last executing test programs: 93.087017ms ago: executing program 1 (id=2): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x109640, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0xa70d6000) (async) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000140)={0x6, 0x544f, 0x1}) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r2, 0x400, 0x0) (async) socket(0x3d, 0x0, 0xc) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}, 0x6}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) recvmmsg(r3, &(0x7f0000003000)=[{{0x0, 0x0, 0x0}, 0xfffffffa}], 0x1, 0x2b, 0x0) (async) setsockopt$inet6_int(r3, 0x29, 0x5, &(0x7f0000000040)=0xe7, 0x4) (async) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) (async) r4 = fcntl$dupfd(r1, 0x0, r1) (async) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) (async) r6 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_DEL(r6, 0x2, r5) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e40)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20004880}, 0x1) (async) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) (async) sendto$inet6(r1, &(0x7f0000001680)="b9ef8212ba17f604599f3722f428456aab0fb0d3c5b3d018585ea897898ca1e79823c19094fc06b997daacddd3d180c019eb6f161f9958d8d6fbf584389ead2c68b39d0b300b59d32b55a6e30d28c23883a5788366553ae9e2c1eb5203f2517b51e78014fd48a0e52748b1eae38841cac670d250b53474927b66c0ab92bcd654d1441dac91524adb3166ca60cf14a60f2797c9c176c1315d9a97f4a511da42387c8fd86f6adfddc6012da81e87837eade167f991b8fa67352a62d0baca8be64087360badd566cd1bc5e45f40571f3d44b1fac4fc5bbcc806cd05b42a39894aff60a3c3f84f105585b191110d51be1604cf9b5ec068c5e278222c31326b40f904b4644fd85c67b0ebe612f95a091b4b579df9cdbca6721aa73eb2f26cf2ab5f3eaefbfa13bcbd926a0bc499a0a7385795cd6ec661bb0e017a8371e131e7017ea391cc47b251b27973973076b7388d142449e980d7ece71fc7b1dfd85af078f4f227b8e7d0e455097381c346c43b32c415ec394a5bc5813b40e3a1f127443f0bf225225152a0f3ee9de0346daacccfec4168d6b75a6ae512465047d745d8e8596d6fc87cbddd81da947054645d89daadceca24b681a875c41a1a3888f64dd46198ce87b57b8819bcd23a5e5c05d62bf9b3f039276db26ec29f202921ed175d0c7cfac7315bc743eff2656881a4020e91b7aed33ff20f0a57ae782f0bb104edbe7400e7cab3d5da4b02b63f0be4fc1ffb71381905b68eeb7d2c7c6863235ab85797316818746bf96cea69980bb53bb5de6072d57a10e28123e015e5f1cbc469446b93f21099e9bea9d4b957396852fe868b1e43bc98ff92d6ce711532e5cb5fb5ce14cbfc3aeee2ec7866e902cd8236e3a002d78cac84b56e61d2295acf51dd1a5c39adcade57cb3ad31b907ec5f9c50024de943970ebf9ccc598d5b8a64879fc55f506e2e766c3b93e9bf72be46d9b20dd13e84be312176abd565ba6674fda55feb64a39b4ca495aec63cb236c7e8f9e2808a0d76ab0fdac3738fb09eec2ac80cbf70de6b8c0fd49f405eb8af001be6d3414c388a71cf8a18989590e927f44470d468643a9d1edd158db214d9334829b9fdbf97983ad3d10766487fad570e25f82a744c7db1c5c074310dca8bb4298fc0991f565733033ff39f01dc3443e86b43e0335cec9203706d47226f24289da6d1306f1b3785fcb37cb00ea8aa4a84c023bf06d1c18ffb07ebde06a6f3c0116b652c7e187a2ac098a2a2b5855f478e274919bfdeb486a161f7a266cca0208a872e7cb000f85ec5945bd44fcc166c7776992f125478a22656d63f50f8df0335c9e453f75ddcece858b6a1e73511c5d628e4896fbb830391b8beb809c1fe19913f0423700a6fe3505893d8d55f267ac8981c44a59f3785e9f9a8c6ba5a5d6beafeee8a2af68519dd3439a3cdd3062d85a2cddfc91806529f78d11deeeb7976c2c131232fd08eb1e9607eb9064179b67961b6a269175019c690f4ad4c18dd00169954fbcceb27a49dffc286d32c9c0194e14f6d0c3512cb71f2564a271c2c553d03d62124327ddd477e67f037dd7f730474f6dfbd1a48953aacded0b0ccf86c3a4bd3b54f624ab047dddfa25448ecaf458aee7bae055f39b19f3f3c3360e91a95642e667160dcdca8df7345f18378e6b4c1306dadb99f944962dff157d6514644e0387d6adbe461df933de7928f5584fe82ab2103bb0ccb0bafef1542041d3524002901f22a73ce5a87d5d15da6b71beb37029f002dffeca6fd8a4cd0c1beb2dadad605884c9df712a643362244bed50bb04e3ef8496ce145712df9167c29dfdf9373fc54874927d94b5e36d84550772c22ac95c6cb2d23579826bb6b3d1952a06be230bfefc25ff48a14745deb04f7d81348d5da287737793d30213f723ca7f868328b9596b6d2459a9afbeb103410a9ade84e955ecf9cba5cfc2a051110c7acce72b67745452c66321327405e23f692226657f1cd140070cc1eed7ceffd062f0623fdd205486279b52e310867b4c175e95451c35df2d05d061695b525ac069d85f19f78d54f8c47b612ee99f210d606689f3f5f2c6bdf79cb61449e865f66f053af29498dd5cd63be52949aa15b9b5c6d29d8d0b6a12520522a4c9e0dc7419319b3b290087cc57102d1ca18f72e263973f9e869f0fec44de8e5a42ef147f4aee004359cc5265549fc23053e28320ff8b41cd3a7d79aeae087f357f8d66ef1b620561ca036be7d8beb710c1a91b7d1eacca097cfe765ac499d50dedeab46ffe6c6ad63cc5f42546bb2d0fe04359fc24ab6380b93abf9465b16a879e7648706d1eac1182f2410b90d2915f26b8ec79a295360ebcdc76f1bbd5aef5f401d6e3a8fe72e33331961b2004342e20a08e181f76e632022e4c0ba64c00f555d24cce1d54c1a7884413b4a5eb5065e7324a8b08b8465aeb9c16a8a392696d3ab826e5b11da2dde9199dcb3bd597db58d7b2594e1dedf5d3ea8c7975ca2ea860583bbe10f8ad39b39ad9349f493a82bc016e48c02c377517c3f9cc62850f429a06a3d630661e154b44e62ce577bd07833748646875a1117f099903205291165194b6d560011c61f0e2ba5e562c669510ebfe25a38b8cf563a9013557b163841cdc95482acc0d238d46dee78429cc383139d8042a0350595bd394087c599abf77a2e057f55ceb28c82ecd3c281a95d80cf37dbb3397e7097d34c57684133e4813f74d177f61b9410cb902753a5d1df4d4a4515465dd8ccf86bba50eaff3064725446b0e9fa29fa08c6e9c706550fcbea658145769fbd9aafd753ede5a74adf0b6f93ec457efe4adcf3feedd0cc4c5de721cf88f07d88321fabb5aa5d7fcc36ea957a81449b05ccb152770b315c8ae3f2fdba5531da63eca6f93c8de0500b395d417c1d72120452f026cbcbe48c4b4f8e2bb14033db95914071102dec99c8b06efe82db76aa36735a95d666f3e057cdbc0664d6c9c339eaa6d5af40d6379d03075ed5f17573ec7b6f5eb75584584cd04148ebff8df6a6a93c39c3323c612830e2746b822f32a47a926ad38e9a83e8aeea1fac3e0e3372a26a642dd7c44a850146673e3981e38f9b20ce91c9d353b23fff12e756cc44a6a36408213c70e0f6a0ade881450c1d0b4c9957ae0ebc9dd03e78b7f4090b9022359db4b020222d0d89b34efc98175160c5b9d3e81cfb1ebd4d4a9a372e15a8efda18a4530aab2babab9e04900a18d7abcb65390d77aa90c2ae40f3870c88b30e35ffa6233170015be03127caac2a8de4dc70e83476dca55659bc81fa2ca90677b31cc19146050b131efb108a0c521df97432da5dc3db46077e4dea1417cd458993b1f35d6dc396daedd33fc255e64496d5244468f94579dfb8c31e4351f448fb4df7aeeb7d8de54c7680ab765ef5efe7fb5d7aac9199b8419064670ab2197943cc6b2bfb1583c3a55db8258d023e100981a0860a034a8ab3e600065998724aa2d5d5b0e1f734e98c040db8777a038d16ef87c1e6a97f0db479c43b68d3e541129109d2a835c44649c7a8a6bd736eca52bec88a8872b1db7a8e48fb2abfc185c1f8a8f62b506e2ef34e8ccf6bbf14213d0095a8cba6b08d0ae8e5e319d667e1a4a4272f89e866db05350287a460f6b2bd170cd97d39867fdd4655b26d313be81894b3c4d61a1e177461c9406e4fab974154a70bbf62025158fa40ba997a89ea40192ff874ab43a77ce213c86b68b2d3124af6390e9eca5e7acdeb8d8504204a213dce50c2595940a33d0a4f3bb57408abfb74b36ac009c924daa231fbaa3a9b81287c7da8992b5268b08ef732715c4ffc9e523182fef5eb8151641d0c56c5780aa0675fd6d04ad79dbb34e5f7cf0c5eb612248d16664f81c9dd4cf9a7f570aa3643195b04130aa73ea6fe2fcd980699bba50bdd6132c9bcf523e754d4bbb6d17cbd12e6525ccd36dcc0f58724ac935120e2c74ab00ea4106ef261641637f3cac4a108b6d54c87a73da8d1772825e3633e4dfbc52e468647098dfd0690a00128e84acbbd09af5683f98095525a74829cbdd268abd1c138db64cefbf06e83e89b716a08fa166a9dadfcf70ed0c4a25225a5b5422d601f4c0655cdd59ac4e42bc11911e1196a7e90163eabe5a639bf8205269225f2d79efeafaa5fbf047bd4cbebbbb8bd05f97fdb1cd81ffb3c4e4db8241fb3f2ca4173df32d0b69aa30effb6e5d3ae91bfaf5695d0d954912662f2ab6c4d2ee4c0591c4a2a9060c97847fc07f7acbdb1100a945b9c084a88c348add558a593cdb5ec9dcb5c37a30e08e1d7014a5616d106f2e4f66f0aad59745712dbb0632d432ce99cd7711cecc74f1f96e74636f6a3a931f4e830246caad8ee19c50aaa4c72ff60544a4c20f1e44a4b1d6706043810a40ae29cc01eb224ba8a0f7a53d7a0c5543fbb7ad112427bb0022c0a549566c883fc4fe03c19e18e67bf82a5259c0702d4a0c6e79896e2da28b72c9406c9dcd4dc15d6fa514b68558a0bbb96d8d815eb6e42f0fe6d5c946e42d77597aa99da66fc1cf5b6731163a01d44177c1d4062b46c780bc1241728da94b6c838084d3fac7775952b5c14e47ef61bc1d2d920d9d7904e69a5109eb4e2162a933cccaa0b8fb729a26cfd57aaa0053dbc04a3e311611bd0046d7076ba8c746d834956811201664f17f0340cc69a407a3e26fdd8b84863f5f8d087c06eca65cb2c8ad650ca8d2a0d3474753c51c2cf1e2bf5ad585b83ca1f8176b20d715652ce5ec3fb5dc3a777126afb88e32f21b1d241b712bb001571d6c4af81f3f606f96630d0f700fa8727a0fcf257a207d9905c957d2b476ca18882a0505f2e8b5594afa34d79c694cde811387e15416869f24eaa9fd244c5a1f3129c1e03df386ef62a1ce47f13a3c2f50da984e7ede1e6c8c76a12457cf27648bd55c12b321d640ea13cb2ed77495cdad715a9ce1b15f9af4708fdedbd8f6d1c96c19b7119fa8f33ea3782ebeb11e3420ede7fd3bc745b2bd5bc98536ec00e57562852175d06af1bda0997b05ca0276a8bbb21459071e6dab225a7691a83ec52ea2e4ac0fa9779a94031140a9c7a77e7ba8bc9a9ec51953d586698c805459ad636575f04d605da0acb1613926b097b9e6e7b2d8f0c8634af00a3b7698f2b798404ddb7233bf1280398d38c1d399c071866dd33aa2f5d6a6e0c41e14414542770b4887e1f347946e93743eba421eb15e37d7ad084bbd95433be64bdf7c639842e3c5b749f1735b2b51fb5a0941a6579ace5af5c2cb5f3e2e8f59460bc1fe8f802b0788a973a59a1f8e4d1bea7ac35867288ad81eb1cb085139146624ef48a1e0d91bebe40a0f53eb0dbeb1fc7ba826b72f38112e6d97f849aff81005af1d6703632fd4bdc782ac732916d57322dd5cc2b5d1c9b738afd23f3334616d813111c9f665cdf486e6b069d92fa2de498c6fb61e8057a6fa5699d856b130a44d4740ab6415f9c585ede77cfc0853332c3850cc478a344b6bf860b17b6cfca06a3cc254ba2cbfba43998faa2225a0a388b9081c8abf511b3f9c6319241cfd164c581f00d014754f418e9b3359a8718421e917e24a5390dba71073855152cf1340fb5b53564f43cedf6123c228282501bbb6db0969927d457ce38f784f6c6d85ba43fe7407185315022cced5929d69b71b69710a8ffa2c02caf03fa0e9e520d06145dce0922e8fcb066625524c6eec028d3c2622f361fd3ffb91af78d5b6bbd648d5c857e0f1184e22f3865aea7d3f023fec4cb7ddfb7e529ce6ef39eaca3b2c434a41e89711e37dd80ff0bc52fe6338e117fe", 0x1000, 0x800, 0x0, 0x0) (async) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r7, &(0x7f0000002080)={0x1f, 0x5, @any, 0x0, 0x2}, 0xe) (async) setsockopt$bt_BT_DEFER_SETUP(r7, 0x112, 0xf, &(0x7f0000000080), 0xa6) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000040)={&(0x7f00001ec000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/220, 0xdc, 0x1, 0x0}, &(0x7f00000001c0)=0x40) (async) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000267000/0x400000)=nil) fadvise64(r0, 0x2, 0x4, 0x2) (async) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x35) ioctl$KVM_CAP_VM_MOVE_ENC_CONTEXT_FROM(r8, 0x4068aea3, &(0x7f0000000040)={0xce, 0x0, r8}) 40.569029ms ago: executing program 1 (id=5): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="280000002a0003"], 0x28}], 0x1, 0x0, 0x0, 0x20001}, 0x14008850) r2 = syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) mkdir(&(0x7f00000003c0)='./file0\x00', 0x25) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x82, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) openat$incfs(r4, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r3, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r6}, 0x80, 0x0}}], 0x1, 0x0) 20.969489ms ago: executing program 3 (id=4): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='msdos\x00', 0x808081, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xd7, 0x56a, 0xc6, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xfb, 0x40, 0x7}}]}}, 0x0) fcntl$setlease(r0, 0x400, 0x2) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)={@broadcast, @dev, 0x0}, &(0x7f0000000200)=0xc) recvfrom(r0, &(0x7f0000000100)=""/139, 0x8b, 0x10000, &(0x7f0000000240)=@ll={0x11, 0x7, r1, 0x1, 0x9, 0x6, @local}, 0x80) 11.208029ms ago: executing program 2 (id=3): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) epoll_create(0x8) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800}, 0x20) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = eventfd2(0x9, 0x801) write$eventfd(r3, &(0x7f00000000c0)=0x2, 0x8) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000740)={{r3}, 0x0, 0x8, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="00000000000000000300000000000000ffffffffffffffff64e4e9f69c14392310000000000000000a00000000000000d49000000000000004000000000000000100000000000000020000000000000000080000000000008100000000000000"]}, @subvolid=0x9}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) bind$xdp(r1, &(0x7f00000003c0)={0x2c, 0x0, r4, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r1, 0x80000000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x24}}, 0x0) sendmsg$xdp(r1, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x40) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e00, 0x0, @mcast1, 0xffffff34}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r6, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="2400000022000106"], 0x24}], 0x1}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000006c0), 0xffffffffffffffff) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)=ANY=[@ANYBLOB="8100795b89aa127faf043db6eea607acaf96d7af000bcf7f52cebf5109e09a3e2ba3e80842d1a4b18efd798b1fbf1604", @ANYRES16=r7, @ANYBLOB="010027bd7000fcdbdf251b000000"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000080) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff) ioperm(0x3, 0x7, 0x7) 0s ago: executing program 0 (id=1): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000001200)=0xd0, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x2, 0x101}]}, 0x10) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) ftruncate(r1, 0x80000000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r2, 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.165' (ED25519) to the list of known hosts. [ 22.333247][ T36] audit: type=1400 audit(1787689626.490:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.337196][ T286] cgroup: Unknown subsys name 'net' [ 22.356031][ T36] audit: type=1400 audit(1787689626.490:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.383314][ T36] audit: type=1400 audit(1787689626.520:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.383918][ T286] cgroup: Unknown subsys name 'devices' [ 22.507468][ T286] cgroup: Unknown subsys name 'hugetlb' [ 22.513129][ T286] cgroup: Unknown subsys name 'rlimit' [ 22.608637][ T36] audit: type=1400 audit(1787689626.770:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.631873][ T36] audit: type=1400 audit(1787689626.770:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.656665][ T36] audit: type=1400 audit(1787689626.770:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.681178][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 22.690109][ T36] audit: type=1400 audit(1787689626.850:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.715587][ T36] audit: type=1400 audit(1787689626.850:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.739829][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.741764][ T36] audit: type=1400 audit(1787689626.890:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.775492][ T36] audit: type=1400 audit(1787689626.890:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.582342][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.589503][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.596699][ T293] bridge_slave_0: entered allmulticast mode [ 23.603065][ T293] bridge_slave_0: entered promiscuous mode [ 23.610794][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.617898][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.625022][ T293] bridge_slave_1: entered allmulticast mode [ 23.631366][ T293] bridge_slave_1: entered promiscuous mode [ 23.740330][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.747511][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.754599][ T296] bridge_slave_0: entered allmulticast mode [ 23.761059][ T296] bridge_slave_0: entered promiscuous mode [ 23.769055][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.776182][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.783330][ T296] bridge_slave_1: entered allmulticast mode [ 23.789724][ T296] bridge_slave_1: entered promiscuous mode [ 23.801931][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.809572][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.816685][ T294] bridge_slave_0: entered allmulticast mode [ 23.822925][ T294] bridge_slave_0: entered promiscuous mode [ 23.829644][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.836738][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.843868][ T294] bridge_slave_1: entered allmulticast mode [ 23.850453][ T294] bridge_slave_1: entered promiscuous mode [ 23.882665][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.889784][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.896944][ T295] bridge_slave_0: entered allmulticast mode [ 23.903275][ T295] bridge_slave_0: entered promiscuous mode [ 23.912636][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.919764][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.926917][ T295] bridge_slave_1: entered allmulticast mode [ 23.933259][ T295] bridge_slave_1: entered promiscuous mode [ 24.000118][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.007337][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.014707][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.021797][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.112375][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.119511][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.126923][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.133977][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.145822][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.153331][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.161251][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.168558][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.188627][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.195750][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.207682][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.214772][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.267996][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.275099][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.289414][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.296537][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.304284][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.311417][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.320906][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.328019][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.360894][ T293] veth0_vlan: entered promiscuous mode [ 24.378335][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.385495][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.393160][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.400247][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.429742][ T295] veth0_vlan: entered promiscuous mode [ 24.437696][ T293] veth1_macvtap: entered promiscuous mode [ 24.466261][ T296] veth0_vlan: entered promiscuous mode [ 24.478626][ T294] veth0_vlan: entered promiscuous mode [ 24.494618][ T295] veth1_macvtap: entered promiscuous mode [ 24.509849][ T293] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 24.529827][ T296] veth1_macvtap: entered promiscuous mode [ 24.553719][ T294] veth1_macvtap: entered promiscuous mode [ 24.645069][ T325] ------------[ cut here ]------------ [ 24.650637][ T325] WARNING: CPU: 0 PID: 325 at include/linux/skbuff.h:2824 ip6gre_tunnel_xmit+0x1096/0x1440 [ 24.660742][ T325] Modules linked in: [ 24.664687][ T325] CPU: 0 UID: 0 PID: 325 Comm: syz.2.3 Not tainted syzkaller #0 2456bfd0916d80188827445f664284f1a044436b [ 24.675960][ T325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 24.686104][ T325] RIP: 0010:ip6gre_tunnel_xmit+0x1096/0x1440 [ 24.692159][ T325] Code: 56 01 00 e9 91 fc ff ff e8 77 cf 78 fc e9 87 fc ff ff e8 6d cf 78 fc 48 8b 44 24 08 c6 40 3a f8 e9 e8 f6 ff ff e8 5a cf 78 fc <0f> 0b e9 39 f1 ff ff 89 df 44 89 ee e8 09 d1 78 fc 44 39 eb 0f 87 [ 24.711866][ T325] RSP: 0018:ffffc9000b85f4e0 EFLAGS: 00010287 [ 24.718061][ T325] RAX: ffffffff850ea266 RBX: 00000000ffffffc0 RCX: 0000000000080000 [ 24.726111][ T325] RDX: ffffc90002a66000 RSI: 0000000000000073 RDI: 0000000000000074 [ 24.734133][ T325] RBP: ffffc9000b85f7a0 R08: ffff88810bf15f00 R09: 0000000000000002 [ 24.742193][ T325] R10: 0000000000000000 R11: ffffffff850e91d0 R12: dffffc0000000000 [ 24.750434][ T325] R13: ffff888110366780 R14: 0000000000000000 R15: ffff888110366868 [ 24.758491][ T325] FS: 00007faf4b9e36c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 24.767500][ T325] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 24.774132][ T325] CR2: 00007faf4cf88f40 CR3: 000000010efe6000 CR4: 00000000003526b0 [ 24.782194][ T325] Call Trace: [ 24.785549][ T325] [ 24.788523][ T325] ? __cfi_skb_network_protocol+0x10/0x10 [ 24.794309][ T325] ? __build_skb_around+0x2a4/0x590 [ 24.799588][ T325] ? __cfi_ip6gre_tunnel_xmit+0x10/0x10 [ 24.805228][ T325] ? netif_skb_features+0x992/0x1690 [ 24.810563][ T325] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 24.816724][ T325] ? __cfi_netif_skb_features+0x10/0x10 [ 24.822324][ T325] ? skb_set_owner_w+0x280/0x3d0 [ 24.827349][ T325] ? sock_alloc_send_pskb+0x8a1/0x9a0 [ 24.832803][ T325] ? validate_xmit_skb+0x8a8/0xe40 [ 24.838010][ T325] ? validate_xmit_skb_list+0x130/0x130 [ 24.843611][ T325] ? __asan_memcpy+0x5a/0x80 [ 24.848291][ T325] __dev_direct_xmit+0x395/0x5a0 [ 24.853289][ T325] ? __dev_direct_xmit+0x266/0x5a0 [ 24.858499][ T325] xsk_generic_xmit+0x1bef/0x3060 [ 24.863611][ T325] ? __cfi_selinux_socket_sendmsg+0x10/0x10 [ 24.869615][ T325] ? xsk_lookup_xsk_from_fd+0x190/0x190 [ 24.875297][ T325] ? __futex_queue+0x19f/0x350 [ 24.880132][ T325] xsk_sendmsg+0x532/0x8a0 [ 24.884602][ T325] ? security_socket_sendmsg+0x3d/0x100 [ 24.890215][ T325] ____sys_sendmsg+0x9a1/0xa00 [ 24.895034][ T325] ? __import_iovec+0x3fa/0x7d0 [ 24.899943][ T325] ? __sys_sendmsg_sock+0x50/0x50 [ 24.905057][ T325] ? import_iovec+0x80/0xb0 [ 24.909631][ T325] ___sys_sendmsg+0x2a6/0x370 [ 24.914362][ T325] ? __sys_sendmsg+0x2a0/0x2a0 [ 24.919236][ T325] ? __cfi_futex_wait+0x10/0x10 [ 24.924144][ T325] ? __fget_files+0x2bc/0x330 [ 24.925370][ T319] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 24.928994][ T325] __x64_sys_sendmsg+0x206/0x2e0 [ 24.941436][ T325] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 24.946980][ T325] ? __kasan_check_write+0x18/0x20 [ 24.952147][ T325] ? fpregs_restore_userregs+0x11c/0x260 [ 24.957870][ T325] ? switch_fpu_return+0x12/0x20 [ 24.962884][ T325] x64_sys_call+0x2a4c/0x2ee0 [ 24.967692][ T325] do_syscall_64+0x57/0xf0 [ 24.972180][ T325] ? clear_bhb_loop+0x50/0xa0 [ 24.976950][ T325] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 24.982917][ T325] RIP: 0033:0x7faf4cf9e0d9 [ 24.987418][ T325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 25.007112][ T325] RSP: 002b:00007faf4b9e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 25.015795][ T325] RAX: ffffffffffffffda RBX: 00007faf4d225fa0 RCX: 00007faf4cf9e0d9 [ 25.023853][ T325] RDX: 0000000000000040 RSI: 0000200000000700 RDI: 0000000000000003 [ 25.031916][ T325] RBP: 00007faf4d035024 R08: 0000000000000000 R09: 0000000000000000 [ 25.040086][ T325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 25.048134][ T325] R13: 00007faf4d226038 R14: 00007faf4d225fa0 R15: 00007ffe93ad2f18 [ 25.056190][ T325] [ 25.059256][ T325] ---[ end trace 0000000000000000 ]--- [ 25.096255][ T319] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.110353][ T319] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 25.119989][ T319] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.133279][ T319] usb 2-1: config 0 descriptor?? [ 25.340578][ T321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5'. [ 25.350290][ T321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 25.361430][ T321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 25.378024][ T319] usbhid 2-1:0.0: can't add hid device: -71 [ 25.384237][ T319] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 25.399447][ T319] usb 2-1: USB disconnect, device number 2