_user+0x120/0x2f0 [ 1174.889307] ? putname.part.0+0x85/0xe0 [ 1174.889321] ? putname.part.0+0x85/0xe0 [ 1174.889337] __x64_sys_mount+0x293/0x310 [ 1174.889352] ? __pfx___x64_sys_mount+0x10/0x10 [ 1174.889365] ? irqentry_exit+0xee/0x650 [ 1174.889378] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1174.889399] do_syscall_64+0xbf/0x420 [ 1174.889415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1174.889428] RIP: 0033:0x7fba7619eb19 [ 1174.889438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1174.889450] RSP: 002b:00007fba736f3188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1174.889462] RAX: ffffffffffffffda RBX: 00007fba762b2020 RCX: 00007fba7619eb19 [ 1174.889470] RDX: 0000000020000240 RSI: 0000000020000140 RDI: 0000000000000000 [ 1174.889478] RBP: 00007fba736f31d0 R08: 00000000200003c0 R09: 0000000000000000 [ 1174.889486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1174.889493] R13: 00007ffe1c7cb77f R14: 00007fba736f3300 R15: 0000000000022000 [ 1174.889510] 08:21:56 executing program 4: r0 = add_key$keyring(0x0, &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r0, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) 08:21:56 executing program 2: r0 = request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="8ae770689ec8a79744fc4aada1712cdbda162df9b999d3918154d921bef16223ff8346472e4e96dcf056e7edceb5af93f60ac4b18c11cca0b35a0a11d9bf476dfb31d7a464ab8b6b44ede1b807c16be145cb06b80713f8e2fbc5", 0x5a, r0) 08:21:56 executing program 0: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0x700) 08:21:56 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x5000940e, &(0x7f0000000240)={{r1}, "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"}) close_range(r0, 0xffffffffffffffff, 0x0) 08:22:06 executing program 4: r0 = add_key$keyring(0x0, &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r0, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) 08:22:06 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) fcntl$setsig(r0, 0xa, 0x14) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x0}, 0x0, 0xfffffffffffffff9) 08:22:06 executing program 3: r0 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) dup(0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x4000) 08:22:06 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, r0}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0x0) 08:22:06 executing program 7: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)=0x0) r2 = epoll_create1(0x0) r3 = io_uring_setup(0x5fff, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x871, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, 0x0, 0xfffffffffffffffe, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2101, 0x0) syz_io_uring_submit(r4, r1, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0xa, 0x4, {0x0, r5}, 0x1, 0x2, 0x0, {0x0, r6, r7}}, 0x1f) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0x0) 08:22:06 executing program 2: r0 = request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r0) 08:22:06 executing program 0: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0x2000) 08:22:06 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 15) [ 1185.555828] audit: type=1326 audit(1768810926.866:367): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9316 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff077a56b19 code=0x0 [ 1185.575974] audit: type=1326 audit(1768810926.873:368): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9314 comm="syz-executor.1" exe="/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fba7619eb19 code=0x0 08:22:06 executing program 4: r0 = add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r0, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) 08:22:06 executing program 2: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000940)={'syz', 0x3}, 0x0, r0) 08:22:06 executing program 5: request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000000)='cifs.spnego\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="7020a8fb5b7ed247df06ef9bf9a4f3", 0xf, 0xffffffffffffffff) 08:22:06 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000007c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = dup2(r0, r0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000040)=[{}], 0x1) r3 = io_uring_setup(0x5fff, &(0x7f0000000140)={0x0, 0x2}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000007400)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$sock_inet_SIOCSIFNETMASK(r4, 0x891c, &(0x7f0000007440)={'ip_vti0\x00', {0x2, 0x0, @private}}) r5 = syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x4, 0x6, &(0x7f0000000640)=[{&(0x7f0000000240)="db3552a3f18e643aad907e20f20a10bae0e6f667058348e5d0a1f6b951289fc52cdd0b0893c16db89dbac69779deb4b5c6fda0333af0fb3ceb5ecc850daa87d313077fecf220e0ba83de59ebc687d8e66076610cfa2811ca6fc7280b871cc6c87c696f73b24e062b3c055f411dbce585dada688a0eb602745963f4bbe77d796961d7c6ed5331ae", 0x87, 0xffff}, {&(0x7f0000000300)="1e96716813006a2a4e072e2139833a0e83d7d9c5ac3215a213c818ff005e98f1228a1f2c834d16c54d1f168a9a6f6d2f47b8dfe03d1bc785b95167d08a3e77da404469e2bf33b1c1f14801872302c7fc6754380005734a87661d6f8f7b957ad598549a09bf64d83c0db08ec95dcc0fb99156cb95e2bfb14062b02f53d6913926c36ffe860f3ad27b530b28ee73f8603bab226d7cfd4716ed08efdb9b623a40ac709df6c1f4478fd9f0", 0xa9, 0x10000}, {&(0x7f00000003c0)="f27c553338396405cd0c6c13b1b5aeba467032b30eebb79c743208ad56346eab638b91926d20fc68ba9da39640e6b75eb0a9", 0x32}, {&(0x7f0000000400)="742a8c4388652365a94abed1bb8fd46b8c1156d2733b98dc05a03294956ad98607520fb8032a22316157099f466353c20ab91a6290f77e22a206d357280f2ea0216b9cd13b1ffac43c238b04cc9eb32b8ede9d28b07647e0c32a429870ab6dbf09753c9e4bca18a93be6f5f679931c249b12c115a0bd2ce6a75dc4a2358a7c1f90db6cd5481d1f6712ba8e52f949a0aa1e72ae9a2ca038295fac33192d7caada17292281b40387de8ca3025b0651118a41933df9650e8d5129f7009a85809ea11b71f76fb3b56ceafb2d6328f95f196c5d30a95dbcbe1a", 0xd7, 0xffffffffffffffff}, {&(0x7f0000000500)="68ab9b8deb005d37ff96eebc7c36bd663d1968371a6512690fd9783ec2f2210cc6435c6dc3c366436bee5bd98794e40d578c2af089e4bba01460e5361c9d409d7ff260255e52602db8bcc02310ed8031605eeeb385190f244a432bc7d0c751eb7088d33683d103a9cc28ce43d9b6692dea86a646763ac52db0c7b17ceff9878630a5f83f74ef9ec9788ffb082cc7549b21b3b393d20fb3dd18146534fc259bcd", 0xa0, 0xfffffffffffffffb}, {&(0x7f00000005c0)="5efb4a718cbb358bdbb882fdf6f575a06c7dd807ad6884e410174dba667a0dde53f1e5658581fe07e951f26967ea96c2bb8f4d944a5d8e7513523efb91316614009bb05e1d0a15fb331cf10a4c0abd74d0c2383a13b6c2bce57c17c1002851a1da26b14864e0784e31", 0x69, 0x1}], 0x2d8814, &(0x7f0000000700)=ANY=[@ANYBLOB='nodelalloc,resuid=', @ANYRESHEX=0xee01, @ANYBLOB="2c62617272696572303070373030302c6d61785f62617463685f746998756f3078303030303030303030303030303030302c6e6f6c6f617569643d", @ANYRESDEC=0x0, @ANYBLOB=',dont_hash,smackfsroot=ip_vti0\x00,fsname=ip_vti0\x00,dont_appraise,smackfshat=,\x00']) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r5, 0xf503, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) 08:22:07 executing program 7: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)=0x0) r2 = epoll_create1(0x0) r3 = io_uring_setup(0x5fff, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x871, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, 0x0, 0xfffffffffffffffe, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2101, 0x0) syz_io_uring_submit(r4, r1, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0xa, 0x4, {0x0, r5}, 0x1, 0x2, 0x0, {0x0, r6, r7}}, 0x1f) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0x0) 08:22:07 executing program 0: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0x3f00) 08:22:07 executing program 4: r0 = add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r0, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) 08:22:07 executing program 2: request_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0xfffffffffffffffa) 08:22:07 executing program 5: r0 = request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r1, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) r3 = add_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000440)="58caec1664e3579c68fe4e535c4ce391a6bafa1fb81150819dc14e07b5b19dd2889c37b9e4bde0fdd4d51ac590fd4f48039c1930d56c3b1a04293537e6f347e2b781a00630c76a0a8f06dfd5bb613ed013027c48b79287566e230cb6114811cbad126c5638ec2d0636d6db7d8e45e962ccd05a7774df4e3cf5c9a6e5716ed3ece7d04c62353016", 0x87, r2) r4 = add_key(&(0x7f0000000080)='blacklist\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)="e4c80dd02778f80abf1da9bef6395ce6bcca7b303080779c6c83fa350d68c99df6b0e674df9ba51b60e4e9fe5d9ff776b2e59656b72b273fd05d73e8753b9569da44df4821e4b22c4a77d14d51102b56bdbec3a1fd36224b8c37a3b2b57ccf16293adcefa9ebed3e7e5080814f6ac3329bf5ca7a7a75c9cf407dd3909a852ba63ca8d54e64c686c26b4a9e0f5ce80df22a2ad6c6866160ed9cb06b05ffc2f2770f083bdc014a33ab0d91e964960ec857288271bc638d35", 0xb7, r0) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$restrict_keyring(0x1d, r3, &(0x7f0000000500)='.dead\x00', &(0x7f0000000540)='builtin_trusted\x00') request_key(&(0x7f0000000300)='pkcs7_test\x00', &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000380)='/\x00', r4) 08:22:07 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)={0x0, 0x4}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) r4 = dup(r3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) epoll_pwait2(r4, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}], 0x6, &(0x7f0000000ac0)={r6, r7+60000000}, &(0x7f0000000b00)={[0x9]}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r1, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x81, 0xb2, 0x5a, 0x4, 0x10001, 0x0, 0x3e, 0x9, 0xd6, 0x40, 0x193, 0x0, 0x8, 0x38, 0x2, 0x8, 0xa024, 0xffff}, [{0x6, 0x0, 0x10000000000000, 0x4, 0x1ff, 0x0, 0x95c, 0x1dc2}, {0x4, 0x3f, 0x4, 0x9, 0x1000, 0x2, 0xe7e7, 0xfffffffffffffffd}], "c27152b4792ff6251a51972a38de1e314efb77e674a8e17c31747b86cdcb059bcf8a7c718cbc32a320781c4de57367591d14dd3f378e3cd27c1ec7023a91274985a6217c286a37edcccd4ce9e5aa90fcdd2a3839b0daa9a85702c8d55b538dcb8eff43a0028e0df8d65bd24c556b2f296509a53a7d9c8660452acc1070c4f260a0680e1b5564d6816aa9ab1b11babdab4100b8bc4806ceec0fc93362ee0e0c7fbbc90b96a25f93fef3b941688528", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x85e) [ 1186.027411] audit: type=1326 audit(1768810927.338:369): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9356 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe995e05b19 code=0x0 [ 1186.380226] audit: type=1326 audit(1768810927.691:370): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9316 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff077a56b19 code=0x0 08:22:19 executing program 7: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)=0x0) r2 = epoll_create1(0x0) r3 = io_uring_setup(0x5fff, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x871, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, 0x0, 0xfffffffffffffffe, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2101, 0x0) syz_io_uring_submit(r4, r1, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0xa, 0x4, {0x0, r5}, 0x1, 0x2, 0x0, {0x0, r6, r7}}, 0x1f) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0x0) 08:22:19 executing program 6: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)={0x0, 0xab4d}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0x0) 08:22:19 executing program 3: r0 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) dup(0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x20035) 08:22:19 executing program 4: r0 = add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r0, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) 08:22:19 executing program 0: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0x4000) 08:22:19 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 16) 08:22:19 executing program 2: ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x80000001}}, './file0\x00'}) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000040)) 08:22:19 executing program 5: r0 = request_key(&(0x7f0000000000)='trusted\x00', &(0x7f0000000940)={'syz', 0x1}, 0x0, 0xfffffffffffffff8) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r0) [ 1198.371972] audit: type=1326 audit(1768810939.683:371): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9368 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff077a56b19 code=0x0 08:22:19 executing program 5: r0 = request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='.dead\x00', 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$search(0xa, r1, &(0x7f00000000c0)='big_key\x00', &(0x7f0000000100)={'syz', 0x1}, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000140)='big_key\x00', &(0x7f0000000180)=@secondary) [ 1198.399115] audit: type=1326 audit(1768810939.704:372): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9374 comm="syz-executor.1" exe="/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fba7619eb19 code=0x0 08:22:19 executing program 2: ioctl$BTRFS_IOC_SPACE_INFO(0xffffffffffffffff, 0xc0109414, &(0x7f0000000980)={0x9fe, 0x6db, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 08:22:19 executing program 4: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r0, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)) 08:22:19 executing program 0: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0x40000) [ 1198.495891] FAULT_INJECTION: forcing a failure. [ 1198.495891] name failslab, interval 1, probability 0, space 0, times 0 [ 1198.496854] CPU: 0 UID: 0 PID: 9394 Comm: syz-executor.1 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 1198.496869] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1198.496877] Call Trace: [ 1198.496881] [ 1198.496887] dump_stack_lvl+0xfa/0x120 [ 1198.496908] should_fail_ex+0x4d7/0x5e0 [ 1198.496932] should_failslab+0xc2/0x120 [ 1198.496947] __kmalloc_node_track_caller_noprof+0xd7/0x840 [ 1198.496968] ? __kmalloc_cache_noprof+0x4ae/0x730 [ 1198.496985] ? v9fs_init_fs_context+0x135/0x5b0 [ 1198.497007] ? kstrdup+0x3e/0xc0 [ 1198.497022] kstrdup+0x3e/0xc0 [ 1198.497038] v9fs_init_fs_context+0x135/0x5b0 [ 1198.497055] alloc_fs_context+0x56d/0xb10 [ 1198.497073] path_mount+0xce2/0x2150 [ 1198.497088] ? kasan_quarantine_put+0x84/0x1e0 [ 1198.497102] ? __pfx_path_mount+0x10/0x10 [ 1198.497116] ? kmem_cache_free+0x2cd/0x670 [ 1198.497133] ? putname.part.0+0x85/0xe0 [ 1198.497148] ? strncpy_from_user+0x120/0x2f0 [ 1198.497167] ? putname.part.0+0x85/0xe0 [ 1198.497180] ? putname.part.0+0x85/0xe0 [ 1198.497196] __x64_sys_mount+0x293/0x310 [ 1198.497211] ? __pfx___x64_sys_mount+0x10/0x10 [ 1198.497225] ? irqentry_exit+0xee/0x650 [ 1198.497237] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1198.497258] do_syscall_64+0xbf/0x420 [ 1198.497273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1198.497286] RIP: 0033:0x7fba7619eb19 [ 1198.497296] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1198.497313] RSP: 002b:00007fba736f3188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1198.497324] RAX: ffffffffffffffda RBX: 00007fba762b2020 RCX: 00007fba7619eb19 [ 1198.497332] RDX: 0000000020000240 RSI: 0000000020000140 RDI: 0000000000000000 [ 1198.497340] RBP: 00007fba736f31d0 R08: 00000000200003c0 R09: 0000000000000000 [ 1198.497347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1198.497355] R13: 00007ffe1c7cb77f R14: 00007fba736f3300 R15: 0000000000022000 [ 1198.497372] 08:22:19 executing program 7: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)=0x0) epoll_create1(0x0) io_uring_setup(0x5fff, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x871, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, 0x0, 0xfffffffffffffffe, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2101, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0xa, 0x4, {0x0, r3}, 0x1, 0x2, 0x0, {0x0, r4, r5}}, 0x1f) close_range(r0, 0xffffffffffffffff, 0x0) 08:22:19 executing program 5: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r0, 0xa}) request_key(&(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, r0) 08:22:19 executing program 0: r0 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x5fff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x2000200a}) close_range(r0, 0xffffffffffffffff, 0x80000) 08:22:19 executing program 2: r0 = request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) r1 = request_key(&(0x7f0000000080)='id_legacy\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)='syz', r0) keyctl$search(0xa, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x2}, r1) [ 1199.190927] audit: type=1326 audit(1768810940.502:373): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9368 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff077a56b19 code=0x0 [ 1207.486237] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) BUG: memory leak unreferenced object 0xffff88800e697f00 (size 128): comm "syz-executor.1", pid 9394, jiffies 4295865101 hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace (crc e314c790): __kmalloc_cache_noprof+0x4a4/0x730 v9fs_init_fs_context+0x49/0x5b0 alloc_fs_context+0x56d/0xb10 path_mount+0xce2/0x2150 __x64_sys_mount+0x293/0x310 do_syscall_64+0xbf/0x420 entry_SYSCALL_64_after_hwframe+0x77/0x7f BUG: memory leak unreferenced object 0xffff88801dad9760 (size 8): comm "syz-executor.1", pid 9394, jiffies 4295865101 hex dump (first 8 bytes): 6e 6f 62 6f 64 79 00 ff nobody.. backtrace (crc 24a71c4e): __kmalloc_node_track_caller_noprof+0x4c1/0x840 kstrdup+0x3e/0xc0 v9fs_init_fs_context+0xf3/0x5b0 alloc_fs_context+0x56d/0xb10 path_mount+0xce2/0x2150 __x64_sys_mount+0x293/0x310 do_syscall_64+0xbf/0x420 entry_SYSCALL_64_after_hwframe+0x77/0x7f BUG: leak checking failed VM DIAGNOSIS: 08:22:34 Registers: info registers vcpu 0 RAX=000000000044f819 RBX=0000000000000000 RCX=ffffffff84cedb57 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff814d54a0 RBP=dffffc0000000000 RSP=ffffffff85c07e00 R8 =0000000000000001 R9 =ffffed100d9c63ea R10=ffff88806ce31f53 R11=0000000000000001 R12=ffffffff8666e850 R13=1ffffffff0b80fc7 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84cec55e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5342000 00000000 00000000 LDT=0000 fffffe3d00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffd6cd43130 CR3=000000001f8b6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=000000000000000041085f0000000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=00000000008e2c33 RBX=0000000000000001 RCX=ffffffff84cedb57 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff814d54a0 RBP=dffffc0000000000 RSP=ffff888009b2fe58 R8 =0000000000000001 R9 =ffffed100d9e63ea R10=ffff88806cf31f53 R11=0000000000000001 R12=ffffffff8666e850 R13=1ffff11001365fd2 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84cec55e RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5442000 00000000 00000000 LDT=0000 fffffe4f00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f01868b8260 CR3=000000001eeb2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=656a626f206465636e6572656665726e XMM02=2938323120657a697328203030663739 XMM03=3920646970202c22312e726f74756365 XMM04=30202020200a2e2e2e2e2e2e2e2e2e2e XMM05=20303020303020303020303020303020 XMM06=30203030203030202020200a3a297365 XMM07=75642078656820200a31303135363835 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000